@decantr/cli 2.10.0 → 2.12.0

package/README.md

@@ -20,7 +20,7 @@ npx @decantr/cli new my-app --blueprint=esports-hq
 Use `decantr setup` when you are unsure which path applies. It detects whether the repo is empty, already attached, or a Brownfield app and recommends the right entry path.
 Use `decantr new` for a greenfield workspace in a fresh directory. With a blueprint/archetype it uses the runnable adapter and Decantr CSS; without registry content it creates a contract-only workspace unless you explicitly pass `--adoption=decantr-css`.
 Use `decantr adopt` when you already have an app and want Decantr governance without adopting a blueprint. Brownfield attach is proposal-driven: Decantr inventories the app, writes an observed essence proposal, hydrates hosted execution packs when online, and only applies the contract when you explicitly accept or merge it.
-Use `decantr doctor` when the next step is unclear, `decantr task` before asking an LLM to modify a route, `decantr verify` after the edit, and `decantr ci` in required automation. Use `decantr codify --from-audit` when you want project-owned UI patterns and local rules such as button/card/shell/theme standards to appear in future task context and verification. Once accepted, that local law is the first Hybrid lane: the app still owns source and styling, but Decantr treats accepted local patterns and rules as project authority.
+Use `decantr doctor` when the next step is unclear, `decantr task` before asking an LLM to modify a route, `decantr verify` after the edit, and `decantr ci` in required automation. Use `decantr codify --from-audit --style-bridge` when you want project-owned UI patterns, local rules, and token/class bridge mappings such as button/card/shell/theme standards to appear in future task context and verification. Once accepted, that local law is the first Hybrid lane: the app still owns source and styling, but Decantr treats accepted local patterns, rules, and style bridge mappings as project authority.
 In monorepos, app-scoped commands accept `--project <app-path>`. `setup` shows attach guidance before adoption and the day-two loop after adoption. Hosted pack hydration also follows the essence path: `decantr registry compile-packs apps/web/decantr.essence.json --write-context` writes into `apps/web/.decantr/context`. In contract-only/offline Brownfield, deferred hosted packs are optional context unless a present manifest references missing files.
 Use `decantr init`, `decantr analyze`, `decantr check`, and `decantr health` as advanced primitives when you need direct control over one step.
 
@@ -45,7 +45,7 @@ decantr adopt --yes
 decantr doctor
 decantr ci --fail-on error
 decantr ci init
-decantr codify --from-audit
+decantr codify --from-audit --style-bridge
 decantr codify --accept
 decantr task /feed "add saved recipe actions"
 decantr verify --brownfield --local-patterns
@@ -75,12 +75,13 @@ pnpm exec decantr setup
 pnpm exec decantr workspace list
 pnpm exec decantr adopt --project apps/web --yes
 pnpm exec decantr doctor --project apps/web
+pnpm exec decantr codify --from-audit --style-bridge --project apps/web
 pnpm exec decantr ci init --project apps/web
 ```
 
 Assistant rule integration is preview-first: `--assistant-bridge=preview` writes `.decantr/context/assistant-bridge.md`, `decantr rules preview` prints the bridge, and `--assistant-bridge=apply` or `decantr rules apply` mutates supported rule files with idempotent marked blocks.
 
-Brownfield analysis also writes `.decantr/doctrine-map.json`, a ranked source-precedence map across security/data, architecture, design-system, workflow/CI, feature/business, assistant-specific, stale, and unsafe-to-cite evidence. It also writes `.decantr/brownfield-intelligence.json`, `.decantr/theme-inventory.json`, and `.decantr/enrichment-backlog.md`. The proposal groups routes into observed semantic domains such as auth, RBAC, billing, reporting, facilities, settings, and public surfaces across Next App/Pages Router, React Router, Angular Router, SvelteKit, Vue Router, and Nuxt file routes. Existing styling systems such as Tailwind, Bootstrap, MUI, Chakra, plain CSS, and Decantr CSS are observed as evidence instead of replaced. Theme variants are observed in the theme inventory without changing Essence V4. `decantr codify --from-audit` proposes `.decantr/local-patterns.proposal.json` and `.decantr/rules.proposal.json` with Hybrid authority guidance; after review, `decantr codify --accept` promotes `.decantr/local-patterns.json` and `.decantr/rules.json`. `decantr doctor` reports whether the app is contract-only, Hybrid local law, style bridge, Decantr CSS, or Hybrid composition. `decantr task` prints that authority block and warns before mixing runtimes or adding Decantr CSS to a non-Decantr-CSS app. `decantr verify --brownfield --local-patterns` uses the Brownfield guard layer plus accepted local law to flag actionable missing doctrine coverage, unsafe context, missing assistant bridges, style drift, raw local-rule violations, and unsafe defaults without treating current database migrations as stale docs.
+Brownfield analysis also writes `.decantr/doctrine-map.json`, a ranked source-precedence map across security/data, architecture, design-system, workflow/CI, feature/business, assistant-specific, stale, and unsafe-to-cite evidence. It also writes `.decantr/brownfield-intelligence.json`, `.decantr/theme-inventory.json`, and `.decantr/enrichment-backlog.md`. The proposal groups routes into observed semantic domains such as auth, RBAC, billing, reporting, facilities, settings, and public surfaces across Next App/Pages Router, React Router, Angular Router, SvelteKit, Vue Router, and Nuxt file routes. Existing styling systems such as Tailwind, Bootstrap, MUI, Chakra, plain CSS, and Decantr CSS are observed as evidence instead of replaced. Theme variants are observed in the theme inventory without changing Essence V4. `decantr codify --from-audit` proposes `.decantr/local-patterns.proposal.json` and `.decantr/rules.proposal.json` with Hybrid authority guidance and source-derived button/card class hints; `decantr codify --style-bridge` proposes `.decantr/style-bridge.proposal.json`, mapping Decantr intent to project-owned tokens/classes without requiring `@decantr/css`. After review, `decantr codify --accept` promotes whichever proposals exist. `decantr doctor` reports whether the app is contract-only, Hybrid local law, style bridge, Decantr CSS, or Hybrid composition. `decantr task` prints that authority block and warns before mixing runtimes or adding Decantr CSS to a non-Decantr-CSS app. `decantr suggest --from-code` surfaces accepted local patterns and style bridge mappings from the app root or selected `--project`, and `decantr ci` prints accepted local-rule findings plus style bridge status in text, markdown, and JSON reports. `decantr verify --brownfield --local-patterns` uses the Brownfield guard layer plus accepted local law to flag actionable missing doctrine coverage, unsafe context, missing assistant bridges, style drift, raw local-rule violations, and unsafe defaults without treating current database migrations as stale docs.
 
 ## What It Does
 
@@ -111,12 +112,13 @@ decantr adopt --yes
 decantr adopt --project apps/web --yes
 decantr doctor
 decantr doctor --project apps/web
-decantr codify --from-audit
+decantr codify --from-audit --style-bridge
 decantr codify --accept
 decantr task /feed "add saved recipe actions"
 decantr verify --brownfield --local-patterns
 decantr verify --base-url http://localhost:3000 --evidence
 decantr ci --project apps/web
+decantr ci --project apps/web --fail-on warn
 decantr ci --workspace --changed --since origin/main
 decantr ci init --project apps/web
 decantr init --existing --blueprint=esports-hq

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./chunk-HQUTNZKF.js";
+import "./chunk-SWPAAAO4.js";
 import "./chunk-IQZCIMQJ.js";
-import "./chunk-QDMXZSVK.js";
-import "./chunk-WPP3JEMC.js";
-import "./chunk-4SZ4SEKT.js";
+import "./chunk-F6SWDGKO.js";
+import "./chunk-PHRVC575.js";
+import "./chunk-CAKQWTZS.js";

package/dist/{chunk-4SZ4SEKT.js → chunk-CAKQWTZS.js}

@@ -660,8 +660,8 @@ function scanRoutes(projectRoot) {
 }
 
 // src/analyzers/styling.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync3, readdirSync as readdirSync3, readFileSync as readFileSync3, statSync as statSync3 } from "fs";
+import { join as join3, relative as relative3 } from "path";
 var TAILWIND_CONFIGS = [
   "tailwind.config.js",
   "tailwind.config.ts",
@@ -674,8 +674,10 @@ var GLOBALS_CSS_PATHS = [
   "src/styles/global.css",
   "src/styles/globals.css",
   "src/styles/main.css",
+  "src/styles/themes.css",
   "src/styles.css",
   "styles/globals.css",
+  "styles/themes.css",
   "styles.css",
   "assets/css/main.css",
   "src/index.css",
@@ -716,8 +718,15 @@ function extractCSSVariables(content) {
   return { colors, variables };
 }
 function detectDarkMode(projectRoot, cssContents) {
+  const darkSelectors = [
+    /\.dark\b/i,
+    /html\.dark\b/i,
+    /\[data-theme\s*=\s*["']dark["']\]/i,
+    /prefers-color-scheme\s*:\s*dark/i,
+    /color-scheme\s*:\s*dark/i
+  ];
   for (const cssContent of cssContents) {
-    if (cssContent.includes(".dark") || cssContent.includes('[data-theme="dark"]') || cssContent.includes("prefers-color-scheme: dark") || cssContent.includes("color-scheme: dark")) {
+    if (darkSelectors.some((selector) => selector.test(cssContent))) {
       return true;
     }
   }
@@ -763,6 +772,46 @@ function detectDarkMode(projectRoot, cssContents) {
   }
   return false;
 }
+function collectCssFiles(projectRoot) {
+  const seen = /* @__PURE__ */ new Set();
+  const ordered = [];
+  const add = (path) => {
+    if (seen.has(path)) return;
+    if (!existsSync3(join3(projectRoot, path))) return;
+    seen.add(path);
+    ordered.push(path);
+  };
+  for (const rel of GLOBALS_CSS_PATHS) add(rel);
+  for (const rel of DECANTR_STYLE_PATHS) add(rel);
+  const roots = ["src/styles", "styles", "assets/css", "src/app", "app"];
+  const visit = (dir) => {
+    const absolute = join3(projectRoot, dir);
+    if (!existsSync3(absolute)) return;
+    let entries;
+    try {
+      entries = readdirSync3(absolute);
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const child = join3(absolute, entry);
+      let stat;
+      try {
+        stat = statSync3(child);
+      } catch {
+        continue;
+      }
+      if (stat.isDirectory()) {
+        if (entry === "node_modules" || entry === ".next" || entry === "dist") continue;
+        visit(relative3(projectRoot, child).replace(/\\/g, "/"));
+      } else if (stat.isFile() && /\.css$/i.test(entry)) {
+        add(relative3(projectRoot, child).replace(/\\/g, "/"));
+      }
+    }
+  };
+  for (const root of roots) visit(root);
+  return ordered.slice(0, 80);
+}
 function scanStyling(projectRoot) {
   let approach = "unknown";
   let configFile;
@@ -811,23 +860,12 @@ function scanStyling(projectRoot) {
     configFile = decantrStyleFiles.join(" + ");
   }
   const cssContents = [];
-  for (const rel of GLOBALS_CSS_PATHS) {
+  const cssFiles = collectCssFiles(projectRoot);
+  for (const rel of cssFiles) {
     const fullPath = join3(projectRoot, rel);
-    if (existsSync3(fullPath)) {
-      try {
-        cssContents.push(readFileSync3(fullPath, "utf-8"));
-      } catch {
-      }
-    }
-  }
-  for (const rel of DECANTR_STYLE_PATHS) {
-    if (GLOBALS_CSS_PATHS.includes(rel)) continue;
-    const fullPath = join3(projectRoot, rel);
-    if (existsSync3(fullPath)) {
-      try {
-        cssContents.push(readFileSync3(fullPath, "utf-8"));
-      } catch {
-      }
+    try {
+      cssContents.push(readFileSync3(fullPath, "utf-8"));
+    } catch {
     }
   }
   let colors = {};
@@ -841,7 +879,7 @@ function scanStyling(projectRoot) {
   const darkMode = detectDarkMode(projectRoot, cssContents);
   if (approach === "unknown" && cssContents.length > 0) {
     approach = "css";
-    configFile = GLOBALS_CSS_PATHS.find((rel) => existsSync3(join3(projectRoot, rel)));
+    configFile = cssFiles[0];
   }
   return {
     approach,
@@ -1206,11 +1244,11 @@ function scanBrownfieldIssues(projectRoot, essence) {
 }
 
 // src/guard-context.ts
-import { existsSync as existsSync7, readdirSync as readdirSync4, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync7, readdirSync as readdirSync5, readFileSync as readFileSync7 } from "fs";
 import { join as join7 } from "path";
 
 // src/bundled-content.ts
-import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync6, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "fs";
 import { dirname, join as join6 } from "path";
 import { fileURLToPath } from "url";
 function bundledDirCandidates(contentType) {
@@ -1244,7 +1282,7 @@ function loadBundledContentList(contentType) {
   for (const dir of bundledDirCandidates(contentType)) {
     if (!existsSync6(dir)) continue;
     try {
-      for (const file of readdirSync3(dir).filter((name) => name.endsWith(".json"))) {
+      for (const file of readdirSync4(dir).filter((name) => name.endsWith(".json"))) {
         const id = file.replace(/\.json$/, "");
         if (seen.has(id)) continue;
         const path = join6(dir, file);
@@ -1262,7 +1300,7 @@ function loadBundledContentList(contentType) {
 function loadJsonEntries(dir) {
   if (!existsSync7(dir)) return [];
   try {
-    return readdirSync4(dir).filter((file) => file.endsWith(".json") && file !== "index.json").map((file) => JSON.parse(readFileSync7(join7(dir, file), "utf-8")));
+    return readdirSync5(dir).filter((file) => file.endsWith(".json") && file !== "index.json").map((file) => JSON.parse(readFileSync7(join7(dir, file), "utf-8")));
   } catch {
     return [];
   }
@@ -1307,8 +1345,8 @@ function buildGuardRegistryContext(projectRoot = process.cwd()) {
 }
 
 // src/lib/scan-interactions.ts
-import { existsSync as existsSync8, readdirSync as readdirSync5, readFileSync as readFileSync8, statSync as statSync3 } from "fs";
-import { extname as extname2, join as join8, relative as relative3 } from "path";
+import { existsSync as existsSync8, readdirSync as readdirSync6, readFileSync as readFileSync8, statSync as statSync4 } from "fs";
+import { extname as extname2, join as join8, relative as relative4 } from "path";
 import { verifyInteractionsInSource } from "@decantr/verifier";
 var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".jsx", ".ts", ".js", ".html", ".mdx"]);
 var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
@@ -1344,7 +1382,7 @@ function walkSourceTree(rootDir) {
   function walk2(dir) {
     let entries;
     try {
-      entries = readdirSync5(dir);
+      entries = readdirSync6(dir);
     } catch {
       return;
     }
@@ -1353,11 +1391,11 @@ function walkSourceTree(rootDir) {
       const fullPath = join8(dir, entry);
       let s;
       try {
-        s = statSync3(fullPath);
+        s = statSync4(fullPath);
       } catch {
         continue;
       }
-      const relativePath = relative3(rootDir, fullPath) || entry;
+      const relativePath = relative4(rootDir, fullPath) || entry;
       if (s.isDirectory()) {
         walk2(fullPath);
       } else if (s.isFile() && SCAN_EXTENSIONS.has(extname2(entry))) {

package/dist/{chunk-QDMXZSVK.js → chunk-F6SWDGKO.js}

@@ -1,7 +1,7 @@
 import {
   createProjectHealthReport,
   listWorkspaceAppCandidates
-} from "./chunk-WPP3JEMC.js";
+} from "./chunk-PHRVC575.js";
 
 // src/commands/workspace.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-WPP3JEMC.js → chunk-PHRVC575.js}

@@ -3,7 +3,7 @@ import {
   sendProjectHealthCiFailedTelemetry,
   sendProjectHealthPromptTelemetry,
   sendProjectHealthReportTelemetry
-} from "./chunk-4SZ4SEKT.js";
+} from "./chunk-CAKQWTZS.js";
 
 // src/commands/health.ts
 import { execFileSync } from "child_process";
@@ -330,10 +330,11 @@ function normalizeHealthCategory(category, source) {
   return category;
 }
 function contractAssertionApplies(assertion, metadata) {
-  if (assertion.rule === "tokens-file-present" && metadata.adoptionMode === "contract-only") {
+  const projectOwnedStyling = metadata.adoptionMode === "contract-only" || metadata.adoptionMode === "style-bridge";
+  if (assertion.rule === "tokens-file-present" && projectOwnedStyling) {
     return false;
   }
-  if (metadata.adoptionMode === "contract-only" && (assertion.rule === "pack-manifest-present" || assertion.rule === "review-pack-present")) {
+  if (projectOwnedStyling && (assertion.rule === "pack-manifest-present" || assertion.rule === "review-pack-present")) {
     return false;
   }
   return true;
@@ -713,7 +714,7 @@ async function collectBrowserVerification(projectRoot, options, declaredRoutes)
       message: "Browser verification was requested, but Playwright is not installed in this project.",
       evidence: ["Expected dependency: playwright or @playwright/test"],
       rule: "browser-playwright-missing",
-      suggestedFix: "Install Playwright in the project or rerun without `--browser` for static-only evidence.",
+      suggestedFix: "Install Playwright in the project or omit browser/base-url evidence for static-only health checks.",
       baseId: "playwright-missing"
     });
     return {
@@ -1404,7 +1405,7 @@ async function cmdHealth(projectRoot = process.cwd(), options = {}) {
         const reason = evidenceBundle.browser.findings[0] ?? "Playwright is not available to Decantr in this project.";
         console.log(`${YELLOW}Browser evidence unavailable:${RESET} ${reason}`);
         console.log(
-          `${DIM}Static evidence was still written. Install Playwright or rerun without --browser if screenshots are not needed.${RESET}`
+          `${DIM}Static evidence was still written. Install Playwright or omit --browser/--base-url evidence if screenshots are not needed.${RESET}`
         );
       }
     }