@deneb-ui/cli 2.0.93 → 2.0.95

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deneb-ui/cli",
-  "version": "2.0.93",
+  "version": "2.0.95",
   "description": "Official DENEB CLI — scaffold, convert, validate, and package Fivora-ready storefront templates.",
   "bin": {
     "deneb": "bin/index.js",
@@ -49,7 +49,7 @@
   "license": "MIT",
   "dependencies": {
     "@babel/parser": "^7.28.0",
-    "@deneb-ui/core": "^2.0.93",
+    "@deneb-ui/core": "^2.0.95",
     "@octokit/rest": "^22.0.1",
     "adm-zip": "^0.6.0",
     "dotenv": "^17.4.2",

package/src/arc/__tests__/arc.test.cjs

@@ -32,7 +32,9 @@ test('DENEB preflight rejects a Next router destination with a duplicated base p
   fs.mkdirSync(componentDir, { recursive: true });
   fs.writeFileSync(
     path.join(componentDir, 'BrokenNavigation.tsx'),
-    "router.push(withBasePath(pageRoute('about')));\n"
+    "import { useRouter as useStorefrontRouter } from 'next/navigation';\n" +
+      'const storefrontNav = useStorefrontRouter();\n' +
+      "storefrontNav.replace(prefixBasePath(pageRoute('about')));\n"
   );
 
   try {
@@ -52,7 +54,7 @@ test('DENEB preflight rejects a Next router destination with a duplicated base p
       output,
       /Template navigation validation failed before dependency installation\./
     );
-    assert.match(output, /src\/components\/BrokenNavigation\.tsx:1/);
+    assert.match(output, /src\/components\/BrokenNavigation\.tsx:3/);
     assert.doesNotMatch(output, /Install dependencies/);
   } finally {
     fs.rmSync(tempDir, { recursive: true, force: true });
@@ -3922,4 +3924,3 @@ test('ARC v3 Phase 18: formatBlockedExplanationTerminal renders actionable remed
 
 
 
-

package/src/arc/acceptance-gates.cjs

@@ -83,7 +83,7 @@ function evaluateAcceptanceGates(metrics = {}) {
     },
     designPreservation: {
       name: ACCEPTANCE_GATES.DESIGN_PRESERVATION,
-      passed: Boolean((metrics.designPreservationScore ?? 100) >= 98),
+      passed: Boolean((metrics.designPreservationScore ?? 100) >= 95),
       critical: false,
     },
     controlOnlyProtection: {

package/src/arc/asset-auditor.cjs

@@ -58,9 +58,10 @@ function auditProjectAssets(projectDir, siteData = {}) {
       return;
     }
 
-    // Must look like a path or filename (starts with / or has a file extension)
-    if (!trimmed.startsWith('/') && !/\.[a-zA-Z0-9]+$/.test(trimmed)) {
-      return;
+    // Must look like an asset file with a recognized media/font/file extension
+    const cleanPath = trimmed.split('?')[0].split('#')[0];
+    if (!/\.(png|jpe?g|svg|webp|gif|avif|ico|mp4|webm|pdf|woff2?|otf|ttf)$/i.test(cleanPath)) {
+      return; // Route path / navigation link, not a static public asset
     }
 
     // Normalize leading slash
@@ -88,8 +89,8 @@ function auditProjectAssets(projectDir, siteData = {}) {
       const fieldPath = currentPath ? `${currentPath}.${key}` : key;
       const lowerKey = key.toLowerCase();
       const isTextKey = lowerKey.includes('text') || lowerKey.includes('title') || lowerKey.includes('label') || lowerKey.includes('desc') || lowerKey.includes('alt') || lowerKey.includes('phone') || lowerKey.includes('whatsapp') || lowerKey.includes('email');
-      const isAssetKey = !isTextKey && (lowerKey.includes('image') || lowerKey.includes('logo') || lowerKey.includes('avatar') || lowerKey.includes('icon') || lowerKey.includes('src') || lowerKey.endsWith('url'));
-      const hasFileExt = typeof val === 'string' && /\.(png|jpe?g|svg|webp|gif|avif|ico|mp4|webm)$/i.test(val.trim());
+      const isAssetKey = !isTextKey && (lowerKey.includes('image') || lowerKey.includes('logo') || lowerKey.includes('avatar') || lowerKey.includes('icon') || lowerKey.includes('src') || lowerKey.includes('poster') || lowerKey.includes('thumb'));
+      const hasFileExt = typeof val === 'string' && /\.(png|jpe?g|svg|webp|gif|avif|ico|mp4|webm|pdf|woff2?|otf|ttf)$/i.test(val.trim().split('?')[0]);
 
       if (typeof val === 'string' && (isAssetKey || hasFileExt)) {
         checkAssetPath(val, `site-data.json -> ${fieldPath}`);

package/src/arc/explain-blocked.cjs

@@ -104,15 +104,29 @@ function analyzeBlockedProject(targetDir = process.cwd(), options = {}) {
   let manifestRaw = '';
 
   if (!fs.existsSync(manifestPath)) {
-    findings.push({
-      ruleId: 'MISSING_MANIFEST',
-      category: 'FIVORA_CONTRACT',
-      severity: 'BLOCKING',
-      file: 'fivora-template.json',
-      line: 1,
-      message: 'fivora-template.json is missing in project root.',
-      remediation: "Run 'npx @deneb-ui/cli init' to generate the mandatory Fivora template manifest.",
-    });
+    if (runReasons.length > 0) {
+      for (const reason of runReasons) {
+        findings.push({
+          ruleId: 'ROLLBACK_TRIGGERED',
+          category: 'FIVORA_CONTRACT',
+          severity: 'BLOCKING',
+          file: 'fivora-template.json',
+          line: 1,
+          message: `Conversion failed and rolled back: ${reason}`,
+          remediation: 'Resolve the contract/asset issues in your template source code, then run init again.',
+        });
+      }
+    } else {
+      findings.push({
+        ruleId: 'MISSING_MANIFEST',
+        category: 'FIVORA_CONTRACT',
+        severity: 'BLOCKING',
+        file: 'fivora-template.json',
+        line: 1,
+        message: 'fivora-template.json is missing in project root.',
+        remediation: "Run 'npx @deneb-ui/cli init' to generate the mandatory Fivora template manifest.",
+      });
+    }
   } else {
     try {
       manifestRaw = fs.readFileSync(manifestPath, 'utf8');

package/src/arc/index.cjs

@@ -882,7 +882,7 @@ function runArcTransformations(projectDir, projectName, opts, profile, graph, an
 
   const criticalFailure = !syntaxPassed || (contracts.actionCollisions > 0 && appliedCount === 0) || (buildResult.passed === false);
   const contractFailure = !fivoraAudit.passed || fivoraAudit.uncoveredVisibleText.length > 0;
-  const designFailure = design.score < 98 && design.total > 0;
+  const designFailure = design.score < 95 && design.total > 0;
   const assetFailure = !assetAudit.passed && assetAudit.errors.length > 0;
   let outcome = 'success';
   if (criticalFailure) {
@@ -990,6 +990,7 @@ function runArcTransformations(projectDir, projectName, opts, profile, graph, an
       pkg: profile.pkg,
     },
     matchedRecipe: recipeMatch.recipe,
+    filesChanged: changedFiles,
     transformedFilesCount: changedFiles.length,
     totalTransformedElements: appliedCount,
     totalFields: countSchemaFields(dataBundle.manifest),
@@ -1218,7 +1219,7 @@ function runTransactionalPipeline(targetDirInput = '.', options = {}) {
         if (result.validation?.fivoraContractPassed === false) reasons.push('Fivora strict contract validation failed');
         if (result.validation?.uncoveredVisibleText > 0) reasons.push(`${result.validation.uncoveredVisibleText} uncovered visible text node(s)`);
         if (result.validation?.syntaxPassed === false) reasons.push('AST syntax validation failed');
-        if (result.validation?.designPreservation < 98 && result.validation?.designPreservation > 0) reasons.push(`Design preservation (${result.validation.designPreservation}%) below threshold`);
+        if (result.validation?.designPreservation < 95 && result.validation?.designPreservation > 0) reasons.push(`Design preservation (${result.validation.designPreservation}%) below threshold`);
         if (result.validation?.assetIntegrity?.passed === false) reasons.push(`Asset integrity failed: ${result.validation.assetIntegrity.errors?.[0] || 'missing asset'}`);
         if (result.validation?.acceptance && !result.validation.acceptance.passed) reasons.push(`15-Gate Acceptance Matrix failed: ${result.validation.acceptance.status}`);
 

package/src/arc/manifest.cjs

@@ -285,10 +285,9 @@ function collectFieldsFromPlan(plan) {
         fields.push({ path: t.highlightField, type: 'text', value: t.highlightFallback });
       }
       if (t.operation === 'bind-highlighted-heading' && t.field) {
-        const highlightFrag = (t.fragments || []).find((f) => f.type === 'span' || f.type === 'format');
-        if (highlightFrag) {
-          fields.push({ path: `${t.field}Highlight`, type: 'text', value: highlightFrag.text });
-        }
+        const highlightFrag = (t.fragments || []).find((f) => f.type === 'span' || f.type === 'format' || f.type === 'inline-format' || f.tag === 'span');
+        const highlightVal = highlightFrag ? (highlightFrag.text || 'Highlight') : (t.highlightFallback || 'Highlight');
+        fields.push({ path: `${t.field}Highlight`, type: 'text', value: highlightVal });
       }
       if (t.propTransforms) {
         for (const [propName, propInfo] of Object.entries(t.propTransforms)) {

package/src/arc/transforms/routing/shared-layout.cjs

@@ -87,7 +87,7 @@ function injectDualModeTheme(ast, jsonIdent, providerImport = '@deneb-ui/ui') {
   if (!hasThemeStyles) {
     let stylesInjected = false;
     const snippet = parseSource(
-      `<ThemeStyles theme={${jsonIdent}?.template?.structure?.theme || ${jsonIdent}?.theme} enableDualMode />`,
+      `<ThemeStyles theme={(${jsonIdent} as any)?.template?.structure?.theme || (${jsonIdent} as any)?.theme} enableDualMode />`,
       'snippet.tsx'
     );
     const stylesEl = snippet.program.body[0].expression;

package/src/sites/universal-page-selection.ts

@@ -525,21 +525,201 @@ export function findLinksToUnselectedPages(input: {
  * the generated-site prefix at runtime.
  */
 export function findDoubleBasePathNextRouterCalls(source: string) {
-  const findings: Array<{ line: number; expression: string }> = [];
-  const patterns = [
-    /\b(?:router|navigation)\s*\.\s*(?:push|replace|prefetch)\s*\(\s*withBasePath\s*\(/g,
-    /<Link\b[^>]{0,500}?\bhref\s*=\s*\{\s*withBasePath\s*\(/g,
-  ];
-
-  for (const pattern of patterns) {
-    for (const match of source.matchAll(pattern)) {
-      const offset = match.index ?? 0;
-      findings.push({
-        line: source.slice(0, offset).split(/\r?\n/).length,
-        expression: match[0].replace(/\s+/g, ' ').trim(),
-      });
+  const findings: Array<{
+    line: number;
+    expression: string;
+    offset: number;
+  }> = [];
+  const routerNames = new Set(['router', 'navigation']);
+  const routerHookNames = new Set(['useRouter']);
+  const linkNames = new Set(['Link']);
+
+  const escapeRegExp = (value: string) =>
+    value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  const compact = (value: string) => {
+    const normalized = value.replace(/\s+/g, ' ').trim();
+    return normalized.length > 180
+      ? `${normalized.slice(0, 177)}...`
+      : normalized;
+  };
+  const readBalanced = (
+    start: number,
+    opening: '(' | '{',
+    closing: ')' | '}',
+  ) => {
+    let depth = 1;
+    let quote: "'" | '"' | '`' | null = null;
+    let escaped = false;
+    let lineComment = false;
+    let blockComment = false;
+
+    for (let index = start; index < source.length; index += 1) {
+      const character = source[index];
+      const nextCharacter = source[index + 1];
+
+      if (lineComment) {
+        if (character === '\n') lineComment = false;
+        continue;
+      }
+      if (blockComment) {
+        if (character === '*' && nextCharacter === '/') {
+          blockComment = false;
+          index += 1;
+        }
+        continue;
+      }
+      if (quote) {
+        if (escaped) {
+          escaped = false;
+        } else if (character === '\\') {
+          escaped = true;
+        } else if (character === quote) {
+          quote = null;
+        }
+        continue;
+      }
+      if (character === '/' && nextCharacter === '/') {
+        lineComment = true;
+        index += 1;
+        continue;
+      }
+      if (character === '/' && nextCharacter === '*') {
+        blockComment = true;
+        index += 1;
+        continue;
+      }
+      if (character === "'" || character === '"' || character === '`') {
+        quote = character;
+        continue;
+      }
+      if (character === opening) {
+        depth += 1;
+      } else if (character === closing) {
+        depth -= 1;
+        if (depth === 0) return source.slice(start, index);
+      }
+    }
+
+    return source.slice(start, Math.min(source.length, start + 4_000));
+  };
+  const containsBasePathReference = (expression: string) => {
+    const stripNonCode = (value: string) =>
+      value
+        .replace(/'(?:\\.|[^'\\])*'|"(?:\\.|[^"\\])*"/g, ' ')
+        .replace(/`(?:\\.|[^`\\])*`/g, ' ')
+        .replace(/\/\*[\s\S]*?\*\//g, ' ')
+        .replace(/\/\/[^\r\n]*/g, ' ');
+    const templateExpressions = [...expression.matchAll(/\$\{([\s\S]*?)\}/g)]
+      .map((match) => stripNonCode(match[1]))
+      .join(' ');
+    const codeOnly = stripNonCode(expression);
+    return /\b(?:[A-Za-z_$][\w$]*\s*\.\s*)*[A-Za-z_$][\w$]*(?:base_?path|path_?base)[\w$]*\b/i.test(
+      `${codeOnly} ${templateExpressions}`,
+    );
+  };
+  const addFinding = (offset: number, expression: string) => {
+    findings.push({
+      line: source.slice(0, offset).split(/\r?\n/).length,
+      expression: compact(expression),
+      offset,
+    });
+  };
+
+  for (const match of source.matchAll(
+    /\bimport\s*\{([^}]*)\}\s*from\s*['"]next\/(?:navigation|router)['"]/g,
+  )) {
+    for (const importedName of match[1].split(',')) {
+      const alias = importedName
+        .trim()
+        .match(/^useRouter(?:\s+as\s+([A-Za-z_$][\w$]*))?$/)?.[1];
+      if (alias) routerHookNames.add(alias);
     }
   }
 
-  return findings;
+  const hookAlternation = [...routerHookNames].map(escapeRegExp).join('|');
+  const routerAssignmentPattern = new RegExp(
+    `\\b(?:const|let|var)\\s+([A-Za-z_$][\\w$]*)\\s*(?::[^=;]+)?=\\s*(?:${hookAlternation})\\s*\\(`,
+    'g',
+  );
+  for (const match of source.matchAll(routerAssignmentPattern)) {
+    routerNames.add(match[1]);
+  }
+
+  for (const match of source.matchAll(
+    /\bimport\s+([^;]{0,300}?)\s+from\s*['"]next\/link['"]/g,
+  )) {
+    const importClause = match[1].trim();
+    const defaultImport = importClause.match(/^([A-Za-z_$][\w$]*)/i)?.[1];
+    if (defaultImport && defaultImport !== 'type') linkNames.add(defaultImport);
+    for (const namedImport of importClause.matchAll(
+      /\bdefault\s+as\s+([A-Za-z_$][\w$]*)/g,
+    )) {
+      linkNames.add(namedImport[1]);
+    }
+  }
+
+  for (const match of source.matchAll(
+    /\b([A-Za-z_$][\w$]*)\s*\.\s*(push|replace|prefetch)\s*\(/g,
+  )) {
+    const routerName = match[1];
+    if (
+      !routerNames.has(routerName) &&
+      !/(?:router|navigation)/i.test(routerName)
+    ) {
+      continue;
+    }
+    const destination = readBalanced(
+      (match.index ?? 0) + match[0].length,
+      '(',
+      ')',
+    );
+    if (containsBasePathReference(destination)) {
+      addFinding(
+        match.index ?? 0,
+        `${routerName}.${match[2]}(${destination})`,
+      );
+    }
+  }
+
+  const directHookCallPattern = new RegExp(
+    `\\b(?:${hookAlternation})\\s*\\(\\s*\\)\\s*\\.\\s*(push|replace|prefetch)\\s*\\(`,
+    'g',
+  );
+  for (const match of source.matchAll(directHookCallPattern)) {
+    const destination = readBalanced(
+      (match.index ?? 0) + match[0].length,
+      '(',
+      ')',
+    );
+    if (containsBasePathReference(destination)) {
+      addFinding(match.index ?? 0, `${match[0]}${destination})`);
+    }
+  }
+
+  const linkAlternation = [...linkNames].map(escapeRegExp).join('|');
+  const linkHrefPattern = new RegExp(
+    `<(${linkAlternation})\\b[^>]{0,2000}?\\bhref\\s*=\\s*\\{`,
+    'g',
+  );
+  for (const match of source.matchAll(linkHrefPattern)) {
+    const destination = readBalanced(
+      (match.index ?? 0) + match[0].length,
+      '{',
+      '}',
+    );
+    if (containsBasePathReference(destination)) {
+      addFinding(
+        match.index ?? 0,
+        `<${match[1]} href={${destination}}>`,
+      );
+    }
+  }
+
+  return findings
+    .sort((left, right) => left.offset - right.offset)
+    .filter(
+      (finding, index, ordered) =>
+        index === 0 || finding.offset !== ordered[index - 1].offset,
+    )
+    .map(({ line, expression }) => ({ line, expression }));
 }