@domandigital/craft 0.10.0 → 0.11.0

package/dist/index.d.ts

@@ -1188,6 +1188,190 @@ declare function namedSources(sentence: string): string[];
 declare function findClaims(files: SourceFile[]): ClaimsReport;
 declare function formatClaims(report: ClaimsReport, label?: string): string;
 
+/**
+ * Baselines: adopt craft on a repo that already has findings, and fail only
+ * on new ones.
+ *
+ * A finding is keyed on its tell, its path and a hash of its excerpt with the
+ * whitespace collapsed, never on its line: an edit above a known finding
+ * moves it, and a moved finding is not a new one. Keys are counted, so a file
+ * with two identical findings and a baseline of one reports the second.
+ *
+ * Pure. The command line reads and writes the file.
+ */
+
+declare const BASELINE_VERSION = 1;
+interface BaselineEntry {
+    tell: string;
+    path: string;
+    /** FNV-1a of the excerpt, whitespace collapsed. */
+    excerpt: string;
+    count: number;
+}
+interface Baseline {
+    version: typeof BASELINE_VERSION;
+    catalogueVersion: string;
+    entries: BaselineEntry[];
+}
+/** The key a finding is matched on. Also the SARIF partial fingerprint. */
+declare function findingKey(f: Finding): string;
+/** Every finding in a report, as a baseline. */
+declare function createBaseline(report: CheckReport): Baseline;
+/** Validate a parsed baseline file. */
+declare function parseBaseline(data: unknown, source?: string): Baseline;
+/**
+ * The report without the findings the baseline already knows about.
+ * `baselined` is how many were removed, so the output can say so: a
+ * baseline that hides findings silently is a hole.
+ */
+declare function applyBaseline(report: CheckReport, baseline: Baseline): CheckReport & {
+    baselined: number;
+};
+
+/**
+ * `craft.config.json`: what a repo tells craft about itself.
+ *
+ * Pure: the command line reads the file and hands the parsed JSON here. The
+ * design choices live in `art-direction.json`; this file is about the tool:
+ * which paths are not the site, where the copy is, and a repo's own decisions
+ * about a tell's severity.
+ *
+ *   {
+ *     "ignore": ["docs/archive/**", "*.stories.tsx"],
+ *     "copyPaths": ["content", "src/app"],
+ *     "severity": {
+ *       "ai-violet": { "level": "off", "because": "The client's shopfront has been this violet since 1998." },
+ *       "em-dash": { "level": "block", "because": "House style for this client bans them outright." }
+ *     }
+ *   }
+ *
+ * A severity change needs a `because`, like an exception in
+ * `art-direction.json`, and for the same reason: a tell switched off with no
+ * reason is a guard nobody can audit. `off` becomes an exception, so the
+ * report still lists what it silenced.
+ */
+
+type SeverityLevel = "warn" | "block" | "off";
+interface SeverityOverride {
+    level: SeverityLevel;
+    because: string;
+}
+interface CraftConfig {
+    /** Glob patterns for paths that are not the site. Added to `DEFAULT_IGNORE`. */
+    ignore: string[];
+    /** Where `craft copy` looks when no path is given. */
+    copyPaths?: string[];
+    severity: Record<string, SeverityOverride>;
+}
+/**
+ * Agent and tool folders: instructions for the people and models building
+ * the site, not copy a visitor reads. Always ignored by a directory walk.
+ */
+declare const DEFAULT_IGNORE: string[];
+/**
+ * Validate a parsed `craft.config.json`. Throws with the file name and the
+ * key at fault: a config that half-applies is worse than one that stops the
+ * run.
+ */
+declare function parseCraftConfig(data: unknown, knownTells: ReadonlySet<string>, source?: string): CraftConfig;
+/**
+ * A glob as a regular expression over a `/`-separated relative path.
+ * `*` is one segment's worth, `**` any depth, `?` one character. A pattern
+ * with no `/` matches a file or folder of that name anywhere; otherwise it is
+ * anchored at the repo root. Anything under a matched folder matches too.
+ */
+declare function globToRegExp(glob: string): RegExp;
+/** A matcher for a set of globs. Paths are normalised to `/` before matching. */
+declare function ignoreMatcher(patterns: string[]): (path: string) => boolean;
+/** `off` entries, as exceptions: applied, and listed as silenced in the report. */
+declare function severityExceptions(config: CraftConfig): TellException[];
+/** `warn` and `block` entries, applied to a finished report. */
+declare function applySeverity(report: CheckReport, config: CraftConfig): CheckReport;
+
+/**
+ * A report as SARIF 2.1.0, for GitHub code scanning and any other tool that
+ * reads it. Pure.
+ *
+ * One rule per tell the report names, carrying the tell's `why` and `fix`.
+ * `block` findings are errors, `warn` findings warnings. A finding on a
+ * rendered page has the URL as its location and no line: GitHub code
+ * scanning only shows results in files of the repo, so those appear in the
+ * SARIF file but not in the Security tab.
+ */
+
+interface SarifTell {
+    id: string;
+    name: string;
+    why: string;
+    fix: string;
+}
+interface SarifOptions {
+    /** The catalogue, for each rule's description. */
+    tells: readonly SarifTell[];
+    /** Where a reader learns more. */
+    informationUri?: string;
+}
+declare function toSarif(report: CheckReport, options: SarifOptions): {
+    $schema: string;
+    version: "2.1.0";
+    runs: {
+        tool: {
+            driver: {
+                name: string;
+                version: string;
+                informationUri: string;
+                rules: {
+                    fullDescription?: {
+                        text: string;
+                    } | undefined;
+                    help?: {
+                        text: string;
+                    } | undefined;
+                    id: string;
+                    name: string;
+                    shortDescription: {
+                        text: string;
+                    };
+                }[];
+            };
+        };
+        results: {
+            ruleId: string;
+            ruleIndex: number;
+            level: "error" | "warning";
+            message: {
+                text: string;
+            };
+            locations: {
+                physicalLocation: {
+                    region?: {
+                        startLine: number;
+                        snippet: {
+                            text: string;
+                        };
+                    } | undefined;
+                    artifactLocation: {
+                        uri: string;
+                    };
+                };
+            }[];
+            partialFingerprints: {
+                "craftFinding/v1": string;
+            };
+        }[];
+    }[];
+};
+
+/**
+ * The `--json` contract. Every JSON document a craft command prints carries
+ * `schemaVersion`, so a script reading it can refuse a shape it does not
+ * know instead of misreading it. Bump it when a field is removed or changes
+ * meaning; adding a field is not a bump.
+ */
+declare const JSON_SCHEMA_VERSION = 1;
+/** A command's JSON output, versioned. */
+declare function toJson(data: object): string;
+
 /**
  * The rendered detection path for tells that can be seen on a live page.
  *
@@ -1820,4 +2004,4 @@ declare function characterReport(input: CharacterInputs, copyTells?: Set<string>
 
 declare function retrofitPlan(report: CharacterReport, direction?: ArtDirection | null): string;
 
-export { AI_PHRASES, AI_VIOLET, AI_WORDS, type AccentFork, type AccentForkOptions, type Action, type Area, type ArtDirection, BUZZWORDS, CATALOGUE, CATALOGUE_VERSION, CHOICE_KEYS, type CandidateKind, type CharacterInputs, type CharacterReport, type CheckOptions, type CheckReport, type CheckRestraintInput, type ChoiceKey, type Claim, type ClaimsReport, type ContrastCheck, type ContrastReport, type CopyTell, type CraftTokensInput, type CraftTokensResult, DENSITIES, DENSITY_NAMES, DIRECTION_VERSION, DISTANCE_WEIGHTS, DURATION_MS, DURATION_S, type DensityCssOptions, type DensityName, type DirectionChoice, type DirectionProblem, type DirectionReport, type DirectionSource, type DurationName, EASE, EASE_TUPLE, ESTATE_VERSION, EXIT_RATIO, type EaseName, type EmitCssOptions, type EstateMatch, type EstatePair, type EstateRegister, type EstateSite, FINGERPRINT_VERSION, type Fact, type FactComparison, type FactKind, type Finding, type Fingerprint, type FingerprintDistance, type FluidSpaceOptions, type FluidTypeOptions, type FluidTypeResult, type FontClass, type Gamut, type Generation, HOUSE, HOUSE_BUDGET, HOUSE_TYPE, type HarvestCandidate, type HarvestOptions, type Hit, type HouseRule, type HouseTier, LIGHTNESS_CURVE, MIN_DECIDED, MIN_RUNS, type MotionDecision, type MotionKind, NEGATIVE_REASSURANCE, NULL_VERSION, type NullModel, type NullRun, type Oklch, type OklchToHexOptions, PILL_LIMIT, PLAINER_WORDS, PROPOSED, type PaletteColour, type Proposal, type ProposeInput, RAMP_STEPS, REFLEX_FONTS_1, REFLEX_FONTS_2, RENDERED_PATHS, REVEAL_LIMIT, REVIEW_PHRASES, type Ramp, type RampFromAnchorsOptions, type RampOptions, type RampStep, type RestraintBudget, type RestraintReport, type RestraintSeverity, type RestraintViolation, type Rgb, SCALE, SHADCN_LIMIT, SHADCN_PRIMITIVES, SIBLING_AT, SNAPSHOT_VERSION, SOURCE_KINDS, SPACE_STEPS, SPRING, STOCK_PHRASES, type SectionKind, type SectionRhythmOptions, type SemanticInput, type SemanticResult, type Severity, type ShouldAnimateInput, type SignalResult, type Snapshot, type SnapshotColour, type SnapshotControl, type SnapshotEffects, type SnapshotFont, type SnapshotGradient, type SnapshotHeading, type SnapshotMotion, type SnapshotPatch, type SnapshotSection, type SourceFile, type SourceKind, type SourceTell, type SpaceStep, type Surface, TELL_HEAVY, TYPE_STEPS, TYPICAL_AT, type TailwindPreset, type Tell, type TellException, type TypeStep, type Typicality, VAGUE_WORDS, type ValidateContext, type Verdict, accentFork, addSite, apcaContrast, applyHouseGate, auditSnapshot, catalogueTable, characterReport, checkCopy, checkPair, checkRestraint, choicesOf, compareFacts, compareToEstate, craftTokens, deltaEOk, deltaEOkHex, densityCss, densityTokens, emitCss, emptyEstate, estatePairs, exitDuration, extractHtml, findClaims, findColours, fingerprint, fingerprintDistance, fluidClamp, fluidSpace, fluidType, fontClass, formatClaims, formatComparison, formatHex, formatReport, groundName, harvest, hexToOklch, houseRule, hueName, hueSwatch, inP3Gamut, inSrgbGamut, initDirection, isAiViolet, isCream, makeSnapshot, motionTokens, namedSources, nearest, normaliseFamily, nullPrompt, oklchToHex, oklchToRgb, paletteFromPixels, parseColour, parseHex, propose, protectedFacts, ramp, rampFromAnchors, retrofitPlan, runTell, scanSource, sectionRhythm, semantic, shapeName, sharedParts, shouldAnimate, siblingLine, tailwindV3Preset, tailwindV4Theme, tellById, toGamut, typeFeatureTokens, typicality, validateDirection, visibleText, wcagContrast, wordListsJson };
+export { AI_PHRASES, AI_VIOLET, AI_WORDS, type AccentFork, type AccentForkOptions, type Action, type Area, type ArtDirection, BASELINE_VERSION, BUZZWORDS, type Baseline, type BaselineEntry, CATALOGUE, CATALOGUE_VERSION, CHOICE_KEYS, type CandidateKind, type CharacterInputs, type CharacterReport, type CheckOptions, type CheckReport, type CheckRestraintInput, type ChoiceKey, type Claim, type ClaimsReport, type ContrastCheck, type ContrastReport, type CopyTell, type CraftConfig, type CraftTokensInput, type CraftTokensResult, DEFAULT_IGNORE, DENSITIES, DENSITY_NAMES, DIRECTION_VERSION, DISTANCE_WEIGHTS, DURATION_MS, DURATION_S, type DensityCssOptions, type DensityName, type DirectionChoice, type DirectionProblem, type DirectionReport, type DirectionSource, type DurationName, EASE, EASE_TUPLE, ESTATE_VERSION, EXIT_RATIO, type EaseName, type EmitCssOptions, type EstateMatch, type EstatePair, type EstateRegister, type EstateSite, FINGERPRINT_VERSION, type Fact, type FactComparison, type FactKind, type Finding, type Fingerprint, type FingerprintDistance, type FluidSpaceOptions, type FluidTypeOptions, type FluidTypeResult, type FontClass, type Gamut, type Generation, HOUSE, HOUSE_BUDGET, HOUSE_TYPE, type HarvestCandidate, type HarvestOptions, type Hit, type HouseRule, type HouseTier, JSON_SCHEMA_VERSION, LIGHTNESS_CURVE, MIN_DECIDED, MIN_RUNS, type MotionDecision, type MotionKind, NEGATIVE_REASSURANCE, NULL_VERSION, type NullModel, type NullRun, type Oklch, type OklchToHexOptions, PILL_LIMIT, PLAINER_WORDS, PROPOSED, type PaletteColour, type Proposal, type ProposeInput, RAMP_STEPS, REFLEX_FONTS_1, REFLEX_FONTS_2, RENDERED_PATHS, REVEAL_LIMIT, REVIEW_PHRASES, type Ramp, type RampFromAnchorsOptions, type RampOptions, type RampStep, type RestraintBudget, type RestraintReport, type RestraintSeverity, type RestraintViolation, type Rgb, SCALE, SHADCN_LIMIT, SHADCN_PRIMITIVES, SIBLING_AT, SNAPSHOT_VERSION, SOURCE_KINDS, SPACE_STEPS, SPRING, STOCK_PHRASES, type SarifOptions, type SarifTell, type SectionKind, type SectionRhythmOptions, type SemanticInput, type SemanticResult, type Severity, type SeverityLevel, type SeverityOverride, type ShouldAnimateInput, type SignalResult, type Snapshot, type SnapshotColour, type SnapshotControl, type SnapshotEffects, type SnapshotFont, type SnapshotGradient, type SnapshotHeading, type SnapshotMotion, type SnapshotPatch, type SnapshotSection, type SourceFile, type SourceKind, type SourceTell, type SpaceStep, type Surface, TELL_HEAVY, TYPE_STEPS, TYPICAL_AT, type TailwindPreset, type Tell, type TellException, type TypeStep, type Typicality, VAGUE_WORDS, type ValidateContext, type Verdict, accentFork, addSite, apcaContrast, applyBaseline, applyHouseGate, applySeverity, auditSnapshot, catalogueTable, characterReport, checkCopy, checkPair, checkRestraint, choicesOf, compareFacts, compareToEstate, craftTokens, createBaseline, deltaEOk, deltaEOkHex, densityCss, densityTokens, emitCss, emptyEstate, estatePairs, exitDuration, extractHtml, findClaims, findColours, findingKey, fingerprint, fingerprintDistance, fluidClamp, fluidSpace, fluidType, fontClass, formatClaims, formatComparison, formatHex, formatReport, globToRegExp, groundName, harvest, hexToOklch, houseRule, hueName, hueSwatch, ignoreMatcher, inP3Gamut, inSrgbGamut, initDirection, isAiViolet, isCream, makeSnapshot, motionTokens, namedSources, nearest, normaliseFamily, nullPrompt, oklchToHex, oklchToRgb, paletteFromPixels, parseBaseline, parseColour, parseCraftConfig, parseHex, propose, protectedFacts, ramp, rampFromAnchors, retrofitPlan, runTell, scanSource, sectionRhythm, semantic, severityExceptions, shapeName, sharedParts, shouldAnimate, siblingLine, tailwindV3Preset, tailwindV4Theme, tellById, toGamut, toJson, toSarif, typeFeatureTokens, typicality, validateDirection, visibleText, wcagContrast, wordListsJson };

package/dist/index.js

@@ -4599,6 +4599,194 @@ function formatClaims(report2, label = "craft copy claims") {
   return lines.join("\n");
 }
 
+// src/character/baseline.ts
+var BASELINE_VERSION = 1;
+function fnv1a(text) {
+  let hash = 2166136261;
+  for (let i = 0; i < text.length; i += 1) {
+    hash ^= text.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+var excerptHash = (f4) => fnv1a(f4.excerpt.replace(/\s+/g, " ").trim());
+var keyOf = (tell, path, excerpt) => `${tell}\0${path}\0${excerpt}`;
+function findingKey(f4) {
+  return keyOf(f4.tell, f4.path, excerptHash(f4));
+}
+function createBaseline(report2) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const f4 of report2.findings) {
+    const excerpt = excerptHash(f4);
+    const key = keyOf(f4.tell, f4.path, excerpt);
+    const entry = counts.get(key);
+    if (entry) entry.count += 1;
+    else counts.set(key, { tell: f4.tell, path: f4.path, excerpt, count: 1 });
+  }
+  const entries = [...counts.values()].sort((a, b) => a.path.localeCompare(b.path) || a.tell.localeCompare(b.tell) || a.excerpt.localeCompare(b.excerpt));
+  return { version: BASELINE_VERSION, catalogueVersion: report2.catalogueVersion, entries };
+}
+function parseBaseline(data, source = "baseline") {
+  const b = data;
+  if (!b || typeof b !== "object" || b.version !== BASELINE_VERSION || !Array.isArray(b.entries)) {
+    throw new Error(`${source}: not a craft baseline (version ${BASELINE_VERSION})`);
+  }
+  for (const e of b.entries) {
+    if (typeof e?.tell !== "string" || typeof e.path !== "string" || typeof e.excerpt !== "string" || !Number.isInteger(e.count) || e.count < 1) {
+      throw new Error(`${source}: malformed entry ${JSON.stringify(e)}`);
+    }
+  }
+  return b;
+}
+function recount(report2, findings) {
+  const byGeneration = { 1: 0, 2: 0, 3: 0 };
+  const byTell = {};
+  for (const f4 of findings) {
+    byGeneration[f4.generation] += 1;
+    byTell[f4.tell] = (byTell[f4.tell] ?? 0) + 1;
+  }
+  return {
+    ...report2,
+    findings,
+    summary: { ...report2.summary, findings: findings.length, byGeneration, byTell, blocking: findings.filter((f4) => f4.severity === "block").length }
+  };
+}
+function applyBaseline(report2, baseline) {
+  const remaining = /* @__PURE__ */ new Map();
+  for (const e of baseline.entries) {
+    const key = keyOf(e.tell, e.path, e.excerpt);
+    remaining.set(key, (remaining.get(key) ?? 0) + e.count);
+  }
+  const kept = [];
+  let baselined = 0;
+  for (const f4 of report2.findings) {
+    const key = findingKey(f4);
+    const left = remaining.get(key) ?? 0;
+    if (left > 0) {
+      remaining.set(key, left - 1);
+      baselined += 1;
+    } else kept.push(f4);
+  }
+  return { ...recount(report2, kept), baselined };
+}
+
+// src/character/config.ts
+var DEFAULT_IGNORE = [".claude", ".agents", ".cursor"];
+var KEYS = /* @__PURE__ */ new Set(["$schema", "ignore", "copyPaths", "severity"]);
+var LEVELS = /* @__PURE__ */ new Set(["warn", "block", "off"]);
+var MIN_BECAUSE = 12;
+var isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isStringArray = (v) => Array.isArray(v) && v.every((s) => typeof s === "string");
+function parseCraftConfig(data, knownTells, source = "craft.config.json") {
+  if (!isRecord(data)) throw new Error(`${source}: expected an object`);
+  for (const key of Object.keys(data)) if (!KEYS.has(key)) throw new Error(`${source}: unknown key "${key}"`);
+  const ignore = data.ignore ?? [];
+  if (!isStringArray(ignore)) throw new Error(`${source}: "ignore" must be an array of glob strings`);
+  if (data.copyPaths !== void 0 && !isStringArray(data.copyPaths)) throw new Error(`${source}: "copyPaths" must be an array of paths`);
+  const severity = {};
+  const raw = data.severity ?? {};
+  if (!isRecord(raw)) throw new Error(`${source}: "severity" must map a tell id to { level, because }`);
+  for (const [tell, value] of Object.entries(raw)) {
+    if (!knownTells.has(tell)) throw new Error(`${source}: severity names no tell called "${tell}"`);
+    if (!isRecord(value) || !LEVELS.has(value.level)) {
+      throw new Error(`${source}: severity.${tell} needs a level of "warn", "block" or "off"`);
+    }
+    if (typeof value.because !== "string" || value.because.trim().length < MIN_BECAUSE) {
+      throw new Error(`${source}: severity.${tell} needs a because of at least a sentence`);
+    }
+    severity[tell] = { level: value.level, because: value.because };
+  }
+  return { ignore, severity, ...data.copyPaths ? { copyPaths: data.copyPaths } : {} };
+}
+function globToRegExp(glob) {
+  const pattern = glob.replace(/^\.\//, "").replace(/\/$/, "").replace(/\/\*\*$/, "");
+  let body = "";
+  for (let i = 0; i < pattern.length; i += 1) {
+    const c = pattern[i];
+    if (c === "*" && pattern[i + 1] === "*") {
+      const slash = pattern[i + 2] === "/";
+      body += slash ? "(?:.*/)?" : ".*";
+      i += slash ? 2 : 1;
+    } else if (c === "*") body += "[^/]*";
+    else if (c === "?") body += "[^/]";
+    else body += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  const anywhere = !pattern.includes("/");
+  return new RegExp(`^${anywhere ? "(?:.*/)?" : ""}${body}(?:/.*)?$`);
+}
+function ignoreMatcher(patterns) {
+  const res = patterns.map(globToRegExp);
+  return (path) => {
+    const p = path.replace(/\\/g, "/").replace(/^\.\//, "");
+    return res.some((re) => re.test(p));
+  };
+}
+function severityExceptions(config) {
+  return Object.entries(config.severity).filter(([, o]) => o.level === "off").map(([tell, o]) => ({ tell, because: `craft.config.json: ${o.because}` }));
+}
+function applySeverity(report2, config) {
+  const findings = report2.findings.map((f4) => {
+    const o = config.severity[f4.tell];
+    return o && o.level !== "off" ? { ...f4, severity: o.level } : f4;
+  });
+  return { ...report2, findings, summary: { ...report2.summary, blocking: findings.filter((f4) => f4.severity === "block").length } };
+}
+
+// src/character/sarif.ts
+var isUrl = (path) => /^[a-z][a-z0-9+.-]*:\/\//i.test(path);
+function toSarif(report2, options) {
+  const byId = new Map(options.tells.map((t) => [t.id, t]));
+  const ids = [...new Set(report2.findings.map((f4) => f4.tell))].sort();
+  const index = new Map(ids.map((id, i) => [id, i]));
+  const rules = ids.map((id) => {
+    const t = byId.get(id);
+    return {
+      id,
+      name: t?.name ?? id,
+      shortDescription: { text: t?.name ?? id },
+      ...t ? { fullDescription: { text: t.why }, help: { text: t.fix } } : {}
+    };
+  });
+  const results = report2.findings.map((f4) => ({
+    ruleId: f4.tell,
+    ruleIndex: index.get(f4.tell),
+    level: f4.severity === "block" ? "error" : "warning",
+    message: { text: `${f4.message}. ${f4.fix}` },
+    locations: [
+      {
+        physicalLocation: {
+          artifactLocation: { uri: isUrl(f4.path) ? f4.path : f4.path.replace(/\\/g, "/") },
+          ...f4.line > 0 ? { region: { startLine: f4.line, snippet: { text: f4.excerpt } } } : {}
+        }
+      }
+    ],
+    partialFingerprints: { "craftFinding/v1": fnv1a(findingKey(f4)) }
+  }));
+  return {
+    $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+    version: "2.1.0",
+    runs: [
+      {
+        tool: {
+          driver: {
+            name: "craft",
+            version: report2.catalogueVersion,
+            informationUri: options.informationUri ?? "https://www.npmjs.com/package/@domandigital/craft",
+            rules
+          }
+        },
+        results
+      }
+    ]
+  };
+}
+
+// src/character/json.ts
+var JSON_SCHEMA_VERSION = 1;
+function toJson(data) {
+  return JSON.stringify({ schemaVersion: JSON_SCHEMA_VERSION, ...data }, null, 2);
+}
+
 // src/fingerprint/index.ts
 var FINGERPRINT_VERSION = 1;
 var CHROMATIC = 0.03;
@@ -5493,10 +5681,12 @@ export {
   AI_PHRASES,
   AI_VIOLET,
   AI_WORDS,
+  BASELINE_VERSION,
   BUZZWORDS,
   CATALOGUE,
   CATALOGUE_VERSION,
   CHOICE_KEYS,
+  DEFAULT_IGNORE,
   DENSITIES,
   DENSITY_NAMES,
   DIRECTION_VERSION,
@@ -5511,6 +5701,7 @@ export {
   HOUSE,
   HOUSE_BUDGET,
   HOUSE_TYPE,
+  JSON_SCHEMA_VERSION,
   LIGHTNESS_CURVE,
   MIN_DECIDED,
   MIN_RUNS,
@@ -5541,7 +5732,9 @@ export {
   accentFork,
   addSite,
   apcaContrast,
+  applyBaseline,
   applyHouseGate,
+  applySeverity,
   auditSnapshot,
   catalogueTable,
   characterReport,
@@ -5552,6 +5745,7 @@ export {
   compareFacts,
   compareToEstate,
   craftTokens,
+  createBaseline,
   deltaEOk,
   deltaEOkHex,
   densityCss,
@@ -5563,6 +5757,7 @@ export {
   extractHtml,
   findClaims,
   findColours,
+  findingKey,
   fingerprint,
   fingerprintDistance,
   fluidClamp,
@@ -5573,12 +5768,14 @@ export {
   formatComparison,
   formatHex,
   formatReport,
+  globToRegExp,
   groundName,
   harvest,
   hexToOklch,
   houseRule,
   hueName,
   hueSwatch,
+  ignoreMatcher,
   inP3Gamut,
   inSrgbGamut,
   initDirection,
@@ -5593,7 +5790,9 @@ export {
   oklchToHex,
   oklchToRgb,
   paletteFromPixels,
+  parseBaseline,
   parseColour,
+  parseCraftConfig,
   parseHex,
   propose,
   protectedFacts,
@@ -5604,6 +5803,7 @@ export {
   scanSource,
   sectionRhythm,
   semantic,
+  severityExceptions,
   shapeName,
   sharedParts,
   shouldAnimate,
@@ -5612,6 +5812,8 @@ export {
   tailwindV4Theme,
   tellById,
   toGamut,
+  toJson,
+  toSarif,
   typeFeatureTokens,
   typicality,
   validateDirection,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@domandigital/craft",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "private": false,
   "description": "The Doman Digital house craft standard as numbers: OKLCh colour ramps that snap to existing anchors, derived semantic tokens with measured WCAG and APCA contrast, one shared motion vocabulary for CSS and JS, and a base stylesheet. Zero dependencies.",
   "license": "Apache-2.0",
@@ -8,21 +8,28 @@
   "main": "dist/index.cjs",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",
+  "sideEffects": [
+    "./css/*.css"
+  ],
   "bin": {
     "craft": "dist/cli.js"
   },
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
       "require": {
         "types": "./dist/index.d.cts",
         "default": "./dist/index.cjs"
       }
     },
     "./audit": {
-      "types": "./dist/audit.d.ts",
-      "import": "./dist/audit.js",
+      "import": {
+        "types": "./dist/audit.d.ts",
+        "default": "./dist/audit.js"
+      },
       "require": {
         "types": "./dist/audit.d.cts",
         "default": "./dist/audit.cjs"
@@ -52,7 +59,7 @@
     "vitest": "^2.1.9"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22.12"
   },
   "repository": {
     "type": "git",

package/dist/chunk-U2JTFQKO.js

@@ -1,112 +0,0 @@
-import {
-  snapshotUrl
-} from "./chunk-TSKRBIOC.js";
-import {
-  describeTypicality,
-  loadNull,
-  typicality
-} from "./chunk-APO4BT2F.js";
-import {
-  SOURCE_FILE,
-  finish,
-  loadExceptions,
-  parseFlags,
-  readPaths
-} from "./chunk-JKIDWHG3.js";
-import {
-  fingerprint
-} from "./chunk-QMYERCBB.js";
-import {
-  SNAPSHOT_VERSION,
-  auditSnapshot,
-  scanSource
-} from "./chunk-3NGWXZZE.js";
-
-// src/audit/cli.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
-import { resolve } from "path";
-var fmt = (o) => o ? `oklch(${o.l.toFixed(3)} ${o.c.toFixed(3)} ${o.h.toFixed(1)})` : "none";
-function describeFingerprint(fp) {
-  return [
-    "Fingerprint",
-    `  accent     ${fmt(fp.accent)}`,
-    `  ground     ${fmt(fp.ground)}`,
-    `  display    ${fp.display.family} (${fp.display.class})`,
-    `  body       ${fp.body.family} (${fp.body.class})`,
-    `  roundness  ${fp.roundness === null ? "no buttons" : fp.roundness.toFixed(2)}`,
-    `  motion     ${Math.round(fp.motion * 100)}% of sections below the fold reveal on scroll`,
-    `  effects    ${fp.effects.join(", ") || "none"}`,
-    `  layout     ${fp.layout.join(" > ") || "none"}`
-  ].join("\n");
-}
-function merge(a, b) {
-  const byTell = { ...a.summary.byTell };
-  for (const [k, v] of Object.entries(b.summary.byTell)) byTell[k] = (byTell[k] ?? 0) + v;
-  return {
-    catalogueVersion: a.catalogueVersion,
-    findings: [...a.findings, ...b.findings],
-    rejectedExceptions: a.rejectedExceptions,
-    excepted: [...a.excepted, ...b.excepted],
-    suppressed: [...a.suppressed, ...b.suppressed],
-    summary: {
-      files: a.summary.files + b.summary.files,
-      findings: a.summary.findings + b.summary.findings,
-      byGeneration: { 1: a.summary.byGeneration[1] + b.summary.byGeneration[1], 2: a.summary.byGeneration[2] + b.summary.byGeneration[2], 3: a.summary.byGeneration[3] + b.summary.byGeneration[3] },
-      byTell,
-      blocking: a.summary.blocking + b.summary.blocking
-    }
-  };
-}
-function readSnapshot(path) {
-  const data = JSON.parse(readFileSync(path, "utf8"));
-  if (data.version !== SNAPSHOT_VERSION) throw new Error(`${path} is snapshot version ${String(data.version)}; this craft reads ${SNAPSHOT_VERSION}`);
-  return data;
-}
-async function runAudit(command, args, io) {
-  try {
-    const flags = parseFlags(args);
-    if (typeof flags === "string") throw new Error(flags);
-    const target = flags.positional[0];
-    if (!target) throw new Error(`usage: craft ${command} <url${command === "audit" ? " | snapshot.json" : ""}>`);
-    const viewport = flags.width || flags.height ? { width: Number(flags.width ?? 1440), height: Number(flags.height ?? 900) } : void 0;
-    const local = resolve(io.cwd, target);
-    const snapshot = command === "audit" && /\.json$/i.test(target) && existsSync(local) ? readSnapshot(local) : await snapshotUrl(target, { viewport });
-    if (flags.out) writeFileSync(resolve(io.cwd, flags.out), `${JSON.stringify(snapshot, null, 2)}
-`);
-    if (command === "snapshot") {
-      if (!flags.out) io.out(JSON.stringify(snapshot, null, 2));
-      else io.out(`craft snapshot: ${snapshot.url} saved to ${flags.out}`);
-      return 0;
-    }
-    const exceptions = loadExceptions(flags, flags.repo ? resolve(io.cwd, flags.repo) : io.cwd);
-    let report = auditSnapshot(snapshot, { exceptions });
-    if (flags.repo) {
-      const repo = resolve(io.cwd, flags.repo);
-      report = merge(scanSource(readPaths(["."], repo, SOURCE_FILE), { exceptions }), report);
-    }
-    const fp = fingerprint(snapshot);
-    const nulls = flags.null ? flags.null.split(",").map((p) => loadNull(p.trim(), io.cwd)) : [];
-    const typical = nulls.length ? typicality(fp, nulls.flatMap((m, i) => m.runs.map((r) => nulls.length > 1 ? { ...r, id: `${i + 1}/${r.id}` } : r))) : null;
-    if (flags.json) {
-      io.out(JSON.stringify({ report, fingerprint: fp, typicality: typical, snapshot: flags.out ?? null }, null, 2));
-      return report.summary.blocking > 0 || flags.strict && report.summary.findings > 0 ? 1 : 0;
-    }
-    const code = finish(report, { ...flags, json: false }, `craft audit ${snapshot.url}`, io);
-    io.out("");
-    io.out(describeFingerprint(fp));
-    if (typical) {
-      io.out("");
-      io.out(describeTypicality(typical, nulls.reduce((s, m) => s + m.runs.length, 0), nulls.length));
-    }
-    return code;
-  } catch (error) {
-    io.err(`craft: ${error.message}`);
-    return 2;
-  }
-}
-
-export {
-  describeFingerprint,
-  merge,
-  runAudit
-};