@domandigital/craft 0.11.0 → 0.12.0

package/dist/{chunk-HOHHQB4N.js → chunk-CDAJUS5U.js}

@@ -3,19 +3,21 @@ import {
   hueName,
   loadNull,
   shapeName
-} from "./chunk-3OZQ4C5R.js";
+} from "./chunk-LHGY43LL.js";
+import {
+  readSnapshot
+} from "./chunk-ZKVJ7K6X.js";
 import {
   parseFlags,
   toJson
-} from "./chunk-2AJB27BJ.js";
+} from "./chunk-J3QUROJ5.js";
 import {
   fingerprint,
   fingerprintDistance
-} from "./chunk-QMYERCBB.js";
+} from "./chunk-PZ4MF2VV.js";
 import {
-  SNAPSHOT_VERSION,
   auditSnapshot
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
 
 // src/estate/cli.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -88,12 +90,11 @@ function loadEstate(path) {
 async function snapshotOf(target, cwd) {
   const local = resolve(cwd, target);
   if (/\.json$/i.test(target) && existsSync(local)) {
-    const snap = JSON.parse(readFileSync(local, "utf8"));
-    if (snap.version !== SNAPSHOT_VERSION) throw new Error(`${target} is not a snapshot`);
+    const snap = readSnapshot(JSON.parse(readFileSync(local, "utf8")), target);
     return snap;
   }
   if (!/^https?:\/\//.test(target)) throw new Error(`${target} is neither a URL, a snapshot file, nor a site in the register`);
-  const { snapshotUrl } = await import("./audit-QIPXL7E4.js");
+  const { snapshotUrl } = await import("./audit-5QWFLZ6L.js");
   return snapshotUrl(target);
 }
 var line = (distance, sibling, shared) => `${distance.toFixed(2)}${sibling ? "  SIBLING" : ""}${shared.length ? `  shares ${shared.join(", ")}` : ""}`;

package/dist/{chunk-2AJB27BJ.js → chunk-J3QUROJ5.js}

@@ -1,14 +1,16 @@
 import {
   CATALOGUE,
   CATALOGUE_VERSION,
+  HOUSE_LOCKED,
   applyHouseGate,
   checkCopy,
   extractCopy,
   extractStrings,
   fileKind,
+  holdHouseBlocks,
   houseRule,
   scanSource
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
 
 // src/character/config.ts
 var DEFAULT_IGNORE = [".claude", ".agents", ".cursor"];
@@ -637,25 +639,25 @@ var NOT_COPY_DIR = (name) => name.startsWith("_");
 function run(argv, io) {
   const [command, ...rest] = argv;
   if (command === "direction") {
-    return import("./cli-U3SZVHSK.js").then((m) => m.runDirection(rest, io));
+    return import("./cli-ZPJIWVEP.js").then((m) => m.runDirection(rest, io));
   }
   if (command === "report" || command === "retrofit") {
-    return import("./cli-DBZMVYYV.js").then((m) => m.runReport(command, rest, io));
+    return import("./cli-ZB2VJ7CY.js").then((m) => m.runReport(command, rest, io));
   }
   if (command === "estate") {
-    return import("./cli-VREYWCT4.js").then((m) => m.runEstate(rest, io));
+    return import("./cli-2DY3V3SF.js").then((m) => m.runEstate(rest, io));
   }
   if (command === "null") {
-    return import("./cli-4ESXOLKV.js").then((m) => m.runNull(rest, io));
+    return import("./cli-C3JLFXMG.js").then((m) => m.runNull(rest, io));
   }
   if (command === "tells" && rest[0] === "harvest") {
-    return import("./cli-4ESXOLKV.js").then((m) => m.runHarvest(rest, io)).catch((error) => {
+    return import("./cli-C3JLFXMG.js").then((m) => m.runHarvest(rest, io)).catch((error) => {
       io.err(`craft: ${error.message}`);
       return 2;
     });
   }
   if (command === "snapshot" || command === "audit") {
-    return import("./cli-T5RD2BTK.js").then((m) => m.runAudit(command, rest, io));
+    return import("./cli-QM2AQQMF.js").then((m) => m.runAudit(command, rest, io));
   }
   if (!command || command === "help" || command === "--help" || command === "-h") {
     io.out(HELP);
@@ -713,10 +715,22 @@ function run(argv, io) {
       const paths = flags.positional.length > 0 ? flags.positional : command === "copy" ? config.copyPaths ?? [] : ["."];
       if (command === "copy" && paths.length === 0 && !flags.staged) throw new Error("usage: craft copy <paths...> (or copyPaths in craft.config.json)");
       const files = flags.staged ? readStaged(io.cwd, wanted, config.ignore) : readPaths(paths, io.cwd, wanted, command === "copy" ? NOT_COPY_DIR : void 0, config.ignore);
-      const exceptions = loadExceptions(flags, io.cwd);
+      let exceptions = loadExceptions(flags, io.cwd);
+      let effective = config;
+      let refused = [];
+      if (command === "copy" && flags.gate) {
+        const held = holdHouseBlocks(exceptions, config.severity);
+        exceptions = held.exceptions;
+        effective = { ...config, severity: held.severity };
+        const warned = held.refusedSeverity.filter((tell) => config.severity[tell].level === "warn").map((tell) => ({ tell, because: `craft.config.json: ${config.severity[tell].because}` }));
+        refused = [...held.refused, ...warned];
+      }
       let report = command === "scan" ? scanSource(files, { exceptions }) : checkCopy(files, { exceptions });
-      if (command === "copy" && flags.gate) report = applyHouseGate(report);
-      const prepared = prepareReport(report, flags, io, config);
+      if (command === "copy" && flags.gate) {
+        report = applyHouseGate(report);
+        report = { ...report, rejectedExceptions: [...report.rejectedExceptions, ...refused.map((exception) => ({ exception, reason: HOUSE_LOCKED }))] };
+      }
+      const prepared = prepareReport(report, flags, io, effective);
       if (!prepared) return 0;
       return finish(prepared, flags, command === "scan" ? "craft scan" : "craft copy", io);
     }

package/dist/chunk-JYNXGCYZ.js

@@ -0,0 +1,75 @@
+// src/direction/png.ts
+import { inflateSync } from "zlib";
+function decodePng(buf) {
+  const sig = [137, 80, 78, 71, 13, 10, 26, 10];
+  if (!sig.every((b, i) => buf[i] === b)) throw new Error("not a PNG");
+  const view = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+  let pos = 8;
+  let width = 0;
+  let height = 0;
+  let depth = 0;
+  let colour = 0;
+  let interlace = 0;
+  const idat = [];
+  while (pos < buf.length) {
+    const len = view.getUint32(pos);
+    const type = String.fromCharCode(...buf.subarray(pos + 4, pos + 8));
+    const data = buf.subarray(pos + 8, pos + 8 + len);
+    if (type === "IHDR") {
+      width = view.getUint32(pos + 8);
+      height = view.getUint32(pos + 12);
+      depth = data[8];
+      colour = data[9];
+      interlace = data[12];
+    } else if (type === "IDAT") idat.push(data);
+    else if (type === "IEND") break;
+    pos += 12 + len;
+  }
+  const channels = { 0: 1, 2: 3, 4: 2, 6: 4 }[colour];
+  if (depth !== 8 || !channels || interlace !== 0) throw new Error(`unsupported PNG (depth ${depth}, colour type ${colour}${interlace ? ", interlaced" : ""}); export it as 8-bit RGB`);
+  const raw = inflateSync(Buffer.concat(idat.map((d) => Buffer.from(d))));
+  const stride = width * channels;
+  const out = new Uint8Array(width * height * 4);
+  const prev = new Uint8Array(stride);
+  const line = new Uint8Array(stride);
+  for (let y = 0; y < height; y += 1) {
+    const filter = raw[y * (stride + 1)];
+    const src = raw.subarray(y * (stride + 1) + 1, (y + 1) * (stride + 1));
+    for (let x = 0; x < stride; x += 1) {
+      const a = x >= channels ? line[x - channels] : 0;
+      const b = prev[x];
+      const c = x >= channels ? prev[x - channels] : 0;
+      let v = src[x];
+      if (filter === 1) v += a;
+      else if (filter === 2) v += b;
+      else if (filter === 3) v += a + b >> 1;
+      else if (filter === 4) {
+        const p = a + b - c;
+        const pa = Math.abs(p - a);
+        const pb = Math.abs(p - b);
+        const pc = Math.abs(p - c);
+        v += pa <= pb && pa <= pc ? a : pb <= pc ? b : c;
+      }
+      line[x] = v & 255;
+    }
+    for (let x = 0; x < width; x += 1) {
+      const i = x * channels;
+      const o = (y * width + x) * 4;
+      if (channels >= 3) {
+        out[o] = line[i];
+        out[o + 1] = line[i + 1];
+        out[o + 2] = line[i + 2];
+        out[o + 3] = channels === 4 ? line[i + 3] : 255;
+      } else {
+        out[o] = out[o + 1] = out[o + 2] = line[i];
+        out[o + 3] = channels === 2 ? line[i + 1] : 255;
+      }
+    }
+    prev.set(line);
+  }
+  return { width, height, rgba: out };
+}
+
+export {
+  decodePng
+};

package/dist/{chunk-3OZQ4C5R.js → chunk-LHGY43LL.js}

@@ -1,11 +1,14 @@
+import {
+  readSnapshot
+} from "./chunk-ZKVJ7K6X.js";
 import {
   parseFlags,
   toJson
-} from "./chunk-2AJB27BJ.js";
+} from "./chunk-J3QUROJ5.js";
 import {
   fingerprint,
   fingerprintDistance
-} from "./chunk-QMYERCBB.js";
+} from "./chunk-PZ4MF2VV.js";
 import {
   CATALOGUE_VERSION,
   REFLEX_FONTS_1,
@@ -19,7 +22,7 @@ import {
   isCream,
   oklchToRgb,
   scanSource
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
 
 // src/null/cli.ts
 import { spawn } from "child_process";
@@ -353,7 +356,7 @@ async function build(flags, io) {
   const toShoot = ids.filter((id) => existsSync(join(pages, `${id}.html`)) && !existsSync(join(shots, `${id}.json`)));
   if (toShoot.length) {
     io.out(`craft null: snapshotting ${toShoot.length} page${toShoot.length === 1 ? "" : "s"}`);
-    const { snapshotUrls } = await import("./audit-QIPXL7E4.js");
+    const { snapshotUrls } = await import("./audit-5QWFLZ6L.js");
     const results = await snapshotUrls(toShoot.map((id) => pathToFileURL(join(pages, `${id}.html`)).href));
     results.forEach((r, i) => {
       const id = toShoot[i];
@@ -362,7 +365,7 @@ async function build(flags, io) {
       else failed.push(`${id}: the page would not render: ${r.error}`);
     });
   }
-  const measured = ids.filter((id) => existsSync(join(pages, `${id}.html`)) && existsSync(join(shots, `${id}.json`))).map((id) => measureRun(id, readFileSync(join(pages, `${id}.html`), "utf8"), readJson(join(shots, `${id}.json`))));
+  const measured = ids.filter((id) => existsSync(join(pages, `${id}.html`)) && existsSync(join(shots, `${id}.json`))).map((id) => measureRun(id, readFileSync(join(pages, `${id}.html`), "utf8"), readSnapshot(readJson(join(shots, `${id}.json`)), `${id}.json`)));
   const model = {
     version: NULL_VERSION,
     brief: brief.trim(),

package/dist/{chunk-MSQ57PJU.js → chunk-PU5G5DUC.js}

@@ -1,12 +1,15 @@
 import {
   snapshotUrl,
   snapshotUrls
-} from "./chunk-JP75P2DU.js";
+} from "./chunk-ULPI335S.js";
 import {
   describeTypicality,
   loadNull,
   typicality
-} from "./chunk-3OZQ4C5R.js";
+} from "./chunk-LHGY43LL.js";
+import {
+  readSnapshot
+} from "./chunk-ZKVJ7K6X.js";
 import {
   SOURCE_FILE,
   finish,
@@ -16,15 +19,14 @@ import {
   prepareReport,
   readPaths,
   toJson
-} from "./chunk-2AJB27BJ.js";
+} from "./chunk-J3QUROJ5.js";
 import {
   fingerprint
-} from "./chunk-QMYERCBB.js";
+} from "./chunk-PZ4MF2VV.js";
 import {
-  SNAPSHOT_VERSION,
   auditSnapshot,
   scanSource
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
 
 // src/audit/cli.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -81,10 +83,8 @@ function merge(a, b) {
     }
   };
 }
-function readSnapshot(path) {
-  const data = JSON.parse(readFileSync(path, "utf8"));
-  if (data.version !== SNAPSHOT_VERSION) throw new Error(`${path} is snapshot version ${String(data.version)}; this craft reads ${SNAPSHOT_VERSION}`);
-  return data;
+function readSnapshotFile(path) {
+  return readSnapshot(JSON.parse(readFileSync(path, "utf8")), path);
 }
 async function readText(source, cwd) {
   if (/^https?:\/\//i.test(source)) {
@@ -123,7 +123,7 @@ async function runAudit(command, args, io) {
     const failed = [];
     const local = target ? resolve(io.cwd, target) : "";
     if (target && command === "audit" && /\.json$/i.test(target) && existsSync(local)) {
-      audited.push({ url: target, viewport: null, snapshot: readSnapshot(local) });
+      audited.push({ url: target, viewport: null, snapshot: readSnapshotFile(local) });
     } else if (target && viewports.length === 1) {
       const snapshot = await snapshotUrl(target, { viewport: viewports[0] });
       audited.push({ url: target, viewport: viewports[0] ?? null, snapshot });

package/dist/{chunk-QMYERCBB.js → chunk-PZ4MF2VV.js}

@@ -3,10 +3,10 @@ import {
   fontClass,
   normaliseFamily,
   parseColour
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
 
 // src/fingerprint/index.ts
-var FINGERPRINT_VERSION = 1;
+var FINGERPRINT_VERSION = 2;
 var CHROMATIC = 0.03;
 var MIN_ACCENT_AREA = 2e4;
 var oklch = (value) => {
@@ -61,23 +61,36 @@ function fingerprint(s) {
     roundness: median(s.controls.map((c) => Math.min(0.5, c.radiusPx / Math.max(1, c.heightPx)))),
     motion: below ? Math.min(1, s.motion.hiddenSections / below) : 0,
     effects: effects.sort(),
-    layout: s.sections.map((x) => x.kind)
+    layout: s.sections.map((x) => x.kind),
+    ...s.sections.length > 0 && s.sections.every((x) => x.role && x.geometry) ? { sections: s.sections.map((x) => ({ role: x.role, centred: x.geometry.centredShare, width: x.geometry.contentWidthRatio })) } : {}
   };
 }
 var DISTANCE_WEIGHTS = { accent: 0.25, type: 0.25, ground: 0.1, shape: 0.1, motion: 0.1, effects: 0.1, layout: 0.1 };
-function levenshtein(a, b) {
+function levenshtein(a, b, cost = (x, y) => x === y ? 0 : 1) {
   const row = Array.from({ length: b.length + 1 }, (_, i) => i);
   for (let i = 1; i <= a.length; i += 1) {
     let prev = row[0];
     row[0] = i;
     for (let j = 1; j <= b.length; j += 1) {
       const cur = row[j];
-      row[j] = Math.min(row[j] + 1, row[j - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
+      row[j] = Math.min(row[j] + 1, row[j - 1] + 1, prev + cost(a[i - 1], b[j - 1]));
       prev = cur;
     }
   }
   return row[b.length];
 }
+function sectionCost(x, y) {
+  if (x.role !== y.role) return 1;
+  return Math.min(0.5, (Math.abs(x.centred - y.centred) + Math.abs(x.width - y.width)) / 2);
+}
+function layoutDistance(a, b) {
+  if (a.sections && b.sections) {
+    const longest2 = Math.max(a.sections.length, b.sections.length);
+    return longest2 === 0 ? 0 : levenshtein(a.sections, b.sections, sectionCost) / longest2;
+  }
+  const longest = Math.max(a.layout.length, b.layout.length);
+  return longest === 0 ? 0 : levenshtein(a.layout, b.layout) / longest;
+}
 var clamp = (n) => Math.max(0, Math.min(1, n));
 function faceDistance(a, b) {
   if (a.family.toLowerCase() === b.family.toLowerCase()) return 0;
@@ -92,8 +105,7 @@ function fingerprintDistance(a, b) {
   const union = /* @__PURE__ */ new Set([...a.effects, ...b.effects]);
   const shared = a.effects.filter((e) => b.effects.includes(e)).length;
   const effects = union.size === 0 ? 0 : 1 - shared / union.size;
-  const longest = Math.max(a.layout.length, b.layout.length);
-  const layout = longest === 0 ? 0 : levenshtein(a.layout, b.layout) / longest;
+  const layout = layoutDistance(a, b);
   const parts = { accent, ground, type, shape, motion, effects, layout };
   const total = Object.keys(DISTANCE_WEIGHTS).reduce((sum, k) => sum + DISTANCE_WEIGHTS[k] * parts[k], 0);
   return { total: Math.round(total * 1e3) / 1e3, parts };

package/dist/{chunk-JWHC67ZS.js → chunk-S3NZAVU6.js}

@@ -6,7 +6,115 @@ import {
   isCream,
   normaliseFamily,
   parseColour
-} from "./chunk-3NGWXZZE.js";
+} from "./chunk-AL6MRG6V.js";
+
+// src/direction/licences.ts
+var LICENCES = [
+  {
+    name: "Basteleur",
+    subject: "face",
+    licence: "OFL-1.1",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://velvetyne.fr/fonts/basteleur/",
+    note: "Velvetyne, designed by Keussel. Keep the OFL notice with the font files."
+  },
+  {
+    name: "Gulax",
+    subject: "face",
+    licence: "OFL-1.1",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://velvetyne.fr/fonts/gulax/",
+    note: "Velvetyne. Keep the OFL notice with the font files."
+  },
+  {
+    name: "Le Murmure",
+    subject: "face",
+    licence: "OFL-1.1",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://velvetyne.fr/fonts/le-murmure/",
+    note: "Velvetyne. Keep the OFL notice with the font files."
+  },
+  {
+    name: "Blaze Type",
+    subject: "foundry",
+    licence: "commercial",
+    multiClient: "per-site",
+    cap: 10,
+    checked: "2026-09-24",
+    source: "https://blazetype.eu/eula",
+    note: "The EULA sells a professional licence for 1 to 10 websites, and lets an agency buy in a client's name at the listed price. Its /license page says one licence covers every domain; the EULA is the contract, so buy per client."
+  },
+  {
+    name: "Power Type",
+    subject: "foundry",
+    licence: "commercial",
+    multiClient: "unverified",
+    checked: "2026-09-24",
+    source: "https://power-type.com/eula",
+    note: "Research on 2026-09-11 reported a Super License capped at 10 self-hosted domains. The EULA page did not load when checked; read it before relying on the cap."
+  },
+  {
+    name: "Grilli Type",
+    subject: "foundry",
+    licence: "commercial",
+    multiClient: "per-site",
+    checked: "2026-09-24",
+    source: "https://www.grillitype.com/information",
+    note: "Web licences cover any number of domains controlled by the licensee, priced by monthly visitors, so a client site needs the client's own licence. Unlimited tiers start at $10,000 per style."
+  },
+  {
+    name: "Phosphor",
+    subject: "icons",
+    licence: "MIT",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://github.com/phosphor-icons/core/blob/main/LICENSE",
+    note: "Six weights. The icon-tile tells treat it exactly as they treat Lucide: the library is not the tell, the tinted tile is."
+  },
+  {
+    name: "Tabler Icons",
+    subject: "icons",
+    licence: "MIT",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://github.com/tabler/tabler-icons/blob/main/LICENSE",
+    note: "One stroke grid across the set."
+  },
+  {
+    name: "Iconoir",
+    subject: "icons",
+    licence: "MIT",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://github.com/iconoir-icons/iconoir/blob/main/LICENSE",
+    note: "Smaller set, no paid tier."
+  },
+  {
+    name: "Unicons",
+    subject: "icons",
+    licence: "IconScout Simple License",
+    multiClient: "yes",
+    checked: "2026-09-24",
+    source: "https://github.com/Iconscout/unicons/blob/master/LICENSE",
+    note: "IconScout's free set, personal and commercial use, attribution optional."
+  },
+  {
+    name: "IconScout premium",
+    subject: "icons",
+    licence: "commercial",
+    multiClient: "per-site",
+    checked: "2026-09-24",
+    source: "https://iconscout.com/licenses",
+    note: "Each licence covers a single end product. Never in a tool, template or shared kit (create-site, craft, a house component library), even modified. Record the assets each site uses. Assets come from different contributors, so take one site's set from one contributor."
+  }
+];
+function faceLicence(family) {
+  const name = family.trim().toLowerCase();
+  return LICENCES.find((l) => l.subject === "face" && l.name.toLowerCase() === name);
+}
 
 // src/direction/types.ts
 var DIRECTION_VERSION = 1;
@@ -150,6 +258,18 @@ function validateDirection(input, ctx = {}) {
         ok = false;
       }
     }
+    if ((key === "display" || key === "body") && typeof c.value === "string" && c.value.trim()) {
+      const family = normaliseFamily(c.value);
+      const entry = faceLicence(family);
+      if (!entry) {
+        warn(`${at}.value`, `${family}: licence not in craft's register. Read the licensor's own terms for use on this client's site, then add it to src/direction/licences.ts.`);
+      } else if (entry.multiClient === "unverified") {
+        warn(`${at}.value`, `${family}: licence unverified (${entry.note})`);
+      } else if (entry.multiClient === "capped" || entry.multiClient === "per-site") {
+        const scope = entry.multiClient === "capped" ? `covers up to ${entry.cap} sites` : "needs a licence for this site, in the client's name";
+        warn(`${at}.value`, `${family}: ${entry.licence} licence ${scope}. Record the purchase before launch.`);
+      }
+    }
     const fp = ctx.fingerprint;
     if (fp && typeof c.value === "string") {
       if ((key === "accent" || key === "ground") && parseColour(c.value)) {