@endora-commerce/cli 0.100.0

package/dist/lib/tailwind-sources.d.ts

@@ -0,0 +1,136 @@
+import { type EmitLayout } from './module-packages.js';
+import { type WorkspaceFs, type WorkspaceMember } from './workspace-packages.js';
+/** The subpath a package publishes its own `@source` declarations at (R1.1). */
+export declare const TAILWIND_SOURCE_SUBPATH = "./tailwind.css";
+/**
+ * The generated stylesheet the host imports, beside the admin contribution
+ * registry (R2.1/R2.5).
+ *
+ * It sits in the admin project's own source root — found through the `"@/*"`
+ * tsconfig alias, like every other admin derivation — so an instance's copy
+ * lands in the client's tree and this repository's lands in `admin/src/`. In an
+ * instance it is a **build input** rather than a committed file (R2.4): which
+ * packages were installed is a fact about the process. Here it is committed and
+ * held to `overlay:check`'s four verdicts, which is R7.6 — a shape we cannot
+ * adopt ourselves is one we may not ask a client for, and it is what makes our
+ * own admin build the instance's mechanism on every pipeline.
+ */
+export declare const TAILWIND_REGISTRY_ARTEFACT = "tailwind.generated.css";
+/** The file that subpath names, at the package root beside `package.json`. */
+export declare const TAILWIND_SOURCE_FILE = "tailwind.css";
+/**
+ * The subpath the admin's **design system** is published at — its custom-property
+ * vocabulary and its class vocabulary, in one file (R3.1/R3.4, and R4.3 + R4.4
+ * for the two kinds it carries).
+ *
+ * Which package publishes it is derived and never written down: it is the one
+ * every renderer already declares, which is `@endora-commerce/admin-kit` today
+ * and would be `@endora-commerce/admin-shell` if the kit family folded into it
+ * (owner ruling D-219). T126 published it from the shell, where 11 module
+ * packages would have rendered classes defined by a package they cannot name;
+ * T129 moved it.
+ *
+ * A *different kind of file* from the two around it, which is why it is a
+ * different subpath and not a second entry in either (R3.3). `./tailwind.css` is
+ * a source declaration whose order is irrelevant; `./styles.css` is finished
+ * bytes the host does not compile. This one is neither: the host compiles it,
+ * against the host's own `@theme`, and the order of its `@theme` and `:root`
+ * declarations is exactly what decides whether an instance's redeclaration wins.
+ *
+ * Unlike its neighbour it is **hand-written**, because there is nothing to
+ * derive a palette from — R1.4's argument for generating `./tailwind.css` is
+ * that a mistyped `@source` is silent, and a mistyped colour is not.
+ */
+export declare const THEME_STYLESHEET_SUBPATH = "./theme.css";
+/**
+ * The subpath a package publishes a **finished** stylesheet at (R4.2).
+ *
+ * A package declaring it is excluded from R1: the host imports its bytes and
+ * must not also scan it, which R4.4 measures as three unprefixed utilities
+ * emitted into the admin bundle for a component whose every class is prefixed.
+ */
+export declare const PREBUILT_STYLESHEET_SUBPATH = "./styles.css";
+/** One directory a package asks the host to scan, both spellings (R1.2). */
+export interface TailwindScannableLayer {
+    /** Package-relative, POSIX: what the build emits — `dist/admin`, or `dist`. */
+    readonly emitted: string;
+    /** Package-relative, POSIX: the sources that emit it — `src/admin`, or `src`. */
+    readonly source: string;
+}
+/** A package that ships scannable UI, and the layers it declares. */
+export interface TailwindScannablePackage {
+    readonly name: string;
+    /** Absolute package directory. */
+    readonly dir: string;
+    /** `true` when the package's own `endora` block declares it a module. */
+    readonly isModule: boolean;
+    /** Sorted, non-empty: a package with no layer is not in this population. */
+    readonly layers: readonly TailwindScannableLayer[];
+}
+/** Raised when a package's scannable layers cannot be derived. Never a guess. */
+export declare class TailwindSourceError extends Error {
+    readonly name = "TailwindSourceError";
+}
+/** Does this member publish a finished stylesheet, and therefore owe no sources (R4.2)? */
+export declare function shipsPrebuiltStylesheet(member: WorkspaceMember): boolean;
+/** Does this member declare `./tailwind.css` — R2.1's predicate, read off the map? */
+export declare function declaresTailwindSources(member: WorkspaceMember): boolean;
+/** Immediate file names in a directory, or `[]` when it is absent. */
+export type FileLister = (path: string) => readonly string[];
+/**
+ * The layers a package asks the host to scan, given the source directories its
+ * inventory holds and the build layout it declares.
+ *
+ * Exported because the manifest generator has already read both — it renders
+ * every `exports` target through the same {@link EmitLayout} — and asking the
+ * filesystem a second time there would be a second answer to *"which layers
+ * does this package publish"*, in the one file whose whole job is that
+ * question.
+ */
+export declare function scannableLayersFrom(sourceDirectories: readonly string[], emit: EmitLayout): readonly TailwindScannableLayer[];
+/**
+ * The layers one member asks the host to scan, or `[]` when it ships no UI.
+ *
+ * @throws TailwindSourceError when a member that ships UI declares no build
+ * layout: the emitted half of every declaration is read out of
+ * `tsconfig.build.json`, and guessing `dist` would be the one spelling this
+ * whole mechanism exists to stop a host from writing (§4(b)).
+ */
+export declare function scannableLayersOf(member: WorkspaceMember, fs: WorkspaceFs, listFiles: FileLister): readonly TailwindScannableLayer[];
+/** The UI layers a module package's `src/` holds, in {@link UI_LAYER_DIRECTORIES} order. */
+export declare function moduleUiSourceDirectories(packageDir: string, fs: WorkspaceFs): readonly string[];
+/**
+ * Every workspace member that ships scannable UI, sorted by package name.
+ *
+ * The sort is the artefact's order (R2.1) and the guard's, so a package moving
+ * in the workspace globs does not reorder either.
+ *
+ * **The population is the library family, never an application.** The split is
+ * `classifyWorkspaceMembers`' — a glob workspace entry enumerates a family, a
+ * literal names one deployable — and it is the right one here for the reason
+ * R2.3 gives: an application's own sources are covered by Tailwind's automatic
+ * detection, rooted at the project it builds, so it neither needs nor could
+ * publish a `./tailwind.css`. It also publishes nothing at all, which is what
+ * makes an `exports` entry there meaningless.
+ */
+export declare function tailwindScannablePackages(repoRoot: string, fs?: WorkspaceFs, listFiles?: FileLister): readonly TailwindScannablePackage[];
+/** The real filesystem behind {@link FileLister}. Absence is `[]`, never a throw. */
+export declare function nodeFileLister(): FileLister;
+/**
+ * One package's `./tailwind.css`, rendered (R1.2).
+ *
+ * Two lines per layer, the emitted one first. The `src` line is inert in a
+ * published tarball, which ships no `src` — a missing `@source` directory is
+ * skipped rather than an error (M12) — and it is there so that this
+ * repository's own `pnpm --filter admin run dev` keeps scanning source and does
+ * not need a package rebuild to see a class, which is the one property the glob
+ * it replaces had.
+ *
+ * The file is generated rather than written by hand for the reason M12 states:
+ * a mistyped `@source` is silent, and the remedy for a silent path is that no
+ * human types it.
+ */
+export declare function renderTailwindStylesheet(pkg: TailwindScannablePackage): string;
+/** Where one package's stylesheet lands: the package root, beside `package.json`. */
+export declare function tailwindStylesheetPathOf(pkg: TailwindScannablePackage): string;
+//# sourceMappingURL=tailwind-sources.d.ts.map

package/dist/lib/tailwind-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailwind-sources.d.ts","sourceRoot":"","sources":["../../src/lib/tailwind-sources.ts"],"names":[],"mappings":"AAgEA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,yBAAyB,CAAC;AAGjC,gFAAgF;AAChF,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,2BAA2B,CAAC;AAEnE,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAEtD;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,iBAAiB,CAAC;AAE1D,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qEAAqE;AACrE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACpD;AAED,iFAAiF;AACjF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAkB,IAAI,yBAAyB;CAChD;AAgBD,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAExE;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAExE;AAgCD,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;AAE7D;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,SAAS,MAAM,EAAE,EACpC,IAAI,EAAE,UAAU,GACf,SAAS,sBAAsB,EAAE,CAKnC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,eAAe,EACvB,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,UAAU,GACpB,SAAS,sBAAsB,EAAE,CAuBnC;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,WAAW,GACd,SAAS,MAAM,EAAE,CAKnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE,WAA+B,EACnC,SAAS,GAAE,UAA6B,GACvC,SAAS,wBAAwB,EAAE,CAcrC;AAED,qFAAqF;AACrF,wBAAgB,cAAc,IAAI,UAAU,CAW3C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAoB9E;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAE9E"}

package/dist/lib/tailwind-sources.js

@@ -0,0 +1,307 @@
+/**
+ * Which packages ship scannable UI, and what their own `./tailwind.css` says
+ * (`specs/110-instance-repository/contracts/admin-stylesheet-composition.md`,
+ * R1 and R2.2; FR-023).
+ *
+ * ## The defect, stated once
+ *
+ * `admin/src/index.css` reached every package's UI with
+ * `@source "../../packages/**"`. In this repository that is correct; in a
+ * client's instance it names a directory that is not there, because under D-207
+ * the shell and the module packages are **installed**. Tailwind emits no
+ * diagnostic for a source that matches nothing (§1, M12), so the instance's
+ * admin would build green and render every screen unstyled.
+ *
+ * The repair inverts the direction: a package names **its own** layers, in a
+ * stylesheet it publishes at `./tailwind.css`, and the host imports it by name.
+ * That converts the two silent failures into build errors — an undeclared
+ * subpath is `ERR_PACKAGE_PATH_NOT_EXPORTED` (M9) and a missing package is
+ * `Can't resolve` (M10) — and `@source` resolves relative to the stylesheet
+ * that declares it (M7), so the package needs to know nothing about where it
+ * was installed.
+ *
+ * ## Why this derivation is shared rather than repeated
+ *
+ * Three programs need one answer to *"does this package ship scannable UI, and
+ * where"*: `manifests:generate` renders the stylesheet and its `exports`/`files`
+ * entries (R1.4), `composer:generate` renders `admin/src/tailwind.generated.css`
+ * over the packages that declare the subpath (R2.1), and the guard
+ * (`backend/scripts/tailwind-source-scan.ts`) plants a probe in each directory and
+ * asserts the compiled stylesheet carries it (T125). Two derivations of one
+ * population are two answers waiting to disagree, and the disagreement here is
+ * invisible: the stylesheet would name a directory the guard never probes, or
+ * the guard would probe a directory nothing declares.
+ *
+ * ## What decides the population, and what does not
+ *
+ * Nothing here names a package. R4.3 asks *"do this package's components take
+ * the host's design tokens?"*, and the answer a program can read is the subpath
+ * the package **declares**: a package that publishes a finished stylesheet at
+ * `./styles.css` compiled its own CSS and the host imports the bytes (R4.2), so
+ * it is excluded — that is the whole of `cms-components`' exclusion, derived
+ * rather than written down (D-100).
+ *
+ * Beyond that exclusion there are two shapes of scannable package and the
+ * package's own `endora` block says which:
+ *
+ *  * a **module package** ships UI in its declared UI layers, and only there
+ *    (R1.2) — `src/admin/` and `src/admin-ui/`, the same inventory that decides
+ *    whether it declares `./admin`;
+ *  * a **library family member** whose whole build is UI (R1.3) declares its
+ *    whole `src` and its whole emit directory, because it has no layer
+ *    structure to narrow to.
+ *
+ * A family member ships scannable UI iff it ships a `.tsx` source: that is a
+ * fact about what is in the package rather than a name, and it fails in the safe
+ * direction — a package that grows a React component grows its declaration in
+ * the same regeneration. Reading `react` out of `peerDependencies` would answer
+ * the same for this tree and would be a **generated** manifest field answering a
+ * question that decides another generated field, which is a derivation reading
+ * its own output.
+ */
+import { readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { readEmitLayout } from './module-packages.js';
+import { classifyWorkspaceMembers, nodeWorkspaceFs, } from './workspace-packages.js';
+import { UI_LAYER_DIRECTORIES } from './ui-layer.js';
+/** The subpath a package publishes its own `@source` declarations at (R1.1). */
+export const TAILWIND_SOURCE_SUBPATH = './tailwind.css';
+/**
+ * The generated stylesheet the host imports, beside the admin contribution
+ * registry (R2.1/R2.5).
+ *
+ * It sits in the admin project's own source root — found through the `"@/*"`
+ * tsconfig alias, like every other admin derivation — so an instance's copy
+ * lands in the client's tree and this repository's lands in `admin/src/`. In an
+ * instance it is a **build input** rather than a committed file (R2.4): which
+ * packages were installed is a fact about the process. Here it is committed and
+ * held to `overlay:check`'s four verdicts, which is R7.6 — a shape we cannot
+ * adopt ourselves is one we may not ask a client for, and it is what makes our
+ * own admin build the instance's mechanism on every pipeline.
+ */
+export const TAILWIND_REGISTRY_ARTEFACT = 'tailwind.generated.css';
+/** The file that subpath names, at the package root beside `package.json`. */
+export const TAILWIND_SOURCE_FILE = 'tailwind.css';
+/**
+ * The subpath the admin's **design system** is published at — its custom-property
+ * vocabulary and its class vocabulary, in one file (R3.1/R3.4, and R4.3 + R4.4
+ * for the two kinds it carries).
+ *
+ * Which package publishes it is derived and never written down: it is the one
+ * every renderer already declares, which is `@endora-commerce/admin-kit` today
+ * and would be `@endora-commerce/admin-shell` if the kit family folded into it
+ * (owner ruling D-219). T126 published it from the shell, where 11 module
+ * packages would have rendered classes defined by a package they cannot name;
+ * T129 moved it.
+ *
+ * A *different kind of file* from the two around it, which is why it is a
+ * different subpath and not a second entry in either (R3.3). `./tailwind.css` is
+ * a source declaration whose order is irrelevant; `./styles.css` is finished
+ * bytes the host does not compile. This one is neither: the host compiles it,
+ * against the host's own `@theme`, and the order of its `@theme` and `:root`
+ * declarations is exactly what decides whether an instance's redeclaration wins.
+ *
+ * Unlike its neighbour it is **hand-written**, because there is nothing to
+ * derive a palette from — R1.4's argument for generating `./tailwind.css` is
+ * that a mistyped `@source` is silent, and a mistyped colour is not.
+ */
+export const THEME_STYLESHEET_SUBPATH = './theme.css';
+/**
+ * The subpath a package publishes a **finished** stylesheet at (R4.2).
+ *
+ * A package declaring it is excluded from R1: the host imports its bytes and
+ * must not also scan it, which R4.4 measures as three unprefixed utilities
+ * emitted into the admin bundle for a component whose every class is prefixed.
+ */
+export const PREBUILT_STYLESHEET_SUBPATH = './styles.css';
+/** Raised when a package's scannable layers cannot be derived. Never a guess. */
+export class TailwindSourceError extends Error {
+    name = 'TailwindSourceError';
+}
+/** Does this member's own `endora` block declare it a module package? */
+function declaresModule(member) {
+    const endora = member.manifest['endora'];
+    if (typeof endora !== 'object' || endora === null || Array.isArray(endora))
+        return false;
+    return endora['type'] === 'module';
+}
+/** The `exports` map a member declares, as a plain record. */
+function exportsOf(member) {
+    const declared = member.manifest['exports'];
+    if (typeof declared !== 'object' || declared === null || Array.isArray(declared))
+        return {};
+    return declared;
+}
+/** Does this member publish a finished stylesheet, and therefore owe no sources (R4.2)? */
+export function shipsPrebuiltStylesheet(member) {
+    return exportsOf(member)[PREBUILT_STYLESHEET_SUBPATH] !== undefined;
+}
+/** Does this member declare `./tailwind.css` — R2.1's predicate, read off the map? */
+export function declaresTailwindSources(member) {
+    return exportsOf(member)[TAILWIND_SOURCE_SUBPATH] !== undefined;
+}
+/**
+ * `src/admin` → `dist/admin`, and `src` → `dist`, through the package's own
+ * build declaration.
+ *
+ * The whole-root case is the one worth naming: `tsc` emits a file at
+ * `rootDir/x` to `outDir/x`, so the *root itself* maps to `outDir` and not to
+ * `outDir/rootDir`. Getting it wrong is silent in the direction this whole
+ * contract is about — `@source "./dist/src"` names a directory that is not
+ * there, which Tailwind skips without a word (M12).
+ */
+function emittedDirectoryOf(emit, sourceDirectory) {
+    const prefix = emit.rootDir === '' ? '' : `${emit.rootDir}/`;
+    const within = sourceDirectory === emit.rootDir
+        ? ''
+        : sourceDirectory.startsWith(prefix)
+            ? sourceDirectory.slice(prefix.length)
+            : sourceDirectory;
+    if (within === '')
+        return emit.outDir === '' ? '.' : emit.outDir;
+    return emit.outDir === '' ? within : `${emit.outDir}/${within}`;
+}
+/** Does a directory hold a `.tsx` file, at any depth? */
+function holdsComponent(directory, fs, listFiles) {
+    if (listFiles(directory).some((name) => name.endsWith('.tsx')))
+        return true;
+    return fs
+        .listDirectories(directory)
+        .some((name) => holdsComponent(join(directory, name), fs, listFiles));
+}
+/**
+ * The layers a package asks the host to scan, given the source directories its
+ * inventory holds and the build layout it declares.
+ *
+ * Exported because the manifest generator has already read both — it renders
+ * every `exports` target through the same {@link EmitLayout} — and asking the
+ * filesystem a second time there would be a second answer to *"which layers
+ * does this package publish"*, in the one file whose whole job is that
+ * question.
+ */
+export function scannableLayersFrom(sourceDirectories, emit) {
+    return sourceDirectories.map((source) => ({
+        emitted: emittedDirectoryOf(emit, source),
+        source,
+    }));
+}
+/**
+ * The layers one member asks the host to scan, or `[]` when it ships no UI.
+ *
+ * @throws TailwindSourceError when a member that ships UI declares no build
+ * layout: the emitted half of every declaration is read out of
+ * `tsconfig.build.json`, and guessing `dist` would be the one spelling this
+ * whole mechanism exists to stop a host from writing (§4(b)).
+ */
+export function scannableLayersOf(member, fs, listFiles) {
+    // R4.2, and it is asked first: a package that publishes finished CSS owes no
+    // source declaration whatever else it ships.
+    if (shipsPrebuiltStylesheet(member))
+        return [];
+    const sourceDirectories = declaresModule(member)
+        ? moduleUiSourceDirectories(member.dir, fs)
+        : holdsComponent(join(member.dir, 'src'), fs, listFiles)
+            ? ['src']
+            : [];
+    if (sourceDirectories.length === 0)
+        return [];
+    const emit = readEmitLayout(member.dir, member.name, fs);
+    if (emit === null) {
+        throw new TailwindSourceError(`${member.name} ships scannable UI (${sourceDirectories.join(', ')}) and declares no ` +
+            `tsconfig.build.json. Its \`@source\` lines name what the build emits, and where a ` +
+            `build puts its output is not something this derivation may assume — writing 'dist' ` +
+            `here would be the host naming a directory inside a package, which is exactly the ` +
+            `silent failure (M12) R1 exists to remove.`);
+    }
+    return scannableLayersFrom(sourceDirectories, emit);
+}
+/** The UI layers a module package's `src/` holds, in {@link UI_LAYER_DIRECTORIES} order. */
+export function moduleUiSourceDirectories(packageDir, fs) {
+    const present = fs.listDirectories(join(packageDir, 'src'));
+    return UI_LAYER_DIRECTORIES.filter((layer) => present.includes(layer)).map((layer) => `src/${layer}`);
+}
+/**
+ * Every workspace member that ships scannable UI, sorted by package name.
+ *
+ * The sort is the artefact's order (R2.1) and the guard's, so a package moving
+ * in the workspace globs does not reorder either.
+ *
+ * **The population is the library family, never an application.** The split is
+ * `classifyWorkspaceMembers`' — a glob workspace entry enumerates a family, a
+ * literal names one deployable — and it is the right one here for the reason
+ * R2.3 gives: an application's own sources are covered by Tailwind's automatic
+ * detection, rooted at the project it builds, so it neither needs nor could
+ * publish a `./tailwind.css`. It also publishes nothing at all, which is what
+ * makes an `exports` entry there meaningless.
+ */
+export function tailwindScannablePackages(repoRoot, fs = nodeWorkspaceFs(), listFiles = nodeFileLister()) {
+    const found = [];
+    for (const member of classifyWorkspaceMembers(repoRoot, fs).members) {
+        if (!member.family)
+            continue;
+        const layers = scannableLayersOf(member, fs, listFiles);
+        if (layers.length === 0)
+            continue;
+        found.push({
+            name: member.name,
+            dir: member.dir,
+            isModule: declaresModule(member),
+            layers,
+        });
+    }
+    return found.sort((left, right) => (left.name < right.name ? -1 : left.name > right.name ? 1 : 0));
+}
+/** The real filesystem behind {@link FileLister}. Absence is `[]`, never a throw. */
+export function nodeFileLister() {
+    return (path) => {
+        try {
+            return readdirSync(path, { withFileTypes: true })
+                .filter((entry) => entry.isFile())
+                .map((entry) => entry.name)
+                .sort();
+        }
+        catch {
+            return [];
+        }
+    };
+}
+/**
+ * One package's `./tailwind.css`, rendered (R1.2).
+ *
+ * Two lines per layer, the emitted one first. The `src` line is inert in a
+ * published tarball, which ships no `src` — a missing `@source` directory is
+ * skipped rather than an error (M12) — and it is there so that this
+ * repository's own `pnpm --filter admin run dev` keeps scanning source and does
+ * not need a package rebuild to see a class, which is the one property the glob
+ * it replaces had.
+ *
+ * The file is generated rather than written by hand for the reason M12 states:
+ * a mistyped `@source` is silent, and the remedy for a silent path is that no
+ * human types it.
+ */
+export function renderTailwindStylesheet(pkg) {
+    const lines = [
+        `/* ${pkg.name} — AUTO-GENERATED by \`pnpm --filter backend run manifests:generate\`.`,
+        ` *`,
+        ` * The \`@source\` directives this package asks its host to scan`,
+        ` * (\`specs/110-instance-repository/contracts/admin-stylesheet-composition.md\` R1).`,
+        ` * They resolve relative to **this file**, so they hold wherever the package is`,
+        ` * installed — a workspace link here, \`node_modules\` in a client's instance.`,
+        ` *`,
+        ` * The \`dist\` line is what a published tarball ships and is what an instance`,
+        ` * scans; the \`src\` line is inert there and is what keeps \`pnpm --filter admin`,
+        ` * run dev\` reading source in this repository. Do not edit: run`,
+        ` * \`pnpm --filter backend run manifests:generate\`.`,
+        ` */`,
+    ];
+    for (const layer of pkg.layers) {
+        lines.push(`@source "./${layer.emitted}";`);
+        lines.push(`@source "./${layer.source}";`);
+    }
+    return `${lines.join('\n')}\n`;
+}
+/** Where one package's stylesheet lands: the package root, beside `package.json`. */
+export function tailwindStylesheetPathOf(pkg) {
+    return join(pkg.dir, TAILWIND_SOURCE_FILE);
+}
+//# sourceMappingURL=tailwind-sources.js.map

package/dist/lib/tailwind-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailwind-sources.js","sourceRoot":"","sources":["../../src/lib/tailwind-sources.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,wBAAwB,EACxB,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,gFAAgF;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAqB1D,iFAAiF;AACjF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC1B,IAAI,GAAG,qBAAqB,CAAC;CAChD;AAED,yEAAyE;AACzE,SAAS,cAAc,CAAC,MAAuB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,OAAQ,MAAkC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,8DAA8D;AAC9D,SAAS,SAAS,CAAC,MAAuB;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5F,OAAO,QAAmC,CAAC;AAC7C,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,KAAK,SAAS,CAAC;AACtE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,KAAK,SAAS,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,IAAgB,EAAE,eAAuB;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC;IAC7D,MAAM,MAAM,GACV,eAAe,KAAK,IAAI,CAAC,OAAO;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,eAAe,CAAC;IACxB,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,OAAO,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,yDAAyD;AACzD,SAAS,cAAc,CAAC,SAAiB,EAAE,EAAe,EAAE,SAAqB;IAC/E,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,EAAE;SACN,eAAe,CAAC,SAAS,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAKD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,iBAAoC,EACpC,IAAgB;IAEhB,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC;QACzC,MAAM;KACP,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,EAAe,EACf,SAAqB;IAErB,6EAA6E;IAC7E,6CAA6C;IAC7C,IAAI,uBAAuB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/C,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3C,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;YACtD,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,mBAAmB,CAC3B,GAAG,MAAM,CAAC,IAAI,wBAAwB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YACpF,oFAAoF;YACpF,qFAAqF;YACrF,mFAAmF;YACnF,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CACvC,UAAkB,EAClB,EAAe;IAEf,MAAM,OAAO,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CACxE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,KAAkB,eAAe,EAAE,EACnC,YAAwB,cAAc,EAAE;IAExC,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;YAChC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,IAAY,EAAqB,EAAE;QACzC,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBAC9C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;iBACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAA6B;IACpE,MAAM,KAAK,GAAG;QACZ,MAAM,GAAG,CAAC,IAAI,wEAAwE;QACtF,IAAI;QACJ,kEAAkE;QAClE,sFAAsF;QACtF,iFAAiF;QACjF,gFAAgF;QAChF,IAAI;QACJ,gFAAgF;QAChF,mFAAmF;QACnF,kEAAkE;QAClE,sDAAsD;QACtD,KAAK;KACN,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,GAA6B;IACpE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;AAC7C,CAAC"}

package/dist/lib/ui-layer.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The one name of a module package's UI layer (feature 091).
+ *
+ * It has two readers that must not disagree, and they are on opposite sides of
+ * the build:
+ *
+ *  * `lib/module-package-manifest.ts` renders `"./admin"` into a package's
+ *    `exports` map and switches the package's `build` to a second `tsc`
+ *    invocation when the directory is there;
+ *  * `check-action-route-permissions.ts` **skips** the directory, because its
+ *    subject is Fastify registrations and a screen's `api/*-client.ts` writes
+ *    `apiClient.post(`${BASE}/custom-events`, body)` — a method, a path and no
+ *    `preHandler`, which is indistinguishable from an ungated route at the
+ *    syntax that check reads. The first module to move its admin directory into
+ *    its package therefore made one of its own routes report as gated by
+ *    nothing (feature 091, Phase 4).
+ *
+ * It lives in a file of its own rather than in the manifest generator because
+ * of *where* the second reader runs: `moved-module-tree.test.ts` spawns every
+ * check over a synthetic backend that holds `backend/` and not the repository
+ * root, and `module-package-manifest.ts` imports `scripts/lib/runtime-assets.mjs`
+ * from that root. Importing it for one string turns a check into one that
+ * cannot start in the fixture built to prove the check refuses a moved tree.
+ */
+/** The layer that compiles under `tsconfig.ui.json` rather than the backend build. */
+export declare const ADMIN_LAYER_DIRECTORY = "admin";
+/**
+ * Every UI-layer directory a module package may ship — one declaration, the two
+ * readers above (feature 091, P4a; Z9 of `admin-component-contribution.md`).
+ *
+ * `admin-ui` is the sibling directory D-191's published-component exit lands
+ * in, and it has a name of its own below because a **third** reader needs it
+ * specifically rather than as one of the two: `module-package-manifest.ts`'
+ * R4 refusal has to tell a published component's subpath apart from `./admin`,
+ * which publishes a contribution *descriptor* no other module may name.
+ *
+ * It is a **sibling** and not a second entry file inside `src/admin/`, because
+ * `admin-contribution.md` R2 is *"`src/admin/index.ts` exports exactly one
+ * value"* and a second file in that directory turns the rule into a rule with a
+ * filename carve-out.
+ *
+ * The first two readers take the list rather than the single name, and the
+ * second of them is why
+ * this lands with the mechanism rather than with the first package that ships
+ * the directory: `check-action-route-permissions` skips a UI layer for a reason
+ * that is about **browser code**, not about `admin` in particular — a published
+ * component's `apiClient.post(path, body)` is a method, a path and no
+ * `preHandler`, which is indistinguishable from an ungated route at the syntax
+ * that check reads. A skip that arrives with the directory arrives one merge
+ * request after the false finding.
+ */
+export declare const PUBLISHED_COMPONENT_LAYER_DIRECTORY = "admin-ui";
+export declare const UI_LAYER_DIRECTORIES: readonly string[];
+//# sourceMappingURL=ui-layer.d.ts.map

package/dist/lib/ui-layer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-layer.d.ts","sourceRoot":"","sources":["../../src/lib/ui-layer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,sFAAsF;AACtF,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,mCAAmC,aAAa,CAAC;AAE9D,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAGjD,CAAC"}

package/dist/lib/ui-layer.js

@@ -0,0 +1,57 @@
+/**
+ * The one name of a module package's UI layer (feature 091).
+ *
+ * It has two readers that must not disagree, and they are on opposite sides of
+ * the build:
+ *
+ *  * `lib/module-package-manifest.ts` renders `"./admin"` into a package's
+ *    `exports` map and switches the package's `build` to a second `tsc`
+ *    invocation when the directory is there;
+ *  * `check-action-route-permissions.ts` **skips** the directory, because its
+ *    subject is Fastify registrations and a screen's `api/*-client.ts` writes
+ *    `apiClient.post(`${BASE}/custom-events`, body)` — a method, a path and no
+ *    `preHandler`, which is indistinguishable from an ungated route at the
+ *    syntax that check reads. The first module to move its admin directory into
+ *    its package therefore made one of its own routes report as gated by
+ *    nothing (feature 091, Phase 4).
+ *
+ * It lives in a file of its own rather than in the manifest generator because
+ * of *where* the second reader runs: `moved-module-tree.test.ts` spawns every
+ * check over a synthetic backend that holds `backend/` and not the repository
+ * root, and `module-package-manifest.ts` imports `scripts/lib/runtime-assets.mjs`
+ * from that root. Importing it for one string turns a check into one that
+ * cannot start in the fixture built to prove the check refuses a moved tree.
+ */
+/** The layer that compiles under `tsconfig.ui.json` rather than the backend build. */
+export const ADMIN_LAYER_DIRECTORY = 'admin';
+/**
+ * Every UI-layer directory a module package may ship — one declaration, the two
+ * readers above (feature 091, P4a; Z9 of `admin-component-contribution.md`).
+ *
+ * `admin-ui` is the sibling directory D-191's published-component exit lands
+ * in, and it has a name of its own below because a **third** reader needs it
+ * specifically rather than as one of the two: `module-package-manifest.ts`'
+ * R4 refusal has to tell a published component's subpath apart from `./admin`,
+ * which publishes a contribution *descriptor* no other module may name.
+ *
+ * It is a **sibling** and not a second entry file inside `src/admin/`, because
+ * `admin-contribution.md` R2 is *"`src/admin/index.ts` exports exactly one
+ * value"* and a second file in that directory turns the rule into a rule with a
+ * filename carve-out.
+ *
+ * The first two readers take the list rather than the single name, and the
+ * second of them is why
+ * this lands with the mechanism rather than with the first package that ships
+ * the directory: `check-action-route-permissions` skips a UI layer for a reason
+ * that is about **browser code**, not about `admin` in particular — a published
+ * component's `apiClient.post(path, body)` is a method, a path and no
+ * `preHandler`, which is indistinguishable from an ungated route at the syntax
+ * that check reads. A skip that arrives with the directory arrives one merge
+ * request after the false finding.
+ */
+export const PUBLISHED_COMPONENT_LAYER_DIRECTORY = 'admin-ui';
+export const UI_LAYER_DIRECTORIES = [
+    ADMIN_LAYER_DIRECTORY,
+    PUBLISHED_COMPONENT_LAYER_DIRECTORY,
+];
+//# sourceMappingURL=ui-layer.js.map

package/dist/lib/ui-layer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-layer.js","sourceRoot":"","sources":["../../src/lib/ui-layer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,UAAU,CAAC;AAE9D,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,qBAAqB;IACrB,mCAAmC;CACpC,CAAC"}