@estiva-app/ui 0.27.0 → 0.28.0

package/dist/gates/app-checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-checks.d.ts","sourceRoot":"","sources":["../../src/gates/app-checks.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAA0B,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAE/E,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAA;IACZ,8GAA8G;IAC9G,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACvC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,wGAAwG;IACxG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAqBpD,CAAA;AAaD,wBAAgB,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAS,EAAE,IAAI,EAAE,KAAsC,EAAE,YAA8D,EAAE,OAA8C,EAAE,EAAE,eAAe,GAAG,UAAU,EAAE,CAoLpP"}
+{"version":3,"file":"app-checks.d.ts","sourceRoot":"","sources":["../../src/gates/app-checks.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAA0B,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAE/E,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAA;IACZ,8GAA8G;IAC9G,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAA;IACvC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,wGAAwG;IACxG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAsBpD,CAAA;AAaD,wBAAgB,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAS,EAAE,IAAI,EAAE,KAAsC,EAAE,YAA8D,EAAE,OAA8C,EAAE,EAAE,eAAe,GAAG,UAAU,EAAE,CAgMpP"}

package/dist/gates/{chunk-EA33NP5B.js → chunk-XE6HC5MJ.js}

@@ -216,18 +216,13 @@ export default defineConfig([
   gateLint(),
 ])
 `,
-    "eslint.tokens.config.js": `import { TOKEN_LINT_IGNORES, tokenLint, tokenValues } from '@estiva-app/ui/gates'
+    "eslint.tokens.config.js": `import { tokenConfig } from '@estiva-app/ui/gates'
 import reactHooks from 'eslint-plugin-react-hooks'
-import { defineConfig, globalIgnores } from 'eslint/config'
 
-// The token contract on its own (\`npm run lint:tokens\`). React's hooks plugin is
-// registered with its rules off, so its directives in the source do not break it.
-export default defineConfig([
-  globalIgnores(TOKEN_LINT_IGNORES),
-  { plugins: { 'react-hooks': reactHooks }, linterOptions: { reportUnusedDisableDirectives: 'off' } },
-  tokenLint(),
-  tokenValues(),
-])
+// The token contract on its own (\`npm run lint:tokens\`), the package's piece.
+// React's hooks plugin is named so its directives do not break it; TypeScript's
+// the package names itself.
+export default tokenConfig({ quiet: { 'react-hooks': reactHooks } })
 `,
     "eslint.gates.config.js": `import { gateConfig } from '@estiva-app/ui/gates'
 import reactHooks from 'eslint-plugin-react-hooks'
@@ -236,7 +231,8 @@ import reactHooks from 'eslint-plugin-react-hooks'
  * The UI Guardrails' rules on their own \u2014 \`npm run lint:rules\`, CI's job \`gate\`
  * (GitHub requires it on main: never rename it), and what the editor hook in
  * \`.claude/settings.json\` lints a proposed write with. The package's gate,
- * imported. React's hooks plugin is named so its directives do not break it.
+ * imported. React's hooks plugin is named so its directives do not break it;
+ * TypeScript's the package names itself.
  *
  * A place that keeps something the gate refuses says why, on the line above:
  * \`// @estiva-escape: <reason>\`. Never \`eslint-disable\`: the count refuses it.
@@ -1015,4 +1011,4 @@ export {
   askNpm,
   createApp
 };
-//# sourceMappingURL=chunk-EA33NP5B.js.map
+//# sourceMappingURL=chunk-XE6HC5MJ.js.map

package/dist/gates/chunk-XE6HC5MJ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/gates/create-app.ts"],
+  "sourcesContent": ["/// <reference types=\"node\" />\n/**\n * `create-estiva-app <name>` \u2014 a new Estiva app that runs, with every gate on\n * (UIG-10).\n *\n *   npx -p @estiva-app/ui create-estiva-app leaf [--title Leaf] [--theme light]\n *\n * The command is `create-app-cli.ts`; this file is what it runs, and what a test reads.\n *\n * **It reads only this package** (Katerina's ruling of 17 September, docs/GATES.md\n * \u00A723). Never Peek, never Ship: they are private, and reading them would carry\n * their history into every new app. What a new app needs to run a gate is this\n * package's own \u2014 the rules, the token and gate configs, the hook, the count,\n * gates:status and the checks every app runs \u2014 so the app gets short files that\n * import them, and a gate added later arrives with a version bump.\n *\n * What only a new app has is written here: its first page in the sidebar frame\n * (ruled the same day), its one theme, sign-in the way Ship signs in, its one\n * relay connection the way Peek and Ship hold theirs, its tests, its stories,\n * the CI workflow with the job `gate`, and its README and CLAUDE.md.\n *\n * The relay (UIG-10, reopened 18 September): a made app gets `protocol`,\n * `platform` and `interop` and is connected from its first commit, or runs alone\n * when no relay is set. The wiring is the app's own file, using `platform` as it\n * is \u2014 not a helper in `platform` \u2014 because a package takes code a real app has\n * already run (ADR 0002 \u00A710), and Peek and Ship each hold theirs the same way.\n *\n * Tool versions are this package's own (its devDependencies build and test the\n * same tools). The ones it does not use itself ({@link ASKED_OF_NPM}) are asked of\n * the npm registry when the app is made. The lockfile is the app's first\n * `npm install`; make it on Linux.\n */\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { APP_RULE_IDS } from '../eslint/index'\n\ninterface PackageJson {\n  version: string\n  devDependencies: Record<string, string>\n}\n\nexport interface CreateAppOptions {\n  /** The folder and npm name: lowercase letters, digits and dashes. */\n  name: string\n  /** What the app is called on screen. */\n  title?: string\n  /** One of this package's themes. */\n  theme?: string\n  /** The folder the app's folder is made in. */\n  parent?: string\n  /** The `@estiva-app/ui` dependency, when not this package's own version (a tarball, for a proof). */\n  ui?: string\n  /** Versions of the packages this package does not itself use; asked of npm when absent. */\n  versions?: Record<string, string>\n}\n\nconst here = dirname(fileURLToPath(import.meta.url))\nconst packageRoot = resolve(here, '..', '..')\n\n/** What a made app depends on that this package does not use itself: asked of npm when the app is made. */\nexport const ASKED_OF_NPM = ['@estiva-app/identity', '@estiva-app/interop', '@estiva-app/platform', '@estiva-app/protocol', 'eslint-plugin-react-hooks']\n\n/** The package's themes, read from its tokens.css: `light` is the block with no attribute. */\nexport function themes(): string[] {\n  const css = readFileSync(join(packageRoot, 'tokens.css'), 'utf8')\n  return ['light', ...new Set([...css.matchAll(/data-theme='([\\w-]+)'/g)].map((m) => m[1]))]\n}\n\n/** Every file a new app starts with, by path. Nothing is written. */\nexport function appFiles({ name, title = name, theme = 'light', ui, versions = {} }: CreateAppOptions): Record<string, string> {\n  if (!/^[a-z][a-z0-9-]*$/.test(name)) throw new Error(`\"${name}\" is not a name an app can have: lowercase letters, digits and dashes, starting with a letter`)\n  const known = themes()\n  if (!known.includes(theme)) throw new Error(`\"${theme}\" is not one of the package's themes: ${known.join(', ')}`)\n\n  const pkg = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8')) as PackageJson\n  const own = (dep: string) => {\n    const range = pkg.devDependencies[dep] ?? versions[dep]\n    if (!range) throw new Error(`no version for ${dep}`)\n    return range\n  }\n  const deps = (names: string[]) => Object.fromEntries(names.map((n) => [n, own(n)]))\n\n  const packageJson = {\n    name,\n    private: true,\n    version: '0.0.0',\n    type: 'module',\n    scripts: {\n      dev: 'vite',\n      build: 'tsc -b && vite build',\n      preview: 'vite preview',\n      typecheck: 'tsc -b',\n      lint: 'eslint .',\n      'lint:tokens': 'eslint --config eslint.tokens.config.js .',\n      'lint:rules': 'eslint --config eslint.gates.config.js .',\n      'postlint:rules': `estiva-gates count --repo ${name}`,\n      'gates:status': 'estiva-gates status',\n      'ui:find': 'estiva-ui find',\n      registry: 'estiva-ui build',\n      'registry:check': 'estiva-ui check',\n      test: 'vitest run',\n      storybook: 'storybook dev -p 6006',\n      'build-storybook': 'storybook build',\n    },\n    dependencies: {\n      '@estiva-app/identity': own('@estiva-app/identity'),\n      '@estiva-app/interop': own('@estiva-app/interop'),\n      '@estiva-app/platform': own('@estiva-app/platform'),\n      '@estiva-app/protocol': own('@estiva-app/protocol'),\n      '@estiva-app/ui': ui ?? `^${pkg.version}`,\n      ...deps(['@tabler/icons-react', 'react', 'react-dom']),\n    },\n    devDependencies: deps([\n      '@eslint/js', '@storybook/addon-docs', '@storybook/react-vite', '@testing-library/dom', '@testing-library/react',\n      '@types/node', '@types/react', '@types/react-dom', '@vitejs/plugin-react', 'autoprefixer', 'eslint',\n      'eslint-plugin-better-tailwindcss', 'eslint-plugin-react-hooks', 'globals', 'jsdom', 'postcss', 'storybook',\n      'tailwindcss', 'typescript', 'typescript-eslint', 'vite', 'vitest',\n    ]),\n  }\n\n  const count = { schemaVersion: 1, repo: name, generatedAt: new Date().toISOString(), rules: Object.fromEntries(APP_RULE_IDS.map((id) => [id, { errors: 0, warnings: 0, escapes: 0 }])) }\n  const themeAttr = ` data-theme=\"${theme}\"`\n  const tsBase = {\n    target: 'ES2023',\n    module: 'ESNext',\n    skipLibCheck: true,\n    moduleResolution: 'bundler',\n    allowImportingTsExtensions: true,\n    verbatimModuleSyntax: true,\n    moduleDetection: 'force',\n    noEmit: true,\n    strict: true,\n    noUnusedLocals: false,\n    noUnusedParameters: false,\n    erasableSyntaxOnly: true,\n    noFallthroughCasesInSwitch: true,\n    noUncheckedSideEffectImports: true,\n  }\n  const json = (value: unknown) => `${JSON.stringify(value, null, 2)}\\n`\n\n  return {\n    'package.json': json(packageJson),\n\n    // registry.json: the app's catalogue, written only when `npm run registry` is asked\n    // to. It is built fresh from the code every time it is read, so it is never kept.\n    '.gitignore': ['node_modules', 'dist', 'storybook-static', '*.local', '*.log', '*.tsbuildinfo', '.DS_Store', 'registry.json', ''].join('\\n'),\n\n    '.env.example': `# Estiva ID, for signing in. Copy this file to .env.local and fill both in.\n#\n# Left empty, the app offers no sign-in at all and runs anonymous: it never\n# reaches the real Estiva ID by accident.\n#\n# The app must be registered with that Estiva ID first, as its own app, with\n# this redirect address: the origin the app runs on, and a slash\n# (http://localhost:5173/). The real Estiva ID registers a new app on the\n# server; a local one (http://localhost:8787) in its database.\nVITE_ESTIVA_ID_ORIGIN=\nVITE_ESTIVA_ID_CLIENT_ID=${name}\n\n# The relay: the workspace this app reads and writes.\n#\n# Left empty, the app runs alone. It opens no connection, and its home page says\n# so. It also needs sign-in above: the relay refuses anything before sign-in, so\n# with a relay and no sign-in there is still no connection. And Estiva ID must\n# allow this app to sign in to that relay (the README says how).\n#\n# A relay running on this machine is http://localhost:3000.\nVITE_RELAY_URL=\n`,\n\n    'index.html': `<!doctype html>\n<html lang=\"en\"${themeAttr}>\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>${title}</title>\n  </head>\n  <body>\n    <div id=\"root\"></div>\n    <script type=\"module\" src=\"/src/main.tsx\"></script>\n  </body>\n</html>\n`,\n\n    'tsconfig.json': json({ files: [], references: [{ path: './tsconfig.app.json' }, { path: './tsconfig.node.json' }] }),\n    'tsconfig.app.json': json({\n      compilerOptions: { tsBuildInfoFile: './node_modules/.tmp/tsconfig.app.tsbuildinfo', ...tsBase, useDefineForClassFields: true, lib: ['ES2023', 'DOM', 'DOM.Iterable'], types: ['vite/client'], jsx: 'react-jsx', paths: { '@/*': ['./src/*'] } },\n      include: ['src', '.storybook'],\n    }),\n    'tsconfig.node.json': json({\n      compilerOptions: { tsBuildInfoFile: './node_modules/.tmp/tsconfig.node.tsbuildinfo', ...tsBase, lib: ['ES2023'], types: ['node'] },\n      include: ['vite.config.ts'],\n    }),\n\n    'vite.config.ts': `import { fileURLToPath } from 'node:url'\nimport react from '@vitejs/plugin-react'\nimport { defineConfig } from 'vitest/config'\n\n// \\`react\\` is deduped because @estiva-app/ui declares it a peer: two copies in one\n// tree is the \"invalid hook call\" crash, and it appears at runtime.\nexport default defineConfig({\n  plugins: [react()],\n  resolve: {\n    alias: { '@': fileURLToPath(new URL('./src', import.meta.url)) },\n    dedupe: ['react', 'react-dom'],\n  },\n  test: {\n    environment: 'jsdom',\n  },\n})\n`,\n\n    'tailwind.config.js': `import estiva, { estivaContent } from '@estiva-app/ui/tailwind-preset'\n\n/**\n * The package's preset, and nothing of the app's own: a token is added to the\n * package, in every theme, never here.\n *\n * \\`estivaContent\\` is the package's own files. Tailwind does not merge \\`content\\`\n * from a preset, so without it every class used only by a package part is\n * purged, and the app builds clean while rendering at the wrong size.\n *\n * @type {import('tailwindcss').Config}\n */\nexport default {\n  presets: [estiva],\n  content: [...estivaContent, './index.html', './src/**/*.{ts,tsx}', './.storybook/**/*.{ts,tsx}'],\n}\n`,\n    'postcss.config.js': `export default {\n  plugins: {\n    tailwindcss: {},\n    autoprefixer: {},\n  },\n}\n`,\n\n    'eslint.config.js': `import js from '@eslint/js'\nimport { gateLint, TOKEN_LINT_IGNORES, tokenLint, tokenValues } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\nimport { defineConfig, globalIgnores } from 'eslint/config'\nimport globals from 'globals'\nimport tseslint from 'typescript-eslint'\n\n/**\n * Everything, in one lint (\\`npm run lint\\`, a CI step): TypeScript's and React's\n * recommended rules, the token contract and the UI Guardrails' rules. A new app\n * has no backlog, so all of it is a gate from the first commit.\n *\n * The token contract and the gate are the package's (\\`@estiva-app/ui/gates\\`),\n * imported, never copied: a rule written later arrives with a version bump.\n */\nexport default defineConfig([\n  globalIgnores(TOKEN_LINT_IGNORES),\n  {\n    files: ['**/*.{ts,tsx}'],\n    extends: [js.configs.recommended, tseslint.configs.recommended, reactHooks.configs.flat.recommended],\n    languageOptions: { globals: globals.browser },\n  },\n  tokenLint(),\n  tokenValues(),\n  gateLint(),\n])\n`,\n    'eslint.tokens.config.js': `import { tokenConfig } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\n\n// The token contract on its own (\\`npm run lint:tokens\\`), the package's piece.\n// React's hooks plugin is named so its directives do not break it; TypeScript's\n// the package names itself.\nexport default tokenConfig({ quiet: { 'react-hooks': reactHooks } })\n`,\n    'eslint.gates.config.js': `import { gateConfig } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\n\n/**\n * The UI Guardrails' rules on their own \u2014 \\`npm run lint:rules\\`, CI's job \\`gate\\`\n * (GitHub requires it on main: never rename it), and what the editor hook in\n * \\`.claude/settings.json\\` lints a proposed write with. The package's gate,\n * imported. React's hooks plugin is named so its directives do not break it;\n * TypeScript's the package names itself.\n *\n * A place that keeps something the gate refuses says why, on the line above:\n * \\`// @estiva-escape: <reason>\\`. Never \\`eslint-disable\\`: the count refuses it.\n */\nexport default gateConfig({ quiet: { 'react-hooks': reactHooks } })\n`,\n\n    '.claude/settings.json': json({\n      hooks: {\n        PreToolUse: [{ matcher: 'Edit|Write', hooks: [{ type: 'command', command: 'node \"$CLAUDE_PROJECT_DIR/node_modules/@estiva-app/ui/dist/gates/cli.js\" hook' }] }],\n      },\n    }),\n\n    'scripts/gates-checks.mjs': `import { appChecks } from '@estiva-app/ui/gates'\n\n/**\n * What gates:status checks in ${name}: the gate checks every app runs, from the\n * package (\\`appChecks\\`), and nothing of its own yet. A check about this app's\n * own code goes beside them.\n */\nexport default function define(h) {\n  return { repo: '${name}', tickets: appChecks(h, { page: 'src/pages/HomePage.tsx' }) }\n}\n`,\n    '.gates-count.json': json(count),\n    'docs/GATES-DEBT.md': `# What ${title} owes the gates\n\nNothing. ${title} was made with every gate on, at zero.\n\nIt should stay that way. A place that keeps something the gate refuses says why on\nthe line above it, \\`// @estiva-escape: <reason>\\`, and the count lists it; a whole\nfile that cannot pass yet goes here, with its reason.\n`,\n\n    '.github/workflows/deploy.yml': `name: deploy\n\n# Every pull request and every push to main runs the checks. There is no deploy\n# job yet: a new app has nowhere to go until it has a home. When it does, the job\n# goes here, and it needs \\`check\\` and \\`gate\\` first.\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\nconcurrency:\n  group: deploy-${name}-\\${{ github.ref }}\n  cancel-in-progress: true\n\njobs:\n  check:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: 24\n          cache: npm\n      - run: npm ci\n      - name: Typecheck the app\n        run: npx tsc -b tsconfig.app.json\n      - name: Typecheck the settings files\n        run: npx tsc -b tsconfig.node.json\n      - name: Lint \u2014 everything, the token contract included\n        run: npm run lint\n      - name: Test\n        run: npm test\n      - name: Build\n        run: npm run build\n      # A class only a package part uses reaches the stylesheet only if\n      # tailwind.config.js spreads estivaContent. When it does not, the build still\n      # succeeds and parts render at the wrong size, so this is where it is caught.\n      - name: The package's classes survive Tailwind's purge\n        run: |\n          if ! grep -qr \"max-h-72\" dist/assets/*.css; then\n            echo \"::error::a class used only by @estiva-app/ui is missing from the built CSS \u2014 check estivaContent is spread into tailwind.config.js\"\n            exit 1\n          fi\n\n  # The UI Guardrails' rules, on their own: a raw element, behaviour a part owns\n  # written by hand, a part restyled. \\`npm run lint:rules\\` also writes\n  # .gates-count.json and fails on an eslint-disable that switches a rule off.\n  #\n  # A job of its own, because GitHub can require only a whole job, by its name:\n  # the rule on main requires \\`gate\\`. Renaming it leaves every pull request\n  # waiting for a check that never reports.\n  gate:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: 24\n          cache: npm\n      - run: npm ci\n      - name: Gate lint\n        run: npm run lint:rules\n      # Every part of the app says in one line what it is for, so the catalogue\n      # (\\`npm run ui:find\\`) can offer it before someone builds it again.\n      - name: Every part is described\n        run: npm run registry:check\n`,\n\n    'src/index.css': `@import '@estiva-app/ui/tokens.css';\n@import '@estiva-app/ui/base.css';\n\n@tailwind base;\n@tailwind components;\n@tailwind utilities;\n\nhtml,\nbody,\n#root {\n  height: 100%;\n}\n`,\n    'src/vite-env.d.ts': `/// <reference types=\"vite/client\" />\n\ninterface ImportMetaEnv {\n  readonly VITE_ESTIVA_ID_ORIGIN?: string\n  readonly VITE_ESTIVA_ID_CLIENT_ID?: string\n  readonly VITE_RELAY_URL?: string\n}\n`,\n    'src/config.ts': `/** What the app is called on screen. */\nexport const APP_TITLE = ${JSON.stringify(title)}\n\n/**\n * Estiva ID, or \\`null\\` when this build offers no sign-in at all. Empty is a real\n * mode, not a broken one: the app runs anonymous, and a local build can never\n * reach the real Estiva ID by accident. See .env.example.\n */\nexport const ID_CONFIG: { base: string; clientId: string } | null =\n  import.meta.env.VITE_ESTIVA_ID_ORIGIN && import.meta.env.VITE_ESTIVA_ID_CLIENT_ID\n    ? { base: import.meta.env.VITE_ESTIVA_ID_ORIGIN.replace(/\\\\/+$/, ''), clientId: import.meta.env.VITE_ESTIVA_ID_CLIENT_ID }\n    : null\n\n/**\n * The relay, the workspace this app reads and writes, or \\`null\\` when this build\n * has none. Empty is a real mode too: the app runs alone and opens no connection,\n * and a local build can never reach the real relay by accident. See .env.example.\n */\nexport const RELAY_URL: string | null = import.meta.env.VITE_RELAY_URL?.trim().replace(/\\\\/+$/, '') || null\n\n/** The relay as a person would name it: host and port, no scheme. */\nexport function relayLabel(url: string): string {\n  try {\n    return new URL(url).host\n  } catch {\n    return url\n  }\n}\n`,\n    'src/auth/estivaId.ts': `import { createEstivaId, type ShellReason, type StoredToken } from '@estiva-app/identity'\nimport { ID_CONFIG } from '../config'\n\n/**\n * Signing in with Estiva ID, the way Ship does: \\`@estiva-app/identity\\` holds the\n * flow, this file the app's choices.\n *\n * - The redirect is the origin and a slash, never the current path: Estiva ID\n *   compares it exactly against the one address registered for the app.\n * - The session lives in localStorage, so it outlives a tab; a sign-in's\n *   single-use credentials in sessionStorage, per tab.\n */\nconst client = ID_CONFIG\n  ? createEstivaId({\n      base: ID_CONFIG.base,\n      clientId: ID_CONFIG.clientId,\n      redirectUri: () => \\`\\${window.location.origin}/\\`,\n      storage: () => (typeof localStorage === 'undefined' ? null : localStorage),\n      pendingStore: () => (typeof sessionStorage === 'undefined' ? null : sessionStorage),\n      keyPrefix: '${name}.estiva-id',\n      navigate: (url) => window.location.assign(url),\n    })\n  : null\n\nexport const signInAvailable = client !== null\n\nexport function currentToken(): StoredToken | null {\n  return client?.validToken(Date.now() + 60_000) ?? null\n}\n\nexport function startRenewal(): void {\n  client?.scheduleRenewal()\n}\n\nexport async function beginSignIn(options: { silent?: boolean } = {}): Promise<void> {\n  await client?.beginSignIn(\\`\\${window.location.pathname}\\${window.location.search}\\`, options)\n}\n\nexport function beginSignOut(): void {\n  client?.beginSignOut()\n}\n\nexport async function completeSignIn(): Promise<{ token: StoredToken; returnTo: string }> {\n  if (!client) throw new Error('this build offers no sign-in')\n  return client.completeSignIn(window.location.search)\n}\n\nexport function stashShellReason(reason: ShellReason): void {\n  client?.stashShellReason(reason)\n}\n\nexport function takeShellReason() {\n  return client?.takeShellReason() ?? null\n}\n\nexport function callbackParams(): { code?: string; error?: string } | null {\n  const params = new URLSearchParams(window.location.search)\n  const code = params.get('code') ?? undefined\n  const error = params.get('error') ?? undefined\n  return code || error ? { code, error } : null\n}\n\nexport function clearQuery(): void {\n  window.history.replaceState({}, '', window.location.pathname)\n}\n\nexport function guardAttemptedAt(): number | null {\n  if (typeof sessionStorage === 'undefined') return null\n  const raw = sessionStorage.getItem('estiva.authShell.silentAttempt')\n  const at = raw ? Number(raw) : NaN\n  return Number.isFinite(at) ? at : null\n}\n\n/**\n * Who Estiva ID says this is. Asked of its directory with the token, so the\n * answer also proves Estiva ID accepted the sign-in.\n */\nexport async function whoAmI(): Promise<{ name?: string; email?: string } | null> {\n  const token = currentToken()\n  if (!ID_CONFIG || !token) return null\n  const response = await fetch(\\`\\${ID_CONFIG.base}/directory/\\${token.pubkey}\\`, { headers: { Authorization: \\`Bearer \\${token.accessToken}\\` } })\n  if (!response.ok) return null\n  const entry = (await response.json()) as { displayName?: string; email?: string }\n  return { name: entry.displayName, email: entry.email }\n}\n`,\n    'src/auth/boot.ts': `import { decideBoot, type ShellReason, type ShellState } from '@estiva-app/identity'\nimport {\n  beginSignIn,\n  callbackParams,\n  clearQuery,\n  completeSignIn,\n  currentToken,\n  guardAttemptedAt,\n  signInAvailable,\n  startRenewal,\n  stashShellReason,\n  takeShellReason,\n} from './estivaId'\n\nexport type BootResult = { kind: 'app' } | { kind: 'shell'; state: ShellState } | { kind: 'leaving' }\n\n/**\n * Settle who this load belongs to, before the app renders. The decision is\n * \\`decideBoot\\` from \\`@estiva-app/identity\\`; this is the reading and acting\n * around it. It never throws: a blank page is worse than an honest shell.\n */\nexport async function bootAuth(): Promise<BootResult> {\n  if (!signInAvailable) return { kind: 'app' }\n\n  const action = decideBoot({\n    callback: callbackParams(),\n    hasValidToken: currentToken() !== null,\n    guardAttemptedAt: guardAttemptedAt(),\n    enteredThisPageLoad: false,\n    now: Date.now(),\n  })\n\n  switch (action.do) {\n    case 'enter':\n      startRenewal()\n      return { kind: 'app' }\n    case 'complete_callback':\n      try {\n        await completeSignIn()\n        clearQuery()\n        startRenewal()\n        return { kind: 'app' }\n      } catch (cause) {\n        clearQuery()\n        stashShellReason('exchange_failed')\n        return shell('exchange_failed', cause)\n      }\n    case 'probe_silently':\n      try {\n        await beginSignIn({ silent: true })\n        return { kind: 'leaving' }\n      } catch {\n        return shell('network')\n      }\n    case 'prompt_passkey':\n      return { kind: 'shell', state: { phase: 'authenticating', reason: takeShellReason() ?? action.reason } }\n    case 'fail':\n      return shell(action.reason)\n  }\n}\n\nfunction shell(reason: ShellReason, cause?: unknown): BootResult {\n  if (cause) console.warn('[auth] entry failed:', cause)\n  return { kind: 'shell', state: { phase: 'failed', reason } }\n}\n\nexport async function enterFromShell(): Promise<void> {\n  await beginSignIn()\n}\n`,\n    'src/auth/AuthShell.tsx': `import { CONTINUE_LABEL, isRecoverable, RETRY_LABEL, SHELL_COPY, type ShellState } from '@estiva-app/identity'\nimport { Button } from '@estiva-app/ui'\nimport { APP_TITLE } from '../config'\n\nexport interface AuthShellProps {\n  state: ShellState\n  onContinue: () => void\n}\n\n/**\n * What shows while nobody is signed in: the app's name, one line and at most one\n * button. The words are \\`@estiva-app/identity\\`'s, so every app says the same.\n */\nexport function AuthShell({ state, onContinue }: AuthShellProps) {\n  const waiting = state.phase === 'checking' || state.phase === 'entering' || state.phase === 'ready'\n  return (\n    <div className=\"fixed inset-0 z-50 flex flex-col items-center justify-center gap-4 bg-bg-surface px-6 text-center\">\n      <h1 className=\"text-h3 text-text-primary\">{APP_TITLE}</h1>\n      {!waiting && (\n        <>\n          <p className=\"max-w-prose text-body-2 text-text-secondary\">{SHELL_COPY[state.reason]}</p>\n          {isRecoverable(state.reason) && <Button onClick={onContinue}>{state.phase === 'authenticating' ? CONTINUE_LABEL : RETRY_LABEL}</Button>}\n        </>\n      )}\n    </div>\n  )\n}\n`,\n    'src/relay/client.ts': `import { signViaEstivaId } from '@estiva-app/identity'\nimport { browserOnlineSource, createLiveClientHolder, type LiveClient } from '@estiva-app/platform'\nimport { currentToken } from '../auth/estivaId'\nimport { ID_CONFIG, RELAY_URL } from '../config'\n\n/**\n * The event kinds this app reads. They are the app's own decision, and the one\n * blank a new app fills in: Ship reads seven (projects, issues, changes,\n * messages, comments, deletions and edits), Peek its own. Until there are kinds\n * here the app is connected and reads nothing, which is a correct state.\n */\nexport const KINDS: number[] = []\n\n/**\n * The tab's one relay client. \\`@estiva-app/platform\\` hands out a holder and\n * keeps nothing, so this line is where \"one connection per tab\" lives. The relay\n * signs a connection in once and caps subscriptions per connection, so a\n * connection per component is wrong, not only wasteful; React's StrictMode,\n * which mounts everything twice, is what would show it.\n *\n * Peek and Ship hold theirs the same way. Everything the client needs is handed\n * in and nothing here reads the app's own data, so it could move into\n * \\`@estiva-app/platform\\` as it is, if that is ever worth doing.\n */\nconst holder = createLiveClientHolder()\n\n/**\n * The client, or \\`null\\` when this build cannot have one: no relay is set, or\n * there is no sign-in. The relay refuses anything before sign-in, so a socket\n * without it would only connect, be refused and retry.\n */\nexport function relayClient(): LiveClient | null {\n  const base = ID_CONFIG?.base\n  if (!RELAY_URL || !base) return null\n  return holder.get({\n    relayUrl: RELAY_URL,\n    // Read on every connect, never kept: a token kept from the first connect\n    // outlives a silent renewal as a dead one, and the next reconnect fails.\n    getCredential: () => {\n      const token = currentToken()\n      return token ? { accessToken: token.accessToken, pubkey: token.pubkey } : null\n    },\n    // \\`expectedPubkey\\` is a check, not a request. Estiva ID signs as the token's\n    // owner whatever it is handed, so a mismatch comes back as a valid event\n    // signed by somebody else. Always pass it.\n    sign: (unsigned, token, expectedPubkey) => signViaEstivaId(unsigned, { base, token, expectedPubkey }),\n    online: typeof window === 'undefined' ? undefined : browserOnlineSource(window),\n    // Names this app in the relay's own logs.\n    subscriptionPrefix: '${name}-',\n    log: (message, detail) => console.debug('[relay]', message, detail ?? ''),\n  })\n}\n`,\n    'src/relay/useRelayState.ts': `import type { RelayState } from '@estiva-app/protocol'\nimport { useSyncExternalStore } from 'react'\nimport { relayClient } from './client'\n\nconst subscribe = (onChange: () => void): (() => void) => relayClient()?.onState(onChange) ?? (() => {})\nconst snapshot = (): RelayState | 'off' => relayClient()?.state() ?? 'off'\n\n/** The connection's state, for a page to show: \\`'off'\\` when this build has no client. */\nexport function useRelayState(): RelayState | 'off' {\n  return useSyncExternalStore(subscribe, snapshot, () => 'off')\n}\n`,\n    'src/relay/client.test.ts': `import { afterEach, describe, expect, it, vi } from 'vitest'\n\n/**\n * The tab's one relay connection. A fake socket stands in for the relay, so this\n * runs with no network, and counts the sockets opened.\n */\nclass FakeSocket {\n  static opened = 0\n  onopen: (() => void) | null = null\n  onmessage: ((event: { data: unknown }) => void) | null = null\n  onclose: (() => void) | null = null\n  onerror: (() => void) | null = null\n  constructor() {\n    FakeSocket.opened += 1\n  }\n  send() {}\n  close() {}\n}\n\nafterEach(() => {\n  vi.unstubAllEnvs()\n  vi.unstubAllGlobals()\n  vi.resetModules()\n  FakeSocket.opened = 0\n})\n\ndescribe('the relay client', () => {\n  it('opens no connection when no relay is set', async () => {\n    vi.stubEnv('VITE_RELAY_URL', '')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', 'http://localhost:8787')\n    vi.stubEnv('VITE_ESTIVA_ID_CLIENT_ID', '${name}')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    expect(relayClient()).toBeNull()\n    expect(FakeSocket.opened).toBe(0)\n  })\n\n  it('opens no connection with a relay and no sign-in', async () => {\n    vi.stubEnv('VITE_RELAY_URL', 'http://localhost:3000')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', '')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    expect(relayClient()).toBeNull()\n    expect(FakeSocket.opened).toBe(0)\n  })\n\n  it('holds one connection per tab, however often it is asked', async () => {\n    vi.stubEnv('VITE_RELAY_URL', 'http://localhost:3000')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', 'http://localhost:8787')\n    vi.stubEnv('VITE_ESTIVA_ID_CLIENT_ID', '${name}')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    const first = relayClient()\n    expect(first).not.toBeNull()\n    expect(relayClient()).toBe(first)\n    expect(FakeSocket.opened).toBe(1)\n    first?.close()\n  })\n})\n`,\n    'src/main.tsx': `import { StrictMode } from 'react'\nimport { createRoot } from 'react-dom/client'\nimport './index.css'\nimport { AuthShell } from './auth/AuthShell'\nimport { bootAuth, enterFromShell } from './auth/boot'\n\n// Settle who this load belongs to first, then render: the app itself is imported\n// only once sign-in is settled, so nothing in it evaluates as the wrong person.\nvoid (async () => {\n  const root = createRoot(document.getElementById('root')!)\n  const boot = await bootAuth()\n  if (boot.kind === 'leaving') return\n  if (boot.kind === 'shell') {\n    root.render(\n      <StrictMode>\n        <AuthShell state={boot.state} onContinue={() => void enterFromShell()} />\n      </StrictMode>,\n    )\n    return\n  }\n  const { App } = await import('./App')\n  root.render(\n    <StrictMode>\n      <App />\n    </StrictMode>,\n  )\n})()\n`,\n    'src/App.tsx': `import { AppShell, IdentityMenu, NavItem, Sidebar, type Identity } from '@estiva-app/ui'\nimport { IconHome } from '@tabler/icons-react'\nimport { useEffect, useState } from 'react'\nimport { beginSignOut, currentToken, whoAmI } from './auth/estivaId'\nimport { APP_TITLE, ID_CONFIG, RELAY_URL } from './config'\nimport { HomePage } from './pages/HomePage'\nimport { useRelayState } from './relay/useRelayState'\n\n/** The frame: the package's AppShell with a sidebar, and the one page. */\nexport function App() {\n  const signedIn = currentToken() !== null\n  const [me, setMe] = useState<Identity>({})\n  const relayState = useRelayState()\n\n  useEffect(() => {\n    if (!signedIn) return\n    let live = true\n    void whoAmI().then((who) => {\n      if (live && who) setMe(who)\n    })\n    return () => {\n      live = false\n    }\n  }, [signedIn])\n\n  return (\n    <AppShell\n      logo={APP_TITLE}\n      identity={<IdentityMenu me={me} signedIn={signedIn} idBase={ID_CONFIG?.base} onSignOut={signedIn ? beginSignOut : undefined} />}\n      nav={\n        <Sidebar>\n          <NavItem href=\"/\" label=\"Home\" icon={<IconHome size={16} stroke={1.5} />} active />\n        </Sidebar>\n      }\n    >\n      <HomePage relay={RELAY_URL} state={relayState} name={me.name} />\n    </AppShell>\n  )\n}\n`,\n    'src/pages/HomePage.tsx': `import type { RelayState } from '@estiva-app/protocol'\nimport { EmptyState } from '@estiva-app/ui'\nimport { relayLabel } from '../config'\n\nexport interface HomePageProps {\n  /** The relay this build is set to, or \\`null\\` when the app runs alone. */\n  relay: string | null\n  /** The connection's state: \\`'off'\\` when this build has no client. */\n  state: RelayState | 'off'\n  /** The signed-in person's name, once Estiva ID has said it. */\n  name?: string\n}\n\nconst SAYS: Record<RelayState, (host: string, name?: string) => string> = {\n  connecting: (host) => \\`Connecting to \\${host}\u2026\\`,\n  authenticating: (host) => \\`Signing in to \\${host}\u2026\\`,\n  live: (host, name) => (name ? \\`Connected to \\${host} as \\${name}.\\` : \\`Connected to \\${host}.\\`),\n  reconnecting: (host) => \\`Reconnecting to \\${host}\u2026\\`,\n  failed: (host) => \\`Could not connect to \\${host}.\\`,\n}\n\n/**\n * The first page. What it becomes is this app's own work; until then it says\n * whether the app is connected to the relay, and as whom.\n *\n * The empty state goes straight into the frame's \\`main\\`, with no box around it:\n * \\`main\\` is a flex column, so the empty state takes the room left and centres\n * in it both ways, as its own page says. A box around it would place it\n * instead, and no gate reads a box. The connection is a quiet caption after it,\n * at the foot of the page.\n */\nexport function HomePage({ relay, state, name }: HomePageProps) {\n  const line = !relay\n    ? 'Running alone: no relay is set. Set VITE_RELAY_URL in .env.local to connect.'\n    : state === 'off'\n      ? \\`Not connected: \\${relayLabel(relay)} needs sign-in, and this build has none.\\`\n      : SAYS[state](relayLabel(relay), name)\n  return (\n    <>\n      <EmptyState message=\"Nothing here yet.\" />\n      <p className=\"px-6 pb-6 text-center text-caption text-text-muted\">{line}</p>\n    </>\n  )\n}\n`,\n    'src/pages/HomePage.stories.tsx': `import type { Meta, StoryObj } from '@storybook/react-vite'\nimport { HomePage } from './HomePage'\n\nconst meta = {\n  title: 'Pages/Home',\n  component: HomePage,\n  parameters: { layout: 'fullscreen' },\n  // Stands in for the frame's main: a flex column the height of the screen,\n  // which is what the page is drawn into in the app.\n  decorators: [\n    (Story) => (\n      <div className=\"flex h-screen flex-col\">\n        <Story />\n      </div>\n    ),\n  ],\n} satisfies Meta<typeof HomePage>\n\nexport default meta\ntype Story = StoryObj<typeof meta>\n\n/** No relay set: the app runs alone, the way it starts. */\nexport const RunningAlone: Story = { args: { relay: null, state: 'off' } }\n\n/** A relay set, before it has signed the connection in. */\nexport const Connecting: Story = { args: { relay: 'http://localhost:3000', state: 'connecting' } }\n\n/** Connected, as the person who signed in. */\nexport const Connected: Story = { args: { relay: 'http://localhost:3000', state: 'live', name: 'Alex Kim' } }\n`,\n    'src/App.test.tsx': `import { render, screen } from '@testing-library/react'\nimport { describe, expect, it } from 'vitest'\nimport { App } from './App'\nimport { APP_TITLE } from './config'\n\ndescribe('${title}', () => {\n  it('opens in its frame, anonymous in a build with no sign-in', () => {\n    render(<App />)\n    expect(screen.getAllByText(APP_TITLE).length).toBeGreaterThan(0)\n    expect(screen.getByText('Nothing here yet.')).toBeTruthy()\n    expect(screen.getByText(/^Running alone/)).toBeTruthy()\n    expect(screen.getByRole('link', { name: 'Home' })).toBeTruthy()\n  })\n})\n`,\n\n    '.storybook/main.ts': `import type { StorybookConfig } from '@storybook/react-vite'\n\nconst config: StorybookConfig = {\n  framework: '@storybook/react-vite',\n  stories: ['../src/**/*.stories.@(ts|tsx)'],\n  addons: ['@storybook/addon-docs'],\n}\n\nexport default config\n`,\n    '.storybook/preview.tsx': `import type { Preview } from '@storybook/react-vite'\nimport '../src/index.css'\n\n// The app's one theme, selected the way the app selects it: on <html>.\ndocument.documentElement.dataset.theme = ${JSON.stringify(theme)}\n\nconst preview: Preview = {\n  parameters: { layout: 'centered' },\n}\n\nexport default preview\n`,\n\n    'README.md': `# ${title}\n\nAn Estiva app, made with \\`create-estiva-app\\` from \\`@estiva-app/ui\\`. It starts\nwith the package's sidebar frame, one theme (\\`${theme}\\`), sign-in with Estiva ID,\nand every UI Guardrails gate on, at zero.\n\n## Run it\n\n\\`\\`\\`sh\nnpm install\nnpm run dev\n\\`\\`\\`\n\nWith no settings it runs **anonymous**: no sign-in is offered, and nothing reaches\nthe real Estiva ID. To sign in, copy \\`.env.example\\` to \\`.env.local\\` and fill it in.\nThe app must first be registered with that Estiva ID as its own app.\n\n## The relay\n\n${title} is connected to the relay, the workspace, from its first commit, as\nwhoever signed in. \\`src/relay/client.ts\\` holds the tab's one connection: ask it\nfor \\`relayClient()\\`, and never open a socket of your own. The home page shows the\nconnection's state.\n\nWith \\`VITE_RELAY_URL\\` empty it runs alone and opens no connection. The relay\nalso needs sign-in, so with a relay and no sign-in there is no connection either.\n\nThree packages come with it: \\`@estiva-app/protocol\\` (the wire: events, ids,\nsigning, the relay clients), \\`@estiva-app/platform\\` (the one connection a tab\nholds) and \\`@estiva-app/interop\\` (showing another app's objects, from the\nmanifest that app publishes).\n\n## What you fill in\n\n1. \\`.env.local\\`: Estiva ID and the relay (see \\`.env.example\\`).\n2. \\`KINDS\\` in \\`src/relay/client.ts\\`: the event kinds ${title} reads. Until then\n   it is connected and reads nothing.\n3. The product: its pages, and the fold that turns what arrives on the\n   connection into the app's state.\n\nBefore ${title} can sign in on the real Estiva ID it has to be registered there\nas its own app, with:\n\n- its exact redirect address\n- every event kind it will sign, **including 22242**, the relay's sign-in handshake\n- the relay's address, allowed for that handshake. Estiva ID signs a handshake\n  only for a relay both the app and the deployment allow.\n\nAnything left out fails at the very last step: every screen looks right, and\nnothing arrives.\n\n## The checks\n\n| command | what |\n|---|---|\n| \\`npm run typecheck\\` | TypeScript, the app and its settings files |\n| \\`npm run lint\\` | everything: TypeScript's and React's rules, the token contract, the gate |\n| \\`npm run lint:rules\\` | the gate alone, and \\`.gates-count.json\\` \u2014 CI's job \\`gate\\` |\n| \\`npm test\\` | the tests |\n| \\`npm run build\\` | the build |\n| \\`npm run gates:status\\` | which gates are on, read from the code |\n| \\`npm run ui:find <words>\\` | what the package and this app already have for it |\n| \\`npm run registry:check\\` | every part says what it is for \u2014 CI's job \\`gate\\` |\n| \\`npm run storybook\\` | the stories |\n\nThe gates are the package's, imported rather than copied, so a rule written later\narrives with an ordinary version bump. A Claude session started in this folder is\nstopped before it writes code the gate refuses (\\`.claude/settings.json\\`).\n\n## Once it is on GitHub\n\nRequire the check \\`gate\\` before anything merges into \\`main\\`: a ruleset on \\`main\\`\n(Settings \u2192 Rules \u2192 Rulesets) with \"Require status checks to pass\", the check\n\\`gate\\`, and no one allowed to bypass it. Until then \\`npm run gates:status\\` shows\nUIG-6 as not done.\n`,\n    'CLAUDE.md': `# ${title}, for Claude Code\n\n${title} is an Estiva app. Its parts, tokens and gates come from \\`@estiva-app/ui\\`.\n\n**Use the package's parts, never a raw element or a hand-built look.** The gate\nrefuses a raw control, behaviour a part owns written by hand, and a part restyled\nthrough \\`className\\`, and names what to use instead. It runs before you write\n(the hook in \\`.claude/settings.json\\`, for a session started in this folder), in\n\\`npm run lint:rules\\` and in CI. A session started elsewhere: run\n\\`npm run lint:rules\\` after changing \\`src/\\`, and fix what it reports. Keep something\nonly with its reason on the line above, \\`// @estiva-escape: <reason>\\`, never with\n\\`eslint-disable\\`.\n\n**Tokens only.** Colours, type, corners and shadows come from the package's preset.\n\n**One relay connection per tab.** \\`relayClient()\\` in \\`src/relay/client.ts\\` is the\nconnection. Never open a socket and never make a second holder: the relay signs a\nconnection in once, and caps subscriptions per connection.\n\n**Look before you build.** \\`npm run ui:find <what it does>\\` searches the package's\nparts and this app's own. Use what it finds.\n\n**Every part says what it is for.** A new part gets a one-line \\`/** \u2026 */\\` comment\ndirectly above it. \\`npm run registry:check\\` and CI's job \\`gate\\` refuse a part without one.\n\n**The count starts at zero and stays there** (\\`.gates-count.json\\`, \\`docs/GATES-DEBT.md\\`).\n\nWhat each gate is and how it is wired: the package's README,\n\\`node_modules/@estiva-app/ui/README.md\\`.\n`,\n  }\n}\n\n/** The versions of what this package does not use itself, from the npm registry. */\nexport function askNpm(names: string[]): Record<string, string> {\n  const npm = process.env.npm_execpath\n  const out: Record<string, string> = {}\n  for (const name of names) {\n    const args = ['view', name, 'version']\n    const version = (npm ? execFileSync(process.execPath, [npm, ...args]) : execFileSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', args, { shell: process.platform === 'win32' }))\n      .toString()\n      .trim()\n    if (!/^\\d+\\.\\d+\\.\\d+/.test(version)) throw new Error(`npm did not say which version of ${name} is current: \"${version}\"`)\n    out[name] = `^${version}`\n  }\n  return out\n}\n\n/** Write the app. Refuses a folder that already exists. Returns the folder. */\nexport function createApp(options: CreateAppOptions): string {\n  const dir = resolve(options.parent ?? process.cwd(), options.name)\n  if (existsSync(dir)) throw new Error(`${dir} already exists: create-estiva-app never writes into a folder that is there`)\n  const pkg = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8')) as PackageJson\n  const missing = ASKED_OF_NPM.filter((n) => !pkg.devDependencies[n] && !options.versions?.[n])\n  const versions = { ...(missing.length ? askNpm(missing) : {}), ...options.versions }\n  const files = appFiles({ ...options, versions })\n  for (const [rel, text] of Object.entries(files)) {\n    const path = join(dir, rel)\n    mkdirSync(dirname(path), { recursive: true })\n    writeFileSync(path, text)\n  }\n  return dir\n}\n"],
+  "mappings": ";;;AAgCA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAsB7B,IAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,cAAc,QAAQ,MAAM,MAAM,IAAI;AAGrC,IAAM,eAAe,CAAC,wBAAwB,uBAAuB,wBAAwB,wBAAwB,2BAA2B;AAGhJ,SAAS,SAAmB;AACjC,QAAM,MAAM,aAAa,KAAK,aAAa,YAAY,GAAG,MAAM;AAChE,SAAO,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,SAAS,wBAAwB,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3F;AAGO,SAAS,SAAS,EAAE,MAAM,QAAQ,MAAM,QAAQ,SAAS,IAAI,WAAW,CAAC,EAAE,GAA6C;AAC7H,MAAI,CAAC,oBAAoB,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,IAAI,IAAI,+FAA+F;AAC5J,QAAM,QAAQ,OAAO;AACrB,MAAI,CAAC,MAAM,SAAS,KAAK,EAAG,OAAM,IAAI,MAAM,IAAI,KAAK,yCAAyC,MAAM,KAAK,IAAI,CAAC,EAAE;AAEhH,QAAM,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC9E,QAAM,MAAM,CAAC,QAAgB;AAC3B,UAAM,QAAQ,IAAI,gBAAgB,GAAG,KAAK,SAAS,GAAG;AACtD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,kBAAkB,GAAG,EAAE;AACnD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,UAAoB,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAElF,QAAM,cAAc;AAAA,IAClB;AAAA,IACA,SAAS;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,KAAK;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,MACX,MAAM;AAAA,MACN,eAAe;AAAA,MACf,cAAc;AAAA,MACd,kBAAkB,6BAA6B,IAAI;AAAA,MACnD,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,UAAU;AAAA,MACV,kBAAkB;AAAA,MAClB,MAAM;AAAA,MACN,WAAW;AAAA,MACX,mBAAmB;AAAA,IACrB;AAAA,IACA,cAAc;AAAA,MACZ,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,uBAAuB,IAAI,qBAAqB;AAAA,MAChD,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,kBAAkB,MAAM,IAAI,IAAI,OAAO;AAAA,MACvC,GAAG,KAAK,CAAC,uBAAuB,SAAS,WAAW,CAAC;AAAA,IACvD;AAAA,IACA,iBAAiB,KAAK;AAAA,MACpB;AAAA,MAAc;AAAA,MAAyB;AAAA,MAAyB;AAAA,MAAwB;AAAA,MACxF;AAAA,MAAe;AAAA,MAAgB;AAAA,MAAoB;AAAA,MAAwB;AAAA,MAAgB;AAAA,MAC3F;AAAA,MAAoC;AAAA,MAA6B;AAAA,MAAW;AAAA,MAAS;AAAA,MAAW;AAAA,MAChG;AAAA,MAAe;AAAA,MAAc;AAAA,MAAqB;AAAA,MAAQ;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,EAAE,eAAe,GAAG,MAAM,MAAM,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,OAAO,OAAO,YAAY,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;AACvL,QAAM,YAAY,gBAAgB,KAAK;AACvC,QAAM,SAAS;AAAA,IACb,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,4BAA4B;AAAA,IAC5B,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,IACpB,oBAAoB;AAAA,IACpB,4BAA4B;AAAA,IAC5B,8BAA8B;AAAA,EAChC;AACA,QAAM,OAAO,CAAC,UAAmB,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA;AAElE,SAAO;AAAA,IACL,gBAAgB,KAAK,WAAW;AAAA;AAAA;AAAA,IAIhC,cAAc,CAAC,gBAAgB,QAAQ,oBAAoB,WAAW,SAAS,iBAAiB,aAAa,iBAAiB,EAAE,EAAE,KAAK,IAAI;AAAA,IAE3I,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAUO,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa3B,cAAc;AAAA,iBACD,SAAS;AAAA;AAAA;AAAA;AAAA,aAIb,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASd,iBAAiB,KAAK,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,EAAE,MAAM,sBAAsB,GAAG,EAAE,MAAM,uBAAuB,CAAC,EAAE,CAAC;AAAA,IACpH,qBAAqB,KAAK;AAAA,MACxB,iBAAiB,EAAE,iBAAiB,gDAAgD,GAAG,QAAQ,yBAAyB,MAAM,KAAK,CAAC,UAAU,OAAO,cAAc,GAAG,OAAO,CAAC,aAAa,GAAG,KAAK,aAAa,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE;AAAA,MAC9O,SAAS,CAAC,OAAO,YAAY;AAAA,IAC/B,CAAC;AAAA,IACD,sBAAsB,KAAK;AAAA,MACzB,iBAAiB,EAAE,iBAAiB,iDAAiD,GAAG,QAAQ,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE;AAAA,MACjI,SAAS,CAAC,gBAAgB;AAAA,IAC5B,CAAC;AAAA,IAED,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAkBlB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAiBtB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQrB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA2BpB,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ3B,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgB1B,yBAAyB,KAAK;AAAA,MAC5B,OAAO;AAAA,QACL,YAAY,CAAC,EAAE,SAAS,cAAc,OAAO,CAAC,EAAE,MAAM,WAAW,SAAS,gFAAgF,CAAC,EAAE,CAAC;AAAA,MAChK;AAAA,IACF,CAAC;AAAA,IAED,4BAA4B;AAAA;AAAA;AAAA,iCAGC,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKjB,IAAI;AAAA;AAAA;AAAA,IAGpB,qBAAqB,KAAK,KAAK;AAAA,IAC/B,sBAAsB,UAAU,KAAK;AAAA;AAAA,WAE9B,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOZ,gCAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAYlB,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyDlB,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAajB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQrB,iBAAiB;AAAA,2BACM,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4B5C,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAmBR,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAmEpB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAsEpB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4B1B,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAgDA,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,IAK3B,8BAA8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAY9B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CA8Bc,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CAmBJ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAW9C,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4BhB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAwCf,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA6C1B,kCAAkC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA8BlC,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA,YAKZ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWb,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUtB,0BAA0B;AAAA;AAAA;AAAA;AAAA,2CAIa,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAS5D,aAAa,KAAK,KAAK;AAAA;AAAA;AAAA,iDAGsB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAgBoD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,SAKvD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAoCV,aAAa,KAAK,KAAK;AAAA;AAAA,EAEzB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4BL;AACF;AAGO,SAAS,OAAO,OAAyC;AAC9D,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,CAAC,QAAQ,MAAM,SAAS;AACrC,UAAM,WAAW,MAAM,aAAa,QAAQ,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,aAAa,QAAQ,aAAa,UAAU,YAAY,OAAO,MAAM,EAAE,OAAO,QAAQ,aAAa,QAAQ,CAAC,GACjL,SAAS,EACT,KAAK;AACR,QAAI,CAAC,iBAAiB,KAAK,OAAO,EAAG,OAAM,IAAI,MAAM,oCAAoC,IAAI,iBAAiB,OAAO,GAAG;AACxH,QAAI,IAAI,IAAI,IAAI,OAAO;AAAA,EACzB;AACA,SAAO;AACT;AAGO,SAAS,UAAU,SAAmC;AAC3D,QAAM,MAAM,QAAQ,QAAQ,UAAU,QAAQ,IAAI,GAAG,QAAQ,IAAI;AACjE,MAAI,WAAW,GAAG,EAAG,OAAM,IAAI,MAAM,GAAG,GAAG,6EAA6E;AACxH,QAAM,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC9E,QAAM,UAAU,aAAa,OAAO,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,WAAW,CAAC,CAAC;AAC5F,QAAM,WAAW,EAAE,GAAI,QAAQ,SAAS,OAAO,OAAO,IAAI,CAAC,GAAI,GAAG,QAAQ,SAAS;AACnF,QAAM,QAAQ,SAAS,EAAE,GAAG,SAAS,SAAS,CAAC;AAC/C,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC/C,UAAM,OAAO,KAAK,KAAK,GAAG;AAC1B,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,kBAAc,MAAM,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/gates/create-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../src/gates/create-app.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAA;IACZ,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qGAAqG;IACrG,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAKD,2GAA2G;AAC3G,eAAO,MAAM,YAAY,UAA+H,CAAA;AAExJ,8FAA8F;AAC9F,wBAAgB,MAAM,IAAI,MAAM,EAAE,CAGjC;AAED,qEAAqE;AACrE,wBAAgB,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAY,EAAE,KAAe,EAAE,EAAE,EAAE,QAAa,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAu8B7H;AAED,oFAAoF;AACpF,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAY9D;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAa3D"}
+{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../src/gates/create-app.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAA;IACZ,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qGAAqG;IACrG,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAKD,2GAA2G;AAC3G,eAAO,MAAM,YAAY,UAA+H,CAAA;AAExJ,8FAA8F;AAC9F,wBAAgB,MAAM,IAAI,MAAM,EAAE,CAGjC;AAED,qEAAqE;AACrE,wBAAgB,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAY,EAAE,KAAe,EAAE,EAAE,EAAE,QAAa,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAm8B7H;AAED,oFAAoF;AACpF,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAY9D;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAa3D"}

package/dist/gates/create-app.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   createApp
-} from "./chunk-EA33NP5B.js";
+} from "./chunk-XE6HC5MJ.js";
 
 // src/gates/create-app-cli.ts
 var [name, ...rest] = process.argv.slice(2);

package/dist/gates/gate-config.d.ts

@@ -23,7 +23,7 @@ export interface GateConfigOptions {
      * Plugins whose `eslint-disable` directives appear in the source, registered
      * here with every rule off. ESLint refuses a directive for a rule it does not
      * know, so without them the gate would fail on another lint's comments.
-     * The token lint's names are registered already.
+     * The token lint's names and TypeScript's are registered already (UIG-37).
      */
     quiet?: Record<string, ESLint.Plugin>;
     /** Folders the gate never reads, beside build output. */

package/dist/gates/gate-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-config.d.ts","sourceRoot":"","sources":["../../src/gates/gate-config.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAM5C,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,QAAgB,EAAE,GAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAM,GAAG,MAAM,CAAC,MAAM,CAUtG;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAgB,EAAE,KAAU,EAAE,OAAY,EAAE,GAAE,iBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,CAiBlH"}
+{"version":3,"file":"gate-config.d.ts","sourceRoot":"","sources":["../../src/gates/gate-config.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAM5C,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,QAAQ,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC5B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,QAAgB,EAAE,GAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAM,GAAG,MAAM,CAAC,MAAM,CAUtG;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,EAAE,QAAgB,EAAE,KAAU,EAAE,OAAY,EAAE,GAAE,iBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,CAkBlH"}

package/dist/gates/index.d.ts

@@ -7,6 +7,7 @@
  * here, and an app imports them:
  *
  * - `tokenLint`, `tokenValues` — the token contract's lint settings (UIG-28).
+ * - `tokenConfig` — the token lint on its own, as `lint:tokens` runs it (UIG-37).
  * - `gateLint`, `gateConfig` — where the rules apply, and the gate that runs them alone.
  * - `writeGateCount` — `.gates-count.json` (seam S3).
  * - `runHook` — the editor gate a `PreToolUse` hook runs.
@@ -20,7 +21,7 @@
  * Built by build.mjs into `dist/gates/`, for Node. Nothing here reaches the
  * components' browser bundle.
  */
-export { TOKEN_LINT_IGNORES, tokenLint, tokenValues, type TokenAudience, type TokenLintOptions } from './token-lint';
+export { TOKEN_LINT_IGNORES, tokenConfig, tokenLint, tokenValues, type TokenAudience, type TokenConfigOptions, type TokenLintOptions } from './token-lint';
 export { gateConfig, gateLint, type GateConfigOptions } from './gate-config';
 export { writeGateCount, type CountOptions, type CountResult } from './count';
 export { runHook, type HookOptions, type HookResult } from './hook';

package/dist/gates/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AACnM,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gates/index.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC1J,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AACnM,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAA;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA"}

package/dist/gates/index.js

@@ -11,15 +11,16 @@ import {
   askNpm,
   createApp,
   themes
-} from "./chunk-EA33NP5B.js";
+} from "./chunk-XE6HC5MJ.js";
 
 // src/gates/token-lint.ts
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
 import betterTailwindcss from "eslint-plugin-better-tailwindcss";
 import { getDefaultSelectors } from "eslint-plugin-better-tailwindcss/defaults";
-import { parser as typescriptParser } from "typescript-eslint";
+import { parser as typescriptParser, plugin as typescriptPlugin } from "typescript-eslint";
 var TOKEN_LINT_IGNORES = ["dist/", "storybook-static/", "node_modules/"];
+var KNOWN_PLUGINS = { "@typescript-eslint": typescriptPlugin };
 var CLASS_MAP_SELECTOR = {
   kind: "variable",
   name: "^(?:[A-Z][A-Z0-9_]*_(?:STYLES|CLASSES)|[a-z][a-zA-Z0-9]*(?:Styles|Classes))$",
@@ -164,6 +165,20 @@ function tokenValues({ audience = "app" } = {}) {
     }
   };
 }
+function tokenConfig({ quiet = {}, ignores = [], ...options } = {}) {
+  return [
+    { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },
+    {
+      plugins: { ...KNOWN_PLUGINS, ...quiet },
+      // Every other lint's directives are unused here, because their rules are
+      // off here. Reporting them would be this config complaining about the
+      // others' business.
+      linterOptions: { reportUnusedDisableDirectives: "off" }
+    },
+    tokenLint(options),
+    tokenValues({ audience: options.audience })
+  ];
+}
 
 // src/gates/gate-config.ts
 import betterTailwindcss2 from "eslint-plugin-better-tailwindcss";
@@ -185,6 +200,7 @@ function gateConfig({ audience = "app", quiet = {}, ignores = [] } = {}) {
     { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },
     {
       plugins: {
+        ...KNOWN_PLUGINS,
         ...quiet,
         "better-tailwindcss": betterTailwindcss2,
         "token-values": betterTailwindcss2,
@@ -220,7 +236,8 @@ var APP_TICKET_TITLES = {
   "UIG-27": "The components the apps had to build themselves \u2014 Link, ProgressBar, EmptyState padding",
   "UIG-28": "Close the two holes in the token contract \u2014 arbitrary values, and inline style",
   "UIG-30": "RichText \u2014 one component that draws a message's text, for both apps",
-  "UIG-32": "Peek and Ship take their gate pieces from the package"
+  "UIG-32": "Peek and Ship take their gate pieces from the package",
+  "UIG-37": "The gates refuse a TypeScript eslint-disable comment \u2014 know the rule names, rules off"
 };
 function all(h, steps, label) {
   return async () => {
@@ -245,6 +262,7 @@ function appChecks(h, { app = ".", page, chain = { ref: "UIG-3", owner: false },
   const installed = at("node_modules/@estiva-app/ui/dist/index.d.ts");
   const realPage = () => h.lint({ ...cwd ? { cwd } : {}, config: GATES, file: page, code: h.read(at(page)), expect: "none" });
   const button = component('<button type="button">x</button>');
+  const typescriptDirective = "// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const probe: any = 1\n";
   const ticket = (ref, checks, owner = false) => ({ ref, title: APP_TICKET_TITLES[ref], owner, checks });
   const tokenProbe = (code, expect, mentions, file = PROBE) => all(h, tokenConfigs.map((config) => probe(code, expect, mentions, file, config)), `${tokenConfigs.join(" and ")}: as expected`);
   return [
@@ -419,6 +437,13 @@ ${component('<Button title="Delete">x</Button>')}`, "error", "WithTooltip") }
         () => h.contains("package.json", /"gates:status":\s*"[^"]*(?:estiva-gates|@estiva-app\/ui\/dist\/gates\/cli\.js)[^"]*status/, "gates:status runs the package's engine"),
         () => h.exists("scripts/gates-status.mjs") ? h.FAIL("scripts/gates-status.mjs is a copy of the status engine: run estiva-gates status instead") : h.PASS("no copy of the status engine")
       ], "the gate config, the hook and gates:status are the package's; no copy of the engine") }
+    ]),
+    ticket("UIG-37", [
+      { what: "a TypeScript eslint-disable comment breaks neither the gate nor the token lint", run: all(h, [
+        probe(typescriptDirective, "none"),
+        tokenProbe(typescriptDirective, "none")
+      ], `${[GATES, ...tokenConfigs].join(", ")}: a TypeScript directive is no error`) },
+      { what: "a token lint on its own is the package's tokenConfig, not built by hand", run: () => h.exists(at("eslint.tokens.config.js")) ? h.contains(at("eslint.tokens.config.js"), /\btokenConfig\(/, "eslint.tokens.config.js runs tokenConfig from @estiva-app/ui/gates") : h.PASS("no token lint on its own") }
     ])
   ];
 }
@@ -436,6 +461,7 @@ export {
   runHook,
   runStatus,
   themes,
+  tokenConfig,
   tokenLint,
   tokenValues,
   writeGateCount

package/dist/gates/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/gates/token-lint.ts", "../../src/gates/gate-config.ts", "../../src/gates/app-checks.ts"],
-  "sourcesContent": ["/// <reference types=\"node\" />\n/**\n * The token contract as lint settings, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 this block was pasted into every repo: `eslint.config.js` here,\n * `eslint.tokens.js` in Peek, `eslint.config.js` in Ship. Katerina ruled on 17 September that a\n * gate piece ships in the package and an app imports it, so this is that one\n * copy. Peek and Ship move onto it in UIG-32.\n *\n * Two configs, as the copies had:\n *\n * - `tokenLint` \u2014 a class Tailwind does not generate (the doubled token name,\n *   `bg-bg-surface`), Tailwind's own type ramp or palette, a raw colour, an\n *   opacity modifier on a token colour.\n * - `tokenValues` \u2014 UIG-28: type, corners and shadows written by hand, and an\n *   inline style that sets a colour (errors); heights, spacing and border\n *   widths written by hand (warnings, never blocking).\n *\n * The patterns are the same for everyone. Only the words differ: an app is told\n * to use \"the package\", the package is told to add the token to `tokens.css`.\n * Measured on 17 September: the UIG-28 block was byte for byte the same in Peek\n * and Ship, and this repository's had the same patterns with seven messages\n * worded for the package.\n *\n * Where the plugin looks: every `className`, every `cn()` / `clsx()` argument,\n * and the values of a class map whose name ends in `Styles` / `_STYLES` or\n * `Classes` / `_CLASSES`. A class map named any other way is invisible to it.\n *\n * Tests are out of `tokenValues` (ruling of 13 September): a test mounts markup\n * to test it. A kept hand-written value says why:\n * `// eslint-disable-next-line <rule> -- @estiva-escape: <reason>` (A2).\n */\nimport { createRequire } from 'node:module'\nimport { fileURLToPath } from 'node:url'\nimport type { Linter } from 'eslint'\nimport betterTailwindcss from 'eslint-plugin-better-tailwindcss'\nimport { getDefaultSelectors } from 'eslint-plugin-better-tailwindcss/defaults'\nimport { parser as typescriptParser } from 'typescript-eslint'\n\n/** Who reads the messages. */\nexport type TokenAudience = 'app' | 'package'\n\nexport interface TokenLintOptions {\n  /** The Tailwind config the unknown-class rule reads, relative to where ESLint runs. */\n  tailwindConfig?: string\n  /** `app` (the default) names the package; `package` names `tokens.css` and the preset. */\n  audience?: TokenAudience\n}\n\n/** What the token lint never reads: build output. */\nexport const TOKEN_LINT_IGNORES = ['dist/', 'storybook-static/', 'node_modules/']\n\nconst CLASS_MAP_SELECTOR = {\n  kind: 'variable',\n  name: '^(?:[A-Z][A-Z0-9_]*_(?:STYLES|CLASSES)|[a-z][a-zA-Z0-9]*(?:Styles|Classes))$',\n  match: [{ type: 'strings' }, { type: 'objectValues' }],\n}\n\nconst WORDS = {\n  app: {\n    ramp: \"Tailwind's type ramp is not a token. Use the ramp from the package: text-body-2, text-caption, text-h3, text-btn-default...\",\n    palette: \"Tailwind's palette is not a token. Use a colour from the package (bg-bg-surface, text-text-primary, border-border-subtle...); a colour with no token is a missing token.\",\n    raw: 'A raw colour is a missing token: add it to the package (tokens.css in every theme block, and the preset), or say why not in an eslint-disable comment.',\n    opacity: 'An opacity modifier on a token colour compiles to nothing. A transparent colour is a token of its own (D16): add it to the package.',\n    type: '$0 is type written by hand. A token from the package sets the size, line height, letter spacing and weight together (text-body-2, text-caption, text-h5...); if none fits, add one to the package, or say why not in an eslint-disable comment.',\n    corner: '$0 is a corner written by hand, and no token has it. Use a corner from the package (rounded-sm 4px, rounded-md 6px, rounded-lg 8px...), or say why not in an eslint-disable comment.',\n    shadow: '$0 is a shadow written by hand. Use a shadow from the package (shadow-sm, shadow-md, shadow-focus-ring, drop-shadow-glow-success...); a shadow with no token is a missing token.',\n  },\n  package: {\n    ramp: \"Tailwind's type ramp is not a token. Use the ramp in tailwind-preset.js: text-body-2, text-caption, text-h3, text-btn-default...\",\n    palette: \"Tailwind's palette is not a token. Use a colour from tailwind-preset.js (bg-bg-surface, text-text-primary, border-border-subtle...); a colour with no token is a missing token.\",\n    raw: 'A raw colour is a missing token: add it to tokens.css in every theme block and to the preset, or say why not in an eslint-disable comment.',\n    opacity: 'An opacity modifier on a token colour compiles to nothing. A transparent colour is a token of its own (D16): add it to tokens.css in every theme block and to the preset.',\n    type: '$0 is type written by hand. A token from tailwind-preset.js sets the size, line height, letter spacing and weight together (text-body-2, text-caption, text-h5...); if none fits, add one to the preset and to cn.ts, or say why not in an eslint-disable comment.',\n    corner: '$0 is a corner written by hand, and no token has it. Use a corner from tailwind-preset.js (rounded-sm 4px, rounded-md 6px, rounded-lg 8px...), or say why not in an eslint-disable comment.',\n    shadow: '$0 is a shadow written by hand. Use a shadow from tailwind-preset.js (shadow-sm, shadow-md, shadow-focus-ring, drop-shadow-glow-success...); a shadow with no token is a missing token.',\n  },\n} satisfies Record<TokenAudience, Record<string, string>>\n\n/**\n * The class rules. `no-unknown-classes` reads the app's own Tailwind config, so\n * it knows exactly what the preset and the app generate.\n */\nexport function tokenLint({ tailwindConfig = 'tailwind.config.js', audience = 'app' }: TokenLintOptions = {}): Linter.Config {\n  const words = WORDS[audience]\n  return {\n    files: ['**/*.{ts,tsx}'],\n    languageOptions: {\n      parser: typescriptParser,\n      parserOptions: { ecmaFeatures: { jsx: true } },\n    },\n    plugins: { 'better-tailwindcss': betterTailwindcss },\n    settings: {\n      'better-tailwindcss': {\n        tailwindConfig,\n        selectors: [...getDefaultSelectors(), CLASS_MAP_SELECTOR],\n      },\n    },\n    rules: {\n      'better-tailwindcss/no-unknown-classes': 'error',\n      'better-tailwindcss/no-restricted-classes': [\n        'error',\n        {\n          restrict: [\n            { pattern: '^(?:[a-z0-9-]+:)*text-(?:xs|sm|base|lg|xl|[2-9]xl)$', message: words.ramp },\n            {\n              pattern:\n                '^(?:[a-z0-9-]+:)*(?:text|bg|border|ring|outline|fill|stroke|decoration|divide|placeholder|from|via|to|accent|caret|shadow)-(?:black|white|slate|gray|zinc|neutral|stone|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|violet|purple|fuchsia|pink|rose)(?:-[0-9]{2,3})?(?:/[0-9]{1,3})?$',\n              message: words.palette,\n            },\n            { pattern: '^(?:[a-z0-9-]+:)*[a-z-]+-\\\\[[^\\\\]]*(?:#[0-9a-fA-F]{3}|rgba?\\\\(|hsla?\\\\(|oklch\\\\()', message: words.raw },\n            {\n              pattern: '^(?:[a-z0-9-]+:)*(?:text|bg|border|ring|outline|fill|stroke|decoration|divide|placeholder|from|via|to|accent|caret|shadow)-(?:bg|text|border|accent|info|warning|success|error)-[a-z-]+/[0-9]{1,3}$',\n              message: words.opacity,\n            },\n          ],\n        },\n      ],\n    },\n  }\n}\n\n// UIG-28's patterns. The variant part reads arbitrary variants too\n// (`[&_pre]:`, `data-[state]:`, `group-hover/row:`). A colour inside `text-[\u2026]`\n// is left to the raw-colour rule of `tokenLint`.\nconst V = '^(?:(?:[^:\\\\[\\\\]\\\\s]|\\\\[[^\\\\]]*\\\\])+:)*!?'\nconst NOT_COLOUR = '(?!color:|#|rgba?\\\\(|hsla?\\\\(|oklch\\\\(|var\\\\()'\nconst HAND_WRITTEN = {\n  type: `${V}(?:text-\\\\[${NOT_COLOUR}|text-\\\\[length:|leading-\\\\[|tracking-\\\\[)[^\\\\]]+\\\\](?:/\\\\S*)?$`,\n  corner: `${V}rounded(?:-(?:t|r|b|l|s|e|tl|tr|br|bl|ss|se|es|ee))?-\\\\[[^\\\\]]+\\\\]$`,\n  shadow: `${V}(?:shadow|drop-shadow)-\\\\[(?!color:)[^\\\\]]+\\\\]$`,\n  spacing: `${V}-?(?:w|h|size|min-w|min-h|max-w|max-h|p[xytrblse]?|m[xytrblse]?|gap(?:-[xy])?|space-[xy]|inset(?:-[xy])?|top|right|bottom|left|translate-[xy]|basis|indent|scroll-[mp][xytrblse]?|border-spacing(?:-[xy])?)-\\\\[[^\\\\]]+\\\\]$`,\n  width: `${V}(?:border(?:-[xytrblse])?|divide-[xy]|outline|ring|ring-offset)-\\\\[(?:length:)?-?[0-9.]+(?:px|rem|em)?\\\\]$`,\n}\n\nconst INLINE_STYLE_TOKEN_PROPERTIES =\n  '/^(color|background|backgroundColor|backgroundImage|fill|stroke|fontSize|border|borderTop|borderRight|borderBottom|borderLeft|borderBlock|borderInline|borderStyle|boxShadow|textShadow)$|Color$/'\n\ninterface Preset {\n  theme: { extend: { fontSize: Record<string, string | [string, unknown]>; borderRadius: Record<string, string> } }\n}\n\n/**\n * The preset, loaded the way Tailwind loads it: it imports `tailwindcss/plugin`,\n * which a plain `import` cannot resolve. Read from beside this module, so an app\n * and this repository read the one preset the package ships.\n */\nfunction loadPreset(): Preset {\n  const require = createRequire(import.meta.url)\n  const loadConfig = require('tailwindcss/loadConfig') as (path: string) => Preset\n  return loadConfig(fileURLToPath(new URL('../../tailwind-preset.js', import.meta.url)))\n}\n\n/**\n * UIG-28: the values the tokens already name, written by hand (Katerina's\n * rulings B11, B12, C3 of 13 September and R2 of 15 September). Register it\n * after `tokenLint`, whose parser and plugin settings it borrows. Under its own\n * rule names, `token-values` and `token-spacing` (the same plugin twice, so one\n * runs as errors and one as warnings): an escape for a hand-written size then\n * cannot also silence a raw colour on the same line.\n */\nexport function tokenValues({ audience = 'app' }: Pick<TokenLintOptions, 'audience'> = {}): Linter.Config {\n  const words = WORDS[audience]\n  const preset = loadPreset()\n  // `text-[14px]` names the token of that size, read from the preset, so the\n  // message stays true when the ramp changes.\n  const tokensBySize: Record<string, string[]> = {}\n  for (const [name, value] of Object.entries(preset.theme.extend.fontSize)) {\n    const size = Array.isArray(value) ? value[0] : value\n    ;(tokensBySize[size] ??= []).push(`text-${name}`)\n  }\n  const cornersBySize: Record<string, string[]> = {}\n  for (const [name, size] of Object.entries(preset.theme.extend.borderRadius)) (cornersBySize[size] ??= []).push(name === 'DEFAULT' ? 'rounded' : `rounded-${name}`)\n\n  return {\n    files: ['**/*.{ts,tsx}'],\n    ignores: ['**/*.test.ts', '**/*.test.tsx'],\n    plugins: { 'token-values': betterTailwindcss, 'token-spacing': betterTailwindcss },\n    rules: {\n      'token-values/no-restricted-classes': [\n        'error',\n        {\n          restrict: [\n            ...Object.entries(tokensBySize).map(([size, names]) => ({\n              pattern: `${V}text-\\\\[${size.replace('.', '\\\\.')}\\\\](?:/\\\\S*)?$`,\n              message: `$0 is the type ramp written by hand. Use ${names.join(' or ')}.`,\n            })),\n            {\n              pattern: HAND_WRITTEN.type,\n              message: words.type,\n            },\n            ...Object.entries(cornersBySize).map(([size, names]) => ({\n              pattern: `${V}rounded(?:-(?:t|r|b|l|s|e|tl|tr|br|bl|ss|se|es|ee))?-\\\\[${size.replace('.', '\\\\.')}\\\\]$`,\n              message: `$0 is a corner written by hand. Use ${names.join(' or ')} (with the same side, if it has one).`,\n            })),\n            {\n              pattern: HAND_WRITTEN.corner,\n              message: words.corner,\n            },\n            {\n              pattern: HAND_WRITTEN.shadow,\n              message: words.shadow,\n            },\n          ],\n        },\n      ],\n      'token-spacing/no-restricted-classes': [\n        'warn',\n        {\n          restrict: [\n            {\n              pattern: HAND_WRITTEN.spacing,\n              message: '$0 is a size or a space written by hand. Use a step of the spacing scale (p-3, h-9, gap-2...) if one fits. Reported, not blocked.',\n            },\n            {\n              pattern: HAND_WRITTEN.width,\n              message: '$0 is a border or ring width written by hand. Use border, border-2, ring-1... if one fits. Reported, not blocked.',\n            },\n          ],\n        },\n      ],\n      'no-restricted-syntax': [\n        'error',\n        {\n          selector: `JSXAttribute[name.name=\"style\"] > JSXExpressionContainer > ObjectExpression > Property[key.name=${INLINE_STYLE_TOKEN_PROPERTIES}]`,\n          message: 'An inline style that sets a colour, a font size, a border or a shadow is outside the token contract: use a token class. If the value is computed (a palette, a size from a prop), say why in an eslint-disable comment. Width, height and transforms are fine.',\n        },\n      ],\n    },\n  }\n}\n", "/// <reference types=\"node\" />\n/**\n * Where the UI Guardrails' rules apply, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 every repo wrote this itself: `eslint.gates.js` (the rules and\n * where they apply) and `eslint.gates.config.js` (the gate: those rules alone)\n * in Peek, in Ship's `web/`, and here pointed inward. The rules were always the\n * package's; these two files were copies. Now they are two functions.\n *\n * Where: every `.ts` and `.tsx` under `src`, stories included (a story is what\n * people read and copy), tests not (a test mounts markup to test it) \u2014\n * Katerina's rulings of 13 September; `.ts` since UIG-8. This package's own\n * inward set reads `.tsx` only, as it always has.\n *\n * A place that keeps something says why, on the line above:\n * `// @estiva-escape: <reason>`, or `{/* @estiva-escape: <reason> *\\/}` as a\n * JSX child. Never `eslint-disable`: the count refuses it.\n */\nimport type { ESLint, Linter } from 'eslint'\nimport betterTailwindcss from 'eslint-plugin-better-tailwindcss'\nimport { parser as typescriptParser } from 'typescript-eslint'\nimport estiva from '../eslint/index'\nimport { TOKEN_LINT_IGNORES } from './token-lint'\n\nexport interface GateConfigOptions {\n  /** `app` (the default) runs `configs.recommended`; `package` runs this package's inward set. */\n  audience?: 'app' | 'package'\n  /**\n   * Plugins whose `eslint-disable` directives appear in the source, registered\n   * here with every rule off. ESLint refuses a directive for a rule it does not\n   * know, so without them the gate would fail on another lint's comments.\n   * The token lint's names are registered already.\n   */\n  quiet?: Record<string, ESLint.Plugin>\n  /** Folders the gate never reads, beside build output. */\n  ignores?: string[]\n}\n\n/**\n * The rules and where they apply \u2014 one config object, to add beside\n * everything else an app's `eslint.config.js` runs, so an editor shows a\n * refusal where the element is typed.\n */\nexport function gateLint({ audience = 'app' }: Pick<GateConfigOptions, 'audience'> = {}): Linter.Config {\n  return {\n    ...(audience === 'package' ? estiva.configs.package : estiva.configs.recommended),\n    files: audience === 'package' ? ['src/**/*.tsx'] : ['src/**/*.{ts,tsx}'],\n    ignores: ['**/*.test.ts', '**/*.test.tsx'],\n    languageOptions: {\n      parser: typescriptParser,\n      parserOptions: { ecmaFeatures: { jsx: true } },\n    },\n  }\n}\n\n/**\n * The gate: the rules on their own \u2014 `npm run lint:rules`, CI's job `gate`, and\n * the config the editor hook lints a proposed write with. It fails on a gate\n * rule and on nothing else, so a backlog in the full lint never blocks it.\n */\nexport function gateConfig({ audience = 'app', quiet = {}, ignores = [] }: GateConfigOptions = {}): Linter.Config[] {\n  return [\n    { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },\n    {\n      plugins: {\n        ...quiet,\n        'better-tailwindcss': betterTailwindcss,\n        'token-values': betterTailwindcss,\n        'token-spacing': betterTailwindcss,\n      },\n      // Every other config's directives are unused here, because their rules are\n      // off here. Reporting them would be this config complaining about the\n      // others' business.\n      linterOptions: { reportUnusedDisableDirectives: 'off' },\n    },\n    gateLint({ audience }),\n  ]\n}\n", "/// <reference types=\"node\" />\n/**\n * The gate checks every app runs, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 Peek and Ship each wrote them into their own\n * `scripts/gates-checks.mjs`. 65 different checks for finished tickets, counted\n * on 17 September: 28 were identical in both, 21 were the same check written two\n * ways, 2 read each app's real page, and 14 read code only one app has. This is\n * the first three groups as one list. The fourth stays in the app's own checks\n * file, beside this list.\n *\n * Where Peek and Ship wrote one check two ways, the check here runs both, so it\n * passes wherever either did: the raw-link probe with both of their texts, the\n * token probes against each token config the app has.\n *\n * `scripts/gates-compare.mjs` holds this list to Peek's and Ship's: every check\n * of theirs must be here, or be about code only that app has, or the comparison\n * fails and names it.\n *\n * A check for a ticket not built yet is a first guess at the evidence, taken\n * from the ticket's own text; the ticket that builds it changes it here.\n */\nimport type { CheckResult, GateCheck, GateHelpers, GateTicket } from './status'\n\nexport interface AppCheckOptions {\n  /** Where the app is inside the repository: `web` in Ship, `.` elsewhere. */\n  app?: string\n  /** A real page of the app, relative to the app, full of elements that are not controls. */\n  page: string\n  /** The ticket the gate chain is listed under, and whether this repo owns it: UIG-3 in Peek, UIG-4 in Ship. */\n  chain?: { ref: string; owner: boolean }\n  /** The token lint configs the app has, relative to the app. */\n  tokenConfigs?: string[]\n  /** The name of the app's header component a hand-made header row should name (UIG-22's first guess). */\n  headers?: string[]\n}\n\nexport const APP_TICKET_TITLES: Record<string, string> = {\n  'UIG-2': 'The tracking rails \u2014 GATES.md, the status script, the guide committed',\n  'UIG-3': 'Tracer bullet \u2014 one rule, end to end, blocking in Peek',\n  'UIG-4': 'The same chain, blocking in Ship',\n  'UIG-6': 'Branch protection \u2014 the backstop, all three repos',\n  'UIG-7': 'Lint rule \u2014 every remaining raw element',\n  'UIG-8': 'Lint rule \u2014 forbid the reach',\n  'UIG-9': 'Lint rule \u2014 the className allow-list',\n  'UIG-10': 'create-app \u2014 a command that makes a new Estiva app that runs',\n  'UIG-13': \"The registry widens to Peek's 115 and Ship's 74, with classification\",\n  'UIG-19': 'Lock the contract in CI',\n  'UIG-20': 'The Claude skill, reading the registry',\n  'UIG-21': 'CLAUDE.md becomes an index, not a lecture',\n  'UIG-22': 'Fingerprint \u2014 a hand-made header row',\n  'UIG-23': 'Fingerprint \u2014 a hand-made empty state',\n  'UIG-24': 'Fingerprint \u2014 a browser tooltip where ours belongs',\n  'UIG-25': 'Fingerprint \u2014 a component copied out by hand',\n  'UIG-27': 'The components the apps had to build themselves \u2014 Link, ProgressBar, EmptyState padding',\n  'UIG-28': 'Close the two holes in the token contract \u2014 arbitrary values, and inline style',\n  'UIG-30': 'RichText \u2014 one component that draws a message\\'s text, for both apps',\n  'UIG-32': 'Peek and Ship take their gate pieces from the package',\n}\n\n/** Run several checks as one: the first that does not pass is the answer. */\nfunction all(h: GateHelpers, steps: (() => CheckResult | Promise<CheckResult>)[], label: string): () => Promise<CheckResult> {\n  return async () => {\n    for (const step of steps) {\n      const r = await step()\n      if (r.result !== 'pass') return r\n    }\n    return h.PASS(label)\n  }\n}\n\nexport function appChecks(h: GateHelpers, { app = '.', page, chain = { ref: 'UIG-3', owner: false }, tokenConfigs = ['eslint.tokens.config.js', 'eslint.config.js'], headers = ['ContainerHeader', 'SectionHeader'] }: AppCheckOptions): GateTicket[] {\n  const WEB = app === '.' ? '' : `${app.replace(/\\/$/, '')}/`\n  const cwd = app === '.' ? undefined : app\n  const PROBE = 'src/components/__gates_probe__.tsx'\n  const GATES = 'eslint.gates.config.js'\n  const at = (rel: string) => `${WEB}${rel}`\n  const probe = (code: string, expect: 'error' | 'warning' | 'none', mentions?: string, file = PROBE, config = GATES) => () =>\n    h.lint({ ...(cwd ? { cwd } : {}), config, file, code, expect, mentions })\n  const component = (body: string) => `export function Probe() {\\n  return ${body}\\n}\\n`\n  const installed = at('node_modules/@estiva-app/ui/dist/index.d.ts')\n  const realPage = (): Promise<CheckResult> => h.lint({ ...(cwd ? { cwd } : {}), config: GATES, file: page, code: h.read(at(page)), expect: 'none' })\n  const button = component('<button type=\"button\">x</button>')\n  const ticket = (ref: string, checks: GateCheck[], owner = false): GateTicket => ({ ref, title: APP_TICKET_TITLES[ref], owner, checks })\n\n  const tokenProbe = (code: string, expect: 'error' | 'warning' | 'none', mentions?: string, file = PROBE) =>\n    all(h, tokenConfigs.map((config) => probe(code, expect, mentions, file, config)), `${tokenConfigs.join(' and ')}: as expected`)\n\n  return [\n    ticket('UIG-2', [\n      { what: 'npm run gates:status is wired', run: () => h.script('package.json', 'gates:status') },\n    ]),\n    ticket(chain.ref, [\n      { what: 'the gate lint config loads', run: () => h.loads(at(GATES)) },\n      { what: `${at('package.json')} has lint:rules`, run: () => h.script(at('package.json'), 'lint:rules') },\n      { what: 'CI runs lint:rules', run: () => h.ci('lint:rules') },\n      { what: 'the committed hook runs the gate lint', run: () => h.hook('.claude/settings.json', 'gates') },\n      { what: '.gates-count.json is committed and parses', run: () => h.json(h.exists('.gates-count.json') ? '.gates-count.json' : at('.gates-count.json')) },\n      { what: 'a raw <button> is an error naming Button', run: probe(button, 'error', 'Button') },\n      { what: 'the same in a story', run: probe(button, 'error', 'Button', 'src/stories/__gates_probe__.stories.tsx') },\n      { what: 'a test file is not checked, while source is', run: async () => {\n        const source = await probe(button, 'error', 'Button')()\n        if (source.result !== 'pass') return h.FAIL(`source is not checked yet, so this proves nothing: ${source.detail}`)\n        return probe(button, 'none', undefined, 'src/components/__gates_probe__.test.tsx')()\n      } },\n      { what: 'the debt list exists', run: () => h.file('docs/GATES-DEBT.md') },\n    ], chain.owner),\n    ticket('UIG-6', [\n      { what: 'GitHub requires the check gate to merge into main', run: () => h.protectedBranch(/^gate$/) },\n      { what: \"CI's job gate runs lint:rules\", run: () => h.ciJob('gate', 'lint:rules') },\n    ]),\n    ticket('UIG-7', [\n      { what: 'a raw <input> is an error naming TextInput', run: probe(component('<input />'), 'error', 'TextInput') },\n      { what: 'a raw <a> is an error naming Link', run: all(h, [probe(component('<a href=\"/topics\">Topics</a>'), 'error', 'Link'), probe(component('<a href=\"/issues\">Issues</a>'), 'error', 'Link')], 'a raw <a> is an error naming Link') },\n      { what: 'a raw <form> is an error naming Form, and a file input one naming FilePicker', run: async () => {\n        const form = await probe(component('<form />'), 'error', '`Form`')()\n        if (form.result !== 'pass') return form\n        return probe(component('<input type=\"file\" />'), 'error', 'FilePicker')()\n      } },\n      { what: '<textarea>, <select>, <dialog> and <label> name Textarea, Select, DialogShell and Field', run: async () => {\n        for (const [element, part] of [['textarea', 'Textarea'], ['select', 'Select'], ['dialog', 'DialogShell'], ['label', 'Field']]) {\n          const one = await probe(component(`<${element} />`), 'error', `\\`${part}\\``)()\n          if (one.result !== 'pass') return one\n        }\n        return h.PASS('all four are errors, each naming its part')\n      } },\n      { what: 'an element the package has no part for is an error that says to ask for one', run: probe(component('<iframe title=\"Map\" />'), 'error', 'ask Katerina') },\n      { what: 'an escaped element is not an error, while the same element is', run: async () => {\n        const raw = await probe(component('<form />'), 'error')()\n        if (raw.result !== 'pass') return h.FAIL(`a raw <form> is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe('export function Probe() {\\n  return (\\n    // @estiva-escape: a probe that keeps its element on purpose\\n    <form />\\n  )\\n}\\n', 'none')()\n      } },\n      { what: 'a real page, full of elements that are not controls, gets no error', run: realPage },\n    ]),\n    ticket('UIG-8', [\n      { what: 'a Base UI import is an error naming the part built on it', run: probe(\"import { Popover } from '@base-ui/react/popover'\\nexport const Probe = Popover\\n\", 'error', '`Popover`') },\n      { what: 'createPortal is an error naming the floating parts', run: probe(\"import { createPortal } from 'react-dom'\\nexport const Probe = (to: HTMLElement) => createPortal(<span />, to)\\n\", 'error', '`DialogShell`') },\n      { what: 'a key listener on the whole page is an error, in a .ts file too', run: probe(\"export function listen() {\\n  window.addEventListener('keydown', () => {})\\n}\\n\", 'error', '`DialogShell`', 'src/lib/__gates_probe__.ts') },\n      { what: 'arrow keys by hand are an error; Enter in a field is not', run: async () => {\n        const arrows = await probe(\"export const onKeyDown = (e: KeyboardEvent) => e.key === 'ArrowDown'\\n\", 'error', '`Menu`', 'src/lib/__gates_probe__.ts')()\n        if (arrows.result !== 'pass') return arrows\n        return probe(\"export const onKeyDown = (e: KeyboardEvent) => e.key === 'Enter'\\n\", 'none', undefined, 'src/lib/__gates_probe__.ts')()\n      } },\n      { what: 'a hand-written role=\"option\" is an error naming Select', run: probe(component('<div role=\"option\" />'), 'error', '`Select`') },\n      { what: 'tabIndex={0} on a div is an error; tabIndex={-1} is not', run: async () => {\n        const zero = await probe(component('<div tabIndex={0} />'), 'error', '`Button`')()\n        if (zero.result !== 'pass') return h.FAIL(`tabIndex={0} is not caught yet, so this proves nothing: ${zero.detail}`)\n        return probe(component('<div tabIndex={-1} />'), 'none')()\n      } },\n      { what: 'overflow-y-auto is an error naming ScrollArea', run: probe(component('<div className=\"h-64 overflow-y-auto\" />'), 'error', '`ScrollArea`') },\n      { what: 'an escaped listener is not an error, while the same listener is', run: async () => {\n        const raw = await probe(\"export function listen() {\\n  document.addEventListener('mousedown', () => {})\\n}\\n\", 'error', undefined, 'src/lib/__gates_probe__.ts')()\n        if (raw.result !== 'pass') return h.FAIL(`a page listener is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe(\"export function listen() {\\n  // @estiva-escape: a probe that keeps its listener on purpose\\n  document.addEventListener('mousedown', () => {})\\n}\\n\", 'none', undefined, 'src/lib/__gates_probe__.ts')()\n      } },\n      { what: 'a real page gets no error', run: realPage },\n    ]),\n    ticket('UIG-9', [\n      { what: 'a border passed into Button is an error naming Button', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button className=\"border\">x</Button>')}`, 'error', 'on `Button` changes how it looks') },\n      { what: 'placement passed into Button is not', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button className=\"mt-2 w-full flex-1 relative\">x</Button>')}`, 'none') },\n      { what: 'an escaped look is not an error, while the same look is', run: async () => {\n        const raw = await probe(`import { Link } from '@estiva-app/ui'\\n${component('<Link href=\"/x\" className=\"after:absolute after:inset-0\">x</Link>')}`, 'error', '`Link`')()\n        if (raw.result !== 'pass') return h.FAIL(`a restyled part is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe(`import { Link } from '@estiva-app/ui'\\nexport function Probe() {\\n  return (\\n    // @estiva-escape: a probe that keeps its row link on purpose\\n    <Link href=\"/x\" className=\"after:absolute after:inset-0\">x</Link>\\n  )\\n}\\n`, 'none')()\n      } },\n      { what: 'a real page gets no error', run: realPage },\n    ]),\n    // UIG-10, reopened 18 September: a tab holds one relay client, the way Peek and Ship hold\n    // theirs and a made app is written to. Measured on both mains that day: one each, and no\n    // socket opened any other way. A second holder, or a socket of the app's own, is a second\n    // connection the relay signs in and budgets separately.\n    ticket('UIG-10', [\n      { what: 'the app holds one relay client, at module level, and opens no socket of its own', run: () => {\n        const sources = h.listFiles(at('src'), (n) => /\\.tsx?$/.test(n) && !/\\.(test|stories)\\.tsx?$/.test(n))\n        const own = sources.filter((f) => /\\bcreateLiveClient\\(|\\bcreateLiveRelay\\(|\\bnew WebSocket\\(/.test(h.read(f)))\n        if (own.length) return h.FAIL(`opens a socket of its own (${own.join(', ')}): hold one client from createLiveClientHolder()`)\n        const holders = sources.filter((f) => /^\\s*(?:export\\s+)?const\\s+\\w+\\s*=\\s*createLiveClientHolder\\(\\)/m.test(h.read(f)))\n        if (holders.length !== 1) return h.FAIL(holders.length ? `${holders.length} client holders (${holders.join(', ')}): a tab holds one` : 'no module-level createLiveClientHolder(): the app has no relay client')\n        return h.PASS(`one client for the tab, held in ${holders[0]}`)\n      } },\n    ]),\n    // Built by UIG-13, 18 September. An app's catalogue is built fresh from its code\n    // and never committed: the package is public and the apps are private (Katerina).\n    ticket('UIG-13', [\n      { what: \"npm run ui:find is the package's search, over the package and this app\", run: () => h.contains(at('package.json'), /\"ui:find\":\\s*\"estiva-ui find\\b/, \"ui:find runs the package's estiva-ui find\") },\n      { what: \"npm run registry:check is the package's check\", run: () => h.contains(at('package.json'), /\"registry:check\":\\s*\"estiva-ui check\\b/, 'registry:check runs estiva-ui check') },\n      { what: \"CI's job gate refuses a part with no description\", run: () => h.ciJob('gate', 'registry:check') },\n      // In the .gitignore of the app's own folder, where `estiva-ui build` would write it.\n      { what: 'the catalogue is never committed: git ignores registry.json', run: () => h.contains(at('.gitignore'), /^\\/?registry\\.json\\r?$/m, `${at('.gitignore')} ignores registry.json`) },\n      { what: 'every part is described and sorted, and every file is accounted for', run: () => h.catalogue(at('.')) },\n    ]),\n    ticket('UIG-19', [\n      // The contract runs inside `estiva-ui check`, which the gate job already runs\n      // (UIG-13), so an app changes no script: it takes the package that has it.\n      { what: 'the installed package checks the usage-page contract and the story links', run: () => h.contains(at('node_modules/@estiva-app/ui/dist/registry/cli.js'), 'the usage-page contract', \"the installed estiva-ui check runs the contract\") },\n      { what: \"CI's job gate runs it\", run: () => h.ciJob('gate', 'registry:check') },\n      { what: 'the app keeps no copy of it in its own gates-checks.mjs', run: () => h.exists(at('scripts/gates-checks.mjs')) ? h.lacks(at('scripts/gates-checks.mjs'), '\"When not\"', 'the app checks no page sections itself') : h.PASS('the app has no gates-checks.mjs') },\n    ]),\n    ticket('UIG-20', [\n      { what: 'a committed skill runs ui:find', run: () => (h.listFiles('.claude/skills', (n) => n === 'SKILL.md').some((f) => h.read(f).includes('ui:find')) ? h.PASS('a skill runs ui:find') : h.FAIL('no skill in .claude/skills runs ui:find')) },\n    ]),\n    ticket('UIG-21', [\n      { what: 'path-scoped instructions exist', run: () => (h.listFiles('.claude/rules', (n) => n.endsWith('.md')).some((f) => /^paths:/m.test(h.read(f))) ? h.PASS('.claude/rules has paths: instructions') : h.FAIL('no .claude/rules file with paths:')) },\n    ]),\n    ticket('UIG-22', [\n      { what: 'a hand-made header row is an error naming the header part', run: all(h, headers.map((name) => probe(component(`<section className=\"flex flex-col\"><div className=\"flex items-center px-3 py-2\"><span>${name === 'SectionHeader' ? 'Issues' : 'Folders'}</span></div><div /></section>`), 'error', name)), 'a hand-made header row is an error naming the header part') },\n    ]),\n    ticket('UIG-23', [\n      { what: 'a hand-made empty line is an error naming EmptyState', run: probe(\"export function Probe({ items }: { items: string[] }) {\\n  return <div>{items.length === 0 ? <p className=\\\"text-text-secondary\\\">Nothing here</p> : items.map((i) => <span key={i}>{i}</span>)}</div>\\n}\\n\", 'error', 'EmptyState') },\n    ]),\n    ticket('UIG-24', [\n      { what: 'a title= is an error naming WithTooltip', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button title=\"Delete\">x</Button>')}`, 'error', 'WithTooltip') },\n    ]),\n    ticket('UIG-25', [\n      { what: \"SectionLabel's class list, typed by hand, is a warning\", run: probe(component('<span className=\"text-[10px] uppercase tracking-wide text-text-muted\">Label</span>'), 'warning', 'SectionLabel') },\n    ]),\n    ticket('UIG-27', [\n      { what: 'the installed package has Link', run: () => h.contains(installed, /\\bLink\\b/, 'the installed @estiva-app/ui exports Link') },\n      { what: 'the installed package has ProgressBar', run: () => h.contains(installed, /\\bProgressBar\\b/, 'the installed @estiva-app/ui exports ProgressBar') },\n    ]),\n    ticket('UIG-28', [\n      { what: 'text-[14px] is an error', run: tokenProbe(component('<div className=\"text-[14px]\">x</div>'), 'error') },\n      { what: 'a colour in an inline style is an error', run: tokenProbe(component(\"<div style={{ backgroundColor: '#ff0000' }}>x</div>\"), 'error') },\n      { what: 'h-[240px] is a warning', run: tokenProbe(component('<div className=\"h-[240px]\">x</div>'), 'warning') },\n      { what: 'h-[240px] is not an error', run: tokenProbe(component('<div className=\"h-[240px]\">x</div>'), 'none') },\n      { what: 'a hand-written line height behind an arbitrary variant is an error', run: tokenProbe(component('<div className=\"[&_p]:leading-[1.4]\">x</div>'), 'error') },\n      { what: 'a raw colour in a class is an error (the pattern that matched nothing, R1)', run: tokenProbe(component('<div className=\"bg-[#5c69dc]\">x</div>'), 'error', 'raw colour') },\n      { what: 'a width and height from a prop pass', run: tokenProbe(\"export function Probe({ size }: { size: number }) {\\n  return <div style={{ width: size, height: size }}>x</div>\\n}\\n\", 'none') },\n      { what: 'a test file is not checked for hand-written values, while source is', run: all(h, tokenConfigs.map((config) => async () => {\n        const code = component(\"<div className=\\\"text-[14px]\\\" style={{ color: 'red' }}>x</div>\")\n        const source = await probe(code, 'error', undefined, PROBE, config)()\n        if (source.result !== 'pass') return h.FAIL(`source is not checked yet, so this proves nothing: ${source.detail}`)\n        return probe(code, 'none', undefined, 'src/components/__gates_probe__.test.tsx', config)()\n      }), 'a test file is not checked for hand-written values, while source is') },\n    ]),\n    ticket('UIG-30', [\n      { what: 'the installed package has RichText', run: () => h.contains(installed, /\\bRichText\\b/, 'the installed @estiva-app/ui exports RichText') },\n    ]),\n    // Katerina's ruling of 17 September (docs/GATES.md \u00A723): one copy, in the package. An app made\n    // by create-estiva-app passes this from its first commit; Peek and Ship do once UIG-32 lands.\n    ticket('UIG-32', [\n      { what: 'the gate pieces come from the package, and no repo keeps a copy', run: all(h, [\n        () => h.contains(at('eslint.gates.config.js'), /from '@estiva-app\\/ui\\/gates'/, 'the gate config imports @estiva-app/ui/gates'),\n        () => h.hook('.claude/settings.json', '@estiva-app/ui/dist/gates/cli.js'),\n        // `estiva-gates status` where npm can find the command; by path where it cannot,\n        // because the install is in the app's folder and the script is in the repo's top one (Ship).\n        () => h.contains('package.json', /\"gates:status\":\\s*\"[^\"]*(?:estiva-gates|@estiva-app\\/ui\\/dist\\/gates\\/cli\\.js)[^\"]*status/, \"gates:status runs the package's engine\"),\n        () => (h.exists('scripts/gates-status.mjs') ? h.FAIL('scripts/gates-status.mjs is a copy of the status engine: run estiva-gates status instead') : h.PASS('no copy of the status engine')),\n      ], 'the gate config, the hook and gates:status are the package\\'s; no copy of the engine') },\n    ]),\n  ]\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;AAgCA,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAE9B,OAAO,uBAAuB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,UAAU,wBAAwB;AAapC,IAAM,qBAAqB,CAAC,SAAS,qBAAqB,eAAe;AAEhF,IAAM,qBAAqB;AAAA,EACzB,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO,CAAC,EAAE,MAAM,UAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AACvD;AAEA,IAAM,QAAQ;AAAA,EACZ,KAAK;AAAA,IACH,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAMO,SAAS,UAAU,EAAE,iBAAiB,sBAAsB,WAAW,MAAM,IAAsB,CAAC,GAAkB;AAC3H,QAAM,QAAQ,MAAM,QAAQ;AAC5B,SAAO;AAAA,IACL,OAAO,CAAC,eAAe;AAAA,IACvB,iBAAiB;AAAA,MACf,QAAQ;AAAA,MACR,eAAe,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE;AAAA,IAC/C;AAAA,IACA,SAAS,EAAE,sBAAsB,kBAAkB;AAAA,IACnD,UAAU;AAAA,MACR,sBAAsB;AAAA,QACpB;AAAA,QACA,WAAW,CAAC,GAAG,oBAAoB,GAAG,kBAAkB;AAAA,MAC1D;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,yCAAyC;AAAA,MACzC,4CAA4C;AAAA,QAC1C;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR,EAAE,SAAS,uDAAuD,SAAS,MAAM,KAAK;AAAA,YACtF;AAAA,cACE,SACE;AAAA,cACF,SAAS,MAAM;AAAA,YACjB;AAAA,YACA,EAAE,SAAS,qFAAqF,SAAS,MAAM,IAAI;AAAA,YACnH;AAAA,cACE,SAAS;AAAA,cACT,SAAS,MAAM;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAKA,IAAM,IAAI;AACV,IAAM,aAAa;AACnB,IAAM,eAAe;AAAA,EACnB,MAAM,GAAG,CAAC,cAAc,UAAU;AAAA,EAClC,QAAQ,GAAG,CAAC;AAAA,EACZ,QAAQ,GAAG,CAAC;AAAA,EACZ,SAAS,GAAG,CAAC;AAAA,EACb,OAAO,GAAG,CAAC;AACb;AAEA,IAAM,gCACJ;AAWF,SAAS,aAAqB;AAC5B,QAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,QAAM,aAAaA,SAAQ,wBAAwB;AACnD,SAAO,WAAW,cAAc,IAAI,IAAI,4BAA4B,YAAY,GAAG,CAAC,CAAC;AACvF;AAUO,SAAS,YAAY,EAAE,WAAW,MAAM,IAAwC,CAAC,GAAkB;AACxG,QAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAM,SAAS,WAAW;AAG1B,QAAM,eAAyC,CAAC;AAChD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,MAAM,OAAO,QAAQ,GAAG;AACxE,UAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,KAAC,aAAa,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,EAClD;AACA,QAAM,gBAA0C,CAAC;AACjD,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,OAAO,MAAM,OAAO,YAAY,EAAG,EAAC,cAAc,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,YAAY,YAAY,WAAW,IAAI,EAAE;AAEjK,SAAO;AAAA,IACL,OAAO,CAAC,eAAe;AAAA,IACvB,SAAS,CAAC,gBAAgB,eAAe;AAAA,IACzC,SAAS,EAAE,gBAAgB,mBAAmB,iBAAiB,kBAAkB;AAAA,IACjF,OAAO;AAAA,MACL,sCAAsC;AAAA,QACpC;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR,GAAG,OAAO,QAAQ,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,cACtD,SAAS,GAAG,CAAC,WAAW,KAAK,QAAQ,KAAK,KAAK,CAAC;AAAA,cAChD,SAAS,4CAA4C,MAAM,KAAK,MAAM,CAAC;AAAA,YACzE,EAAE;AAAA,YACF;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,YACA,GAAG,OAAO,QAAQ,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,cACvD,SAAS,GAAG,CAAC,2DAA2D,KAAK,QAAQ,KAAK,KAAK,CAAC;AAAA,cAChG,SAAS,uCAAuC,MAAM,KAAK,MAAM,CAAC;AAAA,YACpE,EAAE;AAAA,YACF;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,YACA;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,uCAAuC;AAAA,QACrC;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS;AAAA,YACX;AAAA,YACA;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS;AAAA,YACX;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,wBAAwB;AAAA,QACtB;AAAA,QACA;AAAA,UACE,UAAU,mGAAmG,6BAA6B;AAAA,UAC1I,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACnNA,OAAOC,wBAAuB;AAC9B,SAAS,UAAUC,yBAAwB;AAC3C,OAAO,YAAY;AAsBZ,SAAS,SAAS,EAAE,WAAW,MAAM,IAAyC,CAAC,GAAkB;AACtG,SAAO;AAAA,IACL,GAAI,aAAa,YAAY,OAAO,QAAQ,UAAU,OAAO,QAAQ;AAAA,IACrE,OAAO,aAAa,YAAY,CAAC,cAAc,IAAI,CAAC,mBAAmB;AAAA,IACvE,SAAS,CAAC,gBAAgB,eAAe;AAAA,IACzC,iBAAiB;AAAA,MACf,QAAQC;AAAA,MACR,eAAe,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE;AAAA,IAC/C;AAAA,EACF;AACF;AAOO,SAAS,WAAW,EAAE,WAAW,OAAO,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,IAAuB,CAAC,GAAoB;AAClH,SAAO;AAAA,IACL,EAAE,SAAS,CAAC,GAAG,oBAAoB,GAAG,OAAO,EAAE;AAAA,IAC/C;AAAA,MACE,SAAS;AAAA,QACP,GAAG;AAAA,QACH,sBAAsBC;AAAA,QACtB,gBAAgBA;AAAA,QAChB,iBAAiBA;AAAA,MACnB;AAAA;AAAA;AAAA;AAAA,MAIA,eAAe,EAAE,+BAA+B,MAAM;AAAA,IACxD;AAAA,IACA,SAAS,EAAE,SAAS,CAAC;AAAA,EACvB;AACF;;;ACxCO,IAAM,oBAA4C;AAAA,EACvD,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AACZ;AAGA,SAAS,IAAI,GAAgB,OAAqD,OAA2C;AAC3H,SAAO,YAAY;AACjB,eAAW,QAAQ,OAAO;AACxB,YAAM,IAAI,MAAM,KAAK;AACrB,UAAI,EAAE,WAAW,OAAQ,QAAO;AAAA,IAClC;AACA,WAAO,EAAE,KAAK,KAAK;AAAA,EACrB;AACF;AAEO,SAAS,UAAU,GAAgB,EAAE,MAAM,KAAK,MAAM,QAAQ,EAAE,KAAK,SAAS,OAAO,MAAM,GAAG,eAAe,CAAC,2BAA2B,kBAAkB,GAAG,UAAU,CAAC,mBAAmB,eAAe,EAAE,GAAkC;AACpP,QAAM,MAAM,QAAQ,MAAM,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE,CAAC;AACxD,QAAM,MAAM,QAAQ,MAAM,SAAY;AACtC,QAAM,QAAQ;AACd,QAAM,QAAQ;AACd,QAAM,KAAK,CAAC,QAAgB,GAAG,GAAG,GAAG,GAAG;AACxC,QAAM,QAAQ,CAAC,MAAc,QAAsC,UAAmB,OAAO,OAAO,SAAS,UAAU,MACrH,EAAE,KAAK,EAAE,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC,GAAI,QAAQ,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1E,QAAM,YAAY,CAAC,SAAiB;AAAA,WAAuC,IAAI;AAAA;AAAA;AAC/E,QAAM,YAAY,GAAG,6CAA6C;AAClE,QAAM,WAAW,MAA4B,EAAE,KAAK,EAAE,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC,GAAI,QAAQ,OAAO,MAAM,MAAM,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,QAAQ,OAAO,CAAC;AAClJ,QAAM,SAAS,UAAU,kCAAkC;AAC3D,QAAM,SAAS,CAAC,KAAa,QAAqB,QAAQ,WAAuB,EAAE,KAAK,OAAO,kBAAkB,GAAG,GAAG,OAAO,OAAO;AAErI,QAAM,aAAa,CAAC,MAAc,QAAsC,UAAmB,OAAO,UAChG,IAAI,GAAG,aAAa,IAAI,CAAC,WAAW,MAAM,MAAM,QAAQ,UAAU,MAAM,MAAM,CAAC,GAAG,GAAG,aAAa,KAAK,OAAO,CAAC,eAAe;AAEhI,SAAO;AAAA,IACL,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,iCAAiC,KAAK,MAAM,EAAE,OAAO,gBAAgB,cAAc,EAAE;AAAA,IAC/F,CAAC;AAAA,IACD,OAAO,MAAM,KAAK;AAAA,MAChB,EAAE,MAAM,8BAA8B,KAAK,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,EAAE;AAAA,MACpE,EAAE,MAAM,GAAG,GAAG,cAAc,CAAC,mBAAmB,KAAK,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,YAAY,EAAE;AAAA,MACtG,EAAE,MAAM,sBAAsB,KAAK,MAAM,EAAE,GAAG,YAAY,EAAE;AAAA,MAC5D,EAAE,MAAM,yCAAyC,KAAK,MAAM,EAAE,KAAK,yBAAyB,OAAO,EAAE;AAAA,MACrG,EAAE,MAAM,6CAA6C,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,mBAAmB,IAAI,sBAAsB,GAAG,mBAAmB,CAAC,EAAE;AAAA,MACtJ,EAAE,MAAM,4CAA4C,KAAK,MAAM,QAAQ,SAAS,QAAQ,EAAE;AAAA,MAC1F,EAAE,MAAM,uBAAuB,KAAK,MAAM,QAAQ,SAAS,UAAU,yCAAyC,EAAE;AAAA,MAChH,EAAE,MAAM,+CAA+C,KAAK,YAAY;AACtE,cAAM,SAAS,MAAM,MAAM,QAAQ,SAAS,QAAQ,EAAE;AACtD,YAAI,OAAO,WAAW,OAAQ,QAAO,EAAE,KAAK,sDAAsD,OAAO,MAAM,EAAE;AACjH,eAAO,MAAM,QAAQ,QAAQ,QAAW,yCAAyC,EAAE;AAAA,MACrF,EAAE;AAAA,MACF,EAAE,MAAM,wBAAwB,KAAK,MAAM,EAAE,KAAK,oBAAoB,EAAE;AAAA,IAC1E,GAAG,MAAM,KAAK;AAAA,IACd,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,qDAAqD,KAAK,MAAM,EAAE,gBAAgB,QAAQ,EAAE;AAAA,MACpG,EAAE,MAAM,iCAAiC,KAAK,MAAM,EAAE,MAAM,QAAQ,YAAY,EAAE;AAAA,IACpF,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,8CAA8C,KAAK,MAAM,UAAU,WAAW,GAAG,SAAS,WAAW,EAAE;AAAA,MAC/G,EAAE,MAAM,qCAAqC,KAAK,IAAI,GAAG,CAAC,MAAM,UAAU,8BAA8B,GAAG,SAAS,MAAM,GAAG,MAAM,UAAU,8BAA8B,GAAG,SAAS,MAAM,CAAC,GAAG,mCAAmC,EAAE;AAAA,MACtO,EAAE,MAAM,gFAAgF,KAAK,YAAY;AACvG,cAAM,OAAO,MAAM,MAAM,UAAU,UAAU,GAAG,SAAS,QAAQ,EAAE;AACnE,YAAI,KAAK,WAAW,OAAQ,QAAO;AACnC,eAAO,MAAM,UAAU,uBAAuB,GAAG,SAAS,YAAY,EAAE;AAAA,MAC1E,EAAE;AAAA,MACF,EAAE,MAAM,2FAA2F,KAAK,YAAY;AAClH,mBAAW,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,YAAY,UAAU,GAAG,CAAC,UAAU,QAAQ,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,SAAS,OAAO,CAAC,GAAG;AAC7H,gBAAM,MAAM,MAAM,MAAM,UAAU,IAAI,OAAO,KAAK,GAAG,SAAS,KAAK,IAAI,IAAI,EAAE;AAC7E,cAAI,IAAI,WAAW,OAAQ,QAAO;AAAA,QACpC;AACA,eAAO,EAAE,KAAK,2CAA2C;AAAA,MAC3D,EAAE;AAAA,MACF,EAAE,MAAM,+EAA+E,KAAK,MAAM,UAAU,wBAAwB,GAAG,SAAS,cAAc,EAAE;AAAA,MAChK,EAAE,MAAM,iEAAiE,KAAK,YAAY;AACxF,cAAM,MAAM,MAAM,MAAM,UAAU,UAAU,GAAG,OAAO,EAAE;AACxD,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,2DAA2D,IAAI,MAAM,EAAE;AAChH,eAAO,MAAM,mIAAmI,MAAM,EAAE;AAAA,MAC1J,EAAE;AAAA,MACF,EAAE,MAAM,sEAAsE,KAAK,SAAS;AAAA,IAC9F,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,4DAA4D,KAAK,MAAM,oFAAoF,SAAS,WAAW,EAAE;AAAA,MACzL,EAAE,MAAM,sDAAsD,KAAK,MAAM,oHAAoH,SAAS,eAAe,EAAE;AAAA,MACvN,EAAE,MAAM,mEAAmE,KAAK,MAAM,mFAAmF,SAAS,iBAAiB,4BAA4B,EAAE;AAAA,MACjO,EAAE,MAAM,4DAA4D,KAAK,YAAY;AACnF,cAAM,SAAS,MAAM,MAAM,0EAA0E,SAAS,UAAU,4BAA4B,EAAE;AACtJ,YAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,eAAO,MAAM,sEAAsE,QAAQ,QAAW,4BAA4B,EAAE;AAAA,MACtI,EAAE;AAAA,MACF,EAAE,MAAM,0DAA0D,KAAK,MAAM,UAAU,uBAAuB,GAAG,SAAS,UAAU,EAAE;AAAA,MACtI,EAAE,MAAM,2DAA2D,KAAK,YAAY;AAClF,cAAM,OAAO,MAAM,MAAM,UAAU,sBAAsB,GAAG,SAAS,UAAU,EAAE;AACjF,YAAI,KAAK,WAAW,OAAQ,QAAO,EAAE,KAAK,2DAA2D,KAAK,MAAM,EAAE;AAClH,eAAO,MAAM,UAAU,uBAAuB,GAAG,MAAM,EAAE;AAAA,MAC3D,EAAE;AAAA,MACF,EAAE,MAAM,iDAAiD,KAAK,MAAM,UAAU,0CAA0C,GAAG,SAAS,cAAc,EAAE;AAAA,MACpJ,EAAE,MAAM,mEAAmE,KAAK,YAAY;AAC1F,cAAM,MAAM,MAAM,MAAM,uFAAuF,SAAS,QAAW,4BAA4B,EAAE;AACjK,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,8DAA8D,IAAI,MAAM,EAAE;AACnH,eAAO,MAAM,wJAAwJ,QAAQ,QAAW,4BAA4B,EAAE;AAAA,MACxN,EAAE;AAAA,MACF,EAAE,MAAM,6BAA6B,KAAK,SAAS;AAAA,IACrD,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,yDAAyD,KAAK,MAAM;AAAA,EAA4C,UAAU,uCAAuC,CAAC,IAAI,SAAS,kCAAkC,EAAE;AAAA,MAC3N,EAAE,MAAM,uCAAuC,KAAK,MAAM;AAAA,EAA4C,UAAU,4DAA4D,CAAC,IAAI,MAAM,EAAE;AAAA,MACzL,EAAE,MAAM,2DAA2D,KAAK,YAAY;AAClF,cAAM,MAAM,MAAM,MAAM;AAAA,EAA0C,UAAU,mEAAmE,CAAC,IAAI,SAAS,QAAQ,EAAE;AACvK,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,8DAA8D,IAAI,MAAM,EAAE;AACnH,eAAO,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAAoO,MAAM,EAAE;AAAA,MAC3P,EAAE;AAAA,MACF,EAAE,MAAM,6BAA6B,KAAK,SAAS;AAAA,IACrD,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,mFAAmF,KAAK,MAAM;AACpG,cAAM,UAAU,EAAE,UAAU,GAAG,KAAK,GAAG,CAAC,MAAM,UAAU,KAAK,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,CAAC;AACrG,cAAM,MAAM,QAAQ,OAAO,CAAC,MAAM,6DAA6D,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9G,YAAI,IAAI,OAAQ,QAAO,EAAE,KAAK,8BAA8B,IAAI,KAAK,IAAI,CAAC,kDAAkD;AAC5H,cAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,kEAAkE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvH,YAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,KAAK,QAAQ,SAAS,GAAG,QAAQ,MAAM,oBAAoB,QAAQ,KAAK,IAAI,CAAC,uBAAuB,uEAAuE;AAC9M,eAAO,EAAE,KAAK,mCAAmC,QAAQ,CAAC,CAAC,EAAE;AAAA,MAC/D,EAAE;AAAA,IACJ,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,0EAA0E,KAAK,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,kCAAkC,2CAA2C,EAAE;AAAA,MAC3M,EAAE,MAAM,iDAAiD,KAAK,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,0CAA0C,qCAAqC,EAAE;AAAA,MACpL,EAAE,MAAM,oDAAoD,KAAK,MAAM,EAAE,MAAM,QAAQ,gBAAgB,EAAE;AAAA;AAAA,MAEzG,EAAE,MAAM,+DAA+D,KAAK,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,2BAA2B,GAAG,GAAG,YAAY,CAAC,wBAAwB,EAAE;AAAA,MACvL,EAAE,MAAM,uEAAuE,KAAK,MAAM,EAAE,UAAU,GAAG,GAAG,CAAC,EAAE;AAAA,IACjH,CAAC;AAAA,IACD,OAAO,UAAU;AAAA;AAAA;AAAA,MAGf,EAAE,MAAM,4EAA4E,KAAK,MAAM,EAAE,SAAS,GAAG,kDAAkD,GAAG,2BAA2B,iDAAiD,EAAE;AAAA,MAChP,EAAE,MAAM,yBAAyB,KAAK,MAAM,EAAE,MAAM,QAAQ,gBAAgB,EAAE;AAAA,MAC9E,EAAE,MAAM,2DAA2D,KAAK,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,GAAG,cAAc,wCAAwC,IAAI,EAAE,KAAK,iCAAiC,EAAE;AAAA,IACvQ,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAO,EAAE,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,EAAE,KAAK,sBAAsB,IAAI,EAAE,KAAK,yCAAyC,EAAG;AAAA,IAChP,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAO,EAAE,UAAU,iBAAiB,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,WAAW,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,uCAAuC,IAAI,EAAE,KAAK,mCAAmC,EAAG;AAAA,IACxP,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,6DAA6D,KAAK,IAAI,GAAG,QAAQ,IAAI,CAAC,SAAS,MAAM,UAAU,yFAAyF,SAAS,kBAAkB,WAAW,SAAS,gCAAgC,GAAG,SAAS,IAAI,CAAC,GAAG,2DAA2D,EAAE;AAAA,IAClX,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,wDAAwD,KAAK,MAAM,6MAA+M,SAAS,YAAY,EAAE;AAAA,IACnT,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,2CAA2C,KAAK,MAAM;AAAA,EAA4C,UAAU,mCAAmC,CAAC,IAAI,SAAS,aAAa,EAAE;AAAA,IACtL,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,0DAA0D,KAAK,MAAM,UAAU,oFAAoF,GAAG,WAAW,cAAc,EAAE;AAAA,IAC3M,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAM,EAAE,SAAS,WAAW,YAAY,2CAA2C,EAAE;AAAA,MACpI,EAAE,MAAM,yCAAyC,KAAK,MAAM,EAAE,SAAS,WAAW,mBAAmB,kDAAkD,EAAE;AAAA,IAC3J,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,2BAA2B,KAAK,WAAW,UAAU,sCAAsC,GAAG,OAAO,EAAE;AAAA,MAC/G,EAAE,MAAM,2CAA2C,KAAK,WAAW,UAAU,qDAAqD,GAAG,OAAO,EAAE;AAAA,MAC9I,EAAE,MAAM,0BAA0B,KAAK,WAAW,UAAU,oCAAoC,GAAG,SAAS,EAAE;AAAA,MAC9G,EAAE,MAAM,6BAA6B,KAAK,WAAW,UAAU,oCAAoC,GAAG,MAAM,EAAE;AAAA,MAC9G,EAAE,MAAM,sEAAsE,KAAK,WAAW,UAAU,8CAA8C,GAAG,OAAO,EAAE;AAAA,MAClK,EAAE,MAAM,8EAA8E,KAAK,WAAW,UAAU,uCAAuC,GAAG,SAAS,YAAY,EAAE;AAAA,MACjL,EAAE,MAAM,uCAAuC,KAAK,WAAW,yHAAyH,MAAM,EAAE;AAAA,MAChM,EAAE,MAAM,uEAAuE,KAAK,IAAI,GAAG,aAAa,IAAI,CAAC,WAAW,YAAY;AAClI,cAAM,OAAO,UAAU,+DAAiE;AACxF,cAAM,SAAS,MAAM,MAAM,MAAM,SAAS,QAAW,OAAO,MAAM,EAAE;AACpE,YAAI,OAAO,WAAW,OAAQ,QAAO,EAAE,KAAK,sDAAsD,OAAO,MAAM,EAAE;AACjH,eAAO,MAAM,MAAM,QAAQ,QAAW,2CAA2C,MAAM,EAAE;AAAA,MAC3F,CAAC,GAAG,qEAAqE,EAAE;AAAA,IAC7E,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,sCAAsC,KAAK,MAAM,EAAE,SAAS,WAAW,gBAAgB,+CAA+C,EAAE;AAAA,IAClJ,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,mEAAmE,KAAK,IAAI,GAAG;AAAA,QACrF,MAAM,EAAE,SAAS,GAAG,wBAAwB,GAAG,iCAAiC,8CAA8C;AAAA,QAC9H,MAAM,EAAE,KAAK,yBAAyB,kCAAkC;AAAA;AAAA;AAAA,QAGxE,MAAM,EAAE,SAAS,gBAAgB,6FAA6F,wCAAwC;AAAA,QACtK,MAAO,EAAE,OAAO,0BAA0B,IAAI,EAAE,KAAK,0FAA0F,IAAI,EAAE,KAAK,8BAA8B;AAAA,MAC1L,GAAG,qFAAsF,EAAE;AAAA,IAC7F,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["/// <reference types=\"node\" />\n/**\n * The token contract as lint settings, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 this block was pasted into every repo: `eslint.config.js` here,\n * `eslint.tokens.js` in Peek, `eslint.config.js` in Ship. Katerina ruled on 17 September that a\n * gate piece ships in the package and an app imports it, so this is that one\n * copy. Peek and Ship move onto it in UIG-32.\n *\n * Two configs, as the copies had:\n *\n * - `tokenLint` \u2014 a class Tailwind does not generate (the doubled token name,\n *   `bg-bg-surface`), Tailwind's own type ramp or palette, a raw colour, an\n *   opacity modifier on a token colour.\n * - `tokenValues` \u2014 UIG-28: type, corners and shadows written by hand, and an\n *   inline style that sets a colour (errors); heights, spacing and border\n *   widths written by hand (warnings, never blocking).\n *\n * And `tokenConfig`, the two on their own as an app's `lint:tokens` runs them\n * (UIG-37), with TypeScript's rule names known so its directives pass.\n *\n * The patterns are the same for everyone. Only the words differ: an app is told\n * to use \"the package\", the package is told to add the token to `tokens.css`.\n * Measured on 17 September: the UIG-28 block was byte for byte the same in Peek\n * and Ship, and this repository's had the same patterns with seven messages\n * worded for the package.\n *\n * Where the plugin looks: every `className`, every `cn()` / `clsx()` argument,\n * and the values of a class map whose name ends in `Styles` / `_STYLES` or\n * `Classes` / `_CLASSES`. A class map named any other way is invisible to it.\n *\n * Tests are out of `tokenValues` (ruling of 13 September): a test mounts markup\n * to test it. A kept hand-written value says why:\n * `// eslint-disable-next-line <rule> -- @estiva-escape: <reason>` (A2).\n */\nimport { createRequire } from 'node:module'\nimport { fileURLToPath } from 'node:url'\nimport type { ESLint, Linter } from 'eslint'\nimport betterTailwindcss from 'eslint-plugin-better-tailwindcss'\nimport { getDefaultSelectors } from 'eslint-plugin-better-tailwindcss/defaults'\nimport { parser as typescriptParser, plugin as typescriptPlugin } from 'typescript-eslint'\n\n/** Who reads the messages. */\nexport type TokenAudience = 'app' | 'package'\n\nexport interface TokenLintOptions {\n  /** The Tailwind config the unknown-class rule reads, relative to where ESLint runs. */\n  tailwindConfig?: string\n  /** `app` (the default) names the package; `package` names `tokens.css` and the preset. */\n  audience?: TokenAudience\n}\n\nexport interface TokenConfigOptions extends TokenLintOptions {\n  /**\n   * Plugins whose `eslint-disable` directives appear in the source, registered\n   * with every rule off. ESLint refuses a directive for a rule it does not\n   * know. TypeScript's are registered already.\n   */\n  quiet?: Record<string, ESLint.Plugin>\n  /** Folders the token lint never reads, beside build output. */\n  ignores?: string[]\n}\n\n/** What the token lint never reads: build output. */\nexport const TOKEN_LINT_IGNORES = ['dist/', 'storybook-static/', 'node_modules/']\n\n/**\n * Plugins a check that runs on its own registers, every rule off, so the\n * directives another lint writes do not fail it (UIG-37). TypeScript's lint is\n * in every app and writes `eslint-disable-next-line @typescript-eslint/...`;\n * Peek PR #324 failed the token lint on one. Only the checks that run alone\n * take this \u2014 a full lint that loads TypeScript's rules from its own copy would\n * refuse a second plugin under the same name.\n */\nexport const KNOWN_PLUGINS: Record<string, ESLint.Plugin> = { '@typescript-eslint': typescriptPlugin as ESLint.Plugin }\n\nconst CLASS_MAP_SELECTOR = {\n  kind: 'variable',\n  name: '^(?:[A-Z][A-Z0-9_]*_(?:STYLES|CLASSES)|[a-z][a-zA-Z0-9]*(?:Styles|Classes))$',\n  match: [{ type: 'strings' }, { type: 'objectValues' }],\n}\n\nconst WORDS = {\n  app: {\n    ramp: \"Tailwind's type ramp is not a token. Use the ramp from the package: text-body-2, text-caption, text-h3, text-btn-default...\",\n    palette: \"Tailwind's palette is not a token. Use a colour from the package (bg-bg-surface, text-text-primary, border-border-subtle...); a colour with no token is a missing token.\",\n    raw: 'A raw colour is a missing token: add it to the package (tokens.css in every theme block, and the preset), or say why not in an eslint-disable comment.',\n    opacity: 'An opacity modifier on a token colour compiles to nothing. A transparent colour is a token of its own (D16): add it to the package.',\n    type: '$0 is type written by hand. A token from the package sets the size, line height, letter spacing and weight together (text-body-2, text-caption, text-h5...); if none fits, add one to the package, or say why not in an eslint-disable comment.',\n    corner: '$0 is a corner written by hand, and no token has it. Use a corner from the package (rounded-sm 4px, rounded-md 6px, rounded-lg 8px...), or say why not in an eslint-disable comment.',\n    shadow: '$0 is a shadow written by hand. Use a shadow from the package (shadow-sm, shadow-md, shadow-focus-ring, drop-shadow-glow-success...); a shadow with no token is a missing token.',\n  },\n  package: {\n    ramp: \"Tailwind's type ramp is not a token. Use the ramp in tailwind-preset.js: text-body-2, text-caption, text-h3, text-btn-default...\",\n    palette: \"Tailwind's palette is not a token. Use a colour from tailwind-preset.js (bg-bg-surface, text-text-primary, border-border-subtle...); a colour with no token is a missing token.\",\n    raw: 'A raw colour is a missing token: add it to tokens.css in every theme block and to the preset, or say why not in an eslint-disable comment.',\n    opacity: 'An opacity modifier on a token colour compiles to nothing. A transparent colour is a token of its own (D16): add it to tokens.css in every theme block and to the preset.',\n    type: '$0 is type written by hand. A token from tailwind-preset.js sets the size, line height, letter spacing and weight together (text-body-2, text-caption, text-h5...); if none fits, add one to the preset and to cn.ts, or say why not in an eslint-disable comment.',\n    corner: '$0 is a corner written by hand, and no token has it. Use a corner from tailwind-preset.js (rounded-sm 4px, rounded-md 6px, rounded-lg 8px...), or say why not in an eslint-disable comment.',\n    shadow: '$0 is a shadow written by hand. Use a shadow from tailwind-preset.js (shadow-sm, shadow-md, shadow-focus-ring, drop-shadow-glow-success...); a shadow with no token is a missing token.',\n  },\n} satisfies Record<TokenAudience, Record<string, string>>\n\n/**\n * The class rules. `no-unknown-classes` reads the app's own Tailwind config, so\n * it knows exactly what the preset and the app generate.\n */\nexport function tokenLint({ tailwindConfig = 'tailwind.config.js', audience = 'app' }: TokenLintOptions = {}): Linter.Config {\n  const words = WORDS[audience]\n  return {\n    files: ['**/*.{ts,tsx}'],\n    languageOptions: {\n      parser: typescriptParser,\n      parserOptions: { ecmaFeatures: { jsx: true } },\n    },\n    plugins: { 'better-tailwindcss': betterTailwindcss },\n    settings: {\n      'better-tailwindcss': {\n        tailwindConfig,\n        selectors: [...getDefaultSelectors(), CLASS_MAP_SELECTOR],\n      },\n    },\n    rules: {\n      'better-tailwindcss/no-unknown-classes': 'error',\n      'better-tailwindcss/no-restricted-classes': [\n        'error',\n        {\n          restrict: [\n            { pattern: '^(?:[a-z0-9-]+:)*text-(?:xs|sm|base|lg|xl|[2-9]xl)$', message: words.ramp },\n            {\n              pattern:\n                '^(?:[a-z0-9-]+:)*(?:text|bg|border|ring|outline|fill|stroke|decoration|divide|placeholder|from|via|to|accent|caret|shadow)-(?:black|white|slate|gray|zinc|neutral|stone|red|orange|amber|yellow|lime|green|emerald|teal|cyan|sky|blue|indigo|violet|purple|fuchsia|pink|rose)(?:-[0-9]{2,3})?(?:/[0-9]{1,3})?$',\n              message: words.palette,\n            },\n            { pattern: '^(?:[a-z0-9-]+:)*[a-z-]+-\\\\[[^\\\\]]*(?:#[0-9a-fA-F]{3}|rgba?\\\\(|hsla?\\\\(|oklch\\\\()', message: words.raw },\n            {\n              pattern: '^(?:[a-z0-9-]+:)*(?:text|bg|border|ring|outline|fill|stroke|decoration|divide|placeholder|from|via|to|accent|caret|shadow)-(?:bg|text|border|accent|info|warning|success|error)-[a-z-]+/[0-9]{1,3}$',\n              message: words.opacity,\n            },\n          ],\n        },\n      ],\n    },\n  }\n}\n\n// UIG-28's patterns. The variant part reads arbitrary variants too\n// (`[&_pre]:`, `data-[state]:`, `group-hover/row:`). A colour inside `text-[\u2026]`\n// is left to the raw-colour rule of `tokenLint`.\nconst V = '^(?:(?:[^:\\\\[\\\\]\\\\s]|\\\\[[^\\\\]]*\\\\])+:)*!?'\nconst NOT_COLOUR = '(?!color:|#|rgba?\\\\(|hsla?\\\\(|oklch\\\\(|var\\\\()'\nconst HAND_WRITTEN = {\n  type: `${V}(?:text-\\\\[${NOT_COLOUR}|text-\\\\[length:|leading-\\\\[|tracking-\\\\[)[^\\\\]]+\\\\](?:/\\\\S*)?$`,\n  corner: `${V}rounded(?:-(?:t|r|b|l|s|e|tl|tr|br|bl|ss|se|es|ee))?-\\\\[[^\\\\]]+\\\\]$`,\n  shadow: `${V}(?:shadow|drop-shadow)-\\\\[(?!color:)[^\\\\]]+\\\\]$`,\n  spacing: `${V}-?(?:w|h|size|min-w|min-h|max-w|max-h|p[xytrblse]?|m[xytrblse]?|gap(?:-[xy])?|space-[xy]|inset(?:-[xy])?|top|right|bottom|left|translate-[xy]|basis|indent|scroll-[mp][xytrblse]?|border-spacing(?:-[xy])?)-\\\\[[^\\\\]]+\\\\]$`,\n  width: `${V}(?:border(?:-[xytrblse])?|divide-[xy]|outline|ring|ring-offset)-\\\\[(?:length:)?-?[0-9.]+(?:px|rem|em)?\\\\]$`,\n}\n\nconst INLINE_STYLE_TOKEN_PROPERTIES =\n  '/^(color|background|backgroundColor|backgroundImage|fill|stroke|fontSize|border|borderTop|borderRight|borderBottom|borderLeft|borderBlock|borderInline|borderStyle|boxShadow|textShadow)$|Color$/'\n\ninterface Preset {\n  theme: { extend: { fontSize: Record<string, string | [string, unknown]>; borderRadius: Record<string, string> } }\n}\n\n/**\n * The preset, loaded the way Tailwind loads it: it imports `tailwindcss/plugin`,\n * which a plain `import` cannot resolve. Read from beside this module, so an app\n * and this repository read the one preset the package ships.\n */\nfunction loadPreset(): Preset {\n  const require = createRequire(import.meta.url)\n  const loadConfig = require('tailwindcss/loadConfig') as (path: string) => Preset\n  return loadConfig(fileURLToPath(new URL('../../tailwind-preset.js', import.meta.url)))\n}\n\n/**\n * UIG-28: the values the tokens already name, written by hand (Katerina's\n * rulings B11, B12, C3 of 13 September and R2 of 15 September). Register it\n * after `tokenLint`, whose parser and plugin settings it borrows. Under its own\n * rule names, `token-values` and `token-spacing` (the same plugin twice, so one\n * runs as errors and one as warnings): an escape for a hand-written size then\n * cannot also silence a raw colour on the same line.\n */\nexport function tokenValues({ audience = 'app' }: Pick<TokenLintOptions, 'audience'> = {}): Linter.Config {\n  const words = WORDS[audience]\n  const preset = loadPreset()\n  // `text-[14px]` names the token of that size, read from the preset, so the\n  // message stays true when the ramp changes.\n  const tokensBySize: Record<string, string[]> = {}\n  for (const [name, value] of Object.entries(preset.theme.extend.fontSize)) {\n    const size = Array.isArray(value) ? value[0] : value\n    ;(tokensBySize[size] ??= []).push(`text-${name}`)\n  }\n  const cornersBySize: Record<string, string[]> = {}\n  for (const [name, size] of Object.entries(preset.theme.extend.borderRadius)) (cornersBySize[size] ??= []).push(name === 'DEFAULT' ? 'rounded' : `rounded-${name}`)\n\n  return {\n    files: ['**/*.{ts,tsx}'],\n    ignores: ['**/*.test.ts', '**/*.test.tsx'],\n    plugins: { 'token-values': betterTailwindcss, 'token-spacing': betterTailwindcss },\n    rules: {\n      'token-values/no-restricted-classes': [\n        'error',\n        {\n          restrict: [\n            ...Object.entries(tokensBySize).map(([size, names]) => ({\n              pattern: `${V}text-\\\\[${size.replace('.', '\\\\.')}\\\\](?:/\\\\S*)?$`,\n              message: `$0 is the type ramp written by hand. Use ${names.join(' or ')}.`,\n            })),\n            {\n              pattern: HAND_WRITTEN.type,\n              message: words.type,\n            },\n            ...Object.entries(cornersBySize).map(([size, names]) => ({\n              pattern: `${V}rounded(?:-(?:t|r|b|l|s|e|tl|tr|br|bl|ss|se|es|ee))?-\\\\[${size.replace('.', '\\\\.')}\\\\]$`,\n              message: `$0 is a corner written by hand. Use ${names.join(' or ')} (with the same side, if it has one).`,\n            })),\n            {\n              pattern: HAND_WRITTEN.corner,\n              message: words.corner,\n            },\n            {\n              pattern: HAND_WRITTEN.shadow,\n              message: words.shadow,\n            },\n          ],\n        },\n      ],\n      'token-spacing/no-restricted-classes': [\n        'warn',\n        {\n          restrict: [\n            {\n              pattern: HAND_WRITTEN.spacing,\n              message: '$0 is a size or a space written by hand. Use a step of the spacing scale (p-3, h-9, gap-2...) if one fits. Reported, not blocked.',\n            },\n            {\n              pattern: HAND_WRITTEN.width,\n              message: '$0 is a border or ring width written by hand. Use border, border-2, ring-1... if one fits. Reported, not blocked.',\n            },\n          ],\n        },\n      ],\n      'no-restricted-syntax': [\n        'error',\n        {\n          selector: `JSXAttribute[name.name=\"style\"] > JSXExpressionContainer > ObjectExpression > Property[key.name=${INLINE_STYLE_TOKEN_PROPERTIES}]`,\n          message: 'An inline style that sets a colour, a font size, a border or a shadow is outside the token contract: use a token class. If the value is computed (a palette, a size from a prop), say why in an eslint-disable comment. Width, height and transforms are fine.',\n        },\n      ],\n    },\n  }\n}\n\n/**\n * The token lint on its own \u2014 an app's `eslint.tokens.config.js`, `npm run\n * lint:tokens`, the CI step. It fails on the token contract and on nothing\n * else, so a backlog in the full lint never blocks it. Peek built this file by\n * hand until UIG-37.\n */\nexport function tokenConfig({ quiet = {}, ignores = [], ...options }: TokenConfigOptions = {}): Linter.Config[] {\n  return [\n    { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },\n    {\n      plugins: { ...KNOWN_PLUGINS, ...quiet },\n      // Every other lint's directives are unused here, because their rules are\n      // off here. Reporting them would be this config complaining about the\n      // others' business.\n      linterOptions: { reportUnusedDisableDirectives: 'off' },\n    },\n    tokenLint(options),\n    tokenValues({ audience: options.audience }),\n  ]\n}\n", "/// <reference types=\"node\" />\n/**\n * Where the UI Guardrails' rules apply, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 every repo wrote this itself: `eslint.gates.js` (the rules and\n * where they apply) and `eslint.gates.config.js` (the gate: those rules alone)\n * in Peek, in Ship's `web/`, and here pointed inward. The rules were always the\n * package's; these two files were copies. Now they are two functions.\n *\n * Where: every `.ts` and `.tsx` under `src`, stories included (a story is what\n * people read and copy), tests not (a test mounts markup to test it) \u2014\n * Katerina's rulings of 13 September; `.ts` since UIG-8. This package's own\n * inward set reads `.tsx` only, as it always has.\n *\n * A place that keeps something says why, on the line above:\n * `// @estiva-escape: <reason>`, or `{/* @estiva-escape: <reason> *\\/}` as a\n * JSX child. Never `eslint-disable`: the count refuses it.\n */\nimport type { ESLint, Linter } from 'eslint'\nimport betterTailwindcss from 'eslint-plugin-better-tailwindcss'\nimport { parser as typescriptParser } from 'typescript-eslint'\nimport estiva from '../eslint/index'\nimport { KNOWN_PLUGINS, TOKEN_LINT_IGNORES } from './token-lint'\n\nexport interface GateConfigOptions {\n  /** `app` (the default) runs `configs.recommended`; `package` runs this package's inward set. */\n  audience?: 'app' | 'package'\n  /**\n   * Plugins whose `eslint-disable` directives appear in the source, registered\n   * here with every rule off. ESLint refuses a directive for a rule it does not\n   * know, so without them the gate would fail on another lint's comments.\n   * The token lint's names and TypeScript's are registered already (UIG-37).\n   */\n  quiet?: Record<string, ESLint.Plugin>\n  /** Folders the gate never reads, beside build output. */\n  ignores?: string[]\n}\n\n/**\n * The rules and where they apply \u2014 one config object, to add beside\n * everything else an app's `eslint.config.js` runs, so an editor shows a\n * refusal where the element is typed.\n */\nexport function gateLint({ audience = 'app' }: Pick<GateConfigOptions, 'audience'> = {}): Linter.Config {\n  return {\n    ...(audience === 'package' ? estiva.configs.package : estiva.configs.recommended),\n    files: audience === 'package' ? ['src/**/*.tsx'] : ['src/**/*.{ts,tsx}'],\n    ignores: ['**/*.test.ts', '**/*.test.tsx'],\n    languageOptions: {\n      parser: typescriptParser,\n      parserOptions: { ecmaFeatures: { jsx: true } },\n    },\n  }\n}\n\n/**\n * The gate: the rules on their own \u2014 `npm run lint:rules`, CI's job `gate`, and\n * the config the editor hook lints a proposed write with. It fails on a gate\n * rule and on nothing else, so a backlog in the full lint never blocks it.\n */\nexport function gateConfig({ audience = 'app', quiet = {}, ignores = [] }: GateConfigOptions = {}): Linter.Config[] {\n  return [\n    { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },\n    {\n      plugins: {\n        ...KNOWN_PLUGINS,\n        ...quiet,\n        'better-tailwindcss': betterTailwindcss,\n        'token-values': betterTailwindcss,\n        'token-spacing': betterTailwindcss,\n      },\n      // Every other config's directives are unused here, because their rules are\n      // off here. Reporting them would be this config complaining about the\n      // others' business.\n      linterOptions: { reportUnusedDisableDirectives: 'off' },\n    },\n    gateLint({ audience }),\n  ]\n}\n", "/// <reference types=\"node\" />\n/**\n * The gate checks every app runs, written once (docs/GATES.md \u00A723).\n *\n * Until UIG-10 Peek and Ship each wrote them into their own\n * `scripts/gates-checks.mjs`. 65 different checks for finished tickets, counted\n * on 17 September: 28 were identical in both, 21 were the same check written two\n * ways, 2 read each app's real page, and 14 read code only one app has. This is\n * the first three groups as one list. The fourth stays in the app's own checks\n * file, beside this list.\n *\n * Where Peek and Ship wrote one check two ways, the check here runs both, so it\n * passes wherever either did: the raw-link probe with both of their texts, the\n * token probes against each token config the app has.\n *\n * `scripts/gates-compare.mjs` holds this list to Peek's and Ship's: every check\n * of theirs must be here, or be about code only that app has, or the comparison\n * fails and names it.\n *\n * A check for a ticket not built yet is a first guess at the evidence, taken\n * from the ticket's own text; the ticket that builds it changes it here.\n */\nimport type { CheckResult, GateCheck, GateHelpers, GateTicket } from './status'\n\nexport interface AppCheckOptions {\n  /** Where the app is inside the repository: `web` in Ship, `.` elsewhere. */\n  app?: string\n  /** A real page of the app, relative to the app, full of elements that are not controls. */\n  page: string\n  /** The ticket the gate chain is listed under, and whether this repo owns it: UIG-3 in Peek, UIG-4 in Ship. */\n  chain?: { ref: string; owner: boolean }\n  /** The token lint configs the app has, relative to the app. */\n  tokenConfigs?: string[]\n  /** The name of the app's header component a hand-made header row should name (UIG-22's first guess). */\n  headers?: string[]\n}\n\nexport const APP_TICKET_TITLES: Record<string, string> = {\n  'UIG-2': 'The tracking rails \u2014 GATES.md, the status script, the guide committed',\n  'UIG-3': 'Tracer bullet \u2014 one rule, end to end, blocking in Peek',\n  'UIG-4': 'The same chain, blocking in Ship',\n  'UIG-6': 'Branch protection \u2014 the backstop, all three repos',\n  'UIG-7': 'Lint rule \u2014 every remaining raw element',\n  'UIG-8': 'Lint rule \u2014 forbid the reach',\n  'UIG-9': 'Lint rule \u2014 the className allow-list',\n  'UIG-10': 'create-app \u2014 a command that makes a new Estiva app that runs',\n  'UIG-13': \"The registry widens to Peek's 115 and Ship's 74, with classification\",\n  'UIG-19': 'Lock the contract in CI',\n  'UIG-20': 'The Claude skill, reading the registry',\n  'UIG-21': 'CLAUDE.md becomes an index, not a lecture',\n  'UIG-22': 'Fingerprint \u2014 a hand-made header row',\n  'UIG-23': 'Fingerprint \u2014 a hand-made empty state',\n  'UIG-24': 'Fingerprint \u2014 a browser tooltip where ours belongs',\n  'UIG-25': 'Fingerprint \u2014 a component copied out by hand',\n  'UIG-27': 'The components the apps had to build themselves \u2014 Link, ProgressBar, EmptyState padding',\n  'UIG-28': 'Close the two holes in the token contract \u2014 arbitrary values, and inline style',\n  'UIG-30': 'RichText \u2014 one component that draws a message\\'s text, for both apps',\n  'UIG-32': 'Peek and Ship take their gate pieces from the package',\n  'UIG-37': 'The gates refuse a TypeScript eslint-disable comment \u2014 know the rule names, rules off',\n}\n\n/** Run several checks as one: the first that does not pass is the answer. */\nfunction all(h: GateHelpers, steps: (() => CheckResult | Promise<CheckResult>)[], label: string): () => Promise<CheckResult> {\n  return async () => {\n    for (const step of steps) {\n      const r = await step()\n      if (r.result !== 'pass') return r\n    }\n    return h.PASS(label)\n  }\n}\n\nexport function appChecks(h: GateHelpers, { app = '.', page, chain = { ref: 'UIG-3', owner: false }, tokenConfigs = ['eslint.tokens.config.js', 'eslint.config.js'], headers = ['ContainerHeader', 'SectionHeader'] }: AppCheckOptions): GateTicket[] {\n  const WEB = app === '.' ? '' : `${app.replace(/\\/$/, '')}/`\n  const cwd = app === '.' ? undefined : app\n  const PROBE = 'src/components/__gates_probe__.tsx'\n  const GATES = 'eslint.gates.config.js'\n  const at = (rel: string) => `${WEB}${rel}`\n  const probe = (code: string, expect: 'error' | 'warning' | 'none', mentions?: string, file = PROBE, config = GATES) => () =>\n    h.lint({ ...(cwd ? { cwd } : {}), config, file, code, expect, mentions })\n  const component = (body: string) => `export function Probe() {\\n  return ${body}\\n}\\n`\n  const installed = at('node_modules/@estiva-app/ui/dist/index.d.ts')\n  const realPage = (): Promise<CheckResult> => h.lint({ ...(cwd ? { cwd } : {}), config: GATES, file: page, code: h.read(at(page)), expect: 'none' })\n  const button = component('<button type=\"button\">x</button>')\n  /** A line TypeScript's own lint writes; ESLint refuses it where TypeScript's plugin is unknown (UIG-37). */\n  const typescriptDirective = '// eslint-disable-next-line @typescript-eslint/no-explicit-any\\nexport const probe: any = 1\\n'\n  const ticket = (ref: string, checks: GateCheck[], owner = false): GateTicket => ({ ref, title: APP_TICKET_TITLES[ref], owner, checks })\n\n  const tokenProbe = (code: string, expect: 'error' | 'warning' | 'none', mentions?: string, file = PROBE) =>\n    all(h, tokenConfigs.map((config) => probe(code, expect, mentions, file, config)), `${tokenConfigs.join(' and ')}: as expected`)\n\n  return [\n    ticket('UIG-2', [\n      { what: 'npm run gates:status is wired', run: () => h.script('package.json', 'gates:status') },\n    ]),\n    ticket(chain.ref, [\n      { what: 'the gate lint config loads', run: () => h.loads(at(GATES)) },\n      { what: `${at('package.json')} has lint:rules`, run: () => h.script(at('package.json'), 'lint:rules') },\n      { what: 'CI runs lint:rules', run: () => h.ci('lint:rules') },\n      { what: 'the committed hook runs the gate lint', run: () => h.hook('.claude/settings.json', 'gates') },\n      { what: '.gates-count.json is committed and parses', run: () => h.json(h.exists('.gates-count.json') ? '.gates-count.json' : at('.gates-count.json')) },\n      { what: 'a raw <button> is an error naming Button', run: probe(button, 'error', 'Button') },\n      { what: 'the same in a story', run: probe(button, 'error', 'Button', 'src/stories/__gates_probe__.stories.tsx') },\n      { what: 'a test file is not checked, while source is', run: async () => {\n        const source = await probe(button, 'error', 'Button')()\n        if (source.result !== 'pass') return h.FAIL(`source is not checked yet, so this proves nothing: ${source.detail}`)\n        return probe(button, 'none', undefined, 'src/components/__gates_probe__.test.tsx')()\n      } },\n      { what: 'the debt list exists', run: () => h.file('docs/GATES-DEBT.md') },\n    ], chain.owner),\n    ticket('UIG-6', [\n      { what: 'GitHub requires the check gate to merge into main', run: () => h.protectedBranch(/^gate$/) },\n      { what: \"CI's job gate runs lint:rules\", run: () => h.ciJob('gate', 'lint:rules') },\n    ]),\n    ticket('UIG-7', [\n      { what: 'a raw <input> is an error naming TextInput', run: probe(component('<input />'), 'error', 'TextInput') },\n      { what: 'a raw <a> is an error naming Link', run: all(h, [probe(component('<a href=\"/topics\">Topics</a>'), 'error', 'Link'), probe(component('<a href=\"/issues\">Issues</a>'), 'error', 'Link')], 'a raw <a> is an error naming Link') },\n      { what: 'a raw <form> is an error naming Form, and a file input one naming FilePicker', run: async () => {\n        const form = await probe(component('<form />'), 'error', '`Form`')()\n        if (form.result !== 'pass') return form\n        return probe(component('<input type=\"file\" />'), 'error', 'FilePicker')()\n      } },\n      { what: '<textarea>, <select>, <dialog> and <label> name Textarea, Select, DialogShell and Field', run: async () => {\n        for (const [element, part] of [['textarea', 'Textarea'], ['select', 'Select'], ['dialog', 'DialogShell'], ['label', 'Field']]) {\n          const one = await probe(component(`<${element} />`), 'error', `\\`${part}\\``)()\n          if (one.result !== 'pass') return one\n        }\n        return h.PASS('all four are errors, each naming its part')\n      } },\n      { what: 'an element the package has no part for is an error that says to ask for one', run: probe(component('<iframe title=\"Map\" />'), 'error', 'ask Katerina') },\n      { what: 'an escaped element is not an error, while the same element is', run: async () => {\n        const raw = await probe(component('<form />'), 'error')()\n        if (raw.result !== 'pass') return h.FAIL(`a raw <form> is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe('export function Probe() {\\n  return (\\n    // @estiva-escape: a probe that keeps its element on purpose\\n    <form />\\n  )\\n}\\n', 'none')()\n      } },\n      { what: 'a real page, full of elements that are not controls, gets no error', run: realPage },\n    ]),\n    ticket('UIG-8', [\n      { what: 'a Base UI import is an error naming the part built on it', run: probe(\"import { Popover } from '@base-ui/react/popover'\\nexport const Probe = Popover\\n\", 'error', '`Popover`') },\n      { what: 'createPortal is an error naming the floating parts', run: probe(\"import { createPortal } from 'react-dom'\\nexport const Probe = (to: HTMLElement) => createPortal(<span />, to)\\n\", 'error', '`DialogShell`') },\n      { what: 'a key listener on the whole page is an error, in a .ts file too', run: probe(\"export function listen() {\\n  window.addEventListener('keydown', () => {})\\n}\\n\", 'error', '`DialogShell`', 'src/lib/__gates_probe__.ts') },\n      { what: 'arrow keys by hand are an error; Enter in a field is not', run: async () => {\n        const arrows = await probe(\"export const onKeyDown = (e: KeyboardEvent) => e.key === 'ArrowDown'\\n\", 'error', '`Menu`', 'src/lib/__gates_probe__.ts')()\n        if (arrows.result !== 'pass') return arrows\n        return probe(\"export const onKeyDown = (e: KeyboardEvent) => e.key === 'Enter'\\n\", 'none', undefined, 'src/lib/__gates_probe__.ts')()\n      } },\n      { what: 'a hand-written role=\"option\" is an error naming Select', run: probe(component('<div role=\"option\" />'), 'error', '`Select`') },\n      { what: 'tabIndex={0} on a div is an error; tabIndex={-1} is not', run: async () => {\n        const zero = await probe(component('<div tabIndex={0} />'), 'error', '`Button`')()\n        if (zero.result !== 'pass') return h.FAIL(`tabIndex={0} is not caught yet, so this proves nothing: ${zero.detail}`)\n        return probe(component('<div tabIndex={-1} />'), 'none')()\n      } },\n      { what: 'overflow-y-auto is an error naming ScrollArea', run: probe(component('<div className=\"h-64 overflow-y-auto\" />'), 'error', '`ScrollArea`') },\n      { what: 'an escaped listener is not an error, while the same listener is', run: async () => {\n        const raw = await probe(\"export function listen() {\\n  document.addEventListener('mousedown', () => {})\\n}\\n\", 'error', undefined, 'src/lib/__gates_probe__.ts')()\n        if (raw.result !== 'pass') return h.FAIL(`a page listener is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe(\"export function listen() {\\n  // @estiva-escape: a probe that keeps its listener on purpose\\n  document.addEventListener('mousedown', () => {})\\n}\\n\", 'none', undefined, 'src/lib/__gates_probe__.ts')()\n      } },\n      { what: 'a real page gets no error', run: realPage },\n    ]),\n    ticket('UIG-9', [\n      { what: 'a border passed into Button is an error naming Button', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button className=\"border\">x</Button>')}`, 'error', 'on `Button` changes how it looks') },\n      { what: 'placement passed into Button is not', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button className=\"mt-2 w-full flex-1 relative\">x</Button>')}`, 'none') },\n      { what: 'an escaped look is not an error, while the same look is', run: async () => {\n        const raw = await probe(`import { Link } from '@estiva-app/ui'\\n${component('<Link href=\"/x\" className=\"after:absolute after:inset-0\">x</Link>')}`, 'error', '`Link`')()\n        if (raw.result !== 'pass') return h.FAIL(`a restyled part is not caught yet, so this proves nothing: ${raw.detail}`)\n        return probe(`import { Link } from '@estiva-app/ui'\\nexport function Probe() {\\n  return (\\n    // @estiva-escape: a probe that keeps its row link on purpose\\n    <Link href=\"/x\" className=\"after:absolute after:inset-0\">x</Link>\\n  )\\n}\\n`, 'none')()\n      } },\n      { what: 'a real page gets no error', run: realPage },\n    ]),\n    // UIG-10, reopened 18 September: a tab holds one relay client, the way Peek and Ship hold\n    // theirs and a made app is written to. Measured on both mains that day: one each, and no\n    // socket opened any other way. A second holder, or a socket of the app's own, is a second\n    // connection the relay signs in and budgets separately.\n    ticket('UIG-10', [\n      { what: 'the app holds one relay client, at module level, and opens no socket of its own', run: () => {\n        const sources = h.listFiles(at('src'), (n) => /\\.tsx?$/.test(n) && !/\\.(test|stories)\\.tsx?$/.test(n))\n        const own = sources.filter((f) => /\\bcreateLiveClient\\(|\\bcreateLiveRelay\\(|\\bnew WebSocket\\(/.test(h.read(f)))\n        if (own.length) return h.FAIL(`opens a socket of its own (${own.join(', ')}): hold one client from createLiveClientHolder()`)\n        const holders = sources.filter((f) => /^\\s*(?:export\\s+)?const\\s+\\w+\\s*=\\s*createLiveClientHolder\\(\\)/m.test(h.read(f)))\n        if (holders.length !== 1) return h.FAIL(holders.length ? `${holders.length} client holders (${holders.join(', ')}): a tab holds one` : 'no module-level createLiveClientHolder(): the app has no relay client')\n        return h.PASS(`one client for the tab, held in ${holders[0]}`)\n      } },\n    ]),\n    // Built by UIG-13, 18 September. An app's catalogue is built fresh from its code\n    // and never committed: the package is public and the apps are private (Katerina).\n    ticket('UIG-13', [\n      { what: \"npm run ui:find is the package's search, over the package and this app\", run: () => h.contains(at('package.json'), /\"ui:find\":\\s*\"estiva-ui find\\b/, \"ui:find runs the package's estiva-ui find\") },\n      { what: \"npm run registry:check is the package's check\", run: () => h.contains(at('package.json'), /\"registry:check\":\\s*\"estiva-ui check\\b/, 'registry:check runs estiva-ui check') },\n      { what: \"CI's job gate refuses a part with no description\", run: () => h.ciJob('gate', 'registry:check') },\n      // In the .gitignore of the app's own folder, where `estiva-ui build` would write it.\n      { what: 'the catalogue is never committed: git ignores registry.json', run: () => h.contains(at('.gitignore'), /^\\/?registry\\.json\\r?$/m, `${at('.gitignore')} ignores registry.json`) },\n      { what: 'every part is described and sorted, and every file is accounted for', run: () => h.catalogue(at('.')) },\n    ]),\n    ticket('UIG-19', [\n      // The contract runs inside `estiva-ui check`, which the gate job already runs\n      // (UIG-13), so an app changes no script: it takes the package that has it.\n      { what: 'the installed package checks the usage-page contract and the story links', run: () => h.contains(at('node_modules/@estiva-app/ui/dist/registry/cli.js'), 'the usage-page contract', \"the installed estiva-ui check runs the contract\") },\n      { what: \"CI's job gate runs it\", run: () => h.ciJob('gate', 'registry:check') },\n      { what: 'the app keeps no copy of it in its own gates-checks.mjs', run: () => h.exists(at('scripts/gates-checks.mjs')) ? h.lacks(at('scripts/gates-checks.mjs'), '\"When not\"', 'the app checks no page sections itself') : h.PASS('the app has no gates-checks.mjs') },\n    ]),\n    ticket('UIG-20', [\n      { what: 'a committed skill runs ui:find', run: () => (h.listFiles('.claude/skills', (n) => n === 'SKILL.md').some((f) => h.read(f).includes('ui:find')) ? h.PASS('a skill runs ui:find') : h.FAIL('no skill in .claude/skills runs ui:find')) },\n    ]),\n    ticket('UIG-21', [\n      { what: 'path-scoped instructions exist', run: () => (h.listFiles('.claude/rules', (n) => n.endsWith('.md')).some((f) => /^paths:/m.test(h.read(f))) ? h.PASS('.claude/rules has paths: instructions') : h.FAIL('no .claude/rules file with paths:')) },\n    ]),\n    ticket('UIG-22', [\n      { what: 'a hand-made header row is an error naming the header part', run: all(h, headers.map((name) => probe(component(`<section className=\"flex flex-col\"><div className=\"flex items-center px-3 py-2\"><span>${name === 'SectionHeader' ? 'Issues' : 'Folders'}</span></div><div /></section>`), 'error', name)), 'a hand-made header row is an error naming the header part') },\n    ]),\n    ticket('UIG-23', [\n      { what: 'a hand-made empty line is an error naming EmptyState', run: probe(\"export function Probe({ items }: { items: string[] }) {\\n  return <div>{items.length === 0 ? <p className=\\\"text-text-secondary\\\">Nothing here</p> : items.map((i) => <span key={i}>{i}</span>)}</div>\\n}\\n\", 'error', 'EmptyState') },\n    ]),\n    ticket('UIG-24', [\n      { what: 'a title= is an error naming WithTooltip', run: probe(`import { Button } from '@estiva-app/ui'\\n${component('<Button title=\"Delete\">x</Button>')}`, 'error', 'WithTooltip') },\n    ]),\n    ticket('UIG-25', [\n      { what: \"SectionLabel's class list, typed by hand, is a warning\", run: probe(component('<span className=\"text-[10px] uppercase tracking-wide text-text-muted\">Label</span>'), 'warning', 'SectionLabel') },\n    ]),\n    ticket('UIG-27', [\n      { what: 'the installed package has Link', run: () => h.contains(installed, /\\bLink\\b/, 'the installed @estiva-app/ui exports Link') },\n      { what: 'the installed package has ProgressBar', run: () => h.contains(installed, /\\bProgressBar\\b/, 'the installed @estiva-app/ui exports ProgressBar') },\n    ]),\n    ticket('UIG-28', [\n      { what: 'text-[14px] is an error', run: tokenProbe(component('<div className=\"text-[14px]\">x</div>'), 'error') },\n      { what: 'a colour in an inline style is an error', run: tokenProbe(component(\"<div style={{ backgroundColor: '#ff0000' }}>x</div>\"), 'error') },\n      { what: 'h-[240px] is a warning', run: tokenProbe(component('<div className=\"h-[240px]\">x</div>'), 'warning') },\n      { what: 'h-[240px] is not an error', run: tokenProbe(component('<div className=\"h-[240px]\">x</div>'), 'none') },\n      { what: 'a hand-written line height behind an arbitrary variant is an error', run: tokenProbe(component('<div className=\"[&_p]:leading-[1.4]\">x</div>'), 'error') },\n      { what: 'a raw colour in a class is an error (the pattern that matched nothing, R1)', run: tokenProbe(component('<div className=\"bg-[#5c69dc]\">x</div>'), 'error', 'raw colour') },\n      { what: 'a width and height from a prop pass', run: tokenProbe(\"export function Probe({ size }: { size: number }) {\\n  return <div style={{ width: size, height: size }}>x</div>\\n}\\n\", 'none') },\n      { what: 'a test file is not checked for hand-written values, while source is', run: all(h, tokenConfigs.map((config) => async () => {\n        const code = component(\"<div className=\\\"text-[14px]\\\" style={{ color: 'red' }}>x</div>\")\n        const source = await probe(code, 'error', undefined, PROBE, config)()\n        if (source.result !== 'pass') return h.FAIL(`source is not checked yet, so this proves nothing: ${source.detail}`)\n        return probe(code, 'none', undefined, 'src/components/__gates_probe__.test.tsx', config)()\n      }), 'a test file is not checked for hand-written values, while source is') },\n    ]),\n    ticket('UIG-30', [\n      { what: 'the installed package has RichText', run: () => h.contains(installed, /\\bRichText\\b/, 'the installed @estiva-app/ui exports RichText') },\n    ]),\n    // Katerina's ruling of 17 September (docs/GATES.md \u00A723): one copy, in the package. An app made\n    // by create-estiva-app passes this from its first commit; Peek and Ship do once UIG-32 lands.\n    ticket('UIG-32', [\n      { what: 'the gate pieces come from the package, and no repo keeps a copy', run: all(h, [\n        () => h.contains(at('eslint.gates.config.js'), /from '@estiva-app\\/ui\\/gates'/, 'the gate config imports @estiva-app/ui/gates'),\n        () => h.hook('.claude/settings.json', '@estiva-app/ui/dist/gates/cli.js'),\n        // `estiva-gates status` where npm can find the command; by path where it cannot,\n        // because the install is in the app's folder and the script is in the repo's top one (Ship).\n        () => h.contains('package.json', /\"gates:status\":\\s*\"[^\"]*(?:estiva-gates|@estiva-app\\/ui\\/dist\\/gates\\/cli\\.js)[^\"]*status/, \"gates:status runs the package's engine\"),\n        () => (h.exists('scripts/gates-status.mjs') ? h.FAIL('scripts/gates-status.mjs is a copy of the status engine: run estiva-gates status instead') : h.PASS('no copy of the status engine')),\n      ], 'the gate config, the hook and gates:status are the package\\'s; no copy of the engine') },\n    ]),\n    ticket('UIG-37', [\n      { what: 'a TypeScript eslint-disable comment breaks neither the gate nor the token lint', run: all(h, [\n        probe(typescriptDirective, 'none'),\n        tokenProbe(typescriptDirective, 'none'),\n      ], `${[GATES, ...tokenConfigs].join(', ')}: a TypeScript directive is no error`) },\n      { what: 'a token lint on its own is the package\\'s tokenConfig, not built by hand', run: () =>\n        (h.exists(at('eslint.tokens.config.js'))\n          ? h.contains(at('eslint.tokens.config.js'), /\\btokenConfig\\(/, 'eslint.tokens.config.js runs tokenConfig from @estiva-app/ui/gates')\n          : h.PASS('no token lint on its own')) },\n    ]),\n  ]\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;AAmCA,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAE9B,OAAO,uBAAuB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,UAAU,kBAAkB,UAAU,wBAAwB;AAwBhE,IAAM,qBAAqB,CAAC,SAAS,qBAAqB,eAAe;AAUzE,IAAM,gBAA+C,EAAE,sBAAsB,iBAAkC;AAEtH,IAAM,qBAAqB;AAAA,EACzB,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO,CAAC,EAAE,MAAM,UAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AACvD;AAEA,IAAM,QAAQ;AAAA,EACZ,KAAK;AAAA,IACH,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,SAAS;AAAA,IACT,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACF;AAMO,SAAS,UAAU,EAAE,iBAAiB,sBAAsB,WAAW,MAAM,IAAsB,CAAC,GAAkB;AAC3H,QAAM,QAAQ,MAAM,QAAQ;AAC5B,SAAO;AAAA,IACL,OAAO,CAAC,eAAe;AAAA,IACvB,iBAAiB;AAAA,MACf,QAAQ;AAAA,MACR,eAAe,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE;AAAA,IAC/C;AAAA,IACA,SAAS,EAAE,sBAAsB,kBAAkB;AAAA,IACnD,UAAU;AAAA,MACR,sBAAsB;AAAA,QACpB;AAAA,QACA,WAAW,CAAC,GAAG,oBAAoB,GAAG,kBAAkB;AAAA,MAC1D;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,yCAAyC;AAAA,MACzC,4CAA4C;AAAA,QAC1C;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR,EAAE,SAAS,uDAAuD,SAAS,MAAM,KAAK;AAAA,YACtF;AAAA,cACE,SACE;AAAA,cACF,SAAS,MAAM;AAAA,YACjB;AAAA,YACA,EAAE,SAAS,qFAAqF,SAAS,MAAM,IAAI;AAAA,YACnH;AAAA,cACE,SAAS;AAAA,cACT,SAAS,MAAM;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAKA,IAAM,IAAI;AACV,IAAM,aAAa;AACnB,IAAM,eAAe;AAAA,EACnB,MAAM,GAAG,CAAC,cAAc,UAAU;AAAA,EAClC,QAAQ,GAAG,CAAC;AAAA,EACZ,QAAQ,GAAG,CAAC;AAAA,EACZ,SAAS,GAAG,CAAC;AAAA,EACb,OAAO,GAAG,CAAC;AACb;AAEA,IAAM,gCACJ;AAWF,SAAS,aAAqB;AAC5B,QAAMA,WAAU,cAAc,YAAY,GAAG;AAC7C,QAAM,aAAaA,SAAQ,wBAAwB;AACnD,SAAO,WAAW,cAAc,IAAI,IAAI,4BAA4B,YAAY,GAAG,CAAC,CAAC;AACvF;AAUO,SAAS,YAAY,EAAE,WAAW,MAAM,IAAwC,CAAC,GAAkB;AACxG,QAAM,QAAQ,MAAM,QAAQ;AAC5B,QAAM,SAAS,WAAW;AAG1B,QAAM,eAAyC,CAAC;AAChD,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,MAAM,OAAO,QAAQ,GAAG;AACxE,UAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,KAAC,aAAa,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE;AAAA,EAClD;AACA,QAAM,gBAA0C,CAAC;AACjD,aAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,OAAO,MAAM,OAAO,YAAY,EAAG,EAAC,cAAc,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,YAAY,YAAY,WAAW,IAAI,EAAE;AAEjK,SAAO;AAAA,IACL,OAAO,CAAC,eAAe;AAAA,IACvB,SAAS,CAAC,gBAAgB,eAAe;AAAA,IACzC,SAAS,EAAE,gBAAgB,mBAAmB,iBAAiB,kBAAkB;AAAA,IACjF,OAAO;AAAA,MACL,sCAAsC;AAAA,QACpC;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR,GAAG,OAAO,QAAQ,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,cACtD,SAAS,GAAG,CAAC,WAAW,KAAK,QAAQ,KAAK,KAAK,CAAC;AAAA,cAChD,SAAS,4CAA4C,MAAM,KAAK,MAAM,CAAC;AAAA,YACzE,EAAE;AAAA,YACF;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,YACA,GAAG,OAAO,QAAQ,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;AAAA,cACvD,SAAS,GAAG,CAAC,2DAA2D,KAAK,QAAQ,KAAK,KAAK,CAAC;AAAA,cAChG,SAAS,uCAAuC,MAAM,KAAK,MAAM,CAAC;AAAA,YACpE,EAAE;AAAA,YACF;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,YACA;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS,MAAM;AAAA,YACjB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,uCAAuC;AAAA,QACrC;AAAA,QACA;AAAA,UACE,UAAU;AAAA,YACR;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS;AAAA,YACX;AAAA,YACA;AAAA,cACE,SAAS,aAAa;AAAA,cACtB,SAAS;AAAA,YACX;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MACA,wBAAwB;AAAA,QACtB;AAAA,QACA;AAAA,UACE,UAAU,mGAAmG,6BAA6B;AAAA,UAC1I,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAQO,SAAS,YAAY,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,GAAG,GAAG,QAAQ,IAAwB,CAAC,GAAoB;AAC9G,SAAO;AAAA,IACL,EAAE,SAAS,CAAC,GAAG,oBAAoB,GAAG,OAAO,EAAE;AAAA,IAC/C;AAAA,MACE,SAAS,EAAE,GAAG,eAAe,GAAG,MAAM;AAAA;AAAA;AAAA;AAAA,MAItC,eAAe,EAAE,+BAA+B,MAAM;AAAA,IACxD;AAAA,IACA,UAAU,OAAO;AAAA,IACjB,YAAY,EAAE,UAAU,QAAQ,SAAS,CAAC;AAAA,EAC5C;AACF;;;AChQA,OAAOC,wBAAuB;AAC9B,SAAS,UAAUC,yBAAwB;AAC3C,OAAO,YAAY;AAsBZ,SAAS,SAAS,EAAE,WAAW,MAAM,IAAyC,CAAC,GAAkB;AACtG,SAAO;AAAA,IACL,GAAI,aAAa,YAAY,OAAO,QAAQ,UAAU,OAAO,QAAQ;AAAA,IACrE,OAAO,aAAa,YAAY,CAAC,cAAc,IAAI,CAAC,mBAAmB;AAAA,IACvE,SAAS,CAAC,gBAAgB,eAAe;AAAA,IACzC,iBAAiB;AAAA,MACf,QAAQC;AAAA,MACR,eAAe,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE;AAAA,IAC/C;AAAA,EACF;AACF;AAOO,SAAS,WAAW,EAAE,WAAW,OAAO,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,IAAuB,CAAC,GAAoB;AAClH,SAAO;AAAA,IACL,EAAE,SAAS,CAAC,GAAG,oBAAoB,GAAG,OAAO,EAAE;AAAA,IAC/C;AAAA,MACE,SAAS;AAAA,QACP,GAAG;AAAA,QACH,GAAG;AAAA,QACH,sBAAsBC;AAAA,QACtB,gBAAgBA;AAAA,QAChB,iBAAiBA;AAAA,MACnB;AAAA;AAAA;AAAA;AAAA,MAIA,eAAe,EAAE,+BAA+B,MAAM;AAAA,IACxD;AAAA,IACA,SAAS,EAAE,SAAS,CAAC;AAAA,EACvB;AACF;;;ACzCO,IAAM,oBAA4C;AAAA,EACvD,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AAAA,EACV,UAAU;AACZ;AAGA,SAAS,IAAI,GAAgB,OAAqD,OAA2C;AAC3H,SAAO,YAAY;AACjB,eAAW,QAAQ,OAAO;AACxB,YAAM,IAAI,MAAM,KAAK;AACrB,UAAI,EAAE,WAAW,OAAQ,QAAO;AAAA,IAClC;AACA,WAAO,EAAE,KAAK,KAAK;AAAA,EACrB;AACF;AAEO,SAAS,UAAU,GAAgB,EAAE,MAAM,KAAK,MAAM,QAAQ,EAAE,KAAK,SAAS,OAAO,MAAM,GAAG,eAAe,CAAC,2BAA2B,kBAAkB,GAAG,UAAU,CAAC,mBAAmB,eAAe,EAAE,GAAkC;AACpP,QAAM,MAAM,QAAQ,MAAM,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE,CAAC;AACxD,QAAM,MAAM,QAAQ,MAAM,SAAY;AACtC,QAAM,QAAQ;AACd,QAAM,QAAQ;AACd,QAAM,KAAK,CAAC,QAAgB,GAAG,GAAG,GAAG,GAAG;AACxC,QAAM,QAAQ,CAAC,MAAc,QAAsC,UAAmB,OAAO,OAAO,SAAS,UAAU,MACrH,EAAE,KAAK,EAAE,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC,GAAI,QAAQ,MAAM,MAAM,QAAQ,SAAS,CAAC;AAC1E,QAAM,YAAY,CAAC,SAAiB;AAAA,WAAuC,IAAI;AAAA;AAAA;AAC/E,QAAM,YAAY,GAAG,6CAA6C;AAClE,QAAM,WAAW,MAA4B,EAAE,KAAK,EAAE,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC,GAAI,QAAQ,OAAO,MAAM,MAAM,MAAM,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,QAAQ,OAAO,CAAC;AAClJ,QAAM,SAAS,UAAU,kCAAkC;AAE3D,QAAM,sBAAsB;AAC5B,QAAM,SAAS,CAAC,KAAa,QAAqB,QAAQ,WAAuB,EAAE,KAAK,OAAO,kBAAkB,GAAG,GAAG,OAAO,OAAO;AAErI,QAAM,aAAa,CAAC,MAAc,QAAsC,UAAmB,OAAO,UAChG,IAAI,GAAG,aAAa,IAAI,CAAC,WAAW,MAAM,MAAM,QAAQ,UAAU,MAAM,MAAM,CAAC,GAAG,GAAG,aAAa,KAAK,OAAO,CAAC,eAAe;AAEhI,SAAO;AAAA,IACL,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,iCAAiC,KAAK,MAAM,EAAE,OAAO,gBAAgB,cAAc,EAAE;AAAA,IAC/F,CAAC;AAAA,IACD,OAAO,MAAM,KAAK;AAAA,MAChB,EAAE,MAAM,8BAA8B,KAAK,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,EAAE;AAAA,MACpE,EAAE,MAAM,GAAG,GAAG,cAAc,CAAC,mBAAmB,KAAK,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,YAAY,EAAE;AAAA,MACtG,EAAE,MAAM,sBAAsB,KAAK,MAAM,EAAE,GAAG,YAAY,EAAE;AAAA,MAC5D,EAAE,MAAM,yCAAyC,KAAK,MAAM,EAAE,KAAK,yBAAyB,OAAO,EAAE;AAAA,MACrG,EAAE,MAAM,6CAA6C,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,mBAAmB,IAAI,sBAAsB,GAAG,mBAAmB,CAAC,EAAE;AAAA,MACtJ,EAAE,MAAM,4CAA4C,KAAK,MAAM,QAAQ,SAAS,QAAQ,EAAE;AAAA,MAC1F,EAAE,MAAM,uBAAuB,KAAK,MAAM,QAAQ,SAAS,UAAU,yCAAyC,EAAE;AAAA,MAChH,EAAE,MAAM,+CAA+C,KAAK,YAAY;AACtE,cAAM,SAAS,MAAM,MAAM,QAAQ,SAAS,QAAQ,EAAE;AACtD,YAAI,OAAO,WAAW,OAAQ,QAAO,EAAE,KAAK,sDAAsD,OAAO,MAAM,EAAE;AACjH,eAAO,MAAM,QAAQ,QAAQ,QAAW,yCAAyC,EAAE;AAAA,MACrF,EAAE;AAAA,MACF,EAAE,MAAM,wBAAwB,KAAK,MAAM,EAAE,KAAK,oBAAoB,EAAE;AAAA,IAC1E,GAAG,MAAM,KAAK;AAAA,IACd,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,qDAAqD,KAAK,MAAM,EAAE,gBAAgB,QAAQ,EAAE;AAAA,MACpG,EAAE,MAAM,iCAAiC,KAAK,MAAM,EAAE,MAAM,QAAQ,YAAY,EAAE;AAAA,IACpF,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,8CAA8C,KAAK,MAAM,UAAU,WAAW,GAAG,SAAS,WAAW,EAAE;AAAA,MAC/G,EAAE,MAAM,qCAAqC,KAAK,IAAI,GAAG,CAAC,MAAM,UAAU,8BAA8B,GAAG,SAAS,MAAM,GAAG,MAAM,UAAU,8BAA8B,GAAG,SAAS,MAAM,CAAC,GAAG,mCAAmC,EAAE;AAAA,MACtO,EAAE,MAAM,gFAAgF,KAAK,YAAY;AACvG,cAAM,OAAO,MAAM,MAAM,UAAU,UAAU,GAAG,SAAS,QAAQ,EAAE;AACnE,YAAI,KAAK,WAAW,OAAQ,QAAO;AACnC,eAAO,MAAM,UAAU,uBAAuB,GAAG,SAAS,YAAY,EAAE;AAAA,MAC1E,EAAE;AAAA,MACF,EAAE,MAAM,2FAA2F,KAAK,YAAY;AAClH,mBAAW,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,YAAY,UAAU,GAAG,CAAC,UAAU,QAAQ,GAAG,CAAC,UAAU,aAAa,GAAG,CAAC,SAAS,OAAO,CAAC,GAAG;AAC7H,gBAAM,MAAM,MAAM,MAAM,UAAU,IAAI,OAAO,KAAK,GAAG,SAAS,KAAK,IAAI,IAAI,EAAE;AAC7E,cAAI,IAAI,WAAW,OAAQ,QAAO;AAAA,QACpC;AACA,eAAO,EAAE,KAAK,2CAA2C;AAAA,MAC3D,EAAE;AAAA,MACF,EAAE,MAAM,+EAA+E,KAAK,MAAM,UAAU,wBAAwB,GAAG,SAAS,cAAc,EAAE;AAAA,MAChK,EAAE,MAAM,iEAAiE,KAAK,YAAY;AACxF,cAAM,MAAM,MAAM,MAAM,UAAU,UAAU,GAAG,OAAO,EAAE;AACxD,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,2DAA2D,IAAI,MAAM,EAAE;AAChH,eAAO,MAAM,mIAAmI,MAAM,EAAE;AAAA,MAC1J,EAAE;AAAA,MACF,EAAE,MAAM,sEAAsE,KAAK,SAAS;AAAA,IAC9F,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,4DAA4D,KAAK,MAAM,oFAAoF,SAAS,WAAW,EAAE;AAAA,MACzL,EAAE,MAAM,sDAAsD,KAAK,MAAM,oHAAoH,SAAS,eAAe,EAAE;AAAA,MACvN,EAAE,MAAM,mEAAmE,KAAK,MAAM,mFAAmF,SAAS,iBAAiB,4BAA4B,EAAE;AAAA,MACjO,EAAE,MAAM,4DAA4D,KAAK,YAAY;AACnF,cAAM,SAAS,MAAM,MAAM,0EAA0E,SAAS,UAAU,4BAA4B,EAAE;AACtJ,YAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,eAAO,MAAM,sEAAsE,QAAQ,QAAW,4BAA4B,EAAE;AAAA,MACtI,EAAE;AAAA,MACF,EAAE,MAAM,0DAA0D,KAAK,MAAM,UAAU,uBAAuB,GAAG,SAAS,UAAU,EAAE;AAAA,MACtI,EAAE,MAAM,2DAA2D,KAAK,YAAY;AAClF,cAAM,OAAO,MAAM,MAAM,UAAU,sBAAsB,GAAG,SAAS,UAAU,EAAE;AACjF,YAAI,KAAK,WAAW,OAAQ,QAAO,EAAE,KAAK,2DAA2D,KAAK,MAAM,EAAE;AAClH,eAAO,MAAM,UAAU,uBAAuB,GAAG,MAAM,EAAE;AAAA,MAC3D,EAAE;AAAA,MACF,EAAE,MAAM,iDAAiD,KAAK,MAAM,UAAU,0CAA0C,GAAG,SAAS,cAAc,EAAE;AAAA,MACpJ,EAAE,MAAM,mEAAmE,KAAK,YAAY;AAC1F,cAAM,MAAM,MAAM,MAAM,uFAAuF,SAAS,QAAW,4BAA4B,EAAE;AACjK,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,8DAA8D,IAAI,MAAM,EAAE;AACnH,eAAO,MAAM,wJAAwJ,QAAQ,QAAW,4BAA4B,EAAE;AAAA,MACxN,EAAE;AAAA,MACF,EAAE,MAAM,6BAA6B,KAAK,SAAS;AAAA,IACrD,CAAC;AAAA,IACD,OAAO,SAAS;AAAA,MACd,EAAE,MAAM,yDAAyD,KAAK,MAAM;AAAA,EAA4C,UAAU,uCAAuC,CAAC,IAAI,SAAS,kCAAkC,EAAE;AAAA,MAC3N,EAAE,MAAM,uCAAuC,KAAK,MAAM;AAAA,EAA4C,UAAU,4DAA4D,CAAC,IAAI,MAAM,EAAE;AAAA,MACzL,EAAE,MAAM,2DAA2D,KAAK,YAAY;AAClF,cAAM,MAAM,MAAM,MAAM;AAAA,EAA0C,UAAU,mEAAmE,CAAC,IAAI,SAAS,QAAQ,EAAE;AACvK,YAAI,IAAI,WAAW,OAAQ,QAAO,EAAE,KAAK,8DAA8D,IAAI,MAAM,EAAE;AACnH,eAAO,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,GAAoO,MAAM,EAAE;AAAA,MAC3P,EAAE;AAAA,MACF,EAAE,MAAM,6BAA6B,KAAK,SAAS;AAAA,IACrD,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,mFAAmF,KAAK,MAAM;AACpG,cAAM,UAAU,EAAE,UAAU,GAAG,KAAK,GAAG,CAAC,MAAM,UAAU,KAAK,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,CAAC;AACrG,cAAM,MAAM,QAAQ,OAAO,CAAC,MAAM,6DAA6D,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9G,YAAI,IAAI,OAAQ,QAAO,EAAE,KAAK,8BAA8B,IAAI,KAAK,IAAI,CAAC,kDAAkD;AAC5H,cAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,kEAAkE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACvH,YAAI,QAAQ,WAAW,EAAG,QAAO,EAAE,KAAK,QAAQ,SAAS,GAAG,QAAQ,MAAM,oBAAoB,QAAQ,KAAK,IAAI,CAAC,uBAAuB,uEAAuE;AAC9M,eAAO,EAAE,KAAK,mCAAmC,QAAQ,CAAC,CAAC,EAAE;AAAA,MAC/D,EAAE;AAAA,IACJ,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,0EAA0E,KAAK,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,kCAAkC,2CAA2C,EAAE;AAAA,MAC3M,EAAE,MAAM,iDAAiD,KAAK,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,0CAA0C,qCAAqC,EAAE;AAAA,MACpL,EAAE,MAAM,oDAAoD,KAAK,MAAM,EAAE,MAAM,QAAQ,gBAAgB,EAAE;AAAA;AAAA,MAEzG,EAAE,MAAM,+DAA+D,KAAK,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,2BAA2B,GAAG,GAAG,YAAY,CAAC,wBAAwB,EAAE;AAAA,MACvL,EAAE,MAAM,uEAAuE,KAAK,MAAM,EAAE,UAAU,GAAG,GAAG,CAAC,EAAE;AAAA,IACjH,CAAC;AAAA,IACD,OAAO,UAAU;AAAA;AAAA;AAAA,MAGf,EAAE,MAAM,4EAA4E,KAAK,MAAM,EAAE,SAAS,GAAG,kDAAkD,GAAG,2BAA2B,iDAAiD,EAAE;AAAA,MAChP,EAAE,MAAM,yBAAyB,KAAK,MAAM,EAAE,MAAM,QAAQ,gBAAgB,EAAE;AAAA,MAC9E,EAAE,MAAM,2DAA2D,KAAK,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,GAAG,cAAc,wCAAwC,IAAI,EAAE,KAAK,iCAAiC,EAAE;AAAA,IACvQ,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAO,EAAE,UAAU,kBAAkB,CAAC,MAAM,MAAM,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,SAAS,CAAC,IAAI,EAAE,KAAK,sBAAsB,IAAI,EAAE,KAAK,yCAAyC,EAAG;AAAA,IAChP,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAO,EAAE,UAAU,iBAAiB,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,WAAW,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,uCAAuC,IAAI,EAAE,KAAK,mCAAmC,EAAG;AAAA,IACxP,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,6DAA6D,KAAK,IAAI,GAAG,QAAQ,IAAI,CAAC,SAAS,MAAM,UAAU,yFAAyF,SAAS,kBAAkB,WAAW,SAAS,gCAAgC,GAAG,SAAS,IAAI,CAAC,GAAG,2DAA2D,EAAE;AAAA,IAClX,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,wDAAwD,KAAK,MAAM,6MAA+M,SAAS,YAAY,EAAE;AAAA,IACnT,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,2CAA2C,KAAK,MAAM;AAAA,EAA4C,UAAU,mCAAmC,CAAC,IAAI,SAAS,aAAa,EAAE;AAAA,IACtL,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,0DAA0D,KAAK,MAAM,UAAU,oFAAoF,GAAG,WAAW,cAAc,EAAE;AAAA,IAC3M,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kCAAkC,KAAK,MAAM,EAAE,SAAS,WAAW,YAAY,2CAA2C,EAAE;AAAA,MACpI,EAAE,MAAM,yCAAyC,KAAK,MAAM,EAAE,SAAS,WAAW,mBAAmB,kDAAkD,EAAE;AAAA,IAC3J,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,2BAA2B,KAAK,WAAW,UAAU,sCAAsC,GAAG,OAAO,EAAE;AAAA,MAC/G,EAAE,MAAM,2CAA2C,KAAK,WAAW,UAAU,qDAAqD,GAAG,OAAO,EAAE;AAAA,MAC9I,EAAE,MAAM,0BAA0B,KAAK,WAAW,UAAU,oCAAoC,GAAG,SAAS,EAAE;AAAA,MAC9G,EAAE,MAAM,6BAA6B,KAAK,WAAW,UAAU,oCAAoC,GAAG,MAAM,EAAE;AAAA,MAC9G,EAAE,MAAM,sEAAsE,KAAK,WAAW,UAAU,8CAA8C,GAAG,OAAO,EAAE;AAAA,MAClK,EAAE,MAAM,8EAA8E,KAAK,WAAW,UAAU,uCAAuC,GAAG,SAAS,YAAY,EAAE;AAAA,MACjL,EAAE,MAAM,uCAAuC,KAAK,WAAW,yHAAyH,MAAM,EAAE;AAAA,MAChM,EAAE,MAAM,uEAAuE,KAAK,IAAI,GAAG,aAAa,IAAI,CAAC,WAAW,YAAY;AAClI,cAAM,OAAO,UAAU,+DAAiE;AACxF,cAAM,SAAS,MAAM,MAAM,MAAM,SAAS,QAAW,OAAO,MAAM,EAAE;AACpE,YAAI,OAAO,WAAW,OAAQ,QAAO,EAAE,KAAK,sDAAsD,OAAO,MAAM,EAAE;AACjH,eAAO,MAAM,MAAM,QAAQ,QAAW,2CAA2C,MAAM,EAAE;AAAA,MAC3F,CAAC,GAAG,qEAAqE,EAAE;AAAA,IAC7E,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,sCAAsC,KAAK,MAAM,EAAE,SAAS,WAAW,gBAAgB,+CAA+C,EAAE;AAAA,IAClJ,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,mEAAmE,KAAK,IAAI,GAAG;AAAA,QACrF,MAAM,EAAE,SAAS,GAAG,wBAAwB,GAAG,iCAAiC,8CAA8C;AAAA,QAC9H,MAAM,EAAE,KAAK,yBAAyB,kCAAkC;AAAA;AAAA;AAAA,QAGxE,MAAM,EAAE,SAAS,gBAAgB,6FAA6F,wCAAwC;AAAA,QACtK,MAAO,EAAE,OAAO,0BAA0B,IAAI,EAAE,KAAK,0FAA0F,IAAI,EAAE,KAAK,8BAA8B;AAAA,MAC1L,GAAG,qFAAsF,EAAE;AAAA,IAC7F,CAAC;AAAA,IACD,OAAO,UAAU;AAAA,MACf,EAAE,MAAM,kFAAkF,KAAK,IAAI,GAAG;AAAA,QACpG,MAAM,qBAAqB,MAAM;AAAA,QACjC,WAAW,qBAAqB,MAAM;AAAA,MACxC,GAAG,GAAG,CAAC,OAAO,GAAG,YAAY,EAAE,KAAK,IAAI,CAAC,sCAAsC,EAAE;AAAA,MACjF,EAAE,MAAM,2EAA4E,KAAK,MACtF,EAAE,OAAO,GAAG,yBAAyB,CAAC,IACnC,EAAE,SAAS,GAAG,yBAAyB,GAAG,mBAAmB,oEAAoE,IACjI,EAAE,KAAK,0BAA0B,EAAG;AAAA,IAC5C,CAAC;AAAA,EACH;AACF;",
   "names": ["require", "betterTailwindcss", "typescriptParser", "typescriptParser", "betterTailwindcss"]
 }

package/dist/gates/token-lint.d.ts

@@ -1,4 +1,4 @@
-import type { Linter } from 'eslint';
+import type { ESLint, Linter } from 'eslint';
 /** Who reads the messages. */
 export type TokenAudience = 'app' | 'package';
 export interface TokenLintOptions {
@@ -7,8 +7,27 @@ export interface TokenLintOptions {
     /** `app` (the default) names the package; `package` names `tokens.css` and the preset. */
     audience?: TokenAudience;
 }
+export interface TokenConfigOptions extends TokenLintOptions {
+    /**
+     * Plugins whose `eslint-disable` directives appear in the source, registered
+     * with every rule off. ESLint refuses a directive for a rule it does not
+     * know. TypeScript's are registered already.
+     */
+    quiet?: Record<string, ESLint.Plugin>;
+    /** Folders the token lint never reads, beside build output. */
+    ignores?: string[];
+}
 /** What the token lint never reads: build output. */
 export declare const TOKEN_LINT_IGNORES: string[];
+/**
+ * Plugins a check that runs on its own registers, every rule off, so the
+ * directives another lint writes do not fail it (UIG-37). TypeScript's lint is
+ * in every app and writes `eslint-disable-next-line @typescript-eslint/...`;
+ * Peek PR #324 failed the token lint on one. Only the checks that run alone
+ * take this — a full lint that loads TypeScript's rules from its own copy would
+ * refuse a second plugin under the same name.
+ */
+export declare const KNOWN_PLUGINS: Record<string, ESLint.Plugin>;
 /**
  * The class rules. `no-unknown-classes` reads the app's own Tailwind config, so
  * it knows exactly what the preset and the app generate.
@@ -23,4 +42,11 @@ export declare function tokenLint({ tailwindConfig, audience }?: TokenLintOption
  * cannot also silence a raw colour on the same line.
  */
 export declare function tokenValues({ audience }?: Pick<TokenLintOptions, 'audience'>): Linter.Config;
+/**
+ * The token lint on its own — an app's `eslint.tokens.config.js`, `npm run
+ * lint:tokens`, the CI step. It fails on the token contract and on nothing
+ * else, so a backlog in the full lint never blocks it. Peek built this file by
+ * hand until UIG-37.
+ */
+export declare function tokenConfig({ quiet, ignores, ...options }?: TokenConfigOptions): Linter.Config[];
 //# sourceMappingURL=token-lint.d.ts.map

package/dist/gates/token-lint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-lint.d.ts","sourceRoot":"","sources":["../../src/gates/token-lint.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAKpC,8BAA8B;AAC9B,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,aAAa,CAAA;CACzB;AAED,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,UAAkD,CAAA;AA6BjF;;;GAGG;AACH,wBAAgB,SAAS,CAAC,EAAE,cAAqC,EAAE,QAAgB,EAAE,GAAE,gBAAqB,GAAG,MAAM,CAAC,MAAM,CAqC3H;AAiCD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,QAAgB,EAAE,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAM,GAAG,MAAM,CAAC,MAAM,CAqExG"}
+{"version":3,"file":"token-lint.d.ts","sourceRoot":"","sources":["../../src/gates/token-lint.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAK5C,8BAA8B;AAC9B,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,SAAS,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,aAAa,CAAA;CACzB;AAED,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,UAAkD,CAAA;AAEjF;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAA+D,CAAA;AA6BvH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,EAAE,cAAqC,EAAE,QAAgB,EAAE,GAAE,gBAAqB,GAAG,MAAM,CAAC,MAAM,CAqC3H;AAiCD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,QAAgB,EAAE,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAM,GAAG,MAAM,CAAC,MAAM,CAqExG;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAAE,KAAU,EAAE,OAAY,EAAE,GAAG,OAAO,EAAE,GAAE,kBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,CAa9G"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@estiva-app/ui",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Estiva's design tokens (the contract) and a small set of primitives (a convenience) for every Estiva app.",
   "type": "module",
   "license": "MIT",

package/registry.json

@@ -4,7 +4,7 @@
     "kind": "package",
     "repo": "estiva-ui",
     "package": "@estiva-app/ui",
-    "packageVersion": "0.27.0",
+    "packageVersion": "0.28.0",
     "exports": 87,
     "typeExports": 96,
     "files": null

package/src/gates/app-checks.ts

@@ -56,6 +56,7 @@ export const APP_TICKET_TITLES: Record<string, string> = {
   'UIG-28': 'Close the two holes in the token contract — arbitrary values, and inline style',
   'UIG-30': 'RichText — one component that draws a message\'s text, for both apps',
   'UIG-32': 'Peek and Ship take their gate pieces from the package',
+  'UIG-37': 'The gates refuse a TypeScript eslint-disable comment — know the rule names, rules off',
 }
 
 /** Run several checks as one: the first that does not pass is the answer. */
@@ -81,6 +82,8 @@ export function appChecks(h: GateHelpers, { app = '.', page, chain = { ref: 'UIG
   const installed = at('node_modules/@estiva-app/ui/dist/index.d.ts')
   const realPage = (): Promise<CheckResult> => h.lint({ ...(cwd ? { cwd } : {}), config: GATES, file: page, code: h.read(at(page)), expect: 'none' })
   const button = component('<button type="button">x</button>')
+  /** A line TypeScript's own lint writes; ESLint refuses it where TypeScript's plugin is unknown (UIG-37). */
+  const typescriptDirective = '// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const probe: any = 1\n'
   const ticket = (ref: string, checks: GateCheck[], owner = false): GateTicket => ({ ref, title: APP_TICKET_TITLES[ref], owner, checks })
 
   const tokenProbe = (code: string, expect: 'error' | 'warning' | 'none', mentions?: string, file = PROBE) =>
@@ -248,5 +251,15 @@ export function appChecks(h: GateHelpers, { app = '.', page, chain = { ref: 'UIG
         () => (h.exists('scripts/gates-status.mjs') ? h.FAIL('scripts/gates-status.mjs is a copy of the status engine: run estiva-gates status instead') : h.PASS('no copy of the status engine')),
       ], 'the gate config, the hook and gates:status are the package\'s; no copy of the engine') },
     ]),
+    ticket('UIG-37', [
+      { what: 'a TypeScript eslint-disable comment breaks neither the gate nor the token lint', run: all(h, [
+        probe(typescriptDirective, 'none'),
+        tokenProbe(typescriptDirective, 'none'),
+      ], `${[GATES, ...tokenConfigs].join(', ')}: a TypeScript directive is no error`) },
+      { what: 'a token lint on its own is the package\'s tokenConfig, not built by hand', run: () =>
+        (h.exists(at('eslint.tokens.config.js'))
+          ? h.contains(at('eslint.tokens.config.js'), /\btokenConfig\(/, 'eslint.tokens.config.js runs tokenConfig from @estiva-app/ui/gates')
+          : h.PASS('no token lint on its own')) },
+    ]),
   ]
 }

package/src/gates/create-app.ts

@@ -264,18 +264,13 @@ export default defineConfig([
   gateLint(),
 ])
 `,
-    'eslint.tokens.config.js': `import { TOKEN_LINT_IGNORES, tokenLint, tokenValues } from '@estiva-app/ui/gates'
+    'eslint.tokens.config.js': `import { tokenConfig } from '@estiva-app/ui/gates'
 import reactHooks from 'eslint-plugin-react-hooks'
-import { defineConfig, globalIgnores } from 'eslint/config'
 
-// The token contract on its own (\`npm run lint:tokens\`). React's hooks plugin is
-// registered with its rules off, so its directives in the source do not break it.
-export default defineConfig([
-  globalIgnores(TOKEN_LINT_IGNORES),
-  { plugins: { 'react-hooks': reactHooks }, linterOptions: { reportUnusedDisableDirectives: 'off' } },
-  tokenLint(),
-  tokenValues(),
-])
+// The token contract on its own (\`npm run lint:tokens\`), the package's piece.
+// React's hooks plugin is named so its directives do not break it; TypeScript's
+// the package names itself.
+export default tokenConfig({ quiet: { 'react-hooks': reactHooks } })
 `,
     'eslint.gates.config.js': `import { gateConfig } from '@estiva-app/ui/gates'
 import reactHooks from 'eslint-plugin-react-hooks'
@@ -284,7 +279,8 @@ import reactHooks from 'eslint-plugin-react-hooks'
  * The UI Guardrails' rules on their own — \`npm run lint:rules\`, CI's job \`gate\`
  * (GitHub requires it on main: never rename it), and what the editor hook in
  * \`.claude/settings.json\` lints a proposed write with. The package's gate,
- * imported. React's hooks plugin is named so its directives do not break it.
+ * imported. React's hooks plugin is named so its directives do not break it;
+ * TypeScript's the package names itself.
  *
  * A place that keeps something the gate refuses says why, on the line above:
  * \`// @estiva-escape: <reason>\`. Never \`eslint-disable\`: the count refuses it.

package/src/gates/gate-config.ts

@@ -20,7 +20,7 @@ import type { ESLint, Linter } from 'eslint'
 import betterTailwindcss from 'eslint-plugin-better-tailwindcss'
 import { parser as typescriptParser } from 'typescript-eslint'
 import estiva from '../eslint/index'
-import { TOKEN_LINT_IGNORES } from './token-lint'
+import { KNOWN_PLUGINS, TOKEN_LINT_IGNORES } from './token-lint'
 
 export interface GateConfigOptions {
   /** `app` (the default) runs `configs.recommended`; `package` runs this package's inward set. */
@@ -29,7 +29,7 @@ export interface GateConfigOptions {
    * Plugins whose `eslint-disable` directives appear in the source, registered
    * here with every rule off. ESLint refuses a directive for a rule it does not
    * know, so without them the gate would fail on another lint's comments.
-   * The token lint's names are registered already.
+   * The token lint's names and TypeScript's are registered already (UIG-37).
    */
   quiet?: Record<string, ESLint.Plugin>
   /** Folders the gate never reads, beside build output. */
@@ -63,6 +63,7 @@ export function gateConfig({ audience = 'app', quiet = {}, ignores = [] }: GateC
     { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },
     {
       plugins: {
+        ...KNOWN_PLUGINS,
         ...quiet,
         'better-tailwindcss': betterTailwindcss,
         'token-values': betterTailwindcss,

package/src/gates/gates.test.ts

@@ -7,7 +7,7 @@ import { writeGateCount } from './count'
 import { gateConfig, gateLint } from './gate-config'
 import { runHook } from './hook'
 import { helpers, runStatus } from './status'
-import { tokenLint, tokenValues } from './token-lint'
+import { tokenConfig, tokenLint, tokenValues } from './token-lint'
 
 /**
  * The gate pieces, as an app and this package use them (UIG-10, docs/GATES.md
@@ -44,6 +44,8 @@ async function lintWith(config: Linter.Config[], code: string, filePath: string)
 }
 
 const component = (body: string) => `export function Probe() {\n  return ${body}\n}\n`
+/** A line TypeScript's own lint writes: Peek PR #324 failed the token lint on it (UIG-37). */
+const typescriptDirective = '// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const probe: any = 1\n'
 
 describe('tokenLint and tokenValues', () => {
   it('refuse a hand-written text size and name the token, in the words for an app', async () => {
@@ -98,6 +100,38 @@ describe('gateConfig', () => {
     const directive = `// eslint-disable-next-line house/some-rule\n${component('<div>x</div>')}`
     expect(await lintWith(gateConfig({ quiet: { house: quiet } }), directive, 'src/Probe.tsx')).toEqual([])
   })
+
+  it("knows TypeScript's rule names, so a TypeScript directive does not break the gate (UIG-37)", async () => {
+    expect(await lintWith(gateConfig(), typescriptDirective, 'src/lib/probe.ts')).toEqual([])
+    // An app that names the plugin itself, from its own copy, still loads: its copy wins.
+    const own = { rules: { 'no-explicit-any': { create: () => ({}) } } }
+    expect(await lintWith(gateConfig({ quiet: { '@typescript-eslint': own } }), typescriptDirective, 'src/lib/probe.ts')).toEqual([])
+  })
+})
+
+describe('tokenConfig', () => {
+  it('runs the token contract on its own: the same messages as the two pieces, for an app and for the package', async () => {
+    const code = component('<div className="bg-gray-100 rounded-[3px]">x</div>')
+    const app = await lintWith(tokenConfig(), code, 'src/Probe.tsx')
+    expect(app.length).toBeGreaterThan(0)
+    expect(app).toEqual(await lintWith([tokenLint(), tokenValues()], code, 'src/Probe.tsx'))
+    const pkg = await lintWith(tokenConfig({ audience: 'package' }), code, 'src/Probe.tsx')
+    expect(pkg).toEqual(await lintWith([tokenLint({ audience: 'package' }), tokenValues({ audience: 'package' })], code, 'src/Probe.tsx'))
+  })
+
+  it("knows TypeScript's rule names and the quiet plugins, so their directives do not break it (UIG-37)", async () => {
+    expect(await lintWith(tokenConfig(), typescriptDirective, 'src/lib/probe.ts')).toEqual([])
+    const quiet = { rules: { 'some-rule': { create: () => ({}) } } }
+    const directive = `// eslint-disable-next-line house/some-rule\n${component('<div>x</div>')}`
+    expect(await lintWith(tokenConfig({ quiet: { house: quiet } }), directive, 'src/Probe.tsx')).toEqual([])
+  })
+
+  it('never reads build output, nor a folder the app names', async () => {
+    const hand = component('<div className="text-[14px]">x</div>')
+    const ignored = (messages: Linter.LintMessage[]) => messages.every((m) => !m.ruleId)
+    expect(ignored(await lintWith(tokenConfig(), hand, 'dist/Probe.tsx'))).toBe(true)
+    expect(ignored(await lintWith(tokenConfig({ ignores: ['demo'] }), hand, 'demo/Probe.tsx'))).toBe(true)
+  })
 })
 
 describe('writeGateCount', () => {

package/src/gates/index.ts

@@ -8,6 +8,7 @@
  * here, and an app imports them:
  *
  * - `tokenLint`, `tokenValues` — the token contract's lint settings (UIG-28).
+ * - `tokenConfig` — the token lint on its own, as `lint:tokens` runs it (UIG-37).
  * - `gateLint`, `gateConfig` — where the rules apply, and the gate that runs them alone.
  * - `writeGateCount` — `.gates-count.json` (seam S3).
  * - `runHook` — the editor gate a `PreToolUse` hook runs.
@@ -21,7 +22,7 @@
  * Built by build.mjs into `dist/gates/`, for Node. Nothing here reaches the
  * components' browser bundle.
  */
-export { TOKEN_LINT_IGNORES, tokenLint, tokenValues, type TokenAudience, type TokenLintOptions } from './token-lint'
+export { TOKEN_LINT_IGNORES, tokenConfig, tokenLint, tokenValues, type TokenAudience, type TokenConfigOptions, type TokenLintOptions } from './token-lint'
 export { gateConfig, gateLint, type GateConfigOptions } from './gate-config'
 export { writeGateCount, type CountOptions, type CountResult } from './count'
 export { runHook, type HookOptions, type HookResult } from './hook'

package/src/gates/token-lint.ts

@@ -16,6 +16,9 @@
  *   inline style that sets a colour (errors); heights, spacing and border
  *   widths written by hand (warnings, never blocking).
  *
+ * And `tokenConfig`, the two on their own as an app's `lint:tokens` runs them
+ * (UIG-37), with TypeScript's rule names known so its directives pass.
+ *
  * The patterns are the same for everyone. Only the words differ: an app is told
  * to use "the package", the package is told to add the token to `tokens.css`.
  * Measured on 17 September: the UIG-28 block was byte for byte the same in Peek
@@ -32,10 +35,10 @@
  */
 import { createRequire } from 'node:module'
 import { fileURLToPath } from 'node:url'
-import type { Linter } from 'eslint'
+import type { ESLint, Linter } from 'eslint'
 import betterTailwindcss from 'eslint-plugin-better-tailwindcss'
 import { getDefaultSelectors } from 'eslint-plugin-better-tailwindcss/defaults'
-import { parser as typescriptParser } from 'typescript-eslint'
+import { parser as typescriptParser, plugin as typescriptPlugin } from 'typescript-eslint'
 
 /** Who reads the messages. */
 export type TokenAudience = 'app' | 'package'
@@ -47,9 +50,30 @@ export interface TokenLintOptions {
   audience?: TokenAudience
 }
 
+export interface TokenConfigOptions extends TokenLintOptions {
+  /**
+   * Plugins whose `eslint-disable` directives appear in the source, registered
+   * with every rule off. ESLint refuses a directive for a rule it does not
+   * know. TypeScript's are registered already.
+   */
+  quiet?: Record<string, ESLint.Plugin>
+  /** Folders the token lint never reads, beside build output. */
+  ignores?: string[]
+}
+
 /** What the token lint never reads: build output. */
 export const TOKEN_LINT_IGNORES = ['dist/', 'storybook-static/', 'node_modules/']
 
+/**
+ * Plugins a check that runs on its own registers, every rule off, so the
+ * directives another lint writes do not fail it (UIG-37). TypeScript's lint is
+ * in every app and writes `eslint-disable-next-line @typescript-eslint/...`;
+ * Peek PR #324 failed the token lint on one. Only the checks that run alone
+ * take this — a full lint that loads TypeScript's rules from its own copy would
+ * refuse a second plugin under the same name.
+ */
+export const KNOWN_PLUGINS: Record<string, ESLint.Plugin> = { '@typescript-eslint': typescriptPlugin as ESLint.Plugin }
+
 const CLASS_MAP_SELECTOR = {
   kind: 'variable',
   name: '^(?:[A-Z][A-Z0-9_]*_(?:STYLES|CLASSES)|[a-z][a-zA-Z0-9]*(?:Styles|Classes))$',
@@ -229,3 +253,24 @@ export function tokenValues({ audience = 'app' }: Pick<TokenLintOptions, 'audien
     },
   }
 }
+
+/**
+ * The token lint on its own — an app's `eslint.tokens.config.js`, `npm run
+ * lint:tokens`, the CI step. It fails on the token contract and on nothing
+ * else, so a backlog in the full lint never blocks it. Peek built this file by
+ * hand until UIG-37.
+ */
+export function tokenConfig({ quiet = {}, ignores = [], ...options }: TokenConfigOptions = {}): Linter.Config[] {
+  return [
+    { ignores: [...TOKEN_LINT_IGNORES, ...ignores] },
+    {
+      plugins: { ...KNOWN_PLUGINS, ...quiet },
+      // Every other lint's directives are unused here, because their rules are
+      // off here. Reporting them would be this config complaining about the
+      // others' business.
+      linterOptions: { reportUnusedDisableDirectives: 'off' },
+    },
+    tokenLint(options),
+    tokenValues({ audience: options.audience }),
+  ]
+}

package/dist/gates/chunk-EA33NP5B.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/gates/create-app.ts"],
-  "sourcesContent": ["/// <reference types=\"node\" />\n/**\n * `create-estiva-app <name>` \u2014 a new Estiva app that runs, with every gate on\n * (UIG-10).\n *\n *   npx -p @estiva-app/ui create-estiva-app leaf [--title Leaf] [--theme light]\n *\n * The command is `create-app-cli.ts`; this file is what it runs, and what a test reads.\n *\n * **It reads only this package** (Katerina's ruling of 17 September, docs/GATES.md\n * \u00A723). Never Peek, never Ship: they are private, and reading them would carry\n * their history into every new app. What a new app needs to run a gate is this\n * package's own \u2014 the rules, the token and gate configs, the hook, the count,\n * gates:status and the checks every app runs \u2014 so the app gets short files that\n * import them, and a gate added later arrives with a version bump.\n *\n * What only a new app has is written here: its first page in the sidebar frame\n * (ruled the same day), its one theme, sign-in the way Ship signs in, its one\n * relay connection the way Peek and Ship hold theirs, its tests, its stories,\n * the CI workflow with the job `gate`, and its README and CLAUDE.md.\n *\n * The relay (UIG-10, reopened 18 September): a made app gets `protocol`,\n * `platform` and `interop` and is connected from its first commit, or runs alone\n * when no relay is set. The wiring is the app's own file, using `platform` as it\n * is \u2014 not a helper in `platform` \u2014 because a package takes code a real app has\n * already run (ADR 0002 \u00A710), and Peek and Ship each hold theirs the same way.\n *\n * Tool versions are this package's own (its devDependencies build and test the\n * same tools). The ones it does not use itself ({@link ASKED_OF_NPM}) are asked of\n * the npm registry when the app is made. The lockfile is the app's first\n * `npm install`; make it on Linux.\n */\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join, resolve } from 'node:path'\nimport { fileURLToPath } from 'node:url'\nimport { APP_RULE_IDS } from '../eslint/index'\n\ninterface PackageJson {\n  version: string\n  devDependencies: Record<string, string>\n}\n\nexport interface CreateAppOptions {\n  /** The folder and npm name: lowercase letters, digits and dashes. */\n  name: string\n  /** What the app is called on screen. */\n  title?: string\n  /** One of this package's themes. */\n  theme?: string\n  /** The folder the app's folder is made in. */\n  parent?: string\n  /** The `@estiva-app/ui` dependency, when not this package's own version (a tarball, for a proof). */\n  ui?: string\n  /** Versions of the packages this package does not itself use; asked of npm when absent. */\n  versions?: Record<string, string>\n}\n\nconst here = dirname(fileURLToPath(import.meta.url))\nconst packageRoot = resolve(here, '..', '..')\n\n/** What a made app depends on that this package does not use itself: asked of npm when the app is made. */\nexport const ASKED_OF_NPM = ['@estiva-app/identity', '@estiva-app/interop', '@estiva-app/platform', '@estiva-app/protocol', 'eslint-plugin-react-hooks']\n\n/** The package's themes, read from its tokens.css: `light` is the block with no attribute. */\nexport function themes(): string[] {\n  const css = readFileSync(join(packageRoot, 'tokens.css'), 'utf8')\n  return ['light', ...new Set([...css.matchAll(/data-theme='([\\w-]+)'/g)].map((m) => m[1]))]\n}\n\n/** Every file a new app starts with, by path. Nothing is written. */\nexport function appFiles({ name, title = name, theme = 'light', ui, versions = {} }: CreateAppOptions): Record<string, string> {\n  if (!/^[a-z][a-z0-9-]*$/.test(name)) throw new Error(`\"${name}\" is not a name an app can have: lowercase letters, digits and dashes, starting with a letter`)\n  const known = themes()\n  if (!known.includes(theme)) throw new Error(`\"${theme}\" is not one of the package's themes: ${known.join(', ')}`)\n\n  const pkg = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8')) as PackageJson\n  const own = (dep: string) => {\n    const range = pkg.devDependencies[dep] ?? versions[dep]\n    if (!range) throw new Error(`no version for ${dep}`)\n    return range\n  }\n  const deps = (names: string[]) => Object.fromEntries(names.map((n) => [n, own(n)]))\n\n  const packageJson = {\n    name,\n    private: true,\n    version: '0.0.0',\n    type: 'module',\n    scripts: {\n      dev: 'vite',\n      build: 'tsc -b && vite build',\n      preview: 'vite preview',\n      typecheck: 'tsc -b',\n      lint: 'eslint .',\n      'lint:tokens': 'eslint --config eslint.tokens.config.js .',\n      'lint:rules': 'eslint --config eslint.gates.config.js .',\n      'postlint:rules': `estiva-gates count --repo ${name}`,\n      'gates:status': 'estiva-gates status',\n      'ui:find': 'estiva-ui find',\n      registry: 'estiva-ui build',\n      'registry:check': 'estiva-ui check',\n      test: 'vitest run',\n      storybook: 'storybook dev -p 6006',\n      'build-storybook': 'storybook build',\n    },\n    dependencies: {\n      '@estiva-app/identity': own('@estiva-app/identity'),\n      '@estiva-app/interop': own('@estiva-app/interop'),\n      '@estiva-app/platform': own('@estiva-app/platform'),\n      '@estiva-app/protocol': own('@estiva-app/protocol'),\n      '@estiva-app/ui': ui ?? `^${pkg.version}`,\n      ...deps(['@tabler/icons-react', 'react', 'react-dom']),\n    },\n    devDependencies: deps([\n      '@eslint/js', '@storybook/addon-docs', '@storybook/react-vite', '@testing-library/dom', '@testing-library/react',\n      '@types/node', '@types/react', '@types/react-dom', '@vitejs/plugin-react', 'autoprefixer', 'eslint',\n      'eslint-plugin-better-tailwindcss', 'eslint-plugin-react-hooks', 'globals', 'jsdom', 'postcss', 'storybook',\n      'tailwindcss', 'typescript', 'typescript-eslint', 'vite', 'vitest',\n    ]),\n  }\n\n  const count = { schemaVersion: 1, repo: name, generatedAt: new Date().toISOString(), rules: Object.fromEntries(APP_RULE_IDS.map((id) => [id, { errors: 0, warnings: 0, escapes: 0 }])) }\n  const themeAttr = ` data-theme=\"${theme}\"`\n  const tsBase = {\n    target: 'ES2023',\n    module: 'ESNext',\n    skipLibCheck: true,\n    moduleResolution: 'bundler',\n    allowImportingTsExtensions: true,\n    verbatimModuleSyntax: true,\n    moduleDetection: 'force',\n    noEmit: true,\n    strict: true,\n    noUnusedLocals: false,\n    noUnusedParameters: false,\n    erasableSyntaxOnly: true,\n    noFallthroughCasesInSwitch: true,\n    noUncheckedSideEffectImports: true,\n  }\n  const json = (value: unknown) => `${JSON.stringify(value, null, 2)}\\n`\n\n  return {\n    'package.json': json(packageJson),\n\n    // registry.json: the app's catalogue, written only when `npm run registry` is asked\n    // to. It is built fresh from the code every time it is read, so it is never kept.\n    '.gitignore': ['node_modules', 'dist', 'storybook-static', '*.local', '*.log', '*.tsbuildinfo', '.DS_Store', 'registry.json', ''].join('\\n'),\n\n    '.env.example': `# Estiva ID, for signing in. Copy this file to .env.local and fill both in.\n#\n# Left empty, the app offers no sign-in at all and runs anonymous: it never\n# reaches the real Estiva ID by accident.\n#\n# The app must be registered with that Estiva ID first, as its own app, with\n# this redirect address: the origin the app runs on, and a slash\n# (http://localhost:5173/). The real Estiva ID registers a new app on the\n# server; a local one (http://localhost:8787) in its database.\nVITE_ESTIVA_ID_ORIGIN=\nVITE_ESTIVA_ID_CLIENT_ID=${name}\n\n# The relay: the workspace this app reads and writes.\n#\n# Left empty, the app runs alone. It opens no connection, and its home page says\n# so. It also needs sign-in above: the relay refuses anything before sign-in, so\n# with a relay and no sign-in there is still no connection. And Estiva ID must\n# allow this app to sign in to that relay (the README says how).\n#\n# A relay running on this machine is http://localhost:3000.\nVITE_RELAY_URL=\n`,\n\n    'index.html': `<!doctype html>\n<html lang=\"en\"${themeAttr}>\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>${title}</title>\n  </head>\n  <body>\n    <div id=\"root\"></div>\n    <script type=\"module\" src=\"/src/main.tsx\"></script>\n  </body>\n</html>\n`,\n\n    'tsconfig.json': json({ files: [], references: [{ path: './tsconfig.app.json' }, { path: './tsconfig.node.json' }] }),\n    'tsconfig.app.json': json({\n      compilerOptions: { tsBuildInfoFile: './node_modules/.tmp/tsconfig.app.tsbuildinfo', ...tsBase, useDefineForClassFields: true, lib: ['ES2023', 'DOM', 'DOM.Iterable'], types: ['vite/client'], jsx: 'react-jsx', paths: { '@/*': ['./src/*'] } },\n      include: ['src', '.storybook'],\n    }),\n    'tsconfig.node.json': json({\n      compilerOptions: { tsBuildInfoFile: './node_modules/.tmp/tsconfig.node.tsbuildinfo', ...tsBase, lib: ['ES2023'], types: ['node'] },\n      include: ['vite.config.ts'],\n    }),\n\n    'vite.config.ts': `import { fileURLToPath } from 'node:url'\nimport react from '@vitejs/plugin-react'\nimport { defineConfig } from 'vitest/config'\n\n// \\`react\\` is deduped because @estiva-app/ui declares it a peer: two copies in one\n// tree is the \"invalid hook call\" crash, and it appears at runtime.\nexport default defineConfig({\n  plugins: [react()],\n  resolve: {\n    alias: { '@': fileURLToPath(new URL('./src', import.meta.url)) },\n    dedupe: ['react', 'react-dom'],\n  },\n  test: {\n    environment: 'jsdom',\n  },\n})\n`,\n\n    'tailwind.config.js': `import estiva, { estivaContent } from '@estiva-app/ui/tailwind-preset'\n\n/**\n * The package's preset, and nothing of the app's own: a token is added to the\n * package, in every theme, never here.\n *\n * \\`estivaContent\\` is the package's own files. Tailwind does not merge \\`content\\`\n * from a preset, so without it every class used only by a package part is\n * purged, and the app builds clean while rendering at the wrong size.\n *\n * @type {import('tailwindcss').Config}\n */\nexport default {\n  presets: [estiva],\n  content: [...estivaContent, './index.html', './src/**/*.{ts,tsx}', './.storybook/**/*.{ts,tsx}'],\n}\n`,\n    'postcss.config.js': `export default {\n  plugins: {\n    tailwindcss: {},\n    autoprefixer: {},\n  },\n}\n`,\n\n    'eslint.config.js': `import js from '@eslint/js'\nimport { gateLint, TOKEN_LINT_IGNORES, tokenLint, tokenValues } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\nimport { defineConfig, globalIgnores } from 'eslint/config'\nimport globals from 'globals'\nimport tseslint from 'typescript-eslint'\n\n/**\n * Everything, in one lint (\\`npm run lint\\`, a CI step): TypeScript's and React's\n * recommended rules, the token contract and the UI Guardrails' rules. A new app\n * has no backlog, so all of it is a gate from the first commit.\n *\n * The token contract and the gate are the package's (\\`@estiva-app/ui/gates\\`),\n * imported, never copied: a rule written later arrives with a version bump.\n */\nexport default defineConfig([\n  globalIgnores(TOKEN_LINT_IGNORES),\n  {\n    files: ['**/*.{ts,tsx}'],\n    extends: [js.configs.recommended, tseslint.configs.recommended, reactHooks.configs.flat.recommended],\n    languageOptions: { globals: globals.browser },\n  },\n  tokenLint(),\n  tokenValues(),\n  gateLint(),\n])\n`,\n    'eslint.tokens.config.js': `import { TOKEN_LINT_IGNORES, tokenLint, tokenValues } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\nimport { defineConfig, globalIgnores } from 'eslint/config'\n\n// The token contract on its own (\\`npm run lint:tokens\\`). React's hooks plugin is\n// registered with its rules off, so its directives in the source do not break it.\nexport default defineConfig([\n  globalIgnores(TOKEN_LINT_IGNORES),\n  { plugins: { 'react-hooks': reactHooks }, linterOptions: { reportUnusedDisableDirectives: 'off' } },\n  tokenLint(),\n  tokenValues(),\n])\n`,\n    'eslint.gates.config.js': `import { gateConfig } from '@estiva-app/ui/gates'\nimport reactHooks from 'eslint-plugin-react-hooks'\n\n/**\n * The UI Guardrails' rules on their own \u2014 \\`npm run lint:rules\\`, CI's job \\`gate\\`\n * (GitHub requires it on main: never rename it), and what the editor hook in\n * \\`.claude/settings.json\\` lints a proposed write with. The package's gate,\n * imported. React's hooks plugin is named so its directives do not break it.\n *\n * A place that keeps something the gate refuses says why, on the line above:\n * \\`// @estiva-escape: <reason>\\`. Never \\`eslint-disable\\`: the count refuses it.\n */\nexport default gateConfig({ quiet: { 'react-hooks': reactHooks } })\n`,\n\n    '.claude/settings.json': json({\n      hooks: {\n        PreToolUse: [{ matcher: 'Edit|Write', hooks: [{ type: 'command', command: 'node \"$CLAUDE_PROJECT_DIR/node_modules/@estiva-app/ui/dist/gates/cli.js\" hook' }] }],\n      },\n    }),\n\n    'scripts/gates-checks.mjs': `import { appChecks } from '@estiva-app/ui/gates'\n\n/**\n * What gates:status checks in ${name}: the gate checks every app runs, from the\n * package (\\`appChecks\\`), and nothing of its own yet. A check about this app's\n * own code goes beside them.\n */\nexport default function define(h) {\n  return { repo: '${name}', tickets: appChecks(h, { page: 'src/pages/HomePage.tsx' }) }\n}\n`,\n    '.gates-count.json': json(count),\n    'docs/GATES-DEBT.md': `# What ${title} owes the gates\n\nNothing. ${title} was made with every gate on, at zero.\n\nIt should stay that way. A place that keeps something the gate refuses says why on\nthe line above it, \\`// @estiva-escape: <reason>\\`, and the count lists it; a whole\nfile that cannot pass yet goes here, with its reason.\n`,\n\n    '.github/workflows/deploy.yml': `name: deploy\n\n# Every pull request and every push to main runs the checks. There is no deploy\n# job yet: a new app has nowhere to go until it has a home. When it does, the job\n# goes here, and it needs \\`check\\` and \\`gate\\` first.\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\nconcurrency:\n  group: deploy-${name}-\\${{ github.ref }}\n  cancel-in-progress: true\n\njobs:\n  check:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: 24\n          cache: npm\n      - run: npm ci\n      - name: Typecheck the app\n        run: npx tsc -b tsconfig.app.json\n      - name: Typecheck the settings files\n        run: npx tsc -b tsconfig.node.json\n      - name: Lint \u2014 everything, the token contract included\n        run: npm run lint\n      - name: Test\n        run: npm test\n      - name: Build\n        run: npm run build\n      # A class only a package part uses reaches the stylesheet only if\n      # tailwind.config.js spreads estivaContent. When it does not, the build still\n      # succeeds and parts render at the wrong size, so this is where it is caught.\n      - name: The package's classes survive Tailwind's purge\n        run: |\n          if ! grep -qr \"max-h-72\" dist/assets/*.css; then\n            echo \"::error::a class used only by @estiva-app/ui is missing from the built CSS \u2014 check estivaContent is spread into tailwind.config.js\"\n            exit 1\n          fi\n\n  # The UI Guardrails' rules, on their own: a raw element, behaviour a part owns\n  # written by hand, a part restyled. \\`npm run lint:rules\\` also writes\n  # .gates-count.json and fails on an eslint-disable that switches a rule off.\n  #\n  # A job of its own, because GitHub can require only a whole job, by its name:\n  # the rule on main requires \\`gate\\`. Renaming it leaves every pull request\n  # waiting for a check that never reports.\n  gate:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: 24\n          cache: npm\n      - run: npm ci\n      - name: Gate lint\n        run: npm run lint:rules\n      # Every part of the app says in one line what it is for, so the catalogue\n      # (\\`npm run ui:find\\`) can offer it before someone builds it again.\n      - name: Every part is described\n        run: npm run registry:check\n`,\n\n    'src/index.css': `@import '@estiva-app/ui/tokens.css';\n@import '@estiva-app/ui/base.css';\n\n@tailwind base;\n@tailwind components;\n@tailwind utilities;\n\nhtml,\nbody,\n#root {\n  height: 100%;\n}\n`,\n    'src/vite-env.d.ts': `/// <reference types=\"vite/client\" />\n\ninterface ImportMetaEnv {\n  readonly VITE_ESTIVA_ID_ORIGIN?: string\n  readonly VITE_ESTIVA_ID_CLIENT_ID?: string\n  readonly VITE_RELAY_URL?: string\n}\n`,\n    'src/config.ts': `/** What the app is called on screen. */\nexport const APP_TITLE = ${JSON.stringify(title)}\n\n/**\n * Estiva ID, or \\`null\\` when this build offers no sign-in at all. Empty is a real\n * mode, not a broken one: the app runs anonymous, and a local build can never\n * reach the real Estiva ID by accident. See .env.example.\n */\nexport const ID_CONFIG: { base: string; clientId: string } | null =\n  import.meta.env.VITE_ESTIVA_ID_ORIGIN && import.meta.env.VITE_ESTIVA_ID_CLIENT_ID\n    ? { base: import.meta.env.VITE_ESTIVA_ID_ORIGIN.replace(/\\\\/+$/, ''), clientId: import.meta.env.VITE_ESTIVA_ID_CLIENT_ID }\n    : null\n\n/**\n * The relay, the workspace this app reads and writes, or \\`null\\` when this build\n * has none. Empty is a real mode too: the app runs alone and opens no connection,\n * and a local build can never reach the real relay by accident. See .env.example.\n */\nexport const RELAY_URL: string | null = import.meta.env.VITE_RELAY_URL?.trim().replace(/\\\\/+$/, '') || null\n\n/** The relay as a person would name it: host and port, no scheme. */\nexport function relayLabel(url: string): string {\n  try {\n    return new URL(url).host\n  } catch {\n    return url\n  }\n}\n`,\n    'src/auth/estivaId.ts': `import { createEstivaId, type ShellReason, type StoredToken } from '@estiva-app/identity'\nimport { ID_CONFIG } from '../config'\n\n/**\n * Signing in with Estiva ID, the way Ship does: \\`@estiva-app/identity\\` holds the\n * flow, this file the app's choices.\n *\n * - The redirect is the origin and a slash, never the current path: Estiva ID\n *   compares it exactly against the one address registered for the app.\n * - The session lives in localStorage, so it outlives a tab; a sign-in's\n *   single-use credentials in sessionStorage, per tab.\n */\nconst client = ID_CONFIG\n  ? createEstivaId({\n      base: ID_CONFIG.base,\n      clientId: ID_CONFIG.clientId,\n      redirectUri: () => \\`\\${window.location.origin}/\\`,\n      storage: () => (typeof localStorage === 'undefined' ? null : localStorage),\n      pendingStore: () => (typeof sessionStorage === 'undefined' ? null : sessionStorage),\n      keyPrefix: '${name}.estiva-id',\n      navigate: (url) => window.location.assign(url),\n    })\n  : null\n\nexport const signInAvailable = client !== null\n\nexport function currentToken(): StoredToken | null {\n  return client?.validToken(Date.now() + 60_000) ?? null\n}\n\nexport function startRenewal(): void {\n  client?.scheduleRenewal()\n}\n\nexport async function beginSignIn(options: { silent?: boolean } = {}): Promise<void> {\n  await client?.beginSignIn(\\`\\${window.location.pathname}\\${window.location.search}\\`, options)\n}\n\nexport function beginSignOut(): void {\n  client?.beginSignOut()\n}\n\nexport async function completeSignIn(): Promise<{ token: StoredToken; returnTo: string }> {\n  if (!client) throw new Error('this build offers no sign-in')\n  return client.completeSignIn(window.location.search)\n}\n\nexport function stashShellReason(reason: ShellReason): void {\n  client?.stashShellReason(reason)\n}\n\nexport function takeShellReason() {\n  return client?.takeShellReason() ?? null\n}\n\nexport function callbackParams(): { code?: string; error?: string } | null {\n  const params = new URLSearchParams(window.location.search)\n  const code = params.get('code') ?? undefined\n  const error = params.get('error') ?? undefined\n  return code || error ? { code, error } : null\n}\n\nexport function clearQuery(): void {\n  window.history.replaceState({}, '', window.location.pathname)\n}\n\nexport function guardAttemptedAt(): number | null {\n  if (typeof sessionStorage === 'undefined') return null\n  const raw = sessionStorage.getItem('estiva.authShell.silentAttempt')\n  const at = raw ? Number(raw) : NaN\n  return Number.isFinite(at) ? at : null\n}\n\n/**\n * Who Estiva ID says this is. Asked of its directory with the token, so the\n * answer also proves Estiva ID accepted the sign-in.\n */\nexport async function whoAmI(): Promise<{ name?: string; email?: string } | null> {\n  const token = currentToken()\n  if (!ID_CONFIG || !token) return null\n  const response = await fetch(\\`\\${ID_CONFIG.base}/directory/\\${token.pubkey}\\`, { headers: { Authorization: \\`Bearer \\${token.accessToken}\\` } })\n  if (!response.ok) return null\n  const entry = (await response.json()) as { displayName?: string; email?: string }\n  return { name: entry.displayName, email: entry.email }\n}\n`,\n    'src/auth/boot.ts': `import { decideBoot, type ShellReason, type ShellState } from '@estiva-app/identity'\nimport {\n  beginSignIn,\n  callbackParams,\n  clearQuery,\n  completeSignIn,\n  currentToken,\n  guardAttemptedAt,\n  signInAvailable,\n  startRenewal,\n  stashShellReason,\n  takeShellReason,\n} from './estivaId'\n\nexport type BootResult = { kind: 'app' } | { kind: 'shell'; state: ShellState } | { kind: 'leaving' }\n\n/**\n * Settle who this load belongs to, before the app renders. The decision is\n * \\`decideBoot\\` from \\`@estiva-app/identity\\`; this is the reading and acting\n * around it. It never throws: a blank page is worse than an honest shell.\n */\nexport async function bootAuth(): Promise<BootResult> {\n  if (!signInAvailable) return { kind: 'app' }\n\n  const action = decideBoot({\n    callback: callbackParams(),\n    hasValidToken: currentToken() !== null,\n    guardAttemptedAt: guardAttemptedAt(),\n    enteredThisPageLoad: false,\n    now: Date.now(),\n  })\n\n  switch (action.do) {\n    case 'enter':\n      startRenewal()\n      return { kind: 'app' }\n    case 'complete_callback':\n      try {\n        await completeSignIn()\n        clearQuery()\n        startRenewal()\n        return { kind: 'app' }\n      } catch (cause) {\n        clearQuery()\n        stashShellReason('exchange_failed')\n        return shell('exchange_failed', cause)\n      }\n    case 'probe_silently':\n      try {\n        await beginSignIn({ silent: true })\n        return { kind: 'leaving' }\n      } catch {\n        return shell('network')\n      }\n    case 'prompt_passkey':\n      return { kind: 'shell', state: { phase: 'authenticating', reason: takeShellReason() ?? action.reason } }\n    case 'fail':\n      return shell(action.reason)\n  }\n}\n\nfunction shell(reason: ShellReason, cause?: unknown): BootResult {\n  if (cause) console.warn('[auth] entry failed:', cause)\n  return { kind: 'shell', state: { phase: 'failed', reason } }\n}\n\nexport async function enterFromShell(): Promise<void> {\n  await beginSignIn()\n}\n`,\n    'src/auth/AuthShell.tsx': `import { CONTINUE_LABEL, isRecoverable, RETRY_LABEL, SHELL_COPY, type ShellState } from '@estiva-app/identity'\nimport { Button } from '@estiva-app/ui'\nimport { APP_TITLE } from '../config'\n\nexport interface AuthShellProps {\n  state: ShellState\n  onContinue: () => void\n}\n\n/**\n * What shows while nobody is signed in: the app's name, one line and at most one\n * button. The words are \\`@estiva-app/identity\\`'s, so every app says the same.\n */\nexport function AuthShell({ state, onContinue }: AuthShellProps) {\n  const waiting = state.phase === 'checking' || state.phase === 'entering' || state.phase === 'ready'\n  return (\n    <div className=\"fixed inset-0 z-50 flex flex-col items-center justify-center gap-4 bg-bg-surface px-6 text-center\">\n      <h1 className=\"text-h3 text-text-primary\">{APP_TITLE}</h1>\n      {!waiting && (\n        <>\n          <p className=\"max-w-prose text-body-2 text-text-secondary\">{SHELL_COPY[state.reason]}</p>\n          {isRecoverable(state.reason) && <Button onClick={onContinue}>{state.phase === 'authenticating' ? CONTINUE_LABEL : RETRY_LABEL}</Button>}\n        </>\n      )}\n    </div>\n  )\n}\n`,\n    'src/relay/client.ts': `import { signViaEstivaId } from '@estiva-app/identity'\nimport { browserOnlineSource, createLiveClientHolder, type LiveClient } from '@estiva-app/platform'\nimport { currentToken } from '../auth/estivaId'\nimport { ID_CONFIG, RELAY_URL } from '../config'\n\n/**\n * The event kinds this app reads. They are the app's own decision, and the one\n * blank a new app fills in: Ship reads seven (projects, issues, changes,\n * messages, comments, deletions and edits), Peek its own. Until there are kinds\n * here the app is connected and reads nothing, which is a correct state.\n */\nexport const KINDS: number[] = []\n\n/**\n * The tab's one relay client. \\`@estiva-app/platform\\` hands out a holder and\n * keeps nothing, so this line is where \"one connection per tab\" lives. The relay\n * signs a connection in once and caps subscriptions per connection, so a\n * connection per component is wrong, not only wasteful; React's StrictMode,\n * which mounts everything twice, is what would show it.\n *\n * Peek and Ship hold theirs the same way. Everything the client needs is handed\n * in and nothing here reads the app's own data, so it could move into\n * \\`@estiva-app/platform\\` as it is, if that is ever worth doing.\n */\nconst holder = createLiveClientHolder()\n\n/**\n * The client, or \\`null\\` when this build cannot have one: no relay is set, or\n * there is no sign-in. The relay refuses anything before sign-in, so a socket\n * without it would only connect, be refused and retry.\n */\nexport function relayClient(): LiveClient | null {\n  const base = ID_CONFIG?.base\n  if (!RELAY_URL || !base) return null\n  return holder.get({\n    relayUrl: RELAY_URL,\n    // Read on every connect, never kept: a token kept from the first connect\n    // outlives a silent renewal as a dead one, and the next reconnect fails.\n    getCredential: () => {\n      const token = currentToken()\n      return token ? { accessToken: token.accessToken, pubkey: token.pubkey } : null\n    },\n    // \\`expectedPubkey\\` is a check, not a request. Estiva ID signs as the token's\n    // owner whatever it is handed, so a mismatch comes back as a valid event\n    // signed by somebody else. Always pass it.\n    sign: (unsigned, token, expectedPubkey) => signViaEstivaId(unsigned, { base, token, expectedPubkey }),\n    online: typeof window === 'undefined' ? undefined : browserOnlineSource(window),\n    // Names this app in the relay's own logs.\n    subscriptionPrefix: '${name}-',\n    log: (message, detail) => console.debug('[relay]', message, detail ?? ''),\n  })\n}\n`,\n    'src/relay/useRelayState.ts': `import type { RelayState } from '@estiva-app/protocol'\nimport { useSyncExternalStore } from 'react'\nimport { relayClient } from './client'\n\nconst subscribe = (onChange: () => void): (() => void) => relayClient()?.onState(onChange) ?? (() => {})\nconst snapshot = (): RelayState | 'off' => relayClient()?.state() ?? 'off'\n\n/** The connection's state, for a page to show: \\`'off'\\` when this build has no client. */\nexport function useRelayState(): RelayState | 'off' {\n  return useSyncExternalStore(subscribe, snapshot, () => 'off')\n}\n`,\n    'src/relay/client.test.ts': `import { afterEach, describe, expect, it, vi } from 'vitest'\n\n/**\n * The tab's one relay connection. A fake socket stands in for the relay, so this\n * runs with no network, and counts the sockets opened.\n */\nclass FakeSocket {\n  static opened = 0\n  onopen: (() => void) | null = null\n  onmessage: ((event: { data: unknown }) => void) | null = null\n  onclose: (() => void) | null = null\n  onerror: (() => void) | null = null\n  constructor() {\n    FakeSocket.opened += 1\n  }\n  send() {}\n  close() {}\n}\n\nafterEach(() => {\n  vi.unstubAllEnvs()\n  vi.unstubAllGlobals()\n  vi.resetModules()\n  FakeSocket.opened = 0\n})\n\ndescribe('the relay client', () => {\n  it('opens no connection when no relay is set', async () => {\n    vi.stubEnv('VITE_RELAY_URL', '')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', 'http://localhost:8787')\n    vi.stubEnv('VITE_ESTIVA_ID_CLIENT_ID', '${name}')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    expect(relayClient()).toBeNull()\n    expect(FakeSocket.opened).toBe(0)\n  })\n\n  it('opens no connection with a relay and no sign-in', async () => {\n    vi.stubEnv('VITE_RELAY_URL', 'http://localhost:3000')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', '')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    expect(relayClient()).toBeNull()\n    expect(FakeSocket.opened).toBe(0)\n  })\n\n  it('holds one connection per tab, however often it is asked', async () => {\n    vi.stubEnv('VITE_RELAY_URL', 'http://localhost:3000')\n    vi.stubEnv('VITE_ESTIVA_ID_ORIGIN', 'http://localhost:8787')\n    vi.stubEnv('VITE_ESTIVA_ID_CLIENT_ID', '${name}')\n    vi.stubGlobal('WebSocket', FakeSocket)\n    const { relayClient } = await import('./client')\n    const first = relayClient()\n    expect(first).not.toBeNull()\n    expect(relayClient()).toBe(first)\n    expect(FakeSocket.opened).toBe(1)\n    first?.close()\n  })\n})\n`,\n    'src/main.tsx': `import { StrictMode } from 'react'\nimport { createRoot } from 'react-dom/client'\nimport './index.css'\nimport { AuthShell } from './auth/AuthShell'\nimport { bootAuth, enterFromShell } from './auth/boot'\n\n// Settle who this load belongs to first, then render: the app itself is imported\n// only once sign-in is settled, so nothing in it evaluates as the wrong person.\nvoid (async () => {\n  const root = createRoot(document.getElementById('root')!)\n  const boot = await bootAuth()\n  if (boot.kind === 'leaving') return\n  if (boot.kind === 'shell') {\n    root.render(\n      <StrictMode>\n        <AuthShell state={boot.state} onContinue={() => void enterFromShell()} />\n      </StrictMode>,\n    )\n    return\n  }\n  const { App } = await import('./App')\n  root.render(\n    <StrictMode>\n      <App />\n    </StrictMode>,\n  )\n})()\n`,\n    'src/App.tsx': `import { AppShell, IdentityMenu, NavItem, Sidebar, type Identity } from '@estiva-app/ui'\nimport { IconHome } from '@tabler/icons-react'\nimport { useEffect, useState } from 'react'\nimport { beginSignOut, currentToken, whoAmI } from './auth/estivaId'\nimport { APP_TITLE, ID_CONFIG, RELAY_URL } from './config'\nimport { HomePage } from './pages/HomePage'\nimport { useRelayState } from './relay/useRelayState'\n\n/** The frame: the package's AppShell with a sidebar, and the one page. */\nexport function App() {\n  const signedIn = currentToken() !== null\n  const [me, setMe] = useState<Identity>({})\n  const relayState = useRelayState()\n\n  useEffect(() => {\n    if (!signedIn) return\n    let live = true\n    void whoAmI().then((who) => {\n      if (live && who) setMe(who)\n    })\n    return () => {\n      live = false\n    }\n  }, [signedIn])\n\n  return (\n    <AppShell\n      logo={APP_TITLE}\n      identity={<IdentityMenu me={me} signedIn={signedIn} idBase={ID_CONFIG?.base} onSignOut={signedIn ? beginSignOut : undefined} />}\n      nav={\n        <Sidebar>\n          <NavItem href=\"/\" label=\"Home\" icon={<IconHome size={16} stroke={1.5} />} active />\n        </Sidebar>\n      }\n    >\n      <HomePage relay={RELAY_URL} state={relayState} name={me.name} />\n    </AppShell>\n  )\n}\n`,\n    'src/pages/HomePage.tsx': `import type { RelayState } from '@estiva-app/protocol'\nimport { EmptyState } from '@estiva-app/ui'\nimport { relayLabel } from '../config'\n\nexport interface HomePageProps {\n  /** The relay this build is set to, or \\`null\\` when the app runs alone. */\n  relay: string | null\n  /** The connection's state: \\`'off'\\` when this build has no client. */\n  state: RelayState | 'off'\n  /** The signed-in person's name, once Estiva ID has said it. */\n  name?: string\n}\n\nconst SAYS: Record<RelayState, (host: string, name?: string) => string> = {\n  connecting: (host) => \\`Connecting to \\${host}\u2026\\`,\n  authenticating: (host) => \\`Signing in to \\${host}\u2026\\`,\n  live: (host, name) => (name ? \\`Connected to \\${host} as \\${name}.\\` : \\`Connected to \\${host}.\\`),\n  reconnecting: (host) => \\`Reconnecting to \\${host}\u2026\\`,\n  failed: (host) => \\`Could not connect to \\${host}.\\`,\n}\n\n/**\n * The first page. What it becomes is this app's own work; until then it says\n * whether the app is connected to the relay, and as whom.\n *\n * The empty state goes straight into the frame's \\`main\\`, with no box around it:\n * \\`main\\` is a flex column, so the empty state takes the room left and centres\n * in it both ways, as its own page says. A box around it would place it\n * instead, and no gate reads a box. The connection is a quiet caption after it,\n * at the foot of the page.\n */\nexport function HomePage({ relay, state, name }: HomePageProps) {\n  const line = !relay\n    ? 'Running alone: no relay is set. Set VITE_RELAY_URL in .env.local to connect.'\n    : state === 'off'\n      ? \\`Not connected: \\${relayLabel(relay)} needs sign-in, and this build has none.\\`\n      : SAYS[state](relayLabel(relay), name)\n  return (\n    <>\n      <EmptyState message=\"Nothing here yet.\" />\n      <p className=\"px-6 pb-6 text-center text-caption text-text-muted\">{line}</p>\n    </>\n  )\n}\n`,\n    'src/pages/HomePage.stories.tsx': `import type { Meta, StoryObj } from '@storybook/react-vite'\nimport { HomePage } from './HomePage'\n\nconst meta = {\n  title: 'Pages/Home',\n  component: HomePage,\n  parameters: { layout: 'fullscreen' },\n  // Stands in for the frame's main: a flex column the height of the screen,\n  // which is what the page is drawn into in the app.\n  decorators: [\n    (Story) => (\n      <div className=\"flex h-screen flex-col\">\n        <Story />\n      </div>\n    ),\n  ],\n} satisfies Meta<typeof HomePage>\n\nexport default meta\ntype Story = StoryObj<typeof meta>\n\n/** No relay set: the app runs alone, the way it starts. */\nexport const RunningAlone: Story = { args: { relay: null, state: 'off' } }\n\n/** A relay set, before it has signed the connection in. */\nexport const Connecting: Story = { args: { relay: 'http://localhost:3000', state: 'connecting' } }\n\n/** Connected, as the person who signed in. */\nexport const Connected: Story = { args: { relay: 'http://localhost:3000', state: 'live', name: 'Alex Kim' } }\n`,\n    'src/App.test.tsx': `import { render, screen } from '@testing-library/react'\nimport { describe, expect, it } from 'vitest'\nimport { App } from './App'\nimport { APP_TITLE } from './config'\n\ndescribe('${title}', () => {\n  it('opens in its frame, anonymous in a build with no sign-in', () => {\n    render(<App />)\n    expect(screen.getAllByText(APP_TITLE).length).toBeGreaterThan(0)\n    expect(screen.getByText('Nothing here yet.')).toBeTruthy()\n    expect(screen.getByText(/^Running alone/)).toBeTruthy()\n    expect(screen.getByRole('link', { name: 'Home' })).toBeTruthy()\n  })\n})\n`,\n\n    '.storybook/main.ts': `import type { StorybookConfig } from '@storybook/react-vite'\n\nconst config: StorybookConfig = {\n  framework: '@storybook/react-vite',\n  stories: ['../src/**/*.stories.@(ts|tsx)'],\n  addons: ['@storybook/addon-docs'],\n}\n\nexport default config\n`,\n    '.storybook/preview.tsx': `import type { Preview } from '@storybook/react-vite'\nimport '../src/index.css'\n\n// The app's one theme, selected the way the app selects it: on <html>.\ndocument.documentElement.dataset.theme = ${JSON.stringify(theme)}\n\nconst preview: Preview = {\n  parameters: { layout: 'centered' },\n}\n\nexport default preview\n`,\n\n    'README.md': `# ${title}\n\nAn Estiva app, made with \\`create-estiva-app\\` from \\`@estiva-app/ui\\`. It starts\nwith the package's sidebar frame, one theme (\\`${theme}\\`), sign-in with Estiva ID,\nand every UI Guardrails gate on, at zero.\n\n## Run it\n\n\\`\\`\\`sh\nnpm install\nnpm run dev\n\\`\\`\\`\n\nWith no settings it runs **anonymous**: no sign-in is offered, and nothing reaches\nthe real Estiva ID. To sign in, copy \\`.env.example\\` to \\`.env.local\\` and fill it in.\nThe app must first be registered with that Estiva ID as its own app.\n\n## The relay\n\n${title} is connected to the relay, the workspace, from its first commit, as\nwhoever signed in. \\`src/relay/client.ts\\` holds the tab's one connection: ask it\nfor \\`relayClient()\\`, and never open a socket of your own. The home page shows the\nconnection's state.\n\nWith \\`VITE_RELAY_URL\\` empty it runs alone and opens no connection. The relay\nalso needs sign-in, so with a relay and no sign-in there is no connection either.\n\nThree packages come with it: \\`@estiva-app/protocol\\` (the wire: events, ids,\nsigning, the relay clients), \\`@estiva-app/platform\\` (the one connection a tab\nholds) and \\`@estiva-app/interop\\` (showing another app's objects, from the\nmanifest that app publishes).\n\n## What you fill in\n\n1. \\`.env.local\\`: Estiva ID and the relay (see \\`.env.example\\`).\n2. \\`KINDS\\` in \\`src/relay/client.ts\\`: the event kinds ${title} reads. Until then\n   it is connected and reads nothing.\n3. The product: its pages, and the fold that turns what arrives on the\n   connection into the app's state.\n\nBefore ${title} can sign in on the real Estiva ID it has to be registered there\nas its own app, with:\n\n- its exact redirect address\n- every event kind it will sign, **including 22242**, the relay's sign-in handshake\n- the relay's address, allowed for that handshake. Estiva ID signs a handshake\n  only for a relay both the app and the deployment allow.\n\nAnything left out fails at the very last step: every screen looks right, and\nnothing arrives.\n\n## The checks\n\n| command | what |\n|---|---|\n| \\`npm run typecheck\\` | TypeScript, the app and its settings files |\n| \\`npm run lint\\` | everything: TypeScript's and React's rules, the token contract, the gate |\n| \\`npm run lint:rules\\` | the gate alone, and \\`.gates-count.json\\` \u2014 CI's job \\`gate\\` |\n| \\`npm test\\` | the tests |\n| \\`npm run build\\` | the build |\n| \\`npm run gates:status\\` | which gates are on, read from the code |\n| \\`npm run ui:find <words>\\` | what the package and this app already have for it |\n| \\`npm run registry:check\\` | every part says what it is for \u2014 CI's job \\`gate\\` |\n| \\`npm run storybook\\` | the stories |\n\nThe gates are the package's, imported rather than copied, so a rule written later\narrives with an ordinary version bump. A Claude session started in this folder is\nstopped before it writes code the gate refuses (\\`.claude/settings.json\\`).\n\n## Once it is on GitHub\n\nRequire the check \\`gate\\` before anything merges into \\`main\\`: a ruleset on \\`main\\`\n(Settings \u2192 Rules \u2192 Rulesets) with \"Require status checks to pass\", the check\n\\`gate\\`, and no one allowed to bypass it. Until then \\`npm run gates:status\\` shows\nUIG-6 as not done.\n`,\n    'CLAUDE.md': `# ${title}, for Claude Code\n\n${title} is an Estiva app. Its parts, tokens and gates come from \\`@estiva-app/ui\\`.\n\n**Use the package's parts, never a raw element or a hand-built look.** The gate\nrefuses a raw control, behaviour a part owns written by hand, and a part restyled\nthrough \\`className\\`, and names what to use instead. It runs before you write\n(the hook in \\`.claude/settings.json\\`, for a session started in this folder), in\n\\`npm run lint:rules\\` and in CI. A session started elsewhere: run\n\\`npm run lint:rules\\` after changing \\`src/\\`, and fix what it reports. Keep something\nonly with its reason on the line above, \\`// @estiva-escape: <reason>\\`, never with\n\\`eslint-disable\\`.\n\n**Tokens only.** Colours, type, corners and shadows come from the package's preset.\n\n**One relay connection per tab.** \\`relayClient()\\` in \\`src/relay/client.ts\\` is the\nconnection. Never open a socket and never make a second holder: the relay signs a\nconnection in once, and caps subscriptions per connection.\n\n**Look before you build.** \\`npm run ui:find <what it does>\\` searches the package's\nparts and this app's own. Use what it finds.\n\n**Every part says what it is for.** A new part gets a one-line \\`/** \u2026 */\\` comment\ndirectly above it. \\`npm run registry:check\\` and CI's job \\`gate\\` refuse a part without one.\n\n**The count starts at zero and stays there** (\\`.gates-count.json\\`, \\`docs/GATES-DEBT.md\\`).\n\nWhat each gate is and how it is wired: the package's README,\n\\`node_modules/@estiva-app/ui/README.md\\`.\n`,\n  }\n}\n\n/** The versions of what this package does not use itself, from the npm registry. */\nexport function askNpm(names: string[]): Record<string, string> {\n  const npm = process.env.npm_execpath\n  const out: Record<string, string> = {}\n  for (const name of names) {\n    const args = ['view', name, 'version']\n    const version = (npm ? execFileSync(process.execPath, [npm, ...args]) : execFileSync(process.platform === 'win32' ? 'npm.cmd' : 'npm', args, { shell: process.platform === 'win32' }))\n      .toString()\n      .trim()\n    if (!/^\\d+\\.\\d+\\.\\d+/.test(version)) throw new Error(`npm did not say which version of ${name} is current: \"${version}\"`)\n    out[name] = `^${version}`\n  }\n  return out\n}\n\n/** Write the app. Refuses a folder that already exists. Returns the folder. */\nexport function createApp(options: CreateAppOptions): string {\n  const dir = resolve(options.parent ?? process.cwd(), options.name)\n  if (existsSync(dir)) throw new Error(`${dir} already exists: create-estiva-app never writes into a folder that is there`)\n  const pkg = JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8')) as PackageJson\n  const missing = ASKED_OF_NPM.filter((n) => !pkg.devDependencies[n] && !options.versions?.[n])\n  const versions = { ...(missing.length ? askNpm(missing) : {}), ...options.versions }\n  const files = appFiles({ ...options, versions })\n  for (const [rel, text] of Object.entries(files)) {\n    const path = join(dir, rel)\n    mkdirSync(dirname(path), { recursive: true })\n    writeFileSync(path, text)\n  }\n  return dir\n}\n"],
-  "mappings": ";;;AAgCA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAsB7B,IAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,IAAM,cAAc,QAAQ,MAAM,MAAM,IAAI;AAGrC,IAAM,eAAe,CAAC,wBAAwB,uBAAuB,wBAAwB,wBAAwB,2BAA2B;AAGhJ,SAAS,SAAmB;AACjC,QAAM,MAAM,aAAa,KAAK,aAAa,YAAY,GAAG,MAAM;AAChE,SAAO,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,SAAS,wBAAwB,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3F;AAGO,SAAS,SAAS,EAAE,MAAM,QAAQ,MAAM,QAAQ,SAAS,IAAI,WAAW,CAAC,EAAE,GAA6C;AAC7H,MAAI,CAAC,oBAAoB,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,IAAI,IAAI,+FAA+F;AAC5J,QAAM,QAAQ,OAAO;AACrB,MAAI,CAAC,MAAM,SAAS,KAAK,EAAG,OAAM,IAAI,MAAM,IAAI,KAAK,yCAAyC,MAAM,KAAK,IAAI,CAAC,EAAE;AAEhH,QAAM,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC9E,QAAM,MAAM,CAAC,QAAgB;AAC3B,UAAM,QAAQ,IAAI,gBAAgB,GAAG,KAAK,SAAS,GAAG;AACtD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,kBAAkB,GAAG,EAAE;AACnD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,UAAoB,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAElF,QAAM,cAAc;AAAA,IAClB;AAAA,IACA,SAAS;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,IACN,SAAS;AAAA,MACP,KAAK;AAAA,MACL,OAAO;AAAA,MACP,SAAS;AAAA,MACT,WAAW;AAAA,MACX,MAAM;AAAA,MACN,eAAe;AAAA,MACf,cAAc;AAAA,MACd,kBAAkB,6BAA6B,IAAI;AAAA,MACnD,gBAAgB;AAAA,MAChB,WAAW;AAAA,MACX,UAAU;AAAA,MACV,kBAAkB;AAAA,MAClB,MAAM;AAAA,MACN,WAAW;AAAA,MACX,mBAAmB;AAAA,IACrB;AAAA,IACA,cAAc;AAAA,MACZ,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,uBAAuB,IAAI,qBAAqB;AAAA,MAChD,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,wBAAwB,IAAI,sBAAsB;AAAA,MAClD,kBAAkB,MAAM,IAAI,IAAI,OAAO;AAAA,MACvC,GAAG,KAAK,CAAC,uBAAuB,SAAS,WAAW,CAAC;AAAA,IACvD;AAAA,IACA,iBAAiB,KAAK;AAAA,MACpB;AAAA,MAAc;AAAA,MAAyB;AAAA,MAAyB;AAAA,MAAwB;AAAA,MACxF;AAAA,MAAe;AAAA,MAAgB;AAAA,MAAoB;AAAA,MAAwB;AAAA,MAAgB;AAAA,MAC3F;AAAA,MAAoC;AAAA,MAA6B;AAAA,MAAW;AAAA,MAAS;AAAA,MAAW;AAAA,MAChG;AAAA,MAAe;AAAA,MAAc;AAAA,MAAqB;AAAA,MAAQ;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,EAAE,eAAe,GAAG,MAAM,MAAM,cAAa,oBAAI,KAAK,GAAE,YAAY,GAAG,OAAO,OAAO,YAAY,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;AACvL,QAAM,YAAY,gBAAgB,KAAK;AACvC,QAAM,SAAS;AAAA,IACb,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,kBAAkB;AAAA,IAClB,4BAA4B;AAAA,IAC5B,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,IACpB,oBAAoB;AAAA,IACpB,4BAA4B;AAAA,IAC5B,8BAA8B;AAAA,EAChC;AACA,QAAM,OAAO,CAAC,UAAmB,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA;AAElE,SAAO;AAAA,IACL,gBAAgB,KAAK,WAAW;AAAA;AAAA;AAAA,IAIhC,cAAc,CAAC,gBAAgB,QAAQ,oBAAoB,WAAW,SAAS,iBAAiB,aAAa,iBAAiB,EAAE,EAAE,KAAK,IAAI;AAAA,IAE3I,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAUO,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa3B,cAAc;AAAA,iBACD,SAAS;AAAA;AAAA;AAAA;AAAA,aAIb,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASd,iBAAiB,KAAK,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,EAAE,MAAM,sBAAsB,GAAG,EAAE,MAAM,uBAAuB,CAAC,EAAE,CAAC;AAAA,IACpH,qBAAqB,KAAK;AAAA,MACxB,iBAAiB,EAAE,iBAAiB,gDAAgD,GAAG,QAAQ,yBAAyB,MAAM,KAAK,CAAC,UAAU,OAAO,cAAc,GAAG,OAAO,CAAC,aAAa,GAAG,KAAK,aAAa,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE;AAAA,MAC9O,SAAS,CAAC,OAAO,YAAY;AAAA,IAC/B,CAAC;AAAA,IACD,sBAAsB,KAAK;AAAA,MACzB,iBAAiB,EAAE,iBAAiB,iDAAiD,GAAG,QAAQ,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE;AAAA,MACjI,SAAS,CAAC,gBAAgB;AAAA,IAC5B,CAAC;AAAA,IAED,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAkBlB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAiBtB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQrB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA2BpB,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa3B,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAe1B,yBAAyB,KAAK;AAAA,MAC5B,OAAO;AAAA,QACL,YAAY,CAAC,EAAE,SAAS,cAAc,OAAO,CAAC,EAAE,MAAM,WAAW,SAAS,gFAAgF,CAAC,EAAE,CAAC;AAAA,MAChK;AAAA,IACF,CAAC;AAAA,IAED,4BAA4B;AAAA;AAAA;AAAA,iCAGC,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKjB,IAAI;AAAA;AAAA;AAAA,IAGpB,qBAAqB,KAAK,KAAK;AAAA,IAC/B,sBAAsB,UAAU,KAAK;AAAA;AAAA,WAE9B,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOZ,gCAAgC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAYlB,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyDlB,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAajB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQrB,iBAAiB;AAAA,2BACM,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4B5C,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAmBR,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAmEpB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAsEpB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4B1B,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAgDA,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,IAK3B,8BAA8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAY9B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CA8Bc,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CAmBJ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAW9C,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA4BhB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAwCf,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA6C1B,kCAAkC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IA8BlC,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA,YAKZ,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAWb,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUtB,0BAA0B;AAAA;AAAA;AAAA;AAAA,2CAIa,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAS5D,aAAa,KAAK,KAAK;AAAA;AAAA;AAAA,iDAGsB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBpD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAgBoD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,SAKvD,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAoCV,aAAa,KAAK,KAAK;AAAA;AAAA,EAEzB,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA4BL;AACF;AAGO,SAAS,OAAO,OAAyC;AAC9D,QAAM,MAAM,QAAQ,IAAI;AACxB,QAAM,MAA8B,CAAC;AACrC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,CAAC,QAAQ,MAAM,SAAS;AACrC,UAAM,WAAW,MAAM,aAAa,QAAQ,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,aAAa,QAAQ,aAAa,UAAU,YAAY,OAAO,MAAM,EAAE,OAAO,QAAQ,aAAa,QAAQ,CAAC,GACjL,SAAS,EACT,KAAK;AACR,QAAI,CAAC,iBAAiB,KAAK,OAAO,EAAG,OAAM,IAAI,MAAM,oCAAoC,IAAI,iBAAiB,OAAO,GAAG;AACxH,QAAI,IAAI,IAAI,IAAI,OAAO;AAAA,EACzB;AACA,SAAO;AACT;AAGO,SAAS,UAAU,SAAmC;AAC3D,QAAM,MAAM,QAAQ,QAAQ,UAAU,QAAQ,IAAI,GAAG,QAAQ,IAAI;AACjE,MAAI,WAAW,GAAG,EAAG,OAAM,IAAI,MAAM,GAAG,GAAG,6EAA6E;AACxH,QAAM,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,cAAc,GAAG,MAAM,CAAC;AAC9E,QAAM,UAAU,aAAa,OAAO,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,WAAW,CAAC,CAAC;AAC5F,QAAM,WAAW,EAAE,GAAI,QAAQ,SAAS,OAAO,OAAO,IAAI,CAAC,GAAI,GAAG,QAAQ,SAAS;AACnF,QAAM,QAAQ,SAAS,EAAE,GAAG,SAAS,SAAS,CAAC;AAC/C,aAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC/C,UAAM,OAAO,KAAK,KAAK,GAAG;AAC1B,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,kBAAc,MAAM,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;",
-  "names": []
-}