@exxatdesignux/ui 0.5.11 → 0.5.13

package/template/ecosystem.config.cjs

@@ -1,32 +0,0 @@
-/**
- * PM2 — keep `next dev` running after the terminal closes; restarts on crash.
- * Start: `nvm use && npm run dev:daemon`
- * @see README.md — Development (daemon)
- * @see docs/perf-memory-pattern.md — Dev memory tuning
- */
-module.exports = {
-  apps: [
-    {
-      name: "exxat-ds",
-      script: "npm",
-      args: "run dev",
-      cwd: __dirname,
-      interpreter: "none",
-      autorestart: true,
-      max_restarts: 30,
-      min_uptime: "4s",
-      exp_backoff_restart_delay: 2000,
-      // Dev memory tuning. NODE_OPTIONS is inherited by the spawned Node
-      // process (`next-server`) — the npm parent doesn't read it but its
-      // children do. See docs/perf-memory-pattern.md §2.
-      env: {
-        NODE_OPTIONS: "--max-old-space-size=6144 --max-semi-space-size=64",
-        NEXT_TELEMETRY_DISABLED: "1",
-      },
-      // Recycle the daemon if the dev server's RSS climbs past 7GB rather
-      // than letting macOS swap. PM2 emits a `max_memory_restart` event so
-      // `pm2 logs` shows the restart cause.
-      max_memory_restart: "7G",
-    },
-  ],
-}

package/template/next.config.mjs

@@ -1,216 +0,0 @@
-import bundleAnalyzer from "@next/bundle-analyzer"
-
-const withBundleAnalyzer = bundleAnalyzer({
-  enabled: process.env.ANALYZE === "true",
-})
-
-const isDev = process.env.NODE_ENV !== "production"
-
-/**
- * Content Security Policy
- *
- * Allowlist matches the runtime third-party origins this app actually contacts
- * (see `app/layout.tsx` and `lib/{logo-dev,stock-portrait}.ts`):
- *
- *   • Font Awesome Pro Kit  — *.fontawesome.com (loader at kit.*, Pro CSS/font/telemetry
- *                             at ka-p.*, free fallback at ka-f.*). Wildcard is used
- *                             because FA rotates resource subdomains per kit tier and
- *                             every subdomain is FA-controlled.
- *   • Adobe Typekit         — use.typekit.net (CSS) + p.typekit.net (font files)
- *   • Avatars (mock)        — img.logo.dev (school logos), randomuser.me (mock portraits)
- *
- * `'unsafe-inline'` is kept for `style-src` because Tailwind injects inline styles
- * and the chart primitive uses one `<style dangerouslySetInnerHTML>` block for
- * per-instance CSS variables. `'unsafe-inline'` is kept for `script-src` because
- * Next.js inlines small bootstrap scripts (page data, RSC payload) on every
- * route; migrating to nonces is a separate refactor. `'unsafe-eval'` is only
- * permitted in development for HMR.
- *
- * If you add a new third-party origin (fonts, images, telemetry), update the
- * matching directive below before shipping.
- */
-function buildContentSecurityPolicy() {
-  // `https://*.fontawesome.com` covers every FA Kit subdomain (loader at
-  // `kit.fontawesome.com`, Pro resources at `ka-p.fontawesome.com`, free
-  // fallback at `ka-f.fontawesome.com`, telemetry, etc.) without us having to
-  // chase per-tier subdomain changes. Every subdomain is FA-controlled.
-  const FA_HOSTS = "https://*.fontawesome.com"
-
-  const scriptSrc = [
-    "'self'",
-    "'unsafe-inline'",
-    isDev ? "'unsafe-eval'" : "",
-    FA_HOSTS,
-  ]
-    .filter(Boolean)
-    .join(" ")
-
-  const styleSrc = [
-    "'self'",
-    "'unsafe-inline'",
-    "https://use.typekit.net",
-    "https://p.typekit.net",
-    FA_HOSTS,
-  ].join(" ")
-
-  const fontSrc = [
-    "'self'",
-    "data:",
-    "https://use.typekit.net",
-    "https://p.typekit.net",
-    FA_HOSTS,
-  ].join(" ")
-
-  const imgSrc = [
-    "'self'",
-    "data:",
-    "blob:",
-    "https://img.logo.dev",
-    "https://randomuser.me",
-    FA_HOSTS,
-  ].join(" ")
-
-  const connectSrc = [
-    "'self'",
-    "https://use.typekit.net",
-    FA_HOSTS,
-    // Next.js dev server uses websockets for HMR.
-    isDev ? "ws:" : "",
-    isDev ? "wss:" : "",
-  ]
-    .filter(Boolean)
-    .join(" ")
-
-  const directives = [
-    `default-src 'self'`,
-    `script-src ${scriptSrc}`,
-    `style-src ${styleSrc}`,
-    `font-src ${fontSrc}`,
-    `img-src ${imgSrc}`,
-    `connect-src ${connectSrc}`,
-    `frame-ancestors 'none'`,
-    `frame-src 'none'`,
-    `object-src 'none'`,
-    `base-uri 'self'`,
-    `form-action 'self'`,
-    `manifest-src 'self'`,
-    `worker-src 'self' blob:`,
-    // `upgrade-insecure-requests` is only meaningful on HTTPS responses.
-    isDev ? "" : "upgrade-insecure-requests",
-  ]
-    .filter(Boolean)
-    .join("; ")
-
-  return directives
-}
-
-const SECURITY_HEADERS = [
-  {
-    key: "Content-Security-Policy",
-    value: buildContentSecurityPolicy(),
-  },
-  // Defence-in-depth — `frame-ancestors 'none'` already blocks framing in
-  // modern browsers, but X-Frame-Options is still honoured by older clients
-  // and is required by some scanners.
-  { key: "X-Frame-Options", value: "DENY" },
-  { key: "X-Content-Type-Options", value: "nosniff" },
-  { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
-  {
-    key: "Permissions-Policy",
-    value: [
-      "accelerometer=()",
-      "autoplay=()",
-      "camera=()",
-      "display-capture=()",
-      "encrypted-media=()",
-      "fullscreen=(self)",
-      "geolocation=()",
-      "gyroscope=()",
-      "magnetometer=()",
-      "microphone=()",
-      "midi=()",
-      "payment=()",
-      "picture-in-picture=()",
-      "publickey-credentials-get=()",
-      "screen-wake-lock=()",
-      "sync-xhr=()",
-      "usb=()",
-      "xr-spatial-tracking=()",
-      "interest-cohort=()",
-    ].join(", "),
-  },
-  // HSTS only takes effect over HTTPS; harmless on http://localhost during dev.
-  // Subdomain + preload opt-in — drop `; preload` if the apex domain is not
-  // ready for the HSTS preload list.
-  {
-    key: "Strict-Transport-Security",
-    value: "max-age=63072000; includeSubDomains; preload",
-  },
-  { key: "X-DNS-Prefetch-Control", value: "on" },
-  { key: "Cross-Origin-Opener-Policy", value: "same-origin" },
-]
-
-/** @type {import('next').NextConfig} */
-const nextConfig = {
-  transpilePackages: ["@exxatdesignux/ui"],
-  // Hard cap on the Turbopack worker. Without this, the dev cache + module
-  // graph + mmap'd .meta files grow unbounded (we observed 3.2 GB on disk
-  // and 5+ GB RSS per process). 4 GiB is generous — Turbopack rarely needs
-  // more on apps with < ~1000 routes. See `docs/perf-memory-pattern.md` §6.
-  turbopack: {
-    memoryLimit: 4 * 1024 * 1024 * 1024,
-  },
-  // Dev memory tuning — see `docs/perf-memory-pattern.md` for rationale.
-  experimental: {
-    // Tree-shake heavy barrel re-exports. Every package here was identified by
-    // bundle analyzer as a re-export hot spot in the dev server's heap snapshot.
-    optimizePackageImports: [
-      "lucide-react",
-      "recharts",
-      "@exxatdesignux/ui",
-      "@tabler/icons-react",
-      "motion",
-      "@dnd-kit/core",
-      "@dnd-kit/sortable",
-      "@dnd-kit/modifiers",
-      "@dnd-kit/utilities",
-    ],
-    // Compile routes the user actually visits instead of pre-warming every
-    // entry on `next dev` start. The dev server reaches a usable state in
-    // ~2s instead of ~15s on this app and steady-state heap is ~30% lower.
-    preloadEntriesOnStart: false,
-    // Webpack fallback (`pnpm dev:webpack`) — drops large in-memory caches at
-    // the cost of slightly slower rebuilds. Ignored by Turbopack.
-    webpackMemoryOptimizations: true,
-  },
-  // Cap how long inactive routes stay compiled in the dev server's memory.
-  // Defaults (25s / 2 pages) are fine for small apps — keeping them explicit
-  // makes the trade-off discoverable when memory grows on a larger app.
-  onDemandEntries: {
-    maxInactiveAge: 25 * 1000,
-    pagesBufferLength: 2,
-  },
-  async headers() {
-    return [
-      {
-        // Apply to every route. Static assets under `/_next/static/*` get the
-        // same headers — that's fine since they are first-party.
-        source: "/:path*",
-        headers: SECURITY_HEADERS,
-      },
-    ]
-  },
-  async redirects() {
-    return [
-      // Legacy demo routes (placements, rotations, compliance, sites) were removed.
-      // Redirect anything pointing at them to Dashboard rather than 404.
-      { source: "/rotations", destination: "/dashboard", permanent: false },
-      { source: "/compliance", destination: "/dashboard", permanent: false },
-      { source: "/sites/all", destination: "/dashboard", permanent: false },
-      { source: "/sites/all/:path*", destination: "/dashboard", permanent: false },
-      { source: "/examples", destination: "/dashboard", permanent: false },
-    ]
-  },
-}
-
-export default withBundleAnalyzer(nextConfig)

package/template/postcss.config.mjs

@@ -1,8 +0,0 @@
-/** @type {import('postcss-load-config').Config} */
-const config = {
-  plugins: {
-    "@tailwindcss/postcss": {},
-  },
-}
-
-export default config

package/template/tests/setup.ts

@@ -1,26 +0,0 @@
-import "@testing-library/jest-dom/vitest"
-import { vi } from "vitest"
-
-// jsdom does not implement window.matchMedia — stub it for tests that use
-// useTableState (which calls useSyncExternalStore with a matchMedia listener)
-Object.defineProperty(window, "matchMedia", {
-  writable: true,
-  value: (query: string) => ({
-    matches: false,
-    media: query,
-    onchange: null,
-    addListener: vi.fn(),
-    removeListener: vi.fn(),
-    addEventListener: vi.fn(),
-    removeEventListener: vi.fn(),
-    dispatchEvent: vi.fn(),
-  }),
-})
-
-// jsdom does not implement ResizeObserver — stub it for components that use
-// Radix UI primitives (Sheet, Tooltip, etc.) which call it internally.
-globalThis.ResizeObserver = class {
-  observe = vi.fn()
-  unobserve = vi.fn()
-  disconnect = vi.fn()
-}

package/template/vitest.config.ts

@@ -1,18 +0,0 @@
-import path from "node:path"
-import { defineConfig } from "vitest/config"
-import react from "@vitejs/plugin-react"
-
-export default defineConfig({
-  plugins: [react()],
-  test: {
-    environment: "jsdom",
-    setupFiles: ["./tests/setup.ts"],
-    include: ["**/*.{test,spec}.{ts,tsx}"],
-    exclude: ["node_modules", ".next", "out", "build"],
-  },
-  resolve: {
-    alias: {
-      "@": path.resolve(__dirname, "./"),
-    },
-  },
-})