@gspothq/cli 0.0.0-stage → 0.1.1

package/configurations/language/css/manifest.toml

@@ -0,0 +1,98 @@
+allowed_words = ["CSS"]
+[configuration]
+title = "CSS"
+description = "CSS files and the style blocks of Vue and Svelte components: Stylelint with the standard rules, Prettier for layout, and CSS module classes that are both defined and used. SCSS receives formatting only."
+
+[detect]
+extensions = [".css", ".vue", ".svelte"]
+
+[files]
+extensions = [".css"]
+
+[[tool]]
+name = "stylelint"
+suppression = { marker = "^(?:/\\*|//)\\s*stylelint-disable(?:-next-line|-line)?(?=\\s|$)", reason = " -- (?<reason>\\S(?:[\\s\\S]*?\\S)?)\\s*(?:\\*/)?$" }
+version = "16.23.1"
+npm = "stylelint"
+[[tool.replace]]
+file = ".stylelintrc"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.json"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.js"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.cjs"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.mjs"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.yml"
+shared = false
+
+[[tool.replace]]
+file = ".stylelintrc.yaml"
+shared = false
+
+[[tool.replace]]
+file = "stylelint.config.js"
+shared = false
+
+[[tool.replace]]
+file = "stylelint.config.cjs"
+shared = false
+
+[[tool.replace]]
+file = "stylelint.config.mjs"
+shared = false
+
+[[tool.replace]]
+file = "package.json"
+key = "stylelint"
+redirect = true
+shared = true
+
+[[tool]]
+name = "stylelint-config-standard"
+kind = "library"
+version = "39.0.0"
+npm = "stylelint-config-standard"
+
+[[tool]]
+name = "postcss-html"
+kind = "library"
+version = "2.0.0"
+npm = "postcss-html"
+
+[[tool_file]]
+target = ".gspot/config/stylelint.json"
+tool = "stylelint"
+rule_keys = ["rules"]
+per_scope = true
+pointer = { path = ".stylelintrc.json", body = "{\n    \"extends\": \"{target}\"\n}\n" }
+
+[[check]]
+name = "stylelint"
+tool = ["stylelint", "stylelint-config-standard"]
+example = "The declaration `color: #ggg` uses an invalid hexadecimal color and reports a Stylelint finding. Replace it with a valid intended color such as `#abc`."
+level = "recommended"
+stage = "commit"
+command = ["stylelint", "--config", "{tool_file:stylelint}", "--config-basedir", "{root}/.gspot", "--formatter", "unix", "--allow-empty-input", "{files}"]
+fix = ["stylelint", "--config", "{tool_file:stylelint}", "--config-basedir", "{root}/.gspot", "--fix", "--allow-empty-input", "{files}"]
+exit_codes = [2]
+files = { extensions = [".css", ".vue", ".svelte"] }
+output = { format = "regex", pattern = "^(?<file>.+?):(?<line>\\d+):(?<column>\\d+): (?<message>.*) \\((?<rule>[\\w/@-]+)\\) \\[\\w+\\]$" }
+summary = "Lints every stylesheet with the standard stylelint rules: unknown properties, overridden selectors, and invalid values."
+why = "A browser skips a declaration it cannot read without a word, so a typo in a property ships as a missing style."
+help = "Run gspot check --fix for the rules that fix themselves. Turn one rule off with gspot ignore css/stylelint --rule `<name>` --reason \"`<why>`\"."
+
+[rules]
+"TAILWIND.md" = { dependencies = ["tailwindcss"] }

package/configurations/language/css/rules/CSS.md

@@ -0,0 +1,28 @@
+# CSS
+
+## Correctness and accessibility
+
+- Use logical properties where layout follows the writing direction.
+- Use relative units and wrapping so long text and large fonts fit.
+
+## Structure
+
+<!-- level: all -->
+
+- Keep shared color, spacing, type, radius, and motion tokens in one owner.
+- Keep feature styles with their component or import them through the stylesheet entry.
+- Order rules from general styles to component states.
+
+## Selectors and layout
+
+<!-- level: all -->
+
+- Prefer class selectors with low specificity.
+- Prefer grid and flexbox for layout. Keep flow content in normal document flow.
+
+## Files
+
+<!-- level: all -->
+
+- Keep presentation in stylesheets or framework-owned component style blocks.
+- Let the framework own style scoping rather than duplicating selectors manually.

package/configurations/language/css/rules/NAMING.md

@@ -0,0 +1,17 @@
+# CSS Naming
+
+## Selector and file names
+
+<!-- level: all -->
+
+- Name classes for the component or state, such as `order-card`, `order-card-title`, `is-active`, or `has-error`.
+- A state class starts with `is-` or `has-`. A script toggles it. Never style it alone.
+- Custom properties name the role of the value, not its appearance:
+  `--color-surface`, `--space-2`, `--font-size-body`, never `--blue` or `--big-margin`.
+- Theme overrides reuse the same property names under a theme selector; they never introduce
+  theme-specific property names.
+- Keyframe names describe the motion, such as `fade-in` or `slide-from-start`.
+- Name stylesheet files for what they hold such as `order-card.css`,
+  `tokens.css`, `layout.css`.
+- Utility classes, when the project uses a utility system, keep that system's names; hand-written
+  do not add utilities beside it.

package/configurations/language/css/rules/TAILWIND.md

@@ -0,0 +1,26 @@
+# Tailwind CSS
+
+## Generated styles
+
+- Verify that source detection covers templates and content containing class names. Tailwind CSS 4
+  detects sources automatically; register excluded sources with `@source`. Tailwind CSS 3 uses
+  `content` configuration.
+- Keep complete class names in source so the scanner can find them.
+- Preserve the application's configured dark-mode strategy.
+- When the project configures a class-ordering formatter plugin, let that formatter own ordering.
+
+Use the [source detection documentation](https://tailwindcss.com/docs/detecting-classes-in-source-files)
+for the installed major version.
+
+## Styling conventions
+
+<!-- level: all -->
+
+- Use theme tokens for colors, spacing, radii, fonts, and breakpoints. Explain deliberate values
+  outside those tokens at their owner.
+- Compose component styles with utility classes. Keep reusable theme and utility declarations
+  in their configured style owner.
+- Use the project's adopted class-merging function when conditional utilities conflict.
+  Do not introduce a separate merging implementation.
+- Avoid handwritten CSS that duplicates an existing utility without a component requirement.
+- Follow the installed Tailwind version's syntax for custom utilities, variants, and plugins.

package/configurations/language/css/stylelint-rule-names.json

@@ -0,0 +1,89 @@
+{
+    "package": "stylelint-config-standard",
+    "version": "39.0.0",
+    "source": "resolveConfig.rules",
+    "rules": [
+        "alpha-value-notation",
+        "annotation-no-unknown",
+        "at-rule-descriptor-no-unknown",
+        "at-rule-descriptor-value-no-unknown",
+        "at-rule-empty-line-before",
+        "at-rule-no-deprecated",
+        "at-rule-no-unknown",
+        "at-rule-no-vendor-prefix",
+        "at-rule-prelude-no-invalid",
+        "block-no-empty",
+        "block-no-redundant-nested-style-rules",
+        "color-function-alias-notation",
+        "color-function-notation",
+        "color-hex-length",
+        "comment-empty-line-before",
+        "comment-no-empty",
+        "comment-whitespace-inside",
+        "container-name-pattern",
+        "custom-media-pattern",
+        "custom-property-empty-line-before",
+        "custom-property-no-missing-var-function",
+        "custom-property-pattern",
+        "declaration-block-no-duplicate-custom-properties",
+        "declaration-block-no-duplicate-properties",
+        "declaration-block-no-redundant-longhand-properties",
+        "declaration-block-no-shorthand-property-overrides",
+        "declaration-block-single-line-max-declarations",
+        "declaration-empty-line-before",
+        "declaration-property-value-keyword-no-deprecated",
+        "declaration-property-value-no-unknown",
+        "font-family-name-quotes",
+        "font-family-no-duplicate-names",
+        "font-family-no-missing-generic-family-keyword",
+        "function-calc-no-unspaced-operator",
+        "function-name-case",
+        "function-url-quotes",
+        "hue-degree-notation",
+        "import-notation",
+        "keyframe-block-no-duplicate-selectors",
+        "keyframe-declaration-no-important",
+        "keyframe-selector-notation",
+        "keyframes-name-pattern",
+        "layer-name-pattern",
+        "length-zero-no-unit",
+        "lightness-notation",
+        "media-feature-name-no-unknown",
+        "media-feature-name-no-vendor-prefix",
+        "media-feature-name-value-no-unknown",
+        "media-feature-range-notation",
+        "media-query-no-invalid",
+        "media-type-no-deprecated",
+        "named-grid-areas-no-invalid",
+        "nesting-selector-no-missing-scoping-root",
+        "no-descending-specificity",
+        "no-duplicate-at-import-rules",
+        "no-duplicate-selectors",
+        "no-empty-source",
+        "no-invalid-double-slash-comments",
+        "no-invalid-position-at-import-rule",
+        "no-invalid-position-declaration",
+        "no-irregular-whitespace",
+        "number-max-precision",
+        "property-no-deprecated",
+        "property-no-unknown",
+        "property-no-vendor-prefix",
+        "rule-empty-line-before",
+        "selector-anb-no-unmatchable",
+        "selector-attribute-quotes",
+        "selector-class-pattern",
+        "selector-id-pattern",
+        "selector-no-vendor-prefix",
+        "selector-not-notation",
+        "selector-pseudo-class-no-unknown",
+        "selector-pseudo-element-colon-notation",
+        "selector-pseudo-element-no-unknown",
+        "selector-type-case",
+        "selector-type-no-unknown",
+        "shorthand-property-no-redundant-values",
+        "string-no-newline",
+        "syntax-string-no-invalid",
+        "value-keyword-case",
+        "value-no-vendor-prefix"
+    ]
+}

package/configurations/language/html/manifest.toml

@@ -0,0 +1,59 @@
+allowed_words = ["HTML"]
+[configuration]
+title = "HTML"
+description = "HTML files: html-validate for structure and accessibility, no inline script or handler, and templates that hold placeholders in place of copy."
+
+[files]
+extensions = [".html", ".htm"]
+
+[[tool]]
+name = "html-validate"
+suppression = { marker = "^<!--\\s*\\[?html-validate-disable(?:-next|-block)?(?=\\s|\\]|$)", reason = "(?: -- |: )(?<reason>\\S(?:[\\s\\S]*?\\S)?)\\s*\\]?\\s*(?:--!?>)?$" }
+version = "11.6.1"
+npm = "html-validate"
+[[tool.replace]]
+file = ".htmlvalidate.json"
+shared = false
+
+[[tool.replace]]
+file = ".htmlvalidate.js"
+shared = false
+
+[[tool.replace]]
+file = ".htmlvalidate.cjs"
+shared = false
+
+[[tool_file]]
+target = ".gspot/config/html-validate-source.json"
+tool = "html-validate"
+check = "html/validate"
+rule_keys = ["rules"]
+
+[[check]]
+name = "validate"
+example = "An `<img src=\"logo.png\">` element without alternative text reports an accessibility finding under the configured rules. Add meaningful `alt` text, or an empty `alt` value for a decorative image."
+level = "recommended"
+stage = "commit"
+command = ["html-validate", "--config", "{tool_file:html-validate-source}", "--formatter", "json", "{files}"]
+output = { format = "json", children = "messages", fields = { file = "filePath", line = "line", column = "column", rule = "ruleId", message = "message" } }
+summary = "Validates every HTML file: elements where they may sit, required attributes, text alternatives, and one style for void elements."
+why = "A browser repairs broken markup in its own way, and a screen reader reads what the repair left."
+help = "Change the markup the way the rule page says. Turn one rule off with gspot ignore html/validate --rule `<name>` --reason \"`<why>`\"."
+
+[[check]]
+name = "scripts"
+example = "A button using an inline `onclick` attribute reports embedded executable code. Remove the attribute and attach the event listener from a separate script file."
+level = "all"
+stage = "commit"
+summary = "Refuses executable inline script, event handler attributes, and executable script or data URLs in HTML files."
+why = "A content security policy that allows inline script allows an injected one too, so the policy only holds when the pages hold none."
+help = "Move the script into a file, and attach the handler from that file. Structured data of type application/ld+json stays inline."
+
+[[check]]
+name = "template-text"
+example = "Text written into a file listed in html.templates reports a literal. Move the text to its content file and use a placeholder in the template."
+level = "all"
+stage = "commit"
+summary = "In the template files named by html.templates, checks that text a person reads is a placeholder and never a literal."
+why = "Copy written into a template is copy no translator and no content file ever sees."
+help = "Replace the text with a placeholder and put the words in the content file. Remove files that are not templates from html.templates."

package/configurations/language/html/rules/HTML.md

@@ -0,0 +1,27 @@
+# HTML
+
+## Document
+
+- `<html lang="...">` names the page language; set `dir` for a right-to-left language.
+- One `<title>` that names the page, a `<meta name="viewport">`, and a `<meta charset="utf-8">`
+  first in `<head>`.
+- Landmarks such as `header`, `nav`, `main`, `footer`, and `aside` structure the page. One `main`.
+
+## Elements
+
+- Use the element that means the thing: `button` for actions, `a` for navigation with a real
+  `href`, `nav` for navigation, `ul` and `ol` for lists, `table` for data, `time` with `datetime`
+  for dates, `figure` and `figcaption` for captioned media.
+- Never a `div` or `span` with a click handler standing in for a button or link.
+- `target="_blank"` links carry `rel="noopener"`.
+
+## Script safety
+
+- Use `defer` or `type="module"` for scripts that do not need to block parsing.
+
+## Templates and copy
+
+<!-- level: all -->
+
+- A template stays declarative: no logic beyond conditionals and loops the engine provides.
+- Generate deterministic HTML: the same inputs produce byte-identical output.

package/configurations/language/html/rules/NAMING.md

@@ -0,0 +1,16 @@
+# HTML Naming
+
+## Route and attribute names
+
+<!-- level: all -->
+
+- Use kebab-case file names that match the public route: `about-us.html`, `pricing/index.html`.
+  Directory routes end in `index.html` in generated output.
+- Name public route segments in lowercase kebab-case with no trailing slash ambiguity: one
+  canonical form, with the other redirected.
+- Use `id` attributes for anchors, labels, and descriptions, not for styling.
+- Name `data-*` attributes in kebab-case for their value, such as `data-device-class`.
+- Placeholders follow the engine's convention and name the value.
+- Name content files for the route or content they serve, such as `content/legal/privacy.md`.
+- Name asset files in kebab-case for their subject and role, such as `hero-phone-dark.webp`. Never use
+  `image1.png` or `final-v2.svg`. Generate hashed names rather than writing them by hand.