@gspothq/cli 0.0.0-stage → 0.1.1

package/configurations/framework/react/eslint-presets.json

@@ -0,0 +1,77 @@
+{
+    "recommended": {
+        "package": "eslint-plugin-react",
+        "version": "7.37.5",
+        "source": "configs.flat.recommended",
+        "blocks": [
+            {
+                "parser": false,
+                "rules": {
+                    "react/display-name": 2,
+                    "react/jsx-key": 2,
+                    "react/jsx-no-comment-textnodes": 2,
+                    "react/jsx-no-duplicate-props": 2,
+                    "react/jsx-no-target-blank": 2,
+                    "react/jsx-no-undef": 2,
+                    "react/jsx-uses-react": 2,
+                    "react/jsx-uses-vars": 2,
+                    "react/no-children-prop": 2,
+                    "react/no-danger-with-children": 2,
+                    "react/no-deprecated": 2,
+                    "react/no-direct-mutation-state": 2,
+                    "react/no-find-dom-node": 2,
+                    "react/no-is-mounted": 2,
+                    "react/no-render-return-value": 2,
+                    "react/no-string-refs": 2,
+                    "react/no-unescaped-entities": 2,
+                    "react/no-unknown-property": 2,
+                    "react/no-unsafe": 0,
+                    "react/prop-types": 2,
+                    "react/react-in-jsx-scope": 2,
+                    "react/require-render-return": 2
+                }
+            }
+        ]
+    },
+    "jsx": {
+        "package": "eslint-plugin-react",
+        "version": "7.37.5",
+        "source": "configs.flat.jsx-runtime",
+        "blocks": [{ "parser": false, "rules": { "react/react-in-jsx-scope": 0, "react/jsx-uses-react": 0 } }]
+    },
+    "hooks": {
+        "package": "eslint-plugin-react-hooks",
+        "version": "7.1.1",
+        "source": "configs.flat.recommended-latest",
+        "blocks": [
+            {
+                "parser": false,
+                "rules": {
+                    "react-hooks/rules-of-hooks": "error",
+                    "react-hooks/exhaustive-deps": "warn",
+                    "react-hooks/static-components": "error",
+                    "react-hooks/use-memo": "error",
+                    "react-hooks/void-use-memo": "error",
+                    "react-hooks/preserve-manual-memoization": "error",
+                    "react-hooks/incompatible-library": "warn",
+                    "react-hooks/immutability": "error",
+                    "react-hooks/globals": "error",
+                    "react-hooks/refs": "error",
+                    "react-hooks/set-state-in-effect": "error",
+                    "react-hooks/error-boundaries": "error",
+                    "react-hooks/purity": "error",
+                    "react-hooks/set-state-in-render": "error",
+                    "react-hooks/unsupported-syntax": "warn",
+                    "react-hooks/config": "error",
+                    "react-hooks/gating": "error"
+                }
+            }
+        ]
+    },
+    "refresh": {
+        "package": "eslint-plugin-react-refresh",
+        "version": "0.5.7",
+        "source": "configs.recommended",
+        "blocks": [{ "parser": false, "rules": { "react-refresh/only-export-components": ["error", {}] } }]
+    }
+}

package/configurations/framework/react/manifest.toml

@@ -0,0 +1,93 @@
+allowed_words = ["React"]
+
+[configuration]
+title = "React"
+requires = ["javascript"]
+suggests = ["typescript", "css", "react-dom"]
+description = "React components: the recommended React and hooks rules as errors, component files that keep their state on a reload."
+
+[detect]
+dependencies = ["react"]
+
+[[tool]]
+name = "eslint-plugin-react-hooks"
+rule_prefix = "react-hooks"
+kind = "library"
+version = "7.1.1"
+npm = "eslint-plugin-react-hooks"
+
+[[tool]]
+name = "eslint-plugin-react"
+rule_prefix = "react"
+kind = "library"
+version = "7.37.5"
+npm = "eslint-plugin-react"
+
+[[tool]]
+name = "eslint-plugin-react-refresh"
+rule_prefix = "react-refresh"
+kind = "library"
+version = "0.5.7"
+npm = "eslint-plugin-react-refresh"
+
+[[check]]
+name = "version-pairs"
+example = "Different installed versions of react and react-dom report an alignment finding. Install the same version of both and update the lockfile with the package manager."
+level = "recommended"
+stage = "commit"
+runs = "once"
+summary = "Checks that react and react-dom use the same installed version."
+why = "React and its DOM renderer ship together and expect matching versions."
+help = "Install the same version of react and react-dom."
+
+[[naming.override]]
+paths = ["**/*.tsx", "**/*.jsx"]
+categories = ["files"]
+cases = ["pascal", "kebab"]
+reason = "A component file takes the component's name."
+
+[[naming.override]]
+paths = ["**/*.tsx", "**/*.jsx"]
+categories = ["functions"]
+cases = ["pascal", "camel"]
+reason = "A function that returns JSX is a component and takes a capital."
+
+[[naming.override]]
+paths = ["**"]
+languages = ["typescript", "javascript"]
+categories = ["functions", "methods", "variables"]
+allowed_names = ["useSyncExternalStore", "getSnapshot", "getServerSnapshot"]
+reason = "React defines these subscription and snapshot callback names."
+
+[eslint]
+all_level_rules = ["react/self-closing-comp", "react/display-name", "react/no-array-index-key", "react/prop-types"]
+
+[eslint.presets.recommended]
+package = "eslint-plugin-react"
+source = "configs.flat.recommended"
+
+[eslint.presets.jsx]
+package = "eslint-plugin-react"
+source = "configs.flat.jsx-runtime"
+
+[eslint.presets.hooks]
+package = "eslint-plugin-react-hooks"
+source = "configs.flat.recommended-latest"
+
+[eslint.presets.refresh]
+package = "eslint-plugin-react-refresh"
+source = "configs.recommended"
+
+[[eslint.rules_off]]
+rules = ["gspot/no-trivial-files", "gspot/no-trivial-functions"]
+files = ["**/*.tsx", "**/*.jsx"]
+reason = "React renders a component by its name, so a component of one statement, alone in its file, is the shape React asks for."
+
+[defaults]
+"tools.eslint.import_extension" = "extensionless"
+
+[[tool_file]]
+target = ".gspot/config/eslint.config.mjs"
+tool = "eslint"
+fragment = true
+required_tools = ["eslint-plugin-react-hooks", "eslint-plugin-react", "eslint-plugin-react-refresh"]

package/configurations/framework/react/rules/REACT.md

@@ -0,0 +1,108 @@
+# React
+
+Rules that hold for any React application: Next.js, Vite, Expo, or a library. The framework file
+adds routing, server components, and caching on top of these.
+
+## Components
+
+- A component renders props and state. Data fetching, business rules, and persistence live in
+  hooks, server modules, or the query layer, never in the render body.
+- Props have a type beside their component; a component never takes an untyped object.
+
+### Component conventions
+
+<!-- level: all -->
+
+- Compose downward: a component imports children and shared primitives, never its parent, its
+  section, or its route.
+- Domain-neutral primitives such as button, input, dialog, popover, and tooltip live in the shared UI owner
+  and take values and callbacks. They never fetch or import a feature.
+- Keep a component small enough that its JSX reads as one screen region. Extract by visual
+  responsibility, not by line count.
+
+- Keep one primary component per file and name it for what it renders.
+- Declare the props type on the parameter rather than using `React.FC`.
+
+## Hooks
+
+- Every custom hook starts with `use` and owns one concern.
+- Memoize such as `useMemo`, `useCallback`, `memo` when a measurement shows expensive work or a
+  consumer needs a stable reference, not by default.
+
+## Effects and state
+
+- Keep renders pure. Effects synchronize external systems; handlers own user-triggered work. Derive
+  ordinary values during render rather than synchronizing duplicate state with effects. Clean up
+  timers, observers, subscriptions, animation frames, and requests.
+- Use refs for mutable controller values and state for values displayed in the UI.
+
+- Give each state value one owner: URL state for navigation, query cache for server snapshots, form/local
+  state for editing, and client store for truly shared client state.
+
+- Reset private state across identity and tenant changes; give each request its own server stores.
+
+- Handle every promise by awaiting, returning, or explicitly catching failure. A `void` expression
+  alone does not handle rejection. Retries need a retry-safe operation and bounded policy.
+  Cancellation must not look like confirmed success.
+
+## Read states and writes
+
+- Keep the first pending request, an empty result, and a failed request distinct. Show a stable
+  fallback, an explanation of the empty result, or safe error and retry UI for the matching state.
+- Keep existing content during a background refresh or a pending next page. A failed refresh does
+  not erase a successful result. Revoked access removes stale private content.
+- Capture the resource identity when work starts. A superseded request must not overwrite the
+  currently selected resource.
+- An optimistic update defines how to confirm or undo the operation.
+- Present the result of a save separately from the result of a refresh.
+
+## URL state
+
+- The URL owns filters, sorting, and other shareable navigation values. It carries a selected,
+  versioned representation, never credentials, private drafts, or the whole store.
+- Validate parsed values, and handle missing or malformed input without assertions or an unchecked
+  `JSON.parse`.
+- Define the precedence among URL values, stored preferences, and defaults. When the URL owns a
+  value, back and forward navigation reach the state owner.
+- One synchronization path compares values before writing, so store-to-URL and URL-to-store updates
+  never loop.
+- Keep unrelated query parameters and fragments. Use the installed router or the History API to replace history for transient edits and to push an entry when back navigation restores the previous state.
+- Read hash values only in the browser. Never use them to shape the server-rendered snapshot.
+
+## Hydration and browser synchronization
+
+Hydration attaches React behavior to the server-rendered HTML. Give the server and the first browser
+render matching output. Browser storage, viewport dimensions, generated IDs, time zones, current
+time, and random values can make them differ. Define when each value becomes available and how the
+UI updates after hydration. Fix the mismatch instead of hiding warnings globally.
+
+- Use deterministic initial props for server-rendered content. Read browser-only state after
+  hydration or through a supported external-store pattern.
+- Use stable entity identifiers for data identity and the supported React ID mechanism for
+  relationships between controls and labels.
+- Give date/time formatting the same initial locale, time zone, and reference time where relative output otherwise differs.
+- Do not branch rendered markup on `typeof window` as a routine hydration fix. Server and first
+  browser output agree on the visible tree.
+- Theme initialization may need the theme library's documented early script and a narrow hydration
+  exception. Keep that exception local to the affected node.
+- Do not mutate React-owned DOM to coordinate application state. Controlled state, refs, and
+  third-party imperative APIs have explicit ownership boundaries.
+- Treat a hydration warning as a bug until you identify its source and justify an exception. A
+  development-only warning can reveal a production race.
+
+## Lists and keys
+
+- Use stable IDs for keys, never indices.
+- Virtualize a list only when it can grow without bound. Subscribe to the data each row needs.
+
+## Forms and inputs
+
+- Keep each input controlled or uncontrolled, never both. Choose per form and keep it.
+- Validate input against the declared contract and expose its errors to the user. When the application uses a form
+  library, use its supported validation and state APIs.
+- A form awaits the save and reports its result.
+
+## Accessibility
+
+- Use native interactive elements such as `button`, `a`, and `input`, or give each element the matching role,
+  keyboard handling, and focus management.

package/configurations/framework/react-dom/eslint-presets.json

@@ -0,0 +1,110 @@
+{
+    "accessibility": {
+        "package": "eslint-plugin-jsx-a11y",
+        "version": "6.10.2",
+        "source": "flatConfigs.recommended",
+        "blocks": [
+            {
+                "parser": false,
+                "rules": {
+                    "jsx-a11y/alt-text": "error",
+                    "jsx-a11y/anchor-ambiguous-text": "off",
+                    "jsx-a11y/anchor-has-content": "error",
+                    "jsx-a11y/anchor-is-valid": "error",
+                    "jsx-a11y/aria-activedescendant-has-tabindex": "error",
+                    "jsx-a11y/aria-props": "error",
+                    "jsx-a11y/aria-proptypes": "error",
+                    "jsx-a11y/aria-role": "error",
+                    "jsx-a11y/aria-unsupported-elements": "error",
+                    "jsx-a11y/autocomplete-valid": "error",
+                    "jsx-a11y/click-events-have-key-events": "error",
+                    "jsx-a11y/control-has-associated-label": [
+                        "off",
+                        {
+                            "ignoreElements": ["audio", "canvas", "embed", "input", "textarea", "tr", "video"],
+                            "ignoreRoles": [
+                                "grid",
+                                "listbox",
+                                "menu",
+                                "menubar",
+                                "radiogroup",
+                                "row",
+                                "tablist",
+                                "toolbar",
+                                "tree",
+                                "treegrid"
+                            ],
+                            "includeRoles": ["alert", "dialog"]
+                        }
+                    ],
+                    "jsx-a11y/heading-has-content": "error",
+                    "jsx-a11y/html-has-lang": "error",
+                    "jsx-a11y/iframe-has-title": "error",
+                    "jsx-a11y/img-redundant-alt": "error",
+                    "jsx-a11y/interactive-supports-focus": [
+                        "error",
+                        { "tabbable": ["button", "checkbox", "link", "searchbox", "spinbutton", "switch", "textbox"] }
+                    ],
+                    "jsx-a11y/label-has-associated-control": "error",
+                    "jsx-a11y/label-has-for": "off",
+                    "jsx-a11y/media-has-caption": "error",
+                    "jsx-a11y/mouse-events-have-key-events": "error",
+                    "jsx-a11y/no-access-key": "error",
+                    "jsx-a11y/no-autofocus": "error",
+                    "jsx-a11y/no-distracting-elements": "error",
+                    "jsx-a11y/no-interactive-element-to-noninteractive-role": [
+                        "error",
+                        { "tr": ["none", "presentation"], "canvas": ["img"] }
+                    ],
+                    "jsx-a11y/no-noninteractive-element-interactions": [
+                        "error",
+                        {
+                            "handlers": [
+                                "onClick",
+                                "onError",
+                                "onLoad",
+                                "onMouseDown",
+                                "onMouseUp",
+                                "onKeyPress",
+                                "onKeyDown",
+                                "onKeyUp"
+                            ],
+                            "alert": ["onKeyUp", "onKeyDown", "onKeyPress"],
+                            "body": ["onError", "onLoad"],
+                            "dialog": ["onKeyUp", "onKeyDown", "onKeyPress"],
+                            "iframe": ["onError", "onLoad"],
+                            "img": ["onError", "onLoad"]
+                        }
+                    ],
+                    "jsx-a11y/no-noninteractive-element-to-interactive-role": [
+                        "error",
+                        {
+                            "ul": ["listbox", "menu", "menubar", "radiogroup", "tablist", "tree", "treegrid"],
+                            "ol": ["listbox", "menu", "menubar", "radiogroup", "tablist", "tree", "treegrid"],
+                            "li": ["menuitem", "menuitemradio", "menuitemcheckbox", "option", "row", "tab", "treeitem"],
+                            "table": ["grid"],
+                            "td": ["gridcell"],
+                            "fieldset": ["radiogroup", "presentation"]
+                        }
+                    ],
+                    "jsx-a11y/no-noninteractive-tabindex": [
+                        "error",
+                        { "tags": [], "roles": ["tabpanel"], "allowExpressionValues": true }
+                    ],
+                    "jsx-a11y/no-redundant-roles": "error",
+                    "jsx-a11y/no-static-element-interactions": [
+                        "error",
+                        {
+                            "allowExpressionValues": true,
+                            "handlers": ["onClick", "onMouseDown", "onMouseUp", "onKeyPress", "onKeyDown", "onKeyUp"]
+                        }
+                    ],
+                    "jsx-a11y/role-has-required-aria-props": "error",
+                    "jsx-a11y/role-supports-aria-props": "error",
+                    "jsx-a11y/scope": "error",
+                    "jsx-a11y/tabindex-no-positive": "error"
+                }
+            }
+        ]
+    }
+}

package/configurations/framework/react-dom/manifest.toml

@@ -0,0 +1,24 @@
+[configuration]
+title = "React DOM"
+requires = ["react"]
+description = "React applications rendered into the DOM: JSX accessibility rules for labels, alternative text, keyboard access, and valid ARIA attributes. Native-only applications retain React without these browser rules."
+
+[detect]
+dependencies = ["react-dom"]
+
+[[tool]]
+name = "eslint-plugin-jsx-a11y"
+rule_prefix = "jsx-a11y"
+kind = "library"
+version = "6.10.2"
+npm = "eslint-plugin-jsx-a11y"
+
+[eslint.presets.accessibility]
+package = "eslint-plugin-jsx-a11y"
+source = "flatConfigs.recommended"
+
+[[tool_file]]
+target = ".gspot/config/eslint.config.mjs"
+tool = "eslint"
+fragment = true
+required_tools = ["eslint-plugin-jsx-a11y"]

package/configurations/framework/react-native/manifest.toml

@@ -0,0 +1,46 @@
+[configuration]
+title = "React Native"
+requires = ["react"]
+suggests = ["typescript"]
+description = "React Native components, styles, and native APIs. Lists use stable keys and virtualized rendering, touch targets use Pressable, and AsyncStorage stores no credentials."
+
+[detect]
+dependencies = ["react-native"]
+
+[files]
+filenames = ["app.json", "app.config.js", "app.config.ts", "metro.config.js", "eas.json"]
+
+[[tool]]
+name = "@react-native/eslint-plugin"
+rule_prefix = "@react-native"
+kind = "library"
+version = "0.87.1"
+npm = "@react-native/eslint-plugin"
+
+[[tool]]
+name = "eslint-plugin-react-native"
+rule_prefix = "react-native"
+kind = "library"
+version = "5.0.0"
+npm = "eslint-plugin-react-native"
+
+[eslint]
+all_level_rules = ["react-native/no-color-literals", "react-native/no-inline-styles", "react-native/split-platform-components"]
+
+[[eslint.selectors]]
+selector = "ImportDeclaration[source.value='react-native'] > ImportSpecifier[imported.name=/^Touchable(Opacity|Highlight|WithoutFeedback|NativeFeedback)$/]"
+message = "Use Pressable. The Touchable components are kept for old code and get no new behavior."
+
+[[eslint.selectors]]
+selector = "JSXElement[openingElement.name.name='ScrollView'] > JSXExpressionContainer > CallExpression[callee.property.name='map']"
+message = "A ScrollView renders every row at once. Render a list that grows through FlatList."
+
+[[eslint.selectors]]
+selector = "CallExpression[callee.object.name='AsyncStorage'][callee.property.name='setItem'] > Literal:first-child[value=/token|secret|password|credential/i]"
+message = "AsyncStorage is plain text on the device. Keep a secret in the secure store of the platform."
+
+[[tool_file]]
+target = ".gspot/config/eslint.config.mjs"
+tool = "eslint"
+fragment = true
+required_tools = ["@react-native/eslint-plugin", "eslint-plugin-react-native"]

package/configurations/framework/react-native/rules/REACT-NATIVE.md

@@ -0,0 +1,51 @@
+# React Native
+
+These rules cover React Native and Expo apps: components, lists, styles, navigation, native data, and releases.
+The React rules apply first. These add what a phone changes.
+
+## Components and touch
+
+- Give every touch target a size of at least 44 points on iOS or 48 dp on Android, with `hitSlop` where the drawing takes less space.
+- Do not read `Dimensions` at module load. Use `useWindowDimensions`, which follows rotation and split view.
+- Respect the safe area on every screen, through the safe area context.
+
+## Lists
+
+- Keep `renderItem` and the row component stable: define them outside the render, or memoize them.
+- Give a list of fixed row height `getItemLayout`, so it scrolls to an index without measuring.
+
+## Styles
+
+- Build layouts that adapt to the available screen size and font scale.
+
+### Style conventions
+
+<!-- level: all -->
+
+- Branch on `Platform.OS` in one place for one concern. Split a component full of platform checks into two components.
+
+## Navigation and state
+
+- Type the route parameters of every screen, and pass ids through them, not whole objects.
+- A screen loads its own data from the id it receives.
+- Do not keep server data in a global store by hand. Use a query cache that knows about refetching and staleness.
+- Stop a subscription, a timer, and a listener when the screen loses focus or unmounts.
+
+## Native data and secrets
+
+- The bundle holds no secret. A key that ships in the app belongs to everyone who downloads it.
+- Ask for a permission at the moment the feature needs it, and handle the refusal.
+- Validate a deep link before it navigates or acts. A link supplies input from outside.
+
+## Performance
+
+- Keep work off the JavaScript thread during a gesture or an animation. Run animations on the native driver or the UI thread.
+- Size an image to the box it fills, and cache remote images.
+- Do not log in a hot path, and strip console output from a release build.
+- Tell the user to measure on a low-end Android device in a release build.
+
+## Releases
+
+- Version the native build and the JavaScript bundle together, and know which bundles a given native build accepts.
+- An over-the-air update never changes native code or a permission.
+- Tell the user to check the upgrade path from the last release with its stored data.