@hachej/boring-ui-kit 0.4.48 → 0.4.49

package/bin/boring-ui-blocks.mjs

@@ -10,7 +10,7 @@
 //
 // `check` writes nothing. `add`, `update` and `manifest` write the shadcn files they install and the manifest, nothing else.
 import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from 'node:fs';
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from 'node:fs';
 import { dirname, join, relative, resolve, sep } from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
@@ -307,6 +307,37 @@ function shadcnAdd(app, args, log, overwrite) {
   return { status: result.status ?? 1, skipped: skipped.map(([path]) => path), created };
 }
 
+/**
+ * A package manager follows a symlinked `node_modules` or scope directory and writes into the tree it points at: another checkout's install.
+ * Refused before anything runs. Per-package links (workspaces, pnpm) stay valid, and `check` never gets here: it writes nothing.
+ */
+function refuseBorrowedInstall(app) {
+  const borrowed = [];
+  for (const dir of installRoots(app)) {
+    const modules = join(dir, 'node_modules');
+    const stat = lstatSync(modules, { throwIfNoEntry: false });
+    if (stat?.isSymbolicLink()) borrowed.push(modules);
+    else if (stat) borrowed.push(...readdirSync(modules).filter(name => name.startsWith('@')).map(name => join(modules, name)).filter(path => lstatSync(path).isSymbolicLink()));
+  }
+  if (borrowed.length) throw new Error(`refusing to install through a borrowed install: ${borrowed.map(path => `${path} is a symlink`).join(', ')}. A package manager would write into the tree it points at. A borrowed install is read-only: \`check\` still works, and \`add\` and \`update\` need an owned physical install.`);
+}
+
+/** Where a package manager run from `app` may write: the app, and every directory up to its workspace root when it is in a workspace. */
+function installRoots(app) {
+  const walked = [];
+  for (let dir = app; ; dir = dirname(dir)) {
+    walked.push(dir);
+    if (isWorkspaceRoot(dir)) return walked;
+    if (dirname(dir) === dir) return [app];
+  }
+}
+
+function isWorkspaceRoot(dir) {
+  if (existsSync(join(dir, 'pnpm-workspace.yaml'))) return true;
+  try { return JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8')).workspaces !== undefined; }
+  catch { return false; }
+}
+
 const line = v => `${v.check} ${v.rule} ${v.file}${v.line ? `:${v.line}:${v.column}` : ''} ${v.detail}`;
 
 export function main(argv, cwd = process.cwd(), log = console.log, error = console.error) {
@@ -328,6 +359,7 @@ export function main(argv, cwd = process.cwd(), log = console.log, error = conso
       return 1;
     }
     if (command === 'manifest') { log(`${flags.manifest ?? MANIFEST}: ${writeManifest(app, flags.manifest)} file(s)`); return 0; }
+    if (command === 'add' || (command === 'update' && !flags.dryRun)) refuseBorrowedInstall(app);
     if (command === 'add') {
       appPaths(app);
       if (!flags.pass.length) throw new Error('add needs shadcn add arguments');

package/dist/file-tree-view.d.ts

@@ -1,6 +1,6 @@
 import type { Collapsible } from '@base-ui/react/collapsible';
 import type { ComponentProps, ReactNode } from 'react';
-import type { RevisionProvider, SavedRevision } from '@hachej/boring-files/revision';
+import type { FileEntry, RevisionProvider, SavedRevision } from '@hachej/boring-files/revision';
 import type { FileTreeController } from './file-tree.js';
 /** Every word of the tree, so a host can translate it. Functions receive what they name. */
 export declare const defaultFileTreeLabels: {
@@ -109,6 +109,16 @@ export interface FileTreeDialogProps {
     readonly footer: ReactNode;
 }
 /** Host presentation. The registry supplies real shadcn Base UI controls and shared version rows; no primitive fallback. */
+/** A row's status badge, as `decorate` gave it. */
+export interface FileTreeBadgeProps {
+    readonly tone: FileDecorationTone;
+    readonly children: ReactNode;
+    readonly role: 'note';
+    readonly 'aria-label': string;
+    readonly title: string;
+    readonly 'data-file-badge': '';
+    readonly 'data-tone': FileDecorationTone;
+}
 export interface FileTreeComponents {
     readonly Button: (props: FileTreeButtonProps) => ReactNode;
     readonly Actions: (props: FileTreeActionsProps) => ReactNode;
@@ -138,6 +148,8 @@ export interface FileTreeComponents {
         readonly value: number | null;
         readonly 'aria-label': string;
     }) => ReactNode;
+    /** The host's shadcn `Badge` for a row's status (`decorate`); without it the status is plain text. */
+    readonly Badge?: (props: FileTreeBadgeProps) => ReactNode;
     /** The host's shadcn `Dialog`. Without it the tree offers neither Delete nor Move to… (dragging a file onto a folder still moves it). */
     readonly Dialog?: (props: FileTreeDialogProps) => ReactNode;
 }
@@ -159,6 +171,15 @@ export type UploadBlob = (file: globalThis.File, options: {
     readonly signal: AbortSignal;
     readonly onProgress: (progress: UploadProgress) => void;
 }) => Promise<unknown>;
+export type FileDecorationTone = 'neutral' | 'success' | 'warning' | 'danger';
+/** A row's status from the host (D-1374): a badge, read with the file's name, and a short secondary text. */
+export interface FileDecoration {
+    readonly badge?: {
+        readonly label: string;
+        readonly tone: FileDecorationTone;
+    };
+    readonly detail?: string;
+}
 export interface FileTreeProps {
     readonly components: FileTreeComponents;
     readonly revisionProvider: RevisionProvider;
@@ -201,6 +222,8 @@ export interface FileTreeProps {
     readonly onRenamed?: (from: string, to: string) => void;
     /** A delete from the tree committed (a host showing `path` closes it). */
     readonly onDeleted?: (path: string) => void;
+    /** The host's status for a row (for example « Lu · 12 lignes »); nothing, or no prop, leaves the row as it is. */
+    readonly decorate?: (entry: FileEntry) => FileDecoration | null | undefined;
 }
 /** One borrowed binding powers browsing, search, upload and history. Historical previews never replace an editor's draft. */
 export declare function FileTree(props: FileTreeProps): import("react").JSX.Element;
@@ -208,5 +231,5 @@ export interface FileTreeViewProps extends Omit<FileTreeProps, 'revisionProvider
     readonly controller: FileTreeController;
 }
 /** Renders a borrowed controller, for a workspace whose chat and tree share upload state. */
-export declare function FileTreeView({ components, controller, onOpen, selectedPath, className, uploadDirectory, locale, labels: given, upload, history, refresh, variant, title, onClose, refreshKey, historyKey, maxBytes, tooLarge, uploadBlob, capabilities, onRenamed, onDeleted }: FileTreeViewProps): import("react").JSX.Element;
+export declare function FileTreeView({ components, controller, onOpen, selectedPath, className, uploadDirectory, locale, labels: given, upload, history, refresh, variant, title, onClose, refreshKey, historyKey, maxBytes, tooLarge, uploadBlob, capabilities, onRenamed, onDeleted, decorate }: FileTreeViewProps): import("react").JSX.Element;
 //# sourceMappingURL=file-tree-view.d.ts.map

package/dist/file-tree-view.js

@@ -171,7 +171,7 @@ function BoundFileTree(props) {
     return owned?.provider === props.revisionProvider ? _jsx(FileTreeView, { ...props, controller: owned.controller }) : _jsx("p", { role: "status", children: props.labels?.loading ?? LOCALES[props.locale ?? 'en'].loading });
 }
 /** Renders a borrowed controller, for a workspace whose chat and tree share upload state. */
-export function FileTreeView({ components, controller, onOpen, selectedPath, className, uploadDirectory = 'uploads', locale = 'en', labels: given, upload = true, history = true, refresh = true, variant = 'list', title, onClose, refreshKey, historyKey, maxBytes, tooLarge, uploadBlob, capabilities, onRenamed, onDeleted }) {
+export function FileTreeView({ components, controller, onOpen, selectedPath, className, uploadDirectory = 'uploads', locale = 'en', labels: given, upload = true, history = true, refresh = true, variant = 'list', title, onClose, refreshKey, historyKey, maxBytes, tooLarge, uploadBlob, capabilities, onRenamed, onDeleted, decorate }) {
     const changed = useRef({ onRenamed, onDeleted });
     changed.current = { onRenamed, onDeleted };
     /** Tell the host about a committed rename or delete, so a viewer showing the file follows or closes. */
@@ -184,7 +184,7 @@ export function FileTreeView({ components, controller, onOpen, selectedPath, cla
             changed.current.onDeleted?.(mutation.path);
         return mutation;
     };
-    const { Button, Actions, Menu: SidebarMenu, MenuItem: SidebarMenuItem, MenuSub: SidebarMenuSub, Input, Collapsible: CollapsibleRoot, CollapsibleTrigger, CollapsibleContent, Empty, Progress, Dialog } = components;
+    const { Button, Actions, Menu: SidebarMenu, MenuItem: SidebarMenuItem, MenuSub: SidebarMenuSub, Input, Collapsible: CollapsibleRoot, CollapsibleTrigger, CollapsibleContent, Empty, Progress, Dialog, Badge } = components;
     const can = {
         // The client's methods turn the actions on; capabilities, when the host passes them, only narrow.
         rename: controller.actions.rename && (capabilities === undefined || capabilities.effective.includes('rename')),
@@ -471,8 +471,9 @@ export function FileTreeView({ components, controller, onOpen, selectedPath, cla
         const mutation = mutationRows.get(entry.path);
         const changeable = mutable(entry);
         const draggable = changeable && can.rename && !folder;
+        const decoration = decorate?.(entry) ?? undefined;
         const button = _jsxs(Button, { type: "button", variant: selectedPath === entry.path ? 'secondary' : 'ghost', "data-active": selectedPath === entry.path, tabIndex: -1, title: entry.path, disabled: temporary, className: "file-tree-row-button", draggable: draggable || undefined, onClick: () => { focus(entry.path); if (!folder)
-                onOpen?.(entry.path); }, children: [folder ? _jsx(ChevronRight, { "aria-hidden": "true" }) : list && _jsx("span", { className: "file-tree-chevron-space", "aria-hidden": "true" }), _jsx(Icon, { "aria-hidden": "true" }), _jsxs("span", { className: "file-tree-copy", children: [_jsx("span", { className: "file-tree-name", children: name }), list ? folder ? childCount !== undefined && _jsx("span", { "data-file-meta": true, children: childCount }) : _jsxs("span", { "data-file-meta": true, children: [kind.label, " \u00B7 ", fileSize(blob?.size ?? entry.size, locale), parent && ` · ${parent}`] }) : parent && _jsx("span", { className: "file-tree-parent", "data-file-meta": true, children: parent })] })] });
+                onOpen?.(entry.path); }, children: [folder ? _jsx(ChevronRight, { "aria-hidden": "true" }) : list && _jsx("span", { className: "file-tree-chevron-space", "aria-hidden": "true" }), _jsx(Icon, { "aria-hidden": "true" }), _jsxs("span", { className: "file-tree-copy", children: [_jsx("span", { className: "file-tree-name", children: name }), list ? folder ? childCount !== undefined && _jsx("span", { "data-file-meta": true, children: childCount }) : _jsxs("span", { "data-file-meta": true, children: [kind.label, " \u00B7 ", fileSize(blob?.size ?? entry.size, locale), parent && ` · ${parent}`] }) : parent && _jsx("span", { className: "file-tree-parent", "data-file-meta": true, children: parent }), decoration?.detail && _jsx("span", { "data-file-detail": true, children: decoration.detail })] })] });
         const editing = renaming?.path === entry.path && can.rename;
         const mutationFailed = mutation?.state.kind === 'settled';
         const item = _jsxs(SidebarMenuItem, { role: "treeitem", "data-path": entry.path, "data-blob-type": blob?.type, "data-upload-state": status?.kind, "data-mutation-state": mutation ? mutationFailed ? 'failed' : 'pending' : undefined, "data-drop-target": folder && dropTarget === entry.path ? 'true' : undefined, "data-dragging": dragged === entry.path || undefined, "aria-busy": status?.kind === 'pending' || mutation?.state.kind === 'pending' || undefined, ...(folder ? dropHandlers(entry.path) : {}), ...(draggable ? {
@@ -503,7 +504,10 @@ export function FileTreeView({ components, controller, onOpen, selectedPath, cla
                                     }, 
                                     // Focus moved somewhere on purpose cancels; a closing menu that drops focus (no related target) does not.
                                     onBlur: event => { if (event.relatedTarget)
-                                        setRenaming(current => current?.path === entry.path ? undefined : current); } })] }) : folder ? _jsx(CollapsibleTrigger, { render: button }) : button, (status?.kind === 'pending' || mutation?.state.kind === 'pending') && _jsx(LoaderCircle, { "data-upload-spinner": status ? '' : undefined, "data-mutation-spinner": mutation ? '' : undefined, className: "animate-spin motion-reduce:animate-none", "aria-hidden": "true" }), status?.kind === 'failed' && _jsx(Button, { type: "button", variant: "ghost", "data-upload-retry": true, "aria-label": status.retryLabel, onClick: status.retry, children: status.retryLabel }), mutation && mutationFailed && _jsx(Button, { type: "button", variant: "ghost", size: "icon", "data-mutation-dismiss": true, "aria-label": labels.dismiss(entry.path), title: labels.dismiss(entry.path), onClick: () => controller.dismiss(mutation.operationId), children: _jsx(X, { "aria-hidden": "true" }) }), !temporary && !status && !editing && mutation?.state.kind !== 'pending' && (!folder || changeable && (can.rename || can.delete)) && _jsx(FileActions, { Actions: Actions, controller: controller, entry: entry, labels: labels, onOpen: onOpen && !folder ? () => onOpen(entry.path) : undefined, onHistory: history && !folder ? () => setHistoryPath(entry.path) : undefined, onError: setUploadError, onRename: changeable && can.rename && renameable(entry) ? () => startRename(entry.path) : undefined, onMove: changeable && can.rename && Dialog ? () => ask('move', entry.path) : undefined, onDelete: changeable && can.delete ? () => ask('delete', entry.path) : undefined })] }), status?.kind === 'failed' && _jsx("span", { "data-upload-error": true, children: status.reason }), editing && renaming?.error && _jsx("span", { "data-mutation-error": true, role: "alert", children: renaming.error }), mutation && mutationFailed && _jsx("span", { "data-mutation-error": true, children: mutationReason(mutation) }), folder && !state.query && _jsx(CollapsibleContent, { render: _jsx(SidebarMenuSub, { role: "group" }), children: renderEntries(entry.path, level + 1) })] }, entry.path);
+                                        setRenaming(current => current?.path === entry.path ? undefined : current); } })] }) : folder ? _jsx(CollapsibleTrigger, { render: button }) : button, decoration?.badge && !editing && (() => {
+                            const badge = { tone: decoration.badge.tone, children: decoration.badge.label, role: 'note', 'aria-label': `${name}: ${decoration.badge.label}`, title: decoration.badge.label, 'data-file-badge': '', 'data-tone': decoration.badge.tone };
+                            return Badge ? _jsx(Badge, { ...badge }) : _jsx("span", { role: badge.role, "aria-label": badge['aria-label'], title: badge.title, "data-file-badge": "", "data-tone": badge.tone, children: badge.children });
+                        })(), (status?.kind === 'pending' || mutation?.state.kind === 'pending') && _jsx(LoaderCircle, { "data-upload-spinner": status ? '' : undefined, "data-mutation-spinner": mutation ? '' : undefined, className: "animate-spin motion-reduce:animate-none", "aria-hidden": "true" }), status?.kind === 'failed' && _jsx(Button, { type: "button", variant: "ghost", "data-upload-retry": true, "aria-label": status.retryLabel, onClick: status.retry, children: status.retryLabel }), mutation && mutationFailed && _jsx(Button, { type: "button", variant: "ghost", size: "icon", "data-mutation-dismiss": true, "aria-label": labels.dismiss(entry.path), title: labels.dismiss(entry.path), onClick: () => controller.dismiss(mutation.operationId), children: _jsx(X, { "aria-hidden": "true" }) }), !temporary && !status && !editing && mutation?.state.kind !== 'pending' && (!folder || changeable && (can.rename || can.delete)) && _jsx(FileActions, { Actions: Actions, controller: controller, entry: entry, labels: labels, onOpen: onOpen && !folder ? () => onOpen(entry.path) : undefined, onHistory: history && !folder ? () => setHistoryPath(entry.path) : undefined, onError: setUploadError, onRename: changeable && can.rename && renameable(entry) ? () => startRename(entry.path) : undefined, onMove: changeable && can.rename && Dialog ? () => ask('move', entry.path) : undefined, onDelete: changeable && can.delete ? () => ask('delete', entry.path) : undefined })] }), status?.kind === 'failed' && _jsx("span", { "data-upload-error": true, children: status.reason }), editing && renaming?.error && _jsx("span", { "data-mutation-error": true, role: "alert", children: renaming.error }), mutation && mutationFailed && _jsx("span", { "data-mutation-error": true, children: mutationReason(mutation) }), folder && !state.query && _jsx(CollapsibleContent, { render: _jsx(SidebarMenuSub, { role: "group" }), children: renderEntries(entry.path, level + 1) })] }, entry.path);
         return folder ? _jsx(CollapsibleRoot, { render: item, open: state.expanded.has(entry.path), onOpenChange: () => { void controller.toggle(entry.path); } }, entry.path) : item;
     };
     const visibleListing = state.query ? state.search : state.directories.get('');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-ui-kit",
-  "version": "0.4.48",
+  "version": "0.4.49",
   "license": "MIT",
   "private": false,
   "type": "module",
@@ -150,7 +150,7 @@
     }
   },
   "peerDependencies": {
-    "@hachej/boring-files": "^0.4.48",
+    "@hachej/boring-files": "^0.4.49",
     "@earendil-works/pi-durable": "~1.4.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",

package/r/agent-target.json

@@ -4,15 +4,15 @@
   "title": "Point and dictate on app data",
   "description": "Tap explicitly marked JSON app context, dictate once and show the same app agent’s native reply without opening chat. Host-controlled presentation; no feedback report or second controller.",
   "dependencies": [
-    "@hachej/boring-ui-kit@^0.4.48",
-    "@hachej/boring-feedback@^0.4.48",
+    "@hachej/boring-ui-kit@^0.4.49",
+    "@hachej/boring-feedback@^0.4.49",
     "@earendil-works/pi-durable@~1.4.0",
     "react@^19.0.0",
     "react-dom@^19.0.0"
   ],
   "registryDependencies": [
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.48/r/app-shell.json",
-    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.48/r/pi-chat.json"
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.49/r/app-shell.json",
+    "https://cdn.jsdelivr.net/npm/@hachej/boring-ui-kit@0.4.49/r/pi-chat.json"
   ],
   "files": [
     {