@ksmv/ui-checks 0.1.0

package/dist/suppressions.d.ts

@@ -0,0 +1,9 @@
+import type { ExitCode, Suppression, Violation } from "./result.js";
+export interface SuppressionValidation {
+    errors: string[];
+    exitCode: ExitCode;
+    issues: Violation[];
+    remaining: Violation[];
+    used: Suppression[];
+}
+export declare function validateSuppressions(value: unknown, violations: Violation[], now?: Date): SuppressionValidation;

package/dist/suppressions.js

@@ -0,0 +1,126 @@
+import { fingerprintViolation, normalizeRelativePath } from "./baseline.js";
+const sha256Pattern = /^[a-f0-9]{64}$/;
+const datePattern = /^\d{4}-\d{2}-\d{2}$/;
+const suppressionKeys = [
+    "expires",
+    "fingerprint",
+    "ownerRole",
+    "path",
+    "reason",
+    "rule",
+];
+function isValidDate(value) {
+    if (!datePattern.test(value)) {
+        return false;
+    }
+    const parsed = new Date(`${value}T00:00:00.000Z`);
+    return !Number.isNaN(parsed.valueOf()) && parsed.toISOString().startsWith(value);
+}
+function isValidSuppression(value) {
+    if (!value || typeof value !== "object") {
+        return false;
+    }
+    const candidate = value;
+    const normalizedPath = typeof candidate.path === "string"
+        ? normalizeRelativePath(candidate.path)
+        : "";
+    return (Object.keys(candidate).sort().join(",") === suppressionKeys.join(",") &&
+        typeof candidate.expires === "string" &&
+        isValidDate(candidate.expires) &&
+        typeof candidate.fingerprint === "string" &&
+        sha256Pattern.test(candidate.fingerprint) &&
+        typeof candidate.ownerRole === "string" &&
+        candidate.ownerRole.trim().length > 0 &&
+        !candidate.ownerRole.includes("@") &&
+        !/[\r\n]/.test(candidate.ownerRole) &&
+        normalizedPath.trim().length > 0 &&
+        !normalizedPath.startsWith("/") &&
+        !/^[a-z]:\//i.test(normalizedPath) &&
+        !/[?*{}[\]]/.test(normalizedPath) &&
+        !normalizedPath.split("/").includes("..") &&
+        typeof candidate.reason === "string" &&
+        candidate.reason.trim().length > 0 &&
+        typeof candidate.rule === "string" &&
+        candidate.rule.trim().length > 0);
+}
+function issue(suppression, kind) {
+    return {
+        column: 1,
+        line: 1,
+        message: kind === "expired"
+            ? "A configured suppression has expired."
+            : "A configured suppression is unused.",
+        nodeKind: "suppression",
+        path: normalizeRelativePath(suppression.path),
+        rule: `suppressions/${kind}`,
+    };
+}
+export function validateSuppressions(value, violations, now = new Date()) {
+    if (!Array.isArray(value)) {
+        return {
+            errors: ["Suppressions must be an array."],
+            exitCode: 2,
+            issues: [],
+            remaining: violations,
+            used: [],
+        };
+    }
+    const suppressions = [];
+    const fingerprints = new Set();
+    for (const candidate of value) {
+        if (!isValidSuppression(candidate)) {
+            return {
+                errors: ["A suppression is malformed or repository-wide."],
+                exitCode: 2,
+                issues: [],
+                remaining: violations,
+                used: [],
+            };
+        }
+        if (fingerprints.has(candidate.fingerprint)) {
+            return {
+                errors: ["Suppression fingerprints must be unique."],
+                exitCode: 2,
+                issues: [],
+                remaining: violations,
+                used: [],
+            };
+        }
+        fingerprints.add(candidate.fingerprint);
+        suppressions.push({
+            expires: candidate.expires,
+            fingerprint: candidate.fingerprint,
+            ownerRole: candidate.ownerRole,
+            path: normalizeRelativePath(candidate.path),
+            reason: candidate.reason,
+            rule: candidate.rule,
+        });
+    }
+    const currentDate = now.toISOString().slice(0, 10);
+    const suppressedFingerprints = new Set();
+    const issues = [];
+    const used = [];
+    for (const suppression of suppressions) {
+        if (suppression.expires < currentDate) {
+            issues.push(issue(suppression, "expired"));
+            continue;
+        }
+        const matched = violations.some((violation) => fingerprintViolation(violation) === suppression.fingerprint &&
+            violation.rule === suppression.rule &&
+            normalizeRelativePath(violation.path) === suppression.path);
+        if (!matched) {
+            issues.push(issue(suppression, "unused"));
+            continue;
+        }
+        suppressedFingerprints.add(suppression.fingerprint);
+        used.push(suppression);
+    }
+    const remaining = violations.filter((violation) => !suppressedFingerprints.has(fingerprintViolation(violation)));
+    return {
+        errors: [],
+        exitCode: issues.length > 0 ? 1 : 0,
+        issues,
+        remaining,
+        used,
+    };
+}

package/dist/theme-contract.json

@@ -0,0 +1,82 @@
+{
+  "contractVersion": "1.0.0",
+  "schemaVersion": 1,
+  "prefix": "--ui-",
+  "required": [
+    "--ui-surface-page",
+    "--ui-surface",
+    "--ui-surface-subtle",
+    "--ui-surface-raised",
+    "--ui-surface-inverse",
+    "--ui-text-primary",
+    "--ui-text-secondary",
+    "--ui-text-muted",
+    "--ui-text-inverse",
+    "--ui-text-disabled",
+    "--ui-text-placeholder",
+    "--ui-border",
+    "--ui-border-strong",
+    "--ui-border-control",
+    "--ui-border-disabled",
+    "--ui-focus-ring",
+    "--ui-focus-ring-offset",
+    "--ui-overlay",
+    "--ui-action-primary-bg",
+    "--ui-action-primary-bg-hover",
+    "--ui-action-primary-bg-active",
+    "--ui-action-primary-text",
+    "--ui-action-secondary-bg",
+    "--ui-action-secondary-bg-hover",
+    "--ui-action-secondary-bg-active",
+    "--ui-action-secondary-text",
+    "--ui-action-danger-bg",
+    "--ui-action-danger-bg-hover",
+    "--ui-action-danger-bg-active",
+    "--ui-action-danger-text",
+    "--ui-action-ghost-text",
+    "--ui-action-ghost-bg-hover",
+    "--ui-action-ghost-bg-active",
+    "--ui-status-success",
+    "--ui-status-success-bg",
+    "--ui-status-success-text",
+    "--ui-status-warning",
+    "--ui-status-warning-bg",
+    "--ui-status-warning-text",
+    "--ui-status-danger",
+    "--ui-status-danger-bg",
+    "--ui-status-danger-text",
+    "--ui-status-info",
+    "--ui-status-info-bg",
+    "--ui-status-info-text",
+    "--ui-disabled-bg",
+    "--ui-disabled-text",
+    "--ui-disabled-border",
+    "--ui-font-body",
+    "--ui-font-emphasis",
+    "--ui-font-mono",
+    "--ui-dialog-title-font",
+    "--ui-dialog-title-weight",
+    "--ui-radius-sm",
+    "--ui-radius-md",
+    "--ui-radius-lg",
+    "--ui-radius-pill",
+    "--ui-shadow-sm",
+    "--ui-shadow-md",
+    "--ui-shadow-lg"
+  ],
+  "derived": {
+    "--ui-action-primary-border": "--ui-action-primary-bg",
+    "--ui-action-secondary-border": "--ui-border-control",
+    "--ui-action-danger-border": "--ui-action-danger-bg",
+    "--ui-status-success-border": "--ui-status-success",
+    "--ui-status-warning-border": "--ui-status-warning",
+    "--ui-status-danger-border": "--ui-status-danger",
+    "--ui-status-info-border": "--ui-status-info"
+  },
+  "brandComposition": [
+    "--ui-brand-primary",
+    "--ui-brand-on-primary",
+    "--ui-brand-secondary",
+    "--ui-brand-on-secondary"
+  ]
+}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@ksmv/ui-checks",
+  "version": "0.1.0",
+  "description": "Static and computed quality checks for semantic UI token contracts.",
+  "keywords": ["accessibility", "design-tokens", "quality", "static-analysis"],
+  "license": "Apache-2.0",
+  "type": "module",
+  "bin": { "ksmv-ui-checks": "./dist/cli.js" },
+  "exports": {
+    ".": { "types": "./dist/index.d.ts", "default": "./dist/index.js" },
+    "./config": { "types": "./dist/config.d.ts", "default": "./dist/config.js" },
+    "./theme-contract.json": "./dist/theme-contract.json",
+    "./contrast-contract.json": "./dist/contrast-contract.json"
+  },
+  "files": ["CHANGELOG.md", "dist/**/*.d.ts", "dist/**/*.js", "dist/*.json"],
+  "scripts": {
+    "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.json && node scripts/copy-contracts.mjs",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "culori": "4.0.2",
+    "postcss": "8.5.28",
+    "postcss-value-parser": "4.2.0",
+    "typescript": "7.0.2"
+  },
+  "devDependencies": { "@types/node": "26.6.2", "vitest": "5.0.1" },
+  "engines": { "node": ">=22.14" },
+  "repository": { "type": "git", "url": "https://github.com/AxisGov/ui.git", "directory": "packages/checks" },
+  "homepage": "https://github.com/AxisGov/ui#readme",
+  "bugs": { "url": "https://github.com/AxisGov/ui/issues" },
+  "publishConfig": { "access": "public", "registry": "https://registry.npmjs.org/" }
+}