@mohasinac/appkit 2.4.10 → 2.5.0

package/package.json

@@ -1,16 +1,23 @@
 {
   "name": "@mohasinac/appkit",
-  "version": "2.4.10",
+  "version": "2.5.0",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
-  "sideEffects": false,
+  "sideEffects": [
+    "**/*.css"
+  ],
   "type": "module",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "react-server": "./dist/server-entry.js",
+      "edge-light": "./dist/server-entry.js",
+      "worker": "./dist/client-entry.js",
+      "browser": "./dist/client-entry.js",
+      "types": "./dist/server-entry.d.ts",
+      "import": "./dist/server-entry.js",
+      "default": "./dist/server-entry.js"
     },
     "./client": {
       "types": "./dist/client.d.ts",
@@ -92,23 +99,65 @@
       "style": "./dist/tokens/tokens.css",
       "default": "./dist/tokens/tokens.css"
     },
+    "./configs": {
+      "types": "./dist/configs/index.d.ts",
+      "import": "./dist/configs/index.js",
+      "default": "./dist/configs/index.js"
+    },
+    "./tsconfig.base.json": "./tsconfig.base.json",
     "./messages/*": "./dist/features/*/messages/en.json"
   },
   "files": [
-    "dist"
+    "dist",
+    "tsconfig.base.json",
+    "scripts/sieve-audit.mjs",
+    "scripts/audit-violations.mjs",
+    "scripts/verify-entries.mjs",
+    "scripts/verify-css-build.mjs",
+    "scripts/smoke-ssr.mjs",
+    "scripts/smoke-bundle.mjs",
+    "scripts/smoke-theme.mjs",
+    "scripts/init-config.mjs",
+    "scripts/labels-extract.mjs",
+    "scripts/seed-cli.mjs",
+    "scripts/seed-cli-loader.mjs"
   ],
+  "bin": {
+    "appkit-sieve-audit": "./scripts/sieve-audit.mjs",
+    "appkit-audit": "./scripts/audit-violations.mjs",
+    "appkit-verify-entries": "./scripts/verify-entries.mjs",
+    "appkit-verify-css": "./scripts/verify-css-build.mjs",
+    "appkit-smoke-ssr": "./scripts/smoke-ssr.mjs",
+    "appkit-smoke-bundle": "./scripts/smoke-bundle.mjs",
+    "appkit-smoke-theme": "./scripts/smoke-theme.mjs",
+    "appkit-init-config": "./scripts/init-config.mjs",
+    "appkit-labels-extract": "./scripts/labels-extract.mjs",
+    "appkit-seed": "./scripts/seed-cli.mjs",
+    "appkit-seed-add": "./scripts/seed-cli.mjs",
+    "appkit-seed-remove": "./scripts/seed-cli.mjs",
+    "appkit-seed-status": "./scripts/seed-cli.mjs"
+  },
   "scripts": {
-    "build": "node -e \"const fs=require('fs');try{fs.rmSync('tsconfig.build.tsbuildinfo')}catch(e){}\" && tsc -p tsconfig.build.json && node scripts/copy-assets.mjs && tailwindcss -i src/tailwind-input.css -o dist/tailwind-utilities.css --minify",
-    "watch": "tsc -p tsconfig.build.json --watch"
+    "build": "node -e \"const fs=require('fs');try{fs.rmSync('tsconfig.build.tsbuildinfo')}catch(e){}\" && tsc -p tsconfig.build.json && node scripts/copy-assets.mjs && tailwindcss -i src/tailwind-input.css -o dist/tailwind-utilities.css --minify && node scripts/verify-css-build.mjs",
+    "watch": "concurrently --kill-others --restart-tries 0 --names \"ts,css\" \"tsc -p tsconfig.build.json --watch\" \"npm run watch:css\"",
+    "watch:css": "tailwindcss -i src/tailwind-input.css -o dist/tailwind-utilities.css --watch",
+    "audit": "node scripts/audit-violations.mjs",
+    "check:types": "tsc --noEmit",
+    "check:audits": "node scripts/audit-violations.mjs && node scripts/verify-entries.mjs && node scripts/verify-css-build.mjs",
+    "check": "npm run check:types && npm run check:audits"
   },
   "dependencies": {
     "@mohasinac/sievejs": "^1.0.0",
     "tailwind-merge": "^3.3.0",
-    "zod": "^3.24.0"
+    "zod": "^3.24.0",
+    "zustand": "^5.0.13"
   },
   "peerDependencies": {
     "@tanstack/react-query": ">=5.0.0",
+    "@types/react": ">=18",
+    "@types/react-dom": ">=18",
     "firebase-admin": "^10.3.0",
+    "firebase-functions": ">=6.0.0",
     "next": ">=14",
     "next-intl": ">=3",
     "razorpay": ">=2.9.0",
@@ -121,6 +170,9 @@
     "firebase-admin": {
       "optional": true
     },
+    "firebase-functions": {
+      "optional": true
+    },
     "resend": {
       "optional": true
     },
@@ -133,13 +185,13 @@
   },
   "devDependencies": {
     "@tanstack/react-query": "^5.0.0",
-    "@types/react": "19.1.0",
-    "@types/react-dom": "19.1.0",
     "@upstash/ratelimit": "^2.0.8",
     "@upstash/redis": "^1.37.0",
+    "concurrently": "^9.2.1",
     "eslint": "^9.37.0",
     "firebase": "^12.8.0",
     "firebase-admin": "^10.3.0",
+    "firebase-functions": "^6.6.0",
     "lucide-react": "^1.7.0",
     "next": "^15.0.0",
     "next-intl": "^4.9.1",

package/scripts/audit-violations.mjs

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+/**
+ * appkit-audit — boundary violation checker.
+ *
+ * Asserts that:
+ *   1. No file under _internal/client/** imports firebase-admin
+ *   2. No file under _internal/client/** imports from _internal/server/**
+ *   3. No file under _internal/shared/** imports firebase-admin
+ *   4. No file under _internal/shared/** imports from _internal/client/** or _internal/server/**
+ *
+ * Exits 0 on clean, 1 on violations.
+ */
+
+import { readdir, readFile } from "fs/promises";
+import { join, relative, extname } from "path";
+import { fileURLToPath } from "url";
+
+const ROOT = fileURLToPath(new URL("..", import.meta.url));
+const INTERNAL = join(ROOT, "src", "_internal");
+
+const RULES = [
+  {
+    dir: "client",
+    forbidden: [
+      { pattern: /from ['"]firebase-admin/, label: "firebase-admin in client" },
+      { pattern: /from ['"].*\/_internal\/server/, label: "_internal/server import in client" },
+    ],
+  },
+  {
+    dir: "shared",
+    forbidden: [
+      { pattern: /from ['"]firebase-admin/, label: "firebase-admin in shared" },
+      { pattern: /from ['"].*\/_internal\/client/, label: "_internal/client import in shared" },
+      { pattern: /from ['"].*\/_internal\/server/, label: "_internal/server import in shared" },
+    ],
+  },
+];
+
+async function walk(dir) {
+  let results = [];
+  const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+  for (const e of entries) {
+    const full = join(dir, e.name);
+    if (e.isDirectory()) results = results.concat(await walk(full));
+    else if ([".ts", ".tsx"].includes(extname(e.name))) results.push(full);
+  }
+  return results;
+}
+
+let violations = 0;
+
+for (const rule of RULES) {
+  const dir = join(INTERNAL, rule.dir);
+  const files = await walk(dir);
+  for (const file of files) {
+    const src = await readFile(file, "utf8");
+    for (const { pattern, label } of rule.forbidden) {
+      const lines = src.split("\n");
+      for (let i = 0; i < lines.length; i++) {
+        if (pattern.test(lines[i])) {
+          console.error(`[VIOLATION] ${label}`);
+          console.error(`  ${relative(ROOT, file)}:${i + 1}`);
+          console.error(`  ${lines[i].trim()}`);
+          violations++;
+        }
+      }
+    }
+  }
+}
+
+if (violations === 0) {
+  console.log("appkit-audit: 0 boundary violations ✓");
+  process.exit(0);
+} else {
+  console.error(`\nappkit-audit: ${violations} violation(s) found.`);
+  process.exit(1);
+}

package/scripts/init-config.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+/**
+ * appkit-init-config — generate starter appkit.config.js in the consumer's cwd.
+ *
+ * Idempotent: prints a warning if the file already exists.
+ * Usage: npx appkit-init-config
+ */
+
+import { writeFileSync, existsSync } from "fs";
+import { join } from "path";
+
+const CWD = process.cwd();
+const OUT = join(CWD, "appkit.config.js");
+
+if (existsSync(OUT)) {
+  console.log("appkit-init-config: appkit.config.js already exists — not overwriting.");
+  process.exit(0);
+}
+
+const TEMPLATE = `// appkit.config.js — configuration for @mohasinac/appkit CLI tools
+// Run "npx appkit-smoke-ssr", "npx appkit-smoke-bundle", etc. after setup.
+
+/** @type {import("@mohasinac/appkit")["AppkitConfig"]} */
+const config = {
+  // Base URL for smoke tests (change to your local dev port if different)
+  baseUrl: "http://localhost:3000",
+
+  // Supported locales — used by smoke tests to build locale-prefixed paths
+  locales: ["en"],
+
+  routes: {
+    // SSR smoke: each route must return 200 + all expected strings in initial HTML
+    smoke: [
+      { path: "/", expect: ["LetItRip"] },
+      { path: "/sitemap.xml", expect: ["<urlset"] },
+      { path: "/robots.txt", expect: ["User-agent"] },
+    ],
+
+    // Theme probe: each route is screenshotted before + after theme CSS var override
+    // Fail = screenshots identical (hardcoded color escaped the token system)
+    themeProbe: [
+      { path: "/", screenshotName: "home" },
+    ],
+  },
+
+  // Tokens that must not appear in any .next/static/chunks/*.js file
+  bundleForbidden: ["firebase-admin", "node:fs", "node:child_process"],
+
+  // Named auth fixtures for smoke/theme tests
+  // authFixtures: {
+  //   admin:  { cookie: "session=ADMIN_FIXTURE_TOKEN" },
+  //   seller: { cookie: "session=SELLER_FIXTURE_TOKEN" },
+  // },
+
+  // CSS variable overrides for theme-swap verification
+  // themeOverrides: {
+  //   "--appkit-color-primary":   "#FF0066",
+  //   "--appkit-color-secondary": "#0066FF",
+  // },
+
+  // Firebase project configuration (used by npx appkit-firebase-* tools)
+  // firebase: {
+  //   projectId: "your-firebase-project-id",
+  // },
+
+  // Vercel project configuration (used by npx appkit-vercel-* tools)
+  // vercel: {
+  //   projectId: "your-vercel-project-id",
+  // },
+};
+
+module.exports = config;
+`;
+
+writeFileSync(OUT, TEMPLATE, "utf8");
+console.log(`appkit-init-config: created ${OUT}`);

package/scripts/labels-extract.mjs

@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+/**
+ * appkit-labels-extract — generate JSON template from all appkit *Labels types.
+ *
+ * Walks dist/_internal/client/**/*.js looking for DEFAULT_*_LABELS exports,
+ * aggregates them into a single JSON template with English defaults, and
+ * writes to the specified output file.
+ *
+ * Consumer merges the output into their own messages/en.json.
+ *
+ * Usage: npx appkit-labels-extract --out messages/appkit-keys.en.json
+ */
+
+import { readdir, readFile, writeFile, mkdir } from "fs/promises";
+import { join, dirname, extname, relative, existsSync } from "path";
+import { fileURLToPath } from "url";
+
+const ROOT = fileURLToPath(new URL("..", import.meta.url));
+const DIST_INTERNAL = join(ROOT, "dist", "_internal", "client");
+
+const outArg = process.argv.includes("--out")
+  ? process.argv[process.argv.indexOf("--out") + 1]
+  : join(process.cwd(), "messages", "appkit-keys.en.json");
+
+if (!existsSync(DIST_INTERNAL)) {
+  console.log("appkit-labels-extract: dist/_internal/client not found — run npm run build first.");
+  process.exit(0);
+}
+
+async function walk(dir) {
+  let results = [];
+  const entries = await readdir(dir, { withFileTypes: true }).catch(() => []);
+  for (const e of entries) {
+    const full = join(dir, e.name);
+    if (e.isDirectory()) results = results.concat(await walk(full));
+    else if (extname(e.name) === ".js") results.push(full);
+  }
+  return results;
+}
+
+const files = await walk(DIST_INTERNAL);
+const labels = {};
+
+for (const file of files) {
+  const src = await readFile(file, "utf8");
+  // Match: export const DEFAULT_FOO_LABELS = { key: "value", ... }
+  const matches = src.matchAll(/export\s+const\s+DEFAULT_(\w+)_LABELS\s*=\s*\{([^}]+)\}/g);
+  for (const match of matches) {
+    const namespace = match[1].toLowerCase().replace(/_/g, ".");
+    const body = match[2];
+    const entries = {};
+    const kvMatches = body.matchAll(/(\w+)\s*:\s*["']([^"']+)["']/g);
+    for (const kv of kvMatches) {
+      entries[kv[1]] = kv[2];
+    }
+    if (Object.keys(entries).length > 0) {
+      labels[namespace] = entries;
+    }
+  }
+}
+
+await mkdir(dirname(outArg), { recursive: true });
+await writeFile(outArg, JSON.stringify(labels, null, 2) + "\n", "utf8");
+console.log(`appkit-labels-extract: wrote ${Object.keys(labels).length} namespace(s) to ${outArg}`);

package/scripts/seed-cli-loader.mjs

@@ -0,0 +1,37 @@
+/**
+ * ESM resolver hook for seed-cli.mjs.
+ *
+ * appkit's dist emits bare relative imports without `.js` extensions
+ * (TS build is bundler-target, not Node). Node ESM is strict and refuses
+ * them. This hook tries appending `.js` and `/index.js` when a resolution
+ * fails with ERR_MODULE_NOT_FOUND.
+ */
+
+// Stub out non-JS asset imports (CSS, etc.) — appkit's dist contains
+// `import "./foo.css"` side-effect statements that Node ESM can't load.
+const STUB_EXTENSIONS = [".css", ".scss", ".sass", ".png", ".jpg", ".jpeg", ".svg", ".webp", ".gif"];
+
+export async function load(url, context, nextLoad) {
+  if (STUB_EXTENSIONS.some((ext) => url.endsWith(ext))) {
+    return { format: "module", shortCircuit: true, source: "export default undefined;" };
+  }
+  return nextLoad(url, context);
+}
+
+export async function resolve(specifier, context, nextResolve) {
+  try {
+    return await nextResolve(specifier, context);
+  } catch (err) {
+    if (err?.code !== "ERR_MODULE_NOT_FOUND" && err?.code !== "ERR_UNSUPPORTED_DIR_IMPORT") throw err;
+    if (specifier.endsWith(".js") || specifier.endsWith(".mjs") || specifier.endsWith(".cjs")) throw err;
+    // Try with .js suffix (most common case)
+    try {
+      return await nextResolve(`${specifier}.js`, context);
+    } catch {}
+    // Try as a directory index
+    try {
+      return await nextResolve(`${specifier}/index.js`, context);
+    } catch {}
+    throw err;
+  }
+}