@monoes/monomindcli 2.14.1 → 2.15.0

package/.claude/helpers/control-start.cjs

@@ -158,11 +158,10 @@ function probePort(p) {
 // shelling out to `lsof` (Unix-only — unavailable on Windows, which left the
 // pairing step below permanently broken there: control.json stuck at pid:0
 // forever, dashboard-token never refreshed after the shared server restarts).
-// GET / is an intentionally-open route that embeds the live auth token in a
-// <meta name="mm-token"> tag for exactly this same-machine, loopback-trusted
-// purpose; re-using it here to authenticate a follow-up GET /api/status call
-// gets both the pid and the project `dir` in one portable HTTP round trip —
-// no OS-specific process inspection needed on any platform.
+// GET /api/identity names the server's pid, project `dir` and token FILE —
+// never the token itself (the dashboard's pages only embed it for a logged-in
+// browser). The token is read from that file as the same user, in one
+// portable HTTP round trip — no OS-specific process inspection needed.
 function fetchForeignServerInfo(p) {
   const http = require('http');
   const getBody = (reqPath, headers) => new Promise((resolve) => {
@@ -175,16 +174,14 @@ function fetchForeignServerInfo(p) {
     req.on('timeout', () => { req.destroy(); resolve(null); });
   });
   return (async () => {
-    const home = await getBody('/');
-    if (!home) return null;
-    const m = home.body.match(/name="mm-token" content="([^"]*)"/);
-    const token = m ? m[1] : null;
-    if (!token) return null;
-    const status = await getBody('/api/status', { 'x-monomind-token': token });
-    if (!status) return null;
+    const id = await getBody('/api/identity');
+    if (!id || id.statusCode !== 200) return null;
     try {
-      const parsed = JSON.parse(status.body);
+      const parsed = JSON.parse(id.body);
       if (typeof parsed.pid !== 'number' || typeof parsed.dir !== 'string') return null;
+      const tokenFile = typeof parsed.tokenFile === 'string' ? parsed.tokenFile : path.join(parsed.dir, '.monomind', 'dashboard-token');
+      const token = fs.readFileSync(tokenFile, 'utf8').trim();
+      if (!token) return null;
       return { pid: parsed.pid, dir: parsed.dir, token };
     } catch { return null; }
   })();

package/.claude/skills/monodesign/scripts/context.mjs

@@ -205,7 +205,7 @@ function resolveLocalContextDir(root) {
 
 function resolveEnvContextDir(cwd) {
   const envDir = process.env.MONODESIGN_CONTEXT_DIR;
-  if (!envDir || !envDir.trim()) return null;
+  if (!envDir?.trim()) return null;
   const trimmed = envDir.trim();
   return path.isAbsolute(trimmed) ? trimmed : path.resolve(cwd, trimmed);
 }
@@ -930,7 +930,7 @@ async function cli() {
   const targetExists = targetProvided ? pathExistsForTarget(process.cwd(), cliOptions.targetPath) : null;
   const selection = resolveTargetSelection(process.cwd(), cliOptions);
   if (selection) {
-    process.stdout.write(buildTargetSelectionDirective(selection) + '\n');
+    process.stdout.write(`${buildTargetSelectionDirective(selection)}\n`);
     process.exit(0);
   }
   const ctx = loadContext(process.cwd(), cliOptions);
@@ -952,7 +952,7 @@ async function cli() {
       parts.push(buildMissingTargetDirective());
     }
     if (updateDirective) parts.push(updateDirective);
-    process.stdout.write(parts.join('\n\n---\n\n') + '\n');
+    process.stdout.write(`${parts.join('\n\n---\n\n')}\n`);
     process.exit(0);
   }
   const parts = [`# PRODUCT.md\n\n${ctx.product.trim()}`];
@@ -989,7 +989,7 @@ async function cli() {
     }
   }
   if (updateDirective) parts.push(updateDirective);
-  process.stdout.write(parts.join('\n\n---\n\n') + '\n');
+  process.stdout.write(`${parts.join('\n\n---\n\n')}\n`);
 }
 
 function parseCliOptions(args) {

package/.claude/skills/monodesign/scripts/critique-storage.mjs

@@ -381,7 +381,7 @@ function main(argv) {
     }
     case 'trend': {
       const rows = readTrend(args[0], { limit: args[1] ? Number(args[1]) : 5 });
-      process.stdout.write(JSON.stringify(rows, null, 2) + '\n');
+      process.stdout.write(`${JSON.stringify(rows, null, 2)}\n`);
       return;
     }
     case 'recall': {

package/.claude/skills/monodesign/scripts/detect-csp.mjs

@@ -71,11 +71,6 @@ const INLINE_HEADER_SIGNALS = [
   /\bscript-src\b/,
   /\bconnect-src\b/,
 ];
-const NUXT_ROUTE_RULES_SIGNALS = [
-  /\brouteRules\b/,
-  /Content-Security-Policy/i,
-  /\bscript-src\b/,
-];
 
 const MIDDLEWARE_HINT = /headers\.set\(\s*["']Content-Security-Policy["']/i;
 const META_TAG_HINT = /http-equiv\s*=\s*["']Content-Security-Policy["']/i;
@@ -91,7 +86,7 @@ export function detectCsp(cwd = process.cwd()) {
     const ext = path.extname(absPath);
     const base = path.basename(absPath).toLowerCase();
     const isConfig = (name) =>
-      new RegExp('(^|/)' + name + '\\.config\\.').test(relPath);
+      new RegExp(`(^|/)${name}\\.config\\.`).test(relPath);
 
     // === append-arrays candidates ===
 

package/.claude/skills/monodesign/scripts/detector/browser/injected/index.mjs

@@ -112,7 +112,7 @@ if (IS_BROWSER) {
   }
 
   function showSpotlight(target) {
-    if (!target || !target.getBoundingClientRect) return;
+    if (!target?.getBoundingClientRect) return;
     // Respect the spotlightBlur setting: if disabled, don't show the backdrop
     if (window.__MONODESIGN_CONFIG__?.spotlightBlur === false) {
       spotlightTarget = target;
@@ -258,10 +258,8 @@ if (IS_BROWSER) {
     }
   });
 
-  const highlight = function(el, findings) {
+  const highlight = (el, findings) => {
     if (el._monodesignOverlay) detachOverlay(el._monodesignOverlay);
-    const hasSlop = findings.some(f => RULE_CATEGORY[f.type || f.id] === 'slop');
-
     const fixed = isInFixedContext(el);
     const rect = el.getBoundingClientRect();
     const outline = document.createElement('div');
@@ -405,7 +403,7 @@ if (IS_BROWSER) {
     overlays.push(outline);
   };
 
-  const showPageBanner = function(findings) {
+  const showPageBanner = (findings) => {
     if (!findings.length) return;
     const banner = document.createElement('div');
     banner.className = 'monodesign-overlay monodesign-banner';
@@ -505,7 +503,7 @@ if (IS_BROWSER) {
         .filter(c => !c.startsWith('monodesign-') && !isLikelyHashedClass(c))
         .slice(0, 2);
       if (classes.length > 0) {
-        sel += '.' + classes.map(c => CSS.escape(c)).join('.');
+        sel += `.${classes.map(c => CSS.escape(c)).join('.')}`;
       }
     }
 
@@ -513,7 +511,7 @@ if (IS_BROWSER) {
     const parent = el.parentElement;
     if (parent) {
       try {
-        const matching = parent.querySelectorAll(':scope > ' + sel);
+        const matching = parent.querySelectorAll(`:scope > ${sel}`);
         if (matching.length > 1) {
           const sameType = [...parent.children].filter(c => c.tagName === el.tagName);
           const idx = sameType.indexOf(el) + 1;
@@ -530,7 +528,7 @@ if (IS_BROWSER) {
   function generateSelector(el) {
     if (el === document.body) return 'body';
     if (el === document.documentElement) return 'html';
-    if (el.id) return '#' + CSS.escape(el.id);
+    if (el.id) return `#${CSS.escape(el.id)}`;
 
     const parts = [];
     let current = el;
@@ -542,7 +540,7 @@ if (IS_BROWSER) {
 
       // Anchor on an ancestor's ID and stop walking up
       if (current.id) {
-        parts[0] = '#' + CSS.escape(current.id);
+        parts[0] = `#${CSS.escape(current.id)}`;
         break;
       }
 
@@ -682,7 +680,7 @@ if (IS_BROWSER) {
 
       const textColor = parseRgb(style.color);
       const fontSize = parseFloat(style.fontSize) || 16;
-      const fontWeight = parseInt(style.fontWeight) || 400;
+      const fontWeight = parseInt(style.fontWeight, 10) || 400;
       const isLargeText = fontSize >= WCAG_LARGE_TEXT_PX || (fontSize >= WCAG_LARGE_BOLD_TEXT_PX && fontWeight >= 700);
       const threshold = isLargeText ? 3.0 : 4.5;
       const clip = {
@@ -900,7 +898,7 @@ if (IS_BROWSER) {
   function sampleDrawablePixel(drawable, sourcePoint) {
     if (visualContrastRasterCache.has(drawable)) {
       const cached = visualContrastRasterCache.get(drawable);
-      if (!cached || !cached.ctx) return { status: 'unresolved', reason: cached?.reason || 'image sample failed' };
+      if (!cached?.ctx) return { status: 'unresolved', reason: cached?.reason || 'image sample failed' };
       try {
         const x = Math.max(0, Math.min(cached.width - 1, Math.floor(sourcePoint.x * cached.scaleX)));
         const y = Math.max(0, Math.min(cached.height - 1, Math.floor(sourcePoint.y * cached.scaleY)));
@@ -1035,7 +1033,7 @@ if (IS_BROWSER) {
     const unresolved = [];
 
     for (const node of nodes) {
-      if (!node || node.nodeType !== 1) continue;
+      if (node?.nodeType !== 1) continue;
       if (node.closest?.('.monodesign-overlay, .monodesign-label, .monodesign-banner, .monodesign-tooltip')) continue;
       const tag = node.tagName?.toLowerCase();
       if (tag === 'img') {
@@ -1232,7 +1230,7 @@ if (IS_BROWSER) {
     }));
   }
 
-  const printSummary = function(allFindings) {
+  const printSummary = (allFindings) => {
     if (allFindings.length === 0) {
       console.log('%c[monodesign] No anti-patterns found.', 'color: #22c55e; font-weight: bold');
       return;
@@ -1559,7 +1557,7 @@ if (IS_BROWSER) {
       try { rules = sheet.cssRules; } catch { continue; }
       if (!rules) continue;
       for (const rule of Array.from(rules)) {
-        try { stylesheetCssText += rule.cssText + '\n'; } catch { /* ignore */ }
+        try { stylesheetCssText += `${rule.cssText}\n`; } catch { /* ignore */ }
       }
     }
     const stylesheetFindings = [
@@ -1832,7 +1830,7 @@ if (IS_BROWSER) {
   }
 
   let firstScanDone = false;
-  const scan = function(options = {}) {
+  const scan = (options = {}) => {
     clearOverlays();
     const generation = scanGeneration;
     const collected = collectBrowserFindings();
@@ -1849,7 +1847,7 @@ if (IS_BROWSER) {
     return allFindings;
   };
 
-  const scanAsync = async function(options = {}) {
+  const scanAsync = async (options = {}) => {
     clearOverlays();
     const generation = scanGeneration;
     if (shouldRunVisualContrast(options)) {
@@ -1861,13 +1859,13 @@ if (IS_BROWSER) {
     return renderBrowserFindings(collectBrowserFindings(), options);
   };
 
-  const detect = function(options = {}) {
+  const detect = (options = {}) => {
     lastVisualContrastAnalyses = [];
     const { allFindings } = collectBrowserFindings();
     return options.serialize === false ? allFindings : serializeFindings(allFindings);
   };
 
-  const detectAsync = async function(options = {}) {
+  const detectAsync = async (options = {}) => {
     if (shouldRunVisualContrast(options)) {
       const { allFindings } = await collectBrowserFindingsAsync(options);
       return options.serialize === false ? allFindings : serializeFindings(allFindings);

package/.claude/skills/monodesign/scripts/detector/cli/main.mjs

@@ -309,9 +309,9 @@ async function detectCli() {
   allFindings = filterByScopes(allFindings, scopes);
 
   if (allFindings.length > 0) {
-    if (jsonMode) process.stdout.write(formatFindings(allFindings, true) + '\n');
-    else if (quietMode) process.stderr.write(formatFindingSummary(allFindings.length) + '\n');
-    else process.stderr.write(formatFindings(allFindings, false) + '\n');
+    if (jsonMode) process.stdout.write(`${formatFindings(allFindings, true)}\n`);
+    else if (quietMode) process.stderr.write(`${formatFindingSummary(allFindings.length)}\n`);
+    else process.stderr.write(`${formatFindings(allFindings, false)}\n`);
     process.exit(2);
   }
   if (jsonMode) process.stdout.write('[]\n');