@reqvire-org/ads 0.3.13 → 0.3.15

package/dist/bootstrap-ds/ADS.md

@@ -197,7 +197,10 @@ or applies the right CSS property. Browser review still verifies the samples.
 
 Scenarios and fixture helpers are development-only wherever colocated. Runtime
 source and the public barrel cannot import or re-export them. Showcase/scenario
-code defines no CSS, custom classes or native controls; use public ADS APIs.
+code defines no CSS, custom classes or standalone native controls; use public ADS
+APIs. A single direct native child can supply semantics to a public runtime slot
+when source tracing proves that owner clones the exact child with its own props.
+An `asChild` flag alone is not evidence; scenario styling remains forbidden.
 Neither ADS implementations nor scenarios import application code. Live business
 data belongs to application adapters; ADS receives inputs or injected callbacks.
 Direct global `fetch`, XHR, WebSocket and EventSource use is rejected. Renderer

package/dist/check.mjs

@@ -21,6 +21,7 @@ import { foundationDeclaration, foundationSelector } from "./foundation.mjs";
 import { scopedTokens, scopedTokenOwner } from "./scoped-tokens.mjs";
 import { createAtomicCompositionReview } from "./atomic-composition.mjs";
 import { createScenarioTrace } from "./scenario-trace.mjs";
+import { createScenarioSlots } from "./scenario-slots.mjs";
 
 const scenarioLayoutGuidance = "Put demo-only sizing and framing in a public review/layout pattern. Keep required behavior in the runtime owner; add component props for deliberate product API needs.";
 const inlineStyleGuidance = `Own visual styles in component/pattern Linaria. ${scenarioLayoutGuidance} Reserve inlineStyleFiles for documented measured geometry, not demo layout.`;
@@ -54,6 +55,7 @@ export function checkProject(directory, { trackingRoot } = {}) {
   const checker = program.getTypeChecker();
   const atomicCompositionReview = createAtomicCompositionReview(program, options);
   const scenarioTrace = createScenarioTrace(program, options);
+  let scenarioSlot;
   function report(file, rule, message, line = 1, column = 1) {
     diagnostics.push({ file: path.relative(root, file).replaceAll("\\", "/"), rule, message, line, column });
   }
@@ -168,6 +170,10 @@ export function checkProject(directory, { trackingRoot } = {}) {
       const proof = scenarioTrace.classValue(expression, property);
       if (proof.present && !proof.ok) nodeReport(node, "showcase-class", `Scenarios define no custom class names. A public class helper must return runtime-owned Linaria styles; stable hooks authored in that owner may accompany real styles. Arbitrary strings, private styles and forwarded consumer classes do not qualify.${proof.reasons.length ? ` ${proof.reasons.join(" ")}` : ""} ${scenarioLayoutGuidance} See ads://guides/scenarios.`);
     }
+    function scenarioControl(node) {
+      const proof = (scenarioSlot ??= createScenarioSlots(program, options))(node);
+      if (!proof.ok) nodeReport(node, "showcase-control", `Scenario controls must render public ADS components for actual interaction. A native direct child may provide semantics only when source tracing proves its public runtime parent clones that child with owned props; an asChild prop alone grants no permission.${proof.reasons.length ? ` ${proof.reasons.join(" ")}` : ""} ${scenarioLayoutGuidance} See ads://guides/scenarios.`);
+    }
     if (!showcase && (isInside(path.join(dsRoot, "components"), file) || isInside(path.join(dsRoot, "patterns"), file))) inspectPublicProps(source, checker, nodeReport);
     function isLinariaTag(tag) {
       if (ts.isCallExpression(tag)) tag = tag.expression;
@@ -225,7 +231,7 @@ export function checkProject(directory, { trackingRoot } = {}) {
         if (showcase) for (const property of properties) if (ts.isSpreadAssignment(property)) scenarioClass(property, property.expression, true);
         if (showcase && tag && ts.isStringLiteralLike(tag)) {
           const role = properties.find(property => ts.isPropertyAssignment(property) && (ts.isIdentifier(property.name) || ts.isStringLiteralLike(property.name)) && property.name.text === "role")?.initializer;
-          if (showcaseControls.has(tag.text) || role && ts.isStringLiteralLike(role) && widgetRoles.has(role.text)) nodeReport(node, "showcase-control", `Scenario controls must render public ADS components for actual interaction. ${scenarioLayoutGuidance}`);
+          if (showcaseControls.has(tag.text) || role && ts.isStringLiteralLike(role) && widgetRoles.has(role.text)) scenarioControl(node);
         }
       }
       if (isInside(dsRoot, file) && (ts.isIdentifier(node) && ["fetch", "XMLHttpRequest", "WebSocket", "EventSource"].includes(node.text) && !(ts.isPropertyAccessExpression(node.parent) && node.parent.name === node))) {
@@ -236,7 +242,7 @@ export function checkProject(directory, { trackingRoot } = {}) {
       if (showcase && (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) && ts.isIdentifier(node.tagName) && /^[a-z]/.test(node.tagName.text)) {
         const role = node.attributes.properties.find((attr) => ts.isJsxAttribute(attr) && attr.name.text === "role")?.initializer;
         const roleValue = role && ts.isStringLiteralLike(role) ? role.text : role && ts.isJsxExpression(role) && role.expression && ts.isStringLiteralLike(role.expression) ? role.expression.text : null;
-        if (showcaseControls.has(node.tagName.text) || widgetRoles.has(roleValue)) nodeReport(node, "showcase-control", `Scenario controls must render public ADS components for actual interaction. ${scenarioLayoutGuidance}`);
+        if (showcaseControls.has(node.tagName.text) || widgetRoles.has(roleValue)) scenarioControl(node);
       }
       if (showcase && ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "className") scenarioClass(node, node.initializer && ts.isJsxExpression(node.initializer) ? node.initializer.expression : node.initializer);
       if (showcase && ts.isJsxSpreadAttribute(node)) scenarioClass(node, node.expression, true);

package/dist/mcp/sandbox-host.mjs

@@ -3,7 +3,7 @@ import { readFile } from "node:fs/promises";
 
 /** A different loopback port provides the browser host's separate sandbox origin. */
 export async function startSandboxHost(parentOrigin) {
-  const script = await readFile(new URL("../showcase/sandbox.js", import.meta.url));
+  const script = await readFile(new URL("../showcase/sandbox.bundle.js", import.meta.url));
   const web = createServer((req, res) => {
     const origin = `http://127.0.0.1:${web.address().port}`;
     const url = new URL(req.url, origin);