@terpjs/eslint-boundaries 0.5.9 → 0.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@terpjs/eslint-boundaries",
-  "version": "0.5.9",
+  "version": "0.6.0",
   "type": "module",
   "description": "Terp frontend boundary rules (as data) + the ESLint adapter: no cross-module imports, no package internals, design-token-only styling (no style/className/module stylesheets), token-styled components for raw HTML tags, router-only in-app links, generated-client-only, and browser XSS/navigation sink bans. Strict-only (no modes); governed opt-outs via terp-allow markers + the escape-hatch budget ratchet (terp-boundaries-budget).",
   "main": "./src/index.js",
@@ -25,7 +25,7 @@
     "typescript-eslint": "^8.20.0"
   },
   "devDependencies": {
-    "@terpjs/spec": "0.22.0",
+    "@terpjs/spec": "0.23.0",
     "eslint": "^10.8.0",
     "vitest": "^4.1.9"
   },

package/src/layouts.js

@@ -12,6 +12,10 @@
  * Both halves phrase the SAME agent-directive message (see {@link slotViolationMessage}),
  * so a failing check *tells the author how to build the screen*, wherever it fires.
  *
+ * Both halves govern the slot's DIRECT children only: an allowed container's own
+ * subtree (a Card's body, a Stack's rows) is the app's to compose — nesting content
+ * inside an allowed component is sanctioned composition, not an escape hatch.
+ *
  * Contracts are opt-in and backwards compatible: no checked-in `layout-contract.json`
  * (and no `layoutContract` option at runtime) means today's behavior. The react-core
  * runtime carries a TypeScript mirror of this table (src/layoutContract.ts); a parity
@@ -32,8 +36,9 @@ export const LAYOUT_CONTRACTS = {
       "The standard three-level shape: hub bodies are card grids (HubCard only), " +
       "overview bodies are data collections (DataView / ResourceList + framework " +
       "states), detail bodies are record sections (DetailList / Stack / Tabs + " +
-      "framework states). A bespoke screen composes the plain Page, which the " +
-      "contract deliberately leaves unconstrained.",
+      "framework states); Card is allowed in overview and detail bodies as the " +
+      "sanctioned visual separation between sections. A bespoke screen composes " +
+      "the plain Page, which the contract deliberately leaves unconstrained.",
     slots: {
       HubPage: {
         components: { HubCard: "hubcard" },
@@ -44,6 +49,7 @@ export const LAYOUT_CONTRACTS = {
           ResourceList: "resource-list",
           ModuleNav: "module-nav",
           Stack: "stack",
+          Card: "card",
           EmptyState: "empty-state",
           ErrorState: "error-state",
           LoadingState: "loading-state",
@@ -58,6 +64,7 @@ export const LAYOUT_CONTRACTS = {
           Tabs: "tabs",
           ModuleNav: "module-nav",
           DataView: "dataview",
+          Card: "card",
           EmptyState: "empty-state",
           ErrorState: "error-state",
           LoadingState: "loading-state",

package/src/layouts.test.js

@@ -50,10 +50,10 @@ describe("terp/layout-contract", () => {
 
   it("passes a conforming hub / overview / detail composition", async () => {
     const code = [
-      'import { DataView, DetailList, HubCard, HubPage, OverviewPage, DetailPage, Stack } from "@terpjs/react-core";',
+      'import { Card, DataView, DetailList, HubCard, HubPage, OverviewPage, DetailPage, Stack } from "@terpjs/react-core";',
       "export const H = () => <HubPage title='x'><HubCard to='/a' title='a' /></HubPage>;",
-      "export const O = () => <OverviewPage title='x'><DataView /></OverviewPage>;",
-      "export const D = () => <DetailPage title='x' parents={[]}><Stack><DetailList items={[]} /></Stack></DetailPage>;",
+      "export const O = () => <OverviewPage title='x'><Card title='open'><DataView /></Card></OverviewPage>;",
+      "export const D = () => <DetailPage title='x' parents={[]}><Card title='a section'>body</Card><Stack><DetailList items={[]} /></Stack></DetailPage>;",
     ].join("\n");
     expect((await lint(code, configWithContract("standard"))).map((m) => m.ruleId)).toEqual([]);
   });

package/src/spec.js

@@ -15,7 +15,7 @@
  * NOT by this package's own suite, which certification runs against candidate spec releases
  * whose version is allowed to be newer).
  */
-export const SPEC_VERSION = "0.22.0";
+export const SPEC_VERSION = "0.23.0";
 
 export const BOUNDARY_SPEC = {
   /** App module files the boundary + frontend security defaults apply to. */