@terpjs/spec 0.14.0 → 0.16.0

package/corpus/frontend/layout-contract/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,8 +1,8 @@
-import { HubCard, HubPage } from "@terp/react-core";
-export function Widget() {
-  return (
-    <HubPage title="Notes">
-      <HubCard title="All notes" to="/notes" />
-    </HubPage>
-  );
-}
+import { HubCard, HubPage } from "@terpjs/react-core";
+export function Widget() {
+  return (
+    <HubPage title="Notes">
+      <HubCard title="All notes" to="/notes" />
+    </HubPage>
+  );
+}

package/corpus/frontend/layout-contract/violation-01/layout-contract.json

@@ -1,3 +1,3 @@
-{
-  "contract": "standard"
-}
+{
+  "contract": "standard"
+}

package/corpus/frontend/layout-contract/violation-01/src/modules/widgets/Widget.tsx

@@ -1,8 +1,8 @@
-import { DetailList, HubPage } from "@terp/react-core";
-export function Widget() {
-  return (
-    <HubPage title="Notes">
-      <DetailList items={[]} />
-    </HubPage>
-  );
-}
+import { DetailList, HubPage } from "@terpjs/react-core";
+export function Widget() {
+  return (
+    <HubPage title="Notes">
+      <DetailList items={[]} />
+    </HubPage>
+  );
+}

package/corpus/frontend/no-cross-module-imports/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-cross-module-imports/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-import { x } from "../other/thing";
-export const Widget = () => null;
-void x;
+import { x } from "../other/thing";
+export const Widget = () => null;
+void x;

package/corpus/frontend/no-deep-imports/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-deep-imports/violation-01/src/modules/widgets/Widget.tsx

@@ -1,2 +1,2 @@
-import Button from "@terp/react-core/src/Button";
-export const Widget = () => <Button>x</Button>;
+import Button from "@terpjs/react-core/src/Button";
+export const Widget = () => <Button>x</Button>;

package/corpus/frontend/no-dom-html-injection/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-dom-html-injection/compliant-02/src/modules/widgets/Widget.tsx

@@ -1,11 +1,11 @@
-export function show(el: HTMLElement, message: string) {
-  // el.innerHTML = message would be refused; assign text, never markup.
-  el.innerText = message;
-  el.textContent = message;
-}
-
-export function preview(box: { innerHTMLPreview: string }, markup: string) {
-  box.innerHTMLPreview = markup;
-}
-
-export const HINT = "innerHTML / outerHTML / insertAdjacentHTML are refused in app modules";
+export function show(el: HTMLElement, message: string) {
+  // el.innerHTML = message would be refused; assign text, never markup.
+  el.innerText = message;
+  el.textContent = message;
+}
+
+export function preview(box: { innerHTMLPreview: string }, markup: string) {
+  box.innerHTMLPreview = markup;
+}
+
+export const HINT = "innerHTML / outerHTML / insertAdjacentHTML are refused in app modules";

package/corpus/frontend/no-dom-html-injection/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function write(el: HTMLElement, html: string) {
-  el.innerHTML = html;
-}
+export function write(el: HTMLElement, html: string) {
+  el.innerHTML = html;
+}

package/corpus/frontend/no-dom-html-injection/violation-02/src/modules/widgets/Widget.tsx

@@ -1,7 +1,7 @@
-export function writeHeader(header: string) {
-  document.write(header);
-}
-
-export function writeFooter(footer: string) {
-  window.document.writeln(footer);
-}
+export function writeHeader(header: string) {
+  document.write(header);
+}
+
+export function writeFooter(footer: string) {
+  window.document.writeln(footer);
+}

package/corpus/frontend/no-dom-html-injection/violation-03/src/modules/widgets/Widget.tsx

@@ -1,12 +1,12 @@
-export function append(el: HTMLElement | null, markup: string) {
-  el?.insertAdjacentHTML(
-    "beforeend",
-    markup,
-  );
-}
-
-export function replace(el: HTMLElement, title: string) {
-  el.outerHTML = `
-    <section>${title}</section>
-  `;
-}
+export function append(el: HTMLElement | null, markup: string) {
+  el?.insertAdjacentHTML(
+    "beforeend",
+    markup,
+  );
+}
+
+export function replace(el: HTMLElement, title: string) {
+  el.outerHTML = `
+    <section>${title}</section>
+  `;
+}

package/corpus/frontend/no-eval/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-eval/compliant-02/src/modules/widgets/Widget.tsx

@@ -1,11 +1,11 @@
-const interpreter = {
-  eval(expression: string): number {
-    return expression.length;
-  },
-};
-
-export function describeExpression(expression: string) {
-  // eval(expression) would be refused here; this is a member call on a local object.
-  const hint = "eval() and new Function() are refused in app modules";
-  return `${interpreter.eval(expression)} ${hint}`;
-}
+const interpreter = {
+  eval(expression: string): number {
+    return expression.length;
+  },
+};
+
+export function describeExpression(expression: string) {
+  // eval(expression) would be refused here; this is a member call on a local object.
+  const hint = "eval() and new Function() are refused in app modules";
+  return `${interpreter.eval(expression)} ${hint}`;
+}

package/corpus/frontend/no-eval/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function run(code: string) {
-  return eval(code);
-}
+export function run(code: string) {
+  return eval(code);
+}

package/corpus/frontend/no-eval/violation-02/src/modules/widgets/Widget.tsx

@@ -1,7 +1,7 @@
-export function run(code: string) {
-  return globalThis.eval(code);
-}
-
-export function runQualified(code: string) {
-  return window.eval(code);
-}
+export function run(code: string) {
+  return globalThis.eval(code);
+}
+
+export function runQualified(code: string) {
+  return window.eval(code);
+}

package/corpus/frontend/no-eval/violation-03/src/modules/widgets/Widget.tsx

@@ -1,10 +1,10 @@
-export function compile(body: string) {
-  return new Function(
-    "input",
-    body,
-  );
-}
-
-export function compileQualified(body: string) {
-  return new window.Function("input", body);
-}
+export function compile(body: string) {
+  return new Function(
+    "input",
+    body,
+  );
+}
+
+export function compileQualified(body: string) {
+  return new window.Function("input", body);
+}

package/corpus/frontend/no-eval/violation-04/src/modules/widgets/Widget.tsx

@@ -1,6 +1,6 @@
-export function Widget() {
-  // Markers live in real comments only: marker-shaped text inside a string
-  // neither suppresses the next line nor its own line.
-  const doc = "// terp-allow-no-eval: not a comment";
-  return eval(doc);
-}
+export function Widget() {
+  // Markers live in real comments only: marker-shaped text inside a string
+  // neither suppresses the next line nor its own line.
+  const doc = "// terp-allow-no-eval: not a comment";
+  return eval(doc);
+}

package/corpus/frontend/no-inline-styling/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-inline-styling/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <div style={{ color: "red" }}>x</div>;
-}
+export function Widget() {
+  return <div style={{ color: "red" }}>x</div>;
+}

package/corpus/frontend/no-inline-styling/violation-02/src/modules/widgets/Widget.tsx

@@ -1,6 +1,6 @@
-export function Widget() {
-  // A justified marker for a SIBLING catalog rule sharing the same core lint id
-  // never waives this one: the marker names the catalog rule, not the tool rule.
-  // terp-allow-token-styled-elements: wrong rule - must not suppress the style attribute
-  return <div style={{ color: "#ff0000" }}>save</div>;
-}
+export function Widget() {
+  // A justified marker for a SIBLING catalog rule sharing the same core lint id
+  // never waives this one: the marker names the catalog rule, not the tool rule.
+  // terp-allow-token-styled-elements: wrong rule - must not suppress the style attribute
+  return <div style={{ color: "#ff0000" }}>save</div>;
+}

package/corpus/frontend/no-style-imports/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/no-style-imports/violation-01/src/modules/widgets/Widget.tsx

@@ -1,2 +1,2 @@
-import "./widget.css";
-export const Widget = () => null;
+import "./widget.css";
+export const Widget = () => null;

package/corpus/frontend/no-unsafe-href/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <a href="https://example.com" rel="noopener">docs</a>;
-}
+export function Widget() {
+  return <a href="https://example.com" rel="noopener">docs</a>;
+}

package/corpus/frontend/no-unsafe-href/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <a href="javascript:alert(1)">go</a>;
-}
+export function Widget() {
+  return <a href="javascript:alert(1)">go</a>;
+}

package/corpus/frontend/no-unsafe-target-blank/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <a href="https://example.com" target="_blank" rel="noopener">docs</a>;
-}
+export function Widget() {
+  return <a href="https://example.com" target="_blank" rel="noopener">docs</a>;
+}

package/corpus/frontend/no-unsafe-target-blank/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <a href="https://example.com" target="_blank">docs</a>;
-}
+export function Widget() {
+  return <a href="https://example.com" target="_blank">docs</a>;
+}

package/corpus/frontend/router-links/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Link } from "@terp/react-core";
-export function Widget() {
-  return <Link to="/notes">notes</Link>;
-}
+import { Link } from "@terpjs/react-core";
+export function Widget() {
+  return <Link to="/notes">notes</Link>;
+}

package/corpus/frontend/router-links/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <a href="/notes">notes</a>;
-}
+export function Widget() {
+  return <a href="/notes">notes</a>;
+}

package/corpus/frontend/token-styled-elements/compliant-01/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-import { Button } from "@terp/react-core";
-export function Widget() {
-  return <Button>ok</Button>;
-}
+import { Button } from "@terpjs/react-core";
+export function Widget() {
+  return <Button>ok</Button>;
+}

package/corpus/frontend/token-styled-elements/compliant-02/src/modules/widgets/Widget.tsx

@@ -1,4 +1,4 @@
-export function Widget() {
-  // terp-allow-token-styled-elements: native button needed for a browser extension host
-  return <button>save</button>;
-}
+export function Widget() {
+  // terp-allow-token-styled-elements: native button needed for a browser extension host
+  return <button>save</button>;
+}

package/corpus/frontend/token-styled-elements/violation-01/src/modules/widgets/Widget.tsx

@@ -1,3 +1,3 @@
-export function Widget() {
-  return <button>save</button>;
-}
+export function Widget() {
+  return <button>save</button>;
+}

package/findings.schema.json

@@ -1,40 +1,40 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://terp.dev/spec/findings.schema.json",
-  "title": "Terp Standard finding",
-  "description": "The machine-readable finding a conformant checker emits: an array of these objects per checked tree. The corpus contract is stated over this shape — for a rule under test, every violation-* case yields at least one finding whose `rule` is the catalog id, and every compliant-* case yields none for that rule. Findings are attributed to the stack-neutral catalog id, never a tool-internal rule id.",
-  "type": "array",
-  "items": {
-    "type": "object",
-    "required": ["rule", "path"],
-    "additionalProperties": false,
-    "properties": {
-      "rule": {
-        "type": "string",
-        "description": "The Terp Standard catalog id the finding realises (catalog/<surface>/<rule>.json).",
-        "pattern": "^(backend/[a-z0-9_]+|frontend/[a-z0-9-]+)$"
-      },
-      "path": {
-        "type": "string",
-        "description": "File path relative to the checked tree's root (the corpus case root, or the app root), with forward slashes."
-      },
-      "line": {
-        "type": "integer",
-        "description": "1-based line of the violation, when the checker can locate it.",
-        "minimum": 1
-      },
-      "message": {
-        "type": "string",
-        "description": "Human-readable explanation; ideally directive (states the compliant fix)."
-      },
-      "fix_hint": {
-        "type": "string",
-        "description": "Agent-oriented remediation metadata: the compliant construct that replaces the violating one, sourced from the catalog entry's non-normative `reference` field (or the checker's own knowledge of the sanctioned pattern). Optional — a consumer must not require it."
-      },
-      "fingerprint": {
-        "type": "string",
-        "description": "A stable, checker-chosen identifier for THIS violation instance (e.g. a hash over rule + path + violating source construct), so consumers can track a finding across line-shifting edits. Optional; the fingerprint scheme is checker-internal — only stability across reformatting is expected."
-      }
-    }
-  }
-}
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://terp.dev/spec/findings.schema.json",
+  "title": "Terp Standard finding",
+  "description": "The machine-readable finding a conformant checker emits: an array of these objects per checked tree. The corpus contract is stated over this shape — for a rule under test, every violation-* case yields at least one finding whose `rule` is the catalog id, and every compliant-* case yields none for that rule. Findings are attributed to the stack-neutral catalog id, never a tool-internal rule id.",
+  "type": "array",
+  "items": {
+    "type": "object",
+    "required": ["rule", "path"],
+    "additionalProperties": false,
+    "properties": {
+      "rule": {
+        "type": "string",
+        "description": "The Terp Standard catalog id the finding realises (catalog/<surface>/<rule>.json).",
+        "pattern": "^(backend/[a-z0-9_]+|frontend/[a-z0-9-]+)$"
+      },
+      "path": {
+        "type": "string",
+        "description": "File path relative to the checked tree's root (the corpus case root, or the app root), with forward slashes."
+      },
+      "line": {
+        "type": "integer",
+        "description": "1-based line of the violation, when the checker can locate it.",
+        "minimum": 1
+      },
+      "message": {
+        "type": "string",
+        "description": "Human-readable explanation; ideally directive (states the compliant fix)."
+      },
+      "fix_hint": {
+        "type": "string",
+        "description": "Agent-oriented remediation metadata: the compliant construct that replaces the violating one, sourced from the catalog entry's non-normative `reference` field (or the checker's own knowledge of the sanctioned pattern). Optional — a consumer must not require it."
+      },
+      "fingerprint": {
+        "type": "string",
+        "description": "A stable, checker-chosen identifier for THIS violation instance (e.g. a hash over rule + path + violating source construct), so consumers can track a finding across line-shifting edits. Optional; the fingerprint scheme is checker-internal — only stability across reformatting is expected."
+      }
+    }
+  }
+}

package/package.json

@@ -1,23 +1,23 @@
-{
-  "name": "@terpjs/spec",
-  "version": "0.14.0",
-  "description": "The Terp Standard — stack-neutral rule catalog, violation corpus, finding format, and refused-surface declaration (ADRs 0080/0081; packaged per ADR 0082, published per ADR 0086). Data only: consumers resolve the spec root via require.resolve('@terpjs/spec/package.json').",
-  "files": [
-    "VERSION",
-    "findings.schema.json",
-    "app-check-report.schema.json",
-    "scorecard.schema.json",
-    "assurance-profile.schema.json",
-    "restricted-surface.json",
-    "catalog",
-    "corpus"
-  ],
-  "license": "Apache-2.0",
-  "publishConfig": {
-    "access": "public"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/AITT-NL/terp-spec.git"
-  }
-}
+{
+  "name": "@terpjs/spec",
+  "version": "0.16.0",
+  "description": "The Terp Standard — stack-neutral rule catalog, violation corpus, finding format, and refused-surface declaration (ADRs 0080/0081; packaged per ADR 0082, published per ADR 0086). Data only: consumers resolve the spec root via require.resolve('@terpjs/spec/package.json').",
+  "files": [
+    "VERSION",
+    "findings.schema.json",
+    "app-check-report.schema.json",
+    "scorecard.schema.json",
+    "assurance-profile.schema.json",
+    "restricted-surface.json",
+    "catalog",
+    "corpus"
+  ],
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AITT-NL/terp-spec.git"
+  }
+}

package/restricted-surface.json

@@ -1,10 +1,10 @@
-{
-  "title": "Terp Standard - the refused raw frontend surface",
-  "description": "The normative, stack-neutral declaration of the raw browser primitives an app module must not author directly. The prohibition is the portable part of the rules that cite this file (token-styled-elements, no-inline-styling, generated-client-only, no-style-imports, no-deep-imports); which sanctioned component or helper answers each primitive is per-stack configuration, recorded non-normatively in the catalog entry's 'reference' field. A checker realises this file for its language; the reference adapter's BOUNDARY_SPEC is parity-tested against it.",
-  "restrictedElements": ["button", "dialog", "form", "input", "select", "table", "textarea"],
-  "restrictedAttributes": ["className", "style"],
-  "restrictedGlobals": ["EventSource", "WebSocket", "XMLHttpRequest", "fetch"],
-  "restrictedMemberCalls": ["navigator.sendBeacon"],
-  "styleImportExtensions": [".css", ".less", ".sass", ".scss", ".styl"],
-  "deepImportPathSegments": ["dist", "src"]
-}
+{
+  "title": "Terp Standard - the refused raw frontend surface",
+  "description": "The normative, stack-neutral declaration of the raw browser primitives an app module must not author directly. The prohibition is the portable part of the rules that cite this file (token-styled-elements, no-inline-styling, generated-client-only, no-style-imports, no-deep-imports); which sanctioned component or helper answers each primitive is per-stack configuration, recorded non-normatively in the catalog entry's 'reference' field. A checker realises this file for its language; the reference adapter's BOUNDARY_SPEC is parity-tested against it.",
+  "restrictedElements": ["button", "dialog", "form", "input", "select", "table", "textarea"],
+  "restrictedAttributes": ["className", "style"],
+  "restrictedGlobals": ["EventSource", "WebSocket", "XMLHttpRequest", "fetch"],
+  "restrictedMemberCalls": ["navigator.sendBeacon"],
+  "styleImportExtensions": [".css", ".less", ".sass", ".scss", ".styl"],
+  "deepImportPathSegments": ["dist", "src"]
+}