anentrypoint-design 0.0.323 → 0.0.325

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anentrypoint-design",
-  "version": "0.0.323",
+  "version": "0.0.325",
   "description": "247420 design system SDK — webjsx + modified ripple-ui, single-file ESM bundle for reproducible use of the AnEntrypoint design.",
   "type": "module",
   "main": "./dist/247420.js",
@@ -15,12 +15,12 @@
       "import": "./src/kits/spoint/index.js",
       "default": "./src/kits/spoint/index.js"
     },
-    "./kits/spoint/loading-screen.js": "./src/kits/spoint/loading-screen.js",
-    "./kits/spoint/loading-screen.css": "./src/kits/spoint/loading-screen.css",
-    "./kits/spoint/game-hud.js": "./src/kits/spoint/game-hud.js",
-    "./kits/spoint/game-hud.css": "./src/kits/spoint/game-hud.css",
-    "./kits/spoint/host-join-lobby.js": "./src/kits/spoint/host-join-lobby.js",
-    "./kits/spoint/host-join-lobby.css": "./src/kits/spoint/host-join-lobby.css",
+    "./kits/spoint/*": "./src/kits/spoint/*",
+    "./kits/slides": {
+      "import": "./src/kits/slides/index.js",
+      "default": "./src/kits/slides/index.js"
+    },
+    "./kits/slides/deck-stage.js": "./src/kits/slides/deck-stage.js",
     "./kits/os": {
       "import": "./src/kits/os/index.js",
       "default": "./src/kits/os/index.js"
@@ -51,13 +51,23 @@
       "default": "./src/page-html.js"
     },
     "./src/page-html.js": "./src/page-html.js",
+    "./html-escape.js": "./src/html-escape.js",
+    "./components/shell.js": "./src/components/shell.js",
+    "./components/files.js": "./src/components/files.js",
+    "./components/files-modals.js": "./src/components/files-modals.js",
     "./web-components/ds-chat.js": "./src/web-components/ds-chat.js",
     "./web-components/freddie-chat.js": "./src/web-components/freddie-chat.js",
+    "./lint": {
+      "import": "./src/lint.js",
+      "default": "./src/lint.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
     "dist",
     "src",
+    "scripts/lint-glyphs.mjs",
+    "scripts/lint-null-children.mjs",
     "vendor/webjsx",
     "colors_and_type.css",
     "app-shell.css",
@@ -66,10 +76,12 @@
     "README.md"
   ],
   "scripts": {
+    "lint": "node scripts/lint.mjs",
     "lint:tokens": "node scripts/lint-tokens.mjs",
     "build": "node scripts/build.mjs",
     "lint:null-children": "node scripts/lint-null-children.mjs",
-    "lint:classes": "node scripts/lint-classes.mjs"
+    "lint:classes": "node scripts/lint-classes.mjs",
+    "tokens": "node scripts/generate-tokens-json.mjs"
   },
   "repository": {
     "type": "git",

package/scripts/lint-glyphs.mjs

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+// Decorative-glyph guard: fail the build if any source file hard-codes a
+// decorative unicode glyph (arrows, bullets, checks, stars, status dots, etc.).
+// The design system bans these — chrome must read as one coherent line-icon set
+// (the Icon() SVG component) or industry-standard ASCII, never machine-shaped
+// ornament. This is the durable companion to lint-tokens.mjs: without it, the
+// next hand-edit silently re-introduces a glyph the sweep removed.
+//
+// Run standalone (`node scripts/lint-glyphs.mjs`) or as part of build.mjs.
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const root = path.resolve(__dirname, '..');
+
+// Directories scanned recursively for source files. dist/ is generated,
+// node_modules/ is vendored, vendor/ is third-party (webjsx), .gm/ is the
+// plugkit spool — none are hand-authored design surfaces.
+const SCAN_DIRS = ['src', 'ui_kits', 'slides', 'site'];
+const SCAN_EXT = new Set(['.js', '.mjs', '.css', '.html']);
+// The bundled root CSS files (app-shell.css, chat.css, etc.) are the design
+// system's shipped styling but live at the repo root, outside SCAN_DIRS — they
+// previously escaped the glyph lint entirely (box-drawing comment dividers
+// slipped through). Scan them explicitly so a decorative glyph in shipped CSS
+// fails the build.
+const SCAN_ROOT_FILES = [
+    'app-shell.css', 'chat.css', 'colors_and_type.css', 'community.css',
+    'community-app.css', 'editor-primitives.css', 'app-surfaces.css',
+    'marketing.css',
+];
+
+// Files that are DELIBERATE glyph showcases or documentation of the unicode
+// surface itself — exempt wholesale.
+const EXEMPT_FILES = new Set([
+    'preview/icons-unicode.html', // a deliberate catalog of unicode icons
+]);
+
+// The banned decorative-glyph class. NOT included (intentionally allowed):
+//   ⌘ ⇧ ⌥ ⌃ ⇪ ⏎ ⌫ (Mac/keyboard key symbols — industry-standard, not decorative)
+//   · (middle-dot separator), — (em-dash), … (ellipsis), › ‹ » « (text seps left to authors)
+//   functional JS operators (=>, ??, ?., >=, <=) — those are ASCII, never matched here
+const GLYPH_RE = /[●○◆◉◈▸▾▴◀▶★☆✓✗✕✖✔⟶⇒•◦‣◔↓↑→←⏸⏭ℹ⚠⚒◈▷▭▰◎◐▢↗◌▤▦♪§◫⊞❖✷✢⟳↻↺⥁⟲⌛⏳♻]/;
+
+// Per-file allowlist: a line is exempt if it contains the substring AND the
+// file matches. Keep tiny and audited.
+const ALLOW = {
+    // (currently none — the sweep left zero intentional decorative glyphs)
+};
+
+function isAllowed(rel, line) {
+    const list = ALLOW[rel] || [];
+    return list.some((s) => line.includes(s));
+}
+
+function walk(dir, acc) {
+    let entries;
+    try { entries = fs.readdirSync(dir, { withFileTypes: true }); }
+    catch { return acc; }
+    for (const e of entries) {
+        const full = path.join(dir, e.name);
+        if (e.isDirectory()) walk(full, acc);
+        else if (SCAN_EXT.has(path.extname(e.name))) acc.push(full);
+    }
+    return acc;
+}
+
+// Returns the array of violation strings (empty == clean). Pure; no exit/log.
+export function findGlyphViolations() {
+    const violations = [];
+    const files = [];
+    for (const d of SCAN_DIRS) walk(path.join(root, d), files);
+    for (const f of SCAN_ROOT_FILES) { const p = path.join(root, f); if (fs.existsSync(p)) files.push(p); }
+    for (const file of files) {
+        const rel = path.relative(root, file).split(path.sep).join('/');
+        if (EXEMPT_FILES.has(rel)) continue;
+        const src = fs.readFileSync(file, 'utf8');
+        src.split(/\r?\n/).forEach((line, i) => {
+            if (GLYPH_RE.test(line) && !isAllowed(rel, line)) {
+                violations.push(`${rel}:${i + 1}: ${line.trim().slice(0, 100)}`);
+            }
+        });
+    }
+    return violations;
+}
+
+// Throws on violation; build.mjs calls this so a regression fails the build
+// even under runners (flatspace) that skip npm lifecycle hooks.
+export function lintGlyphsOrThrow() {
+    const violations = findGlyphViolations();
+    if (violations.length) {
+        const msg = '[lint-glyphs] FAIL — decorative unicode glyphs in source '
+            + '(use the Icon() SVG component or industry-standard ASCII like -> [x] *):\n  '
+            + violations.join('\n  ')
+            + `\n[lint-glyphs] ${violations.length} violation(s). If a glyph is a genuine product-design icon, route it through Icon() or add the file to EXEMPT_FILES / the audited ALLOW list in scripts/lint-glyphs.mjs.`;
+        throw new Error(msg);
+    }
+    console.log('[lint-glyphs] OK — no decorative glyphs in ' + SCAN_DIRS.join('/') + ' (all icons via Icon()/ASCII).');
+}
+
+// CLI entry: `node scripts/lint-glyphs.mjs`.
+if (process.argv[1] && process.argv[1].endsWith('lint-glyphs.mjs')) {
+    try { lintGlyphsOrThrow(); }
+    catch (e) { console.error(e.message); process.exit(1); }
+}

package/scripts/lint-null-children.mjs

@@ -0,0 +1,129 @@
+#!/usr/bin/env node
+// Null-children guard: webjsx applyDiff crashes ("Cannot read properties of
+// undefined (reading 'key')") when a bare null sits among VElement siblings in
+// a children array. The kit discipline is to .filter(Boolean) every children
+// array that contains a conditional vnode — this lint makes the discipline
+// durable instead of comment-maintained (two live crashes are on record: the
+// agentgui 4th and 10th runs).
+//
+// Detection (kept narrow to avoid prop-object false positives): every
+// top-level array literal is bracket-matched; it is flagged iff
+//   (a) an ELEMENT-level member starts a vnode call (`h(` or `Component(`), AND
+//   (b) an ELEMENT-level member token is `? null` / `: null` (conditional child), AND
+//   (c) the closing `]` is not followed (whitespace-tolerant) by `.filter(`.
+// Element-level means at the bracket depth of the array itself, so
+// `{ tabindex: disabled ? '-1' : null }` props never match.
+//
+// Run standalone (`node scripts/lint-null-children.mjs`) or via build.mjs.
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const root = path.resolve(__dirname, '..');
+const SCAN_DIRS = ['src'];
+const SCAN_EXT = new Set(['.js', '.mjs']);
+
+// Per-file allowlist of line numbers or substrings audited as safe.
+const ALLOW = {};
+
+function* walk(dir) {
+  for (const e of fs.readdirSync(dir, { withFileTypes: true })) {
+    const p = path.join(dir, e.name);
+    if (e.isDirectory()) {
+      if (e.name === 'node_modules' || e.name === 'vendor') continue;
+      yield* walk(p);
+    } else if (SCAN_EXT.has(path.extname(e.name))) yield p;
+  }
+}
+
+// Blanks out `//` line-comment content (replacing with spaces, keeping
+// newlines and length so reported line numbers stay accurate) before the
+// bracket-matching pass below. Without this, an apostrophe inside ANY
+// comment anywhere in the file (e.g. "the kit's own") is read as opening a
+// string literal by the naive scanner, silently corrupting bracket-depth
+// tracking for the rest of the file - a false positive here, or worse, a
+// false NEGATIVE that hides a real missing .filter(Boolean) elsewhere.
+// Comments living inside actual string/template literals (rare, but a `//`
+// can appear in a URL string) are left alone via the same inStr tracking.
+function stripLineComments(src) {
+  const out = src.split('');
+  let inStr = null;
+  for (let i = 0; i < out.length; i++) {
+    const c = out[i];
+    if (inStr) {
+      if (c === '\\') { i++; continue; }
+      if (c === inStr) inStr = null;
+      continue;
+    }
+    if (c === "'" || c === '"' || c === '`') { inStr = c; continue; }
+    if (c === '/' && out[i + 1] === '/') {
+      let j = i;
+      while (j < out.length && out[j] !== '\n') out[j++] = ' ';
+      i = j - 1;
+    }
+  }
+  return out.join('');
+}
+
+function findViolations(src) {
+  const scan = stripLineComments(src);
+  const out = [];
+  for (let i = 0; i < scan.length; i++) {
+    if (scan[i] !== '[') continue;
+    // bracket-match this array literal, tracking element-level segments
+    let depth = 0, j = i, inStr = null, elemStart = i + 1;
+    const elems = [];
+    for (; j < scan.length; j++) {
+      const c = scan[j];
+      if (inStr) {
+        if (c === '\\') j++;
+        else if (c === inStr) inStr = null;
+        continue;
+      }
+      if (c === "'" || c === '"' || c === '`') { inStr = c; continue; }
+      if (c === '[' || c === '(' || c === '{') depth++;
+      else if (c === ']' || c === ')' || c === '}') {
+        depth--;
+        if (depth === 0 && c === ']') { elems.push(scan.slice(elemStart, j)); break; }
+      } else if (c === ',' && depth === 1) { elems.push(scan.slice(elemStart, j)); elemStart = j + 1; }
+    }
+    if (j >= scan.length) continue;
+    const after = scan.slice(j + 1, j + 24);
+    if (/^\s*\.filter\(/.test(after)) continue;
+    const hasVnode = elems.some((e) => /(^|\s|\(|,)(h\(|[A-Z][A-Za-z0-9]*\()/.test(e.trim()));
+    // conditional-child tail: the ELEMENT itself ends in `: null` or `? ... : null`
+    const hasCondNull = elems.some((e) => /[?:]\s*null\s*$/.test(e.trim()));
+    if (hasVnode && hasCondNull) {
+      const line = src.slice(0, i).split('\n').length;
+      out.push(line);
+      i = j; // skip past this array
+    }
+  }
+  return out;
+}
+
+export function lintNullChildrenOrThrow() {
+  const failures = [];
+  for (const dir of SCAN_DIRS) {
+    const abs = path.join(root, dir);
+    if (!fs.existsSync(abs)) continue;
+    for (const file of walk(abs)) {
+      const rel = path.relative(root, file);
+      const src = fs.readFileSync(file, 'utf8');
+      const allow = ALLOW[rel] || [];
+      for (const line of findViolations(src)) {
+        if (allow.includes(line)) continue;
+        failures.push(rel + ':' + line);
+      }
+    }
+  }
+  if (failures.length) {
+    throw new Error('[lint-null-children] conditional null among vnode siblings without .filter(Boolean):\n  ' + failures.join('\n  '));
+  }
+  console.log('[lint-null-children] OK — every conditional-children array is filter(Boolean)\'d.');
+}
+
+if (import.meta.url === 'file://' + process.argv[1] || process.argv[1]?.endsWith('lint-null-children.mjs')) {
+  lintNullChildrenOrThrow();
+}

package/src/bootstrap.js

@@ -5,9 +5,18 @@ import * as webjsx from '../vendor/webjsx/index.js';
 import * as motion from './motion.js';
 import { register } from './debug.js';
 
+// Tracks nodes already mounted via mountKit() so a second mountKit() call
+// onto the same root fails loud instead of silently layering a second
+// applyDiff/motion loop on one DOM node.
+const _mountedKitRoots = new WeakSet();
+
 export function mountKit({ root, view, screen, animateOnMount = true } = {}) {
-    if (!root) throw new Error('mountKit: root required');
+    if (!root) throw new Error('mountKit: root required (received ' + (root === null ? 'null' : typeof root) + ')');
     if (typeof view !== 'function') throw new Error('mountKit: view fn required');
+    if (_mountedKitRoots.has(root)) {
+        throw new Error('mountKit: this root is already mounted — call the returned render()/schedule() to re-render, do not mountKit() the same root twice');
+    }
+    _mountedKitRoots.add(root);
     if (screen && typeof document !== 'undefined') document.body.dataset.screenLabel = screen;
     motion.installMotion();
     let scheduled = false;

package/src/community-app.js

@@ -214,8 +214,8 @@ export function mountCommunityApp(root, adapter = {}) {
             ),
             // overlays
             ctx.open ? ContextMenu({ items: ctx.items, anchor: { x: ctx.x, y: ctx.y }, onClose: () => { ctx = { ...ctx, open: false }; render(); } }) : null,
-            emoji.open ? EmojiPicker({ open: true, anchorX: emoji.x, anchorY: emoji.y, onSelect: (em) => { try { emoji.onSelect && emoji.onSelect(em); } catch (_) {} emoji = { ...emoji, open: false }; render(); }, onClose: () => { emoji = { ...emoji, open: false }; render(); } }) : null,
-            palette.open ? CommandPalette({ open: true, items: palette.items, onSelect: (it) => { try { palette.onSelect && palette.onSelect(it); } catch (_) {} palette = { ...palette, open: false }; render(); }, onClose: () => { palette = { ...palette, open: false }; render(); } }) : null,
+            emoji.open ? EmojiPicker({ open: true, anchorX: emoji.x, anchorY: emoji.y, onSelect: (em) => { try { emoji.onSelect && emoji.onSelect(em); } catch (_) { /* swallow: consumer onSelect callback must not break overlay close/re-render */ } emoji = { ...emoji, open: false }; render(); }, onClose: () => { emoji = { ...emoji, open: false }; render(); } }) : null,
+            palette.open ? CommandPalette({ open: true, items: palette.items, onSelect: (it) => { try { palette.onSelect && palette.onSelect(it); } catch (_) { /* swallow: consumer onSelect callback must not break overlay close/re-render */ } palette = { ...palette, open: false }; render(); }, onClose: () => { palette = { ...palette, open: false }; render(); } }) : null,
             // global overlays (visibility driven by adapter snapshot)
             s.showAuthModal ? AuthModal({ open: true, mode: s.authMode || 'extension', error: s.authError || '', busy: !!s.authBusy, onModeChange: (m) => A.setAuthMode && A.setAuthMode(m), onConnectExtension: () => A.authExtension && A.authExtension(), onGenerate: () => A.authGenerate && A.authGenerate(), onImport: (k) => A.authImport && A.authImport(k), onClose: () => A.closeAuth && A.closeAuth() }) : null,
             BootOverlay({ progress: s.bootProgress || 0, phase: s.bootPhase || '', errored: !!s.bootErrored, visible: !!s.bootVisible }),
@@ -255,5 +255,5 @@ export function mountCommunityApp(root, adapter = {}) {
     });
 
     render();
-    return { render, api, destroy: () => { if (unsub) try { unsub(); } catch (_) {} } };
+    return { render, api, destroy: () => { if (unsub) try { unsub(); } catch (_) { /* swallow: unsubscribe failure during teardown is non-fatal */ } } };
 }