basalt-ui 1.19.1 → 1.21.0

package/dist/cli/toolchain-wiring.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=toolchain-wiring.test.d.ts.map

package/dist/cli/toolchain-wiring.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolchain-wiring.test.d.ts","sourceRoot":"","sources":["../../src/cli/toolchain-wiring.test.ts"],"names":[],"mappings":""}

package/dist/cli/waiver-audit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=waiver-audit.test.d.ts.map

package/dist/cli/waiver-audit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waiver-audit.test.d.ts","sourceRoot":"","sources":["../../src/cli/waiver-audit.test.ts"],"names":[],"mappings":""}

package/dist/dashboard/delta-badge.js

@@ -22,10 +22,10 @@ function DeltaBadge({
         },
         label: {
           display: "inline-flex",
-          // theme-allow: Mantine Badge styles.label part — CSS-in-JS, not a layout node
+          // theme-allow inline-display — a Badge `styles.label` part, not a layout node Flex could replace
           alignItems: "center",
           gap: 3,
-          // theme-allow: sub-scale badge glyph-to-label gap, below the token scale
+          // theme-allow inline-spacing — sub-scale glyph-to-label gap, below the smallest scale stop
           fontFamily: "var(--basalt-font-mono)",
           fontSize: VX.text.xs,
           fontWeight: 600,

package/dist/dashboard/stat-card.js

@@ -30,7 +30,7 @@ function StatCard({
         padding: "var(--mantine-spacing-xs) var(--mantine-spacing-sm)",
         minHeight: 118,
         display: "flex",
-        // theme-allow: Card root as a flex column — Mantine Card takes no layout props
+        // theme-allow inline-display — Card root as a flex column; Mantine Card takes no layout props
         flexDirection: "column",
         gap: "var(--vx-space-stat-card-gap)",
         overflow: "hidden",

package/dist/data/virtual-list.js

@@ -30,9 +30,9 @@ function BasaltVirtualList({
   });
   if (isLoading) {
     return (
-      // theme-allow — matches the virtualizer's own scroll box below, so the skeleton doesn't reflow.
+      // theme-allow raw-scroll-container — matches the virtualizer's own scroll box below, so the skeleton doesn't reflow.
       /* @__PURE__ */ jsx(Box, { style: { height, overflow: "auto" }, children: Array.from({ length: skeletonRows }, (_, i) => /* @__PURE__ */ jsx(
-        "div",
+        Box,
         {
           style: {
             height: estimateSize,
@@ -57,11 +57,11 @@ function BasaltVirtualList({
       ref: parentRef,
       style: {
         height,
-        // theme-allow — TanStack Virtual measures this element as the scroll container.
+        // theme-allow raw-scroll-container — TanStack Virtual measures this element as the scroll container.
         overflow: "auto"
       },
       children: /* @__PURE__ */ jsx(
-        "div",
+        Box,
         {
           style: {
             height: rowVirtualizer.getTotalSize(),
@@ -71,7 +71,7 @@ function BasaltVirtualList({
             const item = items[virtualItem.index];
             if (item === void 0) return null;
             return /* @__PURE__ */ jsx(
-              "div",
+              Box,
               {
                 style: {
                   position: "absolute",

package/dist/guard/index.d.ts

@@ -1,15 +1,59 @@
 /**
  * ./guard — headless policy core. Mantine-free, dependency-free.
  *
- * GUARD_RULES: the closed registry of all 19 violation kinds.
+ * GUARD_RULES: the closed registry of all 25 violation kinds.
  * checkSource:  pure (text, relPath, cfg) → Finding[]. No FS, no walk, no console.
  */
 import type { Finding, GuardConfig, GuardKind, GuardSeverity } from './types.js';
 export type { Finding, GuardConfig, GuardKind, GuardSeverity };
 /** Shared default config — CLI and tests import this to avoid duplication. */
 export declare const DEFAULT_GUARD_CONFIG: GuardConfig;
+/** One `exemptRules` entry that suppressed nothing, and why — see {@link unmatchedExemptPatterns}. */
+export type UnmatchedExemptPattern = {
+    readonly kind: string;
+    readonly pattern: string;
+    readonly reason: 'unknown-kind' | 'no-match';
+};
+/**
+ * Every `exemptRules` entry that matched no scanned file, so a run can say so instead of passing.
+ *
+ * An exemption is a claim ("this rule does not apply here"), and a claim that resolves to nothing is
+ * not harmless — it reads as coverage in a config review while enforcing exactly as much as an empty
+ * object. rollhook's `["public/site.webmanifest"]` was correct, matched nothing under the
+ * segments-only matcher, and reported no diagnostic; the finding it was written for kept failing the
+ * build with the config sitting right there looking like the answer. A silent no-op exemption is the
+ * same false-green family as a guard that reports green while enforcing nothing.
+ *
+ * Called once per run by the CLI with every relative path it scanned. Kind keys are checked too: a
+ * typo'd kind name is an exemption for a rule that does not exist.
+ */
+export declare function unmatchedExemptPatterns(cfg: GuardConfig, scannedRelPaths: readonly string[]): UnmatchedExemptPattern[];
+/**
+ * The exact first line of every stylesheet the CLI emits — the contract between `basalt-ui
+ * tokens:css` / `fonts:css` and this scanner, and the single source of truth for it (`src/cli`
+ * imports this rather than keeping its own copy, which is how the two used to drift apart).
+ *
+ * The marker exists because `check-theme` reported the file a sibling command had just written:
+ * 116 of rollhook's 117 violations were inside the emitted token stylesheet, which is nothing but
+ * hex and `rgba()` by construction.
+ *
+ * **Command-NEUTRAL by necessity.** Line 1 is compared verbatim, so it cannot name the command
+ * that produced the file without needing one accepted marker per command — and a second accepted
+ * marker is a second forgery surface. It points at the provenance line instead, which does name
+ * the command. It used to say `regenerate with \`bunx basalt-ui tokens:css\`` on a `fonts:css`
+ * file too: following that instruction overwrote a font sheet with the palette sheet.
+ */
+export declare const GENERATED_HEADER_LINE = "/* @generated basalt-ui \u2014 do not edit; regenerate with the command on the next line */";
 /**
- * The closed registry of all 20 guard kinds. The triad test asserts
+ * Kinds disabled under `profile: 'tokens-only'` — every kind whose remedy is a Mantine component,
+ * a Mantine prop, or the React theme factory. See {@link GuardConfig.profile}.
+ *
+ * Exported so the CLI can name the profile in `--help`/`doctor` output without re-deriving the
+ * list, and so a test can assert the two halves (disabled vs. surviving) partition the registry.
+ */
+export declare const TOKENS_ONLY_DISABLED_KINDS: ReadonlySet<GuardKind>;
+/**
+ * The closed registry of all 25 guard kinds. The triad test asserts
  * `surface.guardKinds ⊆ keyof GUARD_RULES` at runtime.
  *
  * raw-surface, raw-html-layout, and sub-16-input-font are handled inline in checkSource
@@ -151,7 +195,62 @@ export declare const GUARD_RULES: {
         readonly appliesTo: (relPath: string) => boolean;
         readonly message: "fontSize below 16 on a form control is dead code — the styles.css iOS floor is `!important` and always wins. Either drop the override, or be honest about 16px in the design.";
     };
+    readonly 'theme-allow-unscoped': {
+        readonly kind: "theme-allow-unscoped";
+        readonly pattern: RegExp;
+        readonly message: "theme-allow without a usable rule id and a reason. Write `theme-allow <rule-id> — <why>`: the id scopes the exception to that one kind (a bare comment waives EVERY kind on the line, including ones added later), and the reason is what makes it reviewable in a diff. An id that names no rule is a typo, not a blanket waiver — it suppresses nothing. `theme-allow-file <rule-id> — <why>` declares the whole file, and must name its ids: a bare one waives nothing.";
+    };
+    readonly 'surface-shadow-override': {
+        readonly kind: "surface-shadow-override";
+        readonly pattern: RegExp;
+        readonly enabled: (cfg: GuardConfig) => boolean;
+        readonly message: "Token-composed boxShadow that REPLACES surface depth — a card whose shadow drops --vx-shadow-card is the one card in the app with no depth. Compose with the depth token for its tier (`${VX.shadowCard}, <your ring>`; a fixed/floating surface wants --vx-shadow-overlay) rather than instead of it.";
+    };
+    readonly 'css-raw-surface': {
+        readonly kind: "css-raw-surface";
+        readonly pattern: RegExp;
+        readonly enabled: (cfg: GuardConfig) => boolean;
+        readonly appliesTo: (relPath: string) => boolean;
+        readonly message: "Surface literal in CSS — use var(--vx-radius-card|--vx-radius-md) for a corner and var(--vx-shadow-card) for depth, the same tokens the TSX side is held to.";
+    };
+    readonly 'hidden-inline-style': {
+        readonly kind: "hidden-inline-style";
+        readonly pattern: RegExp;
+        readonly enabled: (cfg: GuardConfig) => boolean;
+        readonly appliesTo: (relPath: string) => boolean;
+        readonly message: "Raw HTML element with inline layout/surface styling that the line scan cannot see — the tag is formatted across lines, or the style object is hoisted to a const. Same violation as raw-html-layout: use a Mantine layout primitive (Box/Flex/Grid/Stack/Group). Its own kind for one minor so the widening lands as a warning; it merges into raw-html-layout at the promotion.";
+    };
+    readonly 'inline-font-size': {
+        readonly kind: "inline-font-size";
+        readonly pattern: RegExp;
+        readonly message: "Raw font-size literal — route through VX.text.* (numbers) / --vx-text-* (CSS), or the Mantine fz token. Same rule the oxlint plugin enforces as basalt/no-raw-font-size; this is the half a check-theme-only CI can see.";
+    };
 };
+/**
+ * The one-line remedy for `kind`, as a report reads it: `raw-hex: Route color through VX.* / …`.
+ *
+ * The registry has always carried a remedy per kind; `check-theme`'s `Fix:` epilogue read a
+ * hand-duplicated subset instead, and the subset was missing every kind added at 1.20.0. Since all
+ * five of those ship `warn` under grace, the findings whose whole argument is "this looks correct
+ * and is not" arrived with no argument at all — just "add a `theme-allow`", which reads as advice to
+ * waive. Sourcing the epilogue from here retires the duplicate rather than extending it.
+ */
+export declare function guardKindRemedy(kind: GuardKind): string;
+/**
+ * How to waive a finding **in this file's syntax** — the closer a report prints under `Fix:`.
+ *
+ * `check-theme` printed one closer for every file class, and from 1.20.0 (when the scan reached
+ * `.webmanifest` / `.json`) it prescribed a `theme-allow` comment to files that cannot hold a
+ * comment. Two consumers read that, found no route, and fell back to a blanket `exemptRules` entry —
+ * the un-reviewable shape the release was spent retiring.
+ *
+ * A manifest gets the sharper answer first, because a hex there can never be *right*: a manifest
+ * cannot reference a CSS custom property, so the value is a hand-copy of a token that drifts the day
+ * the palette moves (which is exactly what both consumers found — two dead colours). The remedy is
+ * to stop hand-writing the file: `basaltAppPlugin` emits it from `SURFACE.bg`. The annotation is the
+ * fallback for a manifest basalt does not generate.
+ */
+export declare function guardWaiverHint(relPath: string): string;
 /**
  * Scan ONE file's text for theme-guard violations. Pure: same (text, relPath, cfg) → same Finding[].
  * No FS, no walk, no console. The 3 dynamic regexes (forbiddenAccent, spacing, radius) are derived

package/dist/guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;AAoP9D,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,EAAE,WAoBlC,CAAA;AAwTD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;gCA0BL,WAAW;;;;;;;gCAcX,WAAW;;;;;gCAMX,WAAW;;;;;;;gCAaX,WAAW;;;;;;;gCAQX,WAAW;;;;;;gCAOX,WAAW;;;;;;;gCASX,WAAW;;;;;;gCAOX,WAAW;;;;;;;gCAaX,WAAW;;;;;;gCAMX,WAAW;;;;;;;gCAaX,WAAW;;;;;;;gCAUX,WAAW;;;;;;;gCAUX,WAAW;;;;;;;gCASX,WAAW;;;;;;;gCASX,WAAW;;;;;;;gCAUX,WAAW;;;;CAOmB,CAAA;AAUjD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,EAAE,CA2PtF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guard/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;AAyb9D,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,EAAE,WAoBlC,CAAA;AAmJD,sGAAsG;AACtG,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,UAAU,CAAA;CAC7C,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,WAAW,EAChB,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,sBAAsB,EAAE,CAc1B;AA8WD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,gGACwD,CAAA;AA8F1F;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,SAAS,CAqB5D,CAAA;AA2NF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;gCA0BL,WAAW;;;;;;;gCAcX,WAAW;;;;;gCAMX,WAAW;;;;;;;gCAaX,WAAW;;;;;;;gCAQX,WAAW;;;;;;gCAOX,WAAW;;;;;;;gCASX,WAAW;;;;;;gCAOX,WAAW;;;;;;;gCAaX,WAAW;;;;;;gCAMX,WAAW;;;;;;;gCAaX,WAAW;;;;;;;gCAUX,WAAW;;;;;;;gCAUX,WAAW;;;;;;;gCASX,WAAW;;;;;;;gCASX,WAAW;;;;;;;gCAUX,WAAW;;;;;;;;;;;;gCAgBX,WAAW;;;;;;gCAOX,WAAW;;;;;;;gCASX,WAAW;;;;;;;;;CAWmB,CAAA;AAEjD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEvD;AAKD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBvD;AAUD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,EAAE,CA0XtF"}