basalt-ui 1.28.0 → 1.29.1

package/dist/cli/guard-hook.d.ts

@@ -0,0 +1,9 @@
+/**
+ * guard-hook — PreToolUse stdin adapter.
+ *
+ * Reads a JSON PreToolUse payload from stdin, evaluates it against the consumer's GuardConfig
+ * (from the "basalt" key in the nearest package.json), and writes the Claude Code hook response
+ * to stdout. Always exits 0 — the hook must never block Claude on a parse error or non-file tool.
+ */
+export declare function guardHook(cwd?: string): Promise<number>;
+//# sourceMappingURL=guard-hook.d.ts.map

package/dist/cli/guard-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-hook.d.ts","sourceRoot":"","sources":["../../src/cli/guard-hook.ts"],"names":[],"mappings":"AAmBA;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwF5E"}

package/dist/cli/guard-hook.js

@@ -0,0 +1,93 @@
+import { isAbsolute, relative, resolve } from "node:path";
+import { DEFAULT_GUARD_CONFIG } from "../guard/index.js";
+import { evaluateGuardHook } from "../guard/guard-hook.js";
+import {
+  DEFAULT_ROOTS,
+  SKIP,
+  declaredProfile,
+  defaultExempt,
+  readBasaltConfig,
+  resolveExemptRules
+} from "./index.js";
+async function guardHook(cwd = process.cwd()) {
+  let raw;
+  try {
+    if (typeof globalThis["Bun"] !== "undefined") {
+      raw = await globalThis["Bun"].stdin.text();
+    } else {
+      const chunks = [];
+      for await (const chunk of process.stdin) chunks.push(chunk);
+      raw = Buffer.concat(chunks).toString("utf8");
+    }
+  } catch {
+    process.stdout.write(
+      '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}\n'
+    );
+    return 0;
+  }
+  let payload;
+  try {
+    payload = JSON.parse(raw);
+  } catch {
+    process.stdout.write(
+      '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}\n'
+    );
+    return 0;
+  }
+  const cfg = readBasaltConfig(cwd);
+  const guardCfg = {
+    spacingSteps: cfg.spacingSteps ?? DEFAULT_GUARD_CONFIG.spacingSteps,
+    rawRadius: cfg.rawRadius ?? DEFAULT_GUARD_CONFIG.rawRadius,
+    forbiddenAccents: cfg.forbiddenAccents ?? DEFAULT_GUARD_CONFIG.forbiddenAccents,
+    mantineShadeIndex: cfg.mantineShadeIndex ?? DEFAULT_GUARD_CONFIG.mantineShadeIndex,
+    rawSurface: cfg.rawSurface ?? DEFAULT_GUARD_CONFIG.rawSurface,
+    cardWithBorder: cfg.cardWithBorder ?? DEFAULT_GUARD_CONFIG.cardWithBorder,
+    offSystemSurfaceVar: cfg.offSystemSurfaceVar ?? DEFAULT_GUARD_CONFIG.offSystemSurfaceVar,
+    rawHtmlLayout: cfg.rawHtmlLayout ?? DEFAULT_GUARD_CONFIG.rawHtmlLayout,
+    inlineSpacing: cfg.inlineSpacing ?? DEFAULT_GUARD_CONFIG.inlineSpacing,
+    inlineDisplay: cfg.inlineDisplay ?? DEFAULT_GUARD_CONFIG.inlineDisplay,
+    rawVisxAxis: cfg.rawVisxAxis ?? DEFAULT_GUARD_CONFIG.rawVisxAxis,
+    rawMotionValue: cfg.rawMotionValue ?? DEFAULT_GUARD_CONFIG.rawMotionValue,
+    chartMissingAriaLabel: cfg.chartMissingAriaLabel ?? DEFAULT_GUARD_CONFIG.chartMissingAriaLabel,
+    rawFormControl: cfg.rawFormControl ?? DEFAULT_GUARD_CONFIG.rawFormControl,
+    sub16InputFont: cfg.sub16InputFont ?? DEFAULT_GUARD_CONFIG.sub16InputFont,
+    allowComment: "theme-allow",
+    exemptRules: resolveExemptRules(cfg),
+    severity: cfg.severity ?? DEFAULT_GUARD_CONFIG.severity,
+    // Same detection check-theme uses: the hook must never block an edit over advice the app
+    // cannot take ("use @mantine/core's Select") in a repo with no Mantine.
+    ...declaredProfile(cfg, []) === "tokens-only" ? { profile: "tokens-only" } : {}
+  };
+  const roots = cfg.roots ?? DEFAULT_ROOTS;
+  const exempt = new Set(cfg.exempt ?? defaultExempt(cfg));
+  const isInScope = (filePath) => {
+    const abs = isAbsolute(filePath) ? filePath : resolve(cwd, filePath);
+    const rel = relative(cwd, abs).replace(/\\/g, "/");
+    if (rel === "" || rel.startsWith("..")) return false;
+    if (SKIP.test(rel) || exempt.has(rel)) return false;
+    return roots.some((root) => {
+      const r = root.replace(/\\/g, "/").replace(/\/+$/, "");
+      return rel === r || rel.startsWith(`${r}/`);
+    });
+  };
+  const result = evaluateGuardHook(payload, guardCfg, { isInScope });
+  if (result.permissionDecision === "deny" && result.reason !== void 0) {
+    process.stdout.write(
+      JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          permissionDecision: "deny",
+          permissionDecisionReason: result.reason
+        }
+      }) + "\n"
+    );
+  } else {
+    process.stdout.write(
+      '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}\n'
+    );
+  }
+  return 0;
+}
+export {
+  guardHook
+};

package/dist/cli/help.d.ts

@@ -0,0 +1,9 @@
+export declare const COMMAND_OPTIONS: Record<string, Record<string, {
+    type: 'string' | 'boolean';
+}>>;
+/** The first flag `cmd` does not accept, or null. Unknown commands return null — the dispatcher's
+ * default branch already names those. */
+export declare function unknownFlag(cmd: string, flags: readonly string[]): string | null;
+/** The one usage string — printed by `basalt help` / `--help` / `-h` AND the unknown-command fallback. */
+export declare const USAGE: string;
+//# sourceMappingURL=help.d.ts.map

package/dist/cli/help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../src/cli/help.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAC,CAiC1F,CAAA;AAED;yCACyC;AACzC,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAWhF;AAED,0GAA0G;AAC1G,eAAO,MAAM,KAAK,QAmC0E,CAAA"}

package/dist/cli/help.js

@@ -0,0 +1,53 @@
+import { parseArgs } from "node:util";
+const COMMAND_OPTIONS = {
+  init: {
+    "with-router": { type: "boolean" },
+    "with-query": { type: "boolean" },
+    "merge-lint": { type: "boolean" }
+  },
+  sync: {
+    force: { type: "boolean" },
+    check: { type: "boolean" },
+    "tokens-only": { type: "boolean" },
+    framework: { type: "boolean" }
+  },
+  "check-theme": {
+    "audit-allows": { type: "boolean" },
+    "tokens-only": { type: "boolean" },
+    framework: { type: "boolean" }
+  },
+  doctor: { "tokens-only": { type: "boolean" }, framework: { type: "boolean" } },
+  "guard-hook": {},
+  "tokens:css": {
+    out: { type: "string" },
+    check: { type: "boolean" },
+    "selector-attribute": { type: "string" },
+    "selector-class": { type: "string" },
+    "light-class": { type: "string" },
+    "dark-value": { type: "string" },
+    "light-value": { type: "string" },
+    "default-scheme": { type: "string" },
+    "media-fallback": { type: "boolean" },
+    only: { type: "string" },
+    "no-legacy-aliases": { type: "boolean" }
+  },
+  "fonts:css": { out: { type: "string" }, check: { type: "boolean" } }
+};
+function unknownFlag(cmd, flags) {
+  const options = COMMAND_OPTIONS[cmd];
+  if (options === void 0) return null;
+  try {
+    parseArgs({ args: [...flags], options, strict: true, allowPositionals: false });
+    return null;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const match = /'(-{1,2}[^']+)'/.exec(message);
+    return match?.[1] ?? flags.find((f) => f.startsWith("-")) ?? flags[0] ?? null;
+  }
+}
+const USAGE = "Usage: basalt-ui <--version | init [--with-router] [--with-query] [--merge-lint] |\n                  sync [--force] [--check] [--tokens-only|--framework] |\n                  check-theme [--audit-allows] |\n                  doctor [--tokens-only|--framework] | guard-hook | tokens:css | fonts:css | help>\n\ncheck-theme [--tokens-only|--framework] [--audit-allows]\n  --audit-allows reports instead of scanning: every `theme-allow` annotation and every\n  `basalt.exemptRules` entry, with what each one still suppresses \u2014 proved by re-running the\n  guard with that one waiver neutralized, not by reading its text. Exits 1 on a waiver that\n  suppresses nothing (dead), which is what makes it usable as a CI gate.\n\ntokens:css [--out <path>] [--check] [--selector-attribute <attr> | --selector-class <class>]\n           [--light-class <class>] [--dark-value <v>] [--light-value <v>]\n           [--default-scheme <dark|light|none>] [--media-fallback] [--only <core|all>]\n           [--no-legacy-aliases]\n  Emit the --vx-* stylesheet (stdout unless --out). Defaults reproduce basalt-ui/tokens.css.\n  --selector-class emits `:root.dark` instead of an attribute selector (the Tailwind convention).\n  --check writes nothing and exits 1 when --out differs from what would be emitted (a CI gate).\n  --no-legacy-aliases drops the deprecated camelCase spellings (--vx-accentFill and friends),\n  which are emitted by default as aliases of the canonical kebab-case names.\n\nfonts:css [--out <path>] [--check]\n  Emit the shipped --basalt-font-* stacks as plain CSS \u2014 the typeface half of the token layer,\n  otherwise reachable only by importing styles.css.\n\ndoctor [--tokens-only|--framework]\n  Checks THIS project only: the manifest exists, the oxlint preset is wired, the pre-commit\n  hook runs check-theme (via `lefthook dump`), and the ai package major is consistent within\n  this package.json. Profile is DECLARED, same as check-theme \u2014 never inferred.\n\nsync [--force] [--check] [--tokens-only|--framework]\n  Refreshes an EXISTING install; it never creates one (that is init). A tokens-only consumer\n  has no scaffold to reconcile, so sync reports n/a and exits 0 there \u2014 as doctor does.\n\ncheck-theme / doctor / sync all resolve their project the same way: BASALT_CWD, else the\ninvocation cwd \u2014 nothing inferred, nothing ascended or descended into.\n--tokens-only and --framework are alternatives; passing both is an error.\n\nEvery subcommand accepts --help / -h to print this message and exit without running.\n--version / -v prints the resolved package version and exits 0 \u2014 the one command that proves\nWHICH basalt-ui ran, which a `bunx` cache can otherwise make a lie. An unknown command or an\nunrecognized flag exits 1 and names what it did not understand; neither is ever ignored.";
+export {
+  COMMAND_OPTIONS,
+  USAGE,
+  unknownFlag
+};