baseline-foundry 0.1.3 → 0.1.4

package/dist/css.js

@@ -164,49 +164,49 @@ export function generateFoundryCss(tokens, options = {}) {
     if (!body) {
         throw new Error("Theme tokens require a body role.");
     }
-    return `${fontFaces}${fontFaces ? "\n" : ""}${generateBaselineGridOverlayCss({ baselineUnit: tokens.baselineUnit })}
-
-${themeSurfaceRule(":where(.bf-theme)", tokens)}
-${scopedThemeCss}
-
-:where(.bf-theme) {
-${vanillaThemeColorVars("light")}${foundryThemeRootColorVars("light")}
-  background: var(--bf-color-bg);
-  color: var(--bf-color-text);
-  font-family: var(--bf-body-font-family, ${body.fontStack});
-  font-size: var(--bf-body-font-size, ${body.fontSize});
-  font-style: var(--bf-body-font-style, ${body.fontStyle ?? "normal"});
-  font-weight: var(--bf-body-font-weight, ${body.fontWeight ?? 400});
-  line-height: var(--bf-body-line-height, ${body.lineHeight});
-}
-
-:where(.bf-theme.is-dark) {
-${vanillaThemeColorVars("dark")}${foundryThemeRootColorVars("dark")}
-  color-scheme: dark;
-}
-
-:where(.bf-theme.is-light) {
-  color-scheme: light;
-}
-
-:where(.bf-theme),
-:where(.bf-theme) * {
-  box-sizing: border-box;
-}
-
-${generateBaselineGridThemeOverrideCss()}
-
-:where(.bf-theme) :where(h1, h2, h3, h4, h5, h6, p, blockquote, figure, ul, ol, dl, pre) {
-  margin: 0;
-}
-
-:where(.bf-theme) :where(img, picture, svg, video) {
-  block-size: auto;
-  display: block;
-  inline-size: auto;
-  max-inline-size: 100%;
-}
-
+    return `${fontFaces}${fontFaces ? "\n" : ""}${generateBaselineGridOverlayCss({ baselineUnit: tokens.baselineUnit })}
+
+${themeSurfaceRule(":where(.bf-theme)", tokens)}
+${scopedThemeCss}
+
+:where(.bf-theme) {
+${vanillaThemeColorVars("light")}${foundryThemeRootColorVars("light")}
+  background: var(--bf-color-bg);
+  color: var(--bf-color-text);
+  font-family: var(--bf-body-font-family, ${body.fontStack});
+  font-size: var(--bf-body-font-size, ${body.fontSize});
+  font-style: var(--bf-body-font-style, ${body.fontStyle ?? "normal"});
+  font-weight: var(--bf-body-font-weight, ${body.fontWeight ?? 400});
+  line-height: var(--bf-body-line-height, ${body.lineHeight});
+}
+
+:where(.bf-theme.is-dark) {
+${vanillaThemeColorVars("dark")}${foundryThemeRootColorVars("dark")}
+  color-scheme: dark;
+}
+
+:where(.bf-theme.is-light) {
+  color-scheme: light;
+}
+
+:where(.bf-theme),
+:where(.bf-theme) * {
+  box-sizing: border-box;
+}
+
+${generateBaselineGridThemeOverrideCss()}
+
+:where(.bf-theme) :where(h1, h2, h3, h4, h5, h6, p, blockquote, figure, ul, ol, dl, pre) {
+  margin: 0;
+}
+
+:where(.bf-theme) :where(img, picture, svg, video) {
+  block-size: auto;
+  display: block;
+  inline-size: auto;
+  max-inline-size: 100%;
+}
+
 :where(.bf-theme) :where(a) {
   color: var(--bf-color-link);
   text-decoration: none;
@@ -221,211 +221,211 @@ ${generateBaselineGridThemeOverrideCss()}
 :where(.bf-theme) :where(a:visited) {
   color: var(--bf-color-link-visited);
 }
-
-:where(.bf-theme) :where(a:focus-visible) {
-  outline: 2px solid var(--bf-color-focus);
-  outline-offset: 2px;
-}
-
-:where(.bf-theme) :where(code) {
-  font-family: "Ubuntu Sans Mono", ui-monospace, SFMono-Regular, Consolas, monospace;
-  font-size: 0.95em;
-}
-
-:where(.bf-theme) :where(.bf-page) {
-  margin-inline: auto;
-  max-inline-size: var(--bf-content-max-width);
-  padding-inline: max(var(--bf-page-margin), var(--bf-content-padding-inline));
-}
-
-:where(.bf-theme) :where(.bf-page.is-fill) {
-  min-block-size: 100vh;
-  padding-block-end: var(--bf-section-space);
-}
-
-:where(.bf-theme) :where(.bf-section) {
-  margin-block-end: 0;
-}
-
-:where(.bf-theme) :where(.bf-section.is-shallow) {
-  margin-block-end: 0;
-}
-
-:where(.bf-theme) :where(.bf-section.is-deep) {
-  margin-block-end: 0;
-}
-
-:where(.bf-theme) :where(.bf-strip) {
-  padding-block-end: var(--bf-strip-space);
-}
-
-:where(.bf-theme) :where(.bf-fixed-width, .bf-measure) {
-  inline-size: min(100%, var(--bf-measure));
-}
-
-:where(.bf-theme) :where(.bf-inline-size) {
-  --bf-inline-size: 18rem;
-  flex: 0 1 var(--bf-inline-size);
-  inline-size: min(100%, var(--bf-inline-size));
-  min-inline-size: min(100%, var(--bf-inline-size));
-}
-
-:where(.bf-theme) :where(.bf-inline-size.is-compact) {
-  --bf-inline-size: 12rem;
-}
-
-:where(.bf-theme) :where(.bf-inline-size.is-regular) {
-  --bf-inline-size: 18rem;
-}
-
-:where(.bf-theme) :where(.bf-inline-size.is-medium) {
-  --bf-inline-size: 20rem;
-}
-
-:where(.bf-theme) :where(.bf-inline-size.is-wide) {
-  --bf-inline-size: 24rem;
-}
-
-:where(.bf-theme) :where(.bf-inline-size.is-x-wide) {
-  --bf-inline-size: 28rem;
-}
-
-:where(.bf-theme) :where(.bf-stage-shell) {
-  --bf-stage-shell-gap: var(--bf-space-3);
-  align-content: center;
-  align-items: center;
-  display: grid;
-  gap: var(--bf-stage-shell-gap);
-  justify-items: center;
-  min-block-size: 100%;
-  min-inline-size: 0;
-  padding-block: var(--bf-space-4);
-}
-
-:where(.bf-theme) :where(.bf-stage-shell.is-tight) {
-  --bf-stage-shell-gap: var(--bf-space-2);
-}
-
-:where(.bf-theme) :where(.bf-stage-shell.is-loose) {
-  --bf-stage-shell-gap: var(--bf-space-4);
-}
-
+
+:where(.bf-theme) :where(a:focus-visible) {
+  outline: 2px solid var(--bf-color-focus);
+  outline-offset: 2px;
+}
+
+:where(.bf-theme) :where(code) {
+  font-family: "Ubuntu Sans Mono", ui-monospace, SFMono-Regular, Consolas, monospace;
+  font-size: 0.95em;
+}
+
+:where(.bf-theme) :where(.bf-page) {
+  margin-inline: auto;
+  max-inline-size: var(--bf-content-max-width);
+  padding-inline: max(var(--bf-page-margin), var(--bf-content-padding-inline));
+}
+
+:where(.bf-theme) :where(.bf-page.is-fill) {
+  min-block-size: 100vh;
+  padding-block-end: var(--bf-section-space);
+}
+
+:where(.bf-theme) :where(.bf-section) {
+  margin-block-end: 0;
+}
+
+:where(.bf-theme) :where(.bf-section.is-shallow) {
+  margin-block-end: 0;
+}
+
+:where(.bf-theme) :where(.bf-section.is-deep) {
+  margin-block-end: 0;
+}
+
+:where(.bf-theme) :where(.bf-strip) {
+  padding-block-end: var(--bf-strip-space);
+}
+
+:where(.bf-theme) :where(.bf-fixed-width, .bf-measure) {
+  inline-size: min(100%, var(--bf-measure));
+}
+
+:where(.bf-theme) :where(.bf-inline-size) {
+  --bf-inline-size: 18rem;
+  flex: 0 1 var(--bf-inline-size);
+  inline-size: min(100%, var(--bf-inline-size));
+  min-inline-size: min(100%, var(--bf-inline-size));
+}
+
+:where(.bf-theme) :where(.bf-inline-size.is-compact) {
+  --bf-inline-size: 12rem;
+}
+
+:where(.bf-theme) :where(.bf-inline-size.is-regular) {
+  --bf-inline-size: 18rem;
+}
+
+:where(.bf-theme) :where(.bf-inline-size.is-medium) {
+  --bf-inline-size: 20rem;
+}
+
+:where(.bf-theme) :where(.bf-inline-size.is-wide) {
+  --bf-inline-size: 24rem;
+}
+
+:where(.bf-theme) :where(.bf-inline-size.is-x-wide) {
+  --bf-inline-size: 28rem;
+}
+
+:where(.bf-theme) :where(.bf-stage-shell) {
+  --bf-stage-shell-gap: var(--bf-space-3);
+  align-content: center;
+  align-items: center;
+  display: grid;
+  gap: var(--bf-stage-shell-gap);
+  justify-items: center;
+  min-block-size: 100%;
+  min-inline-size: 0;
+  padding-block: var(--bf-space-4);
+}
+
+:where(.bf-theme) :where(.bf-stage-shell.is-tight) {
+  --bf-stage-shell-gap: var(--bf-space-2);
+}
+
+:where(.bf-theme) :where(.bf-stage-shell.is-loose) {
+  --bf-stage-shell-gap: var(--bf-space-4);
+}
+
 :where(.bf-theme) :where(.bf-stack) {
   --bf-stack-space: var(--bf-section-space-shallow);
   align-content: start;
   display: grid;
-  gap: var(--bf-stack-space);
-}
-
-:where(.bf-theme) :where(.bf-stack.is-flush) {
-  --bf-stack-space: 0px;
-}
-
-:where(.bf-theme) :where(.bf-stack.is-extra-dense) {
-  --bf-stack-space: var(--bf-space-half);
-}
-
-:where(.bf-theme) :where(.bf-stack.is-dense) {
-  --bf-stack-space: var(--bf-space-1);
-}
-
-:where(.bf-theme) :where(.bf-stack.is-loose) {
-  --bf-stack-space: var(--bf-space-2);
-}
-
-:where(.bf-theme) :where(.bf-stack.is-section-shallow) {
-  --bf-stack-space: var(--bf-section-space-shallow);
-}
-
-:where(.bf-theme) :where(.bf-stack.is-section) {
-  --bf-stack-space: var(--bf-section-space);
-}
-
+  gap: var(--bf-stack-space);
+}
+
+:where(.bf-theme) :where(.bf-stack.is-flush) {
+  --bf-stack-space: 0px;
+}
+
+:where(.bf-theme) :where(.bf-stack.is-extra-dense) {
+  --bf-stack-space: var(--bf-space-half);
+}
+
+:where(.bf-theme) :where(.bf-stack.is-dense) {
+  --bf-stack-space: var(--bf-space-1);
+}
+
+:where(.bf-theme) :where(.bf-stack.is-loose) {
+  --bf-stack-space: var(--bf-space-2);
+}
+
+:where(.bf-theme) :where(.bf-stack.is-section-shallow) {
+  --bf-stack-space: var(--bf-section-space-shallow);
+}
+
+:where(.bf-theme) :where(.bf-stack.is-section) {
+  --bf-stack-space: var(--bf-section-space);
+}
+
 :where(.bf-theme) :where(.bf-stack.is-section-deep) {
   --bf-stack-space: var(--bf-section-space-deep);
 }
 
 :where(.bf-theme) :where(.bf-cluster) {
-  align-items: flex-start;
-  display: flex;
-  flex-wrap: wrap;
-  gap: var(--bf-space-2);
-}
-
-:where(.bf-theme) :where(.bf-cluster.is-split) {
-  justify-content: space-between;
-}
-
-:where(.bf-theme) :where(.bf-prose) {
-  display: grid;
-  gap: var(--bf-section-space-shallow);
-  inline-size: min(100%, var(--bf-measure));
-}
-
-${roleRules}
-
-${capEngineDemo}
-
-:where(.bf-theme) :where(ul, ol) {
-  margin-bottom: 0;
-}
-
-:where(.bf-theme) :where(.bf-prose ul, .bf-prose ol) {
-  padding-inline-start: var(--bf-space-4);
-}
-
-:where(.bf-theme) :where(.bf-prose li) {
-  margin: 0 0 ${roleMarginBottomVar("body", baselineCompensation(body.nudgeTop, baselineUnit))};
-  padding-block-end: 0rem;
-  padding-block-start: ${roleNudgeStartVar("body", body.nudgeTop)};
-}
-
-:where(.bf-theme) :where(.bf-prose blockquote) {
-  border-inline-start: 1px solid var(--bf-color-rule);
-  color: var(--bf-color-muted);
-  font-family: ${roleFontFamilyVar("body", body.fontStack)};
-  font-size: ${roleFontSizeVar("body", body.fontSize)};
-  font-style: ${roleFontStyleVar("body", body.fontStyle ?? "normal")};
-  font-weight: ${roleFontWeightVar("body", body.fontWeight ?? 400)};
-  line-height: ${roleLineHeightVar("body", body.lineHeight)};
-  margin-bottom: ${roleMarginBottomVar("body", baselineCompensation(body.nudgeTop, baselineUnit))};
-  max-inline-size: calc(var(--bf-measure) + var(--bf-space-4));
-  padding-block-end: 0rem;
-  padding-block-start: ${roleNudgeStartVar("body", body.nudgeTop)};
-  padding-inline-start: var(--bf-space-3);
-}
-
-:where(.bf-theme) :where(.bf-rule, .bf-prose hr) {
-  background: var(--bf-color-rule);
-  block-size: 1px;
-  border: 0;
-  inline-size: 100%;
-  /* Reserve one half-rem rhythm step after the rule, including its */
-  /* thickness, so borderless content does not touch the divider. */
-  margin: 0 0 calc(0.5rem - 1px);
-}
-
-/* Highlight rules share the same scalable emphasis-bar geometry as active
- * navigation, tabs, notifications, and document-navigation markers. */
-:where(.bf-theme) :where(.bf-rule.is-highlighted, .bf-prose hr.is-highlighted) {
-  block-size: var(--bf-bar-thickness);
-  margin-block-end: calc(0.5rem - var(--bf-bar-thickness));
-}
-
-:where(.bf-theme) :where(.bf-token-row) {
-  border-top: 1px solid var(--bf-color-rule);
-  display: grid;
-  gap: var(--bf-space-1);
-  padding-top: var(--bf-space-2);
-}
-
-:where(.bf-theme) :where(.bf-token-row:first-child) {
-  border-top: 0;
-  padding-top: 0;
-}
-
-${componentsCss(tokens, themeSurfaces)}
-
-${gridCss()}${presetCss}
+  align-items: flex-start;
+  display: flex;
+  flex-wrap: wrap;
+  gap: var(--bf-space-2);
+}
+
+:where(.bf-theme) :where(.bf-cluster.is-split) {
+  justify-content: space-between;
+}
+
+:where(.bf-theme) :where(.bf-prose) {
+  display: grid;
+  gap: var(--bf-section-space-shallow);
+  inline-size: min(100%, var(--bf-measure));
+}
+
+${roleRules}
+
+${capEngineDemo}
+
+:where(.bf-theme) :where(ul, ol) {
+  margin-bottom: 0;
+}
+
+:where(.bf-theme) :where(.bf-prose ul, .bf-prose ol) {
+  padding-inline-start: var(--bf-space-4);
+}
+
+:where(.bf-theme) :where(.bf-prose li) {
+  margin: 0 0 ${roleMarginBottomVar("body", baselineCompensation(body.nudgeTop, baselineUnit))};
+  padding-block-end: 0rem;
+  padding-block-start: ${roleNudgeStartVar("body", body.nudgeTop)};
+}
+
+:where(.bf-theme) :where(.bf-prose blockquote) {
+  border-inline-start: 1px solid var(--bf-color-rule);
+  color: var(--bf-color-muted);
+  font-family: ${roleFontFamilyVar("body", body.fontStack)};
+  font-size: ${roleFontSizeVar("body", body.fontSize)};
+  font-style: ${roleFontStyleVar("body", body.fontStyle ?? "normal")};
+  font-weight: ${roleFontWeightVar("body", body.fontWeight ?? 400)};
+  line-height: ${roleLineHeightVar("body", body.lineHeight)};
+  margin-bottom: ${roleMarginBottomVar("body", baselineCompensation(body.nudgeTop, baselineUnit))};
+  max-inline-size: calc(var(--bf-measure) + var(--bf-space-4));
+  padding-block-end: 0rem;
+  padding-block-start: ${roleNudgeStartVar("body", body.nudgeTop)};
+  padding-inline-start: var(--bf-space-3);
+}
+
+:where(.bf-theme) :where(.bf-rule, .bf-prose hr) {
+  background: var(--bf-color-rule);
+  block-size: 1px;
+  border: 0;
+  inline-size: 100%;
+  /* Reserve one half-rem rhythm step after the rule, including its */
+  /* thickness, so borderless content does not touch the divider. */
+  margin: 0 0 calc(0.5rem - 1px);
+}
+
+/* Highlight rules share the same scalable emphasis-bar geometry as active
+ * navigation, tabs, notifications, and document-navigation markers. */
+:where(.bf-theme) :where(.bf-rule.is-highlighted, .bf-prose hr.is-highlighted) {
+  block-size: var(--bf-bar-thickness);
+  margin-block-end: calc(0.5rem - var(--bf-bar-thickness));
+}
+
+:where(.bf-theme) :where(.bf-token-row) {
+  border-top: 1px solid var(--bf-color-rule);
+  display: grid;
+  gap: var(--bf-space-1);
+  padding-top: var(--bf-space-2);
+}
+
+:where(.bf-theme) :where(.bf-token-row:first-child) {
+  border-top: 0;
+  padding-top: 0;
+}
+
+${componentsCss(tokens, themeSurfaces)}
+
+${gridCss()}${presetCss}
 `;
 }

package/docs/publishing.md

@@ -30,22 +30,39 @@ CSS, JSON, JavaScript, and type declarations.
 
 ## Release checklist
 
-The initial `0.1.3` publication is bootstrapped interactively because npm can
+The initial `0.1.3` publication was bootstrapped interactively because npm can
 only attach a trusted publisher after a package exists. Routine releases use
-the OIDC workflow below.
+the OIDC workflow below. `npm publish` invokes the package's `prepublishOnly`
+release gate, so the workflow does not duplicate that command. The workflow
+pins the supported npm CLI, and no npm write token or recovery code is used.
 
 1. Bump BF to the next unused version and regenerate `package-lock.json`.
-2. Run `npm run release:check` and `npm pack --dry-run`; confirm the tarball
-   contains `dist/`, `config/`, `docs/publishing.md`, `README.md`, `LICENSE`,
-   and no source or local temporary files.
-3. Commit and push the exact release candidate.
-4. Publish from `.github/workflows/publish.yml`; npm trusted publishing uses a
-   short-lived GitHub Actions OIDC credential, so no npm token is stored.
-5. Verify `npm view baseline-foundry version`, then install the exact published
-   version into an empty directory and smoke-test the root, `build`, CSS, token,
-   surface, and four tier export paths.
-6. Tag the same commit and publish the GitHub release with the npm tarball
-   attached as a fallback artifact.
+2. Run `npm run release:preflight:test`, `npm run release:check`, and
+   `npm run release:verify -- --pack-current`. The negative fixtures prove used
+   versions and ref mismatches fail before publication; the local tarball check
+   exercises all runtime and asset entry points in an empty consumer.
+3. Commit and push the exact release candidate to `main`.
+4. Dispatch `.github/workflows/publish.yml` with
+   `resume_after_publish=false`. The workflow bootstraps the pinned demo font
+   and builds the gitignored package outputs before its preflight, which
+   requires clean `main`, exact
+   `origin/main`, matching lockfile metadata, an unused npm version and tag, and
+   the allowlisted package contents.
+5. `npm publish` obtains a short-lived OIDC credential and owns the sole
+   `prepublishOnly` release gate. The workflow then installs the exact registry
+   version into an empty directory, checks every public entry point, creates
+   SHA-1/SHA-256 records, tags the source commit, and attaches the npm tarball
+   and checksums to the matching GitHub release.
+6. If npm publication succeeded but a later verification or GitHub release step
+   failed, rerun the same workflow with `resume_after_publish=true`. Resume mode
+   requires the registry version to exist, skips `npm publish`, verifies any
+   existing tag targets the same commit, and creates or replaces release assets.
+
+The GitHub repository is private. npm trusted publishing still removes the need
+for a long-lived write token, but npm currently does not publish public
+provenance attestations for packages whose source repository is private. The
+tag, checksums, attached npm tarball and clean registry verification are BF's
+durable release evidence; documentation must not claim public provenance.
 
 ## Compatibility