brandrail 0.6.0 → 0.7.0

package/dist/brandrail.mjs

@@ -3911,50 +3911,50 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative3, options, skipNormalization) {
+    function resolveComponent(base, relative4, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse3(serialize(base, options), options);
-        relative3 = parse3(serialize(relative3, options), options);
+        relative4 = parse3(serialize(relative4, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative3.scheme) {
-        target.scheme = relative3.scheme;
-        target.userinfo = relative3.userinfo;
-        target.host = relative3.host;
-        target.port = relative3.port;
-        target.path = removeDotSegments(relative3.path || "");
-        target.query = relative3.query;
+      if (!options.tolerant && relative4.scheme) {
+        target.scheme = relative4.scheme;
+        target.userinfo = relative4.userinfo;
+        target.host = relative4.host;
+        target.port = relative4.port;
+        target.path = removeDotSegments(relative4.path || "");
+        target.query = relative4.query;
       } else {
-        if (relative3.userinfo !== void 0 || relative3.host !== void 0 || relative3.port !== void 0) {
-          target.userinfo = relative3.userinfo;
-          target.host = relative3.host;
-          target.port = relative3.port;
-          target.path = removeDotSegments(relative3.path || "");
-          target.query = relative3.query;
+        if (relative4.userinfo !== void 0 || relative4.host !== void 0 || relative4.port !== void 0) {
+          target.userinfo = relative4.userinfo;
+          target.host = relative4.host;
+          target.port = relative4.port;
+          target.path = removeDotSegments(relative4.path || "");
+          target.query = relative4.query;
         } else {
-          if (!relative3.path) {
+          if (!relative4.path) {
             target.path = base.path;
-            if (relative3.query !== void 0) {
-              target.query = relative3.query;
+            if (relative4.query !== void 0) {
+              target.query = relative4.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative3.path[0] === "/") {
-              target.path = removeDotSegments(relative3.path);
+            if (relative4.path[0] === "/") {
+              target.path = removeDotSegments(relative4.path);
             } else {
               const baseHasAuthority = base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0;
               if (baseHasAuthority && !base.path) {
-                target.path = "/" + relative3.path;
+                target.path = "/" + relative4.path;
               } else if (!base.path) {
-                target.path = relative3.path;
+                target.path = relative4.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative3.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative4.path;
               }
               target.path = base.scheme === void 0 && !baseHasAuthority && target.path[0] !== "/" ? removeDotSegmentsRelative(target.path) : removeDotSegments(target.path);
             }
-            target.query = relative3.query;
+            target.query = relative4.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -3962,7 +3962,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative3.fragment;
+      target.fragment = relative4.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -7256,8 +7256,8 @@ var require_dist = __commonJS({
 });
 
 // src/index.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, statSync as statSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename2, dirname as dirname4, join as join6, relative as relative2, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync6, statSync as statSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename2, dirname as dirname4, join as join7, relative as relative3, resolve as resolve3 } from "node:path";
 
 // ../../node_modules/.pnpm/fflate@0.8.3/node_modules/fflate/esm/index.mjs
 import { createRequire } from "module";
@@ -9185,7 +9185,7 @@ function makeIgnore(globs) {
 }
 
 // ../engine/src/check.ts
-var ENGINE_VERSION = "0.6.0";
+var ENGINE_VERSION = "0.7.0";
 var WEIGHT = { error: 4, warning: 1.5, info: 0.25 };
 function computeScore(counts, lines) {
   const penalty = counts.error * WEIGHT.error + counts.warning * WEIGHT.warning + counts.info * WEIGHT.info;
@@ -40801,7 +40801,11 @@ function parseChangedLines(diff) {
 }
 function changedLines(cwd, base) {
   const mergeBase = git(["merge-base", base, "HEAD"], cwd) ?? base;
-  const diff = git(["diff", "-U0", "--no-color", "--diff-filter=AMR", mergeBase], cwd);
+  const diff = git(["diff", "--relative", "-U0", "--no-color", "--diff-filter=AMR", mergeBase], cwd);
+  return diff === null ? null : parseChangedLines(diff);
+}
+function stagedLines(cwd) {
+  const diff = git(["diff", "--cached", "--relative", "-U0", "--no-color", "--diff-filter=AMR"], cwd);
   return diff === null ? null : parseChangedLines(diff);
 }
 
@@ -40886,12 +40890,82 @@ async function runLocalMcp(cwd, opts) {
   });
 }
 
+// src/hook.ts
+import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "node:fs";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { isAbsolute, join as join5, relative as relative2 } from "node:path";
+var HOOK_START = "# >>> brandrail (npx brandrail hook uninstall to remove)";
+var HOOK_END = "# <<< brandrail";
+var hookBlock = (cmd) => [
+  HOOK_START,
+  `${cmd} || { echo ""; echo "Brandrail: fix the errors above (or commit with --no-verify to skip this once)."; exit 1; }`,
+  HOOK_END
+].join("\n");
+var git2 = (args, cwd) => {
+  try {
+    return execFileSync2("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+  } catch {
+    return null;
+  }
+};
+function hookFile(cwd) {
+  const top = git2(["rev-parse", "--show-toplevel"], cwd);
+  if (!top) return null;
+  if (existsSync5(join5(top, ".husky"))) return { path: join5(top, ".husky", "pre-commit"), kind: "husky" };
+  const custom2 = git2(["config", "core.hooksPath"], cwd);
+  if (custom2 && !/\.husky/.test(custom2)) return { path: join5(isAbsolute(custom2) ? custom2 : join5(top, custom2), "pre-commit"), kind: "git" };
+  const hooks = git2(["rev-parse", "--git-path", "hooks"], cwd);
+  if (!hooks) return null;
+  return { path: join5(isAbsolute(hooks) ? hooks : join5(cwd, hooks), "pre-commit"), kind: "git" };
+}
+function withoutBlock(text2) {
+  const start = text2.indexOf(HOOK_START);
+  const end = text2.indexOf(HOOK_END);
+  if (start === -1 || end === -1 || end < start) return text2;
+  return (text2.slice(0, start) + text2.slice(end + HOOK_END.length)).replace(/\n{3,}/g, "\n\n");
+}
+function withBlock(text2, block, kind) {
+  const base = withoutBlock(text2).trimEnd();
+  if (!base) return kind === "husky" ? `${block}
+` : `#!/bin/sh
+${block}
+`;
+  return `${base}
+
+${block}
+`;
+}
+function installHook(cwd, opts) {
+  const where = hookFile(cwd);
+  if (!where) throw new Error("This isn't a git repository (no .git found).");
+  const top = git2(["rev-parse", "--show-toplevel"], cwd) ?? cwd;
+  const sub = relative2(top, opts.root);
+  const cd = sub && !sub.startsWith("..") ? `cd "${sub}" && ` : "";
+  const cmd = `${cd}npx --yes brandrail check --staged --strict${opts.failBelow !== void 0 ? ` --fail-below ${opts.failBelow}` : ""}`;
+  const before = existsSync5(where.path) ? readFileSync5(where.path, "utf8") : "";
+  mkdirSync3(join5(where.path, ".."), { recursive: true });
+  writeFileSync3(where.path, withBlock(before, hookBlock(cmd), where.kind));
+  try {
+    chmodSync2(where.path, 493);
+  } catch {
+  }
+  return { path: relative2(cwd, where.path) || where.path, kind: where.kind };
+}
+function uninstallHook(cwd) {
+  const where = hookFile(cwd);
+  if (!where || !existsSync5(where.path)) return null;
+  const before = readFileSync5(where.path, "utf8");
+  if (!before.includes(HOOK_START)) return null;
+  writeFileSync3(where.path, withoutBlock(before));
+  return relative2(cwd, where.path) || where.path;
+}
+
 // src/scan.ts
-import { existsSync as existsSync5 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { join as join5, resolve as resolve2 } from "node:path";
+import { join as join6, resolve as resolve2 } from "node:path";
 function loadPlaywright(cwd) {
-  for (const base of [join5(cwd, "package.json"), import.meta.url]) {
+  for (const base of [join6(cwd, "package.json"), import.meta.url]) {
     for (const name of ["playwright", "playwright-core"]) {
       try {
         return createRequire2(base)(name);
@@ -40905,7 +40979,7 @@ async function scanPages(cwd, url2, config2, opts, log3) {
   const pw = loadPlaywright(cwd);
   const start = /^https?:\/\//i.test(url2) ? url2 : `http://${url2}`;
   const state = opts.storageState ? resolve2(cwd, opts.storageState) : void 0;
-  if (state && !existsSync5(state)) throw new Error(`--storage-state file not found: ${state}`);
+  if (state && !existsSync6(state)) throw new Error(`--storage-state file not found: ${state}`);
   const browser = await pw.chromium.launch({ headless: true });
   try {
     const context = await browser.newContext({ viewport: { width: opts.width, height: 900 }, storageState: state });
@@ -40950,6 +41024,7 @@ Usage
   brandrail connect            Sign in through the browser and set this project up: Brand Kit, AI rule files,
                                MCP server for Claude Code / Cursor / Copilot, and the UI kit
   brandrail check [paths...]   Scan files and print violations
+  brandrail hook install       Check staged lines before every commit (errors stop the commit); hook uninstall removes it
   brandrail init               Create brandrail.config.json and AI rule files
   brandrail migrate [paths...] What's left on the way to the design system: per library and per file
   brandrail report             Write a shareable HTML handover report (paths and counts, no code)
@@ -40964,6 +41039,8 @@ Options for check
   --format <fmt>         pretty | json | markdown | github   (default: pretty)
   --fail-below <score>   Exit 1 when the brand score is lower (default: off)
   --changed [base]       Only report lines changed vs base branch (default: origin/main)
+  --staged               Only the lines staged for the next commit (what the pre-commit hook runs)
+  --strict               Exit 1 on any error (warnings never fail)
   --upload               Send the result to Brandrail (needs \`brandrail connect\` or BRANDRAIL_KEY)
   --no-color             Plain output
 
@@ -41032,9 +41109,9 @@ function parseArgs(argv) {
 var log2 = (s = "") => process.stderr.write(`${s}
 `);
 function readJson(path) {
-  if (!existsSync6(path)) return void 0;
+  if (!existsSync7(path)) return void 0;
   try {
-    return JSON.parse(readFileSync5(path, "utf8"));
+    return JSON.parse(readFileSync6(path, "utf8"));
   } catch {
     return void 0;
   }
@@ -41042,7 +41119,7 @@ function readJson(path) {
 async function loadConfig(cwd, flags) {
   const explicit = typeof flags.config === "string" ? resolve3(cwd, flags.config) : null;
   const path = explicit ?? findConfig(cwd);
-  if (path) return { config: readConfig(path), source: relative2(cwd, path) || CONFIG_FILE2 };
+  if (path) return { config: readConfig(path), source: relative3(cwd, path) || CONFIG_FILE2 };
   const key = resolveKey();
   if (key) {
     const { config: config2 } = await fetchBrandKit(key);
@@ -41053,10 +41130,19 @@ async function loadConfig(cwd, flags) {
 async function cmdCheck(cwd, positional, flags) {
   const { config: config2, source } = await loadConfig(cwd, flags);
   const resolved = resolveConfig(config2);
-  const root = dirname4(typeof flags.config === "string" ? resolve3(cwd, flags.config) : findConfig(cwd) ?? join6(cwd, CONFIG_FILE2));
-  const files = collectFiles(root, positional.map((p) => relative2(root, resolve3(cwd, p))), resolved.ignore);
+  const root = dirname4(typeof flags.config === "string" ? resolve3(cwd, flags.config) : findConfig(cwd) ?? join7(cwd, CONFIG_FILE2));
+  const collected = collectFiles(root, positional.map((p) => relative3(root, resolve3(cwd, p))), resolved.ignore);
   let onlyLines;
-  if (flags.changed) {
+  let files = collected;
+  if (flags.staged) {
+    const staged = stagedLines(root);
+    if (!staged) log2("warning: couldn't read the staged changes; checking everything");
+    else {
+      onlyLines = staged;
+      files = collected.filter((f) => staged.has(f.path));
+      if (!files.length) return 0;
+    }
+  } else if (flags.changed) {
     const base = typeof flags.changed === "string" ? flags.changed : "origin/main";
     onlyLines = changedLines(root, base) ?? void 0;
     if (!onlyLines) log2(`warning: couldn't read git diff against ${base}; checking everything`);
@@ -41093,6 +41179,11 @@ async function cmdCheck(cwd, positional, flags) {
       log2(`Uploaded \u2192 ${res.url ?? res.scanId}`);
     }
   }
+  if (flags.strict && report.counts.error > 0) {
+    log2(`
+${report.counts.error} error${report.counts.error === 1 ? "" : "s"} (--strict fails on any error; warnings don't block).`);
+    return 1;
+  }
   if (threshold !== void 0 && report.score < threshold) {
     log2(`
 Brand score ${report.score} is below ${threshold}.`);
@@ -41100,36 +41191,53 @@ Brand score ${report.score} is below ${threshold}.`);
   }
   return 0;
 }
+function cmdHook(cwd, positional, flags) {
+  const action = positional[0] ?? "install";
+  if (action === "uninstall" || action === "remove") {
+    const removed = uninstallHook(cwd);
+    log2(removed ? `\u2714 removed the Brandrail check from ${removed}` : "No Brandrail pre-commit hook found.");
+    return 0;
+  }
+  if (action !== "install") throw new Error("Usage: brandrail hook install [--fail-below 80] | brandrail hook uninstall");
+  const config2 = findConfig(cwd);
+  if (!config2) throw new Error(`No ${CONFIG_FILE2} here or above. Run \`brandrail connect\` first.`);
+  const failBelow = flags["fail-below"] !== void 0 ? Number(flags["fail-below"]) : void 0;
+  const r = installHook(cwd, { root: dirname4(config2), failBelow });
+  log2(`\u2714 ${r.kind === "husky" ? "added to Husky's" : "installed the"} pre-commit hook (${r.path})`);
+  log2("  Each commit now checks the staged lines; errors stop the commit, warnings don't.");
+  log2("  Skip it once with git commit --no-verify. Remove it with brandrail hook uninstall.");
+  return 0;
+}
 function tokensCssPath(root, config2, flags) {
   if (typeof flags["tokens-css"] === "string") return flags["tokens-css"];
   if (config2.tokensCss) return config2.tokensCss;
-  return existsSync6(join6(root, "src")) ? "src/brandrail.tokens.css" : "brandrail.tokens.css";
+  return existsSync7(join7(root, "src")) ? "src/brandrail.tokens.css" : "brandrail.tokens.css";
 }
 function writeTokensCss(root, rel, config2, org) {
-  const abs = join6(root, rel);
-  mkdirSync3(dirname4(abs), { recursive: true });
+  const abs = join7(root, rel);
+  mkdirSync4(dirname4(abs), { recursive: true });
   const { css, usesKit } = tokensCssContent(config2, org);
-  writeFileSync3(abs, css);
+  writeFileSync4(abs, css);
   return usesKit;
 }
 function writeRuleFiles(root, config2, org, tokensCss) {
   const md = generateInstructions(config2, { org, tokensCss });
   const written = [];
   for (const { file: file2, readBy } of RULE_FILES) {
-    const abs = join6(root, file2);
-    mkdirSync3(dirname4(abs), { recursive: true });
-    const before = existsSync6(abs) ? readFileSync5(abs, "utf8") : "";
-    writeFileSync3(abs, ruleFileContent(file2, md, before));
+    const abs = join7(root, file2);
+    mkdirSync4(dirname4(abs), { recursive: true });
+    const before = existsSync7(abs) ? readFileSync6(abs, "utf8") : "";
+    writeFileSync4(abs, ruleFileContent(file2, md, before));
     written.push(`${file2}  (${readBy})`);
   }
-  const pkg = readJson(join6(root, "package.json"));
+  const pkg = readJson(join7(root, "package.json"));
   for (const [file2, content, readBy] of [
     [MIGRATE_SKILL_FILE, migrationSkill(config2, { org, pkg }), "Claude Code skill: migrate to the design system"],
     [MIGRATE_AGENT_FILE, migrationAgent({ org }), "Claude Code agent: brandrail-migrator"]
   ]) {
-    const abs = join6(root, file2);
-    mkdirSync3(dirname4(abs), { recursive: true });
-    writeFileSync3(abs, content);
+    const abs = join7(root, file2);
+    mkdirSync4(dirname4(abs), { recursive: true });
+    writeFileSync4(abs, content);
     written.push(`${file2}  (${readBy})`);
   }
   return written;
@@ -41139,13 +41247,13 @@ function writeMcpConfigs(root, framework, mode = "remote") {
   const configs = mode === "local" ? mcpLocalConfigs(framework) : mcpClientConfigs(url2);
   for (const c of configs) {
     if (!c.projectFile) continue;
-    const abs = join6(root, c.file);
-    mkdirSync3(dirname4(abs), { recursive: true });
+    const abs = join7(root, c.file);
+    mkdirSync4(dirname4(abs), { recursive: true });
     const ours = JSON.parse(c.content);
     let merged = ours;
-    if (existsSync6(abs)) {
+    if (existsSync7(abs)) {
       try {
-        const existing = JSON.parse(readFileSync5(abs, "utf8"));
+        const existing = JSON.parse(readFileSync6(abs, "utf8"));
         merged = { ...existing };
         for (const [k, v] of Object.entries(ours)) {
           if (k === "mcpServers" || k === "servers") {
@@ -41160,7 +41268,7 @@ function writeMcpConfigs(root, framework, mode = "remote") {
         continue;
       }
     }
-    writeFileSync3(abs, `${JSON.stringify(merged, null, 2)}
+    writeFileSync4(abs, `${JSON.stringify(merged, null, 2)}
 `);
     log2(`\u2714 added brandrail to ${c.file}  (${c.name})`);
   }
@@ -41181,16 +41289,16 @@ function projectFramework(cwd, config2, flags) {
     return asked;
   }
   if (config2.framework && isFramework(config2.framework)) return config2.framework;
-  const pkg = join6(cwd, "package.json");
-  if (!existsSync6(pkg)) return detectFramework(null);
+  const pkg = join7(cwd, "package.json");
+  if (!existsSync7(pkg)) return detectFramework(null);
   try {
-    return detectFramework(JSON.parse(readFileSync5(pkg, "utf8")));
+    return detectFramework(JSON.parse(readFileSync6(pkg, "utf8")));
   } catch {
     return "react";
   }
 }
 async function cmdInit(cwd, flags) {
-  const target = join6(cwd, CONFIG_FILE2);
+  const target = join7(cwd, CONFIG_FILE2);
   let config2 = starterConfig;
   let org;
   if (flags["from-api"]) {
@@ -41200,23 +41308,23 @@ async function cmdInit(cwd, flags) {
     config2 = { $schema: starterConfig.$schema, ...res.config };
     org = res.org;
   }
-  if (existsSync6(target) && !flags.force && !flags["from-api"]) {
+  if (existsSync7(target) && !flags.force && !flags["from-api"]) {
     log2(`${CONFIG_FILE2} already exists (use --force to overwrite). Updating rule files from it.`);
     config2 = readConfig(target);
     org ??= config2.org;
   } else {
-    if (existsSync6(target)) {
+    if (existsSync7(target)) {
       const prev = readConfig(target);
       config2 = mergeProjectConfig(prev, config2);
     }
-    writeFileSync3(target, `${JSON.stringify(config2, null, 2)}
+    writeFileSync4(target, `${JSON.stringify(config2, null, 2)}
 `);
     log2(`\u2714 wrote ${CONFIG_FILE2}${org ? ` from ${org}'s Brand Kit` : " (starter tokens \u2014 edit them or use --from-api)"}`);
   }
   const framework = projectFramework(cwd, config2, flags);
   if (config2.framework !== framework) {
     config2 = { ...config2, framework };
-    writeFileSync3(target, `${JSON.stringify(config2, null, 2)}
+    writeFileSync4(target, `${JSON.stringify(config2, null, 2)}
 `);
   }
   log2(`\u2714 framework: ${FRAMEWORK_LABEL[framework]}${flags.framework ? "" : " (detected; change with --framework)"}`);
@@ -41250,7 +41358,7 @@ async function cmdConnect(cwd, flags) {
 \u2714 connected to ${org}. The key is saved in ${credentialsPath()} (only you can read it), never in this repo.`);
   }
   await cmdInit(cwd, { ...flags, "from-api": true, mcp: false });
-  const config2 = readConfig(join6(cwd, CONFIG_FILE2));
+  const config2 = readConfig(join7(cwd, CONFIG_FILE2));
   const framework = projectFramework(cwd, config2, flags);
   writeMcpConfigs(cwd, framework, flags.remote ? "remote" : "local");
   const usesKit = (config2.components ?? []).some((c) => c.importPath === "@brandrail/kit");
@@ -41263,8 +41371,8 @@ Done. Restart your AI tool so it picks up the MCP server, then ask it to build s
 async function cmdMigrate(cwd, positional, flags) {
   const { config: config2, source } = await loadConfig(cwd, flags);
   const resolved = resolveConfig(config2);
-  const root = dirname4(findConfig(cwd) ?? join6(cwd, CONFIG_FILE2));
-  const files = collectFiles(root, positional.map((p) => relative2(root, resolve3(cwd, p))), resolved.ignore);
+  const root = dirname4(findConfig(cwd) ?? join7(cwd, CONFIG_FILE2));
+  const files = collectFiles(root, positional.map((p) => relative3(root, resolve3(cwd, p))), resolved.ignore);
   const s = migrationStatus(files, resolved);
   if (flags.format === "json" || flags.json) {
     process.stdout.write(`${JSON.stringify({ progress: s.progress, filesScanned: s.filesScanned, filesClean: s.filesClean, score: s.report.score, libraries: s.libraries, byRule: s.byRule, files: s.files }, null, 2)}
@@ -41286,7 +41394,7 @@ async function cmdMigrate(cwd, positional, flags) {
         const what = Object.entries(f.byRule).sort((a, b) => b[1] - a[1]).map(([r, n]) => `${r} ${n}`).join(", ");
         out.push(`  ${String(f.findings).padStart(4)}  ${f.path}  ${c("2", what)}`);
       }
-      out.push("", `Migrate a batch with your AI tool, e.g. "migrate ${s.files[0].path} to the design system"${existsSync6(join6(root, MIGRATE_SKILL_FILE)) ? " (Claude Code uses the brandrail-migrate skill)" : " \u2014 run `npx brandrail connect` first to add the migration skill"}.`);
+      out.push("", `Migrate a batch with your AI tool, e.g. "migrate ${s.files[0].path} to the design system"${existsSync7(join7(root, MIGRATE_SKILL_FILE)) ? " (Claude Code uses the brandrail-migrate skill)" : " \u2014 run `npx brandrail connect` first to add the migration skill"}.`);
     } else out.push("", c("32", "\u2714 Every UI file follows the design system."));
     process.stdout.write(`${out.join("\n")}
 `);
@@ -41311,11 +41419,11 @@ async function cmdMigrate(cwd, positional, flags) {
 async function cmdReport(cwd, flags) {
   const { config: config2 } = await loadConfig(cwd, flags);
   const resolved = resolveConfig(config2);
-  const root = dirname4(findConfig(cwd) ?? join6(cwd, CONFIG_FILE2));
+  const root = dirname4(findConfig(cwd) ?? join7(cwd, CONFIG_FILE2));
   const s = migrationStatus(collectFiles(root, [], resolved.ignore), resolved);
   const repo = repoInfo(root);
   const out = resolve3(cwd, typeof flags.out === "string" ? flags.out : "brandrail-report.html");
-  writeFileSync3(
+  writeFileSync4(
     out,
     formatHandoverHtml(s, {
       project: repo.slug,
@@ -41326,7 +41434,7 @@ async function cmdReport(cwd, flags) {
       framework: config2.framework ? FRAMEWORK_LABEL[config2.framework] : void 0
     })
   );
-  log2(`\u2714 wrote ${relative2(cwd, out)}: ${s.progress}% of UI files on the design system, brand score ${s.report.score}. Open it in a browser, or print it to PDF.`);
+  log2(`\u2714 wrote ${relative3(cwd, out)}: ${s.progress}% of UI files on the design system, brand score ${s.report.score}. Open it in a browser, or print it to PDF.`);
   return 0;
 }
 function cmdWhoami() {
@@ -41406,12 +41514,12 @@ function readTokenInputs(cwd, inputs) {
   const add = (name, text2) => files.push({ name, data: JSON.parse(text2) });
   const walk = (abs, rel) => {
     if (statSync2(abs).isDirectory()) {
-      for (const e of readdirSync2(abs)) if (!e.startsWith(".")) walk(join6(abs, e), rel ? `${rel}/${e}` : e);
+      for (const e of readdirSync2(abs)) if (!e.startsWith(".")) walk(join7(abs, e), rel ? `${rel}/${e}` : e);
     } else if (/\.zip$/i.test(abs)) {
-      const entries = unzipSync(new Uint8Array(readFileSync5(abs)), { filter: (e) => /\.json$/i.test(e.name) && !/(^|\/)(__MACOSX|\.)/.test(e.name) });
+      const entries = unzipSync(new Uint8Array(readFileSync6(abs)), { filter: (e) => /\.json$/i.test(e.name) && !/(^|\/)(__MACOSX|\.)/.test(e.name) });
       for (const [name, bytes] of Object.entries(entries)) add(name, strFromU8(bytes));
     } else if (/\.json$/i.test(abs)) {
-      add(rel || basename2(abs), readFileSync5(abs, "utf8"));
+      add(rel || basename2(abs), readFileSync6(abs, "utf8"));
     }
   };
   for (const input2 of inputs) {
@@ -41426,16 +41534,16 @@ function cmdImport(cwd, positional, flags) {
   if (!files.length) throw new Error("No .json token files found.");
   const res = importTokenFiles(files, { includePrimitives: !!flags.primitives });
   const file2 = files.length === 1 ? positional[0] : `${files.length} files`;
-  const path = (typeof flags.config === "string" ? resolve3(cwd, flags.config) : findConfig(cwd)) ?? join6(cwd, CONFIG_FILE2);
-  const config2 = existsSync6(path) ? readConfig(path) : { ...starterConfig, tokens: {} };
+  const path = (typeof flags.config === "string" ? resolve3(cwd, flags.config) : findConfig(cwd)) ?? join7(cwd, CONFIG_FILE2);
+  const config2 = existsSync7(path) ? readConfig(path) : { ...starterConfig, tokens: {} };
   const next = flags.replace ? res.tokens : mergeTokens(config2.tokens, res.tokens);
   const d = diffTokens(config2.tokens, next);
-  writeFileSync3(path, `${JSON.stringify({ ...config2, tokens: next }, null, 2)}
+  writeFileSync4(path, `${JSON.stringify({ ...config2, tokens: next }, null, 2)}
 `);
   log2(`\u2714 ${res.count} tokens from ${file2} (${res.format})${res.primitives ? `, ${res.primitives} palette primitives left out (--primitives to keep)` : ""}`);
   for (const n of res.notes) log2(`  \xB7 ${n}`);
   for (const i2 of auditBrandKit(next)) log2(`  ${i2.severity === "error" ? "\u2716" : "!"} ${i2.message}`);
-  log2(`\u2714 ${relative2(cwd, path) || CONFIG_FILE2}: ${d.changed.length} changed, ${d.added.length} added, ${d.removed.length} removed`);
+  log2(`\u2714 ${relative3(cwd, path) || CONFIG_FILE2}: ${d.changed.length} changed, ${d.added.length} added, ${d.removed.length} removed`);
   log2("\nNext: npx brandrail init (to refresh AI rule files), then npx brandrail check");
   return 0;
 }
@@ -41471,6 +41579,8 @@ async function main(argv = process.argv.slice(2)) {
       return cmdMigrate(cwd, positional, flags);
     case "report":
       return cmdReport(cwd, flags);
+    case "hook":
+      return cmdHook(cwd, positional, flags);
     case "whoami":
       return cmdWhoami();
     case "logout":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brandrail",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Keep AI-generated UI on-brand: checks code and live pages against your design system, and wires your Brand Kit into Claude Code, Cursor, Copilot and Codex.",
   "keywords": [
     "design-system",