craft-native 0.0.37

package/dist/security/index.d.ts

@@ -0,0 +1,268 @@
+/**
+ * Craft Security Enhancements
+ * CSP, CORS, certificate pinning, secure storage, and input validation
+ */
+export interface CSPDirectives {
+    'default-src'?: string[];
+    'script-src'?: string[];
+    'style-src'?: string[];
+    'img-src'?: string[];
+    'font-src'?: string[];
+    'connect-src'?: string[];
+    'media-src'?: string[];
+    'object-src'?: string[];
+    'frame-src'?: string[];
+    'worker-src'?: string[];
+    'child-src'?: string[];
+    'form-action'?: string[];
+    'frame-ancestors'?: string[];
+    'base-uri'?: string[];
+    'report-uri'?: string[];
+    'report-to'?: string[];
+    'upgrade-insecure-requests'?: boolean;
+    'block-all-mixed-content'?: boolean;
+}
+export interface CORSConfig {
+    origin?: string | string[] | boolean | ((_origin: string) => boolean);
+    methods?: string[];
+    allowedHeaders?: string[];
+    exposedHeaders?: string[];
+    credentials?: boolean;
+    maxAge?: number;
+    preflightContinue?: boolean;
+    optionsSuccessStatus?: number;
+}
+export interface CertificatePinConfig {
+    hostname: string;
+    pins: string[];
+    includeSubdomains?: boolean;
+    maxAge?: number;
+    reportUri?: string;
+}
+export interface SecureStorageConfig {
+    algorithm?: string;
+    keyLength?: number;
+    ivLength?: number;
+    saltLength?: number;
+    iterations?: number;
+}
+export declare class ContentSecurityPolicy {
+    private directives;
+    constructor(directives?: CSPDirectives);
+    /**
+     * Add source to directive
+     */
+    addSource(directive: keyof CSPDirectives, source: string): this;
+    /**
+     * Remove source from directive
+     */
+    removeSource(directive: keyof CSPDirectives, source: string): this;
+    /**
+     * Generate CSP header string
+     */
+    toString(): string;
+    /**
+     * Generate nonce for inline scripts
+     */
+    static generateNonce(): string;
+    /**
+     * Create strict CSP for production
+     */
+    static strict(): ContentSecurityPolicy;
+    /**
+     * Create a relaxed CSP suitable for local development. Refuses to run when
+     * NODE_ENV is set to "production" (or CRAFT_ENV/APP_ENV are) so the relaxed
+     * preset cannot accidentally ship.
+     *
+     * `script-src` defaults to `'self' 'strict-dynamic'` (with the supplied
+     * `nonce`, if any) — `'unsafe-inline'` is no longer included by default.
+     * Pass `{ allowUnsafeInline: true }` if your dev workflow truly needs it
+     * (e.g. legacy inline `<script>` blobs in fixtures); the option name is
+     * deliberately verbose so it shows up in code review.
+     */
+    static development(options?: {
+        nonce?: string;
+        allowUnsafeInline?: boolean;
+    }): ContentSecurityPolicy;
+}
+export declare class CORSHandler {
+    private config;
+    constructor(config?: CORSConfig);
+    /**
+     * Get CORS headers for a request
+     */
+    getHeaders(requestOrigin?: string): Record<string, string>;
+    /**
+     * Get preflight headers
+     */
+    getPreflightHeaders(requestOrigin?: string): Record<string, string>;
+    private getAllowedOrigin;
+}
+export declare class CertificatePinner {
+    private pins;
+    /**
+     * Add certificate pin
+     */
+    addPin(config: CertificatePinConfig): void;
+    /**
+     * Remove certificate pin
+     */
+    removePin(hostname: string): void;
+    /**
+     * Verify certificate
+     */
+    verify(hostname: string, publicKey: Buffer): boolean;
+    /**
+     * Generate HTTP Public Key Pinning header
+     */
+    getHPKPHeader(hostname: string): string | null;
+    /**
+     * Calculate pin from public key
+     */
+    static calculatePin(publicKey: Buffer): string;
+}
+export declare class SecureStorage {
+    private config;
+    private key;
+    private destroyed;
+    constructor(masterPassword: string, config?: SecureStorageConfig & {
+        salt?: Buffer;
+    });
+    private requireKey;
+    /**
+     * Encrypt data
+     */
+    encrypt(data: string): string;
+    /**
+     * Decrypt data. Throws on malformed JSON instead of bubbling an opaque
+     * SyntaxError out of the crypto layer.
+     */
+    decrypt(encrypted: string): string;
+    /**
+     * Hash data (one-way)
+     */
+    hash(data: string): string;
+    /**
+     * Get the salt used for key derivation.
+     * Callers MUST persist this salt alongside ciphertext so that the same key
+     * can be re-derived on the next run.
+     */
+    getSalt(): Buffer;
+    /**
+     * Zero-fill the derived key buffer and mark the instance as destroyed.
+     * After `destroy()` further calls to `encrypt`/`decrypt`/`hash` throw.
+     *
+     * Callers that hold long-lived references should invoke this when the
+     * sensitive session ends — leaving the derived key in process memory
+     * indefinitely defeats the point of the pbkdf2 stretch in the first
+     * place.
+     */
+    destroy(): void;
+    /** Reports whether `destroy()` has been called. */
+    isDestroyed(): boolean;
+}
+export declare const validators: {
+    /**
+     * Validate email. Best-effort regex aligned with HTML5's `<input
+     * type=email>` validator (the same pattern WHATWG specifies). Real
+     * validation should rely on sending a confirmation email — never on a
+     * client-side regex — but this catches obvious typos like `a@b.` or
+     * `@example.com`.
+     */
+    email: (value: string) => boolean;
+    /**
+     * Validate URL
+     */
+    url: (value: string) => boolean;
+    /**
+     * Validate UUID. Accepts versions 1–8 per RFC 9562 (the previous regex
+     * stopped at v5 and rejected the increasingly common v7 time-ordered
+     * UUIDs). The variant nibble must be one of `8`, `9`, `a`, `b` (RFC
+     * 4122 / 9562 layout).
+     */
+    uuid: (value: string) => boolean;
+    /**
+     * Validate integer
+     */
+    integer: (value: string | number) => boolean;
+    /**
+     * Validate range
+     */
+    range: (min: number, max: number) => (value: number) => boolean;
+    /**
+     * Validate length
+     */
+    length: (min: number, max?: number) => (value: string) => boolean;
+    /**
+     * Validate alphanumeric
+     */
+    alphanumeric: (value: string) => boolean;
+    /**
+     * Validate no script tags (basic XSS prevention).
+     * Catches full/partial script tags and javascript: URLs. For full XSS
+     * protection always prefer contextual escaping (escapeHtml) and a strict CSP.
+     */
+    noScript: (value: string) => boolean;
+    /**
+     * Validate no SQL injection patterns
+     */
+    noSqlInjection: (value: string) => boolean;
+};
+export declare const sanitizers: {
+    /**
+     * Escape HTML
+     */
+    escapeHtml: (value: string) => string;
+    /**
+     * Strip HTML tags
+     */
+    stripHtml: (value: string) => string;
+    /**
+     * Normalize whitespace
+     */
+    normalizeWhitespace: (value: string) => string;
+    /**
+     * Remove non-printable characters.
+     *
+     * Strips Unicode "Other" category code points (`\p{C}`) — control
+     * codes, surrogates, format chars, private-use chars — while
+     * preserving the rest of the BMP and astral plane. The previous
+     * implementation deleted everything outside ASCII printable, which
+     * silently removed accents (`é`), CJK characters (`中`), and emojis
+     * from any user input that touched the sanitizer.
+     */
+    removeNonPrintable: (value: string) => string;
+    /**
+     * Escape SQL (basic - prefer parameterized queries)
+     */
+    escapeSql: (value: string) => string;
+};
+export declare class RateLimiter {
+    private windowMs;
+    private maxRequests;
+    private requests;
+    constructor(windowMs?: number, maxRequests?: number);
+    /**
+     * Check if request is allowed
+     */
+    isAllowed(key: string): boolean;
+    /**
+     * Get remaining requests
+     */
+    getRemaining(key: string): number;
+    /**
+     * Reset limit for key
+     */
+    reset(key: string): void;
+}
+declare const _exports: {
+    ContentSecurityPolicy: typeof ContentSecurityPolicy;
+    CORSHandler: typeof CORSHandler;
+    CertificatePinner: typeof CertificatePinner;
+    SecureStorage: typeof SecureStorage;
+    validators: typeof validators;
+    sanitizers: typeof sanitizers;
+    RateLimiter: typeof RateLimiter;
+};
+export default _exports;
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC,yBAAyB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAA;IACrE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAGD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,UAAU,CAAe;gBAErB,UAAU,GAAE,aAAkB;IAO1C;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAa/D;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAWlE;;OAEG;IACH,QAAQ,IAAI,MAAM;IAelB;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,qBAAqB;IAiBtC;;;;;;;;;;OAUG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,qBAAqB;CAsBzG;AAGD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAY;gBAEd,MAAM,GAAE,UAAe;IAYnC;;OAEG;IACH,UAAU,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAsB1D;;OAEG;IACH,mBAAmB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAqBnE,OAAO,CAAC,gBAAgB;CAyCzB;AAGD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAA+C;IAE3D;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI;IAI1C;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIjC;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO;IAQpD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAoB9C;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAG/C;AAGD,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAgE;IAC9E,OAAO,CAAC,GAAG,CAAe;IAC1B,OAAO,CAAC,SAAS,CAAQ;gBAEb,cAAc,EAAE,MAAM,EAAE,MAAM,GAAE,mBAAmB,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO;IA2BxF,OAAO,CAAC,UAAU;IAOlB;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAgB7B;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IA0BlC;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI1B;;;;OAIG;IACH,OAAO,IAAI,MAAM;IAIjB;;;;;;;;OAQG;IACH,OAAO,IAAI,IAAI;IASf,mDAAmD;IACnD,WAAW,IAAI,OAAO;CAGvB;AAGD,eAAO,MAAM,UAAU;IACrB;;;;;;OAMG;mBACY,MAAM,KAAG,OAAO;IAW/B;;OAEG;iBACU,MAAM,KAAG,OAAO;IAU7B;;;;;OAKG;kBACW,MAAM,KAAG,OAAO;IAK9B;;OAEG;qBACc,MAAM,GAAG,MAAM,KAAG,OAAO;IAI1C;;OAEG;iBAEK,MAAM,OAAO,MAAM,MACxB,OAAO,MAAM,KAAG,OAAO;IAI1B;;OAEG;kBAEK,MAAM,QAAQ,MAAM,MACzB,OAAO,MAAM,KAAG,OAAO;IAI1B;;OAEG;0BACmB,MAAM,KAAG,OAAO;IAItC;;;;OAIG;sBACe,MAAM,KAAG,OAAO;IASlC;;OAEG;4BACqB,MAAM,KAAG,OAAO;CAQzC,CAAA;AAGD,eAAO,MAAM,UAAU;IACrB;;OAEG;wBACiB,MAAM,KAAG,MAAM;IASnC;;OAEG;uBACgB,MAAM,KAAG,MAAM;IAIlC;;OAEG;iCAC0B,MAAM,KAAG,MAAM;IAI5C;;;;;;;;;OASG;gCACyB,MAAM,KAAG,MAAM;IAI3C;;OAEG;uBACgB,MAAM,KAAG,MAAM;CAGnC,CAAA;AAGD,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,WAAW;IAJrB,OAAO,CAAC,QAAQ,CAAmC;gBAGzC,QAAQ,GAAE,MAAc,EACxB,WAAW,GAAE,MAAY;IAGnC;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAmC/B;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAOjC;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;CAGzB;AAED,QAAA,MAAM,QAAQ,EAAE;IACd,qBAAqB,EAAE,OAAO,qBAAqB,CAAC;IACpD,WAAW,EAAE,OAAO,WAAW,CAAC;IAChC,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,WAAW,EAAE,OAAO,WAAW,CAAC;CASjC,CAAC;AACF,eAAe,QAAQ,CAAC"}

package/dist/signing/index.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Craft Code Signing & Notarization
+ * Sign and notarize applications for all platforms
+ */
+export interface SigningConfig {
+    platform: 'macos' | 'windows' | 'linux';
+    identity?: string;
+    certificate?: string;
+    password?: string;
+    timestampServer?: string;
+    entitlements?: string;
+    hardened?: boolean;
+}
+export interface NotarizationConfig {
+    appleId: string;
+    teamId: string;
+    /**
+     * App-specific password. Passing this directly puts the secret on the
+     * `xcrun notarytool` argv where `ps -ef` can read it on the build host.
+     * Prefer `keychainProfile` instead — set one up once with
+     * `xcrun notarytool store-credentials <profile>` and Apple keeps the
+     * credential in the keychain.
+     */
+    password?: string;
+    /**
+     * Name of a notarytool keychain profile (created via
+     * `xcrun notarytool store-credentials`). When set, this is used instead
+     * of `--apple-id`/`--team-id`/`--password`.
+     */
+    keychainProfile?: string;
+    bundleId: string;
+}
+export interface SigningResult {
+    success: boolean;
+    path: string;
+    signature?: string;
+    errors?: string[];
+}
+export declare class CodeSigner {
+    private config;
+    constructor(config: SigningConfig);
+    /**
+     * Sign an application or binary
+     */
+    sign(path: string): Promise<SigningResult>;
+    private signMacOS;
+    private signWindows;
+    private signLinux;
+    /**
+     * Verify a signature.
+     */
+    verify(path: string): Promise<boolean>;
+}
+export declare class Notarizer {
+    private config;
+    constructor(config: NotarizationConfig);
+    /**
+     * Submit app for notarization
+     */
+    /**
+     * Build the argv list for `xcrun notarytool`. Prefers `--keychain-profile`
+     * when configured so the password never ends up on the command line where
+     * other users on the build host can see it via `ps`.
+     */
+    private notarytoolArgs;
+    notarize(path: string): Promise<{
+        success: boolean;
+        requestId?: string;
+        error?: string;
+    }>;
+    /**
+     * Check notarization status. Returns the parsed JSON status from notarytool.
+     */
+    checkStatus(requestId: string): Promise<{
+        status: string;
+        message?: string;
+    }>;
+    /**
+     * Get notarization log.
+     */
+    getLog(requestId: string): Promise<string>;
+}
+export declare function generateEntitlements(options: {
+    hardened?: boolean;
+    allowJit?: boolean;
+    allowUnsigned?: boolean;
+    allowDyld?: boolean;
+    network?: {
+        client?: boolean;
+        server?: boolean;
+    };
+    camera?: boolean;
+    microphone?: boolean;
+    usb?: boolean;
+    bluetooth?: boolean;
+    location?: boolean;
+    addressBook?: boolean;
+    calendar?: boolean;
+    photos?: boolean;
+    appleEvents?: boolean;
+}): string;
+export declare function signingCommand(args: string[]): Promise<void>;
+export default CodeSigner;
+//# sourceMappingURL=index.d.ts.map

package/dist/signing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signing/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+CH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAA;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAGD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,aAAa;IAIjC;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAiBlC,SAAS;YA2CT,WAAW;YAuGX,SAAS;IAgBvB;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CA4B7C;AAGD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,kBAAkB;IAItC;;OAEG;IACH;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAuBhB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2E/F;;OAEG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAmBnF;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAUjD;AAGD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;KACjB,CAAA;IACD,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB,GAAG,MAAM,CAkFT;AAGD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkKlE;AAED,eAAe,UAAU,CAAA"}

package/dist/styles/headwind.d.ts

@@ -0,0 +1,222 @@
+/**
+ * @fileoverview Headwind CSS Integration
+ * @description Integration with zig-headwind, a blazing-fast Tailwind CSS alternative built in Zig.
+ * Provides utility-first CSS styling with Tailwind-compatible class names.
+ * @module @craft-native/styles/headwind
+ *
+ * @example
+ * ```typescript
+ * import { tw, cx, variants, style } from '@craft-native/styles/headwind'
+ *
+ * // Use Tailwind-compatible classes
+ * const buttonClass = tw`px-4 py-2 bg-blue-500 text-white rounded hover:bg-blue-600`
+ *
+ * // Conditional classes
+ * const className = cx(
+ *   'base-class',
+ *   isActive && 'active',
+ *   { 'disabled': isDisabled }
+ * )
+ *
+ * // Create variant-based styles
+ * const button = variants({
+ *   base: 'px-4 py-2 rounded font-medium transition-colors',
+ *   variants: {
+ *     intent: {
+ *       primary: 'bg-blue-500 text-white hover:bg-blue-600',
+ *       secondary: 'bg-gray-200 text-gray-900 hover:bg-gray-300',
+ *       danger: 'bg-red-500 text-white hover:bg-red-600'
+ *     },
+ *     size: {
+ *       sm: 'text-sm px-3 py-1.5',
+ *       md: 'text-base px-4 py-2',
+ *       lg: 'text-lg px-6 py-3'
+ *     }
+ *   },
+ *   defaultVariants: {
+ *     intent: 'primary',
+ *     size: 'md'
+ *   }
+ * })
+ *
+ * // Use the variant
+ * const className = button({ intent: 'danger', size: 'lg' })
+ * ```
+ */
+/**
+ * Tagged template literal for Tailwind/Headwind classes.
+ * Provides syntax highlighting and potential compile-time validation.
+ *
+ * @example
+ * ```typescript
+ * const className = tw`flex items-center justify-center p-4 bg-blue-500`
+ * ```
+ */
+export declare function tw(strings: TemplateStringsArray, ...values: unknown[]): string;
+/**
+ * Type for class value inputs.
+ */
+export type ClassValue = string | number | boolean | null | undefined | ClassValue[] | Record<string, boolean | null | undefined>;
+/**
+ * Merge class names conditionally.
+ * Supports strings, arrays, objects, and falsy values.
+ *
+ * @example
+ * ```typescript
+ * // String classes
+ * cx('foo', 'bar') // 'foo bar'
+ *
+ * // Conditional classes
+ * cx('base', isActive && 'active', isDisabled && 'disabled')
+ *
+ * // Object syntax
+ * cx('base', { active: isActive, disabled: isDisabled })
+ *
+ * // Mixed
+ * cx('base', ['array', 'of', 'classes'], { conditional: true })
+ * ```
+ */
+export declare function cx(...inputs: ClassValue[]): string;
+/**
+ * Variant configuration type.
+ */
+export interface VariantConfig<V extends Record<string, Record<string, string>>> {
+    /** Base classes always applied */
+    base?: string;
+    /** Variant definitions */
+    variants: V;
+    /** Default variant values */
+    defaultVariants?: {
+        [K in keyof V]?: keyof V[K];
+    };
+    /** Compound variants for specific combinations */
+    compoundVariants?: Array<{
+        [K in keyof V]?: keyof V[K];
+    } & {
+        className: string;
+    }>;
+}
+/**
+ * Create a variant-based style function.
+ * Similar to CVA (class-variance-authority) or Stitches variants.
+ *
+ * @example
+ * ```typescript
+ * const button = variants({
+ *   base: 'inline-flex items-center justify-center rounded-md font-medium',
+ *   variants: {
+ *     intent: {
+ *       primary: 'bg-blue-500 text-white hover:bg-blue-600',
+ *       secondary: 'bg-gray-100 text-gray-900 hover:bg-gray-200',
+ *       ghost: 'hover:bg-gray-100'
+ *     },
+ *     size: {
+ *       sm: 'h-8 px-3 text-sm',
+ *       md: 'h-10 px-4 text-sm',
+ *       lg: 'h-12 px-6 text-base'
+ *     },
+ *     disabled: {
+ *       true: 'opacity-50 cursor-not-allowed'
+ *     }
+ *   },
+ *   defaultVariants: {
+ *     intent: 'primary',
+ *     size: 'md'
+ *   },
+ *   compoundVariants: [
+ *     {
+ *       intent: 'primary',
+ *       disabled: true,
+ *       className: 'bg-blue-300'
+ *     }
+ *   ]
+ * })
+ *
+ * // Usage
+ * button() // Uses defaults
+ * button({ intent: 'secondary' })
+ * button({ intent: 'primary', size: 'lg', disabled: true })
+ * ```
+ */
+export declare function variants<V extends Record<string, Record<string, string>>>(_config: VariantConfig<V>): (props?: {
+    [K in keyof V]?: keyof V[K];
+} & {
+    className?: string;
+}) => string;
+/**
+ * Convert Tailwind classes to inline style object.
+ * Useful for React Native or platforms that don't support CSS classes.
+ *
+ * @example
+ * ```typescript
+ * const styles = style('p-4 bg-blue-500 text-white rounded-lg')
+ * // { padding: 16, backgroundColor: '#3b82f6', color: '#ffffff', borderRadius: 8 }
+ * ```
+ */
+export declare function style(classes: string): Record<string, string | number>;
+/**
+ * Headwind CLI configuration.
+ */
+export interface HeadwindConfig {
+    /** Content paths to scan for classes */
+    content: string[];
+    /** Output CSS file path */
+    output: string;
+    /** Enable minification */
+    minify?: boolean;
+    /** Dark mode strategy */
+    darkMode?: 'class' | 'media';
+    /** Custom theme extensions */
+    theme?: {
+        extend?: {
+            colors?: Record<string, string | Record<string, string>>;
+            spacing?: Record<string, string>;
+            fontSize?: Record<string, string>;
+            fontFamily?: Record<string, string[]>;
+            borderRadius?: Record<string, string>;
+        };
+    };
+    /** Enable JIT mode */
+    jit?: boolean;
+}
+/**
+ * Generate Headwind configuration file.
+ *
+ * @example
+ * const config = generateConfig({
+ *   content: ['./src/components/*.tsx'],
+ *   output: './dist/styles.css',
+ *   minify: true,
+ *   darkMode: 'class',
+ *   theme: {
+ *     extend: {
+ *       colors: {
+ *         brand: { 50: '#f0f9ff', 500: '#3b82f6', 900: '#1e3a8a' }
+ *       }
+ *     }
+ *   }
+ * })
+ */
+export declare function generateConfig(options: HeadwindConfig): string;
+/**
+ * Build CSS using Headwind CLI.
+ * Requires zig-headwind to be installed.
+ *
+ * @example
+ * await buildCSS({
+ *   content: ['./src/components/*.tsx'],
+ *   output: './public/styles.css',
+ *   minify: process.env.NODE_ENV === 'production'
+ * })
+ */
+export declare function buildCSS(options: HeadwindConfig): Promise<void>;
+declare const _exports: {
+    tw: typeof tw;
+    cx: typeof cx;
+    variants: typeof variants;
+    style: typeof style;
+    generateConfig: typeof generateConfig;
+    buildCSS: typeof buildCSS;
+};
+export default _exports;
+//# sourceMappingURL=headwind.d.ts.map

package/dist/styles/headwind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headwind.d.ts","sourceRoot":"","sources":["../../src/styles/headwind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAMH;;;;;;;;GAQG;AACH,wBAAgB,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAU9E;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,GACT,UAAU,EAAE,GACZ,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;AAE9C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAqBlD;AAMD;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7E,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,CAAA;IACX,6BAA6B;IAC7B,eAAe,CAAC,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;KAAE,CAAA;IACjD,kDAAkD;IAClD,gBAAgB,CAAC,EAAE,KAAK,CAAC;SACtB,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;KAC5B,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACvE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GACxB,CAAC,KAAK,CAAC,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,MAAM,CA+C9E;AAMD;;;;;;;;;GASG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAYtE;AAiKD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,0BAA0B;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAA;IAC5B,8BAA8B;IAC9B,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE;YACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;YACxD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SACtC,CAAA;KACF,CAAA;IACD,sBAAsB;IACtB,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAS9D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BrE;AAMD,QAAA,MAAM,QAAQ,EAAE;IACd,EAAE,EAAE,OAAO,EAAE,CAAC;IACd,EAAE,EAAE,OAAO,EAAE,CAAC;IACd,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,QAAQ,EAAE,OAAO,QAAQ,CAAC;CAQ3B,CAAC;AACF,eAAe,QAAQ,CAAC"}

package/dist/styles/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Craft Styles
+ * CSS/Tailwind utilities and pre-built component styles
+ * @module @craft-native/styles
+ */
+export { tw, cx, variants, style, generateConfig, buildCSS } from './headwind';
+export type { ClassValue, VariantConfig, HeadwindConfig } from './headwind';
+export { tahoeStyles, arcStyles, orbstackStyles, sidebarUtils, sidebarCSSVariables, getSidebarStyle } from './sidebars';
+export { renderTahoeSidebar, renderArcSidebar, renderOrbStackSidebar, tahoeDemoData, arcDemoData, orbstackDemoData, getFullPageHTML } from './sidebar-templates';
+export type { SidebarItemData, SidebarSectionData, SidebarData } from './sidebar-templates';
+export { cx as clsx } from './headwind';
+import { tahoeStyles, arcStyles, orbstackStyles } from './sidebars';
+import { renderTahoeSidebar, renderArcSidebar, renderOrbStackSidebar } from './sidebar-templates';
+import { tw, cx, variants } from './headwind';
+export declare const styles: {
+    tw: typeof tw;
+    cx: typeof cx;
+    variants: typeof variants;
+    sidebar: {
+        tahoe: typeof tahoeStyles;
+        arc: typeof arcStyles;
+        orbstack: typeof orbstackStyles;
+    };
+    templates: {
+        tahoe: typeof renderTahoeSidebar;
+        arc: typeof renderArcSidebar;
+        orbstack: typeof renderOrbStackSidebar;
+    };
+};
+export default styles;
+//# sourceMappingURL=index.d.ts.map

package/dist/styles/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/styles/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,EAAE,EACF,EAAE,EACF,QAAQ,EACR,KAAK,EACL,cAAc,EACd,QAAQ,EACT,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,UAAU,EACV,aAAa,EACb,cAAc,EACf,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,WAAW,EACX,SAAS,EACT,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,eAAe,EAChB,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,eAAe,EAChB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,EACZ,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,YAAY,CAAA;AAGvC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACjG,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE7C,eAAO,MAAM,MAAM,EAAE;IACnB,EAAE,EAAE,OAAO,EAAE,CAAC;IACd,EAAE,EAAE,OAAO,EAAE,CAAC;IACd,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,OAAO,EAAE;QACP,KAAK,EAAE,OAAO,WAAW,CAAC;QAC1B,GAAG,EAAE,OAAO,SAAS,CAAC;QACtB,QAAQ,EAAE,OAAO,cAAc,CAAC;KACjC,CAAC;IACF,SAAS,EAAE;QACT,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,GAAG,EAAE,OAAO,gBAAgB,CAAC;QAC7B,QAAQ,EAAE,OAAO,qBAAqB,CAAC;KACxC,CAAC;CAoBH,CAAA;AAED,eAAe,MAAM,CAAA"}