eslint-plugin-kerfjs 5.0.0-beta.78 → 5.0.0-beta.79

package/docs/rules/ui-composition.md

@@ -3,6 +3,10 @@
 Enforces composition facts published by the versioned UI catalog. `KUI-L201` reports a catalog component under a known, disallowed direct parent. `KUI-L202` reports a statically visible zone child—including an intrinsic or unknown JSX element—that is not one of the zone's cataloged `accepts` entries. `KUI-L203` reports a statically provable zone cardinality violation. A zone participates only when it declares an explicit `jsx.prop` binding, including `children`; the rule never guesses that a zone id is a JSX prop. Toolbar, Pane, TabBar, AppTab, feedback, search, and layout validation is therefore catalog-driven rather than duplicated in rule-local component cases.
 
 The parent check is intentionally conservative about the child: it runs only for a child that resolves to a cataloged entry (or a declared wrapper's roots) whose parents are `listed`. Its direct JSX parent may be any element the rule can see: a cataloged component, a declared wrapper (which counts as each of its roots), an intrinsic element such as `<div>`, or an unresolved component, and any parent that is not a listed parent reports `KUI-L201`. Bound zone checks understand aliases, namespace imports, fragments, arrays, and conditional/logical branches, but expressions whose content cannot be resolved statically remain runtime and accessibility work. Accepted concepts that do not identify a catalog entry remain machine-readable guidance while the rule enforces their statically provable cardinality only. No autofix is offered because wrapping or moving UI changes structure and behavior.
+Toolbar zones accept `KerfUiContent`, so the zone rule allows direct JSX
+controls and custom components there. Their own parent contracts still apply,
+including when a direct child is supplied through a zone prop.
+
 An additional JSX export from an entry can declare its own `jsxExports.<name>.parents` contract. It uses that placement instead of the entry's root placement and is opaque to zone matching, so an action link does not impersonate its enclosing control group.
 
 `KUI-L202` inspects JSX written directly in a bound zone prop, including its

package/index.js

@@ -14,7 +14,7 @@ import uiPublicBoundaries from './lib/rules/ui-public-boundaries.js';
 import uiWiring from './lib/rules/ui-wiring.js';
 
 const plugin = {
-  meta: { name: 'eslint-plugin-kerfjs', version: '5.0.0-beta.78' },
+  meta: { name: 'eslint-plugin-kerfjs', version: '5.0.0-beta.79' },
   rules: {
     'no-inline-jsx-event-handlers': noInlineJsxEventHandlers,
     'no-raw-with-dynamic-arg': noRawWithDynamicArg,

package/lib/rules/ui-composition.js

@@ -111,6 +111,7 @@ function directParentKey(node, registry, contract) {
     ['JSXExpressionContainer', 'JSXFragment'].includes(parent.type)
   )
     parent = parent.parent;
+  if (parent?.type === 'JSXAttribute') parent = parent.parent?.parent;
   return parent?.type === 'JSXElement'
     ? { key: jsxKey(parent.openingElement.name, registry, contract) }
     : undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-kerfjs",
-  "version": "5.0.0-beta.78",
+  "version": "5.0.0-beta.79",
   "description": "ESLint rules that enforce kerf's hard rules — catches AI-shaped bugs at edit time.",
   "type": "module",
   "license": "MIT",