frakment 0.0.4 → 0.0.7

package/LICENSE

@@ -1,190 +1,21 @@
-Frakment License
-Version 1.0
-
-Copyright (c) 2026 hanshapd <https://github.com/hanshapd>
-
-This is a source-available license. It is NOT an open-source license
-as defined by the Open Source Initiative (OSI).
-
-In short:
-
-  - Use Frakment freely for personal, educational, and non-commercial
-    purposes. Just keep the attribution.
-
-  - Use Frakment commercially only after you get one pull request
-    merged into the main repository. That is the only path.
-
-  - Always keep the attribution. Always mark modifications.
-
-====================================================================
-1. DEFINITIONS
-====================================================================
-
-"Software" means the source code, components, CLI, MCP server, agent
-skills, documentation, and any associated files in this repository,
-whether used in original or modified form.
-
-"Personal Use" means use by an individual for personal projects,
-learning, experimentation, hobby work, or internal tools that do not
-generate revenue.
-
-"Educational Use" means use by students, teachers, or institutions
-for teaching, coursework, academic research, or non-commercial
-educational activities.
-
-"Commercial Use" means any use that:
-
-  (a) is part of a product, service, or website that generates revenue
-      directly or indirectly (including ads, subscriptions, paid
-      features, consulting, or paid support);
-  (b) is deployed in production by a for-profit entity; or
-  (c) is used to build something that is sold, licensed, or monetized
-      in any form.
-
-"Qualifying Contribution" means a pull request that has been
-reviewed and merged into the main branch of
-github.com/hanshapd/frakment, where all of the following are true:
-
-  (a) The commit author is you (your GitHub username or email is
-      recorded in the commit metadata).
-  (b) The pull request makes at least one substantive change: fixes a
-      bug, adds a feature, adds or corrects documentation, adds a
-      test, translates content, or fixes a typo.
-  (c) The pull request has not been reverted within 30 days of being
-      merged.
-
-There is no minimum number of lines changed. A single-line typo fix
-qualifies. A documentation clarification qualifies. A test addition
-qualifies.
-
-A pull request that was closed without merging does NOT qualify. A
-pull request that was merged and later reverted within 30 days does
-NOT qualify.
-
-====================================================================
-2. GRANT OF RIGHTS
-====================================================================
-
-Subject to the terms of this license, you are granted permission to:
-
-  (a) View, read, and study the source code.
-  (b) Fork, clone, and copy the repository.
-  (c) Modify the source code.
-  (d) Distribute the original or modified version.
-
-These rights apply without additional conditions for Personal Use and
-Educational Use, provided you satisfy the Attribution Requirements in
-Section 3.
-
-These rights apply for Commercial Use only after you have made a
-Qualifying Contribution, in addition to the Attribution Requirements.
-
-====================================================================
-3. ATTRIBUTION REQUIREMENTS (ALWAYS)
-====================================================================
-
-Any use, copy, modification, or distribution of the Software, in
-whole or in part, for Personal, Educational, or Commercial Use, must:
-
-  (a) Include the following attribution in the README, documentation,
-      footer, or another reasonably visible user-facing location:
-
-        Based on Frakment by hanshapd
-        https://github.com/hanshapd/frakment
-
-  (b) Include this LICENSE file unmodified in all copies and
-      derivative works.
-
-  (c) Clearly mark any modified versions as modified, with a brief
-      description of the changes (e.g., in a CHANGELOG or README).
-
-====================================================================
-4. COMMERCIAL USE REQUIREMENT
-====================================================================
-
-Before using the Software for any Commercial Use, you (or the legal
-entity you represent) must have made one Qualifying Contribution as
-defined in Section 1. This is the only path to Commercial Use.
-
---------------------------------------------------------------------
-4.1  SCOPE OF SATISFACTION
---------------------------------------------------------------------
-
-Once a Qualifying Contribution has been made, the requirement is
-satisfied permanently for:
-
-  - the individual who made the contribution, OR
-  - the legal entity (company, organization, or team) on whose
-    behalf the contribution was made,
-
-for all future Commercial Use of the Software by that individual or
-entity. No further contributions are required for future commercial
-use by the same party.
-
---------------------------------------------------------------------
-4.2  EVIDENCE ON REQUEST
---------------------------------------------------------------------
-
-If hanshapd requests proof that the Commercial Use requirement has
-been satisfied, you must provide, within 30 days, a link to the
-merged pull request on GitHub.
-
-Refusal or failure to provide evidence on request voids the
-permission for Commercial Use until evidence is provided.
-
---------------------------------------------------------------------
-4.3  NO REQUIREMENT FOR NON-COMMERCIAL USE
---------------------------------------------------------------------
-
-Personal Use and Educational Use do NOT require a Qualifying
-Contribution. Attribution (Section 3) is the only requirement for
-those uses.
-
-====================================================================
-5. RESTRICTIONS
-====================================================================
-
-You may not:
-
-  (a) Remove, hide, or alter copyright notices or the attribution
-      required by Section 3.
-  (b) Claim authorship of this Software or of any derivative work.
-  (c) Use the names "Frakment", "frakment", or "hanshapd", or any
-      associated logos or branding, to endorse or promote derivative
-      works without prior written permission.
-  (d) Sublicense this Software under different terms. Any party that
-      receives a copy from you does so subject to this same license.
-
-====================================================================
-6. NO TRADEMARK LICENSE
-====================================================================
-
-This license does not grant any rights to use the names "Frakment",
-"frakment", or "hanshapd", or any associated logos or marks, except
-as strictly necessary for the attribution described in Section 3.
-
-====================================================================
-7. WARRANTY
-====================================================================
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND
-NON-INFRINGEMENT.
-
-IN NO EVENT SHALL THE AUTHOR OR COPYRIGHT HOLDER BE LIABLE FOR ANY
-CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE
-SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-====================================================================
-8. ACCEPTANCE
-====================================================================
-
-By accessing, using, copying, modifying, or distributing this project,
-you agree to be bound by the terms above. If you do not agree, you are
-not granted permission to use this project and must delete all copies
-in your possession.
-
-For permission requests or questions about this license, contact
-hanshapd on GitHub: https://github.com/hanshapd
+MIT License
+
+Copyright (c) 2026 The Frakment Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,5 +1,8 @@
 # frakment CLI
 
+[![npm](https://img.shields.io/npm/v/frakment?style=for-the-badge&color=000)](https://www.npmjs.com/package/frakment)
+[![License](https://img.shields.io/badge/license-MIT-blue?style=for-the-badge)](./LICENSE)
+
 Monochrome design system and component registry CLI.
 
 ## Requirements
@@ -7,6 +10,19 @@ Monochrome design system and component registry CLI.
 - Node.js >= 22.12.0
 - Tailwind CSS v4 (`@import "tailwindcss";` in your `globals.css`)
 
+## Package managers
+
+The commands below use `npx`. Every package manager works.
+
+| Package manager | Run |
+| :-- | :-- |
+| npm | `npx frakment@latest <command>` |
+| pnpm | `pnpm dlx frakment@latest <command>` |
+| yarn | `yarn dlx frakment@latest <command>` |
+| bun | `bunx frakment@latest <command>` |
+
+The CLI auto-detects your package manager from the project lockfile when installing dependencies.
+
 ## Usage
 
 ### `frakment init`
@@ -42,6 +58,9 @@ Flags:
 - `--registry <url>` — override the registry URL (default: from `components.json`)
 - `--overwrite` — overwrite existing files without prompting
 
+- `--dry-run` — show planned file and dependency changes without changing the project
+- `--skip-dependencies` — write component files without installing missing npm dependencies
+
 ### `frakment list`
 
 ```bash
@@ -85,4 +104,4 @@ If your `globals.css` lives at `src/app/globals.css`, component files are writte
 
 ## License
 
-Source-available. See [LICENSE](./LICENSE). Commercial use requires at least one merged pull request to [arrafipd/frakment](https://github.com/arrafipd/frakment).
+MIT licensed. See [LICENSE](./LICENSE).

package/bin/index.js

@@ -37,7 +37,12 @@ program
 program
   .command("add <component>")
   .description("Add a component from the frakment registry")
+  .option(
+    "--dry-run",
+    "Show planned file and dependency changes without writing"
+  )
   .option("--registry <url>", "Custom registry URL")
+  .option("--skip-dependencies", "Do not install missing npm dependencies")
   .option("--overwrite", "Overwrite existing files", false)
   .action(add);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frakment",
-  "version": "0.0.4",
+  "version": "0.0.7",
   "description": "CLI and design system for the frakment component registry",
   "keywords": [
     "components",
@@ -9,8 +9,13 @@
     "registry",
     "tailwindcss"
   ],
-  "license": "SEE LICENSE IN LICENSE",
-  "author": "arrafipd (https://github.com/arrafipd)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/arrafipd/frakment.git",
+    "directory": "packages/cli"
+  },
+  "license": "MIT",
+  "author": "The Frakment Authors (https://github.com/arrafipd/frakment)",
   "type": "module",
   "bin": {
     "frakment": "./bin/index.js"
@@ -18,13 +23,14 @@
   "files": [
     "bin",
     "src",
-    "templates"
+    "templates",
+    "LICENSE"
   ],
   "dependencies": {
-    "chalk": "^5.3.0",
+    "chalk": "^6.0.1",
     "commander": "^15.0.0",
     "execa": "^10.2.1",
-    "ora": "^8.1.1",
+    "ora": "^10.0.0",
     "prompts": "^2.4.2"
   },
   "engines": {

package/src/commands/add.js

@@ -1,5 +1,6 @@
+import { createHash } from "node:crypto";
 import { existsSync } from "node:fs";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { lstat, mkdir, readFile, realpath, writeFile } from "node:fs/promises";
 import path from "node:path";
 
 import chalk from "chalk";
@@ -10,22 +11,191 @@ import prompts from "prompts";
 import { detectPackageManager, findProjectRoot } from "../utils/detect.js";
 import { logger } from "../utils/logger.js";
 
+const COMPONENT_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u;
+const DEPENDENCY_PATTERN =
+  /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*(?:@[0-9A-Za-z*~^<>=|.+_-]+)?$/u;
+const MAX_REGISTRY_PAYLOAD_BYTES = 10 * 1024 * 1024;
+
+const isRecord = (value) =>
+  typeof value === "object" && value !== null && !Array.isArray(value);
+
+const canonicalize = (value) => {
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalize).join(",")}]`;
+  }
+  if (isRecord(value)) {
+    return `{${Object.keys(value)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${canonicalize(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+};
+
+const createIntegrity = (payload) =>
+  `sha256:${createHash("sha256")
+    .update(canonicalize(payload), "utf8")
+    .digest("hex")}`;
+
+const assertComponentName = (name) => {
+  if (typeof name !== "string" || !COMPONENT_NAME_PATTERN.test(name)) {
+    throw new Error(`Invalid component name: ${String(name)}`);
+  }
+};
+
+const assertDependency = (dependency) => {
+  if (typeof dependency !== "string" || !DEPENDENCY_PATTERN.test(dependency)) {
+    throw new Error(
+      `Invalid dependency in registry payload: ${String(dependency)}`
+    );
+  }
+};
+
+const getDependencyName = (dependency) => {
+  if (dependency.startsWith("@")) {
+    return dependency.slice(0, dependency.indexOf("@", 1));
+  }
+  return dependency.split("@")[0];
+};
+
+const hasDependencyVersion = (dependency) =>
+  dependency.lastIndexOf("@") > (dependency.startsWith("@") ? 0 : -1);
+
+const isBase64 = (value) =>
+  /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(
+    value
+  );
+
+export const validateRegistryPayload = (payload, expectedName) => {
+  if (!isRecord(payload) || payload.name !== expectedName) {
+    throw new Error("Registry payload has an unexpected component name");
+  }
+  if (
+    typeof payload.integrity !== "string" ||
+    !/^sha256:[a-f0-9]{64}$/u.test(payload.integrity)
+  ) {
+    throw new Error("Registry payload has invalid integrity metadata");
+  }
+  if (!Array.isArray(payload.files) || payload.files.length === 0) {
+    throw new Error("Registry payload must include at least one file");
+  }
+  if (payload.files.length > 100) {
+    throw new Error("Registry payload has too many files");
+  }
+
+  for (const file of payload.files) {
+    if (!isRecord(file) || typeof file.path !== "string") {
+      throw new Error("Registry payload contains an invalid file");
+    }
+    if (typeof file.content !== "string") {
+      throw new Error(`Registry file ${file.path} has invalid content`);
+    }
+    if (file.encoding !== undefined && file.encoding !== "base64") {
+      throw new Error(`Registry file ${file.path} has an unsupported encoding`);
+    }
+    if (file.encoding === "base64" && !isBase64(file.content)) {
+      throw new Error(`Registry file ${file.path} has invalid base64 content`);
+    }
+  }
+
+  if (
+    !(
+      Array.isArray(payload.dependencies ?? []) &&
+      Array.isArray(payload.registryDependencies ?? [])
+    )
+  ) {
+    throw new Error("Registry payload has invalid dependency lists");
+  }
+  for (const dependency of payload.dependencies ?? []) {
+    assertDependency(dependency);
+  }
+  for (const dependency of payload.registryDependencies ?? []) {
+    assertComponentName(dependency);
+  }
+
+  const { integrity, ...unsignedPayload } = payload;
+  if (integrity !== createIntegrity(unsignedPayload)) {
+    throw new Error("Registry payload integrity check failed");
+  }
+
+  return payload;
+};
+
+const getRegistryUrl = (value) => {
+  const url = new URL(value);
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error("Registry URL must use HTTP or HTTPS");
+  }
+  if (url.username || url.password || url.search || url.hash) {
+    throw new Error(
+      "Registry URL must not include credentials, a query, or a fragment"
+    );
+  }
+  return url.href.replace(/\/$/u, "");
+};
+
 async function fetchComponent(name, registryUrl, spinner) {
   try {
-    const res = await fetch(`${registryUrl}/${name}.json`);
+    const res = await fetch(`${registryUrl}/${name}.json`, {
+      signal: AbortSignal.timeout(30_000),
+    });
     if (!res.ok) {
       throw new Error(`HTTP ${res.status}`);
     }
-    const payload = await res.json();
+    const contentLength = Number(res.headers.get("content-length"));
+    if (contentLength > MAX_REGISTRY_PAYLOAD_BYTES) {
+      throw new Error("Registry response is too large");
+    }
+    const raw = await res.text();
+    if (Buffer.byteLength(raw, "utf8") > MAX_REGISTRY_PAYLOAD_BYTES) {
+      throw new Error("Registry response is too large");
+    }
+    const payload = validateRegistryPayload(JSON.parse(raw), name);
     spinner.text = `Fetching ${name}...`;
     return payload;
-  } catch {
-    spinner.fail(`Registry fetch failed for ${name}.`);
+  } catch (error) {
+    spinner.fail(
+      `Registry fetch failed for ${name}: ${error instanceof Error ? error.message : "unknown error"}`
+    );
     process.exit(1);
   }
 }
+
+export async function assertSafePath(cwd, relativePath) {
+  if (typeof relativePath !== "string" || relativePath.length === 0) {
+    throw new Error("Invalid file path in registry payload");
+  }
+  if (relativePath.includes("\0")) {
+    throw new Error(`Null byte in path: ${relativePath}`);
+  }
+  if (path.isAbsolute(relativePath) || /^[a-zA-Z]:/.test(relativePath)) {
+    throw new Error(`Absolute path rejected: ${relativePath}`);
+  }
+  if (relativePath.split(/[\\/]/).some((seg) => seg === "..")) {
+    throw new Error(`Parent traversal rejected: ${relativePath}`);
+  }
+  const root = path.resolve(cwd);
+  const target = path.resolve(root, relativePath);
+  if (target !== root && !target.startsWith(root + path.sep)) {
+    throw new Error(`Path escapes project root: ${relativePath}`);
+  }
+  const realRoot = await realpath(root).catch(() => root);
+  let existingParent = path.dirname(target);
+  while (!existsSync(existingParent)) {
+    existingParent = path.dirname(existingParent);
+  }
+  const realParent = await realpath(existingParent).catch(() => existingParent);
+  if (realParent !== realRoot && !realParent.startsWith(realRoot + path.sep)) {
+    throw new Error(`Symlink escape rejected: ${relativePath}`);
+  }
+  if (existsSync(target) && (await lstat(target)).isSymbolicLink()) {
+    throw new Error(`Symlink target rejected: ${relativePath}`);
+  }
+  return target;
+}
+
 async function writeFileSafely(file, cwd, options) {
-  const targetPath = path.join(cwd, file.path);
+  const targetPath = await assertSafePath(cwd, file.path);
   if (existsSync(targetPath) && !options.overwrite) {
     const { overwrite } = await prompts({
       initial: false,
@@ -64,14 +234,24 @@ export async function add(componentName, options) {
     process.exit(1);
   }
 
-  const configRaw = await readFile(configPath, "utf-8");
-  const config = JSON.parse(configRaw.replace(/^\uFEFF/u, ""));
-  const registryUrl = (options.registry ?? config.registry).replace(/\/$/u, "");
+  let config;
+  let registryUrl;
+  try {
+    assertComponentName(componentName);
+    const configRaw = await readFile(configPath, "utf-8");
+    config = JSON.parse(configRaw.replace(/^\uFEFF/u, ""));
+    registryUrl = getRegistryUrl(options.registry ?? config.registry);
+  } catch (error) {
+    logger.error(
+      error instanceof Error ? error.message : "Invalid configuration."
+    );
+    process.exit(1);
+  }
 
   const registrySpinner = ora("Checking registry").start();
   const queue = [componentName];
   const fetched = new Map();
-  const npmDeps = new Set();
+  const npmDeps = new Map();
 
   while (queue.length) {
     const name = queue.shift();
@@ -81,7 +261,14 @@ export async function add(componentName, options) {
     const payload = await fetchComponent(name, registryUrl, registrySpinner);
     fetched.set(name, payload);
     for (const d of payload.dependencies ?? []) {
-      npmDeps.add(d);
+      const packageName = getDependencyName(d);
+      const existing = npmDeps.get(packageName);
+      if (
+        !existing ||
+        (!hasDependencyVersion(existing) && hasDependencyVersion(d))
+      ) {
+        npmDeps.set(packageName, d);
+      }
     }
     for (const d of payload.registryDependencies ?? []) {
       if (!fetched.has(d)) {
@@ -105,6 +292,31 @@ export async function add(componentName, options) {
   order.push(componentName);
   const written = [];
 
+  const getMissingDependencies = async () => {
+    const pkgPath = path.join(cwd, "package.json");
+    const pkgRaw = await readFile(pkgPath, "utf-8");
+    const pkg = JSON.parse(pkgRaw.replace(/^\uFEFF/u, ""));
+    const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+    return [...npmDeps].filter(([packageName]) => !allDeps[packageName]);
+  };
+
+  if (options.dryRun) {
+    for (const name of order) {
+      for (const file of fetched.get(name).files) {
+        const targetPath = resolveTargetPath(file.path);
+        await assertSafePath(cwd, targetPath);
+        logger.log(`Would create ${targetPath}.`);
+      }
+    }
+    const missing = await getMissingDependencies();
+    for (const [, dependency] of missing) {
+      logger.log(`Would install ${dependency}.`);
+    }
+    logger.success("Dry run complete. No files or dependencies were changed.");
+    logger.break();
+    return;
+  }
+
   for (const name of order) {
     for (const file of fetched.get(name).files ?? []) {
       const targetFile = { ...file, path: resolveTargetPath(file.path) };
@@ -124,17 +336,20 @@ export async function add(componentName, options) {
     }
   }
   if (npmDeps.size > 0) {
-    const pkgPath = path.join(cwd, "package.json");
-    const pkgRaw = await readFile(pkgPath, "utf-8");
-    const pkg = JSON.parse(pkgRaw.replace(/^\uFEFF/u, ""));
-    const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    const missing = [...npmDeps].filter((d) => !allDeps[d]);
+    const missing = await getMissingDependencies();
     if (missing.length > 0) {
+      if (options.skipDependencies) {
+        logger.info(`Skipped ${missing.length} dependency installation(s).`);
+        logger.break();
+        return;
+      }
       const s = ora("Installing dependencies").start();
       const pm = detectPackageManager(cwd);
       try {
         const args =
-          pm === "npm" ? ["install", ...missing] : ["add", ...missing];
+          pm === "npm"
+            ? ["install", ...missing.map(([, dependency]) => dependency)]
+            : ["add", ...missing.map(([, dependency]) => dependency)];
         await execa(pm, args, { cwd, stdio: "ignore" });
         s.succeed(`Installed ${missing.length} package(s).`);
       } catch (error) {

package/src/commands/add.test.mjs

@@ -0,0 +1,89 @@
+import { describe, expect, it } from "vitest";
+
+import { assertSafePath, validateRegistryPayload } from "./add.js";
+
+const unsignedPayload = {
+  dependencies: ["@frakment/react@^0.0.3", "motion@^14.10.0"],
+  files: [
+    {
+      content: "export {};\n",
+      path: "components/ui/example.tsx",
+    },
+  ],
+  name: "example",
+  registryDependencies: ["button"],
+};
+
+const payload = {
+  ...unsignedPayload,
+  integrity:
+    "sha256:d75c2cab99c7b025d584adc04eb9b2eb86794f1a51df578f94c74c0eef22634d",
+};
+
+describe("registry payload validation", () => {
+  it("accepts a valid component payload", () => {
+    expect(validateRegistryPayload(payload, "example")).toEqual(payload);
+  });
+
+  it("rejects a component name mismatch", () => {
+    expect(() => validateRegistryPayload(payload, "button")).toThrow(
+      "unexpected component name"
+    );
+  });
+
+  it("rejects invalid dependency specifications", () => {
+    expect(() =>
+      validateRegistryPayload(
+        { ...payload, dependencies: ["file:../malicious-package"] },
+        "example"
+      )
+    ).toThrow(/invalid dependency/i);
+  });
+
+  it("rejects malformed files and registry dependencies", () => {
+    expect(() =>
+      validateRegistryPayload(
+        {
+          ...payload,
+          files: [{ content: "x", encoding: "hex", path: "file.ts" }],
+        },
+        "example"
+      )
+    ).toThrow("unsupported encoding");
+    expect(() =>
+      validateRegistryPayload(
+        { ...payload, registryDependencies: ["../button"] },
+        "example"
+      )
+    ).toThrow("Invalid component name");
+  });
+
+  it("rejects content that does not match the integrity hash", () => {
+    expect(() =>
+      validateRegistryPayload(
+        {
+          ...payload,
+          files: [{ content: "changed", path: "components/ui/example.tsx" }],
+        },
+        "example"
+      )
+    ).toThrow("integrity check failed");
+  });
+});
+
+describe("registry target paths", () => {
+  it("accepts paths within the project root", async () => {
+    await expect(
+      assertSafePath(process.cwd(), "components/ui/button.tsx")
+    ).resolves.toContain("components");
+  });
+
+  it("rejects parent traversal and absolute paths", async () => {
+    await expect(
+      assertSafePath(process.cwd(), "../../outside.txt")
+    ).rejects.toThrow("Parent traversal rejected");
+    await expect(
+      assertSafePath(process.cwd(), "C:\\outside.txt")
+    ).rejects.toThrow("Absolute path rejected");
+  });
+});