genesis-stack 1.4.7 → 1.4.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "genesis-stack",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "description": "The optional curated technology Stack catalog for Genesis projects.",
   "type": "module",
   "repository": {

package/stacks/pieces/jskit-mysql.md

@@ -82,3 +82,11 @@ JSKIT MySQL runtime, live-schema CRUD generation, and persistence conventions.
   error translation at one established persistence boundary.
 - Never compete with or rewrite a generator-owned baseline migration. Preserve
   retained migration history and data semantics.
+
+## Data pass
+
+- Apply the MySQL part of JSKIT's data pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/data-pass#mysql`:
+  one schema change per migration because MySQL DDL commits as it goes, online
+  index changes that fail rather than lock (`ALGORITHM=INPLACE, LOCK=NONE`),
+  and `EXPLAIN ANALYZE` on the test database at realistic size.

package/stacks/pieces/jskit-postgresql.md

@@ -78,3 +78,11 @@ JSKIT PostgreSQL runtime, live-schema CRUD generation, and persistence conventio
   error translation at one established persistence boundary.
 - Never compete with or rewrite a generator-owned baseline migration. Preserve
   retained migration history and data semantics.
+
+## Data pass
+
+- Apply the PostgreSQL part of JSKIT's data pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/data-pass#postgresql`:
+  concurrent index builds in a migration without a transaction, constraints
+  added `NOT VALID` and validated afterwards on large tables, and
+  `EXPLAIN (ANALYZE, BUFFERS)` on the test database at realistic size.

package/stacks/pieces/jskit.md

@@ -326,6 +326,82 @@ https://mobily-enterprises.github.io/jskit-ai/
 - The checks cannot see layout, spacing or contrast; look at every screenshot
   for those.
 
+## Identity pass
+
+- Read JSKIT's visual identity page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/visual-identity`
+  and its Material 3 rules at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/material-3`
+  completely. The identity lives where that page puts it: the seed and a
+  named colour per content kind in `src/theme/index.js`, every content colour
+  in `src/theme/palettes.js`, the cover and empty-state art in
+  `src/components/art/`, the logo with `favicon.svg`, the startup shell in
+  `index.html`, and sign-in in the auth surface's `AppBrand.vue`.
+- Run `npx jskit check m3` until it reports nothing and `npx jskit check`
+  until it passes, then take the screenshots as JSKIT's UI pass method shows.
+
+## Quality pass
+
+- Read JSKIT's quality pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/quality-pass`
+  completely: where loading, empty, error and refused states live in a JSKIT
+  app, how each refusal carries its own code to `useJskitText()`'s
+  `serverMessage()`, and how Playwright forces each state.
+- Run `npm run verify` and the focused Vitest and Playwright tests of the
+  affected screens.
+
+## Data pass
+
+- Read JSKIT's data pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/data-pass`
+  and its data access guide at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/data-access`
+  completely: the table resource is each table's one owner, Knex migrations
+  carry constraints and indexes, and `expectFlatQueries()` compares a path's
+  queries at a few rows and at a realistic number on `TEST_DB_NAME`.
+- Leave `npm run lint` (which reports narrowing in code) and `npx jskit check`
+  without findings.
+
+## Security pass
+
+- Read JSKIT's security pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/security-pass`
+  completely: each route's `auth` and `permission`, a table resource's
+  `ownership` and row policy scoping every handle call, `expectScoped()` for
+  another workspace's rows, `rateLimit` and `config.auth.rateLimits`, the
+  first account's setup code, and what `NODE_ENV=production` requires, such as
+  `AUTH_LOCAL_SESSION_SECRET`.
+- Try each refusal through `app.inject` on the test server, then run
+  `npm run verify`.
+
+## User experience pass
+
+- Read JSKIT's user experience pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/ux-pass`
+  completely: main tasks as `shell.primary-nav` placements and each inner
+  page's `jskit.parent`, `ShellPrimaryAction` for a list's New and a record's
+  one filled next step, a new form's `initialValue` or `createModel`,
+  `saveSuccess` for where Save lands, `CrudDeleteAction`'s confirmation, Undo
+  in the snackbar, and the app's words through `useJskitText()`.
+- Walk each main task in the host's managed Preview or a Playwright spec, then
+  run `npm run verify`.
+
+## Speed pass
+
+- Read JSKIT's speed pass page at
+  `https://mobily-enterprises.github.io/jskit-ai/guide/framework/speed-pass`
+  completely: `jskit test` runs test files in parallel within the machine's
+  test budget (`V64_TEST_CONCURRENCY`, else half the CPUs) and ends with its
+  slowest files, `jskit test --databases` restores a stored snapshot for each
+  file, a fixture every file only reads is made once in a
+  `--test-global-setup` module, a client provider exported by its own subpath
+  keeps screens out of every page's first load, and a list reads its related
+  records with `include` and its selected values by `filter[id]` in one
+  request.
+- Compare the whole `npm test` wall time, its slowest files and the build's
+  chunk sizes before and after, then leave `npx jskit check` and
+  `npm run verify` passing.
+
 ## Verification
 
 - Verify `application`: `npm` `run` `verify`