inkbridge 0.1.0-beta.2 → 0.1.0-beta.21

package/templates/patch-tokens-route.ts

@@ -2,9 +2,14 @@
  * Figma Token Patch API Route
  *
  * Generated by `inkbridge setup`. Do not move this file.
- * The Figma plugin calls POST /api/figma/patch-tokens during Push to Code
+ * The Figma plugin calls POST /api/inkbridge/patch-tokens during Push to Code
  * to apply token updates via a PostCSS AST patcher.
  *
+ * Types are deliberately explicit (no implicit `any` from `request.json()`
+ * or property access on unknown payloads) so this file passes consumer
+ * projects that enable strict `@typescript-eslint/no-explicit-any` /
+ * `no-unsafe-*` rules without needing per-file eslint-disable comments.
+ *
  * To re-generate: pnpm exec inkbridge setup
  */
 
@@ -18,6 +23,18 @@ const CORS = {
 };
 
 type ThemeUpdateMap = Record<string, Record<string, string>>;
+type PatchPayload = { cssText?: unknown; updatesByTheme?: unknown };
+
+function isThemeUpdateMap(value: unknown): value is ThemeUpdateMap {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;
+  for (const inner of Object.values(value as Record<string, unknown>)) {
+    if (!inner || typeof inner !== 'object' || Array.isArray(inner)) return false;
+    for (const v of Object.values(inner as Record<string, unknown>)) {
+      if (typeof v !== 'string') return false;
+    }
+  }
+  return true;
+}
 
 function parseThemeSelectors(selector: string): string[] {
   const themes = new Set<string>();
@@ -137,11 +154,13 @@ function patchCssVariables(cssText: string, updatesByTheme: ThemeUpdateMap): str
   return root.toString();
 }
 
-export async function POST(request: Request) {
+export async function POST(request: Request): Promise<NextResponse> {
   try {
-    const payload = await request.json();
-    const cssText = typeof payload?.cssText === 'string' ? payload.cssText : '';
-    const updatesByTheme = (payload?.updatesByTheme || {}) as ThemeUpdateMap;
+    const payload = (await request.json()) as PatchPayload;
+    const cssText = typeof payload.cssText === 'string' ? payload.cssText : '';
+    const updatesByTheme: ThemeUpdateMap = isThemeUpdateMap(payload.updatesByTheme)
+      ? payload.updatesByTheme
+      : {};
 
     if (!cssText) {
       return NextResponse.json(
@@ -160,6 +179,6 @@ export async function POST(request: Request) {
   }
 }
 
-export async function OPTIONS() {
+export async function OPTIONS(): Promise<NextResponse> {
   return new NextResponse(null, { headers: CORS });
 }

package/templates/scan-components-route.ts

@@ -2,9 +2,14 @@
  * Figma Component Scanner API Route
  *
  * Generated by `inkbridge setup`. Do not move this file.
- * The Figma plugin calls GET /api/figma/scan-components when the user
+ * The Figma plugin calls GET /api/inkbridge/scan-components when the user
  * clicks "Generate Design System Page".
  *
+ * Types are deliberately explicit (no implicit `any` from `JSON.parse` or
+ * `request.json()`) so this file passes consumer projects that enable
+ * strict `@typescript-eslint/no-explicit-any` /
+ * `no-unsafe-*` rules without needing per-file eslint-disable comments.
+ *
  * To re-generate: pnpm exec inkbridge setup
  */
 
@@ -15,7 +20,17 @@ import { spawnSync } from 'child_process';
 
 const CWD = process.cwd();
 const TSX = path.resolve(CWD, 'node_modules/.bin/tsx');
-const CLI = path.resolve(CWD, 'node_modules/inkbridge/scanner/cli.ts');
+// `INKBRIDGE_LOCAL=1` (set by `pnpm inkbridge:dev:local` in projects that
+// sit next to a sibling inkbridge checkout) points the scanner at the
+// source tree directly instead of going through `node_modules/inkbridge`.
+// pnpm hard-links package files at install time, but most editors break
+// those links on save (save-as-rename semantics), so without this flag
+// every scanner edit requires a `pnpm add -D inkbridge@file:... --force`.
+// The flag turns scanner-side iteration into a true hot loop.
+const LOCAL_CLI = path.resolve(CWD, '..', 'inkbridge', 'tools', 'figma-plugin', 'scanner', 'cli.ts');
+const CLI = process.env.INKBRIDGE_LOCAL === '1' && fs.existsSync(LOCAL_CLI)
+  ? LOCAL_CLI
+  : path.resolve(CWD, 'node_modules/inkbridge/scanner/cli.ts');
 const OUTPUT = path.resolve(CWD, '.inkbridge/component-definitions.json');
 
 const CORS = {
@@ -24,7 +39,13 @@ const CORS = {
   'Access-Control-Allow-Headers': 'Content-Type',
 };
 
-export async function GET(request: Request) {
+// Shape of the scanner output is opaque to the route — we forward it
+// to the plugin verbatim. Typing as `unknown` (the type-safe stand-in
+// for `any`) keeps strict lints happy without pulling the scanner's
+// internal types into a route file the consumer owns.
+type ScannerOutput = Record<string, unknown>;
+
+export async function GET(request: Request): Promise<NextResponse> {
   try {
     const url = new URL(request.url);
     const tokenSourceMode = url.searchParams.get('tokenSourceMode') || 'auto';
@@ -42,7 +63,7 @@ export async function GET(request: Request) {
       throw new Error(result.stderr || 'Scanner exited with non-zero status');
     }
 
-    const output = JSON.parse(fs.readFileSync(OUTPUT, 'utf-8'));
+    const output = JSON.parse(fs.readFileSync(OUTPUT, 'utf-8')) as ScannerOutput;
     return NextResponse.json(output, { headers: CORS });
   } catch (error) {
     return NextResponse.json(
@@ -52,6 +73,6 @@ export async function GET(request: Request) {
   }
 }
 
-export async function OPTIONS() {
+export async function OPTIONS(): Promise<NextResponse> {
   return new NextResponse(null, { headers: CORS });
 }