kitfly 0.1.2 → 0.2.0

package/src/__tests__/fixtures/fences/slides-visuals/valid/quadrant-grid.md

@@ -0,0 +1,8 @@
+:::quadrant-grid
+axis-x: "Effort"
+axis-y: "Impact"
+tl: "Quick Wins"
+tr: "Major Projects"
+bl: "Fill-ins"
+br: "Thankless Tasks"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/scorecard.md

@@ -0,0 +1,13 @@
+:::scorecard
+metrics:
+  - label: "MRR"
+    value: "$240k"
+    trend: "+6%"
+  - label: "Churn"
+    value: "1.2%"
+    trend: "-0.3%"
+  - label: "NPS"
+    value: "48"
+  - label: "DAU"
+    value: "12,400"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/stat-grid.md

@@ -0,0 +1,8 @@
+:::stat-grid
+metrics:
+  - label: Users
+    value: 1,234
+  - label: Uptime
+    value: 99.95%
+    trend: +0.3%
+:::

package/src/__tests__/init.test.ts

@@ -51,6 +51,7 @@ describe("template registry", () => {
 		const ids = templates.map((t) => t.id);
 
 		expect(ids).toContain("minimal");
+		expect(ids).toContain("deck");
 		expect(ids).toContain("handbook");
 		expect(templates.length).toBeGreaterThanOrEqual(2);
 	});
@@ -257,6 +258,40 @@ describe("handbook template", () => {
 	});
 });
 
+// ---------------------------------------------------------------------------
+// Deck Template (slides mode)
+// ---------------------------------------------------------------------------
+
+describe("deck template", () => {
+	const projectName = "test-deck";
+
+	it("creates slides-focused starter files", async () => {
+		await runTemplate({
+			name: projectName,
+			template: "deck",
+			git: false,
+		});
+
+		expect(generatedExists(projectName, "site.yaml")).toBe(true);
+		expect(generatedExists(projectName, "content/slides/briefing.md")).toBe(true);
+		expect(generatedExists(projectName, "CUSTOMIZING.md")).toBe(true);
+	});
+
+	it("configures site.yaml for slides mode", async () => {
+		await runTemplate({
+			name: projectName,
+			template: "deck",
+			git: false,
+		});
+
+		const siteYaml = await readGenerated(projectName, "site.yaml");
+		expect(siteYaml).toContain("mode: slides");
+		expect(siteYaml).toContain('aspect: "16/9"');
+		expect(siteYaml).toContain('name: "Slides"');
+		expect(siteYaml).toContain('path: "content/slides"');
+	});
+});
+
 // ---------------------------------------------------------------------------
 // Custom Branding
 // ---------------------------------------------------------------------------

package/src/__tests__/plugin-loader.test.ts

@@ -0,0 +1,221 @@
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import {
+	loadPluginInjections,
+	loadPluginRegistry,
+	PluginConfigError,
+	PluginIntegrityError,
+} from "../plugin-loader.ts";
+
+const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
+
+function sha256Hex(text: string): string {
+	return createHash("sha256").update(new TextEncoder().encode(text)).digest("hex");
+}
+
+describe("plugin loader", () => {
+	it("inlines local assets with checksum verification", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		const css = ".hello{color:red;}";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+		await writeFile(join(root, "plugins-dist", "hello.css"), css, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    assets:
+      js: "plugins-dist/hello.js"
+      css: "plugins-dist/hello.css"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+        css: "sha256:${sha256Hex(css)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+
+		const configYaml = `plugins:
+  - hello@1.0.0
+`;
+		await writeFile(join(root, "kitfly.plugins.yaml"), configYaml, "utf-8");
+
+		const injections = await loadPluginInjections({ root });
+		expect(injections.head).toContain(css);
+		expect(injections.bodyEnd).toContain(js);
+	});
+
+	it("respects plugin mode allowlist (modes)", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    modes: ["slides"]
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		const docs = await loadPluginInjections({ root, mode: "docs" });
+		expect(docs.head).toBe("");
+		expect(docs.bodyEnd).toBe("");
+
+		const slides = await loadPluginInjections({ root, mode: "slides" });
+		expect(slides.bodyEnd).toContain(js);
+	});
+
+	it("treats empty modes as blocked", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    modes: []
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		const injections = await loadPluginInjections({ root, mode: "slides" });
+		expect(injections.head).toBe("");
+		expect(injections.bodyEnd).toBe("");
+	});
+
+	it("throws on checksum mismatch", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${"0".repeat(64)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		await expect(loadPluginInjections({ root })).rejects.toBeInstanceOf(PluginIntegrityError);
+	});
+
+	it("rejects invalid canonical refs (prevents attribute injection)", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+		await mkdir(join(root, "registry"), { recursive: true });
+
+		await writeFile(
+			join(root, "registry", "plugins.yaml"),
+			`version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins: {}
+`,
+			"utf-8",
+		);
+
+		await writeFile(
+			join(root, "kitfly.plugins.yaml"),
+			`plugins:
+  - bad"@1.0.0
+`,
+			"utf-8",
+		);
+
+		await expect(loadPluginInjections({ root })).rejects.toBeInstanceOf(PluginConfigError);
+	});
+});
+
+describe("registry consistency", () => {
+	it("all plugin dist checksums match registry/plugins.yaml", async () => {
+		const registryPath = join(REPO_ROOT, "registry", "plugins.yaml");
+		const registry = await loadPluginRegistry(registryPath);
+
+		for (const [id, plugin] of Object.entries(registry.plugins)) {
+			const { assets } = plugin;
+			for (const kind of ["js", "css"] as const) {
+				const relPath = assets[kind];
+				if (!relPath) continue;
+
+				const expectedRaw = assets.assetSha256[kind];
+				if (!expectedRaw) throw new Error(`${id}: missing assetSha256.${kind}`);
+
+				const expectedHex = expectedRaw.replace(/^sha256:/, "").toLowerCase();
+				const filePath = join(REPO_ROOT, relPath);
+				const content = await readFile(filePath);
+				const actualHex = createHash("sha256").update(content).digest("hex");
+
+				expect(actualHex, `${id} ${kind} (${relPath})`).toBe(expectedHex);
+			}
+		}
+	});
+});