kitfly 0.1.2 → 0.2.1

package/src/__tests__/bundle.test.ts

@@ -648,6 +648,12 @@ describe("buildBundleSidebarHeader", () => {
 		expect(source).toContain(`\${themeCSS}`);
 	});
 
+	it("bundle script keeps docs-mode smooth anchor scrolling", async () => {
+		const source = await readFile(`${process.cwd()}/scripts/bundle.ts`, "utf-8");
+		expect(source).toContain("if (!shell) {");
+		expect(source).toContain("scrollIntoView({ behavior: 'smooth', block: 'start' });");
+	});
+
 	it("shows version label with v prefix when version is provided", () => {
 		const config: SiteConfig = {
 			docroot: ".",
@@ -684,6 +690,31 @@ describe("buildBundleSidebarHeader", () => {
 		expect(html).toContain('alt="My Company"');
 	});
 
+	it("includes initial fallback metadata and onerror handler", () => {
+		const config: SiteConfig = {
+			docroot: ".",
+			title: "Test",
+			brand: { name: "Acme", url: "/" },
+			sections: [],
+		};
+
+		const html = buildBundleSidebarHeader(config, "1.0", "logo.png");
+		expect(html).toContain('data-initial="A"');
+		expect(html).toContain("classList.add('logo-fallback')");
+	});
+
+	it("escapes initial fallback character in data attribute", () => {
+		const config: SiteConfig = {
+			docroot: ".",
+			title: "Test",
+			brand: { name: '"quoted', url: "/" },
+			sections: [],
+		};
+
+		const html = buildBundleSidebarHeader(config, "1.0", "logo.png");
+		expect(html).toContain('data-initial="""');
+	});
+
 	it("links brand to brand URL", () => {
 		const config: SiteConfig = {
 			docroot: ".",

package/src/__tests__/cli.test.ts

@@ -54,7 +54,7 @@ kitfly v${version} - Turn your writing into a website
 Usage:
   kitfly dev [folder]     Start dev server with hot reload
   kitfly build [folder]   Build static site to dist/
-  kitfly bundle [folder]  Build single-file HTML bundle
+  kitfly bundle [folder]  Build single-file HTML bundle to bundles/
   kitfly init [name]      Create new project from template
   kitfly servers          List running dev servers
   kitfly stop <port|all>  Stop dev server(s)
@@ -68,11 +68,15 @@ Dev options:
   --json        Output JSON (implies --daemon)
   --no-open     Don't open browser
 
-Build/bundle options:
+Build options:
   --out <dir>   Output directory [env: KITFLY_BUILD_OUT] (default: dist)
-  --name <file> Bundle filename (default: bundle.html)
   --no-raw      Don't include raw markdown
 
+Bundle options:
+  --out <dir>   Output directory [env: KITFLY_BUNDLE_OUT] (default: bundles)
+  --name <file> Bundle filename (default: bundle.html)
+  --no-raw      Don't include raw markdown [env: KITFLY_BUNDLE_RAW]
+
 Stop options:
   --force       Skip graceful shutdown, kill immediately
 
@@ -84,6 +88,7 @@ Examples:
   kitfly stop 4000
   kitfly stop all
   kitfly build ./docs --out ./public
+  kitfly bundle ./docs --out ./bundles --name docs.html
   kitfly init my-handbook
 
 Documentation: https://kitfly.app
@@ -647,6 +652,12 @@ describe("command argument defaults", () => {
 		const name = (flags.name as string) || "bundle.html";
 		expect(name).toBe("bundle.html");
 	});
+
+	it("bundle defaults out to bundles", () => {
+		const { flags } = routeCommand(["bundle"]);
+		const out = (flags.out as string) || "bundles";
+		expect(out).toBe("bundles");
+	});
 });
 
 describe("daemon mode detection", () => {

package/src/__tests__/dev-plugin-errors.test.ts

@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { buildDevPluginErrorHtml } from "../../scripts/dev.ts";
+
+describe("dev plugin error page", () => {
+	it("shows actionable update hint for plugin version mismatch", () => {
+		const html = buildDevPluginErrorHtml("Plugin slides-visuals version mismatch: 0.2.0 != 0.2.1");
+		expect(html).toContain("Plugin setup error");
+		expect(html).toContain("kitfly.plugins.yaml");
+		expect(html).toContain("slides-visuals@0.2.1");
+	});
+
+	it("escapes error text and falls back to generic guidance", () => {
+		const html = buildDevPluginErrorHtml('Invalid plugin ref: bad"@1.0.0 <x>');
+		expect(html).toContain(
+			"Check <code>kitfly.plugins.yaml</code> and <code>registry/plugins.yaml</code>",
+		);
+		expect(html).toContain("bad&quot;@1.0.0 &lt;x&gt;");
+		expect(html).not.toContain('bad"@1.0.0 <x>');
+	});
+});

package/src/__tests__/fixtures/fences/slides-visuals/invalid/bad-list-indent.md

@@ -0,0 +1,5 @@
+:::stat-grid
+metrics:
+- label: Users
+  value: 1,234
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/blank-line.md

@@ -0,0 +1,5 @@
+:::kpi
+label: A
+
+value: B
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/compare-object-items.md

@@ -0,0 +1,9 @@
+:::compare
+left-title: "Build"
+right-title: "Buy"
+left:
+  - label: "Control"
+    value: "High"
+right:
+  - "Fast to ship"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/flow-branching-no-source.md

@@ -0,0 +1,5 @@
+:::flow-branching
+branches:
+  - "API Handler"
+  - "Static Files"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/flow-converging-no-target.md

@@ -0,0 +1,6 @@
+:::flow-converging
+sources:
+  - "Frontend Logs"
+  - "API Logs"
+merge: "Aggregator"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/indented-fence.md

@@ -0,0 +1,4 @@
+  :::kpi
+label: A
+value: B
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/staircase-empty-steps.md

@@ -0,0 +1,3 @@
+:::staircase
+steps:
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/stat-grid-missing-fields.md

@@ -0,0 +1,5 @@
+:::stat-grid
+metrics:
+  - label: "Users"
+  - label: "Revenue"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/timeline-horizontal-no-events.md

@@ -0,0 +1,2 @@
+:::timeline-horizontal
+:::

package/src/__tests__/fixtures/fences/slides-visuals/invalid/unknown-type.md

@@ -0,0 +1,3 @@
+:::mystery
+key: value
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/compare.md

@@ -0,0 +1,10 @@
+:::compare
+left-title: "Pros"
+right-title: "Cons"
+left:
+  - "Fast"
+  - "Simple"
+right:
+  - "Limited"
+  - "Opinionated"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/comparison-table.md

@@ -0,0 +1,14 @@
+:::comparison-table
+headers:
+  - Feature
+  - Us
+  - Competitor A
+  - Competitor B
+rows:
+  - ["Real-time sync", "Yes", "Yes", "No"]
+  - ["Offline mode", "Yes", "No", "Yes"]
+  - ["Plugin system", "Yes (v0.2.0)", "No", "Limited"]
+  - ["Self-hosted option", "Yes", "No", "No"]
+  - ["AI generation", "Yes", "Beta", "No"]
+  - ["Price (team/mo)", "$49", "$79", "$39"]
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/flow-branching-no-split.md

@@ -0,0 +1,7 @@
+:::flow-branching
+source: "Incoming Request"
+branches:
+  - "API Handler"
+  - "Static Files"
+  - "WebSocket"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/flow-branching.md

@@ -0,0 +1,8 @@
+:::flow-branching
+source: "Incoming Request"
+split: "Route"
+branches:
+  - "API Handler"
+  - "Static Files"
+  - "WebSocket"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/flow-converging-no-merge.md

@@ -0,0 +1,7 @@
+:::flow-converging
+sources:
+  - "Frontend Logs"
+  - "API Logs"
+  - "DB Logs"
+target: "Dashboard"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/flow-converging.md

@@ -0,0 +1,8 @@
+:::flow-converging
+sources:
+  - "Frontend Logs"
+  - "API Logs"
+  - "DB Logs"
+merge: "Aggregator"
+target: "Dashboard"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/funnel.md

@@ -0,0 +1,7 @@
+:::funnel
+stages:
+  - "Leads (1,200)"
+  - "Qualified (420)"
+  - "Proposals (120)"
+  - "Closed (47)"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/kpi.md

@@ -0,0 +1,5 @@
+:::kpi
+label: "Deals Closed"
+value: "$8.1M"
+trend: "+12%"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/layer-cake.md

@@ -0,0 +1,6 @@
+:::layer-cake
+layers:
+  - "Product"
+  - "Platform"
+  - "Infrastructure"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/pyramid.md

@@ -0,0 +1,6 @@
+:::pyramid
+levels:
+  - "Vision"
+  - "Strategy"
+  - "Execution"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/quadrant-grid.md

@@ -0,0 +1,8 @@
+:::quadrant-grid
+axis-x: "Effort"
+axis-y: "Impact"
+tl: "Quick Wins"
+tr: "Major Projects"
+bl: "Fill-ins"
+br: "Thankless Tasks"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/scorecard.md

@@ -0,0 +1,13 @@
+:::scorecard
+metrics:
+  - label: "MRR"
+    value: "$240k"
+    trend: "+6%"
+  - label: "Churn"
+    value: "1.2%"
+    trend: "-0.3%"
+  - label: "NPS"
+    value: "48"
+  - label: "DAU"
+    value: "12,400"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/staircase-down.md

@@ -0,0 +1,7 @@
+:::staircase
+direction: down
+steps:
+  - "Optimized"
+  - "Managed"
+  - "Defined"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/staircase.md

@@ -0,0 +1,8 @@
+:::staircase
+steps:
+  - "Ad Hoc"
+  - "Repeatable"
+  - "Defined"
+  - "Managed"
+  - "Optimized"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/stat-grid.md

@@ -0,0 +1,8 @@
+:::stat-grid
+metrics:
+  - label: Users
+    value: 1,234
+  - label: Uptime
+    value: 99.95%
+    trend: +0.3%
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/timeline-horizontal.md

@@ -0,0 +1,9 @@
+:::timeline-horizontal
+events:
+  - label: "Kickoff"
+    date: "Jan 2026"
+  - label: "Alpha"
+    date: "Mar 2026"
+  - label: "GA Release"
+    date: "Jun 2026"
+:::

package/src/__tests__/fixtures/fences/slides-visuals/valid/timeline-vertical.md

@@ -0,0 +1,10 @@
+:::timeline-vertical
+events:
+  - label: "Research Phase"
+    date: "Q1"
+  - label: "Prototype"
+  - label: "User Testing"
+    date: "Q3"
+  - label: "Launch"
+    date: "Q4"
+:::

package/src/__tests__/init.test.ts

@@ -51,6 +51,7 @@ describe("template registry", () => {
 		const ids = templates.map((t) => t.id);
 
 		expect(ids).toContain("minimal");
+		expect(ids).toContain("deck");
 		expect(ids).toContain("handbook");
 		expect(templates.length).toBeGreaterThanOrEqual(2);
 	});
@@ -257,6 +258,40 @@ describe("handbook template", () => {
 	});
 });
 
+// ---------------------------------------------------------------------------
+// Deck Template (slides mode)
+// ---------------------------------------------------------------------------
+
+describe("deck template", () => {
+	const projectName = "test-deck";
+
+	it("creates slides-focused starter files", async () => {
+		await runTemplate({
+			name: projectName,
+			template: "deck",
+			git: false,
+		});
+
+		expect(generatedExists(projectName, "site.yaml")).toBe(true);
+		expect(generatedExists(projectName, "content/slides/briefing.md")).toBe(true);
+		expect(generatedExists(projectName, "CUSTOMIZING.md")).toBe(true);
+	});
+
+	it("configures site.yaml for slides mode", async () => {
+		await runTemplate({
+			name: projectName,
+			template: "deck",
+			git: false,
+		});
+
+		const siteYaml = await readGenerated(projectName, "site.yaml");
+		expect(siteYaml).toContain("mode: slides");
+		expect(siteYaml).toContain('aspect: "16/9"');
+		expect(siteYaml).toContain('name: "Slides"');
+		expect(siteYaml).toContain('path: "content/slides"');
+	});
+});
+
 // ---------------------------------------------------------------------------
 // Custom Branding
 // ---------------------------------------------------------------------------

package/src/__tests__/plugin-loader.test.ts

@@ -0,0 +1,221 @@
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import {
+	loadPluginInjections,
+	loadPluginRegistry,
+	PluginConfigError,
+	PluginIntegrityError,
+} from "../plugin-loader.ts";
+
+const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..", "..");
+
+function sha256Hex(text: string): string {
+	return createHash("sha256").update(new TextEncoder().encode(text)).digest("hex");
+}
+
+describe("plugin loader", () => {
+	it("inlines local assets with checksum verification", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		const css = ".hello{color:red;}";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+		await writeFile(join(root, "plugins-dist", "hello.css"), css, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    assets:
+      js: "plugins-dist/hello.js"
+      css: "plugins-dist/hello.css"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+        css: "sha256:${sha256Hex(css)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+
+		const configYaml = `plugins:
+  - hello@1.0.0
+`;
+		await writeFile(join(root, "kitfly.plugins.yaml"), configYaml, "utf-8");
+
+		const injections = await loadPluginInjections({ root });
+		expect(injections.head).toContain(css);
+		expect(injections.bodyEnd).toContain(js);
+	});
+
+	it("respects plugin mode allowlist (modes)", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    modes: ["slides"]
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		const docs = await loadPluginInjections({ root, mode: "docs" });
+		expect(docs.head).toBe("");
+		expect(docs.bodyEnd).toBe("");
+
+		const slides = await loadPluginInjections({ root, mode: "slides" });
+		expect(slides.bodyEnd).toContain(js);
+	});
+
+	it("treats empty modes as blocked", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    modes: []
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${sha256Hex(js)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		const injections = await loadPluginInjections({ root, mode: "slides" });
+		expect(injections.head).toBe("");
+		expect(injections.bodyEnd).toBe("");
+	});
+
+	it("throws on checksum mismatch", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+
+		await mkdir(join(root, "registry"), { recursive: true });
+		await mkdir(join(root, "plugins-dist"), { recursive: true });
+
+		const js = "console.log('hello plugin');";
+		await writeFile(join(root, "plugins-dist", "hello.js"), js, "utf-8");
+
+		const registryYaml = `version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins:
+  hello:
+    name: "Hello"
+    description: "Test plugin"
+    version: "1.0.0"
+    contract: "1"
+    kitfly: ">=0.2.0 <1.0.0"
+    license: MIT
+    verified: true
+    assets:
+      js: "plugins-dist/hello.js"
+      assetSha256:
+        js: "sha256:${"0".repeat(64)}"
+`;
+
+		await writeFile(join(root, "registry", "plugins.yaml"), registryYaml, "utf-8");
+		await writeFile(join(root, "kitfly.plugins.yaml"), "plugins:\n  - hello@1.0.0\n", "utf-8");
+
+		await expect(loadPluginInjections({ root })).rejects.toBeInstanceOf(PluginIntegrityError);
+	});
+
+	it("rejects invalid canonical refs (prevents attribute injection)", async () => {
+		const root = await mkdtemp(join(tmpdir(), "kitfly-plugins-"));
+		await mkdir(join(root, "registry"), { recursive: true });
+
+		await writeFile(
+			join(root, "registry", "plugins.yaml"),
+			`version: 1
+updated: "2026-02-12"
+baseUrl: ""
+plugins: {}
+`,
+			"utf-8",
+		);
+
+		await writeFile(
+			join(root, "kitfly.plugins.yaml"),
+			`plugins:
+  - bad"@1.0.0
+`,
+			"utf-8",
+		);
+
+		await expect(loadPluginInjections({ root })).rejects.toBeInstanceOf(PluginConfigError);
+	});
+});
+
+describe("registry consistency", () => {
+	it("all plugin dist checksums match registry/plugins.yaml", async () => {
+		const registryPath = join(REPO_ROOT, "registry", "plugins.yaml");
+		const registry = await loadPluginRegistry(registryPath);
+
+		for (const [id, plugin] of Object.entries(registry.plugins)) {
+			const { assets } = plugin;
+			for (const kind of ["js", "css"] as const) {
+				const relPath = assets[kind];
+				if (!relPath) continue;
+
+				const expectedRaw = assets.assetSha256[kind];
+				if (!expectedRaw) throw new Error(`${id}: missing assetSha256.${kind}`);
+
+				const expectedHex = expectedRaw.replace(/^sha256:/, "").toLowerCase();
+				const filePath = join(REPO_ROOT, relPath);
+				const content = await readFile(filePath);
+				const actualHex = createHash("sha256").update(content).digest("hex");
+
+				expect(actualHex, `${id} ${kind} (${relPath})`).toBe(expectedHex);
+			}
+		}
+	});
+});