potion-kit 0.0.2 → 0.0.3

package/dist/ai/system-prompt.js

@@ -18,7 +18,7 @@ export const POTION_KIT_RULES = `You are the potion-kit assistant: static sites
 1. STACK — Handlebars (.hbs), Markdown + front matter (.md), SCSS. src/ → build/. No React, Vue, Tailwind.
 2. SOURCES — Use Harold context below and UIPotion: catalog + search_potions + get_potion_spec(category, id). Do not invent specs; fetch full spec with get_potion_spec before generating. Implement the full spec (states, transitions, interactions); for interactive UIs (e.g. chat) use mock data or mock API so the UI works. fetch_doc_page only as fallback (haroldjs.com, uipotion.com).
 3. BEHAVIOUR — Clarify if needed, then fetch UIPotion guide(s) and get_harold_project_info. Generate Handlebars, SCSS, Markdown via write_project_file. New project: create package.json (harold-scripts, harold config), .gitignore, src/ (main.scss single file, partials head.hbs + footer.hbs, pages index.hbs). Reply with short text every turn (never only tool calls). Mention HaroldJS and UIPotion when describing the stack.
-4. OUTPUT — relativePath, formatDate, postsList, responsiveImg. write_project_file(path from project root). One main.scss when scaffolding (no @import/@use). publicationDate YYYY-MM-DD. Never {{formatDate date='now'}}; use e.g. date='2025-01-01' format='yyyy'. .js only under src/ for browser scripts. Keep replies short (2–4 sentences).
+4. OUTPUT — relativePath, formatDate, postsList, responsiveImg. write_project_file(path from project root). One main.scss when scaffolding (no @import/@use). publicationDate YYYY-MM-DD. Never {{formatDate date='now'}}; use e.g. date='2025-01-01' format='yyyy'. Browser/Harold.js scripts only in src/assets/js/; link with {{relativePath 'assets/js/…'}}. Never put scripts in statics/ or src/ root. Keep replies short (2–4 sentences).
 5. FIXES — Before editing any file, call read_project_file; make minimal edits from returned content. Do not overwrite with a fresh component; get_harold_project_info does not return file contents — always read before write.
 `;
 /**

package/dist/ai/tools.js

@@ -12,7 +12,7 @@ import { fetchPotionsIndex } from "./context/potions-catalog.js";
 import { potionSpecUrl } from "./endpoints.js";
 import { getJson } from "./remote.js";
 const ALLOWED_EXTENSIONS = new Set([".hbs", ".md", ".scss", ".css", ".html", ".json"]);
-/** .js only allowed under src/ for browser scripts (interactions, client-side search). Node.js scripts are not allowed. */
+/** .js only allowed under src/assets/js/ for browser scripts (Harold.js, interactions, client-side). Node.js scripts are not allowed. */
 const FORBIDDEN_SUBSTRINGS = [".env", ".."];
 async function isPathAllowed(projectRoot, relativePath) {
     const normalized = relativePath.replace(/\\/g, "/").trim();
@@ -29,17 +29,17 @@ async function isPathAllowed(projectRoot, relativePath) {
     const isAllowedRootDotfile = allowedRootDotfiles.includes(normalized) ||
         allowedRootDotfiles.some((f) => normalized === f || normalized.endsWith("/" + f));
     const allowedExtensions = ALLOWED_EXTENSIONS.has(ext);
-    const jsUnderSrc = ext === ".js" && normalized.startsWith("src/");
-    if (!allowedExtensions && !jsUnderSrc && !isAllowedRootDotfile) {
+    const jsUnderAssetsJs = ext === ".js" && normalized.startsWith("src/assets/js/");
+    if (!allowedExtensions && !jsUnderAssetsJs && !isAllowedRootDotfile) {
         if (ext === ".js") {
             return {
                 ok: false,
-                error: "Only browser/client-side .js under src/ is allowed (e.g. src/scripts/search.js). Node.js scripts are not allowed.",
+                error: "Only browser/client-side .js under src/assets/js/ is allowed (e.g. src/assets/js/search.js). Node.js scripts are not allowed.",
             };
         }
         return {
             ok: false,
-            error: `Allowed extensions: ${[...ALLOWED_EXTENSIONS].join(", ")}, or .js under src/, or ${allowedRootDotfiles.join(", ")} in project root`,
+            error: `Allowed extensions: ${[...ALLOWED_EXTENSIONS].join(", ")}, or .js under src/assets/js/, or ${allowedRootDotfiles.join(", ")} in project root`,
         };
     }
     const absolute = resolve(projectRoot, normalized);
@@ -221,7 +221,7 @@ export function createPotionKitTools() {
             },
         }),
         write_project_file: tool({
-            description: 'Create or overwrite a file in the user\'s project. Path must be relative to the project root; you cannot write outside this directory. Allowed: .hbs, .md, .scss, .css, .html, .json anywhere (including package.json, .haroldrc.json at root); .js only under src/ for browser scripts; .gitignore at root. When the project is new or missing root setup, create package.json with scripts "build": "harold-scripts build", "start": "harold-scripts start", devDependencies harold-scripts, and a "harold" config object (see system prompt scaffold). Do NOT write Node.js scripts (no .js at project root). Do not write .env or paths containing "..".',
+            description: 'Create or overwrite a file in the user\'s project. Path must be relative to the project root; you cannot write outside this directory. Allowed: .hbs, .md, .scss, .css, .html, .json anywhere (including package.json, .haroldrc.json at root); .js only under src/assets/js/ for browser/Harold scripts; .gitignore at root. When the project is new or missing root setup, create package.json with scripts "build": "harold-scripts build", "start": "harold-scripts start", devDependencies harold-scripts, and a "harold" config object (see system prompt scaffold). Do NOT write Node.js scripts (no .js at project root). Do not write .env or paths containing "..".',
             parameters: z.object({
                 path: z
                     .string()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "potion-kit",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "CLI to build HaroldJS + UIPotion websites",
   "author": "Julian Ćwirko <julian.io>",
   "type": "module",