shadscan-vue 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.1.2](https://github.com/vinayakkulkarni/shadscan-vue/compare/v0.1.1...v0.1.2) (2026-07-26)
+
+
+### Bug Fixes
+
+* **rules:** detect the destructured useMagicKeys hotkey binding ([175fd5e](https://github.com/vinayakkulkarni/shadscan-vue/commit/175fd5e89549e2c91677b6a48974bc20c8b168d5))
+* **rules:** exempt icon-module icons and clarify the command-menu message ([904f76d](https://github.com/vinayakkulkarni/shadscan-vue/commit/904f76d3dfd7cc270cec65d6945c9a82cccb3455))
+
+## [0.1.1](https://github.com/vinayakkulkarni/shadscan-vue/compare/v0.1.0...v0.1.1) (2026-07-25)
+
+
+### Documentation
+
+* point the package and readmes at the live site ([72c9546](https://github.com/vinayakkulkarni/shadscan-vue/commit/72c9546592d4d95474c4266b1e62f654f4f21320))
+
 ## 0.1.0 (2026-07-25)
 
 

package/README.md

@@ -4,6 +4,8 @@
 
 Deterministic checks. Evidence. Agent-ready fixes. Static audit — no AI required.
 
+**[shadscan-vue.geoql.in](https://shadscan-vue.geoql.in)** — rule catalog, docs, and changelog.
+
 `shadscan-vue` audits **shadcn-vue** (Vue 3 + Vite) and **shadcn-nuxt** (Nuxt 4)
 applications for the fundamentals that are easy to skip and expensive to miss:
 theme wiring, command menus, route and error states, accessible controls, form

package/dist/index.js

@@ -1777,7 +1777,7 @@ const K_KEY_PATTERN = /\.key\s*===\s*['"]k['"]|key\s*===\s*['"]k['"]/iu;
 const PREVENT_DEFAULT_PATTERN = /preventDefault\s*\(/u;
 const TOGGLE_PATTERN = /\.value\s*=|=\s*!|toggle|open\s*=|\bset[A-Z]/u;
 const KEYDOWN_PATTERN = /keydown/u;
-const MAGIC_KEYS_CMD_K_PATTERN = /useMagicKeys[\s\S]*?(?:Meta|Cmd|Ctrl|Control)\s*\+\s*[Kk]/u;
+const MAGIC_KEYS_CMD_K_PATTERN = /useMagicKeys[\s\S]*?(?:(?:Meta|Cmd|Ctrl|Control)\s*\+\s*K|\b(?:meta|cmd|ctrl|control)_k\b)/iu;
 const WATCH_PATTERN = /\bwatch\s*\(/u;
 const isSourceFile$2 = (file) => file.kind === "vue" || file.kind === "ts" || file.kind === "js";
 const detectKeydownFlow = (text) => KEYDOWN_PATTERN.test(text) && MODIFIER_PATTERN$1.test(text) && K_KEY_PATTERN.test(text) && PREVENT_DEFAULT_PATTERN.test(text) && TOGGLE_PATTERN.test(text);
@@ -1852,9 +1852,9 @@ const commandMenuPresent = {
 		}]);
 		if (files.find((file) => templateHasAllParts(file)) !== void 0) return result.pass();
 		return result.fail([{
-			message: "No complete mounted app-level command menu was found.",
+			message: "The command module is installed but no template assembles it into a command menu.",
 			evidence: [],
-			remediation: "Ensure a single template renders CommandDialog, CommandInput, CommandEmpty, and at least one CommandItem together."
+			remediation: "Ensure a single template renders CommandDialog, CommandInput, CommandEmpty, and at least one CommandItem together. A hand-rolled palette misses the keyboard and labelling behaviour these parts provide."
 		}]);
 	}
 };
@@ -2803,9 +2803,19 @@ const baseIdentifier = (collection) => {
 	return /([A-Za-z_$][\w$]*)\s*$/u.exec(collection)?.[1];
 };
 /** True when the file's script region references the identifier. */
+const scriptSource = (file) => file.sfc?.descriptor.scriptSetup?.content ?? file.sfc?.descriptor.script?.content ?? "";
 const scriptDefines = (file, identifier) => {
-	const script = file.sfc?.descriptor.scriptSetup?.content ?? file.sfc?.descriptor.script?.content ?? "";
-	return new RegExp(`\\b${identifier}\\b`, "u").test(script);
+	return new RegExp(`\\b${identifier}\\b`, "u").test(scriptSource(file));
+};
+/**
+* A collection assigned a non-empty array literal at declaration cannot be
+* empty at runtime, so demanding an empty state for it reports a failure the
+* author cannot act on. Matches `const tabs = [` and typed forms such as
+* `const tabs: Tab[] = [`, then confirms the literal has at least one entry.
+*/
+const isStaticNonEmptyLiteral = (file, identifier) => {
+	const declaration = new RegExp(`\\b(?:const|let|var)\\s+${identifier}\\b[^=]*=\\s*\\[\\s*([^\\]])`, "su").exec(scriptSource(file));
+	return declaration !== null && declaration[1] !== void 0;
 };
 /** True when the file contains an empty-branch guard for the collection. */
 const hasEmptyBranch = (fileText, collection, identifier) => {
@@ -2847,7 +2857,7 @@ const emptyStatePresent = {
 			if (collection === void 0) continue;
 			const identifier = baseIdentifier(collection);
 			if (identifier === void 0) continue;
-			if (!scriptDefines(file, identifier)) continue;
+			if (!scriptDefines(file, identifier) || isStaticNonEmptyLiteral(file, identifier)) continue;
 			if (hasEmptyBranch(file.text, collection, identifier)) continue;
 			failures.push({
 				message: `<${element.tag}> iterates \`${collection}\` with no empty-state branch in this file.`,
@@ -3185,6 +3195,14 @@ const BUTTON_TAGS = /* @__PURE__ */ new Set([
 	"RouterLink",
 	"router-link"
 ]);
+/**
+* @nuxt/icon applies `{ "aria-hidden": true }` to every icon it renders (its
+* documented `attrs` default), so its `<Icon>` and `<NuxtIcon>` components are
+* already decorative without the author writing the attribute. Auditing them
+* reports a failure that cannot be acted on.
+*/
+const NUXT_ICON_MODULE = "@nuxt/icon";
+const NUXT_ICON_TAGS = /* @__PURE__ */ new Set(["icon", "nuxt-icon"]);
 const buttonIconsHaveDataIcon = {
 	id: "button-icons-have-data-icon",
 	title: "Icons inside controls are marked decorative",
@@ -3198,12 +3216,14 @@ const buttonIconsHaveDataIcon = {
 		"vite-vue",
 		"generic-vue"
 	],
-	run: async ({ sources, result }) => {
+	run: async ({ sources, discovery, result }) => {
 		const files = await sources();
 		const findings = [];
 		let evaluated = 0;
+		const iconModuleHidesIcons = discovery.dependencies[NUXT_ICON_MODULE] !== void 0;
 		forEachElement(files, (element, file, ancestors) => {
 			if (!isIconTag(element.tag)) return;
+			if (iconModuleHidesIcons && NUXT_ICON_TAGS.has(pascalToKebab(element.tag))) return;
 			if (!ancestors.some((ancestor) => BUTTON_TAGS.has(ancestor.tag))) return;
 			evaluated += 1;
 			const ariaHidden = findAttribute(element, "aria-hidden");
@@ -3225,7 +3245,7 @@ const buttonIconsHaveDataIcon = {
 //#region src/rules/production-polish/metadata-title-description-complete.ts
 const TITLE_PATTERN = /\b(?:title|titleTemplate)\s*:/u;
 const DESCRIPTION_PATTERN = /\bdescription\s*:/u;
-const HEAD_CALL_PATTERN = /\b(?:useSeoMeta|useHead|definePageMeta)\s*\(/u;
+const HEAD_CALL_PATTERN = /\b(?:useSeoMeta|useHead)\s*\(/u;
 const metadataTitleDescriptionComplete = {
 	id: "metadata-title-description-complete",
 	title: "Routable pages declare a title and description",