stimeo-ui 0.16.0 → 0.18.0

package/dist/inspector/cli_bin.js

@@ -5,9 +5,6 @@ import { relative, join, dirname, extname } from 'path';
 import { fileURLToPath } from 'url';
 import { createInterface } from 'readline';
 
-// src/inspector/cli_bin.ts
-
-// src/inspector/announcer_rules.ts
 var ANNOUNCER_IDENTIFIER = "stimeo--announcer";
 var ANNOUNCING_CONTROLLERS = [
   "stimeo--auto-submit",
@@ -21,17 +18,20 @@ var ANNOUNCING_CONTROLLERS = [
   "stimeo--flash",
   "stimeo--form-field",
   "stimeo--frame-loading",
+  "stimeo--live-counter",
   "stimeo--meter",
   "stimeo--multi-select",
   "stimeo--nested-form",
   "stimeo--network-status",
   "stimeo--password-strength",
+  "stimeo--presence",
   "stimeo--progress",
   "stimeo--skeleton",
   "stimeo--sortable",
   "stimeo--spinner",
   "stimeo--submit-once",
-  "stimeo--tags-input"
+  "stimeo--tags-input",
+  "stimeo--typing-indicator"
 ];
 function positionAt(source, index) {
   const before = source.slice(0, index);
@@ -71,7 +71,30 @@ function announcerSeatingDiagnostic(sources) {
   };
 }
 
-// src/utils/declared_value.ts
+function matchesNumberBounds(value, bounds) {
+  if (!Number.isFinite(value)) {
+    const direction = value === Infinity ? "positive" : value === -Infinity ? "negative" : null;
+    if (direction === null) return false;
+    if (bounds.allowInfinity !== "both" && bounds.allowInfinity !== direction) return false;
+  }
+  if (bounds.min !== void 0 && value < bounds.min) return false;
+  if (bounds.max !== void 0 && value > bounds.max) return false;
+  if (bounds.exclusiveMin !== void 0 && value <= bounds.exclusiveMin) return false;
+  if (bounds.integer && !Number.isInteger(value)) return false;
+  if (bounds.allowedValues !== void 0 && !bounds.allowedValues.includes(value)) return false;
+  return true;
+}
+function decodeNumberValue(raw) {
+  return Number(raw.replace(/_/g, ""));
+}
+
+function toFiniteNumber(raw) {
+  if (typeof raw !== "number" && typeof raw !== "string") return null;
+  if (typeof raw === "string" && raw.trim().length === 0) return null;
+  const value = Number(raw);
+  return Number.isFinite(value) ? value : null;
+}
+
 function parseDeclared(raw, parse, fallback) {
   try {
     return parse(raw);
@@ -95,7 +118,6 @@ function parseJsonObject(raw) {
   return parsed;
 }
 
-// src/inspector/html_parser.ts
 var ERB_ELEMENT_TAG = "#erb";
 var VOID_ELEMENTS = /* @__PURE__ */ new Set([
   "area",
@@ -344,7 +366,6 @@ function walk(root, visit) {
   }
 }
 
-// src/inspector/ruby_scan.ts
 var SPACE = /* @__PURE__ */ new Set([" ", "	", "\n", "\r", "\f"]);
 var IDENT_START = /[A-Za-z_]/;
 var IDENT_CHAR = /[A-Za-z0-9_]/;
@@ -583,7 +604,6 @@ function heredocEnd(code, bodyStart, identifier) {
   return code.length;
 }
 
-// src/inspector/ruby_hash.ts
 function readDataOption(source, base) {
   const code = maskHeredocs(source);
   const attrs = [];
@@ -788,7 +808,6 @@ function skipValue(code, start) {
   return code.length;
 }
 
-// src/inspector/erb.ts
 var ERB_TAG = /<%[\s\S]*?%>/g;
 function neutralizeErb(source) {
   return source.replace(ERB_TAG, (match) => match.replace(/[^\n]/g, " "));
@@ -812,7 +831,6 @@ function erbElements(source) {
       tag: ERB_ELEMENT_TAG,
       attrs: option.attrs.map((attr) => toParsedAttr(attr, index)),
       start: tag.start,
-      // The token a reader can act on is the delimiter that opens the call.
       sourceLength: tag.codeStart - tag.start,
       end,
       container: end > tag.end,
@@ -851,7 +869,6 @@ function readErbTags(source) {
     }
     let close = raw.length - 2;
     if (raw[close - 1] === "-") close--;
-    if (close < open) close = open;
     tags.push({
       start,
       end: start + raw.length,
@@ -977,7 +994,6 @@ function identifierEnd(code, start) {
   return end;
 }
 
-// src/inspector/extract.ts
 var NAMESPACE_PREFIX = "stimeo--";
 function dasherize(value) {
   return value.replace(/([A-Z])/g, (_match, char) => `-${char.toLowerCase()}`);
@@ -1072,7 +1088,6 @@ function isStimeoDataAttr(attrName) {
   return attrName.startsWith(`data-${NAMESPACE_PREFIX}`);
 }
 
-// src/inspector/types.ts
 var DIAGNOSTIC_CODES = [
   "unknown-controller",
   "unknown-target",
@@ -1106,7 +1121,6 @@ var DIAGNOSTIC_CODES = [
   "unknown-ignore-code"
 ];
 
-// src/inspector/check.ts
 function isDescendantOf(node, ancestor) {
   for (let current = node.parent; current; current = current.parent) {
     if (current === ancestor) return true;
@@ -1559,7 +1573,19 @@ function checkSource(source, manifest) {
         if (isDynamicValue(written)) continue;
         const value = written.value;
         if (value.length === 0) {
-          if (!rule.required || !readable) continue;
+          if (!readable) continue;
+          if (rule.numeric && !rule.required) {
+            report(
+              element,
+              "invalid-action-param",
+              "error",
+              `"${value}" is not a finite "${rule.param}" this action reads.`,
+              written,
+              rule.suggestion
+            );
+            continue;
+          }
+          if (!rule.required) continue;
           report(
             element,
             "missing-action-param",
@@ -1570,16 +1596,19 @@ function checkSource(source, manifest) {
           );
           continue;
         }
-        if (rule.integer && !Number.isInteger(Number(value))) {
-          report(
-            element,
-            "invalid-action-param",
-            "error",
-            `"${value}" is not an "${rule.param}" this action reads. It accepts a whole number.`,
-            written,
-            rule.suggestion
-          );
-          continue;
+        if (rule.numeric || rule.integer) {
+          const numeric = toFiniteNumber(decodeActionParamLiteral(value));
+          if (numeric === null || rule.integer && !Number.isInteger(numeric)) {
+            report(
+              element,
+              "invalid-action-param",
+              "error",
+              `"${value}" is not an "${rule.param}" this action reads. It accepts ${rule.integer ? "a whole number" : "a finite number"}.`,
+              written,
+              rule.suggestion
+            );
+            continue;
+          }
         }
         if (!rule.allowedValues || rule.allowedValues.includes(value)) continue;
         const best = nearestName(value, rule.allowedValues);
@@ -1871,8 +1900,9 @@ function checkSource(source, manifest) {
       for (const element of elements) {
         if (!hasReadableMarkup(element)) continue;
         if (hostIsAllowed(element, rule) !== false) continue;
-        const type = element.attrs.find((attr) => attr.name === "type");
-        const detail = element.tag === "button" ? `the unsupported ${type ? `type="${type.value}"` : 'implicit type="submit"'}` : `an unsupported interactive <${element.tag}>`;
+        const byType = element.tag === "button" && rule.mode !== "non-interactive";
+        const type = byType ? element.attrs.find((attr) => attr.name === "type") : void 0;
+        const detail = byType ? `the unsupported ${type ? `type="${type.value}"` : 'implicit type="submit"'}` : `an unsupported interactive <${element.tag}>`;
         report(
           element,
           "invalid-host",
@@ -1997,8 +2027,6 @@ function checkSource(source, manifest) {
           `The ${where} of "${identifier}" must also declare "${rule.controller}" in data-controller.`,
           declared ?? el,
           rule.suggestion,
-          // Appending to an existing list is unambiguous; creating the
-          // attribute from nothing is an insertion the anchor cannot express.
           declared ? valueFix(
             declared,
             `${declared.value.trim()} ${rule.controller}`.trim(),
@@ -2048,9 +2076,11 @@ function checkSource(source, manifest) {
       const what = describeCounted(rule.target, rule.attr, rule.values);
       const where = rule.within === "" ? "controller scope" : `"${rule.within}" target`;
       for (const container of containers) {
+        if (rule.excludeTemplateContents && crossesTemplateContent(container, node)) continue;
         const matched = [];
         for (const el of counted) {
           if (!isSelfOrDescendantOf(el, container)) continue;
+          if (rule.excludeTemplateContents && crossesTemplateContent(el, node)) continue;
           if (rule.attr === void 0) {
             matched.push({ el, at: el });
             continue;
@@ -2067,7 +2097,7 @@ function checkSource(source, manifest) {
             report(
               el,
               "cardinality-violation",
-              "error",
+              rule.severity ?? "error",
               `"${identifier}" allows at most ${rule.max} ${what} per ${where}, but found ${matched.length}.`,
               at,
               rule.suggestion
@@ -2079,7 +2109,7 @@ function checkSource(source, manifest) {
           report(
             container,
             "cardinality-violation",
-            complete ? "error" : "warning",
+            complete ? rule.severity ?? "error" : "warning",
             `"${identifier}" requires at least ${rule.min} ${what} per ${where}, but found ${matched.length}.`,
             container,
             complete ? rule.suggestion : UNRESOLVED_TARGET_HINT
@@ -2133,14 +2163,20 @@ function declaredConstraint(controller, valueToken) {
 function valueSatisfiesConstraint(raw, constraint) {
   if (constraint.type === "string") return stringValueSatisfies(raw, constraint);
   const value = decodeNumericValue(raw);
-  if (Number.isNaN(value)) return false;
-  if (constraint.finite && !Number.isFinite(value)) return false;
+  if (constraint.finite === true && !matchesNumberBounds(value, { ...constraint}))
+    return false;
+  if (constraint.finite !== true) {
+    const bounds = {
+      ...constraint,
+      allowInfinity: constraint.allowInfinity ?? "both"
+    };
+    if (!matchesNumberBounds(value, bounds)) return false;
+  }
   if (constraint.greaterThan !== void 0 && !(value > constraint.greaterThan)) return false;
-  if (constraint.integer && !Number.isInteger(value)) return false;
   return true;
 }
 function decodeNumericValue(raw) {
-  return Number(raw.replace(/_/g, ""));
+  return decodeNumberValue(raw);
 }
 function stringValueSatisfies(raw, constraint) {
   if (!("syntax" in constraint)) return constraint.allowedValues.includes(raw);
@@ -2154,10 +2190,15 @@ function stringValueSatisfies(raw, constraint) {
 }
 function describeValueConstraint(constraint) {
   if (constraint.type === "string") return describeStringConstraint(constraint);
-  const parts = [constraint.finite ? "a finite number" : "a number"];
+  const parts = [constraint.finite || constraint.allowInfinity ? "a finite number" : "a number"];
   if (constraint.greaterThan !== void 0) {
     parts.push(`greater than ${constraint.greaterThan}`);
   }
+  if (constraint.exclusiveMin !== void 0) parts.push(`greater than ${constraint.exclusiveMin}`);
+  if (constraint.min !== void 0) parts.push(`at least ${constraint.min}`);
+  if (constraint.max !== void 0) parts.push(`at most ${constraint.max}`);
+  if (constraint.allowedValues) parts.push(`among ${constraint.allowedValues.join(", ")}`);
+  if (constraint.allowInfinity) parts.push(`or ${constraint.allowInfinity} infinity`);
   if (constraint.integer) parts.push("with no fractional part");
   return parts.join(" ");
 }
@@ -2296,6 +2337,14 @@ var IDREF_ATTRS = /* @__PURE__ */ new Set([
   "aria-owns"
 ]);
 var IGNORE_ATTR = "data-stimeo-ignore";
+function crossesTemplateContent(node, scope) {
+  if (node === scope) return false;
+  for (let parent = node.parent; parent; parent = parent.parent) {
+    if (parent.tag === "template") return true;
+    if (parent === scope) return false;
+  }
+  return false;
+}
 function findOwner(node, identifier) {
   let current = node;
   while (current && current.tag !== "#root") {
@@ -2353,7 +2402,7 @@ function list(names) {
   return names.length > 0 ? names.map((n) => `"${n}"`).join(", ") : "(none)";
 }
 function describeAttrs(attrs) {
-  return attrs.length === 1 ? attrs[0] : attrs.join(" or ");
+  return attrs.join(" or ");
 }
 function nearestName(name, candidates) {
   if (name.length === 0) return void 0;
@@ -2395,8 +2444,14 @@ function levenshtein(a, b) {
   }
   return prev[cols];
 }
+function decodeActionParamLiteral(raw) {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return raw;
+  }
+}
 
-// src/inspector/examples.ts
 var EXAMPLES_SCHEMA_VERSION = 1;
 var CHECKABLE_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".erb", ".html", ".htm"]);
 function isCheckableFile(path) {
@@ -2440,6 +2495,21 @@ function isCompatibleManifest(value) {
     for (const field of CONTROLLER_ARRAY_FIELDS) {
       if (!Array.isArray(entry[field])) return false;
     }
+    const constraints = entry.valueConstraints;
+    for (const constraint of constraints) {
+      if (typeof constraint !== "object" || constraint === null) return false;
+      const numeric = constraint;
+      if (numeric.type !== "number") continue;
+      for (const field of ["min", "max", "exclusiveMin"]) {
+        const bound = numeric[field];
+        if (bound !== void 0 && (typeof bound !== "number" || !Number.isFinite(bound)))
+          return false;
+      }
+      if (numeric.allowedValues !== void 0 && (!Array.isArray(numeric.allowedValues) || !numeric.allowedValues.every((item) => typeof item === "number" && Number.isFinite(item))))
+        return false;
+      if (numeric.allowInfinity !== void 0 && !["negative", "positive", "both"].includes(String(numeric.allowInfinity)))
+        return false;
+    }
   }
   return true;
 }
@@ -2451,7 +2521,6 @@ function readManifestFile(path) {
   return parsed;
 }
 
-// src/inspector/cli.ts
 function bundledPath(name) {
   return join(dirname(fileURLToPath(import.meta.url)), name);
 }
@@ -2653,7 +2722,6 @@ ${USAGE}`);
   return summary.errorCount > 0 ? 1 : 0;
 }
 
-// src/inspector/mcp/prompts.ts
 var InvalidPromptRequestError = class extends Error {
 };
 function asPromptArgs(args, allowed) {
@@ -2782,7 +2850,6 @@ function getPrompt(name, args) {
   return prompt.build(record);
 }
 
-// src/inspector/mcp/tools.ts
 var READ_ONLY_ANNOTATIONS = { readOnlyHint: true, openWorldHint: false };
 var STRING_ARRAY = { type: "array", items: { type: "string" } };
 var DIAGNOSTIC_SCHEMA = {
@@ -3239,6 +3306,11 @@ var CONTROLLER_CONTRACT_SCHEMA = {
           values: { ...STRING_ARRAY, description: "Restrict the attribute to these values." },
           min: { type: "integer", description: "Smallest permitted count (inclusive)." },
           max: { type: "integer", description: "Largest permitted count (inclusive)." },
+          severity: { type: "string", enum: ["error", "warning"] },
+          excludeTemplateContents: {
+            type: "boolean",
+            description: "Exclude targets and containers across template contents from the scope."
+          },
           when: VALUE_CONDITION_SCHEMA,
           suggestion: { type: "string" }
         },
@@ -3458,13 +3530,13 @@ function callTool(context, name, args) {
   }
 }
 
-// src/inspector/mcp/server.ts
 var LATEST_PROTOCOL_VERSION = "2025-06-18";
 var SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
   "2025-03-26",
   "2024-11-05"
 ];
+var BATCH_PROTOCOL_VERSION = "2025-03-26";
 var JSONRPC_PARSE_ERROR = -32700;
 var JSONRPC_INVALID_REQUEST = -32600;
 var JSONRPC_METHOD_NOT_FOUND = -32601;
@@ -3488,16 +3560,10 @@ function asRecord(value) {
 }
 var McpSession = class {
   #context;
-  #initialized = false;
+  #protocolVersion = null;
   constructor(context) {
     this.#context = context;
   }
-  /**
-   * Handles one newline-delimited message.
-   *
-   * @returns The serialized response line, or null when no response is due
-   *   (blank lines and notifications).
-   */
   handleLine(line) {
     const trimmed = line.trim();
     if (trimmed === "") return null;
@@ -3507,9 +3573,28 @@ var McpSession = class {
     } catch {
       return failure(null, JSONRPC_PARSE_ERROR, "Parse error");
     }
-    return this.#handleMessage(message);
+    if (Array.isArray(message)) return this.#handleBatch(message);
+    return this.#handleMessage(message, false);
   }
-  #handleMessage(message) {
+  #handleBatch(messages) {
+    if (this.#protocolVersion !== BATCH_PROTOCOL_VERSION) {
+      return failure(
+        null,
+        JSONRPC_INVALID_REQUEST,
+        `Invalid request: JSON-RPC batches are accepted only in a session that negotiated protocol version ${BATCH_PROTOCOL_VERSION}.`
+      );
+    }
+    if (messages.length === 0) {
+      return failure(null, JSONRPC_INVALID_REQUEST, "Invalid request: empty batch");
+    }
+    const responses = [];
+    for (const message of messages) {
+      const response = this.#handleMessage(message, true);
+      if (response !== null) responses.push(response);
+    }
+    return responses.length === 0 ? null : `[${responses.join(",")}]`;
+  }
+  #handleMessage(message, inBatch) {
     const record = asRecord(message);
     if (record === null || record.jsonrpc !== "2.0" || typeof record.method !== "string") {
       return failure(null, JSONRPC_INVALID_REQUEST, "Invalid request");
@@ -3523,12 +3608,19 @@ var McpSession = class {
     if (typeof id !== "string" && typeof id !== "number") {
       return failure(null, JSONRPC_INVALID_REQUEST, "Invalid request id");
     }
+    if (inBatch && method === "initialize") {
+      return failure(
+        id,
+        JSONRPC_INVALID_REQUEST,
+        "Invalid request: initialize must not be part of a JSON-RPC batch."
+      );
+    }
     return this.#handleRequest(id, method, record.params);
   }
   #handleRequest(id, method, params) {
     if (method === "initialize") return this.#initialize(id, params);
     if (method === "ping") return success(id, {});
-    if (!this.#initialized) {
+    if (this.#protocolVersion === null) {
       return failure(
         id,
         JSONRPC_SERVER_NOT_INITIALIZED,
@@ -3547,7 +3639,7 @@ var McpSession = class {
     const record = asRecord(params) ?? {};
     const requested = typeof record.protocolVersion === "string" ? record.protocolVersion : "";
     const protocolVersion = SUPPORTED_PROTOCOL_VERSIONS.includes(requested) ? requested : LATEST_PROTOCOL_VERSION;
-    this.#initialized = true;
+    this.#protocolVersion = protocolVersion;
     return success(id, {
       protocolVersion,
       capabilities: {
@@ -3560,12 +3652,6 @@ var McpSession = class {
         title: "Stimeo UI Inspector",
         version: this.#context.manifest.packageVersion
       },
-      // The server's own account of itself. Per the MCP schema this is a hint
-      // a client MAY put in front of the model, which makes it the earliest
-      // point this server can be routed to — clients that defer tool
-      // definitions still tend to load it alongside the tool names. Hence the
-      // trigger condition first, in the words a request would use, and a
-      // length that survives truncation.
       instructions: "Search for these tools whenever a task involves building, editing, or reviewing an accessible UI component in a Rails view \u2014 dialog/modal, drawer, dropdown menu, tabs, accordion, combobox, toast, and the rest of the catalog \u2014 or whenever HTML/ERB carrying stimeo--* attributes is in play. Stimeo UI is a headless Stimulus UI framework for Rails. Use stimeo_catalog to discover controllers, stimeo_controller for one controller's usage and accessibility contract, stimeo_example for verified reference markup, and stimeo_check to validate generated HTML/ERB before presenting it. The full manifest and every example are also exposed as resources (stimeo:// URIs), and the stimeo_build_ui / stimeo_fix_markup prompts bake this workflow into user-invokable templates."
     });
   }
@@ -3585,7 +3671,6 @@ var McpSession = class {
       return failure(id, JSONRPC_INTERNAL_ERROR, `Internal error: ${message}`);
     }
   }
-  /** Static resource listing: the manifest plus one example per controller. */
   #listResources() {
     const resources = [
       {
@@ -3678,7 +3763,6 @@ async function runMcpServer(io) {
   });
 }
 
-// src/inspector/cli_bin.ts
 var argv = process2.argv.slice(2);
 process2.stdout.on("error", (error) => {
   process2.exit(error.code === "EPIPE" ? 0 : 1);
@@ -3699,8 +3783,6 @@ if (argv[0] === "mcp") {
 `);
       }
     }).then(
-      // Set the exit code instead of calling process.exit so any buffered
-      // stdout responses are flushed before the process ends.
       () => {
         process2.exitCode = 0;
       },
@@ -3716,5 +3798,4 @@ if (argv[0] === "mcp") {
 } else {
   process2.exitCode = runCli(argv);
 }
-//# sourceMappingURL=cli_bin.js.map
 //# sourceMappingURL=cli_bin.js.map