taste-lint 0.0.3 → 0.0.4

package/README.md

@@ -16,10 +16,10 @@ Scan your project with local checks and [Jev by TypeSafe AI](https://docs.typesa
 ## Install
 
 ```bash
-npm install -g taste-lint
+npx taste-lint@latest init
 ```
 
-Requires Node 24.11 or later.
+Requires Node 24.11 or later. Run from your project directory to install locally and add check scripts.
 
 ## Quickstart
 
@@ -27,11 +27,13 @@ Create a [Vercel AI Gateway key](https://vercel.com/docs/ai-gateway/authenticati
 
 ```bash
 export AI_GATEWAY_API_KEY="your-vercel-ai-gateway-key"
-taste-lint scan .
+npm run taste
 ```
 
 No account or config for taste-lint. AI checks send selected text and rule context to Vercel AI Gateway, billed to your account. Answers are cached for repeat runs.
 
+Run `npm run check:taste` for local checks without a key. Use your package manager in place of npm. Add `--agent` to init for agent instructions, or `--dry-run` to preview setup.
+
 ## What it checks
 
 - **Product interfaces:** copy, typography, interaction, and motion in JSX, TSX, and CSS.

package/dist/cli.js

@@ -16,7 +16,7 @@ import { mdxjs } from "micromark-extension-mdxjs";
 import { styleText } from "node:util";
 import os from "node:os";
 //#region package.json
-var version = "0.0.3";
+var version = "0.0.4";
 //#endregion
 //#region src/lib/stats.ts
 const makePRNG = (seed) => {
@@ -3063,10 +3063,10 @@ const at = (evidence, offset = 0) => ({
 	fired: true,
 	offset
 });
-const object$1 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+const object$2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 const json = (u) => {
 	try {
-		return object$1(JSON.parse(u.text));
+		return object$2(JSON.parse(u.text));
 	} catch {
 		throw new UnresolvedError("JSON is not parseable");
 	}
@@ -3101,7 +3101,7 @@ const REPOSITORY_RULES = [
 			"typings"
 		]) if (typeof value[key] === "string") entries.push(value[key]);
 		if (typeof value.bin === "string") entries.push(value.bin);
-		else entries.push(...Object.values(object$1(value.bin)).filter((v) => typeof v === "string"));
+		else entries.push(...Object.values(object$2(value.bin)).filter((v) => typeof v === "string"));
 		const visit = (v) => {
 			if (typeof v === "string") entries.push(v);
 			else if (v && typeof v === "object") for (const child of Object.values(v)) visit(child);
@@ -3112,7 +3112,7 @@ const REPOSITORY_RULES = [
 			const resolved = u.facts.repository.resolve(u.file, entry);
 			if (resolved === void 0) return at(`Entry escapes repository: ${entry}`);
 			if (!u.facts.repository.exists(resolved)) {
-				if (/^(?:\.\/)?(?:dist|build|lib)\//.test(entry) && object$1(value.scripts).build) throw new UnresolvedError(`Build output not available: ${entry}. Build or inspect the packed artifact.`);
+				if (/^(?:\.\/)?(?:dist|build|lib)\//.test(entry) && object$2(value.scripts).build) throw new UnresolvedError(`Build output not available: ${entry}. Build or inspect the packed artifact.`);
 				return at(`Missing package entry: ${entry}`);
 			}
 		}
@@ -3120,7 +3120,7 @@ const REPOSITORY_RULES = [
 	}, "Build and inspect the package, then make bin, exports, and declaration paths match its actual artifacts."),
 	make$1("dx", "package-bin-shebang", "CLI executable has no Node shebang", PKG, "scaffold-cli/references/scaffold-source.md", (u) => {
 		const value = json(u);
-		const bins = typeof value.bin === "string" ? [value.bin] : Object.values(object$1(value.bin)).filter((v) => typeof v === "string");
+		const bins = typeof value.bin === "string" ? [value.bin] : Object.values(object$2(value.bin)).filter((v) => typeof v === "string");
 		for (const bin of bins) {
 			if (!/\.[cm]?js$/.test(bin)) continue;
 			const resolved = u.facts.repository.resolve(u.file, bin);
@@ -3132,7 +3132,7 @@ const REPOSITORY_RULES = [
 		return none;
 	}, "Emit exactly one Node shebang in the published executable."),
 	make$1("dx", "exports-mixed-keys", "Package exports mixes conditions and subpaths", PKG, "dx-audit/rules/api-stable-contract.md", (u) => {
-		const keys = Object.keys(object$1(json(u).exports));
+		const keys = Object.keys(object$2(json(u).exports));
 		return keys.some((k) => k.startsWith(".")) && keys.some((k) => !k.startsWith(".")) ? at("Exports mixes subpath keys with condition keys at the same level") : none;
 	}, "Put conditions inside each exported subpath, or use a conditions-only root export."),
 	make$1("architecture", "undeclared-import", "Import has no declared package dependency", CODE, GUARD, (u) => {
@@ -3145,7 +3145,7 @@ const REPOSITORY_RULES = [
 			"devDependencies",
 			"peerDependencies",
 			"optionalDependencies"
-		].flatMap((key) => Object.keys(object$1(value[key])))]);
+		].flatMap((key) => Object.keys(object$2(value[key])))]);
 		for (const item of u.facts.imports) {
 			if (/^(?:\.|\/|#|~|[a-z]+:)/i.test(item.name) || builtins.has(item.name)) continue;
 			const name = item.name.startsWith("@") ? item.name.split("/").slice(0, 2).join("/") : item.name.split("/")[0];
@@ -3171,7 +3171,7 @@ const REPOSITORY_RULES = [
 	make$1("architecture", "missing-tsconfig-reference", "TypeScript project reference points to a missing target", ["**/tsconfig*.json"], GUARD, (u) => {
 		const value = json(u);
 		for (const entry of Array.isArray(value.references) ? value.references : []) {
-			const target = object$1(entry).path;
+			const target = object$2(entry).path;
 			if (typeof target !== "string") continue;
 			const resolved = u.facts.repository.resolve(u.file, target);
 			if (!resolved) throw new UnresolvedError("Project reference outside repository");
@@ -4554,6 +4554,125 @@ function registerExtractCommand(program) {
 	});
 }
 //#endregion
+//#region src/setup/init.ts
+const managers = [
+	"npm",
+	"pnpm",
+	"yarn",
+	"bun"
+];
+const lockfiles = {
+	bun: ["bun.lock", "bun.lockb"],
+	npm: ["package-lock.json", "npm-shrinkwrap.json"],
+	pnpm: ["pnpm-lock.yaml"],
+	yarn: ["yarn.lock"]
+};
+const marker = "<!-- taste-lint -->";
+const agentText = `${marker}
+## Taste Lint
+
+Run the local check with the project's check:taste script after editing copy or UI.
+For AI checks, preview the taste script with --dry-run, then run it with a user-supplied AI_GATEWAY_API_KEY.
+Fix act findings, review advisory findings in context, and recheck the edited files.
+Never invent a key or treat unknown checks as passes.
+<!-- /taste-lint -->
+`;
+function object$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function initProject(options) {
+	const root = path.resolve(options.root);
+	const manifestPath = path.join(root, "package.json");
+	let manifest;
+	try {
+		const parsed = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+		if (!object$1(parsed)) throw new Error("Expected an object");
+		manifest = parsed;
+	} catch {
+		throw new InputError("INVALID_PROJECT", "Run init in a project with a valid package.json, or use --root <path>.");
+	}
+	const declared = typeof manifest.packageManager === "string" ? manifest.packageManager.split("@")[0] : void 0;
+	const detected = managers.filter((manager) => lockfiles[manager].some((file) => fs.existsSync(path.join(root, file))));
+	const selected = options.pm ?? declared ?? (detected.length === 1 ? detected[0] : void 0);
+	if (!selected && detected.length > 1) throw new InputError("AMBIGUOUS_PACKAGE_MANAGER", "Multiple lockfiles found. Choose --pm npm, pnpm, yarn, or bun.");
+	const pm = selected ?? "npm";
+	if (!managers.includes(pm)) throw new InputError("INVALID_PACKAGE_MANAGER", "Choose --pm npm, pnpm, yarn, or bun.");
+	for (const field of [
+		"scripts",
+		"dependencies",
+		"devDependencies"
+	]) if (manifest[field] !== void 0 && !object$1(manifest[field])) throw new InputError("INVALID_PROJECT", `package.json ${field} must be an object.`);
+	const dependencies = {
+		...manifest.dependencies,
+		...manifest.devDependencies
+	};
+	const profile = [
+		"react",
+		"next",
+		"vue",
+		"svelte",
+		"astro"
+	].some((name) => name in dependencies) ? "product" : "writing";
+	const scripts = { ...manifest.scripts };
+	const added = [];
+	for (const [name, command] of Object.entries({
+		"check:taste": `taste-lint scan . --profile ${profile} --mechanical-only`,
+		taste: `taste-lint scan . --profile ${profile}`
+	})) if (!(name in scripts)) {
+		scripts[name] = command;
+		added.push(name);
+	}
+	const agentPath = path.join(root, "AGENTS.md");
+	const previousAgent = options.agent && fs.existsSync(agentPath) ? fs.readFileSync(agentPath, "utf-8") : "";
+	const addAgent = Boolean(options.agent && !previousAgent.includes(marker));
+	const needsDependency = !("taste-lint" in dependencies);
+	const installArgs = pm === "npm" ? ["install", "--save-dev"] : ["add", "--dev"];
+	installArgs.push(`taste-lint@^${version}`);
+	const shouldInstall = needsDependency && options.install !== false;
+	const result = {
+		agentAdded: addAgent,
+		dryRun: Boolean(options.dryRun),
+		installCommand: shouldInstall ? [pm, ...installArgs] : null,
+		packageManager: pm,
+		profile,
+		root,
+		scriptsAdded: added
+	};
+	if (options.dryRun) return result;
+	if (shouldInstall) {
+		const installed = spawnSync(pm, installArgs, {
+			cwd: root,
+			shell: false,
+			stdio: [
+				"ignore",
+				"inherit",
+				"inherit"
+			]
+		});
+		if (installed.error || installed.status !== 0) throw new InputError("INSTALL_FAILED", `Installation failed. Run ${pm} ${installArgs.join(" ")} and retry init.`);
+		manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+	}
+	if (added.length > 0) {
+		manifest.scripts = scripts;
+		fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+	}
+	if (addAgent) fs.writeFileSync(agentPath, `${previousAgent}${previousAgent ? "\n\n" : ""}${agentText}`);
+	return result;
+}
+//#endregion
+//#region src/commands/init.ts
+function registerInitCommand(program) {
+	program.command("init").description("Install Taste Lint locally and add project check scripts").option("--root <path>", "Project directory", process.cwd()).option("--pm <name>", "Package manager: npm, pnpm, yarn, or bun").option("--dry-run", "Preview setup without installing or writing files").option("--no-install", "Add scripts without installing the package").option("--agent", "Append Taste Lint guidance to AGENTS.md").action((options) => {
+		const result = initProject(options);
+		process.stdout.write(`${result.dryRun ? "Setup preview" : "Setup complete"}: ${result.packageManager}, ${result.profile} profile\n`);
+		process.stdout.write(`Scripts added: ${result.scriptsAdded.join(", ") || "none (existing scripts preserved)"}\n`);
+		if (result.installCommand) process.stdout.write(`Install: ${result.installCommand.join(" ")}\n`);
+		if (result.agentAdded) process.stdout.write("Agent instructions: AGENTS.md\n");
+		process.stdout.write(`\nRun ${result.packageManager} run check:taste for local checks.\nSet AI_GATEWAY_API_KEY, then run ${result.packageManager} run taste for AI checks.\n`);
+		if (options.install === false) process.stdout.write("Installation skipped; the scripts require taste-lint to be installed.\n");
+	});
+}
+//#endregion
 //#region src/lib/spawn.ts
 function spawnCapture(cmd, argv, options = {}) {
 	return new Promise((resolve, reject) => {
@@ -6430,6 +6549,7 @@ Without a key: taste-lint scan . --mechanical-only
 Get a key: https://vercel.com/docs/ai-gateway/authentication-and-byok/api-keys
 `);
 registerLintCommand(program);
+registerInitCommand(program);
 registerScanCommand(program);
 registerExtractCommand(program);
 registerRulesCommand(program);