td-ai-tools 1.0.2

package/skills/stylesheet-migration/scripts/test_liquid_stylesheet_migrator.py

@@ -0,0 +1,254 @@
+from __future__ import annotations
+
+from pathlib import Path
+import subprocess
+import sys
+import tempfile
+import unittest
+
+from liquid_stylesheet_migrator import MigrationError, plan_migration, validate_migration
+
+
+class PlanMigrationTests(unittest.TestCase):
+    def test_inserts_include_below_leading_doc_comment(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "snippets" / "td-card.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{%- comment -%}\n"
+                "  Card docs.\n"
+                "{%- endcomment -%}\n"
+                "\n"
+                "<div>Before</div>\n"
+                "{% stylesheet %}\n"
+                "  .card { color: red; }\n"
+                "{% endstylesheet %}\n"
+                "<div>After</div>\n"
+            )
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertEqual(
+                plan.updated_source,
+                "{%- comment -%}\n"
+                "  Card docs.\n"
+                "{%- endcomment -%}\n"
+                "\n"
+                "{{ 'component-td-card.css' | asset_url | stylesheet_tag }}\n"
+                "\n"
+                "<div>Before</div>\n"
+                "<div>After</div>\n",
+            )
+
+    def test_inserts_include_at_file_start_without_doc_comment(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "\n"
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertEqual(
+                plan.updated_source,
+                "{{ 'section-td-banner.css' | asset_url | stylesheet_tag }}\n"
+                "\n"
+                "<section>Banner</section>\n",
+            )
+
+    def test_validate_migration_reports_conflicting_asset(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            asset_path = root / "assets" / "section-td-banner.css"
+            source_path.parent.mkdir(parents=True)
+            asset_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+            asset_path.write_text(".banner { color: red; }\n")
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            with self.assertRaises(MigrationError):
+                validate_migration(plan)
+
+    def test_reuses_existing_whitespace_control_include(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{{- 'section-td-banner.css' | asset_url | stylesheet_tag -}}\n"
+                "\n"
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertFalse(plan.include_inserted)
+            self.assertEqual(
+                plan.updated_source,
+                "{{- 'section-td-banner.css' | asset_url | stylesheet_tag -}}\n"
+                "\n"
+                "<section>Banner</section>\n",
+            )
+
+    def test_reuses_existing_include_with_stylesheet_tag_arguments(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{{ 'section-td-banner.css' | asset_url | stylesheet_tag: preload: true }}\n"
+                "\n"
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertFalse(plan.include_inserted)
+            self.assertEqual(
+                plan.updated_source,
+                "{{ 'section-td-banner.css' | asset_url | stylesheet_tag: preload: true }}\n"
+                "\n"
+                "<section>Banner</section>\n",
+            )
+
+    def test_ignores_stylesheet_blocks_inside_liquid_comments(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{% comment %}\n"
+                "{% stylesheet %}\n"
+                ".banner { color: red; }\n"
+                "{% endstylesheet %}\n"
+                "{% endcomment %}\n"
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertEqual(
+                plan.updated_source,
+                "{% comment %}\n"
+                "{% stylesheet %}\n"
+                ".banner { color: red; }\n"
+                "{% endstylesheet %}\n"
+                "{% endcomment %}\n"
+                "\n"
+                "{{ 'section-td-banner.css' | asset_url | stylesheet_tag }}\n"
+                "\n"
+                "<section>Banner</section>\n",
+            )
+            self.assertEqual(plan.asset_content, ".banner { color: blue; }\n")
+
+    def test_returns_none_when_only_commented_stylesheet_blocks_exist(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{% comment %}\n"
+                "{% stylesheet %}\n"
+                ".banner { color: red; }\n"
+                "{% endstylesheet %}\n"
+                "{% endcomment %}\n"
+                "<section>Banner</section>\n"
+            )
+
+            self.assertIsNone(plan_migration(root, source_path))
+
+    def test_preserves_crlf_line_endings_when_planning(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "snippets" / "td-card.liquid"
+            source_path.parent.mkdir(parents=True)
+            source_text = (
+                "{% stylesheet %}\r\n"
+                ".card { color: red; }\r\n"
+                "{% endstylesheet %}\r\n"
+                "<div>Card</div>\r\n"
+            )
+            source_path.write_text(source_text)
+
+            plan = plan_migration(root, source_path)
+
+            self.assertIsNotNone(plan)
+            assert plan is not None
+            self.assertEqual(
+                plan.updated_source,
+                "{{ 'component-td-card.css' | asset_url | stylesheet_tag }}\r\n"
+                "\r\n"
+                "<div>Card</div>\r\n",
+            )
+            self.assertEqual(plan.asset_content, ".card { color: red; }\r\n")
+
+    def test_dry_run_fails_when_existing_asset_conflicts(self) -> None:
+        with tempfile.TemporaryDirectory() as tmp:
+            root = Path(tmp)
+            source_path = root / "sections" / "td-banner.liquid"
+            asset_path = root / "assets" / "section-td-banner.css"
+            source_path.parent.mkdir(parents=True)
+            asset_path.parent.mkdir(parents=True)
+            source_path.write_text(
+                "{% stylesheet %}\n"
+                ".banner { color: blue; }\n"
+                "{% endstylesheet %}\n"
+                "<section>Banner</section>\n"
+            )
+            asset_path.write_text(".banner { color: red; }\n")
+
+            result = subprocess.run(
+                [
+                    sys.executable,
+                    str(Path(__file__).with_name("migrate_stylesheet_tags.py")),
+                    "--root",
+                    str(root),
+                    "--dry-run",
+                ],
+                capture_output=True,
+                text=True,
+                check=False,
+            )
+
+            self.assertEqual(result.returncode, 1)
+            self.assertIn("ERROR sections/td-banner.liquid:", result.stderr)
+            self.assertNotIn("Would migrate sections/td-banner.liquid", result.stdout)
+
+
+if __name__ == "__main__":
+    unittest.main()

package/skills/td-js-vanilla-rules/SKILL.md

@@ -0,0 +1,70 @@
+---
+name: td-js-vanilla-rules
+description: Theory Digital vanilla JavaScript standards for Shopify theme work. Use when creating, modifying, refactoring, or debugging JavaScript in Shopify themes, including Web Component lifecycle, selector strategy, Swiper usage, accessibility state sync, and Shopify editor interaction hooks.
+---
+
+# TD Vanilla JavaScript Rules
+
+
+## Implementation Pattern
+
+- Implement JavaScript via Liquid `{% javascript %}` blocks with Web Components.
+- Guard custom element registration:
+  - `if (!customElements.get('td-component-name')) { customElements.define('td-component-name', ComponentClass); }`
+- Keep JavaScript minimal and event-driven.
+- Do not import unapproved third-party JavaScript.
+- If code directly uses/calls the Swiper custom element, ensure Swiper assets are included in that file.
+
+## Lifecycle Discipline
+
+- Use `disconnectedCallback` cleanup for listeners, timers, observers, and pending animation frames.
+- Keep interactive state deterministic across connect/disconnect/reconnect.
+
+## Accessibility Baseline
+
+- Use real buttons/links for interaction surfaces.
+- Keep `aria-expanded` and `aria-controls` synchronized with UI state.
+- Support Escape to close interactive UI.
+- Respect `prefers-reduced-motion` where motion/animation exists.
+
+## Selector and Hook Strategy
+
+- Use `data-td-*` attributes as behavior hooks for binding, lookup, targeting, and state reads/writes.
+- Use class selectors only for visual state toggles via `classList`.
+- Do not use classes as primary JavaScript query hooks when markup is editable.
+- If a new behavior hook is required, add a matching `data-td-*` attribute in the same change.
+- Centralize selectors/config in module or static constants (for example `SELECTORS`, limits, timeouts).
+
+## Exception Policy
+
+Class-based querying is allowed only when:
+
+- Markup is third-party or not editable, or
+- A framework/library API explicitly requires class targeting.
+
+Add a short inline comment when applying an exception.
+
+## Shopify Editor Hooks
+
+When component behavior depends on selected blocks, support:
+
+- `shopify:block:select`
+- `shopify:block:deselect`
+
+## Consistency and PR Safety
+
+- If markup hook attributes change, update corresponding JavaScript selectors in the same PR.
+- Before finishing, verify behavior queries are `data-td-*` based and class querying is limited to approved exceptions.
+
+## Completion Checklist
+
+Confirm before handing off:
+
+- Registration guard present.
+- Cleanup implemented in `disconnectedCallback`.
+- Behavior selectors use `data-td-*` hooks.
+- Dynamic selector inputs are escaped.
+- Accessibility attributes/Escape behavior are synchronized.
+- Reduced-motion behavior is handled when relevant.
+- Shopify block hooks are added where relevant.
+- Swiper assets are included where Swiper custom element usage exists.

package/skills/td-js-vanilla-rules/agents/openai.yaml

@@ -0,0 +1,3 @@
+interface:
+  display_name: "TD JS Rules"
+  short_description: "Apply Theory Digital JavaScript rules for Horizon components"

package/skills/td-review/SKILL.md

@@ -0,0 +1,122 @@
+---
+name: td-review
+description: Run parallel code review agents on a PR (including TD theme compliance) and produce a synthesized findings report. Does not post comments or take action — output is for human decision-making.
+user_invocable: true
+arguments:
+  - name: target
+    description: "PR number, GitHub URL, or blank for current branch"
+    required: false
+---
+
+# TD Review
+
+Run a multi-agent code review on a Shopify theme PR and produce a synthesized findings report with severity ratings and a TD compliance score.
+
+This skill **only produces findings**. It does not post PR comments, request changes, or take any action on the PR.
+
+## Prerequisites
+
+This skill depends on external agent definitions that must be available at runtime.
+
+**Claude Code plugin:**
+- `compound-engineering` — Provides the following review and research agents:
+  - `compound-engineering:review:security-sentinel`
+  - `compound-engineering:review:performance-oracle`
+  - `compound-engineering:review:julik-frontend-races-reviewer`
+  - `compound-engineering:review:pattern-recognition-specialist`
+  - `compound-engineering:review:architecture-strategist`
+  - `compound-engineering:review:code-simplicity-reviewer`
+  - `compound-engineering:research:git-history-analyzer`
+
+**Custom agent (this repository):**
+- `td-theme-reviewer` — Theory Digital's theme compliance reviewer. Must be registered as a custom agent type in Claude Code settings.
+
+**CLI tools:**
+- `gh` — GitHub CLI, authenticated with access to the target repository.
+
+## Workflow
+
+### Step 1: Determine Review Target
+
+1. If `$ARGUMENTS` contains a number or URL, use that as the PR target
+2. Otherwise, check the current branch for an associated PR via `gh pr view`
+3. Fetch PR metadata: `gh pr view --json number,title,body,files,headRefName,baseRefName,url`
+4. Ensure you are on the PR branch (use `gh pr checkout` if needed)
+
+### Step 2: Launch Review Agents in Parallel
+
+Launch ALL of these agents simultaneously using the Agent tool. Each agent receives the PR number, title, file list, and branch name.
+
+**Always launch:**
+
+1. **TD Theme Reviewer** (custom agent: `td-theme-reviewer`) — Enforces Theory Digital's theme customization ruleset. Produces a scored compliance report (0-100). This is the primary reviewer.
+
+2. **Security Sentinel** (`compound-engineering:review:security-sentinel`) — XSS in Liquid templates, unescaped output in JS contexts, third-party script risks, open redirects.
+
+3. **Performance Oracle** (`compound-engineering:review:performance-oracle`) — Bundle sizes, render-blocking resources, image optimization, Core Web Vitals impact.
+
+4. **Frontend Race Reviewer** (`compound-engineering:review:julik-frontend-races-reviewer`) — JS race conditions, `transitionend` without fallback, timer/observer cleanup in `disconnectedCallback`, async initialization timing.
+
+5. **Pattern Recognition** (`compound-engineering:review:pattern-recognition-specialist`) — Code consistency, naming conventions, duplication, anti-patterns across Liquid/CSS/JS.
+
+6. **Architecture Strategist** (`compound-engineering:review:architecture-strategist`) — Asset organization, section structure, component boundaries, configuration architecture.
+
+7. **Code Simplicity** (`compound-engineering:review:code-simplicity-reviewer`) — Unnecessary complexity, dead code, YAGNI violations.
+
+**Conditionally launch:**
+
+8. **Git History Analyzer** (`compound-engineering:research:git-history-analyzer`) — Only if the PR has 10+ commits. Analyzes commit progression, risk areas, rollbacks.
+
+### Step 3: Synthesize Findings
+
+Once all agents complete:
+
+1. Collect all findings from every agent
+2. Deduplicate — if multiple agents flag the same issue, merge into one finding and note which agents found it
+3. Categorize by severity:
+   - **P1 CRITICAL** — Security vulnerabilities, data loss, site-breaking bugs, CRITICAL TD compliance violations
+   - **P2 IMPORTANT** — Performance issues, memory leaks, MAJOR TD compliance violations
+   - **P3 NICE-TO-HAVE** — Code quality, minor consistency issues, MODERATE/MINOR TD violations
+4. Include the TD Compliance Score prominently
+
+### Step 4: Present Findings Report
+
+Present the final findings report using this exact format:
+
+```
+## Review Findings
+
+**TD Compliance Score: XX/100** — [verdict]
+**PR:** #[number] — [title]
+**Agents used:** [list]
+
+| #  | P  | Finding | File | Source |
+|----|----|---------|------|--------|
+| 1  | P1 | description | file:line | agent(s) |
+| 2  | P1 | description | file:line | agent(s) |
+| 3  | P2 | description | file:line | agent(s) |
+| ...| ...| ... | ... | ... |
+```
+
+This is the final output. Do not prompt the user for further action — the report is complete.
+
+### Prompt Templates for Agents
+
+When launching each agent, provide this context:
+
+```
+Review PR #[number] on branch `[branch]` — "[title]".
+
+Changed files:
+[file list from PR metadata]
+
+PR description:
+[body]
+
+Focus on [agent-specific focus area]. Read changed files using `git diff main...HEAD -- [file]` for context. Report findings with file path, line number, description, and severity.
+```
+
+For the TD Theme Reviewer agent specifically, also include:
+```
+Produce your full scored compliance report. Start at 100 and deduct per the scoring rubric.
+```

package/skills/td-review/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "TD Review"
+  short_description: "Multi-agent PR review findings report"
+  default_prompt: "Use $td-review to run parallel code review agents and produce a findings report."

package/skills/td-review/agents/td-theme-reviewer.md

@@ -0,0 +1,221 @@
+---
+name: td-theme-reviewer
+description: Reviews Shopify theme PRs against Theory Digital's strict theme customization ruleset. Enforces vendor isolation, file naming conventions, upgrade safety, and documentation requirements. Produces a scored compliance report.
+---
+
+You are a strict Shopify theme code reviewer enforcing Theory Digital's theme customization standards. Your job is to audit every changed file in a PR and flag violations. You do not suggest improvements — you enforce rules. Every violation must include the file path, line number, rule violated, and severity.
+
+## Scoring Rubric
+
+Score each PR from 0 to 100. Start at 100 and deduct points per violation:
+
+| Severity | Deduction | Examples |
+|----------|-----------|----------|
+| CRITICAL (-15 each) | Vendor file edited without TD CHANGE delimiters, hardcoded tracking scripts in layout/sections, `include` tag usage |
+| MAJOR (-10 each) | Custom file missing `td-` prefix, CSS/JS in vendor files, missing docs/changes.md entry, JSON template pointing to vendor section when custom logic exists |
+| MODERATE (-5 each) | Hardcoded values that should be settings/metafields, missing aria-labels or alt text, CSS not using variables, script tag in section/layout file |
+| MINOR (-2 each) | Missing web component definition guard, library not from assets, unorganized CSS blocks, missing templates-map entry |
+
+**Thresholds:**
+- 90-100: Ship it
+- 70-89: Fix before merge
+- 50-69: Significant rework needed
+- 0-49: Reject — structural violations
+
+## Rules
+
+### 1. Global Principles
+
+- Prefer extension points, theme settings, metafields, and app embeds over editing vendor files.
+- All custom code must live in clearly named files using the `td-` or `_td-` prefix.
+- Vendor files must remain untouched unless absolutely unavoidable.
+- JSON templates must activate custom sections rather than modifying vendor sections.
+- All global styling must be in `assets/td-updates.css` or `assets/td-base.css`.
+- All global JS must be in `assets/td-globals.js`.
+- All changes must be documented in `docs/changes.md`.
+
+**REJECT** any change that violates these principles without documented justification.
+
+### 2. Allowed vs Forbidden File Changes
+
+**Allowed:**
+- Creating new files with `td-` or `_td-` prefix in: `sections/`, `snippets/`, `assets/`, `blocks/`
+- Editing JSON templates to point to custom sections or change settings
+- Vendor file edits ONLY when delimited with:
+  ```
+  // ------------TD CHANGE-----------
+  // ----------END TD CHANGE---------
+  ```
+
+**Forbidden — flag immediately:**
+- Modifying vendor layout or template files unless unavoidable
+- Modifying vendor theme schema settings unless unavoidable
+- Adding tracking scripts directly into Liquid templates
+- Addition of `{% include %}` tags (must use `{% render %}`)
+
+### 3. Layout and Asset Rules
+
+**Required:**
+- All global CSS overrides in `assets/td-updates.css` or `assets/td-base.css`
+- All global JS in `assets/td-globals.js`
+- Global inclusion only via `snippets/td-globals.liquid`
+
+**Flag:**
+- Any CSS added to vendor files
+- Any JS added to vendor files
+- Any `<script>` tags added inside layout or section files
+- Missing or duplicated `td-globals` loading mechanism
+
+### 4. Section Customization Rules
+
+**Required workflow when modifying vendor UX:**
+1. Copy vendor section to `td-` prefixed file
+2. Make changes only in the copy
+3. Update JSON template to use the custom section
+
+**Flag:**
+- Direct edits in vendor sections (without TD CHANGE delimiters)
+- Changing vendor markup, loops, or settings in original files
+- JSON templates pointing to vendor sections when custom logic is introduced
+
+### 5. JavaScript and CSS Rules
+
+- Section/snippet-specific JS must be in `{% javascript %}` tags
+- JS should use custom web components wherever possible
+- Web components MUST check for definition before defining: `if (!customElements.get("name")) {`
+- Third-party libraries must not be imported — must come from `assets/`
+- Approved libraries: Swiper.js (only)
+- Section/snippet-specific CSS must be in `{% stylesheet %}` tags
+- CSS must use variables wherever possible
+
+### 6. Settings and Metafields Rules
+
+- All hardcoded values should be extracted to: theme settings, metafields, metaobjects, or dynamic sources
+- Custom copy, colors, toggles, and labels must be adjustable in settings
+- Colors should first be defined via color schemes, then provide override options
+
+**Flag:**
+- Hardcoded literals that should be configurable
+- Missing metafield-driven values for product or collection data
+
+### 7. Script and Integration Rules
+
+- App embeds must be used for pixels, analytics, and integrations wherever possible
+- Shopify's Customer Events and Pixels should be used when possible
+
+**Flag:**
+- Integration snippets placed in `theme.liquid`, section files, or template files
+- Hardcoded scripts outside `td-globals.js`
+- Missing documentation for integrations in `docs/changes.md`
+
+### 8. CSS Strategy Rules
+
+- No edits to vendor CSS
+- CSS variables should be used where the theme exposes them
+- Overrides must target only custom sections or scoped selectors
+
+**Flag:**
+- Global selectors affecting vendor code unintentionally
+- Overrides that should be variables
+- Large or unorganized custom CSS blocks
+
+### 9. Accessibility and Performance Rules
+
+**Check for:**
+- Missing `alt` text on images in custom sections
+- Buttons or links missing `aria-labels`
+- Keyboard inaccessibility
+- Excess DOM reflows or heavy loops
+- Oversized custom CSS or JS bundles
+- Liquid loops that are unoptimized or nested excessively
+
+### 10. Documentation Rules
+
+Every customization must be logged in `docs/changes.md` including:
+- File path
+- Purpose
+- Notes about upgrade impact
+- Whether it is an unavoidable vendor-file edit
+
+**Flag:**
+- New custom files without documentation
+- Vendor edits not documented as hotspots
+- Missing or outdated `templates-map` entries
+
+### 11. Upgrade-Safe Structure Enforcement
+
+**Required structure:**
+```
+layout/
+  theme.liquid           (only td-globals injected)
+sections/
+  vendor files untouched
+  td-*.liquid            (all modifications)
+snippets/
+  td-globals.liquid
+assets/
+  td-base.css
+  td-updates.css
+  td-globals.js
+templates/
+  *.json                 (point to td-* sections where applicable)
+docs/
+  changes.md
+  templates-map.md
+  hotspots.md            (if vendor edits exist)
+```
+
+**Flag any deviations** from this structure when custom functionality is introduced.
+
+### 12. Vendor File Edit Protocol
+
+Only permitted when unavoidable. **Require:**
+1. The smallest possible change
+2. Comments marking the edit:
+   ```
+   // ------------TD CHANGE-----------
+   // ----------END TD CHANGE---------
+   ```
+3. Documentation in `docs/changes.md` with reapply steps
+
+**Flag immediately:** Any vendor file change not annotated AND documented.
+
+## Review Process
+
+1. Get the list of changed files from the PR
+2. Categorize each file: vendor, custom (`td-*`), JSON template, config, docs, other
+3. For each vendor file changed — check for TD CHANGE delimiters and documentation
+4. For each custom file — check naming, isolation, settings usage, accessibility
+5. For each JSON template — verify it points to custom sections where custom logic exists
+6. Check `docs/changes.md` for completeness
+7. Check for forbidden patterns: `include` tags, hardcoded scripts, inline tracking
+8. Calculate score (start at 100, deduct per violation)
+9. Produce the report
+
+## Output Format
+
+```markdown
+## TD Theme Compliance Report
+
+**Score: XX/100** — [Ship it | Fix before merge | Significant rework | Reject]
+
+### Violations
+
+| # | Severity | Rule | File:Line | Description |
+|---|----------|------|-----------|-------------|
+| 1 | CRITICAL | 2.Forbidden | path:line | description |
+
+### File Audit
+
+| File | Type | Status | Notes |
+|------|------|--------|-------|
+| path | vendor/custom/template | PASS/FAIL | details |
+
+### Documentation Check
+- [ ] docs/changes.md updated
+- [ ] All new files documented
+- [ ] Vendor hotspots logged
+
+### Summary
+[Brief paragraph on overall compliance]
+```