youiyoux 0.1.14 → 0.1.15

package/dist/chunks/{chunk-F3KCL226.js → chunk-CZJFEND6.js}

@@ -4,7 +4,7 @@ import { createRequire as __youiRequire } from "node:module"; import { dirname a
 var PACKAGES = {
   core: () => import("./src-4BOFDAZD.js"),
   scanner: () => import("./src-6JO73FOS.js"),
-  discover: () => import("./src-7LETTRRF.js"),
+  discover: () => import("./src-IMWXYWQK.js"),
   tokens: () => import("./src-WMGLZKYK.js")
 };
 var loadPackage = (name) => PACKAGES[name]();

package/dist/chunks/{chunk-TPP4HLDB.js → chunk-DAGYR4NV.js}

@@ -574,7 +574,10 @@ var nodeFetcher = async (url, init) => {
     if (!location) throw new Error("redirect missing location");
     const next = new URL(location, url);
     if (!publicHttps(next.href)) throw new Error("redirect must use https on a public host");
-    if (next.origin !== new URL(url).origin) delete headers.authorization;
+    if (next.origin !== new URL(url).origin) {
+      delete headers.authorization;
+      delete headers["x-figma-token"];
+    }
     url = next.href;
   }
   throw new Error("too many redirects");
@@ -2009,7 +2012,7 @@ function bodyComponents(body) {
   return found;
 }
 async function readDesignMd(target, client, fetchedAt, readLocal) {
-  const text2 = target.local ? await readLocal(target.location).then((body2) => ({ body: body2, sha256: digestOf(body2) }), () => {
+  const text2 = target.local ? await readLocal(target.location).then((body2) => ({ body: cleanText(body2), sha256: digestOf(body2) }), () => {
     throw new IngestError(`could not read ${basename(target.location)}`);
   }) : await fetchText(client, target.location, "the DESIGN.md");
   const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(text2.body);
@@ -2151,7 +2154,7 @@ async function readGithub(target, client, fetchedAt) {
       throw new IngestError(`${repo}'s ${registry} is not JSON`);
     }
     const { items, invalid } = parseRegistryItems(value);
-    const built = new Set(files.filter((f) => /(^|\/)public\/r\/[^/]+\.json$/.test(f)));
+    const built = new Set(files.filter((f) => /(^|\/)public\/r\/[^/]+\.json$/.test(f) && /^[A-Za-z0-9._/-]+$/.test(f)));
     const inputs2 = items.filter(isCandidate).map((item) => {
       const servedAt = [...built].find((f) => f.endsWith(`/r/${item.name}.json`));
       return {
@@ -2216,7 +2219,7 @@ async function readStorybook(target, client, fetchedAt) {
     const value = got.value;
     const found = value.entries ?? value.stories;
     if (found && typeof found === "object" && !Array.isArray(found)) {
-      entries = found;
+      entries = cleanData(found);
       index = { body: got.result.body, url, sha256: got.result.sha256 };
       break;
     }
@@ -2340,12 +2343,12 @@ var digestOf = (value) => sha256(typeof value === "string" ? value : JSON.string
 async function fetchJson(client, url, what) {
   const got = await client.json(url, false);
   if (!got.ok) throw new IngestError(`could not read ${what} (${url}): ${got.status === 404 ? "not found" : got.message}`);
-  return got.value;
+  return cleanData(got.value);
 }
 async function fetchText(client, url, what) {
   const got = await client.get(url, "text/plain, text/markdown, */*");
   if (!got.ok) throw new IngestError(`could not read ${what} (${url}): ${got.status === 404 ? "not found" : got.message}`);
-  return { body: got.body, sha256: got.sha256, fetchedAt: got.fetchedAt };
+  return { body: cleanText(got.body), sha256: got.sha256, fetchedAt: got.fetchedAt };
 }
 async function ingestLink(link, options) {
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
@@ -2353,13 +2356,13 @@ async function ingestLink(link, options) {
   const fetchedAt = now().toISOString();
   const result = await (target.kind === "github" ? readGithub(target, options.client, fetchedAt) : target.kind === "storybook" ? readStorybook(target, options.client, fetchedAt) : target.kind === "figma" ? options.figma ? readFigma(target, options.client, fetchedAt) : Promise.reject(new IngestError("a Figma file is read through Figma's API: set FIGMA_TOKEN to a personal access token that can read the file (Figma > Settings > Security > Personal access tokens)")) : readDesignMd(target, options.client, fetchedAt, (path) => readFile3(path, "utf8")));
   const over = result.entries.length - INGEST_CAP;
-  return {
+  return cleanData({
     ...result,
     link: link.trim(),
     fetchedAt,
     entries: result.entries.slice(0, INGEST_CAP),
     notes: [...result.notes, ...over > 0 ? [`${over} more item${over === 1 ? "" : "s"} not read: at most ${INGEST_CAP} come from one link`] : []]
-  };
+  });
 }
 
 export {

package/dist/chunks/{chunk-JGEVNQ5R.js → chunk-FTL53MU3.js}

@@ -4,7 +4,7 @@ import {
   loadPackage,
   readTryIndex,
   send
-} from "./chunk-F3KCL226.js";
+} from "./chunk-CZJFEND6.js";
 import {
   writeFileAtomic
 } from "./chunk-S7UN5KQK.js";

package/dist/chunks/{chunk-FTF4MBV5.js → chunk-QEUZDGIF.js}

@@ -57,7 +57,7 @@ import { homedir, userInfo } from "node:os";
 import { join, resolve } from "node:path";
 async function swapImpact(candidate, family) {
   try {
-    const { discoverIndexPath, sharedStore } = await import("./src-7LETTRRF.js");
+    const { discoverIndexPath, sharedStore } = await import("./src-IMWXYWQK.js");
     const path = discoverIndexPath();
     if (!process.env.DATABASE_URL && !existsSync(path)) return null;
     const impact = await (await sharedStore(path, process.env, { readOnly: true })).swapImpact(candidate, family);
@@ -68,7 +68,7 @@ async function swapImpact(candidate, family) {
 }
 async function libraryLicence(id) {
   try {
-    const { discoverCacheDir, findListing } = await import("./src-7LETTRRF.js");
+    const { discoverCacheDir, findListing } = await import("./src-IMWXYWQK.js");
     const { entry } = await findListing(discoverCacheDir(void 0, process.env), id);
     return entry.id === id ? entry.license : null;
   } catch {
@@ -79,7 +79,7 @@ function workflowStateDir(project, state) {
   return resolve(state ?? join(homedir(), ".youi", "workflow", shortHash(`${project.repo.root}\0${project.root}`)));
 }
 async function ingest(link) {
-  const { readLink } = await import("./ingest-OF4Z33L2.js");
+  const { readLink } = await import("./ingest-R2TM3QBM.js");
   return readLink(link, { allowLocal: false });
 }
 async function startRuleEditor(options) {

package/dist/chunks/{chunk-EN64OSUT.js → chunk-T4EHV4XY.js}

@@ -9,7 +9,7 @@ import {
   startRuleEditor,
   style,
   truncate
-} from "./chunk-FTF4MBV5.js";
+} from "./chunk-QEUZDGIF.js";
 import {
   BASELINE_FILE,
   DEFAULT_EXCLUDE,
@@ -96,7 +96,7 @@ import {
   sharedStore,
   showFromCatalog,
   syncIndex
-} from "./chunk-TPP4HLDB.js";
+} from "./chunk-DAGYR4NV.js";
 import {
   checkpointSqlite,
   indexHome,
@@ -6001,7 +6001,7 @@ async function cmdLibrary(values, positionals) {
     return 0;
   }
   if (action === "ingest" && query && positionals.length === 2) {
-    const { fileIngestDraft, readLink, renderIngest } = await import("./ingest-OF4Z33L2.js");
+    const { fileIngestDraft, readLink, renderIngest } = await import("./ingest-R2TM3QBM.js");
     const p = values.draft ? await project(values) : null;
     const reading = await readLink(query, { allowLocal: true });
     const filed = p ? await fileIngestDraft(p, reading, values.state) : null;
@@ -6517,7 +6517,7 @@ async function cmdReport(values, positionals, io) {
   return result.code;
 }
 async function cmdMcp(values) {
-  const { startStdioServer } = await import("./src-3LEBH7E3.js");
+  const { startStdioServer } = await import("./src-OHHZY3TA.js");
   await startStdioServer({ projectRoot: values.project ?? process.cwd(), ...loadOptions(values), ...values.cache ? { discoverCache: values.cache } : {} });
   return -1;
 }

package/dist/chunks/{ingest-OF4Z33L2.js → ingest-R2TM3QBM.js}

@@ -4,7 +4,7 @@ import {
   plural,
   style,
   workflowStateDir
-} from "./chunk-FTF4MBV5.js";
+} from "./chunk-QEUZDGIF.js";
 import "./chunk-HII2I2PI.js";
 import "./chunk-42YJX3W5.js";
 import "./chunk-HIXGUALJ.js";
@@ -14,7 +14,7 @@ import "./chunk-WNTS7ZO4.js";
 // ../cli/src/ingest.ts
 import { userInfo } from "node:os";
 async function readLink(link, options) {
-  const { githubBuckets, ingestLink, PoliteClient } = await import("./src-7LETTRRF.js");
+  const { githubBuckets, ingestLink, PoliteClient } = await import("./src-IMWXYWQK.js");
   const env = options.env ?? process.env;
   const token = env.GITHUB_TOKEN || void 0;
   const figmaToken = env.FIGMA_TOKEN || void 0;

package/dist/chunks/{src-7LETTRRF.js → src-IMWXYWQK.js}

@@ -127,7 +127,7 @@ import {
   writeHttpCache,
   writeJson,
   writeSources
-} from "./chunk-TPP4HLDB.js";
+} from "./chunk-DAGYR4NV.js";
 import "./chunk-A2IZOTJG.js";
 import "./chunk-S7UN5KQK.js";
 import "./chunk-WNTS7ZO4.js";

package/dist/chunks/{src-3LEBH7E3.js → src-OHHZY3TA.js}

@@ -51,7 +51,7 @@ import {
   searchCatalog,
   sharedStore,
   showFromCatalog
-} from "./chunk-TPP4HLDB.js";
+} from "./chunk-DAGYR4NV.js";
 import {
   storeLocation
 } from "./chunk-A2IZOTJG.js";

package/dist/hub-previews.js

@@ -6,7 +6,7 @@ import {
 import {
   discoverCacheDir,
   loadIndex
-} from "./chunks/chunk-TPP4HLDB.js";
+} from "./chunks/chunk-DAGYR4NV.js";
 import "./chunks/chunk-A2IZOTJG.js";
 import {
   THUMBS_PATH,
@@ -17,8 +17,8 @@ import {
   selectCandidates,
   thumbsDir,
   writeThumbIndex
-} from "./chunks/chunk-JGEVNQ5R.js";
-import "./chunks/chunk-F3KCL226.js";
+} from "./chunks/chunk-FTL53MU3.js";
+import "./chunks/chunk-CZJFEND6.js";
 import "./chunks/chunk-FVVL5JCY.js";
 import "./chunks/chunk-S7UN5KQK.js";
 import "./chunks/chunk-WNTS7ZO4.js";

package/dist/hub-server.js

@@ -2,7 +2,7 @@
 import { createRequire as __youiRequire } from "node:module"; import { dirname as __youiDir } from "node:path"; import { fileURLToPath as __youiPath } from "node:url"; const require = __youiRequire(import.meta.url); const __youiDirname = __youiDir(__youiPath(import.meta.url));
 import {
   discoverThumbsMiddleware
-} from "./chunks/chunk-JGEVNQ5R.js";
+} from "./chunks/chunk-FTL53MU3.js";
 import {
   isLocalHost,
   loadPackage,
@@ -10,7 +10,7 @@ import {
   readTryIndex,
   send,
   tryMiddleware
-} from "./chunks/chunk-F3KCL226.js";
+} from "./chunks/chunk-CZJFEND6.js";
 import "./chunks/chunk-FVVL5JCY.js";
 import "./chunks/chunk-S7UN5KQK.js";
 import "./chunks/chunk-WNTS7ZO4.js";

package/dist/hub-snapshot.js

@@ -3,7 +3,7 @@ import { createRequire as __youiRequire } from "node:module"; import { dirname a
 import {
   loadPackage,
   tryProject
-} from "./chunks/chunk-F3KCL226.js";
+} from "./chunks/chunk-CZJFEND6.js";
 import "./chunks/chunk-FVVL5JCY.js";
 import "./chunks/chunk-WNTS7ZO4.js";
 

package/dist/youi.js

@@ -2,12 +2,12 @@
 import { createRequire as __youiRequire } from "node:module"; import { dirname as __youiDir } from "node:path"; import { fileURLToPath as __youiPath } from "node:url"; const require = __youiRequire(import.meta.url); const __youiDirname = __youiDir(__youiPath(import.meta.url));
 import {
   main
-} from "./chunks/chunk-EN64OSUT.js";
-import "./chunks/chunk-FTF4MBV5.js";
+} from "./chunks/chunk-T4EHV4XY.js";
+import "./chunks/chunk-QEUZDGIF.js";
 import "./chunks/chunk-HII2I2PI.js";
 import "./chunks/chunk-42YJX3W5.js";
 import "./chunks/chunk-ALQVHSF2.js";
-import "./chunks/chunk-TPP4HLDB.js";
+import "./chunks/chunk-DAGYR4NV.js";
 import "./chunks/chunk-A2IZOTJG.js";
 import "./chunks/chunk-FVVL5JCY.js";
 import "./chunks/chunk-HIXGUALJ.js";

package/dist/youiyoux.js

@@ -3,12 +3,12 @@ import { createRequire as __youiRequire } from "node:module"; import { dirname a
 import {
   COMMAND_NAMES,
   main
-} from "./chunks/chunk-EN64OSUT.js";
-import "./chunks/chunk-FTF4MBV5.js";
+} from "./chunks/chunk-T4EHV4XY.js";
+import "./chunks/chunk-QEUZDGIF.js";
 import "./chunks/chunk-HII2I2PI.js";
 import "./chunks/chunk-42YJX3W5.js";
 import "./chunks/chunk-ALQVHSF2.js";
-import "./chunks/chunk-TPP4HLDB.js";
+import "./chunks/chunk-DAGYR4NV.js";
 import "./chunks/chunk-A2IZOTJG.js";
 import "./chunks/chunk-FVVL5JCY.js";
 import "./chunks/chunk-HIXGUALJ.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "youiyoux",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "Your agent rebuilds components you already have. youiyoux catches it: npx youiyoux turns any repo into a shareable report of near-duplicate components, hardcoded token values and off-library imports, with the fixes.",
   "license": "MIT",
   "repository": {
@@ -46,9 +46,9 @@
     "typescript": "6.0.3"
   },
   "devDependencies": {
-    "@youiyoux/cli": "0.1.14",
-    "@youiyoux/core": "0.1.14",
-    "@youiyoux/scanner": "0.1.14"
+    "@youiyoux/cli": "0.1.15",
+    "@youiyoux/core": "0.1.15",
+    "@youiyoux/scanner": "0.1.15"
   },
   "exports": {
     "./package.json": "./package.json"