{currentUser?.name}
+}
+```
+
+If two requests overlap, request A can set `currentUser`, then request B overwrites it before request A finishes rendering `Dashboard`.
+
+**Correct: keep request data local to the render tree**
+
+```tsx
+export default async function Page() {
+ const user = await auth()
+ return {user?.name}
+}
+```
+
+Safe exceptions:
+
+- Immutable static assets or config loaded once at module scope
+
+- Shared caches intentionally designed for cross-request reuse and keyed correctly
+
+- Process-wide singletons that do not store request- or user-specific mutable data
+
+For static assets and config, see [Hoist Static I/O to Module Level](./server-hoist-static-io.md).
+
+### 3.4 Cross-Request LRU Caching
+
+**Impact: HIGH (caches across requests)**
+
+`React.cache()` only works within one request. For data shared across sequential requests (user clicks button A then button B), use an LRU cache.
+
+**Implementation:**
+
+```typescript
+import { LRUCache } from 'lru-cache'
+
+const cache = new LRUCache
+ 
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: fontData }] }
+ )
+}
+```
+
+**Correct: loads once at module initialization**
+
+```typescript
+// app/api/og/route.tsx
+import { ImageResponse } from 'next/og'
+
+// Module-level: runs ONCE when module is first imported
+const fontData = fetch(
+ new URL('./fonts/Inter.ttf', import.meta.url)
+).then(res => res.arrayBuffer())
+
+const logoData = fetch(
+ new URL('./images/logo.png', import.meta.url)
+).then(res => res.arrayBuffer())
+
+export async function GET(request: Request) {
+ // Await the already-started promises
+ const [font, logo] = await Promise.all([fontData, logoData])
+
+ return new ImageResponse(
+
+ 
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: font }] }
+ )
+}
+```
+
+**Correct: synchronous fs at module level**
+
+```typescript
+// app/api/og/route.tsx
+import { ImageResponse } from 'next/og'
+import { readFileSync } from 'fs'
+import { join } from 'path'
+
+// Synchronous read at module level - blocks only during module init
+const fontData = readFileSync(
+ join(process.cwd(), 'public/fonts/Inter.ttf')
+)
+
+const logoData = readFileSync(
+ join(process.cwd(), 'public/images/logo.png')
+)
+
+export async function GET(request: Request) {
+ return new ImageResponse(
+
+
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: fontData }] }
+ )
+}
+```
+
+**Incorrect: reads config on every call**
+
+```typescript
+import fs from 'node:fs/promises'
+
+export async function processRequest(data: Data) {
+ const config = JSON.parse(
+ await fs.readFile('./config.json', 'utf-8')
+ )
+ const template = await fs.readFile('./template.html', 'utf-8')
+
+ return render(template, data, config)
+}
+```
+
+**Correct: hoists config and template to module level**
+
+```typescript
+import fs from 'node:fs/promises'
+
+const configPromise = fs
+ .readFile('./config.json', 'utf-8')
+ .then(JSON.parse)
+const templatePromise = fs.readFile('./template.html', 'utf-8')
+
+export async function processRequest(data: Data) {
+ const [config, template] = await Promise.all([
+ configPromise,
+ templatePromise,
+ ])
+
+ return render(template, data, config)
+}
+```
+
+When to use this pattern:
+
+- Loading fonts for OG image generation
+
+- Loading static logos, icons, or watermarks
+
+- Reading configuration files that don't change at runtime
+
+- Loading email templates or other static templates
+
+- Any static asset that's the same across all requests
+
+When not to use this pattern:
+
+- Assets that vary per request or user
+
+- Files that may change during runtime (use caching with TTL instead)
+
+- Large files that would consume too much memory if kept loaded
+
+- Sensitive data that shouldn't persist in memory
+
+With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute), module-level caching is especially effective because multiple concurrent requests share the same function instance. The static assets stay loaded in memory across requests without cold start penalties.
+
+In traditional serverless, each cold start re-executes module-level code, but subsequent warm invocations reuse the loaded assets until the instance is recycled.
+
+### 3.6 Minimize Serialization at RSC Boundaries
+
+**Impact: HIGH (reduces data transfer size)**
+
+The React Server/Client boundary serializes all object properties into strings and embeds them in the HTML response and subsequent RSC requests. This serialized data directly impacts page weight and load time, so **size matters a lot**. Only pass fields that the client actually uses.
+
+**Incorrect: serializes all 50 fields**
+
+```tsx
+async function Page() {
+ const user = await fetchUser() // 50 fields
+ return {user.name}
// uses 1 field
+}
+```
+
+**Correct: serializes only 1 field**
+
+```tsx
+async function Page() {
+ const user = await fetchUser()
+ return {name}
+}
+```
+
+### 3.7 Parallel Data Fetching with Component Composition
+
+**Impact: CRITICAL (eliminates server-side waterfalls)**
+
+React Server Components execute sequentially within a tree. Restructure with composition to parallelize data fetching.
+
+**Incorrect: Sidebar waits for Page's fetch to complete**
+
+```tsx
+export default async function Page() {
+ const header = await fetchHeader()
+ return (
+
+
+ )
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+```
+
+**Correct: both fetch simultaneously**
+
+```tsx
+async function Header() {
+ const data = await fetchHeader()
+ return {header}
+ {data}
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+
+export default function Page() {
+ return (
+
+
+ )
+}
+```
+
+**Alternative with children prop:**
+
+```tsx
+async function Header() {
+ const data = await fetchHeader()
+ return {data}
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+
+function Layout({ children }: { children: ReactNode }) {
+ return (
+
+
+ )
+}
+
+export default function Page() {
+ return (
+ {fullName}
+} +``` + +**Correct: derive during render** + +```tsx +function Form() { + const [firstName, setFirstName] = useState('First') + const [lastName, setLastName] = useState('Last') + const fullName = firstName + ' ' + lastName + + return{fullName}
+} +``` + +Reference: [https://react.dev/learn/you-might-not-need-an-effect](https://react.dev/learn/you-might-not-need-an-effect) + +### 5.2 Defer State Reads to Usage Point + +**Impact: MEDIUM (avoids unnecessary subscriptions)** + +Don't subscribe to dynamic state (searchParams, localStorage) if you only read it inside callbacks. + +**Incorrect: subscribes to all searchParams changes** + +```tsx +function ShareButton({ chatId }: { chatId: string }) { + const searchParams = useSearchParams() + + const handleShare = () => { + const ref = searchParams.get('ref') + shareChat(chatId, { ref }) + } + + return +} +``` + +**Correct: reads on demand, no subscription** + +```tsx +function ShareButton({ chatId }: { chatId: string }) { + const handleShare = () => { + const params = new URLSearchParams(window.location.search) + const ref = params.get('ref') + shareChat(chatId, { ref }) + } + + return +} +``` + +### 5.3 Do not wrap a simple expression with a primitive result type in useMemo + +**Impact: LOW-MEDIUM (wasted computation on every render)** + +When an expression is simple (few logical or arithmetical operators) and has a primitive result type (boolean, number, string), do not wrap it in `useMemo`. + +Calling `useMemo` and comparing hook dependencies may consume more resources than the expression itself. + +**Incorrect:** + +```tsx +function Header({ user, notifications }: Props) { + const isLoading = useMemo(() => { + return user.isLoading || notifications.isLoading + }, [user.isLoading, notifications.isLoading]) + + if (isLoading) return
+ {user.followers} followers
+ {user.posts} posts
+
+ )
+
+ return (
+
+
+ )
+}
+```
+
+Every time `UserProfile` renders, `Avatar` and `Stats` are new component types. React unmounts the old instances and mounts new ones, losing any internal state, running effects again, and recreating DOM nodes.
+
+**Correct: pass props instead**
+
+```tsx
+function Avatar({ src, theme }: { src: string; theme: string }) {
+ return (
+
+ {followers} followers
+ {posts} posts
+
+ )
+}
+
+function UserProfile({ user, theme }) {
+ return (
+
+
+ )
+}
+```
+
+**Symptoms of this bug:**
+
+- Input fields lose focus on every keystroke
+
+- Animations restart unexpectedly
+
+- `useEffect` cleanup/setup runs on every parent render
+
+- Scroll position resets inside the component
+
+### 5.5 Extract Default Non-primitive Parameter Value from Memoized Component to Constant
+
+**Impact: MEDIUM (restores memoization by using a constant for default value)**
+
+When memoized component has a default value for some non-primitive optional parameter, such as an array, function, or object, calling the component without that parameter results in broken memoization. This is because new value instances are created on every rerender, and they do not pass strict equality comparison in `memo()`.
+
+To address this issue, extract the default value into a constant.
+
+**Incorrect: `onClick` has different values on every rerender**
+
+```tsx
+const UserAvatar = memo(function UserAvatar({ onClick = () => {} }: { onClick?: () => void }) {
+ // ...
+})
+
+// Used without optional onClick
+{avatar}
+}
+```
+
+**Correct: skips computation when loading**
+
+```tsx
+const UserAvatar = memo(function UserAvatar({ user }: { user: User }) {
+ const id = useMemo(() => computeAvatarId(user), [user])
+ return
+
+ )
+}
+```
+
+**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders.
+
+### 5.7 Narrow Effect Dependencies
+
+**Impact: LOW (minimizes effect re-runs)**
+
+Specify primitive dependencies instead of objects to minimize effect re-runs.
+
+**Incorrect: re-runs on any user field change**
+
+```tsx
+useEffect(() => {
+ console.log(user.id)
+}, [user])
+```
+
+**Correct: re-runs only when id changes**
+
+```tsx
+useEffect(() => {
+ console.log(user.id)
+}, [user.id])
+```
+
+**For derived state, compute outside effect:**
+
+```tsx
+// Incorrect: runs on width=767, 766, 765...
+useEffect(() => {
+ if (width < 768) {
+ enableMobileMode()
+ }
+}, [width])
+
+// Correct: runs only on boolean transition
+const isMobile = width < 768
+useEffect(() => {
+ if (isMobile) {
+ enableMobileMode()
+ }
+}, [isMobile])
+```
+
+### 5.8 Put Interaction Logic in Event Handlers
+
+**Impact: MEDIUM (avoids effect re-runs and duplicate side effects)**
+
+If a side effect is triggered by a specific user action (submit, click, drag), run it in that event handler. Do not model the action as state + effect; it makes effects re-run on unrelated changes and can duplicate the action.
+
+**Incorrect: event modeled as state + effect**
+
+```tsx
+function Form() {
+ const [submitted, setSubmitted] = useState(false)
+ const theme = useContext(ThemeContext)
+
+ useEffect(() => {
+ if (submitted) {
+ post('/api/register')
+ showToast('Registered', theme)
+ }
+ }, [submitted, theme])
+
+ return
+}
+```
+
+**Correct: do it in the handler**
+
+```tsx
+function Form() {
+ const theme = useContext(ThemeContext)
+
+ function handleSubmit() {
+ post('/api/register')
+ showToast('Registered', theme)
+ }
+
+ return
+}
+```
+
+Reference: [https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler)
+
+### 5.9 Split Combined Hook Computations
+
+**Impact: MEDIUM (avoids recomputing independent steps)**
+
+When a hook contains multiple independent tasks with different dependencies, split them into separate hooks. A combined hook reruns all tasks when any dependency changes, even if some tasks don't use the changed value.
+
+**Incorrect: changing `sortOrder` recomputes filtering**
+
+```tsx
+const sortedProducts = useMemo(() => {
+ const filtered = products.filter((p) => p.category === category)
+ const sorted = filtered.toSorted((a, b) =>
+ sortOrder === "asc" ? a.price - b.price : b.price - a.price
+ )
+ return sorted
+}, [products, category, sortOrder])
+```
+
+**Correct: filtering only recomputes when products or category change**
+
+```tsx
+const filteredProducts = useMemo(
+ () => products.filter((p) => p.category === category),
+ [products, category]
+)
+
+const sortedProducts = useMemo(
+ () =>
+ filteredProducts.toSorted((a, b) =>
+ sortOrder === "asc" ? a.price - b.price : b.price - a.price
+ ),
+ [filteredProducts, sortOrder]
+)
+```
+
+This pattern also applies to `useEffect` when combining unrelated side effects:
+
+**Incorrect: both effects run when either dependency changes**
+
+```tsx
+useEffect(() => {
+ analytics.trackPageView(pathname)
+ document.title = `${pageTitle} | My App`
+}, [pathname, pageTitle])
+```
+
+**Correct: effects run independently**
+
+```tsx
+useEffect(() => {
+ analytics.trackPageView(pathname)
+}, [pathname])
+
+useEffect(() => {
+ document.title = `${pageTitle} | My App`
+}, [pageTitle])
+```
+
+**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, it automatically optimizes dependency tracking and may handle some of these cases for you.
+
+### 5.10 Subscribe to Derived State
+
+**Impact: MEDIUM (reduces re-render frequency)**
+
+Subscribe to derived boolean state instead of continuous values to reduce re-render frequency.
+
+**Incorrect: re-renders on every pixel change**
+
+```tsx
+function Sidebar() {
+ const width = useWindowWidth() // updates continuously
+ const isMobile = width < 768
+ return
+}
+```
+
+**Correct: re-renders only when boolean changes**
+
+```tsx
+function Sidebar() {
+ const isMobile = useMediaQuery('(max-width: 767px)')
+ return
+}
+```
+
+### 5.11 Use Functional setState Updates
+
+**Impact: MEDIUM (prevents stale closures and unnecessary callback recreations)**
+
+When updating state based on the current state value, use the functional update form of setState instead of directly referencing the state variable. This prevents stale closures, eliminates unnecessary dependencies, and creates stable callback references.
+
+**Incorrect: requires state as dependency**
+
+```tsx
+function TodoList() {
+ const [items, setItems] = useState(initialItems)
+
+ // Callback must depend on items, recreated on every items change
+ const addItems = useCallback((newItems: Item[]) => {
+ setItems([...items, ...newItems])
+ }, [items]) // ❌ items dependency causes recreations
+
+ // Risk of stale closure if dependency is forgotten
+ const removeItem = useCallback((id: string) => {
+ setItems(items.filter(item => item.id !== id))
+ }, []) // ❌ Missing items dependency - will use stale items!
+
+ return
+
+
+ )
+}
+```
+
+**When to use:**
+
+- Filtering/searching large lists
+
+- Expensive visualizations (charts, graphs) reacting to input
+
+- Any derived state that causes noticeable render delays
+
+**Note:** Wrap the expensive computation in `useMemo` with the deferred value as a dependency, otherwise it still runs on every render.
+
+Reference: [https://react.dev/reference/react/useDeferredValue](https://react.dev/reference/react/useDeferredValue)
+
+### 5.15 Use useRef for Transient Values
+
+**Impact: MEDIUM (avoids unnecessary re-renders on frequent updates)**
+
+When a value changes frequently and you don't want a re-render on every update (e.g., mouse trackers, intervals, transient flags), store it in `useRef` instead of `useState`. Keep component state for UI; use refs for temporary DOM-adjacent values. Updating a ref does not trigger a re-render.
+
+**Incorrect: renders every update**
+
+```tsx
+function Tracker() {
+ const [lastX, setLastX] = useState(0)
+
+ useEffect(() => {
+ const onMove = (e: MouseEvent) => setLastX(e.clientX)
+ window.addEventListener('mousemove', onMove)
+ return () => window.removeEventListener('mousemove', onMove)
+ }, [])
+
+ return (
+
+ )
+}
+```
+
+**Correct: no re-render for tracking**
+
+```tsx
+function Tracker() {
+ const lastXRef = useRef(0)
+ const dotRef = useRef` and animate the wrapper instead.
+
+**Incorrect: animating SVG directly - no hardware acceleration**
+
+```tsx
+function LoadingSpinner() {
+ return (
+
+ )
+}
+```
+
+**Correct: animating wrapper div - hardware accelerated**
+
+```tsx
+function LoadingSpinner() {
+ return (
+ ` to preserve state/DOM for expensive components that frequently toggle visibility.
+
+**Usage:**
+
+```tsx
+import { Activity } from 'react'
+
+function Dropdown({ isOpen }: Props) {
+ return (
+
+
+ )
+}
+```
+
+Avoids expensive re-renders and state loss.
+
+### 6.8 Use defer or async on Script Tags
+
+**Impact: HIGH (eliminates render-blocking)**
+
+Script tags without `defer` or `async` block HTML parsing while the script downloads and executes. This delays First Contentful Paint and Time to Interactive.
+
+- **`defer`**: Downloads in parallel, executes after HTML parsing completes, maintains execution order
+
+- **`async`**: Downloads in parallel, executes immediately when ready, no guaranteed order
+
+Use `defer` for scripts that depend on DOM or other scripts. Use `async` for independent scripts like analytics.
+
+**Incorrect: blocks rendering**
+
+```tsx
+export default function Document() {
+ return (
+
+
+
+
+
+ {/* content */}
+
+ )
+}
+```
+
+**Correct: non-blocking**
+
+```tsx
+import Script from 'next/script'
+
+export default function Page() {
+ return (
+ <>
+
+
+
+ )
+}
+```
+
+**Note:** In Next.js, prefer the `next/script` component with `strategy` prop instead of raw script tags:
+
+Reference: [https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script#defer](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script#defer)
+
+### 6.9 Use Explicit Conditional Rendering
+
+**Impact: LOW (prevents rendering 0 or NaN)**
+
+Use explicit ternary operators (`? :`) instead of `&&` for conditional rendering when the condition can be `0`, `NaN`, or other falsy values that render.
+
+**Incorrect: renders "0" when count is 0**
+
+```tsx
+function Badge({ count }: { count: number }) {
+ return (
+ {/* content */}
+}
+```
+
+**Example: preload critical fonts and styles**
+
+```tsx
+import { preload, preinit } from 'react-dom'
+
+export default function RootLayout({ children }) {
+ // Preload font file
+ preload('/fonts/inter.woff2', { as: 'font', type: 'font/woff2', crossOrigin: 'anonymous' })
+
+ // Fetch and apply critical stylesheet immediately
+ preinit('/styles/critical.css', { as: 'style' })
+
+ return (
+
+ {children}
+
+ )
+}
+```
+
+**Example: preload modules for code-split routes**
+
+```tsx
+import { preloadModule, preinitModule } from 'react-dom'
+
+function Navigation() {
+ const preloadDashboard = () => {
+ preloadModule('/dashboard.js', { as: 'script' })
+ }
+
+ return (
+
+ )
+}
+```
+
+**When to use each:**
+
+| API | Use case |
+
+|-----|----------|
+
+| `prefetchDNS` | Third-party domains you'll connect to later |
+
+| `preconnect` | APIs or CDNs you'll fetch from immediately |
+
+| `preload` | Critical resources needed for current page |
+
+| `preloadModule` | JS modules for likely next navigation |
+
+| `preinit` | Stylesheets/scripts that must execute early |
+
+| `preinitModule` | ES modules that must execute early |
+
+Reference: [https://react.dev/reference/react-dom#resource-preloading-apis](https://react.dev/reference/react-dom#resource-preloading-apis)
+
+### 6.11 Use useTransition Over Manual Loading States
+
+**Impact: LOW (reduces re-renders and improves code clarity)**
+
+Use `useTransition` instead of manual `useState` for loading states. This provides built-in `isPending` state and automatically manages transitions.
+
+**Incorrect: manual loading state**
+
+```tsx
+function SearchResults() {
+ const [query, setQuery] = useState('')
+ const [results, setResults] = useState([])
+ const [isLoading, setIsLoading] = useState(false)
+
+ const handleSearch = async (value: string) => {
+ setIsLoading(true)
+ setQuery(value)
+ const data = await fetchResults(value)
+ setResults(data)
+ setIsLoading(false)
+ }
+
+ return (
+ <>
+ handleSearch(e.target.value)} />
+ {isLoading && (null)
+
+ useEffect(() => {
+ if (ref.current && isHighlighted) {
+ ref.current.style.width = '100px'
+ const width = ref.current.offsetWidth // Forces layout
+ ref.current.style.height = '200px'
+ }
+ }, [isHighlighted])
+
+ return ()
+
+function cachedSlugify(text: string): string {
+ if (slugifyCache.has(text)) {
+ return slugifyCache.get(text)!
+ }
+ const result = slugify(text)
+ slugifyCache.set(text, result)
+ return result
+}
+
+function ProjectList({ projects }: { projects: Project[] }) {
+ return (
+ ()
+
+function getLocalStorage(key: string) {
+ if (!storageCache.has(key)) {
+ storageCache.set(key, localStorage.getItem(key))
+ }
+ return storageCache.get(key)
+}
+
+function setLocalStorage(key: string, value: string) {
+ localStorage.setItem(key, value)
+ storageCache.set(key, value) // keep cache in sync
+}
+```
+
+Use a Map (not a hook) so it works everywhere: utilities, event handlers, not just React components.
+
+**Cookie caching:**
+
+```typescript
+let cookieCache: Record | null = null
+
+function getCookie(name: string) {
+ if (!cookieCache) {
+ cookieCache = Object.fromEntries(
+ document.cookie.split('; ').map(c => c.split('='))
+ )
+ }
+ return cookieCache[name]
+}
+```
+
+**Important: invalidate on external changes**
+
+```typescript
+window.addEventListener('storage', (e) => {
+ if (e.key) storageCache.delete(e.key)
+})
+
+document.addEventListener('visibilitychange', () => {
+ if (document.visibilityState === 'visible') {
+ storageCache.clear()
+ }
+})
+```
+
+If storage can change externally (another tab, server-set cookies), invalidate cache:
+
+### 7.6 Combine Multiple Array Iterations
+
+**Impact: LOW-MEDIUM (reduces iterations)**
+
+Multiple `.filter()` or `.map()` calls iterate the array multiple times. Combine into one loop.
+
+**Incorrect: 3 iterations**
+
+```typescript
+const admins = users.filter(u => u.isAdmin)
+const testers = users.filter(u => u.isTester)
+const inactive = users.filter(u => !u.isActive)
+```
+
+**Correct: 1 iteration**
+
+```typescript
+const admins: User[] = []
+const testers: User[] = []
+const inactive: User[] = []
+
+for (const user of users) {
+ if (user.isAdmin) admins.push(user)
+ if (user.isTester) testers.push(user)
+ if (!user.isActive) inactive.push(user)
+}
+```
+
+### 7.7 Defer Non-Critical Work with requestIdleCallback
+
+**Impact: MEDIUM (keeps UI responsive during background tasks)**
+
+Use `requestIdleCallback()` to schedule non-critical work during browser idle periods. This keeps the main thread free for user interactions and animations, reducing jank and improving perceived performance.
+
+**Incorrect: blocks main thread during user interaction**
+
+```typescript
+function handleSearch(query: string) {
+ const results = searchItems(query)
+ setResults(results)
+
+ // These block the main thread immediately
+ analytics.track('search', { query })
+ saveToRecentSearches(query)
+ prefetchTopResults(results.slice(0, 3))
+}
+```
+
+**Correct: defers non-critical work to idle time**
+
+```typescript
+function handleSearch(query: string) {
+ const results = searchItems(query)
+ setResults(results)
+
+ // Defer non-critical work to idle periods
+ requestIdleCallback(() => {
+ analytics.track('search', { query })
+ })
+
+ requestIdleCallback(() => {
+ saveToRecentSearches(query)
+ })
+
+ requestIdleCallback(() => {
+ prefetchTopResults(results.slice(0, 3))
+ })
+}
+```
+
+**With timeout for required work:**
+
+```typescript
+// Ensure analytics fires within 2 seconds even if browser stays busy
+requestIdleCallback(
+ () => analytics.track('page_view', { path: location.pathname }),
+ { timeout: 2000 }
+)
+```
+
+**Chunking large tasks:**
+
+```typescript
+function processLargeDataset(items: Item[]) {
+ let index = 0
+
+ function processChunk(deadline: IdleDeadline) {
+ // Process items while we have idle time (aim for <50ms chunks)
+ while (index < items.length && deadline.timeRemaining() > 0) {
+ processItem(items[index])
+ index++
+ }
+
+ // Schedule next chunk if more items remain
+ if (index < items.length) {
+ requestIdleCallback(processChunk)
+ }
+ }
+
+ requestIdleCallback(processChunk)
+}
+```
+
+**With fallback for unsupported browsers:**
+
+```typescript
+const scheduleIdleWork = window.requestIdleCallback ?? ((cb: () => void) => setTimeout(cb, 1))
+
+scheduleIdleWork(() => {
+ // Non-critical work
+})
+```
+
+**When to use:**
+
+- Analytics and telemetry
+
+- Saving state to localStorage/IndexedDB
+
+- Prefetching resources for likely next actions
+
+- Processing non-urgent data transformations
+
+- Lazy initialization of non-critical features
+
+**When NOT to use:**
+
+- User-initiated actions that need immediate feedback
+
+- Rendering updates the user is waiting for
+
+- Time-sensitive operations
+
+### 7.8 Early Length Check for Array Comparisons
+
+**Impact: MEDIUM-HIGH (avoids expensive operations when lengths differ)**
+
+When comparing arrays with expensive operations (sorting, deep equality, serialization), check lengths first. If lengths differ, the arrays cannot be equal.
+
+In real-world applications, this optimization is especially valuable when the comparison runs in hot paths (event handlers, render loops).
+
+**Incorrect: always runs expensive comparison**
+
+```typescript
+function hasChanges(current: string[], original: string[]) {
+ // Always sorts and joins, even when lengths differ
+ return current.sort().join() !== original.sort().join()
+}
+```
+
+Two O(n log n) sorts run even when `current.length` is 5 and `original.length` is 100. There is also overhead of joining the arrays and comparing the strings.
+
+**Correct (O(1) length check first):**
+
+```typescript
+function hasChanges(current: string[], original: string[]) {
+ // Early return if lengths differ
+ if (current.length !== original.length) {
+ return true
+ }
+ // Only sort when lengths match
+ const currentSorted = current.toSorted()
+ const originalSorted = original.toSorted()
+ for (let i = 0; i < currentSorted.length; i++) {
+ if (currentSorted[i] !== originalSorted[i]) {
+ return true
+ }
+ }
+ return false
+}
+```
+
+This new approach is more efficient because:
+
+- It avoids the overhead of sorting and joining the arrays when lengths differ
+
+- It avoids consuming memory for the joined strings (especially important for large arrays)
+
+- It avoids mutating the original arrays
+
+- It returns early when a difference is found
+
+### 7.9 Early Return from Functions
+
+**Impact: LOW-MEDIUM (avoids unnecessary computation)**
+
+Return early when result is determined to skip unnecessary processing.
+
+**Incorrect: processes all items even after finding answer**
+
+```typescript
+function validateUsers(users: User[]) {
+ let hasError = false
+ let errorMessage = ''
+
+ for (const user of users) {
+ if (!user.email) {
+ hasError = true
+ errorMessage = 'Email required'
+ }
+ if (!user.name) {
+ hasError = true
+ errorMessage = 'Name required'
+ }
+ // Continues checking all users even after error found
+ }
+
+ return hasError ? { valid: false, error: errorMessage } : { valid: true }
+}
+```
+
+**Correct: returns immediately on first error**
+
+```typescript
+function validateUsers(users: User[]) {
+ for (const user of users) {
+ if (!user.email) {
+ return { valid: false, error: 'Email required' }
+ }
+ if (!user.name) {
+ return { valid: false, error: 'Name required' }
+ }
+ }
+
+ return { valid: true }
+}
+```
+
+### 7.10 Hoist RegExp Creation
+
+**Impact: LOW-MEDIUM (avoids recreation)**
+
+Don't create RegExp inside render. Hoist to module scope or memoize with `useMemo()`.
+
+**Incorrect: new RegExp every render**
+
+```tsx
+function Highlighter({ text, query }: Props) {
+ const regex = new RegExp(`(${query})`, 'gi')
+ const parts = text.split(regex)
+ return <>{parts.map((part, i) => ...)}
+}
+```
+
+**Correct: memoize or hoist**
+
+```tsx
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+
+function Highlighter({ text, query }: Props) {
+ const regex = useMemo(
+ () => new RegExp(`(${escapeRegex(query)})`, 'gi'),
+ [query]
+ )
+ const parts = text.split(regex)
+ return <>{parts.map((part, i) => ...)}
+}
+```
+
+**Warning: global regex has mutable state**
+
+```typescript
+const regex = /foo/g
+regex.test('foo') // true, lastIndex = 3
+regex.test('foo') // false, lastIndex = 0
+```
+
+Global regex (`/g`) has mutable `lastIndex` state:
+
+### 7.11 Use flatMap to Map and Filter in One Pass
+
+**Impact: LOW-MEDIUM (eliminates intermediate array)**
+
+Chaining `.map().filter(Boolean)` creates an intermediate array and iterates twice. Use `.flatMap()` to transform and filter in a single pass.
+
+**Incorrect: 2 iterations, intermediate array**
+
+```typescript
+const userNames = users
+ .map(user => user.isActive ? user.name : null)
+ .filter(Boolean)
+```
+
+**Correct: 1 iteration, no intermediate array**
+
+```typescript
+const userNames = users.flatMap(user =>
+ user.isActive ? [user.name] : []
+)
+```
+
+**More examples:**
+
+```typescript
+// Extract valid emails from responses
+// Before
+const emails = responses
+ .map(r => r.success ? r.data.email : null)
+ .filter(Boolean)
+
+// After
+const emails = responses.flatMap(r =>
+ r.success ? [r.data.email] : []
+)
+
+// Parse and filter valid numbers
+// Before
+const numbers = strings
+ .map(s => parseInt(s, 10))
+ .filter(n => !isNaN(n))
+
+// After
+const numbers = strings.flatMap(s => {
+ const n = parseInt(s, 10)
+ return isNaN(n) ? [] : [n]
+})
+```
+
+**When to use:**
+
+- Transforming items while filtering some out
+
+- Conditional mapping where some inputs produce no output
+
+- Parsing/validating where invalid inputs should be skipped
+
+### 7.12 Use Loop for Min/Max Instead of Sort
+
+**Impact: LOW (O(n) instead of O(n log n))**
+
+Finding the smallest or largest element only requires a single pass through the array. Sorting is wasteful and slower.
+
+**Incorrect (O(n log n) - sort to find latest):**
+
+```typescript
+interface Project {
+ id: string
+ name: string
+ updatedAt: number
+}
+
+function getLatestProject(projects: Project[]) {
+ const sorted = [...projects].sort((a, b) => b.updatedAt - a.updatedAt)
+ return sorted[0]
+}
+```
+
+Sorts the entire array just to find the maximum value.
+
+**Incorrect (O(n log n) - sort for oldest and newest):**
+
+```typescript
+function getOldestAndNewest(projects: Project[]) {
+ const sorted = [...projects].sort((a, b) => a.updatedAt - b.updatedAt)
+ return { oldest: sorted[0], newest: sorted[sorted.length - 1] }
+}
+```
+
+Still sorts unnecessarily when only min/max are needed.
+
+**Correct (O(n) - single loop):**
+
+```typescript
+function getLatestProject(projects: Project[]) {
+ if (projects.length === 0) return null
+
+ let latest = projects[0]
+
+ for (let i = 1; i < projects.length; i++) {
+ if (projects[i].updatedAt > latest.updatedAt) {
+ latest = projects[i]
+ }
+ }
+
+ return latest
+}
+
+function getOldestAndNewest(projects: Project[]) {
+ if (projects.length === 0) return { oldest: null, newest: null }
+
+ let oldest = projects[0]
+ let newest = projects[0]
+
+ for (let i = 1; i < projects.length; i++) {
+ if (projects[i].updatedAt < oldest.updatedAt) oldest = projects[i]
+ if (projects[i].updatedAt > newest.updatedAt) newest = projects[i]
+ }
+
+ return { oldest, newest }
+}
+```
+
+Single pass through the array, no copying, no sorting.
+
+**Alternative: Math.min/Math.max for small arrays**
+
+```typescript
+const numbers = [5, 2, 8, 1, 9]
+const min = Math.min(...numbers)
+const max = Math.max(...numbers)
+```
+
+This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see [the fiddle](https://jsfiddle.net/qw1jabsx/4/). Use the loop approach for reliability.
+
+### 7.13 Use Set/Map for O(1) Lookups
+
+**Impact: LOW-MEDIUM (O(n) to O(1))**
+
+Convert arrays to Set/Map for repeated membership checks.
+
+**Incorrect (O(n) per check):**
+
+```typescript
+const allowedIds = ['a', 'b', 'c', ...]
+items.filter(item => allowedIds.includes(item.id))
+```
+
+**Correct (O(1) per check):**
+
+```typescript
+const allowedIds = new Set(['a', 'b', 'c', ...])
+items.filter(item => allowedIds.has(item.id))
+```
+
+### 7.14 Use toSorted() Instead of sort() for Immutability
+
+**Impact: MEDIUM-HIGH (prevents mutation bugs in React state)**
+
+`.sort()` mutates the array in place, which can cause bugs with React state and props. Use `.toSorted()` to create a new sorted array without mutation.
+
+**Incorrect: mutates original array**
+
+```typescript
+function UserList({ users }: { users: User[] }) {
+ // Mutates the users prop array!
+ const sorted = useMemo(
+ () => users.sort((a, b) => a.name.localeCompare(b.name)),
+ [users]
+ )
+ return > }) {
+ const [frames, setFrames] = useState(null)
+
+ useEffect(() => {
+ if (enabled && !frames && typeof window !== 'undefined') {
+ import('./animation-frames.js')
+ .then(mod => setFrames(mod.frames))
+ .catch(() => setEnabled(false))
+ }
+ }, [enabled, frames, setEnabled])
+
+ if (!frames) return
+ {children}
+
+}
+```
+
+The `typeof window !== 'undefined'` check prevents bundling preloaded modules for SSR, optimizing server bundle size and build speed.
diff --git a/.agents/skills/vercel-react-best-practices/rules/client-event-listeners.md b/.agents/skills/vercel-react-best-practices/rules/client-event-listeners.md
new file mode 100644
index 0000000..aad4ae9
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/client-event-listeners.md
@@ -0,0 +1,74 @@
+---
+title: Deduplicate Global Event Listeners
+impact: LOW
+impactDescription: single listener for N components
+tags: client, swr, event-listeners, subscription
+---
+
+## Deduplicate Global Event Listeners
+
+Use `useSWRSubscription()` to share global event listeners across component instances.
+
+**Incorrect (N instances = N listeners):**
+
+```tsx
+function useKeyboardShortcut(key: string, callback: () => void) {
+ useEffect(() => {
+ const handler = (e: KeyboardEvent) => {
+ if (e.metaKey && e.key === key) {
+ callback()
+ }
+ }
+ window.addEventListener('keydown', handler)
+ return () => window.removeEventListener('keydown', handler)
+ }, [key, callback])
+}
+```
+
+When using the `useKeyboardShortcut` hook multiple times, each instance will register a new listener.
+
+**Correct (N instances = 1 listener):**
+
+```tsx
+import useSWRSubscription from 'swr/subscription'
+
+// Module-level Map to track callbacks per key
+const keyCallbacks = new Map void>>()
+
+function useKeyboardShortcut(key: string, callback: () => void) {
+ // Register this callback in the Map
+ useEffect(() => {
+ if (!keyCallbacks.has(key)) {
+ keyCallbacks.set(key, new Set())
+ }
+ keyCallbacks.get(key)!.add(callback)
+
+ return () => {
+ const set = keyCallbacks.get(key)
+ if (set) {
+ set.delete(callback)
+ if (set.size === 0) {
+ keyCallbacks.delete(key)
+ }
+ }
+ }
+ }, [key, callback])
+
+ useSWRSubscription('global-keydown', () => {
+ const handler = (e: KeyboardEvent) => {
+ if (e.metaKey && keyCallbacks.has(e.key)) {
+ keyCallbacks.get(e.key)!.forEach(cb => cb())
+ }
+ }
+ window.addEventListener('keydown', handler)
+ return () => window.removeEventListener('keydown', handler)
+ })
+}
+
+function Profile() {
+ // Multiple shortcuts will share the same listener
+ useKeyboardShortcut('p', () => { /* ... */ })
+ useKeyboardShortcut('k', () => { /* ... */ })
+ // ...
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/client-localstorage-schema.md b/.agents/skills/vercel-react-best-practices/rules/client-localstorage-schema.md
new file mode 100644
index 0000000..d30a1a7
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/client-localstorage-schema.md
@@ -0,0 +1,71 @@
+---
+title: Version and Minimize localStorage Data
+impact: MEDIUM
+impactDescription: prevents schema conflicts, reduces storage size
+tags: client, localStorage, storage, versioning, data-minimization
+---
+
+## Version and Minimize localStorage Data
+
+Add version prefix to keys and store only needed fields. Prevents schema conflicts and accidental storage of sensitive data.
+
+**Incorrect:**
+
+```typescript
+// No version, stores everything, no error handling
+localStorage.setItem('userConfig', JSON.stringify(fullUserObject))
+const data = localStorage.getItem('userConfig')
+```
+
+**Correct:**
+
+```typescript
+const VERSION = 'v2'
+
+function saveConfig(config: { theme: string; language: string }) {
+ try {
+ localStorage.setItem(`userConfig:${VERSION}`, JSON.stringify(config))
+ } catch {
+ // Throws in incognito/private browsing, quota exceeded, or disabled
+ }
+}
+
+function loadConfig() {
+ try {
+ const data = localStorage.getItem(`userConfig:${VERSION}`)
+ return data ? JSON.parse(data) : null
+ } catch {
+ return null
+ }
+}
+
+// Migration from v1 to v2
+function migrate() {
+ try {
+ const v1 = localStorage.getItem('userConfig:v1')
+ if (v1) {
+ const old = JSON.parse(v1)
+ saveConfig({ theme: old.darkMode ? 'dark' : 'light', language: old.lang })
+ localStorage.removeItem('userConfig:v1')
+ }
+ } catch {}
+}
+```
+
+**Store minimal fields from server responses:**
+
+```typescript
+// User object has 20+ fields, only store what UI needs
+function cachePrefs(user: FullUser) {
+ try {
+ localStorage.setItem('prefs:v1', JSON.stringify({
+ theme: user.preferences.theme,
+ notifications: user.preferences.notifications
+ }))
+ } catch {}
+}
+```
+
+**Always wrap in try-catch:** `getItem()` and `setItem()` throw in incognito/private browsing (Safari, Firefox), when quota exceeded, or when disabled.
+
+**Benefits:** Schema evolution via versioning, reduced storage size, prevents storing tokens/PII/internal flags.
diff --git a/.agents/skills/vercel-react-best-practices/rules/client-passive-event-listeners.md b/.agents/skills/vercel-react-best-practices/rules/client-passive-event-listeners.md
new file mode 100644
index 0000000..ce39a88
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/client-passive-event-listeners.md
@@ -0,0 +1,48 @@
+---
+title: Use Passive Event Listeners for Scrolling Performance
+impact: MEDIUM
+impactDescription: eliminates scroll delay caused by event listeners
+tags: client, event-listeners, scrolling, performance, touch, wheel
+---
+
+## Use Passive Event Listeners for Scrolling Performance
+
+Add `{ passive: true }` to touch and wheel event listeners to enable immediate scrolling. Browsers normally wait for listeners to finish to check if `preventDefault()` is called, causing scroll delay.
+
+**Incorrect:**
+
+```typescript
+useEffect(() => {
+ const handleTouch = (e: TouchEvent) => console.log(e.touches[0].clientX)
+ const handleWheel = (e: WheelEvent) => console.log(e.deltaY)
+
+ document.addEventListener('touchstart', handleTouch)
+ document.addEventListener('wheel', handleWheel)
+
+ return () => {
+ document.removeEventListener('touchstart', handleTouch)
+ document.removeEventListener('wheel', handleWheel)
+ }
+}, [])
+```
+
+**Correct:**
+
+```typescript
+useEffect(() => {
+ const handleTouch = (e: TouchEvent) => console.log(e.touches[0].clientX)
+ const handleWheel = (e: WheelEvent) => console.log(e.deltaY)
+
+ document.addEventListener('touchstart', handleTouch, { passive: true })
+ document.addEventListener('wheel', handleWheel, { passive: true })
+
+ return () => {
+ document.removeEventListener('touchstart', handleTouch)
+ document.removeEventListener('wheel', handleWheel)
+ }
+}, [])
+```
+
+**Use passive when:** tracking/analytics, logging, any listener that doesn't call `preventDefault()`.
+
+**Don't use passive when:** implementing custom swipe gestures, custom zoom controls, or any listener that needs `preventDefault()`.
diff --git a/.agents/skills/vercel-react-best-practices/rules/client-swr-dedup.md b/.agents/skills/vercel-react-best-practices/rules/client-swr-dedup.md
new file mode 100644
index 0000000..2a430f2
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/client-swr-dedup.md
@@ -0,0 +1,56 @@
+---
+title: Use SWR for Automatic Deduplication
+impact: MEDIUM-HIGH
+impactDescription: automatic deduplication
+tags: client, swr, deduplication, data-fetching
+---
+
+## Use SWR for Automatic Deduplication
+
+SWR enables request deduplication, caching, and revalidation across component instances.
+
+**Incorrect (no deduplication, each instance fetches):**
+
+```tsx
+function UserList() {
+ const [users, setUsers] = useState([])
+ useEffect(() => {
+ fetch('/api/users')
+ .then(r => r.json())
+ .then(setUsers)
+ }, [])
+}
+```
+
+**Correct (multiple instances share one request):**
+
+```tsx
+import useSWR from 'swr'
+
+function UserList() {
+ const { data: users } = useSWR('/api/users', fetcher)
+}
+```
+
+**For immutable data:**
+
+```tsx
+import { useImmutableSWR } from '@/lib/swr'
+
+function StaticContent() {
+ const { data } = useImmutableSWR('/api/config', fetcher)
+}
+```
+
+**For mutations:**
+
+```tsx
+import { useSWRMutation } from 'swr/mutation'
+
+function UpdateButton() {
+ const { trigger } = useSWRMutation('/api/user', updateUser)
+ return
+}
+```
+
+Reference: [https://swr.vercel.app](https://swr.vercel.app)
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-batch-dom-css.md b/.agents/skills/vercel-react-best-practices/rules/js-batch-dom-css.md
new file mode 100644
index 0000000..a62d84e
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-batch-dom-css.md
@@ -0,0 +1,107 @@
+---
+title: Avoid Layout Thrashing
+impact: MEDIUM
+impactDescription: prevents forced synchronous layouts and reduces performance bottlenecks
+tags: javascript, dom, css, performance, reflow, layout-thrashing
+---
+
+## Avoid Layout Thrashing
+
+Avoid interleaving style writes with layout reads. When you read a layout property (like `offsetWidth`, `getBoundingClientRect()`, or `getComputedStyle()`) between style changes, the browser is forced to trigger a synchronous reflow.
+
+**This is OK (browser batches style changes):**
+```typescript
+function updateElementStyles(element: HTMLElement) {
+ // Each line invalidates style, but browser batches the recalculation
+ element.style.width = '100px'
+ element.style.height = '200px'
+ element.style.backgroundColor = 'blue'
+ element.style.border = '1px solid black'
+}
+```
+
+**Incorrect (interleaved reads and writes force reflows):**
+```typescript
+function layoutThrashing(element: HTMLElement) {
+ element.style.width = '100px'
+ const width = element.offsetWidth // Forces reflow
+ element.style.height = '200px'
+ const height = element.offsetHeight // Forces another reflow
+}
+```
+
+**Correct (batch writes, then read once):**
+```typescript
+function updateElementStyles(element: HTMLElement) {
+ // Batch all writes together
+ element.style.width = '100px'
+ element.style.height = '200px'
+ element.style.backgroundColor = 'blue'
+ element.style.border = '1px solid black'
+
+ // Read after all writes are done (single reflow)
+ const { width, height } = element.getBoundingClientRect()
+}
+```
+
+**Correct (batch reads, then writes):**
+```typescript
+function avoidThrashing(element: HTMLElement) {
+ // Read phase - all layout queries first
+ const rect1 = element.getBoundingClientRect()
+ const offsetWidth = element.offsetWidth
+ const offsetHeight = element.offsetHeight
+
+ // Write phase - all style changes after
+ element.style.width = '100px'
+ element.style.height = '200px'
+}
+```
+
+**Better: use CSS classes**
+```css
+.highlighted-box {
+ width: 100px;
+ height: 200px;
+ background-color: blue;
+ border: 1px solid black;
+}
+```
+```typescript
+function updateElementStyles(element: HTMLElement) {
+ element.classList.add('highlighted-box')
+
+ const { width, height } = element.getBoundingClientRect()
+}
+```
+
+**React example:**
+```tsx
+// Incorrect: interleaving style changes with layout queries
+function Box({ isHighlighted }: { isHighlighted: boolean }) {
+ const ref = useRef(null)
+
+ useEffect(() => {
+ if (ref.current && isHighlighted) {
+ ref.current.style.width = '100px'
+ const width = ref.current.offsetWidth // Forces layout
+ ref.current.style.height = '200px'
+ }
+ }, [isHighlighted])
+
+ return ()
+
+function cachedSlugify(text: string): string {
+ if (slugifyCache.has(text)) {
+ return slugifyCache.get(text)!
+ }
+ const result = slugify(text)
+ slugifyCache.set(text, result)
+ return result
+}
+
+function ProjectList({ projects }: { projects: Project[] }) {
+ return (
+ ()
+
+function getLocalStorage(key: string) {
+ if (!storageCache.has(key)) {
+ storageCache.set(key, localStorage.getItem(key))
+ }
+ return storageCache.get(key)
+}
+
+function setLocalStorage(key: string, value: string) {
+ localStorage.setItem(key, value)
+ storageCache.set(key, value) // keep cache in sync
+}
+```
+
+Use a Map (not a hook) so it works everywhere: utilities, event handlers, not just React components.
+
+**Cookie caching:**
+
+```typescript
+let cookieCache: Record | null = null
+
+function getCookie(name: string) {
+ if (!cookieCache) {
+ cookieCache = Object.fromEntries(
+ document.cookie.split('; ').map(c => c.split('='))
+ )
+ }
+ return cookieCache[name]
+}
+```
+
+**Important (invalidate on external changes):**
+
+If storage can change externally (another tab, server-set cookies), invalidate cache:
+
+```typescript
+window.addEventListener('storage', (e) => {
+ if (e.key) storageCache.delete(e.key)
+})
+
+document.addEventListener('visibilitychange', () => {
+ if (document.visibilityState === 'visible') {
+ storageCache.clear()
+ }
+})
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-combine-iterations.md b/.agents/skills/vercel-react-best-practices/rules/js-combine-iterations.md
new file mode 100644
index 0000000..044d017
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-combine-iterations.md
@@ -0,0 +1,32 @@
+---
+title: Combine Multiple Array Iterations
+impact: LOW-MEDIUM
+impactDescription: reduces iterations
+tags: javascript, arrays, loops, performance
+---
+
+## Combine Multiple Array Iterations
+
+Multiple `.filter()` or `.map()` calls iterate the array multiple times. Combine into one loop.
+
+**Incorrect (3 iterations):**
+
+```typescript
+const admins = users.filter(u => u.isAdmin)
+const testers = users.filter(u => u.isTester)
+const inactive = users.filter(u => !u.isActive)
+```
+
+**Correct (1 iteration):**
+
+```typescript
+const admins: User[] = []
+const testers: User[] = []
+const inactive: User[] = []
+
+for (const user of users) {
+ if (user.isAdmin) admins.push(user)
+ if (user.isTester) testers.push(user)
+ if (!user.isActive) inactive.push(user)
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-early-exit.md b/.agents/skills/vercel-react-best-practices/rules/js-early-exit.md
new file mode 100644
index 0000000..f46cb89
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-early-exit.md
@@ -0,0 +1,50 @@
+---
+title: Early Return from Functions
+impact: LOW-MEDIUM
+impactDescription: avoids unnecessary computation
+tags: javascript, functions, optimization, early-return
+---
+
+## Early Return from Functions
+
+Return early when result is determined to skip unnecessary processing.
+
+**Incorrect (processes all items even after finding answer):**
+
+```typescript
+function validateUsers(users: User[]) {
+ let hasError = false
+ let errorMessage = ''
+
+ for (const user of users) {
+ if (!user.email) {
+ hasError = true
+ errorMessage = 'Email required'
+ }
+ if (!user.name) {
+ hasError = true
+ errorMessage = 'Name required'
+ }
+ // Continues checking all users even after error found
+ }
+
+ return hasError ? { valid: false, error: errorMessage } : { valid: true }
+}
+```
+
+**Correct (returns immediately on first error):**
+
+```typescript
+function validateUsers(users: User[]) {
+ for (const user of users) {
+ if (!user.email) {
+ return { valid: false, error: 'Email required' }
+ }
+ if (!user.name) {
+ return { valid: false, error: 'Name required' }
+ }
+ }
+
+ return { valid: true }
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-flatmap-filter.md b/.agents/skills/vercel-react-best-practices/rules/js-flatmap-filter.md
new file mode 100644
index 0000000..ee0edf0
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-flatmap-filter.md
@@ -0,0 +1,60 @@
+---
+title: Use flatMap to Map and Filter in One Pass
+impact: LOW-MEDIUM
+impactDescription: eliminates intermediate array
+tags: javascript, arrays, flatMap, filter, performance
+---
+
+## Use flatMap to Map and Filter in One Pass
+
+**Impact: LOW-MEDIUM (eliminates intermediate array)**
+
+Chaining `.map().filter(Boolean)` creates an intermediate array and iterates twice. Use `.flatMap()` to transform and filter in a single pass.
+
+**Incorrect (2 iterations, intermediate array):**
+
+```typescript
+const userNames = users
+ .map(user => user.isActive ? user.name : null)
+ .filter(Boolean)
+```
+
+**Correct (1 iteration, no intermediate array):**
+
+```typescript
+const userNames = users.flatMap(user =>
+ user.isActive ? [user.name] : []
+)
+```
+
+**More examples:**
+
+```typescript
+// Extract valid emails from responses
+// Before
+const emails = responses
+ .map(r => r.success ? r.data.email : null)
+ .filter(Boolean)
+
+// After
+const emails = responses.flatMap(r =>
+ r.success ? [r.data.email] : []
+)
+
+// Parse and filter valid numbers
+// Before
+const numbers = strings
+ .map(s => parseInt(s, 10))
+ .filter(n => !isNaN(n))
+
+// After
+const numbers = strings.flatMap(s => {
+ const n = parseInt(s, 10)
+ return isNaN(n) ? [] : [n]
+})
+```
+
+**When to use:**
+- Transforming items while filtering some out
+- Conditional mapping where some inputs produce no output
+- Parsing/validating where invalid inputs should be skipped
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-hoist-regexp.md b/.agents/skills/vercel-react-best-practices/rules/js-hoist-regexp.md
new file mode 100644
index 0000000..dae3fef
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-hoist-regexp.md
@@ -0,0 +1,45 @@
+---
+title: Hoist RegExp Creation
+impact: LOW-MEDIUM
+impactDescription: avoids recreation
+tags: javascript, regexp, optimization, memoization
+---
+
+## Hoist RegExp Creation
+
+Don't create RegExp inside render. Hoist to module scope or memoize with `useMemo()`.
+
+**Incorrect (new RegExp every render):**
+
+```tsx
+function Highlighter({ text, query }: Props) {
+ const regex = new RegExp(`(${query})`, 'gi')
+ const parts = text.split(regex)
+ return <>{parts.map((part, i) => ...)}
+}
+```
+
+**Correct (memoize or hoist):**
+
+```tsx
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+
+function Highlighter({ text, query }: Props) {
+ const regex = useMemo(
+ () => new RegExp(`(${escapeRegex(query)})`, 'gi'),
+ [query]
+ )
+ const parts = text.split(regex)
+ return <>{parts.map((part, i) => ...)}
+}
+```
+
+**Warning (global regex has mutable state):**
+
+Global regex (`/g`) has mutable `lastIndex` state:
+
+```typescript
+const regex = /foo/g
+regex.test('foo') // true, lastIndex = 3
+regex.test('foo') // false, lastIndex = 0
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-index-maps.md b/.agents/skills/vercel-react-best-practices/rules/js-index-maps.md
new file mode 100644
index 0000000..9d357a0
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-index-maps.md
@@ -0,0 +1,37 @@
+---
+title: Build Index Maps for Repeated Lookups
+impact: LOW-MEDIUM
+impactDescription: 1M ops to 2K ops
+tags: javascript, map, indexing, optimization, performance
+---
+
+## Build Index Maps for Repeated Lookups
+
+Multiple `.find()` calls by the same key should use a Map.
+
+**Incorrect (O(n) per lookup):**
+
+```typescript
+function processOrders(orders: Order[], users: User[]) {
+ return orders.map(order => ({
+ ...order,
+ user: users.find(u => u.id === order.userId)
+ }))
+}
+```
+
+**Correct (O(1) per lookup):**
+
+```typescript
+function processOrders(orders: Order[], users: User[]) {
+ const userById = new Map(users.map(u => [u.id, u]))
+
+ return orders.map(order => ({
+ ...order,
+ user: userById.get(order.userId)
+ }))
+}
+```
+
+Build map once (O(n)), then all lookups are O(1).
+For 1000 orders × 1000 users: 1M ops → 2K ops.
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-length-check-first.md b/.agents/skills/vercel-react-best-practices/rules/js-length-check-first.md
new file mode 100644
index 0000000..8b89573
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-length-check-first.md
@@ -0,0 +1,49 @@
+---
+title: Early Length Check for Array Comparisons
+impact: MEDIUM-HIGH
+impactDescription: avoids expensive operations when lengths differ
+tags: javascript, arrays, performance, optimization, comparison
+---
+
+## Early Length Check for Array Comparisons
+
+When comparing arrays with expensive operations (sorting, deep equality, serialization), check lengths first. If lengths differ, the arrays cannot be equal.
+
+In real-world applications, this optimization is especially valuable when the comparison runs in hot paths (event handlers, render loops).
+
+**Incorrect (always runs expensive comparison):**
+
+```typescript
+function hasChanges(current: string[], original: string[]) {
+ // Always sorts and joins, even when lengths differ
+ return current.sort().join() !== original.sort().join()
+}
+```
+
+Two O(n log n) sorts run even when `current.length` is 5 and `original.length` is 100. There is also overhead of joining the arrays and comparing the strings.
+
+**Correct (O(1) length check first):**
+
+```typescript
+function hasChanges(current: string[], original: string[]) {
+ // Early return if lengths differ
+ if (current.length !== original.length) {
+ return true
+ }
+ // Only sort when lengths match
+ const currentSorted = current.toSorted()
+ const originalSorted = original.toSorted()
+ for (let i = 0; i < currentSorted.length; i++) {
+ if (currentSorted[i] !== originalSorted[i]) {
+ return true
+ }
+ }
+ return false
+}
+```
+
+This new approach is more efficient because:
+- It avoids the overhead of sorting and joining the arrays when lengths differ
+- It avoids consuming memory for the joined strings (especially important for large arrays)
+- It avoids mutating the original arrays
+- It returns early when a difference is found
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-min-max-loop.md b/.agents/skills/vercel-react-best-practices/rules/js-min-max-loop.md
new file mode 100644
index 0000000..4b6656e
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-min-max-loop.md
@@ -0,0 +1,82 @@
+---
+title: Use Loop for Min/Max Instead of Sort
+impact: LOW
+impactDescription: O(n) instead of O(n log n)
+tags: javascript, arrays, performance, sorting, algorithms
+---
+
+## Use Loop for Min/Max Instead of Sort
+
+Finding the smallest or largest element only requires a single pass through the array. Sorting is wasteful and slower.
+
+**Incorrect (O(n log n) - sort to find latest):**
+
+```typescript
+interface Project {
+ id: string
+ name: string
+ updatedAt: number
+}
+
+function getLatestProject(projects: Project[]) {
+ const sorted = [...projects].sort((a, b) => b.updatedAt - a.updatedAt)
+ return sorted[0]
+}
+```
+
+Sorts the entire array just to find the maximum value.
+
+**Incorrect (O(n log n) - sort for oldest and newest):**
+
+```typescript
+function getOldestAndNewest(projects: Project[]) {
+ const sorted = [...projects].sort((a, b) => a.updatedAt - b.updatedAt)
+ return { oldest: sorted[0], newest: sorted[sorted.length - 1] }
+}
+```
+
+Still sorts unnecessarily when only min/max are needed.
+
+**Correct (O(n) - single loop):**
+
+```typescript
+function getLatestProject(projects: Project[]) {
+ if (projects.length === 0) return null
+
+ let latest = projects[0]
+
+ for (let i = 1; i < projects.length; i++) {
+ if (projects[i].updatedAt > latest.updatedAt) {
+ latest = projects[i]
+ }
+ }
+
+ return latest
+}
+
+function getOldestAndNewest(projects: Project[]) {
+ if (projects.length === 0) return { oldest: null, newest: null }
+
+ let oldest = projects[0]
+ let newest = projects[0]
+
+ for (let i = 1; i < projects.length; i++) {
+ if (projects[i].updatedAt < oldest.updatedAt) oldest = projects[i]
+ if (projects[i].updatedAt > newest.updatedAt) newest = projects[i]
+ }
+
+ return { oldest, newest }
+}
+```
+
+Single pass through the array, no copying, no sorting.
+
+**Alternative (Math.min/Math.max for small arrays):**
+
+```typescript
+const numbers = [5, 2, 8, 1, 9]
+const min = Math.min(...numbers)
+const max = Math.max(...numbers)
+```
+
+This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see [the fiddle](https://jsfiddle.net/qw1jabsx/4/). Use the loop approach for reliability.
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-request-idle-callback.md b/.agents/skills/vercel-react-best-practices/rules/js-request-idle-callback.md
new file mode 100644
index 0000000..d81927e
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-request-idle-callback.md
@@ -0,0 +1,105 @@
+---
+title: Defer Non-Critical Work with requestIdleCallback
+impact: MEDIUM
+impactDescription: keeps UI responsive during background tasks
+tags: javascript, performance, idle, scheduling, analytics
+---
+
+## Defer Non-Critical Work with requestIdleCallback
+
+**Impact: MEDIUM (keeps UI responsive during background tasks)**
+
+Use `requestIdleCallback()` to schedule non-critical work during browser idle periods. This keeps the main thread free for user interactions and animations, reducing jank and improving perceived performance.
+
+**Incorrect (blocks main thread during user interaction):**
+
+```typescript
+function handleSearch(query: string) {
+ const results = searchItems(query)
+ setResults(results)
+
+ // These block the main thread immediately
+ analytics.track('search', { query })
+ saveToRecentSearches(query)
+ prefetchTopResults(results.slice(0, 3))
+}
+```
+
+**Correct (defers non-critical work to idle time):**
+
+```typescript
+function handleSearch(query: string) {
+ const results = searchItems(query)
+ setResults(results)
+
+ // Defer non-critical work to idle periods
+ requestIdleCallback(() => {
+ analytics.track('search', { query })
+ })
+
+ requestIdleCallback(() => {
+ saveToRecentSearches(query)
+ })
+
+ requestIdleCallback(() => {
+ prefetchTopResults(results.slice(0, 3))
+ })
+}
+```
+
+**With timeout for required work:**
+
+```typescript
+// Ensure analytics fires within 2 seconds even if browser stays busy
+requestIdleCallback(
+ () => analytics.track('page_view', { path: location.pathname }),
+ { timeout: 2000 }
+)
+```
+
+**Chunking large tasks:**
+
+```typescript
+function processLargeDataset(items: Item[]) {
+ let index = 0
+
+ function processChunk(deadline: IdleDeadline) {
+ // Process items while we have idle time (aim for <50ms chunks)
+ while (index < items.length && deadline.timeRemaining() > 0) {
+ processItem(items[index])
+ index++
+ }
+
+ // Schedule next chunk if more items remain
+ if (index < items.length) {
+ requestIdleCallback(processChunk)
+ }
+ }
+
+ requestIdleCallback(processChunk)
+}
+```
+
+**With fallback for unsupported browsers:**
+
+```typescript
+const scheduleIdleWork = window.requestIdleCallback ?? ((cb: () => void) => setTimeout(cb, 1))
+
+scheduleIdleWork(() => {
+ // Non-critical work
+})
+```
+
+**When to use:**
+
+- Analytics and telemetry
+- Saving state to localStorage/IndexedDB
+- Prefetching resources for likely next actions
+- Processing non-urgent data transformations
+- Lazy initialization of non-critical features
+
+**When NOT to use:**
+
+- User-initiated actions that need immediate feedback
+- Rendering updates the user is waiting for
+- Time-sensitive operations
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-set-map-lookups.md b/.agents/skills/vercel-react-best-practices/rules/js-set-map-lookups.md
new file mode 100644
index 0000000..680a489
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-set-map-lookups.md
@@ -0,0 +1,24 @@
+---
+title: Use Set/Map for O(1) Lookups
+impact: LOW-MEDIUM
+impactDescription: O(n) to O(1)
+tags: javascript, set, map, data-structures, performance
+---
+
+## Use Set/Map for O(1) Lookups
+
+Convert arrays to Set/Map for repeated membership checks.
+
+**Incorrect (O(n) per check):**
+
+```typescript
+const allowedIds = ['a', 'b', 'c', ...]
+items.filter(item => allowedIds.includes(item.id))
+```
+
+**Correct (O(1) per check):**
+
+```typescript
+const allowedIds = new Set(['a', 'b', 'c', ...])
+items.filter(item => allowedIds.has(item.id))
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-tosorted-immutable.md b/.agents/skills/vercel-react-best-practices/rules/js-tosorted-immutable.md
new file mode 100644
index 0000000..eae8b3f
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-tosorted-immutable.md
@@ -0,0 +1,57 @@
+---
+title: Use toSorted() Instead of sort() for Immutability
+impact: MEDIUM-HIGH
+impactDescription: prevents mutation bugs in React state
+tags: javascript, arrays, immutability, react, state, mutation
+---
+
+## Use toSorted() Instead of sort() for Immutability
+
+`.sort()` mutates the array in place, which can cause bugs with React state and props. Use `.toSorted()` to create a new sorted array without mutation.
+
+**Incorrect (mutates original array):**
+
+```typescript
+function UserList({ users }: { users: User[] }) {
+ // Mutates the users prop array!
+ const sorted = useMemo(
+ () => users.sort((a, b) => a.name.localeCompare(b.name)),
+ [users]
+ )
+ return ` to preserve state/DOM for expensive components that frequently toggle visibility.
+
+**Usage:**
+
+```tsx
+import { Activity } from 'react'
+
+function Dropdown({ isOpen }: Props) {
+ return (
+
+
+ )
+}
+```
+
+Avoids expensive re-renders and state loss.
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-animate-svg-wrapper.md b/.agents/skills/vercel-react-best-practices/rules/rendering-animate-svg-wrapper.md
new file mode 100644
index 0000000..646744c
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-animate-svg-wrapper.md
@@ -0,0 +1,47 @@
+---
+title: Animate SVG Wrapper Instead of SVG Element
+impact: LOW
+impactDescription: enables hardware acceleration
+tags: rendering, svg, css, animation, performance
+---
+
+## Animate SVG Wrapper Instead of SVG Element
+
+Many browsers don't have hardware acceleration for CSS3 animations on SVG elements. Wrap SVG in a `
+
+
+ )
+}
+```
+
+This applies to all CSS transforms and transitions (`transform`, `opacity`, `translate`, `scale`, `rotate`). The wrapper div allows browsers to use GPU acceleration for smoother animations.
+
+### 6.2 CSS content-visibility for Long Lists
+
+**Impact: HIGH (faster initial render)**
+
+Apply `content-visibility: auto` to defer off-screen rendering.
+
+**CSS:**
+
+```css
+.message-item {
+ content-visibility: auto;
+ contain-intrinsic-size: 0 80px;
+}
+```
+
+**Example:**
+
+```tsx
+function MessageList({ messages }: { messages: Message[] }) {
+ return (
+
+ {messages.map(msg => (
+
+ )
+}
+```
+
+For 1000 messages, browser skips layout/paint for ~990 off-screen items (10× faster initial render).
+
+### 6.3 Hoist Static JSX Elements
+
+**Impact: LOW (avoids re-creation)**
+
+Extract static JSX outside components to avoid re-creation.
+
+**Incorrect: recreates element every render**
+
+```tsx
+function LoadingSkeleton() {
+ return
+}
+
+function Container() {
+ return (
+
+
+ ))}
+ {msg.content}
+
+ {loading &&
+ )
+}
+```
+
+**Correct: reuses same element**
+
+```tsx
+const loadingSkeleton = (
+
+)
+
+function Container() {
+ return (
+
+ {loading && loadingSkeleton}
+
+ )
+}
+```
+
+This is especially helpful for large and static SVG nodes, which can be expensive to recreate on every render.
+
+**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary.
+
+### 6.4 Optimize SVG Precision
+
+**Impact: LOW (reduces file size)**
+
+Reduce SVG coordinate precision to decrease file size. The optimal precision depends on the viewBox size, but in general reducing precision should be considered.
+
+**Incorrect: excessive precision**
+
+```svg
+
+ {children}
+
+ )
+}
+```
+
+Server-side rendering will fail because `localStorage` is undefined.
+
+**Incorrect: visual flickering**
+
+```tsx
+function ThemeWrapper({ children }: { children: ReactNode }) {
+ const [theme, setTheme] = useState('light')
+
+ useEffect(() => {
+ // Runs after hydration - causes visible flash
+ const stored = localStorage.getItem('theme')
+ if (stored) {
+ setTheme(stored)
+ }
+ }, [])
+
+ return (
+
+ {children}
+
+ )
+}
+```
+
+Component first renders with default value (`light`), then updates after hydration, causing a visible flash of incorrect content.
+
+**Correct: no flicker, no hydration mismatch**
+
+```tsx
+function ThemeWrapper({ children }: { children: ReactNode }) {
+ return (
+ <>
+
+ {children}
+
+
+
+ )
+}
+```
+
+The inline script executes synchronously before showing the element, ensuring the DOM already has the correct value. No flickering, no hydration mismatch.
+
+This pattern is especially useful for theme toggles, user preferences, authentication states, and any client-only data that should render immediately without flashing default values.
+
+### 6.6 Suppress Expected Hydration Mismatches
+
+**Impact: LOW-MEDIUM (avoids noisy hydration warnings for known differences)**
+
+In SSR frameworks (e.g., Next.js), some values are intentionally different on server vs client (random IDs, dates, locale/timezone formatting). For these *expected* mismatches, wrap the dynamic text in an element with `suppressHydrationWarning` to prevent noisy warnings. Do not use this to hide real bugs. Don’t overuse it.
+
+**Incorrect: known mismatch warnings**
+
+```tsx
+function Timestamp() {
+ return {new Date().toLocaleString()}
+}
+```
+
+**Correct: suppress expected mismatch only**
+
+```tsx
+function Timestamp() {
+ return (
+
+ {new Date().toLocaleString()}
+
+ )
+}
+```
+
+### 6.7 Use Activity Component for Show/Hide
+
+**Impact: MEDIUM (preserves state/DOM)**
+
+Use React's `
+ {count && {count}}
+
+ )
+}
+
+// When count = 0, renders: 0
+// When count = 5, renders: 5
+```
+
+**Correct: renders nothing when count is 0**
+
+```tsx
+function Badge({ count }: { count: number }) {
+ return (
+
+ {count > 0 ? {count} : null}
+
+ )
+}
+
+// When count = 0, renders:
+// When count = 5, renders: 5
+```
+
+### 6.10 Use React DOM Resource Hints
+
+**Impact: HIGH (reduces load time for critical resources)**
+
+React DOM provides APIs to hint the browser about resources it will need. These are especially useful in server components to start loading resources before the client even receives the HTML.
+
+- **`prefetchDNS(href)`**: Resolve DNS for a domain you expect to connect to
+
+- **`preconnect(href)`**: Establish connection (DNS + TCP + TLS) to a server
+
+- **`preload(href, options)`**: Fetch a resource (stylesheet, font, script, image) you'll use soon
+
+- **`preloadModule(href)`**: Fetch an ES module you'll use soon
+
+- **`preinit(href, options)`**: Fetch and evaluate a stylesheet or script
+
+- **`preinitModule(href)`**: Fetch and evaluate an ES module
+
+**Example: preconnect to third-party APIs**
+
+```tsx
+import { preconnect, prefetchDNS } from 'react-dom'
+
+export default function App() {
+ prefetchDNS('https://analytics.example.com')
+ preconnect('https://api.example.com')
+
+ return Content
+}
+
+// Correct: toggle class
+function Box({ isHighlighted }: { isHighlighted: boolean }) {
+ return (
+
+ Content
+
+ )
+}
+```
+
+Prefer CSS classes over inline styles when possible. CSS files are cached by the browser, and classes provide better separation of concerns and are easier to maintain.
+
+See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations.
+
+### 7.2 Build Index Maps for Repeated Lookups
+
+**Impact: LOW-MEDIUM (1M ops to 2K ops)**
+
+Multiple `.find()` calls by the same key should use a Map.
+
+**Incorrect (O(n) per lookup):**
+
+```typescript
+function processOrders(orders: Order[], users: User[]) {
+ return orders.map(order => ({
+ ...order,
+ user: users.find(u => u.id === order.userId)
+ }))
+}
+```
+
+**Correct (O(1) per lookup):**
+
+```typescript
+function processOrders(orders: Order[], users: User[]) {
+ const userById = new Map(users.map(u => [u.id, u]))
+
+ return orders.map(order => ({
+ ...order,
+ user: userById.get(order.userId)
+ }))
+}
+```
+
+Build map once (O(n)), then all lookups are O(1).
+
+For 1000 orders × 1000 users: 1M ops → 2K ops.
+
+### 7.3 Cache Property Access in Loops
+
+**Impact: LOW-MEDIUM (reduces lookups)**
+
+Cache object property lookups in hot paths.
+
+**Incorrect: 3 lookups × N iterations**
+
+```typescript
+for (let i = 0; i < arr.length; i++) {
+ process(obj.config.settings.value)
+}
+```
+
+**Correct: 1 lookup total**
+
+```typescript
+const value = obj.config.settings.value
+const len = arr.length
+for (let i = 0; i < len; i++) {
+ process(value)
+}
+```
+
+### 7.4 Cache Repeated Function Calls
+
+**Impact: MEDIUM (avoid redundant computation)**
+
+Use a module-level Map to cache function results when the same function is called repeatedly with the same inputs during render.
+
+**Incorrect: redundant computation**
+
+```typescript
+function ProjectList({ projects }: { projects: Project[] }) {
+ return (
+
+ {projects.map(project => {
+ // slugify() called 100+ times for same project names
+ const slug = slugify(project.name)
+
+ return
+ )
+}
+```
+
+**Correct: cached results**
+
+```typescript
+// Module-level cache
+const slugifyCache = new Map
+ {projects.map(project => {
+ // Computed only once per unique project name
+ const slug = cachedSlugify(project.name)
+
+ return
+ )
+}
+```
+
+**Simpler pattern for single-value functions:**
+
+```typescript
+let isLoggedInCache: boolean | null = null
+
+function isLoggedIn(): boolean {
+ if (isLoggedInCache !== null) {
+ return isLoggedInCache
+ }
+
+ isLoggedInCache = document.cookie.includes('auth=')
+ return isLoggedInCache
+}
+
+// Clear cache when auth changes
+function onAuthChange() {
+ isLoggedInCache = null
+}
+```
+
+Use a Map (not a hook) so it works everywhere: utilities, event handlers, not just React components.
+
+Reference: [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
+
+### 7.5 Cache Storage API Calls
+
+**Impact: LOW-MEDIUM (reduces expensive I/O)**
+
+`localStorage`, `sessionStorage`, and `document.cookie` are synchronous and expensive. Cache reads in memory.
+
+**Incorrect: reads storage on every call**
+
+```typescript
+function getTheme() {
+ return localStorage.getItem('theme') ?? 'light'
+}
+// Called 10 times = 10 storage reads
+```
+
+**Correct: Map cache**
+
+```typescript
+const storageCache = new Map{sorted.map(renderUser)}
+}
+```
+
+**Correct: creates new array**
+
+```typescript
+function UserList({ users }: { users: User[] }) {
+ // Creates new sorted array, original unchanged
+ const sorted = useMemo(
+ () => users.toSorted((a, b) => a.name.localeCompare(b.name)),
+ [users]
+ )
+ return {sorted.map(renderUser)}
+}
+```
+
+**Why this matters in React:**
+
+1. Props/state mutations break React's immutability model - React expects props and state to be treated as read-only
+
+2. Causes stale closure bugs - Mutating arrays inside closures (callbacks, effects) can lead to unexpected behavior
+
+**Browser support: fallback for older browsers**
+
+```typescript
+// Fallback for older browsers
+const sorted = [...items].sort((a, b) => a.value - b.value)
+```
+
+`.toSorted()` is available in all modern browsers (Chrome 110+, Safari 16+, Firefox 115+, Node.js 20+). For older environments, use spread operator:
+
+**Other immutable array methods:**
+
+- `.toSorted()` - immutable sort
+
+- `.toReversed()` - immutable reverse
+
+- `.toSpliced()` - immutable splice
+
+- `.with()` - immutable element replacement
+
+---
+
+## 8. Advanced Patterns
+
+**Impact: LOW**
+
+Advanced patterns for specific cases that require careful implementation.
+
+### 8.1 Do Not Put Effect Events in Dependency Arrays
+
+**Impact: LOW (avoids unnecessary effect re-runs and lint errors)**
+
+Effect Event functions do not have a stable identity. Their identity intentionally changes on every render. Do not include the function returned by `useEffectEvent` in a `useEffect` dependency array. Keep the actual reactive values as dependencies and call the Effect Event from inside the effect body or subscriptions created by that effect.
+
+**Incorrect: Effect Event added as a dependency**
+
+```tsx
+import { useEffect, useEffectEvent } from 'react'
+
+function ChatRoom({ roomId, onConnected }: {
+ roomId: string
+ onConnected: () => void
+}) {
+ const handleConnected = useEffectEvent(onConnected)
+
+ useEffect(() => {
+ const connection = createConnection(roomId)
+ connection.on('connected', handleConnected)
+ connection.connect()
+
+ return () => connection.disconnect()
+ }, [roomId, handleConnected])
+}
+```
+
+Including the Effect Event in dependencies makes the effect re-run every render and triggers the React Hooks lint rule.
+
+**Correct: depend on reactive values, not the Effect Event**
+
+```tsx
+import { useEffect, useEffectEvent } from 'react'
+
+function ChatRoom({ roomId, onConnected }: {
+ roomId: string
+ onConnected: () => void
+}) {
+ const handleConnected = useEffectEvent(onConnected)
+
+ useEffect(() => {
+ const connection = createConnection(roomId)
+ connection.on('connected', handleConnected)
+ connection.connect()
+
+ return () => connection.disconnect()
+ }, [roomId])
+}
+```
+
+Reference: [https://react.dev/reference/react/useEffectEvent#effect-event-in-deps](https://react.dev/reference/react/useEffectEvent#effect-event-in-deps)
+
+### 8.2 Initialize App Once, Not Per Mount
+
+**Impact: LOW-MEDIUM (avoids duplicate init in development)**
+
+Do not put app-wide initialization that must run once per app load inside `useEffect([])` of a component. Components can remount and effects will re-run. Use a module-level guard or top-level init in the entry module instead.
+
+**Incorrect: runs twice in dev, re-runs on remount**
+
+```tsx
+function Comp() {
+ useEffect(() => {
+ loadFromStorage()
+ checkAuthToken()
+ }, [])
+
+ // ...
+}
+```
+
+**Correct: once per app load**
+
+```tsx
+let didInit = false
+
+function Comp() {
+ useEffect(() => {
+ if (didInit) return
+ didInit = true
+ loadFromStorage()
+ checkAuthToken()
+ }, [])
+
+ // ...
+}
+```
+
+Reference: [https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application)
+
+### 8.3 Store Event Handlers in Refs
+
+**Impact: LOW (stable subscriptions)**
+
+Store callbacks in refs when used in effects that shouldn't re-subscribe on callback changes.
+
+**Incorrect: re-subscribes on every render**
+
+```tsx
+function useWindowEvent(event: string, handler: (e) => void) {
+ useEffect(() => {
+ window.addEventListener(event, handler)
+ return () => window.removeEventListener(event, handler)
+ }, [event, handler])
+}
+```
+
+**Correct: stable subscription**
+
+```tsx
+import { useEffectEvent } from 'react'
+
+function useWindowEvent(event: string, handler: (e) => void) {
+ const onEvent = useEffectEvent(handler)
+
+ useEffect(() => {
+ window.addEventListener(event, onEvent)
+ return () => window.removeEventListener(event, onEvent)
+ }, [event])
+}
+```
+
+**Alternative: use `useEffectEvent` if you're on latest React:**
+
+`useEffectEvent` provides a cleaner API for the same pattern: it creates a stable function reference that always calls the latest version of the handler.
+
+### 8.4 useEffectEvent for Stable Callback Refs
+
+**Impact: LOW (prevents effect re-runs)**
+
+Access latest values in callbacks without adding them to dependency arrays. Prevents effect re-runs while avoiding stale closures.
+
+**Incorrect: effect re-runs on every callback change**
+
+```tsx
+function SearchInput({ onSearch }: { onSearch: (q: string) => void }) {
+ const [query, setQuery] = useState('')
+
+ useEffect(() => {
+ const timeout = setTimeout(() => onSearch(query), 300)
+ return () => clearTimeout(timeout)
+ }, [query, onSearch])
+}
+```
+
+**Correct: using React's useEffectEvent**
+
+```tsx
+import { useEffectEvent } from 'react';
+
+function SearchInput({ onSearch }: { onSearch: (q: string) => void }) {
+ const [query, setQuery] = useState('')
+ const onSearchEvent = useEffectEvent(onSearch)
+
+ useEffect(() => {
+ const timeout = setTimeout(() => onSearchEvent(query), 300)
+ return () => clearTimeout(timeout)
+ }, [query])
+}
+```
+
+---
+
+## References
+
+1. [https://react.dev](https://react.dev)
+2. [https://nextjs.org](https://nextjs.org)
+3. [https://swr.vercel.app](https://swr.vercel.app)
+4. [https://github.com/shuding/better-all](https://github.com/shuding/better-all)
+5. [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)
+6. [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)
+7. [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
diff --git a/.agents/skills/vercel-react-best-practices/README.md b/.agents/skills/vercel-react-best-practices/README.md
new file mode 100644
index 0000000..f283e1c
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/README.md
@@ -0,0 +1,123 @@
+# React Best Practices
+
+A structured repository for creating and maintaining React Best Practices optimized for agents and LLMs.
+
+## Structure
+
+- `rules/` - Individual rule files (one per rule)
+ - `_sections.md` - Section metadata (titles, impacts, descriptions)
+ - `_template.md` - Template for creating new rules
+ - `area-description.md` - Individual rule files
+- `src/` - Build scripts and utilities
+- `metadata.json` - Document metadata (version, organization, abstract)
+- __`AGENTS.md`__ - Compiled output (generated)
+- __`test-cases.json`__ - Test cases for LLM evaluation (generated)
+
+## Getting Started
+
+1. Install dependencies:
+ ```bash
+ pnpm install
+ ```
+
+2. Build AGENTS.md from rules:
+ ```bash
+ pnpm build
+ ```
+
+3. Validate rule files:
+ ```bash
+ pnpm validate
+ ```
+
+4. Extract test cases:
+ ```bash
+ pnpm extract-tests
+ ```
+
+## Creating a New Rule
+
+1. Copy `rules/_template.md` to `rules/area-description.md`
+2. Choose the appropriate area prefix:
+ - `async-` for Eliminating Waterfalls (Section 1)
+ - `bundle-` for Bundle Size Optimization (Section 2)
+ - `server-` for Server-Side Performance (Section 3)
+ - `client-` for Client-Side Data Fetching (Section 4)
+ - `rerender-` for Re-render Optimization (Section 5)
+ - `rendering-` for Rendering Performance (Section 6)
+ - `js-` for JavaScript Performance (Section 7)
+ - `advanced-` for Advanced Patterns (Section 8)
+3. Fill in the frontmatter and content
+4. Ensure you have clear examples with explanations
+5. Run `pnpm build` to regenerate AGENTS.md and test-cases.json
+
+## Rule File Structure
+
+Each rule file should follow this structure:
+
+```markdown
+---
+title: Rule Title Here
+impact: MEDIUM
+impactDescription: Optional description
+tags: tag1, tag2, tag3
+---
+
+## Rule Title Here
+
+Brief explanation of the rule and why it matters.
+
+**Incorrect (description of what's wrong):**
+
+```typescript
+// Bad code example
+```
+
+**Correct (description of what's right):**
+
+```typescript
+// Good code example
+```
+
+Optional explanatory text after examples.
+
+Reference: [Link](https://example.com)
+
+## File Naming Convention
+
+- Files starting with `_` are special (excluded from build)
+- Rule files: `area-description.md` (e.g., `async-parallel.md`)
+- Section is automatically inferred from filename prefix
+- Rules are sorted alphabetically by title within each section
+- IDs (e.g., 1.1, 1.2) are auto-generated during build
+
+## Impact Levels
+
+- `CRITICAL` - Highest priority, major performance gains
+- `HIGH` - Significant performance improvements
+- `MEDIUM-HIGH` - Moderate-high gains
+- `MEDIUM` - Moderate performance improvements
+- `LOW-MEDIUM` - Low-medium gains
+- `LOW` - Incremental improvements
+
+## Scripts
+
+- `pnpm build` - Compile rules into AGENTS.md
+- `pnpm validate` - Validate all rule files
+- `pnpm extract-tests` - Extract test cases for LLM evaluation
+- `pnpm dev` - Build and validate
+
+## Contributing
+
+When adding or modifying rules:
+
+1. Use the correct filename prefix for your section
+2. Follow the `_template.md` structure
+3. Include clear bad/good examples with explanations
+4. Add appropriate tags
+5. Run `pnpm build` to regenerate AGENTS.md and test-cases.json
+6. Rules are automatically sorted by title - no need to manage numbers!
+
+## Acknowledgments
+
+Originally created by [@shuding](https://x.com/shuding) at [Vercel](https://vercel.com).
diff --git a/.agents/skills/vercel-react-best-practices/SKILL.md b/.agents/skills/vercel-react-best-practices/SKILL.md
new file mode 100644
index 0000000..237988d
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/SKILL.md
@@ -0,0 +1,149 @@
+---
+name: vercel-react-best-practices
+description: React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
+license: MIT
+metadata:
+ author: vercel
+ version: "1.0.0"
+---
+
+# Vercel React Best Practices
+
+Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 70 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation.
+
+## When to Apply
+
+Reference these guidelines when:
+- Writing new React components or Next.js pages
+- Implementing data fetching (client or server-side)
+- Reviewing code for performance issues
+- Refactoring existing React/Next.js code
+- Optimizing bundle size or load times
+
+## Rule Categories by Priority
+
+| Priority | Category | Impact | Prefix |
+|----------|----------|--------|--------|
+| 1 | Eliminating Waterfalls | CRITICAL | `async-` |
+| 2 | Bundle Size Optimization | CRITICAL | `bundle-` |
+| 3 | Server-Side Performance | HIGH | `server-` |
+| 4 | Client-Side Data Fetching | MEDIUM-HIGH | `client-` |
+| 5 | Re-render Optimization | MEDIUM | `rerender-` |
+| 6 | Rendering Performance | MEDIUM | `rendering-` |
+| 7 | JavaScript Performance | LOW-MEDIUM | `js-` |
+| 8 | Advanced Patterns | LOW | `advanced-` |
+
+## Quick Reference
+
+### 1. Eliminating Waterfalls (CRITICAL)
+
+- `async-cheap-condition-before-await` - Check cheap sync conditions before awaiting flags or remote values
+- `async-defer-await` - Move await into branches where actually used
+- `async-parallel` - Use Promise.all() for independent operations
+- `async-dependencies` - Use better-all for partial dependencies
+- `async-api-routes` - Start promises early, await late in API routes
+- `async-suspense-boundaries` - Use Suspense to stream content
+
+### 2. Bundle Size Optimization (CRITICAL)
+
+- `bundle-barrel-imports` - Import directly, avoid barrel files
+- `bundle-analyzable-paths` - Prefer statically analyzable import and file-system paths to avoid broad bundles and traces
+- `bundle-dynamic-imports` - Use next/dynamic for heavy components
+- `bundle-defer-third-party` - Load analytics/logging after hydration
+- `bundle-conditional` - Load modules only when feature is activated
+- `bundle-preload` - Preload on hover/focus for perceived speed
+
+### 3. Server-Side Performance (HIGH)
+
+- `server-auth-actions` - Authenticate server actions like API routes
+- `server-cache-react` - Use React.cache() for per-request deduplication
+- `server-cache-lru` - Use LRU cache for cross-request caching
+- `server-dedup-props` - Avoid duplicate serialization in RSC props
+- `server-hoist-static-io` - Hoist static I/O (fonts, logos) to module level
+- `server-no-shared-module-state` - Avoid module-level mutable request state in RSC/SSR
+- `server-serialization` - Minimize data passed to client components
+- `server-parallel-fetching` - Restructure components to parallelize fetches
+- `server-parallel-nested-fetching` - Chain nested fetches per item in Promise.all
+- `server-after-nonblocking` - Use after() for non-blocking operations
+
+### 4. Client-Side Data Fetching (MEDIUM-HIGH)
+
+- `client-swr-dedup` - Use SWR for automatic request deduplication
+- `client-event-listeners` - Deduplicate global event listeners
+- `client-passive-event-listeners` - Use passive listeners for scroll
+- `client-localstorage-schema` - Version and minimize localStorage data
+
+### 5. Re-render Optimization (MEDIUM)
+
+- `rerender-defer-reads` - Don't subscribe to state only used in callbacks
+- `rerender-memo` - Extract expensive work into memoized components
+- `rerender-memo-with-default-value` - Hoist default non-primitive props
+- `rerender-dependencies` - Use primitive dependencies in effects
+- `rerender-derived-state` - Subscribe to derived booleans, not raw values
+- `rerender-derived-state-no-effect` - Derive state during render, not effects
+- `rerender-functional-setstate` - Use functional setState for stable callbacks
+- `rerender-lazy-state-init` - Pass function to useState for expensive values
+- `rerender-simple-expression-in-memo` - Avoid memo for simple primitives
+- `rerender-split-combined-hooks` - Split hooks with independent dependencies
+- `rerender-move-effect-to-event` - Put interaction logic in event handlers
+- `rerender-transitions` - Use startTransition for non-urgent updates
+- `rerender-use-deferred-value` - Defer expensive renders to keep input responsive
+- `rerender-use-ref-transient-values` - Use refs for transient frequent values
+- `rerender-no-inline-components` - Don't define components inside components
+
+### 6. Rendering Performance (MEDIUM)
+
+- `rendering-animate-svg-wrapper` - Animate div wrapper, not SVG element
+- `rendering-content-visibility` - Use content-visibility for long lists
+- `rendering-hoist-jsx` - Extract static JSX outside components
+- `rendering-svg-precision` - Reduce SVG coordinate precision
+- `rendering-hydration-no-flicker` - Use inline script for client-only data
+- `rendering-hydration-suppress-warning` - Suppress expected mismatches
+- `rendering-activity` - Use Activity component for show/hide
+- `rendering-conditional-render` - Use ternary, not && for conditionals
+- `rendering-usetransition-loading` - Prefer useTransition for loading state
+- `rendering-resource-hints` - Use React DOM resource hints for preloading
+- `rendering-script-defer-async` - Use defer or async on script tags
+
+### 7. JavaScript Performance (LOW-MEDIUM)
+
+- `js-batch-dom-css` - Group CSS changes via classes or cssText
+- `js-index-maps` - Build Map for repeated lookups
+- `js-cache-property-access` - Cache object properties in loops
+- `js-cache-function-results` - Cache function results in module-level Map
+- `js-cache-storage` - Cache localStorage/sessionStorage reads
+- `js-combine-iterations` - Combine multiple filter/map into one loop
+- `js-length-check-first` - Check array length before expensive comparison
+- `js-early-exit` - Return early from functions
+- `js-hoist-regexp` - Hoist RegExp creation outside loops
+- `js-min-max-loop` - Use loop for min/max instead of sort
+- `js-set-map-lookups` - Use Set/Map for O(1) lookups
+- `js-tosorted-immutable` - Use toSorted() for immutability
+- `js-flatmap-filter` - Use flatMap to map and filter in one pass
+- `js-request-idle-callback` - Defer non-critical work to browser idle time
+
+### 8. Advanced Patterns (LOW)
+
+- `advanced-effect-event-deps` - Don't put `useEffectEvent` results in effect deps
+- `advanced-event-handler-refs` - Store event handlers in refs
+- `advanced-init-once` - Initialize app once per app load
+- `advanced-use-latest` - useLatest for stable callback refs
+
+## How to Use
+
+Read individual rule files for detailed explanations and code examples:
+
+```
+rules/async-parallel.md
+rules/bundle-barrel-imports.md
+```
+
+Each rule file contains:
+- Brief explanation of why it matters
+- Incorrect code example with explanation
+- Correct code example with explanation
+- Additional context and references
+
+## Full Compiled Document
+
+For the complete guide with all rules expanded: `AGENTS.md`
diff --git a/.agents/skills/vercel-react-best-practices/rules/_sections.md b/.agents/skills/vercel-react-best-practices/rules/_sections.md
new file mode 100644
index 0000000..4d20c14
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/_sections.md
@@ -0,0 +1,46 @@
+# Sections
+
+This file defines all sections, their ordering, impact levels, and descriptions.
+The section ID (in parentheses) is the filename prefix used to group rules.
+
+---
+
+## 1. Eliminating Waterfalls (async)
+
+**Impact:** CRITICAL
+**Description:** Waterfalls are the #1 performance killer. Each sequential await adds full network latency. Eliminating them yields the largest gains.
+
+## 2. Bundle Size Optimization (bundle)
+
+**Impact:** CRITICAL
+**Description:** Reducing initial bundle size improves Time to Interactive and Largest Contentful Paint.
+
+## 3. Server-Side Performance (server)
+
+**Impact:** HIGH
+**Description:** Optimizing server-side rendering and data fetching eliminates server-side waterfalls and reduces response times.
+
+## 4. Client-Side Data Fetching (client)
+
+**Impact:** MEDIUM-HIGH
+**Description:** Automatic deduplication and efficient data fetching patterns reduce redundant network requests.
+
+## 5. Re-render Optimization (rerender)
+
+**Impact:** MEDIUM
+**Description:** Reducing unnecessary re-renders minimizes wasted computation and improves UI responsiveness.
+
+## 6. Rendering Performance (rendering)
+
+**Impact:** MEDIUM
+**Description:** Optimizing the rendering process reduces the work the browser needs to do.
+
+## 7. JavaScript Performance (js)
+
+**Impact:** LOW-MEDIUM
+**Description:** Micro-optimizations for hot paths can add up to meaningful improvements.
+
+## 8. Advanced Patterns (advanced)
+
+**Impact:** LOW
+**Description:** Advanced patterns for specific cases that require careful implementation.
diff --git a/.agents/skills/vercel-react-best-practices/rules/_template.md b/.agents/skills/vercel-react-best-practices/rules/_template.md
new file mode 100644
index 0000000..1e9e707
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/_template.md
@@ -0,0 +1,28 @@
+---
+title: Rule Title Here
+impact: MEDIUM
+impactDescription: Optional description of impact (e.g., "20-50% improvement")
+tags: tag1, tag2
+---
+
+## Rule Title Here
+
+**Impact: MEDIUM (optional impact description)**
+
+Brief explanation of the rule and why it matters. This should be clear and concise, explaining the performance implications.
+
+**Incorrect (description of what's wrong):**
+
+```typescript
+// Bad code example here
+const bad = example()
+```
+
+**Correct (description of what's right):**
+
+```typescript
+// Good code example here
+const good = example()
+```
+
+Reference: [Link to documentation or resource](https://example.com)
diff --git a/.agents/skills/vercel-react-best-practices/rules/advanced-effect-event-deps.md b/.agents/skills/vercel-react-best-practices/rules/advanced-effect-event-deps.md
new file mode 100644
index 0000000..24d901b
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/advanced-effect-event-deps.md
@@ -0,0 +1,56 @@
+---
+title: Do Not Put Effect Events in Dependency Arrays
+impact: LOW
+impactDescription: avoids unnecessary effect re-runs and lint errors
+tags: advanced, hooks, useEffectEvent, dependencies, effects
+---
+
+## Do Not Put Effect Events in Dependency Arrays
+
+Effect Event functions do not have a stable identity. Their identity intentionally changes on every render. Do not include the function returned by `useEffectEvent` in a `useEffect` dependency array. Keep the actual reactive values as dependencies and call the Effect Event from inside the effect body or subscriptions created by that effect.
+
+**Incorrect (Effect Event added as a dependency):**
+
+```tsx
+import { useEffect, useEffectEvent } from 'react'
+
+function ChatRoom({ roomId, onConnected }: {
+ roomId: string
+ onConnected: () => void
+}) {
+ const handleConnected = useEffectEvent(onConnected)
+
+ useEffect(() => {
+ const connection = createConnection(roomId)
+ connection.on('connected', handleConnected)
+ connection.connect()
+
+ return () => connection.disconnect()
+ }, [roomId, handleConnected])
+}
+```
+
+Including the Effect Event in dependencies makes the effect re-run every render and triggers the React Hooks lint rule.
+
+**Correct (depend on reactive values, not the Effect Event):**
+
+```tsx
+import { useEffect, useEffectEvent } from 'react'
+
+function ChatRoom({ roomId, onConnected }: {
+ roomId: string
+ onConnected: () => void
+}) {
+ const handleConnected = useEffectEvent(onConnected)
+
+ useEffect(() => {
+ const connection = createConnection(roomId)
+ connection.on('connected', handleConnected)
+ connection.connect()
+
+ return () => connection.disconnect()
+ }, [roomId])
+}
+```
+
+Reference: [React useEffectEvent: Effect Event in deps](https://react.dev/reference/react/useEffectEvent#effect-event-in-deps)
diff --git a/.agents/skills/vercel-react-best-practices/rules/advanced-event-handler-refs.md b/.agents/skills/vercel-react-best-practices/rules/advanced-event-handler-refs.md
new file mode 100644
index 0000000..97e7ade
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/advanced-event-handler-refs.md
@@ -0,0 +1,55 @@
+---
+title: Store Event Handlers in Refs
+impact: LOW
+impactDescription: stable subscriptions
+tags: advanced, hooks, refs, event-handlers, optimization
+---
+
+## Store Event Handlers in Refs
+
+Store callbacks in refs when used in effects that shouldn't re-subscribe on callback changes.
+
+**Incorrect (re-subscribes on every render):**
+
+```tsx
+function useWindowEvent(event: string, handler: (e) => void) {
+ useEffect(() => {
+ window.addEventListener(event, handler)
+ return () => window.removeEventListener(event, handler)
+ }, [event, handler])
+}
+```
+
+**Correct (stable subscription):**
+
+```tsx
+function useWindowEvent(event: string, handler: (e) => void) {
+ const handlerRef = useRef(handler)
+ useEffect(() => {
+ handlerRef.current = handler
+ }, [handler])
+
+ useEffect(() => {
+ const listener = (e) => handlerRef.current(e)
+ window.addEventListener(event, listener)
+ return () => window.removeEventListener(event, listener)
+ }, [event])
+}
+```
+
+**Alternative: use `useEffectEvent` if you're on latest React:**
+
+```tsx
+import { useEffectEvent } from 'react'
+
+function useWindowEvent(event: string, handler: (e) => void) {
+ const onEvent = useEffectEvent(handler)
+
+ useEffect(() => {
+ window.addEventListener(event, onEvent)
+ return () => window.removeEventListener(event, onEvent)
+ }, [event])
+}
+```
+
+`useEffectEvent` provides a cleaner API for the same pattern: it creates a stable function reference that always calls the latest version of the handler.
diff --git a/.agents/skills/vercel-react-best-practices/rules/advanced-init-once.md b/.agents/skills/vercel-react-best-practices/rules/advanced-init-once.md
new file mode 100644
index 0000000..73ee38e
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/advanced-init-once.md
@@ -0,0 +1,42 @@
+---
+title: Initialize App Once, Not Per Mount
+impact: LOW-MEDIUM
+impactDescription: avoids duplicate init in development
+tags: initialization, useEffect, app-startup, side-effects
+---
+
+## Initialize App Once, Not Per Mount
+
+Do not put app-wide initialization that must run once per app load inside `useEffect([])` of a component. Components can remount and effects will re-run. Use a module-level guard or top-level init in the entry module instead.
+
+**Incorrect (runs twice in dev, re-runs on remount):**
+
+```tsx
+function Comp() {
+ useEffect(() => {
+ loadFromStorage()
+ checkAuthToken()
+ }, [])
+
+ // ...
+}
+```
+
+**Correct (once per app load):**
+
+```tsx
+let didInit = false
+
+function Comp() {
+ useEffect(() => {
+ if (didInit) return
+ didInit = true
+ loadFromStorage()
+ checkAuthToken()
+ }, [])
+
+ // ...
+}
+```
+
+Reference: [Initializing the application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application)
diff --git a/.agents/skills/vercel-react-best-practices/rules/advanced-use-latest.md b/.agents/skills/vercel-react-best-practices/rules/advanced-use-latest.md
new file mode 100644
index 0000000..9c7cb50
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/advanced-use-latest.md
@@ -0,0 +1,39 @@
+---
+title: useEffectEvent for Stable Callback Refs
+impact: LOW
+impactDescription: prevents effect re-runs
+tags: advanced, hooks, useEffectEvent, refs, optimization
+---
+
+## useEffectEvent for Stable Callback Refs
+
+Access latest values in callbacks without adding them to dependency arrays. Prevents effect re-runs while avoiding stale closures.
+
+**Incorrect (effect re-runs on every callback change):**
+
+```tsx
+function SearchInput({ onSearch }: { onSearch: (q: string) => void }) {
+ const [query, setQuery] = useState('')
+
+ useEffect(() => {
+ const timeout = setTimeout(() => onSearch(query), 300)
+ return () => clearTimeout(timeout)
+ }, [query, onSearch])
+}
+```
+
+**Correct (using React's useEffectEvent):**
+
+```tsx
+import { useEffectEvent } from 'react';
+
+function SearchInput({ onSearch }: { onSearch: (q: string) => void }) {
+ const [query, setQuery] = useState('')
+ const onSearchEvent = useEffectEvent(onSearch)
+
+ useEffect(() => {
+ const timeout = setTimeout(() => onSearchEvent(query), 300)
+ return () => clearTimeout(timeout)
+ }, [query])
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-api-routes.md b/.agents/skills/vercel-react-best-practices/rules/async-api-routes.md
new file mode 100644
index 0000000..6feda1e
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-api-routes.md
@@ -0,0 +1,38 @@
+---
+title: Prevent Waterfall Chains in API Routes
+impact: CRITICAL
+impactDescription: 2-10× improvement
+tags: api-routes, server-actions, waterfalls, parallelization
+---
+
+## Prevent Waterfall Chains in API Routes
+
+In API routes and Server Actions, start independent operations immediately, even if you don't await them yet.
+
+**Incorrect (config waits for auth, data waits for both):**
+
+```typescript
+export async function GET(request: Request) {
+ const session = await auth()
+ const config = await fetchConfig()
+ const data = await fetchData(session.user.id)
+ return Response.json({ data, config })
+}
+```
+
+**Correct (auth and config start immediately):**
+
+```typescript
+export async function GET(request: Request) {
+ const sessionPromise = auth()
+ const configPromise = fetchConfig()
+ const session = await sessionPromise
+ const [config, data] = await Promise.all([
+ configPromise,
+ fetchData(session.user.id)
+ ])
+ return Response.json({ data, config })
+}
+```
+
+For operations with more complex dependency chains, use `better-all` to automatically maximize parallelism (see Dependency-Based Parallelization).
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-cheap-condition-before-await.md b/.agents/skills/vercel-react-best-practices/rules/async-cheap-condition-before-await.md
new file mode 100644
index 0000000..5799d7f
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-cheap-condition-before-await.md
@@ -0,0 +1,37 @@
+---
+title: Check Cheap Conditions Before Async Flags
+impact: HIGH
+impactDescription: avoids unnecessary async work when a synchronous guard already fails
+tags: async, await, feature-flags, short-circuit, conditional
+---
+
+## Check Cheap Conditions Before Async Flags
+
+When a branch uses `await` for a flag or remote value and also requires a **cheap synchronous** condition (local props, request metadata, already-loaded state), evaluate the cheap condition **first**. Otherwise you pay for the async call even when the compound condition can never be true.
+
+This is a specialization of [Defer Await Until Needed](./async-defer-await.md) for `flag && cheapCondition` style checks.
+
+**Incorrect:**
+
+```typescript
+const someFlag = await getFlag()
+
+if (someFlag && someCondition) {
+ // ...
+}
+```
+
+**Correct:**
+
+```typescript
+if (someCondition) {
+ const someFlag = await getFlag()
+ if (someFlag) {
+ // ...
+ }
+}
+```
+
+This matters when `getFlag` hits the network, a feature-flag service, or `React.cache` / DB work: skipping it when `someCondition` is false removes that cost on the cold path.
+
+Keep the original order if `someCondition` is expensive, depends on the flag, or you must run side effects in a fixed order.
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-defer-await.md b/.agents/skills/vercel-react-best-practices/rules/async-defer-await.md
new file mode 100644
index 0000000..460b5e1
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-defer-await.md
@@ -0,0 +1,82 @@
+---
+title: Defer Await Until Needed
+impact: HIGH
+impactDescription: avoids blocking unused code paths
+tags: async, await, conditional, optimization
+---
+
+## Defer Await Until Needed
+
+Move `await` operations into the branches where they're actually used to avoid blocking code paths that don't need them.
+
+**Incorrect (blocks both branches):**
+
+```typescript
+async function handleRequest(userId: string, skipProcessing: boolean) {
+ const userData = await fetchUserData(userId)
+
+ if (skipProcessing) {
+ // Returns immediately but still waited for userData
+ return { skipped: true }
+ }
+
+ // Only this branch uses userData
+ return processUserData(userData)
+}
+```
+
+**Correct (only blocks when needed):**
+
+```typescript
+async function handleRequest(userId: string, skipProcessing: boolean) {
+ if (skipProcessing) {
+ // Returns immediately without waiting
+ return { skipped: true }
+ }
+
+ // Fetch only when needed
+ const userData = await fetchUserData(userId)
+ return processUserData(userData)
+}
+```
+
+**Another example (early return optimization):**
+
+```typescript
+// Incorrect: always fetches permissions
+async function updateResource(resourceId: string, userId: string) {
+ const permissions = await fetchPermissions(userId)
+ const resource = await getResource(resourceId)
+
+ if (!resource) {
+ return { error: 'Not found' }
+ }
+
+ if (!permissions.canEdit) {
+ return { error: 'Forbidden' }
+ }
+
+ return await updateResourceData(resource, permissions)
+}
+
+// Correct: fetches only when needed
+async function updateResource(resourceId: string, userId: string) {
+ const resource = await getResource(resourceId)
+
+ if (!resource) {
+ return { error: 'Not found' }
+ }
+
+ const permissions = await fetchPermissions(userId)
+
+ if (!permissions.canEdit) {
+ return { error: 'Forbidden' }
+ }
+
+ return await updateResourceData(resource, permissions)
+}
+```
+
+This optimization is especially valuable when the skipped branch is frequently taken, or when the deferred operation is expensive.
+
+For `await getFlag()` combined with a cheap synchronous guard (`flag && someCondition`), see [Check Cheap Conditions Before Async Flags](./async-cheap-condition-before-await.md).
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-dependencies.md b/.agents/skills/vercel-react-best-practices/rules/async-dependencies.md
new file mode 100644
index 0000000..0484eba
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-dependencies.md
@@ -0,0 +1,51 @@
+---
+title: Dependency-Based Parallelization
+impact: CRITICAL
+impactDescription: 2-10× improvement
+tags: async, parallelization, dependencies, better-all
+---
+
+## Dependency-Based Parallelization
+
+For operations with partial dependencies, use `better-all` to maximize parallelism. It automatically starts each task at the earliest possible moment.
+
+**Incorrect (profile waits for config unnecessarily):**
+
+```typescript
+const [user, config] = await Promise.all([
+ fetchUser(),
+ fetchConfig()
+])
+const profile = await fetchProfile(user.id)
+```
+
+**Correct (config and profile run in parallel):**
+
+```typescript
+import { all } from 'better-all'
+
+const { user, config, profile } = await all({
+ async user() { return fetchUser() },
+ async config() { return fetchConfig() },
+ async profile() {
+ return fetchProfile((await this.$.user).id)
+ }
+})
+```
+
+**Alternative without extra dependencies:**
+
+We can also create all the promises first, and do `Promise.all()` at the end.
+
+```typescript
+const userPromise = fetchUser()
+const profilePromise = userPromise.then(user => fetchProfile(user.id))
+
+const [user, config, profile] = await Promise.all([
+ userPromise,
+ fetchConfig(),
+ profilePromise
+])
+```
+
+Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all)
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-parallel.md b/.agents/skills/vercel-react-best-practices/rules/async-parallel.md
new file mode 100644
index 0000000..64133f6
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-parallel.md
@@ -0,0 +1,28 @@
+---
+title: Promise.all() for Independent Operations
+impact: CRITICAL
+impactDescription: 2-10× improvement
+tags: async, parallelization, promises, waterfalls
+---
+
+## Promise.all() for Independent Operations
+
+When async operations have no interdependencies, execute them concurrently using `Promise.all()`.
+
+**Incorrect (sequential execution, 3 round trips):**
+
+```typescript
+const user = await fetchUser()
+const posts = await fetchPosts()
+const comments = await fetchComments()
+```
+
+**Correct (parallel execution, 1 round trip):**
+
+```typescript
+const [user, posts, comments] = await Promise.all([
+ fetchUser(),
+ fetchPosts(),
+ fetchComments()
+])
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/async-suspense-boundaries.md b/.agents/skills/vercel-react-best-practices/rules/async-suspense-boundaries.md
new file mode 100644
index 0000000..1fbc05b
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/async-suspense-boundaries.md
@@ -0,0 +1,99 @@
+---
+title: Strategic Suspense Boundaries
+impact: HIGH
+impactDescription: faster initial paint
+tags: async, suspense, streaming, layout-shift
+---
+
+## Strategic Suspense Boundaries
+
+Instead of awaiting data in async components before returning JSX, use Suspense boundaries to show the wrapper UI faster while data loads.
+
+**Incorrect (wrapper blocked by data fetching):**
+
+```tsx
+async function Page() {
+ const data = await fetchData() // Blocks entire page
+
+ return (
+
+
+ )
+}
+```
+
+The entire layout waits for data even though only the middle section needs it.
+
+**Correct (wrapper shows immediately, data streams in):**
+
+```tsx
+function Page() {
+ return (
+ Sidebar
+ Header
+
+
+ Footer
+
+
+ )
+}
+
+async function DataDisplay() {
+ const data = await fetchData() // Only blocks this component
+ return Sidebar
+ Header
+
+
+ Footer
+ {data.content}
+}
+```
+
+Sidebar, Header, and Footer render immediately. Only DataDisplay waits for data.
+
+**Alternative (share promise across components):**
+
+```tsx
+function Page() {
+ // Start fetch immediately, but don't await
+ const dataPromise = fetchData()
+
+ return (
+
+
+ )
+}
+
+function DataDisplay({ dataPromise }: { dataPromise: Promise }) {
+ const data = use(dataPromise) // Unwraps the promise
+ return Sidebar
+ Header
+ Footer
+ {data.content}
+}
+
+function DataSummary({ dataPromise }: { dataPromise: Promise }) {
+ const data = use(dataPromise) // Reuses the same promise
+ return {data.summary}
+}
+```
+
+Both components share the same promise, so only one fetch occurs. Layout renders immediately while both components wait together.
+
+**When NOT to use this pattern:**
+
+- Critical data needed for layout decisions (affects positioning)
+- SEO-critical content above the fold
+- Small, fast queries where suspense overhead isn't worth it
+- When you want to avoid layout shift (loading → content jump)
+
+**Trade-off:** Faster initial paint vs potential layout shift. Choose based on your UX priorities.
diff --git a/.agents/skills/vercel-react-best-practices/rules/bundle-analyzable-paths.md b/.agents/skills/vercel-react-best-practices/rules/bundle-analyzable-paths.md
new file mode 100644
index 0000000..8276f15
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/bundle-analyzable-paths.md
@@ -0,0 +1,63 @@
+---
+title: Prefer Statically Analyzable Paths
+impact: HIGH
+impactDescription: avoids accidental broad bundles and file traces
+tags: bundle, nextjs, vite, webpack, rollup, esbuild, path
+---
+
+## Prefer Statically Analyzable Paths
+
+Build tools work best when import and file-system paths are obvious at build time. If you hide the real path inside a variable or compose it too dynamically, the tool either has to include a broad set of possible files, warn that it cannot analyze the import, or widen file tracing to stay safe.
+
+Prefer explicit maps or literal paths so the set of reachable files stays narrow and predictable. This is the same rule whether you are choosing modules with `import()` or reading files in server/build code.
+
+When analysis becomes too broad, the cost is real:
+- Larger server bundles
+- Slower builds
+- Worse cold starts
+- More memory use
+
+### Import Paths
+
+**Incorrect (the bundler cannot tell what may be imported):**
+
+```ts
+const PAGE_MODULES = {
+ home: './pages/home',
+ settings: './pages/settings',
+} as const
+
+const Page = await import(PAGE_MODULES[pageName])
+```
+
+**Correct (use an explicit map of allowed modules):**
+
+```ts
+const PAGE_MODULES = {
+ home: () => import('./pages/home'),
+ settings: () => import('./pages/settings'),
+} as const
+
+const Page = await PAGE_MODULES[pageName]()
+```
+
+### File-System Paths
+
+**Incorrect (a 2-value enum still hides the final path from static analysis):**
+
+```ts
+const baseDir = path.join(process.cwd(), 'content/' + contentKind)
+```
+
+**Correct (make each final path literal at the callsite):**
+
+```ts
+const baseDir =
+ kind === ContentKind.Blog
+ ? path.join(process.cwd(), 'content/blog')
+ : path.join(process.cwd(), 'content/docs')
+```
+
+In Next.js server code, this matters for output file tracing too. `path.join(process.cwd(), someVar)` can widen the traced file set because Next.js statically analyze `import`, `require`, and `fs` usage.
+
+Reference: [Next.js output](https://nextjs.org/docs/app/api-reference/config/next-config-js/output), [Next.js dynamic imports](https://nextjs.org/learn/seo/dynamic-imports), [Vite features](https://vite.dev/guide/features.html), [esbuild API](https://esbuild.github.io/api/), [Rollup dynamic import vars](https://www.npmjs.com/package/@rollup/plugin-dynamic-import-vars), [Webpack dependency management](https://webpack.js.org/guides/dependency-management/)
diff --git a/.agents/skills/vercel-react-best-practices/rules/bundle-barrel-imports.md b/.agents/skills/vercel-react-best-practices/rules/bundle-barrel-imports.md
new file mode 100644
index 0000000..22d1050
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/bundle-barrel-imports.md
@@ -0,0 +1,60 @@
+---
+title: Avoid Barrel File Imports
+impact: CRITICAL
+impactDescription: 200-800ms import cost, slow builds
+tags: bundle, imports, tree-shaking, barrel-files, performance
+---
+
+## Avoid Barrel File Imports
+
+Import directly from source files instead of barrel files to avoid loading thousands of unused modules. **Barrel files** are entry points that re-export multiple modules (e.g., `index.js` that does `export * from './module'`).
+
+Popular icon and component libraries can have **up to 10,000 re-exports** in their entry file. For many React packages, **it takes 200-800ms just to import them**, affecting both development speed and production cold starts.
+
+**Why tree-shaking doesn't help:** When a library is marked as external (not bundled), the bundler can't optimize it. If you bundle it to enable tree-shaking, builds become substantially slower analyzing the entire module graph.
+
+**Incorrect (imports entire library):**
+
+```tsx
+import { Check, X, Menu } from 'lucide-react'
+// Loads 1,583 modules, takes ~2.8s extra in dev
+// Runtime cost: 200-800ms on every cold start
+
+import { Button, TextField } from '@mui/material'
+// Loads 2,225 modules, takes ~4.2s extra in dev
+```
+
+**Correct - Next.js 13.5+ (recommended):**
+
+```js
+// next.config.js - automatically optimizes barrel imports at build time
+module.exports = {
+ experimental: {
+ optimizePackageImports: ['lucide-react', '@mui/material']
+ }
+}
+```
+
+```tsx
+// Keep the standard imports - Next.js transforms them to direct imports
+import { Check, X, Menu } from 'lucide-react'
+// Full TypeScript support, no manual path wrangling
+```
+
+This is the recommended approach because it preserves TypeScript type safety and editor autocompletion while still eliminating the barrel import cost.
+
+**Correct - Direct imports (non-Next.js projects):**
+
+```tsx
+import Button from '@mui/material/Button'
+import TextField from '@mui/material/TextField'
+// Loads only what you use
+```
+
+> **TypeScript warning:** Some libraries (notably `lucide-react`) don't ship `.d.ts` files for their deep import paths. Importing from `lucide-react/dist/esm/icons/check` resolves to an implicit `any` type, causing errors under `strict` or `noImplicitAny`. Prefer `optimizePackageImports` when available, or verify the library exports types for its subpaths before using direct imports.
+
+These optimizations provide 15-70% faster dev boot, 28% faster builds, 40% faster cold starts, and significantly faster HMR.
+
+Libraries commonly affected: `lucide-react`, `@mui/material`, `@mui/icons-material`, `@tabler/icons-react`, `react-icons`, `@headlessui/react`, `@radix-ui/react-*`, `lodash`, `ramda`, `date-fns`, `rxjs`, `react-use`.
+
+Reference: [How we optimized package imports in Next.js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)
diff --git a/.agents/skills/vercel-react-best-practices/rules/bundle-conditional.md b/.agents/skills/vercel-react-best-practices/rules/bundle-conditional.md
new file mode 100644
index 0000000..99d6fc9
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/bundle-conditional.md
@@ -0,0 +1,31 @@
+---
+title: Conditional Module Loading
+impact: HIGH
+impactDescription: loads large data only when needed
+tags: bundle, conditional-loading, lazy-loading
+---
+
+## Conditional Module Loading
+
+Load large data or modules only when a feature is activated.
+
+**Example (lazy-load animation frames):**
+
+```tsx
+function AnimationPlayer({ enabled, setEnabled }: { enabled: boolean; setEnabled: React.DispatchContent
+}
+
+// Correct: toggle class
+function Box({ isHighlighted }: { isHighlighted: boolean }) {
+ return (
+
+ Content
+
+ )
+}
+```
+
+Prefer CSS classes over inline styles when possible. CSS files are cached by the browser, and classes provide better separation of concerns and are easier to maintain.
+
+See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations.
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-cache-function-results.md b/.agents/skills/vercel-react-best-practices/rules/js-cache-function-results.md
new file mode 100644
index 0000000..180f8ac
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-cache-function-results.md
@@ -0,0 +1,80 @@
+---
+title: Cache Repeated Function Calls
+impact: MEDIUM
+impactDescription: avoid redundant computation
+tags: javascript, cache, memoization, performance
+---
+
+## Cache Repeated Function Calls
+
+Use a module-level Map to cache function results when the same function is called repeatedly with the same inputs during render.
+
+**Incorrect (redundant computation):**
+
+```typescript
+function ProjectList({ projects }: { projects: Project[] }) {
+ return (
+
+ {projects.map(project => {
+ // slugify() called 100+ times for same project names
+ const slug = slugify(project.name)
+
+ return
+ )
+}
+```
+
+**Correct (cached results):**
+
+```typescript
+// Module-level cache
+const slugifyCache = new Map
+ {projects.map(project => {
+ // Computed only once per unique project name
+ const slug = cachedSlugify(project.name)
+
+ return
+ )
+}
+```
+
+**Simpler pattern for single-value functions:**
+
+```typescript
+let isLoggedInCache: boolean | null = null
+
+function isLoggedIn(): boolean {
+ if (isLoggedInCache !== null) {
+ return isLoggedInCache
+ }
+
+ isLoggedInCache = document.cookie.includes('auth=')
+ return isLoggedInCache
+}
+
+// Clear cache when auth changes
+function onAuthChange() {
+ isLoggedInCache = null
+}
+```
+
+Use a Map (not a hook) so it works everywhere: utilities, event handlers, not just React components.
+
+Reference: [How we made the Vercel Dashboard twice as fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-cache-property-access.md b/.agents/skills/vercel-react-best-practices/rules/js-cache-property-access.md
new file mode 100644
index 0000000..39eec90
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-cache-property-access.md
@@ -0,0 +1,28 @@
+---
+title: Cache Property Access in Loops
+impact: LOW-MEDIUM
+impactDescription: reduces lookups
+tags: javascript, loops, optimization, caching
+---
+
+## Cache Property Access in Loops
+
+Cache object property lookups in hot paths.
+
+**Incorrect (3 lookups × N iterations):**
+
+```typescript
+for (let i = 0; i < arr.length; i++) {
+ process(obj.config.settings.value)
+}
+```
+
+**Correct (1 lookup total):**
+
+```typescript
+const value = obj.config.settings.value
+const len = arr.length
+for (let i = 0; i < len; i++) {
+ process(value)
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/js-cache-storage.md b/.agents/skills/vercel-react-best-practices/rules/js-cache-storage.md
new file mode 100644
index 0000000..aa4a30c
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/js-cache-storage.md
@@ -0,0 +1,70 @@
+---
+title: Cache Storage API Calls
+impact: LOW-MEDIUM
+impactDescription: reduces expensive I/O
+tags: javascript, localStorage, storage, caching, performance
+---
+
+## Cache Storage API Calls
+
+`localStorage`, `sessionStorage`, and `document.cookie` are synchronous and expensive. Cache reads in memory.
+
+**Incorrect (reads storage on every call):**
+
+```typescript
+function getTheme() {
+ return localStorage.getItem('theme') ?? 'light'
+}
+// Called 10 times = 10 storage reads
+```
+
+**Correct (Map cache):**
+
+```typescript
+const storageCache = new Map{sorted.map(renderUser)}
+}
+```
+
+**Correct (creates new array):**
+
+```typescript
+function UserList({ users }: { users: User[] }) {
+ // Creates new sorted array, original unchanged
+ const sorted = useMemo(
+ () => users.toSorted((a, b) => a.name.localeCompare(b.name)),
+ [users]
+ )
+ return {sorted.map(renderUser)}
+}
+```
+
+**Why this matters in React:**
+
+1. Props/state mutations break React's immutability model - React expects props and state to be treated as read-only
+2. Causes stale closure bugs - Mutating arrays inside closures (callbacks, effects) can lead to unexpected behavior
+
+**Browser support (fallback for older browsers):**
+
+`.toSorted()` is available in all modern browsers (Chrome 110+, Safari 16+, Firefox 115+, Node.js 20+). For older environments, use spread operator:
+
+```typescript
+// Fallback for older browsers
+const sorted = [...items].sort((a, b) => a.value - b.value)
+```
+
+**Other immutable array methods:**
+
+- `.toSorted()` - immutable sort
+- `.toReversed()` - immutable reverse
+- `.toSpliced()` - immutable splice
+- `.with()` - immutable element replacement
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-activity.md b/.agents/skills/vercel-react-best-practices/rules/rendering-activity.md
new file mode 100644
index 0000000..c957a49
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-activity.md
@@ -0,0 +1,26 @@
+---
+title: Use Activity Component for Show/Hide
+impact: MEDIUM
+impactDescription: preserves state/DOM
+tags: rendering, activity, visibility, state-preservation
+---
+
+## Use Activity Component for Show/Hide
+
+Use React's `` and animate the wrapper instead.
+
+**Incorrect (animating SVG directly - no hardware acceleration):**
+
+```tsx
+function LoadingSpinner() {
+ return (
+
+ )
+}
+```
+
+**Correct (animating wrapper div - hardware accelerated):**
+
+```tsx
+function LoadingSpinner() {
+ return (
+ {/* content */}
+}
+```
+
+**Example (preload critical fonts and styles):**
+
+```tsx
+import { preload, preinit } from 'react-dom'
+
+export default function RootLayout({ children }) {
+ // Preload font file
+ preload('/fonts/inter.woff2', { as: 'font', type: 'font/woff2', crossOrigin: 'anonymous' })
+
+ // Fetch and apply critical stylesheet immediately
+ preinit('/styles/critical.css', { as: 'style' })
+
+ return (
+
+ {children}
+
+ )
+}
+```
+
+**Example (preload modules for code-split routes):**
+
+```tsx
+import { preloadModule, preinitModule } from 'react-dom'
+
+function Navigation() {
+ const preloadDashboard = () => {
+ preloadModule('/dashboard.js', { as: 'script' })
+ }
+
+ return (
+
+ )
+}
+```
+
+**When to use each:**
+
+| API | Use case |
+|-----|----------|
+| `prefetchDNS` | Third-party domains you'll connect to later |
+| `preconnect` | APIs or CDNs you'll fetch from immediately |
+| `preload` | Critical resources needed for current page |
+| `preloadModule` | JS modules for likely next navigation |
+| `preinit` | Stylesheets/scripts that must execute early |
+| `preinitModule` | ES modules that must execute early |
+
+Reference: [React DOM Resource Preloading APIs](https://react.dev/reference/react-dom#resource-preloading-apis)
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-script-defer-async.md b/.agents/skills/vercel-react-best-practices/rules/rendering-script-defer-async.md
new file mode 100644
index 0000000..ee275ed
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-script-defer-async.md
@@ -0,0 +1,68 @@
+---
+title: Use defer or async on Script Tags
+impact: HIGH
+impactDescription: eliminates render-blocking
+tags: rendering, script, defer, async, performance
+---
+
+## Use defer or async on Script Tags
+
+**Impact: HIGH (eliminates render-blocking)**
+
+Script tags without `defer` or `async` block HTML parsing while the script downloads and executes. This delays First Contentful Paint and Time to Interactive.
+
+- **`defer`**: Downloads in parallel, executes after HTML parsing completes, maintains execution order
+- **`async`**: Downloads in parallel, executes immediately when ready, no guaranteed order
+
+Use `defer` for scripts that depend on DOM or other scripts. Use `async` for independent scripts like analytics.
+
+**Incorrect (blocks rendering):**
+
+```tsx
+export default function Document() {
+ return (
+
+
+
+
+
+ {/* content */}
+
+ )
+}
+```
+
+**Correct (non-blocking):**
+
+```tsx
+export default function Document() {
+ return (
+
+
+ {/* Independent script - use async */}
+
+ {/* DOM-dependent script - use defer */}
+
+
+ {/* content */}
+
+ )
+}
+```
+
+**Note:** In Next.js, prefer the `next/script` component with `strategy` prop instead of raw script tags:
+
+```tsx
+import Script from 'next/script'
+
+export default function Page() {
+ return (
+ <>
+
+
+
+ )
+}
+```
+
+Reference: [MDN - Script element](https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script#defer)
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-svg-precision.md b/.agents/skills/vercel-react-best-practices/rules/rendering-svg-precision.md
new file mode 100644
index 0000000..6d77128
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-svg-precision.md
@@ -0,0 +1,28 @@
+---
+title: Optimize SVG Precision
+impact: LOW
+impactDescription: reduces file size
+tags: rendering, svg, optimization, svgo
+---
+
+## Optimize SVG Precision
+
+Reduce SVG coordinate precision to decrease file size. The optimal precision depends on the viewBox size, but in general reducing precision should be considered.
+
+**Incorrect (excessive precision):**
+
+```svg
+
+ )
+
+ // Defined inside to access `user` - BAD
+ const Stats = () => (
+ 
+ )
+}
+
+function Stats({ followers, posts }: { followers: number; posts: number }) {
+ return (
+ (null)
+
+ useEffect(() => {
+ const onMove = (e: MouseEvent) => {
+ lastXRef.current = e.clientX
+ const node = dotRef.current
+ if (node) {
+ node.style.transform = `translateX(${e.clientX}px)`
+ }
+ }
+ window.addEventListener('mousemove', onMove)
+ return () => window.removeEventListener('mousemove', onMove)
+ }, [])
+
+ return (
+
+ )
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-after-nonblocking.md b/.agents/skills/vercel-react-best-practices/rules/server-after-nonblocking.md
new file mode 100644
index 0000000..e8f5b26
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-after-nonblocking.md
@@ -0,0 +1,73 @@
+---
+title: Use after() for Non-Blocking Operations
+impact: MEDIUM
+impactDescription: faster response times
+tags: server, async, logging, analytics, side-effects
+---
+
+## Use after() for Non-Blocking Operations
+
+Use Next.js's `after()` to schedule work that should execute after a response is sent. This prevents logging, analytics, and other side effects from blocking the response.
+
+**Incorrect (blocks response):**
+
+```tsx
+import { logUserAction } from '@/app/utils'
+
+export async function POST(request: Request) {
+ // Perform mutation
+ await updateDatabase(request)
+
+ // Logging blocks the response
+ const userAgent = request.headers.get('user-agent') || 'unknown'
+ await logUserAction({ userAgent })
+
+ return new Response(JSON.stringify({ status: 'success' }), {
+ status: 200,
+ headers: { 'Content-Type': 'application/json' }
+ })
+}
+```
+
+**Correct (non-blocking):**
+
+```tsx
+import { after } from 'next/server'
+import { headers, cookies } from 'next/headers'
+import { logUserAction } from '@/app/utils'
+
+export async function POST(request: Request) {
+ // Perform mutation
+ await updateDatabase(request)
+
+ // Log after response is sent
+ after(async () => {
+ const userAgent = (await headers()).get('user-agent') || 'unknown'
+ const sessionCookie = (await cookies()).get('session-id')?.value || 'anonymous'
+
+ logUserAction({ sessionCookie, userAgent })
+ })
+
+ return new Response(JSON.stringify({ status: 'success' }), {
+ status: 200,
+ headers: { 'Content-Type': 'application/json' }
+ })
+}
+```
+
+The response is sent immediately while logging happens in the background.
+
+**Common use cases:**
+
+- Analytics tracking
+- Audit logging
+- Sending notifications
+- Cache invalidation
+- Cleanup tasks
+
+**Important notes:**
+
+- `after()` runs even if the response fails or redirects
+- Works in Server Actions, Route Handlers, and Server Components
+
+Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after)
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-auth-actions.md b/.agents/skills/vercel-react-best-practices/rules/server-auth-actions.md
new file mode 100644
index 0000000..ee82c04
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-auth-actions.md
@@ -0,0 +1,96 @@
+---
+title: Authenticate Server Actions Like API Routes
+impact: CRITICAL
+impactDescription: prevents unauthorized access to server mutations
+tags: server, server-actions, authentication, security, authorization
+---
+
+## Authenticate Server Actions Like API Routes
+
+**Impact: CRITICAL (prevents unauthorized access to server mutations)**
+
+Server Actions (functions with `"use server"`) are exposed as public endpoints, just like API routes. Always verify authentication and authorization **inside** each Server Action—do not rely solely on middleware, layout guards, or page-level checks, as Server Actions can be invoked directly.
+
+Next.js documentation explicitly states: "Treat Server Actions with the same security considerations as public-facing API endpoints, and verify if the user is allowed to perform a mutation."
+
+**Incorrect (no authentication check):**
+
+```typescript
+'use server'
+
+export async function deleteUser(userId: string) {
+ // Anyone can call this! No auth check
+ await db.user.delete({ where: { id: userId } })
+ return { success: true }
+}
+```
+
+**Correct (authentication inside the action):**
+
+```typescript
+'use server'
+
+import { verifySession } from '@/lib/auth'
+import { unauthorized } from '@/lib/errors'
+
+export async function deleteUser(userId: string) {
+ // Always check auth inside the action
+ const session = await verifySession()
+
+ if (!session) {
+ throw unauthorized('Must be logged in')
+ }
+
+ // Check authorization too
+ if (session.user.role !== 'admin' && session.user.id !== userId) {
+ throw unauthorized('Cannot delete other users')
+ }
+
+ await db.user.delete({ where: { id: userId } })
+ return { success: true }
+}
+```
+
+**With input validation:**
+
+```typescript
+'use server'
+
+import { verifySession } from '@/lib/auth'
+import { z } from 'zod'
+
+const updateProfileSchema = z.object({
+ userId: z.string().uuid(),
+ name: z.string().min(1).max(100),
+ email: z.string().email()
+})
+
+export async function updateProfile(data: unknown) {
+ // Validate input first
+ const validated = updateProfileSchema.parse(data)
+
+ // Then authenticate
+ const session = await verifySession()
+ if (!session) {
+ throw new Error('Unauthorized')
+ }
+
+ // Then authorize
+ if (session.user.id !== validated.userId) {
+ throw new Error('Can only update own profile')
+ }
+
+ // Finally perform the mutation
+ await db.user.update({
+ where: { id: validated.userId },
+ data: {
+ name: validated.name,
+ email: validated.email
+ }
+ })
+
+ return { success: true }
+}
+```
+
+Reference: [https://nextjs.org/docs/app/guides/authentication](https://nextjs.org/docs/app/guides/authentication)
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-cache-lru.md b/.agents/skills/vercel-react-best-practices/rules/server-cache-lru.md
new file mode 100644
index 0000000..ef6938a
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-cache-lru.md
@@ -0,0 +1,41 @@
+---
+title: Cross-Request LRU Caching
+impact: HIGH
+impactDescription: caches across requests
+tags: server, cache, lru, cross-request
+---
+
+## Cross-Request LRU Caching
+
+`React.cache()` only works within one request. For data shared across sequential requests (user clicks button A then button B), use an LRU cache.
+
+**Implementation:**
+
+```typescript
+import { LRUCache } from 'lru-cache'
+
+const cache = new LRUCache({
+ max: 1000,
+ ttl: 5 * 60 * 1000 // 5 minutes
+})
+
+export async function getUser(id: string) {
+ const cached = cache.get(id)
+ if (cached) return cached
+
+ const user = await db.user.findUnique({ where: { id } })
+ cache.set(id, user)
+ return user
+}
+
+// Request 1: DB query, result cached
+// Request 2: cache hit, no DB query
+```
+
+Use when sequential user actions hit multiple endpoints needing the same data within seconds.
+
+**With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests without needing external storage like Redis.
+
+**In traditional serverless:** Each invocation runs in isolation, so consider Redis for cross-process caching.
+
+Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-cache-react.md b/.agents/skills/vercel-react-best-practices/rules/server-cache-react.md
new file mode 100644
index 0000000..87c9ca3
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-cache-react.md
@@ -0,0 +1,76 @@
+---
+title: Per-Request Deduplication with React.cache()
+impact: MEDIUM
+impactDescription: deduplicates within request
+tags: server, cache, react-cache, deduplication
+---
+
+## Per-Request Deduplication with React.cache()
+
+Use `React.cache()` for server-side request deduplication. Authentication and database queries benefit most.
+
+**Usage:**
+
+```typescript
+import { cache } from 'react'
+
+export const getCurrentUser = cache(async () => {
+ const session = await auth()
+ if (!session?.user?.id) return null
+ return await db.user.findUnique({
+ where: { id: session.user.id }
+ })
+})
+```
+
+Within a single request, multiple calls to `getCurrentUser()` execute the query only once.
+
+**Avoid inline objects as arguments:**
+
+`React.cache()` uses shallow equality (`Object.is`) to determine cache hits. Inline objects create new references each call, preventing cache hits.
+
+**Incorrect (always cache miss):**
+
+```typescript
+const getUser = cache(async (params: { uid: number }) => {
+ return await db.user.findUnique({ where: { id: params.uid } })
+})
+
+// Each call creates new object, never hits cache
+getUser({ uid: 1 })
+getUser({ uid: 1 }) // Cache miss, runs query again
+```
+
+**Correct (cache hit):**
+
+```typescript
+const getUser = cache(async (uid: number) => {
+ return await db.user.findUnique({ where: { id: uid } })
+})
+
+// Primitive args use value equality
+getUser(1)
+getUser(1) // Cache hit, returns cached result
+```
+
+If you must pass objects, pass the same reference:
+
+```typescript
+const params = { uid: 1 }
+getUser(params) // Query runs
+getUser(params) // Cache hit (same reference)
+```
+
+**Next.js-Specific Note:**
+
+In Next.js, the `fetch` API is automatically extended with request memoization. Requests with the same URL and options are automatically deduplicated within a single request, so you don't need `React.cache()` for `fetch` calls. However, `React.cache()` is still essential for other async tasks:
+
+- Database queries (Prisma, Drizzle, etc.)
+- Heavy computations
+- Authentication checks
+- File system operations
+- Any non-fetch async work
+
+Use `React.cache()` to deduplicate these operations across your component tree.
+
+Reference: [React.cache documentation](https://react.dev/reference/react/cache)
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-dedup-props.md b/.agents/skills/vercel-react-best-practices/rules/server-dedup-props.md
new file mode 100644
index 0000000..fb24a25
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-dedup-props.md
@@ -0,0 +1,65 @@
+---
+title: Avoid Duplicate Serialization in RSC Props
+impact: LOW
+impactDescription: reduces network payload by avoiding duplicate serialization
+tags: server, rsc, serialization, props, client-components
+---
+
+## Avoid Duplicate Serialization in RSC Props
+
+**Impact: LOW (reduces network payload by avoiding duplicate serialization)**
+
+RSC→client serialization deduplicates by object reference, not value. Same reference = serialized once; new reference = serialized again. Do transformations (`.toSorted()`, `.filter()`, `.map()`) in client, not server.
+
+**Incorrect (duplicates array):**
+
+```tsx
+// RSC: sends 6 strings (2 arrays × 3 items)
+ u.active)} />
+
+
+ )
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-parallel-nested-fetching.md b/.agents/skills/vercel-react-best-practices/rules/server-parallel-nested-fetching.md
new file mode 100644
index 0000000..be1dc25
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-parallel-nested-fetching.md
@@ -0,0 +1,34 @@
+---
+title: Parallel Nested Data Fetching
+impact: CRITICAL
+impactDescription: eliminates server-side waterfalls
+tags: server, rsc, parallel-fetching, promise-chaining
+---
+
+## Parallel Nested Data Fetching
+
+When fetching nested data in parallel, chain dependent fetches within each item's promise so a slow item doesn't block the rest.
+
+**Incorrect (a single slow item blocks all nested fetches):**
+
+```tsx
+const chats = await Promise.all(
+ chatIds.map(id => getChat(id))
+)
+
+const chatAuthors = await Promise.all(
+ chats.map(chat => getUser(chat.author))
+)
+```
+
+If one `getChat(id)` out of 100 is extremely slow, the authors of the other 99 chats can't start loading even though their data is ready.
+
+**Correct (each item chains its own nested fetch):**
+
+```tsx
+const chatAuthors = await Promise.all(
+ chatIds.map(id => getChat(id).then(chat => getUser(chat.author)))
+)
+```
+
+Each item independently chains `getChat` → `getUser`, so a slow chat doesn't block author fetches for the others.
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-serialization.md b/.agents/skills/vercel-react-best-practices/rules/server-serialization.md
new file mode 100644
index 0000000..39c5c41
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-serialization.md
@@ -0,0 +1,38 @@
+---
+title: Minimize Serialization at RSC Boundaries
+impact: HIGH
+impactDescription: reduces data transfer size
+tags: server, rsc, serialization, props
+---
+
+## Minimize Serialization at RSC Boundaries
+
+The React Server/Client boundary serializes all object properties into strings and embeds them in the HTML response and subsequent RSC requests. This serialized data directly impacts page weight and load time, so **size matters a lot**. Only pass fields that the client actually uses.
+
+**Incorrect (serializes all 50 fields):**
+
+```tsx
+async function Page() {
+ const user = await fetchUser() // 50 fields
+ return = {
+ ".html": "text/html; charset=utf-8",
+ ".js": "text/javascript; charset=utf-8",
+ ".mjs": "text/javascript; charset=utf-8",
+ ".css": "text/css; charset=utf-8",
+ ".json": "application/json; charset=utf-8",
+ ".map": "application/json; charset=utf-8",
+ ".svg": "image/svg+xml",
+ ".ico": "image/x-icon",
+ ".png": "image/png",
+ ".woff2": "font/woff2",
+};
+
+if (!existsSync(DIST)) {
+ console.error(`✗ ${DIST} not found — run "bun run web:build" first`);
+ process.exit(1);
+}
+
+function walk(dir: string): string[] {
+ return readdirSync(dir).flatMap((name) => {
+ const full = join(dir, name);
+ return statSync(full).isDirectory() ? walk(full) : [full];
+ });
+}
+
+const entries = walk(DIST)
+ .map((file) => {
+ const url = "/" + relative(DIST, file).split(sep).join("/");
+ const type = TYPES[extname(file)] ?? "application/octet-stream";
+ const base64 = readFileSync(file).toString("base64");
+ return ` ${JSON.stringify(url)}: ${JSON.stringify({ type, base64 })},`;
+ })
+ .join("\n");
+
+const body = `// AUTO-GENERATED by scripts/embed-web.ts — do not edit.
+export const WEB_ASSETS: Record = {
+${entries}
+};
+`;
+
+writeFileSync(OUT, body);
+console.log(`✓ embedded ${walk(DIST).length} web assets → ${relative(ROOT, OUT)}`);
diff --git a/skills-lock.json b/skills-lock.json
new file mode 100644
index 0000000..9cebe0a
--- /dev/null
+++ b/skills-lock.json
@@ -0,0 +1,17 @@
+{
+ "version": 1,
+ "skills": {
+ "frontend-design": {
+ "source": "anthropics/skills",
+ "sourceType": "github",
+ "skillPath": "skills/frontend-design/SKILL.md",
+ "computedHash": "4eabc66183767153e404b39d1b839b1c37f2d82d86f0a0d7e880a579d8d62336"
+ },
+ "vercel-react-best-practices": {
+ "source": "vercel-labs/agent-skills",
+ "sourceType": "github",
+ "skillPath": "skills/react-best-practices/SKILL.md",
+ "computedHash": "3219a1944e404ffc14d1d9d6aef6dd2e3855b81387ee0a044ccbfe14d34c2357"
+ }
+ }
+}
diff --git a/src/cli.ts b/src/cli.ts
index fb041d9..17fd6b1 100644
--- a/src/cli.ts
+++ b/src/cli.ts
@@ -20,6 +20,7 @@ import { registerSetData } from "./commands/set-data";
import { registerSetUpstream } from "./commands/set-upstream";
import { registerDataPath } from "./commands/data-path";
import { registerSyncData } from "./commands/sync-data";
+import { registerServe } from "./commands/serve";
import { registerSelfUpdate } from "./commands/self-update";
import { CliError } from "./errors";
import { HOME_ENV, PRODUCT_NAME } from "./identity";
@@ -55,6 +56,7 @@ registerSetData(program);
registerSetUpstream(program);
registerDataPath(program);
registerSyncData(program);
+registerServe(program);
registerSelfUpdate(program);
/**
diff --git a/src/commands/ls.ts b/src/commands/ls.ts
index 21a1239..3fefa0d 100644
--- a/src/commands/ls.ts
+++ b/src/commands/ls.ts
@@ -27,6 +27,7 @@ import {
loadDataItemMetadata,
loadSystemItemMetadata,
matchesTagFilter,
+ metadataJsonFields,
metadataLineSuffix,
printMetadataWarnings,
} from "../metadata";
@@ -228,16 +229,6 @@ function bundleMeta(bundle: Bundle): ItemMetadata {
};
}
-function metadataJsonFields(meta: ItemMetadata): {
- description?: string;
- tags?: string[];
-} {
- return {
- ...(meta.description !== undefined && { description: meta.description }),
- ...(meta.tags.length > 0 && { tags: meta.tags }),
- };
-}
-
async function shaOfDataItem(
dataRepo: string,
item: { kind: ItemKind; name: string; repoRelPath: string },
diff --git a/src/commands/serve.ts b/src/commands/serve.ts
new file mode 100644
index 0000000..73d54d3
--- /dev/null
+++ b/src/commands/serve.ts
@@ -0,0 +1,130 @@
+import type { Command } from "commander";
+import type { Command as CmdType } from "commander";
+import { join, normalize, resolve, sep } from "node:path";
+import { projectRoot } from "../paths";
+import { globalOpts } from "../cli";
+import { PRODUCT_NAME } from "../identity";
+import { defaultApiContext, handleApiRequest } from "../serve-api";
+import { WEB_ASSETS } from "../web-embed";
+
+// When the binary was compiled with embedded assets, serve those; otherwise
+// (dev / `bun run`) fall back to web/dist on disk.
+const EMBEDDED = Object.keys(WEB_ASSETS).length > 0;
+
+interface ServeOptions {
+ port: string;
+ host: string;
+ open: boolean;
+}
+
+// Built web assets live next to the source as ../web/dist. In a dev run
+// (`bun run src/cli.ts serve`) this resolves into the repo; if the UI hasn't
+// been built yet the server still boots and serves a hint page.
+const WEB_DIR = resolve(import.meta.dir, "..", "..", "web", "dist");
+
+export function registerServe(program: Command): void {
+ program
+ .command("serve")
+ .description("start a local web UI + read-only API for this project")
+ .option("-p, --port ", "port to listen on", "4717")
+ .option("--host ", "host to bind", "127.0.0.1")
+ .option("--no-open", "do not open the browser")
+ .action(async (opts: ServeOptions, cmd: CmdType) => {
+ const project = projectRoot();
+ const ctx = defaultApiContext(globalOpts(cmd).data);
+ const port = Number(opts.port);
+ if (!Number.isInteger(port) || port < 0 || port > 65535) {
+ throw new Error(`invalid port "${opts.port}"`);
+ }
+
+ const server = Bun.serve({
+ port,
+ hostname: opts.host,
+ development: false,
+ async fetch(req) {
+ const api = await handleApiRequest(req, ctx);
+ if (api) return api;
+ return serveStatic(req);
+ },
+ });
+
+ const url = `http://${opts.host}:${server.port}`;
+ console.log(`✓ ${PRODUCT_NAME} serve`);
+ console.log(` project ${project}`);
+ console.log(` url ${url}`);
+ console.log(` mode read-only`);
+ console.log(` press Ctrl-C to stop`);
+
+ if (opts.open) openBrowser(url);
+
+ // Keep the process alive; Bun.serve runs until the process is killed.
+ await new Promise(() => {});
+ });
+}
+
+async function serveStatic(req: Request): Promise {
+ const { pathname } = new URL(req.url);
+ const rel = pathname === "/" ? "/index.html" : pathname;
+
+ if (EMBEDDED) {
+ // SPA fallback to index.html for unknown client-side routes.
+ const asset = WEB_ASSETS[rel] ?? WEB_ASSETS["/index.html"];
+ if (asset) {
+ return new Response(Buffer.from(asset.base64, "base64"), {
+ headers: { "content-type": asset.type },
+ });
+ }
+ }
+
+ const target = staticTarget(WEB_DIR, pathname);
+ if (target) {
+ const f = Bun.file(target);
+ if (await f.exists()) return new Response(f);
+ }
+ // SPA fallback to index.html for client-side routes.
+ const index = Bun.file(join(WEB_DIR, "index.html"));
+ if (await index.exists()) return new Response(index);
+ return new Response(notBuiltPage(), {
+ status: 200,
+ headers: { "content-type": "text/html; charset=utf-8" },
+ });
+}
+
+/**
+ * Resolve a request path to an absolute file under `webDir`, or null if it
+ * would escape. The trailing-separator boundary stops a sibling directory like
+ * "-evil" from satisfying a bare startsWith() (path traversal).
+ * Exported for unit tests.
+ */
+export function staticTarget(webDir: string, pathname: string): string | null {
+ const rel = pathname === "/" ? "/index.html" : pathname;
+ const target = normalize(join(webDir, rel));
+ if (target === webDir || target.startsWith(webDir + sep)) return target;
+ return null;
+}
+
+function openBrowser(url: string): void {
+ const cmd =
+ process.platform === "darwin"
+ ? ["open", url]
+ : process.platform === "win32"
+ ? ["cmd", "/c", "start", "", url]
+ : ["xdg-open", url];
+ try {
+ Bun.spawn(cmd, { stdout: "ignore", stderr: "ignore" });
+ } catch {
+ // Opening the browser is best-effort; the URL is printed regardless.
+ }
+}
+
+function notBuiltPage(): string {
+ return `
+${PRODUCT_NAME}
+
+();
- for (const target of targets) {
- const { scope, key } = target;
- const lock = scope === "local" ? localLock : projectLock;
- const { source, kind, name: itemName } = parseLockKey(key);
- if (kind === "skills" && externalSkillNames.has(itemName)) continue;
-
- const entry = lock.items[key]!;
- // Reachability must be gathered before computing currentSha: the
- // sourceCommit-dependent computations below (`git show` /
- // `ls-tree` at the pinned commit) would error out on an
- // unreachable pin. When the commit is missing they are skipped and
- // the row degrades to missing_source_commit instead of crashing.
- const sourceCommitPresent: boolean | null =
- entry.source === "data" && dataRepo
- ? await commitExists(dataRepo, entry.sourceCommit)
- : null;
- let currentSha = isFragmentItemKind(kind)
- ? await currentInstalledSha(project, kind, itemName, scope)
- : await currentCopyItemSha({
- project,
- dataRepo,
- manifest,
- source,
- kind,
- name: itemName,
- sourceCommit:
- entry.source === "data" && sourceCommitPresent !== false
- ? entry.sourceCommit
- : undefined,
- });
- let fragmentOutputState: FragmentContributionState | null = null;
- if (source === "data" && isFragmentItemKind(kind)) {
- if (sourceCommitPresent === false) {
- currentSha = entry.sha;
- } else if (dataRepo) {
- const stateKey = `${scope}/${key}`;
- if (!fragmentStates.has(stateKey)) {
- fragmentStates.set(
- stateKey,
- await itemFragmentContributionState(
- project,
- dataRepo,
- manifest,
- lock,
- kind,
- itemName,
- entry,
- ),
- );
- }
- fragmentOutputState = fragmentStates.get(stateKey)!;
- currentSha =
- fragmentOutputState === "ok"
- ? entry.sha
- : fragmentOutputState === "missing"
- ? null
- : "fragment-output-drift";
- } else {
- currentSha = entry.sha;
- }
- }
-
- let upstreamSha: string | null = null;
- let upstreamDirty = false;
- if (source === "data") {
- if (dataRepo) {
- const upstream = await upstreamFactsForItem(
- dataRepo,
- kind,
- itemName,
- );
- upstreamSha = upstream.upstreamSha;
- upstreamDirty = upstream.upstreamDirty;
- }
- } else {
- const sys = findSystemItem(itemName);
- upstreamSha =
- sys && sys.kind === kind ? await shaOfSystemItem(sys) : null;
- }
-
- const state = deriveState({
- kind,
- source: entry.source,
- local: entry.source === "data" && entry.local === true,
- lockedSha: entry.sha,
- currentSha,
- upstreamSha,
- upstreamDirty,
- fragmentOutputState,
- sourceCommitPresent,
- });
-
- rows.push(
- buildStatusRow({
- scope,
- source,
- kind,
- name: itemName,
- entry,
- state,
- currentSha,
- upstreamSha,
- upstreamDirty,
- runtimeWarnings: [
- ...runtimeWarningsForItem(project, kind, itemName),
- ...codexWarningsForItem(project, kind),
- ],
- }),
- );
- }
-
- const diffs: StatusDiff[] = [];
- const personalClaudeExternal = personalClaudeExternals(rows);
- if (opts.diff) {
- const seenPaths = new Set();
- for (const row of rows) {
- const rowLock = row.scope === "local" ? localLock : projectLock;
- const diff = await buildStatusDiff({
- project,
- dataRepo,
- manifest,
- lock: rowLock,
- row,
- });
- if (!diff || seenPaths.has(diff.path)) continue;
- seenPaths.add(diff.path);
- diffs.push(diff);
- }
- }
if (opts.json) {
- console.log(
- JSON.stringify(
- {
- project,
- dataRepo,
- cliVersion: CLI_VERSION,
- count: rows.length,
- items: rows,
- ...(opts.diff && { diffs }),
- external,
- externalClaudePlugins,
- personalClaudeExternal,
- },
- null,
- 2,
- ),
- );
+ console.log(JSON.stringify(report, null, 2));
} else {
console.log(
formatStatusHuman({
- project,
- dataRepo,
- rows,
- external,
- externalClaudePlugins,
- personalClaudeExternal,
+ project: report.project,
+ dataRepo: report.dataRepo,
+ rows: report.items,
+ external: report.external,
+ externalClaudePlugins: report.externalClaudePlugins,
+ personalClaudeExternal: report.personalClaudeExternal,
}).join("\n"),
);
- if (opts.diff) printDiffs(diffs);
+ if (opts.diff) printDiffs(report.diffs ?? []);
}
if (
opts.strict &&
- rows.some(
+ report.items.some(
(r) =>
(r.state !== "ok" && r.state !== "kept-local") ||
(r.runtimeWarnings?.some(isStrictRuntimeWarning) ?? false),
@@ -288,19 +77,6 @@ export function registerStatus(program: Command): void {
);
}
-async function currentInstalledSha(
- project: string,
- kind: ItemKind,
- name: string,
- scope: "project" | "local",
-): Promise {
- if (scope === "local" && kind === "skills") {
- const path = installedPath(project, kind, name);
- return existsSync(path) ? await shaOfItem(path) : null;
- }
- return await shaOfInstalled(project, kind, name);
-}
-
function printDiffs(diffs: StatusDiff[]): void {
console.log("");
if (diffs.length === 0) {
@@ -314,43 +90,3 @@ function printDiffs(diffs: StatusDiff[]): void {
process.stdout.write(diff.text);
}
}
-
-function codexWarningsForItem(
- project: string,
- kind: ItemKind,
-): RuntimeWarning[] {
- if (kind !== "mcp" && kind !== "codex-config") return [];
- return codexProjectTrustWarnings(project);
-}
-
-async function itemFragmentContributionState(
- project: string,
- dataRepo: string,
- manifest: Manifest,
- lock: Lock,
- kind: Extract,
- name: string,
- entry: LockEntry,
-): Promise {
- if (entry.source !== "data") return "ok";
- const targets = await lockedFragmentTargetsForItem(
- dataRepo,
- kind,
- name,
- entry,
- manifest,
- );
- let state: FragmentContributionState = "ok";
- for (const target of targets) {
- const targetState = await fragmentContributionState(
- project,
- dataRepo,
- manifest,
- lock,
- target,
- );
- if (targetState === "missing") return "missing";
- if (targetState === "drifted") state = "drifted";
- }
- return state;
-}
diff --git a/src/git.ts b/src/git.ts
index 9068555..1ee9682 100644
--- a/src/git.ts
+++ b/src/git.ts
@@ -450,6 +450,41 @@ export async function headSha(repo: string): Promise {
return out.trim();
}
+export interface RepoCommit {
+ sha: string;
+ author: string;
+ date: string;
+ subject: string;
+}
+
+/**
+ * Recent commits in a repo, newest first. Read-only; used by `serve` to show
+ * a data-repo activity feed. Returns [] if the log can't be read.
+ */
+export async function recentCommits(
+ repo: string,
+ limit = 25,
+): Promise {
+ await assertGitAvailable();
+ // Unit separators keep parsing robust against subjects containing any char.
+ const fmt = "%H%x1f%an%x1f%aI%x1f%s";
+ try {
+ const out = await $`git -C ${repo} log -n ${limit} --pretty=format:${fmt}`
+ .quiet()
+ .text();
+ return out
+ .split("\n")
+ .filter((line) => line.length > 0)
+ .map((line) => {
+ const [sha = "", author = "", date = "", subject = ""] =
+ line.split("\x1f");
+ return { sha, author, date, subject };
+ });
+ } catch {
+ return [];
+ }
+}
+
export async function commitInRepo(
repo: string,
relPaths: string[],
diff --git a/src/metadata.ts b/src/metadata.ts
index 9039bf4..788863d 100644
--- a/src/metadata.ts
+++ b/src/metadata.ts
@@ -215,6 +215,17 @@ export function metadataLineSuffix(meta: ItemMetadata): string {
return parts.length > 0 ? ` ${parts.join(" ")}` : "";
}
+/** Catalog metadata fields for JSON output (`ls --json`, serve API). */
+export function metadataJsonFields(meta: ItemMetadata): {
+ description?: string;
+ tags?: string[];
+} {
+ return {
+ ...(meta.description !== undefined && { description: meta.description }),
+ ...(meta.tags.length > 0 && { tags: meta.tags }),
+ };
+}
+
/**
* `--tag` filtering: every requested tag must be present (AND, narrowing),
* compared case-insensitively. Items without metadata never match a filter.
diff --git a/src/serve-api.ts b/src/serve-api.ts
new file mode 100644
index 0000000..b9e64fd
--- /dev/null
+++ b/src/serve-api.ts
@@ -0,0 +1,227 @@
+import {
+ lockPath,
+ manifestPath,
+ projectRoot,
+ resolveDataRepoOptional,
+} from "./paths";
+import { loadManifest } from "./manifest";
+import { loadLocalLock, loadLock } from "./lock";
+import { headSha, isGitRepo, recentCommits } from "./git";
+import { CLI_VERSION, SYSTEM_ITEMS, shaOfSystemItem } from "./bundled";
+import { PRODUCT_NAME } from "./identity";
+import {
+ ITEM_KINDS,
+ isFragmentItemKind,
+ listMasterItems,
+ shaOfGitVisibleItem,
+} from "./master";
+import type { ItemKind } from "./master";
+import { shaOfFragmentItem } from "./fragments";
+import { buildStatusReport } from "./status-report";
+import {
+ loadDataItemMetadata,
+ loadSystemItemMetadata,
+ metadataJsonFields,
+} from "./metadata";
+import { listBundles, memberRef } from "./bundles";
+import { parseItemRef } from "./item-ref";
+
+/**
+ * Read-only JSON API for `capshelf serve`. Every endpoint reuses the same core
+ * the CLI uses, so the UI and `--json` output can never disagree. The server
+ * binds one project (the cwd) and never mutates anything.
+ */
+export interface ApiContext {
+ project: string;
+ dataOverride?: string;
+}
+
+export function defaultApiContext(dataOverride?: string): ApiContext {
+ return { project: projectRoot(), dataOverride };
+}
+
+const json = (body: unknown, status = 200): Response =>
+ new Response(JSON.stringify(body), {
+ status,
+ headers: { "content-type": "application/json; charset=utf-8" },
+ });
+
+/** Route an /api/* request. Returns null for non-API paths. */
+export async function handleApiRequest(
+ req: Request,
+ ctx: ApiContext,
+): Promise {
+ const url = new URL(req.url);
+ if (!url.pathname.startsWith("/api/")) return null;
+ if (req.method !== "GET") return json({ error: "read-only" }, 405);
+
+ try {
+ switch (url.pathname) {
+ case "/api/health":
+ return json(await health(ctx));
+ case "/api/status":
+ return json(await status(ctx, url));
+ case "/api/catalog":
+ return json(await catalog(ctx, url));
+ case "/api/config":
+ return json(await config(ctx));
+ case "/api/activity":
+ return json(await activity(ctx, url));
+ default:
+ return json({ error: "not found" }, 404);
+ }
+ } catch (err) {
+ return json(
+ { error: err instanceof Error ? err.message : String(err) },
+ 500,
+ );
+ }
+}
+
+async function health(ctx: ApiContext) {
+ const manifest = await loadManifest(ctx.project);
+ const dataRepo = await resolveDataRepoOptional({
+ override: ctx.dataOverride,
+ manifest,
+ project: ctx.project,
+ });
+ const dataRepoReady = !!dataRepo && (await isGitRepo(dataRepo));
+ return {
+ product: PRODUCT_NAME,
+ version: CLI_VERSION,
+ project: ctx.project,
+ dataRepo,
+ dataRepoReady,
+ installMode: manifest.installMode,
+ readOnly: true,
+ };
+}
+
+async function status(ctx: ApiContext, url: URL) {
+ const scope = url.searchParams.get("scope");
+ const itemRef = url.searchParams.get("item") ?? undefined;
+ return buildStatusReport({
+ project: ctx.project,
+ dataOverride: ctx.dataOverride,
+ ref: itemRef ? parseItemRef(itemRef) : undefined,
+ opts: {
+ diff: url.searchParams.get("diff") === "1",
+ project: scope === "project",
+ local: scope === "local",
+ },
+ });
+}
+
+async function config(ctx: ApiContext) {
+ const manifest = await loadManifest(ctx.project);
+ const dataRepo = await resolveDataRepoOptional({
+ override: ctx.dataOverride,
+ manifest,
+ project: ctx.project,
+ });
+ const [lock, local] = await Promise.all([
+ loadLock(ctx.project),
+ loadLocalLock(ctx.project),
+ ]);
+ return {
+ project: ctx.project,
+ dataRepo,
+ dataRepoReady: !!dataRepo && (await isGitRepo(dataRepo)),
+ dataRepoUpstream: manifest.dataRepoUpstream ?? null,
+ installMode: manifest.installMode,
+ readOnly: true,
+ paths: {
+ manifest: manifestPath(ctx.project),
+ lock: lockPath(ctx.project),
+ },
+ counts: {
+ tracked: Object.keys(lock.items).length,
+ local: Object.keys(local.items).length,
+ skills: manifest.skills.length,
+ settings: manifest.settings.length,
+ mcp: manifest.mcp.length,
+ codexConfig: manifest.codexConfig.length,
+ },
+ };
+}
+
+async function activity(ctx: ApiContext, url: URL) {
+ const manifest = await loadManifest(ctx.project);
+ const dataRepo = await resolveDataRepoOptional({
+ override: ctx.dataOverride,
+ manifest,
+ project: ctx.project,
+ });
+ if (!dataRepo || !(await isGitRepo(dataRepo))) {
+ return {
+ dataRepoReady: false,
+ dataRepo: dataRepo ?? null,
+ head: null,
+ commits: [],
+ };
+ }
+ const n = Number(url.searchParams.get("n"));
+ const limit = Number.isInteger(n) && n > 0 ? Math.min(n, 100) : 25;
+ const [head, commits] = await Promise.all([
+ headSha(dataRepo),
+ recentCommits(dataRepo, limit),
+ ]);
+ return { dataRepoReady: true, dataRepo, head, commits };
+}
+
+async function catalog(ctx: ApiContext, url: URL) {
+ const manifest = await loadManifest(ctx.project);
+ const dataRepo = await resolveDataRepoOptional({
+ override: ctx.dataOverride,
+ manifest,
+ project: ctx.project,
+ });
+ const kindParam = url.searchParams.get("kind");
+ const kind: ItemKind | undefined = ITEM_KINDS.find((k) => k === kindParam);
+
+ const system = await Promise.all(
+ SYSTEM_ITEMS.filter((s) => !kind || s.kind === kind).map(async (item) => ({
+ source: "system" as const,
+ kind: item.kind,
+ name: item.name,
+ sha: await shaOfSystemItem(item),
+ ...metadataJsonFields(loadSystemItemMetadata(item)),
+ })),
+ );
+
+ if (!dataRepo || !(await isGitRepo(dataRepo))) {
+ return {
+ dataRepo: dataRepo ?? null,
+ dataRepoReady: false,
+ system,
+ data: [],
+ };
+ }
+
+ const dataItems = await listMasterItems(dataRepo, kind);
+ const data = await Promise.all(
+ dataItems.map(async (item) => ({
+ source: "data" as const,
+ kind: item.kind,
+ name: item.name,
+ path: item.path,
+ sha: isFragmentItemKind(item.kind)
+ ? await shaOfFragmentItem(dataRepo, item.kind, item.name)
+ : await shaOfGitVisibleItem(dataRepo, item.repoRelPath),
+ ...metadataJsonFields(await loadDataItemMetadata(item)),
+ })),
+ );
+
+ const listing = await listBundles(dataRepo);
+ const bundles = listing.bundles.map((bundle) => ({
+ name: bundle.name,
+ ...(bundle.description !== undefined && {
+ description: bundle.description,
+ }),
+ ...(bundle.tags.length > 0 && { tags: bundle.tags }),
+ members: bundle.members.map(memberRef),
+ ...(bundle.malformed !== undefined && { malformed: bundle.malformed }),
+ }));
+
+ return { dataRepo, dataRepoReady: true, system, data, bundles };
+}
diff --git a/src/status-report.ts b/src/status-report.ts
new file mode 100644
index 0000000..d207217
--- /dev/null
+++ b/src/status-report.ts
@@ -0,0 +1,304 @@
+import { existsSync } from "node:fs";
+import { resolveDataRepoOptional } from "./paths";
+import { loadLocalLock, loadLock } from "./lock";
+import type { Lock, LockEntry } from "./lock";
+import { loadManifest } from "./manifest";
+import type { Manifest } from "./manifest";
+import type { ItemKind } from "./master";
+import { isFragmentItemKind, shaOfItem } from "./master";
+import { installedPath, shaOfInstalled, parseLockKey } from "./installed";
+import { findSystemItem, shaOfSystemItem, CLI_VERSION } from "./bundled";
+import type { ItemRef } from "./item-ref";
+import { commitExists, isGitRepo } from "./git";
+import { upstreamFactsForItem } from "./upstream-facts";
+import { listClaudePlugins, listSkillsShSkills } from "./external";
+import { buildStatusDiff, currentCopyItemSha } from "./status-diff";
+import type { StatusDiff } from "./status-diff";
+import {
+ codexProjectTrustWarnings,
+ runtimeWarningsForItem,
+} from "./runtime-warnings";
+import type { RuntimeWarning } from "./runtime-warnings";
+import {
+ fragmentContributionState,
+ lockedFragmentTargetsForItem,
+ type FragmentContributionState,
+} from "./fragments";
+import {
+ assertNoScopeCollisions,
+ buildStatusRow,
+ deriveState,
+ personalClaudeExternals,
+ statusTargets,
+ type ExternalPersonalClaudeSkill,
+ type StatusRow,
+} from "./status-core";
+
+export interface StatusScopeOptions {
+ project?: boolean;
+ local?: boolean;
+ diff?: boolean;
+}
+
+export interface StatusReport {
+ project: string;
+ dataRepo: string | null;
+ cliVersion: string;
+ count: number;
+ items: StatusRow[];
+ diffs?: StatusDiff[];
+ external: Awaited>;
+ externalClaudePlugins: Awaited>;
+ personalClaudeExternal: ExternalPersonalClaudeSkill[];
+}
+
+/**
+ * Compute the full drift/update report for a project. This is the shared
+ * source of truth for both the `status` CLI command and the `serve` HTTP API,
+ * so the two can never disagree. It performs the same gathering the command
+ * always did (extracted verbatim); printing, strict-exit handling, and ref
+ * parsing stay with the caller.
+ */
+export async function buildStatusReport(args: {
+ project: string;
+ dataOverride?: string;
+ ref?: ItemRef;
+ opts: StatusScopeOptions;
+}): Promise {
+ const { project, dataOverride, ref, opts } = args;
+ const manifest = await loadManifest(project);
+ const projectLock = await loadLock(project);
+ const localLock = await loadLocalLock(project);
+ assertNoScopeCollisions(projectLock, localLock);
+
+ // Status still produces a report when the data repo isn't configured or has
+ // gone missing on disk: data items report missing_upstream instead of
+ // crashing. Treating a configured-but-absent path as null degrades both
+ // fragment and copy items uniformly, and lets the per-item master/git calls
+ // surface genuine errors (ambiguous refs, permission failures) instead of
+ // swallowing them.
+ const resolvedDataRepo = await resolveDataRepoOptional({
+ override: dataOverride,
+ manifest,
+ project,
+ });
+ // A bound path that is not a git repo degrades like a missing one (rows
+ // report missing_upstream) instead of crashing on raw git errors during
+ // per-item upstream checks.
+ const dataRepo =
+ resolvedDataRepo &&
+ existsSync(resolvedDataRepo) &&
+ (await isGitRepo(resolvedDataRepo))
+ ? resolvedDataRepo
+ : null;
+
+ const targets = statusTargets(projectLock, localLock, ref, opts);
+ const external = (await listSkillsShSkills(project)).filter(
+ (skill) =>
+ !ref ||
+ (skill.name === ref.name &&
+ (ref.kind === undefined || ref.kind === "skills")),
+ );
+ const externalClaudePlugins = (await listClaudePlugins(project)).filter(
+ (plugin) =>
+ !ref ||
+ (ref.kind === undefined &&
+ (plugin.id === ref.name || plugin.name === ref.name)),
+ );
+ const externalSkillNames = new Set(external.map((skill) => skill.name));
+
+ const rows: StatusRow[] = [];
+ const fragmentStates = new Map();
+ for (const target of targets) {
+ const { scope, key } = target;
+ const lock = scope === "local" ? localLock : projectLock;
+ const { source, kind, name: itemName } = parseLockKey(key);
+ if (kind === "skills" && externalSkillNames.has(itemName)) continue;
+
+ const entry = lock.items[key]!;
+ // Reachability must be gathered before computing currentSha: the
+ // sourceCommit-dependent computations below (`git show` / `ls-tree` at the
+ // pinned commit) would error out on an unreachable pin. When the commit is
+ // missing they are skipped and the row degrades to missing_source_commit
+ // instead of crashing.
+ const sourceCommitPresent: boolean | null =
+ entry.source === "data" && dataRepo
+ ? await commitExists(dataRepo, entry.sourceCommit)
+ : null;
+ let currentSha = isFragmentItemKind(kind)
+ ? await currentInstalledSha(project, kind, itemName, scope)
+ : await currentCopyItemSha({
+ project,
+ dataRepo,
+ manifest,
+ source,
+ kind,
+ name: itemName,
+ sourceCommit:
+ entry.source === "data" && sourceCommitPresent !== false
+ ? entry.sourceCommit
+ : undefined,
+ });
+ let fragmentOutputState: FragmentContributionState | null = null;
+ if (source === "data" && isFragmentItemKind(kind)) {
+ if (sourceCommitPresent === false) {
+ currentSha = entry.sha;
+ } else if (dataRepo) {
+ const stateKey = `${scope}/${key}`;
+ if (!fragmentStates.has(stateKey)) {
+ fragmentStates.set(
+ stateKey,
+ await itemFragmentContributionState(
+ project,
+ dataRepo,
+ manifest,
+ lock,
+ kind,
+ itemName,
+ entry,
+ ),
+ );
+ }
+ fragmentOutputState = fragmentStates.get(stateKey)!;
+ currentSha =
+ fragmentOutputState === "ok"
+ ? entry.sha
+ : fragmentOutputState === "missing"
+ ? null
+ : "fragment-output-drift";
+ } else {
+ currentSha = entry.sha;
+ }
+ }
+
+ let upstreamSha: string | null = null;
+ let upstreamDirty = false;
+ if (source === "data") {
+ if (dataRepo) {
+ const upstream = await upstreamFactsForItem(dataRepo, kind, itemName);
+ upstreamSha = upstream.upstreamSha;
+ upstreamDirty = upstream.upstreamDirty;
+ }
+ } else {
+ const sys = findSystemItem(itemName);
+ upstreamSha =
+ sys && sys.kind === kind ? await shaOfSystemItem(sys) : null;
+ }
+
+ const state = deriveState({
+ kind,
+ source: entry.source,
+ local: entry.source === "data" && entry.local === true,
+ lockedSha: entry.sha,
+ currentSha,
+ upstreamSha,
+ upstreamDirty,
+ fragmentOutputState,
+ sourceCommitPresent,
+ });
+
+ rows.push(
+ buildStatusRow({
+ scope,
+ source,
+ kind,
+ name: itemName,
+ entry,
+ state,
+ currentSha,
+ upstreamSha,
+ upstreamDirty,
+ runtimeWarnings: [
+ ...runtimeWarningsForItem(project, kind, itemName),
+ ...codexWarningsForItem(project, kind),
+ ],
+ }),
+ );
+ }
+
+ const personalClaudeExternal = personalClaudeExternals(rows);
+
+ let diffs: StatusDiff[] | undefined;
+ if (opts.diff) {
+ diffs = [];
+ const seenPaths = new Set();
+ for (const row of rows) {
+ const rowLock = row.scope === "local" ? localLock : projectLock;
+ const diff = await buildStatusDiff({
+ project,
+ dataRepo,
+ manifest,
+ lock: rowLock,
+ row,
+ });
+ if (!diff || seenPaths.has(diff.path)) continue;
+ seenPaths.add(diff.path);
+ diffs.push(diff);
+ }
+ }
+
+ return {
+ project,
+ dataRepo,
+ cliVersion: CLI_VERSION,
+ count: rows.length,
+ items: rows,
+ ...(opts.diff && { diffs }),
+ external,
+ externalClaudePlugins,
+ personalClaudeExternal,
+ };
+}
+
+async function currentInstalledSha(
+ project: string,
+ kind: ItemKind,
+ name: string,
+ scope: "project" | "local",
+): Promise {
+ if (scope === "local" && kind === "skills") {
+ const path = installedPath(project, kind, name);
+ return existsSync(path) ? await shaOfItem(path) : null;
+ }
+ return await shaOfInstalled(project, kind, name);
+}
+
+function codexWarningsForItem(
+ project: string,
+ kind: ItemKind,
+): RuntimeWarning[] {
+ if (kind !== "mcp" && kind !== "codex-config") return [];
+ return codexProjectTrustWarnings(project);
+}
+
+async function itemFragmentContributionState(
+ project: string,
+ dataRepo: string,
+ manifest: Manifest,
+ lock: Lock,
+ kind: Extract,
+ name: string,
+ entry: LockEntry,
+): Promise {
+ if (entry.source !== "data") return "ok";
+ const targets = await lockedFragmentTargetsForItem(
+ dataRepo,
+ kind,
+ name,
+ entry,
+ manifest,
+ );
+ let state: FragmentContributionState = "ok";
+ for (const target of targets) {
+ const targetState = await fragmentContributionState(
+ project,
+ dataRepo,
+ manifest,
+ lock,
+ target,
+ );
+ if (targetState === "missing") return "missing";
+ if (targetState === "drifted") state = "drifted";
+ }
+ return state;
+}
diff --git a/src/web-embed.ts b/src/web-embed.ts
new file mode 100644
index 0000000..6894480
--- /dev/null
+++ b/src/web-embed.ts
@@ -0,0 +1,8 @@
+// Web UI assets embedded into the compiled binary.
+//
+// This is a committed stub (empty in source). `bun run embed-web` rewrites it
+// from web/dist before `bun build --compile` so the single `capshelf` binary
+// serves the UI with no external files; the Makefile restores this stub after
+// compiling. When empty, `serve` falls back to reading web/dist from disk
+// (the dev path).
+export const WEB_ASSETS: Record = {};
diff --git a/tests/recent-commits.test.ts b/tests/recent-commits.test.ts
new file mode 100644
index 0000000..2bb7d14
--- /dev/null
+++ b/tests/recent-commits.test.ts
@@ -0,0 +1,63 @@
+import { $ } from "bun";
+import { describe, expect, test } from "bun:test";
+import { mkdtemp, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { recentCommits } from "../src/git";
+
+async function tempRepo(): Promise {
+ const repo = await mkdtemp(join(tmpdir(), "capshelf-recent-"));
+ await $`git -C ${repo} init -q`.quiet();
+ await $`git -C ${repo} config user.email dana@acme.test`.quiet();
+ await $`git -C ${repo} config user.name Dana`.quiet();
+ return repo;
+}
+
+async function commit(
+ repo: string,
+ file: string,
+ message: string,
+): Promise {
+ await writeFile(join(repo, file), `${message}\n`);
+ await $`git -C ${repo} add -A`.quiet();
+ await $`git -C ${repo} commit -qm ${message}`.quiet();
+}
+
+describe("recentCommits", () => {
+ test("returns commits newest-first with parsed fields", async () => {
+ const repo = await tempRepo();
+ await commit(repo, "a", "first");
+ await commit(repo, "b", "second");
+ await commit(repo, "c", "third");
+
+ const commits = await recentCommits(repo);
+ expect(commits.map((c) => c.subject)).toEqual(["third", "second", "first"]);
+ expect(commits[0]!.author).toBe("Dana");
+ expect(commits[0]!.sha).toMatch(/^[0-9a-f]{40}$/);
+ expect(Number.isNaN(Date.parse(commits[0]!.date))).toBe(false);
+ });
+
+ test("respects the limit", async () => {
+ const repo = await tempRepo();
+ await commit(repo, "a", "one");
+ await commit(repo, "b", "two");
+ await commit(repo, "c", "three");
+
+ expect((await recentCommits(repo, 2)).map((c) => c.subject)).toEqual([
+ "three",
+ "two",
+ ]);
+ });
+
+ test("subjects with unit-separator-unsafe characters parse intact", async () => {
+ const repo = await tempRepo();
+ await commit(repo, "a", "fix: handle a|b and spacing");
+ const [c] = await recentCommits(repo);
+ expect(c!.subject).toBe("fix: handle a|b and spacing");
+ });
+
+ test("returns [] for a non-git directory instead of throwing", async () => {
+ const dir = await mkdtemp(join(tmpdir(), "capshelf-norepo-"));
+ expect(await recentCommits(dir)).toEqual([]);
+ });
+});
diff --git a/tests/serve-api.test.ts b/tests/serve-api.test.ts
new file mode 100644
index 0000000..c000dbb
--- /dev/null
+++ b/tests/serve-api.test.ts
@@ -0,0 +1,173 @@
+import { $ } from "bun";
+import { beforeAll, describe, expect, test } from "bun:test";
+import { mkdtemp, mkdir, realpath, writeFile } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { tmpdir } from "node:os";
+import { handleApiRequest } from "../src/serve-api";
+
+const CLI = join(import.meta.dir, "..", "src", "cli.ts");
+
+async function tempDir(prefix: string): Promise {
+ return await realpath(await mkdtemp(join(tmpdir(), prefix)));
+}
+
+async function tempRepo(prefix: string): Promise {
+ const repo = await tempDir(prefix);
+ await $`git -C ${repo} init -q`.quiet();
+ await $`git -C ${repo} config user.email capshelf@example.invalid`.quiet();
+ await $`git -C ${repo} config user.name capshelf`.quiet();
+ await $`git -C ${repo} remote add origin https://example.invalid/${basename(repo)}`.quiet();
+ return repo;
+}
+
+function cli(args: string[], cwd: string) {
+ return Bun.spawnSync({
+ cmd: [process.execPath, CLI, ...args],
+ cwd,
+ env: process.env,
+ stdout: "pipe",
+ stderr: "pipe",
+ });
+}
+
+let PROJECT = "";
+let DATA = "";
+
+// Build one real bound project with an installed data item, a settings
+// fragment, and a bundle, then drive the read-only API in-process against it.
+beforeAll(async () => {
+ DATA = await tempRepo("capshelf-api-data-");
+ await mkdir(join(DATA, "skills", "hello"), { recursive: true });
+ await writeFile(
+ join(DATA, "skills", "hello", "SKILL.md"),
+ "---\nname: hello\ndescription: A friendly hello skill.\n---\n# Hello\n",
+ );
+ await mkdir(join(DATA, "settings", "perms"), { recursive: true });
+ await writeFile(
+ join(DATA, "settings", "perms", "settings.json"),
+ `${JSON.stringify({ permissions: { allow: ["Bash(ls)"] } })}\n`,
+ );
+ await mkdir(join(DATA, "bundles"), { recursive: true });
+ await writeFile(
+ join(DATA, "bundles", "starter.yml"),
+ "description: Starter set.\nincludes:\n skills: [hello]\n",
+ );
+ await $`git -C ${DATA} add -A`.quiet();
+ await $`git -C ${DATA} commit -qm ${"init data"}`.quiet();
+
+ PROJECT = await tempRepo("capshelf-api-project-");
+ expect(cli(["init", "--data", DATA], PROJECT).exitCode).toBe(0);
+ expect(cli(["add", "skills/hello"], PROJECT).exitCode).toBe(0);
+
+ // A second data-repo commit so the activity feed has ordering to assert.
+ await writeFile(
+ join(DATA, "settings", "perms", "settings.json"),
+ `${JSON.stringify({ permissions: { allow: ["Bash(ls)", "Bash(pwd)"] } })}\n`,
+ );
+ await $`git -C ${DATA} add -A`.quiet();
+ await $`git -C ${DATA} commit -qm ${"widen perms"}`.quiet();
+});
+
+async function req(path: string, method = "GET") {
+ return handleApiRequest(new Request(`http://localhost${path}`, { method }), {
+ project: PROJECT,
+ });
+}
+
+// JSON.parse(text()) keeps the parsed value implicitly-typed (no `any` keyword,
+// which biome would reject), matching the other suites in this repo.
+async function body(path: string) {
+ const res = (await req(path))!;
+ return JSON.parse(await res.text());
+}
+
+describe("serve API routing", () => {
+ test("returns null for non-/api paths (handed to static serving)", async () => {
+ expect(await req("/index.html")).toBeNull();
+ });
+
+ test("rejects non-GET with 405 read-only", async () => {
+ const res = (await req("/api/status", "POST"))!;
+ expect(res.status).toBe(405);
+ expect(JSON.parse(await res.text()).error).toBe("read-only");
+ });
+
+ test("unknown /api route is 404", async () => {
+ expect((await req("/api/nope"))!.status).toBe(404);
+ });
+
+ test("a handler failure becomes a 500 JSON error, not a crash", async () => {
+ // A malformed item ref makes parseItemRef throw inside the handler.
+ const res = (await req("/api/status?item=skills/"))!;
+ expect(res.status).toBe(500);
+ expect(typeof JSON.parse(await res.text()).error).toBe("string");
+ });
+});
+
+describe("serve API endpoints", () => {
+ test("/api/health reports a ready, read-only binding", async () => {
+ const h = await body("/api/health");
+ expect(h.readOnly).toBe(true);
+ expect(h.dataRepoReady).toBe(true);
+ expect(h.project).toBe(PROJECT);
+ expect(typeof h.version).toBe("string");
+ });
+
+ test("/api/status lists the installed item with drift state", async () => {
+ const s = await body("/api/status");
+ const hello = s.items.find(
+ (i: { kind: string; name: string }) =>
+ i.kind === "skills" && i.name === "hello",
+ );
+ expect(hello).toBeDefined();
+ expect(hello.state).toBe("ok");
+ expect(hello.lockedSha).toMatch(/^[0-9a-f]+$/);
+ });
+
+ test("/api/catalog lists data + system items and bundles", async () => {
+ const c = await body("/api/catalog");
+ expect(c.dataRepoReady).toBe(true);
+ const names = c.data.map((i: { name: string }) => i.name);
+ expect(names).toContain("hello");
+ expect(names).toContain("perms");
+ expect(c.system.length).toBeGreaterThan(0);
+ const starter = c.bundles.find(
+ (b: { name: string }) => b.name === "starter",
+ );
+ expect(starter.members).toContain("skills/hello");
+ });
+
+ test("/api/catalog?kind filters; an invalid kind is ignored", async () => {
+ const onlySkills = await body("/api/catalog?kind=skills");
+ expect(
+ onlySkills.data.every((i: { kind: string }) => i.kind === "skills"),
+ ).toBe(true);
+
+ const bogus = await body("/api/catalog?kind=bogus");
+ const kinds = new Set(bogus.data.map((i: { kind: string }) => i.kind));
+ expect(kinds.has("settings")).toBe(true); // not narrowed away
+ });
+
+ test("/api/config exposes counts and paths", async () => {
+ const cfg = await body("/api/config");
+ expect(cfg.counts.tracked).toBeGreaterThan(0);
+ expect(cfg.paths.manifest.endsWith("capshelf.json")).toBe(true);
+ expect(typeof cfg.installMode).toBe("string");
+ });
+
+ test("/api/activity returns commits newest-first with head matching", async () => {
+ const a = await body("/api/activity");
+ expect(a.dataRepoReady).toBe(true);
+ expect(a.commits.length).toBeGreaterThanOrEqual(2);
+ expect(a.commits[0].subject).toBe("widen perms");
+ expect(a.head).toBe(a.commits[0].sha);
+ });
+
+ test("/api/activity?n caps the result and ignores junk", async () => {
+ expect((await body("/api/activity?n=1")).commits.length).toBe(1);
+ // non-integer falls back to the default rather than feeding git a float
+ expect(
+ (await body("/api/activity?n=abc")).commits.length,
+ ).toBeGreaterThanOrEqual(2);
+ });
+});
diff --git a/tests/serve-static.test.ts b/tests/serve-static.test.ts
new file mode 100644
index 0000000..4190008
--- /dev/null
+++ b/tests/serve-static.test.ts
@@ -0,0 +1,37 @@
+import { describe, expect, test } from "bun:test";
+import { staticTarget } from "../src/commands/serve";
+
+// staticTarget confines a request path to the web dir or returns null. These
+// guard the path-traversal fix (a bare startsWith let "-evil" through).
+describe("staticTarget path confinement", () => {
+ const DIR = "/srv/app/web/dist";
+
+ test("maps / to index.html inside the dir", () => {
+ expect(staticTarget(DIR, "/")).toBe(`${DIR}/index.html`);
+ });
+
+ test("resolves a normal nested asset", () => {
+ expect(staticTarget(DIR, "/assets/app.js")).toBe(`${DIR}/assets/app.js`);
+ });
+
+ test("collapses . segments but stays inside", () => {
+ expect(staticTarget(DIR, "/./assets/./app.js")).toBe(
+ `${DIR}/assets/app.js`,
+ );
+ });
+
+ test("rejects parent traversal", () => {
+ expect(staticTarget(DIR, "/../package.json")).toBeNull();
+ expect(staticTarget(DIR, "/../../etc/passwd")).toBeNull();
+ });
+
+ test("rejects a sibling-directory prefix bypass", () => {
+ // "/srv/app/web/dist-evil/x" must NOT pass: it shares the dist prefix but
+ // is a different directory. This is the bug the trailing-sep check fixes.
+ expect(staticTarget(DIR, "/../dist-evil/secret")).toBeNull();
+ });
+
+ test("rejects a path that normalizes to the parent itself", () => {
+ expect(staticTarget(DIR, "/..")).toBeNull();
+ });
+});
diff --git a/web/README.md b/web/README.md
new file mode 100644
index 0000000..cad81a9
--- /dev/null
+++ b/web/README.md
@@ -0,0 +1,33 @@
+# capshelf web
+
+The web UI for `capshelf serve` — a React + Vite single-page app that renders
+the read-only API the server exposes (`/api/status`, `/api/catalog`,
+`/api/health`). Theme: **Patina** (warm graphite neutrals, verdigris/teal
+accent, OKLCH); color is reserved for drift status, monospace for SHAs/paths.
+
+## Develop
+
+```sh
+# terminal 1 — API (from repo root)
+bun run serve # capshelf serve on :4717
+
+# terminal 2 — Vite dev server with HMR, proxies /api to :4717
+bun run web:dev # http://localhost:5181
+```
+
+## Build
+
+```sh
+bun run web:build # emits web/dist/
+bun run serve # serves web/dist + the API on :4717
+```
+
+`web/dist` is gitignored; run the build once after cloning (or before shipping
+a binary that embeds it).
+
+## Layout
+
+- `src/api.ts` — typed client + presentation helpers (state → bucket/label).
+- `src/components/` — `Shell` (sidebar + topbar), `Overview`, `ItemScreen`
+ (master-detail + diff drawer), `Shelf`, `Bundles`, shared `bits`.
+- `src/styles.css` — Patina tokens (light + dark) and all component styles.
diff --git a/web/bun.lock b/web/bun.lock
new file mode 100644
index 0000000..e382d5a
--- /dev/null
+++ b/web/bun.lock
@@ -0,0 +1,249 @@
+{
+ "lockfileVersion": 1,
+ "configVersion": 1,
+ "workspaces": {
+ "": {
+ "name": "capshelf-web",
+ "dependencies": {
+ "react": "^18.3.1",
+ "react-dom": "^18.3.1",
+ },
+ "devDependencies": {
+ "@types/react": "^18.3.12",
+ "@types/react-dom": "^18.3.1",
+ "@vitejs/plugin-react": "^4.3.4",
+ "typescript": "^5.6.0",
+ "vite": "^5.4.11",
+ },
+ },
+ },
+ "packages": {
+ "@babel/code-frame": ["@babel/code-frame@7.29.7", "", { "dependencies": { "@babel/helper-validator-identifier": "^7.29.7", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw=="],
+
+ "@babel/compat-data": ["@babel/compat-data@7.29.7", "", {}, "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg=="],
+
+ "@babel/core": ["@babel/core@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.7", "@babel/helper-compilation-targets": "^7.29.7", "@babel/helper-module-transforms": "^7.29.7", "@babel/helpers": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/template": "^7.29.7", "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA=="],
+
+ "@babel/generator": ["@babel/generator@7.29.7", "", { "dependencies": { "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ=="],
+
+ "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.29.7", "", { "dependencies": { "@babel/compat-data": "^7.29.7", "@babel/helper-validator-option": "^7.29.7", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g=="],
+
+ "@babel/helper-globals": ["@babel/helper-globals@7.29.7", "", {}, "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA=="],
+
+ "@babel/helper-module-imports": ["@babel/helper-module-imports@7.29.7", "", { "dependencies": { "@babel/traverse": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g=="],
+
+ "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.29.7", "", { "dependencies": { "@babel/helper-module-imports": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7", "@babel/traverse": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg=="],
+
+ "@babel/helper-plugin-utils": ["@babel/helper-plugin-utils@7.29.7", "", {}, "sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw=="],
+
+ "@babel/helper-string-parser": ["@babel/helper-string-parser@7.29.7", "", {}, "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw=="],
+
+ "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.29.7", "", {}, "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg=="],
+
+ "@babel/helper-validator-option": ["@babel/helper-validator-option@7.29.7", "", {}, "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw=="],
+
+ "@babel/helpers": ["@babel/helpers@7.29.7", "", { "dependencies": { "@babel/template": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg=="],
+
+ "@babel/parser": ["@babel/parser@7.29.7", "", { "dependencies": { "@babel/types": "^7.29.7" }, "bin": "./bin/babel-parser.js" }, "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg=="],
+
+ "@babel/plugin-transform-react-jsx-self": ["@babel/plugin-transform-react-jsx-self@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-TL0hMc9xzy86VD31nUiwzd5otRAcyEPcsegCxolO0PvcXuH1v0kECe/UIznYFihpkvU5wg/jk4v0TTEFfm53fw=="],
+
+ "@babel/plugin-transform-react-jsx-source": ["@babel/plugin-transform-react-jsx-source@7.29.7", "", { "dependencies": { "@babel/helper-plugin-utils": "^7.29.7" }, "peerDependencies": { "@babel/core": "^7.0.0-0" } }, "sha512-06IyK09H3wi4cGbhDBwp5gUGo0IKtnYa8tyTiephirPCK6fbobVGiXMMI5zLQ4aKEYP3wZ3ArU44o+8KMrSG/Q=="],
+
+ "@babel/template": ["@babel/template@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/types": "^7.29.7" } }, "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg=="],
+
+ "@babel/traverse": ["@babel/traverse@7.29.7", "", { "dependencies": { "@babel/code-frame": "^7.29.7", "@babel/generator": "^7.29.7", "@babel/helper-globals": "^7.29.7", "@babel/parser": "^7.29.7", "@babel/template": "^7.29.7", "@babel/types": "^7.29.7", "debug": "^4.3.1" } }, "sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw=="],
+
+ "@babel/types": ["@babel/types@7.29.7", "", { "dependencies": { "@babel/helper-string-parser": "^7.29.7", "@babel/helper-validator-identifier": "^7.29.7" } }, "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA=="],
+
+ "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.21.5", "", { "os": "aix", "cpu": "ppc64" }, "sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ=="],
+
+ "@esbuild/android-arm": ["@esbuild/android-arm@0.21.5", "", { "os": "android", "cpu": "arm" }, "sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg=="],
+
+ "@esbuild/android-arm64": ["@esbuild/android-arm64@0.21.5", "", { "os": "android", "cpu": "arm64" }, "sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A=="],
+
+ "@esbuild/android-x64": ["@esbuild/android-x64@0.21.5", "", { "os": "android", "cpu": "x64" }, "sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA=="],
+
+ "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.21.5", "", { "os": "darwin", "cpu": "arm64" }, "sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ=="],
+
+ "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.21.5", "", { "os": "darwin", "cpu": "x64" }, "sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw=="],
+
+ "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.21.5", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g=="],
+
+ "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.21.5", "", { "os": "freebsd", "cpu": "x64" }, "sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ=="],
+
+ "@esbuild/linux-arm": ["@esbuild/linux-arm@0.21.5", "", { "os": "linux", "cpu": "arm" }, "sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA=="],
+
+ "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.21.5", "", { "os": "linux", "cpu": "arm64" }, "sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q=="],
+
+ "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.21.5", "", { "os": "linux", "cpu": "ia32" }, "sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg=="],
+
+ "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.21.5", "", { "os": "linux", "cpu": "none" }, "sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg=="],
+
+ "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.21.5", "", { "os": "linux", "cpu": "none" }, "sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg=="],
+
+ "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.21.5", "", { "os": "linux", "cpu": "ppc64" }, "sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w=="],
+
+ "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.21.5", "", { "os": "linux", "cpu": "none" }, "sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA=="],
+
+ "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.21.5", "", { "os": "linux", "cpu": "s390x" }, "sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A=="],
+
+ "@esbuild/linux-x64": ["@esbuild/linux-x64@0.21.5", "", { "os": "linux", "cpu": "x64" }, "sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ=="],
+
+ "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.21.5", "", { "os": "none", "cpu": "x64" }, "sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg=="],
+
+ "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.21.5", "", { "os": "openbsd", "cpu": "x64" }, "sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow=="],
+
+ "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.21.5", "", { "os": "sunos", "cpu": "x64" }, "sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg=="],
+
+ "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.21.5", "", { "os": "win32", "cpu": "arm64" }, "sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A=="],
+
+ "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.21.5", "", { "os": "win32", "cpu": "ia32" }, "sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA=="],
+
+ "@esbuild/win32-x64": ["@esbuild/win32-x64@0.21.5", "", { "os": "win32", "cpu": "x64" }, "sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw=="],
+
+ "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
+
+ "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+
+ "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
+
+ "@jridgewell/sourcemap-codec": ["@jridgewell/sourcemap-codec@1.5.5", "", {}, "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og=="],
+
+ "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
+
+ "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-beta.27", "", {}, "sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA=="],
+
+ "@rollup/rollup-android-arm-eabi": ["@rollup/rollup-android-arm-eabi@4.62.2", "", { "os": "android", "cpu": "arm" }, "sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg=="],
+
+ "@rollup/rollup-android-arm64": ["@rollup/rollup-android-arm64@4.62.2", "", { "os": "android", "cpu": "arm64" }, "sha512-BaH7BllCACHoH1LguOU56UItGfUWjujlO65kS9LAodViaN4bwIKd7oeW/ZHJ/4ljr/7MIiENnNy3HJ0zXv8Zkw=="],
+
+ "@rollup/rollup-darwin-arm64": ["@rollup/rollup-darwin-arm64@4.62.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-v39RCCvj4He82I9sFmk+M1VZ0PLM9sfsLVikjfx2hYBNALhrrOR2D3JjQA6AhlaSOgcR+RzrKY7e1+bT6SUO/A=="],
+
+ "@rollup/rollup-darwin-x64": ["@rollup/rollup-darwin-x64@4.62.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-yl0y2vq3S3lHeuXhEdss6TWfKW8vkujImO12tn4ZkG/4oghr09LvdYm2RElVjokTQiUvDUGXLGsYeLqUMCKpGA=="],
+
+ "@rollup/rollup-freebsd-arm64": ["@rollup/rollup-freebsd-arm64@4.62.2", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-tT4pvt4qXD+vEoezupCWi+a1F0vvDiksiHc+PxRlYTOH1I6/X4id9jPxTP+Fg+545euaFT1jJVs4CEdHZAU1vw=="],
+
+ "@rollup/rollup-freebsd-x64": ["@rollup/rollup-freebsd-x64@4.62.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-6nU5F2wCW+qvCBhTn1pdIU3bzsIoF7EUwsCDRxilWGprQR6yd508YnH9+OKFCwpfS8pjZqDUmnCAr7exax0XCg=="],
+
+ "@rollup/rollup-linux-arm-gnueabihf": ["@rollup/rollup-linux-arm-gnueabihf@4.62.2", "", { "os": "linux", "cpu": "arm" }, "sha512-n1GJHPOvpIfhi3TmrCeh6S6URt9BFCt0KQE3qvexyGCTAKpR4Lg+eWvNZEqu7epxwus/8ElT3hacYEucm49SZg=="],
+
+ "@rollup/rollup-linux-arm-musleabihf": ["@rollup/rollup-linux-arm-musleabihf@4.62.2", "", { "os": "linux", "cpu": "arm" }, "sha512-JqgflS8wEB+UXV/vS1RpRbifGBeN4D5lz8D8oOFbFZw4vedvdOgCFAjfBmIMdW3yL10XpQQ0Ambepw6MXrhOnA=="],
+
+ "@rollup/rollup-linux-arm64-gnu": ["@rollup/rollup-linux-arm64-gnu@4.62.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-wnFJkogWvN4jm/hQRF2UBaeUmk20j5+DmHvoyWii2b8HJDyvz1MF2OU/6ynXt2KR63rbZLWkFpoytpdc/yBuSA=="],
+
+ "@rollup/rollup-linux-arm64-musl": ["@rollup/rollup-linux-arm64-musl@4.62.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-HVu2bp0zhvJ8xHEV9+UUs7S90VadmBSY3LcIMvozbPo4AuMGDWlz3ymHLHZPX4hR67TKTt8Qp5PJ5RBg/i+RMQ=="],
+
+ "@rollup/rollup-linux-loong64-gnu": ["@rollup/rollup-linux-loong64-gnu@4.62.2", "", { "os": "linux", "cpu": "none" }, "sha512-mQqqAV8QaoSgr9I2fKDLY2BAVvmKjWoGiu/cSYQonsLvtqwEn1E4QYfnCOcp5zoEqNhsDYin1s6jx/VJmrxlZg=="],
+
+ "@rollup/rollup-linux-loong64-musl": ["@rollup/rollup-linux-loong64-musl@4.62.2", "", { "os": "linux", "cpu": "none" }, "sha512-IxKLoxCQ2IWi6bT2akyDUBGsOImDKB+sPp4EsTmwFQ/fMwpCKm8uLSSgP/Kx/QYUgKis6SEZ5/Nlhup0DIA0PQ=="],
+
+ "@rollup/rollup-linux-ppc64-gnu": ["@rollup/rollup-linux-ppc64-gnu@4.62.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-Mk5ha2RQSgyFfmYYLkBpPnUk8D8FriBxesO1u9O75X0mHgXL1UQcH5Itl2lurWL2tj0RxV9b9tJgipac0hRY9A=="],
+
+ "@rollup/rollup-linux-ppc64-musl": ["@rollup/rollup-linux-ppc64-musl@4.62.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-CjvEnqJL/0/TQ3TXX3OPIJ/kmBellrWd4heXUmHeJlTnmwjKpSJzoehLaL6Xk0ZnMHBu9dZuFADNOrtjF4v+2w=="],
+
+ "@rollup/rollup-linux-riscv64-gnu": ["@rollup/rollup-linux-riscv64-gnu@4.62.2", "", { "os": "linux", "cpu": "none" }, "sha512-1SiZbzwdkaDURsew/tSOrooKiYy7EQGT6m8ufavAi9NEyQb/6VuIxFXAL1fqa4iZe3g4NbNk4P7J32z2tw5Mgg=="],
+
+ "@rollup/rollup-linux-riscv64-musl": ["@rollup/rollup-linux-riscv64-musl@4.62.2", "", { "os": "linux", "cpu": "none" }, "sha512-nQts12zJ3NQRoE6uYljOH89v7szzLDvG2JD/vsX+vGXU8w/At1GowTZ5/7qeFQ8m7L55rpR8Okugnuo5bgjy2Q=="],
+
+ "@rollup/rollup-linux-s390x-gnu": ["@rollup/rollup-linux-s390x-gnu@4.62.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-E9/ll019jhPIJgpzfZoIkBGhcz+kKNgVWYRY0zr9srBdPPFVpvOKW8VaJKUbeK+eZXyQF9ltME+Kk6affeaPgg=="],
+
+ "@rollup/rollup-linux-x64-gnu": ["@rollup/rollup-linux-x64-gnu@4.62.2", "", { "os": "linux", "cpu": "x64" }, "sha512-5BqxR/pshjey51iliyzTD5Xi3EN0aLmQ2lZ3lvefVV9c82BvrLo2/6OT55iifpWBufs6kdwWbuOKS841DrmK9A=="],
+
+ "@rollup/rollup-linux-x64-musl": ["@rollup/rollup-linux-x64-musl@4.62.2", "", { "os": "linux", "cpu": "x64" }, "sha512-uNN83XxQrRAh/w0/pmAfibcwyb6YWt4gP+dpnQKPVJshAloQ785ii8CT8ZCIxkGg9opVsvAlGhFitSm6D1Jjpg=="],
+
+ "@rollup/rollup-openbsd-x64": ["@rollup/rollup-openbsd-x64@4.62.2", "", { "os": "openbsd", "cpu": "x64" }, "sha512-srjEIxSH3LRnJN6THczDHWQplqEMFiAJrTab0msUryh9kwNpkICf3Ea6q6MN/2cZwRFUNx5w+h6Hpi4QuHS6Zg=="],
+
+ "@rollup/rollup-openharmony-arm64": ["@rollup/rollup-openharmony-arm64@4.62.2", "", { "os": "none", "cpu": "arm64" }, "sha512-8hOJnxgbyObnCm5AlRA3A931xX19xq80RjVTKgJOvEKWqJruP/Uf12IbAOaDjjEXYRewwHLfmF0YRIdK3OwKWA=="],
+
+ "@rollup/rollup-win32-arm64-msvc": ["@rollup/rollup-win32-arm64-msvc@4.62.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-mmF4AY1i0hG/bLWUctUq59gtmgaSIRa3cu/A3JFRp/sCNEme2bgDEiDS22P9FbnJB8NJNF4jPJiSP5RHQpUTDg=="],
+
+ "@rollup/rollup-win32-ia32-msvc": ["@rollup/rollup-win32-ia32-msvc@4.62.2", "", { "os": "win32", "cpu": "ia32" }, "sha512-DZgkknc6jhHrk46V25vbAM0zZkyP0nSDkJB8/dRkLTxv470dOmWDqGoEJl/9A0dFfS7yE3REOwNDxpHwSLSt0Q=="],
+
+ "@rollup/rollup-win32-x64-gnu": ["@rollup/rollup-win32-x64-gnu@4.62.2", "", { "os": "win32", "cpu": "x64" }, "sha512-T6xr6ucWSFto+VGajA8YH26LdpHRuP4YLHEKAtCWvJDOlnmWcDZVCI2Jmjr+IFHDlt2zRaTAKE4tfjTaWLgJBg=="],
+
+ "@rollup/rollup-win32-x64-msvc": ["@rollup/rollup-win32-x64-msvc@4.62.2", "", { "os": "win32", "cpu": "x64" }, "sha512-BfzEnDJOt9T8M989/lA37EcJgat01wLRnoi5dQf3QzOH7jzpqTAzdDbVfRljVr5r+jzKqpbHeyOfAaXxAd0PAA=="],
+
+ "@types/babel__core": ["@types/babel__core@7.20.5", "", { "dependencies": { "@babel/parser": "^7.20.7", "@babel/types": "^7.20.7", "@types/babel__generator": "*", "@types/babel__template": "*", "@types/babel__traverse": "*" } }, "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA=="],
+
+ "@types/babel__generator": ["@types/babel__generator@7.27.0", "", { "dependencies": { "@babel/types": "^7.0.0" } }, "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg=="],
+
+ "@types/babel__template": ["@types/babel__template@7.4.4", "", { "dependencies": { "@babel/parser": "^7.1.0", "@babel/types": "^7.0.0" } }, "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A=="],
+
+ "@types/babel__traverse": ["@types/babel__traverse@7.28.0", "", { "dependencies": { "@babel/types": "^7.28.2" } }, "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q=="],
+
+ "@types/estree": ["@types/estree@1.0.9", "", {}, "sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg=="],
+
+ "@types/prop-types": ["@types/prop-types@15.7.15", "", {}, "sha512-F6bEyamV9jKGAFBEmlQnesRPGOQqS2+Uwi0Em15xenOxHaf2hv6L8YCVn3rPdPJOiJfPiCnLIRyvwVaqMY3MIw=="],
+
+ "@types/react": ["@types/react@18.3.31", "", { "dependencies": { "@types/prop-types": "*", "csstype": "^3.2.2" } }, "sha512-vfEqpXTvwT91yhmwdfouStN2hSKwTvyRs8qpLfADyrq/kxDw0hZM7Wk9Ug1FELj8hIby+S/+kQCSRFF32nv2Qw=="],
+
+ "@types/react-dom": ["@types/react-dom@18.3.7", "", { "peerDependencies": { "@types/react": "^18.0.0" } }, "sha512-MEe3UeoENYVFXzoXEWsvcpg6ZvlrFNlOQ7EOsvhI3CfAXwzPfO8Qwuxd40nepsYKqyyVQnTdEfv68q91yLcKrQ=="],
+
+ "@vitejs/plugin-react": ["@vitejs/plugin-react@4.7.0", "", { "dependencies": { "@babel/core": "^7.28.0", "@babel/plugin-transform-react-jsx-self": "^7.27.1", "@babel/plugin-transform-react-jsx-source": "^7.27.1", "@rolldown/pluginutils": "1.0.0-beta.27", "@types/babel__core": "^7.20.5", "react-refresh": "^0.17.0" }, "peerDependencies": { "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0" } }, "sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA=="],
+
+ "baseline-browser-mapping": ["baseline-browser-mapping@2.10.40", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-BSSLZ9/Cjjv7Gtj5B68ZzXcXUg8iOf3fme+FCuh8rC/Go+Kmh8cox7M3A8dolou16s64QjLPOSdngh7GxXvkSw=="],
+
+ "browserslist": ["browserslist@4.28.4", "", { "dependencies": { "baseline-browser-mapping": "^2.10.38", "caniuse-lite": "^1.0.30001799", "electron-to-chromium": "^1.5.376", "node-releases": "^2.0.48", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-MTc8i/x9jBQd1iMw2CFGS+rwMa07eYjLR0CCTLDACl9xhxy+nIs3KeML/biicXtk9JrZ6dnnTatmc7ErPXIxqw=="],
+
+ "caniuse-lite": ["caniuse-lite@1.0.30001799", "", {}, "sha512-hG1bReV+OUU+MOqK4t/ZWI0tZOyz3rqS9XuhOUz1cIcbwBKjOyJEJuw9ER5JuNyqxNk8u/JUVbGibBOL1yrjFw=="],
+
+ "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
+
+ "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
+
+ "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" } }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+
+ "electron-to-chromium": ["electron-to-chromium@1.5.381", "", {}, "sha512-n9Wa6yB+vDsGuA8AKbl/0z7HbvWqt5jxIdvr1IUicd0ryPrk7/xzwqLv8D9AbbvZ6avVNtXYLTfmgFHkwkyelg=="],
+
+ "esbuild": ["esbuild@0.21.5", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.21.5", "@esbuild/android-arm": "0.21.5", "@esbuild/android-arm64": "0.21.5", "@esbuild/android-x64": "0.21.5", "@esbuild/darwin-arm64": "0.21.5", "@esbuild/darwin-x64": "0.21.5", "@esbuild/freebsd-arm64": "0.21.5", "@esbuild/freebsd-x64": "0.21.5", "@esbuild/linux-arm": "0.21.5", "@esbuild/linux-arm64": "0.21.5", "@esbuild/linux-ia32": "0.21.5", "@esbuild/linux-loong64": "0.21.5", "@esbuild/linux-mips64el": "0.21.5", "@esbuild/linux-ppc64": "0.21.5", "@esbuild/linux-riscv64": "0.21.5", "@esbuild/linux-s390x": "0.21.5", "@esbuild/linux-x64": "0.21.5", "@esbuild/netbsd-x64": "0.21.5", "@esbuild/openbsd-x64": "0.21.5", "@esbuild/sunos-x64": "0.21.5", "@esbuild/win32-arm64": "0.21.5", "@esbuild/win32-ia32": "0.21.5", "@esbuild/win32-x64": "0.21.5" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw=="],
+
+ "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
+
+ "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+ "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
+
+ "js-tokens": ["js-tokens@4.0.0", "", {}, "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+
+ "jsesc": ["jsesc@3.1.0", "", { "bin": { "jsesc": "bin/jsesc" } }, "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA=="],
+
+ "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+
+ "loose-envify": ["loose-envify@1.4.0", "", { "dependencies": { "js-tokens": "^3.0.0 || ^4.0.0" }, "bin": { "loose-envify": "cli.js" } }, "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+
+ "lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
+
+ "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+
+ "nanoid": ["nanoid@3.3.15", "", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA=="],
+
+ "node-releases": ["node-releases@2.0.50", "", {}, "sha512-J6l92tKHX6w8Jy5nO1Vuc01NoIiRGi/d6qBKVxh+IQ8Cr3b6HbVNfKiF8ZpFKufTwpwxMmce2W3iQZ861ZRyTg=="],
+
+ "picocolors": ["picocolors@1.1.1", "", {}, "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA=="],
+
+ "postcss": ["postcss@8.5.16", "", { "dependencies": { "nanoid": "^3.3.12", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg=="],
+
+ "react": ["react@18.3.1", "", { "dependencies": { "loose-envify": "^1.1.0" } }, "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+
+ "react-dom": ["react-dom@18.3.1", "", { "dependencies": { "loose-envify": "^1.1.0", "scheduler": "^0.23.2" }, "peerDependencies": { "react": "^18.3.1" } }, "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw=="],
+
+ "react-refresh": ["react-refresh@0.17.0", "", {}, "sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ=="],
+
+ "rollup": ["rollup@4.62.2", "", { "dependencies": { "@types/estree": "1.0.9" }, "optionalDependencies": { "@rollup/rollup-android-arm-eabi": "4.62.2", "@rollup/rollup-android-arm64": "4.62.2", "@rollup/rollup-darwin-arm64": "4.62.2", "@rollup/rollup-darwin-x64": "4.62.2", "@rollup/rollup-freebsd-arm64": "4.62.2", "@rollup/rollup-freebsd-x64": "4.62.2", "@rollup/rollup-linux-arm-gnueabihf": "4.62.2", "@rollup/rollup-linux-arm-musleabihf": "4.62.2", "@rollup/rollup-linux-arm64-gnu": "4.62.2", "@rollup/rollup-linux-arm64-musl": "4.62.2", "@rollup/rollup-linux-loong64-gnu": "4.62.2", "@rollup/rollup-linux-loong64-musl": "4.62.2", "@rollup/rollup-linux-ppc64-gnu": "4.62.2", "@rollup/rollup-linux-ppc64-musl": "4.62.2", "@rollup/rollup-linux-riscv64-gnu": "4.62.2", "@rollup/rollup-linux-riscv64-musl": "4.62.2", "@rollup/rollup-linux-s390x-gnu": "4.62.2", "@rollup/rollup-linux-x64-gnu": "4.62.2", "@rollup/rollup-linux-x64-musl": "4.62.2", "@rollup/rollup-openbsd-x64": "4.62.2", "@rollup/rollup-openharmony-arm64": "4.62.2", "@rollup/rollup-win32-arm64-msvc": "4.62.2", "@rollup/rollup-win32-ia32-msvc": "4.62.2", "@rollup/rollup-win32-x64-gnu": "4.62.2", "@rollup/rollup-win32-x64-msvc": "4.62.2", "fsevents": "~2.3.2" }, "bin": { "rollup": "dist/bin/rollup" } }, "sha512-RFnrW4lhXA3s3eqHDZvN654g8OTjzRfqpIRJYczCGB6HzphckVAi/Qh4tbPUbRuDi7s1Llv8g/NspLkttY3gTA=="],
+
+ "scheduler": ["scheduler@0.23.2", "", { "dependencies": { "loose-envify": "^1.1.0" } }, "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ=="],
+
+ "semver": ["semver@6.3.1", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="],
+
+ "source-map-js": ["source-map-js@1.2.1", "", {}, "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA=="],
+
+ "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+ "update-browserslist-db": ["update-browserslist-db@1.2.3", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w=="],
+
+ "vite": ["vite@5.4.21", "", { "dependencies": { "esbuild": "^0.21.3", "postcss": "^8.4.43", "rollup": "^4.20.0" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^18.0.0 || >=20.0.0", "less": "*", "lightningcss": "^1.21.0", "sass": "*", "sass-embedded": "*", "stylus": "*", "sugarss": "*", "terser": "^5.4.0" }, "optionalPeers": ["@types/node", "less", "lightningcss", "sass", "sass-embedded", "stylus", "sugarss", "terser"], "bin": { "vite": "bin/vite.js" } }, "sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw=="],
+
+ "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+ }
+}
diff --git a/web/index.html b/web/index.html
new file mode 100644
index 0000000..2dda33d
--- /dev/null
+++ b/web/index.html
@@ -0,0 +1,12 @@
+
+
+
+
+
+ capshelf
+
+
+
+
+
+
diff --git a/web/package.json b/web/package.json
new file mode 100644
index 0000000..e4c9031
--- /dev/null
+++ b/web/package.json
@@ -0,0 +1,21 @@
+{
+ "name": "capshelf-web",
+ "private": true,
+ "type": "module",
+ "scripts": {
+ "dev": "vite",
+ "build": "tsc -b && vite build",
+ "preview": "vite preview"
+ },
+ "dependencies": {
+ "react": "^18.3.1",
+ "react-dom": "^18.3.1"
+ },
+ "devDependencies": {
+ "@types/react": "^18.3.12",
+ "@types/react-dom": "^18.3.1",
+ "@vitejs/plugin-react": "^4.3.4",
+ "typescript": "^5.6.0",
+ "vite": "^5.4.11"
+ }
+}
diff --git a/web/src/App.tsx b/web/src/App.tsx
new file mode 100644
index 0000000..5d6c2d3
--- /dev/null
+++ b/web/src/App.tsx
@@ -0,0 +1,130 @@
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { api } from "./api";
+import type { Catalog, Health, StatusReport, StatusRow } from "./api";
+import { Shell } from "./components/Shell";
+import { Overview } from "./components/Overview";
+import { ItemScreen } from "./components/ItemScreen";
+import { Shelf } from "./components/Shelf";
+import { Bundles } from "./components/Bundles";
+import { Settings } from "./components/Settings";
+import { Activity } from "./components/Activity";
+import { CommandPalette } from "./components/CommandPalette";
+import { CommandProvider } from "./components/CommandDialog";
+import { bucketOf } from "./api";
+
+const ROUTES = ["overview", "items", "shelf", "bundles", "activity", "settings"] as const;
+type Route = (typeof ROUTES)[number];
+const TITLE: Record = {
+ overview: "Overview", items: "Items", shelf: "Shelf",
+ bundles: "Bundles", activity: "Activity", settings: "Settings",
+};
+
+function currentRoute(): Route {
+ const h = location.hash.replace(/^#/, "") as Route;
+ return ROUTES.includes(h) ? h : "overview";
+}
+
+export default function App() {
+ const [route, setRoute] = useState(currentRoute());
+ const [health, setHealth] = useState(null);
+ const [report, setReport] = useState(null);
+ const [catalog, setCatalog] = useState(null);
+ const [error, setError] = useState(null);
+ const [paletteOpen, setPaletteOpen] = useState(
+ new URLSearchParams(location.search).get("cmdk") === "1",
+ );
+
+ useEffect(() => {
+ const onHash = () => setRoute(currentRoute());
+ addEventListener("hashchange", onHash);
+ return () => removeEventListener("hashchange", onHash);
+ }, []);
+
+ // ⌘K / Ctrl-K opens the command palette.
+ useEffect(() => {
+ const onKey = (e: KeyboardEvent) => {
+ if ((e.metaKey || e.ctrlKey) && e.key.toLowerCase() === "k") {
+ e.preventDefault();
+ setPaletteOpen((o) => !o);
+ }
+ };
+ addEventListener("keydown", onKey);
+ return () => removeEventListener("keydown", onKey);
+ }, []);
+
+ // theme
+ useEffect(() => {
+ if (localStorage.getItem("capshelf-theme") === "light")
+ document.body.classList.add("light");
+ }, []);
+ const toggleTheme = useCallback(() => {
+ const light = document.body.classList.toggle("light");
+ localStorage.setItem("capshelf-theme", light ? "light" : "dark");
+ }, []);
+
+ // initial load: health + status
+ useEffect(() => {
+ Promise.all([api.health(), api.status()])
+ .then(([h, r]) => { setHealth(h); setReport(r); })
+ .catch((e) => setError(e instanceof Error ? e.message : String(e)));
+ }, []);
+
+ // catalog loaded lazily for shelf/bundles and palette search
+ useEffect(() => {
+ if ((route === "shelf" || route === "bundles" || paletteOpen) && !catalog)
+ api.catalog().then(setCatalog).catch(() => setCatalog(null));
+ }, [route, catalog, paletteOpen]);
+
+ const installed = useMemo(() => {
+ const m = new Map();
+ for (const r of report?.items ?? []) m.set(`${r.kind}/${r.name}`, r);
+ return m;
+ }, [report]);
+
+ const attention = useMemo(
+ () => (report?.items ?? []).filter((r) => {
+ const b = bucketOf(r.state);
+ return b === "update" || b === "drift";
+ }).length,
+ [report],
+ );
+
+ return (
+
+ setPaletteOpen(true)}
+ >
+ {error ? (
+
+ ) : route === "overview" ? (
+ report ?
+ setPaletteOpen(false)}
+ report={report}
+ catalog={catalog}
+ />
+
+ );
+}
+
+function Loading() {
+ return (path: string): Promise {
+ const res = await fetch(path, { headers: { accept: "application/json" } });
+ if (!res.ok) {
+ let msg = `${res.status} ${res.statusText}`;
+ try {
+ const body = (await res.json()) as { error?: string };
+ if (body.error) msg = body.error;
+ } catch {
+ /* non-JSON error body */
+ }
+ throw new Error(msg);
+ }
+ return (await res.json()) as T;
+}
+
+export interface Config {
+ project: string;
+ dataRepo: string | null;
+ dataRepoReady: boolean;
+ dataRepoUpstream: string | null;
+ installMode: string;
+ readOnly: boolean;
+ paths: { manifest: string; lock: string };
+ counts: {
+ tracked: number; local: number;
+ skills: number; settings: number; mcp: number; codexConfig: number;
+ };
+}
+
+export interface RepoCommit {
+ sha: string; author: string; date: string; subject: string;
+}
+export interface Activity {
+ dataRepoReady: boolean;
+ dataRepo: string | null;
+ head: string | null;
+ commits: RepoCommit[];
+}
+
+export const api = {
+ health: () => get("api/health"),
+ config: () => get("api/config"),
+ activity: () => get("api/activity"),
+ status: (opts: { diff?: boolean; item?: string } = {}) => {
+ const q = new URLSearchParams();
+ if (opts.diff) q.set("diff", "1");
+ if (opts.item) q.set("item", opts.item);
+ const qs = q.toString();
+ return get(`api/status${qs ? `?${qs}` : ""}`);
+ },
+ catalog: () => get("api/catalog"),
+};
+
+// ---- presentation helpers shared across screens ----
+
+export type Bucket = "sync" | "update" | "drift" | "local" | "external";
+
+export function bucketOf(state: State): Bucket {
+ switch (state) {
+ case "ok":
+ return "sync";
+ case "kept-local":
+ return "local";
+ case "update_available":
+ case "missing_output":
+ case "missing_installed":
+ case "missing_upstream":
+ case "missing_source_commit":
+ return "update";
+ default:
+ return "drift";
+ }
+}
+
+export const STATE_LABEL: Record = {
+ ok: "In sync",
+ "kept-local": "Kept-local",
+ update_available: "Update",
+ drifted_local: "Drifted",
+ drifted_and_update: "Drifted · update",
+ missing_installed: "Missing",
+ missing_output: "Missing output",
+ missing_upstream: "Upstream gone",
+ missing_source_commit: "Commit missing",
+ upstream_dirty: "Source dirty",
+ source_dirty: "Source dirty",
+ drifted_and_upstream_dirty: "Drifted · dirty",
+ output_drift: "Output drift",
+ source_dirty_and_output_drift: "Source · output drift",
+};
diff --git a/web/src/components/Activity.tsx b/web/src/components/Activity.tsx
new file mode 100644
index 0000000..23a4382
--- /dev/null
+++ b/web/src/components/Activity.tsx
@@ -0,0 +1,60 @@
+import { api } from "../api";
+import { useFetch } from "../useFetch";
+
+function ago(iso: string): string {
+ const t = new Date(iso).getTime();
+ if (Number.isNaN(t)) return "";
+ const s = Math.max(0, (Date.now() - t) / 1000);
+ if (s < 60) return "just now";
+ const m = s / 60;
+ if (m < 60) return `${Math.floor(m)}m ago`;
+ const h = m / 60;
+ if (h < 24) return `${Math.floor(h)}h ago`;
+ return `${Math.floor(h / 24)}d ago`;
+}
+
+export function Activity() {
+ const { data, error: err } = useFetch(api.activity);
+
+ if (err) return ;
+ if (!data) return ;
+ if (data.commits.length === 0)
+ return ;
+
+ return (
+ ;
+}) {
+ const showCommand = useCommand();
+ if (!catalog) return ;
+
+ return (
+ (() => {});
+
+/** Open the command dialog from anywhere: const show = useCommand(). */
+export function useCommand(): Show {
+ return useContext(Ctx);
+}
+
+export function CommandProvider({ children }: { children: ReactNode }) {
+ const [req, setReq] = useState(null);
+ const show = useCallback((r) => setReq(r), []);
+
+ // ?cmd= deep-links the dialog open (shareable "run this" links).
+ useEffect(() => {
+ const args = new URLSearchParams(location.search).get("cmd");
+ if (args) setReq({ args });
+ }, []);
+ return (
+
+ {children}
+ {req &&
+ );
+}
+
+function Dialog({ req, onClose }: { req: CommandRequest; onClose: () => void }) {
+ const full = `capshelf ${req.args}`;
+ const [copied, setCopied] = useState(false);
+
+ useEffect(() => {
+ const onKey = (e: KeyboardEvent) => { if (e.key === "Escape") onClose(); };
+ addEventListener("keydown", onKey);
+ return () => removeEventListener("keydown", onKey);
+ }, [onClose]);
+
+ const copy = async () => {
+ try {
+ await navigator.clipboard.writeText(full);
+ setCopied(true);
+ setTimeout(() => setCopied(false), 1600);
+ } catch {
+ setCopied(false);
+ }
+ };
+
+ return (
+ (null);
+
+ const go = (hash: string) => () => { location.hash = hash; onClose(); };
+
+ const commands = useMemo(() => {
+ const nav: Cmd[] = [
+ ["overview", "Overview"], ["items", "Items"], ["shelf", "Shelf"],
+ ["bundles", "Bundles"], ["activity", "Activity"], ["settings", "Settings"],
+ ].map(([id, label]) => ({ id: `nav-${id}`, label: label!, group: "Go to", run: go(`#${id}`) }));
+
+ const items: Cmd[] = (report?.items ?? []).map((r) => ({
+ id: `item-${r.kind}-${r.name}`,
+ label: r.name,
+ hint: `${r.kind} · ${STATE_LABEL[r.state] ?? r.state}`,
+ group: "Items",
+ run: go("#items"),
+ }));
+
+ const shelf: Cmd[] = catalog
+ ? [...catalog.data, ...catalog.system].map((c) => ({
+ id: `cat-${c.kind}-${c.name}`,
+ label: c.name,
+ hint: `${c.kind} · shelf`,
+ group: "Shelf",
+ run: go("#shelf"),
+ }))
+ : [];
+
+ return [...nav, ...items, ...shelf];
+ }, [report, catalog]);
+
+ const results = useMemo(() => {
+ const needle = q.trim().toLowerCase();
+ const list = needle
+ ? commands.filter((c) =>
+ (c.label + " " + (c.hint ?? "")).toLowerCase().includes(needle),
+ )
+ : commands;
+ return list.slice(0, 50);
+ }, [commands, q]);
+
+ useEffect(() => { if (open) { setQ(""); setSel(0); setTimeout(() => inputRef.current?.focus(), 0); } }, [open]);
+ useEffect(() => { setSel(0); }, [q]);
+
+ if (!open) return null;
+
+ const onKey = (e: React.KeyboardEvent) => {
+ if (e.key === "Escape") { onClose(); return; }
+ if (e.key === "ArrowDown") { e.preventDefault(); setSel((s) => Math.min(s + 1, results.length - 1)); }
+ else if (e.key === "ArrowUp") { e.preventDefault(); setSel((s) => Math.max(s - 1, 0)); }
+ else if (e.key === "Enter") { e.preventDefault(); results[sel]?.run(); }
+ };
+
+ let lastGroup = "";
+ return (
+ (ordered[0] ? refOf(ordered[0]) : null);
+ const selected = ordered.find((r) => refOf(r) === selRef) ?? ordered[0] ?? null;
+
+ return (
+ (null);
+ const [loading, setLoading] = useState(false);
+
+ useEffect(() => {
+ let live = true;
+ if (bucket !== "drift") { setDiff(null); return; }
+ setLoading(true);
+ api
+ .status({ item: `${row.kind}/${row.name}`, diff: true })
+ .then((r) => { if (live) setDiff(r.diffs?.[0] ?? null); })
+ .catch(() => { if (live) setDiff(null); })
+ .finally(() => { if (live) setLoading(false); });
+ return () => { live = false; };
+ }, [row.kind, row.name, row.state, bucket]);
+
+ return (
+
+ );
+}
+
+function DiffView({ text }: { text: string }) {
+ const lines = text.split("\n");
+ return (
+ ): number {
+ return { drift: 0, update: 1, local: 2, sync: 3, external: 4 }[bucket];
+}
diff --git a/web/src/components/Overview.tsx b/web/src/components/Overview.tsx
new file mode 100644
index 0000000..756011b
--- /dev/null
+++ b/web/src/components/Overview.tsx
@@ -0,0 +1,144 @@
+import { useMemo, useState } from "react";
+import type { StatusReport } from "../api";
+import { bucketOf } from "../api";
+import { KindIcon, IconMore } from "../icons";
+import { StatStrip, StatusBadge, ExternalBadge, VersionCell, emptyCounts } from "./bits";
+import { useCommand } from "./CommandDialog";
+import type { StatusRow } from "../api";
+
+type Tab = "all" | "attention" | "sync" | "local" | "external";
+
+function rowCommand(r: StatusRow): string {
+ const ref = `${r.kind}/${r.name}`;
+ switch (bucketOf(r.state)) {
+ case "update": return `update ${ref}`;
+ case "drift": return `revert ${ref}`;
+ case "local": return `keep-local ${ref}`;
+ default: return `status ${ref}`;
+ }
+}
+
+export function Overview({ report }: { report: StatusReport }) {
+ const [tab, setTab] = useState("all");
+ const showCommand = useCommand();
+
+ const counts = useMemo(() => {
+ const c = emptyCounts();
+ for (const r of report.items) c[bucketOf(r.state)]++;
+ c.external = report.external.length + report.externalClaudePlugins.length;
+ return c;
+ }, [report]);
+
+ const rows = useMemo(() => {
+ if (tab === "external") return [];
+ return report.items.filter((r) => {
+ const b = bucketOf(r.state);
+ if (tab === "all") return true;
+ if (tab === "attention") return b === "update" || b === "drift";
+ if (tab === "sync") return b === "sync";
+ if (tab === "local") return b === "local";
+ return true;
+ });
+ }, [report, tab]);
+
+ const attention = counts.update + counts.drift;
+
+ return (
+ ;
+ if (!cfg) return
+
+ );
+}
+
+function Row({ k, v, mono }: { k: string; v: string; mono?: boolean }) {
+ return (
+ ;
+}) {
+ const all = useMemo(
+ () => (catalog ? [...catalog.system, ...catalog.data] : []),
+ [catalog],
+ );
+ const skills = all.filter((i) => i.kind === "skills");
+ const frags = all.filter((i) => i.kind !== "skills");
+
+ if (!catalog) return ;
+}) {
+ const showCommand = useCommand();
+ if (items.length === 0) return null;
+ return (
+ <>
+
+ = {
+ sync: "b-sync",
+ update: "b-update",
+ drift: "b-drift",
+ local: "b-local",
+ external: "b-ext",
+};
+
+export function StatusBadge({ state }: { state: State }) {
+ const bucket = bucketOf(state);
+ return (
+
+
+ {STATE_LABEL[state] ?? state}
+
+ );
+}
+
+export function ExternalBadge({ label = "External" }: { label?: string }) {
+ return {label};
+}
+
+/** locked → current/upstream version cell, colored by what changed. */
+export function VersionCell({ row }: { row: StatusRow }) {
+ const bucket = bucketOf(row.state);
+ if (bucket === "sync" || bucket === "local") {
+ return {short(row.lockedSha)};
+ }
+ const to = row.upstreamSha && row.upstreamSha !== row.lockedSha
+ ? short(row.upstreamSha)
+ : row.currentSha && row.currentSha !== row.lockedSha
+ ? `${short(row.currentSha, 4)} · dirty`
+ : short(row.lockedSha);
+ return (
+
+ {short(row.lockedSha)}
+ →
+ {to}
+
+ );
+}
+
+const STAT_META: { bucket: Bucket; label: string; sub: string; color: string }[] = [
+ { bucket: "sync", label: "In sync", sub: "converged to lock", color: "var(--sync)" },
+ { bucket: "update", label: "Updates", sub: "behind data HEAD", color: "var(--update)" },
+ { bucket: "drift", label: "Drifted", sub: "local edits", color: "var(--drift)" },
+ { bucket: "local", label: "Kept-local", sub: "pinned by you", color: "var(--local)" },
+];
+
+export function StatStrip({ counts }: { counts: Record }) {
+ return (
+
+ {STAT_META.map((s) => (
+
+ );
+}
+
+export function emptyCounts(): Record {
+ return { sync: 0, update: 0, drift: 0, local: 0, external: 0 };
+}
diff --git a/web/src/icons.tsx b/web/src/icons.tsx
new file mode 100644
index 0000000..f1031c2
--- /dev/null
+++ b/web/src/icons.tsx
@@ -0,0 +1,45 @@
+import type { ItemKind } from "./api";
+
+type P = { className?: string };
+const S = ({ children, className = "ico" }: { children: React.ReactNode; className?: string }) => (
+
+);
+
+export const IconOverview = (p: P) => (
+
+ ,
+);
diff --git a/web/src/styles.css b/web/src/styles.css
new file mode 100644
index 0000000..20b24eb
--- /dev/null
+++ b/web/src/styles.css
@@ -0,0 +1,255 @@
+/* ============================================================
+ capshelf web — Patina theme (warm graphite + verdigris/teal)
+ color encodes status only; warmth via neutral temperature.
+ OKLCH for perceptual lightness + contrast safety.
+ ============================================================ */
+:root {
+ --bg:oklch(.165 .009 70); --sidebar:oklch(.145 .009 70);
+ --panel:oklch(.205 .010 68); --panel-2:oklch(.235 .011 68); --raise:oklch(.27 .012 68); --hover:oklch(.215 .010 68);
+ --line:oklch(.29 .012 68); --line-2:oklch(.355 .013 68);
+ --text:oklch(.96 .006 75); --muted:oklch(.73 .010 70); --faint:oklch(.59 .011 68); --ghost:oklch(.48 .012 68);
+ --accent:oklch(.70 .09 185); --accent-2:oklch(.76 .09 185); --on-accent:oklch(.17 .02 185);
+ --accent-bg:oklch(.30 .05 185); --accent-ink:oklch(.82 .08 185);
+ --sync:oklch(.75 .13 150); --sync-bg:oklch(.30 .05 150);
+ --update:oklch(.80 .12 78); --update-bg:oklch(.32 .05 78);
+ --drift:oklch(.69 .15 32); --drift-bg:oklch(.32 .06 32);
+ --local:oklch(.72 .12 300); --local-bg:oklch(.32 .06 300);
+ --ext:oklch(.60 .010 70); --ext-bg:oklch(.27 .010 70);
+ --add-line:oklch(.30 .05 150); --add-tx:oklch(.80 .12 150);
+ --del-line:oklch(.30 .06 32); --del-tx:oklch(.76 .13 32);
+}
+body.light {
+ --bg:oklch(.99 .005 80); --sidebar:oklch(.975 .006 78);
+ --panel:oklch(1 0 0); --panel-2:oklch(.975 .007 78); --raise:oklch(.95 .009 78); --hover:oklch(.975 .006 78);
+ --line:oklch(.90 .009 72); --line-2:oklch(.85 .011 72);
+ --text:oklch(.26 .012 70); --muted:oklch(.50 .012 70); --faint:oklch(.62 .011 70); --ghost:oklch(.72 .010 70);
+ --accent:oklch(.52 .10 185); --accent-2:oklch(.46 .10 185); --on-accent:oklch(.99 .01 185);
+ --accent-bg:oklch(.93 .04 185); --accent-ink:oklch(.43 .10 185);
+ --sync:oklch(.52 .13 150); --sync-bg:oklch(.93 .05 150);
+ --update:oklch(.56 .12 70); --update-bg:oklch(.94 .06 78);
+ --drift:oklch(.54 .16 32); --drift-bg:oklch(.94 .05 32);
+ --local:oklch(.52 .15 300); --local-bg:oklch(.94 .04 300);
+ --ext:oklch(.58 .010 70); --ext-bg:oklch(.95 .006 78);
+ --add-line:oklch(.92 .06 150); --add-tx:oklch(.45 .13 150);
+ --del-line:oklch(.93 .06 32); --del-tx:oklch(.50 .16 32);
+}
+
+* { box-sizing: border-box; }
+html, body, #root { margin: 0; height: 100%; }
+body {
+ background: var(--bg); color: var(--text); font-size: 13.5px; line-height: 1.45;
+ -webkit-font-smoothing: antialiased; letter-spacing: -.006em;
+ font-family: -apple-system,BlinkMacSystemFont,"Segoe UI",Inter,system-ui,sans-serif;
+}
+::selection { background: oklch(.70 .09 185 / .3); }
+:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; border-radius: 6px; }
+.mono { font-family: "SF Mono","JetBrains Mono",ui-monospace,Menlo,monospace; }
+a { color: inherit; text-decoration: none; }
+svg { display: block; }
+.ico { width: 16px; height: 16px; stroke: currentColor; stroke-width: 1.7; fill: none; stroke-linecap: round; stroke-linejoin: round; flex: none; }
+
+.app { display: grid; grid-template-columns: 248px 1fr; min-height: 100vh; }
+
+/* sidebar */
+.sb { background: var(--sidebar); border-right: 1px solid var(--line); display: flex; flex-direction: column; padding: 14px 12px; position: sticky; top: 0; height: 100vh; }
+.sb-brand { display: flex; align-items: center; gap: 10px; padding: 6px 8px 14px; }
+.sb-brand .logo { width: 26px; height: 26px; border-radius: 7px; background: linear-gradient(150deg,var(--accent),var(--accent-2)); display: grid; place-items: center; color: var(--on-accent); font-weight: 800; font-size: 14px; }
+.sb-brand .nm { font-weight: 650; font-size: 14px; letter-spacing: -.02em; }
+.sb-brand .tag { font-size: 10px; color: var(--faint); border: 1px solid var(--line-2); border-radius: 5px; padding: 1px 5px; margin-left: auto; font-family: var(--mono); }
+.switcher { display: flex; align-items: center; gap: 9px; padding: 9px 10px; border: 1px solid var(--line); border-radius: 9px; background: var(--panel); cursor: pointer; margin-bottom: 14px; }
+.switcher .dot { width: 7px; height: 7px; border-radius: 50%; background: var(--sync); box-shadow: 0 0 7px var(--sync); flex: none; }
+.switcher .dot.off { background: var(--faint); box-shadow: none; }
+.switcher .info { min-width: 0; flex: 1; }
+.switcher .repo { font-size: 12.5px; font-weight: 600; font-family: var(--mono); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.switcher .sub { font-size: 10.5px; color: var(--faint); font-family: var(--mono); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.nav-label { font-size: 10px; text-transform: uppercase; letter-spacing: .12em; color: var(--faint); padding: 6px 10px 4px; font-weight: 600; }
+.nav a { display: flex; align-items: center; gap: 11px; padding: 8px 10px; border-radius: 8px; color: var(--muted); font-size: 13px; font-weight: 500; cursor: pointer; margin-bottom: 1px; }
+.nav a:hover { background: var(--hover); color: var(--text); }
+.nav a.on { background: var(--accent-bg); color: var(--text); }
+.nav a.on .ico { color: var(--accent-ink); }
+.nav a .count { margin-left: auto; font-size: 11px; font-family: var(--mono); color: var(--update); background: var(--update-bg); border-radius: 20px; padding: 1px 7px; font-weight: 600; }
+.sb-foot { margin-top: auto; padding-top: 12px; }
+.sb-foot .conn { display: flex; align-items: center; gap: 8px; padding: 8px 10px; font-size: 11px; color: var(--faint); font-family: var(--mono); }
+.sb-foot .ro { margin-left: auto; color: var(--muted); border: 1px solid var(--line); border-radius: 5px; padding: 0 6px; }
+.sb-foot .user { display: flex; align-items: center; gap: 9px; padding: 8px 8px; border-top: 1px solid var(--line); margin-top: 6px; }
+.sb-foot .av { width: 24px; height: 24px; border-radius: 50%; background: linear-gradient(140deg,var(--accent-2),var(--accent)); flex: none; }
+.sb-foot .un { font-size: 12px; font-weight: 600; }
+.sb-foot .ue { font-size: 10.5px; color: var(--faint); }
+
+.main { display: flex; flex-direction: column; min-width: 0; }
+.topbar { position: sticky; top: 0; z-index: 20; display: flex; align-items: center; gap: 14px; height: 56px; padding: 0 22px; background: color-mix(in srgb,var(--bg) 82%,transparent); backdrop-filter: blur(14px); border-bottom: 1px solid var(--line); }
+.crumb { display: flex; align-items: center; gap: 8px; font-size: 13px; }
+.crumb .c1 { color: var(--faint); } .crumb .sep { color: var(--ghost); } .crumb .c2 { font-weight: 650; font-size: 14.5px; letter-spacing: -.02em; }
+.hamb { display: none; }
+.grow { margin-left: auto; }
+.search { display: flex; align-items: center; gap: 9px; width: 230px; border: 1px solid var(--line); background: var(--panel); border-radius: 9px; padding: 7px 11px; color: var(--faint); }
+.search input { all: unset; flex: 1; color: var(--text); font-size: 12.5px; }
+.search .k { font-family: var(--mono); font-size: 10px; border: 1px solid var(--line-2); border-radius: 4px; padding: 0 5px; }
+.btn { font-size: 12.5px; font-weight: 600; cursor: pointer; border: 1px solid var(--line-2); background: var(--panel-2); color: var(--text); padding: 8px 13px; border-radius: 9px; display: inline-flex; align-items: center; gap: 7px; transition: background .13s; font-family: inherit; }
+.btn:hover { background: var(--raise); }
+.btn:disabled { opacity: .5; cursor: default; }
+.btn--primary { background: var(--accent); border-color: var(--accent); color: var(--on-accent); }
+.btn--primary:hover { background: var(--accent-2); }
+.btn--icon { padding: 8px; }
+.btn--sm { padding: 6px 10px; font-size: 12px; }
+.content { padding: 22px; max-width: 1180px; width: 100%; }
+
+.stats { display: grid; grid-template-columns: repeat(4,1fr); gap: 12px; margin-bottom: 22px; }
+.stat { border: 1px solid var(--line); border-radius: 12px; background: var(--panel); padding: 14px 15px; }
+.stat .top { display: flex; align-items: center; gap: 8px; color: var(--muted); font-size: 12px; }
+.stat .top .d { width: 7px; height: 7px; border-radius: 50%; }
+.stat .n { font-size: 25px; font-weight: 680; letter-spacing: -.03em; margin-top: 8px; font-variant-numeric: tabular-nums; }
+.stat .sub { font-size: 11.5px; color: var(--faint); margin-top: 1px; }
+
+.toolbar { display: flex; align-items: center; gap: 10px; margin-bottom: 14px; flex-wrap: wrap; }
+.tabs { display: flex; gap: 2px; background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 3px; overflow: auto; }
+.tabs button { all: unset; cursor: pointer; font-size: 12.5px; font-weight: 550; color: var(--muted); padding: 6px 11px; border-radius: 7px; white-space: nowrap; display: inline-flex; align-items: center; gap: 7px; }
+.tabs button:hover { color: var(--text); }
+.tabs button.on { background: var(--raise); color: var(--text); }
+.tabs button .pill { font-family: var(--mono); font-size: 10.5px; color: var(--faint); background: var(--bg); border-radius: 20px; padding: 0 6px; }
+.tabs button.on .pill { color: var(--text); }
+.tabs button.att .pill { color: var(--update); background: var(--update-bg); }
+.tb-right { margin-left: auto; display: flex; gap: 8px; }
+
+.table { border: 1px solid var(--line); border-radius: 13px; background: var(--panel); overflow: hidden; }
+.thead, .tr { display: grid; grid-template-columns: 38px 1fr 120px 230px 132px 40px; align-items: center; }
+.thead { height: 38px; padding: 0 14px; border-bottom: 1px solid var(--line); background: var(--panel-2); }
+.thead .th { font-size: 10.5px; text-transform: uppercase; letter-spacing: .07em; color: var(--faint); font-weight: 600; display: flex; align-items: center; gap: 5px; }
+.tr { padding: 0 14px; min-height: 54px; border-bottom: 1px solid var(--line); cursor: pointer; transition: background .1s; }
+.tr:last-child { border-bottom: 0; }
+.tr:hover { background: var(--hover); }
+.tr.active { background: var(--accent-bg); }
+.cbx { width: 16px; height: 16px; border: 1.5px solid var(--line-2); border-radius: 5px; display: grid; place-items: center; }
+.cbx.on { background: var(--accent); border-color: var(--accent); }
+.cbx.on .ico { color: var(--on-accent); stroke-width: 2.6; width: 11px; height: 11px; }
+.cell-item { display: flex; align-items: center; gap: 11px; min-width: 0; }
+.cell-item .ti { width: 30px; height: 30px; border-radius: 8px; background: var(--raise); display: grid; place-items: center; color: var(--muted); flex: none; }
+.cell-item .nm { font-size: 13px; font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.cell-item .kd { font-size: 11px; color: var(--faint); margin-top: 1px; }
+.src { font-size: 12px; color: var(--muted); font-family: var(--mono); }
+.ver { font-family: var(--mono); font-size: 12px; color: var(--faint); white-space: nowrap; font-variant-numeric: tabular-nums; }
+.ver .arr { margin: 0 7px; color: var(--ghost); } .ver .up { color: var(--update); } .ver .dr { color: var(--drift); }
+.badge { display: inline-flex; align-items: center; gap: 6px; font-size: 11.5px; font-weight: 600; padding: 3px 9px 3px 7px; border-radius: 20px; white-space: nowrap; }
+.badge .bd { width: 6px; height: 6px; border-radius: 50%; }
+.b-sync { color: var(--sync); background: var(--sync-bg); } .b-sync .bd { background: var(--sync); }
+.b-update { color: var(--update); background: var(--update-bg); } .b-update .bd { background: var(--update); }
+.b-drift { color: var(--drift); background: var(--drift-bg); } .b-drift .bd { background: var(--drift); }
+.b-local { color: var(--local); background: var(--local-bg); } .b-local .bd { background: var(--local); }
+.b-ext { color: var(--ext); background: var(--ext-bg); } .b-ext .bd { background: var(--ext); }
+.rowmore { color: var(--faint); display: grid; place-items: center; height: 28px; width: 28px; border-radius: 7px; }
+.tr--ext { opacity: .64; }
+button.rowmore { background: none; border: 0; padding: 0; cursor: pointer; font: inherit; }
+button.rowmore:hover { background: var(--raise); color: var(--text); }
+.tfoot { display: flex; align-items: center; padding: 11px 16px; border-top: 1px solid var(--line); color: var(--faint); font-size: 12px; background: var(--panel-2); }
+
+/* master-detail drawer */
+.layout { display: grid; grid-template-columns: 1fr; gap: 0; }
+.layout.with-drawer { grid-template-columns: 1fr 440px; gap: 20px; align-items: start; }
+.with-drawer .thead, .with-drawer .tr { grid-template-columns: 38px 1fr 120px; }
+.with-drawer .src-cell, .with-drawer .ver-cell, .with-drawer .rowmore { display: none; }
+.drawer { border: 1px solid var(--line); border-radius: 13px; background: var(--panel); overflow: hidden; position: sticky; top: 78px; }
+.dw-head { display: flex; align-items: center; gap: 11px; padding: 15px 16px; border-bottom: 1px solid var(--line); }
+.dw-head .ti { width: 32px; height: 32px; border-radius: 8px; background: var(--raise); display: grid; place-items: center; color: var(--muted); }
+.dw-head .nm { font-size: 14px; font-weight: 650; }
+.dw-head .kd { font-size: 11px; color: var(--faint); margin-top: 1px; }
+.dw-head .x { margin-left: auto; color: var(--faint); width: 28px; height: 28px; display: grid; place-items: center; border-radius: 7px; cursor: pointer; }
+.dw-head .x:hover { background: var(--raise); }
+.dw-meta { display: flex; gap: 8px; align-items: center; padding: 12px 16px; border-bottom: 1px solid var(--line); flex-wrap: wrap; }
+.dw-tabs { display: flex; gap: 18px; padding: 0 16px; border-bottom: 1px solid var(--line); }
+.dw-tabs span { font-size: 12.5px; font-weight: 550; color: var(--muted); padding: 11px 0; cursor: pointer; border-bottom: 2px solid transparent; }
+.dw-tabs span.on { color: var(--text); border-color: var(--accent); }
+.diff { font-family: var(--mono); font-size: 11.5px; line-height: 1.65; padding: 8px 0; max-height: 320px; overflow: auto; }
+.diff .dl { padding: 1px 16px; white-space: pre; display: flex; gap: 10px; }
+.diff .gut { color: var(--ghost); user-select: none; width: 14px; text-align: center; flex: none; }
+.diff .add { background: var(--add-line); } .diff .add .gut, .diff .add .tx { color: var(--add-tx); }
+.diff .del { background: var(--del-line); } .diff .del .gut, .diff .del .tx { color: var(--del-tx); }
+.diff .ctx .tx { color: var(--muted); }
+.dw-sec { padding: 13px 16px; border-top: 1px solid var(--line); }
+.dw-sec .lbl { font-size: 10.5px; text-transform: uppercase; letter-spacing: .08em; color: var(--faint); font-weight: 600; margin-bottom: 7px; }
+.kv { display: flex; justify-content: space-between; font-size: 12px; padding: 3px 0; gap: 12px; }
+.kv .k { color: var(--muted); } .kv .v { font-family: var(--mono); color: var(--text); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.cli { margin-top: 8px; background: var(--bg); border: 1px solid var(--line); border-radius: 8px; padding: 9px 11px; font-family: var(--mono); font-size: 11.5px; color: var(--muted); display: flex; align-items: center; gap: 8px; }
+.cli .p { color: var(--accent-ink); } .cli .cp { margin-left: auto; color: var(--faint); cursor: pointer; }
+.dw-actions { display: flex; gap: 8px; padding: 13px 16px; border-top: 1px solid var(--line); }
+.dw-actions .btn { flex: 1; justify-content: center; }
+
+/* shelf / catalog */
+.cat { display: grid; grid-template-columns: repeat(2,1fr); gap: 14px; }
+.card { border: 1px solid var(--line); border-radius: 12px; background: var(--panel); padding: 15px 16px; display: flex; flex-direction: column; gap: 9px; }
+.card .ch { display: flex; align-items: center; gap: 10px; }
+.card .ti { width: 30px; height: 30px; border-radius: 8px; background: var(--raise); display: grid; place-items: center; color: var(--muted); }
+.card .nm { font-size: 13.5px; font-weight: 650; }
+.card .kd { font-size: 11px; color: var(--faint); margin-top: 1px; }
+.card .desc { font-size: 12.5px; color: var(--muted); line-height: 1.45; }
+.card .foot { display: flex; align-items: center; gap: 8px; margin-top: auto; }
+.tagrow { display: flex; gap: 6px; flex-wrap: wrap; }
+.tag { font-size: 10.5px; color: var(--accent-ink); background: var(--accent-bg); border-radius: 6px; padding: 2px 7px; font-family: var(--mono); }
+.card .add { margin-left: auto; }
+.sec-h { display: flex; align-items: center; gap: 10px; margin: 24px 0 12px; }
+.sec-h h3 { margin: 0; font-size: 12px; text-transform: uppercase; letter-spacing: .1em; color: var(--faint); font-weight: 650; }
+.sec-h .ln { flex: 1; height: 1px; background: var(--line); }
+
+/* bundles */
+.bundle { border: 1px solid var(--line); border-radius: 13px; background: var(--panel); overflow: hidden; margin-bottom: 14px; }
+.bh { display: flex; align-items: center; gap: 12px; padding: 16px 18px; border-bottom: 1px solid var(--line); }
+.bh .nm { font-size: 15px; font-weight: 680; }
+.bh .desc { font-size: 12.5px; color: var(--muted); margin-top: 2px; }
+.bh .chips { display: flex; gap: 6px; margin-left: auto; }
+.chipc { font-size: 10.5px; font-family: var(--mono); color: var(--muted); background: var(--raise); border-radius: 6px; padding: 3px 8px; }
+.member { display: grid; grid-template-columns: 30px 1fr auto; gap: 12px; align-items: center; padding: 11px 18px; border-bottom: 1px solid var(--line); }
+.member:last-child { border-bottom: 0; }
+.member .ti { width: 28px; height: 28px; border-radius: 7px; background: var(--raise); display: grid; place-items: center; color: var(--muted); }
+
+/* states */
+.note { padding: 40px; text-align: center; color: var(--faint); font-size: 13px; }
+.note.err { color: var(--drift); }
+.skeleton { border: 1px solid var(--line); border-radius: 13px; background: var(--panel); height: 320px; position: relative; overflow: hidden; }
+.skeleton::after { content: ""; position: absolute; inset: 0; background: linear-gradient(90deg,transparent,var(--hover),transparent); transform: translateX(-100%); animation: sh 1.3s infinite; }
+@keyframes sh { 100% { transform: translateX(100%); } }
+@media (prefers-reduced-motion: reduce) { .skeleton::after { animation: none; } }
+
+/* command palette */
+.pal-backdrop { position: fixed; inset: 0; z-index: 60; background: oklch(0 0 0 / .5); backdrop-filter: blur(2px); display: flex; justify-content: center; align-items: flex-start; padding-top: 12vh; }
+.pal { width: min(560px, 92vw); background: var(--panel); border: 1px solid var(--line-2); border-radius: 14px; box-shadow: 0 24px 70px -20px oklch(0 0 0 / .7); overflow: hidden; }
+.pal-input { all: unset; display: block; width: 100%; box-sizing: border-box; padding: 16px 18px; font-size: 15px; color: var(--text); border-bottom: 1px solid var(--line); }
+.pal-input::placeholder { color: var(--faint); }
+.pal-list { max-height: 50vh; overflow: auto; padding: 6px; }
+.pal-group { font-size: 10px; text-transform: uppercase; letter-spacing: .1em; color: var(--faint); font-weight: 600; padding: 10px 10px 4px; }
+.pal-item { display: flex; align-items: center; gap: 10px; padding: 9px 10px; border-radius: 8px; cursor: pointer; }
+.pal-item.sel { background: var(--accent-bg); }
+.pal-label { font-size: 13px; font-weight: 550; }
+.pal-hint { margin-left: auto; font-size: 11px; color: var(--faint); font-family: var(--mono); }
+.pal-foot { display: flex; gap: 16px; padding: 9px 14px; border-top: 1px solid var(--line); color: var(--faint); font-size: 11px; }
+.pal-kbd { font-family: var(--mono); border: 1px solid var(--line-2); border-radius: 4px; padding: 0 5px; margin-right: 5px; }
+
+/* command dialog (read-only writes → copyable CLI) */
+.cmddlg { width: min(540px, 92vw); background: var(--panel); border: 1px solid var(--line-2); border-radius: 14px; box-shadow: 0 24px 70px -20px oklch(0 0 0 / .7); overflow: hidden; }
+.cmddlg-head { display: flex; align-items: center; padding: 15px 16px; border-bottom: 1px solid var(--line); }
+.cmddlg-title { font-size: 13.5px; font-weight: 650; }
+.cmddlg-head .x { margin-left: auto; color: var(--faint); width: 28px; height: 28px; display: grid; place-items: center; border-radius: 7px; cursor: pointer; }
+.cmddlg-head .x:hover { background: var(--raise); }
+.cmddlg-code { all: unset; box-sizing: border-box; display: flex; align-items: center; gap: 12px; width: calc(100% - 32px); margin: 16px; padding: 12px 14px; background: var(--bg); border: 1px solid var(--line); border-radius: 9px; font-family: var(--mono); font-size: 13px; color: var(--text); cursor: pointer; }
+.cmddlg-code:hover { border-color: var(--line-2); }
+.cmddlg-code .p { color: var(--accent-ink); }
+.cmddlg-copy { margin-left: auto; display: inline-flex; align-items: center; gap: 6px; color: var(--faint); font-family: var(--sans); font-size: 11.5px; font-weight: 600; white-space: nowrap; }
+.cmddlg-copy .ico { width: 14px; height: 14px; }
+.cmddlg-note { margin: 0 16px 16px; color: var(--faint); font-size: 12px; line-height: 1.5; }
+
+.tabbar { display: none; }
+
+@media (max-width: 860px) {
+ .app { grid-template-columns: 1fr; }
+ .sb { display: none; }
+ .hamb { display: inline-grid; place-items: center; height: 34px; width: 34px; border-radius: 8px; border: 1px solid var(--line); background: var(--panel); color: var(--muted); }
+ .topbar { padding: 0 14px; gap: 10px; } .search { display: none; } .crumb .c1, .crumb .sep { display: none; } .apply-lbl { display: none; }
+ .content { padding: 16px 14px 96px; }
+ .stats { grid-template-columns: 1fr 1fr; gap: 10px; }
+ .layout.with-drawer { grid-template-columns: 1fr; } .drawer { position: static; }
+ .thead { display: none; }
+ .tr { grid-template-columns: 22px 1fr auto; grid-template-areas: "cb item badge" "cb ver ver"; row-gap: 7px; padding: 13px 14px; min-height: 0; align-items: start; }
+ .tr .cbx { grid-area: cb; margin-top: 3px; } .cell-item { grid-area: item; } .badge-cell { grid-area: badge; justify-self: end; } .ver-cell { grid-area: ver; padding-left: 41px; } .src-cell, .rowmore { display: none; }
+ .cat { grid-template-columns: 1fr; }
+ .tabbar { display: grid; grid-template-columns: repeat(4,1fr); position: fixed; left: 0; right: 0; bottom: 0; z-index: 40; background: color-mix(in srgb,var(--sidebar) 92%,transparent); backdrop-filter: blur(18px); border-top: 1px solid var(--line); padding: 7px 6px calc(7px + env(safe-area-inset-bottom)); }
+ .tabbar a { display: flex; flex-direction: column; align-items: center; gap: 3px; color: var(--faint); font-size: 10px; font-weight: 550; padding: 4px; }
+ .tabbar a.on { color: var(--accent-ink); }
+}
diff --git a/web/src/useFetch.ts b/web/src/useFetch.ts
new file mode 100644
index 0000000..e9ed979
--- /dev/null
+++ b/web/src/useFetch.ts
@@ -0,0 +1,23 @@
+import { useEffect, useState } from "react";
+
+/**
+ * Fetch-once hook with an unmount guard, so a slow response that resolves
+ * after the user navigates away can't setState on an unmounted component.
+ */
+export function useFetch(fn: () => Promise): {
+ data: T | null;
+ error: string | null;
+} {
+ const [data, setData] = useState(null);
+ const [error, setError] = useState(null);
+ useEffect(() => {
+ let live = true;
+ fn()
+ .then((d) => { if (live) setData(d); })
+ .catch((e) => { if (live) setError(e instanceof Error ? e.message : String(e)); });
+ return () => { live = false; };
+ // fn is a stable per-screen call; run once on mount.
+ // eslint-disable-next-line react-hooks/exhaustive-deps
+ }, []);
+ return { data, error };
+}
diff --git a/web/tsconfig.json b/web/tsconfig.json
new file mode 100644
index 0000000..3730cb9
--- /dev/null
+++ b/web/tsconfig.json
@@ -0,0 +1,19 @@
+{
+ "compilerOptions": {
+ "target": "ES2022",
+ "useDefineForClassFields": true,
+ "lib": ["ES2022", "DOM", "DOM.Iterable"],
+ "module": "ESNext",
+ "moduleResolution": "bundler",
+ "jsx": "react-jsx",
+ "strict": true,
+ "noUnusedLocals": true,
+ "noUnusedParameters": true,
+ "noUncheckedIndexedAccess": true,
+ "skipLibCheck": true,
+ "esModuleInterop": true,
+ "isolatedModules": true,
+ "noEmit": true
+ },
+ "include": ["src", "vite.config.ts"]
+}
diff --git a/web/vite.config.ts b/web/vite.config.ts
new file mode 100644
index 0000000..457c36c
--- /dev/null
+++ b/web/vite.config.ts
@@ -0,0 +1,15 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+// base: "" keeps asset URLs relative so the build works when served from the
+// capshelf binary at any host/port. /api is proxied to a running `capshelf
+// serve` during `vite dev`.
+export default defineConfig({
+ plugins: [react()],
+ base: "",
+ build: { outDir: "dist", emptyOutDir: true },
+ server: {
+ port: 5181,
+ proxy: { "/api": "http://127.0.0.1:4717" },
+ },
+});
+
+
+ )
+}
+```
+
+This applies to all CSS transforms and transitions (`transform`, `opacity`, `translate`, `scale`, `rotate`). The wrapper div allows browsers to use GPU acceleration for smoother animations.
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-conditional-render.md b/.agents/skills/vercel-react-best-practices/rules/rendering-conditional-render.md
new file mode 100644
index 0000000..7e866f5
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-conditional-render.md
@@ -0,0 +1,40 @@
+---
+title: Use Explicit Conditional Rendering
+impact: LOW
+impactDescription: prevents rendering 0 or NaN
+tags: rendering, conditional, jsx, falsy-values
+---
+
+## Use Explicit Conditional Rendering
+
+Use explicit ternary operators (`? :`) instead of `&&` for conditional rendering when the condition can be `0`, `NaN`, or other falsy values that render.
+
+**Incorrect (renders "0" when count is 0):**
+
+```tsx
+function Badge({ count }: { count: number }) {
+ return (
+
+ {count && {count}}
+
+ )
+}
+
+// When count = 0, renders: 0
+// When count = 5, renders: 5
+```
+
+**Correct (renders nothing when count is 0):**
+
+```tsx
+function Badge({ count }: { count: number }) {
+ return (
+
+ {count > 0 ? {count} : null}
+
+ )
+}
+
+// When count = 0, renders:
+// When count = 5, renders: 5
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-content-visibility.md b/.agents/skills/vercel-react-best-practices/rules/rendering-content-visibility.md
new file mode 100644
index 0000000..aa66563
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-content-visibility.md
@@ -0,0 +1,38 @@
+---
+title: CSS content-visibility for Long Lists
+impact: HIGH
+impactDescription: faster initial render
+tags: rendering, css, content-visibility, long-lists
+---
+
+## CSS content-visibility for Long Lists
+
+Apply `content-visibility: auto` to defer off-screen rendering.
+
+**CSS:**
+
+```css
+.message-item {
+ content-visibility: auto;
+ contain-intrinsic-size: 0 80px;
+}
+```
+
+**Example:**
+
+```tsx
+function MessageList({ messages }: { messages: Message[] }) {
+ return (
+
+ {messages.map(msg => (
+
+ )
+}
+```
+
+For 1000 messages, browser skips layout/paint for ~990 off-screen items (10× faster initial render).
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-hoist-jsx.md b/.agents/skills/vercel-react-best-practices/rules/rendering-hoist-jsx.md
new file mode 100644
index 0000000..32d2f3f
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-hoist-jsx.md
@@ -0,0 +1,46 @@
+---
+title: Hoist Static JSX Elements
+impact: LOW
+impactDescription: avoids re-creation
+tags: rendering, jsx, static, optimization
+---
+
+## Hoist Static JSX Elements
+
+Extract static JSX outside components to avoid re-creation.
+
+**Incorrect (recreates element every render):**
+
+```tsx
+function LoadingSkeleton() {
+ return
+}
+
+function Container() {
+ return (
+
+
+ ))}
+ {msg.content}
+
+ {loading &&
+ )
+}
+```
+
+**Correct (reuses same element):**
+
+```tsx
+const loadingSkeleton = (
+
+)
+
+function Container() {
+ return (
+
+ {loading && loadingSkeleton}
+
+ )
+}
+```
+
+This is especially helpful for large and static SVG nodes, which can be expensive to recreate on every render.
+
+**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary.
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-no-flicker.md b/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-no-flicker.md
new file mode 100644
index 0000000..5cf0e79
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-no-flicker.md
@@ -0,0 +1,82 @@
+---
+title: Prevent Hydration Mismatch Without Flickering
+impact: MEDIUM
+impactDescription: avoids visual flicker and hydration errors
+tags: rendering, ssr, hydration, localStorage, flicker
+---
+
+## Prevent Hydration Mismatch Without Flickering
+
+When rendering content that depends on client-side storage (localStorage, cookies), avoid both SSR breakage and post-hydration flickering by injecting a synchronous script that updates the DOM before React hydrates.
+
+**Incorrect (breaks SSR):**
+
+```tsx
+function ThemeWrapper({ children }: { children: ReactNode }) {
+ // localStorage is not available on server - throws error
+ const theme = localStorage.getItem('theme') || 'light'
+
+ return (
+
+ {children}
+
+ )
+}
+```
+
+Server-side rendering will fail because `localStorage` is undefined.
+
+**Incorrect (visual flickering):**
+
+```tsx
+function ThemeWrapper({ children }: { children: ReactNode }) {
+ const [theme, setTheme] = useState('light')
+
+ useEffect(() => {
+ // Runs after hydration - causes visible flash
+ const stored = localStorage.getItem('theme')
+ if (stored) {
+ setTheme(stored)
+ }
+ }, [])
+
+ return (
+
+ {children}
+
+ )
+}
+```
+
+Component first renders with default value (`light`), then updates after hydration, causing a visible flash of incorrect content.
+
+**Correct (no flicker, no hydration mismatch):**
+
+```tsx
+function ThemeWrapper({ children }: { children: ReactNode }) {
+ return (
+ <>
+
+ {children}
+
+
+
+ )
+}
+```
+
+The inline script executes synchronously before showing the element, ensuring the DOM already has the correct value. No flickering, no hydration mismatch.
+
+This pattern is especially useful for theme toggles, user preferences, authentication states, and any client-only data that should render immediately without flashing default values.
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-suppress-warning.md b/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-suppress-warning.md
new file mode 100644
index 0000000..24ba251
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-hydration-suppress-warning.md
@@ -0,0 +1,30 @@
+---
+title: Suppress Expected Hydration Mismatches
+impact: LOW-MEDIUM
+impactDescription: avoids noisy hydration warnings for known differences
+tags: rendering, hydration, ssr, nextjs
+---
+
+## Suppress Expected Hydration Mismatches
+
+In SSR frameworks (e.g., Next.js), some values are intentionally different on server vs client (random IDs, dates, locale/timezone formatting). For these *expected* mismatches, wrap the dynamic text in an element with `suppressHydrationWarning` to prevent noisy warnings. Do not use this to hide real bugs. Don’t overuse it.
+
+**Incorrect (known mismatch warnings):**
+
+```tsx
+function Timestamp() {
+ return {new Date().toLocaleString()}
+}
+```
+
+**Correct (suppress expected mismatch only):**
+
+```tsx
+function Timestamp() {
+ return (
+
+ {new Date().toLocaleString()}
+
+ )
+}
+```
diff --git a/.agents/skills/vercel-react-best-practices/rules/rendering-resource-hints.md b/.agents/skills/vercel-react-best-practices/rules/rendering-resource-hints.md
new file mode 100644
index 0000000..1290bef
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rendering-resource-hints.md
@@ -0,0 +1,85 @@
+---
+title: Use React DOM Resource Hints
+impact: HIGH
+impactDescription: reduces load time for critical resources
+tags: rendering, preload, preconnect, prefetch, resource-hints
+---
+
+## Use React DOM Resource Hints
+
+**Impact: HIGH (reduces load time for critical resources)**
+
+React DOM provides APIs to hint the browser about resources it will need. These are especially useful in server components to start loading resources before the client even receives the HTML.
+
+- **`prefetchDNS(href)`**: Resolve DNS for a domain you expect to connect to
+- **`preconnect(href)`**: Establish connection (DNS + TCP + TLS) to a server
+- **`preload(href, options)`**: Fetch a resource (stylesheet, font, script, image) you'll use soon
+- **`preloadModule(href)`**: Fetch an ES module you'll use soon
+- **`preinit(href, options)`**: Fetch and evaluate a stylesheet or script
+- **`preinitModule(href)`**: Fetch and evaluate an ES module
+
+**Example (preconnect to third-party APIs):**
+
+```tsx
+import { preconnect, prefetchDNS } from 'react-dom'
+
+export default function App() {
+ prefetchDNS('https://analytics.example.com')
+ preconnect('https://api.example.com')
+
+ return {fullName}
+} +``` + +**Correct (derive during render):** + +```tsx +function Form() { + const [firstName, setFirstName] = useState('First') + const [lastName, setLastName] = useState('Last') + const fullName = firstName + ' ' + lastName + + return{fullName}
+} +``` + +References: [You Might Not Need an Effect](https://react.dev/learn/you-might-not-need-an-effect) diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-derived-state.md b/.agents/skills/vercel-react-best-practices/rules/rerender-derived-state.md new file mode 100644 index 0000000..e5c899f --- /dev/null +++ b/.agents/skills/vercel-react-best-practices/rules/rerender-derived-state.md @@ -0,0 +1,29 @@ +--- +title: Subscribe to Derived State +impact: MEDIUM +impactDescription: reduces re-render frequency +tags: rerender, derived-state, media-query, optimization +--- + +## Subscribe to Derived State + +Subscribe to derived boolean state instead of continuous values to reduce re-render frequency. + +**Incorrect (re-renders on every pixel change):** + +```tsx +function Sidebar() { + const width = useWindowWidth() // updates continuously + const isMobile = width < 768 + return +} +``` + +**Correct (re-renders only when boolean changes):** + +```tsx +function Sidebar() { + const isMobile = useMediaQuery('(max-width: 767px)') + return +} +``` diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-functional-setstate.md b/.agents/skills/vercel-react-best-practices/rules/rerender-functional-setstate.md new file mode 100644 index 0000000..b004ef4 --- /dev/null +++ b/.agents/skills/vercel-react-best-practices/rules/rerender-functional-setstate.md @@ -0,0 +1,74 @@ +--- +title: Use Functional setState Updates +impact: MEDIUM +impactDescription: prevents stale closures and unnecessary callback recreations +tags: react, hooks, useState, useCallback, callbacks, closures +--- + +## Use Functional setState Updates + +When updating state based on the current state value, use the functional update form of setState instead of directly referencing the state variable. This prevents stale closures, eliminates unnecessary dependencies, and creates stable callback references. + +**Incorrect (requires state as dependency):** + +```tsx +function TodoList() { + const [items, setItems] = useState(initialItems) + + // Callback must depend on items, recreated on every items change + const addItems = useCallback((newItems: Item[]) => { + setItems([...items, ...newItems]) + }, [items]) // ❌ items dependency causes recreations + + // Risk of stale closure if dependency is forgotten + const removeItem = useCallback((id: string) => { + setItems(items.filter(item => item.id !== id)) + }, []) // ❌ Missing items dependency - will use stale items! + + return{avatar}
+}
+```
+
+**Correct (skips computation when loading):**
+
+```tsx
+const UserAvatar = memo(function UserAvatar({ user }: { user: User }) {
+ const id = useMemo(() => computeAvatarId(user), [user])
+ return
+
+ )
+}
+```
+
+**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders.
diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md b/.agents/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md
new file mode 100644
index 0000000..dd58a1a
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rerender-move-effect-to-event.md
@@ -0,0 +1,45 @@
+---
+title: Put Interaction Logic in Event Handlers
+impact: MEDIUM
+impactDescription: avoids effect re-runs and duplicate side effects
+tags: rerender, useEffect, events, side-effects, dependencies
+---
+
+## Put Interaction Logic in Event Handlers
+
+If a side effect is triggered by a specific user action (submit, click, drag), run it in that event handler. Do not model the action as state + effect; it makes effects re-run on unrelated changes and can duplicate the action.
+
+**Incorrect (event modeled as state + effect):**
+
+```tsx
+function Form() {
+ const [submitted, setSubmitted] = useState(false)
+ const theme = useContext(ThemeContext)
+
+ useEffect(() => {
+ if (submitted) {
+ post('/api/register')
+ showToast('Registered', theme)
+ }
+ }, [submitted, theme])
+
+ return
+}
+```
+
+**Correct (do it in the handler):**
+
+```tsx
+function Form() {
+ const theme = useContext(ThemeContext)
+
+ function handleSubmit() {
+ post('/api/register')
+ showToast('Registered', theme)
+ }
+
+ return
+}
+```
+
+Reference: [Should this code move to an event handler?](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler)
diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-no-inline-components.md b/.agents/skills/vercel-react-best-practices/rules/rerender-no-inline-components.md
new file mode 100644
index 0000000..d97592a
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rerender-no-inline-components.md
@@ -0,0 +1,82 @@
+---
+title: Don't Define Components Inside Components
+impact: HIGH
+impactDescription: prevents remount on every render
+tags: rerender, components, remount, performance
+---
+
+## Don't Define Components Inside Components
+
+**Impact: HIGH (prevents remount on every render)**
+
+Defining a component inside another component creates a new component type on every render. React sees a different component each time and fully remounts it, destroying all state and DOM.
+
+A common reason developers do this is to access parent variables without passing props. Always pass props instead.
+
+**Incorrect (remounts on every render):**
+
+```tsx
+function UserProfile({ user, theme }) {
+ // Defined inside to access `theme` - BAD
+ const Avatar = () => (
+
+ {user.followers} followers
+ {user.posts} posts
+
+ )
+
+ return (
+
+
+ )
+}
+```
+
+Every time `UserProfile` renders, `Avatar` and `Stats` are new component types. React unmounts the old instances and mounts new ones, losing any internal state, running effects again, and recreating DOM nodes.
+
+**Correct (pass props instead):**
+
+```tsx
+function Avatar({ src, theme }: { src: string; theme: string }) {
+ return (
+
+ {followers} followers
+ {posts} posts
+
+ )
+}
+
+function UserProfile({ user, theme }) {
+ return (
+
+
+ )
+}
+```
+
+**Symptoms of this bug:**
+- Input fields lose focus on every keystroke
+- Animations restart unexpectedly
+- `useEffect` cleanup/setup runs on every parent render
+- Scroll position resets inside the component
diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-simple-expression-in-memo.md b/.agents/skills/vercel-react-best-practices/rules/rerender-simple-expression-in-memo.md
new file mode 100644
index 0000000..59dfab0
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rerender-simple-expression-in-memo.md
@@ -0,0 +1,35 @@
+---
+title: Do not wrap a simple expression with a primitive result type in useMemo
+impact: LOW-MEDIUM
+impactDescription: wasted computation on every render
+tags: rerender, useMemo, optimization
+---
+
+## Do not wrap a simple expression with a primitive result type in useMemo
+
+When an expression is simple (few logical or arithmetical operators) and has a primitive result type (boolean, number, string), do not wrap it in `useMemo`.
+Calling `useMemo` and comparing hook dependencies may consume more resources than the expression itself.
+
+**Incorrect:**
+
+```tsx
+function Header({ user, notifications }: Props) {
+ const isLoading = useMemo(() => {
+ return user.isLoading || notifications.isLoading
+ }, [user.isLoading, notifications.isLoading])
+
+ if (isLoading) return
+
+
+ )
+}
+```
+
+**When to use:**
+
+- Filtering/searching large lists
+- Expensive visualizations (charts, graphs) reacting to input
+- Any derived state that causes noticeable render delays
+
+**Note:** Wrap the expensive computation in `useMemo` with the deferred value as a dependency, otherwise it still runs on every render.
+
+Reference: [React useDeferredValue](https://react.dev/reference/react/useDeferredValue)
diff --git a/.agents/skills/vercel-react-best-practices/rules/rerender-use-ref-transient-values.md b/.agents/skills/vercel-react-best-practices/rules/rerender-use-ref-transient-values.md
new file mode 100644
index 0000000..cf04b81
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/rerender-use-ref-transient-values.md
@@ -0,0 +1,73 @@
+---
+title: Use useRef for Transient Values
+impact: MEDIUM
+impactDescription: avoids unnecessary re-renders on frequent updates
+tags: rerender, useref, state, performance
+---
+
+## Use useRef for Transient Values
+
+When a value changes frequently and you don't want a re-render on every update (e.g., mouse trackers, intervals, transient flags), store it in `useRef` instead of `useState`. Keep component state for UI; use refs for temporary DOM-adjacent values. Updating a ref does not trigger a re-render.
+
+**Incorrect (renders every update):**
+
+```tsx
+function Tracker() {
+ const [lastX, setLastX] = useState(0)
+
+ useEffect(() => {
+ const onMove = (e: MouseEvent) => setLastX(e.clientX)
+ window.addEventListener('mousemove', onMove)
+ return () => window.removeEventListener('mousemove', onMove)
+ }, [])
+
+ return (
+
+ )
+}
+```
+
+**Correct (no re-render for tracking):**
+
+```tsx
+function Tracker() {
+ const lastXRef = useRef(0)
+ const dotRef = useRef
+
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: fontData }] }
+ )
+}
+```
+
+**Correct (loads once at module initialization):**
+
+```typescript
+// app/api/og/route.tsx
+import { ImageResponse } from 'next/og'
+
+// Module-level: runs ONCE when module is first imported
+const fontData = fetch(
+ new URL('./fonts/Inter.ttf', import.meta.url)
+).then(res => res.arrayBuffer())
+
+const logoData = fetch(
+ new URL('./images/logo.png', import.meta.url)
+).then(res => res.arrayBuffer())
+
+export async function GET(request: Request) {
+ // Await the already-started promises
+ const [font, logo] = await Promise.all([fontData, logoData])
+
+ return new ImageResponse(
+
+
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: font }] }
+ )
+}
+```
+
+**Correct (synchronous fs at module level):**
+
+```typescript
+// app/api/og/route.tsx
+import { ImageResponse } from 'next/og'
+import { readFileSync } from 'fs'
+import { join } from 'path'
+
+// Synchronous read at module level - blocks only during module init
+const fontData = readFileSync(
+ join(process.cwd(), 'public/fonts/Inter.ttf')
+)
+
+const logoData = readFileSync(
+ join(process.cwd(), 'public/images/logo.png')
+)
+
+export async function GET(request: Request) {
+ return new ImageResponse(
+
+
+ Hello World
+
,
+ { fonts: [{ name: 'Inter', data: fontData }] }
+ )
+}
+```
+
+**Incorrect (reads config on every call):**
+
+```typescript
+import fs from 'node:fs/promises'
+
+export async function processRequest(data: Data) {
+ const config = JSON.parse(
+ await fs.readFile('./config.json', 'utf-8')
+ )
+ const template = await fs.readFile('./template.html', 'utf-8')
+
+ return render(template, data, config)
+}
+```
+
+**Correct (hoists config and template to module level):**
+
+```typescript
+import fs from 'node:fs/promises'
+
+const configPromise = fs
+ .readFile('./config.json', 'utf-8')
+ .then(JSON.parse)
+const templatePromise = fs.readFile('./template.html', 'utf-8')
+
+export async function processRequest(data: Data) {
+ const [config, template] = await Promise.all([
+ configPromise,
+ templatePromise,
+ ])
+
+ return render(template, data, config)
+}
+```
+
+When to use this pattern:
+
+- Loading fonts for OG image generation
+- Loading static logos, icons, or watermarks
+- Reading configuration files that don't change at runtime
+- Loading email templates or other static templates
+- Any static asset that's the same across all requests
+
+When not to use this pattern:
+
+- Assets that vary per request or user
+- Files that may change during runtime (use caching with TTL instead)
+- Large files that would consume too much memory if kept loaded
+- Sensitive data that shouldn't persist in memory
+
+With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute), module-level caching is especially effective because multiple concurrent requests share the same function instance. The static assets stay loaded in memory across requests without cold start penalties.
+
+In traditional serverless, each cold start re-executes module-level code, but subsequent warm invocations reuse the loaded assets until the instance is recycled.
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-no-shared-module-state.md b/.agents/skills/vercel-react-best-practices/rules/server-no-shared-module-state.md
new file mode 100644
index 0000000..ff7d9f2
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-no-shared-module-state.md
@@ -0,0 +1,50 @@
+---
+title: Avoid Shared Module State for Request Data
+impact: HIGH
+impactDescription: prevents concurrency bugs and request data leaks
+tags: server, rsc, ssr, concurrency, security, state
+---
+
+## Avoid Shared Module State for Request Data
+
+For React Server Components and client components rendered during SSR, avoid using mutable module-level variables to share request-scoped data. Server renders can run concurrently in the same process. If one render writes to shared module state and another render reads it, you can get race conditions, cross-request contamination, and security bugs where one user's data appears in another user's response.
+
+Treat module scope on the server as process-wide shared memory, not request-local state.
+
+**Incorrect (request data leaks across concurrent renders):**
+
+```tsx
+let currentUser: User | null = null
+
+export default async function Page() {
+ currentUser = await auth()
+ return {currentUser?.name}
+}
+```
+
+If two requests overlap, request A can set `currentUser`, then request B overwrites it before request A finishes rendering `Dashboard`.
+
+**Correct (keep request data local to the render tree):**
+
+```tsx
+export default async function Page() {
+ const user = await auth()
+ return {user?.name}
+}
+```
+
+Safe exceptions:
+
+- Immutable static assets or config loaded once at module scope
+- Shared caches intentionally designed for cross-request reuse and keyed correctly
+- Process-wide singletons that do not store request- or user-specific mutable data
+
+For static assets and config, see [Hoist Static I/O to Module Level](./server-hoist-static-io.md).
diff --git a/.agents/skills/vercel-react-best-practices/rules/server-parallel-fetching.md b/.agents/skills/vercel-react-best-practices/rules/server-parallel-fetching.md
new file mode 100644
index 0000000..1affc83
--- /dev/null
+++ b/.agents/skills/vercel-react-best-practices/rules/server-parallel-fetching.md
@@ -0,0 +1,83 @@
+---
+title: Parallel Data Fetching with Component Composition
+impact: CRITICAL
+impactDescription: eliminates server-side waterfalls
+tags: server, rsc, parallel-fetching, composition
+---
+
+## Parallel Data Fetching with Component Composition
+
+React Server Components execute sequentially within a tree. Restructure with composition to parallelize data fetching.
+
+**Incorrect (Sidebar waits for Page's fetch to complete):**
+
+```tsx
+export default async function Page() {
+ const header = await fetchHeader()
+ return (
+
+
+ )
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+```
+
+**Correct (both fetch simultaneously):**
+
+```tsx
+async function Header() {
+ const data = await fetchHeader()
+ return {header}
+ {data}
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+
+export default function Page() {
+ return (
+
+
+ )
+}
+```
+
+**Alternative with children prop:**
+
+```tsx
+async function Header() {
+ const data = await fetchHeader()
+ return {data}
+}
+
+async function Sidebar() {
+ const items = await fetchSidebarItems()
+ return
+}
+
+function Layout({ children }: { children: ReactNode }) {
+ return (
+
+
+ )
+}
+
+export default function Page() {
+ return (
+ {user.name}
// uses 1 field
+}
+```
+
+**Correct (serializes only 1 field):**
+
+```tsx
+async function Page() {
+ const user = await fetchUser()
+ return {name}
+}
+```
diff --git a/.claude/skills/frontend-design b/.claude/skills/frontend-design
new file mode 120000
index 0000000..712f694
--- /dev/null
+++ b/.claude/skills/frontend-design
@@ -0,0 +1 @@
+../../.agents/skills/frontend-design
\ No newline at end of file
diff --git a/.claude/skills/vercel-react-best-practices b/.claude/skills/vercel-react-best-practices
new file mode 120000
index 0000000..e567923
--- /dev/null
+++ b/.claude/skills/vercel-react-best-practices
@@ -0,0 +1 @@
+../../.agents/skills/vercel-react-best-practices
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index 0201dfd..d3ed673 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,6 @@ coverage/
logs/
.idea/
.claude/settings.local.json
+
+# TS incremental build cache
+*.tsbuildinfo
diff --git a/Makefile b/Makefile
index 2859ba7..3221d77 100644
--- a/Makefile
+++ b/Makefile
@@ -1,12 +1,20 @@
BIN_DIR ?= $(HOME)/.local/bin
-.PHONY: install dev build test typecheck lint check smoke smoke-modes smoke-skills smoke-settings smoke-mcp smoke-codex-config smoke-bootstrap smoke-metadata smoke-team-sync smoke-bundles clean deps
+.PHONY: install dev build web test typecheck lint check smoke smoke-modes smoke-skills smoke-settings smoke-mcp smoke-codex-config smoke-bootstrap smoke-metadata smoke-team-sync smoke-bundles clean deps
deps:
bun install
-build: deps
+# Build the web UI and bake it into src/web-embed.ts for the binary.
+web: deps
+ bun run web:build
+ bun run embed-web
+
+# Compile the single binary with the UI embedded, then restore the committed
+# (empty) embed stub so the working tree stays clean.
+build: web
bun run build
+ @git checkout -- src/web-embed.ts 2>/dev/null || true
install: build
mkdir -p $(BIN_DIR)
diff --git a/package.json b/package.json
index 6a3c189..03ede72 100644
--- a/package.json
+++ b/package.json
@@ -9,6 +9,10 @@
},
"scripts": {
"dev": "bun run src/cli.ts",
+ "serve": "bun run src/cli.ts serve",
+ "web:dev": "cd web && bun run dev",
+ "web:build": "cd web && bun install && bun run build",
+ "embed-web": "bun run scripts/embed-web.ts",
"test": "bun test",
"coverage": "bun test --coverage",
"typecheck": "tsc --noEmit",
diff --git a/scripts/embed-web.ts b/scripts/embed-web.ts
new file mode 100644
index 0000000..477b5b3
--- /dev/null
+++ b/scripts/embed-web.ts
@@ -0,0 +1,53 @@
+#!/usr/bin/env bun
+// Generate src/web-embed.ts from the built web/dist so `bun build --compile`
+// can bake the UI into the single binary. Run after `web:build`. The Makefile
+// restores the committed stub after compiling so the source stays clean.
+import { existsSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { extname, join, relative, sep } from "node:path";
+
+const ROOT = join(import.meta.dir, "..");
+const DIST = join(ROOT, "web", "dist");
+const OUT = join(ROOT, "src", "web-embed.ts");
+
+const TYPES: Record${PRODUCT_NAME} serve
+The API is live at /api/status, /api/catalog, /api/health.
The web UI has not been built yet. From the repo root run:
+bun run web:build+
then reload this page.
+`; +} diff --git a/src/commands/status.ts b/src/commands/status.ts index 75771a8..8f379cd 100644 --- a/src/commands/status.ts +++ b/src/commands/status.ts @@ -1,42 +1,12 @@ import type { Command } from "commander"; import type { Command as CmdType } from "commander"; -import { existsSync } from "node:fs"; -import { projectRoot, resolveDataRepoOptional } from "../paths"; -import { loadLocalLock, loadLock } from "../lock"; -import type { Lock, LockEntry } from "../lock"; -import { loadManifest } from "../manifest"; -import type { Manifest } from "../manifest"; -import type { ItemKind } from "../master"; -import { isFragmentItemKind, shaOfItem } from "../master"; -import { installedPath, shaOfInstalled, parseLockKey } from "../installed"; +import { projectRoot } from "../paths"; import { ResultExitError } from "../errors"; -import { findSystemItem, shaOfSystemItem, CLI_VERSION } from "../bundled"; import { globalOpts } from "../cli"; import { parseItemRef } from "../item-ref"; -import { commitExists, isGitRepo } from "../git"; -import { upstreamFactsForItem } from "../upstream-facts"; -import { listClaudePlugins, listSkillsShSkills } from "../external"; -import { buildStatusDiff, currentCopyItemSha } from "../status-diff"; import type { StatusDiff } from "../status-diff"; -import { - codexProjectTrustWarnings, - isStrictRuntimeWarning, - runtimeWarningsForItem, -} from "../runtime-warnings"; -import type { RuntimeWarning } from "../runtime-warnings"; -import { - fragmentContributionState, - lockedFragmentTargetsForItem, - type FragmentContributionState, -} from "../fragments"; -import { - assertNoScopeCollisions, - buildStatusRow, - deriveState, - personalClaudeExternals, - statusTargets, - type StatusRow, -} from "../status-core"; +import { isStrictRuntimeWarning } from "../runtime-warnings"; +import { buildStatusReport } from "../status-report"; import { formatStatusHuman } from "../status-format"; interface StatusOptions { @@ -66,217 +36,36 @@ export function registerStatus(program: Command): void { cmd: CmdType, ) => { const project = projectRoot(); - const manifest = await loadManifest(project); if (opts.project && opts.local) { throw new Error("--project and --local cannot be used together"); } - const projectLock = await loadLock(project); - const localLock = await loadLocalLock(project); - assertNoScopeCollisions(projectLock, localLock); - // Status still produces a report when the data repo isn't configured - // or has gone missing on disk: data items report missing_upstream - // instead of crashing. Treating a configured-but-absent path as null - // here degrades both fragment and copy items uniformly, and lets the - // per-item master/git calls below surface genuine errors (ambiguous - // refs, permission failures) instead of swallowing them. - const resolvedDataRepo = await resolveDataRepoOptional({ - override: globalOpts(cmd).data, - manifest, + const ref = itemRef ? parseItemRef(itemRef) : undefined; + const report = await buildStatusReport({ project, + dataOverride: globalOpts(cmd).data, + ref, + opts, }); - // A bound path that is not a git repo degrades like a missing one - // (rows report missing_upstream) instead of crashing on raw git - // errors during per-item upstream checks. - const dataRepo = - resolvedDataRepo && - existsSync(resolvedDataRepo) && - (await isGitRepo(resolvedDataRepo)) - ? resolvedDataRepo - : null; - - const ref = itemRef ? parseItemRef(itemRef) : undefined; - const targets = statusTargets(projectLock, localLock, ref, opts); - const external = (await listSkillsShSkills(project)).filter( - (skill) => - !ref || - (skill.name === ref.name && - (ref.kind === undefined || ref.kind === "skills")), - ); - const externalClaudePlugins = (await listClaudePlugins(project)).filter( - (plugin) => - !ref || - (ref.kind === undefined && - (plugin.id === ref.name || plugin.name === ref.name)), - ); - const externalSkillNames = new Set(external.map((skill) => skill.name)); - - const rows: StatusRow[] = []; - const fragmentStates = new MapCouldn’t reach the capshelf API: {error}
;
+}
diff --git a/web/src/api.ts b/web/src/api.ts
new file mode 100644
index 0000000..1fbacd3
--- /dev/null
+++ b/web/src/api.ts
@@ -0,0 +1,191 @@
+// Typed client for the read-only capshelf serve API. Shapes mirror the CLI's
+// --json output (the server reuses the same core).
+
+export type ItemKind = "skills" | "settings" | "mcp" | "codex-config";
+export type ItemSource = "data" | "system";
+export type State =
+ | "ok"
+ | "missing_source_commit"
+ | "update_available"
+ | "drifted_local"
+ | "drifted_and_update"
+ | "missing_installed"
+ | "missing_output"
+ | "missing_upstream"
+ | "upstream_dirty"
+ | "source_dirty"
+ | "drifted_and_upstream_dirty"
+ | "output_drift"
+ | "source_dirty_and_output_drift"
+ | "kept-local";
+
+export interface RuntimeWarning {
+ type: string;
+ path?: string;
+ [k: string]: unknown;
+}
+
+export interface StatusRow {
+ scope: "project" | "local";
+ source: ItemSource;
+ kind: ItemKind;
+ name: string;
+ state: State;
+ lockedSha: string;
+ currentSha: string | null;
+ upstreamSha: string | null;
+ upstreamDirty?: boolean;
+ sourceCommit?: string;
+ local?: true;
+ localReason?: string;
+ cliVersion?: string;
+ label?: string;
+ runtimeWarnings?: RuntimeWarning[];
+}
+
+export interface StatusDiff {
+ item: string;
+ kind: ItemKind;
+ name: string;
+ path: string;
+ text: string;
+}
+
+export interface StatusReport {
+ project: string;
+ dataRepo: string | null;
+ cliVersion: string;
+ count: number;
+ items: StatusRow[];
+ diffs?: StatusDiff[];
+ external: { name: string; source?: string }[];
+ externalClaudePlugins: { id?: string; name: string }[];
+ personalClaudeExternal: { kind: string; name: string; path: string }[];
+}
+
+export interface Health {
+ product: string;
+ version: string;
+ project: string;
+ dataRepo: string | null;
+ dataRepoReady: boolean;
+ installMode: string;
+ readOnly: boolean;
+}
+
+export interface CatalogItem {
+ source: ItemSource;
+ kind: ItemKind;
+ name: string;
+ sha: string;
+ path?: string;
+ description?: string;
+ tags?: string[];
+}
+
+export interface CatalogBundle {
+ name: string;
+ description?: string;
+ tags?: string[];
+ members: string[];
+ malformed?: boolean;
+}
+
+export interface Catalog {
+ dataRepo: string | null;
+ dataRepoReady: boolean;
+ system: CatalogItem[];
+ data: CatalogItem[];
+ bundles?: CatalogBundle[];
+}
+
+async function get
{err}
;
+ if (!data.dataRepoReady)
+ return
No data repo bound — bind one to see its history.
No commits in the data repo yet.
+
+
+ {data.commits.map((c, i) => (
+
+
+ );
+}
+
+function Node({ head, last }: { head: boolean; last: boolean }) {
+ return (
+ Data repo history
+
+ ))}
+
+
+
+
+ {c.subject}
+ {c.author} · {c.sha.slice(0, 7)}
+ {ago(c.date)}
+
+ {!last && }
+
+
+ );
+}
diff --git a/web/src/components/Bundles.tsx b/web/src/components/Bundles.tsx
new file mode 100644
index 0000000..0ad396e
--- /dev/null
+++ b/web/src/components/Bundles.tsx
@@ -0,0 +1,71 @@
+import type { Catalog, ItemKind, StatusRow } from "../api";
+import { KindIcon } from "../icons";
+import { StatusBadge, ExternalBadge } from "./bits";
+import { useCommand } from "./CommandDialog";
+
+function parseMember(ref: string): { kind: ItemKind; name: string } {
+ const [kind = "", ...rest] = ref.split("/");
+ return { kind: kind as ItemKind, name: rest.join("/") || kind };
+}
+
+export function Bundles({
+ catalog, installed,
+}: {
+ catalog: Catalog | null;
+ installed: Map;
+ const bundles = catalog.bundles ?? [];
+ if (bundles.length === 0)
+ return
No bundles in this data repo.
+ {bundles.map((b) => {
+ const members = b.members.map(parseMember);
+ const counts = members.reduce>((acc, m) => {
+ acc[m.kind] = (acc[m.kind] ?? 0) + 1;
+ return acc;
+ }, {});
+ const allInstalled = members.every((m) => installed.has(`${m.kind}/${m.name}`));
+ return (
+
+ );
+}
diff --git a/web/src/components/CommandDialog.tsx b/web/src/components/CommandDialog.tsx
new file mode 100644
index 0000000..3de14ad
--- /dev/null
+++ b/web/src/components/CommandDialog.tsx
@@ -0,0 +1,78 @@
+import { createContext, useCallback, useContext, useEffect, useState } from "react";
+import type { ReactNode } from "react";
+import { IconCopy, IconCheck, IconClose } from "../icons";
+
+interface CommandRequest {
+ /** args after `capshelf`, e.g. "update settings/permissions-base" */
+ args: string;
+ title?: string;
+ note?: string;
+}
+
+type Show = (req: CommandRequest) => void;
+const Ctx = createContext
+
+ );
+ })}
+
+
+ {members.map((m) => {
+ const row = installed.get(`${m.kind}/${m.name}`);
+ return (
+
+
+ {b.name}
+ {b.description && {b.description}
}
+
+ {Object.entries(counts).map(([k, n]) => (
+ {n} {k}
+ ))}
+
+
+
+
+ );
+ })}
+
+
+ {row ? {m.name}
+ {m.kind}
+
+
+ );
+}
diff --git a/web/src/components/CommandPalette.tsx b/web/src/components/CommandPalette.tsx
new file mode 100644
index 0000000..9dc8f45
--- /dev/null
+++ b/web/src/components/CommandPalette.tsx
@@ -0,0 +1,111 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import type { Catalog, StatusReport } from "../api";
+import { STATE_LABEL } from "../api";
+
+interface Cmd {
+ id: string;
+ label: string;
+ hint?: string;
+ group: string;
+ run: () => void;
+}
+
+export function CommandPalette({
+ open, onClose, report, catalog,
+}: {
+ open: boolean;
+ onClose: () => void;
+ report: StatusReport | null;
+ catalog: Catalog | null;
+}) {
+ const [q, setQ] = useState("");
+ const [sel, setSel] = useState(0);
+ const inputRef = useRef e.stopPropagation()}>
+
+
+
+
+ {req.title ?? "Run this in your terminal"}
+
+ + {req.note ?? + "capshelf serve is read-only — run this to make the change, then it’ll show up here."} +
+
+
+ );
+}
diff --git a/web/src/components/ItemScreen.tsx b/web/src/components/ItemScreen.tsx
new file mode 100644
index 0000000..999d482
--- /dev/null
+++ b/web/src/components/ItemScreen.tsx
@@ -0,0 +1,163 @@
+import { useEffect, useMemo, useState } from "react";
+import { api, bucketOf } from "../api";
+import type { StatusDiff, StatusReport, StatusRow } from "../api";
+import { KindIcon, IconClose } from "../icons";
+import { StatusBadge, VersionCell, short } from "./bits";
+import { useCommand } from "./CommandDialog";
+
+const refOf = (r: StatusRow) => `${r.kind}/${r.name}`;
+
+export function ItemScreen({ report }: { report: StatusReport }) {
+ const ordered = useMemo(
+ () =>
+ [...report.items].sort(
+ (a, b) => rank(bucketOf(a.state)) - rank(bucketOf(b.state)),
+ ),
+ [report],
+ );
+ const [selRef, setSelRef] = useState e.stopPropagation()} onKeyDown={onKey}>
+ setQ(e.target.value)}
+ />
+
+
+ {results.length === 0 &&
+ No matches.
}
+ {results.map((c, i) => {
+ const head = c.group !== lastGroup ? c.group : null;
+ lastGroup = c.group;
+ return (
+
+ {head &&
+ );
+ })}
+ {head}
}
+ setSel(i)}
+ onClick={() => c.run()}
+ >
+ {c.label}
+ {c.hint && {c.hint}}
+
+ ↑↓ navigate↵ openesc close
+
+
+ );
+}
+
+function Drawer({ row, onClose }: { row: StatusRow; onClose: () => void }) {
+ const bucket = bucketOf(row.state);
+ const showCommand = useCommand();
+ const ref = `${row.kind}/${row.name}`;
+ const [diff, setDiff] = useState
+
+
+ {ordered.length === 0 &&
+ {selected && setSelRef(null)} />}
+
+ Item
Status
No items installed.
}
+ {ordered.map((r) => (
+ setSelRef(refOf(r))}
+ >
+
+
+ ))}
+
+
+
+
+ {r.name}
+ {r.kind}{r.local ? " · pinned" : ""}
+
+ {lines.map((line, i) => {
+ const cls = line.startsWith("+") && !line.startsWith("+++")
+ ? "add"
+ : line.startsWith("-") && !line.startsWith("---")
+ ? "del"
+ : "ctx";
+ const gut = cls === "add" ? "+" : cls === "del" ? "-" : " ";
+ const body = cls === "ctx" ? line : line.slice(1);
+ return (
+
+ );
+}
+
+function rank(bucket: ReturnType
+ {gut}
+ {body || " "}
+
+ );
+ })}
+
+
+
+
+ );
+}
+
+function TabBtn({ id, tab, set, label, n, att }: {
+ id: Tab; tab: Tab; set: (t: Tab) => void; label: string; n: number; att?: boolean;
+}) {
+ return (
+
+ );
+}
+
+function ExternalRows({ report }: { report: StatusReport }) {
+ const items = [
+ ...report.external.map((e) => ({ name: e.name, kind: "skills" as const, note: e.source ?? "skills.sh" })),
+ ...report.externalClaudePlugins.map((p) => ({ name: p.name, kind: "skills" as const, note: "Claude plugin" })),
+ ];
+ if (items.length === 0) return
+
+
+
+
+
+
+
+
+
+
+
+ {tab === "external" ? (
+ Item
Source
+ Version
Status
+ Nothing here.
+ ) : (
+ rows.map((r) => (
+ { location.hash = "#items"; }}
+ >
+
+
+ ))
+ )}
+
+
+
+
+
+ {r.name}
+ {r.kind}{r.local ? " · pinned by you" : ""}
+ {r.source}
+
+ Showing {tab === "external" ? counts.external : rows.length} of {report.items.length + counts.external}
+
+ No external items.
;
+ return (
+ <>
+ {items.map((e, i) => (
+
+
+
+ ))}
+
+ );
+}
diff --git a/web/src/components/Settings.tsx b/web/src/components/Settings.tsx
new file mode 100644
index 0000000..531741c
--- /dev/null
+++ b/web/src/components/Settings.tsx
@@ -0,0 +1,61 @@
+import { api } from "../api";
+import { useFetch } from "../useFetch";
+
+export function Settings() {
+ const { data: cfg, error: err } = useFetch(api.config);
+
+ if (err) return
+
+ {e.name}
{e.kind} · {e.note}
external
+ not co-managed
+ {err}
;
+
+ return (
+
+
+ |
+ |
+ {cfg.dataRepoUpstream && |
}
+
+
+
+ |
+ |
+ |
+ |
+
+
+
+ |
+ |
+ |
+
+
+
+ |
+
+
+ );
+}
+
+function Card({ title, children }: { title: string; children: React.ReactNode }) {
+ return (
+ + The web server never mutates project or data-repo state. Use the CLI for + writes: apply, update,{" "} + promote, share. +
+
+
+ {title}
+ {children}
+
+ {k}
+ {v}
+
+ );
+}
diff --git a/web/src/components/Shelf.tsx b/web/src/components/Shelf.tsx
new file mode 100644
index 0000000..2df6ab4
--- /dev/null
+++ b/web/src/components/Shelf.tsx
@@ -0,0 +1,88 @@
+import { useMemo } from "react";
+import type { Catalog, ItemKind, StatusRow } from "../api";
+import { KindIcon } from "../icons";
+import { StatusBadge } from "./bits";
+import { useCommand } from "./CommandDialog";
+
+export function Shelf({
+ catalog, installed,
+}: {
+ catalog: Catalog | null;
+ installed: Map;
+
+ return (
+
+
+ );
+}
+
+function Section({
+ title, items, installed,
+}: {
+ title: string;
+ items: Catalog["data"];
+ installed: Map
+
+
+ {!catalog.dataRepoReady && (
+
+
+
+
+
+ No data repo bound — only system items are shown. Run capshelf set-data <path>.
+ )}
+
+
+
+ {title}
+ {items.map((it) => {
+ const row = installed.get(`${it.kind as ItemKind}/${it.name}`);
+ return (
+
+
+ );
+}
diff --git a/web/src/components/Shell.tsx b/web/src/components/Shell.tsx
new file mode 100644
index 0000000..5d63242
--- /dev/null
+++ b/web/src/components/Shell.tsx
@@ -0,0 +1,131 @@
+import type { ReactNode } from "react";
+import type { Health } from "../api";
+import {
+ IconActivity, IconBundles, IconItems, IconOverview, IconSearch,
+ IconSettings, IconShelf, IconSync, IconMenu, IconClock, IconCheck,
+} from "../icons";
+import { useCommand } from "./CommandDialog";
+
+const NAV = [
+ { id: "overview", label: "Overview", Icon: IconOverview },
+ { id: "items", label: "Items", Icon: IconItems, attention: true },
+ { id: "shelf", label: "Shelf", Icon: IconShelf },
+ { id: "bundles", label: "Bundles", Icon: IconBundles },
+ { id: "activity", label: "Activity", Icon: IconActivity },
+] as const;
+
+function repoName(dataRepo: string | null): string {
+ if (!dataRepo) return "no data repo";
+ const parts = dataRepo.replace(/\/$/, "").split("/");
+ return parts.slice(-2).join("/") || dataRepo;
+}
+
+export function Shell({
+ route, title, health, attention, onToggleTheme, onOpenPalette, children,
+}: {
+ route: string;
+ title: string;
+ health: Health | null;
+ attention: number;
+ onToggleTheme: () => void;
+ onOpenPalette: () => void;
+ children: ReactNode;
+}) {
+ const showCommand = useCommand();
+ return (
+
+
+ );
+ })}
+
+
+ {it.description &&
+
+ {it.name}
+ {it.kind} · {it.source}
+ {it.description}
}
+ {it.tags && it.tags.length > 0 && (
+ {it.tags.map((t) => #{t})}
+ )}
+
+ {row ? (
+
+
+
+
+
+ );
+}
+
+function projectName(project: string): string {
+ return project.replace(/\/$/, "").split("/").pop() || project;
+}
diff --git a/web/src/components/bits.tsx b/web/src/components/bits.tsx
new file mode 100644
index 0000000..fd0cc94
--- /dev/null
+++ b/web/src/components/bits.tsx
@@ -0,0 +1,72 @@
+import type { Bucket, State, StatusRow } from "../api";
+import { STATE_LABEL, bucketOf } from "../api";
+
+export const short = (sha: string | null | undefined, n = 7): string =>
+ sha ? sha.slice(0, n) : "";
+
+const BADGE_CLASS: Record
+
+
+
+ {children}
+
+
+
+
+ {health ? projectName(health.project) : "…"}
+ /
+ {title}
+
+
+
+
+
+
+
+ ))}
+ {s.label}
+ {counts[s.bucket]}
+ {s.sub}
+