Skip to content

fix: resolve pre-freeze API audit findings - #126

Merged
jackgranatowski merged 5 commits into
mainfrom
fix/pre-freeze-audit-fixes
May 27, 2026
Merged

fix: resolve pre-freeze API audit findings#126
jackgranatowski merged 5 commits into
mainfrom
fix/pre-freeze-audit-fixes

Conversation

@kiro-agent

@kiro-agent kiro-agent Bot commented May 27, 2026

Copy link
Copy Markdown

This pull request was created by @kiro-agent on behalf of @jackgranatowski 👻

Comment with /kiro fix to address specific feedback or /kiro all to address everything.
Learn about Kiro autonomous agent


Summary

Resolves all findings from the pre-freeze API audit (9 issues across documentation drift, naming inconsistencies, and tooling gaps).

Changes

  • core/tokens.css — Add --sf-icon-2xl to the PUBLIC tier classification in the header (was missing despite token+class existing)
  • docs/architecture.md — Fix alias hop count from "≤2" to "≤3 hops (per-primitive → layout-system → canonical source)" matching the contract in tokens.css
  • docs/tokens.md — Replace stale "PUBLIC / INTERNAL / DEPRECATED" with "PUBLIC / PUBLIC-ADVANCED / INTERNAL"; note DEPRECATED tier will return post-0.5.0
  • .stylelintrc.json — Upgrade custom-property-pattern from bare ^sf- prefix to a structural regex enforcing the single-dash (shade) / double-dash (application slot) naming convention
  • docs/components.md — Rename .sf-button--destructive to .sf-button--danger for consistency with .is-danger state naming
  • CHANGELOG.md — Remove false "icon caps at --xl" claim; .sf-icon--2xl exists and is intentional
  • docs/layout.md — Add missing primitives .sf-gap, .sf-equal, .sf-section--collapse to reference table and size-modifier table
  • docs/motion.md — Correct all stale duration values (instant 50→100ms, normal 300→250ms, slow 500→400ms, slower 800→600ms) and delay values (delay-1..5 recalculated)
  • docs/migration.md — Add comprehensive "0.3.0 → pre-freeze" section documenting all removed tokens, removed class modifiers, and added modifiers

Testing

  • Verified all existing --sf-* token names pass the new stylelint regex pattern
  • No CSS source changes (only header comment + config + docs)

kiro-agent and others added 5 commits May 27, 2026 13:18
- tokens.css: add --sf-icon-2xl to PUBLIC tier classification
- architecture.md: fix alias hop count ≤2 → ≤3 to match tokens.css
- tokens.md: fix tier reference (PUBLIC/PUBLIC-ADVANCED/INTERNAL)
- .stylelintrc.json: enforce single-dash/double-dash naming semantics
- components.md: rename --destructive to --danger for consistency
- CHANGELOG.md: remove false 'icon caps at xl' claim (has 2xl)
- layout.md: add .sf-gap, .sf-equal, .sf-section--collapse docs
- motion.md: correct stale duration/delay token values
- migration.md: add [Unreleased] pre-freeze breaking changes section

Co-authored-by: Jack Granatowski <contact@codeslash.net>
Aligns the commented component scaffold with docs/components.md and
the consistent 'danger' intent modifier used across the API (.is-danger,
.sf-surface--danger, --sf-color-danger-*). Adds a migration note.
The generator template still referenced 'PUBLIC / INTERNAL / DEPRECATED'
which caused docs-freshness CI to fail (generator overwrites our
corrected tokens.md header). Updated to PUBLIC / PUBLIC-ADVANCED /
INTERNAL with the DEPRECATED note for post-0.5.0.
Updates the stale 'PUBLIC / INTERNAL / DEPRECATED' reference to
'PUBLIC / PUBLIC-ADVANCED / INTERNAL' and corrects the alias hop
limit from ≤2 to ≤3, consistent with core/tokens.css and
docs/architecture.md.
@jackgranatowski
jackgranatowski merged commit 0390b95 into main May 27, 2026
4 checks passed
jackgranatowski pushed a commit that referenced this pull request May 27, 2026
PR #127 wired zip-plugin.js into the build chain but didn't commit the
generated dist/slashed-bricks.zip artifact (required by release.yml).
Also refreshes the ten .min.css.map files whose sources changed in
PRs #125#126 but whose built output was never re-committed.

https://claude.ai/code/session_01CkF1n21vhFAfscxSarXuCD
@jackgranatowski
jackgranatowski deleted the fix/pre-freeze-audit-fixes branch May 31, 2026 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants