12 Commits

Author SHA1 Message Date
jilinxia 99a7d17734 refactor: move react-native skill into stitch-build plugin
- Relocate skills/react-native → plugins/stitch-build/skills/react-native
- Rewrite Codex quick-start section for clarity (CLI-first, collapsible UI)
- Add Cursor install command under Claude Code section
2026-06-04 09:16:43 -07:00
Micha Kiel 241b53e237 fix(react-components): detect hex colors in JSX className
The hex-color check in scripts/validate.js is silently a no-op. The guard
reads node.name.name === 'className', but SWC's AST exposes the
JSXAttribute identifier on .name.value. The condition is always false,
so the inner regex test never runs and tailwindIssues stays empty
regardless of input.

Effect today: validate.js correctly enforces the Props-interface rule
but does not enforce the no-hardcoded-hex rule. Components like

  <div className="bg-[#ff0000]">...</div>

pass validation. The CI smoke test happens to be green because
gold-standard-card.tsx has no hex codes.

Fix: accept both AST shapes (.name?.value and .name?.name) so the guard
stays correct against the current SWC release and against any future
revision that flips the field back. Optional chaining added so a
malformed node can't NPE the walker.

Reproducer (before patch, prints '0 hex codes'):

  echo 'export function X(){return <div className="bg-[#ff0000]">x</div>;}' > /tmp/bad.tsx
  node scripts/validate.js /tmp/bad.tsx

After patch, the same input prints '1 hardcoded hex codes' and exits 1.

The existing examples/gold-standard-card.tsx continues to validate clean.
2026-05-24 22:11:19 -04:00
amourfrei cbfb38516e Add Codex plugin metadata 2026-05-20 14:45:15 +08:00
jilinxia 66f6f5e94a fix the last security risk 2026-05-18 10:29:59 -07:00
jilinxia cf118883bb fix security risk further 2026-05-18 10:06:36 -07:00
jilinxia 3bd73f2b91 fix security risk 2026-05-18 09:06:48 -07:00
jilinxia 8e34bd0ebe fix security risk 2026-05-18 09:01:57 -07:00
jilinxia a2d69f79ee support uploading DESIGN.md through script 2026-05-17 10:28:59 -07:00
jilinxia ea4e83027c add a tip for SSL Certificate 2026-05-12 13:25:23 -07:00
jilinxia 681a283c66 fix minor issues 2026-05-11 22:53:25 -07:00
jilinxia 27e0dc00ef fix some inconsitent issues 2026-05-11 22:24:45 -07:00
jilinxia 5532ce08bb refactor: restructure skills into plugin architecture
Reorganize flat skills/ directory into three plugins under plugins/:
- stitch-design: 6 core design workflow skills
- stitch-build: 3 code generation and build skills
- stitch-utilities: 4 design utility and assistant skills

Each plugin has a plugin.json manifest following the Agent Skills
plugin standard (matching himself65/finance-skills pattern).

Installation: npx plugins add google-labs-code/stitch-skills
2026-05-10 09:20:36 -07:00