@csszyx/unplugin 0.6.2 → 0.7.0

package/dist/index.cjs

@@ -30,11 +30,19 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  assertNoRSCBoundaryViolation: () => assertNoRSCBoundaryViolation,
+  assertNoRSCGraphViolation: () => assertNoRSCGraphViolation,
   createPostCSSPlugin: () => createPostCSSPlugin,
+  createRSCModuleRecord: () => createRSCModuleRecord,
   default: () => unplugin,
   esbuildPlugin: () => esbuildPlugin,
   escapeCSSClassName: () => escapeCSSClassName,
+  findRSCBoundaryViolation: () => findRSCBoundaryViolation,
+  findRSCGraphViolation: () => findRSCGraphViolation,
   hasTokens: () => hasTokens,
+  hasUseClientDirective: () => hasUseClientDirective,
+  hasUseServerDirective: () => hasUseServerDirective,
+  isRSCServerModule: () => isRSCServerModule,
   mangleCSS: () => mangleCSS,
   mangleCSSSync: () => mangleCSSSync,
   mangleCodeClassesSync: () => mangleCodeClassesSync,
@@ -243,6 +251,303 @@ function createPostCSSPlugin(mangleMap, options = {}) {
   };
 }
 
+// src/rsc-boundary.ts
+var fs = __toESM(require("fs"), 1);
+var path = __toESM(require("path"), 1);
+var SERVER_DIRECTIVE_RE = /^['"]use server['"];?$/;
+var CLIENT_DIRECTIVE_RE = /^['"]use client['"];?$/;
+var RUNTIME_MODULES = /* @__PURE__ */ new Set([
+  "@csszyx/runtime",
+  "@csszyx/runtime/lite",
+  "csszyx",
+  "csszyx/lite"
+]);
+var FORBIDDEN_SYMBOLS = /* @__PURE__ */ new Set([
+  "_sz",
+  "_sz2",
+  "_sz3",
+  "_szIf",
+  "_szMerge",
+  "_szSwitch",
+  "__csszyx_runtime__"
+]);
+function hasUseServerDirective(code) {
+  for (const statement of readDirectivePrologue(code)) {
+    if (SERVER_DIRECTIVE_RE.test(statement)) {
+      return true;
+    }
+    if (CLIENT_DIRECTIVE_RE.test(statement)) {
+      return false;
+    }
+  }
+  return false;
+}
+function hasUseClientDirective(code) {
+  for (const statement of readDirectivePrologue(code)) {
+    if (CLIENT_DIRECTIVE_RE.test(statement)) {
+      return true;
+    }
+    if (SERVER_DIRECTIVE_RE.test(statement)) {
+      return false;
+    }
+  }
+  return false;
+}
+function isRSCServerModule(code, id) {
+  if (hasUseServerDirective(code)) {
+    return true;
+  }
+  if (hasUseClientDirective(code)) {
+    return false;
+  }
+  return isNextAppRouterEntry(id);
+}
+function findRSCBoundaryViolation(code, id) {
+  if (!isRSCServerModule(code, id)) {
+    return null;
+  }
+  for (const imported of findRuntimeImports(code)) {
+    for (const symbol of imported.symbols) {
+      if (FORBIDDEN_SYMBOLS.has(symbol)) {
+        return {
+          symbol,
+          path: id,
+          importChain: [id, imported.source]
+        };
+      }
+    }
+  }
+  return null;
+}
+function createRSCModuleRecord(code, id) {
+  const normalized = normalizeModuleId(id);
+  return {
+    id: normalized,
+    isServer: isRSCServerModule(code, normalized),
+    isClient: hasUseClientDirective(code),
+    imports: findLocalImportSources(code).map((source) => resolveLocalModule(normalized, source)).filter((resolved) => resolved !== null),
+    runtimeImports: findRuntimeImports(code).filter((imported) => imported.symbols.some((symbol) => FORBIDDEN_SYMBOLS.has(symbol)))
+  };
+}
+function findRSCGraphViolation(records) {
+  for (const root of records.values()) {
+    if (!root.isServer) {
+      continue;
+    }
+    const violation = walkRSCGraph(root, records, [root.id], /* @__PURE__ */ new Set([root.id]));
+    if (violation) {
+      return {
+        symbol: violation.symbol,
+        path: root.id,
+        importChain: violation.importChain
+      };
+    }
+  }
+  return null;
+}
+function assertNoRSCGraphViolation(records) {
+  const violation = findRSCGraphViolation(records);
+  if (!violation) {
+    return;
+  }
+  throw new Error(formatRSCViolation(violation));
+}
+function isNextAppRouterEntry(id) {
+  const clean = id.split("?")[0]?.replace(/\\/g, "/") ?? id;
+  return /(^|\/)app\/.*\/?(?:page|layout|template|loading|error|not-found|global-error|default|route)\.[cm]?[tj]sx?$/.test(clean);
+}
+function assertNoRSCBoundaryViolation(code, id) {
+  const violation = findRSCBoundaryViolation(code, id);
+  if (!violation) {
+    return;
+  }
+  throw new Error(formatRSCViolation(violation));
+}
+function formatRSCViolation(violation) {
+  return `csszyxRSCViolation: ${violation.symbol} imported in Server Component ${violation.path}
+  Import chain: ${violation.importChain.join(" -> ")}`;
+}
+function walkRSCGraph(current, records, chain, seen) {
+  if (current.isClient) {
+    return null;
+  }
+  const runtime = current.runtimeImports[0];
+  const symbol = runtime?.symbols.find((s) => FORBIDDEN_SYMBOLS.has(s));
+  if (runtime && symbol) {
+    return {
+      symbol,
+      path: chain[0] ?? current.id,
+      importChain: [...chain, runtime.source]
+    };
+  }
+  for (const importedId of current.imports) {
+    if (seen.has(importedId)) {
+      continue;
+    }
+    const next = records.get(importedId);
+    if (!next) {
+      continue;
+    }
+    seen.add(importedId);
+    const violation = walkRSCGraph(next, records, [...chain, importedId], seen);
+    if (violation) {
+      return violation;
+    }
+  }
+  return null;
+}
+function readDirectivePrologue(code) {
+  const out = [];
+  let i = code.charCodeAt(0) === 65279 ? 1 : 0;
+  while (i < code.length) {
+    i = skipWhitespaceAndComments(code, i);
+    const quote = code[i];
+    if (quote !== '"' && quote !== "'") {
+      break;
+    }
+    let j = i + 1;
+    let escaped = false;
+    while (j < code.length) {
+      const ch = code[j];
+      if (escaped) {
+        escaped = false;
+      } else if (ch === "\\") {
+        escaped = true;
+      } else if (ch === quote) {
+        break;
+      }
+      j++;
+    }
+    if (j >= code.length) {
+      break;
+    }
+    let end = j + 1;
+    while (end < code.length && /[ \t\r\n]/.test(code[end])) {
+      end++;
+    }
+    if (code[end] === ";") {
+      end++;
+    }
+    out.push(code.slice(i, end).trim());
+    i = end;
+  }
+  return out;
+}
+function skipWhitespaceAndComments(code, start) {
+  let i = start;
+  while (i < code.length) {
+    while (i < code.length && /\s/.test(code[i])) {
+      i++;
+    }
+    if (code.startsWith("//", i)) {
+      const next = code.indexOf("\n", i + 2);
+      i = next === -1 ? code.length : next + 1;
+      continue;
+    }
+    if (code.startsWith("/*", i)) {
+      const next = code.indexOf("*/", i + 2);
+      i = next === -1 ? code.length : next + 2;
+      continue;
+    }
+    break;
+  }
+  return i;
+}
+function findRuntimeImports(code) {
+  const imports = [];
+  const staticImportRe = /import\s+(?!type\b)([\s\S]*?)\s+from\s+['"]([^'"]+)['"]/g;
+  const sideEffectImportRe = /import\s+['"]([^'"]+)['"]/g;
+  const dynamicImportRe = /import\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
+  let match;
+  while ((match = staticImportRe.exec(code)) !== null) {
+    const clause = match[1];
+    const source = match[2];
+    if (!RUNTIME_MODULES.has(source)) {
+      continue;
+    }
+    imports.push({ source, symbols: readImportedSymbols(clause) });
+  }
+  while ((match = sideEffectImportRe.exec(code)) !== null) {
+    const source = match[1];
+    if (RUNTIME_MODULES.has(source)) {
+      imports.push({ source, symbols: [] });
+    }
+  }
+  while ((match = dynamicImportRe.exec(code)) !== null) {
+    const source = match[1];
+    if (RUNTIME_MODULES.has(source)) {
+      imports.push({ source, symbols: Array.from(FORBIDDEN_SYMBOLS) });
+    }
+  }
+  return imports;
+}
+function findLocalImportSources(code) {
+  const out = [];
+  const staticImportRe = /import\s+(?!type\b)(?:[\s\S]*?\s+from\s+)?['"]([^'"]+)['"]/g;
+  const exportFromRe = /export\s+(?!type\b)(?:[\s\S]*?)\s+from\s+['"]([^'"]+)['"]/g;
+  const dynamicImportRe = /import\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
+  let match;
+  for (const re of [staticImportRe, exportFromRe, dynamicImportRe]) {
+    while ((match = re.exec(code)) !== null) {
+      const source = match[1];
+      if (source.startsWith(".") || source.startsWith("/")) {
+        out.push(source);
+      }
+    }
+  }
+  return out;
+}
+function normalizeModuleId(id) {
+  const clean = id.split("?")[0] ?? id;
+  try {
+    return fs.realpathSync.native(clean).replace(/\\/g, "/");
+  } catch {
+    return path.resolve(clean).replace(/\\/g, "/");
+  }
+}
+function resolveLocalModule(importer, source) {
+  const base = source.startsWith("/") ? source : path.resolve(path.dirname(importer), source);
+  const candidates = [
+    base,
+    `${base}.tsx`,
+    `${base}.ts`,
+    `${base}.jsx`,
+    `${base}.js`,
+    `${base}.mjs`,
+    `${base}.cjs`,
+    path.join(base, "index.tsx"),
+    path.join(base, "index.ts"),
+    path.join(base, "index.jsx"),
+    path.join(base, "index.js")
+  ];
+  for (const candidate of candidates) {
+    if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {
+      return normalizeModuleId(candidate);
+    }
+  }
+  return null;
+}
+function readImportedSymbols(clause) {
+  const symbols = [];
+  const named = clause.match(/\{([\s\S]*?)\}/);
+  if (named) {
+    for (const part of named[1].split(",")) {
+      const trimmed = part.trim();
+      if (!trimmed || trimmed.startsWith("type ")) {
+        continue;
+      }
+      const sourceName = trimmed.replace(/^type\s+/, "").split(/\s+as\s+/)[0]?.trim();
+      if (sourceName) {
+        symbols.push(sourceName);
+      }
+    }
+  }
+  if (/\*\s+as\s+\w+/.test(clause)) {
+    symbols.push(...FORBIDDEN_SYMBOLS);
+  }
+  return symbols;
+}
+
 // src/theme-scanner.ts
 var EMPTY_THEME = { colors: [], spacings: [], fonts: [], radii: [], shadows: [] };
 function stripLayerWrappers(css) {
@@ -386,8 +691,8 @@ function hasTokens(theme) {
 }
 
 // src/unplugin.ts
-var fs = __toESM(require("fs"), 1);
-var path = __toESM(require("path"), 1);
+var fs2 = __toESM(require("fs"), 1);
+var path2 = __toESM(require("path"), 1);
 var import_compiler = require("@csszyx/compiler");
 var import_core = require("@csszyx/core");
 var import_svelte_adapter = require("@csszyx/svelte-adapter");
@@ -455,7 +760,7 @@ function injectHydrationData(html, mangleMap, checksum, options = {}) {
 function transformIndexHtml(html, mangleMap, checksum, options = {}) {
   return injectHydrationData(html, mangleMap, checksum, options);
 }
-function buildRecoveryManifest(tokens, options = {}) {
+function buildRecoveryManifest(tokens, options) {
   const stripped = options.production === true;
   const strippedDevOnlyPaths = [];
   const sorted = {};
@@ -476,7 +781,7 @@ function buildRecoveryManifest(tokens, options = {}) {
   const checksum = fullChecksum.substring(0, 16);
   const buildId = `${Date.now().toString(36)}-${fullChecksum.substring(0, 6)}`;
   return {
-    manifest: { buildId, checksum, tokens: sorted },
+    manifest: { buildId, checksum, mangleChecksum: options.mangleChecksum, tokens: sorted },
     strippedDevOnlyPaths
   };
 }
@@ -605,8 +910,8 @@ function runThemeScan(rootDir, scanCss) {
   const patterns = Array.isArray(scanCss) ? scanCss : [scanCss];
   const sourceFiles = [];
   for (const pattern of patterns) {
-    const resolved = path.isAbsolute(pattern) ? pattern : path.join(rootDir, pattern);
-    if (fs.existsSync(resolved)) {
+    const resolved = path2.isAbsolute(pattern) ? pattern : path2.join(rootDir, pattern);
+    if (fs2.existsSync(resolved)) {
       sourceFiles.push(resolved);
     }
   }
@@ -615,20 +920,20 @@ function runThemeScan(rootDir, scanCss) {
   }
   const themes = sourceFiles.map((f) => {
     try {
-      return parseThemeBlocks(fs.readFileSync(f, "utf-8"));
+      return parseThemeBlocks(fs2.readFileSync(f, "utf-8"));
     } catch {
       return null;
     }
   }).filter((t) => t !== null);
   const merged = mergeThemes(themes);
-  const outputPath = path.join(rootDir, ".csszyx", "theme.d.ts");
+  const outputPath = path2.join(rootDir, ".csszyx", "theme.d.ts");
   writeThemeDts({ outputPath, theme: merged, sourceFiles });
   if (!_hasWarnedTsConfig) {
     _hasWarnedTsConfig = true;
     try {
       const checkFile = (cfgPath) => {
-        if (fs.existsSync(cfgPath)) {
-          const content = fs.readFileSync(cfgPath, "utf-8");
+        if (fs2.existsSync(cfgPath)) {
+          const content = fs2.readFileSync(cfgPath, "utf-8");
           if (!content.includes(".csszyx")) {
             console.warn(`
 \x1B[33m\u26A0\uFE0F CSSzyx: Theme Auto-Scan enabled, but TypeScript isn't configured. Run "npx @csszyx/cli init" to fix.\x1B[0m
@@ -638,8 +943,8 @@ function runThemeScan(rootDir, scanCss) {
         }
         return false;
       };
-      if (!checkFile(path.join(rootDir, "tsconfig.json"))) {
-        checkFile(path.join(rootDir, "tsconfig.app.json"));
+      if (!checkFile(path2.join(rootDir, "tsconfig.json"))) {
+        checkFile(path2.join(rootDir, "tsconfig.app.json"));
       }
     } catch {
     }
@@ -826,7 +1131,8 @@ function createCsszyxPlugins(options = {}) {
     checksum: "",
     finalized: false,
     rootDir: process.cwd(),
-    recoveryTokens: /* @__PURE__ */ new Map()
+    recoveryTokens: /* @__PURE__ */ new Map(),
+    rscModules: /* @__PURE__ */ new Map()
   };
   const SAFELIST_FILENAME = "csszyx-classes.html";
   const SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".jsx", ".ts", ".js"]);
@@ -835,16 +1141,16 @@ function createCsszyxPlugins(options = {}) {
     if (classes.size === 0) {
       return;
     }
-    const safelistPath = path.join(state.rootDir, SAFELIST_FILENAME);
+    const safelistPath = path2.join(state.rootDir, SAFELIST_FILENAME);
     const classList = Array.from(classes).join(" ");
     const content = `<!-- Auto-generated by csszyx \u2014 DO NOT EDIT -->
 <!-- Tailwind CSS scans this file for class name detection -->
 <div class="${classList}"><div class="${classList}">x</div><div class="${classList}">x</div></div>
 `;
     try {
-      const existing = fs.existsSync(safelistPath) ? fs.readFileSync(safelistPath, "utf-8") : "";
+      const existing = fs2.existsSync(safelistPath) ? fs2.readFileSync(safelistPath, "utf-8") : "";
       if (existing !== content) {
-        fs.writeFileSync(safelistPath, content);
+        fs2.writeFileSync(safelistPath, content);
       }
     } catch {
     }
@@ -855,19 +1161,19 @@ function createCsszyxPlugins(options = {}) {
     function scanDir(dir) {
       let entries;
       try {
-        entries = fs.readdirSync(dir, { withFileTypes: true });
+        entries = fs2.readdirSync(dir, { withFileTypes: true });
       } catch {
         return;
       }
       for (const entry of entries) {
         if (entry.isDirectory()) {
           if (!IGNORE_DIRS.has(entry.name) && !entry.name.startsWith(".")) {
-            scanDir(path.join(dir, entry.name));
+            scanDir(path2.join(dir, entry.name));
           }
-        } else if (SOURCE_EXTENSIONS.has(path.extname(entry.name))) {
-          const filePath = path.join(dir, entry.name);
+        } else if (SOURCE_EXTENSIONS.has(path2.extname(entry.name))) {
+          const filePath = path2.join(dir, entry.name);
           try {
-            const content = fs.readFileSync(filePath, "utf-8");
+            const content = fs2.readFileSync(filePath, "utf-8");
             if (!content.includes("sz=") && !content.includes("sz:")) {
               continue;
             }
@@ -1059,14 +1365,17 @@ function createCsszyxPlugins(options = {}) {
      * @returns transformed code with source map, or null if no changes were made
      */
     transform(code, id) {
+      if (/\.[tj]sx?(\?.*)?$/.test(id)) {
+        assertNoRSCBoundaryViolation(code, id);
+      }
       if (/\.css(\?.*)?$/.test(id)) {
         const hasTailwindImport = code.includes('@import "tailwindcss') || code.includes("@import 'tailwindcss");
         if (hasTailwindImport && state.classes.size > 0) {
           const candidates = Array.from(state.classes).filter((c) => c.length >= 2 && /^[a-z]/.test(c)).join(" ");
           if (candidates) {
-            const safelistPath = path.join(state.rootDir, SAFELIST_FILENAME).replace(/\\/g, "/");
-            const cssDir = path.dirname(id).replace(/\\/g, "/");
-            let relPath = path.posix.relative(cssDir, safelistPath);
+            const safelistPath = path2.join(state.rootDir, SAFELIST_FILENAME).replace(/\\/g, "/");
+            const cssDir = path2.dirname(id).replace(/\\/g, "/");
+            let relPath = path2.posix.relative(cssDir, safelistPath);
             if (!relPath.startsWith(".")) {
               relPath = "./" + relPath;
             }
@@ -1170,6 +1479,11 @@ ${sourceDirective}`
           transformed = true;
         }
       }
+      if (/\.[tj]sx?(\?.*)?$/.test(id)) {
+        assertNoRSCBoundaryViolation(transformedCode, id);
+        const record = createRSCModuleRecord(transformedCode, id);
+        state.rscModules.set(record.id, record);
+      }
       if (transformed || transformedCode.includes("class=") || transformedCode.includes("className=")) {
         if (szClasses !== void 0) {
           for (const cls of szClasses) {
@@ -1185,6 +1499,7 @@ ${sourceDirective}`
     /** Finalizes the mangle map after all source modules have been processed. */
     buildEnd() {
       finalizeMangleMap();
+      assertNoRSCGraphViolation(state.rscModules);
       if (manglingEnabled && Object.keys(state.mangleMap).length > 0) {
         globalThis.__csszyx_ssr_mangle_map = state.mangleMap;
       }
@@ -1207,8 +1522,8 @@ ${sourceDirective}`
         compiler.hooks.thisCompilation.tap("csszyx:theme-deps", (compilation) => {
           const root = compiler.context || process.cwd();
           for (const pattern of patterns) {
-            const resolved = path.isAbsolute(pattern) ? pattern : path.join(root, pattern);
-            if (fs.existsSync(resolved)) {
+            const resolved = path2.isAbsolute(pattern) ? pattern : path2.join(root, pattern);
+            if (fs2.existsSync(resolved)) {
               compilation.fileDependencies.add(resolved);
             }
           }
@@ -1238,14 +1553,14 @@ ${sourceDirective}`
           const patterns = Array.isArray(scanCss) ? scanCss : [scanCss];
           const root = ctx.server.config.root || process.cwd();
           const isWatched = patterns.some((p) => {
-            const resolved = path.isAbsolute(p) ? p : path.join(root, p);
+            const resolved = path2.isAbsolute(p) ? p : path2.join(root, p);
             return ctx.file === resolved;
           });
           if (isWatched) {
             runThemeScan(root, scanCss);
           }
         }
-        if (!SOURCE_EXTENSIONS.has(path.extname(ctx.file))) {
+        if (!SOURCE_EXTENSIONS.has(path2.extname(ctx.file))) {
           return;
         }
         if (ctx.file.includes("node_modules")) {
@@ -1253,7 +1568,7 @@ ${sourceDirective}`
         }
         let fileContent, result;
         try {
-          fileContent = fs.readFileSync(ctx.file, "utf-8");
+          fileContent = fs2.readFileSync(ctx.file, "utf-8");
         } catch {
           return;
         }
@@ -1277,7 +1592,7 @@ ${sourceDirective}`
         }
         if (state.classes.size > sizeBefore) {
           writeSafelistFile(state.classes);
-          const safelistPath = path.join(state.rootDir, SAFELIST_FILENAME);
+          const safelistPath = path2.join(state.rootDir, SAFELIST_FILENAME);
           ctx.server.watcher.emit("change", safelistPath);
         }
       },
@@ -1299,7 +1614,10 @@ ${sourceDirective}`
             const isProduction = process.env.NODE_ENV === "production";
             const { manifest, strippedDevOnlyPaths } = buildRecoveryManifest(
               state.recoveryTokens,
-              { production: isProduction }
+              {
+                production: isProduction,
+                mangleChecksum: state.checksum
+              }
             );
             if (strippedDevOnlyPaths.length > 0) {
               console.warn(
@@ -1513,10 +1831,18 @@ var esbuildPlugin = (options = {}) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  assertNoRSCBoundaryViolation,
+  assertNoRSCGraphViolation,
   createPostCSSPlugin,
+  createRSCModuleRecord,
   esbuildPlugin,
   escapeCSSClassName,
+  findRSCBoundaryViolation,
+  findRSCGraphViolation,
   hasTokens,
+  hasUseClientDirective,
+  hasUseServerDirective,
+  isRSCServerModule,
   mangleCSS,
   mangleCSSSync,
   mangleCodeClassesSync,

package/dist/index.d.cts

@@ -7,6 +7,101 @@ import 'rollup';
 import 'unplugin';
 import 'vite';
 
+/**
+ * Direct RSC boundary violation found in a transformed module.
+ */
+interface RSCBoundaryViolation {
+    /** Forbidden runtime helper that crossed into an RSC server module. */
+    symbol: string;
+    /** Server module path where the import was found. */
+    path: string;
+    /** Import chain used in the fatal build error. */
+    importChain: string[];
+}
+/**
+ * RSC module metadata collected during the transform phase.
+ */
+interface RSCModuleRecord {
+    /** Normalized absolute module ID. */
+    id: string;
+    /** True when this module is an RSC server module entry or has `'use server'`. */
+    isServer: boolean;
+    /** True when this module declares the client boundary. */
+    isClient: boolean;
+    /** Local modules imported by this file after path resolution. */
+    imports: string[];
+    /** Forbidden runtime imports found directly in this module. */
+    runtimeImports: Array<{
+        source: string;
+        symbols: string[];
+    }>;
+}
+/**
+ * Returns true when a module starts with the top-level `'use server'`
+ * directive. Comments and blank lines before the directive are allowed, but
+ * detection stops at the first real statement.
+ *
+ * @param code module source
+ * @returns true when the module has a top-level `'use server'` directive
+ */
+declare function hasUseServerDirective(code: string): boolean;
+/**
+ * Returns true when a module starts with the top-level `'use client'`
+ * directive.
+ *
+ * @param code module source
+ * @returns true when the module has a top-level `'use client'` directive
+ */
+declare function hasUseClientDirective(code: string): boolean;
+/**
+ * Detects modules that should be treated as RSC server modules by csszyx.
+ *
+ * @param code module source
+ * @param id module ID/path
+ * @returns true when the module is server-side for RSC boundary purposes
+ */
+declare function isRSCServerModule(code: string, id: string): boolean;
+/**
+ * Finds the first direct forbidden runtime helper import in an RSC server
+ * module.
+ *
+ * @param code module source
+ * @param id module ID/path
+ * @returns violation details, or null when the module is allowed
+ */
+declare function findRSCBoundaryViolation(code: string, id: string): RSCBoundaryViolation | null;
+/**
+ * Builds module metadata for the RSC graph walker.
+ *
+ * @param code module source
+ * @param id module ID/path
+ * @returns graph metadata for the module
+ */
+declare function createRSCModuleRecord(code: string, id: string): RSCModuleRecord;
+/**
+ * Finds forbidden runtime helper imports reachable from an RSC server module.
+ * Traversal stops at `'use client'` modules because they define a separate
+ * client module graph.
+ *
+ * @param records module graph records keyed by normalized module ID
+ * @returns first graph violation, or null when the graph is allowed
+ */
+declare function findRSCGraphViolation(records: Map<string, RSCModuleRecord>): RSCBoundaryViolation | null;
+/**
+ * Throws the spec-format fatal RSC boundary error for graph-level violations.
+ *
+ * @param records module graph records keyed by normalized module ID
+ */
+declare function assertNoRSCGraphViolation(records: Map<string, RSCModuleRecord>): void;
+/**
+ * Throws the spec-format fatal RSC boundary error when a server module imports
+ * a forbidden csszyx runtime helper.
+ *
+ * @param code module source
+ * @param id module ID/path
+ */
+declare function assertNoRSCBoundaryViolation(code: string, id: string): void;
+
 /**
  * Theme Scanner — parses Tailwind v4 @theme blocks from CSS files.
  *
@@ -55,4 +150,4 @@ declare function mergeThemes(themes: ParsedTheme[]): ParsedTheme;
  */
 declare function hasTokens(theme: ParsedTheme): boolean;
 
-export { type ParsedTheme, hasTokens, mergeThemes, parseThemeBlocks };
+export { type ParsedTheme, type RSCBoundaryViolation, type RSCModuleRecord, assertNoRSCBoundaryViolation, assertNoRSCGraphViolation, createRSCModuleRecord, findRSCBoundaryViolation, findRSCGraphViolation, hasTokens, hasUseClientDirective, hasUseServerDirective, isRSCServerModule, mergeThemes, parseThemeBlocks };