@jini-ai/ui 0.4.4 → 0.4.6

package/dist/theme/index.d.ts

@@ -1,6 +1,6 @@
-export type { AdminTheme, AdminThemeColors, AdminThemeTarget, AdminThemeDocument, ColorScheme, ColorSchemePreference, MatchMediaPort } from './types.js';
-export { defaultAdminTheme } from './default.js';
-export { validateAdminTheme } from './validation.js';
+export type { AdminTheme, AdminThemeColors, AdminThemeTarget, AdminThemeDocument, ColorScheme, ColorSchemePreference, MatchMediaPort } from '../core/theme/types.js';
+export { defaultAdminTheme } from '../core/theme/default.js';
+export { validateAdminTheme } from '../core/theme/validation.js';
 export { applyAdminTheme } from './apply.js';
 export { resolveColorScheme } from './color-scheme.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/theme/index.js

@@ -1,5 +1,5 @@
-export { defaultAdminTheme } from './default.js';
-export { validateAdminTheme } from './validation.js';
+export { defaultAdminTheme } from '../core/theme/default.js';
+export { validateAdminTheme } from '../core/theme/validation.js';
 export { applyAdminTheme } from './apply.js';
 export { resolveColorScheme } from './color-scheme.js';
 //# sourceMappingURL=index.js.map

package/dist/theme/stylesheet.d.ts

@@ -1,8 +1,2 @@
-import type { AdminTheme, ColorScheme } from './types.js';
-/** Internal document adapter: isolated previews cannot inherit the admin's stylesheet. */
-export declare function renderAdminThemeVariables({ theme }: {
-    readonly theme: AdminTheme;
-}, { colorScheme }?: {
-    readonly colorScheme?: ColorScheme;
-}): string;
+export * from '../core/theme/stylesheet.js';
 //# sourceMappingURL=stylesheet.d.ts.map

package/dist/theme/stylesheet.js

@@ -1,14 +1,3 @@
-import { adminThemeColorKeys, validateAdminTheme } from './validation.js';
-import { defaultAdminTheme } from './default.js';
-/** Internal document adapter: isolated previews cannot inherit the admin's stylesheet. */
-export function renderAdminThemeVariables({ theme }, { colorScheme = 'light' } = {}) {
-    if (colorScheme !== 'light' && colorScheme !== 'dark')
-        throw new TypeError('Invalid resolved color scheme');
-    const checked = validateAdminTheme({ theme });
-    if (!checked.valid)
-        throw new TypeError(checked.errors.join('; '));
-    const values = adminThemeColorKeys.map((key) => `--jini-${key.replace(/[A-Z]/g, (letter) => `-${letter.toLowerCase()}`)}:${theme[colorScheme][key]};`);
-    values.push(`--jini-font-body:${theme.fonts.body};`, `--jini-font-heading:${theme.fonts.heading};`, `--jini-font-mono:${theme.fonts.mono ?? defaultAdminTheme.fonts.mono};`, `--jini-radius:${theme.radius ?? defaultAdminTheme.radius};`);
-    return `:root{color-scheme:${colorScheme};${values.join('')}}`;
-}
+// Compatibility path; the shared implementation lives in core.
+export * from '../core/theme/stylesheet.js';
 //# sourceMappingURL=stylesheet.js.map

package/dist/theme/types.d.ts

@@ -1,39 +1,2 @@
-/** The intentionally small palette every admin theme supplies in both schemes. */
-export interface AdminThemeColors {
-    readonly primary: string;
-    readonly primaryInk: string;
-    readonly bg: string;
-    readonly surface: string;
-    readonly text: string;
-    readonly muted: string;
-    readonly border: string;
-    readonly danger: string;
-    readonly success: string;
-    readonly warning: string;
-}
-/** Product fonts and palette are data. Font loading URLs are stylesheet URLs. */
-export interface AdminTheme {
-    readonly name: string;
-    readonly fonts: {
-        readonly body: string;
-        readonly heading: string;
-        readonly mono?: string;
-        readonly load?: readonly string[];
-    };
-    readonly light: AdminThemeColors;
-    readonly dark: AdminThemeColors;
-    readonly radius?: string;
-    /** Unitless spacing multiplier, from 0.5 to 2. */
-    readonly density?: number;
-}
-export type ColorScheme = 'light' | 'dark';
-export type ColorSchemePreference = ColorScheme | 'system';
-export type MatchMediaPort = (query: string) => {
-    readonly matches: boolean;
-    addEventListener?: (type: 'change', listener: () => void) => void;
-    removeEventListener?: (type: 'change', listener: () => void) => void;
-};
-/** Only these DOM capabilities are needed; no ambient document is consulted. */
-export type AdminThemeTarget = Pick<HTMLElement, 'style' | 'getAttribute' | 'setAttribute' | 'removeAttribute'>;
-export type AdminThemeDocument = Pick<Document, 'head' | 'createElement' | 'baseURI'>;
+export * from '../core/theme/types.js';
 //# sourceMappingURL=types.d.ts.map

package/dist/theme/types.js

@@ -1,2 +1,3 @@
-export {};
+// Compatibility path; the shared implementation lives in core.
+export * from '../core/theme/types.js';
 //# sourceMappingURL=types.js.map

package/dist/theme/validation.d.ts

@@ -1,15 +1,2 @@
-import type { AdminTheme } from './types.js';
-export declare const adminThemeColorKeys: readonly ["primary", "primaryInk", "bg", "surface", "text", "muted", "border", "danger", "success", "warning"];
-type Validation = {
-    readonly valid: true;
-    readonly theme: AdminTheme;
-} | {
-    readonly valid: false;
-    readonly errors: readonly string[];
-};
-/** Validate serializable theme data before any DOM or font-loading effect. */
-export declare function validateAdminTheme({ theme }: {
-    readonly theme: unknown;
-}): Validation;
-export {};
+export * from '../core/theme/validation.js';
 //# sourceMappingURL=validation.d.ts.map

package/dist/theme/validation.js

@@ -1,55 +1,3 @@
-export const adminThemeColorKeys = ['primary', 'primaryInk', 'bg', 'surface', 'text', 'muted', 'border', 'danger', 'success', 'warning'];
-const record = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
-const safeValue = (value) => typeof value === 'string' && value.trim().length > 0
-    && value.length <= 512 && !/[;{}\x00-\x1f<>\\]/.test(value) && !/url\s*\(|\/\*|\*\//i.test(value);
-// Concrete palette values, deliberately excluding dependent var()/url() expressions.
-const component = '(?:[+-]?(?:\\d+(?:\\.\\d+)?|\\.\\d+)(?:%|deg|rad|grad|turn)?|none)';
-const components = new RegExp(`^(?:rgb|rgba|hsl|hsla|oklch|oklab|lab|lch)\\(\\s*${component}(?:\\s*,\\s*|\\s+)${component}(?:\\s*,\\s*|\\s+)${component}(?:(?:\\s*[,/]\\s*)${component})?\\s*\\)$`, 'i');
-const colorValue = (value) => safeValue(value)
-    && (/^#[\da-f]{3}(?:[\da-f]{1}|[\da-f]{3}|[\da-f]{5})?$/i.test(value)
-        || components.test(value)
-        || /^(?:transparent|black|white|red|green|blue|gray|grey)$/i.test(value));
-/** Validate serializable theme data before any DOM or font-loading effect. */
-export function validateAdminTheme({ theme }) {
-    const errors = [];
-    if (!record(theme))
-        return { valid: false, errors: ['Theme must be an object'] };
-    if (!safeValue(theme.name))
-        errors.push('name must be a nonempty safe string');
-    const fonts = theme.fonts;
-    if (!record(fonts) || !safeValue(fonts.body) || !safeValue(fonts.heading) || (fonts.mono !== undefined && !safeValue(fonts.mono))) {
-        errors.push('fonts must provide body and heading font stacks');
-    }
-    if (record(fonts) && fonts.load !== undefined) {
-        if (!Array.isArray(fonts.load) || fonts.load.length > 16 || !fonts.load.every((url) => {
-            if (typeof url !== 'string' || url.length > 4096 || /[\x00-\x20<>]/.test(url))
-                return false;
-            try {
-                return new URL(url, 'https://font-base.invalid').protocol === 'https:';
-            }
-            catch {
-                return false;
-            }
-        }))
-            errors.push('fonts.load must contain relative or HTTPS stylesheet URLs');
-    }
-    for (const scheme of ['light', 'dark']) {
-        const colors = theme[scheme];
-        if (!record(colors)) {
-            errors.push(`${scheme} must be a complete palette`);
-            continue;
-        }
-        for (const key of adminThemeColorKeys)
-            if (!Object.hasOwn(colors, key) || !colorValue(colors[key]))
-                errors.push(`${scheme}.${key} must be a concrete CSS color`);
-        for (const key of Object.keys(colors))
-            if (!adminThemeColorKeys.includes(key))
-                errors.push(`${scheme}.${key} is not a theme color`);
-    }
-    if (theme.radius !== undefined && (typeof theme.radius !== 'string' || !/^(?:0|\d+(?:\.\d+)?(?:px|rem|em))$/.test(theme.radius)))
-        errors.push('radius must be a nonnegative CSS length');
-    if (theme.density !== undefined && (typeof theme.density !== 'number' || !Number.isFinite(theme.density) || theme.density < 0.5 || theme.density > 2))
-        errors.push('density must be between 0.5 and 2');
-    return errors.length ? { valid: false, errors } : { valid: true, theme: theme };
-}
+// Compatibility path; the shared implementation lives in core.
+export * from '../core/theme/validation.js';
 //# sourceMappingURL=validation.js.map

package/dist/utils/endpoint-policy.d.ts

@@ -2,37 +2,25 @@
  * One place that decides whether an operator-supplied endpoint URL is
  * acceptable, shared by every tab that takes one.
  *
- * ## Why this is a copy rather than an import
- *
- * `@jini-ai/agent-runtime`'s `providers/connection-guard.ts` already implements
- * this policy, and it stays the richer implementation: it adds
- * `validateBaseUrlResolved`, which resolves DNS and re-checks every address the
- * host would actually connect to, catching `internal.example.com -> 10.0.0.5`
- * that no string inspection can. That function needs `node:dns`, and this file
- * has ZERO imports of its own precisely so it can run in a browser bundle
- * — the same reasoning `features/execution/types.ts` gives for mirroring that
- * package's shapes instead of depending on it. Importing it here would pull a
- * Node-only module into every host that renders a settings dialog.
- *
- * So the split is deliberate and layered, not accidental duplication:
- *
- * - **Here (sync, browser-safe):** scheme allow-list plus a literal-hostname
- *   block-list. Runs in render logic, on every keystroke, in any runtime.
- * - **`connection-guard.ts` (async, Node):** the same check plus DNS
- *   resolution, run where a connection is actually attempted.
- *
- * The predicates below are ported from that file's synchronous half verbatim
- * in behavior. **If one side's block-list changes, change the other.** A gap
- * between them is a request the UI accepted and the runtime then refused, or
- * worse, the reverse.
- *
- * That instruction is now enforced rather than merely written down:
- * `__tests__/utils/endpoint-policy.parity.test.ts` runs both implementations
- * over the cross-product of address forms and whitespace padding and fails on
- * any disagreement. It exists because the sentence above was not enough — the
- * two drifted on Unicode whitespace (this side trimmed, the other did not), and
- * a hand-written 46-URL audit corpus rated them identical because it happened
- * not to contain a padded case. A corpus only proves the axis it samples.
+ * ## Why the literal policy uses a browser-safe platform leaf
+ *
+ * `@jini-ai/platform/net/endpoint-policy` owns hostname normalization and
+ * classification for both this UI and the runtime's connection guard. Importing
+ * the Node `platform/net` barrel would bring `node:net` into browser settings
+ * dialogs, so this entry has no Node effects or dependencies.
+ *
+ * The split remains deliberate and layered:
+ * - Here (sync, browser-safe): scheme allow-list plus the shared literal-host
+ *   block-list, run on every keystroke.
+ * - `connection-guard.ts` (async, Node): the same hostname policy plus DNS
+ *   resolution, re-checking every address the host actually connects to. That
+ *   catches `internal.example.com -> 10.0.0.5`, which string inspection cannot.
+ *
+ * `__tests__/utils/endpoint-policy.parity.test.ts` still checks the URL wrappers
+ * across address forms and whitespace padding. They previously drifted on
+ * Unicode whitespace (this side trimmed, the other did not), and a hand-written
+ * 46-URL audit corpus missed the padded case. A corpus only proves the axis it
+ * samples, so URL parsing and trimming remain independently characterized.
  *
  * ## What this is for
  *
@@ -46,14 +34,8 @@
  * Loopback is allowed on purpose — local model servers (Ollama and friends)
  * are a first-class configuration, not an attack.
  */
-/** True for `localhost`, `::1`, `127.0.0.0/8`, and their IPv4-mapped-IPv6 forms. Allowed — local model servers live here. */
-export declare function isLoopbackEndpointHost({ hostname }: {
-    hostname: string;
-}): boolean;
-/** True for RFC1918/link-local/CGNAT/multicast/unspecified/unique-local-IPv6 literals — private space a credentialed request must not be steered into. */
-export declare function isBlockedEndpointHost({ hostname }: {
-    hostname: string;
-}): boolean;
+import { isLoopbackApiHost as isLoopbackEndpointHost, isBlockedExternalApiHostname as isBlockedEndpointHost } from '@jini-ai/platform/net/endpoint-policy';
+export { isLoopbackEndpointHost, isBlockedEndpointHost };
 /**
  * Whether `raw` is an endpoint this UI will accept: an absolute `http(s)` URL
  * whose literal hostname is not private address space.

package/dist/utils/endpoint-policy.js

@@ -2,37 +2,25 @@
  * One place that decides whether an operator-supplied endpoint URL is
  * acceptable, shared by every tab that takes one.
  *
- * ## Why this is a copy rather than an import
+ * ## Why the literal policy uses a browser-safe platform leaf
  *
- * `@jini-ai/agent-runtime`'s `providers/connection-guard.ts` already implements
- * this policy, and it stays the richer implementation: it adds
- * `validateBaseUrlResolved`, which resolves DNS and re-checks every address the
- * host would actually connect to, catching `internal.example.com -> 10.0.0.5`
- * that no string inspection can. That function needs `node:dns`, and this file
- * has ZERO imports of its own precisely so it can run in a browser bundle
- * — the same reasoning `features/execution/types.ts` gives for mirroring that
- * package's shapes instead of depending on it. Importing it here would pull a
- * Node-only module into every host that renders a settings dialog.
+ * `@jini-ai/platform/net/endpoint-policy` owns hostname normalization and
+ * classification for both this UI and the runtime's connection guard. Importing
+ * the Node `platform/net` barrel would bring `node:net` into browser settings
+ * dialogs, so this entry has no Node effects or dependencies.
  *
- * So the split is deliberate and layered, not accidental duplication:
+ * The split remains deliberate and layered:
+ * - Here (sync, browser-safe): scheme allow-list plus the shared literal-host
+ *   block-list, run on every keystroke.
+ * - `connection-guard.ts` (async, Node): the same hostname policy plus DNS
+ *   resolution, re-checking every address the host actually connects to. That
+ *   catches `internal.example.com -> 10.0.0.5`, which string inspection cannot.
  *
- * - **Here (sync, browser-safe):** scheme allow-list plus a literal-hostname
- *   block-list. Runs in render logic, on every keystroke, in any runtime.
- * - **`connection-guard.ts` (async, Node):** the same check plus DNS
- *   resolution, run where a connection is actually attempted.
- *
- * The predicates below are ported from that file's synchronous half verbatim
- * in behavior. **If one side's block-list changes, change the other.** A gap
- * between them is a request the UI accepted and the runtime then refused, or
- * worse, the reverse.
- *
- * That instruction is now enforced rather than merely written down:
- * `__tests__/utils/endpoint-policy.parity.test.ts` runs both implementations
- * over the cross-product of address forms and whitespace padding and fails on
- * any disagreement. It exists because the sentence above was not enough — the
- * two drifted on Unicode whitespace (this side trimmed, the other did not), and
- * a hand-written 46-URL audit corpus rated them identical because it happened
- * not to contain a padded case. A corpus only proves the axis it samples.
+ * `__tests__/utils/endpoint-policy.parity.test.ts` still checks the URL wrappers
+ * across address forms and whitespace padding. They previously drifted on
+ * Unicode whitespace (this side trimmed, the other did not), and a hand-written
+ * 46-URL audit corpus missed the padded case. A corpus only proves the axis it
+ * samples, so URL parsing and trimming remain independently characterized.
  *
  * ## What this is for
  *
@@ -46,85 +34,9 @@
  * Loopback is allowed on purpose — local model servers (Ollama and friends)
  * are a first-class configuration, not an attack.
  */
-/** Strips one RFC 1034 trailing dot (`localhost.` resolves as `localhost`) and IPv6 brackets, then lowercases. */
-function normalizeHost(hostname) {
-    const stripped = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;
-    return stripped.toLowerCase().replace(/\.+$/, '');
-}
-function parseIpv4(hostname) {
-    const parts = hostname.split('.');
-    if (parts.length !== 4)
-        return null;
-    const parsed = parts.map((part) => {
-        if (!/^\d{1,3}$/.test(part))
-            return null;
-        const value = Number(part);
-        return value >= 0 && value <= 255 ? value : null;
-    });
-    if (parsed.some((part) => part === null))
-        return null;
-    return parsed;
-}
-function isLoopbackIpv4(hostname) {
-    const parts = parseIpv4(hostname);
-    return Boolean(parts && parts[0] === 127);
-}
-function isBlockedIpv4(hostname) {
-    const parts = parseIpv4(hostname);
-    if (!parts)
-        return false;
-    const [a, b] = parts;
-    return (a === 0 ||
-        (a === 100 && b >= 64 && b <= 127) ||
-        (a === 169 && b === 254) ||
-        a === 10 ||
-        (a === 192 && b === 168) ||
-        (a === 172 && b >= 16 && b <= 31) ||
-        a >= 224);
-}
-/** `::ffff:10.0.0.1` and `::ffff:a00:1` both denote the same IPv4 address; returns it dotted so the v4 rules apply. */
-function ipv4MappedToDotted(hostname) {
-    const host = normalizeHost(hostname);
-    const mapped = /^::ffff:(.+)$/i.exec(host)?.[1];
-    if (!mapped)
-        return null;
-    if (parseIpv4(mapped.toLowerCase()))
-        return mapped.toLowerCase();
-    const hexParts = mapped.split(':');
-    if (hexParts.length !== 2 || !hexParts.every((part) => /^[0-9a-f]{1,4}$/i.test(part))) {
-        return null;
-    }
-    // Non-null assertions, not a runtime guard: the length/regex checks above
-    // already guarantee exactly two non-empty hex segments here.
-    const hi = hexParts[0];
-    const lo = hexParts[1];
-    const value = (Number.parseInt(hi, 16) << 16) | Number.parseInt(lo, 16);
-    return [(value >>> 24) & 255, (value >>> 16) & 255, (value >>> 8) & 255, value & 255].join('.');
-}
-/** True for `localhost`, `::1`, `127.0.0.0/8`, and their IPv4-mapped-IPv6 forms. Allowed — local model servers live here. */
-export function isLoopbackEndpointHost({ hostname }) {
-    const host = normalizeHost(hostname);
-    if (host === 'localhost' || host === '::1')
-        return true;
-    if (isLoopbackIpv4(host))
-        return true;
-    const mapped = ipv4MappedToDotted(host);
-    return Boolean(mapped && isLoopbackIpv4(mapped));
-}
-/** True for RFC1918/link-local/CGNAT/multicast/unspecified/unique-local-IPv6 literals — private space a credentialed request must not be steered into. */
-export function isBlockedEndpointHost({ hostname }) {
-    const host = normalizeHost(hostname);
-    if (host === '::')
-        return true;
-    if (isBlockedIpv4(host))
-        return true;
-    if (/^f[cd][0-9a-f]{2}:/i.test(host))
-        return true;
-    if (/^fe[89ab][0-9a-f]:/i.test(host))
-        return true;
-    const mapped = ipv4MappedToDotted(host);
-    return Boolean(mapped && isBlockedIpv4(mapped));
-}
+import { isLoopbackApiHost as isLoopbackEndpointHost, isBlockedExternalApiHostname as isBlockedEndpointHost, } from '@jini-ai/platform/net/endpoint-policy';
+// Preserve the UI's published names and object signatures as aliases of the owner.
+export { isLoopbackEndpointHost, isBlockedEndpointHost };
 /**
  * Whether `raw` is an endpoint this UI will accept: an absolute `http(s)` URL
  * whose literal hostname is not private address space.

package/dist/utils/file-system-errors.d.ts

@@ -1,8 +1,7 @@
 /**
  * Generic wrapper for surfacing filesystem-read failures (e.g. from a
  * drag-and-drop file/folder read) with a consistent, identifiable error
- * shape. Origin: `utils/fileSystemErrors.ts` — ported verbatim, no OD
- * coupling found (zero imports, zero product-identity strings).
+ * shape.
  */
 export declare const FILE_SYSTEM_READ_ERROR_MESSAGE = "Could not read one or more dropped files or folders. Make sure they still exist and try again.";
 /** Wraps an arbitrary caught error into a named `FileSystemReadError`. */

package/dist/utils/file-system-errors.js

@@ -1,8 +1,7 @@
 /**
  * Generic wrapper for surfacing filesystem-read failures (e.g. from a
  * drag-and-drop file/folder read) with a consistent, identifiable error
- * shape. Origin: `utils/fileSystemErrors.ts` — ported verbatim, no OD
- * coupling found (zero imports, zero product-identity strings).
+ * shape.
  */
 function errorSummary(error) {
     if (error instanceof Error) {

package/dist/utils/ime-composing.d.ts

@@ -9,9 +9,6 @@ import type { KeyboardEvent as ReactKeyboardEvent } from 'react';
  * stale `nativeEvent.isComposing` causes Enter to insert a newline instead
  * of submitting.
  *
- * Origin: `utils/imeComposing.ts` — ported verbatim (no OD coupling; only
- * depends on React's `KeyboardEvent` type).
- *
  * @overallScore 100
  */
 export declare function isImeComposing(event: ReactKeyboardEvent<HTMLInputElement | HTMLTextAreaElement>, composing: boolean): boolean;

package/dist/utils/ime-composing.js

@@ -8,9 +8,6 @@
  * stale `nativeEvent.isComposing` causes Enter to insert a newline instead
  * of submitting.
  *
- * Origin: `utils/imeComposing.ts` — ported verbatim (no OD coupling; only
- * depends on React's `KeyboardEvent` type).
- *
  * @overallScore 100
  */
 export function isImeComposing(event, composing) {

package/dist/utils/platform.d.ts

@@ -1,6 +1,3 @@
-/**
- * Origin: `utils/platform.ts` — ported verbatim, no OD coupling (zero
- * imports, pure `navigator.platform` sniff).
- */
+/** SSR-safe detection of Mac/iOS navigator.platform values. */
 export declare function isMacPlatform(): boolean;
 //# sourceMappingURL=platform.d.ts.map

package/dist/utils/platform.js

@@ -1,7 +1,4 @@
-/**
- * Origin: `utils/platform.ts` — ported verbatim, no OD coupling (zero
- * imports, pure `navigator.platform` sniff).
- */
+/** SSR-safe detection of Mac/iOS navigator.platform values. */
 export function isMacPlatform() {
     return typeof navigator !== 'undefined' && /Mac|iPod|iPhone|iPad/.test(navigator.platform);
 }

package/dist/utils/smooth-scroll-to-top.d.ts

@@ -16,9 +16,7 @@
  * - re-invoking on the same container retargets instead of running two
  *   competing tweens.
  *
- * Origin: `utils/smoothScrollToTop.ts` — ported verbatim (no OD coupling;
- * the bezier solver is local math rather than a motion library dependency,
- * unchanged from the origin's own reasoning for avoiding one in tests).
+ * The bezier solver is local math, avoiding a motion-library dependency in this utility and its tests.
  */
 /**
  * Smoothly (or instantly, per reduced-motion) scrolls `container` to the

package/dist/utils/smooth-scroll-to-top.js

@@ -16,9 +16,7 @@
  * - re-invoking on the same container retargets instead of running two
  *   competing tweens.
  *
- * Origin: `utils/smoothScrollToTop.ts` — ported verbatim (no OD coupling;
- * the bezier solver is local math rather than a motion library dependency,
- * unchanged from the origin's own reasoning for avoiding one in tests).
+ * The bezier solver is local math, avoiding a motion-library dependency in this utility and its tests.
  */
 // cubic-bezier(x1, y1, x2, y2) solver (WebKit UnitBezier shape).
 function unitBezier(x1, y1, x2, y2) {
@@ -42,16 +40,8 @@ function unitBezier(x1, y1, x2, y2) {
             if (Math.abs(err) < 1e-6)
                 break;
             const d = sampleDX(t);
-            // Empirically + analytically unreachable for this file's one and only
-            // curve (`EASE_OUT = unitBezier(0.23, 1, 0.32, 1)` — the sole call
-            // site, with fixed constants, never re-parameterized by any caller):
-            // sampled sampleDX(t) at 1,000,001 evenly-spaced points across the
-            // full domain t∈[0,1] (the only range `smoothScrollToTop` ever feeds
-            // in, since its own `t` is clamped via `Math.min(1, ...)`) and the
-            // minimum observed was ~0.6095 — nowhere near this 1e-6 guard. See
-            // packages/ui/archived provenance ledger's 2026-07-22 dated entry for the full
-            // re-verification record (matches this task's own standard for
-            // documenting provable unreachability instead of forcing a test).
+            // For the sole fixed curve, sampleDX stays at least about 0.6095 over the clamped [0, 1]
+            // domain. This guard cannot fire for current inputs; retain it for a future curve change.
             if (Math.abs(d) < 1e-6)
                 break;
             t -= err / d;

package/dist/utils/timezone.js

@@ -3,11 +3,7 @@
 // "city" label from a timezone id for compact UI display. Framework-free —
 // no React, no DOM beyond the standard `Intl` global.
 //
-// Origin: `detectLocalTimezone`/`listSupportedTimezones`/`tzCityLabel` from
-// the vendored schedule-editor god-component (recon r6 §1.19) — pure
-// `Intl` wrappers with zero product coupling, so they ship as flat utils
-// rather than living inside `features/schedule-picker/` (which imports them
-// from here instead of re-declaring them).
+// Pure Intl utilities live here so schedule-picker and other features share the same rules.
 /** A conservative fallback list used only when the runtime doesn't support
  *  `Intl.supportedValuesOf('timeZone')` (e.g. older JS engines). */
 const FALLBACK_TIMEZONES = [

package/dist/utils/uuid.d.ts

@@ -21,9 +21,6 @@
  *      single local session, so cryptographic uniqueness isn't required —
  *      just enough entropy to avoid collisions in normal use.
  *
- * Origin: `utils/uuid.ts` — ported verbatim; only the doc comment's
- * product-identity reference was reworded generically.
- *
  * @overallScore 100
  */
 export declare function randomUUID(): string;

package/dist/utils/uuid.js

@@ -21,9 +21,6 @@
  *      single local session, so cryptographic uniqueness isn't required —
  *      just enough entropy to avoid collisions in normal use.
  *
- * Origin: `utils/uuid.ts` — ported verbatim; only the doc comment's
- * product-identity reference was reworded generically.
- *
  * @overallScore 100
  */
 export function randomUUID() {

package/dist/utils/visual-stability.d.ts

@@ -3,9 +3,7 @@
  * generic pattern for opting a session into deterministic/reduced-motion
  * rendering for visual-regression testing.
  *
- * Origin: `utils/visualStability.ts`, whose storage key was a
- * product-identity string namespaced to the origin product. Genericized to a
- * caller-configurable key (default `'jini:visual-stability'`).
+ * Hosts can configure the storage key; the default is 'jini:visual-stability'.
  *
  * @overallScore 100
  */

package/dist/utils/visual-stability.js

@@ -3,9 +3,7 @@
  * generic pattern for opting a session into deterministic/reduced-motion
  * rendering for visual-regression testing.
  *
- * Origin: `utils/visualStability.ts`, whose storage key was a
- * product-identity string namespaced to the origin product. Genericized to a
- * caller-configurable key (default `'jini:visual-stability'`).
+ * Hosts can configure the storage key; the default is 'jini:visual-stability'.
  *
  * @overallScore 100
  */