@nadicodeai/ui 0.20.0 → 0.21.0

package/dist/eslint/rules/no-token-category-bypass.js

@@ -0,0 +1,53 @@
+import { createRequire } from "node:module";
+
+import { tokenUtilityVisitors } from "./jsx-class-utility.js";
+
+const require = createRequire(import.meta.url);
+const borderRadius = require("@nadicodeai/design-system/tailwind").theme.extend.borderRadius;
+const radiusNameByValue = new Map(
+  Object.entries(borderRadius).map(([name, value]) => [value, name]),
+);
+const ARBITRARY_RADIUS = /^(rounded(?:-(?:t|r|b|l|s|e|ss|se|ee|es|tl|tr|br|bl))?)-\[(.+)\]$/;
+const CANONICAL_RADIUS_VARIABLE = /^var\(--(?:nc-rounded|radius)-([a-z0-9-]+)\)$/;
+
+function canonicalRadiusReplacement(utility) {
+  const variantBoundary = utility.lastIndexOf(":") + 1;
+  const variants = utility.slice(0, variantBoundary);
+  const unqualified = utility.slice(variantBoundary);
+  const match = ARBITRARY_RADIUS.exec(unqualified);
+  if (!match) return undefined;
+
+  const [, prefix, rawValue] = match;
+  const value = rawValue.trim();
+  const variable = CANONICAL_RADIUS_VARIABLE.exec(value);
+  const token = variable?.[1] ?? radiusNameByValue.get(value);
+  if (!token || !(token in borderRadius)) return undefined;
+
+  return `${variants}${prefix}-${token}`;
+}
+
+export const noTokenCategoryBypass = {
+  meta: {
+    type: "problem",
+    docs: {
+      description:
+        "Disallow arbitrary radius values when the generated design system provides an exact utility",
+    },
+    schema: [],
+    messages: {
+      canonicalTokenUtility:
+        "Replace {{utility}} with the generated design-system utility {{replacement}}.",
+    },
+  },
+  create(context) {
+    return tokenUtilityVisitors(context, (node, utility) => {
+      const replacement = canonicalRadiusReplacement(utility);
+      if (!replacement) return;
+      context.report({
+        node,
+        messageId: "canonicalTokenUtility",
+        data: { replacement, utility },
+      });
+    });
+  },
+};

package/dist/eslint/rules/no-ui-src-import.js

@@ -0,0 +1,10 @@
+import { bannedSourceRootMatcher, createSrcImportRule } from "./src-import-boundary.js";
+
+/** @type {import('eslint').Rule.RuleModule} */
+export const noUiSrcImport = createSrcImportRule({
+  description: "Disallow deep imports from @nadicodeai/ui/src/* in consumer apps",
+  bannedMessage: "Import @nadicodeai/ui through package exports only, not {{value}}.",
+  // The package sits at a repo-root dir literally named `@nadicodeai/ui/`, so
+  // relative paths carry the full `@nadicodeai/ui/src` marker too.
+  isBanned: bannedSourceRootMatcher("@nadicodeai/ui/src"),
+});

package/dist/eslint/rules/no-unpinned-vercel-functions-import.js

@@ -0,0 +1,100 @@
+const PACKAGE_NAME = "@vercel/functions";
+
+// Third-party helpers stay behind owned, single-purpose capability seams. Pin
+// the full workspace-relative suffix so a same-named file in another workspace
+// cannot acquire a platform dependency by shadowing an allowed module.
+const ALLOWED_IMPORTS = new Map([
+  ["portal/src/lib/server/db.ts", new Set(["attachDatabasePool"])],
+  ["portal/src/lib/server/deferred-work.ts", new Set(["waitUntil"])],
+]);
+
+function matchesPackage(value) {
+  return (
+    typeof value === "string" && (value === PACKAGE_NAME || value.startsWith(`${PACKAGE_NAME}/`))
+  );
+}
+
+function allowedSymbolsFor(filename) {
+  const normalized = filename.replaceAll("\\", "/");
+  for (const [suffix, symbols] of ALLOWED_IMPORTS) {
+    if (normalized.endsWith(suffix)) {
+      return symbols;
+    }
+  }
+  return undefined;
+}
+
+function importedName(specifier) {
+  if (specifier.type !== "ImportSpecifier") {
+    return undefined;
+  }
+  return specifier.imported.type === "Identifier"
+    ? specifier.imported.name
+    : specifier.imported.value;
+}
+
+/** @type {import('eslint').Rule.RuleModule} */
+export const noUnpinnedVercelFunctionsImport = {
+  meta: {
+    type: "problem",
+    docs: {
+      description: "Confine @vercel/functions imports to pinned edge modules and symbols",
+    },
+    messages: {
+      banned:
+        "@vercel/functions duck-types its inputs and ipAddress() crashed production once (docs/solutions/portal-device-authorize-vercel-headers-crash.md). Its use is pinned per module and per symbol; amend the allowlist deliberately or keep the dependency out (found {{value}}).",
+    },
+    schema: [],
+  },
+  create(context) {
+    const allowedSymbols = allowedSymbolsFor(context.filename);
+
+    function report(node, value) {
+      context.report({
+        node,
+        messageId: "banned",
+        data: { value },
+      });
+    }
+
+    return {
+      ImportDeclaration(node) {
+        if (!matchesPackage(node.source.value)) {
+          return;
+        }
+
+        const importsOnlyPinnedSymbols =
+          allowedSymbols &&
+          node.specifiers.length > 0 &&
+          node.specifiers.every((specifier) => {
+            const name = importedName(specifier);
+            return name !== undefined && allowedSymbols.has(name);
+          });
+
+        if (!importsOnlyPinnedSymbols) {
+          report(node, node.source.value);
+        }
+      },
+      // Everything except a static import is judged by the quoted reference
+      // itself, whatever expression carries it: dynamic import(), require in
+      // any callee shape (bare, module.require, createRequire), export ...
+      // from, or a bare string that smuggles the specifier to a loader. Only
+      // static named imports can prove which symbols they bind, so only they
+      // get the allowlist path above.
+      Literal(node) {
+        if (!matchesPackage(node.value)) {
+          return;
+        }
+        if (node.parent.type === "ImportDeclaration") {
+          return;
+        }
+        report(node, node.value);
+      },
+      TemplateLiteral(node) {
+        if (node.expressions.length === 0 && matchesPackage(node.quasis[0]?.value.cooked)) {
+          report(node, node.quasis[0].value.cooked);
+        }
+      },
+    };
+  },
+};

package/dist/eslint/rules/src-import-boundary.js

@@ -0,0 +1,207 @@
+/**
+ * Shared machinery for the source-import boundary rules
+ * (`no-ui-src-import`, `no-design-system-src-import`). Both resolve a module
+ * specifier — static string, template/concatenation, const-propagated
+ * identifier, TS type assertion — and report when a banned package source
+ * path appears in it, across static imports, dynamic `import()`,
+ * `require()`/`module.require()`, and TypeScript `import type`/`import =`.
+ * Factoring it here keeps the two rules from drifting apart.
+ */
+
+/**
+ * Match a banned source root anywhere in the specifier, at a path boundary:
+ * the root followed by `/` (a deep import) or at the end of the string (the
+ * root itself). Substring-anywhere so relative paths (`../../@scope/pkg/src/x`),
+ * node_modules paths, and loader-prefixed specifiers (`!!raw-loader!…/src/x`)
+ * are all caught.
+ * @param {string} root
+ * @returns {(value: string) => boolean}
+ */
+export function bannedSourceRootMatcher(root) {
+  return (value) => {
+    const index = value.indexOf(root);
+    if (index === -1) {
+      return false;
+    }
+    const nextChar = value[index + root.length];
+    return nextChar === undefined || nextChar === "/";
+  };
+}
+
+/**
+ * @param {object} options
+ * @param {string} options.description
+ * @param {string} options.bannedMessage
+ * @param {(value: string) => boolean} options.isBanned
+ * @returns {import('eslint').Rule.RuleModule}
+ */
+export function createSrcImportRule({ description, bannedMessage, isBanned }) {
+  return {
+    meta: {
+      type: "problem",
+      docs: { description },
+      messages: { banned: bannedMessage },
+      schema: [],
+    },
+    create(context) {
+      const sourceCode = context.sourceCode;
+
+      function findVariable(node, name) {
+        for (let scope = sourceCode.getScope(node); scope; scope = scope.upper) {
+          const variable = scope.set.get(name);
+          if (variable) {
+            return variable;
+          }
+        }
+        return undefined;
+      }
+
+      function isUnshadowed(node, name) {
+        const variable = findVariable(node, name);
+        return !variable || variable.defs.length === 0;
+      }
+
+      // `const require = createRequire(import.meta.url)` is the only real
+      // require in this all-ESM repo, so it must not be treated as a shadow.
+      function isCreateRequireInit(init) {
+        if (init?.type !== "CallExpression") {
+          return false;
+        }
+        const callee = init.callee;
+        if (callee.type === "Identifier") {
+          return callee.name === "createRequire";
+        }
+        return (
+          callee.type === "MemberExpression" &&
+          !callee.computed &&
+          callee.property.type === "Identifier" &&
+          callee.property.name === "createRequire"
+        );
+      }
+
+      function isRequire(node, name) {
+        const variable = findVariable(node, name);
+        if (!variable || variable.defs.length === 0) {
+          return true;
+        }
+        if (variable.defs.length === 1) {
+          const definition = variable.defs[0];
+          if (
+            definition.type === "Variable" &&
+            definition.parent?.kind === "const" &&
+            definition.node.id?.type === "Identifier" &&
+            isCreateRequireInit(definition.node.init)
+          ) {
+            return true;
+          }
+        }
+        return false;
+      }
+
+      function staticSpecifier(node, seenVariables = new Set()) {
+        if (node?.type === "Literal" && typeof node.value === "string") {
+          return node.value;
+        }
+        if (node?.type === "TemplateLiteral") {
+          let value = node.quasis[0]?.value.cooked ?? "";
+          for (let index = 0; index < node.expressions.length; index += 1) {
+            const expressionValue = staticSpecifier(node.expressions[index], seenVariables);
+            const followingText = node.quasis[index + 1]?.value.cooked;
+            if (expressionValue === undefined || followingText === undefined) {
+              return undefined;
+            }
+            value += expressionValue + followingText;
+          }
+          return value;
+        }
+        if (node?.type === "BinaryExpression" && node.operator === "+") {
+          const left = staticSpecifier(node.left, seenVariables);
+          const right = staticSpecifier(node.right, seenVariables);
+          return left === undefined || right === undefined ? undefined : left + right;
+        }
+        if (node?.type === "Identifier") {
+          const variable = findVariable(node, node.name);
+          const definition = variable?.defs.length === 1 ? variable.defs[0] : undefined;
+          if (
+            !variable ||
+            seenVariables.has(variable) ||
+            definition?.type !== "Variable" ||
+            definition.parent?.kind !== "const" ||
+            definition.node.id?.type !== "Identifier" ||
+            !definition.node.init
+          ) {
+            return undefined;
+          }
+
+          const nextSeenVariables = new Set(seenVariables);
+          nextSeenVariables.add(variable);
+          return staticSpecifier(definition.node.init, nextSeenVariables);
+        }
+        if (
+          node?.type === "TSAsExpression" ||
+          node?.type === "TSSatisfiesExpression" ||
+          node?.type === "TSNonNullExpression"
+        ) {
+          return staticSpecifier(node.expression, seenVariables);
+        }
+        return undefined;
+      }
+
+      function checkValue(node, value) {
+        if (typeof value === "string" && isBanned(value)) {
+          context.report({
+            node,
+            messageId: "banned",
+            data: { value },
+          });
+        }
+      }
+
+      function check(node) {
+        checkValue(node, staticSpecifier(node.source));
+      }
+
+      function memberPropertyName(node) {
+        if (!node.computed && node.property.type === "Identifier") {
+          return node.property.name;
+        }
+        return staticSpecifier(node.property);
+      }
+
+      function checkRequire(node) {
+        const isBareRequire =
+          node.callee.type === "Identifier" &&
+          node.callee.name === "require" &&
+          isRequire(node.callee, "require");
+        const isModuleRequire =
+          node.callee.type === "MemberExpression" &&
+          node.callee.object.type === "Identifier" &&
+          node.callee.object.name === "module" &&
+          isUnshadowed(node.callee.object, "module") &&
+          memberPropertyName(node.callee) === "require";
+
+        if (isBareRequire || isModuleRequire) {
+          checkValue(node, staticSpecifier(node.arguments[0]));
+        }
+      }
+
+      function checkTypeScriptImportEquals(node) {
+        if (node.moduleReference.type === "TSExternalModuleReference") {
+          checkValue(node, staticSpecifier(node.moduleReference.expression));
+        }
+      }
+
+      return {
+        ImportDeclaration: check,
+        ImportExpression: check,
+        CallExpression: checkRequire,
+        // `export { X } from "…/src/…"` and `export * from …` are consumer deep
+        // imports too; a source-less `export {}` has no node.source.
+        ExportNamedDeclaration: check,
+        ExportAllDeclaration: check,
+        TSImportType: check,
+        TSImportEqualsDeclaration: checkTypeScriptImportEquals,
+      };
+    },
+  };
+}

package/dist/index.d.ts

@@ -19,6 +19,7 @@ export * from "./components/benefits-bento";
 export * from "./components/bento";
 export * from "./components/brand";
 export * from "./components/brand-field";
+export * from "./components/brand-icons";
 export * from "./components/breadcrumb";
 export * from "./components/bubble";
 export * from "./components/button";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uCAAuC,CAAC;AACtD,cAAc,0BAA0B,CAAC;AACzC,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kCAAkC,CAAC;AACjD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uCAAuC,CAAC;AACtD,cAAc,0BAA0B,CAAC;AACzC,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oBAAoB,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC"}

package/dist/index.js

@@ -19,6 +19,7 @@ export * from "./components/benefits-bento.js";
 export * from "./components/bento.js";
 export * from "./components/brand.js";
 export * from "./components/brand-field.js";
+export * from "./components/brand-icons.js";
 export * from "./components/breadcrumb.js";
 export * from "./components/bubble.js";
 export * from "./components/button.js";

package/docs/consuming-cross-repo.md

@@ -51,6 +51,29 @@ winner. Import files under `@nadicodeai/design-system/assets/fonts/*` only when
 the consumer wants the faces without the CSS module; that is one of the
 intentional direct-API cases described above.
 
+## Strict ESLint interface
+
+The package exports the same design-system rules used by this repository. Add
+the flat config after the consumer's framework and TypeScript configs:
+
+```js
+import nadicodeai from "@nadicodeai/ui/eslint";
+
+export default [
+  // Framework, parser, and TypeScript configs first.
+  ...nadicodeai.configs["flat/strict"],
+];
+```
+
+Every rule in this config is an error. The config rejects generated `nc-*`
+utilities that do not exist in the installed design-system release, arbitrary
+radius values that exactly duplicate a generated token, source deep imports,
+raw design values, native visible controls, and appearance overrides on shared
+UI primitives. An arbitrary radius remains valid when no generated radius has
+the same value. Consumers may compose domain-specific components from the
+public UI package; the rules govern package boundaries and design values, not
+the shape of a consumer's JSX tree.
+
 ## NadicodeAI logo
 
 React surfaces that need both the mark and readable company name use the

package/docs/contract.md

@@ -26,6 +26,7 @@ Agent work surfaces (chat, composer, tool approval, artifacts, threads, diffs, t
 - **Auth routes are consumer-owned shadcn block work.** Login, signup, OTP, two-factor, magic-link, and provider-button flows start from the selected shadcn block/example in the consuming app, with app-owned Better Auth behavior. Do not ship generic auth, signup, OTP, federated-login, or provider abstractions from this package unless a later explicit boundary decision replaces the selected shadcn block.
 - **Reusable sections and compositions live here after proof.** Bento grids, media mounts, demo surfaces, page frames, section intros, CTA bands, proof slots, benefits grids, generic shells, and homepage/use-case sections belong in `@nadicodeai/ui` when a second concrete consumer, a plan-approved shared component, or a named validation slice proves the package boundary. Website, portal, and sibling Nadia routes pass data and media children into existing compositions instead of rebuilding layout locally.
 - **Brand renderers live here for React consumers.** Logo geometry, asset generation, and usage semantics are owned by [`design-system/DESIGN.md`, "Brand media authority"](../../../design-system/DESIGN.md#brand-media-authority). `BrandLockup` supplies the approved horizontal lockup. `BrandMark` serves tight spaces and `BrandWordmark` serves placements where the name must read by itself. All three render the package's public neutral geometry seam with React-scoped SVG ids, dynamic theme paint, and accessible names. Consuming routes use these adapters; they never import raw logo assets, draw brand SVG inline, mask or recolor assets, or create another lockup rule.
+- **Third-party brand marks are generated, never hand-drawn and never hand-edited.** Other companies' marks live in `@nadicodeai/ui/src/components/brand-icons/`, emitted from an explicit allow-list by `@nadicodeai/ui/scripts/build-brand-icons.mjs` and exported through the `@nadicodeai/ui/components/brand-icons` subpath. They are identity images, not UI icons: a brand mark is exempt from the currentColor stroke system and from the raw-literal rule, it never stands in for a UI icon, and a UI icon never stands in for a brand. Marks drawn as one silhouette are stripped to `currentColor` by the generator; every other mark keeps its official colors verbatim. To add a brand, edit the generator's allow-list and run `npm run generate:brand-icons -w @nadicodeai/ui`; hand edits to the generated directory are lost and `@nadicodeai/ui/tests/guards/brand-icons-codegen.test.ts` fails on them. Use is nominative only — naming a platform, an integration, or a provider — never adjacent to endorsement or partnership wording. The full decision, including the licensing and trademark posture, is [ADR 0042](../../../docs/adr/0042-third-party-brand-marks-are-generated-identity-images.md).
 - **No fake proof APIs.** Components may support future testimonials, logos, stats, and proof slots, but they must render nothing public when the proof is absent. Do not ship placeholder customer names, metrics, or logos.
 
 ## Accessibility Invariant
@@ -43,3 +44,12 @@ Consumers own routing, auth, app data, server actions, runtime adapters, permiss
 App source composes layout, data, behavior, and semantic content around package components. It does not restyle an imported component root: appearance changes enter through the component's typed variant or are added to the owning package component. App `className` values on package components are limited to structural layout and sizing. App source uses semantic roles such as `bg-background` and `text-foreground`; raw Tailwind palette colors and canonical `nc-*` color utilities stay behind package-owned primitives such as `BrandField`. Visible controls come from `@nadicodeai/ui`, while hidden inputs remain valid form transport. The root ESLint rules `nadicodeai/no-shadcn-appearance-override`, `nadicodeai/no-raw-color-utility`, and `nadicodeai/no-native-visible-control` enforce this boundary.
 
 When this package is read from an installed npm package, follow the [consumer setup guide](consuming-cross-repo.md) for setup and public import paths. The styling invariant above remains the authority for component implementation.
+
+The public strict ESLint config enforces only properties that can be decided
+from one source file and the installed generated tokens. It does not infer
+that two JSX trees represent the same product pattern. Repeated patterns stay
+governed by a named owning component, typed variants or slots, and explicit
+package or Portal-kit imports. A new repeated pattern is consolidated at its
+owner and pinned with a focused source or rendering test; generic JSX
+similarity warnings are outside this contract because they cannot distinguish
+valid domain composition from a fork without false positives.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nadicodeai/ui",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "type": "module",
   "publishConfig": {
     "access": "public"
@@ -14,6 +14,7 @@
       "import": "./dist/index.js"
     },
     "./globals.css": "./dist/styles/globals.css",
+    "./eslint": "./dist/eslint/index.js",
     "./ai-elements": {
       "types": "./dist/ai-elements.d.ts",
       "import": "./dist/ai-elements.js"
@@ -53,8 +54,9 @@
   ],
   "scripts": {
     "dev": "node scripts/dev-build.mjs --watch",
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/fix-dist-imports.mjs && node scripts/build-styles.mjs",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/fix-dist-imports.mjs && node scripts/build-styles.mjs && node scripts/build-eslint.mjs",
     "build:fast": "node scripts/dev-build.mjs",
+    "generate:brand-icons": "node scripts/build-brand-icons.mjs",
     "prepack": "npm run build",
     "lint": "eslint --max-warnings=0",
     "typecheck": "tsc --noEmit",
@@ -63,7 +65,7 @@
   },
   "dependencies": {
     "@base-ui/react": "^1.6.0",
-    "@nadicodeai/design-system": "0.20.0",
+    "@nadicodeai/design-system": "0.21.0",
     "@rive-app/react-webgl2": "^4.29.1",
     "@streamdown/cjk": "^1.0.3",
     "@streamdown/code": "^1.1.1",
@@ -102,6 +104,10 @@
     "tailwindcss": "^4.3.1"
   },
   "devDependencies": {
+    "@iconify-json/logos": "^1.2.11",
+    "@iconify/utils": "^3.1.4",
+    "@stryker-mutator/core": "9.6.1",
+    "@stryker-mutator/vitest-runner": "9.6.1",
     "@tailwindcss/postcss": "^4.3.1",
     "@testing-library/react": "^16.3.2",
     "@types/react": "^19",