@once-ui-system/core 1.8.3 → 2.0.0-alpha.0

package/dist/next/index.d.ts

@@ -0,0 +1,35 @@
+import type React from "react";
+import { type OnceUIAdapters } from "../contexts/AdapterProvider";
+import { LayoutProvider as BaseLayoutProvider } from "../contexts/LayoutProvider";
+export declare const nextAdapters: OnceUIAdapters;
+export interface NextAdapterProviderProps {
+    children: React.ReactNode;
+}
+export declare const NextAdapterProvider: React.FC<NextAdapterProviderProps>;
+/**
+ * Drop-in replacement for core's `LayoutProvider`, with the Next adapters
+ * already installed.
+ *
+ * This is the whole migration for a Next.js app on 1.8.x: change the import
+ * path for `LayoutProvider`, and `SmartLink`, `Button`/`Card`/`ToggleButton`
+ * with an `href`, `Media`, `Logo`, `MegaMenu` and `Kbar` keep routing through
+ * next/link and next/image exactly as before. No provider is added to the tree
+ * and no props change.
+ *
+ *     - import { LayoutProvider } from "@once-ui-system/core";
+ *     + import { LayoutProvider } from "@once-ui-system/core/next";
+ *
+ * Detection is deliberately not attempted. The adapters include two hooks whose
+ * implementations call different numbers of hooks — the DOM `useNavigate`
+ * returns a closure, the Next one calls `useRouter` and `useCallback` — so
+ * swapping them after mount breaks the rules of hooks. Resolution has to be
+ * settled before the first render, and a browser bundle has no synchronous way
+ * to conditionally resolve an optional module. An explicit import is the
+ * honest, bundler-independent version of the same thing.
+ *
+ * Apps that already compose `AdapterProvider` themselves can keep using
+ * `NextAdapterProvider` directly; this only removes the boilerplate for the
+ * common case.
+ */
+export declare const LayoutProvider: React.FC<React.ComponentProps<typeof BaseLayoutProvider>>;
+//# sourceMappingURL=index.d.ts.map

package/dist/next/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/next/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AA4BlF,eAAO,MAAM,YAAY,EAAE,cAK1B,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAElE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAOpF,CAAC"}

package/dist/next/index.js

@@ -0,0 +1,56 @@
+"use client";
+import { jsx as _jsx } from "react/jsx-runtime";
+import NextImage from "next/image";
+import NextLink from "next/link";
+import { usePathname, useRouter } from "next/navigation";
+import { forwardRef, useCallback } from "react";
+import { AdapterProvider, } from "../contexts/AdapterProvider";
+import { LayoutProvider as BaseLayoutProvider } from "../contexts/LayoutProvider";
+/**
+ * Next.js adapter bindings — the ONLY runtime `next/*` imports in core
+ * outside modules/seo and server/ (enforced by framework-boundary.test.ts).
+ * Imported via the `@once-ui-system/core/next` subpath, never the root
+ * barrel, so non-Next bundlers never resolve `next/*`. This module becomes
+ * the seed of `@once-ui-system/nextjs` in 2.0 Phase 4.
+ */
+const NextAdapterLink = forwardRef(({ href, children, ...props }, ref) => (_jsx(NextLink, { href: href, ref: ref, ...props, children: children })));
+NextAdapterLink.displayName = "NextAdapterLink";
+const NextAdapterImage = ({ width, height, ...props }) => (_jsx(NextImage, { width: width, height: height, ...props }));
+const useNextNavigate = () => {
+    const router = useRouter();
+    return useCallback((href) => router.push(href), [router]);
+};
+export const nextAdapters = {
+    Link: NextAdapterLink,
+    Image: NextAdapterImage,
+    usePathname,
+    useNavigate: useNextNavigate,
+};
+export const NextAdapterProvider = ({ children }) => (_jsx(AdapterProvider, { adapters: nextAdapters, children: children }));
+/**
+ * Drop-in replacement for core's `LayoutProvider`, with the Next adapters
+ * already installed.
+ *
+ * This is the whole migration for a Next.js app on 1.8.x: change the import
+ * path for `LayoutProvider`, and `SmartLink`, `Button`/`Card`/`ToggleButton`
+ * with an `href`, `Media`, `Logo`, `MegaMenu` and `Kbar` keep routing through
+ * next/link and next/image exactly as before. No provider is added to the tree
+ * and no props change.
+ *
+ *     - import { LayoutProvider } from "@once-ui-system/core";
+ *     + import { LayoutProvider } from "@once-ui-system/core/next";
+ *
+ * Detection is deliberately not attempted. The adapters include two hooks whose
+ * implementations call different numbers of hooks — the DOM `useNavigate`
+ * returns a closure, the Next one calls `useRouter` and `useCallback` — so
+ * swapping them after mount breaks the rules of hooks. Resolution has to be
+ * settled before the first render, and a browser bundle has no synchronous way
+ * to conditionally resolve an optional module. An explicit import is the
+ * honest, bundler-independent version of the same thing.
+ *
+ * Apps that already compose `AdapterProvider` themselves can keep using
+ * `NextAdapterProvider` directly; this only removes the boilerplate for the
+ * common case.
+ */
+export const LayoutProvider = ({ children, ...props }) => (_jsx(NextAdapterProvider, { children: _jsx(BaseLayoutProvider, { ...props, children: children }) }));
+//# sourceMappingURL=index.js.map

package/dist/next/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/next/index.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,SAAS,MAAM,YAAY,CAAC;AACnC,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAChD,OAAO,EAGL,eAAe,GAEhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAElF;;;;;;GAMG;AAEH,MAAM,eAAe,GAAG,UAAU,CAChC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CACrC,KAAC,QAAQ,IAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAM,KAAK,YACtC,QAAQ,GACA,CACZ,CACF,CAAC;AACF,eAAe,CAAC,WAAW,GAAG,iBAAiB,CAAC;AAEhD,MAAM,gBAAgB,GAAgC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,CACrF,KAAC,SAAS,IAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,KAAM,KAAK,GAAI,CACvD,CAAC;AAEF,MAAM,eAAe,GAAG,GAA6B,EAAE;IACrD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,OAAO,WAAW,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,gBAAgB;IACvB,WAAW;IACX,WAAW,EAAE,eAAe;CAC7B,CAAC;AAMF,MAAM,CAAC,MAAM,mBAAmB,GAAuC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CACvF,KAAC,eAAe,IAAC,QAAQ,EAAE,YAAY,YAAG,QAAQ,GAAmB,CACtE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,MAAM,cAAc,GAA8D,CAAC,EACxF,QAAQ,EACR,GAAG,KAAK,EACT,EAAE,EAAE,CAAC,CACJ,KAAC,mBAAmB,cAClB,KAAC,kBAAkB,OAAK,KAAK,YAAG,QAAQ,GAAsB,GAC1C,CACvB,CAAC"}

package/dist/package.json

@@ -1,6 +1,18 @@
 {
   "name": "@once-ui-system/core",
-  "version": "1.8.3",
+  "version": "2.0.0-alpha.0",
+  "publishConfig": {
+    "access": "public",
+    "tag": "alpha"
+  },
+  "files": [
+    "dist",
+    "ai",
+    "agent",
+    "AGENTS.md",
+    "scripts/init-agent.js",
+    "scripts/validate-ai-code.js"
+  ],
   "description": "Once UI for Next.js NPM package",
   "keywords": [
     "once-ui",
@@ -99,6 +111,11 @@
       "import": "./dist/server/index.js",
       "require": "./dist/server/index.js"
     },
+    "./next": {
+      "types": "./dist/next/index.d.ts",
+      "import": "./dist/next/index.js",
+      "require": "./dist/next/index.js"
+    },
     "./ai/manifest.json": "./ai/manifest.json",
     "./ai/spec.json": "./ai/spec.json",
     "./ai/catalog.json": "./ai/catalog.json",
@@ -106,20 +123,33 @@
     "./ai/rules.compact.md": "./ai/rules.compact.md",
     "./ai/rules.md": "./ai/rules.md",
     "./ai/recipes.md": "./ai/recipes.md",
+    "./ai/layouts.md": "./ai/layouts.md",
     "./ai/tasks/*": "./ai/tasks/*",
     "./ai/components/*": "./ai/components/*",
     "./ai/examples/*": "./ai/examples/*",
     "./ai/examples/blocks/*": "./ai/examples/blocks/*",
-    "./AGENTS.md": "./AGENTS.md"
+    "./AGENTS.md": "./AGENTS.md",
+    "./data": {
+      "types": "./dist/modules/data/index.d.ts",
+      "import": "./dist/modules/data/index.js",
+      "require": "./dist/modules/data/index.js"
+    },
+    "./code": {
+      "types": "./dist/modules/code/index.d.ts",
+      "import": "./dist/modules/code/index.js",
+      "require": "./dist/modules/code/index.js"
+    },
+    "./media": {
+      "types": "./dist/modules/media/index.d.ts",
+      "import": "./dist/modules/media/index.js",
+      "require": "./dist/modules/media/index.js"
+    },
+    "./package.json": "./package.json"
   },
   "dependencies": {
     "@floating-ui/react-dom": "^2.1.9",
     "clsx": "^2.1.1",
-    "compressorjs": "^1.3.0",
-    "date-fns": "^4.4.0",
-    "prismjs": "^1.30.0",
-    "react-icons": "^5.7.0",
-    "recharts": "^3.10.1"
+    "date-fns": "^4.4.0"
   },
   "peerDependencies": {
     "react": ">=18.0.0",
@@ -127,8 +157,23 @@
     "next": ">=13.0.0"
   },
   "peerDependenciesMeta": {
+    "next": {
+      "optional": true
+    },
+    "sass": {
+      "optional": true
+    },
     "sharp": {
       "optional": true
+    },
+    "recharts": {
+      "optional": true
+    },
+    "prismjs": {
+      "optional": true
+    },
+    "compressorjs": {
+      "optional": true
     }
   }
 }

package/dist/scripts/init-agent.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+/**
+ * Scaffold agent harness pointers in a consumer project.
+ * Usage: npx once-ui-init-agent [--force] [--dry-run]
+ */
+
+const fs = require("fs");
+const path = require("path");
+
+const PACKAGE_ROOT = path.join(__dirname, "..");
+const MARKER_START = "<!-- once-ui-agent-harness:start -->";
+const MARKER_END = "<!-- once-ui-agent-harness:end -->";
+
+const PROJECT_AGENTS_SECTION = `${MARKER_START}
+## Once UI codegen harness
+
+Before generating Once UI code, load the harness from your installed package (not full doc pages):
+
+1. Read \`node_modules/@once-ui-system/core/ai/manifest.json\`
+2. Load bootstrap: \`ai/rules.compact.md\` + \`ai/catalog.json\`
+3. Match intent via \`ai/tasks/index.json\` → fetch task bundle + component slices
+4. Validate: \`npx once-ui-validate-ai-code path/to/file.tsx\`
+
+npm exports: \`@once-ui-system/core/ai/manifest.json\`
+
+Remote fallback: https://docs.once-ui.com/ai/manifest.json
+${MARKER_END}
+`;
+
+function parseArgs(argv) {
+  return {
+    force: argv.includes("--force"),
+    dryRun: argv.includes("--dry-run"),
+  };
+}
+
+function findProjectRoot(startDir = process.cwd()) {
+  let dir = path.resolve(startDir);
+
+  while (true) {
+    const pkgPath = path.join(dir, "package.json");
+    if (fs.existsSync(pkgPath)) {
+      try {
+        const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+        if (pkg.name !== "@once-ui-system/core") {
+          return dir;
+        }
+      } catch {
+        // keep walking
+      }
+    }
+
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+
+  return path.resolve(startDir);
+}
+
+function upsertMarkedSection(existing, section, force) {
+  if (existing.includes(MARKER_START) && existing.includes(MARKER_END)) {
+    if (!force) {
+      return { content: existing, changed: false, reason: "AGENTS.md already contains Once UI harness section" };
+    }
+
+    const start = existing.indexOf(MARKER_START);
+    const end = existing.indexOf(MARKER_END) + MARKER_END.length;
+    return {
+      content: `${existing.slice(0, start)}${section}${existing.slice(end)}`,
+      changed: true,
+    };
+  }
+
+  if (existing.trim().length === 0) {
+    return {
+      content: `# AGENTS.md\n\n${section}\n`,
+      changed: true,
+    };
+  }
+
+  return {
+    content: `${existing.trimEnd()}\n\n${section}\n`,
+    changed: true,
+  };
+}
+
+function writeFile(root, relativePath, content, { dryRun, force }) {
+  const target = path.join(root, relativePath);
+  const exists = fs.existsSync(target);
+
+  if (exists && !force) {
+    const current = fs.readFileSync(target, "utf8");
+    if (current === content) {
+      return { path: target, status: "unchanged" };
+    }
+    return { path: target, status: "skipped", reason: "already exists (use --force)" };
+  }
+
+  if (dryRun) {
+    return { path: target, status: "would-write" };
+  }
+
+  fs.mkdirSync(path.dirname(target), { recursive: true });
+  fs.writeFileSync(target, content, "utf8");
+  return { path: target, status: exists ? "updated" : "created" };
+}
+
+function main() {
+  const options = parseArgs(process.argv.slice(2));
+  const projectRoot = findProjectRoot();
+  const cursorRuleTemplate = fs.readFileSync(
+    path.join(PACKAGE_ROOT, "agent", "once-ui-codegen.mdc"),
+    "utf8",
+  );
+
+  const agentsPath = path.join(projectRoot, "AGENTS.md");
+  let agentsContent = "";
+  if (fs.existsSync(agentsPath)) {
+    agentsContent = fs.readFileSync(agentsPath, "utf8");
+  }
+
+  const agentsResult = upsertMarkedSection(agentsContent, PROJECT_AGENTS_SECTION, options.force);
+  const results = [];
+
+  if (agentsResult.changed) {
+    results.push(
+      writeFile(projectRoot, "AGENTS.md", agentsResult.content, options),
+    );
+  } else {
+    results.push({
+      path: agentsPath,
+      status: "unchanged",
+      reason: agentsResult.reason,
+    });
+  }
+
+  results.push(
+    writeFile(projectRoot, ".cursor/rules/once-ui-codegen.mdc", cursorRuleTemplate, options),
+  );
+
+  console.log(`Once UI agent harness setup (${options.dryRun ? "dry run" : "applied"})`);
+  console.log(`Project root: ${projectRoot}`);
+  for (const result of results) {
+    const suffix = result.reason ? ` (${result.reason})` : "";
+    console.log(`- ${result.status}: ${path.relative(projectRoot, result.path)}${suffix}`);
+  }
+
+  if (!options.dryRun) {
+    console.log("\nNext: open a .tsx file and ask your agent to build Once UI — it should load the harness from node_modules/@once-ui-system/core/ai/");
+  }
+}
+
+main();

package/dist/scripts/validate-ai-code.js

@@ -0,0 +1,213 @@
+#!/usr/bin/env node
+/**
+ * Mechanical Once UI codegen validator.
+ * Usage: node scripts/validate-ai-code.js <file.tsx> [--fix]
+ *        node scripts/validate-ai-code.js --stdin < file.tsx
+ */
+
+const fs = require("fs");
+const path = require("path");
+
+const ROOT = path.join(__dirname, "..");
+const SPEC_PATH = path.join(ROOT, "ai", "spec.json");
+
+function loadSpec() {
+  if (!fs.existsSync(SPEC_PATH)) return { components: {}, tokens: {} };
+  return JSON.parse(fs.readFileSync(SPEC_PATH, "utf8"));
+}
+
+function parseIconNames(spec) {
+  const raw = spec.tokens?.IconName || "";
+  const matches = raw.match(/"([^"]+)"/g) || [];
+  return new Set(matches.map((m) => m.slice(1, -1)));
+}
+
+function readInput(argv) {
+  const fileArg = argv.find((a) => !a.startsWith("-"));
+  if (argv.includes("--stdin")) {
+    return { source: fs.readFileSync(0, "utf8"), file: "<stdin>" };
+  }
+  if (!fileArg) {
+    console.error("Usage: validate-ai-code.js <file.tsx> [--fix] | --stdin");
+    process.exit(2);
+  }
+  return { source: fs.readFileSync(fileArg, "utf8"), file: fileArg };
+}
+
+/**
+ * A literal colour in a styling position.
+ *
+ * The rule used to be a bare `#[0-9a-fA-F]{3,8}` over the whole file, which
+ * flagged two things that are not colours at all: any string that happens to
+ * look like hex (an order id `"#1024"` is a valid #RGBA literal), and the
+ * `fill` / `stroke` of an inline `<svg>`, where a raw value is the only thing
+ * that works — which is why 2.0 types those props `ColorValue` rather than
+ * `Colors`. So it looks at where the value sits, not only at its shape.
+ */
+function hasLiteralColor(source) {
+  const LITERAL = /#[0-9a-fA-F]{3,8}\b|rgba?\s*\(/;
+  const SVG_PAINT =
+    /^(?:fill|stroke|stopColor|stop-color|floodColor|flood-color|lightingColor|lighting-color)$/;
+
+  for (const block of source.match(/style=\{\{[\s\S]*?\}\}/g) || []) {
+    if (LITERAL.test(block)) return true;
+  }
+
+  for (const [, name, value] of source.matchAll(/([A-Za-z-]+)=\{?["']([^"']*)["']/g)) {
+    if (SVG_PAINT.test(name)) continue;
+    if (!/colou?r|background|border|shadow|gradient/i.test(name)) continue;
+    if (LITERAL.test(value)) return true;
+  }
+  return false;
+}
+
+/**
+ * Is `index` inside the braces of a `<prop>={ ... }` value?
+ *
+ * Counts braces forward from each occurrence of the prop, which is enough for
+ * JSX: a `{` inside a string would have to be unbalanced to fool it, and the
+ * answer is only used to suppress a warning.
+ */
+function insidePropValue(source, index, prop) {
+  for (const m of source.matchAll(new RegExp(`\\b${prop}=\\{`, "g"))) {
+    if (m.index > index) return false;
+    let depth = 1;
+    let i = m.index + m[0].length;
+    for (; i < source.length && depth > 0; i++) {
+      if (source[i] === "{") depth++;
+      else if (source[i] === "}") depth--;
+    }
+    if (index > m.index && index < i) return true;
+  }
+  return false;
+}
+
+function validate(source, spec, iconNames) {
+  const issues = [];
+
+  const add = (rule, message, fix) => issues.push({ rule, message, fix });
+
+  if (/fillWidth[\s\S]{0,80}fillHeight|<Flex[^>]*direction="column"|<Flex[^>]*direction="row"/.test(source)) {
+    if (/fillWidth[\s\S]{0,120}fillHeight/.test(source)) {
+      add("layout.shorthands", "Use fill instead of fillWidth + fillHeight", "fill");
+    }
+    if (/<Flex[^>]*direction="column"/.test(source)) {
+      add("layout.shorthands", "Use Column instead of Flex direction=\"column\"", "Column");
+    }
+    if (/<Flex[^>]*direction="row"/.test(source)) {
+      add("layout.shorthands", "Use Row instead of Flex direction=\"row\"", "Row");
+    }
+  }
+
+  if (/horizontal="center"[\s\S]{0,80}vertical="center"/.test(source)) {
+    add("layout.shorthands", "Use center instead of horizontal=\"center\" vertical=\"center\"", "center");
+  }
+
+  if (/position="relative"/.test(source)) {
+    add("layout.defaults", "position=\"relative\" is the default — omit it");
+  }
+
+  if (/<Button[^>]*variant="primary"/.test(source)) {
+    add("layout.defaults", "variant=\"primary\" is the Button default — omit it");
+  }
+
+  // Scoped to the tag: `lines` is a different prop on Background and CodeBlock.
+  if (/<Textarea[^>]*\blines=\{?["']auto["']/.test(source)) {
+    add("layout.defaults", "lines=\"auto\" is the Textarea default — omit it");
+  }
+
+  if (hasLiteralColor(source)) {
+    add("color.tokens", "Use semantic color tokens, not hex/rgb");
+  }
+
+  if (/<img[\s>/]|<a[\s>/]|<button[\s>/]/.test(source)) {
+    add("components.primitives", "Use Once UI components (Media, SmartLink, Button) instead of raw HTML");
+  }
+
+  for (const match of source.matchAll(/<Card\b[^>]*>/g)) {
+    if (/\b(href|onClick)=/.test(match[0])) continue;
+    // A card handed to a `trigger` prop is operated by whatever owns it
+    // (DropdownWrapper, Dialog), so it carries no handler of its own and is
+    // not the static-panel misuse this rule is looking for.
+    if (insidePropValue(source, match.index, "trigger")) continue;
+    add("Card.interactive", "Card without href/onClick — use Column + surface recipe for static panels");
+    break;
+  }
+
+  const iconPropRe = /(?:prefixIcon|suffixIcon|name)=["']([^"']+)["']/g;
+  let iconMatch;
+  while ((iconMatch = iconPropRe.exec(source)) !== null) {
+    const name = iconMatch[1];
+    if (iconNames.size && !iconNames.has(name)) {
+      add("Icon.names", `Unknown icon name "${name}" — use IconName from spec.json`);
+    }
+  }
+
+  if (
+    /\b(?:delay|speed)=\{[^}]*\*\s*0?\.\d+/.test(source) ||
+    /\b(?:delay|speed)=\{\s*0?\.\d+\s*\}/.test(source)
+  ) {
+    add(
+      "RevealFx.delay",
+      "RevealFx delay and ShineFx speed are milliseconds — use index * 100, not index * 0.1",
+    );
+  }
+
+  if (/<Fade[^>]*>[\s\S]*<(Column|Row)[^>]*overflowY/.test(source)) {
+    add("Fade.edge", "Fade wrapping scroll content — use as absolute edge strip instead");
+  }
+
+  if (/style=\{\{[^}]*(gap|padding|margin|color|background):/.test(source)) {
+    add("spacing.tokens", "Use token props (gap, padding, background) instead of style={{}}");
+  }
+
+  return issues;
+}
+
+function applyFixes(source, issues) {
+  let out = source;
+  for (const issue of issues) {
+    if (issue.fix === "fill") {
+      out = out.replace(/\bfillWidth\b\s*\n?\s*\bfillHeight\b/g, "fill");
+    }
+    if (issue.fix === "center") {
+      out = out.replace(/\bhorizontal="center"\s*\n?\s*vertical="center"/g, "center");
+    }
+  }
+  return out;
+}
+
+function main() {
+  const spec = loadSpec();
+  const iconNames = parseIconNames(spec);
+  const fix = process.argv.includes("--fix");
+  const { source, file } = readInput(process.argv.slice(2));
+
+  const issues = validate(source, spec, iconNames);
+
+  if (issues.length === 0) {
+    console.log(`✓ ${file}: no mechanical issues`);
+    process.exit(0);
+  }
+
+  console.log(`✗ ${file}: ${issues.length} issue(s)`);
+  for (const issue of issues) {
+    console.log(`  [${issue.rule}] ${issue.message}`);
+  }
+
+  if (fix) {
+    const fixed = applyFixes(source, issues);
+    if (fixed !== source && !process.argv.includes("--stdin")) {
+      const fileArg = process.argv.find((a) => a.endsWith(".tsx") || a.endsWith(".jsx"));
+      fs.writeFileSync(fileArg, fixed);
+      console.log(`Applied auto-fixes to ${fileArg}`);
+    }
+  }
+
+  process.exit(1);
+}
+
+// Importable for tests; the CLI runs only when this file is invoked directly.
+if (require.main === module) main();
+
+module.exports = { validate, loadSpec, parseIconNames, hasLiteralColor, insidePropValue };

package/dist/server/og-utils.d.ts

@@ -1,4 +1,10 @@
-import { NextResponse } from 'next/server';
+/**
+ * Open Graph fetch/proxy handlers.
+ *
+ * Uses the standard `Response` rather than `NextResponse`: `NextResponse`
+ * extends `Response`, so Next route handlers accept these return values
+ * unchanged, and the module no longer pulls `next/server` into core.
+ */
 import { type OGUrlValidationOptions } from './og-url-validation';
 export interface OGData {
     url: string;
@@ -12,12 +18,12 @@ export interface OGFetchOptions extends OGUrlValidationOptions {
     userAgent?: string;
     decodeEntities?: boolean;
 }
-export declare function handleOGFetch(request: Request, options?: OGFetchOptions): Promise<NextResponse>;
+export declare function handleOGFetch(request: Request, options?: OGFetchOptions): Promise<Response>;
 export interface OGProxyOptions extends OGUrlValidationOptions {
     userAgent?: string;
     cacheMaxAge?: number;
 }
-export declare function handleOGProxy(request: Request, options?: OGProxyOptions): Promise<NextResponse>;
+export declare function handleOGProxy(request: Request, options?: OGProxyOptions): Promise<Response>;
 export { OGUrlValidationError, validateOgUrl } from './og-url-validation';
 export type { OGUrlValidationOptions } from './og-url-validation';
 //# sourceMappingURL=og-utils.d.ts.map

package/dist/server/og-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"og-utils.d.ts","sourceRoot":"","sources":["../../src/server/og-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAGL,KAAK,sBAAsB,EAE5B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,sBAAsB;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA2DD,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAkFzG;AAED,MAAM,WAAW,cAAe,SAAQ,sBAAsB;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CA0DzG;AAED,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1E,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"og-utils.d.ts","sourceRoot":"","sources":["../../src/server/og-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAGL,KAAK,sBAAsB,EAE5B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,sBAAsB;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AA2DD,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkFrG;AAED,MAAM,WAAW,cAAe,SAAQ,sBAAsB;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA0DrG;AAED,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1E,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server/og-utils.js

@@ -1,4 +1,10 @@
-import { NextResponse } from 'next/server';
+/**
+ * Open Graph fetch/proxy handlers.
+ *
+ * Uses the standard `Response` rather than `NextResponse`: `NextResponse`
+ * extends `Response`, so Next route handlers accept these return values
+ * unchanged, and the module no longer pulls `next/server` into core.
+ */
 import { fetchValidatedUrl, OGUrlValidationError, validateOgUrl, } from './og-url-validation';
 function decodeHTMLEntities(text) {
     return text.replace(/&(#?[a-zA-Z0-9]+);/g, (match, entity) => {
@@ -41,14 +47,14 @@ async function fetchWithTimeout(url, timeout = 5000, userAgent = 'Mozilla/5.0 (c
     }
 }
 function validationErrorResponse() {
-    return NextResponse.json({ error: 'URL is not allowed' }, { status: 400 });
+    return Response.json({ error: 'URL is not allowed' }, { status: 400 });
 }
 export async function handleOGFetch(request, options = {}) {
     const { timeout = 5000, userAgent = 'Mozilla/5.0 (compatible; OG-Fetcher/1.0)', decodeEntities = true, allowedDomains, } = options;
     const { searchParams } = new URL(request.url);
     const url = searchParams.get('url');
     if (!url) {
-        return NextResponse.json({ error: 'URL parameter is required' }, { status: 400 });
+        return Response.json({ error: 'URL parameter is required' }, { status: 400 });
     }
     const validationOptions = { allowedDomains };
     try {
@@ -99,11 +105,11 @@ export async function handleOGFetch(request, options = {}) {
             ogData.title = decodeHTMLEntities(ogData.title);
             ogData.description = decodeHTMLEntities(ogData.description);
         }
-        return NextResponse.json(ogData);
+        return Response.json(ogData);
     }
     catch (error) {
         console.error('Error fetching OG data:', error);
-        return NextResponse.json({ error: 'Failed to fetch Open Graph data' }, { status: 500 });
+        return Response.json({ error: 'Failed to fetch Open Graph data' }, { status: 500 });
     }
 }
 export async function handleOGProxy(request, options = {}) {
@@ -111,7 +117,7 @@ export async function handleOGProxy(request, options = {}) {
     const { searchParams } = new URL(request.url);
     const url = searchParams.get('url');
     if (!url) {
-        return NextResponse.json({ error: 'URL parameter is required' }, { status: 400 });
+        return Response.json({ error: 'URL parameter is required' }, { status: 400 });
     }
     const validationOptions = { allowedDomains };
     try {
@@ -130,11 +136,11 @@ export async function handleOGProxy(request, options = {}) {
             },
         }, validationOptions);
         if (!response.ok) {
-            return NextResponse.json({ error: 'Failed to fetch image' }, { status: response.status >= 400 && response.status < 600 ? response.status : 502 });
+            return Response.json({ error: 'Failed to fetch image' }, { status: response.status >= 400 && response.status < 600 ? response.status : 502 });
         }
         const contentType = response.headers.get('content-type') || 'image/jpeg';
         const buffer = await response.arrayBuffer();
-        return new NextResponse(buffer, {
+        return new Response(buffer, {
             headers: {
                 'Content-Type': contentType,
                 'Cache-Control': `public, max-age=${cacheMaxAge}`,
@@ -143,7 +149,7 @@ export async function handleOGProxy(request, options = {}) {
     }
     catch (error) {
         console.error('Error proxying image:', error);
-        return NextResponse.json({ error: 'Failed to proxy image' }, { status: 500 });
+        return Response.json({ error: 'Failed to proxy image' }, { status: 500 });
     }
 }
 export { OGUrlValidationError, validateOgUrl } from './og-url-validation';