@sableui/react 0.7.1 → 0.8.0

package/registry.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://sable.design/registry.schema.json",
   "name": "@sableui/react",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Themeable React components, semantic tokens, layout patterns, presets, and package-owned agent skills. Default theme: Sable.",
   "engine": {
     "behavior": "@base-ui/react",
@@ -1585,6 +1585,10 @@
       {
         "id": "lookalike-media-frame",
         "fails-on": "A cover or media frame built by hand — an `aspect-*` ratio + `overflow-hidden` wrapped around an <img>, <video>, <picture> or GradientArt. That is `AspectBox`: `ratio` as a number reserves the box before the media arrives (no layout shift while a cover loads or a shader starts), it clips and positions what it holds (`relative w-full overflow-hidden`), and it is the one frame the media components share, so a change to how frames behave reaches every cover. Put the radius on it as a className. For a cover with its title beneath (an album, an episode, a product), `MediaTile` composes this frame with fallback art for a missing or broken image and an action revealed on hover. Not flagged: a ratio box with no media in it (a pad, a canvas well), a frame without overflow clipping, an <img> sized by its own aspect class, or a round fixed-size frame (lookalike-avatar's)."
+      },
+      {
+        "id": "form-required-error",
+        "fails-on": "A `required` Field with an `error` prop, inside a `Form` that validates for you. On submit Form checks every Field first, so an empty required one stops the submit with the browser's message (\"Please fill out this field.\") and your onSubmit, which would set `error`, never runs. Either let your code own validation, `<Form noValidate>` (onSubmit always runs and the Field shows your `error`), or let Form validate and word the message on the Field: `messages={{ valueMissing: \"Enter a subject.\" }}`."
       }
     ],
     "escapeHatch": {
@@ -1678,7 +1682,12 @@
       "volume-low",
       "volume-off",
       "queue",
-      "music"
+      "music",
+      "tag",
+      "paperclip",
+      "chart",
+      "flag",
+      "at-sign"
     ]
   },
   "layoutPrimitives": {
@@ -4482,8 +4491,8 @@
         },
         {
           "name": "BreadcrumbLink",
-          "type": "ComponentPropsWithRef<'a'>",
-          "description": "An interactive ancestor crumb (<a>). Muted by default, brightens to foreground on hover/focus."
+          "type": "ComponentPropsWithRef<'a'> & { render?: useRender.RenderProp }",
+          "description": "An interactive ancestor crumb (<a>). Muted by default, brightens to foreground on hover/focus. render composes another element with the crumb's styling, e.g. a router link: render={<Link to=\"/library\" />}, so navigating stays in the app."
         },
         {
           "name": "BreadcrumbPage",
@@ -4808,6 +4817,10 @@
             "guidance": "do",
             "description": "Use a single primary button in a view or dense panel so the action hierarchy stays obvious."
           },
+          {
+            "guidance": "do",
+            "description": "For a copy control, pair an icon Button with `useCopy(text, { timeout? })`. It takes the text when the hook is called and returns `{ copy, copied }`; `copy()` takes no argument, so pass the value the button copies to the hook, not to `copy`."
+          },
           {
             "guidance": "do",
             "description": "Write labels as actions, such as \"Save changes\" or \"Delete draft\", instead of vague labels like \"OK\"."
@@ -5647,7 +5660,7 @@
       "group": "Chat & AI",
       "register": "either",
       "path": "components/chat-composer",
-      "summary": "The input half of a conversation: one surface holding attachments, an auto-growing field, and its controls. Enter sends, Shift+Enter breaks the line, and send becomes stop while a reply streams.",
+      "summary": "The input half of a conversation: one surface holding attachments, an auto-growing field, and its controls. Enter sends, Shift+Enter breaks the line (sendOn=\"mod-enter\" swaps them for long-form replies), and send becomes stop while a reply streams.",
       "keywords": [
         "chat input",
         "composer",
@@ -5691,7 +5704,7 @@
           },
           {
             "guidance": "dont",
-            "description": "Do not use it as a general multi-line input. That is `Textarea` — this one submits on Enter, which is wrong for any field inside a larger form."
+            "description": "Do not use it as a general multi-line input inside a larger form. That is `Textarea`. A standalone reply box that sends multi-paragraph messages (email, support replies) is this one with sendOn=\"mod-enter\"."
           },
           {
             "guidance": "dont",
@@ -5765,6 +5778,12 @@
           "default": "\"Send a message…\"",
           "description": "Placeholder for the field."
         },
+        {
+          "name": "sendOn",
+          "type": "\"enter\" | \"mod-enter\"",
+          "default": "\"enter\"",
+          "description": "Which key sends. enter for chat (Shift+Enter breaks the line). mod-enter for long-form replies such as an email or a support answer: Enter breaks the line and Cmd/Ctrl+Enter sends, so a paragraph break never mails a draft. Say so in footer (\"Cmd+Enter to send\")."
+        },
         {
           "name": "busy",
           "type": "boolean",
@@ -7019,7 +7038,7 @@
         {
           "name": "items",
           "type": "CommandItem[]",
-          "description": "Data-driven commands ({ group, label, onSelect, id?, icon?, detail?, hint?, disabled? }). Ignored when children are provided. id is optional identity: filter is handed these same objects, so it is how a caller that ranks over its own richer model maps the array back onto it — and it becomes the row's DOM id (namespaced to the palette) and React key, so two rows may share a label."
+          "description": "Data-driven commands ({ group, label, onSelect, id?, icon?, detail?, stacked?, hint?, disabled? }). stacked puts detail on its own line under the label, for results only their detail tells apart (two tickets with one subject); beside a long label an inline detail truncates first. Ignored when children are provided. id is optional identity: filter is handed these same objects, so it is how a caller that ranks over its own richer model maps the array back onto it — and it becomes the row's DOM id (namespaced to the palette) and React key, so two rows may share a label."
         },
         {
           "name": "query",
@@ -7100,8 +7119,8 @@
         },
         {
           "name": "CommandMenuItem",
-          "type": "{ onSelect?: () => void; icon?: string; detail?: ReactNode; hint?: ReactNode; disabled?: boolean; id?: string; children }",
-          "description": "A selectable row. Self-filters by its text (unless the root was given a filter), runs onSelect, then closes the palette. detail is secondary text after the label; hint is the end-aligned trailing slot — a shortcut, a count, or a disabled row's reason. A disabled row stays listed, stays announced, and stays reachable by arrow key so its reason can be read, but is inert to Enter and to a click."
+          "type": "{ onSelect?: () => void; icon?: string; detail?: ReactNode; stacked?: boolean; hint?: ReactNode; disabled?: boolean; id?: string; children }",
+          "description": "A selectable row. Self-filters by its text (unless the root was given a filter), runs onSelect, then closes the palette. detail is secondary text after the label, or under it with stacked; hint is the end-aligned trailing slot — a shortcut, a count, or a disabled row's reason. A disabled row stays listed, stays announced, and stays reachable by arrow key so its reason can be read, but is inert to Enter and to a click."
         }
       ],
       "tokensUsed": [
@@ -7520,7 +7539,29 @@
         {
           "name": "isRowSelected",
           "type": "(row) => boolean",
-          "description": "Mark a row visually selected (data-selected). Derive it from a stable id (row.id === selectedId), not the row index, so selection survives re-sorts."
+          "description": "Mark a row visually selected (data-selected), e.g. the one open in a detail pane. Derive it from a stable id (row.id === selectedId), not the row index, so selection survives re-sorts. For checking several rows, use selectedKeys."
+        },
+        {
+          "name": "selectedKeys",
+          "type": "ReadonlySet<string | number>",
+          "description": "The checked rows, by rowKey, for bulk actions. With onSelectedKeysChange it adds a checkbox column (each box named by rowSelectionLabel) and a select-all box in the header that acts on the rows shown and goes mixed when some are checked. Checked rows get the selected fill. Controlled: when the rows shown change (a filter, another view), set the keys to keep, usually none. Needs rowKey."
+        },
+        {
+          "name": "onSelectedKeysChange",
+          "type": "(keys: Set<string | number>) => void",
+          "description": "Called with the new set of checked keys. Its presence turns selection on. A click on a box never fires onRowClick."
+        },
+        {
+          "name": "rowSelectionLabel",
+          "type": "(row) => string",
+          "default": "() => \"Select row\"",
+          "description": "A row checkbox's accessible name. Name the row, e.g. (t) => `Select ${t.subject}`, so a screen reader can tell the boxes apart."
+        },
+        {
+          "name": "selectAllLabel",
+          "type": "(count: number) => string",
+          "default": "(count) => `Select all ${count} shown`",
+          "description": "The select-all checkbox's accessible name; say what it acts on (\"Select all 7 tickets shown\")."
         },
         {
           "name": "defaultSort",
@@ -7550,6 +7591,11 @@
         "Inherits the Table's scrollable frame and semantic <table>/<th>/<td> structure."
       ],
       "examples": [
+        {
+          "label": "Checkbox selection with a bulk-action bar",
+          "code": "const [selected, setSelected] = useState<Set<string | number>>(new Set())\n\n<Stack gap={2}>\n\t{/* Mounted from the start, so a screen reader hears each change. */}\n\t<span role=\"status\" className=\"sr-only\">{selected.size ? `${selected.size} of ${tickets.length} selected` : \"\"}</span>\n\t{selected.size ? (\n\t\t<Toolbar aria-label=\"Bulk actions\">\n\t\t\t<span className=\"text-label-md\">{selected.size} of {tickets.length} selected</span>\n\t\t\t<Button size=\"sm\" variant=\"secondary\" onClick={() => resolve(selected)}>Resolve</Button>\n\t\t</Toolbar>\n\t) : null}\n\t<DataTable\n\t\tdata={tickets}\n\t\trowKey={(t) => t.id}\n\t\tcolumns={columns}\n\t\tselectedKeys={selected}\n\t\tonSelectedKeysChange={setSelected}\n\t\trowSelectionLabel={(t) => `Select ${t.subject}`}\n\t\tselectAllLabel={(n) => `Select all ${n} tickets shown`}\n\t/>\n</Stack>",
+          "imports": "import { Button, DataTable, Stack, Toolbar } from \"@sableui/react\""
+        },
         {
           "label": "Sortable columns",
           "code": "<DataTable data={users} columns={[{ key: \"name\", header: \"Name\", sortable: true }, { key: \"role\", header: \"Role\" }, { key: \"joined\", header: \"Joined\", sortable: true, sortValue: (u) => u.joinedAt, cell: (u) => formatDate(u.joinedAt) }]} />",
@@ -9523,7 +9569,7 @@
         {
           "name": "Form",
           "type": "{ validationMode?: \"onSubmit\" | \"onBlur\" | \"onChange\"; errors?: Record<string, string | string[]>; onFormSubmit?: (values, details) => void; actionsRef?: RefObject<Form.Actions> } + ComponentPropsWithRef<\"form\">",
-          "description": "A <form> laid out as a vertical column with comfortable field spacing (override with className, e.g. gap-4). On submit it validates every Field (native constraints plus Field validate), shows each message under its field, focuses the first invalid control, and only then calls onSubmit. validationMode defaults to \"onSubmit\" (then live re-validation on change). errors shows external (e.g. server) messages keyed by Field name and clears one when its field is edited. onFormSubmit receives the named Field values and prevents the native submit. A control outside any Field is still checked by the browser before onSubmit runs; pass noValidate to skip that."
+          "description": "A <form> laid out as a vertical column with comfortable field spacing (override with className, e.g. gap-4). On submit it validates every Field (native constraints plus Field validate), shows each message under its field, focuses the first invalid control, and only then calls onSubmit. validationMode defaults to \"onSubmit\" (then live re-validation on change). errors shows external (e.g. server) messages keyed by Field name and clears one when its field is edited. onFormSubmit receives the named Field values and prevents the native submit. A control outside any Field is still checked by the browser before onSubmit runs. Validating in your own code (react-hook-form, a schema, state)? Pass noValidate: onSubmit always runs and each Field shows the error you set; without it an empty required Field stops the submit before your handler can set that error."
         },
         {
           "name": "validationMode",
@@ -9541,6 +9587,12 @@
           "type": "(values: Record<string, unknown>, details) => void",
           "description": "Called with the named Field values after validation passes; prevents the native submit."
         },
+        {
+          "name": "noValidate",
+          "type": "boolean",
+          "default": "false",
+          "description": "Your code owns validation: nothing is checked before onSubmit (neither the Fields nor the browser), so it always runs and each Field shows the error you pass. required Fields keep their asterisk and aria-required. validationMode, errors, onFormSubmit and actionsRef do nothing with it."
+        },
         {
           "name": "actionsRef",
           "type": "RefObject<{ validate(name?: string): void }>",
@@ -9550,8 +9602,8 @@
       "subcomponents": [
         {
           "name": "Field",
-          "type": "{ label?: ReactNode; description?: ReactNode; error?: ReactNode; required?: boolean; disabled?: boolean; name?: string; validate?: (value, formValues) => string | string[] | null | Promise<…>; validationMode?: \"onSubmit\" | \"onBlur\" | \"onChange\"; validationDebounceTime?: number; orientation?: \"vertical\" | \"horizontal\"; className?: string; children: ReactElement }",
-          "description": "Wraps a single control element (e.g. <Input />) on Base UI Field and wires label (htmlFor + aria-labelledby), helper text and error (aria-describedby), aria-invalid, and required onto it automatically. Base UI-backed controls (Input, Textarea, Select, Combobox, NumberField, Checkbox, Switch, Slider, OtpField…) register through context; the child is also cloned so plain elements keep the same wiring. error renders a destructive message and takes precedence; without it the slot shows Base UI's validation message when the field fails (native constraint, validate, or Form errors). required adds the native attribute plus a visual asterisk (defaults to false). disabled disables the control and dims the label. name keys the field in Form errors / onFormSubmit. validationMode overrides the Form's. orientation defaults to \"vertical\" (label → control); \"horizontal\" places control then label inline for a single checkbox / switch / radio — the control centres on the label's first line (it stays there when the label wraps) and description/error sit in the label's column. The root, label, description, error and control carry data-invalid / data-valid, data-touched, data-dirty, data-filled, data-focused and data-disabled for state styling."
+          "type": "{ label?: ReactNode; description?: ReactNode; error?: ReactNode; required?: boolean; messages?: Partial<Record<\"valueMissing\" | \"typeMismatch\" | \"patternMismatch\" | \"tooShort\" | \"tooLong\" | \"rangeUnderflow\" | \"rangeOverflow\" | \"stepMismatch\" | \"badInput\", ReactNode>>; disabled?: boolean; name?: string; validate?: (value, formValues) => string | string[] | null | Promise<…>; validationMode?: \"onSubmit\" | \"onBlur\" | \"onChange\"; validationDebounceTime?: number; orientation?: \"vertical\" | \"horizontal\"; className?: string; children: ReactElement }",
+          "description": "Wraps a single control element (e.g. <Input />) on Base UI Field and wires label (htmlFor + aria-labelledby), helper text and error (aria-describedby), aria-invalid, and required onto it automatically. Base UI-backed controls (Input, Textarea, Select, Combobox, NumberField, Checkbox, Switch, Slider, OtpField…) register through context; the child is also cloned so plain elements keep the same wiring. error renders a destructive message and takes precedence; without it the slot shows the field's messages entry for the native constraint that failed (messages={{ valueMissing: \"Enter a subject.\" }}), else Base UI's validation message (the browser's wording for a native constraint, validate, or Form errors). required adds the native attribute plus a visual asterisk (defaults to false). disabled disables the control and dims the label. name keys the field in Form errors / onFormSubmit. validationMode overrides the Form's. orientation defaults to \"vertical\" (label → control); \"horizontal\" places control then label inline for a single checkbox / switch / radio — the control centres on the label's first line (it stays there when the label wraps) and description/error sit in the label's column. The root, label, description, error and control carry data-invalid / data-valid, data-touched, data-dirty, data-filled, data-focused and data-disabled for state styling."
         }
       ],
       "tokensUsed": [
@@ -9575,6 +9627,16 @@
           "code": "<Field label=\"Password\" error=\"Must be at least 8 characters.\"><Input type=\"password\" /></Field>",
           "imports": "import { Field, Input } from \"@sableui/react\""
         },
+        {
+          "label": "Your own wording for a missing value",
+          "code": "<Form onSubmit={handleSubmit}><Field label=\"Subject\" required messages={{ valueMissing: \"Enter a subject.\" }}><Input name=\"subject\" /></Field><Button type=\"submit\">Send</Button></Form>",
+          "imports": "import { Button, Field, Form, Input } from \"@sableui/react\""
+        },
+        {
+          "label": "Validation in your own code",
+          "code": "<Form noValidate onSubmit={handleSubmit}><Field label=\"Subject\" required error={errors.subject}><Input name=\"subject\" /></Field><Button type=\"submit\">Send</Button></Form>",
+          "imports": "import { Button, Field, Form, Input } from \"@sableui/react\""
+        },
         {
           "label": "Validated on submit",
           "code": "<Form onSubmit={handleSubmit}><Field label=\"Handle\" required validate={(value) => String(value).length < 3 ? \"At least 3 characters.\" : null}><Input name=\"handle\" /></Field><Button type=\"submit\">Claim</Button></Form>",
@@ -11736,7 +11798,7 @@
         {
           "name": "ref",
           "type": "Ref<MessageScrollerHandle>",
-          "description": "Imperative commands, not the DOM node: `scrollToBottom(opts)`, `scrollToTop(opts)`, `scrollToMessage(id, opts)` (returns false when the message is not rendered), `isFollowing()`, and `element` for the scrolling node itself."
+          "description": "Imperative commands, not the DOM node: `scrollToBottom(opts)`, `scrollToTop(opts)`, `scrollToMessage(id, opts)` (returns false when the message is not rendered), `isFollowing()`, and `element` for the scrolling node itself. `opts` is `ScrollCommandOptions`: `{ animate?: boolean }` (default true, and off whenever motion is), not the DOM's `behavior`."
         },
         {
           "name": "autoFollow",
@@ -12885,7 +12947,7 @@
         {
           "name": "actions",
           "type": "ReactNode",
-          "description": "Trailing actions aligned to the title row's end. They drop under the title when the row runs out of room, and the title wraps rather than truncating. A ghost or link Button at either end of the group bleeds by its own padding, so its label meets the content edge (the end on the title row, the start once wrapped); filled buttons keep their edge on the line. Direct children only."
+          "description": "Trailing actions aligned to the title row's end. They drop under the title when the title would have less than 20rem beside them (on a phone, nearly always), and the title wraps rather than truncating. A ghost or link Button at either end of the group bleeds by its own padding, so its label meets the content edge (the end on the title row, the start once wrapped); filled buttons keep their edge on the line. Direct children only."
         },
         {
           "name": "titleAs",
@@ -15967,7 +16029,7 @@
       "group": "Overlays",
       "register": "either",
       "path": "components/settings-menu",
-      "summary": "A compact trigger that states the current settings, over a menu of rows that change them. Each row shows its own value and opens a submenu.",
+      "summary": "A compact trigger that states the current settings, over a menu of rows that change them. Each row shows its own value and opens a submenu; with one setting, the menu opens straight to its options under the row's label.",
       "keywords": [
         "settings",
         "model picker",
@@ -16492,6 +16554,11 @@
         }
       ],
       "subcomponents": [
+        {
+          "name": "SidebarHeader",
+          "type": "div props",
+          "description": "The top of the rail, at least 64px tall. It holds SidebarBrand and may take a second row under it, such as a search field or a notifications button: give that row basis-full and the header grows to hold it instead of clipping."
+        },
         {
           "name": "SidebarBrand",
           "type": "{ mark: ReactNode; label: ReactNode; render?: useRender.RenderProp } + div props",
@@ -17883,7 +17950,7 @@
       "group": "Selection",
       "register": "either",
       "path": "components/switch",
-      "summary": "Binary on/off toggle for immediate-effect settings. Track fills with the primary tone when checked; the thumb slides on a spring-eased transform (mirrored in RTL).",
+      "summary": "Binary on/off toggle for immediate-effect settings. Track fills with the primary tone when checked; the thumb slides on a spring-eased transform (mirrored in RTL). The thumb is white in both states, like every physical toggle, and turns dark only on a near-white track (a dark mode's light primary). Themes can set --theme-switch-thumb-on.",
       "keywords": [
         "switch",
         "toggle setting",
@@ -17966,7 +18033,6 @@
       "tokensUsed": [
         "input",
         "primary",
-        "primary-foreground",
         "ring"
       ],
       "motion": [
@@ -23773,6 +23839,9 @@
         "render",
         "showLabel"
       ],
+      "BreadcrumbLink": [
+        "render"
+      ],
       "BreadcrumbSeparator": [
         "children"
       ],
@@ -23942,6 +24011,7 @@
         "onValueChange",
         "placeholder",
         "sendLabel",
+        "sendOn",
         "stopLabel",
         "value"
       ],
@@ -24213,7 +24283,8 @@
         "disabled",
         "hint",
         "icon",
-        "onSelect"
+        "onSelect",
+        "stacked"
       ],
       "CommandMenuPanel": [
         "children",
@@ -24351,7 +24422,11 @@
         "empty",
         "isRowSelected",
         "onRowClick",
-        "rowKey"
+        "onSelectedKeysChange",
+        "rowKey",
+        "rowSelectionLabel",
+        "selectAllLabel",
+        "selectedKeys"
       ],
       "DatePicker": [
         "className",
@@ -24536,6 +24611,7 @@
         "disabled",
         "error",
         "label",
+        "messages",
         "name",
         "orientation",
         "required",
@@ -24592,6 +24668,7 @@
       "Form": [
         "actionsRef",
         "errors",
+        "noValidate",
         "onFormSubmit",
         "validationMode"
       ],

package/scripts/design-memory.mjs

@@ -95,7 +95,12 @@ const template = {
 	avoidWhen: "",
 	change: { before: "", after: "" },
 	provenance: { kind: "build-review", source: "", date: "", reviewer: "", sableVersion: "" },
-	evidence: [{ kind: "before", path: "", observation: "" }, { kind: "after", path: "", observation: "" }],
+	// The paths say their own rules, which recording enforces: a dogfood run met
+	// both only as ERR_LESSON_INVALID after filling the template in.
+	evidence: [
+		{ kind: "before", path: "<a non-empty file inside this project, relative to its root, e.g. design/evidence/before.png>", observation: "" },
+		{ kind: "after", path: "<a different file from the before one, also inside the project>", observation: "" },
+	],
 }
 
 function main() {
@@ -118,7 +123,7 @@ function main() {
 	const actions = ["--list", "--search", "--show", "--record", "--template", "--check"].filter((flag) => flags.has(flag))
 	if (actions.length > 1) return fail("ERR_BAD_FLAG", "Choose one of --list, --search, --show, --record, --template, --check.")
 	if (flags.has("--help")) {
-		process.stdout.write("sable learn — retrieve precedents and record project-owned lessons\n\n  --list | --search <words> | --show <id> | --template | --record <lesson.json> | --check\n  --json   structured { type, data } output\n\nRun from the project root. Evidence paths are relative to that root. Records are provisional reviewer observations, never automatic proof of taste.\n")
+		process.stdout.write("sable learn — retrieve precedents and record project-owned lessons\n\n  --list | --search <words> | --show <id> | --template | --record <lesson.json> | --check\n  --json   structured { type, data } output\n\nRun from the project root. Evidence paths are relative to that root, must stay inside it, and before and after must be different files. Records are provisional reviewer observations, never automatic proof of taste.\n")
 		return
 	}
 	if (flags.has("--template")) {

package/scripts/lint-rules.mjs

@@ -1038,6 +1038,37 @@ export function makeRules({ semanticTokens, motionTokens, labelContrast = null,
 				return ctx?.isStylesheet && statusText ? statusText(text) : []
 			},
 		},
+		{
+			id: "form-required-error",
+			/* CONSUMER-scoped. A support app set `error` on a required Field and
+			 * never saw it: Form validates every Field before it calls onSubmit, so
+			 * an empty one stopped the submit with the browser's wording and the
+			 * handler that sets `error` never ran. */
+			scope: "consumer",
+			since: "0.8.0",
+			file: true,
+			code: true,
+			why:
+				"A `required` Field with an `error` prop, inside a `Form` that validates for you. On submit Form checks every Field first, so an empty required one stops the submit with the browser's message (\"Please fill out this field.\") and your onSubmit, which would set `error`, never runs. Either let your code own validation, `<Form noValidate>` (onSubmit always runs and the Field shows your `error`), or let Form validate and word the message on the Field: `messages={{ valueMissing: \"Enter a subject.\" }}`.",
+			scan(text) {
+				const src = maskMarkupTemplates(text)
+				const out = []
+				// A boolean prop is on when written bare or as anything but `={false}`.
+				const flag = (attrs, name) => {
+					const m = new RegExp(`(?:^|\\s)${name}(?![\\w-])(\\s*=\\s*\\{\\s*false\\s*\\})?`).exec(attrs)
+					return Boolean(m) && !m[1]
+				}
+				for (const form of openingTags(src, /^Form$/)) {
+					if (flag(form.attrs, "noValidate")) continue
+					const { inner } = elementContent(src, form)
+					for (const field of openingTags(inner, /^Field$/)) {
+						if (!flag(field.attrs, "required") || !/(?:^|\s)error\s*=/.test(field.attrs)) continue
+						out.push({ index: form.end + 1 + field.index, match: "required Field with error inside a validating Form → <Form noValidate> or messages={{ valueMissing }}" })
+					}
+				}
+				return out
+			},
+		},
 		{
 			id: "hand-derived-surface",
 			/* CONSUMER-scoped. Mixing ink into a surface by hand is what the
@@ -1229,7 +1260,7 @@ export function makeRules({ semanticTokens, motionTokens, labelContrast = null,
 			file: true,
 			code: true,
 			why:
-				"A look-changing class on a Sable component (border*, bg-*, rounded*, ring-*, shadow-* on Button, Pill or Badge). Their appearance is set by variants — Button `variant` (floating for a control over content), Pill `appearance`/`size`, Badge `appearance`/`tone` — and an override fights the variant's own hover, selected and focus states. Use a real variant, or add one to the component. Layout classes (width, margin, flex, position) are fine.",
+				"A look-changing class on a Sable component (border*, bg-*, rounded*, ring-*, shadow-* on Button, Pill or Badge). Their appearance is set by variants — Button `variant` (floating for a control over content), Pill `appearance`/`size`, Badge `appearance`/`tone` — and an override fights the variant's own hover, selected and focus states. Use a real variant, or add one to the component. Layout classes (width, margin, flex, position) are fine. If the component is defective rather than missing a look, patch it with `sable patch <Component>` (recorded, and re-checked on every upgrade) instead of restyling it.",
 			scan(text) {
 				const out = []
 				for (const m of openingTags(text, /^(?:Button|Pill|Badge)$/)) {

package/scripts/patches.mjs

@@ -0,0 +1,219 @@
+/**
+ * sable patch — fix a Sable component in place while the library fix ships, and
+ * hear about it on every upgrade.
+ *
+ * A defect in a component left an app two choices: restyle it with className,
+ * which `component-restyle` rightly flags, or wait for a release. A patch is the
+ * third: the project's own package manager patches the installed module
+ * (`pnpm patch`, `yarn patch`, or patch-package for npm), and this records why,
+ * against which version, and how to tell whether it is still needed:
+ *
+ *   .sable/patches.json  { patches: [{ component, files, version, base, reason, repro, issue? }] }
+ *
+ * `base` holds the hash of each file as Sable shipped it at that version
+ * (dist/file-hashes.json), so `sable doctor` can tell three things on a later
+ * install: whether the patch is applied, whether Sable has changed the file
+ * since, and what the changelog says about the component in between. A patch
+ * whose file Sable changed fails doctor (and so `sable check`) until someone
+ * re-runs the repro and keeps the patch or drops it. Nothing changes silently,
+ * in either direction.
+ */
+import { createHash } from "node:crypto"
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs"
+import { dirname, join, parse, relative, resolve } from "node:path"
+import { fileURLToPath } from "node:url"
+import { packageManager } from "./agent-setup.mjs"
+import { parseFlags } from "./design-preferences.mjs"
+
+export const PATCHES_FILE = join(".sable", "patches.json")
+const PACKAGE = "@sableui/react"
+
+const hash = (path) => createHash("sha256").update(readFileSync(path)).digest("hex").slice(0, 16)
+
+/** Hashes of every dist file as published, written at build time. */
+function shippedHashes(pkgRoot) {
+	const path = join(pkgRoot, "dist", "file-hashes.json")
+	return existsSync(path) ? JSON.parse(readFileSync(path, "utf8")) : null
+}
+
+export function readPatches(root) {
+	const path = join(root, PATCHES_FILE)
+	if (!existsSync(path)) return []
+	const data = JSON.parse(readFileSync(path, "utf8"))
+	if (!Array.isArray(data?.patches)) throw Object.assign(new Error(`${PATCHES_FILE} has no patches array.`), { code: "ERR_PATCHES_INVALID" })
+	return data.patches
+}
+
+function writePatches(root, patches) {
+	const path = join(root, PATCHES_FILE)
+	mkdirSync(dirname(path), { recursive: true })
+	writeFileSync(path, `${JSON.stringify({ patches }, null, 2)}\n`)
+}
+
+/**
+ * The dist modules a component's patch covers: its own folder's modules, not
+ * the barrel or the docs metadata. A part (CardList) resolves to its component.
+ */
+export function componentFiles(pkgRoot, name) {
+	const registry = JSON.parse(readFileSync(join(pkgRoot, "registry.json"), "utf8"))
+	const entries = [...(registry.components ?? []), ...(registry.layoutPrimitives?.primitives ?? [])]
+	const entry =
+		entries.find((c) => c.name === name) ??
+		entries.find((c) => (c.subcomponents ?? []).some((s) => s.name === name))
+	if (!entry?.path) return null
+	const dir = join(pkgRoot, "dist", entry.path)
+	if (!existsSync(dir)) return null
+	return {
+		component: entry.name,
+		files: readdirSync(dir)
+			.filter((f) => f.endsWith(".js") && f !== "index.js" && !f.endsWith(".meta.js"))
+			.map((f) => `dist/${entry.path}/${f}`),
+	}
+}
+
+/** Changelog bullets between two versions (exclusive, inclusive) that name the component. */
+export function changelogMentions(pkgRoot, component, from, to) {
+	const path = join(pkgRoot, "CHANGELOG.md")
+	if (!existsSync(path)) return []
+	const text = readFileSync(path, "utf8")
+	const out = []
+	for (const section of text.split(/^## /m).slice(1)) {
+		const version = section.split(/\s/, 1)[0]
+		if (compareVersions(version, from) <= 0 || compareVersions(version, to) > 0) continue
+		for (const bullet of section.split(/\n(?=- )/)) {
+			if (!bullet.startsWith("- ")) continue
+			if (!new RegExp(`\\b${component}\\b`).test(bullet)) continue
+			const lead = /^- \*\*(.+?)\*\*/.exec(bullet)?.[1] ?? bullet.slice(2, 120)
+			out.push(`${version}: ${lead.replace(/\s+/g, " ").replace(/\.$/, "")}`)
+		}
+	}
+	return out
+}
+
+function compareVersions(a, b) {
+	const x = String(a).split(/[.-]/).map((n) => Number(n) || 0)
+	const y = String(b).split(/[.-]/).map((n) => Number(n) || 0)
+	for (let i = 0; i < 3; i++) if ((x[i] ?? 0) !== (y[i] ?? 0)) return (x[i] ?? 0) < (y[i] ?? 0) ? -1 : 1
+	return 0
+}
+
+/** How to make, commit and remove a patch with this project's package manager. */
+export function patchSteps(pm, version, files) {
+	const list = files.join(", ")
+	if (pm === "pnpm")
+		return {
+			make: [`pnpm patch ${PACKAGE}@${version}`, `edit ${list} in the folder it prints`, "pnpm patch-commit <that folder>"],
+			remove: [`pnpm patch-remove ${PACKAGE}@${version}`],
+		}
+	if (pm === "yarn")
+		return {
+			make: [`yarn patch ${PACKAGE}`, `edit ${list} in the folder it prints`, "yarn patch-commit -s <that folder>", "(Yarn 1: use the npm steps with patch-package)"],
+			remove: [`remove the patch: entry for ${PACKAGE} from package.json resolutions, then yarn install`],
+		}
+	return {
+		make: [`edit ${files.map((f) => `node_modules/${PACKAGE}/${f}`).join(", ")}`, `npx patch-package ${PACKAGE}`, 'add "postinstall": "patch-package" to package.json scripts'],
+		remove: [`delete patches/${PACKAGE.replace("/", "+")}+${version}.patch, then reinstall`],
+	}
+}
+
+/**
+ * One doctor check per recorded patch. `fail` when someone has to decide —
+ * Sable changed a patched file, or a patch is missing from the installed copy —
+ * so the agent is told on the upgrade itself, not when a user hits the bug.
+ */
+export function patchChecks(pkgRoot, root, installed) {
+	let patches
+	try {
+		patches = readPatches(root)
+	} catch (error) {
+		return [{ status: "fail", name: "patches", detail: error.message, fix: `Fix or delete ${PATCHES_FILE}.` }]
+	}
+	if (!patches.length) return []
+	const shipped = shippedHashes(pkgRoot)
+	if (!shipped) return [{ status: "warn", name: "patches", detail: `${patches.length} recorded, but this Sable build ships no file hashes to check them against.` }]
+	const pm = packageManager(parse(root).root, root)
+	return patches.map((p) => {
+		const name = `patch:${p.component}`
+		const why = `"${p.reason}"`
+		const missing = p.files.filter((f) => !shipped[f])
+		if (missing.length)
+			return { status: "fail", name, detail: `${p.version} → ${installed}: Sable no longer ships ${missing.join(", ")} (${why}). The component was restructured.`, fix: `Re-run the repro without the patch: ${p.repro}. Fixed → sable patch ${p.component} --drop. Still broken → patch the new files, then sable patch ${p.component} --keep.` }
+		const applied = p.files.some((f) => existsSync(join(pkgRoot, f)) && hash(join(pkgRoot, f)) !== shipped[f])
+		const changed = p.files.filter((f) => p.base?.[f] !== shipped[f])
+		const steps = patchSteps(pm, installed, p.files)
+		if (p.version === installed) {
+			if (applied) return { status: "pass", name, detail: `patched for ${why}${p.issue ? ` (${p.issue})` : ""}.` }
+			return { status: "warn", name, detail: `recorded for ${why} but not applied: the installed files are Sable's own.`, fix: steps.make.join(" → ") }
+		}
+		if (!changed.length && applied) return { status: "pass", name, detail: `patched for ${why}; Sable has not changed these files since ${p.version}.` }
+		const notes = changelogMentions(pkgRoot, p.component, p.version, installed)
+		const news = notes.length ? ` Changelog: ${notes.join(" | ")}.` : ""
+		if (!changed.length)
+			return { status: "fail", name, detail: `${p.version} → ${installed}: Sable did not change ${p.component}, and your patch (${why}) is not applied to ${installed}.`, fix: `Re-apply it: ${steps.make.join(" → ")}. Then sable patch ${p.component} --keep.` }
+		return {
+			status: "fail",
+			name,
+			detail: `${p.version} → ${installed}: Sable changed ${changed.join(", ")} since your patch (${why}).${news}`,
+			fix: `Re-run the repro on Sable's own files${applied ? " (remove the patch first)" : ""}: ${p.repro}. Fixed → sable patch ${p.component} --drop. Still broken → re-patch (${steps.make.join(" → ")}), then sable patch ${p.component} --keep, and report it.`,
+		}
+	})
+}
+
+/* ── CLI ────────────────────────────────────────────────────────────────────── */
+
+const isMain = process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)
+if (isMain) {
+	const args = process.argv.slice(2)
+	const json = args.includes("--json")
+	const emit = (type, data, text) => process.stdout.write(json ? `${JSON.stringify({ type, data })}\n` : `${text}\n`)
+	try {
+		const pkgRoot = fileURLToPath(new URL("../", import.meta.url))
+		const root = process.cwd()
+		const installed = JSON.parse(readFileSync(join(pkgRoot, "package.json"), "utf8")).version
+		const name = args[0] && !args[0].startsWith("--") ? args[0] : null
+		const flags = parseFlags(name ? args.slice(1) : args, ["--reason", "--repro", "--issue", "--file"], ["--list", "--keep", "--drop", "--json"])
+		const patches = readPatches(root)
+		const pm = packageManager(parse(root).root, root)
+		if (flags.has("--list") || !name) {
+			const checks = patchChecks(pkgRoot, root, installed)
+			emit("patch.list", { patches, checks }, checks.length ? checks.map((c) => `${c.status === "pass" ? "✓" : c.status === "warn" ? "!" : "✗"} ${c.name} ${c.detail}${c.fix ? `\n    → ${c.fix}` : ""}`).join("\n") : "No Sable patches recorded.")
+		} else if (flags.has("--drop")) {
+			const p = patches.find((x) => x.component === name)
+			if (!p) throw Object.assign(new Error(`No recorded patch for ${name}.`), { code: "ERR_NO_PATCH" })
+			writePatches(root, patches.filter((x) => x !== p))
+			const steps = patchSteps(pm, p.version, p.files)
+			emit("patch.dropped", { component: name, remove: steps.remove }, `Dropped the ${name} patch record. Remove the patch itself too: ${steps.remove.join(" → ")}`)
+		} else if (flags.has("--keep")) {
+			const p = patches.find((x) => x.component === name)
+			if (!p) throw Object.assign(new Error(`No recorded patch for ${name}.`), { code: "ERR_NO_PATCH" })
+			const shipped = shippedHashes(pkgRoot) ?? {}
+			Object.assign(p, { version: installed, base: Object.fromEntries(p.files.map((f) => [f, shipped[f]])) })
+			writePatches(root, patches)
+			emit("patch.kept", p, `Kept the ${name} patch against ${installed}. Report it upstream if you haven't, so the library fix can replace it.`)
+		} else {
+			const reason = flags.get("--reason")
+			const repro = flags.get("--repro")
+			if (!reason || !repro)
+				throw Object.assign(new Error("A patch records why and how to check it: pass --reason \"<what is wrong>\" and --repro \"<how to see it>\"."), { code: "ERR_BAD_ARGUMENT" })
+			if (patches.some((x) => x.component === name)) throw Object.assign(new Error(`${name} already has a patch record. Use --keep or --drop.`), { code: "ERR_PATCH_EXISTS" })
+			const found = componentFiles(pkgRoot, name)
+			const extra = flags.get("--file")
+			if (!found && !extra) throw Object.assign(new Error(`No Sable component named ${name}. For a shared module, pass --file dist/lib/<module>.js.`), { code: "ERR_UNKNOWN_COMPONENT" })
+			const shipped = shippedHashes(pkgRoot) ?? {}
+			const files = [...(found?.files ?? []), ...(extra ? [extra.replace(/\\/g, "/")] : [])]
+			const unknown = files.filter((f) => !shipped[f])
+			if (unknown.length) throw Object.assign(new Error(`Not a published Sable file: ${unknown.join(", ")}.`), { code: "ERR_UNKNOWN_FILE" })
+			const record = { component: found?.component ?? name, files, version: installed, base: Object.fromEntries(files.map((f) => [f, shipped[f]])), reason, repro, ...(flags.get("--issue") ? { issue: flags.get("--issue") } : {}) }
+			writePatches(root, [...patches, record])
+			const steps = patchSteps(pm, installed, files)
+			emit(
+				"patch.recorded",
+				{ ...record, steps: steps.make },
+				`Recorded a patch for ${record.component} against ${installed} in ${relative(root, join(root, PATCHES_FILE))}.\nNow make it with ${pm}:\n${steps.make.map((s) => `  - ${s}`).join("\n")}\nOn every upgrade, sable doctor checks it: it fails when Sable changes these files, until the repro says keep (--keep) or drop (--drop).\nReport the defect upstream so the library fix can replace the patch.`,
+			)
+		}
+	} catch (error) {
+		process.stderr.write(`${JSON.stringify({ type: "error", code: error.code ?? "ERR_PATCH", message: error.message, suggestions: ["sable patch --list", "sable docs patching-a-component"] })}\n`)
+		process.exitCode = 1
+	}
+}