@schneiderjoseph/devia 0.1.0

package/src/lib/yaml.mjs

@@ -0,0 +1,152 @@
+/**
+ * Minimal YAML subset parser — enough for rule frontmatter, VERSION and impact maps.
+ *
+ * Supports: nested mappings, lists of scalars, inline empty list `[]`, block scalars
+ * (`>` folded, `|` literal), quoted scalars, `#` comments, booleans and numbers.
+ *
+ * Deliberately not a full YAML implementation: devia ships no runtime dependencies, and the
+ * files it parses are files it also writes. Anything this parser cannot read is a file the
+ * standard does not ask anyone to write.
+ */
+
+function scalar(raw) {
+  const v = raw.trim();
+  if (v === "" || v === "~" || v === "null") return null;
+  if (v === "true") return true;
+  if (v === "false") return false;
+  if (/^-?\d+$/.test(v)) return Number(v);
+  if (/^-?\d*\.\d+$/.test(v)) return Number(v);
+  if (/^"(.*)"$/.test(v)) return v.slice(1, -1).replace(/\\"/g, '"');
+  if (/^'(.*)'$/.test(v)) return v.slice(1, -1);
+  if (v === "[]") return [];
+  if (v === "{}") return {};
+  if (/^\[.*\]$/.test(v)) {
+    return v
+      .slice(1, -1)
+      .split(",")
+      .map((s) => scalar(s))
+      .filter((s) => s !== null);
+  }
+  return v;
+}
+
+function stripComment(line) {
+  // Only strip a comment that starts the line or follows whitespace outside quotes.
+  let out = "";
+  let quote = null;
+  for (let i = 0; i < line.length; i++) {
+    const c = line[i];
+    if (quote) {
+      out += c;
+      if (c === quote && line[i - 1] !== "\\") quote = null;
+      continue;
+    }
+    if (c === '"' || c === "'") {
+      quote = c;
+      out += c;
+      continue;
+    }
+    if (c === "#" && (i === 0 || /\s/.test(line[i - 1]))) break;
+    out += c;
+  }
+  return out.replace(/\s+$/, "");
+}
+
+function indentOf(line) {
+  return line.length - line.replace(/^\s+/, "").length;
+}
+
+/** Parse a YAML subset document into a plain object. */
+export function parseYaml(text) {
+  const lines = String(text)
+    .split(/\r?\n/)
+    .map(stripComment)
+    .map((l, i) => ({ i, raw: l }))
+    .filter((l) => l.raw.trim() !== "");
+
+  let pos = 0;
+
+  function parseBlock(minIndent) {
+    let result = null;
+    while (pos < lines.length) {
+      const { raw } = lines[pos];
+      const ind = indentOf(raw);
+      if (ind < minIndent) break;
+      const trimmed = raw.trim();
+
+      // An empty collection written on its own line: `success_criteria:\n  []`
+      if (trimmed === "[]" || trimmed === "{}") {
+        pos++;
+        return trimmed === "[]" ? [] : {};
+      }
+
+      if (trimmed.startsWith("- ") || trimmed === "-") {
+        if (result === null) result = [];
+        if (!Array.isArray(result)) break;
+        pos++;
+        const item = trimmed === "-" ? "" : trimmed.slice(2);
+        if (item.includes(": ") || /:$/.test(item)) {
+          // list of mappings: re-parse the item as a mapping line at a deeper indent
+          const sub = { i: -1, raw: " ".repeat(ind + 2) + item };
+          lines.splice(pos, 0, sub);
+          result.push(parseBlock(ind + 2));
+        } else {
+          result.push(scalar(item));
+        }
+        continue;
+      }
+
+      const m = trimmed.match(/^([^:]+):\s*(.*)$/);
+      if (!m) {
+        pos++;
+        continue;
+      }
+      if (result === null) result = {};
+      if (Array.isArray(result)) break;
+      const key = m[1].trim().replace(/^["']|["']$/g, "");
+      const rest = m[2];
+      pos++;
+
+      if (rest === ">" || rest === "|" || rest === ">-" || rest === "|-") {
+        const folded = rest.startsWith(">");
+        const buf = [];
+        while (pos < lines.length && indentOf(lines[pos].raw) > ind) {
+          buf.push(lines[pos].raw.trim());
+          pos++;
+        }
+        result[key] = folded ? buf.join(" ").trim() : buf.join("\n");
+        continue;
+      }
+
+      if (rest === "") {
+        const next = lines[pos];
+        if (next && indentOf(next.raw) > ind) {
+          result[key] = parseBlock(indentOf(next.raw));
+        } else {
+          result[key] = null;
+        }
+        continue;
+      }
+
+      result[key] = scalar(rest);
+    }
+    return result === null ? {} : result;
+  }
+
+  return parseBlock(0);
+}
+
+/** Split `---` frontmatter from a markdown body. */
+export function parseFrontmatter(text) {
+  const src = String(text).replace(/^/, "");
+  if (!/^---\r?\n/.test(src)) return { data: null, body: src };
+  const end = src.indexOf("\n---", 3);
+  if (end < 0) return { data: null, body: src, error: "unclosed frontmatter" };
+  const raw = src.slice(src.indexOf("\n") + 1, end);
+  const body = src.slice(src.indexOf("\n", end + 1) + 1);
+  try {
+    return { data: parseYaml(raw), body, raw };
+  } catch (e) {
+    return { data: null, body, error: e.message };
+  }
+}

package/standard/README.md

@@ -0,0 +1,31 @@
+# The standard
+
+Narrative policy. The enforceable statements live in [`rules/`](../rules/README.md); these pages
+are the reasoning, the detail, and the how.
+
+```text
+rules/       what must be true, with an ID you can cite
+standard/    why, and how to do it
+checklists/  what to walk through before calling something done
+```
+
+| Area | Where | Covers |
+|---|---|---|
+| Engineering | [`engineering/`](engineering/README.md) | Architecture, security (OWASP ASVS 5.0), database, API, testing, devops, observability, performance, privacy, payments, AI features |
+| Design | [`design/`](design/README.md) | UX, UI, accessibility (WCAG 2.2), states, components, data display, localisation, responsive, interaction, anti-patterns |
+| Memory | [`../MEMORY.md`](../MEMORY.md) | Living project memory: registries, sweep discipline, impact map, freshness |
+| Agent | [`../AGENTS.md`](../AGENTS.md) | The work contract every agent operates under |
+
+## Reading order
+
+1. [`../AGENTS.md`](../AGENTS.md) — the contract
+2. [`../PRINCIPLES.md`](../PRINCIPLES.md) — what never changes
+3. The domain page for what you are touching
+4. The matching checklist in [`../checklists/`](../checklists/README.md)
+5. The rule IDs you will cite in the report
+
+## Adding to the standard
+
+A new page here is guidance, not obligation. If it states something a project must do, it needs
+a rule with an ID under [`rules/`](../rules/README.md), a source, and a validation method — see
+[`../GOVERNANCE.md`](../GOVERNANCE.md).

package/standard/design/README.md

@@ -0,0 +1,51 @@
+# Design standard
+
+UX, UI, accessibility and design-system policy for every user-facing surface. The enforceable
+statements are the `A11Y-*`, `UX-*`, `UI-*`, `CMP-*`, `STATE-*`, `DATA-*`, `RWD-*`, `INT-*`,
+`I18N-*`, `DS-*`, `MOT-*` and `CNT-*` rules in [`../../rules/README.md`](../../rules/README.md).
+
+```text
+FOUNDATION (tokens, accessibility baseline)
+   ↓
+UX (jobs, flows, information architecture)
+   ↓
+UI (visual system)
+   ↓
+COMPONENTS → PATTERNS → SCREENS
+   ↓
+VALIDATION (checklists, accessibility, handoff)
+```
+
+A pretty button does not fix a broken flow.
+
+| Area | Pages |
+|---|---|
+| Principles | [`principles/`](principles/design-principles.md), [`ux-principles.md`](principles/ux-principles.md), [`ui-principles.md`](principles/ui-principles.md) |
+| Accessibility | [`accessibility/`](accessibility/wcag-2.2.md) — names, keyboard, focus, contrast, target size, reflow, motion, screen readers, testing |
+| UX | [`ux/`](ux/heuristics.md) — heuristics, forms, errors, feedback, navigation, information architecture, cognitive load |
+| UI | [`ui/`](ui/visual-design.md) — colour, typography, spacing, layout, grids, icons, imagery |
+| Components | [`components/`](components/buttons.md) — buttons, forms, dialogs, tables, navigation, feedback |
+| States | [`states/`](states/loading.md) — loading, empty, error, offline, permission-denied, read-only, stale, optimistic, unsaved changes |
+| Data display | [`data-display/`](data-display/README.md) — tables, currency, dates, numbers, density, sorting, filtering, pagination |
+| Responsive | [`responsive/`](responsive/mobile.md), [`platforms/`](platforms/README.md), [`interaction/`](interaction/README.md) |
+| Localisation | [`localization/`](localization/README.md) — i18n, RTL, pluralisation, text expansion, formats |
+| Design system | [`design-system/`](design-system/tokens.md) — tokens, components, naming, variants, versioning |
+| Anti-patterns | [`anti-patterns/`](anti-patterns/ui.md) — including [`ai-generated.md`](anti-patterns/ai-generated.md) |
+| Content | [`content/`](content/ux-writing.md) — UX writing, error messages |
+| Motion | [`motion/animation.md`](motion/animation.md) |
+| AI review | [`ai/`](ai/instructions.md) — review protocol, compliance format, prompts |
+| Health | [`health/`](health/maturity-model.md) — coverage, score, maturity |
+| Decisions | [`decisions/`](decisions/README.md) — token naming, radius scale, colour system, component versioning |
+
+Sources: [`REFERENCES.md`](REFERENCES.md) and [`references/`](references/w3c.md).
+
+## Non-negotiable for any UI change
+
+1. Prefer existing tokens and components over new one-offs (`DS-001`, `DS-002`, `UI-003`, `UI-005`)
+2. Every interactive control has an accessible name, a keyboard path and visible focus
+   (`A11Y-001`, `A11Y-004`, `A11Y-006`)
+3. Labels are persistent, never placeholder-only (`UX-007`)
+4. Meaning is never carried by colour alone (`UI-004`)
+5. States are complete: default, hover, focus, active, disabled, loading, empty, error, success —
+   plus permission-denied and offline where they can occur (`STATE-001`, `STATE-002`, `STATE-003`)
+6. Never claim WCAG conformance without contrast, keyboard and accessible-name evidence

package/standard/design/REFERENCES.md

@@ -0,0 +1,39 @@
+# Reference stack for UX/UI, accessibility and design systems
+
+There is **no single “OWASP for design”**. This repository defines an **operational standard** derived from normative standards, UX research, established design systems, and web platform guidance. It is **not** itself an international normative body.
+
+## Hierarchy
+
+```text
+LEVEL 1 — NORMATIVE
+  W3C WCAG 2.2
+  W3C WAI-ARIA + APG
+
+LEVEL 2 — UX RESEARCH / GUIDELINES
+  Nielsen Norman Group
+
+LEVEL 3 — PROVEN DESIGN SYSTEMS
+  GOV.UK · USWDS · IBM Carbon · Material · Atlassian · Primer
+
+LEVEL 4 — ARCHITECTURE / TOOLING REFERENCES
+  OpenUI · W3C Design Tokens (DTCG) · Figma SDS (patterns) · Storybook
+```
+
+## Links
+
+- [WCAG 2.2](https://www.w3.org/TR/WCAG22/)
+- [WAI-ARIA](https://www.w3.org/TR/wai-aria/)
+- [ARIA APG](https://www.w3.org/WAI/ARIA/apg/)
+- [NN/g Heuristics](https://www.nngroup.com/articles/ten-usability-heuristics/)
+- [GOV.UK Design System](https://design-system.service.gov.uk/)
+- [USWDS](https://designsystem.digital.gov/)
+- [IBM Carbon](https://carbondesignsystem.com/)
+- [Material Design](https://m3.material.io/)
+- [Atlassian Design](https://atlassian.design/)
+- [Primer](https://primer.style/)
+- [OpenUI](https://open-ui.org/)
+- [Design Tokens](https://www.w3.org/community/design-tokens/)
+- [Figma SDS](https://github.com/figma/sds)
+- [Storybook](https://storybook.js.org/)
+
+Details: [`references/`](references/). Traceability: [`compliance/TRACEABILITY.md`](../../compliance/TRACEABILITY.md).

package/standard/design/accessibility/aria.md

@@ -0,0 +1,7 @@
+# Aria
+
+Canonical rules:
+
+- [A11Y-001](../../../rules/accessibility/A11Y-001.md)
+- [A11Y-002](../../../rules/accessibility/A11Y-002.md)
+- [A11Y-003](../../../rules/accessibility/A11Y-003.md)

package/standard/design/accessibility/contrast.md

@@ -0,0 +1,6 @@
+# Contrast
+
+Canonical rules:
+
+- [A11Y-008](../../../rules/accessibility/A11Y-008.md)
+- [A11Y-009](../../../rules/accessibility/A11Y-009.md)

package/standard/design/accessibility/focus.md

@@ -0,0 +1,6 @@
+# Focus
+
+Canonical rules:
+
+- [A11Y-006](../../../rules/accessibility/A11Y-006.md)
+- [A11Y-007](../../../rules/accessibility/A11Y-007.md)

package/standard/design/accessibility/forms.md

@@ -0,0 +1,3 @@
+# forms
+
+See UX-007…UX-009 and accessibility focus management on errors.

package/standard/design/accessibility/keyboard.md

@@ -0,0 +1,6 @@
+# Keyboard
+
+Canonical rules:
+
+- [A11Y-004](../../../rules/accessibility/A11Y-004.md)
+- [A11Y-005](../../../rules/accessibility/A11Y-005.md)

package/standard/design/accessibility/reduced-motion.md

@@ -0,0 +1,3 @@
+# reduced-motion
+
+A11Y-012.

package/standard/design/accessibility/reflow.md

@@ -0,0 +1,3 @@
+# reflow
+
+A11Y-011 / WCAG 1.4.10.

package/standard/design/accessibility/screen-readers.md

@@ -0,0 +1,3 @@
+# screen-readers
+
+Test critical flows with at least one SR (VoiceOver, NVDA, or TalkBack). Names/roles/values must make sense in order.

package/standard/design/accessibility/target-size.md

@@ -0,0 +1,3 @@
+# target-size
+
+A11Y-010 / WCAG 2.5.8.

package/standard/design/accessibility/testing.md

@@ -0,0 +1,3 @@
+# testing
+
+Automate axe/lighthouse a11y where possible; manual keyboard + SR for composites.

package/standard/design/accessibility/wcag-2.2.md

@@ -0,0 +1,16 @@
+# WCAG 2.2 baseline
+
+Target **WCAG 2.2 Level AA** unless a product explicitly documents a different bar.
+
+Primary source: [WCAG 2.2](https://www.w3.org/TR/WCAG22/).
+
+This folder translates selected SCs into engineering/design rules. It is **not** a full audit checklist substitute for formal conformance claims.
+
+Key themes we enforce as MUST in product UI:
+
+- Perceivable: text alternatives, contrast, reflow
+- Operable: keyboard, focus visible, targets, seziures/motion
+- Understandable: labels, errors, consistent nav
+- Robust: name/role/value (ARIA)
+
+See also: `contrast.md`, `keyboard.md`, `focus.md`, `aria.md`.

package/standard/design/accessibility/zoom.md

@@ -0,0 +1,3 @@
+# zoom
+
+Content usable at 200% zoom (WCAG 1.4.4). Prefer reflow over truncated controls.

package/standard/design/ai/ai-design-rules.md

@@ -0,0 +1,8 @@
+# AI design rules
+
+- Never invent a parallel palette when tokens exist
+- Never remove focus outlines
+- Never use placeholder-only labels
+- Prefer system components over new CSS islands
+- When generating UI, include empty/loading/error states
+- Cite rule IDs (e.g. `A11Y-FOCUS-001`) in PR/compliance summaries

package/standard/design/ai/anti-patterns.md

@@ -0,0 +1 @@
+See [`../anti-patterns/ai-generated.md`](../anti-patterns/ai-generated.md).

package/standard/design/ai/compliance-format.md

@@ -0,0 +1,22 @@
+# Compliance output format
+
+```text
+DESIGN REVIEW
+
+Status: PASS | FAIL | PASS WITH WARNINGS
+
+Violations:
+- RULE-ID — short reason
+
+Warnings:
+- RULE-ID — short reason
+
+Passed:
+<count>
+
+Failed:
+<count>
+
+Not verified:
+<count> — list
+```

package/standard/design/ai/design-review.md

@@ -0,0 +1,10 @@
+# AI-assisted design review
+
+Agents reviewing UI MUST check:
+
+1. Token usage vs one-offs
+2. State coverage
+3. Focus + names + labels
+4. Contrast risks
+5. Responsive 320px / desktop
+6. Rule IDs failed/passed

package/standard/design/ai/evals/README.md

@@ -0,0 +1 @@
+Store golden eval cases (fixture descriptions → expected violations) in product repos or future `evals/` datasets.

package/standard/design/ai/instructions.md

@@ -0,0 +1,7 @@
+# AI instructions
+
+1. Load `AGENTS.md` + relevant `rules/**`
+2. Prefer citing **rule IDs**
+3. Never invent parallel tokens
+4. Return the compliance format in `compliance-format.md`
+5. List **Not verified** explicitly

package/standard/design/ai/prompts/accessibility-review.md

@@ -0,0 +1,5 @@
+# Prompt — accessibility-review
+
+Review the provided UI/diff against `rules/` and return the DESIGN REVIEW format from `ai/compliance-format.md`.
+Focus domain: **accessibility**.
+List Not verified for anything you could not test.

package/standard/design/ai/prompts/design-system-review.md

@@ -0,0 +1,5 @@
+# Prompt — design-system-review
+
+Review the provided UI/diff against `rules/` and return the DESIGN REVIEW format from `ai/compliance-format.md`.
+Focus domain: **design-system**.
+List Not verified for anything you could not test.

package/standard/design/ai/prompts/ui-review.md

@@ -0,0 +1,5 @@
+# Prompt — ui-review
+
+Review the provided UI/diff against `rules/` and return the DESIGN REVIEW format from `ai/compliance-format.md`.
+Focus domain: **ui**.
+List Not verified for anything you could not test.

package/standard/design/ai/prompts/ux-review.md

@@ -0,0 +1,5 @@
+# Prompt — ux-review
+
+Review the provided UI/diff against `rules/` and return the DESIGN REVIEW format from `ai/compliance-format.md`.
+Focus domain: **ux**.
+List Not verified for anything you could not test.

package/standard/design/ai/review-protocol.md

@@ -0,0 +1,11 @@
+# Review protocol
+
+```text
+1. Identify surface (web/mobile/tablet/desktop)
+2. Identify input methods
+3. Collect applicable MUST rules
+4. Check states matrix
+5. Check a11y (name, keyboard, focus, contrast)
+6. Check tokens/components
+7. Emit DESIGN REVIEW report
+```

package/standard/design/anti-patterns/accessibility.md

@@ -0,0 +1,7 @@
+# Anti-patterns — accessibility
+
+- ❌ Placeholder-as-label
+- ❌ outline:none without replacement
+- ❌ Color-only state
+- ❌ Icon-only action without name
+- ❌ Div soup buttons

package/standard/design/anti-patterns/ai-generated.md

@@ -0,0 +1,6 @@
+# Anti-patterns — ai-generated
+
+- ❌ Generic ‘AI slop’ aesthetics replacing tokens
+- ❌ Screenshot cloning without tokens
+- ❌ Skeleton everywhere forever
+- ❌ Fake charts as decoration

package/standard/design/anti-patterns/dashboards.md

@@ -0,0 +1,5 @@
+# Anti-patterns — dashboards
+
+- ❌ Infinite dashboard cards
+- ❌ Metrics without context or period
+- ❌ Everything equal weight

package/standard/design/anti-patterns/forms.md

@@ -0,0 +1,5 @@
+# Anti-patterns — forms
+
+- ❌ Placeholder-as-label
+- ❌ Errors only in toasts
+- ❌ Required marked by color alone

package/standard/design/anti-patterns/responsive.md

@@ -0,0 +1,5 @@
+# Anti-patterns — responsive
+
+- ❌ Tiny touch targets
+- ❌ Hover-only critical actions
+- ❌ Desktop-only tables with no mobile strategy

package/standard/design/anti-patterns/ui.md

@@ -0,0 +1,6 @@
+# Anti-patterns — ui
+
+- ❌ Excessive gradients / glow as decoration
+- ❌ Random border-radius per component
+- ❌ Arbitrary spacing outside the scale
+- ❌ Decorative UI without purpose

package/standard/design/anti-patterns/ux.md

@@ -0,0 +1,5 @@
+# Anti-patterns — ux
+
+- ❌ Infinite dashboard cards with no primary job
+- ❌ Unnecessary modal for simple confirms that could be inline
+- ❌ Dead ends without recovery

package/standard/design/components/buttons.md

@@ -0,0 +1,6 @@
+# Buttons
+
+Canonical rules:
+
+- [CMP-001](../../../rules/components/CMP-001.md)
+- [CMP-002](../../../rules/components/CMP-002.md)

package/standard/design/components/dialogs.md

@@ -0,0 +1,5 @@
+# Dialogs
+
+Canonical rules:
+
+- [CMP-005](../../../rules/components/CMP-005.md)

package/standard/design/components/feedback.md

@@ -0,0 +1,3 @@
+# Feedback components
+
+Toasts/alerts MUST be reachable to AT (polite/assertive live regions as appropriate). Do not rely on color alone. Destructive confirms follow `ux/errors.md`.

package/standard/design/components/forms.md

@@ -0,0 +1,3 @@
+# Form controls
+
+See [`ux/forms.md`](../ux/forms.md). Controls MUST support: default, hover, focus, disabled, invalid, readonly (as applicable).

package/standard/design/components/navigation.md

@@ -0,0 +1,3 @@
+# Navigation components
+
+See `ux/navigation.md`. Landmark roles: `header`, `nav`, `main`, `footer` as appropriate. One `main` per page.

package/standard/design/components/tables.md

@@ -0,0 +1,6 @@
+# Tables
+
+Canonical rules:
+
+- [CMP-003](../../../rules/components/CMP-003.md)
+- [CMP-004](../../../rules/components/CMP-004.md)

package/standard/design/content/error-messages.md

@@ -0,0 +1,4 @@
+# Error messages
+
+Pattern: **what happened** + **how to fix** (+ optional reference id).
+No blame. No raw exceptions. See `ux/errors.md`.

package/standard/design/content/ux-writing.md

@@ -0,0 +1,5 @@
+# Ux Writing
+
+Canonical rules:
+
+- [CNT-001](../../../rules/content/CNT-001.md)

package/standard/design/data-display/README.md

@@ -0,0 +1,5 @@
+# Data display
+
+Rules: `rules/data-display/` (DATA-001…).
+
+Guidance files: numbers, currency, dates, tables, sorting, filtering, pagination, density, localization of data.

package/standard/design/data-display/currency.md

@@ -0,0 +1,3 @@
+# currency
+
+DATA-001 — always include currency context.

package/standard/design/data-display/dates.md

@@ -0,0 +1,3 @@
+# dates
+
+DATA-002 — unambiguous dates.

package/standard/design/data-display/density.md

@@ -0,0 +1,3 @@
+# density
+
+Comfortable vs compact densitites as tokens; don’t invent per-page densitites.

package/standard/design/data-display/filtering.md

@@ -0,0 +1,3 @@
+# filtering
+
+DATA-004 — visible filters + clear.

package/standard/design/data-display/localization.md

@@ -0,0 +1,3 @@
+# localization
+
+Data formatting follows locale; see localization/.

package/standard/design/data-display/numbers.md

@@ -0,0 +1,3 @@
+# numbers
+
+Locale-aware grouping; consistent decimals in a column.

package/standard/design/data-display/pagination.md

@@ -0,0 +1,3 @@
+# pagination
+
+Show range and total when known; don’t hide page size if relevant.

package/standard/design/data-display/percentages.md

@@ -0,0 +1,3 @@
+# percentages
+
+Clarify 0–1 vs 0–100; don’t mix.

package/standard/design/data-display/sorting.md

@@ -0,0 +1,3 @@
+# sorting
+
+Indicate active sort column/direction.

package/standard/design/data-display/tables.md

@@ -0,0 +1,3 @@
+# tables
+
+See CMP-003, CMP-004, DATA-003, DATA-004.

package/standard/design/data-display/time.md

@@ -0,0 +1,3 @@
+# time
+
+Include timezone when events cross zones.

package/standard/design/decisions/ADR-001-token-naming.md

@@ -0,0 +1,13 @@
+# ADR-001: Token naming
+
+## Decision
+
+Use `{category}.{role}.{variant}.{state?}` semantic names; primitives separate.
+
+## Status
+
+Accepted
+
+## Consequences
+
+Components bind to semantic tokens (DS-002). Renames are major versions (DS-003).