@ttoss/fsl-theme 1.1.21 → 2.0.0

package/dist/{createTheme-DzLnsknT.mjs → createTheme-B6tVIikC.mjs}

@@ -1,5 +1,5 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
-import { c as validateRefs, r as deepMerge } from "./helpers-CA4Qkxct.mjs";
+import { a as flattenTheme, r as deepMerge, t as COMPOUND_REF_RE } from "./helpers-BXaKe2s3.mjs";
 
 //#region src/baseTheme.ts
 /**
@@ -7,6 +7,33 @@ import { c as validateRefs, r as deepMerge } from "./helpers-CA4Qkxct.mjs";
 *
 * System fonts, gray palette, and balanced proportions. Serves as the
 * canonical base that all other themes extend via `createTheme`.
+*
+* ## Theme brief
+*
+* Every value in this file is chosen so that the resolved bundle satisfies
+* this brief. Changes that contradict the brief belong in a different theme,
+* not in `baseTheme`.
+*
+* ```yaml
+* name: base
+* purpose: default built-in foundation for modern product UI
+* primaryPosture: productive
+* secondaryPosture: calm
+* densityProfile: balanced
+* readingMode: mixed
+* pointerProfile: hybrid
+* interactionRisk: medium
+* surfaceModel: lightly-layered
+* brandEnergy: quiet
+* accessibilityTarget: AA+
+* colorModeStrategy: dark-supported
+* platformBias: web
+* ```
+*
+* Intended feel: practical, calm, modern, trustworthy, easy to extend.
+* Avoided feel: flashy, ornamental, cramped, fragile, overly branded.
+*
+* @see /docs/website/docs/design/design-system/design-tokens/theme-authoring.md#recommended-base-theme-brief
 */
 var baseTheme = {
   core: {
@@ -1077,23 +1104,23 @@ var baseTheme = {
     spacing: {
       inset: {
         control: {
-          sm: "{core.spacing.2}",
-          md: "{core.spacing.3}",
-          lg: "{core.spacing.4}"
-        },
-        surface: {
           sm: "{core.spacing.3}",
           md: "{core.spacing.4}",
           lg: "{core.spacing.6}"
+        },
+        surface: {
+          sm: "{core.spacing.4}",
+          md: "{core.spacing.6}",
+          lg: "{core.spacing.8}"
         }
       },
       gap: {
         stack: {
           xs: "{core.spacing.2}",
-          sm: "{core.spacing.3}",
-          md: "{core.spacing.4}",
-          lg: "{core.spacing.6}",
-          xl: "{core.spacing.8}"
+          sm: "{core.spacing.4}",
+          md: "{core.spacing.6}",
+          lg: "{core.spacing.8}",
+          xl: "{core.spacing.12}"
         },
         inline: {
           xs: "{core.spacing.1}",
@@ -1104,12 +1131,12 @@ var baseTheme = {
         }
       },
       gutter: {
-        page: "clamp({core.spacing.4}, {core.spacing.6}, {core.spacing.12})",
-        section: "clamp({core.spacing.3}, {core.spacing.4}, {core.spacing.12})"
+        page: "clamp({core.spacing.6}, {core.spacing.12}, {core.spacing.16})",
+        section: "clamp({core.spacing.4}, {core.spacing.8}, {core.spacing.16})"
       },
       separation: {
         interactive: {
-          min: "clamp(8px, {core.spacing.2}, 12px)"
+          min: "clamp(8px, {core.spacing.3}, 16px)"
         }
       }
     },
@@ -1714,6 +1741,96 @@ var darkAlternate = {
     }
   }
 };
+/**
+* Design brief for the base theme — the recommended default from
+* theme-authoring.md §"Recommended base theme brief". Attached to the base
+* bundle via `createTheme({ brief })`; carries the `FSL-DESIGN-001..003` gate.
+*/
+var baseBrief = {
+  name: "base",
+  purpose: "default built-in foundation for modern product UI",
+  primaryPosture: "productive",
+  secondaryPosture: "calm",
+  densityProfile: "balanced",
+  readingMode: "mixed",
+  pointerProfile: "hybrid",
+  interactionRisk: "medium",
+  surfaceModel: "lightly-layered",
+  brandEnergy: "quiet",
+  accessibilityTarget: "AA+",
+  colorModeStrategy: "dark-supported",
+  platformBias: "web"
+};
+
+//#endregion
+//#region src/roots/validateRefs.ts
+/**
+* Compute the Levenshtein edit distance between two strings.
+* Used exclusively by `validateRefs` to power "did you mean?" suggestions.
+*/
+var levenshtein = (a, b) => {
+  const m = a.length;
+  const n = b.length;
+  const dp = Array.from({
+    length: m + 1
+  }, () => {
+    return Array.from({
+      length: n + 1
+    }, () => {
+      return 0;
+    });
+  });
+  for (let i = 0; i <= m; i++) dp[i][0] = i;
+  for (let j = 0; j <= n; j++) dp[0][j] = j;
+  for (let i = 1; i <= m; i++) for (let j = 1; j <= n; j++) dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+  return dp[m][n];
+};
+/**
+* Validate that every `{ref}` in the merged theme points to an existing path.
+* Emits `console.warn` for each broken reference with a "did you mean?" suggestion.
+*
+* **DEV-only** — callers gate this behind `process.env.NODE_ENV !== 'production'`
+* so bundlers tree-shake the entire call in production builds.
+*/
+var validateRefs = theme => {
+  const {
+    core,
+    semantic
+  } = flattenTheme(theme);
+  const all = {
+    ...core,
+    ...semantic
+  };
+  const allKeys = Object.keys(all);
+  const findSuggestion = (refPath, candidates) => {
+    if (candidates.length === 0) return "";
+    let bestDist = Infinity;
+    let bestKey = "";
+    for (const candidate of candidates) {
+      const dist = levenshtein(refPath, candidate);
+      if (dist < bestDist) {
+        bestDist = dist;
+        bestKey = candidate;
+      }
+    }
+    if (bestDist <= Math.ceil(refPath.length * .4)) return `\n   Did you mean '{${bestKey}}'?`;
+    return "";
+  };
+  for (const [ownerKey, value] of Object.entries(all)) {
+    if (typeof value !== "string" || !value.includes("{")) continue;
+    let match;
+    const re = new RegExp(COMPOUND_REF_RE.source, COMPOUND_REF_RE.flags);
+    while ((match = re.exec(value)) !== null) {
+      const refPath = match[1];
+      if (all[refPath] !== void 0) continue;
+      const prefix = refPath.split(".")[0];
+      const suggestion = findSuggestion(refPath, allKeys.filter(k => {
+        return k.startsWith(prefix + ".");
+      }));
+      console.warn(`[fsl-theme] Invalid token reference '{${refPath}}' at path '${ownerKey}'.${suggestion}`);
+    }
+  }
+};
 
 //#endregion
 //#region src/createTheme.ts
@@ -1783,20 +1900,25 @@ var createTheme = ({
   baseMode,
   base,
   overrides,
-  alternate
+  alternate,
+  brief
 } = {}) => {
   const resolvedBase = base ?? parentBundle?.base;
   const resolvedBaseMode = baseMode ?? parentBundle?.baseMode ?? "light";
   const resolvedAlternate = resolveAlternate(alternate, parentBundle);
+  const resolvedMeta = brief ?? parentBundle?.meta;
   return {
     baseMode: resolvedBaseMode,
     base: buildTheme({
       base: resolvedBase,
       overrides
     }),
-    alternate: resolvedAlternate
+    alternate: resolvedAlternate,
+    ...(resolvedMeta ? {
+      meta: resolvedMeta
+    } : {})
   };
 };
 
 //#endregion
-export { darkAlternate as i, createTheme as n, baseTheme as r, buildTheme as t };
+export { darkAlternate as a, baseTheme as i, createTheme as n, baseBrief as r, buildTheme as t };

package/dist/css.cjs

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, {
   value: 'Module'
 });
-const require_helpers = require('./helpers-C29fy-Ad.cjs');
-const require_toCssVars = require('./toCssVars-CUiqx2kh.cjs');
+const require_helpers = require('./helpers-BU40JvFA.cjs');
+const require_toCssVars = require('./toCssVars-BseqmMcT.cjs');
 
 //#region src/css.ts
 /**

package/dist/css.d.cts

@@ -1,5 +1,5 @@
 
-import { i as ThemeTokens, r as ThemeBundle } from "./Types-BiBa17RL.cjs";
+import { a as ThemeTokens, i as ThemeBundle } from "./Types-BkaxtsMv.cjs";
 
 //#region src/roots/helpers.d.ts
 /**

package/dist/css.d.mts

@@ -1,5 +1,5 @@
 
-import { i as ThemeTokens, r as ThemeBundle } from "./Types-BiBa17RL.mjs";
+import { a as ThemeTokens, i as ThemeBundle } from "./Types-BkaxtsMv.mjs";
 
 //#region src/roots/helpers.d.ts
 /**

package/dist/css.mjs

@@ -1,6 +1,6 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
-import { s as toFlatTokens } from "./helpers-CA4Qkxct.mjs";
-import { n as toCssVars, t as toCssVarName } from "./toCssVars-BHRiSykR.mjs";
+import { s as toFlatTokens } from "./helpers-BXaKe2s3.mjs";
+import { n as toCssVars, t as toCssVarName } from "./toCssVars-C-9yIZDR.mjs";
 
 //#region src/css.ts
 /**

package/dist/dataviz/index.cjs

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, {
   value: 'Module'
 });
-const require_react = require('../react-CoWIQYx_.cjs');
-const require_withDataviz = require('../withDataviz-BlJcYhcw.cjs');
+const require_react = require('../react-DLB8nrXQ.cjs');
+const require_withDataviz = require('../withDataviz-CYRf4exT.cjs');
 
 //#region src/dataviz/useDatavizTokens.ts
 /**

package/dist/dataviz/index.d.cts

@@ -1,5 +1,5 @@
 
-import { o as CoreDataviz, r as ThemeBundle, s as SemanticDataviz } from "../Types-BiBa17RL.cjs";
+import { c as SemanticDataviz, i as ThemeBundle, s as CoreDataviz } from "../Types-BkaxtsMv.cjs";
 
 //#region src/dataviz/baseTheme.d.ts
 /**

package/dist/dataviz/index.d.mts

@@ -1,5 +1,5 @@
 
-import { o as CoreDataviz, r as ThemeBundle, s as SemanticDataviz } from "../Types-BiBa17RL.mjs";
+import { c as SemanticDataviz, i as ThemeBundle, s as CoreDataviz } from "../Types-BkaxtsMv.mjs";
 
 //#region src/dataviz/baseTheme.d.ts
 /**

package/dist/dataviz/index.mjs

@@ -1,5 +1,5 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
-import { n as coreDataviz, r as semanticDataviz, t as withDataviz } from "../withDataviz-DYV1S_xr.mjs";
+import { n as coreDataviz, r as semanticDataviz, t as withDataviz } from "../withDataviz-BvpZJnFx.mjs";
 import { useTokens } from "../react.mjs";
 
 //#region src/dataviz/useDatavizTokens.ts

package/dist/dtcg.cjs

@@ -2,8 +2,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, {
   value: 'Module'
 });
-const require_helpers = require('./helpers-C29fy-Ad.cjs');
-const require_tokenRegistry = require('./tokenRegistry-B9zMRjpL.cjs');
+const require_helpers = require('./helpers-BU40JvFA.cjs');
+const require_tokenRegistry = require('./tokenRegistry-f_Bx_BAN.cjs');
 
 //#region src/roots/toDTCG.ts
 /**
@@ -26,12 +26,20 @@ const require_tokenRegistry = require('./tokenRegistry-B9zMRjpL.cjs');
 *
 * Motion leaves (SemanticMotionEntry) overridden separately:
 * - `.duration`     → 'duration'
+*
+* Border / focus line widths resolve to a `dimension` (`1px`, `2px`) but sit
+* under the untyped `semantic.border.` / `semantic.focus.` prefixes:
+* - `.width`        → 'dimension'
+*/
+var SUFFIX_TYPE_OVERRIDES = [[".duration", "duration"], [".fontFamily", "fontFamily"], [".fontSize", "dimension"], [".fontWeight", "fontWeight"], [".lineHeight", "number"], [".letterSpacing", "dimension"], [".width", "dimension"], [".ring.color", "color"]];
+/**
+* Infer the DTCG `$type` for a token path, or `undefined` when the token is
+* opaque (keyword/curve/dash-string) and has no valid DTCG scalar type — in
+* which case `toDTCG` omits `$type` rather than emitting an invalid one.
 */
-var SUFFIX_TYPE_OVERRIDES = [[".duration", "duration"], [".fontFamily", "fontFamily"], [".fontSize", "dimension"], [".fontWeight", "fontWeight"], [".lineHeight", "number"], [".letterSpacing", "dimension"], [".ring.color", "color"]];
-var inferType = path => {
+var inferDtcgType = path => {
   for (const [suffix, type] of SUFFIX_TYPE_OVERRIDES) if (path.endsWith(suffix)) return type;
   for (const [prefix, type] of require_tokenRegistry.DTCG_TYPE_PREFIXES) if (path.startsWith(prefix)) return type;
-  return "string";
 };
 /**
 * Set a value at a dot-path in a nested object, creating intermediate
@@ -71,8 +79,16 @@ var buildHitExtension = (step, theme) => {
 * Root 3 — W3C Design Tokens (DTCG JSON).
 *
 * Convert a `ThemeTokens` into a structured token tree following the
-* W3C Design Tokens Community Group format. Every leaf node has `$value`
-* (fully resolved) and `$type` (inferred from the token path).
+* W3C Design Tokens Community Group format (2025.10). Every leaf has a
+* `$value`; `$type` is inferred from the token path and **omitted** for opaque
+* tokens with no valid DTCG scalar type (`$type` is optional per spec).
+*
+* **Profile:** this emits **fully-resolved scalar tokens** — `$value`s are
+* concrete (no `{alias}` refs) and composite shapes (typography, shadow,
+* border, transition) are emitted as their individual scalar leaves, not as
+* DTCG composite objects. This is a conformant DTCG profile; richer
+* alias-preserving / composite output is a deferred enhancement (see
+* CONTRIBUTING.md ADR-013).
 *
 * Semantic hit tokens (`semantic.sizing.hit.*`) include a `$extensions`
 * field declaring their coarse-pointer override value, so non-CSS consumers
@@ -98,10 +114,11 @@ var toDTCG = theme => {
   const flat = require_helpers.toFlatTokens(theme);
   const tree = {};
   for (const [path, value] of Object.entries(flat)) {
+    const dtcgType = inferDtcgType(path);
     const token = {
-      $value: value,
-      $type: inferType(path)
+      $value: value
     };
+    if (dtcgType !== void 0) token.$type = dtcgType;
     if (path.startsWith(SEMANTIC_HIT_PREFIX)) {
       const ext = buildHitExtension(path.slice(20), theme);
       if (ext) token.$extensions = ext;

package/dist/dtcg.d.cts

@@ -1,5 +1,5 @@
 
-import { i as ThemeTokens } from "./Types-BiBa17RL.cjs";
+import { a as ThemeTokens } from "./Types-BkaxtsMv.cjs";
 
 //#region src/roots/toDTCG.d.ts
 /**
@@ -10,7 +10,12 @@ import { i as ThemeTokens } from "./Types-BiBa17RL.cjs";
  */
 interface DTCGToken {
   $value: string | number;
-  $type: string;
+  /**
+   * W3C DTCG type. **Optional** — omitted for opaque/keyword tokens that have
+   * no valid DTCG scalar type (`$type` is optional in the DTCG spec). There is
+   * no `'string'` DTCG type; emitting one would break conformant importers.
+   */
+  $type?: string;
   $extensions?: Record<string, unknown>;
 }
 /**
@@ -23,8 +28,16 @@ type DTCGTokenTree = DTCGToken | {
  * Root 3 — W3C Design Tokens (DTCG JSON).
  *
  * Convert a `ThemeTokens` into a structured token tree following the
- * W3C Design Tokens Community Group format. Every leaf node has `$value`
- * (fully resolved) and `$type` (inferred from the token path).
+ * W3C Design Tokens Community Group format (2025.10). Every leaf has a
+ * `$value`; `$type` is inferred from the token path and **omitted** for opaque
+ * tokens with no valid DTCG scalar type (`$type` is optional per spec).
+ *
+ * **Profile:** this emits **fully-resolved scalar tokens** — `$value`s are
+ * concrete (no `{alias}` refs) and composite shapes (typography, shadow,
+ * border, transition) are emitted as their individual scalar leaves, not as
+ * DTCG composite objects. This is a conformant DTCG profile; richer
+ * alias-preserving / composite output is a deferred enhancement (see
+ * CONTRIBUTING.md ADR-013).
  *
  * Semantic hit tokens (`semantic.sizing.hit.*`) include a `$extensions`
  * field declaring their coarse-pointer override value, so non-CSS consumers

package/dist/dtcg.d.mts

@@ -1,5 +1,5 @@
 
-import { i as ThemeTokens } from "./Types-BiBa17RL.mjs";
+import { a as ThemeTokens } from "./Types-BkaxtsMv.mjs";
 
 //#region src/roots/toDTCG.d.ts
 /**
@@ -10,7 +10,12 @@ import { i as ThemeTokens } from "./Types-BiBa17RL.mjs";
  */
 interface DTCGToken {
   $value: string | number;
-  $type: string;
+  /**
+   * W3C DTCG type. **Optional** — omitted for opaque/keyword tokens that have
+   * no valid DTCG scalar type (`$type` is optional in the DTCG spec). There is
+   * no `'string'` DTCG type; emitting one would break conformant importers.
+   */
+  $type?: string;
   $extensions?: Record<string, unknown>;
 }
 /**
@@ -23,8 +28,16 @@ type DTCGTokenTree = DTCGToken | {
  * Root 3 — W3C Design Tokens (DTCG JSON).
  *
  * Convert a `ThemeTokens` into a structured token tree following the
- * W3C Design Tokens Community Group format. Every leaf node has `$value`
- * (fully resolved) and `$type` (inferred from the token path).
+ * W3C Design Tokens Community Group format (2025.10). Every leaf has a
+ * `$value`; `$type` is inferred from the token path and **omitted** for opaque
+ * tokens with no valid DTCG scalar type (`$type` is optional per spec).
+ *
+ * **Profile:** this emits **fully-resolved scalar tokens** — `$value`s are
+ * concrete (no `{alias}` refs) and composite shapes (typography, shadow,
+ * border, transition) are emitted as their individual scalar leaves, not as
+ * DTCG composite objects. This is a conformant DTCG profile; richer
+ * alias-preserving / composite output is a deferred enhancement (see
+ * CONTRIBUTING.md ADR-013).
  *
  * Semantic hit tokens (`semantic.sizing.hit.*`) include a `$extensions`
  * field declaring their coarse-pointer override value, so non-CSS consumers

package/dist/dtcg.mjs

@@ -1,6 +1,6 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
-import { s as toFlatTokens } from "./helpers-CA4Qkxct.mjs";
-import { n as DTCG_TYPE_PREFIXES } from "./tokenRegistry-DolhB5Vf.mjs";
+import { s as toFlatTokens } from "./helpers-BXaKe2s3.mjs";
+import { n as DTCG_TYPE_PREFIXES } from "./tokenRegistry-DviyqDeE.mjs";
 
 //#region src/roots/toDTCG.ts
 /**
@@ -23,12 +23,20 @@ import { n as DTCG_TYPE_PREFIXES } from "./tokenRegistry-DolhB5Vf.mjs";
 *
 * Motion leaves (SemanticMotionEntry) overridden separately:
 * - `.duration`     → 'duration'
+*
+* Border / focus line widths resolve to a `dimension` (`1px`, `2px`) but sit
+* under the untyped `semantic.border.` / `semantic.focus.` prefixes:
+* - `.width`        → 'dimension'
+*/
+var SUFFIX_TYPE_OVERRIDES = [[".duration", "duration"], [".fontFamily", "fontFamily"], [".fontSize", "dimension"], [".fontWeight", "fontWeight"], [".lineHeight", "number"], [".letterSpacing", "dimension"], [".width", "dimension"], [".ring.color", "color"]];
+/**
+* Infer the DTCG `$type` for a token path, or `undefined` when the token is
+* opaque (keyword/curve/dash-string) and has no valid DTCG scalar type — in
+* which case `toDTCG` omits `$type` rather than emitting an invalid one.
 */
-var SUFFIX_TYPE_OVERRIDES = [[".duration", "duration"], [".fontFamily", "fontFamily"], [".fontSize", "dimension"], [".fontWeight", "fontWeight"], [".lineHeight", "number"], [".letterSpacing", "dimension"], [".ring.color", "color"]];
-var inferType = path => {
+var inferDtcgType = path => {
   for (const [suffix, type] of SUFFIX_TYPE_OVERRIDES) if (path.endsWith(suffix)) return type;
   for (const [prefix, type] of DTCG_TYPE_PREFIXES) if (path.startsWith(prefix)) return type;
-  return "string";
 };
 /**
 * Set a value at a dot-path in a nested object, creating intermediate
@@ -68,8 +76,16 @@ var buildHitExtension = (step, theme) => {
 * Root 3 — W3C Design Tokens (DTCG JSON).
 *
 * Convert a `ThemeTokens` into a structured token tree following the
-* W3C Design Tokens Community Group format. Every leaf node has `$value`
-* (fully resolved) and `$type` (inferred from the token path).
+* W3C Design Tokens Community Group format (2025.10). Every leaf has a
+* `$value`; `$type` is inferred from the token path and **omitted** for opaque
+* tokens with no valid DTCG scalar type (`$type` is optional per spec).
+*
+* **Profile:** this emits **fully-resolved scalar tokens** — `$value`s are
+* concrete (no `{alias}` refs) and composite shapes (typography, shadow,
+* border, transition) are emitted as their individual scalar leaves, not as
+* DTCG composite objects. This is a conformant DTCG profile; richer
+* alias-preserving / composite output is a deferred enhancement (see
+* CONTRIBUTING.md ADR-013).
 *
 * Semantic hit tokens (`semantic.sizing.hit.*`) include a `$extensions`
 * field declaring their coarse-pointer override value, so non-CSS consumers
@@ -95,10 +111,11 @@ var toDTCG = theme => {
   const flat = toFlatTokens(theme);
   const tree = {};
   for (const [path, value] of Object.entries(flat)) {
+    const dtcgType = inferDtcgType(path);
     const token = {
-      $value: value,
-      $type: inferType(path)
+      $value: value
     };
+    if (dtcgType !== void 0) token.$type = dtcgType;
     if (path.startsWith(SEMANTIC_HIT_PREFIX)) {
       const ext = buildHitExtension(path.slice(20), theme);
       if (ext) token.$extensions = ext;

package/dist/{helpers-C29fy-Ad.cjs → helpers-BU40JvFA.cjs}

@@ -1,8 +1,19 @@
 /** Powered by @ttoss/config. https://ttoss.dev/docs/modules/packages/config/ */
 //#region src/roots/helpers.ts
-/** Check if a value is a token reference like `{core.colors.brand.500}` */
+/**
+* Check if a value is a **pure** token reference like `{core.colors.brand.500}`.
+*
+* A pure ref is a single `{path}` with no interior braces. Compound expressions
+* (`clamp({a}, {b})`) and multi-ref strings (`{a} {b}`) are NOT pure refs — they
+* start `{`/end `}` but carry interior braces, and must go through the compound
+* resolution path instead. Without the interior-brace check `{a} {b}` would be
+* mis-parsed as the single path `a} {b`.
+*/
+var hasInteriorBraces = value => {
+  return value.indexOf("{", 1) !== -1 || value.indexOf("}") !== value.length - 1;
+};
 var isTokenRef = value => {
-  return typeof value === "string" && value.length > 2 && value.startsWith("{") && value.endsWith("}");
+  return typeof value === "string" && value.length > 2 && value.startsWith("{") && value.endsWith("}") && !hasInteriorBraces(value);
 };
 /** Extract the inner path from a token reference: `{core.colors.brand.500}` → `core.colors.brand.500` */
 var extractRefPath = ref => {
@@ -24,6 +35,14 @@ var isPlainObject = value => {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 };
 /**
+* Prototype-chain keys that must never be written from override data —
+* `result['__proto__']` reaches the prototype setter, not an own property.
+* Guards `createTheme`'s public `overrides` against prototype pollution.
+*/
+var isUnsafeMergeKey = key => {
+  return key === "__proto__" || key === "constructor" || key === "prototype";
+};
+/**
 * Recursively merges `overrides` into `base`.
 * - Plain objects are merged recursively.
 * - All other values (primitives, arrays) are replaced.
@@ -34,6 +53,7 @@ var deepMerge = (base, overrides) => {
     ...base
   };
   for (const key of Object.keys(overrides)) {
+    if (isUnsafeMergeKey(key)) continue;
     const baseVal = result[key];
     const overVal = overrides[key];
     if (overVal === void 0) continue;
@@ -69,73 +89,6 @@ var flattenTheme = theme => {
   };
 };
 /**
-* Compute the Levenshtein edit distance between two strings.
-* Used exclusively by `validateRefs` to power "did you mean?" suggestions.
-*/
-var levenshtein = (a, b) => {
-  const m = a.length;
-  const n = b.length;
-  const dp = Array.from({
-    length: m + 1
-  }, () => {
-    return Array.from({
-      length: n + 1
-    }, () => {
-      return 0;
-    });
-  });
-  for (let i = 0; i <= m; i++) dp[i][0] = i;
-  for (let j = 0; j <= n; j++) dp[0][j] = j;
-  for (let i = 1; i <= m; i++) for (let j = 1; j <= n; j++) dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
-  return dp[m][n];
-};
-/**
-* Validate that every `{ref}` in the merged theme points to an existing path.
-* Emits `console.warn` for each broken reference with a "did you mean?" suggestion.
-*
-* **DEV-only** — callers gate this behind `process.env.NODE_ENV !== 'production'`
-* so bundlers tree-shake the entire call in production builds.
-*/
-var validateRefs = theme => {
-  const {
-    core,
-    semantic
-  } = flattenTheme(theme);
-  const all = {
-    ...core,
-    ...semantic
-  };
-  const allKeys = Object.keys(all);
-  const findSuggestion = (refPath, candidates) => {
-    if (candidates.length === 0) return "";
-    let bestDist = Infinity;
-    let bestKey = "";
-    for (const candidate of candidates) {
-      const dist = levenshtein(refPath, candidate);
-      if (dist < bestDist) {
-        bestDist = dist;
-        bestKey = candidate;
-      }
-    }
-    if (bestDist <= Math.ceil(refPath.length * .4)) return `\n   Did you mean '{${bestKey}}'?`;
-    return "";
-  };
-  for (const [ownerKey, value] of Object.entries(all)) {
-    if (typeof value !== "string" || !value.includes("{")) continue;
-    let match;
-    const re = new RegExp(COMPOUND_REF_RE.source, COMPOUND_REF_RE.flags);
-    while ((match = re.exec(value)) !== null) {
-      const refPath = match[1];
-      if (all[refPath] !== void 0) continue;
-      const prefix = refPath.split(".")[0];
-      const suggestion = findSuggestion(refPath, allKeys.filter(k => {
-        return k.startsWith(prefix + ".");
-      }));
-      console.warn(`[fsl-theme] Invalid token reference '{${refPath}}' at path '${ownerKey}'.${suggestion}`);
-    }
-  }
-};
-/**
 * Flatten a `ThemeTokens` into a `Record<string, string | number>` with
 * every `{ref}` recursively resolved to its final raw value where possible.
 *
@@ -181,8 +134,8 @@ var toFlatTokens = (theme, options = {}) => {
   /**
   * Resolve all embedded `{path}` refs in a raw string expression.
   *
-  * Handles both pure refs (`{core.space.4}`) and compound expressions
-  * (`clamp({core.space.4}, {core.space.6}, {core.space.12})`).
+  * Handles both pure refs (`{core.spacing.4}`) and compound expressions
+  * (`clamp({core.spacing.4}, {core.spacing.6}, {core.spacing.12})`).
   */
   const resolveInline = (value, seen, ownerKey) => {
     return value.replace(COMPOUND_REF_RE, (_match, path) => {
@@ -195,7 +148,9 @@ var toFlatTokens = (theme, options = {}) => {
         reportUnresolved(ownerKey, path, "circular reference");
         return `{${path}}`;
       }
-      const resolved = resolveRef(target, new Set(seen).add(path), ownerKey);
+      const childSeen = new Set(seen).add(path);
+      const resolved = resolveRef(target, childSeen, ownerKey);
+      if (typeof resolved === "string" && resolved.includes("{")) return resolveInline(resolved, childSeen, ownerKey);
       return String(resolved);
     });
   };
@@ -249,10 +204,4 @@ Object.defineProperty(exports, 'toFlatTokens', {
   get: function () {
     return toFlatTokens;
   }
-});
-Object.defineProperty(exports, 'validateRefs', {
-  enumerable: true,
-  get: function () {
-    return validateRefs;
-  }
 });