@viglet/viglet-design-system 2026.3.2 → 2026.3.4

package/dist/vite/boot-loader.d.ts

@@ -20,15 +20,24 @@ export interface VigletBootLoaderOptions {
     title: string;
     /** Uppercase subtitle under the title, e.g. `"Enterprise Search Intelligence"`. */
     subtitle: string;
-    /** Accent hex color (light mode), e.g. `"#4169E1"`. */
+    /**
+     * Accent hex color (light mode), e.g. `"#4169E1"` or `"#41E"`.
+     *
+     * Hex only, and enforced: the value is used raw in the gradients and parsed
+     * into an `r, g, b` triplet for the rgba tints, so anything the parser cannot
+     * read would render the loader in two different accents. A named colour or an
+     * `rgb()`/`hsl()` string throws rather than half-applying.
+     */
     color: string;
-    /** Accent hex color in dark mode. Defaults to `color`. */
+    /** Accent hex color in dark mode, under the same rule as `color`. Defaults to `color`. */
     colorDark?: string;
     /**
      * CSS class prefix applied to every rule and keyframe to avoid collisions
      * (rings, mark, molecules, gas, progress, etc). Default: `"viglet"`.
      *
-     * Must be a valid CSS identifier fragment — letters, digits and `-`.
+     * Must be a CSS identifier — a letter, then letters, digits, `-` or `_`. It is
+     * interpolated into every selector and keyframe name, so a value outside that
+     * throws instead of emitting rules of its own.
      */
     prefix?: string;
     /** `localStorage` key used to detect the stored theme. Default: `"vite-ui-theme"`. */
@@ -46,15 +55,20 @@ export interface VigletBootLoaderOptions {
      * it inside `<div id="root">` in your `index.html` (or `marketing.html`).
      *
      * Default: `"<!--viglet-boot-loader-->"`. If not found, the plugin falls
-     * back to injecting right after the opening `<div id="root">` tag.
+     * back to injecting right after the opening `<div id="root">` tag, and warns
+     * on the console when the page offers neither.
      */
     placeholder?: string;
 }
 /**
  * Vite plugin that injects the shared Viglet boot loader into `index.html` at
- * build/dev time. Every product (Turing, Shio, Dumont, Cloud Marketing)
- * consumes this plugin so the loader visuals stay identical across the
- * ecosystem and there's a single place to evolve the design.
+ * build/dev time, so the loader visuals stay identical across the ecosystem and
+ * there is a single place to evolve the design.
+ *
+ * Four of the six consumers take it: Turing, Shio, Dumont and the Cloud Home.
+ * The Cloud Console and Schools are Next applications and have no Vite build to
+ * plug into — they render their own first paint, which is what a server-rendered
+ * page does instead of a boot loader.
  *
  * What the plugin injects:
  *

package/dist/vite/boot-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boot-loader.d.ts","sourceRoot":"","sources":["../../src/vite/boot-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA4B,MAAM,EAAE,MAAM,MAAM,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAsCzE"}
+{"version":3,"file":"boot-loader.d.ts","sourceRoot":"","sources":["../../src/vite/boot-loader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA4B,MAAM,EAAE,MAAM,MAAM,CAAC;AAE7D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAsEzE"}

package/dist/{vite.cjs.js → vite.cjs}

@@ -1,4 +1,4 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e){let{title:a,subtitle:o,color:s,colorDark:c=s,prefix:l=`viglet`,storageKey:u=`vite-ui-theme`,testFlag:d=`__VIGLET_LOADING_TEST__`,placeholder:f=`<!--viglet-boot-loader-->`}=e,p=t(s)??`37, 99, 235`,m={pfx:l,title:a,subtitle:o,color:s,colorDark:c,rgb:p,rgbDark:t(c)??p,storageKey:u,testFlag:d},h=n(m),g=r(m),_=i(m);return{name:`viglet-boot-loader`,transformIndexHtml(e){return{html:e.includes(f)?e.replace(f,_):e.replace(/(<div\b[^>]*\bid=["']root["'][^>]*>)/,e=>`${e}\n${_}\n`),tags:[{tag:`style`,attrs:{"data-viglet-boot-loader":``},children:h,injectTo:`head`},{tag:`script`,children:g,injectTo:`head`}]}}}}function t(e){if(!e)return null;let t=/^#([0-9a-f])([0-9a-f])([0-9a-f])$/i.exec(e.trim());if(t){let[,e,n,r]=t;return`${Number.parseInt(e+e,16)}, ${Number.parseInt(n+n,16)}, ${Number.parseInt(r+r,16)}`}let n=/^#([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})$/i.exec(e.trim());if(n){let[,e,t,r]=n;return`${Number.parseInt(e,16)}, ${Number.parseInt(t,16)}, ${Number.parseInt(r,16)}`}return null}function n({pfx:e,color:t,colorDark:n,rgb:r}){return`
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e){let{title:n,subtitle:o,color:s,colorDark:c=s,prefix:l=`viglet`,storageKey:u=`vite-ui-theme`,testFlag:d=`__VIGLET_LOADING_TEST__`,placeholder:f=`<!--viglet-boot-loader-->`}=e,p=t(s,`color`),m=t(c,`colorDark`);if(!/^[a-zA-Z][\w-]*$/.test(l))throw Error(`vigletBootLoader: prefix must start with a letter and hold only letters, digits, "-" or "_" — received ${JSON.stringify(l)}.`);let h={pfx:l,title:n,subtitle:o,color:s,colorDark:c,rgb:p,rgbDark:m,storageKey:u,testFlag:d},g=r(h),_=i(h),v=a(h);return{name:`viglet-boot-loader`,transformIndexHtml(e){let t;if(e.includes(f))t=e.replace(f,()=>v);else{let n=/(<div\b[^>]*\bid=["']root["'][^>]*>)/;n.test(e)?t=e.replace(n,e=>`${e}\n${v}\n`):(console.warn(`[viglet-boot-loader] no injection point found: the HTML holds neither the ${f} placeholder nor a <div id="root">, so no boot loader was injected.`),t=e)}return{html:t,tags:[{tag:`style`,attrs:{"data-viglet-boot-loader":``},children:g,injectTo:`head`},{tag:`script`,children:_,injectTo:`head`}]}}}}function t(e,t){let r=n(e);if(r)return r;throw Error(`vigletBootLoader: ${t} must be a hex colour like "#4169E1" or "#41E" — received ${JSON.stringify(e)}. Named CSS colours and rgb()/hsl() cannot be read for the loader's rgba tints.`)}function n(e){if(!e)return null;let t=/^#([0-9a-f])([0-9a-f])([0-9a-f])$/i.exec(e.trim());if(t){let[,e,n,r]=t;return`${Number.parseInt(e+e,16)}, ${Number.parseInt(n+n,16)}, ${Number.parseInt(r+r,16)}`}let n=/^#([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})$/i.exec(e.trim());if(n){let[,e,t,r]=n;return`${Number.parseInt(e,16)}, ${Number.parseInt(t,16)}, ${Number.parseInt(r,16)}`}return null}function r({pfx:e,color:t,colorDark:n,rgb:r}){return`
     html, body { margin: 0; padding: 0; height: 100%; }
     /* Boot-loader paints body only for the pre-React loading screen. It must
        NOT own "body { color }": that rule is unlayered, so it beats the app's
@@ -140,7 +140,7 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e)
       border-radius: 999px; box-shadow: 0 4px 12px rgba(220, 38, 38, 0.35);
       z-index: 10000;
     }
-  `.trim()}function r({pfx:e,storageKey:t,testFlag:n}){return`
+  `.trim()}function i({pfx:e,storageKey:t,testFlag:n}){return`
     (function () {
       try {
         var stored = localStorage.getItem(${JSON.stringify(t)});
@@ -166,14 +166,14 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e)
         }
       } catch (e) { /* ignore */ }
     })();
-  `.trim()}function i({pfx:e,title:t,subtitle:n}){return`
-<div id="${e}-boot-loader" role="status" aria-live="polite" aria-label="Loading ${a(t)}">
+  `.trim()}function a({pfx:e,title:t,subtitle:n}){return`
+<div id="${e}-boot-loader" role="status" aria-live="polite" aria-label="Loading ${o(t)}">
   <div class="${e}-boot-stage">
     <div class="${e}-boot-ring"></div>
     <div class="${e}-boot-ring delay-1"></div>
     <div class="${e}-boot-ring delay-2"></div>
     <div class="${e}-boot-ring delay-3"></div>
-    <div class="${e}-boot-logo-mark" aria-label="${a(t)}">
+    <div class="${e}-boot-logo-mark" aria-label="${o(t)}">
       <svg class="${e}-boot-molecules" viewBox="0 0 100 100" aria-hidden="true">
         <g class="${e}-boot-molecule m-1">
           <line x1="28" y1="50" x2="72" y2="50" />
@@ -223,9 +223,9 @@ Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});function e(e)
     </div>
   </div>
   <div class="${e}-boot-text">
-    <div class="${e}-boot-title">${a(t)}</div>
-    <div class="${e}-boot-subtitle">${a(n)}</div>
+    <div class="${e}-boot-title">${o(t)}</div>
+    <div class="${e}-boot-subtitle">${o(n)}</div>
   </div>
   <div class="${e}-boot-progress" aria-hidden="true"></div>
 </div>
-  `.trim()}function a(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`).replace(/'/g,`&#39;`)}exports.vigletBootLoader=e;
+  `.trim()}function o(e){return e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`).replace(/'/g,`&#39;`)}exports.vigletBootLoader=e;

package/dist/vite.es.js

@@ -1,36 +1,49 @@
 //#region src/vite/boot-loader.ts
 function e(e) {
-	let { title: a, subtitle: o, color: s, colorDark: c = s, prefix: l = "viglet", storageKey: u = "vite-ui-theme", testFlag: d = "__VIGLET_LOADING_TEST__", placeholder: f = "<!--viglet-boot-loader-->" } = e, p = t(s) ?? "37, 99, 235", m = {
+	let { title: n, subtitle: o, color: s, colorDark: c = s, prefix: l = "viglet", storageKey: u = "vite-ui-theme", testFlag: d = "__VIGLET_LOADING_TEST__", placeholder: f = "<!--viglet-boot-loader-->" } = e, p = t(s, "color"), m = t(c, "colorDark");
+	if (!/^[a-zA-Z][\w-]*$/.test(l)) throw Error(`vigletBootLoader: prefix must start with a letter and hold only letters, digits, "-" or "_" — received ${JSON.stringify(l)}.`);
+	let h = {
 		pfx: l,
-		title: a,
+		title: n,
 		subtitle: o,
 		color: s,
 		colorDark: c,
 		rgb: p,
-		rgbDark: t(c) ?? p,
+		rgbDark: m,
 		storageKey: u,
 		testFlag: d
-	}, h = n(m), g = r(m), _ = i(m);
+	}, g = r(h), _ = i(h), v = a(h);
 	return {
 		name: "viglet-boot-loader",
 		transformIndexHtml(e) {
+			let t;
+			if (e.includes(f)) t = e.replace(f, () => v);
+			else {
+				let n = /(<div\b[^>]*\bid=["']root["'][^>]*>)/;
+				n.test(e) ? t = e.replace(n, (e) => `${e}\n${v}\n`) : (console.warn(`[viglet-boot-loader] no injection point found: the HTML holds neither the ${f} placeholder nor a <div id="root">, so no boot loader was injected.`), t = e);
+			}
 			return {
-				html: e.includes(f) ? e.replace(f, _) : e.replace(/(<div\b[^>]*\bid=["']root["'][^>]*>)/, (e) => `${e}\n${_}\n`),
+				html: t,
 				tags: [{
 					tag: "style",
 					attrs: { "data-viglet-boot-loader": "" },
-					children: h,
+					children: g,
 					injectTo: "head"
 				}, {
 					tag: "script",
-					children: g,
+					children: _,
 					injectTo: "head"
 				}]
 			};
 		}
 	};
 }
-function t(e) {
+function t(e, t) {
+	let r = n(e);
+	if (r) return r;
+	throw Error(`vigletBootLoader: ${t} must be a hex colour like "#4169E1" or "#41E" — received ${JSON.stringify(e)}. Named CSS colours and rgb()/hsl() cannot be read for the loader's rgba tints.`);
+}
+function n(e) {
 	if (!e) return null;
 	let t = /^#([0-9a-f])([0-9a-f])([0-9a-f])$/i.exec(e.trim());
 	if (t) {
@@ -44,7 +57,7 @@ function t(e) {
 	}
 	return null;
 }
-function n({ pfx: e, color: t, colorDark: n, rgb: r }) {
+function r({ pfx: e, color: t, colorDark: n, rgb: r }) {
 	return `
     html, body { margin: 0; padding: 0; height: 100%; }
     /* Boot-loader paints body only for the pre-React loading screen. It must
@@ -189,7 +202,7 @@ function n({ pfx: e, color: t, colorDark: n, rgb: r }) {
     }
   `.trim();
 }
-function r({ pfx: e, storageKey: t, testFlag: n }) {
+function i({ pfx: e, storageKey: t, testFlag: n }) {
 	return `
     (function () {
       try {
@@ -218,15 +231,15 @@ function r({ pfx: e, storageKey: t, testFlag: n }) {
     })();
   `.trim();
 }
-function i({ pfx: e, title: t, subtitle: n }) {
+function a({ pfx: e, title: t, subtitle: n }) {
 	return `
-<div id="${e}-boot-loader" role="status" aria-live="polite" aria-label="Loading ${a(t)}">
+<div id="${e}-boot-loader" role="status" aria-live="polite" aria-label="Loading ${o(t)}">
   <div class="${e}-boot-stage">
     <div class="${e}-boot-ring"></div>
     <div class="${e}-boot-ring delay-1"></div>
     <div class="${e}-boot-ring delay-2"></div>
     <div class="${e}-boot-ring delay-3"></div>
-    <div class="${e}-boot-logo-mark" aria-label="${a(t)}">
+    <div class="${e}-boot-logo-mark" aria-label="${o(t)}">
       <svg class="${e}-boot-molecules" viewBox="0 0 100 100" aria-hidden="true">
         <g class="${e}-boot-molecule m-1">
           <line x1="28" y1="50" x2="72" y2="50" />
@@ -276,14 +289,14 @@ function i({ pfx: e, title: t, subtitle: n }) {
     </div>
   </div>
   <div class="${e}-boot-text">
-    <div class="${e}-boot-title">${a(t)}</div>
-    <div class="${e}-boot-subtitle">${a(n)}</div>
+    <div class="${e}-boot-title">${o(t)}</div>
+    <div class="${e}-boot-subtitle">${o(n)}</div>
   </div>
   <div class="${e}-boot-progress" aria-hidden="true"></div>
 </div>
   `.trim();
 }
-function a(e) {
+function o(e) {
 	return e.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viglet/viglet-design-system",
-  "version": "2026.3.2",
+  "version": "2026.3.4",
   "type": "module",
   "description": "Viglet Design System - Shared components, hooks, utilities and design tokens for Viglet products",
   "license": "Apache-2.0",
@@ -12,54 +12,64 @@
     "access": "public",
     "registry": "https://registry.npmjs.org"
   },
-  "main": "./dist/index.cjs.js",
+  "main": "./dist/index.cjs",
   "module": "./dist/index.es.js",
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.es.js",
-      "require": "./dist/index.cjs.js"
+      "require": "./dist/index.cjs"
     },
+    "./bento": {
+      "types": "./dist/bento/index.d.ts",
+      "import": "./dist/bento.es.js",
+      "require": "./dist/bento.cjs"
+    },
+    "./bento.css": "./dist/bento.css",
+    "./assets": {
+      "types": "./dist/assets/products/index.d.ts",
+      "import": "./dist/assets.es.js",
+      "require": "./dist/assets.cjs"
+    },
+    "./exports.json": "./dist/exports.json",
     "./styles": "./dist/viglet-design-system.css",
+    "./fonts": "./dist/fonts.css",
+    "./fonts.css": "./dist/fonts.css",
     "./preset": "./dist/preset.css",
     "./preset.css": "./dist/preset.css",
     "./i18n": {
       "types": "./dist/i18n/index.d.ts",
       "import": "./dist/i18n.es.js",
-      "require": "./dist/i18n.cjs.js"
+      "require": "./dist/i18n.cjs"
     },
     "./router": {
       "types": "./dist/router.d.ts",
       "import": "./dist/router.es.js",
-      "require": "./dist/router.cjs.js"
+      "require": "./dist/router.cjs"
     },
     "./floating-formulas-bg": {
       "types": "./dist/components/ui/floating-formulas-bg.d.ts",
       "import": "./dist/floating-formulas-bg.es.js",
-      "require": "./dist/floating-formulas-bg.cjs.js"
+      "require": "./dist/floating-formulas-bg.cjs"
     },
     "./floating-formulas-bg.css": "./dist/floating-formulas-bg.css",
     "./vite": {
       "types": "./dist/vite/index.d.ts",
       "import": "./dist/vite.es.js",
-      "require": "./dist/vite.cjs.js"
+      "require": "./dist/vite.cjs"
     }
   },
+  "bin": {
+    "viglet-ds-check-duplicates": "./scripts/check-duplicates.mjs"
+  },
   "files": [
-    "dist"
+    "dist",
+    "scripts/check-duplicates.mjs"
   ],
   "sideEffects": [
     "**/*.css"
   ],
-  "scripts": {
-    "dev": "vite build --watch",
-    "build": "tsc -b && node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && vite build && node -e \"require('fs').cpSync('src/styles/preset.css','dist/preset.css')\"",
-    "lint": "eslint .",
-    "storybook": "storybook dev -p 6006",
-    "build-storybook": "storybook build",
-    "prepublishOnly": "npm run build"
-  },
   "peerDependencies": {
     "i18next": ">=25.0.0",
     "i18next-browser-languagedetector": ">=8.0.0",
@@ -76,6 +86,9 @@
     }
   },
   "dependencies": {
+    "@dnd-kit/core": "^6.3.1",
+    "@dnd-kit/sortable": "^10.0.0",
+    "@dnd-kit/utilities": "^3.2.2",
     "@fontsource-variable/inter": "^5.2.8",
     "@fontsource-variable/plus-jakarta-sans": "^5.2.8",
     "@iconify/react": "^6.0.2",
@@ -98,7 +111,7 @@
     "@radix-ui/react-toggle-group": "^1.1.11",
     "@radix-ui/react-tooltip": "^1.2.8",
     "@tabler/icons-react": "^3.40.0",
-    "@tanstack/react-table": "^8.21.3",
+    "@tanstack/react-table": "^9.1.2",
     "axios": "^1.13.6",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
@@ -116,28 +129,59 @@
     "@storybook/addon-a11y": "^10.3.5",
     "@storybook/addon-docs": "^10.3.5",
     "@storybook/addon-themes": "^10.3.5",
+    "@storybook/addon-vitest": "10.5.10",
     "@storybook/react-vite": "^10.3.5",
     "@tailwindcss/typography": "^0.5.19",
     "@tailwindcss/vite": "^4.2.2",
+    "@testing-library/jest-dom": "^7.0.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.6",
     "@types/node": "^26.0.1",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
+    "@types/semver": "^7.8.0",
     "@vitejs/plugin-react": "^6.0.1",
+    "@vitest/browser": "^4.1.11",
+    "@vitest/browser-playwright": "^4.1.11",
     "eslint": "^9.39.0",
     "eslint-plugin-react-hooks": "^7.0.1",
     "eslint-plugin-react-refresh": "^0.5.2",
     "globals": "^17.4.0",
+    "i18next": "^26.4.0",
+    "i18next-browser-languagedetector": "^8.2.1",
+    "jsdom": "^30.0.1",
+    "next-themes": "^0.4.6",
+    "playwright": "^1.62.1",
+    "react-i18next": "^17.0.12",
     "react-router-dom": "^7.0.0",
+    "semver": "^7.8.5",
+    "sonner": "^2.0.8",
     "storybook": "^10.3.5",
     "tailwindcss": "^4.1.11",
     "tw-animate-css": "^1.4.0",
-    "typescript": "~6.0.2",
+    "typescript": "~6.0.3",
     "typescript-eslint": "^8.58.0",
     "vite": "^8.0.8",
-    "vite-plugin-dts": "^5.0.0"
+    "vite-plugin-dts": "^5.0.0",
+    "vitest": "^4.1.11"
   },
   "engines": {
-    "node": "^24.0.0",
-    "npm": "^11.0.0"
+    "node": ">=26",
+    "pnpm": ">=11"
+  },
+  "scripts": {
+    "dev": "vite build --watch",
+    "build": "tsc -b && node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && vite build && node -e \"require('fs').cpSync('src/styles/preset.css','dist/preset.css')\" && node scripts/build-fonts.mjs && node scripts/emit-exports.mjs && node scripts/check-dist.mjs && node scripts/check-exports.mjs && node scripts/check-size.mjs",
+    "check:dist": "node scripts/check-dist.mjs",
+    "check:size": "node scripts/check-size.mjs",
+    "typecheck": "tsc -b --force",
+    "lint": "eslint . --max-warnings 0",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "use:local": "node scripts/use-local.mjs",
+    "storybook": "storybook dev -p 6006",
+    "build-storybook": "storybook build",
+    "build:fonts": "node scripts/build-fonts.mjs",
+    "check:exports": "node scripts/check-exports.mjs"
   }
-}
+}

package/scripts/check-duplicates.mjs

@@ -0,0 +1,198 @@
+#!/usr/bin/env node
+// VDS5 — fail a consumer's build when it declares a component this package
+// already exports, and name the import that replaces it.
+//
+// Run it from a product checkout, in that product's CI:
+//
+//   viglet-ds-check-duplicates              # scan ./src
+//   viglet-ds-check-duplicates src app      # scan these directories
+//   viglet-ds-check-duplicates --json       # machine-readable findings
+//   viglet-ds-check-duplicates --warn       # report, but exit 0
+//   viglet-ds-check-duplicates --manifest p # read the export list from p
+//
+// Reporting that a duplicate exists is not the useful half. A local copy is
+// written because the author did not know the shared one existed, so the finding
+// has to end in the line they would have written instead — which is why the
+// manifest records the specifier per entry point rather than just a list of
+// names.
+//
+// A one-line re-export shim is the sanctioned pattern and is not a duplicate.
+// VDS74 — the exemption is a name's, not a file's: `declaredNames` already
+// ignores an `export { … } from` clause, so a shim reports nothing without a
+// skip, while a name the file *declares* is reported whatever else that file
+// also re-exports. Skipping the file instead let any real copy sitting beside a
+// stray re-export through, which is the case this gate exists to catch.
+//
+// Some collisions are deliberate — Shio's AppFooter renders Shio's own build
+// version and merely shares a name. Keep those by writing, anywhere in the file:
+//
+//   // viglet-ds-allow-duplicate AppFooter -- renders Shio's build version
+//
+// The reason is the point. A gate with no way to say "this one is mine" is a
+// gate somebody deletes.
+
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs"
+import { createRequire } from "node:module"
+import { dirname, join, relative, resolve } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const PACKAGE_NAME = "@viglet/viglet-design-system"
+const EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mts", ".mjs"])
+const SKIP_DIRS = new Set(["node_modules", ".git", "dist", "build", "out", "coverage", ".next"])
+
+const args = process.argv.slice(2)
+const asJson = args.includes("--json")
+const warnOnly = args.includes("--warn")
+const manifestFlag = args.indexOf("--manifest")
+const manifestPath = manifestFlag === -1 ? null : args[manifestFlag + 1]
+const roots = args.filter(
+  (a, i) => !a.startsWith("--") && i !== manifestFlag + 1,
+)
+
+function loadManifest() {
+  // An explicit path wins: it is how this repository's own tests pin a fixture,
+  // and how a monorepo checks against a version other than the hoisted one.
+  if (manifestPath) {
+    if (!existsSync(manifestPath)) {
+      console.error(`check-duplicates: no manifest at ${manifestPath}`)
+      process.exit(1)
+    }
+    return JSON.parse(readFileSync(manifestPath, "utf8"))
+  }
+  // Installed in the consumer.
+  const require = createRequire(join(process.cwd(), "package.json"))
+  try {
+    return require(`${PACKAGE_NAME}/exports.json`)
+  } catch {
+    /* fall through */
+  }
+  // Running from this repository against its own dist.
+  const local = resolve(dirname(fileURLToPath(import.meta.url)), "..", "dist", "exports.json")
+  if (existsSync(local)) return JSON.parse(readFileSync(local, "utf8"))
+  return null
+}
+
+const manifest = loadManifest()
+if (!manifest) {
+  console.error(
+    `check-duplicates: could not read ${PACKAGE_NAME}/exports.json.\n` +
+      `Install ${PACKAGE_NAME} (>= the version that ships the manifest) and re-run.`,
+  )
+  process.exit(1)
+}
+
+// name -> the specifier that exports it. The root entry wins when a name appears
+// in more than one, since that is the import a product would write.
+const exported = new Map()
+for (const [subpath, entry] of Object.entries(manifest.entries)) {
+  for (const name of [...entry.values, ...entry.types]) {
+    const isType = entry.types.includes(name)
+    if (!exported.has(name) || subpath === ".") {
+      exported.set(name, { specifier: entry.specifier, isType })
+    }
+  }
+}
+
+function collect(dir, files = []) {
+  let dirents
+  try {
+    dirents = readdirSync(dir, { withFileTypes: true })
+  } catch {
+    return files
+  }
+  for (const entry of dirents) {
+    const full = join(dir, entry.name)
+    if (entry.isDirectory()) {
+      if (!SKIP_DIRS.has(entry.name) && !entry.name.startsWith(".")) collect(full, files)
+    } else if (EXTENSIONS.has(entry.name.slice(entry.name.lastIndexOf(".")))) {
+      files.push(full)
+    }
+  }
+  return files
+}
+
+// `export const X`, `export function X`, `export class X`, `export type X`,
+// `export interface X`, and the names inside a local `export { A, B as C }`.
+const DECLARED =
+  /^\s*export\s+(?:declare\s+)?(?:default\s+)?(?:abstract\s+)?(?:const|let|var|function\*?|class|type|interface|enum)\s+([A-Za-z_$][\w$]*)/gm
+const EXPORT_LIST = /^\s*export\s+(?:type\s+)?\{([^}]*)\}\s*(?!from)[;\n]/gm
+
+function declaredNames(source) {
+  const names = new Map()
+  for (const match of source.matchAll(DECLARED)) {
+    names.set(match[1], lineOf(source, match.index))
+  }
+  for (const match of source.matchAll(EXPORT_LIST)) {
+    for (const clause of match[1].split(",")) {
+      // `A as B` exports B; a bare `A` exports A.
+      const name = clause.includes(" as ")
+        ? clause.split(" as ").pop().trim()
+        : clause.trim()
+      if (/^[A-Za-z_$][\w$]*$/.test(name) && name !== "default") {
+        names.set(name, lineOf(source, match.index))
+      }
+    }
+  }
+  return names
+}
+
+function lineOf(source, index) {
+  return source.slice(0, index).split("\n").length
+}
+
+const scanRoots = (roots.length ? roots : ["src"]).map((r) => resolve(r))
+const missing = scanRoots.filter((r) => !existsSync(r) || !statSync(r).isDirectory())
+if (missing.length === scanRoots.length) {
+  console.error(
+    `check-duplicates: nothing to scan (${scanRoots.map((r) => relative(process.cwd(), r)).join(", ")}).\n` +
+      "Pass the source directories explicitly: viglet-ds-check-duplicates <dir> [dir]",
+  )
+  process.exit(1)
+}
+
+const findings = []
+let scanned = 0
+for (const root of scanRoots) {
+  for (const file of collect(root)) {
+    const source = readFileSync(file, "utf8")
+    scanned++
+    const allowed = new Set(
+      [...source.matchAll(/viglet-ds-allow-duplicate\s+([A-Za-z_$][\w$]*)/g)].map((m) => m[1]),
+    )
+    for (const [name, line] of declaredNames(source)) {
+      const match = exported.get(name)
+      if (!match || allowed.has(name)) continue
+      findings.push({
+        file: relative(process.cwd(), file).replace(/\\/g, "/"),
+        line,
+        name,
+        replacement: match.isType
+          ? `import type { ${name} } from "${match.specifier}"`
+          : `import { ${name} } from "${match.specifier}"`,
+      })
+    }
+  }
+}
+
+if (asJson) {
+  console.log(JSON.stringify({ scanned, findings }, null, 2))
+} else if (findings.length === 0) {
+  console.log(
+    `check-duplicates: ${scanned} file(s) scanned, no local copy of a ${PACKAGE_NAME} export.`,
+  )
+} else {
+  console.error(
+    `\ncheck-duplicates: ${findings.length} declaration(s) already exported by ${PACKAGE_NAME}@${manifest.version}\n`,
+  )
+  for (const finding of findings) {
+    console.error(`  ${finding.file}:${finding.line}  declares ${finding.name}`)
+    console.error(`      replace it with:  ${finding.replacement}\n`)
+  }
+  console.error(
+    "A local copy that drifts is the failure the design system exists to prevent.\n" +
+      "If the product genuinely needs a variation, wrap the shared component rather\n" +
+      "than re-declaring its name.\n",
+  )
+}
+
+process.exit(findings.length > 0 && !warnOnly ? 1 : 0)