cursedbelt 4.7.0 → 5.0.1

package/src/styles-areas/analytics.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 1312 candidate(s) scanned.
+ * when this file is stale. 1317 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/auth.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 300 candidate(s) scanned.
+ * when this file is stale. 302 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/charts.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 463 candidate(s) scanned.
+ * when this file is stale. 464 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/chat.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 348 candidate(s) scanned.
+ * when this file is stale. 390 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/core.css

@@ -13,7 +13,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 5187 candidate(s) scanned.
+ * when this file is stale. 5214 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/dashboard-grid.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 208 candidate(s) scanned.
+ * when this file is stale. 209 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/data-table.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 1349 candidate(s) scanned.
+ * when this file is stale. 1355 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/deep-link.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 188 candidate(s) scanned.
+ * when this file is stale. 190 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/disk-usage.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 290 candidate(s) scanned.
+ * when this file is stale. 289 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/emoji.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 100 candidate(s) scanned.
+ * when this file is stale. 103 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/fields.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 613 candidate(s) scanned.
+ * when this file is stale. 619 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/file-tree.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 574 candidate(s) scanned.
+ * when this file is stale. 573 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/keep-awake.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 154 candidate(s) scanned.
+ * when this file is stale. 155 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/layout-engine.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 243 candidate(s) scanned.
+ * when this file is stale. 245 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/markdown.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 110 candidate(s) scanned.
+ * when this file is stale. 112 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/master-detail.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 195 candidate(s) scanned.
+ * when this file is stale. 198 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/master-lock.css

@@ -15,12 +15,118 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 147 candidate(s) scanned.
+ * when this file is stale. 189 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are
  * import closures rather than a hand-written list, is scripts/styleAreas.ts.
  */
 /*! tailwindcss v4.3.3 | MIT License | https://tailwindcss.com */
+@layer properties;
 @layer theme, base, components, utilities;
-@layer utilities;
+@layer utilities {
+  .self-stretch {
+    align-self: stretch;
+  }
+  .focus-within\:border-field-ring:focus-within {
+    border-color: var(--field-ring);
+  }
+  .focus-within\:ring-2:focus-within {
+    --tw-ring-shadow: var(--tw-ring-inset,) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color, currentcolor);
+    box-shadow: var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);
+  }
+  .focus-within\:ring-field-ring\/30:focus-within {
+    --tw-ring-color: var(--field-ring);
+    @supports (color: color-mix(in lab, red, red)) {
+      --tw-ring-color: color-mix(in oklab, var(--field-ring) 30%, transparent);
+    }
+  }
+  .has-\[\[aria-invalid\=true\]\]\:border-field-error:has(:is([aria-invalid=true])) {
+    border-color: var(--field-error);
+  }
+}
+@property --tw-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-shadow-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-shadow-alpha {
+  syntax: "<percentage>";
+  inherits: false;
+  initial-value: 100%;
+}
+@property --tw-inset-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-inset-shadow-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-inset-shadow-alpha {
+  syntax: "<percentage>";
+  inherits: false;
+  initial-value: 100%;
+}
+@property --tw-ring-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-ring-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-inset-ring-color {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-inset-ring-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@property --tw-ring-inset {
+  syntax: "*";
+  inherits: false;
+}
+@property --tw-ring-offset-width {
+  syntax: "<length>";
+  inherits: false;
+  initial-value: 0px;
+}
+@property --tw-ring-offset-color {
+  syntax: "*";
+  inherits: false;
+  initial-value: #fff;
+}
+@property --tw-ring-offset-shadow {
+  syntax: "*";
+  inherits: false;
+  initial-value: 0 0 #0000;
+}
+@layer properties {
+  @supports ((-webkit-hyphens: none) and (not (margin-trim: inline))) or ((-moz-orient: inline) and (not (color:rgb(from red r g b)))) {
+    *, ::before, ::after, ::backdrop {
+      --tw-shadow: 0 0 #0000;
+      --tw-shadow-color: initial;
+      --tw-shadow-alpha: 100%;
+      --tw-inset-shadow: 0 0 #0000;
+      --tw-inset-shadow-color: initial;
+      --tw-inset-shadow-alpha: 100%;
+      --tw-ring-color: initial;
+      --tw-ring-shadow: 0 0 #0000;
+      --tw-inset-ring-color: initial;
+      --tw-inset-ring-shadow: 0 0 #0000;
+      --tw-ring-inset: initial;
+      --tw-ring-offset-width: 0px;
+      --tw-ring-offset-color: #fff;
+      --tw-ring-offset-shadow: 0 0 #0000;
+    }
+  }
+}

package/src/styles-areas/media-gallery.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 2162 candidate(s) scanned.
+ * when this file is stale. 2157 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/media.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 2849 candidate(s) scanned.
+ * when this file is stale. 2775 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are
@@ -156,9 +156,6 @@
     border-block-style: var(--tw-border-style);
     border-block-width: 2px;
   }
-  .border-\[color\:var\(--border-strong\)\] {
-    border-color: var(--border-strong);
-  }
   .border-accent {
     border-color: var(--accent);
   }
@@ -171,12 +168,6 @@
       border-color: color-mix(in oklab, var(--color-white) 90%, transparent);
     }
   }
-  .bg-\[color\:color-mix\(in_srgb\,var\(--accent-solid\)_8\%\,transparent\)\] {
-    background-color: var(--accent-solid);
-    @supports (color: color-mix(in lab, red, red)) {
-      background-color: color-mix(in srgb,var(--accent-solid) 8%,transparent);
-    }
-  }
   .bg-accent\/15 {
     background-color: var(--accent);
     @supports (color: color-mix(in lab, red, red)) {
@@ -283,9 +274,6 @@
   .text-\[color\:var\(--accent\)\] {
     color: var(--accent);
   }
-  .text-\[color\:var\(--muted-foreground\)\] {
-    color: var(--muted-foreground);
-  }
   .accent-white {
     accent-color: var(--color-white);
   }
@@ -322,10 +310,6 @@
   .group-focus-within\:opacity-100:is(:where(.group):focus-within *) {
     opacity: 100%;
   }
-  .last\:border-b-0:last-child {
-    border-bottom-style: var(--tw-border-style);
-    border-bottom-width: 0px;
-  }
   .focus-within\:opacity-100:focus-within {
     opacity: 100%;
   }

package/src/styles-areas/nav.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 800 candidate(s) scanned.
+ * when this file is stale. 801 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/notifications.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 232 candidate(s) scanned.
+ * when this file is stale. 231 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/overlays.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 117 candidate(s) scanned.
+ * when this file is stale. 119 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/palette.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 212 candidate(s) scanned.
+ * when this file is stale. 213 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/spreadsheet.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 166 candidate(s) scanned.
+ * when this file is stale. 165 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/virtual.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 161 candidate(s) scanned.
+ * when this file is stale. 160 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/wizard.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 389 candidate(s) scanned.
+ * when this file is stale. 395 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/workbench.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 770 candidate(s) scanned.
+ * when this file is stale. 776 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-areas/workbook-viewer.css

@@ -15,7 +15,7 @@
  *
  * An app that imports every area gets exactly what `cursedbelt/styles-utilities.css`
  * emits — proved rule by rule in src/stylesAreas.spec.ts, which is also what fails
- * when this file is stale. 247 candidate(s) scanned.
+ * when this file is stale. 246 candidate(s) scanned.
  *
  * Written by scripts/generateAreaStyles.ts (`bun run styles:areas`), which
  * `bun run build` runs. The map of what is in which area, and why the areas are

package/src/styles-utilities.css

@@ -1591,9 +1591,6 @@
     --tw-border-style: solid;
     border-style: solid;
   }
-  .border-\[color\:var\(--border-strong\)\] {
-    border-color: var(--border-strong);
-  }
   .border-\[var\(--border\)\] {
     border-color: var(--border);
   }
@@ -1741,12 +1738,6 @@
   .border-l-warning {
     border-left-color: var(--warning);
   }
-  .bg-\[color\:color-mix\(in_srgb\,var\(--accent-solid\)_8\%\,transparent\)\] {
-    background-color: var(--accent-solid);
-    @supports (color: color-mix(in lab, red, red)) {
-      background-color: color-mix(in srgb,var(--accent-solid) 8%,transparent);
-    }
-  }
   .bg-\[var\(--accent\)\]\/12 {
     background-color: var(--accent);
     @supports (color: color-mix(in lab, red, red)) {
@@ -2626,9 +2617,6 @@
   .text-\[color\:var\(--accent\)\] {
     color: var(--accent);
   }
-  .text-\[color\:var\(--muted-foreground\)\] {
-    color: var(--muted-foreground);
-  }
   .text-\[var\(--danger\)\] {
     color: var(--danger);
   }
@@ -3299,10 +3287,6 @@
     border-right-style: var(--tw-border-style);
     border-right-width: 0px;
   }
-  .last\:border-b-0:last-child {
-    border-bottom-style: var(--tw-border-style);
-    border-bottom-width: 0px;
-  }
   .last\:pr-1:last-child {
     padding-right: var(--spacing);
   }

package/src/testing/_noBun.ts

@@ -0,0 +1,12 @@
+// Loaded only on non-Bun runtimes (task 2087). The `cursedbelt/testing` export map routes the
+// real module to Bun (the `bun` condition) and everything else here, so importing these helpers
+// from Node fails with a sentence instead of `Named export 'waitFor' not found` — which is what
+// Node said about `@testing-library/react`, a CommonJS module its ESM loader cannot name-import.
+// Same shape as `cwip/testing`'s `_noBun`, and `tools/proveInstall.ts` excuses exactly this: a
+// `bun` condition plus a plain `Error` of the package's own making.
+throw new Error(
+  'cursedbelt/testing requires the Bun runtime — it drives @testing-library/react under bun:test + happy-dom. ' +
+    'Import it only from specs run with `bun test`.',
+);
+
+export {};

package/src/unpeeredStaysOffTheBarrel.spec.ts

@@ -0,0 +1,99 @@
+/**
+ * 🔴 Nothing the `cursedbelt/react` barrel reaches may import an `unpeered` package — not
+ * statically, and not through a literal `import()` either.
+ *
+ * `unpeered` (task 2087) lists packages some subpaths use that are kept out of
+ * `peerDependencies` because npm cannot resolve their own peer ranges beside ours. That keeps
+ * `npm install cursedbelt` clean, and it has a price that `barrelsReachNoOptionalPeer.spec.ts`
+ * could not see: **a bundler resolves a literal `import()` at BUILD time, and Vite stubs a
+ * missing import only when it is a DECLARED optional peer.** 5.0.0 listed `@hookform/resolvers`
+ * and `@emoji-mart/react` there while `react/lib/form.ts` and `react/emoji/EmojiPicker.tsx`
+ * lazily imported them — lazy, so the static-only check above passed — and every app's
+ * clean-install `vite build` failed: `Rollup failed to resolve import "@hookform/resolvers/zod"`.
+ * Primary checkouts hid it for a day, because their `node_modules` still held the 4.x copies.
+ *
+ * 5.0.1 depends on neither (its own zod resolver; emoji-mart's `Picker` mounted directly). This
+ * spec is what keeps a third from arriving. The barrel is the subject because it is what every
+ * app imports; an opt-in subpath that needs glide (`./react/spreadsheet` and its two siblings) is
+ * named in `docs/API-REFERENCE.md`'s install table, and its consumer installs it on purpose.
+ * `tools/proveInstall.ts`'s consumer-bundle step is the same rule, proved against the PUBLISHED
+ * tarball in an empty directory.
+ */
+import { describe, expect, it } from 'bun:test';
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import pkg from '../package.json';
+
+const REPO = fileURLToPath(new URL('..', import.meta.url));
+const UNPEERED = Object.keys((pkg as { unpeered?: { packages?: Record<string, string> } }).unpeered?.packages ?? {});
+
+/** `import x from "p"`, `export … from "p"`, `import "p"`, and — the 5.0.0 shape — `import("p")`. */
+const ANY_SPECIFIER = /\bfrom\s*["']([^"'\n]+)["']|^\s*import\s*["']([^"'\n]+)["']|\bimport\(\s*["']([^"'\n]+)["']\s*\)/gm;
+
+const packageOf = (specifier: string): string => {
+  const parts = specifier.split('/');
+  return (specifier.startsWith('@') ? parts.slice(0, 2).join('/') : parts[0]) ?? specifier;
+};
+
+/** Every package an entry's bundle names, static or dynamic, with all packages left external. */
+function packagesReachedBy(entry: string, label: string): Set<string> {
+  const outdir = `${process.env.TMPDIR ?? '/tmp'}/cursedbelt-unpeered-scan-${process.pid}/${label}`;
+  rmSync(outdir, { recursive: true, force: true });
+  const build = Bun.spawnSync(['bun', 'build', entry, '--target=browser', '--packages=external', '--outdir', outdir], {
+    cwd: REPO,
+    stdout: 'pipe',
+    stderr: 'pipe',
+  });
+  const emitted = [...new Bun.Glob('**/*.js').scanSync({ cwd: outdir, onlyFiles: true })];
+  const bundle = emitted.map((f) => readFileSync(`${outdir}/${f}`, 'utf8')).join('\n');
+  if (build.exitCode !== 0 || bundle.trim() === '') {
+    throw new Error(`could not bundle ${entry} (exit ${build.exitCode}) — a check that cannot measure is not a passing check:\n${build.stderr.toString()}`);
+  }
+  const found = new Set<string>();
+  for (const m of bundle.matchAll(ANY_SPECIFIER)) {
+    const specifier = m[1] ?? m[2] ?? m[3];
+    if (specifier && !specifier.startsWith('.') && !specifier.startsWith('/')) found.add(packageOf(specifier));
+  }
+  return found;
+}
+
+describe('unpeered packages stay off the cursedbelt/react barrel', () => {
+  it('🔴 the barrel names no unpeered package, even lazily', () => {
+    const source = (pkg.exports as Record<string, { source?: string }>)['./react']?.source;
+    expect(source, 'package.json has no ./react source entry').toBeString();
+    const reached = packagesReachedBy(`${REPO}${(source as string).slice(2)}`, 'barrel');
+    expect(reached.size, 'the scan found no packages at all — it is not measuring').toBeGreaterThan(0);
+    expect(
+      UNPEERED.filter((name) => reached.has(name)),
+      'the barrel imports an `unpeered` package. A consumer who did not install it cannot even BUILD: ' +
+        'Vite stubs only declared optional peers. Make it a declared optional peer, own the code, or ' +
+        'move the component to an opt-in subpath named in docs/API-REFERENCE.md.',
+    ).toEqual([]);
+  });
+
+  it('`unpeered.subpaths` names only real opt-in subpaths, never the barrel, and only unpeered packages', () => {
+    // `tools/proveInstall.ts` excuses a fresh-install bundle failure ONLY for these pairs.
+    const subpaths = (pkg as { unpeered?: { subpaths?: Record<string, string[]> } }).unpeered?.subpaths ?? {};
+    expect(Object.keys(subpaths)).not.toContain('./react');
+    for (const [subpath, names] of Object.entries(subpaths)) {
+      expect(Object.keys(pkg.exports), `${subpath} is not an export`).toContain(subpath);
+      expect(names.filter((n) => !UNPEERED.includes(n)), `${subpath} names a package that is not unpeered`).toEqual([]);
+    }
+    // And every unpeered package is needed by at least one named subpath — or it is not needed.
+    const named = new Set(Object.values(subpaths).flat());
+    expect(UNPEERED.filter((n) => !named.has(n))).toEqual([]);
+  });
+
+  it('the scan sees a lazy import — 5.0.0 reproduced, so this check can go red', () => {
+    const dir = `${process.env.TMPDIR ?? '/tmp'}/cursedbelt-unpeered-fixture-${process.pid}`;
+    mkdirSync(dir, { recursive: true });
+    const entry = `${dir}/lazy.ts`;
+    writeFileSync(entry, "export const Picker = () => import('@emoji-mart/react');\nexport const zod = () => import('@hookform/resolvers/zod');\n");
+    try {
+      const reached = packagesReachedBy(entry, 'fixture');
+      expect([...reached].sort()).toEqual(['@emoji-mart/react', '@hookform/resolvers']);
+    } finally {
+      rmSync(dir, { recursive: true, force: true });
+    }
+  });
+});

package/src/verifyGraph.spec.ts

@@ -67,6 +67,17 @@ const MUST_RUN = [
 	// added, removing it argues with this list.
 	'typecheck:scripts',
 	'demo:check',
+	// 🔴 Added 2026-09-23 (task 102). `biome lint` was in no command at all — `done:serial`
+	// called a `lint` script that did not exist, so the 31 errors it would have shown sat
+	// unseen. They were cleared in the same landing (29 were in Tailwind's generated output,
+	// now excluded in `biome.jsonc`), so the stage landed green.
+	'lint',
+	// 🔴 Added 2026-09-23 with `no-raw-password` (task 077). This repo's own guardrails scan was
+	// in no command a gate ran, and it had been RED since task 269 gave every relative specifier
+	// its `.js`: `no-native-dialog` stopped recognising DeleteButton's `'../confirm.js'` import
+	// as the belt's own `confirm`. The rules this package ships to five apps were not being
+	// applied to the package itself.
+	'guardrails:report',
 	'styles',
 	'build',
 	'test',

package/dist/react/media/PrivateIndexView.d.ts

@@ -1,6 +0,0 @@
-import React from 'react';
-import type { PrivateUnlock } from './usePrivateUnlock.js';
-export declare function PrivateIndexView({ unlock }: {
-    unlock: PrivateUnlock;
-}): React.JSX.Element;
-//# sourceMappingURL=PrivateIndexView.d.ts.map

package/dist/react/media/PrivateIndexView.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PrivateIndexView.d.ts","sourceRoot":"","sources":["../../../src/react/media/PrivateIndexView.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,KAAK,EAAmB,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAS5E,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,qBAmGrE"}