haus-tokens 2.0.0 → 2.2.1

package/README.md

@@ -129,6 +129,44 @@ It is **pure and does no file reading**, so it runs anywhere and this package
 gains no dependency on `node:fs`. You know which files you load; it only knows
 what the contract is.
 
+### The second check: values you already have
+
+A property you declare that this package also declares, at the value this package
+already gives, is not an override. It is a copy, and it renders perfectly until
+one of the two moves.
+
+```ts
+import { findRestatedTokens } from 'haus-tokens/guard'
+
+it('restates no value haus already ships', () => {
+  const copies = findRestatedTokens({
+    defines: [read('src/tokens/semantics.css')],
+    upstream: [
+      read('node_modules/haus-tokens/dist/primitives.css'),
+      read('node_modules/haus-tokens/dist/motion.css'),
+      read('node_modules/haus-tokens/dist/semantics.css'),
+    ],
+  })
+
+  expect(copies.map((c) => `${c.name} (${c.kind})`)).toEqual([])
+})
+```
+
+Each result is tagged. `identical` is the same declaration text on both sides.
+**`resolved` is the one worth having**: the text differs and the value does not,
+once `var()` chains are followed. `--haus-z-modal: 400` against our
+`var(--haus-z-400)`, where `--haus-z-400` is `400`, is how a consumer opts out of
+a scale while still appearing to be on it.
+
+**Which files you pass as `upstream` decides the question.** Include `brand.css`
+and you are asking *do I restate anything haus ships, its colour choices
+included*. Leave it out and you are asking *do I restate anything structural*,
+with your palette treated as your business. Against drift the two answers are 143
+and 89, and the 54 in the gap are exactly its brand.
+
+Overriding a role is fine and several consumers should. Overriding it to our
+value is the thing this reports.
+
 `alsoDefined` takes properties set outside CSS, a component doing
 `style={{ '--haus-avatar-bg': v }}` defines one that no stylesheet will show.
 

package/dist/brand.css

@@ -8,19 +8,49 @@
    meant taking haus's palette, and two products declared their own tokens rather
    than do that.
 
-   Every entry here is required. `BrandMap` in the package's TypeScript export is
-   generated from this file, so a brand that omits a role or misnames one fails a
-   consumer's build instead of rendering an unresolved var().
+   TWO TIERS, since haus#52. The base tier is required: every product has
+   surfaces, text, borders and one primary colour, and a brand that omits any of
+   them renders unstyled. The feedback tier is optional: info, success, warning
+   and error are the four semantics of a notification, and a product whose
+   statuses are not those four should not be made to invent them.
 
-   The default brand applies at :root, so the common case needs no attribute. A
-   named brand applies at [data-haus-theme="<name>"] and nests, because custom
-   properties inherit. See brands/vault.css for a complete second brand.
+   The optional half needs no machinery, because the cascade already does it. The
+   default brand applies at :root and a named brand at [data-haus-theme="<name>"],
+   and custom properties inherit, so a brand declaring only the base tier inherits
+   these feedback entries from :root. That was true before it was named. What was
+   missing is that nothing said so, `BrandMap` demanded all 54, and brand.test.ts
+   failed a brand that supplied 28. The mechanism worked and the contract around
+   it did not.
+
+   `BrandMap` in the package's TypeScript export is generated from this file:
+   base entries required, feedback entries optional, so a brand omitting a base
+   role fails a consumer's build instead of rendering an unresolved var().
+
+   One rule holds the optional half honest, in brand.test.ts: a brand that
+   supplies any entry of a status ramp supplies all of that ramp. Half a ramp is
+   worse than none, because the half that is missing falls back to haus's hue and
+   the result is a two-coloured error state nothing reports.
+
+   A THIRD TIER, form, since haus#53. Colour is not the only thing that makes two
+   products look different. Measured across drift and vault, the things a consumer
+   actually re-decides are its palette, its typeface, its shadow ramp and its
+   corner radii, and nothing else: neither product re-decides the spacing rhythm
+   or the stacking order, and drift's apparent overrides of those were the literal
+   values of haus's own primitives, typed out. So form is radius and elevation,
+   optional like feedback, and all or nothing per group for the same reason.
+
+   See brands/vault.css for a complete second brand.
    ─────────────────────────────────────────────────────────────────────────── */
 
 @layer haus.brand {
 
   :root {
 
+    /* ══ BASE TIER, required ═══════════════════════════════════════════════
+       Twenty-eight entries. Every product has these, whatever it is for. A
+       brand must supply all of them.
+       ════════════════════════════════════════════════════════════════════ */
+
     /* ── Surfaces ────────────────────────────────────────────────────────── */
     --haus-brand-surface-default:        var(--haus-damson-0);
     --haus-brand-surface-subtle:         var(--haus-damson-100);
@@ -56,6 +86,19 @@
     --haus-brand-primary-on-subtle:  var(--haus-aronia-700);
     --haus-brand-primary-disabled:   var(--haus-damson-200);
 
+    /* ── Backdrop ────────────────────────────────────────────────────────── */
+    --haus-brand-backdrop:  oklch(from var(--haus-damson-950) l c h / var(--haus-opacity-60));
+
+    /* ══ FEEDBACK TIER, optional ═══════════════════════════════════════════
+       Twenty-six entries across four ramps. These are the four semantics of a
+       notification, and not every product has them: core's statuses are the
+       states of a decision, proposed, accepted, rejected, superseded and
+       deprecated, which are five things that are not these four. A brand may
+       omit this tier and inherit it from here.
+
+       All or nothing PER RAMP. Supply every entry of `warning` or none of them.
+       ════════════════════════════════════════════════════════════════════ */
+
     /* ── Info ────────────────────────────────────────────────────────────── */
     --haus-brand-info-subtle:      var(--haus-elderberry-100);
     --haus-brand-info-border:      var(--haus-elderberry-200);
@@ -90,8 +133,55 @@
     --haus-brand-error-on-default:  var(--haus-damson-0);
     --haus-brand-error-emphasis:    var(--haus-cherry-900);
 
-    /* ── Everything else ─────────────────────────────────────────────────── */
-    --haus-brand-backdrop:  oklch(from var(--haus-damson-950) l c h / var(--haus-opacity-60));
+    /* ══ FORM TIER, optional ═══════════════════════════════════════════════
+       Seven entries. What a product re-decides that is not a colour, taken
+       from what drift and vault actually changed rather than from what a brand
+       contract could theoretically cover.
+
+       drift sits one radius step tighter than haus at all three sizes and puts
+       elevation on its own four-step shadow ramp, which is two of the six names
+       it deliberately did not rename in the 1.0 migration, because pointing them
+       at haus's would have changed the product's face and its shadow ramp while
+       every test stayed green.
+
+       Not here, deliberately: z-index, opacity, border-width and the space
+       ladder. drift appeared to override twelve of those and every one resolved
+       to the value haus's own primitive already gives, so the override was
+       typing rather than a decision. Nobody re-decides the spacing rhythm.
+
+       All or nothing per group.
+       ════════════════════════════════════════════════════════════════════ */
+
+    /* ── Radius ──────────────────────────────────────────────────────────── */
+    --haus-brand-radius-control:  var(--haus-radius-md);   /* Button, Input, Select, Textarea */
+    --haus-brand-radius-surface:  var(--haus-radius-lg);   /* Card, Toast                     */
+    --haus-brand-radius-overlay:  var(--haus-radius-xl);   /* Modal                           */
+    --haus-brand-radius-marker:   var(--haus-radius-sm);   /* Checkbox, Modal/Toast icons     */
+
+    /* radius-pill stays out of the brand: it is var(--haus-radius-full), which
+       is not a step on a scale but "as round as the box allows". A brand that
+       set it to something else would not have a rounder pill, it would have a
+       Badge that is no longer a pill. */
+
+    /* ── Elevation ───────────────────────────────────────────────────────── */
+    --haus-brand-elevation-raised:    var(--haus-shadow-sm);  /* Toggle knob  */
+    --haus-brand-elevation-floating:  var(--haus-shadow-lg);  /* Card, Toast  */
+    --haus-brand-elevation-overlay:   var(--haus-shadow-xl);  /* Modal        */
+
+    /* ── Modal width ─────────────────────────────────────────────────────── */
+    /* Modal's three sizes were 400px, 560px and 720px written into
+       Modal.module.css, invisible to the hardcoded-value gate because it has no
+       rule for width at all, the same blind spot haus#43 found for icons.
+
+       A brand entry rather than a primitive, because two products disagree and
+       both are right: haus's are a web app's, and vault ships four narrower
+       steps for a dense desktop app, 360, 420, 480 and 600. A width is a
+       proportion of the product's own layout, which is what makes it brand
+       rather than scale. vault's fourth stays vault's: a contract cannot have an
+       optional member. */
+    --haus-brand-modal-width-sm:  var(--haus-overlay-width-sm);    /* 400px: confirm, short form      */
+    --haus-brand-modal-width-md:  var(--haus-overlay-width-md);    /* 560px: the default              */
+    --haus-brand-modal-width-lg:  var(--haus-overlay-width-lg);    /* 720px: code, tables, previews   */
 
   }
 }

package/dist/guard.cjs

@@ -27,8 +27,49 @@ function findFallbackTokens(input) {
   const defined = collect(input.defines, DECLARATION);
   return [...withFallback].filter((name) => !defined.has(name)).sort();
 }
+function normalise(value) {
+  return value.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\s+/g, " ").trim();
+}
+function declarations(sources) {
+  const out = [];
+  for (const css of sources) {
+    for (const m of css.matchAll(/(?:^|[;{])\s*(--[a-zA-Z0-9-]+)\s*:\s*([^;}]+)/gm)) {
+      out.push({ name: m[1], value: normalise(m[2]) });
+    }
+  }
+  return out;
+}
+function resolve(value, table, depth = 0) {
+  if (depth > 10) return value;
+  const next = value.replace(/var\(\s*(--[a-zA-Z0-9-]+)\s*\)/g, (whole, name) => {
+    const found = table.get(name);
+    return found === void 0 ? whole : found;
+  });
+  return next === value ? value : resolve(next, table, depth + 1);
+}
+function findRestatedTokens(input) {
+  const table = /* @__PURE__ */ new Map();
+  for (const { name, value } of declarations(input.upstream)) {
+    if (!table.has(name)) table.set(name, value);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const found = [];
+  for (const { name, value } of declarations(input.defines)) {
+    const upstream = table.get(name);
+    if (upstream === void 0 || seen.has(name)) continue;
+    let kind;
+    if (value === upstream) kind = "identical";
+    else if (resolve(value, table) === resolve(upstream, table)) kind = "resolved";
+    if (kind) {
+      seen.add(name);
+      found.push({ name, kind, value, upstream });
+    }
+  }
+  return found.sort((a, b) => a.name.localeCompare(b.name));
+}
 
 exports.findFallbackTokens = findFallbackTokens;
+exports.findRestatedTokens = findRestatedTokens;
 exports.findUndefinedTokens = findUndefinedTokens;
 //# sourceMappingURL=guard.cjs.map
 //# sourceMappingURL=guard.cjs.map

package/dist/guard.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/guard.ts"],"names":[],"mappings":";;;AAuDA,IAAM,gBAAA,GAAmB,iCAAA;AACzB,IAAM,kBAAA,GAAqB,gCAAA;AAK3B,IAAM,WAAA,GAAc,sCAAA;AAuBpB,SAAS,OAAA,CAAQ,SAAmB,OAAA,EAA8B;AAChE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AAGzB,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,QAAA,CAAS,OAAO,GAAG,KAAA,CAAM,GAAA,CAAI,CAAA,CAAE,CAAC,CAAE,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,gBAAgB,CAAA;AAClD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,KAAA,MAAW,QAAQ,KAAA,CAAM,WAAA,IAAe,EAAC,EAAG,OAAA,CAAQ,IAAI,IAAI,CAAA;AAE5D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,GAAG,IAAI,EAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AAAA,IAC7D,IAAA,EAAM,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK;AAAA,IACrB,OAAA,EAAS,CAAC,GAAG,OAAO,EAAE,IAAA;AAAK,GAC7B;AACF;AAUO,SAAS,mBAAmB,KAAA,EAA6D;AAC9F,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,kBAAkB,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,OAAO,CAAC,GAAG,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AACrE","file":"guard.cjs","sourcesContent":["/**\n * The token guard: every custom property a stylesheet reads must be defined\n * somewhere the consumer actually loads.\n *\n * CSS fails silently here, which is what makes this worth shipping. `var(--x)`\n * for an undefined `--x` is invalid at computed-value time: the declaration is\n * dropped and the property inherits. No console warning, no build error,\n * nothing in review: a focus ring is simply absent, and a missing duration\n * looks like a design choice.\n *\n * drift wrote this check for itself and it caught five roles before they\n * reached a screen: `--color-ink-on-primary`, `--elevation-floating`,\n * `--motion-duration-emphasis`, `--radius-marker` and `--haus-focus-ring-error`.\n * The contract is defined in this package, so the check belongs here rather\n * than being rewritten by every consumer (haus#19). Shipping it is also the\n * point: a design system that can say *you have not loaded what my components\n * read* is a different thing from one that hopes you did.\n *\n * **Pure, and it does no file reading.** It takes CSS as strings, so it runs in\n * a Vitest suite, a Node script, a build step or a browser without this package\n * growing a dependency on `node:fs`. The consumer knows which files it loads;\n * this only knows what the contract is.\n *\n * @example\n * ```ts\n * import { readFileSync } from 'node:fs'\n * import { findUndefinedTokens } from 'haus-tokens/guard'\n *\n * const read = (p: string) => readFileSync(p, 'utf8')\n *\n * it('reads no role this app does not load', () => {\n *   const { missing } = findUndefinedTokens({\n *     reads:   [read('node_modules/haus-components/dist/styles.css')],\n *     defines: [\n *       read('node_modules/haus-tokens/dist/primitives.css'),\n *       read('node_modules/haus-tokens/dist/semantics.css'),\n *       read('node_modules/haus-tokens/dist/motion.css'),\n *       read('src/tokens/overrides.css'),\n *     ],\n *   })\n *   expect(missing).toEqual([])\n * })\n * ```\n */\n\n/**\n * `var(--x)` with no fallback.\n *\n * A reference with a fallback, `var(--x, 0.2s)`, is a real value whether or\n * not the property is set, so it cannot fail at computed-value time and is\n * excluded. It is still usually a sign the name is wrong: a fallback that never\n * loses is a hardcoded value wearing a token's clothes. `findFallbackTokens`\n * below is for looking at those deliberately, rather than failing a build on\n * something that works.\n */\nconst READ_NO_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g\nconst READ_WITH_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*,/g\n// `m` is load-bearing: without it `^` only matches the start of the whole\n// string, so every declaration on its own indented line after a newline is\n// missed and only the first in each block is seen. Caught by this package's\n// own guard test: semantics.css came back with 41 undefined roles.\nconst DECLARATION = /(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:/gm\n\nexport interface TokenGuardInput {\n  /** The CSS doing the reading: the component stylesheet, your own modules. */\n  reads: string[]\n  /** The CSS doing the defining: the token layers you load, plus your own. */\n  defines: string[]\n  /**\n   * Names defined outside CSS. A component that sets `style={{ '--x': v }}`\n   * defines the property on the element, and no stylesheet will show it.\n   */\n  alsoDefined?: string[]\n}\n\nexport interface TokenGuardResult {\n  /** Read with no fallback and defined nowhere. Sorted, so a diff is stable. */\n  missing: string[]\n  /** Every property read without a fallback. */\n  read: string[]\n  /** Every property declared across `defines` and `alsoDefined`. */\n  defined: string[]\n}\n\nfunction collect(sources: string[], pattern: RegExp): Set<string> {\n  const found = new Set<string>()\n  for (const css of sources) {\n    // A fresh lastIndex per source: a /g regex is stateful, and reusing one\n    // across inputs silently skips the start of every source after the first.\n    pattern.lastIndex = 0\n    for (const m of css.matchAll(pattern)) found.add(m[1]!)\n  }\n  return found\n}\n\n/**\n * Which properties are read but never defined.\n *\n * An empty `missing` is the assertion. The other two fields are for a consumer\n * that wants to report rather than fail: `read.length` is also worth asserting\n * as a floor, because a wrong path makes every check pass by finding nothing.\n */\nexport function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult {\n  const read = collect(input.reads, READ_NO_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  for (const name of input.alsoDefined ?? []) defined.add(name)\n\n  return {\n    missing: [...read].filter((name) => !defined.has(name)).sort(),\n    read: [...read].sort(),\n    defined: [...defined].sort(),\n  }\n}\n\n/**\n * Which properties are only ever read with a fallback.\n *\n * Not a failure, and deliberately a separate function so it cannot be mistaken\n * for one. A fallback that never loses is a hardcoded value wearing a token's\n * clothes, and the list is worth reading occasionally rather than failing a\n * build over.\n */\nexport function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[] {\n  const withFallback = collect(input.reads, READ_WITH_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  return [...withFallback].filter((name) => !defined.has(name)).sort()\n}\n"]}
+{"version":3,"sources":["../src/guard.ts"],"names":[],"mappings":";;;AAuDA,IAAM,gBAAA,GAAmB,iCAAA;AACzB,IAAM,kBAAA,GAAqB,gCAAA;AAK3B,IAAM,WAAA,GAAc,sCAAA;AAuBpB,SAAS,OAAA,CAAQ,SAAmB,OAAA,EAA8B;AAChE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AAGzB,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,QAAA,CAAS,OAAO,GAAG,KAAA,CAAM,GAAA,CAAI,CAAA,CAAE,CAAC,CAAE,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,gBAAgB,CAAA;AAClD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,KAAA,MAAW,QAAQ,KAAA,CAAM,WAAA,IAAe,EAAC,EAAG,OAAA,CAAQ,IAAI,IAAI,CAAA;AAE5D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,GAAG,IAAI,EAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AAAA,IAC7D,IAAA,EAAM,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK;AAAA,IACrB,OAAA,EAAS,CAAC,GAAG,OAAO,EAAE,IAAA;AAAK,GAC7B;AACF;AAUO,SAAS,mBAAmB,KAAA,EAA6D;AAC9F,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,kBAAkB,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,OAAO,CAAC,GAAG,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AACrE;AAgCA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAO,KAAA,CACJ,QAAQ,mBAAA,EAAqB,EAAE,EAC/B,OAAA,CAAQ,MAAA,EAAQ,GAAG,CAAA,CACnB,IAAA,EAAK;AACV;AAEA,SAAS,aAAa,OAAA,EAAkC;AACtD,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,IAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,QAAA,CAAS,iDAAiD,CAAA,EAAG;AAC/E,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,CAAA,CAAE,CAAC,CAAA,EAAI,KAAA,EAAO,SAAA,CAAU,CAAA,CAAE,CAAC,CAAE,CAAA,EAAG,CAAA;AAAA,IACnD;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAUA,SAAS,OAAA,CAAQ,KAAA,EAAe,KAAA,EAA4B,KAAA,GAAQ,CAAA,EAAW;AAC7E,EAAA,IAAI,KAAA,GAAQ,IAAI,OAAO,KAAA;AACvB,EAAA,MAAM,OAAO,KAAA,CAAM,OAAA,CAAQ,iCAAA,EAAmC,CAAC,OAAO,IAAA,KAAiB;AACrF,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAC5B,IAAA,OAAO,KAAA,KAAU,SAAY,KAAA,GAAQ,KAAA;AAAA,EACvC,CAAC,CAAA;AACD,EAAA,OAAO,SAAS,KAAA,GAAQ,KAAA,GAAQ,QAAQ,IAAA,EAAM,KAAA,EAAO,QAAQ,CAAC,CAAA;AAChE;AA0DO,SAAS,mBAAmB,KAAA,EAAwC;AACzE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AACtC,EAAA,KAAA,MAAW,EAAE,IAAA,EAAM,KAAA,MAAW,YAAA,CAAa,KAAA,CAAM,QAAQ,CAAA,EAAG;AAE1D,IAAA,IAAI,CAAC,MAAM,GAAA,CAAI,IAAI,GAAG,KAAA,CAAM,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,EAC7C;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,QAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,EAAE,IAAA,EAAM,KAAA,MAAW,YAAA,CAAa,KAAA,CAAM,OAAO,CAAA,EAAG;AACzD,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAC/B,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAE9C,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,KAAA,KAAU,UAAU,IAAA,GAAO,WAAA;AAAA,SAAA,IACtB,OAAA,CAAQ,OAAO,KAAK,CAAA,KAAM,QAAQ,QAAA,EAAU,KAAK,GAAG,IAAA,GAAO,UAAA;AAEpE,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AACb,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,UAAU,CAAA;AAAA,IAC5C;AAAA,EACF;AACA,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC1D","file":"guard.cjs","sourcesContent":["/**\n * The token guard: every custom property a stylesheet reads must be defined\n * somewhere the consumer actually loads.\n *\n * CSS fails silently here, which is what makes this worth shipping. `var(--x)`\n * for an undefined `--x` is invalid at computed-value time: the declaration is\n * dropped and the property inherits. No console warning, no build error,\n * nothing in review: a focus ring is simply absent, and a missing duration\n * looks like a design choice.\n *\n * drift wrote this check for itself and it caught five roles before they\n * reached a screen: `--color-ink-on-primary`, `--elevation-floating`,\n * `--motion-duration-emphasis`, `--radius-marker` and `--haus-focus-ring-error`.\n * The contract is defined in this package, so the check belongs here rather\n * than being rewritten by every consumer (haus#19). Shipping it is also the\n * point: a design system that can say *you have not loaded what my components\n * read* is a different thing from one that hopes you did.\n *\n * **Pure, and it does no file reading.** It takes CSS as strings, so it runs in\n * a Vitest suite, a Node script, a build step or a browser without this package\n * growing a dependency on `node:fs`. The consumer knows which files it loads;\n * this only knows what the contract is.\n *\n * @example\n * ```ts\n * import { readFileSync } from 'node:fs'\n * import { findUndefinedTokens } from 'haus-tokens/guard'\n *\n * const read = (p: string) => readFileSync(p, 'utf8')\n *\n * it('reads no role this app does not load', () => {\n *   const { missing } = findUndefinedTokens({\n *     reads:   [read('node_modules/haus-components/dist/styles.css')],\n *     defines: [\n *       read('node_modules/haus-tokens/dist/primitives.css'),\n *       read('node_modules/haus-tokens/dist/semantics.css'),\n *       read('node_modules/haus-tokens/dist/motion.css'),\n *       read('src/tokens/overrides.css'),\n *     ],\n *   })\n *   expect(missing).toEqual([])\n * })\n * ```\n */\n\n/**\n * `var(--x)` with no fallback.\n *\n * A reference with a fallback, `var(--x, 0.2s)`, is a real value whether or\n * not the property is set, so it cannot fail at computed-value time and is\n * excluded. It is still usually a sign the name is wrong: a fallback that never\n * loses is a hardcoded value wearing a token's clothes. `findFallbackTokens`\n * below is for looking at those deliberately, rather than failing a build on\n * something that works.\n */\nconst READ_NO_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g\nconst READ_WITH_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*,/g\n// `m` is load-bearing: without it `^` only matches the start of the whole\n// string, so every declaration on its own indented line after a newline is\n// missed and only the first in each block is seen. Caught by this package's\n// own guard test: semantics.css came back with 41 undefined roles.\nconst DECLARATION = /(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:/gm\n\nexport interface TokenGuardInput {\n  /** The CSS doing the reading: the component stylesheet, your own modules. */\n  reads: string[]\n  /** The CSS doing the defining: the token layers you load, plus your own. */\n  defines: string[]\n  /**\n   * Names defined outside CSS. A component that sets `style={{ '--x': v }}`\n   * defines the property on the element, and no stylesheet will show it.\n   */\n  alsoDefined?: string[]\n}\n\nexport interface TokenGuardResult {\n  /** Read with no fallback and defined nowhere. Sorted, so a diff is stable. */\n  missing: string[]\n  /** Every property read without a fallback. */\n  read: string[]\n  /** Every property declared across `defines` and `alsoDefined`. */\n  defined: string[]\n}\n\nfunction collect(sources: string[], pattern: RegExp): Set<string> {\n  const found = new Set<string>()\n  for (const css of sources) {\n    // A fresh lastIndex per source: a /g regex is stateful, and reusing one\n    // across inputs silently skips the start of every source after the first.\n    pattern.lastIndex = 0\n    for (const m of css.matchAll(pattern)) found.add(m[1]!)\n  }\n  return found\n}\n\n/**\n * Which properties are read but never defined.\n *\n * An empty `missing` is the assertion. The other two fields are for a consumer\n * that wants to report rather than fail: `read.length` is also worth asserting\n * as a floor, because a wrong path makes every check pass by finding nothing.\n */\nexport function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult {\n  const read = collect(input.reads, READ_NO_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  for (const name of input.alsoDefined ?? []) defined.add(name)\n\n  return {\n    missing: [...read].filter((name) => !defined.has(name)).sort(),\n    read: [...read].sort(),\n    defined: [...defined].sort(),\n  }\n}\n\n/**\n * Which properties are only ever read with a fallback.\n *\n * Not a failure, and deliberately a separate function so it cannot be mistaken\n * for one. A fallback that never loses is a hardcoded value wearing a token's\n * clothes, and the list is worth reading occasionally rather than failing a\n * build over.\n */\nexport function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[] {\n  const withFallback = collect(input.reads, READ_WITH_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  return [...withFallback].filter((name) => !defined.has(name)).sort()\n}\n\n/* ─── Restatement: a consumer keeping its own copy of a value we ship ────────\n *\n * The second failure this package can see and a consumer cannot. An unresolved\n * var() at least renders wrong; a restated value renders perfectly, and is only\n * wrong from the moment one of the two sides moves.\n *\n * vault carried 141 of them and closed it as `vault#25`, then wrote this rule by\n * hand so it could not come back. drift has 89 and never had the rule: it was\n * written in the repository next door and never ported, which is why it ships\n * from here now (haus#53).\n *\n * TWO KINDS, and the second is the one a hand-written version missed.\n *\n *   identical  the declaration is the same text on both sides.\n *              `--haus-space-inset-md: var(--haus-space-4)` written twice.\n *              77 of drift's.\n *\n *   resolved   the text differs and the value does not. `--haus-z-modal: 400`\n *              against this package's `var(--haus-z-400)`, where `--haus-z-400`\n *              is `400`. 12 of drift's, and vault's hand-written rule compares\n *              declaration text so it would have found none of them.\n *\n * The second kind is worth the resolver: hardcoding the number a token resolves\n * to is how a consumer opts out of a scale while appearing to be on it.\n */\n\n/** One `--x: value` declaration, in source order. */\ntype Declaration = { name: string; value: string }\n\n/** Comments out, whitespace flattened, so two spellings of one value compare equal. */\nfunction normalise(value: string): string {\n  return value\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, '')\n    .replace(/\\s+/g, ' ')\n    .trim()\n}\n\nfunction declarations(sources: string[]): Declaration[] {\n  const out: Declaration[] = []\n  for (const css of sources) {\n    for (const m of css.matchAll(/(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:\\s*([^;}]+)/gm)) {\n      out.push({ name: m[1]!, value: normalise(m[2]!) })\n    }\n  }\n  return out\n}\n\n/**\n * Follow `var()` references until nothing is left to follow.\n *\n * Depth-limited rather than cycle-tracked: a token graph is shallow, and a\n * limit is one line where a visited-set is five. Hitting the limit returns the\n * partially resolved value, which compares unequal and so reports nothing,\n * because a guard that guesses is worse than one that misses.\n */\nfunction resolve(value: string, table: Map<string, string>, depth = 0): string {\n  if (depth > 10) return value\n  const next = value.replace(/var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g, (whole, name: string) => {\n    const found = table.get(name)\n    return found === undefined ? whole : found\n  })\n  return next === value ? value : resolve(next, table, depth + 1)\n}\n\nexport interface Restatement {\n  /** The custom property the consumer declares. */\n  name: string\n  /** `identical` if the declaration matches ours as text, `resolved` if only the value does. */\n  kind: 'identical' | 'resolved'\n  /** What the consumer wrote. */\n  value: string\n  /** What this package already says, as written. */\n  upstream: string\n}\n\nexport interface RestatementInput {\n  /** The consumer's own token CSS: the file where it overrides or adds. */\n  defines: string[]\n  /** This package's layers, as the consumer actually loads them. */\n  upstream: string[]\n}\n\n/**\n * Which of a consumer's declarations this package already ships.\n *\n * An empty array is the assertion. A consumer may override any role it likes,\n * and several should: what it may not do is override a role to the value the\n * package already gives, because that is not an override, it is a copy, and a\n * copy is correct only until one side moves.\n *\n * Read the package from `node_modules` rather than a fixture. The point is to\n * compare against the value that will actually load.\n *\n * WHICH FILES TO PASS AS `upstream`, because it changes the question asked.\n *\n * Include `brand.css` and the answer is *does this consumer restate anything we\n * ship, including our brand's choices*. Leave it out and the answer is *does it\n * restate anything structural*, with its own colour choices treated as its\n * business.\n *\n * Measured against drift, whose colour overrides are a brand written as role\n * overrides: **143 with `brand.css`, 89 without.** The 54 in the gap are exactly\n * its brand. So a consumer that has a brand file, or intends one, leaves\n * `brand.css` out and gets only the copies; a consumer with no brand of its own\n * puts it in and is told that its colour overrides agree with ours, which is a\n * different and also useful thing to know.\n *\n * @example\n * ```ts\n * import { findRestatedTokens } from 'haus-tokens/guard'\n *\n * it('restates no value haus already ships', () => {\n *   const copies = findRestatedTokens({\n *     defines:  [read('src/tokens/semantics.css')],\n *     upstream: HAUS_FILES.map(read),\n *   })\n *   expect(copies.map((c) => `${c.name} (${c.kind})`)).toEqual([])\n * })\n * ```\n */\nexport function findRestatedTokens(input: RestatementInput): Restatement[] {\n  const table = new Map<string, string>()\n  for (const { name, value } of declarations(input.upstream)) {\n    // First declaration wins, matching the cascade order the consumer loads in.\n    if (!table.has(name)) table.set(name, value)\n  }\n\n  const seen = new Set<string>()\n  const found: Restatement[] = []\n  for (const { name, value } of declarations(input.defines)) {\n    const upstream = table.get(name)\n    if (upstream === undefined || seen.has(name)) continue\n\n    let kind: Restatement['kind'] | undefined\n    if (value === upstream) kind = 'identical'\n    else if (resolve(value, table) === resolve(upstream, table)) kind = 'resolved'\n\n    if (kind) {\n      seen.add(name)\n      found.push({ name, kind, value, upstream })\n    }\n  }\n  return found.sort((a, b) => a.name.localeCompare(b.name))\n}\n"]}

package/dist/guard.d.cts

@@ -78,5 +78,60 @@ declare function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult;
  * build over.
  */
 declare function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[];
+interface Restatement {
+    /** The custom property the consumer declares. */
+    name: string;
+    /** `identical` if the declaration matches ours as text, `resolved` if only the value does. */
+    kind: 'identical' | 'resolved';
+    /** What the consumer wrote. */
+    value: string;
+    /** What this package already says, as written. */
+    upstream: string;
+}
+interface RestatementInput {
+    /** The consumer's own token CSS: the file where it overrides or adds. */
+    defines: string[];
+    /** This package's layers, as the consumer actually loads them. */
+    upstream: string[];
+}
+/**
+ * Which of a consumer's declarations this package already ships.
+ *
+ * An empty array is the assertion. A consumer may override any role it likes,
+ * and several should: what it may not do is override a role to the value the
+ * package already gives, because that is not an override, it is a copy, and a
+ * copy is correct only until one side moves.
+ *
+ * Read the package from `node_modules` rather than a fixture. The point is to
+ * compare against the value that will actually load.
+ *
+ * WHICH FILES TO PASS AS `upstream`, because it changes the question asked.
+ *
+ * Include `brand.css` and the answer is *does this consumer restate anything we
+ * ship, including our brand's choices*. Leave it out and the answer is *does it
+ * restate anything structural*, with its own colour choices treated as its
+ * business.
+ *
+ * Measured against drift, whose colour overrides are a brand written as role
+ * overrides: **143 with `brand.css`, 89 without.** The 54 in the gap are exactly
+ * its brand. So a consumer that has a brand file, or intends one, leaves
+ * `brand.css` out and gets only the copies; a consumer with no brand of its own
+ * puts it in and is told that its colour overrides agree with ours, which is a
+ * different and also useful thing to know.
+ *
+ * @example
+ * ```ts
+ * import { findRestatedTokens } from 'haus-tokens/guard'
+ *
+ * it('restates no value haus already ships', () => {
+ *   const copies = findRestatedTokens({
+ *     defines:  [read('src/tokens/semantics.css')],
+ *     upstream: HAUS_FILES.map(read),
+ *   })
+ *   expect(copies.map((c) => `${c.name} (${c.kind})`)).toEqual([])
+ * })
+ * ```
+ */
+declare function findRestatedTokens(input: RestatementInput): Restatement[];
 
-export { type TokenGuardInput, type TokenGuardResult, findFallbackTokens, findUndefinedTokens };
+export { type Restatement, type RestatementInput, type TokenGuardInput, type TokenGuardResult, findFallbackTokens, findRestatedTokens, findUndefinedTokens };

package/dist/guard.d.ts

@@ -78,5 +78,60 @@ declare function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult;
  * build over.
  */
 declare function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[];
+interface Restatement {
+    /** The custom property the consumer declares. */
+    name: string;
+    /** `identical` if the declaration matches ours as text, `resolved` if only the value does. */
+    kind: 'identical' | 'resolved';
+    /** What the consumer wrote. */
+    value: string;
+    /** What this package already says, as written. */
+    upstream: string;
+}
+interface RestatementInput {
+    /** The consumer's own token CSS: the file where it overrides or adds. */
+    defines: string[];
+    /** This package's layers, as the consumer actually loads them. */
+    upstream: string[];
+}
+/**
+ * Which of a consumer's declarations this package already ships.
+ *
+ * An empty array is the assertion. A consumer may override any role it likes,
+ * and several should: what it may not do is override a role to the value the
+ * package already gives, because that is not an override, it is a copy, and a
+ * copy is correct only until one side moves.
+ *
+ * Read the package from `node_modules` rather than a fixture. The point is to
+ * compare against the value that will actually load.
+ *
+ * WHICH FILES TO PASS AS `upstream`, because it changes the question asked.
+ *
+ * Include `brand.css` and the answer is *does this consumer restate anything we
+ * ship, including our brand's choices*. Leave it out and the answer is *does it
+ * restate anything structural*, with its own colour choices treated as its
+ * business.
+ *
+ * Measured against drift, whose colour overrides are a brand written as role
+ * overrides: **143 with `brand.css`, 89 without.** The 54 in the gap are exactly
+ * its brand. So a consumer that has a brand file, or intends one, leaves
+ * `brand.css` out and gets only the copies; a consumer with no brand of its own
+ * puts it in and is told that its colour overrides agree with ours, which is a
+ * different and also useful thing to know.
+ *
+ * @example
+ * ```ts
+ * import { findRestatedTokens } from 'haus-tokens/guard'
+ *
+ * it('restates no value haus already ships', () => {
+ *   const copies = findRestatedTokens({
+ *     defines:  [read('src/tokens/semantics.css')],
+ *     upstream: HAUS_FILES.map(read),
+ *   })
+ *   expect(copies.map((c) => `${c.name} (${c.kind})`)).toEqual([])
+ * })
+ * ```
+ */
+declare function findRestatedTokens(input: RestatementInput): Restatement[];
 
-export { type TokenGuardInput, type TokenGuardResult, findFallbackTokens, findUndefinedTokens };
+export { type Restatement, type RestatementInput, type TokenGuardInput, type TokenGuardResult, findFallbackTokens, findRestatedTokens, findUndefinedTokens };

package/dist/guard.js

@@ -25,7 +25,47 @@ function findFallbackTokens(input) {
   const defined = collect(input.defines, DECLARATION);
   return [...withFallback].filter((name) => !defined.has(name)).sort();
 }
+function normalise(value) {
+  return value.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\s+/g, " ").trim();
+}
+function declarations(sources) {
+  const out = [];
+  for (const css of sources) {
+    for (const m of css.matchAll(/(?:^|[;{])\s*(--[a-zA-Z0-9-]+)\s*:\s*([^;}]+)/gm)) {
+      out.push({ name: m[1], value: normalise(m[2]) });
+    }
+  }
+  return out;
+}
+function resolve(value, table, depth = 0) {
+  if (depth > 10) return value;
+  const next = value.replace(/var\(\s*(--[a-zA-Z0-9-]+)\s*\)/g, (whole, name) => {
+    const found = table.get(name);
+    return found === void 0 ? whole : found;
+  });
+  return next === value ? value : resolve(next, table, depth + 1);
+}
+function findRestatedTokens(input) {
+  const table = /* @__PURE__ */ new Map();
+  for (const { name, value } of declarations(input.upstream)) {
+    if (!table.has(name)) table.set(name, value);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const found = [];
+  for (const { name, value } of declarations(input.defines)) {
+    const upstream = table.get(name);
+    if (upstream === void 0 || seen.has(name)) continue;
+    let kind;
+    if (value === upstream) kind = "identical";
+    else if (resolve(value, table) === resolve(upstream, table)) kind = "resolved";
+    if (kind) {
+      seen.add(name);
+      found.push({ name, kind, value, upstream });
+    }
+  }
+  return found.sort((a, b) => a.name.localeCompare(b.name));
+}
 
-export { findFallbackTokens, findUndefinedTokens };
+export { findFallbackTokens, findRestatedTokens, findUndefinedTokens };
 //# sourceMappingURL=guard.js.map
 //# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/guard.ts"],"names":[],"mappings":";AAuDA,IAAM,gBAAA,GAAmB,iCAAA;AACzB,IAAM,kBAAA,GAAqB,gCAAA;AAK3B,IAAM,WAAA,GAAc,sCAAA;AAuBpB,SAAS,OAAA,CAAQ,SAAmB,OAAA,EAA8B;AAChE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AAGzB,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,QAAA,CAAS,OAAO,GAAG,KAAA,CAAM,GAAA,CAAI,CAAA,CAAE,CAAC,CAAE,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,gBAAgB,CAAA;AAClD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,KAAA,MAAW,QAAQ,KAAA,CAAM,WAAA,IAAe,EAAC,EAAG,OAAA,CAAQ,IAAI,IAAI,CAAA;AAE5D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,GAAG,IAAI,EAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AAAA,IAC7D,IAAA,EAAM,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK;AAAA,IACrB,OAAA,EAAS,CAAC,GAAG,OAAO,EAAE,IAAA;AAAK,GAC7B;AACF;AAUO,SAAS,mBAAmB,KAAA,EAA6D;AAC9F,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,kBAAkB,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,OAAO,CAAC,GAAG,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AACrE","file":"guard.js","sourcesContent":["/**\n * The token guard: every custom property a stylesheet reads must be defined\n * somewhere the consumer actually loads.\n *\n * CSS fails silently here, which is what makes this worth shipping. `var(--x)`\n * for an undefined `--x` is invalid at computed-value time: the declaration is\n * dropped and the property inherits. No console warning, no build error,\n * nothing in review: a focus ring is simply absent, and a missing duration\n * looks like a design choice.\n *\n * drift wrote this check for itself and it caught five roles before they\n * reached a screen: `--color-ink-on-primary`, `--elevation-floating`,\n * `--motion-duration-emphasis`, `--radius-marker` and `--haus-focus-ring-error`.\n * The contract is defined in this package, so the check belongs here rather\n * than being rewritten by every consumer (haus#19). Shipping it is also the\n * point: a design system that can say *you have not loaded what my components\n * read* is a different thing from one that hopes you did.\n *\n * **Pure, and it does no file reading.** It takes CSS as strings, so it runs in\n * a Vitest suite, a Node script, a build step or a browser without this package\n * growing a dependency on `node:fs`. The consumer knows which files it loads;\n * this only knows what the contract is.\n *\n * @example\n * ```ts\n * import { readFileSync } from 'node:fs'\n * import { findUndefinedTokens } from 'haus-tokens/guard'\n *\n * const read = (p: string) => readFileSync(p, 'utf8')\n *\n * it('reads no role this app does not load', () => {\n *   const { missing } = findUndefinedTokens({\n *     reads:   [read('node_modules/haus-components/dist/styles.css')],\n *     defines: [\n *       read('node_modules/haus-tokens/dist/primitives.css'),\n *       read('node_modules/haus-tokens/dist/semantics.css'),\n *       read('node_modules/haus-tokens/dist/motion.css'),\n *       read('src/tokens/overrides.css'),\n *     ],\n *   })\n *   expect(missing).toEqual([])\n * })\n * ```\n */\n\n/**\n * `var(--x)` with no fallback.\n *\n * A reference with a fallback, `var(--x, 0.2s)`, is a real value whether or\n * not the property is set, so it cannot fail at computed-value time and is\n * excluded. It is still usually a sign the name is wrong: a fallback that never\n * loses is a hardcoded value wearing a token's clothes. `findFallbackTokens`\n * below is for looking at those deliberately, rather than failing a build on\n * something that works.\n */\nconst READ_NO_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g\nconst READ_WITH_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*,/g\n// `m` is load-bearing: without it `^` only matches the start of the whole\n// string, so every declaration on its own indented line after a newline is\n// missed and only the first in each block is seen. Caught by this package's\n// own guard test: semantics.css came back with 41 undefined roles.\nconst DECLARATION = /(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:/gm\n\nexport interface TokenGuardInput {\n  /** The CSS doing the reading: the component stylesheet, your own modules. */\n  reads: string[]\n  /** The CSS doing the defining: the token layers you load, plus your own. */\n  defines: string[]\n  /**\n   * Names defined outside CSS. A component that sets `style={{ '--x': v }}`\n   * defines the property on the element, and no stylesheet will show it.\n   */\n  alsoDefined?: string[]\n}\n\nexport interface TokenGuardResult {\n  /** Read with no fallback and defined nowhere. Sorted, so a diff is stable. */\n  missing: string[]\n  /** Every property read without a fallback. */\n  read: string[]\n  /** Every property declared across `defines` and `alsoDefined`. */\n  defined: string[]\n}\n\nfunction collect(sources: string[], pattern: RegExp): Set<string> {\n  const found = new Set<string>()\n  for (const css of sources) {\n    // A fresh lastIndex per source: a /g regex is stateful, and reusing one\n    // across inputs silently skips the start of every source after the first.\n    pattern.lastIndex = 0\n    for (const m of css.matchAll(pattern)) found.add(m[1]!)\n  }\n  return found\n}\n\n/**\n * Which properties are read but never defined.\n *\n * An empty `missing` is the assertion. The other two fields are for a consumer\n * that wants to report rather than fail: `read.length` is also worth asserting\n * as a floor, because a wrong path makes every check pass by finding nothing.\n */\nexport function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult {\n  const read = collect(input.reads, READ_NO_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  for (const name of input.alsoDefined ?? []) defined.add(name)\n\n  return {\n    missing: [...read].filter((name) => !defined.has(name)).sort(),\n    read: [...read].sort(),\n    defined: [...defined].sort(),\n  }\n}\n\n/**\n * Which properties are only ever read with a fallback.\n *\n * Not a failure, and deliberately a separate function so it cannot be mistaken\n * for one. A fallback that never loses is a hardcoded value wearing a token's\n * clothes, and the list is worth reading occasionally rather than failing a\n * build over.\n */\nexport function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[] {\n  const withFallback = collect(input.reads, READ_WITH_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  return [...withFallback].filter((name) => !defined.has(name)).sort()\n}\n"]}
+{"version":3,"sources":["../src/guard.ts"],"names":[],"mappings":";AAuDA,IAAM,gBAAA,GAAmB,iCAAA;AACzB,IAAM,kBAAA,GAAqB,gCAAA;AAK3B,IAAM,WAAA,GAAc,sCAAA;AAuBpB,SAAS,OAAA,CAAQ,SAAmB,OAAA,EAA8B;AAChE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AAGzB,IAAA,OAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,KAAA,MAAW,CAAA,IAAK,IAAI,QAAA,CAAS,OAAO,GAAG,KAAA,CAAM,GAAA,CAAI,CAAA,CAAE,CAAC,CAAE,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,oBAAoB,KAAA,EAA0C;AAC5E,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,gBAAgB,CAAA;AAClD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,KAAA,MAAW,QAAQ,KAAA,CAAM,WAAA,IAAe,EAAC,EAAG,OAAA,CAAQ,IAAI,IAAI,CAAA;AAE5D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAC,GAAG,IAAI,EAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AAAA,IAC7D,IAAA,EAAM,CAAC,GAAG,IAAI,EAAE,IAAA,EAAK;AAAA,IACrB,OAAA,EAAS,CAAC,GAAG,OAAO,EAAE,IAAA;AAAK,GAC7B;AACF;AAUO,SAAS,mBAAmB,KAAA,EAA6D;AAC9F,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,CAAM,KAAA,EAAO,kBAAkB,CAAA;AAC5D,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,OAAA,EAAS,WAAW,CAAA;AAClD,EAAA,OAAO,CAAC,GAAG,YAAY,CAAA,CAAE,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,EAAE,IAAA,EAAK;AACrE;AAgCA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAO,KAAA,CACJ,QAAQ,mBAAA,EAAqB,EAAE,EAC/B,OAAA,CAAQ,MAAA,EAAQ,GAAG,CAAA,CACnB,IAAA,EAAK;AACV;AAEA,SAAS,aAAa,OAAA,EAAkC;AACtD,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,IAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,QAAA,CAAS,iDAAiD,CAAA,EAAG;AAC/E,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,IAAA,EAAM,CAAA,CAAE,CAAC,CAAA,EAAI,KAAA,EAAO,SAAA,CAAU,CAAA,CAAE,CAAC,CAAE,CAAA,EAAG,CAAA;AAAA,IACnD;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAUA,SAAS,OAAA,CAAQ,KAAA,EAAe,KAAA,EAA4B,KAAA,GAAQ,CAAA,EAAW;AAC7E,EAAA,IAAI,KAAA,GAAQ,IAAI,OAAO,KAAA;AACvB,EAAA,MAAM,OAAO,KAAA,CAAM,OAAA,CAAQ,iCAAA,EAAmC,CAAC,OAAO,IAAA,KAAiB;AACrF,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAC5B,IAAA,OAAO,KAAA,KAAU,SAAY,KAAA,GAAQ,KAAA;AAAA,EACvC,CAAC,CAAA;AACD,EAAA,OAAO,SAAS,KAAA,GAAQ,KAAA,GAAQ,QAAQ,IAAA,EAAM,KAAA,EAAO,QAAQ,CAAC,CAAA;AAChE;AA0DO,SAAS,mBAAmB,KAAA,EAAwC;AACzE,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAoB;AACtC,EAAA,KAAA,MAAW,EAAE,IAAA,EAAM,KAAA,MAAW,YAAA,CAAa,KAAA,CAAM,QAAQ,CAAA,EAAG;AAE1D,IAAA,IAAI,CAAC,MAAM,GAAA,CAAI,IAAI,GAAG,KAAA,CAAM,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,EAC7C;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,MAAM,QAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,EAAE,IAAA,EAAM,KAAA,MAAW,YAAA,CAAa,KAAA,CAAM,OAAO,CAAA,EAAG;AACzD,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,IAAI,CAAA;AAC/B,IAAA,IAAI,QAAA,KAAa,MAAA,IAAa,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,EAAG;AAE9C,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI,KAAA,KAAU,UAAU,IAAA,GAAO,WAAA;AAAA,SAAA,IACtB,OAAA,CAAQ,OAAO,KAAK,CAAA,KAAM,QAAQ,QAAA,EAAU,KAAK,GAAG,IAAA,GAAO,UAAA;AAEpE,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,IAAA,CAAK,IAAI,IAAI,CAAA;AACb,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,UAAU,CAAA;AAAA,IAC5C;AAAA,EACF;AACA,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAM,EAAE,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI,CAAC,CAAA;AAC1D","file":"guard.js","sourcesContent":["/**\n * The token guard: every custom property a stylesheet reads must be defined\n * somewhere the consumer actually loads.\n *\n * CSS fails silently here, which is what makes this worth shipping. `var(--x)`\n * for an undefined `--x` is invalid at computed-value time: the declaration is\n * dropped and the property inherits. No console warning, no build error,\n * nothing in review: a focus ring is simply absent, and a missing duration\n * looks like a design choice.\n *\n * drift wrote this check for itself and it caught five roles before they\n * reached a screen: `--color-ink-on-primary`, `--elevation-floating`,\n * `--motion-duration-emphasis`, `--radius-marker` and `--haus-focus-ring-error`.\n * The contract is defined in this package, so the check belongs here rather\n * than being rewritten by every consumer (haus#19). Shipping it is also the\n * point: a design system that can say *you have not loaded what my components\n * read* is a different thing from one that hopes you did.\n *\n * **Pure, and it does no file reading.** It takes CSS as strings, so it runs in\n * a Vitest suite, a Node script, a build step or a browser without this package\n * growing a dependency on `node:fs`. The consumer knows which files it loads;\n * this only knows what the contract is.\n *\n * @example\n * ```ts\n * import { readFileSync } from 'node:fs'\n * import { findUndefinedTokens } from 'haus-tokens/guard'\n *\n * const read = (p: string) => readFileSync(p, 'utf8')\n *\n * it('reads no role this app does not load', () => {\n *   const { missing } = findUndefinedTokens({\n *     reads:   [read('node_modules/haus-components/dist/styles.css')],\n *     defines: [\n *       read('node_modules/haus-tokens/dist/primitives.css'),\n *       read('node_modules/haus-tokens/dist/semantics.css'),\n *       read('node_modules/haus-tokens/dist/motion.css'),\n *       read('src/tokens/overrides.css'),\n *     ],\n *   })\n *   expect(missing).toEqual([])\n * })\n * ```\n */\n\n/**\n * `var(--x)` with no fallback.\n *\n * A reference with a fallback, `var(--x, 0.2s)`, is a real value whether or\n * not the property is set, so it cannot fail at computed-value time and is\n * excluded. It is still usually a sign the name is wrong: a fallback that never\n * loses is a hardcoded value wearing a token's clothes. `findFallbackTokens`\n * below is for looking at those deliberately, rather than failing a build on\n * something that works.\n */\nconst READ_NO_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g\nconst READ_WITH_FALLBACK = /var\\(\\s*(--[a-zA-Z0-9-]+)\\s*,/g\n// `m` is load-bearing: without it `^` only matches the start of the whole\n// string, so every declaration on its own indented line after a newline is\n// missed and only the first in each block is seen. Caught by this package's\n// own guard test: semantics.css came back with 41 undefined roles.\nconst DECLARATION = /(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:/gm\n\nexport interface TokenGuardInput {\n  /** The CSS doing the reading: the component stylesheet, your own modules. */\n  reads: string[]\n  /** The CSS doing the defining: the token layers you load, plus your own. */\n  defines: string[]\n  /**\n   * Names defined outside CSS. A component that sets `style={{ '--x': v }}`\n   * defines the property on the element, and no stylesheet will show it.\n   */\n  alsoDefined?: string[]\n}\n\nexport interface TokenGuardResult {\n  /** Read with no fallback and defined nowhere. Sorted, so a diff is stable. */\n  missing: string[]\n  /** Every property read without a fallback. */\n  read: string[]\n  /** Every property declared across `defines` and `alsoDefined`. */\n  defined: string[]\n}\n\nfunction collect(sources: string[], pattern: RegExp): Set<string> {\n  const found = new Set<string>()\n  for (const css of sources) {\n    // A fresh lastIndex per source: a /g regex is stateful, and reusing one\n    // across inputs silently skips the start of every source after the first.\n    pattern.lastIndex = 0\n    for (const m of css.matchAll(pattern)) found.add(m[1]!)\n  }\n  return found\n}\n\n/**\n * Which properties are read but never defined.\n *\n * An empty `missing` is the assertion. The other two fields are for a consumer\n * that wants to report rather than fail: `read.length` is also worth asserting\n * as a floor, because a wrong path makes every check pass by finding nothing.\n */\nexport function findUndefinedTokens(input: TokenGuardInput): TokenGuardResult {\n  const read = collect(input.reads, READ_NO_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  for (const name of input.alsoDefined ?? []) defined.add(name)\n\n  return {\n    missing: [...read].filter((name) => !defined.has(name)).sort(),\n    read: [...read].sort(),\n    defined: [...defined].sort(),\n  }\n}\n\n/**\n * Which properties are only ever read with a fallback.\n *\n * Not a failure, and deliberately a separate function so it cannot be mistaken\n * for one. A fallback that never loses is a hardcoded value wearing a token's\n * clothes, and the list is worth reading occasionally rather than failing a\n * build over.\n */\nexport function findFallbackTokens(input: Pick<TokenGuardInput, 'reads' | 'defines'>): string[] {\n  const withFallback = collect(input.reads, READ_WITH_FALLBACK)\n  const defined = collect(input.defines, DECLARATION)\n  return [...withFallback].filter((name) => !defined.has(name)).sort()\n}\n\n/* ─── Restatement: a consumer keeping its own copy of a value we ship ────────\n *\n * The second failure this package can see and a consumer cannot. An unresolved\n * var() at least renders wrong; a restated value renders perfectly, and is only\n * wrong from the moment one of the two sides moves.\n *\n * vault carried 141 of them and closed it as `vault#25`, then wrote this rule by\n * hand so it could not come back. drift has 89 and never had the rule: it was\n * written in the repository next door and never ported, which is why it ships\n * from here now (haus#53).\n *\n * TWO KINDS, and the second is the one a hand-written version missed.\n *\n *   identical  the declaration is the same text on both sides.\n *              `--haus-space-inset-md: var(--haus-space-4)` written twice.\n *              77 of drift's.\n *\n *   resolved   the text differs and the value does not. `--haus-z-modal: 400`\n *              against this package's `var(--haus-z-400)`, where `--haus-z-400`\n *              is `400`. 12 of drift's, and vault's hand-written rule compares\n *              declaration text so it would have found none of them.\n *\n * The second kind is worth the resolver: hardcoding the number a token resolves\n * to is how a consumer opts out of a scale while appearing to be on it.\n */\n\n/** One `--x: value` declaration, in source order. */\ntype Declaration = { name: string; value: string }\n\n/** Comments out, whitespace flattened, so two spellings of one value compare equal. */\nfunction normalise(value: string): string {\n  return value\n    .replace(/\\/\\*[\\s\\S]*?\\*\\//g, '')\n    .replace(/\\s+/g, ' ')\n    .trim()\n}\n\nfunction declarations(sources: string[]): Declaration[] {\n  const out: Declaration[] = []\n  for (const css of sources) {\n    for (const m of css.matchAll(/(?:^|[;{])\\s*(--[a-zA-Z0-9-]+)\\s*:\\s*([^;}]+)/gm)) {\n      out.push({ name: m[1]!, value: normalise(m[2]!) })\n    }\n  }\n  return out\n}\n\n/**\n * Follow `var()` references until nothing is left to follow.\n *\n * Depth-limited rather than cycle-tracked: a token graph is shallow, and a\n * limit is one line where a visited-set is five. Hitting the limit returns the\n * partially resolved value, which compares unequal and so reports nothing,\n * because a guard that guesses is worse than one that misses.\n */\nfunction resolve(value: string, table: Map<string, string>, depth = 0): string {\n  if (depth > 10) return value\n  const next = value.replace(/var\\(\\s*(--[a-zA-Z0-9-]+)\\s*\\)/g, (whole, name: string) => {\n    const found = table.get(name)\n    return found === undefined ? whole : found\n  })\n  return next === value ? value : resolve(next, table, depth + 1)\n}\n\nexport interface Restatement {\n  /** The custom property the consumer declares. */\n  name: string\n  /** `identical` if the declaration matches ours as text, `resolved` if only the value does. */\n  kind: 'identical' | 'resolved'\n  /** What the consumer wrote. */\n  value: string\n  /** What this package already says, as written. */\n  upstream: string\n}\n\nexport interface RestatementInput {\n  /** The consumer's own token CSS: the file where it overrides or adds. */\n  defines: string[]\n  /** This package's layers, as the consumer actually loads them. */\n  upstream: string[]\n}\n\n/**\n * Which of a consumer's declarations this package already ships.\n *\n * An empty array is the assertion. A consumer may override any role it likes,\n * and several should: what it may not do is override a role to the value the\n * package already gives, because that is not an override, it is a copy, and a\n * copy is correct only until one side moves.\n *\n * Read the package from `node_modules` rather than a fixture. The point is to\n * compare against the value that will actually load.\n *\n * WHICH FILES TO PASS AS `upstream`, because it changes the question asked.\n *\n * Include `brand.css` and the answer is *does this consumer restate anything we\n * ship, including our brand's choices*. Leave it out and the answer is *does it\n * restate anything structural*, with its own colour choices treated as its\n * business.\n *\n * Measured against drift, whose colour overrides are a brand written as role\n * overrides: **143 with `brand.css`, 89 without.** The 54 in the gap are exactly\n * its brand. So a consumer that has a brand file, or intends one, leaves\n * `brand.css` out and gets only the copies; a consumer with no brand of its own\n * puts it in and is told that its colour overrides agree with ours, which is a\n * different and also useful thing to know.\n *\n * @example\n * ```ts\n * import { findRestatedTokens } from 'haus-tokens/guard'\n *\n * it('restates no value haus already ships', () => {\n *   const copies = findRestatedTokens({\n *     defines:  [read('src/tokens/semantics.css')],\n *     upstream: HAUS_FILES.map(read),\n *   })\n *   expect(copies.map((c) => `${c.name} (${c.kind})`)).toEqual([])\n * })\n * ```\n */\nexport function findRestatedTokens(input: RestatementInput): Restatement[] {\n  const table = new Map<string, string>()\n  for (const { name, value } of declarations(input.upstream)) {\n    // First declaration wins, matching the cascade order the consumer loads in.\n    if (!table.has(name)) table.set(name, value)\n  }\n\n  const seen = new Set<string>()\n  const found: Restatement[] = []\n  for (const { name, value } of declarations(input.defines)) {\n    const upstream = table.get(name)\n    if (upstream === undefined || seen.has(name)) continue\n\n    let kind: Restatement['kind'] | undefined\n    if (value === upstream) kind = 'identical'\n    else if (resolve(value, table) === resolve(upstream, table)) kind = 'resolved'\n\n    if (kind) {\n      seen.add(name)\n      found.push({ name, kind, value, upstream })\n    }\n  }\n  return found.sort((a, b) => a.name.localeCompare(b.name))\n}\n"]}

package/dist/index.cjs

@@ -29,6 +29,7 @@ var brandRoles = [
   "--haus-brand-primary-subtle",
   "--haus-brand-primary-on-subtle",
   "--haus-brand-primary-disabled",
+  "--haus-brand-backdrop",
   "--haus-brand-info-subtle",
   "--haus-brand-info-border",
   "--haus-brand-info-default",
@@ -55,8 +56,87 @@ var brandRoles = [
   "--haus-brand-error-on-subtle",
   "--haus-brand-error-on-default",
   "--haus-brand-error-emphasis",
+  "--haus-brand-radius-control",
+  "--haus-brand-radius-surface",
+  "--haus-brand-radius-overlay",
+  "--haus-brand-radius-marker",
+  "--haus-brand-elevation-raised",
+  "--haus-brand-elevation-floating",
+  "--haus-brand-elevation-overlay",
+  "--haus-brand-modal-width-sm",
+  "--haus-brand-modal-width-md",
+  "--haus-brand-modal-width-lg"
+];
+var brandRolesBase = [
+  "--haus-brand-surface-default",
+  "--haus-brand-surface-subtle",
+  "--haus-brand-surface-raised",
+  "--haus-brand-surface-overlay",
+  "--haus-brand-surface-sunken",
+  "--haus-brand-surface-inverse",
+  "--haus-brand-surface-disabled",
+  "--haus-brand-surface-inverse-hover",
+  "--haus-brand-ink-primary",
+  "--haus-brand-ink-secondary",
+  "--haus-brand-ink-tertiary",
+  "--haus-brand-ink-disabled",
+  "--haus-brand-ink-inverse",
+  "--haus-brand-ink-link",
+  "--haus-brand-ink-on-primary",
+  "--haus-brand-border-subtle",
+  "--haus-brand-border-default",
+  "--haus-brand-border-strong",
+  "--haus-brand-border-disabled",
+  "--haus-brand-border-inverse",
+  "--haus-brand-border-inverse-hover",
+  "--haus-brand-primary-default",
+  "--haus-brand-primary-hover",
+  "--haus-brand-primary-pressed",
+  "--haus-brand-primary-subtle",
+  "--haus-brand-primary-on-subtle",
+  "--haus-brand-primary-disabled",
   "--haus-brand-backdrop"
 ];
+var brandRolesFeedback = [
+  "--haus-brand-info-subtle",
+  "--haus-brand-info-border",
+  "--haus-brand-info-default",
+  "--haus-brand-info-on-subtle",
+  "--haus-brand-info-on-default",
+  "--haus-brand-info-emphasis",
+  "--haus-brand-success-subtle",
+  "--haus-brand-success-border",
+  "--haus-brand-success-default",
+  "--haus-brand-success-on-subtle",
+  "--haus-brand-success-on-default",
+  "--haus-brand-success-solid",
+  "--haus-brand-success-emphasis",
+  "--haus-brand-warning-subtle",
+  "--haus-brand-warning-border",
+  "--haus-brand-warning-default",
+  "--haus-brand-warning-on-subtle",
+  "--haus-brand-warning-on-default",
+  "--haus-brand-warning-solid",
+  "--haus-brand-warning-emphasis",
+  "--haus-brand-error-subtle",
+  "--haus-brand-error-border",
+  "--haus-brand-error-default",
+  "--haus-brand-error-on-subtle",
+  "--haus-brand-error-on-default",
+  "--haus-brand-error-emphasis"
+];
+var brandRolesForm = [
+  "--haus-brand-radius-control",
+  "--haus-brand-radius-surface",
+  "--haus-brand-radius-overlay",
+  "--haus-brand-radius-marker",
+  "--haus-brand-elevation-raised",
+  "--haus-brand-elevation-floating",
+  "--haus-brand-elevation-overlay",
+  "--haus-brand-modal-width-sm",
+  "--haus-brand-modal-width-md",
+  "--haus-brand-modal-width-lg"
+];
 
 // src/index.ts
 var tokens = {
@@ -250,6 +330,9 @@ var tokens = {
 };
 
 exports.brandRoles = brandRoles;
+exports.brandRolesBase = brandRolesBase;
+exports.brandRolesFeedback = brandRolesFeedback;
+exports.brandRolesForm = brandRolesForm;
 exports.tokens = tokens;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map