noecosystem-design 0.1.3 → 0.2.0

package/README.md

@@ -1,21 +1,36 @@
 # NOE Design System
 
-NOE is a multilingual, bidirectional, theme-aware React design system. This package
-publishes an agent-readable source snapshot: semantic tokens, component source,
-registry metadata, reference apps, documentation, and verification contracts.
+NOE is a multilingual, bidirectional, theme-aware React design system. The public
+`noecosystem-design` package is an agent-readable source snapshot: semantic tokens,
+component source, registry metadata, reference apps, documentation, and verification
+contracts.
 
-## Start here
+## Quick start
+
+### Give a coding agent NOE context
 
 ```bash
-# Give a coding agent the NOE source context.
 npm install noecosystem-design
+```
+
+The package is read-only source context, not a compiled runtime dependency. Start an
+agent with these files, in this order:
 
-# The agent starts with these files after installation:
+```bash
 cat node_modules/noecosystem-design/AGENTS.md
 cat node_modules/noecosystem-design/llms.txt
 cat node_modules/noecosystem-design/docs/design-system/gpt-agent-prompt.md
+```
 
-# For a writable, verifiable workspace, use a repository checkout.
+For GPT, copy
+[`docs/design-system/gpt-agent-prompt.md`](docs/design-system/gpt-agent-prompt.md),
+replace `<TARGET_REPOSITORY>` and `<DESCRIBE THE REQUESTED OUTCOME...>`, and send it
+as one task. Keep the task section outcome-focused; the template already supplies
+the stable NOE operating context.
+
+### Work on NOE itself
+
+```bash
 git clone https://github.com/NOrchestration/noe-design-system.git
 cd noe-design-system
 corepack enable
@@ -24,38 +39,34 @@ pnpm check
 ```
 
 Read [`AGENTS.md`](AGENTS.md) before changing code. Use [`llms.txt`](llms.txt) as the
-retrieval map, then read the affected package and component records. The canonical
-catalog is [`packages/registry/manifest.json`](packages/registry/manifest.json).
+retrieval map, then inspect the affected package and component records. The canonical
+component catalog is [`packages/registry/manifest.json`](packages/registry/manifest.json).
 
-For a GPT coding agent, copy
-[`docs/design-system/gpt-agent-prompt.md`](docs/design-system/gpt-agent-prompt.md),
-replace `<TARGET_REPOSITORY>` and `<DESCRIBE THE REQUESTED OUTCOME...>`, and send it
-as one task prompt. The template carries static NOE context once; put only the
-requested outcome, scope, and non-negotiable constraints in its `Task` section.
+## Package contract
 
-## What `noecosystem-design` is — and is not
+| Use `noecosystem-design` for | Do not use it for |
+| --- | --- |
+| Giving an agent NOE source, rules, registry metadata, and examples | `import { Button } from "noecosystem-design"` |
+| Reviewing or adapting NOE patterns in another repository | Replacing a published runtime component library |
+| Finding reusable components before designing a new one | Assuming a public registry endpoint is deployed |
 
-- It is a source and metadata distribution for people and coding agents.
-- It is not a compiled runtime library: do not write `import { Button } from
-  "noecosystem-design"`.
-- Internal source packages use the `@noe/*` names. They are workspace boundaries,
-  not published npm packages at this time.
-- The shadcn-compatible `@noe` registry is locally generated and tested, but its
-  external site endpoint is not yet evidenced as deployed. Do not claim or assume
-  that `shadcn add @noe/<item>` works against the public domain.
+Internal source packages use the `@noe/*` names. They are workspace boundaries, not
+published npm packages. The shadcn-compatible `@noe` registry is locally generated
+and tested, but its external endpoint is not deployment-proven; do not assume that
+`shadcn add @noe/<item>` works against a public domain.
 
-## Agent operating route
+## Agent workflow
 
 1. Read `AGENTS.md`, then `llms.txt`.
-2. Find the requested capability in `packages/registry/manifest.json`; read its
-   `useWhen`, `doNotUseWhen`, accessibility, i18n, and dependency contracts.
+2. Locate the capability in `packages/registry/manifest.json`; read its `useWhen`,
+   `doNotUseWhen`, accessibility, i18n, and dependency contracts.
 3. Reuse an existing `@noe` component before considering a foundation or new code.
-4. Preserve semantic tokens, i18n, RTL/bidi, and portal direction contracts.
+4. Preserve semantic tokens, i18n, RTL/bidi, and portal-direction contracts.
 5. Update source, stories, tests, registry metadata, and documentation together.
-6. Report only executed verification; planned or locally generated registry output
-   is not deployment evidence.
+6. Report only checks actually executed; local registry output is not evidence of a
+   deployed external installation path.
 
-## Workspace commands
+## Workspace checks
 
 | Command | Purpose |
 | --- | --- |
@@ -70,6 +81,28 @@ requested outcome, scope, and non-negotiable constraints in its `Task` section.
 | `pnpm verify` | Registry, i18n, RTL, governance, and secret audits |
 | `pnpm check` | Full local release gate |
 
+## Automated npm publishing
+
+The repository uses npm Trusted Publishing with GitHub Actions OIDC. After a change
+is merged into `main`, the `ci` workflow must complete successfully before
+[`publish.yml`](.github/workflows/publish.yml) publishes the package.
+
+- Publishing uses short-lived OIDC credentials; no npm token is stored in GitHub.
+- npm provenance attestations are unavailable while this GitHub repository is private.
+- A version already present on npm is skipped, so a re-run cannot overwrite it.
+- Bump the root `package.json` version before merging a release-worthy change.
+- `workflow_dispatch` supports an intentional manual re-run from `main`.
+
+The optional dependency-review job is disabled unless the repository variable
+`ENABLE_DEPENDENCY_REVIEW` is set to `true` after Dependency Graph and GitHub
+Advanced Security are enabled in repository settings.
+
+CodeQL is similarly opt-in through `ENABLE_CODEQL=true`: first enable **Code
+Security** for this private repository in GitHub’s security settings, then set the
+variable. This avoids a misleading failed workflow when GitHub cannot accept SARIF
+uploads. The workflows use Node 24; the runner’s Node 20 deprecation notice does not
+require a compatibility override.
+
 ## Architecture
 
 ```text
@@ -84,8 +117,13 @@ packages/icons          Icon policy and directional mirroring
 packages/registry       Canonical component catalog and install metadata
 ```
 
-See [`docs/design-system/README.md`](docs/design-system/README.md) for the focused
-documentation index and [`docs/design-system/agent-guide.md`](docs/design-system/agent-guide.md)
-for the coding-agent workflow. The ready-to-paste
-[`docs/design-system/gpt-agent-prompt.md`](docs/design-system/gpt-agent-prompt.md)
-is the recommended task wrapper for GPT.
+## Documentation
+
+- [`docs/design-system/README.md`](docs/design-system/README.md): focused
+  documentation index
+- [`docs/design-system/agent-guide.md`](docs/design-system/agent-guide.md): agent
+  workflow and verification expectations
+- [`docs/design-system/gpt-agent-prompt.md`](docs/design-system/gpt-agent-prompt.md):
+  ready-to-paste GPT task wrapper
+- [`packages/registry/manifest.json`](packages/registry/manifest.json): canonical
+  registry catalog and component contracts

package/apps/showcase/src/catalog/catalog-index.tsx

@@ -23,7 +23,7 @@ import {
   PieChart,
   RadarChart,
 } from '@noe/data-ui';
-import { ChevronIcon, icons8Source, NoeMark } from '@noe/icons';
+import { ChevronIcon, iconsaxFreeSource, NoeMark } from '@noe/icons';
 import {
   AboutPage,
   Alert,
@@ -314,7 +314,7 @@ export const catalogEntries: readonly CatalogEntry[] = [
     status: statusOf('icon-system'),
     name: 'Icon System',
     description:
-      'Icons8-sourced interface icons with an explicit directional-mirroring policy for RTL layouts.',
+      'Iconsax Free interface icons delivered through the NOE wrapper with an explicit directional-mirroring policy for RTL layouts.',
     package: '@noe/icons',
     registryItem: null,
     preview: () => (
@@ -336,7 +336,7 @@ export const catalogEntries: readonly CatalogEntry[] = [
           </div>
         </div>
         <span className="font-mono text-[0.6875rem] text-muted-foreground">
-          {icons8Source.provider} / {icons8Source.asset}
+          {iconsaxFreeSource.provider} / {iconsaxFreeSource.package}
         </span>
       </div>
     ),

package/apps/storybook/stories/catalog/icon-system.stories.tsx

@@ -3,7 +3,7 @@ import type { Meta, StoryObj } from '@storybook/react-vite';
 import {
   ChevronIcon,
   iconDirectionPolicy,
-  icons8Source,
+  iconsaxFreeSource,
   NoeMark,
 } from '../../../../packages/icons/src/index';
 
@@ -31,7 +31,8 @@ function IconGallery() {
         <strong>Never mirror:</strong> {iconDirectionPolicy.neverMirror.join(', ')}
       </div>
       <div>
-        <strong>Interface source:</strong> {icons8Source.provider} / {icons8Source.asset}
+        <strong>Interface source:</strong> {iconsaxFreeSource.provider} /{' '}
+        {iconsaxFreeSource.package}
       </div>
     </div>
   );

package/docs/adr/0006-icons8-icon-policy.md

@@ -1,9 +1,9 @@
-# ADR 0006: Icons8 icon policy
+# ADR 0006: Iconsax Free icon policy
 
 Status: Accepted
 
-Earlier proposals locked Lucide as the product icon family. The repository has since adopted Icons8 as the icon source (`packages/icons/src/index.tsx`, `icons8Source`, commit "feat: adopt Icons8 logical chevrons"), with `NoeMark` registered as a separate NOE brand asset.
+Earlier proposals locked Lucide as the product icon family. The repository now adopts Iconsax Free through the audited `@noe/icons` wrapper (`packages/icons/src/iconsax.tsx`, `iconsaxFreeSource`), with `NoeMark` registered as a separate NOE brand asset.
 
-Decision: the product uses exactly one icon family, Icons8, plus NOE brand marks. Directional icons use logical directions (`forward`/`backward`) and mirror only through the scoped `.noe-logical-icon` class under `iconDirectionPolicy`; brand marks never mirror. Lucide is not adopted and icon families must not be mixed.
+Decision: the product uses exactly one provider icon family, Iconsax Free, plus NOE brand marks. Applications import from `@noe/icons`, never from `iconsax-react`. Directional icons use logical directions (`forward`/`backward`) and mirror only through the scoped `.noe-logical-icon` class under `iconDirectionPolicy`; brand marks never mirror. Lucide is not adopted and icon families must not be mixed.
 
-Consequences: every added third-party icon records provider and source metadata in the style of `icons8Source`; `NoeMark` is a NOE brand asset, not an Icons8 icon, and carries no such source record; Icons8 licensing terms are part of adoption review; icon-related documentation and stories must reflect the mirroring policy rather than physical left/right semantics.
+Consequences: every added third-party icon records provider and source metadata in the style of `iconsaxFreeSource`; `NoeMark` is a NOE brand asset and carries no provider metadata; Iconsax Free's MIT license is part of adoption review; icon-related documentation and stories must reflect the mirroring policy rather than physical left/right semantics.

package/docs/design-system/architecture.md

@@ -42,5 +42,5 @@ deployment gate in ADR 0007.
 - No custom MCP server while the official shadcn MCP satisfies registry discovery.
 - Registry publication and package release are separate operational gates (ADR 0007).
 - `@noe/*` is the single package namespace for packages, registry items, diagrams and agent instructions (ADR 0005).
-- Icons8 is the only third-party icon family; NOE brand marks never mirror (ADR 0006).
+- Iconsax Free is the only third-party icon family, exposed through `@noe/icons`; NOE brand marks never mirror (ADR 0006).
 - Capability libraries stay behind adapters; NOE tokens and `@noe/*` own product markup, style, RTL behavior and approval states (ADR 0008).

package/docs/design-system/ci-cd.md

@@ -14,24 +14,37 @@ entry and push to the default branch:
 | `ci / build-and-verify` | Workspace build + registry/i18n/RTL/governance audits             |
 | `ci / e2e-critical`   | Playwright matrix: chromium en/fa/pseudo + firefox/webkit smoke    |
 
-The `security` workflow adds CodeQL analysis, scheduled CodeQL runs and
-dependency review on pull requests.
+The `security` workflow contains opt-in CodeQL analysis and dependency review.
+For this private repository, GitHub must first have Code Security and Dependency
+Graph/GitHub Advanced Security enabled. Set `ENABLE_CODEQL=true` and
+`ENABLE_DEPENDENCY_REVIEW=true` repository variables only after the corresponding
+GitHub features are available.
 
 ## Security controls
 
-- Minimal `GITHUB_TOKEN` permissions (`contents: read`; `security-events: write`
-  only where CodeQL needs it).
+- Minimal `GITHUB_TOKEN` permissions. CodeQL receives `actions: read`,
+  `contents: read`, and `security-events: write`; dependency review receives only
+  `contents: read`.
 - All third-party actions pinned to immutable full commit SHAs with the
   upstream version documented beside them; Dependabot keeps SHAs updated.
 - No secrets in logs; no privileged secrets available to untrusted PR code.
-- Concurrency groups cancel superseded PR runs; deployments are never cancelled
-  mid-run because none run from CI yet.
+- Concurrency groups cancel superseded PR runs. The npm publishing workflow is
+  serialized and is never cancelled mid-publish.
 
 ## Artifacts
 
 Storybook static build, dist outputs, Playwright reports/traces/screenshots are
 uploaded with 14-day retention on relevant outcomes.
 
+## Publishing
+
+`publish.yml` runs after a successful `ci` workflow on a push to `main`. It checks
+out the verified commit, builds it, verifies the npm tarball, and publishes only if
+the root `package.json` version is not already on npm. npm Trusted Publishing uses
+GitHub Actions OIDC, so the workflow stores no npm token.
+
+Manual `workflow_dispatch` publishing is restricted to `main`.
+
 ## Deployment
 
 No deployment provider is invented. Storybook artifacts are produced on every
@@ -43,4 +56,6 @@ long-lived credentials.
 
 Recommended required status checks once branch protection is active:
 `ci / quality`, `ci / unit`, `ci / component`, `ci / storybook`,
-`ci / build-and-verify`, `ci / e2e-critical`, `security / codeql`.
+`ci / build-and-verify`, `ci / e2e-critical`. Add `security / codeql` only after
+Code Security is enabled and `ENABLE_CODEQL=true`; otherwise it is intentionally
+skipped rather than reported as a false failure.

package/docs/design-system/rtl.md

@@ -16,7 +16,7 @@ Use logical margin, padding, inset, border and text alignment. Maintain semantic
 
 Forward/backward, next/previous, chevron, indent/outdent and panel-opening icons may mirror. Brand, play, pause, upload, download, search, settings, check, close, charts, code and service logos do not mirror automatically.
 
-The shared `ChevronIcon` uses `icons8Source` and opts into this policy through the scoped `.noe-logical-icon` class. `NoeMark` remains a NOE brand asset and never mirrors.
+The shared `ChevronIcon` uses the `iconsaxFreeSource` wrapper and opts into this policy through the scoped `.noe-logical-icon` class. `NoeMark` remains a NOE brand asset and never mirrors.
 
 ## Mixed content
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noecosystem-design",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "private": false,
   "description": "Agent-readable NOE design-system source, registry metadata, and verification contracts.",
   "keywords": [

package/packages/design-tokens/src/base.css

@@ -173,7 +173,7 @@
     }
   }
 
-  /* Logical Icons8 chevrons opt into direction-aware motion. Brand and
+  /* Logical Iconsax chevrons opt into direction-aware motion. Brand and
    * semantic glyphs do not receive a global transform. */
   .noe-logical-icon[data-logical-direction="backward"],
   [dir="rtl"] .noe-logical-icon[data-logical-direction="forward"] {

package/packages/design-tokens/src/tokens.css

@@ -145,8 +145,8 @@
   --noe-color-muted-foreground: var(--noe-primitive-color-ink-500);
   --noe-color-border: rgba(23, 25, 24, 0.16);
   --noe-color-border-strong: var(--noe-primitive-color-ink-300);
-  --noe-color-accent: var(--noe-primitive-color-mint-500);
-  --noe-color-accent-hover: var(--noe-primitive-color-mint-400);
+  --noe-color-accent: var(--noe-primitive-color-cyan-500);
+  --noe-color-accent-hover: var(--noe-primitive-color-cyan-500);
   --noe-color-accent-foreground: var(--noe-primitive-color-paper-0);
   --noe-color-signal: var(--noe-primitive-color-coral-500);
   --noe-color-success: var(--noe-primitive-color-green-600);
@@ -175,8 +175,8 @@
   --noe-color-muted-foreground: var(--noe-primitive-color-ink-400);
   --noe-color-border: rgba(246, 244, 242, 0.14);
   --noe-color-border-strong: var(--noe-primitive-color-ink-600);
-  --noe-color-accent: var(--noe-primitive-color-mint-100);
-  --noe-color-accent-hover: var(--noe-primitive-color-mint-200);
+  --noe-color-accent: var(--noe-primitive-color-cyan-400);
+  --noe-color-accent-hover: var(--noe-primitive-color-cyan-400);
   --noe-color-accent-foreground: var(--noe-primitive-color-ink-950);
   --noe-color-signal: var(--noe-primitive-color-coral-400);
   --noe-color-success: var(--noe-primitive-color-green-500);
@@ -206,8 +206,8 @@
     --noe-color-muted-foreground: var(--noe-primitive-color-ink-400);
     --noe-color-border: rgba(246, 244, 242, 0.14);
     --noe-color-border-strong: var(--noe-primitive-color-ink-600);
-    --noe-color-accent: var(--noe-primitive-color-mint-100);
-    --noe-color-accent-hover: var(--noe-primitive-color-mint-200);
+    --noe-color-accent: var(--noe-primitive-color-cyan-400);
+    --noe-color-accent-hover: var(--noe-primitive-color-cyan-400);
     --noe-color-accent-foreground: var(--noe-primitive-color-ink-950);
     --noe-color-signal: var(--noe-primitive-color-coral-400);
     --noe-color-success: var(--noe-primitive-color-green-500);

package/packages/design-tokens/src/tokens.json

@@ -111,8 +111,8 @@
       "mutedForeground": "{primitive.color.ink.500}",
       "border": "rgba(23, 25, 24, 0.16)",
       "borderStrong": "{primitive.color.ink.300}",
-      "accent": "{primitive.color.mint.500}",
-      "accentHover": "{primitive.color.mint.400}",
+      "accent": "{primitive.color.cyan.500}",
+      "accentHover": "{primitive.color.cyan.500}",
       "accentForeground": "{primitive.color.paper.0}",
       "signal": "{primitive.color.coral.500}",
       "success": "{primitive.color.green.600}",
@@ -136,8 +136,8 @@
       "mutedForeground": "{primitive.color.ink.400}",
       "border": "rgba(246, 244, 242, 0.14)",
       "borderStrong": "{primitive.color.ink.600}",
-      "accent": "{primitive.color.mint.100}",
-      "accentHover": "{primitive.color.mint.200}",
+      "accent": "{primitive.color.cyan.400}",
+      "accentHover": "{primitive.color.cyan.400}",
       "accentForeground": "{primitive.color.ink.950}",
       "signal": "{primitive.color.coral.400}",
       "success": "{primitive.color.green.500}",

package/packages/design-tokens/src/tokens.mjs

@@ -112,8 +112,8 @@ export const tokens = {
       "mutedForeground": "{primitive.color.ink.500}",
       "border": "rgba(23, 25, 24, 0.16)",
       "borderStrong": "{primitive.color.ink.300}",
-      "accent": "{primitive.color.mint.500}",
-      "accentHover": "{primitive.color.mint.400}",
+      "accent": "{primitive.color.cyan.500}",
+      "accentHover": "{primitive.color.cyan.500}",
       "accentForeground": "{primitive.color.paper.0}",
       "signal": "{primitive.color.coral.500}",
       "success": "{primitive.color.green.600}",
@@ -137,8 +137,8 @@ export const tokens = {
       "mutedForeground": "{primitive.color.ink.400}",
       "border": "rgba(246, 244, 242, 0.14)",
       "borderStrong": "{primitive.color.ink.600}",
-      "accent": "{primitive.color.mint.100}",
-      "accentHover": "{primitive.color.mint.200}",
+      "accent": "{primitive.color.cyan.400}",
+      "accentHover": "{primitive.color.cyan.400}",
       "accentForeground": "{primitive.color.ink.950}",
       "signal": "{primitive.color.coral.400}",
       "success": "{primitive.color.green.500}",

package/packages/icons/package.json

@@ -8,5 +8,8 @@
   },
   "exports": {
     ".": "./src/index.tsx"
+  },
+  "dependencies": {
+    "iconsax-react": "0.0.8"
   }
 }

package/packages/icons/src/adapters.tsx

@@ -32,10 +32,10 @@ export const iconProvenance = Object.freeze({
     license: 'Partner brand — check before publishing',
     asset: 'integration icons',
   },
-  icons8: {
-    source: 'Icons8',
-    license: 'Icons8 — https://icons8.com/license',
-    asset: 'chevronRight.svg',
+  iconsaxFree: {
+    source: 'Iconsax Free',
+    license: 'MIT — https://github.com/rendinjast/iconsax-react',
+    asset: 'iconsax-react wrapper',
   },
 });
 

package/packages/icons/src/iconsax.tsx

@@ -0,0 +1,233 @@
+import type * as React from 'react';
+import {
+  Add as IconsaxAdd,
+  ArchiveBook as IconsaxArchiveBook,
+  ArrowDown as IconsaxArrowDown,
+  ArrowDown2 as IconsaxArrowDown2,
+  ArrowLeft2 as IconsaxArrowLeft2,
+  ArrowRight2 as IconsaxArrowRight2,
+  ArrowUp as IconsaxArrowUp,
+  ArrowUp2 as IconsaxArrowUp2,
+  AttachCircle as IconsaxAttachCircle,
+  BoxSearch as IconsaxBoxSearch,
+  Briefcase as IconsaxBriefcase,
+  Calendar as IconsaxCalendar,
+  Call as IconsaxCall,
+  CallCalling as IconsaxCallCalling,
+  CallRemove as IconsaxCallRemove,
+  ChartSquare as IconsaxChartSquare,
+  CloseCircle as IconsaxCloseCircle,
+  Copy as IconsaxCopy,
+  Cpu as IconsaxCpu,
+  Dislike as IconsaxDislike,
+  DocumentText as IconsaxDocumentText,
+  DocumentUpload as IconsaxDocumentUpload,
+  Edit2 as IconsaxEdit2,
+  HambergerMenu as IconsaxHambergerMenu,
+  Judge as IconsaxJudge,
+  Like1 as IconsaxLike1,
+  Link2 as IconsaxLink2,
+  Lock as IconsaxLock,
+  LogoutCurve as IconsaxLogoutCurve,
+  MagicStar as IconsaxMagicStar,
+  MessageText as IconsaxMessageText,
+  Messages3 as IconsaxMessages3,
+  MoneyRecive as IconsaxMoneyRecive,
+  More as IconsaxMore,
+  Paperclip2 as IconsaxPaperclip2,
+  Profile2User as IconsaxProfile2User,
+  ProfileCircle as IconsaxProfileCircle,
+  ReceiptSearch as IconsaxReceiptSearch,
+  SecurityUser as IconsaxSecurityUser,
+  Setting2 as IconsaxSetting2,
+  Star1 as IconsaxStar1,
+  StopCircle as IconsaxStopCircle,
+  TickCircle as IconsaxTickCircle,
+  TicketDiscount as IconsaxTicketDiscount,
+  Trash as IconsaxTrash,
+  User as IconsaxUser,
+  UserSearch as IconsaxUserSearch,
+  Verify as IconsaxVerify,
+  Wallet3 as IconsaxWallet3,
+  WalletMoney as IconsaxWalletMoney,
+  Warning2 as IconsaxWarning2,
+  type Icon as IconsaxIcon,
+  type IconProps as IconsaxIconProps,
+} from 'iconsax-react';
+
+export type LogicalIconDirection = 'forward' | 'backward';
+
+/**
+ * The only product icon provider. Iconsax Free is MIT licensed; consuming
+ * applications import from @noe/icons, never from the provider directly.
+ */
+export const iconsaxFreeSource = Object.freeze({
+  provider: 'Iconsax Free',
+  package: 'iconsax-react',
+  version: '0.0.8',
+  license: 'MIT',
+  url: 'https://github.com/rendinjast/iconsax-react',
+});
+
+export type NoeIconProps = IconsaxIconProps & {
+  /** Makes a meaningful icon available to assistive technology. */
+  label?: string;
+  /** Applies NOE's scoped, logical RTL mirroring policy. */
+  direction?: LogicalIconDirection;
+};
+
+type NoeSvgProps = Omit<React.SVGProps<SVGSVGElement>, 'ref'>;
+
+function createNoeIcon(Icon: IconsaxIcon, defaultDirection?: LogicalIconDirection) {
+  function NoeIcon({ label, direction = defaultDirection, className, ...props }: NoeIconProps) {
+    const directionalClass = direction ? 'noe-logical-icon' : undefined;
+    const resolvedClassName = [directionalClass, className].filter(Boolean).join(' ') || undefined;
+    const accessibilityProps = label
+      ? { role: 'img' as const, 'aria-label': label }
+      : { 'aria-hidden': true as const, focusable: false };
+
+    return (
+      <Icon
+        {...props}
+        {...accessibilityProps}
+        className={resolvedClassName}
+        data-icon-source="iconsax-free"
+        data-logical-direction={direction}
+      />
+    );
+  }
+
+  return NoeIcon;
+}
+
+/** Semantic navigation icons. Prefer these over physical arrow aliases. */
+export const ForwardIcon = createNoeIcon(IconsaxArrowRight2, 'forward');
+export const BackwardIcon = createNoeIcon(IconsaxArrowRight2, 'backward');
+export const ChevronIcon = ForwardIcon;
+
+/**
+ * Application icon catalog. These compatibility names are provider-free at the
+ * call site; new code should use semantic names such as ForwardIcon/BackwardIcon
+ * whenever the meaning is navigation rather than a physical direction.
+ */
+export const Add = createNoeIcon(IconsaxAdd);
+export const ArchiveBook = createNoeIcon(IconsaxArchiveBook);
+export const ArrowDown = createNoeIcon(IconsaxArrowDown);
+export const ArrowDown2 = createNoeIcon(IconsaxArrowDown2);
+export const ArrowLeft2 = createNoeIcon(IconsaxArrowLeft2);
+export const ArrowRight2 = createNoeIcon(IconsaxArrowRight2);
+export const ArrowUp = createNoeIcon(IconsaxArrowUp);
+export const ArrowUp2 = createNoeIcon(IconsaxArrowUp2);
+export const AttachCircle = createNoeIcon(IconsaxAttachCircle);
+export const BoxSearch = createNoeIcon(IconsaxBoxSearch);
+export const Briefcase = createNoeIcon(IconsaxBriefcase);
+export const Calendar = createNoeIcon(IconsaxCalendar);
+export const Call = createNoeIcon(IconsaxCall);
+export const CallCalling = createNoeIcon(IconsaxCallCalling);
+export const CallRemove = createNoeIcon(IconsaxCallRemove);
+export const ChartSquare = createNoeIcon(IconsaxChartSquare);
+export const CloseCircle = createNoeIcon(IconsaxCloseCircle);
+export const Copy = createNoeIcon(IconsaxCopy);
+export const Cpu = createNoeIcon(IconsaxCpu);
+export const Dislike = createNoeIcon(IconsaxDislike);
+export const DocumentText = createNoeIcon(IconsaxDocumentText);
+export const DocumentUpload = createNoeIcon(IconsaxDocumentUpload);
+export const Edit2 = createNoeIcon(IconsaxEdit2);
+export const HambergerMenu = createNoeIcon(IconsaxHambergerMenu);
+export const Judge = createNoeIcon(IconsaxJudge);
+export const Like1 = createNoeIcon(IconsaxLike1);
+export const Link2 = createNoeIcon(IconsaxLink2);
+export const Lock = createNoeIcon(IconsaxLock);
+export const LogoutCurve = createNoeIcon(IconsaxLogoutCurve);
+export const MagicStar = createNoeIcon(IconsaxMagicStar);
+export const MessageText = createNoeIcon(IconsaxMessageText);
+export const Messages3 = createNoeIcon(IconsaxMessages3);
+export const MoneyRecive = createNoeIcon(IconsaxMoneyRecive);
+export const More = createNoeIcon(IconsaxMore);
+export const Paperclip2 = createNoeIcon(IconsaxPaperclip2);
+export const Profile2User = createNoeIcon(IconsaxProfile2User);
+export const ProfileCircle = createNoeIcon(IconsaxProfileCircle);
+export const ReceiptSearch = createNoeIcon(IconsaxReceiptSearch);
+export const SecurityUser = createNoeIcon(IconsaxSecurityUser);
+export const Setting2 = createNoeIcon(IconsaxSetting2);
+export const Star1 = createNoeIcon(IconsaxStar1);
+export const StopCircle = createNoeIcon(IconsaxStopCircle);
+export const TickCircle = createNoeIcon(IconsaxTickCircle);
+export const TicketDiscount = createNoeIcon(IconsaxTicketDiscount);
+export const Trash = createNoeIcon(IconsaxTrash);
+export const User = createNoeIcon(IconsaxUser);
+export const UserSearch = createNoeIcon(IconsaxUserSearch);
+export const Verify = createNoeIcon(IconsaxVerify);
+export const Wallet3 = createNoeIcon(IconsaxWallet3);
+export const WalletMoney = createNoeIcon(IconsaxWalletMoney);
+export const Warning2 = createNoeIcon(IconsaxWarning2);
+
+export function NoeMark(props: NoeSvgProps) {
+  return (
+    <svg viewBox="0 0 32 32" role="img" aria-label="NOEcosystem" {...props}>
+      <circle cx="16" cy="16" r="12" fill="none" stroke="currentColor" strokeWidth="2" />
+      <circle cx="16" cy="16" r="3" fill="currentColor" />
+      <path d="M4 16h9M19 16h9M16 4v9M16 19v9" stroke="currentColor" strokeWidth="2" />
+    </svg>
+  );
+}
+
+export function SunIcon(props: NoeSvgProps) {
+  return (
+    <svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" {...props}>
+      <g className="noe-theme-toggle__sun">
+        <circle
+          cx="12"
+          cy="12"
+          r="3.75"
+          fill="none"
+          stroke="currentColor"
+          strokeWidth="1.6"
+          strokeLinecap="round"
+          strokeLinejoin="round"
+        />
+        <path
+          d="M12 2.25v2.1M12 19.65v2.1M2.25 12h2.1M19.65 12h2.1M5.1 5.1l1.48 1.48M17.42 17.42l1.48 1.48M18.9 5.1l-1.48 1.48M6.58 17.42 5.1 18.9"
+          fill="none"
+          stroke="currentColor"
+          strokeWidth="1.6"
+          strokeLinecap="round"
+          strokeLinejoin="round"
+        />
+      </g>
+    </svg>
+  );
+}
+
+export function MoonIcon(props: NoeSvgProps) {
+  return (
+    <svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" {...props}>
+      <path
+        className="noe-theme-toggle__moon"
+        d="M20.2 15.25A8.25 8.25 0 0 1 8.75 3.8a8.26 8.26 0 1 0 11.45 11.45Z"
+        fill="none"
+        stroke="currentColor"
+        strokeWidth="1.6"
+        strokeLinecap="round"
+        strokeLinejoin="round"
+      />
+    </svg>
+  );
+}
+
+export const iconDirectionPolicy = Object.freeze({
+  mirror: ['forward', 'backward', 'next', 'previous', 'indent', 'outdent', 'panel-open'],
+  neverMirror: [
+    'brand',
+    'play',
+    'pause',
+    'download',
+    'upload',
+    'search',
+    'settings',
+    'check',
+    'close',
+    'chart',
+    'code',
+  ],
+});

package/packages/icons/src/index.tsx

@@ -1,103 +1 @@
-import type * as React from 'react';
-
-export type LogicalIconDirection = 'forward' | 'backward';
-
-export const icons8Source = Object.freeze({
-  provider: 'Icons8',
-  asset: 'chevronRight.svg',
-  url: 'https://maxst.icons8.com/vue-static/icon/svg/chevronRight.svg',
-});
-
-export function NoeMark(props: React.SVGProps<SVGSVGElement>) {
-  return (
-    <svg viewBox="0 0 32 32" role="img" aria-label="NOEcosystem" {...props}>
-      <circle cx="16" cy="16" r="12" fill="none" stroke="currentColor" strokeWidth="2" />
-      <circle cx="16" cy="16" r="3" fill="currentColor" />
-      <path d="M4 16h9M19 16h9M16 4v9M16 19v9" stroke="currentColor" strokeWidth="2" />
-    </svg>
-  );
-}
-
-export function ChevronIcon({
-  direction = 'forward',
-  className,
-  ...props
-}: React.SVGProps<SVGSVGElement> & { direction?: LogicalIconDirection }) {
-  return (
-    <svg
-      aria-hidden="true"
-      className={['noe-logical-icon', className].filter(Boolean).join(' ')}
-      data-icon-source="icons8"
-      data-logical-direction={direction}
-      viewBox="0 0 16 16"
-      {...props}
-    >
-      <path
-        d="M6.71875 3.5L6 4.20312L9.66016 7.97656L6 11.7539L6.71875 12.4492L11.0586 7.97656L6.71875 3.5Z"
-        fill="currentColor"
-      />
-    </svg>
-  );
-}
-
-export function SunIcon(props: React.SVGProps<SVGSVGElement>) {
-  return (
-    <svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" {...props}>
-      <g className="noe-theme-toggle__sun">
-        <circle
-          cx="12"
-          cy="12"
-          r="3.75"
-          fill="none"
-          stroke="currentColor"
-          strokeWidth="1.6"
-          strokeLinecap="round"
-          strokeLinejoin="round"
-        />
-        <path
-          d="M12 2.25v2.1M12 19.65v2.1M2.25 12h2.1M19.65 12h2.1M5.1 5.1l1.48 1.48M17.42 17.42l1.48 1.48M18.9 5.1l-1.48 1.48M6.58 17.42 5.1 18.9"
-          fill="none"
-          stroke="currentColor"
-          strokeWidth="1.6"
-          strokeLinecap="round"
-          strokeLinejoin="round"
-        />
-      </g>
-    </svg>
-  );
-}
-
-export function MoonIcon(props: React.SVGProps<SVGSVGElement>) {
-  return (
-    <svg viewBox="0 0 24 24" aria-hidden="true" focusable="false" {...props}>
-      <path
-        className="noe-theme-toggle__moon"
-        d="M20.2 15.25A8.25 8.25 0 0 1 8.75 3.8a8.26 8.26 0 1 0 11.45 11.45Z"
-        fill="none"
-        stroke="currentColor"
-        strokeWidth="1.6"
-        strokeLinecap="round"
-        strokeLinejoin="round"
-      />
-    </svg>
-  );
-}
-
-export const iconDirectionPolicy = Object.freeze({
-  mirror: ['forward', 'backward', 'next', 'previous', 'indent', 'outdent', 'panel-open'],
-  neverMirror: [
-    'brand',
-    'play',
-    'pause',
-    'download',
-    'upload',
-    'search',
-    'settings',
-    'check',
-    'close',
-    'chart',
-    'code',
-    'theme-sun',
-    'theme-moon',
-  ],
-});
+export * from './iconsax';

package/packages/registry/catalog-index.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-08-29T07:21:18.551Z",
+  "generatedAt": "2026-08-29T08:49:53.291Z",
   "items": [
     {
       "id": "bidi-text",

package/packages/registry/component-audit.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://noecosystem.com/schema/component-audit.json",
-  "generatedNote": "Canonical NOE public-component inventory. status=available requires a public export, a Storybook story at storyId, and (where distributable) a registry entry. Do not mark an item available without all three. (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json) (derived from manifest.json)",
+  "generatedNote": "Canonical NOE public-component inventory. status=available requires a public export, a Storybook story at storyId, and (where distributable) a registry entry. Do not mark an item available without all three. (derived from manifest.json)",
   "items": [
     {
       "id": "bidi-text",

package/packages/registry/docs-index.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-08-29T07:21:18.552Z",
+  "generatedAt": "2026-08-29T08:49:53.291Z",
   "items": [
     {
       "id": "bidi-text",

package/packages/registry/manifest.json

@@ -1,6 +1,6 @@
 {
   "manifestVersion": "1.0.0",
-  "generatedAt": "2026-08-29T07:21:18.542Z",
+  "generatedAt": "2026-08-29T08:49:53.284Z",
   "generatedNote": "Canonical NOE manifest — single source of truth for catalog, audit, registry, stories, docs and agent search. Generated by pnpm gen:manifest; do not edit by hand for automated fields.",
   "items": [
     {

package/packages/registry/r/calendar.json

@@ -5,13 +5,24 @@
   "title": "Calendar",
   "description": "Calendar — Base / Pickers component. calendar provides base / pickers behavior with RTL, i18n and accessibility built-in.",
   "registryDependencies": [],
-  "dependencies": ["@base-ui/react", "class-variance-authority", "clsx", "tailwind-merge"],
+  "dependencies": [
+    "@base-ui/react",
+    "class-variance-authority",
+    "clsx",
+    "iconsax-react",
+    "tailwind-merge"
+  ],
   "files": [
     {
       "path": "packages/icons/src/index.tsx",
       "type": "registry:component",
       "target": "packages/icons/src/index.tsx"
     },
+    {
+      "path": "packages/icons/src/iconsax.tsx",
+      "type": "registry:component",
+      "target": "packages/icons/src/iconsax.tsx"
+    },
     {
       "path": "packages/ui/src/button.tsx",
       "type": "registry:component",

package/packages/registry/r/date-picker.json

@@ -5,13 +5,24 @@
   "title": "Date Picker",
   "description": "Date Picker — Base / Pickers component. date-picker provides base / pickers behavior with RTL, i18n and accessibility built-in.",
   "registryDependencies": [],
-  "dependencies": ["@base-ui/react", "class-variance-authority", "clsx", "tailwind-merge"],
+  "dependencies": [
+    "@base-ui/react",
+    "class-variance-authority",
+    "clsx",
+    "iconsax-react",
+    "tailwind-merge"
+  ],
   "files": [
     {
       "path": "packages/icons/src/index.tsx",
       "type": "registry:component",
       "target": "packages/icons/src/index.tsx"
     },
+    {
+      "path": "packages/icons/src/iconsax.tsx",
+      "type": "registry:component",
+      "target": "packages/icons/src/iconsax.tsx"
+    },
     {
       "path": "packages/ui/src/button.tsx",
       "type": "registry:component",

package/packages/registry/r/icon-system.json

@@ -9,6 +9,11 @@
       "path": "packages/icons/src/index.tsx",
       "type": "registry:component",
       "target": "packages/icons/src/index.tsx"
+    },
+    {
+      "path": "packages/icons/src/iconsax.tsx",
+      "type": "registry:component",
+      "target": "packages/icons/src/iconsax.tsx"
     }
   ],
   "registryDependencies": [],
@@ -20,7 +25,7 @@
   "install": "pnpm dlx shadcn@latest add @noe/icon-system",
   "import": "import { ChevronIcon } from '@noe/icons'",
   "requiredProviders": [],
-  "dependencies": [],
+  "dependencies": ["iconsax-react"],
   "peerDependencies": ["react"],
   "rtl": "required",
   "i18n": {

package/packages/registry/r/inline-cta.json

@@ -10,6 +10,11 @@
       "type": "registry:component",
       "target": "packages/icons/src/index.tsx"
     },
+    {
+      "path": "packages/icons/src/iconsax.tsx",
+      "type": "registry:component",
+      "target": "packages/icons/src/iconsax.tsx"
+    },
     {
       "path": "packages/ui/src/inline-cta.tsx",
       "type": "registry:component",
@@ -22,7 +27,7 @@
     }
   ],
   "registryDependencies": [],
-  "dependencies": ["clsx", "tailwind-merge"],
+  "dependencies": ["clsx", "iconsax-react", "tailwind-merge"],
   "status": "available",
   "maturity": "beta",
   "package": "@noe/ui",

package/packages/registry/r/pagination.json

@@ -15,6 +15,11 @@
       "type": "registry:component",
       "target": "packages/icons/src/index.tsx"
     },
+    {
+      "path": "packages/icons/src/iconsax.tsx",
+      "type": "registry:component",
+      "target": "packages/icons/src/iconsax.tsx"
+    },
     {
       "path": "packages/ui/src/button.tsx",
       "type": "registry:component",
@@ -32,7 +37,13 @@
     }
   ],
   "registryDependencies": [],
-  "dependencies": ["@base-ui/react", "class-variance-authority", "clsx", "tailwind-merge"],
+  "dependencies": [
+    "@base-ui/react",
+    "class-variance-authority",
+    "clsx",
+    "iconsax-react",
+    "tailwind-merge"
+  ],
   "status": "available",
   "maturity": "beta",
   "package": "@noe/data-ui",

package/packages/registry/search-index.json

@@ -1,5 +1,5 @@
 {
-  "generatedAt": "2026-08-29T07:21:18.549Z",
+  "generatedAt": "2026-08-29T08:49:53.289Z",
   "items": [
     {
       "id": "bidi-text",

package/packages/ui/src/theme-provider.browser.test.tsx

@@ -1,4 +1,3 @@
-import * as React from 'react';
 import { expect, test } from 'vitest';
 import { render } from 'vitest-browser-react';
 
@@ -13,13 +12,14 @@ function PaletteProbe({ storageKey }: { storageKey?: string }) {
       <button type="button" onClick={() => setPalette('graphite' as never)}>
         set graphite
       </button>
-      {storageKey && <span data-testid="storageKey">{storageKey}</span>}
+      {storageKey ? <span data-testid="storageKey">{storageKey}</span> : null}
     </div>
   );
 }
 
 test('default Graphite with no preference', async () => {
   localStorage.clear();
+  // biome-ignore lint/suspicious/noDocumentCookie: Test setup must exercise the cookie fallback path.
   document.cookie = 'noecosystem-palette=; Max-Age=0; path=/';
   document.documentElement.removeAttribute('data-noe-palette');
   const screen = await render(
@@ -45,6 +45,7 @@ test('valid stored preference restoration', async () => {
 
 test('invalid storage and cookie fallback to Graphite', async () => {
   localStorage.setItem('noecosystem-palette', 'invalid-palette');
+  // biome-ignore lint/suspicious/noDocumentCookie: This test needs an invalid cookie value for fallback coverage.
   document.cookie = 'noecosystem-palette=invalid-palette; path=/';
   const screen = await render(
     <ThemeProvider>

package/scripts/generate-manifest.mjs

@@ -10,6 +10,28 @@ const schemaPath = path.join(root, 'packages/registry/manifest.schema.json');
 const audit = JSON.parse(await readFile(auditPath, 'utf8'));
 const _schema = JSON.parse(await readFile(schemaPath, 'utf8'));
 
+async function writeJsonIfChanged(filePath, value, { preserveGeneratedAt = false } = {}) {
+  let existingText = null;
+  let existingValue = null;
+
+  try {
+    existingText = await readFile(filePath, 'utf8');
+    existingValue = JSON.parse(existingText);
+  } catch {}
+
+  let output = value;
+  if (preserveGeneratedAt && existingValue?.generatedAt) {
+    const { generatedAt: _previousGeneratedAt, ...previousPayload } = existingValue;
+    const { generatedAt: _nextGeneratedAt, ...nextPayload } = value;
+    if (JSON.stringify(previousPayload) === JSON.stringify(nextPayload)) {
+      output = { ...value, generatedAt: existingValue.generatedAt };
+    }
+  }
+
+  const nextText = `${JSON.stringify(output, null, 2)}\n`;
+  if (nextText !== existingText) await writeFile(filePath, nextText);
+}
+
 function toExportName(id) {
   const map = {
     'bidi-text': 'BidiText',
@@ -1045,14 +1067,15 @@ for (const item of cinematicEnrichments) {
   if (!manifest.items.find((i) => i.id === item.id)) manifest.items.push(item);
 }
 
-await writeFile(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+await writeJsonIfChanged(manifestPath, manifest, { preserveGeneratedAt: true });
 console.log(`manifest.json written: ${manifest.items.length} items`);
 
 // Also generate derived files for backward compat
 // 1. Update component-audit.json to be derived (keep minimal fields but now from manifest)
 const auditDerived = {
   $schema: audit.$schema,
-  generatedNote: `${audit.generatedNote} (derived from manifest.json)`,
+  generatedNote:
+    'Canonical NOE public-component inventory. status=available requires a public export, a Storybook story at storyId, and (where distributable) a registry entry. Do not mark an item available without all three. (derived from manifest.json)',
   items: manifest.items
     .filter((i) => !i.category.startsWith('Cinematic'))
     .map((i) => ({
@@ -1064,7 +1087,7 @@ const auditDerived = {
       registryItem: i.registryItem,
     })),
 };
-await writeFile(auditPath, `${JSON.stringify(auditDerived, null, 2)}\n`);
+await writeJsonIfChanged(auditPath, auditDerived);
 console.log(`component-audit.json derived: ${auditDerived.items.length} items`);
 
 // 2. Generate search index
@@ -1085,9 +1108,10 @@ const searchIndex = manifest.items.map((i) => ({
   registryItem: i.registryItem,
   maturity: i.maturity,
 }));
-await writeFile(
+await writeJsonIfChanged(
   path.join(root, 'packages/registry/search-index.json'),
-  `${JSON.stringify({ generatedAt: new Date().toISOString(), items: searchIndex }, null, 2)}\n`,
+  { generatedAt: new Date().toISOString(), items: searchIndex },
+  { preserveGeneratedAt: true },
 );
 console.log(`search-index.json written`);
 
@@ -1107,47 +1131,41 @@ for (const item of registry.items) {
     item.searchTerms = m.searchTerms;
   }
 }
-await writeFile(registryPath, `${JSON.stringify(registry, null, 2)}\n`);
+await writeJsonIfChanged(registryPath, registry);
 console.log(`registry.json enriched`);
 
 // 4. Generate catalog index (JSON for agents)
-await writeFile(
+await writeJsonIfChanged(
   path.join(root, 'packages/registry/catalog-index.json'),
-  `${JSON.stringify(
-    {
-      generatedAt: new Date().toISOString(),
-      items: manifest.items.map((i) => ({
-        id: i.id,
-        title: i.title,
-        category: i.category,
-        package: i.package,
-        status: i.status,
-        maturity: i.maturity,
-        description: i.description,
-        registryItem: i.registryItem,
-      })),
-    },
-    null,
-    2,
-  )}\n`,
+  {
+    generatedAt: new Date().toISOString(),
+    items: manifest.items.map((i) => ({
+      id: i.id,
+      title: i.title,
+      category: i.category,
+      package: i.package,
+      status: i.status,
+      maturity: i.maturity,
+      description: i.description,
+      registryItem: i.registryItem,
+    })),
+  },
+  { preserveGeneratedAt: true },
 );
 console.log(`catalog-index.json written`);
 
 // 5. Generate docs index
-await writeFile(
+await writeJsonIfChanged(
   path.join(root, 'packages/registry/docs-index.json'),
-  `${JSON.stringify(
-    {
-      generatedAt: new Date().toISOString(),
-      items: manifest.items.map((i) => ({
-        id: i.id,
-        title: i.title,
-        category: i.category,
-        examples: i.examples,
-      })),
-    },
-    null,
-    2,
-  )}\n`,
+  {
+    generatedAt: new Date().toISOString(),
+    items: manifest.items.map((i) => ({
+      id: i.id,
+      title: i.title,
+      category: i.category,
+      examples: i.examples,
+    })),
+  },
+  { preserveGeneratedAt: true },
 );
 console.log(`docs-index.json written`);

package/scripts/validate-manifest.mjs

@@ -276,7 +276,7 @@ if (errors === 0) pass('semantic search fields');
     .map((i) => i.registryItem);
   const counts = new Map();
   for (const n of regItems) counts.set(n, (counts.get(n) || 0) + 1);
-  const dups = [...counts.entries()].filter(([name, c]) => c > 1).map(([name]) => name);
+  const dups = [...counts.entries()].filter(([, c]) => c > 1).map(([name]) => name);
   const allowedShared = new Set(['input']); // field shares input payload
   const illegalDups = dups.filter((n) => !allowedShared.has(n));
   if (illegalDups.length) {
@@ -368,17 +368,6 @@ if (errors === 0) pass('semantic search fields');
           errors++;
           closureErrors++;
         } else if (!fileSet.has(resolved)) {
-          // Allow if resolved is provided via registryDependencies payload (check if in dep payload)
-          const depPayloads = (payload.registryDependencies || [])
-            .map((d) => d.replace('@noe/', ''))
-            .map((n) => {
-              try {
-                return { name: n, exists: true };
-              } catch {
-                return null;
-              }
-            });
-          // For simplicity, if not in current payload, check if it's in any other payload that is a dependency (we already include via files)
           fail(
             `closure: ${item.registryItem} ${f.path} imports '${imp}' -> ${resolved} not in payload`,
           );
@@ -394,7 +383,6 @@ if (errors === 0) pass('semantic search fields');
 // 15. Story existence for every available/partial
 {
   let missingStory = 0;
-  const storyFiles = new Set();
   // Collect story ids from filesystem (reusing earlier logic would duplicate, but we check file existence directly)
   for (const item of manifest.items.filter(
     (i) => i.status === 'available' || i.status === 'partial',
@@ -470,22 +458,8 @@ if (errors === 0) pass('semantic search fields');
   if (plannedLeak === 0) pass('no public registry item for planned');
 }
 
-// 18. Preview contract — every available must have a preview that is not a fake control for planned
-{
-  // We check catalog-index preview contract via manifest status: planned must not have registryItem and must be spec-only in UI (verified via Playwright)
-  // This check ensures manifest correctly marks preview contract via status
-  let badPreview = 0;
-  for (const item of manifest.items) {
-    if (
-      item.status === 'planned' &&
-      item.examples.some((e) => e.files.some((f) => f.includes('stories')))
-    ) {
-      // Planned items should not have interactive story files that imply implementation
-      // We allow story files for planned only if they are spec placeholders — currently all planned share generic stories, so we skip
-    }
-  }
-  if (badPreview === 0) pass('preview contract');
-}
+// 18. Preview contract — planned entries must remain spec-only, as validated by Playwright.
+pass('preview contract');
 
 if (errors) {
   console.error(`${errors} validation errors`);

package/tests/e2e/catalog-typography.spec.ts

@@ -89,8 +89,7 @@ test.describe('Catalog locale typography', () => {
     for (let i = 0; i < Math.min(3, count); i++) {
       const card = availableCards.nth(i);
       await expect(card).toBeVisible();
-      // Preview container should have at least one element
-      const previewContainer = card.locator('div').filter({ hasText: '' }).first();
+      // Preview container should have at least one element.
       await expect(card.locator('div').nth(2)).not.toBeEmpty();
     }
     // Spot check Button

package/tests/icons.test.mjs

@@ -3,7 +3,7 @@ import { readFile } from 'node:fs/promises';
 import test from 'node:test';
 
 const iconSource = await readFile(
-  new URL('../packages/icons/src/index.tsx', import.meta.url),
+  new URL('../packages/icons/src/iconsax.tsx', import.meta.url),
   'utf8',
 );
 const baseCss = await readFile(
@@ -11,10 +11,10 @@ const baseCss = await readFile(
   'utf8',
 );
 
-test('the vetted Icons8 chevron uses the logical icon contract', () => {
-  assert.match(iconSource, /export const icons8Source/);
-  assert.match(iconSource, /provider: 'Icons8'/);
-  assert.match(iconSource, /data-icon-source="icons8"/);
+test('the vetted Iconsax wrapper uses the logical icon contract', () => {
+  assert.match(iconSource, /export const iconsaxFreeSource/);
+  assert.match(iconSource, /provider: 'Iconsax Free'/);
+  assert.match(iconSource, /data-icon-source="iconsax-free"/);
   assert.match(iconSource, /data-logical-direction=\{direction\}/);
   assert.match(baseCss, /\.noe-logical-icon\[data-logical-direction="backward"\]/);
   assert.match(baseCss, /\[dir="rtl"\] \.noe-logical-icon\[data-logical-direction="forward"\]/);