onsystem 0.10.0 → 0.10.2

package/dist/{design-system-D53Jxybo.js → design-system-rl__N6tw.js}

@@ -1,3 +1,5 @@
+import { createRequire } from "node:module";
+import { createHash, randomUUID } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
@@ -7,11 +9,10 @@ import ts from "typescript";
 import os from "node:os";
 import postcss from "postcss";
 import { clampChroma, colorsNamed, converter, differenceEuclidean, formatHex, parse, wcagContrast } from "culori";
-import { createHash } from "node:crypto";
 import fsp from "node:fs/promises";
 import { LineCounter, isMap, isScalar, parseDocument, stringify } from "yaml";
 import { stemmer } from "stemmer";
-//#region src/extract/program.ts
+// src/extract/program.ts
 const DEFAULT_OPTIONS = {
 	target: ts.ScriptTarget.ES2022,
 	module: ts.ModuleKind.ESNext,
@@ -121,8 +122,74 @@ function projectFiles(program) {
 function isProjectFile(file) {
 	return !/[\\/]node_modules[\\/]/.test(file);
 }
-//#endregion
-//#region src/util/paths.ts
+// src/util/strings.ts
+/** `alert-dialog` / `alert_dialog` / `alertDialog` → `AlertDialog`. */
+function pascalCase(input) {
+	return input.replace(/\.[^.]+$/, "").split(/[^a-zA-Z0-9]+|(?<=[a-z0-9])(?=[A-Z])/).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1).toLowerCase()).join("");
+}
+/** `AlertDialog` → `["Alert", "Dialog"]`, `isHTMLSafe` → `["is", "HTML", "Safe"]`. */
+function splitWords(input) {
+	return input.split(/[^a-zA-Z0-9]+|(?<=[a-z0-9])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/).filter(Boolean);
+}
+function isPascalCase(name) {
+	return /^[A-Z][A-Za-z0-9]*$/.test(name);
+}
+/** Optimal string alignment distance (Levenshtein plus adjacent transpositions). */
+function editDistance(a, b) {
+	if (a === b) return 0;
+	if (!a.length) return b.length;
+	if (!b.length) return a.length;
+	const rows = a.length + 1;
+	const cols = b.length + 1;
+	const d = new Array(rows * cols).fill(0);
+	const at = (i, j) => d[i * cols + j] ?? 0;
+	for (let i = 0; i < rows; i++) d[i * cols] = i;
+	for (let j = 0; j < cols; j++) d[j] = j;
+	for (let i = 1; i < rows; i++) for (let j = 1; j < cols; j++) {
+		const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+		let v = Math.min(at(i - 1, j) + 1, at(i, j - 1) + 1, at(i - 1, j - 1) + cost);
+		if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) v = Math.min(v, at(i - 2, j - 2) + 1);
+		d[i * cols + j] = v;
+	}
+	return at(a.length, b.length);
+}
+/**
+* The candidate closest to `input` by case-insensitive edit distance, if it is
+* close enough to be a plausible typo (at most a third of the length, min 1).
+*/
+function closest(input, candidates, maxRatio = 1 / 3) {
+	const needle = input.toLowerCase();
+	const limit = Math.max(1, Math.floor(needle.length * maxRatio));
+	let best;
+	let bestScore = Infinity;
+	for (const candidate of candidates) {
+		const gap = Math.abs(candidate.length - needle.length);
+		if (gap > limit || gap >= bestScore) continue;
+		const score = editDistance(needle, candidate.toLowerCase());
+		if (score < bestScore) {
+			best = candidate;
+			bestScore = score;
+		}
+	}
+	return bestScore <= limit ? best : void 0;
+}
+function truncate(text, max) {
+	return text.length <= max ? text : `${text.slice(0, max - 1).trimEnd()}…`;
+}
+/**
+* `text` as a JSON string, with U+0085, U+2028 and U+2029 escaped too, so it stays on one line
+* (JSON escapes the other line breaks).
+*/
+function json(text) {
+	return JSON.stringify(text).replace(/[\u0085\u2028\u2029]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`);
+}
+function plural$1(count, word, pluralWord = `${word}s`) {
+	return `${count} ${count === 1 ? word : pluralWord}`;
+}
+function unique(items) {
+	return [...new Set(items)];
+}
+// src/util/paths.ts
 function toPosix(p) {
 	return p.split(path.sep).join("/");
 }
@@ -271,8 +338,15 @@ function splitTopLevel$2(text) {
 function escapeRegExp(text) {
 	return text.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
 }
-//#endregion
-//#region src/package-source.ts
+/**
+* A file, folder or import path, as written when it holds only the characters of a path (letters,
+* digits and `_ @ $ . + ~ / \ : ( ) [ ] { } # % , = ! -`, as in `app/(site)/[id]/page.tsx`);
+* otherwise, as for a path that holds a space or a line break (git allows one), JSON-quoted.
+*/
+function pathOf(file) {
+	return /^[\p{L}\p{N}_@$.+~/\\:()[\]{}#%,=!-]+$/u.test(file) ? file : json(file);
+}
+// src/package-source.ts
 /**
 * A package's sources behind its build output: `exports` that point at `dist/` mapped
 * back to `src/`, and barrels (`index.ts` files that re-export) followed to the files
@@ -513,8 +587,7 @@ function isFile$1(file) {
 		return false;
 	}
 }
-//#endregion
-//#region src/tokens/imports.ts
+// src/tokens/imports.ts
 /** Enough stylesheets for a theme split over files, without reading a whole design system. */
 const MAX_IMPORTED = 50;
 /**
@@ -566,69 +639,7 @@ function importedStylesheets(files, resolve) {
 	for (const file of files) visit(file);
 	return out;
 }
-//#endregion
-//#region src/util/strings.ts
-/** `alert-dialog` / `alert_dialog` / `alertDialog` → `AlertDialog`. */
-function pascalCase(input) {
-	return input.replace(/\.[^.]+$/, "").split(/[^a-zA-Z0-9]+|(?<=[a-z0-9])(?=[A-Z])/).filter(Boolean).map((part) => part.charAt(0).toUpperCase() + part.slice(1).toLowerCase()).join("");
-}
-/** `AlertDialog` → `["Alert", "Dialog"]`, `isHTMLSafe` → `["is", "HTML", "Safe"]`. */
-function splitWords(input) {
-	return input.split(/[^a-zA-Z0-9]+|(?<=[a-z0-9])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/).filter(Boolean);
-}
-function isPascalCase(name) {
-	return /^[A-Z][A-Za-z0-9]*$/.test(name);
-}
-/** Optimal string alignment distance (Levenshtein plus adjacent transpositions). */
-function editDistance(a, b) {
-	if (a === b) return 0;
-	if (!a.length) return b.length;
-	if (!b.length) return a.length;
-	const rows = a.length + 1;
-	const cols = b.length + 1;
-	const d = new Array(rows * cols).fill(0);
-	const at = (i, j) => d[i * cols + j] ?? 0;
-	for (let i = 0; i < rows; i++) d[i * cols] = i;
-	for (let j = 0; j < cols; j++) d[j] = j;
-	for (let i = 1; i < rows; i++) for (let j = 1; j < cols; j++) {
-		const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-		let v = Math.min(at(i - 1, j) + 1, at(i, j - 1) + 1, at(i - 1, j - 1) + cost);
-		if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) v = Math.min(v, at(i - 2, j - 2) + 1);
-		d[i * cols + j] = v;
-	}
-	return at(a.length, b.length);
-}
-/**
-* The candidate closest to `input` by case-insensitive edit distance, if it is
-* close enough to be a plausible typo (at most a third of the length, min 1).
-*/
-function closest(input, candidates, maxRatio = 1 / 3) {
-	const needle = input.toLowerCase();
-	const limit = Math.max(1, Math.floor(needle.length * maxRatio));
-	let best;
-	let bestScore = Infinity;
-	for (const candidate of candidates) {
-		const gap = Math.abs(candidate.length - needle.length);
-		if (gap > limit || gap >= bestScore) continue;
-		const score = editDistance(needle, candidate.toLowerCase());
-		if (score < bestScore) {
-			best = candidate;
-			bestScore = score;
-		}
-	}
-	return bestScore <= limit ? best : void 0;
-}
-function truncate(text, max) {
-	return text.length <= max ? text : `${text.slice(0, max - 1).trimEnd()}…`;
-}
-function plural$1(count, word, pluralWord = `${word}s`) {
-	return `${count} ${count === 1 ? word : pluralWord}`;
-}
-function unique(items) {
-	return [...new Set(items)];
-}
-//#endregion
-//#region src/detect.ts
+// src/detect.ts
 const ignore = () => void 0;
 const COMPONENT_FILE = /\.[jt]sx$/;
 /** A module a barrel can lead to: TypeScript or JavaScript, not a declaration file. */
@@ -1588,11 +1599,11 @@ const PACKAGE_FIELD = "onsystem";
 function declaredConfig(dir, pkg = readJson$1(path.join(dir, "package.json"))) {
 	const value = pkg?.[PACKAGE_FIELD];
 	if (value === void 0) return void 0;
-	const field = `"${PACKAGE_FIELD}" in ${path.join(dir, "package.json")}`;
+	const field = `"${PACKAGE_FIELD}" in ${pathOf(path.join(dir, "package.json"))}`;
 	if (typeof value !== "string" || !value.endsWith(".json")) return { problem: `${field} is ${JSON.stringify(value)}: it names a JSON config file in the package, such as "./onsystem.config.json".` };
 	const file = path.resolve(dir, value);
-	if (!isInside(dir, file) || file === path.resolve(dir)) return { problem: `${field} names ${value}, which is outside the package.` };
-	if (!isFile(file)) return { problem: `${field} names ${value}, which does not exist.` };
+	if (!isInside(dir, file) || file === path.resolve(dir)) return { problem: `${field} names ${JSON.stringify(value)}, which is outside the package.` };
+	if (!isFile(file)) return { problem: `${field} names ${JSON.stringify(value)}, which does not exist.` };
 	return { file };
 }
 /**
@@ -2064,8 +2075,7 @@ function isDirectory$1(dir) {
 		return false;
 	}
 }
-//#endregion
-//#region src/tokens/color.ts
+// src/tokens/color.ts
 const toOklch$1 = converter("oklch");
 /**
 * Euclidean distance in OKLCH with hue handled as an angle, which is ΔE in
@@ -2236,8 +2246,7 @@ function formatDistance(color, token) {
 	if (deltaE < 5e-4 && formatOpacityGap(color, token, "")) return "same color";
 	return formatDeltaE(deltaE);
 }
-//#endregion
-//#region src/libraries/mui.ts
+// src/libraries/mui.ts
 /** The palette groups MUI's components take as a `color` value (`<Button color="primary">`). */
 const ROLES = /* @__PURE__ */ new Set([
 	"primary",
@@ -2573,8 +2582,7 @@ function themeTokens(options, source) {
 	for (const token of tokens) token.origin = "library";
 	return tokens;
 }
-//#endregion
-//#region src/libraries/index.ts
+// src/libraries/index.ts
 /** The ids of the libraries onsystem can read, for the config's `libraries` list. */
 const LIBRARY_IDS = ["mui"];
 /** The libraries onsystem can read, by package. */
@@ -2703,8 +2711,7 @@ function readJson(file) {
 		return;
 	}
 }
-//#endregion
-//#region src/extract/cva.ts
+// src/extract/cva.ts
 const FACTORIES = /* @__PURE__ */ new Set(["cva", "tv"]);
 /** Finds every `const x = cva(base, { variants, defaultVariants })` in a file. */
 function findVariantDefinitions(sourceFile) {
@@ -2946,8 +2953,7 @@ function evaluateCalc(expression) {
 	const result = sum();
 	return result && Number.isFinite(result.n) ? result.n : void 0;
 }
-//#endregion
-//#region src/tokens/usage.ts
+// src/tokens/usage.ts
 /**
 * Ready-to-paste ways to use a token, most idiomatic first. With a Tailwind
 * theme key that is the utility class; otherwise the custom property.
@@ -3005,8 +3011,7 @@ function utilities(namespace, key) {
 		default: return [];
 	}
 }
-//#endregion
-//#region src/tokens/tailwind-config.ts
+// src/tokens/tailwind-config.ts
 /** A preset chain is a few files deep; anything beyond is not a Tailwind config. */
 const MAX_FILES = 12;
 /** A config or preset module, which is read for its theme. */
@@ -3506,8 +3511,7 @@ function findTailwindConfig(root) {
 		"mts"
 	].map((ext) => path.join(root, `tailwind.config.${ext}`)).find((file) => fs.existsSync(file));
 }
-//#endregion
-//#region src/config.ts
+// src/config.ts
 const RULE_IDS = [
 	"no-hardcoded-color",
 	"no-hardcoded-spacing",
@@ -3530,7 +3534,7 @@ function unknownKeys(what, known) {
 		if (issue.code !== "unrecognized_keys") return void 0;
 		return issue.keys.map((key) => {
 			const guess = closest(key, known, .5);
-			return `Unknown ${what} "${key}". ${guess ? `Did you mean "${guess}"?` : `Expected one of: ${known.join(", ")}.`}`;
+			return `Unknown ${what} ${JSON.stringify(key)}. ${guess ? `Did you mean "${guess}"?` : `Expected one of: ${known.join(", ")}.`}`;
 		}).join("\n");
 	};
 }
@@ -3544,7 +3548,7 @@ const ruleSettingSchema = z.union([
 	if (typeof issue.input !== "string") return void 0;
 	const input = issue.input;
 	const guess = SEVERITIES.find((s) => input && (s.startsWith(input) || input.startsWith(s)));
-	return `Invalid severity "${input}": use "off", "warn" or "error"${guess ? ` (did you mean "${guess}"?)` : ""}.`;
+	return `Invalid severity ${JSON.stringify(input)}: use "off", "warn" or "error"${guess ? ` (did you mean "${guess}"?)` : ""}.`;
 } });
 const globsSchema = z.union([z.string(), z.array(z.string())]);
 const rulesSchema = z.partialRecord(z.enum(RULE_IDS), ruleSettingSchema, { error: unknownKeys("rule", RULE_IDS) });
@@ -3562,7 +3566,7 @@ const librariesSchema = z.union([z.literal(false), z.array(z.enum(LIBRARY_IDS))]
 	const unknown = Array.isArray(issue.input) ? issue.input.find((id) => !LIBRARY_IDS.includes(id)) : void 0;
 	if (typeof unknown === "string") {
 		const guess = closest(unknown, LIBRARY_IDS, .5);
-		return `Unknown library "${unknown}". ${guess ? `Did you mean "${guess}"?` : `Expected one of: ${LIBRARY_IDS.join(", ")}.`}`;
+		return `Unknown library ${JSON.stringify(unknown)}. ${guess ? `Did you mean "${guess}"?` : `Expected one of: ${LIBRARY_IDS.join(", ")}.`}`;
 	}
 	return `"libraries" is false, to read no library, or a list of the ones to read: ${JSON.stringify(LIBRARY_IDS)}.`;
 } });
@@ -3599,6 +3603,19 @@ const CONFIG_FILES = [
 * They are still read, when no `onsystem.config.*` exists, with a notice to rename the file.
 */
 const LEGACY_CONFIG_FILES = CONFIG_FILES.map((name) => name.replace(/^onsystem\./, "design-system-mcp."));
+/**
+* What marks the folder a file belongs to: the nearest one at or above it with a config,
+* a components.json, a package.json or an Nx project.json. The Claude Code hook finds a
+* file's project the same way, so `check` from a workspace root and the hook agree on
+* every file.
+*/
+const PROJECT_MARKERS = [
+	...CONFIG_FILES,
+	...LEGACY_CONFIG_FILES,
+	"components.json",
+	"package.json",
+	"project.json"
+];
 const DEFAULT_COMPONENTS = ["components/ui/**/*.{tsx,jsx}", "src/components/ui/**/*.{tsx,jsx}"];
 /** Tests and stories: neither component sources nor UI that `check` lints by default. */
 const DEFAULT_TEST_EXCLUDE = "**/*.{test,spec,stories}.{ts,tsx,js,jsx}";
@@ -3675,9 +3692,12 @@ async function loadConfigWith(options, context = {}) {
 		lookup ??= findDesignSystemPackage(root, finder(root));
 		if (!lookup?.problems.length) declared = lookup?.found;
 		else if (!configFile) throw declarationError(lookup, root);
-		else warnings.push(`${lookup.problems.map((p) => `${p.name}: ${p.problem}`).join("\n")}\nSo ${configFile} is read alone, without the config a design-system package declares. Fix the "${PACKAGE_FIELD}" field in that package, or set "extends": false in ${path.basename(configFile)}.`);
+		else warnings.push(`${problemLines(lookup.problems)}\nSo ${configFile} is read alone, without the config a design-system package declares. Fix the "${PACKAGE_FIELD}" field in that package, or set "extends": false in ${path.basename(configFile)}.`);
+	}
+	for (const { name, problem } of lookup?.skipped ?? []) {
+		const quoted = json(name);
+		warnings.push(`The onsystem config of ${quoted} was skipped: ${problem} ${quoted} is installed in node_modules, so this project is read as if it declared none.`);
 	}
-	for (const { name, problem } of lookup?.skipped ?? []) warnings.push(`${name}'s onsystem config was skipped: ${problem} ${name} is installed in node_modules, so this project is read as if it declared none.`);
 	const pkg = declared ? await readConfig(declared.config, options) : void 0;
 	const base = options.base ? path.resolve(cwd, options.base) : root;
 	const rebase = (from) => (p) => from === root ? p : toPosix(path.relative(root, path.resolve(from, slashGlob(p)))) || ".";
@@ -3693,7 +3713,7 @@ async function loadConfigWith(options, context = {}) {
 	const outside = [];
 	const within = (field) => (p) => {
 		if (!declared || staysIn(declared.dir, declared.boundary, slashGlob(p))) return true;
-		outside.push(`${field} ${p}`);
+		outside.push(`${field} ${json(p)}`);
 		return false;
 	};
 	const pathOf = (t) => typeof t === "string" ? t : t.path;
@@ -3704,7 +3724,7 @@ async function loadConfigWith(options, context = {}) {
 	const packageComponents = pkg?.components === void 0 ? void 0 : toArray(pkg.components).filter(within("components")).map(fromPackage);
 	const packageTokens = pkg?.tokens === void 0 ? void 0 : toArray(pkg.tokens).filter((t) => within("tokens")(pathOf(t))).map(tokensFrom(fromPackage));
 	const packageDocs = pkg?.docs === void 0 ? void 0 : toArray(pkg.docs).filter(within("docs")).map(fromPackage);
-	if (declared && outside.length) warnings.push(`${declared.name}'s onsystem config names paths outside ${declared.installed ? "the package" : "the workspace"}, which were ignored: ${outside.join(", ")}.`);
+	if (declared && outside.length) warnings.push(`The onsystem config of ${json(declared.name)} names paths outside ${declared.installed ? "the package" : "the workspace"}, which were ignored: ${outside.join(", ")}.`);
 	const inherits = pkg !== void 0 && config.components === void 0;
 	const configComponents = config.components === void 0 ? packageComponents : toArray(config.components).map(fromBase);
 	const configTokens = config.tokens === void 0 ? inherits ? packageTokens : void 0 : toArray(config.tokens).map(tokensFrom(fromBase));
@@ -3811,9 +3831,17 @@ function ownDeclaredConfig(dir) {
 	if (declared && "problem" in declared) throw new ConfigError(declared.problem);
 	return declared?.file;
 }
+/**
+* Each declaration that cannot be read, on a line of its own. The package's name is the
+* repository's text (any string can name a dependency in package.json), so it is JSON-quoted:
+* a line break or a sentence in it stays inside the quotes, on that line.
+*/
+function problemLines(problems) {
+	return problems.map((p) => `${json(p.name)}: ${p.problem}`).join("\n");
+}
 /** The error for workspace packages whose declaration cannot be read: their team can fix them. */
 function declarationError(lookup, dir) {
-	return new ConfigError(`${lookup.problems.map((p) => `${p.name}: ${p.problem}`).join("\n")}\nFix the "${PACKAGE_FIELD}" field in that package, or give ${dir} a config of its own (onsystem.config.json), which is read instead.`);
+	return new ConfigError(`${problemLines(lookup.problems)}\nFix the "${PACKAGE_FIELD}" field in that package, or give ${dir} a config of its own (onsystem.config.json), which is read instead.`);
 }
 /**
 * Whether a path or glob in a dependency's config, relative to its folder `dir`, stays in
@@ -3880,11 +3908,17 @@ function nodeRunsTypeScript(version = process.versions.node) {
 /** A config file, read and validated: a JSON one only with `jsonConfigOnly`. */
 async function readConfig(file, options) {
 	if (!fs.existsSync(file)) throw new ConfigError(`Config file not found: ${file}`);
-	if (options.jsonConfigOnly && !file.endsWith(".json")) throw new ConfigError(`${file} was not run: the server runs a JavaScript or TypeScript config only in a project it was started in (its working directory, --root or the client's roots), not in one found from the path a tool call names. Start the server in the project, or use onsystem.config.json.`);
+	if (options.jsonConfigOnly && !file.endsWith(".json")) {
+		const within = options.jsonConfigWithin;
+		const project = options.root ? path.resolve(options.cwd ?? process.cwd(), options.root) : path.dirname(file);
+		throw new ConfigError(within ? `${pathOf(file)} was not run: the server was started for ${pathOf(within)} (with --root or the client's root), which holds no project of its own, only projects in its folders, and a project found in it from the path a tool call names reads only a JSON config. Start the server with --root ${pathOf(project)} to use this config, or use onsystem.config.json.` : `${pathOf(file)} was not run: the server runs a JavaScript or TypeScript config only in a project it was started in (its working directory, --root or the client's roots), not in one found from the path a tool call names. Start the server in the project, or use onsystem.config.json.`);
+	}
 	const parsed = configSchema.safeParse(await readConfigFile(file));
 	if (!parsed.success) throw new ConfigError(`Invalid config in ${file}:\n${z.prettifyError(parsed.error)}`);
 	return parsed.data;
 }
+/** Where require keeps the CommonJS modules it has loaded, by path. */
+const requireCache = createRequire(import.meta.url).cache;
 async function readConfigFile(file) {
 	if (/\.[cm]?ts$/.test(file) && !nodeRunsTypeScript()) throw new ConfigError(`${file} is TypeScript, which Node.js runs from 22.18; this is ${process.version}. Use onsystem.config.json or .mjs, or Node.js 22.18 or later.`);
 	if (file.endsWith(".json")) try {
@@ -3893,7 +3927,9 @@ async function readConfigFile(file) {
 		throw new ConfigError(`Could not parse ${file}: ${error.message}`);
 	}
 	try {
-		const mod = await import(pathToFileURL(file).href);
+		const version = createHash("sha256").update(fs.readFileSync(file)).digest("hex").slice(0, 16);
+		delete requireCache[fs.realpathSync(file)];
+		const mod = await import(`${pathToFileURL(file).href}?v=${version}`);
 		return mod.default ?? mod;
 	} catch (error) {
 		const message = error.message;
@@ -3917,8 +3953,7 @@ function configJsonSchema() {
 		io: "input"
 	});
 }
-//#endregion
-//#region src/extract/components.ts
+// src/extract/components.ts
 /**
 * Extracts React components from source with the TypeScript checker: props
 * (types, required, defaults, JSDoc), `cva()`/`tv()` variants, the native
@@ -4764,8 +4799,7 @@ function valueExports(checker, sourceFile) {
 		return ((symbol.flags & ts.SymbolFlags.Alias ? checker.getAliasedSymbol(symbol) : symbol).flags & ts.SymbolFlags.Value) !== 0;
 	}).map((symbol) => symbol.name);
 }
-//#endregion
-//#region src/extract/docs.ts
+// src/extract/docs.ts
 const EXAMPLE_LANGS = /* @__PURE__ */ new Set([
 	"tsx",
 	"jsx",
@@ -4933,8 +4967,9 @@ function dedent(code) {
 	const indent = Math.min(...lines.filter((l) => l.trim()).map((l) => /^\s*/.exec(l)?.[0].length ?? 0));
 	return lines.map((l) => l.slice(Number.isFinite(indent) ? indent : 0)).join("\n");
 }
-//#endregion
-//#region src/libraries/declarations.ts
+// src/libraries/declarations.ts
+/** A component's name: a capitalised identifier (`Button`, `ButtonBase`, `Unstable_Grid2`). */
+const COMPONENT_NAME = /^[A-Z][\w$]*$/;
 /** Packages contributing more props than this are summarised, as in source extraction. */
 const MAX_LISTED_INHERITED = 40;
 /**
@@ -5006,9 +5041,9 @@ function extractLibrary(options) {
 			const declaration = symbol.valueDeclaration ?? symbol.declarations?.[0];
 			const isDefault = exported.getName() === "default";
 			const name = isDefault && subpath && declaration ? ts.getNameOfDeclaration(declaration)?.getText() ?? "default" : exported.getName();
-			if (isDefault && !/^[A-Z]/.test(name)) continue;
+			if (isDefault && !COMPONENT_NAME.test(name)) continue;
 			exportNames.add(name);
-			if (!/^[A-Z]/.test(name)) continue;
+			if (!COMPONENT_NAME.test(name)) continue;
 			const known = bySymbol.get(symbol);
 			if (known) {
 				if (known.name !== name && !known.aliases.includes(name)) known.aliases.push(name);
@@ -5470,8 +5505,7 @@ function linkSlots(components, icons) {
 		}
 	}
 }
-//#endregion
-//#region src/libraries/load.ts
+// src/libraries/load.ts
 /** App sources read for module augmentations and themes, at most. */
 const MAX_SOURCES = 5e3;
 const SOURCE_FILE = /\.(?:[cm]?[jt]sx?)$/;
@@ -5584,8 +5618,7 @@ async function appSources(root, project, patterns) {
 	}
 	return found;
 }
-//#endregion
-//#region src/lint/analyze.ts
+// src/lint/analyze.ts
 const CLASS_FUNCTIONS = /^(cn|clsx|cx|twMerge|twJoin|classNames|classnames|cva|tv)$/;
 /** The node's children in source order. */
 function childrenOf(node) {
@@ -5939,8 +5972,7 @@ function styleObjects(expr) {
 	const fn = asFunction(expr);
 	return (fn ? returnedExpressions(fn).flatMap(valueBranches) : valueBranches(expr)).filter(ts.isObjectLiteralExpression);
 }
-//#endregion
-//#region src/lint/context.ts
+// src/lint/context.ts
 /**
 * Resolves a JSX tag to a design-system component, following imports and
 * aliases. `file` is the checked file relative to the root, for relative imports.
@@ -6035,8 +6067,7 @@ function fromLibrary(target, library, name, source, member) {
 		source
 	};
 }
-//#endregion
-//#region src/lint/tailwind-palette.ts
+// src/lint/tailwind-palette.ts
 /** Tailwind's default color palette: name → shade → OKLCH value. */
 const TAILWIND_PALETTE = {
 	red: {
@@ -6383,8 +6414,7 @@ const TAILWIND_KEYWORD_COLORS = {
 	black: "#000",
 	white: "#fff"
 };
-//#endregion
-//#region src/tokens/css.ts
+// src/tokens/css.ts
 /** Tailwind v4 theme namespaces → token category. Longest prefixes first. */
 const NAMESPACES = [
 	["--inset-shadow-", "shadow"],
@@ -6765,8 +6795,7 @@ function trails(comment, before) {
 	const line = before?.source?.end?.line;
 	return line !== void 0 && comment.source?.start?.line === line;
 }
-//#endregion
-//#region src/tokens/design-md.ts
+// src/tokens/design-md.ts
 /**
 * Reads the tokens in a DESIGN.md's YAML front matter (https://github.com/google-labs-code/design.md):
 * `colors`, `typography`, `rounded` and `spacing`. Tokens are named by their path
@@ -6902,8 +6931,7 @@ function reference(value) {
 function isReference(value) {
 	return reference(value) !== void 0;
 }
-//#endregion
-//#region src/tokens/dtcg.ts
+// src/tokens/dtcg.ts
 /**
 * The `$extensions` key under which onsystem keeps what DTCG has no field for: the token's
 * own name, the custom property code uses, the Tailwind theme variable and the values in
@@ -7265,8 +7293,7 @@ function lineIndex(text) {
 		return lineAt(offset);
 	};
 }
-//#endregion
-//#region src/tokens/roles.ts
+// src/tokens/roles.ts
 /** The role of a Tailwind color prefix (`bg`, `text`, `border-t`); undefined for shadows and the like. */
 function colorRole(prefix) {
 	if (!prefix) return void 0;
@@ -7500,8 +7527,7 @@ function roleFit(token, role) {
 		};
 	}
 }
-//#endregion
-//#region src/types.ts
+// src/types.ts
 /**
 * The design-system model the server exposes. Everything here is plain JSON so
 * it can be cached on disk and returned as MCP structured content.
@@ -7514,8 +7540,7 @@ const TOKEN_CATEGORIES = [
 	"shadow",
 	"other"
 ];
-//#endregion
-//#region src/tokens/export.ts
+// src/tokens/export.ts
 /** Group names a DTCG or DESIGN.md token path may already start with, per category. */
 const GROUP_NAMES = {
 	color: [
@@ -8213,8 +8238,7 @@ function table(tokens, keys) {
 function use(token) {
 	return [token.usage.find((u) => !u.includes("(")), cssReference(token)].filter((u) => Boolean(u)).map((u) => `\`${u}\``).join(", ");
 }
-//#endregion
-//#region src/tokens/index.ts
+// src/tokens/index.ts
 async function loadTokens(root, sources) {
 	const warnings = [];
 	const all = [];
@@ -8537,8 +8561,7 @@ function preferTailwind(a, b) {
 function byDistance(a, b) {
 	return Math.round(a.distance * 1e4) - Math.round(b.distance * 1e4) || Number(b.inScope) - Number(a.inScope) || a.fit.rank - b.fit.rank || preferTailwind(a.candidate.token, b.candidate.token) || a.index - b.index;
 }
-//#endregion
-//#region src/lint/tailwind.ts
+// src/lint/tailwind.ts
 function splitClasses(text, offset) {
 	const tokens = [];
 	for (const match of text.matchAll(/\S+/g)) tokens.push({
@@ -8816,8 +8839,7 @@ const STYLE_RADIUS_PROPERTIES = {
 function isColorAttribute(name) {
 	return /^(color|fill|stroke|stopColor|stop-color|floodColor|flood-color|lightingColor|bgcolor)$|Color$/.test(name);
 }
-//#endregion
-//#region src/lint/target.ts
+// src/lint/target.ts
 /**
 * Elements a design system typically replaces. Containers (`div`, `span`,
 * `p`) are deliberately absent: `Card` renders a `div`, but not every `div`
@@ -9222,8 +9244,7 @@ function modulePaths(file) {
 	const module = stripExtension(file);
 	return module.endsWith("/index") ? [module, module.slice(0, -6)] : [module];
 }
-//#endregion
-//#region src/lint/rules/components.ts
+// src/lint/rules/components.ts
 function renameTag(context, element, name) {
 	const edits = [{
 		range: [element.tagName.getStart(context.sourceFile), element.tagName.end],
@@ -10378,8 +10399,7 @@ const iconButtonAccessibleName = {
 		}
 	}
 };
-//#endregion
-//#region src/lint/rules/hardcoded.ts
+// src/lint/rules/hardcoded.ts
 /** `var(--color-green-50)`: a shade of Tailwind's palette through its CSS variable. */
 const PALETTE_VARIABLE = /^var\(\s*--color-([a-z]+-(?:50|[1-9]00|950))\s*\)$/;
 /** Luminance values, not design colors: `white`/`black` (and hex twins). */
@@ -10434,7 +10454,7 @@ function maskReferencedGradientIds(elements) {
 	for (const element of elements) if (element.tag === "mask") refsFrom(element.node);
 	return ids;
 }
-const noHardcodedColor = {
+const noHardcodedColor = shortQuotes({
 	id: "no-hardcoded-color",
 	description: "Colors must come from design tokens: no hex/rgb/oklch literals, arbitrary Tailwind colors or default-palette classes.",
 	run(context) {
@@ -10645,7 +10665,31 @@ const noHardcodedColor = {
 		}
 		reportChartTokens(context, allow);
 	}
-};
+});
+/** The longest code a message quotes. */
+const QUOTED_CODE = 120;
+/**
+* The rule, with each `code` span in its messages cut to QUOTED_CODE characters. A message quotes
+* the class, its fix and the value whole, so one class with 33,000 `hover:` variants made a
+* message of 400,000 characters for the agent to read.
+*/
+function shortQuotes(rule) {
+	const cut = (span, code) => code.length > QUOTED_CODE ? `\`${truncate(code, QUOTED_CODE)}\`` : span;
+	return {
+		...rule,
+		run(context) {
+			rule.run({
+				...context,
+				report(report) {
+					context.report({
+						...report,
+						message: report.message.replace(/`([^`]+)`/g, cut)
+					});
+				}
+			});
+		}
+	};
+}
 /** Packages that draw charts: Recharts, Chart.js, Nivo, visx, Victory, Tremor, MUI X Charts, D3. */
 const CHART_LIBRARY = /chart|^@nivo\/|^@visx\/|^victory|^@tremor\/|^d3(?:-|$)/i;
 /** Roles of an element that is a drawing: a chart drawn by hand is an image. */
@@ -11234,25 +11278,69 @@ function setsColor(utility, prefix) {
 */
 function keepStatesApart(list) {
 	const after = (listed) => listed.report?.fix?.[0]?.text ?? listed.value;
+	const order = new Map(list.map((listed, i) => [listed, i]));
+	const parsed = /* @__PURE__ */ new Map();
+	const parse = (text) => {
+		let utility = parsed.get(text);
+		if (!utility) {
+			utility = parseUtility(text);
+			parsed.set(text, utility);
+		}
+		return utility;
+	};
+	const byText = /* @__PURE__ */ new Map();
+	const byUtility = /* @__PURE__ */ new Map();
+	const utilityKey = (text) => `${parse(text).base}\0${parse(text).modifier}`;
+	const place = (listed) => {
+		const text = after(listed);
+		const same = byText.get(text) ?? [];
+		byText.set(text, same);
+		const index = order.get(listed) ?? 0;
+		same.splice(same.findLastIndex((other) => (order.get(other) ?? 0) < index) + 1, 0, listed);
+		const texts = byUtility.get(utilityKey(text)) ?? /* @__PURE__ */ new Set();
+		byUtility.set(utilityKey(text), texts.add(text));
+	};
+	const unplace = (listed) => {
+		const text = after(listed);
+		const same = byText.get(text) ?? [];
+		same.splice(same.indexOf(listed), 1);
+		if (!same.length) byUtility.get(utilityKey(text))?.delete(text);
+	};
+	for (const listed of list) place(listed);
 	for (const pass of ["state", "base"]) for (const listed of list) {
 		const { report } = listed;
 		if (!report?.fix?.[0]) continue;
-		for (const other of list) {
-			if (other === listed || oneColor(listed.color, other.color)) continue;
-			const [stateListed, baseListed] = pass === "state" ? [listed, other] : [other, listed];
-			const state = parseUtility(after(stateListed));
-			const base = parseUtility(after(baseListed));
+		const text = after(listed);
+		let found;
+		for (const otherText of byUtility.get(utilityKey(text)) ?? []) {
+			if (otherText === text) continue;
+			const [state, base] = pass === "state" ? [parse(text), parse(otherText)] : [parse(otherText), parse(text)];
 			const conditions = conditionsBetween(state, base);
-			if (!conditions || hasDarkBase(list, stateListed, baseListed, state, base, after)) continue;
-			const had = pass === "base" ? `\`${other.value}\` is in the class list too` : after(other) === other.value ? `The class list already has \`${other.value}\`` : `\`${other.value}\` becomes \`${after(other)}\` too`;
-			const apart = state.modifier ? "such as with another opacity modifier" : `such as with \`${withBase({
-				...state,
-				modifier: "/90"
-			}, state.base)}\``;
-			report.message += ` ${had}, so with this fix \`${conditions}\` would change nothing: it is not applied automatically. Keep the two apart, ${apart}.`;
-			report.fix = void 0;
-			break;
+			if (!conditions) continue;
+			for (const other of byText.get(otherText) ?? []) {
+				if (found && (order.get(other) ?? 0) > (order.get(found.other) ?? 0)) break;
+				if (oneColor(listed.color, other.color)) continue;
+				const [stateListed, baseListed] = pass === "state" ? [listed, other] : [other, listed];
+				if (hasDarkBase(list, stateListed, baseListed, state, base, after)) continue;
+				found = {
+					other,
+					state,
+					conditions
+				};
+				break;
+			}
 		}
+		if (!found) continue;
+		const { other, state, conditions } = found;
+		const had = pass === "base" ? `\`${other.value}\` is in the class list too` : after(other) === other.value ? `The class list already has \`${other.value}\`` : `\`${other.value}\` becomes \`${after(other)}\` too`;
+		const apart = state.modifier ? "such as with another opacity modifier" : `such as with \`${withBase({
+			...state,
+			modifier: "/90"
+		}, state.base)}\``;
+		report.message += ` ${had}, so with this fix \`${conditions}\` would change nothing: it is not applied automatically. Keep the two apart, ${apart}.`;
+		unplace(listed);
+		report.fix = void 0;
+		place(listed);
 	}
 }
 /**
@@ -11432,7 +11520,8 @@ function scopes(context, element, classes) {
 		if (name && !/^Sidebar(?:Provider|Inset)$/.test(name)) tags.push(name);
 	}
 	const { tokens, components } = context.target;
-	const found = scopesIn(tokens.scopedFamilies, context.file, classes, ...tags);
+	const found = scopesIn(tokens.scopedFamilies, context.file, ...tags);
+	if (classes) for (const family of classScopes(context, classes)) found.add(family);
 	const files = /* @__PURE__ */ new Set([context.file]);
 	for (const tag of tags) {
 		const file = components.get(tag)?.source.file;
@@ -11444,6 +11533,25 @@ function scopes(context, element, classes) {
 	}
 	return found;
 }
+/** The scoped families each class string of a check names, by its text. */
+const classScopeCache = /* @__PURE__ */ new WeakMap();
+/**
+* The scoped families a class string names, read once per string and check: each color in it
+* asks, and reading the whole string again for each made a list of thousands quadratic.
+*/
+function classScopes(context, classes) {
+	let cache = classScopeCache.get(context.analysis);
+	if (!cache) {
+		cache = /* @__PURE__ */ new Map();
+		classScopeCache.set(context.analysis, cache);
+	}
+	let found = cache.get(classes);
+	if (!found) {
+		found = scopesIn(context.target.tokens.scopedFamilies, classes);
+		cache.set(classes, found);
+	}
+	return found;
+}
 /** The variant prop of the element's component that already sets `prefix-*` classes, if any. */
 function variantProp(context, element, prefix) {
 	const resolution = context.resolve(element);
@@ -11466,7 +11574,7 @@ function numberValue(init) {
 	if (ts.isPrefixUnaryExpression(init) && ts.isNumericLiteral(init.operand) && (init.operator === ts.SyntaxKind.MinusToken || init.operator === ts.SyntaxKind.PlusToken)) return `${init.operator === ts.SyntaxKind.MinusToken ? "-" : ""}${init.operand.text}`;
 }
 function lengthRule(id, description, spec) {
-	return {
+	return shortQuotes({
 		id,
 		description,
 		run(context) {
@@ -11538,7 +11646,7 @@ function lengthRule(id, description, spec) {
 				}
 			}
 		}
-	};
+	});
 }
 /**
 * A value on the scale whose token code cannot name, with neither a Tailwind class nor a
@@ -11582,8 +11690,7 @@ function lengthReplacement(context, category, px, prefix) {
 		tailwind: false
 	};
 }
-//#endregion
-//#region src/lint/rules/index.ts
+// src/lint/rules/index.ts
 /** Every rule, in the order they run. */
 const RULES = [
 	noHardcodedColor,
@@ -11603,8 +11710,7 @@ const RULES = [
 	noUnknownVariant,
 	iconButtonAccessibleName
 ];
-//#endregion
-//#region src/lint/suppress.ts
+// src/lint/suppress.ts
 /**
 * The prefix of suppression comments, the one place it is spelled:
 * `// onsystem-disable-next-line <rule>[, <rule>]`, `// onsystem-disable-line
@@ -11679,8 +11785,7 @@ function insideLiteral(sourceFile, offset) {
 	}
 	return ts.isStringLiteralLike(node) || ts.isTemplateLiteralToken(node) || ts.isJsxText(node) || ts.isRegularExpressionLiteral(node);
 }
-//#endregion
-//#region src/baseline.ts
+// src/baseline.ts
 const BASELINE_FILE = "onsystem.baseline.json";
 /** The baseline's name from before the rename to onsystem: still read when the new one is absent. */
 const LEGACY_BASELINE_FILE = "design-system-mcp.baseline.json";
@@ -12016,15 +12121,12 @@ function writeBaseline(file, entries, about = {}) {
 function isObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-//#endregion
-//#region package.json
+// package.json
 var name = "onsystem";
-//#endregion
-//#region src/version.ts
-const VERSION = "0.10.0";
+// src/version.ts
+const VERSION = "0.10.2";
 const NAME = name;
-//#endregion
-//#region src/lint/sarif.ts
+// src/lint/sarif.ts
 const SCHEMA = "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json";
 const REPO = "https://github.com/dgesteves/onsystem";
 const RULES_PAGE = "https://onsystem.vercel.app/rules";
@@ -12132,8 +12234,7 @@ function sarifResult(d, uri, ruleIndex, fingerprint) {
 function fingerprint$1(uri, identity, occurrence) {
 	return createHash("sha256").update(`${uri}\0${identity}\0${String(occurrence)}`).digest("hex");
 }
-//#endregion
-//#region src/lint/format.ts
+// src/lint/format.ts
 /** From this many findings, `pretty` ends with a summary: more than a screen to scroll back through. */
 const SUMMARY_FROM = 50;
 /** The palette classes the summary lists. */
@@ -12232,8 +12333,7 @@ function escapeData(value) {
 function escapeProperty(value) {
 	return escapeData(value).replace(/:/g, "%3A").replace(/,/g, "%2C");
 }
-//#endregion
-//#region src/lint/index.ts
+// src/lint/index.ts
 /**
 * Lints a TSX/JSX snippet or file against the design system. Purely
 * syntactic: no type-checking of the snippet, so it works on fragments an
@@ -12244,7 +12344,7 @@ function checkSource(code, target, options) {
 	try {
 		return checkParsed(code, target, options, file);
 	} catch (error) {
-		if (!isStackOverflow(error)) throw error;
+		if (!isStackOverflow$1(error)) throw error;
 		return {
 			file,
 			diagnostics: [{
@@ -12262,7 +12362,7 @@ function checkSource(code, target, options) {
 		};
 	}
 }
-function isStackOverflow(error) {
+function isStackOverflow$1(error) {
 	return error instanceof RangeError && /call stack/i.test(error.message);
 }
 function checkParsed(code, target, options, file) {
@@ -12386,7 +12486,7 @@ function uncheckedNotice(results) {
 	const list = [...names];
 	const shown = list.slice(0, 4).map((n) => `<${n}>`);
 	const more = list.length > shown.length ? ` and ${list.length - shown.length} more` : "";
-	const from = [...modules].slice(0, 3).map((m) => `"${m}"`);
+	const from = [...modules].slice(0, 3).map((m) => JSON.stringify(m));
 	const moreModules = modules.size > from.length ? ` and ${modules.size - from.length} more` : "";
 	const where = results.length > 1 ? ` (in ${files} ${files === 1 ? "file" : "files"})` : "";
 	return `${shown.join(", ")}${more} ${list.length === 1 ? "comes" : "come"} from ${from.join(", ")}${moreModules}, which the design-system model does not include, so ${list.length === 1 ? "it was" : "they were"} not checked${where}. Extraction looks incomplete: \`inspect\` lists what was found; add the missing files to "components" in the config.`;
@@ -12447,8 +12547,7 @@ function applyFixes(code, diagnostics) {
 	}
 	return out;
 }
-//#endregion
-//#region src/modules.ts
+// src/modules.ts
 /**
 * Finds the modules a checked file imports from the design system, and what
 * they export, so the linter can tell a name the model left out (an excluded
@@ -12561,8 +12660,7 @@ function readExports(sourceFile, resolve) {
 		namespaces
 	};
 }
-//#endregion
-//#region src/search/bm25.ts
+// src/search/bm25.ts
 var Bm25Index = class {
 	docs = [];
 	df = /* @__PURE__ */ new Map();
@@ -12619,8 +12717,7 @@ var Bm25Index = class {
 		return hits.sort((a, b) => b.score - a.score).slice(0, limit);
 	}
 };
-//#endregion
-//#region src/search/tokenize.ts
+// src/search/tokenize.ts
 const STOP_WORDS = new Set(`a an and are as at be but by can do does for from has have how i if in into is it its me my need
   of on or our should so some that the their them then there these this to use used using want we
   what when where which while who will with without would you your show make let lets get add want
@@ -12694,8 +12791,7 @@ function expandQuery(query) {
 	}
 	return weights;
 }
-//#endregion
-//#region src/search/index.ts
+// src/search/index.ts
 /** Field weights: names matter most, then descriptions and variant values. */
 const WEIGHTS = {
 	name: 4,
@@ -12848,8 +12944,7 @@ function searchComponents(index, query, limit = 5) {
 		weak: true
 	}));
 }
-//#endregion
-//#region src/util/log.ts
+// src/util/log.ts
 const stderrLogger = {
 	info: (message) => process.stderr.write(`[onsystem] ${message}\n`),
 	warn: (message) => process.stderr.write(`[onsystem] warning: ${message}\n`),
@@ -12860,8 +12955,7 @@ const silentLogger = {
 	warn: () => void 0,
 	error: () => void 0
 };
-//#endregion
-//#region src/design-system.ts
+// src/design-system.ts
 /** A loaded design system: the model plus the indexes the tools query. */
 var DesignSystem = class {
 	model;
@@ -13103,6 +13197,38 @@ function repositoryOf(dir) {
 		if (current === path.dirname(current)) return void 0;
 	}
 }
+/**
+* `extractComponents`, without the component files nested too deeply for TypeScript's recursive
+* parser (thousands of levels), each named in a warning: one such file would otherwise fail the
+* whole design system with a RangeError that names no file.
+*/
+function extractReadable(options) {
+	try {
+		return extractComponents(options);
+	} catch (error) {
+		if (!isStackOverflow(error)) throw error;
+		const tooDeep = new Set(options.files.filter(overflowsParser));
+		if (!tooDeep.size) throw error;
+		const extracted = extractComponents({
+			...options,
+			files: options.files.filter((file) => !tooDeep.has(file))
+		});
+		for (const file of tooDeep) extracted.warnings.push(`${relativePath(options.root, file)}: nested too deeply to read (thousands of levels); skipped.`);
+		return extracted;
+	}
+}
+/** Whether parsing `file` on its own runs out of stack. */
+function overflowsParser(file) {
+	try {
+		ts.createSourceFile(file, fs.readFileSync(file, "utf8"), ts.ScriptTarget.Latest);
+		return false;
+	} catch (error) {
+		return isStackOverflow(error);
+	}
+}
+function isStackOverflow(error) {
+	return error instanceof RangeError && /call stack/i.test(error.message);
+}
 /** What `inspect` and the server's log say about files that lead outside the project. */
 function outsideWarning(root, files) {
 	const shown = files.map((file) => relativePath(root, file)).sort();
@@ -13111,9 +13237,10 @@ function outsideWarning(root, files) {
 /**
 * Absolute paths matching `patterns` under the root. `node_modules` is skipped
 * even when `exclude` replaces the defaults, except by patterns that name it
-* (tokens published as a package). Files that lead outside the project are left out.
+* (tokens published as a package). Files that lead outside the project are left out. Those that
+* `skip` accepts are left out before that check, so they are not named as leading outside.
 */
-async function find(config, patterns, contain = new Containment(config)) {
+async function find(config, patterns, contain = new Containment(config), skip = () => false) {
 	const options = {
 		cwd: config.root,
 		absolute: true,
@@ -13146,7 +13273,7 @@ async function find(config, patterns, contain = new Containment(config)) {
 			});
 		})
 	]);
-	return (await contain.filter(unique(found.flat()))).sort();
+	return (await contain.filter(unique(found.flat()).filter((file) => !skip(file)))).sort();
 }
 /** The design system's own component files, as absolute paths. */
 function componentFiles(config) {
@@ -13168,8 +13295,9 @@ async function resolveFiles(config) {
 		seen.add(real);
 		return true;
 	};
+	const others = config.tokensDetected && !config.configFile && !holdsProject(config.root) ? (file) => inProjectBelow(config.root, file) : () => false;
 	const add = async (sources) => {
-		for (const source of sources) for (const file of await find(config, [source.path], contain)) if (await isNew(file)) tokens.push({
+		for (const source of sources) for (const file of await find(config, [source.path], contain, others)) if (await isNew(file)) tokens.push({
 			file,
 			prefix: source.prefix
 		});
@@ -13187,6 +13315,17 @@ async function resolveFiles(config) {
 		outside: [...contain.outside]
 	};
 }
+function holdsProject(dir) {
+	return PROJECT_MARKERS.some((name) => fs.existsSync(path.join(dir, name)));
+}
+/** Whether a folder between `root` and `file` (in it) holds a project. */
+function inProjectBelow(root, file) {
+	for (let dir = path.dirname(path.resolve(file)); isInside(root, dir); dir = path.dirname(dir)) {
+		if (path.relative(root, dir) === "") return false;
+		if (holdsProject(dir)) return true;
+	}
+	return false;
+}
 /**
 * The stylesheets zero config reads besides the ones it found: those they `@import` (by a
 * path, or from a workspace package: `@import "@acme/theme"`), then those that set the colors
@@ -13250,11 +13389,54 @@ async function cacheKey(config, files, dependencies, stats = new FileStats(confi
 		stats: await stats.of(all)
 	})).digest("hex");
 }
+/**
+* Where the model is cached: the project's `node_modules/.cache`, else (`temp`) a folder of the
+* user's own in the system temp folder, `onsystem-<uid>`.
+*/
 function cacheFile(root) {
 	const nodeModules = path.join(root, "node_modules");
-	if (fs.existsSync(nodeModules)) return path.join(nodeModules, ".cache", "onsystem", "model.json");
+	if (fs.existsSync(nodeModules)) return {
+		file: path.join(nodeModules, ".cache", "onsystem", "model.json"),
+		temp: false
+	};
 	const id = createHash("sha256").update(root).digest("hex").slice(0, 16);
-	return path.join(os.tmpdir(), "onsystem", `${id}.json`);
+	const user = process.getuid ? `-${process.getuid()}` : "";
+	return {
+		file: path.join(os.tmpdir(), `onsystem${user}`, `${id}.json`),
+		temp: true
+	};
+}
+/**
+* Why the cache folder in the system temp folder cannot be trusted, or undefined when it can: it
+* must be a folder, not a link, that the user owns and no one else can write to. On a multi-user
+* host the temp folder is shared, and a model planted in it would reach the agent. With `create`,
+* it is created (or closed) for the user first. Windows gives each user a temp folder of their own.
+*/
+async function untrustedCacheFolder(folder, create) {
+	if (!process.getuid) return void 0;
+	if (create) await fsp.mkdir(folder, {
+		recursive: true,
+		mode: 448
+	});
+	const stat = await fsp.lstat(folder);
+	if (!stat.isDirectory()) return `${folder} is not a folder`;
+	if (stat.uid !== process.getuid()) return `${folder} belongs to another user`;
+	if (!create && stat.mode & 18) return `other users can write to ${folder}`;
+	if (create && stat.mode & 63) await fsp.chmod(folder, 448);
+}
+/**
+* Writes `text` beside `file`, then renames it into place: a run reading it never sees half. With
+* `own`, only the user can read it (the temp folder's cache); without, it has the default mode, so
+* a cache in `node_modules` built by one user (a Docker build as root) is still read by another.
+*/
+async function writeWhole(file, text, own) {
+	const partial = `${file}.${process.pid}-${randomUUID()}.tmp`;
+	try {
+		await fsp.writeFile(partial, text, own ? { mode: 384 } : {});
+		await fsp.rename(partial, file);
+	} finally {
+		await fsp.rm(partial, { force: true });
+	}
 }
 /**
 * Fingerprint of the files a config tracks (paths, sizes, mtimes), plus the
@@ -13268,10 +13450,10 @@ async function buildModel(config, options = {}) {
 	const started = performance.now();
 	const files = await resolveFiles(config);
 	const useCache = options.cache !== false;
-	const cachePath = cacheFile(config.root);
+	const { file: cachePath, temp } = cacheFile(config.root);
 	let cached;
 	if (useCache && !options.oldProgram) try {
-		cached = JSON.parse(await fsp.readFile(cachePath, "utf8"));
+		if (!(temp && await untrustedCacheFolder(path.dirname(cachePath), false))) cached = JSON.parse(await fsp.readFile(cachePath, "utf8"));
 	} catch {}
 	const known = Array.isArray(cached?.dependencies) ? cached.dependencies : options.oldProgram ? projectFiles(options.oldProgram) : [];
 	const stats = new FileStats(config.root);
@@ -13285,7 +13467,7 @@ async function buildModel(config, options = {}) {
 			dependencies: cached.dependencies
 		};
 	}
-	const extracted = extractComponents({
+	const extracted = extractReadable({
 		root: config.root,
 		files: files.components,
 		tsconfig: config.tsconfig,
@@ -13347,12 +13529,16 @@ async function buildModel(config, options = {}) {
 	]);
 	const key = await cacheKey(config, files, dependencies, stats);
 	if (useCache) try {
-		await fsp.mkdir(path.dirname(cachePath), { recursive: true });
-		await fsp.writeFile(cachePath, JSON.stringify({
+		const folder = path.dirname(cachePath);
+		let untrusted;
+		if (temp) untrusted = await untrustedCacheFolder(folder, true);
+		else await fsp.mkdir(folder, { recursive: true });
+		if (untrusted) logger.warn(`not caching the model: ${untrusted}. Install the project's dependencies, so the cache goes in node_modules, or set TMPDIR to a folder of your own.`);
+		else await writeWhole(cachePath, JSON.stringify({
 			key,
 			dependencies,
 			model
-		}));
+		}), temp);
 	} catch (error) {
 		logger.warn(`could not write cache ${cachePath}: ${error.message}`);
 	}
@@ -13391,19 +13577,29 @@ var DesignSystemHost = class {
 		this.options = options;
 	}
 	get() {
-		this.current ??= this.build(false);
+		this.current ??= this.kept(this.build(false));
 		return this.current;
 	}
 	reload() {
 		const next = this.build(true);
 		const previous = this.current;
-		this.current = next.catch(async (error) => {
+		this.current = this.kept(next.catch(async (error) => {
 			(this.options.logger ?? silentLogger).error(`reload failed: ${error.message}`);
 			if (previous) return previous;
 			throw error;
-		});
+		}));
 		return this.current;
 	}
+	/**
+	* `build`, dropped if it fails with no earlier model to serve instead (a first build that
+	* fails), so the next `get()` builds again.
+	*/
+	kept(build) {
+		build.catch(() => {
+			if (this.current === build) this.current = void 0;
+		});
+		return build;
+	}
 	onChange(listener) {
 		this.listeners.add(listener);
 		return () => this.listeners.delete(listener);
@@ -13534,5 +13730,4 @@ var DesignSystemHost = class {
 		return ds;
 	}
 };
-//#endregion
-export { DEFAULT_TOKENS as $, unrecordedRules as A, isInside as At, statusKinds as B, countBaseline as C, workspacePackageDirs as Ct, pruneBaseline as D, truncate as Dt, onLines as E, plural$1 as Et, loadTokens as F, readProjectConfig as Ft, parseDoc as G, parseDesignMd as H, mergeTokens as I, ConfigError as J, extractComponents as K, toDesignMd as L, writeBaseline as M, relativePath as Mt, RULES as N, toPosix as Nt, readBaseline as O, unique as Ot, TokenIndex as P, defaultProjectConfig as Pt, DEFAULT_TEST_FOLDERS as Q, toDtcg as R, applyBaseline as S, isWorkspaceRoot as St, goneFiles as T, closest as Tt, parseCssTokens as U, parseDtcgTokens as V, attachDocs as W, DEFAULT_SEVERITY as X, DEFAULT_DOCS as Y, DEFAULT_TEST_EXCLUDE as Z, formatDiagnostics as _, PackageFinder as _t, fingerprint as a, excludedBy as at, BASELINE_FILE as b, findDesignSystemPackage as bt, silentLogger as c, loadConfigWith as ct, descriptionOf as d, findVariantDefinitions as dt, FALLBACK_TOKENS as et, searchComponents as f, LIBRARIES as ft, escapeData as g, PACKAGE_FIELD as gt, uncheckedNotice as h, notReadYet as ht, componentFiles as i, defineConfig as it, updateBaseline as j, matchesGlob as jt, rulesRun as k, SCRIPT_FILE$2 as kt, stderrLogger as l, rulesFor as lt, checkSource as m, libraryTitle as mt, DesignSystemHost as n, RULE_IDS as nt, loadDesignSystem as o, hasOwnConfig as ot, applyFixes as p, LIBRARY_IDS as pt, CONFIG_FILES as q, buildModel as r, configJsonSchema as rt, tokenFiles as s, loadConfig as st, DesignSystem as t, LEGACY_CONFIG_FILES as tt, buildSearchIndex as u, formatPx as ut, NAME as v, declaredConfig as vt, findMoves as w, workspacePatterns as wt, LEGACY_BASELINE_FILE as x, isDesignSystemName as xt, VERSION as y, detectProject as yt, TOKEN_CATEGORIES as z };
+export { DEFAULT_TOKENS as $, unrecordedRules as A, relativePath as At, statusKinds as B, countBaseline as C, isWorkspaceRoot as Ct, pruneBaseline as D, isInside as Dt, onLines as E, SCRIPT_FILE$2 as Et, loadTokens as F, truncate as Ft, parseDoc as G, parseDesignMd as H, mergeTokens as I, unique as It, ConfigError as J, extractComponents as K, toDesignMd as L, defaultProjectConfig as Lt, writeBaseline as M, closest as Mt, RULES as N, json as Nt, readBaseline as O, matchesGlob as Ot, TokenIndex as P, plural$1 as Pt, DEFAULT_TEST_FOLDERS as Q, toDtcg as R, readProjectConfig as Rt, applyBaseline as S, isDesignSystemName as St, goneFiles as T, workspacePatterns as Tt, parseCssTokens as U, parseDtcgTokens as V, attachDocs as W, DEFAULT_SEVERITY as X, DEFAULT_DOCS as Y, DEFAULT_TEST_EXCLUDE as Z, formatDiagnostics as _, PACKAGE_FIELD as _t, fingerprint as a, defineConfig as at, BASELINE_FILE as b, detectProject as bt, silentLogger as c, loadConfig as ct, descriptionOf as d, formatPx as dt, FALLBACK_TOKENS as et, searchComponents as f, findVariantDefinitions as ft, escapeData as g, notReadYet as gt, uncheckedNotice as h, libraryTitle as ht, componentFiles as i, configJsonSchema as it, updateBaseline as j, toPosix as jt, rulesRun as k, pathOf as kt, stderrLogger as l, loadConfigWith as lt, checkSource as m, LIBRARY_IDS as mt, DesignSystemHost as n, PROJECT_MARKERS as nt, loadDesignSystem as o, excludedBy as ot, applyFixes as p, LIBRARIES as pt, CONFIG_FILES as q, buildModel as r, RULE_IDS as rt, tokenFiles as s, hasOwnConfig as st, DesignSystem as t, LEGACY_CONFIG_FILES as tt, buildSearchIndex as u, rulesFor as ut, NAME as v, PackageFinder as vt, findMoves as w, workspacePackageDirs as wt, LEGACY_BASELINE_FILE as x, findDesignSystemPackage as xt, VERSION as y, declaredConfig as yt, TOKEN_CATEGORIES as z };