rainbowindex 0.3.0 → 0.4.1

package/dist/{chunk-AZXWJ625.mjs → chunk-53WD6U2X.mjs}

@@ -5,6 +5,7 @@ import {
   RI_IMPORT_SPECIFIER_ALTERNATION,
   SAFE_FONT_FAMILY_RE,
   SHADOW_VAR_REF_RE,
+  analyzeProjectCSS,
   codepointCompare,
   compileCSSFunctions,
   createCompiler,
@@ -18,341 +19,12 @@ import {
   renderCSS,
   scanCSSForTokenUsage,
   withTimeout
-} from "./chunk-IE6N76PW.mjs";
+} from "./chunk-6GTG5SZJ.mjs";
 import {
   checkPaletteContrast,
   generateAllColorVariables,
   generateThemeOverrides
-} from "./chunk-SOMDX7V6.mjs";
-
-// src/scanner/glob-utils.ts
-import { isAbsolute, win32 } from "path";
-function validateGlobPattern(pattern) {
-  if (!pattern?.trim()) {
-    return "Glob pattern is empty.";
-  }
-  if (pattern.includes("\0")) {
-    return "Glob pattern contains a null byte, which is invalid in file paths.";
-  }
-  if (isAbsolute(pattern) || win32.isAbsolute(pattern)) {
-    return `Glob pattern "${pattern}" must be relative, not absolute.`;
-  }
-  const segments = pattern.split(/[\\/]+/);
-  for (const seg of segments) {
-    if (seg === "..") {
-      return `Glob pattern "${pattern}" must not traverse parent directories (".."). Restructure your project layout so source files are within the project root, or use @source with a pattern rooted at the project directory.`;
-    }
-  }
-  return null;
-}
-
-// src/scanner/sources.ts
-import { readFile, stat } from "fs/promises";
-import { resolve as resolve2 } from "path";
-import { glob } from "tinyglobby";
-
-// src/scanner/package-discovery.ts
-import { existsSync, readFileSync, realpathSync, statSync } from "fs";
-import { dirname, join, posix, resolve } from "path";
-var EMPTY = Object.freeze({ sources: [], warnings: [] });
-var discoveryCache = /* @__PURE__ */ new Map();
-function discoverPackageSafelistSources(cwd) {
-  const cwdAbs = resolve(cwd);
-  let mtimeMs;
-  try {
-    mtimeMs = statSync(join(cwdAbs, "package.json")).mtimeMs;
-  } catch {
-    return EMPTY;
-  }
-  const cached = discoveryCache.get(cwdAbs);
-  if (cached && cached.mtimeMs === mtimeMs) return cached.result;
-  const result = runDiscovery(cwdAbs);
-  discoveryCache.set(cwdAbs, { mtimeMs, result });
-  return result;
-}
-function runDiscovery(cwdAbs) {
-  let consumer;
-  try {
-    consumer = readPackageJson(join(cwdAbs, "package.json"));
-  } catch {
-    return EMPTY;
-  }
-  const deps = [
-    ...Object.keys(consumer.dependencies ?? {}),
-    ...Object.keys(consumer.peerDependencies ?? {})
-  ];
-  if (deps.length === 0) return EMPTY;
-  const sources = [];
-  const warnings = [];
-  for (const depName of deps) {
-    const depPkgPath = findDepPackageJson(cwdAbs, depName);
-    if (!depPkgPath) {
-      continue;
-    }
-    let depPkg;
-    try {
-      depPkg = readPackageJson(depPkgPath);
-    } catch (err) {
-      warnings.push(
-        `[RI-1410] Could not read ${depName}/package.json during safelist discovery: ${errMessage(err)}`
-      );
-      continue;
-    }
-    const patterns = depPkg.rainbowindex?.safelistSources;
-    if (patterns == null) continue;
-    if (!Array.isArray(patterns)) {
-      warnings.push(
-        `[RI-1410] Invalid rainbowindex.safelistSources in ${depName} \u2014 expected an array of glob strings.`
-      );
-      continue;
-    }
-    if (patterns.length === 0) continue;
-    const depRoot = realpathOrFallback(dirname(depPkgPath)).replace(/\\/g, "/");
-    for (const pattern of patterns) {
-      if (typeof pattern !== "string" || !pattern) {
-        warnings.push(
-          `[RI-1410] Invalid rainbowindex.safelistSources entry in ${depName} \u2014 expected a non-empty glob string.`
-        );
-        continue;
-      }
-      if (validateGlobPattern(pattern) !== null) {
-        warnings.push(
-          `[RI-1410] Invalid rainbowindex.safelistSources entry "${pattern}" in ${depName} \u2014 patterns must be relative to the package root and must not traverse parent directories.`
-        );
-        continue;
-      }
-      const absolute = posix.normalize(`${depRoot}/${pattern.replace(/^\.\//, "")}`);
-      if (absolute !== depRoot && !absolute.startsWith(`${depRoot}/`)) {
-        warnings.push(
-          `[RI-1410] Invalid rainbowindex.safelistSources entry "${pattern}" in ${depName} \u2014 resolved outside the package root.`
-        );
-        continue;
-      }
-      sources.push({ pattern: absolute, negated: false, inline: false, absolute: true });
-    }
-  }
-  return { sources, warnings };
-}
-function readPackageJson(path) {
-  const raw = readFileSync(path, "utf8");
-  return JSON.parse(raw);
-}
-function findDepPackageJson(cwd, depName) {
-  let dir = cwd;
-  while (true) {
-    const candidate = join(dir, "node_modules", depName, "package.json");
-    if (existsSync(candidate)) return candidate;
-    const parent = dirname(dir);
-    if (parent === dir) return null;
-    dir = parent;
-  }
-}
-function realpathOrFallback(path) {
-  try {
-    return realpathSync(path);
-  } catch {
-    return path;
-  }
-}
-function errMessage(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
-// src/scanner/sources.ts
-var DEFAULT_PATTERNS = Object.freeze([
-  "index.html",
-  "src/**/*.{html,js,jsx,ts,tsx,mdx,vue,svelte}"
-]);
-var DEFAULT_EXCLUDES = Object.freeze([
-  "node_modules/**",
-  "dist/**",
-  "build/**",
-  "coverage/**",
-  "public/**",
-  "**/*.config.*",
-  "**/*.d.ts"
-]);
-var MAX_FILE_SIZE = 1048576;
-var MAX_INLINE_SOURCE_SIZE = 102400;
-var GLOB_TIMEOUT_MS = 3e4;
-var GLOB_TIMEOUT_MESSAGE = `glob() timed out after ${GLOB_TIMEOUT_MS / 1e3}s \u2014 check for network filesystem issues or overly broad @source patterns`;
-function collectPatterns(sources) {
-  const includePatterns = [];
-  const nodeModulesIncludePatterns = [];
-  const excludePatterns = [...DEFAULT_EXCLUDES];
-  const hasUserPositiveGlobs = sources.some((s) => !s.inline && !s.negated && !s.absolute);
-  if (!hasUserPositiveGlobs) {
-    includePatterns.push(...DEFAULT_PATTERNS);
-  }
-  const warnings = [];
-  for (const src of sources) {
-    if (src.inline) continue;
-    if (!src.absolute) {
-      const err = validateGlobPattern(src.pattern);
-      if (err) {
-        warnings.push(`[RI-1404] @source pattern rejected: ${err}`);
-        continue;
-      }
-    }
-    if (src.negated) {
-      excludePatterns.push(src.pattern);
-    } else if (src.absolute || src.pattern.replace(/^\.\//, "").startsWith("node_modules/")) {
-      nodeModulesIncludePatterns.push(src.pattern);
-    } else {
-      includePatterns.push(src.pattern);
-    }
-  }
-  return {
-    includePatterns,
-    nodeModulesIncludePatterns,
-    excludePatterns,
-    warnings,
-    hasUserPositiveGlobs
-  };
-}
-async function resolveSourceFilesAsync(sources, cwd, hasInlineClasses = false) {
-  const {
-    includePatterns,
-    nodeModulesIncludePatterns,
-    excludePatterns,
-    warnings,
-    hasUserPositiveGlobs
-  } = collectPatterns(sources);
-  const allIncludes = [...includePatterns, ...nodeModulesIncludePatterns];
-  if (allIncludes.length === 0) return { files: [], warnings };
-  try {
-    const globPasses = [];
-    if (includePatterns.length > 0) {
-      globPasses.push(
-        withTimeout(
-          glob(includePatterns, { cwd, ignore: excludePatterns }),
-          GLOB_TIMEOUT_MS,
-          GLOB_TIMEOUT_MESSAGE
-        )
-      );
-    }
-    if (nodeModulesIncludePatterns.length > 0) {
-      const relaxedExcludes = excludePatterns.filter((p) => p !== "node_modules/**");
-      globPasses.push(
-        withTimeout(
-          glob(nodeModulesIncludePatterns, { cwd, ignore: relaxedExcludes }),
-          GLOB_TIMEOUT_MS,
-          GLOB_TIMEOUT_MESSAGE
-        )
-      );
-    }
-    const matched = (await Promise.all(globPasses)).flat();
-    const files = [...new Set(matched.map((f) => resolve2(cwd, f)))].sort(codepointCompare);
-    if (files.length === 0 && !(hasInlineClasses && !hasUserPositiveGlobs)) {
-      warnings.push(
-        `[RI-1401] No source files found matching ${allIncludes.map((p) => `"${p}"`).join(", ")} \u2014 check @source paths or project structure.`
-      );
-    }
-    return { files, warnings };
-  } catch (err) {
-    warnings.push(
-      `[RI-1402] Invalid glob pattern \u2014 skipping. Check @source syntax. (${err instanceof Error ? err.message : String(err)})`
-    );
-    return { files: [], warnings };
-  }
-}
-function collectInlineClasses(sources) {
-  const classes = /* @__PURE__ */ new Set();
-  const warnings = [];
-  for (const src of sources) {
-    if (!src.inline) continue;
-    const items = src.classes ?? [];
-    let contentLength = 0;
-    for (const cls of items) contentLength += cls.length;
-    if (contentLength > MAX_INLINE_SOURCE_SIZE) {
-      warnings.push(
-        `[RI-1406] Inline @source content exceeds ${MAX_INLINE_SOURCE_SIZE} byte limit (${contentLength} bytes) \u2014 skipping.`
-      );
-      continue;
-    }
-    for (const cls of items) {
-      if (cls) classes.add(cls);
-    }
-  }
-  return { classes, warnings };
-}
-var FILE_IO_TIMEOUT_MS = 1e4;
-async function scanOneFile(file) {
-  const warnings = [];
-  try {
-    const fileSize = await withTimeout(
-      stat(file).then((s) => s.size),
-      FILE_IO_TIMEOUT_MS,
-      "stat() timed out"
-    );
-    if (fileSize > MAX_FILE_SIZE) {
-      return {
-        classes: null,
-        warnings,
-        failure: `[RI-1405] Skipping source file "${file}" (${fileSize} bytes) \u2014 exceeds ${MAX_FILE_SIZE} byte limit.`
-      };
-    }
-    const content = await withTimeout(
-      readFile(file, "utf-8"),
-      FILE_IO_TIMEOUT_MS,
-      "readFile() timed out"
-    );
-    return {
-      classes: extractClassesFromSource({ path: file, content }, warnings),
-      warnings,
-      failure: null
-    };
-  } catch (err) {
-    return {
-      classes: null,
-      warnings,
-      failure: `[RI-1403] Could not read source file "${file}" \u2014 skipping. (${err instanceof Error ? err.message : String(err)})`
-    };
-  }
-}
-async function scanSourceFilesAsync(sources, cwd) {
-  const { classes: allClasses, warnings: inlineWarnings } = collectInlineClasses(sources);
-  const allWarnings = [...inlineWarnings];
-  const { files, warnings: resolveWarnings } = await resolveSourceFilesAsync(
-    sources,
-    cwd,
-    allClasses.size > 0
-  );
-  allWarnings.push(...resolveWarnings);
-  const CONCURRENCY_LIMIT = 32;
-  const results = new Array(files.length);
-  let nextIndex = 0;
-  const worker = async () => {
-    while (nextIndex < files.length) {
-      const index = nextIndex++;
-      results[index] = await scanOneFile(files[index]);
-    }
-  };
-  await Promise.all(Array.from({ length: Math.min(CONCURRENCY_LIMIT, files.length) }, worker));
-  const seen = new Set(allWarnings);
-  for (const result of results) {
-    if (result.failure) {
-      allWarnings.push(result.failure);
-      seen.add(result.failure);
-      continue;
-    }
-    if (result.classes) {
-      for (const cls of result.classes) {
-        allClasses.add(cls);
-      }
-    }
-    pushWarningsDeduped(allWarnings, result.warnings, seen);
-  }
-  return { classes: allClasses, warnings: allWarnings };
-}
-async function collectProjectClasses(themeSources, surfaceSources, cwd, warnings, warningSeen) {
-  const discovered = discoverPackageSafelistSources(cwd);
-  pushWarningsDeduped(warnings, discovered.warnings, warningSeen);
-  const allSources = [...themeSources, ...surfaceSources, ...discovered.sources];
-  const scanResult = await scanSourceFilesAsync(allSources, cwd);
-  pushWarningsDeduped(warnings, scanResult.warnings, warningSeen);
-  return scanResult.classes;
-}
+} from "./chunk-KRZL4IDK.mjs";
 
 // src/integrations/font-providers/google/state.ts
 var googleFontInternals = {
@@ -366,13 +38,13 @@ var googleFontInternals = {
 // src/integrations/font-providers/google/cache.ts
 import { createHash, randomUUID } from "crypto";
 import { open as fsOpen, writeFile, rename, unlink, mkdir } from "fs/promises";
-import { resolve as resolve3, dirname as dirname2, join as join2, isAbsolute as isAbsolute2 } from "path";
+import { resolve, dirname, join, isAbsolute } from "path";
 import { isAbsolute as win32IsAbsolute } from "path/win32";
 var MAX_FONT_CACHE_TTL_SECONDS = 30 * 24 * 60 * 60;
 function getFontCacheDir() {
   if (googleFontInternals.validatedCacheDir !== null) return googleFontInternals.validatedCacheDir;
   const raw = process.env.RI_CACHE_DIR || "node_modules/.cache/rainbowindex";
-  if (isAbsolute2(raw) || win32IsAbsolute(raw)) {
+  if (isAbsolute(raw) || win32IsAbsolute(raw)) {
     throw new Error(
       `[RI-1208] RI_CACHE_DIR must be a relative path, got absolute path: "${raw}". Use a relative path like "node_modules/.cache/rainbowindex".`
     );
@@ -392,7 +64,7 @@ function getResolvedCachePath() {
   if (googleFontInternals.resolvedCachePath !== null && googleFontInternals.validatedCacheDir !== null) {
     return googleFontInternals.resolvedCachePath;
   }
-  googleFontInternals.resolvedCachePath = resolve3(process.cwd(), getFontCacheFile());
+  googleFontInternals.resolvedCachePath = resolve(process.cwd(), getFontCacheFile());
   return googleFontInternals.resolvedCachePath;
 }
 function getFontCacheTTL() {
@@ -475,12 +147,12 @@ async function loadFontCache(ignoreExpiry = false) {
 async function saveFontCache() {
   try {
     const cachePath = getResolvedCachePath();
-    await mkdir(dirname2(cachePath), { recursive: true });
+    await mkdir(dirname(cachePath), { recursive: true });
     const entries = Array.from(googleFontInternals.googleFontState.cache.values());
     const entriesJson = JSON.stringify(entries);
     const checksum = createHash("sha256").update(entriesJson).digest("hex");
     const payload = `{"checksum":${JSON.stringify(checksum)},"entries":${entriesJson}}`;
-    const tmpPath = join2(dirname2(cachePath), `.google-${process.pid}-${randomUUID()}.tmp`);
+    const tmpPath = join(dirname(cachePath), `.google-${process.pid}-${randomUUID()}.tmp`);
     try {
       await writeFile(tmpPath, payload);
       await rename(tmpPath, cachePath);
@@ -583,272 +255,763 @@ async function fetchGoogleFontMetadata() {
       clearTimeout(timeout);
     }
   }
-  throw new Error("[RI-1205] Exhausted Google Fonts metadata fetch retries.");
+  throw new Error("[RI-1205] Exhausted Google Fonts metadata fetch retries.");
+}
+
+// src/integrations/font-providers/google/index.ts
+var FETCH_RETRY_COOLDOWN_MS = 3e4;
+async function fetchGoogleFontList() {
+  if (googleFontInternals.googleFontState.fetched) return;
+  if (googleFontInternals.googleFontListPromise) return googleFontInternals.googleFontListPromise;
+  if (googleFontInternals.lastFetchFailureMs > 0 && Date.now() - googleFontInternals.lastFetchFailureMs < FETCH_RETRY_COOLDOWN_MS) {
+    return;
+  }
+  const localPromise = (async () => {
+    try {
+      const isOffline = process.env.RI_OFFLINE === "1" || process.env.RI_OFFLINE === "true";
+      if (isOffline) {
+        if (await loadFontCache(true)) return;
+        console.warn(
+          `[RI-1206] RI_OFFLINE is set but no local font cache found at ${getFontCacheFile()}. Run once with network access to populate it. Non-variable fonts will default to weight "100 900" and may produce broken Google Fonts URLs \u2014 set an explicit weight in the @font directive to avoid this.`
+        );
+        return;
+      }
+      if (await loadFontCache()) return;
+      const fetchDisabled = process.env.RI_FETCH_FONTS === "0" || process.env.RI_FETCH_FONTS === "false";
+      if (fetchDisabled) {
+        if (await loadFontCache(true)) return;
+        return;
+      }
+      if (typeof globalThis.fetch !== "function") {
+        console.warn(
+          "[RI-1212] Global fetch() is not available. Google Fonts metadata requires Node.js >= 18. Skipping font fetch."
+        );
+        return;
+      }
+      if (isRIDebug()) {
+        console.warn("[RI-DEBUG] Fetching Google Fonts metadata...");
+      }
+      try {
+        const newCache = await fetchGoogleFontMetadata();
+        googleFontInternals.googleFontState = { cache: newCache, fetched: true };
+        await saveFontCache();
+        return;
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.startsWith("[RI-1207]")) {
+          console.warn(`${message} Skipping.`);
+          if (await loadFontCache(true)) return;
+          return;
+        }
+        if (await loadFontCache(true)) return;
+        console.warn(
+          `[RI-1205] Could not fetch Google Fonts metadata after 3 attempts (${message}). Fonts without explicit weight/style will default to "100 900" + "normal italic" \u2014 non-variable fonts may produce broken Google Fonts URLs. Run with network access to populate the metadata cache, or set an explicit weight/style in the @font directive.`
+        );
+      }
+    } finally {
+      if (!googleFontInternals.googleFontState.fetched) {
+        googleFontInternals.lastFetchFailureMs = Date.now();
+      }
+      googleFontInternals.googleFontListPromise = null;
+    }
+  })();
+  googleFontInternals.googleFontListPromise = localPromise;
+  return localPromise;
+}
+var refreshMemo = /* @__PURE__ */ new WeakMap();
+function refreshFontWeightDefaults(fonts) {
+  const state = googleFontInternals.googleFontState;
+  const memo = refreshMemo.get(fonts);
+  if (memo && memo.state === state) return memo.result;
+  let anyChanged = false;
+  const refreshed = fonts.map((slot) => {
+    if (slot.kind !== "google") return slot;
+    const meta = googleFontInternals.googleFontState.cache.get(slot.family);
+    if (!meta) return slot;
+    let changed = false;
+    const faces = slot.faces.map((f) => {
+      let next = f;
+      if (!f._weightExplicit) {
+        const wghtAxis = meta.axes?.find((a) => a.tag === "wght");
+        const axisWeight = wghtAxis && wghtAxis.start !== wghtAxis.end ? `${wghtAxis.start} ${wghtAxis.end}` : "400";
+        if (next.weight !== axisWeight) next = { ...next, weight: axisWeight };
+      }
+      if (!f._styleExplicit) {
+        const italAxis = meta.axes?.find((a) => a.tag === "ital");
+        const axisStyle = italAxis ? "normal italic" : "normal";
+        if (next.style !== axisStyle) next = { ...next, style: axisStyle };
+      }
+      if (next !== f) changed = true;
+      return next;
+    });
+    if (changed) anyChanged = true;
+    return changed ? { ...slot, faces } : slot;
+  });
+  const result = anyChanged ? refreshed : fonts;
+  refreshMemo.set(fonts, { state, result });
+  return result;
+}
+var FONT_FETCH_TIMEOUT_MS = 1e4;
+async function resolveGoogleFonts(fonts) {
+  if (!fonts.some((slot) => slot.kind === "google")) return fonts;
+  try {
+    await withTimeout(
+      fetchGoogleFontList(),
+      FONT_FETCH_TIMEOUT_MS,
+      "[RI-1213] Google Fonts metadata fetch timed out"
+    );
+  } catch {
+    console.warn(
+      `[RI-1213] Could not fetch Google Fonts metadata within ${FONT_FETCH_TIMEOUT_MS / 1e3}s \u2014 proceeding with default font weights. Variable-weight fonts may use "400" instead of their full range.`
+    );
+  }
+  return refreshFontWeightDefaults(fonts);
+}
+
+// src/integrations/font-providers/metrics-data.ts
+var FONT_METRICS_TABLE = {
+  abel: [2006, -604, 0, 2048, 783, "sans-serif"],
+  alegreya: [1016, -345, 0, 1e3, 410, "serif"],
+  "anonymous pro": [1675, -373, 0, 2048, 1118, "monospace"],
+  archivo: [878, -210, 0, 1e3, 440, "sans-serif"],
+  arial: [1854, -434, 67, 2048, 913, "sans-serif"],
+  asap: [934, -212, 0, 1e3, 442, "sans-serif"],
+  barlow: [1e3, -200, 0, 1e3, 431, "sans-serif"],
+  bitter: [935, -265, 0, 1e3, 465, "serif"],
+  "bricolage grotesque": [930, -270, 0, 1e3, 470, "sans-serif"],
+  cabin: [1930, -500, 0, 2e3, 844, "sans-serif"],
+  catamaran: [1100, -540, 0, 1e3, 411, "sans-serif"],
+  chivo: [940, -250, 0, 1e3, 478, "sans-serif"],
+  "cormorant garamond": [924, -287, 0, 1e3, 394, "serif"],
+  "courier new": [1705, -615, 0, 2048, 1229, "monospace"],
+  "crimson pro": [918, -220, 0, 1024, 410, "serif"],
+  "crimson text": [972, -359, 0, 1024, 405, "serif"],
+  "dm sans": [992, -310, 0, 1e3, 466, "sans-serif"],
+  "dm serif display": [1036, -335, 0, 1e3, 446, "serif"],
+  dosis: [1027, -237, 0, 1e3, 377, "sans-serif"],
+  "eb garamond": [1007, -298, 0, 1e3, 385, "serif"],
+  epilogue: [1580, -470, 0, 2e3, 990, "sans-serif"],
+  "exo 2": [999, -201, 0, 1e3, 455, "sans-serif"],
+  figtree: [950, -250, 0, 1e3, 449, "sans-serif"],
+  "fira code": [1980, -644, 0, 2e3, 1200, "monospace"],
+  "fira sans": [935, -265, 0, 1e3, 458, "sans-serif"],
+  fraunces: [1956, -510, 0, 2e3, 938, "serif"],
+  gabarito: [940, -260, 0, 1e3, 442, "display"],
+  "geist mono": [1005, -295, 0, 1e3, 600, "monospace"],
+  geist: [1005, -295, 0, 1e3, 467, "sans-serif"],
+  georgia: [1878, -449, 0, 2048, 913, "serif"],
+  heebo: [2146, -862, 0, 2048, 912, "sans-serif"],
+  "helvetica neue": [952, -213, 28, 1e3, 450, "sans-serif"],
+  helvetica: [1577, -471, 0, 2048, 913, "sans-serif"],
+  hind: [1055, -546, 0, 1e3, 429, "sans-serif"],
+  "ibm plex mono": [1025, -275, 0, 1e3, 600, "monospace"],
+  "ibm plex sans": [1025, -275, 0, 1e3, 451, "sans-serif"],
+  "ibm plex serif": [1025, -275, 0, 1e3, 473, "serif"],
+  inconsolata: [859, -190, 0, 1e3, 500, "monospace"],
+  "instrument sans": [970, -250, 0, 1e3, 458, "sans-serif"],
+  "instrument serif": [990, -310, 0, 1e3, 341, "serif"],
+  inter: [1984, -494, 0, 2048, 978, "sans-serif"],
+  "jetbrains mono": [1020, -300, 0, 1e3, 600, "monospace"],
+  "josefin sans": [750, -250, 0, 1e3, 456, "sans-serif"],
+  kanit: [1100, -395, 0, 1e3, 452, "sans-serif"],
+  karla: [1834, -504, 0, 2e3, 913, "sans-serif"],
+  lato: [1974, -426, 0, 2e3, 871, "sans-serif"],
+  lexend: [1e3, -250, 0, 1e3, 490, "sans-serif"],
+  "libre baskerville": [970, -270, 0, 1e3, 517, "serif"],
+  "libre franklin": [966, -246, 0, 1e3, 465, "sans-serif"],
+  lora: [1006, -274, 0, 1e3, 468, "serif"],
+  manrope: [2132, -600, 0, 2e3, 920, "sans-serif"],
+  "maven pro": [965, -210, 0, 1e3, 462, "sans-serif"],
+  merriweather: [1968, -546, 0, 2e3, 970, "serif"],
+  montserrat: [968, -251, 0, 1e3, 503, "sans-serif"],
+  mulish: [1005, -250, 0, 1e3, 464, "sans-serif"],
+  newsreader: [1470, -530, 0, 2e3, 857, "serif"],
+  "noto sans": [1069, -293, 0, 1e3, 474, "sans-serif"],
+  "noto serif": [1069, -293, 0, 1e3, 481, "serif"],
+  "nunito sans": [1011, -353, 0, 1e3, 452, "sans-serif"],
+  nunito: [1011, -353, 0, 1e3, 452, "sans-serif"],
+  onest: [970, -305, 0, 1e3, 469, "sans-serif"],
+  "open sans": [2189, -600, 0, 2048, 960, "sans-serif"],
+  oswald: [1193, -289, 0, 1e3, 363, "sans-serif"],
+  outfit: [1e3, -260, 0, 1e3, 445, "sans-serif"],
+  overpass: [1766, -766, 0, 2e3, 898, "sans-serif"],
+  oxygen: [2103, -483, 0, 2048, 923, "sans-serif"],
+  "playfair display": [1082, -251, 0, 1e3, 452, "serif"],
+  "plus jakarta sans": [1038, -222, 0, 1e3, 468, "sans-serif"],
+  poppins: [1050, -350, 100, 1e3, 500, "sans-serif"],
+  "pt sans": [1018, -276, 0, 1e3, 431, "sans-serif"],
+  "pt serif": [1039, -286, 0, 1e3, 448, "serif"],
+  "public sans": [1900, -450, 0, 2e3, 935, "sans-serif"],
+  quicksand: [1e3, -250, 0, 1e3, 465, "sans-serif"],
+  raleway: [940, -234, 0, 1e3, 463, "sans-serif"],
+  "red hat display": [1018, -305, 0, 1e3, 442, "sans-serif"],
+  "red hat text": [1018, -305, 0, 1e3, 447, "sans-serif"],
+  "roboto condensed": [1900, -500, 0, 2048, 811, "sans-serif"],
+  "roboto flex": [1900, -500, 0, 2048, 908, "sans-serif"],
+  "roboto mono": [2146, -555, 0, 2048, 1229, "monospace"],
+  "roboto slab": [2146, -555, 0, 2048, 972, "serif"],
+  roboto: [1900, -500, 0, 2048, 911, "sans-serif"],
+  rubik: [935, -250, 0, 1e3, 468, "sans-serif"],
+  "schibsted grotesk": [2e3, -528, 0, 2048, 954, "sans-serif"],
+  "segoe ui": [2210, -514, 0, 2048, 908, "sans-serif"],
+  sora: [970, -290, 0, 1e3, 507, "sans-serif"],
+  "source code pro": [984, -273, 0, 1e3, 600, "monospace"],
+  "source sans 3": [1024, -400, 0, 1e3, 418, "sans-serif"],
+  "source serif 4": [1036, -335, 0, 1e3, 479, "serif"],
+  "space grotesk": [984, -292, 0, 1e3, 489, "sans-serif"],
+  "space mono": [1120, -361, 0, 1e3, 612, "monospace"],
+  spectral: [1059, -463, 0, 1e3, 446, "serif"],
+  tahoma: [2049, -423, 0, 2048, 917, "sans-serif"],
+  "times new roman": [1825, -443, 87, 2048, 832, "serif"],
+  "titillium web": [1133, -388, 0, 1e3, 421, "sans-serif"],
+  "trebuchet ms": [1923, -455, 0, 2048, 934, "sans-serif"],
+  "ubuntu mono": [830, -170, 0, 1e3, 500, "monospace"],
+  ubuntu: [932, -189, 28, 1e3, 455, "sans-serif"],
+  urbanist: [1900, -500, 0, 2e3, 883, "sans-serif"],
+  "varela round": [918, -286, 0, 1e3, 478, "sans-serif"],
+  verdana: [2059, -430, 0, 2048, 1049, "sans-serif"],
+  "victor mono": [1100, -250, 0, 1e3, 600, "monospace"],
+  vollkorn: [952, -441, 0, 1e3, 438, "serif"],
+  "work sans": [930, -243, 0, 1e3, 499, "sans-serif"],
+  "zilla slab": [944, -256, 0, 1e3, 434, "serif"]
+};
+
+// src/integrations/font-providers/metrics.ts
+var CATEGORY_FALLBACK = {
+  "sans-serif": "Arial",
+  serif: "Times New Roman",
+  monospace: "Courier New"
+};
+function lookupFontMetrics(family) {
+  return FONT_METRICS_TABLE[family.trim().toLowerCase()];
+}
+var round4 = (n) => Math.round(n * 1e4) / 1e4;
+function computeFallbackMetrics(fallbackName, font, fallbackFont) {
+  const [ascent, descent, lineGap, unitsPerEm, xWidthAvg] = font;
+  const [, , , fbUnitsPerEm, fbXWidthAvg] = fallbackFont;
+  const sizeAdjust = xWidthAvg / unitsPerEm / (fbXWidthAvg / fbUnitsPerEm);
+  return {
+    fallback: fallbackName,
+    sizeAdjust: round4(sizeAdjust * 100),
+    ascent: round4(ascent / unitsPerEm / sizeAdjust * 100),
+    descent: round4(Math.abs(descent) / unitsPerEm / sizeAdjust * 100),
+    lineGap: round4(lineGap / unitsPerEm / sizeAdjust * 100)
+  };
+}
+function resolveAutoMetrics(family, fallbackStack, explicitFallback) {
+  const font = lookupFontMetrics(family);
+  if (!font) return null;
+  const fallbackName = explicitFallback ?? fallbackStack.find((f) => lookupFontMetrics(f)) ?? CATEGORY_FALLBACK[font[5]] ?? "Arial";
+  const fallbackFont = lookupFontMetrics(fallbackName);
+  if (!fallbackFont) return null;
+  return computeFallbackMetrics(fallbackName, font, fallbackFont);
+}
+
+// src/integrations/font-providers/index.ts
+var SYSTEM_STACKS = Object.freeze({
+  sans: 'ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"',
+  serif: 'ui-serif, Georgia, Cambria, "Times New Roman", Times, serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"',
+  mono: 'ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"'
+});
+function getFallbackStack(slot) {
+  if (!SYSTEM_STACKS[slot] && isRIDebug()) {
+    console.warn(`[RI-DEBUG] Unknown font slot "${slot}" \u2014 falling back to sans stack.`);
+  }
+  return SYSTEM_STACKS[slot] || SYSTEM_STACKS.sans;
+}
+function googleFontsUrl(family, face) {
+  const encodedFamily = encodeURIComponent(family).replace(/%20/g, "+");
+  let axisParam;
+  if (face.weight.includes(",")) {
+    const weights = face.weight.split(",").map((w) => w.trim());
+    if (face.style.includes("italic")) {
+      const tuples = weights.flatMap((w) => [`0,${w}`, `1,${w}`]);
+      axisParam = `ital,wght@${tuples.join(";")}`;
+    } else {
+      axisParam = `wght@${weights.join(";")}`;
+    }
+  } else if (face.weight.includes(" ")) {
+    const range = face.weight.replace(" ", "..");
+    axisParam = face.style.includes("italic") ? `ital,wght@0,${range};1,${range}` : `wght@${range}`;
+  } else {
+    const w = face.weight || "400";
+    axisParam = face.style.includes("italic") ? `ital,wght@0,${w};1,${w}` : `wght@${w}`;
+  }
+  const display = face.display || "swap";
+  return `https://fonts.googleapis.com/css2?family=${encodedFamily}:${axisParam}&display=${display}`;
+}
+function escapeFontFamily(name) {
+  return name.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\0/g, "\\0").replace(/\n/g, "\\a ").replace(/\r/g, "\\d ");
+}
+function generateFallbackFontFace(family, metrics) {
+  const safeFamily = escapeFontFamily(family);
+  return `@font-face {
+  font-family: "${safeFamily} Fallback";
+  src: local("${escapeFontFamily(metrics.fallback)}");
+  size-adjust: ${metrics.sizeAdjust}%;
+  ascent-override: ${metrics.ascent}%;
+  descent-override: ${metrics.descent}%;
+  line-gap-override: ${metrics.lineGap}%;
+}`;
+}
+var FONT_FORMAT_MIME = {
+  woff2: "font/woff2",
+  woff: "font/woff",
+  truetype: "font/ttf",
+  opentype: "font/otf"
+};
+function inferFontFormat(path) {
+  if (path.endsWith(".woff2")) return "woff2";
+  if (path.endsWith(".woff")) return "woff";
+  if (path.endsWith(".ttf")) return "truetype";
+  if (path.endsWith(".otf")) return "opentype";
+  return "woff2";
+}
+function generateWebFontFace(family, face) {
+  if (face.provider === "system" || !face.provider) return null;
+  if (face.provider === "google") {
+    return { type: "import", css: `@import url("${googleFontsUrl(family, face)}");` };
+  }
+  const safeProvider = escapeFontFamily(face.provider);
+  const format = inferFontFormat(face.provider);
+  const src = `url("${safeProvider}") format("${format}")`;
+  const declarations = [`  font-family: "${escapeFontFamily(family)}";`, `  src: ${src};`];
+  if (face.weight) declarations.push(`  font-weight: ${face.weight};`);
+  if (face.style && face.style !== "normal") declarations.push(`  font-style: ${face.style};`);
+  if (face.display) declarations.push(`  font-display: ${face.display};`);
+  if (face.unicodeRange) declarations.push(`  unicode-range: ${face.unicodeRange};`);
+  return { type: "font-face", css: `@font-face {
+${declarations.join("\n")}
+}` };
+}
+function normalizeLocalStyle(style, family, warnings) {
+  if (style.includes(" ") && !style.startsWith("oblique")) {
+    const first = style.split(/\s+/)[0];
+    warnings.push(
+      `[RI-1203] Local font "${family}" has a compound font-style "${style}" \u2014 a single @font-face takes one style. Split upright and italic into separate @face blocks (or use the italic: shorthand). Using "${first}".`
+    );
+    return first;
+  }
+  return style;
+}
+function resolveSlotMetrics(slot, warnings) {
+  const cfg = slot.metrics;
+  if (cfg === null) return null;
+  if (cfg?.sizeAdjust !== void 0) {
+    return {
+      fallback: cfg.fallback || slot.fallback[0] || "Arial",
+      sizeAdjust: cfg.sizeAdjust,
+      ascent: cfg.ascent,
+      descent: cfg.descent,
+      lineGap: cfg.lineGap
+    };
+  }
+  const resolved = resolveAutoMetrics(slot.family, slot.fallback, cfg?.fallback);
+  if (!resolved && cfg?.fallback) {
+    const missing = lookupFontMetrics(slot.family) ? cfg.fallback : slot.family;
+    warnings.push(
+      `[RI-1220] @font slot "${slot.slot}" requests metrics matching against "${cfg.fallback}", but "${missing}" is not in the built-in metrics table \u2014 no fallback @font-face was generated. Provide the four percentages explicitly (metrics: "${cfg.fallback}" <size-adjust> <ascent> <descent> <line-gap>) or use \`metrics: none\`.`
+    );
+  }
+  return resolved;
+}
+function generateFontCSS(slot) {
+  const imports = [];
+  const fontFaces = [];
+  const variables = [];
+  const warnings = [];
+  const pushFeatureVars = () => {
+    if (slot.features) variables.push(`--font-${slot.slot}--features: ${slot.features};`);
+    if (slot.variation) variables.push(`--font-${slot.slot}--variations: ${slot.variation};`);
+  };
+  if (slot.kind === "system") {
+    variables.push(`--font-${slot.slot}: ${getFallbackStack(slot.slot)};`);
+    return { imports, fontFaces, variables, warnings };
+  }
+  if (slot.kind === "manual") {
+    const stack = [`"${escapeFontFamily(slot.family)}"`, ...slot.fallback].join(", ");
+    variables.push(`--font-${slot.slot}: ${stack};`);
+    pushFeatureVars();
+    return { imports, fontFaces, variables, warnings };
+  }
+  const metrics = resolveSlotMetrics(slot, warnings);
+  if (metrics) fontFaces.push(generateFallbackFontFace(slot.family, metrics));
+  for (const face of slot.faces) {
+    if (face.provider !== "google" && !face.provider.startsWith("/") && !face.provider.startsWith("http") && !face.provider.startsWith(".")) {
+      warnings.push(
+        `[RI-1201] Unknown font provider "${face.provider}" for "${slot.family}" \u2014 supported: google, or a file path/URL.`
+      );
+      continue;
+    }
+    const emitFace = face.provider === "google" ? face : { ...face, style: normalizeLocalStyle(face.style, slot.family, warnings) };
+    const webFont = generateWebFontFace(slot.family, emitFace);
+    if (!webFont) continue;
+    if (webFont.type === "import") imports.push(webFont.css);
+    else fontFaces.push(webFont.css);
+  }
+  const fallbackStack = slot.fallback.length > 0 ? slot.fallback.join(", ") : getFallbackStack(slot.slot);
+  const safeFamily = escapeFontFamily(slot.family);
+  const stackParts = [`"${safeFamily}"`];
+  if (metrics) stackParts.push(`"${safeFamily} Fallback"`);
+  stackParts.push(fallbackStack);
+  variables.push(`--font-${slot.slot}: ${stackParts.join(", ")};`);
+  pushFeatureVars();
+  return { imports, fontFaces, variables, warnings };
+}
+function getFontPreloadLinks(slots) {
+  const links = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const slot of slots) {
+    for (const face of slot.faces) {
+      if (!face.preload) continue;
+      if (face.provider === "system" || face.provider === "google" || !face.provider) continue;
+      if (seen.has(face.provider)) continue;
+      seen.add(face.provider);
+      links.push({
+        href: face.provider,
+        as: "font",
+        type: FONT_FORMAT_MIME[inferFontFormat(face.provider)],
+        crossorigin: true
+      });
+    }
+  }
+  return links;
 }
 
-// src/integrations/font-providers/google/index.ts
-var FETCH_RETRY_COOLDOWN_MS = 3e4;
-async function fetchGoogleFontList() {
-  if (googleFontInternals.googleFontState.fetched) return;
-  if (googleFontInternals.googleFontListPromise) return googleFontInternals.googleFontListPromise;
-  if (googleFontInternals.lastFetchFailureMs > 0 && Date.now() - googleFontInternals.lastFetchFailureMs < FETCH_RETRY_COOLDOWN_MS) {
-    return;
+// src/scanner/sources.ts
+import { readFile, stat } from "fs/promises";
+import { resolve as resolve3 } from "path";
+import { glob } from "tinyglobby";
+
+// src/scanner/glob-utils.ts
+import { isAbsolute as isAbsolute2, win32 } from "path";
+function validateGlobPattern(pattern) {
+  if (!pattern?.trim()) {
+    return "Glob pattern is empty.";
   }
-  const localPromise = (async () => {
+  if (pattern.includes("\0")) {
+    return "Glob pattern contains a null byte, which is invalid in file paths.";
+  }
+  if (isAbsolute2(pattern) || win32.isAbsolute(pattern)) {
+    return `Glob pattern "${pattern}" must be relative, not absolute.`;
+  }
+  const segments = pattern.split(/[\\/]+/);
+  for (const seg of segments) {
+    if (seg === "..") {
+      return `Glob pattern "${pattern}" must not traverse parent directories (".."). Restructure your project layout so source files are within the project root, or use @source with a pattern rooted at the project directory.`;
+    }
+  }
+  return null;
+}
+
+// src/scanner/package-discovery.ts
+import { existsSync, readFileSync, realpathSync, statSync } from "fs";
+import { dirname as dirname2, join as join2, posix, resolve as resolve2 } from "path";
+var EMPTY = Object.freeze({ sources: [], warnings: [] });
+var discoveryCache = /* @__PURE__ */ new Map();
+function discoverPackageSafelistSources(cwd) {
+  const cwdAbs = resolve2(cwd);
+  let mtimeMs;
+  try {
+    mtimeMs = statSync(join2(cwdAbs, "package.json")).mtimeMs;
+  } catch {
+    return EMPTY;
+  }
+  const cached = discoveryCache.get(cwdAbs);
+  if (cached && cached.mtimeMs === mtimeMs) return cached.result;
+  const result = runDiscovery(cwdAbs);
+  discoveryCache.set(cwdAbs, { mtimeMs, result });
+  return result;
+}
+function runDiscovery(cwdAbs) {
+  let consumer;
+  try {
+    consumer = readPackageJson(join2(cwdAbs, "package.json"));
+  } catch {
+    return EMPTY;
+  }
+  const deps = [
+    ...Object.keys(consumer.dependencies ?? {}),
+    ...Object.keys(consumer.peerDependencies ?? {})
+  ];
+  if (deps.length === 0) return EMPTY;
+  const sources = [];
+  const warnings = [];
+  for (const depName of deps) {
+    const depPkgPath = findDepPackageJson(cwdAbs, depName);
+    if (!depPkgPath) {
+      continue;
+    }
+    let depPkg;
     try {
-      const isOffline = process.env.RI_OFFLINE === "1" || process.env.RI_OFFLINE === "true";
-      if (isOffline) {
-        if (await loadFontCache(true)) return;
-        console.warn(
-          `[RI-1206] RI_OFFLINE is set but no local font cache found at ${getFontCacheFile()}. Run once with network access to populate it. Non-variable fonts will default to weight "100 900" and may produce broken Google Fonts URLs \u2014 set an explicit weight in the @font directive to avoid this.`
+      depPkg = readPackageJson(depPkgPath);
+    } catch (err) {
+      warnings.push(
+        `[RI-1410] Could not read ${depName}/package.json during safelist discovery: ${errMessage(err)}`
+      );
+      continue;
+    }
+    const patterns = depPkg.rainbowindex?.safelistSources;
+    if (patterns == null) continue;
+    if (!Array.isArray(patterns)) {
+      warnings.push(
+        `[RI-1410] Invalid rainbowindex.safelistSources in ${depName} \u2014 expected an array of glob strings.`
+      );
+      continue;
+    }
+    if (patterns.length === 0) continue;
+    const depRoot = realpathOrFallback(dirname2(depPkgPath)).replace(/\\/g, "/");
+    for (const pattern of patterns) {
+      if (typeof pattern !== "string" || !pattern) {
+        warnings.push(
+          `[RI-1410] Invalid rainbowindex.safelistSources entry in ${depName} \u2014 expected a non-empty glob string.`
         );
-        return;
-      }
-      if (await loadFontCache()) return;
-      const fetchDisabled = process.env.RI_FETCH_FONTS === "0" || process.env.RI_FETCH_FONTS === "false";
-      if (fetchDisabled) {
-        if (await loadFontCache(true)) return;
-        return;
+        continue;
       }
-      if (typeof globalThis.fetch !== "function") {
-        console.warn(
-          "[RI-1212] Global fetch() is not available. Google Fonts metadata requires Node.js >= 18. Skipping font fetch."
+      if (validateGlobPattern(pattern) !== null) {
+        warnings.push(
+          `[RI-1410] Invalid rainbowindex.safelistSources entry "${pattern}" in ${depName} \u2014 patterns must be relative to the package root and must not traverse parent directories.`
         );
-        return;
-      }
-      if (isRIDebug()) {
-        console.warn("[RI-DEBUG] Fetching Google Fonts metadata...");
+        continue;
       }
-      try {
-        const newCache = await fetchGoogleFontMetadata();
-        googleFontInternals.googleFontState = { cache: newCache, fetched: true };
-        await saveFontCache();
-        return;
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        if (message.startsWith("[RI-1207]")) {
-          console.warn(`${message} Skipping.`);
-          if (await loadFontCache(true)) return;
-          return;
-        }
-        if (await loadFontCache(true)) return;
-        console.warn(
-          `[RI-1205] Could not fetch Google Fonts metadata after 3 attempts (${message}). Fonts without explicit weight/style will default to "100 900" + "normal italic" \u2014 non-variable fonts may produce broken Google Fonts URLs. Run with network access to populate the metadata cache, or set an explicit weight/style in the @font directive.`
+      const absolute = posix.normalize(`${depRoot}/${pattern.replace(/^\.\//, "")}`);
+      if (absolute !== depRoot && !absolute.startsWith(`${depRoot}/`)) {
+        warnings.push(
+          `[RI-1410] Invalid rainbowindex.safelistSources entry "${pattern}" in ${depName} \u2014 resolved outside the package root.`
         );
+        continue;
       }
-    } finally {
-      if (!googleFontInternals.googleFontState.fetched) {
-        googleFontInternals.lastFetchFailureMs = Date.now();
-      }
-      googleFontInternals.googleFontListPromise = null;
+      sources.push({ pattern: absolute, negated: false, inline: false, absolute: true });
     }
-  })();
-  googleFontInternals.googleFontListPromise = localPromise;
-  return localPromise;
+  }
+  return { sources, warnings };
 }
-function refreshFontWeightDefaults(fonts) {
-  return fonts.map((slot) => {
-    if (slot.kind !== "google") return slot;
-    const meta = googleFontInternals.googleFontState.cache.get(slot.family);
-    if (!meta) return slot;
-    let changed = false;
-    const faces = slot.faces.map((f) => {
-      let next = f;
-      if (!f._weightExplicit) {
-        const wghtAxis = meta.axes?.find((a) => a.tag === "wght");
-        const axisWeight = wghtAxis && wghtAxis.start !== wghtAxis.end ? `${wghtAxis.start} ${wghtAxis.end}` : "400";
-        if (next.weight !== axisWeight) next = { ...next, weight: axisWeight };
-      }
-      if (!f._styleExplicit) {
-        const italAxis = meta.axes?.find((a) => a.tag === "ital");
-        const axisStyle = italAxis ? "normal italic" : "normal";
-        if (next.style !== axisStyle) next = { ...next, style: axisStyle };
-      }
-      if (next !== f) changed = true;
-      return next;
-    });
-    return changed ? { ...slot, faces } : slot;
-  });
+function readPackageJson(path) {
+  const raw = readFileSync(path, "utf8");
+  return JSON.parse(raw);
 }
-var FONT_FETCH_TIMEOUT_MS = 1e4;
-async function resolveGoogleFonts(fonts) {
-  if (!fonts.some((slot) => slot.kind === "google")) return fonts;
+function findDepPackageJson(cwd, depName) {
+  let dir = cwd;
+  while (true) {
+    const candidate = join2(dir, "node_modules", depName, "package.json");
+    if (existsSync(candidate)) return candidate;
+    const parent = dirname2(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function realpathOrFallback(path) {
   try {
-    await withTimeout(
-      fetchGoogleFontList(),
-      FONT_FETCH_TIMEOUT_MS,
-      "[RI-1213] Google Fonts metadata fetch timed out"
-    );
+    return realpathSync(path);
   } catch {
-    console.warn(
-      `[RI-1213] Could not fetch Google Fonts metadata within ${FONT_FETCH_TIMEOUT_MS / 1e3}s \u2014 proceeding with default font weights. Variable-weight fonts may use "400" instead of their full range.`
-    );
+    return path;
   }
-  return refreshFontWeightDefaults(fonts);
+}
+function errMessage(err) {
+  return err instanceof Error ? err.message : String(err);
 }
 
-// src/integrations/font-providers/index.ts
-var SYSTEM_STACKS = Object.freeze({
-  sans: 'ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"',
-  serif: 'ui-serif, Georgia, Cambria, "Times New Roman", Times, serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"',
-  mono: 'ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"'
-});
-function getFallbackStack(slot) {
-  if (!SYSTEM_STACKS[slot] && isRIDebug()) {
-    console.warn(`[RI-DEBUG] Unknown font slot "${slot}" \u2014 falling back to sans stack.`);
+// src/scanner/sources.ts
+var DEFAULT_PATTERNS = Object.freeze([
+  "index.html",
+  "src/**/*.{html,js,jsx,ts,tsx,mdx,vue,svelte}"
+]);
+var DEFAULT_EXCLUDES = Object.freeze([
+  "node_modules/**",
+  "dist/**",
+  "build/**",
+  "coverage/**",
+  "public/**",
+  "**/*.config.*",
+  "**/*.d.ts"
+]);
+var MAX_FILE_SIZE = 1048576;
+var MAX_INLINE_SOURCE_SIZE = 102400;
+var GLOB_TIMEOUT_MS = 3e4;
+var GLOB_TIMEOUT_MESSAGE = `glob() timed out after ${GLOB_TIMEOUT_MS / 1e3}s \u2014 check for network filesystem issues or overly broad @source patterns`;
+function collectPatterns(sources) {
+  const includePatterns = [];
+  const nodeModulesIncludePatterns = [];
+  const excludePatterns = [...DEFAULT_EXCLUDES];
+  const hasUserPositiveGlobs = sources.some((s) => !s.inline && !s.negated && !s.absolute);
+  if (!hasUserPositiveGlobs) {
+    includePatterns.push(...DEFAULT_PATTERNS);
   }
-  return SYSTEM_STACKS[slot] || SYSTEM_STACKS.sans;
-}
-function googleFontsUrl(family, face) {
-  const encodedFamily = encodeURIComponent(family).replace(/%20/g, "+");
-  let axisParam;
-  if (face.weight.includes(",")) {
-    const weights = face.weight.split(",").map((w) => w.trim());
-    if (face.style.includes("italic")) {
-      const tuples = weights.flatMap((w) => [`0,${w}`, `1,${w}`]);
-      axisParam = `ital,wght@${tuples.join(";")}`;
+  const warnings = [];
+  for (const src of sources) {
+    if (src.inline) continue;
+    if (!src.absolute) {
+      const err = validateGlobPattern(src.pattern);
+      if (err) {
+        warnings.push(`[RI-1404] @source pattern rejected: ${err}`);
+        continue;
+      }
+    }
+    if (src.negated) {
+      excludePatterns.push(src.pattern);
+    } else if (src.absolute || src.pattern.replace(/^\.\//, "").startsWith("node_modules/")) {
+      nodeModulesIncludePatterns.push(src.pattern);
     } else {
-      axisParam = `wght@${weights.join(";")}`;
+      includePatterns.push(src.pattern);
     }
-  } else if (face.weight.includes(" ")) {
-    const range = face.weight.replace(" ", "..");
-    axisParam = face.style.includes("italic") ? `ital,wght@0,${range};1,${range}` : `wght@${range}`;
-  } else {
-    const w = face.weight || "400";
-    axisParam = face.style.includes("italic") ? `ital,wght@0,${w};1,${w}` : `wght@${w}`;
-  }
-  const display = face.display || "swap";
-  const subset = face.subset && face.subset !== "latin" ? `&subset=${encodeURIComponent(face.subset)}` : "";
-  return `https://fonts.googleapis.com/css2?family=${encodedFamily}:${axisParam}&display=${display}${subset}`;
-}
-function escapeFontFamily(name) {
-  return name.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\0/g, "\\0").replace(/\n/g, "\\a ").replace(/\r/g, "\\d ");
-}
-function generateFallbackFontFace(family, metrics) {
-  const safeFamily = escapeFontFamily(family);
-  return `@font-face {
-  font-family: "${safeFamily} Fallback";
-  src: local("${metrics.fallback}");
-  size-adjust: ${metrics.sizeAdjust}%;
-  ascent-override: ${metrics.ascent}%;
-  descent-override: ${metrics.descent}%;
-  line-gap-override: ${metrics.lineGap}%;
-}`;
-}
-var FONT_FORMAT_MIME = {
-  woff2: "font/woff2",
-  woff: "font/woff",
-  truetype: "font/ttf",
-  opentype: "font/otf"
-};
-function inferFontFormat(path) {
-  if (path.endsWith(".woff2")) return "woff2";
-  if (path.endsWith(".woff")) return "woff";
-  if (path.endsWith(".ttf")) return "truetype";
-  if (path.endsWith(".otf")) return "opentype";
-  return "woff2";
-}
-function generateWebFontFace(family, face) {
-  if (face.provider === "system" || !face.provider) return null;
-  if (face.provider === "google") {
-    return { type: "import", css: `@import url("${googleFontsUrl(family, face)}");` };
   }
-  const safeProvider = face.provider.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-  const format = inferFontFormat(face.provider);
-  const src = `url("${safeProvider}") format("${format}")`;
-  const declarations = [`  font-family: "${escapeFontFamily(family)}";`, `  src: ${src};`];
-  if (face.weight) declarations.push(`  font-weight: ${face.weight};`);
-  if (face.style && face.style !== "normal") declarations.push(`  font-style: ${face.style};`);
-  if (face.display) declarations.push(`  font-display: ${face.display};`);
-  if (face.unicodeRange) declarations.push(`  unicode-range: ${face.unicodeRange};`);
-  return { type: "font-face", css: `@font-face {
-${declarations.join("\n")}
-}` };
+  return {
+    includePatterns,
+    nodeModulesIncludePatterns,
+    excludePatterns,
+    warnings,
+    hasUserPositiveGlobs
+  };
 }
-function normalizeLocalStyle(style, family, warnings) {
-  if (style.includes(" ") && !style.startsWith("oblique")) {
-    const first = style.split(/\s+/)[0];
+async function resolveSourceFilesAsync(sources, cwd, hasInlineClasses = false) {
+  const {
+    includePatterns,
+    nodeModulesIncludePatterns,
+    excludePatterns,
+    warnings,
+    hasUserPositiveGlobs
+  } = collectPatterns(sources);
+  const allIncludes = [...includePatterns, ...nodeModulesIncludePatterns];
+  if (allIncludes.length === 0) return { files: [], warnings };
+  try {
+    const globPasses = [];
+    if (includePatterns.length > 0) {
+      globPasses.push(
+        withTimeout(
+          glob(includePatterns, { cwd, ignore: excludePatterns }),
+          GLOB_TIMEOUT_MS,
+          GLOB_TIMEOUT_MESSAGE
+        )
+      );
+    }
+    if (nodeModulesIncludePatterns.length > 0) {
+      const relaxedExcludes = excludePatterns.filter((p) => p !== "node_modules/**");
+      globPasses.push(
+        withTimeout(
+          glob(nodeModulesIncludePatterns, { cwd, ignore: relaxedExcludes }),
+          GLOB_TIMEOUT_MS,
+          GLOB_TIMEOUT_MESSAGE
+        )
+      );
+    }
+    const matched = (await Promise.all(globPasses)).flat();
+    const files = [...new Set(matched.map((f) => resolve3(cwd, f)))].sort(codepointCompare);
+    if (files.length === 0 && !(hasInlineClasses && !hasUserPositiveGlobs)) {
+      warnings.push(
+        `[RI-1401] No source files found matching ${allIncludes.map((p) => `"${p}"`).join(", ")} \u2014 check @source paths or project structure.`
+      );
+    }
+    return { files, warnings };
+  } catch (err) {
     warnings.push(
-      `[RI-1203] Local font "${family}" has a compound font-style "${style}" \u2014 a single @font-face takes one style. Split upright and italic into separate @face blocks (or use the italic: shorthand). Using "${first}".`
+      `[RI-1402] Invalid glob pattern \u2014 skipping. Check @source syntax. (${err instanceof Error ? err.message : String(err)})`
     );
-    return first;
+    return { files: [], warnings };
   }
-  return style;
 }
-function generateFontCSS(slot) {
-  const imports = [];
-  const fontFaces = [];
-  const variables = [];
+function collectInlineClasses(sources) {
+  const classes = /* @__PURE__ */ new Set();
   const warnings = [];
-  const pushFeatureVars = () => {
-    if (slot.features) variables.push(`--font-${slot.slot}--features: ${slot.features};`);
-    if (slot.variation) variables.push(`--font-${slot.slot}--variations: ${slot.variation};`);
-  };
-  if (slot.kind === "system") {
-    variables.push(`--font-${slot.slot}: ${getFallbackStack(slot.slot)};`);
-    return { imports, fontFaces, variables, warnings };
-  }
-  if (slot.kind === "manual") {
-    const stack = [`"${escapeFontFamily(slot.family)}"`, ...slot.fallback].join(", ");
-    variables.push(`--font-${slot.slot}: ${stack};`);
-    pushFeatureVars();
-    return { imports, fontFaces, variables, warnings };
-  }
-  const { sizeAdjust, ascent, descent, lineGap } = slot;
-  const hasMetrics = sizeAdjust !== void 0 && ascent !== void 0 && descent !== void 0 && lineGap !== void 0;
-  if (hasMetrics) {
-    const metricsFallbackFont = slot.metricsFallback || slot.fallback[0] || "Arial";
-    fontFaces.push(
-      generateFallbackFontFace(slot.family, {
-        fallback: metricsFallbackFont,
-        sizeAdjust,
-        ascent,
-        descent,
-        lineGap
-      })
-    );
-  }
-  for (const face of slot.faces) {
-    if (face.provider !== "google" && !face.provider.startsWith("/") && !face.provider.startsWith("http") && !face.provider.startsWith(".")) {
+  for (const src of sources) {
+    if (!src.inline) continue;
+    const items = src.classes ?? [];
+    let contentLength = 0;
+    for (const cls of items) contentLength += cls.length;
+    if (contentLength > MAX_INLINE_SOURCE_SIZE) {
       warnings.push(
-        `[RI-1201] Unknown font provider "${face.provider}" for "${slot.family}" \u2014 supported: google, or a file path/URL.`
+        `[RI-1406] Inline @source content exceeds ${MAX_INLINE_SOURCE_SIZE} byte limit (${contentLength} bytes) \u2014 skipping.`
       );
       continue;
     }
-    const emitFace = face.provider === "google" ? face : { ...face, style: normalizeLocalStyle(face.style, slot.family, warnings) };
-    const webFont = generateWebFontFace(slot.family, emitFace);
-    if (!webFont) continue;
-    if (webFont.type === "import") imports.push(webFont.css);
-    else fontFaces.push(webFont.css);
+    for (const cls of items) {
+      if (cls) classes.add(cls);
+    }
   }
-  const fallbackStack = slot.fallback.length > 0 ? slot.fallback.join(", ") : getFallbackStack(slot.slot);
-  const safeFamily = escapeFontFamily(slot.family);
-  const stackParts = [`"${safeFamily}"`];
-  if (hasMetrics) stackParts.push(`"${safeFamily} Fallback"`);
-  stackParts.push(fallbackStack);
-  variables.push(`--font-${slot.slot}: ${stackParts.join(", ")};`);
-  pushFeatureVars();
-  return { imports, fontFaces, variables, warnings };
+  return { classes, warnings };
 }
-function getFontPreloadLinks(slots) {
-  const links = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const slot of slots) {
-    for (const face of slot.faces) {
-      const preload = face.preload ?? slot.preload;
-      if (!preload) continue;
-      if (face.provider === "system" || face.provider === "google" || !face.provider) continue;
-      if (seen.has(face.provider)) continue;
-      seen.add(face.provider);
-      links.push({
-        href: face.provider,
-        as: "font",
-        type: FONT_FORMAT_MIME[inferFontFormat(face.provider)],
-        crossorigin: true
-      });
+var FILE_IO_TIMEOUT_MS = 1e4;
+var SCAN_CACHE_MAX_ENTRIES = 2e4;
+var scanCache = /* @__PURE__ */ new Map();
+async function scanOneFile(file) {
+  const warnings = [];
+  try {
+    const stats = await withTimeout(stat(file), FILE_IO_TIMEOUT_MS, "stat() timed out");
+    const cached = scanCache.get(file);
+    if (cached && cached.mtimeMs === stats.mtimeMs && cached.size === stats.size) {
+      return cached.result;
+    }
+    let result;
+    if (stats.size > MAX_FILE_SIZE) {
+      result = {
+        classes: null,
+        warnings,
+        failure: `[RI-1405] Skipping source file "${file}" (${stats.size} bytes) \u2014 exceeds ${MAX_FILE_SIZE} byte limit.`
+      };
+    } else {
+      const content = await withTimeout(
+        readFile(file, "utf-8"),
+        FILE_IO_TIMEOUT_MS,
+        "readFile() timed out"
+      );
+      result = {
+        classes: extractClassesFromSource({ path: file, content }, warnings),
+        warnings,
+        failure: null
+      };
     }
+    if (scanCache.size >= SCAN_CACHE_MAX_ENTRIES) scanCache.clear();
+    scanCache.set(file, { mtimeMs: stats.mtimeMs, size: stats.size, result });
+    return result;
+  } catch (err) {
+    return {
+      classes: null,
+      warnings,
+      failure: `[RI-1403] Could not read source file "${file}" \u2014 skipping. (${err instanceof Error ? err.message : String(err)})`
+    };
   }
-  return links;
+}
+async function scanSourceFilesAsync(sources, cwd) {
+  const { classes: allClasses, warnings: inlineWarnings } = collectInlineClasses(sources);
+  const allWarnings = [...inlineWarnings];
+  const { files, warnings: resolveWarnings } = await resolveSourceFilesAsync(
+    sources,
+    cwd,
+    allClasses.size > 0
+  );
+  allWarnings.push(...resolveWarnings);
+  const CONCURRENCY_LIMIT = 32;
+  const results = new Array(files.length);
+  let nextIndex = 0;
+  const worker = async () => {
+    while (nextIndex < files.length) {
+      const index = nextIndex++;
+      results[index] = await scanOneFile(files[index]);
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(CONCURRENCY_LIMIT, files.length) }, worker));
+  const seen = new Set(allWarnings);
+  for (const result of results) {
+    if (result.failure) {
+      allWarnings.push(result.failure);
+      seen.add(result.failure);
+      continue;
+    }
+    if (result.classes) {
+      for (const cls of result.classes) {
+        allClasses.add(cls);
+      }
+    }
+    pushWarningsDeduped(allWarnings, result.warnings, seen);
+  }
+  return { classes: allClasses, warnings: allWarnings };
+}
+async function collectProjectClasses(themeSources, surfaceSources, cwd, warnings, warningSeen) {
+  const discovered = discoverPackageSafelistSources(cwd);
+  pushWarningsDeduped(warnings, discovered.warnings, warningSeen);
+  const allSources = [...themeSources, ...surfaceSources, ...discovered.sources];
+  const scanResult = await scanSourceFilesAsync(allSources, cwd);
+  pushWarningsDeduped(warnings, scanResult.warnings, warningSeen);
+  return scanResult.classes;
 }
 
 // src/css/strip.ts
@@ -1459,7 +1622,7 @@ function collectPropertyBlocks(registered, engineProperties) {
   return blocks;
 }
 function assembleSections(compilation, theme, fontOutputCache) {
-  const sections = [];
+  const baseSections = [];
   const fontImports = [];
   const fontFaceBlocks = [];
   const assemblyWarnings = [];
@@ -1480,18 +1643,16 @@ function assembleSections(compilation, theme, fontOutputCache) {
       }
     }
   }
-  if (fontImports.length > 0) {
-    sections.push(fontImports.join("\n"));
-  }
+  const importsSection = fontImports.length > 0 ? fontImports.join("\n") : null;
   const propertyBlocks = collectPropertyBlocks(theme.registeredProperties, compilation.properties);
   if (propertyBlocks.length > 0) {
-    sections.push(propertyBlocks.join("\n\n"));
+    baseSections.push(propertyBlocks.join("\n\n"));
   }
   if (fontFaceBlocks.length > 0) {
-    sections.push(fontFaceBlocks.join("\n\n"));
+    baseSections.push(fontFaceBlocks.join("\n\n"));
   }
   const tokenLayer = generateTokenLayer(theme, compilation, fontOutputCache);
-  if (tokenLayer) sections.push(tokenLayer);
+  if (tokenLayer) baseSections.push(tokenLayer);
   for (const w of checkPaletteContrast(theme.colors, compilation.usedColorStops)) {
     assemblyWarnings.push(w);
   }
@@ -1500,25 +1661,32 @@ function assembleSections(compilation, theme, fontOutputCache) {
     compilation.usedColorStops.get("theme")
   );
   if (themeOverrides.length > 0) {
-    sections.push(themeOverrides.join("\n\n"));
+    baseSections.push(themeOverrides.join("\n\n"));
   }
   const cornerShape = generateCornerShapeBlock(theme);
-  if (cornerShape) sections.push(cornerShape);
+  if (cornerShape) baseSections.push(cornerShape);
   if (compilation.keyframes.length > 0) {
-    sections.push(compilation.keyframes.join("\n\n"));
+    baseSections.push(compilation.keyframes.join("\n\n"));
   }
   const preflight = generatePreflight(theme.preflight);
-  if (preflight) sections.push(preflight);
+  if (preflight) baseSections.push(preflight);
   const utilityCSS = renderCSS({
     ...compilation,
     properties: [],
     keyframes: []
   });
-  if (utilityCSS) sections.push(utilityCSS);
-  if (theme.layer) {
-    applyLayerWrapping(sections, fontImports, theme.layer, utilityCSS !== "");
-  }
-  return { sections, fontImports, warnings: assemblyWarnings };
+  const utilitiesSection = utilityCSS !== "" ? utilityCSS : null;
+  const parts = {
+    imports: importsSection,
+    base: baseSections,
+    utilities: utilitiesSection
+  };
+  const sections = theme.layer ? applyLayerWrapping(parts, theme.layer) : [
+    ...importsSection !== null ? [importsSection] : [],
+    ...baseSections,
+    ...utilitiesSection !== null ? [utilitiesSection] : []
+  ];
+  return { sections, warnings: assemblyWarnings };
 }
 function wrapInLayer(content, layerName) {
   const indented = content.replace(/^(?=.)/gm, "  ");
@@ -1526,42 +1694,36 @@ function wrapInLayer(content, layerName) {
 ${indented}
 }`;
 }
-function applyLayerWrapping(sections, fontImports, layer, hasUtilitySection) {
-  const hasImportSection = fontImports.length > 0 && sections.length > 0;
-  const importSection = hasImportSection ? sections[0] : null;
-  const contentSections = hasImportSection ? sections.slice(1) : [...sections];
+function applyLayerWrapping(parts, layer) {
+  const sections = [];
+  if (parts.imports !== null) sections.push(parts.imports);
   if (layer.wrapAll) {
-    const joined = contentSections.join("\n\n");
-    sections.length = 0;
-    if (importSection) sections.push(importSection);
     sections.push(`@layer ${layer.wrapAll};`);
+    const joined = [...parts.base, ...parts.utilities !== null ? [parts.utilities] : []].join(
+      "\n\n"
+    );
     if (joined) sections.push(wrapInLayer(joined, layer.wrapAll));
-    return;
+    return sections;
   }
-  const utilitySection = hasUtilitySection ? contentSections.pop() ?? null : null;
-  const baseSections = contentSections;
-  const finalSections = [];
-  if (importSection) finalSections.push(importSection);
   if (layer.order && layer.order.length > 0) {
-    finalSections.push(`@layer ${layer.order.join(", ")};`);
+    sections.push(`@layer ${layer.order.join(", ")};`);
   }
-  if (baseSections.length > 0) {
-    const baseJoined = baseSections.join("\n\n");
+  if (parts.base.length > 0) {
+    const baseJoined = parts.base.join("\n\n");
     if (layer.base) {
-      finalSections.push(wrapInLayer(baseJoined, layer.base));
+      sections.push(wrapInLayer(baseJoined, layer.base));
     } else {
-      finalSections.push(baseJoined);
+      sections.push(baseJoined);
     }
   }
-  if (utilitySection) {
+  if (parts.utilities !== null) {
     if (layer.utilities) {
-      finalSections.push(wrapInLayer(utilitySection, layer.utilities));
+      sections.push(wrapInLayer(parts.utilities, layer.utilities));
     } else {
-      finalSections.push(utilitySection);
+      sections.push(parts.utilities);
     }
   }
-  sections.length = 0;
-  sections.push(...finalSections);
+  return sections;
 }
 
 // src/project/pipeline.ts
@@ -1575,13 +1737,20 @@ function collectApplyClassNames(css, warnings) {
   }
   return classes;
 }
+var effectiveThemeMemo = /* @__PURE__ */ new WeakMap();
 async function finalizeProjectCompilation(options) {
   const { analysis } = options;
   let effectiveTheme = analysis.theme;
   if (options.resolveFonts) {
     const resolvedFonts = await options.resolveFonts(analysis.theme.fonts);
     if (resolvedFonts !== analysis.theme.fonts) {
-      effectiveTheme = { ...analysis.theme, fonts: [...resolvedFonts] };
+      const memo = effectiveThemeMemo.get(analysis.theme);
+      if (memo && memo.fonts === resolvedFonts) {
+        effectiveTheme = memo.theme;
+      } else {
+        effectiveTheme = { ...analysis.theme, fonts: [...resolvedFonts] };
+        effectiveThemeMemo.set(analysis.theme, { fonts: resolvedFonts, theme: effectiveTheme });
+      }
     }
   }
   const expansionWarnings = [];
@@ -1624,12 +1793,59 @@ async function finalizeProjectCompilation(options) {
   };
 }
 
+// src/project/scan.ts
+var lastAnalysis = null;
+function analyzeProjectCSSMemo(css) {
+  if (lastAnalysis === null || lastAnalysis.css !== css) {
+    lastAnalysis = { css, analysis: analyzeProjectCSS(css) };
+  }
+  const cached = lastAnalysis.analysis;
+  return {
+    ...cached,
+    warnings: [...cached.warnings],
+    warningSeen: new Set(cached.warningSeen),
+    diagnostics: [...cached.diagnostics]
+  };
+}
+async function compileScannedProject(options) {
+  const analysis = analyzeProjectCSSMemo(options.css);
+  const resolveFonts = options.resolveFonts ?? resolveGoogleFonts;
+  const fontsReady = Promise.resolve(resolveFonts(analysis.theme.fonts));
+  fontsReady.catch(() => {
+  });
+  const surfaceSources = [];
+  for (const pattern of options.surfacePatterns ?? []) {
+    const error = validateGlobPattern(pattern);
+    if (error) {
+      const warning = options.onInvalidPattern(error);
+      if (warning !== void 0) {
+        pushWarningsDeduped(analysis.warnings, [warning], analysis.warningSeen);
+      }
+      continue;
+    }
+    surfaceSources.push({ pattern, negated: false, inline: false });
+  }
+  const classNames = await collectProjectClasses(
+    analysis.theme.sources,
+    surfaceSources,
+    options.cwd,
+    analysis.warnings,
+    analysis.warningSeen
+  );
+  const compiled = await finalizeProjectCompilation({
+    css: options.css,
+    classNames,
+    analysis,
+    resolveFonts: () => fontsReady
+  });
+  return { compiled, warningSeen: analysis.warningSeen };
+}
+
 export {
-  validateGlobPattern,
-  DEFAULT_PATTERNS,
-  DEFAULT_EXCLUDES,
-  collectProjectClasses,
   resolveGoogleFonts,
   getFontPreloadLinks,
-  finalizeProjectCompilation
+  DEFAULT_PATTERNS,
+  DEFAULT_EXCLUDES,
+  finalizeProjectCompilation,
+  compileScannedProject
 };