Part C: API consistency

.changeset/class-names-and-rest-props.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+More components accept rest props and `ref` on their root and a `classNames` slot map, and `BackToTop`, `ConditionalLink` and `LinkButton` gain `asChild`.

.changeset/config.json

@@ -2,7 +2,7 @@
   "$schema": "https://unpkg.com/@changesets/config@3.0.0/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
-  "fixed": [],
+  "fixed": [["@javaabu/onu", "@javaabu/onu-mcp"]],
   "linked": [],
   "access": "public",
   "baseBranch": "main",

.changeset/drop-unused-peers.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+Removed four optional peers nothing imports: `@tiptap/extension-link`, `@tiptap/extension-drag-handle-react`, `@tiptap/extension-code-block-lowlight` and `lowlight`.

.changeset/editor-dialog-thaana.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+The editors' image alt text field now follows the editor's `thaana` prop.

.changeset/hard-coded-english.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+`DialogFooter`'s close button, the `useConfirm` `window.confirm` fallback and a `ValidationError` without a message no longer show hard-coded English.

.changeset/labels-with-placeholders.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+The move, switch account and inline edit labels are now whole translated sentences with a placeholder, instead of two strings joined together.

.changeset/locale-cleanup.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+Remove unused locale keys, give Dhivehi separate words for clear and delete, and announce applied filters and cleared selections to screen readers.

.changeset/logical-sides.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+`Tip`, `PopoverPanel` and `ActionMenu` take `side="top" | "bottom" | "start" | "end"`; `left` and `right` are gone.

.changeset/on-value-change.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+Every component that reports a value now uses `onValueChange(value)`; `onChange` only ever means the native event. `FileInput` loses `onChange(files)` (use `onValueChange(entries)`), and `onReject` always takes an array.

.changeset/overlay-token.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+New `--onu-overlay` token for the dim behind dialogs, sheets and drawers (`bg-overlay`). The app shell classes use the shell token utilities instead of hex fallbacks.

.changeset/peer-form-and-query.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+`react-hook-form` and `@tanstack/react-query` are now peer dependencies. `getOnuQueryClient` is gone: the fallback client belongs to each `OnuProvider`, and `invalidateApiOptions` takes the client first.

.changeset/prop-names.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+The accessible name of a root region is `label` everywhere (`CommandPalette` and `OverlayMenu` `title`, `TopNav` `navLabel`, `Tabs` `listLabel`), and the minimum query length is `minChars` everywhere (`CommandPalette` `minQueryLength`, `PlaceSearchBox` `minLength`).

.changeset/react-19-only.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+Onu now requires React 19; React 18 is no longer in the peer range.

.changeset/remove-base-ui-combobox.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+Removed the unused `Combobox` primitive from `@javaabu/onu/primitives`, and with it the `@base-ui/react` dependency.

.changeset/segmented-control-name.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+`SegmentedControl`'s `name` prop is now part of its type.

.changeset/shared-helpers.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+Shared helpers move to `src/lib` and `src/hooks` with one behaviour each: `toArray` and the `initials` media export are gone, `normalizeUrl` returns `string | null`, the editor's `Callout` node is now `CalloutNode`, `CommandPalette` debounces by 300 ms, and the auth forms use `PasswordInput`.

.changeset/size-scale.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+`Tag`, `SkeletonText`, `Modal` and `UserAvatar` rename size `md` to `default`. `NumberInput` is now `h-8` like every other field, and `TextInput` gains the same `size` prop.

.changeset/stable-first-render.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+`Countdown`, `RelativeDate`, `Timeline`, `PublishBox` and `SidebarMenuSkeleton` render the same markup on the server and the client's first render. `SidebarMenuSkeleton` takes an `index` to vary its width.

.changeset/stable-labels.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+The vertical `Carousel` arrows point the right way in RTL, and `KanbanBoard`'s column count is real screen reader text instead of an `aria-label` on a `span`.

.changeset/thaana-fonts-always.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+Faruma and MV Faseyha now load from `tailwind.css` and `styles.css`, so Thaana text works without the optional font pack.

.changeset/toast-close-size.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": patch
+---
+
+The toast close button is now 24 px, and 44 px on touch screens.

.changeset/tone-scale.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+One severity scale, `tone`: `neutral`, `info`, `success`, `warning`, `danger`. `Callout`, `AnnouncementBar` and `NotificationCenter` items rename `variant` to `tone`, `destructive` and `error` become `danger`, and `default` becomes `neutral` (also on `IconText`). `AnnouncementBar` gains `success` and `danger`. `Button` keeps `variant="destructive"`.

.changeset/uncontrolled-partners.md

@@ -0,0 +1,5 @@
+---
+"@javaabu/onu": minor
+---
+
+`LanguageSwitcher` and `RepeatingGroup` gain `defaultValue`, `Callout`, `FilterPanel` and `Lightbox` gain `defaultOpen`, and `Lightbox` `open` and `onOpenChange` become optional with `index` controlled only when it is passed.

.github/workflows/release.yml

@@ -41,6 +41,7 @@ jobs:
               exit 1
             fi
           done
+          node scripts/sync-plugin-version.mjs --check
       - name: Check the npm token
         run: |
           if [ -z "$NPM_TOKEN" ]; then

AGENTS.md

@@ -33,7 +33,7 @@ pnpm e2e:chromium                          # Playwright (a11y with axe, visual)
 
 ## Rules
 
-- A component is done only with: light/dark, LTR/RTL, `dv` strings, `thaana` on free-text fields, tokens-only colours, `className`/`classNames`/`asChild`, axe-clean, unit tests, a demo, a docs page and a changeset (`.changeset/*.md`).
+- A component is done only with: light/dark, LTR/RTL, `dv` strings, `thaana` on free-text fields, tokens-only colours, `className`/`classNames`, `asChild` where the component renders one element an app may need to replace (links, buttons, triggers), axe-clean, unit tests, a demo, a docs page and a changeset (`.changeset/*.md`).
 - Logical Tailwind utilities only (`ms-`, `pe-`, `start-`, `text-start`); ESLint rejects `left`/`right` ones. Theme tokens only, never raw colours.
 - Icons through `<Icon name="…">` with semantic names; never render Lucide components or import `src/icons/lucide-map` in a component.
 - No hard-coded English: strings live in `src/locales/{en,dv}/<namespace>.ts`, and a module registers the English namespaces it uses with `registerEnglish(...)`.

CONTRIBUTING.md

@@ -14,7 +14,7 @@ Maps in the web app use Google Maps when `VITE_GOOGLE_MAPS_API_KEY` (and optiona
 
 ## Definition of done
 
-A component is done only when it meets REQUIREMENTS §21: light/dark, LTR/RTL, `dv` locale, `thaana` prop for free text, tokens-only colours, responsive and touch-friendly, `className`/`classNames`/`asChild` overrides, WCAG 2.2 AA with axe tests, unit tests, a showcase demo in `web/src/showcase`, a docs page in `docs/`, and a changeset.
+A component is done only when it meets REQUIREMENTS §21: light/dark, LTR/RTL, `dv` locale, `thaana` prop for free text, tokens-only colours, responsive and touch-friendly, `className`/`classNames` overrides, `asChild` where the component renders one element an app may need to replace (links, buttons, triggers), WCAG 2.2 AA with axe tests, unit tests, a showcase demo in `web/src/showcase`, a docs page in `docs/`, and a changeset.
 
 ## Where things go
 
@@ -33,6 +33,7 @@ A component is done only when it meets REQUIREMENTS §21: light/dark, LTR/RTL, `
 ## Rules of thumb
 
 - Use logical Tailwind utilities (`ms-`, `pe-`, `start-`, `text-start`, …). ESLint rejects physical `left`/`right` ones.
+- Report a value with `onValueChange(value)`; `onChange` is only for the native event.
 - Use theme tokens (`bg-primary`, `text-muted-foreground`), never raw colours.
 - Use `<Icon name="…">` (from `src/icons/icon`) with semantic names, so `OnuProvider icons` overrides apply. Never render a Lucide component directly. When a component always shows the same glyph (a spinner, a close button, a chevron), also pass that Lucide icon as `fallback`, e.g. `<Icon name="loading" fallback={Loader2Icon} />`: overrides still win, and the component keeps its glyph outside `OnuProvider`.
 - Never import `src/icons/lucide-map` in a component. `OnuProvider` loads the default set on demand, so neither a single component nor the provider ships ~250 icons. ESLint and `src/icons/icon-imports.test.ts` enforce this, and `pnpm --filter @javaabu/onu size` checks the bundle budgets.
@@ -85,10 +86,10 @@ Every change that affects a published package adds a changeset (`pnpm changeset`
 
 To release:
 
-1. On `dev`, run `pnpm changeset version`. It bumps every package with pending changesets, writes their `CHANGELOG.md` and deletes the changesets. All packages share one version, so check that `packages/onu` and `packages/onu-mcp` match.
+1. On `dev`, run `pnpm changeset version && node scripts/sync-plugin-version.mjs`. `@javaabu/onu` and `@javaabu/onu-mcp` are a fixed group in `.changeset/config.json`, so they always move to the same version; the script copies that version into `plugins/onu/.claude-plugin/plugin.json`, which changesets can't see. `changeset version` also writes their `CHANGELOG.md` and deletes the changesets.
 2. Commit (`Release v0.1.0`) and merge `dev` into `main`. Wait for CI to pass on `main`.
 3. Tag that commit on `main` and push the tag: `git tag v0.1.0 && git push origin v0.1.0`.
 
-The **Release** workflow runs only for `v*` tags. It checks that the tagged commit is on `main` and that every package's version matches the tag, then builds and publishes to npm (versions already on npm are skipped). Tags with a pre-release suffix (`v1.0.0-beta.1`) publish under the `next` dist-tag.
+The **Release** workflow runs only for `v*` tags. It checks that the tagged commit is on `main` and that every package's version and the plugin's match the tag, then builds and publishes to npm (versions already on npm are skipped). Tags with a pre-release suffix (`v1.0.0-beta.1`) publish under the `next` dist-tag.
 
 Publishing needs an `NPM_TOKEN` repository secret: an npm granular access token with read and write access to the `@javaabu` scope and "bypass 2FA" allowed, from an account that can publish to `@javaabu`. Write tokens expire after about 90 days. Provenance is signed only once the repository is public. After the first release, you can switch to npm trusted publishing (each package's settings on npmjs.com, pointing at `release.yml`) and remove the token.

DEPENDENCIES.md

@@ -9,7 +9,6 @@ Selection order: shadcn/ui component → reputable library (shadcn ecosystem fir
 | Package                                            | Purpose                                                                    | Licence    | Notes                                                                                            |
 | -------------------------------------------------- | -------------------------------------------------------------------------- | ---------- | ------------------------------------------------------------------------------------------------ |
 | `radix-ui`                                         | Accessible primitives behind the shadcn components                         | MIT        | shadcn default base                                                                              |
-| `@base-ui/react`                                   | Combobox primitive (shadcn's combobox)                                     | MIT        | From the Radix / MUI team                                                                        |
 | `class-variance-authority`                         | Variants (`buttonVariants`, …)                                             | Apache-2.0 | Stable and feature-complete; last release 2024 (exception to the 12-month rule, used by shadcn)  |
 | `clsx`, `tailwind-merge`                           | `cn()` class merging so consumer classes win                               | MIT        |                                                                                                  |
 | `tw-animate-css`                                   | Enter/exit animations                                                      | MIT        | shadcn default                                                                                   |
@@ -19,25 +18,27 @@ Selection order: shadcn/ui component → reputable library (shadcn ecosystem fir
 | `vaul`                                             | Drawer / bottom sheet                                                      | MIT        | shadcn `drawer`. **Watch-list**: reduced maintenance (R4.3); kept behind Onu's API               |
 | `input-otp`                                        | OTP input                                                                  | MIT        | shadcn `input-otp`                                                                               |
 | `react-day-picker`, `date-fns`                     | Calendar and date maths                                                    | MIT        | shadcn `calendar`; Dhivehi locale maintained in Onu                                              |
-| `@internationalized/date`                          | Hijri (Umm al-Qura) calendar maths, date/time fields                       | Apache-2.0 | Adobe                                                                                            |
-| `react-aria-components`                            | Tree, colour picker, date/time segment fields                              | Apache-2.0 | Adobe; fills Radix gaps (§4 step 3)                                                              |
+| `@internationalized/date`                          | Hijri (Umm al-Qura) calendar maths, date/time segment fields               | Apache-2.0 | Adobe                                                                                            |
+| `react-aria-components`                            | Tree, colour picker                                                        | Apache-2.0 | Adobe; fills Radix gaps (§4 step 3)                                                              |
 | `embla-carousel-react`                             | Carousel                                                                   | MIT        | shadcn `carousel`                                                                                |
-| `react-hook-form`                                  | Form state                                                                 | MIT        |                                                                                                  |
 | `@tanstack/react-table`, `@tanstack/react-virtual` | Tables, data grid, virtualised lists                                       | MIT        |                                                                                                  |
-| `@tanstack/react-query`                            | API select caching and de-duplication                                      | MIT        | R16.5                                                                                            |
 | `@dnd-kit/react`, `@dnd-kit/helpers`               | Drag and drop (kanban, sortable lists, row reordering) with touch sensors  | MIT        | The maintained successor of `@dnd-kit/core`                                                      |
 | `@dnd-kit/dom`                                     | dnd-kit's `Accessibility` plugin, configured with translated announcements | MIT        | Already installed by `@dnd-kit/react`; imported directly so drag announcements follow the locale |
 | `react-phone-number-input`                         | Phone input (libphonenumber)                                               | MIT        | Default region MV                                                                                |
 | `@sindresorhus/slugify`                            | Slug generator                                                             | MIT        |                                                                                                  |
 | `uqr`                                              | QR code encoding for `QrCode` (media entry); Onu renders the SVG           | MIT        | unjs; zero-dep, typed. Picked over `qrcode` (Node deps), `qrcode-generator` (stale)              |
 
+## Peers (core)
+
+`react-hook-form` (form state, MIT) and `@tanstack/react-query` (API select caching and de-duplication, R16.5, MIT) are required peers, alongside `react` and `react-dom`. Onu reads their React context, so the app and Onu must resolve the same copy. They stay required because the core entry imports them statically.
+
 ## Optional peers (entry points)
 
 | Entry                             | Packages                                                                                                                                                                                                                                                     | Licence                                                         |
 | --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------- |
 | `@javaabu/onu/charts`             | `recharts`                                                                                                                                                                                                                                                   | MIT                                                             |
 | `@javaabu/onu/maps`               | `@vis.gl/react-google-maps`, `terra-draw`, `terra-draw-google-maps-adapter`, `@googlemaps/markerclusterer`, `@deck.gl/core`, `@deck.gl/layers`, `@deck.gl/aggregation-layers`, `@deck.gl/google-maps`, `@turf/turf`                                          | MIT / Apache-2.0                                                |
-| `@javaabu/onu/editor`             | `@tiptap/core`, `@tiptap/react`, `@tiptap/pm`, `@tiptap/starter-kit`, `@tiptap/static-renderer`, `@tiptap/suggestion` (slash menu), `@tiptap/extension-*` (MIT packages only), `lowlight`, `shiki`                                                           | MIT                                                             |
+| `@javaabu/onu/editor`             | `@tiptap/core`, `@tiptap/react`, `@tiptap/pm`, `@tiptap/starter-kit`, `@tiptap/static-renderer`, `@tiptap/suggestion` (slash menu), `@tiptap/extension-*` (MIT packages only), `shiki`                                                                       | MIT                                                             |
 | `@javaabu/onu/calendar`           | `@fullcalendar/core`, `@fullcalendar/react`, `@fullcalendar/daygrid`, `@fullcalendar/timegrid`, `@fullcalendar/list`, `@fullcalendar/interaction` (standard plugins only, v6)                                                                                | MIT                                                             |
 | `@javaabu/onu/media`              | `react-easy-crop`, `signature_pad`, `barcode-detector`, `yet-another-react-lightbox`, `media-chrome`                                                                                                                                                         | MIT                                                             |
 | `@javaabu/onu/export`             | `write-excel-file` (Excel `.xlsx` only; CSV and PDF need nothing). Loaded with `import()` on the first Excel export. Chosen over the npm `xlsx` (SheetJS) package, whose npm release is outdated; supports right-to-left sheets and keeps Thaana text intact | MIT                                                             |