# CSS data sources

Generation uses exact-pinned inputs from the root [package manifest](../package.json):

| Dataset | Version | Role |
| --- | --- | --- |
| `@webref/css` | 8.7.8 | Standards definitions and CSS grammars |
| `@mdn/browser-compat-data` | 8.1.7 | Compatibility annotations |
| `css-tree` | 3.2.1 | Generation-only definition-syntax parsing |

Generated MoonBit sources are committed; consuming the library does not require
dataset downloads, Babel, or network access for generation.

## Reviewed surface

`src/properties/property-api.json` schema v17 is the classification
layer. The generator derives IR spellings from WebRef `styleDeclaration`, rejects
non-standard/deprecated sources or atomic properties, and generates declarations,
fluent Rule/Frame methods, source-aware Clear methods, root value exports,
exact contract methods, metadata and exhaustive coverage.

| Coverage | Count |
| --- | --- |
| WebRef properties | 822 |
| Typed properties | 386 |
| Unsupported grammar | 196 |
| Unsafe-only | 233 |
| Deprecated | 7 |

The typed surface covers primitives, keyword enums, composites, themes, paint,
and named page selection. Scalar profile `stable-scalar-v2` contains 54 primitives, 60 keyword enums,
nine property references and six reviewed logical-size adapters.

The logical-size methods retain Length inputs although WebRef uses `<box-size>`.
Their adapter checks normalized property/named-type ASTs and records a
`grammarReviewDigest`; drift requires review. It excludes `anchor-size()`,
`calc-size()` and `stretch()` rather than widening the parser automatically.
`font-width` uses Percentage with finite, non-negative constraints across
literals, defaults, theme overrides and dynamic values. `text-decoration-inset`
is a reviewed scalar entry with `<length-percentage>{1,2} | auto` grammar.

The `stable-border-composite-v1` profile resolves property/type/function references
into content-addressed grammar closures. Its typed subset excludes `hairline`,
slash-separated single-corner radii and `image-1D`. Full shorthand radius lists
have their own reviewed API. Other modern opaque adapters keep their separate
review boundary. A standards grammar or browser annotation alone does not create
a safe MoonBit API.

## Generation and oracle isolation

```bash
vp run generate
vp run check-generated
```

Ordinary generation validates the committed semantic lock's schema, profile,
options, input digest and semantic digest, then renders its MoonBit table.
It does not execute Babel or refresh upstream observations. A stale/missing
lock fails with explicit maintenance instructions.

The test-only oracle is published StyleX 0.19.1 at recorded source commit
`1fcb9a51cbecad2c82255e0f4b45cc072fa1a95a`. Semantic-lock schema v4 separates raw
upstream observations from `font-aliases-v1` under
`stylex-0.19.1-application-order+font-aliases-v1`. This local extension makes
font-width/stretch share a conflict slot. It is not an upstream parity claim.
See [application order](application-order-semantics.md) and the
[isolated oracle guide](../tools/stylex-oracle/README.md).

## Updating inputs

1. Update exact dataset pins and the frozen lockfile. Review the grammar and
   browser-data changes, including unsupported and unsafe-only classifications.
2. Run `vp exec node tools/generate-properties.mjs`; inspect generated APIs,
   reviewed grammar digests, metadata and coverage. Never edit generated output.
3. Install the independent oracle with `vp run install-oracle`, then run
   `vp run refresh-oracle`. Review the lock and generated table. Refresh validates
   the installed compiler contract and can repair a stale lock; the separate
   `vp run check-stylex-release` requires a valid committed lock.
4. Re-extract leaf component bundles, update source dependency references, then
   run `vp run generate`. This repository's synthetic fixtures use
   `vp exec node validation/tests/dependency-fixtures/refresh.mjs --write`; follow their
   [maintenance guide](../validation/tests/dependency-fixtures/README.md).
5. Run deterministic generation checks, compile-fail and cross-backend tests,
   live oracle verification, dependency/license audits, and candidate validation.
   Update current documentation and retain reports identifying the tested source.

Data-source versions participate in semantic identity. Bundles can become stale
even when emitted CSS/classes retain their behavior. Never substitute a new
digest into an incompatible bundle. Follow [regeneration](regeneration.md)
and validate the complete component/application graph.