ucode 0.3.3 → 0.4.0

data/TODO.extract-code-chart/07-codechart-cli.md

@@ -1,135 +0,0 @@
-# TODO 07 — CodeChart CLI
-
-## Status
-
-Pending. Depends on TODO 06 (Writer), TODO 04 (Extractor),
-TODO 02 (block name resolver).
-
-## Goal
-
-`ucode code-chart fetch | extract | list` — the REQ (R4) commands.
-Thin Thor wrappers that delegate to the existing `CodeChart::*`
-modules. No orchestration logic in the CLI; every command is a
-single delegation.
-
-## Files
-
-- `lib/ucode/cli.rb` — add the `CodeChartCmd` Thor subcommand class.
-- `spec/ucode/cli_spec.rb` (extend existing) — verify the new
-  subcommand wires up.
-
-## Design
-
-### Subcommand shape
-
-```ruby
-class Cli < Thor
-  # …existing commands…
-
-  class CodeChartCmd < Thor
-    desc "fetch --block BLOCK", "Download the Code Charts PDF for a block"
-    option :block, type: :string, required: true,
-                  desc: "Block identifier (e.g. Sidetic)"
-    def fetch
-      puts JSON.pretty_generate(
-        Commands::FetchCommand.new.fetch_charts(
-          VersionResolver.resolve(nil),
-          block_first_cps: [block_first_cp!(options[:block])],
-        ),
-      )
-    end
-
-    desc "extract --block BLOCK --to DIR", "Extract per-codepoint SVG + provenance sidecars"
-    option :block, type: :string, required: true,
-                  desc: "Block identifier (e.g. Sidetic)"
-    option :to, type: :string, required: true,
-                desc: "Output directory"
-    def extract
-      # ...
-    end
-
-    desc "list", "List blocks that have Code Charts PDFs available locally"
-    def list
-      # ...
-    end
-  end
-
-  desc "code-chart", "Extract per-codepoint SVG glyphs from Unicode Code Charts PDFs"
-  subcommand "code-chart", CodeChartCmd
-end
-```
-
-### `extract` flow
-
-```ruby
-def extract
-  Ucode::Commands::FetchCommand.new.fetch_charts(
-    VersionResolver.resolve(nil),
-    block_first_cps: [block_first_cp!(options[:block])],
-  )
-  blocks_txt = Ucode::Cache.ucd_dir(VersionResolver.resolve(nil)).join("Blocks.txt")
-  block = Parsers::Blocks.find_by_name(blocks_txt, options[:block]) or
-    raise Thor::Error, "Unknown block: #{options[:block].inspect}"
-  pdf = Ucode::Glyphs::PdfFetcher.new(
-    VersionResolver.resolve(nil),
-    monolith_path: nil,
-    blocks: [block],
-  ).fetch(block_first_cp: block.range_first, force: false) or
-    raise Thor::Error, "PDF unavailable for block #{options[:block]}"
-
-  writer = Ucode::CodeChart::Writer.new(
-    output_root: Pathname.new(options[:to]),
-    pdf_path: pdf,
-    blocks_txt: blocks_txt,
-  )
-  summary = writer.write(block)
-  puts JSON.pretty_generate(summary.to_h.compact)
-end
-
-def block_first_cp!(block_id)
-  cache = Ucode::Cache.ucd_dir(VersionResolver.resolve(nil))
-  block = Ucode::Parsers::Blocks.find_by_name(cache.join("Blocks.txt"), block_id)
-  raise Thor::Error, "Unknown block: #{block_id.inspect}" unless block
-  block.range_first
-end
-```
-
-### Why `Ucode::Commands::FetchCommand.new.fetch_charts` for fetch
-
-`fetch_charts` is the existing CLI hook for "download a Code Charts
-PDF for these block first-cps." We just call it with the block's
-first cp. Reuse, don't reimplement.
-
-### Why resolve version once at the top of `extract`
-
-Per Candidate 4 of the architecture review (`refactor/build-context-resolve-version-once`,
-merged): every CLI method resolves the version once and threads it
-through. This CLI method does the same — one call per invocation.
-
-### Why no separate `Commands::CodeChartCommand` class
-
-Following the existing pattern (e.g. `Cli::Audit` calls
-`Commands::Audit::*Command` *only* when the logic is non-trivial).
-The CodeChart commands are trivial delegations — a one-liner each.
-The CLI methods call `CodeChart::Writer` and `CodeChart::Extractor`
-directly. Adding a `Commands::CodeChartCommand` class would be
-indirection without a payoff.
-
-If the extract logic grows (e.g. progress reporting, partial
-extraction), extract it into a Command class at that point.
-
-## Acceptance
-
-- `ucode code-chart fetch --block Sidetic` downloads the PDF.
-- `ucode code-chart extract --block Sidetic --to /tmp/s/` extracts
-  to the given directory.
-- `ucode code-chart list` prints available blocks.
-- Unknown block names produce a clean error, not a stack trace.
-- The CLI matches the REQ's signature exactly.
-
-## Out of scope
-
-- `--version` flag (the REQ doesn't specify, and existing commands
-  default to the configured version).
-- `--format svg|glif` (the REQ specifies SVG; `.glif` output is a
-  future extension).

data/TODO.extract-code-chart/08-specs.md

@@ -1,87 +0,0 @@
-# TODO 08 — CodeChart specs
-
-## Status
-
-Pending. Depends on TODOs 01–07.
-
-## Goal
-
-Comprehensive spec coverage for every new module. Per the project
-rules: real model instances (no doubles), tight focused tests,
-behavior assertions (not interaction counts).
-
-## Files
-
-Already enumerated per TODO. Final spec coverage:
-
-- `spec/ucode/fetch/code_charts_spec.rb` — happy path + HTTP 4xx +
-  wrong content-type + non-PDF body. (TODO 01)
-- `spec/ucode/parsers/blocks_spec.rb` (extend) — `find_by_name`
-  happy path + nil on miss. (TODO 02)
-- `spec/ucode/code_chart/extractor_spec.rb` — constructor invariants,
-  Resolver wiring, integration test against fixture PDF. (TODO 04)
-- `spec/ucode/code_chart/provenance_spec.rb` — value object
-  construction + `to_h` schema. (TODO 05)
-- `spec/ucode/code_chart/sidecar_spec.rb` — write sidecar, idempotent
-  re-write. (TODO 05)
-- `spec/ucode/code_chart/writer_spec.rb` — full lifecycle:
-  extract → write → summary. Idempotent re-run produces byte-identical
-  files. (TODO 06)
-- `spec/ucode/cli_spec.rb` (extend) — verify `ucode code-chart fetch`,
-  `extract`, `list` wire up. (TODO 07)
-
-## Design
-
-### Fixture strategy
-
-The existing `spec/fixtures/pdfs/basic_latin.pdf` is the only PDF
-fixture in the repo. It's tiny and validates the integration path.
-The Sidetic + Egyptian Ext-B PDFs are large (whole-block) and would
-inflate the repo. The integration spec uses `basic_latin.pdf` to
-exercise the full pipeline; per-codepoint assertions cover
-representative cases.
-
-If Sidetic-specific behavior must be tested, a smaller fixture PDF
-cropped to ~5 codepoints would be the right tool — out of scope for
-this TODO.
-
-### No doubles policy
-
-The project's `~/.claude/CLAUDE.md` rule: no doubles. All specs use
-real instances:
-- `Ucode::Models::Block.new(...)` for test blocks.
-- A temp directory + real `Blocks.txt` text for parser specs.
-- The real `Ucode::Glyphs::Resolver` for extractor specs.
-
-### Idempotency assertion pattern
-
-`Writer#write` idempotency is asserted via byte-equality:
-
-```ruby
-first_run  = writer.write(block)
-first_size = File.stat(svg_path).size
-sleep 0.01  # ensure mtime changes would be detectable
-second_run = writer.write(block)
-second_size = File.stat(svg_path).size
-expect(second_size).to eq(first_size)
-expect(File.read(svg_path)).to eq(expected_svg_bytes)
-```
-
-This is the existing pattern from `spec/ucode/repo/aggregate_writer_spec.rb`
-(idiempotency spec there). Reuse.
-
-## Acceptance
-
-- `bundle exec rspec spec/ucode/code_chart/ spec/ucode/fetch/code_charts_spec.rb spec/ucode/parsers/blocks_spec.rb`
-  passes 100%.
-- Coverage for the new files is ≥ 95% (per the project's per-file
-  floor of 30% + the overall 80% minimum).
-- No doubles are introduced (verify with `grep -r "double(" spec/ucode/code_chart/`).
-- The integration spec exercises both the Extractor and Writer
-  together end-to-end.
-
-## Out of scope
-
-- Performance benchmarks — separate concern.
-- Sidetic-specific fixtures — requires PDF curation beyond the
-  scope of this feature.

data/TODO.full/00-README.md

@@ -1,116 +0,0 @@
-# TODO.full — Master plan: panglyph + ucode release + fontisan cleanup + full pipeline
-
-This is the **shipping plan** for the full Fontist Unicode 17 stack:
-
-1. **ucode** — Unicode data + audit tool + universal glyph set (SVGs)
-2. **panglyph** (NEW) — assembles ucode's universal set into a single redistributable font
-3. **fontisan** — slim font parsing + WOFF conversion library (audit + UCD removed)
-4. **fontist-archive-private** — CI matrix runs ucode audit + fontisan convert per formula
-5. **fontist-archive-public** — public artifacts: `coverage/` + `woff/` + `unicode/` + `panglyph/`
-6. **fontist.org** — per-font unicode browser using WOFF (open-license) + ucode audit (all)
-
-The plan below covers everything that remains after TODO.new/ (which built the
-infrastructure). TODO.full/ is about wiring it all into a shippable product.
-
-## Directives from user
-
-- **D0** — Define + build "Fontist universal glyph set for Unicode 17" as a
-  single font, in a new repo `panglyph`. Uses fontisan to extract outlines
-  from source fonts, assembles into one redistributable font file.
-- **D1** — Publish ucode as a patch release (0.1.0 → 0.1.1).
-- **D2** — Clean up fontisan: remove `AuditCommand` and UCD/UCDXML
-  subsystems (now in ucode). Keep: font parsing primitives, ConvertCommand.
-- **D3** — Wire `fontist-archive-private` to use fontisan (WOFF) + ucode
-  (audit) for ALL fonts. Wire `fontist-archive-public` to host all artifacts.
-- **D4** — Update fontist.org to consume fontist-archive-public: render
-  per-font glyphs from WOFF (open-license), show per-font coverage from
-  ucode audit (all fonts).
-
-## File index
-
-### Foundation
-
-- [01 — Panglyph vision: what the universal font is, why it exists](01-panglyph-vision.md)
-- [02 — Panglyph repo bootstrap (gem skeleton, CLI, CI)](02-panglyph-repo-bootstrap.md)
-- [03 — Panglyph font builder (outline extract + assemble + write)](03-panglyph-font-builder.md)
-- [04 — Panglyph publish pipeline (release artifacts to fontist-archive-public)](04-panglyph-publish-pipeline.md)
-
-### Releases
-
-- [05 — ucode 0.1.1 patch release](05-ucode-0-1-1-release.md)
-
-### Cleanup
-
-- [06 — fontisan: remove AuditCommand (and audit/ namespace)](06-fontisan-remove-audit.md)
-- [07 — fontisan: remove UCD/UCDXML subsystem](07-fontisan-remove-ucd.md)
-
-### Pipeline
-
-- [08 — fontist-archive-private bin/build uses ucode audit + fontisan convert](08-archive-private-bin-build.md)
-- [09 — fontist-archive-public structure: unicode/ + panglyph/ + coverage/ + woff/](09-archive-public-structure.md)
-
-### Consumer
-
-- [10 — fontist.org: per-font WOFF glyph rendering (open-license)](10-fontist-org-woff-glyphs.md)
-- [11 — fontist.org: per-font ucode audit rendering (ALL fonts)](11-fontist-org-audit-coverage.md)
-
-### Sequencing
-
-- [12 — Implementation order (all directives)](12-implementation-order.md)
-
-## Critical path (high-level)
-
-```
-                ┌──────────────────────────────────┐
-                │  05 ucode 0.1.1 patch release    │  ← unblocks all downstream
-                └──────────────┬───────────────────┘
-                               │
-                ┌──────────────┴───────────────────┐
-                │                                  │
-                ▼                                  ▼
-   ┌────────────────────────┐         ┌────────────────────────┐
-   │  06 fontisan audit     │         │  01–04 panglyph        │
-   │     removal            │         │     (new repo)         │
-   │  07 fontisan UCD       │         └────────────┬───────────┘
-   │     removal            │                      │
-   └────────────┬───────────┘                      │
-                │                                  │
-                ▼                                  │
-   ┌────────────────────────┐                      │
-   │  08 archive-private    │                      │
-   │     bin/build refactor │                      │
-   └────────────┬───────────┘                      │
-                │                                  │
-                ▼                                  ▼
-   ┌────────────────────────┐         ┌────────────────────────┐
-   │  09 archive-public     │◄────────┤  04 panglyph publish   │
-   │     structure          │         │     to archive-public  │
-   └────────────┬───────────┘         └────────────────────────┘
-                │
-                ▼
-   ┌────────────────────────┐
-   │  10 fontist.org WOFF   │
-   │  11 fontist.org audit  │
-   └────────────────────────┘
-```
-
-## Repositories involved
-
-| Repo | Role | Branch / state |
-|---|---|---|
-| `fontist/ucode` | Unicode data + audit tool + universal glyph set | `fix/fontist-consumer-canonical-path` (PR #43) |
-| `fontist/panglyph` (NEW) | Universal font assembler | not yet created |
-| `fontist/fontisan` | Font parser + WOFF converter | `fix/ucdxml-real-shape-parsing` (cleanup target) |
-| `fontist/fontist-archive-private` | CI build env (per-formula) | main (uses old fontisan AuditCommand) |
-| `fontist/fontist-archive-public` | Public artifacts | main (no unicode/ or panglyph/ yet) |
-| `fontist/fontist.github.io` | Consumer site | `fix/unicode-char-page-fields` (PR #45) |
-
-## Conventions
-
-- **PR-per-TODO** unless tightly coupled.
-- **Merging requires explicit user authorization per PR.**
-- **Never push tags directly.** Tag + `rake release` only after explicit user sign-off.
-- **No AI attribution** in commits, PRs, or release notes.
-- **Original block names verbatim** (`CJK_Ext_A`, never slugified) in source data.
-- **Vector-only glyph extraction.** No OCR.
-- Branch naming: `<repo-scope>/<track-slug>` (e.g. `audit/remove-audit-command`).

data/TODO.full/01-panglyph-vision.md

@@ -1,112 +0,0 @@
-# 01 — Panglyph vision: the Fontist universal Unicode 17 font
-
-## What it is
-
-**panglyph** is a single redistributable font file that covers every
-assigned Unicode 17.0 codepoint (~299,382 glyphs). It's the **materialized
-form of ucode's universal glyph set**: where ucode produces one SVG per
-codepoint (sourced from Tier 1 fonts via fontisan), panglyph assembles
-those outlines into one OpenType/TrueType font that any application can
-install and use as a Unicode 17 fallback.
-
-Think "Noto Sans for everything" — except:
-- Sourced from many Tier 1 fonts (Noto family + FSung for CJK, Lentariso
-  for Sidetic, Kedebideri for Beria Erfe, NotoSerifTaiYo, UniHieroglyphica,
-  Egyptian Text, Symbola, BabelStone, etc.)
-- One font file, multiple script sources
-- Built reproducibly from ucode's per-block coverage matrix (TODO 32 in
-  TODO.new/)
-- Open License (OFL for the assembled font, matching source licenses)
-
-## Why it exists
-
-Today, no single font covers Unicode 17. Noto Sans comes closest but
-misses:
-- Rare UC17 additions (Sidetic, Beria Erfe, Tolong Siki, Tai Yo)
-- Egyptian Hieroglyphs Extended-B (needs UniHieroglyphica v16)
-- CJK Extension J (needs FSung)
-- Symbols for Legacy Computing Supplement (needs BabelStone)
-
-Users who want "Unicode 17 everywhere" must install 10+ fonts. panglyph
-collapses that to one.
-
-## Use cases
-
-1. **Browser fallback.** Browsers can be configured to use panglyph as
-   the last-resort font. Any codepoint not covered by the active font
-   gets panglyph's outline instead of tofu.
-2. **OS-level Unicode 17 coverage.** Install once, every app gets full
-   Unicode 17 rendering.
-3. **Print/PDF embedding.** Designers can embed a single font for any
-   Unicode 17 text.
-4. **Search/indexing tools.** Text extraction tools that need glyph
-   recognition for rare scripts get a uniform source.
-5. **Fontist.org specimen rendering.** When fontist.org shows a char
-   that the active font misses, fall back to panglyph instead of tofu.
-
-## What it is NOT
-
-- **Not a replacement for source fonts.** panglyph is a fallback. Active
-  fonts (the user's chosen Noto Sans, FSung, etc.) take priority.
-- **Not a font designer's tool.** It's a redistribution mechanism.
-- **Not a copy of Noto.** Different sources, different coverage policy.
-- **Not color emoji.** Vector outlines only (same as ucode's universal
-  glyph set). Color emoji would need a separate TODO.
-
-## Source policy
-
-panglyph is assembled from ucode's universal-set manifest
-(`output/universal_glyph_set/manifest.json`). For each codepoint:
-
-1. Look up the Tier 1 source font (per `config/unicode17_universal_glyph_set.yml`)
-2. Open the source font via fontisan
-3. Extract the glyf outline (or CFF charstring for OTF) for the codepoint's GID
-4. Copy the outline into panglyph's glyf table at the same GID
-
-Tier 2 (PDF-embedded extraction via correlate-v4 generalization) and
-Tier 3 (Last Resort tofu) are fallbacks when Tier 1 is unavailable.
-Tier 3 produces the recognizable "box with codepoint hex label" glyph
-familiar from Last Resort Font.
-
-## Licensing
-
-panglyph's assembled font is **OFL**. Every source font in the universal
-set must be OFL (or compatible — Apache, MIT, BSD, CC0, UFL, Bitstream,
-GUST, CC-BY). Specialist fonts with proprietary licenses cannot be
-included; their codepoints fall back to pillar 2 or pillar 3.
-
-This is enforced at ucode's universal-set pre-check (TODO 35 in TODO.new/).
-
-## Output formats
-
-| Format | Purpose |
-|---|---|
-| `panglyph-unicode17.ttf` | Installable system font (largest compatibility) |
-| `panglyph-unicode17.woff2` | Web font (smaller, used by fontist.org) |
-| `panglyph-unicode17.otf` | CFF-based variant (smaller for CJK-heavy ranges) |
-
-All three are produced by the build pipeline.
-
-## Versioning
-
-- **`panglyph-unicode17-17.0.0.ofl`** — pinned to UCD 17.0.0
-- **`panglyph-unicode17-17.0.1.ofl`** — patch release (e.g. fixed an
-  extraction bug); same Unicode data, regenerated glyphs
-- **`panglyph-unicode17-17.1.0.ofl`** — minor (new Tier 1 fonts added)
-- **`panglyph-unicode18-18.0.0.ofl`** — major (UCD 18 baseline)
-
-The first version tag is `v17.0.0` to match UCD.
-
-## Deliverables
-
-- One redistributable font file (TTF + WOFF2 + OTF)
-- A SHA-256 manifest of source contributions (provenance)
-- An OFL license file
-- A coverage report (per-block % sourced from Tier 1 / Pillar 2 / Pillar 3)
-
-## References
-
-- [TODO.new/32](../TODO.new/32-uc17-coverage-matrix.md) — Tier 1 source policy
-- [TODO.new/35](../TODO.new/35-universal-set-production-run.md) — universal-set SVGs (panglyph input)
-- [TODO.full/02](02-panglyph-repo-bootstrap.md) — repo skeleton
-- [TODO.full/03](03-panglyph-font-builder.md) — build implementation

data/TODO.full/02-panglyph-repo-bootstrap.md

@@ -1,184 +0,0 @@
-# 02 — Panglyph repo bootstrap
-
-## Goal
-
-Create the `fontist/panglyph` repository skeleton: gem structure, CLI
-entry point, CI workflow, README. No build logic yet (that's TODO 03) —
-just the scaffold that lets development proceed.
-
-## Why a separate repo
-
-panglyph consumes ucode's universal set as INPUT and produces a font
-as OUTPUT. The assembly logic (fontisan outline extraction + font
-writing + OFL packaging) is a distinct concern from ucode's Unicode
-data + audit work.
-
-Separation keeps:
-- ucode focused on Unicode data + audit
-- panglyph focused on font assembly
-- fontisan focused on parsing + conversion primitives
-
-## Repository structure
-
-```
-panglyph/
-├── README.md                          # what panglyph is, how to build
-├── LICENSE                            # OFL for the assembled font
-├── CHANGELOG.md                       # version history
-├── Gemfile                            # dev deps
-├── panglyph.gemspec                   # gem metadata
-├── lib/
-│   ├── panglyph.rb                    # top-level namespace + autoloads
-│   └── panglyph/
-│       ├── version.rb                 # VERSION = "17.0.0"
-│       ├── cli.rb                     # Thor CLI entry point
-│       ├── builder.rb                 # orchestrates the full build
-│       ├── outline_extractor.rb       # extracts glyf/CFF outline via fontisan
-│       ├── font_assembler.rb          # assembles outlines into a font
-│       ├── woff2_writer.rb            # converts TTF → WOFF2 (via fontisan)
-│       ├── manifest_reader.rb         # reads ucode's universal-set manifest
-│       ├── coverage_report.rb         # emits per-block source breakdown
-│       └── publisher.rb               # pushes artifacts to fontist-archive-public
-├── exe/
-│   └── panglyph                       # CLI executable
-├── spec/
-│   ├── spec_helper.rb
-│   └── panglyph/
-│       ├── builder_spec.rb
-│       ├── outline_extractor_spec.rb
-│       └── ...
-├── data/
-│   └── OFL.txt                        # OFL license template
-├── docs/
-│   ├── architecture.md                # build pipeline reference
-│   └── coverage-policy.md             # which fonts cover which blocks
-└── .github/
-    └── workflows/
-        └── build.yml                  # CI: build panglyph on tag push
-```
-
-## CLI surface
-
-```
-$ panglyph --help
-panglyph commands:
-  panglyph build [UCD_VERSION]      # Build panglyph-unicode<version>.<ext>
-  panglyph help [COMMAND]           # Describe subcommands
-  panglyph manifest [UCD_VERSION]   # Print source contributions manifest
-  panglyph publish [VERSION]        # Publish built artifacts to archive-public
-  panglyph validate [FONT_PATH]     # Verify the built font against the universal set
-  panglyph version                  # Print panglyph version
-```
-
-### `panglyph build`
-
-```
-$ panglyph build 17.0.0
-→ reads ucode's universal-set manifest (must already be built)
-→ for each codepoint: extracts outline from the Tier 1 source font
-→ assembles outlines into a TTF in memory
-→ writes panglyph-unicode17-17.0.0.ttf
-→ converts to panglyph-unicode17-17.0.0.woff2
-→ emits coverage-report.json (per-block source breakdown)
-```
-
-### `panglyph validate`
-
-```
-$ panglyph validate panglyph-unicode17-17.0.0.ttf
-→ cmap-walks the built font
-→ compares against ucode's universal-set codepoint list
-→ reports: 299382 codepoints, 297415 covered (99.3%), 1967 missing
-→ lists missing codepoints with their Tier 1 source (so the build can be fixed)
-```
-
-### `panglyph publish`
-
-```
-$ panglyph publish 17.0.0
-→ clones fontist-archive-public (shallow)
-→ copies panglyph-unicode17-17.0.0.{ttf,woff2} to archive-public/panglyph/
-→ updates archive-public/panglyph/manifest.json
-→ commits + pushes via GHA bot token
-```
-
-## Dependencies
-
-```ruby
-# panglyph.gemspec
-spec.add_dependency "fontisan", "~> 0.3"   # font parsing + writing primitives
-spec.add_dependency "ucode", "~> 0.1"      # universal-set manifest reader
-spec.add_dependency "thor", "~> 1.3"       # CLI
-spec.add_dependency "json", "~> 2.0"
-spec.add_dependency "rubyzip", "~> 2.3"    # OFL packaging
-```
-
-fontisan needs font-WRITING primitives added (it currently only reads +
-converts). TODO 03 lists what fontisan needs to expose.
-
-## CI workflow
-
-`.github/workflows/build.yml`:
-
-```yaml
-name: Build panglyph
-
-on:
-  push:
-    tags: ['v*']
-  workflow_dispatch:
-    inputs:
-      ucd_version:
-        description: 'UCD version to build (e.g. 17.0.0)'
-        required: true
-        default: '17.0.0'
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: '3.4'
-          bundler-cache: true
-      - name: Fetch ucode universal set
-        run: |
-          git clone --depth 1 https://github.com/fontist/ucode ucode-repo
-          cd ucode-repo && bundle exec ucode universal-set build ${{ inputs.ucd_version }}
-          tar czf /tmp/universal-set.tar.gz output/universal_glyph_set/
-      - name: Build panglyph
-        run: |
-          bundle exec panglyph build ${{ inputs.ucd_version }} \
-            --universal-set=/tmp/universal-set.tar.gz
-      - name: Validate
-        run: bundle exec panglyph validate panglyph-unicode*.ttf
-      - name: Publish to fontist-archive-public
-        env:
-          GH_TOKEN: ${{ secrets.ARCHIVE_PUBLIC_BOT_TOKEN }}
-        run: bundle exec panglyph publish ${{ inputs.ucd_version }}
-      - uses: actions/upload-artifact@v4
-        with:
-          name: panglyph-${{ inputs.ucd_version }}
-          path: |
-            panglyph-unicode17-*.ttf
-            panglyph-unicode17-*.woff2
-            coverage-report.json
-```
-
-## Acceptance
-
-- [ ] `fontist/panglyph` repo exists
-- [ ] README.md explains what panglyph is + how to build (per TODO 01)
-- [ ] LICENSE is OFL
-- [ ] `bundle exec panglyph version` prints `17.0.0`
-- [ ] `bundle exec panglyph --help` lists build/manifest/publish/validate
-- [ ] CI workflow file exists and is syntactically valid
-- [ ] One trivial spec passes (`spec/panglyph/version_spec.rb`)
-- [ ] Repo is public
-
-## References
-
-- [TODO 01](01-panglyph-vision.md) — vision
-- [TODO 03](03-panglyph-font-builder.md) — build implementation
-- [TODO.new/35](../TODO.new/35-universal-set-production-run.md) — input format