@adia-ai/adia-ui-forge 0.8.26 → 0.8.27

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "adia-ui-kit-forge",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Maintain the adia-ui (@adia-ai) framework itself \u2014 author primitives and shells, run the A2UI generation pipeline and its corpus, review gen-UI quality, sweep QA, cut releases, deploy. The maintainer counterpart to adia-factory (the consumer/app-author plugin).",
   "author": {
     "name": "Kim",

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog — adia-ui-kit-forge
 
+## [0.8.27] — 2026-08-05
+
+### Changed
+- **Agent seats pin explicit models** — no seat rides the caller's tier (gh#618, PR #620).
+- Release tooling: Step 4d.5 regenerates the derived genui catalog post-bump (gh#617, PR #619); publish workflows for `@adia-ai/agent`/`@adia-ai/persona` with tag↔manifest guards (v0.8.26 recovery, PR #624); `tag-lockstep` selftest derives its count from the roster.
+
+### Maintenance
+- **`.claude-plugin/plugin.json` version bump** — moves in lockstep with package.json (the `/plugin update` cache key).
+- **`agents/` touched in this release window** (3 file(s), e.g. `agents/a2ui-builder.md`) — carried by the entries above.
+- **`skills/` touched in this release window** (2 file(s), e.g. `references/cut-procedure.md`) — carried by the entries above.
+
 ## [0.8.26] — 2026-08-05
 
 ### Maintenance

package/agents/a2ui-builder.md

@@ -22,7 +22,10 @@ description: |
 tools: Read, Grep, Glob, Edit, Write, Bash
 skills:
   - adia-a2ui
-model: inherit
+# Explicit pin (gh#618): never `inherit` — a Fable/planning caller would
+# silently run this seat's pipeline-tuning and eval-diagnosis work on the
+# caller's tier. Coding/execution seat → opus.
+model: opus
 ---
 
 The a2ui-builder works the pipeline to the preloaded `adia-a2ui` procedure:

package/agents/framework-reviewer.md

@@ -21,7 +21,10 @@ tools: Read, Grep, Glob, Bash
 skills:
   - adia-dogfood
   - adia-gen-review
-model: inherit
+# Explicit pin (gh#618): a review/critic seat's verdict must not depend on
+# the caller's model tier — never `inherit`. Sonnet matches the
+# component-author precedent for framework-surface work.
+model: sonnet
 ---
 
 The framework-reviewer runs the preloaded sweep and review procedures and

package/agents/release-builder.md

@@ -22,7 +22,10 @@ description: |
 tools: Read, Grep, Glob, Edit, Write, Bash
 skills:
   - adia-release
-model: inherit
+# Explicit pin (gh#618): never `inherit` — this seat runs UNATTENDED cuts,
+# where a cheap caller tier would make live gate-failure judgment calls
+# with no operator watching. Execution seat with real judgment → opus.
+model: opus
 ---
 
 The release-builder runs the preloaded `adia-release` procedure under its

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adia-ai/adia-ui-forge",
-  "version": "0.8.26",
+  "version": "0.8.27",
   "description": "Maintain the adia-ui (@adia-ai) framework itself \u2014 author primitives and shells, run the A2UI generation pipeline and its corpus, review gen-UI quality, sweep QA, cut releases, deploy. The maintainer counterpart to adia-factory (the consumer/app-author plugin).",
   "keywords": [
     "adia-ui",

package/skills/adia-release/references/cut-procedure.md

@@ -129,6 +129,8 @@ Any red → route via [`gates-catalog.md`](gates-catalog.md); fix at the source,
 
 **4d.** `npm run check:lockstep` → `OK — all packages at X.Y.Z, all internal ranges at ^X.Y.0`.
 
+**4d.5. Regenerate the derived genui catalog** (gh#617): `node scripts/build/derive-genui-catalog.mjs`. Its `catalogId` embeds the lockstep version (`adia.base@X.Y.Z`), so the 4b bump just invalidated `packages/genui/adia-catalog/{base,adia-pack}.json` — regenerated pre-bump (§3.0) or not. The v0.8.26 cut skipped this and `check:genui-catalog` failed in CI one push later. Both files ride the release commit (Step 5 stages them).
+
 **4e. Release docs + team notes** (gated, not optional): review the entry
 files the release touches (root README/CHANGELOG, per-package READMEs —
 content currency is YOUR judgment; the gate only proves presence), then
@@ -165,6 +167,7 @@ section already names, in this order:
 node "${CLAUDE_PLUGIN_ROOT}/skills/adia-release/scripts/bump.mjs" --from X.Y.Z-1 --to X.Y.Z   # 4b
 npm install --package-lock-only --no-audit --no-fund                                          # 4c
 npm run check:lockstep                                                                        # 4d
+node scripts/build/derive-genui-catalog.mjs                                                   # 4d.5 — catalogId carries the bumped version (gh#617)
 node scripts/release/check-release.mjs --pending-version X.Y.Z --fix                          # 4f
 node scripts/release/generate-release-notes.mjs --version X.Y.Z --write                       # 4e
 node scripts/release/check-release-docs.mjs --version X.Y.Z                                   # 4e gate
@@ -187,6 +190,7 @@ git -C "$REPO" checkout -b "release/vX.Y.Z"
 git -C "$REPO" reset HEAD >/dev/null 2>&1
 git -C "$REPO" add package-lock.json packages/*/package.json packages/*/CHANGELOG.md \
   packages/a2ui/*/package.json packages/a2ui/*/CHANGELOG.md \
+  packages/genui/adia-catalog/base.json packages/genui/adia-catalog/adia-pack.json \
   docs/releases/vX.Y.Z.md   # + in-scope source + Step-3.0 regen outputs
 git -C "$REPO" diff --cached --stat | tail -3   # count must match the allowlist
 ```

package/skills/adia-release/scripts/release-pack.mjs

@@ -408,6 +408,13 @@ function step4PromoteAndBump(args) {
   sh('npm install --package-lock-only --no-audit --no-fund', args);
   sh('npm run check:lockstep', args);
 
+  // Step 4d.5 — regenerate the derived genui catalog (gh#617): its catalogId
+  // embeds the lockstep version (`adia.base@X.Y.Z`), so the bump above just
+  // invalidated base.json/adia-pack.json. The v0.8.26 cut skipped this and
+  // check:genui-catalog failed in CI one push later. Step 5 stages both files.
+  console.log('\n  Step 4d.5 — regenerate derived genui catalog (catalogId carries the lockstep version):');
+  sh('node scripts/build/derive-genui-catalog.mjs', args);
+
   // Step 4e — generate docs/releases/vX.Y.Z.md (gh#399: neither this step nor
   // its staging into the release commit existed before — check-cut-hygiene's
   // "notes present" claim (Step 4g, below) went unverified until
@@ -484,6 +491,10 @@ function step5Commit(args) {
     // gh#399: Step 4e generates this but never staged it before — it landed
     // in a second PR after the release commit instead (v0.8.11 cut).
     `docs/releases/v${args.version}.md`,
+    // gh#617: Step 4d.5 regenerates these post-bump (catalogId embeds the
+    // lockstep version); unstaged, check:genui-catalog fails in CI (v0.8.26).
+    'packages/genui/adia-catalog/base.json',
+    'packages/genui/adia-catalog/adia-pack.json',
     ...PACKAGE_ROSTER.flatMap(({ name, dir, plugin }) => {
       // Roster-driven (H3): each package stages its manifest + CHANGELOG;
       // plugins also stage .claude-plugin/plugin.json (the /plugin-update