@adia-ai/adia-ui-forge 0.8.34 → 0.8.35

package/skills/adia-dogfood/references/admin-shell-anatomy.md

@@ -3,8 +3,11 @@
 Script: `scripts/dev/audit-shell-composition.mjs` (repo-local), npm gates
 `audit:shell-composition{,:strict,:all}`. Static AST walk over
 `apps/**/*.html`, `playgrounds/**/*.html`, `catalog/page-shells/**/*.html` —
-no browser needed; pre-commit fast. The script mechanically checks a subset
-(the findings table below); this 13-part list is the full review standard.
+no browser needed; pre-commit fast. The script's own `PARTS` array is the
+mechanical census — it has grown past this list (count it in
+`scripts/dev/audit-shell-composition.mjs`, never from a hand-typed number
+here); this numbered list is the human review standard, and the findings
+table below samples common symptoms rather than the script's full roster.
 Canonical source: the monorepo's `site/index.html` — the markup that renders
 the live admin-dashboard example.
 

package/skills/adia-dogfood/references/app-shell-pitfalls.md

@@ -20,10 +20,17 @@ may stall — wait 30s, re-run.
 | 4 | Top-level `await` without async setup wrap | `[setup-failed]` console error | `export default async function setup(host) { … }` |
 | 5 | Vite import-analysis 500 on dynamic import | `[network-4xx] 500` for `./<name>.contents.js` | add `/* @vite-ignore */` to the dynamic import |
 | 6 | icon-ui not imported despite `<icon-ui>` / `[icon=…]` / icon-rendering composites | `[icon-ui-missing]` | `import "/packages/web-components/components/icon/icon.js"` |
+| 7 | `<admin-page-body>` emitted without its `<admin-page>` ancestor (gh#981) | *(no audit-app-shells.mjs tag — apps/-only script, doesn't sweep this surface)* | wrap in `<admin-page>` — `admin-page > admin-page-body { flex:1; … }` (`admin-shell.bespoke.css:144`) is a direct-child selector; without that literal parent, `admin-page-body` falls back to UA `display:inline` |
 
-Secondary signals: `[collapsed-element]` (registered but 0px tall),
-`[network-4xx]` (typoed stylesheet href, missing contents.html, stale
-`import.meta.url`).
+Secondary signals: `[collapsed-element]` (registered but 0px tall —
+`audit-app-shells.mjs`'s own threshold is <4px, so a shallower-but-still-broken
+collapse won't trip it), `[network-4xx]` (typoed stylesheet href, missing
+contents.html, stale `import.meta.url`). Row 7's specific case (gh#981, in
+`site/site.js`'s router, not swept by this script at all): the 150px isn't
+`admin-page-body`'s own height — it's a *replaced child* (an `<iframe>`)
+whose `height:100%` can't resolve, so it falls back to the browser's
+intrinsic default (300×150). The observable is a body rendering ~150px tall
+with no console error, regardless of real content height.
 
 ## Composite → internal primitives (undiscoverable from the markup)
 

package/skills/adia-dogfood/scripts/analyze.mjs

@@ -571,6 +571,8 @@ function renderReport(results, base) {
   lines.push('4. **Synonym-attr / synonym-slot drift** — markers documented in `.claude/docs/conventions/attribute-api-migration.md`.');
   lines.push('5. **Alert flex-row** — `alert-ui` with multiple bare `<text-ui>` children (need `<col-ui slot="content">` wrap).');
   lines.push('6. **Console** — every `console.error` and `console.warn` during page load + 800ms settling.');
+  lines.push('7. **Missing component CSS** — a rendered `*-ui` element with no resolved `--{prefix}-*` custom property, meaning its per-component stylesheet never loaded (controls render unstyled).');
+  lines.push('8. **Unstyled popover** — an OPEN `[popover]` with transparent background AND zero padding (transparent-host components like `feed-ui` allowlisted).');
   lines.push('');
 
   return lines.join('\n');

package/skills/adia-gen-review/SKILL.md

@@ -35,8 +35,15 @@ directives are findings.
 3. Zero P1 cosmetic findings (overflow entries auto-count as P1) — checked
    mechanically.
 4. Zero RENDER_FAILURE prompts; cycle `status: COMPLETE` — checked
-   mechanically (plus the human-QA block, ≥4/5).
-5. Human QA: 5 sampled prompts, `passCount ≥ 4`.
+   mechanically.
+5. **Human QA is per-sweep, not per-cycle** (spec-factory-dx-ws6-measurement.md
+   REQ-11, gh#1137 — retired from this exit gate 2026-08-12; the per-cycle
+   `humanQA` ledger field never held: null in 12 of 13 rows, and the one
+   populated row still said "gate pending"). The 5-sampled-prompts,
+   `passCount ≥ 4` bar is unchanged, but it now feeds `qa/dx/`'s R1 sweep
+   record (D5's induced-failure sample + D8's gallery term) instead of
+   blocking a single cycle's own exit condition. `gen-review-status.mjs
+   --check-exit` no longer reads `humanQA` off the ledger row.
 
 ## The Gen-Review Scorecard — the per-prompt output contract
 
@@ -182,7 +189,7 @@ map + FAILS/WORKS transpilation pairs:
 | New primitive / native tag in canvas | `TAG_TO_COMPONENT` in the decompose script (`Native*` prefix for natives); coverage-audit must go green |
 | New root-cause code | rubric-score.md table + `scores.schema.json` enum + `schemaVersion` bump |
 | New safe attribute | `ATTR_ALLOWLIST` — static enums only, never freeform-text attrs |
-| Threshold recalibration | rubric-score.md §Thresholds (pass-flip sweep) + the exit gate above |
+| Threshold recalibration | rubric-score.md §Thresholds (pass-flip sweep) + the exit gate above + `EXCELLENCE_THRESHOLD` at `scripts/gen-review-status.mjs:31` — the only mechanical enforcer; skip it and `--check-exit` silently keeps the old floor |
 
 ## Posture
 

package/skills/adia-gen-review/references/loop-protocol.md

@@ -161,12 +161,16 @@ never get fix plans. Reads ONLY the decomposed file.
    skill does not perform the edits.
 3. **Regenerate**: `npm run gallery:generate`; confirm 0 console
    errors/warnings in the canvas output.
-4. **Human QA gate — required for COMPLETE.** Operator reviews 5 random
-   PASSING prompts against: (a) serves the user's task? (b) right primary
-   primitive? (c) would ship unchanged? Record
-   `humanQA.{sampledPrompts,passCount,failCount}`. `failCount ≥ 2` → cycle
-   stays `OPEN`: the thresholds are miscalibrated — recalibrate
-   rubric-score.md §Thresholds against the human judgments.
+4. **Human QA sample — per-sweep, not per-cycle** (retired from this
+   cycle's own COMPLETE gate 2026-08-12, spec-factory-dx-ws6-measurement.md
+   REQ-11, gh#1137). Operator reviews 5 random PASSING prompts against:
+   (a) serves the user's task? (b) right primary primitive? (c) would ship
+   unchanged? Record the result in the next `qa/dx/` sweep record's
+   `humanQA.{sampledPrompts,pass,fail}` (`node scripts/qa/dx-status.mjs`),
+   not on this cycle's ledger row. `failCount ≥ 2` still means the
+   thresholds are miscalibrated — recalibrate rubric-score.md §Thresholds
+   against the human judgments — it just no longer blocks THIS cycle's own
+   `status: COMPLETE`.
 5. **Schema gate** (must exit 0 before touching the ledger):
 
    ```bash
@@ -175,8 +179,11 @@ never get fix plans. Reads ONLY the decomposed file.
 
 6. **Update ledger** (`review/cycle-ledger.json`): `cycleNumber`,
    `completedAt`, `engine`, `status`, `aggregate`
-   (passingCount/failingCount/renderFailureCount/meanScore/Δ), `humanQA`.
-   Remove the `cycle-{N}.lock` sentinel.
+   (passingCount/failingCount/renderFailureCount/meanScore/Δ). `humanQA` is
+   RETIRED from this per-cycle row (step 4) — do not populate it here; a
+   stray value is harmless (ignored) but the field's home is now the
+   per-sweep `qa/dx/sweeps/*.json` record. Remove the `cycle-{N}.lock`
+   sentinel.
 7. **Exit condition**:
 
    ```bash

package/skills/adia-gen-review/references/rubric-score.md

@@ -22,8 +22,11 @@ Max score 105 (D1–D5 at 20 each = 100; D6 mechanical = 0 or +5).
 **Recalibrating** (when human QA contradicts mechanical scores across 2+
 cycles): sweep candidate threshold values and read the pass-flips at each step
 against the human verdicts — never pick a round number by feel. A threshold
-change must also update the exit gate in SKILL.md and the schema comment, and
-new cause codes / dimensions bump `schemaVersion` in
+change must also update the exit gate in SKILL.md AND the
+`EXCELLENCE_THRESHOLD` constant at `scripts/gen-review-status.mjs:31` — that
+constant is the only mechanical enforcer (`--check-exit` reads nothing else;
+the schema carries no threshold), so missing it leaves the old floor silently
+enforced. New cause codes / dimensions bump `schemaVersion` in
 [scores.schema.json](scores.schema.json).
 
 ---

package/skills/adia-gen-review/scripts/gen-review-status.mjs

@@ -17,9 +17,14 @@
  *
  * Exit-condition (from scores.schema.json + SKILL.md §ExitCondition):
  *   - Every prompt PASSING (p1Count = 0 AND rubricScore.score ≥ 92)
- *   - humanQA.passCount ≥ 4 (of 5 sampled)
  *   - No RENDER_FAILURE prompts
  *   - Cycle status = COMPLETE (not OPEN or INTERRUPTED)
+ *
+ * humanQA is RETIRED from this per-cycle exit condition (spec-factory-dx-
+ * ws6-measurement.md REQ-11, gh#1137, 2026-08-12): the per-cycle ledger
+ * field never held (null in 12/13 rows), so it moved to a per-sweep
+ * obligation — `qa/dx/sweeps/*.json`'s `humanQA` field (dx-status.mjs)
+ * reads a 5-prompt sample per sweep instead of per cycle.
  */
 
 import { readFileSync, existsSync } from 'node:fs';
@@ -85,11 +90,8 @@ function checkExitCondition() {
     reasons.push(`Cycle ${latest.cycleNumber} status is "${latest.status}" (need COMPLETE)`);
   }
 
-  if (!latest.humanQA) {
-    reasons.push('Human QA gate not completed (humanQA block missing)');
-  } else if (latest.humanQA.passCount < 4) {
-    reasons.push(`Human QA pass count ${latest.humanQA.passCount}/5 (need ≥ 4)`);
-  }
+  // humanQA is RETIRED from this per-cycle check (REQ-11, gh#1137) — it's a
+  // per-sweep obligation now (qa/dx/sweeps/*.json), not a per-cycle gate.
 
   const agg = latest.aggregate;
   if (agg?.failingCount > 0) {

package/skills/adia-llm-internals/SKILL.md

@@ -25,7 +25,7 @@ Consumers depend on: the `StreamChunk` union, `ChatResult` (`text` / `usage` / `
 
 Three invariants override any cleanup instinct:
 
-1. **NEVER normalize `stopReason`.** Providers emit `end` / `stop` / `max_tokens` / `length` / `MAX_TOKENS` / `tool_use`; the downstream truncation detector reads the raw value. Collapsing to `end` hides truncation — a defect, not a cleanup.
+1. **Never collapse `stopReason` truncation values — and never invent a NEW normalization.** The one sanctioned mapping is OpenAI's own `finish_reason === 'stop'` → `end` (`openai.ts` `parseResponse`; adapter-contract.md §stopReason documents it as correct); everything else propagates raw. Providers emit `end` / `stop` / `max_tokens` / `length` / `MAX_TOKENS` / `tool_use`; the downstream truncation detector reads the raw value, so collapsing `max_tokens`/`length`/`MAX_TOKENS` to `end` hides truncation — a defect, not a cleanup.
 2. **`buildRequest()` is the single source of upstream shape** for direct AND passthrough-proxy mode; the dispatcher swaps only the URL. Never fork it per proxy flavor.
 3. **No real API key reaches the browser on a production host.** The same-origin passthrough proxy injects the key server-side; the sentinel-key + one-shot-warning path in `createAdapter()` must survive any refactor.
 

package/skills/adia-release/SKILL.md

@@ -93,9 +93,9 @@ assumed pass, or "published" without the actual `npm view` output.
 
 ## Mechanization (bundled `scripts/`, stdlib Node, all support `--dry`)
 
-`release-pack.mjs` walks the cycle in two phases per invariant 3 — `--mode cut` / `--mode from-scratch` promote `[Unreleased]` (BOTH modes now — a peer's hand-authored section must be promoted whichever mode cut it, and a loud guard blocks the bump if any roster package still carries non-empty `[Unreleased]` content after promotion), run Step 4f (pre-tag coverage `--fix` with the authoritative F-N1 matcher), and stop at the release commit (PR → merge); `--mode handoff` tags/publishes/deploys from post-merge main. **`--go` is the standard invocation for an operator-initiated release** — the single authorization covers the cycle; evidence blocks print as a log; granular `--yes`/`--push`/`--publish` remain for cautious manual runs (`--push` still refuses to auto-fire past any F-N1 finding). `--mode batch` is not implemented — it hard-rejects with a pointer to [`recovery-paths.md`](references/recovery-paths.md) §Scenario 2 rather than silently misbehaving; a real batch tags each version at its own release-merge SHA, which this single-version orchestrator has no model for. Pre-flight (Step 3) runs the full 24-gate roster from the single shared list in `scripts/gate-roster.mjs` — the same list [`cut-procedure.md`](references/cut-procedure.md) §3.1 transcribes, so a subset run requires editing that one file, not two.
+`release-pack.mjs` walks the cycle in two phases per invariant 3 — `--mode cut` / `--mode from-scratch` promote `[Unreleased]` (BOTH modes now — a peer's hand-authored section must be promoted whichever mode cut it, and a loud guard blocks the bump if any roster package still carries non-empty `[Unreleased]` content after promotion), run Step 4f (pre-tag coverage `--fix` with the authoritative F-N1 matcher), and stop at the release commit (PR → merge); `--mode handoff` tags/publishes/deploys from post-merge main. **`--go` is the standard invocation for an operator-initiated release** — the single authorization covers the cycle; evidence blocks print as a log; granular `--yes`/`--push`/`--publish` remain for cautious manual runs (`--push` still refuses to auto-fire past any F-N1 finding). `--mode batch` is not implemented — it hard-rejects with a pointer to [`recovery-paths.md`](references/recovery-paths.md) §Scenario 2 rather than silently misbehaving; a real batch tags each version at its own release-merge SHA, which this single-version orchestrator has no model for. Pre-flight (Step 3) runs the full 28-gate roster from the single shared list in `scripts/gate-roster.mjs` — the same list [`cut-procedure.md`](references/cut-procedure.md) §3.1 transcribes, so a subset run requires editing that one file, not two.
 
-The pieces are callable alone: `bump.mjs` (version fields + the factory `.mcp.json` a2ui-mcp pin, invariant 8), `promote-unreleased.mjs` / `insert-stub.mjs` (CHANGELOG blocks), `tag-lockstep.mjs` (12 tags, `--delete` to move), `dispatch-publish.mjs` (publish workflows; `--verify-triggered` re-dispatches missing AND dead — cancelled/failed/timed-out — runs, each gated behind an npm-registry check so an already-published version is never re-dispatched (gh#763); `--after` enforces batch ordering — dispatch output states what WAS done, never a to-do phrased as if it hadn't fired), and `pr-bridge.mjs` (the two-phase bridge: pushes the release branch, opens the PR, waits out CI, and merges ONLY on all-non-fail-soft-checks-green + zero unresolved threads + no changes-requested; any other state stops with evidence — §5.7 mechanized, `--dry` to preview the decision). All fail fast outside a monorepo root (`assert-monorepo-root.mjs`); fork-configurable via `--host` / `--scope`. All 6 CLI scripts (plus `scripts/release/check-release.mjs`) have a `selftest` mode wired into CI's Plugin bin selftests step; the 3 helper modules (`assert-monorepo-root`, `gate-roster`, `package-paths`) are exercised through the CLIs' selftests, not their own.
+The pieces are callable alone: `bump.mjs` (version fields + the factory `.mcp.json` a2ui-mcp pin, invariant 8), `promote-unreleased.mjs` / `insert-stub.mjs` (CHANGELOG blocks), `tag-lockstep.mjs` (umbrella + one tag per roster package — 14 today, `--delete` to move), `dispatch-publish.mjs` (publish workflows; `--verify-triggered` re-dispatches missing AND dead — cancelled/failed/timed-out — runs, each gated behind an npm-registry check so an already-published version is never re-dispatched (gh#763); `--after` enforces batch ordering — dispatch output states what WAS done, never a to-do phrased as if it hadn't fired), and `pr-bridge.mjs` (the two-phase bridge: pushes the release branch, opens the PR, waits out CI, and merges ONLY on all-non-fail-soft-checks-green + zero unresolved threads + no changes-requested; any other state stops with evidence — §5.7 mechanized, `--dry` to preview the decision). All fail fast outside a monorepo root (`assert-monorepo-root.mjs`); fork-configurable via `--host` / `--scope`. All 6 CLI scripts (plus `scripts/release/check-release.mjs`) have a `selftest` mode wired into CI's Plugin bin selftests step; the 3 helper modules (`assert-monorepo-root`, `gate-roster`, `package-paths`) are exercised through the CLIs' selftests, not their own.
 
 Site deploy (Step 10 of the handoff) dispatches `deploy-site.yml` (its own pre-flight verify → snapshot → hardened rsync → post-deploy verify → auto-rollback), never a raw local `rsync` — H1 (forge-campaign gh#268 audit): the script had drifted into bypassing that pipeline even though this doc already taught the workflow-dispatch path. The dispatch rides the cycle's single authorization (`--go`, or `--publish` on a manual run); the workflow's own GitHub environment gate is the human stop for the deploy itself.
 

package/skills/adia-release/references/cut-procedure.md

@@ -113,6 +113,10 @@ npm run check:token-semantics-sync             # 21 adia-tokens generated refs v
 npm run check:demo-routes                      # 22 demo surfaces routed + patterns indexed
 npm run check:brand-assets                     # 23 brand mark token-driven, not baked raster
 node scripts/release/check-cut-hygiene.mjs --version <mode-dependent>  # 24 README CDN-pin + version currency — CUT modes pre-flight at the PREVIOUS version (the README claim is exact-match and only moves at the Step-4 bump; Step 4g re-proves at the cut version), HANDOFF pre-flights at the CUT version (post-merge, the claim already moved)
+python3 packages/plugins/adia-ui-factory/scripts/adia-scaffold selftest  # 25 scaffold specifiers resolve in packed @adia-ai/web-components + @adia-ai/web-modules tarballs (gh#1132)
+node scripts/release/check-dx-sweep-freshness.mjs  # 26 DX sweep fresh + not regression-RED (gh#1137 REQ-05 — FLAGGED, needs adia-release confirmation; see the script's own header)
+npm run eval:diff -- --engine free-form                    # 27 fresh free-form eval run (evals/health input, gh#1135)
+node scripts/release/write-eval-health.mjs --version <cut>  # 28 evals/health/<version>.json committed, AC-01/AC-02 run for real (gh#1135, WS-4 SPEC REQ-06)
 ```
 
 Any red → route via [`gates-catalog.md`](gates-catalog.md); fix at the source, re-run the narrowest gate, then re-run the full sequence. The canonical miss: a cut that ran 7 of the gates shipped a stale-embeddings defect that surfaced a day later and cost a tag-move recovery.

package/skills/adia-release/references/gates-catalog.md

@@ -153,6 +153,8 @@ The two `audit:*` probes are soft-fail pre-cut (exit-1 only on criticals); findi
 - **What:** the vitest suite (~1000+ tests).
 - **Stale-test failure:** the test asserts a behavior a peer deliberately changed (CHANGELOG-documented) without updating the assertion. Tell it apart by reading assertion vs CHANGELOG vs source: if the code matches the CHANGELOG's described behavior, the test is stale — update the assertion (see [`recovery-paths.md`](recovery-paths.md) §Scenario 5). Real regression → fix the regression.
 - **Parallel-contention flake:** heavy web-modules composite suites can fail under full parallelism on a loaded machine (`signals: drain loop exceeded 100 iterations`). Load-dependent, not a code defect. Sequential is the source of truth, and **the roster gate now runs it directly** (`npm run test:unit:serial` = `vitest run --no-file-parallelism`, gate 4 since 2026-07-19) — a parallel `test:unit` flake outside the roster still isn't a blocker, and don't raise the drain guard.
+- **Exit 143 (SIGTERM):** the vitest process was KILLED (resource pressure / a stray terminator), not a test failure — re-run the gate directly (`npx vitest run --no-file-parallelism`) before diagnosing anything; a clean re-run means transient, proceed (v0.8.34 handoff hit this).
+- **First-time-at-cut failures are REAL (v0.8.34):** this serial suite runs tests PR CI never does — `exit-gate.corpus` (dialect-catalog conformance over real harvested chunks) surfaces yaml-schema drift (e.g. an array prop missing `items.type`, the command/combobox `DynamicStringList` mis-map) only HERE, potentially weeks after the yaml edit merged green. Treat such a failure as a genuine latent defect to root-cause at the yaml SoT, never as release-blocking noise. (Structural fix — promoting the corpus batch into PR CI — tracked as a follow-up.)
 
 ### `npm run eval:diff -- --engine zettel`
 
@@ -202,7 +204,7 @@ npm run check:demo-shells
 
 Add `verify:corpus` + `check:embeddings-fresh` if chunks were touched; `check:lightningcss-build` if CSS was touched; F-N1 if unpushed release tags exist.
 
-**Full pre-cut sweep** — the 24-gate roster in [`cut-procedure.md`](cut-procedure.md) §Step 3, sourced from `` `${CLAUDE_PLUGIN_ROOT}/skills/adia-release/scripts/gate-roster.mjs` `` (the ONE list; `release-pack.mjs` imports and runs it in full — a subset run is impossible without editing that file). ~90s wall time.
+**Full pre-cut sweep** — the 28-gate roster in [`cut-procedure.md`](cut-procedure.md) §Step 3, sourced from `` `${CLAUDE_PLUGIN_ROOT}/skills/adia-release/scripts/gate-roster.mjs` `` (the ONE list; `release-pack.mjs` imports and runs it in full — a subset run is impossible without editing that file). ~90s wall time.
 
 **Omnibus** — `npm run check` invokes everything. Heavy; use when re-baselining a stale checkout.
 

package/skills/adia-release/references/independent-package-release.md

@@ -39,11 +39,11 @@ Substrate fixes (release scripts / lockfile / CHANGELOG), landed once as a norma
 4. **Tag at the published commit** — `git tag <pkg>-vX.Y.Z` per package; versions differ; no umbrella. Dry-run the trip-wire over the tags (`node scripts/release/check-release.mjs <tags>`) before pushing. If the shared working tree is on a peer's branch, push tags from a throwaway worktree on `origin/main`.
 5. **Push the tags** → the per-package workflows run `npm ci → verify:plugins → npm publish --access public`.
 6. **Verify against npm, not the workflow:** `npm view @adia-ai/<pkg> version` returns the new independent version for each package. Watch runs (`gh run watch <id> --exit-status`), but the registry is the source of truth.
-7. **Marketplace cut-over** (if a plugin marketplace repo exists): point the manifest's per-plugin `source` at npm (`{ "source": "npm", "package": "@adia-ai/<pkg>" }`), `git rm -r` vendored copies, validate the JSON, commit, push. Consumers then `/plugin marketplace add <org>/<repo>` → `/plugin install <pkg>@<repo>`.
+7. **Marketplace cut-over** — per ADR-0045 the distribution channel is the npm-sourced manifest package `@adia-ai/adia-plugins` (no public git marketplace repo — that shape was considered and rejected). Bump/publish the manifest package so its `marketplace.json` entries reference the new plugin versions; consumers add the marketplace from npm, never from a git repo.
 
 ## §Verify target
 
-The published package(s) on the **npm registry** at their independent versions, plus (if a marketplace exists) its manifest referencing npm. NOT "all 11 + the demo site" — that's class A.
+The published package(s) on the **npm registry** at their independent versions, plus the npm-published `@adia-ai/adia-plugins` manifest referencing the new versions (ADR-0045). NOT "all 11 + the demo site" — that's class A.
 
 ## §Gotchas (from the first independent cut, factory v0.2.2 + forge v0.1.2)
 

package/skills/adia-release/scripts/bump.mjs

@@ -20,17 +20,21 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import process from 'node:process';
-import { PACKAGE_DIRS, PACKAGE_ROSTER } from './package-paths.mjs';
+import { PACKAGE_ROSTER } from './package-paths.mjs';
 
 // Single-sourced roster (H3, package-paths.mjs). Each plugin also carries a
 // .claude-plugin/plugin.json whose version MUST move with package.json —
 // plugin.json is the /plugin-update cache key (verify:plugins gates the sync).
-const PACKAGES = PACKAGE_DIRS;
+// Filtered to `lockstep !== false`: a class-B package (gh#1133's
+// adia-plugins) bumps on its own independent version line, never via this
+// lockstep --from/--to sweep. See package-paths.mjs's `lockstep` field note.
+const LOCKSTEP_ROSTER = PACKAGE_ROSTER.filter((p) => p.lockstep !== false);
+const PACKAGES = LOCKSTEP_ROSTER.map((p) => p.dir);
 
 // Sibling manifests bumped in the same pass as package.json (path relative to
 // the package dir) — derived from the roster's plugin flag.
 const SIBLING_MANIFESTS = Object.fromEntries(
-  PACKAGE_ROSTER.filter((p) => p.plugin).map((p) => [p.dir, '.claude-plugin/plugin.json']),
+  LOCKSTEP_ROSTER.filter((p) => p.plugin).map((p) => [p.dir, '.claude-plugin/plugin.json']),
 );
 
 // Cross-package EXACT pins bumped in the same pass — a different shape from a

package/skills/adia-release/scripts/dispatch-publish.mjs

@@ -20,14 +20,17 @@
 import { execFileSync } from 'node:child_process';
 import process from 'node:process';
 import { assertMonorepoRoot } from './assert-monorepo-root.mjs';
-import { PACKAGE_NAMES } from './package-paths.mjs';
+import { PACKAGE_ROSTER } from './package-paths.mjs';
 
 // Instance data — fork-configurable. The npm scope the lockstep roster publishes under.
 // Default preserves @adia-ai behavior; override via --scope or $ADIA_NPM_SCOPE.
 const DEFAULT_SCOPE = '@adia-ai';
 
 // Single-sourced roster (H3, package-paths.mjs); order = dispatch order.
-const PACKAGES = PACKAGE_NAMES;
+// Filtered to `lockstep !== false`: a class-B package (gh#1133's
+// adia-plugins) publishes via its own manual cut (independent-package-
+// release.md), never this lockstep dispatch loop.
+const PACKAGES = PACKAGE_ROSTER.filter((p) => p.lockstep !== false).map((p) => p.name);
 
 function parseArgs(argv) {
   const args = {

package/skills/adia-release/scripts/gate-roster.mjs

@@ -64,6 +64,35 @@ export const GATE_ROSTER = [
   // v0.7.13-retro hygiene checker — README CDN pins / "Current version"
   // claims vs the cut version; branch/worktree limbo prints as warns (H2).
   { n: 24, cmd: 'node scripts/release/check-cut-hygiene.mjs',  what: 'README CDN-pin + version currency', versionArg: true },
+  // gh#1132 (factory-dx-ws1-boot SPEC, REQ-04): npm-packs BOTH
+  // @adia-ai/web-components and @adia-ai/web-modules and resolves every
+  // specifier the scaffold templates emit against the extracted tarballs'
+  // real exports maps — the same blast radius gh#296's
+  // exports-wildcard-resolution.mjs gate covers, applied to the factory
+  // plugin's own templates instead of a consumer's hand-written import.
+  { n: 25, cmd: 'python3 packages/plugins/adia-ui-factory/scripts/adia-scaffold selftest', what: 'scaffold specifiers resolve in packed tarballs' },
+  // gh#1137 (factory-dx-ws6-measurement SPEC, REQ-05) — FLAGGED FOR
+  // CONFIRMATION: this entry was authored by the WS-6 build without a live
+  // adia-release sign-off (no operator was available mid-build to confirm
+  // the exact freshness window / regression semantics). Asserts a
+  // qa/dx/sweeps/ record exists dated within this cut's window AND its
+  // verdict is not a regression-RED (a plain floors<=1 baseline RED does
+  // NOT block a cut — only a floor that DROPPED since the prior sweep
+  // does). CONFIRMED by adia-release on the first live cut (v0.8.35,
+  // 2026-08-13): semantics hold, with one correction — the previous-cut
+  // comparison excludes the in-flight target version (self-reference fired
+  // on the handoff re-run, since the promoted heading was already on main).
+  { n: 26, cmd: 'node scripts/release/check-dx-sweep-freshness.mjs', targetVersionArg: true, what: 'DX sweep fresh + not regression-RED' },
+  // gh#1135 (WS-4 SPEC REQ-06): a fresh free-form eval run feeds the health
+  // record gate 28 writes — without it, "latest" under evals/mcp/runs/ could
+  // be a stale leftover from an earlier ad-hoc run, not this cut's own state.
+  { n: 27, cmd: 'npm run eval:diff -- --engine free-form',   what: 'fresh free-form eval run (evals/health input)' },
+  // REQ-06: commits evals/health/<version>.json — the version this record
+  // names is the CUT's target version from the start, never the
+  // pre/post-bump `hygieneVersion` gate 24 needs (a claim-validation
+  // concern this is not) — hence `targetVersionArg` rather than
+  // `versionArg`, a distinct flag release-pack.mjs's step3PreFlight reads.
+  { n: 28, cmd: 'node scripts/release/write-eval-health.mjs', what: 'evals/health/<version>.json committed, AC-01/AC-02 run for real', targetVersionArg: true },
 ];
 
 // -- CLI ------------------------------------------------------------------

package/skills/adia-release/scripts/package-paths.mjs

@@ -42,24 +42,52 @@ import path from 'node:path';
 // Order is the canonical publish/tag order (release-pack's historical order);
 // consumers needing a different ordering (check-lockstep sorts by path for
 // stable output) re-sort locally.
+//
+// `lockstep` (added gh#1133, onboarding the first class-B member since the
+// 2026-07-15 policy emptied that class — independent-package-release.md):
+// `true` (or omitted — every pre-2026-08 entry defaults true below) means the
+// package rides the coordinated cut — version-match/caret gate
+// (check-lockstep.mjs), the umbrella tag, the --pending-version sweep, bump.mjs's
+// --from/--to pass, the dispatch-publish loop, and generate-release-notes.mjs's
+// notes. `false` means class B: its own version line, its own manual tag +
+// publish (independent-package-release.md), NEVER the umbrella tag or a
+// lockstep bump/dispatch/notes pass. The ONE exception: the F-N1 release
+// trip-wire (check-release.mjs's per-tag `checkTag` lookup) reads the FULL
+// roster unfiltered — every pushed tag, lockstep or not, still needs its
+// package.json/CHANGELOG validated, so it must recognize a class-B tag too.
+// Every lockstep-scoped consumer must filter `p.lockstep !== false` itself
+// (this module intentionally does NOT pre-filter PACKAGE_NAMES/PACKAGE_DIRS —
+// they stay full-roster projections so a consumer's own filter is visible at
+// its point of use, not hidden upstream).
 export const PACKAGE_ROSTER = [
-  { name: 'web-components',  dir: 'packages/web-components' },
-  { name: 'web-modules',     dir: 'packages/web-modules' },
-  { name: 'llm',             dir: 'packages/llm' },
-  { name: 'agent',           dir: 'packages/agent' },
-  { name: 'persona',         dir: 'packages/persona' },
-  { name: 'a2ui-runtime',    dir: 'packages/a2ui/runtime' },
-  { name: 'a2ui-compose',    dir: 'packages/a2ui/compose' },
-  { name: 'a2ui-corpus',     dir: 'packages/a2ui/corpus' },
-  { name: 'a2ui-mcp',        dir: 'packages/a2ui/mcp' },
-  { name: 'a2ui-retrieval',  dir: 'packages/a2ui/retrieval' },
-  { name: 'a2ui-validator',  dir: 'packages/a2ui/validator' },
+  { name: 'web-components',  dir: 'packages/web-components',           lockstep: true },
+  { name: 'web-modules',     dir: 'packages/web-modules',               lockstep: true },
+  { name: 'llm',             dir: 'packages/llm',                       lockstep: true },
+  { name: 'agent',           dir: 'packages/agent',                     lockstep: true },
+  { name: 'persona',         dir: 'packages/persona',                   lockstep: true },
+  { name: 'a2ui-runtime',    dir: 'packages/a2ui/runtime',              lockstep: true },
+  { name: 'a2ui-compose',    dir: 'packages/a2ui/compose',              lockstep: true },
+  { name: 'a2ui-corpus',     dir: 'packages/a2ui/corpus',               lockstep: true },
+  { name: 'a2ui-mcp',        dir: 'packages/a2ui/mcp',                  lockstep: true },
+  { name: 'a2ui-retrieval',  dir: 'packages/a2ui/retrieval',            lockstep: true },
+  { name: 'a2ui-validator',  dir: 'packages/a2ui/validator',            lockstep: true },
   // Plugins joined the lockstep 2026-07-15 (check-lockstep.mjs POLICY note);
   // each carries a .claude-plugin/plugin.json that bumps with package.json.
-  { name: 'adia-ui-factory', dir: 'packages/plugins/adia-ui-factory', plugin: true },
-  { name: 'adia-ui-forge',   dir: 'packages/plugins/adia-ui-forge',   plugin: true },
+  { name: 'adia-ui-factory', dir: 'packages/plugins/adia-ui-factory',   lockstep: true, plugin: true },
+  { name: 'adia-ui-forge',   dir: 'packages/plugins/adia-ui-forge',     lockstep: true, plugin: true },
+  // adia-plugins is class B (gh#1133, ADR-0045/spec-factory-dx-ws2): the npm-
+  // sourced marketplace manifest package. No lockstep content (a roster of
+  // npm sources, no code) and REQ-03's unpinned sources mean it republishes
+  // only on its own roster change — cuts independently, own version line,
+  // never the umbrella tag. Not a Claude Code plugin itself (no `plugin.json`
+  // sidecar), so no `plugin: true`.
+  { name: 'adia-plugins',    dir: 'packages/plugins/adia-plugins',      lockstep: false },
 ];
 
+// Full-roster projections — every registered package, lockstep or not. A
+// lockstep-scoped consumer (bump, tag-lockstep, dispatch-publish, the
+// version-match gate, the notes generator, the docs gate) must filter
+// `.lockstep !== false` itself; see the `lockstep` field note above.
 export const PACKAGE_NAMES = PACKAGE_ROSTER.map((p) => p.name);
 export const PACKAGE_DIRS = PACKAGE_ROSTER.map((p) => p.dir);
 

package/skills/adia-release/scripts/pr-bridge.mjs

@@ -81,8 +81,29 @@ function help() {
 Flags: --poll-interval <s=30> --timeout <s=2400> --dry`);
 }
 
+// Transient-network failure signatures (v0.8.34 cut: three bridge runs died
+// on momentary TLS-interception blips — `x509: certificate signed by unknown
+// authority` — that a 20s retry sailed past). Deliberately narrow: anything
+// NOT matching rethrows immediately so real failures stay loud.
+const TRANSIENT_NET = /tls:|x509:|ECONNRESET|ECONNREFUSED|ETIMEDOUT|EAI_AGAIN|Could not resolve host|connection reset|TLS handshake/i;
+const NET_RETRIES = 3;
+const NET_BACKOFF_MS = 20_000;
+
+function withNetRetry(fn, label) {
+  for (let attempt = 1; ; attempt++) {
+    try { return fn(); }
+    catch (e) {
+      const msg = `${e.message || ''}\n${e.stderr || ''}\n${e.stdout || ''}`;
+      if (attempt >= NET_RETRIES || !TRANSIENT_NET.test(msg)) throw e;
+      console.error(`[pr-bridge] transient network failure on ${label} (attempt ${attempt}/${NET_RETRIES}) — retrying in ${NET_BACKOFF_MS / 1000}s`);
+      execFileSync('sleep', [String(NET_BACKOFF_MS / 1000)]);
+    }
+  }
+}
+
 function sh(cmd) {
-  return execSync(cmd, { cwd: REPO, encoding: 'utf8' }).trim();
+  return withNetRetry(
+    () => execSync(cmd, { cwd: REPO, encoding: 'utf8' }).trim(), cmd.slice(0, 40));
 }
 
 // No-shell variant for every call that carries an operator-supplied value
@@ -90,7 +111,9 @@ function sh(cmd) {
 // `$(…)`/backticks live inside double quotes and broke on metachar branch
 // names. execFileSync + arg array = no shell, no expansion, no quoting bugs.
 function shFile(cmd, argv) {
-  return execFileSync(cmd, argv, { cwd: REPO, encoding: 'utf8' }).trim();
+  return withNetRetry(
+    () => execFileSync(cmd, argv, { cwd: REPO, encoding: 'utf8' }).trim(),
+    `${cmd} ${argv[0] ?? ''}`);
 }
 
 // ── The decision predicate — pure, selftest-locked ────────────────
@@ -208,6 +231,17 @@ async function main() {
   if (existing.length > 0) {
     prNumber = existing[0].number;
     console.log(`[pr-bridge] reusing open PR #${prNumber} for ${args.branch} ("${existing[0].title}")`);
+    // Push any LOCAL-AHEAD commits before judging CI (v0.8.34 cut: a fix
+    // committed locally but never pushed left the bridge judging the STALE
+    // failed run — permanently, since the remote never got the fix). Only
+    // meaningful when the branch exists in this checkout; a bridge run from
+    // a checkout without the branch (handoff-only) skips silently.
+    if (!args.dry) {
+      try {
+        shFile('git', ['rev-parse', '--verify', `refs/heads/${args.branch}`]);
+        shFile('git', ['push', 'origin', args.branch]);
+      } catch { /* no local branch — nothing to push */ }
+    }
   } else if (args.dry) {
     console.error(`[pr-bridge] --dry: no open PR for ${args.branch}; nothing to report`);
     process.exit(1);

package/skills/adia-release/scripts/promote-unreleased.mjs

@@ -3,8 +3,10 @@
 // in N package CHANGELOGs. The special target `root` is the repo-root
 // CHANGELOG.md — same swap, no package resolution.
 //
-// Idempotent. Stops if any target already has the [vX.Y.Z] heading
-// (means you've already run this; would create a duplicate block).
+// Idempotent — including across PARTIAL runs: a target already promoted to
+// exactly [vX.Y.Z] with no [Unreleased] remaining counts as done (skip).
+// Stops only if a target carries BOTH headings (its [Unreleased] content
+// would silently miss the release) — merge those by hand.
 //
 // Usage:
 //   node promote-unreleased.mjs --version 0.6.22 --date 2026-05-22 \
@@ -17,7 +19,7 @@
 //
 // Exits:
 //   0  — all targets promoted (or --dry succeeded)
-//   1  — at least one target missing [Unreleased] OR already has [vX.Y.Z]
+//   1  — a target missing [Unreleased], or carrying BOTH [Unreleased] and [vX.Y.Z]
 //   2  — bad args / file I/O error
 
 import fs from 'node:fs';
@@ -67,7 +69,17 @@ function promote(repo, pkg, version, date, dry) {
   const txt = fs.readFileSync(p, 'utf8');
   const newHeading = `## [${version}] — ${date}`;
   if (txt.includes(newHeading)) {
-    console.error(`  ERROR ${pkg} — already has ${newHeading} (already promoted)`);
+    // TRUE idempotency (v0.8.34 cut, gh#976): a partial Step-4 failure
+    // leaves some targets promoted; re-running must treat "already carries
+    // exactly this heading AND no [Unreleased] remains" as the DONE state,
+    // not an error — the error branch forced a hand-driven recovery.
+    // Having BOTH headings is still an error: the [Unreleased] content
+    // would silently miss the release.
+    if (!txt.includes('## [Unreleased]')) {
+      console.log(`  ok ${pkg} — already promoted to ${newHeading} (idempotent skip)`);
+      return 'promoted';
+    }
+    console.error(`  ERROR ${pkg} — has BOTH ${newHeading} and [Unreleased]: merge the [Unreleased] block into the promoted section by hand`);
     return 'already-promoted';
   }
   if (!txt.includes('## [Unreleased]')) {
@@ -111,10 +123,18 @@ function selftest() {
     if (out.includes('## [Unreleased]')) { console.error('selftest FAIL: [Unreleased] heading should have been renamed, not left behind'); process.exit(1); }
     if (!out.includes('### Fixed\n- x')) { console.error('selftest FAIL: content under the heading must survive the rename'); process.exit(1); }
 
-    // Idempotency: re-running against an already-promoted target must fail
-    // loudly (a silent no-op or a duplicate block would both be wrong).
+    // Idempotency across partial runs (v0.8.34 cut): re-running against a
+    // fully-promoted target is the DONE state — 'promoted', file untouched.
+    const beforeRerun = fs.readFileSync(clPath, 'utf8');
     const r2 = promote(tmp, 'web-components', '0.2.0', '2026-02-02', false);
-    if (r2 !== 'already-promoted') { console.error(`selftest FAIL: expected 'already-promoted' on re-run, got '${r2}'`); process.exit(1); }
+    if (r2 !== 'promoted') { console.error(`selftest FAIL: expected idempotent 'promoted' on re-run, got '${r2}'`); process.exit(1); }
+    if (fs.readFileSync(clPath, 'utf8') !== beforeRerun) { console.error('selftest FAIL: idempotent re-run must not modify the file'); process.exit(1); }
+
+    // BOTH headings present = the one loud stop left: the [Unreleased]
+    // content would silently miss the release.
+    fs.writeFileSync(clPath, '# C\n\n## [Unreleased]\n\n### Fixed\n- late fix\n\n## [0.2.0] — 2026-02-02\n\n- x\n');
+    const r2b = promote(tmp, 'web-components', '0.2.0', '2026-02-02', false);
+    if (r2b !== 'already-promoted') { console.error(`selftest FAIL: expected 'already-promoted' for BOTH-headings case, got '${r2b}'`); process.exit(1); }
 
     // `root` target resolves to <repo>/CHANGELOG.md, no package resolution.
     const rootPath = path.join(tmp, 'CHANGELOG.md');