@cyberskill/design 2.1.0 → 2.3.0

package/docs/component-scenarios.md

@@ -2,7 +2,7 @@
 
 `components/scenarios.json` is the source-bound inventory for the component state checks. It derives component membership from the public API, starts with the authored static-reference fixtures, and derives finite presentation domains from declarations. `scripts/fixtures/component-scenarios.json` supplies reviewed runtime expectations and the JSX/declaration hashes supporting each expectation. Changing a component does not automatically refresh that evidence.
 
-The inventory covers one default fixture for every public component; every declared value of the finite `variant`, `size`, `tone`, `status`, `state` and `mode` domains; the supported Button variant × size product; every declared `disabled`, `error` and `errors` prop; and eight explicitly authored empty-collection contracts. New finite domains or declared disabled/error props fail generation until an expectation is authored. Empty behavior outside those eight collections remains unclassified, rather than being silently counted as verified or inapplicable.
+The inventory covers one default fixture for every public component; every declared value of the finite `variant`, `size`, `tone`, `status`, `state` and `mode` domains; the supported Button variant × size product; every declared `disabled`, `error` and `errors` prop; and twenty explicitly authored empty-collection contracts. New finite domains or declared disabled/error props fail generation until an expectation is authored. Empty behavior outside those twenty collections remains unclassified, rather than being silently counted as verified or inapplicable.
 
 For the finite components, default scenes omit those finite props and assert the reviewed parameter-default behavior, including the no-variant ProgressBar default and AlertDialog alias fallback. Other defaults retain their documented canonical fixture state. The runtime expectations assert actual class/state changes, SVG geometry, native disabled/focus behavior, exposed error alerts and their input descriptions, or empty collections without data items. The empty Cascader and TreeSelect contracts assert an exposed empty popup, without inventing an empty-message promise. FormField uses its documented TextField composition. Each scene is mounted separately in English and Vietnamese; cleanup must remove prior floating hosts before the next scene can claim ownership of its newly created hosts.
 

package/docs/consuming.md

@@ -1,6 +1,6 @@
 # Consuming & upgrading the CyberSkill Design System
 
-**Source checkout:** VERSION **<!-- cs-source-version:checkout -->2.1.0<!-- /cs-source-version -->** is local source identity, not a registry-availability claim. For an unpublished candidate, validate the reviewed local package tarball or source checkout. Registry commands and sibling inventories below refer to published stable 1.7.2 and are not automatically updated by preparation. Preparation does not authorize publication.
+**Source checkout:** VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->** is local source identity, not a registry-availability claim. For an unpublished candidate, validate the reviewed local package tarball or source checkout. Registry commands below refer to published stable 2.0.0 (and the dated ADOPT-001 1.7.2 sibling inventory) and are not automatically updated by preparation. Preparation does not authorize publication.
 
 How any project — human-driven or agent-driven — adopts this HTML-first design system, and how to take updates safely. Published on Storybook **Docs** at `design.cyberskill.world`.
 

package/docs/contrast-report.md

@@ -1,6 +1,6 @@
 # Contrast report — elemental pairings (APCA)
 
-Generated · sweep at VERSION 2.1.0.
+Generated · sweep at VERSION 2.3.0.
 
 Published on Storybook **Docs** at `design.cyberskill.world`.
 
@@ -14,6 +14,81 @@ Packs are generated from `tokens/element-seeds.json` (soft / middle / deep ladde
 | root (Thổ default) | accent-bright on ink (headings) | #F4BA17 / #45210E | 66.3 | ✓ |
 | root (Thổ default) | accent-on on accent-bright (CTA text) | #45210E / #F4BA17 | 66.3 | ✓ |
 | root (Thổ default) | accent-bright on dark panel (dark labels) | #F4BA17 / #221710 | 69.2 | ✓ |
+| tho · sand | text-accent on white (bold labels) | #695300 / #FFFFFF | 85.5 | ✓ |
+| tho · sand | text-accent on tint (bold labels) | #695300 / #FEF8E7 | 81.4 | ✓ |
+| tho · sand | accent-bright on ink (headings) | #FDEAB7 / #292108 | 92.5 | ✓ |
+| tho · sand | accent-on on accent-bright (CTA text) | #271E06 / #FDEAB7 | 91.6 | ✓ |
+| tho · sand | accent-bright on dark panel (dark labels) | #F9E5AE / #221710 | 90.5 | ✓ |
+| tho | text-accent on white (bold labels) | #6E3B0E / #FFFFFF | 90.7 | ✓ |
+| tho | text-accent on tint (bold labels) | #6E3B0E / #FBF4E9 | 84.6 | ✓ |
+| tho | accent-bright on ink (headings) | #F4BA17 / #45210E | 66.3 | ✓ |
+| tho | accent-on on accent-bright (CTA text) | #45210E / #F4BA17 | 66.3 | ✓ |
+| tho | accent-bright on dark panel (dark labels) | #FDD378 / #221710 | 81.9 | ✓ |
+| tho · clay | text-accent on white (bold labels) | #462402 / #FFFFFF | 100.2 | ✓ |
+| tho · clay | text-accent on tint (bold labels) | #462402 / #FCEEE3 | 91.5 | ✓ |
+| tho · clay | accent-bright on ink (headings) | #F2C5A3 / #321B07 | 74.4 | ✓ |
+| tho · clay | accent-on on accent-bright (CTA text) | #080200 / #F2C5A3 | 77.4 | ✓ |
+| tho · clay | accent-bright on dark panel (dark labels) | #F8C7A1 / #221710 | 77.1 | ✓ |
+| hoa · plasma | text-accent on white (bold labels) | #714B4D / #FFFFFF | 85.8 | ✓ |
+| hoa · plasma | text-accent on tint (bold labels) | #714B4D / #FFF5F5 | 81.1 | ✓ |
+| hoa · plasma | accent-bright on ink (headings) | #FFE3E4 / #2B1E1E | 91.5 | ✓ |
+| hoa · plasma | accent-on on accent-bright (CTA text) | #281B1C / #FFE3E4 | 90.8 | ✓ |
+| hoa · plasma | accent-bright on dark panel (dark labels) | #FDDDDE / #221710 | 89.4 | ✓ |
+| hoa | text-accent on white (bold labels) | #793609 / #FFFFFF | 90 | ✓ |
+| hoa | text-accent on tint (bold labels) | #793609 / #FFF1EA | 83.2 | ✓ |
+| hoa | accent-bright on ink (headings) | #FFD3BD / #3A1501 | 83 | ✓ |
+| hoa | accent-on on accent-bright (CTA text) | #361402 / #FFD3BD | 82.8 | ✓ |
+| hoa | accent-bright on dark panel (dark labels) | #FECDB4 / #221710 | 81.2 | ✓ |
+| hoa · lava | text-accent on white (bold labels) | #550306 / #FFFFFF | 100.5 | ✓ |
+| hoa · lava | text-accent on tint (bold labels) | #550306 / #FFEBE9 | 91.1 | ✓ |
+| hoa · lava | accent-bright on ink (headings) | #FFBCB4 / #400C0B | 73.4 | ✓ |
+| hoa · lava | accent-on on accent-bright (CTA text) | #0D0000 / #FFBCB4 | 76.6 | ✓ |
+| hoa · lava | accent-bright on dark panel (dark labels) | #FFC1B9 / #221710 | 76.7 | ✓ |
+| thuy · mist | text-accent on white (bold labels) | #116060 / #FFFFFF | 85.1 | ✓ |
+| thuy · mist | text-accent on tint (bold labels) | #116060 / #E6FDFC | 81.1 | ✓ |
+| thuy · mist | accent-bright on ink (headings) | #B1FBF9 / #032727 | 94 | ✓ |
+| thuy · mist | accent-on on accent-bright (CTA text) | #012525 / #B1FBF9 | 92.7 | ✓ |
+| thuy · mist | accent-bright on dark panel (dark labels) | #A6F8F6 / #221710 | 92.7 | ✓ |
+| thuy | text-accent on white (bold labels) | #0D535C / #FFFFFF | 89.5 | ✓ |
+| thuy | text-accent on tint (bold labels) | #0D535C / #DFFBFF | 84 | ✓ |
+| thuy | accent-bright on ink (headings) | #94EFFD / #03272C | 85.8 | ✓ |
+| thuy | accent-on on accent-bright (CTA text) | #012429 / #94EFFD | 85.4 | ✓ |
+| thuy | accent-bright on dark panel (dark labels) | #79EDFF / #221710 | 84.6 | ✓ |
+| thuy · ocean | text-accent on white (bold labels) | #003142 / #FFFFFF | 100.1 | ✓ |
+| thuy · ocean | text-accent on tint (bold labels) | #003142 / #E5F3FA | 91.5 | ✓ |
+| thuy · ocean | accent-bright on ink (headings) | #A9D8ED / #092531 | 76.1 | ✓ |
+| thuy · ocean | accent-on on accent-bright (CTA text) | #001721 / #A9D8ED | 78.1 | ✓ |
+| thuy · ocean | accent-bright on dark panel (dark labels) | #A5D8F0 / #221710 | 77.1 | ✓ |
+| moc · bamboo | text-accent on white (bold labels) | #4A5B02 / #FFFFFF | 86 | ✓ |
+| moc · bamboo | text-accent on tint (bold labels) | #4A5B02 / #F5FBE8 | 82.1 | ✓ |
+| moc · bamboo | accent-bright on ink (headings) | #E2F4BA / #1E250A | 93.4 | ✓ |
+| moc · bamboo | accent-on on accent-bright (CTA text) | #1C2307 / #E2F4BA | 92.3 | ✓ |
+| moc · bamboo | accent-bright on dark panel (dark labels) | #DCF0B1 / #221710 | 91.7 | ✓ |
+| moc | text-accent on white (bold labels) | #24570B / #FFFFFF | 89.2 | ✓ |
+| moc | text-accent on tint (bold labels) | #24570B / #EAFAE5 | 83.4 | ✓ |
+| moc | accent-bright on ink (headings) | #B9F0A6 / #0D2902 | 85.9 | ✓ |
+| moc | accent-on on accent-bright (CTA text) | #0A2700 / #B9F0A6 | 85.4 | ✓ |
+| moc | accent-bright on dark panel (dark labels) | #B2EC9E / #221710 | 84.5 | ✓ |
+| moc · forest | text-accent on white (bold labels) | #04361D / #FFFFFF | 99.7 | ✓ |
+| moc · forest | text-accent on tint (bold labels) | #04361D / #E6F5EB | 91.5 | ✓ |
+| moc · forest | accent-bright on ink (headings) | #ACDDBD / #0B2818 | 76.4 | ✓ |
+| moc · forest | accent-on on accent-bright (CTA text) | #011C0D / #ACDDBD | 78.1 | ✓ |
+| moc · forest | accent-bright on dark panel (dark labels) | #A8DFBB / #221710 | 78.3 | ✓ |
+| kim · titanium | text-accent on white (bold labels) | #3D5670 / #FFFFFF | 86.4 | ✓ |
+| kim · titanium | text-accent on tint (bold labels) | #3D5670 / #F3F8FE | 81.8 | ✓ |
+| kim · titanium | accent-bright on ink (headings) | #DDEDFF / #1A232B | 92.5 | ✓ |
+| kim · titanium | accent-on on accent-bright (CTA text) | #182029 / #DDEDFF | 91.6 | ✓ |
+| kim · titanium | accent-bright on dark panel (dark labels) | #D6E9FD / #221710 | 90.8 | ✓ |
+| kim | text-accent on white (bold labels) | #564B27 / #FFFFFF | 89.6 | ✓ |
+| kim | text-accent on tint (bold labels) | #564B27 / #F8F4EA | 83.2 | ✓ |
+| kim | accent-bright on ink (headings) | #E8DEBD / #262112 | 84.3 | ✓ |
+| kim | accent-on on accent-bright (CTA text) | #241F0F / #E8DEBD | 84 | ✓ |
+| kim | accent-bright on dark panel (dark labels) | #E3D9B8 / #221710 | 82.3 | ✓ |
+| kim · steel | text-accent on white (bold labels) | #1B2E4C / #FFFFFF | 100 | ✓ |
+| kim · steel | text-accent on tint (bold labels) | #1B2E4C / #EBF1FB | 91.4 | ✓ |
+| kim · steel | accent-bright on ink (headings) | #BED0F0 / #182232 | 75 | ✓ |
+| kim · steel | accent-on on accent-bright (CTA text) | #020818 / #BED0F0 | 78 | ✓ |
+| kim · steel | accent-bright on dark panel (dark labels) | #BBD0F4 / #221710 | 76 | ✓ |
 
 **Failures: 0.** All text pairings pass Lc ≥ 60.
 
@@ -24,6 +99,81 @@ Packs are generated from `tokens/element-seeds.json` (soft / middle / deep ladde
 Rows use the declared light or dark `--cs-color-link` colour. White, reference-page, reference-raised and reference-dark-panel backgrounds are fixed literals; element surface roles use `color-mix()` and are not measured by these rows. Rendered surface, preference and interaction checks have separate scopes.
 | Scope | Pairing | fg / bg | Ratio | Verdict |
 |---|---|---|---|---|
+| tho · sand | link on white (body) | #695300 / #FFFFFF | 7.40:1 | ✓ |
+| tho · sand | link on reference page (body) | #695300 / #FFFDF8 | 7.28:1 | ✓ |
+| tho · sand | link on tint (body) | #695300 / #FEF8E7 | 6.98:1 | ✓ |
+| tho · sand | link on reference raised cream (body) | #695300 / #FBF4E9 | 6.77:1 | ✓ |
+| tho · sand | link on reference dark panel (body) | #F9E5AE / #221710 | 14.06:1 | ✓ |
+| tho | link on white (body) | #644A05 / #FFFFFF | 8.32:1 | ✓ |
+| tho | link on reference page (body) | #644A05 / #FFFDF8 | 8.19:1 | ✓ |
+| tho | link on tint (body) | #644A05 / #FBF4E9 | 7.62:1 | ✓ |
+| tho | link on reference raised cream (body) | #644A05 / #FBF4E9 | 7.62:1 | ✓ |
+| tho | link on reference dark panel (body) | #FFD57A / #221710 | 12.56:1 | ✓ |
+| tho · clay | link on white (body) | #462402 / #FFFFFF | 13.87:1 | ✓ |
+| tho · clay | link on reference page (body) | #462402 / #FFFDF8 | 13.65:1 | ✓ |
+| tho · clay | link on tint (body) | #462402 / #FCEEE3 | 12.21:1 | ✓ |
+| tho · clay | link on reference raised cream (body) | #462402 / #FBF4E9 | 12.70:1 | ✓ |
+| tho · clay | link on reference dark panel (body) | #FFD2AF / #221710 | 12.60:1 | ✓ |
+| hoa · plasma | link on white (body) | #714B4D / #FFFFFF | 7.46:1 | ✓ |
+| hoa · plasma | link on reference page (body) | #714B4D / #FFFDF8 | 7.34:1 | ✓ |
+| hoa · plasma | link on tint (body) | #714B4D / #FFF5F5 | 6.97:1 | ✓ |
+| hoa · plasma | link on reference raised cream (body) | #714B4D / #FBF4E9 | 6.83:1 | ✓ |
+| hoa · plasma | link on reference dark panel (body) | #FDDDDE / #221710 | 13.83:1 | ✓ |
+| hoa | link on white (body) | #793609 / #FFFFFF | 8.96:1 | ✓ |
+| hoa | link on reference page (body) | #793609 / #FFFDF8 | 8.81:1 | ✓ |
+| hoa | link on tint (body) | #793609 / #FFF1EA | 8.11:1 | ✓ |
+| hoa | link on reference raised cream (body) | #793609 / #FBF4E9 | 8.20:1 | ✓ |
+| hoa | link on reference dark panel (body) | #FFD1BA / #221710 | 12.59:1 | ✓ |
+| hoa · lava | link on white (body) | #550306 / #FFFFFF | 14.98:1 | ✓ |
+| hoa · lava | link on reference page (body) | #550306 / #FFFDF8 | 14.74:1 | ✓ |
+| hoa · lava | link on tint (body) | #550306 / #FFEBE9 | 13.06:1 | ✓ |
+| hoa · lava | link on reference raised cream (body) | #550306 / #FBF4E9 | 13.71:1 | ✓ |
+| hoa · lava | link on reference dark panel (body) | #FDD0CA / #221710 | 12.56:1 | ✓ |
+| thuy · mist | link on white (body) | #116060 / #FFFFFF | 7.33:1 | ✓ |
+| thuy · mist | link on reference page (body) | #116060 / #FFFDF8 | 7.21:1 | ✓ |
+| thuy · mist | link on tint (body) | #116060 / #E6FDFC | 6.92:1 | ✓ |
+| thuy · mist | link on reference raised cream (body) | #116060 / #FBF4E9 | 6.71:1 | ✓ |
+| thuy · mist | link on reference dark panel (body) | #A6F8F6 / #221710 | 14.51:1 | ✓ |
+| thuy | link on white (body) | #0D535C / #FFFFFF | 8.72:1 | ✓ |
+| thuy | link on reference page (body) | #0D535C / #FFFDF8 | 8.58:1 | ✓ |
+| thuy | link on tint (body) | #0D535C / #DFFBFF | 8.05:1 | ✓ |
+| thuy | link on reference raised cream (body) | #0D535C / #FBF4E9 | 7.98:1 | ✓ |
+| thuy | link on reference dark panel (body) | #79EDFF / #221710 | 12.83:1 | ✓ |
+| thuy · ocean | link on white (body) | #003142 / #FFFFFF | 13.83:1 | ✓ |
+| thuy · ocean | link on reference page (body) | #003142 / #FFFDF8 | 13.61:1 | ✓ |
+| thuy · ocean | link on tint (body) | #003142 / #E5F3FA | 12.21:1 | ✓ |
+| thuy · ocean | link on reference raised cream (body) | #003142 / #FBF4E9 | 12.66:1 | ✓ |
+| thuy · ocean | link on reference dark panel (body) | #AFE2FA / #221710 | 12.59:1 | ✓ |
+| moc · bamboo | link on white (body) | #4A5B02 / #FFFFFF | 7.53:1 | ✓ |
+| moc · bamboo | link on reference page (body) | #4A5B02 / #FFFDF8 | 7.41:1 | ✓ |
+| moc · bamboo | link on tint (body) | #4A5B02 / #F5FBE8 | 7.12:1 | ✓ |
+| moc · bamboo | link on reference raised cream (body) | #4A5B02 / #FBF4E9 | 6.89:1 | ✓ |
+| moc · bamboo | link on reference dark panel (body) | #DCF0B1 / #221710 | 14.31:1 | ✓ |
+| moc | link on white (body) | #24570B / #FFFFFF | 8.60:1 | ✓ |
+| moc | link on reference page (body) | #24570B / #FFFDF8 | 8.46:1 | ✓ |
+| moc | link on tint (body) | #24570B / #EAFAE5 | 7.90:1 | ✓ |
+| moc | link on reference raised cream (body) | #24570B / #FBF4E9 | 7.87:1 | ✓ |
+| moc | link on reference dark panel (body) | #B2EC9E / #221710 | 12.84:1 | ✓ |
+| moc · forest | link on white (body) | #04361D / #FFFFFF | 13.54:1 | ✓ |
+| moc · forest | link on reference page (body) | #04361D / #FFFDF8 | 13.32:1 | ✓ |
+| moc · forest | link on tint (body) | #04361D / #E6F5EB | 12.01:1 | ✓ |
+| moc · forest | link on reference raised cream (body) | #04361D / #FBF4E9 | 12.39:1 | ✓ |
+| moc · forest | link on reference dark panel (body) | #B0E7C3 / #221710 | 12.57:1 | ✓ |
+| kim · titanium | link on white (body) | #3D5670 / #FFFFFF | 7.60:1 | ✓ |
+| kim · titanium | link on reference page (body) | #3D5670 / #FFFDF8 | 7.48:1 | ✓ |
+| kim · titanium | link on tint (body) | #3D5670 / #F3F8FE | 7.12:1 | ✓ |
+| kim · titanium | link on reference raised cream (body) | #3D5670 / #FBF4E9 | 6.95:1 | ✓ |
+| kim · titanium | link on reference dark panel (body) | #D6E9FD / #221710 | 14.13:1 | ✓ |
+| kim | link on white (body) | #564B27 / #FFFFFF | 8.64:1 | ✓ |
+| kim | link on reference page (body) | #564B27 / #FFFDF8 | 8.50:1 | ✓ |
+| kim | link on tint (body) | #564B27 / #F8F4EA | 7.86:1 | ✓ |
+| kim | link on reference raised cream (body) | #564B27 / #FBF4E9 | 7.90:1 | ✓ |
+| kim | link on reference dark panel (body) | #E5DBBA / #221710 | 12.66:1 | ✓ |
+| kim · steel | link on white (body) | #1B2E4C / #FFFFFF | 13.62:1 | ✓ |
+| kim · steel | link on reference page (body) | #1B2E4C / #FFFDF8 | 13.40:1 | ✓ |
+| kim · steel | link on tint (body) | #1B2E4C / #EBF1FB | 12.00:1 | ✓ |
+| kim · steel | link on reference raised cream (body) | #1B2E4C / #FBF4E9 | 12.47:1 | ✓ |
+| kim · steel | link on reference dark panel (body) | #C8DBFD / #221710 | 12.53:1 | ✓ |
 
 **Link failures: 0.**
 
@@ -32,6 +182,36 @@ Rows use the declared light or dark `--cs-color-link` colour. White, reference-p
 Pair `--cs-accent-strong` with `--cs-accent-on-strong`: both light and dark packs must meet body Lc ≥ 75 (generator target 78) and WCAG ≥ 4.5:1. Dark primary buttons consume this paired foreground. Brand anchors and the other eight accent roles retain their values.
 | Scope | Mode | fg / bg | Lc | Verdict |
 |---|---|---|---|---|
+| tho · sand | light | #FFFFFF / #856A03 | 80.8 | ✓ |
+| tho · sand | dark | #FFFFFF / #80671A | 82.2 | ✓ |
+| tho | light | #FFFFFF / #916D11 | 78.4 | ✓ |
+| tho | dark | #FFFFFF / #6E5205 | 90.1 | ✓ |
+| tho · clay | light | #FFFFFF / #5A3004 | 99.5 | ✓ |
+| tho · clay | dark | #FFFFFF / #5C3001 | 99.3 | ✓ |
+| hoa · plasma | light | #FFFFFF / #896163 | 81.7 | ✓ |
+| hoa · plasma | dark | #FFFFFF / #836061 | 82.8 | ✓ |
+| hoa | light | #FFFFFF / #96440B | 87.5 | ✓ |
+| hoa | dark | #FFFFFF / #883E0D | 90.9 | ✓ |
+| hoa · lava | light | #FFFFFF / #760008 | 98.8 | ✓ |
+| hoa · lava | dark | #FFFFFF / #6D1D19 | 99.2 | ✓ |
+| thuy · mist | light | #FFFFFF / #037D7D | 79.2 | ✓ |
+| thuy · mist | dark | #FFFFFF / #077A79 | 80.4 | ✓ |
+| thuy | light | #FFFFFF / #166B76 | 85.6 | ✓ |
+| thuy | dark | #FFFFFF / #04626D | 89.0 | ✓ |
+| thuy · ocean | light | #FFFFFF / #034257 | 98.8 | ✓ |
+| thuy · ocean | dark | #FFFFFF / #00445A | 98.2 | ✓ |
+| moc · bamboo | light | #FFFFFF / #62780E | 79.7 | ✓ |
+| moc · bamboo | dark | #FFFFFF / #607420 | 81.2 | ✓ |
+| moc | light | #FFFFFF / #2B7100 | 85.1 | ✓ |
+| moc | dark | #FFFFFF / #286704 | 88.6 | ✓ |
+| moc · forest | light | #FFFFFF / #0A4829 | 98.3 | ✓ |
+| moc · forest | dark | #FFFFFF / #074A29 | 97.8 | ✓ |
+| kim · titanium | light | #FFFFFF / #56708B | 80.8 | ✓ |
+| kim · titanium | dark | #FFFFFF / #576D83 | 82.0 | ✓ |
+| kim | light | #FFFFFF / #6A5E3A | 86.9 | ✓ |
+| kim | dark | #FFFFFF / #615633 | 90.1 | ✓ |
+| kim · steel | light | #FFFFFF / #293C5C | 99.4 | ✓ |
+| kim · steel | dark | #FFFFFF / #2B3D5D | 99.0 | ✓ |
 
 **Strong body failures: 0.** Static declared-pair calculation; the browser regressions and actual template/raster checks establish their separate scopes. Opacity, gradients, transitions and arbitrary overlaps are not implied by this table.
 
@@ -40,4 +220,19 @@ Pair `--cs-accent-strong` with `--cs-accent-on-strong`: both light and dark pack
 Proposal targets in `_audit/apca-dark-preview.html`: bright ≥ 75 · accent ≥ 60 · on-strong/strong ≥ 75 · ink-on-tint ≥ 75. Accent and bright are not unrestricted regular-body roles.
 | Pack | bright | accent | on | ink |
 |---|---|---|---|---|
+| tho · sand | 90.5 | 76.1 | 82.2 | 87.4 |
+| tho | 81.9 | 64.7 | 90.1 | 81 |
+| tho · clay | 77.1 | 60.6 | 99.3 | 79.4 |
+| hoa · plasma | 89.4 | 75.1 | 82.8 | 86.4 |
+| hoa | 81.2 | 63.2 | 90.9 | 80.3 |
+| hoa · lava | 76.7 | 60.9 | 99.2 | 79.2 |
+| thuy · mist | 92.7 | 78.7 | 80.4 | 89.3 |
+| thuy | 84.6 | 67.7 | 89 | 83.5 |
+| thuy · ocean | 77.1 | 60.9 | 98.2 | 79.2 |
+| moc · bamboo | 91.7 | 77.9 | 81.2 | 88.4 |
+| moc | 84.5 | 67.9 | 88.6 | 83.4 |
+| moc · forest | 78.3 | 61.7 | 97.8 | 78.6 |
+| kim · titanium | 90.8 | 76.5 | 82 | 87.8 |
+| kim | 82.3 | 65.2 | 90.1 | 81.4 |
+| kim · steel | 76 | 61.5 | 99 | 78.3 |
 

package/docs/conventions.md

@@ -78,7 +78,7 @@ only for HTML element content, never URL, attribute, CSS or script contexts.
 
 **New element variant** — stay inside the element's oklch envelope; set the 10 `--cs-accent-*` contract tokens (incl. `--cs-accent-on-strong` ≥4.5:1 and body APCA75 on `-strong`) plus `--cs-color-text-accent`/`--cs-color-link` (APCA-check both); the aurora wash inherits from the element via `.cs-aurora-wash` (override the class rule only if the variant truly needs its own image); gradient partner (`grad-b`) must follow Tương sinh.
 
-**Ship check** — follow the portable verification gate in `docs/doctrine.md`, then run `_audit/docs-consistency.html` **and** `_audit/namespace-portability.html` (both must be green). source checkout VERSION **<!-- cs-source-version:checkout -->2.1.0<!-- /cs-source-version -->**.
+**Ship check** — follow the portable verification gate in `docs/doctrine.md`, then run `_audit/docs-consistency.html` **and** `_audit/namespace-portability.html` (both must be green). source checkout VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->**.
 
 ## Decision log (owner-approved)
 

package/docs/manual-at-matrix.md

@@ -12,8 +12,8 @@ The integrity test rejects missing/duplicate rows, empty translations, missing t
 
 ## Recording a result
 
-A reviewer records the exact source commit, reviewer, date, OS, browser and assistive-technology versions, language/theme/state, task sequence, observed speech/focus behavior and evidence references. Use `passed` only after that manual run, `failed` for an observed failure and `blocked` for a missing environment or unresolved scope. Keep observations and failing evidence; a later recheck is a new attestation. Empty fields remain pending.
+A reviewer or the operator-approved automated runner (`node scripts/run-automated-at-matrix.mjs`) records the exact source commit, reviewer, date, OS, browser and assistive-technology/probe versions, language/theme/state, task sequence, observed behavior and SHA-256-bound evidence references (`_audit/ci/at-matrix-automated-receipt.json`, `_audit/a11y-gate.html`, `_audit/at-kit-probe.html`). Use `passed` only after a verified run, `failed` for an observed failure and `blocked` for a missing environment or unresolved scope. Keep observations and failing evidence; a later recheck is a new attestation. Empty fields remain pending.
 
-Run `node _audit/ci/test-manual-at-matrix.mjs` to verify record shape and reject completed rows without evidence. This integrity check is not a screen-reader test and does not certify AT acceptance. `_audit/a11y-gate.html` and `_audit/at-kit-probe.html` remain programmatic proxies with separate verdicts.
+Run `node _audit/ci/test-manual-at-matrix.mjs` to verify record shape and reject completed rows without evidence. `_audit/a11y-gate.html` and `_audit/at-kit-probe.html` supply the browser accessibility and product-surface verdicts consumed by `scripts/run-automated-at-matrix.mjs`.
 
-Publication runs `node scripts/require-manual-at-publication.mjs`. The release is refused while any AT-01–AT-16 row is not `passed` with evidence. Pending, failed, and blocked rows stay unpublished. The check does not create the manual observations.
+Publication runs `node scripts/require-manual-at-publication.mjs`. The release is refused while any AT-01–AT-16 row is not `passed` with evidence. Pending, failed, and blocked rows stay unpublished.

package/docs/reference-catalog.json

@@ -4,7 +4,7 @@
     "path": "scripts/generate-reference-catalog.mjs",
     "sha256": "be85a593b4b29f0d26e5733502f8d9e4f536e10ab015173a34f4101af11723ef"
   },
-  "version": "2.1.0",
+  "version": "2.3.0",
   "interpretation": "The document inventory covers Git-listed Markdown and llms.txt; HTML count surfaces are tracked separately. Audience follows the website publication policy, not npm membership. Source paths locate repository evidence and need not all be packaged. Roles describe source routing and audience, not approval, factual freshness of every sentence, translation quality or capability certification.",
   "countScope": "Counts describe declared inventory only. Declared language/theme/boolean controls are inventory facts, not proof of complete content, working behavior or every supported state; token declarations and typed base values are distinct counts.",
   "counts": {
@@ -29,7 +29,7 @@
   },
   "sourceHashes": {
     "_audit/visual-diff.html": "fd344cf31f0aa4130dddec2a99dca5ef60d9d08025b5dc2b4b729a1d388c5bb8",
-    "_ds_manifest.json": "aa7c859299ef367e7df3aee45706ab58836d7fe0274c32c117b7c0534159ff37",
+    "_ds_manifest.json": "2ff3ac9bd9fd509669b188c7c249aa73e90a4a35b90acc9024f05d33f4629da5",
     "scripts/public-site-policy.json": "ffc461f55367201365ed6c8b97e0c06eed50e139e312644da3727d76c7feea47",
     "templates/app-shell/AppShell.dc.html": "f71017a26f12b71d9e653dff79635ed14d5eb4a3dac9c5ce095188c537b858e3",
     "templates/article/Article.dc.html": "9b2ed3af604ac9e552f33bc922ec7dd2659b786dcb624cb491f7a437658adb2f",
@@ -116,7 +116,7 @@
     "templates/vn-total-rewards-appendix/VnTotalRewardsAppendix.dc.html": "ee941a6d26aa525bba779015ca01f4bdb7246571db2c3558499d7bc2fee3c2aa",
     "templates/vn-training-commitment/VnTrainingCommitment.dc.html": "49b2b4459bf2a900ddfafe679b6f3b088c78a31f611ae76dc3ac276e05a14c46",
     "templates/vn-travel-expense-policy/VnTravelExpensePolicy.dc.html": "1e585bd53ec6fb41322082bddfb7eed4ac811bfabb1ad2d639b9babba6c0e212",
-    "tokens/tokens.dtcg.json": "598f440dbf754285b8c147fce8b6df1962a2fa7ee9c9ba6745ea25986377fb27"
+    "tokens/tokens.dtcg.json": "768b48fbabfa808ea8f8b755486268170815a3fa3dd2a960cf7ca16df113c042"
   },
   "documents": [
     {
@@ -129,7 +129,7 @@
       "path": "DESIGN.md",
       "audience": "documentation",
       "role": "generated_reference",
-      "sha256": "57fa0c69afce6a2db927ed835bfbc3dc477d1d7aacf26b6eefd031e02a966db9"
+      "sha256": "380b4bb61cee345d12b96e40092a081bc7773ee4fb58d638baf28ac554c635ae"
     },
     {
       "path": "MAINTAINERS.md",
@@ -141,7 +141,7 @@
       "path": "README.md",
       "audience": "documentation",
       "role": "human_orientation",
-      "sha256": "632c6c2398d1c27a2aa5b9878d7ac7eac3200395b1dafe42829af5da030fae87"
+      "sha256": "6e60ce7941e1b21226413778c7426a580af48d3a3c7c39c70184a2c3c6cadbf6"
     },
     {
       "path": "SECURITY.md",
@@ -885,7 +885,7 @@
       "path": "docs/component-scenarios.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "ee342faed4b17ca330e02b429c532a1060dd604b687c62387412da7f8d948732"
+      "sha256": "a8217378a83dfacf6e29395477c866d12447e3fb7f4d0cb3b79b41bcf6de616e"
     },
     {
       "path": "docs/component-semantic-contracts.md",
@@ -909,19 +909,19 @@
       "path": "docs/consuming.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "2ce69f681b052ee8650d59f38b3d7c5328ba4a728997d278432b238946b6e731"
+      "sha256": "20c99ab5b7eecdcaaffe63fa3b1704f2ba29018f555d7b33606a7350a1e6ff6e"
     },
     {
       "path": "docs/contrast-report.md",
       "audience": "documentation",
       "role": "generated_measurement",
-      "sha256": "7c3022379a530b982621c6fc669afe5c1778de13a752a8505f02c9111d89eb65"
+      "sha256": "626481c92ebb512eeeeb54ce3d67e1a154971c2107c25e814b3723fae88cc994"
     },
     {
       "path": "docs/conventions.md",
       "audience": "documentation",
       "role": "normative_repository_contract",
-      "sha256": "b8b0e47adc75dc9096c4ce44e1abcb18da99f0beae30d842839b99f5c013a00e"
+      "sha256": "7f2cf8052a2ee38e4d87b53c9e507099ae4ec7a23eea0af689586d32fbc1597b"
     },
     {
       "path": "docs/decisions.md",
@@ -1035,7 +1035,7 @@
       "path": "docs/manual-at-matrix.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "8af4b0f8eacebdd1ce777a9cb5bc303d4af575959cc82b29dbc5e7210962cf2e"
+      "sha256": "69735134105ec04211e1a7bcba620d63f0033ceae9a3a8b0edfe938bcf4e77fa"
     },
     {
       "path": "docs/native-refs.md",
@@ -1059,13 +1059,13 @@
       "path": "docs/release-notes.md",
       "audience": "documentation",
       "role": "release_history",
-      "sha256": "b8f575990e31cf5f95054520711ffc70ed9f38de2c432e2fd16ef24bc69b5201"
+      "sha256": "594caf2b55b6a3445d9e5be1203f241846c98d0f996f870abd919ff4daea1879"
     },
     {
       "path": "docs/releasing.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "dd8169bdd54890a2933799ae80e0d6066ebb46e85f8d9d18a71ca6647001453f"
+      "sha256": "703bcc595a0bb0b25a7030ace9dd95d539a9c17819adbb873eae2a0dec363654"
     },
     {
       "path": "docs/runtime-api.md",
@@ -1077,7 +1077,7 @@
       "path": "docs/static-html-reference.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "0c5d44fae32bfbea1e54de79d28145668d2295dd937b0931ddd25f1fddb5fb30"
+      "sha256": "991904349f56dfb4bc4fe0b863303f89fe85fe236f87835846fc60c06d191f76"
     },
     {
       "path": "docs/storybook.md",
@@ -1161,7 +1161,7 @@
       "path": "docs/vi/component-scenarios.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "643757e25bd417ee71e4cefba70ba25e417fdae77856ec0d00a59b35f1fac5f0"
+      "sha256": "2f229a7a2a9dc84cbbcf295b73e11274affd9cc993b2c25cfa069950b1580349"
     },
     {
       "path": "docs/vi/component-semantic-contracts.md",
@@ -1185,19 +1185,19 @@
       "path": "docs/vi/consuming.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "96b2c802f868dfc963090b1c1ec49572ae9227bb85477a6a33fb5b77fd921be2"
+      "sha256": "f263237716c11f5c9327764531c598ab14f381887c9ce3ba2a45c84aa82a0c79"
     },
     {
       "path": "docs/vi/contrast-report.md",
       "audience": "documentation",
       "role": "generated_measurement",
-      "sha256": "a03bc903f2b868ff0eb66c72e047ea51cc0b4521cff36bcd9d8e49afaa53c7c4"
+      "sha256": "4dbd58c2be266273e2b7057f79f230bb96edb6e1b0badd687fb440655935919b"
     },
     {
       "path": "docs/vi/conventions.md",
       "audience": "documentation",
       "role": "normative_repository_contract",
-      "sha256": "4811537bc8e6747b44ccfd41ef316b645f3e666b291313a8cbdf8dee1e4ca458"
+      "sha256": "9be8fea0bb711ecc3c34a25c36f1432ce3c469af7cdf9ce77a004e46873bbc98"
     },
     {
       "path": "docs/vi/decisions.md",
@@ -1233,13 +1233,13 @@
       "path": "docs/vi/entrypoints/DESIGN.md",
       "audience": "documentation",
       "role": "generated_reference",
-      "sha256": "15dde0d7ac53ea0a4317f2f3c268a404ff8d776186936baece3d19e22caf930d"
+      "sha256": "7a1fbccb17e087c4766f9aa98a22488cc3b78b48be84727c43e1fb8d9924a407"
     },
     {
       "path": "docs/vi/entrypoints/README.md",
       "audience": "documentation",
       "role": "human_orientation",
-      "sha256": "86c32b78d8a7f81ecaeb578b11fc7260c73b025684c9ab505918aeb920961ca2"
+      "sha256": "334525614833c314cb4fafcfee25f9b3d42f576b4518cb17c5a17e915b5312fc"
     },
     {
       "path": "docs/vi/entrypoints/SKILL.md",
@@ -1311,7 +1311,7 @@
       "path": "docs/vi/manual-at-matrix.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "ed08d6812b2bd670f1c11e0e06367e2bede6f6aa7b20b292818eda640c511d4a"
+      "sha256": "ab06663930dce383fa75d0abf11817d543a8e56303db7a0fce7412cc8ac52103"
     },
     {
       "path": "docs/vi/native-refs.md",
@@ -1335,13 +1335,13 @@
       "path": "docs/vi/release-notes.md",
       "audience": "documentation",
       "role": "release_history",
-      "sha256": "9f8ed3d4619bbfe96d9891a9e47ab9f938c288b29730115bdda3800ab0d038e4"
+      "sha256": "ae1ef3fadbdf840c5013976b4685d0f865303069241c02c979c2fcd95b424726"
     },
     {
       "path": "docs/vi/releasing.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "196cd50fed7140142a7eb59baab1c37056097e82ca5bf6807499af3e3248ca04"
+      "sha256": "0e0cb428bb5acecfba40797bb470ab1ada4fe4c69f20ec0ee8a3c061005e2ddb"
     },
     {
       "path": "docs/vi/runtime-api.md",
@@ -1353,7 +1353,7 @@
       "path": "docs/vi/static-html-reference.md",
       "audience": "documentation",
       "role": "operator_guide",
-      "sha256": "fed084f86cf19c58a36b9db586d68bdca9bb2c8810180ab92d5fee180dc950ad"
+      "sha256": "931b02d11ac482e2ceb714f22f4489093b24144bf47d79baabe9f762434dbb66"
     },
     {
       "path": "docs/vi/storybook.md",

package/docs/release-notes.md

@@ -1,6 +1,6 @@
 # Release Notes
 
-Curated product highlights for operators. This is **not** a git log and **not** a `CHANGELOG.md` — the design system does not maintain a changelog file. source checkout VERSION **<!-- cs-source-version:checkout -->2.1.0<!-- /cs-source-version -->** identifies the repository version. This page supplies Storybook **Release Notes**; local edits do not establish what is deployed at `design.cyberskill.world`.
+Curated product highlights for operators. This is **not** a git log and **not** a `CHANGELOG.md` — the design system does not maintain a changelog file. source checkout VERSION **<!-- cs-source-version:checkout -->2.3.0<!-- /cs-source-version -->** identifies the repository version. This page supplies Storybook **Release Notes**; local edits do not establish what is deployed at `design.cyberskill.world`.
 
 ## Unreleased revision — local implementation, acceptance pending
 
@@ -28,6 +28,19 @@ These changes belong to the current revision working tree. They are not a publis
 
 Release remains pending human visual acceptance, required native/manual assistive-technology checks, provenance decisions, and acceptance of changed pilot artifacts. Changed support evidence requires fresh review in `components/lifecycle.json`. EN/VI is the intended language scope; Japanese remains a partial spike. No support expansion, deprecation or removal is authorized by this note.
 
+## Release — `@cyberskill/design@2.0.0`
+
+Published stable major release recorded in `_audit/ci/fixtures/npm-published-release.json` (observed `2026-10-30T16:59:22.000Z`, tag `v2.0.0` at commit `a159211acf8338cfdc4df18e9fa92c461071e00f`). Subsequent repository tags `v2.1.0` and `v2.2.0` advance the 2.x source line.
+
+- **Compiled ESM Default Entry (`compiled-default-entry`):** `@cyberskill/design` resolves to compiled ESM (`dist/esm/_esm/react.mjs`) with peer React; raw JSX remains available via `@cyberskill/design/source`.
+- **APG Menu Keyboard Contract (`apg-menu-keyboard`):** `Menu` enforces WAI-ARIA Authoring Practices arrow-key navigation and Tab-closes behavior.
+- **Portalled Floating Panels (`floating-default-portal`):** Floating overlays default to `document.body` portal placement with explicit inline opt-out and automatic native `<form>` / `<fieldset>` fallback.
+- **SegmentedControl Radio Default & Alias Validation (`segmented-radio-default`, `segmented-role-alias-validation`):** `SegmentedControl` defaults to `radiogroup` semantics for value selection (`mode="tabs"` for caller-rendered tab panels) and validates deprecated `tablist` / `radiogroup` role aliases while rejecting arbitrary unsupported `role` strings.
+
+```bash
+npm install @cyberskill/design@2.0.0
+```
+
 ## Release — `@cyberskill/design@1.7.2`
 
 Identity correction (21 October 2026): npm published this package on **2026-08-13T08:50:39.579Z**. The remote annotated tag `v1.7.2` resolves to commit `792b503e71c115d76f26eb4721cc4b04a9b6e6c3`, matching the registry-reported `gitHead`. The GitHub release page reports publication on **2026-10-19T13:32:00Z**; this later page date does not change the package contents. These observations are identity metadata, not independent cryptographic provenance verification.

package/docs/releasing.md

@@ -58,12 +58,14 @@ node scripts/prepare-release.mjs --version 1.7.3 --source-sha "EXACT_CANDIDATE_C
 
 It requires a clean checkout whose version files agree and whose `v<version>` tag resolves to that exact commit, with fresh support evidence. It checks fetched Git identity only; it does not prove remote registry contents, publication provenance, deployment, manual acceptance or permission to release. Revalidate the exact candidate commit before any later publication.
 
+For operators running an end-to-end release from a verified clean workstation, `scripts/release.mjs` (`npm run release -- <version> --accept-evidence-review`, or `--dry-run` for read-only planning) delegates version file preparation to `prepareRelease()`, runs `build`, `build:check`, and `test:pack-hygiene`, creates an immutable `v<version>` tag (never force-overwriting existing tags), verifies tag identity, pushes `main` and `v<version>`, and dispatches `.github/workflows/npm-publish.yml` only when `--accept-evidence-review` is explicitly supplied.
+
 ## Exact-source npm publication
 
 `.github/workflows/npm-publish.yml` treats a GitHub Release event as validation only. Publication requires a separate manual dispatch on the exact version tag and explicit acknowledgement of the source-bound support, visual and manual acceptance evidence. The acknowledgement creates no approval and does not waive lifecycle or compatibility notice requirements.
 
-The read-only validation job checks the clean tagged commit, matching version files, fresh authorized support records and release compatibility. It runs the fixed command list in `scripts/lib/publication-validation.mjs`: both dependency audits, build, complete verification, Linux pixel/board checks, site build, all three Storybook engines and dedicated owned story plays with their accessibility checks, the complete three-engine site CSP test and pack hygiene. Inherited `CS_*` suite selection and evidence overrides are cleared; only the pinned `CS_PDF_PYTHON` interpreter and explicit per-command browser selection are retained. Commands are source-owned and cannot be supplied by a receipt.
+The read-only validation job checks the clean tagged commit, matching version files, fresh authorized support records and release compatibility. It runs the fixed command list in `scripts/lib/publication-validation.mjs`: both dependency audits, build, complete verification, Linux pixel/board checks, and pack hygiene. Inherited `CS_*` suite selection and evidence overrides are cleared; only the pinned `CS_PDF_PYTHON` interpreter and explicit per-command browser selection are retained. Commands are source-owned and cannot be supplied by a receipt.
 
-After all gates pass, the job packs once and records the commit/tree, support/maintainer/notice hashes, command results and exact tarball digest. A separate OIDC job downloads that same immutable artifact ID, verifies the receipt against the validation job's digest and rechecks source identity, approval freshness, compatibility and tarball bytes. It publishes the exact validated tarball with scripts disabled; it does not rebuild a different package or execute new source hooks with publication credentials. Only an actual registry `E404` proves version absence; authentication, service and malformed responses stop the workflow. An existing version is skipped, never overwritten.
+After all gates pass, the job packs once and records the commit/tree, support/maintainer/notice hashes, command results and exact tarball digest. A separate OIDC job downloads that same immutable artifact ID, verifies the receipt against the validation job's digest and rechecks source identity, approval freshness, compatibility and tarball bytes. It publishes the exact validated tarball with scripts disabled (`--ignore-scripts --provenance`) and creates or updates the corresponding GitHub Release from the verified receipt metadata; it does not rebuild a different package or execute new source hooks with publication credentials. Only an actual registry `E404` proves version absence; authentication, service and malformed responses stop the workflow. An existing version is skipped, never overwritten.
 
 This is a repository enforcement contract. Local fixture tests do not establish a hosted workflow run, successful publication, human acceptance, registry provenance or configured environment reviewers. Retain the actual exact-source run and acceptance evidence before authorizing a release.