@godxjp/ui 23.4.1 → 23.4.3

package/dist/styles/font-fallbacks.css

@@ -0,0 +1,83 @@
+
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 400;
+  src: local("Arial"), local("ArialMT"), local("Liberation Sans"), local("LiberationSans");
+  size-adjust: 103.02%;
+  ascent-override: 112.6%;
+  descent-override: 27.96%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
+    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
+    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 500;
+  src: local("Arial"), local("ArialMT"), local("Liberation Sans"), local("LiberationSans");
+  size-adjust: 105.5%;
+  ascent-override: 109.95%;
+  descent-override: 27.3%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
+    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
+    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 700;
+  src:
+    local("Arial Bold"), local("Arial-BoldMT"), local("Liberation Sans Bold"),
+    local("LiberationSans-Bold");
+  size-adjust: 101.5%;
+  ascent-override: 114.29%;
+  descent-override: 28.37%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
+    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
+    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 400;
+  src:
+    local("Hiragino Sans W3"), local("HiraginoSans-W3"), local("Hiragino Kaku Gothic ProN W3"),
+    local("HiraKakuProN-W3"), local("Yu Gothic Medium"), local("YuGothic-Medium"), local("Meiryo"),
+    local("Noto Sans CJK JP"), local("NotoSansCJKjp-Regular"), local("IPAGothic");
+  ascent-override: 116%;
+  descent-override: 28.8%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
+}
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 500;
+  src:
+    local("Hiragino Sans W5"), local("HiraginoSans-W5"), local("Hiragino Kaku Gothic ProN W3"),
+    local("HiraKakuProN-W3"), local("Yu Gothic Medium"), local("YuGothic-Medium"), local("Meiryo"),
+    local("Noto Sans CJK JP Medium"), local("NotoSansCJKjp-Medium"), local("Noto Sans CJK JP"),
+    local("NotoSansCJKjp-Regular"), local("IPAGothic");
+  ascent-override: 116%;
+  descent-override: 28.8%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
+}
+@font-face {
+  font-family: "Noto Sans JP Fallback";
+  font-weight: 700;
+  src:
+    local("Hiragino Sans W6"), local("HiraginoSans-W6"), local("Hiragino Kaku Gothic ProN W6"),
+    local("HiraKakuProN-W6"), local("Yu Gothic Bold"), local("YuGothic-Bold"), local("Meiryo Bold"),
+    local("Meiryo-Bold"), local("Noto Sans CJK JP Bold"), local("NotoSansCJKjp-Bold"),
+    local("IPAGothic");
+  ascent-override: 116%;
+  descent-override: 28.8%;
+  line-gap-override: 0%;
+  unicode-range:
+    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
+}

package/dist/styles/fonts.css

@@ -6,88 +6,7 @@
 @import "@fontsource/noto-sans-jp/500.css";
 @import "@fontsource/noto-sans-jp/700.css";
 
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 400;
-  src: local("Arial"), local("ArialMT"), local("Liberation Sans"), local("LiberationSans");
-  size-adjust: 103.02%;
-  ascent-override: 112.6%;
-  descent-override: 27.96%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
-    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
-    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
-}
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 500;
-  src: local("Arial"), local("ArialMT"), local("Liberation Sans"), local("LiberationSans");
-  size-adjust: 105.5%;
-  ascent-override: 109.95%;
-  descent-override: 27.3%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
-    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
-    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
-}
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 700;
-  src:
-    local("Arial Bold"), local("Arial-BoldMT"), local("Liberation Sans Bold"),
-    local("LiberationSans-Bold");
-  size-adjust: 101.5%;
-  ascent-override: 114.29%;
-  descent-override: 28.37%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+0000-02CC, U+02CE-02D7, U+02DA, U+02DC-0301, U+0303-0304, U+0308-0309, U+0323, U+0329,
-    U+1D00-1DBF, U+1E00-1EFF, U+2000-206F, U+20A0-20C0, U+2113, U+2122, U+2191, U+2193, U+2212,
-    U+2215, U+2C60-2C7F, U+A720-A7FF, U+FEFF, U+FFFD;
-}
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 400;
-  src:
-    local("Hiragino Sans W3"), local("HiraginoSans-W3"), local("Hiragino Kaku Gothic ProN W3"),
-    local("HiraKakuProN-W3"), local("Yu Gothic Medium"), local("YuGothic-Medium"), local("Meiryo"),
-    local("Noto Sans CJK JP"), local("NotoSansCJKjp-Regular"), local("IPAGothic");
-  ascent-override: 116%;
-  descent-override: 28.8%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
-}
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 500;
-  src:
-    local("Hiragino Sans W5"), local("HiraginoSans-W5"), local("Hiragino Kaku Gothic ProN W3"),
-    local("HiraKakuProN-W3"), local("Yu Gothic Medium"), local("YuGothic-Medium"), local("Meiryo"),
-    local("Noto Sans CJK JP Medium"), local("NotoSansCJKjp-Medium"), local("Noto Sans CJK JP"),
-    local("NotoSansCJKjp-Regular"), local("IPAGothic");
-  ascent-override: 116%;
-  descent-override: 28.8%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
-}
-@font-face {
-  font-family: "Noto Sans JP Fallback";
-  font-weight: 700;
-  src:
-    local("Hiragino Sans W6"), local("HiraginoSans-W6"), local("Hiragino Kaku Gothic ProN W6"),
-    local("HiraKakuProN-W6"), local("Yu Gothic Bold"), local("YuGothic-Bold"), local("Meiryo Bold"),
-    local("Meiryo-Bold"), local("Noto Sans CJK JP Bold"), local("NotoSansCJKjp-Bold"),
-    local("IPAGothic");
-  ascent-override: 116%;
-  descent-override: 28.8%;
-  line-gap-override: 0%;
-  unicode-range:
-    U+3000-30FF, U+31F0-31FF, U+3400-4DBF, U+4E00-9FFF, U+F900-FAFF, U+FF00-FFEF, U+20000-2FA1F;
-}
+@import "./font-fallbacks.css";
 
 :root {
   --font-sans-base:

package/dist/styles/layout.css

@@ -1238,7 +1238,6 @@
   .ui-filter-bar-chip {
     display: inline-flex;
     align-items: center;
-    gap: var(--space-1);
     min-width: 0;
   }
 
@@ -1417,28 +1416,36 @@
 
   @media (width < 40rem) {
     .ui-flex[data-hide-below="sm"],
-    .ui-topbar-item[data-hide-below="sm"] {
+    .ui-topbar-item[data-hide-below="sm"],
+    [data-slot="table-head"][data-hide-below="sm"],
+    [data-slot="table-cell"][data-hide-below="sm"] {
       display: none;
     }
   }
 
   @media (width < 48rem) {
     .ui-flex[data-hide-below="md"],
-    .ui-topbar-item[data-hide-below="md"] {
+    .ui-topbar-item[data-hide-below="md"],
+    [data-slot="table-head"][data-hide-below="md"],
+    [data-slot="table-cell"][data-hide-below="md"] {
       display: none;
     }
   }
 
   @media (width < 64rem) {
     .ui-flex[data-hide-below="lg"],
-    .ui-topbar-item[data-hide-below="lg"] {
+    .ui-topbar-item[data-hide-below="lg"],
+    [data-slot="table-head"][data-hide-below="lg"],
+    [data-slot="table-cell"][data-hide-below="lg"] {
       display: none;
     }
   }
 
   @media (width < 80rem) {
     .ui-flex[data-hide-below="xl"],
-    .ui-topbar-item[data-hide-below="xl"] {
+    .ui-topbar-item[data-hide-below="xl"],
+    [data-slot="table-head"][data-hide-below="xl"],
+    [data-slot="table-cell"][data-hide-below="xl"] {
       display: none;
     }
   }
@@ -1792,6 +1799,7 @@
     flex-direction: column;
     inline-size: var(--draggable-panel-width);
     max-inline-size: calc(100% - var(--draggable-panel-inset) - var(--draggable-panel-inset));
+    block-size: var(--draggable-panel-block-size);
     max-block-size: var(--draggable-panel-max-block-size);
     border: var(--draggable-panel-border-width) solid hsl(var(--border));
     border-radius: var(--draggable-panel-radius);
@@ -1811,6 +1819,10 @@
     inline-size: var(--draggable-panel-width-lg);
   }
 
+  .ui-draggable-panel[data-width="xl"] {
+    inline-size: var(--draggable-panel-width-xl);
+  }
+
   .ui-draggable-panel[data-placement^="top"] {
     inset-block-start: var(--draggable-panel-inset);
   }

package/dist/tokens/components/badge.css

@@ -12,6 +12,12 @@
 
   --badge-icon-size: var(--icon-size-xs);
 
+  --badge-space-x-removable: var(--space-1);
+  --badge-remove-offset-inline-end: calc(-1 * var(--space-1));
+  --badge-remove-icon-size: var(--badge-icon-size);
+  --badge-remove-rest-alpha: 0.7;
+  --badge-remove-hover-alpha: 1;
+
   --badge-tint-fill: 18%;
   --badge-tint-edge: 45%;
 

package/dist/tokens/components/draggable-panel.css

@@ -12,6 +12,10 @@
   --draggable-panel-width-sm: 18rem;
   --draggable-panel-width: 22rem;
   --draggable-panel-width-lg: 28rem;
+
+  --draggable-panel-width-xl: var(--centered-shell-width-md);
+
+  --draggable-panel-block-size: auto;
   --draggable-panel-max-block-size: 70vh;
 
   --draggable-panel-radius: var(--radius-lg);

package/dist/tokens/components/segmented.css

@@ -22,4 +22,12 @@
 
   --segmented-item-selected-background: var(--background);
   --segmented-item-selected-shadow: var(--shadow-sm);
+
+  --segmented-count-min-width: var(--button-count-min-width);
+  --segmented-count-space-inline: var(--button-count-space-inline);
+  --segmented-count-font-size: var(--button-count-font-size);
+  --segmented-count-radius: var(--radius-pill);
+  --segmented-count-gap: var(--space-1);
+  --segmented-count-background: initial;
+  --segmented-count-color: initial;
 }

package/docs/CONSUMER-RULES.md

@@ -2,7 +2,7 @@
 
 Read this once; the audit enforces it. Everything else in `docs/` is for contributors.
 
-1. Load styles with `@import "@godxjp/ui/styles"` (fonts bundled) or `@import "@godxjp/ui/styles/core"` (no fonts). Never cherry-pick `*-layout.css`.
+1. Load styles with `@import "@godxjp/ui/styles"` (fonts bundled), `@import "@godxjp/ui/styles/core"` (no `@font-face` at all) or `@import "@godxjp/ui/styles/core-with-fallbacks"` (`core` + six `local()`-only metric-matched faces, still zero network bytes — for when you supply Noto Sans JP yourself). Never cherry-pick `*-layout.css`.
 2. Every page is `<PageContainer title subtitle extra footer>`; its sections are spaced by the page. Group items inside a section with `<Flex direction="col" gap>` or `<ResponsiveGrid>`.
 3. No Tailwind layout on your own elements: no `flex`, `grid`, `gap-*`, `p-*`, `m-*`, `space-*`. Rows are `<Flex>` (default row), stacks are `<Flex direction="col">`, grids are `<ResponsiveGrid>`.
 4. No hand-rolled surfaces: no `rounded-* border bg-*` divs. A box is `Card`, a pill is `Badge`, a person is `Avatar`, a row is `ListRow`, a label/value pair is `Descriptions`, an empty area is `EmptyState`, a read-only sample of a colour the USER chose is `Swatch`.

package/docs/CUSTOMER-THEMING.md

@@ -16,14 +16,28 @@ That single import ships everything: colors, the bundled fonts (**Noto Sans JP**
 
 ---
 
-## CSS entries — `styles` or `styles/core`, nothing smaller
+## CSS entries — `styles`, `styles/core`, `styles/core-with-fallbacks`, nothing smaller
 
-`@godxjp/ui/styles` bundles every component's CSS plus the fonts. When you manage fonts yourself (next/font, a system stack, a browser extension that must not ship font files), load the same layers without the faces:
+`@godxjp/ui/styles` bundles every component's CSS plus the fonts: **729 woff2 subsets, ~11.7 MB on disk** at the current @fontsource versions (issue #535 measured 737 files / 13 MB in a real consumer build). When you manage fonts yourself (next/font, a system stack, a browser extension that must not ship font files), load the same layers without the faces:
 
 ```css
 @import "@godxjp/ui/styles/core"; /* every component layer, no @font-face */
 ```
 
+`core` carries **zero** `@font-face` — `grep -c '@font-face' node_modules/@godxjp/ui/dist/styles/core.css` → `0` — and that number is the point of it. If you supply Noto Sans JP yourself and also want the cold-visit swap to stop reflowing the page (issue #475), take the third entry: `core` plus the six metric-matched fallback faces, every one `local()`-only, so the extra cost over `core` is **zero network bytes**.
+
+```css
+@import "@godxjp/ui/styles/core-with-fallbacks"; /* core + 6 local()-only faces */
+```
+
+It declares the faces and nothing else — name the family yourself, directly after your own face:
+
+```css
+:root {
+  --font-sans-base: "Noto Sans JP", "Noto Sans JP Fallback", system-ui, sans-serif;
+}
+```
+
 The per-layer files (`control`, `card-layout`, `navigation-layout`, …) are the package's internal structure, **not a public menu**. Layers share rules — a Select's rows and a menu's surface, a form's rhythm, a card's header type — so a page that loads a subset renders naked menus and unsized rows with no error. The runtime `visual-audit` reports it as `css-layers-missing`.
 
 ---

package/docs/DESIGN-AUTHORITY.md

@@ -242,6 +242,21 @@ in page CSS.
 - **A capability this library already has keeps its own name.** antd's `size`
   (`small | middle | large`) IS `density` (`compact | default | comfortable`); antd's `locale` IS
   the `t()` layer. Adding the antd spelling as an alias would be duplication, not parity.
+- **`SegmentedOption.count`.** antd's `SegmentedItemType` has no count field — consumers embed counts
+  in `label`. Nested `Badge` `secondary` is `--muted`, which matches the Segmented track
+  (gh#602, measured 1.00:1). This library adds `count` / `overflowCount` / `showZero` /
+  `countLabel` on `SegmentedOption` with a DS-owned pill (`--segmented-count-*` tokens), same
+  counter vocabulary as `Button` / `Toggle`.
+- **`DraggablePanel.labels`.** antd's Draggable Modal demo has no i18n hook for the drag handle.
+  Embedded consumers cannot mount `AppProvider` without writing theme attributes on the host
+  `document.documentElement` (gh#606). `labels?: { close?: string; move?: string }` overrides `t()`
+  per control; a scoped `AppProvider` subtree remains the long-term fix.
+- **`Badge.onRemove` instead of antd `Tag`'s `closable` + `onClose`.** Semantics match antd's
+  closable tag (a chip that draws its own × and fires one callback). The boolean is folded into
+  prop presence (`onRemove` omitted ⇒ no ×), and the callback is named `onRemove` rather than
+  `onClose`, because `onClose` already means overlay dismiss across Dialog/Drawer and would read
+  as closing a surface, not removing one applied filter chip. Implemented on `Badge` — the DS chip
+  primitive — rather than adding a separate `Tag` export beside `Badge`.
 
 **A knob that only a fork could reach is not parity either.** antd's `components`,
 `filterDropdown`, `classNames`/`styles` semantic maps and `prefixCls` all exist to let a consumer

package/docs/data-entry/segmented-in-filter-row.tsx

@@ -1,11 +1,4 @@
-import {
-  Badge,
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
-} from "@godxjp/ui/data-display";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@godxjp/ui/data-display";
 import { Segmented } from "@godxjp/ui/data-entry";
 import { Button, Text } from "@godxjp/ui/general";
 import { Flex, PageContainer } from "@godxjp/ui/layout";
@@ -24,17 +17,7 @@ const OPTIONS = [
   { value: "ginou", label: "技能実習", count: 82 },
   { value: "tokutei", label: "特定技能", count: 51 },
   { value: "ikusei", label: "育成就労", count: 0 },
-].map(({ value, label, count }) => ({
-  value,
-  label: (
-    <>
-      {label}
-      <Badge as="span" variant="secondary">
-        {count}
-      </Badge>
-    </>
-  ),
-}));
+];
 
 export default function SegmentedInFilterRow() {
   return (

package/docs/data-entry/segmented.tsx

@@ -1,13 +1,6 @@
 import { useState } from "react";
 
-import {
-  Badge,
-  Card,
-  CardContent,
-  CardDescription,
-  CardHeader,
-  CardTitle,
-} from "@godxjp/ui/data-display";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "@godxjp/ui/data-display";
 import { FormField, Segmented } from "@godxjp/ui/data-entry";
 import { Text, VisuallyHidden } from "@godxjp/ui/general";
 import { Flex, PageContainer } from "@godxjp/ui/layout";
@@ -108,17 +101,7 @@ export default function Demo() {
                 { value: "active", label: "実習中", count: 96 },
                 { value: "pending", label: "申請中", count: 12 },
                 { value: "gone", label: "失踪・帰国", count: 0 },
-              ].map(({ value, label, count }) => ({
-                value,
-                label: (
-                  <>
-                    {label}
-                    <Badge as="span" variant="secondary">
-                      {count}
-                    </Badge>
-                  </>
-                ),
-              }))}
+              ]}
             />
           </CardContent>
         </Card>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@godxjp/ui",
-  "version": "23.4.1",
-  "godxUiMcp": "23.4.1",
+  "version": "23.4.3",
+  "godxUiMcp": "23.4.3",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -46,6 +46,8 @@
       "import": "./dist/index.js"
     },
     "./styles": "./dist/styles/index.css",
+    "./styles/core": "./dist/styles/core.css",
+    "./styles/core-with-fallbacks": "./dist/styles/core-with-fallbacks.css",
     "./styles/*": "./dist/styles/*.css",
     "./theme/*": "./dist/theme/*",
     "./tokens": "./dist/tokens/base.css",

package/scripts/_agent-setup.mjs

@@ -24,13 +24,37 @@ import {
 import { basename, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
-/** The godxjp-ui MCP server — pulled on demand via npx (no extra dependency to ship). */
 /** This package's own root — the source of the version we stamp with. */
 const SELF_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
 
-export const MCP_SERVER = { command: "npx", args: ["@godxjp/ui-mcp"] };
 export const MCP_KEY = "godx-ui";
 
+/** @deprecated Prefer `mcpServerFor(root)` — bare npx resolves latest on the registry (gh#543). */
+export const MCP_SERVER = { command: "npx", args: ["@godxjp/ui-mcp"] };
+
+function mcpEntryMatches(a, b) {
+  if (a?.command !== b?.command) return false;
+  const argsA = a?.args ?? [];
+  const argsB = b?.args ?? [];
+  if (argsA.length !== argsB.length || argsA.some((x, i) => x !== argsB[i])) return false;
+  const envA = a?.env ?? {};
+  const envB = b?.env ?? {};
+  const keysA = Object.keys(envA).sort();
+  const keysB = Object.keys(envB).sort();
+  if (keysA.length !== keysB.length || keysA.some((k, i) => k !== keysB[i])) return false;
+  return keysA.every((k) => envA[k] === envB[k]);
+}
+
+function mcpConfigMismatchMessage(root, existing, expected) {
+  const ui = readConsumerUiMetadata(root);
+  const pin = expected.args?.[0] ?? "@godxjp/ui-mcp";
+  const ver = ui?.version ?? "(unknown)";
+  return (
+    `present (custom godx-ui MCP entry — not overwritten; expected ${pin} with ` +
+    `env.GODX_UI_VERSION=${ver} from node_modules/@godxjp/ui)`
+  );
+}
+
 /** Commands wired into the consumer's .claude/settings.json. */
 export const AUDIT_HOOK_CMD = "node node_modules/@godxjp/ui/scripts/audit-hook.mjs";
 export const PRIMER_CMD = "cat .claude/godxjp-ui-workflow.md";
@@ -46,6 +70,31 @@ const SUGGESTED_HOOKS = {
 /** The per-session workflow mandate the SessionStart hook injects into the agent. */
 export const KIT_VERSION = readJson(join(SELF_ROOT, "package.json"))?.version ?? "0.0.0";
 
+/**
+ * Read the consumer's installed @godxjp/ui metadata (postinstall runs with UI already in
+ * node_modules). Returns null when absent — caller falls back to this package's release train.
+ */
+export function readConsumerUiMetadata(root) {
+  const uiPkg = readJson(join(root, "node_modules/@godxjp/ui/package.json"));
+  if (!uiPkg?.version) return null;
+  return {
+    version: String(uiPkg.version),
+    godxUiMcp: uiPkg.godxUiMcp ? String(uiPkg.godxUiMcp) : String(uiPkg.version),
+  };
+}
+
+/**
+ * MCP launch config for a consumer root: pin @godxjp/ui-mcp to godxUiMcp from the installed UI
+ * package and pass the real UI version via env (gh#543 — MCP must not read the repo to learn it).
+ */
+export function mcpServerFor(root) {
+  const meta = readConsumerUiMetadata(root);
+  const mcpPin = meta?.godxUiMcp ?? KIT_VERSION;
+  const server = { command: "npx", args: [`@godxjp/ui-mcp@${mcpPin}`] };
+  if (meta?.version) server.env = { GODX_UI_VERSION: meta.version };
+  return server;
+}
+
 const STAMP = (v) => `<!-- godxjp-ui:version ${v} -->`;
 const STAMP_RE = /<!-- godxjp-ui:version ([^\s]+) -->/;
 
@@ -76,6 +125,18 @@ export function stampedDigest(text) {
   return text?.match(DIGEST_RE)?.[1] ?? null;
 }
 
+/**
+ * Refresh only the human-readable release marker when the managed body is already current.
+ *
+ * The writer keys off digest; `ui-audit` keys off version (godx-jp/id#513). When rule text is
+ * unchanged across releases both must still agree after sync — without rewriting the body or
+ * breaking idempotency when digest and version already match.
+ */
+function resyncVersionStamp(text) {
+  if (stampedVersion(text) === KIT_VERSION) return null;
+  return text.replace(STAMP_RE, `<!-- godxjp-ui:version ${KIT_VERSION} -->`);
+}
+
 /**
  * Replace the MANAGED region of a file and leave everything else alone.
  *
@@ -291,13 +352,11 @@ export function refreshBlock(current, next, startMarker, endMarker) {
 
 export function ensureMcpJson(root) {
   const path = join(root, ".mcp.json");
+  const expected = mcpServerFor(root);
+  const suggested = JSON.stringify({ mcpServers: { [MCP_KEY]: expected } }, null, 2) + "\n";
   const read = readJsonFile(path);
   if (read.state !== "ok" && read.state !== "missing") {
-    return refuseAndSuggest(
-      path,
-      JSON.stringify({ mcpServers: { [MCP_KEY]: MCP_SERVER } }, null, 2) + "\n",
-      READ_FAILURE[read.state],
-    );
+    return refuseAndSuggest(path, suggested, READ_FAILURE[read.state]);
   }
   const json = read.state === "ok" ? read.json : {};
   if (
@@ -306,16 +365,17 @@ export function ensureMcpJson(root) {
       typeof json.mcpServers !== "object" ||
       Array.isArray(json.mcpServers))
   ) {
-    return refuseAndSuggest(
-      path,
-      JSON.stringify({ mcpServers: { [MCP_KEY]: MCP_SERVER } }, null, 2) + "\n",
-      "`mcpServers` is not an object",
-    );
+    return refuseAndSuggest(path, suggested, "`mcpServers` is not an object");
   }
   json.mcpServers = json.mcpServers ?? {};
-  if (json.mcpServers[MCP_KEY]) return "present";
+  if (json.mcpServers[MCP_KEY]) {
+    if (!mcpEntryMatches(json.mcpServers[MCP_KEY], expected)) {
+      return mcpConfigMismatchMessage(root, json.mcpServers[MCP_KEY], expected);
+    }
+    return "present";
+  }
   const created = read.state === "missing";
-  json.mcpServers[MCP_KEY] = MCP_SERVER;
+  json.mcpServers[MCP_KEY] = expected;
   writeFileAtomic(path, JSON.stringify(json, null, 2) + "\n");
   return created ? "created" : "added";
 }
@@ -485,7 +545,14 @@ export function refreshGuineaPigSkill(root) {
    * to anyone reading it. Only the digest half is compared.
    */
   const stamp = `${KIT_VERSION}:${digestOf(base)}`;
-  if (readFileSync(optin, "utf8").trim().split(":").pop() === digestOf(base)) return false;
+  const optinLine = readFileSync(optin, "utf8").trim();
+  const optinDigest = optinLine.split(":").pop();
+  if (optinDigest === digestOf(base)) {
+    if (optinLine.split(":")[0] === KIT_VERSION) return false;
+    // Base unchanged — only the release half of `<version>:<digest>` drifted (same split as above).
+    writeFileAtomic(optin, `${stamp}\n`);
+    return true;
+  }
 
   const current = readFileSync(target, "utf8");
   const marker = "\n---\n\n# 8. ";
@@ -533,8 +600,14 @@ export function ensureConsumerRules(root) {
   const managed = `${front}${body}`;
   const next = `${OWNED_STAMP(managed)}\n${managed}`;
 
-  if (existsSync(target) && stampedDigest(readFileSync(target, "utf8")) === digestOf(managed)) {
-    return false;
+  if (existsSync(target)) {
+    const current = readFileSync(target, "utf8");
+    if (stampedDigest(current) === digestOf(managed)) {
+      const resynced = resyncVersionStamp(current);
+      if (resynced == null) return false;
+      writeFileAtomic(target, resynced);
+      return uiDir;
+    }
   }
   mkdirSync(dir, { recursive: true });
   writeFileAtomic(target, next);

package/scripts/cli.mjs

@@ -2,6 +2,7 @@
 /**
  * @godxjp/ui CLI — `npx @godxjp/ui <command>`.
  *   init-agent     scaffold the agent forcing-kit (MCP + auto-audit hook + mandate)
+ *   sync-rules     refresh package-owned agent rules (same path as postinstall)
  *   audit          static UI audit (regex over source)
  *   visual-audit   runtime audit (Playwright + axe-core) against a running app
  */
@@ -12,6 +13,7 @@ import { fileURLToPath } from "node:url";
 const HERE = dirname(fileURLToPath(import.meta.url));
 const MAP = {
   "init-agent": "init-agent-kit.mjs",
+  "sync-rules": "postinstall.mjs",
   audit: "ui-audit.mjs",
   "visual-audit": "visual-audit.mjs",
 };
@@ -19,8 +21,10 @@ const MAP = {
 const [cmd, ...rest] = process.argv.slice(2);
 const script = MAP[cmd];
 if (!script) {
-  console.error("usage: godxjp-ui <init-agent | audit | visual-audit> [args]");
+  console.error("usage: godxjp-ui <init-agent | sync-rules | audit | visual-audit> [args]");
   process.exit(1);
 }
-const r = spawnSync("node", [join(HERE, script), ...rest], { stdio: "inherit" });
+const env =
+  cmd === "sync-rules" ? { ...process.env, INIT_CWD: process.env.INIT_CWD ?? process.cwd() } : process.env;
+const r = spawnSync("node", [join(HERE, script), ...rest], { stdio: "inherit", env });
 process.exit(r.status ?? 0);