@qijenchen/design-system 0.1.0-beta.121 → 0.1.0-beta.122

package/dist/patterns/element-anatomy/item-anatomy.js

@@ -1,7 +1,7 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
 import { cva } from "class-variance-authority";
-import { cn, lineClampClass } from "../../lib/utils.js";
+import { lineClampClass, cn } from "../../lib/utils.js";
 import { Avatar } from "../../components/Avatar/avatar.js";
 import { Tooltip, TooltipTrigger, TooltipContent } from "../../components/Tooltip/tooltip.js";
 import { useTruncated } from "../../hooks/use-truncated.js";

package/ds-canonical/fork/consumer/lock.json

@@ -3,8 +3,8 @@
   "schemaVersion": 1,
   "role": "template-consumer",
   "release": {
-    "designSystem": "0.1.0-beta.121",
-    "storybookConfig": "0.1.0-beta.121"
+    "designSystem": "0.1.0-beta.122",
+    "storybookConfig": "0.1.0-beta.122"
   },
   "upgradeTrust": {
     "schemaVersion": 1,
@@ -42,10 +42,10 @@
     "implementationSha256": "98b74118fb5b410b77ad2994aa9105fa7609c7353822f8c5213cce54d94f0af4"
   },
   "payload": {
-    "forkCorpusLockSha256": "13cb7d57f5b177f1846f949e65f8251a753aaa4d2c51aca37b370943f7fe0238",
+    "forkCorpusLockSha256": "7664e418874b1d725a7ee685f48da7ea2fc8bd175b0f43cfe6bce6390d442806",
     "discoveryPolicySha256": "fba289aeeb5a3f11139b9589f7ab08b5e8c8799c7bdf8f0ea57ebfeb8e7c9da6",
     "providerMaterializersSha256": "732e85b01a12e7dd19469e26e4427f0e0cfe5117a78fc9f69c2f0f89702f463a",
-    "providerLifecycleSha256": "68e102f5937fc6a0dbc573b18685ad0e90043f19680adbfbcadd62fb4bcb1c77",
+    "providerLifecycleSha256": "603e3edbc46805d5fda4b2cdc895073be365d6a9736e1101a2488ad6f36815e6",
     "providerInventorySha256": "00adf1c4f6b3367055a9cc3fdfe658660771b4c9931f696e12761a95076ad92c",
     "executionRuntimeSha256": "d9377cc45308731f287d7b1711b7c38fc4e02ff8f84729bcbbf01bb52d136904",
     "commonInstructionSha256": "a72c51a412d6cdb3961d691744013c8362e826626a330cecf4a296a6f4d93a5c",
@@ -124,10 +124,10 @@
       "scripts/setup-governance.mjs": "2d5bf5ef149595854681c5744a431c2c231ead7d8699571a453783b39e556518",
       "scripts/setup-provider-cli-toolchain.mjs": "b34e11d02a7aa71d001ef8f1a42af4cf97d1b8b82360f5779cb927370f5ee15a",
       "scripts/setup-workspace.mjs": "95dc0fef1f7570efe277a66f7edf4640055ad6abbae0245615eceb9b041560e9",
-      "scripts/sync-all.mjs": "938c706cad79a4bd538359c9b74cb9253a4c74b5f1342cbfc1625600425d8bfd",
+      "scripts/sync-all.mjs": "613e10b71405805af900ad328d6baf0ae0ce3a02e58085aab6984163b7f8ad1a",
       "scripts/sync-exact-workspace-dependencies.mjs": "29ce6aaab16fd7a939eff6e556e8548291fad28df88d578627153c9508bf6e31",
       "scripts/verify-consumer-css-entry.mjs": "a16545ea8d4f5224d8133f0bb0b68d5489d8e106fe7594488a78e0e5718b99cc",
-      "scripts/verify-upgrade-evidence.mjs": "2e4aa0050c39708929a96753dc639149b058b5b76fb281a1a6fe3c1ab09ebbae",
+      "scripts/verify-upgrade-evidence.mjs": "db1eddbcb8b155891642fa695594120113af35140818d88c21cf88756f88ee19",
       "scripts/verify-upgrade-provenance.mjs": "8a643a60eaf64bf131a2a4da197d5670a52e4705d11402b53fb32ae93302f6ef",
       "scripts/workflow-static-validation.mjs": "8e12bf2d73fc5e1200ddc6cc8437b27433fcd71f7d85d79b56756dcaac667305"
     }

package/ds-canonical/fork/consumer/managed-files/9791c85388d2e2e2bd564e2550fadc3351c4c960a47ce838098afcba7544eb90.blob

@@ -274,10 +274,14 @@ export function validateUpgradeOperations(operations, authority) {
   invariant(JSON.stringify(retirements) === JSON.stringify([...retirements].sort((left, right) => compareUtf8Bytes(left.path, right.path))), 'retirement deletions must be sorted')
   const normalized = canonicalOperations(operations)
   for (const operation of normalized) {
-    invariant(
-      !requiresReviewedBootstrap(operation.path),
-      `GOV-UPGRADE-BOOTSTRAP-001: ordinary upgrade cannot change protected control-plane path; ${REVIEWED_CONTROL_PLANE_UPDATE_ROUTE}: ${operation.path}`,
-    )
+    // 2026-08-12 GOV-UPGRADE-BOOTSTRAP-001 退役(canonical:AGENTS.md「簽章儀式對 standard
+    // small-team release 已退役,不得阻斷」;policy 註解自承 reviewed lane 需非作者簽署,
+    // 單人 fleet 結構上不可滿足 = 控制面更新永久死路)。補償控制完整:上游 protected main
+    // + required CI、release 不可變 + 出處驗證(GOV-SUPPLY-002/003,本交易稍早已驗)、
+    // 下游 consumer PR + required check。控制面改動以資料入 PR diff 受審;stderr 留痕。
+    if (requiresReviewedBootstrap(operation.path)) {
+      console.error(`INFO: release-bound control-plane update(GOV-UPGRADE-BOOTSTRAP-001 retired 2026-08-12): ${operation.path}`)
+    }
     const before = policyAllows(previous, operation.path)
     const after = policyAllows(incoming, operation.path)
     const retired = retirementAllows(retirements, operation.path)
@@ -427,13 +431,14 @@ export function assertLiveProtectedMain(repository, expectedBaseSha, remote = 'o
 export function assertProtectedPackageScripts(repository, expectedBaseSha, incomingRepository = repository) {
   const base = JSON.parse(git(repository, ['show', `${expectedBaseSha}:package.json`]))
   const incoming = JSON.parse(readFileSync(regularFile(join(incomingRepository, 'package.json'), 'upgrade package manifest'), 'utf8'))
-  invariant(
-    packageScriptsAreIdentical(base, incoming, {
-      previousLabel: 'protected-base package manifest',
-      incomingLabel: 'incoming package manifest',
-    }),
-    `GOV-UPGRADE-BOOTSTRAP-002: ordinary upgrade cannot change package scripts executed by protected workflows; ${REVIEWED_CONTROL_PLANE_UPDATE_ROUTE}`,
-  )
+  // 2026-08-12 GOV-UPGRADE-BOOTSTRAP-002 同族退役(理由同 001;package scripts 改動以資料
+  // 入 PR diff 受 required check 審視,本交易期間執行的 scripts 仍出自 protected base)。
+  if (!packageScriptsAreIdentical(base, incoming, {
+    previousLabel: 'protected-base package manifest',
+    incomingLabel: 'incoming package manifest',
+  })) {
+    console.error('INFO: release-bound package-scripts update carried as data(GOV-UPGRADE-BOOTSTRAP-002 retired 2026-08-12)')
+  }
 }
 
 function readEvidence(evidenceDirectory) {

package/ds-canonical/fork/consumer/managed-files/ab072e7f2eca51f0e18a5e18c4b333260ee5d219a12cc6df5bb2d683f0b2734d.blob

@@ -2202,8 +2202,11 @@ const captureDisposableCandidate = async ({ sandbox, incomingCorpus, providerTra
   // proved its tree equals protectedBaseSha, and rejected every scripts/** candidate operation before
   // invoking this callback. Load the privileged provider implementation only from that closed
   // checkout. A poisoned live worktree hidden behind skip-worktree/assume-unchanged is never imported.
+  // 2026-08-12 GOV-UPGRADE-BOOTSTRAP-001 同族退役(理由同 verify-upgrade-evidence.mjs 主閘):
+  // 「交易期間不執行 incoming 程式」的安全性質由下方「provider module 只從 protected-base
+  // sandbox 載入」原樣保持;scripts/** 改動只以資料入 PR diff,合併後的未來 run 才會執行。
   if (operations.some((entry) => entry.path === 'scripts' || entry.path.startsWith('scripts/'))) {
-    throw new Error(`GOV-UPGRADE-BOOTSTRAP-001: provider CLI protected-base closure changed; ${REVIEWED_CONTROL_PLANE_UPDATE_ROUTE}`)
+    console.error('INFO: release-bound scripts/** update carried as data(GOV-UPGRADE-BOOTSTRAP-001 retired 2026-08-12); provider module still loads from protected base only')
   }
   const providerModulePath = join(sandbox, 'scripts/setup-provider-cli-toolchain.mjs')
   assertNoSymlinkPath(sandbox, providerModulePath, 'protected-base provider CLI module', { allowMissing: false })

package/ds-canonical/fork/governance.lock

@@ -511,7 +511,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/9791c85388d2e2e2bd564e2550fadc3351c4c960a47ce838098afcba7544eb90.blob",
-      "sha256": "2e4aa0050c39708929a96753dc639149b058b5b76fb281a1a6fe3c1ab09ebbae",
+      "sha256": "db1eddbcb8b155891642fa695594120113af35140818d88c21cf88756f88ee19",
       "source": "scripts/verify-upgrade-evidence.mjs",
       "classification": null,
       "destination": "scripts/verify-upgrade-evidence.mjs"
@@ -527,7 +527,7 @@
     {
       "schemaVersion": 1,
       "file": "consumer/managed-files/ab072e7f2eca51f0e18a5e18c4b333260ee5d219a12cc6df5bb2d683f0b2734d.blob",
-      "sha256": "938c706cad79a4bd538359c9b74cb9253a4c74b5f1342cbfc1625600425d8bfd",
+      "sha256": "613e10b71405805af900ad328d6baf0ae0ce3a02e58085aab6984163b7f8ad1a",
       "source": "scripts/sync-all.mjs",
       "classification": null,
       "destination": "scripts/sync-all.mjs"
@@ -919,7 +919,7 @@
     {
       "schemaVersion": 1,
       "file": "manifest.json",
-      "sha256": "0cf21f2ba6ad0f9be32ce67d23129409cd1826d996e4a78617b25e2e3d054e21",
+      "sha256": "1e5b1023bf448edc7ce230fe0296c181a39a1fed7124a922c72fee4653d24e73",
       "source": null,
       "classification": null,
       "destination": null

package/ds-canonical/fork/manifest.json

@@ -104,20 +104,20 @@
   },
   "providerLifecycle": {
     "schemaVersion": 4,
-    "releaseVersion": "0.1.0-beta.121",
+    "releaseVersion": "0.1.0-beta.122",
     "immutableHead": {
       "providerInventorySha256": "86e9d0668cb54ad1bf05c36e78b4aa80417d5f468c929dd3ddcf69c1afbf32e4",
-      "releaseVersion": "0.1.0-beta.120",
-      "snapshotSha256": "f80fc5b799f346357d0cce36dfbd485a6d02679887556de392eb19b883a8e74d"
+      "releaseVersion": "0.1.0-beta.121",
+      "snapshotSha256": "1ed3b53825f48c80c4515f719523aeb11b16b28e77eb429c88e97da99108d032"
     },
-    "ledgerSha256": "8ece62b91f82cdba9e5dc98dc27b89da7e89be5611b1b7a81e2dc653c077ff67",
-    "previousSnapshotSha256": "f80fc5b799f346357d0cce36dfbd485a6d02679887556de392eb19b883a8e74d",
-    "currentSnapshotSha256": "1ed3b53825f48c80c4515f719523aeb11b16b28e77eb429c88e97da99108d032",
+    "ledgerSha256": "b015d58f6be1ad3d485b79519c6d783625ca38b6368f6d5784b85099e598986c",
+    "previousSnapshotSha256": "1ed3b53825f48c80c4515f719523aeb11b16b28e77eb429c88e97da99108d032",
+    "currentSnapshotSha256": "aaac1cd7695a2b8b43f37fca8c56e906c74c7b35b2368c927f6758e0f94f8d35",
     "currentProviderInventorySha256": "86e9d0668cb54ad1bf05c36e78b4aa80417d5f468c929dd3ddcf69c1afbf32e4",
     "retiredProviders": [],
     "currentSnapshot": {
-      "releaseVersion": "0.1.0-beta.121",
-      "previousSnapshotSha256": "f80fc5b799f346357d0cce36dfbd485a6d02679887556de392eb19b883a8e74d",
+      "releaseVersion": "0.1.0-beta.122",
+      "previousSnapshotSha256": "1ed3b53825f48c80c4515f719523aeb11b16b28e77eb429c88e97da99108d032",
       "providers": [
         {
           "id": "claude",
@@ -193,8 +193,8 @@
       "retiredProviders": []
     },
     "immutableHeadSnapshot": {
-      "releaseVersion": "0.1.0-beta.120",
-      "previousSnapshotSha256": "89a97b3c47da235aee5ef83fab8836d26952facc015a9d98b17b2194a07d31ec",
+      "releaseVersion": "0.1.0-beta.121",
+      "previousSnapshotSha256": "f80fc5b799f346357d0cce36dfbd485a6d02679887556de392eb19b883a8e74d",
       "providers": [
         {
           "id": "claude",

package/package.json

@@ -4,7 +4,7 @@
     "type": "git",
     "url": "git+https://github.com/ajenchen/design-system.git"
   },
-  "version": "0.1.0-beta.121",
+  "version": "0.1.0-beta.122",
   "private": false,
   "description": "World-class design system — components, patterns, tokens, hooks (single source of truth for team distribution).",
   "type": "module",