@starci/eslint-canon-fe 8.4.43 → 9.0.0

package/landmark.mjs

@@ -5,9 +5,6 @@
  * application may pass children through layouts and pages normally.
  */
 
-/** Named branch owners that may provide landmark semantics. */
-export const LANDMARK_BRANCHES = new Set(["Main"])
-
 /** No custom landmark AST rule is needed; semantic ownership is enforced by the component code. */
 export const rules = {}
 

package/lib/class-text.mjs

@@ -0,0 +1,29 @@
+/** Shared static class-string readers for token discipline and Grammar scale checks. */
+import { isClassAttribute, staticText } from "./ast.mjs"
+import { isProductSource } from "./scope.mjs"
+
+/** Static strings in JSX, constants and arrays, preserving the authored class order. */
+const classText = (value) => {
+  if (value?.type === "JSXExpressionContainer") return classText(value.expression)
+  if (value?.type === "ArrayExpression") {
+    const members = value.elements.map((element) => classText(element)).filter(Boolean)
+    return members.length > 0 ? members.join(" ") : null
+  }
+  return staticText(value)
+}
+
+/** Visit class strings in product JSX, declarations and named class arrays. */
+export const classTextVisitors = (context, report) => {
+  if (!isProductSource(context)) return {}
+  return {
+    JSXAttribute(node) {
+      if (isClassAttribute(node)) report(node, classText(node.value))
+    },
+    VariableDeclarator(node) {
+      report(node, classText(node.init))
+    },
+    Property(node) {
+      if (!node.computed && node.key.type === "Identifier" && node.key.name === "classes") report(node, classText(node.value))
+    },
+  }
+}

package/lib/config.mjs

@@ -1,10 +1,8 @@
 /**
  * The one flat config of a StarCi front end.
  *
- * A repository's `eslint.config.mjs` is a managed file (R05/R16/R17), rendered by `starci app sync` as exactly:
- *
- *     import { loadHfs, starciFeConfig } from "@starci/eslint-canon-fe"
- *     export default starciFeConfig({ hfs: loadHfs(import.meta.url) })
+ * A repository's `eslint.config.mjs` is managed by `starci app sync` (R05/R16/R17). Its template composes this universal
+ * factory with the explicitly selected Grammar family's factory, passing the same HFS view to both.
  *
  * The factory owns everything else: which files are linted (the source of every app and every workspace package), typed linting on the source (`parserOptions.projectService`, so a rule asks what a node IS rather than what
  * it is called), the ignores, the linter options that make a disable comment impossible, every canon rule at `error`,
@@ -97,10 +95,10 @@ export const SLOT_FREE_RULES = Object.freeze([
   "client-no-server-import", "no-server-action", "no-dangerous-html", "response-cookie-attributes", "require-export-jsdoc", "no-vietnamese-in-source",
   "no-hardcoded-endpoint-fallback", "no-runtime-namespace", "list-item-has-key", "no-index-key", "no-inline-literal-prop-in-list", "prefer-arrow-export",
   "handler-on-prefix", "no-native-form-control", "no-native-img", "image-has-size", "no-second-i18n-stack", "html-lang-from-locale", "no-null-suspense-fallback",
-  "no-native-anchor", "no-inline-parameter-type", "no-hand-rolled-polling", "status-text-uses-soft-foreground", "no-copy-in-call", "no-alert", "no-failure-collapse",
+  "no-native-anchor", "no-inline-parameter-type", "no-hand-rolled-polling", "no-copy-in-call", "no-alert", "no-failure-collapse",
   "outcome-kinds-exhaustive", "no-await-in-loop", "prefer-code-point", "prefer-string-raw", "no-nested-conditional", "no-void-operator", "no-unused-import",
   "prefer-export-from", "no-unused-prop-types", "media-has-caption", "max-params",
-  "nested-control-variant", "no-list-panel-padding",
+  "nested-control-variant", "no-list-panel-padding", "no-app-surface-paint",
 ])
 
 /** The source of a plain front-end tree: its `src/`. */

package/lib/drawing-scope.mjs

@@ -0,0 +1,15 @@
+/** Shared HFS scope of connected/presentational component pairs. */
+import { hfsOf } from "./hfs.mjs"
+import { fileOf, inSlot, kindOfFile, roleOfFile } from "./scope.mjs"
+
+const SPLIT_KINDS = new Set(["blocks", "pages", "layouts", "overlays"])
+
+/** The owning surface folder of the linted entry or presentation file. */
+const surfaceName = (context) => hfsOf(context).relative(fileOf(context)).split("/").slice(-2)[0]
+
+/** Whether the file belongs to an HFS owner with a connected/presentational pair. */
+export const inSplitTier = (context) => inSlot(context, "fe.components", "fe.feature") && SPLIT_KINDS.has(kindOfFile(context))
+
+/** The paired presentation file's component kind, or null outside that scope. */
+export const pureHalf = (context) =>
+  inSplitTier(context) && roleOfFile(context) === "drawing" && /^[A-Z][A-Za-z0-9]*$/.test(surfaceName(context)) ? kindOfFile(context) : null

package/lib/typed-class-values.mjs

@@ -5,7 +5,7 @@ import ts from "typescript"
 const fragments = (checker, node, seen, mode) => {
   if (!node || seen.has(node)) return []
   seen.add(node)
-  if (ts.isStringLiteralLike(node) || ts.isTemplateHead(node) || ts.isTemplateMiddle(node) || ts.isTemplateTail(node)) return [node.text]
+  if (ts.isStringLiteralLike(node) || ts.isTemplateHead(node) || ts.isTemplateMiddle(node) || ts.isTemplateTail(node)) return mode === "style-keys" ? [] : [node.text]
   if (ts.isAsExpression(node) || ts.isTypeAssertionExpression(node) || ts.isSatisfiesExpression(node) || ts.isParenthesizedExpression(node) || ts.isNonNullExpression(node)) return fragments(checker, node.expression, seen, mode)
   if (ts.isIdentifier(node) || ts.isPropertyAccessExpression(node) || ts.isElementAccessExpression(node)) {
     const symbol = ts.isElementAccessExpression(node) && ts.isStringLiteralLike(node.argumentExpression)
@@ -13,6 +13,15 @@ const fragments = (checker, node, seen, mode) => {
       : checker.getSymbolAtLocation(ts.isPropertyAccessExpression(node) ? node.name : node)
     return symbolFragments(checker, symbol, seen, mode)
   }
+  if (mode === "style-keys" && ts.isObjectLiteralExpression(node)) {
+    return node.properties.flatMap((property) => {
+      if (ts.isSpreadAssignment(property)) return fragments(checker, property.expression, seen, mode)
+      if (!ts.isPropertyAssignment(property) && !ts.isShorthandPropertyAssignment(property)) return []
+      return ts.isComputedPropertyName(property.name)
+        ? fragments(checker, property.name.expression, seen, "variant")
+        : [property.name.text]
+    })
+  }
   return fragmentChildren(node, mode).flatMap((child) => fragments(checker, child, seen, mode))
 }
 

package/lib/why.mjs

@@ -21,39 +21,19 @@
 export const why = {
   "nested-control-variant": {
     code: "FE_NESTED_VARIANT",
-    en: "`<file>` forces a primary field inside a Grammar surface, or paints a raw bg-surface in app CSS.",
-    fix: "Compose a Grammar surface and omit the nested field variant so its surface context supplies secondary.",
+    en: "`<file>` sets a static Grammar field variant, or forces primary Tabs inside a painted surface.",
+    fix: "Omit the field or nested Tabs variant so Grammar supplies the default from its surface context.",
+  },
+  "no-app-surface-paint": {
+    code: "FE_GRAMMAR_LAYOUT_ONLY",
+    en: "`<file>` sets paint or typography in app CSS instead of composing Grammar's published components and props.",
+    fix: "Keep app CSS layout-only and compose a painted Grammar surface such as SurfaceCard.",
   },
   "no-list-panel-padding": {
     code: "FE_LIST_PANEL_PADDING",
     en: "`<file>` adds horizontal wrapper padding to a Grammar list or its section caption, stacking the content inset.",
     fix: "Remove the wrapper padding and use ListBox inset=\"panel\" so headers, captions and rows share the panel content edge.",
   },
-  "app-shell-frame": {
-    code: "FE_APP_SHELL_FRAME",
-    en: "The app frame must use Grammar WorkspaceShell with its fixed viewport.",
-    fix: "Compose WorkspaceShell viewport=\"fixed\" and supply its header, navigation and primary slots.",
-  },
-  "no-shell-bottom-tabs": {
-    code: "FE_APP_SHELL_BOTTOM_TABS",
-    en: "Bottom tab navigation replaces the required mobile sidebar drawer.",
-    fix: "Use WorkspaceShell navigationDrawer and Sidebar presentation=\"drawer\".",
-  },
-  "navbar-control-size": {
-    code: "FE_NAVBAR_CONTROL_SIZE",
-    en: "A navbar control does not use Grammar's shared control height.",
-    fix: "Set size=\"control\" on every visible bar control.",
-  },
-  "navbar-cluster": {
-    code: "FE_NAVBAR_CLUSTER",
-    en: "Navbar action component kinds or order differ from the app-shell canon.",
-    fix: "Compose Language IconButton, theme Switch, notification IconButton and account AvatarButton in that order.",
-  },
-  "no-navbar-create": {
-    code: "FE_NAVBAR_CREATE",
-    en: "A create action is composed into the global navbar.",
-    fix: "Move the create action to the page that owns it.",
-  },
   "no-env-outside-config": {
     code: "FE_ENV_OWNER",
     en: "`<file>` reads an environment variable. Only `modules/config` may read env.",
@@ -134,11 +114,6 @@ export const why = {
     en: "`<file>` uses a raw colour/length value (`<what>`). Colour and spacing come only from grammar tokens; brand colour lives only in `brand.css`.",
     fix: "Use a grammar token class or variable; a colour value is declared only in `modules/brand/brand.css`.",
   },
-  "status-text-uses-soft-foreground": {
-    code: "FE_STYLE_TOKEN_ONLY",
-    en: "`<file>` paints text or an icon with a solid status tone (`<what>`, e.g. `text-success`). A solid tone is a background colour; used as a text colour it reads below 4.5:1 on the page background.",
-    fix: "Switch to the soft pair: `text-<tone>-soft-foreground` (with `bg-<tone>-soft` when it sits on a light surface); a solid tone is used only with `bg-<tone>` and `text-<tone>-foreground`.",
-  },
   "no-native-form-control": {
     code: "FE_NATIVE_FORM_CONTROL",
     en: "Raw `<tag>` in `<file>`. Use the grammar renderer.",
@@ -232,12 +207,12 @@ export const why = {
   "navigation-from-intl": {
     code: "FE_I18N_NAVIGATION",
     en: "`<file>` imports `Link`, `useRouter`, `usePathname` or `redirect` from Next, which does not know the locale: the path loses the `[locale]` prefix.",
-    fix: "Import from `modules/i18n/navigation`, built by next-intl from `routing.ts`.",
+    fix: "Import from the locale-aware public routes entry or shared i18n package, built from the one routing configuration.",
   },
   "no-native-anchor": {
     code: "FE_I18N_NAVIGATION",
     en: "`<a>` in `<file>` points at an internal route (reloads the whole page, loses the locale, loses prefetch) or opens a new tab without `rel`.",
-    fix: "Use `Link` from `modules/i18n/navigation` with an href built by `modules/routes`; a `_blank` link adds `rel=\"noopener noreferrer\"`.",
+    fix: "Use the locale-aware Link with an href built by modules/routes; a _blank link adds rel=\"noopener noreferrer\".",
   },
   "use-intl-formatter": {
     code: "FE_I18N_FORMATTER",
@@ -307,12 +282,7 @@ export const why = {
   "i18n-stack-in-one-module": {
     code: "FE_I18N_PLACEMENT",
     en: "`<file>` builds a layer of the next-intl stack itself (`defineRouting`, `createNavigation`, `getRequestConfig`, `createMiddleware`). The stack is written once for the whole repo.",
-    fix: "Call the `createAppI18n` factory of the shared i18n package inside `modules/i18n/index.ts` and import the result; a single-app repo writes the stack only in that app's `modules/i18n`.",
-  },
-  "no-raw-structural-element": {
-    code: "FE_NATIVE_FORM_CONTROL",
-    en: "Raw `<tag>` in `<file>`. Page structure and text are composed from grammar components, not hand-written HTML.",
-    fix: "Replace it with the matching grammar component (`Heading`, `Text`, `SurfaceCard`, ...); if grammar lacks it, add it to grammar or the ui package instead of drawing it in place.",
+    fix: "Use the shared i18n factory; a single app keeps routing/request config in modules/i18n and navigation in modules/routes. The proxy imports routing without navigation.",
   },
   "no-app-relative-clock": {
     code: "FE_SIZE_AND_STATE_BUDGET",

package/next-conventions.mjs

@@ -15,7 +15,7 @@ import { attribute, attributeValue, calleeName, leadingTextOf, stringOf } from "
 import { variableOf } from "./lib/bindings.mjs"
 import { forbiddingConcern } from "./lib/fe-stack.mjs"
 import { hfsOf } from "./lib/hfs.mjs"
-import { baseName, classOf, fileOf, inSlot, roleOfFile, slotOfFile } from "./lib/scope.mjs"
+import { baseName, classOf, classifyImport, fileOf, inSlot, roleOfFile, slotOfFile } from "./lib/scope.mjs"
 
 /** Another i18n stack: a second place that decides which language a reader sees (one the fe-stack catalog forbids by name is fe-stack-import's finding). */
 const OTHER_I18N = /^(?:react-i18next|i18next|next-i18next|react-intl|next-translate|typesafe-i18n|rosetta)(?:\/.*)?$|^@lingui\/.+$/
@@ -214,26 +214,27 @@ export const noNullSuspenseFallback = {
 
 // -- FE-NEXT-7 -------------------------------------------------------------------------------------
 
-/** Files that legitimately sit outside the locale provider or own the navigation module: the i18n module, the root error boundary (role `global-error`), the proxy (role `proxy`; `instrumentation` files are not exempt). */
+/** The locale-aware navigation owner and framework boundaries outside its provider. */
 const isNavigationOwner = (context) =>
-  inSlot(context, "fe.modules.i18n") ||
+  inSlot(context, "fe.package.i18n") ||
+  (inSlot(context, "fe.modules.routes") && hfsOf(context).apps.length === 1) ||
   (inSlot(context, "fe.source-root-pinned") && roleOfFile(context) === "proxy") ||
   (inSlot(context, "fe.route") && roleOfFile(context) === "global-error")
 
 /** The router helpers that are locale-blind in `next/navigation`. */
 const LOCALE_BLIND = new Set(["useRouter", "usePathname", "redirect", "permanentRedirect"])
 
-/** Navigation helpers come from `modules/i18n/navigation`, which knows the locale. */
+/** Navigation helpers come from the locale-aware public routes or shared i18n entry. */
 export const navigationFromIntl = {
   meta: {
     type: "problem",
-    docs: { description: "`Link`, `useRouter`, `usePathname` and `redirect` come from `modules/i18n/navigation`, not from Next." },
+    docs: { description: "`Link`, `useRouter`, `usePathname` and `redirect` come from the locale-aware routes or shared i18n public entry, not from Next." },
     schema: [],
     messages: {
       link:
-        "`next/link` does not know the locale: a link built with it drops the `[locale]` prefix, so a Vietnamese reader lands on the default language of the next page (or on a 404 under `localePrefix: \"as-needed\"`). Import `Link` from `modules/i18n/navigation`, which `next-intl` builds from `routing.ts`.",
+        "`next/link` does not know the locale: a link built with it drops the `[locale]` prefix. Import Link from the locale-aware public routes entry or shared i18n package, built from the one routing configuration.",
       helper:
-        "`{{name}}` from `next/navigation` does not know the locale: it navigates to a path without the `[locale]` prefix. Import it from `modules/i18n/navigation`, which `next-intl` builds from `routing.ts`.",
+        "`{{name}}` from `next/navigation` does not know the locale. Import it from the locale-aware public routes entry or shared i18n package, built from the one routing configuration.",
     },
   },
   create(context) {
@@ -263,11 +264,11 @@ const isExternalHref = (text) => /^(?:[a-z][a-z0-9+.-]*:|\/\/|#)/i.test(text)
 export const noNativeAnchor = {
   meta: {
     type: "problem",
-    docs: { description: "An internal link is `Link` from `modules/i18n/navigation`; an external `_blank` link carries `rel`." },
+    docs: { description: "An internal link uses the locale-aware public navigation entry; an external `_blank` link carries `rel`." },
     schema: [],
     messages: {
       internal:
-        "`<a href=\"{{href}}\">` for a route of this app: it reloads the whole page, skips prefetch and drops the locale prefix. Use `Link` from `modules/i18n/navigation` with an href built by `modules/routes`.",
+        "`<a href=\"{{href}}\">` for a route of this app reloads the page, skips prefetch and drops the locale prefix. Use the locale-aware Link with an href built by modules/routes.",
       rel:
         "`target=\"_blank\"` with no `rel`. The opened page can reach back through `window.opener`. Add `rel=\"noopener noreferrer\"`.",
     },
@@ -376,9 +377,9 @@ const stackFactoryOf = (context, callee) => {
  *
  * `defineRouting` (`next-intl/routing`), `createNavigation` (`next-intl/navigation`), `getRequestConfig` (`next-intl/server`) and
  * `createMiddleware` (`next-intl/middleware`), resolved by the import that binds the called name (a renamed import or a namespace
- * member counts), are called only in a file of the i18n package (slot `fe.package.i18n`, `createAppI18n`), or in the `fe.modules.i18n`
- * slot of a repository that declares exactly one app. In a multi-app repository an app's `modules/i18n` imports the package
- * factory; three byte-identical `request.ts` files, one per app, are three stacks that drift.
+ * member counts), have one owner. A shared i18n package owns its stack. In a one-app repository, routing and request
+ * config belong to modules/i18n while createNavigation belongs to modules/routes. The proxy imports routing without
+ * evaluating navigation: next-intl's navigation module selects React runtime exports unavailable in the proxy.
  *
  * It does not replace `no-second-i18n-stack`: that rule refuses another i18n LIBRARY at its import, this one refuses a second copy of
  * next-intl's own stack. Different evidence, different remedy.
@@ -386,26 +387,42 @@ const stackFactoryOf = (context, callee) => {
 export const i18nStackInOneModule = {
   meta: {
     type: "problem",
-    docs: { description: "next-intl's routing, navigation, request config and middleware factories are called only in the i18n package (or the only app's `modules/i18n`)." },
+    docs: { description: "A shared i18n package owns the stack; one app keeps routing/request config in i18n and navigation in routes, with a routing-only proxy entry." },
     schema: [],
     messages: {
       stack:
-        "`{{name}}` builds a layer of the next-intl stack here. The stack is written once per repository, {{where}}; a copy in an app is a second stack that drifts from the first (three apps once carried byte-identical `request.ts` files). Import what the shared factory returns instead of calling `{{name}}`.",
+        "`{{name}}` builds the next-intl stack outside its owner. Keep {{where}} and import the owned result through its public entry.",
+      proxyNavigation:
+        "The proxy imports navigation runtime through {{source}}. Import routing from the i18n public entry, or use the shared package's routing-only proxy export; the proxy must not evaluate the routes/navigation barrel.",
     },
   },
   create(context) {
     const hfs = hfsOf(context)
     const slot = slotOfFile(context)
     const single = hfs.apps.length === 1
-    if (slot === "fe.package.i18n" || (slot === "fe.modules.i18n" && single)) return {}
     const proxy = single && slot === "fe.source-root-pinned" && roleOfFile(context) === "proxy"
-    const where = single ? "in the app's `modules/i18n`" : "in the i18n package (`packages/<family>-i18n`, exported as `createAppI18n`) that every app's `modules/i18n` calls"
+    const proxyFile = slot === "fe.source-root-pinned" && roleOfFile(context) === "proxy"
+    const where = single ? "routing/request config in modules/i18n and navigation in modules/routes" : "the stack in the shared i18n package that every app calls"
+    const safeProxyImport = (node) => {
+      if (!proxyFile || !node.source || node.importKind === "type" || node.exportKind === "type") return
+      if (node.specifiers?.length && node.specifiers.every((entry) => entry.importKind === "type" || entry.exportKind === "type")) return
+      const source = String(node.source.value)
+      if (source === "next-intl/navigation" || classifyImport(context, source)?.slot === "fe.modules.routes") {
+        context.report({ node, messageId: "proxyNavigation", data: { source } })
+      }
+    }
     return {
+      ImportDeclaration: safeProxyImport,
+      ExportNamedDeclaration: safeProxyImport,
+      ExportAllDeclaration: safeProxyImport,
       CallExpression(node) {
         const factory = stackFactoryOf(context, node.callee)
         // In a one-app repository the proxy (role `proxy`) mounts the locale middleware built from the one routing; a shared repository
         // builds it in the i18n package and the proxy re-exports it.
         if (factory?.name === "createMiddleware" && proxy) return
+        if (slot === "fe.package.i18n") return
+        if (single && factory?.name === "createNavigation" && slot === "fe.modules.routes") return
+        if (single && factory?.name !== "createNavigation" && slot === "fe.modules.i18n") return
         if (factory) context.report({ node, messageId: "stack", data: { name: factory.name, where } })
       },
     }

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@starci/eslint-canon-fe",
-  "version": "8.4.43",
-  "description": "The StarCi front-end lint canon: every rule its laws publish, gathered as one flat-config plugin and attached by one factory.",
+  "version": "9.0.0",
+  "description": "Universal front-end lint laws for TypeScript and Next.js, independent of the selected Grammar family.",
   "type": "module",
   "license": "MIT",
   "private": false,
   "exports": {
-    ".": "./index.mjs"
+    ".": "./index.mjs",
+    "./lib/*": "./lib/*"
   },
   "main": "./index.mjs",
   "files": [

package/runtime/knowledge/grammars/index.yaml

@@ -0,0 +1,102 @@
+schema: starci/knowledge-source@1
+id: grammars
+title: Grammar families
+purpose: |
+  Catalog of authored UI Grammar families. Inventory only — not a default-family rule.
+  The selected design specification names the applicable installed family. The app binds that choice
+  explicitly in sides.fe.grammar; the catalog resolves its lint package and component contract.
+  A missing or ambiguous family never silently resolves to a family. DNA snapshots describe the
+  observed implementation; they do not install packages or prove current rendered behavior.
+appliesTo:
+  - grammar
+provenance:
+  limitations: |
+    Component names, tokens and gap tables describe the reference family at observation time.
+    Verify actual package identity/version, exported types, CSS and renderer source in the selected
+    repository before using snapshot APIs or gaps. Record current source references in the selected
+    .starciwork node; an old source census is not current UAT evidence. The current public consumer
+    entry observed for FE work is @starci/grammar/common — confirm installed exports before import.
+    The `common` entry is a DNA snapshot of that semantic entry and nothing more: it declares no palette,
+    no family boundary and no composition playbook, because the entry itself ships none of them.
+guidance:
+  - id: catalog-not-default
+    requirement: |
+      Do not treat this catalog as selecting a default Grammar family. Family choice belongs to the
+      current design specification and its explicit sides.fe.grammar declaration.
+    rationale: |
+      Silent fallback to StarCi would invent product direction and override an absent/ambiguous design.
+  - id: verify-before-use
+    requirement: |
+      Before applying snapshot APIs or recorded gaps, inspect the selected repository's package
+      identity/version, exported types, CSS and renderer source.
+    rationale: |
+      Snapshots are historical; installed exports may differ. Inventing missing APIs is forbidden.
+  - id: ui-owns-universal
+    requirement: |
+      Common semantics, renderer anatomy, state and accessibility remain owned by knowledge/ui.
+      A family owns its scoped visual realization and promoted idioms; the product owns its facts,
+      content, routes and approved composition.
+      Apply FE-RULE-OWNERSHIP in knowledge/patterns/fe/index.yaml when placing requirements and checks.
+    rationale: |
+      Keeps universal UI law separate from family-scoped DNA and product composition.
+topics:
+  - id: common
+    path: common/DNA.yaml
+    title: Common Grammar — DNA
+    summary: |
+      Generated DNA snapshot of the `@starci/grammar/common` public entry: custom properties,
+      the 110 renderers of its registry, their classes, stamped rule ids and recorded gaps. The DNA owns the observed package
+      version and source inventory. Common supplies anatomy, not colour. The snapshot is drift-checked.
+  - id: starci
+    path: starci/index.yaml
+    title: StarCi Core Grammar
+    summary: |
+      Historical snapshot of the StarCi Core family — DNA, idioms, playbook (including composing the
+      0.5.0 forms, overlays and navigation chrome) and family boundaries.
+  - id: offset-pop
+    path: offset-pop/index.yaml
+    title: Offset Pop Grammar
+    summary: |
+      Snapshot of the product-neutral Offset Pop family — cream canvas, ink outline plus hard offset
+      shadow, one pink decision accent with a text-safe accent for text — with DNA, idioms, a
+      mobile-first playbook for playful learning or consumer apps, and family boundaries including two
+      decisions flagged for the family owner.
+families:
+  - id: common
+    title: common
+    componentContract:
+      package: '@starci/grammar'
+      entry: '@starci/grammar/common'
+      styleEntry: '@starci/grammar/common.css'
+      peers: [react, '@heroui/react', '@xyflow/react']
+    packageSnapshot: common/DNA.yaml
+    scope: |
+      DNA snapshot only. This catalog carries no Common-side family boundary, idiom set or composition
+      playbook: `@starci/grammar/common` is the semantic/props entry every visual family is defined over
+      (`defineGrammarFamily`), not a family that ships a palette, so `authority`, `reusableStyle`,
+      `productComposition` and `index` have nothing to name here. Universal semantics, renderer anatomy,
+      state and accessibility remain owned by knowledge/ui.
+  - id: starci
+    title: starci
+    contractRef: common
+    lint:
+      package: '@starci/eslint-grammar-starci'
+      factory: starciGrammarConfig
+      prefix: starci-grammar
+    authority: starci/family.yaml
+    packageSnapshot: starci/DNA.yaml
+    reusableStyle: starci/idioms.yaml
+    productComposition: starci/playbook.yaml
+    index: starci/index.yaml
+  - id: offset-pop
+    title: offset-pop
+    contractRef: common
+    lint:
+      package: '@starci/eslint-grammar-offset-pop'
+      factory: offsetPopGrammarConfig
+      prefix: starci-grammar
+    authority: offset-pop/family.yaml
+    packageSnapshot: offset-pop/DNA.yaml
+    reusableStyle: offset-pop/idioms.yaml
+    productComposition: offset-pop/playbook.yaml
+    index: offset-pop/index.yaml

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -21,30 +21,44 @@ pins:
     install: registry
     side: fe
     source: packages/heroicons/package.json
-    why: 'StarCi custom Heroicons-compatible cuts; eslint-canon-fe (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
+    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/grammar':
-    version: 0.12.1
+    version: 0.12.3
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.43
+    version: 3.4.44
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 8.4.43
+    version: 9.0.0
     group: starci
     install: registry
     side: fe
     source: packages/eslint/fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
+  '@starci/eslint-grammar-starci':
+    version: 0.12.3
+    group: starci
+    install: registry
+    side: fe
+    source: packages/eslint/grammar-starci/package.json
+    why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
+  '@starci/eslint-grammar-offset-pop':
+    version: 0.12.3
+    group: starci
+    install: registry
+    side: fe
+    source: packages/eslint/grammar-offset-pop/package.json
+    why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.0.11
+    version: 2.0.12
     group: starci
     install: registry
     side: fe
@@ -77,14 +91,14 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.34
+    version: 1.7.35
     group: starci
     install: registry
     side: both
     source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.34
+    version: 4.7.35
     group: starci
     install: registry
     side: both
@@ -380,7 +394,7 @@ pins:
     version: 2.2.0
     group: ui
     side: fe
-    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-canon-fe (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
+    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-starci (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
   '@dicebear/core':
     version: 10.4.0
     group: ui

package/runtime/knowledge/hfs/fe-stack.yaml

@@ -237,6 +237,13 @@ concerns:
     pattern: FE-LINT
     forbids: []
     why: the canon lint and format configuration.
+  - id: grammar-lint
+    tier: opt
+    packages: ['@starci/eslint-grammar-starci', '@starci/eslint-grammar-offset-pop']
+    home: [fe.source-root-pinned]
+    pattern: FE-RULE-OWNERSHIP
+    forbids: []
+    why: The selected Grammar family's lint package runs beside the universal front-end canon; the family catalog declares the package and factory.
   - id: auth-supabase
     tier: opt
     packages: ['@supabase/supabase-js', '@supabase/ssr']

package/runtime/knowledge/hfs/slots.yaml

@@ -2396,9 +2396,9 @@ slots:
     presence: required
     tracked: tracked
     tier: foundation
-    # The app's i18n module: its catalogs and the one call of the repository's i18n factory. The next-intl stack (routing,
-    # navigation, request config) is written once per repository: in the i18n package (fe.package.i18n, `createAppI18n`)
-    # when the repository has one, else in the only app's module.
+    # The app's routing, request config and catalogs, or its adapter to the shared i18n factory. A single app
+    # owns createNavigation in fe.modules.routes, keeping this public entry safe for its proxy. Shared stacks
+    # belong to fe.package.i18n and expose a routing-only proxy entry separately from navigation.
     requires: [index.ts]
     tests: none
     rules: [FE_I18N_PLACEMENT, FE_I18N_CATALOG]

package/runtime/modules/kernel/removed-vocabulary.yaml

@@ -8,6 +8,22 @@
 # a word to scan for).
 kinds: [config-key, bias-field, verb, flag, code, vocabulary, file]
 removed:
+  - id: fe-landmark-branch-inventory
+    kind: vocabulary
+    name: LANDMARK_BRANCHES
+    use: 'the selected Grammar lint package owns its component vocabulary; the universal FE canon exposes no component inventory'
+    since: 1.0.0-alpha.31
+  - id: fe-grammar-rule-namespace
+    kind: vocabulary
+    name: starci-fe Grammar component rules
+    match: 'starci-fe/(?:app-shell-frame|no-shell-bottom-tabs|navbar-control-size|navbar-cluster|no-navbar-create|no-raw-structural-element|no-heading-tag-outside-heading-component|status-text-uses-soft-foreground|vendor-primitive-has-named-owner|no-vendor-icon-outside-icon-leaf|heroicons-is-the-glyph-vendor|no-off-scale-glyph-size|no-icon-size-class|destructive-menu-entry-needs-danger-tone|no-decorative-icon-in-metric-cell|no-inline-svg-outside-brand-mark-leaf|no-fractional-step|no-hand-rolled-heading|no-unresolved-token-class|slot-status-through-slotview)\b'
+    use: 'the same rule id under starci-grammar/ from the selected Grammar lint package; FE-RULE-OWNERSHIP governs placement'
+    since: 1.0.0-alpha.31
+  - id: offset-pop-toaster-content-guidance
+    kind: vocabulary
+    name: toaster-clear-of-the-dock
+    use: 'toaster-clear-of-content in the Offset Pop playbook'
+    since: 1.0.0-alpha.31
   - id: cut-seam-command
     kind: flag
     name: cut-seam --command
@@ -401,3 +417,16 @@ removed:
     use: 'the release tag is always <release.tagPrefix><package.json version>; delete the key'
     since: 1.0.0-alpha.31
     match: '\btagMatchesVersion\b'
+
+  - id: grammar-surfacecard-manual-layer
+    kind: vocabulary
+    name: SurfaceCard manual depth and unpainted frame
+    use: 'SurfaceCard derives its depth from the painted parent surface; use an unpainted layout container for grouping and a bounded SurfaceCard for a painted face'
+    since: 1.0.0-alpha.31
+    match: 'SurfaceCard[^\r\n>]*\s(?:depth=|frame="frameless")'
+  - id: grammar-dropdown-negative-tone
+    kind: vocabulary
+    name: DropdownMenuItem negative tone
+    use: 'DropdownMenuItem.tone uses neutral or danger; destructive commands use danger'
+    since: 1.0.0-alpha.31
+    match: 'DropdownMenuItem(?:Tone|\.tone)[^\r\n]*["'']negative["'']'