@starci/eslint-canon-fe 9.1.11 → 9.2.0

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 9.2.0 - 2026-10-27
+
+- Changed: owner ruling two-grammars: the bundled Grammar catalog declares exactly two families, `core` (`@starci/eslint-grammar-core`, `coreGrammarConfig`) and `offset-pop`; `starci`, `starci-core` and `heritage` are refused. The Grammar entry checks (button intent, control height, surface rules, UI rulings) accept `@starci/grammar/<common|core|offset-pop>`. The bundled canon pins follow the harness packages (Grammar family 0.13.0, hfs 4.8.0, canon-fe 9.2.0, canon-be 3.4.57, stylelint-canon 2.1.0).
+- Changed: the doc comment of `lint-escape-hatch.mjs` names the three patterns that own the refused spellings instead of spelling them again. No rule or behaviour changed.
+
 ## 9.1.11 - 2026-10-27
 
 - Changed: licensed MIT (was UNLICENSED); the package metadata names the repository, homepage and bugs so npm can attach provenance. No rule or behaviour changed.

package/README.md

@@ -7,10 +7,10 @@ structure, typed contracts, token discipline and check integrity across Grammar
 
 ```js
 import { loadHfs, starciFeConfig } from "@starci/eslint-canon-fe"
-import { starciGrammarConfig } from "@starci/eslint-grammar-starci"
+import { coreGrammarConfig } from "@starci/eslint-grammar-core"
 
 const hfs = loadHfs(import.meta.url)
-export default [...starciFeConfig({ hfs }), ...starciGrammarConfig({ hfs })]
+export default [...starciFeConfig({ hfs }), ...coreGrammarConfig({ hfs })]
 ```
 
 `starci app sync` renders the selected family's managed flat config. Both factories cover every
@@ -19,7 +19,7 @@ Sonar rules run at error; the factory sets typed parsing and refuses inline lint
 Generated wire types, dependencies and build outputs follow the shared source-scope contract.
 
 Concrete Grammar component names, props, variants, scales and vendor recipes belong to
-`@starci/eslint-grammar-starci` or the selected family's package. The family rules keep their
+`@starci/eslint-grammar-core` or the selected family's package. The family rules keep their
 bare IDs under the `starci-grammar` namespace. This package exports shared AST, binding, type,
 slot and configuration infrastructure through `@starci/eslint-canon-fe/lib/*`; family packages
 import those readers without copying them.
@@ -50,7 +50,5 @@ Regression specs belong to this package. Application front ends and Grammar libr
 ## The runtime copy
 
 `runtime/` holds the StarCi runtime files the rules import (the slot manifest and view, the project graph and the
-architecture machine it runs, the Sonar syntax rules), byte for byte at their runtime paths. In this repository it is a
-committed snapshot taken from the legacy runtime (starci-academy-backend/.claude at 7424b89ca), where
-`scripts/hfs/sync-runtime.mjs` generates it; refresh it by running that generator there and copying
-`packages/eslint/fe/runtime/` over this folder. Nothing in this package edits it.
+architecture machine it runs, the Sonar syntax rules), byte for byte at their runtime paths. It is committed source of
+this package, edited in place ([packages/README.md](../README.md) says how the bundled copies move together).

package/button-intent.mjs

@@ -4,7 +4,7 @@ import { functionOf, importOf, isFn, patternPath, unwrap, variableOf } from "./l
 import { typedPropertyStrings } from "./lib/typed-class-values.mjs"
 import ts from "typescript"
 
-const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|heritage|offset-pop))?$/
+const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|offset-pop))?$/
 const BUTTONS = new Set(["Button", "IconButton"])
 const DIALOGS = new Set(["AlertDialog", "ConfirmDialog"])
 const ITEMS = new Set(["CollectionItem", "ItemActions", "ListItem", "ListRow", "ListBox.Item", "GridList.Item", "Table.Row", "TableRow"])

package/control-height.mjs

@@ -2,7 +2,7 @@
 import { attributeValue, stringOf } from "./lib/ast.mjs"
 import { importOf } from "./lib/bindings.mjs"
 
-const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|heritage|offset-pop))?$/
+const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|offset-pop))?$/
 const CONTROLS = new Set(["Button", "IconButton", "Switch", "Input", "SearchField", "Select", "Tabs", "SegmentedControl", "Textarea", "NumberField", "ComboBox"])
 /** A marketing hero call to action on a landing page is the one place the 48px step is allowed. */
 const LANDING_PATH = /[\\/](?:landing|hero|marketing)[\\/]|(?:Landing|Hero)[^\\/]*[\\/]/

package/lint-escape-hatch.mjs

@@ -3,14 +3,10 @@
  *
  * NO LOCAL EXCEPTION, OF ANY SPELLING. A rule that a comment can switch off is a convention, and a
  * codebase learns which conventions are real by which ones it can suppress. The spellings this law
- * refuses are the ones an author actually reaches for:
- *
- *   eslint-disable / -next-line / -line / -enable / -env, and `/* eslint rule: "off" *\/`
- *   @ts-ignore, @ts-expect-error, @ts-nocheck
- *   the no-sonar word, @sonar-ignore              - Sonar's own switches
- *   istanbul ignore, c8 ignore, v8 ignore         - a line taken out of the coverage the gate reads
- *   prettier-ignore                               - a region taken out of the formatter
- *   stylelint-disable / -enable                   - a stylelint switch that reached a TS file
+ * refuses are the ones an author actually reaches for, and the three patterns below own them:
+ * ESLINT_DIRECTIVE (an ESLint switch or inline rule configuration), TS_DIRECTIVE (a TypeScript
+ * suppression) and TOOL_DIRECTIVE (Sonar's own switches, a line taken out of the coverage the gate
+ * reads, a region taken out of the formatter, a stylelint switch that reached a TS file).
  *
  * TWO LAYERS, BECAUSE ONE IS NOT ENOUGH. The flat-config fence (`noInlineConfig`) makes an ESLint
  * directive INEFFECTIVE; this rule makes it a FINDING, so the attempt is named in the log instead of

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-canon-fe",
-  "version": "9.1.11",
+  "version": "9.2.0",
   "description": "Universal front-end lint laws for TypeScript and Next.js, independent of the selected Grammar family.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/grammars/index.yaml

@@ -24,7 +24,7 @@ guidance:
       Do not treat this catalog as selecting a default Grammar family. Family choice belongs to the
       current design specification and its explicit sides.fe.grammar declaration.
     rationale: |
-      Silent fallback to StarCi would invent product direction and override an absent/ambiguous design.
+      Silent fallback to a family would invent product direction and override an absent/ambiguous design.
   - id: verify-before-use
     requirement: |
       Before applying snapshot APIs or recorded gaps, inspect the selected repository's package
@@ -47,11 +47,11 @@ topics:
       Generated DNA snapshot of the `@starci/grammar/common` public entry: custom properties,
       the 110 renderers of its registry, their classes, stamped rule ids and recorded gaps. The DNA owns the observed package
       version and source inventory. Common supplies anatomy, not colour. The snapshot is drift-checked.
-  - id: starci
-    path: starci/index.yaml
-    title: StarCi Core Grammar
+  - id: core
+    path: core/index.yaml
+    title: Core Grammar
     summary: |
-      Historical snapshot of the StarCi Core family — DNA, idioms, playbook (including composing the
+      Historical snapshot of the core family — DNA, idioms, playbook (including composing the
       0.5.0 forms, overlays and navigation chrome) and family boundaries.
   - id: offset-pop
     path: offset-pop/index.yaml
@@ -61,16 +61,7 @@ topics:
       shadow, one pink decision accent with a text-safe accent for text — with DNA, idioms, a
       mobile-first playbook for playful learning or consumer apps, and family boundaries including two
       decisions flagged for the family owner.
-  - id: heritage
-    path: heritage/DNA.yaml
-    title: Heritage Grammar
-    summary: |
-      Generated snapshot of the Heritage family's parity declaration, arrangement, scoped tokens and Common renderers.
 families:
-  - id: heritage
-    title: heritage
-    contractRef: common
-    packageSnapshot: heritage/DNA.yaml
   - id: common
     title: common
     componentContract:
@@ -85,18 +76,18 @@ families:
       (`defineGrammarFamily`), not a family that ships a palette, so `authority`, `reusableStyle`,
       `productComposition` and `index` have nothing to name here. Universal semantics, renderer anatomy,
       state and accessibility remain owned by knowledge/ui.
-  - id: starci
-    title: starci
+  - id: core
+    title: core
     contractRef: common
     lint:
-      package: '@starci/eslint-grammar-starci'
-      factory: starciGrammarConfig
+      package: '@starci/eslint-grammar-core'
+      factory: coreGrammarConfig
       prefix: starci-grammar
-    authority: starci/family.yaml
-    packageSnapshot: starci/DNA.yaml
-    reusableStyle: starci/idioms.yaml
-    productComposition: starci/playbook.yaml
-    index: starci/index.yaml
+    authority: core/family.yaml
+    packageSnapshot: core/DNA.yaml
+    reusableStyle: core/idioms.yaml
+    productComposition: core/playbook.yaml
+    index: core/index.yaml
   - id: offset-pop
     title: offset-pop
     contractRef: common

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -21,7 +21,7 @@ pins:
     install: registry
     side: fe
     source: packages/heroicons/package.json
-    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
+    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-core (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/event-stream':
     version: 0.1.0
     group: starci
@@ -30,61 +30,61 @@ pins:
     source: packages/event-stream/package.json
     why: 'the one server-sent-events client of every front end (fe-stack event-stream, owner:event-stream-package): the transport client layer (modules/api/sse/clients) creates one instance for the app with the bearer token source and the stream operations follow on it; it carries Last-Event-ID resume, the capped doubling backoff, the heartbeat timeout, the single 401 renewal and the useSWRSubscription adapter, so no app keeps a hand-written reader.'
   '@starci/grammar':
-    version: 0.12.13
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.55
+    version: 3.4.57
     group: starci
     install: registry
     side: be
-    source: packages/eslint/be/package.json
+    source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.1.9
+    version: 9.2.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/fe/package.json
+    source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
-  '@starci/eslint-grammar-starci':
-    version: 0.12.13
+  '@starci/eslint-grammar-core':
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/grammar-starci/package.json
+    source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.12.13
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/grammar-offset-pop/package.json
+    source: packages/eslint-grammar-offset-pop/package.json
     why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.0.13
+    version: 2.1.0
     group: starci
     install: registry
     side: fe
-    source: packages/stylelint/package.json
+    source: packages/stylelint-canon/package.json
     why: 'the front-end stylelint canon: no-class-selector refuses a compound class selector (`div.card`); the brand layer accepts `--font-sans` and `--font-mono`; status-contrast measures the HeroUI soft pairs per theme; brand-layer-shape reads the shared :root,.light,.dark block and the info soft pair; appTokens come from loadAppTokens(import.meta.url) for the managed one-line stylelint.config.mjs.'
   '@starci/tsconfig':
-    version: 2.0.7
+    version: 2.0.8
     group: starci
     install: registry
     side: both
     source: packages/tsconfig/package.json
   '@starci/prettier-config':
-    version: 1.0.4
+    version: 1.0.5
     group: starci
     install: registry
     side: both
     source: packages/prettier-config/package.json
   '@starci/jest-preset':
-    version: 2.3.6
+    version: 2.3.7
     group: starci
     install: registry
     side: be
@@ -98,14 +98,13 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.46
+    version: 1.7.47
     group: starci
     install: registry
     side: both
-    source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.46
+    version: 4.8.0
     group: starci
     install: registry
     side: both
@@ -406,7 +405,7 @@ pins:
     version: 2.2.0
     group: ui
     side: fe
-    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-starci (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
+    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-core (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
   '@dicebear/core':
     version: 10.4.0
     group: ui

package/runtime/knowledge/hfs/fe-stack.yaml

@@ -251,7 +251,7 @@ concerns:
     why: the canon lint and format configuration.
   - id: grammar-lint
     tier: opt
-    packages: ['@starci/eslint-grammar-starci', '@starci/eslint-grammar-offset-pop']
+    packages: ['@starci/eslint-grammar-core', '@starci/eslint-grammar-offset-pop']
     home: [fe.source-root-pinned]
     pattern: FE-RULE-OWNERSHIP
     forbids: []

package/runtime/scripts/hfs/rule-catalog.mjs

@@ -12,7 +12,7 @@ import { fail } from './slot-errors.mjs';
 
 const HFS_RULES_FILE = 'knowledge/hfs/rules.yaml';
 const RULE_GATES = Object.freeze(['pre-commit', 'pre-push', 'settle', 'land', 'ci', 'sonar', 'runtime']);
-const ENFORCER_FAMILIES = Object.freeze(['eslint-be', 'eslint-fe', 'eslint-grammar-starci', 'stylelint', 'machine', 'hfs', 'work-validate', 'sonar', 'runtime']);
+const ENFORCER_FAMILIES = Object.freeze(['eslint-be', 'eslint-fe', 'eslint-grammar-core', 'stylelint', 'machine', 'hfs', 'work-validate', 'sonar', 'runtime']);
 const RULE_KINDS = Object.freeze(['codemod', 'lint', 'check', 'design']);
 const FINDING_CODE = /^[A-Z][A-Z0-9]*(_[A-Z0-9]+)+$/;
 const ENFORCER_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
@@ -346,7 +346,7 @@ export function loadRuleCatalog({ root = skillRoot, file = path.join(root, HFS_R
     /** The catalogued why code of a lint finding's rule id (`starci-be/<id>`, `starci-fe/<id>`), or undefined. */
     lintCode: (ruleId) => {
       const [plugin, id] = String(ruleId ?? '').split('/');
-      const kind = (plugin === 'starci-be' && 'eslint-be') || (plugin === 'starci-fe' && 'eslint-fe') || (plugin === 'starci-grammar' && 'eslint-grammar-starci') || null;
+      const kind = (plugin === 'starci-be' && 'eslint-be') || (plugin === 'starci-fe' && 'eslint-fe') || (plugin === 'starci-grammar' && 'eslint-grammar-core') || null;
       return kind ? list.find((rule) => rule.enforcers.some((enforcer) => enforcer.kind === kind && enforcer.id === id))?.code : undefined;
     },
     /** The rules one enforcer judges, e.g. forEnforcer('eslint-be', 'error-home'). */

package/runtime/scripts/lib/grammar-lint.mjs

@@ -4,14 +4,27 @@ import { parseYamlCached } from './yaml-cached.mjs';
 
 const CATALOG_FILE = new URL('../../knowledge/grammars/index.yaml', import.meta.url);
 
+function readCatalog() {
+  return parseYamlCached(fs.readFileSync(CATALOG_FILE, 'utf8'));
+}
+
 function selectedFamily(family) {
   if (typeof family !== 'string' || !family.trim()) throw new Error('sides.fe.grammar must explicitly name the selected Grammar family');
-  const catalog = parseYamlCached(fs.readFileSync(CATALOG_FILE, 'utf8'));
+  const catalog = readCatalog();
   const matches = (catalog.families ?? []).filter(entry => entry.id === family);
   if (matches.length !== 1) throw new Error(`Grammar family ${family} has no declared lint contract in knowledge/grammars/index.yaml`);
   return { catalog, selected: matches[0] };
 }
 
+/**
+ * Resolve a selection to its declared family id; only a catalog family id resolves, there are no aliases.
+ * @param {string} family - The id an app or caller names (sides.fe.grammar).
+ * @returns {{ id: string }} The declared family id.
+ */
+export function resolveGrammarFamily(family) {
+  return Object.freeze({ id: selectedFamily(family).selected.id });
+}
+
 /** The explicitly selected authored family entry; callers share the catalog lookup rather than inferring a family. */
 export function grammarFamilyFor(family) {
   return Object.freeze(selectedFamily(family).selected);
@@ -24,13 +37,13 @@ export function grammarLintFor(family) {
     throw new Error(`Grammar family ${family} has no declared lint contract in knowledge/grammars/index.yaml`);
   }
   const lint = selected.lint;
-  if (lint.package === null) return Object.freeze({ family, package: null });
+  if (lint.package === null) return Object.freeze({ family: selected.id, package: null });
   if (typeof lint.package !== 'string' || !lint.package.startsWith('@starci/eslint-grammar-')
     || typeof lint.factory !== 'string' || !/^[a-zA-Z][a-zA-Z0-9]*$/.test(lint.factory)
     || typeof lint.prefix !== 'string' || !/^[a-z][a-z0-9-]*$/.test(lint.prefix)) {
     throw new Error(`Grammar family ${family} has an invalid lint contract in knowledge/grammars/index.yaml`);
   }
-  return Object.freeze({ family, package: lint.package, factory: lint.factory, prefix: lint.prefix });
+  return Object.freeze({ family: selected.id, package: lint.package, factory: lint.factory, prefix: lint.prefix });
 }
 
 /** The selected family's shared component/export contract, resolved through its catalog reference. */

package/surface-rules.mjs

@@ -4,7 +4,7 @@ import { functionOf, importOf, isFn, patternPath, unwrap, variableOf } from "./l
 import { typedClassStrings, typedPropertyStrings } from "./lib/typed-class-values.mjs"
 import { reactHookOf } from "./lib/react.mjs"
 
-const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|heritage|offset-pop))?$/
+const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|offset-pop))?$/
 const SURFACES = new Set([
   "SurfaceCard", "SurfaceListCard", "SurfaceAccordionCard", "Sidebar",
   "Dialog", "Drawer", "AlertDialog", "Popover",

package/ui-rulings.mjs

@@ -12,7 +12,7 @@ const grammarComponent = (context, opening, expected) => {
   const binding = importOf(context, root);
   if (
     !binding ||
-    !/^@starci\/grammar(?:\/(?:common|core|heritage|offset-pop))?$/.test(
+    !/^@starci\/grammar(?:\/(?:common|core|offset-pop))?$/.test(
       binding.source,
     )
   )