@starci/eslint-canon-fe 9.5.23 → 9.6.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 9.6.2 - 2026-10-31
+
+- Changed: the bundled canon pins name @starci/grammar 0.16.2 (the horizontal Stepper connector line; SurfaceListCard takes its depth from the surface context).
+
+## 9.6.1 - 2026-10-30
+
+- Changed: the bundled canon pins name @starci/grammar 0.16.1 (accentCorner, Backdrop, the shell filling the viewport).
+
+## 9.6.0 - 2026-10-30
+
+- Changed: the bundled runtime copies are now generated from the hfs build (TypeScript emitted as .mjs) per runtime/bundle.json, with a drift check in CI; the copies the package keeps as its own are listed there and stay hand-maintained; the bundled canon pins name hfs 4.12.0, eslint-canon-be 3.9.0, eslint-canon-fe 9.6.0, the Grammar family 0.16.0, jest-preset 2.5.3 and test-world 1.3.3. No rule of this package changed.
+
 ## 9.5.23 - 2026-10-30
 
 - Changed: the bundled canon pins name hfs 4.11.22 (app check and lint pass under 20 findings), eslint-canon-be 3.8.21, eslint-canon-fe 9.5.23 and the Grammar family 0.15.34. No rule changed.

package/docs/button-intent.md

@@ -19,4 +19,4 @@ App `Button` and `IconButton` commands declare `intent`. Grammar derives their v
 </AlertDialog>
 ```
 
-`starci app codemod button-intent` defaults to a dry run. Use `--write` to apply deterministic mappings, then resolve every case in its JSON and Markdown report from the command's actual consequence. A destructive-looking label is a review signal rather than authority to choose an intent.
+`starci app codemod button-intent` defaults to a dry run. Use `--execute` to apply deterministic mappings, then resolve every case in its JSON and Markdown report from the command's actual consequence. A destructive-looking label is a review signal rather than authority to choose an intent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-canon-fe",
-  "version": "9.5.23",
+  "version": "9.6.2",
   "description": "Universal front-end lint laws for TypeScript and Next.js, independent of the selected Grammar family.",
   "type": "module",
   "license": "MIT",

package/runtime/bundle.json

@@ -0,0 +1,192 @@
+{
+  "generated": [
+    "config.example.yaml",
+    "engine/by-code-unit.mjs",
+    "engine/model-config.mjs",
+    "engine/orca-config.mjs",
+    "engine/plain-object.mjs",
+    "engine/release-config.mjs",
+    "engine/removed-vocabulary.mjs",
+    "engine/resources-config.mjs",
+    "engine/runtime-root.mjs",
+    "engine/secrets.mjs",
+    "engine/sonar-config.mjs",
+    "engine/temp-root.mjs",
+    "engine/yaml.mjs",
+    "knowledge/grammars/index.yaml",
+    "knowledge/hfs/canon-pins.yaml",
+    "knowledge/hfs/fe-stack.yaml",
+    "knowledge/patterns/fe/folder.yaml",
+    "knowledge/sonar-gate.yaml",
+    "modules/kernel/removed-vocabulary.yaml",
+    "modules/models/registry.yaml",
+    "modules/models/runtimes.yaml",
+    "modules/models/tiers.yaml",
+    "scripts/api/git/cat-file.mjs",
+    "scripts/api/git/config-get.mjs",
+    "scripts/api/git/diff.mjs",
+    "scripts/api/git/lib.mjs",
+    "scripts/api/git/ls-files.mjs",
+    "scripts/api/git/ls-tree.mjs",
+    "scripts/api/git/merge-base.mjs",
+    "scripts/api/git/remote.mjs",
+    "scripts/api/git/rev-parse-query.mjs",
+    "scripts/api/git/show.mjs",
+    "scripts/hfs/allows.mjs",
+    "scripts/hfs/architecture/ast-walks.mjs",
+    "scripts/hfs/architecture/automatic-gates.mjs",
+    "scripts/hfs/architecture/backend-app-files.mjs",
+    "scripts/hfs/architecture/backend.mjs",
+    "scripts/hfs/architecture/background-unowned.mjs",
+    "scripts/hfs/architecture/canon-clones.mjs",
+    "scripts/hfs/architecture/canon-jsx-clones.mjs",
+    "scripts/hfs/architecture/client-reaches-server.mjs",
+    "scripts/hfs/architecture/clones.mjs",
+    "scripts/hfs/architecture/config-unread.mjs",
+    "scripts/hfs/architecture/config.mjs",
+    "scripts/hfs/architecture/connection-map.mjs",
+    "scripts/hfs/architecture/constructor-deps.mjs",
+    "scripts/hfs/architecture/context-coupling.mjs",
+    "scripts/hfs/architecture/context-map.mjs",
+    "scripts/hfs/architecture/context-owner.mjs",
+    "scripts/hfs/architecture/context-platform-tables.mjs",
+    "scripts/hfs/architecture/context-transaction.mjs",
+    "scripts/hfs/architecture/contract-fixture-guard.mjs",
+    "scripts/hfs/architecture/contracts-readonly.mjs",
+    "scripts/hfs/architecture/contracts.mjs",
+    "scripts/hfs/architecture/cross-app-duplicate.mjs",
+    "scripts/hfs/architecture/dead-exports-bindings.mjs",
+    "scripts/hfs/architecture/dead-exports.mjs",
+    "scripts/hfs/architecture/default-deny.mjs",
+    "scripts/hfs/architecture/doc-language.mjs",
+    "scripts/hfs/architecture/entity-registry.mjs",
+    "scripts/hfs/architecture/entrypoint.mjs",
+    "scripts/hfs/architecture/error-codes.mjs",
+    "scripts/hfs/architecture/error-masked.mjs",
+    "scripts/hfs/architecture/fe-slot-allows.mjs",
+    "scripts/hfs/architecture/feature-shape.mjs",
+    "scripts/hfs/architecture/framework-pinned.mjs",
+    "scripts/hfs/architecture/frontend-block-render.mjs",
+    "scripts/hfs/architecture/frontend-grammar.mjs",
+    "scripts/hfs/architecture/frontend-routing.mjs",
+    "scripts/hfs/architecture/frontend-world-render.mjs",
+    "scripts/hfs/architecture/frontend-world.mjs",
+    "scripts/hfs/architecture/frontend.mjs",
+    "scripts/hfs/architecture/function-spec-providers.mjs",
+    "scripts/hfs/architecture/hfs-graph.mjs",
+    "scripts/hfs/architecture/hooks-are-hooks.mjs",
+    "scripts/hfs/architecture/i18n-keys.mjs",
+    "scripts/hfs/architecture/identity.mjs",
+    "scripts/hfs/architecture/index.mjs",
+    "scripts/hfs/architecture/injection-token-exported.mjs",
+    "scripts/hfs/architecture/jwt-ast.mjs",
+    "scripts/hfs/architecture/machine-ast.mjs",
+    "scripts/hfs/architecture/managed-scripts.mjs",
+    "scripts/hfs/architecture/module-per-transport.mjs",
+    "scripts/hfs/architecture/next-data-contract.mjs",
+    "scripts/hfs/architecture/next-data-inference.mjs",
+    "scripts/hfs/architecture/next-data-key.mjs",
+    "scripts/hfs/architecture/next-data-symbols.mjs",
+    "scripts/hfs/architecture/next-data.mjs",
+    "scripts/hfs/architecture/operation-contract-roots.mjs",
+    "scripts/hfs/architecture/owners.mjs",
+    "scripts/hfs/architecture/package-shape.mjs",
+    "scripts/hfs/architecture/presentation.mjs",
+    "scripts/hfs/architecture/reachability.mjs",
+    "scripts/hfs/architecture/register-once.mjs",
+    "scripts/hfs/architecture/registration.mjs",
+    "scripts/hfs/architecture/required-files.mjs",
+    "scripts/hfs/architecture/route-files-thin.mjs",
+    "scripts/hfs/architecture/schema-owner.mjs",
+    "scripts/hfs/architecture/server-action.mjs",
+    "scripts/hfs/architecture/side-boundary.mjs",
+    "scripts/hfs/architecture/source-names-shape.mjs",
+    "scripts/hfs/architecture/source-names.mjs",
+    "scripts/hfs/architecture/sql-keys.mjs",
+    "scripts/hfs/architecture/sql-owner.mjs",
+    "scripts/hfs/architecture/sql-returning.mjs",
+    "scripts/hfs/architecture/sql-token-forms.mjs",
+    "scripts/hfs/architecture/sql-tokens.mjs",
+    "scripts/hfs/architecture/staged-consumers.mjs",
+    "scripts/hfs/architecture/surface.mjs",
+    "scripts/hfs/architecture/symbols.mjs",
+    "scripts/hfs/architecture/test-world-files.mjs",
+    "scripts/hfs/architecture/tiers.mjs",
+    "scripts/hfs/architecture/transport-owner.mjs",
+    "scripts/hfs/architecture/type-context.mjs",
+    "scripts/hfs/architecture/typescript.mjs",
+    "scripts/hfs/architecture/unit-spec-providers.mjs",
+    "scripts/hfs/declaration-shape.mjs",
+    "scripts/hfs/declaration-slots.mjs",
+    "scripts/hfs/edition-slots.mjs",
+    "scripts/hfs/linear-text.mjs",
+    "scripts/hfs/param-names.mjs",
+    "scripts/hfs/path-findings.mjs",
+    "scripts/hfs/repo-identity.mjs",
+    "scripts/hfs/rule-catalog.mjs",
+    "scripts/hfs/rule-params-shape.mjs",
+    "scripts/hfs/rules/database-migrations.mjs",
+    "scripts/hfs/rules/fe-no-tests.mjs",
+    "scripts/hfs/rules/read.mjs",
+    "scripts/hfs/rules/spec-placement.mjs",
+    "scripts/hfs/slot-app-view.mjs",
+    "scripts/hfs/slot-classify.mjs",
+    "scripts/hfs/slot-errors.mjs",
+    "scripts/hfs/slot-imports.mjs",
+    "scripts/hfs/slot-manifest-shape.mjs",
+    "scripts/hfs/slot-match.mjs",
+    "scripts/hfs/slot-path.mjs",
+    "scripts/hfs/slot-required.mjs",
+    "scripts/hfs/slot-semantic-problems.mjs",
+    "scripts/hfs/slot-side-problems.mjs",
+    "scripts/hfs/slots.mjs",
+    "scripts/hfs/test-world-slot.mjs",
+    "scripts/hfs/trailing-slashes.mjs",
+    "scripts/hfs/typescript-programs.mjs",
+    "scripts/hfs/view.mjs",
+    "scripts/lib/dockerfile.mjs",
+    "scripts/lib/env.mjs",
+    "scripts/lib/event-contract.mjs",
+    "scripts/lib/git.mjs",
+    "scripts/lib/glob.mjs",
+    "scripts/lib/grammar-lint.mjs",
+    "scripts/lib/i18n.mjs",
+    "scripts/lib/in-order.mjs",
+    "scripts/lib/json-clone.mjs",
+    "scripts/lib/json.mjs",
+    "scripts/lib/language.mjs",
+    "scripts/lib/list.mjs",
+    "scripts/lib/mutation-fence.mjs",
+    "scripts/lib/path-key.mjs",
+    "scripts/lib/read-text.mjs",
+    "scripts/lib/regex.mjs",
+    "scripts/lib/same-text.mjs",
+    "scripts/lib/sops-envelope.mjs",
+    "scripts/lib/stack-services.mjs",
+    "scripts/lib/ts-analysis.mjs",
+    "scripts/lib/ts-ast.mjs",
+    "scripts/lib/walk.mjs",
+    "scripts/lib/yaml-cached.mjs"
+  ],
+  "own": [
+    "engine/config.mjs",
+    "engine/invalid-config.mjs",
+    "knowledge/hfs/slots.yaml",
+    "packages/hfs/templates/app/package-scripts/package.json",
+    "scripts/api/git/recorded-lines.mjs",
+    "scripts/hfs/architecture/hfs.mjs",
+    "scripts/hfs/manifest-shape.mjs",
+    "scripts/hfs/project-graph.mjs",
+    "scripts/hfs/project-rule.mjs",
+    "scripts/hfs/rules/database-constants.mjs",
+    "scripts/hfs/rules/secrets.mjs",
+    "scripts/lib/git-hooks-dir.mjs",
+    "scripts/lib/jsdoc.mjs",
+    "scripts/lib/line-count.mjs",
+    "scripts/lib/next-contract.mjs",
+    "scripts/lib/package-at.mjs",
+    "scripts/lib/secret-patterns.mjs",
+    "scripts/lib/sonar-syntax-rules.mjs",
+    "scripts/lib/sonar-way.mjs"
+  ]
+}

package/runtime/engine/by-code-unit.mjs

@@ -1,12 +1,12 @@
-// by-code-unit.mjs - the comparator of a bare `Array.prototype.sort()`, owned beside the engine files that digest and canonicalize (scripts/lib/list.mjs re-exports it).
-
+// by-code-unit.mjs -the comparator of a bare `Array.prototype.sort()`, owned beside the engine files that digest and canonicalize (scripts/lib/list.mjs re-exports it).
 /**
  * The comparator of a bare `Array.prototype.sort()`: values compared as strings by UTF-16 code unit. Pass it to `sort` and
  * `toSorted` so the order is stated, and stays byte-identical to the default order that digests and canonical output depend on.
  */
 export const byCodeUnit = (a, b) => {
-  const left = String(a);
-  const right = String(b);
-  if (left < right) return -1;
-  return left > right ? 1 : 0;
+    const left = String(a);
+    const right = String(b);
+    if (left < right)
+        return -1;
+    return left > right ? 1 : 0;
 };

package/runtime/engine/model-config.mjs

@@ -1,90 +1,112 @@
 import fs from 'node:fs';
-import {fileURLToPath} from 'node:url';
-import {parseYaml} from './yaml.mjs';
-import {isPlainObject as plain} from './plain-object.mjs';
-import {invalid} from './invalid-config.mjs';
-import {byCodeUnit} from './by-code-unit.mjs';
-import {removedOfKind} from './removed-vocabulary.mjs';
-
+import { fileURLToPath } from 'node:url';
+import { parseYaml } from './yaml.mjs';
+import { isPlainObject as plain } from './plain-object.mjs';
+import { invalid } from './invalid-config.mjs';
+import { byCodeUnit } from './by-code-unit.mjs';
+import { removedOfKind } from './removed-vocabulary.mjs';
 /** The effort vocabulary, ordered weakest to strongest — the only list of it. */
-export const EFFORT_LEVELS=new Set(['none','minimal','low','medium','high','xhigh','max','ultra']);
-const DIFFICULTIES=['easy','medium','hard','insane'];
-export const MODELS_KEYS=['tiers','seats','balance','usage'];
-const known=names=>[...names].sort(byCodeUnit).join(', ');
-
-const hasPath=(root,dotted)=>dotted.split('.').reduce((node,key)=>(plain(node)&&Object.hasOwn(node,key)?node[key]:undefined),root)!==undefined;
-
+export const EFFORT_LEVELS = new Set(['none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra']);
+const DIFFICULTIES = ['easy', 'medium', 'hard', 'insane'];
+export const MODELS_KEYS = ['tiers', 'seats', 'balance', 'usage'];
+const known = (names) => [...names].sort(byCodeUnit).join(', ');
+const hasPath = (root, dotted) => dotted.split('.').reduce((node, key) => (plain(node) && Object.hasOwn(node, key) ? node[key] : undefined), root) !== undefined;
 /** Refuse an old-shape config (the removed keys of modules/kernel/removed-vocabulary.yaml), naming every removed key and where its meaning lives now. */
-export function refuseRemovedKeys(config){
-  const found=removedOfKind('config-key').filter(({name})=>hasPath(config,name));
-  if(!found.length)return;
-  const removed=found.map(({name,use})=>`${name} is removed (${use})`).join('; ');
-  throw new Error(`Invalid config.yaml: ${removed}.`);
+export function refuseRemovedKeys(config) {
+    const found = removedOfKind('config-key').filter(({ name }) => hasPath(config, name));
+    if (!found.length)
+        return;
+    const removed = found.map(({ name, use }) => `${name} is removed (${use})`).join('; ');
+    throw new Error(`Invalid config.yaml: ${removed}.`);
 }
-
-let shippedCache=null;
+let shippedCache = null;
 /** modules/models/tiers.yaml as shipped, parsed once per file version. */
-export function shippedTiers(){
-  const file=fileURLToPath(new URL('../modules/models/tiers.yaml',import.meta.url));
-  let stat;try{stat=fs.statSync(file);}catch{throw new Error('Missing modules/models/tiers.yaml');}
-  const version=`${stat.mtimeMs}:${stat.size}`;
-  if(shippedCache?.version!==version)shippedCache={version,doc:parseYaml(fs.readFileSync(file,'utf8'))};
-  return structuredClone(shippedCache.doc);
+export function shippedTiers() {
+    const file = fileURLToPath(new URL('../modules/models/tiers.yaml', import.meta.url));
+    let stat;
+    try {
+        stat = fs.statSync(file);
+    }
+    catch {
+        throw new Error('Missing modules/models/tiers.yaml');
+    }
+    const version = `${stat.mtimeMs}:${stat.size}`;
+    if (shippedCache?.version !== version)
+        shippedCache = { version, doc: parseYaml(fs.readFileSync(file, 'utf8')) };
+    return structuredClone(shippedCache.doc);
 }
-
-function validateMember(bad,where,member,profile){
-  if(!plain(member)||Object.keys(member).some(key=>!['agent','model','effort'].includes(key))||typeof member.agent!=='string'||typeof member.model!=='string')
-    bad(`${where} must be {agent, model, effort?}.`);
-  if(profile.models?.[member.model]?.provider!==member.agent)bad(`${where}: model ${member.model} is not declared by agent ${member.agent} in modules/models/registry.yaml models.`);
-  if(member.effort!==undefined&&!EFFORT_LEVELS.has(member.effort))bad(`${where}.effort must use the effort vocabulary.`);
+function validateMember(bad, where, member, profile) {
+    if (!plain(member) || Object.keys(member).some(key => !['agent', 'model', 'effort'].includes(key)) || typeof member.agent !== 'string' || typeof member.model !== 'string')
+        return bad(`${where} must be {agent, model, effort?}.`);
+    if (profile.models?.[member.model]?.provider !== member.agent)
+        bad(`${where}: model ${member.model} is not declared by agent ${member.agent} in modules/models/registry.yaml models.`);
+    if (member.effort !== undefined && !(typeof member.effort === 'string' && EFFORT_LEVELS.has(member.effort)))
+        bad(`${where}.effort must use the effort vocabulary.`);
 }
-
-function validateChains(bad,tiers,profile){
-  for(const [name,chain] of Object.entries(tiers)){
-    if(!Array.isArray(chain)||!chain.length)bad(`.${name} must be a non-empty ordered list of {agent, model, effort?}.`);
-    chain.forEach((member,index)=>validateMember(bad,`.${name}[${index}]`,member,profile));
-    if(new Set(chain.map(member=>`${member.agent}/${member.model}`)).size!==chain.length)bad(`.${name} names each member once.`);
-  }
+function validateChains(bad, tiers, profile) {
+    for (const [name, chain] of Object.entries(tiers)) {
+        if (!Array.isArray(chain) || !chain.length)
+            return bad(`.${name} must be a non-empty ordered list of {agent, model, effort?}.`);
+        chain.forEach((member, index) => validateMember(bad, `.${name}[${index}]`, member, profile));
+        // validateMember refused every member that is not a {agent, model, effort?} record above.
+        const members = chain;
+        if (new Set(members.map(member => `${member.agent}/${member.model}`)).size !== chain.length)
+            bad(`.${name} names each member once.`);
+    }
 }
-
 /** A call tier is taken by a headless call only: no seat, difficulty, kind, order or caller reference may name it, and every call names one. */
-function validateUse(bad,{doc,names,refs}){
-  const callTiers=new Set(Object.entries(doc.tierUse).filter(([,use])=>use==='call').map(([tier])=>tier));
-  for(const tier of Object.keys(doc.tierUse))if(!names.has(tier))bad(`: tierUse names tier ${tier} (known: ${known(names)}).`);
-  for(const [where,tier] of refs)if(callTiers.has(tier))bad(`: ${where} names tier ${tier}, a call tier (tierUse): a headless call is made on it, no seat or op is seated on it.`);
-  for(const [call,spec] of Object.entries(doc.calls))if(!callTiers.has(spec.tier))bad(`: calls.${call}.tier ${spec.tier} must be a tier whose tierUse is call.`);
+function validateUse(bad, { doc, names, refs }) {
+    const callTiers = new Set(Object.entries(doc.tierUse).filter(([, use]) => use === 'call').map(([tier]) => tier));
+    for (const tier of Object.keys(doc.tierUse))
+        if (!names.has(tier))
+            bad(`: tierUse names tier ${tier} (known: ${known(names)}).`);
+    for (const [where, tier] of refs)
+        if (callTiers.has(tier))
+            bad(`: ${where} names tier ${tier}, a call tier (tierUse): a headless call is made on it, no seat or op is seated on it.`);
+    for (const [call, spec] of Object.entries(doc.calls))
+        if (!callTiers.has(spec.tier))
+            bad(`: calls.${call}.tier ${spec.tier} must be a tier whose tierUse is call.`);
 }
-
 /** The tier document the picker reads: the shipped tiers.yaml with config.yaml `models` laid over it. Validated. */
-export function effectiveTiers(config,profile){
-  const doc=shippedTiers(),models=plain(config?.models)?config.models:{};
-  const bad=invalid('models');
-  const tiers={...doc.tiers,...models.tiers};
-  validateChains(bad,tiers,profile);
-  const seats={...doc.seats,...models.seats};
-  const balance={...doc.balance,...models.balance};
-  const usage={...doc.usage,...models.usage};
-  const names=new Set(Object.keys(tiers));
-  const refs=[...Object.entries(seats).map(([seat,tier])=>[`.seats.${seat}`,tier]),...DIFFICULTIES.map(level=>[`difficulty.${level}`,doc.difficulty[level]]),
-    ...Object.entries(doc.kindTiers).map(([kind,tier])=>[`kindTiers.${kind}`,tier]),...doc.tierOrder.map(tier=>['tierOrder',tier])];
-  for(const [where,tier] of refs)if(!names.has(tier))bad(`: ${where} names tier ${tier} (known: ${known(names)}).`);
-  validateUse(bad,{doc,names,refs});
-  if(!(Number.isInteger(balance.maxStreak)&&balance.maxStreak>=1))bad('.balance.maxStreak must be an integer >= 1.');
-  if(!(typeof balance.maxSharePercent==='number'&&balance.maxSharePercent>0&&balance.maxSharePercent<=100))bad('.balance.maxSharePercent must be a number in (0, 100].');
-  const {reservePercent,biasPercent,exhaustedPercent}=usage;
-  if(![reservePercent,biasPercent,exhaustedPercent].every(value=>typeof value==='number'&&value>=0&&value<=100)||!(reservePercent<=biasPercent&&biasPercent<exhaustedPercent))
-    bad('.usage must hold numbers with reservePercent <= biasPercent < exhaustedPercent, each within 0..100.');
-  return {...doc,tiers,seats,balance,usage};
+export function effectiveTiers(config, profile) {
+    const doc = shippedTiers(), models = plain(config?.models) ? config.models : {};
+    const bad = invalid('models');
+    const merged = { ...doc.tiers, ...models.tiers };
+    validateChains(bad, merged, profile);
+    // validateChains refused every chain that is not a non-empty list of {agent, model, effort?} members.
+    const tiers = merged;
+    const seats = { ...doc.seats, ...models.seats };
+    const balance = { ...doc.balance, ...models.balance };
+    const usage = { ...doc.usage, ...models.usage };
+    const names = new Set(Object.keys(tiers));
+    const refs = [...Object.entries(seats).map(([seat, tier]) => [`.seats.${seat}`, tier]), ...DIFFICULTIES.map(level => [`difficulty.${level}`, doc.difficulty[level]]),
+        ...Object.entries(doc.kindTiers).map(([kind, tier]) => [`kindTiers.${kind}`, tier]), ...doc.tierOrder.map(tier => ['tierOrder', tier])];
+    for (const [where, tier] of refs)
+        if (!names.has(tier))
+            bad(`: ${where} names tier ${tier} (known: ${known(names)}).`);
+    validateUse(bad, { doc, names, refs });
+    if (!(Number.isInteger(balance.maxStreak) && balance.maxStreak >= 1))
+        bad('.balance.maxStreak must be an integer >= 1.');
+    if (!(typeof balance.maxSharePercent === 'number' && balance.maxSharePercent > 0 && balance.maxSharePercent <= 100))
+        bad('.balance.maxSharePercent must be a number in (0, 100].');
+    const { reservePercent, biasPercent, exhaustedPercent } = usage;
+    if (![reservePercent, biasPercent, exhaustedPercent].every(value => typeof value === 'number' && value >= 0 && value <= 100) || !(reservePercent <= biasPercent && biasPercent < exhaustedPercent))
+        bad('.usage must hold numbers with reservePercent <= biasPercent < exhaustedPercent, each within 0..100.');
+    return { ...doc, tiers, seats, balance, usage };
 }
-
 /** config.yaml `models` — {tiers?, seats?, balance?, usage?}; the shipped defaults make every key optional. */
-export function validateModelsBlock(config,profile){
-  refuseRemovedKeys(config);
-  const models=config?.models;
-  if(models===undefined||models===null)return;
-  const bad=invalid('models');
-  if(!plain(models)||Object.keys(models).some(key=>!MODELS_KEYS.includes(key)))bad(` must be {${MODELS_KEYS.map(key=>key+'?').join(', ')}} or null (unknown keys are refused).`);
-  if(models.tiers!==undefined&&!plain(models.tiers))bad('.tiers must map tier names to ordered member lists.');
-  for(const key of ['seats','balance','usage'])if(models[key]!==undefined&&!plain(models[key]))bad(`.${key} must be a mapping.`);
-  effectiveTiers(config,profile);
+export function validateModelsBlock(config, profile) {
+    refuseRemovedKeys(config);
+    const models = config?.models;
+    if (models === undefined || models === null)
+        return;
+    const bad = invalid('models');
+    if (!plain(models) || Object.keys(models).some(key => !MODELS_KEYS.includes(key)))
+        return bad(` must be {${MODELS_KEYS.map(key => key + '?').join(', ')}} or null (unknown keys are refused).`);
+    if (models.tiers !== undefined && !plain(models.tiers))
+        bad('.tiers must map tier names to ordered member lists.');
+    for (const key of ['seats', 'balance', 'usage'])
+        if (models[key] !== undefined && !plain(models[key]))
+            bad(`.${key} must be a mapping.`);
+    effectiveTiers(config, profile);
 }

package/runtime/engine/orca-config.mjs

@@ -1,6 +1,5 @@
-import {isPlainObject as plain} from './plain-object.mjs';
-import {invalid} from './invalid-config.mjs';
-
+import { isPlainObject as plain } from './plain-object.mjs';
+import { invalid } from './invalid-config.mjs';
 /**
  * config.yaml `orca` — the owner's Orca app settings the runtime must know. maxWorkerDepth is the deepest worker Orca
  * lets start under the owner's chat (chat = depth 0, a Kernel or the [Supervisor] 1, an op or a [Worker] 2, the draw
@@ -9,21 +8,27 @@ import {invalid} from './invalid-config.mjs';
  * deeper than it before worker-start (worker-depth-exceeded), and `start --check` with STARCI_ORCA_LIVE=1 compares it with
  * a measured probe (scripts/agent/depth-probe.mjs).
  */
-export const ORCA_DEFAULTS=Object.freeze({maxWorkerDepth:4});
+export const ORCA_DEFAULTS = Object.freeze({ maxWorkerDepth: 4 });
 /** The keys of the orca block. */
-export const ORCA_KEYS=Object.freeze(Object.keys(ORCA_DEFAULTS));
-export const MAX_WORKER_DEPTH_CEILING=16;
-export function validateOrca(orca){
-  if(orca===null)return;
-  const bad=invalid('orca');
-  if(!plain(orca))bad(' must be {maxWorkerDepth?} or null.');
-  for(const key of Object.keys(orca))if(!ORCA_KEYS.includes(key))bad(` has unknown key ${key} (allowed: ${ORCA_KEYS.join(', ')}).`);
-  const v=orca.maxWorkerDepth;
-  if(v!==undefined&&v!==null&&!(Number.isInteger(v)&&v>=1&&v<=MAX_WORKER_DEPTH_CEILING))bad(`.maxWorkerDepth must be an integer from 1 to ${MAX_WORKER_DEPTH_CEILING} equal to the Orca app's worker depth setting (default ${ORCA_DEFAULTS.maxWorkerDepth}), or null.`);
+export const ORCA_KEYS = Object.freeze(Object.keys(ORCA_DEFAULTS));
+export const MAX_WORKER_DEPTH_CEILING = 16;
+export function validateOrca(orca) {
+    if (orca === null)
+        return;
+    const bad = invalid('orca');
+    if (!plain(orca))
+        return bad(' must be {maxWorkerDepth?} or null.');
+    for (const key of Object.keys(orca))
+        if (!ORCA_KEYS.includes(key))
+            bad(` has unknown key ${key} (allowed: ${ORCA_KEYS.join(', ')}).`);
+    const v = orca.maxWorkerDepth;
+    if (v !== undefined && v !== null && !(typeof v === 'number' && Number.isInteger(v) && v >= 1 && v <= MAX_WORKER_DEPTH_CEILING))
+        bad(`.maxWorkerDepth must be an integer from 1 to ${MAX_WORKER_DEPTH_CEILING} equal to the Orca app's worker depth setting (default ${ORCA_DEFAULTS.maxWorkerDepth}), or null.`);
 }
 /** The owner's Orca settings: {maxWorkerDepth, source: 'orca'|'default'}. An absent or null block or key is the default. */
-export function orcaSettings(config){
-  if(config?.orca!==undefined)validateOrca(config.orca);
-  const value=plain(config?.orca)?config.orca.maxWorkerDepth:null;
-  return Number.isInteger(value)?{maxWorkerDepth:value,source:'orca'}:{maxWorkerDepth:ORCA_DEFAULTS.maxWorkerDepth,source:'default'};
+export function orcaSettings(config) {
+    if (config?.orca !== undefined)
+        validateOrca(config.orca);
+    const value = plain(config?.orca) ? config.orca.maxWorkerDepth : null;
+    return typeof value === 'number' && Number.isInteger(value) ? { maxWorkerDepth: value, source: 'orca' } : { maxWorkerDepth: ORCA_DEFAULTS.maxWorkerDepth, source: 'default' };
 }

package/runtime/engine/release-config.mjs

@@ -1,28 +1,32 @@
-import {isPlainObject as plain} from './plain-object.mjs';
-import {invalid} from './invalid-config.mjs';
-
+import { isPlainObject as plain } from './plain-object.mjs';
+import { invalid } from './invalid-config.mjs';
 /** The keys of the release block. */
-export const RELEASE_KEYS=Object.freeze(['suite']);
+export const RELEASE_KEYS = Object.freeze(['suite']);
 /** Where the full test suite of a release is judged: `local` (the release cut also runs the L4 rows before it tags, the shipped default) or `ci` (the GitHub workflows judge EVERY row on each push to main; the cut runs none). */
-export const SUITE_MODES=Object.freeze(['local','ci']);
-const RELEASE_DEFAULTS=Object.freeze({suite:'local'});
-
+export const SUITE_MODES = Object.freeze(['local', 'ci']);
+const RELEASE_DEFAULTS = Object.freeze({ suite: 'local' });
 /**
  * config.yaml `release` - {suite?: local | ci}: who judges the full suite of a release (docs/releasing.md "Where the suite runs"). `local` is the shipped default: `starci release cut` also runs the
  * L4 rows on this host before it tags. `ci` is the owner's recorded choice (2026-10-09, widened 2026-10-26 by push-main-after-scoped-check): the full suite runs on GitHub only, on every push
  * to main; the cut runs no row and the verdict is read with `starci release ci-status`. The push of main needs neither mode: it needs a green scoped check.
  * `none` is refused: the suite does not vanish, it moves to CI, and the value says so.
  */
-export function validateRelease(release){
-  if(release===null)return;
-  const bad=invalid('release');
-  if(!plain(release))bad(` must be {suite?: ${SUITE_MODES.join(' | ')}} or null.`);
-  for(const key of Object.keys(release))if(!RELEASE_KEYS.includes(key))bad(` has unknown key ${key} (allowed: ${RELEASE_KEYS.join(', ')}).`);
-  const value=release.suite;
-  if(value===undefined||value===null)return;
-  if(value==='none')bad('.suite: "none" is not a mode: write "ci" (no local full suite, CI judges) or "local".');
-  if(!SUITE_MODES.includes(value))bad(`.suite must be ${SUITE_MODES.join(' or ')}, or null.`);
+export function validateRelease(release) {
+    if (release === null)
+        return;
+    const bad = invalid('release');
+    if (!plain(release))
+        return bad(` must be {suite?: ${SUITE_MODES.join(' | ')}} or null.`);
+    for (const key of Object.keys(release))
+        if (!RELEASE_KEYS.includes(key))
+            bad(` has unknown key ${key} (allowed: ${RELEASE_KEYS.join(', ')}).`);
+    const value = release.suite;
+    if (value === undefined || value === null)
+        return;
+    if (value === 'none')
+        bad('.suite: "none" is not a mode: write "ci" (no local full suite, CI judges) or "local".');
+    if (typeof value !== 'string' || !SUITE_MODES.includes(value))
+        bad(`.suite must be ${SUITE_MODES.join(' or ')}, or null.`);
 }
-
 /** The suite mode a validated owner config names; an absent block or key is the shipped default. */
-export const releaseSuiteMode=config=>config?.release?.suite??RELEASE_DEFAULTS.suite;
+export const releaseSuiteMode = (config) => config?.release?.suite ?? RELEASE_DEFAULTS.suite;

package/runtime/engine/removed-vocabulary.mjs

@@ -1,26 +1,27 @@
 import fs from 'node:fs';
-import {fileURLToPath} from 'node:url';
-import {parseYaml} from './yaml.mjs';
-
-const FILE=fileURLToPath(new URL('../modules/kernel/removed-vocabulary.yaml',import.meta.url));
-
-let cache=null;
-function loaded(){
-  let stat;try{stat=fs.statSync(FILE);}catch{throw new Error('Missing modules/kernel/removed-vocabulary.yaml');}
-  const version=`${stat.mtimeMs}:${stat.size}`;
-  if(cache?.version!==version)cache={version,doc:parseYaml(fs.readFileSync(FILE,'utf8'))};
-  return cache.doc;
+import { fileURLToPath } from 'node:url';
+import { parseYaml } from './yaml.mjs';
+const FILE = fileURLToPath(new URL('../modules/kernel/removed-vocabulary.yaml', import.meta.url));
+let cache = null;
+function loaded() {
+    let stat;
+    try {
+        stat = fs.statSync(FILE);
+    }
+    catch {
+        throw new Error('Missing modules/kernel/removed-vocabulary.yaml');
+    }
+    const version = `${stat.mtimeMs}:${stat.size}`;
+    if (cache?.version !== version)
+        cache = { version, doc: parseYaml(fs.readFileSync(FILE, 'utf8')) };
+    return cache.doc;
 }
-
-
 /** modules/kernel/removed-vocabulary.yaml: the one list of spellings the runtime refuses, each with its replacement and the release that removed it. */
-export const removedVocabulary=()=>loaded().removed;
-
+export const removedVocabulary = () => loaded().removed;
 /** The removed spellings of one kind. */
-export const removedOfKind=kind=>removedVocabulary().filter(entry=>entry.kind===kind);
-
+export const removedOfKind = (kind) => removedVocabulary().filter(entry => entry.kind === kind);
 /** `<name> is removed (<replacement>)` for a removed spelling of the kind, or undefined when the name is not one. */
-export function removedNotice(kind,name){
-  const entry=removedOfKind(kind).find(candidate=>candidate.name===name);
-  return entry?`${entry.name} is removed (${entry.use})`:undefined;
+export function removedNotice(kind, name) {
+    const entry = removedOfKind(kind).find(candidate => candidate.name === name);
+    return entry ? `${entry.name} is removed (${entry.use})` : undefined;
 }