@starci/eslint-canon-fe 9.8.4 → 9.9.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## Unreleased
+
+## 9.9.0 - 2026-11-02
+
+- Added: `no-hand-skeleton` is published (R367) and requested at error: an app draws no `Skeleton`, `ChatBubbleSkeletons` or `MessageBubbleSkeletons`, because the Grammar components draw their loading structure from `isLoading`. Changed: `no-data-status-prop` lets a leaf, branch or composite take `isLoading` (the one flag below SlotView) and refuses `isError`, `isForbidden`, `isEmpty`, `isValidating`; `slotOfReads` counts as a slot builder.
+
+- Removed: `NavigationFeatureNav` from the surface names and the bundled Core playbook (the component is gone; `TopBar` takes `subnavigation`).
+- Added: `tier-children` (R92): only a unit of `components/frames` takes `children`; a leaf takes `children: string`; a block, a composite and a branch take none (`children?: never`) and `PropsWithChildren` is refused there.
+- Added: `no-swr-default-array`, `no-foreign-slot-status`, `no-validating-as-loading`, `no-placeholder-object` (R367; `FE_SWR_DEFAULT_ARRAY`, `FE_FOREIGN_SLOT_STATUS`, `FE_VALIDATING_AS_LOADING`, `FE_PLACEHOLDER_OBJECT`): a loading state is drawn from the page's own reads. `no-hand-skeleton` is written and tested but not published until the Grammar owns the loading shape.
+- Removed: `button-no-variant` and `nested-control-variant` (the `variant` prop is out of the Grammar types, so the props they refused cannot be written).
+
+- Changed: `no-heading-above-card` (R354) follows the removal of `SectionHeader`: it refuses a `Section` (not `kind="list"`) whose only child is one card, and a card whose `ariaLabel` repeats the `Section` title. `no-hand-built-panes` reads a `Section` as a column where it read `Region`, and `no-commit-in-collection-item` no longer names the removed `CollectionItem`, `ItemActions` and `ListItem`.
+
+- eslint-canon-fe: the surface rules follow the one card (SurfaceListCard and SurfaceAccordionCard are gone).
+- Added: `frames` joins the component tiers (`components/frames/<Name>`, `meta.shape = 'frame'`); a frame is a lower tier for the world check (it owns no data, session or navigation).
+
+## 9.8.5 - 2026-11-01
+
+- Added: `no-heading-above-card` (R354, `FE_HEADING_ABOVE_CARD`): a `SectionHeader` directly above a single card, or a card whose `ariaLabel` repeats the header title, is refused; several cards under one header stay legal.
+- Added: `no-selectable-tag-group` (R353, `FE_TAG_GROUP_SELECTION`): a selection prop on a Grammar `TagGroup` is refused; a filter is a `FilterButtonGroup`.
+- Added: `no-fill-command-in-header` (R352, `FE_COMMAND_FILLS_HEADER`): a Grammar `Button` with `width="fill"` in the `actions` of a `PageHeader` or the `labelEnd` of a `SurfaceCard` or `SurfaceListCard` is refused (a page or pane command hugs its label).
+- Added: `no-table-in-card` (R351, `FE_TABLE_IN_CARD`): a Grammar `DataTable` enclosed by a `SurfaceCard`, or rendered by a component of the same file that a `SurfaceCard` encloses, is refused; plain rows are a `SurfaceListCard` with the note in its `footer`. It is a slot-free surface law at error, with no inline exemption.
+- Changed: the bundled canon pins name @starci/grammar 0.20.2, eslint-grammar-core and eslint-grammar-offset-pop 0.20.2, eslint-canon-be 3.11.6, eslint-canon-fe 9.8.5, stylelint-canon 2.4.0 and hfs 4.16.5 (RELEASE_VERSION_NOT_BUMPED: the previous versions are on npm). One rule law changes (above).
+
 ## 9.8.4 - 2026-11-01
 
 - Changed: the bundled canon pins name @starci/grammar 0.20.1, eslint-grammar-core and eslint-grammar-offset-pop 0.20.1, eslint-canon-be 3.11.5, eslint-canon-fe 9.8.4, stylelint-canon 2.4.0 and hfs 4.16.4 (RELEASE_VERSION_NOT_BUMPED: the previous versions are on npm). No rule changes.
@@ -29,7 +53,7 @@
 
 ## 9.6.7 - 2026-10-31
 
-- Changed: the bundled runtime copies follow @starci/hfs 4.14.0 (R334 one style, `ruleParams.be.sqlPassThrough`) and the canon pins name the cohort hfs 4.14.0, eslint-canon-be 3.11.0, eslint-canon-fe 9.6.7, @starci/grammar, eslint-grammar-core and eslint-grammar-offset-pop 0.16.6, with @starci/ai-router 0.5.0; no rule changed.
+- Changed: the bundled runtime copies follow @starci/hfs 4.14.0 (R334 one style, `ruleParams.be.sqlPassThrough`) and the canon pins name the cohort hfs 4.14.0, eslint-canon-be 3.11.0, eslint-canon-fe 9.6.7, @starci/grammar, eslint-grammar-core and eslint-grammar-offset-pop 0.16.6, with @starci/ai-router 0.5.0; the status rule changes (below).
 
 ## 9.6.6 - 2026-10-31
 
@@ -162,7 +186,6 @@
 - Removed: `callback-shape` (R287 `FE_CALLBACK_SHAPE`) with the `fe.route.callback` slot: the OAuth callback is a back-end door.
 - Changed: the bundled slot manifest 3.9.0 replaces the lite `app.supabase*` slots with `app.db` (`db/migrations`, `db/migrations/archive`, `db/seed.sql`, the managed `db/bootstrap.sql`), `be.integrations.supabase` with `be.integrations.passport` and `be.integrations.object-storage`, removes `fe.route.callback`, sets lite `schemaAuthority: sql`, gives lite TypeORM entities in `be.persistence`, adds `ruleParams.be.dbFunctions`, and moves the S3 SDKs to `integrations/object-storage` and the identity libraries to `integrations/passport` in `infraOwners` (`@supabase/*`, `minio` and `bcrypt` nowhere); the bundled rule catalog retires R216, R217, R219, R254 and R287 and adds R328-R334; the bundled canon pins name hfs 4.10.0, eslint-canon-be 3.7.0, eslint-canon-fe 9.5.0 and the Grammar family 0.15.11, pin `@nestjs/passport` 11.0.5 (CommonJS on the Nest 11 line), `passport` 0.7.0, `passport-google-oauth20` 2.0.0, `passport-local` 1.0.0, `bcryptjs` 3.0.3 and their types (tokens are signed and verified with `jose`; `@nestjs/jwt` stays allowed in `integrations/passport` but unpinned), and drop `@supabase/ssr`, `@supabase/supabase-js` and the `supabase` CLI.
 
-
 ## 9.4.9 - 2026-10-29
 
 - Changed: the bundled slot manifest gives the model libraries their owners in `ruleParams.be.infraOwners` (`@starci/ai-router` to `integrations/ai-gateway`, `@langchain/*` to `integrations/ai`; `openai`, `langchain`, `@langchain/langgraph`, `@langchain/community` and the provider SDKs nowhere) and lists R326 and R327 on `be.integrations`; the bundled canon pins name hfs 4.9.11, eslint-canon-be 3.6.8, eslint-canon-fe 9.4.9, the Grammar family 0.15.10 (grammar, eslint-grammar-core, eslint-grammar-offset-pop), and pin `@langchain/core` 1.3.1 and `@langchain/openai` 1.8.0. No rule changed.
@@ -425,7 +448,6 @@
 ## 8.2.17 - 2026-10-14
 - Changed: `component-line-budget` gives a pure re-export `index.ts` the slot's `barrel` budget (400); `basePropsAtom` admits named `render*` callbacks in `props` of non-block pure halves for feature composition; the bundled machine carries the kind-scoped feature tier edge, canon-shape clone exclusions and in-segment i18n template reads.
 
-
 - Changed: carry the runtime mirror of HFS manifest 3.1.0 (the back-end app composition standard, R245 and R246) and the canon pins of eslint-canon-be 3.3.0, HFS 4.3.0 and CLI 1.2.16. ESLint rule implementations are unchanged.
 
 ## 8.2.18 - 2026-10-14
@@ -678,7 +700,6 @@
 
 ## 5.1.2 - 2026-09-30
 
-
 ## 5.1.1 - 2026-09-30
 
 - **Fix: `use-client-only-at-boundary` knew only the app layout.** A workspace package keeps its grammar tiers directly under `src/` (`packages/<pkg>/src/{composites,branches,leaves}`, the `fe.package.ui` slot), but the rule accepted the directive only under `/components/...`, so nivo-fe's `packages/nivo-ui` reported 13 false findings. The tier names come from `PACKAGE_TIERS` in `lib/scope.mjs` (the slot's layers, no repo name); a package branch or leaf is a boundary, a package composite is not, and the app layout is unchanged.

package/README.md

@@ -37,13 +37,12 @@ tree. `starciTypedSourceConfig({ root })` provides the shared typed, React Hooks
 configuration for source that has not adopted the product composition laws.
 
 The [surface composition law](docs/surface-rules.md) (R318) holds ANATOMY-2 and PADDING-0 for every
-family that publishes the shared HeroUI surface and field API: `nested-control-variant` refuses static
-variants on layer-aware fields and the pill (`variant="secondary"`) on Tabs, which are the underline bar (`FE_NESTED_VARIANT`),
-`no-app-surface-paint` keeps surface paint in Grammar (`FE_GRAMMAR_LAYOUT_ONLY`) and
+family that publishes the shared HeroUI surface and field API: `no-app-surface-paint` keeps surface paint in Grammar (`FE_GRAMMAR_LAYOUT_ONLY`) and
 `no-list-panel-padding` refuses horizontal padding wrappers around Grammar lists and section captions
-within the nearest painted surface, a `Pane` or a `PaneSection` included (`FE_LIST_PANEL_PADDING`), and
+within the nearest painted surface, a `Pane` or a `PaneSection` included (`FE_LIST_PANEL_PADDING`),
 `no-hand-built-panes` refuses a multi-pane frame drawn by hand, a vertical divider as a column seam or
-columns inside a joined card, where `PaneGrid` owns both (`FE_HAND_BUILT_PANES`). The R65 budget law's
+columns inside a joined card, where `PaneGrid` owns both (`FE_HAND_BUILT_PANES`), and
+`no-heading-above-card` refuses a `Section` around a single card (`FE_HEADING_ABOVE_CARD`), `no-selectable-tag-group` refuses a selection on a `TagGroup` (`FE_TAG_GROUP_SELECTION`), `no-fill-command-in-header` refuses a `width="fill"` Button in a page or card header slot (`FE_COMMAND_FILLS_HEADER`), and `no-table-in-card` refuses a `DataTable` inside a `SurfaceCard`, where a `SurfaceListCard` with its note in `footer` holds plain rows (`FE_TABLE_IN_CARD`). The R65 budget law's
 `no-app-relative-clock` leaves live relative time and countdowns to Grammar's shared clock.
 
 The spacing law (R350) leaves every distance to Grammar: `no-spacing-utility` refuses a padding, margin, gap

package/dist/button-intent.d.ts

@@ -2,7 +2,6 @@ import { type Recommended } from "./lib/rule.js";
 /** Every intent law is universal across Grammar families and app editions. */
 export declare const rules: {
     "button-intent-required": import("./lib/rule.js").Rule<"FE_BUTTON_INTENT_REQUIRED", []>;
-    "button-no-variant": import("./lib/rule.js").Rule<"FE_BUTTON_NO_VARIANT", []>;
     "destructive-confirm-in-dialog": import("./lib/rule.js").Rule<"FE_DESTRUCTIVE_CONFIRM_IN_DIALOG", []>;
     "single-commit-per-render": import("./lib/rule.js").Rule<"FE_SINGLE_COMMIT_PER_RENDER", []>;
     "no-commit-in-collection-item": import("./lib/rule.js").Rule<"FE_NO_COMMIT_IN_COLLECTION_ITEM", []>;

package/dist/button-intent.js

@@ -11,7 +11,7 @@ const memberName = (node) => (node.computed ? stringOf(node.property) : node.pro
 const GRAMMAR_ENTRY = /^@starci\/grammar(?:\/(?:common|core|offset-pop))?$/;
 const BUTTONS = new Set(["Button", "IconButton"]);
 const DIALOGS = new Set(["AlertDialog", "ConfirmDialog"]);
-const ITEMS = new Set(["CollectionItem", "ItemActions", "ListItem", "ListRow", "ListBox.Item", "GridList.Item", "Table.Row", "TableRow"]);
+const ITEMS = new Set(["ListBox.Item", "GridList.Item", "Table.Row", "ListRow"]);
 /** The consuming TypeScript program exposes literal intents and spread properties without executing app code. */
 const typedInfo = (context, node, key) => {
     const services = context.sourceCode.parserServices;
@@ -238,20 +238,6 @@ const canCoexist = (left, right) => {
         return false;
     return [...left.guards].every(([condition, value]) => !right.guards.has(condition) || right.guards.get(condition) === value);
 };
-/** No explicit visual prop: any authored variant, including a known props spread, is an app bypass. */
-const buttonNoVariant = defineRule({
-    meta: { type: "problem", docs: { description: "CTA-6: app buttons never choose a variant." }, schema: [], messages: {
-            FE_BUTTON_NO_VARIANT: "FE_BUTTON_NO_VARIANT: declare Button intent instead of variant; Grammar resolves the variant from intent and placement.",
-        } },
-    create(context) {
-        return { JSXOpeningElement(opening) {
-                if (!isButton(context, opening))
-                    return;
-                for (const node of new Set(propsOf(context, opening, "variant").map((prop) => prop.node)))
-                    context.report({ node, messageId: "FE_BUTTON_NO_VARIANT" });
-            } };
-    },
-});
 /** Every app button states its command's intent explicitly. */
 const buttonIntentRequired = defineRule({
     meta: { type: "problem", docs: { description: "CTA-6: every app Button and IconButton declares intent." }, schema: [], messages: {
@@ -352,7 +338,6 @@ const noCommitInCollectionItem = defineRule({
 /** Every intent law is universal across Grammar families and app editions. */
 export const rules = {
     "button-intent-required": buttonIntentRequired,
-    "button-no-variant": buttonNoVariant,
     "destructive-confirm-in-dialog": destructiveConfirmInDialog,
     "single-commit-per-render": singleCommitPerRender,
     "no-commit-in-collection-item": noCommitInCollectionItem,

package/dist/file-layout.js

@@ -216,7 +216,7 @@ export const monorepoTierBelongsToItsSide = defineRule({
     meta: {
         type: "problem",
         docs: {
-            description: "With two or more apps, the shared package holds leaves, composites and branches; blocks, overlays, layouts and pages belong to the app that owns the feature.",
+            description: "With two or more apps, the shared package holds leaves, branches, composites and frames; blocks, overlays, layouts and pages belong to the app that owns the feature.",
         },
         schema: [],
         messages: {
@@ -312,6 +312,7 @@ export const sourceTierMarkerMatchesFolder = defineRule({
             blocks: "block",
             branches: "branch",
             composites: "composite",
+            frames: "frame",
             layouts: "layout",
             leaves: "leaf",
             overlays: "overlay",

package/dist/index.js

@@ -27,6 +27,7 @@ import { recommended as hygieneRecommended, rules as hygieneRules } from "./hygi
 import { recommended as landmarkRecommended, rules as landmarkRules } from "./landmark.js";
 import { recommended as listsRecommended, rules as listsRules } from "./lists.js";
 import { recommended as loadingRecommended, rules as loadingRules } from "./loading.js";
+import { recommended as skeletonStatesRecommended, rules as skeletonStatesRules } from "./skeleton-states.js";
 import { recommended as lintEscapeRecommended, rules as lintEscapeRules } from "./lint-escape-hatch.js";
 import { recommended as namingRecommended, rules as namingRules } from "./naming.js";
 import { recommended as nativeControlsRecommended, rules as nativeControlsRules } from "./native-controls.js";
@@ -73,6 +74,7 @@ const CONTRIBUTIONS = [
     { law: "landmark", rules: landmarkRules, recommended: landmarkRecommended },
     { law: "lists", rules: listsRules, recommended: listsRecommended },
     { law: "loading", rules: loadingRules, recommended: loadingRecommended },
+    { law: "skeleton-states", rules: skeletonStatesRules, recommended: skeletonStatesRecommended },
     { law: "lint-escape-hatch", rules: lintEscapeRules, recommended: lintEscapeRecommended },
     { law: "naming", rules: namingRules, recommended: namingRecommended },
     { law: "native-controls", rules: nativeControlsRules, recommended: nativeControlsRecommended },

package/dist/lib/config.js

@@ -104,8 +104,9 @@ export const SLOT_FREE_RULES = Object.freeze([
     "no-native-anchor", "no-inline-parameter-type", "no-hand-rolled-polling", "no-copy-in-call", "no-alert", "no-failure-collapse",
     "outcome-kinds-exhaustive", "no-await-in-loop", "prefer-code-point", "prefer-string-raw", "no-nested-conditional", "no-void-operator", "no-unused-import",
     "prefer-export-from", "no-unused-prop-types", "media-has-caption", "max-params",
-    "nested-control-variant", "no-list-panel-padding", "no-hand-built-panes", "no-app-surface-paint", "divider-full-bleed", "control-height", "selection-fill-no-check", "no-grammar-shim",
-    "button-intent-required", "button-no-variant", "destructive-confirm-in-dialog", "single-commit-per-render", "no-commit-in-collection-item",
+    "no-list-panel-padding", "no-hand-built-panes", "no-table-in-card", "no-heading-above-card", "no-selectable-tag-group", "no-fill-command-in-header", "no-app-surface-paint", "divider-full-bleed", "control-height", "selection-fill-no-check", "no-grammar-shim",
+    "no-swr-default-array", "no-foreign-slot-status", "no-validating-as-loading", "no-placeholder-object", "no-hand-skeleton",
+    "button-intent-required", "destructive-confirm-in-dialog", "single-commit-per-render", "no-commit-in-collection-item",
 ]);
 /** The source of a plain front-end tree: its `src/`. */
 export const PLAIN_SOURCE_FILES = Object.freeze(["src/**/*.{ts,tsx}"]);

package/dist/lib/scope.d.ts

@@ -35,7 +35,7 @@ export declare const kindOfFile: (context: AnyContext) => string | null;
 export declare const roleOfFile: (context: AnyContext) => string | null;
 /** Product source: a file of a product tier. */
 export declare const isProductSource: (context: AnyContext) => boolean;
-/** A file of a component tier: slot `fe.components` or `fe.package.ui`, inside one of its layer folders (blocks, composites, branches, leaves). */
+/** A file of a component tier: slot `fe.components` or `fe.package.ui`, inside one of its layer folders (blocks, frames, composites, branches, leaves). */
 export declare const isComponentFile: (context: AnyContext) => boolean;
 /** True when the given file (an absolute or repo-relative name, e.g. where an import resolves to) sits in a component layer of slot `fe.components` or `fe.package.ui`. */
 export declare const isComponentPath: (context: AnyContext, file: string) => boolean;

package/dist/lib/scope.js

@@ -41,7 +41,7 @@ export const roleOfFile = (context) => classOf(context).role ?? null;
 const PRODUCT_TIERS = new Set(["route", "feature", "components", "hooks", "foundation", "modules", "transport", "package"]);
 /** Product source: a file of a product tier. */
 export const isProductSource = (context) => PRODUCT_TIERS.has(tierOfFile(context));
-/** A file of a component tier: slot `fe.components` or `fe.package.ui`, inside one of its layer folders (blocks, composites, branches, leaves). */
+/** A file of a component tier: slot `fe.components` or `fe.package.ui`, inside one of its layer folders (blocks, frames, composites, branches, leaves). */
 export const isComponentFile = (context) => inSlot(context, "fe.components", "fe.package.ui") && kindOfFile(context) !== null;
 /** True when the given file (an absolute or repo-relative name, e.g. where an import resolves to) sits in a component layer of slot `fe.components` or `fe.package.ui`. */
 export const isComponentPath = (context, file) => {

package/dist/lib/why.d.ts

@@ -42,6 +42,26 @@ export declare const why: {
         en: string;
         fix: string;
     };
+    "no-fill-command-in-header": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "no-selectable-tag-group": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "no-heading-above-card": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "no-table-in-card": {
+        code: string;
+        en: string;
+        fix: string;
+    };
     "button-intent-required": {
         code: string;
         en: string;
@@ -57,27 +77,42 @@ export declare const why: {
         en: string;
         fix: string;
     };
-    "button-no-variant": {
+    "no-swr-default-array": {
         code: string;
         en: string;
         fix: string;
     };
-    "destructive-confirm-in-dialog": {
+    "no-foreign-slot-status": {
         code: string;
         en: string;
         fix: string;
     };
-    "single-commit-per-render": {
+    "no-validating-as-loading": {
         code: string;
         en: string;
         fix: string;
     };
-    "no-commit-in-collection-item": {
+    "no-placeholder-object": {
         code: string;
         en: string;
         fix: string;
     };
-    "nested-control-variant": {
+    "no-hand-skeleton": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "destructive-confirm-in-dialog": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "single-commit-per-render": {
+        code: string;
+        en: string;
+        fix: string;
+    };
+    "no-commit-in-collection-item": {
         code: string;
         en: string;
         fix: string;

package/dist/lib/why.js

@@ -42,6 +42,26 @@ export const why = {
         en: "`<file>` draws a multi-pane frame by hand: a vertical Divider between columns of a flex row, or a flex row of columns inside a joined SurfaceCard.",
         fix: "Compose the columns as Panes of a PaneGrid (areas per breakpoint, collapse=\"drawer\" for a side pane), mounted as Page chrome=\"panes\" on a tabbed app page.",
     },
+    "no-fill-command-in-header": {
+        code: "FE_COMMAND_FILLS_HEADER",
+        en: "`<file>` stretches a command in a page or card header (`PageHeader actions`, `labelEnd`) with `width=\"fill\"`.",
+        fix: "A page or pane command hugs its label and sits at the end of its header row: drop `width`. `width=\"fill\"` is for a form submit, an auth panel and a phone action bar.",
+    },
+    "no-selectable-tag-group": {
+        code: "FE_TAG_GROUP_SELECTION",
+        en: "`<file>` gives a TagGroup a selection (`selectionMode`, `selectedIds`, `onSelectionChange`) to use it as a filter.",
+        fix: "A TagGroup holds values the user entered; peer values that filter a collection are a FilterButtonGroup (sm toggle buttons on one row, the rest behind a +n search list).",
+    },
+    "no-heading-above-card": {
+        code: "FE_HEADING_ABOVE_CARD",
+        en: "`<file>` wraps a single SurfaceCard in a Section, or gives the card an ariaLabel that repeats the Section's title.",
+        fix: "A card has a label by design: move the title to the card's label, the count to fact, the action to labelEnd and the note to footer.",
+    },
+    "no-table-in-card": {
+        code: "FE_TABLE_IN_CARD",
+        en: "`<file>` puts a DataTable inside a SurfaceCard (directly, or in a component of the file that a SurfaceCard encloses).",
+        fix: "Plain rows with a few facts are a SurfaceCard kind=\"list\" with the label outside and the note in its footer; a comparison table sits in its section with no card around it.",
+    },
     "button-intent-required": {
         code: "FE_BUTTON_INTENT_REQUIRED",
         en: "`<file>` renders a Button or IconButton without the command's intent.",
@@ -57,10 +77,30 @@ export const why = {
         en: "`<file>` re-exports a Grammar component under the app's own name.",
         fix: "Delete the shim and import the component from the Grammar where it is rendered; report the Grammar defect the shim worked around (the op files blocked) so the Grammar fixes it.",
     },
-    "button-no-variant": {
-        code: "FE_BUTTON_NO_VARIANT",
-        en: "`<file>` chooses a Button or IconButton variant directly.",
-        fix: "Replace variant with intent and let Grammar resolve placement and visual treatment.",
+    "no-swr-default-array": {
+        code: "FE_SWR_DEFAULT_ARRAY",
+        en: "`<file>` folds a read to an empty array and never returns whether that read is loading.",
+        fix: "Return the read's isLoading and error with the list, so the view draws a skeleton while loading and an error when it fails, never an empty state.",
+    },
+    "no-foreign-slot-status": {
+        code: "FE_FOREIGN_SLOT_STATUS",
+        en: "`<file>` builds a slot from another slot's loading or error.",
+        fix: "Build the slot from every read it draws with the one slotOfReads helper, so a key change reloads only the region keyed by it.",
+    },
+    "no-validating-as-loading": {
+        code: "FE_VALIDATING_AS_LOADING",
+        en: "`<file>` lets a background refresh (isValidating) drive a loading flag or a status.",
+        fix: "Drive the skeleton from isLoading alone; a refresh keeps the content on screen.",
+    },
+    "no-placeholder-object": {
+        code: "FE_PLACEHOLDER_OBJECT",
+        en: "`<file>` holds a placeholder object that is the ready data with its lists emptied.",
+        fix: "Delete the placeholder; pass a loading flag and let the Grammar component derive the skeleton from the structure it draws.",
+    },
+    "no-hand-skeleton": {
+        code: "FE_HAND_SKELETON",
+        en: "`<file>` draws a skeleton by hand.",
+        fix: "Pass isLoading to the Grammar component and let it draw its loading structure; the block hands it the same-shape placeholder (FE-ERROR-1).",
     },
     "destructive-confirm-in-dialog": {
         code: "FE_DESTRUCTIVE_CONFIRM_IN_DIALOG",
@@ -77,11 +117,6 @@ export const why = {
         en: "`<file>` repeats a commit inside a collection item render.",
         fix: "Use alternative for the item's next action and keep the enclosing view's commit unique.",
     },
-    "nested-control-variant": {
-        code: "FE_NESTED_VARIANT",
-        en: "`<file>` sets a static Grammar field variant, or forces primary Tabs inside a painted surface.",
-        fix: "Omit the field or nested Tabs variant so Grammar supplies the default from its surface context.",
-    },
     "no-app-surface-paint": {
         code: "FE_GRAMMAR_LAYOUT_ONLY",
         en: "`<file>` sets paint or typography in app CSS instead of composing Grammar's published components and props.",

package/dist/loading.js

@@ -91,7 +91,7 @@ export const noPlaceholderProp = defineRule({
                     return;
                 for (const specifier of node.specifiers || []) {
                     const local = specifier.local && specifier.local.name;
-                    // A bare `Skeleton` is the primitive a component rests WITH, not a twin of one.
+                    // A bare `Skeleton` is the leaf a component rests WITH, not a twin of one.
                     if (!local || local === "Skeleton" || !TWIN_NAME.test(local))
                         continue;
                     context.report({ node: specifier, messageId: "import", data: { name: local } });

package/dist/props-and-slots.d.ts

@@ -14,6 +14,12 @@ export declare const noPublicFrameCssProps: import("./lib/rule.js").Rule<"css",
 export declare const noCssDoorTypeLaundering: import("./lib/rule.js").Rule<"utility", []>;
 /** Props are readonly all the way down: every field, index signature, nested object and collection (FE-TYPING-2). */
 export declare const propsFieldsReadonly: import("./lib/rule.js").Rule<"index" | "field" | "collection", []>;
+/**
+ * Children belong to frames. A frame owns a region and draws what its caller places in it; a leaf's only child is its text label; a
+ * block, a composite and a branch draw a fixed anatomy from fields and named slots, so nested JSX under them is a type error for every
+ * caller (`children?: never`). The tier is the layer folder of the unit (FE-FUNCTION-2).
+ */
+export declare const tierChildren: import("./lib/rule.js").Rule<"leaf" | "none" | "withChildren", []>;
 export declare const rules: Rules;
 /** All rules in this law are mechanical errors once adopted. */
 export declare const recommended: Recommended;

package/dist/props-and-slots.js

@@ -307,6 +307,46 @@ export const propsFieldsReadonly = defineRule({
         };
     },
 });
+/**
+ * Children belong to frames. A frame owns a region and draws what its caller places in it; a leaf's only child is its text label; a
+ * block, a composite and a branch draw a fixed anatomy from fields and named slots, so nested JSX under them is a type error for every
+ * caller (`children?: never`). The tier is the layer folder of the unit (FE-FUNCTION-2).
+ */
+export const tierChildren = defineRule({
+    meta: {
+        type: "problem",
+        docs: { description: "Only a frame takes children; a leaf takes its text label; blocks, composites and branches take none." },
+        schema: [],
+        messages: {
+            none: "A {{layer}} unit takes no children: name the slot for its role, or move the unit to components/frames when its job is to host content.",
+            leaf: "A leaf takes its text label as children: string, never a node: name the slot for the node, or move the unit to components/frames.",
+            withChildren: "PropsWithChildren gives a {{layer}} unit nested JSX: declare children?: never, or children: string for a leaf.",
+        },
+    },
+    create(context) {
+        if (!isComponentFile(context))
+            return {};
+        const layer = kindOfFile(context);
+        if (layer === null || layer === "frames")
+            return {};
+        const text = layer === "leaves";
+        return {
+            TSPropertySignature(node) {
+                if (propertyName(node) !== "children")
+                    return;
+                const type = node.typeAnnotation?.typeAnnotation;
+                if (type?.type === "TSNeverKeyword" || (text && type?.type === "TSStringKeyword"))
+                    return;
+                context.report({ node, messageId: text ? "leaf" : "none", data: { layer: layer.replace(/s$/, "") } });
+            },
+            TSTypeReference(node) {
+                const name = node.typeName.type === "Identifier" ? node.typeName.name : node.typeName.type === "TSQualifiedName" ? node.typeName.right.name : null;
+                if (name === "PropsWithChildren")
+                    context.report({ node, messageId: "withChildren", data: { layer: layer.replace(/s$/, "") } });
+            },
+        };
+    },
+});
 export const rules = {
     "no-inline-parameter-type": noInlineParameterType,
     "props-fields-readonly": propsFieldsReadonly,
@@ -315,6 +355,7 @@ export const rules = {
     "no-public-classname-prop": noPublicClassNameProp,
     "no-public-frame-css-props": noPublicFrameCssProps,
     "no-css-door-type-laundering": noCssDoorTypeLaundering,
+    "tier-children": tierChildren,
 };
 /** All rules in this law are mechanical errors once adopted. */
 export const recommended = Object.fromEntries(Object.keys(rules).map((name) => [`starci-fe/${name}`, "error"]));

package/dist/shape-slot.js

@@ -146,19 +146,19 @@ export const exhaustiveShapeSwitch = defineRule({
     },
 });
 // -- SLOT-1 -----------------------------------------------------------------------------------------
-/** The data-status props only SlotView takes; a lower unit gets `isSkeleton` and nothing else. */
-const STATUS_PROPS = new Set(["isLoading", "isError", "isForbidden", "isFailed", "failure"]);
+/** The data-status props only SlotView takes; a lower unit gets `isLoading` (the one flag a leaf, branch or composite knows) and nothing else. */
+const STATUS_PROPS = new Set(["isError", "isForbidden", "isEmpty", "isValidating", "isFailed", "failure"]);
 /** The units that own the status recipe: the status view itself and a route's loading page. */
 const isStatusOwner = (name) => name === "SlotView" || /LoadingPage$/.test(name);
 /** A unit below the status view takes no data-status prop. */
 export const noDataStatusProp = defineRule({
     meta: {
         type: "problem",
-        docs: { description: "A unit other than SlotView (and a route LoadingPage) takes no `isLoading`, `isError`, `isForbidden`, `isFailed` or `failure` prop; a leaf takes only `isSkeleton`." },
+        docs: { description: "A unit other than SlotView (and a route LoadingPage) takes no `isError`, `isForbidden`, `isEmpty`, `isValidating`, `isFailed` or `failure` prop; a leaf, branch or composite takes only `isLoading`." },
         schema: [],
         messages: {
-            status: "`{{key}}` is a data status handed to `{{unit}}`. A read's status is a DataSlot rendered through SlotView in the region's place; the parts below it take `isSkeleton` and rest as themselves.",
-            leaf: "`{{key}}` is a data status handed to the leaf `{{unit}}`. A leaf takes only `isSkeleton`: SlotView passes it while the region waits.",
+            status: "`{{key}}` is a data status handed to `{{unit}}`. A read's status is a DataSlot rendered through SlotView in the region's place; the parts below it take `isLoading` and rest as themselves.",
+            leaf: "`{{key}}` is a data status handed to the leaf `{{unit}}`. A leaf takes only `isLoading`: SlotView passes it while the region waits.",
         },
     },
     create(context) {
@@ -180,7 +180,7 @@ export const noDataStatusProp = defineRule({
 /** A data hook of `hooks/swr`: `useQueryOrdersSwr`, `useGetHandoffSwr`. */
 const SWR_HOOK = /^use[A-Za-z0-9]*Swr$/;
 /** The builders that fold a read into a DataSlot (`hooks/slot/slot.shared.ts`). */
-const SLOT_BUILDER = /^(?:slotOfSwr|mapSlot|loadingSlot|toSlot)$/;
+const SLOT_BUILDER = /^(?:slotOfSwr|slotOfReads|useSlotOfReads|mapSlot|loadingSlot|toSlot)$/;
 /** A region that reads data hands its Base a DataSlot, and the Base renders it through SlotView. */
 export const regionReadsThroughSlot = defineRule({
     meta: {

package/dist/skeleton-states.d.ts

@@ -0,0 +1,16 @@
+import { type Recommended } from "./lib/rule.js";
+/** Published with the Grammar `isLoading` flag: the Grammar components draw their own loading structure. */
+export declare const noHandSkeleton: import("./lib/rule.js").Rule<"hand", []>;
+/** The rules this law contributes to the plugin. */
+export declare const rules: {
+    "no-swr-default-array": import("./lib/rule.js").Rule<"fold", []>;
+    "no-foreign-slot-status": import("./lib/rule.js").Rule<"foreign", []>;
+    "no-validating-as-loading": import("./lib/rule.js").Rule<"validating", []>;
+    "no-placeholder-object": import("./lib/rule.js").Rule<"placeholder", []>;
+    "no-hand-skeleton": import("./lib/rule.js").Rule<"hand", []>;
+};
+/**
+ * The level this law asks for: every rule at error. `no-hand-skeleton` joined when the Grammar took the loading shape (`isLoading` on
+ * Section, the cards, ListBox, Timeline, DataTable, MessageBubble and PaneSection, with the `error` slot).
+ */
+export declare const recommended: Recommended;