@starci/eslint-grammar-core 0.16.2 → 0.16.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.16.3 - 2026-10-31
+
+- Changed: the peer moves to eslint-canon-fe 9.6.3; the bundled canon pins name the 0.16.3 cohort (@starci/grammar, eslint-grammar-core and eslint-grammar-offset-pop 0.16.3, eslint-canon-fe 9.6.3, eslint-canon-be 3.9.3, stylelint-canon 2.3.0, jest-preset 2.6.0, hfs 4.13.0); ChatWorkspace and PaneLayout are removed with no alias; PaneGrid and Pane are the one generic pane grid: grammar names are generic. The core playbook names PaneGrid in its layout-frame and container lists.
+- Added: starci-grammar/freestyle-has-reason (R341, FE_FREESTYLE_REASON_MISSING): a `<Freestyle>` region names a non-empty string-literal `reason`. no-raw-structural-element, no-fractional-step, generated-art-in-mascot-or-media-frame and no-inline-svg-outside-brand-mark-leaf do not report the raw elements inside a Freestyle subtree (owner ruling grammar-freestyle-region). Specs: src/freestyle.spec.ts.
+- Added: `crossFileInputs` for the lint result cache of `starci app check` (ruling app-check-cache): the files each grammar rule reads beyond the linted file.
+
 ## 0.16.2 - 2026-10-31
 
 - Changed: the peer moves to eslint-canon-fe 9.6.2; the bundled canon pins name @starci/grammar 0.16.2 (the horizontal Stepper connector line; SurfaceListCard takes its depth from the surface context).

package/README.md

@@ -19,7 +19,7 @@ Family helpers and the generated runtime closure belong to this package.
 
 The rule IDs remain stable when their namespace moves. Laws cover the fixed app shell and navbar,
 Grammar-owned structural elements, glyphs and icon sizes, destructive menu entries, status inks,
-chip labels that start uppercase, generated art rendered through `Mascot` or `MediaFrame` with every `Mascot` naming its asset slot, the page head composed by `PageHeader`, the route page as one `Page` with its tabs in the header, heading and token scales, vendor ownership and slot-status composition, and a surface nested in another surface left subordinate (no forced `depth="top"`). Each rule's metadata cites
+chip labels that start uppercase, generated art rendered through `Mascot` or `MediaFrame` with every `Mascot` naming its asset slot, the page head composed by `PageHeader`, the route page as one `Page` with its tabs in the header, heading and token scales, vendor ownership and slot-status composition, and a surface nested in another surface left subordinate (no forced `depth="top"`), and a Freestyle region that names its reason (its raw elements are exempt from the paint and raw-element laws). Each rule's metadata cites
 its behavioral knowledge source and the governing ownership test. The R318 surface composition
 rules (nested control variants, panel-list alignment, layout-only CSS) stay in the universal canon.
 

package/dist/freestyle.d.ts

@@ -0,0 +1,7 @@
+import type { Rule } from "eslint";
+/** A Freestyle region always says why no Grammar component fits. */
+export declare const freestyleHasReason: Rule.RuleModule;
+/** The rules this law contributes to the plugin. */
+export declare const rules: Record<string, Rule.RuleModule>;
+/** Every rule of this law is an error. */
+export declare const recommended: Record<string, "error">;

package/dist/freestyle.js

@@ -0,0 +1,70 @@
+import { isProductSource } from "@starci/eslint-canon-fe/lib/scope.mjs";
+import { defineFamilyRules, defineRule } from "./lib/rule-contract.js";
+/**
+ * The Freestyle law (HFS R341 `FE_FREESTYLE_REASON_MISSING`; owner ruling `grammar-freestyle-region`): Freestyle is the one
+ * sanctioned escape hatch of the Grammar, a region where the app writes its own plain elements and app CSS because no
+ * Grammar component fits. It is a last resort, so it always says why: `reason` is a non-empty string literal such as
+ * `"sign-in brand art"`, and the Grammar stamps it on the DOM (`data-grammar-freestyle-reason`).
+ *
+ * WHAT IT READS. A `Freestyle` element (or `<ns>.Freestyle`) whose `reason` attribute is missing, is not a string literal
+ * (a literal, or an expression container holding a string literal or a template without substitutions), or is blank. An
+ * element with a spread attribute is not judged (the spread may carry the reason).
+ *
+ * THE OTHER HALF. The rules that judge hand-written elements, classes, styles and generated art leave the raw elements of a
+ * Freestyle subtree alone (`exemptFreestyle`); a Grammar component inside it is judged as before.
+ *
+ * WHERE IT APPLIES. Product source (`isProductSource`).
+ */
+/** The element name of a JSX name: `Freestyle`, or `G.Freestyle` as `Freestyle`. */
+const nameOf = (name) => {
+    if (name.type === "JSXIdentifier")
+        return name.name;
+    if (name.type === "JSXMemberExpression")
+        return name.property.name;
+    return null;
+};
+/** The statically known text of an attribute value; null when it is computed. */
+const literalText = (value) => {
+    if (value === null)
+        return null;
+    const node = value.type === "JSXExpressionContainer" ? value.expression : value;
+    if (node.type === "Literal")
+        return typeof node.value === "string" ? node.value : null;
+    if (node.type === "TemplateLiteral" && node.expressions.length === 0)
+        return node.quasis[0]?.value.cooked ?? "";
+    return null;
+};
+/** A Freestyle region always says why no Grammar component fits. */
+export const freestyleHasReason = defineRule({
+    meta: {
+        type: "problem",
+        docs: { description: "R341: a Freestyle region names its reason, a non-empty string literal saying why no Grammar component fits." },
+        schema: [],
+        messages: {
+            reason: "`<Freestyle>` needs `reason=\"...\"`, a non-empty string saying why no Grammar component fits (for example \"sign-in brand art\"). Freestyle is a last resort: name the reason, or compose a Grammar component instead.",
+        },
+    },
+    create(context) {
+        if (!isProductSource(context))
+            return {};
+        return {
+            JSXOpeningElement(node) {
+                if (nameOf(node.name) !== "Freestyle")
+                    return;
+                if (node.attributes.some((entry) => entry.type === "JSXSpreadAttribute"))
+                    return;
+                const reason = node.attributes.find((entry) => entry.type === "JSXAttribute" && entry.name.type === "JSXIdentifier" && entry.name.name === "reason");
+                const text = reason === undefined ? null : literalText(reason.value);
+                if (text === null || text.trim() === "")
+                    context.report({ node, messageId: "reason" });
+            },
+        };
+    },
+});
+/** The rules this law contributes to the plugin. */
+export const rules = {
+    "freestyle-has-reason": freestyleHasReason,
+};
+defineFamilyRules(rules, "knowledge/hfs/rules.yaml#R341");
+/** Every rule of this law is an error. */
+export const recommended = Object.fromEntries(Object.keys(rules).map((name) => [`starci-grammar/${name}`, "error"]));

package/dist/grammar-boundary.js

@@ -1,4 +1,4 @@
-import { defineFamilyRules, defineRule } from "./lib/rule-contract.js";
+import { defineFamilyRules, defineRule, exemptFreestyle } from "./lib/rule-contract.js";
 /**
  * The boundary between product code and `@starci/grammar`.
  *
@@ -55,7 +55,7 @@ const composesGrammar = (context, file) => {
     return APP_SLOTS.has(slot) || hfs.tierOf(file) === "package";
 };
 /** No raw structural or text element in app source or in a package that composes the grammar. */
-export const noRawStructuralElement = defineRule({
+export const noRawStructuralElement = exemptFreestyle(defineRule({
     meta: {
         type: "problem",
         docs: { description: "Page structure and text are grammar components, not raw `div`-family HTML; only `fe.package.ui` renderers draw raw tags." },
@@ -78,7 +78,7 @@ export const noRawStructuralElement = defineRule({
             },
         };
     },
-});
+}));
 /** The rules this law contributes to the plugin. */
 export const rules = {
     "no-raw-structural-element": noRawStructuralElement,

package/dist/icon.js

@@ -1,4 +1,4 @@
-import { defineFamilyRules, defineRule } from "./lib/rule-contract.js";
+import { defineFamilyRules, defineRule, exemptFreestyle } from "./lib/rule-contract.js";
 /**
  * The rules that hold `icon.md`.
  *
@@ -240,7 +240,7 @@ const inDeclaredBrandMark = (sourceCode, node) => {
     return false;
 };
 /** Inline SVG belongs only to an explicitly declared brand mark in a leaf entry. */
-export const noInlineSvgOutsideBrandMarkLeaf = defineRule({
+export const noInlineSvgOutsideBrandMarkLeaf = exemptFreestyle(defineRule({
     meta: {
         type: "problem",
         docs: { description: "FE_ICON_INLINE_SVG: inline SVG is drawn only by an exported leaf entry component with a @brand-mark JSDoc declaration.", url: "knowledge/hfs/rules.yaml#R286" },
@@ -264,7 +264,7 @@ export const noInlineSvgOutsideBrandMarkLeaf = defineRule({
             },
         };
     },
-});
+}));
 /** The finding code for the copy-and-glyph law's inline SVG enforcer. */
 Object.assign(why, {
     "no-inline-svg-outside-brand-mark-leaf": {

package/dist/index.d.ts

@@ -43,3 +43,5 @@ export declare const coreGrammarConfig: (input: {
     readonly hfs: GrammarHfsView;
     readonly family?: GrammarFamilyId;
 }) => Linter.Config[];
+export { crossFileInputs } from "./lib/cross-file-inputs.js";
+export type { CrossFileInput } from "./lib/cross-file-inputs.js";

package/dist/index.js

@@ -3,6 +3,7 @@ import { SOURCE_FILES, linterOptions as canonLinterOptions } from "@starci/eslin
 import { rules as appShellRules } from "./app-shell.js";
 import { rules as chipLabelRules } from "./chip-label.js";
 import { rules as drawingRules } from "./drawing.js";
+import { rules as freestyleRules } from "./freestyle.js";
 import { rules as grammarBoundaryRules } from "./grammar-boundary.js";
 import { rules as iconRules } from "./icon.js";
 import { rules as mascotRules } from "./mascot.js";
@@ -19,6 +20,7 @@ const CONTRIBUTIONS = [
     { law: "app-shell", rules: appShellRules },
     { law: "chip-label", rules: chipLabelRules },
     { law: "drawing", rules: drawingRules },
+    { law: "freestyle", rules: freestyleRules },
     { law: "grammar-boundary", rules: grammarBoundaryRules },
     { law: "icon", rules: iconRules },
     { law: "mascot", rules: mascotRules },
@@ -79,3 +81,5 @@ export const coreGrammarConfig = ({ hfs, family = "core" } = {}) => {
             rules: { ...recommended },
         }];
 };
+// The result cache of `starci app lint` (contexts/project/check-cache.md) reads the disk inputs the family rules declare.
+export { crossFileInputs } from "./lib/cross-file-inputs.js";

package/dist/lib/cross-file-inputs.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The files a rule of this canon reads that ESLint's own import graph does not carry.
+ *
+ * The result cache of `starci app lint` (contexts/project/check-cache.md, ESLint) re-lints a file when it or a file it reaches through imports
+ * changed. A rule that reads another file by path, with `fs` (a sibling, a directory listing, a manifest, a module file it follows by hand),
+ * has an input the import graph cannot see, so the rule declares it here and the cache dirties the files that depend on it:
+ *
+ * - `content`: the rule reads the bytes of the files the globs match; a changed, added or removed match dirties the dependants.
+ * - `exists`: the rule only asks whether a file is there or lists a folder; an added or removed match dirties the dependants.
+ * - `git`: the rule compares the file with git history (the merge-base with the base branch), which no file holds; a change of the merge-base
+ *   dirties every dependant of more than `minLines` lines (the rule reads history only for a file over its size budget). `globs` is empty.
+ *
+ * `globs` are relative to the linted file's folder (`relativeTo: "file"`) or to the side root, the folder of the side's `eslint.config.mjs`
+ * (`relativeTo: "side"`); they use `*`, `**`, `?` and `{a,b}`, posix separators. `appliesTo` are side-root globs of the linted files that
+ * depend on the input. A declaration may be wider than the read, never narrower: a too wide one costs a lint, a too narrow one a wrong answer.
+ * `cross-file-inputs.spec.ts` proves the list complete: every source file that reads the disk is named here or accounted for, and a recorder of
+ * file reads checks each rule's real reads against these declarations and the import graph.
+ */
+/** One input of a rule that the import graph does not carry. */
+export interface CrossFileInput {
+    /** The published rule name (without the plugin prefix). */
+    readonly rule: string;
+    readonly kind: "content" | "exists" | "git";
+    readonly relativeTo: "file" | "side";
+    readonly globs: readonly string[];
+    /** For `git`: the line count above which the rule reads history; a file of fewer lines does not depend on it. */
+    readonly minLines?: number;
+    /** The linted files (side-root globs) whose result depends on the input. */
+    readonly appliesTo: readonly string[];
+    /** The source file of this package (relative to `src/`) that performs the read; the audit checks it exists and that no reader is missing. */
+    readonly reader: string;
+}
+/** Every disk read of this canon's rules beyond the import graph. */
+export declare const crossFileInputs: readonly CrossFileInput[];

package/dist/lib/cross-file-inputs.js

@@ -0,0 +1,31 @@
+/**
+ * The files a rule of this canon reads that ESLint's own import graph does not carry.
+ *
+ * The result cache of `starci app lint` (contexts/project/check-cache.md, ESLint) re-lints a file when it or a file it reaches through imports
+ * changed. A rule that reads another file by path, with `fs` (a sibling, a directory listing, a manifest, a module file it follows by hand),
+ * has an input the import graph cannot see, so the rule declares it here and the cache dirties the files that depend on it:
+ *
+ * - `content`: the rule reads the bytes of the files the globs match; a changed, added or removed match dirties the dependants.
+ * - `exists`: the rule only asks whether a file is there or lists a folder; an added or removed match dirties the dependants.
+ * - `git`: the rule compares the file with git history (the merge-base with the base branch), which no file holds; a change of the merge-base
+ *   dirties every dependant of more than `minLines` lines (the rule reads history only for a file over its size budget). `globs` is empty.
+ *
+ * `globs` are relative to the linted file's folder (`relativeTo: "file"`) or to the side root, the folder of the side's `eslint.config.mjs`
+ * (`relativeTo: "side"`); they use `*`, `**`, `?` and `{a,b}`, posix separators. `appliesTo` are side-root globs of the linted files that
+ * depend on the input. A declaration may be wider than the read, never narrower: a too wide one costs a lint, a too narrow one a wrong answer.
+ * `cross-file-inputs.spec.ts` proves the list complete: every source file that reads the disk is named here or accounted for, and a recorder of
+ * file reads checks each rule's real reads against these declarations and the import graph.
+ */
+/** Every disk read of this canon's rules beyond the import graph. */
+export const crossFileInputs = [
+    // the header an app shell imports is followed into the workspace packages by their manifests and entries
+    { rule: "app-shell-frame", kind: "content", relativeTo: "side", globs: ["packages/*/package.json", "packages/*/src/**/*.{ts,tsx}"], appliesTo: ["**/*.{ts,tsx}"], reader: "lib/app-shell-owner-source.ts" },
+    { rule: "navbar-cluster", kind: "content", relativeTo: "side", globs: ["packages/*/package.json", "packages/*/src/**/*.{ts,tsx}"], appliesTo: ["**/*.{ts,tsx}"], reader: "lib/app-shell-owner-source.ts" },
+    // a page owner is judged by the route files of its app that mount it and the layouts above them
+    { rule: "page-tabs-in-header", kind: "content", relativeTo: "side", globs: ["**/src/app/**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts}"], appliesTo: ["**/src/features/pages/**/*.{ts,tsx}"], reader: "lib/page-frame.ts" },
+    { rule: "page-tabs-in-header", kind: "exists", relativeTo: "side", globs: ["**/src/app", "**/src/app/**"], appliesTo: ["**/src/features/pages/**/*.{ts,tsx}"], reader: "lib/page-frame.ts" },
+    { rule: "route-page-is-one-page", kind: "exists", relativeTo: "side", globs: ["**/src/app", "**/src/app/**"], appliesTo: ["**/src/features/pages/**/*.{ts,tsx}"], reader: "lib/page-frame.ts" },
+    { rule: "route-page-is-one-page", kind: "content", relativeTo: "side", globs: ["**/src/app/**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts}"], appliesTo: ["**/src/features/pages/**/*.{ts,tsx}"], reader: "lib/page-frame.ts" },
+    // the theme an app defines its tokens in: the route slot's globals.css and the brand slot's brand.css
+    { rule: "no-unresolved-token-class", kind: "content", relativeTo: "side", globs: ["**/globals.css", "**/brand.css"], appliesTo: ["**/*.{ts,tsx}"], reader: "tokens.ts" },
+];

package/dist/lib/rule-contract.d.ts

@@ -8,5 +8,10 @@ export declare const RULE_OWNERSHIP = "knowledge/patterns/fe/index.yaml#FE-RULE-
  * visitor it returns carry that parser's node types; this is the one place that states so to ESLint's declarations.
  */
 export declare const defineRule: (definition: RuleDefinition) => Rule.RuleModule;
+/**
+ * A rule that leaves the raw elements of a Freestyle subtree alone (owner ruling grammar-freestyle-region): a finding about a
+ * plain element, or its class or style, inside `<Freestyle>` is dropped; a Grammar component inside it is judged as before.
+ */
+export declare const exemptFreestyle: (rule: Rule.RuleModule) => Rule.RuleModule;
 /** Attach the governing ownership rule and the rule's behavioral source without changing enforcement. */
 export declare const defineFamilyRules: (rules: Readonly<Record<string, Rule.RuleModule>>, knowledge: string) => Readonly<Record<string, Rule.RuleModule>>;

package/dist/lib/rule-contract.js

@@ -1,3 +1,4 @@
+import { freestyleContext } from "@starci/eslint-canon-fe/lib/freestyle.mjs";
 /** The ordered ownership test that governs every Grammar-specific lint rule. */
 export const RULE_OWNERSHIP = "knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP";
 /**
@@ -9,6 +10,14 @@ export const defineRule = (definition) => ({
     meta: definition.meta,
     create: (context) => definition.create(context),
 });
+/**
+ * A rule that leaves the raw elements of a Freestyle subtree alone (owner ruling grammar-freestyle-region): a finding about a
+ * plain element, or its class or style, inside `<Freestyle>` is dropped; a Grammar component inside it is judged as before.
+ */
+export const exemptFreestyle = (rule) => ({
+    ...rule,
+    create: (context) => rule.create(freestyleContext(context)),
+});
 /** Attach the governing ownership rule and the rule's behavioral source without changing enforcement. */
 export const defineFamilyRules = (rules, knowledge) => {
     for (const rule of Object.values(rules)) {

package/dist/lib/why.js

@@ -54,6 +54,11 @@ export const why = {
         en: "The page or layout owner `<file>` draws something beside its Page, a Page inside another (or inside the Page its tabbed segment's layout draws), a bare PageHeader or PageContainer, or no Page at all (itself, through its pure half, or through the one connected block it renders as its root).",
         fix: "Draw one Page: the band as its header, everything else in its body, the measure as its measure. When client data builds the header, render as the root the one connected block that draws the Page and pass the body as its children. Under a segment layout whose Page carries header.tabs, a page draws its body only; that layout's Page has nothing beside it, its head in its header. A page mounted only under the (auth) route group is framed by that group's layout.",
     },
+    "freestyle-has-reason": {
+        code: "FE_FREESTYLE_REASON_MISSING",
+        en: "A `<Freestyle>` region in `<file>` has no non-empty string `reason`.",
+        fix: "Say why no Grammar component fits: `<Freestyle reason=\"sign-in brand art\">`. If a Grammar component fits, compose it instead.",
+    },
     "no-raised-surface-in-surface": {
         code: "FE_RAISED_SURFACE_IN_SURFACE",
         en: "A Grammar surface in `<file>` forces `depth=\"top\"` inside another surface, raising a surface inside a surface (BOUNDARY-6).",

package/dist/mascot.js

@@ -1,5 +1,5 @@
 import { isProductSource } from "@starci/eslint-canon-fe/lib/scope.mjs";
-import { defineFamilyRules, defineRule } from "./lib/rule-contract.js";
+import { defineFamilyRules, defineRule, exemptFreestyle } from "./lib/rule-contract.js";
 /**
  * The mascot law (HFS R338 `FE_GENERATED_ART_OUTSIDE_FRAME`, R339 `FE_MASCOT_ASSET_SLOT_MISSING`): generated art renders
  * at the Grammar's size scale and stays tied to the asset workflow's request.
@@ -78,7 +78,7 @@ const insideFrame = (node) => {
     return false;
 };
 /** Generated art under `/images/` renders only through `Mascot` or inside a `MediaFrame`. */
-export const generatedArtInMascotOrMediaFrame = defineRule({
+export const generatedArtInMascotOrMediaFrame = exemptFreestyle(defineRule({
     meta: {
         type: "problem",
         docs: { description: "R338: generated art (a .webp or .png under /images/) renders only through Grammar's Mascot or inside a MediaFrame." },
@@ -108,7 +108,7 @@ export const generatedArtInMascotOrMediaFrame = defineRule({
             },
         };
     },
-});
+}));
 /** True when an attribute names nothing: no value, an empty string, or `undefined`. */
 const namesNothing = (attribute) => {
     const value = attribute.value;

package/dist/tokens.js

@@ -4,7 +4,7 @@ import { join } from "node:path";
 import { classTextVisitors } from "@starci/eslint-canon-fe/lib/class-text.mjs";
 import { hfsOf } from "@starci/eslint-canon-fe/lib/hfs.mjs";
 import { classOf, isProductSource } from "@starci/eslint-canon-fe/lib/scope.mjs";
-import { defineFamilyRules, defineRule } from "./lib/rule-contract.js";
+import { defineFamilyRules, defineRule, exemptFreestyle } from "./lib/rule-contract.js";
 /**
  * A fractional step, in any family that measures.
  *
@@ -17,7 +17,7 @@ const LARGE_TEXT = /\btext-(?:xl|2xl|3xl|4xl|5xl)\b/;
 /** A heavy weight. */
 const HEAVY_WEIGHT = /\bfont-(?:bold|extrabold|black)\b/;
 /** A fractional step is off the ladder, not between two rungs. */
-export const noFractionalStep = defineRule({
+export const noFractionalStep = exemptFreestyle(defineRule({
     meta: {
         type: "problem",
         docs: { description: "A measurement takes a whole rung; a fractional step is off the scale." },
@@ -35,7 +35,7 @@ export const noFractionalStep = defineRule({
                 context.report({ node, messageId: "fractional", data: { cls: hit[0] } });
         });
     },
-});
+}));
 /** Large text plus a heavy weight is a heading, and headings come from the component that owns both. */
 export const noHandRolledHeading = defineRule({
     meta: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/eslint-grammar-core",
-  "version": "0.16.2",
+  "version": "0.16.3",
   "description": "ESLint rules for the core Grammar's component, token and composition contracts.",
   "keywords": [
     "eslint",
@@ -41,7 +41,7 @@
     "node": ">=22"
   },
   "peerDependencies": {
-    "@starci/eslint-canon-fe": "9.6.2",
+    "@starci/eslint-canon-fe": "9.6.3",
     "eslint": ">=9",
     "typescript": ">=5.9"
   },
@@ -55,7 +55,7 @@
     "build": "node -e \"require('node:fs').rmSync('dist', {recursive: true, force: true})\" && tsc -p tsconfig.build.json && node -e \"const fs = require('node:fs'); for (const f of fs.readdirSync('dist', {recursive: true}).filter((n) => n.endsWith('.d.ts'))) fs.writeFileSync('dist/' + f, fs.readFileSync('dist/' + f, 'utf8').replace(/((?:from |import\\()['\\x22]\\.\\.?\\/[^'\\x22]+)\\.ts(['\\x22])/g, (all, head, quote) => head + '.js' + quote))\"",
     "typecheck": "tsc -p tsconfig.json",
     "prepack": "npm run build",
-    "test": "npm run typecheck && node --test \"src/**/*.spec.ts\""
+    "test": "npm run typecheck && node --import ./fixtures/fs-audit-preload.ts --test \"src/**/*.spec.ts\""
   },
   "devDependencies": {
     "@starci/eslint-canon-fe": "file:../eslint-canon-fe",

package/runtime/knowledge/grammars/core/playbook.yaml

@@ -357,8 +357,8 @@ guidance:
       NumberField, DateField, TimeField, Select, ComboBox, DatePicker, DateRangePicker, Checkbox,
       CheckboxGroup, RadioGroup, OtpInput and PressableField resolve variant="secondary" inside it and
       variant="primary" outside. Compose the surface and omit the field variant.
-      Switch and Slider have no layer variant; a Radio follows its RadioGroup. ChatWorkspace's
-      compact drawer also establishes the context. SurfaceCard and bounded SurfaceAccordionCard derive
+      Switch and Slider have no layer variant; a Radio follows its RadioGroup. PaneGrid's
+      collapsed-pane drawer also establishes the context. SurfaceCard and bounded SurfaceAccordionCard derive
       data-grammar-surface-depth from the parent context. The top layer is raised and a nested layer is
       subordinate; never raise both. The family DNA owns their surface paint.
       FE_NESTED_VARIANT rejects a static field variant
@@ -597,23 +597,17 @@ presentation:
         Retained ownership reference, not proof of the current package/API. Verify actual installed source/props/tokens before use; correct outdated rows within selected maintenance scope using [source and maintenance](index.yaml#source-and-maintenance).
         A part that carries one rule per side or per property names that CSS property after the part (`item padding-inline`); one part and property has one rule.
       rows:
-        - component: ChatWorkspace
-          element: drawer body, hasRail, isCompactRail
+        - component: PaneGrid
+          element: drawer body, collapsing pane
           rule: PADDING-0
-        - component: ChatWorkspace
-          element: overlay rail, hasRail, isCompactRail
-          rule: PADDING-4
-        - component: ChatWorkspace
-          element: overlay rail, hasRail, not isCompactRail
-          rule: PADDING-4
-        - component: ChatWorkspace
-          element: rail trigger boundary padding-block, hasRail, isCompactRail
+        - component: PaneGrid
+          element: trigger bar padding-block, collapsing pane
           rule: PADDING-2
-        - component: ChatWorkspace
-          element: rail trigger boundary padding-inline, hasRail, isCompactRail
+        - component: PaneGrid
+          element: trigger bar padding-inline, collapsing pane
           rule: PADDING-4
-        - component: ChatWorkspace
-          element: rail trigger, hasRail, isCompactRail
+        - component: PaneGrid
+          element: drawer trigger, collapsing pane
           rule: PADDING-3
         - component: EmptyNotice
           element: root
@@ -959,8 +953,8 @@ presentation:
         source/props/tokens before use; correct outdated rows within selected maintenance scope using [source
         and maintenance](index.yaml#source-and-maintenance).
       rows:
-        - component: ChatWorkspace
-          element: rail trigger, hasRail, isCompactRail
+        - component: PaneGrid
+          element: drawer trigger, collapsing pane
           rule: FONT-2
         - component: Heading
           element: root, scale!="display", level=1

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -31,42 +31,42 @@ pins:
     source: packages/event-stream/package.json
     why: 'the one server-sent-events client of every front end (fe-stack event-stream, owner:event-stream-package): the transport client layer (modules/api/sse/clients) creates one instance for the app with the bearer token source and the stream operations follow on it; it carries Last-Event-ID resume, the capped doubling backoff, the heartbeat timeout, the single 401 renewal and the useSWRSubscription adapter, so no app keeps a hand-written reader.'
   '@starci/grammar':
-    version: 0.16.2
+    version: 0.16.3
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.9.2
+    version: 3.9.3
     group: starci
     install: registry
     side: be
     source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.6.2
+    version: 9.6.3
     group: starci
     install: registry
     side: fe
     source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-core':
-    version: 0.16.2
+    version: 0.16.3
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.16.2
+    version: 0.16.3
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-offset-pop/package.json
     why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.2.1
+    version: 2.3.0
     group: starci
     install: registry
     side: fe
@@ -85,7 +85,7 @@ pins:
     side: both
     source: packages/prettier-config/package.json
   '@starci/jest-preset':
-    version: 2.5.3
+    version: 2.6.0
     group: starci
     install: registry
     side: be
@@ -106,7 +106,7 @@ pins:
     source: packages/ai-router/package.json
     why: 'the AI pool router of a back end: a NestJS module that routes OpenAI-compatible chat, stream and embeddings calls across keys, models and providers, with @starci/ai-router/testing for its specs; @starci/jest-preset compiles it as an ESM-only dependency.'
   '@starci/hfs':
-    version: 4.12.2
+    version: 4.13.0
     group: starci
     install: registry
     side: both

package/runtime/knowledge/hfs/rules.yaml

@@ -5979,3 +5979,49 @@ rules:
         source: owner
         quote: "A list inside another surface is outlined (BOUNDARY-5, DNA-COMMON-NO-RAISED-SURFACE-IN-SURFACE); SurfaceListCard takes its depth from the surface context (grammar 0.16.2)."
         ruling: "SurfaceListCard resolves its depth from the surface context like SurfaceCard and SurfaceAccordionCard; an app that forces depth=\"top\" on a surface nested in another surface raises a surface inside a surface, so the lint refuses it."
+  - id: R341
+    code: "FE_FREESTYLE_REASON_MISSING"
+    law: "A Grammar Freestyle region, the one sanctioned place where an app writes its own plain elements and CSS because no Grammar component fits, names its reason: a non-empty string literal saying why. The rules that judge hand-written elements, classes, styles and generated art leave the raw elements of a Freestyle subtree alone; a Grammar component inside it is judged as before. An element with a spread attribute is not judged."
+    kinds: [lint]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["FE_FREESTYLE_REASON_MISSING"]
+    enforcers:
+      - {kind: eslint-grammar-core, id: freestyle-has-reason}
+    editions: [lite, full]
+    docs: [knowledge/patterns/fe/ui.yaml#FE-UI]
+    templateNa: "A template writes no Freestyle region; the app adds one only when no Grammar component fits."
+    proves:
+      - packages/eslint-grammar-core/src/freestyle.spec.ts
+    exemplifiedBy:
+      - {path: packages/eslint-grammar-core/src/freestyle.spec.ts, editions: [lite, full], codes: [FE_FREESTYLE_REASON_MISSING]}
+    witness:
+      - {path: packages/eslint-grammar-core/src/freestyle.spec.ts, editions: [lite, full], codes: [FE_FREESTYLE_REASON_MISSING]}
+    cases:
+      - id: case-1
+        date: "2026-10-31"
+        source: owner
+        quote: "cái trang này free style đi trò div và làm bth thôi, thêm 1 component Freestyle hoặc tên gì đó tương đương đi trò, ý là cho custom nhưng vẫm bám grammar trừ bất đắc dĩ ntn"
+        ruling: "The Grammar has one sanctioned escape hatch, Freestyle: a region where the app writes its own plain divs and CSS because no Grammar component fits; it names its reason (the lint requires it), and the rest of the page still follows the Grammar."
+  - id: R342
+    code: "BE_ENTITY_EXTENDS_BASE"
+    law: "An @Entity class does not repeat the columns every table shares: a database-set created_at or updated_at (CreateDateColumn, UpdateDateColumn, or a Column on those names, or on createdAt / updatedAt, with insert false, update false or a default) and, beside both, the generated uuid id are inherited from AbstractEntity or UuidAbstractEntity of @modules/platform/database (BE-PERSISTENCE-3, ruling entity-base). The finding names the base to extend: UuidAbstractEntity with the uuid key, AbstractEntity without it. A table whose timestamps the application sets (a plain Column), or that lacks one of them, extends nothing and maps its own; the base file platform/database/abstract.entity.ts is exempt."
+    kinds: [lint]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["BE_ENTITY_EXTENDS_BASE"]
+    enforcers:
+      - {kind: eslint-be, id: entity-extends-base}
+    editions: [lite, full]
+    docs: [contexts/code/be/persistence.md]
+    proves:
+      - packages/eslint-canon-be/src/entity-base.spec.ts
+    exemplifiedBy:
+      - {path: packages/hfs/templates/be/table/entity.ts.tpl, editions: [lite, full]}
+      - {path: packages/eslint-canon-be/src/entity-base.spec.ts, editions: [lite, full], codes: [BE_ENTITY_EXTENDS_BASE]}
+    witness:
+      - {path: packages/eslint-canon-be/src/entity-base.spec.ts, editions: [lite, full], codes: [BE_ENTITY_EXTENDS_BASE]}
+    cases:
+      - id: case-1
+        date: "2026-10-31"
+        source: owner
+        quote: "Entities do not repeat the columns every table shares; the owner approved a lint so they never repeat them again (ruling entity-base, 2026-10-31)."
+        ruling: "A table whose migration has created_at, updated_at (set by the database) and the generated uuid id maps them by extending AbstractEntity or UuidAbstractEntity from @modules/platform/database; an entity that declares them itself is a finding. A table without them extends nothing."

package/runtime/knowledge/patterns/fe/ui.yaml

@@ -24,7 +24,7 @@ rules:
   - id: FE-UI
     title: Compose the selected Grammar
     kind: mandatory
-    hfsRules: [R93, R244, R313, R314, R315, R316, R317, R318, R319, R320, R338, R339, R340]
+    hfsRules: [R93, R244, R313, R314, R315, R316, R317, R318, R319, R320, R338, R339, R340, R341]
     requirement: |-
       Components compose the selected Grammar through its published entry and props; application CSS carries
       layout only (css.yaml). A missing visual capability is added to that Grammar before the app consumes it.
@@ -93,5 +93,6 @@ rules:
         - FE_GENERATED_ART_OUTSIDE_FRAME
         - FE_MASCOT_ASSET_SLOT_MISSING
         - FE_RAISED_SURFACE_IN_SURFACE
+        - FE_FREESTYLE_REASON_MISSING
       manual: []
     relatedExamples: [full-app-shell, lite-app-shell]