@starci/hfs 4.7.34 → 4.7.36

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -21,30 +21,44 @@ pins:
     install: registry
     side: fe
     source: packages/heroicons/package.json
-    why: 'StarCi custom Heroicons-compatible cuts; eslint-canon-fe (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
+    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/grammar':
-    version: 0.12.1
+    version: 0.12.4
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.43
+    version: 3.4.45
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 8.4.42
+    version: 9.1.0
     group: starci
     install: registry
     side: fe
     source: packages/eslint/fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
+  '@starci/eslint-grammar-starci':
+    version: 0.12.4
+    group: starci
+    install: registry
+    side: fe
+    source: packages/eslint/grammar-starci/package.json
+    why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
+  '@starci/eslint-grammar-offset-pop':
+    version: 0.12.4
+    group: starci
+    install: registry
+    side: fe
+    source: packages/eslint/grammar-offset-pop/package.json
+    why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.0.11
+    version: 2.0.12
     group: starci
     install: registry
     side: fe
@@ -77,14 +91,14 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.34
+    version: 1.7.36
     group: starci
     install: registry
     side: both
     source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.34
+    version: 4.7.36
     group: starci
     install: registry
     side: both
@@ -380,7 +394,7 @@ pins:
     version: 2.2.0
     group: ui
     side: fe
-    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-canon-fe (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
+    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-starci (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
   '@dicebear/core':
     version: 10.4.0
     group: ui

package/runtime/knowledge/hfs/fe-stack.yaml

@@ -121,10 +121,11 @@ concerns:
     pattern: FE-UI
     forbids: ['@dicebear/*', boring-avatars, 'react-nice-avatar', multiavatar]
     why: >-
-      Grammar owns circle avatars: pass the uploaded avatar as src, otherwise pass the user or identity id as seed on
-      Avatar, AvatarButton or AvatarGroup members. Grammar renders deterministic DiceBear images with its fixed DNA style;
-      @dicebear/core and @dicebear/styles are Grammar runtime dependencies pinned in canon-pins.yaml. Apps declare and
-      import @starci/grammar, never @dicebear/*, and draw no avatar visuals. With neither src nor seed, initials remain.
+      Grammar owns avatars: pass the uploaded avatar as src and the user or identity id as seed on Avatar, AvatarButton
+      or AvatarGroup members. Without src, Grammar renders bundled DiceBear initials using the first and last words of
+      name, with colour seeded by seed when present and by name otherwise. kind="agent" adds the Grammar-owned bot badge
+      without changing the name rule. @dicebear/core and @dicebear/styles are Grammar runtime dependencies pinned in
+      canon-pins.yaml. Apps declare and import @starci/grammar, never @dicebear/*, and draw no avatar visuals.
   - id: theme
     tier: core
     packages: [next-themes]
@@ -237,6 +238,13 @@ concerns:
     pattern: FE-LINT
     forbids: []
     why: the canon lint and format configuration.
+  - id: grammar-lint
+    tier: opt
+    packages: ['@starci/eslint-grammar-starci', '@starci/eslint-grammar-offset-pop']
+    home: [fe.source-root-pinned]
+    pattern: FE-RULE-OWNERSHIP
+    forbids: []
+    why: The selected Grammar family's lint package runs beside the universal front-end canon; the family catalog declares the package and factory.
   - id: auth-supabase
     tier: opt
     packages: ['@supabase/supabase-js', '@supabase/ssr']

package/runtime/knowledge/hfs/rules.yaml

@@ -8,7 +8,7 @@
 # An enforcer is a check that exists or one still owed. `status: planned` marks one owed: the architecture machine, the
 # hfs CLI, stylelint and Sonar lanes fill them, and the entry's `status` is removed the day the check ships (the check
 # refuses a planned enforcer that already exists). An existing eslint enforcer is a rule id of the plugin
-# `@starci/eslint-canon-be` or `@starci/eslint-canon-fe`; an existing machine, hfs or work-validate enforcer names the file
+# the backend, universal frontend or selected Grammar family lint package; an existing machine, hfs or work-validate enforcer names the file
 # (`at`) that emits one of the rule's codes. scripts/checks/check-hfs-rules.mjs holds all of this to the packages, the
 # scripts and modules/kernel/failure-codes.yaml.
 #
@@ -19,8 +19,8 @@
 schema: starci/hfs-rules@3
 version: 3.1.0
 gates:
-  pre-commit: the managed .husky/pre-commit at the app root - starci app hygiene (staged .starciwork and .starcistacks paths, secrets guard, a new back-end logic file staged without its unit spec), typecheck, ESLint per side and stylelint on the staged files, prettier --check, the unit specs the staged files touch
-  pre-push: typecheck, lint (starci app lint), format:check and the unit specs affected since origin/main; runs every pre-commit rule again
+  pre-commit: the managed L0 hook runs app hygiene, managed-file drift, ESLint per side and stylelint on staged source, and prettier on staged files; typecheck and targeted specs belong to the op gate under R225
+  pre-push: the managed app hook validates an annotated release tag and the recorded L4 evidence for HEAD, permitting the release refs and backup namespace under R225; it starts no source check, build or test
   settle: the op gate `starci gate run` over the op's changed files (merge guard, starci app lint --changed, codegen, tsc, the slice's specs; only findings new against the workflow's previous checkpoint block), re-read at starci kernel settle, which refuses a red done; a green settle commits the op's checkpoint on wf-<workflowId>
   land: the workflow's finish, the only time main is touched - gate.mjs over the whole workflow branch against its merge-base with main, the merge guard, review.verify of the exact head that lands, the branch rebased onto main, then main fast-forwarded and pushed
   ci: GitHub Actions runs the same pinned starci app lint, format:check, typecheck, unit with the per-file coverage threshold, build:be and build:fe, then the Sonar scan and gate
@@ -28,7 +28,8 @@ gates:
   runtime: "`starci runtime check` (npm run check) of the StarCi runtime repository itself: scripts/checks/check-runtime.mjs runs node --check, scripts/hfs/runtime-check.mjs with knowledge/hfs/runtime-slots.yaml, and the retained self-checks"
 enforcerKinds:
   eslint-be: a rule of the plugin @starci/eslint-canon-be (id without the plugin prefix)
-  eslint-fe: a rule of the plugin @starci/eslint-canon-fe (id without the plugin prefix)
+  eslint-fe: a universal rule of @starci/eslint-canon-fe (id without the plugin prefix)
+  eslint-grammar-starci: a selected Grammar family rule sharing the common component API, resolved through the family canon binding (id without the plugin prefix; FE-RULE-OWNERSHIP)
   stylelint: a rule of the @starci/stylelint-canon package
   machine: a check of the architecture machine (scripts/hfs/architecture), which reads the import graph
   hfs: a check of the hfs CLI that reads the repository tree, configuration, contracts or catalogs
@@ -1141,7 +1142,7 @@ rules:
 
   - id: R56
     code: "FE_HOOKS_ARE_HOOKS"
-    law: "`hooks/` hold hooks only: `hooks/swr` (one SWR wrapper per modules/api operation), `hooks/rhf` (forms), `hooks/zustand/<store>`, `hooks/socketio`, `hooks/effects`, `hooks/reuseables` and `hooks/<domain>` with one shared file per domain; a product hook is defined only there and imported through its index. A function in `hooks/` is a hook when it calls a hook: a React, SWR or Redux hook, a `use*` of the app's own `hooks/` folders (a `hooks/swr` wrapper, a sibling domain hook; resolved by TypeScript symbol resolution), or a listed library hook (next-intl, next/navigation, react-hook-form, zustand); a file that exports a non-hook still fails (owner ruling 2026-10-16 \"Theo y tro\")."
+    law: "`hooks/` hold hooks only: `hooks/swr` (one SWR wrapper per modules/api operation), `hooks/rhf` (forms), `hooks/zustand/<store>`, `hooks/socketio`, `hooks/effects`, `hooks/reuseables` and `hooks/<domain>` with one shared file per domain; a product hook is defined only there and imported through its index. A function in `hooks/` is a hook when it calls a hook: a React, SWR or Redux hook, a `use*` of the app's own `hooks/` folders (a `hooks/swr` wrapper, a sibling domain hook; resolved by TypeScript symbol resolution), or a listed library hook (next-intl, next/navigation, next-themes useTheme, react-hook-form, zustand); a file that exports a non-hook still fails (owner ruling 2026-10-16 \"Theo y tro\")."
     kinds: [lint, codemod]
     gates: [settle, land, ci]
     failureCodes: ["FE_HOOKS_ARE_HOOKS", "FE_CUSTOM_HOOK_LOCATION", "FE_BLOCK_PRODUCT_HOOK_DEFINITION", "FE_COMPONENT_DEEP_HOOK_IMPORT"]
@@ -1209,7 +1210,7 @@ rules:
     code: "FE_I18N_PLACEMENT"
     editions: [lite, full]
     docs: [docs/architecture.md#r59]
-    law: "`next-intl` with `[locale]`; the next-intl stack is written once per front end: `fe/packages/<family>-i18n` (`createAppI18n`) called by each app's `modules/i18n/index.ts`, or the only app's `modules/i18n/`."
+    law: "`next-intl` with `[locale]`; multiple apps share one `fe/packages/<family>-i18n` stack through `createAppI18n`. A single app keeps routing and request configuration in `modules/i18n` and `createNavigation` in the `modules/routes` public entry. The proxy imports routing or a routing-only shared proxy export without evaluating navigation runtime."
     kinds: [check, codemod, lint]
     gates: [settle, land, ci]
     failureCodes: ["FE_I18N_PLACEMENT", "FE_I18N_NAVIGATION", "FE_I18N_FORMATTER"]
@@ -1252,9 +1253,10 @@ rules:
       - {path: packages/hfs/src/hfs-i18n-catalog-coverage.spec.mjs, editions: [lite, full]}
   - id: R61
     code: "FE_STYLE_TOKEN_ONLY"
-    law: "Token-only CSS; colour only in `brand.css`; every `@source` resolves (sub-check `FE_STYLE_SOURCE_UNRESOLVED`). Status colours follow HeroUI soft pairs: every status tone has `--<tone>-soft` and `--<tone>-soft-foreground` in light and dark, the soft foreground reaches 3:1 on its tint and on `--background`, body text 4.5:1, a solid tone is never text below 4.5:1, and text and icons take the soft foreground, never the solid tone."
+    law: "Application CSS uses the selected Grammar tokens for layout and the declared brand owner for brand values; every source declaration resolves. Status foregrounds reach 3:1 against their tinted surface and page background in each theme, body text reaches 4.5:1, and an insufficiently contrasting solid tone is never text. The selected Grammar owns the concrete token pairs, typography, scale and visual values."
+    docs: [knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP, packages/stylelint/README.md, packages/eslint/fe/docs/brand-values.md, docs/source-process.md#the-test-ladder, knowledge/hfs/rules.yaml#R225]
     kinds: [lint, design]
-    gates: [pre-commit, pre-push, settle, land, ci]
+    gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_STYLE_TOKEN_ONLY", "FE_STYLE_SOURCE_UNRESOLVED"]
     enforcers:
       - {kind: stylelint, id: token-only}
@@ -1271,33 +1273,59 @@ rules:
       - {kind: stylelint, id: breakpoint-scale}
       - {kind: stylelint, id: source-resolves}
       - {kind: eslint-fe, id: no-raw-brand-value}
-      - {kind: eslint-fe, id: no-fractional-step}
+      - {kind: eslint-grammar-starci, id: no-fractional-step}
       - {kind: eslint-fe, id: no-arbitrary-value}
-      - {kind: eslint-fe, id: no-hand-rolled-heading}
-      - {kind: eslint-fe, id: no-unresolved-token-class}
-      - {kind: eslint-fe, id: no-heading-tag-outside-heading-component}
-      - {kind: eslint-fe, id: status-text-uses-soft-foreground}
+      - {kind: eslint-grammar-starci, id: no-hand-rolled-heading}
+      - {kind: eslint-grammar-starci, id: no-unresolved-token-class}
+      - {kind: eslint-grammar-starci, id: no-heading-tag-outside-heading-component}
+      - {kind: eslint-grammar-starci, id: status-text-uses-soft-foreground}
+    proves:
+      - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
+      - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+    exemplifiedBy:
+      - {path: packages/hfs/templates/fe/skeleton-lite/apps/web/src/app/globals.css, edition: lite}
+      - {path: packages/hfs/templates/fe/skeleton/apps/app/src/app/globals.css, edition: full}
+      - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
+      - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+    witness:
+      - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
+      - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
   - id: R62
     code: "FE_NATIVE_FORM_CONTROL"
     editions: [lite, full]
-    docs: [docs/architecture.md#r62]
+    docs: [docs/architecture.md#r62, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     proves:
+      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, editions: [lite, full]}
     exemplifiedBy:
+      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/hfs/templates/fe/skeleton-lite/apps/web/src/features/pages/AppHomePage/component.tsx, edition: lite}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx, edition: full}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, editions: [lite, full]}
     witness:
+      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, edition: lite, codes: [FE_NATIVE_FORM_CONTROL, FE_NATIVE_IMAGE]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, edition: full, codes: [FE_NATIVE_FORM_CONTROL, FE_NATIVE_IMAGE]}
-    law: "No raw form controls, native images or raw structural tags in product tiers; the grammar renders them."
+    law: "Product tiers compose the selected Grammar renderers for form controls, images and structural elements that the Grammar owns; they never reproduce those renderers with raw HTML."
     kinds: [lint, design]
     gates: ["pre-commit", "settle", "land", "ci"]
     failureCodes: ["FE_NATIVE_FORM_CONTROL", "FE_NATIVE_IMAGE"]
     enforcers:
       - {kind: eslint-fe, id: no-native-form-control}
       - {kind: eslint-fe, id: no-native-img}
-      - {kind: eslint-fe, id: no-raw-structural-element}
+      - {kind: eslint-grammar-starci, id: no-raw-structural-element}
       - {kind: eslint-fe, id: image-has-size}
 
   - id: R63
@@ -1836,7 +1864,7 @@ rules:
     gates: ["pre-commit","settle","land","ci"]
   - id: R92
     code: "FE_COMPONENT_API"
-    law: "A component exposes the canon surface: typed named props and slots, an exact sibling XBase presentational twin for every connected block, status through the slot view, no className or CSS doors, no resting twin or placeholder prop, class names in the colocated file; a pure component reaches no hook, router, locale or API, but may render a list of blocks supplied through render props without importing blocks or owning their data."
+    law: "A component exposes the canon surface: typed named props and slots, an exact sibling XBase presentational twin for every connected block, status through the selected Grammar state renderer, no className or CSS doors, no resting twin or placeholder prop, class names in the colocated file; a pure component reaches no hook, router, locale or API, but may render a list of blocks supplied through render props without importing blocks or owning their data."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_COMPONENT_API", "FE_COMPONENT_WORLD_OWNERSHIP", "FE_WORLD_OWNER_RENDER_BOUNDARY", "FE_CONNECTED_BLOCK_RENDER_PAIR", "FE_PURE_REACHES_DATA", "FE_PURE_WORLD_HOOK", "FE_PURE_WORLD_IMPORT"]
@@ -1850,7 +1878,7 @@ rules:
       - {kind: eslint-fe, id: base-props-atom}
       - {kind: eslint-fe, id: base-import-pair}
       - {kind: eslint-fe, id: no-data-status-shape}
-      - {kind: eslint-fe, id: slot-status-through-slotview}
+      - {kind: eslint-grammar-starci, id: slot-status-through-slotview}
       - {kind: eslint-fe, id: presentational-purity}
       - {kind: eslint-fe, id: connected-block-has-presentational-twin}
       - {kind: eslint-fe, id: no-resting-twin-component}
@@ -1861,62 +1889,54 @@ rules:
       - {kind: eslint-fe, id: cn-arguments-are-single-tokens}
       - {kind: eslint-fe, id: component-purity}
     editions: [lite, full]
-    docs: [docs/architecture.md#r92]
+    docs: [docs/architecture.md#r92, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     proves:
+      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
     exemplifiedBy:
+      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
     witness:
+      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
   - id: R93
     code: "FE_VENDOR_BOUNDARY"
-    law: "Vendor primitives and icons reach components only through their named owner: the one icon set of knowledge/hfs/fe-stack.yaml (the heroicons family) through the icon leaf at the glyph scale, every vendor primitive behind a named owner; the Grammar package is imported only through its selected code and style entry and keeps its declared contract. Apps compose Grammar surfaces with layout-only CSS; surface context supplies nested field variants and panel list alignment, without raw surface paint or stacked horizontal list-wrapper padding."
+    law: "Vendor primitives and icons reach components only through their named owner: one declared icon set through its icon owner, one icon size per region chosen from the selected Grammar scale, and every vendor primitive behind a named owner. The Grammar package is imported through its selected public code and style entries and keeps its declared contract. The Grammar owns the visual values and component API that realize these requirements."
     kinds: [lint, codemod]
     gates: [pre-commit, settle, land, ci]
-    failureCodes: ["FE_VENDOR_BOUNDARY", "ARCH_GRAMMAR_CONTRACT_INVALID", "ARCH_GRAMMAR_EXPORT_BYPASS", "FE_NESTED_VARIANT", "FE_LIST_PANEL_PADDING"]
-    enforcers:
-      - {kind: eslint-fe, id: no-vendor-icon-outside-icon-leaf}
-      - {kind: eslint-fe, id: heroicons-is-the-glyph-vendor}
-      - {kind: eslint-fe, id: no-off-scale-glyph-size}
-      - {kind: eslint-fe, id: no-icon-size-class}
-      - {kind: eslint-fe, id: destructive-menu-entry-needs-danger-tone}
-      - {kind: eslint-fe, id: no-decorative-icon-in-metric-cell}
-      - {kind: eslint-fe, id: vendor-primitive-has-named-owner}
+    failureCodes: ["FE_VENDOR_BOUNDARY", "ARCH_GRAMMAR_CONTRACT_INVALID", "ARCH_GRAMMAR_EXPORT_BYPASS"]
+    enforcers:
+      - {kind: eslint-grammar-starci, id: no-vendor-icon-outside-icon-leaf}
+      - {kind: eslint-grammar-starci, id: heroicons-is-the-glyph-vendor}
+      - {kind: eslint-grammar-starci, id: no-off-scale-glyph-size}
+      - {kind: eslint-grammar-starci, id: no-icon-size-class}
+      - {kind: eslint-grammar-starci, id: destructive-menu-entry-needs-danger-tone}
+      - {kind: eslint-grammar-starci, id: no-decorative-icon-in-metric-cell}
+      - {kind: eslint-grammar-starci, id: vendor-primitive-has-named-owner}
       - {kind: eslint-fe, id: grammar-entry}
-      - {kind: eslint-fe, id: nested-control-variant}
-      - {kind: eslint-fe, id: no-list-panel-padding}
       - {kind: machine, id: grammar, at: scripts/hfs/architecture/frontend-grammar.mjs}
     editions: [lite, full]
-    docs: ["docs/code-pattern-enforcement.md#r93-vendor-and-grammar-ownership"]
+    docs: ["docs/code-pattern-enforcement.md#r93-vendor-and-grammar-ownership", knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     templateNa: "Vendor boundary violations and installed Grammar package contracts are checked against consumer ownership; no managed template scaffolds a vendor install or a forbidden import."
     proves:
-      - packages/eslint/fe/r93-vendor-coverage.spec.mjs
+      - packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs
       - packages/eslint/fe/r93-grammar-ownership.spec.mjs
-      - packages/eslint/fe/menu-entries.spec.mjs
-      - packages/eslint/fe/surface-rules.spec.mjs
+      - packages/eslint/grammar-starci/menu-entries.spec.mjs
     exemplifiedBy:
-      - {path: packages/eslint/fe/r93-vendor-coverage.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full]}
-      - {path: packages/eslint/fe/menu-entries.spec.mjs, editions: [lite, full]}
-      - {path: packages/eslint/fe/surface-rules.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/grammar-starci/menu-entries.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/eslint/fe/menu-entries.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
-      - {path: packages/eslint/fe/r93-vendor-coverage.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
+      - {path: packages/eslint/grammar-starci/menu-entries.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
+      - {path: packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
       - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full], codes: [ARCH_GRAMMAR_CONTRACT_INVALID, ARCH_GRAMMAR_EXPORT_BYPASS]}
-      - {path: packages/eslint/fe/surface-rules.spec.mjs, editions: [lite, full], codes: [FE_NESTED_VARIANT, FE_LIST_PANEL_PADDING]}
-    cases:
-      - id: case-1
-        date: "2026-10-25"
-        source: owner
-        quote: "apps on Grammar write layout-only CSS; every visual element lives in @starci/grammar"
-        ruling: "ANATOMY-2 owns contextual field defaults, PADDING-0 owns panel list alignment, and COLLECTION-3 owns composite member avatars for conversation and group identity. Grammar supplies these capabilities; the FE canon rejects explicit primary fields inside surfaces, raw app surface paint and stacked horizontal list-wrapper padding."
   - id: R94
     code: "FE_SLOT_FILE_ROLE"
     law: "A front-end file is owned by a slot and named by it: a slot that owns a directory (route, feature, components, hooks, api module) holds only the files its `allows` list names, and holds them inside a folder of its own."
@@ -4978,27 +4998,27 @@ rules:
 
   - id: R286
     code: "FE_COPY_IN_CALL"
-    law: "Copy shown by validation and toast calls comes from the next-intl catalog, including Zod message arguments and toast titles or descriptions. Browser alert calls are forbidden. Inline SVG glyphs are forbidden outside a declared brand-mark leaf; ordinary icons use the one Heroicons family through the Icon leaf."
+    law: "Validation and toast copy comes from the translation catalog, including validation messages, titles and descriptions. Browser alert calls are forbidden. Inline vector glyphs belong only to declared brand-mark owners; ordinary icons use the selected Grammar icon owner and its declared glyph family."
     kinds: [lint]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_COPY_IN_CALL", "FE_NO_ALERT", "FE_ICON_INLINE_SVG"]
     enforcers:
       - {kind: eslint-fe, id: no-copy-in-call}
       - {kind: eslint-fe, id: no-alert}
-      - {kind: eslint-fe, id: no-inline-svg-outside-brand-mark-leaf}
+      - {kind: eslint-grammar-starci, id: no-inline-svg-outside-brand-mark-leaf}
     editions: [lite, full]
-    docs: [docs/quality-bar.md#r286]
+    docs: [docs/quality-bar.md#r286, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     exemplifiedBy:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/fe/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/leaves/Icon/index.tsx, editions: [lite, full]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/modules/toast, editions: [lite, full]}
     proves:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/fe/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
     witness:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/fe/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
 
   - id: R287
     code: "FE_CALLBACK_SHAPE"
@@ -5021,21 +5041,21 @@ rules:
 
   - id: R288
     code: "FE_STACK_UNLISTED"
-    law: "Every direct FE workspace dependency belongs to knowledge/hfs/fe-stack.yaml or is declared in hfs.json fe.extraPackages with its name and a nonempty reason. Installed runtime dependencies carried by a listed Grammar package are not app declarations and raise no FE_STACK_UNLISTED; direct forbidden dependencies still raise FE_STACK_FORBIDDEN. Every product Next app declares the catalog's core runtime packages; codegen, lint, TypeScript and Tailwind tools may be installed once at the app root. The marketing landing app is exempt (lite and full) from core presence. GraphQL documents, including gql templates, match the back-end contracts, and SWR keys carry fetcher identities without an opt-in declaration."
+    law: "Every direct FE workspace dependency belongs to knowledge/hfs/fe-stack.yaml or is declared in hfs.json fe.extraPackages with its name and a nonempty reason. Installed runtime dependencies carried by a listed Grammar package are not app declarations and raise no FE_STACK_UNLISTED; direct forbidden dependencies still raise FE_STACK_FORBIDDEN. Every product Next app declares the catalog's core runtime packages; codegen, lint, TypeScript and Tailwind tools may be installed once at the app root. The marketing landing app is exempt (lite and full) from core presence. A front end that selects sides.fe.grammar and declares @starci/eslint-canon-fe 9 or later also declares that family's lint package from knowledge/grammars/index.yaml, which carries its Grammar component rules (FE_STACK_FAMILY_LINT_MISSING). GraphQL documents, including gql templates, match the back-end contracts, and SWR keys carry fetcher identities without an opt-in declaration."
     kinds: [check]
     gates: [settle, land, ci]
-    failureCodes: ["FE_STACK_UNLISTED", "FE_STACK_CORE_MISSING"]
+    failureCodes: ["FE_STACK_UNLISTED", "FE_STACK_CORE_MISSING", "FE_STACK_FAMILY_LINT_MISSING"]
     enforcers:
       - {kind: hfs, id: fe-stack-allowlist, at: scripts/hfs/rules/fe-stack.mjs}
     editions: [lite, full]
     docs: [docs/quality-bar.md#r288]
     proves:
-      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING]}
+      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING, FE_STACK_FAMILY_LINT_MISSING]}
     exemplifiedBy:
       - {path: packages/hfs/templates/fe/app/package.json.tpl, editions: [lite, full]}
-      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING]}
+      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING, FE_STACK_FAMILY_LINT_MISSING]}
     witness:
-      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING]}
+      - {path: packages/hfs/src/hfs-fe-stack.spec.mjs, editions: [lite, full], codes: [FE_STACK_UNLISTED, FE_STACK_CORE_MISSING, FE_STACK_FAMILY_LINT_MISSING]}
   - id: R289
     code: "BE_APP_ENV_REQUIRED"
     law: "Every declared back-end app owns a tracked apps/<app>/src/<app>.env.ts exporting its typed environment interface and read<App>Env(env: EnvSource). main.ts constructs EnvSource once and delegates its reads to that reader, with no inline parsing. app.module.ts composes module lists only by spreading compose/<area>.ts groups; its own providers are limited to app-wide guards and filters."
@@ -5450,101 +5470,161 @@ rules:
     templateNa: "A storage grant is declared per integration; the canon scaffolds none, and the presigned-upload examples of both editions are the reference."
   - id: R313
     code: "FE_APP_SHELL_FRAME"
-    law: "FE-APP-SHELL-1 requires WorkspaceShell viewport=fixed to own the application frame, including persistent header and navigation; hand-built header/nav frames are refused."
+    law: "FE-APP-SHELL-1 gives the selected Grammar shell ownership of the fixed application frame, navbar, subnav and sidebar, with independent navigation and content scroll; StarCi requires WorkspaceShell viewport=fixed with navigation resolving visibility to wide and navigationDrawer or a compactHeader containing a left Drawer with Sidebar presentation=drawer; application layout does not recreate this frame."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_APP_SHELL_FRAME"]
     enforcers:
-      - {kind: eslint-fe, id: app-shell-frame}
+      - {kind: eslint-grammar-starci, id: app-shell-frame}
     editions: [lite, full]
     docs:
+      - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
     exemplifiedBy:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
       - {path: examples/full-app/fe/apps/app/src/features/layouts/ShopLayout/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/features/layouts/WorkspaceLayout/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R314
     code: "FE_NAVBAR_CONTROL_SIZE"
-    law: "FE-APP-SHELL-2 requires every navbar control to declare size=control so Grammar owns the common control height."
+    law: "FE-APP-SHELL-2 keeps navbar controls at one common height and icons at one size per region from the selected Grammar scale; the Grammar owns their concrete values."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CONTROL_SIZE"]
     enforcers:
-      - {kind: eslint-fe, id: navbar-control-size}
+      - {kind: eslint-grammar-starci, id: navbar-control-size}
     editions: [lite, full]
     docs:
+      - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
     exemplifiedBy:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R315
     code: "FE_NAVBAR_CLUSTER"
-    law: "FE-APP-SHELL-3 requires the statically composed navbar right cluster to contain a tertiary language IconButton opening DropdownMenu, a theme Switch, a notification IconButton opening Popover and an account AvatarButton opening DropdownMenu, in that order."
+    law: "FE-APP-SHELL-3 orders the navbar controls as language, theme, notifications and account, with each control and its overlay supplied by the selected Grammar."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CLUSTER"]
     enforcers:
-      - {kind: eslint-fe, id: navbar-cluster}
+      - {kind: eslint-grammar-starci, id: navbar-cluster}
     editions: [lite, full]
     docs:
+      - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
     exemplifiedBy:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R316
     code: "FE_APP_SHELL_BOTTOM_TABS"
-    law: "FE-APP-SHELL-4 keeps navigation in the Sidebar drawer and refuses a bottom tab bar in the application shell."
+    law: "FE-APP-SHELL-4 preserves the selected Grammar shell navigation model across viewports; an application does not replace its sidebar-derived mobile drawer with an incompatible bottom tab bar."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_APP_SHELL_BOTTOM_TABS"]
     enforcers:
-      - {kind: eslint-fe, id: no-shell-bottom-tabs}
+      - {kind: eslint-grammar-starci, id: no-shell-bottom-tabs}
     editions: [lite, full]
     docs:
+      - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
     exemplifiedBy:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
       - {path: examples/full-app/fe/apps/app/src/features/layouts/ShopLayout/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/features/layouts/WorkspaceLayout/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R317
     code: "FE_NAVBAR_CREATE"
-    law: "FE-APP-SHELL-5 places create actions on their pages and refuses them in the navbar."
+    law: "FE-APP-SHELL-5 places create actions on the page that owns them and keeps them out of the global navbar."
     kinds: [lint, design]
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CREATE"]
     enforcers:
-      - {kind: eslint-fe, id: no-navbar-create}
+      - {kind: eslint-grammar-starci, id: no-navbar-create}
     editions: [lite, full]
     docs:
+      - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
     exemplifiedBy:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/fe/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
+  - id: R318
+    code: "FE_NESTED_VARIANT"
+    law: "Apps compose Grammar with layout-only CSS; paint utilities, arbitrary paint properties and inline style paint belong to Grammar. Grammar context owns all layer-aware field variants, nested Tabs defaults and the content edge of panel lists; apps omit static field variants, do not force primary Tabs inside a painted surface, do not paint raw surfaces, and add no horizontal list-wrapper padding within the nearest painted Grammar surface."
+    kinds: [lint, design]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["FE_NESTED_VARIANT", "FE_LIST_PANEL_PADDING", "FE_GRAMMAR_LAYOUT_ONLY"]
+    enforcers:
+      - {kind: eslint-fe, id: nested-control-variant}
+      - {kind: eslint-fe, id: no-list-panel-padding}
+      - {kind: eslint-fe, id: no-app-surface-paint}
+    editions: [lite, full]
+    docs: ["docs/code-pattern-enforcement.md#r318-app-grammar-composition"]
+    templateNa: "Product composition is proved by the FE canon's Grammar import and surface fixtures; a template cannot choose product slots or lists."
+    proves:
+      - {path: packages/eslint/fe/surface-rules.spec.mjs, editions: [lite, full], codes: [FE_NESTED_VARIANT, FE_LIST_PANEL_PADDING, FE_GRAMMAR_LAYOUT_ONLY]}
+    exemplifiedBy:
+      - {path: packages/eslint/fe/surface-rules.spec.mjs, editions: [lite, full], codes: [FE_NESTED_VARIANT, FE_LIST_PANEL_PADDING, FE_GRAMMAR_LAYOUT_ONLY]}
+    witness:
+      - {path: packages/eslint/fe/surface-rules.spec.mjs, editions: [lite, full], codes: [FE_NESTED_VARIANT, FE_LIST_PANEL_PADDING, FE_GRAMMAR_LAYOUT_ONLY]}
+    cases:
+      - id: case-1
+        date: "2026-10-25"
+        source: owner
+        quote: "apps on Grammar write layout-only CSS; every visual element lives in @starci/grammar"
+        ruling: "ANATOMY-2 owns contextual field defaults, PADDING-0 owns panel list alignment, and COLLECTION-3 owns composite member avatars for conversation and group identity. Grammar supplies these capabilities; the FE canon rejects static field variants on either layer, primary Tabs inside painted surfaces, raw app surface paint and stacked horizontal list-wrapper padding inside painted surfaces."
+
+  - id: R319
+    code: "FE_BUTTON_INTENT"
+    law: "An app Button or IconButton declares an intent and never a variant; Grammar resolves the variant from intent and placement (CTA-6). A destructive confirm lives in a confirmation dialog, a render holds at most one commit, and a collection item holds none."
+    kinds: [codemod, lint, design]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["FE_BUTTON_INTENT", "FE_BUTTON_INTENT_REQUIRED", "FE_BUTTON_NO_VARIANT", "FE_DESTRUCTIVE_CONFIRM_IN_DIALOG", "FE_SINGLE_COMMIT_PER_RENDER", "FE_NO_COMMIT_IN_COLLECTION_ITEM"]
+    enforcers:
+      - {kind: eslint-fe, id: button-intent-required}
+      - {kind: eslint-fe, id: button-no-variant}
+      - {kind: eslint-fe, id: destructive-confirm-in-dialog}
+      - {kind: eslint-fe, id: single-commit-per-render}
+      - {kind: eslint-fe, id: no-commit-in-collection-item}
+    editions: [lite, full]
+    docs:
+      - knowledge/ui/composition/cta.yaml
+      - docs/code-pattern-enforcement.md#r319-button-intent
+    proves:
+      - {path: packages/eslint/fe/button-intent.spec.mjs, editions: [lite, full], codes: [FE_BUTTON_INTENT, FE_BUTTON_INTENT_REQUIRED, FE_BUTTON_NO_VARIANT, FE_DESTRUCTIVE_CONFIRM_IN_DIALOG, FE_SINGLE_COMMIT_PER_RENDER, FE_NO_COMMIT_IN_COLLECTION_ITEM]}
+    exemplifiedBy:
+      - {path: packages/eslint/fe/button-intent.spec.mjs, editions: [lite, full], codes: [FE_BUTTON_INTENT, FE_BUTTON_INTENT_REQUIRED, FE_BUTTON_NO_VARIANT, FE_DESTRUCTIVE_CONFIRM_IN_DIALOG, FE_SINGLE_COMMIT_PER_RENDER, FE_NO_COMMIT_IN_COLLECTION_ITEM]}
+    witness:
+      - {path: packages/eslint/fe/button-intent.spec.mjs, editions: [lite, full], codes: [FE_BUTTON_INTENT, FE_BUTTON_INTENT_REQUIRED, FE_BUTTON_NO_VARIANT, FE_DESTRUCTIVE_CONFIRM_IN_DIALOG, FE_SINGLE_COMMIT_PER_RENDER, FE_NO_COMMIT_IN_COLLECTION_ITEM]}
+    templateNa: "The intent of an action comes from the product decision in the .starciwork specification; a template cannot choose it."
+    cases:
+      - id: case-1
+        date: "2026-10-25"
+        source: owner
+        quote: "Critique this carefully so the button choice is a system and not a feeling, understand? Update .claude."
+        ruling: "The button variant follows the declared intent (owner ruling button-variant-follows-intent): the app passes intent and step, Grammar derives the variant from them and from the placement it reads from React context. The semantics are HeroUI's, so the lint is universal in the FE canon."