@starci/hfs 4.7.37 → 4.7.38

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 4.7.38 - 2026-10-26
+- Changed: the bundled canon pins select @starci/stylelint-canon 2.0.13, @starci/eslint-canon-be 3.4.46, @starci/eslint-canon-fe 9.1.1, the Grammar lint families 0.12.5 and @starci/grammar 0.12.5.
+- Fixed: the full and lite scaffold templates, skeletons and specs follow the scaffold end-to-end and repaint fixes made after 4.7.37.
+
 ## 4.7.37 - 2026-10-26
 - Fixed: the scaffold SiteShell declares viewport=flow so Grammar lint reads it as site chrome, the hygiene sync follows the scaffold end-to-end fixes, and the scaffold json-logger spec expects the logger field order.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "4.7.37",
+  "version": "4.7.38",
   "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/grammars/index.yaml

@@ -77,7 +77,7 @@ families:
       package: '@starci/grammar'
       entry: '@starci/grammar/common'
       styleEntry: '@starci/grammar/common.css'
-      peers: [react, '@heroui/react', '@xyflow/react']
+      peers: [react, '@heroui/react', '@xyflow/react', react-aria-components]
     packageSnapshot: common/DNA.yaml
     scope: |
       DNA snapshot only. This catalog carries no Common-side family boundary, idiom set or composition

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -23,42 +23,42 @@ pins:
     source: packages/heroicons/package.json
     why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/grammar':
-    version: 0.12.4
+    version: 0.12.5
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.45
+    version: 3.4.46
     group: starci
     install: registry
     side: be
     source: packages/eslint/be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.1.0
+    version: 9.1.1
     group: starci
     install: registry
     side: fe
     source: packages/eslint/fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-starci':
-    version: 0.12.4
+    version: 0.12.5
     group: starci
     install: registry
     side: fe
     source: packages/eslint/grammar-starci/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.12.4
+    version: 0.12.5
     group: starci
     install: registry
     side: fe
     source: packages/eslint/grammar-offset-pop/package.json
     why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.0.12
+    version: 2.0.13
     group: starci
     install: registry
     side: fe
@@ -91,14 +91,14 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.37
+    version: 1.7.38
     group: starci
     install: registry
     side: both
     source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.37
+    version: 4.7.38
     group: starci
     install: registry
     side: both
@@ -299,6 +299,11 @@ pins:
     group: ui
     side: fe
     why: 'Grammar FlowGraph imports React Flow from @xyflow/react; every Grammar consumer declares this required peer at the version used by the Grammar package.'
+  react-aria-components:
+    version: 1.21.1
+    group: ui
+    side: fe
+    why: 'Grammar imports React Aria Components directly (Sidebar, Field); every Grammar consumer declares this required peer at the version HeroUI resolves.'
   '@heroui/react':
     version: 3.2.6
     group: ui

package/runtime/knowledge/hfs/fe-stack.yaml

@@ -99,7 +99,7 @@ concerns:
     why: useTranslations for copy and the next-intl formatter for numbers, fixed dates and currency; FE-DATE owns live time display.
   - id: ui
     tier: core
-    packages: ['@heroui/react', '@heroui/styles', tailwindcss, '@starci/grammar']
+    packages: ['@heroui/react', '@heroui/styles', tailwindcss, '@starci/grammar', react-aria-components]
     home: [fe.components, fe.feature]
     pattern: FE-UI
     forbids: ['@mantine/core', '@mui/material', '@chakra-ui/react', antd, styled-components, '@emotion/react', '@emotion/styled']

package/scaffold/app.mjs

@@ -199,7 +199,7 @@ const LITE_STARTER_DEPENDENCIES = Object.freeze({
  */
 const FE_APP_DEPENDENCIES = Object.freeze({
   '@<project>/i18n': '*', '@<project>/ui': '*',
-  '@heroui/react': null, '@heroui/styles': null, '@starci/grammar': null, '@xyflow/react': null, next: null, 'next-intl': null, react: null, 'react-dom': null,
+  '@heroui/react': null, '@heroui/styles': null, '@starci/grammar': null, '@xyflow/react': null, 'react-aria-components': null, next: null, 'next-intl': null, react: null, 'react-dom': null,
 });
 
 /**
@@ -207,7 +207,7 @@ const FE_APP_DEPENDENCIES = Object.freeze({
  * the front end is the Auth client of modules/auth only) and server-only for its own next-intl request config.
  */
 const LITE_FE_APP_DEPENDENCIES = Object.freeze({
-  '@heroicons/react': null, '@heroui/react': null, '@heroui/styles': null, '@starci/grammar': null, '@starci/heroicons': null, '@xyflow/react': null,
+  '@heroicons/react': null, '@heroui/react': null, '@heroui/styles': null, '@starci/grammar': null, '@starci/heroicons': null, '@xyflow/react': null, 'react-aria-components': null,
   '@supabase/supabase-js': null, next: null, 'next-intl': null, react: null, 'react-dom': null, 'server-only': null,
 });
 
@@ -218,7 +218,7 @@ const LITE_FE_APP_DEPENDENCIES = Object.freeze({
  * ./routing, client-safe: the default locale a client boundary reads).
  */
 const FE_PACKAGES = Object.freeze({
-  ui: { exports: ['.'], dependencies: { '@heroui/react': null, '@starci/grammar': null, '@starci/heroicons': null, '@xyflow/react': null, 'next-intl': null, react: null, 'react-dom': null } },
+  ui: { exports: ['.'], dependencies: { '@heroui/react': null, '@starci/grammar': null, '@starci/heroicons': null, '@xyflow/react': null, 'react-aria-components': null, 'next-intl': null, react: null, 'react-dom': null } },
   i18n: { exports: ['.', './proxy', './routing'], dependencies: { next: null, 'next-intl': null, 'server-only': null } },
 });
 
@@ -304,11 +304,11 @@ export function peerDependencies(pkg, pins, pairs = parseYaml(fs.readFileSync(PE
 /**
  * The fe-stack core packages one version of which the whole install resolves (npm `overrides`, at their canon pins): a
  * transitive dependency otherwise brings its own (zustand 4 under @xyflow/react, dayjs under typeorm, a hoisted newer zod
- * that breaks the zodResolver types), and @xyflow/react itself stays the grammar's one version. Two are security overrides, each dropped when
+ * that breaks the zodResolver types), and @xyflow/react and react-aria-components stay the grammar's one version. Two are security overrides, each dropped when
  * upstream ships the fix (canon-pins.yaml says why): @graphql-tools/utils (@nestjs/graphql 13.x pulls <=12.0.0, GHSA-7mx3-vvmw-hjmv) and multer
  * (@nestjs/platform-express depends on exactly 2.4.0, GHSA-q7qp-rjg7-q26m).
  */
-const ROOT_OVERRIDES = Object.freeze(['@graphql-tools/utils', '@xyflow/react', 'dayjs', 'multer', 'zod', 'zustand']);
+const ROOT_OVERRIDES = Object.freeze(['@graphql-tools/utils', '@xyflow/react', 'dayjs', 'multer', 'react-aria-components', 'zod', 'zustand']);
 
 /**
  * The root package.json of a new app, the monorepo root: name, workspaces, npm, its edition's dependencies with their runtime

package/scaffold/lite-exports.mjs

@@ -50,7 +50,7 @@ const REGISTRATIONS = Object.freeze({
     {
       file: "be/src/modules/platform/database/index.ts",
       source: "./database.sql",
-      names: ["sql"],
+      names: ["BATCH_ROWS", "sql"],
       beforeSource: "./errors/database.error",
     },
     {

package/templates/app/skeleton/.starcistacks/production/README.md

@@ -1,6 +1,6 @@
 # Production stack
 
-The app and its dependencies run on Docker Swarm; Supabase, when declared, is a hosted service. The tracked model declares the application services, one digest-pinned Caddy ingress and one digest-pinned PostgreSQL service on an internal backing network, with its data on a named persistent volume and credentials supplied through mounted secrets. On the first boot of an empty data volume, PostgreSQL runs the mounted `postgres-init.sh` config to create the `app_be` role with access to this app's database and schema, without superuser, database-creation, role-creation, replication or RLS-bypass privileges. Existing data volumes skip initialization and retain their roles and credentials.
+The app and its dependencies run on Docker Swarm; Supabase, when declared, is a hosted service. The tracked model declares the application services, one digest-pinned Caddy ingress and one digest-pinned PostgreSQL service on an internal backing network, with its data on a named persistent volume and credentials supplied through mounted secrets. On the first boot of an empty data volume, PostgreSQL runs the mounted `.starcistacks/production/infra/swarm/postgres-init.sh` config to create the `app_be` role with access to this app's database and schema, without superuser, database-creation, role-creation, replication or RLS-bypass privileges. Existing data volumes skip initialization and retain their roles and credentials.
 The model is a deployment declaration. It contains no owner credentials, real DNS receipt, completed release or restore proof. The public records under `.starcistacks/production/infra/swarm/` mark those owner-run operations as pending. Its all-zero application image digests are illustrative and must be replaced before deployment.
 
 The runtime template tracks no encrypted members. Scaffolding generates the declared database connection, application password and PostgreSQL administrator password members with placeholder values encrypted to this app's own recipient in `.sops.yaml`. Replace them with `starci app secret set production` using the matching host age identity in untracked local custody. The sealed connection uses role `app_be`, database `{{project}}` and internal endpoint `postgres:5432`; its URI-encoded password matches the separate `primary-db-password` member. The administrator password is distinct. The API receives only its least-privilege connection; only PostgreSQL receives the two password files for initialization. The non-empty application password contains no line breaks. The service has no TTY: initialization creates the role without a password, then feeds the two `psql` `\password` prompts through stdin using Bash's builtin `printf`, so psql encrypts it before sending SQL. No password travels in an initialization command argument or a plaintext SQL statement.
@@ -27,7 +27,7 @@ Every item is pending. Swarm initialization, provider URIs, DNS changes and key
 | DNS | Replace the reserved `example.invalid` hosts consistently in the manifest, Caddyfile and public configuration; publish address records for the product, API and landing hosts and retain a provider receipt in `.starcistacks/production/infra/swarm/owner-actions.md`. |
 | TLS | Caddy issues certificates after real DNS resolves. Provision `{{project}}-production-ingress-data` and `{{project}}-production-ingress-config-data` on the selected node; retain an issuance and renewal receipt in `.starcistacks/production/infra/swarm/owner-actions.md`. |
 | Database | Prepare creates `{{project}}-production-postgres-data` on the declared stateful node; the normal up path starts PostgreSQL and initializes `app_be` on its first empty-volume boot. Seal the matching role, database and password described above before up. Existing databases retain their current roles and credentials; initialization never rewrites them. Record the recovery owner without copying credentials here. |
-| Secret custody | Replace generated placeholders in `.starcistacks/production/secrets/primary-db-url.enc`, `primary-db-password.enc` and `postgres-password.enc` with the matching application connection/password and distinct administrator password; record their key names in the environment roster. The age identity stays only in the host's untracked `.claude/secret.env`. |
+| Secret custody | Replace generated placeholders in `.starcistacks/production/secrets/primary-db-url.enc`, `.starcistacks/production/secrets/primary-db-password.enc` and `.starcistacks/production/secrets/postgres-password.enc` with the matching application connection/password and distinct administrator password; record their key names in the environment roster. The age identity stays only in the host's untracked `.claude/secret.env`. |
 | External secrets | Materialize the sealed members in owner custody and create `{{project}}-production-primary-db-url-v1`, `{{project}}-production-primary-db-password-v1` and `{{project}}-production-postgres-password-v1`. The API and PostgreSQL read their separately granted mounted files. A later credential rotation updates the actual database role under owner authority and rotates matching immutable secrets; changing a mounted file does not rerun first-boot initialization. |
 | Public build configuration | Build the front end with its declared public site and GraphQL URLs. Public browser values stay outside sealed secret custody. |
 | Immutable release | Replace the illustrative all-zero application digests in the manifest, model and `.starcistacks/production/infra/swarm/releases/images.lock.yaml` with the verified release digests. Store each rendered release under `/srv/{{project}}/releases/<digest>`. Retain the last accepted record in `.starcistacks/production/infra/swarm/releases/previous.yaml`, then move the pointer and update `.starcistacks/production/infra/swarm/releases/current.yaml` after verification. |

package/templates/be/skeleton/apps/__app__/src/main.ts

@@ -12,7 +12,10 @@ const bootstrap = async (): Promise<void> => {
     const env = EnvSource.fromProcess()
     const options = read{{appPascal}}Env(env)
     const logger = createJsonLogger(new SystemClockService(), new SystemIds())
-    const app = await NestFactory.create(AppModule.register(options), { rawBody: true, logger: createNestLogger(logger) })
+    const app = await NestFactory.create(AppModule.register(options), {
+        rawBody: true,
+        logger: createNestLogger(logger),
+    })
     applyCorrelation(app)
     applyHttpSecurity(app, options.httpSecurity, { trustProxy: 1 })
     app.enableShutdownHooks()
@@ -24,6 +27,8 @@ const bootstrap = async (): Promise<void> => {
 }
 
 bootstrap().catch((error: unknown) => {
-    createJsonLogger(new SystemClockService(), new SystemIds()).error(LoggingLogEvent.StartupFailed, error, { service: "{{app}}" })
+    createJsonLogger(new SystemClockService(), new SystemIds()).error(LoggingLogEvent.StartupFailed, error, {
+        service: "{{app}}",
+    })
     process.exitCode = 1
 })

package/templates/be/skeleton/apps/cli/src/compose/platform.ts

@@ -4,7 +4,7 @@ import { ClockModule } from "@modules/platform/clock"
 import { DatabaseModule } from "@modules/platform/database"
 import type { DatabaseConnectionConfig, DatabaseConnectionOptions } from "@modules/platform/database"
 import { IdsModule } from "@modules/platform/ids"
-import { HTTP_ERROR_KINDS, HTTP_MESSAGES, HttpModule } from "@modules/platform/http"
+import { HttpModule } from "@modules/platform/http"
 import { LoggingModule } from "@modules/platform/logging"
 import type { CliAppOptions } from "../cli.options"
 

package/templates/be/skeleton/src/modules/platform/database/index.ts

@@ -5,7 +5,7 @@ export { MigrationRunnerService } from "./migration-runner.service"
 export { DEFAULT_SEED_ENV } from "./seed-connections.client"
 export { SeedRunnerService } from "./seed-runner.service"
 export type { DatabaseConnectionConfig, DatabaseConnectionOptions } from "./database.options"
-export { BATCH_ROWS, LIST_ROWS_MAX, sql } from "./database.sql"
+export { LIST_ROWS_MAX, sql } from "./database.sql"
 export { DATABASE_ERROR_KINDS } from "./errors/database.error"
 export { parsePrimaryDatabaseConfig } from "./primary.config"
 export { InjectPrimaryEntityManager, PRIMARY_ENTITY_MANAGER } from "./primary.decorators"

package/templates/be/skeleton/src/modules/platform/http/index.ts

@@ -1,7 +1,3 @@
-export { HTTP_ERROR_KINDS, HttpError, HttpErrorCode } from "./errors/http.error"
+export { HTTP_ERROR_KINDS } from "./errors/http.error"
 export { HTTP_MESSAGES } from "./messages/http.messages"
-export { callGraphql } from "./graphql-call.mapper"
-export type { GraphqlAnswer } from "./graphql-call.mapper"
-export { HTTP_CLIENT, InjectHttpClient } from "./http.decorators"
 export { HttpModule } from "./http.module"
-export type { HttpClient } from "./http.port"

package/templates/be/skeleton/src/modules/platform/logging/correlation.service.spec.ts

@@ -15,7 +15,9 @@ describe("CorrelationService", () => {
         expect(service.fromHeaders({ "x-request-id": "request-1" })).toBe("request-1")
         expect(service.fromHeaders({})).toBe("00000000-0000-4000-8000-000000000001")
         expect(service.create()).toBe("00000000-0000-4000-8000-000000000002")
-        expect(service.run("explicit-id", () => stampLogFields({}, "root-id"))).toEqual({ correlationId: "explicit-id" })
+        expect(service.run("explicit-id", () => stampLogFields({}, "root-id"))).toEqual({
+            correlationId: "explicit-id",
+        })
         expect(createCorrelationRunner(ids).run("bootstrap-id", () => stampLogFields({}, "root-id"))).toEqual({
             correlationId: "bootstrap-id",
         })

package/templates/be/skeleton/src/modules/platform/logging/index.ts

@@ -1,17 +1,6 @@
 export { createJsonLogger } from "./json-logger.service"
-export {
-    InjectLogger,
-    LOGGER,
-    CORRELATION_IDS,
-    CORRELATION_RUNNER,
-    InjectCorrelationIds,
-    InjectCorrelationRunner,
-} from "./logging.decorators"
-export { applyCorrelation, correlationMiddleware } from "./correlation-request.policy"
-export type { CorrelationIds, CorrelationRunner } from "./correlation.port"
-export type { CorrelationHeaders, CorrelationRequest } from "./correlation.contracts"
-export { createCorrelationRunner } from "./correlation.service"
-export { isCorrelationId } from "./correlation.policy"
+export { InjectLogger, LOGGER } from "./logging.decorators"
+export { applyCorrelation } from "./correlation-request.policy"
 export { LoggingLogEvent } from "./logging.log-events"
 export { LoggingModule } from "./logging.module"
 export type { Logger } from "./logging.port"

package/templates/be/skeleton/src/modules/platform/primitives/record.policy.spec.ts

@@ -1,12 +1,24 @@
+import { Test } from "@nestjs/testing"
 import { isRecord } from "./record.policy"
 
+const RECORD_POLICY: unique symbol = Symbol("primitives.record")
+
 describe("isRecord", () => {
+    let subject: typeof isRecord
+
+    beforeEach(async () => {
+        const moduleRef = await Test.createTestingModule({
+            providers: [{ provide: RECORD_POLICY, useFactory: () => isRecord }],
+        }).compile()
+        subject = moduleRef.get<typeof isRecord>(RECORD_POLICY)
+    })
+
     it("narrows non-null objects before provider fields are read", () => {
-        expect(isRecord({ status: 200 })).toBe(true)
-        expect(isRecord([])).toBe(true)
-        expect(isRecord(null)).toBe(false)
-        expect(isRecord(undefined)).toBe(false)
-        expect(isRecord("response")).toBe(false)
-        expect(isRecord(200)).toBe(false)
+        expect(subject({ status: 200 })).toBe(true)
+        expect(subject([])).toBe(true)
+        expect(subject(null)).toBe(false)
+        expect(subject(undefined)).toBe(false)
+        expect(subject("response")).toBe(false)
+        expect(subject(200)).toBe(false)
     })
 })

package/templates/be/skeleton-lite/src/modules/platform/database/index.ts

@@ -5,4 +5,3 @@ export type { DatabaseConnectionOptions } from "./database.options"
 export { PRIMARY_DATA_SOURCE } from "./database.port"
 export { DATABASE_ERROR_KINDS } from "./errors/database.error"
 export { parsePrimaryDatabaseConfig } from "./primary.config"
-export { BATCH_ROWS } from "./database.sql"

package/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx

@@ -21,7 +21,7 @@ export const SignInFormBase = (props: SignInFormBaseProps) => (
             <Input id="sign-in-email" name="email" label={props.props.emailLabel} kind="email" isRequired />
             <Input id="sign-in-password" name="password" label={props.props.passwordLabel} kind="password" isRequired />
             {props.props.failure === undefined ? null : <Text live="assertive">{props.props.failure}</Text>}
-            <Button type="submit" variant="primary" isPending={props.state === "working"}>
+            <Button type="submit" intent="commit" isPending={props.state === "working"}>
                 {props.props.submitLabel}
             </Button>
         </Form>

package/templates/fe/skeleton/apps/__app__/src/components/blocks/SignOutButton/component.tsx

@@ -14,7 +14,7 @@ export interface SignOutButtonBaseProps {
 export const SignOutButtonBase = (props: SignOutButtonBaseProps) => (
     <>
         <Text>{props.props.principal}</Text>
-        <Button variant="secondary" isPending={props.props.pending} onPress={props.on.press}>
+        <Button intent="neutral" isPending={props.props.pending} onPress={props.on.press}>
             {props.props.label}
         </Button>
     </>

package/templates/fe/skeleton/apps/__app__/src/features/overlays/AppGuideOverlay/component.tsx

@@ -21,7 +21,7 @@ export const AppGuideOverlayBase = (props: AppGuideOverlayBaseProps) => (
         title={props.props.title}
         closeLabel={props.props.closeLabel}
         trigger={
-            <Button variant="secondary" startContent={<Icon />}>
+            <Button intent="neutral" startContent={<Icon />}>
                 {props.props.triggerLabel}
             </Button>
         }

package/templates/fe/skeleton/apps/__app__/src/modules/toast/toast.tsx

@@ -10,12 +10,12 @@ import type { ReactNode } from "react"
 /** The options a status toast takes: HeroUI's, minus the variant the status already names. */
 type StatusToastOptions = Parameters<typeof heroToast.success>[1]
 
-/** The one indicator of each status, from the app's one icon set. */
+/** The one indicator of each status, from the app's one icon set; HeroUI's toast variant colours it through currentColor. */
 const INDICATOR: Record<"success" | "danger" | "warning" | "info", ReactNode> = {
-    success: <CheckCircleIcon className="size-6 text-success-soft-foreground" />,
-    danger: <XCircleIcon className="size-6 text-danger-soft-foreground" />,
-    warning: <ExclamationTriangleIcon className="size-6 text-warning-soft-foreground" />,
-    info: <InformationCircleIcon className="size-6 text-accent" />,
+    success: <CheckCircleIcon className="size-6" />,
+    danger: <XCircleIcon className="size-6" />,
+    warning: <ExclamationTriangleIcon className="size-6" />,
+    info: <InformationCircleIcon className="size-6" />,
 }
 
 /** The app's toast: HeroUI's imperative toast with the status indicator injected; the region is mounted by the providers. */

package/templates/fe/skeleton/apps/landing/src/features/pages/LandingPage/component.tsx

@@ -17,7 +17,7 @@ export const LandingPageBase = (props: LandingPageBaseProps) => (
     <>
         <Heading level={1}>{props.props.title}</Heading>
         <Text tone="muted">{props.props.lede}</Text>
-        <Button href={props.props.appHref} variant="primary">
+        <Button href={props.props.appHref} intent="commit">
             {props.props.openApp}
         </Button>
     </>

package/templates/fe/skeleton/packages/__project__-ui/src/composites/SiteShell/classNames.ts

@@ -1,4 +1,4 @@
-/** The shell's frame: a full-height column on the theme's page colours. */
+/** The shell's frame: a full-height column; colours come from Grammar's root. */
 export const siteShellClassNames = {
-    frame: "flex min-h-screen flex-col bg-background text-foreground",
+    frame: "flex min-h-screen flex-col",
 } as const

package/templates/fe/skeleton/packages/__project__-ui/src/composites/SiteShell/index.tsx

@@ -14,6 +14,6 @@ type SiteShellProps = {
 
 /**
  * The document chrome both apps share: Grammar's Common boundary, the brand header (the top bar carrying the wordmark that links
- * home), then the routed body in the shell's main landmark at reading measure. Colours are the theme's semantic tokens.
+ * home), then the routed body in the shell's main landmark at reading measure.
  */
 {{> fe/common/site-shell.tsx.partial}}

package/templates/fe/skeleton-lite/apps/web/src/components/composites/SiteShell/classNames.ts

@@ -1,4 +1,4 @@
-/** The shell's frame: a full-height column on the theme's page colours. */
+/** The shell's frame: a full-height column; colours come from Grammar's root. */
 export const siteShellClassNames = {
-    frame: "flex min-h-screen flex-col bg-background text-foreground",
+    frame: "flex min-h-screen flex-col",
 } as const

package/templates/be/skeleton/src/modules/platform/http/graphql-call.mapper.spec.ts

@@ -1,92 +0,0 @@
-import { Test } from "@nestjs/testing"
-import { mock } from "@starci/jest-preset"
-import type { HttpClient } from "./http.port"
-import { callGraphql } from "./graphql-call.mapper"
-
-const SUBJECT: unique symbol = Symbol("http/graphql-call.mapper")
-const subjectFunctions = () => ({ callGraphql })
-
-const build = async () => {
-    const moduleRef = await Test.createTestingModule({
-        providers: [{ provide: SUBJECT, useFactory: subjectFunctions }],
-    }).compile()
-    return moduleRef.get<ReturnType<typeof subjectFunctions>>(SUBJECT)
-}
-
-describe("callGraphql", () => {
-    it("sends the operation and reads its data and string error codes", async () => {
-        const subject = await build()
-
-        const http = mock<HttpClient>()
-        http.request.mockResolvedValue({
-            status: 200,
-            body: {
-                data: { order: { id: "order-1" } },
-                errors: [
-                    { extensions: { code: "ORDER_STALE" } },
-                    { extensions: { code: 7 } },
-                    { extensions: null },
-                    "malformed",
-                ],
-            },
-        })
-
-        await expect(
-            subject.callGraphql(http, {
-                correlationId: "request-1",
-                url: "https://order.test/graphql",
-                query: "query Order($id: ID!) { order(id: $id) { id } }",
-                variables: { id: "order-1" },
-                headers: { authorization: "Bearer token" },
-                timeoutMs: 2500,
-            }),
-        ).resolves.toEqual({ data: { order: { id: "order-1" } }, errorCodes: ["ORDER_STALE"] })
-
-        expect(http.request).toHaveBeenCalledWith({
-            correlationId: "request-1",
-            method: "POST",
-            url: "https://order.test/graphql",
-            headers: { authorization: "Bearer token" },
-            body: {
-                query: "query Order($id: ID!) { order(id: $id) { id } }",
-                variables: { id: "order-1" },
-            },
-            timeoutMs: 2500,
-        })
-    })
-
-    it("returns an empty answer when data and errors do not have GraphQL shapes", async () => {
-        const subject = await build()
-
-        const http = mock<HttpClient>()
-        http.request.mockResolvedValue({ status: 200, body: { data: "malformed", errors: {} } })
-
-        await expect(
-            subject.callGraphql(http, {
-                correlationId: "request-1",
-                url: "https://order.test/graphql",
-                query: "query Health { health }",
-                timeoutMs: 1000,
-            }),
-        ).resolves.toEqual({ data: undefined, errorCodes: [] })
-    })
-
-    it.each([undefined, null, "not a response"])(
-        "returns null when the response body is not an object (%p)",
-        async (body) => {
-            const subject = await build()
-
-            const http = mock<HttpClient>()
-            http.request.mockResolvedValue({ status: 502, body })
-
-            await expect(
-                subject.callGraphql(http, {
-                    correlationId: "request-1",
-                    url: "https://order.test/graphql",
-                    query: "query Health { health }",
-                    timeoutMs: 1000,
-                }),
-            ).resolves.toBeNull()
-        },
-    )
-})

package/templates/be/skeleton/src/modules/platform/http/graphql-call.mapper.ts

@@ -1,52 +0,0 @@
-import { isRecord } from "@modules/platform/primitives"
-import type { HttpClient } from "./http.port"
-
-/** One GraphQL operation sent to another service. */
-export interface GraphqlCall {
-    /** The correlation id of the request or delivery causing this operation. */
-    readonly correlationId: string
-    /** The GraphQL endpoint URL. */
-    readonly url: string
-    /** The operation text. */
-    readonly query: string
-    /** The operation variables. */
-    readonly variables?: Readonly<Record<string, unknown>>
-    /** Extra request headers, such as the bearer token to forward. */
-    readonly headers?: Readonly<Record<string, string>>
-    /** How long to wait for the answer. */
-    readonly timeoutMs: number
-}
-
-/** What a GraphQL service answered: the data object and the codes of the errors it reported. */
-export interface GraphqlAnswer {
-    /** The `data` object, undefined when the operation failed before producing one. */
-    readonly data: Readonly<Record<string, unknown>> | undefined
-    /** The `extensions.code` of every reported error. */
-    readonly errorCodes: ReadonlyArray<string>
-}
-
-/** What a GraphQL call yields: the answer, or null when the body is not a GraphQL response at all. */
-export type GraphqlCallResult = GraphqlAnswer | null
-
-const codesOf = (errors: unknown): Array<string> =>
-    Array.isArray(errors)
-        ? errors.flatMap((error): Array<string> => {
-              const code: unknown = isRecord(error) && isRecord(error.extensions) ? error.extensions.code : undefined
-              return typeof code === "string" ? [code] : []
-          })
-        : []
-
-/** Sends a GraphQL operation and reads the answer; null when the body is not a GraphQL response at all. */
-export const callGraphql = async (http: HttpClient, call: GraphqlCall): Promise<GraphqlCallResult> => {
-    const response = await http.request({
-        correlationId: call.correlationId,
-        method: "POST",
-        url: call.url,
-        ...(call.headers === undefined ? {} : { headers: call.headers }),
-        body: { query: call.query, variables: call.variables },
-        timeoutMs: call.timeoutMs,
-    })
-    const body = response.body
-    if (!isRecord(body)) return null
-    return { data: isRecord(body.data) ? body.data : undefined, errorCodes: codesOf(body.errors) }
-}