@starci/hfs 4.7.46 → 4.8.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 4.8.0 - 2026-10-27
+
+- Removed: the Heritage family from the bundled Grammar catalog.
+- Changed: the bundled canon pins name each @starci package by its folder in starci-harness (`source: packages/<name>/package.json`) at the versions there; `@starci/cli` is a registry-only pin.
+- Removed: the specs that exercised the legacy runtime's own scripts (css-rules, grammar-knowledge, grammar-union-census, grammar-vendor-repaints, ui-proof-*); that code is not part of this package.
+- Changed: the package lives in github.com/starci183/starci-harness under `packages/` and publishes from there; its bundled `runtime/` is committed source, edited in place (no generator, no `prepack`/`pretest` hook).
+- Changed: owner ruling: the Grammar catalog has exactly two families, `core` and `offset-pop`. `grammarLintFor`,
+  `grammarFamilyFor`, `grammarContractFor`, `resolveGrammarFamily` and the code-pattern family binding
+  (`familyCanons.core`) answer by those ids; `starci app` scaffolds `sides.fe.grammar: core`; the core lint package is
+  `@starci/eslint-grammar-core` with `coreGrammarConfig`, and the knowledge folder is `knowledge/grammars/core`.
+- Removed: `starci` and `starci-core` are not family ids and have no alias; a selection naming them is refused.
+
+## 4.7.47 - 2026-10-27
+
+- Fixed: the rendered stack escapes every literal dollar once more, so a secret-reading command or healthcheck survives the second interpolation of docker stack deploy.
+
 ## 4.7.46 - 2026-10-26
 
 - Changed: owner ruling push-main-after-scoped-check reaches product apps: the generated pre-push hook passes a fast-forward main push when the hooks pass and the secret scan is clean, a v* tag must be annotated, and app CI runs on pushes to main.

package/README.md

@@ -192,15 +192,10 @@ The upload authenticates with GitHub's OIDC token: the managed `ci.yml` job has
 
 ## Maintaining the bundle
 
-`runtime/` is a byte copy of the slot loader files, the pins, and the import closure of `scripts/hfs/check.mjs` and
-`scripts/hfs/architecture.mjs` (computed by `scripts/hfs/sync-runtime.mjs`, so a new import of the machine is bundled without
-editing a list), plus the catalog slice of every code `starci app check` can emit: its own and the machine's (`ARCHITECTURE_RULE_IDS`,
-derived from the machine's rule id lists). After changing any of those files, `knowledge/hfs/slots.yaml`,
-`knowledge/hfs/canon-pins.yaml`, `knowledge/patterns/fe/folder.yaml` or the catalog entries of those codes, run `starci release sync-runtime`;
-`starci release sync-runtime --check` fails on a stale copy. Bump `version` here and in the pin when the behaviour changes.
-
-The examples workflow (`.github/workflows/examples.yml`) runs `starci app lint` of this CLI at the root of every `examples/*`
-app with an `hfs.json` (each `examples/<app>` root) and fails on any finding or any tool that could not run. This includes the ESLint canons and repository checks also run by `starci app check`, plus stylelint over the frontend stylesheets.
+`runtime/` holds the slot loader files, the pins, the import closure of `scripts/hfs/check.mjs` and
+`scripts/hfs/architecture.mjs`, and the catalog slice of every code `starci app check` can emit. It is committed source of
+this package, edited in place ([packages/README.md](../README.md) says how the bundled copies move together). Bump
+`version` here and in the pin when the behaviour changes.
 
 ## Serving knowledge to other packages
 

package/package.json

@@ -1,9 +1,19 @@
 {
   "name": "@starci/hfs",
-  "version": "4.7.46",
+  "version": "4.8.0",
   "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
   "type": "module",
   "license": "MIT",
+  "author": "starci183",
+  "homepage": "https://github.com/starci183/starci-harness/tree/main/packages/hfs#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/starci183/starci-harness.git",
+    "directory": "packages/hfs"
+  },
+  "bugs": {
+    "url": "https://github.com/starci183/starci-harness/issues"
+  },
   "private": false,
   "exports": {
     ".": "./src/main.mjs",
@@ -60,10 +70,6 @@
     "access": "public"
   },
   "scripts": {
-    "sync": "node ../../scripts/hfs/sync-runtime.mjs",
-    "sync:check": "node ../../scripts/hfs/sync-runtime.mjs --check",
-    "prepack": "node prep-runtime.mjs",
-    "pretest": "node prep-runtime.mjs",
     "test": "node --test \"src/*.spec.mjs\""
   }
 }

package/runtime/knowledge/grammars/{starci → core}/playbook.yaml

@@ -1,5 +1,5 @@
 schema: starci/knowledge-source@1
-id: grammar.starci.playbook
+id: grammar.core.playbook
 title: StarCi Core — playbook
 purpose: |
   Which idioms a business shape asks for, and what a supplied reference is allowed to contribute to
@@ -12,7 +12,7 @@ purpose: |
   has yet shown them twice; `guidance` holds the rules every Core app built on them follows.
 appliesTo:
   - grammar
-family: starci
+family: core
 provenance:
   publicEntry: "@starci/grammar/common"
   package: "@starci/grammar"
@@ -269,7 +269,7 @@ shapes:
           by presentation.groupIdentity.
     notes: |
       FE-RULE-OWNERSHIP in knowledge/patterns/fe/index.yaml separates universal app-shell semantics
-      from these family APIs, values, shapes and effects. @starci/eslint-grammar-starci owns their
+      from these family APIs, values, shapes and effects. @starci/eslint-grammar-core owns their
       code checks. Inspect installed Grammar exports and the running shell when proving the recipe.
 
 readingSteps:

package/runtime/knowledge/grammars/index.yaml

@@ -24,7 +24,7 @@ guidance:
       Do not treat this catalog as selecting a default Grammar family. Family choice belongs to the
       current design specification and its explicit sides.fe.grammar declaration.
     rationale: |
-      Silent fallback to StarCi would invent product direction and override an absent/ambiguous design.
+      Silent fallback to a family would invent product direction and override an absent/ambiguous design.
   - id: verify-before-use
     requirement: |
       Before applying snapshot APIs or recorded gaps, inspect the selected repository's package
@@ -47,11 +47,11 @@ topics:
       Generated DNA snapshot of the `@starci/grammar/common` public entry: custom properties,
       the 110 renderers of its registry, their classes, stamped rule ids and recorded gaps. The DNA owns the observed package
       version and source inventory. Common supplies anatomy, not colour. The snapshot is drift-checked.
-  - id: starci
-    path: starci/index.yaml
-    title: StarCi Core Grammar
+  - id: core
+    path: core/index.yaml
+    title: Core Grammar
     summary: |
-      Historical snapshot of the StarCi Core family — DNA, idioms, playbook (including composing the
+      Historical snapshot of the core family — DNA, idioms, playbook (including composing the
       0.5.0 forms, overlays and navigation chrome) and family boundaries.
   - id: offset-pop
     path: offset-pop/index.yaml
@@ -61,16 +61,7 @@ topics:
       shadow, one pink decision accent with a text-safe accent for text — with DNA, idioms, a
       mobile-first playbook for playful learning or consumer apps, and family boundaries including two
       decisions flagged for the family owner.
-  - id: heritage
-    path: heritage/DNA.yaml
-    title: Heritage Grammar
-    summary: |
-      Generated snapshot of the Heritage family's parity declaration, arrangement, scoped tokens and Common renderers.
 families:
-  - id: heritage
-    title: heritage
-    contractRef: common
-    packageSnapshot: heritage/DNA.yaml
   - id: common
     title: common
     componentContract:
@@ -85,18 +76,18 @@ families:
       (`defineGrammarFamily`), not a family that ships a palette, so `authority`, `reusableStyle`,
       `productComposition` and `index` have nothing to name here. Universal semantics, renderer anatomy,
       state and accessibility remain owned by knowledge/ui.
-  - id: starci
-    title: starci
+  - id: core
+    title: core
     contractRef: common
     lint:
-      package: '@starci/eslint-grammar-starci'
-      factory: starciGrammarConfig
+      package: '@starci/eslint-grammar-core'
+      factory: coreGrammarConfig
       prefix: starci-grammar
-    authority: starci/family.yaml
-    packageSnapshot: starci/DNA.yaml
-    reusableStyle: starci/idioms.yaml
-    productComposition: starci/playbook.yaml
-    index: starci/index.yaml
+    authority: core/family.yaml
+    packageSnapshot: core/DNA.yaml
+    reusableStyle: core/idioms.yaml
+    productComposition: core/playbook.yaml
+    index: core/index.yaml
   - id: offset-pop
     title: offset-pop
     contractRef: common

package/runtime/knowledge/grammars/offset-pop/playbook.yaml

@@ -289,14 +289,14 @@ guidance:
 presentation:
   font:
     ownership: FE-RULE-OWNERSHIP
-    inherits: starci
+    inherits: core
     contract: |
       Offset Pop keeps Common typography renderers and props. Its font proof reads the shared Common
       rank-to-renderer recipes in the StarCi playbook; the Offset Pop stylesheet owns its family palette
       and display treatment.
   padding:
     ownership: FE-RULE-OWNERSHIP
-    inherits: starci
+    inherits: core
     contract: |
       Offset Pop keeps the same Common spacing and component geometry. Its padding proof reads the
       shared Common recipes declared in the StarCi playbook; it supplies no replacement inset scale.

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -21,7 +21,7 @@ pins:
     install: registry
     side: fe
     source: packages/heroicons/package.json
-    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-starci (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
+    why: 'StarCi custom Heroicons-compatible cuts; eslint-grammar-core (icon.mjs) admits @starci/heroicons/24/outline and /16/solid as icon sources, so an app that uses them gets this exact version.'
   '@starci/event-stream':
     version: 0.1.0
     group: starci
@@ -30,61 +30,61 @@ pins:
     source: packages/event-stream/package.json
     why: 'the one server-sent-events client of every front end (fe-stack event-stream, owner:event-stream-package): the transport client layer (modules/api/sse/clients) creates one instance for the app with the bearer token source and the stream operations follow on it; it carries Last-Event-ID resume, the capped doubling backoff, the heartbeat timeout, the single 401 renewal and the useSWRSubscription adapter, so no app keeps a hand-written reader.'
   '@starci/grammar':
-    version: 0.12.13
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.4.55
+    version: 3.4.57
     group: starci
     install: registry
     side: be
-    source: packages/eslint/be/package.json
+    source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.1.9
+    version: 9.2.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/fe/package.json
+    source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
-  '@starci/eslint-grammar-starci':
-    version: 0.12.13
+  '@starci/eslint-grammar-core':
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/grammar-starci/package.json
+    source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.12.13
+    version: 0.13.0
     group: starci
     install: registry
     side: fe
-    source: packages/eslint/grammar-offset-pop/package.json
+    source: packages/eslint-grammar-offset-pop/package.json
     why: 'the Offset Pop Grammar component API lint, versioned with @starci/grammar; its shared component contract comes from the StarCi family lint without copying rules.'
   '@starci/stylelint-canon':
-    version: 2.0.13
+    version: 2.1.0
     group: starci
     install: registry
     side: fe
-    source: packages/stylelint/package.json
+    source: packages/stylelint-canon/package.json
     why: 'the front-end stylelint canon: no-class-selector refuses a compound class selector (`div.card`); the brand layer accepts `--font-sans` and `--font-mono`; status-contrast measures the HeroUI soft pairs per theme; brand-layer-shape reads the shared :root,.light,.dark block and the info soft pair; appTokens come from loadAppTokens(import.meta.url) for the managed one-line stylelint.config.mjs.'
   '@starci/tsconfig':
-    version: 2.0.7
+    version: 2.0.8
     group: starci
     install: registry
     side: both
     source: packages/tsconfig/package.json
   '@starci/prettier-config':
-    version: 1.0.4
+    version: 1.0.5
     group: starci
     install: registry
     side: both
     source: packages/prettier-config/package.json
   '@starci/jest-preset':
-    version: 2.3.6
+    version: 2.3.7
     group: starci
     install: registry
     side: be
@@ -98,14 +98,13 @@ pins:
     source: packages/test-world/package.json
     why: 'the shared e2e library of every back end (R47, R48), a devDependency of every back end: the warm stack behind toxiproxy, the network-edge fakes, the Nest boot, the typed useTestWorld handle, useSandbox for contract specs and the outage lock. Kafka is real own infra (the one digest-pinned apache/kafka KRaft image, a broker listener and proxy per slot, slot-prefixed topics, consumer groups and client ids) and Postgres is schema-per-context (a schema and a login role per context in a shared database). Each worker has its own data slot (<ns>_w<k>) with its own databases, Keycloak realm, leased Redis DB, bucket/collection/topic prefixes, fakes host, toxiproxy proxies and outage lock; a run provisions min(jest workers, workers cap, default 2) slots, and state file protocol 2 pairs exactly with @starci/jest-preset (TEST_WORLD_PAIR_MISMATCH otherwise). A modules world boots real peer apps beside its modules, world.apps.<name>.during(fn) is the outage of a peer app, w.keycloak.clientSecret(client) answers the run-generated secret of a confidential realm client, world.keycloak.events/sessions read the realm user events and live sessions, world.infra.postgresql.connection(name) takes one database connection down while the others serve, and world.resolve and scope.resolve take any Nest token. Every path a declaration names (`stack`, seeds, the realm, Dockerfiles) resolves from the app root (the directory of hfs.json); the globalSetup registers the path aliases as TypeScript resolves them. Its CLI main is exported at ./cli for starci app stack.'
   '@starci/cli':
-    version: 1.7.46
+    version: 1.7.47
     group: starci
     install: registry
     side: both
-    source: packages/cli/package.json
     why: 'the only StarCi command package; product repositories install it for starci app, while @starci/hfs remains its pinned transitive implementation.'
   '@starci/hfs':
-    version: 4.7.46
+    version: 4.8.0
     group: starci
     install: registry
     side: both
@@ -406,7 +405,7 @@ pins:
     version: 2.2.0
     group: ui
     side: fe
-    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-starci (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
+    why: 'the base of the one application icon set (fe-stack icons, with @starci/heroicons for the glyphs it lacks); eslint-grammar-core (icon.mjs) admits @heroicons/react/24/outline and /16/solid.'
   '@dicebear/core':
     version: 10.4.0
     group: ui

package/runtime/knowledge/hfs/fe-stack.yaml

@@ -251,7 +251,7 @@ concerns:
     why: the canon lint and format configuration.
   - id: grammar-lint
     tier: opt
-    packages: ['@starci/eslint-grammar-starci', '@starci/eslint-grammar-offset-pop']
+    packages: ['@starci/eslint-grammar-core', '@starci/eslint-grammar-offset-pop']
     home: [fe.source-root-pinned]
     pattern: FE-RULE-OWNERSHIP
     forbids: []

package/runtime/knowledge/hfs/rules.yaml

@@ -29,7 +29,7 @@ gates:
 enforcerKinds:
   eslint-be: a rule of the plugin @starci/eslint-canon-be (id without the plugin prefix)
   eslint-fe: a universal rule of @starci/eslint-canon-fe (id without the plugin prefix)
-  eslint-grammar-starci: a selected Grammar family rule sharing the common component API, resolved through the family canon binding (id without the plugin prefix; FE-RULE-OWNERSHIP)
+  eslint-grammar-core: a selected Grammar family rule sharing the common component API, resolved through the family canon binding (id without the plugin prefix; FE-RULE-OWNERSHIP)
   stylelint: a rule of the @starci/stylelint-canon package
   machine: a check of the architecture machine (scripts/hfs/architecture), which reads the import graph
   hfs: a check of the hfs CLI that reads the repository tree, configuration, contracts or catalogs
@@ -1273,49 +1273,49 @@ rules:
       - {kind: stylelint, id: breakpoint-scale}
       - {kind: stylelint, id: source-resolves}
       - {kind: eslint-fe, id: no-raw-brand-value}
-      - {kind: eslint-grammar-starci, id: no-fractional-step}
+      - {kind: eslint-grammar-core, id: no-fractional-step}
       - {kind: eslint-fe, id: no-arbitrary-value}
-      - {kind: eslint-grammar-starci, id: no-hand-rolled-heading}
-      - {kind: eslint-grammar-starci, id: no-unresolved-token-class}
-      - {kind: eslint-grammar-starci, id: no-heading-tag-outside-heading-component}
-      - {kind: eslint-grammar-starci, id: status-text-uses-soft-foreground}
+      - {kind: eslint-grammar-core, id: no-hand-rolled-heading}
+      - {kind: eslint-grammar-core, id: no-unresolved-token-class}
+      - {kind: eslint-grammar-core, id: no-heading-tag-outside-heading-component}
+      - {kind: eslint-grammar-core, id: status-text-uses-soft-foreground}
     proves:
       - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
       - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
       - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
     exemplifiedBy:
       - {path: packages/hfs/templates/fe/skeleton-lite/apps/web/src/app/globals.css, edition: lite}
       - {path: packages/hfs/templates/fe/skeleton/apps/app/src/app/globals.css, edition: full}
       - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
       - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
       - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
     witness:
       - {path: packages/stylelint/source-resolves.spec.mjs, editions: [lite, full], codes: [FE_STYLE_SOURCE_UNRESOLVED]}
       - {path: packages/eslint/fe/brand-values.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
       - {path: packages/eslint/fe/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
-      - {path: packages/eslint/grammar-starci/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/status-colors.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/typography.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
+      - {path: packages/eslint/grammar-core/tokens.spec.mjs, editions: [lite, full], codes: [FE_STYLE_TOKEN_ONLY]}
   - id: R62
     code: "FE_NATIVE_FORM_CONTROL"
     editions: [lite, full]
     docs: [docs/architecture.md#r62, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     proves:
-      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
+      - {path: packages/eslint/grammar-core/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, editions: [lite, full]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
+      - {path: packages/eslint/grammar-core/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/hfs/templates/fe/skeleton-lite/apps/web/src/features/pages/AppHomePage/component.tsx, edition: lite}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx, edition: full}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/eslint/grammar-starci/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
+      - {path: packages/eslint/grammar-core/r62-structural-elements-coverage.spec.mjs, editions: [lite, full], codes: [FE_NATIVE_FORM_CONTROL]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, edition: lite, codes: [FE_NATIVE_FORM_CONTROL, FE_NATIVE_IMAGE]}
       - {path: packages/eslint/fe/r62-native-controls-coverage.spec.mjs, edition: full, codes: [FE_NATIVE_FORM_CONTROL, FE_NATIVE_IMAGE]}
     law: "Product tiers compose the selected Grammar renderers for form controls, images and structural elements that the Grammar owns; they never reproduce those renderers with raw HTML."
@@ -1325,7 +1325,7 @@ rules:
     enforcers:
       - {kind: eslint-fe, id: no-native-form-control}
       - {kind: eslint-fe, id: no-native-img}
-      - {kind: eslint-grammar-starci, id: no-raw-structural-element}
+      - {kind: eslint-grammar-core, id: no-raw-structural-element}
       - {kind: eslint-fe, id: image-has-size}
 
   - id: R63
@@ -1878,7 +1878,7 @@ rules:
       - {kind: eslint-fe, id: base-props-atom}
       - {kind: eslint-fe, id: base-import-pair}
       - {kind: eslint-fe, id: no-data-status-shape}
-      - {kind: eslint-grammar-starci, id: slot-status-through-slotview}
+      - {kind: eslint-grammar-core, id: slot-status-through-slotview}
       - {kind: eslint-fe, id: presentational-purity}
       - {kind: eslint-fe, id: connected-block-has-presentational-twin}
       - {kind: eslint-fe, id: no-resting-twin-component}
@@ -1891,18 +1891,18 @@ rules:
     editions: [lite, full]
     docs: [docs/architecture.md#r92, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     proves:
-      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
+      - {path: packages/eslint/grammar-core/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
+      - {path: packages/eslint/grammar-core/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/component.tsx, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/eslint/grammar-starci/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
+      - {path: packages/eslint/grammar-core/r92-slot-status-coverage.spec.mjs, editions: [lite, full], codes: [FE_COMPONENT_API]}
       - {path: packages/eslint/fe/r92-fetch-barrel.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r92-component-surface-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r56-r92-graph-coverage.spec.mjs, editions: [lite, full]}
@@ -1913,29 +1913,29 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_VENDOR_BOUNDARY", "ARCH_GRAMMAR_CONTRACT_INVALID", "ARCH_GRAMMAR_EXPORT_BYPASS"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: no-vendor-icon-outside-icon-leaf}
-      - {kind: eslint-grammar-starci, id: heroicons-is-the-glyph-vendor}
-      - {kind: eslint-grammar-starci, id: no-off-scale-glyph-size}
-      - {kind: eslint-grammar-starci, id: no-icon-size-class}
-      - {kind: eslint-grammar-starci, id: destructive-menu-entry-needs-danger-tone}
-      - {kind: eslint-grammar-starci, id: no-decorative-icon-in-metric-cell}
-      - {kind: eslint-grammar-starci, id: vendor-primitive-has-named-owner}
+      - {kind: eslint-grammar-core, id: no-vendor-icon-outside-icon-leaf}
+      - {kind: eslint-grammar-core, id: heroicons-is-the-glyph-vendor}
+      - {kind: eslint-grammar-core, id: no-off-scale-glyph-size}
+      - {kind: eslint-grammar-core, id: no-icon-size-class}
+      - {kind: eslint-grammar-core, id: destructive-menu-entry-needs-danger-tone}
+      - {kind: eslint-grammar-core, id: no-decorative-icon-in-metric-cell}
+      - {kind: eslint-grammar-core, id: vendor-primitive-has-named-owner}
       - {kind: eslint-fe, id: grammar-entry}
       - {kind: machine, id: grammar, at: scripts/hfs/architecture/frontend-grammar.mjs}
     editions: [lite, full]
     docs: ["docs/code-pattern-enforcement.md#r93-vendor-and-grammar-ownership", knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     templateNa: "Vendor boundary violations and installed Grammar package contracts are checked against consumer ownership; no managed template scaffolds a vendor install or a forbidden import."
     proves:
-      - packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs
+      - packages/eslint/grammar-core/r93-vendor-coverage.spec.mjs
       - packages/eslint/fe/r93-grammar-ownership.spec.mjs
-      - packages/eslint/grammar-starci/menu-entries.spec.mjs
+      - packages/eslint/grammar-core/menu-entries.spec.mjs
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/grammar-core/r93-vendor-coverage.spec.mjs, editions: [lite, full]}
       - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full]}
-      - {path: packages/eslint/grammar-starci/menu-entries.spec.mjs, editions: [lite, full]}
+      - {path: packages/eslint/grammar-core/menu-entries.spec.mjs, editions: [lite, full]}
     witness:
-      - {path: packages/eslint/grammar-starci/menu-entries.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
-      - {path: packages/eslint/grammar-starci/r93-vendor-coverage.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
+      - {path: packages/eslint/grammar-core/menu-entries.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
+      - {path: packages/eslint/grammar-core/r93-vendor-coverage.spec.mjs, editions: [lite, full], codes: [FE_VENDOR_BOUNDARY]}
       - {path: packages/eslint/fe/r93-grammar-ownership.spec.mjs, editions: [lite, full], codes: [ARCH_GRAMMAR_CONTRACT_INVALID, ARCH_GRAMMAR_EXPORT_BYPASS]}
   - id: R94
     code: "FE_SLOT_FILE_ROLE"
@@ -5006,20 +5006,20 @@ rules:
     enforcers:
       - {kind: eslint-fe, id: no-copy-in-call}
       - {kind: eslint-fe, id: no-alert}
-      - {kind: eslint-grammar-starci, id: no-inline-svg-outside-brand-mark-leaf}
+      - {kind: eslint-grammar-core, id: no-inline-svg-outside-brand-mark-leaf}
     editions: [lite, full]
     docs: [docs/quality-bar.md#r286, knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
     exemplifiedBy:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-core/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/components/leaves/Icon/index.tsx, editions: [lite, full]}
       - {path: packages/hfs/templates/fe/skeleton/apps/__app__/src/modules/toast, editions: [lite, full]}
     proves:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-core/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
     witness:
       - {path: packages/eslint/fe/translation.spec.mjs, editions: [lite, full], codes: [FE_COPY_IN_CALL, FE_NO_ALERT]}
-      - {path: packages/eslint/grammar-starci/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
+      - {path: packages/eslint/grammar-core/icon.spec.mjs, editions: [lite, full], codes: [FE_ICON_INLINE_SVG]}
 
   - id: R287
     code: "FE_CALLBACK_SHAPE"
@@ -5476,19 +5476,19 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_APP_SHELL_FRAME"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: app-shell-frame}
+      - {kind: eslint-grammar-core, id: app-shell-frame}
     editions: [lite, full]
     docs:
       - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
       - {path: examples/full-app/fe/apps/app/src/features/layouts/ShopLayout/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/features/layouts/WorkspaceLayout/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_FRAME]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R314
     code: "FE_NAVBAR_CONTROL_SIZE"
@@ -5497,19 +5497,19 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CONTROL_SIZE"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: navbar-control-size}
+      - {kind: eslint-grammar-core, id: navbar-control-size}
     editions: [lite, full]
     docs:
       - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CONTROL_SIZE]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R315
     code: "FE_NAVBAR_CLUSTER"
@@ -5518,19 +5518,19 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CLUSTER"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: navbar-cluster}
+      - {kind: eslint-grammar-core, id: navbar-cluster}
     editions: [lite, full]
     docs:
       - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CLUSTER]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R316
     code: "FE_APP_SHELL_BOTTOM_TABS"
@@ -5539,19 +5539,19 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_APP_SHELL_BOTTOM_TABS"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: no-shell-bottom-tabs}
+      - {kind: eslint-grammar-core, id: no-shell-bottom-tabs}
     editions: [lite, full]
     docs:
       - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
       - {path: examples/full-app/fe/apps/app/src/features/layouts/ShopLayout/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/features/layouts/WorkspaceLayout/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_APP_SHELL_BOTTOM_TABS]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R317
     code: "FE_NAVBAR_CREATE"
@@ -5560,19 +5560,19 @@ rules:
     gates: [pre-commit, settle, land, ci]
     failureCodes: ["FE_NAVBAR_CREATE"]
     enforcers:
-      - {kind: eslint-grammar-starci, id: no-navbar-create}
+      - {kind: eslint-grammar-core, id: no-navbar-create}
     editions: [lite, full]
     docs:
       - knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP
       - {path: knowledge/ui/composition/app-shell.yaml, editions: [lite, full]}
     proves:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
     exemplifiedBy:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
       - {path: examples/full-app/fe/packages/ecommerce-ui/src/branches/WorkspaceNavbar/component.tsx, edition: full}
       - {path: examples/lite-app/fe/apps/web/src/components/branches/Navbar/component.tsx, edition: lite}
     witness:
-      - {path: packages/eslint/grammar-starci/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
+      - {path: packages/eslint/grammar-core/app-shell.spec.mjs, editions: [lite, full], codes: [FE_NAVBAR_CREATE]}
     templateNa: "The app composes its shell from product destinations and identity; full and lite example shells provide the reference."
   - id: R318
     code: "FE_NESTED_VARIANT"

package/runtime/modules/kernel/failure-codes.yaml

@@ -2130,7 +2130,7 @@ FE_APP_SHELL_BOTTOM_TABS:
   meaning_vi: "Khung ứng dụng tại <file> đặt điều hướng trong thanh tab dưới thay vì Sidebar drawer."
   causes_vi:
     - "Cấu trúc shell không theo canon ứng dụng."
-  nextStep_vi: "Dùng hàng mở drawer bên dưới navbar và Sidebar presentation=\"drawer\" (R316; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Dùng hàng mở drawer bên dưới navbar và Sidebar presentation=\"drawer\" (R316; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2140,7 +2140,7 @@ FE_APP_SHELL_FRAME:
   meaning_vi: "Khung ứng dụng tại <file> không giao bố cục và cuộn cho WorkspaceShell."
   causes_vi:
     - "Cấu trúc shell không theo canon ứng dụng."
-  nextStep_vi: "Ghép khung ứng dụng bằng WorkspaceShell viewport=\"fixed\" (R313; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Ghép khung ứng dụng bằng WorkspaceShell viewport=\"fixed\" (R313; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2237,7 +2237,7 @@ FE_COMPONENT_API:
     - "Component nhận className từ ngoài"
     - "Khối kết nối không có bản trình bày thuần"
     - "Trạng thái dữ liệu tự chế thay vì qua SlotView"
-  nextStep_vi: "Sửa chữ ký component theo luật drawing và tách phần trình bày; op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra (R92; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Sửa chữ ký component theo luật drawing và tách phần trình bày; op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra (R92; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2530,7 +2530,7 @@ FE_ICON_INLINE_SVG:
   causes_vi:
     - "Leaf Icon tự vẽ path hoặc SVG thay vì dùng Heroicons"
     - "Component vẽ SVG trực tiếp mà không phải leaf nhãn hiệu được khai báo"
-  nextStep_vi: "Thay glyph bằng Heroicons qua leaf Icon; nếu là nhãn hiệu, đặt nó trong leaf nhãn hiệu và khai báo đúng chủ của leaf (R286; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Thay glyph bằng Heroicons qua leaf Icon; nếu là nhãn hiệu, đặt nó trong leaf nhãn hiệu và khai báo đúng chủ của leaf (R286; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2561,7 +2561,7 @@ FE_NATIVE_FORM_CONTROL:
   meaning_vi: "`<tag>` thô ở `<file>`. Dùng renderer của grammar."
   causes_vi:
     - "Vi phạm luật R62: Không `<select>/<input>/<textarea>/<button>`, `<img>` thô và không thẻ cấu trúc thô (`<section>`, `<p>`, `<ul>`, `<h1>`...) ở tầng sản phẩm; dùng renderer grammar."
-  nextStep_vi: "Op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra và mục của luật trong tiêu chuẩn HFS; nợ cũ cần quyết định thiết kế nên op không thêm ngoại lệ, chỉ tách hoặc chuyển về đúng chủ (R62; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra và mục của luật trong tiêu chuẩn HFS; nợ cũ cần quyết định thiết kế nên op không thêm ngoại lệ, chỉ tách hoặc chuyển về đúng chủ (R62; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2581,7 +2581,7 @@ FE_NAVBAR_CLUSTER:
   meaning_vi: "Cụm navbar tại <file> không giữ thứ tự ngôn ngữ, giao diện, thông báo và tài khoản."
   causes_vi:
     - "Cấu trúc shell không theo canon ứng dụng."
-  nextStep_vi: "Ghép IconButton ngôn ngữ, Switch giao diện, IconButton chuông và AvatarButton theo đúng thứ tự (R315; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Ghép IconButton ngôn ngữ, Switch giao diện, IconButton chuông và AvatarButton theo đúng thứ tự (R315; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2591,7 +2591,7 @@ FE_NAVBAR_CONTROL_SIZE:
   meaning_vi: "Điều khiển trong navbar tại <file> không khai báo cùng cỡ control của Grammar."
   causes_vi:
     - "Cấu trúc shell không theo canon ứng dụng."
-  nextStep_vi: "Đặt size=\"control\" trên từng điều khiển trong thanh (R314; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Đặt size=\"control\" trên từng điều khiển trong thanh (R314; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2601,7 +2601,7 @@ FE_NAVBAR_CREATE:
   meaning_vi: "Navbar tại <file> chứa thao tác tạo mới thuộc nội dung trang."
   causes_vi:
     - "Cấu trúc shell không theo canon ứng dụng."
-  nextStep_vi: "Đưa thao tác tạo mới về trang sở hữu nó (R317; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Đưa thao tác tạo mới về trang sở hữu nó (R317; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -2953,8 +2953,8 @@ FE_STACK_FAMILY_LINT_MISSING:
   title_vi: "Front end dùng canon-fe 9 nhưng thiếu gói lint của họ Grammar đã chọn"
   meaning_vi: "hfs.json chọn sides.fe.grammar (starci hoặc offset-pop) và front end khai báo @starci/eslint-canon-fe 9 trở lên, nhưng không manifest nào khai báo gói lint của họ đó; từ canon-fe 9 các luật component Grammar nằm trong gói này, thiếu gói thì các luật ấy không chạy."
   causes_vi:
-    - "Nâng @starci/eslint-canon-fe lên 9 mà chưa thêm @starci/eslint-grammar-starci (Grammar StarCi) hoặc @starci/eslint-grammar-offset-pop (Grammar Offset Pop)."
-  nextStep_vi: "Thêm @starci/eslint-grammar-starci (hoặc @starci/eslint-grammar-offset-pop) cạnh @starci/eslint-canon-fe, ghép starciGrammarConfig({ hfs }) (hoặc offsetPopGrammarConfig({ hfs })) sau starciFeConfig({ hfs }) trong fe/eslint.config.mjs, hoặc chạy starci app sync."
+    - "Nâng @starci/eslint-canon-fe lên 9 mà chưa thêm @starci/eslint-grammar-core (Grammar StarCi) hoặc @starci/eslint-grammar-offset-pop (Grammar Offset Pop)."
+  nextStep_vi: "Thêm @starci/eslint-grammar-core (hoặc @starci/eslint-grammar-offset-pop) cạnh @starci/eslint-canon-fe, ghép coreGrammarConfig({ hfs }) (hoặc offsetPopGrammarConfig({ hfs })) sau starciFeConfig({ hfs }) trong fe/eslint.config.mjs, hoặc chạy starci app sync."
   owner: op-retry
   kind: check-finding
 
@@ -3011,7 +3011,7 @@ FE_STYLE_TOKEN_ONLY:
     - "@media dùng breakpoint ngoài thang của grammar"
     - "brand.css thiếu cặp mềm của một tông trạng thái ở sáng hoặc tối, chữ mềm dưới 3:1 trên nền nhạt hoặc nền trang, --foreground dưới 4.5:1, hoặc giá trị màu không phân giải được"
     - "Component tô chữ hoặc icon bằng text-success, text-danger, fill-warning, stroke-info (tông đặc) thay vì text-<tông>-soft-foreground"
-  nextStep_vi: "Op interface.implement bỏ CSS riêng, dùng component và token của grammar; giá trị màu thương hiệu chỉ khai ở modules/brand/brand.css cho cả sáng và tối, đủ cặp mềm cho mọi tông trạng thái; chữ và icon trạng thái dùng text-<tông>-soft-foreground (R61; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Op interface.implement bỏ CSS riêng, dùng component và token của grammar; giá trị màu thương hiệu chỉ khai ở modules/brand/brand.css cho cả sáng và tối, đủ cặp mềm cho mọi tông trạng thái; chữ và icon trạng thái dùng text-<tông>-soft-foreground (R61; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: other-op:interface.implement
   kind: check-finding
 
@@ -3130,7 +3130,7 @@ FE_VENDOR_BOUNDARY:
     - "Dùng bộ glyph thứ hai ngoài họ heroicons (Phosphor, Lucide, Iconify...)"
     - "Dùng kích thước biểu tượng ngoài thang"
     - "Primitive thư viện ngoài dùng trực tiếp ở nhiều nơi"
-  nextStep_vi: "Dùng lá icon và chủ sở hữu primitive có sẵn; op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra (R93; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-starci/README.md)."
+  nextStep_vi: "Dùng lá icon và chủ sở hữu primitive có sẵn; op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra (R93; FE-RULE-OWNERSHIP: knowledge/patterns/fe/index.yaml; packages/eslint/grammar-core/README.md)."
   owner: op-retry
   kind: check-finding
 
@@ -5007,7 +5007,7 @@ RT_GENERATED_BLOCK_STALE:
 RT_GENERATED_DRIFT:
   title: "Generated copy drifted"
   title_vi: "Bản sao sinh tự động bị lệch"
-  meaning_vi: "Một bản sao sinh tự động trong packages/hfs/runtime, packages/eslint/be/runtime hoặc packages/eslint/fe/runtime, packages/eslint/grammar-starci/runtime, packages/eslint/grammar-offset-pop/runtime khác với nội dung mà scripts/hfs/sync-runtime.mjs ghi ra từ nguồn duy nhất: thiếu, cũ, hoặc thừa tệp."
+  meaning_vi: "Một bản sao sinh tự động trong packages/hfs/runtime, packages/eslint/be/runtime hoặc packages/eslint/fe/runtime, packages/eslint/grammar-core/runtime, packages/eslint/grammar-offset-pop/runtime khác với nội dung mà scripts/hfs/sync-runtime.mjs ghi ra từ nguồn duy nhất: thiếu, cũ, hoặc thừa tệp."
   causes_vi:
     - "Sửa một tệp nguồn được đóng gói mà quên chạy sync-runtime"
     - "Sửa tay một tệp trong thư mục runtime/ của gói"

package/runtime/scripts/hfs/rule-catalog.mjs

@@ -12,7 +12,7 @@ import { fail } from './slot-errors.mjs';
 
 const HFS_RULES_FILE = 'knowledge/hfs/rules.yaml';
 const RULE_GATES = Object.freeze(['pre-commit', 'pre-push', 'settle', 'land', 'ci', 'sonar', 'runtime']);
-const ENFORCER_FAMILIES = Object.freeze(['eslint-be', 'eslint-fe', 'eslint-grammar-starci', 'stylelint', 'machine', 'hfs', 'work-validate', 'sonar', 'runtime']);
+const ENFORCER_FAMILIES = Object.freeze(['eslint-be', 'eslint-fe', 'eslint-grammar-core', 'stylelint', 'machine', 'hfs', 'work-validate', 'sonar', 'runtime']);
 const RULE_KINDS = Object.freeze(['codemod', 'lint', 'check', 'design']);
 const FINDING_CODE = /^[A-Z][A-Z0-9]*(_[A-Z0-9]+)+$/;
 const ENFORCER_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
@@ -346,7 +346,7 @@ export function loadRuleCatalog({ root = skillRoot, file = path.join(root, HFS_R
     /** The catalogued why code of a lint finding's rule id (`starci-be/<id>`, `starci-fe/<id>`), or undefined. */
     lintCode: (ruleId) => {
       const [plugin, id] = String(ruleId ?? '').split('/');
-      const kind = (plugin === 'starci-be' && 'eslint-be') || (plugin === 'starci-fe' && 'eslint-fe') || (plugin === 'starci-grammar' && 'eslint-grammar-starci') || null;
+      const kind = (plugin === 'starci-be' && 'eslint-be') || (plugin === 'starci-fe' && 'eslint-fe') || (plugin === 'starci-grammar' && 'eslint-grammar-core') || null;
       return kind ? list.find((rule) => rule.enforcers.some((enforcer) => enforcer.kind === kind && enforcer.id === id))?.code : undefined;
     },
     /** The rules one enforcer judges, e.g. forEnforcer('eslint-be', 'error-home'). */

package/runtime/scripts/lib/example-refs.mjs

@@ -10,6 +10,7 @@ import path from 'node:path';
 import { parseYaml } from '../../engine/yaml.mjs';
 import { validateAgainstSchema } from './json-schema.mjs';
 import { insidePath, samePath, slash } from './path-key.mjs';
+import { resolveGrammarFamily } from './grammar-lint.mjs';
 import { byCodeUnit } from './list.mjs';
 import { isLiteWorkRoot, workPathAllowed } from './work-edition.mjs';
 import { WORK_DIR_NAME } from './roots.mjs';
@@ -49,9 +50,15 @@ export const REFERENCE_APP_MANIFEST = `${EXAMPLES_ROOT}/full-app/hfs.json`;
 /** The example app whose installed tree an fe-kit peer link points at by default. */
 export const REFERENCE_EXAMPLE_APP = 'full-app';
 
-/** The grammar css families a product repository may declare (`[data-grammar-family="<id>"]`); the
- *  runtime's own product maps to the core sheet. */
-export const GRAMMAR_FAMILIES = Object.freeze({ starci: 'core', nivo: 'nivo', 'offset-pop': 'offset-pop' });
+/** The grammar css families a product repository may declare (`[data-grammar-family="<id>"]`), keyed by the
+ *  canonical catalog id; the runtime's own product maps to the core sheet. */
+export const GRAMMAR_FAMILIES = Object.freeze({ core: 'core', nivo: 'nivo', 'offset-pop': 'offset-pop' });
+
+/** A css family key through the Grammar catalog's alias table (`starci` reads as `core`); an id the catalog does not declare is kept. */
+export function grammarCssFamilyKey(family) {
+  if (typeof family !== 'string' || !family) return family;
+  try { return resolveGrammarFamily(family).id; } catch { return family; }
+}
 
 /** A feature-folder segment that is only the product's own name - no useful leaf (display-names pathLabel). */
 export const PRODUCT_NAME_SEGMENT = /^(nivo|starci|mia)[-\w]*$/i;

package/runtime/scripts/lib/grammar-lint.mjs

@@ -4,14 +4,27 @@ import { parseYamlCached } from './yaml-cached.mjs';
 
 const CATALOG_FILE = new URL('../../knowledge/grammars/index.yaml', import.meta.url);
 
+function readCatalog() {
+  return parseYamlCached(fs.readFileSync(CATALOG_FILE, 'utf8'));
+}
+
 function selectedFamily(family) {
   if (typeof family !== 'string' || !family.trim()) throw new Error('sides.fe.grammar must explicitly name the selected Grammar family');
-  const catalog = parseYamlCached(fs.readFileSync(CATALOG_FILE, 'utf8'));
+  const catalog = readCatalog();
   const matches = (catalog.families ?? []).filter(entry => entry.id === family);
   if (matches.length !== 1) throw new Error(`Grammar family ${family} has no declared lint contract in knowledge/grammars/index.yaml`);
   return { catalog, selected: matches[0] };
 }
 
+/**
+ * Resolve a selection to its declared family id; only a catalog family id resolves, there are no aliases.
+ * @param {string} family - The id an app or caller names (sides.fe.grammar).
+ * @returns {{ id: string }} The declared family id.
+ */
+export function resolveGrammarFamily(family) {
+  return Object.freeze({ id: selectedFamily(family).selected.id });
+}
+
 /** The explicitly selected authored family entry; callers share the catalog lookup rather than inferring a family. */
 export function grammarFamilyFor(family) {
   return Object.freeze(selectedFamily(family).selected);
@@ -24,13 +37,13 @@ export function grammarLintFor(family) {
     throw new Error(`Grammar family ${family} has no declared lint contract in knowledge/grammars/index.yaml`);
   }
   const lint = selected.lint;
-  if (lint.package === null) return Object.freeze({ family, package: null });
+  if (lint.package === null) return Object.freeze({ family: selected.id, package: null });
   if (typeof lint.package !== 'string' || !lint.package.startsWith('@starci/eslint-grammar-')
     || typeof lint.factory !== 'string' || !/^[a-zA-Z][a-zA-Z0-9]*$/.test(lint.factory)
     || typeof lint.prefix !== 'string' || !/^[a-z][a-z0-9-]*$/.test(lint.prefix)) {
     throw new Error(`Grammar family ${family} has an invalid lint contract in knowledge/grammars/index.yaml`);
   }
-  return Object.freeze({ family, package: lint.package, factory: lint.factory, prefix: lint.prefix });
+  return Object.freeze({ family: selected.id, package: lint.package, factory: lint.factory, prefix: lint.prefix });
 }
 
 /** The selected family's shared component/export contract, resolved through its catalog reference. */

package/scaffold/app.mjs

@@ -127,7 +127,7 @@ export const packageJsonText = value => `${JSON.stringify(value, null, 2)}\n`;
 const STARTER_SIDES = Object.freeze({
   be: Object.freeze({ apps: [{ name: 'core', kind: 'api' }, { name: 'cli', kind: 'cli' }], kinds: ['api', 'cli'], connections: [{ name: 'primary', envPrefix: 'PRIMARY_DB', owner: 'core', isolation: 'database' }] }),
   // fe: the landing and the product app, over the shared ui and i18n packages (both opt-in slots, enabled here).
-  fe: Object.freeze({ grammar: 'starci', apps: [{ name: 'landing', kind: 'next' }, { name: 'app', kind: 'next' }], reads: ['be/contracts/'], optionalSlots: ['fe.package.ui', 'fe.package.i18n'] }),
+  fe: Object.freeze({ grammar: 'core', apps: [{ name: 'landing', kind: 'next' }, { name: 'app', kind: 'next' }], reads: ['be/contracts/'], optionalSlots: ['fe.package.ui', 'fe.package.i18n'] }),
 });
 
 /** The lite starter is the upgrade-safe subset: one API, one web app and one Supabase schema authority. */
@@ -138,7 +138,7 @@ const LITE_STARTER_SIDES = Object.freeze({
     connections: [{ name: 'primary', envPrefix: 'PRIMARY_DB', owner: 'api', isolation: 'schema', provider: 'supabase' }],
     reads: ['supabase/types/'],
   }),
-  fe: Object.freeze({ grammar: 'starci', apps: [{ name: 'web', kind: 'next' }], reads: ['be/contracts/', 'supabase/types/'] }),
+  fe: Object.freeze({ grammar: 'core', apps: [{ name: 'web', kind: 'next' }], reads: ['be/contracts/', 'supabase/types/'] }),
 });
 
 /** The checked local Supabase auth posture of every newly scaffolded lite app. */

package/stack/render.mjs

@@ -111,7 +111,9 @@ function dockerRender(ctx, config, overrideFile, options, env) {
   if (run.error) throw failure('STACK_RENDER_FAILED', `cannot run docker (${run.error.message})`);
   if (run.status !== 0) throw failure('STACK_RENDER_FAILED', run.stderr.trim().split('\n').slice(0, 6).join(' | '));
   if (hasPlaceholderDigest(run.stdout)) throw refusal('STACK_PLACEHOLDER_DIGEST', 'rendered stack still carries a placeholder digest');
-  return run.stdout;
+  // docker stack config has already interpolated every variable, so a dollar left in its output is literal (a source `$`); docker stack
+  // deploy interpolates the written file again, so every dollar is escaped once more to survive that second pass.
+  return escapeDollar(run.stdout);
 }
 
 function releaseRecord(ctx, config, parts) {

package/sync/hygiene.mjs

@@ -126,7 +126,7 @@ export function judge(cwd, files) {
 
 // The scripts/housekeeping/ledger-hygiene.mjs of the checkout under judgment: the root git names for `cwd`, which carries
 // that script only when the repository IS a full StarCi runtime checkout (packages/hfs/sync/ sits 3 directories
-// under such a root, the same computation scripts/hfs/sync-runtime.mjs uses). A product repository — or a
+// under such a root). A product repository — or a
 // bare repo — has no such file, so the section is silently absent wherever this module happens to be installed.
 const ledgerHygieneScript = cwd => {
   try {

package/sync/index.mjs

@@ -176,7 +176,7 @@ export async function loadPresets(root) {
 
 /**
  * The jest preset's Sonar exclusions as @starci/hfs ships them: `@starci/jest-preset/sonar-exclusions.cjs` (a require-free module),
- * copied byte for byte into packages/hfs/runtime by scripts/hfs/sync-runtime.mjs, so a fresh `starci app scaffold` (nothing installed
+ * carried byte for byte in packages/hfs/runtime, so a fresh `starci app scaffold` (nothing installed
  * yet) and an upgrade render the same list the app's installed preset answers. A missing copy is a refusal, never a render without it.
  */
 const BUNDLED_SONAR_EXCLUSIONS = new URL('../runtime/packages/jest-preset/sonar-exclusions.cjs', import.meta.url);