@starci/hfs 4.9.4 → 4.9.6

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 4.9.6 - 2026-10-28
+
+- Changed: the bundled canon pins name hfs 4.9.6, the Grammar family 0.15.5 (grammar, eslint-grammar-core, eslint-grammar-offset-pop) and eslint-canon-fe 9.4.5.
+- Changed: the app pre-push hook runs `node node_modules/starci-harness/dist/main.js deps check` after the bundled push gate (under `set -e`), so a push whose committed @starci pins npm cannot install, or whose local package copies run ahead of npm, is refused; RT_HOOK_SHAPE (R225) requires the call. Spec: `src/pre-push-hook.spec.mjs`.
+
+## 4.9.5 - 2026-10-28
+
+- Added: the bundled rule catalog carries R324 (`FE_PAGE_TABS_OUTSIDE_HEADER`, `page-tabs-in-header`) and R325 (`FE_ROUTE_PAGE_OUTSIDE_PAGE`, `route-page-is-one-page`), both enforced by `@starci/eslint-grammar-core`, and their failure-code guidance.
+- Changed: the bundled canon pins follow release G (Grammar family 0.15.4, hfs 4.9.5, canon-fe 9.4.4, canon-be 3.6.4, ai-router 0.3.0); the mermaid pin names Grammar's MermaidDiagram as its owner.
+
 ## 4.9.4 - 2026-10-28
 
 - Added: the bundled rule catalog carries R323 (`FE_PAGE_HEADER_HAND_ROLLED`, enforced by `@starci/eslint-grammar-core` `no-hand-rolled-page-header`) and its failure-code guidance.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starci/hfs",
-  "version": "4.9.4",
+  "version": "4.9.6",
   "description": "The StarCi app command implementation for scaffolding, linting, checking and synchronizing one product repository.",
   "type": "module",
   "license": "MIT",

package/runtime/knowledge/hfs/canon-pins.yaml

@@ -31,35 +31,35 @@ pins:
     source: packages/event-stream/package.json
     why: 'the one server-sent-events client of every front end (fe-stack event-stream, owner:event-stream-package): the transport client layer (modules/api/sse/clients) creates one instance for the app with the bearer token source and the stream operations follow on it; it carries Last-Event-ID resume, the capped doubling backoff, the heartbeat timeout, the single 401 renewal and the useSWRSubscription adapter, so no app keeps a hand-written reader.'
   '@starci/grammar':
-    version: 0.15.3
+    version: 0.15.5
     group: starci
     install: registry
     side: fe
     source: packages/grammar/package.json
     why: 'the grammar front ends read: the brand layer sets `--font-sans` and `--font-mono` and the grammar reads them; it carries the Input tel kind, the copyable and read-only Input, the IconButton disclosure props and count badge, ChatBubble, FillViewport, Textarea mentions and Enter-to-send, the leading PrimaryRailLayout rail, the plate-less Image, ListRow, the soft Alert, Progress steps, the floating primary IconButton, FlowGraph, the STATE-8 loading views and the bordered selectable TagGroup chips. The runtime source version wins for a @starci package.'
   '@starci/eslint-canon-be':
-    version: 3.6.3
+    version: 3.6.4
     group: starci
     install: registry
     side: be
     source: packages/eslint-canon-be/package.json
     why: 'the back-end ESLint canon: `loadHfs(import.meta.url)` of be/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the be side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; `starciBeConfig({ hfs: loadHfs(import.meta.url) })` is the typed factory and the BE-CONVENTION laws are its rules.'
   '@starci/eslint-canon-fe':
-    version: 9.4.3
+    version: 9.4.5
     group: starci
     install: registry
     side: fe
     source: packages/eslint-canon-fe/package.json
     why: 'the front-end ESLint canon: `loadHfs(import.meta.url)` of fe/eslint.config.mjs finds the app-root hfs.json (kind app) and gives every linted file the view of the fe side, and the project graph is built per side; its bundled runtime copies (slots, canon-pins, failure codes, the architecture machine) put .starcistacks and .sops.yaml at the app root; the front end has no tests (FE_NO_TESTS R97 in hfs) and no-vietnamese-in-source (R91) applies.'
   '@starci/eslint-grammar-core':
-    version: 0.15.3
+    version: 0.15.5
     group: starci
     install: registry
     side: fe
     source: packages/eslint-grammar-core/package.json
     why: 'the StarCi Grammar component API lint, versioned with @starci/grammar; front ends compose this family package with the universal FE canon.'
   '@starci/eslint-grammar-offset-pop':
-    version: 0.15.3
+    version: 0.15.5
     group: starci
     install: registry
     side: fe
@@ -106,7 +106,7 @@ pins:
     source: packages/ai-router/package.json
     why: 'the AI pool router of a back end: a NestJS module that routes OpenAI-compatible chat, stream and embeddings calls across keys, models and providers, with @starci/ai-router/testing for its specs; @starci/jest-preset compiles it as an ESM-only dependency.'
   '@starci/hfs':
-    version: 4.9.4
+    version: 4.9.6
     group: starci
     install: registry
     side: both
@@ -487,7 +487,7 @@ pins:
     version: 11.16.0
     group: ui
     side: fe
-    why: 'diagrams (fe-stack diagrams); version read from the starci-academy package-lock on 2026-10-13.'
+    why: 'runtime dependency of @starci/grammar for MermaidDiagram (fe-stack diagrams), imported lazily on the first diagram and themed from the grammar root; apps render diagrams through MermaidDiagram and never import mermaid.'
   'react-dropzone':
     version: 15.0.0
     group: ui

package/runtime/knowledge/hfs/rules.yaml

@@ -3894,7 +3894,7 @@ rules:
       - {kind: runtime, id: protected-zone, at: scripts/hfs/runtime-rules/rights-policy.mjs}
   - id: R225
     code: "RT_HOOK_SHAPE"
-    law: "The app hook templates keep the gate model: pre-commit is L0 only (no typecheck or test run); pre-push invokes the bundled scripts/guards/release-push-gate.mjs policy for fast-forward main, a clean outgoing secret scan and annotated v* tags. It runs no build, test, typecheck or lint."
+    law: "The app hook templates keep the gate model: pre-commit is L0 only (no typecheck or test run); pre-push invokes the bundled scripts/guards/release-push-gate.mjs policy for fast-forward main, a clean outgoing secret scan and annotated v* tags, then the harness's `starci deps check` (every committed @starci pin installable from npm, no local package copy ahead of npm). It runs no build, test, typecheck or lint."
     scope: runtime
     kinds: [check]
     gates: [land, runtime]
@@ -5710,3 +5710,49 @@ rules:
         source: owner
         quote: "Publish Grammar 0.15.3 with PageHeader now, then move all 18 pages to it before deploying. (translated from Vietnamese)"
         ruling: "A page is headed by Grammar's PageHeader (owner ruling page-header-band): a surface band whose content shares the page content's edges and which ends in its own full-width separator, page tabs standing on it; the lint refuses a page head composed by hand from Breadcrumbs and SectionHeader."
+  - id: R324
+    code: "FE_PAGE_TABS_OUTSIDE_HEADER"
+    law: "Page tabs are the header's tabs; a Tabs that is the first element of a Page body or the next element after a PageHeader is a page tab bar drawn outside the band."
+    kinds: [lint]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["FE_PAGE_TABS_OUTSIDE_HEADER"]
+    enforcers:
+      - {kind: eslint-grammar-core, id: page-tabs-in-header}
+    editions: [lite, full]
+    docs: [knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
+    templateNa: "A template states no page; the pages are the app's."
+    proves:
+      - packages/eslint-grammar-core/src/page.spec.ts
+    exemplifiedBy:
+      - {path: packages/eslint-grammar-core/src/page.spec.ts, editions: [lite, full], codes: [FE_PAGE_TABS_OUTSIDE_HEADER]}
+    witness:
+      - {path: packages/eslint-grammar-core/src/page.spec.ts, editions: [lite, full], codes: [FE_PAGE_TABS_OUTSIDE_HEADER]}
+    cases:
+      - id: case-1
+        date: "2026-10-28"
+        source: owner
+        quote: "ok trò"
+        ruling: "A route page is one Grammar Page (owner ruling page-frame); page tabs are its header's tabs, and the lint refuses a Tabs at the top of the Page body or right after a PageHeader."
+  - id: R325
+    code: "FE_ROUTE_PAGE_OUTSIDE_PAGE"
+    law: "A page owner draws one Grammar Page with nothing beside it; a sibling of the Page, or a bare PageHeader or PageContainer in the page owner, re-decides the inset and rhythm Page owns."
+    kinds: [lint]
+    gates: [pre-commit, settle, land, ci]
+    failureCodes: ["FE_ROUTE_PAGE_OUTSIDE_PAGE"]
+    enforcers:
+      - {kind: eslint-grammar-core, id: route-page-is-one-page}
+    editions: [lite, full]
+    docs: [knowledge/patterns/fe/index.yaml#FE-RULE-OWNERSHIP]
+    templateNa: "A template states no page; the pages are the app's."
+    proves:
+      - packages/eslint-grammar-core/src/page.spec.ts
+    exemplifiedBy:
+      - {path: packages/eslint-grammar-core/src/page.spec.ts, editions: [lite, full], codes: [FE_ROUTE_PAGE_OUTSIDE_PAGE]}
+    witness:
+      - {path: packages/eslint-grammar-core/src/page.spec.ts, editions: [lite, full], codes: [FE_ROUTE_PAGE_OUTSIDE_PAGE]}
+    cases:
+      - id: case-1
+        date: "2026-10-28"
+        source: owner
+        quote: "ok trò"
+        ruling: "A route page is one Grammar Page (owner ruling page-frame): the single owner of the page inset and rhythm; the lint refuses a sibling beside the Page and a bare PageHeader or PageContainer in a page owner."

package/runtime/modules/kernel/failure-codes.yaml

@@ -2734,6 +2734,16 @@ FE_PAGE_METADATA_MISSING:
   owner: op-retry
   kind: check-finding
 
+FE_PAGE_TABS_OUTSIDE_HEADER:
+  title: "Page tabs are drawn outside the page header band"
+  title_vi: "Tab của trang nằm ngoài dải đầu trang"
+  meaning_vi: "Tại <file>, một Tabs đứng đầu thân Page hoặc ngay sau PageHeader: thanh tab của trang không đứng trên đường phân cách của dải đầu trang mà lấy khoảng đệm và khoảng cách của thân trang."
+  causes_vi:
+    - "Đặt Tabs làm phần tử đầu tiên trong Page hoặc ngay sau PageHeader."
+  nextStep_vi: "Truyền tab qua header.tabs của Page (hoặc tabs của PageHeader): { label, items, selectedKey, onSelect } (quy định page-frame)."
+  owner: op-retry
+  kind: check-finding
+
 FE_PROPS_MUTABLE:
   title: "Component props can be written"
   title_vi: "Props của component có thể bị ghi"
@@ -2874,6 +2884,17 @@ FE_ROUTE_ONE_PAGE:
   owner: other-op:interface.implement
   kind: check-finding
 
+FE_ROUTE_PAGE_OUTSIDE_PAGE:
+  title: "A page owner draws something outside its Page"
+  title_vi: "Trang vẽ nội dung nằm ngoài Page"
+  meaning_vi: "Tại <file>, page owner vẽ một phần tử bên cạnh Page, hoặc tự dùng PageHeader hay PageContainer: khoảng đệm và nhịp dọc của trang bị quyết định lại ngoài Page."
+  causes_vi:
+    - "Đặt banner, footer hay khối khác cạnh Page trong page owner."
+    - "Ghép PageHeader và PageContainer bằng tay thay vì dùng Page."
+  nextStep_vi: "Vẽ đúng một Page: dải đầu trang là header, mọi thứ khác trong thân, measure là measure của Page (quy định page-frame)."
+  owner: op-retry
+  kind: check-finding
+
 FE_SERVER_ACTION_FORBIDDEN:
   title: "A front-end file carries a `\"use server\"` directive"
   title_vi: "Front end có Server Action (\"use server\")"

package/runtime/scripts/hfs/runtime-rules/hook-shape.mjs

@@ -1,7 +1,8 @@
 // hook-shape.mjs - RT_HOOK_SHAPE (knowledge/hfs/rules.yaml, gate runtime): the app hook templates keep the gate model.
 //   pre-commit  L0 only: no typecheck and no test run (`test:` scripts, npm test, jest, vitest, a spec). Types and the targeted specs
 //               belong to the op gate.
-//   pre-push    the bundled push gate owns fast-forward main, annotated tags and the secret scan; no build, test or lint run.
+//   pre-push    the bundled push gate owns fast-forward main, annotated tags and the secret scan, then `starci deps check` the
+//               app's @starci pins; no build, test or lint run.
 // Guard hooks keep their host timeout above the runtime's own input, verdict, cleanup and output budgets.
 // Comments are not judged (the templates explain what they do not run). Pure apart from ctx.read.
 import { shellCommandSource } from '../../lib/shell-source.mjs';
@@ -23,7 +24,7 @@ const PRE_PUSH_FORBIDDEN = [
   [/\btypecheck\b/, 'a typecheck'],
   [/\blint\b/, 'a lint run'],
 ];
-const PRE_PUSH_MARKERS = ["node --input-type=module -e", "import { main } from '@starci/hfs/runtime/scripts/guards/release-push-gate.mjs'", 'process.exit(await main())'];
+const PRE_PUSH_MARKERS = ["node --input-type=module -e", "import { main } from '@starci/hfs/runtime/scripts/guards/release-push-gate.mjs'", 'process.exit(await main())', 'node node_modules/starci-harness/dist/main.js deps check'];
 
 const finding = (file, message) => ({ code: CODE, level: 'error', path: file, message: `${CODE} ${file}: ${message}` });
 
@@ -39,7 +40,7 @@ function fileHookShapeFindings({ path: file, name, text }) {
     const missing = PRE_PUSH_MARKERS.filter((marker) => !body.includes(marker));
     if (missing.length) {
       const markers = missing.map((m) => `\`${m}\``).join(', ');
-      found.push(finding(file, `the push gate lacks the bundled gate marker${missing.length === 1 ? '' : 's'} ${markers}; it must invoke the shared fast-forward, annotation and secret-scan policy`));
+      found.push(finding(file, `the push gate lacks the bundled gate marker${missing.length === 1 ? '' : 's'} ${markers}; it must invoke the shared fast-forward, annotation and secret-scan policy and the dependency push gate`));
     }
   }
   return found;

package/templates/app/hooks/husky/pre-push

@@ -1,4 +1,7 @@
 {{header}}
 # Push gate: fast-forward main with a clean secret scan, annotated v* tags, and bounded ref input.
-# The bundled gate owns the policy; backups and lane refs use the same policy as the runtime.
+# The bundled gate owns the policy; backups and lane refs use the same policy as the runtime. Then the harness refuses a
+# committed @starci pin npm cannot install, or a local package copy ahead of npm (starci deps check).
+set -e
 node --input-type=module -e "import { main } from '@starci/hfs/runtime/scripts/guards/release-push-gate.mjs'; process.exit(await main());"
+node node_modules/starci-harness/dist/main.js deps check