@techierathore/techieflow 1.1.0 → 1.1.1

package/.tfcore/telemetry/tf-metrics.sh

@@ -1251,8 +1251,17 @@ def analyse(repos):
     voided_runs = 0
     void_reasons = []
     void_orphans = 0
+    gates_malformed = []
     for repo in repos:
         g = read_stream(repo, "gates")
+        # A gate record is one REQ verdict (SCHEMA.md §3). A suite-level note with no req_id or no
+        # verdict ({"gate":"verify-suite","result":"pass"}) was counted as a failure, passes
+        # included (Lekhak TF-020). It is scored nowhere and listed as malformed instead.
+        bad_g = [x for x in g if not x.get("req_id") or not x.get("verdict")]
+        if bad_g:
+            g = [x for x in g if x.get("req_id") and x.get("verdict")]
+            gates_malformed += [{"app": app_name(repo), "ts": x.get("ts"), "gate": x.get("gate"),
+                                 "result": x.get("result")} for x in bad_g]
         r, vn, vr, vo = apply_voids(read_stream(repo, "runs"), app_name(repo))
         voided_runs += vn; void_reasons += vr; void_orphans += vo
         repo_misses = read_stream(repo, "misses")
@@ -1273,6 +1282,7 @@ def analyse(repos):
         per_repo.append({"repo": repo, "app": app_name(repo),
                          "project_type": project_type(repo)[0],
                          "gates": len(g), "gates_backfilled": sum(1 for x in g if x.get("backfilled")),
+                         "gates_malformed": len(bad_g),
                          "runs": len(r), "sessions": len(s), "commits": len(c),
                          "misses": sum(1 for x in repo_misses if x.get("kind") == "miss" and x.get("miss_id") not in
                                        {v.get("miss_id") for v in repo_misses if v.get("kind") == "miss-void"}),
@@ -1338,6 +1348,8 @@ def analyse(repos):
            "runs_voided_n": voided_runs,
            "runs_voided": void_reasons,
            "run_voids_orphaned_n": void_orphans,
+           "gates_malformed_n": len(gates_malformed),
+           "gates_malformed": gates_malformed,
            "misses": analyse_misses(misses),
            "phases": analyse_phases(runs)}
 
@@ -1446,6 +1458,13 @@ def print_report(a, repos):
         print("    Commit telemetry is not being written here. Fix it for good with")
         print("    update-framework.sh <repo>, or reconcile what is already in the log:")
         print("      .tfcore/telemetry/tf-metrics.sh --backfill-commits <repo>")
+    if a.get("gates_malformed"):
+        print("")
+        print("  ⚠ %d gate record(s) carry no req_id or no verdict, so they are not one REQ's"
+              % a["gates_malformed_n"])
+        print("    verdict and are left out of every figure below (SCHEMA.md §3):")
+        for x in a["gates_malformed"]:
+            print("      %s %s gate=%s result=%s" % (x["app"], x["ts"], x["gate"], x["result"]))
     print("")
 
     for label in ("live", "backfilled"):

package/.tfcore/templates/stack-defaults/dotnet.md

@@ -20,11 +20,13 @@
 | Q5 | Logging | Serilog, always, with file logging wired at startup before anything else can fail. | No |
 | Q6 | Tests | xUnit, always. A test project exists from day-1. | No |
 | Q7 | Layout and naming | `src/` and `tests/` at the root. The primary executable project is named exactly `<App>`; `<App>.App` is banned. Secondary heads take a descriptive suffix (`<App>.Api`, `<App>.Desktop`). | No |
-| Q8 | User interface | TrBlazeUI for every Blazor head and every MAUI Blazor Hybrid head. Native controls for WinForms, WPF and non-Blazor MAUI heads. Rendering mode is chosen per project and recorded. | Rendering mode only |
+| Q8 | User interface | TrBlazeUI for every Blazor head and every MAUI Blazor Hybrid head: NuGet package `TrBlazeUI.Components` (it brings `TrBlazeUI.Primitives`), icons from `TrBlazeUI.Icons.Lucide`. Native controls for WinForms, WPF and non-Blazor MAUI heads. Rendering mode is chosen per project and recorded. | Rendering mode only |
 | Q9 | Hosting | Web applications run containerised on a Bluehost VPS. The owner supplies a pipeline guidance document at UAT go-ahead, and a deployment checklist is produced from it. | Asked at UAT go-ahead, as the questionnaire specifies |
 | Q10 | Production secrets | Decided when the owner asks for the production pipeline, after UAT. Until then no document states where production secrets live. | Asked after UAT |
 | Q11 | Standing rules and prohibitions | 1. Never add a NuGet package without a line in the Architecture document saying why. 2. Never create a second configuration mechanism. 3. When TechieFlow, TrBlazeUI, TechieRag or any other internal library lacks something, record it in that library's feedback file and hold the feature until the library is fixed. Never implement a workaround. 4. Data access is always Dapper. 5. Database migrations live in a dedicated project named `<App>Db` (console or library) using the DbUp package. The web application runs the migration at startup, or the pipeline runs it after deployment. Never a `database` folder of loose scripts at the repository root. 6. Log files are written under the build output folder (`bin/`), which is git-ignored. Never at the repository root. 7. No unnecessary folders at the repository root (`data`, `database`, `scripts` and the like). Everything sits under `src/` or `tests/` according to what it belongs to. | No |
 
+Required packages: `TrBlazeUI.Components` — for a project with a Blazor or MAUI Blazor Hybrid head. The Architecture copies this line into its Stack decisions for each package that applies, and `tf-stack-check.sh` fails the build check when no project file references one of them.
+
 ---
 
 ## Notes

package/.tfcore/templates/v4custom/app-architecture-tmpl.md

@@ -22,6 +22,9 @@ rule: decisions-log
 <!-- Authoring notes (agent only; never visible text).
      Sections and order are fixed by the schema above. The Stack decisions table answers the stack
      questions (.tfcore/templates/stack-questions.md); answers taken from an answer set cite it.
+     The "Required packages:" line copies the answer set's own line, keeping only the packages that
+     apply to this project's heads; tf-stack-check.sh fails the build check when the code references
+     none of a listed package (a model once replaced the mandated UI library with plain components).
      No Deployment section: hosting is decided after UAT and lives in the Deployment Checklist; how a
      developer runs the app lives in the UsageGuide. Detailed per-screen flows live in the DevGuide.
      A brownfield project describes the code as it is; a planned change is a Decisions log row with
@@ -54,6 +57,8 @@ One row per stack question. "Source" says where the answer came from: the answer
 | Q8 | User interface | {…} | {…} |
 | Q11 | Standing rules | {…} | {…} |
 
+Required packages: {each package the answer set requires for this project's heads, in backticks, or "none"}
+
 ## 2. Solution structure
 
 | Project | Kind | Purpose |

package/.tfcore/templates/v4custom/app-brd-tmpl.md

@@ -94,8 +94,9 @@ One item per thing the verifier will test. Each names its screen, links the mock
 | BRD-{N} | Performance | {…} | perf-budget: p95 load <= 2000ms @ concurrency 1 |
 | BRD-{N} | Security | {…} | {…} |
 | BRD-{N} | Logging | {from the Stack answer set} | {…} |
+| BRD-{N} | Zoom (a desktop head drawn in a web view) | Cmd/Ctrl+=, - and 0 zoom 50% to 300% in 10% steps; the level is kept across restarts | zoom-check: keys · zoom-check: kept |
 
-The `perf-budget:` measure is machine-read by the verifier, in exactly this form: `perf-budget: <p50|p95|max> <ttfb|load> <= <N>ms [@ concurrency <N>]`. Write one only where the owner stated a number.
+The `perf-budget:` measure is machine-read by the verifier, in exactly this form: `perf-budget: <p50|p95|max> <ttfb|load> <= <N>ms [@ concurrency <N>]`. Write one only where the owner stated a number. The zoom row is for an app whose desktop head draws its screens in a web view (the stack's coding standards say how), and is deleted otherwise; its two checklist rows end `zoom-check: keys` and `zoom-check: kept`, which the verifier grades with `tf-verify-zoom.sh`.
 
 ## 7. Development status
 

package/.tfcore/templates/v4custom/app-checklist-tmpl.md

@@ -45,6 +45,8 @@ rule: checklist-rows
 | REQ-UI-001 | {short name} | Not Started | 0% | — | [view](#d-req-ui-001) |
 | REQ-FN-001 | {short name} | Not Started | 0% | — | [view](#d-req-fn-001) |
 | REQ-NFR-001 | {short name} | Not Started | 0% | — | [view](#d-req-nfr-001) |
+| REQ-NFR-002 | Zoom with the OS keys (web-view desktop head only) | Not Started | 0% | — | [view](#d-req-nfr-002) |
+| REQ-NFR-003 | Zoom level kept (web-view desktop head only) | Not Started | 0% | — | [view](#d-req-nfr-003) |
 
 **Status values:** `Not Started` · `In Progress` · `Implemented` · `Verified` · `Done (pre-existing)` · `Needs re-verify` · `PARTIAL` · `FAIL` · `Blocked` · `Owner-UAT` · `N/A`. `Owner-UAT` marks a row only the owner can close, by following the UsageGuide test plan; the verifier cannot reach it from this machine.
 
@@ -63,3 +65,12 @@ rule: checklist-rows
 <a id="d-req-nfr-001"></a>
 - **REQ-NFR-001** — {the requirement}. *BRD:* BRD-{N}
   - *Acceptance:* When {the measurement is taken}, then {the value within its limit}; perf-budget: p95 load <= 2000ms @ concurrency 1
+
+<!-- A desktop head drawn in a web view carries these two rows (the stack's coding standards say how it zooms); delete them otherwise. -->
+<a id="d-req-nfr-002"></a>
+- **REQ-NFR-002** — Zoom with the OS keys. *BRD:* BRD-{N}
+  - *Acceptance:* When a user presses Cmd+= (Mac) or Ctrl+= (Windows) three times on {first screen}, then the page is drawn at 130%; zoom-check: keys
+
+<a id="d-req-nfr-003"></a>
+- **REQ-NFR-003** — The zoom level is kept. *BRD:* BRD-{N}
+  - *Acceptance:* When a user zooms to 130% on {first screen} and restarts the app, then it opens at 130%; zoom-check: kept

package/.tfcore/templates/v4custom/app-phases-tmpl.md

@@ -13,7 +13,8 @@ rule: phases-table
      phases and are never reused, so the ranges never overlap. An item added to an earlier phase after a
      later phase exists takes the next free id and the row gets a second range: "BRD-1 to BRD-73, BRD-111 to BRD-118". Every screen sits in exactly one phase;
      the screens of a phase are exactly the "### Screen:" entries of that phase's UIDesign.
-     Status is planned, building or done. The phase being worked is appPhase in core-config.yaml
+     Status is planned, building, done or kept-whole. kept-whole is only for a phase finished before the
+     size cap that the owner chose to keep as one document: its cap and word maximum then WARN, not FAIL. The phase being worked is appPhase in core-config.yaml
      (bash .tfcore/utils/tf-day1-files.sh {App} --phase N); handoff moves it on.
      tf-doc-check.sh --app {App} refuses a screen in two phases, an id in two phases, a BRD id outside
      its phase's range, and a phase row without its BRD file. -->

package/.tfcore/templates/v4custom/html-render-shell.md

@@ -48,6 +48,8 @@ The same slug function MUST produce the `id="..."` on each heading AND the `href
 
 The MD inline TOC and the HTML sidebar TOC use the SAME slug. The heading `id` uses the SAME slug. No exceptions.
 
+**A second id, GitHub's.** A markdown table of contents written by hand links to the id GitHub gives the heading: digits kept, punctuation dropped, spaces to hyphens, a repeat suffixed `-1`, `-2` (`### 3.7 Group Service (GroupSvc)` → `#37-group-service-groupsvc`). When that id differs from the slug above, the heading also carries `<a id="{github-id}"></a>`, so those links land too (AppManager TF-029). A heading with no slug (H1, H5, H6) carries the GitHub id as its own.
+
 ---
 
 ## 2. CSS (inline at top of `<head>`, verbatim)

package/.tfcore/utils/tf-appium.mjs

@@ -0,0 +1,179 @@
+// tf-appium.mjs — the few WebDriver calls a native head needs, over Node's own fetch (no package).
+// Used by tf-verify-native.mjs; an acceptance test of a native head may import it too:
+//   import { openSession, parseSource } from '<repo>/.tfcore/utils/tf-appium.mjs';
+//   const s = await openSession(process.env.APPIUM_URL, { bundleId: process.env.TF_BUNDLE_ID, appPath: process.env.TF_APP_PATH });
+//   await s.click(await s.find('accessibility id', 'save'));  …  await s.close();
+// Every control is found inside the app under test by its AutomationId (the accessibility
+// identifier); nothing here types or clicks at a screen position. Type into a field with
+// `await s.type(el, 'text')`, the one way a Blazor Hybrid form on a Mac took the text.
+
+import { execFileSync } from 'node:child_process';
+import { statSync } from 'node:fs';
+
+const W3C_EL = 'element-6066-11e4-a52e-4f735466cecf';
+
+async function call(base, method, path, body) {
+  const r = await fetch(base + path, {
+    method, headers: { 'Content-Type': 'application/json' },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(300000),
+  });
+  const j = await r.json().catch(() => ({ value: { message: `HTTP ${r.status}, not JSON` } }));
+  if (!r.ok || (j.value && j.value.error)) throw new Error((j.value && j.value.message || `HTTP ${r.status}`).split('\n')[0]);
+  return j.value;
+}
+
+// A session on the Mac Catalyst app (mac2), by its .app path when known: by bundle id alone mac2
+// answered "could not be found" for a build outside /Applications that macOS had not registered
+// (Lekhak TF-003; seen again 2026-10-07). skipAppKill: the app is tf-verify-boot.sh's to stop, so
+// ending the session leaves it running for the next check.
+export async function openSession(url, { bundleId, appPath = '', automationName = 'Mac2', platformName = 'mac', extra = {} } = {}) {
+  const base = url.replace(/\/$/, '');
+  const which = appPath ? { 'appium:appPath': appPath } : { 'appium:bundleId': bundleId };
+  const v = await call(base, 'POST', '/session', { capabilities: { alwaysMatch: {
+    platformName, 'appium:automationName': automationName, ...which,
+    'appium:skipAppKill': true, 'appium:newCommandTimeout': 300, ...extra } } });
+  const sp = `/session/${v.sessionId}`;
+  const s = {
+    id: v.sessionId,
+    call: (m, p, b) => call(base, m, sp + p, b),
+    source: () => s.call('GET', '/source'),
+    find: async (using, value, from = null) => Object.values(await s.call('POST', from ? `/element/${from}/element` : '/element', { using, value }))[0],
+    findAll: async (using, value, from = null) => (await s.call('POST', from ? `/element/${from}/elements` : '/elements', { using, value })).map((e) => e[W3C_EL] || Object.values(e)[0]),
+    click: (el) => s.call('POST', `/element/${el}/click`, {}),
+    // Typing into a field. A Blazor Hybrid form on a Mac kept its @bind empty or half filled when the
+    // value was set through Accessibility, through mac2's "set value", or by key events posted to the
+    // process ("The text must have valid value", Lekhak TF-026). What reached it: a click on the field,
+    // then W3C key actions, a key down and up per character.
+    type: async (el, text) => {
+      await s.click(el);
+      const actions = [...String(text)].flatMap((c) => [{ type: 'keyDown', value: c }, { type: 'keyUp', value: c }]);
+      await s.call('POST', '/actions', { actions: [{ type: 'key', id: 'keyboard', actions }] });
+      await s.call('DELETE', '/actions').catch(() => {});
+    },
+    shot: (el) => s.call('GET', el ? `/element/${el}/screenshot` : '/screenshot'),
+    close: () => call(base, 'DELETE', sp).catch(() => {}),
+  };
+  return s;
+}
+
+// What the app shows first, for tf-verify-boot.sh: BOOTED only when a mac2 session opens and the app
+// has a window of its own that is not a system dialog (Lekhak TF-026: BOOTED was printed while no
+// session could open, and once while the app's only window was macOS's "quit unexpectedly while
+// reopening windows" dialog). That dialog is answered Don't Reopen, which only skips restoring old
+// windows, and the answer is reported. The window alone is saved to `shot`. Never throws.
+export async function firstScreen(url, { bundleId = '', appPath = '', shot = '', wait = 30000 } = {}) {
+  let s;
+  try { s = await openSession(url, { bundleId, appPath }); }
+  catch (e) { return { ok: false, stage: 'session', reason: e.message }; }
+  const sleep = (ms) => new Promise((ok) => setTimeout(ok, ms));
+  const DIALOG = new Set(['Dialog', 'Sheet', 'SystemDialog']);
+  const LEAF = new Set(['Button', 'TextField', 'SecureTextField', 'TextView', 'Image', 'CheckBox', 'Switch', 'Slider', 'PopUpButton',
+    'ComboBox', 'Link', 'RadioButton', 'SegmentedControl', 'Stepper', 'DatePicker', 'ProgressIndicator', 'Cell']);
+  const out = { ok: false, stage: 'window', dismissed: '' };
+  try {
+    for (const t0 = Date.now(); Date.now() - t0 < wait; await sleep(500)) {
+      const nodes = parseSource(await s.source());
+      const label = (n) => n.title || n.label || '';
+      const reopen = nodes.find((n) => n.type === 'Button' && /^don.t reopen$/i.test(label(n)));
+      if (reopen && !out.dismissed) {
+        const el = await s.find('-ios predicate string', `elementType == 9 AND (title BEGINSWITH[c] 'Don' OR label BEGINSWITH[c] 'Don')`).catch(() => null);
+        if (el) { await s.click(el); out.dismissed = 'macOS asked to reopen the windows of a run that did not quit; answered Don\'t Reopen'; continue; }
+      }
+      const dialog = nodes.find((n) => DIALOG.has(n.type)) || reopen;
+      const win = nodes.find((n) => n.type === 'Window' && n.w >= 200 && n.h >= 150 && !descendants(nodes, n.i).some((d) => DIALOG.has(d.type)));
+      // drawn: text or a control in the window's content, as tf-verify-native counts it: what sits
+      // directly on the window (its title, its three buttons) and the bars are not content. A web view
+      // took about eight seconds to draw its first page; until then the window is blank.
+      const chrome = (n) => n.parent === win.i || ['TabBar', 'Toolbar', 'NavigationBar', 'MenuBar', 'Menu'].some((t) => {
+        for (let p = n.i; p >= 0; p = nodes[p].parent) if (nodes[p].type === t) return true;
+        return false; });
+      const drawn = win && descendants(nodes, win.i).some((n) => !chrome(n) && (n.type === 'StaticText' ? !!label(n).trim() || !!(n.value || '').trim() : LEAF.has(n.type)));
+      if (win && !dialog && drawn) {
+        out.ok = true; out.window = { w: win.w, h: win.h };
+        if (shot) {
+          await sleep(500);   // the first frame of a web view fades in
+          // the window alone (TF-027: mac2's element shot is a crop of the display, banners included)
+          if (appPath && windowShot(appPid(appPath), shot)) out.shot = shot;
+          else {
+            const el = await s.find('-ios predicate string', 'elementType == 4').catch(() => null);
+            if (el) { const { writeFileSync } = await import('node:fs'); writeFileSync(shot, Buffer.from(await s.shot(el), 'base64')); out.shot = shot; }
+          }
+        }
+        return out;
+      }
+      out.reason = dialog ? `the app shows a dialog, not its first screen: "${(label(dialog) || dialog.type).slice(0, 80)}"`
+        : win ? 'the app\'s window is on view but blank (no text, no control)' : 'the app has no window of its own on view';
+    }
+    out.reason = `${out.reason || 'no window'} after ${Math.round(wait / 1000)} s`;
+    return out;
+  } catch (e) { return { ...out, reason: `Appium: ${e.message}` }; }
+  finally { await s.close(); }
+}
+
+// The page source (XCUIElementType… XML) as a flat list of nodes with their parent index, so a
+// caller can walk a subtree without an XML package.
+export function parseSource(xml) {
+  const un = (s) => s.replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&#10;/g, '\n').replace(/&amp;/g, '&');
+  const nodes = []; const stack = [];
+  const re = /<(\/?)(XCUIElementType\w+)([^>]*?)(\/?)>/g; let m;
+  while ((m = re.exec(xml))) {
+    if (m[1]) { stack.pop(); continue; }
+    const a = {}; let am; const are = /(\w+)="([^"]*)"/g;
+    while ((am = are.exec(m[3]))) a[am[1]] = un(am[2]);
+    const n = { i: nodes.length, type: m[2].replace('XCUIElementType', ''), id: a.identifier || '', label: a.label || '', value: a.value || '',
+      title: a.title || '', x: +a.x || 0, y: +a.y || 0, w: +a.width || 0, h: +a.height || 0, parent: stack.length ? stack[stack.length - 1] : -1, kids: [] };
+    if (n.parent >= 0) nodes[n.parent].kids.push(n.i);
+    nodes.push(n);
+    if (!m[4]) stack.push(n.i);
+  }
+  return nodes;
+}
+
+export function descendants(nodes, i) {
+  const out = []; const todo = [...nodes[i].kids];
+  while (todo.length) { const k = todo.shift(); out.push(nodes[k]); todo.push(...nodes[k].kids); }
+  return out;
+}
+
+// --- the app's own window, through macOS rather than mac2 (Lekhak TF-027) ---------------------------
+// mac2 cannot resize a window, and its element screenshot is a crop of the display, so a notification
+// banner over the window landed in every picture. macOS itself does both: System Events resizes the
+// window (the app's minimum size still holds, and the size it really took is returned), and
+// screencapture -l takes the window alone by its window number.
+const run = (cmd, args) => { try { return execFileSync(cmd, args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 20000 }).trim(); } catch { return ''; } };
+
+// the pid of the app running from this .app (a mac2 session starts it again under a new pid)
+export function appPid(appPath) {
+  const out = run('pgrep', ['-f', `${appPath.replace(/\/$/, '')}/Contents/MacOS/`]);
+  return parseInt(out.split('\n')[0], 10) || 0;
+}
+
+// { id, x, y, w, h } of the app's largest normal window on view, or null
+export function macWindow(pid) {
+  if (!pid) return null;
+  const js = `ObjC.import('CoreGraphics');
+    const l = ObjC.deepUnwrap(ObjC.castRefToObject($.CGWindowListCopyWindowInfo($.kCGWindowListOptionOnScreenOnly | $.kCGWindowListExcludeDesktopElements, 0)));
+    JSON.stringify(l.filter((w) => w.kCGWindowOwnerPID == ${pid} && w.kCGWindowLayer == 0)
+      .map((w) => ({ id: w.kCGWindowNumber, x: w.kCGWindowBounds.X, y: w.kCGWindowBounds.Y, w: w.kCGWindowBounds.Width, h: w.kCGWindowBounds.Height })))`;
+  try { return JSON.parse(run('osascript', ['-l', 'JavaScript', '-e', js]) || '[]').sort((a, b) => b.w * b.h - a.w * a.h)[0] || null; }
+  catch { return null; }
+}
+
+// sets the front window's size; returns the size it took ({ w, h }), or null when macOS refused
+// (the terminal needs Accessibility, as mac2 does)
+export function resizeWindow(pid, w, h) {
+  if (!pid) return null;
+  const tell = `tell application "System Events" to tell (first process whose unix id is ${pid})`;
+  run('osascript', ['-e', `${tell} to set size of window 1 to {${w}, ${h}}`]);
+  const got = run('osascript', ['-e', `${tell} to get size of window 1`]).split(/,\s*/).map(Number);
+  return got.length === 2 && got.every((n) => n > 0) ? { w: got[0], h: got[1] } : null;
+}
+
+// the window alone, by its window number; true when the file was written
+export function windowShot(pid, file) {
+  const win = macWindow(pid);
+  if (!win) return false;
+  run('screencapture', ['-x', '-o', '-l', String(win.id), file]);
+  try { return statSync(file).size > 0; } catch { return false; }
+}

package/.tfcore/utils/tf-build-list.py

@@ -211,11 +211,26 @@ def main(argv):
     if any(r["id"].upper().startswith("REQ-UI-") for r in work):
         builder["UI"], why = ui_builder(app)
         print(f"UI rows go to: {builder['UI']} — {why}")
+    # A defect on a screen goes to one builder. Split by builder, the UI and the backend clusters of one
+    # page both carried its mockup defect, both edited the same files at once, and one left a component
+    # half-written that broke every other builder's boot for an hour (Chatur TF-004). Such a page is
+    # one cluster, built by the UI builder when one of its UI rows carries the defect.
+    cls_of = {r["id"]: re.match(r"REQ-(UI|FN|RAG|NFR)-", r["id"]).group(1) for r in work}
+    sec_of = {r["id"]: ent.get(r["id"].upper(), ("Other", "", "", ""))[0] for r in work}
+    fixed = {}
+    for r in work:
+        s, cls = sec_of[r["id"]], cls_of[r["id"]]
+        if r["defects"] and cls in ("UI", "FN") and (cls == "UI" or s not in fixed):
+            fixed[s] = builder[cls]
     for r in work:
         sec, acc, mock, brd = ent.get(r["id"].upper(), ("Other", "", "", ""))
         cls = re.match(r"REQ-(UI|FN|RAG|NFR)-", r["id"]).group(1)
-        key = ("Non-functional" if cls == "NFR" else "RAG" if cls == "RAG" else sec, builder[cls])
+        who = fixed[sec] if cls in ("UI", "FN") and sec in fixed else builder[cls]
+        key = ("Non-functional" if cls == "NFR" else "RAG" if cls == "RAG" else sec, who)
         clusters.setdefault(key, []).append((r, acc, mock, brd))
+    for s in sorted(fixed):
+        if builder["UI"] != builder["FN"] and {"UI", "FN"} <= {cls_of[r["id"]] for r in work if sec_of[r["id"]] == s}:
+            print(f"One builder for {s}: it carries a defect, so its UI and backend rows go to {fixed[s]} together")
     print()
     print("## Clusters (one sub-agent each; spawn them all in one turn)")
     letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"

package/.tfcore/utils/tf-build.sh

@@ -108,6 +108,47 @@ if [[ "$MODE" == "probe" ]]; then
 fi
 [[ -z "$TARGET" && "$MODE" != "run" ]] && { echo "NOT-RUN no .sln, .slnx or .csproj here; name the target"; exit 2; }
 
+# ---- test on a solution: one test project at a time (TechieRag TF-004) ----------------------------
+# `dotnet test <solution>` runs every test project at once. On a 7.8 GB WSL machine TechieRag's local-
+# model tests took the memory while TechieRag.Tests walked folders, and a test that passes alone failed
+# with "Cannot allocate memory", twice in one day. Each test project now runs on its own, through this
+# same script, and the verdicts are merged into one line naming one joined log: FAIL if any failed
+# (naming which), else NOT-RUN if any could not run, else PASS. TF_TEST_TOGETHER=1 runs them together.
+if [[ "$MODE" == "test" && "${TF_TEST_TOGETHER:-0}" != "1" && "$TARGET" == *.sln* ]]; then
+  tests=()
+  for p in ${projects[@]+"${projects[@]}"}; do
+    f="$p"; [[ -f "$f" ]] || f="$base/$p"
+    [[ -f "$f" ]] || continue
+    grep -qiE 'Microsoft\.NET\.Test\.Sdk|<IsTestProject>[[:space:]]*true|"(xunit|xunit\.v3|NUnit|MSTest(\.TestFramework)?|TUnit)"|Include="(xunit|xunit\.v3|NUnit|MSTest|TUnit)' "$f" && tests+=("$f")
+  done
+  if [[ ${#tests[@]} -gt 1 ]]; then
+    if [[ $PRINT -eq 1 ]]; then
+      for t in "${tests[@]}"; do echo "dotnet test $t ${EXTRA[*]:-}"; done; exit 0
+    fi
+    mkdir -p tests/.artifacts/build
+    JOINED="tests/.artifacts/build/$(date -u +%Y%m%dT%H%M%SZ)-test-split-$$.log"; : > "$JOINED"
+    fails=(); notrun=(); passed=0; lines=(); pass=()
+    [[ ${#EXTRA[@]} -gt 0 ]] && pass=(-- "${EXTRA[@]}")
+    for t in "${tests[@]}"; do
+      out="$(TF_TEST_TOGETHER=1 bash "${BASH_SOURCE[0]}" test "$t" ${pass[@]+"${pass[@]}"} 2>&1)"
+      v="$(grep -m1 -E '^(PASS|FAIL|NOT-RUN)' <<<"$out")"
+      lg="$(sed -n 's/.*log \(tests\/\.artifacts\/build\/[^ ;]*\).*/\1/p' <<<"$v" | head -1)"
+      { echo "### test project: $t"; [[ -n "$lg" && -f "$lg" ]] && cat "$lg" || echo "$out"; } >> "$JOINED"
+      lines+=("  $(basename "$t" .csproj): $v")
+      case "$v" in PASS*) passed=$((passed+1)) ;; FAIL*) fails+=("$(basename "$t" .csproj)") ;; *) notrun+=("$(basename "$t" .csproj)") ;; esac
+    done
+    if [[ ${#fails[@]} -gt 0 ]]; then
+      echo "FAIL  tests failed in ${fails[*]} (${#tests[@]} test projects, each run on its own; $passed passed); log $JOINED"; rc=1
+    elif [[ ${#notrun[@]} -gt 0 ]]; then
+      echo "NOT-RUN ${notrun[*]} could not run (${#tests[@]} test projects, each run on its own; $passed passed); log $JOINED"; rc=2
+    else
+      echo "PASS  test on $PLATFORM — ${#tests[@]} test projects, each run on its own, all passed; log $JOINED"; rc=0
+    fi
+    printf '%s\n' "${lines[@]}"
+    exit $rc
+  fi
+fi
+
 # ---- the dotnet verb -------------------------------------------------------------------
 verb="$MODE"
 args=("$verb")
@@ -162,6 +203,26 @@ cross_side() { # side: clear what another side built with its own paths in it, t
 }
 WRONG_RUNG='NETSDK1178|Microsoft\.(iOS|Android|MacCatalyst|tvOS)\.Sdk|Workload ID|not recognized|WindowsAppSDK|command not found|No such file or directory|is not recognized as an internal or external command|The term .* is not recognized|workload.*not installed|Inadequate permissions'
 
+# A Mac Catalyst build after Platforms/MacCatalyst/Info.plist (or an .entitlements file) changed: the
+# incremental build refreshed the DLLs and kept the .app's old Info.plist, so a fix that lives there
+# looked as if it had failed (Lekhak TF-026: the scene manifest was in the source and not in the
+# bundle). When such a file is newer than the bundle, that target's bin/ and obj/ are cleared first.
+mac_tfm="$(printf '%s\n' ${EXTRA[@]+"${EXTRA[@]}"} | grep -oE '^net[0-9.]+-maccatalyst[0-9.]*$' | head -1)"
+if [[ -n "$mac_tfm" && "$MODE" == build && "$TARGET" == *.csproj ]]; then
+  pd="$(dirname "$TARGET")"
+  for cfgdir in "$pd"/bin/*/"$mac_tfm"; do
+    [[ -d "$cfgdir" ]] || continue
+    plist="$(ls -t "$cfgdir"/*.app/Contents/Info.plist "$cfgdir"/*/*.app/Contents/Info.plist 2>/dev/null | head -1)"
+    [[ -n "$plist" ]] || continue
+    newer="$(find "$pd/Platforms/MacCatalyst" -maxdepth 1 \( -name '*.plist' -o -name '*.entitlements' \) -newer "$plist" 2>/dev/null | head -1)"
+    if [[ -n "$newer" ]]; then
+      cfg="$(basename "$(dirname "$cfgdir")")"
+      rm -rf "$cfgdir" "$pd/obj/$cfg/$mac_tfm"
+      echo "note  $newer is newer than the built app ($plist); cleared bin/$cfg/$mac_tfm and obj/$cfg/$mac_tfm so the bundle is built again"
+    fi
+  done
+fi
+
 tried=()
 n=0
 for r in "${rungs[@]}"; do
@@ -183,6 +244,20 @@ for r in "${rungs[@]}"; do
     [[ "$rc" != "0" ]] && grep -qE "$LOCKED" <<<"$seg" || break
     [[ $attempt -lt ${TF_BUILD_LOCK_RETRIES:-2} ]] && sleep "${TF_BUILD_LOCK_WAIT:-15}"
   done
+  # A Mac Catalyst SDK names the one Xcode it was made for and refuses a newer one ("requires Xcode
+  # 26.6. The current version of Xcode is 27.0"): not the code, not the rung, so it fell through to
+  # NOT-RUN, while tf-verify-boot.sh built the same head with the check off (Lekhak TF-032). The same
+  # rung runs once more with the check off, and a note line says so before the verdict.
+  if [[ "$rc" != "0" && "$PLATFORM" == macos ]] && grep -qE 'requires Xcode [0-9.]+[.] The current version of Xcode is' <<<"$seg" \
+     && [[ " ${cmd[*]} " != *ValidateXcodeVersion* ]]; then
+    xnote="$(grep -oE 'requires Xcode [0-9.]+[.] The current version of Xcode is [0-9.]+' <<<"$seg" | head -1 | sed 's/[.]$//')"
+    echo "note  the Mac Catalyst SDK $xnote; built again with -p:ValidateXcodeVersion=false (xcode-check=off)"
+    cmd+=(-p:ValidateXcodeVersion=false)
+    from=$(( $(wc -l < "$LOG") + 1 ))
+    { echo "### rung $n, Xcode check off: ${cmd[*]}"; "${cmd[@]}" 2>&1; echo "### exit $?"; } >> "$LOG" 2>&1
+    rc="$(tail -1 "$LOG" | sed 's/### exit //')"
+    seg="$(tail -n +"$from" "$LOG")"
+  fi
   if [[ "$rc" == "0" ]]; then
     warns="$(grep -cE 'warning [A-Z]+[0-9]+' <<<"$seg" || true)"
     echo "PASS  $MODE on $PLATFORM via $label (rung $n) — $warns warning line(s); log $LOG"

package/.tfcore/utils/tf-checklist-edit.py

@@ -72,8 +72,26 @@ def set_cells(path, rid, status=None, pct=None, remark=None, append_remark=None)
     return prior
 
 
-def next_id(text, prefix):
-    ids = [int(m.group(1)) for m in re.finditer(rf"REQ-{prefix}-(\d{{3}})", text)]
+def siblings(path):
+    """every checklist of the same application: docs/<App>-Checklist.md and docs/<App>-P<N>-Checklist.md"""
+    d, f = os.path.split(path)
+    m = re.match(r"^(.+?)(?:-P\d+)?-Checklist\.md$", f)
+    if not m:
+        return []
+    app = re.escape(m.group(1))
+    try:
+        names = os.listdir(d or ".")
+    except OSError:
+        return []
+    return [os.path.join(d, n) for n in sorted(names) if n != f and re.match(rf"^{app}(?:-P\d+)?-Checklist\.md$", n)]
+
+
+def next_id(text, prefix, others=()):
+    """one past the highest id of that prefix in this checklist AND every other checklist of the app:
+    counting this one alone gave REQ-UI-055 twice, once in phase 1 and once in phase 3 (Chatur TF-011)"""
+    ids = []
+    for t in (text, *(read(o) for o in others)):
+        ids += [int(m.group(1)) for m in re.finditer(rf"REQ-{prefix}-(\d{{3,}})", t)]
     return f"REQ-{prefix}-{(max(ids) + 1 if ids else 1):03d}"
 
 
@@ -81,7 +99,7 @@ def add_row(path, prefix, title, acceptance, section=None, remark=None, status="
     """append a row to the Requirements Status table and a detail entry under `section`
     (a new section at the end when it does not exist); returns the new id"""
     text = read(path)
-    rid = next_id(text, prefix)
+    rid = next_id(text, prefix, siblings(path))
     nl = "\r\n" if "\r\n" in text else "\n"
     lines = text.split(nl)
     # the table: after the last REQ row

package/.tfcore/utils/tf-day1-files.py

@@ -4,15 +4,17 @@
     bash .tfcore/utils/tf-day1-files.sh <App> [--size S|M|L] [--kind app|library] [--prefix obj|none] [--phase N]
     bash .tfcore/utils/tf-day1-files.sh --archive <file> [<file> ...]
 
-Default mode, for <App>:
-  - .tfcore/core-config.yaml: customTechnicalDocuments (brd, architecture, codingStandards),
-    devLoadAlwaysFiles, and appSize / appKind / appPhase when given.
+Default mode, for <App>. Each flag does its own part and nothing else:
+  - --size, --kind, --phase set appSize, appKind, appPhase in .tfcore/core-config.yaml; --phase is the
+    phase being worked (handoff moves it on).
   - --size L also writes docs/<App>-Phases.md from app-phases-tmpl.md when it does not exist
     (the Large layout: docs/TechieFlow-Document-Schemas.md §2, §3.11). The agent fills the table.
-  - --phase N sets appPhase, the phase being worked (handoff moves it on).
-  - .editorconfig from app-editorconfig-tmpl.editorconfig (overwritten; machine config).
-  - AGENTS.md and CLAUDE.md from their templates with {AppName} substituted and the
-    field-prefix line resolved (--prefix, default obj). An existing copy is archived first.
+  - --prefix obj|none (day-1 stage 2) writes .editorconfig (overwritten; machine config), AGENTS.md and
+    CLAUDE.md from their templates with {AppName} substituted and the field-prefix line resolved, an
+    existing copy archived first; and adds the brd, architecture and codingStandards paths to
+    customTechnicalDocuments and devLoadAlwaysFiles where missing, keeping every entry already there.
+Raising the size of a project with *amend-docs (--size L) once replaced Sevak's AGENTS.md and CLAUDE.md
+with blank templates and cut its document list to three entries (Sevak TF-001). tests/regression sv_001.
 --archive: move each file (and its sibling .html) to docs/OldDocs/, date-suffixed when a
 file of that name is already there. Never asks; never writes a -v2 variant.
 
@@ -86,22 +88,45 @@ def set_key(text, key, value_lines):
     return "\n".join(out) + "\n"
 
 
-def update_config(app, size, kind, phase):
+def block_of(text, key):
+    """The indented lines under a top-level YAML key, [] when the key is absent or empty."""
+    lines, out, inside = text.splitlines(), [], False
+    for line in lines:
+        if re.match(rf"^{re.escape(key)}:", line):
+            inside = True
+            continue
+        if inside:
+            if line.startswith((" ", "\t")):
+                out.append(line)
+            elif line.strip():
+                break
+    return out
+
+
+def add_documents(s, app):
+    """The day-1 document paths, added where missing; every entry already listed is kept."""
+    docs = block_of(s, "customTechnicalDocuments")
+    have = {m.group(1) for m in (re.match(r"^\s+([\w-]+):", l) for l in docs) if m}
+    for k, v in (("brd", f"docs/{app}-BRD.md"), ("architecture", f"docs/{app}-Architecture.md"),
+                 ("codingStandards", f"docs/{app}-Coding-Standards.md")):
+        if k not in have:
+            docs.append(f"  {k}: {v}")
+    s = set_key(s, "customTechnicalDocuments", ["customTechnicalDocuments:"] + docs)
+    files = block_of(s, "devLoadAlwaysFiles")
+    listed = {l.strip().lstrip("-").strip() for l in files}
+    for f in (f"docs/{app}-Coding-Standards.md", f"docs/{app}-Architecture.md"):
+        if f not in listed:
+            files.append(f"  - {f}")
+    return set_key(s, "devLoadAlwaysFiles", ["devLoadAlwaysFiles:"] + files)
+
+
+def update_config(app, size, kind, phase, documents):
     p = os.path.join(".tfcore", "core-config.yaml")
     if not os.path.isfile(p):
         die(f"{p} does not exist at its literal path; is the framework installed here?")
     s = read(p)
-    s = set_key(s, "customTechnicalDocuments", [
-        "customTechnicalDocuments:",
-        f"  brd: docs/{app}-BRD.md",
-        f"  architecture: docs/{app}-Architecture.md",
-        f"  codingStandards: docs/{app}-Coding-Standards.md",
-    ])
-    s = set_key(s, "devLoadAlwaysFiles", [
-        "devLoadAlwaysFiles:",
-        f"  - docs/{app}-Coding-Standards.md",
-        f"  - docs/{app}-Architecture.md",
-    ])
+    if documents:
+        s = add_documents(s, app)
     if size:
         s = set_key(s, "appSize", [f"appSize: {size}"])
     if kind:
@@ -109,9 +134,9 @@ def update_config(app, size, kind, phase):
     if phase:
         s = set_key(s, "appPhase", [f"appPhase: {phase}"])
     write(p, s)
-    print(f"tf-day1-files: .tfcore/core-config.yaml updated (documents for {app}"
-          + (f", appSize {size}" if size else "") + (f", appKind {kind}" if kind else "")
-          + (f", appPhase {phase}" if phase else "") + ")")
+    done = ([f"documents for {app}"] if documents else []) + ([f"appSize {size}"] if size else []) \
+        + ([f"appKind {kind}"] if kind else []) + ([f"appPhase {phase}"] if phase else [])
+    print(f"tf-day1-files: .tfcore/core-config.yaml updated ({', '.join(done)})")
 
 
 def write_phases_doc(app):
@@ -161,8 +186,7 @@ def main(argv):
     app = argv[1]
     if not re.fullmatch(r"[A-Z][A-Za-z0-9]*", app):
         die(f"app name {app!r} must be PascalCase with no spaces")
-    size = kind = phase = None
-    prefix = "obj"
+    size = kind = phase = prefix = None
     args = argv[2:]
     i = 0
     while i < len(args):
@@ -190,12 +214,15 @@ def main(argv):
             i += 2
         else:
             die(f"unknown argument {a!r}")
-    update_config(app, size, kind, phase)
+    if not (size or kind or phase or prefix):
+        die("nothing to do: give --size, --kind, --phase or --prefix")
+    update_config(app, size, kind, phase, documents=bool(prefix))
     if size == "L":
         write_phases_doc(app)
-    write_from_template(app, "app-editorconfig-tmpl.editorconfig", ".editorconfig", None)
-    write_from_template(app, "app-agents-md-tmpl.md", "AGENTS.md", prefix)
-    write_from_template(app, "app-claude-md-tmpl.md", "CLAUDE.md", prefix)
+    if prefix:     # day-1 stage 2 only: a size, kind or phase change never rewrites these (Sevak TF-001)
+        write_from_template(app, "app-editorconfig-tmpl.editorconfig", ".editorconfig", None)
+        write_from_template(app, "app-agents-md-tmpl.md", "AGENTS.md", prefix)
+        write_from_template(app, "app-claude-md-tmpl.md", "CLAUDE.md", prefix)
     return 0