oh-my-opencode 5.1.51 → 5.1.54

package/dist/skills/programming/scripts/python/new-script.ts

@@ -0,0 +1,134 @@
+#!/usr/bin/env bun
+/**
+ * Generate a PEP 723 Python script with all boilerplate pre-filled: uv shebang,
+ * inline metadata (requires-python + dependencies), the mandatory "How to run"
+ * block, `from __future__ import annotations`, and a main() guard.
+ *
+ * ─── How to run ───
+ * 1. Install Bun: curl -fsSL https://bun.sh/install | bash
+ * 2. Run:
+ *      bun run new-script.ts my_tool
+ *      bun run new-script.ts my_tool --output ./scripts/my_tool.py
+ *      bun run new-script.ts my_tool --deps 'httpx2[http2,brotli,zstd]' --deps rich --deps polars
+ *      bun run new-script.ts my_tool --py 3.13
+ * ──────────────────
+ *
+ * Writes to <os tmpdir>/uv-scripts/<name>.py unless --output is given.
+ * Exit codes: 0 written, 2 usage error.
+ */
+
+import { chmodSync, mkdirSync, statSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { parseArgs } from "node:util";
+import { assertNever } from "../shared/run-tool.ts";
+
+const USAGE = `Usage: bun run new-script.ts <name> [--output <path>] [--deps <dep>]... [--py <version>]
+
+Arguments:
+  name          Script name (without .py extension)
+
+Options:
+  -o, --output  Output path (default: OS temp directory)
+  -d, --deps    Dependency to include (repeat --deps for each)
+  --py          Minimum Python version (default: 3.13)
+  -h, --help    Show this help`;
+
+type ScriptOptions = {
+  readonly name: string;
+  readonly output: string | undefined;
+  readonly deps: readonly string[];
+  readonly py: string;
+};
+
+type Cli =
+  | { readonly kind: "run"; readonly options: ScriptOptions }
+  | { readonly kind: "help" }
+  | { readonly kind: "usage"; readonly problem: string };
+
+function parseCli(): Cli {
+  try {
+    const { values, positionals } = parseArgs({
+      args: Bun.argv.slice(2),
+      options: {
+        output: { type: "string", short: "o" },
+        deps: { type: "string", short: "d", multiple: true, default: [] },
+        py: { type: "string", default: "3.13" },
+        help: { type: "boolean", short: "h", default: false },
+      },
+      allowPositionals: true,
+      strict: true,
+    });
+    if (values.help) return { kind: "help" };
+    const [name, ...extra] = positionals;
+    if (name === undefined || extra.length > 0) return { kind: "usage", problem: "expected exactly one script name" };
+    return { kind: "run", options: { name, output: values.output, deps: values.deps, py: values.py } };
+  } catch (error) {
+    if (error instanceof TypeError) return { kind: "usage", problem: error.message };
+    throw error;
+  }
+}
+
+function renderScript(pythonVersion: string, deps: readonly string[], filename: string): string {
+  const depsBlock =
+    deps.length > 0
+      ? deps.map((dep) => `#     "${dep}",\n`).join("")
+      : '#     # add deps here, e.g.: "httpx2[http2,brotli,zstd]"\n';
+  const argsHint = "";
+  return `#!/usr/bin/env -S uv run --script
+# /// script
+# requires-python = ">=${pythonVersion}"
+# dependencies = [
+${depsBlock}# ]
+# ///
+
+# ─── How to run ───
+# 1. Install uv (if not installed):
+#      curl -LsSf https://astral.sh/uv/install.sh | sh
+# 2. Run directly (no venv, no pip install needed):
+#      uv run ${filename} ${argsHint}
+# 3. Or make executable and run:
+#      chmod +x ${filename} && ./${filename}
+# ──────────────────
+
+from __future__ import annotations
+
+
+def main() -> None:
+    """TODO: implement."""
+
+
+if __name__ == "__main__":
+    main()
+`;
+}
+
+function writeScript({ name, output, deps, py }: ScriptOptions): void {
+  const filename = name.endsWith(".py") ? name : `${name}.py`;
+  const dest = output ?? join(tmpdir(), "uv-scripts", filename);
+  mkdirSync(dirname(dest), { recursive: true });
+  writeFileSync(dest, renderScript(py, deps, filename));
+  if (process.platform !== "win32") chmodSync(dest, statSync(dest).mode | 0o111);
+
+  console.log(`✓ Created: ${dest}`);
+  console.log(`  Run: uv run ${dest}`);
+}
+
+function main(): number {
+  const cli = parseCli();
+  switch (cli.kind) {
+    case "help":
+      console.log(USAGE);
+      return 0;
+    case "usage":
+      console.error(`Error: ${cli.problem}\n\n${USAGE}`);
+      return 2;
+    case "run":
+      writeScript(cli.options);
+      return 0;
+    default:
+      return assertNever(cli);
+  }
+}
+
+process.exit(main());

package/dist/skills/programming/scripts/rust/new-project.ts

@@ -0,0 +1,215 @@
+#!/usr/bin/env bun
+/**
+ * Scaffold a new Rust project with strict lints, deny.toml, rustfmt.toml, and
+ * rust-toolchain.toml pre-configured. The generated project passes its own
+ * fmt + clippy gate before any code is written.
+ *
+ * ─── How to run ───
+ * 1. Install Bun:  curl -fsSL https://bun.sh/install | bash
+ * 2. Install Rust: https://rustup.rs (cargo >= 1.85, edition 2024)
+ * 3. Run:
+ *      bun run new-project.ts myproject
+ *      bun run new-project.ts myproject --path ./workspace
+ * ──────────────────
+ *
+ * Exit codes: 0 created, 1 cargo or scaffold failure, 2 usage error.
+ */
+
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { parseArgs } from "node:util";
+import { assertNever, runTool } from "../shared/run-tool.ts";
+
+const USAGE = `Usage: bun run new-project.ts <name> [--path <dir>]
+
+Arguments:
+  name          Name of the new Rust project
+
+Options:
+  -p, --path    Parent directory where the project folder is created (default: cwd)
+  -h, --help    Show this help`;
+
+const RUST_TOOLCHAIN_TOML = `[toolchain]
+channel = "stable"
+components = ["rustfmt", "clippy", "rust-src"]
+profile = "default"
+`;
+
+const CARGO_TOML_LINTS = `
+[lints.rust]
+unsafe_op_in_unsafe_fn = "deny"
+missing_docs = "warn"
+missing_debug_implementations = "warn"
+unreachable_pub = "warn"
+unused_must_use = "deny"
+elided_lifetimes_in_paths = "warn"
+non_ascii_idents = "deny"
+trivial_numeric_casts = "warn"
+unused_lifetimes = "warn"
+single_use_lifetimes = "warn"
+unexpected_cfgs = { level = "deny", check-cfg = ["cfg(loom)"] }
+
+[lints.clippy]
+all = { level = "deny", priority = -1 }
+pedantic = { level = "warn", priority = -1 }
+nursery = { level = "warn", priority = -1 }
+cargo = { level = "warn", priority = -1 }
+undocumented_unsafe_blocks = "deny"
+multiple_unsafe_ops_per_block = "deny"
+unwrap_used = "deny"
+expect_used = "deny"
+panic = "deny"
+todo = "deny"
+unimplemented = "deny"
+dbg_macro = "deny"
+print_stdout = "warn"
+print_stderr = "warn"
+allow_attributes = "deny"
+allow_attributes_without_reason = "deny"
+let_underscore_must_use = "deny"
+indexing_slicing = "deny"
+mem_forget = "deny"
+clone_on_ref_ptr = "warn"
+module_name_repetitions = { level = "allow" }
+must_use_candidate = { level = "allow" }
+`;
+
+const DENY_TOML = `[advisories]
+yanked = "deny"
+
+[licenses]
+private = { ignore = true }  # publish = false crates carry no license field
+allow = ["MIT", "Apache-2.0", "BSD-2-Clause", "BSD-3-Clause", "ISC", "Unicode-3.0", "Zlib"]
+
+[bans]
+multiple-versions = "warn"
+wildcards = "deny"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+`;
+
+const MAIN_RS = `//! Command-line entry point.
+
+use std::io::Write as _;
+
+fn main() -> std::io::Result<()> {
+    writeln!(std::io::stdout().lock(), "Hello, world!")
+}
+`;
+
+const RUSTFMT_TOML = `edition = "2024"
+max_width = 100
+use_field_init_shorthand = true
+use_try_shorthand = true
+`;
+
+const EDITION_LINE = 'edition = "2024"\n';
+
+type ProjectOptions = { readonly name: string; readonly path: string };
+
+type Cli =
+  | { readonly kind: "run"; readonly options: ProjectOptions }
+  | { readonly kind: "help" }
+  | { readonly kind: "usage"; readonly problem: string };
+
+class ScaffoldError extends Error {
+  constructor(
+    readonly kind: "cargo-unavailable" | "cargo-init-failed" | "edition-too-old",
+    message: string,
+  ) {
+    super(message);
+    this.name = "ScaffoldError";
+  }
+}
+
+function parseCli(): Cli {
+  try {
+    const { values, positionals } = parseArgs({
+      args: Bun.argv.slice(2),
+      options: {
+        path: { type: "string", short: "p", default: process.cwd() },
+        help: { type: "boolean", short: "h", default: false },
+      },
+      allowPositionals: true,
+      strict: true,
+    });
+    if (values.help) return { kind: "help" };
+    const [name, ...extra] = positionals;
+    if (name === undefined || extra.length > 0) return { kind: "usage", problem: "expected exactly one project name" };
+    return { kind: "run", options: { name, path: values.path } };
+  } catch (error) {
+    if (error instanceof TypeError) return { kind: "usage", problem: error.message };
+    throw error;
+  }
+}
+
+function cargoInit(projectDir: string, name: string): void {
+  const init = runTool("cargo", ["init", projectDir, "--name", name]);
+  switch (init.kind) {
+    case "ok":
+      return;
+    case "unavailable":
+      throw new ScaffoldError("cargo-unavailable", `cargo not found (${init.reason}). Install Rust via https://rustup.rs`);
+    case "failed":
+      throw new ScaffoldError("cargo-init-failed", `cargo init failed:\n${init.stderr}`);
+    default:
+      return assertNever(init);
+  }
+}
+
+function scaffold({ name, path }: ProjectOptions): void {
+  const projectDir = join(path, name);
+  console.error(`Creating project ${name} at ${projectDir}`);
+  cargoInit(projectDir, name);
+
+  writeFileSync(join(projectDir, "rust-toolchain.toml"), RUST_TOOLCHAIN_TOML);
+  console.error("  wrote rust-toolchain.toml");
+
+  const cargoToml = join(projectDir, "Cargo.toml");
+  const manifest = readFileSync(cargoToml, "utf8");
+  if (!manifest.includes(EDITION_LINE)) {
+    throw new ScaffoldError("edition-too-old", "cargo did not create an edition 2024 package; install Rust >= 1.85");
+  }
+  const withMsrv = manifest.replace(EDITION_LINE, `${EDITION_LINE}rust-version = "1.85"\npublish = false\n`);
+  writeFileSync(cargoToml, withMsrv + CARGO_TOML_LINTS);
+  writeFileSync(join(projectDir, "src", "main.rs"), MAIN_RS);
+  console.error("  appended [lints] to Cargo.toml");
+
+  writeFileSync(join(projectDir, "deny.toml"), DENY_TOML);
+  console.error("  wrote deny.toml");
+
+  writeFileSync(join(projectDir, "rustfmt.toml"), RUSTFMT_TOML);
+  console.error("  wrote rustfmt.toml");
+
+  console.error(`\nDone! cd ${projectDir} && cargo check`);
+}
+
+function main(): number {
+  const cli = parseCli();
+  switch (cli.kind) {
+    case "help":
+      console.log(USAGE);
+      return 0;
+    case "usage":
+      console.error(`Error: ${cli.problem}\n\n${USAGE}`);
+      return 2;
+    case "run":
+      break;
+    default:
+      return assertNever(cli);
+  }
+  try {
+    scaffold(cli.options);
+    return 0;
+  } catch (error) {
+    if (error instanceof ScaffoldError) {
+      console.error(`Error: ${error.message}`);
+      return 1;
+    }
+    throw error;
+  }
+}
+
+process.exit(main());

package/dist/skills/programming/scripts/scaffolders.test.ts

@@ -0,0 +1,96 @@
+import { afterAll, describe, expect, test } from "bun:test";
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const runRoot = mkdtempSync(join(process.env.RUN_TMP ?? tmpdir(), "programming-scaffolders-"));
+const emptyBin = join(runRoot, "empty-bin");
+mkdirSync(emptyBin);
+
+afterAll(() => rmSync(runRoot, { recursive: true, force: true }));
+
+async function scaffold(script: string, args: readonly string[]) {
+  const child = Bun.spawn([process.execPath, join(import.meta.dir, script), ...args], {
+    cwd: runRoot,
+    env: { ...process.env, PATH: emptyBin },
+    stdout: "ignore",
+    stderr: "pipe",
+  });
+  const [stderr, code] = await Promise.all([new Response(child.stderr).text(), child.exited]);
+  return { stderr, code };
+}
+
+function pep723Metadata(source: string): unknown {
+  const block = /^# \/\/\/ script\n((?:#.*\n)*?)# \/\/\/$/m.exec(source)?.[1] ?? "";
+  return Bun.TOML.parse(block.replace(/^# ?/gm, ""));
+}
+
+describe("#given the Bun scaffolders run offline", () => {
+  test("#when new-script gets --deps and --py #then it writes an executable PEP 723 script declaring them", async () => {
+    const dest = join(runRoot, "scripts", "tool.py");
+
+    const result = await scaffold("python/new-script.ts", ["tool", "--output", dest, "-d", "polars", "--deps", "duckdb", "--py", "3.12"]);
+
+    expect(result.code).toBe(0);
+    expect(pep723Metadata(readFileSync(dest, "utf8"))).toEqual({ "requires-python": ">=3.12", dependencies: ["polars", "duckdb"] });
+    expect(statSync(dest).mode & 0o111).toBe(process.platform === "win32" ? 0 : 0o111);
+  });
+
+  test("#when go is not on PATH #then go new-project writes the fallback go.mod and substitutes the templates", async () => {
+    const project = join(runRoot, "svc");
+
+    const result = await scaffold("go/new-project.ts", ["svc", "--path", runRoot, "--module", "example.com/acme/svc", "--purpose", "billing"]);
+
+    expect(result.code).toBe(0);
+    expect(readFileSync(join(project, "go.mod"), "utf8")).toBe("module example.com/acme/svc\n\ngo 1.23\n");
+    expect(readFileSync(join(project, "cmd", "server", "main.go"), "utf8")).toContain('"example.com/acme/svc/internal/cmd"');
+    const agents = readFileSync(join(project, "AGENTS.md"), "utf8");
+    expect(agents).toContain(" billing ");
+    expect(agents).not.toMatch(/\$\{?[_a-z]/i);
+    expect(readFileSync(join(project, "README.md"), "utf8").split("\n")[0]).toBe("# svc");
+  });
+
+  test("#when the go templates were checked out with CRLF #then every generated file is LF", async () => {
+    // A CRLF checkout (git autocrlf) must not leak into the scaffolded project: its own .editorconfig says end_of_line = lf.
+    const scriptsCopy = join(runRoot, "crlf-scripts");
+    for (const dir of ["go", "shared"]) cpSync(join(import.meta.dir, dir), join(scriptsCopy, dir), { recursive: true });
+    const templatesDir = join(scriptsCopy, "go", "templates");
+    for (const file of readdirSync(templatesDir)) {
+      const path = join(templatesDir, file);
+      writeFileSync(path, readFileSync(path, "utf8").replace(/\r?\n/g, "\r\n"));
+    }
+    const project = join(runRoot, "crlf-svc");
+
+    const child = Bun.spawn([process.execPath, join(scriptsCopy, "go", "new-project.ts"), "crlf-svc", "--path", runRoot, "--module", "example.com/acme/crlf", "--purpose", "billing"], {
+      cwd: runRoot,
+      env: { ...process.env, PATH: emptyBin },
+      stdout: "ignore",
+      stderr: "pipe",
+    });
+    const [stderr, code] = await Promise.all([new Response(child.stderr).text(), child.exited]);
+
+    expect(code, stderr).toBe(0);
+    const generated = readdirSync(project, { recursive: true, withFileTypes: true })
+      .filter((entry) => entry.isFile())
+      .map((entry) => join(entry.parentPath, entry.name));
+    expect(generated.length).toBe(11);
+    const withCr = generated.filter((file) => readFileSync(file, "utf8").includes("\r"));
+    expect(withCr).toEqual([]);
+    expect(readFileSync(join(project, "README.md"), "utf8").split("\n")[0]).toBe("# crlf-svc");
+  });
+
+  test("#when cargo is not on PATH #then rust new-project exits 1 naming cargo", async () => {
+    const result = await scaffold("rust/new-project.ts", ["rsapp", "--path", runRoot]);
+
+    expect(result.code).toBe(1);
+    expect(result.stderr).toMatch(/\bcargo\b/);
+  });
+
+  test("#when uv is not on PATH #then python new-project exits 1 naming uv and creates nothing", async () => {
+    const result = await scaffold("python/new-project.ts", ["pyapp", "--path", runRoot]);
+
+    expect(result.code).toBe(1);
+    expect(result.stderr).toMatch(/\buv\b/);
+    expect(existsSync(join(runRoot, "pyapp"))).toBe(false);
+  });
+});

package/dist/skills/programming/scripts/shared/run-tool.ts

@@ -0,0 +1,19 @@
+/** Shared by the Python, Rust, and Go scaffolders: run uv/cargo/go and classify the outcome. */
+
+import { spawnSync } from "node:child_process";
+
+export type ToolOutcome =
+  | { readonly kind: "ok" }
+  | { readonly kind: "unavailable"; readonly reason: string }
+  | { readonly kind: "failed"; readonly status: number | null; readonly stderr: string };
+
+export function runTool(command: string, args: readonly string[], cwd?: string): ToolOutcome {
+  const result = spawnSync(command, args, { cwd, encoding: "utf8" });
+  if (result.error !== undefined) return { kind: "unavailable", reason: result.error.message };
+  if (result.status === 0) return { kind: "ok" };
+  return { kind: "failed", status: result.status, stderr: result.stderr };
+}
+
+export function assertNever(value: never): never {
+  throw new Error(`Unhandled variant: ${JSON.stringify(value)}`);
+}

package/dist/skills/visual-qa/SKILL.md

@@ -42,6 +42,10 @@ The verdict is per page. One failing page fails the whole surface, so "most page
 
 Every gate runs on captures produced AFTER the last edit to the rendered source. If any screenshot, PDF, capture, or QA JSON is older than the source file it claims to verify, it is stale and invalid - regenerate it before trusting it. Never report a PASS from an artifact you did not just produce against the current build. Between review rounds, re-capture only the pages a fix touched; the final approving round always judges a complete fresh set. The one deliberately old artifact is the `before` set of Step 6, which is dated to the pre-edit build on purpose.
 
+### Machine pre-check - the detect SDK before any reviewer
+
+On a web surface, run the `frontend` skill's detect SDK on every enumerated page before capturing for reviewers (`frontend/references/perfection/detect.md`: `detectPage({ kind: "url", url }, { reflow: true })`, or `bun <frontend skill dir>/scripts/detect/cli.ts --reflow --json <url>`). It reads the rendered page and reports contrast against the painted background, the type scale and heading order, overflow at 320-1440 px under an unbroken stress string, and decoration and copy tells. An error or warning is a FAIL on the matching checklist item (E2 contrast, B8 type scale, A9 or A13 layout, F8/F9 surfaces and scaffolds, C4 wrapping) before either reviewer looks; fix it and rerun. Keep the JSON beside the captures and hand it to both reviewers as evidence. Advisories go to the verdict's taste findings.
+
 ### Capture hygiene - validate before dispatching reviewers
 
 Before any reviewer sees an image, verify each capture yourself: the file signature matches its extension (a JPEG named `.png` is invalid), the frame is fully composited (no black or missing regions from the screenshot compositor), dimensions match the requested viewport, and the frame holds only the page - a capture showing the browser's tabs or address bar, or the capture tool's own UI, is a window grab, not evidence. A defective capture wastes an entire review round on the pipeline instead of the product - fix the capture tooling and re-shoot before dispatch, and record the tooling defect in the QA log instead of looping the reviewer on it.
@@ -116,7 +120,7 @@ This is the platform baseline, distilled from Apple's Human Interface Guidelines
 **A. Layout and alignment**
 - A1 Content is anchored by intent, centred or on the layout grid; nothing sits in the top-left of an otherwise empty canvas.
 - A2 Backgrounds and scrolling layouts run full-bleed to the display edges; no stray inset margin.
-- A3 Margins are symmetric; prose sits in a 45-75 character measure.
+- A3 Margins are symmetric; prose sits in a 65-75 character measure on desktop and at least 45 on a phone.
 - A4 (phone) Safe areas respected: bars and content inset for the home indicator, notch and status bar.
 - A5 (phone) Scrollbars are overlay; no reserved right-hand gutter.
 - A6 One scroll owner per region, no nested same-direction scrolling; a sticky or floating bar stays legible over whatever scrolls under it.
@@ -126,6 +130,7 @@ This is the platform baseline, distilled from Apple's Human Interface Guidelines
 - A10 Content that continues out of view shows a cue (partial item, fade, chevron).
 - A11 (mac) Nothing important lives only at the window's bottom edge; the minimum window size keeps toolbar and content legible; the sidebar collapses when the window narrows.
 - A12 (web and app screens; N/A for a TUI, a printed page, or a figure) Layout contract: every changed screen or region has a `Layout:` line (in `DESIGN.md`, or in the change description when the project has none; the `frontend` skill's Brief step); the capture shows that pattern's structure; the logged owner is the region's main scroller in the probe output, every other scroller listed is nested inside it for its own content (a code block, a dropdown, a composer) or is named in the line too; none of the line's anti-patterns appear. A missing line, a different main scroller, an unexplained sibling scroller, or a present anti-pattern is a FAIL; a logged skip still owes the scroll-owner check.
+- A13 Spacing rhythm, read from computed values: the space above a section heading is at least 1.5x the space below it, and the gap between groups is at least 2x the gap inside a group (the `frontend` skill's `references/perfection/craft-floor.md`).
 
 **B. Hierarchy**
 - B1 One primary action per view, in the prominent style (accent on its background, not its glyph); peers differ by style, never by size.
@@ -135,6 +140,7 @@ This is the platform baseline, distilled from Apple's Human Interface Guidelines
 - B5 One or two accents per screen; toolbars and tab bars stay monochrome over colourful content; nothing decorative carries accent.
 - B6 Type hierarchy comes from weight, size and colour, holds in both themes, and uses at most two typefaces.
 - B7 (web and app screens; N/A for a TUI, a printed page, or a figure) The screen matches its brief (the `frontend` skill's Brief step): the named primary action is the single prominent control, priorities 1-3 appear in that order in reading order on the first viewport, and nothing listed under "left out on purpose" is on the screen. A screen built or changed in this session with no brief is a FAIL; a pre-existing screen under audit with no brief is N/A.
+- B8 Type scale floor, read from computed values: each heading step in use (display to h3, and the smallest heading to body) differs by at least 1.25x in size, and body-family roles (lead, body, small, caption, label) that sit closer also differ by weight, colour or case, a display heading stays at or under 6rem, and letter spacing never goes below -0.04em, unless the brief's chosen style route sets its own display scale or tracking (then that value is the check).
 
 **C. Text and copy**
 - C1 Body text is at least 17 pt-equivalent at 390 (15 pt for secondary text) and 14 px on desktop; no thin weights at small sizes.
@@ -159,6 +165,7 @@ This is the platform baseline, distilled from Apple's Human Interface Guidelines
 - E4 One colour never means two things; status colours are consistent across the surface.
 - E5 Translucent surfaces keep text legible over any scrolled content: blur or vibrancy, not a plain alpha fill.
 - E6 The theme follows the system; an in-app theme control also offers "system".
+- E7 Secondary text on a tinted or coloured surface is a shade of that hue or the foreground at reduced alpha, never neutral gray; a shadow carries a y-offset and a soft blur, never a zero-offset coloured glow unless the brief asked for glowing-border cards (the `frontend` skill's ambience route).
 
 **F. Consistency and brand**
 - F1 One icon set with one stroke, weight and size; icon weight matches adjacent text; no emoji used as an icon.
@@ -168,6 +175,10 @@ This is the platform baseline, distilled from Apple's Human Interface Guidelines
 - F5 Selected or active state is a wash plus a glyph; focus is a focus-visible ring on fields and a row highlight in lists; no coloured accent side-border marks state.
 - F6 Standard glyphs for standard actions (share, close, back, search, more) in their standard places.
 - F7 Windows, sheets and popovers use system shapes; one sheet or popover at a time; a popover's arrow points at its source; only an alert may appear over a popover.
+- F8 Browser surfaces carry the palette in both themes: text selection, caret, visible scrollbars, focus ring, link underline offset, and tabular numerals in changing or aligned numbers; none shows the browser default (select text and focus a field in the capture to prove it).
+- F9 None of the generated scaffolds: a kicker label above a heading, an icon tile stacked over a heading in a grid of same-size cards, a hero metric with no decision behind it, a card nested in a card, monospace used as a "technical" costume. One the brief or its chosen route asked for, recorded as such, passes.
+
+A13, B8, E7, F8 and F9 are adapted from the craft floor of [pbakaus/impeccable](https://github.com/pbakaus/impeccable) (Apache-2.0, Copyright 2025 Paul Bakaus); the license and the list of changes are in the `frontend` skill's `ATTRIBUTION.md` section 6.
 
 **G. Motion and feedback**
 - G1 Every animation has a cause - an interaction, a state change, an arrival; no motion on non-interactive elements, no hover that changes nothing, no permanent loop.