Tranche T — THE OWNER'S BAR (impl drive)

.github/workflows/deploy-pages.yml

@@ -17,6 +17,20 @@
 #
 # SECRET DISCIPLINE: CLOUDFLARE_API_TOKEN (Pages:Edit + Read) + CLOUDFLARE_ACCOUNT_ID
 # are GH Actions repo secrets, consumed via ${{ secrets.* }}, never inlined/echoed.
+#
+# T.S6 (S.A3 revival) — the auto-deploy-of-record path is GATED ON GREEN
+# demo-correctness. The `ci` workflow's `success` conclusion already REQUIRES the
+# `demo-correctness` blocking job (ci.yml — it "gates deploy"), so a green ci run
+# IS a green demo-correctness run. T.S6 makes that coupling EXPLICIT + fail-loud:
+# the `demo-correctness-green` preflight job below re-asserts, via the triggering
+# run's jobs API, that the SPECIFIC demo-correctness job concluded `success` — so a
+# future ci restructure that demotes demo-correctness from blocking cannot silently
+# ship a red-stage build. The job NAME is single-sourced in ONE place
+# (env.DEMO_CORRECTNESS_JOB); if ci.yml renames that job the preflight reds in
+# lockstep (the drive lesson: gates anchor literal paths — the same for job refs).
+# NOTE: T.S6 wires the MECHANISM only. The auto-path FIRING is permitted at T.Z,
+# gated on the T.M owner-anchored render gates (the auto-path is the mechanism; the
+# owner gates are the permission — T.S charter note 4). No deploy fires from T.S6.
 name: deploy-pages
 
 on:
@@ -31,12 +45,56 @@ concurrency:
 
 permissions:
     contents: read
+    actions: read
+
+env:
+    # SINGLE SOURCE of the ci.yml demo-correctness job name (T.S6). The preflight
+    # gate below matches the triggering run's job of this exact name; a ci.yml
+    # rename must update THIS string in lockstep (else the preflight reds).
+    DEMO_CORRECTNESS_JOB: "demo correctness (inv γ paints + inv δ occlusion-free · BLOCKING · gates deploy)"
 
 jobs:
+    # T.S6 — the demo-correctness green preflight (the S.A3 explicit gate). On a
+    # workflow_run trigger, re-assert that the SPECIFIC demo-correctness job of the
+    # triggering ci run concluded `success` before the deploy job runs. A manual
+    # dispatch skips this (break-glass, break the loop by hand). The job name is
+    # read from the single-sourced env.DEMO_CORRECTNESS_JOB.
+    demo-correctness-green:
+        name: preflight — demo-correctness concluded green
+        if: >-
+            github.event_name == 'workflow_dispatch' ||
+            (github.event.workflow_run.conclusion == 'success' &&
+             github.event.workflow_run.head_branch == 'master' &&
+             github.event.workflow_run.event == 'push')
+        runs-on: ubuntu-latest
+        timeout-minutes: 5
+        steps:
+            - name: assert the demo-correctness job succeeded (single-sourced job name)
+              env:
+                  GH_TOKEN: ${{ github.token }}
+              run: |
+                  set -euo pipefail
+                  if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+                      echo "manual dispatch (break-glass) — skipping the demo-correctness preflight."
+                      exit 0
+                  fi
+                  RUN_ID="${{ github.event.workflow_run.id }}"
+                  echo "Auditing ci run $RUN_ID for a green '$DEMO_CORRECTNESS_JOB' job…"
+                  CONCLUSION=$(gh api "repos/${{ github.repository }}/actions/runs/$RUN_ID/jobs" --paginate \
+                      --jq --arg n "$DEMO_CORRECTNESS_JOB" '.jobs[] | select(.name == $n) | .conclusion' | head -1)
+                  echo "demo-correctness conclusion: '${CONCLUSION:-<job not found>}'"
+                  if [ "$CONCLUSION" != "success" ]; then
+                      echo "::error::demo-correctness did not conclude green (got '${CONCLUSION:-missing}') — the auto-deploy path is GATED on green demo-correctness (S.A3). Not shipping."
+                      exit 1
+                  fi
+                  echo "demo-correctness is green — deploy may proceed."
+
     deploy:
         name: build demo + ship → Cloudflare Pages
+        needs: demo-correctness-green
         # Deploy on a manual dispatch, OR whenever the `ci` workflow finishes GREEN
-        # on a master PUSH. No path filter: every green-CI master push re-ships the
+        # on a master PUSH (with the demo-correctness-green preflight satisfied — the
+        # S.A3 explicit gate). No path filter: every green-CI master push re-ships the
         # live site (the prior tip-commit filter skipped pushes with a docs-only
         # tip even when earlier commits changed the demo).
         if: >-

.github/workflows/release.yml

@@ -69,13 +69,14 @@ jobs:
               run: npm run proof:published-surface
             - name: proof:deps-current (L.W4 S7 — @mkbabb/* pins current · protocol-clean · realm-convergent lock)
               run: npm run proof:deps-current
-            # Q.WE1/Q.WZ S2 — the breaking-surface gates on the publish path: a 5.0.0 publish
+            # Q.WE1/Q.WZ S2 + S.C1 — the breaking-surface gates on the publish path: a publish
             # with un-dropped @deprecated aliases (proof:alias-dropped, over the built d.ts) or an
-            # undocumented breaking set (proof:changelog-5, the MIGRATION-5.0.0.md oracle) is BLOCKED.
+            # undocumented breaking removal (proof:changelog, the C-18 generalized MIGRATION oracle)
+            # is BLOCKED.
             - name: proof:alias-dropped (Q.WE1 — the @deprecated Animation/ScrollTimeline aliases are GONE from the built d.ts · the no-legacy breaking surface)
               run: npm run proof:alias-dropped
-            - name: proof:changelog-5 (Q.WE1 — docs/MIGRATION-5.0.0.md records the full breaking alias-drop old→new set)
-              run: npm run proof:changelog-5
+            - name: proof:changelog (S.C1 · C-18 — every removed published-surface row is documented in docs/MIGRATION-<version>.md)
+              run: npm run proof:changelog
             # L.W4 S8 — proof:peer-satisfied on the publish path: the F-2 peer-cycle
             # tripwire. BORN-RED-BY-DESIGN (glass-ui's published peer range rejects
             # value.js 0.13.0 → ELSPROBLEMS). It rides the publish path as a RECORDED

CHANGELOG.md

@@ -3,6 +3,18 @@
 <!-- CONVENTION: entries follow the 5.0.0 format — consumer-facing Breaking/Minor/Patch sections,
      no internal wave codes (Wn, Band X, Tranche Y). Keep planning language in docs/tranches/. -->
 
+## 5.2.0
+
+### Minor Changes (additive)
+
+- **Plain values at the custom-`transform` seam.** A custom `transform` function ("animate any object") now receives plain, authored-shaped values — numbers where you authored numbers, strings where units/colors demand them — fixing the regression under `@mkbabb/value.js` 2.x where internal `ValueUnit`-boxed leaves leaked through to consumers (a second writer concatenating onto a boxed value could produce `NaN` frames). Both the per-animation path and the `AnimationGroup` compositor path deliver the same plain shape; the hot path remains allocation-free.
+- **`fromMorphSVG` renders at rest.** The `from` shape is now written to the target's SVG `d` attribute at construction, so a morph target paints correctly before any frame is written — the at-rest render no longer depends on a live engine write. The per-frame CSS `d:` channel still takes over while a frame is in flight.
+- **Dependency floor: `@mkbabb/value.js` ^3.1.0.** The consumed parsing/geometry surface is unchanged; the bump clears the nested self-dependency install present in 2.x.
+
+### Demo
+
+- The demo was rebuilt end-to-end against a live design review: an honest per-scene control facility (Controls/Keyframes/Timeline derive from real, painting animations), an easing specimen gallery, a per-character hero, one violet accent authority, glass-ui dock/drawer/easing-picker consumption, and measured true-rest/idle performance. Demo-only — no library surface is affected.
+
 ## 5.1.0
 
 ### Minor Changes (additive)