Align deps and version check script

Bumps `@phcdevworks/spectre-tokens` to `^3.2.0` (with related toolchain updates in `package.json`) and records the dependency-drift resolution in `CHANGELOG.md`. Migrates `scripts/check-readme-version` from `.mjs` to `.ts`, adds a typed package parse, and updates `check:version-sync` to run via `node --experimental-strip-types`. Also expands `AGENTS.md` with upstream request/roadmap self-expansion guidance and a TypeScript-only rule for scripts.

Author: bradpotts

AGENTS.md

@@ -41,6 +41,28 @@ speculative component without a backing `@phcdevworks/spectre-ui` recipe
 requires explicit approval from Bradley Potts before merge. See
 [Non-Negotiable Limits](#non-negotiable-limits) for the full list.
 
+## Upstream Requests and Roadmap Self-Expansion
+
+Full directive: project-team [AGENTS.md](../AGENTS.md) "Upstream Requests and
+Roadmap Self-Expansion." Applied to this repo:
+
+- This repo is L3a — its upstream is `spectre-ui` (and transitively
+  `spectre-tokens`). If a component needs a recipe, class, or token value that
+  doesn't exist upstream, append the request to `spectre-ui/TODO.md` under
+  `## Requested by Downstream`, dated, with the reason and a link back to this
+  repo's own TODO.md/ROADMAP.md. Never recreate the recipe locally instead.
+- There is no known downstream consumer of this repo within the workspace yet.
+  If one appears, it should append requests to this repo's own `TODO.md` under
+  `## Requested by Downstream`, kept visible and separate from self-planned
+  component work.
+- This repo's own [ROADMAP.md](ROADMAP.md) may be proactively expanded with new
+  or reordered phases by the agent's own analysis — but never mark a phase
+  delivered without `npm run check` passing, and never add a speculative new
+  component without a backing recipe already published in `spectre-ui`.
+- Surface any new TODO request or roadmap expansion in the handoff for Bradley
+  Potts in the same change it was made, and reflect cross-repo-relevant
+  changes in the project-team's own ROADMAP.md/TODO.md.
+
 ## Shared Source Rules
 
 These rules apply to every agent without exception.
@@ -111,6 +133,8 @@ rules.
    framework adapters in this repository.
 10. Treat component tags, public properties, events, slots, exports, and
     accessibility behavior as stable contracts that should not change casually.
+11. All `scripts/` tooling is TypeScript (`.ts`); never add a new `.js`/`.mjs`
+    script. Run via `node --experimental-strip-types scripts/<name>.ts`.
 
 ## Working Boundaries
 

CHANGELOG.md

@@ -6,6 +6,12 @@ reflects package releases published to npm.
 
 ## [Unreleased]
 
+### Changed
+
+- Bumped `@phcdevworks/spectre-tokens` to `^3.2.0`, closing dependency drift
+  against the current published `project-design` version. The upstream
+  release was additive only — no source changes required here.
+
 ## [1.5.0] - 2026-06-11
 
 **Release Title:** Phase 5 Display Surface Expansion

package-lock.json

@@ -154,7 +154,7 @@
     "check:exports": "node --experimental-strip-types scripts/check-exports.ts",
     "check:contract": "node --experimental-strip-types scripts/check-contract.ts",
     "check:invariants": "node --experimental-strip-types scripts/check-invariants.ts",
-    "check:version-sync": "node scripts/check-readme-version.mjs",
+    "check:version-sync": "node --experimental-strip-types scripts/check-readme-version.ts",
     "check:ecosystem": "spectre-manifest-validate spectre.manifest.json && spectre-manifest-check spectre.manifest.json ."
   },
   "publishConfig": {
@@ -164,7 +164,7 @@
     "typescript": "^5.9 || ^6.0"
   },
   "dependencies": {
-    "@phcdevworks/spectre-tokens": "^3.1.0",
+    "@phcdevworks/spectre-tokens": "^3.2.0",
     "@phcdevworks/spectre-ui": "^2.5.0",
     "lit": "^3.3.3"
   },
@@ -175,11 +175,11 @@
     "@typescript-eslint/eslint-plugin": "^8.62.0",
     "@typescript-eslint/parser": "^8.62.0",
     "axe-core": "^4.12.1",
-    "eslint": "^10.5.0",
+    "eslint": "^10.6.0",
     "globals": "^17.7.0",
     "happy-dom": "^20.10.6",
     "jiti": "^2.7.0",
-    "prettier": "^3.8.4",
+    "prettier": "^3.9.0",
     "tailwindcss": "^4.3.1",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",

package.json

@@ -4,7 +4,7 @@ import { resolve } from 'node:path';
 const repoRoot = resolve(import.meta.dirname, '..');
 
 const pkgPath = process.env.README_VERSION_PKG_PATH ?? 'package.json';
-const pkg = JSON.parse(readFileSync(resolve(repoRoot, pkgPath), 'utf-8'));
+const pkg = JSON.parse(readFileSync(resolve(repoRoot, pkgPath), 'utf-8')) as { version: string };
 const readme = readFileSync(resolve(repoRoot, 'README.md'), 'utf-8');
 
 const match = readme.match(/\|\s*Current version\/status\s*\|\s*([^\s|]+)\s*\|/i);