@1agh/maude 0.17.2 → 0.18.1

package/cli/commands/design.mjs

@@ -508,6 +508,13 @@ function escapeReg(s) {
 }
 
 function defaultPayload({ projectName, dsName }) {
+  // `--no-discovery` mode emits a deliberately NEUTRAL skeleton:
+  // achromatic grayscale, system fonts only, equal spacing/radii steps,
+  // single accent set to neutral graphite. The intent is for the project
+  // to immediately overwrite these with discovery-driven values via
+  // `/design:setup-ds`. These are NOT a "recommended starter palette" —
+  // they're an explicit placeholder that should look unfinished, so the
+  // designer is nudged toward actual decisions (DDR-026, 2026-05-25).
   return {
     project_name: projectName,
     project_label: titleCase(projectName),
@@ -515,7 +522,7 @@ function defaultPayload({ projectName, dsName }) {
     ds_skill_name: `${dsName}-design`,
     ds_description: `Default design system for ${projectName}.`,
     root_class: 'app',
-    theme_default: 'dark',
+    theme_default: 'light',
     theme_extra: '',
     handoff_targets: '[]',
     active_families: JSON.stringify(['accent']),
@@ -528,38 +535,94 @@ function defaultPayload({ projectName, dsName }) {
     platform_hard_rules: '',
     content_tone: 'direct-terse',
     mood_references_block: '_(not specified — extend during the next /design:setup-ds run)_',
-    type_scale_summary: '8-step ladder, 12–36px.',
-    voice_tone_block: 'Direct, terse. Action verbs. No marketing puffery.',
-    voice_tone_summary: 'direct-terse',
-    iconography_summary: 'Lucide, 1.5px stroke.',
+    type_scale_summary: '8-step ladder, populated by discovery.',
+    type_scale_summary_compact: '8-step (modular ratio)',
+    voice_tone_block: 'Voice not declared yet — capture during /design:setup-ds.',
+    voice_tone_summary: 'not-declared',
+    iconography_summary: 'Icon family not declared yet — capture during /design:setup-ds.',
     hard_rules_from_system_readme: '_(see system/<ds>/README.md Hard rules section)_',
     hard_rules_block:
-      '- WCAG 2.1 AA contrast\n- No off-token colors / radii / spacings\n- Real product strings only — no placeholder copy',
+      '- WCAG 2.1 AA contrast\n- No off-token values in canvases\n- Real product strings only — no placeholder copy',
     iso_timestamp: new Date().toISOString(),
-    // Token defaults (dark theme, neutral indigo accent)
-    bg_0_oklch: 'oklch(16% 0.012 245)',
-    bg_1_oklch: 'oklch(20% 0.014 245)',
-    bg_2_oklch: 'oklch(24% 0.014 245)',
-    bg_3_oklch: 'oklch(28% 0.013 245)',
-    bg_4_oklch: 'oklch(33% 0.013 245)',
-    fg_0_oklch: 'oklch(96% 0.008 245)',
-    fg_1_oklch: 'oklch(78% 0.012 245)',
-    fg_2_oklch: 'oklch(60% 0.012 245)',
-    fg_3_oklch: 'oklch(42% 0.010 245)',
-    accent_oklch: 'oklch(64% 0.18 264)',
-    accent_fg_oklch: 'oklch(98% 0.008 264)',
-    radius_xs: '4px',
-    radius_sm: '6px',
-    radius_md: '8px',
-    radius_lg: '12px',
-    radius_xl: '16px',
-    font_display: '"Inter", system-ui, sans-serif',
-    font_body: '"Inter", system-ui, sans-serif',
-    font_mono: '"JetBrains Mono", ui-monospace, monospace',
-    dur_flip: '140ms',
-    dur_panel: '220ms',
-    dur_route: '260ms',
+    // ─── Neutral-skeleton tokens (light theme grayscale, no chroma) ───
+    bg_0: 'oklch(100% 0 0)',
+    bg_1: 'oklch(97% 0 0)',
+    bg_2: 'oklch(94% 0 0)',
+    bg_3: 'oklch(90% 0 0)',
+    bg_4: 'oklch(85% 0 0)',
+    border_subtle: 'oklch(92% 0 0)',
+    border_default: 'oklch(85% 0 0)',
+    border_strong: 'oklch(70% 0 0)',
+    border_strategy: 'fixed-token',
+    fg_0: 'oklch(15% 0 0)',
+    fg_1: 'oklch(35% 0 0)',
+    fg_2: 'oklch(55% 0 0)',
+    fg_3: 'oklch(75% 0 0)',
+    accent_strategy: 'single',
+    accent_strategy_summary: 'single accent — discovery has not been run',
+    accent_block:
+      '  --accent:        oklch(35% 0 0);\n  --accent-hover:  oklch(30% 0 0);\n  --accent-active: oklch(25% 0 0);\n  --accent-fg:     oklch(98% 0 0);',
+    accent_rules_block:
+      'Single accent family (`--accent`, `--accent-hover`, `--accent-active`, `--accent-fg`). Project has not run discovery yet — the accent is set to neutral graphite as a placeholder. Run `/design:setup-ds` to pick a real palette.',
+    accent_rules_summary: 'Single family until discovery runs.',
+    color_space: 'oklch',
+    color_space_summary: 'OKLCH (default)',
+    color_space_block:
+      '**Color space:** OKLCH (default). Override via `config.colorSpace` if your project requires HSL, hex, or LAB.',
+    status_success: 'oklch(55% 0 0)',
+    status_warn: 'oklch(55% 0 0)',
+    status_error: 'oklch(55% 0 0)',
+    status_info: 'oklch(55% 0 0)',
+    presence_online: 'var(--status-success)',
+    presence_away: 'var(--status-warn)',
+    presence_offline: 'var(--fg-3)',
+    shadow_sm: 'none',
+    shadow_md: 'none',
+    shadow_lg: 'none',
+    radius_xs: '0',
+    radius_sm: '0',
+    radius_md: '0',
+    radius_lg: '0',
+    radius_xl: '0',
+    radius_pill: '999px',
+    space_0: '0',
+    space_1: '4px',
+    space_2: '8px',
+    space_3: '12px',
+    space_4: '16px',
+    space_5: '24px',
+    space_6: '32px',
+    space_7: '48px',
+    space_8: '64px',
+    font_display: 'system-ui, sans-serif',
+    font_body: 'system-ui, sans-serif',
+    font_mono: 'ui-monospace, monospace',
+    type_xs: '12px',
+    lh_xs: '16px',
+    type_sm: '13px',
+    lh_sm: '18px',
+    type_base: '14px',
+    lh_base: '20px',
+    type_md: '16px',
+    lh_md: '22px',
+    type_lg: '18px',
+    lh_lg: '26px',
+    type_xl: '22px',
+    lh_xl: '30px',
+    type_2xl: '28px',
+    lh_2xl: '36px',
+    type_3xl: '36px',
+    lh_3xl: '44px',
+    dur_flip: '120ms',
+    dur_panel: '200ms',
+    dur_route: '240ms',
     dur_soft: '320ms',
+    ease_out_curve: 'ease-out',
+    ease_in_out_curve: 'ease-in-out',
+    layout_max_w: '1200px',
+    layout_gutter: 'var(--space-4)',
+    touch_target_rule:
+      '44×44 minimum on touch surfaces (iOS HIG); 48×48 if the primary platform is Android (Material). N/A on desktop-only systems.',
     // Empty-state template fields
     empty_subject: 'items',
     empty_supporting: "When you create your first one, it'll show up here.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.17.2",
+  "version": "0.18.1",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -41,13 +41,13 @@
     "prepublishOnly": "bash scripts/check-version-parity.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.17.2",
-    "@1agh/maude-darwin-x64": "0.17.2",
-    "@1agh/maude-linux-arm64": "0.17.2",
-    "@1agh/maude-linux-arm64-musl": "0.17.2",
-    "@1agh/maude-linux-x64": "0.17.2",
-    "@1agh/maude-linux-x64-musl": "0.17.2",
-    "@1agh/maude-win32-x64": "0.17.2"
+    "@1agh/maude-darwin-arm64": "0.18.1",
+    "@1agh/maude-darwin-x64": "0.18.1",
+    "@1agh/maude-linux-arm64": "0.18.1",
+    "@1agh/maude-linux-arm64-musl": "0.18.1",
+    "@1agh/maude-linux-x64": "0.18.1",
+    "@1agh/maude-linux-x64-musl": "0.18.1",
+    "@1agh/maude-win32-x64": "0.18.1"
   },
   "files": [
     "cli",

package/plugins/design/dev-server/bin/screenshot.sh

@@ -64,6 +64,18 @@ else
   [ -z "$OUT" ]     && { echo "screenshot.sh: --out required for single-shot modes" >&2; exit 2; }
 fi
 
+# TSX specimens cannot be opened via file:// — the browser would see raw JSX.
+# They must go through the dev-server route (http://localhost:PORT/<rel>),
+# which transpiles via _canvas-shell.html?canvas=<rel>. Phase 19 / DDR-044.
+case "$URL" in
+  file://*.tsx)
+    echo "screenshot.sh: TSX specimens cannot be screenshot via file:// (the browser sees raw JSX)." >&2
+    echo "  Use --port instead — the dev-server compiles TSX through _canvas-shell.html?canvas=<rel>." >&2
+    echo "  Example: screenshot.sh --port 4399 --full --out shot.png  (set the active canvas in the browser first)" >&2
+    exit 2
+    ;;
+esac
+
 # ---------- url resolution ----------
 if [ -z "$URL" ]; then
   REPO="${ROOT:-${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}}"

package/plugins/design/dev-server/boot-self-heal.ts

@@ -0,0 +1,87 @@
+// Boot-time artifact check — Phase 19 / DDR-044, simplified in v0.18.1.
+//
+// The two artifacts the server cannot run without:
+//   - dist/client.bundle.js   (the React shell that hydrates the / route)
+//   - dist/runtime/react.js   (pre-built canvas-runtime bundle for TSX iframes)
+//
+// Both are committed to git per DDR-044 and ship in every distribution:
+// npm tarball (via package.json#files override of .gitignore), marketplace
+// cache (negation entries in .gitignore preserve them through git clone),
+// and bun --compile binary (embedded via the build pipeline).
+//
+// v0.18.0 ALSO tried to `bun install --production` if node_modules/react
+// was missing. That assumption was wrong: (a) npm install of the root
+// @1agh/maude package never installs nested workspace deps, (b) the
+// compiled binary's import.meta.url resolves to the virtual /$bunfs/root
+// so existsSync against it always failed and the self-heal false-triggered,
+// (c) standalone bun --compile binaries don't inherit shell PATH the same
+// way subshells do, so even when bun WAS available, Bun.spawn(['bun',...])
+// failed with ENOENT. The greenfield npm-install user hit all three at
+// once and got a stacktrace. v0.18.1 drops the install/build attempt
+// entirely — pre-built runtime bundles ship with the artifact, no fix-up
+// pass needed.
+
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { DEV_SERVER_ROOT, DIST_DIR, RUNTIME_BUNDLES_DIR } from './paths.ts';
+
+export interface SelfHealOptions {
+  /** Defaults to DEV_SERVER_ROOT from paths.ts (real disk install dir). */
+  here?: string;
+  /** Defaults to console.error; tests override to capture. */
+  log?: (msg: string) => void;
+  /** Defaults to process.exit; tests override to assert without aborting. */
+  exit?: (code: number) => never;
+}
+
+export interface SelfHealResult {
+  /** Names of artifacts the check verified are present. */
+  verified: ('client.bundle.js' | 'runtime/react.js')[];
+}
+
+/**
+ * Verify the committed artifacts the dev-server depends on are reachable
+ * from the resolved install dir. If anything is missing, exit with a clear
+ * remediation message — this means the install is broken, not a transient
+ * first-boot gap. Always passes for npm installs, marketplace cache clones,
+ * and `bun --compile` binaries built on a freshly-built repo.
+ */
+export async function bootSelfHeal(opts: SelfHealOptions = {}): Promise<SelfHealResult> {
+  const here = opts.here ?? DEV_SERVER_ROOT;
+  const log = opts.log ?? ((m) => console.error(m));
+  const exit =
+    opts.exit ??
+    ((code: number) => {
+      process.exit(code);
+    });
+
+  const dist = here === DEV_SERVER_ROOT ? DIST_DIR : join(here, 'dist');
+  const runtime = here === DEV_SERVER_ROOT ? RUNTIME_BUNDLES_DIR : join(dist, 'runtime');
+
+  const missing: string[] = [];
+  if (!existsSync(join(dist, 'client.bundle.js'))) missing.push('dist/client.bundle.js');
+  if (!existsSync(join(runtime, 'react.js'))) missing.push('dist/runtime/react.js');
+
+  if (missing.length > 0) {
+    log(
+      [
+        '',
+        '  ⚠ dev-server install is missing committed artifacts:',
+        ...missing.map((m) => `  - ${m}`),
+        '',
+        `  Looked under: ${here}`,
+        '',
+        '  This means your install is corrupted or pre-Phase-19.1. Fix:',
+        '    npm uninstall -g @1agh/maude && npm i -g @1agh/maude',
+        '  (or remove + re-add the marketplace plugin in Claude Code)',
+        '',
+      ].join('\n')
+    );
+    exit(1);
+  }
+
+  return {
+    verified: ['client.bundle.js', 'runtime/react.js'],
+  };
+}

package/plugins/design/dev-server/build.ts

@@ -65,13 +65,29 @@ function ensureDist() {
   if (!existsSync(DIST)) mkdirSync(DIST, { recursive: true });
 }
 
+async function readPluginVersion(): Promise<{ version: string }> {
+  // plugins/design/dev-server/ → plugins/design/.claude-plugin/plugin.json
+  const manifest = join(ROOT, '..', '.claude-plugin', 'plugin.json');
+  try {
+    const parsed = JSON.parse(await Bun.file(manifest).text()) as { version?: unknown };
+    if (typeof parsed.version === 'string') return { version: parsed.version };
+  } catch {
+    /* fall through to dev default */
+  }
+  return { version: 'dev' };
+}
+
 // ---------- (a) Client JSX bundle ----------
 
 async function buildClient(): Promise<{ outBytes: number; outPath: string }> {
   ensureDist();
   const outPath = join(DIST, 'client.bundle.js');
-  // Read package.json version at build time for the wordmark sub-line.
-  const pkg = JSON.parse(await Bun.file(join(ROOT, '..', '..', '..', 'package.json')).text());
+  // Wordmark sub-line version. Read from plugins/design/.claude-plugin/plugin.json —
+  // that file ships in both npm installs AND marketplace-cache clones (it's the
+  // plugin manifest, always present). The old `../../../package.json` hop
+  // resolved to the repo root in dev but ENOENT'd in marketplace caches where
+  // the maude bundle isn't installed as a package. DDR-044, Phase 19.
+  const pkg = await readPluginVersion();
   const result = await Bun.build({
     entrypoints: [join(ROOT, 'client/app.jsx')],
     outdir: DIST,
@@ -120,6 +136,35 @@ async function buildCss(): Promise<{ outBytes: number; outPath: string }> {
   return { outBytes: code.byteLength, outPath };
 }
 
+// ---------- (b.5) Pre-built runtime bundles (Phase 19.1 / v0.18.1) ----------
+//
+// /_canvas-runtime/<slug>.js used to lazy-build on first request via Bun.build.
+// That required a real disk node_modules/react reachable by walking up from
+// the dev-server dir — false in compiled binaries (paths are virtual) AND
+// false in npm installs (npm doesn't install nested workspace deps).
+// Pre-building all 6 sub-bundles at release time + shipping in dist/runtime/
+// eliminates the runtime dependency on disk node_modules entirely.
+
+async function buildRuntimeBundles(): Promise<{ outDir: string; count: number; bytes: number }> {
+  // Defer import so build.ts can run in --dry-run without pulling react.
+  const { RUNTIME_PACKAGES, getRuntimeBundle, slugFor } = await import('./runtime-bundle.ts');
+  const outDir = join(DIST, 'runtime');
+  if (!existsSync(outDir)) mkdirSync(outDir, { recursive: true });
+  let bytes = 0;
+  for (const pkg of RUNTIME_PACKAGES) {
+    const slug = slugFor(pkg);
+    // skipPrebuilt: don't reuse a previous build's output. minify in release.
+    const bundle = await getRuntimeBundle(pkg, {
+      skipPrebuilt: true,
+      minify: MODE === 'release',
+    });
+    const outPath = join(outDir, `${slug}.js`);
+    await Bun.write(outPath, bundle.js);
+    bytes += bundle.js.length;
+  }
+  return { outDir, count: RUNTIME_PACKAGES.length, bytes };
+}
+
 // ---------- (c) Server binary (bun build --compile, per-platform) ----------
 
 // Per-target oxc-parser binding embed. Bun 1.3.4+ regressed `--compile` NAPI
@@ -357,6 +402,15 @@ async function main() {
     `[build] styles.css        ${css.outBytes.toLocaleString()} B  (${(t2 - t1).toFixed(0)} ms)`
   );
 
+  // Pre-built runtime bundles — ship to disk so /_canvas-runtime/* never
+  // needs a runtime Bun.build (which would need disk node_modules/react,
+  // absent in compiled binaries + npm installs). Phase 19.1 / v0.18.1.
+  const runtime = await buildRuntimeBundles();
+  const t2b = performance.now();
+  console.log(
+    `[build] dist/runtime/*.js ${runtime.bytes.toLocaleString()} B in ${runtime.count} files  (${(t2b - t2).toFixed(0)} ms)`
+  );
+
   if (MODE === 'release') {
     const targets: PlatformTarget[] = FLAG_TARGET
       ? [FLAG_TARGET as PlatformTarget]

package/plugins/design/dev-server/config.schema.json

@@ -116,6 +116,18 @@
       },
       "default": ["accent"]
     },
+    "accentStrategy": {
+      "type": "string",
+      "description": "How many --accent* families exist. The completeness-critic C7 gates the actual family count against this declaration. Default: 'single' (backwards-compatible). 'chromatic-N' is parameterized — write the literal N (e.g. 'chromatic-5'). Per DDR-043.",
+      "pattern": "^(single|paired|chromatic-[1-9][0-9]?)$",
+      "default": "single"
+    },
+    "colorSpace": {
+      "type": "string",
+      "enum": ["oklch", "hsl", "hex", "lab"],
+      "description": "Color space the project uses in tokens CSS. The completeness-critic V2 gates the actual token format against this declaration. Default: 'oklch' (backwards-compatible). Per DDR-043.",
+      "default": "oklch"
+    },
     "designSystems": {
       "type": "array",
       "description": "Design systems available in this project. Single-DS projects have one entry; multi-DS projects (marketing vs. admin vs. mobile) list each here. Each canvas's .meta.json declares which DS it uses via the 'designSystem' field.",