@1agh/maude 0.18.0 → 0.18.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -41,13 +41,13 @@
     "prepublishOnly": "bash scripts/check-version-parity.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.18.0",
-    "@1agh/maude-darwin-x64": "0.18.0",
-    "@1agh/maude-linux-arm64": "0.18.0",
-    "@1agh/maude-linux-arm64-musl": "0.18.0",
-    "@1agh/maude-linux-x64": "0.18.0",
-    "@1agh/maude-linux-x64-musl": "0.18.0",
-    "@1agh/maude-win32-x64": "0.18.0"
+    "@1agh/maude-darwin-arm64": "0.18.2",
+    "@1agh/maude-darwin-x64": "0.18.2",
+    "@1agh/maude-linux-arm64": "0.18.2",
+    "@1agh/maude-linux-arm64-musl": "0.18.2",
+    "@1agh/maude-linux-x64": "0.18.2",
+    "@1agh/maude-linux-x64-musl": "0.18.2",
+    "@1agh/maude-win32-x64": "0.18.2"
   },
   "files": [
     "cli",

package/plugins/design/dev-server/boot-self-heal.ts

@@ -1,90 +1,87 @@
-// Boot-time self-heal — covers the gap between marketplace-cache installs
-// (git clone, honors .gitignore, no `npm install`) and what server.ts needs
-// at runtime. Two artifacts can be missing on a fresh clone:
+// Boot-time artifact check — Phase 19 / DDR-044, simplified in v0.18.1.
 //
-//   - dist/client.bundle.js     → 404 on /_client/*
-//   - node_modules/react        → 500 on /_canvas-runtime/*
+// The two artifacts the server cannot run without:
+//   - dist/client.bundle.js   (the React shell that hydrates the / route)
+//   - dist/runtime/react.js   (pre-built canvas-runtime bundle for TSX iframes)
 //
-// Per DDR-044 we commit the bundle + styles, so dist/ should be present.
-// For node_modules/ we self-heal: detect missing react, run `bun install
-// --production`. Opt out with MAUDE_NO_AUTOBUILD=1 for read-only-filesystem
-// deployments (e.g. immutable infra).
+// Both are committed to git per DDR-044 and ship in every distribution:
+// npm tarball (via package.json#files override of .gitignore), marketplace
+// cache (negation entries in .gitignore preserve them through git clone),
+// and bun --compile binary (embedded via the build pipeline).
 //
-// Phase 19. DDR-044.
+// v0.18.0 ALSO tried to `bun install --production` if node_modules/react
+// was missing. That assumption was wrong: (a) npm install of the root
+// @1agh/maude package never installs nested workspace deps, (b) the
+// compiled binary's import.meta.url resolves to the virtual /$bunfs/root
+// so existsSync against it always failed and the self-heal false-triggered,
+// (c) standalone bun --compile binaries don't inherit shell PATH the same
+// way subshells do, so even when bun WAS available, Bun.spawn(['bun',...])
+// failed with ENOENT. The greenfield npm-install user hit all three at
+// once and got a stacktrace. v0.18.1 drops the install/build attempt
+// entirely — pre-built runtime bundles ship with the artifact, no fix-up
+// pass needed.
 
 import { existsSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
+import { join } from 'node:path';
+
+import { DEV_SERVER_ROOT, DIST_DIR, RUNTIME_BUNDLES_DIR } from './paths.ts';
 
 export interface SelfHealOptions {
-  /** Plugin install directory (the dev-server root). Defaults to this file's dir. */
+  /** Defaults to DEV_SERVER_ROOT from paths.ts (real disk install dir). */
   here?: string;
-  /** Defaults to process.env.MAUDE_NO_AUTOBUILD === '1'. */
-  optOut?: boolean;
-  /** Defaults to Bun.spawn; tests override. */
-  spawn?: (cmd: readonly string[], cwd: string) => Promise<{ code: number }>;
   /** Defaults to console.error; tests override to capture. */
   log?: (msg: string) => void;
-  /** Defaults to process.exit; tests override to assert. */
+  /** Defaults to process.exit; tests override to assert without aborting. */
   exit?: (code: number) => never;
 }
 
 export interface SelfHealResult {
-  ran: ('install' | 'build')[];
-  skipped: 'all-present' | null;
+  /** Names of artifacts the check verified are present. */
+  verified: ('client.bundle.js' | 'runtime/react.js')[];
 }
 
+/**
+ * Verify the committed artifacts the dev-server depends on are reachable
+ * from the resolved install dir. If anything is missing, exit with a clear
+ * remediation message — this means the install is broken, not a transient
+ * first-boot gap. Always passes for npm installs, marketplace cache clones,
+ * and `bun --compile` binaries built on a freshly-built repo.
+ */
 export async function bootSelfHeal(opts: SelfHealOptions = {}): Promise<SelfHealResult> {
-  const here = opts.here ?? dirname(fileURLToPath(import.meta.url));
-  const optOut = opts.optOut ?? process.env.MAUDE_NO_AUTOBUILD === '1';
+  const here = opts.here ?? DEV_SERVER_ROOT;
   const log = opts.log ?? ((m) => console.error(m));
   const exit =
     opts.exit ??
     ((code: number) => {
       process.exit(code);
     });
-  const spawn = opts.spawn ?? defaultSpawn;
 
-  const distMissing = !existsSync(join(here, 'dist', 'client.bundle.js'));
-  const depsMissing = !existsSync(join(here, 'node_modules', 'react', 'package.json'));
+  const dist = here === DEV_SERVER_ROOT ? DIST_DIR : join(here, 'dist');
+  const runtime = here === DEV_SERVER_ROOT ? RUNTIME_BUNDLES_DIR : join(dist, 'runtime');
 
-  if (!distMissing && !depsMissing) return { ran: [], skipped: 'all-present' };
+  const missing: string[] = [];
+  if (!existsSync(join(dist, 'client.bundle.js'))) missing.push('dist/client.bundle.js');
+  if (!existsSync(join(runtime, 'react.js'))) missing.push('dist/runtime/react.js');
 
-  if (optOut) {
-    const missing = [
-      distMissing ? 'dist/client.bundle.js (run `bun run build.ts`)' : null,
-      depsMissing ? 'node_modules/react (run `bun install --production`)' : null,
-    ]
-      .filter(Boolean)
-      .join('\n  - ');
-    log(`\n  ⚠ first-boot artifacts missing and MAUDE_NO_AUTOBUILD=1 is set:\n  - ${missing}\n`);
+  if (missing.length > 0) {
+    log(
+      [
+        '',
+        '  ⚠ dev-server install is missing committed artifacts:',
+        ...missing.map((m) => `  - ${m}`),
+        '',
+        `  Looked under: ${here}`,
+        '',
+        '  This means your install is corrupted or pre-Phase-19.1. Fix:',
+        '    npm uninstall -g @1agh/maude && npm i -g @1agh/maude',
+        '  (or remove + re-add the marketplace plugin in Claude Code)',
+        '',
+      ].join('\n')
+    );
     exit(1);
   }
 
-  const ran: ('install' | 'build')[] = [];
-  if (depsMissing) {
-    log('  ⚠ first-boot: installing runtime deps (one-time, ~15s)…');
-    const { code } = await spawn(['bun', 'install', '--production'], here);
-    if (code !== 0) {
-      log(`  ⚠ \`bun install --production\` exited ${code}. Set MAUDE_NO_AUTOBUILD=1 and run manually.`);
-      exit(1);
-    }
-    ran.push('install');
-  }
-  if (distMissing) {
-    log('  ⚠ first-boot: building client assets (one-time, ~2s)…');
-    const { code } = await spawn(['bun', 'run', 'build.ts'], here);
-    if (code !== 0) {
-      log(`  ⚠ \`bun run build.ts\` exited ${code}. Set MAUDE_NO_AUTOBUILD=1 and run manually.`);
-      exit(1);
-    }
-    ran.push('build');
-  }
-  return { ran, skipped: null };
-}
-
-async function defaultSpawn(cmd: readonly string[], cwd: string): Promise<{ code: number }> {
-  const proc = Bun.spawn([...cmd], { cwd, stdout: 'inherit', stderr: 'inherit' });
-  const code = await proc.exited;
-  return { code };
+  return {
+    verified: ['client.bundle.js', 'runtime/react.js'],
+  };
 }

package/plugins/design/dev-server/build.ts

@@ -136,6 +136,35 @@ async function buildCss(): Promise<{ outBytes: number; outPath: string }> {
   return { outBytes: code.byteLength, outPath };
 }
 
+// ---------- (b.5) Pre-built runtime bundles (Phase 19.1 / v0.18.1) ----------
+//
+// /_canvas-runtime/<slug>.js used to lazy-build on first request via Bun.build.
+// That required a real disk node_modules/react reachable by walking up from
+// the dev-server dir — false in compiled binaries (paths are virtual) AND
+// false in npm installs (npm doesn't install nested workspace deps).
+// Pre-building all 6 sub-bundles at release time + shipping in dist/runtime/
+// eliminates the runtime dependency on disk node_modules entirely.
+
+async function buildRuntimeBundles(): Promise<{ outDir: string; count: number; bytes: number }> {
+  // Defer import so build.ts can run in --dry-run without pulling react.
+  const { RUNTIME_PACKAGES, getRuntimeBundle, slugFor } = await import('./runtime-bundle.ts');
+  const outDir = join(DIST, 'runtime');
+  if (!existsSync(outDir)) mkdirSync(outDir, { recursive: true });
+  let bytes = 0;
+  for (const pkg of RUNTIME_PACKAGES) {
+    const slug = slugFor(pkg);
+    // skipPrebuilt: don't reuse a previous build's output. minify in release.
+    const bundle = await getRuntimeBundle(pkg, {
+      skipPrebuilt: true,
+      minify: MODE === 'release',
+    });
+    const outPath = join(outDir, `${slug}.js`);
+    await Bun.write(outPath, bundle.js);
+    bytes += bundle.js.length;
+  }
+  return { outDir, count: RUNTIME_PACKAGES.length, bytes };
+}
+
 // ---------- (c) Server binary (bun build --compile, per-platform) ----------
 
 // Per-target oxc-parser binding embed. Bun 1.3.4+ regressed `--compile` NAPI
@@ -373,6 +402,15 @@ async function main() {
     `[build] styles.css        ${css.outBytes.toLocaleString()} B  (${(t2 - t1).toFixed(0)} ms)`
   );
 
+  // Pre-built runtime bundles — ship to disk so /_canvas-runtime/* never
+  // needs a runtime Bun.build (which would need disk node_modules/react,
+  // absent in compiled binaries + npm installs). Phase 19.1 / v0.18.1.
+  const runtime = await buildRuntimeBundles();
+  const t2b = performance.now();
+  console.log(
+    `[build] dist/runtime/*.js ${runtime.bytes.toLocaleString()} B in ${runtime.count} files  (${(t2b - t2).toFixed(0)} ms)`
+  );
+
   if (MODE === 'release') {
     const targets: PlatformTarget[] = FLAG_TARGET
       ? [FLAG_TARGET as PlatformTarget]