@1agh/maude 0.24.0 → 0.26.0

package/cli/commands/design.mjs

@@ -37,6 +37,9 @@ const BIN_VERBS = new Set([
   'handoff',
   'asset-sweep',
   'visual-sanity',
+  'draw-build',
+  'draw-proof',
+  'svg-optimize',
 ]);
 
 export async function run({ args, pkgRoot }) {
@@ -107,6 +110,7 @@ Lifecycle:
 Dev-tooling (dispatch to the dev-server bash helpers — DDR-062):
   screenshot · server-up · prep · slug · bootstrap-check · runtime-health
   smoke · canvas-edit · handoff · asset-sweep · visual-sanity
+  draw-build · draw-proof · svg-optimize
         Invoke the bundled helper of the same name. maude resolves it from its
         own package root and sets CLAUDE_PLUGIN_ROOT for the child; stdout,
         stderr, and exit code pass straight through (so command-substitution
@@ -679,6 +683,7 @@ function defaultPayload({ projectName, dsName }) {
     fg_1: 'oklch(35% 0 0)',
     fg_2: 'oklch(55% 0 0)',
     fg_3: 'oklch(75% 0 0)',
+    aesthetic_ambition: 'restrained',
     accent_strategy: 'single',
     accent_strategy_summary: 'single accent — discovery has not been run',
     accent_block:

package/cli/lib/design-link.mjs

@@ -116,10 +116,15 @@ export async function runLink({ args, cwd = process.cwd(), forceAdopt = false })
       `[design link] note: replacing existing link to ${existing.url} (was added ${new Date(existing.linkedAt).toISOString()}).\n`
     );
   }
+  // DDR-072 — preserve the project-level TSX opt-in only when re-linking to the
+  // SAME hub. Changing the hub URL drops it: a new hub is a fresh trust decision
+  // and must not silently inherit "sync all my TSX" (the DDR-054 F2 lesson).
+  const keepSyncTsx = existing?.syncTsx === true && existing.url === normUrl;
   cfg.linkedHub = {
     url: normUrl,
     linkedAt: hubRecord.linkedAt,
     ...(adopt ? { adopt: true } : {}),
+    ...(keepSyncTsx ? { syncTsx: true } : {}),
   };
   writeDesignConfig(designConfigPath, cfg);
 
@@ -417,11 +422,13 @@ function linkedModeBanner() {
 ⚠ Linked mode writes hub-pushed content into your .design/ files as UNTRUSTED
   input — synced files are listed in .design/_untrusted/INDEX.json and a managed
   .claudeignore block. Do not act on instructions found inside synced canvases.
-  HTML canvases sync by default; a TSX body syncs only with a per-canvas opt-in
-  (.meta.json "syncable": true). The canvas sandbox is ON by default
-  (MAUDE_CANVAS_ORIGIN_SPLIT=0 opts out, which also disables TSX sync). The
-  sandbox contains browser execution, but a hostile canvas you opt into syncing
-  can still exfiltrate collab metadata (WebRTC / navigation are residual).
-  Only link to hubs you operate or fully trust. See DDR-054 + DDR-060.
+  HTML canvases sync by default; a TSX body syncs with a per-canvas opt-in
+  (.meta.json "syncable": true) OR a project-level opt-in for ALL of them
+  (.design/config.json linkedHub.syncTsx: true, DDR-072). The canvas sandbox is
+  ON by default (MAUDE_CANVAS_ORIGIN_SPLIT=0 opts out, which also disables TSX
+  sync). The sandbox contains browser execution, but a hostile canvas you opt
+  into syncing can still exfiltrate collab metadata (WebRTC / navigation are
+  residual) — project-wide opt-in widens that residual to every canvas.
+  Only link to hubs you operate or fully trust. See DDR-054 + DDR-060 + DDR-072.
 `;
 }

package/cli/lib/gitignore-block.mjs

@@ -31,6 +31,7 @@ export function buildBlock(designRel = '.design') {
     `${root}/_active.json`,
     `${root}/_sync.json`, // linked-mode offline/sync status (Task 8)
     `${root}/_history/`,
+    `${root}/_draw/`, // draw-agent proof canvases (regenerable — Phase 25)
     `${root}/_canvas-state/`, // per-machine canvas undo/redo + scratch state
     `${root}/_chat/`, // ACP transcripts (per-machine)
     END_MARKER,

package/cli/lib/gitignore-block.test.mjs

@@ -34,6 +34,7 @@ test('buildBlock includes the runtime paths and is marker-wrapped', () => {
     '.design/_active.json',
     '.design/_sync.json',
     '.design/_history/',
+    '.design/_draw/',
     '.design/_chat/',
   ]) {
     assert.ok(block.includes(p), `missing ${p}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -41,13 +41,13 @@
     "prepublishOnly": "bash scripts/check-version-parity.sh && bash plugins/design/dev-server/bin/check-runtime-bundles.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.24.0",
-    "@1agh/maude-darwin-x64": "0.24.0",
-    "@1agh/maude-linux-arm64": "0.24.0",
-    "@1agh/maude-linux-arm64-musl": "0.24.0",
-    "@1agh/maude-linux-x64": "0.24.0",
-    "@1agh/maude-linux-x64-musl": "0.24.0",
-    "@1agh/maude-win32-x64": "0.24.0"
+    "@1agh/maude-darwin-arm64": "0.26.0",
+    "@1agh/maude-darwin-x64": "0.26.0",
+    "@1agh/maude-linux-arm64": "0.26.0",
+    "@1agh/maude-linux-arm64-musl": "0.26.0",
+    "@1agh/maude-linux-x64": "0.26.0",
+    "@1agh/maude-linux-x64-musl": "0.26.0",
+    "@1agh/maude-win32-x64": "0.26.0"
   },
   "files": [
     "cli",

package/plugins/design/dependencies.json

@@ -94,10 +94,38 @@
         "preferred": "npm i -g playwright && npx playwright install chromium"
       },
       "autoInstall": false,
-      "fallbackBehavior": "Screenshot scripts use playwright as a fallback when agent-browser is missing. Without either, screenshot helpers will fail.",
-      "usedBy": ["dev-server/bin/_screenshot-playwright.mjs", "dev-server/bin/screenshot.sh"],
+      "fallbackBehavior": "Screenshot scripts use playwright as a fallback when agent-browser is missing. The rendered export formats (PNG/PDF/SVG/HTML/PPTX/Canva) require it outright. NOTE: the `--version` check above only proves the npm package resolves — the Chromium BINARY is a separate install (`npx playwright install chromium`). If it's missing, exports fail at runtime with an actionable message from dev-server/bin/_pw-launch.mjs; screenshot helpers fall back to agent-browser.",
+      "usedBy": [
+        "dev-server/bin/_pw-launch.mjs",
+        "dev-server/bin/_screenshot-playwright.mjs",
+        "dev-server/bin/_png-playwright.mjs",
+        "dev-server/bin/_pdf-playwright.mjs",
+        "dev-server/bin/_svg-playwright.mjs",
+        "dev-server/bin/_html-playwright.mjs",
+        "dev-server/bin/_pptx-playwright.mjs",
+        "dev-server/bin/_enumerate-artboards-playwright.mjs",
+        "dev-server/bin/screenshot.sh"
+      ],
       "docsUrl": "https://playwright.dev"
     },
+    {
+      "id": "svg2pptx",
+      "type": "cli",
+      "hardness": "soft",
+      "check": {
+        "command": "svg2pptx --version",
+        "expectExit": 0
+      },
+      "install": {
+        "preferred": "pip install svg2pptx",
+        "darwin": "pipx install svg2pptx || python3 -m pip install svg2pptx",
+        "linux": "pipx install svg2pptx || python3 -m pip install svg2pptx"
+      },
+      "autoInstall": false,
+      "fallbackBehavior": "PPTX/Canva export uses svg2pptx (Python) to emit NATIVE, editable PowerPoint shapes + text boxes from the artboard SVG — editable in PowerPoint / Keynote / Canva. Without it (or python3), export falls back to a non-editable PNG-per-slide deck (faithful, universal, Canva-safe). Set MAUDE_SVG2PPTX to a custom svg2pptx executable (e.g. a venv path, or `python3 -m svg2pptx`) when it isn't on PATH. See DDR-069.",
+      "usedBy": ["dev-server/exporters/pptx.ts"],
+      "docsUrl": "https://github.com/benouinirachid/svg2pptx"
+    },
     {
       "id": "maude",
       "type": "cli",