@1agh/maude 0.25.0 → 0.27.0

package/cli/commands/design.mjs

@@ -37,6 +37,9 @@ const BIN_VERBS = new Set([
   'handoff',
   'asset-sweep',
   'visual-sanity',
+  'draw-build',
+  'draw-proof',
+  'svg-optimize',
 ]);
 
 export async function run({ args, pkgRoot }) {
@@ -107,6 +110,7 @@ Lifecycle:
 Dev-tooling (dispatch to the dev-server bash helpers — DDR-062):
   screenshot · server-up · prep · slug · bootstrap-check · runtime-health
   smoke · canvas-edit · handoff · asset-sweep · visual-sanity
+  draw-build · draw-proof · svg-optimize
         Invoke the bundled helper of the same name. maude resolves it from its
         own package root and sets CLAUDE_PLUGIN_ROOT for the child; stdout,
         stderr, and exit code pass straight through (so command-substitution
@@ -679,6 +683,7 @@ function defaultPayload({ projectName, dsName }) {
     fg_1: 'oklch(35% 0 0)',
     fg_2: 'oklch(55% 0 0)',
     fg_3: 'oklch(75% 0 0)',
+    aesthetic_ambition: 'restrained',
     accent_strategy: 'single',
     accent_strategy_summary: 'single accent — discovery has not been run',
     accent_block:

package/cli/lib/design-link.mjs

@@ -116,10 +116,15 @@ export async function runLink({ args, cwd = process.cwd(), forceAdopt = false })
       `[design link] note: replacing existing link to ${existing.url} (was added ${new Date(existing.linkedAt).toISOString()}).\n`
     );
   }
+  // DDR-072 — preserve the project-level TSX opt-in only when re-linking to the
+  // SAME hub. Changing the hub URL drops it: a new hub is a fresh trust decision
+  // and must not silently inherit "sync all my TSX" (the DDR-054 F2 lesson).
+  const keepSyncTsx = existing?.syncTsx === true && existing.url === normUrl;
   cfg.linkedHub = {
     url: normUrl,
     linkedAt: hubRecord.linkedAt,
     ...(adopt ? { adopt: true } : {}),
+    ...(keepSyncTsx ? { syncTsx: true } : {}),
   };
   writeDesignConfig(designConfigPath, cfg);
 
@@ -417,11 +422,13 @@ function linkedModeBanner() {
 ⚠ Linked mode writes hub-pushed content into your .design/ files as UNTRUSTED
   input — synced files are listed in .design/_untrusted/INDEX.json and a managed
   .claudeignore block. Do not act on instructions found inside synced canvases.
-  HTML canvases sync by default; a TSX body syncs only with a per-canvas opt-in
-  (.meta.json "syncable": true). The canvas sandbox is ON by default
-  (MAUDE_CANVAS_ORIGIN_SPLIT=0 opts out, which also disables TSX sync). The
-  sandbox contains browser execution, but a hostile canvas you opt into syncing
-  can still exfiltrate collab metadata (WebRTC / navigation are residual).
-  Only link to hubs you operate or fully trust. See DDR-054 + DDR-060.
+  HTML canvases sync by default; a TSX body syncs with a per-canvas opt-in
+  (.meta.json "syncable": true) OR a project-level opt-in for ALL of them
+  (.design/config.json linkedHub.syncTsx: true, DDR-072). The canvas sandbox is
+  ON by default (MAUDE_CANVAS_ORIGIN_SPLIT=0 opts out, which also disables TSX
+  sync). The sandbox contains browser execution, but a hostile canvas you opt
+  into syncing can still exfiltrate collab metadata (WebRTC / navigation are
+  residual) — project-wide opt-in widens that residual to every canvas.
+  Only link to hubs you operate or fully trust. See DDR-054 + DDR-060 + DDR-072.
 `;
 }

package/cli/lib/gitignore-block.mjs

@@ -31,6 +31,7 @@ export function buildBlock(designRel = '.design') {
     `${root}/_active.json`,
     `${root}/_sync.json`, // linked-mode offline/sync status (Task 8)
     `${root}/_history/`,
+    `${root}/_draw/`, // draw-agent proof canvases (regenerable — Phase 25)
     `${root}/_canvas-state/`, // per-machine canvas undo/redo + scratch state
     `${root}/_chat/`, // ACP transcripts (per-machine)
     END_MARKER,

package/cli/lib/gitignore-block.test.mjs

@@ -34,6 +34,7 @@ test('buildBlock includes the runtime paths and is marker-wrapped', () => {
     '.design/_active.json',
     '.design/_sync.json',
     '.design/_history/',
+    '.design/_draw/',
     '.design/_chat/',
   ]) {
     assert.ok(block.includes(p), `missing ${p}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -41,13 +41,13 @@
     "prepublishOnly": "bash scripts/check-version-parity.sh && bash plugins/design/dev-server/bin/check-runtime-bundles.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.25.0",
-    "@1agh/maude-darwin-x64": "0.25.0",
-    "@1agh/maude-linux-arm64": "0.25.0",
-    "@1agh/maude-linux-arm64-musl": "0.25.0",
-    "@1agh/maude-linux-x64": "0.25.0",
-    "@1agh/maude-linux-x64-musl": "0.25.0",
-    "@1agh/maude-win32-x64": "0.25.0"
+    "@1agh/maude-darwin-arm64": "0.27.0",
+    "@1agh/maude-darwin-x64": "0.27.0",
+    "@1agh/maude-linux-arm64": "0.27.0",
+    "@1agh/maude-linux-arm64-musl": "0.27.0",
+    "@1agh/maude-linux-x64": "0.27.0",
+    "@1agh/maude-linux-x64-musl": "0.27.0",
+    "@1agh/maude-win32-x64": "0.27.0"
   },
   "files": [
     "cli",

package/plugins/design/dev-server/bin/_svg-optimize.mjs

@@ -0,0 +1,35 @@
+#!/usr/bin/env bun
+// _svg-optimize.mjs — internal shim behind `maude design svg-optimize` (DDR-062).
+// Runs under Bun so it can import the `.ts` engine module directly. Reads an SVG
+// from a file argument or stdin, runs it through draw/optimize.ts (SVGO multipass
+// + the parse/validity gate), and writes the optimized SVG to stdout. Exits 1
+// when the input is not valid SVG — the gate doubling as a lint.
+//
+// Internal (underscore-prefixed, CI/agent-only) — not on the DDR-062 whitelist;
+// reached only via the `svg-optimize.sh` wrapper, which IS dispatched by
+// `maude design svg-optimize`.
+
+import { optimizeSvg } from '../draw/optimize.ts';
+
+const args = process.argv.slice(2);
+let precision = 2;
+const files = [];
+for (let i = 0; i < args.length; i++) {
+  if (args[i] === '--precision') {
+    precision = Number(args[i + 1]);
+    i += 1;
+  } else {
+    files.push(args[i]);
+  }
+}
+
+const fromFile = files.length > 0 && files[0] !== '-';
+const input = fromFile ? await Bun.file(files[0]).text() : await Bun.stdin.text();
+
+try {
+  const out = optimizeSvg(input, { floatPrecision: precision });
+  process.stdout.write(`${out}\n`);
+} catch (err) {
+  process.stderr.write(`svg-optimize: ${err instanceof Error ? err.message : String(err)}\n`);
+  process.exit(1);
+}

package/plugins/design/dev-server/bin/draw-build.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+# draw-build.sh — run an agent-authored engine build script under Bun with the
+# draw engine made importable via an injected env path. This is how the
+# draw-agent "draws as code": it writes a tiny build script that constructs
+# DrawPrimitives through the engine and emits the result (optimized SVG to a
+# file, and/or the JSX string on stdout for inline embedding). Importing the
+# engine by the injected absolute path is portable across every install layout
+# (local dev tree, npm global, marketplace cache) — DDR-045 — without needing a
+# bundler virtual specifier.
+#
+# Reached via `maude design draw-build` (DDR-062), never a raw bin path.
+#
+# Usage:
+#   draw-build.sh --script <build.ts> [--out <asset.svg>]
+#
+# In the build script, import the engine via the injected env path and write
+# output to the injected out path:
+#   const E = await import(process.env.MAUDE_DRAW_ENGINE);
+#   const prims = [ E.circle({ cx: 12, cy: 12, r: 10 }) ];
+#   const svg = E.optimizeSvg(E.toSvg(prims, { viewBox: '0 0 24 24', a11y: { title: 'Mark' } }));
+#   if (process.env.DRAW_OUT) await Bun.write(process.env.DRAW_OUT, svg);
+#   console.log(E.toJsx(prims, { viewBox: '0 0 24 24' })); // inline form, if needed
+#
+# Stdout: the build script's stdout (e.g. the JSX form). Exit: the script's code.
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+SCRIPT=""
+OUT=""
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --script) SCRIPT="$2"; shift 2 ;;
+    --out)    OUT="$2"; shift 2 ;;
+    --help|-h) sed -n '2,20p' "$0" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "draw-build.sh: unknown arg '$1' (try --help)" >&2; exit 2 ;;
+  esac
+done
+
+[ -n "$SCRIPT" ] || { echo "draw-build.sh: --script <build.ts> required" >&2; exit 2; }
+[ -f "$SCRIPT" ] || { echo "draw-build.sh: script not found: $SCRIPT" >&2; exit 1; }
+command -v bun >/dev/null 2>&1 || { echo "draw-build.sh: bun is required (hard dependency)." >&2; exit 1; }
+
+ENGINE="$SCRIPT_DIR/../draw/index.ts"
+[ -f "$ENGINE" ] || { echo "draw-build.sh: engine not found at $ENGINE — reinstall maude." >&2; exit 1; }
+ENGINE="$(cd "$(dirname "$ENGINE")" && pwd)/$(basename "$ENGINE")"
+
+export MAUDE_DRAW_ENGINE="$ENGINE"
+[ -n "$OUT" ] && export DRAW_OUT="$OUT"
+exec bun run "$SCRIPT"

package/plugins/design/dev-server/bin/draw-proof.sh

@@ -0,0 +1,129 @@
+#!/usr/bin/env bash
+# draw-proof.sh — Phase 25 render/verify harness driver for the draw engine.
+# Generates a throwaway proof canvas under <designRoot>/_draw/<slug>.proof.tsx
+# that mounts the given SVG mark through the canvas-lib `DrawProof` component
+# (size ladder 16/24/48/256 × {light, dark, single-color flatten}), then
+# screenshots every artboard via the canonical screenshot helper. One run
+# operationalizes the whole graphic rubric: per-size legibility, dark-mode
+# currentColor flip, and the single-color flatten test.
+#
+# Reached via `maude design draw-proof` (never a raw bin path — DDR-062).
+#
+# Usage:
+#   draw-proof.sh --asset <mark.svg> --slug <name>
+#                 [--root <repo>] [--out-dir <dir>] [--name <display label>]
+#                 [--engine auto|agent-browser|playwright] [--timeout <secs>]
+#
+# Requires a running dev server (caller runs `maude design server-up` first);
+# reads the port from <designRoot>/_server.json.
+#
+# Stdout (last line): the screenshot output directory (capturable in $(...)).
+# Stderr: progress / diagnostics.
+# Exit:   0 success / 1 missing input or server / 2 bad args / 3 capture failed.
+
+ASSET=""
+SLUG=""
+REPO=""
+OUT_DIR=""
+NAME=""
+ENGINE="auto"
+TIMEOUT=10
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --asset)   ASSET="$2"; shift 2 ;;
+    --slug)    SLUG="$2"; shift 2 ;;
+    --root)    REPO="$2"; shift 2 ;;
+    --out-dir) OUT_DIR="$2"; shift 2 ;;
+    --name)    NAME="$2"; shift 2 ;;
+    --engine)  ENGINE="$2"; shift 2 ;;
+    --timeout) TIMEOUT="$2"; shift 2 ;;
+    --help|-h)
+      sed -n '2,27p' "$0" | sed 's/^# \?//'
+      exit 0
+      ;;
+    *)
+      echo "draw-proof.sh: unknown arg '$1' (try --help)" >&2
+      exit 2
+      ;;
+  esac
+done
+
+[ -n "$ASSET" ] || { echo "draw-proof.sh: --asset <mark.svg> required" >&2; exit 2; }
+[ -n "$SLUG" ]  || { echo "draw-proof.sh: --slug <name> required" >&2; exit 2; }
+[ -f "$ASSET" ] || { echo "draw-proof.sh: asset not found: $ASSET" >&2; exit 1; }
+
+# Normalize slug to a filesystem-safe token (reuse the canonical slug helper).
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+SLUG=$(bash "$SCRIPT_DIR/slug.sh" "$SLUG" 2>/dev/null || printf '%s' "$SLUG" | tr '/ ' '__' | tr '[:upper:]' '[:lower:]')
+[ -n "$NAME" ] || NAME="$SLUG"
+
+# ---------- resolve repo + design root + port ----------
+if [ -z "$REPO" ]; then
+  REPO="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}"
+fi
+DESIGN_ROOT="$REPO/.design"
+[ -d "$DESIGN_ROOT" ] || { echo "draw-proof.sh: no .design/ under $REPO" >&2; exit 1; }
+
+STATE="$DESIGN_ROOT/_server.json"
+[ -f "$STATE" ] || { echo "draw-proof.sh: $STATE missing — run \`maude design server-up\` first" >&2; exit 1; }
+if command -v jq >/dev/null 2>&1; then
+  PORT=$(jq -r .port "$STATE" 2>/dev/null)
+else
+  PORT=$(sed -nE 's/.*"port"[[:space:]]*:[[:space:]]*([0-9]+).*/\1/p' "$STATE" | head -n1)
+fi
+[ -n "$PORT" ] || { echo "draw-proof.sh: no port in $STATE" >&2; exit 1; }
+
+# ---------- generate the proof canvas ----------
+DRAW_DIR="$DESIGN_ROOT/_draw"
+mkdir -p "$DRAW_DIR"
+PROOF_TSX="$DRAW_DIR/$SLUG.proof.tsx"
+
+# Escape the SVG for embedding in a JS template literal: backslash, backtick,
+# and ${ (in that order). Newlines are fine inside a template literal.
+ESCAPED=$(sed -e 's/\\/\\\\/g' -e 's/`/\\`/g' -e 's/\$/\\$/g' "$ASSET")
+
+{
+  echo "import { DrawProof } from '@maude/canvas-lib';"
+  echo
+  echo "// AUTO-GENERATED by \`maude design draw-proof\` — render/verify harness for one"
+  echo "// mark. Lives under _draw/ (gitignored); safe to delete + regenerate."
+  printf 'const MARK = `%s`;\n' "$ESCAPED"
+  echo
+  echo "export default function DrawProofCanvas() {"
+  echo "  return ("
+  printf '    <DrawProof name=%s mark={<span dangerouslySetInnerHTML={{ __html: MARK }} />} />\n' "\"$NAME\""
+  echo "  );"
+  echo "}"
+} > "$PROOF_TSX"
+echo "→ proof canvas: ${PROOF_TSX#$REPO/}" >&2
+
+# ---------- resolve out-dir ----------
+if [ -z "$OUT_DIR" ]; then
+  OUT_DIR="$DESIGN_ROOT/_history/_draw-proof/$SLUG"
+fi
+mkdir -p "$OUT_DIR"
+OUT_DIR="$(cd "$OUT_DIR" && pwd)"
+
+# ---------- screenshot every artboard ----------
+REL="_draw/$SLUG.proof.tsx"
+URL="http://localhost:$PORT/_canvas-shell.html?canvas=$REL"
+echo "→ screenshotting proof ladder ($URL)" >&2
+
+bash "$SCRIPT_DIR/screenshot.sh" \
+  --all-screens \
+  --url "$URL" \
+  --out-dir "$OUT_DIR" \
+  --engine "$ENGINE" \
+  --timeout "$TIMEOUT" >&2
+RC=$?
+
+if [ "$RC" -ne 0 ]; then
+  echo "draw-proof.sh: screenshot capture failed (rc=$RC)" >&2
+  exit 3
+fi
+
+COUNT=$(find "$OUT_DIR" -maxdepth 1 -type f -name '*.png' 2>/dev/null | wc -l | tr -d ' ')
+echo "→ captured $COUNT proof image(s) in $OUT_DIR" >&2
+# Last stdout line = the output dir, for $(maude design draw-proof ...) capture.
+printf '%s\n' "$OUT_DIR"

package/plugins/design/dev-server/bin/svg-optimize.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# svg-optimize.sh — CLI front for the draw engine's SVGO optimizer + validity
+# gate (draw/optimize.ts). Reached via `maude design svg-optimize` (DDR-062),
+# never a raw bin path.
+#
+# Usage:
+#   svg-optimize.sh <in.svg> [--precision N]    # optimize a file
+#   cat mark.svg | svg-optimize.sh              # or read from stdin
+#
+# Emits the optimized SVG to stdout; exits 1 if the input is not valid SVG (so
+# it doubles as a parse gate the agent can `||` on).
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+if ! command -v bun >/dev/null 2>&1; then
+  echo "svg-optimize.sh: bun is required (hard dependency — see plugins/design/dependencies.json)." >&2
+  echo "  Install: curl -fsSL https://bun.sh/install | bash" >&2
+  exit 1
+fi
+
+case "$1" in
+  --help|-h) sed -n '2,12p' "$0" | sed 's/^# \?//'; exit 0 ;;
+esac
+
+exec bun run "$SCRIPT_DIR/_svg-optimize.mjs" "$@"

package/plugins/design/dev-server/canvas-lib.tsx

@@ -29,6 +29,9 @@
  *                      Standalone it renders a fixed-size block at its given
  *                      width/height (specimens / legacy uses).
  *   DCPostIt           <aside class="dc-postit"> — sticky-note annotation.
+ *   DrawProof          (Phase 25) Renders one vector mark across a size ladder
+ *                      × {light, dark, single-color flatten} as labeled
+ *                      DCArtboards — the draw engine's render/verify harness.
  *
  *   Specimen helpers ───────────────────────────────────────────────────────
  *   SpecimenHeader     The .specimen-hd row (sku + crumbs + ThemeToggle).
@@ -1597,6 +1600,113 @@ export function DCArtboard({
 }
 DCArtboard.displayName = 'DCArtboard';
 
+// ─────────────────────────────────────────────────────────────────────────────
+// DrawProof (Phase 25) — the render/verify harness for the draw engine. Renders
+// ONE vector mark across a size ladder × {light, dark, single-color flatten} as
+// labeled DCArtboards, so a single `maude design screenshot --all-screens`
+// operationalizes the whole graphic rubric at once:
+//   • per-size legibility (does the 16px instance survive the favicon test?)
+//   • dark-mode correctness (does `currentColor` flip cleanly?)
+//   • the single-color flatten test (pure #000 on #fff — logo must hold)
+// Reference frames are FIXED (not DS tokens) on purpose: the flatten/legibility
+// tests must be objective, independent of whichever DS the canvas declares.
+// Additive export (DDR-025) — no existing canvas-lib surface changes.
+
+const DRAW_PROOF_MODES = {
+  light: { bg: '#ffffff', fg: '#111111', label: 'light' },
+  dark: { bg: '#111111', fg: '#f5f5f5', label: 'dark' },
+  flatten: { bg: '#ffffff', fg: '#000000', label: 'single-color flatten' },
+} as const;
+
+export type DrawProofMode = keyof typeof DRAW_PROOF_MODES;
+
+/**
+ * Render a single mark across the verification ladder. `mark` is the inline SVG
+ * (the engine's `toJsx` output, dropped in as JSX). Each mode becomes one
+ * labeled DCArtboard (a `--all-screens` target) showing the mark at every size,
+ * so the proof PNGs are `proof-<mode>.png`.
+ */
+export function DrawProof({
+  mark,
+  name = 'mark',
+  sizes = [16, 24, 48, 256],
+  modes = ['light', 'dark', 'flatten'],
+}: {
+  mark: ReactNode;
+  name?: string;
+  sizes?: number[];
+  modes?: DrawProofMode[];
+}) {
+  const maxSize = Math.max(...sizes, 64);
+  const cellGap = 32;
+  const padding = 32;
+  const boardWidth =
+    padding * 2 + sizes.reduce((acc, s) => acc + Math.max(s, 56), 0) + cellGap * (sizes.length - 1);
+  const boardHeight = padding * 2 + maxSize + 28;
+
+  return (
+    <DesignCanvas>
+      <style>{'.dp-cell svg{display:block;width:100%;height:100%}'}</style>
+      {modes.map((mode) => {
+        const m = DRAW_PROOF_MODES[mode];
+        return (
+          <DCArtboard
+            key={mode}
+            id={`proof-${mode}`}
+            label={`${name} · ${m.label}`}
+            width={boardWidth}
+            height={boardHeight}
+          >
+            <div
+              style={{
+                display: 'flex',
+                alignItems: 'flex-end',
+                gap: cellGap,
+                padding,
+                minHeight: boardHeight,
+                background: m.bg,
+                color: m.fg,
+                boxSizing: 'border-box',
+              }}
+            >
+              {sizes.map((s) => (
+                <figure
+                  key={s}
+                  style={{
+                    margin: 0,
+                    display: 'flex',
+                    flexDirection: 'column',
+                    alignItems: 'center',
+                    gap: 8,
+                  }}
+                >
+                  <span
+                    className="dp-cell"
+                    style={{ display: 'inline-block', width: s, height: s, color: m.fg }}
+                  >
+                    {mark}
+                  </span>
+                  <figcaption
+                    style={{
+                      fontFamily: 'var(--font-mono, ui-monospace, monospace)',
+                      fontSize: 11,
+                      color: m.fg,
+                      opacity: 0.65,
+                    }}
+                  >
+                    {s}px
+                  </figcaption>
+                </figure>
+              ))}
+            </div>
+          </DCArtboard>
+        );
+      })}
+    </DesignCanvas>
+  );
+}
+DrawProof.displayName = 'DrawProof';
+
 // ─────────────────────────────────────────────────────────────────────────────
 // SnapGuideOverlay (Phase 4.2) — renders 1 px guide lines while a drag is in
 // flight. Mounted by canvas-shell as a chrome layer outside `.dc-world`, so

package/plugins/design/dev-server/config.schema.json

@@ -128,6 +128,12 @@
       "description": "Color space the project uses in tokens CSS. The completeness-critic V2 gates the actual token format against this declaration. Default: 'oklch' (backwards-compatible). Per DDR-043.",
       "default": "oklch"
     },
+    "aestheticAmbition": {
+      "type": "string",
+      "enum": ["restrained", "confident", "expressive", "maximalist"],
+      "description": "How chromatically/decoratively expressive the DS is. Inferred by ux-research-agent from brand character during /design:setup-ds (NOT a picker), then anchors the structural knobs (accentStrategy, shadow/decor) and sets the default opt_out_scope for canvases under this DS (restrained|confident → palette, expressive → aesthetic, maximalist → full). Default 'restrained' is the legacy/no-bootstrap fallback only — a bootstrapped DS always writes the inferred value. Per DDR-073.",
+      "default": "restrained"
+    },
     "designSystems": {
       "type": "array",
       "description": "Design systems available in this project. Single-DS projects have one entry; multi-DS projects (marketing vs. admin vs. mobile) list each here. Each canvas's .meta.json declares which DS it uses via the 'designSystem' field. The System view's DS picker iterates this array.",
@@ -197,6 +203,10 @@
         "adopt": {
           "type": "boolean",
           "description": "When true, the first sync after boot pushes local disk state up to the hub unconditionally (use case: bootstrapping the hub from a populated repo, or hub-was-wiped recovery). Cleared after first successful adopt."
+        },
+        "syncTsx": {
+          "type": "boolean",
+          "description": "DDR-072 — project-level TSX sync opt-in. When true, ALL .tsx canvases sync to this hub without a per-canvas .meta.json \"syncable\": true. A per-canvas \"syncable\": false still excludes individual canvases (the sidecar always wins). Inert unless the cross-origin sandbox is active (MAUDE_CANVAS_ORIGIN_SPLIT != 0) — the DDR-060 Lock-2 coupling is preserved. Broadens the WebRTC/self-nav exfil residual to every synced canvas, so only enable for hubs you operate or fully trust; the dev-server prints a loud boot banner against non-loopback hubs."
         }
       },
       "additionalProperties": false

package/plugins/design/dev-server/context.ts

@@ -29,6 +29,15 @@ export interface LinkedHub {
   url: string;
   linkedAt: number;
   adopt?: boolean;
+  /**
+   * DDR-072 — project-level TSX sync opt-in. When true, EVERY `.tsx` canvas
+   * syncs to this hub without a per-canvas `.meta.json "syncable": true`. A
+   * per-canvas `"syncable": false` still excludes an individual canvas (the
+   * sidecar always wins). Inert unless the cross-origin sandbox is active
+   * (`MAUDE_CANVAS_ORIGIN_SPLIT != 0`) — the Lock-2 coupling from DDR-060 is
+   * preserved. Only for hubs you operate or fully trust.
+   */
+  syncTsx?: boolean;
 }
 
 export interface DevServerConfig {