@1agh/maude 0.28.0 → 0.29.0

package/cli/commands/hub.mjs

@@ -82,7 +82,7 @@ function usage() {
         exact commands to run next. Does NOT execute fly/docker for you —
         review the emitted files first, then run the printed command.
 
-        fly     → fly.toml (+ reuses plugins/design/hub/Dockerfile).
+        fly     → fly.toml (+ reuses apps/hub/Dockerfile).
                   --name   app name (default maude-hub-<rand>)
                   --region Fly region code (default iad)
         docker  → docker-compose.yml + Caddyfile (universal — Lightsail, EC2,
@@ -91,7 +91,7 @@ function usage() {
 
 NOTES
   serve / token / deploy run inside a 'maude' source checkout (they read the
-  bundled hub workspace at plugins/design/hub). Production hubs run the
+  bundled hub workspace at apps/hub). Production hubs run the
   published Docker image (ghcr.io/1agh/maude-hub) — see 'maude hub deploy'.
   status works from anywhere (plain HTTP GET against /health).
 
@@ -433,7 +433,7 @@ function randHex(bytes) {
 // ---------------------------------------------------------------- helpers
 
 function findHubRoot(pkgRoot) {
-  const dev = resolve(pkgRoot, 'plugins', 'design', 'hub');
+  const dev = resolve(pkgRoot, 'apps', 'hub');
   if (existsSync(resolve(dev, 'package.json'))) {
     try {
       const pkg = JSON.parse(readFileSync(resolve(dev, 'package.json'), 'utf8'));

package/cli/commands/hub.test.mjs

@@ -9,7 +9,7 @@ import { dirname, join, resolve } from 'node:path';
 import { test } from 'node:test';
 import { fileURLToPath } from 'node:url';
 
-import { readTokens } from '../../plugins/design/hub/src/tokens.mjs';
+import { readTokens } from '../../apps/hub/src/tokens.mjs';
 
 const BIN = resolve(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'maude.mjs');
 

package/cli/commands/scenario-report.mjs

@@ -5,7 +5,7 @@ import { pathToFileURL } from 'node:url';
 // `maude scenario-report <run-dir> [--out <path>]` — deterministic cross-platform
 // scenario report generator (Phase C / DDR-061). Thin wrapper that resolves the
 // bundled generator from maude's OWN package root (NOT $CLAUDE_PLUGIN_ROOT — the
-// flow plugin can't reach the design plugin's dev-server dir; only the on-PATH
+// flow plugin can't reach the studio app's bin dir; only the on-PATH
 // `maude` binary resolves it reliably across install shapes — see DDR-062), runs
 // it, and writes report.md. Output stdout = the written path (capture idiom).
 
@@ -22,14 +22,7 @@ export async function run({ args, pkgRoot }) {
     return;
   }
 
-  const generatorPath = resolve(
-    pkgRoot,
-    'plugins',
-    'design',
-    'dev-server',
-    'bin',
-    'scenario-report.mjs'
-  );
+  const generatorPath = resolve(pkgRoot, 'apps', 'studio', 'bin', 'scenario-report.mjs');
   const { generateReport } = await import(pathToFileURL(generatorPath).href);
 
   const absRunDir = resolve(process.cwd(), runDir);

package/cli/lib/cache.mjs

@@ -49,8 +49,8 @@ import { spawnSync } from 'node:child_process';
 import {
   existsSync,
   mkdirSync,
-  readFileSync,
   readdirSync,
+  readFileSync,
   renameSync,
   rmSync,
   statSync,

package/cli/lib/config-lint.mjs

@@ -16,8 +16,8 @@
 
 import { readFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
-import addFormats from 'ajv-formats';
 import Ajv2020 from 'ajv/dist/2020.js';
+import addFormats from 'ajv-formats';
 
 function levenshtein(a, b) {
   if (a === b) return 0;

package/cli/lib/copy-tree.mjs

@@ -1,4 +1,4 @@
-import { copyFile, mkdir, readFile, readdir, stat, writeFile } from 'node:fs/promises';
+import { copyFile, mkdir, readdir, readFile, stat, writeFile } from 'node:fs/promises';
 import { basename, join, relative } from 'node:path';
 
 // Recursively copy `src` → `dest`. Returns { created, skipped, replaced }.

package/cli/lib/design-link.mjs

@@ -10,7 +10,7 @@
 //
 // Token NEVER lands in .design/config.json — that's git-committed.
 
-import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from 'node:fs';
+import { existsSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
 import { createInterface } from 'node:readline';
 

package/cli/lib/flow-design-integration.test.mjs

@@ -19,14 +19,14 @@ import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { test } from 'node:test';
-import addFormats from 'ajv-formats';
 import Ajv2020 from 'ajv/dist/2020.js';
+import addFormats from 'ajv-formats';
 import { lintConfig } from './config-lint.mjs';
 
 const read = (p) => readFileSync(resolve(p), 'utf8');
 const readJson = (p) => JSON.parse(read(p));
 
-const META_SCHEMA = readJson('plugins/design/dev-server/canvas-meta.schema.json');
+const META_SCHEMA = readJson('apps/studio/canvas-meta.schema.json');
 const FLOW_SCHEMA = readJson('plugins/flow/.claude-plugin/config.schema.json');
 const SKELETON = readJson('plugins/flow/templates/ai-skeleton/workflows.config.json');
 

package/cli/lib/gitignore-block.mjs

@@ -31,6 +31,7 @@ export function buildBlock(designRel = '.design') {
     `${root}/_active.json`,
     `${root}/_sync.json`, // linked-mode offline/sync status (Task 8)
     `${root}/_history/`,
+    `${root}/_trash/`, // soft-deleted canvases (recoverable locally — Phase 22 delete)
     `${root}/_draw/`, // draw-agent proof canvases (regenerable — Phase 25)
     `${root}/_canvas-state/`, // per-machine canvas undo/redo + scratch state
     `${root}/_chat/`, // ACP transcripts (per-machine)

package/cli/lib/gitignore-block.test.mjs

@@ -7,10 +7,10 @@ import { join } from 'node:path';
 import { test } from 'node:test';
 
 import {
-  BEGIN_MARKER,
-  END_MARKER,
   applyBlock,
+  BEGIN_MARKER,
   buildBlock,
+  END_MARKER,
   hasBlock,
   writeGitignoreBlock,
 } from './gitignore-block.mjs';

package/cli/lib/plugin-cli-reachability.test.mjs

@@ -10,12 +10,13 @@
 // SAME file also offers a `command -v maude` fallback (the sibling-first /
 // maude-fallback pattern). This test fails loudly if a new straggler lands.
 //
-// DDR-062: plugin MARKDOWN must reach the dev-server bash helpers through
-// `maude design <verb>`, never `bash "$CLAUDE_PLUGIN_ROOT/dev-server/bin/<x>.sh"`.
-// The marketplace never copies the dev-server beside a plugin, and a flow
-// command's $CLAUDE_PLUGIN_ROOT points at plugins/flow (no dev-server/ at all).
-// Prose mentions of the path are fine; INVOCATIONS (bash/sh/exec/$( prefixed)
-// are banned.
+// DDR-062: plugin MARKDOWN must reach the studio bash helpers through
+// `maude design <verb>`, never `bash "$CLAUDE_PLUGIN_ROOT/dev-server/bin/<x>.sh"`
+// or `bash apps/studio/bin/<x>.sh`. The marketplace never copies the studio app
+// beside a plugin, and a flow command's $CLAUDE_PLUGIN_ROOT points at
+// plugins/flow (no bin/ at all). Per DDR-095 the helpers live under
+// apps/studio/bin (was plugins/design/dev-server/bin). Prose mentions of the
+// path are fine; INVOCATIONS (bash/sh/exec/$( prefixed) are banned.
 
 import assert from 'node:assert/strict';
 import { execSync } from 'node:child_process';
@@ -43,7 +44,7 @@ test('no plugin markdown invokes a $CLAUDE_PLUGIN_ROOT/dev-server/bin/*.sh helpe
   // command substitution. Prose mentions of the path (backtick-wrapped, no verb)
   // are exempt — they don't run anything. Matches both the $CLAUDE_PLUGIN_ROOT
   // form and the repo-relative `plugins/<x>/dev-server/bin/` form.
-  const pattern = String.raw`(bash|sh|exec) +"?(\$\{?CLAUDE_PLUGIN_ROOT\}?|plugins/[a-z]+)/dev-server/bin/[A-Za-z0-9_-]+\.sh|\$\("?\$?\{?CLAUDE_PLUGIN_ROOT\}?/dev-server/bin/[A-Za-z0-9_-]+\.sh`;
+  const pattern = String.raw`(bash|sh|exec) +"?(\$\{?CLAUDE_PLUGIN_ROOT\}?|plugins/[a-z]+)/dev-server/bin/[A-Za-z0-9_-]+\.sh|\$\("?\$?\{?CLAUDE_PLUGIN_ROOT\}?/dev-server/bin/[A-Za-z0-9_-]+\.sh|(bash|sh|exec) +"?[^"\n]*apps/studio/bin/[A-Za-z0-9_-]+\.sh|\$\("?[^"\n]*apps/studio/bin/[A-Za-z0-9_-]+\.sh`;
   const out = execSync(`grep -rnE '${pattern}' plugins --include='*.md' || true`, {
     encoding: 'utf8',
   });

package/cli/lib/preflight.mjs

@@ -5,7 +5,7 @@
 // Used by:
 //   - cli/commands/doctor.mjs (the unified diagnostic CLI)
 //   - plugins/flow/commands/init.md (the wired pre-flight Step 1)
-//   - plugins/design/dev-server/bin/preflight.sh (which re-shells to node
+//   - apps/studio/bin/preflight.sh (which re-shells to node
 //     for the actual checks — keeps detection logic in one place).
 //
 // Pure-ish: no process.exit; returns an envelope. printReport() is here

package/cli/lib/stack-detect.mjs

@@ -10,7 +10,7 @@
 //
 // Consumers: cli/commands/doctor.mjs and the drift-aware /flow:init re-run.
 
-import { readFile, readdir, stat } from 'node:fs/promises';
+import { readdir, readFile, stat } from 'node:fs/promises';
 import { join } from 'node:path';
 
 async function fileExists(path) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -14,16 +14,16 @@
     "mdcc": "cli/bin/mdcc.mjs",
     "maude-safe": "cli/cli-wrapper.cjs",
     "mdcc-safe": "cli/cli-wrapper.cjs",
-    "claude-design-server": "plugins/design/dev-server/server.mjs"
+    "claude-design-server": "apps/studio/server.mjs"
   },
   "scripts": {
-    "start": "bun run plugins/design/dev-server/server.ts",
-    "dev": "bun run plugins/design/dev-server/server.ts --port 4555",
+    "start": "bun run apps/studio/server.ts",
+    "dev": "bun run apps/studio/server.ts --port 4555",
     "dev:site": "pnpm --filter @maude/site dev --port 4398",
     "build": "pnpm -r --if-present run build",
-    "build:binary": "bun run plugins/design/dev-server/build.ts --release",
+    "build:binary": "bun run apps/studio/build.ts --release",
     "test": "node --test --test-reporter=spec cli/**/*.test.mjs",
-    "test:dev-server": "cd plugins/design/dev-server && bun test",
+    "test:dev-server": "cd apps/studio && bun test",
     "lint": "biome check .",
     "format": "biome format --write .",
     "changeset": "changeset",
@@ -38,20 +38,20 @@
     "video:render": "cd scripts/video/final && pnpm run render",
     "video:studio": "cd scripts/video/final && pnpm run studio",
     "postinstall": "node cli/install.cjs",
-    "prepublishOnly": "bash scripts/check-version-parity.sh && bash plugins/design/dev-server/bin/check-runtime-bundles.sh"
+    "prepublishOnly": "bash scripts/check-version-parity.sh && bash apps/studio/bin/check-runtime-bundles.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.28.0",
-    "@1agh/maude-darwin-x64": "0.28.0",
-    "@1agh/maude-linux-arm64": "0.28.0",
-    "@1agh/maude-linux-arm64-musl": "0.28.0",
-    "@1agh/maude-linux-x64": "0.28.0",
-    "@1agh/maude-linux-x64-musl": "0.28.0",
-    "@1agh/maude-win32-x64": "0.28.0"
+    "@1agh/maude-darwin-arm64": "0.29.0",
+    "@1agh/maude-darwin-x64": "0.29.0",
+    "@1agh/maude-linux-arm64": "0.29.0",
+    "@1agh/maude-linux-arm64-musl": "0.29.0",
+    "@1agh/maude-linux-x64": "0.29.0",
+    "@1agh/maude-linux-x64-musl": "0.29.0",
+    "@1agh/maude-win32-x64": "0.29.0"
   },
   "files": [
     "cli",
-    "plugins/design/dev-server",
+    "apps/studio",
     "plugins/design/dependencies.json",
     "plugins/design/dependencies.schema.json",
     "plugins/design/templates",
@@ -85,7 +85,7 @@
     "scaffold"
   ],
   "devDependencies": {
-    "@biomejs/biome": "^1.9.4",
+    "@biomejs/biome": "^2.4.16",
     "@changesets/cli": "^2.27.10",
     "@playwright/test": "^1.60.0"
   },

package/plugins/design/templates/_shell.html

@@ -177,7 +177,7 @@
       // ai-activity via postMessage when embedded; the own-WS path (standalone /
       // same-origin inspector socket) is handled in connectHmr below.
       let agentEditing = false;
-      window.addEventListener('message', function (e) {
+      window.addEventListener('message', (e) => {
         // DDR-078 security follow-up: only the trusted embedding parent relays
         // ai-activity. Reject canvas self-posts (which could flip the HMR gate)
         // and any non-parent source. Standalone gets it via its own WS below.
@@ -196,7 +196,7 @@
         const rt = window.__maudeCanvasRuntime;
         if (!rt || !rt.remount) { location.reload(); return; }
         import(canvasUrl + '?v=' + (version || Date.now()))
-          .then(function (mod) {
+          .then((mod) => {
             if (mod && typeof mod.default === 'function') {
               rt.remount(mod.default);
               if (rt.setHolding) rt.setHolding(false);
@@ -205,7 +205,7 @@
               location.reload();
             }
           })
-          .catch(function (err) {
+          .catch((err) => {
             // Build/transpile/import error → keep the current render, surface a
             // non-destructive "holding" toast. Next good build swaps it in.
             if (rt.setHolding) rt.setHolding(true, (err && (err.message || String(err))) || 'build error');

package/plugins/design/templates/brief-board.tsx.template

@@ -0,0 +1,61 @@
+/**
+ * @canvas      {{NAME}} — brief board
+ * @ds          {{DS_NAME}}
+ * @platform    {{PLATFORM}}
+ * @kind        brief-board
+ * @stack       React 19 · TSX · Bun.build
+ * @history     {{HISTORY_DIR}}
+ *
+ * Annotation-only brief board (Phase 22). This canvas is born EMPTY on purpose:
+ * one framed reference artboard you fill with sticky notes (N), text (T), and
+ * arrows (A) describing what each screen should do. When you run `/design:new`
+ * again while this board is the active canvas, Claude reads those annotations as
+ * a VERBATIM brief and inserts the matching generated artboards right here, below
+ * this frame — the board becomes a living brief you sketch and Claude fills in.
+ *
+ * The annotation layer lives in a sibling `<slug>.annotations.svg` (NEVER in this
+ * file), so your notes stay floating on top across every regeneration. No design
+ * system tokens or classes are wired in — the board is a neutral surface; the
+ * generated artboards bring the DS with them on ingest.
+ */
+
+import { DCArtboard, DCSection, DesignCanvas } from "@maude/canvas-lib";
+
+export default function {{COMPONENT_NAME}}() {
+  return (
+    <DesignCanvas>
+      <DCSection id="brief-board" title="Brief">
+        <DCArtboard id="brief" label="Brief — annotate me" width={1280} height={800}>
+          <div
+            style={{
+              boxSizing: "border-box",
+              width: "100%",
+              height: "100%",
+              display: "flex",
+              flexDirection: "column",
+              alignItems: "center",
+              justifyContent: "center",
+              gap: "14px",
+              padding: "48px",
+              textAlign: "center",
+              fontFamily: "ui-sans-serif, system-ui, -apple-system, sans-serif",
+              color: "#9aa0a6",
+              background: "#ffffff",
+              border: "1.5px dashed #d4d8dd",
+            }}
+          >
+            <div style={{ fontSize: "22px", fontWeight: 600, color: "#5f6571" }}>
+              {{NAME}}
+            </div>
+            <div style={{ fontSize: "14px", color: "#8a9099" }}>{{SEED_HINT}}</div>
+            <div style={{ fontSize: "13px", maxWidth: "460px", lineHeight: 1.55 }}>
+              Drop sticky notes (N), text (T) &amp; arrows (A) here describing what
+              each screen should do — then run <code>/design:new</code> again to have
+              Claude read your notes and lay the matching artboards out right here.
+            </div>
+          </div>
+        </DCArtboard>
+      </DCSection>
+    </DesignCanvas>
+  );
+}

package/plugins/design/templates/canvas.tsx.template

@@ -20,7 +20,7 @@
  * The envelope primitives (`DesignCanvas`, `DCSection`, `DCArtboard`) and any
  * specimen helpers come from the dev-server-bundled canvas library via the
  * virtual specifier — the dev-server resolves it to
- * `plugins/design/dev-server/canvas-lib.tsx` (single source, ships with the
+ * `apps/studio/canvas-lib.tsx` (single source, ships with the
  * dev-server install per DDR-025), and `/design:handoff` AST-inlines the used
  * exports so the registry-item drop is self-contained. Read that file for the
  * full export surface (helpers + hooks) before reaching for new components.

package/plugins/design/templates/design-system-inspiration/SUB-AGENT-PROMPTS.md

@@ -1,12 +1,12 @@
 # Sub-agent prompt templates — `/design:setup-ds` Batch B + C
 
-> **Why this file exists.** Per Phase 3.7 Task 4 (and DDR-049), the sub-agent prompt templates that drive Batch B + C fan-out used to live inline in `plugins/design/skills/design-system/SKILL.md` (lines 662-797 pre-extraction). SKILL.md is 1000+ LOC; the prompts were buried. Extracting them here lets us audit + extend the prompts (and especially the three MANDATORY safety blocks below) without scrolling through unrelated bootstrap logic. The skill's "Batches B + C" step loads + interpolates from this file instead of inlining the template.
+> **Why this file exists.** Per Phase 3.7 Task 4 (and DDR-049), the sub-agent prompt templates that drive Batch B + C fan-out used to live inline in `plugins/design/skills/design-system/SKILL.md` (lines 662-797 pre-extraction). SKILL.md is 1000+ LOC; the prompts were buried. Extracting them here lets us audit + extend the prompts (and especially the four MANDATORY safety blocks below) without scrolling through unrelated bootstrap logic. The skill's "Batches B + C" step loads + interpolates from this file instead of inlining the template.
 >
 > **Sync rule** — when this file changes, the SKILL.md reference must still resolve. The Phase 3.7 risk register mandates a CI grep check: `SKILL.md` must literally contain the string `SUB-AGENT-PROMPTS.md`. Don't rename the file without updating the skill.
 
 The prompts are grouped by **slice** (matches the roster's `fanout:` block). Each section is a self-contained sub-agent brief — copy verbatim, substitute placeholders.
 
-The three MANDATORY safety blocks (ANIMATION SAFETY, RELATIVE-URL SAFETY, PLACEHOLDER POLICY) appear once at the top because they apply to every slice; sub-agent prompts reference them by name (`Apply ANIMATION SAFETY below`) instead of inlining.
+The four MANDATORY safety blocks (ANIMATION SAFETY, RELATIVE-URL SAFETY, PLACEHOLDER POLICY, CODE HYGIENE) appear once at the top because they apply to every slice; sub-agent prompts reference them by name (`Apply ANIMATION SAFETY below`) instead of inlining.
 
 ---
 
@@ -36,6 +36,15 @@ The three MANDATORY safety blocks (ANIMATION SAFETY, RELATIVE-URL SAFETY, PLACEH
 - **Never assume your own placeholder path is authoritative downstream.** When the roster row's `source:` is empty AND you wrote a placeholder, set `source: placeholder` in your roster update (not `source: written`). The brand-critic and the next bootstrap pass both look for `source: placeholder` rows as "consider revisiting later".
 - **Forbidden:** authoring an `S`-shaped wordmark for a product whose first letter isn't S, authoring a "hedgehog mascot" SVG because the README copy mentioned hedgehog energy. The studyfi imprint retro D-2 caught both patterns. If the production-asset sweep returned nothing AND the discovery brief didn't explicitly request a mascot, **rewrite the copy** instead of inventing the artifact.
 
+### CODE HYGIENE (mandatory — applies to EVERY TSX + CSS file in every slice)
+
+> **Why this block exists (setup-ds Round-2 / DDR-082).** These four defects all *pass a parse / transpile-only check but break at render or assert something false* — exactly the class the structural critic can't see. Each was caught by a user mid-flow, never by the loop. The reconcile-time scaffold-integrity gates in `_bootstrap.md` grep for all four; **prevent them here so the grep finds nothing.**
+
+- **No empty / stub files.** Every file you claim as `written` in the roster MUST carry real content — the JSDoc header, the `import "./<slug>.css"`, and a non-trivial default export. **Never** flip a roster row to `status: written` for a file you created empty or as a placeholder-to-fill-later. A 0-byte (or near-empty, < 20 B) specimen is a reconciliation **hard-fail**, the same severity as a `pending` row. The roster's `loc:` field is a claim that is verified against disk — report the *real* line count, never an aspirational one.
+- **CSS comment hygiene — never write `*/` inside a `/* … */` block.** A stray `*/` (e.g. inside an example selector string, a URL, or a nested-comment attempt) closes the comment early and the trailing text becomes invalid CSS → the dev-server bundle fails with "Bundle failed" and the specimen renders unstyled. CSS has **no nested comments.** If you must show a `*/` literally in demo copy, escape it in JSX text (`{'*/'}`) — never inside a `/* */` CSS comment.
+- **`React.*` requires a BINDING import.** Any use of `React.useState`, `React.useId`, `React.Fragment`, `React.useEffect`, `React.CSSProperties`, etc. MUST be backed by `import React from "react"` (default) or `import * as React from "react"` (namespace) — those are the only forms that bind the `React` identifier. A NAMED import (`import { useState } from "react"`) or a type-only import (`import type { CSSProperties } from "react"`) does **not** bind `React`, so `React.foo` still throws `ReferenceError: React is not defined` at module-eval in the browser even though it transpiles clean — a runtime crash the structural critic never sees. **Prefer named imports and call them unqualified** (`import { useId, useState } from "react"` → `useState(…)`, not `React.useState(…)`); reach for the `React.` namespace only with the default/namespace import in place. The reconcile gate flags any `React.*` whose file lacks a default/namespace React import.
+- **Contrast-claim discipline — never assert a ratio you didn't compute.** Do NOT write `✓ 4.5:1`, `✓ AAA`, `passes AA`, `7:1`, etc. in a specimen, a CSS comment, or copy **unless you actually computed it** from the real token pair (WCAG relative-luminance or APCA). A hardcoded-but-wrong ratio claim is worse than no claim — it tells the reader a failing pair is safe. If you want to *demonstrate* contrast without computing, label the swatch with the token names and the OKLCH values, not a fabricated ratio. The reconcile grep flags ratio-claim substrings for verification — an unverified claim is a gate failure.
+
 ---
 
 ## Sub-agent prompt template (slice-agnostic — used by every Batch B + C slice)
@@ -128,6 +137,10 @@ YOUR SLICE — write these {{N}} files (absolute paths):
 … (etc.)
 
 SAFETY BLOCKS — apply to every file in your slice:
+- **CODE HYGIENE** (see SUB-AGENT-PROMPTS.md). ALWAYS — applies to every TSX +
+  CSS file. No empty / stub files (report real `loc:`), no `*/` inside a CSS
+  `/* */` block, every `React.*` needs an explicit `import`, never assert a
+  contrast ratio you didn't compute. The reconcile gate greps for all four.
 - **ANIMATION SAFETY** (see SUB-AGENT-PROMPTS.md). Mandatory if your slice
   includes the `motion` specimen OR any file that uses `@keyframes` /
   `transition` / `animate`. Bounded geometry + sparkle-≤56px + infinite-alternate
@@ -189,7 +202,9 @@ ANTI-PATTERNS (graphic-design-critic blockers — guaranteed rejection)
 WHEN DONE
 After writing all {{N}} files:
   1. Update each row in {{absolute path to _scaffold-roster.yaml}}: change
-     `status: pending` → `status: written, loc: <line-count>`.
+     `status: pending` → `status: written, loc: <line-count>`. The `loc:` is the
+     REAL on-disk line count — never aspirational. An empty / stub / 0-byte file
+     flipped to `written` is a reconciliation hard-fail (see CODE HYGIENE).
   2. **Do NOT add new rows.** If you discover a missing claim (e.g. wordmark
      referenced but no logo.tsx in roster), include "ROSTER GAP: <description>"
      in your completion message. The main agent reconciles new rows.

package/plugins/design/templates/design-system-inspiration/core/config.json.tpl

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://raw.githubusercontent.com/1aGh/maude/main/plugins/design/dev-server/config.schema.json",
+  "$schema": "https://raw.githubusercontent.com/1aGh/maude/main/apps/studio/config.schema.json",
   "name": "{{project_name}}",
   "projectLabel": "{{project_label}}",
   "designRoot": ".design",

package/plugins/design/templates/design-system-inspiration/core/preview/_motion-readme.md.tpl

@@ -56,7 +56,7 @@ Per DDR-049: a canvas that imports `<MotionDemo>` or any sibling motion helper f
 
 ## Cross-links
 
-- Library source: `plugins/design/dev-server/canvas-lib.tsx` (`MotionDemo`, `MotionTrack`, `TokenPlayback`, `ReducedMotionToggle`, `useMotionTokens`, `easingFromToken`)
+- Library source: `apps/studio/canvas-lib.tsx` (`MotionDemo`, `MotionTrack`, `TokenPlayback`, `ReducedMotionToggle`, `useMotionTokens`, `easingFromToken`)
 - Library decision: `.ai/decisions/DDR-049-motion-one-as-canonical-motion-library.md`
 - Sub-agent safety block: `plugins/design/templates/design-system-inspiration/SUB-AGENT-PROMPTS.md` → ANIMATION SAFETY
 - Tokens: `colors_and_type.css.tpl` (lines around `--dur-*` + `--ease-*`)

package/plugins/flow/.claude-plugin/config.schema.json

@@ -408,6 +408,22 @@
             "mcp": { "type": "string" },
             "defaults": { "type": "object", "additionalProperties": true }
           }
+        },
+        "whatsNew": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "In-product \"What's New\" feed. When enabled, /flow:done offers to append a user-facing entry for the closed-out feature to `feed`, delegating to the named project skill if set. Generic + opt-in: absent or `enabled:false` → /flow:done skips it silently. Maude wires this to apps/studio/whats-new.json, surfaced in the canvas browser.",
+          "properties": {
+            "enabled": { "type": "boolean", "default": false },
+            "feed": {
+              "type": "string",
+              "description": "Repo-relative path to the What's New feed JSON the entry is appended to."
+            },
+            "skill": {
+              "type": "string",
+              "description": "Optional name of a project skill (in .claude/skills/) that authors the entry; /flow:done invokes it instead of inlining the append."
+            }
+          }
         }
       }
     }

package/plugins/design/dev-server/bin/server-up.sh

@@ -1,135 +0,0 @@
-#!/usr/bin/env bash
-# server-up.sh — ensure the design dev server is running for the given repo.
-# Canonical recipe (was inline in `edit.md` step 2, `new.md` step 2, etc.).
-#
-# Usage:
-#   server-up.sh [--root <repo>] [--timeout 10] [--allow-legacy]
-#
-# Reads / writes:
-#   $DESIGN_ROOT/_server.json   (PID + port the running server wrote)
-#   $DESIGN_ROOT/_server.log    (stdout/stderr of the spawned server)
-#
-# Runtime selection (DDR-020):
-#   - Default: bun + server.ts. Hard-fails when bun is not on $PATH.
-#   - --allow-legacy: opt-in fallback to node + server.mjs (debug only;
-#     no TSX canvas pipeline, no HMR). Sunset in DDR-020 Phase B.
-#
-# Output: prints the port on stdout. Diagnostic lines go to stderr.
-# Exit:   0 = server ready / 1 = start timeout or missing runtime / 2 = bad args.
-
-REPO=""
-TIMEOUT=10
-ALLOW_LEGACY=0
-while [ $# -gt 0 ]; do
-  case "$1" in
-    --root)    REPO="$2"; shift 2 ;;
-    --timeout) TIMEOUT="$2"; shift 2 ;;
-    --allow-legacy) ALLOW_LEGACY=1; shift ;;
-    --help|-h)
-      sed -n '2,21p' "$0" | sed 's/^# \?//'
-      exit 0
-      ;;
-    *)
-      echo "server-up.sh: unknown arg '$1' (try --help)" >&2
-      exit 2
-      ;;
-  esac
-done
-
-# Resolve repo root.
-if [ -z "$REPO" ]; then
-  REPO="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}"
-fi
-
-# Resolve plugin root + pick a server runtime. DDR-020: bun + server.ts is
-# authoritative. Legacy node + server.mjs is sunset; available only behind
-# --allow-legacy (debug-only — no TSX canvas pipeline, no HMR).
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$(cd "$SCRIPT_DIR/../.." && pwd)}"
-SERVER_TS="$PLUGIN_ROOT/dev-server/server.ts"
-SERVER_MJS="$PLUGIN_ROOT/dev-server/server.mjs"
-if [ ! -f "$SERVER_TS" ]; then SERVER_TS="$SCRIPT_DIR/../server.ts"; fi
-if [ ! -f "$SERVER_MJS" ]; then SERVER_MJS="$SCRIPT_DIR/../server.mjs"; fi
-
-RUNTIME=""
-RUNTIME_CMD=""
-if [ $ALLOW_LEGACY -eq 1 ]; then
-  if [ ! -f "$SERVER_MJS" ]; then
-    echo "server-up.sh: --allow-legacy requested but server.mjs not found at $SERVER_MJS" >&2
-    exit 1
-  fi
-  RUNTIME="node"
-  RUNTIME_CMD="node $SERVER_MJS"
-  echo "server-up.sh: WARNING — running legacy server.mjs (no TSX canvas pipeline, no HMR). DDR-020 sunsets this in Phase B." >&2
-elif command -v bun >/dev/null 2>&1 && [ -f "$SERVER_TS" ]; then
-  RUNTIME="bun"
-  RUNTIME_CMD="bun $SERVER_TS"
-else
-  echo "server-up.sh: bun not on \$PATH — install via https://bun.sh/install" >&2
-  echo "server-up.sh: DDR-020 made bun authoritative; the node fallback is opt-in via --allow-legacy (debug only)." >&2
-  exit 1
-fi
-
-DESIGN_ROOT="$REPO/.design"
-STATE="$DESIGN_ROOT/_server.json"
-
-read_port() {
-  if command -v jq >/dev/null 2>&1; then
-    jq -r .port "$STATE" 2>/dev/null
-  else
-    # Best-effort grep — jq is in repo deps but be defensive.
-    sed -nE 's/.*"port"[[:space:]]*:[[:space:]]*([0-9]+).*/\1/p' "$STATE" 2>/dev/null | head -n1
-  fi
-}
-read_pid() {
-  if command -v jq >/dev/null 2>&1; then
-    jq -r .pid "$STATE" 2>/dev/null
-  else
-    sed -nE 's/.*"pid"[[:space:]]*:[[:space:]]*([0-9]+).*/\1/p' "$STATE" 2>/dev/null | head -n1
-  fi
-}
-
-# Step 1 — check existing.
-NEEDS_START=1
-if [ -f "$STATE" ]; then
-  PID=$(read_pid)
-  PORT=$(read_port)
-  if [ -n "$PID" ] && [ -n "$PORT" ] \
-     && kill -0 "$PID" 2>/dev/null \
-     && curl -fs "http://localhost:$PORT/_health" >/dev/null 2>&1; then
-    echo "✓ server alive pid=$PID port=$PORT" >&2
-    echo "$PORT"
-    exit 0
-  else
-    echo "→ stale _server.json — clearing and respawning" >&2
-    rm -f "$STATE"
-  fi
-fi
-
-# Step 2 — spawn.
-mkdir -p "$DESIGN_ROOT"
-echo "→ starting dev server: $RUNTIME_CMD --root $REPO" >&2
-if [ "$RUNTIME" = "bun" ]; then
-  nohup bun "$SERVER_TS" --root "$REPO" > "$DESIGN_ROOT/_server.log" 2>&1 &
-elif [ "$RUNTIME" = "node" ]; then
-  nohup node "$SERVER_MJS" --root "$REPO" > "$DESIGN_ROOT/_server.log" 2>&1 &
-fi
-disown 2>/dev/null || true
-
-# Step 3 — poll.
-i=0
-while [ $i -lt "$TIMEOUT" ]; do
-  sleep 1
-  i=$((i + 1))
-  if [ -f "$STATE" ]; then
-    PORT=$(read_port)
-    if [ -n "$PORT" ] && curl -fs "http://localhost:$PORT/_health" >/dev/null 2>&1; then
-      echo "✓ server started port=$PORT after ${i}s" >&2
-      echo "$PORT"
-      exit 0
-    fi
-  fi
-done
-
-echo "✗ server start timeout after ${TIMEOUT}s; check $DESIGN_ROOT/_server.log" >&2
-exit 1