@1agh/maude 0.47.0 → 0.49.0

package/cli/lib/workspace-plan.test.mjs

@@ -0,0 +1,223 @@
+// Cloud Phase 4 Task 1 — the workspace-up planning layer.
+//
+// A provisioner's real failure modes are decisions, not I/O: a bad domain
+// rendering a broken Caddyfile, a missing no-expiry rule quietly scheduling
+// someone's media for deletion, an "it worked!" printed before anything
+// round-tripped. All testable without a VPS, which is why they live here.
+
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+
+import {
+  envEntries,
+  operatorDuties,
+  renderCaddyfile,
+  renderCompose,
+  renderEnv,
+  validateWorkspaceConfig,
+  verificationPlan,
+} from './workspace-plan.mjs';
+
+const BASE = {
+  domain: 'design.acme.com',
+  acmeEmail: 'ops@acme.com',
+  adminEmail: 'alice@acme.com',
+};
+const S3 = {
+  endpoint: 'https://acct.r2.cloudflarestorage.com',
+  bucket: 'acme-design-assets',
+  accessKeyId: 'AKIA',
+  secretAccessKey: 'secret',
+};
+const ok = (raw) => {
+  const r = validateWorkspaceConfig(raw);
+  assert.deepEqual(r.errors, [], `expected valid: ${r.errors.join('; ')}`);
+  return r.config;
+};
+
+// ------------------------------------------------------------- validation
+
+test('a valid config normalizes rather than nitpicking', () => {
+  const cfg = ok({ ...BASE, domain: 'HTTPS://Design.Acme.com/', adminEmail: 'Alice@Acme.com' });
+  assert.equal(cfg.domain, 'design.acme.com');
+  assert.equal(cfg.adminEmail, 'alice@acme.com');
+  assert.equal(cfg.imageTag, 'latest');
+  assert.equal(cfg.seedRepo, null);
+});
+
+test('EVERY problem is reported at once, not the first one', () => {
+  // Someone filling this in wants to fix everything in one pass, not play
+  // whack-a-mole with a wizard.
+  const res = validateWorkspaceConfig({ domain: 'not a domain', acmeEmail: 'nope' });
+  assert.equal(res.ok, false);
+  assert.ok(res.errors.length >= 3, `expected several errors, got ${res.errors.length}`);
+  assert.ok(res.errors.some((e) => e.includes('domain')));
+  assert.ok(res.errors.some((e) => e.includes('acmeEmail')));
+  assert.ok(res.errors.some((e) => e.includes('adminEmail')));
+});
+
+test('a bare hostname without a dot is refused', () => {
+  // "localhost" or "hub" would render a Caddyfile that can never get a cert.
+  const res = validateWorkspaceConfig({ ...BASE, domain: 'localhost' });
+  assert.equal(res.ok, false);
+  assert.ok(res.errors.some((e) => /domain/.test(e)));
+});
+
+test('a short admin password is refused before anything is written', () => {
+  const res = validateWorkspaceConfig({ ...BASE, adminPassword: 'short' });
+  assert.equal(res.ok, false);
+  assert.ok(res.errors.some((e) => /at least 12/.test(e)));
+});
+
+test('partial S3 config is an error, never a half-configured lane', () => {
+  const res = validateWorkspaceConfig({ ...BASE, s3: { bucket: 'b' } });
+  assert.equal(res.ok, false);
+  assert.ok(res.errors.some((e) => e.includes('s3.endpoint')));
+  assert.ok(res.errors.some((e) => e.includes('s3.accessKeyId')));
+});
+
+test('an invalid bucket name is caught here, not by the provider later', () => {
+  assert.equal(
+    validateWorkspaceConfig({ ...BASE, s3: { ...S3, bucket: 'A_Bad_Bucket' } }).ok,
+    false
+  );
+});
+
+test('a seed repo must look like a git URL', () => {
+  assert.equal(validateWorkspaceConfig({ ...BASE, seedRepo: 'my-folder' }).ok, false);
+  assert.equal(
+    ok({ ...BASE, seedRepo: 'git@github.com:acme/design.git' }).seedRepo,
+    'git@github.com:acme/design.git'
+  );
+  assert.equal(ok({ ...BASE, seedRepo: '  ' }).seedRepo, null, 'blank means start fresh');
+});
+
+test('devMinio supplies its own credentials and marks them as dev', () => {
+  const cfg = ok({ ...BASE, devMinio: true });
+  assert.equal(cfg.s3.dev, true);
+  assert.equal(cfg.s3.endpoint, 'http://minio:9000');
+});
+
+// ------------------------------------------------------------------- env
+
+test('.env carries the trusted-proxy setting UNCONDITIONALLY', () => {
+  // Caddy fronts the hub. Without this every client shares one rate-limit
+  // bucket and one attacker's login flood limits everybody (DDR-194 §4).
+  const entries = envEntries(ok(BASE), { hubSecret: 'deadbeef' });
+  const byKey = Object.fromEntries(entries.map((e) => [e.key, e.value]));
+  assert.ok(byKey.HUB_TRUSTED_PROXIES.includes('172.16.0.0/12'));
+  assert.equal(byKey.HUB_WORKSPACE_MODE, '1');
+  assert.equal(byKey.MAUDE_WORKSPACE_MODE, '1', 'the containment invariant must be on');
+});
+
+test('.env includes S3 only when configured', () => {
+  const without = envEntries(ok(BASE), { hubSecret: 'x' }).map((e) => e.key);
+  assert.ok(!without.includes('MAUDE_S3_BUCKET'));
+  const with3 = envEntries(ok({ ...BASE, s3: S3 }), { hubSecret: 'x' }).map((e) => e.key);
+  assert.ok(with3.includes('MAUDE_S3_BUCKET'));
+  assert.ok(with3.includes('MAUDE_S3_SECRET_ACCESS_KEY'));
+});
+
+test('renderEnv announces that it holds secrets', () => {
+  const text = renderEnv(
+    envEntries(ok(BASE), { hubSecret: 'sekrit', adminPassword: 'a-good-one-12' })
+  );
+  assert.match(text, /Contains SECRETS/);
+  assert.match(text, /Mode 0600, never committed/);
+  assert.match(text, /^HUB_SECRET=sekrit$/m);
+  // The bootstrap password is flagged as temporary rather than left to linger.
+  assert.match(text, /change it after, then remove this line/);
+});
+
+// --------------------------------------------------------------- compose
+
+test('MinIO is behind a PROFILE, not a comment', () => {
+  // A commented-out service is one somebody uncomments in production.
+  const yaml = renderCompose(ok({ ...BASE, devMinio: true }));
+  assert.match(yaml, /profiles: \["dev"\]/);
+  assert.match(yaml, /DEV ONLY/);
+  assert.ok(!renderCompose(ok(BASE)).includes('minio'), 'no MinIO without devMinio');
+});
+
+test('the hub is exposed, never published — Caddy is the only way in', () => {
+  const yaml = renderCompose(ok({ ...BASE, s3: S3 }));
+  const hubBlock = yaml.slice(yaml.indexOf('  hub:'), yaml.indexOf('  caddy:'));
+  assert.match(hubBlock, /expose:/);
+  assert.ok(!/^\s+ports:/m.test(hubBlock), 'the hub must not publish a port to the host');
+});
+
+test('compose passes every configured secret by reference, never inline', () => {
+  const yaml = renderCompose(ok({ ...BASE, s3: S3 }));
+  assert.match(yaml, /MAUDE_S3_SECRET_ACCESS_KEY: \$\{MAUDE_S3_SECRET_ACCESS_KEY\}/);
+  assert.ok(!yaml.includes('secret'), 'no literal secret value may appear in compose');
+});
+
+test('Caddy forwards the client address, or per-client rate limiting cannot work', () => {
+  const caddy = renderCaddyfile(ok(BASE));
+  assert.match(caddy, /header_up X-Forwarded-For \{remote_host\}/);
+  assert.match(caddy, /reverse_proxy hub:1234/);
+  assert.match(caddy, /\{\$PUBLIC_DOMAIN\}/);
+});
+
+// ---------------------------------------------------------- verification
+
+test('the plan verifies a ROUND TRIP, not just liveness', () => {
+  // A provisioner that prints a URL without proving a round-trip has told the
+  // operator something it does not know.
+  const ids = verificationPlan(ok(BASE)).map((s) => s.id);
+  assert.ok(ids.includes('canvas-roundtrip'));
+  assert.ok(ids.includes('git-commit'));
+  assert.ok(ids.includes('user-signin'));
+  assert.ok(ids.includes('restore-drill'));
+});
+
+test('with object storage it also checks that nothing will EXPIRE the media', () => {
+  // The quiet catastrophe: a lifecycle rule on assets/ deletes objects that
+  // canvases in git history still point at, with no recovery path.
+  const ids = verificationPlan(ok({ ...BASE, s3: S3 })).map((s) => s.id);
+  assert.ok(ids.includes('s3-object'));
+  assert.ok(ids.includes('s3-no-expiry'));
+  assert.ok(!verificationPlan(ok(BASE)).some((s) => s.id === 's3-no-expiry'));
+});
+
+test('every step states what it checks, in words an operator can act on', () => {
+  for (const step of verificationPlan(ok({ ...BASE, s3: S3 }))) {
+    assert.ok(step.title.length > 5, `step ${step.id} needs a title`);
+    assert.ok(step.detail.length > 10, `step ${step.id} needs a detail`);
+  }
+});
+
+// -------------------------------------------------------- operator duties
+
+test('the run never claims to own the deployment forever', () => {
+  // The breaker trap: "done" implies ownership. This scaffolded and verified it
+  // once; rotation, backups, upgrades and the bill stay with the operator.
+  const duties = operatorDuties(ok(BASE));
+  const text = duties
+    .map((d) => `${d.title} ${d.detail}`)
+    .join(' ')
+    .toLowerCase();
+  assert.ok(duties.length >= 5);
+  assert.match(text, /rotate/);
+  assert.match(text, /restore drill/);
+  assert.match(text, /upgrade/);
+  assert.match(text, /bill/);
+});
+
+test('the duties card warns about `latest` by name', () => {
+  const pinned = operatorDuties(ok({ ...BASE, imageTag: 'v0.48.0' }));
+  assert.match(pinned.find((d) => /pin/i.test(d.title)).detail, /v0\.48\.0/);
+  const floating = operatorDuties(ok(BASE));
+  assert.match(floating.find((d) => /pin/i.test(d.title)).detail, /unplanned upgrade/);
+});
+
+test('object storage adds the never-expire duty; dev MinIO adds its own warning', () => {
+  const withS3 = operatorDuties(ok({ ...BASE, s3: S3 }))
+    .map((d) => d.title)
+    .join(' ');
+  assert.match(withS3, /Never expire the assets\/ prefix/);
+  const dev = operatorDuties(ok({ ...BASE, devMinio: true }))
+    .map((d) => d.title)
+    .join(' ');
+  assert.match(dev, /MinIO credentials are in this directory/);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.47.0",
+  "version": "0.49.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -51,13 +51,13 @@
     "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.47.0",
-    "@1agh/maude-darwin-x64": "0.47.0",
-    "@1agh/maude-linux-arm64": "0.47.0",
-    "@1agh/maude-linux-arm64-musl": "0.47.0",
-    "@1agh/maude-linux-x64": "0.47.0",
-    "@1agh/maude-linux-x64-musl": "0.47.0",
-    "@1agh/maude-win32-x64": "0.47.0"
+    "@1agh/maude-darwin-arm64": "0.49.0",
+    "@1agh/maude-darwin-x64": "0.49.0",
+    "@1agh/maude-linux-arm64": "0.49.0",
+    "@1agh/maude-linux-arm64-musl": "0.49.0",
+    "@1agh/maude-linux-x64": "0.49.0",
+    "@1agh/maude-linux-x64-musl": "0.49.0",
+    "@1agh/maude-win32-x64": "0.49.0"
   },
   "files": [
     "cli",

package/plugins/design/dependencies.json

@@ -146,6 +146,23 @@
       "usedBy": ["commands/init.md", "skills/design/SKILL.md"],
       "docsUrl": "https://github.com/1aGh/maude"
     },
+    {
+      "id": "kg",
+      "type": "cli",
+      "hardness": "soft",
+      "check": {
+        "command": "kg version",
+        "expectExit": 0
+      },
+      "install": {
+        "preferred": "See docs/kgai-onboarding.md — download the pinned kgai release binary (kgai is capability-gated + opt-out; nothing to install to use classic .ai/ mode)",
+        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v0.1.9/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
+      },
+      "autoInstall": false,
+      "fallbackBehavior": "Design DS/canvas/brand decisions are not recorded to the kgai graph; the classic .ai/ path (via /flow:record-ddr) and on-disk sidecars are unchanged.",
+      "usedBy": ["skills/design-system/SKILL.md", "commands/edit.md"],
+      "docsUrl": "https://github.com/kgaidev/kgai"
+    },
     {
       "id": "jq",
       "type": "system-tool",

package/plugins/flow/.claude-plugin/config.schema.json

@@ -305,6 +305,72 @@
         }
       }
     },
+    "knowledgeGraph": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Opt-OUT, capability-gated knowledge-graph memory backend (kgai). ON by default when the capability exists: an absent `knowledgeGraph` block is treated as `mode:auto`, so when the `kg` CLI is on PATH AND a store is resolvable, flow/design decision reads/writes route through the event-sourced graph instead of `.ai/decisions/` + `.ai/state/STATE.md`. When `kg` is absent, the store is unreachable, or `mode:off`, everything falls back to today's `.ai/` file behavior — no regression, nothing to configure downstream. Mirrors the `orchestration` capability-gate (DDR-130). Design plugin reads the SAME block. See the `kgai-backend` skill for the resolver.",
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["auto", "on", "off"],
+          "default": "auto",
+          "description": "Opt-out default `auto` (absent block == `auto`). `auto` = active only when `kg` is on PATH AND (`store` is set OR a local `.kgai/store` exists) — conservative, mirrors `orchestration.mode:auto`; a first-run repo stays on files until the user opts in via onboarding. `on` = force kgai active (errors surface rather than silently falling back). `off` = disable entirely; today's classic `.ai/decisions/` + STATE.md path, byte-for-byte unchanged."
+        },
+        "engine": {
+          "type": "string",
+          "enum": ["kgai"],
+          "default": "kgai",
+          "description": "Knowledge-graph engine. Reserved for future engines; only `kgai` is implemented."
+        },
+        "engineVersion": {
+          "type": "string",
+          "default": "v0.1.9",
+          "description": "PINNED kgai release the CLI + desktop bundle target. Advance deliberately (harness-verified via `maude kg check-upstream`), never float — auto-tracking `latest` would let an upstream change silently alter behavior mid-rollout and is a supply-chain surface (DDR-054/056 reasoning: the bundled `kg` is third-party)."
+        },
+        "store": {
+          "type": "string",
+          "default": "",
+          "description": "Remote store the graph syncs to. `s3://company-kg/store` (shared company remote, cross-repo) | `kgai://org/project` (cloud-broker keyspace) | git remote | `\"\"` = local-only `.kgai/store`. Empty string keeps everything on this machine."
+        },
+        "scope": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Cross-repo scope stamped on every write, so one shared store can host many repos/departments and search can bias to the local scope first. Project-agnostic — values are per-repo config, never hardcoded in the plugin.",
+          "properties": {
+            "repo": {
+              "type": "string",
+              "description": "This repo's name, stamped as a `repo:<name>` element + `IN_REPO` link on every decision."
+            },
+            "dept": {
+              "type": "string",
+              "description": "This repo's department (e.g. dev/marketing/finance/automations), stamped as a `dept:<name>` element + `IN_DEPT` link. Default search bias — reads re-rank `dept:<this>` hits first; `--all-scopes` widens."
+            }
+          }
+        },
+        "capture": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Which write paths route into the graph when active. All default `true`.",
+          "properties": {
+            "decisions": {
+              "type": "boolean",
+              "default": true,
+              "description": "Route `/flow:record-ddr` + DDR-worthy design writes to `kg ingest` instead of a `DDR-NNN.md` file."
+            },
+            "state": {
+              "type": "boolean",
+              "default": true,
+              "description": "Route STATE.md history / pause-resume events to kgai as dated events."
+            },
+            "auto": {
+              "type": "boolean",
+              "default": true,
+              "description": "Let kgai's own `Stop` hook nudge autonomous decision capture after structural edits (zero added LLM cost). Set `false` to suppress the nudge."
+            }
+          }
+        }
+      }
+    },
     "security": {
       "type": "object",
       "additionalProperties": false,

package/plugins/flow/dependencies.json

@@ -95,6 +95,23 @@
       ],
       "docsUrl": "https://github.com/anthropics/agent-device"
     },
+    {
+      "id": "kg",
+      "type": "cli",
+      "hardness": "soft",
+      "check": {
+        "command": "kg version",
+        "expectExit": 0
+      },
+      "install": {
+        "preferred": "See docs/kgai-onboarding.md — download the pinned kgai release binary (kgai is capability-gated + opt-out; nothing to install to use classic .ai/ mode)",
+        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v0.1.9/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
+      },
+      "autoInstall": false,
+      "fallbackBehavior": "flow/design fall back to the classic .ai/decisions/ + STATE.md file path (no regression). The kgai knowledge-graph backend (kg context/ingest/sync, cross-repo company memory) is inactive.",
+      "usedBy": ["skills/kgai-backend/SKILL.md", "commands/migrate-kgai.md"],
+      "docsUrl": "https://github.com/kgaidev/kgai"
+    },
     {
       "id": "jq",
       "type": "system-tool",