@1agh/maude 0.51.1 → 0.52.1

package/cli/lib/ddr-to-kgai.mjs

@@ -862,7 +862,12 @@ export function buildDocsBatch(aiDir, scope = {}) {
       // A doc that cites DDRs is context ABOUT them.
       for (const num of new Set([...t.matchAll(/DDR-(\d+)/g)].map((m) => m[1].padStart(3, '0')))) {
         muts.push({ op: 'upsert_element', kind: 'decision', name: ddrRef(num, scope) });
-        muts.push({ op: 'add_link', from: ref, to: `decision:${ddrRef(num, scope)}`, link: 'REFERENCES' });
+        muts.push({
+          op: 'add_link',
+          from: ref,
+          to: `decision:${ddrRef(num, scope)}`,
+          link: 'REFERENCES',
+        });
       }
       decisions.push({
         title: `Doc: ${title}`.slice(0, 160),

package/cli/lib/ddr-to-kgai.test.mjs

@@ -102,8 +102,7 @@ test('decision names are namespaced by repo so DDR numbers do not collide cross-
   const files = { 'DDR-001-a.md': '# DDR-001: Alpha\n\n**Tags:** infra\n' };
   const a = buildDdrBatch(fixtureDir(files), { repo: 'vantage', dept: 'marketing' });
   const b = buildDdrBatch(fixtureDir(files), { repo: 'AI-StudyMate', dept: 'dev' });
-  const nameOf = (batch) =>
-    batch.decisions[0].mutations.find((m) => m.kind === 'decision').name;
+  const nameOf = (batch) => batch.decisions[0].mutations.find((m) => m.kind === 'decision').name;
   assert.equal(nameOf(a.batch), 'vantage/DDR-001');
   assert.equal(nameOf(b.batch), 'AI-StudyMate/DDR-001');
   assert.notEqual(nameOf(a.batch), nameOf(b.batch));

package/cli/lib/hubs-config.mjs

@@ -83,12 +83,26 @@ export function saveHubsConfig(config) {
  *
  * @param {string} url
  * @param {string} token
+ * `role` is the ONE prior field carried across a relink (Cloud Phase 25 C2).
+ * It records what the workspace vouched for at sign-in, and this path has no
+ * fresher answer — the CLI does not sign in. Dropping it would silently show
+ * a viewer the editing UI again, which is the exact experience the flag
+ * exists to prevent; a stale value costs a redundant hidden affordance and
+ * self-corrects at the next workspace sign-in. Nothing ELSE is preserved:
+ * `adoptedAt` is a per-machine attestation that a relink is entitled to clear.
+ *
  * @param {{ adoptedAt?: number }} [extra]
  */
 export function addHub(url, token, extra = {}) {
   const norm = normalizeUrl(url);
   const cfg = loadHubsConfig();
-  cfg.hubs[norm] = { token, linkedAt: Date.now(), ...extra };
+  const priorRole = cfg.hubs[norm]?.role;
+  cfg.hubs[norm] = {
+    token,
+    linkedAt: Date.now(),
+    ...(priorRole ? { role: priorRole } : {}),
+    ...extra,
+  };
   saveHubsConfig(cfg);
   return cfg.hubs[norm];
 }

package/cli/lib/hubs-config.test.mjs

@@ -98,3 +98,22 @@ test('addHub keys URLs case-insensitively (same hub after host normalization)',
     assert.equal(hubs['https://hub.example.com'].token, 'mau_second');
   });
 });
+
+// Cloud Phase 25 C2 — the studio writes `role` into this shared file, and a
+// CLI relink used to replace the record wholesale and drop it. Not an access
+// hole (the cell refuses the write regardless), but it would silently show a
+// viewer the editing UI again, which is exactly what the flag exists to stop.
+test('a relink preserves the vouched role, and still clears per-machine attestations', () => {
+  withTmpConfig(() => {
+    addHub('https://p.cloud.maude.sh', 'mau_first', { adoptedAt: 111 });
+    // The studio stamps the role after a workspace sign-in.
+    const cfg = loadHubsConfig();
+    cfg.hubs['https://p.cloud.maude.sh'].role = 'viewer';
+    saveHubsConfig(cfg);
+
+    const after = addHub('https://p.cloud.maude.sh', 'mau_second');
+    assert.equal(after.token, 'mau_second');
+    assert.equal(after.role, 'viewer', 'the role survives a relink');
+    assert.equal(after.adoptedAt, undefined, 'a per-machine attestation does not');
+  });
+});

package/cli/lib/share-plan.mjs

@@ -65,7 +65,11 @@ export function shareMarker(project, { enabled, name }) {
   if (!id) throw new Error(`invalid project id: ${project}`);
   return {
     key: `tenants/${id}/share.json`,
-    body: JSON.stringify({ enabled: Boolean(enabled), name: String(name ?? id).slice(0, 80) }, null, 2),
+    body: JSON.stringify(
+      { enabled: Boolean(enabled), name: String(name ?? id).slice(0, 80) },
+      null,
+      2
+    ),
   };
 }
 

package/cli/lib/share-plan.test.mjs

@@ -3,7 +3,13 @@
 import assert from 'node:assert/strict';
 import test from 'node:test';
 
-import { isShareable, publishPlan, publishSummary, shareMarker, validProjectId } from './share-plan.mjs';
+import {
+  isShareable,
+  publishPlan,
+  publishSummary,
+  shareMarker,
+  validProjectId,
+} from './share-plan.mjs';
 
 test('SVG is never published, however it is named', () => {
   // Same reason the share origin refuses to SERVE one: an SVG is a document
@@ -22,7 +28,10 @@ test('a publish cannot climb out of the directory it was pointed at', () => {
     ['../secret.png', '/etc/x.png', 'a/../../b.png', 'ok.png', 'ui/home.png'],
     'acme'
   );
-  assert.deepEqual(uploads.map((u) => u.from), ['ok.png', 'ui/home.png']);
+  assert.deepEqual(
+    uploads.map((u) => u.from),
+    ['ok.png', 'ui/home.png']
+  );
   assert.equal(skipped.length, 3);
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.51.1",
+  "version": "0.52.1",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -52,13 +52,13 @@
     "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.51.1",
-    "@1agh/maude-darwin-x64": "0.51.1",
-    "@1agh/maude-linux-arm64": "0.51.1",
-    "@1agh/maude-linux-arm64-musl": "0.51.1",
-    "@1agh/maude-linux-x64": "0.51.1",
-    "@1agh/maude-linux-x64-musl": "0.51.1",
-    "@1agh/maude-win32-x64": "0.51.1"
+    "@1agh/maude-darwin-arm64": "0.52.1",
+    "@1agh/maude-darwin-x64": "0.52.1",
+    "@1agh/maude-linux-arm64": "0.52.1",
+    "@1agh/maude-linux-arm64-musl": "0.52.1",
+    "@1agh/maude-linux-x64": "0.52.1",
+    "@1agh/maude-linux-x64-musl": "0.52.1",
+    "@1agh/maude-win32-x64": "0.52.1"
   },
   "files": [
     "cli",