@1agh/maude 0.52.2 → 0.53.1

package/apps/studio/use-keyboard-discipline.tsx

@@ -28,6 +28,7 @@ import { useEffect, useRef } from 'react';
 import { useArtboardsContext, useDragStateContext } from './canvas-lib.tsx';
 import { resolveSelectionEl, scopedCdSelector, selectorIndex } from './dom-selection.ts';
 import { isEditableTarget } from './input-router.tsx';
+import { isReadOnlyCanvas } from './read-only-mode.ts';
 import { type Selection, useSelectionSet } from './use-selection-set.tsx';
 import { useToolModeOptional } from './use-tool-mode.tsx';
 
@@ -127,6 +128,7 @@ export function useKeyboardDiscipline(): void {
       // write, so post to the parent shell (pinned to the active canvas + undo).
       // preventDefault so the browser doesn't bookmark the page.
       if (isMeta && !e.altKey && !e.shiftKey && e.key.toLowerCase() === 'd') {
+        if (isReadOnlyCanvas()) return; // Cloud Phase 25 C2 — duplicate is a write
         const one = selSet.selected.length === 1 ? selSet.selected[0] : null;
         if (one?.id) {
           e.preventDefault();
@@ -146,6 +148,8 @@ export function useKeyboardDiscipline(): void {
       // selection's authored appearance (shell-side); paste applies it to the
       // currently selected element. The shell holds the clipboard + does the write.
       if (isMeta && e.altKey && (e.key.toLowerCase() === 'c' || e.key.toLowerCase() === 'v')) {
+        // Cloud Phase 25 C2 — copy-style is a read and stays; paste-style writes.
+        if (e.key.toLowerCase() === 'v' && isReadOnlyCanvas()) return;
         const one = selSet.selected.length === 1 ? selSet.selected[0] : null;
         if (one?.id) {
           e.preventDefault();
@@ -224,6 +228,7 @@ export function useKeyboardDiscipline(): void {
       // against text-editing focus above; skip modifier combos + non-single /
       // artboard-only selections (whole-artboard delete is out of scope here).
       if ((e.key === 'Delete' || e.key === 'Backspace') && !isMeta && !e.altKey) {
+        if (isReadOnlyCanvas()) return; // Cloud Phase 25 C2 — delete is a write
         const one = selSet.selected.length === 1 ? selSet.selected[0] : null;
         if (one?.id) {
           e.preventDefault();
@@ -257,6 +262,7 @@ export function useKeyboardDiscipline(): void {
       const delta = nudgeDelta({ key: e.key, shift: e.shiftKey });
       if (!delta) return;
       if (isMeta || e.altKey) return; // modifier combos reserved for future
+      if (isReadOnlyCanvas()) return; // Cloud Phase 25 C2 — nudge commits a write
 
       // Arrow nudge — a single OUT-OF-FLOW element (position:absolute/fixed).
       // In-flow elements are a no-op (nudging a flow element is ambiguous — it has

package/apps/studio/use-tool-mode.tsx

@@ -23,6 +23,7 @@ import {
 
 import { TOOL_CURSORS } from './canvas-cursors.ts';
 import type { Tool } from './input-router.tsx';
+import { isReadOnlyCanvas } from './read-only-mode.ts';
 
 // ─────────────────────────────────────────────────────────────────────────────
 // Types
@@ -69,6 +70,23 @@ export const DEFAULT_TOOLS: readonly ToolDescriptor[] = Object.freeze([
   { id: 'eraser', label: 'Eraser', shortcut: 'E', cursor: TOOL_CURSORS.eraser },
 ]);
 
+/**
+ * Cloud Phase 25 C2 — the tools a READ-ONLY session keeps: navigate and
+ * inspect, nothing that writes. Everything else (comment included — the cell
+ * refuses viewer comments until Phase 25 C3 lands them on its allowlist) is
+ * ABSENT from the palette, its letter shortcut dead, and `setTool` refuses it
+ * (which also covers the shell's `tool-set` postMessage lane).
+ */
+const READ_ONLY_TOOL_IDS: ReadonlySet<Tool> = new Set<Tool>(['browse', 'move', 'hand']);
+
+/** Pure filter — exported for unit tests. */
+export function filterToolsForReadOnly(
+  tools: readonly ToolDescriptor[],
+  readOnly: boolean
+): readonly ToolDescriptor[] {
+  return readOnly ? tools.filter((t) => READ_ONLY_TOOL_IDS.has(t.id)) : tools;
+}
+
 interface ToolContextValue {
   tool: Tool;
   setTool: (t: Tool) => void;
@@ -92,7 +110,7 @@ const ToolContext = createContext<ToolContextValue | null>(null);
 
 export function ToolProvider({
   children,
-  tools = DEFAULT_TOOLS,
+  tools: toolsProp = DEFAULT_TOOLS,
   // feature-4 (browse/move split, DDR-187) — boot into `browse` so a freshly
   // opened mock is ALIVE (native pass-through). V flips to the Move (select)
   // tool. This is the user-decided boot posture (2026-07-15), zero regression
@@ -103,17 +121,29 @@ export function ToolProvider({
   tools?: readonly ToolDescriptor[];
   initial?: Tool;
 }) {
+  // Cloud Phase 25 C2 — a read-only canvas keeps only navigate/inspect tools.
+  // Filtering HERE covers every consumer at once: the palette renders from
+  // `tools`, the input router's letter shortcuts resolve against `tools`, and
+  // `setTool` below refuses anything outside the list (the shell `tool-set`
+  // postMessage lane included).
+  const tools = useMemo(() => filterToolsForReadOnly(toolsProp, isReadOnlyCanvas()), [toolsProp]);
   const [tool, setToolState] = useState<Tool>(initial);
   const [sticky, setSticky] = useState<{ tool: Tool | null; locked: boolean }>(() => ({
     tool: null,
     locked: false,
   }));
-  const setTool = useCallback((t: Tool) => {
-    setToolState(t);
-    // Single-click on a different tool clears any sticky lock — sticky is
-    // a per-tool flag, not global.
-    setSticky((prev) => (prev.locked && prev.tool === t ? prev : { tool: null, locked: false }));
-  }, []);
+  const setTool = useCallback(
+    (t: Tool) => {
+      // Refuse tools that aren't offered (read-only filtering above) — a
+      // shortcut or postMessage can't arm a tool the palette doesn't show.
+      if (!tools.some((d) => d.id === t)) return;
+      setToolState(t);
+      // Single-click on a different tool clears any sticky lock — sticky is
+      // a per-tool flag, not global.
+      setSticky((prev) => (prev.locked && prev.tool === t ? prev : { tool: null, locked: false }));
+    },
+    [tools]
+  );
   const toggleSticky = useCallback((t: Tool) => {
     setSticky((prev) => {
       if (prev.locked && prev.tool === t) return { tool: null, locked: false };

package/apps/studio/whats-new.json

@@ -1,9 +1,36 @@
 {
   "$schema": "./whats-new.schema.json",
   "entries": [
+    {
+      "id": "open-your-project-in-a-browser",
+      "version": "0.53.0",
+      "date": "2026-08-02",
+      "kind": "feature",
+      "title": "Open your project in a browser — nothing to install",
+      "summary": "Send a teammate a link and they open the real project in their browser: the actual canvases, the actual design system. They can move things, edit text and colours, leave notes, and download the whole thing — signed in with their Maude account, with the same rights they have in the app.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "viewer-means-viewer",
+      "version": "0.53.0",
+      "date": "2026-08-02",
+      "kind": "feature",
+      "title": "A viewer sees no editing tools at all",
+      "summary": "Invite someone as a viewer and the editing simply is not there — not greyed out, not hidden, absent — in the browser and in the app alike. They can look, comment and download, which is what the role has always promised.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "design-sync-pull-request",
+      "version": "0.53.0",
+      "date": "2026-08-02",
+      "kind": "feature",
+      "title": "Sync your designs into your own repo as a pull request",
+      "summary": "Point Maude at a GitHub repository and choose what lands: the whole workspace as a backup on its own branch, or your design folder inside your working repo — as a normal pull request you review and merge. Each choice says what it will do before you save it.",
+      "surface": "design-ui"
+    },
     {
       "id": "desktop-opens-again",
-      "version": "0.52.0",
+      "version": "0.52.2",
       "date": "2026-08-02",
       "kind": "fix",
       "title": "The desktop app opens again",

package/cli/bin/maude.mjs

@@ -21,7 +21,6 @@ const COMMANDS = {
   kg: () => import('../commands/kg.mjs'),
   help: () => import('../commands/help.mjs'),
   hub: () => import('../commands/hub.mjs'),
-  share: () => import('../commands/share.mjs'),
   version: () => import('../commands/version.mjs'),
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.52.2",
+  "version": "0.53.1",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -52,13 +52,13 @@
     "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.52.2",
-    "@1agh/maude-darwin-x64": "0.52.2",
-    "@1agh/maude-linux-arm64": "0.52.2",
-    "@1agh/maude-linux-arm64-musl": "0.52.2",
-    "@1agh/maude-linux-x64": "0.52.2",
-    "@1agh/maude-linux-x64-musl": "0.52.2",
-    "@1agh/maude-win32-x64": "0.52.2"
+    "@1agh/maude-darwin-arm64": "0.53.1",
+    "@1agh/maude-darwin-x64": "0.53.1",
+    "@1agh/maude-linux-arm64": "0.53.1",
+    "@1agh/maude-linux-arm64-musl": "0.53.1",
+    "@1agh/maude-linux-x64": "0.53.1",
+    "@1agh/maude-linux-x64-musl": "0.53.1",
+    "@1agh/maude-win32-x64": "0.53.1"
   },
   "files": [
     "cli",

package/cli/commands/share.mjs

@@ -1,188 +0,0 @@
-// `maude share` — publish a read-only view of a project. Cloud Phase 18.
-//
-// The effects half; every decision lives in cli/lib/share-plan.mjs.
-//
-// RENDERING HAPPENS HERE, ON THIS MACHINE. That is the containment invariant
-// (DDR-193 §2, narrowed by DDR-197), not an implementation detail: the vendor
-// serves finished pictures it never produced and never interprets. Moving this
-// to the server would be a one-line convenience that deletes the guarantee.
-//
-//   maude share publish --project alligators --from <dir> [--name "Brno Alligators"]
-//   maude share off     --project alligators
-//
-// `--from` is a directory of screenshots — typically what `maude design smoke
-// --out-dir <dir>` just wrote, which is already one PNG per canvas.
-
-import { readdirSync, readFileSync, statSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-
-import { parseArgs } from '../lib/argv.mjs';
-import { publishPlan, publishSummary, shareMarker, validProjectId } from '../lib/share-plan.mjs';
-
-export function usage() {
-  return `maude share <publish|off> [options]
-
-  Publish a read-only view of a design project, so someone can look at it in a
-  browser without installing anything.
-
-  publish   upload the pictures in --from and turn sharing ON
-  off       turn sharing off (the pictures stay; nothing serves them)
-
-  --project ID       the project (lowercase, hyphens)
-  --from DIR         directory of screenshots to publish (publish only)
-  --name "Title"     what the view calls itself (default: the project id)
-  --zone HOST        default cloud.maude.sh
-  --dry-run          print the plan, upload nothing
-  --json             machine-readable result
-
-  Storage credentials come from the environment:
-    MAUDE_R2_ENDPOINT  MAUDE_R2_ACCESS_KEY_ID  MAUDE_R2_SECRET_ACCESS_KEY
-    MAUDE_R2_BUCKET    (default maude-cloud-assets)
-
-  The pictures are taken on THIS machine and uploaded as finished images. The
-  shared view never renders anything — that is what makes it safe to hand to
-  someone who is not on your team.
-`;
-}
-
-/** Every file under `dir`, relative to it. */
-function listFiles(dir, prefix = '', out = []) {
-  for (const entry of readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-    if (entry.isDirectory()) listFiles(join(dir, entry.name), rel, out);
-    else if (entry.isFile()) out.push(rel);
-  }
-  return out;
-}
-
-function s3ConfigFromEnv(env = process.env) {
-  const missing = [
-    'MAUDE_R2_ENDPOINT',
-    'MAUDE_R2_ACCESS_KEY_ID',
-    'MAUDE_R2_SECRET_ACCESS_KEY',
-  ].filter((k) => !env[k]);
-  if (missing.length) {
-    throw new Error(
-      `object storage is not configured — missing ${missing.join(', ')}.\n` +
-        'A publish needs somewhere to put the pictures.'
-    );
-  }
-  return {
-    endpoint: env.MAUDE_R2_ENDPOINT,
-    bucket: env.MAUDE_R2_BUCKET ?? 'maude-cloud-assets',
-    accessKeyId: env.MAUDE_R2_ACCESS_KEY_ID,
-    secretAccessKey: env.MAUDE_R2_SECRET_ACCESS_KEY,
-    region: 'auto',
-  };
-}
-
-async function loadS3(pkgRoot) {
-  for (const candidate of [
-    resolve(pkgRoot, 'apps/hub/src/s3.mjs'),
-    resolve(pkgRoot, '../apps/hub/src/s3.mjs'),
-  ]) {
-    const mod = await import(`file://${candidate}`).catch(() => null);
-    if (mod) return mod;
-  }
-  throw new Error('the storage client (apps/hub/src/s3.mjs) was not found in this install');
-}
-
-export async function run({ args, pkgRoot }) {
-  const { positional, flags } = parseArgs(args, { booleans: ['help', 'dry-run', 'json'] });
-  const sub = positional[0];
-  if (flags.help || !sub) {
-    process.stdout.write(usage());
-    return;
-  }
-
-  const project = validProjectId(flags.project);
-  if (!project) {
-    process.stderr.write(
-      'maude share: --project is required (lowercase letters, digits, hyphens)\n'
-    );
-    process.exit(2);
-  }
-  const zone = String(flags.zone ?? 'cloud.maude.sh');
-
-  if (sub === 'off') {
-    const s3 = await loadS3(pkgRoot);
-    const marker = shareMarker(project, { enabled: false, name: flags.name });
-    if (flags['dry-run']) {
-      process.stdout.write(`Would turn sharing OFF for ${project}.\n`);
-      return;
-    }
-    await s3.putObject(s3ConfigFromEnv(), marker.key, Buffer.from(marker.body));
-    process.stdout.write(
-      `Sharing is off for ${project}. The link no longer shows anything.\n` +
-        'The pictures are still in storage — nothing serves them.\n'
-    );
-    return;
-  }
-
-  if (sub !== 'publish') {
-    process.stderr.write(`maude share: unknown command "${sub}"\n`);
-    process.exit(2);
-  }
-
-  const from = flags.from ? resolve(String(flags.from)) : null;
-  if (!from) {
-    process.stderr.write('maude share publish: --from <dir> is required\n');
-    process.exit(2);
-  }
-  try {
-    if (!statSync(from).isDirectory()) throw new Error('not a directory');
-  } catch {
-    process.stderr.write(`maude share publish: ${from} is not a directory\n`);
-    process.exit(2);
-  }
-
-  const { uploads, skipped } = publishPlan(listFiles(from), project);
-  if (uploads.length === 0) {
-    process.stderr.write(
-      `maude share publish: nothing to publish in ${from}.\n` +
-        'The shared view serves PNG, JPEG, WebP and AVIF. Take screenshots first\n' +
-        '(`maude design smoke --out-dir <dir>` writes one per canvas).\n'
-    );
-    process.exit(1);
-  }
-
-  if (flags['dry-run']) {
-    process.stdout.write(`Would publish ${uploads.length} file(s) for ${project}:\n`);
-    for (const u of uploads.slice(0, 20)) process.stdout.write(`  ${u.from} → ${u.key}\n`);
-    if (uploads.length > 20) process.stdout.write(`  …and ${uploads.length - 20} more\n`);
-    if (skipped.length) process.stdout.write(`Would skip ${skipped.length} unshareable file(s).\n`);
-    return;
-  }
-
-  const s3 = await loadS3(pkgRoot);
-  const cfg = s3ConfigFromEnv();
-  let uploaded = 0;
-  const failed = [];
-  for (const u of uploads) {
-    try {
-      await s3.putObject(cfg, u.key, readFileSync(join(from, u.from)));
-      uploaded += 1;
-    } catch (err) {
-      failed.push({ file: u.from, reason: err.message.slice(0, 120) });
-    }
-  }
-
-  // The marker goes LAST. Its presence is what turns sharing on, so writing it
-  // first would expose a half-published gallery — the same reasoning as the
-  // backup manifest.
-  const marker = shareMarker(project, { enabled: true, name: flags.name });
-  await s3.putObject(cfg, marker.key, Buffer.from(marker.body));
-
-  if (flags.json) {
-    process.stdout.write(
-      `${JSON.stringify({ ok: failed.length === 0, project, uploaded, skipped: skipped.length, failed, url: `https://view-${project}.${zone}` }, null, 2)}\n`
-    );
-    return;
-  }
-  process.stdout.write(`${publishSummary({ project, uploaded, skipped: skipped.length, zone })}\n`);
-  if (failed.length) {
-    process.stderr.write(`\n${failed.length} file(s) failed to upload:\n`);
-    for (const f of failed.slice(0, 5)) process.stderr.write(`  ${f.file} — ${f.reason}\n`);
-    process.exit(1);
-  }
-}

package/cli/lib/share-plan.mjs

@@ -1,100 +0,0 @@
-// Publishing a shared view — the DECISION half. Cloud Phase 18 Task 1.
-//
-// WHO RENDERS. Snapshots are produced on a MEMBER's own machine and uploaded
-// as finished pictures. The vendor never renders a canvas — that is the whole
-// containment claim (DDR-193 §2 / DDR-197), and it is why publishing is a
-// local command rather than a server feature. A "publish" button that made the
-// server render would quietly delete the invariant.
-//
-// Pure: no filesystem, no network, no clock. What gets uploaded and under
-// which key is the part that can leak one project's work into another's view,
-// and that must be reviewable without credentials.
-
-/** Formats the share view will serve. Must match apps/cells/share.mjs. */
-const SHAREABLE = /\.(png|jpe?g|webp|avif)$/i;
-
-/**
- * SVG is excluded here for the same reason it is excluded there: an SVG is a
- * document that can carry script, and the share origin must never serve one.
- * Two lists that could disagree would be a hole, so this test names the reason
- * rather than just the extensions.
- */
-export function isShareable(name) {
-  return SHAREABLE.test(String(name ?? ''));
-}
-
-/** Same charset the cell entrypoint enforces — the id becomes a storage prefix. */
-export function validProjectId(raw) {
-  const id = String(raw ?? '').trim();
-  return /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(id) && id.length <= 63 ? id : null;
-}
-
-/**
- * What to upload, and where.
- *
- * @param {string[]} files  paths relative to the source directory
- * @param {string} project
- * @returns {{ uploads: {from: string, key: string}[], skipped: string[] }}
- */
-export function publishPlan(files, project) {
-  const id = validProjectId(project);
-  if (!id) throw new Error(`invalid project id: ${project}`);
-  const uploads = [];
-  const skipped = [];
-  for (const raw of files) {
-    const rel = String(raw).replace(/\\/g, '/').replace(/^\.\//, '');
-    // A path that could climb out of the source directory would upload
-    // something nobody chose to share.
-    if (rel.startsWith('/') || rel.split('/').includes('..')) {
-      skipped.push(rel);
-      continue;
-    }
-    if (!isShareable(rel)) {
-      skipped.push(rel);
-      continue;
-    }
-    uploads.push({ from: rel, key: `tenants/${id}/snapshots/${rel}` });
-  }
-  uploads.sort((a, b) => a.key.localeCompare(b.key));
-  return { uploads, skipped };
-}
-
-/** The marker whose ABSENCE means "not shared". Default-closed by construction. */
-export function shareMarker(project, { enabled, name }) {
-  const id = validProjectId(project);
-  if (!id) throw new Error(`invalid project id: ${project}`);
-  return {
-    key: `tenants/${id}/share.json`,
-    body: JSON.stringify(
-      { enabled: Boolean(enabled), name: String(name ?? id).slice(0, 80) },
-      null,
-      2
-    ),
-  };
-}
-
-/**
- * What the operator is told after a publish.
- *
- * Says the URL and says what it is NOT, because the single most likely
- * misunderstanding is that a shared view is live.
- */
-export function publishSummary({ project, uploaded, skipped, zone = 'cloud.maude.sh' }) {
-  const lines = [
-    `Published ${uploaded} view${uploaded === 1 ? '' : 's'} of ${project}.`,
-    ``,
-    `  https://view-${project}.${zone}`,
-    ``,
-    `These are pictures taken on this machine just now. They do not update`,
-    `themselves — publish again after the design changes.`,
-  ];
-  if (skipped > 0) {
-    lines.push(
-      ``,
-      `${skipped} file${skipped === 1 ? ' was' : 's were'} not published: the shared view`,
-      `serves only PNG, JPEG, WebP and AVIF. SVG is excluded on purpose — it can`,
-      `carry script, and nothing the view serves is ever allowed to execute.`
-    );
-  }
-  return lines.join('\n');
-}

package/cli/lib/share-plan.test.mjs

@@ -1,66 +0,0 @@
-// Cloud Phase 18 — what gets published, and what must never be.
-
-import assert from 'node:assert/strict';
-import test from 'node:test';
-
-import {
-  isShareable,
-  publishPlan,
-  publishSummary,
-  shareMarker,
-  validProjectId,
-} from './share-plan.mjs';
-
-test('SVG is never published, however it is named', () => {
-  // Same reason the share origin refuses to SERVE one: an SVG is a document
-  // that can carry <script>. Two lists that could disagree would be a hole,
-  // so both refuse it and both say why.
-  for (const bad of ['logo.svg', 'a/b.SVG', 'x.html', 'x.js', 'x.pdf', 'notes.md', 'x.tsx']) {
-    assert.equal(isShareable(bad), false, bad);
-  }
-  for (const ok of ['a.png', 'a.JPG', 'a.jpeg', 'a.webp', 'a.avif']) {
-    assert.equal(isShareable(ok), true, ok);
-  }
-});
-
-test('a publish cannot climb out of the directory it was pointed at', () => {
-  const { uploads, skipped } = publishPlan(
-    ['../secret.png', '/etc/x.png', 'a/../../b.png', 'ok.png', 'ui/home.png'],
-    'acme'
-  );
-  assert.deepEqual(
-    uploads.map((u) => u.from),
-    ['ok.png', 'ui/home.png']
-  );
-  assert.equal(skipped.length, 3);
-});
-
-test('every key is scoped to its own project', () => {
-  const { uploads } = publishPlan(['home.png'], 'acme');
-  assert.equal(uploads[0].key, 'tenants/acme/snapshots/home.png');
-  assert.throws(() => publishPlan(['a.png'], '../other'), /invalid project id/);
-  assert.throws(() => publishPlan(['a.png'], 'Acme'), /invalid project id/);
-  assert.equal(validProjectId('a-b-1'), 'a-b-1');
-});
-
-test('the marker is what turns sharing on, and defaults closed', () => {
-  const on = JSON.parse(shareMarker('acme', { enabled: true, name: 'Acme Co' }).body);
-  assert.deepEqual(on, { enabled: true, name: 'Acme Co' });
-  // Anything that is not exactly true is off. The share view treats a missing
-  // or unparseable marker the same way, so every failure mode is closed.
-  const off = JSON.parse(shareMarker('acme', { enabled: false }).body);
-  assert.equal(off.enabled, false);
-  assert.equal(off.name, 'acme');
-});
-
-test('the summary says what a shared view is NOT', () => {
-  const out = publishSummary({ project: 'acme', uploaded: 3, skipped: 0 });
-  assert.match(out, /https:\/\/view-acme\.cloud\.maude\.sh/);
-  // The single most likely misunderstanding is that this is live.
-  assert.match(out, /do not update\s*\n?themselves/);
-});
-
-test('a skipped file is explained, not silently dropped', () => {
-  const out = publishSummary({ project: 'acme', uploaded: 1, skipped: 2 });
-  assert.match(out, /SVG is excluded on purpose/);
-});