@1agh/maude 0.53.2 → 0.55.0

package/apps/studio/ws.ts

@@ -9,7 +9,7 @@ import type { Api } from './api.ts';
 import type { Collab, RoomConn } from './collab/index.ts';
 import type { Context } from './context.ts';
 import { createHmrBroadcaster } from './hmr-broadcast.ts';
-import type { Inspect } from './inspect.ts';
+import type { InspectRegistry } from './inspect.ts';
 
 /**
  * Per-connection state. `kind` discriminates between the legacy JSON
@@ -29,6 +29,11 @@ export type WsData =
        *  per session, and a handshake is the one moment the session is
        *  unambiguous. */
       readOnly: boolean;
+      /** WHOSE socket this is — Cloud Phase 27 D3. Same reasoning as `readOnly`
+       *  one line up, for the other thing a cell has more than one of. `''` on
+       *  a desktop, which is what makes every broadcast below reach everybody
+       *  exactly as it always did. */
+      session: string;
     }
   | {
       id: string;
@@ -39,6 +44,14 @@ export type WsData =
        *  canvas iframe origin, whose sync frames go through the DDR-122
        *  origin gate in collab/room.ts. Set at upgrade time in server.ts. */
       realm: 'main' | 'canvas';
+      /** Cloud collab lane (RCA issue-cloud-live-collaboration-dead) — the
+       *  role this socket was opened under, stamped at upgrade time from the
+       *  proxy's injected header (fail-closed in a cell, always false on a
+       *  loopback desktop). A read-only collab socket receives everything and
+       *  publishes awareness (presence is the point), but its sync writes are
+       *  gated to the comment lane in collab/room.ts — the WS mirror of the
+       *  role matrix's `viewer.comment === true`. */
+      readOnly?: boolean;
     }
   | {
       // T2 (9.1-A) — HMR-only socket for the segregated canvas origin. Receives
@@ -139,7 +152,10 @@ export interface Ws {
 export function createWs(
   ctx: Context,
   api: Api,
-  inspect: Inspect,
+  /** Cloud Phase 27 D3 — one inspector per member, not one per process. Every
+   *  read/write below resolves through the socket's own session key, so a
+   *  desktop (key `''`) keeps hitting the single instance it always had. */
+  inspects: InspectRegistry,
   collab: Collab,
   activity: Activity,
   acp: Acp
@@ -156,10 +172,16 @@ export function createWs(
 
   // Privileged inspector feed — comments, selection, ai-activity, git-lifecycle,
   // sync:status, fs:*. ONLY the same-origin inspector clients (the shell) get it.
-  function broadcast(payload: unknown) {
+  function broadcast(payload: unknown, session?: string) {
     const msg = typeof payload === 'string' ? payload : JSON.stringify(payload);
     for (const ws of clients) {
       if (ws.data.kind !== 'inspector') continue;
+      // D3 — an event ABOUT one member goes only to that member. `session` is
+      // set by the emitter (inspect.ts stamps its own key); everything else —
+      // fs changes, comments, git lifecycle, sync status — is about the
+      // PROJECT and reaches everyone, which is why the audience is opt-in
+      // rather than the default.
+      if (session && ws.data.session !== session) continue;
       send(ws, msg);
     }
   }
@@ -177,8 +199,10 @@ export function createWs(
 
   // Wire bus -> WS broadcasts. inspect.ts emits 'selected' / 'active' after every
   // state write; fs-watch.ts emits 'fs:*' on every save.
-  ctx.bus.on('selected', (sel) => broadcast({ type: 'selected', selected: sel }));
-  ctx.bus.on('active', (file) => broadcast({ type: 'active', file }));
+  ctx.bus.on('selected', (sel, meta) =>
+    broadcast({ type: 'selected', selected: sel }, meta?.session)
+  );
+  ctx.bus.on('active', (file, meta) => broadcast({ type: 'active', file }, meta?.session));
   ctx.bus.on('fs:html', (file) => broadcast({ type: 'fs:html', file }));
   ctx.bus.on('fs:css', (file) => broadcast({ type: 'fs:css', file }));
   ctx.bus.on('fs:json', (file) => broadcast({ type: 'fs:json', file }));
@@ -259,11 +283,13 @@ export function createWs(
   function bindCollab(
     ws: ServerWebSocket<WsData>,
     slug: string,
-    realm: 'main' | 'canvas'
+    realm: 'main' | 'canvas',
+    readOnly: boolean
   ): RoomConn {
     const conn: RoomConn = {
       id: ws.data.id,
       realm,
+      readOnly,
       send(payload: Uint8Array) {
         try {
           // Bun's ws.send accepts Uint8Array directly as binary.
@@ -281,7 +307,12 @@ export function createWs(
     async open(ws) {
       if (ws.data.kind === 'collab') {
         const room = collab.registry.get(ws.data.slug);
-        const conn = bindCollab(ws, ws.data.slug, ws.data.realm ?? 'main');
+        const conn = bindCollab(
+          ws,
+          ws.data.slug,
+          ws.data.realm ?? 'main',
+          ws.data.readOnly === true
+        );
         await room.connect(conn);
         return;
       }
@@ -299,7 +330,11 @@ export function createWs(
       // opening mid-edit seeds its overlay state (Phase 13). Inspector-origin
       // sockets only — `canvas-hmr` sockets get no snapshot by design and rely
       // on live `activity` broadcasts.
-      send(ws, { type: 'snapshot', state: inspect.state, activity: activity.state });
+      send(ws, {
+        type: 'snapshot',
+        state: inspects.for(ws.data.kind === 'inspector' ? ws.data.session : '').state,
+        activity: activity.state,
+      });
     },
     async close(ws) {
       if (ws.data.kind === 'acp') {
@@ -377,6 +412,7 @@ export function createWs(
           });
           return;
         }
+        const inspect = inspects.for(ws.data.kind === 'inspector' ? ws.data.session : '');
         if (msg.type === 'active' && typeof msg.file === 'string') inspect.setActive(msg.file);
         else if (msg.type === 'tabs' && Array.isArray(msg.tabs)) inspect.setOpenTabs(msg.tabs);
         else if (msg.type === 'select' && msg.selection) inspect.setSelected(msg.selection);

package/cli/commands/kg.mjs

@@ -18,7 +18,7 @@ import { basename, join, resolve } from 'node:path';
 import { parseArgs } from '../lib/argv.mjs';
 
 const CONFIG_PATH = '.ai/workflows.config.json';
-const DEFAULT_ENGINE_VERSION = 'v0.1.9';
+const DEFAULT_ENGINE_VERSION = 'v1.0.0';
 const KGAI_REPO = 'kgaidev/kgai';
 
 const VERBS = new Set([
@@ -195,21 +195,32 @@ function verbDoctor(state) {
 async function verbCheckUpstream(state) {
   const pinned = state.engineVersion;
   process.stdout.write(`maude kg check-upstream\n\n  pinned (engineVersion): ${pinned}\n`);
-  let latest = null;
-  let assets = [];
-  try {
-    const res = await fetch(`https://api.github.com/repos/${KGAI_REPO}/releases/latest`, {
-      headers: { 'user-agent': 'maude-kg', accept: 'application/vnd.github+json' },
-      signal: AbortSignal.timeout(15000),
-    });
-    if (res.ok) {
+  const ghHeaders = { 'user-agent': 'maude-kg', accept: 'application/vnd.github+json' };
+  /** Asset names for one release ref, or null when the fetch itself failed. */
+  const assetsFor = async (path) => {
+    try {
+      const res = await fetch(`https://api.github.com/repos/${KGAI_REPO}/releases/${path}`, {
+        headers: ghHeaders,
+        signal: AbortSignal.timeout(15000),
+      });
+      if (!res.ok) return { ok: false, tag: null, assets: [] };
       const rel = await res.json();
-      latest = rel.tag_name;
-      assets = (rel.assets ?? []).map((a) => a.name);
+      return { ok: true, tag: rel.tag_name, assets: (rel.assets ?? []).map((a) => a.name) };
+    } catch {
+      return null; // offline — best-effort
     }
-  } catch {
-    /* offline — best-effort */
-  }
+  };
+
+  const latestRel = await assetsFor('latest');
+  const latest = latestRel?.tag ?? null;
+  // The PINNED release is the one that matters: sync-kg.mjs downloads the
+  // desktop sidecars from `releases/download/<pinned>`. Reporting `latest`'s
+  // assets here said "✓" while the pinned release had been stripped of every
+  // asset upstream, so this check stayed green through a desktop build that was
+  // failing on exactly what it claims to verify (v0.53.2, kgai v0.1.9). A tag is
+  // a name, not a content hash — upstream can rewrite what it points at.
+  const pinnedRel = await assetsFor(`tags/${encodeURIComponent(pinned)}`);
+  const assets = pinnedRel?.assets ?? [];
   if (!latest) {
     process.stdout.write('  latest: unknown (offline) — using pinned.\n');
     return 0;
@@ -218,12 +229,31 @@ async function verbCheckUpstream(state) {
   process.stdout.write(
     `  status:                 ${latest === pinned ? '✓ up to date' : `⚠ upstream moved ${pinned} → ${latest}`}\n`
   );
-  // Capability diff — flags/commands the plan's assumptions hinge on.
+  // Prebuilt assets ON THE PIN — what the desktop build actually downloads.
   const hasDarwin = assets.some((a) => /kg-darwin/.test(a));
   const hasKuzu = assets.some((a) => /libkuzu/.test(a));
-  process.stdout.write('\n  prebuilt assets:\n');
-  process.stdout.write(`    macOS kg binary:      ${hasDarwin ? '✓' : '✗'}\n`);
-  process.stdout.write(`    libkuzu dylib/so:     ${hasKuzu ? '✓' : '✗'}\n`);
+  const hasLinux = assets.some((a) => /kg-linux/.test(a));
+  process.stdout.write(`\n  prebuilt assets on the PIN (${pinned}):\n`);
+  if (pinnedRel === null) {
+    process.stdout.write('    (offline — not checked)\n');
+  } else if (!pinnedRel.ok) {
+    process.stdout.write(`    ✗ release ${pinned} not found upstream\n`);
+  } else {
+    process.stdout.write(`    macOS kg binary:      ${hasDarwin ? '✓' : '✗'}\n`);
+    process.stdout.write(`    linux kg binary:      ${hasLinux ? '✓' : '✗'}\n`);
+    process.stdout.write(`    libkuzu dylib/so:     ${hasKuzu ? '✓' : '✗'}\n`);
+  }
+  // A pin whose assets are gone breaks `sync-kg.mjs`, which fails the desktop
+  // build for macOS and Linux. Exit non-zero so this can gate a release.
+  const pinBroken = pinnedRel !== null && (!pinnedRel.ok || !hasDarwin || !hasKuzu || !hasLinux);
+  if (pinBroken) {
+    process.stdout.write(
+      `\n  ✗ the pinned release cannot build the desktop app — sync-kg.mjs downloads from\n` +
+        `    releases/download/${pinned}, and those assets are missing. Upstream deleted or\n` +
+        `    rewrote the release. Bump the pin to one that still carries them (verify\n` +
+        `    compatibility first: CLI surface diff + a canonical-export comparison).\n`
+    );
+  }
   if (latest !== pinned) {
     process.stdout.write(
       '\n  → Re-scan the capability surface (native --scope filter? kg import? Stop-hook/guessActor changes?),\n' +
@@ -231,7 +261,7 @@ async function verbCheckUpstream(state) {
         '    config.knowledgeGraph.engineVersion deliberately (never float — supply-chain surface, DDR-054/056).\n'
     );
   }
-  return 0;
+  return pinBroken ? 1 : 0;
 }
 
 // ── verb: session-sync (SessionStart hook — non-blocking pull) ──────────────

package/cli/lib/gitignore-block.mjs

@@ -34,6 +34,9 @@ export function buildBlock(designRel = '.design', { s3Assets = false } = {}) {
     `${root}/_server.log`,
     `${root}/_server.lock`,
     `${root}/_active.json`,
+    // Per-member siblings in a cloud cell (Phase 27 D3) — same runtime state,
+    // one file per person, and no more committable than the singleton.
+    `${root}/_active.*.json`,
     `${root}/_sync.json`, // linked-mode offline/sync status (Task 8)
     `${root}/_preflight.json`,
     `${root}/_locator.json`, // regenerable slug→path index

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.53.2",
+  "version": "0.55.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -49,16 +49,18 @@
     "test:e2e:desktop:lifecycle": "pnpm --filter @maude/desktop-e2e e2e:lifecycle",
     "test:e2e:desktop:switchrepos": "pnpm --filter @maude/desktop-e2e e2e:switchrepos",
     "test:e2e:desktop:onboarding": "pnpm --filter @maude/desktop-e2e e2e:onboarding",
-    "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
+    "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start",
+    "test:e2e:desktop:parity": "pnpm --filter @maude/desktop-e2e e2e:parity",
+    "test:e2e:desktop:parity:cloud": "pnpm --filter @maude/desktop-e2e e2e:parity:cloud"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.53.2",
-    "@1agh/maude-darwin-x64": "0.53.2",
-    "@1agh/maude-linux-arm64": "0.53.2",
-    "@1agh/maude-linux-arm64-musl": "0.53.2",
-    "@1agh/maude-linux-x64": "0.53.2",
-    "@1agh/maude-linux-x64-musl": "0.53.2",
-    "@1agh/maude-win32-x64": "0.53.2"
+    "@1agh/maude-darwin-arm64": "0.55.0",
+    "@1agh/maude-darwin-x64": "0.55.0",
+    "@1agh/maude-linux-arm64": "0.55.0",
+    "@1agh/maude-linux-arm64-musl": "0.55.0",
+    "@1agh/maude-linux-x64": "0.55.0",
+    "@1agh/maude-linux-x64-musl": "0.55.0",
+    "@1agh/maude-win32-x64": "0.55.0"
   },
   "files": [
     "cli",

package/plugins/design/dependencies.json

@@ -156,7 +156,7 @@
       },
       "install": {
         "preferred": "See docs/kgai-onboarding.md — download the pinned kgai release binary (kgai is capability-gated + opt-out; nothing to install to use classic .ai/ mode)",
-        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v0.1.9/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
+        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v1.0.0/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
       },
       "autoInstall": false,
       "fallbackBehavior": "Design DS/canvas/brand decisions are not recorded to the kgai graph; the classic .ai/ path (via /flow:record-ddr) and on-disk sidecars are unchanged.",

package/plugins/design/templates/_shell.html

@@ -133,30 +133,30 @@
     <script type="importmap">
       {
         "imports": {
-          "react": "/_canvas-runtime/react.js",
-          "react-dom": "/_canvas-runtime/react-dom.js",
-          "react-dom/client": "/_canvas-runtime/react-dom_client.js",
-          "react/jsx-runtime": "/_canvas-runtime/react_jsx-runtime.js",
-          "react/jsx-dev-runtime": "/_canvas-runtime/react_jsx-dev-runtime.js",
-          "pixi.js": "/_canvas-runtime/pixi-js.js",
-          "@imgly/background-removal": "/_canvas-runtime/@imgly_background-removal.js",
-          "motion": "/_canvas-runtime/motion.js",
-          "motion/react": "/_canvas-runtime/motion_react.js",
-          "yjs": "/_canvas-runtime/yjs.js",
-          "y-protocols/sync": "/_canvas-runtime/y-protocols_sync.js",
-          "y-protocols/awareness": "/_canvas-runtime/y-protocols_awareness.js",
-          "lib0/decoding": "/_canvas-runtime/lib0_decoding.js",
-          "lib0/encoding": "/_canvas-runtime/lib0_encoding.js",
-          "remotion": "/_canvas-runtime/remotion.js",
-          "@remotion/media": "/_canvas-runtime/@remotion_media.js",
-          "@remotion/player": "/_canvas-runtime/@remotion_player.js",
-          "@remotion/transitions": "/_canvas-runtime/@remotion_transitions.js",
-          "@remotion/transitions/fade": "/_canvas-runtime/@remotion_transitions_fade.js",
-          "@remotion/transitions/slide": "/_canvas-runtime/@remotion_transitions_slide.js",
-          "@remotion/transitions/wipe": "/_canvas-runtime/@remotion_transitions_wipe.js",
-          "@remotion/transitions/flip": "/_canvas-runtime/@remotion_transitions_flip.js",
-          "@remotion/transitions/clock-wipe": "/_canvas-runtime/@remotion_transitions_clock-wipe.js",
-          "@remotion/transitions/none": "/_canvas-runtime/@remotion_transitions_none.js"
+          "react": "./_canvas-runtime/react.js",
+          "react-dom": "./_canvas-runtime/react-dom.js",
+          "react-dom/client": "./_canvas-runtime/react-dom_client.js",
+          "react/jsx-runtime": "./_canvas-runtime/react_jsx-runtime.js",
+          "react/jsx-dev-runtime": "./_canvas-runtime/react_jsx-dev-runtime.js",
+          "pixi.js": "./_canvas-runtime/pixi-js.js",
+          "@imgly/background-removal": "./_canvas-runtime/@imgly_background-removal.js",
+          "motion": "./_canvas-runtime/motion.js",
+          "motion/react": "./_canvas-runtime/motion_react.js",
+          "yjs": "./_canvas-runtime/yjs.js",
+          "y-protocols/sync": "./_canvas-runtime/y-protocols_sync.js",
+          "y-protocols/awareness": "./_canvas-runtime/y-protocols_awareness.js",
+          "lib0/decoding": "./_canvas-runtime/lib0_decoding.js",
+          "lib0/encoding": "./_canvas-runtime/lib0_encoding.js",
+          "remotion": "./_canvas-runtime/remotion.js",
+          "@remotion/media": "./_canvas-runtime/@remotion_media.js",
+          "@remotion/player": "./_canvas-runtime/@remotion_player.js",
+          "@remotion/transitions": "./_canvas-runtime/@remotion_transitions.js",
+          "@remotion/transitions/fade": "./_canvas-runtime/@remotion_transitions_fade.js",
+          "@remotion/transitions/slide": "./_canvas-runtime/@remotion_transitions_slide.js",
+          "@remotion/transitions/wipe": "./_canvas-runtime/@remotion_transitions_wipe.js",
+          "@remotion/transitions/flip": "./_canvas-runtime/@remotion_transitions_flip.js",
+          "@remotion/transitions/clock-wipe": "./_canvas-runtime/@remotion_transitions_clock-wipe.js",
+          "@remotion/transitions/none": "./_canvas-runtime/@remotion_transitions_none.js"
         }
       }
     </script>
@@ -190,8 +190,38 @@
       // `git show <sha>:<path>`). Baked into the module URL so both the initial
       // import and the HMR soft-reload carry it.
       const shaParam = params.get('sha');
+      // Cloud Phase 27 (DDR-209) — THE CAPABILITY TRAVELS WITH EVERY REQUEST.
+      //
+      // On a desktop the canvas origin is loopback and needs none, so `cap` is
+      // empty and every URL below is byte-identical to what it has always been.
+      //
+      // In the cloud the canvas origin is a cookieless hostname on the public
+      // internet: a cookie able to reach it would be readable by the canvas
+      // content itself, which is exactly what the DDR-054 split exists to
+      // prevent. So the capability rides in the URL — and it has to ride in
+      // EVERY url, not just this document's, because the shell then fetches its
+      // module, its tokens, its components CSS and its meta as separate
+      // requests. Getting the document through and nothing else is what
+      // "refused to connect" looks like from the outside.
+      const cap = params.get('t') || '';
+      // THE BASE THIS DOCUMENT WAS SERVED FROM, not the origin root.
+      //
+      // The fleet's canvas origin puts the project in the PATH
+      // (`canvas.<zone>/<project>/…`), so an absolute `/…` URL built here
+      // resolves against the origin and loses the project — the browser then
+      // asks for `canvas.<zone>/.design/…`, the data plane reads `.design` as a
+      // project name, and every dynamic import fails. Derived from where this
+      // document actually is rather than passed in, so it is right by
+      // construction in all three shells: on a desktop the shell is served at
+      // `/_canvas-shell.html` and the base is empty, leaving every URL below
+      // byte-identical to what it has always been.
+      const base = location.pathname.replace(/\/_canvas-shell(\.html)?$/, '');
+      const withCap = (u) => {
+        const abs = u.startsWith('/') ? base + u : u;
+        return cap ? abs + (abs.includes('?') ? '&' : '?') + 't=' + encodeURIComponent(cap) : abs;
+      };
       const canvasQuery = shaParam ? ('?sha=' + encodeURIComponent(shaParam)) : '';
-      const canvasUrl = canvasRel ? ('/' + designRel + '/' + canvasRel + canvasQuery) : null;
+      const canvasUrl = canvasRel ? withCap('/' + designRel + '/' + canvasRel + canvasQuery) : null;
       const myFileKey = canvasRel ? (designRel + '/' + canvasRel) : null;
       // True while an `ai-activity` entry is live for THIS canvas (an agent is
       // running /design:edit|new on it). Mirrors ai-banner's gate: parent relays
@@ -274,7 +304,11 @@
       // The WS connection retries on close (dev-server restart resilience).
       function connectHmr() {
         const proto = location.protocol === 'https:' ? 'wss' : 'ws';
-        const ws = new WebSocket(proto + '://' + location.host + '/_ws');
+        // `base` for the same reason every other URL here carries it: on the
+        // fleet's canvas origin the project is in the path. (A cell's HMR socket
+        // is a separate matter — it has no cookie to authenticate with, so it
+        // simply does not connect there; a canvas still renders.)
+        const ws = new WebSocket(proto + '://' + location.host + base + '/_ws');
         ws.addEventListener('message', (ev) => {
           try {
             const msg = JSON.parse(ev.data);
@@ -417,7 +451,7 @@
               // listens for `maude:meta-refreshed` and re-applies layout +
               // viewport in-place (no full reload — preserves tool / undo state).
               const metaFileParam = encodeURIComponent(designRel + '/' + canvasRel);
-              fetch('/_api/canvas-meta?file=' + metaFileParam, {
+              fetch(withCap('/_api/canvas-meta?file=' + metaFileParam), {
                 headers: { 'Cache-Control': 'no-store' },
               })
                 .then((r) => (r.ok ? r.json() : null))
@@ -444,13 +478,13 @@
       if (!canvasRel) {
         showError('Missing ?canvas= query parameter. Add ?canvas=ui/<slug>.tsx.');
       } else {
-        if (tokensRel) document.getElementById('canvas-tokens').href = '/' + designRel + '/' + tokensRel;
-        if (componentsRel) document.getElementById('canvas-components').href = '/' + designRel + '/' + componentsRel;
+        if (tokensRel) document.getElementById('canvas-tokens').href = withCap('/' + designRel + '/' + tokensRel);
+        if (componentsRel) document.getElementById('canvas-components').href = withCap('/' + designRel + '/' + componentsRel);
         if (layoutRel) {
           // Inject a third <link> for the DS layout chrome (specimens load this).
           const layoutLink = document.createElement('link');
           layoutLink.rel = 'stylesheet';
-          layoutLink.href = '/' + designRel + '/' + layoutRel;
+          layoutLink.href = withCap('/' + designRel + '/' + layoutRel);
           layoutLink.dataset.canvasCss = 'layout';
           document.head.appendChild(layoutLink);
         }
@@ -466,7 +500,7 @@
         // server-side api.fileSlug (which trims paths.designRel).
         window.__canvas_design_rel__ = designRel;
         window.__canvas_rel__ = canvasRel;
-        const metaFetch = fetch('/_api/canvas-meta?file=' + metaFileParam, {
+        const metaFetch = fetch(withCap('/_api/canvas-meta?file=' + metaFileParam), {
           headers: { 'Cache-Control': 'no-store' },
         })
           .then((r) => (r.ok ? r.json() : null))
@@ -484,7 +518,7 @@
           // the importmap so the canvas module and the comment layer share one
           // React singleton (inlining a second React would break hooks).
           const [{ mountCanvas }, mod] = await Promise.all([
-            import('/_client/comment-mount.js'),
+            import(withCap('/_client/comment-mount.js')),
             import(canvasUrl),
             metaFetch,
           ]);

package/plugins/flow/.claude-plugin/config.schema.json

@@ -324,7 +324,7 @@
         },
         "engineVersion": {
           "type": "string",
-          "default": "v0.1.9",
+          "default": "v1.0.0",
           "description": "PINNED kgai release the CLI + desktop bundle target. Advance deliberately (harness-verified via `maude kg check-upstream`), never float — auto-tracking `latest` would let an upstream change silently alter behavior mid-rollout and is a supply-chain surface (DDR-054/056 reasoning: the bundled `kg` is third-party)."
         },
         "store": {

package/plugins/flow/dependencies.json

@@ -105,7 +105,7 @@
       },
       "install": {
         "preferred": "See docs/kgai-onboarding.md — download the pinned kgai release binary (kgai is capability-gated + opt-out; nothing to install to use classic .ai/ mode)",
-        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v0.1.9/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
+        "darwin": "curl -fsSL https://github.com/kgaidev/kgai/releases/download/v1.0.0/kg-darwin-arm64 -o /usr/local/bin/kg && chmod +x /usr/local/bin/kg"
       },
       "autoInstall": false,
       "fallbackBehavior": "flow/design fall back to the classic .ai/decisions/ + STATE.md file path (no regression). The kgai knowledge-graph backend (kg context/ingest/sync, cross-repo company memory) is inactive.",