@1agh/maude 0.58.2 → 0.59.0

package/cli/lib/figma-import-controls.test.mjs

@@ -0,0 +1,70 @@
+// DDR-216 D7 + D8 existence guard — the anti-recurrence test.
+//
+// This repo has now written the same mistake into three consecutive decision
+// records: a DDR asserts a control, nobody builds it, and the NEXT DDR cites it
+// as an existing mitigation. DDR-216 D7 promised `/design:edit` a pre-flight
+// untrusted-content banner on an imported canvas; D8 promised Pass A.10 run
+// promoted-to-blocker for `imported-figma`. Both were "shipped" in prose. When
+// DDR-219 leaned on the A.10 promotion as a control that was "still enforced,
+// unchanged", the design-stage review ran one command —
+//
+//     grep -rn "imported-figma" plugins/     →  zero matches
+//
+// — and the whole chain came apart. A decision record cannot assert its way to a
+// control. This test is the cheapest possible thing that would have caught it,
+// and it is deliberately dumb: it checks the string is REACHABLE from the files
+// that must act on it, not that the behaviour is correct.
+
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { test } from 'node:test';
+
+const root = new URL('../../', import.meta.url).pathname;
+const read = (p) => readFileSync(root + p, 'utf8');
+
+test('DDR-216 D7 — /design:edit banners an imported canvas before reading it', () => {
+  const edit = read('plugins/design/commands/edit.md');
+  assert.match(
+    edit,
+    /imported-figma/,
+    "/design:edit must detect an `imported-figma` canvas at pre-flight (DDR-216 D7). Without it, several hundred third-party strings enter a tool-holding agent's context with nothing saying what they are."
+  );
+  assert.match(
+    edit,
+    /untrusted content, never instructions/i,
+    "The banner must say the content is untrusted and is never instructions — that exact framing is the control (DDR-216 D7, DDR-085's whiteboard trust model)."
+  );
+});
+
+test('DDR-216 D8 — Pass A.10 is promoted to blocker on an imported canvas', () => {
+  const keeper = read('plugins/design/agents/design-system-keeper.md');
+  const a10 = keeper.slice(keeper.indexOf('## Pass A.10'));
+  assert.notEqual(a10, '', 'Pass A.10 section is missing from design-system-keeper.');
+  assert.match(
+    a10,
+    /imported-figma/,
+    'Pass A.10 must special-case `imported-figma` (DDR-216 D8). As a plain warning it is not a gate.'
+  );
+  assert.match(
+    a10,
+    /blocker/i,
+    'A.10 findings must be blockers on an imported canvas — the mass-drift stacking ladder exists to avoid nagging a human over one deliberate overlay, and that reasoning does not survive a machine-authored file.'
+  );
+});
+
+test('A.10 does not let an imported canvas skip via its declared kind', () => {
+  // The skip condition is "no kind=\"web\" artboard" — and on an import the
+  // TRANSLATOR picks the kind, so the gate would be satisfied by the very code
+  // it audits. DDR-216 D8's Round-1 correction named this; the exception closes it.
+  const keeper = read('plugins/design/agents/design-system-keeper.md');
+  const a10 = keeper.slice(keeper.indexOf('## Pass A.10'), keeper.indexOf('## Pass B'));
+  const skipIdx = a10.indexOf('Skip entirely');
+  assert.ok(skipIdx > -1, 'A.10 skip condition not found — did the section change shape?');
+  assert.match(
+    a10.slice(skipIdx, skipIdx + 1200),
+    // `[\s\S]` rather than `[^]` — same "any char incl. newline" meaning, but
+    // `[^]` is a negated EMPTY class, which biome flags and which reads as a typo.
+    /EXCEPTION[\s\S]*imported-figma/,
+    'The skip condition must carry an explicit imported-canvas exception, stated next to the skip itself where a reader will actually meet it.'
+  );
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.58.2",
+  "version": "0.59.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -54,13 +54,13 @@
     "test:e2e:desktop:parity:cloud": "pnpm --filter @maude/desktop-e2e e2e:parity:cloud"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.58.2",
-    "@1agh/maude-darwin-x64": "0.58.2",
-    "@1agh/maude-linux-arm64": "0.58.2",
-    "@1agh/maude-linux-arm64-musl": "0.58.2",
-    "@1agh/maude-linux-x64": "0.58.2",
-    "@1agh/maude-linux-x64-musl": "0.58.2",
-    "@1agh/maude-win32-x64": "0.58.2"
+    "@1agh/maude-darwin-arm64": "0.59.0",
+    "@1agh/maude-darwin-x64": "0.59.0",
+    "@1agh/maude-linux-arm64": "0.59.0",
+    "@1agh/maude-linux-arm64-musl": "0.59.0",
+    "@1agh/maude-linux-x64": "0.59.0",
+    "@1agh/maude-linux-x64-musl": "0.59.0",
+    "@1agh/maude-win32-x64": "0.59.0"
   },
   "files": [
     "cli",

package/plugins/flow/.claude-plugin/config.schema.json

@@ -314,7 +314,7 @@
           "type": "string",
           "enum": ["auto", "on", "off"],
           "default": "auto",
-          "description": "Opt-out default `auto` (absent block == `auto`). `auto` = active only when `kg` is on PATH AND (`store` is set OR a local `.kgai/store` exists) — conservative, mirrors `orchestration.mode:auto`; a first-run repo stays on files until the user opts in via onboarding. `on` = force kgai active (errors surface rather than silently falling back). `off` = disable entirely; today's classic `.ai/decisions/` + STATE.md path, byte-for-byte unchanged."
+          "description": "Opt-out default `auto` (absent block == `auto`). `auto` = active only when `kg` is on PATH AND a store resolves (`kg config` store_root via an approved committed `.kgairc`, this `store` value, or a legacy local `.kgai/store`) — conservative, mirrors `orchestration.mode:auto`; a first-run repo stays on files until the user opts in via onboarding. An unapproved `.kgairc` (`kg config` → pending_approval) counts as NOT resolved until a human runs `kg trust`. `on` = force kgai active (errors surface rather than silently falling back). `off` = disable entirely; today's classic `.ai/decisions/` + STATE.md path, byte-for-byte unchanged."
         },
         "engine": {
           "type": "string",
@@ -325,12 +325,12 @@
         "engineVersion": {
           "type": "string",
           "default": "v1.0.0",
-          "description": "PINNED kgai release the CLI + desktop bundle target. Advance deliberately (harness-verified via `maude kg check-upstream`), never float — auto-tracking `latest` would let an upstream change silently alter behavior mid-rollout and is a supply-chain surface (DDR-054/056 reasoning: the bundled `kg` is third-party)."
+          "description": "MINIMUM kgai release the integration targets (a floor, not a pin — the engine installs via the official installer, which self-updates at SessionStart; the manual pinned-download flow is retired). Must be at least `v1.5.1` — the `.kgairc` three-layer config + `kg config`/`kg prompt`/`kg trust` surface. Verify with `kg version`; drift check via `maude kg check-upstream`."
         },
         "store": {
           "type": "string",
           "default": "",
-          "description": "Remote store the graph syncs to. `s3://company-kg/store` (shared company remote, cross-repo) | `kgai://org/project` (cloud-broker keyspace) | git remote | `\"\"` = local-only `.kgai/store`. Empty string keeps everything on this machine."
+          "description": "Fallback/override store for the `maude kg` verbs. Since kgai v1.5.1 store resolution is primarily the ENGINE's job: a repo with an approved committed `.kgairc` resolves its store via `kg config` (typically a shared parent-folder store like `../.kgai-shared`), and that wins — this value is consulted only when `kg config` yields no store (legacy per-repo setups). The sync remote is set per-STORE with `kg remote` (session layer), never here and never via `kg remote --global`."
         },
         "scope": {
           "type": "object",