@1agh/maude 1.3.1 → 1.4.1

package/apps/studio/ws.ts

@@ -36,6 +36,9 @@ export type WsData =
        *  a desktop, which is what makes every broadcast below reach everybody
        *  exactly as it always did. */
       session: string;
+      /** WHO opened this socket, as the proxy vouched it — Cloud Phase 27.
+       *  `''` on a desktop, where the project's git identity is the person. */
+      user?: string;
     }
   | {
       id: string;
@@ -446,8 +449,12 @@ export function createWs(
         else if (msg.type === 'tabs' && Array.isArray(msg.tabs)) inspect.setOpenTabs(msg.tabs);
         else if (msg.type === 'select' && msg.selection) inspect.setSelected(msg.selection);
         else if (msg.type === 'clear-select') inspect.setSelected(null);
-        else if (msg.type === 'comments-add' && msg.payload) await api.commentsAdd(msg.payload);
-        else if (msg.type === 'comments-patch' && msg.id)
+        else if (msg.type === 'comments-add' && msg.payload) {
+          // In a cell the author is the vouched member, never a claim in the
+          // frame and never the cell's own git identity (the machine).
+          const vouched = ws.data.kind === 'inspector' ? ws.data.user : '';
+          await api.commentsAdd(vouched ? { ...msg.payload, author: vouched } : msg.payload);
+        } else if (msg.type === 'comments-patch' && msg.id)
           await api.commentsPatch(msg.id, msg.patch || {});
         else if (msg.type === 'comments-delete' && msg.id) await api.commentsDelete(msg.id);
         else if (msg.type === 'comments-request' && typeof msg.file === 'string') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "1.3.1",
+  "version": "1.4.1",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -29,7 +29,8 @@
     "test:e2e:desktop:git": "pnpm --filter @maude/desktop-e2e e2e:git",
     "build": "pnpm -r --if-present --filter '!@maude/desktop' '!@maude/desktop-e2e' run build",
     "build:binary": "bun run apps/studio/build.ts --release",
-    "test": "node --test --test-reporter=spec cli/**/*.test.mjs && pnpm --filter @maude/hub test",
+    "test": "node --test --test-reporter=spec cli/**/*.test.mjs && pnpm --filter @maude/hub test && pnpm run test:harness",
+    "test:harness": "node --test $(find scripts/dev/sync-e2e -maxdepth 1 -name 'surface-*.test.mjs' ! -name 'surface-source-audit.test.mjs') && bun test scripts/dev/sync-e2e/surface-source-audit.test.mjs",
     "test:dev-server": "cd apps/studio && bun test --timeout 20000",
     "lint": "biome check .",
     "format": "biome format --write .",
@@ -53,16 +54,17 @@
     "test:e2e:desktop:parity": "pnpm --filter @maude/desktop-e2e e2e:parity",
     "test:e2e:desktop:sidecar-respawn": "pnpm --filter @maude/desktop-e2e e2e:sidecar-respawn",
     "test:e2e:desktop:team-project": "pnpm --filter @maude/desktop-e2e e2e:team-project",
+    "test:e2e:desktop:s20": "pnpm --filter @maude/desktop-e2e e2e:s20",
     "test:e2e:desktop:parity:cloud": "pnpm --filter @maude/desktop-e2e e2e:parity:cloud"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "1.3.1",
-    "@1agh/maude-darwin-x64": "1.3.1",
-    "@1agh/maude-linux-arm64": "1.3.1",
-    "@1agh/maude-linux-arm64-musl": "1.3.1",
-    "@1agh/maude-linux-x64": "1.3.1",
-    "@1agh/maude-linux-x64-musl": "1.3.1",
-    "@1agh/maude-win32-x64": "1.3.1"
+    "@1agh/maude-darwin-arm64": "1.4.1",
+    "@1agh/maude-darwin-x64": "1.4.1",
+    "@1agh/maude-linux-arm64": "1.4.1",
+    "@1agh/maude-linux-arm64-musl": "1.4.1",
+    "@1agh/maude-linux-x64": "1.4.1",
+    "@1agh/maude-linux-x64-musl": "1.4.1",
+    "@1agh/maude-win32-x64": "1.4.1"
   },
   "files": [
     "cli",

package/plugins/flow/.claude-plugin/config.schema.json

@@ -475,7 +475,7 @@
         "tracker": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Issue / task tracker. Used by /flow:done, /flow:bug-rca, /flow:bug-fix to optionally create or update tickets.",
+          "description": "Issue / task tracker. Used by /flow:done, /flow:bug-rca, /flow:bug-fix and /flow:status to optionally read, create or update tickets. `orbit` additionally routes /flow:plan (find or create the task), /flow:execute (working-state reports) and /flow:done (close-time artifact push, warn-only) through the `orbit-backend` skill.",
           "properties": {
             "provider": {
               "type": "string",
@@ -487,13 +487,26 @@
                 "notion",
                 "asana",
                 "shortcut",
+                "orbit",
                 "none"
               ],
               "default": "none"
             },
             "mcp": {
               "type": "string",
-              "description": "MCP tool name prefix used to call the provider (e.g. `mcp__claude_ai_ClickUp`, `mcp__github`). Generic commands resolve tool names by appending the operation (`<mcp>_<op>`). Omit if no MCP server is configured — commands will print payloads for manual handling."
+              "description": "MCP tool name prefix used to call the provider (e.g. `mcp__claude_ai_ClickUp`, `mcp__github`, `mcp__orbit`). Generic commands resolve tool names by appending the operation (`<mcp>_<op>`). Omit if no MCP server is configured — commands will print payloads for manual handling."
+            },
+            "baseUrl": {
+              "type": "string",
+              "format": "uri",
+              "pattern": "^https?://",
+              "description": "Base URL of a self-hosted tracker instance — used by `provider: orbit` (e.g. `https://orbit.example.com`); other providers ignore it. A committed pointer, never a secret: it names the MCP endpoint the project's `.mcp.json` entry targets (`<baseUrl>/api/mcp`) and the task links (`<baseUrl>/t/ORB-123`)."
+            },
+            "tokenEnv": {
+              "type": "string",
+              "pattern": "^[A-Z_][A-Z0-9_]*$",
+              "default": "ORBIT_MCP_TOKEN",
+              "description": "Name of the environment variable holding the per-machine bearer token for the tracker's MCP server — used by `provider: orbit`; other providers ignore it. Only the variable NAME is stored here; the token lives in the user's environment and `.mcp.json` references it as `${<tokenEnv>}`. Flow commands check whether it is set — they never read, print or write its value."
             },
             "defaults": {
               "type": "object",

package/plugins/flow/README.md

@@ -40,6 +40,6 @@ For the full catalog (group definitions, member descriptions, rename history), s
 
 ## Skills
 
-`workflow-state`, `ddr-keeper`, `scenario`, `agent-browser`, `agent-device`, `codebase-intelligence`, `a11y-checker`, `question-protocol`, `make-skill-template`, `claude-md-keeper`, `debugging-rules`, `a11y-rules`, `motion-rules`, `responsive-rules`, `testing-rules`, `skill-loader`.
+`workflow-state`, `ddr-keeper`, `scenario`, `agent-browser`, `agent-device`, `codebase-intelligence`, `a11y-checker`, `question-protocol`, `make-skill-template`, `claude-md-keeper`, `debugging-rules`, `a11y-rules`, `motion-rules`, `responsive-rules`, `testing-rules`, `skill-loader`, `orbit-backend` (the `orbit` tracker provider's contract).
 
 See [`skills/`](./skills/) for the full list and per-skill SKILL.md files.