@bridge-ds/mcp 0.8.4 → 0.9.0

package/dist/{chunk-PMZGEZGX.js → chunk-ZVORAO5H.js}

@@ -171,7 +171,7 @@ function resolveBranchPreviews(apps, ctx, sources = {}) {
   }
   return out;
 }
-var previewsSettled = (previews) => previews.every((p) => !!p.url && (p.state === "ready" || p.state === "failed"));
+var previewsSettled = (previews) => previews.every((p) => p.state === "failed" || !!p.url && p.state === "ready");
 
 // ../core/src/teams.ts
 var LOGIN = /^[A-Za-z0-9](?:[A-Za-z0-9]|-(?=[A-Za-z0-9])){0,38}$/;
@@ -578,6 +578,12 @@ var CONFIG_FILE = "bridge.config.json";
 var CHANGES_MODES = ["suggest", "direct"];
 var DEFAULT_CHANGES_MODE = "suggest";
 var DEFAULT_OVERRIDE = { allowed: [], requireReason: true, minReasonLength: 20 };
+var TEAM_NAME_MAX = 60;
+function teamName(value) {
+  if (typeof value !== "string") return void 0;
+  const v = value.trim().replace(/\s+/g, " ");
+  return v && v.length <= TEAM_NAME_MAX ? v : void 0;
+}
 var DEFAULT_TOKEN_PATHS = {
   root: "tokens",
   primitives: "primitives",
@@ -683,6 +689,7 @@ function defineConfig(input) {
   const g = input.governance ?? {};
   const contrastFile = contrastPath ?? [root === "." ? "" : root, paths.contrastChecks].filter(Boolean).join("/");
   return {
+    ...teamName(input.name) ? { name: teamName(input.name) } : {},
     repo: parseRepoInput(input.repo, input.branch),
     tokens: { ...paths, include: input.tokens?.include ?? ["**/*.tokens.json"], exclude: input.tokens?.exclude ?? [], tiers, layers, ...t.usage ? { usage: trimSlashes(t.usage) } : {} },
     axes,
@@ -721,6 +728,7 @@ function defineConfig(input) {
     changes: input.changes === "direct" ? "direct" : DEFAULT_CHANGES_MODE,
     ...input.storybook?.url ? { storybook: { url: input.storybook.url.trim().replace(/\/+$/, "") } } : {},
     ...input.library?.public === true ? { library: { public: true } } : {},
+    ...input.demo?.viewer?.trim() ? { demo: { viewer: input.demo.viewer.trim(), ...input.demo.role?.trim() ? { role: input.demo.role.trim() } : {} } } : {},
     ...input.audit ? { audit: { ...input.audit } } : {},
     ...input.visualImpact ? { visualImpact: { mode: input.visualImpact.mode === "on-demand" ? "on-demand" : "auto" } } : {},
     ...input.integrations ? { integrations: { ...input.integrations } } : {},
@@ -845,6 +853,7 @@ function loadConfig(source) {
     }
   }
   problems.push(...visualImpactProblems(d.visualImpact));
+  if (d.name !== void 0 && teamName(d.name) === void 0) problems.push(`"name" must be the team's name, 1 to ${TEAM_NAME_MAX} characters`);
   if (d.changes !== void 0 && !CHANGES_MODES.includes(d.changes)) problems.push(`"changes" must be "suggest" or "direct" (got ${JSON.stringify(d.changes)})`);
   const sb = d.storybook;
   if (sb !== void 0) {
@@ -860,6 +869,14 @@ function loadConfig(source) {
       for (const k of Object.keys(lib)) if (k !== "public") problems.push(`"library.${k}" is not a known key`);
     }
   }
+  const demo = d.demo;
+  if (demo !== void 0) {
+    if (!isObj(demo) || !isStr(demo.viewer) || !demo.viewer.trim()) problems.push('"demo" must be { "viewer" }, for example { "viewer": "Dana", "role": "DS lead" }');
+    else {
+      if (demo.role !== void 0 && !isStr(demo.role)) problems.push('"demo.role" must be a string, for example "DS lead"');
+      for (const k of Object.keys(demo)) if (k !== "viewer" && k !== "role") problems.push(`"demo.${k}" is not a known key`);
+    }
+  }
   problems.push(...productProblems(d.products));
   const audit = d.audit;
   if (audit !== void 0) {
@@ -897,6 +914,7 @@ function toConfigJson(config, schema = "./packages/core/bridge.config.schema.jso
   return {
     $schema: schema,
     version: 1,
+    ...config.name ? { name: config.name } : {},
     ...config.repo ? { repo: config.repo } : {},
     tokens: { root: config.tokens.root, include: config.tokens.include, ...config.tokens.exclude.length ? { exclude: config.tokens.exclude } : {}, tiers: config.tokens.tiers, layers: config.tokens.layers.map((l) => l.optional ? l : { files: l.files }), ...config.tokens.usage ? { usage: config.tokens.usage } : {} },
     modes: Object.fromEntries(Object.entries(config.axes).map(([k, a]) => [k, a.parity ? a : { values: a.values, default: a.default }])),
@@ -912,6 +930,7 @@ function toConfigJson(config, schema = "./packages/core/bridge.config.schema.jso
     changes: changesMode(config),
     ...config.storybook ? { storybook: config.storybook } : {},
     ...config.library ? { library: config.library } : {},
+    ...config.demo ? { demo: config.demo } : {},
     ...config.products && !sameProducts(config.products, DEFAULT_PRODUCTS) ? { products: config.products } : {}
   };
 }
@@ -1052,6 +1071,164 @@ function parseContrastChecks(text) {
   return out;
 }
 
+// ../core/src/scopes.ts
+var has = (segments, ...names) => names.some((n) => segments.includes(n));
+function defaultScopes(path, type, tier) {
+  const s = path.split(".");
+  switch (type) {
+    case "color":
+      if (tier === "primitive" || tier === "brand" && s[0] === "palette") return [];
+      if (has(s, "text")) return ["TEXT_FILL"];
+      if (has(s, "border", "ring", "outline")) return ["STROKE_COLOR"];
+      if (has(s, "bg", "surface", "background")) return ["FRAME_FILL", "SHAPE_FILL"];
+      if (has(s, "shadow")) return ["EFFECT_COLOR"];
+      return ["FRAME_FILL", "SHAPE_FILL", "TEXT_FILL", "STROKE_COLOR"];
+    case "dimension":
+      if (has(s, "radius")) return ["CORNER_RADIUS"];
+      if (has(s, "border", "width", "stroke")) return ["STROKE_FLOAT"];
+      if (has(s, "space", "spacing", "gap")) return ["GAP", "WIDTH_HEIGHT"];
+      if (has(s, "size") && has(s, "font")) return ["FONT_SIZE"];
+      if (has(s, "letter-spacing")) return ["LETTER_SPACING"];
+      return ["WIDTH_HEIGHT", "GAP"];
+    case "fontWeight":
+      return ["FONT_WEIGHT"];
+    case "fontFamily":
+      return ["FONT_FAMILY"];
+    case "number":
+      if (has(s, "line-height", "lineHeight")) return ["LINE_HEIGHT"];
+      if (has(s, "opacity")) return ["OPACITY"];
+      return ["WIDTH_HEIGHT", "GAP"];
+    case "string":
+      return ["TEXT_CONTENT"];
+    default:
+      return [];
+  }
+}
+var sameScopes = (a, b) => {
+  const sa = [...new Set(a)].sort();
+  const sb = [...new Set(b)].sort();
+  return sa.length === sb.length && sa.every((x, i) => x === sb[i]);
+};
+var effectiveScopes = (t) => t.scopes ?? defaultScopes(t.path, t.type, t.tier);
+
+// ../core/src/diff-engine.ts
+var normDesc = (d) => (d ?? "").trim();
+function fieldChanges(a, b) {
+  const out = [];
+  if (a.path !== b.path) out.push({ field: "path", before: a.path, after: b.path });
+  if (a.type !== b.type) out.push({ field: "type", before: a.type, after: b.type });
+  const modes = [.../* @__PURE__ */ new Set([...Object.keys(a.values), ...Object.keys(b.values)])];
+  for (const mode of modes) {
+    if (!valuesEqual(b.type, a.values[mode], b.values[mode])) out.push({ field: "value", mode, before: a.values[mode], after: b.values[mode] });
+  }
+  if (normDesc(a.description) !== normDesc(b.description)) out.push({ field: "description", before: a.description, after: b.description });
+  const sa = effectiveScopes(a);
+  const sb = effectiveScopes(b);
+  if (!sameScopes(sa, sb)) out.push({ field: "scopes", before: sa, after: sb });
+  return out;
+}
+function sameToken(a, b) {
+  if (!a || !b) return a === b;
+  return fieldChanges(a, b).length === 0;
+}
+function sideChange(from, to) {
+  if (!from && !to) return void 0;
+  if (!from) return { kind: "added", fields: [] };
+  if (!to) return { kind: "removed", fields: [] };
+  const fields = fieldChanges(from, to);
+  if (!fields.length) return void 0;
+  return { kind: fields.some((f) => f.field === "path") ? "renamed" : "changed", fields };
+}
+function threeWayDiff(base, figma, head) {
+  const ids = /* @__PURE__ */ new Set([...base?.keys() ?? [], ...figma.keys(), ...head.keys()]);
+  const result = { local: [], remote: [], conflicts: [], unchanged: 0 };
+  for (const id of [...ids].sort()) {
+    const b = base?.get(id);
+    const f = figma.get(id);
+    const h = head.get(id);
+    const local = sideChange(b, f);
+    const remote = sideChange(b, h);
+    if (!local && !remote || f && h && sameToken(f, h) || !f && !h) {
+      result.unchanged++;
+      continue;
+    }
+    const entry = { id, path: (f ?? h ?? b).path, base: b, figma: f, head: h, local, remote, conflict: false };
+    if (local && !remote) {
+      entry.path = (f ?? b).path;
+      result.local.push(entry);
+    } else if (remote && !local) {
+      entry.path = (h ?? b).path;
+      result.remote.push(entry);
+    } else {
+      entry.conflict = true;
+      result.conflicts.push(entry);
+    }
+  }
+  const byPath = (a, b) => a.path.localeCompare(b.path);
+  result.local.sort(byPath);
+  result.remote.sort(byPath);
+  result.conflicts.sort(byPath);
+  return result;
+}
+
+// ../core/src/risk.ts
+var RISK_LABELS = {
+  1: "Tier 1: low risk, one code owner",
+  2: "Tier 2: medium risk, design review then design + tech approval",
+  3: "Tier 3: token change, needs design + tech approval"
+};
+function figmaPushTierLabel(tier, changes) {
+  const waits = changes.some((c) => c.kind === "renamed" || c.kind === "removed");
+  return `Tier ${tier}: token change. From Figma: design-approved, ${waits ? "waits for a developer OK (a token renamed or removed can break product code)" : "ships once the checks pass"}`;
+}
+var figmaPushNextLine = (changes) => changes.some((c) => c.kind === "renamed" || c.kind === "removed") ? "Pushed from Figma, so design-approved. A developer OKs the rename or removal before it merges." : "Pushed from Figma, so design-approved. Bridge merges it once the automatic checks pass; Undo is in History in Bridge Studio.";
+var BUMP_RANK = { patch: 0, minor: 1, major: 2 };
+var LOW = [/\.md$/, /^docs\//, /\.stories\.tsx?$/, /\.docs\.json$/, /\.test\.tsx?$/, /^\.changeset\//];
+var isSummary = (c) => "kind" in c;
+function summarizeTokenChange(c) {
+  if (isSummary(c)) return c;
+  const path = (c.target ?? c.current).path;
+  if (!c.target) return { kind: "removed", path };
+  if (!c.current) return { kind: "added", path };
+  if (c.current.path !== c.target.path) return { kind: "renamed", path };
+  const fields = fieldChanges(c.current, c.target);
+  return { kind: "changed", path, descriptionOnly: fields.length > 0 && fields.every((f) => f.field === "description") };
+}
+function tokenBump(changes) {
+  let bump;
+  for (const c of changes.map(summarizeTokenChange)) {
+    const b = c.kind === "removed" || c.kind === "renamed" ? "major" : c.kind === "changed" && c.descriptionOnly ? "patch" : "minor";
+    if (!bump || BUMP_RANK[b] > BUMP_RANK[bump]) bump = b;
+  }
+  return bump;
+}
+function isGuardrail(path, config) {
+  const list2 = config ? [...config.governance.guardrails, CONFIG_FILE, ...config.contrast ? [config.contrast.path] : []] : DEFAULT_GOVERNANCE.guardrails;
+  return list2.some((g) => g.endsWith("/") ? path.startsWith(g) : path === g) || path.startsWith(".github/") || path.endsWith("/contrast.checks.json") || path === "contrast.checks.json";
+}
+function classifyRisk(input) {
+  const reasons = [];
+  const tokenChanges = (input.tokenChanges ?? []).map(summarizeTokenChange);
+  for (const c of tokenChanges) {
+    if (c.kind === "changed" && c.descriptionOnly) reasons.push({ tier: 1, text: `Token description changed: ${c.path}` });
+    else reasons.push({ tier: 3, text: `Token ${c.kind}: ${c.path}` });
+  }
+  const bump = tokenBump(tokenChanges);
+  const componentsDir = input.config?.components?.dir;
+  for (const f of input.files ?? []) {
+    const p = f.path.replace(/^\/+/, "");
+    if (p.endsWith(".tokens.json")) {
+      if (!input.tokenChanges) reasons.push({ tier: 3, text: `Token file ${f.status ?? "changed"}: ${p}` });
+    } else if (isGuardrail(p, input.config)) reasons.push({ tier: 3, text: `Guardrail file changed: ${p}` });
+    else if (LOW.some((r) => r.test(p))) reasons.push({ tier: 1, text: `Docs, story or test: ${p}` });
+    else if (componentsDir && p.startsWith(`${componentsDir}/`)) reasons.push({ tier: 2, text: `Component source ${f.status ?? "changed"}: ${p}` });
+    else reasons.push({ tier: 2, text: `Source file changed: ${p}` });
+  }
+  reasons.sort((a, b) => b.tier - a.tier);
+  const tier = reasons[0]?.tier ?? 1;
+  return { tier, label: RISK_LABELS[tier], reasons: reasons.map((r) => r.text), bump };
+}
+
 // ../core/src/layered.ts
 var DTCG_TYPES = /* @__PURE__ */ new Set(["color", "dimension", "fontFamily", "fontWeight", "duration", "cubicBezier", "number", "strokeStyle", "border", "transition", "shadow", "gradient", "typography", "fontStyle", "string", "boolean"]);
 var aliasOf = (v) => isAlias(v) ? aliasTarget(v) : null;
@@ -1419,159 +1596,6 @@ function layeredParityIssues(set) {
   return out;
 }
 
-// ../core/src/scopes.ts
-var has = (segments, ...names) => names.some((n) => segments.includes(n));
-function defaultScopes(path, type, tier) {
-  const s = path.split(".");
-  switch (type) {
-    case "color":
-      if (tier === "primitive" || tier === "brand" && s[0] === "palette") return [];
-      if (has(s, "text")) return ["TEXT_FILL"];
-      if (has(s, "border", "ring", "outline")) return ["STROKE_COLOR"];
-      if (has(s, "bg", "surface", "background")) return ["FRAME_FILL", "SHAPE_FILL"];
-      if (has(s, "shadow")) return ["EFFECT_COLOR"];
-      return ["FRAME_FILL", "SHAPE_FILL", "TEXT_FILL", "STROKE_COLOR"];
-    case "dimension":
-      if (has(s, "radius")) return ["CORNER_RADIUS"];
-      if (has(s, "border", "width", "stroke")) return ["STROKE_FLOAT"];
-      if (has(s, "space", "spacing", "gap")) return ["GAP", "WIDTH_HEIGHT"];
-      if (has(s, "size") && has(s, "font")) return ["FONT_SIZE"];
-      if (has(s, "letter-spacing")) return ["LETTER_SPACING"];
-      return ["WIDTH_HEIGHT", "GAP"];
-    case "fontWeight":
-      return ["FONT_WEIGHT"];
-    case "fontFamily":
-      return ["FONT_FAMILY"];
-    case "number":
-      if (has(s, "line-height", "lineHeight")) return ["LINE_HEIGHT"];
-      if (has(s, "opacity")) return ["OPACITY"];
-      return ["WIDTH_HEIGHT", "GAP"];
-    case "string":
-      return ["TEXT_CONTENT"];
-    default:
-      return [];
-  }
-}
-var sameScopes = (a, b) => {
-  const sa = [...new Set(a)].sort();
-  const sb = [...new Set(b)].sort();
-  return sa.length === sb.length && sa.every((x, i) => x === sb[i]);
-};
-var effectiveScopes = (t) => t.scopes ?? defaultScopes(t.path, t.type, t.tier);
-
-// ../core/src/diff-engine.ts
-var normDesc = (d) => (d ?? "").trim();
-function fieldChanges(a, b) {
-  const out = [];
-  if (a.path !== b.path) out.push({ field: "path", before: a.path, after: b.path });
-  if (a.type !== b.type) out.push({ field: "type", before: a.type, after: b.type });
-  const modes = [.../* @__PURE__ */ new Set([...Object.keys(a.values), ...Object.keys(b.values)])];
-  for (const mode of modes) {
-    if (!valuesEqual(b.type, a.values[mode], b.values[mode])) out.push({ field: "value", mode, before: a.values[mode], after: b.values[mode] });
-  }
-  if (normDesc(a.description) !== normDesc(b.description)) out.push({ field: "description", before: a.description, after: b.description });
-  const sa = effectiveScopes(a);
-  const sb = effectiveScopes(b);
-  if (!sameScopes(sa, sb)) out.push({ field: "scopes", before: sa, after: sb });
-  return out;
-}
-function sameToken(a, b) {
-  if (!a || !b) return a === b;
-  return fieldChanges(a, b).length === 0;
-}
-function sideChange(from, to) {
-  if (!from && !to) return void 0;
-  if (!from) return { kind: "added", fields: [] };
-  if (!to) return { kind: "removed", fields: [] };
-  const fields = fieldChanges(from, to);
-  if (!fields.length) return void 0;
-  return { kind: fields.some((f) => f.field === "path") ? "renamed" : "changed", fields };
-}
-function threeWayDiff(base, figma, head) {
-  const ids = /* @__PURE__ */ new Set([...base?.keys() ?? [], ...figma.keys(), ...head.keys()]);
-  const result = { local: [], remote: [], conflicts: [], unchanged: 0 };
-  for (const id of [...ids].sort()) {
-    const b = base?.get(id);
-    const f = figma.get(id);
-    const h = head.get(id);
-    const local = sideChange(b, f);
-    const remote = sideChange(b, h);
-    if (!local && !remote || f && h && sameToken(f, h) || !f && !h) {
-      result.unchanged++;
-      continue;
-    }
-    const entry = { id, path: (f ?? h ?? b).path, base: b, figma: f, head: h, local, remote, conflict: false };
-    if (local && !remote) {
-      entry.path = (f ?? b).path;
-      result.local.push(entry);
-    } else if (remote && !local) {
-      entry.path = (h ?? b).path;
-      result.remote.push(entry);
-    } else {
-      entry.conflict = true;
-      result.conflicts.push(entry);
-    }
-  }
-  const byPath = (a, b) => a.path.localeCompare(b.path);
-  result.local.sort(byPath);
-  result.remote.sort(byPath);
-  result.conflicts.sort(byPath);
-  return result;
-}
-
-// ../core/src/risk.ts
-var RISK_LABELS = {
-  1: "Tier 1: low risk, one code owner",
-  2: "Tier 2: medium risk, design review then design + tech approval",
-  3: "Tier 3: token change, needs design + tech approval"
-};
-var BUMP_RANK = { patch: 0, minor: 1, major: 2 };
-var LOW = [/\.md$/, /^docs\//, /\.stories\.tsx?$/, /\.docs\.json$/, /\.test\.tsx?$/, /^\.changeset\//];
-var isSummary = (c) => "kind" in c;
-function summarizeTokenChange(c) {
-  if (isSummary(c)) return c;
-  const path = (c.target ?? c.current).path;
-  if (!c.target) return { kind: "removed", path };
-  if (!c.current) return { kind: "added", path };
-  if (c.current.path !== c.target.path) return { kind: "renamed", path };
-  const fields = fieldChanges(c.current, c.target);
-  return { kind: "changed", path, descriptionOnly: fields.length > 0 && fields.every((f) => f.field === "description") };
-}
-function tokenBump(changes) {
-  let bump;
-  for (const c of changes.map(summarizeTokenChange)) {
-    const b = c.kind === "removed" || c.kind === "renamed" ? "major" : c.kind === "changed" && c.descriptionOnly ? "patch" : "minor";
-    if (!bump || BUMP_RANK[b] > BUMP_RANK[bump]) bump = b;
-  }
-  return bump;
-}
-function isGuardrail(path, config) {
-  const list2 = config ? [...config.governance.guardrails, CONFIG_FILE, ...config.contrast ? [config.contrast.path] : []] : DEFAULT_GOVERNANCE.guardrails;
-  return list2.some((g) => g.endsWith("/") ? path.startsWith(g) : path === g) || path.startsWith(".github/") || path.endsWith("/contrast.checks.json") || path === "contrast.checks.json";
-}
-function classifyRisk(input) {
-  const reasons = [];
-  const tokenChanges = (input.tokenChanges ?? []).map(summarizeTokenChange);
-  for (const c of tokenChanges) {
-    if (c.kind === "changed" && c.descriptionOnly) reasons.push({ tier: 1, text: `Token description changed: ${c.path}` });
-    else reasons.push({ tier: 3, text: `Token ${c.kind}: ${c.path}` });
-  }
-  const bump = tokenBump(tokenChanges);
-  const componentsDir = input.config?.components?.dir;
-  for (const f of input.files ?? []) {
-    const p = f.path.replace(/^\/+/, "");
-    if (p.endsWith(".tokens.json")) {
-      if (!input.tokenChanges) reasons.push({ tier: 3, text: `Token file ${f.status ?? "changed"}: ${p}` });
-    } else if (isGuardrail(p, input.config)) reasons.push({ tier: 3, text: `Guardrail file changed: ${p}` });
-    else if (LOW.some((r) => r.test(p))) reasons.push({ tier: 1, text: `Docs, story or test: ${p}` });
-    else if (componentsDir && p.startsWith(`${componentsDir}/`)) reasons.push({ tier: 2, text: `Component source ${f.status ?? "changed"}: ${p}` });
-    else reasons.push({ tier: 2, text: `Source file changed: ${p}` });
-  }
-  reasons.sort((a, b) => b.tier - a.tier);
-  const tier = reasons[0]?.tier ?? 1;
-  return { tier, label: RISK_LABELS[tier], reasons: reasons.map((r) => r.text), bump };
-}
-
 // ../core/src/layered-review.ts
 function checkLayeredPair(set, pair, combo) {
   const base = { fg: pair.foreground, bg: pair.background, min: pair.min, modes: comboKey(combo) };
@@ -1703,14 +1727,15 @@ _${deltas.length - limit} more pair(s) not shown._` : "";
 }
 function composeProposalBody(args) {
   const t = args.tier.tier;
-  const box = (n) => `- ${n === t ? "[x]" : "[ ]"} ${RISK_LABELS[n]}`;
+  const figma = Boolean(args.fromFigma);
+  const box = (n) => `- ${n === t ? "[x]" : "[ ]"} ${figma && n === t ? figmaPushTierLabel(n, args.changes) : RISK_LABELS[n]}`;
   const impactList = args.impact.entries.slice(0, 15).map((e) => `- \`${e.path}\`: ${swatch(e.before)} -> ${swatch(e.after)} (${e.modes.length} mode${e.modes.length > 1 ? "s" : ""})`);
   return [
     "## What changed and why",
     "",
     args.summary.trim(),
     "",
-    `Proposed through ${args.tool ?? "Bridge MCP"}${args.author ? ` by ${args.author}` : ""}. Agent-authored: a human design owner and tech owner review and merge.`,
+    figma ? `Pushed from Figma through ${args.tool ?? "the Bridge Figma plugin"}${args.author ? ` by ${args.author}` : ""}. ${figmaPushNextLine(args.changes)}` : `Proposed through ${args.tool ?? "Bridge MCP"}${args.author ? ` by ${args.author}` : ""}. Agent-authored: a human design owner and tech owner review and merge.`,
     "",
     "## Risk tier",
     "",
@@ -1740,8 +1765,8 @@ function composeProposalBody(args) {
     "",
     "## Authored by",
     "",
-    "- [ ] Human",
-    "- [x] AI agent (Claude), reviewed by a human before merge",
+    `- [${figma ? "x" : " "}] Human`,
+    `- [${figma ? " " : "x"}] AI agent (Claude), reviewed by a human before merge`,
     "",
     "## Design review checklist",
     "",
@@ -1755,6 +1780,36 @@ function composeProposalBody(args) {
 // ../core/src/component-spec.ts
 var COMPONENT_SPECS_VERSION = 1;
 var DEFAULT_COMPONENT_SPECS_FILE = "packages/react/component-specs.json";
+var SPEC_FIELDS = [
+  "fill",
+  "stroke",
+  "strokeWeight",
+  "strokeTopWeight",
+  "strokeRightWeight",
+  "strokeBottomWeight",
+  "strokeLeftWeight",
+  "cornerRadius",
+  "paddingTop",
+  "paddingRight",
+  "paddingBottom",
+  "paddingLeft",
+  "itemSpacing",
+  "counterAxisSpacing",
+  "width",
+  "height",
+  "minWidth",
+  "minHeight",
+  "opacity",
+  "shadow",
+  "textFill",
+  "fontFamily",
+  "fontSize",
+  "fontWeight",
+  "lineHeight",
+  "letterSpacing",
+  "textDecoration"
+];
+var COLOR_FIELDS = /* @__PURE__ */ new Set(["fill", "stroke", "textFill"]);
 function coverageSummary(file) {
   const list2 = file.coverage ?? file.components.map((c) => ({ name: c.name, status: "generated" }));
   const generated = list2.filter((c) => c.status === "generated").length;
@@ -1762,6 +1817,18 @@ function coverageSummary(file) {
   const layout = list2.filter((c) => c.status === "layout").length;
   return { generated, drafted, inFigma: generated + drafted, visual: list2.length - layout, layout, total: list2.length, missing: list2.filter((c) => c.status === "unsupported") };
 }
+function specHash(text) {
+  let h = 2166136261;
+  for (let i = 0; i < text.length; i++) {
+    h ^= text.charCodeAt(i);
+    h = Math.imul(h, 16777619);
+  }
+  return (h >>> 0).toString(16).padStart(8, "0");
+}
+function hashSpec(spec) {
+  const { hash: _ignored, example: _example, ...rest } = spec;
+  return specHash(JSON.stringify(rest));
+}
 var variantKeyOf = (props) => Object.keys(props).sort().map((k) => `${k}=${props[k]}`).join(", ") || "Default";
 function parseComponentSpecs(text) {
   let data;
@@ -1805,7 +1872,7 @@ var STATE_PSEUDO = {
 var iconName = (component) => component.replace(/^Icon\//, "");
 var exportName = (name) => name.replace(/[^A-Za-z0-9]+/g, "");
 function planReference(spec, variant, file) {
-  if (spec.view === "popup") return { ok: false, reason: "drawn open in Figma; the code image shows it closed" };
+  if (spec.view === "popup") return planPopup(spec, variant);
   const props = { ...spec.fixed ?? {} };
   let pseudo;
   for (const axis of spec.axes) {
@@ -1834,6 +1901,7 @@ function planReference(spec, variant, file) {
     if (part.swap && swapTo) {
       const slot = file?.slots?.find((s) => s.name === swapTo);
       if (!slot) return { reason: `${swapTo} is not in the specs` };
+      if (slot.kind === "media") return { reason: `Figma shows a media placeholder (${swapTo}); code shows the image it is given, nothing to compare` };
       if (slot.kind !== "text" || !slot.text) return { reason: `Figma shows a placeholder (${swapTo}) that code has no example of` };
       return slot.text.default;
     }
@@ -1885,10 +1953,13 @@ function planReference(spec, variant, file) {
   }
   const example = spec.example;
   const exampleChildren = example?.children?.length ? example.children : void 0;
+  const component = exportName(example?.c ?? (spec.name.includes("/") ? spec.component ?? spec.name : spec.name));
+  const parent = spec.component ? exportName(spec.component) : void 0;
   return {
     ok: true,
     render: {
-      component: exportName(spec.view || spec.fixed || example ? example?.c ?? spec.component ?? spec.name : spec.name),
+      component,
+      ...parent && parent !== component ? { within: parent } : {},
       props: { ...example?.p ?? {}, ...props },
       ...exampleChildren ? { children: exampleChildren } : {},
       ...text !== void 0 && !exampleChildren ? { text } : {},
@@ -1899,6 +1970,28 @@ function planReference(spec, variant, file) {
     }
   };
 }
+function planPopup(spec, variant) {
+  const root = spec.parts.find((p) => !p.parent);
+  const own = {};
+  for (const axis of spec.axes) {
+    const value = variant.props[axis.name];
+    if (!axis.prop || value === void 0) return { ok: false, reason: `${axis.name} has no matching option in code` };
+    own[axis.prop] = value === "true" ? true : value === "false" ? false : value;
+  }
+  const className = /\.module\.css \.([\w-]+)/.exec(root?.source ?? "")?.[1];
+  const component = spec.component ? exportName(spec.component) : void 0;
+  const example = spec.example;
+  if (!component || !example) return { ok: false, reason: "drawn open from no code example: nothing to open in code" };
+  if (!className) return { ok: false, reason: "the popup has no class to find it by in code" };
+  const popup = { className };
+  if (exportName(example.c) === component) {
+    return { ok: true, render: { component, props: { ...example.p ?? {}, ...own, defaultOpen: true }, ...example.children?.length ? { children: example.children } : {}, popup } };
+  }
+  return {
+    ok: true,
+    render: { component, props: { defaultOpen: true }, children: [{ c: `${component}Trigger`, children: ["Open"] }, { ...example, p: { ...example.p ?? {}, ...own } }], popup }
+  };
+}
 function referenceImagePath(component, key) {
   const slug = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
   const file = key.split(",").map((kv) => slug(kv)).filter(Boolean).join("__");
@@ -2053,6 +2146,7 @@ export {
   CONFIG_FILE,
   DEFAULT_OVERRIDE,
   DEFAULT_TOKEN_PATHS,
+  DEFAULT_GOVERNANCE,
   loadConfig,
   tokensPath,
   protectedBranchesOf,
@@ -2067,6 +2161,7 @@ export {
   parseContrastChecks,
   threeWayDiff,
   RISK_LABELS,
+  isGuardrail,
   classifyRisk,
   aliasOf,
   globToRegExp,
@@ -2088,7 +2183,10 @@ export {
   ProtectedBranchError,
   assertSafeBranch,
   DEFAULT_COMPONENT_SPECS_FILE,
+  SPEC_FIELDS,
+  COLOR_FIELDS,
   coverageSummary,
+  hashSpec,
   variantKeyOf,
   parseComponentSpecs,
   figmaCell,

package/dist/components.d.ts

@@ -25,7 +25,9 @@ export declare function parseProps(src: string, name: string): {
     props: PropInfo[];
 } | null;
 export declare function cssVarsUsed(css: string): string[];
-export declare function getComponent(source: RepoSource, config: BridgeConfig, set: TokenSet | null, name: string): Promise<{
+export declare function getComponent(source: RepoSource, config: BridgeConfig, set: TokenSet | null, name: string, ctx?: {
+    surface: 'mcp' | 'cli';
+}): Promise<{
     tokens: {
         notTokens?: string[] | undefined;
         used: string[];

package/dist/context.d.ts

@@ -13,7 +13,22 @@ export interface ContextOptions {
     fetch?: typeof fetch;
     apiUrl?: string;
     rawUrl?: string;
+    /**
+     * Read only: every request that would change something on GitHub (anything but GET and HEAD, and GraphQL
+     * mutations) is refused before it leaves, with this sentence. The CLI sets it when the token is one the person did
+     * not pass for this command (their gh sign-in, used to read).
+     */
+    readOnly?: string;
+    /** Who reads the messages: the MCP server's client (tool names and arguments) or the bridge CLI (commands and flags). */
+    surface?: 'mcp' | 'cli';
+    /** How a person adds a token where Bridge runs, for the rate-limit message. Default: the MCP server's environment. */
+    tokenHint?: string;
 }
+/** Whether a request only reads: GET and HEAD, and GraphQL queries (POST /graphql without a mutation). */
+export declare function isReadRequest(url: string, init?: {
+    method?: string;
+    body?: unknown;
+}): boolean;
 export declare class BridgeContext {
     readonly mode: 'local' | 'remote';
     readonly source: RepoSource;
@@ -38,5 +53,12 @@ export declare class BridgeContext {
      */
     github(): Promise<GitHubClient | null>;
     get canWriteRemote(): boolean;
+    /** Who reads the messages: 'mcp' (tool names and arguments, the default) or 'cli' (commands and flags). */
+    get surface(): 'mcp' | 'cli';
     describe(): string;
+    /**
+     * What Bridge may write here, in one sentence: the same words in bridge_get_config, the server instructions, the
+     * server's start line and (for the CLI) `bridge --help`. Bridge never writes to the default branch.
+     */
+    access(): string;
 }