@geraldmaron/construct 1.2.2 → 1.3.0

package/templates/distribution/construct-brand.typ

@@ -55,13 +55,17 @@
 #let construct-font-display = ("Space Grotesk",)
 #let construct-font-mono = ("JetBrains Mono",)
 
+#let horizontalrule = block(width: 100%, above: 0.85em, below: 0.95em)[
+  #line(length: 100%, stroke: 0.6pt + hairline-strong)
+]
+
 // Type scale. One modular ramp shared by every document type so sizing never
 // drifts between a PRD, a research brief, and a decision record.
 
 #let fs-micro = 8pt
 #let fs-small = 8.5pt
 #let fs-meta = 9pt
-#let fs-body = 10pt
+#let fs-body = 10.4pt
 #let fs-h4 = 8.5pt
 #let fs-h3 = 11pt
 #let fs-h2 = 13pt
@@ -76,8 +80,8 @@
 #let wt-semibold = 600
 #let wt-bold = 700
 
-#let construct-figure-max-width = 58%
-#let construct-figure-max-height = 2.35in
+#let construct-figure-max-width = 92%
+#let construct-figure-max-height = 3.4in
 
 // A document-type word maps to a compact badge so the masthead reads as a
 // labelled artifact rather than a bare title.
@@ -290,20 +294,18 @@
 
 #let construct-theme(body) = {
   set text(font: construct-font-sans, size: fs-body, fill: ink-body, lang: "en", tracking: 0.002em)
-  set par(justify: false, leading: 0.82em, spacing: 1.15em)
+  set par(justify: false, leading: 0.9em, spacing: 1.24em)
   set heading(numbering: none, outlined: true)
 
   show strong: set text(font: construct-font-sans, weight: wt-semibold, fill: ink)
   show emph: set text(style: "italic")
 
-  // Lists inherit the open body leading; a per-item block gap keeps a wrapped
-  // bullet from reading as two bullets, with the gap clearly wider than the
-  // line leading within an item.
+  // Lists need looser vertical rhythm than body prose, but ordered lists must
+  // preserve Typst's native counter context or every item will render as `1.`.
+  // Spacing belongs on the list container, not on a wrapped enum.item block.
 
-  show list.item: it => block(below: 0.6em, it)
-  show enum.item: it => block(below: 0.6em, it)
-  set list(marker: (text(fill: ink)[•], text(fill: ink-muted)[‣], text(fill: ink-faint)[–]), indent: 2pt, body-indent: 8pt, spacing: 0.9em)
-  set enum(indent: 2pt, body-indent: 8pt, spacing: 0.9em)
+  set list(marker: (text(fill: ink)[•], text(fill: ink-muted)[‣], text(fill: ink-faint)[–]), indent: 2pt, body-indent: 9pt, spacing: 1.02em)
+  set enum(numbering: "1.", indent: 2pt, body-indent: 9pt, spacing: 1.02em)
 
   // Links carry ink with a hairline underline so citations stay legible without
   // introducing color.
@@ -322,7 +324,7 @@
       text(font: construct-font-display, size: fs-h1, weight: wt-semibold, fill: ink, tracking: -0.015em)[#it.body]
       v(0.22em)
       line(length: 100%, stroke: 0.5pt + hairline)
-      v(0.55em, weak: true)
+      v(0.7em, weak: true)
     })
   }
   show heading.where(level: 2): it => {
@@ -331,14 +333,14 @@
       text(font: construct-font-display, size: fs-h2, weight: wt-semibold, fill: ink, tracking: -0.01em)[#it.body]
       v(0.4em)
       line(length: 26pt, stroke: 1.5pt + ink)
-      v(0.62em, weak: true)
+      v(0.78em, weak: true)
     })
   }
   show heading.where(level: 3): it => {
     v(1.15em, weak: true)
     block(sticky: true, {
       text(font: construct-font-sans, size: fs-h3, weight: wt-semibold, fill: ink-strong)[#it.body]
-      v(0.38em, weak: true)
+      v(0.48em, weak: true)
     })
   }
   show heading.where(level: 4): it => {
@@ -414,10 +416,13 @@
       radius: 4pt,
     )[
       #align(center)[
-        #box(width: construct-figure-max-width)[
-          #show image: img => image(img, width: 100%, height: construct-figure-max-height, fit: "contain")
-          #it.body
-        ]
+        #show image: img => image(
+          img,
+          width: construct-figure-max-width,
+          height: construct-figure-max-height,
+          fit: "contain",
+        )
+        #it.body
       ]
     ]
     if it.caption != none {

package/templates/distribution/construct-decision.typ

@@ -8,7 +8,7 @@
 
 #set page(
   paper: "a4",
-  margin: (x: 2cm, top: 1.8cm, bottom: 2.2cm),
+  margin: (x: 2.15cm, top: 1.95cm, bottom: 2.35cm),
   numbering: "1",
   header: construct-running-header(
     "$if(title)$$title$$endif$",

package/templates/distribution/construct-pdf.typ

@@ -8,7 +8,7 @@
 
 #set page(
   paper: "a4",
-  margin: (x: 2cm, top: 1.8cm, bottom: 2.2cm),
+  margin: (x: 2.15cm, top: 1.95cm, bottom: 2.35cm),
   numbering: "1",
   header: construct-running-header(
     "$if(title)$$title$$endif$",

package/templates/distribution/construct-prd.typ

@@ -8,7 +8,7 @@
 
 #set page(
   paper: "a4",
-  margin: (x: 2cm, top: 1.8cm, bottom: 2.2cm),
+  margin: (x: 2.15cm, top: 1.95cm, bottom: 2.35cm),
   numbering: "1",
   header: construct-running-header(
     "$if(title)$$title$$endif$",

package/templates/distribution/construct-research.typ

@@ -8,7 +8,7 @@
 
 #set page(
   paper: "a4",
-  margin: (x: 1.85cm, top: 1.75cm, bottom: 2.1cm),
+  margin: (x: 2cm, top: 1.9cm, bottom: 2.25cm),
   numbering: "1",
   header: construct-running-header(
     "$if(title)$$title$$endif$",

package/templates/distribution/mermaid-puppeteer.json

@@ -0,0 +1,8 @@
+{
+  "args": [
+    "--no-sandbox",
+    "--disable-setuid-sandbox",
+    "--disable-dev-shm-usage",
+    "--disable-gpu"
+  ]
+}

package/templates/docs/persona-artifact.md

@@ -1,6 +1,6 @@
 # <Role display name>
 
-> Anchor doc for the <role-id> persona. Methodology: `docs/guides/concepts/persona-research.md`. This file is generated by `construct profile create` and is part of the discover + frame phases. The persona is not promotable until every section below is filled from evidence, not opinion.
+> Anchor doc for the <role-id> persona. Methodology: `docs/guides/concepts/persona-research.md`. This file is generated by `construct scope create` and is part of the discover + frame phases. The persona is not promotable until every section below is filled from evidence, not opinion.
 
 ## Goals
 

package/templates/docs/prd.md

@@ -20,6 +20,8 @@ not the whole document. Keep em dashes rare; prefer commas, periods, or parenthe
 -->
 
 ## Summary
+This PRD defines {title} for {primary user or customer segment}. It explains the current friction, the measurable outcome this work should unlock, and the smallest shippable path to prove the change works. Replace this paragraph with evidence-backed product context before review.
+
 <!--
 One paragraph (3-5 sentences) that a busy reader can use as the whole PRD.
 What the change is, who it's for, why now, and what changes when it ships.
@@ -27,6 +29,8 @@ No solutions in this section that aren't decided. No ticket IDs. No team names.
 -->
 
 ## Background
+Today, {current workflow or system} creates avoidable friction for {affected users}. The evidence that matters for this PRD should include observed behavior, quantitative signals, or qualitative research, and the links below should let reviewers verify the claim without relying on memory.
+
 <!--
 Context the reader needs to evaluate this PRD without asking around.
 Include relevant prior work (linked PRDs, ADRs, RFCs), observed signals, and
@@ -38,6 +42,8 @@ Avoid roadmap-speak ("this is a Q3 priority"); state what is happening to users.
 -->
 
 ## Problem
+{Affected users} cannot reliably achieve {desired outcome} because {constraint or failure mode}. The problem is important now because the current workaround is costly, error-prone, or blocks adoption for a clearly named segment.
+
 <!--
 The specific user or business outcome that is currently blocked. One or two
 paragraphs. State the pain, not the solution.

package/lib/boundary.mjs

@@ -1,127 +0,0 @@
-/**
- * lib/boundary.mjs — Authenticated parent/child boundary registration.
- *
- * Verifies a parent Construct instance is reachable, validates an HMAC
- * signature over `childInstanceId|nonce` when a shared secret is configured,
- * and persists the binding to boundary.json in the XDG config dir (mode 0600). A
- * different parent rotates the registration only when explicitly allowed via
- * CONSTRUCT_BOUNDARY_ALLOW_OVERRIDE=1; prior configs are archived alongside
- * the active one. Exposed as a standalone module so the dashboard endpoint
- * and the functional tests share the same logic.
- */
-
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-import { createHmac, timingSafeEqual, randomBytes } from 'node:crypto';
-import { request as httpRequest } from 'node:http';
-import { request as httpsRequest } from 'node:https';
-import { configDir } from './config/xdg.mjs';
-
-export const BOUNDARY_VERSION = '1.0';
-
-function boundaryDir(home = homedir()) {
-  return configDir(home);
-}
-
-export function boundaryConfigPath(home = homedir()) {
-  return join(boundaryDir(home), 'boundary.json');
-}
-
-export async function registerBoundary({
-  parentInstance,
-  parentUrl,
-  childInstanceId,
-  nonce,
-  signature,
-  sharedSecret = null,
-  home = homedir(),
-  allowOverride = process.env.CONSTRUCT_BOUNDARY_ALLOW_OVERRIDE === '1',
-  probe = probeParent,
-}) {
-  if (!parentInstance || !parentUrl) {
-    return { ok: false, status: 400, error: 'parentInstance and parentUrl are required' };
-  }
-  if (!childInstanceId) {
-    return { ok: false, status: 400, error: 'childInstanceId is required' };
-  }
-
-  if (sharedSecret) {
-    if (!nonce || !signature) {
-      return { ok: false, status: 401, error: 'nonce and signature are required when a shared secret is configured' };
-    }
-    const expected = createHmac('sha256', sharedSecret).update(`${childInstanceId}|${nonce}`).digest('hex');
-    const a = Buffer.from(expected, 'hex');
-    let b;
-    try { b = Buffer.from(String(signature), 'hex'); } catch { return { ok: false, status: 401, error: 'invalid signature encoding' }; }
-    if (a.length !== b.length || !timingSafeEqual(a, b)) {
-      return { ok: false, status: 401, error: 'signature mismatch' };
-    }
-  }
-
-  const reachable = await probe(parentUrl);
-  if (!reachable.ok) {
-    return { ok: false, status: 502, error: `parent unreachable: ${reachable.error}` };
-  }
-
-  const dir = boundaryDir(home);
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-  const cfgPath = boundaryConfigPath(home);
-
-  let prior = null;
-  if (existsSync(cfgPath)) {
-    try { prior = JSON.parse(readFileSync(cfgPath, 'utf8')); } catch { prior = null; }
-  }
-
-  if (prior && prior.parentInstance && prior.parentInstance !== parentInstance) {
-    if (!allowOverride) {
-      return {
-        ok: false,
-        status: 409,
-        error: `child already bound to parent '${prior.parentInstance}'; set CONSTRUCT_BOUNDARY_ALLOW_OVERRIDE=1 to rotate`,
-      };
-    }
-    const archivePath = join(dir, `boundary.${Date.now()}.json`);
-    try { writeFileSync(archivePath, JSON.stringify(prior, null, 2)); } catch { /* archive is best effort */ }
-  }
-
-  const config = {
-    parentInstance,
-    parentUrl,
-    childInstanceId,
-    registeredAt: new Date().toISOString(),
-    rotatedFrom: prior?.parentInstance || null,
-    nonce: nonce || randomBytes(16).toString('hex'),
-    boundaryVersion: BOUNDARY_VERSION,
-  };
-
-  writeFileSync(cfgPath, JSON.stringify(config, null, 2), { mode: 0o600 });
-  return { ok: true, config, path: cfgPath };
-}
-
-export function probeParent(parentUrl) {
-  return new Promise((resolve) => {
-    let parsed;
-    try { parsed = new URL(parentUrl); } catch { return resolve({ ok: false, error: 'invalid URL' }); }
-    if (!/^https?:$/.test(parsed.protocol)) return resolve({ ok: false, error: 'unsupported protocol' });
-    const fn = parsed.protocol === 'https:' ? httpsRequest : httpRequest;
-    const req = fn({
-      method: 'HEAD',
-      protocol: parsed.protocol,
-      hostname: parsed.hostname,
-      port: parsed.port,
-      path: parsed.pathname || '/',
-      timeout: 3000,
-    }, (response) => {
-      resolve({ ok: response.statusCode < 500 });
-      response.resume();
-    });
-    req.on('timeout', () => { req.destroy(); resolve({ ok: false, error: 'timeout' }); });
-    req.on('error', (err) => resolve({ ok: false, error: err.message }));
-    req.end();
-  });
-}
-
-export function signBoundaryRequest({ childInstanceId, nonce, sharedSecret }) {
-  return createHmac('sha256', sharedSecret).update(`${childInstanceId}|${nonce}`).digest('hex');
-}

package/lib/certification/dashboard-api.mjs

@@ -1,71 +0,0 @@
-/**
- * lib/certification/dashboard-api.mjs — dashboard-safe certification status payload.
- *
- * Mirrors construct certify status for GET /api/certification/status without secrets.
- */
-
-import fs from 'node:fs';
-import path from 'node:path';
-
-import { buildCertificationStatus } from './status.mjs';
-import { loadCertificationStatus } from './stale-impact.mjs';
-import { certificationRunDir, certificationRunsRoot, listCertificationRunIds, readCertificationRun } from './store.mjs';
-
-function findConstructRoot(startPath = process.cwd()) {
-  let current = path.resolve(startPath);
-  while (true) {
-    if (fs.existsSync(path.join(current, 'package.json'))) return current;
-    const parent = path.dirname(current);
-    if (parent === current) return path.resolve(startPath);
-    current = parent;
-  }
-}
-
-function buildStaleRows({ rootDir }) {
-  const { status } = loadCertificationStatus({ rootDir });
-  if (!status?.capabilities) return [];
-  return Object.entries(status.capabilities)
-    .filter(([, entry]) => entry.status === 'stale')
-    .map(([capabilityId, entry]) => ({
-      capabilityId,
-      staleSince: entry.staleSince ?? null,
-      staleReason: entry.staleReason ?? null,
-      stalePaths: entry.stalePaths ?? [],
-    }));
-}
-
-export function buildCertificationDashboard({ rootDir = process.cwd() } = {}) {
-  const root = findConstructRoot(rootDir);
-  const report = buildCertificationStatus({ rootDir: root });
-  const runs = [];
-  for (const runId of listCertificationRunIds({ rootDir: root }).slice(-20)) {
-    try {
-      const { run } = readCertificationRun(runId, { rootDir: root });
-      const dir = certificationRunDir(runId, root);
-      runs.push({
-        id: run.id,
-        scenarioId: run.scenarioId,
-        capabilityId: run.capabilityId,
-        status: run.verdict?.status ?? 'unknown',
-        createdAt: run.createdAt,
-        artifactPath: path.relative(root, path.join(dir, 'run.json')),
-      });
-    } catch { /* skip corrupt */ }
-  }
-  return {
-    generatedAt: report.generatedAt,
-    capabilities: report.capabilities,
-    specialists: report.specialists,
-    skills: report.skills,
-    artifactTypes: report.artifactTypes,
-    documentCategories: report.documentCategories,
-    demos: report.demos,
-    stale: buildStaleRows({ rootDir: root }),
-    runs,
-    runsDir: path.relative(root, certificationRunsRoot(root)),
-    artifactLinks: {
-      runsRoot: '.cx/certification/runs',
-      recentRunIds: runs.map((r) => r.id),
-    },
-  };
-}