@hegemonart/get-design-done 1.13.3 → 1.14.1

package/reference/ai-native-tool-interface.md

@@ -0,0 +1,102 @@
+# AI-Native Design Tool Interface — Capability Contract
+
+This file defines the capability-based contract that AI-native design tools must implement to integrate with the get-design-done pipeline. Two sub-categories are defined: **canvas** and **component-generator**. Future tools implement one sub-category and plug in via the same probe/read/write or probe/generate/adopt surface.
+
+---
+
+## Sub-Categories
+
+### Canvas Tools
+
+Canvas tools treat the design canvas as both source AND destination. They expose a bidirectional read+write surface.
+
+**Contract:**
+
+```
+probe()  → { available | unavailable | not_configured }
+
+read(selection) → {
+  jsx:        string,      // React JSX of component tree
+  styles:     object,      // computed CSS styles
+  screenshot: base64_png,  // visual snapshot
+  metadata:   object       // component name, bounds, id
+}
+
+write(proposal) → { confirmed | rejected }
+```
+
+**Implementations:**
+- `connections/paper-design.md` — MCP-based; 24-tool server; budget: 100 calls/week (free)
+- `connections/pencil-dev.md` — file-based; `.pen` YAML spec files; git-tracked; no MCP
+
+**Pipeline stages:** `explore` (read) + `verify` (screenshot) + `design` (write via writer agent)
+
+---
+
+### Component Generators
+
+Component generators produce UI component code from a natural-language description and an optional design-system target. They expose a generative one-way (or roundtrip) surface.
+
+**Contract:**
+
+```
+probe() → { available | unavailable | not_configured }
+
+generate(description: string, ds: "shadcn"|"tailwind"|"mantine"|"chakra") → {
+  code:        string,   // component source code
+  preview_url: string,   // hosted preview URL
+  variants:    array,    // multiple generated variations
+  component_id: string   // for adopt/annotate operations
+}
+
+adopt(variant: object) → { confirmed | rejected }
+```
+
+**Implementations:**
+- `connections/21st-dev.md` — Magic MCP; `npx @21st-dev/magic@latest init`; marketplace prior-art gate
+- `connections/magic-patterns.md` — Claude connector (`mcp__magic_patterns*`) + API key fallback; DS-aware generation
+
+**Pipeline stages:** `explore` (prior-art gate for 21st.dev) + `design` (generate + adopt)
+
+---
+
+## Shared Probe Pattern
+
+All AI-native tools use the three-value status schema from `connections/connections.md`:
+
+| Status | Meaning |
+|--------|---------|
+| `available` | Tool confirmed present and responsive |
+| `unavailable` | Tool present but errored (rate-limited, auth failure) |
+| `not_configured` | ToolSearch returned empty or no .pen files found |
+
+STATE.md format: `<tool-name>: <status>` in the `<connections>` block.
+
+---
+
+## Extending with Future Tools
+
+To add a new AI-native design tool:
+
+1. Determine sub-category: **canvas** (bidirectional design source) or **component-generator** (code generator).
+2. Create `connections/<tool-name>.md` following the frozen template in `connections/figma.md`.
+3. Implement `probe()` using ToolSearch or file-based check. Write status to STATE.md.
+4. For **canvas**: expose `read()` and `write()` surfaces via the corresponding agent.
+5. For **component-generator**: implement `generate()` and `adopt()` in `agents/design-component-generator.md` as a new `<!-- impl: <tool> -->` section.
+6. Add a row to `connections/connections.md` capability matrix with `canvas` or `generator` column marked.
+7. Append to `test-fixture/baselines/current/connection-list.txt` in sorted order.
+
+---
+
+## Candidate Tools (Backlog)
+
+| Tool | Sub-category | Priority | Notes |
+|------|-------------|----------|-------|
+| Subframe | canvas | high | MCP-based; production-ready components; check for `mcp__subframe*` |
+| v0.dev | generator | high | Vercel product; generates shadcn/tailwind; check for `mcp__v0*` |
+| Galileo AI | generator | medium | Enterprise DS generation; API key required |
+| Builder.io Visual Copilot | canvas + generator | medium | Figma plugin + code export; check for `mcp__builder*` |
+| Locofy | generator | low | Figma→React/Next.js; Figma plugin-based |
+| Anima | canvas | low | Figma→React; Figma plugin-based |
+| Plasmic | generator | medium | Headless CMS + visual builder; `mcp__plasmic*` |
+| TeleportHQ | generator | low | Code export + collaboration |

package/scripts/aggregate-agent-metrics.js

@@ -25,6 +25,7 @@ const os = require('os');
 const CWD = process.cwd();
 const TELEMETRY_PATH = path.join(CWD, '.design', 'telemetry', 'costs.jsonl');
 const METRICS_PATH = path.join(CWD, '.design', 'agent-metrics.json');
+const PHASE_TOTALS_PATH = path.join(CWD, '.design', 'telemetry', 'phase-totals.json');
 const AGENTS_DIR = path.join(CWD, 'agents');
 
 // ---- frontmatter reader (no YAML dep) ----
@@ -124,6 +125,18 @@ function writeAtomic(filePath, content) {
   fs.renameSync(tmp, filePath);
 }
 
+// ---- phase totals aggregator (WR-02: avoids full JSONL replay in budget enforcer) ----
+function aggregateByPhase(rows) {
+  const byPhase = {};
+  for (const r of rows) {
+    const phase = r.phase || 'unknown';
+    byPhase[phase] = (byPhase[phase] || 0) + Number(r.est_cost_usd || 0);
+  }
+  // Round to 6dp to match per-agent precision
+  for (const k of Object.keys(byPhase)) byPhase[k] = Number(byPhase[k].toFixed(6));
+  return byPhase;
+}
+
 // ---- main ----
 function main() {
   const rows = readTelemetryRows();
@@ -133,6 +146,13 @@ function main() {
     agents,
   };
   writeAtomic(METRICS_PATH, JSON.stringify(payload, null, 2) + '\n');
+  // Write lightweight phase-totals.json so budget-enforcer can read phase spend
+  // in O(1) without replaying the full JSONL on every agent spawn (WR-02).
+  const phaseTotals = {
+    generated_at: new Date().toISOString(),
+    totals: aggregateByPhase(rows),
+  };
+  writeAtomic(PHASE_TOTALS_PATH, JSON.stringify(phaseTotals, null, 2) + '\n');
 }
 
 try {

package/scripts/build-intel.cjs

@@ -17,7 +17,7 @@
 
 const fs = require('fs');
 const path = require('path');
-const { execSync } = require('child_process');
+const { spawnSync } = require('child_process');
 
 const ROOT = process.cwd();
 const INTEL_DIR = path.join(ROOT, '.design', 'intel');
@@ -46,15 +46,23 @@ function writeSlice(name, data) {
 
 function gitHash(filePath) {
   try {
-    return execSync(`git log -1 --format=%h -- "${filePath}"`, { stdio: ['pipe', 'pipe', 'ignore'] })
-      .toString().trim() || 'untracked';
+    const r = spawnSync('git', ['log', '-1', '--format=%h', '--', filePath], {
+      stdio: ['pipe', 'pipe', 'ignore'],
+      encoding: 'utf8',
+      timeout: 5000,
+    });
+    return r.stdout.trim() || 'untracked';
   } catch { return 'untracked'; }
 }
 
 function headHash() {
   try {
-    return execSync('git rev-parse --short HEAD', { stdio: ['pipe', 'pipe', 'ignore'] })
-      .toString().trim();
+    const r = spawnSync('git', ['rev-parse', '--short', 'HEAD'], {
+      stdio: ['pipe', 'pipe', 'ignore'],
+      encoding: 'utf8',
+      timeout: 5000,
+    });
+    return r.stdout.trim() || 'unknown';
   } catch { return 'unknown'; }
 }
 

package/scripts/injection-patterns.cjs

@@ -0,0 +1,17 @@
+'use strict';
+// Shared prompt-injection patterns — single source of truth for both
+// hooks/gdd-read-injection-scanner.js (runtime hook) and
+// scripts/run-injection-scanner-ci.cjs (CI scanner).
+// Add new patterns here; both consumers pick them up automatically.
+
+const INJECTION_PATTERNS = [
+  { name: 'ignore previous',         re: /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i },
+  { name: 'disregard previous',      re: /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i },
+  { name: 'you are now a different', re: /you\s+are\s+now\s+a\s+different/i },
+  { name: 'system: you are',         re: /system\s*:\s*you\s+are/i },
+  { name: 'role tag injection',      re: /<\s*\/?\s*(system|assistant|human)\s*>/i },
+  { name: '[INST] fragment',         re: /\[INST\]/i },
+  { name: '### instruction fragment',re: /###\s*instruction/i },
+];
+
+module.exports = { INJECTION_PATTERNS };

package/scripts/run-injection-scanner-ci.cjs

@@ -13,16 +13,7 @@ const path = require('path');
 
 const REPO_ROOT = path.resolve(__dirname, '..');
 
-// Patterns mirror hooks/gdd-read-injection-scanner.js.
-const INJECTION_PATTERNS = [
-  { name: 'ignore previous', re: /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i },
-  { name: 'disregard previous', re: /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i },
-  { name: 'you are now a different', re: /you\s+are\s+now\s+a\s+different/i },
-  { name: 'system: you are', re: /system\s*:\s*you\s+are/i },
-  { name: 'role tag injection', re: /<\s*\/?\s*(system|assistant|human)\s*>/i },
-  { name: '[INST] fragment', re: /\[INST\]/i },
-  { name: '### instruction fragment', re: /###\s*instruction/i },
-];
+const { INJECTION_PATTERNS } = require('./injection-patterns.cjs');
 
 function walkMd(dir, out) {
   if (!fs.existsSync(dir)) return;

package/scripts/tests/test-authority-watcher-diff.sh

@@ -35,7 +35,11 @@ fi
 
 # Count actual fixture files (should be 4 frozen feeds + 1 README; we only
 # care that at least one XML/JSON fixture is present).
-FIXTURE_COUNT=$(find "$FIXTURE_DIR" -maxdepth 1 -type f \( -name '*.atom' -o -name '*.rss' -o -name '*.json' \) | wc -l | tr -d ' ')
+# Use null-delimited find to handle filenames with spaces/newlines (WR-05).
+FIXTURE_COUNT=0
+while IFS= read -r -d '' _f; do
+  FIXTURE_COUNT=$((FIXTURE_COUNT + 1))
+done < <(find "$FIXTURE_DIR" -maxdepth 1 -type f \( -name '*.atom' -o -name '*.rss' -o -name '*.json' \) -print0)
 if [ "$FIXTURE_COUNT" -lt 1 ]; then
   echo "FAIL: $FIXTURE_DIR contains no feed fixtures (.atom/.rss/.json)." >&2
   exit 1

package/skills/check-update/SKILL.md

@@ -35,6 +35,8 @@ Flags can be combined: `--refresh --prompt` is valid (re-fetch, then enrich). `-
     - Print: `No cache. Network may be unreachable or the hook has not run yet. Try /gdd:check-update --refresh.`
     - Exit.
 
+<!-- markdownlint-disable MD025 -->
+
 4. **Dismiss path** (if `--dismiss` in flags):
     Compute new config contents and write atomically. The python heredoc receives CONFIG_PATH and LATEST_TAG via the ENVIRONMENT (env-prefix form — `KEY=VALUE python3 <<PY`), NOT via trailing argv. Passing `python3 -c '...' KEY=VALUE` makes Python treat the assignments as `sys.argv`, which the old draft did incorrectly; env-prefix form is the portable fix.
 

package/skills/explore/SKILL.md

@@ -31,7 +31,59 @@ Empty → refero: not_configured
 Non-empty → refero: available
 ```
 
-Write results to STATE.md `<connections>`.
+**C — 21st.dev probe:**
+```
+ToolSearch({ query: "mcp__21st", max_results: 5 })
+Empty → 21st-dev: not_configured
+Non-empty → 21st-dev: available
+```
+
+**D — Magic Patterns probe:**
+```
+ToolSearch({ query: "mcp__magic_patterns", max_results: 5 })
+Empty → magic-patterns: not_configured
+Non-empty → magic-patterns: available
+```
+
+**E — paper.design probe:**
+```
+ToolSearch({ query: "mcp__paper", max_results: 5 })
+Empty → paper-design: not_configured
+Non-empty → call mcp__paper-design__get_selection; success → available; error → unavailable
+```
+
+**F — pencil.dev probe (file-based):**
+```bash
+find . -name "*.pen" -not -path "*/node_modules/*" 2>/dev/null | head -1
+Empty → pencil-dev: not_configured
+Found → pencil-dev: available
+```
+
+Write all results to STATE.md `<connections>`.
+
+## Step 1.5 — 21st.dev Prior-Art Check (when 21st-dev: available)
+
+If `21st-dev: not_configured` in STATE.md: skip this step entirely.
+
+When the explore stage identifies any greenfield component in scope (component name from BRIEF.md or user request that does not yet have an implementation file):
+
+1. `21st_magic_component_search(component_name, limit: 3)`
+2. Evaluate top result:
+   - **fit ≥ 80%**: add `<prior-art>` block to DESIGN.md:
+     ```xml
+     <prior-art source="21st.dev" component="<name>" fit="<score>%" id="<component_id>">
+       Recommendation: adopt — do not build custom. Confirm with design-executor.
+     </prior-art>
+     ```
+   - **fit < 80%**: note top candidate in DESIGN.md as a reference, proceed with custom build:
+     ```xml
+     <prior-art source="21st.dev" component="<name>" fit="<score>%" id="<component_id>">
+       Low fit — noted for reference. Building custom component.
+     </prior-art>
+     ```
+3. If `svgl_get_brand_logo` is available and explore scope includes brand logo assets: call `svgl_get_brand_logo(brand_name)` for each required brand asset; add SVG results to `.design/assets/` and note in DESIGN.md.
+
+If no greenfield components in scope: skip this step.
 
 ## Step 2 — Inventory scan (unless `--skip-scan`)