@hirobius/design-system 0.9.0 → 0.10.0

package/README.md

@@ -90,7 +90,6 @@ Typical loop:
 ## Bundle and release hygiene
 
 - `pnpm check:size` builds the library bundle and runs `size-limit`.
-- `pnpm perf:budget` runs Lighthouse CI assertions for page performance budgets.
 - `pnpm check:release` runs the full release gate (accessibility, responsive, collision, visual, and bundle-size checks).
 
 Releases are cut with [Changesets](https://github.com/changesets/changesets): a merged changeset opens a "Version Packages" PR, and merging that PR publishes the new version to public npm via `.github/workflows/release.yml`.

package/package.json

@@ -2,7 +2,7 @@
   "name": "@hirobius/design-system",
   "description": "Hirobius Design Systems Architecture: token-governed React components, documentation surfaces, and distribution tooling.",
   "private": false,
-  "version": "0.9.0",
+  "version": "0.10.0",
   "engines": {
     "node": ">=20",
     "pnpm": ">=8"
@@ -57,16 +57,10 @@
       "import": "./dist/mui.js",
       "default": "./dist/mui.js"
     },
-    "./protocol": {
-      "import": "./protocol/envelope.mjs",
-      "default": "./protocol/envelope.mjs"
-    },
     "./package.json": "./package.json"
   },
   "files": [
     "dist",
-    "protocol/envelope.mjs",
-    "protocol/figma-snapshot.schema.json",
     "hirobius.tokens.json",
     "public/hds-manifest.json"
   ],
@@ -226,7 +220,6 @@
     "audit:sbom": "node scripts/audit-sbom.mjs",
     "audit:sidecar": "node scripts/generate-security-posture.mjs",
     "audit:style-dictionary": "bash scripts/poc/style-dictionary-poc/run.sh",
-    "bridge": "node --env-file=.env.local scripts/hds-bridge.mjs",
     "build": "pnpm sync:health && node scripts/sync-icons.mjs && vite build --configLoader native",
     "build:ssr": "vite build --ssr src/entry-server.tsx --outDir .ssr-cache --configLoader native",
     "build:prerender": "pnpm build && pnpm build:ssr && node scripts/prerender.mjs",
@@ -282,7 +275,7 @@
     "check:page-shell": "node scripts/check-page-shell.mjs",
     "check:refs": "node scripts/check-ref-forwarding.mjs",
     "check:registry": "node scripts/check-registry.mjs",
-    "check:release": "pnpm check:full && node scripts/check-style-discipline.mjs && pnpm build && pnpm perf:budget && pnpm test:a11y && pnpm test:visual && pnpm test:responsive && pnpm test:collision && pnpm check:size",
+    "check:release": "pnpm check:full && node scripts/check-style-discipline.mjs && pnpm build && pnpm test:a11y && pnpm test:visual && pnpm test:responsive && pnpm test:collision && pnpm check:size",
     "check:routes": "node scripts/check-link-integrity.mjs --route-links-only",
     "check:secrets": "node scripts/check-secrets.mjs",
     "check:security": "node scripts/check-security-baseline.mjs",
@@ -306,7 +299,6 @@
     "docs:changelogs": "node scripts/generate-component-changelogs.mjs",
     "docs:llms": "node scripts/generate-llms-txt.mjs",
     "figma-variables": "node scripts/build-figma-variables.mjs",
-    "figma:bridge:smoke": "node scripts/figma-bridge-smoke.mjs",
     "figma:diff": "node scripts/figma-diff.mjs",
     "figma:snapshot": "node scripts/normalize-figma-snapshot.mjs",
     "figma:stream": "node scripts/llm-stream-bridge.mjs",
@@ -322,7 +314,6 @@
     "manifest:generate": "node scripts/generate-manifest.mjs && node scripts/generate-component-api.mjs && node scripts/enrich-manifest.mjs",
     "manifest:project": "node scripts/generate-manifest-projection.mjs",
     "nav:generate": "node scripts/generate-nav-model.mjs",
-    "perf:budget": "node -e \"require('fs').readdirSync('.lighthouseci').filter(f=>f.startsWith('lhr-')).forEach(f=>require('fs').unlinkSync('.lighthouseci/'+f))\" 2>/dev/null; lhci collect --config=.lighthouserc.json && lhci assert --config=.lighthouserc.json; find . -maxdepth 1 -type d -name 'C:*' -exec rm -rf {} + 2>/dev/null; true",
     "prebuild": "node scripts/validate-manifest.mjs",
     "prebuild:lib": "node scripts/generate-component-api.mjs",
     "pretest": "node scripts/validate-manifest.mjs && node scripts/check-manifest-drift.mjs && node scripts/check-manifest-schema-semver.mjs && node scripts/audit-component-integrity.mjs --completeness && node scripts/check-source-canon.mjs && node scripts/check-binding-drift.mjs && node scripts/test-figma-masters-snapshot.mjs && node scripts/test-doc-pages-snapshot.mjs && node scripts/check-registry.mjs && node scripts/check-tenant-tokens.mjs && knip --no-exit-code",

package/protocol/envelope.mjs

@@ -1,201 +0,0 @@
-/**
- * protocol/envelope.mjs
- *
- * Message-envelope protocol for bridge↔plugin traffic. Build unit p5-1.
- *
- * Envelope shape:
- *   {
- *     id:        string  (UUID v4)
- *     type:      string  (verb, e.g. "selection.update")
- *     payload:   object
- *     timestamp: number  (ms since epoch)
- *     hmac:      string  (HMAC-SHA256(secret, stableStringify({id,type,timestamp,payload})))
- *   }
- *
- * The Figma plugin sandbox cannot import from this file. The mirror
- * implementation lives at `figma-agent-plugin/protocol-envelope.js` and
- * MUST stay byte-equivalent in HMAC output for the same inputs.
- *
- * Schema decisions (also documented in the unit's commit body):
- *   - Clock-skew tolerance: ±60s on either side of now.
- *   - Hard expiry:           5 minutes (300_000 ms) past `timestamp`.
- *   - Replay-protection set: in-memory Map, FIFO-evicted at 1000 entries.
- *
- * Hard rules (CLAUDE.md / OPERATOR_BRIEF.md):
- *   - No new npm dependencies; native Node crypto only.
- *   - This file is the protocol library only — wiring the envelope into
- *     hds-bridge.mjs / plugin code.js belongs to p5-2 and p5-3.
- */
-
-import crypto from 'node:crypto';
-
-export const CLOCK_SKEW_MS = 60_000;     // ±60s tolerance for future timestamps
-export const MAX_AGE_MS = 5 * 60_000;    // 5 min hard expiry
-export const REPLAY_SET_LIMIT = 1000;    // FIFO eviction beyond this
-
-// ── stable serialization ───────────────────────────────────────────────────
-
-/**
- * Deterministic JSON serializer: object keys sorted lexicographically at
- * every level, no whitespace. Used as the HMAC pre-image so the Node-side
- * and plugin-side implementations produce identical signatures.
- */
-export function stableStringify(value) {
-  if (value === null || typeof value !== 'object') {
-    return JSON.stringify(value);
-  }
-  if (Array.isArray(value)) {
-    return '[' + value.map((v) => stableStringify(v)).join(',') + ']';
-  }
-  const keys = Object.keys(value).sort();
-  const parts = [];
-  for (const k of keys) {
-    const v = value[k];
-    if (v === undefined) continue; // mirror JSON.stringify behavior
-    parts.push(JSON.stringify(k) + ':' + stableStringify(v));
-  }
-  return '{' + parts.join(',') + '}';
-}
-
-// ── helpers ────────────────────────────────────────────────────────────────
-
-function computeHmac(secret, preimage) {
-  return crypto.createHmac('sha256', String(secret)).update(preimage).digest('hex');
-}
-
-function preimageOf(envelope) {
-  // HMAC binds the four schema fields. Order doesn't matter — stableStringify
-  // sorts keys — but be explicit so the contract is readable.
-  return stableStringify({
-    id: envelope.id,
-    payload: envelope.payload,
-    timestamp: envelope.timestamp,
-    type: envelope.type,
-  });
-}
-
-function timingSafeEqualHex(a, b) {
-  if (typeof a !== 'string' || typeof b !== 'string') return false;
-  if (a.length !== b.length) return false;
-  try {
-    return crypto.timingSafeEqual(Buffer.from(a, 'hex'), Buffer.from(b, 'hex'));
-  } catch {
-    return false;
-  }
-}
-
-// ── replay-protection set (in-memory, module-scoped) ──────────────────────
-
-const _seenIds = new Map(); // id → timestamp; insertion-ordered for FIFO eviction
-
-function recordSeen(id) {
-  if (_seenIds.has(id)) {
-    // refresh insertion order is not desired — keep original entry
-    return;
-  }
-  _seenIds.set(id, Date.now());
-  while (_seenIds.size > REPLAY_SET_LIMIT) {
-    const firstKey = _seenIds.keys().next().value;
-    _seenIds.delete(firstKey);
-  }
-}
-
-/** Test/diagnostics helper — clears the replay-protection set. */
-export function _resetReplaySet() {
-  _seenIds.clear();
-}
-
-/** Test/diagnostics helper — current replay-set size. */
-export function _replaySetSize() {
-  return _seenIds.size;
-}
-
-// ── public API ─────────────────────────────────────────────────────────────
-
-/**
- * Build a signed envelope.
- *
- * @param {string} type    Verb, e.g. "selection.update".
- * @param {object} payload Arbitrary serializable object.
- * @param {string} secret  Shared secret (UTF-8 string).
- * @returns {object}       Envelope ready for transport.
- */
-export function createEnvelope(type, payload, secret) {
-  if (typeof type !== 'string' || type.length === 0) {
-    throw new TypeError('createEnvelope: type must be a non-empty string');
-  }
-  if (payload === null || typeof payload !== 'object') {
-    throw new TypeError('createEnvelope: payload must be an object');
-  }
-  if (typeof secret !== 'string' || secret.length === 0) {
-    throw new TypeError('createEnvelope: secret must be a non-empty string');
-  }
-  const envelope = {
-    id: crypto.randomUUID(),
-    type,
-    payload,
-    timestamp: Date.now(),
-  };
-  envelope.hmac = computeHmac(secret, preimageOf(envelope));
-  return envelope;
-}
-
-/**
- * Verify a received envelope.
- *
- * @param {object} envelope
- * @param {string} secret
- * @param {{ now?: number }} [options] Optional clock override (testing).
- * @returns {{ ok: true } | { ok: false, code: string, message?: string }}
- */
-export function verifyEnvelope(envelope, secret, options = {}) {
-  if (envelope === null || typeof envelope !== 'object') {
-    return { ok: false, code: 'MALFORMED', message: 'envelope is not an object' };
-  }
-  const { id, type, payload, timestamp, hmac } = envelope;
-  if (typeof id !== 'string' || id.length === 0) {
-    return { ok: false, code: 'MALFORMED', message: 'missing id' };
-  }
-  if (typeof type !== 'string' || type.length === 0) {
-    return { ok: false, code: 'MALFORMED', message: 'missing type' };
-  }
-  if (payload === null || typeof payload !== 'object') {
-    return { ok: false, code: 'MALFORMED', message: 'missing or invalid payload' };
-  }
-  if (typeof timestamp !== 'number' || !Number.isFinite(timestamp)) {
-    return { ok: false, code: 'MALFORMED', message: 'missing or invalid timestamp' };
-  }
-  if (typeof hmac !== 'string' || hmac.length === 0) {
-    return { ok: false, code: 'MALFORMED', message: 'missing hmac' };
-  }
-  if (typeof secret !== 'string' || secret.length === 0) {
-    return { ok: false, code: 'MALFORMED', message: 'verifier secret must be non-empty string' };
-  }
-
-  const now = typeof options.now === 'number' ? options.now : Date.now();
-
-  // Future-skew check (timestamp claims to be too far in the future)
-  if (timestamp - now > CLOCK_SKEW_MS) {
-    return { ok: false, code: 'EXPIRED', message: 'timestamp is in the future beyond clock-skew tolerance' };
-  }
-  // Past expiry check (timestamp older than MAX_AGE_MS)
-  if (now - timestamp > MAX_AGE_MS) {
-    return { ok: false, code: 'EXPIRED', message: 'envelope older than max-age' };
-  }
-
-  // HMAC check
-  const expected = computeHmac(secret, preimageOf(envelope));
-  if (!timingSafeEqualHex(expected, hmac)) {
-    return { ok: false, code: 'HMAC_MISMATCH', message: 'hmac signature does not match' };
-  }
-
-  // Replay check — must come after HMAC (don't pollute the set with junk)
-  if (_seenIds.has(id)) {
-    return { ok: false, code: 'REPLAY', message: 'envelope id already seen' };
-  }
-  recordSeen(id);
-
-  return { ok: true };
-}
-
-export default { createEnvelope, verifyEnvelope, stableStringify };

package/protocol/figma-snapshot.schema.json

@@ -1,190 +0,0 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "figma-snapshot.schema.json",
-  "title": "FigmaSnapshot",
-  "description": "10f-1: Read-only normalized snapshot of a Figma document. Same field shapes as the p6-1 selection serializer, extended to cover the full document: all pages, variable collections/modes, all local components/styles.",
-  "type": "object",
-  "required": ["snapshotAt", "pages", "variables", "styles"],
-  "additionalProperties": false,
-  "properties": {
-    "snapshotAt": {
-      "type": "string",
-      "format": "date-time",
-      "description": "ISO-8601 timestamp (UTC) when the snapshot was taken by the plugin."
-    },
-    "documentName": {
-      "type": "string",
-      "description": "Figma document name (figma.root.name)."
-    },
-    "pages": {
-      "type": "array",
-      "description": "One entry per page in the document.",
-      "items": { "$ref": "#/definitions/PageSummary" }
-    },
-    "variables": {
-      "type": "object",
-      "description": "Variable collections keyed by HDS collection name (HDS Primitive | HDS Semantic | HDS Component). Non-HDS collections are omitted.",
-      "additionalProperties": { "$ref": "#/definitions/VariableCollection" }
-    },
-    "styles": {
-      "type": "object",
-      "description": "Local Figma styles grouped by kind.",
-      "required": ["paint", "text", "effect", "grid"],
-      "additionalProperties": false,
-      "properties": {
-        "paint":  { "type": "array", "items": { "$ref": "#/definitions/StyleSummary" } },
-        "text":   { "type": "array", "items": { "$ref": "#/definitions/StyleSummary" } },
-        "effect": { "type": "array", "items": { "$ref": "#/definitions/StyleSummary" } },
-        "grid":   { "type": "array", "items": { "$ref": "#/definitions/StyleSummary" } }
-      }
-    },
-    "components": {
-      "type": "array",
-      "description": "All local COMPONENT and COMPONENT_SET nodes in the document (flattened list, not scoped per-page).",
-      "items": { "$ref": "#/definitions/ComponentSummary" }
-    }
-  },
-  "definitions": {
-    "PageSummary": {
-      "type": "object",
-      "required": ["id", "name", "type"],
-      "additionalProperties": false,
-      "properties": {
-        "id":    { "type": "string" },
-        "name":  { "type": "string" },
-        "type":  { "type": "string", "const": "PAGE" },
-        "frames": {
-          "type": "array",
-          "description": "Top-level FRAME and COMPONENT_SET children of this page, serialized with the p6-1 extractNodeTree shape (max depth 4).",
-          "items": { "$ref": "#/definitions/SerializedNode" }
-        }
-      }
-    },
-    "VariableCollection": {
-      "type": "object",
-      "required": ["id", "name", "modes", "variables"],
-      "additionalProperties": false,
-      "properties": {
-        "id":   { "type": "string" },
-        "name": { "type": "string" },
-        "modes": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "required": ["modeId", "name"],
-            "additionalProperties": false,
-            "properties": {
-              "modeId": { "type": "string" },
-              "name":   { "type": "string" }
-            }
-          }
-        },
-        "variables": {
-          "type": "array",
-          "items": { "$ref": "#/definitions/VariableSummary" }
-        }
-      }
-    },
-    "VariableSummary": {
-      "type": "object",
-      "required": ["id", "name", "resolvedType", "tokenPath"],
-      "additionalProperties": false,
-      "properties": {
-        "id":           { "type": "string" },
-        "name":         { "type": "string", "description": "Raw Figma variable name (slash/dash separated)." },
-        "tokenPath":    { "type": "string", "description": "Dot-notation canonical path, e.g. 'semantic.color.surface.raised'." },
-        "resolvedType": { "type": "string", "enum": ["COLOR", "FLOAT", "STRING", "BOOLEAN"] },
-        "valuesByMode": {
-          "type": "object",
-          "description": "Map of modeId → resolved value. COLOR values are serialized as hex strings (#rrggbb or #rrggbbaa). FLOAT/STRING/BOOLEAN are primitives.",
-          "additionalProperties": {}
-        },
-        "scopes": {
-          "type": "array",
-          "items": { "type": "string" },
-          "description": "Figma scopes (e.g. FILL_COLOR, CORNER_RADIUS). Omitted when empty."
-        }
-      }
-    },
-    "StyleSummary": {
-      "type": "object",
-      "required": ["id", "name", "type"],
-      "additionalProperties": false,
-      "properties": {
-        "id":          { "type": "string" },
-        "name":        { "type": "string" },
-        "type":        { "type": "string" },
-        "description": { "type": "string" }
-      }
-    },
-    "ComponentSummary": {
-      "type": "object",
-      "required": ["id", "name", "type"],
-      "additionalProperties": false,
-      "properties": {
-        "id":           { "type": "string" },
-        "name":         { "type": "string" },
-        "type":         { "type": "string", "enum": ["COMPONENT", "COMPONENT_SET"] },
-        "componentName": {
-          "type": "string",
-          "description": "Resolved manifest spec key (from p6-1 resolveComponentName), if matched."
-        },
-        "variants": {
-          "type": "array",
-          "description": "Variant names for COMPONENT_SET nodes.",
-          "items": { "type": "string" }
-        },
-        "properties": {
-          "type": "object",
-          "description": "Component property descriptors (Figma ComponentPropertyDefinitions).",
-          "additionalProperties": {}
-        },
-        "pageId": { "type": "string", "description": "ID of the page that owns this component." },
-        "a11y": { "$ref": "#/definitions/A11yMeta" }
-      }
-    },
-    "SerializedNode": {
-      "description": "p6-1 extractNodeTree shape, extended with slot bindings. Mirrors the selection serializer output exactly so downstream validators receive the same contract whether the input came from a selection or a full-page walk.",
-      "type": "object",
-      "required": ["id", "name", "type"],
-      "additionalProperties": true,
-      "properties": {
-        "id":            { "type": "string" },
-        "name":          { "type": "string" },
-        "type":          { "type": "string" },
-        "width":         { "type": "number" },
-        "height":        { "type": "number" },
-        "x":             { "type": "number" },
-        "y":             { "type": "number" },
-        "fills":         {},
-        "boundVariables": {},
-        "componentName": { "type": "string" },
-        "tokenPaths":    { "type": "object", "additionalProperties": {} },
-        "a11y":          { "$ref": "#/definitions/A11yMeta" },
-        "slotBindings":  { "$ref": "#/definitions/SlotBindings" },
-        "children":      {
-          "type": "array",
-          "items": { "$ref": "#/definitions/SerializedNode" }
-        }
-      }
-    },
-    "A11yMeta": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {
-        "name":        { "type": "string" },
-        "role":        { "type": "string" },
-        "description": { "type": "string" }
-      }
-    },
-    "SlotBindings": {
-      "type": "object",
-      "description": "Asset/portfolio slot assignments stored as plugin data on the node (hdsSlot key).",
-      "additionalProperties": false,
-      "properties": {
-        "slot":    { "type": "string", "description": "Slot identifier, e.g. 'hero-01'." },
-        "assetId": { "type": "string" }
-      }
-    }
-  }
-}