@miller-tech/uap 1.64.3 → 1.65.0

package/dist/design/tokens.d.ts

@@ -0,0 +1,62 @@
+export interface TypographyToken {
+    fontFamily?: string;
+    fontSize?: string;
+    fontWeight?: string | number;
+    lineHeight?: string | number;
+    letterSpacing?: string;
+    fontFeature?: string;
+    fontVariation?: string;
+}
+export interface DesignTokens {
+    version?: string;
+    name?: string;
+    description?: string;
+    colors?: Record<string, string>;
+    typography?: Record<string, TypographyToken>;
+    rounded?: Record<string, string | number>;
+    spacing?: Record<string, string | number>;
+    components?: Record<string, Record<string, string>>;
+}
+export interface ParsedDesign {
+    tokens: DesignTokens;
+    /** Markdown body after the front matter. */
+    prose: string;
+    /** Section heading -> body text, keyed by lowercased `##` title. */
+    sections: Record<string, string>;
+}
+/** Flat, JSON-serializable allow-list consumed by the Python gate. */
+export interface TokenAllowList {
+    name: string;
+    colors: string[];
+    spacing: string[];
+    radii: string[];
+    fontSizes: string[];
+    fontFamilies: string[];
+    generatedFrom: string;
+}
+/** Locate a DESIGN.md in `dir` (project root). Returns absolute path or null. */
+export declare function findDesignFile(dir: string): string | null;
+/** Split a DESIGN.md into YAML front matter + markdown body. */
+export declare function parseDesignMd(content: string): ParsedDesign;
+/** Resolve a `{path.to.token}` reference against the token tree; returns the
+ * raw string for non-references unchanged. */
+export declare function resolveRef(tokens: DesignTokens, value: unknown): string;
+/** Normalize a CSS color for set-membership comparison: lowercase, trim, and
+ * expand `#rgb`/`#rgba` shorthand to the 6/8-digit form. */
+export declare function normalizeColor(c: string): string;
+/** Derive the flat allow-list from a parsed DESIGN.md. */
+export declare function buildAllowList(parsed: ParsedDesign, designPath: string, projectDir: string): TokenAllowList;
+export declare function allowListPath(projectDir: string): string;
+/** Write `.uap/design-tokens.json` (the gate's source of truth). */
+export declare function writeAllowList(projectDir: string, allow: TokenAllowList): string;
+/** Load + parse the project DESIGN.md, or null if none exists. */
+export declare function loadDesign(projectDir: string): {
+    parsed: ParsedDesign;
+    path: string;
+} | null;
+/**
+ * Compact guidance string injected by the reactor when UI/UX work is detected.
+ * Keeps the agent on-token for new UI without re-reading the whole DESIGN.md.
+ */
+export declare function summarizeForReactor(parsed: ParsedDesign, maxChars?: number): string;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/design/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/design/tokens.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMzD;AAED,gEAAgE;AAChE,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CA2B3D;AAED;8CAC8C;AAC9C,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAcvE;AAED;4DAC4D;AAC5D,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQhD;AAQD,0DAA0D;AAC1D,wBAAgB,cAAc,CAC5B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,cAAc,CA2ChB;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,MAAM,CAKhF;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI5F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,SAAM,GAAG,MAAM,CA0BhF"}

package/dist/design/tokens.js

@@ -0,0 +1,185 @@
+/**
+ * DESIGN.md token model.
+ *
+ * Parses a project's DESIGN.md (the Google Labs DESIGN.md format: YAML token
+ * front matter + markdown prose) into a structured token set, resolves
+ * `{token.refs}`, and derives a flat allow-list that the (pure-stdlib) Python
+ * design-token gate consumes from `.uap/design-tokens.json`.
+ *
+ * Spec: https://github.com/google-labs-code/design.md (docs/spec.md).
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join, dirname, relative } from 'path';
+import yaml from 'js-yaml';
+const DESIGN_FILENAMES = ['DESIGN.md', 'design.md', 'Design.md'];
+/** Locate a DESIGN.md in `dir` (project root). Returns absolute path or null. */
+export function findDesignFile(dir) {
+    for (const name of DESIGN_FILENAMES) {
+        const p = join(dir, name);
+        if (existsSync(p))
+            return p;
+    }
+    return null;
+}
+/** Split a DESIGN.md into YAML front matter + markdown body. */
+export function parseDesignMd(content) {
+    let tokens = {};
+    let prose = content;
+    // Front matter must open and close with a line that is exactly `---`.
+    const fm = content.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?/);
+    if (fm) {
+        try {
+            tokens = yaml.load(fm[1]) ?? {};
+        }
+        catch {
+            tokens = {};
+        }
+        prose = content.slice(fm[0].length);
+    }
+    const sections = {};
+    // Split on `##` headings (not `###`).
+    const parts = prose.split(/^##\s+(?!#)/m);
+    for (let i = 1; i < parts.length; i++) {
+        const block = parts[i];
+        const nl = block.indexOf('\n');
+        const heading = (nl === -1 ? block : block.slice(0, nl)).trim().toLowerCase();
+        const body = nl === -1 ? '' : block.slice(nl + 1).trim();
+        sections[heading] = body;
+    }
+    return { tokens, prose: prose.trim(), sections };
+}
+/** Resolve a `{path.to.token}` reference against the token tree; returns the
+ * raw string for non-references unchanged. */
+export function resolveRef(tokens, value) {
+    if (typeof value !== 'string')
+        return String(value ?? '');
+    const m = value.match(/^\{([^}]+)\}$/);
+    if (!m)
+        return value;
+    const path = m[1].split('.');
+    let cur = tokens;
+    for (const key of path) {
+        if (cur && typeof cur === 'object' && key in cur) {
+            cur = cur[key];
+        }
+        else {
+            return value; // unresolved — leave as-is for the linter to flag
+        }
+    }
+    return typeof cur === 'string' ? cur : value;
+}
+/** Normalize a CSS color for set-membership comparison: lowercase, trim, and
+ * expand `#rgb`/`#rgba` shorthand to the 6/8-digit form. */
+export function normalizeColor(c) {
+    let s = c.trim().toLowerCase();
+    const short = s.match(/^#([0-9a-f])([0-9a-f])([0-9a-f])([0-9a-f])?$/);
+    if (short) {
+        const [, r, g, b, a] = short;
+        s = `#${r}${r}${g}${g}${b}${b}${a ? a + a : ''}`;
+    }
+    return s.replace(/\s+/g, '');
+}
+function dimStr(v) {
+    if (v === undefined || v === null)
+        return null;
+    if (typeof v === 'number')
+        return `${v}px`;
+    return String(v).trim();
+}
+/** Derive the flat allow-list from a parsed DESIGN.md. */
+export function buildAllowList(parsed, designPath, projectDir) {
+    const t = parsed.tokens;
+    const colors = new Set();
+    const spacing = new Set();
+    const radii = new Set();
+    const fontSizes = new Set();
+    const fontFamilies = new Set();
+    for (const v of Object.values(t.colors ?? {})) {
+        const resolved = resolveRef(t, v);
+        if (resolved)
+            colors.add(normalizeColor(resolved));
+    }
+    for (const v of Object.values(t.spacing ?? {})) {
+        const d = dimStr(v);
+        if (d)
+            spacing.add(d);
+    }
+    for (const v of Object.values(t.rounded ?? {})) {
+        const d = dimStr(v);
+        if (d)
+            radii.add(d);
+    }
+    for (const ty of Object.values(t.typography ?? {})) {
+        if (ty?.fontSize)
+            fontSizes.add(dimStr(ty.fontSize) ?? '');
+        if (ty?.fontFamily)
+            fontFamilies.add(String(ty.fontFamily).trim().toLowerCase());
+    }
+    // Component tokens may inline literal colors/dimensions too.
+    for (const comp of Object.values(t.components ?? {})) {
+        for (const v of Object.values(comp ?? {})) {
+            const resolved = resolveRef(t, v);
+            if (/^#|^rgb|^hsl|^oklch|^oklab|^lab|^lch|^hwb|^color-mix/i.test(resolved.trim())) {
+                colors.add(normalizeColor(resolved));
+            }
+        }
+    }
+    return {
+        name: t.name ?? 'Untitled',
+        colors: [...colors].filter(Boolean).sort(),
+        spacing: [...spacing].filter(Boolean).sort(),
+        radii: [...radii].filter(Boolean).sort(),
+        fontSizes: [...fontSizes].filter(Boolean).sort(),
+        fontFamilies: [...fontFamilies].filter(Boolean).sort(),
+        generatedFrom: relative(projectDir, designPath) || 'DESIGN.md',
+    };
+}
+export function allowListPath(projectDir) {
+    return join(projectDir, '.uap', 'design-tokens.json');
+}
+/** Write `.uap/design-tokens.json` (the gate's source of truth). */
+export function writeAllowList(projectDir, allow) {
+    const out = allowListPath(projectDir);
+    mkdirSync(dirname(out), { recursive: true });
+    writeFileSync(out, JSON.stringify(allow, null, 2) + '\n');
+    return out;
+}
+/** Load + parse the project DESIGN.md, or null if none exists. */
+export function loadDesign(projectDir) {
+    const p = findDesignFile(projectDir);
+    if (!p)
+        return null;
+    return { parsed: parseDesignMd(readFileSync(p, 'utf-8')), path: p };
+}
+/**
+ * Compact guidance string injected by the reactor when UI/UX work is detected.
+ * Keeps the agent on-token for new UI without re-reading the whole DESIGN.md.
+ */
+export function summarizeForReactor(parsed, maxChars = 900) {
+    const t = parsed.tokens;
+    const lines = [];
+    lines.push(`Apply the project design system "${t.name ?? 'DESIGN.md'}". Use ONLY these tokens for new UI:`);
+    const colorRoles = Object.entries(t.colors ?? {})
+        .slice(0, 8)
+        .map(([k, v]) => `${k}=${resolveRef(t, v)}`);
+    if (colorRoles.length)
+        lines.push(`  colors: ${colorRoles.join(', ')}`);
+    const fams = [...new Set(Object.values(t.typography ?? {}).map((x) => x.fontFamily).filter(Boolean))];
+    if (fams.length)
+        lines.push(`  fonts: ${fams.join(', ')}`);
+    const sp = Object.values(t.spacing ?? {}).map((v) => (typeof v === 'number' ? `${v}px` : v));
+    if (sp.length)
+        lines.push(`  spacing: ${sp.join(', ')}`);
+    const donts = parsed.sections["do's and don'ts"] || parsed.sections['dos and donts'];
+    if (donts) {
+        const firstDont = donts.split('\n').find((l) => /don'?t|avoid|never/i.test(l));
+        if (firstDont)
+            lines.push(`  rule: ${firstDont.replace(/^[-*]\s*/, '').trim()}`);
+    }
+    lines.push('  Hardcoding off-token colors/spacing in UI files is BLOCKED by the design gate.');
+    let out = lines.join('\n');
+    if (out.length > maxChars)
+        out = out.slice(0, maxChars - 1) + '…';
+    return out;
+}
+//# sourceMappingURL=tokens.js.map

package/dist/design/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/design/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAC/C,OAAO,IAAI,MAAM,SAAS,CAAC;AA0C3B,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAEjE,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,MAAM,GAAiB,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAG,OAAO,CAAC;IAEpB,sEAAsE;IACtE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC9D,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,GAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAkB,IAAI,EAAE,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,sCAAsC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED;8CAC8C;AAC9C,MAAM,UAAU,UAAU,CAAC,MAAoB,EAAE,KAAc;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,GAAY,MAAM,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAK,GAA+B,EAAE,CAAC;YAC9E,GAAG,GAAI,GAA+B,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAClE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,CAA8B;IAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAC5B,MAAoB,EACpB,UAAkB,EAClB,UAAkB;IAElB,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,EAAE,EAAE,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,EAAE,EAAE,UAAU;YAAE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,6DAA6D;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,uDAAuD,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAClF,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,UAAU;QAC1B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QAC5C,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACxC,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QAChD,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACtD,aAAa,EAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,WAAW;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACxD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,KAAqB;IACtE,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,QAAQ,GAAG,GAAG;IACtE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,IAAI,IAAI,WAAW,sCAAsC,CAAC,CAAC;IAE5G,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SAC9C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtG,IAAI,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,EAAE,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACrF,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAE/F,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/mcp-router/tools/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/mcp-router/tools/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuBjC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,eAAe,CAqB5D"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/mcp-router/tools/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuBjC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,eAAe,CAuB5D"}

package/dist/mcp-router/tools/react.js

@@ -41,6 +41,8 @@ export function handleReact(args) {
             promptText: args.promptText,
             changedFiles: args.changedFiles,
             surfaced: args.surfaced,
+            // Locate the project DESIGN.md for design-system injection.
+            cwd: process.cwd(),
         };
         const opts = {
             injectThreshold: args.injectThreshold,

package/dist/mcp-router/tools/react.js.map

@@ -1 +1 @@
-{"version":3,"file":"react.js","sourceRoot":"","sources":["../../../src/mcp-router/tools/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,OAAO,IAAI,cAAc,GAG1B,MAAM,+BAA+B,CAAC;AAavC,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,OAAO;IACb,WAAW,EAAE;;yVAE0U;IACvV,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;YAC5E,YAAY,EAAE;gBACZ,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,iCAAiC;aAC/C;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;YACjF,QAAQ,EAAE;gBACR,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,uEAAuE;aACrF;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;CACF,CAAC;AAQF,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAmB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;YAClC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;QACF,MAAM,IAAI,GAAmB;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC"}
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../../../src/mcp-router/tools/react.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,OAAO,IAAI,cAAc,GAG1B,MAAM,+BAA+B,CAAC;AAavC,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,OAAO;IACb,WAAW,EAAE;;yVAE0U;IACvV,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;YAC5E,YAAY,EAAE;gBACZ,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,iCAAiC;aAC/C;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;YACjF,QAAQ,EAAE;gBACR,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,uEAAuE;aACrF;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;CACF,CAAC;AAQF,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAmB;YAC1B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa;YAClC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,4DAA4D;YAC5D,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SACnB,CAAC;QACF,MAAM,IAAI,GAAmB;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "1.64.3",
+  "version": "1.65.0",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",

package/src/policies/enforcers/design_token_gate.py

@@ -0,0 +1,145 @@
+#!/usr/bin/env python3
+"""design-token gate: UI edits must stay on the project's DESIGN.md token system.
+
+A Write/Edit/MultiEdit to a UI file (.css/.scss/.tsx/.jsx/.vue/.svelte/.html/...)
+whose proposed content introduces a hardcoded color or spacing value NOT present
+in the project's design tokens is **blocked**. The agent must use a DESIGN.md
+token (or a CSS var), add the value to DESIGN.md (`uap design sync`), or bypass.
+
+The token allow-list is generated by `uap design interrogate|sync` into
+`.uap/design-tokens.json` (so this enforcer needs no YAML parser). If that file
+is absent, the gate is INACTIVE and fails open — DESIGN.md is opt-in per project.
+
+Mirrors src/design/gate.ts. Escape hatch: UAP_DESIGN_GATE_OFF=1.
+"""
+from __future__ import annotations
+
+import json
+import os
+import re
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).parent))
+from _common import emit, parse_cli, repo_root, worktree_root  # noqa: E402
+
+PATH_WRITE_OPS = {"Write", "Edit", "MultiEdit", "write", "edit", "multiedit"}
+UI_EXT = {".css", ".scss", ".sass", ".less", ".tsx", ".jsx", ".vue", ".svelte", ".html", ".astro"}
+SPACING_IGNORE = {"0px", "1px", "2px", "3px", "4px"}
+
+HEX_RE = re.compile(r"#[0-9a-fA-F]{3,8}\b")
+FUNC_COLOR_RE = re.compile(r"\b(?:rgba?|hsla?|hwb|oklch|oklab|lch|lab)\([^)]*\)", re.IGNORECASE)
+PX_RE = re.compile(r"\b\d{1,4}px\b")
+VAR_RE = re.compile(r"var\(--[^)]*\)")
+# A DESIGN.md token reference is a dotted path in braces (e.g. {colors.primary}).
+# Must NOT match CSS declaration blocks like `{color:#fff;}` (they contain
+# colons/semicolons), or the scanner would strip whole rules before checking.
+REF_RE = re.compile(r"\{[\w.-]+\}")
+
+
+def _norm_color(c: str) -> str:
+    s = c.strip().lower()
+    m = re.match(r"^#([0-9a-f])([0-9a-f])([0-9a-f])([0-9a-f])?$", s)
+    if m:
+        r, g, b, a = m.groups()
+        s = f"#{r}{r}{g}{g}{b}{b}{(a + a) if a else ''}"
+    return re.sub(r"\s+", "", s)
+
+
+def _allow_list() -> dict | None:
+    for root in (worktree_root(), repo_root()):
+        p = root / ".uap" / "design-tokens.json"
+        if p.exists():
+            try:
+                return json.loads(p.read_text())
+            except Exception:  # noqa: BLE001
+                return None
+    return None
+
+
+def _target_path(args: dict) -> str:
+    for key in ("file_path", "path", "notebook_path", "filePath", "target"):
+        if args.get(key):
+            return str(args[key])
+    return ""
+
+
+def _proposed_content(op: str, args: dict) -> str:
+    # Write: full content. Edit: the inserted text. MultiEdit: all inserts.
+    if args.get("content"):
+        return str(args["content"])
+    if args.get("new_string"):
+        return str(args["new_string"])
+    edits = args.get("edits")
+    if isinstance(edits, list):
+        return "\n".join(str(e.get("new_string", "")) for e in edits if isinstance(e, dict))
+    return ""
+
+
+def _scan(content: str, allow: dict) -> tuple[list[str], list[str]]:
+    allow_colors = {_norm_color(c) for c in allow.get("colors", [])}
+    allow_spacing = set(allow.get("spacing", [])) | set(allow.get("radii", [])) | set(allow.get("fontSizes", []))
+    off_colors: list[str] = []
+    off_spacing: list[str] = []
+
+    for raw in content.split("\n"):
+        t = raw.strip()
+        if t.startswith("//") or t.startswith("*") or t.startswith("/*"):
+            continue
+        line = REF_RE.sub("", VAR_RE.sub("", raw))
+        for m in HEX_RE.finditer(line):
+            if _norm_color(m.group(0)) not in allow_colors:
+                off_colors.append(m.group(0))
+        for m in FUNC_COLOR_RE.finditer(line):
+            if re.sub(r"\s+", "", m.group(0).lower()) not in allow_colors:
+                off_colors.append(m.group(0))
+        for m in PX_RE.finditer(line):
+            px = m.group(0)
+            if px not in SPACING_IGNORE and px not in allow_spacing:
+                off_spacing.append(px)
+
+    return off_colors, off_spacing
+
+
+def main() -> None:
+    op, args = parse_cli()
+
+    if os.environ.get("UAP_DESIGN_GATE_OFF") == "1":
+        emit(True, "UAP_DESIGN_GATE_OFF override set")
+    if op not in PATH_WRITE_OPS:
+        emit(True, "not a file-write operation")
+
+    target = _target_path(args)
+    if Path(target).suffix.lower() not in UI_EXT:
+        emit(True, "not a UI file")
+
+    allow = _allow_list()
+    if not allow:
+        emit(True, "no DESIGN.md token allow-list (.uap/design-tokens.json) — gate inactive")
+
+    content = _proposed_content(op, args)
+    if not content:
+        emit(True, "no proposed content to scan")
+
+    off_colors, off_spacing = _scan(content, allow)
+    if not off_colors and not off_spacing:
+        emit(True, "on-token UI edit")
+
+    name = allow.get("name", "DESIGN.md")
+    palette = ", ".join(allow.get("colors", [])[:5])
+    spacing_scale = ", ".join(allow.get("spacing", []))
+    lines = [f'design-token gate: this UI edit introduces values not in the "{name}" design system.']
+    if off_colors:
+        uniq = list(dict.fromkeys(off_colors))[:6]
+        lines.append(f"  off-token colors: {', '.join(uniq)}")
+        lines.append(f"  → use a DESIGN.md color token ({palette}{', …' if len(allow.get('colors', [])) > 5 else ''}) or a CSS var.")
+    if off_spacing:
+        uniq = list(dict.fromkeys(off_spacing))[:6]
+        lines.append(f"  off-scale spacing: {', '.join(uniq)}")
+        lines.append(f"  → use a spacing token ({spacing_scale or 'define spacing in DESIGN.md'}).")
+    lines.append("  Add the value to DESIGN.md (then `uap design sync`), reference a token, or bypass with UAP_DESIGN_GATE_OFF=1.")
+    emit(False, "\n".join(lines))
+
+
+if __name__ == "__main__":
+    main()

package/src/policies/schemas/policies/design-token-gate.md

@@ -0,0 +1,38 @@
+# design-token-gate
+
+**Category**: quality
+**Level**: REQUIRED
+**Enforcement Stage**: pre-exec
+**Tags**: design, ui, ux, tokens, design-system
+
+## Rule
+
+A `Write`, `Edit`, or `MultiEdit` to a UI file (`.css`, `.scss`, `.tsx`, `.jsx`,
+`.vue`, `.svelte`, `.html`, `.astro`) whose proposed content hardcodes a color
+or spacing value that is NOT part of the project's DESIGN.md token system is
+**blocked**. The agent must use an existing design token (or CSS var), add the
+value to `DESIGN.md` and re-sync, or bypass explicitly.
+
+On-token (allowed): values present in the token allow-list, `var(--…)` usages,
+`{token.ref}` references, and structural hairlines (`0–4px`). The gate is
+**inactive** (fails open) when a project has no `DESIGN.md` / token allow-list.
+
+## Why
+
+DESIGN.md gives agents a persistent, structured understanding of a project's
+visual identity. Without enforcement, new UI drifts off-system — ad-hoc hex
+colors and off-scale spacing accumulate until the design system is fiction. The
+gate keeps new UI on-token so the design system stays the real source of truth.
+
+## Enforcement
+
+Python enforcer `design_token_gate.py` reads `.uap/design-tokens.json` (generated
+by `uap design interrogate|sync` from the project DESIGN.md — no YAML parser
+needed) and scans the proposed content for off-token colors/spacing. Mirrors
+`src/design/gate.ts`. Escape hatch: `UAP_DESIGN_GATE_OFF=1`.
+
+```rules
+- title: "New UI must use DESIGN.md design tokens, not hardcoded colors/spacing"
+  keywords: [css, color, theme, ui, ux, button, component, style, tailwind, design]
+  antiPatterns: ["#hex", "rgb(", "hardcoded color", "off-scale spacing"]
+```

package/tools/agents/scripts/anthropic_proxy.py

@@ -1005,6 +1005,14 @@ class SessionMonitor:
     # back into a structured tool_use, which would continue the very loop the
     # breaker is ending. Reset to False at the start of every request.
     suppress_text_tool_extraction: bool = False
+    # Tool-turn count at which the TURN-COUNT FINALIZE BREAKER last fired. The
+    # count is derived from the (only-growing) conversation, so without this the
+    # breaker would re-fire on EVERY turn once the ceiling is first crossed —
+    # permanently stripping tools and stalling a legitimately long agentic task.
+    # Gating on (last + ceiling) makes it a PERIODIC nudge (80, 160, 240, ...)
+    # with tools restored in between, so long tasks complete while a true runaway
+    # still gets bounded (and the contamination/prune/cycle breakers catch faster).
+    last_hard_finalize_turn_count: int = 0
     finalize_continuation_count: int = 0
     finalize_hard_stop_count: int = 0  # monotonic, not reset by fresh user text
     finalize_synthetic_tool_id: str = ""
@@ -4095,7 +4103,14 @@ def build_openai_request(
         # genuine runaway trips it; see PROXY_HARD_FINALIZE_TURNS.
         if PROXY_HARD_FINALIZE_TURNS > 0:
             _agent_tool_turns = _count_agent_tool_turns(anthropic_body)
-            if _agent_tool_turns >= PROXY_HARD_FINALIZE_TURNS:
+            # PERIODIC, not permanent: fire once each time the count crosses
+            # another `ceiling` worth of tool turns past the last firing. Without
+            # the `last + ceiling` gate this fires on EVERY turn past the first
+            # crossing (the count only grows), permanently denying tools and
+            # stalling a long-but-legitimate task. Between fires tools are restored
+            # so the agent keeps making progress.
+            if _agent_tool_turns >= monitor.last_hard_finalize_turn_count + PROXY_HARD_FINALIZE_TURNS:
+                monitor.last_hard_finalize_turn_count = _agent_tool_turns
                 openai_body.pop("tool_choice", None)
                 openai_body.pop("tools", None)
                 openai_body.pop("grammar", None)
@@ -4103,11 +4118,12 @@ def build_openai_request(
                 msgs.append({
                     "role": "user",
                     "content": (
-                        f"You have made {_agent_tool_turns} tool calls without "
-                        "converging on a final answer. STOP now. No tools are "
-                        "available this turn. Reply with a brief plain-text summary "
-                        "of what you accomplished and what remains. Do NOT emit any "
-                        "tool call or tool-call-like syntax."
+                        f"You have made {_agent_tool_turns} tool calls. Pause for a "
+                        "progress checkpoint: in a brief plain-text summary, state "
+                        "what is done and the single most important next step. No "
+                        "tools are available this turn — do NOT emit any tool call "
+                        "or tool-call-like syntax. If the task is complete, say so; "
+                        "otherwise you will continue on the next turn."
                     ),
                 })
                 openai_body["messages"] = msgs

package/tools/agents/tests/test_turn_count_breaker_periodic.py

@@ -0,0 +1,64 @@
+#!/usr/bin/env python3
+"""The TURN-COUNT FINALIZE BREAKER must fire PERIODICALLY, not on every turn once
+the ceiling is first crossed.
+
+`_count_agent_tool_turns` is derived from the (only-growing) conversation, so the
+naive `count >= ceiling` check re-fires on every request past the first crossing —
+permanently stripping tools and stalling a legitimately long agentic task (observed
+live: msgs 206→208→…→214, breaker every turn, then the client gives up). Gating on
+`count >= last_hard_finalize_turn_count + ceiling` makes it fire at ceiling, 2x,
+3x… with tools restored in between.
+"""
+
+import importlib.util
+import unittest
+from pathlib import Path
+
+
+def _load():
+    p = Path(__file__).resolve().parents[1] / "scripts" / "anthropic_proxy.py"
+    spec = importlib.util.spec_from_file_location("anthropic_proxy", p)
+    m = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(m)
+    return m
+
+
+proxy = _load()
+CEILING = 80
+
+
+def _fire_turns(counts):
+    """Replay the breaker's gating decision (as in build_openai_request) over a
+    sequence of cumulative tool-turn counts; return the counts at which it fired."""
+    m = proxy.SessionMonitor(context_window=100000)
+    fired = []
+    for count in counts:
+        if count >= m.last_hard_finalize_turn_count + CEILING:
+            m.last_hard_finalize_turn_count = count
+            fired.append(count)
+    return fired
+
+
+class TestTurnCountBreakerPeriodic(unittest.TestCase):
+    def test_monitor_has_the_field_defaulting_zero(self):
+        m = proxy.SessionMonitor(context_window=100000)
+        self.assertEqual(m.last_hard_finalize_turn_count, 0)
+
+    def test_fires_periodically_not_every_turn(self):
+        # cumulative tool turns 1..244 (grows by 1 each request)
+        fired = _fire_turns(range(1, 245))
+        # periodic at the ceiling multiples — NOT every turn past 80
+        self.assertEqual(fired, [80, 160, 240])
+
+    def test_does_not_refire_between_crossings(self):
+        # turns 80..159 -> fires once at 80, then silent until 160
+        fired = _fire_turns(range(80, 160))
+        self.assertEqual(fired, [80])
+
+    def test_first_fire_at_ceiling(self):
+        self.assertEqual(_fire_turns(range(1, 81)), [80])
+        self.assertEqual(_fire_turns(range(1, 80)), [])  # never reaches ceiling
+
+
+if __name__ == "__main__":
+    unittest.main()