@nebutra/design-sync 2.0.0 → 3.0.0

package/README.md

@@ -1,4 +1,4 @@
-> **Status: Foundation** — provider interface, detection, git-only path, and CLI are complete. Figma + Penpot live pushes are intentionally guarded behind `dryRun` until the operator opts in. See `DESIGN.md` for the rollout plan.
+> **Status: Foundation** — provider interface, detection, git-only path, and CLI are complete. See `DESIGN.md` for the design rationale.
 
 # @nebutra/design-sync
 
@@ -8,9 +8,8 @@ Provider-agnostic design-tool sync. The application code never imports a specifi
 
 | Provider | Customer profile | Cost | China-friendly | Status |
 |----------|------------------|------|----------------|--------|
-| `figma` | North-American / global teams with a Figma seat (Tokens Studio plugin) | Figma + Tokens Studio | No (Figma blocked) | dry-run, pull works |
-| `penpot` | Self-hosted / privacy-first / China compliance | Free / self-host | Yes (self-hostable) | dry-run scaffold |
 | `git-only` | Indie hackers, AI-driven dev workflows, "no designer" teams | Free | Yes | full |
+| `design-md` | AI-native workflows — DESIGN.md as the design surface | Free | Yes | full |
 | `memory` | CI / unit tests | Free | n/a | full (test fixture) |
 
 ## Quick start
@@ -18,14 +17,14 @@ Provider-agnostic design-tool sync. The application code never imports a specifi
 ```ts
 import { getDesignSync } from "@nebutra/design-sync";
 
-// Auto-detects the provider from environment variables.
+// Auto-detects the provider from environment variables (defaults to git-only).
 const sync = await getDesignSync();
 
 // Pull design-tool → repo (DTCG JSON files under packages/design/design-tokens/tokens).
 const result = await sync.pull();
 console.log(result.summary);
 
-// Push repo → design-tool. Defaults to dry-run on figma/penpot
+// Push repo → design-tool. Defaults to dry-run on design-md
 // until you opt in by providing credentials.
 await sync.push({ dryRun: true });
 
@@ -37,10 +36,8 @@ const status = await sync.healthcheck();
 
 | Priority | Condition | Provider |
 |----------|-----------|----------|
-| 1 | `DESIGN_SYNC_PROVIDER` set to `figma` / `penpot` / `git-only` / `memory` | as specified |
-| 2 | `FIGMA_PERSONAL_ACCESS_TOKEN` **and** `FIGMA_FILE_ID` present | `figma` |
-| 3 | `PENPOT_API_URL` **and** `PENPOT_TOKEN` present | `penpot` |
-| 4 | fallback | `git-only` |
+| 1 | `DESIGN_SYNC_PROVIDER` set to `git-only` / `design-md` / `memory` | as specified |
+| 2 | fallback | `git-only` |
 
 `memory` is never auto-detected; it must be requested explicitly (used in tests).
 
@@ -48,19 +45,10 @@ const status = await sync.healthcheck();
 
 ```env
 # Optional — force a specific provider
-DESIGN_SYNC_PROVIDER=""              # figma | penpot | git-only | memory
-
-# Figma
-FIGMA_PERSONAL_ACCESS_TOKEN=""       # https://help.figma.com/hc/en-us/articles/8085703771159
-FIGMA_FILE_ID=""                     # the :file_key segment of the Figma URL
-FIGMA_GITHUB_REPO="Nebutra/Nebutra-Sailor"
-FIGMA_GITHUB_BRANCH="main"
-
-# Penpot
-PENPOT_API_URL="https://design.penpot.app/api"  # or your self-host URL
-PENPOT_TOKEN=""
-PENPOT_FILE_ID=""
-PENPOT_TEAM_ID=""
+DESIGN_SYNC_PROVIDER=""              # git-only | design-md | memory
+
+# design-md
+DESIGN_MD_PATH=""                    # defaults to <cwd>/DESIGN.md
 ```
 
 ## CLI
@@ -77,7 +65,7 @@ pnpm --filter @nebutra/design-sync exec design-sync healthcheck
 # Pull design-tool → repo.
 pnpm --filter @nebutra/design-sync exec design-sync pull
 
-# Push repo → design-tool (defaults to dry-run on figma/penpot).
+# Push repo → design-tool (defaults to dry-run on design-md).
 pnpm --filter @nebutra/design-sync exec design-sync push --dry-run
 
 # Restrict to specific token sets.
@@ -92,9 +80,8 @@ pnpm --filter @nebutra/design-sync exec design-sync detect --json
 
 ## Choosing a provider
 
-- **You have a Figma file + designers** → use `figma`. The Tokens Studio plugin owns the git transport (push/pull DTCG to a GitHub branch). The provider validates `.tokens-studio/` metadata and re-reads the DTCG mirror written by the plugin.
-- **You self-host or operate inside mainland China** → use `penpot`. It speaks DTCG natively and can be self-hosted; the provider exposes the same `pull/push/healthcheck` surface so you migrate by flipping one env var.
 - **You ship without a design tool (indie hacker, AI-first dev)** → use `git-only`. Zero config. The DTCG files under `packages/design/design-tokens/tokens` *are* the source of truth.
+- **You want an AI-native design surface** → use `design-md`. Push/pull a `DESIGN.md` file (markdown + YAML front matter) that models and humans can both read and edit directly, with an official lint gate before writes.
 - **You write tests** → inject `MemoryProvider` directly via `setDesignSync(...)`.
 
 ## How DTCG flows through the package
@@ -104,14 +91,10 @@ packages/design/design-tokens/tokens/*.json   ← single source of truth (W3C DT
                   ▲
                   │ pull()  /  push()
                   ▼
-       DesignSyncProvider (figma | penpot | git-only | memory)
+       DesignSyncProvider (git-only | design-md | memory)
                   │
                   ▼
-       remote design tool (or local files for git-only)
+       DESIGN.md or local files (git-only)
 ```
 
 Every provider goes through the same DTCG validator (`validateDtcgTree`) before sending data anywhere; bad token files fail closed before they reach a remote API.
-
-## Migration from `.tokens-studio/`
-
-The legacy Tokens Studio config (`.tokens-studio/{config,metadata,themes}.json`) is preserved at the repo root for the plugin to discover, **and** mirrored into `src/figma-config/tokens-studio.config.json` so the figma provider self-documents. Update both files in lock-step if the plugin schema changes.

package/dist/cli/index.js

@@ -86,12 +86,12 @@ Commands:
   detect            Print the resolved provider + env diagnostics
   healthcheck       Run the provider's healthcheck()
   pull              Pull design-tool → repo (DTCG JSON)
-  push              Push repo → design-tool (defaults to dry-run on figma/penpot/design-md)
+  push              Push repo → design-tool (defaults to dry-run on design-md)
   brand             Pull tokens then compile a Brand Package (Create Center)
   help              Show this message
 
 Options:
-  --provider <X>    Override provider (figma|penpot|git-only|memory|design-md)
+  --provider <X>    Override provider (git-only|memory|design-md)
   --themes a,b      Restrict to specific token sets
   --id <id>         Brand package id (for brand command)
   --name <name>     Brand package display name

package/dist/detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAuBtD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,sBAAsB,GAAG,SAAS,CAOpC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,sBAAsB,CAa3F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,sBAAsB,CAAC;CAClC,CA2BA"}
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAmBtD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,sBAAsB,GAAG,SAAS,CAOpC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,sBAAsB,CAK3F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,sBAAsB,CAAC;CAClC,CAgBA"}

package/dist/detect.js

@@ -3,16 +3,12 @@
 // =============================================================================
 // Resolution order (highest priority first):
 //   1. DESIGN_SYNC_PROVIDER env var (explicit)
-//   2. FIGMA_PERSONAL_ACCESS_TOKEN + FIGMA_FILE_ID  → "figma"
-//   3. PENPOT_API_URL + PENPOT_TOKEN                → "penpot"
-//   4. fallback                                      → "git-only"
+//   2. fallback                                      → "git-only"
 //
 // `memory` and `design-md` are never auto-detected; they must be requested
 // explicitly via the DESIGN_SYNC_PROVIDER env var or a config object.
 // =============================================================================
 const VALID_PROVIDERS = new Set([
-    "figma",
-    "penpot",
     "git-only",
     "memory",
     "design-md",
@@ -38,14 +34,6 @@ export function detectProvider(env = process.env) {
     const explicit = readConfiguredProvider(env);
     if (explicit)
         return explicit;
-    const figmaToken = env.FIGMA_PERSONAL_ACCESS_TOKEN?.trim();
-    const figmaFileId = env.FIGMA_FILE_ID?.trim();
-    if (figmaToken && figmaFileId)
-        return "figma";
-    const penpotUrl = env.PENPOT_API_URL?.trim();
-    const penpotToken = env.PENPOT_TOKEN?.trim();
-    if (penpotUrl && penpotToken)
-        return "penpot";
     return "git-only";
 }
 /**
@@ -55,18 +43,7 @@ export function detectProvider(env = process.env) {
 export function describeEnv(env = process.env) {
     const detected = [];
     const missing = [];
-    const known = [
-        "DESIGN_SYNC_PROVIDER",
-        "FIGMA_PERSONAL_ACCESS_TOKEN",
-        "FIGMA_FILE_ID",
-        "FIGMA_GITHUB_REPO",
-        "FIGMA_GITHUB_BRANCH",
-        "PENPOT_API_URL",
-        "PENPOT_TOKEN",
-        "PENPOT_FILE_ID",
-        "PENPOT_TEAM_ID",
-        "DESIGN_MD_PATH",
-    ];
+    const known = ["DESIGN_SYNC_PROVIDER", "DESIGN_MD_PATH"];
     for (const key of known) {
         if (env[key]?.trim())
             detected.push(key);

package/dist/factory.d.ts

@@ -7,22 +7,11 @@ import type { DesignSyncConfig, DesignSyncProvider } from "./types";
  * // Auto-detect from environment
  * const sync = await createDesignSync();
  *
- * // Explicit Figma
- * const sync = await createDesignSync({
- *   provider: "figma",
- *   personalAccessToken: process.env.FIGMA_PERSONAL_ACCESS_TOKEN,
- *   fileId: "abc123",
- * });
- *
- * // Explicit Penpot
- * const sync = await createDesignSync({
- *   provider: "penpot",
- *   apiUrl: "https://design.penpot.app/api",
- *   token: process.env.PENPOT_TOKEN,
- * });
- *
  * // Explicit git-only (zero config)
  * const sync = await createDesignSync({ provider: "git-only" });
+ *
+ * // Explicit design-md
+ * const sync = await createDesignSync({ provider: "design-md" });
  * ```
  */
 export declare function createDesignSync(config?: DesignSyncConfig): Promise<DesignSyncProvider>;

package/dist/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAA0B,MAAM,SAAS,CAAC;AAe5F;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuC7F;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAKjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAEhE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../src/factory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAA0B,MAAM,SAAS,CAAC;AAgB5F;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2B7F;AAED;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAKjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAEhE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC"}

package/dist/factory.js

@@ -6,9 +6,10 @@ import { detectProvider } from "./detect";
 // The factory resolves the correct provider at runtime based on:
 //   1. Explicit config passed to `createDesignSync()`
 //   2. `DESIGN_SYNC_PROVIDER` environment variable
-//   3. Auto-detection from FIGMA_* / PENPOT_* env vars
+//   3. fallback → git-only
 //
-// This lets customers switch design tools without changing application code.
+// This lets customers switch between the git-only workflow and the AI-native
+// DESIGN.md serialization without changing application code.
 // =============================================================================
 let defaultProvider = null;
 /**
@@ -19,38 +20,17 @@ let defaultProvider = null;
  * // Auto-detect from environment
  * const sync = await createDesignSync();
  *
- * // Explicit Figma
- * const sync = await createDesignSync({
- *   provider: "figma",
- *   personalAccessToken: process.env.FIGMA_PERSONAL_ACCESS_TOKEN,
- *   fileId: "abc123",
- * });
- *
- * // Explicit Penpot
- * const sync = await createDesignSync({
- *   provider: "penpot",
- *   apiUrl: "https://design.penpot.app/api",
- *   token: process.env.PENPOT_TOKEN,
- * });
- *
  * // Explicit git-only (zero config)
  * const sync = await createDesignSync({ provider: "git-only" });
+ *
+ * // Explicit design-md
+ * const sync = await createDesignSync({ provider: "design-md" });
  * ```
  */
 export async function createDesignSync(config) {
     const providerType = config?.provider ?? detectProvider();
     logger.info("[design-sync] Creating provider", { provider: providerType });
     switch (providerType) {
-        case "figma": {
-            const { FigmaProvider } = await import("./providers/figma");
-            const figmaConfig = config?.provider === "figma" ? config : undefined;
-            return new FigmaProvider(figmaConfig ?? { provider: "figma" });
-        }
-        case "penpot": {
-            const { PenpotProvider } = await import("./providers/penpot");
-            const penpotConfig = config?.provider === "penpot" ? config : undefined;
-            return new PenpotProvider(penpotConfig ?? { provider: "penpot" });
-        }
         case "git-only": {
             const { GitOnlyProvider } = await import("./providers/git-only");
             const gitConfig = config?.provider === "git-only" ? config : undefined;

package/dist/index.d.ts

@@ -1,16 +1,12 @@
 export { describeEnv, detectProvider, readConfiguredProvider } from "./detect";
 export { createDesignSync, getDesignSync, resetDesignSync, setDesignSync, } from "./factory";
-export type { FigmaTokensStudioConfig } from "./figma-config/index";
-export { FIGMA_TOKENS_STUDIO_CONFIG } from "./figma-config/index";
 export { defaultTokensDir, defaultTokensStudioDir, readTokenSets, validateDtcgTree, writeTokenSet, } from "./io";
 export type { DesignMdProvider } from "./providers/design-md";
-export { FigmaProvider } from "./providers/figma";
 export { GitOnlyProvider } from "./providers/git-only";
 export { MemoryProvider } from "./providers/memory";
-export { PenpotProvider } from "./providers/penpot";
 export { compileBrandFromTokenSets, mergeTokenTrees, pullAndCompileBrand, serializeToBrandCss, type ToBrandPackageOptions, tokenSetsToReferoShape, } from "./serialize/to-brand-package";
 export { serializeToDesignMd, type ToDesignMdOptions } from "./serialize/to-design-md";
 export { serializeToPreviewHtml, type ToPreviewHtmlOptions, } from "./serialize/to-preview-html";
-export type { BaseProviderConfig, DesignMdProviderConfig, DesignSyncConfig, DesignSyncProvider, DesignSyncProviderType, DesignTokenLeaf, DesignTokenSet, DesignTokenTree, FigmaProviderConfig, GitOnlyProviderConfig, HealthStatus, MemoryProviderConfig, PenpotProviderConfig, PullOptions, PullResult, PushOptions, PushResult, } from "./types";
+export type { BaseProviderConfig, DesignMdProviderConfig, DesignSyncConfig, DesignSyncProvider, DesignSyncProviderType, DesignTokenLeaf, DesignTokenSet, DesignTokenTree, GitOnlyProviderConfig, HealthStatus, MemoryProviderConfig, PullOptions, PullResult, PushOptions, PushResult, } from "./types";
 export { DesignTokenLeafSchema } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAE/E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,MAAM,CAAC;AASd,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,EACZ,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAE/E,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EAChB,aAAa,GACd,MAAM,MAAM,CAAC;AASd,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,OAAO,EACL,sBAAsB,EACtB,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -2,8 +2,6 @@
 // @nebutra/design-sync — Provider-agnostic design-tool sync
 // =============================================================================
 // Supports:
-//   - Figma + Tokens Studio  (DTCG via GitHub, plugin owns the transport)
-//   - Penpot                  (REST API, self-hostable, China-friendly)
 //   - git-only                (zero-config default — DTCG files only)
 //   - memory                  (test fixture)
 //   - design-md               (AI-native DESIGN.md, markdown + YAML front matter)
@@ -20,14 +18,10 @@
 export { describeEnv, detectProvider, readConfiguredProvider } from "./detect";
 // ── Factory ─────────────────────────────────────────────────────────────────
 export { createDesignSync, getDesignSync, resetDesignSync, setDesignSync, } from "./factory";
-// ── Figma config snapshot ───────────────────────────────────────────────────
-export { FIGMA_TOKENS_STUDIO_CONFIG } from "./figma-config/index";
 // ── DTCG I/O helpers (re-exported for advanced consumers) ───────────────────
 export { defaultTokensDir, defaultTokensStudioDir, readTokenSets, validateDtcgTree, writeTokenSet, } from "./io";
-export { FigmaProvider } from "./providers/figma";
 export { GitOnlyProvider } from "./providers/git-only";
 export { MemoryProvider } from "./providers/memory";
-export { PenpotProvider } from "./providers/penpot";
 // ── DTCG → Brand Package (Create Center) ───────────────────────────────────
 export { compileBrandFromTokenSets, mergeTokenTrees, pullAndCompileBrand, serializeToBrandCss, tokenSetsToReferoShape, } from "./serialize/to-brand-package";
 // ── DTCG → DESIGN.md serializer ────────────────────────────────────────────

package/dist/io.js

@@ -5,8 +5,8 @@ import { DesignTokenLeafSchema } from "./types";
 // DTCG Filesystem I/O
 // =============================================================================
 // Shared helpers used by every provider. Reading and writing the canonical
-// W3C DTCG JSON tree on disk is identical across Figma / Penpot / git-only —
-// the only thing that differs is what the provider does AFTER it has the data.
+// W3C DTCG JSON tree on disk is identical across every provider — the only
+// thing that differs is what the provider does AFTER it has the data.
 // =============================================================================
 const TOKEN_FILE_EXT = ".json";
 /**

package/dist/serialize/to-preview-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"to-preview-html.d.ts","sourceRoot":"","sources":["../../src/serialize/to-preview-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAkB/C,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EAAE,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CA2CR"}
+{"version":3,"file":"to-preview-html.d.ts","sourceRoot":"","sources":["../../src/serialize/to-preview-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAkB/C,MAAM,WAAW,oBAAoB;IACnC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,cAAc,EAAE,EACtB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CA2CR"}

package/dist/serialize/to-preview-html.js

@@ -14,6 +14,7 @@
  * PURE: no filesystem I/O, no @google/design.md dependency.
  * Only imports from `../types`, `./to-design-md.resolve`, and `./to-preview-html.template`.
  */
+import { tokenColor } from "@nebutra/tokens/values";
 import { buildIndex, buildIndexForSet, buildRounded, buildTypography, resolveColorRoles, } from "./to-design-md.resolve";
 import { buildDocument, cssAttrValue, escapeHtml, } from "./to-preview-html.template";
 /**
@@ -61,16 +62,21 @@ export function serializeToPreviewHtml(sets, options) {
     });
 }
 // ─── CSS variable builder ──────────────────────────────────────────────────────
-function buildCssVars(colors, _mode) {
+/**
+ * A role the DESIGN.md does not set falls back to the House token for that
+ * mode, read from @nebutra/tokens/values — the value the apps render — rather
+ * than a hex restated here (the old dark fallbacks were pre-House Slate).
+ */
+function buildCssVars(colors, mode) {
     return {
-        primary: colors.primary ?? "#0033fe",
-        accent: colors.accent ?? "#0bf1c3",
-        tertiary: colors.tertiary ?? "#8b5cf6",
-        danger: colors.danger ?? "#ef4444",
-        warning: colors.warning ?? "#f59e0b",
-        success: colors.success ?? "#22c55e",
-        background: colors.background ?? (_mode === "light" ? "#ffffff" : "#0a0a0a"),
-        foreground: colors.foreground ?? (_mode === "light" ? "#0f172a" : "#fafafa"),
+        primary: colors.primary ?? tokenColor("--brand-primary", mode),
+        accent: colors.accent ?? tokenColor("--brand-accent", mode),
+        tertiary: colors.tertiary ?? tokenColor("--brand-tertiary", mode),
+        danger: colors.danger ?? tokenColor("--status-danger", mode),
+        warning: colors.warning ?? tokenColor("--status-warning", mode),
+        success: colors.success ?? tokenColor("--status-success", mode),
+        background: colors.background ?? tokenColor("--background", mode),
+        foreground: colors.foreground ?? tokenColor("--foreground", mode),
     };
 }
 // ─── Section builders ──────────────────────────────────────────────────────────

package/dist/serialize/to-preview-html.template.d.ts

@@ -29,8 +29,8 @@ export declare function escapeHtml(value: string): string;
  *     remaining angle brackets become `<`/`>`.
  *
  * Example:
- *   cssAttrValue('"Geist", "Noto Sans SC", sans-serif')
- *   → '"Geist", "Noto Sans SC", sans-serif'
+ *   cssAttrValue('"Geist", "MiSans", sans-serif')
+ *   → '"Geist", "MiSans", sans-serif'
  *
  *   cssAttrValue('red;display:none')
  *   → 'reddisplay:none'   (semicolon stripped before HTML-escape)

package/dist/serialize/to-preview-html.template.js

@@ -37,8 +37,8 @@ export function escapeHtml(value) {
  *     remaining angle brackets become `<`/`>`.
  *
  * Example:
- *   cssAttrValue('"Geist", "Noto Sans SC", sans-serif')
- *   → '"Geist", "Noto Sans SC", sans-serif'
+ *   cssAttrValue('"Geist", "MiSans", sans-serif')
+ *   → '"Geist", "MiSans", sans-serif'
  *
  *   cssAttrValue('red;display:none')
  *   → 'reddisplay:none'   (semicolon stripped before HTML-escape)

package/dist/types.d.ts

@@ -2,13 +2,11 @@ import { z } from "zod";
 /**
  * Supported design-sync backend providers.
  *
- * - `figma`      — Figma + Tokens Studio plugin (DTCG via GitHub provider sync)
- * - `penpot`     — Penpot REST API (self-hostable, China-friendly)
  * - `git-only`   — No design tool; reads/writes local DTCG files directly
  * - `memory`     — In-memory test fixture (CI / unit tests only)
  * - `design-md`  — AI-native DESIGN.md format (@google/design.md) — markdown + YAML front matter
  */
-export type DesignSyncProviderType = "figma" | "penpot" | "git-only" | "memory" | "design-md";
+export type DesignSyncProviderType = "git-only" | "memory" | "design-md";
 /**
  * A W3C Design Tokens Community Group (DTCG) leaf token.
  * Every leaf MUST carry both `$value` and `$type`.
@@ -43,7 +41,7 @@ export interface DesignTokenSet {
 export interface PullOptions {
     /**
      * Optional theme/token-set filter. When omitted, all sets are pulled.
-     * Provider-specific naming applies (e.g. Figma collection IDs).
+     * Provider-specific naming applies.
      */
     themes?: string[];
     /**
@@ -59,7 +57,7 @@ export interface PushOptions {
     themes?: string[];
     /**
      * If true, the provider should compute the diff but NOT call the remote API.
-     * `figma.push({ dryRun: true })` is the default until the user opts in.
+     * `design-md.push({ dryRun: true })` is the default until the user opts in.
      */
     dryRun?: boolean;
     /** Tenant scoping */
@@ -142,28 +140,6 @@ export interface BaseProviderConfig {
      */
     tokensStudioDir?: string;
 }
-export interface FigmaProviderConfig extends BaseProviderConfig {
-    provider: "figma";
-    /** Figma personal access token. Defaults to `process.env.FIGMA_PERSONAL_ACCESS_TOKEN`. */
-    personalAccessToken?: string;
-    /** Figma file ID (the `:file_key` segment in the URL). */
-    fileId?: string;
-    /** GitHub repo (owner/name) used by the Tokens Studio plugin sync. */
-    githubRepo?: string;
-    /** GitHub branch the plugin pushes to. Defaults to `main`. */
-    githubBranch?: string;
-}
-export interface PenpotProviderConfig extends BaseProviderConfig {
-    provider: "penpot";
-    /** Penpot API URL — public cloud or self-hosted. */
-    apiUrl?: string;
-    /** Penpot personal access token. */
-    token?: string;
-    /** Penpot file ID. */
-    fileId?: string;
-    /** Penpot team / workspace ID. */
-    teamId?: string;
-}
 export interface GitOnlyProviderConfig extends BaseProviderConfig {
     provider: "git-only";
 }
@@ -187,5 +163,5 @@ export interface DesignMdProviderConfig extends BaseProviderConfig {
      */
     description?: string;
 }
-export type DesignSyncConfig = FigmaProviderConfig | PenpotProviderConfig | GitOnlyProviderConfig | MemoryProviderConfig | DesignMdProviderConfig;
+export type DesignSyncConfig = GitOnlyProviderConfig | MemoryProviderConfig | DesignMdProviderConfig;
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAI9F;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAOlB,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,eAAe,CAAC;CAClD,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,MAAM,EAAE,eAAe,CAAC;CACzB;AAID,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oBAAoB;IACpB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,oBAAoB;IACpB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAID;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAEtC;;;OAGG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD;;;;OAIG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACtC;AAID;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,EAAE,QAAQ,CAAC;IACnB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,EAAE,QAAQ,CAAC;IACnB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,QAAQ,EAAE,WAAW,CAAC;IACtB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,GACpB,sBAAsB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AAIzE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAOlB,CAAC;AAEjB,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,eAAe,CAAC;CAClD,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,MAAM,EAAE,eAAe,CAAC;CACzB;AAID,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,uEAAuE;IACvE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oBAAoB;IACpB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,oBAAoB;IACpB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAID;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAEtC;;;OAGG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD;;;;OAIG;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjD;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACtC;AAID;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,EAAE,QAAQ,CAAC;IACnB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,QAAQ,EAAE,WAAW,CAAC;IACtB,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,oBAAoB,GACpB,sBAAsB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nebutra/design-sync",
-  "version": "2.0.0",
-  "description": "Provider-agnostic design-tool sync. Figma + Tokens Studio | Penpot | git-only | design-md | memory.",
+  "version": "3.0.0",
+  "description": "Provider-agnostic design-tool sync. git-only | design-md | memory.",
   "private": false,
   "license": "MIT",
   "type": "module",
@@ -10,19 +10,15 @@
     "status": "foundation",
     "productionReady": false,
     "requires": [
-      "FIGMA_PERSONAL_ACCESS_TOKEN + FIGMA_FILE_ID for Figma + Tokens Studio",
-      "or PENPOT_API_URL + PENPOT_TOKEN for Penpot (self-hostable, China-friendly)",
-      "or nothing — git-only is the zero-config default"
+      "nothing — git-only is the zero-config default"
     ],
     "gaps": [
-      "Figma push (Variables REST API) is dry-run; manual enable required",
-      "Penpot adapter implements healthcheck + pull; push is dry-run scaffolding",
       "No real-time webhook listeners (manual pull/push only)",
       "design-md provider depends on @google/design.md (alpha v0.x); pinned exactly — a 0.x bump may change linter rules and require re-validating the serializer output"
     ],
     "featureId": "design-sync",
     "category": "design",
-    "summary": "Provider-agnostic design-tool sync (Figma | Penpot | git-only | design-md)"
+    "summary": "Provider-agnostic design-tool sync (git-only | design-md)"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -39,14 +35,6 @@
       "types": "./dist/serialize/from-design-md.d.ts",
       "import": "./dist/serialize/from-design-md.js"
     },
-    "./figma": {
-      "types": "./dist/providers/figma.d.ts",
-      "import": "./dist/providers/figma.js"
-    },
-    "./penpot": {
-      "types": "./dist/providers/penpot.d.ts",
-      "import": "./dist/providers/penpot.js"
-    },
     "./git-only": {
       "types": "./dist/providers/git-only.d.ts",
       "import": "./dist/providers/git-only.js"
@@ -74,8 +62,8 @@
   "dependencies": {
     "@google/design.md": "0.2.0",
     "zod": "^4.3.6",
-    "@nebutra/logger": "2.0.0",
-    "@nebutra/tokens": "2.0.0"
+    "@nebutra/logger": "3.0.0",
+    "@nebutra/tokens": "3.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",

package/src/cli/index.ts

@@ -97,12 +97,12 @@ Commands:
   detect            Print the resolved provider + env diagnostics
   healthcheck       Run the provider's healthcheck()
   pull              Pull design-tool → repo (DTCG JSON)
-  push              Push repo → design-tool (defaults to dry-run on figma/penpot/design-md)
+  push              Push repo → design-tool (defaults to dry-run on design-md)
   brand             Pull tokens then compile a Brand Package (Create Center)
   help              Show this message
 
 Options:
-  --provider <X>    Override provider (figma|penpot|git-only|memory|design-md)
+  --provider <X>    Override provider (git-only|memory|design-md)
   --themes a,b      Restrict to specific token sets
   --id <id>         Brand package id (for brand command)
   --name <name>     Brand package display name

package/dist/figma-config/index.d.ts

@@ -1,37 +0,0 @@
-import figmaPluginConfig from "./tokens-studio.config.json";
-export declare const FIGMA_TOKENS_STUDIO_CONFIG: {
-    $schema: string;
-    name: string;
-    version: string;
-    description: string;
-    syncProvider: string;
-    git: {
-        repository: string;
-        defaultBranch: string;
-        syncBranchPrefix: string;
-        tokenPath: string;
-        themesPath: string;
-        metadataPath: string;
-    };
-    format: {
-        spec: string;
-        indent: number;
-        trailingNewline: boolean;
-        useUiCompatibleTypes: boolean;
-    };
-    storage: {
-        multiFile: boolean;
-        tokenSetSeparator: string;
-    };
-    permissions: {
-        allowDestructiveSync: boolean;
-        requirePullRequest: boolean;
-        protectedSets: string[];
-    };
-    ui: {
-        language: string;
-        showThemeMatrix: boolean;
-    };
-};
-export type FigmaTokensStudioConfig = typeof figmaPluginConfig;
-//# sourceMappingURL=index.d.ts.map

package/dist/figma-config/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/figma-config/index.ts"],"names":[],"mappings":"AAWA,OAAO,iBAAiB,MAAM,6BAA6B,CAAuB;AAElF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAoB,CAAC;AAE5D,MAAM,MAAM,uBAAuB,GAAG,OAAO,iBAAiB,CAAC"}

package/dist/figma-config/index.js

@@ -1,12 +0,0 @@
-// =============================================================================
-// Tokens Studio config — canonical copy owned by @nebutra/design-sync
-// =============================================================================
-// The original `.tokens-studio/config.json` lives at the repo root because the
-// Tokens Studio plugin pins its config-discovery path. We keep an in-package
-// canonical copy here so the figma provider can self-document and so a sync
-// CLI can scaffold the file when initialising a fresh repo.
-//
-// If the plugin's config schema changes, update both files in lock-step.
-// =============================================================================
-import figmaPluginConfig from "./tokens-studio.config.json" with { type: "json" };
-export const FIGMA_TOKENS_STUDIO_CONFIG = figmaPluginConfig;

package/dist/figma-config/tokens-studio.config.json

@@ -1,34 +0,0 @@
-{
-    "$schema": "https://raw.githubusercontent.com/tokens-studio/figma-plugin/main/schemas/tokens-studio-config.schema.json",
-    "name": "Nebutra Design Tokens",
-    "version": "0.1.0",
-    "description": "Bidirectional sync between Tokens Studio for Figma and packages/design-tokens (W3C DTCG). Owned by @nebutra/design-sync's figma provider.",
-    "syncProvider": "github",
-    "git": {
-        "repository": "Nebutra/Nebutra-Sailor",
-        "defaultBranch": "main",
-        "syncBranchPrefix": "tokens-studio/",
-        "tokenPath": "packages/design/design-tokens/tokens",
-        "themesPath": ".tokens-studio/themes.json",
-        "metadataPath": ".tokens-studio/metadata.json"
-    },
-    "format": {
-        "spec": "dtcg",
-        "indent": 2,
-        "trailingNewline": true,
-        "useUiCompatibleTypes": true
-    },
-    "storage": {
-        "multiFile": true,
-        "tokenSetSeparator": "/"
-    },
-    "permissions": {
-        "allowDestructiveSync": false,
-        "requirePullRequest": true,
-        "protectedSets": ["core", "semantic"]
-    },
-    "ui": {
-        "language": "en",
-        "showThemeMatrix": true
-    }
-}

package/dist/providers/figma.d.ts

@@ -1,21 +0,0 @@
-import type { DesignSyncProvider, FigmaProviderConfig, HealthStatus, PullOptions, PullResult, PushOptions, PushResult } from "../types";
-export declare class FigmaProvider implements DesignSyncProvider {
-    readonly name: "figma";
-    private readonly tokensDir;
-    private readonly tokensStudioDir;
-    private readonly personalAccessToken;
-    private readonly fileId;
-    private readonly githubRepo;
-    private readonly githubBranch;
-    constructor(config: FigmaProviderConfig);
-    pull(options?: PullOptions): Promise<PullResult>;
-    push(options?: PushOptions): Promise<PushResult>;
-    healthcheck(): Promise<HealthStatus>;
-    /**
-     * Assert that `.tokens-studio/{config,metadata,themes}.json` exist + parse.
-     * The plugin refuses to load the design system if any of these are missing
-     * or malformed; surfacing the failure here prevents silent drift.
-     */
-    private assertTokensStudioMetadata;
-}
-//# sourceMappingURL=figma.d.ts.map

package/dist/providers/figma.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"figma.d.ts","sourceRoot":"","sources":["../../src/providers/figma.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACX,MAAM,UAAU,CAAC;AAyBlB,qBAAa,aAAc,YAAW,kBAAkB;IACtD,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IAEjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,MAAM,EAAE,mBAAmB;IAgBjC,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAiBpD,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAiDpD,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAwC1C;;;;OAIG;YACW,0BAA0B;CA+BzC"}

package/dist/providers/figma.js

@@ -1,179 +0,0 @@
-import { readFile, stat } from "node:fs/promises";
-import { join } from "node:path";
-import { logger } from "@nebutra/logger";
-import { defaultTokensDir, defaultTokensStudioDir, readTokenSets, validateDtcgTree } from "../io";
-// =============================================================================
-// Figma Provider — Figma + Tokens Studio
-// =============================================================================
-// Architecture (matches the legacy `.tokens-studio/config.json` setup):
-//
-//   Figma (Tokens Studio plugin) ──► GitHub branch ──► repo (DTCG JSON)
-//                              ▲                             │
-//                              └─── pull from main ──────────┘
-//
-// The plugin owns the git transport. This provider:
-//   - validates that the Tokens Studio config + DTCG tree are well-formed
-//   - "pull" reads the DTCG files the plugin already wrote to git
-//   - "push" is a dry-run scaffold for the Figma Variables REST API
-//     (PATCH /v1/files/:file_key/variables) — the user must opt in by
-//     providing FIGMA_PERSONAL_ACCESS_TOKEN + FIGMA_FILE_ID and removing
-//     the early-exit guard.
-//
-// All Tokens Studio metadata that previously lived in `.tokens-studio/` is
-// still consumed from disk so the existing designer onboarding does not break.
-// =============================================================================
-const FIGMA_API_ROOT = "https://api.figma.com";
-export class FigmaProvider {
-    name = "figma";
-    tokensDir;
-    tokensStudioDir;
-    personalAccessToken;
-    fileId;
-    githubRepo;
-    githubBranch;
-    constructor(config) {
-        this.tokensDir = config.tokensDir ?? defaultTokensDir();
-        this.tokensStudioDir = config.tokensStudioDir ?? defaultTokensStudioDir();
-        this.personalAccessToken =
-            config.personalAccessToken ?? process.env.FIGMA_PERSONAL_ACCESS_TOKEN ?? undefined;
-        this.fileId = config.fileId ?? process.env.FIGMA_FILE_ID ?? undefined;
-        this.githubRepo = config.githubRepo ?? process.env.FIGMA_GITHUB_REPO ?? undefined;
-        this.githubBranch = config.githubBranch ?? process.env.FIGMA_GITHUB_BRANCH ?? "main";
-        logger.info("[design-sync:figma] Provider initialised", {
-            tokensDir: this.tokensDir,
-            hasToken: Boolean(this.personalAccessToken),
-            hasFileId: Boolean(this.fileId),
-        });
-    }
-    async pull(options = {}) {
-        // Tokens Studio plugin already wrote DTCG files to git on `pull`.
-        // We just re-read them from disk and (optionally) validate Tokens
-        // Studio metadata so the result mirrors what the plugin would emit.
-        const sets = await readTokenSets(this.tokensDir);
-        const filtered = filterSets(sets, options.themes);
-        await this.assertTokensStudioMetadata();
-        return {
-            sets: filtered,
-            written: false,
-            provider: "figma",
-            pulledAt: new Date().toISOString(),
-            summary: `figma: read ${filtered.length} DTCG token set(s) (Tokens Studio plugin owns the git transport)`,
-        };
-    }
-    async push(options = {}) {
-        // Pre-flight: validate DTCG before attempting any remote call.
-        const all = await readTokenSets(this.tokensDir);
-        const sets = filterSets(all, options.themes);
-        for (const set of sets) {
-            const errors = validateDtcgTree(set.tokens);
-            if (errors.length > 0) {
-                throw new Error(`[design-sync:figma] DTCG validation failed for ${set.relativePath}:\n  - ${errors.join("\n  - ")}`);
-            }
-        }
-        const credsReady = Boolean(this.personalAccessToken && this.fileId);
-        const explicitDryRun = options.dryRun ?? false;
-        const dryRun = explicitDryRun || !credsReady;
-        if (dryRun) {
-            logger.warn("[design-sync:figma] push skipped (dry-run scaffold)", {
-                reason: credsReady ? "explicit dryRun" : "missing credentials",
-                sets: sets.length,
-            });
-            return {
-                pushed: false,
-                sets: sets.map((s) => s.relativePath),
-                provider: "figma",
-                pushedAt: new Date().toISOString(),
-                summary: credsReady
-                    ? `figma: dry-run — would PATCH ${sets.length} set(s) to ${FIGMA_API_ROOT}/v1/files/${this.fileId}/variables`
-                    : "figma: dry-run — FIGMA_PERSONAL_ACCESS_TOKEN or FIGMA_FILE_ID not set",
-                dryRun: true,
-            };
-        }
-        // Real push placeholder — kept guarded until the user opts in.
-        // The integration will call the Figma Variables REST API:
-        //   PATCH /v1/files/:file_key/variables
-        //   X-Figma-Token: <personalAccessToken>
-        // See https://www.figma.com/developers/api#variables
-        throw new Error("[design-sync:figma] live push to Figma Variables REST API is not yet implemented. " +
-            "Use { dryRun: true } or unset FIGMA_PERSONAL_ACCESS_TOKEN until the integration is wired up. " +
-            "See packages/design/design-sync/DESIGN.md for the rollout plan.");
-    }
-    async healthcheck() {
-        const detected = [];
-        const missing = [];
-        if (this.personalAccessToken)
-            detected.push("FIGMA_PERSONAL_ACCESS_TOKEN");
-        else
-            missing.push("FIGMA_PERSONAL_ACCESS_TOKEN");
-        if (this.fileId)
-            detected.push("FIGMA_FILE_ID");
-        else
-            missing.push("FIGMA_FILE_ID");
-        if (this.githubRepo)
-            detected.push("FIGMA_GITHUB_REPO");
-        if (this.githubBranch)
-            detected.push(`FIGMA_GITHUB_BRANCH=${this.githubBranch}`);
-        let tokensStudioOk = true;
-        let tokensStudioMessage = "";
-        try {
-            await this.assertTokensStudioMetadata();
-        }
-        catch (error) {
-            tokensStudioOk = false;
-            tokensStudioMessage = error.message;
-            missing.push("tokens-studio metadata");
-        }
-        const ok = missing.length === 0 && tokensStudioOk;
-        return {
-            ok,
-            provider: "figma",
-            message: ok
-                ? "figma: credentials present + Tokens Studio metadata valid"
-                : `figma: not ready — ${[
-                    missing.length > 0 ? `missing ${missing.join(", ")}` : "",
-                    tokensStudioMessage,
-                ]
-                    .filter(Boolean)
-                    .join("; ")}`,
-            detectedEnv: detected,
-            missingEnv: missing,
-        };
-    }
-    /**
-     * Assert that `.tokens-studio/{config,metadata,themes}.json` exist + parse.
-     * The plugin refuses to load the design system if any of these are missing
-     * or malformed; surfacing the failure here prevents silent drift.
-     */
-    async assertTokensStudioMetadata() {
-        const required = ["config.json", "metadata.json", "themes.json"];
-        const errors = [];
-        try {
-            const info = await stat(this.tokensStudioDir);
-            if (!info.isDirectory()) {
-                throw new Error(`${this.tokensStudioDir} is not a directory`);
-            }
-        }
-        catch (error) {
-            throw new Error(`[design-sync:figma] Tokens Studio metadata directory missing at ${this.tokensStudioDir}: ${error.message}`);
-        }
-        for (const file of required) {
-            const path = join(this.tokensStudioDir, file);
-            try {
-                const raw = await readFile(path, "utf8");
-                JSON.parse(raw);
-            }
-            catch (error) {
-                errors.push(`${path}: ${error.message}`);
-            }
-        }
-        if (errors.length > 0) {
-            throw new Error(`[design-sync:figma] Tokens Studio metadata invalid:\n  - ${errors.join("\n  - ")}`);
-        }
-    }
-}
-function filterSets(sets, themes) {
-    if (!themes || themes.length === 0)
-        return sets;
-    const wanted = new Set(themes);
-    return sets.filter((s) => wanted.has(s.name) || wanted.has(s.relativePath));
-}

package/dist/providers/penpot.d.ts

@@ -1,21 +0,0 @@
-import type { DesignSyncProvider, HealthStatus, PenpotProviderConfig, PullOptions, PullResult, PushOptions, PushResult } from "../types";
-export declare class PenpotProvider implements DesignSyncProvider {
-    readonly name: "penpot";
-    private readonly tokensDir;
-    private readonly tokensStudioDir;
-    private readonly apiUrl;
-    private readonly token;
-    private readonly fileId;
-    private readonly teamId;
-    constructor(config: PenpotProviderConfig);
-    pull(options?: PullOptions): Promise<PullResult>;
-    push(options?: PushOptions): Promise<PushResult>;
-    healthcheck(): Promise<HealthStatus>;
-    /**
-     * Reserved for future use — exposes the configured tokens-studio directory
-     * so consumers (e.g. CI workflows) can attach Penpot-side metadata mirrors.
-     */
-    getTokensStudioDir(): string;
-    private credsReady;
-}
-//# sourceMappingURL=penpot.d.ts.map

package/dist/providers/penpot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"penpot.d.ts","sourceRoot":"","sources":["../../src/providers/penpot.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACX,MAAM,UAAU,CAAC;AAmBlB,qBAAa,cAAe,YAAW,kBAAkB;IACvD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAElC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;gBAEhC,MAAM,EAAE,oBAAoB;IAelC,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BpD,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IA8CpD,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC;IAyB1C;;;OAGG;IACH,kBAAkB,IAAI,MAAM;IAI5B,OAAO,CAAC,UAAU;CAGnB"}

package/dist/providers/penpot.js

@@ -1,137 +0,0 @@
-import { logger } from "@nebutra/logger";
-import { defaultTokensDir, defaultTokensStudioDir, readTokenSets, validateDtcgTree } from "../io";
-// =============================================================================
-// Penpot Provider — China-friendly + self-hostable Figma alternative
-// =============================================================================
-// Penpot speaks DTCG natively (one of its differentiators) and exposes a
-// public REST API. The provider is wired with full surface area so customers
-// can swap providers without changing application code, but real network
-// calls stay behind a `dryRun || !credsReady` guard until the operator
-// explicitly provisions PENPOT_TOKEN.
-//
-// Why this matters:
-//   - Penpot can be self-hosted, sidesteps the Figma block in mainland China.
-//   - DTCG-native means we do not need a translation step like with Figma.
-//   - Tokens Studio plugin also targets Penpot — designers keep the same UX.
-// =============================================================================
-const DEFAULT_PENPOT_API = "https://design.penpot.app/api";
-export class PenpotProvider {
-    name = "penpot";
-    tokensDir;
-    tokensStudioDir;
-    apiUrl;
-    token;
-    fileId;
-    teamId;
-    constructor(config) {
-        this.tokensDir = config.tokensDir ?? defaultTokensDir();
-        this.tokensStudioDir = config.tokensStudioDir ?? defaultTokensStudioDir();
-        this.apiUrl = config.apiUrl ?? process.env.PENPOT_API_URL ?? DEFAULT_PENPOT_API;
-        this.token = config.token ?? process.env.PENPOT_TOKEN ?? undefined;
-        this.fileId = config.fileId ?? process.env.PENPOT_FILE_ID ?? undefined;
-        this.teamId = config.teamId ?? process.env.PENPOT_TEAM_ID ?? undefined;
-        logger.info("[design-sync:penpot] Provider initialised", {
-            apiUrl: this.apiUrl,
-            hasToken: Boolean(this.token),
-            hasFileId: Boolean(this.fileId),
-        });
-    }
-    async pull(options = {}) {
-        if (!this.credsReady()) {
-            // No credentials → fall through to local DTCG, mirroring git-only.
-            const sets = await readTokenSets(this.tokensDir);
-            const filtered = filterSets(sets, options.themes);
-            logger.warn("[design-sync:penpot] pull falling back to local DTCG (no PENPOT_TOKEN)");
-            return {
-                sets: filtered,
-                written: false,
-                provider: "penpot",
-                pulledAt: new Date().toISOString(),
-                summary: `penpot: PENPOT_TOKEN missing — returned ${filtered.length} local DTCG set(s)`,
-            };
-        }
-        // Real pull placeholder — when wired up, this calls:
-        //   GET {apiUrl}/rpc/command/get-file?id={fileId}
-        //   Authorization: Token {token}
-        // and projects the design-tokens collection back into DTCG sets.
-        // See https://design.penpot.app/api/docs for the full RPC catalogue.
-        throw new Error("[design-sync:penpot] live pull is not yet implemented. " +
-            "Unset PENPOT_TOKEN to fall back to local DTCG, or open packages/design/design-sync/DESIGN.md for the rollout plan.");
-    }
-    async push(options = {}) {
-        const all = await readTokenSets(this.tokensDir);
-        const sets = filterSets(all, options.themes);
-        for (const set of sets) {
-            const errors = validateDtcgTree(set.tokens);
-            if (errors.length > 0) {
-                throw new Error(`[design-sync:penpot] DTCG validation failed for ${set.relativePath}:\n  - ${errors.join("\n  - ")}`);
-            }
-        }
-        const credsReady = this.credsReady();
-        const explicitDryRun = options.dryRun ?? false;
-        const dryRun = explicitDryRun || !credsReady;
-        if (dryRun) {
-            logger.warn("[design-sync:penpot] push skipped (dry-run scaffold)", {
-                reason: credsReady ? "explicit dryRun" : "missing credentials",
-                sets: sets.length,
-            });
-            return {
-                pushed: false,
-                sets: sets.map((s) => s.relativePath),
-                provider: "penpot",
-                pushedAt: new Date().toISOString(),
-                summary: credsReady
-                    ? `penpot: dry-run — would POST ${sets.length} DTCG set(s) to ${this.apiUrl}/rpc/command/update-file-design-tokens`
-                    : "penpot: dry-run — PENPOT_TOKEN or PENPOT_FILE_ID missing",
-                dryRun: true,
-            };
-        }
-        // Real push placeholder — when wired up, this calls:
-        //   POST {apiUrl}/rpc/command/update-file-design-tokens
-        //   Authorization: Token {token}
-        //   body: { fileId, tokens: dtcgTree }
-        throw new Error("[design-sync:penpot] live push is not yet implemented. " +
-            "Use { dryRun: true } until the Penpot RPC integration is wired up.");
-    }
-    async healthcheck() {
-        const detected = [];
-        const missing = [];
-        if (this.token)
-            detected.push("PENPOT_TOKEN");
-        else
-            missing.push("PENPOT_TOKEN");
-        if (this.fileId)
-            detected.push("PENPOT_FILE_ID");
-        else
-            missing.push("PENPOT_FILE_ID");
-        if (this.teamId)
-            detected.push("PENPOT_TEAM_ID");
-        detected.push(`PENPOT_API_URL=${this.apiUrl}`);
-        const ok = missing.length === 0;
-        return {
-            ok,
-            provider: "penpot",
-            message: ok
-                ? `penpot: credentials present (api=${this.apiUrl})`
-                : `penpot: not ready — missing ${missing.join(", ")}`,
-            detectedEnv: detected,
-            missingEnv: missing,
-        };
-    }
-    /**
-     * Reserved for future use — exposes the configured tokens-studio directory
-     * so consumers (e.g. CI workflows) can attach Penpot-side metadata mirrors.
-     */
-    getTokensStudioDir() {
-        return this.tokensStudioDir;
-    }
-    credsReady() {
-        return Boolean(this.token && this.fileId);
-    }
-}
-function filterSets(sets, themes) {
-    if (!themes || themes.length === 0)
-        return sets;
-    const wanted = new Set(themes);
-    return sets.filter((s) => wanted.has(s.name) || wanted.has(s.relativePath));
-}