@tendrilapp/cli 0.1.19 → 0.1.20

package/dist/SKILL.md

@@ -20,12 +20,35 @@ Non-negotiables (the CLI enforces these; do not fight them):
 - Sub-bar results are honest, not failures to hide: exit 5 ships the
   bundle with real scores. Report them as they are.
 
-First-run friction: if tendril/Figma tool calls are hitting permission
-prompts, tell the user ONE approval can replace them all and offer
-`tendril_permissions` with `write: true` — it merges the pipeline's
-per-tool allowlist into the project's `.claude/settings.local.json`
-(idempotent, touches nothing else; the user reloads the session to
-apply). Never run it unoffered: it edits the user's settings.
+Permissions, FIRST THING in every pipeline run (the trigger is a FILE
+CHECK, not prompt-watching — you cannot observe permission prompts, so
+never condition on them; a measured session full of prompts had a
+prompt-conditioned offer never fire): check whether ANY Claude
+settings file the host merges — the project's
+`.claude/settings.local.json` or `.claude/settings.json`, or the
+user's `~/.claude/settings.json` — contains tendril MCP entries
+(plugin installs use `mcp__plugin_tendril_tendril__*`; direct
+`claude mcp add` installs use `mcp__<server-name>__*`). If none does,
+BEFORE the first recording call, tell the user one approval can
+replace every pipeline prompt and offer `tendril_permissions` with
+`write: true` — it merges the per-tool allowlist into the project's
+settings.local.json (idempotent, touches nothing else; note it writes
+PLUGIN-prefixed names — a direct-install user should run
+`tendril permissions --claude` and adapt the prefix instead) and the
+user must reload the session to apply; say that out loud. Offer ONCE
+per session; never run it unoffered (it edits the user's settings),
+and if declined, proceed without mentioning it again.
+
+Long generator/score waits: silence is not a health signal. The scorer
+appends a timestamped line to `<candidateDir>/score-history.jsonl`
+after EVERY completed round — the file APPEARS ONLY AFTER THE FIRST
+score, so its absence early in a run is normal, not frozen. Poll it
+(and the candidate dir's mtimes) about every 30 seconds and relay
+progress to the user ("round 3 scored: 15/21 at floor 0.885"). A
+healthy run can take 30+ minutes; never kill on elapsed time alone —
+count staleness from the LAST CHANGE to either signal, not from run
+start, and when past ~20 minutes of true staleness, ask the user
+before killing.
 
 Batch runs (several components in one session):
 - Cap concurrent recorders at FOUR. All recorders share one Figma

package/dist/tendril-mcp.js

@@ -66,7 +66,7 @@ var TOOLS = [
   },
   {
     name: "tendril_permissions",
-    description: "Install the Claude Code permission allowlist for the Tendril pipeline (write: true \u2014 merges per-tool entries into the project's .claude/settings.local.json, idempotent, never touches other settings), or list the entries without writing. USE THIS when tendril/Figma tool calls keep hitting permission prompts: offer it to the user once \u2014 ONE approval here replaces a prompt per pipeline call (run 8 measured 16+ prompts for a single component's recording). The user must reload the session for new settings to apply.",
+    description: "Install the Claude Code permission allowlist for the Tendril pipeline (write: true \u2014 merges per-tool entries into the project's .claude/settings.local.json, idempotent, never touches other settings), or list the entries without writing. OFFER THIS AT PIPELINE START whenever NO merged Claude settings file (project .claude/settings.local.json or .claude/settings.json, or user ~/.claude/settings.json) contains tendril MCP entries \u2014 plugin installs use mcp__plugin_tendril_tendril__*, direct claude-mcp-add installs use mcp__<server>__* (for those, write:true installs PLUGIN-prefixed names that will not match: list without writing and adapt the prefix instead). A FILE check, never prompt-watching \u2014 agents cannot observe permission prompts. ONE approval here replaces a prompt per pipeline call. Never run it unoffered; the user must reload the session for new settings to apply \u2014 say so.",
     schema: z.object({
       write: z.boolean().optional().describe("true = install into .claude/settings.local.json (the point of this tool); false/absent = just return the entries")
     }),

package/dist/tendril.js

@@ -8256,7 +8256,7 @@ function dismissEvidence(setDir, repSlugs) {
   }
   return void 0;
 }
-function recordedFontNeeds(setDir) {
+function recordedFontNeeds(setDir, opts = {}) {
   const byFamily = /* @__PURE__ */ new Map();
   const unpaired = /* @__PURE__ */ new Set();
   const famAdd = (raw, weight) => {
@@ -8298,8 +8298,8 @@ function recordedFontNeeds(setDir) {
     if (existsSync21(defs)) fromDefs(envelopeText(defs));
   }
   return [...byFamily.entries()].map(([family, paired]) => {
-    const weights = /* @__PURE__ */ new Set([...paired, ...unpaired]);
-    return { family, weights: weights.size === 0 ? [400] : [...weights].sort((a, b) => a - b) };
+    const weights = /* @__PURE__ */ new Set([...paired, ...opts.pairedOnly === true ? [] : unpaired]);
+    return { family, weights: weights.size === 0 ? opts.pairedOnly === true ? [] : [400] : [...weights].sort((a, b) => a - b) };
   });
 }
 function symbolFontGlyphCount(setDir, reps) {
@@ -9261,10 +9261,19 @@ function unprovisionedFamilies(setDir, cacheDir) {
   const provided = new Set(verifiedFontFamilies(cacheDir).map((f) => f.family.toLowerCase()));
   return declared.filter((f) => !provided.has(f.toLowerCase()));
 }
+function unprovisionedFaces(setDir, cacheDir) {
+  return [
+    ...unprovisionedFamilies(setDir, cacheDir),
+    ...missingWeights(setDir, cacheDir).map((g) => {
+      const missing = g.declared.filter((w) => !g.provided.includes(w));
+      return `${g.family} (${missing.length === 1 ? "weight" : "weights"} ${missing.join(", ")})`;
+    })
+  ];
+}
 function missingWeights(setDir, cacheDir) {
   let needs;
   try {
-    needs = recordedFontNeeds(setDir);
+    needs = recordedFontNeeds(setDir, { pairedOnly: true });
   } catch {
     return [];
   }
@@ -9468,7 +9477,8 @@ async function runVerify(opts) {
   } else if (opts.bar === "cert" && taskFontFamilies(task.set) === null) {
     warn(opts, "family coverage could not be established from this recording (no declared families) \u2014 the certification gate covers only cache non-emptiness here");
   }
-  for (const g of missingWeights(task.set)) {
+  const weightGaps = missingWeights(task.set);
+  for (const g of weightGaps) {
     warn(opts, `font weights (advisory): the recording implies weights ${g.declared.join(", ")} for "${g.family}" \u2014 cache provides ${g.provided.join(", ")}; nearest-weight rendering may shift stroke density (certification stays family-gated; implied weights can leak across families)`);
   }
   const missing = task.configs.filter(
@@ -9580,7 +9590,8 @@ async function runVerify(opts) {
     // Machine-readable cause (adversarial review): a cert-bar failure
     // with zero pixel/behavior/composition failures was only
     // explainable from stderr prose.
-    ...certBlockedByAbsentInk.length > 0 ? { certBlockedByAbsentInk } : {}
+    ...certBlockedByAbsentInk.length > 0 ? { certBlockedByAbsentInk } : {},
+    ...weightGaps.length > 0 ? { fontWeightGaps: weightGaps } : {}
   };
   emitData(opts, report, () => {
     for (const s of statuses) {
@@ -9672,9 +9683,15 @@ ${certified}/${statuses.length} certified \xB7 ${report.coverage.pass}/${statuse
     const shippedFonts = requiredFontsManifest(cssFontFamilies(["styles.css", "tokens.css"].map((f) => path31.join(opts.bundleDir, f)).filter((f) => existsSync25(f)).map((f) => readFileSync22(f, "utf8")).join("\n")));
     if (shippedFonts.length > 0 && substitutedFamilies.length === 0) {
       process.stdout.write(`fonts: scored with Tendril-cache faces \u2014 a consuming app must provision the same families (the bundle ships fonts.css when faces are shippable; sha-pinned list in component.json requiredFonts)
+`);
+    }
+    for (const g of weightGaps) {
+      process.stdout.write(`fonts (weight gap): "${g.family}" declares ${g.declared.join(", ")} \u2014 cache provides ${g.provided.join(", ")}; nearest-weight rendering may shift stroke density (advisory, never a gate). Fix: tendril fonts resolve --set ${task.set}
 `);
     }
     process.stdout.write(`evidence: ${evidenceDir} (render/ref/diff per config)
+`);
+    process.stdout.write(`eye check: tendril inspect ${opts.bundleDir} \u2014 magnified recorded-vs-rendered crops of every small node; scores cannot see shape
 `);
   });
   if (opts.bar === "cert" && substitutedFamilies.length > 0) {
@@ -9780,8 +9797,9 @@ DO NOT INVENT PIXELS FOR THESE POSES. Implement them ONLY as the composition of
 ${notRecorded}` : "";
   let fontProvisioning;
   if (existsSync26(manifestPath2)) {
-    const provided = verifiedFontFamilies().map((f) => f.family);
-    const unprovided = recordedFontFamilies(task.set).filter((r) => !provided.some((p) => p.toLowerCase() === r.toLowerCase()));
+    const missingFams = unprovisionedFamilies(task.set);
+    const unprovided = unprovisionedFaces(task.set);
+    const weightOnly = missingFams.length === 0;
     if (unprovided.length > 0) {
       const names = unprovided.map((f) => `'${f}'`).join(", ");
       const PROPRIETARY = /^(sf pro|sf compact|sf mono|new york|pingfang|segoe ui|helvetica neue|proxima nova|avenir)/i;
@@ -9789,13 +9807,13 @@ ${notRecorded}` : "";
       fontProvisioning = {
         unprovided,
         question: {
-          prompt: `This design's text uses ${names}, which is not in the local font kit. How should it be handled?`,
+          prompt: weightOnly ? `This design implies font ${unprovided.length === 1 ? "weight" : "weights"} the local kit lacks: ${names} (the ${missingFams.length === 0 && unprovided.length === 1 ? "family itself is" : "families themselves are"} provisioned). How should it be handled?` : `This design's text uses ${names}, which is not in the local font kit. How should it be handled?`,
           options: [
-            allProprietary ? `(Recommended) ${names} ${unprovided.length === 1 ? "is a proprietary face" : "are proprietary faces"} \u2014 Google Fonts cannot serve ${unprovided.length === 1 ? "it" : "them"}, so skip \`fonts resolve\`: run \`tendril fonts add "<Family>" <weight> <file>\` with the .woff2/.ttf/.otf you hold a licence for (the file never leaves this machine), then re-run this brief \u2014 exact text fidelity.` : `(Recommended) Run \`tendril fonts resolve --set ${task.set}\` \u2014 open-source families are fetched automatically. Any face that fails there is one you license privately: run \`tendril fonts add "<Family>" <weight> <file>\` with the .woff2/.ttf/.otf you hold (the file never leaves this machine). Then re-run this brief \u2014 exact text fidelity.`,
-            'Continue with a substitute face: generation proceeds in a provided family, no config can score "certified" under it (cert-bar runs exit fonts-unproven after their report), the substitution is disclosed, and small text differences are expected and not fixable from CSS.'
+            allProprietary && !weightOnly ? `(Recommended) ${names} ${unprovided.length === 1 ? "is a proprietary face" : "are proprietary faces"} \u2014 Google Fonts cannot serve ${unprovided.length === 1 ? "it" : "them"}, so skip \`fonts resolve\`: run \`tendril fonts add "<Family>" <weight> <file>\` with the .woff2/.ttf/.otf you hold a licence for (the file never leaves this machine), then re-run this brief \u2014 exact text fidelity.` : `(Recommended) Run \`tendril fonts resolve --set ${task.set}\` \u2014 open-source families are fetched automatically. Any face that fails there is one you license privately: run \`tendril fonts add "<Family>" <weight> <file>\` with the .woff2/.ttf/.otf you hold (the file never leaves this machine). Then re-run this brief \u2014 exact text fidelity.`,
+            weightOnly ? "Continue with nearest-weight rendering: the family is provisioned, certification remains possible, and the gap rides the report as an advisory (fontWeightGaps); resolving removes it." : 'Continue with a substitute face: generation proceeds in a provided family, no config can score "certified" under it (cert-bar runs exit fonts-unproven after their report), the substitution is disclosed, and small text differences are expected and not fixable from CSS.'
           ]
         },
-        nonInteractive: opts.bar === "cert" ? `Resolve the families first (\`tendril fonts resolve --set ${task.set}\`) \u2014 this loop targets the cert bar, and scoring exits fonts-unproven under a substitute, so continuing without resolving is a dead end.` : "Continue with the substitute and state the substitution in your report."
+        nonInteractive: weightOnly ? `Run \`tendril fonts resolve --set ${task.set}\` if quick, or continue \u2014 the weight gap is an advisory, never a gate.` : opts.bar === "cert" ? `Resolve the families first (\`tendril fonts resolve --set ${task.set}\`) \u2014 this loop targets the cert bar, and scoring exits fonts-unproven under a substitute, so continuing without resolving is a dead end.` : "Continue with the substitute and state the substitution in your report."
       };
     }
   }
@@ -10273,7 +10291,7 @@ var init_server = __esm({
       },
       {
         name: "tendril_permissions",
-        description: "Install the Claude Code permission allowlist for the Tendril pipeline (write: true \u2014 merges per-tool entries into the project's .claude/settings.local.json, idempotent, never touches other settings), or list the entries without writing. USE THIS when tendril/Figma tool calls keep hitting permission prompts: offer it to the user once \u2014 ONE approval here replaces a prompt per pipeline call (run 8 measured 16+ prompts for a single component's recording). The user must reload the session for new settings to apply.",
+        description: "Install the Claude Code permission allowlist for the Tendril pipeline (write: true \u2014 merges per-tool entries into the project's .claude/settings.local.json, idempotent, never touches other settings), or list the entries without writing. OFFER THIS AT PIPELINE START whenever NO merged Claude settings file (project .claude/settings.local.json or .claude/settings.json, or user ~/.claude/settings.json) contains tendril MCP entries \u2014 plugin installs use mcp__plugin_tendril_tendril__*, direct claude-mcp-add installs use mcp__<server>__* (for those, write:true installs PLUGIN-prefixed names that will not match: list without writing and adapt the prefix instead). A FILE check, never prompt-watching \u2014 agents cannot observe permission prompts. ONE approval here replaces a prompt per pipeline call. Never run it unoffered; the user must reload the session for new settings to apply \u2014 say so.",
         schema: z12.object({
           write: z12.boolean().optional().describe("true = install into .claude/settings.local.json (the point of this tool); false/absent = just return the entries")
         }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tendrilapp/cli",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Figma design systems → verified React components. CLI ruler + MCP server.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",