@tendrilapp/cli 0.1.36 → 0.1.37

package/dist/tendril.js

@@ -1067,10 +1067,10 @@ function planSet(setDir, component, symbols, opts = {}) {
     const scopeUpgraded = opts.variantScope === "component-set" && existing.variantScope !== "component-set";
     if (opts.variantScope === "component-set") {
       raw["variantScope"] = "component-set";
-      const variants = symbols.map((s) => s.name).filter((n) => n.includes("="));
-      if (variants.length > 0 && (scopeUpgraded || variants.length > (existing.latticeNames ?? []).length)) {
-        raw["latticeNames"] = variants;
-      }
+    }
+    const variants = symbols.map((s) => s.name).filter((n) => n.includes("="));
+    if (variants.length > 0 && (scopeUpgraded || variants.length > (existing.latticeNames ?? []).length)) {
+      raw["latticeNames"] = variants;
     }
     if (!wantsNewDefaults || anythingRecorded) {
       if (opts.sample !== true) {
@@ -2759,7 +2759,7 @@ var init_tsc_check = __esm({
 // packages/verify/src/token-lint.ts
 import strictValue from "stylelint-declaration-strict-value";
 import stylelint from "stylelint";
-async function runTokenLint(css, fileLabel = "generated.css", definedVars2, recordedMapEmpty = false) {
+async function runTokenLint(css, fileLabel = "generated.css", definedVars2, recordedMapEmpty = false, recordedTokensByValue2) {
   const result = await stylelint.lint({
     code: css,
     codeFilename: fileLabel,
@@ -2777,7 +2777,11 @@ async function runTokenLint(css, fileLabel = "generated.css", definedVars2, reco
       // noise in the highest-attention output. The finding stays (a
       // matching token SHOULD be referenced when one exists); the
       // message now carries the escape hatch.
-      message: w.rule === "scale-unlimited/declaration-strict-value" ? `${w.text} \u2014 ADVISORY: reference the design token if the kit provides one; if it does not, the literal is CORRECT \u2014 never invent a token name (the recorded token map captures one pose's variables and is known-partial)` : w.text
+      message: w.rule === "scale-unlimited/declaration-strict-value" ? (() => {
+        const literal = /"([^"]+)"/.exec(w.text)?.[1] ?? /\b(#[0-9a-fA-F]{3,8}|-?\d*\.?\d+(?:px|rem|em|%))\b/.exec(w.text)?.[1];
+        const token = literal === void 0 ? void 0 : recordedTokensByValue2?.get(literal.trim().toLowerCase());
+        return token !== void 0 ? `${w.text} \u2014 the recorded token map HAS a token for this value: "${token}". Reference it (and emit it in tokens.css) rather than the literal; this is not the known-partial case` : `${w.text} \u2014 ADVISORY: reference the design token if the kit provides one; if it does not, the literal is CORRECT \u2014 never invent a token name (the recorded token map captures one pose's variables and is known-partial)`;
+      })() : w.text
     }))
   );
   const ownDefs = /* @__PURE__ */ new Set();
@@ -6183,6 +6187,28 @@ function recordedTokenMapState(setDir, reps) {
   }
   return recorded ? "empty" : "never-recorded";
 }
+function recordedTokensByValue(setDir, reps) {
+  const byValue = /* @__PURE__ */ new Map();
+  const readMap = (file) => {
+    if (!existsSync14(file)) return void 0;
+    try {
+      const parsed = JSON.parse(envelopeFirstTextPart(JSON.parse(readFileSync11(file, "utf8"))) || "{}");
+      return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+    } catch {
+      return void 0;
+    }
+  };
+  const absorb = (m) => {
+    for (const [name, value] of Object.entries(m ?? {})) {
+      if (typeof value !== "string") continue;
+      const key = value.trim().toLowerCase();
+      if (key !== "" && !byValue.has(key)) byValue.set(key, name);
+    }
+  };
+  absorb(readMap(path19.join(setDir, "get_variable_defs.json")));
+  for (const rep of reps) absorb(readMap(path19.join(setDir, rep, "get_variable_defs.json")));
+  return byValue;
+}
 function scannable(css) {
   const blank = (m) => m.replace(/[^\n]/g, " ");
   return css.replace(/\/\*[^]*?\*\//g, blank).replace(/@font-face\s*{[^}]*}/g, blank);
@@ -6284,7 +6310,8 @@ async function checkBundleQuality(bundleDir, entry, set, fontManifest, motion, c
   }
   if (css !== "") {
     const mapState = set === void 0 ? void 0 : recordedTokenMapState(set.dir, set.reps);
-    for (const v of (await runTokenLint(css, "styles.css", definedVars(tokensCss), mapState !== void 0 && mapState !== "populated")).violations) {
+    const tokensByValue = set === void 0 ? void 0 : recordedTokensByValue(set.dir, set.reps);
+    for (const v of (await runTokenLint(css, "styles.css", definedVars(tokensCss), mapState !== void 0 && mapState !== "populated", tokensByValue)).violations) {
       findings.push({ kind: "token-lint", file: "styles.css", line: v.line, message: v.message });
     }
     if (mapState === "never-recorded") {
@@ -11885,7 +11912,7 @@ function motionBriefSection(setDir) {
   const truthBlock = truth.state === "recorded" ? `RECORDED MOTION TRUTH (verbatim from the set's get_motion_context recording \u2014 where it states concrete durations/curves for a transition, those WIN over the default tiers below for THAT transition; where it is ambiguous, fall back to the tiers and say so in your report \u2014 never invent motion the recording does not state):
 ${truth.text.length > RECORDED_QUOTE_CAP ? `${truth.text.slice(0, RECORDED_QUOTE_CAP)}
 [truncated at ${RECORDED_QUOTE_CAP} chars \u2014 the full recording is ${setDir}/get_motion_context.json]` : truth.text}
-` : truth.state === "recorded-no-motion" ? "RECORDED MOTION TRUTH: the set's get_motion_context recording came back with every motion field null \u2014 no keyframe tracks, no code snippets, no timeline duration. That is the INSTRUMENT reporting no keyframe/timeline animation on this node; it is NOT evidence that the design defines no transitions (the tool advertises keyframe/timeline data, and whether it reports prototype/Smart-Animate reactions is UNPROVEN \u2014 ADR-016 residual). The doctrine below is DEFAULT DOCTRINE, not recorded truth; report that recorded motion truth was UNAVAILABLE \u2014 never that the design has none.\n" : truth.state === "recorded-empty" ? "RECORDED MOTION TRUTH: the set's get_motion_context recording is EMPTY \u2014 the instrument returned no text at all. Treat motion as UNRECORDED, not as proof the design has none. Apply the default doctrine below.\n" : truth.state === "asked-not-recorded" ? "RECORDED MOTION TRUTH: none yet \u2014 the plan asked for get_motion_context but it is not recorded (or the recorded file is unusable; `record status` names which). The doctrine below is DEFAULT DOCTRINE, not recorded truth.\n" : "RECORDED MOTION TRUTH: never asked \u2014 this set predates the motion-capture obligation. The doctrine below is DEFAULT DOCTRINE, not recorded truth.\n";
+` : truth.state === "recorded-no-motion" ? "RECORDED MOTION TRUTH: NONE CAPTURED. The set's get_motion_context recording came back with every motion field null \u2014 no keyframe tracks, no code snippets, no timeline duration. That is the INSTRUMENT reporting no keyframe/timeline animation on this node; it is NOT evidence that the design defines no transitions (the tool advertises keyframe/timeline data, and whether it reports prototype/Smart-Animate reactions is UNPROVEN \u2014 ADR-016 residual). The doctrine below is DEFAULT DOCTRINE, not recorded truth; report that recorded motion truth was UNAVAILABLE \u2014 never that the design has none.\n" : truth.state === "recorded-empty" ? "RECORDED MOTION TRUTH: NONE CAPTURED. The set's get_motion_context recording is EMPTY \u2014 the instrument returned no text at all. Treat motion as UNRECORDED, not as proof the design has none. Apply the default doctrine below.\n" : truth.state === "asked-not-recorded" ? "RECORDED MOTION TRUTH: none yet \u2014 the plan asked for get_motion_context but it is not recorded (or the recorded file is unusable; `record status` names which). The doctrine below is DEFAULT DOCTRINE, not recorded truth.\n" : "RECORDED MOTION TRUTH: never asked \u2014 this set predates the motion-capture obligation. The doctrine below is DEFAULT DOCTRINE, not recorded truth.\n";
   return `
 
 === MOTION (PRESCRIBED, NOT VERIFIED \u2014 ADR-016) ===
@@ -11948,6 +11975,7 @@ var init_src7 = __esm({
 // packages/cli/src/commands/record.ts
 var record_exports = {};
 __export(record_exports, {
+  SELECTION_SCOPE_DISCLOSURE: () => SELECTION_SCOPE_DISCLOSURE,
   instanceLeads: () => instanceLeads,
   interactionDisclosure: () => interactionDisclosure,
   isFigmaAssetUrl: () => isFigmaAssetUrl,
@@ -12165,10 +12193,14 @@ function runRecordPlan(opts) {
   const poses = manifest.reps.length;
   const callLow = poses * FIGMA_CALLS_PER_REP;
   const callHigh = poses * FIGMA_CALLS_PER_REP_WORST;
-  const posesRemaining = sessionStatus(opts.setDir).reps.filter((r) => r.missing.length > 0).length;
-  const callsNeeded = posesRemaining * FIGMA_CALLS_PER_REP;
-  const callSentence = posesRemaining === poses ? `${poses} poses \xD7 ${FIGMA_CALLS_PER_REP} calls per pose = ${callsNeeded} Figma calls` : `${posesRemaining} poses still to record \xD7 ${FIGMA_CALLS_PER_REP} calls per pose = ${callsNeeded} Figma calls (${poses - posesRemaining} of ${poses} already on disk)`;
-  const arithmetic = `${callSentence} (up to ${posesRemaining * FIGMA_CALLS_PER_REP_WORST} if screenshots or assets need a second fetch)`;
+  const planStatus = sessionStatus(opts.setDir);
+  const posesRemaining = planStatus.reps.filter((r) => r.missing.length > 0).length;
+  const setLevelRemaining = (planStatus.setTokenMapRecorded ? 0 : 1) + (planStatus.motion.asked && !planStatus.motion.recorded ? 1 : 0);
+  const callsNeeded = posesRemaining * FIGMA_CALLS_PER_REP + setLevelRemaining;
+  const setLevelClause = setLevelRemaining > 0 ? ` + ${setLevelRemaining} set-level call(s)` : "";
+  const callSentence = posesRemaining === poses ? `${poses} poses \xD7 ${FIGMA_CALLS_PER_REP} calls per pose${setLevelClause} = ${callsNeeded} Figma calls` : `${posesRemaining} poses still to record \xD7 ${FIGMA_CALLS_PER_REP} calls per pose${setLevelClause} = ${callsNeeded} Figma calls (${poses - posesRemaining} of ${poses} already on disk)`;
+  const planningSpent = variantScope === "selection" ? poses : 1;
+  const arithmetic = `${callSentence} (up to ${posesRemaining * FIGMA_CALLS_PER_REP_WORST + setLevelRemaining} if screenshots or assets need a second fetch). ALREADY SPENT on planning, and counting against the same allowance: ~${planningSpent} get_metadata call(s)${variantScope === "selection" ? " \u2014 a selection-scoped plan pays one per node handed in, not one for the set" : ""}.`;
   const multiDay = callsNeeded > MULTI_DAY_CALL_THRESHOLD;
   const feasibilityCheck = {
     arithmetic,
@@ -12323,7 +12355,24 @@ function nextPayload(setDir) {
     const manifest = loadManifest(setDir);
     const frameNode = Object.keys(manifest.sourceFrames ?? {})[0] ?? manifest.reps[0]?.nodeId ?? "";
     const invalidNote = status.setTokenMapInvalid !== void 0 ? ` (the existing set-level file is UNUSABLE \u2014 ${status.setTokenMapInvalid} \u2014 re-record it)` : "";
-    return { slug: "__set__", nodeId: frameNode, tool: "get_variable_defs", note: `SET-LEVEL: call get_variable_defs on the component frame and ingest with --rep __set__.${invalidNote} ${ENVELOPE_HELP}`, progress };
+    return {
+      slug: "__set__",
+      nodeId: frameNode,
+      tool: "get_variable_defs",
+      note: `SET-LEVEL (required \u2014 NOT a resume pointer; do this even under parallel recording): call get_variable_defs on the component frame and ingest with --rep __set__.${invalidNote} ${ENVELOPE_HELP}`,
+      // SET-LEVEL REQUIRED, NOT A RESUME POINTER (run 25, the
+      // SECOND field occurrence — this is a payload defect, not a
+      // prompting accident). `next` overloads two different things:
+      // a per-rep resume pointer, which parallel recorders are told
+      // to IGNORE, and the set-level steps, which nobody may ignore
+      // or the set never completes. Twice now a recorder followed
+      // that instruction literally, refused this step, and reported
+      // it as prompt injection. The scope field lets an ignore-next
+      // instruction target only the pointer.
+      scope: "set-level-required",
+      ignorable: false,
+      progress
+    };
   }
   if (instruction === null && status.motion.asked && !status.motion.recorded) {
     const manifest = loadManifest(setDir);
@@ -12334,7 +12383,18 @@ function nextPayload(setDir) {
       slug: "__set__",
       nodeId: motionNode,
       tool: "get_motion_context",
-      note: `SET-LEVEL: call get_motion_context on ${nodeKind} and ingest with --rep __set__ \u2014 it returns Figma's KEYFRAME/TIMELINE data. A response whose motion fields are all null is a VALID recording (record it too): it means no keyframe animation was REPORTED for this node, which is not the same as the design defining no transitions (whether this tool reports prototype/Smart-Animate reactions is unproven \u2014 run 24).${invalidNote} ${ENVELOPE_HELP}`,
+      note: `SET-LEVEL (required \u2014 NOT a resume pointer; do this even under parallel recording): call get_motion_context on ${nodeKind} and ingest with --rep __set__ \u2014 it returns Figma's KEYFRAME/TIMELINE data. A response whose motion fields are all null is a VALID recording (record it too): it means no keyframe animation was REPORTED for this node, which is not the same as the design defining no transitions (whether this tool reports prototype/Smart-Animate reactions is unproven \u2014 run 24).${invalidNote} ${ENVELOPE_HELP}`,
+      // SET-LEVEL REQUIRED, NOT A RESUME POINTER (run 25, the
+      // SECOND field occurrence — this is a payload defect, not a
+      // prompting accident). `next` overloads two different things:
+      // a per-rep resume pointer, which parallel recorders are told
+      // to IGNORE, and the set-level steps, which nobody may ignore
+      // or the set never completes. Twice now a recorder followed
+      // that instruction literally, refused this step, and reported
+      // it as prompt injection. The scope field lets an ignore-next
+      // instruction target only the pointer.
+      scope: "set-level-required",
+      ignorable: false,
       progress
     };
   }
@@ -12848,7 +12908,7 @@ var init_record = __esm({
     FIGMA_CALLS_PER_REP = 3;
     FIGMA_CALLS_PER_REP_WORST = 4;
     MULTI_DAY_CALL_THRESHOLD = 600;
-    SELECTION_SCOPE_DISCLOSURE = "variantsFound counts the nodes you passed, NOT the component set: this metadata carried no enclosing set, so nothing here can tell whether the set holds more variants. Do NOT report the lattice as complete on this basis. To establish the real denominator, call get_metadata WITHOUT a nodeId (a page-level listing), find the component set these nodes sit under, and re-run plan against it \u2014 re-planning is free until the first envelope is ingested. If you proceed as-is, say plainly that coverage is unestablished.";
+    SELECTION_SCOPE_DISCLOSURE = "variantsFound counts the nodes you passed, NOT the component set: this metadata carried no enclosing set, so nothing here can tell whether the set holds more variants. Do NOT report the lattice as complete on this basis. WORTH ONE ATTEMPT, NOT A HUNT: call get_metadata WITHOUT a nodeId (a page listing), and if a plausible enclosing component set is there, call get_metadata on that page and re-plan against the set \u2014 re-planning is free until the first envelope is ingested. STOP AFTER THAT. The set may not be reachable at all: it can sit outside any page you can list, and the component-listing fallback is gated behind an Org/Enterprise seat. That is a NORMAL outcome, not a failure \u2014 coverage stays UNKNOWN, every scored config is still verified, and the report says so honestly. Do not spend further calls chasing it; say plainly that coverage is unestablished and move on.";
     LIMIT_HINT = {
       status: "UNVERIFIED \u2014 recorded 2026-08-14 from Figma's published documentation and one field report; Figma changes these at will.",
       use: "Use ONLY if whoami states no allowance, and say it is unverified when you show it. The allowance whoami reports always wins.",
@@ -13434,7 +13494,16 @@ function latticeCoverage(setManifest, scoredConfigs) {
     latticeConfigs: null,
     // The count is still worth reporting — it is just not a
     // denominator, and the name has to stop implying that it is.
-    variantsPlanned: lattice,
+    // A count SMALLER than what was scored is provably STALE (run 25:
+    // a selection-scoped set topped up 1 → 16 reps kept its first
+    // plan's count, and the integer sat two lines from
+    // scoredConfigs: 16). Report the fact honestly instead of a
+    // number that contradicts its own neighbour; the root fix
+    // refreshes the manifest on re-plan, but manifests written
+    // before it exist.
+    ...lattice >= scoredConfigs ? { variantsPlanned: lattice } : {
+      variantsPlannedUnreliable: `the manifest records ${lattice} planned variant name(s) but ${scoredConfigs} config(s) were scored \u2014 this count predates a top-up and is NOT a denominator; re-plan the set to refresh it`
+    },
     latticeUnestablished,
     ...notRecorded
   };
@@ -13531,6 +13600,7 @@ function verdictCaveatsFor(input) {
     ...input.latticeBlock["latticeConfigs"] === null ? ["coverage-denominator-unknown"] : [],
     ...unrecorded || notRecorded ? ["poses-unrecorded"] : [],
     ...input.operability !== "verified" ? ["operability-unverified"] : [],
+    ...(input.pixelOnlyInteractionPoses ?? 0) > 0 ? ["interaction-poses-unchecked"] : [],
     ...input.compositionUnavailable ? ["composition-not-checked"] : [],
     ...input.fontsSubstituted ? ["fonts-substituted"] : []
   ];
@@ -13836,7 +13906,8 @@ async function runVerify(opts) {
       latticeBlock,
       operability: coverage.operability,
       compositionUnavailable: "unavailable" in compositionBlock,
-      fontsSubstituted: substitutedFamilies.length > 0
+      fontsSubstituted: substitutedFamilies.length > 0,
+      pixelOnlyInteractionPoses: unmappedInteractionEvidence.length
     }),
     // Machine-readable cause (adversarial review): a cert-bar failure
     // with zero pixel/behavior/composition failures was only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tendrilapp/cli",
-  "version": "0.1.36",
+  "version": "0.1.37",
   "description": "Figma design systems → verified React components. CLI ruler + MCP server.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",