@widnyana/design-thinking 0.0.3 → 0.0.5

package/extensions/design-thinking.ts

@@ -82,15 +82,29 @@ Skills load BY NAME into the agent (/skill:<name>); the files above are named
 by stem, NOT by skill name. Exact mapping:
   /skill:graph-protocol → protocol.md   /skill:design-method → method.md
   /skill:design-graph → design-graph.md
+  Zero file edits are possible until the user runs /dt approve for the turn —
+  the extension blocks write/edit tools mechanically. Present the graph first.
 NEVER read references/<skill-name>.md — no such files exist.
 `.trim();
 
+const MUTATING_TOOLS: Record<string, true> = {
+	write: true,
+	edit: true,
+	apply_patch: true,
+	multiedit: true,
+};
+
 interface DtState {
 	enabled: boolean;
 }
 
+const GATE_REASON =
+	"Design Thinking mode is ON: present the Design Graph (Graph Protocol) and wait for user approval before file edits. The user can unlock this turn with /dt approve.";
+
 export default function designThinkingExtension(pi: ExtensionAPI) {
 	let enabled = false;
+	// Per-turn approval flag: set by /dt approve, reset on every user turn.
+	let approvedForTurn = false;
 
 	function applyStatus(ctx: ExtensionContext) {
 		ctx.ui.setStatus(
@@ -131,13 +145,27 @@ export default function designThinkingExtension(pi: ExtensionAPI) {
 
 	// /dt — the Design Thinking tool. Toggles mode, or /dt on|off|status.
 	pi.registerCommand("dt", {
-		description: "Design Thinking mode: /dt toggles, on|off|status set/query, anything else runs as a prompt with mode on",
+		description: "Design Thinking mode: /dt toggles, on|off|status set/query, approve|deny unlock/lock file edits for this turn, anything else runs as a prompt with mode on",
 		handler: async (args, ctx) => {
 			const arg = (args ?? "").trim();
 			const lower = arg.toLowerCase();
 
 			if (lower === "status") {
-				ctx.ui.notify(`Design Thinking mode: ${enabled ? "on" : "off"}`, "info");
+				ctx.ui.notify(`Design Thinking mode: ${enabled ? "on" : "off"}${approvedForTurn ? " (edits approved for this turn)" : ""}`, "info");
+				return;
+			}
+
+			// /dt approve|deny — explicit user unlock/lock for the CURRENT turn.
+			if (lower === "approve") {
+				approvedForTurn = enabled;
+				ctx.ui.notify(
+					enabled ? "Design Thinking: file edits approved for this turn" : "Design Thinking is OFF — nothing to approve",
+					"info",
+				);
+			}
+			if (lower === "deny") {
+				approvedForTurn = false;
+				ctx.ui.notify("Design Thinking: file edits blocked again", "info");
 				return;
 			}
 
@@ -145,6 +173,7 @@ export default function designThinkingExtension(pi: ExtensionAPI) {
 			// mode and always turns the mode ON (never toggles it off); bare /dt toggles.
 			const prompt = /^(on|off|status)$/.test(lower) ? "" : arg;
 			enabled = lower === "on" || prompt ? true : lower === "off" ? false : !enabled;
+			if (!enabled) approvedForTurn = false;
 			persist();
 			applyStatus(ctx);
 			ctx.ui.notify(
@@ -166,9 +195,21 @@ export default function designThinkingExtension(pi: ExtensionAPI) {
 
 	// While active, append the distilled block to the system prompt every turn.
 	pi.on("before_agent_start", async (event) => {
+		// A new user turn starts a fresh agent run: the approval from the
+		// previous turn does not carry over.
+		approvedForTurn = false;
 		if (!enabled) return undefined;
 		return {
 			systemPrompt: event.systemPrompt + "\n\n" + DISTILLED + "\n",
 		};
 	});
+
+	// Hard gate: while enabled, mutating tools are blocked until the user
+	// approves the design for this turn (/dt approve). Prompt-level rules
+	// alone proved insufficient — this is the mechanical backstop.
+	pi.on("tool_call", async (event) => {
+		if (!enabled || approvedForTurn) return undefined;
+		if (!MUTATING_TOOLS[event.toolName]) return undefined;
+		return { block: true, reason: GATE_REASON };
+	});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@widnyana/design-thinking",
-  "version": "0.0.3",
+  "version": "0.0.5",
   "type": "module",
   "description": "Design Thinking · Design Graph · Graph Protocol — a stack-agnostic design methodology for pi. Turns every plan, review, and refactor into an annotated call graph. Method originally by r17x; generalized to a pi package by widnyana.",
   "author": {
@@ -35,8 +35,11 @@
     "methodology",
     "call-graph"
   ],
+  "omp": {
+    "extensions": ["./extensions/design-thinking.ts"]
+  },
   "pi": {
-    "extensions": ["./extensions"],
+    "extensions": ["./extensions/design-thinking.ts"],
     "prompts": ["./prompts"],
     "skills": ["./skills"]
   },

package/skills/design-graph/SKILL.md

@@ -11,8 +11,8 @@ description: >
 # Design Graph — The Artifact
 
 A **Design Graph** is the annotated call graph of a concrete problem. It is
-what you produce when you apply [Design Thinking](/skill:design-method) to
-something, and it is written in [Graph Protocol](/skill:graph-protocol) notation.
+what you produce when you apply Design Thinking (see the `design-method` skill) to
+something, and it is written in Graph Protocol notation (see the `graph-protocol` skill).
 
 Nodes are functions. Edges are data flow. The annotations answer, for every
 node: what flows through it (A), how many times it runs (cardinality), where
@@ -97,5 +97,5 @@ VERDICT line.
 
 ## Worked example
 
-See the end of [Graph Protocol](/skill:graph-protocol) for a complete, non-TS worked
+See the end of the `graph-protocol` skill for a complete, non-TS worked
 example (a resumable URL-sync CLI in Python) with all sections filled.

package/skills/design-method/SKILL.md

@@ -25,7 +25,7 @@ implement only after the user approves the design. Reading and exploring code
 first is fine; the FIRST edit is not allowed before the graph. This rule is
 not optional and not stack-dependent.
 
-Render every result in [Graph Protocol](/skill:graph-protocol) format.
+Render every result in Graph Protocol format (see the `graph-protocol` skill).
 
 ```
 X → DesignGraph<A, E, R>