openplanr 3.2.0 → 3.4.0

package/lib/host-packages/claude/openplanr/README.md

@@ -17,7 +17,7 @@ Follow with `/planr:plan` to decompose the specification into stories and tasks,
 ## Install the CLI
 
 Several skills call the deterministic `openplanr` CLI from the `openplanr` npm package, which ships
-this plugin at the same version (3.2.0):
+this plugin at the same version (3.4.0):
 
 ```bash
 npm install -g openplanr
@@ -42,16 +42,15 @@ The same skills ship for Codex and Cursor through the `openplanr` package.
 - Skills and bundled scripts store and read no GitHub, Linear or model-provider credentials and
   send no agent credentials to OpenPlanr services. Coding-agent runs you request use that
   agent's own sign-in, described below.
-- Sharing a design or diagram review creates owner access keys for that review and stores them,
-  readable only by you, in `design-shares` or `diagram-shares` under `~/.planr` (or
-  `PLANR_HOME`; earlier installs used `~/.openplanr`). Design reviews and handoffs read the
-  record locally to show an existing share's link and status. The keys are sent only to the
-  review address stored with them, without cookies or redirects, when you share, update, sync
-  or export feedback, hand off, revoke, or recover that review. Recovery reads only the file
-  path you give.
-- While a local design studio page is visible, it syncs a review you shared before every 15
-  seconds. This pulls published team feedback and finishes delivering previously queued
-  review metadata; it never publishes local design changes.
+- Sharing a design or diagram review runs in the `openplanr` CLI, not in the plugin. The CLI
+  creates the review's owner access keys, stores them readable only by you under `~/.planr` (or
+  `PLANR_HOME`), and sends them only to the review address stored with them. The plugin's
+  bundled scripts read no owner keys and contact no OpenPlanr host; for sharing, status and
+  feedback sync they run `openplanr artifact` and pass on its result. Without the CLI, local
+  design work continues and sharing asks you to install it.
+- While a local design studio page for a shared design is visible, it asks the CLI to sync the
+  review every 15 seconds. This pulls published team feedback and finishes delivering
+  previously queued review metadata; it never publishes local design changes.
 - When you ask `delegate` to run another coding agent, that agent's own CLI runs with its normal
   sign-in, environment, model routing, and trusted hooks or plugins. Checking a profile that
   uses a local model server reads its model list from that server's address without
@@ -59,7 +58,8 @@ The same skills ship for Codex and Cursor through the `openplanr` package.
 - Only when you ask:
   - `sync`, `sprint` and `status` reach GitHub and Linear through your coding agent's own
     GitHub or Linear connection, or through the GitHub CLI (`gh`) when it is signed in.
-  - `artifact` and the design skills share an encrypted review through `share.openplanr.dev`.
+  - `artifact` and the design skills share an encrypted review through the `openplanr` CLI,
+    which sends it to `share.openplanr.dev`.
   - Company workspaces, a pre-release hosted service, are used only when you configure one.
 
 ## Links

package/lib/host-packages/claude/openplanr/agents/planr-qa.md

@@ -7,9 +7,11 @@ disallowedTools: Edit, Write, NotebookEdit
 # QA Agent
 
 Review the implementation the user placed in scope. Source and planning files are
-read-only for this role: the host removes the file-editing tools from this agent,
-and every shell command it runs follows the session's permission rules, so run
-only read-only checks. The default outcome is useful engineering feedback, not
+read-only by role policy. The host removes the file-editing tools, but inherited
+shell and connector tools can still write; this is not complete technical write
+isolation. Run verification under the session's permissions without editing source
+or planning files, and use only read-only checks outside disposable test outputs.
+The default outcome is useful engineering feedback, not
 workflow bookkeeping. A machine-readable response is used only when an explicit
 release-certification runtime invokes the compatibility path below.
 

package/lib/host-packages/claude/openplanr/references/agents/shared/modes/shared/task-context-resolution.md

@@ -50,14 +50,14 @@ selector, searched location, and matching candidates instead of guessing.
 
 Return one concise implementation result:
 
-- **Outcome:** a `status` of completed, partial, or blocked, plus a concise
-  `summary`.
+- **Outcome:** a `status` of completed, partial, blocked, or
+  awaiting-acceptance, plus a concise `summary`.
 - **Task:** `planr-task` with its ID and path, or `direct-request` when no task
   artifact was used.
 - **Changed:** each path and its purpose, including directly required companion
   files not named by the task.
-- **Checks:** each command, its passed, failed, or not-run status, and a concise
-  detail.
+- **Checks:** each command, its passed, failed, or not-run status, a concise
+  detail, and the acceptance IDs it covers.
 - **Issues:** always include this field. For each issue, give the problem, impact,
   and next action; write `none` when the issues array is empty.
 

package/lib/host-packages/claude/openplanr/runtime/design/scripts/design-artifact-shell.mjs

@@ -1,9 +1,7 @@
 import {
-  digestArtifactEnvelope
-} from "./design-shared-artifact-support-protocol-contracts-ea2cd15e.mjs";
-import {
+  digestArtifactEnvelope,
   validateJson
-} from "./design-shared-protocol-contracts-b5f28f94.mjs";
+} from "./design-shared-artifact-support-protocol-contracts-9f6918b0.mjs";
 
 // packages/artifact/lib/artifact/ui/shell.mjs
 import { readFileSync as readFileSync2 } from "node:fs";

package/lib/host-packages/claude/openplanr/runtime/design/scripts/design-document.mjs

@@ -1,3 +1,18 @@
+import {
+  DESIGN_DOCUMENT_SCHEMA,
+  assertDesignDocument,
+  bundleLocalDocument,
+  initialFrameHeight,
+  inspectLocalDocumentBody,
+  loadReviewContext,
+  parse,
+  parseFragment,
+  resolveLocalDocumentFile,
+  reviewDigest,
+  reviewFingerprints,
+  serialize,
+  validateDesignProps
+} from "./design-shared-artifact-support-dependencies-design-support-protocol-contracts-d707e49b.mjs";
 import {
   AA_NORMAL,
   contrastRatio,
@@ -6,6 +21,15 @@ import {
   renderArtifactShellDocument,
   renderPlanrMark
 } from "./design-artifact-shell.mjs";
+import {
+  ARTIFACT_ERROR_CODES,
+  ARTIFACT_MAX_SOURCES,
+  ARTIFACT_MAX_VIEWS,
+  PipelineError,
+  createSharedArtifactEnvelope,
+  digestArtifactEnvelope,
+  resolveArtifactHtml
+} from "./design-shared-artifact-support-protocol-contracts-9f6918b0.mjs";
 import {
   ARTIFACT_FRAME_GUARD_TEMPLATE,
   ARTIFACT_HOST_GUARD_TEMPLATE,
@@ -14,38 +38,16 @@ import {
 import {
   atomicBytes,
   atomicJson,
-  bundleLocalDocument,
   currentDesign,
   designSpecPath,
   hash,
   json,
-  loadReviewContext,
-  parse,
-  parseFragment,
   readJson,
-  recoverDesignPublication,
-  resolveLocalDocumentFile,
-  reviewDigest,
-  reviewFingerprints,
-  serialize
-} from "./design-shared-artifact-support-dependencies-design-support-protocol-contracts-3d9b1a86.mjs";
+  recoverDesignPublication
+} from "./design-shared-design-support-0bac378d.mjs";
 import {
   acquireStartLock
 } from "./design-loopback-server.mjs";
-import {
-  ARTIFACT_ERROR_CODES,
-  ARTIFACT_MAX_SOURCES,
-  ARTIFACT_MAX_VIEWS,
-  PipelineError,
-  createSharedArtifactEnvelope,
-  digestArtifactEnvelope,
-  resolveArtifactHtml
-} from "./design-shared-artifact-support-protocol-contracts-ea2cd15e.mjs";
-import {
-  DESIGN_DOCUMENT_SCHEMA,
-  assertDesignDocument,
-  initialFrameHeight
-} from "./design-shared-protocol-contracts-b5f28f94.mjs";
 
 // packages/design/lib/design/frame-size.mjs
 function designFrameLabel(frame) {
@@ -1620,6 +1622,15 @@ function lintDesign(html, opts = {}) {
   const { designSystem = null } = opts;
   const errors = [];
   const warnings = [];
+  if (opts.screen) {
+    const values = Object.hasOwn(opts.variant?.props ?? {}, opts.screen.id) ? opts.variant.props[opts.screen.id] : {};
+    errors.push(
+      ...validateDesignProps({
+        screens: [opts.screen],
+        variants: [{ props: { [opts.screen.id]: values } }]
+      }).map((message) => ({ rule: "invalid-instance-prop", level: "error", message }))
+    );
+  }
   const decls = [...styleBlockDecls(html), ...inlineStyleDecls(html)];
   for (const d of decls) {
     if (SPACING_PROP.test(d.prop)) {
@@ -1693,6 +1704,57 @@ function lintDesign(html, opts = {}) {
     summary: `${errors.length} error(s), ${warnings.length} warning(s)`
   };
 }
+function withoutRootTheme(html) {
+  if (!/theme-(?:light|dark)|data-theme/iu.test(html)) return null;
+  const body = inspectLocalDocumentBody(html);
+  if (!body) return null;
+  const edits = [];
+  for (const { name, value } of body.attrs) {
+    const location = body.location.attrs?.[name];
+    if (!location) continue;
+    let replacement;
+    if (name === "data-theme" && ["light", "dark"].includes(value)) replacement = "";
+    if (name === "class") {
+      const raw = html.slice(location.startOffset, location.endOffset);
+      const quoted = /^(class\s*=\s*)(["'])([\s\S]*)\2$/iu.exec(raw);
+      if (quoted) {
+        const kept = quoted[3].replace(/(^|\s)theme-(?:light|dark)(?=\s|$)/gu, "$1");
+        if (kept !== quoted[3]) replacement = `${quoted[1]}${quoted[2]}${kept}${quoted[2]}`;
+      } else if (/^class\s*=\s*theme-(?:light|dark)$/iu.test(raw)) replacement = "";
+    }
+    if (replacement !== void 0) edits.push({ ...location, replacement });
+  }
+  if (!edits.length) return null;
+  let normalized = html;
+  for (const { startOffset, endOffset, replacement } of edits.sort(
+    (a, b) => b.startOffset - a.startOffset
+  ))
+    normalized = normalized.slice(0, startOffset) + replacement + normalized.slice(endOffset);
+  return normalized;
+}
+function lintThemeOnlySources(sources) {
+  const warnings = [];
+  const seen = /* @__PURE__ */ new Map();
+  for (const { screenId, source, html } of sources) {
+    const normalized = withoutRootTheme(html);
+    if (normalized === null) continue;
+    const key = JSON.stringify({
+      html: normalized,
+      styles: source.styles ?? [],
+      scripts: source.scripts ?? []
+    });
+    const previous = seen.get(key);
+    if (previous && previous.screenId !== screenId && previous.source !== source.html && previous.html !== html)
+      warnings.push({
+        rule: "theme-only-source",
+        level: "warn",
+        screenId,
+        message: `Screens ${previous.screenId} (${previous.source}) and ${screenId} (${source.html}) differ only by a root theme marker; declare a theme prop and share one source.`
+      });
+    else seen.set(key, { screenId, source: source.html, html });
+  }
+  return warnings;
+}
 function lintCanvasData(data, { frames } = {}) {
   const errors = [];
   for (const section of data?.sections || []) {
@@ -2434,8 +2496,19 @@ function prepareDesignDocument(file, { readSource, passive = false, maxBytes } =
     ])
   );
   for (const variant of document2.variants.filter((item) => item.status === "ready")) {
+    const themeWarnings = lintThemeOnlySources(
+      document2.screens.map((screen) => {
+        const source = variant.sources?.[screen.id] ?? screen.source;
+        return {
+          screenId: screen.id,
+          source,
+          html: sourceContents.get(source.html).toString("utf8")
+        };
+      })
+    );
     for (const screenId of document2.screenOrder) {
       const screen = document2.screens.find((item) => item.id === screenId);
+      const values = Object.hasOwn(variant.props ?? {}, screenId) ? variant.props[screenId] : {};
       const bundled = bundleLocalDocument({
         root,
         source: variant.sources?.[screenId] ?? screen.source,
@@ -2443,6 +2516,14 @@ function prepareDesignDocument(file, { readSource, passive = false, maxBytes } =
         screenId,
         readSource,
         passive,
+        ...screen.props ? {
+          screenProps: Object.fromEntries(
+            Object.entries(screen.props).map(([name, declaration]) => [
+              name,
+              Object.hasOwn(values, name) ? values[name] : declaration.default
+            ])
+          )
+        } : {},
         ...maxBytes === void 0 ? {} : { maxBytes }
       });
       if (document2.frames.some(({ height }) => height === "auto"))
@@ -2465,8 +2546,12 @@ function prepareDesignDocument(file, { readSource, passive = false, maxBytes } =
           );
       }
       const report = lintDesign(bundled.html, {
-        designSystem: document2.designSystem
+        designSystem: document2.designSystem,
+        screen,
+        variant
       });
+      report.warnings.push(...themeWarnings.filter((item) => item.screenId === screenId));
+      report.summary = `${report.errors.length} error(s), ${report.warnings.length} warning(s)`;
       lint.push({ variantId: variant.id, screenId, ...report });
       for (const anchor of screen.anchors ?? []) {
         if (!bundled.html.includes(`data-planr-id="${anchor}"`) && !bundled.html.includes(`id="${anchor}"`))