synthesisui 0.16.239 → 0.16.241

package/dist/anatomy-read.js

@@ -417,6 +417,7 @@ sxSpacing) {
                     (kind === "headless" || kind === "motion" || kind === "icon")) {
                     node_.from = measured.from;
                     node_.refName = measured.tag;
+                    // a versão vem do apanhador geral abaixo - um lugar só, depois de todos os ramos
                 }
             }
             /**
@@ -431,6 +432,20 @@ sxSpacing) {
                 if (measured?.motionProps)
                     node_.motionProps = measured.motionProps;
             }
+            /**
+             * TODO NÓ COM PACOTE LEVA A VERSÃO - o apanhador geral, depois de todos os ramos.
+             *
+             * A costura já falhou QUATRO vezes ramo a ramo (frontier-kind, import 09/08, o ramo de
+             * fronteira, o ramo icon/motion), porque cada caminho novo que carimba `from` esquecia de
+             * carimbar a versão. Medido no caminho DERIVADO em 16/08: base-ui com 1 de 23 nós
+             * versionados e lucide com 11 de 45 - os nós nasciam no `anatomyFromSketch` com `from` e
+             * sem versão, e nenhum ramo daqui os alcançava. Um lugar só, depois de todos.
+             */
+            if (node_.from && !node_.version) {
+                const v = deps?.[packageRoot(String(node_.from))] ?? deps?.[String(node_.from)];
+                if (v)
+                    node_.version = v;
+            }
             // The NAME is what carries the styles, so it is claimed even when nothing
             // resolved: the tree triggers on presence, and structure is most of the
             // value. A node with no name is pure structure and that is legitimate.

package/dist/commands/import.js

@@ -36,7 +36,7 @@ import { frontierKind, packageRoot } from "../frontier-kind.js";
 import { withLibraryStructure } from "../library-structure.js";
 import { body, paint, section } from "../output.js";
 import { phase, startProgress } from "../progress.js";
-import { detectStack, resolveDeps } from "../stack.js";
+import { detectStack, resolveDeps, stackVersions } from "../stack.js";
 import { walk, walkAll } from "./doctor.js";
 /**
  * How many distinct values travel, PER KIND.
@@ -1739,18 +1739,23 @@ export async function takeCensus(root, opts) {
     }));
     const pkgRaw = await readFile(join(root, "package.json"), "utf8").catch(() => null);
     let name = null;
-    /** Their pinned ranges, so a library signal cites the version rather than going stale. */
-    let versions = {};
     if (pkgRaw) {
         try {
-            const pkg = JSON.parse(pkgRaw);
-            name = pkg.name ?? null;
-            versions = { ...pkg.devDependencies, ...pkg.dependencies };
+            name = JSON.parse(pkgRaw).name ?? null;
         }
         catch {
             // an unreadable package.json costs the name, not the run
         }
     }
+    /**
+     * Their pinned ranges, so a library signal cites the version rather than going stale.
+     *
+     * PELO RESOLVEDOR, nunca pela leitura crua de um nível: com `--scope packages/ui` este `root` é a
+     * pasta do escopo, cujo manifesto tem ZERO deps - e 15 de 15 bibliotecas do censo vivo saíam sem
+     * versão (medido 16/08). `resolveDeps` sobe até a raiz do workspace e anda para os irmãos que os
+     * `workspaces` declaram, que é onde recharts/chakra/mui realmente moram.
+     */
+    const versions = await resolveDeps(root).catch(() => ({}));
     finishSignals(signals, importTally, versions);
     // Every name their CSS defines, from the same harvest the token table came
     // from - so a reference is judged against what actually exists, not against
@@ -1862,7 +1867,13 @@ export async function takeCensus(root, opts) {
     const classStyle = detectClassStyle(sources);
     return {
         census: 1,
-        project: { name, stack: await detectStack(root) },
+        project: {
+            name,
+            stack: await detectStack(root),
+            ...(Object.keys(stackVersions(versions)).length > 0
+                ? { versions: stackVersions(versions) }
+                : {}),
+        },
         declared: Object.fromEntries(table.byName),
         ...(Object.keys(keyframes).length > 0 ? { keyframes } : {}),
         ...(animations.size > 0 ? { animations: [...animations].sort() } : {}),

package/dist/install-marks.js

@@ -89,7 +89,18 @@
  * "YOUR tokens, under YOUR names"). É a fatia de CLI da decisão de 16/08: toda superfície fala a
  * língua do cliente.
  */
-export const MATERIALISER_SINCE = "0.16.239";
+/**
+ * 0.16.239 -> 0.16.241 em 16/08, e é SIM: o arquivo que cai na pasta dele muda de CONDUTA, não de
+ * bytes decorativos. O stub de `sui-import-ds` respondia ao 401 do playbook com "run
+ * `npx synthesisui login` and call it again" - o que faz o agente parar a conversa e cobrar uma conta
+ * antes de mostrar um único número do repo dele. O `import --dry` nunca precisou de conta (ele
+ * retorna antes de ler credenciais), então o stub novo manda MEDIR primeiro, ler o censo de volta nos
+ * nomes dele, e só então pedir o login - e, para o MCP ausente, exigir sessão NOVA em vez de sugerir
+ * uma nova tentativa que não pode funcionar.
+ *
+ * Quem instalou antes desta versão tem o stub que estanca: o `upgrade`/`connect` é o que alcança.
+ */
+export const MATERIALISER_SINCE = "0.16.241";
 /**
  * A ÚLTIMA VERSÃO EM QUE O QUE O HOOK RODA MUDOU.
  *
@@ -184,8 +195,14 @@ export const CHECKER_SINCE = "0.16.232";
  *               comparação com UM literal, e a divisão do motivo as tirou dele em silêncio
  *
  * Um censo medido antes disto carrega as duas leituras erradas.
+ *
+ *     0.16.240  a VERSÃO passa a viajar (fase B1, 16/08): `project.versions` (frameworks pinados),
+ *               15 de 15 `signals.libraries` com versão (o leitor de manifesto lia o package.json
+ *               do ESCOPO, que tinha zero deps), e todo nó de fronteira com pacote carimba o range
+ *               (era 53% no melhor caminho; o derivado dava 38%). Um censo medido antes disto não
+ *               tem versão nenhuma - e o mapa de blueprints por versão não tem o que consultar.
  */
-export const READER_SINCE = "0.16.215";
+export const READER_SINCE = "0.16.240";
 /**
  * O QUE ESTÁ INSTALADO AQUI FICOU PARA TRÁS - e as DUAS condições que fazem isso ser verdade.
  *

package/dist/skill-import.js

@@ -12,4 +12,4 @@
  * invocada, e ela não é segredo - a esteira é.
  */
 export const IMPORT_SKILL_PATH = ".claude/skills/sui-import-ds/SKILL.md";
-export const IMPORT_SKILL = '---\nname: sui-import-ds\ndescription: Turn a codebase the user ALREADY has into a SynthesisUI design system. Use when someone points at an existing repo, app or component library and asks to import it, adopt it, bring it in, or "make a design system from this" (e.g. "/sui-import-ds", "importa o meu packages/ui", "turn this app into a design system"). Drives the full pipeline - measurement \u2192 your reading of the app \u2192 import \u2192 upgrade proposal - and answers the questions arithmetic cannot.\n---\n\n# Import Design System - served live\n\nThis playbook is served from the platform, not shipped in this file - it is\nalways current, and your context only carries the step you are on.\n\n1. Call the `playbook` tool on the `synthesisui` MCP server with\n   { "skill": "import" } - you get the framing and a table of contents.\n2. Fetch ONLY the chapter for the step you are on:\n   { "skill": "import", "section": "<id from the toc>" }. Never fetch more\n   than the current step needs.\n3. Follow it exactly. When the step is done, fetch the next chapter.\n\nIf the tool answers that you are not signed in, run `npx synthesisui login`\nin the terminal and call it again. If the `synthesisui` MCP server is not\navailable at all, run `npx synthesisui connect`, restart the session, and\ninvoke this skill again.\n';
+export const IMPORT_SKILL = '---\nname: sui-import-ds\ndescription: Turn a codebase the user ALREADY has into a SynthesisUI design system. Use when someone points at an existing repo, app or component library and asks to import it, adopt it, bring it in, or "make a design system from this" (e.g. "/sui-import-ds", "importa o meu packages/ui", "turn this app into a design system"). Drives the full pipeline - measurement \u2192 your reading of the app \u2192 import \u2192 upgrade proposal - and answers the questions arithmetic cannot.\n---\n\n# Import Design System - served live\n\nThis playbook is served from the platform, not shipped in this file - it is\nalways current, and your context only carries the step you are on.\n\n1. Call the `playbook` tool on the `synthesisui` MCP server with\n   { "skill": "import" } - you get the framing and a table of contents.\n2. Fetch ONLY the chapter for the step you are on:\n   { "skill": "import", "section": "<id from the toc>" }. Never fetch more\n   than the current step needs.\n3. Follow it exactly. When the step is done, fetch the next chapter.\n\n## If something is missing, they skipped a step - do not stall them\n\nThe supported order is `login`, then `connect`, then open this session. When\nit was followed, neither case below happens.\n\nNOT SIGNED IN. Do not stop and wait. Measure first, so they see their own\nrepo before being asked for anything:\n\n1. Run `npx synthesisui@latest import --dry` - it is local, free, needs no\n   account, and writes `_synthesisui/census.json`.\n2. Read that file and tell them what is in THEIR repo, in THEIR names: how\n   many declarations, how many components, how much already runs on tokens.\n3. Then: "to turn this into a system on your account, run\n   `npx synthesisui@latest login` and tell me when it is done."\n\nNO `synthesisui` MCP SERVER AT ALL. Tell them to run\n`npx synthesisui@latest connect` and then START A NEW SESSION - tools are read\nwhen a session opens, so this one cannot pick it up. Say it plainly and stop\nthere; carrying on in a session that cannot reach the playbook is guessing.\n';

package/dist/stack.js

@@ -9,7 +9,7 @@
  * One implementation, because two detectors that disagreed would put a rule in a
  * project the census said was something else.
  */
-import { readFile } from "node:fs/promises";
+import { readdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
 /**
  * Dependencies as the project actually resolves them - which means reading
@@ -19,36 +19,98 @@ import { join } from "node:path";
  * Next + React + Tailwind app, because a workspace hoists those to the root and
  * the leaf package.json lists only its own icons. Three levels up covers every
  * pnpm/npm workspace layout without wandering into someone's home directory.
+ *
+ * E PARA OS LADOS TAMBÉM, pelos `workspaces` do manifesto que os declara. Subir
+ * sozinho deixou 15 de 15 bibliotecas do censo vivo sem versão (16/08): o escopo
+ * era `packages/ui` (zero deps) e recharts/chakra/mui moram em `apps/*`, um
+ * IRMÃO - invisível para uma caminhada que só sobe. O componente medido vem do
+ * app que usa o sistema, então o manifesto daquele app é evidência tanto quanto
+ * o da raiz.
  */
 export async function resolveDeps(root) {
     const deps = {};
-    let dir = root;
-    for (let up = 0; up < 4; up++) {
+    const workspaceDirs = [];
+    const readManifest = async (dir) => {
         const raw = await readFile(join(dir, "package.json"), "utf8").catch(() => null);
-        if (raw) {
-            try {
-                const p = JSON.parse(raw);
-                // The nearest package.json wins on a version clash; we only ever ask
-                // whether a name is present, so first-seen is enough.
-                for (const [k, v] of Object.entries({
-                    ...p.dependencies,
-                    ...p.devDependencies,
-                })) {
-                    if (deps[k] == null)
-                        deps[k] = String(v);
-                }
+        if (!raw)
+            return;
+        try {
+            const p = JSON.parse(raw);
+            // The nearest package.json wins on a version clash; we only ever ask
+            // whether a name is present, so first-seen is enough. The up-chain is
+            // read before any sibling, so siblings only ever FILL, never override.
+            for (const [k, v] of Object.entries({
+                ...p.dependencies,
+                ...p.devDependencies,
+            })) {
+                if (deps[k] == null)
+                    deps[k] = String(v);
             }
-            catch {
-                // unreadable manifest costs the detection, not the run
+            const globs = Array.isArray(p.workspaces)
+                ? p.workspaces
+                : Array.isArray(p.workspaces?.packages)
+                    ? p.workspaces.packages
+                    : [];
+            for (const g of globs) {
+                if (typeof g !== "string")
+                    continue;
+                // Only the two shapes real manifests use: `packages/*` and a literal
+                // path. Anything fancier is skipped rather than guessed at.
+                if (g.endsWith("/*")) {
+                    const parent = join(dir, g.slice(0, -2));
+                    const children = await readdir(parent, {
+                        withFileTypes: true,
+                    }).catch(() => []);
+                    for (const c of children)
+                        if (c.isDirectory())
+                            workspaceDirs.push(join(parent, c.name));
+                }
+                else if (!g.includes("*")) {
+                    workspaceDirs.push(join(dir, g));
+                }
             }
         }
+        catch {
+            // unreadable manifest costs the detection, not the run
+        }
+    };
+    let dir = root;
+    for (let up = 0; up < 4; up++) {
+        await readManifest(dir);
         const parent = join(dir, "..");
         if (parent === dir)
             break;
         dir = parent;
     }
+    for (const w of workspaceDirs)
+        await readManifest(w);
     return deps;
 }
+/**
+ * OS FRAMEWORKS DO PROJETO, COM A VERSÃO PINADA - o que `Census.project.versions` carrega.
+ *
+ * `detectStack` colapsa `next@16.0.8` na string `"next"`, e nada no censo guardava versão de
+ * framework nenhuma (medido 16/08: zero em todos os campos). Curado de propósito: framework aqui,
+ * biblioteca por biblioteca em `signals.libraries` - duas listas com dois papéis, nunca o
+ * package.json inteiro dentro do censo.
+ */
+const STACK_PACKAGES = [
+    "next",
+    "react",
+    "react-dom",
+    "vue",
+    "svelte",
+    "vite",
+    "tailwindcss",
+    "typescript",
+];
+export function stackVersions(deps) {
+    const out = {};
+    for (const name of STACK_PACKAGES)
+        if (deps[name])
+            out[name] = deps[name];
+    return out;
+}
 export async function detectStack(root) {
     const stack = [];
     const has = async (f) => (await readFile(join(root, f), "utf8").catch(() => null)) !== null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "synthesisui",
-  "version": "0.16.239",
+  "version": "0.16.241",
   "description": "Bring SynthesisUI design systems into any project - tokens, typed components, whole pages and an agent-ready CLAUDE.md manifest.",
   "type": "module",
   "bin": {