History

Danila Poyarkov e2a3aa3f80 fix: validate parsed JSON at untrusted boundaries with Valibot (#855 ) * fix: validate parsed JSON at untrusted boundaries with Valibot Clipboard HTML, library revisions from shared storage, MCP and automation WebSocket messages, the MCP discovery file, sidecar output and AI/MCP tool arguments were JSON.parse'd and cast to their expected types, so a malformed payload reached the document or crashed paste. They now go through v.pipe(v.string(), v.parseJson(), Schema), which reports bad JSON and a wrong shape as the same validation failure. The path_set tool rejects an invalid VectorNetwork and shares its parser with create_vector. The CLI library catalog validates its files and runs revisions through the same size, identity and content-hash checks as the app; reading image bytes as index-keyed records also stops them coming back empty. Hand-rolled typeof readers for plugin data, document metadata, caches and preferences become schemas with their behaviour preserved, and readCacheJSON takes a schema for its payload. open-pencil/no-unvalidated-json-parse rejects type assertions on JSON.parse results other than `as unknown` in src and packages//src. refactor: validate parsed JSON in tests and tooling Extend open-pencil/no-unvalidated-json-parse beyond source: tests, helpers and repo tooling now parse JSON through Valibot schemas instead of asserting a type. The shared fixture reader returns a validated object; its old array annotation never matched the fixtures. * fix: validate clipboard geometry bytes, library images and model catalogs Clipboard geometry blobs and library image bytes must be bytes at contiguous indexes, so out-of-range or gapped values are rejected instead of silently becoming different geometry or images; serialized library nodes must carry source metadata. The models.dev and OpenRouter responses are validated like their cached copies, and activate-tab rejects a CDP frame it cannot read instead of hanging. * refactor: extend the JSON validation lint to .json() results no-unvalidated-json-parse now also rejects type assertions on Response, Bun.file and shell .json() results, the same unchecked parse in another form. MCP server tests read /health through a validated readHealth helper and discovery files through parseDiscoveryInfo; the remaining tooling reads its JSON through schemas. * test: validate the RPC request body in the CLI app export test * test: validate CLI JSON output in the tool and app command tests * test: compare the malformed models.dev fallback with the curated list		2026-10-04 17:01:50 +00:00
..
docs	fix(fig): read, render, and write Figma slots (#850 )	2026-10-04 00:45:10 +04:00
scripts	feat(fig): occurrence-scoped instance interpretation as the single .fig reader	2026-10-01 11:20:27 +04:00
src	fix: validate parsed JSON at untrusted boundaries with Valibot (#855 )	2026-10-04 17:01:50 +00:00
tests	fix: validate parsed JSON at untrusted boundaries with Valibot (#855 )	2026-10-04 17:01:50 +00:00
AGENTS.md	feat(fig): occurrence-scoped instance interpretation as the single .fig reader	2026-10-01 11:20:27 +04:00
package.json	build: update dependencies (#873 )	2026-10-04 12:48:24 +00:00
README.md	feat(fig): occurrence-scoped instance interpretation as the single .fig reader	2026-10-01 11:20:27 +04:00
tsconfig.json	fix: explain unsupported browsers instead of a blank window (#745 )	2026-09-22 14:40:59 +04:00
tsconfig.test.json	feat(fig): scaffold package shell	2026-06-30 10:51:36 +03:00
tsdown.config.ts	refactor(fig): own Figma clipboard encoding and conversion	2026-09-11 00:36:03 +03:00

README.md

@open-pencil/fig

.fig file-format package for OpenPencil.

The package owns the outer .fig archive boundary and is the staged home for Figma-specific SceneGraph conversion policy. Production SceneGraph read/write remains available through @open-pencil/core/io while conversion modules move behind this package's public API.

Current ownership:

Complete .fig archive parsing through parseFigBuffer()
.fig archive assembly through writeFigArchive()
Canvas payload and image resource handling
readFigContainer() / writeFigContainer() helpers for raw fig-kiwi payloads
.fig source and archive result types
NodeChange-to-SceneGraph property conversion, including styles, plugin metadata, text, paint, vector, and font policy, through @open-pencil/fig/node-change
Component-property, symbol-override, derived-symbol-data, and instance synchronization policy through @open-pencil/fig/instance-overrides
Effective raw-metadata precedence and invalidation over SceneGraph's format-neutral edited-field tracking
SceneGraph-to-NodeChange export conversion with an explicit glyph-outline runtime service
Package-local archive, conversion, instance, export, and dist smoke tests

Architecture documentation

Start with the package docs for the source model, instance evaluation, materialization, document sessions, export, and validation contracts.

Planned ownership:

Oracle-backed .fig fixtures

Non-goals:

Generic Kiwi schema/runtime internals — use @open-pencil/kiwi
Format-neutral IO registration, export targeting, CanvasKit thumbnails, or browser workers — use @open-pencil/core/io
Editor actions, renderer behavior, Vue/app UI, CLI formatting, or MCP transport

This follows the existing @open-pencil/pen pattern: a format package owns its source model/parser and SceneGraph policy, while core registers it in the shared IO system.

Checks

cd packages/fig
bun run check