@1agh/maude 0.28.1 → 0.30.0

package/cli/commands/help.mjs

@@ -29,9 +29,14 @@ COMMANDS
         contract — see DDR-061); 'list' shows layers + sizes; 'stats' shows
         hit-rate; 'inspect' pretty-prints entries; 'clear' wipes a layer or all.
 
+  studio [--port N] [--root PATH]
+        Alias for 'maude design serve' — boot the canvas studio (the design
+        dev server) in the current repo. Forwards all remaining args.
+
   design serve [--port N] [--root PATH]
         Start the design plugin's dev server in the current repo. Equivalent
-        to invoking 'claude-design-server'. Forwards all remaining args.
+        to 'maude studio' / invoking 'claude-design-server'. Forwards all
+        remaining args.
 
   design init [--name <slug>] [--ds <name>] [--force] [--dry-run]
               [--no-discovery | --discovery-payload <path>]
@@ -43,7 +48,7 @@ COMMANDS
 
   design <screenshot|server-up|prep|slug|bootstrap-check|runtime-health
           |smoke|canvas-edit|handoff|asset-sweep|visual-sanity> [args]
-        Dispatch to the dev-server's bundled bash helper of the same name.
+        Dispatch to the studio's bundled bash helper of the same name.
         maude resolves it from its own package root and sets CLAUDE_PLUGIN_ROOT
         for the child; stdout/stderr/exit-code pass straight through. This is
         the contract plugin markdown uses instead of a raw bin path (DDR-062).
@@ -88,6 +93,7 @@ EXAMPLES
   maude config get motion.complex
   maude cache list
   maude cache clear research/domain
+  maude studio --port 4399
   maude design serve --port 4399
   maude design init --no-discovery --name acme-app
   maude design slug "Some Canvas Name"

package/cli/commands/hub.mjs

@@ -82,7 +82,7 @@ function usage() {
         exact commands to run next. Does NOT execute fly/docker for you —
         review the emitted files first, then run the printed command.
 
-        fly     → fly.toml (+ reuses plugins/design/hub/Dockerfile).
+        fly     → fly.toml (+ reuses apps/hub/Dockerfile).
                   --name   app name (default maude-hub-<rand>)
                   --region Fly region code (default iad)
         docker  → docker-compose.yml + Caddyfile (universal — Lightsail, EC2,
@@ -91,7 +91,7 @@ function usage() {
 
 NOTES
   serve / token / deploy run inside a 'maude' source checkout (they read the
-  bundled hub workspace at plugins/design/hub). Production hubs run the
+  bundled hub workspace at apps/hub). Production hubs run the
   published Docker image (ghcr.io/1agh/maude-hub) — see 'maude hub deploy'.
   status works from anywhere (plain HTTP GET against /health).
 
@@ -433,7 +433,7 @@ function randHex(bytes) {
 // ---------------------------------------------------------------- helpers
 
 function findHubRoot(pkgRoot) {
-  const dev = resolve(pkgRoot, 'plugins', 'design', 'hub');
+  const dev = resolve(pkgRoot, 'apps', 'hub');
   if (existsSync(resolve(dev, 'package.json'))) {
     try {
       const pkg = JSON.parse(readFileSync(resolve(dev, 'package.json'), 'utf8'));

package/cli/commands/hub.test.mjs

@@ -9,7 +9,7 @@ import { dirname, join, resolve } from 'node:path';
 import { test } from 'node:test';
 import { fileURLToPath } from 'node:url';
 
-import { readTokens } from '../../plugins/design/hub/src/tokens.mjs';
+import { readTokens } from '../../apps/hub/src/tokens.mjs';
 
 const BIN = resolve(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'maude.mjs');
 

package/cli/commands/scenario-report.mjs

@@ -5,7 +5,7 @@ import { pathToFileURL } from 'node:url';
 // `maude scenario-report <run-dir> [--out <path>]` — deterministic cross-platform
 // scenario report generator (Phase C / DDR-061). Thin wrapper that resolves the
 // bundled generator from maude's OWN package root (NOT $CLAUDE_PLUGIN_ROOT — the
-// flow plugin can't reach the design plugin's dev-server dir; only the on-PATH
+// flow plugin can't reach the studio app's bin dir; only the on-PATH
 // `maude` binary resolves it reliably across install shapes — see DDR-062), runs
 // it, and writes report.md. Output stdout = the written path (capture idiom).
 
@@ -22,14 +22,7 @@ export async function run({ args, pkgRoot }) {
     return;
   }
 
-  const generatorPath = resolve(
-    pkgRoot,
-    'plugins',
-    'design',
-    'dev-server',
-    'bin',
-    'scenario-report.mjs'
-  );
+  const generatorPath = resolve(pkgRoot, 'apps', 'studio', 'bin', 'scenario-report.mjs');
   const { generateReport } = await import(pathToFileURL(generatorPath).href);
 
   const absRunDir = resolve(process.cwd(), runDir);

package/cli/lib/design-link.mjs

@@ -108,6 +108,16 @@ export async function runLink({ args, cwd = process.cwd(), forceAdopt = false })
     process.exit(1);
   }
 
+  // DDR-102 incident learning (same-machine token overwrite): hubs.json is
+  // keyed per hub URL only, so a second `link --token` silently replaced the
+  // first machine-wide — both dev servers then authenticated as the same
+  // label and shared one hub rate bucket. Make the overwrite explicit.
+  if (getHub(normUrl)) {
+    process.stdout.write(
+      `[design link] note: replacing the stored token for ${normUrl} (the token is per-machine — this applies to EVERY project linked to this hub on this machine).\n`
+    );
+  }
+
   // Write hub side: token (+ adopt attestation) in ~/.config/maude/hubs.json.
   const hubRecord = addHub(normUrl, token, adopt ? { adoptedAt: Date.now() } : {});
 
@@ -262,16 +272,56 @@ export async function runStatus({ args, cwd = process.cwd() }) {
   }
 
   const uptimeS = Math.round((probe.uptimeMs ?? 0) / 1000);
+  // DDR-102 — per-doc rollup (old payloads without `docs` render unchanged).
+  const docsLine = sync?.docs
+    ? `, docs: ${sync.docs.synced} synced · ${sync.docs.pending} pending · ${sync.docs.rejected} rejected`
+    : '';
   const syncLine = sync?.notSyncable
     ? `linked but 0 syncable canvases — ${sync.reason}`
     : sync
       ? `${sync.state}${sync.sharedDoc ? ' [shared-doc]' : ''}${sync.queuedOps ? ` — ${sync.queuedOps} edit(s) queued` : ''}${
           sync.lastSyncAt ? `, last sync ${new Date(sync.lastSyncAt).toISOString()}` : ''
-        }${sync.conflicts?.length ? `, ${sync.conflicts.length} conflict notice(s)` : ''}`
+        }${docsLine}${sync.conflicts?.length ? `, ${sync.conflicts.length} conflict notice(s)` : ''}`
       : 'idle (start `maude design serve` in linked mode)';
   process.stdout.write(
     `Maude design — linked mode\n  hub URL:      ${url}\n  linked at:    ${new Date(cfg.linkedHub.linkedAt).toISOString()}\n  adopt mode:   ${cfg.linkedHub.adopt ? 'yes (push-on-first-sync)' : 'no (hub-wins)'}\n  TSX sync:     ${cfg.linkedHub.syncTsx === false ? 'off (opted out — linkedHub.syncTsx: false)' : 'on (default — DDR-079)'}\n  token stored: ${hubRecord ? 'yes (~/.config/maude/hubs.json)' : "NO — re-run 'maude design link'"}\n  hub status:   ${probe.ok ? `up — v${probe.version}, ${uptimeS}s uptime, ${probe.tokenCount} token(s), ${probe.authMode}` : `UNREACHABLE — ${probe.error}`}\n  sync agent:   ${syncLine}\n`
   );
+  // DDR-102 — auth-rejected canvases (per-slug honesty).
+  if (Array.isArray(sync?.rejectedSlugs) && sync.rejectedSlugs.length > 0) {
+    const total = sync.docs?.rejected ?? sync.rejectedSlugs.length;
+    const more =
+      total > sync.rejectedSlugs.length ? ` (+${total - sync.rejectedSlugs.length} more)` : '';
+    process.stdout.write(
+      `  not syncing:  ${sync.rejectedSlugs.join(', ')}${more} — hub rejected auth; the serve log names the reason (scope / invalid token / rate limit).\n`
+    );
+  }
+  // DDR-102 — conflict log with winner + snapshot refs + the recovery story.
+  if (Array.isArray(sync?.conflicts) && sync.conflicts.length > 0) {
+    process.stdout.write('  conflicts:\n');
+    for (const c of sync.conflicts.slice(-10)) {
+      const at = c.at ? new Date(c.at).toISOString() : '?';
+      if (c.kind === 'cold-start-diverged') {
+        const snaps = c.snapshots
+          ? ` snapshots: ${[
+              c.snapshots.local ? `local@${c.snapshots.local}` : null,
+              c.snapshots.hub ? `hub@${c.snapshots.hub}` : null,
+            ]
+              .filter(Boolean)
+              .join(' ')}`
+          : '';
+        process.stdout.write(
+          `    ${at}  ${c.slug} — diverged, kept ${c.winner ?? 'hub'} (newest-wins);${snaps}\n      recover the other version: /design:rollback ${c.slug}\n`
+        );
+        if (c.snapshotFailed) {
+          process.stdout.write(
+            `      ⚠ the _history snapshot FAILED — local was KEPT instead of overwritten (DDR-102 fail-closed); check disk space / _history write perms.\n`
+          );
+        }
+      } else {
+        process.stdout.write(`    ${at}  ${c.slug} — ${c.kind}\n`);
+      }
+    }
+  }
   // DDR-079 migration advisory: a config with no explicit `syncTsx` rides the
   // default, which FLIPPED from off→on in maude 0.27. Surface it so an upgrader
   // who relied on the old "TSX never syncs" behavior isn't surprised that every

package/cli/lib/flow-design-integration.test.mjs

@@ -26,7 +26,7 @@ import { lintConfig } from './config-lint.mjs';
 const read = (p) => readFileSync(resolve(p), 'utf8');
 const readJson = (p) => JSON.parse(read(p));
 
-const META_SCHEMA = readJson('plugins/design/dev-server/canvas-meta.schema.json');
+const META_SCHEMA = readJson('apps/studio/canvas-meta.schema.json');
 const FLOW_SCHEMA = readJson('plugins/flow/.claude-plugin/config.schema.json');
 const SKELETON = readJson('plugins/flow/templates/ai-skeleton/workflows.config.json');
 

package/cli/lib/gitignore-block.mjs

@@ -31,6 +31,7 @@ export function buildBlock(designRel = '.design') {
     `${root}/_active.json`,
     `${root}/_sync.json`, // linked-mode offline/sync status (Task 8)
     `${root}/_history/`,
+    `${root}/_trash/`, // soft-deleted canvases (recoverable locally — Phase 22 delete)
     `${root}/_draw/`, // draw-agent proof canvases (regenerable — Phase 25)
     `${root}/_canvas-state/`, // per-machine canvas undo/redo + scratch state
     `${root}/_chat/`, // ACP transcripts (per-machine)

package/cli/lib/plugin-cli-reachability.test.mjs

@@ -10,12 +10,13 @@
 // SAME file also offers a `command -v maude` fallback (the sibling-first /
 // maude-fallback pattern). This test fails loudly if a new straggler lands.
 //
-// DDR-062: plugin MARKDOWN must reach the dev-server bash helpers through
-// `maude design <verb>`, never `bash "$CLAUDE_PLUGIN_ROOT/dev-server/bin/<x>.sh"`.
-// The marketplace never copies the dev-server beside a plugin, and a flow
-// command's $CLAUDE_PLUGIN_ROOT points at plugins/flow (no dev-server/ at all).
-// Prose mentions of the path are fine; INVOCATIONS (bash/sh/exec/$( prefixed)
-// are banned.
+// DDR-062: plugin MARKDOWN must reach the studio bash helpers through
+// `maude design <verb>`, never `bash "$CLAUDE_PLUGIN_ROOT/dev-server/bin/<x>.sh"`
+// or `bash apps/studio/bin/<x>.sh`. The marketplace never copies the studio app
+// beside a plugin, and a flow command's $CLAUDE_PLUGIN_ROOT points at
+// plugins/flow (no bin/ at all). Per DDR-095 the helpers live under
+// apps/studio/bin (was plugins/design/dev-server/bin). Prose mentions of the
+// path are fine; INVOCATIONS (bash/sh/exec/$( prefixed) are banned.
 
 import assert from 'node:assert/strict';
 import { execSync } from 'node:child_process';
@@ -43,7 +44,7 @@ test('no plugin markdown invokes a $CLAUDE_PLUGIN_ROOT/dev-server/bin/*.sh helpe
   // command substitution. Prose mentions of the path (backtick-wrapped, no verb)
   // are exempt — they don't run anything. Matches both the $CLAUDE_PLUGIN_ROOT
   // form and the repo-relative `plugins/<x>/dev-server/bin/` form.
-  const pattern = String.raw`(bash|sh|exec) +"?(\$\{?CLAUDE_PLUGIN_ROOT\}?|plugins/[a-z]+)/dev-server/bin/[A-Za-z0-9_-]+\.sh|\$\("?\$?\{?CLAUDE_PLUGIN_ROOT\}?/dev-server/bin/[A-Za-z0-9_-]+\.sh`;
+  const pattern = String.raw`(bash|sh|exec) +"?(\$\{?CLAUDE_PLUGIN_ROOT\}?|plugins/[a-z]+)/dev-server/bin/[A-Za-z0-9_-]+\.sh|\$\("?\$?\{?CLAUDE_PLUGIN_ROOT\}?/dev-server/bin/[A-Za-z0-9_-]+\.sh|(bash|sh|exec) +"?[^"\n]*apps/studio/bin/[A-Za-z0-9_-]+\.sh|\$\("?[^"\n]*apps/studio/bin/[A-Za-z0-9_-]+\.sh`;
   const out = execSync(`grep -rnE '${pattern}' plugins --include='*.md' || true`, {
     encoding: 'utf8',
   });

package/cli/lib/preflight.mjs

@@ -5,7 +5,7 @@
 // Used by:
 //   - cli/commands/doctor.mjs (the unified diagnostic CLI)
 //   - plugins/flow/commands/init.md (the wired pre-flight Step 1)
-//   - plugins/design/dev-server/bin/preflight.sh (which re-shells to node
+//   - apps/studio/bin/preflight.sh (which re-shells to node
 //     for the actual checks — keeps detection logic in one place).
 //
 // Pure-ish: no process.exit; returns an envelope. printReport() is here

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.28.1",
+  "version": "0.30.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -14,16 +14,16 @@
     "mdcc": "cli/bin/mdcc.mjs",
     "maude-safe": "cli/cli-wrapper.cjs",
     "mdcc-safe": "cli/cli-wrapper.cjs",
-    "claude-design-server": "plugins/design/dev-server/server.mjs"
+    "claude-design-server": "apps/studio/server.mjs"
   },
   "scripts": {
-    "start": "bun run plugins/design/dev-server/server.ts",
-    "dev": "bun run plugins/design/dev-server/server.ts --port 4555",
+    "start": "bun run apps/studio/server.ts",
+    "dev": "bun run apps/studio/server.ts --port 4555",
     "dev:site": "pnpm --filter @maude/site dev --port 4398",
     "build": "pnpm -r --if-present run build",
-    "build:binary": "bun run plugins/design/dev-server/build.ts --release",
+    "build:binary": "bun run apps/studio/build.ts --release",
     "test": "node --test --test-reporter=spec cli/**/*.test.mjs",
-    "test:dev-server": "cd plugins/design/dev-server && bun test",
+    "test:dev-server": "cd apps/studio && bun test",
     "lint": "biome check .",
     "format": "biome format --write .",
     "changeset": "changeset",
@@ -38,20 +38,20 @@
     "video:render": "cd scripts/video/final && pnpm run render",
     "video:studio": "cd scripts/video/final && pnpm run studio",
     "postinstall": "node cli/install.cjs",
-    "prepublishOnly": "bash scripts/check-version-parity.sh && bash plugins/design/dev-server/bin/check-runtime-bundles.sh"
+    "prepublishOnly": "bash scripts/check-version-parity.sh && bash apps/studio/bin/check-runtime-bundles.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.28.1",
-    "@1agh/maude-darwin-x64": "0.28.1",
-    "@1agh/maude-linux-arm64": "0.28.1",
-    "@1agh/maude-linux-arm64-musl": "0.28.1",
-    "@1agh/maude-linux-x64": "0.28.1",
-    "@1agh/maude-linux-x64-musl": "0.28.1",
-    "@1agh/maude-win32-x64": "0.28.1"
+    "@1agh/maude-darwin-arm64": "0.30.0",
+    "@1agh/maude-darwin-x64": "0.30.0",
+    "@1agh/maude-linux-arm64": "0.30.0",
+    "@1agh/maude-linux-arm64-musl": "0.30.0",
+    "@1agh/maude-linux-x64": "0.30.0",
+    "@1agh/maude-linux-x64-musl": "0.30.0",
+    "@1agh/maude-win32-x64": "0.30.0"
   },
   "files": [
     "cli",
-    "plugins/design/dev-server",
+    "apps/studio",
     "plugins/design/dependencies.json",
     "plugins/design/dependencies.schema.json",
     "plugins/design/templates",

package/plugins/design/templates/_shell.html

@@ -177,14 +177,27 @@
       // ai-activity via postMessage when embedded; the own-WS path (standalone /
       // same-origin inspector socket) is handled in connectHmr below.
       let agentEditing = false;
+      // SECURITY (ethical-hacker A1) — the CSS-panel optimistic-reload-skip
+      // timestamp lives HERE, in the shell-script closure, NOT a window global:
+      // the canvas module shares this realm, so a window global would let
+      // untrusted canvas JS pin it and suppress reloads to desync view/source.
+      // It's set ONLY from the parent-gated message below (a canvas self-post
+      // can't reach it), and the HMR echo-guard reads this local, not window.*.
+      let lastCssOptimisticAt = 0;
       window.addEventListener('message', (e) => {
         // DDR-078 security follow-up: only the trusted embedding parent relays
-        // ai-activity. Reject canvas self-posts (which could flip the HMR gate)
-        // and any non-parent source. Standalone gets it via its own WS below.
+        // ai-activity / apply-style. Reject canvas self-posts (which could flip
+        // the HMR gate) and any non-parent source. Standalone gets it via its WS.
         if (e.source !== window.parent || window.parent === window) return;
         const m = e && e.data;
-        if (!m || typeof m !== 'object' || m.dgn !== 'ai-activity') return;
-        if (myFileKey && m.file === myFileKey) agentEditing = !!m.entry;
+        if (!m || typeof m !== 'object') return;
+        if (m.dgn === 'ai-activity') {
+          if (myFileKey && m.file === myFileKey) agentEditing = !!m.entry;
+        } else if (m.dgn === 'apply-style') {
+          // The panel just optimistically applied an edit → skip the redundant
+          // follow-up module reload (set here, parent-verified).
+          lastCssOptimisticAt = Date.now();
+        }
       });
 
       // Soft reload — re-import the canvas module (cache-busted) and swap it in
@@ -320,6 +333,17 @@
             } else if (msg.mode === 'module' || msg.mode === 'hard') {
               // Only reload when the change touches *this* canvas (or `_lib`).
               if (msg.mode === 'hard' || !msg.file || (canvasRel && msg.file === canvasRel)) {
+                // Phase 12.3 — CSS-panel echo guard. The panel applies each
+                // edit optimistically to the live DOM (dgn:'apply-style'), so a
+                // `module` reload for THIS canvas's own edit is redundant churn:
+                // it remounts the canvas, drops the selection halo, and flickers
+                // the iframe. Skip it within a short window of a self-applied
+                // optimistic style. `hard` (_lib rebuild) is global — never
+                // skipped. Mirrors the meta echo-guard below.
+                if (msg.mode === 'module') {
+                  // read the parent-verified local (NOT a canvas-writable global)
+                  if (Date.now() - lastCssOptimisticAt < 1500) return;
+                }
                 // Phase 13.1 / DDR-077 — when an agent is live-editing, soft-
                 // reload (hold last good on a broken intermediate). Manual edits
                 // (or no runtime yet) keep the plain, immediate hard reload.

package/plugins/design/templates/brief-board.tsx.template

@@ -0,0 +1,61 @@
+/**
+ * @canvas      {{NAME}} — brief board
+ * @ds          {{DS_NAME}}
+ * @platform    {{PLATFORM}}
+ * @kind        brief-board
+ * @stack       React 19 · TSX · Bun.build
+ * @history     {{HISTORY_DIR}}
+ *
+ * Annotation-only brief board (Phase 22). This canvas is born EMPTY on purpose:
+ * one framed reference artboard you fill with sticky notes (N), text (T), and
+ * arrows (A) describing what each screen should do. When you run `/design:new`
+ * again while this board is the active canvas, Claude reads those annotations as
+ * a VERBATIM brief and inserts the matching generated artboards right here, below
+ * this frame — the board becomes a living brief you sketch and Claude fills in.
+ *
+ * The annotation layer lives in a sibling `<slug>.annotations.svg` (NEVER in this
+ * file), so your notes stay floating on top across every regeneration. No design
+ * system tokens or classes are wired in — the board is a neutral surface; the
+ * generated artboards bring the DS with them on ingest.
+ */
+
+import { DCArtboard, DCSection, DesignCanvas } from "@maude/canvas-lib";
+
+export default function {{COMPONENT_NAME}}() {
+  return (
+    <DesignCanvas>
+      <DCSection id="brief-board" title="Brief">
+        <DCArtboard id="brief" label="Brief — annotate me" width={1280} height={800}>
+          <div
+            style={{
+              boxSizing: "border-box",
+              width: "100%",
+              height: "100%",
+              display: "flex",
+              flexDirection: "column",
+              alignItems: "center",
+              justifyContent: "center",
+              gap: "14px",
+              padding: "48px",
+              textAlign: "center",
+              fontFamily: "ui-sans-serif, system-ui, -apple-system, sans-serif",
+              color: "#9aa0a6",
+              background: "#ffffff",
+              border: "1.5px dashed #d4d8dd",
+            }}
+          >
+            <div style={{ fontSize: "22px", fontWeight: 600, color: "#5f6571" }}>
+              {{NAME}}
+            </div>
+            <div style={{ fontSize: "14px", color: "#8a9099" }}>{{SEED_HINT}}</div>
+            <div style={{ fontSize: "13px", maxWidth: "460px", lineHeight: 1.55 }}>
+              Drop sticky notes (N), text (T) &amp; arrows (A) here describing what
+              each screen should do — then run <code>/design:new</code> again to have
+              Claude read your notes and lay the matching artboards out right here.
+            </div>
+          </div>
+        </DCArtboard>
+      </DCSection>
+    </DesignCanvas>
+  );
+}

package/plugins/design/templates/canvas.tsx.template

@@ -20,7 +20,7 @@
  * The envelope primitives (`DesignCanvas`, `DCSection`, `DCArtboard`) and any
  * specimen helpers come from the dev-server-bundled canvas library via the
  * virtual specifier — the dev-server resolves it to
- * `plugins/design/dev-server/canvas-lib.tsx` (single source, ships with the
+ * `apps/studio/canvas-lib.tsx` (single source, ships with the
  * dev-server install per DDR-025), and `/design:handoff` AST-inlines the used
  * exports so the registry-item drop is self-contained. Read that file for the
  * full export surface (helpers + hooks) before reaching for new components.

package/plugins/design/templates/design-system-inspiration/core/config.json.tpl

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://raw.githubusercontent.com/1aGh/maude/main/plugins/design/dev-server/config.schema.json",
+  "$schema": "https://raw.githubusercontent.com/1aGh/maude/main/apps/studio/config.schema.json",
   "name": "{{project_name}}",
   "projectLabel": "{{project_label}}",
   "designRoot": ".design",

package/plugins/design/templates/design-system-inspiration/core/preview/_motion-readme.md.tpl

@@ -56,7 +56,7 @@ Per DDR-049: a canvas that imports `<MotionDemo>` or any sibling motion helper f
 
 ## Cross-links
 
-- Library source: `plugins/design/dev-server/canvas-lib.tsx` (`MotionDemo`, `MotionTrack`, `TokenPlayback`, `ReducedMotionToggle`, `useMotionTokens`, `easingFromToken`)
+- Library source: `apps/studio/canvas-lib.tsx` (`MotionDemo`, `MotionTrack`, `TokenPlayback`, `ReducedMotionToggle`, `useMotionTokens`, `easingFromToken`)
 - Library decision: `.ai/decisions/DDR-049-motion-one-as-canonical-motion-library.md`
 - Sub-agent safety block: `plugins/design/templates/design-system-inspiration/SUB-AGENT-PROMPTS.md` → ANIMATION SAFETY
 - Tokens: `colors_and_type.css.tpl` (lines around `--dur-*` + `--ease-*`)

package/plugins/flow/.claude-plugin/config.schema.json

@@ -408,6 +408,22 @@
             "mcp": { "type": "string" },
             "defaults": { "type": "object", "additionalProperties": true }
           }
+        },
+        "whatsNew": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "In-product \"What's New\" feed. When enabled, /flow:done offers to append a user-facing entry for the closed-out feature to `feed`, delegating to the named project skill if set. Generic + opt-in: absent or `enabled:false` → /flow:done skips it silently. Maude wires this to apps/studio/whats-new.json, surfaced in the canvas browser.",
+          "properties": {
+            "enabled": { "type": "boolean", "default": false },
+            "feed": {
+              "type": "string",
+              "description": "Repo-relative path to the What's New feed JSON the entry is appended to."
+            },
+            "skill": {
+              "type": "string",
+              "description": "Optional name of a project skill (in .claude/skills/) that authors the entry; /flow:done invokes it instead of inlining the append."
+            }
+          }
         }
       }
     }