@1agh/maude 0.45.2 → 0.47.0

package/apps/studio/whats-new.json

@@ -1,6 +1,61 @@
 {
   "$schema": "./whats-new.schema.json",
   "entries": [
+    {
+      "id": "figma-smart-select",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "feature",
+      "title": "Click to select, like Figma",
+      "summary": "Your mock now opens live — click a button or link to actually try it. When you want to edit, press V: a plain click selects the object under your cursor, ⌘-click reaches the deepest element, double-click drills in one level, and Enter / Shift+Enter / Tab walk the layer tree. The toolbar's first two tools are Browse (live) and Select (V). The Layers panel grew up too: wrapper groups show at their real depth, component instances render purple with their component's name, you can lock a layer (locked layers can't be selected or dragged on the canvas), double-click a layer's name to rename it, and the tree auto-reveals whatever you pick on the canvas. And when a flex layout fights your manual tweaks, right-click the container → \"Convert children to absolute position\" freezes every child where it sits so you can drag them freely (one undo reverts it) — or convert a whole artboard at once (right-click the artboard, or when switching its kind to Digital/Print). And when a component instance needs its own look, hit Detach on the Inspector's Shared badge — edits stay local to that one instance. Text editing got Figma's exact rhythm too: drilling down to a text layer selects all of it (ready to overwrite), and once you're in, a click places the cursor, a double-click grabs a word, and a triple-click grabs everything.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "acp-safe-defaults-and-attention-notifications",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "improvement",
+      "title": "Fewer prompts in chat, and a nudge when you're needed",
+      "summary": "The assistant chat now runs common design-workflow actions — browser checks, your own local dev-server requests, reading files, and web search — without asking every time. And when a chat is waiting on your approval or an answer, Maude now sends a system notification so you don't miss it.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "web-artboards",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "feature",
+      "title": "Web artboards — breakpoints, duplicate, and a grid editor",
+      "summary": "Set an artboard's kind to Web and it becomes a responsive viewport: a small chip shows its current breakpoint, and \"Duplicate at width…\" (right-click or the Inspector) clones it at Mobile/Tablet/Laptop/Desktop widths for reflow testing. Grid containers also get a new Grid section in the Inspector — define columns and rows with px/%/fr/em/auto units, drag the gutters directly on the canvas, and place children into specific cells.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "scene-aware-video-analyze",
+      "version": "0.46.0",
+      "date": "2026-07-18",
+      "kind": "feature",
+      "title": "Analyze a video — picture and sound — in one command",
+      "summary": "Run /design:video-analyze on a clip and Maude reads it end to end: it picks keyframes at real scene changes and action beats (not a blind frame rate), transcribes the audio, and writes a summary with shots, on-screen text, mood, and the best moment to use. A new Settings → Video section lets you choose the analysis engine and, on Apple Silicon, download an optional local Gemma model for smarter shot detection.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "print-artboards",
+      "version": "0.46.0",
+      "date": "2026-07-18",
+      "kind": "feature",
+      "title": "Design flyers, posters, and business cards — print-ready",
+      "summary": "Give a print artboard a real paper size (A4, Letter, business card, and more) and it resolves to the correct bleed-inclusive dimensions automatically. Toggle bleed/trim/margin guides from the View menu while you work, then export a 300–600 DPI PNG or a print-ready PDF with correct page boxes and crop/registration marks.",
+      "surface": "design-ui",
+      "learnMore": "https://maude.sh/docs/design/print"
+    },
+    {
+      "id": "artboard-kinds-foundation",
+      "version": "0.46.0",
+      "date": "2026-07-18",
+      "kind": "feature",
+      "title": "Artboards now know what they are",
+      "summary": "Give any artboard a kind — Digital, Print, Web, or Video — from the Inspector or the right-click menu, and it gets its own chrome. New generic layout guides (columns, rows, grid) can be toggled on from the View menu for any artboard. Print- and web-specific tools land in follow-up releases.",
+      "surface": "design-ui"
+    },
     {
       "id": "acp-ask-user-question",
       "version": "0.45.2",

package/cli/commands/design.mjs

@@ -87,6 +87,14 @@ const BIN_VERBS = new Set([
   // reads the clip as a file:// resource).
   'ingest-footage',
   'probe-footage',
+  // feature-scene-aware-keyframes. `smart-frames` is the scene-AWARE sibling of
+  // `probe-footage`: it selects keyframes at scene cuts + semantic action beats +
+  // endpoints (three tiers, auto-detected — gemma scout / ffmpeg scene-detect /
+  // blind Chromium floor) instead of a blind frame rate, and emits a SUPERSET of
+  // probe-footage's manifest (drop-in for the footage-analyst). No dev server.
+  // Owned by skill `footage-keyframes`; --engine auto self-detects deps so it
+  // works standalone as a terminal video analyzer.
+  'smart-frames',
   // feature-ai-media-generation (Phase 0, DDR-16x). `generate` is the thin
   // non-browser BYOK verb (curl → /_api/generate-jobs → poll → print the
   // produced /assets/<sha8>.<ext>). The provider call happens server-side (the
@@ -102,6 +110,22 @@ const BIN_VERBS = new Set([
   // user's ElevenLabs history before spending credits on a new music/SFX/VO
   // track. Runs server-side (key resolved by the sidecar); needs a dev server.
   'audio-search',
+  // DDR-185. `curl-local` is a loopback-only curl: resolves the request's
+  // target host and refuses to invoke real curl at all unless every resolved
+  // address is strictly loopback (127.0.0.0/8 or ::1). Exists so an ACP chat
+  // session can auto-approve "check my local dev server" without widening the
+  // session's Bash allow-list to unscoped curl (`Bash(curl:*)` would reach any
+  // host — see DDR-185's rejected alternatives). No dev server dependency —
+  // pure Node, no `<designRoot>` involvement.
+  'curl-local',
+  // DDR-185 security addendum. `agent-browser-safe` replaces the bare
+  // `Bash(agent-browser:*)` allow-list entry a security review found was a
+  // zero-confirmation session-hijack primitive (agent-browser's own bundled
+  // skill recommends a PERSISTENT authenticated Chrome profile). Closed
+  // subcommand allow-list + forced domain scope + forced ephemeral profile —
+  // see `_agent-browser-safe.mjs` for the full rationale. No dev server
+  // dependency — pure Node.
+  'agent-browser-safe',
 ]);
 
 // Bin verbs that boot the dev-server (directly, or by shelling into server-up.sh).
@@ -290,7 +314,7 @@ Dev-tooling (dispatch to the dev-server bash helpers — DDR-062):
   screenshot · server-up · prep · slug · bootstrap-check · runtime-health
   smoke · canvas-edit · handoff · asset-sweep · visual-sanity · fetch-asset
   draw-build · draw-proof · svg-optimize · to-lottie · read-annotations · annotate
-  canvas-rects · ingest-footage · probe-footage
+  canvas-rects · ingest-footage · probe-footage · smart-frames
   generate · transcribe · audio-search
         Invoke the bundled helper of the same name. maude resolves it from its
         own package root and sets CLAUDE_PLUGIN_ROOT for the child; stdout,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.45.2",
+  "version": "0.47.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -51,13 +51,13 @@
     "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.45.2",
-    "@1agh/maude-darwin-x64": "0.45.2",
-    "@1agh/maude-linux-arm64": "0.45.2",
-    "@1agh/maude-linux-arm64-musl": "0.45.2",
-    "@1agh/maude-linux-x64": "0.45.2",
-    "@1agh/maude-linux-x64-musl": "0.45.2",
-    "@1agh/maude-win32-x64": "0.45.2"
+    "@1agh/maude-darwin-arm64": "0.47.0",
+    "@1agh/maude-darwin-x64": "0.47.0",
+    "@1agh/maude-linux-arm64": "0.47.0",
+    "@1agh/maude-linux-arm64-musl": "0.47.0",
+    "@1agh/maude-linux-x64": "0.47.0",
+    "@1agh/maude-linux-x64-musl": "0.47.0",
+    "@1agh/maude-win32-x64": "0.47.0"
   },
   "files": [
     "cli",

package/plugins/design/dependencies.json

@@ -213,6 +213,41 @@
       "fallbackBehavior": "feature-ai-media-generation Phase 2 (DDR-164) — `maude design transcribe` uses whisper.cpp for local, no-key, word-timestamped subtitles (the DEFAULT subtitle path). Without it, transcription falls back to cloud STT (ElevenLabs Scribe / Groq Whisper) via a provider key. whisper.cpp also needs a ggml model file (--model / $MAUDE_WHISPER_MODEL); it ships no default and does not auto-download — see https://huggingface.co/ggerganov/whisper.cpp (e.g. ggml-large-v3-turbo.bin).",
       "usedBy": ["dev-server/bin/transcribe.sh", "dev-server/bin/_transcribe.mjs"],
       "docsUrl": "https://github.com/ggml-org/whisper.cpp"
+    },
+    {
+      "id": "ffmpeg",
+      "type": "cli",
+      "hardness": "soft",
+      "check": {
+        "command": "ffmpeg -version",
+        "expectExit": 0
+      },
+      "install": {
+        "darwin": "brew install ffmpeg",
+        "linux": "apt-get install -y ffmpeg || dnf install -y ffmpeg",
+        "preferred": "https://ffmpeg.org/download.html"
+      },
+      "autoInstall": false,
+      "fallbackBehavior": "feature-scene-aware-keyframes — the `ffmpeg` tier of `maude design smart-frames` (skill footage-keyframes) uses ffmpeg scene-detection to pick keyframes at real shot cuts. Without it, the extractor falls back to the blind Chromium tier (probe-footage, even-spaced) — still works, just not scene-aware.",
+      "usedBy": ["dev-server/bin/smart-frames.sh", "dev-server/bin/_smart-frames.mjs"],
+      "docsUrl": "https://ffmpeg.org"
+    },
+    {
+      "id": "mlx-vlm",
+      "type": "cli",
+      "hardness": "soft",
+      "check": {
+        "command": "python3 -c \"import mlx_vlm\"",
+        "expectExit": 0
+      },
+      "install": {
+        "darwin": "pip install mlx-vlm",
+        "preferred": "https://github.com/Blaizzy/mlx-vlm"
+      },
+      "autoInstall": false,
+      "fallbackBehavior": "feature-scene-aware-keyframes — OPT-IN. The `gemma` tier of `maude design smart-frames` runs a local Gemma-4 MLX scout (Apple Silicon only) to flag semantic action beats. Without it, smart-frames uses the ffmpeg or blind tier — no model download required. The scout also needs a Gemma-4 MLX model (--engine gemma / $MAUDE_GEMMA_MODEL, one-click in Studio Settings → Scene-aware keyframes).",
+      "usedBy": ["dev-server/bin/_smart-frames.mjs"],
+      "docsUrl": "https://github.com/Blaizzy/mlx-vlm"
     }
   ]
 }

package/plugins/design/templates/_shell.html

@@ -116,6 +116,10 @@
       .dc-hmr-holding,
       /* Artboard title/label button (editor affordance, not design content) */
       .dc-artboard-label,
+      /* Print/bleed/trim/margin guide overlay (feature-2-print-artboards) —
+         in-app-only chrome; never part of a PDF/PNG/SVG export (RCA
+         issue-pdf-print-export-marks-missing). */
+      .dc-artboard-guides,
       /* Generic opt-in hooks for any future floating overlay */
       [data-dc-overlay],
       [data-mdcc-annotations] { display: none !important; }