@1agh/maude 0.46.0 → 0.47.0

package/apps/studio/whats-new.json

@@ -1,6 +1,33 @@
 {
   "$schema": "./whats-new.schema.json",
   "entries": [
+    {
+      "id": "figma-smart-select",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "feature",
+      "title": "Click to select, like Figma",
+      "summary": "Your mock now opens live — click a button or link to actually try it. When you want to edit, press V: a plain click selects the object under your cursor, ⌘-click reaches the deepest element, double-click drills in one level, and Enter / Shift+Enter / Tab walk the layer tree. The toolbar's first two tools are Browse (live) and Select (V). The Layers panel grew up too: wrapper groups show at their real depth, component instances render purple with their component's name, you can lock a layer (locked layers can't be selected or dragged on the canvas), double-click a layer's name to rename it, and the tree auto-reveals whatever you pick on the canvas. And when a flex layout fights your manual tweaks, right-click the container → \"Convert children to absolute position\" freezes every child where it sits so you can drag them freely (one undo reverts it) — or convert a whole artboard at once (right-click the artboard, or when switching its kind to Digital/Print). And when a component instance needs its own look, hit Detach on the Inspector's Shared badge — edits stay local to that one instance. Text editing got Figma's exact rhythm too: drilling down to a text layer selects all of it (ready to overwrite), and once you're in, a click places the cursor, a double-click grabs a word, and a triple-click grabs everything.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "acp-safe-defaults-and-attention-notifications",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "improvement",
+      "title": "Fewer prompts in chat, and a nudge when you're needed",
+      "summary": "The assistant chat now runs common design-workflow actions — browser checks, your own local dev-server requests, reading files, and web search — without asking every time. And when a chat is waiting on your approval or an answer, Maude now sends a system notification so you don't miss it.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "web-artboards",
+      "version": "0.47.0",
+      "date": "2026-07-21",
+      "kind": "feature",
+      "title": "Web artboards — breakpoints, duplicate, and a grid editor",
+      "summary": "Set an artboard's kind to Web and it becomes a responsive viewport: a small chip shows its current breakpoint, and \"Duplicate at width…\" (right-click or the Inspector) clones it at Mobile/Tablet/Laptop/Desktop widths for reflow testing. Grid containers also get a new Grid section in the Inspector — define columns and rows with px/%/fr/em/auto units, drag the gutters directly on the canvas, and place children into specific cells.",
+      "surface": "design-ui"
+    },
     {
       "id": "scene-aware-video-analyze",
       "version": "0.46.0",

package/cli/commands/design.mjs

@@ -110,6 +110,22 @@ const BIN_VERBS = new Set([
   // user's ElevenLabs history before spending credits on a new music/SFX/VO
   // track. Runs server-side (key resolved by the sidecar); needs a dev server.
   'audio-search',
+  // DDR-185. `curl-local` is a loopback-only curl: resolves the request's
+  // target host and refuses to invoke real curl at all unless every resolved
+  // address is strictly loopback (127.0.0.0/8 or ::1). Exists so an ACP chat
+  // session can auto-approve "check my local dev server" without widening the
+  // session's Bash allow-list to unscoped curl (`Bash(curl:*)` would reach any
+  // host — see DDR-185's rejected alternatives). No dev server dependency —
+  // pure Node, no `<designRoot>` involvement.
+  'curl-local',
+  // DDR-185 security addendum. `agent-browser-safe` replaces the bare
+  // `Bash(agent-browser:*)` allow-list entry a security review found was a
+  // zero-confirmation session-hijack primitive (agent-browser's own bundled
+  // skill recommends a PERSISTENT authenticated Chrome profile). Closed
+  // subcommand allow-list + forced domain scope + forced ephemeral profile —
+  // see `_agent-browser-safe.mjs` for the full rationale. No dev server
+  // dependency — pure Node.
+  'agent-browser-safe',
 ]);
 
 // Bin verbs that boot the dev-server (directly, or by shelling into server-up.sh).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.46.0",
+  "version": "0.47.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -51,13 +51,13 @@
     "test:e2e:desktop:acp-cold-start": "pnpm --filter @maude/desktop-e2e e2e:acp-cold-start"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.46.0",
-    "@1agh/maude-darwin-x64": "0.46.0",
-    "@1agh/maude-linux-arm64": "0.46.0",
-    "@1agh/maude-linux-arm64-musl": "0.46.0",
-    "@1agh/maude-linux-x64": "0.46.0",
-    "@1agh/maude-linux-x64-musl": "0.46.0",
-    "@1agh/maude-win32-x64": "0.46.0"
+    "@1agh/maude-darwin-arm64": "0.47.0",
+    "@1agh/maude-darwin-x64": "0.47.0",
+    "@1agh/maude-linux-arm64": "0.47.0",
+    "@1agh/maude-linux-arm64-musl": "0.47.0",
+    "@1agh/maude-linux-x64": "0.47.0",
+    "@1agh/maude-linux-x64-musl": "0.47.0",
+    "@1agh/maude-win32-x64": "0.47.0"
   },
   "files": [
     "cli",

package/plugins/design/templates/_shell.html

@@ -116,6 +116,10 @@
       .dc-hmr-holding,
       /* Artboard title/label button (editor affordance, not design content) */
       .dc-artboard-label,
+      /* Print/bleed/trim/margin guide overlay (feature-2-print-artboards) —
+         in-app-only chrome; never part of a PDF/PNG/SVG export (RCA
+         issue-pdf-print-export-marks-missing). */
+      .dc-artboard-guides,
       /* Generic opt-in hooks for any future floating overlay */
       [data-dc-overlay],
       [data-mdcc-annotations] { display: none !important; }