@1agh/maude 1.3.0 → 1.4.0

package/apps/studio/use-tool-mode.tsx

@@ -18,6 +18,7 @@ import {
   useContext,
   useEffect,
   useMemo,
+  useRef,
   useState,
 } from 'react';
 
@@ -53,6 +54,9 @@ export type ShapeKind = 'square' | 'rounded' | 'circle' | 'diamond' | 'triangle'
  */
 export type CanvasMode = 'preview' | 'edit';
 
+/** Document event two provider instances keep one active tool through. */
+export const TOOL_SYNC_EVENT = 'maude:tool-sync';
+
 /** The resting tool each mode arms (and returns to via `resetTool`). */
 export const MODE_DEFAULT_TOOL: Readonly<Record<CanvasMode, Tool>> = Object.freeze({
   preview: 'browse',
@@ -231,6 +235,46 @@ export function ToolProvider({
   // FigJam look); sharp squares stay one popover click away.
   const [shapeKind, setShapeKind] = useState<ShapeKind>('rounded');
 
+  // ONE ACTIVE TOOL PER CANVAS DOCUMENT, across provider instances.
+  //
+  // A UI canvas carries TWO providers: the comment-mount layer's (it owns the
+  // comment drop) and canvas-lib's own (it owns the palette) — separate
+  // bundles, so separate contexts. They used to converge only through a tool
+  // KEYDOWN, which both routers see; a palette CLICK reached canvas-lib's
+  // provider alone. So "Comment" in the palette lit up while the comment
+  // layer stayed in browse, and clicking the canvas dropped nothing — you had
+  // to know to press C (plan T31/L11). A change here is announced on the
+  // document and every other instance adopts it. The boot posture is NOT
+  // announced (the two instances deliberately boot differently — see
+  // `initial`); only a change after mount is.
+  const syncId = useRef(Math.random().toString(36).slice(2));
+  const toolRef = useRef(tool);
+  toolRef.current = tool;
+  const announced = useRef(false);
+  useEffect(() => {
+    if (!announced.current) {
+      announced.current = true;
+      return;
+    }
+    if (typeof document === 'undefined') return;
+    document.dispatchEvent(
+      new CustomEvent(TOOL_SYNC_EVENT, { detail: { tool, from: syncId.current } })
+    );
+  }, [tool]);
+  useEffect(() => {
+    if (typeof document === 'undefined') return;
+    const onSync = (e: Event) => {
+      const d = (e as CustomEvent<{ tool?: unknown; from?: unknown }>).detail;
+      if (!d || d.from === syncId.current || typeof d.tool !== 'string') return;
+      // Already there: nothing to do, and — for a sticky-locked tool — not
+      // touching it keeps the lock.
+      if (d.tool === toolRef.current) return;
+      setTool(d.tool as Tool);
+    };
+    document.addEventListener(TOOL_SYNC_EVENT, onSync);
+    return () => document.removeEventListener(TOOL_SYNC_EVENT, onSync);
+  }, [setTool]);
+
   // Cursor sync — applied inside the canvas (this hook runs in the canvas
   // context). The active tool's cursor is set on <body> AND forced across the
   // whole canvas working area via an `!important` rule, so the custom cursor

package/apps/studio/whats-new.json

@@ -1,6 +1,78 @@
 {
   "$schema": "./whats-new.schema.json",
   "entries": [
+    {
+      "id": "design-system-on-every-desktop",
+      "version": "1.4.0",
+      "date": "2026-09-16",
+      "kind": "improvement",
+      "title": "Your team’s design system on your desktop too",
+      "summary": "When you open a team project on the desktop, its design system now appears in the Design System section — tokens, specimens and all — the same as on the machine that made it. Specimens someone adds show up for everyone.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "sync-reliability-sept",
+      "version": "1.4.0",
+      "date": "2026-09-16",
+      "kind": "fix",
+      "title": "Steadier syncing in shared projects",
+      "summary": "Renaming a folder no longer makes you miss a teammate’s later edits to the canvases inside it; replacing an image keeps showing the new one on your screen; a file the workspace can’t store right now is named in the Sync panel and delivers by itself when it can; and a too-big file you remove stops being reported.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "edits-follow-moves",
+      "version": "1.4.0",
+      "date": "2026-09-16",
+      "kind": "improvement",
+      "title": "Your edit follows a canvas a teammate moved",
+      "summary": "If a teammate moves a canvas — or renames its folder — while you are editing it offline, your change now lands at the canvas’s new place for everyone instead of waiting for review. Deleting a canvas you were editing still asks you what to keep.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "edit-own-comments",
+      "version": "1.4.0",
+      "date": "2026-09-16",
+      "kind": "feature",
+      "title": "Fix a typo in your own comment",
+      "summary": "Open a comment you wrote and choose Edit — change the text and save; everyone sees the new wording and the replies stay. On a Maude Cloud project in the browser, your comments and replies now carry your name instead of the workspace’s.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "live-canvases-long-sessions",
+      "version": "1.3.1",
+      "date": "2026-09-15",
+      "kind": "fix",
+      "title": "Canvases stay live in long sessions",
+      "summary": "A canvas open in your browser on a Maude Cloud project kept working for about 15 minutes and then quietly stopped showing teammates’ changes until you reloaded the page — it now stays live however long you work. And editing a design system’s tokens.css restyles every open canvas that uses it, straight away.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "team-access-and-presence",
+      "version": "1.3.1",
+      "date": "2026-09-15",
+      "kind": "fix",
+      "title": "Lost access? Maude asks you to sign in again",
+      "summary": "If an owner removes your access or your sign-in expires, the Sync panel now tells you to sign in again — instead of \"check your connection\" — and keeps your changes on this computer until you do. Signing in again sends them. And when a teammate closes a canvas, their avatar and cursor now leave everyone else’s screen straight away.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "comment-tool-and-live-tree",
+      "version": "1.3.1",
+      "date": "2026-09-15",
+      "kind": "fix",
+      "title": "The Comment tool works from the toolbar; new images and folders show up for everyone at once",
+      "summary": "Picking Comment in the canvas toolbar now lets you click an element to comment — before, only the C key did. An image saved next to your canvases appears in the file tree straight away, on your machine and your teammates’. A folder you create or move outside Maude, or move in the tree, reaches the team in seconds instead of on the next launch.",
+      "surface": "design-ui"
+    },
+    {
+      "id": "inspector-keeps-number-types",
+      "version": "1.3.1",
+      "date": "2026-09-15",
+      "kind": "fix",
+      "title": "Editing a number in the inspector keeps it a number",
+      "summary": "Changing a value like an artboard height or a video’s length used to turn it into text in the canvas source — some components then misread it. Numbers and on/off values now stay what they were, and leaving a value unchanged no longer rewrites the file.",
+      "surface": "design-ui"
+    },
     {
       "id": "artboard-rename-and-files",
       "version": "1.3.0",

package/apps/studio/ws.ts

@@ -36,6 +36,9 @@ export type WsData =
        *  a desktop, which is what makes every broadcast below reach everybody
        *  exactly as it always did. */
       session: string;
+      /** WHO opened this socket, as the proxy vouched it — Cloud Phase 27.
+       *  `''` on a desktop, where the project's git identity is the person. */
+      user?: string;
     }
   | {
       id: string;
@@ -446,8 +449,12 @@ export function createWs(
         else if (msg.type === 'tabs' && Array.isArray(msg.tabs)) inspect.setOpenTabs(msg.tabs);
         else if (msg.type === 'select' && msg.selection) inspect.setSelected(msg.selection);
         else if (msg.type === 'clear-select') inspect.setSelected(null);
-        else if (msg.type === 'comments-add' && msg.payload) await api.commentsAdd(msg.payload);
-        else if (msg.type === 'comments-patch' && msg.id)
+        else if (msg.type === 'comments-add' && msg.payload) {
+          // In a cell the author is the vouched member, never a claim in the
+          // frame and never the cell's own git identity (the machine).
+          const vouched = ws.data.kind === 'inspector' ? ws.data.user : '';
+          await api.commentsAdd(vouched ? { ...msg.payload, author: vouched } : msg.payload);
+        } else if (msg.type === 'comments-patch' && msg.id)
           await api.commentsPatch(msg.id, msg.patch || {});
         else if (msg.type === 'comments-delete' && msg.id) await api.commentsDelete(msg.id);
         else if (msg.type === 'comments-request' && typeof msg.file === 'string') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -56,13 +56,13 @@
     "test:e2e:desktop:parity:cloud": "pnpm --filter @maude/desktop-e2e e2e:parity:cloud"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "1.3.0",
-    "@1agh/maude-darwin-x64": "1.3.0",
-    "@1agh/maude-linux-arm64": "1.3.0",
-    "@1agh/maude-linux-arm64-musl": "1.3.0",
-    "@1agh/maude-linux-x64": "1.3.0",
-    "@1agh/maude-linux-x64-musl": "1.3.0",
-    "@1agh/maude-win32-x64": "1.3.0"
+    "@1agh/maude-darwin-arm64": "1.4.0",
+    "@1agh/maude-darwin-x64": "1.4.0",
+    "@1agh/maude-linux-arm64": "1.4.0",
+    "@1agh/maude-linux-arm64-musl": "1.4.0",
+    "@1agh/maude-linux-x64": "1.4.0",
+    "@1agh/maude-linux-x64-musl": "1.4.0",
+    "@1agh/maude-win32-x64": "1.4.0"
   },
   "files": [
     "cli",

package/plugins/design/templates/_shell.html

@@ -205,7 +205,7 @@
       // module, its tokens, its components CSS and its meta as separate
       // requests. Getting the document through and nothing else is what
       // "refused to connect" looks like from the outside.
-      const cap = params.get('t') || '';
+      let cap = params.get('t') || '';
       // THE BASE THIS DOCUMENT WAS SERVED FROM, not the origin root.
       //
       // The fleet's canvas origin puts the project in the PATH
@@ -223,7 +223,7 @@
         return cap ? abs + (abs.includes('?') ? '&' : '?') + 't=' + encodeURIComponent(cap) : abs;
       };
       const canvasQuery = shaParam ? ('?sha=' + encodeURIComponent(shaParam)) : '';
-      const canvasUrl = canvasRel ? withCap('/' + designRel + '/' + canvasRel + canvasQuery) : null;
+      let canvasUrl = canvasRel ? withCap('/' + designRel + '/' + canvasRel + canvasQuery) : null;
       const myFileKey = canvasRel ? (designRel + '/' + canvasRel) : null;
       // True while an `ai-activity` entry is live for THIS canvas (an agent is
       // running /design:edit|new on it). Mirrors ai-banner's gate: parent relays
@@ -250,6 +250,19 @@
           // The panel just optimistically applied an edit → skip the redundant
           // follow-up module reload (set here, parent-verified).
           lastCssOptimisticAt = Date.now();
+        } else if (m.dgn === 'canvas-cap') {
+          // A re-minted capability (it expires; app.jsx refreshes it). Every
+          // URL built from here on carries it, and asking for this shell
+          // document with it re-plants the origin's cookie — the one module
+          // imports, assets and the live sockets fall back to. Without this an
+          // open canvas stopped loading and updating once its first capability
+          // expired. Only a well-formed token, and only in the cloud (a
+          // desktop canvas never had one).
+          const t = m.t;
+          if (!cap || typeof t !== 'string' || t.length > 4096 || !/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(t)) return;
+          cap = t;
+          if (canvasRel) canvasUrl = withCap('/' + designRel + '/' + canvasRel + canvasQuery);
+          fetch(withCap('/_canvas-shell.html'), { cache: 'no-store', credentials: 'same-origin' }).catch(() => {});
         }
       });
 
@@ -394,12 +407,22 @@
             if (msg.type !== 'canvas-hmr') return;
             if (msg.mode === 'css') {
               const v = msg.version || Date.now();
-              // Match by exact filename when we have one; otherwise refresh all.
-              const targetFile = (msg.file || '').split('/').pop();
+              // Match by PATH when we have one; otherwise refresh all. By path,
+              // not by file name: every design system has a `tokens.css`, and
+              // a change to one canvas's imported `system/<a>/tokens.css`
+              // "matched" the shell's link to `system/<b>/tokens.css` — which
+              // swapped the wrong sheet and skipped the reload below that the
+              // changed one needed (plan T31/L16).
+              const changed = msg.file ? '/' + msg.file : '';
               let matched = false;
               for (const link of document.querySelectorAll('link[rel="stylesheet"]')) {
                 const href = link.getAttribute('href') || '';
-                if (!targetFile || href.includes(targetFile)) {
+                if (!href) continue;
+                let linkPath = '';
+                try {
+                  linkPath = decodeURIComponent(new URL(href, location.href).pathname);
+                } catch {}
+                if (!changed || linkPath.endsWith(changed)) {
                   const base = href.split('?')[0];
                   link.setAttribute('href', base + '?v=' + v);
                   matched = true;
@@ -416,7 +439,21 @@
               if (!matched && msg.file && canvasRel) {
                 const cssDir = msg.file.replace(/[^/]+$/, '');
                 const canvasDir = canvasRel.replace(/[^/]+$/, '');
-                if (cssDir === canvasDir) location.reload();
+                if (cssDir === canvasDir) {
+                  location.reload();
+                } else {
+                  // …and a stylesheet imported from ANYWHERE else (a design
+                  // system's tokens.css) is inlined the same way. The module's
+                  // style tag names what it inlined; re-import so it re-injects.
+                  // (Canvas script could add names here, but that can only
+                  // FORCE a reload — the safe direction.)
+                  var bundled = document.querySelector('style[data-canvas-css="bundled"]');
+                  var names = bundled && bundled.dataset.canvasCssSources ? bundled.dataset.canvasCssSources.split('|') : [];
+                  if (names.indexOf(msg.file) !== -1) {
+                    if (window.__maudeCanvasRuntime && window.__maudeCanvasRuntime.remount) softReload(v);
+                    else location.reload();
+                  }
+                }
               }
             } else if (msg.mode === 'module' || msg.mode === 'hard') {
               // Only reload when the change touches *this* canvas (or `_lib`).
@@ -443,7 +480,11 @@
                   // direction; it can never suppress one.)
                   var hasComps = false;
                   try { hasComps = !!(window.__maude_comps__ && window.__maude_comps__().length); } catch (err) { hasComps = false; }
-                  if (!hasComps && Date.now() - lastCssOptimisticAt < 1500) return;
+                  // …but NEVER a sync write (`remote`): it can carry a
+                  // teammate's change merged under this person's own edit (a
+                  // lost race re-applied onto theirs), and skipping it left
+                  // their change off this canvas until a manual reload.
+                  if (!hasComps && !msg.remote && Date.now() - lastCssOptimisticAt < 1500) return;
                 }
                 // Phase 30 (F4) — prefer an in-place hot-swap for ANY canvas-body
                 // (`module`) change whenever the canvas runtime is mounted: the

package/plugins/flow/.claude-plugin/config.schema.json

@@ -475,7 +475,7 @@
         "tracker": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Issue / task tracker. Used by /flow:done, /flow:bug-rca, /flow:bug-fix to optionally create or update tickets.",
+          "description": "Issue / task tracker. Used by /flow:done, /flow:bug-rca, /flow:bug-fix and /flow:status to optionally read, create or update tickets. `orbit` additionally routes /flow:plan (find or create the task), /flow:execute (working-state reports) and /flow:done (close-time artifact push, warn-only) through the `orbit-backend` skill.",
           "properties": {
             "provider": {
               "type": "string",
@@ -487,13 +487,26 @@
                 "notion",
                 "asana",
                 "shortcut",
+                "orbit",
                 "none"
               ],
               "default": "none"
             },
             "mcp": {
               "type": "string",
-              "description": "MCP tool name prefix used to call the provider (e.g. `mcp__claude_ai_ClickUp`, `mcp__github`). Generic commands resolve tool names by appending the operation (`<mcp>_<op>`). Omit if no MCP server is configured — commands will print payloads for manual handling."
+              "description": "MCP tool name prefix used to call the provider (e.g. `mcp__claude_ai_ClickUp`, `mcp__github`, `mcp__orbit`). Generic commands resolve tool names by appending the operation (`<mcp>_<op>`). Omit if no MCP server is configured — commands will print payloads for manual handling."
+            },
+            "baseUrl": {
+              "type": "string",
+              "format": "uri",
+              "pattern": "^https?://",
+              "description": "Base URL of a self-hosted tracker instance — used by `provider: orbit` (e.g. `https://orbit.example.com`); other providers ignore it. A committed pointer, never a secret: it names the MCP endpoint the project's `.mcp.json` entry targets (`<baseUrl>/api/mcp`) and the task links (`<baseUrl>/t/ORB-123`)."
+            },
+            "tokenEnv": {
+              "type": "string",
+              "pattern": "^[A-Z_][A-Z0-9_]*$",
+              "default": "ORBIT_MCP_TOKEN",
+              "description": "Name of the environment variable holding the per-machine bearer token for the tracker's MCP server — used by `provider: orbit`; other providers ignore it. Only the variable NAME is stored here; the token lives in the user's environment and `.mcp.json` references it as `${<tokenEnv>}`. Flow commands check whether it is set — they never read, print or write its value."
             },
             "defaults": {
               "type": "object",

package/plugins/flow/README.md

@@ -40,6 +40,6 @@ For the full catalog (group definitions, member descriptions, rename history), s
 
 ## Skills
 
-`workflow-state`, `ddr-keeper`, `scenario`, `agent-browser`, `agent-device`, `codebase-intelligence`, `a11y-checker`, `question-protocol`, `make-skill-template`, `claude-md-keeper`, `debugging-rules`, `a11y-rules`, `motion-rules`, `responsive-rules`, `testing-rules`, `skill-loader`.
+`workflow-state`, `ddr-keeper`, `scenario`, `agent-browser`, `agent-device`, `codebase-intelligence`, `a11y-checker`, `question-protocol`, `make-skill-template`, `claude-md-keeper`, `debugging-rules`, `a11y-rules`, `motion-rules`, `responsive-rules`, `testing-rules`, `skill-loader`, `orbit-backend` (the `orbit` tracker provider's contract).
 
 See [`skills/`](./skills/) for the full list and per-skill SKILL.md files.