@topy-ai/maggie 0.7.32 → 0.7.34

package/bundled-templates/astro-blog/starter/src/pages/topics/[slug].astro

@@ -0,0 +1,19 @@
+---
+import BaseLayout from "../../layouts/BaseLayout.astro";
+import { postsForTopic, siteUrl, topicBySlug } from "../../lib/repository";
+import { topicJsonLd } from "../../lib/seo";
+import type { Topic } from "../../lib/types";
+
+const topic = topicBySlug(Astro.params.slug || "") as Topic | undefined;
+if (!topic) { Astro.response.status = 404; return Astro.rewrite("/404"); }
+const topicPosts = postsForTopic(topic.slug);
+const pageSize = 12;
+---
+<BaseLayout title={topic.title} description={topic.description} canonical={siteUrl(`/topics/${topic.slug}`)} jsonLd={topicJsonLd(topic, siteUrl(`/topics/${topic.slug}`))}>
+  <h1>{topic.title}</h1>
+  <p>{topic.description}</p>
+  <section><h2>Articles</h2>{topicPosts.slice(0, pageSize).map((post) => <article><h3><a href={`/blog/${post.slug}`}>{post.title}</a></h3><p>{post.excerpt}</p></article>)}</section>
+  {topicPosts.length > pageSize && <nav aria-label="Topic pagination"><a href={`/topics/${topic.slug}/page/2`}>Next</a></nav>}
+  <aside><h2>Keep learning</h2><a href="/get-started">Get started</a></aside>
+  {topic.faq.length > 0 && <section><h2>FAQs</h2>{topic.faq.map((faq) => <details><summary>{faq.question}</summary><p>{faq.answer}</p></details>)}</section>}
+</BaseLayout>

package/bundled-templates/astro-blog/starter/src/pages/topics/index.astro

@@ -0,0 +1,10 @@
+---
+import BaseLayout from "../../layouts/BaseLayout.astro";
+import { allTopics, siteUrl } from "../../lib/repository";
+const topics = allTopics();
+const publishedTopics = topics.filter((topic) => topic.status === "published");
+---
+<BaseLayout title="Topics" description="Browse topics." canonical={siteUrl("/topics")} robots={publishedTopics.length ? "index,follow" : "noindex,follow"}>
+  <h1>Topics</h1>
+  <div class="topic-grid">{publishedTopics.map((topic) => <article><h2><a href={`/topics/${topic.slug}`}>{topic.title}</a></h2><p>{topic.description}</p></article>)}</div>
+</BaseLayout>

package/bundled-templates/astro-blog/starter/src/styles/global.css

@@ -0,0 +1,4 @@
+@import "tailwindcss";
+
+/* The starter keeps its contract UI framework-neutral while providing a
+   working Tailwind v4 entry point for projects that select Tailwind. */

package/bundled-templates/astro-blog/starter/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "astro/tsconfigs/strict",
+  "compilerOptions": {
+    "strictNullChecks": true,
+    "allowJs": false
+  },
+  "include": ["src"],
+  "exclude": ["node_modules", "dist", "_maggie", ".maggie"]
+}

package/bundled-templates/astro-blog/starter/wrangler.jsonc

@@ -0,0 +1,52 @@
+{
+  "$schema": "./node_modules/wrangler/config-schema.json",
+  "name": "maggie-blog",
+  "compatibility_date": "2026-08-27",
+  "compatibility_flags": ["nodejs_compat"],
+  "workers_dev": true,
+  "assets": {
+    "binding": "ASSETS",
+    "directory": "./dist"
+  },
+  "d1_databases": [
+    {
+      "binding": "DB",
+      "database_name": "maggie-blog"
+    }
+  ],
+  "r2_buckets": [
+    {
+      "binding": "MEDIA",
+      "bucket_name": "maggie-blog-media"
+    }
+  ],
+  "kv_namespaces": [
+    {
+      "binding": "CACHE"
+    }
+  ],
+  "env": {
+    "staging": {
+      "name": "maggie-blog-staging",
+      "workers_dev": true,
+      "vars": {
+        "PUBLIC_SITE_ENV": "staging",
+        "MAGGIE_DEPLOY_PROVIDER": "cloudflare"
+      },
+      "d1_databases": [{ "binding": "DB", "database_name": "maggie-blog-staging" }],
+      "r2_buckets": [{ "binding": "MEDIA", "bucket_name": "maggie-blog-media-staging" }],
+      "kv_namespaces": [{ "binding": "CACHE" }]
+    },
+    "production": {
+      "name": "maggie-blog-production",
+      "workers_dev": false,
+      "vars": {
+        "PUBLIC_SITE_ENV": "production",
+        "MAGGIE_DEPLOY_PROVIDER": "cloudflare"
+      },
+      "d1_databases": [{ "binding": "DB", "database_name": "maggie-blog" }],
+      "r2_buckets": [{ "binding": "MEDIA", "bucket_name": "maggie-blog-media" }],
+      "kv_namespaces": [{ "binding": "CACHE" }]
+    }
+  }
+}

package/bundled-tools/clis/maggie_clone.py

@@ -57,6 +57,12 @@ def normalized(url: str) -> str:
 def key_part(value, fallback):
     return re.sub(r"[^a-z0-9]+", "-", value.lower()).strip("-")[:48] or fallback
 
+def css_urls(value: str) -> list[str]:
+    return [html.unescape(match).strip().strip("\"'") for match in re.findall(r"url\(\s*([^)]*?)\s*\)", value or "", re.I)]
+
+def srcset_urls(value: str) -> list[str]:
+    return [part.strip().split()[0] for part in (value or "").split(",") if part.strip()]
+
 def plan(urls, project):
     result, seen = [], set()
     for raw in urls:
@@ -97,22 +103,26 @@ def rendered_quality(raw, parsed):
 
 class PageParser(HTMLParser):
     def __init__(self):
-        super().__init__(); self.title = ""; self._title = False; self._heading = None; self._text = []; self.headings = []; self.links = []; self.images = []; self.stylesheets = []; self.metas = {}
+        super().__init__(); self.title = ""; self._title = False; self._heading = None; self._text = []; self._style = False; self._style_text = []; self.headings = []; self.links = []; self.images = []; self.backgrounds = []; self.stylesheets = []; self.metas = {}
     def handle_starttag(self, tag, attrs):
         values = dict(attrs)
         if tag == "title": self._title = True
+        elif tag == "style": self._style = True; self._style_text = []
         elif tag in {"h1", "h2", "h3", "h4", "h5", "h6"}: self._heading, self._text = tag, []
         elif tag == "a" and values.get("href"): self.links.append({"href": values["href"], "text": ""})
-        elif tag == "img" and values.get("src"): self.images.append({"src": values["src"], "alt": values.get("alt", "") or ""})
+        elif tag in {"img", "source"} and (values.get("src") or values.get("srcset")): self.images.append({"src": values.get("src", ""), "srcset": values.get("srcset", ""), "alt": values.get("alt", "") or ""})
         elif tag == "link" and values.get("rel", "").lower() == "stylesheet" and values.get("href"): self.stylesheets.append(values["href"])
         elif tag == "meta":
             key = values.get("name") or values.get("property")
             if key and values.get("content") is not None: self.metas[key] = values["content"]
+        if values.get("style"): self.backgrounds.extend(css_urls(values["style"]))
     def handle_endtag(self, tag):
         if tag == "title": self._title = False
+        elif tag == "style": self.backgrounds.extend(css_urls("".join(self._style_text))); self._style = False; self._style_text = []
         elif tag == self._heading: self.headings.append({"tag": tag, "text": " ".join(self._text).strip()}); self._heading, self._text = None, []
     def handle_data(self, data):
         value = " ".join(data.split())
+        if self._style: self._style_text.append(data)
         if self._title: self.title += value
         if self._heading: self._text.append(value)
         if self.links and not self._heading: self.links[-1]["text"] = (self.links[-1]["text"] + " " + value).strip()
@@ -221,12 +231,17 @@ def command_extract(args):
         slug, pages = target["page_key"], []
         quality = []
         for name in VIEWPORTS:
-            raw = (root / "html/source" / slug / f"{name}.html").read_text(encoding="utf-8"); parser = PageParser(); parser.feed(raw); pages.append({"viewport": name, "title": parser.title, "headings": parser.headings, "links": parser.links, "images": parser.images, "stylesheets": parser.stylesheets, "meta": parser.metas, "html_bytes": len(raw.encode())})
+            raw = (root / "html/source" / slug / f"{name}.html").read_text(encoding="utf-8"); parser = PageParser(); parser.feed(raw); pages.append({"viewport": name, "title": parser.title, "headings": parser.headings, "links": parser.links, "images": parser.images, "backgrounds": parser.backgrounds, "stylesheets": parser.stylesheets, "meta": parser.metas, "html_bytes": len(raw.encode())})
             quality.append({"viewport": name, **rendered_quality(raw, parser)})
         if not all(item["rendered"] for item in quality):
             raise RuntimeError(f"preview did not render content for {target['source_url']}; captured a loading/empty shell at one or more viewports")
         save_json(root / "extracted" / slug / "page.json", {"source_url": target["source_url"], "pages": pages})
-        assets = [json.loads(x) for x in sorted({json.dumps(x, sort_keys=True) for page in pages for x in page["images"]})]
+        asset_records = []
+        for page in pages:
+            asset_records.extend({"src": image.get("src", ""), "kind": "image"} for image in page["images"] if image.get("src"))
+            asset_records.extend({"src": value, "kind": "responsive-image"} for image in page["images"] for value in srcset_urls(image.get("srcset", "")))
+            asset_records.extend({"src": value, "kind": "background"} for value in page.get("backgrounds", []))
+        assets = [json.loads(x) for x in sorted({json.dumps(x, sort_keys=True) for x in asset_records})]
         save_json(root / "extracted" / slug / "ASSET_MANIFEST.json", {"source_url": target["source_url"], "assets": assets})
         lines = [f"# {target['source_url']}", "", "## Headings", ""] + [f"- `{x['tag']}` {x['text']}" for x in pages[0]["headings"]] + ["", "## Evidence", "", "- DOM and screenshots are stored in the clone run.", "- Computed CSS and interaction states require browser evidence; do not infer them from classes."]
         (root / "extracted" / slug / "PAGE_TOPOLOGY.md").write_text("\n".join(lines) + "\n", encoding="utf-8")
@@ -240,19 +255,31 @@ def command_assets(args):
     root, manifest = read_manifest(args.project.resolve(), args.run_id); require_phase(manifest, "extracted"); report = []
     for target in manifest["targets"]:
         slug = target["page_key"]; data = json.loads((root / "extracted" / slug / "page.json").read_text(encoding="utf-8")); seen = set()
+        references = []
         for page in data["pages"]:
-            for asset in page["images"]:
-                absolute = urllib.parse.urljoin(target.get("capture_url", target["source_url"]), html.unescape(asset["src"]))
-                if absolute in seen: continue
-                seen.add(absolute); item = {"url": absolute, "alt": asset.get("alt", ""), "status": "discovered"}
+            references.extend({"src": image.get("src", ""), "alt": image.get("alt", "")} for image in page["images"] if image.get("src"))
+            references.extend({"src": value, "alt": ""} for image in page["images"] for value in srcset_urls(image.get("srcset", "")))
+            references.extend({"src": value, "alt": ""} for value in page.get("backgrounds", []))
+            for stylesheet in page.get("stylesheets", []):
+                stylesheet_url = urllib.parse.urljoin(target.get("capture_url", target["source_url"]), html.unescape(stylesheet))
                 try:
-                    with urllib.request.urlopen(urllib.request.Request(absolute, headers={"User-Agent": "MaggieClone/1.0"}), timeout=30) as response:
-                        body = response.read(args.max_bytes + 1); item.update({"status": "downloaded", "content_type": response.headers.get_content_type(), "bytes": len(body)})
-                        if len(body) <= args.max_bytes:
-                            suffix = Path(urllib.parse.urlsplit(absolute).path).suffix[:8]; destination = root / "assets" / slug / (hashlib.sha256(absolute.encode()).hexdigest()[:16] + suffix); destination.parent.mkdir(parents=True, exist_ok=True); destination.write_bytes(body); item["local_path"] = str(destination.relative_to(root))
-                            project_asset = Path(target["asset_root"]) / destination.name; project_asset.parent.mkdir(parents=True, exist_ok=True); shutil.copy2(destination, project_asset); item["project_path"] = str(project_asset)
-                except (OSError, urllib.error.URLError) as error: item.update({"status": "failed", "error": str(error)})
-                report.append(item)
+                    with urllib.request.urlopen(urllib.request.Request(stylesheet_url, headers={"User-Agent": "MaggieClone/1.0"}), timeout=30) as response:
+                        css = response.read(args.max_bytes).decode(response.headers.get_content_charset() or "utf-8", "replace")
+                    references.extend({"src": value, "alt": ""} for value in css_urls(css))
+                except (OSError, urllib.error.URLError):
+                    pass
+        for asset in references:
+            absolute = urllib.parse.urljoin(target.get("capture_url", target["source_url"]), html.unescape(asset["src"]))
+            if absolute in seen: continue
+            seen.add(absolute); item = {"url": absolute, "alt": asset.get("alt", ""), "status": "discovered"}
+            try:
+                with urllib.request.urlopen(urllib.request.Request(absolute, headers={"User-Agent": "MaggieClone/1.0"}), timeout=30) as response:
+                    body = response.read(args.max_bytes + 1); item.update({"status": "downloaded", "content_type": response.headers.get_content_type(), "bytes": len(body)})
+                    if len(body) <= args.max_bytes:
+                        suffix = Path(urllib.parse.urlsplit(absolute).path).suffix[:8]; destination = root / "assets" / slug / (hashlib.sha256(absolute.encode()).hexdigest()[:16] + suffix); destination.parent.mkdir(parents=True, exist_ok=True); destination.write_bytes(body); item["local_path"] = str(destination.relative_to(root))
+                        project_asset = Path(target["asset_root"]) / destination.name; project_asset.parent.mkdir(parents=True, exist_ok=True); shutil.copy2(destination, project_asset); item["project_path"] = str(project_asset)
+            except (OSError, urllib.error.URLError) as error: item.update({"status": "failed", "error": str(error)})
+            report.append(item)
     save_json(root / "assets" / "manifest.json", {"created_at": now(), "items": report}); set_phase(root, manifest, "assets"); print(f"asset audit: {len(report)} unique image(s), {sum(x['status'] == 'downloaded' for x in report)} downloaded"); return 0
 
 def command_compare(args):

package/bundled-tools/clis/maggie_dash.py

@@ -40,6 +40,19 @@ def store_for(root: Path) -> MaggieDashStore:
     return MaggieDashStore(root / ".maggie" / "maggiedash.sqlite")
 
 
+def resolve_project_id(args: argparse.Namespace) -> str:
+    """Use the persisted project identity when the CLI flag is omitted."""
+    explicit = getattr(args, "project_id", None)
+    if explicit:
+        return explicit
+    contract = project_root(args) / ".maggie" / "maggiedash.json"
+    try:
+        value = json.loads(contract.read_text(encoding="utf-8")).get("id")
+    except (OSError, json.JSONDecodeError, AttributeError):
+        value = None
+    return str(value).strip() if value else "local-project"
+
+
 def emit(value: object) -> None:
     print(json.dumps(value, indent=2, ensure_ascii=False))
 
@@ -296,10 +309,11 @@ def command_init(args: argparse.Namespace) -> int:
 
 def command_status(args: argparse.Namespace) -> int:
     root = project_root(args)
+    project_id = resolve_project_id(args)
     store = store_for(root)
     try:
-        project = store.connection.execute("SELECT * FROM maggiedash_projects WHERE id=?", (args.project_id,)).fetchone()
-        documents = store.connection.execute("SELECT id, kind, title, slug, status, updated_at FROM maggiedash_documents WHERE project_id=? ORDER BY updated_at DESC", (args.project_id,)).fetchall()
+        project = store.connection.execute("SELECT * FROM maggiedash_projects WHERE id=?", (project_id,)).fetchone()
+        documents = store.connection.execute("SELECT id, kind, title, slug, status, updated_at FROM maggiedash_documents WHERE project_id=? ORDER BY updated_at DESC", (project_id,)).fetchall()
         emit({"status": "ready" if project else "not_initialized", "project": dict(project) if project else None, "documents": [dict(row) for row in documents], "storage": str(store.path)})
         return 0 if project else 1
     finally:
@@ -321,9 +335,10 @@ def command_migrate(args: argparse.Namespace) -> int:
 
 def command_transition(args: argparse.Namespace) -> int:
     require_confirm(args)
+    project_id = resolve_project_id(args)
     store = store_for(project_root(args))
     try:
-        emit(store.transition(args.project_id, args.document_id, args.status, args.actor, args.reason))
+        emit(store.transition(project_id, args.document_id, args.status, args.actor, args.reason))
         return 0
     finally:
         store.close()
@@ -331,31 +346,32 @@ def command_transition(args: argparse.Namespace) -> int:
 
 def command_cms(args: argparse.Namespace) -> int:
     require_confirm(args)
+    project_id = resolve_project_id(args)
     store = store_for(project_root(args))
     try:
         if args.cms_command == "revisions":
-            result = store.list_revisions(args.project_id, args.document_id)
+            result = store.list_revisions(project_id, args.document_id)
         elif args.cms_command == "trash":
-            result = store.trash(args.project_id, args.document_id, args.actor, args.reason)
+            result = store.trash(project_id, args.document_id, args.actor, args.reason)
         elif args.cms_command == "restore":
-            result = store.restore(args.project_id, args.document_id, args.actor, args.reason)
+            result = store.restore(project_id, args.document_id, args.actor, args.reason)
         elif args.cms_command == "schedule":
-            result = store.schedule_publish(args.project_id, args.document_id, args.publish_at, args.actor, args.reason)
+            result = store.schedule_publish(project_id, args.document_id, args.publish_at, args.actor, args.reason)
         elif args.cms_command == "publish-due":
-            result = store.publish_due(args.project_id, args.now, args.actor, args.reason)
+            result = store.publish_due(project_id, args.now, args.actor, args.reason)
         elif args.cms_command == "duplicate":
-            result = store.duplicate(args.project_id, args.document_id, args.new_id, args.new_slug, args.actor, args.reason)
+            result = store.duplicate(project_id, args.document_id, args.new_id, args.new_slug, args.actor, args.reason)
         elif args.cms_command == "redirect":
-            result = store.add_redirect(args.project_id, args.from_path, args.to_path, args.actor, args.reason, args.status_code)
+            result = store.add_redirect(project_id, args.from_path, args.to_path, args.actor, args.reason, args.status_code)
         elif args.cms_command == "preview":
-            result = store.issue_preview(args.project_id, args.document_id, args.secret, args.ttl)
+            result = store.issue_preview(project_id, args.document_id, args.secret, args.ttl)
         elif args.cms_command == "preset-save":
             sections = json.loads(Path(args.sections_file).resolve().read_text(encoding="utf-8"))
-            result = store.save_section_preset(args.project_id, args.preset_id, args.name, sections, args.actor, args.description)
+            result = store.save_section_preset(project_id, args.preset_id, args.name, sections, args.actor, args.description)
         elif args.cms_command == "preset-list":
-            result = store.list_section_presets(args.project_id)
+            result = store.list_section_presets(project_id)
         elif args.cms_command == "preset-insert":
-            result = store.insert_section_preset(args.project_id, args.preset_id, args.existing_id, args.actor, args.reason)
+            result = store.insert_section_preset(project_id, args.preset_id, args.existing_id, args.actor, args.reason)
         else:
             raise ValueError(f"unknown CMS command: {args.cms_command}")
         emit(result)
@@ -622,7 +638,7 @@ def parser() -> argparse.ArgumentParser:
     install.set_defaults(func=command_install)
     status = sub.add_parser("status", help="inspect project and documents")
     status.add_argument("--project", default=".")
-    status.add_argument("--project-id", default="local-project")
+    status.add_argument("--project-id")
     status.set_defaults(func=command_status)
     migrate = sub.add_parser("migrate", help="apply the local MaggieDash schema")
     migrate.add_argument("--project", default=".")
@@ -630,7 +646,7 @@ def parser() -> argparse.ArgumentParser:
     migrate.set_defaults(func=command_migrate)
     transition = sub.add_parser("transition", help="move a document through its approval lifecycle")
     transition.add_argument("--project", default=".")
-    transition.add_argument("--project-id", default="local-project")
+    transition.add_argument("--project-id")
     transition.add_argument("--document-id", required=True)
     transition.add_argument("--status", required=True)
     transition.add_argument("--actor", default="cli")
@@ -641,24 +657,24 @@ def parser() -> argparse.ArgumentParser:
     cms_sub = cms.add_subparsers(dest="cms_command", required=True)
     for name in ("revisions", "trash", "restore"):
         command = cms_sub.add_parser(name)
-        command.add_argument("--project", default="."); command.add_argument("--project-id", default="local-project")
+        command.add_argument("--project", default="."); command.add_argument("--project-id")
         command.add_argument("--document-id", required=True); command.add_argument("--actor", default="cli"); command.add_argument("--reason", default="CMS operation"); command.add_argument("--confirm", action="store_true")
     schedule = cms_sub.add_parser("schedule")
-    schedule.add_argument("--project", default="."); schedule.add_argument("--project-id", default="local-project"); schedule.add_argument("--document-id", required=True); schedule.add_argument("--publish-at", required=True); schedule.add_argument("--actor", default="cli"); schedule.add_argument("--reason", required=True); schedule.add_argument("--confirm", action="store_true")
+    schedule.add_argument("--project", default="."); schedule.add_argument("--project-id"); schedule.add_argument("--document-id", required=True); schedule.add_argument("--publish-at", required=True); schedule.add_argument("--actor", default="cli"); schedule.add_argument("--reason", required=True); schedule.add_argument("--confirm", action="store_true")
     publish_due = cms_sub.add_parser("publish-due", help="publish approved scheduled content whose time has arrived")
-    publish_due.add_argument("--project", default="."); publish_due.add_argument("--project-id", default="local-project"); publish_due.add_argument("--now"); publish_due.add_argument("--actor", default="scheduler"); publish_due.add_argument("--reason", default="scheduled publish tick"); publish_due.add_argument("--confirm", action="store_true")
+    publish_due.add_argument("--project", default="."); publish_due.add_argument("--project-id"); publish_due.add_argument("--now"); publish_due.add_argument("--actor", default="scheduler"); publish_due.add_argument("--reason", default="scheduled publish tick"); publish_due.add_argument("--confirm", action="store_true")
     duplicate = cms_sub.add_parser("duplicate")
-    duplicate.add_argument("--project", default="."); duplicate.add_argument("--project-id", default="local-project"); duplicate.add_argument("--document-id", required=True); duplicate.add_argument("--new-id", required=True); duplicate.add_argument("--new-slug", required=True); duplicate.add_argument("--actor", default="cli"); duplicate.add_argument("--reason", required=True); duplicate.add_argument("--confirm", action="store_true")
+    duplicate.add_argument("--project", default="."); duplicate.add_argument("--project-id"); duplicate.add_argument("--document-id", required=True); duplicate.add_argument("--new-id", required=True); duplicate.add_argument("--new-slug", required=True); duplicate.add_argument("--actor", default="cli"); duplicate.add_argument("--reason", required=True); duplicate.add_argument("--confirm", action="store_true")
     redirect = cms_sub.add_parser("redirect")
-    redirect.add_argument("--project", default="."); redirect.add_argument("--project-id", default="local-project"); redirect.add_argument("--from-path", required=True); redirect.add_argument("--to-path", required=True); redirect.add_argument("--status-code", type=int, default=301); redirect.add_argument("--actor", default="cli"); redirect.add_argument("--reason", required=True); redirect.add_argument("--confirm", action="store_true")
+    redirect.add_argument("--project", default="."); redirect.add_argument("--project-id"); redirect.add_argument("--from-path", required=True); redirect.add_argument("--to-path", required=True); redirect.add_argument("--status-code", type=int, default=301); redirect.add_argument("--actor", default="cli"); redirect.add_argument("--reason", required=True); redirect.add_argument("--confirm", action="store_true")
     preview = cms_sub.add_parser("preview")
-    preview.add_argument("--project", default="."); preview.add_argument("--project-id", default="local-project"); preview.add_argument("--document-id", required=True); preview.add_argument("--secret", required=True); preview.add_argument("--ttl", type=int, default=900); preview.add_argument("--confirm", action="store_true")
+    preview.add_argument("--project", default="."); preview.add_argument("--project-id"); preview.add_argument("--document-id", required=True); preview.add_argument("--secret", required=True); preview.add_argument("--ttl", type=int, default=900); preview.add_argument("--confirm", action="store_true")
     preset_save = cms_sub.add_parser("preset-save", help="save a reusable ordered section arrangement")
-    preset_save.add_argument("--project", default="."); preset_save.add_argument("--project-id", default="local-project"); preset_save.add_argument("--preset-id", required=True); preset_save.add_argument("--name", required=True); preset_save.add_argument("--sections-file", required=True); preset_save.add_argument("--description", default=""); preset_save.add_argument("--actor", default="cli"); preset_save.add_argument("--confirm", action="store_true")
+    preset_save.add_argument("--project", default="."); preset_save.add_argument("--project-id"); preset_save.add_argument("--preset-id", required=True); preset_save.add_argument("--name", required=True); preset_save.add_argument("--sections-file", required=True); preset_save.add_argument("--description", default=""); preset_save.add_argument("--actor", default="cli"); preset_save.add_argument("--confirm", action="store_true")
     preset_list = cms_sub.add_parser("preset-list", help="list reusable section arrangements")
-    preset_list.add_argument("--project", default="."); preset_list.add_argument("--project-id", default="local-project"); preset_list.add_argument("--confirm", action="store_true")
+    preset_list.add_argument("--project", default="."); preset_list.add_argument("--project-id"); preset_list.add_argument("--confirm", action="store_true")
     preset_insert = cms_sub.add_parser("preset-insert", help="expand an arrangement with fresh section IDs")
-    preset_insert.add_argument("--project", default="."); preset_insert.add_argument("--project-id", default="local-project"); preset_insert.add_argument("--preset-id", required=True); preset_insert.add_argument("--existing-id", action="append", default=[]); preset_insert.add_argument("--actor", default="cli"); preset_insert.add_argument("--reason", required=True); preset_insert.add_argument("--confirm", action="store_true")
+    preset_insert.add_argument("--project", default="."); preset_insert.add_argument("--project-id"); preset_insert.add_argument("--preset-id", required=True); preset_insert.add_argument("--existing-id", action="append", default=[]); preset_insert.add_argument("--actor", default="cli"); preset_insert.add_argument("--reason", required=True); preset_insert.add_argument("--confirm", action="store_true")
     cms.set_defaults(func=command_cms)
     ui = sub.add_parser("ui", help="validate MaggieDash dashboard chrome")
     ui_sub = ui.add_subparsers(dest="ui_command", required=True)

package/bundled-tools/clis/maggie_design.py

@@ -655,6 +655,8 @@ def in_place_job(project: Path, routes: list[str], force: bool = False, content_
             project / relative,
             project / "src" / "pages" / relative,
             project / "src" / "app" / relative,
+            project / "src" / "pages" / relative / "index.astro",
+            project / "src" / "pages" / relative / "index.html",
             project / "src" / "pages" / f"{relative}.astro",
             project / "src" / "pages" / f"{relative}.html",
             project / "src" / "app" / relative / "page.tsx",

package/bundled-tools/clis/maggie_design_system.py

@@ -91,7 +91,13 @@ def load_run(project: Path, run_id: str) -> tuple[Path, dict, list[dict]]:
 
 
 def sample_body(sample: Path) -> str:
-    text = sample.read_text(encoding="utf-8")
+    try:
+        text = sample.read_text(encoding="utf-8")
+    except UnicodeDecodeError as error:
+        raise ValueError(
+            f"design sample must be a UTF-8 DESIGN.md/text file, not a binary image: {sample}; "
+            "use text metadata or convert the image into approved design tokens first"
+        ) from error
     return text.split("---", 2)[2].strip() if text.startswith("---") and text.count("---") >= 2 else text.strip()
 
 

package/bundled-tools/clis/site_audit.py

@@ -18,6 +18,29 @@ from content_localization import MARKETS, parse_locale, valid_locale  # noqa: E4
 import site_baseline
 
 
+def stable_structure_reference(key: str, value: str) -> str:
+    """Ignore cache/content hashes in static asset references only."""
+    if key not in {"src", "href"} or not value:
+        return value
+    parsed = urlparse(value)
+    path = parsed.path
+    if not re.search(r"\.(?:css|js|mjs|png|jpe?g|gif|webp|avif|svg|ico|woff2?|ttf|otf)$", path, re.I):
+        return value
+    path = re.sub(r"(?:[-_.])[0-9a-f]{8,64}(?=\.[^.]+$)", "-asset", path, flags=re.I)
+    return urlunparse((parsed.scheme, parsed.netloc, path, parsed.params, "", ""))
+
+
+def stable_structure(structure: list[list[object]]) -> list[list[object]]:
+    normalized = []
+    for entry in structure:
+        if len(entry) != 3 or not isinstance(entry[2], dict):
+            normalized.append(entry)
+            continue
+        attrs = {key: stable_structure_reference(key, str(value)) for key, value in entry[2].items()}
+        normalized.append([entry[0], entry[1], attrs])
+    return normalized
+
+
 class PageParser(HTMLParser):
     def __init__(self) -> None:
         super().__init__()
@@ -148,7 +171,7 @@ def audit_page(url: str, html: str, status: int, content_type: str, expected_lan
         "twitter_card": page.meta.get("twitter:card") in {"summary", "summary_large_image"},
         "jsonld": page.jsonld > 0 and all(item is not None for item in page.jsonld_values),
         "entity_jsonld": any(isinstance(item, dict) and item.get("@type") and (item.get("url") or item.get("@id")) for item in page.jsonld_values),
-        "images": all(image["src"] and image["alt"] for image in page.images),
+        "images": all(image["src"] and image["alt"] is not None for image in page.images),
         "canonical_value": canonical,
         "image_count": len(page.images),
         "language": parse_locale(page.lang)[0],
@@ -161,7 +184,7 @@ def audit_page(url: str, html: str, status: int, content_type: str, expected_lan
             "title": page.title, "meta": page.meta, "canonical": canonical,
             "lang": page.lang, "hreflang": page.hreflang, "robots": robots,
             "jsonld": page.jsonld_values, "images": page.images,
-            "structureHash": hashlib.sha256(json.dumps(page.structure, sort_keys=True).encode()).hexdigest(),
+            "structureHash": hashlib.sha256(json.dumps(stable_structure(page.structure), sort_keys=True).encode()).hexdigest(),
             "textHash": hashlib.sha256(" ".join(page.visible_text).encode()).hexdigest(),
         },
         "contentContract": {

package/bundled-tools/runtime/maggie_memory.py

@@ -21,7 +21,12 @@ FILES = {
 KINDS = set(FILES)
 SCOPES = {"user", "workspace", "project"}
 STATUSES = {"candidate", "active", "superseded", "archived"}
-SECRET_PATTERN = re.compile(r"(?:api[_-]?key|secret|token|password|private[_-]?key|oauth)", re.I)
+# Reject credential-shaped assignments, not ordinary prose that happens to
+# mention a security word (for example, "use design tokens").
+SECRET_PATTERN = re.compile(
+    r"(?:api[_-]?key|secret|token|password|private[_-]?key|oauth)\s*(?:=|:)\s*[^\s,;]+",
+    re.I,
+)
 
 
 def now() -> str:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topy-ai/maggie",
-  "version": "0.7.32",
+  "version": "0.7.34",
   "description": "Install and manage Maggie Skills for AI coding agents",
   "license": "MIT",
   "type": "module",