Weekly updates

​

Features

• The parallel drawElement router is on for every install again. It shipped default-on in late July. A canary then cut router exposure across the fleet to 0.13 percent of non-CI renders, roughly 25 times less than before, because installs outside the cohort were explicitly disarmed. The gating was itself the regression, so the canary entry and the guard that read it are both gone and the producer default stands on its own. The per-install circuit breaker and the per-render self-verify are unchanged, and HF_DE_PARALLEL_ROUTER=false is still the kill switch. This affects speed only, never output (19defeabf, 4a2514232, c6df112ac, af535080a).
• Catalog search can rank by meaning, on your own machine. catalog search can match a phrasing that shares no words with the move you want. It runs on a one-time 33 MB model download that stays on your machine, and nothing is sent anywhere. It is opt-in, so word matching remains the default until you accept that download. The output also reports how many catalog moves the local index has never seen, so a stale index cannot pass for a thin catalog (68205dbbc, #3089).
• Sign in from a headless terminal. hyperframes auth login --device runs the RFC 8628 device flow, so an SSH session or a machine with no browser can authenticate (b9233525b, #2836).
• Studio handles files edited outside the editor. Studio coordinates external file changes, preserves the conflict rather than silently dropping one side, and ships recovery UI for it. Pending edits drain before a reload, external edits reconcile first, and inspector commits are transactional (a99caad58, #2991, b30a23402, #2990, 8a0dccfc7, #2992, ebdd1893c, #2993, 471313854, #2989, 552419c52, #2987).
• Timeline navigation, and steadier virtualized gestures. Logical timeline navigation is modelled and the live timeline clock is extracted. Five virtualized interactions are stabilised: clip gestures, keyframe retiming, drops, marquee selection, and beat gestures. Thumbnail generation is cancelable now, so a scroll no longer queues work nobody is waiting for (0f1333c80, #2712, 19b8a1f3c, #2711, f52398cee, #2704, 44bee4c3c, #2705, bb5c60387, #2706, 91d14744a, #2707, 677fd31e9, #2709, 96861cbaf, #2720).
• A paint query for transparent compositions. The SDK exposes a paint query, so hit-testing can ask what a transparent composition actually paints (9769ba2c7, #3070).
• add records which registry items it installed (0bda6b55b, #3099).

​

Fixes

• An asset whose name starts with a dash no longer breaks a render. Nine independent ffprobe call sites read such a name as an option. Last week’s fix terminated the options at one of them and its regression test pinned that single site, so CI reported the bug class closed while it stayed open everywhere else. Reproduced on ffprobe 8.1.1: audio pad and trim failed in the middle of a render, and hyperframes init, whisper duration probing, and the WebM alpha check all failed as well. A dash-prefixed HEVC preview passed lint silently. Every site terminates its options now, and the one helper that structurally cannot do so asserts the terminator instead of letting the path through (47564ab94, d0dbf11ef, 255cf9291, 6c5403f7c).
• Telemetry redacts any path, not a list of known roots. Redaction covered an allowlist of roots, so a path anywhere else went out intact. It now redacts any path, including bare relative ones and the known input path, and it handles unicode paths, non-Error rejections, and shell callers. One ffprobe helper was throwing raw stderr, which echoes the input path, straight into logs and telemetry (d04569e37, e79ab3ab3, 1664fe6ad).
• skills update no longer deletes skills the manifest never covered. The repo ships skills from three directories and generates its manifest from one of them. Anything installed from the other two looked absent from the manifest, so the prune read that silence as removed upstream and deleted the skills immediately after the same command installed them. The prune now considers only skills under the path the manifest actually covers, and leaves an entry alone when it cannot tell where the skill came from (ed3ff98ce, #3118).
• Resizing an element on the Studio canvas lands where you put it. A run of fixes replaces a 200px guess with the element’s real box, stops a uniform resize writing a scale GSAP ignores, pins the drop point on a first resize and keeps an animated element on it, measures the correction from the pre-gesture position, corrects against the scale the resize actually commits, covers legacy resize boxes, and handles an element whose scale is an instant hold (477f77629, 20ef79862, 7dc18771d, b18fd62e0, ee5ae9619, a693b12cc, 12e637fb2, a850e97f3, #3092, 17ac986bf, #3146, cf45c9845, #2986).
• A hardware GPU claim is verified rather than trusted. Setting browserGpuMode=hardware used to be taken at its word. It is verified now, a probe failure is distinguished from a genuinely absent GPU, and an unverified hardware GPU warns once per process. SwiftShader ghosting in software screenshot captures is fixed, capture mode is no longer mislabelled, and drawElement refusals that used to be silent are named (131780fe9, 6703ea7e0, f69c4a0e3, b57dc13cb, #3096, 33ac86fd3, #3151).
• The runtime is served before author scripts, and the composition query survives the redirect (b6ff3ab74, #3114).
• A Studio edit no longer reloads the preview, and the preview stays alive when the window is tight (bea32b8aa, #3137, d5cc1c9c6, #3091).
• Remote downloads are integrity-checked, and BeginFrame time stays monotonic across frame rates (bbdfee116, #2938, b390b71bd, #3011).
• Sub-composition sibling asset paths resolve everywhere, in previews and outside them (4e7fcf7f2, #2994, cbd8a77d1, #2983).
• Smaller ones. bpm-detective retries after a transient import failure (b4bd67040, #2736). Every redirect a host may answer with is followed (db3de4c1b, #3148). A bare --frame-check stops swallowing the next flag (70cc4f59a, #2966). Queued telemetry is no longer dropped when process.exit races the final flush (bc6dbc7e2, #2970). Font family values split only on top-level commas (172311e95, #3067). A composition can declare its caption colour states (1e7799bfb). Three crash-boundary trips in the editor are fixed (d8a91fc34, #3102). Asset media type mismatches are rejected, and short VFR frame coverage is correct (9792c3295, #2937, 127eb1937, #2936).

​

Under the hood

• A branch that deletes a file main still ships now fails CI. Deletions used to pass review as long as nothing referenced them in the diff (f28bc80a1, #3150).
• The scripts directory is typechecked, and registry manifest paths are contained against escapes in the preview renderer, filesystem-aware (79dff2051, #3149, bd7ea5d5c, dc2d1697f).
• Preview and render divergences settled. The four remaining known differences between what the preview shows and what the render produces are closed (57ec008cb, #3097).
• Canary decisions report why. The rollout evaluator emits the reason behind an assignment, on Studio events too, so a cohort result can be explained rather than guessed (076657a63, b3990ac78, 3b65321a2, #3065).

​

Docs

• A restructured site. There is a Studio section now, plus workflow guides, section hubs, shared page components, and the ten workflows collected in one place. Superseded pages retire behind redirects. A Reference Project landed early in the week and came out again before the week ended, because sending readers to GitHub is not what they want (6fe5b4f82, edfe66a95, #2977, 52f3eb5b2, f742084fa, e60bef3f5, b5509602f).
• Pages show the thing instead of describing it. Roughly two dozen guides traded prose for film. Nine get light-theme videos, six get a real film in place of a six-second clip, and the project model and the two core concepts are drawn rather than described twice. The ten hardest-reading prompting pages were rewritten (72d4016f5, 8762887a5, f595a7d68, b4648e0e5, ad4c6a9b6, 31366d724, eb199bd15, 8dba394d4).
• Docs videos have sound, and one narrator. Every click-to-play video carries an audio track, and the house narrator is written down so the films stop sounding like two different products. Cards on Examples and 30 Days play their film’s audio on hover, with accessible controls, lazy loading, and reduced-motion handling (bb7b0c899, 60f09dfcf, 5361b9e10, fb6a82c50, e6bc8f139, 0467bc812, c9fd7465c, f3d1d531d).
• Claims the source contradicts, corrected. Reading the pages against the code turned up a run of statements that were simply wrong, in the developer reference, in contributor instructions, in the SDK dispatch contract, and in the composition offset rationale. All corrected, including one the author had written themselves. Documentation quality gates run now, so the next batch gets caught by CI instead of by a reader (d01253771, af5ebf09c, 7a91b93dd, e94a458fe, 0f6259d46, 8e658bd6c, fed2baf27, 174bd4e2d).
• 30 Days shows all thirty films. The page borrows nothing from elsewhere now, and it sits above the update feeds in Explore. The Catalog is visual and reproducible on a rebuilt generator, and template-only blocks render in catalog previews (a46bc9d56, 06d2d6f24, c53c7efd1, 79c4056a3, 2a7d9bd0a, 218eff7d3, #3098).
• Broken and self-redirecting navigation fixed. Nineteen anchor links moved onto headings that now exist, two prompting links point at real headings, a nav entry that redirected away from itself is gone, and the changelog and weekly archive are reachable again (d16f6e69d, 951c6ea45, 1a82615f6, 8b98b41ee).

​

Features

• Per-property keyframe lanes. Expanding a Studio track shows one lane per animated property. Before, you got a single collapsed row. Keyframe track headers land with it, plus per-lane retiming interactions and variable timing and layout. Keyframe percentages are now computed in the tween’s own time frame, not the clip’s (fed5e5b71, 8bb31b394, e36fb385b, d518972f8, 4a12eb9d9, 2d1b905a5, #2791).
• Timeline virtualization by default. Long timelines render only the visible rows. Dense keyframe clusters stay readable. Studio also tracks timeline performance now, so regressions show up as telemetry instead of as a complaint (c6925e471, #2926, 723d3381c, #2925, 10b517dab, #2898).
• Bulk easing edits. Select merged keyframes, change their easing, and the whole selection updates in one edit. Ease mode switches optimistically, so the curve updates without waiting on a round trip (10d45def0, 659e22656, #2695).
• Three themed registry families, 29 items. mk-* is minimal presentation (9 items). yt-* is retro-broadcast creator (9 items). hw-* is hand-drawn scribble (11 items). @jbernard077 contributed all three. The work consolidates four earlier pull requests, cuts five items already covered by something we ship, and fixes the defects CI never got to report. beat-freeze-cut joins the transition set as a thirtieth item (f252ec6d9, d3d286a1a, #2939, #1933, #1992, #1993, #1994).
• Fast capture on Windows hardware GPUs. drawElement fast capture is open to Windows hardware GPU configurations. Windows FFmpeg discovery candidates are validated before use (cb30157eb, #2841, 4ad1cf455, #2871).
• Two new layout check options. --layout proseCoverageFloor is available opt-in. data-layout-allow-caption-zone waives the caption-zone rule where an overlap is intentional (209e6e014, #2834, 3a7950fd6, #2853).
• CLI state that survives a reset. Circuit-breaker state rolls over across a config wipe. Install-state moved into the config directory. Deleting that directory is now a genuine full reset (dfe92b2aa, #2874, dae1b63d4, #2904).

​

Fixes

• Transparent GIFs stay transparent. --format gif used to silently flatten transparent compositions. The palette encoder was receiving JPEG frames with no alpha plane. GIF is now treated as an alpha-capable format. Its frames are captured as RGBA PNG. The palette is encoded with explicit transparency semantics. Page-side shader compositing stays enabled for GIF, so shader transitions blend instead of hard-cutting (6cfb05e38, #2327).
• A clean install reports no advisories. Installing hyperframes used to surface five npm advisories, four of them high severity. There was no clean upgrade path. Patched floors land for Hono Node Server, adm-zip, and Sharp. They apply consistently across the CLI, engine, producer, and Cloud Run. ONNX Runtime is pinned to 1.21.1 as an interim choice, because 1.23.2 independently pulls the vulnerable adm-zip range. The pin keeps all six platform bindings (13ac9e390, #2855).
• Media probing hardened end to end. Malformed frame-rate ratios are rejected instead of becoming NaN. File paths are passed after --, so a name starting with - is not read as an option. The PNG walk anchors at IHDR and stops at cICP, using native crc32. Colour metadata merges per field, with correct alpha detection. The AAC duration refinement is cancellable and limited to AAC-LC. Stdin is rejected. Stdout is decoded correctly and bounded (f75ca076b, #2740, 2af3f4d0e, #2912, 62b96c227, #2913, 19dc83bc2, 4d563fa75, #2914, 242a42f6c, 361fd4992, #2915, 9e275423e, #2916, 96a6e8bd9).
• Bounded HDR and video extraction. HDR and video frame extraction now run against explicit resource bounds. They no longer scale with whatever the source demands (233975737, #2955).
• Keyframe edits land on the element you clicked. A run of fixes replaces inferred targets with the real one. Every new tween is authored against a single element. A keyframe added at the playhead targets one element. Lane edits and fallbacks resolve against the clicked element. Colliding keyframes are targeted exactly. Tweens are attributed to their real target. A target the DOM has proved is not unique is never re-authored (3d9243606, #2849, fd5555be7, #2847, ba8df2661, c20c5366d, #2846, 7482c22d8, #2692, 59a818e80, f04cdb79c, 1f3fd2800).
• The preview reload loop is gone. Writes to .transcode-cache and the waveform cache touched files the project watcher was watching. So a preview reloaded in a loop, and shader transitions stuck partway through. Generated caches are now ignored by the watcher and excluded from project metadata (7ea8250f5, bf739a4db, #2952, 1d01b9f2c).
• Preview reliability and resolution. Preview recovery is hardened and loading reliability is improved. Retained preview resources are released instead of accumulating. Chrome resolves on Windows. A selected render resolution is honored rather than silently replaced (c62bd4c45, 18b9acac1, #2837, fbfffb1aa, #2924, d8d626537, #2878, f1655b930, #2876).
• Drilling into sub-compositions. Every host row stays on the drill path, not just the top one. Children expand against their resolved parent host. Hidden state persists on expanded rows. Sub-compositions stay expanded at the end of the timeline. Sub-composition clip timing is computed correctly (acad7b268, d48440a9b, 12546985f, 5dad52370, 3e342cff9, 3f0c20f63, #2845).
• Timeline accessibility and pointer targets. Track numbers announced to assistive technology are the real ones. aria-controls points at the lanes. Toolbar and lane controls meet the 24x24 pointer-target minimum. Ruler clicks seek to the pressed position. Escape cancels a retime. The scrub clamps to 0 instead of being dropped. Popovers and tooltips stop clipping at panel edges (1faa0cbda, #2848, 4e74eefdd, 69020699d, #2843, 706f537f3, b386b55f7, f81ac7457, #2890).
• Colour field and shortcuts panel. The hex field accepts 3-digit shorthand, is editable, and commits on an outside press. The shortcuts popup drops aria-modal, because it is not modal. It dismisses on Escape or an outside press (86f633f98, 55614033e, 7f0cadcbb, aa2811642, #2844).
• Audio and nested timing. Hidden audio is excluded from the render mix. Plateaus survive sampled audio automation. Nested template video timing is offset correctly. Distributed video metadata is validated before a plan is built (b7160f69b, #2870, 04e0ccce4, #2863, 9bbb6d50a, #2859, 557d82b6a, #2839).
• Fonts, downloads, and browsers. Large local fonts stay file-backed instead of being inlined. Transient deterministic font fetches retry. Stalled download cleanup is awaited. A host-compatible cached browser is selected. The check navigation timeout is honored (87791fd01, #2864, 20f4f8f49, #2865, 0bf33cb11, #2835, 85f0c9d35, #2861, fdc593289, #2860).
• Website capture is bounded and honest. Capture runtime stages run against a live budget that is validated and propagated. A blocked page is rejected outright, instead of passing a login wall through as a screenshot. Failure diagnostics are preserved. Skipped Lottie previews are omitted. Bounded vision failures are reported (765a5ae83, 49091e614, d3607606e, 22e3cca96, 9ae000726, ac9458888, dfc60797a, b38e90740, #2933).
• Fewer false lint failures. An asset src still holding an unresolved templating token is no longer reported as a missing asset. The placeholder skip is consolidated into one shared predicate (6c185f252, #2893, 5a6e4b1a8, #2894).
• Registry polish. mk card offsets animate with transforms instead of top and left. Connector geometry and family accents are corrected. Demo legibility is improved. The device timeline registers synchronously (ce7d75dba, #2960, 35231e964, 2bb620517, #2546).

​

Under the hood

• Render routing telemetry. Live DOM element count is now measured at capture-session init on every render. Before, it was measured only on the 17% that open a probe session. So the fleet element-count distribution is finally observable. This is deliberately observational, and it does not feed the routing gate (d74afc7b7, #2891).
• Groundwork for faster short compositions. A controlled sweep found single-worker drawElement beating parallel screenshot by 1.16x to 1.24x. That was on compositions between 250 and 899 frames, which is where the median fleet render sits. A 2x2 then showed motion and DOM size pulling in opposite directions. So the band is gated on an element ceiling, not a bare floor drop. A bare floor drop would have handed large compositions a 1.8x regression. This release computes and emits that band decision on every render, but it changes no routing. It stays behind HF_DE_SHORT_BAND_ROUTE, so the follow-up flip is measurable against a real baseline rather than a guess (0749cd9ff, e9de2fa14, def98f79c, 4dbf0d90b, 23854f7c6, #2875).
• Parallel drawElement router. The router’s minimum-frames floor drops from 2000 to 700. A crossover sweep found three workers beating one at every size tested. The router itself stays off by default behind HF_DE_PARALLEL_ROUTER. So this tunes what it will do rather than changing today’s renders. Render events also gain battery and low-power state on macOS. The same composition was measured flipping between two power-management regimes with no signal to segment by (3da31e399, #2838).

​

Docs

• Colour grading and film effects. The prompting guide gains a colour grading and film effects chapter. Agent guidance links to it. The --hf-color-grading-intensity claim is corrected and made order-agnostic. Professional grading and media treatments are documented, with the treatment contracts spelled out (819ed632d, #2911, 2517f1773, dd9c86d07, 0c7c9bbdb, e4eac0c21, 1a2c30a79, 12452a115, 182862773, #2826).
• The motion chapter, rebuilt. Each rule now carries before-and-after prompts and an exaggerated applied side. The chapter leads with meaning rather than amplitude. It adds the motion-purpose filter, offset ratio, and property coherence. It also adds the worker-boundary determinism caveat and an “Avoiding the slideshow” continuity contract. Demos are rebuilt around motivated subjects and embedded as validated renders (6f29f1454, cebf66e6e, 1f4d00e15, d4bd2917b, 4f6fb8fc1, cdac57c07, dd4fd9cef, #2109).
• The intent interview. The guide documents the intent interview. Its pages line up with the skill contracts. An agent’s first move is now a question rather than a guess (2efbfd475, #2872).
• Contributing and setup. The catalog contribution guide is refreshed. The Studio monorepo dev server port is now documented. It appears in both the setup guide and the Studio docs (67ffafb11, #2954, a52dd9c30, #2902, ffe5e12cf, #2901).
• Guides and adopters. THU-MAIC is added as a HyperFrames adopter. The Send-to guide is unlisted from the web nav. It is served through the tool rather than found by search. It also states plainly that enhance turns are free, and that render is the paid step (1738b5a11, #2761, a3c8f897f, #2918, e3636db07, #2827).
• Product launch video. The guidance uses real screenshots for site showcases. It catches motion jumps at frame cuts. It avoids weak music openings in short launch videos. The end-to-end run exposed defects in capture, audio, and docs. Those are fixed (860954d71, #2881, 5466bcecc, #2880, 30900c346, #2882, e0dc255e8, #2892).
• Skills. Blocked website captures are gated in the skills docs. Media-treatment policy targets are named instead of alluded to. Transition roots without an explicit duration are extended rather than dropped (30f383074, 6cab53a68, #2879, 14ced9051, #2873).

​

Features

• Professional color grading. Core adds master and per-channel RGB tone curves. It adds hue-vs-hue, hue-vs-saturation, and hue-vs-luma curves. It adds three-way shadows, midtones, and highlights wheels, plus HSL secondary qualifiers. Everything normalizes through one shared contract. A grade you author resolves the same way in preview and in render (f99fc4e56).
• Grading controls in Studio. The inspector exposes the new curve and wheel controls, with live previews. You can grade a clip on the canvas instead of hand-writing a data-color-grading payload (20ef48abc).
• Agent-native grading from the CLI. hyperframes media-treatment applies, previews, and clears a grading payload by selector. Use --dry-run before writing and --clear to remove. The media-use skill now reads the source and picks a treatment, instead of guessing a preset name (6d5961b80, 4582881d0).
• Media treatments. A media treatment is a source-aware plan. It composes existing color, effect, timeline, and registry primitives, rather than adding a second runtime schema. Core defines the capability catalog. The runtime renders treatments deterministically. Studio ships an inspector for them. The registry adds matching overlays (70213c5a8, 944640c32, 39c2341c4, b0d3164dd).
• Keyframe ease editor. Studio gets an ease curve editor. It has a preset library, editable ease parameters, and an SVG curve preview. A deterministic ease runtime backs it. An authored ease replays identically at render time (c253dec23, 5acbf240c).
• Versioned distributed plan protocol. Distributed plans now carry an explicit protocol descriptor. Plans written before the descriptor still load as v1. A partial, malformed, or unknown descriptor fails closed, before any layout-specific read. Plan hashes and rendered pixels are unchanged (f9f00b0ef, #2777).
• Plan v2 publishing straight to object storage. A storage-neutral, manifest-last publisher lets cloud adapters write plan artifacts directly to S3 and GCS. No shared filesystem is needed. AWS Lambda now reads the v2 protocol. This is the groundwork for lifting the plan size limit on very large distributed renders (09998789b, 74d7bfde4, 5bf61d6df, #2789, 07f9a3de9, #2792).
• Data-driven caption components. caption-highlight, caption-weight-shift, caption-pill-karaoke, caption-emoji-pop, and caption-editorial-emphasis now build themselves from a shared caption-data runtime. That runtime brings automatic grouping, an emphasis heuristic, and a generic emoji lexicon. A transcript drives the animation, instead of hand-authored per-word markup (7d4e71d10, c67e9dc1f, 08620b75d, 392a9d251, ed8973952).
• New layout lint checks. Lint adds rotation_pivot_drift and off_pivot_rotation for hub-referenced rotation. It also re-samples dense motion for content_overlap, so fast collisions between samples are no longer missed (222aec45a, #2741, e710a1686, #2744, 72e2f08f1, #2746).
• Live map capture warning. The engine detects a live map viewport at capture init. It names the map library it found and points at the basemap-baking path. Streaming tiles no longer silently produce a nondeterministic render (30ca51c61).
• Leaner, larger skills corpus. The composition skills gain seven blueprints and ten rules from a mining pass. The router now routes once and dispatches packet-scoped workers. Each run costs less context (853256403, #2680, 6ad738b58, #2618).

​

Fixes

• Audio no longer runs past the picture. Padded audio is normalized on a sample timeline. The mux stops at the shortest normalized stream. The final mux is capped to video duration. AAC packet padding is trimmed exactly. M4A edit timing and priming survive normalization (4b116b988, 532461599, 63bc525ca, 19258ea5b, afc4e96bb, 9289551e9, 59c56d325, 113a4985b).
• Portable audio padding. The audio filter chain drops an FFmpeg option the bundled Windows build rejects. Compositions that rendered video but failed to mux audio now complete. Typed audio failure causes are preserved through the engine, the in-process producer, and distributed planning (3b9552ef9, 37b88688e, #2769).
• Probe failures say why. ffprobe keeps a bounded stderr tail instead of running quiet. A failed probe now reports the actual error rather than a blank diagnostic (8c5077068, #2772).
• Hardened media downloads. Video downloads are atomic and retry transient failures. Reserved and future-use IPv4 ranges are blocked. Downloader trust-boundary gaps are closed. Network error shapes are narrowed honestly (c01f6b446, 2e84faeb2, 4b81f7858, 5ce2eb879).
• Distributed render reliability. Sparse video directories are materialized. Distributed capture falls back safely. Plan scratch state resets between runs. Oversized plans are attributed and stopped early. Partial color metadata is accepted in plan v2. Cloud Run enforces effective BeginFrame capture (ddb59d356, 96cafb47c, ebb02cafe, d699cbf01, 58869f087, #2814, 2a284a8e3).
• Honest extraction errors. Frame-extraction launch failures aggregate into one typed error with narrowed shapes. They no longer surface as an opaque crash (33ca1de06, c01e1a5f9, 9b63646c8).
• Capture self-verification. Parallel and sequential disk drawElement samples self-verify. Screenshot retry recovers disk-path verify failures. A verify failure rethrows past the completeness check. Orphaned probe sessions close before retries. Frame stride carries onto worker results, so interleaved workers stop reporting false positives (060b6f8ae, 9fc1c2f15, ec791e91d, c85cfae8f, b8e101547, 4f53dd4f2).
• Studio editing. Preview audio plays at speeds above 1x. Flat keyframe retiming is hardened. Tween keyframe diamonds retime correctly. Composed media treatments survive a round trip. Stale color scopes clear. The grading contracts line up across panels (07965e9fe, #2691, 270179d94, f25a13692, d5c7d3ee1, c1fcf7534, 794930a07).
• Authoring fidelity. Position edits apply to SVG elements, not just HTML. Nested-rule selectors survive composition CSS scoping. setText keeps <br> line breaks editable. Duration-authored keyframe timing and intent are preserved (63539a0cd, #2724, 1e2c7d673, #2733, dd7378bbd, #2742, 4bfbd89d6, d84e999f7).
• Fewer false lint failures. The media_in_subcomposition rule is dropped. Bounded GSAP infinite repeats are allowed. Compiler-derived data-end is recognized as legitimate. The pivot-drift and connector_detached checks are tightened against counterfactuals (e7f9918d2, #2765, adb149b86, #2763, ac9f46310, 75ed99e1d, #2819, 7a294f195, #2739).
• Preview and coverage. The preview server serves external symlink assets. Looping short videos are credited in the coverage gate. Frame coverage aligns with extraction rounding. Invalid render durations are bounded (7778c093b, #2764, a637f394e, #2732, f0c2c7d23, 344d9c0a8).
• Runtime audio variables in distributed plans. Audio variables resolved at runtime are carried into distributed plans. They are no longer dropped when a render fans out (465c9e764, #2725).
• CLI process lifecycle. Command failures report once. Error telemetry is awaited before finalization. The post-render exit reset stays root-owned. The lifecycle migration is complete (73d3b4e1f, a9338a4e0, e0bda7a17, 619406a23).
• Caption template hygiene. Caption runtimes are wrapped in IIFEs. Non-numeric caption-data versions are rejected. A boot fetch never clobbers a manual attach. Brand custom properties clear on unbranded re-attach. GSAP renders at attach. A quadratic hide-all-others loop is gone (e2846eb7c, 5c2981d06, 4f6994719, 020c8986f, 5af6203ae, 18de2b1f1, 8bf939043).
• Feedback telemetry. CLI feedback is sent as plain events. The repro guidance no longer embeds identifying detail (597c14a88, 78ab9bc88).

​

Docs

• Send-to guide is discoverable. The Send-to guide is published in the nav and in llms.txt. Agents can find it without being handed the path (911b332bb, #2667).
• Changelog video skill. Captions are non-optional in the changelog-video skill. A pre-build gate stops a run before it produces an unbuildable composition (807078c7c, #2729, 7d312bd17).
• Codex plugin packaging. The skills bundle now packages a Codex plugin upload alongside the existing surfaces (696cbdbbd, #2668).

​

Features

• Automatic media proxying. Studio-server probes each source’s codec facts and transcodes a bounded H.264 proxy on demand. The runtime swaps an undecodable source to its proxy. Browser-hostile footage plays instead of showing a black frame. Render always uses the originals (9ca1e1710, #2587, 9d148d288, #2589, 39b588cbd, #2592).
• Proxies across the authoring surfaces. Proxies serve from the preview route, play, and the static project server. They also bake into published archives. Projects can opt out with media.autoProxy or --no-proxy (67eab59f4, #2590, 74b4f1e8c, #2593, 35eff5038, #2595, 645880706, #2591).
• Alpha-capable proxies. Alpha sources get a VP9 and yuva420p WebM proxy instead of a refusal. A ProRes 4444 file previews rather than going black (e8371a7ac, #2598).
• Media Use video generation. resolve --type video generates a HeyGen avatar video, free for new API users. It falls back to local LTX-2 when HeyGen is unavailable, or when you pass --local-only (0a66671fc, #2614).
• Flat inspector on by default. Studio’s flat inspector is now the default panel after this cycle’s fixes. Set VITE_STUDIO_FLAT_INSPECTOR_ENABLED=false to return to the legacy panel (a4167ede0).
• Size-aware cloud archives. Cloud render and publish honor .hyperframesignore. They drop root render and snapshot output by default. They add cloud render --dry-run diagnostics, so projects stay under the 200MB upload limit (e73304fb0).
• Clearer engine timeout errors. Puppeteer and page-navigation timeouts now name the env vars and escape hatches that fix them. Streaming-encode auto-disables on Windows software-GPU setups (6944a1c2d, 58cff5f6d, cbf2a2ec6).
• New GSAP lint rules. Lint flags seek-order and SVG draw-on hazards. It flags relative-value second writers and tl.set initial hides. It flags cold-seek opacity reveals that break at render time (f3d210066, #2611, 4ad582606, #2612, 55ee559e4, #2503).
• CLI quality-of-life. The transcribe timeout is configurable, with a duration-scaled default. --resolution accepts portrait aspects. doctor surfaces the extract-cache directory, alongside a new --frames-cache-dir flag (f8210d96d, 46e9ecf3f, ca3522750).
• SDK base variable reads. getVariableValue({ base: true }) reads the declared default before overrides. attachSync re-syncs the override snapshot on iframe load (db5e06221, #2499, 4682da14f).

​

Fixes

• Deep sub-composition nesting. Recursive sub-composition inlining now handles depth-3 and deeper nesting (d21883fe0, #2660).
• Final frame holds. Video holds its final frame through the rest of the composition instead of dropping to blank (2e8f871bc).
• No phantom capture duplicates. Capture stops compositing phantom duplicates when captureBeyondViewport is on (2be8a62c0, #2607).
• Clean CLI output. Diagnostics and the SystemMemory cgroup notice now go to stderr. That keeps --json output and stdout parsers clean (b179c9536, #2520, d92d1d4f5, #2522).
• Studio reliability. Composition timelines are hardened. Stale failed sidecars are ignored for existing renders. Stale SwiftShader layers are prevented (2b65b4efc, #2615, 2577aaffe, #2621, 54a3ef200).
• Platform fixes. Intel macOS background removal is restored. Windows work dirs avoid the output path limit. A dyld crash on older macOS now points at HYPERFRAMES_BROWSER_PATH (04954ead8, #2480, 882c20324, #2479, 0d16f19b0).
• Media Use asset cleanup. Failed asset reservations are cleaned up instead of leaking zero-byte placeholders (49113eb08, #2627).
• Producer coverage gate. Held video tails are credited in the coverage gate (209784ab2, #2606).

​

Docs & Examples

• Automatic proxying guide. New docs cover the proxy cache, published-proxy baking, and the render-original invariant. They also cover FFmpeg requirements and both opt-out forms (8c1b6c515, #2596).
• Send-to guides consolidated. The Send-to import guidance now lives in one guide. That resolves an earlier fidelity contradiction (8bfc67688, #2619, 7acabbcde, #2620).
• Core skills install by default. The core skill set now installs by default on every surface (3bb26b0f0, #2554).
• TTS docs aligned. The skill’s text-to-speech docs now match the CLI contract (428e57191, #2483).