This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summaryCreative Studio adds image generation, typography composition, and a guided workflow for ad creation.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Creative Studio image generation capability with pluggable API-key providers. Adds Creative Studio image generation capability with pluggable API-key providers. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Feature | Low |
Adds Creative Studio composition (typography layer) using Jinja2 templates and headless Chromium. Adds Creative Studio composition (typography layer) using Jinja2 templates and headless Chromium. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Feature | Low |
Adds Creative Studio guided workflow skill (/creative-generate) with 6‑step quality process. Adds Creative Studio guided workflow skill (/creative-generate) with 6‑step quality process. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Feature | Low |
Adds Creative Studio dashboard credentials section for image‑generation API keys. Adds Creative Studio dashboard credentials section for image‑generation API keys. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Feature | Low |
Adds Creative Studio visual prompt engineering section with presets and template‑aware guidance. Adds Creative Studio visual prompt engineering section with presets and template‑aware guidance. Source: llm_adapter@2026-07-12 Confidence: low |
— |
| Feature | Low |
Provides `creative_studio_providers_list` to report configured image providers and capabilities. Provides `creative_studio_providers_list` to report configured image providers and capabilities. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Implements `creative_studio_generate_visual` to render PNGs with provenance manifest. Implements `creative_studio_generate_visual` to render PNGs with provenance manifest. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Supports API keys via new `creative_studio` credentials section or env vars (`OPENAI_API_KEY`, `GEMINI_API_KEY`, `FAL_KEY`). Supports API keys via new `creative_studio` credentials section or env vars (`OPENAI_API_KEY`, `GEMINI_API_KEY`, `FAL_KEY`). Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Allows disabling the Creative Studio family with environment variable `MUREO_DISABLE_CREATIVE_STUDIO=1`. Allows disabling the Creative Studio family with environment variable `MUREO_DISABLE_CREATIVE_STUDIO=1`. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Introduces `creative_studio_compose` to composite text elements over visuals with three HTML/CSS templates (`hero_overlay`, `split`, `minimal_badge`). Introduces `creative_studio_compose` to composite text elements over visuals with three HTML/CSS templates (`hero_overlay`, `split`, `minimal_badge`). Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Provides a brand‑kit mechanism (`BRAND_KIT/kit.yml`) for colors, fonts, and logo fallbacks. Provides a brand‑kit mechanism (`BRAND_KIT/kit.yml`) for colors, fonts, and logo fallbacks. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Bundles Japanese font pipeline (Noto Sans JP + Zen Kaku Gothic New) into `~/.mureo/fonts` with checksum‑locked provenance. Bundles Japanese font pipeline (Noto Sans JP + Zen Kaku Gothic New) into `~/.mureo/fonts` with checksum‑locked provenance. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Adds `creative_studio_edit_visual` to refine visuals via provider edit paths for art‑direction loops. Adds `creative_studio_edit_visual` to refine visuals via provider edit paths for art‑direction loops. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Installs composition dependencies (`jinja2`, `playwright`) lazily via the new `mureo[creative]` extra, keeping core install lean. Installs composition dependencies (`jinja2`, `playwright`) lazily via the new `mureo[creative]` extra, keeping core install lean. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Provides documentation (`docs/creative-studio.md`, `docs/creative-studio.ja.md`) covering architecture, install steps, key handling, brand‑kit schema, format matrix, and safety notes. Provides documentation (`docs/creative-studio.md`, `docs/creative-studio.ja.md`) covering architecture, install steps, key handling, brand‑kit schema, format matrix, and safety notes. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Adds Visual prompt engineering section with scaffold, style menu, genre presets, provider dialect notes, and anti‑patterns. Adds Visual prompt engineering section with scaffold, style menu, genre presets, provider dialect notes, and anti‑patterns. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Feature | Low |
Allows `creative_studio_generate_visual` to accept an optional `template` argument (`hero_overlay`, `split`, `minimal_badge`) that adds template‑aware negative‑space guidance. Allows `creative_studio_generate_visual` to accept an optional `template` argument (`hero_overlay`, `split`, `minimal_badge`) that adds template‑aware negative‑space guidance. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes font resolution in Creative Studio compose to run off the event loop and caches download failures for 24 hours. Fixes font resolution in Creative Studio compose to run off the event loop and caches download failures for 24 hours. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Bugfix | Medium |
Deduplicates requested formats in Creative Studio compose and enforces uniqueItems schema. Deduplicates requested formats in Creative Studio compose and enforces uniqueItems schema. Source: llm_adapter@2026-07-12 Confidence: high |
— |
| Bugfix | Medium |
Normalizes and redacts malformed provider 200 responses in Creative Studio compose. Normalizes and redacts malformed provider 200 responses in Creative Studio compose. Source: llm_adapter@2026-07-12 Confidence: low |
— |
| Bugfix | Low |
Normalizes and redacts malformed provider `200` responses, surfacing them as clear errors instead of raw exceptions. Normalizes and redacts malformed provider `200` responses, surfacing them as clear errors instead of raw exceptions. Source: granite4.1:30b@2026-07-13-audit Confidence: low |
— |
| Refactor | Low |
Removes unused pillow dependency from the mureo[creative] extra. Removes unused pillow dependency from the mureo[creative] extra. Source: llm_adapter@2026-07-12 Confidence: high |
— |
Full changelog
Added
- Creative Studio image generation (visual layer). A new
creative_studio_*MCP tool family generates text-free ad key visuals
through a pluggable, BYO-API-key image provider abstraction (OpenAI
gpt-image, Google Gemini image, fal.ai FLUX, plus third-party providers via
themureo.image_providersentry point).creative_studio_providers_list
reports configured providers and their capabilities;
creative_studio_generate_visualrenders candidate PNGs into a run
directory with a provenance manifest. Provider keys live in a new
creative_studiocredentials section (or theOPENAI_API_KEY/
GEMINI_API_KEY/FAL_KEYenv vars), calls are rate-limited, and the
family can be disabled withMUREO_DISABLE_CREATIVE_STUDIO=1. - Creative Studio composition (typography layer). The
creative_studio_*
family gains the layout half of the pipeline:creative_studio_compose
composites headline/body/CTA/badge/logo over a text-free key visual using
three professional Jinja2 HTML/CSS templates (hero_overlay,split,
minimal_badge) rendered by headless Chromium, so Japanese typography is
pixel-perfect across every banner format (per-format safe areas keep copy
clear of platform UI chrome). A lightweight brand kit
(./BRAND_KIT/kit.yml, surfaced bycreative_studio_brand_kit_get) supplies
colours, fonts, and a logo — degrading field-by-field to tasteful defaults so
output quality never depends on config hygiene. A Japanese-font pipeline
bundles Noto Sans JP + Zen Kaku Gothic New, downloaded once into
~/.mureo/fontswith checksum-locked provenance and a system-font fallback
when offline.creative_studio_edit_visualrefines a visual through a
provider's edit path for the art-direction loop. Composition dependencies
(jinja2, playwright) install via the newmureo[creative]extra and
are lazily imported, so the core install stays lean. - Creative Studio guided workflow (
/creative-generate) + documentation. A
new bundled skill encodes the 6-step, quality-first workflow — brief (Persona /
USP / Brand Voice, optional landing-page analysis), agent-authored copy,
text-free visual generation, an art-direction scoring loop that Reads each PNG
and grades it on the 7-dimension creative-refresh rubric (pass bar: no dimension
≤ 3 and total ≥ 28/35, max 3 edit rounds), per-format composition, and delivery
handing approved banners to the existing upload tools. The creative-refresh
skill cross-links to it. Newdocs/creative-studio.md/docs/creative-studio.ja.md
cover the 3-layer architecture, install (pip install 'mureo[creative]'+
playwright install chromium), provider keys, theBRAND_KIT/kit.ymlschema,
the format matrix, and safety notes. - Creative Studio visual prompt engineering. The
creative-generateskill
gains a Visual prompt engineering section — a fill-in prompt scaffold, a
style-discipline menu, five genre presets (beauty / B2B SaaS / real estate /
food-EC / recruiting), provider-dialect notes, and anti-patterns — to raise
the ceiling of generated visuals.creative_studio_generate_visualtakes an
optionaltemplateargument (hero_overlay/split/minimal_badge) that
appends template-aware negative-space guidance to the provider prompt so the
copy zone is enforced mechanically, and records the chosen template in the run
manifest. - Creative Studio dashboard credentials section. The
mureo configure
dashboard's Setup tab gains a first-class Creative Studio (image
generation) section for the three image-provider API keys
(OPENAI_API_KEY/GEMINI_API_KEY/FAL_KEY): a labelled masked input
per provider, a ✓/✗ configured indicator, a Save that persists each
non-blank key (leave-blank-to-keep), and a Remove for the whole
creative_studiocredentials section — reusing the existing env-var write
and section-remove endpoints, so keys no longer have to be hand-exported or
entered through the generic advanced env form.
Fixed
- Creative Studio review follow-ups. Font resolution during
composeruns
off the event loop (asyncio.to_thread) and a failed download is
negative-cached for 24h, so an offline / egress-filtered host no longer
re-blocks on every compose call. Malformed provider200bodies now surface
as normalized, redacted provider errors instead of rawKeyError/
binascii.Error.creative_studio_composededuplicates requestedformats
(and the schema declaresuniqueItems). Dropped the unusedpillow
dependency from thecreativeextra.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About logly/mureo
Framework for AI agents (Claude Code, Cursor, Codex, Gemini) to operate Google Ads, Meta Ads, and Search Console. Grounded in a local STRATEGY.md — not metric-chasing. Defense-in-depth security, local-first. Apache 2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]