@agent-native/core-corpus 0.214.0 → 0.217.0

package/corpus/templates/content/shared/suggestion-text.ts

@@ -172,9 +172,48 @@ export function suggestionTextPresentation(
   return nodes;
 }
 
+// Each suggestion is presented from its own copy of the Page, and the editor
+// asks again on every highlight rebuild, so recent Pages keep their results.
+// Each Page keeps its 256 most recent ranges: while a suggestion is being
+// drafted its Page stays the same and its range keeps changing.
+const presentationsBySource = new Map<
+  string,
+  Map<string, SuggestionPresentationNode[] | null>
+>();
+
 export function suggestionTextPresentationForSource(
   content: string,
   context: SuggestionPresentationContext,
+): SuggestionPresentationNode[] | null {
+  const key = `${context.from}:${context.to}:${content}`;
+  let known = presentationsBySource.get(context.source);
+  if (known) {
+    presentationsBySource.delete(context.source);
+    presentationsBySource.set(context.source, known);
+    if (known.has(key)) {
+      const presentation = known.get(key)!;
+      known.delete(key);
+      known.set(key, presentation);
+      return presentation;
+    }
+  } else {
+    if (presentationsBySource.size >= 128)
+      presentationsBySource.delete(presentationsBySource.keys().next().value!);
+    known = new Map();
+    presentationsBySource.set(context.source, known);
+  }
+  const presentation = computeSuggestionTextPresentationForSource(
+    content,
+    context,
+  );
+  if (known.size >= 256) known.delete(known.keys().next().value!);
+  known.set(key, presentation);
+  return presentation;
+}
+
+function computeSuggestionTextPresentationForSource(
+  content: string,
+  context: SuggestionPresentationContext,
 ): SuggestionPresentationNode[] | null {
   if (context.source.slice(context.from, context.to) !== content) return null;
   if (content.length === 0 && context.from === context.to) return [];

package/corpus/templates/content/vitest.config.ts

@@ -6,6 +6,8 @@ import baseConfig, {
 import react from "@vitejs/plugin-react-swc";
 import { defineConfig, mergeConfig } from "vitest/config";
 
+import { KNOWN_LOSS_TAG } from "./acceptance/known-loss";
+
 export default mergeConfig(
   baseConfig,
   defineConfig({
@@ -29,6 +31,14 @@ export default mergeConfig(
       // index backlog before answering, so tests take the indexed path unless
       // they force the fallback scan.
       env: { AGENT_NATIVE_SEARCH_DRAIN_BUDGET_MS: "60000" },
+      globalSetup: ["./acceptance/generate-action-registry.ts"],
+      tags: [
+        {
+          name: KNOWN_LOSS_TAG,
+          description:
+            "Main fails this today; its meta names the lane whose fix flips it. CI reports it without failing the PR.",
+        },
+      ],
       hookTimeout: 60_000,
       testTimeout: 60_000,
       maxWorkers: process.env.CONTENT_MIGRATION_POSTGRES_URL

package/corpus/templates/crm/.agents/skills/actions/references/action-fields.md

@@ -140,6 +140,6 @@ export default defineAction({
 
 When the gate is truthy and the call isn't yet approved, the loop emits an `approval_required` event and **stops the turn — `run()` never executes**. A predicate gates conditionally (e.g. only external recipients) and **fails closed**: a throw is treated as "approval required". It receives its own copy of the prepared snapshot of the validated arguments, defaults applied, and the approval binds to the snapshot's hash, so an approved call runs only with the arguments that were approved (a Date binds by its time). The human approves via the chat UI's Approve affordance, which re-issues the turn with the call's `approvalKey`, and only then does the action run.
 
-Approval is given in the app, so HTTP never grants it. The HTTP action route and the generated Workers entry run a gated call only for the proven app UI (a frontend call from the signed-in user, same origin, holding the short-lived UI capability; `isProvenUiRequest`, the proof `uiOnly` uses) or the app's MCP directory widget. Every other HTTP caller (bearer or API key, MCP OAuth token, org service token, A2A, extension iframe, mobile app) gets `409 approval_required`, and a service identity can never approve. The shared client presents the capability with every write from a signed-in session (minted once per user, reused for nine minutes, never for reads or public pages), so a gated button works on its first request. A call without proof gets `403 ui_capability_required`; the client then re-mints and retries once, which is only the fallback for an expired or rejected capability. Every surface evaluates the gate through `preparedCallNeedsApproval`, so a throwing predicate asks there too. A caller that must run unattended needs a different action, never a bypass of the gate.
+Approval is given in the app, so HTTP never grants it. The HTTP action route and the generated Workers entry run a gated call only for the proven app UI (a frontend call from the signed-in user, same origin, holding the short-lived UI capability; `isProvenUiRequest`, the proof `uiOnly` uses) or the app's MCP directory widget. Every other direct HTTP caller (bearer or API key, MCP OAuth token, org service token, extension iframe, or mobile app) gets `409 approval_required`, and a service identity can never approve. A2A tasks use their separate approval flow. The task pauses until its owner approves, then replays the approved tool call under its approval lease. The shared client presents the capability with every write from a signed-in session (minted once per user, reused for nine minutes, never for reads or public pages), so a gated button works on its first request. A call without proof gets `403 ui_capability_required`; the client then re-mints and retries once, which is only the fallback for an expired or rejected capability. The agent loop, plan mode registry, HTTP action route, generated Workers entry, and MCP dispatch evaluate the gate through `preparedCallNeedsApproval`, so a throwing predicate asks there too. The local `pnpm action ...` CLI calls `handler.run()` directly and does not evaluate `needsApproval`. Treat it as a local development tool, not an approval boundary. A caller that must run unattended needs a different action, never a bypass of the gate.
 
 **Keep approvals rare** — the default is off and almost every action should leave it off. The canonical example is Mail's `send-email` (`needsApproval: true`). See the `security` skill and the Human Approval doc.

package/corpus/templates/design/.agents/skills/actions/references/action-fields.md

@@ -140,6 +140,6 @@ export default defineAction({
 
 When the gate is truthy and the call isn't yet approved, the loop emits an `approval_required` event and **stops the turn — `run()` never executes**. A predicate gates conditionally (e.g. only external recipients) and **fails closed**: a throw is treated as "approval required". It receives its own copy of the prepared snapshot of the validated arguments, defaults applied, and the approval binds to the snapshot's hash, so an approved call runs only with the arguments that were approved (a Date binds by its time). The human approves via the chat UI's Approve affordance, which re-issues the turn with the call's `approvalKey`, and only then does the action run.
 
-Approval is given in the app, so HTTP never grants it. The HTTP action route and the generated Workers entry run a gated call only for the proven app UI (a frontend call from the signed-in user, same origin, holding the short-lived UI capability; `isProvenUiRequest`, the proof `uiOnly` uses) or the app's MCP directory widget. Every other HTTP caller (bearer or API key, MCP OAuth token, org service token, A2A, extension iframe, mobile app) gets `409 approval_required`, and a service identity can never approve. The shared client presents the capability with every write from a signed-in session (minted once per user, reused for nine minutes, never for reads or public pages), so a gated button works on its first request. A call without proof gets `403 ui_capability_required`; the client then re-mints and retries once, which is only the fallback for an expired or rejected capability. Every surface evaluates the gate through `preparedCallNeedsApproval`, so a throwing predicate asks there too. A caller that must run unattended needs a different action, never a bypass of the gate.
+Approval is given in the app, so HTTP never grants it. The HTTP action route and the generated Workers entry run a gated call only for the proven app UI (a frontend call from the signed-in user, same origin, holding the short-lived UI capability; `isProvenUiRequest`, the proof `uiOnly` uses) or the app's MCP directory widget. Every other direct HTTP caller (bearer or API key, MCP OAuth token, org service token, extension iframe, or mobile app) gets `409 approval_required`, and a service identity can never approve. A2A tasks use their separate approval flow. The task pauses until its owner approves, then replays the approved tool call under its approval lease. The shared client presents the capability with every write from a signed-in session (minted once per user, reused for nine minutes, never for reads or public pages), so a gated button works on its first request. A call without proof gets `403 ui_capability_required`; the client then re-mints and retries once, which is only the fallback for an expired or rejected capability. The agent loop, plan mode registry, HTTP action route, generated Workers entry, and MCP dispatch evaluate the gate through `preparedCallNeedsApproval`, so a throwing predicate asks there too. The local `pnpm action ...` CLI calls `handler.run()` directly and does not evaluate `needsApproval`. Treat it as a local development tool, not an approval boundary. A caller that must run unattended needs a different action, never a bypass of the gate.
 
 **Keep approvals rare** — the default is off and almost every action should leave it off. The canonical example is Mail's `send-email` (`needsApproval: true`). See the `security` skill and the Human Approval doc.

package/corpus/templates/design/.agents/skills/design-templates/SKILL.md

@@ -20,7 +20,11 @@ description: >-
 1. **Resolve the starting point.** When the user mentions a template, past
    design, or prior work, call both `list-design-templates` and `list-designs`
    before generating. Match the requested name or id; ask only when multiple
-   plausible results remain.
+   plausible results remain. To look through a template before using it, call
+   `get-design-template --templateId="<id>"` (read-only); in the UI a template
+   card opens the same read-only preview, and its "Use template" button is the
+   copy step. Built-in starters include app screens (analytics dashboard,
+   messaging app, project tasks, design studio) beside ads, posters and pages.
 2. **Save a reusable template.** Call `save-design-as-template` with the source
    `designId`. The action snapshots inline screens, canvas dimensions,
    defaults, linked design system, and locked layers.

package/corpus/templates/design/.agents/skills/native-effects/SKILL.md

@@ -6,20 +6,27 @@ description: >-
 
 # Native WebGPU effects
 
-The native shader catalog returned by `get-shader` (`format: "native-v2"`) contains the exact definition versions available in Design. Each entry is one original shader with useful default properties the user can customize; do not create visual variants as preset entries. Historical GLSL shaders use the separate `shader-fills` workflow.
+The native shader catalog returned by `get-shader` (`format: "native-v2"`) contains the exact definition versions available in Design. Each entry is one original shader with useful default properties the user can customize; do not create visual variants as preset entries. Previously saved GLSL blocks remain renderable and removable; new shader authoring uses native WGSL.
 
 Read the definitions and their full property schemas with `get-shader`, then read the selected file with `get-shader` or `read-source-file`. Keep its `versionHash` and call `edit-native-shader` with `expectedVersionHash`. Apply a definition by its exact `definitionId` and `definitionVersion`; omit `params` to use all declared defaults or pass property-keyed overrides. For example, `an-native-mesh-anchors` version `5` has a `palette` color-ramp property. To shift it from blue to teal, apply with `params: { palette: [{ position: 0, color: { space: "srgb", components: [0.145, 0.388, 0.922], alpha: 1 } }, { position: 1, color: { space: "srgb", components: [0.078, 0.722, 0.651], alpha: 1 } }] }`. Stop positions run from 0 to 1; color components are normalized sRGB values from 0 to 1. For a selected element without a stable authored `data-agent-native-node-id`, pass a unique same-file `targetSelector`; the action stamps its stable ID and applies the effect in one guarded write. Do not copy generated runtime scripts into source. Fill apply appends another native Fill on the same authored layer, preserving existing Fill instances and CSS paints. Target authored `nodeId` values from the source or projection, rather than layer display names. The manifest `instances` array orders native Fills from bottom to top; the inspector lists the frontmost first. Only one enabled native Layer can be newly applied per target; Backdrop uses its own placement.
 
 ## Create with AI
 
-The Shader fill and effect pickers open the existing AgentSidebar with a draft request. Let the user describe the appearance, then use the supplied designId, fileId, authored nodeId or targetSelector, and placement. Create native WebGPU WGSL with declared editable properties; this workflow does not use the historical GLSL shader blocks. Read `get-shader` and the selected source first so the definition uses the current native manifest, uniform, pass, and resource contracts.
+The Shader fill and effect pickers open the existing AgentSidebar with a draft request. Let the user describe the appearance, then use the supplied designId, fileId, authored nodeId or targetSelector, and placement. Create native WebGPU WGSL with declared editable properties; this workflow creates native WGSL rather than historical GLSL blocks. Read `get-shader` and the selected source first so the definition uses the current native manifest, uniform, pass, and resource contracts.
 
 Save the validated custom definition with `edit-native-shader` operation `define-definition` and the current `expectedVersionHash`. Read back with `get-shader` to obtain the saved definition's exact execution hash, approve that version with `approve-definition` and `expectedExecutionHash`, then apply its ID/version to the selected target. Re-read the source hash after each write. Approval is scoped to the current Design and caller; changed executable content needs its own exact-hash approval. Preserve built-in IDs and versions. For a revision, save a new version, approve its execution hash, and use `revise-definition` for the intended instances.
 
+Folded Mesh uses the native indexed-mesh render contract: set `mesh: { columns, rows }` on the render pass, with safe-integer dimensions from 16 to 256 and at most 32,768 cells; omit `draw` and `dispatch` on that pass. WGSL vertex stages address the runtime's shared grid with `@builtin(vertex_index)`. Version `3` retains the 28 numeric controls from version `2` and adds up to four editable lights and four noise bands through shared record-array controls. Light records contain normalized position and direction, color, intensity, amount, and normalized focus; noise-band records contain left/right/top/bottom bounds, feather, strength, frequency, color fade, and normalized focus. Child field units and display scales are part of the returned schema; frequency is cycles per UV axis and displays with `×`. The native record-array contract uses ordered rows, exact field keys, and at most four rows. Angles display in degrees, time offset in seconds, and normalized values in percent; line density displays as a count. Compact packing places scalar properties in consecutive float lanes, aligns `vec2` values to two lanes, and aligns structured paint/color blocks to `vec4`. Folded Mesh versions `1` and `2` use the legacy 128-float (32-`vec4`) capacity; version `3` opts into 256 floats (64 `vec4`s). Read `get-shader` for exact property keys, defaults, units, and WGSL before creating or editing a definition.
+
 Custom definitions saved in the file appear in the existing picker for their supported Fill, Layer, or Backdrop placement, and their declared properties use the shared controls. Verify the actual GPU preview and persistence after reload before reporting a created shader working; schema validation and a thumbnail alone do not establish the user's requested appearance.
 
 Liquid Metal version `12` has independent `tint` and `fill` properties. Tint is a normalized RGBA color. Fill defaults to a solid gray paint: `{ kind: "solid", color: { space: "srgb", components: [0.667, 0.667, 0.675], alpha: 1 } }`. A gradient Fill has `kind` (`linear`, `radial`, `angular`, or `diamond`), a CSS-degree `angle`, and 2–8 `stops` with normalized `position` and `color` values. Gradients use the shared picker’s centered geometry and may include `opacity` from 0 to 1. Supported `interpolation` values are `in srgb`, `in srgb-linear`, `in oklab`, and `in display-p3`; omitted or empty interpolation uses sRGB for all-sRGB stops and Oklab when a stop uses Display P3. The internal reflection profile is independent of Fill. Liquid Metal wraps its reflections around painted SVG shapes and uses the element box on HTML layers.
 
 Liquid Glass version `3` (`an-native-liquid-glass`) is the current Backdrop material. It refracts content behind an HTML element or an outer SVG logo with edge falloff that tapers into the center. Apply it through the existing Effects picker or `edit-native-shader`; its declared properties use the shared controls and color picker. HTML receivers inherit their authored corner radii. SVG receivers follow their complete painted silhouette, including holes and transparent paint. Target the outer SVG with an HTML parent, or the whole editable SVG group created by a new file drop. Imported groups retain their painted silhouette and holes. Existing ordinary frames retain box coverage. Standalone child paths, SVG child groups, nested SVG targets, text clipping, and SVG content rejected by the native source serializer remain unsupported. Versions `1` and `2` remain executable for existing designs. Liquid Metal remains a separate Fill/Layer material.
 
+Pulsing Border version `5` (`an-native-pulsing-border`) supports Fill and Layer placement; versions `3` and `4` remain executable for existing designs. It follows authored HTML corner radii or painted SVG silhouettes, including holes; its Fill is transparent beyond the contour and its Layer preserves the receiver's center. Default roundness `.25` preserves the authored outline; other values adjust corner curvature through a bounded symmetric distance-field kernel while keeping straight edges anchored. Colors is a spatial Linear or Angular paint with up to eight editable stops in the standard gradient picker; moving light stations illuminate that paint. Background remains a separate color. Thickness controls the bright edge width, Softness feathers that edge, Bloom controls glow brightness, and Glow spread controls glow radius independently. Intensity, pulse, smoke, and sizing controls remain editable; `get-shader` exposes the full property schema and defaults. The shared `margin` supplies each side's value unless that side has an explicit override, including an explicit zero. Playback speed and frame use the ordinary native instance controls. The light and smoke patterns are generated in WGSL without an image input.
+
+Editor, presentation, board overview, template, and catalog previews use the shared native preview surface and runtime. Interactive surfaces follow the document's 60 or 120 fps target. Compact thumbnails animate at 15 fps while visible and pause when offscreen; they retain the same shader execution, geometry, and input assets.
+Board live, static, and over-screen previews share one host animation epoch across iframe remounts, so panning or zooming does not restart the effect phase. Capped over-screen previews use a bounded logical viewport while retaining the authored board transform.
+
 `set-params` updates only the supplied properties on the selected stable `instanceId`. Use `set-instance` with that ID for independent `enabled` visibility, `opacity`, and other instance settings. `playback`, `duplicate`, `reorder`, and `remove` use the same action and current source hash. `remove` deletes only the addressed instance. For native Fill ordering, use same-node Fill instance IDs: `reorder` puts an instance before `beforeInstanceId` in the bottom-to-top manifest, or at the top with `beforeInstanceId: null`. Native Fill ordering does not interleave with CSS paint rows. On a stale-source error, re-read before retrying. A CPU-valid action result does not prove a GPU frame; inspect the Design preview. PNG preparation pins the saved file, unchanged layout viewport, and optional output region. Selected-region PNG rerenders at the pinned live clock and requested density, isolating the selected authored subtrees while preserving full backdrop sampling context. Capture without an output region retains the last committed native-frame path. External agents can call `get-native-render-contexts`, request a local foreground PNG with `request-native-local-export` and the exact source version, then poll `get-native-local-export`. After the editor claims the request, it captures the requested frame or isolated region, stores an owner-scoped PNG attachment, and marks the request completed. `get-native-local-export` then returns a protected same-origin download URL and opaque attachment reference. A pending request or browser download initiation is not completion. `export-png` rejects enabled native effects rather than returning headless pixels without them. A source mismatch, missing frame, or unsupported definition is a failure, not a blank export.

package/corpus/templates/design/.generated/bridge/shader-fill-preview.generated.ts

@@ -6,257 +6,11 @@ export const shaderFillPreviewBridgeScript: string = `"use strict";
 (() => {
   // app/components/design/bridge/shader-fill-preview.bridge.ts
   (function() {
-    var patchedEl = null;
-    var originalBackground = "";
-    function resolveTarget(selector, nodeId) {
-      if (selector) {
-        try {
-          var hit = document.querySelector(selector);
-          if (hit) return hit;
-        } catch (_err) {
-        }
-      }
-      if (nodeId) {
-        var byId = document.querySelector(
-          '[data-agent-native-node-id="' + nodeId.replace(/"/g, '\\\\"') + '"]'
-        );
-        if (byId) return byId;
-      }
-      return document.body;
-    }
-    function isSafeBackgroundStyleValue(value) {
-      if (typeof value !== "string") return false;
-      var trimmed = value.trim();
-      if (!trimmed) return false;
-      if (/expression\\s*\\(/i.test(trimmed)) return false;
-      if (/javascript\\s*:/i.test(trimmed)) return false;
-      if (/url\\s*\\(/i.test(trimmed)) return false;
-      if (/[<>{};]/.test(trimmed)) return false;
-      return true;
-    }
-    function applyPreview(selector, nodeId, css) {
-      clearPreview();
-      if (css && !isSafeBackgroundStyleValue(css)) {
-        try {
-          window.parent.postMessage(
-            { type: "shader-fill-preview-rejected", reason: "unsafe-css-value" },
-            "*"
-          );
-        } catch (_err) {
-        }
-        return;
-      }
-      var el = resolveTarget(selector, nodeId);
-      if (!el) return;
-      originalBackground = el.style.background || "";
-      el.style.background = css || "";
-      patchedEl = el;
-    }
-    function clearPreview() {
-      if (!patchedEl) return;
-      patchedEl.style.background = originalBackground;
-      patchedEl = null;
-      originalBackground = "";
-    }
-    var MAX_GLSL_LENGTH = 2e4;
-    var UNIFORM_NAME_RE = /^u_[A-Za-z0-9_]{1,48}$/;
-    var SHADER_BUILTIN_UNIFORMS = ["u_time", "u_resolution"];
-    function validatePreviewGlslSource(glsl) {
-      var errors = [];
-      if (typeof glsl !== "string" || glsl.trim().length === 0) {
-        return ["GLSL source is empty"];
-      }
-      if (glsl.length > MAX_GLSL_LENGTH) {
-        errors.push(
-          "GLSL source is " + glsl.length + " chars \\u2014 max is " + MAX_GLSL_LENGTH
-        );
-      }
-      if (!/void\\s+main\\s*\\(/.test(glsl)) {
-        errors.push("GLSL source must define void main()");
-      }
-      if (!/gl_FragColor/.test(glsl)) {
-        errors.push("GLSL source must write gl_FragColor");
-      }
-      if (/<script/i.test(glsl)) {
-        errors.push("GLSL source must not contain an opening script tag");
-      }
-      if (/[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F]/.test(glsl)) {
-        errors.push("GLSL source contains control characters");
-      }
-      return errors;
-    }
-    function validatePreviewUniformManifest(uniforms) {
-      var errors = [];
-      if (uniforms === void 0 || uniforms === null) return errors;
-      if (typeof uniforms !== "object") {
-        return ["uniforms manifest must be an object"];
-      }
-      var manifest = uniforms;
-      var names = Object.keys(manifest);
-      if (names.length > 16) {
-        errors.push("too many uniforms (" + names.length + ") \\u2014 max is 16");
-      }
-      for (var i = 0; i < names.length; i++) {
-        var name = names[i];
-        var def = manifest[name];
-        if (!UNIFORM_NAME_RE.test(name)) {
-          errors.push(
-            'uniform "' + name + '" must match u_[A-Za-z0-9_]+ (max 50 chars)'
-          );
-          continue;
-        }
-        if (SHADER_BUILTIN_UNIFORMS.indexOf(name) !== -1) {
-          errors.push(
-            'uniform "' + name + '" is a built-in provided by the runtime'
-          );
-          continue;
-        }
-        if (!def || typeof def !== "object") {
-          errors.push('uniform "' + name + '" definition must be an object');
-          continue;
-        }
-        if (def.type === "float") {
-          if (typeof def.value !== "number" || !isFinite(def.value)) {
-            errors.push('uniform "' + name + '" value must be a finite number');
-          }
-        } else if (def.type === "vec2") {
-          var v = def.value;
-          if (!Array.isArray(v) || v.length !== 2 || typeof v[0] !== "number" || typeof v[1] !== "number" || !isFinite(v[0]) || !isFinite(v[1])) {
-            errors.push(
-              'uniform "' + name + '" value must be [x, y] finite numbers'
-            );
-          }
-        } else if (def.type === "color") {
-          if (typeof def.value !== "string" || !/^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(def.value)) {
-            errors.push(
-              'uniform "' + name + '" value must be a hex color like "#1a2b3c"'
-            );
-          }
-        } else {
-          errors.push(
-            'uniform "' + name + '" has unknown type \\u2014 use float, vec2, or color'
-          );
-        }
-      }
-      return errors;
-    }
-    function validatePreviewShaderDef(shader) {
-      var errors = validatePreviewGlslSource(shader.glsl);
-      errors = errors.concat(validatePreviewUniformManifest(shader.uniforms));
-      if (shader.name !== void 0) {
-        if (typeof shader.name !== "string" || shader.name.length > 80) {
-          errors.push("shader name must be a string \\u2264 80 chars");
-        } else if (shader.name.indexOf("*/") !== -1 || /<\\/?script/i.test(shader.name)) {
-          errors.push("shader name contains forbidden sequences");
-        }
-      }
-      return errors;
-    }
-    function postShaderRejected(errors) {
-      try {
-        window.parent.postMessage(
-          { type: "glsl-shader-preview-rejected", errors },
-          "*"
-        );
-      } catch (_err) {
-      }
-    }
-    var MAX_PREVIEW_MOUNTS = 8;
-    var acceptedPreviewCountSinceClear = 0;
-    function runtime() {
-      var api = window.__anShaders;
-      return api && api.version >= 1 ? api : null;
-    }
     window.addEventListener("message", function(e) {
       if (e.source !== window.parent) return;
-      if (!e.data || typeof e.data.type !== "string") return;
-      if (e.data.type === "shader-fill-preview") {
-        var selector = typeof e.data.selector === "string" ? e.data.selector : "";
-        var nodeId = typeof e.data.nodeId === "string" ? e.data.nodeId : "";
-        var css = typeof e.data.css === "string" ? e.data.css : "";
-        applyPreview(selector, nodeId, css);
-        return;
-      }
-      if (e.data.type === "shader-fill-preview-clear") {
-        clearPreview();
-        return;
-      }
-      if (e.data.type === "glsl-shader-preview") {
-        var api = runtime();
-        if (!api) return;
-        var target = e.data.target && typeof e.data.target === "object" ? e.data.target : {};
-        var shader = e.data.shader && typeof e.data.shader === "object" ? e.data.shader : null;
-        if (!shader || typeof shader.glsl !== "string") return;
-        var validationErrors = validatePreviewShaderDef(shader);
-        if (validationErrors.length > 0) {
-          postShaderRejected(validationErrors);
-          return;
-        }
-        if (acceptedPreviewCountSinceClear >= MAX_PREVIEW_MOUNTS) {
-          postShaderRejected([
-            "too many active shader previews \\u2014 max is " + MAX_PREVIEW_MOUNTS
-          ]);
-          return;
-        }
-        acceptedPreviewCountSinceClear += 1;
-        api.applyPreview(
-          { nodeId: target.nodeId, selector: target.selector },
-          {
-            id: shader.id,
-            name: shader.name,
-            glsl: shader.glsl,
-            uniforms: shader.uniforms,
-            values: e.data.values && typeof e.data.values === "object" ? e.data.values : void 0
-          },
-          e.data.mode === "effect" ? "effect" : "fill"
-        );
-        return;
-      }
-      if (e.data.type === "glsl-shader-set-uniform") {
-        var api2 = runtime();
-        if (!api2) return;
-        if (typeof e.data.name !== "string") return;
-        api2.setUniform(
-          e.data.filter && typeof e.data.filter === "object" ? e.data.filter : {},
-          e.data.name,
-          e.data.value
-        );
-        return;
-      }
-      if (e.data.type === "glsl-shader-update") {
-        var api3 = runtime();
-        if (!api3) return;
-        if (typeof e.data.id !== "string") return;
-        var updateErrors = [];
-        if (typeof e.data.glsl === "string") {
-          updateErrors = updateErrors.concat(
-            validatePreviewGlslSource(e.data.glsl)
-          );
-        }
-        updateErrors = updateErrors.concat(
-          validatePreviewUniformManifest(e.data.uniforms)
-        );
-        if (updateErrors.length > 0) {
-          postShaderRejected(updateErrors);
-          return;
-        }
-        api3.updateShader(e.data.id, {
-          glsl: typeof e.data.glsl === "string" ? e.data.glsl : void 0,
-          uniforms: e.data.uniforms && typeof e.data.uniforms === "object" ? e.data.uniforms : void 0
-        });
-        return;
-      }
-      if (e.data.type === "glsl-shader-preview-clear") {
-        var api4 = runtime();
-        if (api4) api4.clearPreview();
-        acceptedPreviewCountSinceClear = 0;
-        return;
-      }
-      if (e.data.type === "glsl-shader-rescan") {
-        var api5 = runtime();
-        if (api5) api5.scan();
-        return;
-      }
+      if (e.data?.type !== "glsl-shader-rescan") return;
+      const api = window.__anShaders;
+      if (api && api.version >= 1) api.scan();
     });
   })();
 })();

package/corpus/templates/design/.generated/bridge/shader-runtime.generated.ts

@@ -21,14 +21,15 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
     const EFFECT_VALUES_ATTR = "data-an-shader-effect-uniforms";
     const ERROR_ATTR = "data-an-shader-error";
     const CANVAS_ATTR = "data-an-shader-canvas";
-    const PREVIEW_DEF_ID = "__an-shader-preview";
     const MAX_MOUNTS = 8;
     const VERT_SRC = "attribute vec2 a_pos;void main(){gl_Position=vec4(a_pos,0.0,1.0);}";
     const registry = {};
     const mounts = [];
     let rafId = null;
+    let lastFrameTs = null;
     let needsRender = false;
     let scanTimer = null;
+    let viewScale = 1;
     function nowMs() {
       return W.performance && W.performance.now ? W.performance.now() : Date.now();
     }
@@ -87,7 +88,6 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
         const text = s.textContent || "";
         const prev = registry[id];
         if (prev && prev.domText === text) continue;
-        if (prev && prev.volatile && prev.domText === void 0) continue;
         const parsed = parseBlock(text);
         registry[id] = {
           name: s.getAttribute("data-shader-name") || id,
@@ -171,12 +171,12 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
         mount.canvas.parentNode.removeChild(mount.canvas);
       }
     }
-    function ensureMount(el, defId, mode, overrides, preview) {
+    function ensureMount(el, defId, mode, overrides) {
       const def = registry[defId];
       if (!def || !def.glsl) return null;
       for (let i = 0; i < mounts.length; i++) {
         const existing = mounts[i];
-        if (existing.el === el && existing.preview === preview && existing.mode === mode) {
+        if (existing.el === el && existing.mode === mode) {
           if (existing.defId === defId) {
             existing.values = resolveValues(def, overrides);
             requestRender();
@@ -260,7 +260,6 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
         defId,
         mode,
         values: resolveValues(def, overrides),
-        preview,
         visible: true
       };
       mounts.push(mount);
@@ -288,9 +287,10 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
       const rect = el.getBoundingClientRect();
       const wCss = Math.max(1, Math.round(rect.width));
       const hCss = Math.max(1, Math.round(rect.height));
-      const dpr = Math.min(2, W.devicePixelRatio || 1);
-      const wPx = Math.max(1, Math.round(wCss * dpr));
-      const hPx = Math.max(1, Math.round(hCss * dpr));
+      const deviceRatio = Math.min(2, W.devicePixelRatio || 1);
+      const ratio = Math.max(Math.min(1, deviceRatio), deviceRatio * viewScale);
+      const wPx = Math.max(1, Math.round(wCss * ratio));
+      const hPx = Math.max(1, Math.round(hCss * ratio));
       if (canvas.width !== wPx || canvas.height !== hPx) {
         canvas.width = wPx;
         canvas.height = hPx;
@@ -322,8 +322,15 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
       gl.clear(gl.COLOR_BUFFER_BIT);
       gl.drawArrays(gl.TRIANGLES, 0, 3);
     }
-    function frame() {
+    function frame(ts) {
       rafId = null;
+      if (typeof ts === "number") {
+        if (ts === lastFrameTs) {
+          startLoop();
+          return;
+        }
+        lastFrameTs = ts;
+      }
       const t = (nowMs() - t0) / 1e3;
       const animate = !reducedMotion && !document.hidden;
       for (let i = mounts.length - 1; i >= 0; i--) {
@@ -376,8 +383,7 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
             el,
             fillId,
             "fill",
-            parseOverrides(el, VALUES_ATTR),
-            false
+            parseOverrides(el, VALUES_ATTR)
           );
           if (fillMount) seen.push(fillMount);
         }
@@ -386,15 +392,13 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
             el,
             effectId,
             "effect",
-            parseOverrides(el, EFFECT_VALUES_ATTR),
-            false
+            parseOverrides(el, EFFECT_VALUES_ATTR)
           );
           if (effectMount) seen.push(effectMount);
         }
       }
       for (let k = mounts.length - 1; k >= 0; k--) {
         const mount = mounts[k];
-        if (mount.preview) continue;
         if (seen.indexOf(mount) === -1) unmount(mount);
       }
       startLoop();
@@ -406,86 +410,9 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
         scan();
       }, 100);
     }
-    function resolveTarget(target) {
-      if (target && target.selector) {
-        try {
-          const hit = document.querySelector(target.selector);
-          if (hit) return hit;
-        } catch (_err) {
-        }
-      }
-      if (target && target.nodeId) {
-        const byId = document.querySelector(
-          '[data-agent-native-node-id="' + String(target.nodeId).replace(/"/g, '\\\\"') + '"]'
-        );
-        if (byId) return byId;
-      }
-      return null;
-    }
-    function applyPreview(target, def, mode) {
-      clearPreview();
-      const el = resolveTarget(target || {});
-      if (!el || !def || typeof def.glsl !== "string") return false;
-      const resolvedMode = mode === "effect" ? "effect" : "fill";
-      registry[PREVIEW_DEF_ID] = {
-        name: (def.name || "Preview") + "",
-        mode: resolvedMode,
-        glsl: def.glsl,
-        uniforms: def.uniforms || {},
-        volatile: true
-      };
-      const mount = ensureMount(
-        el,
-        PREVIEW_DEF_ID,
-        resolvedMode,
-        def.values || null,
-        true
-      );
-      return !!mount;
-    }
-    function clearPreview() {
-      for (let i = mounts.length - 1; i >= 0; i--) {
-        if (mounts[i].preview) unmount(mounts[i]);
-      }
-      delete registry[PREVIEW_DEF_ID];
-    }
-    function setUniform(filter, name, value) {
-      const f = filter || {};
-      for (let i = 0; i < mounts.length; i++) {
-        const mount = mounts[i];
-        if (f.preview !== void 0 && mount.preview !== !!f.preview) continue;
-        if (f.shaderId && mount.defId !== f.shaderId) continue;
-        if (f.nodeId) {
-          const nid = mount.el.getAttribute("data-agent-native-node-id");
-          if (nid !== f.nodeId) continue;
-        }
-        mount.values[name] = value;
-      }
-      requestRender();
-    }
-    function updateShader(id, patch) {
-      const def = registry[id];
-      if (!def || !patch) return;
-      let recompile = false;
-      if (typeof patch.glsl === "string" && patch.glsl !== def.glsl) {
-        def.glsl = patch.glsl;
-        recompile = true;
-      }
-      if (patch.uniforms && typeof patch.uniforms === "object") {
-        def.uniforms = patch.uniforms;
-      }
-      def.volatile = true;
-      if (recompile) invalidateMountsFor(id);
-      scan();
-      requestRender();
-    }
     W.__anShaders = {
       version: 1,
-      scan,
-      applyPreview,
-      clearPreview,
-      setUniform,
-      updateShader
+      scan
     };
     if (document.readyState === "loading") {
       document.addEventListener("DOMContentLoaded", function() {
@@ -497,6 +424,17 @@ export const shaderRuntimeBridgeScript: string = `"use strict";
     document.addEventListener("visibilitychange", function() {
       if (!document.hidden) requestRender();
     });
+    W.addEventListener("message", function(event) {
+      if (W.parent === W || event.source !== W.parent) return;
+      const data = event.data;
+      if (!data || data.type !== "set-editor-chrome-scale") return;
+      const scale = Math.max(Number(data.scaleX) || 0, Number(data.scaleY) || 0);
+      if (!(scale > 0)) return;
+      const next = Math.min(1, Math.ceil(scale * 8) / 8);
+      if (next === viewScale) return;
+      viewScale = next;
+      requestRender();
+    });
     try {
       new MutationObserver(function() {
         scheduleScan();

package/corpus/templates/design/AGENTS.md

@@ -14,7 +14,6 @@ Read `.agents/skills/<name>/SKILL.md` before deeper work:
 - `design-review-feedback` — persisted review comments.
 - `export-handoff` — exports and coding handoffs.
 - `full-app-build` — fusion-backed app builds.
-- `shader-fills` — historical GLSL fills/effects.
 - `native-effects` — WebGPU fills/effects, source edits, and PNG.
 - `journey-storyboards` — onboarding-journey storyboards.
 
@@ -57,6 +56,7 @@ Search local docs with `pnpm action docs-search --query "<topic>"`; read by slug
 | `view-screen` / `navigate` | Read current screen / move UI |
 | `get-view-settings` / `update-view-settings` | Read/update view toggles (grid, snap, rulers, cursors, hidden comments) |
 | `get-shader` / `edit-native-shader` | Inspect curated native effects; CAS-edit one inline scene |
+| `get-native-shader-approvals` | Read viewer-scoped exact effect approvals for accessible Design previews |
 | `prepare-native-scene-export` | Pin scene for PNG |
 | `get-native-render-contexts` / `request-native-local-export` / `get-native-local-export` | Request foreground native PNG and inspect attachment |
 | `export-png` | Export PNG |
@@ -86,5 +86,3 @@ Search local docs with `pnpm action docs-search --query "<topic>"`; read by slug
 Before building common workspace or agent UI, read `agent-native-toolkit`; read `customizing-agent-native` before adapting shared UI. Editor behavior lives in `app/pages/design-editor/commands/*.ts`; read `design-editor-architecture` before changing it.
 
 Search with `rg --hidden --follow`; read the exact linked guide before deeper work.
-
-Find and read relevant guides with `rg --hidden --follow`.