@agent-native/core 0.103.0 → 0.104.0

package/corpus/templates/design/server/lib/import-design-files.ts

@@ -40,6 +40,7 @@ export interface SaveImportedDesignFilesInput {
   files: ImportedDesignFile[];
   sourceType: string;
   warnings?: string[];
+  preserveExactContent?: boolean;
 }
 
 export interface SavedImportedDesignFile {
@@ -231,14 +232,11 @@ export async function saveImportedDesignFiles(
         usedFilenames,
       );
       const fileId = nanoid();
-      // Stamp missing data-agent-native-node-id attributes before persisting
-      // so imported screens are fully addressable by id-keyed editor
-      // operations immediately, instead of depending on a client-side
-      // backfill the first time someone opens the imported screen.
-      const annotatedContent = annotateScreenHtmlForPersist(
-        file.content,
-        file.fileType,
-      );
+      // Exact native clones are immutable source evidence. Other imports are
+      // annotated before persistence so editor operations can address nodes.
+      const annotatedContent = input.preserveExactContent
+        ? file.content
+        : annotateScreenHtmlForPersist(file.content, file.fileType);
       await tx.insert(schema.designFiles).values({
         id: fileId,
         designId,

package/corpus/templates/design/server/plugins/creative-context.ts

@@ -0,0 +1,31 @@
+import { registerOnboardingStep } from "@agent-native/core/onboarding";
+import { setupCreativeContext } from "@agent-native/creative-context/server";
+import { listContextSources } from "@agent-native/creative-context/store";
+
+registerOnboardingStep({
+  id: "creative-context-library",
+  order: 18,
+  required: false,
+  title: "Connect your creative library",
+  description:
+    "Connect prior work and reference sources so agents can reuse approved creative context.",
+  methods: [
+    {
+      id: "library",
+      kind: "link",
+      primary: true,
+      label: "Open Library",
+      payload: { url: "/agent#library", external: false },
+    },
+  ],
+  isComplete: async () => {
+    try {
+      const result = await listContextSources({ limit: 1 });
+      return result.sources.length > 0;
+    } catch {
+      return false;
+    }
+  },
+});
+
+export default setupCreativeContext({ appId: "design" });

package/corpus/templates/design/shared/generation-session.ts

@@ -1,3 +1,5 @@
+import type { CreativeContextReuseLabel } from "@agent-native/creative-context";
+
 import type { AssignedCanvasRegion } from "./canvas-math";
 
 export type DesignGenerationSessionStatus =
@@ -37,6 +39,11 @@ export interface DesignGenerationSession {
   designSystemId?: string;
   prompt: string;
   contextRefs: string[];
+  creativeContext?: {
+    contextMode: "off" | "auto" | "pinned";
+    contextPackId: string | null;
+    reuseLabels: CreativeContextReuseLabel[];
+  };
   frames: DesignGenerationFrame[];
   startedAt: string;
 }

package/corpus/templates/dispatch/app/i18n-data.ts

@@ -37,10 +37,10 @@ const enUS = {
     deliveryDescription:
       "Manage message destinations and check the outbound delivery queue.",
     openDelivery: "Open delivery",
-    agentTitle: "Agent settings",
+    agentTitle: "Agent workspace",
     agentDescription:
-      "Open the agent sidebar settings for model, API keys, voice, and other agent controls. Use the Automations page for scheduled and event-triggered jobs.",
-    openAgentSettings: "Open agent settings",
+      "Open the agent workspace for model, API keys, voice, and other agent controls. Use the Automations page for scheduled and event-triggered jobs.",
+    openAgentSettings: "Open agent workspace",
   },
   integrations: {
     title: "Integrations",

package/corpus/templates/forms/app/i18n/en-US.ts

@@ -34,10 +34,10 @@ const messages = {
       "Manage team members, organization access, and shared workspace preferences.",
     openTeamSettings: "Open team settings",
     openResourceSettings: "Open resource settings",
-    agentTitle: "Agent settings",
+    agentTitle: "Agent workspace",
     agentDescription:
-      "Open the agent sidebar settings for model, API keys, automations, voice, and other agent controls.",
-    openAgentSettings: "Open agent settings",
+      "Open the agent workspace for model, API keys, automations, voice, and other agent controls.",
+    openAgentSettings: "Open agent workspace",
   },
   agent: {
     emptyState: "Ask me anything about your forms",

package/corpus/templates/macros/app/i18n/en-US.ts

@@ -30,10 +30,10 @@ const messages = {
       "Manage team members, organization access, and shared workspace preferences.",
     openTeamSettings: "Open team settings",
     openResourceSettings: "Open resource settings",
-    agentTitle: "Agent settings",
+    agentTitle: "Agent workspace",
     agentDescription:
-      "Open the agent sidebar settings for model, API keys, automations, voice, and other agent controls.",
-    openAgentSettings: "Open agent settings",
+      "Open the agent workspace for model, API keys, automations, voice, and other agent controls.",
+    openAgentSettings: "Open agent workspace",
   },
   agent: {
     emptyState: "Just tell me what you ate — I'll estimate the macros",

package/corpus/templates/mail/app/components/email/EmailThread.tsx

@@ -2544,6 +2544,29 @@ function sanitizeEmailHtml(html: string): SanitizedEmailHtml {
   };
 }
 
+function measureEmailDocumentHeight(doc: Document): number {
+  const body = doc.body;
+  const root = doc.documentElement;
+  if (!body || !root) return 0;
+
+  const bodyTop = body.getBoundingClientRect().top;
+  let contentBottom = body.getBoundingClientRect().bottom - bodyTop;
+  for (const element of body.querySelectorAll<HTMLElement>("*")) {
+    const rect = element.getBoundingClientRect();
+    contentBottom = Math.max(contentBottom, rect.bottom - bodyTop);
+  }
+
+  return Math.ceil(
+    Math.max(
+      body.scrollHeight,
+      body.offsetHeight,
+      root.scrollHeight,
+      root.offsetHeight,
+      contentBottom,
+    ),
+  );
+}
+
 function HtmlEmailBody({
   html,
   senderEmail,
@@ -2709,10 +2732,8 @@ function HtmlEmailBody({
     doc.head.appendChild(themeStyle);
 
     const resize = () => {
-      if (doc.body) {
-        const h = doc.body.scrollHeight;
-        if (h > 0) setHeight(h);
-      }
+      const h = measureEmailDocumentHeight(doc);
+      if (h > 0) setHeight((current) => (current === h ? current : h));
     };
 
     const normalizeText = (value: string | null | undefined) =>
@@ -3187,6 +3208,12 @@ function HtmlEmailBody({
     const images = doc.querySelectorAll("img");
     images.forEach((img) => img.addEventListener("load", resize));
 
+    const resizeObserver =
+      typeof ResizeObserver !== "undefined" ? new ResizeObserver(resize) : null;
+    resizeObserver?.observe(doc.documentElement);
+    if (doc.body) resizeObserver?.observe(doc.body);
+    window.addEventListener("resize", resize);
+
     resize();
     const timer = setTimeout(resize, 100);
     const timer2 = setTimeout(resize, 500);
@@ -3198,6 +3225,8 @@ function HtmlEmailBody({
       clearTimeout(timer);
       clearTimeout(timer2);
       images.forEach((img) => img.removeEventListener("load", resize));
+      resizeObserver?.disconnect();
+      window.removeEventListener("resize", resize);
       themeStyle.remove();
     };
   }, [
@@ -3266,7 +3295,7 @@ function HtmlEmailBody({
       }
 
       // Recalculate height after injecting marks
-      const h = doc.body.scrollHeight;
+      const h = measureEmailDocumentHeight(doc);
       if (h > 0) setHeight(h);
     };
 
@@ -3338,6 +3367,7 @@ function HtmlEmailBody({
         data-agent-native-session-replay=""
         srcDoc={iframeDocument}
         sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
+        scrolling="no"
         style={{
           width: "100%",
           height: `${height}px`,

package/corpus/templates/mail/app/i18n/en-US.ts

@@ -438,10 +438,10 @@ const messages = {
     suggestionWidget: "Build me a custom widget for my inbox",
   },
   settings: {
-    openAgentSettings: "Open agent settings",
+    openAgentSettings: "Open agent workspace",
     agentDescription:
-      "Open the agent sidebar settings for model, API keys, automations, voice, and other agent controls.",
-    agentTitle: "Agent settings",
+      "Open the agent workspace for model, API keys, automations, voice, and other agent controls.",
+    agentTitle: "Agent workspace",
     aliasName: "Alias name",
     aliasNamePlaceholder: "e.g. Design team",
     recipientsOnePerLine: "Recipients (one email per line)",

package/corpus/templates/mail/changelog/2026-07-16-mail-previews-now-expand-to-show-the-full-message-without-an.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-16
+---
+
+Mail previews now expand to show the full message without an inner scrollbar

package/corpus/templates/plan/.agents/skills/visual-plan/SKILL.md

@@ -191,12 +191,22 @@ forward only the code-research and plan-composition guidance here.
    targeted `contentPatches`.
    Treat the top-level `content` payload as a full replacement, not a merge; do
    not send a partial `content` object to add a canvas or one block. If a full
-   replacement is unavoidable, first read the complete plan source/content, carry
-   forward every existing block and visual surface, and verify the source/export
-   afterward so the document body was not truncated. When the user wants
-   source-control friendly edits, use `patch-visual-plan-source` against the MDX
-   files instead of regenerating the plan.
-7. For hosted plans, export with `export-visual-plan` only when the user wants a
+   replacement or `replace-blocks` is unavoidable, call `get-visual-plan`
+   immediately before the write, pass its `plan.updatedAt` as
+   `expectedUpdatedAt`, and carry forward every existing block and visual
+   surface. Never reuse a revision from an earlier read or feedback payload.
+   For source-control friendly edits, use granular `patch-visual-plan-source`
+   operations against the MDX files instead of regenerating the plan;
+   `replace-file` is also destructive and requires the same fresh
+   `expectedUpdatedAt` fence.
+7. After every hosted-plan write, call `get-visual-plan` again and compare the
+   persisted text, block IDs/counts, canvas frames, and prototype with the
+   intended result. A successful mutation response is not proof that unrelated
+   content survived. If the edit addressed agent-targeted feedback, only after
+   this verification call `resolve-plan-comment` for the thread and
+   `consume-plan-feedback` for its comments; do both so addressed feedback is
+   neither visibly open nor returned as pending work.
+8. For hosted plans, export with `export-visual-plan` only when the user wants a
    shareable receipt or repo-check-in artifacts.
 
 ## Self-Review Before Handoff
@@ -345,14 +355,20 @@ directory before authoring a plan.
 - `create-visual-questions`: use only when the user explicitly asks for a visual
   intake questionnaire, not as `/visual-plan` preflight.
 - `update-visual-plan`: revise content, status, or comments with targeted
-  `contentPatches` (see Core Workflow step 6).
+  `contentPatches` (see Core Workflow steps 6-7). `replace-blocks` and full
+  `content` replacement require `expectedUpdatedAt` from a fresh
+  `get-visual-plan` call.
 - `read-visual-plan-source`: read the normalized plan as `plan.mdx`,
   optional `canvas.mdx`, optional `.plan-state.json`, and JSON.
 - `patch-visual-plan-source`: apply granular MDX AST patches by stable block,
-  artboard, annotation, component, or wireframe-node id.
+  artboard, annotation, component, or wireframe-node id. Prefer those targeted
+  operations; `replace-file` requires `expectedUpdatedAt` from a fresh
+  `get-visual-plan` call.
 - `import-visual-plan-source`: create or replace a plan from an MDX folder.
-- `get-visual-plan`: read the current structured plan, exported HTML, and
-  annotations; it also returns the MDX folder for source workflows.
+- `get-visual-plan`: read the current structured plan, exported HTML,
+  annotations, and `plan.updatedAt`; it also returns the MDX folder for source
+  workflows. Re-read immediately before a destructive write for its concurrency
+  fence and again after every write to verify persisted state.
 - `get-plan-feedback`: read unconsumed human feedback. Use it frequently; it
   returns grouped threads, exact anchor details, expected resolver, and recent
   review-event payloads so agents can act only on the comments meant for them.
@@ -411,7 +427,10 @@ local bridge check/serve/verify command, and report the new local URL.
 - **Two-axis state.** Mark every ingested comment as consumed
   (`consumedCommentIds` on `update-visual-plan`). Set `status=resolved` only on
   agent-targeted comments you actually addressed; leave human-targeted comments
-  open.
+  open. When an edit addresses feedback, first re-read the persisted plan and
+  verify the requested change. Only then call `resolve-plan-comment` for the
+  addressed thread and `consume-plan-feedback` for its comments; never mark
+  addressed feedback along only one axis.
 
 ## Visibility & Sharing
 

package/corpus/templates/plan/AGENTS.md

@@ -40,6 +40,17 @@ review before code changes happen.
 - Surface material assumptions only when they change behavior, data, security,
   tests, deployment, or definition of done.
 - Before edits, read pending feedback with `get-plan-feedback`.
+- Before any destructive hosted-plan write (`replace-blocks`, a top-level
+  `content` replacement, or a source `replace-file`), call `get-visual-plan`
+  immediately before the write and pass its `plan.updatedAt` as
+  `expectedUpdatedAt`. Never reuse a revision from an earlier read. Prefer
+  targeted content or source patches whenever they can express the edit.
+- After every hosted-plan write, call `get-visual-plan` again and verify the
+  persisted text, blocks, canvas, and prototype before claiming success. If the
+  write addressed agent-targeted feedback, call `resolve-plan-comment` and
+  `consume-plan-feedback` only after this verification; addressed feedback must
+  be both resolved and consumed so it neither remains visibly open nor returns
+  as pending work.
 
 ## Application State
 
@@ -185,6 +196,11 @@ sync-guarded skills (not just one stored plan) so the improvement sticks.
   persists the runtime model. Prefer this over regenerating a whole plan when the
   requested change is a few lines, one annotation, one artboard, or one
   wireframe node.
+- `replace-file` is a destructive source operation. Use it only when targeted
+  source patches cannot express the edit, after a fresh `get-visual-plan`, and
+  pass that read's `plan.updatedAt` as `expectedUpdatedAt`. Re-read the plan
+  after the patch and verify that unrelated MDX files and visual surfaces were
+  preserved.
 - In Agent Native Desktop, the Plan menu can link a user-chosen local folder for
   the current plan, write the exported MDX files to it, import local edits back
   through `import-visual-plan-source`, and optionally auto-export whenever the
@@ -263,7 +279,11 @@ elementId, styles }]`. Elements must have `data-design-id` or
   reconcile, never drop. Act on `resolutionTarget=agent`; treat `human` as
   context only; `@mentions` are notification signals, not routing. Mark ingested
   comments consumed (`consumedCommentIds`); set `status=resolved` only on
-  agent-targeted comments you actually addressed.
+  agent-targeted comments you actually addressed. When a plan write addresses
+  feedback, do not resolve or consume it until a post-write `get-visual-plan`
+  confirms the requested change persisted. Then do both: call
+  `resolve-plan-comment` for the addressed thread and `consume-plan-feedback`
+  for its comments.
 - New human comments send best-effort transactional email when email is
   configured: root comments and replies notify the plan owner, @mentioned
   members, and replies also notify prior human participants in that thread.

package/corpus/templates/plan/actions/get-visual-plan.ts

@@ -20,7 +20,7 @@ const queryBooleanSchema = z.preprocess((value) => {
 
 export default defineAction({
   description:
-    "Get an Agent-Native Plan bundle, including structured editable content with stable block IDs, source-control friendly MDX, exported HTML, sections, comments, and recent activity. Call this before targeted contentPatches, source patches, or resolving feedback on a specific plan.",
+    "Get an Agent-Native Plan bundle, including structured editable content with stable block IDs, source-control friendly MDX, exported HTML, sections, comments, and recent activity. Call this before targeted contentPatches, source patches, or resolving feedback on a specific plan. For full content replacement, replace-blocks, or replace-file, pass the returned plan.updatedAt exactly as expectedUpdatedAt and reread after the write.",
   schema: z.object({
     id: z.string().describe("Plan ID"),
     includeMdx: queryBooleanSchema

package/corpus/templates/plan/actions/patch-visual-plan-source.ts

@@ -1,3 +1,5 @@
+import { createHash } from "node:crypto";
+
 import { defineAction } from "@agent-native/core";
 import { agentTouchDocument } from "@agent-native/core/collab";
 import { and, eq } from "drizzle-orm";
@@ -24,12 +26,137 @@ import {
   planPath,
   writeEvent,
 } from "../server/plans.js";
+import type { PlanContent } from "../shared/plan-content.js";
+
+type PlanSurfaceCounts = {
+  blocks: number;
+  canvasFrames: number;
+  prototypeScreens: number;
+};
+
+function planSurfaceCounts(content: PlanContent | null | undefined) {
+  return {
+    blocks: content?.blocks.length ?? 0,
+    canvasFrames: content?.canvas?.frames.length ?? 0,
+    prototypeScreens: content?.prototype?.screens.length ?? 0,
+  } satisfies PlanSurfaceCounts;
+}
+
+function stableJson(value: unknown): string {
+  if (value === null) return "null";
+  if (value === undefined) return "undefined";
+  if (Array.isArray(value)) {
+    return `[${value
+      .map((item) => (item === undefined ? "null" : stableJson(item)))
+      .join(",")}]`;
+  }
+  if (typeof value === "object") {
+    const record = value as Record<string, unknown>;
+    const pairs = Object.keys(record)
+      .filter((key) => record[key] !== undefined)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`);
+    return `{${pairs.join(",")}}`;
+  }
+  return JSON.stringify(value) ?? "null";
+}
+
+function stableContentHash(content: PlanContent | null | undefined) {
+  return `sha256:${createHash("sha256")
+    .update(stableJson(content ?? null))
+    .digest("hex")}`;
+}
+
+function sanitizeAuditIdentifier(value: string) {
+  return (
+    value
+      .trim()
+      .replace(/[^a-zA-Z0-9._:-]+/g, "_")
+      .slice(0, 120) || "unknown"
+  );
+}
+
+function sourcePatchAuditTarget(
+  patch: z.infer<typeof planMdxSourcePatchesSchema>[number],
+) {
+  switch (patch.op) {
+    case "replace-file":
+      return { op: patch.op, file: patch.file };
+    case "replace-markdown-block":
+      return {
+        op: patch.op,
+        target: sanitizeAuditIdentifier(patch.blockId),
+      };
+    case "update-component-prop":
+      return {
+        op: patch.op,
+        file: patch.file,
+        target: sanitizeAuditIdentifier(patch.componentId),
+        prop: sanitizeAuditIdentifier(patch.prop),
+      };
+    case "update-wireframe-node":
+      return {
+        op: patch.op,
+        target: sanitizeAuditIdentifier(patch.nodeId),
+      };
+    case "update-annotation":
+      return {
+        op: patch.op,
+        target: sanitizeAuditIdentifier(patch.annotationId),
+      };
+    case "replace-artboard":
+      return {
+        op: patch.op,
+        target: sanitizeAuditIdentifier(patch.artboardId),
+      };
+  }
+}
+
+function assertNoUnexpectedSurfaceCollapse(
+  before: PlanSurfaceCounts,
+  after: PlanSurfaceCounts,
+  allowDestructive: boolean,
+) {
+  if (allowDestructive) return;
+
+  const candidates: Array<[label: string, before: number, after: number]> = [
+    ["blocks", before.blocks, after.blocks],
+    ["canvas frames", before.canvasFrames, after.canvasFrames],
+    ["prototype screens", before.prototypeScreens, after.prototypeScreens],
+  ];
+  const collapsed = candidates
+    .filter(
+      ([, beforeCount, afterCount]) => beforeCount > 0 && afterCount === 0,
+    )
+    .map(([label, beforeCount]) => `${label} (${beforeCount} to 0)`);
+
+  if (collapsed.length === 0) return;
+  throw new Error(
+    `Source patch blocked because it would unexpectedly remove all ${collapsed.join(
+      ", ",
+    )}. Reload the plan and use granular patches, or retry with allowDestructive: true if clearing those surfaces is intentional.`,
+  );
+}
 
 export default defineAction({
   description:
     "Patch the MDX source for an Agent-Native Plan by stable semantic IDs, then normalize it back into runtime JSON. Use ONLY when working with exported MDX source files (repo check-in workflows); for live plans prefer update-visual-plan with contentPatches. Suitable for tiny source-control friendly diffs: one markdown block, one artboard, one annotation, or one wireframe node.",
   schema: z.object({
     planId: z.string().describe("Plan ID"),
+    expectedUpdatedAt: z
+      .string()
+      .min(1)
+      .optional()
+      .describe(
+        "Revision from the latest plan read. Required for replace-file and checked before source patching so stale full-file replacements cannot overwrite newer work.",
+      ),
+    allowDestructive: z
+      .boolean()
+      .optional()
+      .default(false)
+      .describe(
+        "Allow an intentional nonempty-to-empty collapse of plan blocks, canvas frames, or prototype screens. Defaults to false.",
+      ),
     patches: planMdxSourcePatchesSchema.describe(
       "AST-backed MDX source patches. Prefer targeted ops over replace-file whenever possible so diffs stay small.",
     ),
@@ -52,6 +179,22 @@ export default defineAction({
     await assertPlanEditor(args.planId);
     const bundle = await loadPlanBundle(args.planId);
     const versionAtLoad = bundle.plan.updatedAt;
+    const hasReplaceFile = args.patches.some(
+      (patch) => patch.op === "replace-file",
+    );
+    if (hasReplaceFile && !args.expectedUpdatedAt) {
+      throw new Error(
+        "replace-file requires expectedUpdatedAt from the latest plan read. Reload the plan and retry with its current updatedAt value.",
+      );
+    }
+    if (
+      args.expectedUpdatedAt &&
+      args.expectedUpdatedAt !== bundle.plan.updatedAt
+    ) {
+      throw new Error(
+        "Plan changed since the source was read. Reload the plan and retry against its current updatedAt value.",
+      );
+    }
     const referencedBlockIds = referencedBlockIdsForPlanComments(
       bundle.comments,
     );
@@ -70,6 +213,15 @@ export default defineAction({
     });
     const nextMdx = await applyPlanMdxSourcePatches(currentMdx, args.patches);
     const nextContent = await parsePlanMdxFolder(nextMdx);
+    const beforeCounts = planSurfaceCounts(bundle.plan.content);
+    const afterCounts = planSurfaceCounts(nextContent);
+    assertNoUnexpectedSurfaceCollapse(
+      beforeCounts,
+      afterCounts,
+      args.allowDestructive ?? false,
+    );
+    const beforeContentHash = stableContentHash(bundle.plan.content);
+    const afterContentHash = stableContentHash(nextContent);
     const now = nowIso();
     await createPlanVersionSnapshot(args.planId, {
       force: true,
@@ -108,6 +260,15 @@ export default defineAction({
         `Applied ${args.patches.length} visual plan source patch(es).`,
       payload: {
         patchOps: args.patches.map((patch) => patch.op),
+        targets: args.patches.map(sourcePatchAuditTarget),
+        counts: {
+          before: beforeCounts,
+          after: afterCounts,
+        },
+        contentHashes: {
+          before: beforeContentHash,
+          after: afterContentHash,
+        },
       },
       createdBy: "agent",
     });

package/corpus/templates/plan/actions/read-visual-plan-source.ts

@@ -9,7 +9,7 @@ import { loadPlanBundle, planDeepLink, planPath } from "../server/plans.js";
 
 export default defineAction({
   description:
-    "Read an Agent-Native Plan as source-control friendly MDX files. Returns plan.mdx, canvas.mdx when the plan has a board, optional .plan-state.json, and the normalized JSON runtime model.",
+    "Read an Agent-Native Plan as source-control friendly MDX files. Returns plan.mdx, canvas.mdx when the plan has a board, optional .plan-state.json, the normalized JSON runtime model, and plan.updatedAt. Pass plan.updatedAt exactly as expectedUpdatedAt for replace-file, then reread to verify the write.",
   schema: z.object({
     planId: z.string().describe("Plan ID"),
   }),