@agent-native/core 0.106.0 → 0.106.2

package/corpus/templates/clips/app/i18n/hi-IN.ts

@@ -1093,6 +1093,7 @@ Clips में उपयोगकर्ताओं को दिखने व
     desktopTitle: "Desktop app (स्थानीयकृत)",
     desktopDescription:
       "Most seamless for global shortcuts, menu-bar recording, meetings, and repeat captures. (स्थानीयकृत)",
+    openDesktopApp: "Open desktop app (स्थानीयकृत)",
   },
   editableTitle: {
     untitled: "Untitled Clip (स्थानीयकृत)",

package/corpus/templates/clips/app/i18n/ja-JP.ts

@@ -1114,6 +1114,7 @@ Clips のユーザー向けの主な変更はここに記録されます。コ
     desktopTitle: "Desktop app (ローカライズ済み)",
     desktopDescription:
       "Most seamless for global shortcuts, menu-bar recording, meetings, and repeat captures. (ローカライズ済み)",
+    openDesktopApp: "Open desktop app (ローカライズ済み)",
   },
   editableTitle: {
     untitled: "Untitled Clip (ローカライズ済み)",

package/corpus/templates/clips/app/i18n/ko-KR.ts

@@ -1103,6 +1103,7 @@ Clips의 모든 사용자 대상 변경 사항은 여기에 기록됩니다. 명
     desktopTitle: "Desktop app (현지화됨)",
     desktopDescription:
       "Most seamless for global shortcuts, menu-bar recording, meetings, and repeat captures. (현지화됨)",
+    openDesktopApp: "Open desktop app (현지화됨)",
   },
   editableTitle: {
     untitled: "Untitled Clip (현지화됨)",

package/corpus/templates/clips/app/i18n/pt-BR.ts

@@ -1121,6 +1121,7 @@ Todas as mudanças visíveis para usuários do Clips são documentadas aqui. Voc
     desktopTitle: "Desktop app (Localizado)",
     desktopDescription:
       "Most seamless for global shortcuts, menu-bar recording, meetings, and repeat captures. (Localizado)",
+    openDesktopApp: "Open desktop app (Localizado)",
   },
   editableTitle: {
     untitled: "Untitled Clip (Localizado)",

package/corpus/templates/clips/app/i18n/zh-CN.ts

@@ -1064,6 +1064,7 @@ Clips 中所有面向用户的重要更改都会记录在这里。你可以随
     desktopTitle: "Desktop app (已本地化)",
     desktopDescription:
       "Most seamless for global shortcuts, menu-bar recording, meetings, and repeat captures. (已本地化)",
+    openDesktopApp: "Open desktop app (已本地化)",
   },
   editableTitle: {
     untitled: "Untitled Clip (已本地化)",

package/corpus/templates/clips/app/i18n/zh-TW.ts

@@ -1055,6 +1055,7 @@ const messages = {
       "瀏覽器記錄選項已就緒，正在等待 Chrome Web Store URL。",
     desktopTitle: "桌面應用程式",
     desktopDescription: "最適合全域快捷鍵、選單列錄製、會議與重複擷取。",
+    openDesktopApp: "開啟桌面應用程式",
   },
   editableTitle: {
     untitled: "未命名剪輯",

package/corpus/templates/clips/app/lib/capture-install-options.ts

@@ -1,22 +1,107 @@
-const DESKTOP_DOWNLOAD_STORAGE_KEY = "clips.desktop-promo.dismissed";
+import { appPath } from "@agent-native/core/client";
+
+const DESKTOP_PROMO_DISMISSED_STORAGE_KEY = "clips.desktop-promo.dismissed";
+const DESKTOP_DOWNLOADED_STORAGE_KEY = "clips.desktop-app.downloaded";
+
+// Custom scheme the desktop build registers. A web click tries this first and
+// falls back to the download page when nothing handles it.
+const DESKTOP_APP_PROTOCOL_URL = "clips://open";
+const DESKTOP_APP_LAUNCH_FALLBACK_MS = 800;
 
 export function hasDownloadedDesktopApp(): boolean {
   try {
+    if (typeof window === "undefined") return false;
+    const ls = window.localStorage;
+    // Also treat the legacy dismissed flag as "downloaded" — before the flag
+    // split, a single key covered both states, so existing users only have it.
     return (
-      typeof window !== "undefined" &&
-      window.localStorage?.getItem(DESKTOP_DOWNLOAD_STORAGE_KEY) === "1"
+      ls?.getItem(DESKTOP_DOWNLOADED_STORAGE_KEY) === "1" ||
+      ls?.getItem(DESKTOP_PROMO_DISMISSED_STORAGE_KEY) === "1"
     );
   } catch {
     return false;
   }
 }
 
+const downloadedListeners = new Set<() => void>();
+
+export function subscribeDownloaded(callback: () => void): () => void {
+  downloadedListeners.add(callback);
+  return () => {
+    downloadedListeners.delete(callback);
+  };
+}
+
 export function markDesktopAppDownloaded(): void {
   try {
-    window.localStorage?.setItem(DESKTOP_DOWNLOAD_STORAGE_KEY, "1");
+    // Downloading (or successfully launching) the app also hides the promo.
+    window.localStorage?.setItem(DESKTOP_DOWNLOADED_STORAGE_KEY, "1");
+    window.localStorage?.setItem(DESKTOP_PROMO_DISMISSED_STORAGE_KEY, "1");
   } catch {
     // Download tracking is best-effort and must not block the installer.
   }
+  downloadedListeners.forEach((fn) => fn());
+}
+
+export function hasDismissedDesktopPromo(): boolean {
+  try {
+    return (
+      typeof window !== "undefined" &&
+      window.localStorage?.getItem(DESKTOP_PROMO_DISMISSED_STORAGE_KEY) === "1"
+    );
+  } catch {
+    return false;
+  }
+}
+
+export function markDesktopPromoDismissed(): void {
+  try {
+    window.localStorage?.setItem(DESKTOP_PROMO_DISMISSED_STORAGE_KEY, "1");
+  } catch {
+    // Dismiss tracking is best-effort.
+  }
+}
+
+/**
+ * Try to launch the installed desktop app via its custom protocol, falling back
+ * to the download page when nothing handles the scheme. Browsers expose no way
+ * to query whether the protocol is registered, so we watch for the tab losing
+ * focus (the app taking over) within a short window; if that never happens we
+ * assume the app is not installed and navigate to the fallback. A successful
+ * launch self-heals the stored "downloaded" flag.
+ */
+export function attemptOpenDesktopApp(fallbackHref = "/download"): void {
+  if (typeof window === "undefined") return;
+  const fallbackUrl = appPath(fallbackHref);
+
+  let launched = false;
+  const cleanup = () => {
+    window.removeEventListener("blur", onLeave);
+    document.removeEventListener("visibilitychange", onVisibility);
+  };
+  const onLeave = () => {
+    if (launched) return;
+    launched = true;
+    markDesktopAppDownloaded();
+    cleanup();
+  };
+  const onVisibility = () => {
+    if (document.hidden) onLeave();
+  };
+
+  window.addEventListener("blur", onLeave);
+  document.addEventListener("visibilitychange", onVisibility);
+
+  window.setTimeout(() => {
+    cleanup();
+    if (!launched) window.location.href = fallbackUrl;
+  }, DESKTOP_APP_LAUNCH_FALLBACK_MS);
+
+  try {
+    window.location.href = DESKTOP_APP_PROTOCOL_URL;
+  } catch {
+    // Some browsers throw on an unknown scheme; the timeout handles fallback.
+  }
 }
 
 function isFalsy(value: unknown): boolean {

package/corpus/templates/clips/app/routes/_app.dictate.tsx

@@ -640,7 +640,16 @@ function EmptyState({ isDesktopApp }: { isDesktopApp: boolean }) {
             {t("dictateRoute.emptyWebDescription")}
           </p>
           <div className="mt-5 flex items-center justify-center">
-            <CaptureInstallButton size="sm" className="gap-1.5">
+            <CaptureInstallButton
+              size="sm"
+              className="gap-1.5"
+              downloadedChildren={
+                <>
+                  <IconDeviceDesktop className="h-3.5 w-3.5" />
+                  {t("captureInstall.openDesktopApp")}
+                </>
+              }
+            >
               <IconDownload className="h-3.5 w-3.5" />
               {t("dictateRoute.downloadDesktopApp")}
             </CaptureInstallButton>

package/corpus/templates/clips/app/routes/record.tsx

@@ -670,6 +670,7 @@ function DesktopRecorderCallout() {
       <CaptureInstallButton
         size="sm"
         className="mt-4 w-full bg-primary text-primary-foreground hover:bg-primary/90"
+        downloadedChildren={t("captureInstall.openDesktopApp")}
       >
         {t("recordRoute.downloadDesktopApp")}
       </CaptureInstallButton>

package/corpus/templates/clips/app/routes/share.$shareId.tsx

@@ -11,6 +11,7 @@ import {
 import {
   IconAlertTriangle,
   IconArrowLeft,
+  IconDeviceDesktop,
   IconDownload,
   IconDots,
   IconExternalLink,
@@ -1220,6 +1221,12 @@ function PublicAgentEmptyState({
           className="w-full gap-2"
           align="center"
           onClick={() => onCtaClick("download")}
+          downloadedChildren={
+            <>
+              <IconDeviceDesktop className="h-4 w-4" />
+              {t("captureInstall.openDesktopApp")}
+            </>
+          }
         >
           <IconDownload className="h-4 w-4" />
           {downloadLabel}

package/corpus/templates/clips/changelog/2026-07-16-the-desktop-app-button-now-shows-open-desktop-app-and-launch.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-16
+---
+
+The desktop app button now shows "Open desktop app" and launches the installed app instead of re-downloading once you've downloaded it.

package/corpus/templates/clips/desktop/src-tauri/Cargo.toml

@@ -34,6 +34,11 @@ tauri = { version = "2", features = [
 tauri-plugin-shell = "2"
 tauri-plugin-global-shortcut = "2"
 tauri-plugin-single-instance = "2"
+# Registers the `clips://` custom URL scheme so a web "Open desktop app"
+# click can launch/focus the running tray app. macOS registration is baked
+# into Info.plist at build time from `plugins.deep-link` in tauri.conf.json;
+# Windows/Linux register at runtime via `register_all()`.
+tauri-plugin-deep-link = "2"
 tauri-plugin-updater = "2"
 tauri-plugin-process = "2"
 tauri-plugin-autostart = "2.5.1"

package/corpus/templates/clips/desktop/src-tauri/capabilities/default.json

@@ -28,6 +28,7 @@
     "core:window:allow-close",
     "core:window:allow-start-dragging",
     "shell:allow-open",
+    "deep-link:default",
     "global-shortcut:allow-register",
     "global-shortcut:allow-unregister",
     "global-shortcut:allow-is-registered",

package/corpus/templates/clips/desktop/src-tauri/src/lib.rs

@@ -48,6 +48,15 @@ use util::{
 // should replace with their real icon.
 pub(crate) const TRAY_PNG: &[u8] = include_bytes!("../icons/tray.png");
 
+fn present_popover(app: &tauri::AppHandle) {
+    if let Some(window) = app.get_webview_window("popover") {
+        set_capture_included(&window);
+        configure_overlay_behavior(&window);
+        position_popover(app, &window);
+        present_interactive_window(&window);
+    }
+}
+
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
 pub fn run() {
     sentry_report::init();
@@ -57,12 +66,7 @@ pub fn run() {
             // Second launch just focuses the popover of the already-running
             // instance. Prevents the "two tray icons" UX where clicks fight
             // over focus and neither popover shows.
-            if let Some(window) = app.get_webview_window("popover") {
-                set_capture_included(&window);
-                configure_overlay_behavior(&window);
-                position_popover(app, &window);
-                present_interactive_window(&window);
-            }
+            present_popover(app);
         }))
         .invoke_handler(tauri::generate_handler![
             // clips commands
@@ -189,6 +193,7 @@ pub fn run() {
             logfile::open_logs,
         ])
         .plugin(tauri_plugin_shell::init())
+        .plugin(tauri_plugin_deep_link::init())
         .plugin(tauri_plugin_process::init())
         .plugin(tauri_plugin_fs::init())
         .plugin(
@@ -236,6 +241,36 @@ pub fn run() {
                 err
             })?;
 
+            // clips:// deep-link handler — a web "Open desktop app" click
+            // launches or focuses the running tray popover (same as a second
+            // launch). macOS registers the scheme via Info.plist at build time;
+            // Windows/Linux register it at runtime below.
+            {
+                use tauri_plugin_deep_link::DeepLinkExt;
+                let dl_handle = app.handle().clone();
+                app.deep_link().on_open_url(move |event| {
+                    let urls: Vec<String> =
+                        event.urls().iter().map(|u| u.to_string()).collect();
+                    dlog!("[clips-tray] deep link opened: {:?}", urls);
+                    present_popover(&dl_handle);
+                    let _ = dl_handle.emit("clips:deep-link", urls);
+                });
+                #[cfg(any(windows, target_os = "linux"))]
+                if let Err(err) = app.deep_link().register_all() {
+                    eprintln!("[clips-tray] deep link register_all failed: {err}");
+                }
+                // On Linux/Windows a cold launch from clips:// arrives as startup
+                // arguments rather than an on_open_url event. Consume it here so
+                // the popover appears and the browser does not hit its fallback.
+                if let Ok(Some(urls)) = app.deep_link().get_current() {
+                    let url_strings: Vec<String> =
+                        urls.iter().map(|u| u.to_string()).collect();
+                    dlog!("[clips-tray] deep link cold start: {:?}", url_strings);
+                    present_popover(app.handle());
+                    let _ = app.handle().emit("clips:deep-link", url_strings);
+                }
+            }
+
             if let Err(err) = notifications::show_meeting_notification_window(app.handle()) {
                 println!("[clips-tray] show meeting notification failed: {err}");
             }

package/corpus/templates/clips/desktop/src-tauri/tauri.conf.json

@@ -39,6 +39,11 @@
     }
   },
   "plugins": {
+    "deep-link": {
+      "desktop": {
+        "schemes": ["clips"]
+      }
+    },
     "shell": {
       "open": "(((mailto:\\w+)|(tel:\\w+)|(https?://\\w+)).+|(zoommtg://([A-Za-z0-9-]+\\.)*zoom\\.us/join\\?.+)|(ms-settings:[A-Za-z0-9._?=&-]+))"
     },

package/corpus/templates/content/.agents/skills/content/SKILL.md

@@ -137,6 +137,37 @@ intent:
   explicitly asks for a new artifact. Do not blindly submit another row merely
   because a new Slack message arrived.
 
+For a correction to an existing artifact, treat Slack history as identity and
+intent context, not as the current record state. A title captured when the row
+was created is a historical title: it may help locate the stable document ID,
+but it is not authoritative after the row has been renamed in Content. Once the
+stable ID is known, an external Slack or A2A correction must call
+`pull-document` first to flush any open collaborative editor state; fail closed
+if that flush/read cannot complete. Then read the canonical database row from
+Content immediately before building the update. Treat those freshly read
+values as authoritative for every field the correction does not explicitly
+change.
+
+Build corrections as sparse patches:
+
+- Include only fields the user explicitly asks to change. "Keep," "preserve,"
+  "leave as is," and "unchanged" are constraints, not new values; omit those
+  fields from the mutation so a newer Content-side value cannot be overwritten
+  by stale Slack context.
+- Omission and clearing are different operations. An omitted field keeps its
+  live Content value. Clear a field only when the user explicitly asks to
+  remove, unset, or clear it, and use the empty representation accepted by the
+  current database schema.
+- Never reconstruct a full-row update from the original Slack request. Derive
+  the patch from the correction message and the freshly read canonical row,
+  while preserving the stable document ID.
+- After the mutation, read the row again and verify that the requested fields
+  changed and the mutation did not include omitted fields. Post-write
+  verification is not compare-and-swap: it can reveal an unexpected result but
+  cannot prevent a concurrent edit between the read and a blind metadata or
+  property write. Report an action-provided conflict when one exists; otherwise
+  keep the patch minimal and do not claim the write was conflict-safe.
+
 Apply people fields from verified identity and intent, not from convenient
 guesswork:
 

package/corpus/templates/content/changelog/2026-07-16-slack-corrections-now-preserve-newer-content-values-unless-y.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-16
+---
+
+Slack corrections now preserve newer Content values unless you explicitly change or clear them.

package/corpus/templates/design/.agents/skills/visual-edit/SKILL.md

@@ -47,6 +47,28 @@ iframe-backed screens on the infinite canvas.
   and create one screen per URL/path. Shorthand like
   `localhost:1234/onboarding/1` means `http://localhost:1234/onboarding/1`.
 
+## Select And Reprompt
+
+When a chat message begins with `[Reprompt selection]`, the selected subtree is
+a hard write boundary. The only mutation path is `propose-node-rewrite` with
+the exact `repromptId`, target, and `baseVersionHash` captured in
+`design-reprompt-pending:<designId>:<fileId>`. Never use `apply-visual-edit`,
+`apply-source-edit`, `write-source`, `write-local-file`, `edit-design`, or any
+other content-writing action for that request. Clarifying questions are allowed,
+but a requested change must remain a proposal.
+
+Produce one variant by default. Produce two or three only when the instruction
+asks for options. A retry includes `priorProposalId`; keep the same target and
+base version, incorporate the feedback, and call `propose-node-rewrite` again.
+The UI previews the returned subtree without persisting it.
+
+Use `resolve-node-rewrite` for the accept/reject lifecycle. Accept applies the
+chosen variant as one version-checked inline/Yjs content transaction so one
+undo restores the prior structure; reject clears the proposal without changing
+content. For conversational resolution such as “apply the second one,” call
+`view-screen`, read the active `design.reprompt.proposal`, and pass its
+`proposalId` plus the zero-based `variantIndex` to `resolve-node-rewrite`.
+
 ## Review Quality
 
 - Treat the running app as the truth. Preserve its component language, tokens,

package/corpus/templates/design/AGENTS.md

@@ -16,6 +16,13 @@ patterns live in `.agents/skills/`.
 - Never hardcode API keys, tokens, webhook URLs, signing secrets, private Builder/internal data, customer data, or credential-looking literals. Use secrets/OAuth/runtime configuration and obvious placeholders in examples.
 - Use the app actions for designs, files, versions, design systems, variants,
   export, and sharing. Do not write design rows directly with SQL.
+- A message beginning with `[Reprompt selection]` is preview-only. Call
+  `propose-node-rewrite` with its exact `repromptId`, target, and base hash;
+  never call `edit-design`, `update-design`, `update-file`, `generate-design`,
+  `apply-visual-edit`, or another content writer. Only the frontend-only
+  `resolve-node-rewrite` action may persist an explicitly accepted proposal.
+- A message beginning with `[Selection question]` is read-only. Answer about
+  the captured element and subtree without calling content-writing actions.
 - When a user wants an established public system as a starting point, call
   `create-design-system` with `templateId: material-3`, `carbon-white`, or
   `primer-light`. These are source-linked, versioned token snapshots with
@@ -268,6 +275,15 @@ patterns live in `.agents/skills/`.
   generation planning state created by `generate-screens` (canvas region
   assignments and per-frame instructions consumed by `generate-design` and
   `view-screen`; not rendered as canvas overlays).
+- `design-reprompt-pending:<designId>:<fileId>` is the client-captured source
+  selection, instruction, base hash, and authoritative current request id for
+  a scoped regenerate request.
+- `design-reprompt-proposal:<designId>:<fileId>:<repromptId>` is one
+  request-specific preview-only subtree proposal. Candidate payloads have a
+  256 KiB aggregate serialized limit. Resolution and cancellation use atomic
+  compare-and-set cleanup so an older request cannot erase a newer one.
+  `view-screen` lists only proposals paired to the current pending request as
+  `pendingCandidateReviews`.
 - `show-design-questions` opens focused pre-generation questions in the main
   design canvas (`show-questions` application state).
 - `guided-questions` may contain a one-click chat choice for the current

package/corpus/templates/design/actions/cancel-node-rewrite-request.ts

@@ -0,0 +1,54 @@
+import { defineAction } from "@agent-native/core";
+import {
+  compareAndSetAppState,
+  readAppState,
+} from "@agent-native/core/application-state";
+import { assertAccess } from "@agent-native/core/sharing";
+import { z } from "zod";
+
+import {
+  designRepromptPendingStateKey,
+  designRepromptProposalStateKey,
+  isNodeRewriteProposal,
+  isPendingDesignReprompt,
+} from "../shared/node-rewrite.js";
+
+export default defineAction({
+  agentTool: false,
+  description:
+    "Cancel one pending node rewrite only when it is still the current request.",
+  schema: z.object({
+    designId: z.string().min(1),
+    fileId: z.string().min(1),
+    repromptId: z.string().min(1),
+  }),
+  run: async ({ designId, fileId, repromptId }) => {
+    await assertAccess("design", designId, "editor");
+    const pendingKey = designRepromptPendingStateKey(designId, fileId);
+    const pending = await readAppState(pendingKey);
+    if (
+      !isPendingDesignReprompt(pending) ||
+      pending.repromptId !== repromptId
+    ) {
+      return { cancelled: false, superseded: true };
+    }
+
+    const proposalKey = designRepromptProposalStateKey(
+      designId,
+      fileId,
+      repromptId,
+    );
+    const proposal = await readAppState(proposalKey);
+    const [pendingCancelled, proposalCancelled] = await Promise.all([
+      compareAndSetAppState(pendingKey, pending, null),
+      isNodeRewriteProposal(proposal)
+        ? compareAndSetAppState(proposalKey, proposal, null)
+        : Promise.resolve(false),
+    ]);
+    return {
+      cancelled: pendingCancelled,
+      proposalCancelled,
+      superseded: !pendingCancelled,
+    };
+  },
+});