@agent-native/core 0.129.2 → 0.130.1

package/corpus/templates/design/app/pages/design-editor/source-location.ts

@@ -0,0 +1,180 @@
+/**
+ * Pure, unit-testable helpers for turning a React `_debugStack` owner-stack
+ * (React 19+, an `Error` captured at JSX-creation time — `_debugSource` was
+ * removed as a structured fiber field in React 19) into a source location.
+ *
+ * Generalizes builder-internal's `extractJSXLocation` (see
+ * builder-internal/packages/app/models/fusion-editor.model.ts) to one regex
+ * instead of two branches: both webpack-internal:/// frames (webpack/Next.js/
+ * CRA dev servers) and Vite dev-server frames (incl. `/@fs/` absolute-path
+ * serving, which `editor-chrome.bridge.ts` also handles) are the same V8
+ * "at Name (url:line:col)" shape once the URL is resolved.
+ *
+ * Kept framework/DOM-free so it runs in a plain Node test environment. The
+ * `source-location.bridge.ts` IIFE duplicates this React parsing logic and adds
+ * Vue/Svelte compiler metadata handling inline (bridge files may not import
+ * anything) — keep the two in sync by hand if this file changes.
+ */
+
+export interface ParsedStackFrame {
+  sourceFile: string;
+  line: number;
+  column: number;
+  functionName?: string;
+}
+
+// Checked as whole path segments (see isNoisePath) rather than substrings so
+// resolveFrameUrl's leading-slash stripping for relative paths (which turns
+// "/node_modules/..." into "node_modules/...") can't slip past a "/x/" style
+// substring check, and so a legitimate dir name that merely CONTAINS one of
+// these words (e.g. "redistribute") never false-positives.
+const NOISE_SEGMENTS = new Set([
+  "node_modules",
+  "dist",
+  "build",
+  ".next",
+  "public",
+]);
+
+// V8 stack frame: "at Name (url:line:col)" or the anonymous "at url:line:col".
+const STACK_FRAME_RE =
+  /^\s*at\s+(?:([^\s(]+)\s+\()?([^()\s][^()]*?):(\d+):(\d+)\)?\s*$/;
+
+function isNoisePath(path: string): boolean {
+  const segments = path.split("/");
+  if (segments.some((segment) => NOISE_SEGMENTS.has(segment))) return true;
+  const nextIndex = segments.indexOf("_next");
+  return nextIndex >= 0 && segments[nextIndex + 1] === "static";
+}
+
+/**
+ * Resolves a stack frame's raw URL text to a project-ish path.
+ * - `webpack-internal:///./src/App.tsx` → `src/App.tsx`
+ * - `http://localhost:5173/@fs/Users/x/App.jsx?t=1` → `/Users/x/App.jsx` (Vite
+ *   absolute-path serving strips the query string automatically via URL parsing)
+ * - `http://localhost:5173/src/App.jsx` → `src/App.jsx`
+ * - `file:///Users/x/App.jsx` → `/Users/x/App.jsx`
+ */
+function resolveFrameUrl(rawUrl: string): string | null {
+  if (rawUrl.startsWith("webpack-internal:///")) {
+    const path = rawUrl
+      .slice("webpack-internal:///".length)
+      .replace(/^\.\//, "");
+    return path || null;
+  }
+  try {
+    const url = new URL(rawUrl);
+    let path = decodeURIComponent(url.pathname);
+    if (path.startsWith("/@fs/")) {
+      // Vite absolute-path serving — keep the leading slash, it's a real FS path.
+      path = path.slice("/@fs".length);
+    } else if (url.protocol !== "file:") {
+      // http(s) server-relative path -> project-relative. A file: URL's
+      // pathname is already an absolute FS path, same as /@fs/ above.
+      path = path.replace(/^\/+/, "");
+    }
+    return path || null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Parses one stack-trace line into a source location. Returns null for lines
+ * that aren't a resolvable, non-noise application frame (a React/runtime
+ * internal frame, a malformed line, or anything under node_modules/build
+ * output) — callers should try the next line rather than treat null as a
+ * hard failure.
+ */
+export function parseReactStackFrame(line: string): ParsedStackFrame | null {
+  const match = STACK_FRAME_RE.exec(line);
+  if (!match) return null;
+  const [, functionName, rawUrl, lineText, columnText] = match;
+  const sourceFile = resolveFrameUrl(rawUrl!);
+  if (!sourceFile || isNoisePath(sourceFile)) return null;
+  const lineNumber = Number(lineText);
+  const column = Number(columnText);
+  if (!Number.isFinite(lineNumber) || !Number.isFinite(column)) return null;
+  return {
+    sourceFile,
+    line: lineNumber,
+    column,
+    functionName: functionName || undefined,
+  };
+}
+
+/**
+ * Scans a full multi-line owner-stack (`fiber._debugStack.stack`) top-down
+ * and returns the first non-noise application frame.
+ */
+export function extractSourceFromDebugStack(
+  stack: string,
+): ParsedStackFrame | null {
+  for (const line of stack.split("\n")) {
+    const parsed = parseReactStackFrame(line);
+    if (parsed) return parsed;
+  }
+  return null;
+}
+
+/** Which tier resolved the location — see source-location.bridge.ts. */
+export type SourceLocationMethod =
+  | "data-attribute" // pre-existing data-source-file/data-loc (build-time transform)
+  | "debug-source" // React <=18 structured _debugSource field
+  | "debug-stack" // React 19 _debugStack owner-stack (this file's parser)
+  | "vue-inspector" // Vue dev compiler's __v_inspector vnode prop
+  | "svelte-meta"; // Svelte dev compiler's __svelte_meta.loc
+
+/**
+ * A resolved element source location.
+ *
+ * `sourceFile`/`line`/`column` are the element's OWN JSX authoring location
+ * — for a node inside a child component this is the child's file, not the
+ * parent's, regardless of how many times the parent instantiates it (e.g. a
+ * button inside `Card.jsx` always resolves there, whether `<Card>` was
+ * authored once directly or three times via `.map()`).
+ *
+ * `owner*` fields locate the nearest enclosing COMPONENT's own instantiation
+ * site — where the `<Card ...>` JSX itself was written in the parent. This is
+ * what differs between a directly-authored instance and one produced by
+ * `.map()`: all `.map()`-produced siblings share the same owner location
+ * (the call site is authored once), so `ownerKey` (the element's React `key`,
+ * when the parent supplied one) is the only source-derived signal that tells
+ * mapped siblings apart — this module does not invent DOM-instance identity
+ * beyond that; that's `data-agent-native-node-id`'s job elsewhere.
+ */
+export interface ElementSourceLocation {
+  status: "resolved";
+  framework?: "html" | "react" | "vue" | "svelte";
+  method: SourceLocationMethod;
+  sourceFile: string;
+  line: number;
+  column?: number;
+  componentName?: string;
+  ownerSourceFile?: string;
+  ownerLine?: number;
+  ownerColumn?: number;
+  ownerComponentName?: string;
+  /**
+   * Which tier produced `ownerLine`/`ownerColumn`. Separate from `method`
+   * because they routinely differ: a source plugin's attributes give the
+   * element an authored position while the owner site is only reachable
+   * through a React 19 owner stack (transformed).
+   */
+  ownerMethod?: SourceLocationMethod;
+  ownerKey?: string;
+}
+
+export type SourceLocationUnavailableReason =
+  | "not-framework" // no supported framework metadata found on any ancestor
+  | "no-debug-info" // framework found, but its dev source metadata is absent
+  | "element-not-found"; // the requested node/selector didn't resolve to a live element
+
+export interface SourceLocationUnavailable {
+  status: "unavailable";
+  reason: SourceLocationUnavailableReason;
+}
+
+export type SourceLocationOutcome =
+  | ElementSourceLocation
+  | SourceLocationUnavailable;

package/corpus/templates/design/app/pages/design-editor/tool-state.ts

@@ -102,6 +102,23 @@ export function shouldAutoEnableDrawOverlay(args: {
   );
 }
 
+/**
+ * There are only two views: the infinite canvas (where Edit and Annotate
+ * live) and the focused responsive screen (where Interact lives). A mode
+ * choice that disagrees with the current view is therefore a view change —
+ * picking Edit or Annotate from a focused screen must return to the canvas,
+ * not strand the screen in the forbidden single-screen editing state.
+ */
+export function resolveModeChangeView(args: {
+  next: EditorMode;
+  viewMode: "single" | "overview";
+}): "enter-single-interact" | "enter-overview" | "stay" {
+  if (args.next === "interact") {
+    return args.viewMode === "overview" ? "enter-single-interact" : "stay";
+  }
+  return args.viewMode === "single" ? "enter-overview" : "stay";
+}
+
 export type DesignBottomToolbarMode = "editor" | "commenter" | "hidden";
 
 export function getDesignBottomToolbarMode(args: {

package/corpus/templates/design/app/public-routes.ts

@@ -1,6 +1,7 @@
 export function isPublicDesignAppPath(pathname: string): boolean {
   return (
     pathname === "/visual-edit" ||
+    pathname.startsWith("/visual-edit/") ||
     pathname === "/design" ||
     pathname.startsWith("/design/") ||
     pathname.startsWith("/present/")

package/corpus/templates/design/app/routes/visual-edit.$id.tsx

@@ -0,0 +1,15 @@
+import { messagesByLocale } from "@/i18n-data";
+
+import DesignEditorRoute from "../pages/DesignEditor";
+
+/**
+ * The skill's local editor has its own route so a capability can authorize this
+ * surface without widening ordinary public `/design/:id` links.
+ */
+export default function LocalVisualEditRoute() {
+  return <DesignEditorRoute />;
+}
+
+export function meta() {
+  return [{ title: messagesByLocale["en-US"].routeTitles.designEditor }];
+}

package/corpus/templates/design/changelog/2026-06-29-screen-overview-is-easier-to-find-and-named-screens-open-dir.md

@@ -3,4 +3,4 @@ type: improved
 date: 2026-06-29
 ---
 
-Screen overview is easier to find and named screens open directly in full-screen edit mode.
+Screen overview is easier to find and named screens open directly in the focused Design view.

package/corpus/templates/design/changelog/2026-07-28-deleting-a-selected-element-now-removes-it-from-the-live-pre.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+Deleting a selected element now removes it from the live preview

package/corpus/templates/design/changelog/2026-07-28-deleting-an-element-on-a-connected-localhost-screen-now-queu.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+Deleting an element on a connected localhost screen now queues a pending live edit, so the deletion reaches app source and Cmd+Z takes it back.

package/corpus/templates/design/changelog/2026-07-28-interact-mode-now-shows-a-responsive-device-preview-with-pre.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-28
+---
+
+Interact mode now shows a responsive device preview with presets, editable width/height, and zoom-to-fit, alongside the usual panels

package/corpus/templates/design/changelog/2026-07-28-layer-hide-and-lock-now-apply-to-the-live-preview-instead-of.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-28
+---
+
+Layer hide and lock now apply to the live preview instead of only the layers list

package/corpus/templates/design/changelog/2026-07-28-layers-panel-selections-on-a-connected-localhost-screen-can-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+Layers-panel selections on a connected localhost screen can now be deleted with Delete or Backspace.

package/corpus/templates/design/changelog/2026-07-28-locked-layers-now-show-a-subtle-dashed-outline-in-the-live-p.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-28
+---
+
+Locked layers now show a subtle dashed outline in the live preview so a locked layer is distinguishable from an unlocked one.

package/corpus/templates/design/changelog/2026-07-28-the-apply-design-updates-button-now-counts-pending-live-text.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+Apply design update now includes pending live text and structure edits, so deletions are applied with the rest of the session changes

package/corpus/templates/design/changelog/2026-07-28-the-design-canvas-no-longer-stalls-on-a-render-loop-while-a-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+The design canvas no longer stalls on a render loop while a design is loading

package/corpus/templates/design/changelog/2026-07-28-visual-edit-on-a-local-dev-server-no-longer-requires-signing.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-28
+---
+
+Visual edit on a local dev server no longer requires signing in

package/corpus/templates/design/changelog/2026-07-28-visual-edits-on-a-react-19-app-no-longer-report-a-source-lin.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-28
+---
+
+Visual edits on a React 19 app no longer report a source line that is really the dev server's transformed line — anchors now say whether a position is authored or transformed, and the deterministic writer refuses a transformed one instead of editing the wrong element.

package/corpus/templates/design/changelog/2026-07-29-an-edit-that-cannot-be-written-to-source-now-names-the-reaso.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-29
+---
+
+An edit that cannot be written to source now names the reason — repeated instances, a client-rendered screen whose served HTML has no app markup, or source that has not finished loading — instead of reporting the selected element as missing.

package/corpus/templates/design/changelog/2026-07-29-applying-a-primitive-dropped-onto-a-connected-localhost-scre.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Applying a primitive dropped onto a connected localhost screen no longer fails with an anchors-still-loading error.

package/corpus/templates/design/changelog/2026-07-29-changing-a-style-in-the-inspector-now-updates-a-connected-lo.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Changing a style in the inspector now updates a connected local app immediately and queues the edit for Apply design updates

package/corpus/templates/design/changelog/2026-07-29-choosing-edit-or-annotate-from-a-focused-screen-now-returns-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Choosing Edit or Annotate from a focused screen now returns to the infinite canvas instead of leaving the screen stranded, and Interact hides the canvas toolbar it does not own.

package/corpus/templates/design/changelog/2026-07-29-concurrent-source-edits-now-return-a-clear-conflict-response.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Concurrent source edits now return a clear conflict response instead of an internal error.

package/corpus/templates/design/changelog/2026-07-29-creating-a-component-from-an-element-that-repeats-in-the-sou.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Creating a component from an element that repeats in the source now names the conflicting match count instead of annotating whichever instance came first.

package/corpus/templates/design/changelog/2026-07-29-deleting-an-element-you-just-dropped-onto-a-live-screen-no-l.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Deleting an element you just dropped onto a live screen no longer leaves it queued to be re-added when changes are applied to source.

package/corpus/templates/design/changelog/2026-07-29-dragging-a-layer-across-screens-no-longer-dies-when-the-poin.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Dragging a layer across screens no longer dies when the pointer crosses into a live localhost screen, and drops onto plain block-layout pages now resolve a target instead of silently failing

package/corpus/templates/design/changelog/2026-07-29-dragging-an-element-from-a-stored-screen-into-a-live-localho.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Dragging an element from a stored screen into a live localhost screen is now handed to the coding agent as a move instead of being silently copied in as new markup.

package/corpus/templates/design/changelog/2026-07-29-drawing-a-box-on-the-canvas-and-dragging-it-into-a-connected.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Drawing a box on the canvas and dragging it into a connected localhost screen now inserts it into the running app, with undo, redo, and Apply.

package/corpus/templates/design/changelog/2026-07-29-fixed-a-loading-screen-flicker-when-reopening-designs-with-a.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Fixed a loading-screen flicker when reopening designs with an in-progress generation.

package/corpus/templates/design/changelog/2026-07-29-interact-mode-has-edit-and-annotate-buttons-again-so-you-can.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Interact mode has Edit and Annotate buttons again, so you can leave a responsive preview straight into either canvas mode.

package/corpus/templates/design/changelog/2026-07-29-layer-groups-can-be-dropped-onto-live-localhost-screens.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Layer groups can be dropped onto live localhost screens without corrupting the screen URL.

package/corpus/templates/design/changelog/2026-07-29-localhost-source-errors-now-say-what-actually-went-wrong-whi.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-29
+---
+
+Localhost source errors now say what actually went wrong — which connection, which workspace, or that the bridge needs reconnecting — instead of a generic failure.

package/corpus/templates/design/changelog/2026-07-29-opening-or-refreshing-a-live-localhost-screen-in-single-scre.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Opening or refreshing a live localhost screen in single-screen view no longer blanks the running app and its layer list.

package/corpus/templates/design/changelog/2026-07-29-redo-after-undoing-a-drop-onto-a-live-screen-puts-the-elemen.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Redo after undoing a drop onto a live screen puts the element back instead of silently doing nothing.

package/corpus/templates/design/changelog/2026-07-29-shapes-can-be-drawn-directly-onto-live-localhost-screens.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Shapes can now be drawn directly onto live localhost screens while keeping the screen connected to the running app.

package/corpus/templates/design/changelog/2026-07-29-shapes-drawn-on-the-canvas-board-now-appear-immediately-inst.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Shapes drawn on the canvas board now appear immediately instead of only after a page reload, so you can draw one and drag it straight into a screen.

package/corpus/templates/design/changelog/2026-07-29-style-edits-on-a-running-localhost-screen-now-preview-live-a.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+Style edits on a running localhost screen now preview live and queue for the agent with their React source anchor, instead of silently disappearing when the element's runtime id goes stale.

package/corpus/templates/design/changelog/2026-07-29-the-apply-design-updates-control-now-appears-as-a-clean-conn.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-29
+---
+
+The Apply design updates control now appears as a clean, connected split button

package/corpus/templates/design/changelog/2026-07-29-visual-edits-on-a-mapped-component-instance-now-tell-the-age.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-29
+---
+
+Visual edits on a mapped component instance now tell the agent where that instance was rendered from, not just which React key it had.

package/corpus/templates/design/server/lib/design-data-access.ts

@@ -1,12 +1,26 @@
+import { designSourceTypeFromData } from "../../shared/source-mode";
+
 const EDITOR_ROLES = new Set(["owner", "admin", "editor"]);
 
-/**
- * Public visibility is read-only. Ownership and explicit share grants are
- * resolved separately by the framework, so they can still upgrade the caller
- * to owner/admin/editor without making an anonymous public link writable.
- */
-export function publicDesignAccessRole(): "viewer" {
-  return "viewer";
+const VISUAL_EDIT_CAPABILITY_PREFIX = "capability:visual-edit:design:";
+
+export function publicDesignAccessRole(
+  resource?: { id?: unknown; data?: unknown } | null,
+  ctx: {
+    userEmail?: string;
+    orgId?: string;
+    authCapability?: string;
+  } = {},
+): "viewer" | "editor" {
+  const designId =
+    typeof resource?.id === "string" ? resource.id.trim() : undefined;
+  if (!designId || designSourceTypeFromData(resource?.data) !== "localhost") {
+    return "viewer";
+  }
+  return ctx.authCapability ===
+    `${VISUAL_EDIT_CAPABILITY_PREFIX}${encodeURIComponent(designId)}`
+    ? "editor"
+    : "viewer";
 }
 
 function removeLocalhostCredentials(