@agent-native/core 0.153.10 → 0.154.1

package/dist/cli/index.js

@@ -7,6 +7,7 @@ import { fileURLToPath } from "url";
 import * as Sentry from "@sentry/node";
 import { clearAgentNativeNitroPresetMarker, resolveAgentNativeNitroPreset, } from "../deploy/nitro-preset.js";
 import { resolveDeployPostBuildInvocation } from "./deploy-build.js";
+import { assertNativeDependencies, assertNodeRuntimeMarker, ensureNativeDependencies, writeNodeRuntimeMarker, } from "./native-dependencies.js";
 import { cliSpawnOptions } from "./process.js";
 import { shouldTrackCliRun } from "./telemetry-routing.js";
 import { createCliTelemetry } from "./telemetry.js";
@@ -527,6 +528,13 @@ if (shouldTrackCliRun(command, args))
     trackCli("cli.run");
 switch (command) {
     case "dev": {
+        try {
+            ensureNativeDependencies({ repair: true, label: "dev" });
+        }
+        catch (error) {
+            console.error(error instanceof Error ? error.message : String(error));
+            process.exit(1);
+        }
         if (isWorkspaceRoot()) {
             import("./workspace-dev.js")
                 .then((m) => m.runWorkspaceDev({ args }))
@@ -586,6 +594,7 @@ switch (command) {
         // child exits non-zero, runBuildStep calls process.exit itself; the
         // continuation only runs on success.
         (async () => {
+            ensureNativeDependencies({ repair: true, label: "build" });
             // Doctor pre-step: scans app source for the security-critical guard
             // invariants (see `agent-native doctor --help`). Findings fail by
             // default; only an explicit `doctor.failOnBuild: false` opt-out keeps
@@ -640,6 +649,14 @@ switch (command) {
                     console.warn("[build] Deploy build script not found and no deploy preset is configured. Skipping post-build step.");
                 }
             }
+            const serverDirectory = path.resolve(".output/server");
+            if (fs.existsSync(serverDirectory)) {
+                assertNativeDependencies({
+                    fromDirectory: serverDirectory,
+                    label: "build output",
+                });
+                writeNodeRuntimeMarker(serverDirectory);
+            }
             console.log("\nBuild complete.");
         })().catch((err) => {
             // runBuildStep handles its own failures and exits, so reaching here
@@ -662,7 +679,19 @@ switch (command) {
             console.error('No production build found. Run "agent-native build" first.');
             process.exit(1);
         }
-        run("node", [serverEntry, ...args]);
+        const serverDirectory = path.dirname(serverEntry);
+        try {
+            assertNodeRuntimeMarker(serverDirectory);
+            assertNativeDependencies({
+                fromDirectory: serverDirectory,
+                label: "start output",
+            });
+        }
+        catch (error) {
+            console.error(error instanceof Error ? error.message : String(error));
+            process.exit(1);
+        }
+        run(process.execPath, [serverEntry, ...args]);
         break;
     }
     case "action": {

package/dist/cli/native-dependencies.d.ts

@@ -0,0 +1,24 @@
+type NativeDependencyCheck = {
+    status: "absent";
+    packageName: string;
+} | {
+    status: "healthy";
+    packageName: string;
+    packageDir: string;
+} | {
+    status: "broken";
+    packageName: string;
+    packageDir: string;
+    error: unknown;
+};
+export interface NativeDependencyOptions {
+    fromDirectory?: string;
+    label?: string;
+    repair?: boolean;
+}
+export declare function checkNativeDependencies(fromDirectory?: string): NativeDependencyCheck;
+export declare function ensureNativeDependencies(options?: NativeDependencyOptions): NativeDependencyCheck;
+export declare function assertNativeDependencies(options?: Omit<NativeDependencyOptions, "repair">): NativeDependencyCheck;
+export declare function writeNodeRuntimeMarker(serverDirectory: string): string | null;
+export declare function assertNodeRuntimeMarker(serverDirectory: string): void;
+export {};

package/dist/cli/native-dependencies.js

@@ -0,0 +1,264 @@
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+const BETTER_SQLITE3 = "better-sqlite3";
+const REBUILD_LOCK = ".agent-native-better-sqlite3-rebuild.lock";
+const RUNTIME_MARKER = ".agent-native-node-runtime.json";
+const LOCK_INITIALIZATION_TIMEOUT_MS = 5_000;
+const REBUILD_WAIT_MS = 250;
+const REBUILD_TIMEOUT_MS = 10 * 60 * 1000;
+function corePackageDirectory() {
+    return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
+}
+function packageRootFromManifest(packageName, manifestPath) {
+    const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+    return manifest.name === packageName ? path.dirname(manifestPath) : null;
+}
+function resolvePackageDirectory(packageName, fromDirectory) {
+    const requireFromDirectory = createRequire(path.join(path.resolve(fromDirectory), "package.json"));
+    try {
+        const manifestPath = requireFromDirectory.resolve(`${packageName}/package.json`);
+        return packageRootFromManifest(packageName, manifestPath);
+    }
+    catch {
+        try {
+            const entryPath = requireFromDirectory.resolve(packageName);
+            let current = path.dirname(entryPath);
+            while (true) {
+                const manifestPath = path.join(current, "package.json");
+                if (fs.existsSync(manifestPath)) {
+                    const packageDir = packageRootFromManifest(packageName, manifestPath);
+                    if (packageDir)
+                        return packageDir;
+                }
+                const parent = path.dirname(current);
+                if (parent === current)
+                    return null;
+                current = parent;
+            }
+        }
+        catch {
+            return null;
+        }
+    }
+}
+function probeBetterSqlite3(packageDir) {
+    try {
+        const requireFromPackage = createRequire(path.join(packageDir, "package.json"));
+        const Database = requireFromPackage(BETTER_SQLITE3);
+        const database = new Database(":memory:");
+        database.prepare("select 1 as ok").get();
+        database.close();
+        return null;
+    }
+    catch (error) {
+        return error;
+    }
+}
+export function checkNativeDependencies(fromDirectory = corePackageDirectory()) {
+    const packageDir = resolvePackageDirectory(BETTER_SQLITE3, fromDirectory);
+    if (!packageDir) {
+        return { status: "absent", packageName: BETTER_SQLITE3 };
+    }
+    const error = probeBetterSqlite3(packageDir);
+    return error === null
+        ? { status: "healthy", packageName: BETTER_SQLITE3, packageDir }
+        : { status: "broken", packageName: BETTER_SQLITE3, packageDir, error };
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function npmExecutable() {
+    const sibling = path.join(path.dirname(process.execPath), process.platform === "win32" ? "npm.cmd" : "npm");
+    return fs.existsSync(sibling) ? sibling : "npm";
+}
+function sleepSync(milliseconds) {
+    const signal = new Int32Array(new SharedArrayBuffer(4));
+    Atomics.wait(signal, 0, 0, milliseconds);
+}
+function processIsRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error instanceof Error && "code" in error && error.code !== "ESRCH";
+    }
+}
+function acquireRebuildLock(packageDir, label) {
+    const lockPath = path.join(packageDir, REBUILD_LOCK);
+    const startedWaiting = Date.now();
+    while (true) {
+        try {
+            const lockFd = fs.openSync(lockPath, "wx");
+            fs.writeSync(lockFd, JSON.stringify({
+                pid: process.pid,
+                startedAt: new Date().toISOString(),
+            }));
+            return () => {
+                try {
+                    fs.closeSync(lockFd);
+                }
+                finally {
+                    try {
+                        fs.unlinkSync(lockPath);
+                    }
+                    catch (error) {
+                        if (!(error instanceof Error &&
+                            "code" in error &&
+                            error.code === "ENOENT")) {
+                            throw error;
+                        }
+                    }
+                }
+            };
+        }
+        catch (error) {
+            if (!(error instanceof Error && "code" in error && error.code === "EEXIST")) {
+                throw error;
+            }
+            let ownerPid = null;
+            let lockAge = 0;
+            try {
+                const lock = JSON.parse(fs.readFileSync(lockPath, "utf8"));
+                ownerPid = typeof lock.pid === "number" ? lock.pid : null;
+            }
+            catch {
+                // The owner may be between creating and writing the lock metadata.
+            }
+            try {
+                lockAge = Date.now() - fs.statSync(lockPath).mtimeMs;
+            }
+            catch {
+                continue;
+            }
+            if ((ownerPid !== null && !processIsRunning(ownerPid)) ||
+                (ownerPid === null && lockAge > LOCK_INITIALIZATION_TIMEOUT_MS)) {
+                try {
+                    fs.unlinkSync(lockPath);
+                    continue;
+                }
+                catch (unlinkError) {
+                    if (!(unlinkError instanceof Error &&
+                        "code" in unlinkError &&
+                        unlinkError.code === "ENOENT")) {
+                        throw unlinkError;
+                    }
+                    continue;
+                }
+            }
+            if (Date.now() - startedWaiting > REBUILD_TIMEOUT_MS) {
+                throw new Error(`[${label}] Timed out waiting for another process to finish rebuilding ${BETTER_SQLITE3}.`);
+            }
+            sleepSync(REBUILD_WAIT_MS);
+        }
+    }
+}
+function rebuildNativeDependency(packageDir) {
+    execFileSync(npmExecutable(), ["run", "build-release", "--prefix", packageDir], {
+        cwd: packageDir,
+        stdio: "inherit",
+        shell: process.platform === "win32",
+    });
+}
+function brokenDependencyMessage(check, label) {
+    return [
+        `[${label}] ${check.packageName} cannot load its native binding.`,
+        `Package: ${check.packageDir}`,
+        `Node: ${process.version} (ABI ${process.versions.modules}, ${process.platform}-${process.arch})`,
+        `Original error: ${errorMessage(check.error)}`,
+        "The installed native binary was built for a different Node runtime or is otherwise stale.",
+    ].join("\n");
+}
+export function ensureNativeDependencies(options = {}) {
+    const label = options.label ?? "native preflight";
+    const check = checkNativeDependencies(options.fromDirectory);
+    if (check.status !== "broken")
+        return check;
+    if (!options.repair) {
+        throw new Error(brokenDependencyMessage(check, label));
+    }
+    console.warn(`${brokenDependencyMessage(check, label)}\n[${label}] Rebuilding it with the current Node runtime...`);
+    const releaseLock = acquireRebuildLock(check.packageDir, label);
+    try {
+        const current = checkNativeDependencies(options.fromDirectory);
+        if (current.status === "healthy")
+            return current;
+        if (current.status !== "broken") {
+            throw new Error(`[${label}] ${BETTER_SQLITE3} disappeared before its native rebuild.`);
+        }
+        rebuildNativeDependency(current.packageDir);
+        const repaired = checkNativeDependencies(options.fromDirectory);
+        if (repaired.status === "healthy") {
+            console.log(`[${label}] ${repaired.packageName} is ready for Node ABI ${process.versions.modules}.`);
+            return repaired;
+        }
+        if (repaired.status === "broken") {
+            throw new Error(brokenDependencyMessage(repaired, label));
+        }
+        throw new Error(`[${label}] ${BETTER_SQLITE3} disappeared after its native rebuild.`);
+    }
+    finally {
+        releaseLock();
+    }
+}
+export function assertNativeDependencies(options = {}) {
+    const check = checkNativeDependencies(options.fromDirectory);
+    if (check.status === "broken") {
+        throw new Error(brokenDependencyMessage(check, options.label ?? "runtime"));
+    }
+    return check;
+}
+export function writeNodeRuntimeMarker(serverDirectory) {
+    if (!fs.existsSync(serverDirectory))
+        return null;
+    const markerPath = path.join(serverDirectory, RUNTIME_MARKER);
+    const marker = {
+        nodeVersion: process.version,
+        nodeAbi: process.versions.modules,
+        platform: process.platform,
+        arch: process.arch,
+    };
+    fs.writeFileSync(markerPath, `${JSON.stringify(marker)}\n`);
+    return markerPath;
+}
+export function assertNodeRuntimeMarker(serverDirectory) {
+    const markerPath = path.join(serverDirectory, RUNTIME_MARKER);
+    if (!fs.existsSync(markerPath))
+        return;
+    let marker;
+    try {
+        marker = JSON.parse(fs.readFileSync(markerPath, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`[runtime] Could not read ${RUNTIME_MARKER}: ${errorMessage(error)}`);
+    }
+    const mismatches = [
+        marker.nodeAbi !== process.versions.modules
+            ? `Node ABI ${marker.nodeAbi} (build) vs ${process.versions.modules} (runtime)`
+            : null,
+        marker.platform !== process.platform
+            ? `platform ${marker.platform} (build) vs ${process.platform} (runtime)`
+            : null,
+        marker.arch !== process.arch
+            ? `architecture ${marker.arch} (build) vs ${process.arch} (runtime)`
+            : null,
+    ].filter((value) => value !== null);
+    if (mismatches.length > 0) {
+        throw new Error([
+            `[runtime] Production output was built for a different Node runtime: ${mismatches.join(", ")}.`,
+            `Build Node: ${marker.nodeVersion}; runtime Node: ${process.version}.`,
+            "Run the build and start commands with the same Node installation.",
+        ].join("\n"));
+    }
+}
+function isDirectExecution() {
+    const entryPoint = process.argv[1];
+    return (entryPoint !== undefined &&
+        path.resolve(entryPoint) === path.resolve(fileURLToPath(import.meta.url)));
+}
+if (isDirectExecution() && process.argv.includes("--repair")) {
+    ensureNativeDependencies({ repair: true, label: "native repair" });
+}

package/dist/cli/plan-local.js

@@ -2169,7 +2169,7 @@ async function runServe(args) {
             bridgeUrl: bridge.result.bridgeUrl,
         }),
         "Keep this bridge command running while the Plan page is open; stopping it makes this URL unreachable.",
-        "Press Ctrl+C to stop.",
+        "Press Ctrl C to stop.",
     ]
         .filter(Boolean)
         .join("\n") + "\n");

package/dist/cli/skills-content/design-visual-edit-skill.d.ts

@@ -1 +1 @@
-export declare const DESIGN_VISUAL_EDIT_SKILL_MD = "---\nname: visual-edit\ndescription: >-\n  Open a running local app in Design overview mode as URL-backed iframe screens\n  for visual editing, flow review, duplication, and route-state exploration.\n  Use when the user asks to inspect, compare, or edit a real local app visually\n  in Design.\nmetadata:\n  visibility: exported\n---\n\n# Visual Edit\n\nUse `/visual-edit` when the user wants to inspect or edit a real local app\nvisually instead of generating standalone Alpine HTML. The source of truth is\nthe running localhost app plus its route URLs. Design shows those routes as\niframe-backed screens on the infinite canvas.\n\n## Installing this skill for an external MCP host\n\nThe hosted install path\n(`npx @agent-native/core@latest skills add visual-edit`, or `design` for the\nfull Design bundle) installs the exported instructions and registers the\nhosted Design MCP connector together. The open Skills CLI path\n(`npx skills@latest add BuilderIO/agent-native --skill visual-edit`) installs\nexported instructions only, with no MCP connector registration.\n\n## Put Design Beside The Chat\n\nPrefer the interactive MCP App returned by `open-visual-edit` when the coding\nhost renders it. The user gets the Design canvas beside the conversation, and\n**Apply design updates** can submit the bounded source-edit handoff back to the\ncurrent host conversation through the standard MCP Apps message bridge. The\nhost may ask the user to confirm the current conversation or choose a new one.\n\nOtherwise, `openUrl` is a credential-free, read-only fallback that is safe to\nshow in model text or retain in logs. Do not claim that fallback is editable:\nthe edit capability is intentionally available only to the host-managed MCP App\nlauncher, where it is hidden from the model and redeemed once.\n\n- In Codex Desktop, prefer the rendered MCP App. Use the in-app Browser for the\n  credential-free `openUrl` only when a read-only fallback is acceptable.\n- In Claude Code Desktop's Code tab, prefer the rendered MCP App. Preview\n  `openUrl` in the Browser pane only as the read-only fallback.\n- In VS Code, use the Agent Native Design webview/deep link described below.\n- Inline browser availability is host-dependent. CLI, remote, or restricted\n  sessions may not expose one. If the inline surface is unavailable or disabled,\n  return the normal **Open design** link instead of claiming it opened.\n\nPrefer the MCP App surface for a connected Design plugin, then the host's\nbrowser/preview tool as the universal fallback. Keep the canvas beside chat\nwhen the host supports rearrangeable panes.\n\nInside Design, use **Show/Hide UI** from the `Cmd+K` menu or press Figma's\n`Shift+\\` shortcut to toggle all editing chrome so only the canvas remains.\nThe same action is available from Design's empty-canvas context menu.\n\n## Core Model\n\n- Each screen is a URL-backed iframe, not copied HTML.\n- Each screen keeps URL metadata: `connectionId`, `routeId`, `path`,\n  `url`, `bridgeUrl`, title, and viewport size.\n- Localhost Edit mode renders the running app through the local bridge as a live\n  iframe with the same editor bridge used by HTML designs. It is never a frozen\n  static DOM snapshot. Editing is direct DOM manipulation against that live\n  document; the parallel `/snapshot` fetch feeds the editable source model only\n  and must never be rendered in the frame.\n- **The `/visual-edit` skill needs no Design account sign-in.**\n  `open-visual-edit` mints a five-minute, single-use capability for the exact\n  `/visual-edit/:designId` local-editor route. The MCP host redeems it outside\n  model-visible text, then opens the existing editor with localhost edit access.\n  This capability is not an account session: `/_agent-native/session` remains\n  signed out, and account-backed save/share/generate actions remain denied.\n- The skill enters through local `pnpm action open-visual-edit`. When that CLI\n  has no account session, the action uses a stable, workspace-scoped local\n  principal to register the bridge, create/reuse the local design, and place\n  screens. That principal exists only inside the in-process CLI call; it is not\n  a browser login and cannot be selected by an HTTP, MCP, or tunneled caller.\n- Public links are always read-only, including on loopback. Loopback peer\n  identity is not an authentication boundary because a tunnel or reverse proxy\n  can make a remote request appear local. A bare `/visual-edit/:designId` or\n  `/design/:designId` URL carries no capability and must never release the\n  connection's `previewToken`.\n- The live editor is same-origin through the local bridge proxy. This boots\n  CSR apps and root-relative assets, but it is still a localhost editing proxy:\n  app-origin cookies, WebSockets/HMR, SSE, and non-GET app API calls may need a\n  future dev-server/plugin integration for perfect parity with the app's own\n  origin.\n- **There are exactly two views.** The infinite canvas is where all editing\n  happens, and the responsive interactive view (Interact) is where the app runs\n  for real. There is no third \"full view\"/focused-edit state \u2014 clicking a screen\n  in the Screens list, or the view toggle, opens the responsive view, and\n  closing it returns to the canvas.\n- Interact keeps the left and right rails and adds a device bar above the canvas\n  (device preset, editable width/height, zoom, close). It renders the app's\n  normal URL so navigation, scrolling, links, and form controls behave as they\n  would in the browser, and the wheel scrolls the app rather than panning the\n  canvas. The canvas view is the opposite: the wheel pans and zooms it, and\n  native interaction inside the frame is suppressed.\n- While a localhost screen has pending live visual edits, do not switch back to\n  Interact until the user either applies the edits to source or explicitly\n  aborts/discards the preview.\n- Alt-drag duplicates a screen. For localhost screens, duplication copies the\n  iframe frame and URL metadata; change the copy's path/query for a new state.\n- Flow visualization is multiple URL states: `/checkout?step=shipping`,\n  `/checkout?step=payment`, `/checkout?step=done`, etc.\n- When the user gives a named flow or numbered screen list, preserve that order\n  and create one screen per URL/path. Shorthand like\n  `localhost:1234/onboarding/1` means\n  `http://localhost:1234/onboarding/1`.\n\n## Useful Canvas Sets\n\nTranslate the user's requested review into the smallest useful set of frames:\n\n- **Multi-step flow:** one ordered frame per route or query state, such as cart,\n  shipping, payment, and confirmation.\n- **Multiple pages:** one frame per meaningful route, such as home, pricing,\n  docs, and account settings.\n- **Responsive comparison:** repeat the same route at the requested desktop,\n  tablet, and mobile viewports so they align in one row.\n- **State review:** repeat a route for meaningful URL-addressable states such as\n  empty, loading, error, modal-open, or selected-item views.\n\nDo not expand every discovered route or every viewport unless the user asks for\nan exhaustive audit. Preserve the user's labels and sequence so the canvas reads\nlike the workflow they described.\n\n## Select And Reprompt\n\nWhen a chat message begins with `[Reprompt selection]`, the selected subtree is\na hard write boundary. The only mutation path is `propose-node-rewrite` with\nthe exact `repromptId`, target, and `baseVersionHash` captured in\n`design-reprompt-pending:<designId>:<fileId>`. Never use `apply-visual-edit`,\n`apply-source-edit`, `write-source`, `write-local-file`, `edit-design`, or any\nother content-writing action for that request. Clarifying questions are allowed,\nbut a requested change must remain a proposal.\n\nProduce one variant by default. Produce two or three only when the instruction\nasks for options. A retry includes `priorProposalId`; keep the same target and\nbase version, incorporate the feedback, and call `propose-node-rewrite` again.\nThe UI previews the returned subtree without persisting it.\n\nUse `resolve-node-rewrite` for the accept/reject lifecycle. Accept applies the\nchosen variant as one version-checked inline/Yjs content transaction so one\nundo restores the prior structure; reject clears the proposal without changing\ncontent. For conversational resolution such as \"apply the second one,\" call\n`view-screen`, read the active `design.reprompt.proposal`, and pass its\n`proposalId` plus the zero-based `variantIndex` to `resolve-node-rewrite`.\n\n## Review Quality\n\n- Treat the running app as the truth. Preserve its component language, tokens,\n  route state, and real content unless the user explicitly asks for a new visual\n  direction.\n- Use multiple URL states to reveal meaningful UX moments: empty/loading/error\n  states, focused panels, modals, responsive breakpoints, and completed flow\n  steps when those matter to the review.\n- For visual edits, compare before/after at the relevant viewport sizes and\n  check key hover/focus/scroll states when the app exposes them.\n\n## Account And Sharing Model\n\n- `/visual-edit/:id` is the dedicated local-editor surface. The one-time\n  handoff returned by `open-visual-edit` opens it with edit access without a\n  Design login. A copied or bare `/visual-edit/:id` URL is read-only because it\n  does not carry the capability.\n- The capability permits live iframe inspection and session-local edits,\n  undo/redo, **Apply design updates** through the connected host/local agent,\n  and **Copy prompt**. Those flows hand bounded source instructions back to the\n  coding agent; they do not silently persist account-owned Design data.\n- Public `/design/:id` links stay read-only without a signed-in owner/editor\n  session. Never use the local capability to upgrade that ordinary sharing\n  surface.\n- Prefer links returned by Design actions or `/_agent-native/open` deep links.\n  Do not surface URLs with `_session=` tokens or hand-build capability URLs.\n- Do not attempt account-backed write actions with the browser capability. The\n  trusted local `open-visual-edit` CLI call may register its bridge, create or\n  reuse its workspace-owned local design, and place screens without an account.\n  Direct source-file action writes, generation, saving into an account, and\n  sharing still require an authenticated action caller. If a signed-out visitor\n  wants those durable account operations, send them through the framework\n  sign-in return flow first.\n\n## Required Local Bridge\n\nThe live-edit bridge is unlocked by a shared secret (the \"bridge token\") that\nmust match on two sides: the local bridge process, and the user's connection row\nin Design (which the browser reads to authorize `/live-edit-bridge`,\n`/read-file`, `/write-file`). Get them to match by letting the\n`open-visual-edit` action mint the token, then starting the\nbridge with it. This is the only ordering that works for the remote-MCP flow \u2014\nthe bridge cannot push its own token to the server without a CLI auth token, so\nthe server mints instead and the bridge adopts.\n\nFrom the target app repo, make sure its dev server is running, then:\n\n**1. Discover routes without starting a durable bridge** (one-shot, exits):\n\n```bash\nnpx @agent-native/core@latest design connect --url http://localhost:5173 --root . --json\n```\n\nThis prints the manifest (routes + capabilities). Parse it to build\n`routeManifest` for the next step. (Skip this if the user already gave explicit\npaths/URLs to place.)\n\nInside the agent-native monorepo itself, use the workspace CLI instead of\n`npx` \u2014 `npx` installs the last published `@agent-native/core`, which will not\ncontain local changes and costs a slow install on every call:\n\n```bash\npnpm dev:cli design connect --url http://localhost:5173 --root templates/<app> --json\n```\n\n**2. Call `open-visual-edit`** (see Action Flow below) with NO `bridgeToken`.\nThe server mints one, stores it on the user's connection row, copies it into the\nplaced screens' metadata, and returns it to you as `bridgeToken`. Capture it.\n\n**3. Start the persistent bridge adopting that token** (single line; prefer the\nenv var so the secret does not appear in `ps`):\n\n```bash\nAGENT_NATIVE_BRIDGE_TOKEN=\"<bridgeToken from step 2>\" npx @agent-native/core@latest design connect --url http://localhost:5173 --root . --daemon\n```\n\n(Equivalently, pass `--bridge-token <token>`.) This starts a detached bridge on\n`http://127.0.0.1:7331`, adopts the server-minted token \u2014 so bridge and row\nagree and live-edit authorizes with no self-registration \u2014 and stays alive after\nthe command exits.\n\nFor a manual health/manifest check on the running bridge:\n\n```bash\ncurl http://127.0.0.1:7331/health\n```\n\n`/health` needs no token. The full manifest at `/manifest.json` is\npreview-token protected, so an unauthenticated `curl` of it returns\n`{\"ok\":false,\"error\":\"invalid or missing preview token\"}` \u2014 that response means\nthe bridge is up, not that it is broken.\n\nOnly use `--json` for the step-1 route probe. Never use `--json`, `--once`,\nor `--dry-run` for the durable step-3 bridge: they print the manifest and exit,\nso Design falls back to a non-editable live iframe.\n\nThe bridge listens on a single fixed port (7331) and refuses to start for a\nsecond, different app. It is detached with no log file, so if `--daemon` reports\na timeout, check for a stale process (`lsof -ti:7331`) before retrying.\n\n## Action Flow\n\nPrefer the single `open-visual-edit` action. It registers or\nrefreshes the localhost bridge connection, mints and stores the bridge token,\ncreates or reuses a Design project, places URL-backed screens, stores the active\nvisual-edit context, and navigates to overview mode in one call. This avoids\ncreating a private design under a synthetic CLI user and then handing the browser\na tokenized URL that may be shadowed by an existing session.\n\nCall it BEFORE starting the durable bridge (step 3 above): it does not contact\nthe bridge, so the bridge need not be running yet, and you need its returned\n`bridgeToken` to start the bridge with a matching secret. Omit `bridgeToken`\non the call so the server mints one.\n\n```bash\npnpm action open-visual-edit '{\n  \"title\": \"Docs homepage visual edit\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"bridgeUrl\": \"http://127.0.0.1:7331\",\n  \"rootPath\": \"/absolute/path/to/app\",\n  \"routeManifest\": { \"...\": \"from /manifest.json\" },\n  \"paths\": [\"/\", \"/pricing\", \"/checkout?step=payment\"]\n}'\n```\n\nThe action returns `designId`, `connectionId`, `bridgeToken`, `screens`,\n`urlPath`, and a credential-free `openUrl`. Its MCP App metadata separately\ncarries the one-time editor launcher so the host can redeem it without showing\nthe capability to the model or retaining it in the action link. Keep\n`designId`/`connectionId` in the chat context for follow-ups, and pass\n`bridgeToken` to `design connect` (step 3) to start the bridge. On follow-up\ncalls reusing an existing `connectionId`, the same token is returned (it is\nminted once and reused), so the running bridge stays valid.\n\n### Desktop and mobile side by side\n\nPass `viewports` to place every requested route once per viewport. Frames lay\nout as a grid: one row per route, one column per viewport. Presets are\n`desktop` (1280x900), `laptop` (1440x900), `tablet` (834x1112), and `mobile`\n(390x844); an explicit `{ \"label\": \"...\", \"width\": N, \"height\": N }` also works.\n\n```bash\npnpm action open-visual-edit '{\n  \"title\": \"Tasks responsive visual edit\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"bridgeUrl\": \"http://127.0.0.1:7331\",\n  \"rootPath\": \"/absolute/path/to/app\",\n  \"paths\": [\"/tasks\", \"/inbox\"],\n  \"viewports\": [\"desktop\", \"mobile\"]\n}'\n```\n\nPrefer this over two separate calls with `defaultWidth`/`defaultHeight`: it\nkeeps each route's viewports aligned in a row and titles them\n`Tasks \u2014 Desktop` / `Tasks \u2014 Mobile` so the canvas reads clearly. `viewports`\noverrides `defaultWidth`/`defaultHeight`. With no `routes`/`paths`, it expands\nevery route in the localhost manifest, which is usually far more frames than\nthe user wants \u2014 name the paths.\n\n### Adding more page frames later\n\nCall `open-visual-edit` again with the same `designId` and `connectionId` and\nonly the new paths. Existing frames for the same route and viewport are\nrefreshed in place rather than duplicated, and a frame the user has dragged or\nresized keeps its position unless you explicitly pass `x`/`y`/`width`/`height`.\n\n```bash\npnpm action open-visual-edit '{\n  \"designId\": \"<existing-design-id>\",\n  \"connectionId\": \"<existing-connection-id>\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"paths\": [\"/settings\", \"/team\"],\n  \"startY\": 2200\n}'\n```\n\nDo NOT add `defaultWidth`/`defaultHeight` just to restate the default size:\nsupplying either one marks the viewport as explicitly requested, which\noverwrites frame sizes the user has already adjusted on the canvas.\n\nFor a numbered flow the user describes in chat, keep the labels and order:\n\n```bash\npnpm action open-visual-edit '{\n  \"designId\": \"<existing-design-id>\",\n  \"connectionId\": \"<existing-connection-id>\",\n  \"devServerUrl\": \"http://localhost:1234\",\n  \"routes\": [\n    { \"url\": \"localhost:1234/onboarding/1\", \"title\": \"Screen 1\" },\n    { \"url\": \"localhost:1234/onboarding/2\", \"title\": \"Screen 2\" },\n    { \"url\": \"localhost:1234/onboarding/3\", \"title\": \"Screen 3\" }\n  ]\n}'\n```\n\nIf no `routes` or `paths` are supplied, `open-visual-edit` uses every route\nfrom the localhost manifest.\n\nFallback, only when `open-visual-edit` is unavailable:\n\n1. Register or refresh the bridge with `connect-localhost`, passing the\n   `/manifest.json` result as `routeManifest` and `capabilities`.\n2. Create or reuse a Design project with `create-design`.\n3. Place URL-backed screens with `add-localhost-screens`.\n4. Navigate to overview mode with `navigate`.\n\n## Open The Design Surface\n\n- Use the `link`, `deepLink`, or MCP App embed returned by Design actions so\n  the user sees the canvas. Follow **Put Design Beside The Chat**: prefer the\n  MCP App; otherwise surface the credential-free **Open design** link.\n- Return or open the MCP App first. Its host-managed launcher carries the\n  one-time local-editor capability. The credential-free `openUrl` / action link\n  is the safe read-only fallback; never build a capability URL yourself.\n- Never return or open a hand-built `/design/:id?_session=...` URL.\n- If the user is working in VS Code, the Agent Native extension can open the\n  same URL via\n  `vscode://builder.agent-native/open?url=<encoded-design-url>`. Its\n  `Agent Native: Open Design Canvas` command also starts the local bridge and\n  opens hosted Design in the VS Code side panel.\n- After `open-visual-edit`, confirm the Design editor is in overview mode\n  with the requested URL-backed frames visible, and that they render the app\n  rather than a spinner. Do not stop at \"screens added\" when the user asked to\n  inspect or edit visually.\n\n## Applying Visual Edits Back To Source\n\nCanvas edits on a localhost screen do not write source as you make them. They\naccumulate as pending edits and the editor shows an **Apply design updates**\nbutton on the canvas. In an MCP App, clicking it hands the bounded structured\nprompt to the current host coding conversation. In an ordinary browser or\nstandalone Design page, it falls back to the local Design agent. The dropdown's\n**Copy prompt to your agent** action is the universal manual fallback.\n\n- Style, text, and drag/drop structure edits all collect into the same pending\n  batch, so the user can make several changes and apply once.\n- After the write lands, the target app's own dev-server HMR refreshes the\n  frames \u2014 no manual reload. If frames do not refresh, the write did not land;\n  say so rather than assuming.\n- The separate disk-icon \"Apply to source\" button is the deterministic\n  whole-file HTML/CSS writer. It is intentionally disabled for compiled\n  `.jsx`/`.tsx` routes \u2014 those must go through the agent path above.\n\n## Editing URLs\n\nKeep localhost screens as URL files plus `screenMetadata[fileId]`. Do not\nreplace them with copied `srcdoc` HTML unless the user explicitly asks for a\nfrozen snapshot. To change a state, rerun `open-visual-edit` with the new\npath/query or duplicate the screen and update the copy's URL metadata.\n\n## Local Files in the Code Tab\n\nOnce a connection is registered, the design editor's Code panel (left rail \u2192\nCode, or `navigate --view editor --designId <id> --leftPanel code`) shows a\nlocal-files workspace root for that connection next to the design's own files.\nTreat that root like VS Code opened at the connected project directory: file\ntree, search, open/edit, and save are backed by the real local files. It lists\nthe connected app's text/code files through the bridge\n(`list-local-files` / `read-local-file`); build output, `node_modules`,\n`.git`, and secret-looking paths (`.env*`, key files) are always excluded.\n\n- Browsing and reading need only editor access on the design plus the running\n  bridge.\n- Saving goes through `write-local-file`: the first save opens the\n  write-consent dialog (an 8-hour, folder-scoped grant) and retries\n  automatically once granted. Only text/code files are writable; secret paths\n  are always blocked.\n- If the agent calls `write-local-file` directly (not through a UI save) and it\n  fails with \"no write-consent grant\", call `request-localhost-write-consent`.\n  It opens the write-consent dialog in the editor, or reports `alreadyGranted`\n  if one already exists. Granting is human-only \u2014\n  `grant-localhost-write-consent` is hidden from agents, so you cannot approve\n  it yourself. Tell the user to click \"Allow writes\", then retry\n  `write-local-file` once. Do not keep retrying blindly: the write stays\n  blocked until the user approves.\n- Saves are conflict-checked against the file's on-disk version \u2014 a file that\n  changed since it was read fails with a version conflict instead of being\n  overwritten.\n\n## React Source Writeback\n\n- Use compiler/debug provenance (project-relative file, line, column,\n  component, and runtime multiplicity) to locate React/TSX source. Treat it as\n  evidence, not as permission for a generic AST structural transform.\n- Read `positionPrecision` on every anchor before you trust `line`/`column`.\n  `authored` means those are the real JSX coordinates. `transformed` means they\n  are the dev server's own output coordinates \u2014 React 19 removed `_debugSource`\n  and exposes only an owner stack, so this is the normal case on a Vite/Next\n  dev server, and the line will not match the file. `unknown` means no tier was\n  reported. On anything but `authored`, use the file and component to find the\n  element by its JSX shape and re-derive the line from the file you read; never\n  edit at the reported line.\n- A single-instance leaf text edit, literal `className`/`class` edit, or flat\n  literal `style={{ ... }}` property may use `apply-visual-edit` with a\n  `local-file` source and a complete `target.sourceAnchor`. Forward the\n  anchor's `positionPrecision` with it \u2014 the action refuses a `transformed`\n  anchor with `status: \"needsAgent\"` instead of seeking to a line that means\n  something else in the authored file. Preview first (omit `persist`), inspect\n  `proposedDiff`, then call with `persist: true`.\n- Reparenting, grouping/ungrouping, wrappers, dynamic expressions, repeated\n  `.map()` instances, shared components, breakpoint-scoped edits, and\n  cross-file changes go through the coding agent with complete subject/target\n  anchors and their runtime relationship. `apply-visual-edit` refuses these\n  with `status: \"needsAgent\"` rather than guessing.\n- Before each write, read the file and pass its exact `versionHash` to\n  `write-local-file` with `requireExpectedVersionHash: true`; on conflict,\n  re-read and re-plan. Keep the optimistic preview until HMR/runtime confirms\n  the result. Human write consent remains mandatory and agents cannot grant it.\n\n## Verification\n\n- `list-localhost-connections` returns the expected connection and routes.\n- The Design editor opens in overview mode.\n- Every requested screen renders the intended localhost URL, showing real app\n  content rather than an endless loading spinner.\n- The screen iframe carries a `src`, not a `srcdoc`. A localhost screen with a\n  `srcdoc` is a bug, not a slow load \u2014 check it in the browser devtools before\n  reporting the canvas as working.\n- Alt-dragging a screen copies the URL-backed frame, not an inline HTML clone.\n- A query/path edit changes only the target screen's URL metadata and iframe.\n- The Code tab shows a local-files root for the connection and opens its files.\n";
+export declare const DESIGN_VISUAL_EDIT_SKILL_MD = "---\nname: visual-edit\ndescription: >-\n  Open a running local app in Design overview mode as URL-backed iframe screens\n  for visual editing, flow review, duplication, and route-state exploration.\n  Use when the user asks to inspect, compare, or edit a real local app visually\n  in Design.\nmetadata:\n  visibility: exported\n---\n\n# Visual Edit\n\nUse `/visual-edit` when the user wants to inspect or edit a real local app\nvisually instead of generating standalone Alpine HTML. The source of truth is\nthe running localhost app plus its route URLs. Design shows those routes as\niframe-backed screens on the infinite canvas.\n\n## Installing this skill for an external MCP host\n\nThe hosted install path\n(`npx @agent-native/core@latest skills add visual-edit`, or `design` for the\nfull Design bundle) installs the exported instructions and registers the\nhosted Design MCP connector together. The open Skills CLI path\n(`npx skills@latest add BuilderIO/agent-native --skill visual-edit`) installs\nexported instructions only, with no MCP connector registration.\n\n## Put Design Beside The Chat\n\nPrefer the interactive MCP App returned by `open-visual-edit` when the coding\nhost renders it. The user gets the Design canvas beside the conversation, and\n**Apply design updates** can submit the bounded source-edit handoff back to the\ncurrent host conversation through the standard MCP Apps message bridge. The\nhost may ask the user to confirm the current conversation or choose a new one.\n\nOtherwise, `openUrl` is a credential-free, read-only fallback that is safe to\nshow in model text or retain in logs. Do not claim that fallback is editable:\nthe edit capability is intentionally available only to the host-managed MCP App\nlauncher, where it is hidden from the model and redeemed once.\n\n- In Codex Desktop, prefer the rendered MCP App. Use the in-app Browser for the\n  credential-free `openUrl` only when a read-only fallback is acceptable.\n- In Claude Code Desktop's Code tab, prefer the rendered MCP App. Preview\n  `openUrl` in the Browser pane only as the read-only fallback.\n- In VS Code, use the Agent Native Design webview/deep link described below.\n- Inline browser availability is host-dependent. CLI, remote, or restricted\n  sessions may not expose one. If the inline surface is unavailable or disabled,\n  return the normal **Open design** link instead of claiming it opened.\n\nPrefer the MCP App surface for a connected Design plugin, then the host's\nbrowser/preview tool as the universal fallback. Keep the canvas beside chat\nwhen the host supports rearrangeable panes.\n\nInside Design, use **Show/Hide UI** from the `Cmd K` menu or press Figma's\n`Shift \\` shortcut to toggle all editing chrome so only the canvas remains.\nThe same action is available from Design's empty-canvas context menu.\n\n## Core Model\n\n- Each screen is a URL-backed iframe, not copied HTML.\n- Each screen keeps URL metadata: `connectionId`, `routeId`, `path`,\n  `url`, `bridgeUrl`, title, and viewport size.\n- Localhost Edit mode renders the running app through the local bridge as a live\n  iframe with the same editor bridge used by HTML designs. It is never a frozen\n  static DOM snapshot. Editing is direct DOM manipulation against that live\n  document; the parallel `/snapshot` fetch feeds the editable source model only\n  and must never be rendered in the frame.\n- **The `/visual-edit` skill needs no Design account sign-in.**\n  `open-visual-edit` mints a five-minute, single-use capability for the exact\n  `/visual-edit/:designId` local-editor route. The MCP host redeems it outside\n  model-visible text, then opens the existing editor with localhost edit access.\n  This capability is not an account session: `/_agent-native/session` remains\n  signed out, and account-backed save/share/generate actions remain denied.\n- The skill enters through local `pnpm action open-visual-edit`. When that CLI\n  has no account session, the action uses a stable, workspace-scoped local\n  principal to register the bridge, create/reuse the local design, and place\n  screens. That principal exists only inside the in-process CLI call; it is not\n  a browser login and cannot be selected by an HTTP, MCP, or tunneled caller.\n- Public links are always read-only, including on loopback. Loopback peer\n  identity is not an authentication boundary because a tunnel or reverse proxy\n  can make a remote request appear local. A bare `/visual-edit/:designId` or\n  `/design/:designId` URL carries no capability and must never release the\n  connection's `previewToken`.\n- The live editor is same-origin through the local bridge proxy. This boots\n  CSR apps and root-relative assets, but it is still a localhost editing proxy:\n  app-origin cookies, WebSockets/HMR, SSE, and non-GET app API calls may need a\n  future dev-server/plugin integration for perfect parity with the app's own\n  origin.\n- **There are exactly two views.** The infinite canvas is where all editing\n  happens, and the responsive interactive view (Interact) is where the app runs\n  for real. There is no third \"full view\"/focused-edit state \u2014 clicking a screen\n  in the Screens list, or the view toggle, opens the responsive view, and\n  closing it returns to the canvas.\n- Interact keeps the left and right rails and adds a device bar above the canvas\n  (device preset, editable width/height, zoom, close). It renders the app's\n  normal URL so navigation, scrolling, links, and form controls behave as they\n  would in the browser, and the wheel scrolls the app rather than panning the\n  canvas. The canvas view is the opposite: the wheel pans and zooms it, and\n  native interaction inside the frame is suppressed.\n- While a localhost screen has pending live visual edits, do not switch back to\n  Interact until the user either applies the edits to source or explicitly\n  aborts/discards the preview.\n- Alt-drag duplicates a screen. For localhost screens, duplication copies the\n  iframe frame and URL metadata; change the copy's path/query for a new state.\n- Flow visualization is multiple URL states: `/checkout?step=shipping`,\n  `/checkout?step=payment`, `/checkout?step=done`, etc.\n- When the user gives a named flow or numbered screen list, preserve that order\n  and create one screen per URL/path. Shorthand like\n  `localhost:1234/onboarding/1` means\n  `http://localhost:1234/onboarding/1`.\n\n## Useful Canvas Sets\n\nTranslate the user's requested review into the smallest useful set of frames:\n\n- **Multi-step flow:** one ordered frame per route or query state, such as cart,\n  shipping, payment, and confirmation.\n- **Multiple pages:** one frame per meaningful route, such as home, pricing,\n  docs, and account settings.\n- **Responsive comparison:** repeat the same route at the requested desktop,\n  tablet, and mobile viewports so they align in one row.\n- **State review:** repeat a route for meaningful URL-addressable states such as\n  empty, loading, error, modal-open, or selected-item views.\n\nDo not expand every discovered route or every viewport unless the user asks for\nan exhaustive audit. Preserve the user's labels and sequence so the canvas reads\nlike the workflow they described.\n\n## Select And Reprompt\n\nWhen a chat message begins with `[Reprompt selection]`, the selected subtree is\na hard write boundary. The only mutation path is `propose-node-rewrite` with\nthe exact `repromptId`, target, and `baseVersionHash` captured in\n`design-reprompt-pending:<designId>:<fileId>`. Never use `apply-visual-edit`,\n`apply-source-edit`, `write-source`, `write-local-file`, `edit-design`, or any\nother content-writing action for that request. Clarifying questions are allowed,\nbut a requested change must remain a proposal.\n\nProduce one variant by default. Produce two or three only when the instruction\nasks for options. A retry includes `priorProposalId`; keep the same target and\nbase version, incorporate the feedback, and call `propose-node-rewrite` again.\nThe UI previews the returned subtree without persisting it.\n\nUse `resolve-node-rewrite` for the accept/reject lifecycle. Accept applies the\nchosen variant as one version-checked inline/Yjs content transaction so one\nundo restores the prior structure; reject clears the proposal without changing\ncontent. For conversational resolution such as \"apply the second one,\" call\n`view-screen`, read the active `design.reprompt.proposal`, and pass its\n`proposalId` plus the zero-based `variantIndex` to `resolve-node-rewrite`.\n\n## Review Quality\n\n- Treat the running app as the truth. Preserve its component language, tokens,\n  route state, and real content unless the user explicitly asks for a new visual\n  direction.\n- Use multiple URL states to reveal meaningful UX moments: empty/loading/error\n  states, focused panels, modals, responsive breakpoints, and completed flow\n  steps when those matter to the review.\n- For visual edits, compare before/after at the relevant viewport sizes and\n  check key hover/focus/scroll states when the app exposes them.\n\n## Account And Sharing Model\n\n- `/visual-edit/:id` is the dedicated local-editor surface. The one-time\n  handoff returned by `open-visual-edit` opens it with edit access without a\n  Design login. A copied or bare `/visual-edit/:id` URL is read-only because it\n  does not carry the capability.\n- The capability permits live iframe inspection and session-local edits,\n  undo/redo, **Apply design updates** through the connected host/local agent,\n  and **Copy prompt**. Those flows hand bounded source instructions back to the\n  coding agent; they do not silently persist account-owned Design data.\n- Public `/design/:id` links stay read-only without a signed-in owner/editor\n  session. Never use the local capability to upgrade that ordinary sharing\n  surface.\n- Prefer links returned by Design actions or `/_agent-native/open` deep links.\n  Do not surface URLs with `_session=` tokens or hand-build capability URLs.\n- Do not attempt account-backed write actions with the browser capability. The\n  trusted local `open-visual-edit` CLI call may register its bridge, create or\n  reuse its workspace-owned local design, and place screens without an account.\n  Direct source-file action writes, generation, saving into an account, and\n  sharing still require an authenticated action caller. If a signed-out visitor\n  wants those durable account operations, send them through the framework\n  sign-in return flow first.\n\n## Required Local Bridge\n\nThe live-edit bridge is unlocked by a shared secret (the \"bridge token\") that\nmust match on two sides: the local bridge process, and the user's connection row\nin Design (which the browser reads to authorize `/live-edit-bridge`,\n`/read-file`, `/write-file`). Get them to match by letting the\n`open-visual-edit` action mint the token, then starting the\nbridge with it. This is the only ordering that works for the remote-MCP flow \u2014\nthe bridge cannot push its own token to the server without a CLI auth token, so\nthe server mints instead and the bridge adopts.\n\nFrom the target app repo, make sure its dev server is running, then:\n\n**1. Discover routes without starting a durable bridge** (one-shot, exits):\n\n```bash\nnpx @agent-native/core@latest design connect --url http://localhost:5173 --root . --json\n```\n\nThis prints the manifest (routes + capabilities). Parse it to build\n`routeManifest` for the next step. (Skip this if the user already gave explicit\npaths/URLs to place.)\n\nInside the agent-native monorepo itself, use the workspace CLI instead of\n`npx` \u2014 `npx` installs the last published `@agent-native/core`, which will not\ncontain local changes and costs a slow install on every call:\n\n```bash\npnpm dev:cli design connect --url http://localhost:5173 --root templates/<app> --json\n```\n\n**2. Call `open-visual-edit`** (see Action Flow below) with NO `bridgeToken`.\nThe server mints one, stores it on the user's connection row, copies it into the\nplaced screens' metadata, and returns it to you as `bridgeToken`. Capture it.\n\n**3. Start the persistent bridge adopting that token** (single line; prefer the\nenv var so the secret does not appear in `ps`):\n\n```bash\nAGENT_NATIVE_BRIDGE_TOKEN=\"<bridgeToken from step 2>\" npx @agent-native/core@latest design connect --url http://localhost:5173 --root . --daemon\n```\n\n(Equivalently, pass `--bridge-token <token>`.) This starts a detached bridge on\n`http://127.0.0.1:7331`, adopts the server-minted token \u2014 so bridge and row\nagree and live-edit authorizes with no self-registration \u2014 and stays alive after\nthe command exits.\n\nFor a manual health/manifest check on the running bridge:\n\n```bash\ncurl http://127.0.0.1:7331/health\n```\n\n`/health` needs no token. The full manifest at `/manifest.json` is\npreview-token protected, so an unauthenticated `curl` of it returns\n`{\"ok\":false,\"error\":\"invalid or missing preview token\"}` \u2014 that response means\nthe bridge is up, not that it is broken.\n\nOnly use `--json` for the step-1 route probe. Never use `--json`, `--once`,\nor `--dry-run` for the durable step-3 bridge: they print the manifest and exit,\nso Design falls back to a non-editable live iframe.\n\nThe bridge listens on a single fixed port (7331) and refuses to start for a\nsecond, different app. It is detached with no log file, so if `--daemon` reports\na timeout, check for a stale process (`lsof -ti:7331`) before retrying.\n\n## Action Flow\n\nPrefer the single `open-visual-edit` action. It registers or\nrefreshes the localhost bridge connection, mints and stores the bridge token,\ncreates or reuses a Design project, places URL-backed screens, stores the active\nvisual-edit context, and navigates to overview mode in one call. This avoids\ncreating a private design under a synthetic CLI user and then handing the browser\na tokenized URL that may be shadowed by an existing session.\n\nCall it BEFORE starting the durable bridge (step 3 above): it does not contact\nthe bridge, so the bridge need not be running yet, and you need its returned\n`bridgeToken` to start the bridge with a matching secret. Omit `bridgeToken`\non the call so the server mints one.\n\n```bash\npnpm action open-visual-edit '{\n  \"title\": \"Docs homepage visual edit\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"bridgeUrl\": \"http://127.0.0.1:7331\",\n  \"rootPath\": \"/absolute/path/to/app\",\n  \"routeManifest\": { \"...\": \"from /manifest.json\" },\n  \"paths\": [\"/\", \"/pricing\", \"/checkout?step=payment\"]\n}'\n```\n\nThe action returns `designId`, `connectionId`, `bridgeToken`, `screens`,\n`urlPath`, and a credential-free `openUrl`. Its MCP App metadata separately\ncarries the one-time editor launcher so the host can redeem it without showing\nthe capability to the model or retaining it in the action link. Keep\n`designId`/`connectionId` in the chat context for follow-ups, and pass\n`bridgeToken` to `design connect` (step 3) to start the bridge. On follow-up\ncalls reusing an existing `connectionId`, the same token is returned (it is\nminted once and reused), so the running bridge stays valid.\n\n### Desktop and mobile side by side\n\nPass `viewports` to place every requested route once per viewport. Frames lay\nout as a grid: one row per route, one column per viewport. Presets are\n`desktop` (1280x900), `laptop` (1440x900), `tablet` (834x1112), and `mobile`\n(390x844); an explicit `{ \"label\": \"...\", \"width\": N, \"height\": N }` also works.\n\n```bash\npnpm action open-visual-edit '{\n  \"title\": \"Tasks responsive visual edit\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"bridgeUrl\": \"http://127.0.0.1:7331\",\n  \"rootPath\": \"/absolute/path/to/app\",\n  \"paths\": [\"/tasks\", \"/inbox\"],\n  \"viewports\": [\"desktop\", \"mobile\"]\n}'\n```\n\nPrefer this over two separate calls with `defaultWidth`/`defaultHeight`: it\nkeeps each route's viewports aligned in a row and titles them\n`Tasks \u2014 Desktop` / `Tasks \u2014 Mobile` so the canvas reads clearly. `viewports`\noverrides `defaultWidth`/`defaultHeight`. With no `routes`/`paths`, it expands\nevery route in the localhost manifest, which is usually far more frames than\nthe user wants \u2014 name the paths.\n\n### Adding more page frames later\n\nCall `open-visual-edit` again with the same `designId` and `connectionId` and\nonly the new paths. Existing frames for the same route and viewport are\nrefreshed in place rather than duplicated, and a frame the user has dragged or\nresized keeps its position unless you explicitly pass `x`/`y`/`width`/`height`.\n\n```bash\npnpm action open-visual-edit '{\n  \"designId\": \"<existing-design-id>\",\n  \"connectionId\": \"<existing-connection-id>\",\n  \"devServerUrl\": \"http://localhost:5173\",\n  \"paths\": [\"/settings\", \"/team\"],\n  \"startY\": 2200\n}'\n```\n\nDo NOT add `defaultWidth`/`defaultHeight` just to restate the default size:\nsupplying either one marks the viewport as explicitly requested, which\noverwrites frame sizes the user has already adjusted on the canvas.\n\nFor a numbered flow the user describes in chat, keep the labels and order:\n\n```bash\npnpm action open-visual-edit '{\n  \"designId\": \"<existing-design-id>\",\n  \"connectionId\": \"<existing-connection-id>\",\n  \"devServerUrl\": \"http://localhost:1234\",\n  \"routes\": [\n    { \"url\": \"localhost:1234/onboarding/1\", \"title\": \"Screen 1\" },\n    { \"url\": \"localhost:1234/onboarding/2\", \"title\": \"Screen 2\" },\n    { \"url\": \"localhost:1234/onboarding/3\", \"title\": \"Screen 3\" }\n  ]\n}'\n```\n\nIf no `routes` or `paths` are supplied, `open-visual-edit` uses every route\nfrom the localhost manifest.\n\nFallback, only when `open-visual-edit` is unavailable:\n\n1. Register or refresh the bridge with `connect-localhost`, passing the\n   `/manifest.json` result as `routeManifest` and `capabilities`.\n2. Create or reuse a Design project with `create-design`.\n3. Place URL-backed screens with `add-localhost-screens`.\n4. Navigate to overview mode with `navigate`.\n\n## Open The Design Surface\n\n- Use the `link`, `deepLink`, or MCP App embed returned by Design actions so\n  the user sees the canvas. Follow **Put Design Beside The Chat**: prefer the\n  MCP App; otherwise surface the credential-free **Open design** link.\n- Return or open the MCP App first. Its host-managed launcher carries the\n  one-time local-editor capability. The credential-free `openUrl` / action link\n  is the safe read-only fallback; never build a capability URL yourself.\n- Never return or open a hand-built `/design/:id?_session=...` URL.\n- If the user is working in VS Code, the Agent Native extension can open the\n  same URL via\n  `vscode://builder.agent-native/open?url=<encoded-design-url>`. Its\n  `Agent Native: Open Design Canvas` command also starts the local bridge and\n  opens hosted Design in the VS Code side panel.\n- After `open-visual-edit`, confirm the Design editor is in overview mode\n  with the requested URL-backed frames visible, and that they render the app\n  rather than a spinner. Do not stop at \"screens added\" when the user asked to\n  inspect or edit visually.\n\n## Applying Visual Edits Back To Source\n\nCanvas edits on a localhost screen do not write source as you make them. They\naccumulate as pending edits and the editor shows an **Apply design updates**\nbutton on the canvas. In an MCP App, clicking it hands the bounded structured\nprompt to the current host coding conversation. In an ordinary browser or\nstandalone Design page, it falls back to the local Design agent. The dropdown's\n**Copy prompt to your agent** action is the universal manual fallback.\n\n- Style, text, and drag/drop structure edits all collect into the same pending\n  batch, so the user can make several changes and apply once.\n- After the write lands, the target app's own dev-server HMR refreshes the\n  frames \u2014 no manual reload. If frames do not refresh, the write did not land;\n  say so rather than assuming.\n- The separate disk-icon \"Apply to source\" button is the deterministic\n  whole-file HTML/CSS writer. It is intentionally disabled for compiled\n  `.jsx`/`.tsx` routes \u2014 those must go through the agent path above.\n\n## Editing URLs\n\nKeep localhost screens as URL files plus `screenMetadata[fileId]`. Do not\nreplace them with copied `srcdoc` HTML unless the user explicitly asks for a\nfrozen snapshot. To change a state, rerun `open-visual-edit` with the new\npath/query or duplicate the screen and update the copy's URL metadata.\n\n## Local Files in the Code Tab\n\nOnce a connection is registered, the design editor's Code panel (left rail \u2192\nCode, or `navigate --view editor --designId <id> --leftPanel code`) shows a\nlocal-files workspace root for that connection next to the design's own files.\nTreat that root like VS Code opened at the connected project directory: file\ntree, search, open/edit, and save are backed by the real local files. It lists\nthe connected app's text/code files through the bridge\n(`list-local-files` / `read-local-file`); build output, `node_modules`,\n`.git`, and secret-looking paths (`.env*`, key files) are always excluded.\n\n- Browsing and reading need only editor access on the design plus the running\n  bridge.\n- Saving goes through `write-local-file`: the first save opens the\n  write-consent dialog (an 8-hour, folder-scoped grant) and retries\n  automatically once granted. Only text/code files are writable; secret paths\n  are always blocked.\n- If the agent calls `write-local-file` directly (not through a UI save) and it\n  fails with \"no write-consent grant\", call `request-localhost-write-consent`.\n  It opens the write-consent dialog in the editor, or reports `alreadyGranted`\n  if one already exists. Granting is human-only \u2014\n  `grant-localhost-write-consent` is hidden from agents, so you cannot approve\n  it yourself. Tell the user to click \"Allow writes\", then retry\n  `write-local-file` once. Do not keep retrying blindly: the write stays\n  blocked until the user approves.\n- Saves are conflict-checked against the file's on-disk version \u2014 a file that\n  changed since it was read fails with a version conflict instead of being\n  overwritten.\n\n## React Source Writeback\n\n- Use compiler/debug provenance (project-relative file, line, column,\n  component, and runtime multiplicity) to locate React/TSX source. Treat it as\n  evidence, not as permission for a generic AST structural transform.\n- Read `positionPrecision` on every anchor before you trust `line`/`column`.\n  `authored` means those are the real JSX coordinates. `transformed` means they\n  are the dev server's own output coordinates \u2014 React 19 removed `_debugSource`\n  and exposes only an owner stack, so this is the normal case on a Vite/Next\n  dev server, and the line will not match the file. `unknown` means no tier was\n  reported. On anything but `authored`, use the file and component to find the\n  element by its JSX shape and re-derive the line from the file you read; never\n  edit at the reported line.\n- A single-instance leaf text edit, literal `className`/`class` edit, or flat\n  literal `style={{ ... }}` property may use `apply-visual-edit` with a\n  `local-file` source and a complete `target.sourceAnchor`. Forward the\n  anchor's `positionPrecision` with it \u2014 the action refuses a `transformed`\n  anchor with `status: \"needsAgent\"` instead of seeking to a line that means\n  something else in the authored file. Preview first (omit `persist`), inspect\n  `proposedDiff`, then call with `persist: true`.\n- Reparenting, grouping/ungrouping, wrappers, dynamic expressions, repeated\n  `.map()` instances, shared components, breakpoint-scoped edits, and\n  cross-file changes go through the coding agent with complete subject/target\n  anchors and their runtime relationship. `apply-visual-edit` refuses these\n  with `status: \"needsAgent\"` rather than guessing.\n- Before each write, read the file and pass its exact `versionHash` to\n  `write-local-file` with `requireExpectedVersionHash: true`; on conflict,\n  re-read and re-plan. Keep the optimistic preview until HMR/runtime confirms\n  the result. Human write consent remains mandatory and agents cannot grant it.\n\n## Verification\n\n- `list-localhost-connections` returns the expected connection and routes.\n- The Design editor opens in overview mode.\n- Every requested screen renders the intended localhost URL, showing real app\n  content rather than an endless loading spinner.\n- The screen iframe carries a `src`, not a `srcdoc`. A localhost screen with a\n  `srcdoc` is a bug, not a slow load \u2014 check it in the browser devtools before\n  reporting the canvas as working.\n- Alt-dragging a screen copies the URL-backed frame, not an inline HTML clone.\n- A query/path edit changes only the target screen's URL metadata and iframe.\n- The Code tab shows a local-files root for the connection and opens its files.\n";

package/dist/cli/skills-content/design-visual-edit-skill.js

@@ -51,8 +51,8 @@ Prefer the MCP App surface for a connected Design plugin, then the host's
 browser/preview tool as the universal fallback. Keep the canvas beside chat
 when the host supports rearrangeable panes.
 
-Inside Design, use **Show/Hide UI** from the \`Cmd+K\` menu or press Figma's
-\`Shift+\\\` shortcut to toggle all editing chrome so only the canvas remains.
+Inside Design, use **Show/Hide UI** from the \`Cmd K\` menu or press Figma's
+\`Shift \\\` shortcut to toggle all editing chrome so only the canvas remains.
 The same action is available from Design's empty-canvas context menu.
 
 ## Core Model

package/dist/cli/visualize-repo.js

@@ -536,7 +536,7 @@ export async function runVisualizeRepo(argv) {
         bridge.result.urlFile
             ? `Open URL written to ${bridge.result.urlFile}`
             : "",
-        "Press Ctrl+C to stop.",
+        "Press Ctrl C to stop.",
     ]
         .filter(Boolean)
         .join("\n") + "\n");

package/dist/client/FeedbackButton.js

@@ -24,7 +24,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "Invalid feedback URL",
         emptyError: "Please write something first",
         sendError: "Couldn't send feedback",
-        keyboardHint: "{{shortcut}}+Enter to send",
+        keyboardHint: "{{shortcut}} Enter to send",
     },
     "zh-CN": {
         label: "反馈",
@@ -36,7 +36,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "反馈 URL 无效",
         emptyError: "请先写点内容",
         sendError: "无法发送反馈",
-        keyboardHint: "{{shortcut}}+Enter 发送",
+        keyboardHint: "{{shortcut}} Enter 发送",
     },
     "zh-TW": {
         label: "意見回饋",
@@ -48,7 +48,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "意見回饋 URL 無效",
         emptyError: "請先輸入內容",
         sendError: "無法送出意見回饋",
-        keyboardHint: "{{shortcut}}+Enter 送出",
+        keyboardHint: "{{shortcut}} Enter 送出",
     },
     "es-ES": {
         label: "Comentarios",
@@ -60,7 +60,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "URL de comentarios no válida",
         emptyError: "Escribe algo primero",
         sendError: "No se pudieron enviar los comentarios",
-        keyboardHint: "{{shortcut}}+Enter para enviar",
+        keyboardHint: "{{shortcut}} Enter para enviar",
     },
     "fr-FR": {
         label: "Retour",
@@ -72,7 +72,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "URL de retour invalide",
         emptyError: "Écrivez quelque chose d'abord",
         sendError: "Impossible d'envoyer le retour",
-        keyboardHint: "{{shortcut}}+Entrée pour envoyer",
+        keyboardHint: "{{shortcut}} Entrée pour envoyer",
     },
     "de-DE": {
         label: "Feedback",
@@ -84,7 +84,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "Ungültige Feedback-URL",
         emptyError: "Bitte zuerst etwas schreiben",
         sendError: "Feedback konnte nicht gesendet werden",
-        keyboardHint: "{{shortcut}}+Enter zum Senden",
+        keyboardHint: "{{shortcut}} Enter zum Senden",
     },
     "ja-JP": {
         label: "フィードバック",
@@ -96,7 +96,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "フィードバック URL が無効です",
         emptyError: "先に内容を入力してください",
         sendError: "送信できませんでした",
-        keyboardHint: "{{shortcut}}+Enter で送信",
+        keyboardHint: "{{shortcut}} Enter で送信",
     },
     "ko-KR": {
         label: "피드백",
@@ -108,7 +108,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "피드백 URL이 올바르지 않습니다",
         emptyError: "먼저 내용을 입력해 주세요",
         sendError: "피드백을 보낼 수 없습니다",
-        keyboardHint: "{{shortcut}}+Enter로 보내기",
+        keyboardHint: "{{shortcut}} Enter로 보내기",
     },
     "pt-BR": {
         label: "Feedback",
@@ -120,7 +120,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "URL de feedback inválida",
         emptyError: "Escreva algo primeiro",
         sendError: "Não foi possível enviar o feedback",
-        keyboardHint: "{{shortcut}}+Enter para enviar",
+        keyboardHint: "{{shortcut}} Enter para enviar",
     },
     "hi-IN": {
         label: "फ़ीडबैक",
@@ -132,7 +132,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "फ़ीडबैक URL अमान्य है",
         emptyError: "पहले कुछ लिखें",
         sendError: "फ़ीडबैक भेजा नहीं जा सका",
-        keyboardHint: "भेजने के लिए {{shortcut}}+Enter",
+        keyboardHint: "भेजने के लिए {{shortcut}} Enter",
     },
     "ar-SA": {
         label: "ملاحظات",
@@ -144,7 +144,7 @@ const FEEDBACK_COPY = {
         invalidUrl: "رابط الملاحظات غير صالح",
         emptyError: "اكتب شيئا أولا",
         sendError: "تعذر إرسال الملاحظات",
-        keyboardHint: "{{shortcut}}+Enter للإرسال",
+        keyboardHint: "{{shortcut}} Enter للإرسال",
     },
 };
 function parseTarget(url) {
@@ -373,6 +373,6 @@ function FeedbackPopoverButton({ variant = "sidebar", label, url, className, sid
                                         submit();
                                 }, placeholder: resolvedPlaceholder, rows: 5, maxLength: 10000, className: "w-full resize-none rounded-md border border-input bg-background px-3 py-2 text-sm text-foreground placeholder:text-muted-foreground focus:outline-none focus:ring-2 focus:ring-ring" }), _jsx("input", { type: "text", tabIndex: -1, autoComplete: "off", "aria-hidden": "true", value: honeypot, onChange: (e) => setHoneypot(e.target.value), style: honeypotStyle }), _jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsx("div", { className: cn("text-[11px]", error ? "text-destructive" : "text-muted-foreground/75"), children: error ??
                                             copy.keyboardHint.replace("{{shortcut}}", /Mac|iPhone|iPad/.test(navigator.userAgent)
-                                                ? "⌘"
+                                                ? "Cmd"
                                                 : "Ctrl") }), _jsx("button", { type: "submit", disabled: submitting || !value.trim(), className: "inline-flex h-8 items-center justify-center rounded-md bg-primary px-3 text-xs font-medium text-primary-foreground hover:bg-primary/90 disabled:opacity-50", children: submitting ? copy.submitting : copy.submit })] })] })) }) })] }));
 }

package/dist/client/agent-chat-adapter.js

@@ -7,6 +7,7 @@ import { captureError } from "./analytics.js";
 import { agentNativePath } from "./api-path.js";
 import { formatChatErrorText, normalizeChatError } from "./error-format.js";
 import { AgentAutoContinueSignal, INTERRUPTED_TOOL_RESULT, appendMissingFinalResponseWarning, readSSEStream, settleInterruptedToolCalls, } from "./sse-event-processor.js";
+import { isDelegatedAgentToolCall, isToolCallInFlight, } from "./tool-display.js";
 const TEXT_ATTACHMENT_CONTENT_TYPES = new Set([
     "application/json",
     "application/x-ndjson",
@@ -891,7 +892,7 @@ function describeContinuationAdvance(content, preparingToolName) {
             }
             continue;
         }
-        if (part.activity === true) {
+        if (part.activity === true && !isDelegatedAgentToolCall(part)) {
             work.add(`preparing ${part.toolName}`);
             stall ??= { kind: "preparing", toolName: part.toolName };
         }
@@ -923,9 +924,7 @@ function describeContinuationAdvance(content, preparingToolName) {
  * must not count this against the stalled/empty continuation budgets.
  */
 export function hasInFlightToolCall(content) {
-    return content.some((part) => part.type === "tool-call" &&
-        part.result === undefined &&
-        part.activity !== true);
+    return content.some((part) => isToolCallInFlight(part));
 }
 /**
  * Server truth for "does this run still look alive?", used to keep the client

package/dist/client/assistant-ui-recovery.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-type AssistantUiRecoverableErrorKind = "assistant-ui-stale-message-index" | "assistant-ui-duplicate-resource-key" | "assistant-ui-react-fiber-unmount";
+type AssistantUiRecoverableErrorKind = "assistant-ui-stale-message-index" | "assistant-ui-duplicate-resource-key" | "assistant-ui-react-fiber-unmount" | "assistant-ui-react-update-depth";
 export declare function assistantUiRecoverableRenderErrorKind(error: unknown): AssistantUiRecoverableErrorKind | null;
 export declare function isAssistantUiStaleIndexError(error: unknown): boolean;
 export declare function isAssistantUiRecoverableRenderError(error: unknown): boolean;