@agent-native/core 0.161.22 → 0.162.0

package/corpus/templates/design/playwright.config.ts

@@ -22,9 +22,24 @@ const E2E_DATABASE_URL =
   process.env.E2E_DATABASE_URL ??
   `file:${path.join(import.meta.dirname, "data", "e2e.db")}`;
 const BROWSER_CHANNEL = process.env.E2E_BROWSER_CHANNEL;
+const SHOW_SECONDARY_PANELS_IN_E2E =
+  process.env.E2E_SHOW_DESIGN_SECONDARY_LEFT_PANELS !== "0";
+const SECONDARY_PANELS_ENV = SHOW_SECONDARY_PANELS_IN_E2E
+  ? "VITE_SHOW_DESIGN_SECONDARY_LEFT_PANELS=1 "
+  : "VITE_SHOW_DESIGN_SECONDARY_LEFT_PANELS=0 ";
+const ADVANCED_PANEL_SPEC_FILES = [
+  /canvas-tools\.spec\.ts$/,
+  /code-native-deep-surfaces\.spec\.ts$/,
+  /code-native-pr-surfaces\.spec\.ts$/,
+  /code-workbench-local-files\.spec\.ts$/,
+];
 
 export default defineConfig({
   testDir: "./e2e",
+  // These suites intentionally exercise panels that are not mounted in the
+  // disabled profile. Ignoring them keeps that profile focused on verifying
+  // the hidden-panel contract without failing on missing advanced controls.
+  testIgnore: SHOW_SECONDARY_PANELS_IN_E2E ? [] : ADVANCED_PANEL_SPEC_FILES,
   // The editor is heavy (iframe bridge + polling); give generous budgets.
   timeout: 90_000,
   expect: { timeout: 15_000 },
@@ -56,9 +71,11 @@ export default defineConfig({
         // generic DATABASE_URL, but set both to an absolute SQLite URL so a
         // `.env` Postgres URL or a changed command cwd can never override this
         // throwaway local db.
-        command: `APP_NAME=design DESIGN_DATABASE_URL=${JSON.stringify(E2E_DATABASE_URL)} DATABASE_URL=${JSON.stringify(E2E_DATABASE_URL)} PORT=${PORT} corepack pnpm dev`,
+        command: `APP_NAME=design ${SECONDARY_PANELS_ENV}DESIGN_DATABASE_URL=${JSON.stringify(E2E_DATABASE_URL)} DATABASE_URL=${JSON.stringify(E2E_DATABASE_URL)} PORT=${PORT} corepack pnpm dev`,
         url: BASE_URL,
-        reuseExistingServer: !process.env.CI,
+        // The panel flag is compiled into the Vite bundle. Reusing a local
+        // server can therefore run this profile with the opposite setting.
+        reuseExistingServer: false,
         // Cold Vite dep-optimization on first boot can exceed two minutes.
         timeout: 300_000,
         stdout: "ignore",

package/corpus/templates/dispatch/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/factory/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/forms/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/macros/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/mail/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/mail/app/components/layout/AppLayout.tsx

@@ -11,7 +11,10 @@ import { openCommandMenu } from "@agent-native/core/client/navigation";
 import { InvitationBanner, OrgSwitcher } from "@agent-native/core/client/org";
 import { FeedbackButton } from "@agent-native/core/client/ui";
 import { SidebarFooterActions } from "@agent-native/toolkit/app-shell";
-import { normalizeMailLabel } from "@shared/gmail-labels";
+import {
+  isInboxScopedAppLabel,
+  normalizeMailLabel,
+} from "@shared/gmail-labels";
 import type { Label } from "@shared/types";
 import {
   IconMenu2,
@@ -171,6 +174,18 @@ function labelDepth(name: string): number {
   return Math.max(0, name.split("/").length - 1);
 }
 
+// Gmail's inbox-only categories (important, social, promotions, ...) only
+// ever exist inside the inbox, so their tab stays scoped there. Regular user
+// labels are filed/archived independently of the inbox — routing them
+// through /inbox forces `in:inbox` server-side and hides every message the
+// user has archived out of the inbox while keeping the label, which reads as
+// "label is empty" even though it has mail. Route those through /all so the
+// label search is unscoped.
+export function labelTabHref(labelId: string): string {
+  const view = isInboxScopedAppLabel(labelId) ? "inbox" : "all";
+  return `/${view}?label=${encodeURIComponent(labelId)}`;
+}
+
 interface AppLayoutProps {
   children: React.ReactNode;
 }
@@ -590,7 +605,7 @@ function AppLayoutInner({ children }: AppLayoutProps) {
           pinnedId: id,
           label: aliasedName,
           fullLabel: lbl.name,
-          href: `/inbox?label=${encodeURIComponent(lbl.id)}`,
+          href: labelTabHref(lbl.id),
           isActive: activeLabel === lbl.id,
           color: lbl.color,
           type: "label",
@@ -630,7 +645,7 @@ function AppLayoutInner({ children }: AppLayoutProps) {
           id: active.id,
           label: aliasedName,
           fullLabel: active.name,
-          href: `/inbox?label=${encodeURIComponent(active.id)}`,
+          href: labelTabHref(active.id),
           isActive: true,
           color: active.color,
           type: "label",

package/corpus/templates/mail/server/handlers/google-auth.ts

@@ -58,23 +58,16 @@ function googleOAuthErrorPayload(
   message: string;
   code?: string;
   accountId?: string;
-  existingOwner?: string;
-  attemptedOwner?: string;
 } {
   if (
     error instanceof OAuthAccountOwnedByOtherUserError ||
     error?.name === "OAuthAccountOwnedByOtherUserError"
   ) {
     const account = error.accountId || "This Google account";
-    const existingOwner = error.existingOwner || undefined;
-    const attemptedOwner = error.attemptedOwner || undefined;
-    const message = `${account} is connected to another login. Sign out, then sign in with ${account}.`;
     return {
-      message,
+      message: `${account} is already connected to another login. Sign out, then sign in with the login that originally connected it.`,
       code: "account_owner_mismatch",
       accountId: error.accountId,
-      existingOwner,
-      attemptedOwner,
     };
   }
 

package/corpus/templates/plan/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/slides/.agents/skills/create-deck/SKILL.md

@@ -25,6 +25,10 @@ Context, reference deck, or source material that the app already provides.
 5. Navigate to the new deck.
 6. Call `add-slide` once per slide in slide order, waiting for each result.
 
+When speaker notes are requested, put presenter-only text in each slide's
+`notes` field on `create-deck` or `add-slide`; keep it out of the slide HTML.
+Preserve existing notes when editing or importing a source deck.
+
 When the UI has already created the empty deck, keep its id and rename it before
 adding the first slide. Call `patch-deck` with a `patch-deck-fields` operation
 whose `fields.title` is the generated title. Do not leave the pre-created deck's

package/corpus/templates/slides/.agents/skills/real-time-sync/SKILL.md

@@ -50,7 +50,7 @@ The agent modifies data in SQL, but the UI runs in the browser. SSE bridges same
 
    For list/sidebar queries, use the same pattern — pass the counter into the queryKey of every list query you want to keep fresh.
 
-4. **Fallback** polling calls `/_agent-native/poll?since=N`. It runs every 2 seconds until SSE is connected, then relaxes to 15 seconds (`SSE_FALLBACK_INTERVAL_MS`). If SSE is disabled or unavailable (e.g., edge/serverless deployments), polling continues at the 2 s cadence. Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
+4. **Fallback** polling calls `/_agent-native/poll?since=N`. It polls every 2 seconds only while an agent run is in flight; otherwise it idles at 60 seconds whether or not SSE is connected (`SSE_FALLBACK_INTERVAL_MS` and `IDLE_POLL_INTERVAL_MS`, both 60 s). A hidden tab polls no faster than every 10 seconds (`HIDDEN_POLL_INTERVAL_MS`). Polling is the universal serverless fallback: new framework writes are read from the durable `sync_events` log, while the older DB timestamp scan remains as a slower safety net for direct SQL writes and older processes.
 
 5. When the agent writes to the database, the version increments, SSE/polling detects it, and React Query refetches the affected queries.
 

package/corpus/templates/slides/actions/_await-fit-check.ts

@@ -94,15 +94,40 @@ export function formatOverflowForTool(
   deckId: string,
   m: SlideFitMeasurement,
 ): string {
+  const hasHorizontal = (m.horizontalOverflow ?? 0) > 0;
+  const hasVertical = m.verticalOverflow > 0;
+
+  // A row of side-by-side cards/columns that's too wide is a *width formula*
+  // bug (fixed px flex-basis, a wrong container-width assumption, a missing
+  // `min-width: 0`), not a density bug. The old list was vertical-only —
+  // "tighten copy" / "fewer stacked cards" — which cannot shrink a fixed
+  // column width no matter how many times it's applied, so a horizontal
+  // overflow looped forever against fixes that could never touch the actual
+  // defect (see the Oliver Robertson Slack thread this regression test
+  // reproduces).
+  const fixes = [
+    ...(hasHorizontal
+      ? [
+          `Use percentage or flex-based column widths (e.g. \`flex: 1 1 0%\` with \`min-width: 0\`, or \`width: calc((100% - <gaps>) / <count>)\` measured against this slide's own content width) instead of a fixed pixel width per column.`,
+          `Reduce the number of side-by-side columns, or wrap to a second row, if the content cannot fit at the slide's actual content width.`,
+        ]
+      : []),
+    ...(hasVertical || !hasHorizontal
+      ? [
+          `Tighten copy — shorter headings/bullets, drop low-value lines.`,
+          `Reduce vertical density — fewer stacked cards, smaller gaps, body font no smaller than 16px.`,
+          `Reduce slide padding (e.g. 40px top/bottom instead of 60-80px).`,
+          `Split across two slides only if the content cannot be compressed.`,
+        ]
+      : []),
+  ];
+
   return [
     ``,
-    `⚠ Layout overflows the canvas${m.verticalOverflow > 0 ? ` vertically by ${m.verticalOverflow}px` : ""}${(m.horizontalOverflow ?? 0) > 0 ? ` and horizontally by ${m.horizontalOverflow}px` : ""} — natural content is ${m.contentWidth ?? "unknown"}x${m.contentHeight}px inside a ${m.viewportWidth ?? "unknown"}x${m.viewportHeight}px content area.`,
+    `⚠ Layout overflows the canvas${hasVertical ? ` vertically by ${m.verticalOverflow}px` : ""}${hasHorizontal ? ` and horizontally by ${m.horizontalOverflow}px` : ""} — natural content is ${m.contentWidth ?? "unknown"}x${m.contentHeight}px inside a ${m.viewportWidth ?? "unknown"}x${m.viewportHeight}px content area.`,
     ``,
     `Make one structural repair now with \`update-slide --deckId ${deckId} --slideId ${m.slideId}\`. Prefer small surgical patches (--find / --replace) over a full rewrite:`,
-    `1. Tighten copy — shorter headings/bullets, drop low-value lines.`,
-    `2. Reduce vertical density — fewer stacked cards, smaller gaps, body font no smaller than 16px.`,
-    `3. Reduce slide padding (e.g. 40px top/bottom instead of 60-80px).`,
-    `4. Split across two slides only if the content cannot be compressed.`,
+    ...fixes.map((fix, index) => `${index + 1}. ${fix}`),
     ``,
     `Do **not** use zoom, \`transform: scale\`, clipping, \`overflow: scroll\`, or a smaller-than-16px body font. Preserve existing absolute text boxes and fix the normal-flow HTML. Verify the action result and then use \`view-screen\`; do not spin through another repair loop.`,
   ].join("\n");

package/corpus/templates/slides/actions/add-slide.ts

@@ -97,6 +97,7 @@ export default defineAction({
     "call it once per slide in slide order and wait for each result before adding the next slide. " +
     "Avoid parallel add-slide calls for the same deck; sequential writes keep the editor and agent connection stable. " +
     "If the deck has a designSystemId, first use `get-design-system` and apply its `agentContext` tokens/docs; do not use generic slide styling from the id alone. " +
+    "Pass presenter-only speaker notes in `notes`; keep them out of the slide HTML. " +
     "Returns the new slide ID, 1-based slideNumber, and updated slide count.",
   schema: z.object({
     deckId: z.string().describe("Target deck ID"),
@@ -120,7 +121,10 @@ export default defineAction({
       ])
       .optional()
       .describe("Layout type hint"),
-    notes: z.string().optional().describe("Speaker notes for this slide"),
+    notes: z
+      .string()
+      .optional()
+      .describe("Optional presenter-only speaker notes; keep them out of HTML"),
     position: z
       .preprocess((value) => {
         if (typeof value !== "string") return value;
@@ -299,7 +303,7 @@ export default defineAction({
         creativeContextReuseLabels: slideReuseLabels,
       };
       if (layout) newSlide.layout = layout;
-      if (notes) newSlide.notes = notes;
+      if (notes !== undefined) newSlide.notes = notes;
 
       const insertIndex =
         typeof position === "number"

package/corpus/templates/slides/actions/create-deck.ts

@@ -96,12 +96,13 @@ export default defineAction({
     "Create a new deck, optionally already populated with slides, or atomically replace all slides in an existing deck. " +
     "For short AI-generated decks in MCP app hosts, pass all generated slides in this call so the real deck editor opens inline already populated. " +
     "For longer decks or live in-app generation, create the deck with slides: [] and then use add-slide sequentially so progress appears live. " +
+    "Pass presenter-only speaker notes in each slide's `notes` field; keep them out of slide HTML. " +
     "Pass deckId to replace an existing deck. " +
     "Returns the deck id, title, and slide count.",
   schema: z.object({
     title: z.string().describe("Deck title"),
     slides: SlidesSchema.describe(
-      "Array of slides with id, content (HTML), and optional layout",
+      "Array of slides with id, content (HTML), optional layout, and presenter-only notes",
     ),
     deckId: z
       .string()

package/corpus/templates/slides/app/lib/create-deck-generation.ts

@@ -376,6 +376,7 @@ export async function startDeckGeneration({
         `After reading any requested or attached reference material, but before adding the first slide, choose a concise, specific deck title from the user's request and source material. Never use the deck id, run id, file id, uploaded filename, or another opaque alphanumeric token as the title. Do not reuse a generic placeholder like "Untitled scene" when the content or reference context gives you a better title. Call \`patch-deck\` with \`deckId: \"${deckId}\"\` and \`operations: [{ \"op\": \"patch-deck-fields\", \"fields\": { \"title\": \"<generated title>\" } }]\`. Include only \`title\` in \`fields\`; omit all other optional fields. Never leave a generated deck named \"Untitled Deck\" or another placeholder.`,
         "If the user asks for a standalone visual, diagram, hero, one-pager, poster, or a couple of visuals, create only the requested one/few polished visual slides. Do not pad the result into a full presentation.",
         "If the request is for a presentation or deck and does not explicitly ask for one slide, infer a coherent multi-slide outline from the scope and keep adding slides until that outline is complete. Do not stop after the first slide just because the prompt has few explicit instructions.",
+        "When the user requests speaker notes, write presenter-only text into each slide's `notes` field and keep it out of the slide HTML.",
         `Add slides ONE AT A TIME using the \`add-slide\` action with --deckId=${deckId}. Wait for each \`add-slide\` result before calling it again; do not batch or parallelize slide writes.`,
         "Use create-deck and add-slide for this already-created deck. Do not call the legacy generate-slides-ai action: it returns Markdown drafts rather than persisted rendered slide HTML. Treat each successful add-slide result as confirmation to continue with the next planned slide.",
       ].join("\n");

package/corpus/templates/slides/app/pages/DeckEditor.tsx

@@ -174,6 +174,27 @@ function MissingDeckAccessPane({
   );
 }
 
+// The Cmd/Ctrl+C-then-V slide-duplicate shortcut can only tell "this key
+// event targets the slide rail/canvas" apart from "focus fell back to
+// nothing because a panel/dialog elsewhere just closed" by checking a
+// deny-list of known text surfaces — and that list can never be complete
+// (see the Andrew Rohman Slack thread this guards against: a slide copied
+// once early in a session kept silently re-duplicating on unrelated later
+// pastes). Bounding how long a copy stays "armed" turns a missed deny-list
+// entry from a silent, indefinite landmine into, at worst, a narrow window
+// that still covers the real copy-then-paste gesture.
+export const SLIDE_CLIPBOARD_ARM_WINDOW_MS = 30_000;
+
+/** True when a Cmd/Ctrl+V should still be treated as "paste the slide that
+ * was just copied" rather than unrelated clipboard activity landing outside
+ * every recognized text field. */
+export function isSlideClipboardStillArmed(
+  armedAt: number | null,
+  now: number = Date.now(),
+): boolean {
+  return armedAt !== null && now - armedAt <= SLIDE_CLIPBOARD_ARM_WINDOW_MS;
+}
+
 export default function DeckEditor() {
   const t = useT();
   const { id } = useParams<{ id: string }>();
@@ -861,6 +882,11 @@ export default function DeckEditor() {
   // (rather than just an id) so paste still works after Cut has already
   // removed the original slide from the deck.
   const slideClipboardRef = useRef<Slide | null>(null);
+  // Only gates the ambient document-level Cmd/Ctrl+V shortcut below — the
+  // rail's right-click "Paste" menu item is an explicit click with no
+  // ambiguity risk, so it keeps working off `hasSlideClipboard` alone however
+  // long ago the copy happened.
+  const slideClipboardArmedAtRef = useRef<number | null>(null);
   const [hasSlideClipboard, setHasSlideClipboard] = useState(false);
 
   const copySlide = useCallback(
@@ -868,6 +894,7 @@ export default function DeckEditor() {
       const slide = deck?.slides.find((s) => s.id === slideId);
       if (!slide) return;
       slideClipboardRef.current = slide;
+      slideClipboardArmedAtRef.current = Date.now();
       setHasSlideClipboard(true);
     },
     [deck],
@@ -879,6 +906,7 @@ export default function DeckEditor() {
       const slide = deck.slides.find((s) => s.id === slideId);
       if (!slide) return;
       slideClipboardRef.current = slide;
+      slideClipboardArmedAtRef.current = Date.now();
       setHasSlideClipboard(true);
       const idx = deck.slides.findIndex((s) => s.id === slideId);
       const nextSlide = deck.slides[idx + 1] || deck.slides[idx - 1];
@@ -1029,7 +1057,12 @@ export default function DeckEditor() {
         return;
       }
 
-      if (!hasSlideClipboard || !activeSlideId) return;
+      if (
+        !hasSlideClipboard ||
+        !activeSlideId ||
+        !isSlideClipboardStillArmed(slideClipboardArmedAtRef.current)
+      )
+        return;
       e.preventDefault();
       pasteSlideAfter(activeSlideId);
     };

package/corpus/templates/slides/app/routes/p.$id.tsx

@@ -81,7 +81,9 @@ function toSharedDeck(row: {
   return {
     title: row.title || data.title || "Untitled",
     slides: Array.isArray(data.slides)
-      ? data.slides.map((slide, index) => toSharedDeckSlide(slide, index))
+      ? data.slides.map((slide, index) =>
+          toSharedDeckSlide(slide, index, { includeNotes: false }),
+        )
       : [],
     aspectRatio: data.aspectRatio,
   };

package/corpus/templates/slides/changelog/2026-08-18-generated-slides-preserve-speaker-notes.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-08-18
+---
+
+Generated slides now preserve requested speaker notes.

package/corpus/templates/slides/server/handlers/assets.ts

@@ -1,7 +1,6 @@
 import path from "path";
 
 import { uploadFile } from "@agent-native/core/file-upload";
-import { getSession } from "@agent-native/core/server";
 import { runWithRequestContext } from "@agent-native/core/server";
 import { and, desc, eq } from "drizzle-orm";
 import {
@@ -13,6 +12,12 @@ import {
 import { nanoid } from "nanoid";
 
 import { getDb, schema } from "../db/index.js";
+import {
+  resolveSlidesRequestAuth,
+  type SlidesRequestAuthContext,
+} from "./request-auth-context.js";
+
+type AuthedSlidesSession = SlidesRequestAuthContext & { email: string };
 
 export const MAX_ASSET_FILE_SIZE = 10 * 1024 * 1024; // 10 MB
 
@@ -32,13 +37,19 @@ export interface ListedUploadedAsset {
   createdAt: string;
 }
 
-async function requireSession(event: Parameters<typeof getSession>[0]) {
-  const session = await getSession(event).catch(() => null);
-  if (!session?.email) {
+async function requireSession(
+  event: Parameters<typeof resolveSlidesRequestAuth>[0],
+): Promise<{ session: AuthedSlidesSession | null; error: string | null }> {
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { session: null, error: auth.error };
+  }
+  if (!auth.context.email) {
     setResponseStatus(event, 401);
-    return null;
+    return { session: null, error: "Unauthorized" };
   }
-  return session;
+  return { session: auth.context as AuthedSlidesSession, error: null };
 }
 
 function isRasterAssetExtension(ext: string): boolean {
@@ -180,9 +191,9 @@ export async function uploadImageAsset(args: {
  * framework provider chain, return its hosted URL.
  */
 export const uploadAsset = defineEventHandler(async (event) => {
-  const session = await requireSession(event);
+  const { session, error: authError } = await requireSession(event);
   if (!session) {
-    return { error: "Unauthorized" };
+    return { error: authError };
   }
 
   const parts = await readMultipartFormData(event);
@@ -217,9 +228,9 @@ export const uploadAsset = defineEventHandler(async (event) => {
  * GET /api/assets — list assets this user has uploaded, most recent first.
  */
 export const listAssets = defineEventHandler(async (event) => {
-  const session = await requireSession(event);
+  const { session, error } = await requireSession(event);
   if (!session) {
-    return { error: "Unauthorized" };
+    return { error };
   }
   const db = getDb();
   const rows: ListedUploadedAsset[] = await db
@@ -244,9 +255,9 @@ export const listAssets = defineEventHandler(async (event) => {
  * that provider's own API — but it no longer appears in this app's library.
  */
 export const deleteAsset = defineEventHandler(async (event) => {
-  const session = await requireSession(event);
+  const { session, error } = await requireSession(event);
   if (!session) {
-    return { error: "Unauthorized" };
+    return { error };
   }
   const id = getRouterParam(event, "id");
   if (!id) {

package/corpus/templates/slides/server/handlers/design-system-decode-job-status.ts

@@ -1,11 +1,13 @@
 import {
   FeatureNotConfiguredError,
   fetchBuilderDesignSystemDecodeJobStatus,
-  getSession,
 } from "@agent-native/core/server";
 import { defineEventHandler, getQuery, setResponseStatus } from "h3";
 
-import { withSlidesRequestContext } from "./request-auth-context.js";
+import {
+  resolveSlidesRequestAuth,
+  withSlidesRequestContext,
+} from "./request-auth-context.js";
 
 /**
  * Reads a Builder design-system decode job's status. The UI polls this after
@@ -13,8 +15,13 @@ import { withSlidesRequestContext } from "./request-auth-context.js";
  * job leaves `pending` and exposes a `branchUrl` (or reports an `error`).
  */
 export const designSystemDecodeJobStatus = defineEventHandler(async (event) => {
-  const session = await getSession(event).catch(() => null);
-  if (!session?.email) {
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { error: auth.error };
+  }
+  const session = auth.context;
+  if (!session.email) {
     setResponseStatus(event, 401);
     return { error: "Unauthorized" };
   }
@@ -26,8 +33,10 @@ export const designSystemDecodeJobStatus = defineEventHandler(async (event) => {
   }
 
   try {
-    return await withSlidesRequestContext(event, () =>
-      fetchBuilderDesignSystemDecodeJobStatus(jobId.trim()),
+    return await withSlidesRequestContext(
+      event,
+      () => fetchBuilderDesignSystemDecodeJobStatus(jobId.trim()),
+      session,
     );
   } catch (err) {
     if (err instanceof FeatureNotConfiguredError) {

package/corpus/templates/slides/server/handlers/design-system-upload-start.ts

@@ -1,11 +1,13 @@
 import {
   FeatureNotConfiguredError,
-  getSession,
   startBuilderDesignSystemUpload,
 } from "@agent-native/core/server";
 import { defineEventHandler, readBody, setResponseStatus } from "h3";
 
-import { withSlidesRequestContext } from "./request-auth-context.js";
+import {
+  resolveSlidesRequestAuth,
+  withSlidesRequestContext,
+} from "./request-auth-context.js";
 
 const MAX_FIG_BYTES = 512 * 1024 * 1024;
 
@@ -21,8 +23,13 @@ interface AttachmentInput {
  * server; the file bytes never do.
  */
 export const designSystemUploadStart = defineEventHandler(async (event) => {
-  const session = await getSession(event).catch(() => null);
-  if (!session?.email) {
+  const auth = await resolveSlidesRequestAuth(event);
+  if (!auth.ok) {
+    setResponseStatus(event, auth.statusCode);
+    return { error: auth.error };
+  }
+  const session = auth.context;
+  if (!session.email) {
     setResponseStatus(event, 401);
     return { error: "Unauthorized" };
   }
@@ -66,8 +73,10 @@ export const designSystemUploadStart = defineEventHandler(async (event) => {
   }
 
   try {
-    const uploads = await withSlidesRequestContext(event, () =>
-      startBuilderDesignSystemUpload(attachments),
+    const uploads = await withSlidesRequestContext(
+      event,
+      () => startBuilderDesignSystemUpload(attachments),
+      session,
     );
     return { uploads };
   } catch (err) {