@agent-native/core 0.168.13 → 0.169.1

package/corpus/templates/analytics/server/plugins/agent-chat.ts

@@ -31,6 +31,7 @@ import {
   needsCorpusWorkflowForCoverageSensitiveRequest,
   needsSourceRecordBodyWorkflowForCoverageSensitiveRequest,
   registerGroundingActions,
+  stripInjectedAnalyticsGuardContext,
 } from "../lib/real-data-actions";
 
 // Which actions return real data-source evidence is a fact each action states
@@ -107,7 +108,10 @@ function hasPartialDashboardBuild(
 }
 
 export const BOUNDED_STRUCTURED_LOOKUP_GUIDANCE =
-  "BOUNDED STRUCTURED LOOKUP FAST PATH — Treat existing analytics work like an engineer treats existing code: grep before writing. For an ordinary count, aggregate, grouped metric, trend, or record lookup, first call `search-analytics-query-catalog` once with focused metric/entity terms. It searches accessible dashboard names, chart titles/descriptions/saved queries, shipped dashboard patterns, and data-dictionary definitions together. Prefer the strongest approved dictionary or saved-chart match, preserve its source and business logic, adapt only the requested filters and explicit time window, then run one bounded query against that source. A user-named source wins, but still use a matching saved definition when it supplies the source's proven query shape. If there is no useful match, inspect only the most likely source schema or ask one clarification; do not fan out across providers. Do not separately list every dashboard, call data-source status, browse the whole dictionary, load provider catalogs/corpus tools, or query a second source after a strong match. Once the query succeeds, answer immediately with its source, time window, filters, row count, and only necessary caveats. Do not enrich, cross-check, retry, or add breakdowns unless the user requested them, the first query failed, or its result conflicts with the known definition. The words `all`, `total`, or `exact` in a structured aggregate do not by themselves make it a corpus investigation. Never repeat an identical invalid or failed tool call; correct its arguments once or surface the error. This does not waive the real-data requirement: never answer from a guess, stale value, or unverified result. ";
+  "BOUNDED STRUCTURED LOOKUP FAST PATH — Treat existing analytics work like an engineer treats existing code: grep before writing. For an ordinary count, aggregate, grouped metric, trend, or record lookup, first call `search-analytics-query-catalog` once with focused metric/entity terms. It searches accessible dashboard names, chart titles/descriptions/saved queries, shipped dashboard patterns, and data-dictionary definitions together. Prefer the strongest approved dictionary or saved-chart match, preserve its source and business logic, adapt only the requested filters and explicit time window, then run one bounded query against that source. A user-named source wins, but still use a matching saved definition when it supplies the source's proven query shape. If there is no useful match, inspect the most likely source schema before asking a clarification about business meaning; do not ask the user to provide internal dataset, table, column, or SQL identifiers. Do not fan out across providers. Do not separately list every dashboard, call data-source status, browse the whole dictionary, load provider catalogs/corpus tools, or query a second source after a strong match. Once the query succeeds, answer immediately with its source, time window, filters, row count, and only necessary caveats. Do not enrich, cross-check, retry, or add breakdowns unless the user requested them, the first query failed, or its result conflicts with the known definition. The words `all`, `total`, or `exact` in a structured aggregate do not by themselves make it a corpus investigation. Never repeat an identical invalid or failed tool call; correct its arguments once or surface the error. This does not waive the real-data requirement: never answer from a guess, stale value, or unverified result. ";
+
+export const INTERNAL_PRODUCT_USAGE_GUIDANCE =
+  "INTERNAL PRODUCT USAGE / CROSS-SOURCE ROUTING — Requests for product usage, AI credits, credit consumption, allowances, quotas, branch creation, branch creators, or user-level adoption by month are live data requests even when they say pull, export, or prepare a report. For workspace-wide internal Builder.io usage, route to Dispatch with `call-agent` and `list-dispatch-usage-metrics`; use its `monthlyByUser` and `workspaceAppCreationsByUserMonth` result. Do not ask for a user export or BigQuery schema on that path. For a named customer or account such as OCBC, preserve the customer scope and do not substitute workspace metrics. Start with `search-analytics-query-catalog`; if it has no usable definition, call `list-data-dictionary` with focused metric terms and `search-bigquery-schema` with the same terms. `search-bigquery-schema` can search the configured project without a dataset, so do not ask the user to name the dataset, table, columns, or SQL. Use the exact discovered schema in one bounded `bigquery` query, and resolve the named account identity before attributing rows to it. A table that contains limits, plans, or changelog metadata is not proof of actual consumption or creator identity. If the configured actions prove that the source or metric is unavailable, report that exact gap and the inspected coverage instead of asking the user to identify internal tables. ";
 
 export const ANALYTICS_ACCOUNT_HEALTH_GUIDANCE =
   "ACCOUNT HEALTH / CUSTOMER SCOPE GUARD — Use this for a named customer, organization ID, account-health, QBR, renewal, contract-usage, risk, or adoption request. Treat a prompt-supplied org ID as a lookup key, not proof of row ownership: resolve it against canonical account data first, carry the resolved customer name plus organization/root-organization identifiers through every usage query, and stop if results contain a different customer, mixed IDs, or an unresolved identity. Use the account-health skill. Account health is incomplete until verified usage queries cover each requested product or feature dimension separately. Before warehouse SQL, use the catalog/dictionary and schema metadata. Do not run definitions marked deprecated or retired, or use a source whose freshness cannot be verified; use the current approved definition instead. Do not call a current partial-period snapshot a completed period without proving the period/as-of row and freshness. Distinguish contract metrics from similarly named platform metrics, total distinct contracted users from DAU/WAU, and actual usage from contracted capacity. Always surface utilization at or above 100%, report adoption window and coverage, and state gaps instead of inferring them. ";
@@ -123,6 +127,7 @@ export const ANALYTICS_OBSERVABILITY_INCIDENT_GUIDANCE =
 
 export const ANALYTICS_CROSS_APP_ROUTING_GUIDANCE =
   "WORKSPACE APP ROUTING — Analytics is the sibling app for first-party product usage, app/template events, agent-native signups, conversions, and other curated product metrics. When another app delegates one of these questions with `call-agent`, answer it here using the built-in first-party source and query catalog; do not send the user back to another app or ask the caller to invent SQL. " +
+  'INTERNAL USAGE EXCEPTION — Builder.io or AI credit spend, LLM usage by workspace member or month, and workspace app or Builder branch creation history are Dispatch-owned internal metrics. For workspace-wide internal requests, call `call-agent` with agent `dispatch`, action `list-dispatch-usage-metrics`, and the exact read-only input `{ sinceDays, scope: "workspace" }` (add `userEmail` only when the user explicitly narrows the request). The result includes `monthlyByUser` and `workspaceAppCreationsByUserMonth` from the shared `token_usage` and Dispatch audit tables. Do not ask for a user export or BigQuery schema. A request scoped to a named customer or account, such as OCBC, is different: keep that customer scope and use the catalog, dictionary, configured warehouse schema, and one bounded query; do not substitute the current workspace metrics. ' +
   "WORKSPACE APP ROUTING — Brain is the sibling app that owns company knowledge and indexed Slack context. Brain is not an Analytics extension and will not appear in `list-extensions`. When the user asks about company knowledge, decisions, meeting context, or Slack messages/context such as a named channel or thread, use `call-agent` with agent `brain` and a narrow natural-language question. Use `describe-workspace-apps` only when you need to confirm the sibling capability. Do not use `list-extensions` to find Brain, and do not use `provider-api-request` to call Brain. If Brain reports an access or source error, preserve that exact error; do not infer that the Slack bot is absent from a channel or tell the user to re-invite it. Stay in Analytics for metrics and aggregates over a named provider. ";
 
 export const NON_ANALYTICS_REQUEST_GUIDANCE =
@@ -156,6 +161,7 @@ export function analyticsSourceGuidanceOpening(): string {
     // Measured in production: this ran in under 1% of data threads while the
     // equivalent instruction sat ~7000 words deep. Threads that did call it used
     // roughly a third the tool calls. Keep it first and keep it imperative.
+    "INTERNAL USAGE OVERRIDE — For workspace-wide Builder.io or AI credit spend, LLM usage by workspace member or month, or workspace app/Builder branch creation history, your FIRST tool call is `call-agent` for Dispatch with action `list-dispatch-usage-metrics`, scope `workspace`, and the requested `sinceDays`. Do not start with a user list, `search-bigquery-schema`, or a request for dataset/table/column names. If the request names a customer or account such as OCBC, preserve that customer scope and use the Analytics catalog/warehouse path instead of substituting workspace metrics. " +
     "START HERE — For an ordinary metric, cohort, list, count, or trend question, your FIRST tool call is `search-analytics-query-catalog`. For a request to replicate, clone, or adapt an existing dashboard, your FIRST tool call is `search-dashboard-references` instead; inspect the returned dashboard before choosing a source or writing anything. The catalog path is the analytics equivalent of grepping a codebase before writing new code: someone has very likely already built and saved the query you need, and its saved SQL tells you the exact source, table, and column names so you do not have to discover them. Adapt the closest saved query to the requested filters and time window, run it once, and stop. Only fall back to schema discovery or provider catalogs when the catalog search returns nothing usable — and never run more than one schema-discovery pass before querying. " +
     ANALYTICS_CROSS_APP_ROUTING_GUIDANCE +
     'ONE BOUNDED CALL — List, filter, count, and cohort questions ("which X, excluding Y") are a single query, not a loop. Express the include filter, the exclude filter, and the aggregation in one SQL statement or one `run-code` script that filters server-side. Never page through a cohort across separate tool calls and never fan out per item to apply a filter; that is what turns a ten-second answer into a twenty-minute one. ' +
@@ -163,6 +169,7 @@ export function analyticsSourceGuidanceOpening(): string {
     NON_ANALYTICS_REQUEST_GUIDANCE +
     DASHBOARD_REFERENCE_GUIDANCE +
     BOUNDED_STRUCTURED_LOOKUP_GUIDANCE +
+    INTERNAL_PRODUCT_USAGE_GUIDANCE +
     ANALYTICS_ACCOUNT_HEALTH_GUIDANCE +
     BUILT_IN_FIRST_PARTY_SOURCE_GUIDANCE +
     ANALYTICS_OBSERVABILITY_INCIDENT_GUIDANCE +
@@ -171,9 +178,18 @@ export function analyticsSourceGuidanceOpening(): string {
   );
 }
 
+const SCHEMA_DETAILS_REQUEST_PATTERN =
+  /\b(?:could you|can you|would you|please\s+(?:provide|share|send|tell)|provide|share|send(?: me)?|tell me|i need(?: you to)?|what (?:is|are)|which)\b[\s\S]{0,260}\b(?:bigquery\s+)?(?:dataset(?: name)?s?|table(?: name)?s?|column(?: name)?s?|field(?: name)?s?|schema|sql query)\b/i;
+
+function looksLikeSchemaDetailsRequest(text: string): boolean {
+  return SCHEMA_DETAILS_REQUEST_PATTERN.test(
+    stripInjectedAnalyticsGuardContext(String(text ?? "")),
+  );
+}
+
 export function analyticsDataDictionaryRoutingContext(): string {
   return `<data-dictionary-routing>
-Data-dictionary definitions are available through \`search-analytics-query-catalog\`, which combines focused dictionary lookup with a search over existing dashboard/chart SQL. Use that combined catalog search as the normal preflight for a bounded metric lookup. Call \`list-data-dictionary\` separately only when the user asks to browse definitions or filter them by department. Treat approved entries as canonical, verify unreviewed human entries when stakes are high, and treat AI-generated unapproved entries as suggestions only. After the catalog identifies one source and query shape, query that source once and stop on success. If no matching definition or chart exists, inspect only the most likely source schema or ask the user instead of fanning out across providers.
+Data-dictionary definitions are available through \`search-analytics-query-catalog\`, which combines focused dictionary lookup with a search over existing dashboard/chart SQL. Use that combined catalog search as the normal preflight for a bounded metric lookup. Call \`list-data-dictionary\` separately when the catalog has no usable match or when the user asks to browse definitions or filter them by department. Treat approved entries as canonical, verify unreviewed human entries when stakes are high, and treat AI-generated unapproved entries as suggestions only. After the catalog identifies one source and query shape, query that source once and stop on success. If no matching definition or chart exists, inspect the most likely source schema before asking a clarification about business meaning. Never ask the user to supply internal dataset, table, column, or SQL identifiers that the configured Analytics actions can discover.
 </data-dictionary-routing>`;
 }
 
@@ -782,8 +798,22 @@ export function realDataFinalGuard(
     };
   }
 
-  if (dataQueryAttempted) return null;
   const failedQueryMessage = failedDataQueryAttemptMessage(context.toolResults);
+  if (looksLikeSchemaDetailsRequest(context.text)) {
+    const failedQueryRecovery = failedQueryMessage
+      ? ` ${failedQueryMessage}`
+      : "";
+    return {
+      retryMessage:
+        "The draft asks the user to supply internal dataset, table, column, or SQL details. Do not ask the user for warehouse schema identifiers. Use the configured Analytics tools now: call `search-analytics-query-catalog`, then `list-data-dictionary` and `search-bigquery-schema` with focused metric terms when the catalog has no usable definition, and run one authoritative `bigquery` query using the exact discovered references. `search-bigquery-schema` searches the configured project without a dataset. For a named customer, verify identity and distinguish actual consumption from limits or changelog metadata. If the tools prove the source or metric is unavailable, state that exact evidence gap instead of asking the user to name internal tables." +
+        failedQueryRecovery,
+      fallbackMessage:
+        "I couldn't complete that lookup from the configured Analytics sources yet. Please retry and I'll inspect the catalog and warehouse schema directly rather than asking you to provide internal table names.",
+      maxRetries: 2,
+      expandToolSurface: true,
+    };
+  }
+  if (dataQueryAttempted) return null;
   // Whether the built-in source is worth trying is decided by tool evidence,
   // not by how the draft is worded, so it is asked once for every draft shape.
   // A source that already failed this turn is not an untried source: steering

package/corpus/templates/brain/server/lib/brain.ts

@@ -643,8 +643,33 @@ export async function ensureManualSource(title = "Manual imports") {
 }
 
 function isUniqueConflict(error: unknown): boolean {
-  const message = error instanceof Error ? error.message : String(error);
-  return /unique constraint|duplicate key|unique/i.test(message);
+  if (!error || typeof error !== "object") {
+    return /unique constraint|duplicate key|duplicate entry|unique/i.test(
+      String(error),
+    );
+  }
+
+  const candidate = error as {
+    code?: unknown;
+    message?: unknown;
+    cause?: unknown;
+  };
+  if (
+    candidate.code === "23505" ||
+    candidate.code === "SQLITE_CONSTRAINT_UNIQUE"
+  ) {
+    return true;
+  }
+  if (typeof candidate.message === "string") {
+    if (
+      /unique constraint|duplicate key|duplicate entry|unique violation|unique/i.test(
+        candidate.message,
+      )
+    ) {
+      return true;
+    }
+  }
+  return candidate.cause !== error && isUniqueConflict(candidate.cause);
 }
 
 const UPSTREAM_DELETED_POLICY_VERSION = "upstream-deleted-v1";

package/corpus/templates/clips/actions/stop-meeting-recording.ts

@@ -11,10 +11,57 @@
 import { defineAction } from "@agent-native/core";
 import { writeAppState } from "@agent-native/core/application-state";
 import { assertAccess } from "@agent-native/core/sharing";
+import shareResource from "@agent-native/core/sharing/actions/share-resource";
 import { and, eq } from "drizzle-orm";
 import { z } from "zod";
 
 import { getDb, schema } from "../server/db/index.js";
+import { normalizeOwnerEmail } from "../server/lib/recordings.js";
+
+type ShareableResourceType = "meeting" | "recording";
+
+async function sharePublicMeetingResourcesWithParticipants(args: {
+  meetingId: string;
+  recordingId: string | null;
+  recordingVisibility: string | null | undefined;
+  ownerEmail: string;
+  participants: Array<{ email: string }>;
+}) {
+  const ownerEmail = normalizeOwnerEmail(args.ownerEmail);
+  const participantEmails = [
+    ...new Set(
+      args.participants
+        .map((participant) => normalizeOwnerEmail(participant.email))
+        .filter((email) => email && email !== ownerEmail),
+    ),
+  ];
+  if (!participantEmails.length) return;
+
+  const resources: Array<{
+    resourceType: ShareableResourceType;
+    resourceId: string;
+  }> = [
+    { resourceType: "meeting", resourceId: args.meetingId },
+    ...(args.recordingId && args.recordingVisibility === "public"
+      ? [{ resourceType: "recording" as const, resourceId: args.recordingId }]
+      : []),
+  ];
+
+  await Promise.all(
+    resources.flatMap(({ resourceType, resourceId }) =>
+      participantEmails.map((principalId) =>
+        shareResource.run({
+          resourceType,
+          resourceId,
+          principalType: "user",
+          principalId,
+          role: "viewer",
+          notify: false,
+        }),
+      ),
+    ),
+  );
+}
 
 export default defineAction({
   description:
@@ -23,7 +70,7 @@ export default defineAction({
     meetingId: z.string().describe("Meeting id"),
   }),
   run: async (args) => {
-    await assertAccess("meeting", args.meetingId, "editor");
+    const access = await assertAccess("meeting", args.meetingId, "editor");
     const db = getDb();
     const nowIso = new Date().toISOString();
 
@@ -39,12 +86,24 @@ export default defineAction({
     // no way for the UI to distinguish "notes coming" from "nothing was ever
     // captured". Match finalize-meeting's own empty-transcript handling.
     let hasTranscript = false;
+    let recordingVisibility: string | null | undefined;
     if (meeting.recordingId) {
-      const [transcript] = await db
-        .select({ fullText: schema.recordingTranscripts.fullText })
-        .from(schema.recordingTranscripts)
-        .where(eq(schema.recordingTranscripts.recordingId, meeting.recordingId))
-        .limit(1);
+      const [transcriptRows, recordingRows] = await Promise.all([
+        db
+          .select({ fullText: schema.recordingTranscripts.fullText })
+          .from(schema.recordingTranscripts)
+          .where(
+            eq(schema.recordingTranscripts.recordingId, meeting.recordingId),
+          )
+          .limit(1),
+        db
+          .select({ visibility: schema.recordings.visibility })
+          .from(schema.recordings)
+          .where(eq(schema.recordings.id, meeting.recordingId))
+          .limit(1),
+      ]);
+      const transcript = transcriptRows[0];
+      recordingVisibility = recordingRows[0]?.visibility;
       hasTranscript = Boolean(transcript?.fullText?.trim());
     }
 
@@ -74,6 +133,28 @@ export default defineAction({
         requestedAt: nowIso,
       });
     }
+
+    // Public resources are intentionally link-only and therefore stay out of
+    // the signed-in Meetings/Shared lists. Calendar participants are the one
+    // known audience we can safely admit without making every public meeting
+    // discoverable, so grant them standard viewer access when the call ends.
+    if (
+      meeting.visibility === "public" &&
+      (access.role === "owner" || access.role === "admin")
+    ) {
+      const participants = await db
+        .select({ email: schema.meetingParticipants.email })
+        .from(schema.meetingParticipants)
+        .where(eq(schema.meetingParticipants.meetingId, args.meetingId));
+      await sharePublicMeetingResourcesWithParticipants({
+        meetingId: args.meetingId,
+        recordingId: meeting.recordingId ?? null,
+        recordingVisibility,
+        ownerEmail: meeting.ownerEmail,
+        participants,
+      });
+    }
+
     await writeAppState("refresh-signal", { ts: Date.now() });
 
     return { meetingId: args.meetingId, recordingId: meeting.recordingId };

package/corpus/templates/clips/app/components/library/search-bar.tsx

@@ -160,7 +160,7 @@ export function SearchBar({ className, side = "right" }: SearchBarProps) {
               </button>
             ) : (
               <span className="absolute end-1.5 top-1/2 -translate-y-1/2 inline-flex items-center gap-0.5 rounded border border-border bg-muted px-1 py-0.5 text-[10px] font-medium text-muted-foreground">
-                {shortcutLabel("cmd+k")}
+                {shortcutLabel("/")}
               </span>
             )}
           </div>

package/corpus/templates/design/.generated/bridge/editor-chrome.generated.ts

@@ -3954,9 +3954,8 @@ export const editorChromeBridgeScript: string = `"use strict";
           // Cmd from Ctrl the way isPlatformPrimaryModifier does host-side, but
           // forwarding is harmless when the host has no match for the combo.
           "f",
-          // Cmd/Ctrl+R rename / Cmd/Ctrl+Shift+R paste-to-replace (onRename /
-          // onPasteToReplace) — both live under bare primary+r.
-          "r",
+          // Cmd/Ctrl+Shift+R paste-to-replace. Bare primary+r stays native
+          // so browser refresh keeps its expected meaning.
           // Cmd/Ctrl+K — open the host command menu even while the iframe has
           // focus. DesignEditor routes this chord to openCommandMenu().
           "k"
@@ -3965,7 +3964,7 @@ export const editorChromeBridgeScript: string = `"use strict";
         // Cmd+H / Cmd+L — common OS "Hide app" / browser "focus address bar"
         // shortcuts the host has no bare-primary binding for — are left
         // alone (see useDesignHotkeys.ts: both require event.shiftKey).
-        e.shiftKey && (normalized === "h" || normalized === "l") || // Cmd/Ctrl+Alt+B detach instance / Cmd/Ctrl+Alt+K create component
+        e.shiftKey && (normalized === "h" || normalized === "l") || e.shiftKey && normalized === "r" || // Cmd/Ctrl+Alt+B detach instance / Cmd/Ctrl+Alt+K create component
         // (onDetachInstance / onCreateComponent). Gated on altKey so bare
         // Cmd+B is left alone — the host has no bare-primary binding for it.
         e.altKey && (normalized === "b" || normalized === "k") || // Ctrl+Alt+H / Ctrl+Alt+T — distribute horizontal / tidy up

package/corpus/templates/design/app/components/design/EditPanel.tsx

@@ -1,6 +1,5 @@
 import { useT } from "@agent-native/core/client/i18n";
 import type { TweakDefinition } from "@shared/api";
-import { alphaToOpacity, parseCssColor } from "@shared/color-utils";
 import {
   listInteractionStates,
   readResolvedStateStyles,
@@ -66,7 +65,6 @@ import {
   type DocumentColorSourceFile,
   extractDocumentColorPalette,
   selectionColorValues,
-  selectionDisplayHex,
 } from "./edit-panel/document-colors";
 import { EffectsProperties } from "./edit-panel/effects-properties";
 import {
@@ -1536,52 +1534,22 @@ function SelectionColorsProperties({
       {expanded ? (
         <div className="space-y-1.5">
           {colors.map((color, index) => {
-            const parsed = parseCssColor(color.value);
-            const opacity = parsed ? alphaToOpacity(parsed.a) : 100;
             return (
-              <Popover key={`${color.value}-${index}`}>
-                <PopoverTrigger asChild>
-                  <button
-                    type="button"
-                    className="flex h-6 w-full items-center gap-1.5 rounded-md border border-[var(--design-editor-control-border)] bg-[var(--design-editor-control-bg)] px-2 !text-[11px] hover:bg-[var(--design-editor-panel-raised-bg)] focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-[var(--design-editor-accent-color)]"
-                    aria-label={color.value}
-                  >
-                    <span
-                      className="size-4 shrink-0 rounded-[3px] border border-border/60"
-                      style={swatchStyle(color.value)}
-                    />
-                    <span className="min-w-0 flex-1 truncate text-left uppercase tabular-nums">
-                      {selectionDisplayHex(color.value)}
-                    </span>
-                    <span className="shrink-0 tabular-nums text-muted-foreground">
-                      {opacity}%
-                    </span>
-                  </button>
-                </PopoverTrigger>
-                <PopoverContent
-                  side="left"
-                  align="start"
-                  sideOffset={8}
-                  className="w-80 p-0"
-                >
-                  <DesignColorPicker
-                    value={cssColorOrFallback(color.value, "#000000")}
-                    // PF12: per-tick drag preview vs. one authoritative
-                    // commit on gesture-end — same split as ColorInput's
-                    // setNext (see its PF12 comment above).
-                    onChange={(value) =>
-                      onStyleChange(color.property, value, {
-                        phase: "preview",
-                      })
-                    }
-                    onChangeComplete={(value) =>
-                      onStyleChange(color.property, value, {
-                        phase: "commit",
-                      })
-                    }
-                  />
-                </PopoverContent>
-              </Popover>
+              <DesignColorPicker
+                key={`${color.value}-${index}`}
+                // guard:allow-raw-color - neutral picker fallback for an invalid stored color
+                value={cssColorOrFallback(color.value, "#000000")}
+                className="w-full"
+                // PF12: per-tick drag preview vs. one authoritative commit
+                // on gesture-end — same split as ColorInput's setNext (see
+                // its PF12 comment above).
+                onChange={(value) =>
+                  onStyleChange(color.property, value, { phase: "preview" })
+                }
+                onChangeComplete={(value) =>
+                  onStyleChange(color.property, value, { phase: "commit" })
+                }
+              />
             );
           })}
         </div>

package/corpus/templates/design/app/components/design/bridge/editor-chrome.bridge.ts

@@ -5289,9 +5289,8 @@ declare var __SELECTED_LAYER_DRAG_PRIORITY__: boolean;
           // Cmd from Ctrl the way isPlatformPrimaryModifier does host-side, but
           // forwarding is harmless when the host has no match for the combo.
           "f",
-          // Cmd/Ctrl+R rename / Cmd/Ctrl+Shift+R paste-to-replace (onRename /
-          // onPasteToReplace) — both live under bare primary+r.
-          "r",
+          // Cmd/Ctrl+Shift+R paste-to-replace. Bare primary+r stays native
+          // so browser refresh keeps its expected meaning.
           // Cmd/Ctrl+K — open the host command menu even while the iframe has
           // focus. DesignEditor routes this chord to openCommandMenu().
           "k",
@@ -5306,6 +5305,7 @@ declare var __SELECTED_LAYER_DRAG_PRIORITY__: boolean;
         // shortcuts the host has no bare-primary binding for — are left
         // alone (see useDesignHotkeys.ts: both require event.shiftKey).
         (e.shiftKey && (normalized === "h" || normalized === "l")) ||
+        (e.shiftKey && normalized === "r") ||
         // Cmd/Ctrl+Alt+B detach instance / Cmd/Ctrl+Alt+K create component
         // (onDetachInstance / onCreateComponent). Gated on altKey so bare
         // Cmd+B is left alone — the host has no bare-primary binding for it.

package/corpus/templates/design/app/components/design/keyboard-shortcuts.ts

@@ -386,13 +386,6 @@ export const DESIGN_SHORTCUTS: readonly DesignShortcutDefinition[] = [
     labelKey: "designEditor.keyboardShortcuts.commands.delete",
     handler: "onDelete",
   }),
-  shortcut({
-    id: "rename",
-    category: "edit",
-    bindings: ["$mod+r"],
-    labelKey: "designEditor.keyboardShortcuts.commands.rename",
-    handler: "onRename",
-  }),
   shortcut({
     id: "find",
     category: "edit",

package/corpus/templates/design/app/hooks/useDesignHotkeys.ts

@@ -582,13 +582,11 @@ export function handleDesignHotkey(
   if (primary && key === "d") {
     return runSharedCanvasCommand() || run(props.onDuplicate);
   }
-  // Figma's Shift+Cmd+R — "Paste to replace" — must be checked BEFORE plain
-  // Cmd+R (rename) so shift wins; onPasteToReplace absent falls through to
-  // rename so existing behavior is unaffected until the handler is wired.
+  // Keep Shift+Cmd+R available for Figma's "Paste to replace" command. Bare
+  // Cmd/Ctrl+R stays native so browser refresh keeps its expected meaning.
   if (primary && event.shiftKey && key === "r") {
     return run(props.onPasteToReplace);
   }
-  if (primary && key === "r") return run(props.onRename);
   // Cmd+Shift+H/L (hide/lock the current selection) must take precedence over
   // the unmodified/shift-only h/l transform and alignment families.
   if (primary && event.shiftKey && key === "h") {

package/corpus/templates/design/app/i18n-data.ts

@@ -119,7 +119,7 @@ const enUS = {
       color: "Color",
       align: "Align",
       lineHeight: "Line Height",
-      tracking: "Tracking",
+      tracking: "Letter spacing",
       direction: "Direction",
       justify: "Justify",
       gap: "Gap",
@@ -1789,7 +1789,7 @@ const designLocaleOverrides = {
         color: "颜色",
         align: "对齐",
         lineHeight: "行高",
-        tracking: "追踪",
+        tracking: "字间距",
         direction: "方向",
         justify: "证明合法",
         gap: "差距",
@@ -2212,7 +2212,7 @@ const designLocaleOverrides = {
         color: "Color",
         align: "Alinear",
         lineHeight: "Altura de línea",
-        tracking: "Seguimiento",
+        tracking: "Espaciado entre letras",
         direction: "Dirección",
         justify: "Justificar",
         gap: "Brecha",
@@ -2659,7 +2659,7 @@ const designLocaleOverrides = {
         color: "Couleur",
         align: "Aligner",
         lineHeight: "Hauteur de ligne",
-        tracking: "Suivi",
+        tracking: "Espacement des lettres",
         direction: "Direction",
         justify: "Justifier",
         gap: "Écart",
@@ -3111,7 +3111,7 @@ const designLocaleOverrides = {
         color: "Farbe",
         align: "Ausrichten",
         lineHeight: "Zeilenhöhe",
-        tracking: "Verfolgung",
+        tracking: "Buchstabenabstand",
         direction: "Richtung",
         justify: "Rechtfertigen",
         gap: "Lücke",
@@ -3563,7 +3563,7 @@ const designLocaleOverrides = {
         color: "色",
         align: "整列",
         lineHeight: "線の高さ",
-        tracking: "トラッキング",
+        tracking: "文字間隔",
         direction: "方向",
         justify: "正当化する",
         gap: "ギャップ",
@@ -4010,7 +4010,7 @@ const designLocaleOverrides = {
         color: "색상",
         align: "맞추다",
         lineHeight: "라인 높이",
-        tracking: "추적",
+        tracking: "자간",
         direction: "방향",
         justify: "신이 옳다고 하다",
         gap: "갭",
@@ -4449,7 +4449,7 @@ const designLocaleOverrides = {
         color: "Cor",
         align: "Alinhar",
         lineHeight: "Altura da linha",
-        tracking: "Monitorando",
+        tracking: "Espaçamento entre letras",
         direction: "Direção",
         justify: "Justificar",
         gap: "Brecha",
@@ -4896,7 +4896,7 @@ const designLocaleOverrides = {
         color: "रंग",
         align: "संरेखित",
         lineHeight: "ऊंची लाईन",
-        tracking: "ट्रैकिंग",
+        tracking: "अक्षर रिक्ति",
         direction: "दिशा",
         justify: "औचित्य",
         gap: "अंतर",
@@ -5332,7 +5332,7 @@ const designLocaleOverrides = {
         color: "لون",
         align: "محاذاة",
         lineHeight: "ارتفاع الخط",
-        tracking: "تتبع",
+        tracking: "تباعد الأحرف",
         direction: "اتجاه",
         justify: "يبرر",
         gap: "فجوة",

package/corpus/templates/design/app/pages/DesignEditor.tsx

@@ -748,6 +748,7 @@ import {
   PngCaptureError,
   type PngCaptureScope,
 } from "./design-editor/png-export-render";
+import { openPreviewUrl } from "./design-editor/preview-navigation";
 import {
   computeInteractZoomToFit,
   DEFAULT_INTERACT_DEVICE_PRESET,
@@ -13524,7 +13525,7 @@ function DesignEditor() {
     setOverviewSelectAllRequest((request) => request + 1);
   }, [activeFile, getFreshActiveContent, overviewScreens]);
 
-  // L12: shared by Cmd+R and the canvas context-menu Rename item — the single
+  // Shared by the canvas context-menu Rename item — the single
   // currently-selected layer id eligible for the layers-panel inline rename,
   // or null when zero or more-than-one layers are selected (screen/file rows
   // are excluded; renaming those is a separate flow). `__`-prefixed and file
@@ -13620,14 +13621,9 @@ function DesignEditor() {
           handleDeleteOverviewSelection(selectedLayerIdsState);
         }
       : undefined,
-    // L12: Cmd+R (and the context-menu Rename item, both routed through
-    // useDesignHotkeys' onRename) previously always renamed the DESIGN
-    // TITLE, even while a layer was selected — surprising when the user's
-    // focus is clearly on a specific layer. Route to the layer's real inline
-    // rename editor (LayersPanel ref's beginRename) when exactly one
-    // selectable (non-file-row) layer is selected; only fall back to
-    // renaming the design title when nothing (or more than one layer) is
-    // selected.
+    // The context-menu Rename item routes to the layer's real inline rename
+    // editor (LayersPanel ref's beginRename) when exactly one selectable
+    // (non-file-row) layer is selected.
     onRename: () => {
       if (!canEditDesign) return;
       const layerId = getSingleSelectedRenamableLayerId();
@@ -16017,19 +16013,24 @@ function DesignEditor() {
 
   // ── Preview, publish waitlist, gradient, interaction states ────────────────
   const handleOpenDesignPreview = useCallback(() => {
-    if (activeScreenPreviewUrl) {
-      window.open(activeScreenPreviewUrl, "_blank", "noopener,noreferrer");
-      return;
+    let previewUrl = activeScreenPreviewUrl;
+    let blobUrl: string | null = null;
+    if (!previewUrl) {
+      if (!activeContent.trim()) return;
+      blobUrl = URL.createObjectURL(
+        new Blob([fullPreviewHtml(activeContent)], { type: "text/html" }),
+      );
+      previewUrl = blobUrl;
     }
 
-    const content = activeContent.trim();
-    if (!content) return;
-
-    const blobUrl = URL.createObjectURL(
-      new Blob([fullPreviewHtml(activeContent)], { type: "text/html" }),
+    openPreviewUrl(
+      previewUrl,
+      (url, target) => window.open(url, target),
+      (url) => window.location.assign(url),
     );
-    window.open(blobUrl, "_blank", "noopener,noreferrer");
-    window.setTimeout(() => URL.revokeObjectURL(blobUrl), 60_000);
+    if (blobUrl) {
+      window.setTimeout(() => URL.revokeObjectURL(blobUrl!), 60_000);
+    }
   }, [activeContent, activeScreenPreviewUrl]);
 
   const handleJoinPublishWaitlist = useCallback(async () => {
@@ -19458,9 +19459,8 @@ function DesignEditor() {
                 (selectedScreenIds.length > 0 && files.length > 1)),
             )}
             canReorder={canEditDesign && Boolean(selectedElement)}
-            // L12: rename is only offered for a single selectable layer
-            // target (matching Cmd+R's routing) — the design-title rename
-            // flow lives elsewhere (the title control), not this menu.
+            // Rename is only offered for a single selectable layer target;
+            // design-title rename lives in the title control, not this menu.
             canRename={
               canEditDesign && Boolean(getSingleSelectedRenamableLayerId())
             }