@agent-native/core 0.80.2 → 0.80.5

package/corpus/core/src/cli/skills.ts

@@ -398,8 +398,8 @@ iframe-backed screens on the infinite canvas.
 - Each screen is a URL-backed iframe, not copied HTML.
 - Each screen keeps URL metadata: \`connectionId\`, \`routeId\`, \`path\`,
   \`url\`, \`bridgeUrl\`, title, and viewport size.
-- Start in Design's screen overview mode. In overview, screens are static like
-  Figma frames; full-screen focus is for scrolling and app interaction.
+- Start in Design's screen overview mode. In overview, screens are static
+  design frames; full-screen focus is for scrolling and app interaction.
 - Alt-drag duplicates a screen. For localhost screens, duplication copies the
   iframe frame and URL metadata; change the copy's path/query for a new state.
 - Flow visualization is multiple URL states: \`/checkout?step=shipping\`,
@@ -466,6 +466,21 @@ route from the latest localhost manifest.
 pnpm action navigate --view editor --designId "<design-id>" --editorView overview
 \`\`\`
 
+## Open The Design Surface
+
+- Use the \`link\`, \`deepLink\`, or MCP App embed returned by Design actions so
+  the user sees the canvas. In Codex Desktop or VS Code, prefer opening that
+  Design URL in the available preview/webview panel; otherwise surface the
+  "Open design" link.
+- If the user is working in VS Code, the Agent Native extension can open the
+  same URL via
+  \`vscode://builder.agent-native/open?url=<encoded-design-url>\`. Its
+  \`Agent Native: Open Design Canvas\` command also starts the local bridge and
+  opens hosted Design in the VS Code side panel.
+- After \`add-localhost-screens\`, confirm the Design editor is in overview mode
+  with the requested URL-backed frames visible. Do not stop at "screens added"
+  when the user asked to inspect or edit visually.
+
 ## Editing URLs
 
 Keep localhost screens as URL files plus \`screenMetadata[fileId]\`. Do not
@@ -930,7 +945,7 @@ and move any frame whose label, connector, or annotation crosses another frame.
 When in doubt, use larger values — the canvas auto-zooms to fit everything.
 
 **Canvas annotations are designer notes on the artboard.** When a top canvas is
-present, sprinkle Figma-style notes near the frames they explain: a short
+present, sprinkle design-review notes near the frames they explain: a short
 heading, supporting text, and bullets — plain text layers, never bordered or
 shadowed cards, and never a box around a frame. The renderer spaces notes away
 from frames, so place each note by the frame it describes. Use an arrow only to
@@ -1405,8 +1420,10 @@ The local-files contract:
   \`id\` and \`label\`; and \`Code\` / \`AnnotatedCode\` / \`Diff\` are whitespace-sensitive
   — encode multiline code as JSON string attributes such as \`code={"const x =\\n  y"}\`
   (a static template literal is accepted only when it has no \`\${...}\`
-  interpolation). \`plan local check\` validates these required fields against the
-  renderer schema.
+  interpolation). \`plan local check\` is a quick OFFLINE lint (a subset of the
+  renderer schema), so a green \`check\` does not guarantee the plan renders;
+  \`plan local verify\` is the authoritative validation against the real renderer
+  schema.
 - **Write a local MDX folder.** Use \`plans/<slug>/\` to check the artifact into the
   repo, or a repo-ignored/temporary folder such as \`.agent-native/plans/<slug>/\`
   or \`/tmp/agent-native-plans/<slug>/\` when it should not be checked in. The
@@ -1431,9 +1448,16 @@ The local-files contract:
   running local Plan app.
 - **Headless verify.** Run
   \`npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>\`.
-  It starts the bridge, checks the private-network preflight and JSON payload,
-  prints diagnostics, and exits. If the browser hangs on "Loading plan", fetch the
-  \`bridgeUrl\` from the verify/serve JSON to read the concrete validation error.
+  It starts the bridge, checks the private-network preflight and JSON payload, AND
+  validates the content against the real renderer schema via the Plan app's
+  \`validate-local-plan-source\` action. A non-\`ok\` result with
+  \`validation.valid: false\` lists the renderer's exact schema-path issues (e.g.
+  \`blocks[1].data.tabs[0]...\`); fix those before handing off. If \`validation.ran\`
+  is \`false\`, the Plan app did not expose the validate endpoint (older/unreachable
+  deploy) — point \`--app-url\` at a current Plan app (e.g. a local
+  \`http://localhost:8096\`) for the authoritative check. If the browser hangs on
+  "Loading plan", fetch the \`bridgeUrl\` from the verify/serve JSON to read the
+  concrete validation error.
 - **Never call hosted tools for that plan/recap.** Do not call
   \`create-visual-plan\`, \`create-ui-plan\`, \`create-prototype-plan\`,
   \`create-plan-design\`, \`create-visual-recap\`, \`create-visual-questions\`,

package/corpus/core/src/client/AssistantChat.tsx

@@ -1191,9 +1191,19 @@ const AssistantChatInner = forwardRef<
       setComposerContextItems((previous) => {
         const next = updater(previous);
         composerContextItemsRef.current = next;
-        publishComposerContextItems(next);
         return next;
       });
+      // Publish outside the setState updater. `publishComposerContextItems`
+      // mutates the module-level context store and synchronously dispatches a
+      // window event, which would re-enter React (notifying
+      // `useSyncExternalStore` subscribers like `useAgentChatContext`) while the
+      // updater runs during the render phase. React 19 then throws "Cannot
+      // update a component while rendering a different component". Queueing a
+      // microtask runs the publish after the commit; it reads the freshly
+      // updated `composerContextItemsRef`, not React state.
+      queueMicrotask(() => {
+        publishComposerContextItems(composerContextItemsRef.current);
+      });
     },
     [publishComposerContextItems],
   );

package/corpus/core/src/client/agent-chat.ts

@@ -188,6 +188,7 @@ let agentChatContextState: AgentChatContextState = {
   updatedAt: 0,
 };
 const agentChatContextListeners = new Set<() => void>();
+let agentChatContextNotifyQueued = false;
 
 /**
  * Listen for chatRunning messages from the frame (postMessage)
@@ -345,7 +346,17 @@ function withReplacedAgentChatContextItem(
 }
 
 function notifyAgentChatContextListeners(): void {
-  for (const listener of agentChatContextListeners) listener();
+  if (agentChatContextNotifyQueued) return;
+  agentChatContextNotifyQueued = true;
+  const notify = () => {
+    agentChatContextNotifyQueued = false;
+    for (const listener of Array.from(agentChatContextListeners)) listener();
+  };
+  if (typeof queueMicrotask === "function") {
+    queueMicrotask(notify);
+  } else {
+    setTimeout(notify, 0);
+  }
 }
 
 function persistAgentChatContextState(state: AgentChatContextState): void {

package/corpus/core/src/client/composer/PromptComposer.tsx

@@ -30,7 +30,12 @@ import {
 
 import type { ReasoningEffort } from "../../shared/reasoning-effort.js";
 import { AssistantUiStaleIndexErrorBoundary } from "../assistant-ui-recovery.js";
+import { BuilderSetupCard } from "../chat/run-recovery.js";
 import { TooltipProvider } from "../components/ui/tooltip.js";
+import {
+  fetchAgentEngineConfiguredState,
+  useAgentEngineConfigured,
+} from "../use-agent-engine-configured.js";
 import { useChatModels, type EngineModelGroup } from "../use-chat-models.js";
 import { cn } from "../utils.js";
 import { AgentComposerFrame } from "./AgentComposerFrame.js";
@@ -57,6 +62,7 @@ import type {
 } from "./types.js";
 
 const MAX_INLINE_TEXT_FILE_CHARS = 60_000;
+const SUBMIT_ENGINE_STATUS_TIMEOUT_MS = 1000;
 
 /**
  * Files the user attached via the "+" button in PromptComposer. The host owns
@@ -498,6 +504,41 @@ function PromptComposerInner({
   const handleEffortChange = showModelSelector
     ? (onEffortChange ?? models.onEffortChange)
     : undefined;
+  const agentEngineConfigured = useAgentEngineConfigured(
+    resolvedModelStatusChecksEnabled,
+  );
+  const missingApiKey = agentEngineConfigured.missing;
+  const [missingKeyBouncePulse, setMissingKeyBouncePulse] = useState(0);
+  const bounceMissingKeySetup = useCallback(() => {
+    setMissingKeyBouncePulse((pulse) => pulse + 1);
+    if (typeof window !== "undefined") {
+      window.dispatchEvent(new Event("agent-chat:missing-api-key"));
+    }
+  }, []);
+  const handleBuilderConnected = useCallback(() => {
+    if (typeof window !== "undefined") {
+      window.dispatchEvent(new Event("agent-engine:configured-changed"));
+    }
+  }, []);
+  const ensureAgentEngineReadyForSubmit = useCallback(async () => {
+    if (!resolvedModelStatusChecksEnabled) return true;
+    const state =
+      agentEngineConfigured.state === "missing"
+        ? "missing"
+        : await fetchAgentEngineConfiguredState(
+            resolvedModelStatusChecksEnabled,
+            {
+              timeoutMs: SUBMIT_ENGINE_STATUS_TIMEOUT_MS,
+            },
+          );
+    if (state !== "missing") return true;
+    bounceMissingKeySetup();
+    return false;
+  }, [
+    agentEngineConfigured.state,
+    bounceMissingKeySetup,
+    resolvedModelStatusChecksEnabled,
+  ]);
 
   useEffect(() => {
     if (!autoFocus) return;
@@ -539,48 +580,66 @@ function PromptComposerInner({
   );
 
   return (
-    <AgentComposerFrame
-      className={cn("text-start", className)}
-      rootClassName={rootClassName}
-      style={style}
-      rootStyle={rootStyle}
-      layoutVariant={layoutVariant}
-    >
-      <PromptAttachmentStrip />
-      <TiptapComposer
-        focusRef={handleRef}
-        disabled={disabled}
-        placeholder={placeholder}
-        initialText={initialText}
-        initialTextKey={initialTextKey}
-        onSubmit={handleSubmit}
-        clearOnSubmit={!preserveDraftOnSubmit}
-        plusMenuMode={
-          plusMenuMode ?? (attachmentsEnabled ? "upload-only" : "hidden")
-        }
-        attachButton={attachButton}
-        modeControl={modeControl}
-        toolbarSlot={toolbarSlot}
-        actionButton={actionButton}
-        extraActionButton={extraActionButton}
+    <>
+      {missingApiKey ? (
+        <BuilderSetupCard
+          onConnected={handleBuilderConnected}
+          bouncePulse={missingKeyBouncePulse}
+          fullWidth
+          layout="sidebar"
+        />
+      ) : null}
+      <AgentComposerFrame
+        className={cn(
+          "text-start",
+          missingApiKey && "cursor-pointer",
+          className,
+        )}
+        rootClassName={rootClassName}
+        style={style}
+        rootStyle={rootStyle}
         layoutVariant={layoutVariant}
-        slashCommands={slashCommands}
-        slashSkills={slashSkills}
-        includeDefaultSlashCommands={includeDefaultSlashCommands}
-        includeDefaultSlashSkills={includeDefaultSlashSkills}
-        onSlashCommand={onSlashCommand}
-        voiceEnabled={voiceEnabled}
-        onTextChange={onTextChange}
-        draftScope={draftScope}
-        selectedModel={composerModel}
-        selectedEffort={composerEffort}
-        availableModels={composerModelGroups}
-        onModelChange={handleModelChange}
-        onEffortChange={handleEffortChange}
-        providerConnectStatusEnabled={resolvedModelStatusChecksEnabled}
-        onConnectProvider={onConnectProvider}
-      />
-    </AgentComposerFrame>
+        onClick={missingApiKey ? bounceMissingKeySetup : undefined}
+      >
+        <PromptAttachmentStrip />
+        <TiptapComposer
+          focusRef={handleRef}
+          disabled={disabled || missingApiKey}
+          placeholder={
+            missingApiKey ? "Connect AI above to continue..." : placeholder
+          }
+          initialText={initialText}
+          initialTextKey={initialTextKey}
+          onSubmit={handleSubmit}
+          onBeforeSubmit={ensureAgentEngineReadyForSubmit}
+          clearOnSubmit={!preserveDraftOnSubmit}
+          plusMenuMode={
+            plusMenuMode ?? (attachmentsEnabled ? "upload-only" : "hidden")
+          }
+          attachButton={attachButton}
+          modeControl={modeControl}
+          toolbarSlot={toolbarSlot}
+          actionButton={actionButton}
+          extraActionButton={extraActionButton}
+          layoutVariant={layoutVariant}
+          slashCommands={slashCommands}
+          slashSkills={slashSkills}
+          includeDefaultSlashCommands={includeDefaultSlashCommands}
+          includeDefaultSlashSkills={includeDefaultSlashSkills}
+          onSlashCommand={onSlashCommand}
+          voiceEnabled={voiceEnabled}
+          onTextChange={onTextChange}
+          draftScope={draftScope}
+          selectedModel={composerModel}
+          selectedEffort={composerEffort}
+          availableModels={composerModelGroups}
+          onModelChange={handleModelChange}
+          onEffortChange={handleEffortChange}
+          providerConnectStatusEnabled={resolvedModelStatusChecksEnabled}
+          onConnectProvider={onConnectProvider}
+        />
+      </AgentComposerFrame>
+    </>
   );
 }
 

package/corpus/core/src/client/org/OrgSwitcher.tsx

@@ -368,7 +368,7 @@ export function OrgSwitcher({
       <PopoverPrimitive.Trigger asChild>
         <button
           type="button"
-          className={`flex w-full items-center gap-2 rounded-md border border-border/50 px-2.5 py-1.5 text-xs font-medium text-muted-foreground hover:bg-accent/50 hover:text-foreground focus:outline-none focus-visible:ring-2 focus-visible:ring-ring cursor-pointer ${className ?? ""}`}
+          className={`flex w-full items-center gap-2 rounded-md border border-border/70 px-2.5 py-1.5 text-xs font-medium text-muted-foreground hover:bg-accent/50 hover:text-foreground focus:outline-none focus-visible:ring-2 focus-visible:ring-ring cursor-pointer ${className ?? ""}`}
         >
           <ButtonIcon className="h-3.5 w-3.5 shrink-0" />
           <span className="truncate flex-1 text-start">{buttonLabel}</span>

package/corpus/core/src/client/sharing/ShareButton.tsx

@@ -47,7 +47,7 @@ export interface ShareButtonProps {
   variant?: "compact" | "label";
   /** Optional trigger style. Defaults to the Google-Docs-style "Share" label. */
   trigger?: "label" | "icon";
-  /** Hide the visibility/share glyph in the label trigger. */
+  /** @deprecated Label triggers no longer render a visibility/share glyph. */
   hideTriggerIcon?: boolean;
   /** Optional className applied to the trigger button. */
   triggerClassName?: string;
@@ -298,23 +298,8 @@ export function ShareButton(props: ShareButtonProps) {
     });
   };
 
-  // The default trigger says "Share" — the icon reflects the resource's
-  // current visibility (lock / building / globe), matching Google Docs.
-  // While the query is loading and we don't know the visibility yet,
-  // render a skeleton placeholder in the icon slot instead of guessing.
+  // The default trigger stays text-only; the icon trigger keeps the share glyph.
   const iconOnly = props.trigger === "icon";
-  const loaded = sharesQuery.data !== undefined;
-  const serverVisibility =
-    (sharesQuery.data?.visibility as Visibility | null) ?? "private";
-  const currentVisibility = pendingVisibility ?? serverVisibility;
-  const VisibilityIcon =
-    currentVisibility === "public"
-      ? IconWorld
-      : currentVisibility === "org"
-        ? IconBuilding
-        : IconLock;
-  const showTriggerIcon = iconOnly || !props.hideTriggerIcon;
-  const TriggerIcon = iconOnly ? IconShare3 : VisibilityIcon;
 
   return (
     <Popover open={open} onOpenChange={handleOpenChange}>
@@ -327,16 +312,7 @@ export function ShareButton(props: ShareButtonProps) {
           )}
           aria-label={iconOnly ? "Share" : undefined}
         >
-          {showTriggerIcon ? (
-            loaded || iconOnly ? (
-              <TriggerIcon size={16} strokeWidth={1.75} />
-            ) : (
-              <span
-                aria-hidden
-                className="inline-block h-4 w-4 rounded-sm bg-muted animate-pulse"
-              />
-            )
-          ) : null}
+          {iconOnly ? <IconShare3 size={16} strokeWidth={1.75} /> : null}
           {!iconOnly && <span>Share</span>}
         </button>
       </PopoverTrigger>

package/corpus/core/src/collab/presence.ts

@@ -1,5 +1,5 @@
 /**
- * Presence kit — Liveblocks/Figma-grade presence primitives.
+ * Presence kit — Liveblocks/collaboration-grade presence primitives.
  *
  * usePresence(awareness) returns:
  *   - others: reactive array of remote participants (human + agent)

package/corpus/core/src/mcp/connect-route.ts

@@ -639,6 +639,20 @@ function renderConnectPage(params: {
   }
   .primary:hover:not(:disabled) { background: #e4e4e7; }
   .primary:disabled { opacity: 0.55; cursor: default; }
+  .primary.is-loading {
+    display: inline-flex; align-items: center; justify-content: center;
+    gap: 0.55rem; opacity: 1;
+  }
+  .primary.is-loading::before {
+    content: ""; width: 1rem; height: 1rem; flex: 0 0 auto;
+    border-radius: 999px; border: 2px solid rgba(0,0,0,0.22);
+    border-top-color: var(--accent-fg);
+    animation: spin 0.75s linear infinite;
+  }
+  @keyframes spin { to { transform: rotate(360deg); } }
+  @media (prefers-reduced-motion: reduce) {
+    .primary.is-loading::before { animation: none; }
+  }
   .ghost {
     background: transparent; color: var(--muted);
     border: 1px solid var(--border-strong); padding: 0.35rem 0.7rem;
@@ -900,7 +914,7 @@ function renderConnectPage(params: {
       <span class="chev" aria-hidden="true"></span>
     </summary>
     <div class="static-token-body">
-      <div id="msg" class="msg"></div>
+      <div id="msg" class="msg" role="status" aria-live="polite"></div>
       <div id="mintForm">
         <button id="authorizeBtn" class="primary">${safeUserCode ? "Authorize device" : "Create connection token"}</button>
         ${tokenAdvancedOptionsHtml}
@@ -983,6 +997,21 @@ function renderConnectPage(params: {
   }
   function clearMsg() { msgEl.className = "msg"; msgEl.textContent = ""; }
 
+  function setButtonLoading(btn, text) {
+    if (!btn.dataset.idleText) btn.dataset.idleText = btn.textContent || "";
+    btn.textContent = text;
+    btn.classList.add("is-loading");
+    btn.setAttribute("aria-busy", "true");
+    btn.disabled = true;
+  }
+
+  function resetButtonLoading(btn) {
+    btn.disabled = false;
+    btn.classList.remove("is-loading");
+    btn.removeAttribute("aria-busy");
+    if (btn.dataset.idleText) btn.textContent = btn.dataset.idleText;
+  }
+
   function renderResult(data) {
     document.getElementById("mintForm").classList.add("hidden");
     var entry = {};
@@ -1060,13 +1089,13 @@ function renderConnectPage(params: {
 
   document.getElementById("authorizeBtn").onclick = async function () {
     var btn = this;
-    btn.disabled = true;
+    setButtonLoading(btn, USER_CODE ? "Authorizing device..." : "Creating token...");
     clearMsg();
     try {
       if (USER_CODE) {
         var a = await postJson("/device/authorize", { user_code: USER_CODE });
         if (!a.ok) {
-          btn.disabled = false;
+          resetButtonLoading(btn);
           showMsg((a.data && a.data.error) || "Could not authorize this device code.");
           return;
         }
@@ -1128,7 +1157,7 @@ function renderConnectPage(params: {
         var ttlDays = ttlEl ? parseInt(ttlEl.value, 10) || undefined : undefined;
         var m = await postJson("/token", { label: label, ttlDays: ttlDays });
         if (!m.ok) {
-          btn.disabled = false;
+          resetButtonLoading(btn);
           showMsg((m.data && m.data.error) || "Could not create token.");
           return;
         }
@@ -1136,7 +1165,7 @@ function renderConnectPage(params: {
       }
       loadTokens();
     } catch (e) {
-      btn.disabled = false;
+      resetButtonLoading(btn);
       showMsg("Network error. Please try again.");
     }
   };

package/corpus/core/src/server/action-discovery.ts

@@ -216,6 +216,10 @@ function preserveActionFlags(entry: Record<string, any>): Partial<ActionEntry> {
   ) {
     out.chatUI = entry.chatUI;
   }
+  if (typeof entry.timeoutMs === "number") out.timeoutMs = entry.timeoutMs;
+  if (typeof entry.maxResultChars === "number") {
+    out.maxResultChars = entry.maxResultChars;
+  }
   if (
     typeof entry.needsApproval === "boolean" ||
     typeof entry.needsApproval === "function"

package/corpus/core/src/server/action-routes.ts

@@ -284,6 +284,20 @@ export function mountActionRoutes(
         return runWithRequestContext(
           { userEmail, userName, orgId, timezone },
           async () => {
+            // Reject oversize bodies from Content-Length before parsing, so a
+            // public no-auth POST can't force parse work on a huge request.
+            if (typeof entry.maxBodyBytes === "number" && method !== "GET") {
+              const clRaw = getHeader(event, "content-length");
+              if (clRaw) {
+                const declared = parseInt(clRaw, 10);
+                if (!Number.isNaN(declared) && declared > entry.maxBodyBytes) {
+                  setResponseStatus(event, 413);
+                  return {
+                    error: `Request body too large (max ${entry.maxBodyBytes} bytes)`,
+                  };
+                }
+              }
+            }
             // Parse params based on method. On web-standard runtimes (Netlify
             // Functions, CF Workers), event.req IS the web Request — use .json()
             // directly. H3's readBody fails on those runtimes because it expects

package/corpus/core/src/server/agent-chat-plugin.ts

@@ -36,6 +36,7 @@ import { DEFAULT_ANTHROPIC_MODEL } from "../agent/default-model.js";
 import {
   AGENT_CHAT_PROCESS_RUN_PATH,
   extractProcessRunId,
+  isInBackgroundFunctionRuntime,
   prepareProcessRunRequest,
 } from "../agent/durable-background.js";
 import {
@@ -2567,6 +2568,12 @@ export interface AgentChatPluginOptions {
    * timeout. When reached, long runs continue through the hidden continuation
    * path instead of surfacing a timeout warning. */
   runSoftTimeoutMs?: number;
+  /**
+   * Opt this app into Netlify durable background-function agent-chat runs. This
+   * gives hosted agent turns the 15-minute async-function budget when the app's
+   * Netlify build also emits the background function.
+   */
+  durableBackgroundRuns?: boolean;
   /** Anthropic API key. Falls back to ANTHROPIC_API_KEY env var */
   apiKey?: string;
   /**
@@ -4837,6 +4844,11 @@ export function createAgentChatPlugin(
               signal: controller.signal,
             },
             options?.runSoftTimeoutMs,
+            {
+              backgroundFunction:
+                options?.durableBackgroundRuns === true &&
+                isInBackgroundFunctionRuntime(),
+            },
           );
 
           const { responseText, finalText } = assembleA2AFinalResponse(
@@ -5035,6 +5047,11 @@ export function createAgentChatPlugin(
                 signal: controller.signal,
               },
               options?.runSoftTimeoutMs,
+              {
+                backgroundFunction:
+                  options?.durableBackgroundRuns === true &&
+                  isInBackgroundFunctionRuntime(),
+              },
             );
 
             return accumulatedText || "(no response)";
@@ -5712,6 +5729,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
         appId: options?.appId,
         apiKey: options?.apiKey,
         runSoftTimeoutMs: options?.runSoftTimeoutMs,
+        durableBackgroundRuns: options?.durableBackgroundRuns,
         finalResponseGuard: options?.finalResponseGuard,
         prepareRequest: async (details) => {
           // Stash the threadId on runCtx so systemPrompt can check isNewThread().
@@ -5802,6 +5820,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
               appId: options?.appId,
               apiKey: options?.apiKey,
               runSoftTimeoutMs: options?.runSoftTimeoutMs,
+              durableBackgroundRuns: options?.durableBackgroundRuns,
               finalResponseGuard: options?.finalResponseGuard,
               prepareRequest: options?.prepareRequest,
               skipFilesContext: true,
@@ -5932,6 +5951,7 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
           appId: options?.appId,
           apiKey: options?.apiKey,
           runSoftTimeoutMs: options?.runSoftTimeoutMs,
+          durableBackgroundRuns: options?.durableBackgroundRuns,
           finalResponseGuard: options?.finalResponseGuard,
           prepareRequest: options?.prepareRequest,
           skipFilesContext,

package/corpus/core/src/vite/client.ts

@@ -1087,7 +1087,21 @@ function baseRedirectGuard(): Plugin {
         if (serveMountedEmbedRuntimeModule(server, req, res, base)) {
           return;
         }
-        req.url = stripMountedDevApiPath(req.url, base);
+        // Nitro's pre-middleware only intercepts document/iframe/frame/empty
+        // fetch-dest requests. For video/audio/image etc. it calls next() and
+        // the post-internal Nitro middleware handles them instead. If we strip
+        // the base path here for those requests, Vite's base middleware sees the
+        // stripped path (e.g. /api/video/:id without /clips/) and responds with
+        // a "did you mean /clips/api/video/:id" error before Nitro can handle it.
+        // Only strip when the request type matches Nitro's pre-middleware gate.
+        const secFetchDest = req.headers["sec-fetch-dest"] as
+          | string
+          | undefined;
+        const isNitroPreHandled =
+          !secFetchDest || /^(document|iframe|frame|empty)$/.test(secFetchDest);
+        if (isNitroPreHandled) {
+          req.url = stripMountedDevApiPath(req.url, base);
+        }
         if (
           req.method === "HEAD" &&
           req.url &&

package/corpus/templates/analytics/actions/dashboard-mutation-api.ts

@@ -28,6 +28,8 @@ type DashboardPatch = {
   columns?: number;
   filters?: unknown[];
   variables?: Record<string, string>;
+  /** Id of another dashboard to nest this one under in the sidebar. */
+  parentId?: string;
 };
 
 type PanelPatch = {

package/corpus/templates/analytics/actions/update-dashboard.ts

@@ -277,6 +277,14 @@ export function validateDashboardConfig(
   if (typeof config.name !== "string" || config.name.trim().length === 0) {
     return "config.name is required (non-empty string) — without it the dashboard renders as a blank row in the sidebar";
   }
+  if (config.parentId !== undefined && config.parentId !== null) {
+    if (
+      typeof config.parentId !== "string" ||
+      config.parentId.trim().length === 0
+    ) {
+      return "config.parentId must be a non-empty dashboard id (or omitted) — it nests this dashboard under that parent in the sidebar";
+    }
+  }
   // Filter ID collisions cause two controls to read/write the same URL param.
   // For paired start/end dates use a single date-range filter — the FilterBar
   // expands it to <id>Start / <id>End at runtime, so the SQL can still

package/corpus/templates/analytics/app/components/layout/Layout.tsx

@@ -124,7 +124,7 @@ export function Layout({ children }: LayoutProps) {
             ? "flex-1 overflow-y-auto"
             : isAskRoute
               ? "flex-1 overflow-hidden p-0"
-              : "flex-1 overflow-y-auto p-4 md:p-6 lg:p-8"
+              : "flex-1 overflow-y-auto p-6 pt-2"
         }
       >
         {children}