@agent-native/core 0.80.6 → 0.80.8

package/corpus/templates/analytics/app/i18n-data.ts

@@ -392,6 +392,9 @@ const enUS = {
     off: "Off",
     since: "Since",
     sectionOptions: "Section options",
+    extensionMissingId: "This extension panel has no extension selected.",
+    extensionUnavailable:
+      "This extension isn't shared with you, or it no longer exists.",
     panelOptions: "Panel options",
     fullScreen: "Full screen",
     refresh: "Refresh",
@@ -5249,6 +5252,8 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "保存视图",
       savedViews: "已保存的视图",
       sectionOptions: "部分选项",
+      extensionMissingId: "此扩展面板未选择任何扩展。",
+      extensionUnavailable: "此扩展未与您共享，或已不存在。",
       sharedWithOrg: "与组织共享",
       unhideFailed: "无法取消隐藏仪表板",
       untitledDashboard: "无标题仪表板",
@@ -5424,6 +5429,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Guardar vista",
       savedViews: "Vistas guardadas",
       sectionOptions: "Opciones de sección",
+      extensionMissingId:
+        "Este panel de extensión no tiene ninguna extensión seleccionada.",
+      extensionUnavailable:
+        "Esta extensión no está compartida contigo o ya no existe.",
       sharedWithOrg: "Compartido con la organización",
       unhideFailed: "No se pudo mostrar el panel",
       untitledDashboard: "Panel de control sin título",
@@ -5601,6 +5610,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Enregistrer la vue",
       savedViews: "Vues enregistrées",
       sectionOptions: "Options de sections",
+      extensionMissingId:
+        "Ce panneau d'extension n'a aucune extension sélectionnée.",
+      extensionUnavailable:
+        "Cette extension n'est pas partagée avec vous ou n'existe plus.",
       sharedWithOrg: "Partagé avec l'organisation",
       unhideFailed: "Impossible d'afficher le tableau de bord",
       untitledDashboard: "Tableau de bord sans titre",
@@ -5779,6 +5792,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Ansicht speichern",
       savedViews: "Gespeicherte Ansichten",
       sectionOptions: "Abschnittsoptionen",
+      extensionMissingId:
+        "Für dieses Erweiterungs-Panel ist keine Erweiterung ausgewählt.",
+      extensionUnavailable:
+        "Diese Erweiterung ist nicht für Sie freigegeben oder existiert nicht mehr.",
       sharedWithOrg: "Mit Org geteilt",
       unhideFailed: "Das Dashboard konnte nicht eingeblendet werden",
       untitledDashboard: "Unbenanntes Dashboard",
@@ -5952,6 +5969,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "ビューを保存",
       savedViews: "保存されたビュー",
       sectionOptions: "セクションのオプション",
+      extensionMissingId:
+        "この拡張機能パネルには拡張機能が選択されていません。",
+      extensionUnavailable:
+        "この拡張機能はあなたと共有されていないか、存在しません。",
       sharedWithOrg: "組織と共有",
       unhideFailed: "ダッシュボードを再表示できませんでした",
       untitledDashboard: "無題のダッシュボード",
@@ -6124,6 +6145,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "보기 저장",
       savedViews: "저장된 보기",
       sectionOptions: "섹션 옵션",
+      extensionMissingId:
+        "이 확장 프로그램 패널에 선택된 확장 프로그램이 없습니다.",
+      extensionUnavailable:
+        "이 확장 프로그램이 공유되지 않았거나 더 이상 존재하지 않습니다.",
       sharedWithOrg: "조직과 공유됨",
       unhideFailed: "대시보드를 숨기기 해제할 수 없습니다.",
       untitledDashboard: "제목 없는 대시보드",
@@ -6300,6 +6325,10 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "Salvar visualização",
       savedViews: "Visualizações salvas",
       sectionOptions: "Opções de seção",
+      extensionMissingId:
+        "Este painel de extensão não tem nenhuma extensão selecionada.",
+      extensionUnavailable:
+        "Esta extensão não foi compartilhada com você ou não existe mais.",
       sharedWithOrg: "Compartilhado com a organização",
       unhideFailed: "Não foi possível exibir o painel",
       untitledDashboard: "Painel sem título",
@@ -6472,6 +6501,9 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "दृश्य सहेजें",
       savedViews: "सहेजे गए दृश्य",
       sectionOptions: "अनुभाग विकल्प",
+      extensionMissingId: "इस एक्सटेंशन पैनल में कोई एक्सटेंशन चयनित नहीं है।",
+      extensionUnavailable:
+        "यह एक्सटेंशन आपके साथ साझा नहीं किया गया है, या अब मौजूद नहीं है।",
       sharedWithOrg: "संगठन के साथ साझा किया गया",
       unhideFailed: "डैशबोर्ड को उजागर नहीं किया जा सका",
       untitledDashboard: "शीर्षक रहित डैशबोर्ड",
@@ -6644,6 +6676,8 @@ const translatedAnalyticsDebtTranslations = {
       saveView: "حفظ العرض",
       savedViews: "المشاهدات المحفوظة",
       sectionOptions: "خيارات القسم",
+      extensionMissingId: "لم يتم تحديد أي إضافة في لوحة الإضافة هذه.",
+      extensionUnavailable: "هذه الإضافة غير مشاركة معك، أو لم تعد موجودة.",
       sharedWithOrg: "تمت المشاركة مع منظمة",
       unhideFailed: "تعذر إظهار لوحة البيانات",
       untitledDashboard: "لوحة تحكم بلا عنوان",

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/SqlChartCard.tsx

@@ -121,7 +121,9 @@ export function SqlChartCard({
   const [expanded, setExpanded] = useState(false);
   const [exportCsv, setExportCsv] = useState<(() => void) | null>(null);
   const [shouldLoadData, setShouldLoadData] = useState(
-    eagerLoad || panel.chartType === "section",
+    eagerLoad ||
+      panel.chartType === "section" ||
+      panel.chartType === "extension",
   );
   const cardRef = useRef<HTMLDivElement | null>(null);
   const chartQueryKey = useMemo(
@@ -159,7 +161,9 @@ export function SqlChartCard({
       setShouldLoadData(true);
       return;
     }
-    if (panel.chartType === "section") {
+    // Sections are layout-only and extensions render their own iframe — neither
+    // waits on the intersection observer that gates SQL panels.
+    if (panel.chartType === "section" || panel.chartType === "extension") {
       setShouldLoadData(true);
       return;
     }
@@ -286,6 +290,88 @@ export function SqlChartCard({
     );
   }
 
+  // Extension panels render their sandboxed iframe full-bleed with no card chrome
+  // or title — the extension owns its own UI. Editable dashboards still get a
+  // hover overlay for delete/drag. Editing routes through the agent (the manual
+  // panel editor has no extension picker), so no inline edit action here.
+  if (panel.chartType === "extension") {
+    return (
+      <div
+        ref={setCardNodeRef}
+        style={isDragSource ? { zIndex: 50 } : undefined}
+        data-dragging={isDragSource ? "true" : undefined}
+        className="dashboard-extension-card group relative h-full"
+      >
+        <SqlChart panel={panel} resolvedSql={resolvedSql} loadData />
+        {editable ? (
+          <div className="absolute right-1 top-1 flex items-center gap-1 opacity-0 group-hover:opacity-100">
+            <DropdownMenu>
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <DropdownMenuTrigger asChild>
+                    <button
+                      className="p-1 rounded bg-background/80 text-muted-foreground hover:text-foreground"
+                      aria-label={t("sqlDashboard.panelOptions")}
+                    >
+                      <IconDotsVertical className="h-3.5 w-3.5" />
+                    </button>
+                  </DropdownMenuTrigger>
+                </TooltipTrigger>
+                <TooltipContent>
+                  {t("sqlDashboard.panelOptions")}
+                </TooltipContent>
+              </Tooltip>
+              <DropdownMenuContent align="end" className="w-40">
+                <DropdownMenuItem
+                  onSelect={(e) => {
+                    e.preventDefault();
+                    setConfirmOpen(true);
+                  }}
+                >
+                  <IconTrash className="h-4 w-4 mr-2" />
+                  {t("sidebar.delete")}
+                </DropdownMenuItem>
+              </DropdownMenuContent>
+            </DropdownMenu>
+            <PanelDragHandle
+              panelId={panel.id}
+              label={t("sqlDashboard.dragToReorder")}
+              className="p-1 rounded bg-background/80 cursor-grab active:cursor-grabbing text-muted-foreground/50 hover:text-muted-foreground"
+              iconClassName="h-3.5 w-3.5"
+            />
+          </div>
+        ) : null}
+        {editable ? (
+          <AlertDialog open={confirmOpen} onOpenChange={setConfirmOpen}>
+            <AlertDialogContent>
+              <AlertDialogHeader>
+                <AlertDialogTitle>
+                  {t("sqlDashboard.deletePanelTitle")}
+                </AlertDialogTitle>
+                <AlertDialogDescription>
+                  {t("sqlDashboard.deletePanelDescription", {
+                    title: panel.title,
+                  })}
+                </AlertDialogDescription>
+              </AlertDialogHeader>
+              <AlertDialogFooter>
+                <AlertDialogCancel>{t("sidebar.cancel")}</AlertDialogCancel>
+                <AlertDialogAction
+                  onClick={() => {
+                    setConfirmOpen(false);
+                    onRemove();
+                  }}
+                >
+                  {t("sidebar.delete")}
+                </AlertDialogAction>
+              </AlertDialogFooter>
+            </AlertDialogContent>
+          </AlertDialog>
+        ) : null}
+      </div>
+    );
+  }
+
   // Every non-section panel exposes at least the Full screen view action, so the
   // options menu always renders — including on read-only / shared dashboards.
   const showPanelMenu = true;

package/corpus/templates/analytics/app/pages/adhoc/sql-dashboard/types.ts

@@ -15,7 +15,8 @@ export type ChartType =
   | "pie"
   | "section"
   | "heatmap"
-  | "callout";
+  | "callout"
+  | "extension";
 
 export type FilterType =
   | "date"
@@ -79,6 +80,11 @@ export interface SqlPanelConfig {
   sortable?: boolean;
   columns?: TableColumnConfig[];
   limit?: number;
+  /**
+   * Extension panels only (`chartType: "extension"`): id of the extension to
+   * render inline as a sandboxed iframe instead of running the SQL pipeline.
+   */
+  extensionId?: string;
 }
 
 export interface SqlPanel {

package/corpus/templates/analytics/changelog/2026-06-29-dashboards-can-now-include-extension-panels-that-embed-a-san.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-06-29
+---
+
+Dashboards can now include extension panels that embed a sandboxed extension inline instead of a SQL chart

package/corpus/templates/content/app/components/editor/DocumentEditor.tsx

@@ -157,10 +157,19 @@ interface DocumentEditorBodyProps {
 type PendingDocumentSave = {
   title: string;
   content: string;
-  save: (title: string, content: string) => unknown | Promise<unknown>;
+  save: (
+    title: string,
+    content: string,
+    options?: DocumentSaveOptions,
+  ) => unknown | Promise<unknown>;
+  canEditWhenQueued: boolean;
   timeout: ReturnType<typeof setTimeout>;
 };
 
+type DocumentSaveOptions = {
+  allowQueuedSave?: boolean;
+};
+
 type DocumentSaveResult = {
   contentPersisted: boolean;
 };
@@ -274,6 +283,8 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
   const updateDocument = useUpdateDocument();
   const queryClient = useQueryClient();
   const canEdit = document.canEdit ?? true;
+  const canEditRef = useRef(canEdit);
+  canEditRef.current = canEdit;
   // The block render context (asset/upload resolvers, inline markdown reader,
   // panel popover) is stable for the editor's lifetime. Created once here and
   // provided alongside the content block registry so every registry block in the
@@ -324,6 +335,15 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
     document.updatedAt ?? null,
   );
   documentUpdatedAtRef.current = document.updatedAt ?? null;
+  const handleBackgroundSaveError = useCallback(
+    (error: unknown) => {
+      toast.error(t("empty.genericError"), {
+        description:
+          error instanceof Error ? error.message : t("empty.genericError"),
+      });
+    },
+    [t],
+  );
   const titleFocusedRef = useRef(false);
   const scrollContainerRef = useRef<HTMLDivElement>(null);
   const titleInputRef = useRef<HTMLTextAreaElement>(null);
@@ -375,7 +395,8 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
       }
     : undefined;
 
-  // Collaborative editing — stable Y.Doc per document, always-on
+  // Collaborative editing is write-only for now. Viewers get the SQL snapshot
+  // and skip collab endpoints that reject non-editor access.
   const {
     ydoc,
     awareness,
@@ -384,7 +405,7 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
     agentActive,
     agentPresent,
   } = useCollaborativeDoc({
-    docId: isLocalFileDocument ? "" : documentId,
+    docId: canEdit && !isLocalFileDocument ? documentId : "",
     requestSource: TAB_ID,
     user: currentUser,
   });
@@ -566,11 +587,16 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
   }, [document, isLinkedLocalSourceDocument, localTitle, localContent]);
 
   const persistDocumentUpdates = useCallback(
-    async (updates: {
-      title?: string;
-      content?: string;
-      icon?: string | null;
-    }): Promise<Document> => {
+    async (
+      updates: {
+        title?: string;
+        content?: string;
+        icon?: string | null;
+      },
+      options: DocumentSaveOptions = {},
+    ): Promise<Document> => {
+      if (!options.allowQueuedSave && !canEditRef.current) return document;
+
       const localSource = document.source;
       const isLinkedLocalSource = canWriteLinkedLocalSource(
         documentId,
@@ -629,7 +655,11 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
   );
 
   const saveDocumentImmediately = useCallback(
-    async (title: string, content: string): Promise<DocumentSaveResult> => {
+    async (
+      title: string,
+      content: string,
+      options: DocumentSaveOptions = {},
+    ): Promise<DocumentSaveResult> => {
       // Never clobber a newer server version (e.g. an agent edit we haven't
       // reconciled into the editor yet) with the editor's current — possibly
       // stale — content. Guard per-field using the field's own watermark.
@@ -653,7 +683,7 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
         return { contentPersisted: !contentChanged };
       }
 
-      const saved = await persistDocumentUpdates(updates);
+      const saved = await persistDocumentUpdates(updates, options);
       // Adopt the server updatedAt per saved field.
       const savedAt = saved?.updatedAt ?? new Date().toISOString();
       if (updates.title !== undefined) {
@@ -700,25 +730,38 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
       queryClient,
     ],
   );
+  const flushPendingDocumentSave = useCallback(
+    (pending: PendingDocumentSave) => {
+      if (!pending.canEditWhenQueued) return;
+      void Promise.resolve(
+        pending.save(pending.title, pending.content, {
+          allowQueuedSave: true,
+        }),
+      ).catch(handleBackgroundSaveError);
+    },
+    [handleBackgroundSaveError],
+  );
   const debouncedSave = useCallback(
     (title: string, content: string) => {
+      if (!canEditRef.current) return;
       if (saveTimeoutRef.current) clearTimeout(saveTimeoutRef.current);
       const pending: PendingDocumentSave = {
         title,
         content,
         save: saveDocumentImmediately,
+        canEditWhenQueued: canEditRef.current,
         timeout: setTimeout(() => {
           if (pendingDocumentSaveRef.current === pending) {
             pendingDocumentSaveRef.current = null;
           }
           saveTimeoutRef.current = null;
-          void pending.save(pending.title, pending.content);
+          flushPendingDocumentSave(pending);
         }, 500),
       };
       pendingDocumentSaveRef.current = pending;
       saveTimeoutRef.current = pending.timeout;
     },
-    [saveDocumentImmediately],
+    [flushPendingDocumentSave, saveDocumentImmediately],
   );
 
   useEffect(() => {
@@ -728,9 +771,19 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
       clearTimeout(pending.timeout);
       saveTimeoutRef.current = null;
       pendingDocumentSaveRef.current = null;
-      void pending.save(pending.title, pending.content);
+      flushPendingDocumentSave(pending);
     };
-  }, [documentId]);
+  }, [documentId, flushPendingDocumentSave]);
+
+  useEffect(() => {
+    if (canEdit) return;
+    const pending = pendingDocumentSaveRef.current;
+    if (!pending) return;
+    clearTimeout(pending.timeout);
+    saveTimeoutRef.current = null;
+    pendingDocumentSaveRef.current = null;
+    flushPendingDocumentSave(pending);
+  }, [canEdit, documentId, flushPendingDocumentSave]);
 
   // Collab-aware ingest flush: the `pull-document` action writes a one-shot
   // `flush-request-<id>` app-state key when an external agent wants to ingest
@@ -846,7 +899,7 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
   const [hoveredThreadId, setHoveredThreadId] = useState<string | null>(null);
   const activeThreadId = hoveredThreadId ?? selectedThreadId;
   const { data: threads, isLoading: commentsLoading } = useComments(
-    isLocalFileDocument ? null : documentId,
+    canEdit && !isLocalFileDocument ? documentId : null,
   );
   const hasComments =
     !isLocalFileDocument &&
@@ -1061,7 +1114,7 @@ function DocumentEditorBody({ documentId, document }: DocumentEditorBodyProps) {
                           onSelect={(emoji) => {
                             void (async () => {
                               await persistDocumentUpdates({ icon: emoji });
-                            })();
+                            })().catch(handleBackgroundSaveError);
                           }}
                         />
                       ) : document.icon ? (

package/corpus/templates/content/changelog/2026-06-29-read-only-pages-no-longer-try-to-autosave-or-open-editor-onl.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-06-29
+---
+
+Read-only pages no longer try to autosave or open editor-only realtime connections.

package/corpus/templates/design/AGENTS.md

@@ -127,8 +127,10 @@ patterns live in `.agents/skills/`.
 - `navigate` moves the UI and is auto-deleted after the client consumes it.
 - `design-selection` includes active screen, selected element, overview mode,
   inspector tab, zoom, and screen list for the current tab.
-- `design-generation-session:<designId>` contains visible multi-screen
-  generation frames created by `generate-screens`.
+- `design-generation-session:<designId>` contains agent-facing multi-screen
+  generation planning state created by `generate-screens` (canvas region
+  assignments and per-frame instructions consumed by `generate-design` and
+  `view-screen`; not rendered as canvas overlays).
 - `show-design-questions` opens focused pre-generation questions in the main
   design canvas (`show-questions` application state).
 - `design-variants` contains in-progress candidates for the variant picker.

package/corpus/templates/design/actions/edit-design.ts

@@ -91,11 +91,14 @@ function findUniqueStableIdAgnosticSpan(
   }
   if (count !== 1) return null;
 
+  // Anchor `end` to one byte past the LAST matched stripped character rather than
+  // the mapped index of the NEXT character. Mapping the next index can land before
+  // a stripped node-id attribute that sits right after the match, so the splice
+  // would cross it and corrupt the file (e.g. duplicate/mangled tags).
+  const lastMatched = onlyIndex + strippedSearch.length - 1;
   return {
     start: strippedContent.indexMap[onlyIndex] ?? 0,
-    end:
-      strippedContent.indexMap[onlyIndex + strippedSearch.length] ??
-      content.length,
+    end: (strippedContent.indexMap[lastMatched] ?? content.length - 1) + 1,
   };
 }
 

package/corpus/templates/design/actions/generate-screens.ts

@@ -66,10 +66,11 @@ const requestedScreenSchema = z
 
 export default defineAction({
   description:
-    "Start a visible multi-agent generation session on the Design canvas. " +
+    "Start a multi-screen generation session on the Design canvas. " +
     "Use this before generating multiple screens or variations in parallel: it " +
-    "assigns non-overlapping canvas regions, publishes named agent/frame " +
-    "status to application state, and returns per-frame generation instructions. " +
+    "assigns non-overlapping canvas regions and returns per-frame generation " +
+    "instructions including canvasFrame placements. The session state is " +
+    "agent-facing planning state consumed by generate-design and view-screen. " +
     "After this action, fan out calls to generate-design for each returned " +
     "frame, passing the returned canvasFrame values to generate-design so " +
     "screens appear in the infinite overview canvas.",
@@ -167,6 +168,7 @@ export default defineAction({
       prompt,
       contextRefs,
       frames,
+      startedAt: new Date().toISOString(),
     };
 
     await writeAppState(

package/corpus/templates/design/actions/update-design.ts

@@ -49,17 +49,54 @@ export default defineAction({
     const db = getDb();
     const now = new Date().toISOString();
 
-    const updates: Record<string, unknown> = { updatedAt: now };
-    if (title !== undefined) updates.title = title;
-    if (description !== undefined) updates.description = description;
-    if (data !== undefined) updates.data = data;
-    if (projectType !== undefined) updates.projectType = projectType;
-    if (designSystemId !== undefined) updates.designSystemId = designSystemId;
+    const asRecord = (raw: string | null | undefined) => {
+      if (!raw) return {} as Record<string, unknown>;
+      try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+          ? (parsed as Record<string, unknown>)
+          : ({} as Record<string, unknown>);
+      } catch {
+        return {} as Record<string, unknown>;
+      }
+    };
+
+    // Read-merge-write inside one transaction so a partial `data` update can't
+    // race a concurrent write and either destroy framework-owned keys (e.g.
+    // canvasFrames/tweaks) or overwrite newer server-side keys. Mirrors
+    // generate-design's transactional read-merge.
+    await db.transaction(async (tx) => {
+      const updates: Record<string, unknown> = { updatedAt: now };
+      if (title !== undefined) updates.title = title;
+      if (description !== undefined) updates.description = description;
+      if (data !== undefined) {
+        const [existing] = await tx
+          .select({ data: schema.designs.data })
+          .from(schema.designs)
+          .where(eq(schema.designs.id, id));
+        const incomingParsed = JSON.parse(data);
+        if (
+          incomingParsed &&
+          typeof incomingParsed === "object" &&
+          !Array.isArray(incomingParsed)
+        ) {
+          updates.data = JSON.stringify({
+            ...asRecord(existing?.data),
+            ...(incomingParsed as Record<string, unknown>),
+          });
+        } else {
+          // Non-object JSON (array/primitive): keep the original verbatim write.
+          updates.data = data;
+        }
+      }
+      if (projectType !== undefined) updates.projectType = projectType;
+      if (designSystemId !== undefined) updates.designSystemId = designSystemId;
 
-    await db
-      .update(schema.designs)
-      .set(updates)
-      .where(eq(schema.designs.id, id));
+      await tx
+        .update(schema.designs)
+        .set(updates)
+        .where(eq(schema.designs.id, id));
+    });
 
     return { id, updated: true };
   },

package/corpus/templates/design/actions/update-file.ts

@@ -70,15 +70,40 @@ export default defineAction({
 
     await assertAccess("design", file.designId, "editor");
 
-    const updates: Record<string, unknown> = { updatedAt: now };
-    if (content !== undefined) updates.content = content;
-    if (filename !== undefined) updates.filename = filename;
-    if (fileType !== undefined) updates.fileType = fileType;
+    // Reject a rename that would collide with an existing filename in the same
+    // design. The collision check and the write run in one transaction so they
+    // can't be interleaved by a concurrent rename. (A DB-level UNIQUE index on
+    // (designId, filename) would be the strongest guarantee but is a non-additive
+    // schema change on existing data, so it's deferred.)
+    await db.transaction(async (tx) => {
+      if (filename !== undefined) {
+        const [collision] = await tx
+          .select({ id: schema.designFiles.id })
+          .from(schema.designFiles)
+          .where(
+            and(
+              eq(schema.designFiles.designId, file.designId),
+              eq(schema.designFiles.filename, filename),
+            ),
+          )
+          .limit(1);
+        if (collision && collision.id !== id) {
+          throw new Error(
+            `File "${filename}" already exists in design ${file.designId}`,
+          );
+        }
+      }
 
-    await db
-      .update(schema.designFiles)
-      .set(updates)
-      .where(eq(schema.designFiles.id, id));
+      const updates: Record<string, unknown> = { updatedAt: now };
+      if (content !== undefined) updates.content = content;
+      if (filename !== undefined) updates.filename = filename;
+      if (fileType !== undefined) updates.fileType = fileType;
+
+      await tx
+        .update(schema.designFiles)
+        .set(updates)
+        .where(eq(schema.designFiles.id, id));
+    });
 
     // Push content through the collab layer so live editors see the change
     if (content !== undefined && syncCollab) {

package/corpus/templates/design/actions/view-screen.ts

@@ -120,7 +120,21 @@ export default defineAction({
         'A variant picker is open. Wait for the user to choose a direction before generating further. In an inline MCP app their pick returns to you automatically; if it opened as a browser tab (a CLI or code editor), they paste an auto-copied summary or just tell you which one (e.g. "use variant A"). Once you know the choice, read the saved index.html with get-design-snapshot. Do not call generate-design while this picker is open.';
     }
     if (generationSession) {
+      const GENERATION_SESSION_TTL_MS = 10 * 60 * 1000; // 10 minutes
+      const startedAt =
+        typeof (generationSession as { startedAt?: unknown }).startedAt ===
+        "string"
+          ? new Date(
+              (generationSession as { startedAt: string }).startedAt,
+            ).getTime()
+          : 0;
+      const isStale =
+        startedAt > 0 && Date.now() - startedAt > GENERATION_SESSION_TTL_MS;
       screen.generationSession = generationSession;
+      if (isStale) {
+        screen.generationSessionNote =
+          "This generation session may be stale or abandoned (started more than 10 minutes ago). Verify saved screens via the design file list rather than assuming generation is still in progress.";
+      }
     }
 
     if (Object.keys(screen).length === 0) {