@agent-native/core 0.91.0 → 0.91.2

package/corpus/templates/design/AGENTS.md

@@ -246,6 +246,15 @@ patterns live in `.agents/skills/`.
   the latest localhost connection or a specific `connectionId`. Pass `routes`
   with `path`/`url` when visualizing a flow; pass `paths` for a concise route
   list. Then call `navigate --view editor --designId <id> --editorView overview`.
+- `write-local-file`: writes/patches a local file through the bridge, but only
+  when a user-approved write-consent grant exists. Granting is human-only
+  (`grant-localhost-write-consent` is hidden from agents), so you cannot approve
+  it yourself.
+- `request-localhost-write-consent`: call this when `write-local-file` fails
+  with "no write-consent grant". It opens the write-consent dialog in the
+  editor (or reports `alreadyGranted`). Tell the user to click "Allow writes",
+  then retry `write-local-file`. Do not keep retrying blindly — the write stays
+  blocked until the user approves.
 
 ## Review, Breakpoints, Screen States & Components
 

package/corpus/templates/design/actions/request-localhost-write-consent.ts

@@ -0,0 +1,141 @@
+import { defineAction } from "@agent-native/core";
+import {
+  readAppStateForCurrentTab,
+  writeAppState,
+} from "@agent-native/core/application-state";
+import { getRequestUserEmail } from "@agent-native/core/server/request-context";
+import { assertAccess } from "@agent-native/core/sharing";
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+
+import { getDb, schema } from "../server/db/index.js";
+
+/**
+ * Surface the LocalhostWriteConsentDialog so the user can approve local file
+ * writes. Granting is human-only (`grant-localhost-write-consent` is
+ * `agentTool: false`), so an agent writing from chat can only *request* the
+ * prompt: this writes an app-state key the editor observes and opens the dialog.
+ * If a valid grant already exists it reports that instead of prompting again.
+ */
+export default defineAction({
+  description:
+    "Prompt the user to allow local file writes for a design's localhost " +
+    "connection by opening the write-consent dialog in the editor. Write " +
+    "consent itself is human-only and cannot be granted by the agent. Call " +
+    "this when write-local-file fails because no write-consent grant exists, " +
+    "then retry write-local-file after the user approves. Requires editor " +
+    "access on the design.",
+  schema: z.object({
+    designId: z.string().describe("Design ID."),
+    connectionId: z
+      .string()
+      .describe("Localhost connection ID (from list-localhost-connections)."),
+    files: z
+      .array(z.string())
+      .optional()
+      .describe("File paths about to be written, shown in the dialog."),
+  }),
+  run: async ({ designId, connectionId, files }) => {
+    await assertAccess("design", designId, "editor");
+
+    const ownerEmail = getRequestUserEmail();
+    if (!ownerEmail) throw new Error("no authenticated user");
+
+    const db = getDb();
+    const [connection] = await db
+      .select({
+        rootPath: schema.designLocalhostConnections.rootPath,
+        bridgeToken: schema.designLocalhostConnections.bridgeToken,
+      })
+      .from(schema.designLocalhostConnections)
+      .where(
+        and(
+          eq(schema.designLocalhostConnections.id, connectionId),
+          eq(schema.designLocalhostConnections.ownerEmail, ownerEmail),
+        ),
+      )
+      .limit(1);
+
+    if (!connection) {
+      throw new Error(
+        `Localhost connection "${connectionId}" not found for the current user.`,
+      );
+    }
+
+    // Fail fast on the same preconditions grant-localhost-write-consent
+    // enforces, so we never show a dialog that would hard-fail on approval —
+    // or one labeled with the connection id instead of a real folder.
+    if (!connection.rootPath || !connection.bridgeToken) {
+      throw new Error(
+        `Connection "${connectionId}" is not ready for writes (missing root ` +
+          "path or bridge token). Re-run `npx @agent-native/core@latest design " +
+          "connect` so the CLI records both, then retry.",
+      );
+    }
+
+    // Skip the prompt when a non-expired grant already covers this connection —
+    // the agent can just retry write-local-file.
+    const [grant] = await db
+      .select({
+        grantedUntil: schema.designLocalhostWriteGrants.grantedUntil,
+      })
+      .from(schema.designLocalhostWriteGrants)
+      .where(
+        and(
+          eq(schema.designLocalhostWriteGrants.designId, designId),
+          eq(schema.designLocalhostWriteGrants.connectionId, connectionId),
+          eq(schema.designLocalhostWriteGrants.ownerEmail, ownerEmail),
+        ),
+      )
+      .limit(1);
+    if (grant && grant.grantedUntil > new Date().toISOString()) {
+      return {
+        designId,
+        connectionId,
+        alreadyGranted: true,
+        message:
+          "A valid write-consent grant already exists. Retry write-local-file.",
+      };
+    }
+
+    await writeAppState(`design-localhost-write-consent-request:${designId}`, {
+      designId,
+      connectionId,
+      rootPath: connection.rootPath,
+      files: files ?? [],
+      requestedAt: new Date().toISOString(),
+    });
+
+    // The dialog only renders from this design's editor, so only claim it
+    // surfaced when the user is actually there. Otherwise the request stays
+    // queued and fires when they open the design — report that honestly instead
+    // of implying a dialog is on screen.
+    const navigation = await readAppStateForCurrentTab("navigation").catch(
+      () => null,
+    );
+    const onThisEditor =
+      navigation?.["view"] === "editor" &&
+      navigation?.["designId"] === designId;
+
+    if (onThisEditor) {
+      return {
+        designId,
+        connectionId,
+        surfaced: true,
+        message:
+          "Opened the write-consent dialog. Ask the user to click 'Allow " +
+          "writes', then retry write-local-file.",
+      };
+    }
+
+    return {
+      designId,
+      connectionId,
+      surfaced: false,
+      message:
+        "Queued a write-consent request, but the user is not on this design's " +
+        "editor so no dialog is showing yet. Ask them to open the design; the " +
+        "prompt appears then, and you can retry write-local-file after they approve.",
+    };
+  },
+});

package/corpus/templates/design/app/components/design/DesignCanvas.tsx

@@ -1315,25 +1315,21 @@ export function DesignCanvas({
     (fetchedExternalSnapshot?.url === rawExternalPreviewUrl
       ? fetchedExternalSnapshot.html
       : undefined);
+  // Bake a neutral scale of 1 here (not the zoom-folded scale): this script is
+  // registered with the localhost bridge via a large POST, so folding live zoom
+  // in would re-fire the registration effect on every zoom tick. Live scale is
+  // pushed separately over the `set-editor-chrome-scale` postMessage below.
   const editorChromeBridgeForCurrentState = useMemo(
     () =>
       buildEditorChromeBridgeScript({
         readOnly,
         editMode,
-        editorChromeScaleX: effectiveEditorChromeScaleX,
-        editorChromeScaleY: effectiveEditorChromeScaleY,
+        editorChromeScaleX: 1,
+        editorChromeScaleY: 1,
         screenId: screenId ?? contentKey ?? "",
         boardSurface,
       }),
-    [
-      boardSurface,
-      contentKey,
-      editMode,
-      effectiveEditorChromeScaleX,
-      effectiveEditorChromeScaleY,
-      readOnly,
-      screenId,
-    ],
+    [boardSurface, contentKey, editMode, readOnly, screenId],
   );
   const embeddedWheelBridgeForCurrentState = useMemo(
     () =>
@@ -1400,6 +1396,9 @@ export function DesignCanvas({
     onExternalContentSnapshotRef.current = onExternalContentSnapshot;
   }, [onExternalContentSnapshot]);
 
+  // Register the editor bridge script with the localhost live-edit bridge so
+  // it gets injected into the proxied preview. Re-runs only when the script
+  // content (liveEditBridgeKey) or the bridge target changes.
   useEffect(() => {
     if (!usesLiveEditEditorBridge || !bridgeUrl) {
       setRegisteredLiveEditBridgeKey(null);
@@ -1410,8 +1409,8 @@ export function DesignCanvas({
       current === liveEditBridgeKey ? current : null,
     );
     void (async () => {
+      const endpoint = new URL("/live-edit-bridge", bridgeUrl).toString();
       try {
-        const endpoint = new URL("/live-edit-bridge", bridgeUrl).toString();
         const response = await fetch(endpoint, {
           method: "POST",
           headers: {
@@ -1423,15 +1422,10 @@ export function DesignCanvas({
         if (!response.ok) {
           throw new Error(`Bridge registration failed (${response.status})`);
         }
-        if (!cancelled) {
-          setRegisteredLiveEditBridgeKey(liveEditBridgeKey);
-        }
+        if (!cancelled) setRegisteredLiveEditBridgeKey(liveEditBridgeKey);
       } catch (error) {
         if (!cancelled) {
-          console.warn(
-            "[DesignCanvas] live edit bridge registration failed",
-            error,
-          );
+          console.warn("live-edit bridge registration failed", error);
           setRegisteredLiveEditBridgeKey(null);
         }
       }

package/corpus/templates/design/package.json

@@ -77,7 +77,6 @@
     "@types/node": "^24.2.1",
     "@types/react": "catalog:",
     "@types/react-dom": "catalog:",
-    "@typescript/native-preview": "catalog:",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/addon-web-links": "^0.12.0",
     "@xterm/xterm": "^6.0.0",
@@ -100,7 +99,8 @@
     "tailwind-merge": "^3.5.0",
     "tailwindcss": "catalog:",
     "tsx": "^4.20.3",
-    "typescript": "^6.0.3",
+    "typescript": "catalog:",
+    "typescript-7": "catalog:",
     "vaul": "^1.1.2",
     "vite": "catalog:",
     "vitest": "catalog:"

package/corpus/templates/design/server/lib/verify-write-grant.ts

@@ -59,7 +59,8 @@ export async function verifyWriteGrant(
   if (!grant) {
     throw new Error(
       "No localhost write-consent grant found for this design + connection. " +
-        "The user must approve writes via the LocalhostWriteConsentDialog first.",
+        "Call request-localhost-write-consent to prompt the user, then retry " +
+        "this write after they click 'Allow writes'.",
     );
   }
 
@@ -67,7 +68,8 @@ export async function verifyWriteGrant(
   if (grant.grantedUntil < now) {
     throw new Error(
       `Localhost write-consent grant expired at ${grant.grantedUntil}. ` +
-        "Request a new grant via the LocalhostWriteConsentDialog.",
+        "Call request-localhost-write-consent to prompt the user for a new " +
+        "grant, then retry this write.",
     );
   }
 

package/corpus/templates/dispatch/app/i18n/zh-TW.ts

@@ -22,9 +22,15 @@ const messages = {
     workspaceDescription: "管理 Dispatch 的團隊存取權限和共用工作區資源。",
     openTeamSettings: "開啟團隊設定",
     openResourceSettings: "開啟資源設定",
+    automationsTitle: "自動化",
+    automationsDescription: "檢視、暫停並建立排程或事件觸發的工作。",
+    openAutomations: "開啟自動化",
+    deliveryTitle: "投遞",
+    deliveryDescription: "管理訊息目的地並查看出站投遞佇列。",
+    openDelivery: "開啟投遞",
     agentTitle: "代理設定",
     agentDescription:
-      "開啟代理側邊欄設定，管理模型、API 金鑰、自動化、語音和其他代理控制項。",
+      "開啟代理側邊欄設定，管理模型、API 金鑰、語音和其他代理控制項。排程與事件觸發的工作請使用自動化頁面。",
     openAgentSettings: "開啟代理設定",
   },
   integrations: {
@@ -191,6 +197,33 @@ const messages = {
     onboardingDescription:
       "Dispatch 管理共用提供者帳戶。每個應用管理自己如何使用該帳戶。",
   },
+  dispatch: {
+    nav: {
+      automations: "自動化",
+      approvals: "核准",
+      delivery: "投遞",
+      agents: "代理",
+      vault: "保管庫",
+      audit: "稽核",
+    },
+    pages: {
+      also: "還有",
+      workspaceShortcutsAria: "工作區快捷入口",
+      deliveryQueue: "投遞佇列",
+      failedLastHour: "過去一小時失敗 {{count}} 次",
+      processingCount: "{{count}} 個處理中",
+      queued: "排隊中",
+      active: "進行中",
+      done1h: "完成 1 小時",
+      failed1h: "失敗 1 小時",
+      oldestQueued: "最早排隊：{{age}}",
+      queueAgeNone: "無",
+      queueFailureHint: "請檢查憑證、目的地和最近的佇列錯誤。",
+      unknownPlatform: "未知",
+      attemptsCount: "{{count}} 次嘗試",
+      noErrorMessage: "（無錯誤訊息）",
+    },
+  },
 };
 
 export default messages;