@agent-native/core 0.92.11 → 0.93.0

package/corpus/templates/design/changelog/2026-07-10-fixed-png-svg-exports-capturing-broken-layout-when-webfonts-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Fixed PNG/SVG exports capturing broken layout when webfonts or Tailwind styles hadn't finished loading yet

package/corpus/templates/design/changelog/2026-07-10-frame-tool-now-offers-standard-ad-unit-size-presets-medium-r.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-10
+---
+
+Frame tool now offers standard ad-unit size presets (Medium Rectangle, Leaderboard, Skyscraper, Mobile Leaderboard, Billboard)

package/corpus/templates/design/changelog/2026-07-10-full-view-controls-stay-within-their-frame-instead-of-coveri.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Full-view controls stay within their frame instead of covering nearby screens

package/corpus/templates/design/changelog/2026-07-10-hover-focus-focus-visible-pressed-and-disabled-states-now-pr.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Hover, focus, focus-visible, pressed, and disabled states now preview and edit reliably across responsive and local code-backed screens.

package/corpus/templates/design/changelog/2026-07-10-layer-drops-now-land-in-the-intended-grid-row-stay-visually-.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Layer drops now land in the intended grid row, stay visually fixed through rotated or scaled parents, and undo Ignore Auto Layout atomically.

package/corpus/templates/design/changelog/2026-07-10-local-code-workspaces-now-keep-unsaved-edits-across-panel-sw.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Local Code workspaces now keep unsaved edits across panel switches and can save safe text files from the connected folder.

package/corpus/templates/design/changelog/2026-07-10-local-visual-editing-now-keeps-authenticated-sessions-shared.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Local visual editing now keeps authenticated sessions shared across screens, freezes app motion while editing, blocks accidental navigation, hides reload flashes, reliably redoes structure moves, and verifies React source changes in a fresh runtime before finalizing their flow or absolute layout behavior.

package/corpus/templates/design/changelog/2026-07-10-long-running-agent-work-no-longer-shows-a-premature-stuck-wa.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Long-running agent work no longer shows a premature stuck warning or repeats work after Retry.

package/corpus/templates/design/changelog/2026-07-10-managed-figma-connections-are-recognized-automatically.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Design now recognizes a securely managed Figma connection automatically instead of asking for another token.

package/corpus/templates/design/changelog/2026-07-10-new-designs-can-open-directly-in-the-editor-without-a-pr.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+New designs can open directly in the editor without requiring a prompt.

package/corpus/templates/design/changelog/2026-07-10-new-screens-are-selected-and-revealed-immediately.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+New screens are selected and brought into view immediately after creation, duplication, or redo.

package/corpus/templates/design/changelog/2026-07-10-new-text-layers-undo-as-one-safe-creation.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+New text layers now undo as one safe creation without distorting the frame or leaving empty layers behind.

package/corpus/templates/design/changelog/2026-07-10-preview-and-apply-inferred-auto-layout-without-changing-yo.md

@@ -0,0 +1,5 @@
+---
+type: improved
+---
+
+Preview and apply inferred auto layout without changing your design until you approve the measured direction, order, spacing, alignment, and sizing.

package/corpus/templates/design/changelog/2026-07-10-print-pdf-exports-and-paper-size-presets-letter-a4-now-match.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Print PDF exports and paper-size presets (Letter, A4) now match true physical page dimensions and print at a sharper resolution

package/corpus/templates/design/changelog/2026-07-10-responsive-frame-editing.md

@@ -0,0 +1,6 @@
+---
+type: fixed
+date: 2026-07-10
+---
+
+Responsive breakpoint frames are directly editable, show their edit scope, keep generated variation groups separated, and clearly include variants when deleting a screen.

package/corpus/templates/design/changelog/2026-07-10-reusable-design-templates.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-10
+---
+
+Save reusable Design templates with fixed dimensions and locked layers, then start a new design from a template and refine it with a prompt.

package/corpus/templates/design/changelog/2026-07-10-screen-overview-frames-now-use-a-clearer-interact-action-wit.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Screen overview frames now use a clearer Interact action with the matching toolbar icon.

package/corpus/templates/design/changelog/2026-07-10-start-designs-from-source-linked-material-3-carbon-or-primer.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-10
+---
+
+Start designs from source-linked Material 3, Carbon, or Primer production systems.

package/corpus/templates/design/changelog/2026-07-10-tweaks-guidance.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-10
+---
+
+Tweaks now explain how breakpoint- and state-specific overrides layer onto the base design and can be reset.

package/corpus/templates/design/changelog/2026-07-10-uploaded-fig-files-can-now-become-editable-design-screens-wi.md

@@ -0,0 +1,6 @@
+---
+type: added
+date: 2026-07-10
+---
+
+Uploaded .fig files can now become editable Design screens with safe image handling and clear fidelity warnings.

package/corpus/templates/design/e2e/helpers.ts

@@ -167,7 +167,7 @@ async function waitForDesignBridgeReady(page: Page): Promise<void> {
     page.locator(DESIGN_PREVIEW_IFRAME_SELECTOR).first(),
   ).toBeVisible();
   const overviewChromeVisible = await page
-    .getByRole("button", { name: "Full view", exact: true })
+    .getByRole("button", { name: "Interact", exact: true })
     .first()
     .isVisible()
     .catch(() => false);
@@ -223,7 +223,7 @@ export async function enterDirectMode(
   page: Page,
   options?: { screenId?: string },
 ): Promise<void> {
-  const fullView = page.getByRole("button", { name: "Full view", exact: true });
+  const fullView = page.getByRole("button", { name: "Interact", exact: true });
   const fullViewVisible = await fullView
     .first()
     .waitFor({ state: "visible", timeout: 5_000 })
@@ -235,7 +235,7 @@ export async function enterDirectMode(
           .locator(
             `[data-screen-shell][data-frame-id="${options.screenId.replace(/"/g, '\\"')}"]`,
           )
-          .getByRole("button", { name: "Full view", exact: true })
+          .getByRole("button", { name: "Interact", exact: true })
       : fullView.last();
     await expect(targetFullView).toHaveCount(1);
     await targetFullView.click();

package/corpus/templates/design/package.json

@@ -10,6 +10,7 @@
     "test": "vitest --run",
     "typecheck": "agent-native typecheck && pnpm exec tsc --noEmit -p app/components/design/bridge/tsconfig.json",
     "codegen:bridge": "tsx app/components/design/bridge/codegen.ts",
+    "qa:figma-stress-import": "tsx scripts/qa-figma-stress-import.ts",
     "action": "agent-native action",
     "script": "agent-native script",
     "e2e": "playwright test",
@@ -25,6 +26,7 @@
     "@paper-design/shaders-react": "0.0.76",
     "@tabler/icons-react": "catalog:",
     "drizzle-orm": "^0.45.2",
+    "entities": "8.0.0",
     "fzstd": "^0.1.1",
     "h3": "^2.0.1-rc.20",
     "html2canvas": "^1.4.1",

package/corpus/templates/design/scripts/qa-figma-stress-import.ts

@@ -0,0 +1,96 @@
+import {
+  resolveBuilderPrivateKey,
+  resolveSecret,
+  runWithRequestContext,
+} from "@agent-native/core/server";
+
+import createDesign from "../actions/create-design.js";
+import importFigmaFrame from "../actions/import-figma-frame.js";
+import { getDb } from "../server/db/index.js";
+import {
+  isLocalFigmaQaUploadEnabled,
+  registerLocalFigmaQaUploadProvider,
+} from "../server/lib/local-figma-qa-upload.js";
+
+const STRESS_FRAME_URL =
+  "https://www.figma.com/design/qi8LfxivK6QzV5ujdLLqR6/Untitled?node-id=4-3";
+
+function requiredEnvironment(name: "AGENT_USER_EMAIL") {
+  const value = process.env[name]?.trim();
+  if (!value) {
+    throw new Error(
+      `${name} is required. Select an authenticated local QA account and organization without printing credential values.`,
+    );
+  }
+  return value;
+}
+
+const userEmail = requiredEnvironment("AGENT_USER_EMAIL");
+const orgId = process.env.AGENT_ORG_ID?.trim() || undefined;
+const existingDesignId = process.env.FIGMA_STRESS_DESIGN_ID?.trim();
+
+const evidence = await runWithRequestContext({ userEmail, orgId }, async () => {
+  // Normal action routes initialize this during server bootstrap. A standalone
+  // QA entry point must initialize the template adapter before reading the
+  // encrypted credential vault.
+  getDb();
+  // Resolve only inside the authenticated request scope. These values are
+  // never printed, serialized, or passed as action arguments.
+  const [figmaCredential, builderCredential] = await Promise.all([
+    resolveSecret("FIGMA_ACCESS_TOKEN"),
+    resolveBuilderPrivateKey(),
+  ]);
+  if (!figmaCredential) {
+    throw new Error(
+      "This QA account has no request-scoped Figma credential. Connect Figma in Design and retry.",
+    );
+  }
+  const localQaStorageEnabled = isLocalFigmaQaUploadEnabled();
+  if (!builderCredential && !localQaStorageEnabled) {
+    throw new Error(
+      "This QA account has no request-scoped durable upload provider. Connect Builder in Design and retry.",
+    );
+  }
+  // The explicit QA flag must deterministically exercise this provider even
+  // when Builder is also connected. Registered providers win over Builder in
+  // the core upload registry, so register it whenever the flag is enabled.
+  if (localQaStorageEnabled) registerLocalFigmaQaUploadProvider();
+
+  const designId =
+    existingDesignId ??
+    (
+      await createDesign.run({
+        id: undefined,
+        title: "Figma Parity Stress Import QA",
+        description:
+          "Real Figma REST import verification for the AN Parity Stress frame.",
+        projectType: "prototype",
+        designSystemId: undefined,
+      })
+    ).id;
+  const imported = await importFigmaFrame.run({
+    figmaUrl: STRESS_FRAME_URL,
+    fileKey: undefined,
+    nodeId: undefined,
+    designId,
+    asNewScreen: true,
+  });
+
+  return {
+    designId: imported.designId,
+    fileCount: imported.files.length,
+    placedFrameCount: imported.placedFrames.length,
+    figma: imported.figma,
+    fidelity: {
+      exactCount: imported.fidelityReport.exactCount,
+      approximatedCount: imported.fidelityReport.approximated.length,
+      imageFallbackCount: imported.fidelityReport.imageFallbacks.length,
+    },
+    durableAssetsVerified: imported.fidelityReport.imageFallbacks.length > 0,
+    warningCount: imported.warnings.length,
+  };
+});
+
+// Deliberately emit only bounded import evidence. Credentials, account ids,
+// upload URLs, and imported source never enter stdout.
+console.log(JSON.stringify(evidence, null, 2));

package/corpus/templates/design/server/db/index.ts

@@ -26,6 +26,16 @@ registerShareableResource({
   publicAccessRole: publicDesignAccessRole,
 });
 
+registerShareableResource({
+  type: "design-template",
+  resourceTable: schema.designTemplates,
+  sharesTable: schema.designTemplateShares,
+  displayName: "Design template",
+  titleColumn: "title",
+  getResourcePath: (template) => `/templates?templateId=${template.id}`,
+  getDb,
+});
+
 registerShareableResource({
   type: "design-system",
   resourceTable: schema.designSystems,

package/corpus/templates/design/server/db/schema.ts

@@ -27,6 +27,50 @@ export const designs = table("designs", {
 
 export const designShares = createSharesTable("design_shares");
 
+/**
+ * Reusable starting points captured from a Design project. Template metadata
+ * stays light enough for the gallery list; the full design data and file
+ * contents load only when a template is instantiated.
+ */
+export const designTemplates = table("design_templates", {
+  id: text("id").primaryKey(),
+  title: text("title").notNull(),
+  description: text("description"),
+  category: text("category", {
+    enum: [
+      "ad",
+      "one-pager",
+      "landing-page",
+      "social",
+      "presentation",
+      "other",
+    ],
+  })
+    .notNull()
+    .default("other"),
+  sourceDesignId: text("source_design_id"),
+  designSystemId: text("design_system_id"),
+  data: text("data").notNull().default("{}"),
+  width: integer("width"),
+  height: integer("height"),
+  lockedLayerCount: integer("locked_layer_count").notNull().default(0),
+  createdAt: text("created_at").default(now()),
+  updatedAt: text("updated_at").default(now()),
+  ...ownableColumns(),
+});
+
+export const designTemplateShares = createSharesTable("design_template_shares");
+
+export const designTemplateFiles = table("design_template_files", {
+  id: text("id").primaryKey(),
+  templateId: text("template_id").notNull(),
+  filename: text("filename").notNull(),
+  content: text("content").notNull(),
+  fileType: text("file_type").notNull().default("html"),
+  createdAt: text("created_at").default(now()),
+  updatedAt: text("updated_at").default(now()),
+});
+
 export const designSystems = table("design_systems", {
   id: text("id").primaryKey(),
   title: text("title").notNull(),

package/corpus/templates/design/server/handlers/import-design-file.ts

@@ -1,6 +1,6 @@
 import path from "node:path";
 
-import { getSession } from "@agent-native/core/server";
+import { getSession, runWithRequestContext } from "@agent-native/core/server";
 import { assertAccess } from "@agent-native/core/sharing";
 import {
   defineEventHandler,
@@ -10,13 +10,15 @@ import {
   setResponseStatus,
 } from "h3";
 
+import { MAX_FIG_FILE_BYTES } from "../lib/fig-file-limits.js";
 import {
   normalizeImportedHtmlDocument,
   saveImportedDesignFiles,
 } from "../lib/import-design-files.js";
 
 const MAX_HTML_BYTES = 2 * 1024 * 1024;
-const TOTAL_BODY_LIMIT = MAX_HTML_BYTES + 1024 * 1024;
+const MULTIPART_OVERHEAD_BYTES = 1024 * 1024;
+const TOTAL_BODY_LIMIT = MAX_FIG_FILE_BYTES + MULTIPART_OVERHEAD_BYTES;
 
 function fieldText(
   parts: Awaited<ReturnType<typeof readMultipartFormData>>,
@@ -42,88 +44,120 @@ export const importDesignFile = defineEventHandler(async (event) => {
     return { error: "Unauthorized" };
   }
 
-  const rawContentLength = getRequestHeader(event, "content-length");
-  const contentLength = Number(rawContentLength);
-  if (!rawContentLength || !Number.isFinite(contentLength)) {
-    setResponseStatus(event, 411);
-    return { error: "Content-Length header is required" };
-  }
-  if (contentLength > TOTAL_BODY_LIMIT) {
-    setResponseStatus(event, 413);
-    return { error: "Request body too large" };
-  }
+  return runWithRequestContext(
+    { userEmail: session.email, orgId: session.orgId },
+    async () => {
+      const rawContentLength = getRequestHeader(event, "content-length");
+      const contentLength = Number(rawContentLength);
+      if (!rawContentLength || !Number.isFinite(contentLength)) {
+        setResponseStatus(event, 411);
+        return { error: "Content-Length header is required" };
+      }
+      if (contentLength > TOTAL_BODY_LIMIT) {
+        setResponseStatus(event, 413);
+        return { error: "Request body too large" };
+      }
 
-  try {
-    const query = getQuery(event);
-    const queryDesignId =
-      typeof query.designId === "string" ? query.designId.trim() : undefined;
-    let accessChecked = false;
-    if (queryDesignId) {
-      await assertAccess("design", queryDesignId, "editor");
-      accessChecked = true;
-    }
+      try {
+        const query = getQuery(event);
+        const queryDesignId =
+          typeof query.designId === "string"
+            ? query.designId.trim()
+            : undefined;
+        let accessChecked = false;
+        if (queryDesignId) {
+          await assertAccess("design", queryDesignId, "editor");
+          accessChecked = true;
+        }
 
-    const parts = await readMultipartFormData(event);
-    const bodyDesignId = fieldText(parts, "designId");
-    if (queryDesignId && bodyDesignId && bodyDesignId !== queryDesignId) {
-      setResponseStatus(event, 400);
-      return { error: "Mismatched designId" };
-    }
-    const designId = queryDesignId ?? bodyDesignId;
-    const filePart = parts?.find((part) => part.name === "file" && part.data);
-    if (!designId) {
-      setResponseStatus(event, 400);
-      return { error: "Missing designId" };
-    }
-    if (!accessChecked) {
-      await assertAccess("design", designId, "editor");
-    }
-    if (!filePart?.data) {
-      setResponseStatus(event, 400);
-      return { error: "No file uploaded" };
-    }
+        const parts = await readMultipartFormData(event);
+        const bodyDesignId = fieldText(parts, "designId");
+        if (queryDesignId && bodyDesignId && bodyDesignId !== queryDesignId) {
+          setResponseStatus(event, 400);
+          return { error: "Mismatched designId" };
+        }
+        const designId = queryDesignId ?? bodyDesignId;
+        const filePart = parts?.find(
+          (part) => part.name === "file" && part.data,
+        );
+        if (!designId) {
+          setResponseStatus(event, 400);
+          return { error: "Missing designId" };
+        }
+        if (!accessChecked) {
+          await assertAccess("design", designId, "editor");
+        }
+        if (!filePart?.data) {
+          setResponseStatus(event, 400);
+          return { error: "No file uploaded" };
+        }
 
-    const originalName = filePart.filename || "import";
-    const ext = path.extname(originalName).toLowerCase();
-    const data = Buffer.from(filePart.data);
+        const originalName = filePart.filename || "import";
+        const ext = path.extname(originalName).toLowerCase();
+        const data = Buffer.from(filePart.data);
 
-    if (ext === ".html" || ext === ".htm") {
-      if (data.length > MAX_HTML_BYTES) {
-        throw new Error("HTML file is too large (max 2 MB).");
-      }
-      const saved = await saveImportedDesignFiles({
-        designId,
-        sourceType: "html-upload",
-        files: [
-          {
-            filename: originalName,
-            fileType: "html",
-            content: normalizeImportedHtmlDocument(
-              data.toString("utf8"),
-              "uploaded HTML file",
-            ),
-            source: { sourceType: "html-upload", originalName },
-          },
-        ],
-      });
-      return {
-        importKind: "html",
-        ...saved,
-        stats: { sourceKind: "html-upload", frameCount: saved.files.length },
-      };
-    }
+        if (ext === ".html" || ext === ".htm") {
+          if (data.length > MAX_HTML_BYTES) {
+            throw new Error("HTML file is too large (max 2 MB).");
+          }
+          const saved = await saveImportedDesignFiles({
+            designId,
+            sourceType: "html-upload",
+            files: [
+              {
+                filename: originalName,
+                fileType: "html",
+                content: normalizeImportedHtmlDocument(
+                  data.toString("utf8"),
+                  "uploaded HTML file",
+                ),
+                source: { sourceType: "html-upload", originalName },
+              },
+            ],
+          });
+          return {
+            importKind: "html",
+            ...saved,
+            stats: {
+              sourceKind: "html-upload",
+              frameCount: saved.files.length,
+            },
+          };
+        }
 
-    if (ext === ".fig") {
-      throw new Error(
-        "Use Design system setup to send .fig files through Builder indexing. This import route only accepts HTML.",
-      );
-    }
+        if (ext === ".fig") {
+          if (data.length > MAX_FIG_FILE_BYTES) {
+            throw new Error(".fig file is too large (max 50 MB).");
+          }
+          // Keep Kiwi/Zstd and the sizeable editable renderer off the normal HTML
+          // upload path. They are loaded only for an actual `.fig` request.
+          const { importFigFileToEditableHtml } =
+            await import("../lib/fig-file-import.js");
+          const converted = await importFigFileToEditableHtml({
+            data,
+            originalName,
+            ownerEmail: session.email,
+          });
+          const saved = await saveImportedDesignFiles({
+            designId,
+            sourceType: "fig-upload",
+            files: converted.files,
+            warnings: converted.warnings,
+          });
+          return {
+            importKind: "fig",
+            ...saved,
+            stats: converted.stats,
+          };
+        }
 
-    throw new Error("Unsupported file type. Upload .html or .htm.");
-  } catch (error) {
-    const message =
-      error instanceof Error ? error.message : "File import failed.";
-    setResponseStatus(event, statusForError(message));
-    return { error: message };
-  }
+        throw new Error("Unsupported file type. Upload .html, .htm, or .fig.");
+      } catch (error) {
+        const message =
+          error instanceof Error ? error.message : "File import failed.";
+        setResponseStatus(event, statusForError(message));
+        return { error: message };
+      }
+    },
+  );
 });

package/corpus/templates/design/server/handlers/index-design-system-with-builder.ts

@@ -19,7 +19,7 @@ function requestContentLength(event: Parameters<typeof getRequestHeader>[0]) {
   const raw = getRequestHeader(event, "content-length");
   if (!raw) return null;
   const parsed = Number(raw);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : null;
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
 }
 
 /**
@@ -37,10 +37,11 @@ export const indexDesignSystemWithBuilder = defineEventHandler(
     }
 
     const contentLength = requestContentLength(event);
-    if (
-      contentLength !== null &&
-      contentLength > MAX_FIG_BYTES + MULTIPART_OVERHEAD_BYTES
-    ) {
+    if (contentLength === null) {
+      setResponseStatus(event, 411);
+      return { error: "A valid Content-Length header is required." };
+    }
+    if (contentLength > MAX_FIG_BYTES + MULTIPART_OVERHEAD_BYTES) {
       setResponseStatus(event, 413);
       return {
         error: `File too large (max ${Math.round(MAX_FIG_BYTES / 1024 / 1024)} MB).`,
@@ -69,6 +70,18 @@ export const indexDesignSystemWithBuilder = defineEventHandler(
         error: `File too large (max ${Math.round(MAX_FIG_BYTES / 1024 / 1024)} MB).`,
       };
     }
+    const filename = part.filename || "brand.fig";
+    const uploadedBytes = Buffer.from(part.data);
+    const isFigName = filename.toLowerCase().endsWith(".fig");
+    const isFigBytes =
+      uploadedBytes.subarray(0, 8).toString("utf8") === "fig-kiwi" ||
+      uploadedBytes
+        .subarray(0, 4)
+        .equals(Buffer.from([0x50, 0x4b, 0x03, 0x04]));
+    if (!isFigName || !isFigBytes) {
+      setResponseStatus(event, 400);
+      return { error: "Uploaded file is not a valid .fig container." };
+    }
 
     const suggestedTitle =
       (part.filename || "Imported brand")
@@ -81,7 +94,7 @@ export const indexDesignSystemWithBuilder = defineEventHandler(
         projectName: suggestedTitle,
         files: [
           {
-            name: part.filename || "brand.fig",
+            name: filename,
             data: part.data,
             mimeType: "application/octet-stream",
           },