@agent-native/core 0.92.7 → 0.92.8

package/corpus/templates/design/app/pages/design-editor/editor-session.ts

@@ -0,0 +1,20 @@
+import { generateTabId } from "@agent-native/core/client";
+
+/** Stable for the lifetime of this module, including editor component refreshes. */
+export const TAB_ID = generateTabId();
+
+/**
+ * Persistence revisions live on a DesignEditor component instance. Give that
+ * instance its own operation source too: reusing module-stable TAB_ID after an
+ * editor remount would pair reset revision counters with the server's old
+ * high-watermark and make fresh saves look stale.
+ */
+export function createEditorSaveOperationSource(
+  tabId = TAB_ID,
+  editorInstanceId = generateTabId(),
+): string {
+  return `${tabId}:save:${editorInstanceId}`;
+}
+
+/** Yjs origin tracked by the local undo manager. */
+export const LOCAL_EDIT_ORIGIN = `${TAB_ID}:local`;

package/corpus/templates/design/app/pages/design-editor/editor-state.ts

@@ -0,0 +1,408 @@
+import {
+  type DesignLeftPanel,
+  type DesignTool,
+  SHOW_DESIGN_CODE_LEFT_PANEL,
+} from "./types";
+
+function isStandaloneHttpUrl(value: string): boolean {
+  const trimmed = value.trim();
+  if (!/^https?:\/\//i.test(trimmed)) return false;
+  try {
+    const parsed = new URL(trimmed);
+    return parsed.protocol === "http:" || parsed.protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Resolve the source payload behind a localhost-backed Design screen.
+ *
+ * `design_files.content` intentionally stores the route URL, not its HTML.
+ * Writing that value to disk would replace an HTML file with the URL string,
+ * so HTML write-back is allowed only after the authenticated snapshot has
+ * populated the editor's live source model. CSS can use persisted content,
+ * but still fails closed if that payload is a URL-backed screen marker.
+ */
+export function resolveLocalhostSourceWriteContent(args: {
+  extension: string;
+  persistedContent: string | null | undefined;
+  liveSnapshotHtml: string | null | undefined;
+}): string | null {
+  const extension = args.extension.trim().toLowerCase();
+  const candidate =
+    extension === ".html" || extension === ".htm"
+      ? args.liveSnapshotHtml
+      : extension === ".css"
+        ? args.persistedContent
+        : null;
+  if (!candidate?.trim() || isStandaloneHttpUrl(candidate)) return null;
+  return candidate;
+}
+
+/**
+ * Flash-prevention routing for adopting an ALREADY-server-persisted content
+ * snapshot into the editor — the "onApplied host-sync" family: shader fill
+ * applies (`apply-shader-fill` → onShaderFillApplied), GLSL shader
+ * apply/remove/knob commits (GlslShaderPanel's read-source-file →
+ * apply-source-edit → onApplied), and component prop edits.
+ *
+ * These handlers previously passed `refreshPreview: true` for the active
+ * file, but in applyLocalContentUpdate that flag means "skip the in-place
+ * replace and force a full srcdoc rebuild" — a real iframe reload of the
+ * active screen (white flash, lost scroll/Alpine state, and an onload refire
+ * that re-runs screen measurement — observed in the wild as the shader-apply
+ * flash plus a zoom-badge drift in the same gesture). The patched content is
+ * a normal document update, exactly what the bridge's live in-place
+ * full-document replace exists for (see applyLocalContentUpdate's
+ * "Holistic flash pipeline" comment), so route it through
+ * `forcePreviewFullDocument` instead; applyLocalContentUpdate already falls
+ * back to the srcdoc rebuild on its own when the live bridge isn't
+ * registered for the surface yet.
+ *
+ * `persist: false` because the server already owns this content — the
+ * updatedAt stamp (when present) records it as the acked base for the next
+ * guarded update-file save rather than re-queueing a redundant save.
+ */
+export function getPersistedContentHostSyncOptions(args: {
+  fileId: string;
+  activeFileId: string | null | undefined;
+  updatedAt?: string;
+}): {
+  forcePreviewFullDocument: boolean;
+  persist: false;
+  updatedAt?: string;
+} {
+  return {
+    forcePreviewFullDocument:
+      args.activeFileId !== null &&
+      args.activeFileId !== undefined &&
+      args.fileId === args.activeFileId,
+    persist: false,
+    updatedAt: args.updatedAt,
+  };
+}
+
+export function getDesignEditorShareUrl(
+  id: string,
+  origin: string,
+  basePath = "",
+) {
+  const normalizedBasePath = basePath.replace(/\/+$/, "");
+  const pathname = normalizedBasePath
+    ? `${normalizedBasePath}/design/${encodeURIComponent(id)}`
+    : `/design/${encodeURIComponent(id)}`;
+  return new URL(pathname, origin).toString();
+}
+
+function formatDesignEditorUrlZoom(zoom: number): string {
+  const rounded = Math.round(zoom * 100) / 100;
+  return Number.isInteger(rounded) ? String(rounded) : rounded.toFixed(2);
+}
+
+export function getDesignEditorStateUrlSearch(args: {
+  currentSearch: string;
+  viewMode: "single" | "overview";
+  screenId?: string | null;
+  codeFileId?: string | null;
+  codeFilename?: string | null;
+  selectionId?: string | null;
+  leftPanel?: DesignLeftPanel | null;
+  zoom?: number | null;
+  tool?: DesignTool | null;
+}) {
+  const params = new URLSearchParams(args.currentSearch);
+  const leftPanel =
+    args.leftPanel === "code" && !SHOW_DESIGN_CODE_LEFT_PANEL
+      ? null
+      : args.leftPanel;
+  params.set("view", args.viewMode);
+  if (leftPanel && leftPanel !== "file") {
+    params.set("panel", leftPanel);
+  } else {
+    params.delete("panel");
+  }
+  if (args.screenId) {
+    params.set("screen", args.screenId);
+  } else {
+    params.delete("screen");
+  }
+  if (leftPanel === "code" && args.codeFileId) {
+    params.set("fileId", args.codeFileId);
+  } else {
+    params.delete("fileId");
+  }
+  if (leftPanel === "code" && !args.codeFileId && args.codeFilename) {
+    params.set("filename", args.codeFilename);
+  } else {
+    params.delete("filename");
+  }
+  if (args.selectionId) {
+    params.set("selection", args.selectionId);
+  } else {
+    params.delete("selection");
+  }
+  if (typeof args.zoom === "number" && Number.isFinite(args.zoom)) {
+    params.set("zoom", formatDesignEditorUrlZoom(args.zoom));
+  } else {
+    params.delete("zoom");
+  }
+  // Keep the shareable navigation mirror aligned with the tool the editor is
+  // actually using. `move` is the default and stays implicit so ordinary
+  // editor URLs remain compact; every other tool round-trips explicitly.
+  if (args.tool && args.tool !== "move") {
+    params.set("tool", args.tool);
+  } else {
+    params.delete("tool");
+  }
+  const query = params.toString();
+  return query ? `?${query}` : "";
+}
+
+export function getLocalhostRouteSourceFile(args: {
+  sourceFile?: string;
+  source?: string;
+}): string | undefined {
+  if (args.sourceFile?.trim()) return args.sourceFile;
+  const raw = args.source;
+  if (!raw) return undefined;
+  try {
+    const parsed = JSON.parse(raw) as unknown;
+    if (
+      parsed &&
+      typeof parsed === "object" &&
+      "file" in parsed &&
+      typeof (parsed as Record<string, unknown>).file === "string"
+    ) {
+      return (parsed as Record<string, string>).file;
+    }
+  } catch {
+    if (raw.length > 0) return raw;
+  }
+  return undefined;
+}
+
+export function getLayerMoveSourceContent(args: {
+  sourceFileId: string;
+  activeFileId?: string | null;
+  activeContent: string;
+  sourceFileContent?: string;
+  sourceContentMap: ReadonlyMap<string, string>;
+}) {
+  return (
+    args.sourceContentMap.get(args.sourceFileId) ??
+    (args.sourceFileId === args.activeFileId
+      ? args.activeContent
+      : args.sourceFileContent) ??
+    ""
+  );
+}
+
+export function getFreshActiveFileContent(args: {
+  activeContent: string;
+  latestContent?: string | null;
+  lastLocalContent?: string | null;
+}) {
+  return args.latestContent ?? args.lastLocalContent ?? args.activeContent;
+}
+
+export function getFreshScreenContent(args: {
+  screenId: string;
+  activeFileId?: string | null;
+  freshActiveContentFileId?: string | null;
+  freshActiveContent: string;
+  fileContentById: ReadonlyMap<string, string>;
+  /**
+   * Nest-conversion clobber fix: the freshest same-tick local write for this
+   * screen (DesignEditor's `pendingLocalFileContentsRef`), or null. The
+   * `fileContentById` map is memoized off React state, so a write made by
+   * `applyFileContentUpdate` earlier in the SAME task burst (e.g. the bridge's
+   * auto-layout conversion `visual-style-change` that lands right before the
+   * nest-drop's `visual-structure-change`) is not visible in it yet — the
+   * structure handler would rebase off pre-conversion content and its own
+   * write would silently clobber the conversion. Preferring the synchronous
+   * pending write mirrors what the active file already gets through
+   * `getFreshActiveFileContent`'s latest/lastLocal refs.
+   */
+  pendingContent?: string | null;
+}) {
+  const freshActiveContentFileId =
+    args.freshActiveContentFileId ?? args.activeFileId;
+  if (
+    args.screenId === args.activeFileId &&
+    args.screenId === freshActiveContentFileId
+  ) {
+    return args.freshActiveContent;
+  }
+  return args.pendingContent ?? args.fileContentById.get(args.screenId) ?? "";
+}
+
+export function shouldReplacePreviewAfterVisualStyleCommit(args: {
+  runtimeApplied?: boolean;
+  runtimeStyleApplied: boolean;
+}) {
+  return !args.runtimeApplied && !args.runtimeStyleApplied;
+}
+
+/**
+ * PF12: decide whether a style change from EditPanel (ScrubInput scrub tick /
+ * DesignColorPicker drag tick) should skip the expensive source commit
+ * (commitVisualStyles / commitStylesToSelectedLayers — projection parse, HTML
+ * patch, Yjs write, history entry) and instead only try the cheap live
+ * iframe preview.
+ *
+ * Only a genuine mid-gesture "preview" tick against a single selected element
+ * qualifies: `meta` is undefined for every existing call site that never
+ * passed gesture metadata (keyboard edits, agent edits, discrete commits),
+ * so this returns false for all of them — preserving prior full-commit
+ * behavior exactly. Multi-layer-selection edits (`selectedLayerCount > 1`)
+ * have no equivalent cheap multi-element preview channel, so those
+ * conservatively keep committing on every tick, same as before PF12.
+ */
+export function shouldSkipVisualStyleCommitForPreview(args: {
+  phase?: "preview" | "commit";
+  selectedLayerCount: number;
+}): boolean {
+  return args.phase === "preview" && args.selectedLayerCount <= 1;
+}
+
+/**
+ * Unit-aware relative-delta application for a per-node multi-select style
+ * commit (see commitRelativeStyleDeltaToSelectedLayers). ScrubInput's arrow-
+ * key step and the future `relativeDelta` meta both operate on a plain
+ * unitless number in the *same numeric domain* the field displays (px count,
+ * degree count, raw opacity/line-height number) — the CSS unit suffix is
+ * purely a serialization detail added back on here, matching how
+ * formatScrubValue/EditPanel already build the CSS string for a single-target
+ * commit.
+ *
+ * Parses the leading numeric portion of `currentValue` (e.g. "12px" -> 12,
+ * "45deg" -> 45, "0.5" -> 0.5), adds `delta`, and re-serializes with
+ * whatever unit suffix (if any) the ORIGINAL value used — so a per-node
+ * relative nudge preserves that node's own unit instead of assuming every
+ * selected node shares the same one. Returns `null` when `currentValue`
+ * doesn't parse as a leading number (e.g. a keyword like "auto" or "none"),
+ * so the caller can skip that node rather than writing garbage.
+ */
+export function applyRelativeDeltaToStyleValue(
+  currentValue: string | undefined,
+  delta: number,
+): string | null {
+  if (typeof currentValue !== "string") return null;
+  const match = currentValue.trim().match(/^(-?\d*\.?\d+)(.*)$/);
+  if (!match) return null;
+  const [, numeric, unit] = match;
+  const base = Number(numeric);
+  if (!Number.isFinite(base)) return null;
+  const next = base + delta;
+  // Match formatScrubValue's collapse of float noise (e.g. avoid
+  // "12.000000000000002px" from repeated float addition) without imposing a
+  // fixed precision the property doesn't use.
+  const rounded = Math.round(next * 1e6) / 1e6;
+  return `${Object.is(rounded, -0) ? 0 : rounded}${unit ?? ""}`;
+}
+
+export function getLayerMoveIterationOrder<T>(
+  orderedIds: readonly T[],
+  placement: "before" | "after" | "inside",
+): T[] {
+  return placement === "after" ? [...orderedIds].reverse() : [...orderedIds];
+}
+
+export function removeUndoRedoOrderKind<T extends string>(
+  order: readonly T[],
+  kind: T,
+): T[] {
+  return order.filter((entry) => entry !== kind);
+}
+
+export type UndoRedoOrderKind =
+  | "content"
+  | "file-content"
+  | "geometry"
+  | "file-created";
+
+export function getUndoRedoPriorityOrder(
+  preferred: UndoRedoOrderKind | undefined,
+): UndoRedoOrderKind[] {
+  if (preferred === "geometry") return ["geometry", "content", "file-content"];
+  if (preferred === "file-content")
+    return ["file-content", "content", "geometry"];
+  return ["content", "file-content", "geometry"];
+}
+
+export interface FileContentSaveRequest {
+  id: string;
+  content: string;
+  syncCollab: boolean;
+  /** Stable browser-tab identity used to order normal and keepalive saves. */
+  operationSource: string;
+  /** Monotonic per-file sequence allocated when the edit enters the queue. */
+  operationRevision: number;
+  /**
+   * Optimistic-concurrency guard forwarded to update-file's
+   * `expectedVersionHash` param — the last content hash this client knows
+   * the server/collab doc holds for this file. Populated by callers when
+   * known (lastAckedFileContentHashRef); omitted when unknown so update-file
+   * keeps its legacy unguarded-write behavior.
+   */
+  expectedVersionHash?: string;
+}
+
+/**
+ * A completed save may retire the unload retry only when it still represents
+ * the latest content queued for that file. A newer edit can enter the debounce
+ * slot while an older request is in flight and must remain eligible for the
+ * pagehide keepalive.
+ */
+export function shouldClearLatestUnloadSave(
+  latest: FileContentSaveRequest | undefined,
+  completed: FileContentSaveRequest,
+  skippedStaleMirror = false,
+): boolean {
+  return Boolean(
+    !skippedStaleMirror &&
+    latest &&
+    latest.id === completed.id &&
+    latest.content === completed.content &&
+    latest.syncCollab === completed.syncCollab &&
+    latest.operationSource === completed.operationSource &&
+    latest.operationRevision === completed.operationRevision,
+  );
+}
+
+/**
+ * Flushes debounce slots through the ordinary serialized mutation path during
+ * React cleanup (route/design changes). Real document unload is handled by the
+ * pagehide keepalive; normal navigation must not fire-and-forget or discard
+ * the final edit.
+ */
+export function flushPendingFileContentSavesOnCleanup(
+  pendingByFileId: Readonly<Record<string, FileContentSaveRequest>>,
+  timerIds: readonly number[],
+  save: (pending: FileContentSaveRequest) => void,
+  clearTimer: (timerId: number) => void,
+): void {
+  for (const pending of Object.values(pendingByFileId)) save(pending);
+  for (const timerId of timerIds) clearTimer(timerId);
+}
+
+/**
+ * Pure decision helper (exported for unit testing) for the pagehide/unload
+ * keepalive: should it be sent at all?
+ *
+ * The keepalive posts a full-document `content` write with `keepalive: true`.
+ * Its operation source/revision prevents older same-tab requests from
+ * overwriting it, but there is no round trip to recover from a cross-writer
+ * hash rejection. When collab is live (this pending save's `syncCollab` is
+ * false) and we don't have a known acked hash, skip it: the Yjs document
+ * already holds the current content, while an unguarded full replacement
+ * could still conflict with a different writer. Every other combination
+ * (collab not live, or a hash IS known) sends the versioned keepalive.
+ */
+export function shouldSendKeepalive(
+  hashKnown: boolean,
+  collabLive: boolean,
+): boolean {
+  return hashKnown || !collabLive;
+}

package/corpus/templates/design/app/pages/design-editor/export-capture.ts

@@ -0,0 +1,115 @@
+/**
+ * Editor-chrome overlays that editor-chrome.bridge.ts appends inside the preview
+ * iframe (the selection outline + resize handles, hover highlight, marquee,
+ * spacing/measurement guides, and badges). They live in the iframe DOM, so image
+ * exports must strip them from the clone — otherwise a download captures the
+ * editor's selection outline instead of just the design. Keep this in sync with
+ * the data-agent-native-* markers set in editor-chrome.bridge.ts.
+ */
+export const EDITOR_CHROME_OVERLAY_SELECTOR = [
+  "[data-agent-native-edit-overlay]",
+  "[data-agent-native-edit-handle]",
+  "[data-agent-native-edge-handle]",
+  "[data-agent-native-rotate-handle]",
+  "[data-agent-native-transform-badge]",
+  "[data-agent-native-spacing-badge]",
+  "[data-agent-native-spacing-overlay]",
+  "[data-agent-native-spacing-line]",
+  "[data-agent-native-spacing-region]",
+  "[data-agent-native-insertion-guide]",
+  "[data-agent-native-measurement-overlay]",
+].join(",");
+
+export interface ExportCropRect {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+/** Return the smallest document-space rectangle containing every valid item. */
+export function unionExportCropRects(
+  rects: readonly ExportCropRect[],
+): ExportCropRect | null {
+  const valid = rects.filter(
+    (rect) =>
+      Number.isFinite(rect.x) &&
+      Number.isFinite(rect.y) &&
+      Number.isFinite(rect.width) &&
+      Number.isFinite(rect.height) &&
+      rect.width > 0 &&
+      rect.height > 0,
+  );
+  if (valid.length === 0) return null;
+  const left = Math.min(...valid.map((rect) => rect.x));
+  const top = Math.min(...valid.map((rect) => rect.y));
+  const right = Math.max(...valid.map((rect) => rect.x + rect.width));
+  const bottom = Math.max(...valid.map((rect) => rect.y + rect.height));
+  return { x: left, y: top, width: right - left, height: bottom - top };
+}
+
+export interface ExportCompositeFrame extends ExportCropRect {
+  rotation?: number;
+}
+
+/**
+ * Resolve the world-space bounds of selected screen frames, including rotation,
+ * so a multi-frame clipboard image preserves the same spacing as the canvas.
+ */
+export function getExportCompositeBounds(
+  frames: readonly ExportCompositeFrame[],
+): ExportCropRect | null {
+  return unionExportCropRects(
+    frames.flatMap((frame) => {
+      if (frame.width <= 0 || frame.height <= 0) return [];
+      const radians = ((frame.rotation ?? 0) * Math.PI) / 180;
+      if (radians === 0) return [frame];
+      const centerX = frame.x + frame.width / 2;
+      const centerY = frame.y + frame.height / 2;
+      const cosine = Math.cos(radians);
+      const sine = Math.sin(radians);
+      const corners = [
+        [-frame.width / 2, -frame.height / 2],
+        [frame.width / 2, -frame.height / 2],
+        [frame.width / 2, frame.height / 2],
+        [-frame.width / 2, frame.height / 2],
+      ].map(([x, y]) => ({
+        x: centerX + x * cosine - y * sine,
+        y: centerY + x * sine + y * cosine,
+      }));
+      const left = Math.min(...corners.map((corner) => corner.x));
+      const top = Math.min(...corners.map((corner) => corner.y));
+      const right = Math.max(...corners.map((corner) => corner.x));
+      const bottom = Math.max(...corners.map((corner) => corner.y));
+      return [{ x: left, y: top, width: right - left, height: bottom - top }];
+    }),
+  );
+}
+
+/**
+ * Map a document-space rect onto pixel coordinates within a rendered canvas of
+ * the given size, clamped to stay inside the canvas. `scale` must match the
+ * scale passed to html2canvas. Returns null when the crop would be empty or
+ * lands fully outside the canvas, so callers can fall back to the full render.
+ */
+export function computeExportCropBox(
+  sourceWidth: number,
+  sourceHeight: number,
+  rect: { x: number; y: number; width: number; height: number },
+  scale: number,
+): { sx: number; sy: number; sw: number; sh: number } | null {
+  const sx = Math.max(0, Math.round(rect.x * scale));
+  const sy = Math.max(0, Math.round(rect.y * scale));
+  const right = Math.min(
+    sourceWidth,
+    Math.round((rect.x + rect.width) * scale),
+  );
+  const bottom = Math.min(
+    sourceHeight,
+    Math.round((rect.y + rect.height) * scale),
+  );
+  const sw = right - sx;
+  const sh = bottom - sy;
+  if (sw <= 0 || sh <= 0) return null;
+  return { sx, sy, sw, sh };
+}

package/corpus/templates/design/app/pages/design-editor/geometry-persistence.ts

@@ -0,0 +1,93 @@
+import type {
+  CanvasFrameGeometry,
+  CanvasFrameGeometryById,
+} from "@shared/canvas-frames";
+
+export function frameGeometryEquals(
+  a: CanvasFrameGeometry | undefined,
+  b: CanvasFrameGeometry | undefined,
+): boolean {
+  return JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
+}
+
+export function geometrySnapshotsEqual(
+  a: CanvasFrameGeometryById,
+  b: CanvasFrameGeometryById,
+): boolean {
+  if (a === b) return true;
+  const aKeys = Object.keys(a);
+  const bKeys = Object.keys(b);
+  if (aKeys.length !== bKeys.length) return false;
+  return aKeys.every((key) => key in b && frameGeometryEquals(a[key], b[key]));
+}
+
+export const MAX_SANE_FRAME_DIMENSION_PX = 100000;
+export const MAX_SANE_FRAME_ASPECT_RATIO = 50;
+
+export function isSaneCanvasFrameGeometryForPersist(
+  geometry: CanvasFrameGeometry,
+): boolean {
+  const numericFields = [
+    geometry.x,
+    geometry.y,
+    geometry.width,
+    geometry.height,
+    geometry.rotation,
+    geometry.z,
+  ];
+  if (
+    numericFields.some(
+      (value) => value !== undefined && !Number.isFinite(value),
+    )
+  ) {
+    return false;
+  }
+  const { width, height } = geometry;
+  if (
+    width !== undefined &&
+    (width <= 0 || width > MAX_SANE_FRAME_DIMENSION_PX)
+  ) {
+    return false;
+  }
+  if (
+    height !== undefined &&
+    (height <= 0 || height > MAX_SANE_FRAME_DIMENSION_PX)
+  ) {
+    return false;
+  }
+  if (width !== undefined && height !== undefined) {
+    const aspect = Math.max(width / height, height / width);
+    if (aspect > MAX_SANE_FRAME_ASPECT_RATIO) return false;
+  }
+  return true;
+}
+
+export function sanitizeCanvasFrameGeometryForPersist(
+  nextById: CanvasFrameGeometryById,
+  previousById: CanvasFrameGeometryById,
+  exemptFrameIds: readonly string[] = [],
+): { geometryById: CanvasFrameGeometryById; rejectedFrameIds: string[] } {
+  const rejectedFrameIds: string[] = [];
+  let sanitized: CanvasFrameGeometryById | null = null;
+  for (const [frameId, geometry] of Object.entries(nextById)) {
+    if (exemptFrameIds.includes(frameId)) continue;
+    if (isSaneCanvasFrameGeometryForPersist(geometry)) continue;
+    rejectedFrameIds.push(frameId);
+    if (sanitized === null) sanitized = { ...nextById };
+    const previous = previousById[frameId];
+    console.warn(
+      "[design] rejected insane canvas frame geometry on persist — reverted to previous geometry",
+      {
+        frameId,
+        rejected: geometry,
+        revertedTo: previous ?? null,
+      },
+    );
+    if (previous && isSaneCanvasFrameGeometryForPersist(previous)) {
+      sanitized[frameId] = { ...previous };
+    } else {
+      delete sanitized[frameId];
+    }
+  }
+  return { geometryById: sanitized ?? nextById, rejectedFrameIds };
+}