@agent-native/core 0.98.0 → 0.98.2

package/corpus/templates/plan/.agents/skills/visual-recap/references/local-files.md

@@ -36,9 +36,9 @@ The local-files contract:
   — encode multiline code as JSON string attributes such as `code={"const x =\n  y"}`
   (a static template literal is accepted only when it has no `${...}`
   interpolation). `plan local check` is a quick OFFLINE lint (a subset of the
-  renderer schema), so a green `check` does not guarantee the plan renders;
-  `plan local verify` is the authoritative validation against the real renderer
-  schema.
+  renderer schema), so a green `check` does not guarantee the plan renders.
+  `plan local verify` also stays on-device: it uses the offline lint unless it
+  can reach a Plan renderer on an explicit loopback `--app-url`.
 - **Write a local MDX folder.** Use `plans/<slug>/` to check the artifact into the
   repo, or a repo-ignored/temporary folder such as `.agent-native/plans/<slug>/`
   or `/tmp/agent-native-plans/<slug>/` when it should not be checked in. The
@@ -53,7 +53,10 @@ The local-files contract:
   (use `--kind plan` for plans, `--kind recap` for recaps). Report the local
   bridge URL from stdout or `<plan-dir>/.plan-url`; treat `.plan-url` as a local
   token file and do not commit it. The URL opens the hosted Plan UI but reads from
-  the localhost bridge on this machine, so it is not shareable across machines. On
+  the localhost bridge on this machine, so it is not shareable across machines.
+  The token is carried in the URL fragment (which is not sent to the hosted
+  origin), and the local-plan route disables DOM autocapture and session replay
+  while retaining sanitized pageviews and error monitoring. On
   macOS `--open` prefers Chromium browsers; if Safari opens, switch to
   Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the
   HTTP localhost bridge. If the Plan app itself is running locally with the same
@@ -63,14 +66,16 @@ The local-files contract:
   running local Plan app.
 - **Headless verify.** Run
   `npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>`.
-  It starts the bridge, checks the private-network preflight and JSON payload, AND
-  validates the content against the real renderer schema via the Plan app's
-  `validate-local-plan-source` action. A non-`ok` result with
+  It starts the bridge and checks the private-network preflight and JSON payload
+  entirely on loopback. It never sends MDX or assets to a remote validation
+  action. When `--app-url` points to a loopback Plan app, verify also validates
+  against that local app's real renderer schema via `validate-local-plan-source`.
+  A non-`ok` result with
   `validation.valid: false` lists the renderer's exact schema-path issues (e.g.
   `blocks[1].data.tabs[0]...`); fix those before handing off. If `validation.ran`
-  is `false`, the Plan app did not expose the validate endpoint (older/unreachable
-  deploy) — point `--app-url` at a current Plan app (e.g. a local
-  `http://localhost:8096`) for the authoritative check. If the browser hangs on
+  is `false`, verify used the offline lint because the app URL was remote or the
+  local Plan app was unavailable. Run a local Plan app and pass
+  `--app-url http://localhost:8096` for the authoritative check. If the browser hangs on
   "Loading plan", fetch the `bridgeUrl` from the verify/serve JSON to read the
   concrete validation error.
 - **Never call hosted tools for that plan/recap.** Do not call
@@ -86,8 +91,8 @@ The local-files contract:
   attachment, and publish/export receipts are unavailable until the user
   explicitly opts into publishing.
 
-Local-files mode only prevents plan/recap content from reaching the Agent-Native
-Plan database. It does not by itself make the coding agent's language model local;
+Local-files mode prevents plan/recap content from being uploaded to the
+Agent-Native Plan server or database. It does not by itself make the coding agent's language model local;
 for that stronger boundary the host agent/model must also be local or otherwise
 approved by the user.
 

package/corpus/templates/plan/actions/validate-local-plan-source.ts

@@ -13,8 +13,8 @@ import { parsePlanMdxFolder, planMdxFileSchema } from "../server/plan-mdx.js";
  *
  * It is intentionally a pure parse: it accepts the posted MDX folder, never
  * reads `schema.plans`, never touches the filesystem, and never writes to the
- * database. That keeps it safe to expose without auth so the offline-friendly
- * `plan local verify` CLI can call it against a local or hosted Plan app.
+ * database. The local-files CLI calls it only on an explicit loopback Plan app;
+ * it never posts private source to this action on a hosted deployment.
  */
 
 // Covers the CLI's 10 MiB raw asset cap (~13.3 MiB base64) plus MDX text, so
@@ -63,7 +63,7 @@ function toValidationIssues(error: unknown): ValidationIssue[] {
 
 export default defineAction({
   description:
-    "Validate a local plan MDX folder against the live Plan renderer schema (parsePlanMdxFolder + planContentSchema). Returns { valid, issues } where issues carry the renderer's exact schema path (e.g. blocks[1].data.items[0].id). Use this to confirm a plan will render before handing it off — it is the authoritative check behind `plan local verify`. Pure parse: no database, filesystem, or schema.plans access.",
+    "Validate a plan MDX folder against this Plan app's renderer schema (parsePlanMdxFolder + planContentSchema). Returns { valid, issues } where issues carry the renderer's exact schema path (e.g. blocks[1].data.items[0].id). The local-files CLI calls this only on loopback Plan apps so private source stays on-device. Pure parse: no database, filesystem, or schema.plans access.",
   schema: z.object({
     mdx: planMdxFileSchema.describe(
       "The plan MDX folder: plan.mdx plus optional canvas.mdx, prototype.mdx, .plan-state.json, and assets/.",
@@ -81,7 +81,7 @@ export default defineAction({
     requiresAuth: false,
     title: "Validate Local Plan Source",
     description:
-      "Validate a local plan MDX folder against the real renderer schema without touching the database.",
+      "Validate a plan MDX folder against this app's renderer schema without touching the database.",
   },
   run: async (args) => {
     let totalBytes = 0;

package/corpus/templates/plan/app/components/layout/Sidebar.tsx

@@ -62,6 +62,7 @@ import {
 } from "@/components/ui/tooltip";
 import { usePlans } from "@/hooks/use-plans";
 import { APP_TITLE } from "@/lib/app-config";
+import { planReturnPathFromLocation } from "@/lib/plan-local-bridge";
 import { cn } from "@/lib/utils";
 
 const PLAN_CHAT_STORAGE_KEY = "plans";
@@ -651,7 +652,7 @@ export function Sidebar({
   const location = useLocation();
   const { session, isLoading: sessionLoading } = useSession();
   const t = useT();
-  const returnPath = `${location.pathname}${location.search}${location.hash}`;
+  const returnPath = planReturnPathFromLocation(location);
   const ToggleIcon = collapsed
     ? IconLayoutSidebarLeftExpand
     : IconLayoutSidebarLeftCollapse;

package/corpus/templates/plan/app/hooks/use-navigation-state.ts

@@ -55,7 +55,10 @@ export function useNavigationState() {
     }).catch(() => {});
   }, [location.pathname, location.search]);
 
-  // Listen for navigate commands from agent
+  // Listen for one-shot navigate commands from the agent. useDbSync
+  // invalidates this exact key when the shared SSE/poll transport receives an
+  // app-state:navigate event, so this stays idle between real commands instead
+  // of charging the host for a request every two seconds.
   const { data: navCommand } = useQuery({
     queryKey: ["navigate-command"],
     queryFn: async () => {
@@ -70,7 +73,7 @@ export function useNavigationState() {
       }
       return null;
     },
-    refetchInterval: 2_000,
+    retry: false,
     structuralSharing: false,
   });
 

package/corpus/templates/plan/app/hooks/use-plans.ts

@@ -17,7 +17,6 @@ import type {
   PlanVersionListResponse,
 } from "@shared/types";
 import { useQueryClient, type UseQueryOptions } from "@tanstack/react-query";
-import type { RefObject } from "react";
 import { toast } from "sonner";
 
 import type { PlanMdxFolder } from "@/lib/desktop-plan-files";
@@ -337,23 +336,17 @@ export function localPlanBundleQueryKey(slug: string, path?: string | null) {
   ] as const;
 }
 
-export function usePlan(
-  id?: string,
-  pausePollRef?: RefObject<boolean> | { current: boolean },
-) {
+export function usePlan(id?: string) {
   return useActionQuery<PlanBundle & { html?: string }>(
     "get-visual-plan",
     planBundleQueryParams(id ?? ""),
     {
       enabled: !!id,
-      // Pause the 3-second poll while a comment mutation is in-flight so
-      // an optimistic comment inserted into the cache isn't evicted before
-      // the server write commits (Issue 4a).
-      refetchInterval: (query: { state: { status: string } }) => {
-        if (query.state.status === "error") return false;
-        if (pausePollRef?.current) return false;
-        return 3_000;
-      },
+      // Mutating actions and collaboration writes already arrive through the
+      // shared useDbSync SSE/poll transport, which invalidates active action
+      // reads. Keep the last bundle visible during that targeted refresh and
+      // avoid repeatedly downloading the full plan while nothing changed.
+      placeholderData: (previous) => previous,
     },
   );
 }

package/corpus/templates/plan/app/lib/plan-local-bridge.ts

@@ -67,6 +67,47 @@ export class LocalPlanBridgePermissionError extends Error {
   }
 }
 
+type LocalPlanBridgeSessionStorage = Pick<Storage, "getItem" | "setItem">;
+
+function browserSessionStorage(): LocalPlanBridgeSessionStorage | null {
+  if (typeof window === "undefined") return null;
+  try {
+    return window.sessionStorage;
+  } catch {
+    return null;
+  }
+}
+
+export function localPlanBridgeUrlFromLocation(
+  hash: string,
+  slug: string,
+  storage: LocalPlanBridgeSessionStorage | null = browserSessionStorage(),
+): string | null {
+  const hashParams = hash.startsWith("#bridge=")
+    ? new URLSearchParams(hash.slice(1))
+    : null;
+  const bridgeUrl = hashParams?.get("bridge") ?? null;
+  const storageKey = `agent-native.local-plan-bridge.${slug}`;
+  try {
+    if (bridgeUrl) {
+      storage?.setItem(storageKey, bridgeUrl);
+      return bridgeUrl;
+    }
+    return storage?.getItem(storageKey) ?? null;
+  } catch {
+    return bridgeUrl;
+  }
+}
+
+export function planReturnPathFromLocation(location: {
+  pathname: string;
+  search: string;
+  hash: string;
+}): string {
+  const safeHash = location.hash.startsWith("#bridge=") ? "" : location.hash;
+  return `${location.pathname}${location.search}${safeHash}`;
+}
+
 export async function localNetworkAccessPermissionState(): Promise<
   Exclude<LocalNetworkAccessPermissionState, "checking">
 > {

package/corpus/templates/plan/app/lib/plan-tracking.ts

@@ -0,0 +1,3 @@
+export function shouldCapturePlanContent(pathname: string): boolean {
+  return !(pathname === "/local-plans" || pathname.startsWith("/local-plans/"));
+}

package/corpus/templates/plan/app/pages/PlansPage.tsx

@@ -273,11 +273,13 @@ import { planDocumentTitle } from "@/lib/plan-document-title";
 import {
   fetchLocalPlanBridgeBundle,
   localNetworkAccessPermissionState,
+  localPlanBridgeUrlFromLocation,
   localPlanBridgeQueryKey,
   localPlanBridgeRetryDelay,
   localPlanRoutePath,
   localPlanRouteUrl,
   mergeLocalBridgeComments,
+  planReturnPathFromLocation,
   shouldRetryLocalPlanBridgeBundle,
   shouldShowLocalPlanLoadError,
   shouldShowPlanLoadError,
@@ -2018,16 +2020,16 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
   // Ref that signals the 3-second poll to pause while a comment mutation is
   // in-flight. Prevents poll-driven cache replacement from evicting optimistic
   // comments before the server write commits (Issue 4a).
-  const commentMutationPendingRef = useRef(false);
   const { session, isLoading: sessionLoading } = useSession();
   const localPlanMode = Boolean(localPlanSlug);
   const routeSearchParams = useMemo(
     () => new URLSearchParams(location.search),
     [location.search],
   );
-  const localPlanBridgeUrl = localPlanMode
-    ? routeSearchParams.get("bridge")
-    : null;
+  const localPlanBridgeUrl =
+    localPlanMode && localPlanSlug
+      ? localPlanBridgeUrlFromLocation(location.hash, localPlanSlug)
+      : null;
   const localPlanRepoPath = localPlanMode
     ? routeSearchParams.get("path")
     : null;
@@ -2138,8 +2140,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
   // Redirect to sign-in, returning to wherever the guest currently is.
   const openSignIn = useCallback((returnOverride?: string) => {
     const returnPath =
-      returnOverride ??
-      window.location.pathname + window.location.search + window.location.hash;
+      returnOverride ?? planReturnPathFromLocation(window.location);
     window.location.href = `${agentNativePath(
       "/_agent-native/sign-in",
     )}?return=${encodeURIComponent(returnPath)}`;
@@ -2217,10 +2218,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
   const immersiveReader = Boolean(
     selectedId && (planFullscreen || prototypeOnly),
   );
-  const planQuery = usePlan(
-    localPlanMode ? undefined : selectedId,
-    commentMutationPendingRef,
-  );
+  const planQuery = usePlan(localPlanMode ? undefined : selectedId);
   const bundle = localPlanMode ? localPlanData : planQuery.data;
   const localPlanBundle =
     localPlanMode && bundle && "localOnly" in bundle
@@ -2296,8 +2294,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
     }
   }, [accessRequestSentPlanId, selectedId]);
   const startGoogleSignIn = useCallback(async () => {
-    const returnPath =
-      window.location.pathname + window.location.search + window.location.hash;
+    const returnPath = planReturnPathFromLocation(window.location);
     try {
       const res = await fetch(
         `${agentNativePath("/_agent-native/google/auth-url")}?return=${encodeURIComponent(returnPath)}`,
@@ -4550,8 +4547,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
     };
     clearPendingDocumentRestore();
     pendingDocumentRestoreRef.current = documentStateRef.current;
-    commentMutationPendingRef.current = true;
-    // Await the cancel so an in-flight 3s poll can't resolve *after* our
+    // Await the cancel so an in-flight sync refresh can't resolve *after* our
     // optimistic write and revert it (the "comment lagged / didn't stick"
     // symptom). cancelQueries reverts outstanding fetches before we patch.
     await queryClient.cancelQueries({ queryKey: selectedPlanQueryKey });
@@ -4588,9 +4584,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
         setInlineCommentPosition(
           getPositionFromAnchor(anchor) ?? capturedPosition,
         );
-      })
-      .finally(() => {
-        commentMutationPendingRef.current = false;
       });
   };
 
@@ -4606,7 +4599,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
         annotation.anchor.resolutionTarget,
       ),
     };
-    commentMutationPendingRef.current = true;
     void writeComments(
       [
         {
@@ -4629,9 +4621,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
       })
       .catch(() => {
         // The mutation hook surfaces the failure toast; just clear pending.
-      })
-      .finally(() => {
-        commentMutationPendingRef.current = false;
       });
   };
 
@@ -4669,8 +4658,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
       createdAt: now,
       updatedAt: now,
     };
-    commentMutationPendingRef.current = true;
-    // Await the cancel so an in-flight 3s poll can't resolve *after* our
+    // Await the cancel so an in-flight sync refresh can't resolve *after* our
     // optimistic write and revert it (the "comment lagged / didn't stick"
     // symptom). cancelQueries reverts outstanding fetches before we patch.
     await queryClient.cancelQueries({ queryKey: selectedPlanQueryKey });
@@ -4709,8 +4697,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
           current ? removePlanCommentFromBundle(current, replyId) : current,
       );
       throw new Error("Could not send reply. Try again.");
-    } finally {
-      commentMutationPendingRef.current = false;
     }
   };
 
@@ -4729,8 +4715,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
     // popover update without waiting for the server round-trip (Issue 3).
     const prevBundle =
       queryClient.getQueryData<PlanBundleWithHtml>(selectedPlanQueryKey);
-    commentMutationPendingRef.current = true;
-    // Await the cancel so an in-flight 3s poll can't resolve *after* our
+    // Await the cancel so an in-flight sync refresh can't resolve *after* our
     // optimistic write and revert it (the "comment lagged / didn't stick"
     // symptom). cancelQueries reverts outstanding fetches before we patch.
     await queryClient.cancelQueries({ queryKey: selectedPlanQueryKey });
@@ -4777,9 +4762,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
         if (prevBundle !== undefined) {
           queryClient.setQueryData(selectedPlanQueryKey, prevBundle);
         }
-      })
-      .finally(() => {
-        commentMutationPendingRef.current = false;
       });
   };
 
@@ -4802,8 +4784,7 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
     const prevBundle =
       queryClient.getQueryData<PlanBundleWithHtml>(selectedPlanQueryKey);
     const commentId = request.commentId;
-    commentMutationPendingRef.current = true;
-    // Await the cancel so an in-flight 3s poll can't resolve *after* our
+    // Await the cancel so an in-flight sync refresh can't resolve *after* our
     // optimistic write and revert it (the "comment lagged / didn't stick"
     // symptom). cancelQueries reverts outstanding fetches before we patch.
     await queryClient.cancelQueries({ queryKey: selectedPlanQueryKey });
@@ -4826,8 +4807,6 @@ export function PlansPage({ localPlanSlug }: { localPlanSlug?: string } = {}) {
         queryClient.setQueryData(selectedPlanQueryKey, prevBundle);
       }
       setDeleteCommentRequest(request);
-    } finally {
-      commentMutationPendingRef.current = false;
     }
   };
 
@@ -6848,8 +6827,7 @@ function PlanLoadError({
       ? t("plansPage.loadError.orgTitle", { orgName })
       : null;
 
-  const returnPath = () =>
-    window.location.pathname + window.location.search + window.location.hash;
+  const returnPath = () => planReturnPathFromLocation(window.location);
 
   const readAuthError = async (res: Response, fallback: string) => {
     const data = (await res.json().catch(() => null)) as {

package/corpus/templates/plan/app/root.tsx

@@ -20,7 +20,7 @@ import {
 } from "@tabler/icons-react";
 import { useQueryClient } from "@tanstack/react-query";
 import { useTheme } from "next-themes";
-import { useCallback, useState } from "react";
+import { useCallback, useEffect, useState } from "react";
 import {
   Links,
   Meta,
@@ -44,13 +44,17 @@ import { useNavigationState } from "@/hooks/use-navigation-state";
 // their diagram/wireframe/api-spec blocks inline in the agent chat.
 import "@/lib/register-chat-renderers";
 import { APP_TITLE } from "@/lib/app-config";
+import { shouldCapturePlanContent } from "@/lib/plan-tracking";
 import { TAB_ID } from "@/lib/tab-id";
 
 import changelog from "../CHANGELOG.md?raw";
 import { i18nCatalog } from "./i18n";
 
 import stylesheet from "./global.css?url";
+// Keep standard pageviews, explicit analytics, and Sentry on local-plan routes,
+// but disable DOM/session capture so rendered plan contents stay on-device.
 configureTracking({
+  contentCaptureForPath: shouldCapturePlanContent,
   getDefaultProps: (_name, properties) => ({
     ...properties,
     app: "plan",
@@ -221,6 +225,7 @@ export default function Root() {
     location.pathname.startsWith("/recaps/") ||
     location.pathname === "/local-plans" ||
     location.pathname.startsWith("/local-plans/");
+  const localPlanPrivacyRoute = !shouldCapturePlanContent(location.pathname);
   return (
     // Pass the plan-specific styled Toaster via `toaster` so only one sonner
     // instance renders (avoids the duplicate that would appear if AppProviders'
@@ -232,8 +237,13 @@ export default function Root() {
         toaster={<Toaster richColors position="bottom-left" />}
         i18n={{ catalog: i18nCatalog }}
       >
-        <DbSyncSetup />
-        <AppContent />
+        <div
+          data-an-mask={localPlanPrivacyRoute ? "" : undefined}
+          style={{ display: "contents" }}
+        >
+          <DbSyncSetup />
+          <AppContent />
+        </div>
       </AppProviders>
     </AppToolkitProvider>
   );

package/corpus/templates/plan/changelog/2026-07-11-plan-refreshes-only-when-content-changes.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-11
+---
+
+Plan pages stay current while making far fewer background requests when nothing has changed.

package/corpus/templates/plan/changelog/2026-07-12-local-plan-source-now-stays-on-device.md

@@ -0,0 +1,6 @@
+---
+type: security
+date: 2026-07-12
+---
+
+Local plan source now stays on your device during verification and is excluded from content autocapture and session replay.

package/corpus/templates/slides/app/components/comments/SlideCommentsPanel.tsx

@@ -336,7 +336,10 @@ function ThreadCard({
                     <TooltipTrigger asChild>
                       <button
                         onClick={() =>
-                          resolveComment.mutate({ id: rootComment.id })
+                          resolveComment.mutate({
+                            id: rootComment.id,
+                            resolved: true,
+                          })
                         }
                         className="p-0.5 rounded text-muted-foreground hover:text-green-400"
                       >

package/corpus/templates/slides/app/components/editor/EditorToolbar.tsx

@@ -1023,7 +1023,7 @@ graph TD
         </DropdownMenuContent>
       </DropdownMenu>
 
-      <RunsTray />
+      <RunsTray pollMs={0} />
       <AgentToggleButton />
     </div>
   );

package/corpus/templates/slides/app/components/layout/Header.tsx

@@ -66,7 +66,7 @@ export function Header() {
       </div>
       <div className="flex items-center gap-2 shrink-0">
         {actions}
-        <RunsTray />
+        <RunsTray pollMs={0} />
         <AgentToggleButton />
       </div>
     </header>

package/corpus/templates/slides/app/context/DeckContext.tsx

@@ -1452,6 +1452,7 @@ export function DeckProvider({ children }: { children: ReactNode }) {
         es.close();
         es = null;
       }
+      // request-storm-allow: one deck-scoped SSE with backoff and unmount cleanup carries payloads sync events omit.
       const next = new EventSource(`${appBasePath()}/api/decks/events`);
       es = next;
       next.onmessage = handleMessage;

package/corpus/templates/slides/app/hooks/use-slide-comments.ts

@@ -1,10 +1,8 @@
 import {
-  appBasePath,
   emailToColor,
   useActionMutation,
   useActionQuery,
 } from "@agent-native/core/client";
-import { useMutation, useQueryClient } from "@tanstack/react-query";
 
 export interface SlideComment {
   id: string;
@@ -50,12 +48,6 @@ function groupIntoThreads(comments: SlideComment[]): CommentThread[] {
   return Array.from(map.values());
 }
 
-async function fetchJson<T>(url: string, init?: RequestInit): Promise<T> {
-  const res = await fetch(url, init);
-  if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);
-  return res.json();
-}
-
 export function useSlideComments(
   deckId: string | null,
   slideId: string | null,
@@ -71,7 +63,6 @@ export function useSlideComments(
         const comments: SlideComment[] = Array.isArray(raw) ? raw : [];
         return groupIntoThreads(comments);
       },
-      refetchInterval: 3000,
     },
   );
 }
@@ -81,31 +72,16 @@ export function useCreateSlideComment() {
 }
 
 export function useResolveSlideComment() {
-  const qc = useQueryClient();
-  return useMutation({
-    mutationFn: ({ id }: { id: string }) =>
-      fetchJson<{ ok: boolean }>(`${appBasePath()}/api/comments/${id}`, {
-        method: "PATCH",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ resolved: true }),
-      }),
-    onSuccess: () => {
-      qc.invalidateQueries({ queryKey: ["action"] });
-    },
-  });
+  return useActionMutation<
+    { ok: boolean; resolved?: boolean },
+    { id: string; resolved?: boolean }
+  >("update-slide-comment");
 }
 
 export function useDeleteSlideComment() {
-  const qc = useQueryClient();
-  return useMutation({
-    mutationFn: ({ id }: { id: string }) =>
-      fetchJson<{ ok: boolean }>(`${appBasePath()}/api/comments/${id}`, {
-        method: "DELETE",
-      }),
-    onSuccess: () => {
-      qc.invalidateQueries({ queryKey: ["action"] });
-    },
-  });
+  return useActionMutation<{ ok: boolean }, { id: string }>(
+    "delete-slide-comment",
+  );
 }
 
 /** Derive a display color for an author email */

package/corpus/templates/slides/changelog/2026-07-11-comments-now-update-from-live-collaboration-events-without-c.md

@@ -0,0 +1,6 @@
+---
+type: improved
+date: 2026-07-11
+---
+
+Comments now update from live collaboration events without continuous background requests

package/dist/action-change-marker.d.ts

@@ -4,6 +4,7 @@ export interface ActionChangeTarget {
     actionName?: string;
     owner?: string;
     orgId?: string;
+    requestSource?: string;
 }
 export declare function actionChangeMarkerSession(target: ActionChangeTarget): string | null;
 export declare function actionChangeMarkerValue(target: ActionChangeTarget): Record<string, string>;

package/dist/action-change-marker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-change-marker.d.ts","sourceRoot":"","sources":["../src/action-change-marker.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,eAAO,MAAM,+BAA+B,aAAa,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,kBAAkB,GACzB,MAAM,GAAG,IAAI,CAIf;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAmC3B"}
+{"version":3,"file":"action-change-marker.d.ts","sourceRoot":"","sources":["../src/action-change-marker.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,eAAO,MAAM,+BAA+B,aAAa,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,kBAAkB,GACzB,MAAM,GAAG,IAAI,CAIf;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,GACb,kBAAkB,GAAG,IAAI,CAwC3B"}

package/dist/action-change-marker.js

@@ -13,6 +13,7 @@ export function actionChangeMarkerValue(target) {
         ...(target.actionName ? { actionName: target.actionName } : {}),
         ...(target.owner ? { owner: target.owner } : {}),
         ...(target.orgId ? { orgId: target.orgId } : {}),
+        ...(target.requestSource ? { requestSource: target.requestSource } : {}),
     };
 }
 export function parseActionChangeMarker(sessionId, value) {
@@ -28,12 +29,17 @@ export function parseActionChangeMarker(sessionId, value) {
     let actionName;
     let owner;
     let orgId;
+    let requestSource;
     if (parsed && typeof parsed === "object") {
         const record = parsed;
         actionName =
             typeof record.actionName === "string" ? record.actionName : undefined;
         owner = typeof record.owner === "string" ? record.owner : undefined;
         orgId = typeof record.orgId === "string" ? record.orgId : undefined;
+        requestSource =
+            typeof record.requestSource === "string"
+                ? record.requestSource
+                : undefined;
     }
     if (!owner && !orgId && typeof sessionId === "string" && sessionId) {
         if (sessionId.startsWith(ACTION_CHANGE_MARKER_ORG_PREFIX)) {
@@ -47,6 +53,6 @@ export function parseActionChangeMarker(sessionId, value) {
     }
     if (!actionName && !owner && !orgId)
         return null;
-    return { actionName, owner, orgId };
+    return { actionName, owner, orgId, requestSource };
 }
 //# sourceMappingURL=action-change-marker.js.map