@agent-native/core 0.154.4 → 0.155.0

package/dist/client/chat-first/primary-nav.js

@@ -1,13 +1,13 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { IconClock, IconPlus, IconPlugConnected, IconSearch, } from "@tabler/icons-react";
 import { defaultChatFirstCopy } from "./copy.js";
-export function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, activeTab, stickyNewChat = false, copy = defaultChatFirstCopy, }) {
+export function ChatFirstPrimaryNavigation({ onNewChat, onOpenIntegrations, onOpenScheduled, onSearch, activeTab, collapsed = false, stickyNewChat = false, copy = defaultChatFirstCopy, }) {
     const tabClassName = (tab) => `flex h-8 w-full items-center gap-2 rounded-md px-2 text-[13px] font-medium transition-[background-color,color] focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring ${activeTab === tab
         ? "bg-sidebar-accent text-sidebar-accent-foreground"
         : "text-sidebar-foreground/80 hover:bg-sidebar-accent hover:text-sidebar-accent-foreground"}`;
-    const renderTab = (tab, content, onSelect, className) => (_jsx("button", { type: "button", role: "tab", "aria-selected": activeTab === tab, className: [tabClassName(tab), className].filter(Boolean).join(" "), onClick: onSelect, children: content }));
+    const renderTab = (tab, content, onSelect, className) => (_jsx("button", { type: "button", role: "tab", "aria-selected": activeTab === tab, "aria-label": tab === "new-chat" ? copy("newChat") : undefined, title: tab === "new-chat" && collapsed ? copy("newChat") : undefined, className: [tabClassName(tab), className].filter(Boolean).join(" "), onClick: onSelect, children: content }));
     const newChatTab = onNewChat
-        ? renderTab("new-chat", _jsxs(_Fragment, { children: [_jsx(IconPlus, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("newChat") })] }), onNewChat, "code-agents-primary-new-chat")
+        ? renderTab("new-chat", _jsxs(_Fragment, { children: [_jsx(IconPlus, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { className: collapsed ? "sr-only" : undefined, children: copy("newChat") })] }), onNewChat, "code-agents-primary-new-chat")
         : null;
     const integrationsTab = renderTab("integrations", _jsxs(_Fragment, { children: [_jsx(IconPlugConnected, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("integrations") })] }), onOpenIntegrations);
     const scheduledTab = renderTab("scheduled", _jsxs(_Fragment, { children: [_jsx(IconClock, { size: 15, className: "shrink-0", "aria-hidden": "true" }), _jsx("span", { children: copy("scheduled") })] }), onOpenScheduled);

package/dist/client/chat-first/types.d.ts

@@ -8,6 +8,10 @@ export interface ChatFirstAppItem {
     color?: string;
 }
 export type ChatFirstCopy = (key: string, values?: Record<string, string>) => string;
+export interface ChatFirstAppIconRenderOptions {
+    isActive: boolean;
+    isInactive: boolean;
+}
 export interface ChatFirstEmbedTarget {
     url: string;
     title?: string;
@@ -51,7 +55,7 @@ export interface ChatFirstAppRailProps {
     onOpenAllApps?: () => void;
     onCreateApp?: () => void;
     createAppTrigger?: ReactNode;
-    renderIcon: (app: ChatFirstAppItem) => ReactNode;
+    renderIcon: (app: ChatFirstAppItem, options?: ChatFirstAppIconRenderOptions) => ReactNode;
     copy?: ChatFirstCopy;
 }
 export interface ChatFirstBrowserPaneProps {

package/dist/client/markdown/InlineMarkdown.d.ts

@@ -0,0 +1,23 @@
+import type { ReactNode } from "react";
+export interface InlineMarkdownProps {
+    content: string;
+    className?: string;
+    linkClassName?: string;
+    codeClassName?: string;
+    inline?: boolean;
+    protectedSpans?: readonly InlineMarkdownProtectedSpan[];
+    renderProtectedSpan?: (span: InlineMarkdownProtectedSpan, children: ReactNode) => ReactNode;
+}
+export interface InlineMarkdownProtectedSpan {
+    source: string;
+    label: string;
+    className?: string;
+    title?: string;
+}
+/**
+ * Render user-authored Markdown for compact text surfaces.
+ *
+ * This intentionally has no block-level Markdown elements: headings, lists,
+ * quotes, and raw HTML are either flattened to their text or omitted.
+ */
+export declare function InlineMarkdown({ content, className, linkClassName, codeClassName, inline, protectedSpans, renderProtectedSpan, }: InlineMarkdownProps): import("react").JSX.Element;

package/dist/client/markdown/InlineMarkdown.js

@@ -0,0 +1,65 @@
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+import ReactMarkdown, { defaultUrlTransform, } from "react-markdown";
+import remarkGfm from "remark-gfm";
+import { cn } from "../utils.js";
+const INLINE_MARKDOWN_ELEMENTS = [
+    "a",
+    "br",
+    "code",
+    "del",
+    "em",
+    "p",
+    "s",
+    "strong",
+];
+/**
+ * Render user-authored Markdown for compact text surfaces.
+ *
+ * This intentionally has no block-level Markdown elements: headings, lists,
+ * quotes, and raw HTML are either flattened to their text or omitted.
+ */
+export function InlineMarkdown({ content, className, linkClassName, codeClassName, inline = false, protectedSpans = [], renderProtectedSpan, }) {
+    const protectedSpanByHref = new Map(protectedSpans
+        .map((span, index) => [`${PROTECTED_SPAN_PREFIX}${index}`, span])
+        .filter(([, span]) => span.source.length > 0));
+    const renderedContent = protectInlineMarkdownSpans(content, protectedSpans);
+    const components = {
+        a: ({ children, href }) => {
+            const protectedSpan = href ? protectedSpanByHref.get(href) : undefined;
+            if (protectedSpan) {
+                return renderProtectedSpan ? (renderProtectedSpan(protectedSpan, children)) : (_jsx("span", { className: protectedSpan.className, title: protectedSpan.title, children: children }));
+            }
+            const safeHref = href
+                ? defaultUrlTransform(normalizeInlineMarkdownHref(href))
+                : "";
+            if (!safeHref)
+                return _jsx(_Fragment, { children: children });
+            return (_jsx("a", { href: safeHref, target: "_blank", rel: "noopener noreferrer", className: cn("text-primary underline-offset-2 hover:underline", linkClassName), children: children }));
+        },
+        code: ({ children, className: syntaxClassName }) => (_jsx("code", { className: cn("rounded bg-muted px-1 py-0.5 font-mono text-[0.9em]", syntaxClassName, codeClassName), children: children })),
+        p: ({ children }) => inline ? _jsx("span", { children: children }) : _jsx("p", { className: "m-0", children: children }),
+    };
+    const Root = inline ? "span" : "div";
+    return (_jsx(Root, { className: cn("whitespace-pre-wrap break-words", className), children: _jsx(ReactMarkdown, { allowedElements: INLINE_MARKDOWN_ELEMENTS, components: components, remarkPlugins: [remarkGfm], skipHtml: true, unwrapDisallowed: true, children: renderedContent }) }));
+}
+const PROTECTED_SPAN_PREFIX = "https://inline-markdown-protected.invalid/span/";
+function protectInlineMarkdownSpans(content, spans) {
+    return [...spans]
+        .map((span, index) => ({ span, index }))
+        .filter(({ span }) => span.source.length > 0)
+        .sort((a, b) => b.span.source.length - a.span.source.length)
+        .reduce((markdown, { span, index }) => markdown
+        .split(span.source)
+        .join(`[${escapeProtectedSpanLabel(span.label)}](${PROTECTED_SPAN_PREFIX}${index})`), content);
+}
+function escapeProtectedSpanLabel(label) {
+    return label.replace(/[\\[\]]/g, "\\$&");
+}
+function normalizeInlineMarkdownHref(href) {
+    if (/^www\./i.test(href))
+        return `https://${href}`;
+    if (/^http:\/\/www\./i.test(href)) {
+        return `https://${href.slice("http://".length)}`;
+    }
+    return href;
+}

package/dist/client/markdown/index.d.ts

@@ -0,0 +1 @@
+export { InlineMarkdown, type InlineMarkdownProtectedSpan, type InlineMarkdownProps, } from "./InlineMarkdown.js";

package/dist/client/markdown/index.js

@@ -0,0 +1 @@
+export { InlineMarkdown, } from "./InlineMarkdown.js";

package/dist/client/review/ReviewThreadPanel.js

@@ -8,6 +8,7 @@ import { Spinner } from "@agent-native/toolkit/ui/spinner";
 import { IconCircleCheck, IconDots, IconMessageCircle, IconSend, IconTrash, IconX, } from "@tabler/icons-react";
 import { useMemo, useState } from "react";
 import { useFormatters } from "../i18n.js";
+import { InlineMarkdown } from "../markdown/index.js";
 import { cn } from "../utils.js";
 import { ReviewCommentComposer } from "./ReviewCommentComposer.js";
 import { ReviewStatusBadge } from "./ReviewStatusBadge.js";
@@ -126,7 +127,7 @@ function CommentBubble({ comment, compact = false, resolvedLabel, reviewerLabel,
     const bodyIsResolutionNote = resolutionNote !== null &&
         resolutionNote === comment.body.trim() &&
         isResolutionNoteMetadata(comment.metadata);
-    return (_jsxs("div", { className: "flex min-w-0 items-start gap-2.5", children: [_jsx(Avatar, { className: compact ? "size-5" : "size-7", children: _jsx(AvatarFallback, { className: "text-[10px] font-semibold text-muted-foreground", children: authorInitials(author) }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("span", { className: "truncate text-sm font-medium", children: author }), _jsx("time", { className: "shrink-0 text-[11px] text-muted-foreground", dateTime: comment.createdAt, children: formatCommentDate(comment.createdAt, formatDate) }), comment.status === "resolved" ? (_jsx("span", { className: "hidden shrink-0 rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-medium text-muted-foreground @xs/review:inline-flex", children: resolvedLabel })) : null] }), !bodyIsResolutionNote ? (_jsx("p", { className: cn("mt-1 whitespace-pre-wrap break-words text-foreground", compact ? "text-xs leading-5" : "text-sm leading-5"), children: comment.body })) : null, resolutionNote ? (_jsxs("div", { className: "mt-1.5 flex min-w-0 items-start gap-1.5 rounded-md bg-muted/60 px-2 py-1.5 text-muted-foreground", "aria-label": resolvedLabel, children: [_jsx(IconCircleCheck, { className: "mt-0.5 size-3.5 shrink-0" }), _jsx("p", { className: "min-w-0 whitespace-pre-wrap break-words text-xs leading-4", children: resolutionNote })] })) : null] })] }));
+    return (_jsxs("div", { className: "flex min-w-0 items-start gap-2.5", children: [_jsx(Avatar, { className: compact ? "size-5" : "size-7", children: _jsx(AvatarFallback, { className: "text-[10px] font-semibold text-muted-foreground", children: authorInitials(author) }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("span", { className: "truncate text-sm font-medium", children: author }), _jsx("time", { className: "shrink-0 text-[11px] text-muted-foreground", dateTime: comment.createdAt, children: formatCommentDate(comment.createdAt, formatDate) }), comment.status === "resolved" ? (_jsx("span", { className: "hidden shrink-0 rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-medium text-muted-foreground @xs/review:inline-flex", children: resolvedLabel })) : null] }), !bodyIsResolutionNote ? (_jsx(InlineMarkdown, { content: comment.body, className: cn("mt-1 text-foreground", compact ? "text-xs leading-5" : "text-sm leading-5") })) : null, resolutionNote ? (_jsxs("div", { className: "mt-1.5 flex min-w-0 items-start gap-1.5 rounded-md bg-muted/60 px-2 py-1.5 text-muted-foreground", "aria-label": resolvedLabel, children: [_jsx(IconCircleCheck, { className: "mt-0.5 size-3.5 shrink-0" }), _jsx(InlineMarkdown, { content: resolutionNote, className: "min-w-0 text-xs leading-4" })] })) : null] })] }));
 }
 function capabilityAllowsThread(capability, thread) {
     return typeof capability === "function" ? capability(thread) : capability;

package/dist/client/run-stream-ownership.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Exactly one SSE reader may fold a given run into UI state.
+ *
+ * Two readers attach to the same run routinely: the chat adapter's own stream,
+ * and AssistantChat's reconnect reader for runs with no live adapter stream
+ * (page reload, tab restore). When both are attached they build two independent
+ * accumulators from the same events, and the UI renders both — duplicate tool
+ * cards (one spinning, one static) and the same assistant text streaming twice.
+ *
+ * The previous guard read a React ref (`isRuntimeRunningRef`) at attach time and
+ * re-checked it from a 1s poll. That is a race, not a lock: the ref lags a
+ * render behind, the poll is skipped while the tab is hidden, and the refs were
+ * per-component-instance while MultiTabAssistantChat mounts several instances
+ * against one run. Ownership therefore lives here — module scope, one registry
+ * per browser tab, claimed and checked synchronously.
+ *
+ * Claims are advisory in one direction only: a reader that does not hold the
+ * claim must not mutate UI state. It may still drain its socket to completion.
+ */
+/** Mint a token identifying one reader. Not shared between readers. */
+export declare function createRunStreamToken(label?: string): symbol;
+/**
+ * Take ownership of a run's UI fold. Returns false when another live reader
+ * already holds it — the caller must not attach, or must attach read-only.
+ * Re-claiming with the same token is a no-op success so retry loops are safe.
+ */
+export declare function claimRunStream(threadId: string, runId: string, token: symbol): boolean;
+/**
+ * Take ownership even if another reader holds it, and return whether the claim
+ * changed hands. The adapter's own stream outranks the reconnect fallback: when
+ * the user sends a message the adapter legitimately becomes the owner, and the
+ * displaced reader learns it lost via `ownsRunStream`.
+ */
+export declare function preemptRunStream(threadId: string, runId: string, token: symbol): boolean;
+export declare function ownsRunStream(threadId: string, runId: string, token: symbol): boolean;
+/** Release only if still held by this token, so a late unmount cannot free a successor's claim. */
+export declare function releaseRunStream(threadId: string, runId: string, token: symbol): void;
+/** Test seam. */
+export declare function __resetRunStreamOwnership(): void;

package/dist/client/run-stream-ownership.js

@@ -0,0 +1,65 @@
+/**
+ * Exactly one SSE reader may fold a given run into UI state.
+ *
+ * Two readers attach to the same run routinely: the chat adapter's own stream,
+ * and AssistantChat's reconnect reader for runs with no live adapter stream
+ * (page reload, tab restore). When both are attached they build two independent
+ * accumulators from the same events, and the UI renders both — duplicate tool
+ * cards (one spinning, one static) and the same assistant text streaming twice.
+ *
+ * The previous guard read a React ref (`isRuntimeRunningRef`) at attach time and
+ * re-checked it from a 1s poll. That is a race, not a lock: the ref lags a
+ * render behind, the poll is skipped while the tab is hidden, and the refs were
+ * per-component-instance while MultiTabAssistantChat mounts several instances
+ * against one run. Ownership therefore lives here — module scope, one registry
+ * per browser tab, claimed and checked synchronously.
+ *
+ * Claims are advisory in one direction only: a reader that does not hold the
+ * claim must not mutate UI state. It may still drain its socket to completion.
+ */
+const owners = new Map();
+function runKey(threadId, runId) {
+    return `${threadId} ${runId}`;
+}
+/** Mint a token identifying one reader. Not shared between readers. */
+export function createRunStreamToken(label) {
+    return Symbol(label ?? "run-stream-reader");
+}
+/**
+ * Take ownership of a run's UI fold. Returns false when another live reader
+ * already holds it — the caller must not attach, or must attach read-only.
+ * Re-claiming with the same token is a no-op success so retry loops are safe.
+ */
+export function claimRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    const current = owners.get(key);
+    if (current && current !== token)
+        return false;
+    owners.set(key, token);
+    return true;
+}
+/**
+ * Take ownership even if another reader holds it, and return whether the claim
+ * changed hands. The adapter's own stream outranks the reconnect fallback: when
+ * the user sends a message the adapter legitimately becomes the owner, and the
+ * displaced reader learns it lost via `ownsRunStream`.
+ */
+export function preemptRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    const current = owners.get(key);
+    owners.set(key, token);
+    return current !== token;
+}
+export function ownsRunStream(threadId, runId, token) {
+    return owners.get(runKey(threadId, runId)) === token;
+}
+/** Release only if still held by this token, so a late unmount cannot free a successor's claim. */
+export function releaseRunStream(threadId, runId, token) {
+    const key = runKey(threadId, runId);
+    if (owners.get(key) === token)
+        owners.delete(key);
+}
+/** Test seam. */
+export function __resetRunStreamOwnership() {
+    owners.clear();
+}

package/dist/collab/routes.d.ts

@@ -26,8 +26,8 @@ export declare const getCollabState: import("h3").EventHandlerWithFetch<import("
  * Body: { update: string (base64), requestSource?: string }
  */
 export declare const postCollabUpdate: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/collab/struct-routes.d.ts

@@ -13,8 +13,8 @@
  * Body: { json: any, fieldName?: string, type?: "map"|"array", requestSource?: string }
  */
 export declare const postCollabJson: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/feature-flags/index.d.ts

@@ -1,4 +1,4 @@
 export { defineFeatureFlag, defineFeatureFlags, getFeatureFlagDefinition, listFeatureFlags, registerFeatureFlags, type FeatureFlagDefinition, } from "./registry.js";
-export { defaultFeatureFlagRules, evaluateFeatureFlag, evaluateFeatureFlagRules, isFeatureFlagEnabled, getFeatureFlagRules, normalizeFeatureFlagRules, type FeatureFlagMode, type FeatureFlagRules, type FeatureFlagScope, } from "./store.js";
+export { defaultFeatureFlagRules, evaluateFeatureFlag, evaluateFeatureFlagRules, hasActiveFeatureFlagRollout, isFeatureFlagEnabled, getFeatureFlagRules, normalizeFeatureFlagRules, type FeatureFlagMode, type FeatureFlagRules, type FeatureFlagScope, } from "./store.js";
 export { createFeatureFlagsPlugin } from "./plugin.js";
 export { createFeatureFlagA2AActionRouteAuth } from "./a2a-action-route.js";

package/dist/feature-flags/index.js

@@ -1,4 +1,4 @@
 export { defineFeatureFlag, defineFeatureFlags, getFeatureFlagDefinition, listFeatureFlags, registerFeatureFlags, } from "./registry.js";
-export { defaultFeatureFlagRules, evaluateFeatureFlag, evaluateFeatureFlagRules, isFeatureFlagEnabled, getFeatureFlagRules, normalizeFeatureFlagRules, } from "./store.js";
+export { defaultFeatureFlagRules, evaluateFeatureFlag, evaluateFeatureFlagRules, hasActiveFeatureFlagRollout, isFeatureFlagEnabled, getFeatureFlagRules, normalizeFeatureFlagRules, } from "./store.js";
 export { createFeatureFlagsPlugin } from "./plugin.js";
 export { createFeatureFlagA2AActionRouteAuth } from "./a2a-action-route.js";

package/dist/feature-flags/store.d.ts

@@ -19,6 +19,16 @@ export declare const FEATURE_FLAG_SETTINGS_PREFIX = "feature-flag:";
 export declare function defaultFeatureFlagRules(): FeatureFlagRules;
 export declare function normalizeFeatureFlagRules(value: unknown): FeatureFlagRules;
 export declare function getFeatureFlagRules(key: string, scope: Pick<FeatureFlagScope, "orgId">): Promise<FeatureFlagRules>;
+/**
+ * Anonymous discovery hint for a rollout that may be scoped to an org.
+ *
+ * This deliberately answers only whether some active rollout exists. It does
+ * not reveal the target email or organization, and callers must still run
+ * `evaluateFeatureFlag` with the authenticated scope before granting access.
+ * Without this separate hint, an org-only rollout is invisible to Desktop
+ * before the user has authenticated and the org can be resolved.
+ */
+export declare function hasActiveFeatureFlagRollout(key: string): Promise<boolean>;
 /**
  * Atomically derive one flag's scoped rules. An org's first override starts
  * from the global fallback, then becomes independently CAS-protected.

package/dist/feature-flags/store.js

@@ -1,10 +1,73 @@
+import { getDbExec, isPostgres } from "../db/client.js";
 import { getOrgSetting, mutateOrgSetting } from "../settings/org-settings.js";
 import { getSetting, mutateSetting } from "../settings/store.js";
 import { getFeatureFlagDefinition, } from "./registry.js";
 export const FEATURE_FLAG_SETTINGS_PREFIX = "feature-flag:";
+const FEATURE_FLAG_ROLLOUT_INDEX_PREFIX = "feature-flag-rollout-index:";
 function settingKey(key) {
     return `${FEATURE_FLAG_SETTINGS_PREFIX}${key}`;
 }
+function rolloutIndexKey(key) {
+    return `${FEATURE_FLAG_ROLLOUT_INDEX_PREFIX}${key}`;
+}
+function parseStoredRules(value) {
+    if (typeof value === "string")
+        return normalizeFeatureFlagRules(JSON.parse(value));
+    return normalizeFeatureFlagRules(value);
+}
+function hasActiveRollout(rules) {
+    return (rules.mode === "on" ||
+        (rules.mode === "rules" &&
+            (rules.emails.length > 0 ||
+                rules.orgIds.length > 0 ||
+                rules.percentage > 0)));
+}
+function normalizeFeatureFlagRolloutIndex(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const raw = value;
+    const orgIds = Array.isArray(raw.orgIds)
+        ? [
+            ...new Set(raw.orgIds.filter((item) => typeof item === "string")),
+        ]
+            .map((orgId) => orgId.trim())
+            .filter(Boolean)
+            .sort()
+        : [];
+    return {
+        version: 1,
+        global: raw.global === true,
+        orgIds,
+    };
+}
+function activeFeatureFlagRolloutIndex(index) {
+    return index.global || index.orgIds.length > 0;
+}
+async function syncFeatureFlagRolloutIndex(key, scope, rules) {
+    const indexKey = rolloutIndexKey(key);
+    await mutateSetting(indexKey, async (current) => {
+        const next = normalizeFeatureFlagRolloutIndex(current) ?? {
+            version: 1,
+            global: false,
+            orgIds: [],
+        };
+        if (scope.orgId?.trim()) {
+            const orgId = scope.orgId.trim();
+            const active = hasActiveRollout(rules);
+            const orgIds = active
+                ? [...new Set([...next.orgIds, orgId])].sort()
+                : next.orgIds.filter((value) => value !== orgId);
+            return {
+                ...next,
+                orgIds,
+            };
+        }
+        return {
+            ...next,
+            global: hasActiveRollout(rules),
+        };
+    });
+}
 export function defaultFeatureFlagRules() {
     return {
         version: 1,
@@ -66,6 +129,52 @@ export async function getFeatureFlagRules(key, scope) {
     ]);
     return normalizeFeatureFlagRules(orgStored ?? globalStored);
 }
+/**
+ * Anonymous discovery hint for a rollout that may be scoped to an org.
+ *
+ * This deliberately answers only whether some active rollout exists. It does
+ * not reveal the target email or organization, and callers must still run
+ * `evaluateFeatureFlag` with the authenticated scope before granting access.
+ * Without this separate hint, an org-only rollout is invisible to Desktop
+ * before the user has authenticated and the org can be resolved.
+ */
+export async function hasActiveFeatureFlagRollout(key) {
+    if (!getFeatureFlagDefinition(key))
+        return false;
+    const indexKey = rolloutIndexKey(key);
+    const storedIndex = normalizeFeatureFlagRolloutIndex(await getSetting(indexKey));
+    if (storedIndex)
+        return activeFeatureFlagRolloutIndex(storedIndex);
+    const globalStored = await getSetting(settingKey(key));
+    const globalActive = hasActiveRollout(parseStoredRules(globalStored));
+    if (globalActive) {
+        await mutateSetting(indexKey, async () => ({
+            version: 1,
+            global: true,
+            orgIds: [],
+        }));
+        return true;
+    }
+    const table = isPostgres() ? "public.settings" : "settings";
+    const { rows } = await getDbExec().execute({
+        sql: `SELECT key, value FROM ${table} WHERE key LIKE ?`,
+        args: [`o:%:${settingKey(key)}`],
+    });
+    const orgIds = rows
+        .filter((row) => hasActiveRollout(parseStoredRules(row.value)))
+        .map((row) => {
+        const match = /^o:([^:]+):/.exec(row.key ?? "");
+        return match?.[1] ?? null;
+    })
+        .filter((orgId) => Boolean(orgId))
+        .sort();
+    await mutateSetting(indexKey, async () => ({
+        version: 1,
+        global: false,
+        orgIds,
+    }));
+    return orgIds.length > 0;
+}
 /**
  * Atomically derive one flag's scoped rules. An org's first override starts
  * from the global fallback, then becomes independently CAS-protected.
@@ -85,7 +194,9 @@ export async function mutateFeatureFlagRules(key, scope, updater) {
     const persisted = scope.orgId?.trim()
         ? await mutateOrgSetting(scope.orgId, settingKey(key), mutate)
         : await mutateSetting(settingKey(key), mutate);
-    return normalizeFeatureFlagRules(persisted);
+    const normalized = normalizeFeatureFlagRules(persisted);
+    await syncFeatureFlagRolloutIndex(key, scope, normalized);
+    return normalized;
 }
 function rolloutBucket(input) {
     // FNV-1a is deliberately tiny, deterministic, and independent of runtime.

package/dist/guards/no-env-credentials.js

@@ -55,6 +55,10 @@ const ALLOWLIST_EXACT = new Set([
     "AWS_LAMBDA_FUNCTION_NAME",
     "BETTER_AUTH_SECRET",
     "BETTER_AUTH_URL",
+    // Public deployment identity/configuration. These select the app origin and
+    // explicitly registered SSO clients; they are not user credentials.
+    "APP_URL",
+    "IDENTITY_SSO_APP_REGISTRY_JSON",
     "NOTION_CLIENT_ID",
     "NOTION_CLIENT_SECRET",
     "NOTION_STATE_SECRET",

package/dist/index.browser.d.ts

@@ -2,7 +2,7 @@ export * from "./config.js";
 export { addContextToAgentChat, appendAgentChatContextToMessage, clearAgentChatContext, formatAgentChatContextItemsForPrompt, listAgentChatContext, refreshAgentChatContext, removeAgentChatContextItem, sendToAgentChat, sendToAgentChatAndConfirm, setAgentChatContextItem, setContextToAgentChat, isEmbedMcpChatBridgeActive, useAgentChatContext, useAgentChatGenerating, useDevMode, useSendToAgentChat, AGENT_NATIVE_MCP_APP_HOST_MESSAGE_TYPES, getMcpAppHostContext, openMcpAppHostLink, requestMcpAppDisplayMode, sendMcpAppHostMessage, updateMcpAppModelContext, useMcpAppHostContext, CodeRequiredDialog, AgentNativeI18nProvider, LanguagePicker, getLocaleInitScript, localeDirection, normalizeLocaleCode, normalizeLocalePreference, normalizeLocalizationPreference, resolveLocaleFromCandidates, resolveLocaleFromPreference, useFormatters, useLocale, useT, DEFAULT_LOCALE, LOCALE_HYDRATION_GLOBAL, LOCALE_METADATA, LOCALE_STORAGE_KEY, SUPPORTED_LOCALES, useDbSync, useFileWatcher, useSession, cn, ApiKeySettings, type AgentChatContextItem, type AgentChatContextMessage, type AgentChatContextMutationOptions, type AgentChatContextRemoveOptions, type AgentChatContextSetOptions, type AgentChatContextState, type AgentChatMessage, type AgentNativeMcpAppHostMessageType, type McpAppDisplayMode, type McpAppHostChatMessage, type McpAppHostCapabilities, type McpAppHostContext, type McpAppHostContextSnapshot, type McpAppModelContextContentPart, type McpAppModelContextUpdate, type CodeRequiredDialogProps, type AuthSession, type UseAgentChatContextResult, type AgentNativeI18nCatalog, type AgentNativeI18nProviderProps, type LocaleCode, type LocaleHydrationPayload, type LocaleMessages, type LocaleMetadata, type LocalePreference, type LocalizationPreference, } from "./client/index.js";
 export { agentChat } from "./shared/index.js";
 export { parseArgs, camelCaseArgs } from "./scripts/parse-args.js";
-export { defineAction, AgentActionStopError, isAgentActionStopError, type ActionHttpConfig, type AgentActionStopOptions, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
+export { defineAction, ActionContractError, isActionContractError, type ActionContractErrorOptions, AgentActionStopError, isAgentActionStopError, type ActionHttpConfig, type AgentActionStopOptions, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
 export { normalizeUserProfileName, USER_PROFILE_SETTING_KEY, type UserProfile, } from "./user-profile/index.js";
 export { ACTION_CHAT_UI_DATA_CHART_RENDERER, ACTION_CHAT_UI_DATA_INSIGHTS_RENDERER, ACTION_CHAT_UI_DATA_TABLE_RENDERER, ACTION_CHAT_UI_DATA_WIDGET_RENDERER, ACTION_CHAT_UI_INLINE_EXTENSION_RENDERER, ACTION_CHAT_UI_WORKSPACE_FILE_RENDERER, type ActionChatUIConfig, } from "./action-ui.js";
 export { DATA_CHART_WIDGET, DATA_INSIGHTS_WIDGET, DATA_TABLE_WIDGET, createDataChartWidgetResult, createDataInsightsWidgetResult, createDataTableWidgetResult, dataChartWidgetResultSchema, dataChartWidgetSchema, dataInsightsWidgetResultSchema, dataTableWidgetResultSchema, dataTableWidgetSchema, dataWidgetResultSchema, isDataChartWidget, isDataTableWidget, isDataWidgetResult, normalizeDataWidgetKind, normalizeDataWidgetResult, type DataChartSeriesDefinition, type DataChartWidget, type DataChartWidgetResult, type DataChartWidgetResultInput, type DataInsightsWidgetResult, type DataInsightsWidgetResultInput, type DataTableColumn, type DataTableWidget, type DataTableWidgetResult, type DataTableWidgetResultInput, type DataWidgetDisplay, type DataWidgetKind, type DataWidgetResult, type DataWidgetResultMetadata, } from "./data-widgets/index.js";

package/dist/index.browser.js

@@ -9,7 +9,7 @@ export { agentChat } from "./shared/index.js";
 // Pure utilities (no Node.js deps — safe for browser and SSR)
 export { parseArgs, camelCaseArgs } from "./scripts/parse-args.js";
 // defineAction — used by template actions, no Node.js deps
-export { defineAction, AgentActionStopError, isAgentActionStopError, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, } from "./action.js";
+export { defineAction, ActionContractError, isActionContractError, AgentActionStopError, isAgentActionStopError, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, } from "./action.js";
 export { normalizeUserProfileName, USER_PROFILE_SETTING_KEY, } from "./user-profile/index.js";
 export { ACTION_CHAT_UI_DATA_CHART_RENDERER, ACTION_CHAT_UI_DATA_INSIGHTS_RENDERER, ACTION_CHAT_UI_DATA_TABLE_RENDERER, ACTION_CHAT_UI_DATA_WIDGET_RENDERER, ACTION_CHAT_UI_INLINE_EXTENSION_RENDERER, ACTION_CHAT_UI_WORKSPACE_FILE_RENDERER, } from "./action-ui.js";
 export { DATA_CHART_WIDGET, DATA_INSIGHTS_WIDGET, DATA_TABLE_WIDGET, createDataChartWidgetResult, createDataInsightsWidgetResult, createDataTableWidgetResult, dataChartWidgetResultSchema, dataChartWidgetSchema, dataInsightsWidgetResultSchema, dataTableWidgetResultSchema, dataTableWidgetSchema, dataWidgetResultSchema, isDataChartWidget, isDataTableWidget, isDataWidgetResult, normalizeDataWidgetKind, normalizeDataWidgetResult, } from "./data-widgets/index.js";

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export * from "./config.js";
 export { createProductionAgentHandler, type ActionEntry, type ScriptEntry, type ProductionAgentOptions, type ActionTool, type ScriptTool, type AgentMessage, type AgentChatRequest, type AgentChatEvent, type AgentChatAttachment, DEFAULT_MODEL, TripWire, type Processor, type ProcessorState, type ProcessorAbort, } from "./agent/index.js";
-export { defineAction, AgentActionStopError, isAgentActionStopError, type ActionDefinition, type ActionHttpConfig, type AgentActionStopOptions, type PublicAgentActionConfig, type ActionDeepLink, type ActionLinkBuilder, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
+export { defineAction, ActionContractError, isActionContractError, type ActionContractErrorOptions, AgentActionStopError, isAgentActionStopError, type ActionDefinition, type ActionHttpConfig, type AgentActionStopOptions, type PublicAgentActionConfig, type ActionDeepLink, type ActionLinkBuilder, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, type ActionMcpAppConfig, type ActionMcpAppCsp, type ActionMcpAppCspBuilder, type ActionMcpAppHtmlBuilder, type ActionMcpAppPermissions, type ActionMcpAppResourceConfig, type ActionMcpAppResourceMeta, } from "./action.js";
 export * from "./user-profile/index.js";
 export { embedApp, MCP_APP_REQUEST_ORIGIN_CSP_SOURCE, type EmbedAppOptions, } from "./mcp/embed-app.js";
 export { embedRoute, type EmbedRouteContext, type EmbedRouteOptions, type EmbedRoutePathBuilder, type EmbedRouteResult, } from "./mcp/embed-route.js";
@@ -11,7 +11,7 @@ export { createAgentChatPlugin, defaultAgentChatPlugin, type AgentChatPluginOpti
 export { createAgentNativeEmbeddedPlugin, mountAgentNativeEmbedded, type AgentNativeEmbeddedPluginOptions, } from "./server/embedded.js";
 export { BUILT_IN_INTEGRATION_CATALOG, INTEGRATION_CATEGORIES, getIntegrationCatalogEntry, listBuiltInChannelIntegrations, listIntegrationCatalog, type AutomationCapabilities, type BuiltInChannelId, type ChannelCapabilities, type IntegrationAvailability, type IntegrationCatalogEntry, type IntegrationCategory, type IntegrationCredentialRequirement, type IntegrationIconKey, type IntegrationSupportMaturity, } from "./integrations/catalog.js";
 export { AutomationConnectorError, createAutomationCallbackHandler, createAutomationRuntime, createInvokeAutomationWorkflowAction, type AutomationCallbackAuthentication, type AutomationCallbackInput, type AutomationCallbackResult, type AutomationInboundDefinition, type AutomationInvocation, type AutomationInvocationResult, type AutomationInvocationStatus, type AutomationOutboundDefinition, type AutomationResponseMode, type AutomationRetryPolicy, type AutomationRuntime, type AutomationRuntimeOptions, type AutomationWorkflowCapabilities, type AutomationWorkflowDefinition, type JsonSchema, } from "./automation/index.js";
-export { createFeatureFlagsPlugin, defineFeatureFlag, defineFeatureFlags, evaluateFeatureFlag, getFeatureFlagDefinition, getFeatureFlagRules, isFeatureFlagEnabled, listFeatureFlags, registerFeatureFlags, type FeatureFlagDefinition, type FeatureFlagMode, type FeatureFlagRules, type FeatureFlagScope, } from "./feature-flags/index.js";
+export { createFeatureFlagsPlugin, defineFeatureFlag, defineFeatureFlags, evaluateFeatureFlag, getFeatureFlagDefinition, getFeatureFlagRules, hasActiveFeatureFlagRollout, isFeatureFlagEnabled, listFeatureFlags, registerFeatureFlags, type FeatureFlagDefinition, type FeatureFlagMode, type FeatureFlagRules, type FeatureFlagScope, } from "./feature-flags/index.js";
 export { createServer, createSSEHandler, defineNitroPlugin, autoMountAuth, getSession, type CreateServerOptions, type SSEHandlerOptions, type AuthSession, type AuthOptions, } from "./server/index.js";
 export { agentChat, type AgentChatCallOptions, type AgentChatResponse, } from "./shared/index.js";
 export { EMBED_MODE_QUERY_PARAM, EMBED_SESSION_COOKIE, EMBED_START_PATH, EMBED_TOKEN_QUERY_PARAM, } from "./shared/embed-auth.js";

package/dist/index.js

@@ -5,7 +5,7 @@ export * from "./config.js";
 export { createProductionAgentHandler, DEFAULT_MODEL, 
 // In-loop processors (observers/guardrails for runAgentLoop)
 TripWire, } from "./agent/index.js";
-export { defineAction, AgentActionStopError, isAgentActionStopError, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, } from "./action.js";
+export { defineAction, ActionContractError, isActionContractError, AgentActionStopError, isAgentActionStopError, MCP_APP_EXTENSION_ID, MCP_APP_MIME_TYPE, MCP_APP_RESOURCE_URI_META_KEY, } from "./action.js";
 export * from "./user-profile/index.js";
 export { embedApp, MCP_APP_REQUEST_ORIGIN_CSP_SOURCE, } from "./mcp/embed-app.js";
 export { embedRoute, } from "./mcp/embed-route.js";
@@ -16,7 +16,7 @@ export { createAgentChatPlugin, defaultAgentChatPlugin, } from "./server/agent-c
 export { createAgentNativeEmbeddedPlugin, mountAgentNativeEmbedded, } from "./server/embedded.js";
 export { BUILT_IN_INTEGRATION_CATALOG, INTEGRATION_CATEGORIES, getIntegrationCatalogEntry, listBuiltInChannelIntegrations, listIntegrationCatalog, } from "./integrations/catalog.js";
 export { AutomationConnectorError, createAutomationCallbackHandler, createAutomationRuntime, createInvokeAutomationWorkflowAction, } from "./automation/index.js";
-export { createFeatureFlagsPlugin, defineFeatureFlag, defineFeatureFlags, evaluateFeatureFlag, getFeatureFlagDefinition, getFeatureFlagRules, isFeatureFlagEnabled, listFeatureFlags, registerFeatureFlags, } from "./feature-flags/index.js";
+export { createFeatureFlagsPlugin, defineFeatureFlag, defineFeatureFlags, evaluateFeatureFlag, getFeatureFlagDefinition, getFeatureFlagRules, hasActiveFeatureFlagRollout, isFeatureFlagEnabled, listFeatureFlags, registerFeatureFlags, } from "./feature-flags/index.js";
 // Server
 export { createServer, createSSEHandler, defineNitroPlugin, autoMountAuth, getSession, } from "./server/index.js";
 // Client

package/dist/integrations/adapters/slack.js

@@ -858,7 +858,11 @@ function markdownToSlackMrkdwn(text) {
         // pathological "**" sequence that exhibits super-linear backtracking.
         // Newlines are allowed because `[^*]` excludes only the asterisk
         // itself, so multi-line bold spans still match.
-        .replace(/\*\*([^*]{1,5000})\*\*/g, "*$1*"));
+        .replace(/\*\*([^*]{1,5000})\*\*/g, "*$1*")
+        // Agent output sometimes uses Markdown-style bare Slack user IDs.
+        // Leave native `<@...>` mentions untouched while converting the bare
+        // user/member forms Slack expects in mrkdwn.
+        .replace(/(?<![<\w])@([UW][A-Z0-9]+)(?![A-Z0-9])/g, "<@$1>"));
 }
 /**
  * Optionally set Slack's native Agent status indicator (the small "is

package/dist/localization/default-messages.d.ts

@@ -315,6 +315,7 @@ declare const messages: {
             openApp: string;
             notDispatchOrWorkspaceApp: string;
             agentsDescription: string;
+            simpleAgentsDescription: string;
             mcpAccessUpdated: string;
             selectAppForMcp: string;
             mcpUrlCopied: string;

package/dist/localization/default-messages.js

@@ -321,6 +321,7 @@ const messages = {
             openApp: "Open app",
             notDispatchOrWorkspaceApp: " a Dispatch tab or a workspace app in this workspace.",
             agentsDescription: "Dispatch can delegate to the built-in app suite over A2A by default. Add extra agents here only if you want to route work to apps outside that built-in set.",
+            simpleAgentsDescription: "Create reusable agents in minutes, or import a setup you already made in Claude or another agent tool.",
             mcpAccessUpdated: "Agent integration access updated",
             selectAppForMcp: "Select at least one app, or expose all apps.",
             mcpUrlCopied: "Agent integration URL copied",

package/dist/notifications/routes.d.ts

@@ -28,6 +28,6 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/observability/routes.d.ts

@@ -62,6 +62,6 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     summary?: undefined;
     spans?: undefined;
     id?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;

package/dist/progress/routes.d.ts

@@ -15,6 +15,6 @@ export declare function createProgressHandler(): import("h3").EventHandlerWithFe
     error: string;
     ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;