@agent-native/core 0.157.8 → 0.157.10

package/dist/client/desktop-local-code-change.js

@@ -0,0 +1,16 @@
+export const DESKTOP_LOCAL_CODE_CHANGE_EVENT = "agent-native:desktop-local-code-change";
+/**
+ * Ask an embedding desktop shell to prepare a local code-change workspace.
+ * The optional target keeps bubbling events scoped to the shell that owns the
+ * chat card while preserving a window fallback for standalone consumers.
+ */
+export function requestDesktopLocalCodeChange(prompt, target = typeof window === "undefined" ? null : window) {
+    const trimmed = prompt.trim();
+    if (!trimmed || !target)
+        return false;
+    target.dispatchEvent(new CustomEvent(DESKTOP_LOCAL_CODE_CHANGE_EVENT, {
+        bubbles: true,
+        detail: { prompt: trimmed },
+    }));
+    return true;
+}

package/dist/client/index.d.ts

@@ -3,6 +3,7 @@
  * Compatibility aggregation only; new code must not import this barrel.
  */
 export * from "./agent-chat/index.js";
+export * from "./desktop-local-code-change.js";
 export * from "./hooks/index.js";
 export * from "./navigation/index.js";
 export * from "./host/index.js";

package/dist/client/index.js

@@ -3,6 +3,7 @@
  * Compatibility aggregation only; new code must not import this barrel.
  */
 export * from "./agent-chat/index.js";
+export * from "./desktop-local-code-change.js";
 export * from "./hooks/index.js";
 export * from "./navigation/index.js";
 export * from "./host/index.js";

package/dist/client/observability/ThumbsFeedback.js

@@ -1,24 +1,22 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button } from "@agent-native/toolkit/ui/button";
+import { Textarea } from "@agent-native/toolkit/ui/textarea";
 import * as PopoverPrimitive from "@radix-ui/react-popover";
 import { IconThumbUp, IconThumbDown } from "@tabler/icons-react";
-import { useState, useCallback } from "react";
+import { useState, useCallback, useId, useRef } from "react";
 import { agentNativePath } from "../api-path.js";
 import { useT } from "../i18n.js";
 import { cn } from "../utils.js";
-const THUMBS_DOWN_CATEGORIES = [
-    { value: "Inaccurate", key: "agentChat.feedback.inaccurate" },
-    { value: "Not helpful", key: "agentChat.feedback.notHelpful" },
-    { value: "Wrong tool", key: "agentChat.feedback.wrongTool" },
-    { value: "Too slow", key: "agentChat.feedback.tooSlow" },
-];
 export function ThumbsFeedback({ threadId, runId, messageSeq, className, }) {
     const t = useT();
     const [selection, setSelection] = useState(null);
-    const [categoryOpen, setCategoryOpen] = useState(false);
-    const [submittedCategory, setSubmittedCategory] = useState(null);
+    const [popoverOpen, setPopoverOpen] = useState(false);
+    const [textFeedback, setTextFeedback] = useState("");
+    const feedbackInputId = useId();
+    const feedbackInputRef = useRef(null);
     const sendFeedback = useCallback(async (feedbackType, value) => {
         try {
-            await fetch(agentNativePath("/_agent-native/observability/feedback"), {
+            const response = await fetch(agentNativePath("/_agent-native/observability/feedback"), {
                 method: "POST",
                 headers: { "Content-Type": "application/json" },
                 body: JSON.stringify({
@@ -29,38 +27,67 @@ export function ThumbsFeedback({ threadId, runId, messageSeq, className, }) {
                     value: value ?? "",
                 }),
             });
+            if (!response.ok) {
+                throw new Error(`Feedback submission failed (${response.status})`);
+            }
+            return true;
         }
         catch {
-            // Fire-and-forget; don't block the UI on feedback submission failures
+            // coercion-ok: callers receive false and restore the retryable UI state.
+            return false;
         }
     }, [threadId, runId, messageSeq]);
     const handleThumbsUp = useCallback(() => {
         if (selection === "up")
             return;
         setSelection("up");
-        setCategoryOpen(false);
-        setSubmittedCategory(null);
-        sendFeedback("thumbs_up");
+        setPopoverOpen(false);
+        void sendFeedback("thumbs_up").then((submitted) => {
+            if (!submitted)
+                setSelection(null);
+        });
     }, [selection, sendFeedback]);
     const handleThumbsDown = useCallback(() => {
         if (selection === "down") {
-            setCategoryOpen((prev) => !prev);
+            setPopoverOpen((prev) => !prev);
             return;
         }
         setSelection("down");
-        setCategoryOpen(true);
-        sendFeedback("thumbs_down");
+        setPopoverOpen(true);
+        void sendFeedback("thumbs_down").then((submitted) => {
+            if (!submitted)
+                setSelection(null);
+        });
     }, [selection, sendFeedback]);
-    const handleCategory = useCallback((category) => {
-        setSubmittedCategory(category);
-        setCategoryOpen(false);
-        sendFeedback("category", category);
-    }, [sendFeedback]);
+    const handleTextFeedback = useCallback(() => {
+        const value = textFeedback.trim();
+        if (!value)
+            return;
+        void sendFeedback("text", value).then((submitted) => {
+            if (!submitted)
+                return;
+            setTextFeedback("");
+            setPopoverOpen(false);
+        });
+    }, [sendFeedback, textFeedback]);
     return (_jsxs("div", { className: cn("inline-flex items-center gap-0.5", className), children: [_jsx("button", { type: "button", "aria-label": t("agentChat.feedback.thumbsUp"), onClick: handleThumbsUp, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "up"
                     ? "text-foreground"
-                    : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbUp, { size: 16, stroke: selection === "up" ? 2.5 : 1.5, fill: selection === "up" ? "currentColor" : "none" }) }), _jsxs(PopoverPrimitive.Root, { open: categoryOpen, onOpenChange: setCategoryOpen, children: [_jsx(PopoverPrimitive.Trigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": t("agentChat.feedback.thumbsDown"), onClick: handleThumbsDown, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "down"
+                    : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbUp, { size: 16, stroke: selection === "up" ? 2.5 : 1.5, fill: selection === "up" ? "currentColor" : "none" }) }), _jsxs(PopoverPrimitive.Root, { open: popoverOpen, onOpenChange: setPopoverOpen, children: [_jsx(PopoverPrimitive.Trigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": t("agentChat.feedback.thumbsDown"), onClick: handleThumbsDown, className: cn("flex h-6 w-6 items-center justify-center rounded", selection === "down"
                                 ? "text-foreground"
-                                : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbDown, { size: 16, stroke: selection === "down" ? 2.5 : 1.5, fill: selection === "down" ? "currentColor" : "none" }) }) }), _jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Content, { side: "bottom", align: "start", sideOffset: 4, collisionPadding: 8, className: "z-[300] overflow-hidden rounded-lg border border-border bg-popover p-1 shadow-lg outline-none", children: _jsx("div", { className: "flex flex-col gap-0.5", children: THUMBS_DOWN_CATEGORIES.map((category) => (_jsx("button", { type: "button", onClick: () => handleCategory(category.value), className: cn("rounded-md px-3 py-1.5 text-start text-xs", submittedCategory === category.value
-                                        ? "bg-accent text-foreground font-medium"
-                                        : "text-muted-foreground hover:bg-accent/50 hover:text-foreground"), children: t(category.key) }, category.value))) }) }) })] })] }));
+                                : "text-muted-foreground/70 hover:text-muted-foreground hover:bg-accent/50"), children: _jsx(IconThumbDown, { size: 16, stroke: selection === "down" ? 2.5 : 1.5, fill: selection === "down" ? "currentColor" : "none" }) }) }), _jsx(PopoverPrimitive.Portal, { children: _jsx(PopoverPrimitive.Content, { side: "bottom", align: "start", sideOffset: 4, collisionPadding: 8, onOpenAutoFocus: (event) => {
+                                event.preventDefault();
+                                feedbackInputRef.current?.focus();
+                            }, className: "z-[300] w-[min(320px,calc(100vw-24px))] overflow-hidden rounded-lg border border-border bg-popover p-3 text-popover-foreground shadow-lg outline-none origin-[var(--radix-popover-content-transform-origin)]", children: _jsxs("form", { className: "flex flex-col gap-2.5", onSubmit: (event) => {
+                                    event.preventDefault();
+                                    handleTextFeedback();
+                                }, children: [_jsx("label", { htmlFor: feedbackInputId, className: "text-xs font-medium text-foreground", children: t("agentChat.feedback.whatWentWrong") }), _jsx(Textarea, { id: feedbackInputId, ref: feedbackInputRef, autoFocus: true, value: textFeedback, onChange: (event) => setTextFeedback(event.target.value), onKeyDown: (event) => {
+                                            if ((event.metaKey || event.ctrlKey) &&
+                                                event.key === "Enter") {
+                                                event.preventDefault();
+                                                handleTextFeedback();
+                                            }
+                                        }, placeholder: t("agentChat.feedback.placeholder"), rows: 3, maxLength: 2000, className: "min-h-20 resize-none px-2.5 py-2 text-xs" }), _jsxs("div", { className: "flex items-center justify-between gap-2", children: [_jsx("span", { className: "text-[11px] text-muted-foreground/75", children: t("agentChat.feedback.keyboardHint").replace("{{shortcut}}", typeof navigator !== "undefined" &&
+                                                    /Mac|iPhone|iPad/.test(navigator.userAgent)
+                                                    ? "⌘"
+                                                    : "Ctrl") }), _jsx(Button, { type: "submit", size: "sm", disabled: !textFeedback.trim(), className: "h-7 px-2.5 text-xs", children: t("agentChat.feedback.submit") })] })] }) }) })] })] }));
 }

package/dist/client/observability/useObservability.d.ts

@@ -57,7 +57,7 @@ export interface FeedbackEntry {
     userId: string | null;
     createdAt: number;
 }
-export declare function useFeedbackList(sinceDays?: number, limit?: number): import("@tanstack/react-query").UseQueryResult<NoInfer<FeedbackEntry[]>, Error>;
+export declare function useFeedbackList(sinceDays?: number, limit?: number, feedbackType?: FeedbackEntry["feedbackType"]): import("@tanstack/react-query").UseQueryResult<NoInfer<FeedbackEntry[]>, Error>;
 export interface FeedbackStats {
     total: number;
     thumbsUp: number;

package/dist/client/observability/useObservability.js

@@ -31,11 +31,14 @@ export function useTraceDetail(runId) {
         enabled: !!runId,
     });
 }
-export function useFeedbackList(sinceDays = 7, limit = 100) {
+export function useFeedbackList(sinceDays = 7, limit = 100, feedbackType) {
     const sinceMs = Date.now() - sinceDays * 86_400_000;
+    const typeQuery = feedbackType
+        ? `&feedbackType=${encodeURIComponent(feedbackType)}`
+        : "";
     return useQuery({
-        queryKey: ["observability", "feedback", sinceDays, limit],
-        queryFn: () => fetchJson(`${BASE}/feedback?since=${sinceMs}&limit=${limit}`),
+        queryKey: ["observability", "feedback", sinceDays, limit, feedbackType],
+        queryFn: () => fetchJson(`${BASE}/feedback?since=${sinceMs}&limit=${limit}${typeQuery}`),
         refetchInterval: 30_000,
     });
 }

package/dist/client/terminal/AgentTerminal.d.ts

@@ -30,6 +30,14 @@ export interface AgentTerminalProps {
     onConnectionChange?: (connected: boolean) => void;
     /** Callback when agent running state changes */
     onAgentRunningChange?: (running: boolean) => void;
+    /** Queue a prompt for the CLI once the PTY WebSocket is ready. */
+    submitRequest?: AgentTerminalSubmitRequest;
+    /** Called after a queued prompt is written to the PTY. */
+    onPromptSubmitted?: (request: AgentTerminalSubmitRequest) => void;
+}
+export interface AgentTerminalSubmitRequest {
+    id: string | number;
+    text: string;
 }
 export declare function formatWebSocketHostname(hostname: string): string;
-export declare function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame, theme, fontSize, className, style, onConnectionChange, onAgentRunningChange, }: AgentTerminalProps): import("react").JSX.Element | null;
+export declare function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame, theme, fontSize, className, style, onConnectionChange, onAgentRunningChange, submitRequest, onPromptSubmitted, }: AgentTerminalProps): import("react").JSX.Element | null;

package/dist/client/terminal/AgentTerminal.js

@@ -33,7 +33,7 @@ function injectXtermCss() {
     .xterm .composition-view { display: none; position: absolute; white-space: nowrap; z-index: 1; }
     .xterm .composition-view.active { display: block; }
     .xterm .xterm-viewport {
-      background-color: #000; overflow-y: scroll;
+      background-color: var(--agent-terminal-background); overflow-y: scroll;
       cursor: default; position: absolute; right: 0; left: 0; top: 0; bottom: 0;
     }
     .xterm .xterm-screen { position: relative; }
@@ -85,8 +85,12 @@ export function formatWebSocketHostname(hostname) {
         ? `[${hostname}]`
         : hostname;
 }
-export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame = true, theme, fontSize = 12, className, style, onConnectionChange, onAgentRunningChange, }) {
+export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame = true, theme, fontSize = 12, className, style, onConnectionChange, onAgentRunningChange, submitRequest, onPromptSubmitted, }) {
     const termRef = useRef(null);
+    const submitPromptRef = useRef(null);
+    const pendingSubmitRequestRef = useRef(null);
+    const onPromptSubmittedRef = useRef(onPromptSubmitted);
+    onPromptSubmittedRef.current = onPromptSubmitted;
     const [connected, setConnected] = useState(false);
     const [error, setError] = useState(null);
     const [inFrame, setInFrame] = useState(false);
@@ -226,6 +230,22 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
             let agentRunning = false;
             let idleTimer = null;
             let connectionId = 0;
+            function submitPrompt(request) {
+                const text = request.text.trim();
+                if (!text)
+                    return;
+                if (!ws || ws.readyState !== WebSocket.OPEN) {
+                    pendingSubmitRequestRef.current = request;
+                    return;
+                }
+                ws.send(text + "\r");
+                agentRunning = true;
+                notifyAgentRunning(true);
+                if (pendingSubmitRequestRef.current?.id === request.id) {
+                    pendingSubmitRequestRef.current = null;
+                }
+                onPromptSubmittedRef.current?.(request);
+            }
             function sendResize() {
                 if (ws && ws.readyState === WebSocket.OPEN && term) {
                     ws.send(JSON.stringify({
@@ -258,6 +278,9 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
                         cols: term.cols,
                         rows: term.rows,
                     }));
+                    const pendingRequest = pendingSubmitRequestRef.current;
+                    if (pendingRequest)
+                        submitPrompt(pendingRequest);
                 };
                 socket.onmessage = (event) => {
                     const data = event.data instanceof ArrayBuffer
@@ -328,6 +351,10 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
             };
             window.addEventListener("message", messageHandler);
             cleanupMessageHandler = () => window.removeEventListener("message", messageHandler);
+            submitPromptRef.current = submitPrompt;
+            const initialRequest = pendingSubmitRequestRef.current;
+            if (initialRequest)
+                submitPrompt(initialRequest);
             connect(fullWsUrl);
             // Store cleanup references
             return () => {
@@ -340,6 +367,7 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
                     ws.close();
                     ws = null;
                 }
+                submitPromptRef.current = null;
             };
         }
         let cleanup;
@@ -353,6 +381,12 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
         };
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [hideInFrame, inFrame, command, flags, wsUrlProp]);
+    useEffect(() => {
+        if (!submitRequest)
+            return;
+        pendingSubmitRequestRef.current = submitRequest;
+        submitPromptRef.current?.(submitRequest);
+    }, [submitRequest?.id, submitRequest?.text]);
     if (hideInFrame && inFrame) {
         return null;
     }
@@ -361,6 +395,7 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
         ...style,
         background: terminalBackground,
         backgroundColor: terminalBackground,
+        "--agent-terminal-background": terminalBackground,
     };
     return (_jsx("div", { ref: termRef, className: className, style: {
             width: "100%",
@@ -374,7 +409,7 @@ export function AgentTerminal({ command, flags, wsUrl: wsUrlProp, hideInFrame =
                 display: "flex",
                 alignItems: "center",
                 justifyContent: "center",
-                backgroundColor: "#111",
+                backgroundColor: terminalBackground,
                 color: "#ff7b72",
                 fontSize: "13px",
                 fontFamily: "monospace",

package/dist/client/terminal/index.d.ts

@@ -3,4 +3,4 @@
  *
  * Embeddable agent CLI terminal component.
  */
-export { AgentTerminal, type AgentTerminalProps } from "./AgentTerminal.js";
+export { AgentTerminal, type AgentTerminalProps, type AgentTerminalSubmitRequest, } from "./AgentTerminal.js";

package/dist/client/terminal/index.js

@@ -3,4 +3,4 @@
  *
  * Embeddable agent CLI terminal component.
  */
-export { AgentTerminal } from "./AgentTerminal.js";
+export { AgentTerminal, } from "./AgentTerminal.js";

package/dist/client/track.js

@@ -1,3 +1,5 @@
+import { ANALYTICS_CLIENT_PLATFORM_HEADER, ANALYTICS_CLIENT_PLATFORM_PROPERTY, } from "../shared/analytics-platform.js";
+import { getAnalyticsClientPlatform } from "./analytics-platform.js";
 import { getOrCreateAnalyticsSessionId } from "./analytics-session.js";
 import { agentNativePath } from "./api-path.js";
 /**
@@ -28,9 +30,14 @@ export function track(name, properties) {
         return Promise.resolve();
     if (typeof name !== "string" || !name.trim())
         return Promise.resolve();
+    const clientPlatform = getAnalyticsClientPlatform();
+    const trackedProperties = {
+        ...(properties ?? {}),
+        [ANALYTICS_CLIENT_PLATFORM_PROPERTY]: clientPlatform,
+    };
     let body;
     try {
-        body = JSON.stringify(properties === undefined ? { name } : { name, properties });
+        body = JSON.stringify({ name, properties: trackedProperties });
     }
     catch {
         // Non-serializable properties — drop rather than throw into the caller.
@@ -45,6 +52,7 @@ export function track(name, properties) {
             // middleware trusts it as a first-party marker. Matches the convention
             // used by other client writes (application-state, guided-questions).
             "X-Agent-Native-CSRF": "1",
+            [ANALYTICS_CLIENT_PLATFORM_HEADER]: clientPlatform,
             // Same session the action client and agent chat send, so a client event
             // and the server events from the same visit share one session.
             ...(browserSessionId

package/dist/client/use-action.js

@@ -22,6 +22,8 @@
  * compatibility.
  */
 import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
+import { ANALYTICS_CLIENT_PLATFORM_HEADER } from "../shared/analytics-platform.js";
+import { getAnalyticsClientPlatform } from "./analytics-platform.js";
 import { getOrCreateAnalyticsSessionId } from "./analytics-session.js";
 import { trackEvent } from "./analytics.js";
 import { agentNativePath } from "./api-path.js";
@@ -203,6 +205,7 @@ async function performActionFetch(name, method, params, options) {
     if (browserSessionId) {
         headers["X-Agent-Native-Session-Id"] = browserSessionId;
     }
+    headers[ANALYTICS_CLIENT_PLATFORM_HEADER] = getAnalyticsClientPlatform();
     const init = {
         method,
         headers,

package/dist/collab/awareness.d.ts

@@ -62,11 +62,11 @@ export declare const postAwareness: import("h3").EventHandlerWithFetch<import("h
     error: string;
     states?: undefined;
 } | {
+    error?: undefined;
     states: {
         clientId: number;
         state: string;
     }[];
-    error?: undefined;
 }>>;
 /**
  * GET /_agent-native/collab/:docId/users
@@ -77,9 +77,9 @@ export declare const getActiveUsers: import("h3").EventHandlerWithFetch<import("
     error: string;
     users?: undefined;
 } | {
+    error?: undefined;
     users: {
         clientId: number;
         lastSeen: number;
     }[];
-    error?: undefined;
 }>>;

package/dist/deploy/build.js

@@ -1245,7 +1245,7 @@ async function getHandler() {
         headers: {
           "Access-Control-Allow-Origin": "*",
           "Access-Control-Allow-Methods": "GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS",
-          "Access-Control-Allow-Headers": "Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,X-Agent-Native-Embed-Target",
+          "Access-Control-Allow-Headers": "Content-Type,Authorization,X-Requested-With,X-Request-Source,X-Agent-Native-CSRF,X-User-Timezone,X-Agent-Native-Session-Id,X-Agent-Native-Client-Platform,X-Agent-Native-Tool-Bridge,X-Agent-Native-Tool-Id,X-Agent-Native-Frontend,X-Agent-Native-Client-Compatibility,X-Agent-Native-Build-Id,X-Agent-Native-Embed-Target",
         },
       });
     }

package/dist/feature-flags/a2a-action-route.js

@@ -3,6 +3,7 @@ import * as jose from "jose";
 import { verifyA2ATokenWithClaims } from "../a2a-claims.js";
 import { resolveOrgByDomain } from "../org/context.js";
 import { consumeOneTimeJti } from "../server/identity-sso-store.js";
+import { isFeatureFlagAdminEmail } from "./permissions.js";
 const FLAG_ACTION_SCOPES = {
     "list-feature-flags": "flags:read",
     "set-feature-flag": "flags:write",
@@ -40,15 +41,16 @@ export function createFeatureFlagA2AActionRouteAuth(actionName) {
                 throw new Error("Invalid feature flag delegation");
             }
             const localOrg = await resolveOrgByDomain(claims.orgDomain);
-            if (!localOrg)
+            if (!localOrg && !isFeatureFlagAdminEmail(claims.email)) {
                 throw new Error("Invalid feature flag delegation");
+            }
             if (actionName === "set-feature-flag" &&
                 (await consumeOneTimeJti(claims.jti))) {
                 throw new Error("Invalid feature flag delegation");
             }
             return {
                 owner: claims.email,
-                orgId: localOrg.orgId,
+                orgId: localOrg?.orgId ?? null,
                 anonymous: false,
                 delegationJti: claims.jti,
                 delegationIssuer: claims.issuer,

package/dist/feature-flags/permissions.d.ts

@@ -2,6 +2,8 @@ export declare class FeatureFlagPermissionError extends Error {
     statusCode: number;
     constructor(message: string, statusCode: number);
 }
+/** Return whether an email is explicitly allowed to manage no-org flags. */
+export declare function isFeatureFlagAdminEmail(email: string | undefined): boolean;
 /** Require an org admin/owner, or an explicit production no-org allowlist entry. */
 export declare function requireFeatureFlagManager(scope: {
     userEmail?: string;

package/dist/feature-flags/permissions.js

@@ -13,6 +13,11 @@ function productionAdminAllowlist() {
         .map((email) => email.trim().toLowerCase())
         .filter(Boolean));
 }
+/** Return whether an email is explicitly allowed to manage no-org flags. */
+export function isFeatureFlagAdminEmail(email) {
+    const normalized = email?.trim().toLowerCase();
+    return Boolean(normalized && productionAdminAllowlist().has(normalized));
+}
 /** Require an org admin/owner, or an explicit production no-org allowlist entry. */
 export async function requireFeatureFlagManager(scope) {
     const email = scope.userEmail?.trim().toLowerCase();
@@ -29,7 +34,7 @@ export async function requireFeatureFlagManager(scope) {
     }
     if (process.env.NODE_ENV !== "production")
         return { email, orgId: null };
-    if (!productionAdminAllowlist().has(email)) {
+    if (!isFeatureFlagAdminEmail(email)) {
         throw new FeatureFlagPermissionError("Feature flag management without an organization requires an explicit admin allowlist entry.", 403);
     }
     return { email, orgId: null };

package/dist/ingestion/pptx.d.ts

@@ -21,21 +21,35 @@ export interface ParsedPptxParagraph {
     lineSpacing?: number;
     spaceBeforePt?: number;
     spaceAfterPt?: number;
+    /** `a:pPr/@_rtl` — the paragraph's base writing direction is right-to-left. Only set when the source states it; absent means inherit (LTR). */
+    rtl?: boolean;
 }
 export interface ParsedPptxElement {
     id: string;
     name?: string;
     placeholderType?: string;
-    kind: "text" | "image" | "shape";
+    kind: "text" | "image" | "shape" | "table";
     x: number;
     y: number;
     width: number;
     height: number;
     rotation?: number;
+    /** `a:xfrm/@_flipH` — the shape's geometry is mirrored across its own vertical axis before rotation. */
+    flipH?: boolean;
+    /** `a:xfrm/@_flipV` — the shape's geometry is mirrored across its own horizontal axis before rotation. */
+    flipV?: boolean;
     shapeType?: string;
+    /** `a:prstGeom/a:avLst` adjustment values keyed by guide name (`adj`, `adj1`, ...), in the preset's own units. Absent when the deck accepts the preset's defaults. */
+    shapeAdjustments?: Record<string, number>;
+    /** `a:custGeom`'s authored outline, when the shape declares one instead of a preset. */
+    geometry?: ParsedPptxGeometry;
     fill?: string;
     lineColor?: string;
     lineWidth?: number;
+    /** `a:ln/a:headEnd` — the decoration drawn where the line starts. */
+    lineHeadEnd?: ParsedPptxLineEnd;
+    /** `a:ln/a:tailEnd` — the decoration drawn where the line ends. */
+    lineTailEnd?: ParsedPptxLineEnd;
     padding?: {
         left: number;
         right: number;
@@ -45,6 +59,79 @@ export interface ParsedPptxElement {
     verticalAlign?: "top" | "middle" | "bottom";
     paragraphs?: ParsedPptxParagraph[];
     image?: ParsedPptxImage;
+    table?: ParsedPptxTable;
+}
+/**
+ * One end of a line or connector — the round dots a chevron timeline's
+ * connectors terminate in (`<a:headEnd type="oval"/>`), an arrowhead, a
+ * diamond. Recorded whatever the type, including the ones a consumer cannot
+ * draw, so an end a renderer skips stays distinguishable from a line the
+ * source drew bare and an export can still round-trip it.
+ */
+export interface ParsedPptxLineEnd {
+    /** `@_type`: `none`, `triangle`, `stealth`, `diamond`, `oval`, or `arrow`. */
+    type: string;
+    /** `@_w`/`@_len` — the end's size across and along the line, as `sm`/`med`/`lg` multiples of the line's own width, not absolute units. Absent means the OOXML default (`med`). */
+    w?: string;
+    len?: string;
+}
+/** A single `a:path` command, in the path's own `w`/`h` coordinate space. `arcTo` keeps OOXML's radii-and-angles form because converting it needs the current point, which only a consumer walking the whole command list knows. */
+export type ParsedPptxPathCommand = {
+    kind: "moveTo" | "lnTo" | "quadBezTo" | "cubicBezTo";
+    points: {
+        x: number;
+        y: number;
+    }[];
+} | {
+    kind: "arcTo";
+    /** Ellipse radii in path units. */
+    wR: number;
+    hR: number;
+    /** Start angle and swing, in 60000ths of a degree, clockwise from the +x axis. */
+    stAng: number;
+    swAng: number;
+} | {
+    kind: "close";
+};
+/** One `a:custGeom/a:pathLst/a:path`. `w`/`h` define the coordinate space its points are expressed in; the shape's own box is what they scale onto. */
+export interface ParsedPptxPath {
+    w: number;
+    h: number;
+    commands: ParsedPptxPathCommand[];
+}
+export interface ParsedPptxGeometry {
+    kind: "custom";
+    paths: ParsedPptxPath[];
+}
+/** A `p:graphicFrame`'s `a:tbl` flattened into a simple row/cell grid. `hMerge`/`vMerge` continuation cells are omitted — their content is already represented once, by the spanning cell's `colSpan`/`rowSpan`. */
+export interface ParsedPptxTable {
+    rows: ParsedPptxTableCell[][];
+    /** Authored `a:tblGrid/a:gridCol/@_w` values, in EMUs, when present. */
+    columnWidthsEmu?: number[];
+    /** Authored `a:tr/@_h` values, in EMUs, when present. */
+    rowHeightsEmu?: number[];
+}
+export interface ParsedPptxTableCell {
+    paragraphs: ParsedPptxParagraph[];
+    colSpan?: number;
+    rowSpan?: number;
+    fill?: string;
+    /** Resolved cell edges. A side is present only when the cell's own `a:tcPr/a:lnL|R|T|B` or the deck table style's `a:tcBdr` draws a line there — a cell the source leaves borderless stays borderless. */
+    borders?: ParsedPptxTableCellBorders;
+}
+export interface ParsedPptxTableCellBorders {
+    left?: ParsedPptxTableBorder;
+    right?: ParsedPptxTableBorder;
+    top?: ParsedPptxTableBorder;
+    bottom?: ParsedPptxTableBorder;
+}
+/** One resolved table cell edge, from an `a:ln`. */
+export interface ParsedPptxTableBorder {
+    color: string;
+    /** `a:ln/@_w`, in EMU. Absent when the line declares no width. */
+    widthEmu?: number;
+    /** `a:prstDash/@_val`, collapsed onto the CSS border styles that can draw it. Absent for a solid line. */
+    dash?: "dashed" | "dotted";
 }
 export type ParsedPptxTransition = "instant" | "none" | "fade" | "slide" | "zoom";
 export interface ParsedPptxImage {
@@ -75,6 +162,8 @@ export interface ParsedPptxSlide {
     layoutHint?: string;
     transition?: ParsedPptxTransition;
     splitByParagraph?: boolean;
+    /** Count of this slide's `graphicFrame` shapes that could not be converted into a `"table"` element (charts, SmartArt, embedded OLE objects, or a malformed/empty `a:tbl`) — a fidelity signal for `buildSourceImportMetadata`, the same way `imagesSkipped` already works. */
+    tablesDegraded?: number;
 }
 export interface ParsedPptxGrid {
     color: string;
@@ -95,6 +184,8 @@ export interface ParsedPptxPresentation {
         colors: string[];
         fonts: string[];
     };
+    /** Slides the source deck marked `show="0"` and this import deliberately left out — the only legitimate reason `slides.length` is short of the deck's `p:sldId` count, so callers can say so instead of reporting a silently shorter deck. */
+    hiddenSlideCount?: number;
 }
 export declare function parsePptxPresentation(fileBuffer: Uint8Array): Promise<ParsedPptxPresentation>;
 export declare function parsePptxSlideMetadata(value: unknown): ParsedPptxSlideMetadata;