@ai-matrx/chat 0.3.11 → 0.3.15

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @ai-matrx/chat
 
+## 0.3.15 — 2026-10-07
+### The Export menu's .csv download is formula-guarded (AP-2)
+
+- `csvExportItem` (the Export menu's `.csv` DOWNLOAD) is always formula-guarded: a person opens it in a spreadsheet, so `=HYPERLINK(...)` arrives as text.
+- `rowsToCsv(rows, columns?, { spreadsheetSafe? })` is guarded by default; pass `{ spreadsheetSafe: false }` only where an AI or a parser reads the text.
+
+**Consumer action:** none. A caller that feeds `rowsToCsv` text to an AI passes `{ spreadsheetSafe: false }`.
+
+## 0.3.14 — 2026-10-07
+### Re-sync before matrx-frontend consumes the published package (P27)
+
+- Carries every matrx-frontend `packages/chat` edit after `f0b5af6a6a`: the `CopySplit` host slot (split
+  Copy on the person's own message), JSON extraction reading the bytes behind a split wrapper
+  (`stream-block-accumulator`, active-request selectors, `process-stream`), agent-copy export, and
+  `host/db-types.ts` regenerated from the frontend's current schema (SCOPES-W3 moved the scope tables to
+  `deprecated`; `ContextItemRow` reads them there).
+- Consumer action: none.
+
+## 0.3.13 — 2026-10-07
+### No signed-in-only reads for a signed-out visitor (Applets L4)
+
+- `refetchSingleMessage` makes no `chat.message` read for a signed-out visitor (anon holds no grant; a
+  guest run on `/p/<slug>` answered eight 42501s per run) and never retries a refusal — the bounded
+  durable read waits on lag, not on an error.
+- The desktop-presence warm waits for the chat host (`onChatHostConfigured`): it loaded before
+  `<ChatProvider>` rendered and announced "No chat host is configured" on every `/p` load.
+- Consumer action: none.
+
+## 0.3.12 — 2026-10-07
+### One copy, one toast (AP-2)
+
+- Sandbox file viewer, transcript integrity report, prompt preview and voice debug copies passed their
+  success words to the notifying `useClipboard` hook instead of toasting a second time after the kit's
+  own "Text copied to clipboard!".
+- Consumer action: none.
+
 ## 0.3.11 — 2026-10-07
 ### Re-sync before matrx-frontend consumes the published package (P27)
 

package/dist/agent-copy/export.d.ts

@@ -25,11 +25,19 @@ export interface ExportItem {
 export declare function exportFilename(base: string, extension: string): string;
 export declare function jsonExportItem(data: unknown | (() => unknown), label?: string): ExportItem;
 export declare function textExportItem(content: string | (() => string), label: string, extension?: string): ExportItem;
-/** Rows → CSV (Alchemy's one writer). Columns: explicit list, or the union of keys across rows. */
+/**
+ * Rows → CSV (Alchemy's one writer). Columns: explicit list, or the union of keys across rows.
+ * `spreadsheetSafe` defaults ON (kit `spreadsheetSafeByDefault`: a .csv is opened in a
+ * spreadsheet, so formula-looking text gets a leading `'`). Pass `{ spreadsheetSafe: false }` ONLY
+ * where an AI or a parser reads the text — never for a file a person downloads.
+ */
 export declare function rowsToCsv(rows: Array<Record<string, unknown>>, columns?: Array<{
     key: string;
     header: string;
-}>): string;
+}>, options?: {
+    spreadsheetSafe?: boolean;
+}): string;
+/** The Export menu's .csv DOWNLOAD — a person opens it in a spreadsheet, so it is always formula-guarded. */
 export declare function csvExportItem(rows: Array<Record<string, unknown>> | (() => Array<Record<string, unknown>>), label?: string, columns?: Array<{
     key: string;
     header: string;

package/dist/agent-copy/export.js

@@ -35,14 +35,15 @@ function textExportItem(content, label, extension = "txt") {
     })
   };
 }
-function rowsToCsv(rows, columns) {
+function rowsToCsv(rows, columns, options = {}) {
   const cols = columns ?? [...new Set(rows.flatMap((row) => Object.keys(row)))].map((key) => ({
     key,
     header: key
   }));
   return toDelimitedText(
     cols.map((c) => c.header),
-    rows.map((row) => cols.map((c) => row[c.key] ?? null))
+    rows.map((row) => cols.map((c) => row[c.key] ?? null)),
+    options.spreadsheetSafe === void 0 ? {} : { spreadsheetSafe: options.spreadsheetSafe }
   );
 }
 function csvExportItem(rows, label = "CSV", columns) {

package/dist/agents/components/debug/SandboxFileViewer.js

@@ -5,7 +5,6 @@ import { toast as copyToast } from "../../../host/notify.js";
 import { Button } from "@ai-matrx/design-system/controls";
 import { useCallback, useEffect, useRef, useState } from "react";
 import { FileText, Loader2, RefreshCw, Copy, Check } from "lucide-react";
-import { toast } from "../../../host/notify.js";
 import { createSandboxFilesystemAdapter } from "../../../host/ui-slots.js";
 import { ErrorAlchemyMenu } from "../../../host/ui-slots.js";
 function SandboxFileViewer({
@@ -49,9 +48,8 @@ function SandboxFileViewer({
   }, [initialPath, sandboxRowId, load]);
   const handleCopy = async () => {
     if (content == null) return;
-    if (!await copyText(content)) return;
+    if (!await copyText(content, "File contents copied")) return;
     setCopied(true);
-    toast.success("File contents copied");
     setTimeout(() => setCopied(false), 1500);
   };
   return /* @__PURE__ */ jsxs("div", { className: "flex h-full flex-col overflow-hidden", children: [

package/dist/agents/components/messages-display/TranscriptIntegrityCopyButton.js

@@ -8,7 +8,6 @@ import { Stethoscope } from "lucide-react";
 import { useAppSelector, useAppStore } from "../../../store/hooks.js";
 import { selectMessageCount } from "../../redux/execution-system/messages/messages.selectors.js";
 import { selectStreamPhase } from "../../redux/execution-system/selectors/aggregate.selectors.js";
-import { toast } from "../../../host/notify.js";
 import { useDebugContext } from "../../../host/prefs-react.js";
 import {
   buildTranscriptIntegrityReport,
@@ -67,10 +66,11 @@ function TranscriptIntegrityCopyButtonInner({
       pathname,
       effectiveVisibleGroupLimit
     });
-    if (!await copyText(formatTranscriptIntegrityReport(report))) return;
-    toast.success(
+    if (!await copyText(
+      formatTranscriptIntegrityReport(report),
       report.anomalies.length === 0 ? "Transcript report copied \u2014 no anomalies detected" : `Transcript report copied \u2014 ${report.anomalies.length} anomal${report.anomalies.length === 1 ? "y" : "ies"} flagged`
-    );
+    ))
+      return;
   };
   return /* @__PURE__ */ jsx(
     Button,

package/dist/agents/components/messages-display/user/UserActionBar.js

@@ -2,7 +2,7 @@
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { RegistryActionMenu, buildChatMessageActions, useDocumentDialogsHost } from "../../../../host/rich-document-slots.js";
 import { useState, Suspense, useCallback } from "react";
-import { Copy, Check, Edit, Send, MoreHorizontal, Pin, PinOff, Loader2 } from "lucide-react";
+import { Edit, Send, MoreHorizontal, Pin, PinOff, Loader2 } from "lucide-react";
 import {
   togglePinnedMessage,
   usePendingPinMessageIds,
@@ -12,8 +12,7 @@ import {
   TapTargetButtonForGroup,
   TapTargetButtonGroup
 } from "@ai-matrx/tap-target";
-import { copyRichContent } from "../../../../host/ui-slots.js";
-import { SpeakerButton } from "../../../../host/ui-slots.js";
+import { CopySplit, SpeakerButton } from "../../../../host/ui-slots.js";
 import { useAppDispatch, useAppSelector, useAppStore } from "../../../../store/hooks.js";
 import { useOpenFullScreenMarkdownEditorBridge } from "../../../../host/window-openers.js";
 import { selectMessagePosition } from "../../../redux/execution-system/messages/messages.selectors.js";
@@ -69,7 +68,6 @@ function UserActionBar({
   const dispatch = useAppDispatch();
   const store = useAppStore();
   const openEditor = useOpenFullScreenMarkdownEditorBridge();
-  const [isCopied, setIsCopied] = useState(false);
   const isPinned = usePinnedMessageIds().has(messageId);
   const pinPending = usePendingPinMessageIds().has(messageId);
   const [showOptionsMenu, setShowOptionsMenu] = useState(false);
@@ -82,12 +80,6 @@ function UserActionBar({
   const showOptions = useAppSelector(
     selectShowUserMessageOptions(conversationId)
   );
-  const handleCopy = async () => {
-    if (await copyRichContent(content, "default", { toast: false })) {
-      setIsCopied(true);
-      setTimeout(() => setIsCopied(false), 2e3);
-    }
-  };
   const handleEditAction = useCallback(
     (actionId, newContent) => routeUserEditAction(dispatch, {
       actionId,
@@ -183,14 +175,7 @@ function UserActionBar({
   const canFork = (messagePosition ?? 0) > 0;
   return /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsxs(TapTargetButtonGroup, { surface: "solid", children: [
-      /* @__PURE__ */ jsx(
-        TapTargetButtonForGroup,
-        {
-          onClick: handleCopy,
-          ariaLabel: "Copy message",
-          icon: isCopied ? /* @__PURE__ */ jsx(Check, { className: "w-4 h-4 text-blue-500 dark:text-blue-400" }) : /* @__PURE__ */ jsx(Copy, { className: "w-4 h-4 text-muted-foreground" })
-        }
-      ),
+      /* @__PURE__ */ jsx(CopySplit, { text: content, label: "Copy message" }),
       /* @__PURE__ */ jsx(SpeakerButton, { text: content, variant: "group" }),
       /* @__PURE__ */ jsx(
         TapTargetButtonForGroup,

package/dist/agents/prompt-preview/PromptPreviewContent.js

@@ -5,7 +5,6 @@ import { toast as copyToast } from "../../host/notify.js";
 import { useEffect, useState } from "react";
 import { Loader2, Copy, RefreshCw, AlertTriangle } from "lucide-react";
 import { Button } from "@ai-matrx/design-system/controls";
-import { toast } from "../../host/notify.js";
 import { useAppStore } from "../../store/hooks.js";
 import { requestPromptPreview } from "./service.js";
 import { ErrorAlchemyMenu } from "../../host/ui-slots.js";
@@ -43,8 +42,7 @@ function PromptPreviewContent({
     };
   }, [conversationId, store, nonce]);
   const copy = async (label, text) => {
-    if (!await copyText(text)) return;
-    toast.success(`${label} copied`);
+    if (!await copyText(text, `${label} copied`)) return;
   };
   return /* @__PURE__ */ jsxs("div", { className: "flex min-h-0 flex-1 flex-col gap-3 bg-textured p-4", children: [
     /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-2", children: [

package/dist/agents/redux/execution-system/active-requests/active-requests.selectors.d.ts

@@ -122,6 +122,20 @@ export declare const NON_ANSWER_BLOCK_TYPES: Set<string>;
  * chunk text. `editedText` wins, mirroring the selectors.
  */
 export declare function deriveAnswerText(request: Pick<ActiveRequest, "renderBlockOrder" | "renderBlocks" | "editedText">): string;
+/**
+ * The answer text FOR DATA CAPTURE (JSON extraction). Identical to
+ * {@link deriveAnswerText} except where a JSON wrapper holding kinds was split
+ * for display (A7: kinds + a residual that has the kinds REMOVED): those
+ * blocks are replaced by the bytes they were cut from. Without this, a
+ * structured answer whose arrays hold `{"__kind": …}` items was captured with
+ * those arrays EMPTY — an Applet's `sources` saved as `[]` (2026-10-07).
+ * A split whose blocks are no longer all present (a rewind) falls back to the
+ * blocks themselves.
+ */
+export declare function deriveAnswerDataText(request: Pick<ActiveRequest, "renderBlockOrder" | "renderBlocks" | "editedText">, wrapperSplits: ReadonlyArray<{
+    blockIds: string[];
+    source: string;
+}>): string;
 /**
  * Lossless document projection of an answer for string destinations that
  * intentionally accept Content IR. Plain-answer consumers keep using

package/dist/agents/redux/execution-system/active-requests/active-requests.selectors.js

@@ -47,6 +47,35 @@ function deriveAnswerText(request) {
   const answer = order.map((id) => blocks[id]).filter((b) => b && !NON_ANSWER_BLOCK_TYPES.has(b.type)).map((b) => b?.content ?? "").filter(Boolean).join("\n");
   return stripThinkingStreaming(answer).visible;
 }
+function deriveAnswerDataText(request, wrapperSplits) {
+  if (wrapperSplits.length === 0) return deriveAnswerText(request);
+  const { renderBlockOrder: order, renderBlocks: blocks, editedText } = request;
+  if (editedText !== null && editedText !== void 0) return editedText;
+  if (!order || !blocks || order.length === 0) return "";
+  const present = new Set(order);
+  const splitOf = /* @__PURE__ */ new Map();
+  for (const split of wrapperSplits) {
+    if (split.blockIds.length === 0) continue;
+    if (!split.blockIds.every((id) => present.has(id))) continue;
+    for (const id of split.blockIds) splitOf.set(id, split);
+  }
+  const emitted = /* @__PURE__ */ new Set();
+  const parts = [];
+  for (const id of order) {
+    const split = splitOf.get(id);
+    if (split) {
+      if (!emitted.has(split)) {
+        emitted.add(split);
+        parts.push(split.source);
+      }
+      continue;
+    }
+    const block = blocks[id];
+    if (!block || NON_ANSWER_BLOCK_TYPES.has(block.type)) continue;
+    if (block.content) parts.push(block.content);
+  }
+  return stripThinkingStreaming(parts.join("\n")).visible;
+}
 function hasKindMarker(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.__kind === "string";
 }
@@ -1169,6 +1198,7 @@ export {
   NON_ANSWER_BLOCK_TYPES,
   blockCarriesDataNotText,
   blockHasSomethingToRender,
+  deriveAnswerDataText,
   deriveAnswerDocumentText,
   deriveAnswerText,
   deriveDecisionResultText,

package/dist/agents/redux/execution-system/client-capabilities/desktop-native.provider.js

@@ -1,11 +1,20 @@
 import { getLiveDesktopInstance } from "./desktop-presence.js";
 import { registerClientCapability } from "./registry.js";
+import { isChatHostConfigured, onChatHostConfigured } from "../../../../host/configure.js";
 function toSysPlatform(platform) {
   return platform === "windows" ? "win32" : platform;
 }
 const PRESENCE_BUDGET_MS = 150;
 if (typeof window !== "undefined") {
-  setTimeout(() => void getLiveDesktopInstance(), 0);
+  const warm = () => setTimeout(() => void getLiveDesktopInstance(), 0);
+  if (isChatHostConfigured()) {
+    warm();
+  } else {
+    const stop = onChatHostConfigured(() => {
+      stop();
+      warm();
+    });
+  }
 }
 registerClientCapability({
   name: "desktop-native",

package/dist/agents/redux/execution-system/message-crud/refetch-single-message.thunk.js

@@ -3,6 +3,7 @@ import { supabase } from "../../../../host/db.js";
 import { updateMessageRecord } from "../messages/messages.slice.js";
 import { messageRowToRecord } from "../thunks/conversation-bundle.js";
 import { durableRecordId } from "@ai-matrx/kit/ids";
+import { isSignedOutVisitor } from "../../../../host/identity.js";
 function hasDisplayableMessageContent(value) {
   if (!Array.isArray(value)) return false;
   return value.some((part) => {
@@ -27,6 +28,9 @@ const refetchSingleMessage = createAsyncThunk(
         message: "This answer has no saved copy yet \u2014 nothing to reload."
       });
     }
+    if (await isSignedOutVisitor()) {
+      return { conversationId, messageId, found: false, refreshed: false };
+    }
     const read = () => {
       const byId = supabase.schema("chat").from("message").select("*").eq("id", messageId);
       const scoped = persistedConversationId ? byId.eq("conversation_id", persistedConversationId) : byId;
@@ -35,6 +39,7 @@ const refetchSingleMessage = createAsyncThunk(
     let result = await read();
     let delay = 250;
     for (let attempt = 0; waitForReadable && attempt < 7; attempt++) {
+      if (result.error) break;
       const hasBody = hasDisplayableMessageContent(
         result.data?.user_content ?? result.data?.content
       );

package/dist/agents/redux/execution-system/thunks/process-stream.js

@@ -111,7 +111,7 @@ import { docKindForContextKey } from "../../../utils/workingDocumentContext.js";
 import { isCanvasItemContextKey } from "../../../utils/canvasItemContext.js";
 import { StreamingJsonTracker } from "@ai-matrx/kit/json-extract";
 import { StreamBlockAccumulator } from "../utils/stream-block-accumulator.js";
-import { deriveAnswerText } from "../active-requests/active-requests.selectors.js";
+import { deriveAnswerDataText } from "../active-requests/active-requests.selectors.js";
 import { captureError } from "../../../../host/diagnostics.js";
 import { readReceiptThread, withReceiptHandle } from "../instance-resources/remark-handles.js";
 import { stampPersistedRemarkHandles } from "../message-crud/stamp-remark-handles.thunk.js";
@@ -351,7 +351,7 @@ async function processStream({
   const runJsonExtraction = (isFinal) => {
     if (!jsonTracker) return;
     const req = getState().activeRequests.byRequestId[requestId];
-    const answerText = req ? deriveAnswerText(req) : "";
+    const answerText = req ? deriveAnswerDataText(req, blockAccumulator.getWrapperSplitSources()) : "";
     if (!reasoningLeakReported && hasReasoningLeak(answerText)) {
       reasoningLeakReported = true;
       captureError({

package/dist/agents/redux/execution-system/utils/stream-block-accumulator.d.ts

@@ -38,6 +38,15 @@ export declare class StreamBlockAccumulator {
      * to be a different typed block (see the bare-JSON duplication note there).
      */
     private currentBlockEmitted;
+    /**
+     * THE DATA KEEPS ITS KINDS. A JSON wrapper that holds kinds is drawn as its
+     * kinds plus a residual (A7) — the residual is the wrapper's data WITH ITS
+     * KINDS REMOVED, so it is a display projection, never the answer. Every
+     * such split remembers the bytes it was cut from, keyed by its first block
+     * index, so data capture (`deriveAnswerDataText`) reads what the model wrote.
+     * Live only; a rewind forgets every split at or past its boundary.
+     */
+    private wrapperSplits;
     private subState;
     /**
      * URL + label for the current `audio` block. The accumulator's single-line
@@ -148,6 +157,11 @@ export declare class StreamBlockAccumulator {
      * the local streaming state so the replacement provider attempt cannot
      * concatenate onto or resurrect the failed attempt.
      */
+    /** The source bytes behind every live A7 wrapper split (see `wrapperSplits`). */
+    getWrapperSplitSources(): Array<{
+        blockIds: string[];
+        source: string;
+    }>;
     rewindToBlockCount(blockCount: number): void;
     /**
      * Close the current text block at an interleaved-content boundary — a tool

package/dist/agents/redux/execution-system/utils/stream-block-accumulator.js

@@ -321,6 +321,15 @@ class StreamBlockAccumulator {
    * to be a different typed block (see the bare-JSON duplication note there).
    */
   currentBlockEmitted = false;
+  /**
+   * THE DATA KEEPS ITS KINDS. A JSON wrapper that holds kinds is drawn as its
+   * kinds plus a residual (A7) — the residual is the wrapper's data WITH ITS
+   * KINDS REMOVED, so it is a display projection, never the answer. Every
+   * such split remembers the bytes it was cut from, keyed by its first block
+   * index, so data capture (`deriveAnswerDataText`) reads what the model wrote.
+   * Live only; a rewind forgets every split at or past its boundary.
+   */
+  wrapperSplits = /* @__PURE__ */ new Map();
   subState = { kind: "none" };
   /**
    * URL + label for the current `audio` block. The accumulator's single-line
@@ -524,7 +533,19 @@ ${this.pendingLineFragment}` : this.pendingLineFragment
    * the local streaming state so the replacement provider attempt cannot
    * concatenate onto or resurrect the failed attempt.
    */
+  /** The source bytes behind every live A7 wrapper split (see `wrapperSplits`). */
+  getWrapperSplitSources() {
+    return [...this.wrapperSplits.values()].map((split) => ({
+      blockIds: split.indices.map((i) => `client_block_${i}`),
+      source: split.source
+    }));
+  }
   rewindToBlockCount(blockCount) {
+    for (const [start, split] of this.wrapperSplits) {
+      if (start >= blockCount || split.indices.some((i) => i >= blockCount)) {
+        this.wrapperSplits.delete(start);
+      }
+    }
     this.irDisposeAll();
     this.currentBlockIndex = Math.max(0, blockCount);
     this.currentBlockType = "text";
@@ -1769,6 +1790,9 @@ ${this.currentBlockContent}
     const containerMetadata = genericXml || recoveredXmlContainer ? { genericXmlContainer: true } : void 0;
     let emitted = 0;
     let followsKind = false;
+    const splitStart = this.currentBlockIndex;
+    const splitIndices = [];
+    const isWrapperSplit = pieces.some((piece) => piece.type === "residual");
     for (const piece of pieces) {
       if (piece.type === "chrome") continue;
       const isKind = piece.type === "kind";
@@ -1788,9 +1812,13 @@ ${this.currentBlockContent}
         metadata: asJson ? withIrEnvelope(content, void 0) : containerMetadata
       };
       dispatch(this.upsertAction({ requestId: this.requestId, block }));
+      splitIndices.push(this.currentBlockIndex);
       emitted++;
       this.emitCount++;
     }
+    if (isWrapperSplit && emitted > 0) {
+      this.wrapperSplits.set(splitStart, { indices: splitIndices, source: recoverySource });
+    }
     this.currentBlockEmitted = emitted > 0;
     return emitted > 0;
   }

package/dist/context/sources/scopes.d.ts

@@ -20,7 +20,7 @@ import type { ComponentType } from "react";
 import type { AssociationSourceEdge, AssociationTargetEdge } from "@ai-matrx/associations";
 import type { ChatDatabase, Json } from "../../host/db-types.js";
 import { type AnyComponent, type AnyFn } from "../../host/registered-source.js";
-export type ContextItemRow = ChatDatabase["context"]["Tables"]["context_items"]["Row"];
+export type ContextItemRow = ChatDatabase["deprecated"]["Tables"]["context_items"]["Row"];
 export type ContextItemValueType = ChatDatabase["public"]["Enums"]["context_value_type"];
 export type ContextValueType = ContextItemValueType;
 export interface ScopeNode {