@ai-matrx/chat 0.4.9 → 0.4.12

package/CHANGELOG.md

@@ -1,5 +1,58 @@
 # @ai-matrx/chat
 
+## Unreleased
+
+- Chat's own message surfaces import `ui/markdown-stream/MarkdownStream` by its default export, so a host test that mocks that module (default only) replaces it everywhere, as it did when it was a slot.
+
+## 0.4.12 — chat keeps no copy of another package's code
+
+- Deleted `src/utils/content-ir/**` (14 modules, 4.4k lines): every import now reads
+  `@ai-matrx/content-ir/surfaces`, whose versions are the stricter ones (the kind-value-markdown
+  registration lives on `globalThis`, so dual loaders share one registration).
+- Deleted nine modules that were byte-identical to their owner and import the owner instead:
+  `agents/utils/artifactId`, `ui/ShimmerText`, `ui/addressWithoutNavigating`,
+  `utils/inline-decision/decision-options`, `utils/json`, `utils/markdown/plain-title`,
+  `utils/rendered-find` → `@ai-matrx/rich-content/utils/…`; `utils/rich-editor/core/caret-context`,
+  `utils/rich-editor/in-place/caret-handoff` → `@ai-matrx/rich-editor/…` (one caret hand-off
+  state instead of two).
+
+Consumer action: replace these specifiers —
+`@ai-matrx/chat/utils/content-ir/**` → `@ai-matrx/content-ir/surfaces` (re-register
+`registerKindValueMarkdown` from there); `@ai-matrx/chat/agents/utils/artifactId` →
+`@ai-matrx/rich-content/utils/lifted/artifactId`; `@ai-matrx/chat/ui/ShimmerText` →
+`@ai-matrx/rich-content/utils/lifted/ShimmerText`; `@ai-matrx/chat/ui/addressWithoutNavigating` →
+`@ai-matrx/rich-content/utils/addressWithoutNavigating`;
+`@ai-matrx/chat/utils/inline-decision/decision-options` → `@ai-matrx/rich-content/utils/decision-options`;
+`@ai-matrx/chat/utils/json` → `@ai-matrx/rich-content/utils/json`;
+`@ai-matrx/chat/utils/markdown/plain-title` → `@ai-matrx/rich-content/utils/plain-title`;
+`@ai-matrx/chat/utils/rendered-find` → `@ai-matrx/rich-content/utils/rendered-find`.
+
+## 0.4.11 — every AI run request reports its client latency
+
+- `runAiStream` sends `X-Matrx-Client-Sent-At` (epoch ms of the frozen submission moment) and
+  `X-Matrx-Client-Prep-Ms` (submission to fetch dispatch) on every turn and resume request
+  (`buildLatencyHeaders`); the server persists one `platform.ai_request_latency` row per request.
+- Forcing test `agents/redux/execution-system/thunks/__tests__/every-ai-run-request-reports-its-client-latency.test.ts`.
+
+Consumer action: none.
+
+## 0.4.10 — a confidential conversation never reaches a cloud target
+
+- THE CONFIDENTIAL-ROUTING RULE moves from the frozen kernel (`src/compat`) into the real chat:
+  `agents/routing/confidential-routing.ts` (pure: `decideRouting`, `localityOfChannel`,
+  `ConfidentialRoutingRefusedError`), also exported from `@ai-matrx/chat/host`.
+- New host port `routing: { policy(conversationId) => "any" | "local-only" }` (default `"any"`).
+- `resolveBackendForConversation` — the one place every send path resolves its target — refuses a
+  `local-only` conversation on every channel but `local-runtime` (the Matrx Local engine on this
+  computer), including the cloud fallback when a local-pc conversation finds no engine. It throws
+  `ConfidentialRoutingRefusedError` (message = the sentence the person reads, `remedy`, `code`
+  `confidential_thread_cloud_target_refused`) before any request is made.
+- Forcing test `agents/routing/__tests__/confidential-conversation-never-reaches-the-cloud.test.ts`
+  (red on the unfixed resolver; three plant.py mutations red).
+
+Consumer action: none for hosts without confidential conversations (the default policy is `"any"`).
+A host with confidential conversations (matrx-local) passes `routing` to its chat host.
+
 ## 0.4.9 — the shell chat remembers each page's own chat, and its title menu lists your conversations
 
 - `shellChatHome`: outside boards and Education, the conversation is remembered PER PAGE

package/dist/agents/components/context-items/bodies/ContextInputBody.js

@@ -2,7 +2,7 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { humanizeIdentifier } from "@ai-matrx/kit/text-case";
 import { AnswerValueView } from "../../../../host/ui-slots.js";
-import { valueCarriesKind } from "../../../../utils/content-ir/surfaces/json-kind-signal.js";
+import { valueCarriesKind } from "@ai-matrx/content-ir/surfaces";
 function displayValue(value) {
   if (typeof value === "string") return value;
   if (value === null) return "null";

package/dist/agents/components/context-items/bodies/GenericBody.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx } from "react/jsx-runtime";
 import { AnswerValueView } from "../../../../host/ui-slots.js";
-import { hasKindKeyAnySpelling, valueCarriesKind } from "../../../../utils/content-ir/surfaces/json-kind-signal.js";
+import { hasKindKeyAnySpelling, valueCarriesKind } from "@ai-matrx/content-ir/surfaces";
 function carriesKind(value) {
   return valueCarriesKind(value);
 }

package/dist/agents/components/conversation-actions/conversation-verbs.js

@@ -7,7 +7,7 @@ import {
   renameConversation
 } from "../../redux/conversation-list/conversation-row-actions.thunks.js";
 import { conversationRenameOpener } from "./rename/conversationRenameOpener.js";
-import { conversationTitleText } from "../../../utils/content-ir/surfaces/kind-text-label.js";
+import { conversationTitleText } from "@ai-matrx/content-ir/surfaces";
 function displayConversationTitle(title) {
   if (!title) return "Untitled conversation";
   return title.trim().length > 0 ? conversationTitleText(title) ?? title : "Untitled conversation";

package/dist/agents/components/inputs/smart-input/RunSkillPicker.js

@@ -28,7 +28,7 @@ import {
   PicksSkeletons
 } from "./RunPicksSurface.js";
 import { groupCatalog, toolCategoryLabel } from "./run-tool-catalog.js";
-import { catalogProseText } from "../../../../utils/content-ir/surfaces/kind-one-line.js";
+import { catalogProseText } from "@ai-matrx/content-ir/surfaces";
 function tierForSkill(skillId, config) {
   if (config.included.includes(skillId)) return "included";
   if (config.listed.includes(skillId)) return "listed";

package/dist/agents/components/live-run/LiveRunDisplay.js

@@ -4,7 +4,7 @@ import { useEffect, useRef } from "react";
 import { Loader2, TriangleAlert, X } from "lucide-react";
 import { cn } from "@ai-matrx/design-system";
 import { useAppSelector } from "../../../store/hooks.js";
-import { MarkdownStream } from "../../../ui/markdown-stream/MarkdownStream.js";
+import MarkdownStream from "../../../ui/markdown-stream/MarkdownStream.js";
 import { AgentAssistantMessage } from "../messages-display/assistant/AgentAssistantMessage.js";
 import { useRetainRequestForViewer } from "../../redux/execution-system/active-requests/useRetainRequestForViewer.js";
 import {

package/dist/agents/components/live-run/LiveRunProgress.js

@@ -5,7 +5,7 @@ import { cn } from "@ai-matrx/design-system";
 import {
   honestProgressSummary
 } from "@ai-matrx/kit/progress";
-import { isJsonObject } from "../../../utils/json.js";
+import { isJsonObject } from "@ai-matrx/rich-content/utils/json";
 const STATUSES = /* @__PURE__ */ new Set([
   "waiting",
   "running",

package/dist/agents/components/live-run/RunSetDisplay.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useAppDispatch, useAppSelector } from "../../../store/hooks.js";
-import { MarkdownStream } from "../../../ui/markdown-stream/MarkdownStream.js";
+import MarkdownStream from "../../../ui/markdown-stream/MarkdownStream.js";
 import { cn } from "@ai-matrx/design-system";
 import { LiveRunDisplay } from "./LiveRunDisplay.js";
 import { selectRunSetEntries } from "../../redux/execution-system/run-sets/run-sets.slice.js";

package/dist/agents/components/messages-display/assistant/AgentAssistantMessage.js

@@ -7,7 +7,7 @@ import {
   useState,
   useEffect
 } from "react";
-import { MarkdownStream } from "../../../../ui/markdown-stream/MarkdownStream.js";
+import MarkdownStream from "../../../../ui/markdown-stream/MarkdownStream.js";
 import "../rich-document/chat-message-source.js";
 import { RecordAnnotations, annotationRecordOf } from "@ai-matrx/rich-content/host/app-bindings";
 import { useAppDispatch, useAppSelector } from "../../../../store/hooks.js";
@@ -75,7 +75,7 @@ import { retryConversationTurn } from "../../../redux/execution-system/message-c
 import { commitInlineContentEdit } from "../../../redux/execution-system/message-crud/commit-inline-edit.thunk.js";
 import { InPlaceAnswerEditor } from "./InPlaceAnswerEditor.js";
 import { updateMessageRecord } from "../../../redux/execution-system/messages/messages.slice.js";
-import { handInPlaceCaret } from "../../../../utils/rich-editor/in-place/caret-handoff.js";
+import { handInPlaceCaret } from "@ai-matrx/rich-editor/in-place/caret-handoff";
 import { toast } from "../../../../host/notify.js";
 import { useDomCapturePrint } from "../../../../conversation/hooks/useDomCapturePrint.js";
 import { MessageFilesStrip } from "../../../../host/ui-slots.js";

package/dist/agents/components/messages-display/assistant/InPlaceAnswerEditor.js

@@ -2,7 +2,7 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import { Loader2 } from "lucide-react";
-import { takeInPlaceCaret } from "../../../../utils/rich-editor/in-place/caret-handoff.js";
+import { takeInPlaceCaret } from "@ai-matrx/rich-editor/in-place/caret-handoff";
 import { useAppDispatch } from "../../../../store/hooks.js";
 import { updateMessageRecord } from "../../../redux/execution-system/messages/messages.slice.js";
 import {

package/dist/agents/components/messages-display/conversation-tools/find-in-conversation.js

@@ -1,4 +1,4 @@
-import { collectRenderedFindRanges, findRenderedTextMatches } from "../../../../utils/rendered-find.js";
+import { collectRenderedFindRanges, findRenderedTextMatches } from "@ai-matrx/rich-content/utils/rendered-find";
 function findTextMatches(text, query) {
   return findRenderedTextMatches(text, query.trim());
 }

package/dist/agents/components/messages-display/message-options/buildTaskSeedFromMessage.js

@@ -1,5 +1,5 @@
 import { durableRecordId } from "@ai-matrx/kit/ids";
-import { plainTitleFromMarkdown } from "../../../../utils/markdown/plain-title.js";
+import { plainTitleFromMarkdown } from "@ai-matrx/rich-content/utils/plain-title";
 import { cleanMarkdown } from "@ai-matrx/content-ir/source";
 import { buildConversationMessageTitle } from "../../../utils/conversation-message-title.js";
 function buildMessagePreviewLabel(content, maxLength = 160) {

package/dist/agents/components/messages-display/user/AgentUserMessage.js

@@ -36,7 +36,7 @@ import {
 } from "../../../redux/execution-system/instance-variable-values/instance-variable-values.selectors.js";
 import { MessageAttachmentStrip } from "../MessageAttachmentStrip.js";
 import { isAttachmentMessagePart } from "../../context-items/normalize.js";
-import { MarkdownStream } from "../../../../ui/markdown-stream/MarkdownStream.js";
+import MarkdownStream from "../../../../ui/markdown-stream/MarkdownStream.js";
 import "../rich-document/chat-message-source.js";
 import { literalUserText } from "./literal-user-text.js";
 import { buildVariableDisplayLines } from "../../../utils/variable-display-lines.js";

package/dist/agents/components/messages-display/user/FirstTurnVariables.js

@@ -11,7 +11,7 @@ import { buildVariableDisplayLines } from "../../../utils/variable-display-lines
 import { EntityRef } from "../../../../host/ui-slots.js";
 import { useEntityTitles } from "../../../../host/ui-slots.js";
 import { AnswerValueView } from "../../../../host/ui-slots.js";
-import { isKindJsonText, valueCarriesKind } from "../../../../utils/content-ir/surfaces/json-kind-signal.js";
+import { isKindJsonText, valueCarriesKind } from "@ai-matrx/content-ir/surfaces";
 function kindCarryingValue(value) {
   if (!valueCarriesKind(value)) return null;
   if (typeof value === "string" && isKindJsonText(value)) {

package/dist/agents/components/run/AgentStatusIndicator.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx } from "react/jsx-runtime";
-import { ShimmerText } from "../../../ui/ShimmerText.js";
+import { ShimmerText } from "@ai-matrx/rich-content/utils/lifted/ShimmerText";
 function AgentStatusIndicator({
   message,
   compact = false

package/dist/agents/components/run/RunJobWorkingLine.js

@@ -1,7 +1,7 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
-import { ShimmerText } from "../../../ui/ShimmerText.js";
+import { ShimmerText } from "@ai-matrx/rich-content/utils/lifted/ShimmerText";
 import { useAppSelector } from "../../../store/hooks.js";
 import {
   selectRequestGenerationJob,

package/dist/agents/components/shared/AgentNewRunButton.js

@@ -6,7 +6,7 @@ import { useAppDispatch, useAppSelector } from "../../../store/hooks.js";
 import { startNewConversation } from "../../redux/execution-system/thunks/create-instance.thunk.js";
 import { PlusTapButton } from "@ai-matrx/tap-target/buttons";
 import { selectFocusedConversation } from "../../redux/execution-system/conversation-focus/conversation-focus.selectors.js";
-import { pushAddressWithoutNavigating } from "../../../ui/addressWithoutNavigating.js";
+import { pushAddressWithoutNavigating } from "@ai-matrx/rich-content/utils/addressWithoutNavigating";
 function AgentNewRunButton({ surfaceKey }) {
   const conversationId = useAppSelector(selectFocusedConversation(surfaceKey));
   const dispatch = useAppDispatch();

package/dist/agents/components/shared/AgentPlanningIndicator.js

@@ -1,6 +1,6 @@
 "use client";
 import { jsx } from "react/jsx-runtime";
-import { ShimmerText } from "../../../ui/ShimmerText.js";
+import { ShimmerText } from "@ai-matrx/rich-content/utils/lifted/ShimmerText";
 function AgentPlanningIndicator({
   compact = false,
   label = "Planning..."

package/dist/agents/conversation-export/conversation-transfer.js

@@ -1,6 +1,6 @@
 import { toast } from "../../host/notify.js";
 import { unwrapKindEnvelopes } from "@ai-matrx/content-ir/source";
-import { kindTextToMarkdown } from "../../utils/content-ir/surfaces/kind-text-to-markdown.js";
+import { kindTextToMarkdown } from "@ai-matrx/content-ir/surfaces";
 import { extractFlatText } from "../redux/execution-system/messages/messages.selectors.js";
 import { selectConversationTitle } from "../redux/execution-system/conversations/conversations.selectors.js";
 import { isMessagePinned } from "../message-pins/pinned-messages-store.js";

package/dist/agents/conversation-export/document-markdown.js

@@ -1,5 +1,5 @@
 import { unwrapKindEnvelopes } from "@ai-matrx/content-ir/source";
-import { kindTextToMarkdown } from "../../utils/content-ir/surfaces/kind-text-to-markdown.js";
+import { kindTextToMarkdown } from "@ai-matrx/content-ir/surfaces";
 function documentMarkdown(markdown) {
   return kindTextToMarkdown(unwrapKindEnvelopes(markdown));
 }

package/dist/agents/hooks/useConversationRoutePromotion.js

@@ -1,7 +1,7 @@
 "use client";
 import { useEffect, useEffectEvent, useRef } from "react";
 import { useRouter } from "../../host/navigation.js";
-import { replaceAddressWithoutNavigating } from "../../ui/addressWithoutNavigating.js";
+import { replaceAddressWithoutNavigating } from "@ai-matrx/rich-content/utils/addressWithoutNavigating";
 import { useAppDispatch, useAppSelector, useAppStore } from "../../store/hooks.js";
 import { waitForConversationPersisted } from "../redux/execution-system/conversations/conversation-persistence.js";
 import { selectMessageCount } from "../redux/execution-system/messages/messages.selectors.js";

package/dist/agents/hooks/useModelControls.js

@@ -1,7 +1,7 @@
 "use client";
 import { LLM_PARAMS_KEYS } from "@ai-matrx/agents/generated/llm-enums";
 import { UI_GATE_KEYS } from "../redux/agent-settings/ui-gates.js";
-import { isJsonObject } from "../../utils/json.js";
+import { isJsonObject } from "@ai-matrx/rich-content/utils/json";
 import { outputFormatControlKey } from "@ai-matrx/agents/models";
 function supportsTools(normalizedControls) {
   const normalizedTools = normalizedControls?.tools;

package/dist/agents/redux/agent-definition/converters.js

@@ -15,7 +15,7 @@ import { sanitizeAgentToolIds } from "./sanitize-tool-ids.js";
 import { stripNullish } from "../../../ui/payload.js";
 import { OrganizationContextError } from "@ai-matrx/agents/matrx";
 import { parseUiGates } from "../agent-settings/ui-gates.js";
-import { isJsonObject } from "../../../utils/json.js";
+import { isJsonObject } from "@ai-matrx/rich-content/utils/json";
 import {
   recordAgentDataIssue,
   recoverAgentDataField

package/dist/agents/redux/agent-definition/slice.js

@@ -1,5 +1,5 @@
 import { createSlice } from "@reduxjs/toolkit";
-import { isJsonObject } from "../../../utils/json.js";
+import { isJsonObject } from "@ai-matrx/rich-content/utils/json";
 import {
   shouldUpgradeFetchStatus
 } from "../../types/agent-definition.types.js";

package/dist/agents/redux/conversation-list/conversation-list.thunks.js

@@ -16,7 +16,7 @@ import {
 import { CONVERSATION_LIST_PAGE_SIZE } from "./conversation-list.types.js";
 import { excludeHiddenLane } from "../conversation-history/history-filters.js";
 import { getUserId, hasBrowserSession } from "../../../host/identity.js";
-import { conversationTitleText } from "../../../utils/content-ir/surfaces/kind-text-label.js";
+import { conversationTitleText } from "@ai-matrx/content-ir/surfaces";
 function resolveCanonicalAgentIdForConversationsFetch(input, state) {
   const versionFilter = input.versionFilter === void 0 ? null : input.versionFilter;
   let mapKey;

package/dist/agents/redux/execution-system/active-requests/active-requests.selectors.js

@@ -5,7 +5,7 @@ import {
 import { createSelector } from "@reduxjs/toolkit";
 import { isAnswerKeptWarning } from "./answer-kept-warning.js";
 import { blockMediaFileId } from "../utils/block-media-identity.js";
-import { DECISION_ANSWERS_BLOCK_TYPE } from "../../../../utils/content-ir/decision-answers-ids.js";
+import { DECISION_ANSWERS_BLOCK_TYPE } from "@ai-matrx/content-ir/surfaces";
 import { decisionAnswersText } from "@ai-matrx/agents/presentation/decision-answers";
 import {
   readEnvelope,

package/dist/agents/redux/execution-system/instance-context/sync-canvas-item-context.thunk.js

@@ -8,7 +8,7 @@ import { applyContextDeltaToContent } from "../instance-working-document/context
 import { CANVAS_ITEM_UPDATED_EVENT } from "../../../utils/canvas-item-event.js";
 import { invalidateCanvasItemCache } from "../../../../host/ui-slots.js";
 import { canvasGetVersionHistory, canvasGetById } from "../../../../host/ui-slots.js";
-import { isMaterializedArtifactId } from "../../../utils/artifactId.js";
+import { isMaterializedArtifactId } from "@ai-matrx/rich-content/utils/lifted/artifactId";
 import { recordUnavailable } from "../../../../host/diagnostics.js";
 function extractBody(content) {
   const stored = content;

package/dist/agents/redux/execution-system/thunks/process-stream.js

@@ -187,7 +187,7 @@ import { StreamProfiler } from "../../../../ui/stream-profiler.js";
 import { makePartialKindStalenessGate } from "@ai-matrx/content-ir/wire";
 import { prepareInboundRenderBlock } from "../utils/inbound-render-block.js";
 import { progressDataRenderBlock } from "../utils/progress-data-block.js";
-import { DECISION_ANSWERS_BLOCK_TYPE } from "../../../../utils/content-ir/decision-answers-ids.js";
+import { DECISION_ANSWERS_BLOCK_TYPE } from "@ai-matrx/content-ir/surfaces";
 import { recordContextReceipt } from "../context-rules/receipt-check.js";
 import { assembleMessageParts } from "../utils/assemble-cx-content-blocks.js";
 import { materializeMessageArtifacts } from "../../../../host/ui-slots.js";

package/dist/agents/redux/execution-system/thunks/resolve-base-url.js

@@ -14,6 +14,12 @@ import {
   supportsLocalAgentExecution
 } from "../../../../host/server/local-engine.js";
 import { selectOrganizationId } from "../../../../host/org.js";
+import { getChatHost, isChatHostConfigured } from "../../../../host/configure.js";
+import {
+  ConfidentialRoutingRefusedError,
+  decideRouting,
+  localityOfChannel
+} from "../../../routing/confidential-routing.js";
 const EC2_SANDBOX_SERVER_URL = typeof process !== "undefined" && process.env.NEXT_PUBLIC_EC2_SANDBOX_SERVER_URL || "";
 function dedicatedEc2ServerForConversation(state, conversationId) {
   if (selectActiveServer(state) !== "production") return null;
@@ -65,6 +71,17 @@ function resolveBaseUrlForConversation(state, conversationId) {
   return resolved.endsWith("/") ? resolved.slice(0, -1) : resolved;
 }
 function resolveBackendForConversation(state, conversationId) {
+  const resolved = resolveBackendUnchecked(state, conversationId);
+  if (resolved && isChatHostConfigured()) {
+    const decision = decideRouting(
+      getChatHost().routing.policy(conversationId),
+      localityOfChannel(resolved.channel)
+    );
+    if (!decision.allowed) throw new ConfidentialRoutingRefusedError(conversationId, decision);
+  }
+  return resolved;
+}
+function resolveBackendUnchecked(state, conversationId) {
   const entry = state.instanceUIState?.byConversationId?.[conversationId] ?? null;
   const overrideUrl = entry?.serverOverrideUrl ?? null;
   const headers = {

package/dist/agents/redux/execution-system/thunks/run-ai-stream.d.ts

@@ -201,6 +201,13 @@ export interface UnprocessableErrorClassification {
 }
 /** Classify HTTP 422s by server code; message text is legacy fallback only. */
 export declare function classifyUnprocessableError(errorCode: string | null, serverMessage: string): UnprocessableErrorClassification;
+/**
+ * `X-Matrx-Client-Sent-At` (epoch ms of the frozen submission moment) and
+ * `X-Matrx-Client-Prep-Ms` (submission → fetch dispatch). `submitAt` is a
+ * `performance.now()` stamp, so the epoch time is derived from the monotonic
+ * elapsed time — immune to wall-clock steps between submit and dispatch.
+ */
+export declare function buildLatencyHeaders(submitAt: number, nowPerf?: number, nowEpoch?: number): Record<string, string>;
 /**
  * Retry only after the server explicitly rejected the POST before execution
  * with `X-Matrx-Drain`. Once that proof exists, brief connection failures are

package/dist/agents/redux/execution-system/thunks/run-ai-stream.js

@@ -180,6 +180,13 @@ function waitForDrainRetry(ms, signal) {
     signal.addEventListener("abort", onAbort, { once: true });
   });
 }
+function buildLatencyHeaders(submitAt, nowPerf = performance.now(), nowEpoch = Date.now()) {
+  const prepMs = Math.max(0, nowPerf - submitAt);
+  return {
+    "X-Matrx-Client-Sent-At": String(Math.round(nowEpoch - prepMs)),
+    "X-Matrx-Client-Prep-Ms": String(Math.round(prepMs))
+  };
+}
 async function fetchThroughDeploymentDrain(url, init, signal) {
   const deadline = Date.now() + DEPLOYMENT_DRAIN_MAX_WAIT_MS;
   let drainObserved = false;
@@ -299,6 +306,11 @@ async function runAiStreamOnce(args) {
         );
       }
     }
+    if (kind !== "rejoin") {
+      Object.assign(fetchInit, {
+        headers: { ...headers, ...buildLatencyHeaders(submitAt) }
+      });
+    }
     response = kind === "rejoin" ? await fetchRejoin(
       url,
       fetchInit,
@@ -586,6 +598,7 @@ export {
   StreamCancelledError,
   StreamPhaseError,
   StreamRejoinUnavailableError,
+  buildLatencyHeaders,
   classifyUnprocessableError,
   fetchThroughDeploymentDrain,
   parseApiErrorBody,

package/dist/agents/redux/execution-system/thunks/run-headless-agent-json.js

@@ -151,7 +151,8 @@ async function failWarnedOutputMissingKeys(getState, opts, result) {
   }
   const who = holderName ?? (warning.holderType === "workflow" ? "The chosen workflow" : "The chosen agent");
   const keys = missing.join(", ");
-  const sentence = `${who} ran, but its answer is missing ${keys} this job needs, so nothing was saved. It was chosen although it does not declare those keys \u2014 pick one that does.`;
+  const brokenJson = !(result.success && isRecord) && looksLikeBrokenJson(result.fullResponse);
+  const sentence = brokenJson ? `${who} ran, but its answer came back as broken JSON, so it couldn't be read and nothing was saved. Run it again.` : `${who} ran, but its answer is missing ${keys} this job needs, so nothing was saved. It was chosen although it does not declare those keys \u2014 pick one that does.`;
   captureError({
     source: "agent-json-result",
     code: "mandate_output_unusable",
@@ -162,7 +163,7 @@ async function failWarnedOutputMissingKeys(getState, opts, result) {
     ...result.requestId ? { requestId: result.requestId } : {},
     ...result.conversationId ? { conversationId: result.conversationId } : {},
     raw: {
-      defect: "warned-holder-answer-missing-required-keys",
+      defect: brokenJson ? "answer-is-broken-json" : "warned-holder-answer-missing-required-keys",
       mandateKey: opts.mandateKey,
       surfaceKey: opts.surfaceKey,
       holderId,
@@ -179,6 +180,17 @@ async function failWarnedOutputMissingKeys(getState, opts, result) {
     errorDetail: `mandate_output_unusable: missing ${keys}`
   };
 }
+function looksLikeBrokenJson(text) {
+  if (!text) return false;
+  const t = text.trim().replace(/^```(?:json)?\s*/i, "").replace(/\s*```$/, "");
+  if (!t.startsWith("{") && !t.startsWith("[")) return false;
+  try {
+    JSON.parse(t);
+    return false;
+  } catch {
+    return true;
+  }
+}
 function missingRequiredKeys(record, required) {
   const answers = typeof record.answers === "object" && record.answers !== null && !Array.isArray(record.answers) ? record.answers : null;
   return required.filter((key) => !(key in record) && !(answers && key in answers));

package/dist/agents/redux/execution-system/utils/assemble-cx-content-blocks.js

@@ -9,7 +9,7 @@ import { readEnvelope } from "@ai-matrx/content-ir";
 import {
   DECISION_ANSWERS_BLOCK_TYPE,
   DECISION_ANSWERS_KIND
-} from "../../../../utils/content-ir/decision-answers-ids.js";
+} from "@ai-matrx/content-ir/surfaces";
 function isReasoningEnd(e) {
   return e.kind === "reasoning_end";
 }

package/dist/agents/redux/execution-system/utils/normalize-content-blocks.js

@@ -4,7 +4,7 @@ import {
   fromCxAudioPart,
   fromCxVideoPart
 } from "@ai-matrx/media/files";
-import { DECISION_ANSWERS_BLOCK_TYPE } from "../../../../utils/content-ir/decision-answers-ids.js";
+import { DECISION_ANSWERS_BLOCK_TYPE } from "@ai-matrx/content-ir/surfaces";
 import { withPerformedScript } from "../../../speech-script/types.js";
 import { seedPersistedEnvelopeCache } from "@ai-matrx/rich-content/kinds/registry/region-envelope-memo";
 function normalizeContentBlocks(rawBlocks) {

package/dist/agents/redux/execution-system/utils/output-contract-guard.js

@@ -3,7 +3,7 @@ import { hasField } from "@ai-matrx/agents/field-flags";
 import { peekMandateCatalogueEntry } from "../../../../host/ui-slots.js";
 import { fetchAgentOutputSchemas } from "../../../../mandates/output-contract.js";
 import { SURFACE_WRITE_TOOL_NAME } from "../../../../surfaces/runtime/surface-writeback.js";
-import { isJsonObject } from "../../../../utils/json.js";
+import { isJsonObject } from "@ai-matrx/rich-content/utils/json";
 import { readAgentName } from "../../../identity/agent-identity.js";
 function schemaName(schema) {
   if (!isJsonObject(schema)) return null;

package/dist/agents/redux/execution-system/utils/stream-block-accumulator.js

@@ -1,9 +1,9 @@
-import { parseDecisionOptionsFromBody } from "../../../../utils/inline-decision/decision-options.js";
-import { QuotedKindLift } from "../../../../utils/content-ir/surfaces/quoted-kind-lift.js";
-import { canonicalizeCompletedLegacyQuizEnvelope } from "../../../../utils/content-ir/legacy-quiz-envelope.js";
-import { envelopeMatchesParsedSource } from "../../../../utils/content-ir/envelope-parity.js";
-import { MarkdownEscapedKindJson } from "../../../../utils/content-ir/surfaces/markdown-escaped-kind.js";
-import { KindImageAltUnwrap } from "../../../../utils/content-ir/surfaces/kind-image-alt.js";
+import { parseDecisionOptionsFromBody } from "@ai-matrx/rich-content/utils/decision-options";
+import { QuotedKindLift } from "@ai-matrx/content-ir/surfaces";
+import { canonicalizeCompletedLegacyQuizEnvelope } from "@ai-matrx/content-ir/surfaces";
+import { envelopeMatchesParsedSource } from "@ai-matrx/content-ir/surfaces";
+import { MarkdownEscapedKindJson } from "@ai-matrx/content-ir/surfaces";
+import { KindImageAltUnwrap } from "@ai-matrx/content-ir/surfaces";
 import { FENCE_META_KEY, splitFenceInfo } from "@ai-matrx/content-ir/source";
 import {
   hasUnclosedBacktickRun,
@@ -16,7 +16,7 @@ import {
   kindGrammar,
   kindObjectProseBreak,
   bareRegionBreaksIntoProse
-} from "../../../../utils/content-ir/surfaces/json-kind-signal.js";
+} from "@ai-matrx/content-ir/surfaces";
 import {
   findBalancedXmlClose,
   initialXmlBalance
@@ -68,7 +68,7 @@ import {
 import {
   normalizeRecoveredContainerPiece,
   splitAroundEmbeddedKindJson
-} from "../../../../utils/content-ir/surfaces/embedded-kind-json.js";
+} from "@ai-matrx/content-ir/surfaces";
 import { captureError } from "../../../../host/diagnostics.js";
 const isSpecialCodeLanguage = (language) => SPECIAL_CODE_LANGUAGES.includes(language);
 const envelopeForCompletedXmlRegion = (tag, regionText) => hostSplitterEnvelopes()?.xmlRegion(tag, regionText) ?? null;

package/dist/agents/routing/confidential-routing.d.ts

@@ -0,0 +1,52 @@
+/**
+ * THE CONFIDENTIAL-ROUTING RULE (CHAT-UI-PACKAGE-DESIGN §12 risk 4 — the highest-severity item).
+ *
+ * A conversation pinned `local-only` (matrx-local's "Confidential") REFUSES every target that is
+ * not the person's own machine. It does not downgrade, it does not warn-and-send, and it never
+ * quietly picks a different target: the send fails with a named reason and a remedy, before a byte
+ * leaves the machine. Re-deriving this per host is how private text reaches a cloud provider.
+ *
+ * Ported from the frozen kernel (`src/compat/config.ts` `decideRouting`) into the real chat
+ * (lanes/agents-chat-proposal.md W0(a)). Enforced at the one place every send path resolves its
+ * target: `resolveBackendForConversation` (`agents/redux/execution-system/thunks/resolve-base-url.ts`).
+ * The policy comes from the host's `routing` port (`host/contract.ts`; default: `"any"`).
+ *
+ * PURE on purpose: no imports, no React, no Redux, no `window`. The decision is headless so it can
+ * move (e.g. into `@ai-matrx/agents`) without a rewrite.
+ */
+/**
+ * Where a conversation's text is allowed to go.
+ * - `"any"` — the platform default: any target the host offers.
+ * - `"local-only"` — CONFIDENTIAL: only the person's own machine (the Matrx Local engine).
+ */
+export type ChatRoutingPolicy = "any" | "local-only";
+/** Where a resolved target sends text. */
+export type ChatTargetLocality = "local" | "cloud";
+/** The refusal a confidential conversation produces instead of a silent fallback. */
+export interface ChatRoutingRefusal {
+    readonly allowed: false;
+    readonly code: "confidential_thread_cloud_target_refused";
+    readonly userMessage: string;
+    readonly remedy: string;
+}
+export type ChatRoutingDecision = {
+    readonly allowed: true;
+} | ChatRoutingRefusal;
+export declare const CONFIDENTIAL_REFUSAL_MESSAGE = "This conversation is marked confidential, so it cannot be sent to a cloud AI provider.";
+export declare const CONFIDENTIAL_REFUSAL_REMEDY = "Run it on Matrx Local on this computer, or start a new conversation that is not marked confidential.";
+/** The one decision. Anything that is not `"local"` is treated as cloud by its callers. */
+export declare function decideRouting(policy: ChatRoutingPolicy, target: ChatTargetLocality): ChatRoutingDecision;
+/**
+ * The locality of a resolved backend channel. Only `"local-runtime"` — the Matrx Local engine on
+ * this computer — is local. Every other channel (the global server, a sandbox override, a dedicated
+ * EC2 server, and any channel added later) is cloud: an unknown channel can never pass the rule.
+ */
+export declare function localityOfChannel(channel: string): ChatTargetLocality;
+/** Thrown by the target resolver when a confidential conversation would reach the cloud. */
+export declare class ConfidentialRoutingRefusedError extends Error {
+    readonly code: "confidential_thread_cloud_target_refused";
+    readonly remedy: string;
+    readonly conversationId: string;
+    constructor(conversationId: string, refusal: ChatRoutingRefusal);
+}
+export declare function isConfidentialRoutingRefusedError(error: unknown): error is ConfidentialRoutingRefusedError;

package/dist/agents/routing/confidential-routing.js

@@ -0,0 +1,38 @@
+const CONFIDENTIAL_REFUSAL_MESSAGE = "This conversation is marked confidential, so it cannot be sent to a cloud AI provider.";
+const CONFIDENTIAL_REFUSAL_REMEDY = "Run it on Matrx Local on this computer, or start a new conversation that is not marked confidential.";
+function decideRouting(policy, target) {
+  if (policy === "local-only" && target !== "local") {
+    return {
+      allowed: false,
+      code: "confidential_thread_cloud_target_refused",
+      userMessage: CONFIDENTIAL_REFUSAL_MESSAGE,
+      remedy: CONFIDENTIAL_REFUSAL_REMEDY
+    };
+  }
+  return { allowed: true };
+}
+function localityOfChannel(channel) {
+  return channel === "local-runtime" ? "local" : "cloud";
+}
+class ConfidentialRoutingRefusedError extends Error {
+  code = "confidential_thread_cloud_target_refused";
+  remedy;
+  conversationId;
+  constructor(conversationId, refusal) {
+    super(refusal.userMessage);
+    this.name = "ConfidentialRoutingRefusedError";
+    this.remedy = refusal.remedy;
+    this.conversationId = conversationId;
+  }
+}
+function isConfidentialRoutingRefusedError(error) {
+  return error instanceof ConfidentialRoutingRefusedError;
+}
+export {
+  CONFIDENTIAL_REFUSAL_MESSAGE,
+  CONFIDENTIAL_REFUSAL_REMEDY,
+  ConfidentialRoutingRefusedError,
+  decideRouting,
+  isConfidentialRoutingRefusedError,
+  localityOfChannel
+};