@ai-matrx/media 0.9.1 → 0.9.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @ai-matrx/media
 
+## 0.9.2
+
+`filesDb(client)` and the engine's `iamDb(client)` take any supabase-js client: a host's client is
+typed by the host's own generated Database, which never has to match the package's snapshot (0.9.0's
+`C extends SupabaseClient<Database>` refused the app's client as soon as its types were regenerated).
+The result is typed by the package's `files` / `iam` schema. Engine DB types regenerated. No consumer
+action required.
+
 ## 0.9.1
 
 `configureFilesHost` keeps the host on a `globalThis` `Symbol.for("ai-matrx.media.files-host")`

package/dist/files/engine/db-types.d.ts

@@ -38393,7 +38393,7 @@ export type FilesDatabase = {
                 };
                 Returns: Json;
             };
-            get_structured_list_for_selection: {
+            get_pick_list_for_selection: {
                 Args: {
                     p_list_id: string;
                 };
@@ -38556,7 +38556,7 @@ export type FilesDatabase = {
                 };
                 Returns: Json;
             };
-            get_user_lists_summary: {
+            get_pick_lists_summary: {
                 Args: {
                     p_user_id: string;
                 };

package/dist/files/engine/filesDb.d.ts

@@ -26,8 +26,7 @@
  */
 import type { SupabaseClient } from "@supabase/supabase-js";
 import type { Database } from "./db-types.js";
-/** A supabase client scoped to the `files` schema. */
-export declare function filesDb<C extends SupabaseClient<Database>>(client: C): import("@supabase/postgrest-js").PostgrestClient<import("./db-types.js").FilesDatabase, {
+declare const filesSchemaOf: (client: SupabaseClient<Database>) => import("@supabase/postgrest-js").PostgrestClient<import("./db-types.js").FilesDatabase, {
     PostgrestVersion: "14.5";
 }, "files", {
     Tables: {
@@ -1848,6 +1847,14 @@ export declare function filesDb<C extends SupabaseClient<Database>>(client: C):
     Enums: { [_ in never]: never; };
     CompositeTypes: { [_ in never]: never; };
 }>;
+/** The `files` schema client, typed by this package's own generated types. */
+export type FilesSchemaClient = ReturnType<typeof filesSchemaOf>;
+/**
+ * A supabase client scoped to the `files` schema. Takes ANY supabase-js client — a host's
+ * client is typed by the host's own (newer or older) generated Database, which never has to
+ * match this package's snapshot; the result is typed by the package's `files` schema.
+ */
+export declare function filesDb(client: SupabaseClient<any, any, any>): FilesSchemaClient;
 /**
  * The ONLY legal column list for reading `files.files` from the client.
  *
@@ -1911,3 +1918,4 @@ export declare function readFileRowById<C extends SupabaseClient<Database>>(clie
  * this cheap enough to call for a whole pile at once.
  */
 export declare function readFileSizesByIds<C extends SupabaseClient<Database>>(client: C, fileIds: string[]): Promise<Map<string, number | null>>;
+export {};

package/dist/files/engine/filesDb.js

@@ -1,5 +1,6 @@
+const filesSchemaOf = (client) => client.schema("files");
 function filesDb(client) {
-  return client.schema("files");
+  return filesSchemaOf(client);
 }
 const FILES_TABLE_COLUMNS = "id, created_by, updated_by, version, file_path, file_name, mime_type, size_bytes, checksum, visibility, current_version, parent_folder_id, metadata, created_at, updated_at, deleted_at, organization_id, parent_file_id, derivation_kind, derivation_metadata, duplicate_of_file_id, canonical_processed_document_id, width, height, duration_ms, origin_device_id, artifact_kind";
 const FILE_VERSIONS_TABLE_COLUMNS = "id, file_id, version_number, size_bytes, checksum, created_by, created_at, change_summary, organization_id, metadata";

package/dist/files/engine/filesDb.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/files/engine/filesDb.ts"],"sourcesContent":["/**\n * features/files/filesDb.ts\n *\n * The cloud-files tables live in the dedicated `files` Postgres schema (moved\n * out of `public` in the 2026 DB restructure; the `cld_` prefix was dropped).\n * supabase-js reaches a non-public schema via `.schema(...)`, so every table\n * read/write for these tables must go through `client.schema('files')`.\n *\n * Use this helper instead of inlining `.schema('files')` everywhere:\n *\n *   const db = filesDb(supabase);\n *   const { data } = await db.from('files').select(FILES_TABLE_COLUMNS);\n *   await db.from('folders').upsert(...);                  // files.folders\n *\n * NEVER `select('*')` on `files.files` / `files.file_versions` — the\n * server-only `storage_uri` column grant is REVOKEd and `*` errors.\n *\n * Works with the browser client, the SSR server client, and the admin client —\n * they all expose `.schema()`.\n *\n * NOTE: file-permission grants are NOT in this schema — they live in the\n * canonical `iam.permissions` store (resource_type='file'/'folder'). Reach\n * those via `iamDb(supabase).rpc('fn_list_resource_permissions', ...)` (see\n * utils/supabase/iamDb.ts) — list/grant/revoke are admin-gated inside the\n * RPC (iam.has_access), never a plain `.from('permissions')` select.\n */\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport type { Database } from \"./db-types\";\n\n/** A supabase client scoped to the `files` schema. */\nexport function filesDb<C extends SupabaseClient<Database>>(client: C) {\n  return client.schema(\"files\");\n}\n\n/**\n * The ONLY legal column list for reading `files.files` from the client.\n *\n * `storage_uri` (the native S3 location) is server-only: the column grant is\n * REVOKEd from `authenticated`, so `select(\"*\")` on `files.files` ERRORS with\n * \"permission denied for column storage_uri\". Never select `*` on this table\n * and never add `storage_uri` here. Renderable URLs come from the server's\n * FileRecord/FileRef URL contract (`url` / `cdn_url` / `download_url`),\n * never assembled client-side from a storage location.\n */\nexport const FILES_TABLE_COLUMNS =\n  \"id, created_by, updated_by, version, file_path, file_name, mime_type, size_bytes, checksum, visibility, current_version, parent_folder_id, metadata, created_at, updated_at, deleted_at, organization_id, parent_file_id, derivation_kind, derivation_metadata, duplicate_of_file_id, canonical_processed_document_id, width, height, duration_ms, origin_device_id, artifact_kind\";\n\n/**\n * Same rule for `files.file_versions` — its `storage_uri` is server-only.\n * Version bytes download via the server (`/files/{id}/versions/{n}/download`).\n */\nexport const FILE_VERSIONS_TABLE_COLUMNS =\n  \"id, file_id, version_number, size_bytes, checksum, created_by, created_at, change_summary, organization_id, metadata\";\n\n/**\n * Read one complete, RLS-authorized file row by durable identity.\n *\n * REST `FileRecord` is a render/navigation envelope and historically omitted\n * the owning organization. Mutation preparation must use this canonical DB\n * row so a path-targeted version write can preserve ownership exactly.\n */\nexport async function readFileRowById<C extends SupabaseClient<Database>>(\n  client: C,\n  fileId: string,\n) {\n  const { data, error } = await filesDb(client)\n    .from(\"files\")\n    .select(FILES_TABLE_COLUMNS)\n    .eq(\"id\", fileId)\n    .is(\"deleted_at\", null)\n    .maybeSingle();\n  if (error) throw error;\n  return data;\n}\n\n/**\n * Batch-read just the byte size for a set of file ids, RLS-authorized like\n * every other read here.\n *\n * Built for a source list that names files by id (a Rulebook's attached\n * sources, a resource pile) and needs to show — before any run touches\n * them — which of those files are genuinely empty. `size_bytes` alone (no\n * `storage_uri`, no need for the single-row reader's full column list) keeps\n * this cheap enough to call for a whole pile at once.\n */\nexport async function readFileSizesByIds<C extends SupabaseClient<Database>>(\n  client: C,\n  fileIds: string[],\n): Promise<Map<string, number | null>> {\n  const out = new Map<string, number | null>();\n  if (fileIds.length === 0) return out;\n  const { data, error } = await filesDb(client)\n    .from(\"files\")\n    .select(\"id, size_bytes\")\n    .in(\"id\", fileIds)\n    .is(\"deleted_at\", null);\n  if (error) throw error;\n  for (const row of data ?? []) {\n    out.set(row.id, row.size_bytes ?? null);\n  }\n  return out;\n}\n"],"mappings":"AA8BO,SAAS,QAA4C,QAAW;AACrE,SAAO,OAAO,OAAO,OAAO;AAC9B;AAYO,MAAM,sBACX;AAMK,MAAM,8BACX;AASF,eAAsB,gBACpB,QACA,QACA;AACA,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,QAAQ,MAAM,EACzC,KAAK,OAAO,EACZ,OAAO,mBAAmB,EAC1B,GAAG,MAAM,MAAM,EACf,GAAG,cAAc,IAAI,EACrB,YAAY;AACf,MAAI,MAAO,OAAM;AACjB,SAAO;AACT;AAYA,eAAsB,mBACpB,QACA,SACqC;AACrC,QAAM,MAAM,oBAAI,IAA2B;AAC3C,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,QAAQ,MAAM,EACzC,KAAK,OAAO,EACZ,OAAO,gBAAgB,EACvB,GAAG,MAAM,OAAO,EAChB,GAAG,cAAc,IAAI;AACxB,MAAI,MAAO,OAAM;AACjB,aAAW,OAAO,QAAQ,CAAC,GAAG;AAC5B,QAAI,IAAI,IAAI,IAAI,IAAI,cAAc,IAAI;AAAA,EACxC;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/files/engine/filesDb.ts"],"sourcesContent":["/**\n * features/files/filesDb.ts\n *\n * The cloud-files tables live in the dedicated `files` Postgres schema (moved\n * out of `public` in the 2026 DB restructure; the `cld_` prefix was dropped).\n * supabase-js reaches a non-public schema via `.schema(...)`, so every table\n * read/write for these tables must go through `client.schema('files')`.\n *\n * Use this helper instead of inlining `.schema('files')` everywhere:\n *\n *   const db = filesDb(supabase);\n *   const { data } = await db.from('files').select(FILES_TABLE_COLUMNS);\n *   await db.from('folders').upsert(...);                  // files.folders\n *\n * NEVER `select('*')` on `files.files` / `files.file_versions` — the\n * server-only `storage_uri` column grant is REVOKEd and `*` errors.\n *\n * Works with the browser client, the SSR server client, and the admin client —\n * they all expose `.schema()`.\n *\n * NOTE: file-permission grants are NOT in this schema — they live in the\n * canonical `iam.permissions` store (resource_type='file'/'folder'). Reach\n * those via `iamDb(supabase).rpc('fn_list_resource_permissions', ...)` (see\n * utils/supabase/iamDb.ts) — list/grant/revoke are admin-gated inside the\n * RPC (iam.has_access), never a plain `.from('permissions')` select.\n */\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport type { Database } from \"./db-types\";\n\nconst filesSchemaOf = (client: SupabaseClient<Database>) => client.schema(\"files\");\n\n/** The `files` schema client, typed by this package's own generated types. */\nexport type FilesSchemaClient = ReturnType<typeof filesSchemaOf>;\n\n/**\n * A supabase client scoped to the `files` schema. Takes ANY supabase-js client — a host's\n * client is typed by the host's own (newer or older) generated Database, which never has to\n * match this package's snapshot; the result is typed by the package's `files` schema.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function filesDb(client: SupabaseClient<any, any, any>): FilesSchemaClient {\n  return filesSchemaOf(client as unknown as SupabaseClient<Database>);\n}\n\n/**\n * The ONLY legal column list for reading `files.files` from the client.\n *\n * `storage_uri` (the native S3 location) is server-only: the column grant is\n * REVOKEd from `authenticated`, so `select(\"*\")` on `files.files` ERRORS with\n * \"permission denied for column storage_uri\". Never select `*` on this table\n * and never add `storage_uri` here. Renderable URLs come from the server's\n * FileRecord/FileRef URL contract (`url` / `cdn_url` / `download_url`),\n * never assembled client-side from a storage location.\n */\nexport const FILES_TABLE_COLUMNS =\n  \"id, created_by, updated_by, version, file_path, file_name, mime_type, size_bytes, checksum, visibility, current_version, parent_folder_id, metadata, created_at, updated_at, deleted_at, organization_id, parent_file_id, derivation_kind, derivation_metadata, duplicate_of_file_id, canonical_processed_document_id, width, height, duration_ms, origin_device_id, artifact_kind\";\n\n/**\n * Same rule for `files.file_versions` — its `storage_uri` is server-only.\n * Version bytes download via the server (`/files/{id}/versions/{n}/download`).\n */\nexport const FILE_VERSIONS_TABLE_COLUMNS =\n  \"id, file_id, version_number, size_bytes, checksum, created_by, created_at, change_summary, organization_id, metadata\";\n\n/**\n * Read one complete, RLS-authorized file row by durable identity.\n *\n * REST `FileRecord` is a render/navigation envelope and historically omitted\n * the owning organization. Mutation preparation must use this canonical DB\n * row so a path-targeted version write can preserve ownership exactly.\n */\nexport async function readFileRowById<C extends SupabaseClient<Database>>(\n  client: C,\n  fileId: string,\n) {\n  const { data, error } = await filesDb(client)\n    .from(\"files\")\n    .select(FILES_TABLE_COLUMNS)\n    .eq(\"id\", fileId)\n    .is(\"deleted_at\", null)\n    .maybeSingle();\n  if (error) throw error;\n  return data;\n}\n\n/**\n * Batch-read just the byte size for a set of file ids, RLS-authorized like\n * every other read here.\n *\n * Built for a source list that names files by id (a Rulebook's attached\n * sources, a resource pile) and needs to show — before any run touches\n * them — which of those files are genuinely empty. `size_bytes` alone (no\n * `storage_uri`, no need for the single-row reader's full column list) keeps\n * this cheap enough to call for a whole pile at once.\n */\nexport async function readFileSizesByIds<C extends SupabaseClient<Database>>(\n  client: C,\n  fileIds: string[],\n): Promise<Map<string, number | null>> {\n  const out = new Map<string, number | null>();\n  if (fileIds.length === 0) return out;\n  const { data, error } = await filesDb(client)\n    .from(\"files\")\n    .select(\"id, size_bytes\")\n    .in(\"id\", fileIds)\n    .is(\"deleted_at\", null);\n  if (error) throw error;\n  for (const row of data ?? []) {\n    out.set(row.id, row.size_bytes ?? null);\n  }\n  return out;\n}\n"],"mappings":"AA6BA,MAAM,gBAAgB,CAAC,WAAqC,OAAO,OAAO,OAAO;AAW1E,SAAS,QAAQ,QAA0D;AAChF,SAAO,cAAc,MAA6C;AACpE;AAYO,MAAM,sBACX;AAMK,MAAM,8BACX;AASF,eAAsB,gBACpB,QACA,QACA;AACA,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,QAAQ,MAAM,EACzC,KAAK,OAAO,EACZ,OAAO,mBAAmB,EAC1B,GAAG,MAAM,MAAM,EACf,GAAG,cAAc,IAAI,EACrB,YAAY;AACf,MAAI,MAAO,OAAM;AACjB,SAAO;AACT;AAYA,eAAsB,mBACpB,QACA,SACqC;AACrC,QAAM,MAAM,oBAAI,IAA2B;AAC3C,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,QAAQ,MAAM,EACzC,KAAK,OAAO,EACZ,OAAO,gBAAgB,EACvB,GAAG,MAAM,OAAO,EAChB,GAAG,cAAc,IAAI;AACxB,MAAI,MAAO,OAAM;AACjB,aAAW,OAAO,QAAQ,CAAC,GAAG;AAC5B,QAAI,IAAI,IAAI,IAAI,IAAI,cAAc,IAAI;AAAA,EACxC;AACA,SAAO;AACT;","names":[]}

package/dist/files/engine/host/supabase.d.ts

@@ -15,7 +15,7 @@ export declare function createClient(): FilesDb;
  * configured host's client at that moment (methods stay bound to it).
  */
 export declare const supabase: FilesDb;
-export declare function iamDb<C extends FilesDb>(client: C): import("@supabase/postgrest-js").PostgrestClient<FilesDatabase, {
+declare const iamSchemaOf: (client: FilesDb) => import("@supabase/postgrest-js").PostgrestClient<FilesDatabase, {
     PostgrestVersion: "14.5";
 }, "iam", {
     Tables: {
@@ -3802,6 +3802,8 @@ export declare function iamDb<C extends FilesDb>(client: C): import("@supabase/p
     Enums: { [_ in never]: never; };
     CompositeTypes: { [_ in never]: never; };
 }>;
+/** The `iam` schema client for any supabase-js client (see `filesDb`). */
+export declare function iamDb(client: SupabaseClient<any, any, any>): ReturnType<typeof iamSchemaOf>;
 export declare const runWithSessionRetry: <T>(run: () => PromiseLike<import("@ai-matrx/data/db").AuthRetryableResult<T>>) => Promise<import("@ai-matrx/data/db").AuthRetryableResult<T> & {
     retried: boolean;
     sessionRecovered: boolean;

package/dist/files/engine/host/supabase.js

@@ -15,8 +15,9 @@ const supabase = new Proxy({}, {
     return typeof value === "function" ? value.bind(db) : value;
   }
 });
+const iamSchemaOf = (client) => client.schema("iam");
 function iamDb(client) {
-  return client.schema("iam");
+  return iamSchemaOf(client);
 }
 const runWithSessionRetry = createSessionRetry({
   auth: { getSession: () => createClient().auth.getSession() }

package/dist/files/engine/host/supabase.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/files/engine/host/supabase.ts"],"sourcesContent":["/**\n * Database seam — the host's supabase-js client, read at CALL time. Same\n * names the call sites imported from matrx-frontend's `utils/supabase/*` and\n * `lib/supabase/authRetry`.\n */\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createSessionRetry } from \"@ai-matrx/data/db\";\nimport type { FilesDatabase } from \"../db-types\";\nimport { getFilesHost } from \"./configure\";\n\nexport {\n  isMissingSessionError,\n  SessionUnavailableError,\n  type AuthRetryableResult,\n} from \"@ai-matrx/data/db\";\nexport { getClaimsUser } from \"../support/claimsUser\";\n\nexport type FilesDb = SupabaseClient<FilesDatabase>;\n\n/** The configured host's database client. */\nexport function createClient(): FilesDb {\n  return getFilesHost(\"db\").db as unknown as FilesDb;\n}\n\n/**\n * `supabase` as the call sites knew it: every property read goes to the\n * configured host's client at that moment (methods stay bound to it).\n */\nexport const supabase: FilesDb = new Proxy({} as FilesDb, {\n  get(_target, key) {\n    const db = createClient() as unknown as Record<PropertyKey, unknown>;\n    const value = db[key];\n    return typeof value === \"function\" ? (value as (...a: unknown[]) => unknown).bind(db) : value;\n  },\n});\n\nexport function iamDb<C extends FilesDb>(client: C) {\n  return client.schema(\"iam\");\n}\n\nexport const runWithSessionRetry = createSessionRetry({\n  auth: { getSession: () => createClient().auth.getSession() },\n});\n"],"mappings":"AAOA,SAAS,0BAA0B;AAEnC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qBAAqB;AAKvB,SAAS,eAAwB;AACtC,SAAO,aAAa,IAAI,EAAE;AAC5B;AAMO,MAAM,WAAoB,IAAI,MAAM,CAAC,GAAc;AAAA,EACxD,IAAI,SAAS,KAAK;AAChB,UAAM,KAAK,aAAa;AACxB,UAAM,QAAQ,GAAG,GAAG;AACpB,WAAO,OAAO,UAAU,aAAc,MAAuC,KAAK,EAAE,IAAI;AAAA,EAC1F;AACF,CAAC;AAEM,SAAS,MAAyB,QAAW;AAClD,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEO,MAAM,sBAAsB,mBAAmB;AAAA,EACpD,MAAM,EAAE,YAAY,MAAM,aAAa,EAAE,KAAK,WAAW,EAAE;AAC7D,CAAC;","names":[]}
+{"version":3,"sources":["../../../../src/files/engine/host/supabase.ts"],"sourcesContent":["/**\n * Database seam — the host's supabase-js client, read at CALL time. Same\n * names the call sites imported from matrx-frontend's `utils/supabase/*` and\n * `lib/supabase/authRetry`.\n */\n\nimport type { SupabaseClient } from \"@supabase/supabase-js\";\nimport { createSessionRetry } from \"@ai-matrx/data/db\";\nimport type { FilesDatabase } from \"../db-types\";\nimport { getFilesHost } from \"./configure\";\n\nexport {\n  isMissingSessionError,\n  SessionUnavailableError,\n  type AuthRetryableResult,\n} from \"@ai-matrx/data/db\";\nexport { getClaimsUser } from \"../support/claimsUser\";\n\nexport type FilesDb = SupabaseClient<FilesDatabase>;\n\n/** The configured host's database client. */\nexport function createClient(): FilesDb {\n  return getFilesHost(\"db\").db as unknown as FilesDb;\n}\n\n/**\n * `supabase` as the call sites knew it: every property read goes to the\n * configured host's client at that moment (methods stay bound to it).\n */\nexport const supabase: FilesDb = new Proxy({} as FilesDb, {\n  get(_target, key) {\n    const db = createClient() as unknown as Record<PropertyKey, unknown>;\n    const value = db[key];\n    return typeof value === \"function\" ? (value as (...a: unknown[]) => unknown).bind(db) : value;\n  },\n});\n\nconst iamSchemaOf = (client: FilesDb) => client.schema(\"iam\");\n\n/** The `iam` schema client for any supabase-js client (see `filesDb`). */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function iamDb(client: SupabaseClient<any, any, any>): ReturnType<typeof iamSchemaOf> {\n  return iamSchemaOf(client as unknown as FilesDb);\n}\n\nexport const runWithSessionRetry = createSessionRetry({\n  auth: { getSession: () => createClient().auth.getSession() },\n});\n"],"mappings":"AAOA,SAAS,0BAA0B;AAEnC,SAAS,oBAAoB;AAE7B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,qBAAqB;AAKvB,SAAS,eAAwB;AACtC,SAAO,aAAa,IAAI,EAAE;AAC5B;AAMO,MAAM,WAAoB,IAAI,MAAM,CAAC,GAAc;AAAA,EACxD,IAAI,SAAS,KAAK;AAChB,UAAM,KAAK,aAAa;AACxB,UAAM,QAAQ,GAAG,GAAG;AACpB,WAAO,OAAO,UAAU,aAAc,MAAuC,KAAK,EAAE,IAAI;AAAA,EAC1F;AACF,CAAC;AAED,MAAM,cAAc,CAAC,WAAoB,OAAO,OAAO,KAAK;AAIrD,SAAS,MAAM,QAAuE;AAC3F,SAAO,YAAY,MAA4B;AACjD;AAEO,MAAM,sBAAsB,mBAAmB;AAAA,EACpD,MAAM,EAAE,YAAY,MAAM,aAAa,EAAE,KAAK,WAAW,EAAE;AAC7D,CAAC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/media",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "The AI Matrx media components kit: durable-ref-only renderers for images, video, audio and file thumbnails plus live TTS playback that just work with the Matrx file system — headless core hooks plus DOM bindings, wired to an injected MediaClient. A signed URL is a handoff, never an identity.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -506,10 +506,10 @@
     "tus-js-client": "^4.3.1",
     "@ai-matrx/associations": "latest",
     "@ai-matrx/data": "latest",
-    "@ai-matrx/design-system": "latest",
     "@ai-matrx/kit": "latest",
-    "@ai-matrx/agents": "latest",
-    "@ai-matrx/realtime": "latest"
+    "@ai-matrx/realtime": "latest",
+    "@ai-matrx/design-system": "latest",
+    "@ai-matrx/agents": "latest"
   },
   "peerDependencies": {
     "@reduxjs/toolkit": ">=2.0.0",