@belonguniverseai/react-sdk 0.4.2 → 0.4.3

package/dist/component/{mindmap-definition-RKZ34NQL-hRhkTdF6.js → mindmap-definition-RKZ34NQL-BND7KvId.js}

@@ -1,6 +1,6 @@
-import { g as oe } from "./chunk-55IACEB6-C-RnqcTj.js";
-import { s as ae } from "./chunk-2J33WTMH-I7HgfCPn.js";
-import { _ as l, l as C, p as ce, r as le, G as he, K as G, c as B, i as F, b6 as de, af as ge, ag as ue, ah as pe } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { g as oe } from "./chunk-55IACEB6-DnliqOsL.js";
+import { s as ae } from "./chunk-2J33WTMH-Bsl2GBCp.js";
+import { _ as l, l as C, p as ce, r as le, G as he, K as G, c as B, i as F, b6 as de, af as ge, ag as ue, ah as pe } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 const b = [];
@@ -830,4 +830,4 @@ var _e = Y, ke = 12, N = {
 export {
   we as diagram
 };
-//# sourceMappingURL=mindmap-definition-RKZ34NQL-hRhkTdF6.js.map
+//# sourceMappingURL=mindmap-definition-RKZ34NQL-BND7KvId.js.map

package/dist/component/{pieDiagram-4H26LBE5-DAAEUZCY.js → pieDiagram-4H26LBE5-CvDdRFnN.js}

@@ -1,7 +1,7 @@
-import { a0 as S, S as R, b5 as J, g as Q, s as Y, a as tt, b as et, t as at, q as nt, _ as g, l as W, c as rt, I as it, N as st, a7 as lt, e as ot, B as ct, K as ut } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
-import { p as gt } from "./chunk-4BX2VUAB-CZBTp8pg.js";
+import { a0 as S, S as R, b5 as J, g as Q, s as Y, a as tt, b as et, t as at, q as nt, _ as g, l as W, c as rt, I as it, N as st, a7 as lt, e as ot, B as ct, K as ut } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
+import { p as gt } from "./chunk-4BX2VUAB-BKmdmdRY.js";
 import { p as dt } from "./wardley-L42UT6IY-HA1eSIS_.js";
-import { d as P } from "./arc-COH48Rtu.js";
+import { d as P } from "./arc-ByLm_58u.js";
 import { o as pt } from "./ordinal-D0x7izaa.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
@@ -163,4 +163,4 @@ var vt = ut.pie, z = {
 export {
   Lt as diagram
 };
-//# sourceMappingURL=pieDiagram-4H26LBE5-DAAEUZCY.js.map
+//# sourceMappingURL=pieDiagram-4H26LBE5-CvDdRFnN.js.map

package/dist/component/{quadrantDiagram-W4KKPZXB-Benxdf_G.js → quadrantDiagram-W4KKPZXB-DMHCLEev.js}

@@ -1,5 +1,5 @@
-import { s as Se, g as _e, t as ee, q as Ae, a as ke, b as Fe, _ as r, c as Et, l as qt, d as vt, e as Pe, B as ve, K as z, i as Ce, a4 as Le } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
-import { l as te } from "./linear-Cih5KQ00.js";
+import { s as Se, g as _e, t as ee, q as Ae, a as ke, b as Fe, _ as r, c as Et, l as qt, d as vt, e as Pe, B as ve, K as z, i as Ce, a4 as Le } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
+import { l as te } from "./linear-BcyQd0z0.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 var Ct = (function() {
@@ -1030,4 +1030,4 @@ var Ve = /* @__PURE__ */ r(function() {
 export {
   We as diagram
 };
-//# sourceMappingURL=quadrantDiagram-W4KKPZXB-Benxdf_G.js.map
+//# sourceMappingURL=quadrantDiagram-W4KKPZXB-DMHCLEev.js.map

package/dist/component/{requirementDiagram-4Y6WPE33-BxvkbDYP.js → requirementDiagram-4Y6WPE33-BomcVKb4.js}

@@ -1,6 +1,6 @@
-import { g as Ge } from "./chunk-55IACEB6-C-RnqcTj.js";
-import { s as ze } from "./chunk-2J33WTMH-I7HgfCPn.js";
-import { _ as h, G as Ye, b as Xe, a as Je, s as Ze, g as et, q as tt, t as st, c as ke, l as Ne, B as it, F as rt, p as nt, r as at, u as lt } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { g as Ge } from "./chunk-55IACEB6-DnliqOsL.js";
+import { s as ze } from "./chunk-2J33WTMH-Bsl2GBCp.js";
+import { _ as h, G as Ye, b as Xe, a as Je, s as Ze, g as et, q as tt, t as st, c as ke, l as Ne, B as it, F as rt, p as nt, r as at, u as lt } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 var qe = (function() {
@@ -885,4 +885,4 @@ var mt = /* @__PURE__ */ h(async function(e, u, o, n) {
 export {
   Rt as diagram
 };
-//# sourceMappingURL=requirementDiagram-4Y6WPE33-BxvkbDYP.js.map
+//# sourceMappingURL=requirementDiagram-4Y6WPE33-BomcVKb4.js.map

package/dist/component/{sankeyDiagram-5OEKKPKP-RPwwVwu3.js → sankeyDiagram-5OEKKPKP-D4rmtFCn.js}

@@ -1,4 +1,4 @@
-import { q as kt, t as mt, s as xt, g as _t, b as vt, a as bt, _ as y, c as ot, C as St, d as G, ai as wt, B as Lt, k as Et } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { q as kt, t as mt, s as xt, g as _t, b as vt, a as bt, _ as y, c as ot, C as St, d as G, ai as wt, B as Lt, k as Et } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 import { o as Tt } from "./ordinal-D0x7izaa.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
@@ -859,4 +859,4 @@ var ge = {
 export {
   ge as diagram
 };
-//# sourceMappingURL=sankeyDiagram-5OEKKPKP-RPwwVwu3.js.map
+//# sourceMappingURL=sankeyDiagram-5OEKKPKP-D4rmtFCn.js.map

package/dist/component/{sequenceDiagram-3UESZ5HK-C-prnAtS.js → sequenceDiagram-3UESZ5HK-C0iEDbuE.js}

@@ -1,6 +1,6 @@
-import { _ as g, o as tr, c as $, d as Mt, l as at, j as Ce, e as er, f as rr, k as P, b as ke, s as ar, q as sr, a as ir, g as nr, t as or, v as cr, J as lr, B as hr, i as Bt, u as Z, a5 as Q, a6 as wt, a7 as Me, a8 as dr, G as Yt, a9 as Tr, aa as Be } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
-import { a as pr, b as ee, g as dt, d as Er, e as re, f as ae } from "./chunk-ND2GUHAM-DuitYR9A.js";
-import { I as ur } from "./chunk-QZHKN3VN-B9uI1TYV.js";
+import { _ as g, o as tr, c as $, d as Mt, l as at, j as Ce, e as er, f as rr, k as P, b as ke, s as ar, q as sr, a as ir, g as nr, t as or, v as cr, J as lr, B as hr, i as Bt, u as Z, a5 as Q, a6 as wt, a7 as Me, a8 as dr, G as Yt, a9 as Tr, aa as Be } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
+import { a as pr, b as ee, g as dt, d as Er, e as re, f as ae } from "./chunk-ND2GUHAM-COsoTCa0.js";
+import { I as ur } from "./chunk-QZHKN3VN-9FjIin4_.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 var $t = (function() {
@@ -2894,4 +2894,4 @@ var ra = /* @__PURE__ */ g(async function(e, t, a) {
 export {
   Ta as diagram
 };
-//# sourceMappingURL=sequenceDiagram-3UESZ5HK-C-prnAtS.js.map
+//# sourceMappingURL=sequenceDiagram-3UESZ5HK-C0iEDbuE.js.map

package/dist/component/{stateDiagram-AJRCARHV-BEIQAx9e.js → stateDiagram-AJRCARHV-x0PonbWT.js}

@@ -1,5 +1,5 @@
-import { s as R, a as W, S as N } from "./chunk-AQP2D5EJ-BDVikNJT.js";
-import { _ as f, c as t, d as M, l as S, e as P, k as z, ac as _, ad as U, a9 as C, u as F } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { s as R, a as W, S as N } from "./chunk-AQP2D5EJ-CwBA3VVY.js";
+import { _ as f, c as t, d as M, l as S, e as P, k as z, ac as _, ad as U, a9 as C, u as F } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 import { G as O } from "./graph-BZLHvygk.js";
 import { l as J } from "./layout-Bu6nRdWm.js";
 globalThis.process = globalThis.process || { env: {} };
@@ -263,4 +263,4 @@ var X = /* @__PURE__ */ f((e) => e.append("circle").attr("class", "start-state")
 export {
   ot as diagram
 };
-//# sourceMappingURL=stateDiagram-AJRCARHV-BEIQAx9e.js.map
+//# sourceMappingURL=stateDiagram-AJRCARHV-x0PonbWT.js.map

package/dist/component/{stateDiagram-v2-BHNVJYJU-BD5dkY8l.js → stateDiagram-v2-BHNVJYJU-6Lq1LlSV.js}

@@ -1,5 +1,5 @@
-import { s as e, b as r, a as s, S as t } from "./chunk-AQP2D5EJ-BDVikNJT.js";
-import { _ as l } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { s as e, b as r, a as s, S as t } from "./chunk-AQP2D5EJ-CwBA3VVY.js";
+import { _ as l } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 var b = {
@@ -16,4 +16,4 @@ var b = {
 export {
   b as diagram
 };
-//# sourceMappingURL=stateDiagram-v2-BHNVJYJU-BD5dkY8l.js.map
+//# sourceMappingURL=stateDiagram-v2-BHNVJYJU-6Lq1LlSV.js.map

package/dist/component/{timeline-definition-PNZ67QCA-DQJPMkfL.js → timeline-definition-PNZ67QCA-CIx8lwoQ.js}

@@ -1,5 +1,5 @@
-import { _ as o, G as gt, af as Rt, ag as Ct, ah as Wt, c as pt, l as E, N as Pt, a7 as Bt, ai as ft, d as U, F as Vt, aj as Ft, B as zt } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
-import { d as ot } from "./arc-COH48Rtu.js";
+import { _ as o, G as gt, af as Rt, ag as Ct, ah as Wt, c as pt, l as E, N as Pt, a7 as Bt, ai as ft, d as U, F as Vt, aj as Ft, B as zt } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
+import { d as ot } from "./arc-ByLm_58u.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 var tt = (function() {
@@ -1055,4 +1055,4 @@ var Qt = /* @__PURE__ */ o(function(e, t, n, i, r, h = !1) {
 export {
   me as diagram
 };
-//# sourceMappingURL=timeline-definition-PNZ67QCA-DQJPMkfL.js.map
+//# sourceMappingURL=timeline-definition-PNZ67QCA-CIx8lwoQ.js.map

package/dist/component/{vennDiagram-CIIHVFJN-CreOqXMc.js → vennDiagram-CIIHVFJN-B27Ya-3D.js}

@@ -1,4 +1,4 @@
-import { aX as Gt, s as Wt, g as Kt, t as Ht, q as Xt, a as Yt, b as Zt, _ as w, G as wt, N as Jt, d as ot, ao as Qt, af as $t, ag as te, ah as ee, e as ne, B as se, I as ie, K as oe } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { aX as Gt, s as Wt, g as Kt, t as Ht, q as Xt, a as Yt, b as Zt, _ as w, G as wt, N as Jt, d as ot, ao as Qt, af as $t, ag as te, ah as ee, e as ne, B as se, I as ie, K as oe } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 const kt = (t, n) => Gt(t, "a", -n), _t = 1e-10;
@@ -1557,4 +1557,4 @@ var qe = { draw: Ve }, Ge = {
 export {
   Ge as diagram
 };
-//# sourceMappingURL=vennDiagram-CIIHVFJN-CreOqXMc.js.map
+//# sourceMappingURL=vennDiagram-CIIHVFJN-B27Ya-3D.js.map

package/dist/component/{wardleyDiagram-YWT4CUSO--dbQqySn.js → wardleyDiagram-YWT4CUSO-efmvFwPj.js}

@@ -1,5 +1,5 @@
-import { s as St, g as Mt, t as Nt, q as Tt, a as zt, b as Lt, _ as u, a4 as At, G as Xt, I as U, l as K, N as Et, e as Yt, B as It, c as j } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
-import { p as Bt } from "./chunk-4BX2VUAB-CZBTp8pg.js";
+import { s as St, g as Mt, t as Nt, q as Tt, a as zt, b as Lt, _ as u, a4 as At, G as Xt, I as U, l as K, N as Et, e as Yt, B as It, c as j } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
+import { p as Bt } from "./chunk-4BX2VUAB-BKmdmdRY.js";
 import { p as Ft } from "./wardley-L42UT6IY-HA1eSIS_.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
@@ -678,4 +678,4 @@ var Dt = {
 export {
   Qt as diagram
 };
-//# sourceMappingURL=wardleyDiagram-YWT4CUSO--dbQqySn.js.map
+//# sourceMappingURL=wardleyDiagram-YWT4CUSO-efmvFwPj.js.map

package/dist/component/{xychartDiagram-2RQKCTM6-BOSkmQiX.js → xychartDiagram-2RQKCTM6-DNJmorKa.js}

@@ -1,7 +1,7 @@
-import { s as ei, g as si, t as Lt, q as ni, a as ai, b as oi, _ as a, l as Et, N as ri, e as hi, B as li, G as dt, i as ci, I as It, K as ui, a4 as gi, ap as xi, ac as Rt } from "./mermaid-GHXKKRXX-B6ix-Z04.js";
+import { s as ei, g as si, t as Lt, q as ni, a as ai, b as oi, _ as a, l as Et, N as ri, e as hi, B as li, G as dt, i as ci, I as It, K as ui, a4 as gi, ap as xi, ac as Rt } from "./mermaid-GHXKKRXX-DiPCfS1n.js";
 import { i as di } from "./init-BOu0eQYQ.js";
 import { o as fi } from "./ordinal-D0x7izaa.js";
-import { l as Dt } from "./linear-Cih5KQ00.js";
+import { l as Dt } from "./linear-BcyQd0z0.js";
 globalThis.process = globalThis.process || { env: {} };
 globalThis.global = globalThis.global || globalThis;
 function pi(t, i, e) {
@@ -1372,4 +1372,4 @@ var Ti = /* @__PURE__ */ a(function() {
 export {
   Mi as diagram
 };
-//# sourceMappingURL=xychartDiagram-2RQKCTM6-BOSkmQiX.js.map
+//# sourceMappingURL=xychartDiagram-2RQKCTM6-DNJmorKa.js.map

package/dist/components/ai-elements/dock-link.d.ts

@@ -0,0 +1,27 @@
+import { ReactNode, ComponentProps } from 'react';
+import { Streamdown } from 'streamdown';
+type DockLinkProps = {
+    readonly href?: string | undefined;
+    readonly className?: string | undefined;
+    readonly children?: ReactNode;
+    /**
+     * react-markdown's hast node. Declared so this component satisfies
+     * Streamdown's `components.a` slot, and deliberately never read — nothing is
+     * spread onto the DOM, so it cannot leak into the rendered attributes.
+     */
+    readonly node?: unknown;
+};
+export declare const DockLink: {
+    ({ href, className, children }: DockLinkProps): import("react").JSX.Element;
+    displayName: string;
+};
+type StreamdownComponents = NonNullable<ComponentProps<typeof Streamdown>["components"]>;
+/**
+ * Module-level so the object identity is stable: Streamdown memoises its merged
+ * component map on the `components` prop, and a fresh object every render would
+ * bust that memo on every streamed token.
+ */
+export declare const dockMarkdownComponents: StreamdownComponents;
+/** The empty override map for surfaces that keep Streamdown's own anchor. */
+export declare const noMarkdownComponents: StreamdownComponents;
+export {};

package/dist/components/ai-elements/link-safety-modal.d.ts

@@ -1,8 +1,53 @@
-import { LinkSafetyConfig } from 'streamdown';
+import { LinkSafetyConfig, LinkSafetyModalProps } from 'streamdown';
+import { AgentLinkTarget } from '../../browser/agent-link.ts';
+type DockLinkSafetyModalProps = LinkSafetyModalProps & {
+    /**
+     * How {@link classifyAgentLink} judged `url`, so the title can say what this
+     * actually is. Omitted — hence `"external"` — when Streamdown renders this
+     * modal for an anchor the dock does not own, keeping that copy byte-for-byte
+     * unchanged. `"in_app"` reaches here only via DockLink's degradation path: a
+     * link proven to be on the app's OWN origin whose in-place navigation could
+     * not happen. Titling that one "external link" is plainly false; the body copy
+     * is accurate either way, since confirming opens a new tab in both cases.
+     */
+    readonly destinationKind?: AgentLinkTarget["kind"] | undefined;
+};
+/**
+ * Replacement for Streamdown's built-in link-safety modal (BEL-47).
+ *
+ * Streamdown's default modal `createPortal`s to `document.body` — which, in the
+ * production embed, lives OUTSIDE the dock's shadow root, so it renders with
+ * none of the dock's (shadow-scoped) CSS: the "unstyled, ugly popup". This
+ * version is built from the dock's own `Dialog`, whose `DialogPortal` mounts
+ * INTO the shadow root via `usePortalContainer`, so the confirmation inherits
+ * the panel's design system, theme, and animations.
+ *
+ * The confirmation itself is kept on purpose: links in agent output are
+ * untrusted, so a deliberate "open this URL?" step is a security affordance.
+ * The redesign just makes the destination obvious and gives it a single, clear
+ * primary action.
+ *
+ * BEL-109 added a second layer ABOVE this one: `DockLink` (the dock's own
+ * `components.a`) classifies each link first, and a link proven to be a path on
+ * the live page's OWN origin routes the host SPA in place with no confirmation.
+ * That layer is deliberately narrow — every other link, and every same-origin
+ * link whose in-place navigation could not happen, is handed straight back to
+ * this modal, so the untrusted-agent-output guarantee above is unchanged for
+ * anything cross-origin.
+ */
+export declare const LinkSafetyModal: ({ isOpen, onClose, onConfirm, url, destinationKind, }: DockLinkSafetyModalProps) => import("react").JSX.Element;
 /**
  * Streamdown `linkSafety` config shared by the dock's markdown renderers
  * (`MessageResponse`, `ReasoningContent`). Keeps the safety confirmation
  * enabled but swaps Streamdown's body-portaled default for the dock-styled
  * {@link LinkSafetyModal}.
+ *
+ * Since BEL-109 this config governs Streamdown's OWN anchor, which the dock's
+ * markdown surfaces reach only when they do not install {@link DockLink} — the
+ * workspace-file previews (`MessageResponse` without `linkSurface`), and any
+ * future caller that overrides `components` without an `a` key. It is not an
+ * active second guard on the agent-reply surface; DockLink renders this same
+ * modal itself there.
  */
 export declare const dockLinkSafety: LinkSafetyConfig;
+export {};

package/dist/components/ai-elements/message.d.ts

@@ -31,8 +31,35 @@ export type MessageBranchNextProps = ComponentProps<typeof Button>;
 export declare const MessageBranchNext: ({ children, ...props }: MessageBranchNextProps) => import("react").JSX.Element;
 export type MessageBranchPageProps = HTMLAttributes<HTMLSpanElement>;
 export declare const MessageBranchPage: ({ className, ...props }: MessageBranchPageProps) => import("react").JSX.Element;
-export type MessageResponseProps = ComponentProps<typeof Streamdown>;
+/**
+ * WHOSE markdown this is — it decides what a link inside it may do (BEL-109).
+ *
+ * `agent-reply` is the assistant's own answer: a link it emits points at the app
+ * the user has open, so a same-origin one routes that app IN PLACE via
+ * {@link DockLink}. `workspace-file` (the default, so a new call site fails
+ * closed) is a workspace markdown FILE rendered in a preview: its links are
+ * relative to the FILE TREE, and by the time they reach the renderer Streamdown
+ * has already pre-resolved `./other.md` into `/other.md` — indistinguishable
+ * from an app path. There is no href shape that separates the two, so the
+ * SURFACE does, and a file's links keep the confirm-then-new-tab guard.
+ */
+type MarkdownLinkSurface = "agent-reply" | "workspace-file";
+/**
+ * `components` is deliberately OMITTED from what a caller may pass. It is the
+ * seam {@link DockLink} is installed through, so leaving it public would let a
+ * new call site opt INTO in-place navigation by passing
+ * `components={dockMarkdownComponents}` with no `linkSurface` at all — a second
+ * door into the exact thing `linkSurface` exists to gate. Omitting it makes that
+ * a COMPILE error at the call site (a clear "not assignable" on the offending
+ * prop), rather than the silent runtime no-op that reordering the JSX spread
+ * alone would produce. Every other Streamdown prop stays overridable, so
+ * per-call knobs like `controls` and `plugins` behave exactly as before.
+ */
+export type MessageResponseProps = Omit<ComponentProps<typeof Streamdown>, "components"> & {
+    readonly linkSurface?: MarkdownLinkSurface | undefined;
+};
 export declare const responseControls: ControlsConfig;
-export declare const MessageResponse: import('react').MemoExoticComponent<({ className, ...props }: MessageResponseProps) => import("react").JSX.Element>;
+export declare const MessageResponse: import('react').MemoExoticComponent<({ className, linkSurface, ...props }: MessageResponseProps) => import("react").JSX.Element>;
 export type MessageToolbarProps = ComponentProps<"div">;
 export declare const MessageToolbar: ({ className, children, ...props }: MessageToolbarProps) => import("react").JSX.Element;
+export {};

package/dist/components/ai-elements/prompt-input.d.ts

@@ -102,7 +102,7 @@ export type PromptInputButtonTooltip = string | {
 export type PromptInputButtonProps = ComponentProps<typeof InputGroupButton> & {
     tooltip?: PromptInputButtonTooltip;
 };
-export declare const PromptInputButton: ({ variant, className, size, tooltip, ...props }: PromptInputButtonProps) => import("react").JSX.Element;
+export declare const PromptInputButton: import('react').ForwardRefExoticComponent<Omit<PromptInputButtonProps, "ref"> & import('react').RefAttributes<HTMLButtonElement>>;
 export type PromptInputActionMenuProps = ComponentProps<typeof DropdownMenu>;
 export declare const PromptInputActionMenu: (props: PromptInputActionMenuProps) => import("react").JSX.Element;
 export type PromptInputActionMenuTriggerProps = PromptInputButtonProps;

package/dist/components/embed/file-preview-kind.d.ts

@@ -7,5 +7,10 @@
 export type FilePreviewKind = "markdown" | "json" | "csv" | "text" | "sql" | "image" | "html" | "pdf" | "heavy" | "download";
 export declare const filePreviewKind: (mimeType: string) => FilePreviewKind;
 /** Best-effort mime for a workspace file PATH (which carries no mimeType).
- *  Returns "" when the extension isn't in the previewable set. */
+ *  Returns "" when the extension isn't in the previewable set.
+ *
+ *  Deliberately NOT here: `.env`. Those files are secrets by convention, and
+ *  the Files tab is a shared surface — they stay download-only, which is an
+ *  intentional omission, not an oversight. Add nothing to this switch that a
+ *  user would be unhappy to see rendered in a panel. */
 export declare const mimeFromPath: (path: string) => string;

package/dist/components/embed/parse-csv.d.ts

@@ -1,10 +1,27 @@
+/** Field separators we recognise, in tiebreak order. Comma is first, so text
+ *  with no separator at all — or a tie — parses exactly as it did before. */
+declare const DELIMITERS: readonly [",", ";", "\t", "|"];
+export type CsvDelimiter = (typeof DELIMITERS)[number];
+/**
+ * Sniff the field separator from the header line.
+ *
+ * A meaningful share of the CSVs users actually keep in their workspace are
+ * semicolon- or tab-separated: `;` is what Excel exports on a Spanish (and
+ * most European) locale, and both previously smeared into one column because
+ * the scanner only ever split on `,`. Counting is done OUTSIDE quoted fields
+ * (a quoted cell may legitimately contain any candidate) and over the header
+ * line only — the first UNQUOTED line break ends it.
+ */
+export declare const sniffCsvDelimiter: (text: string) => CsvDelimiter;
 /**
  * Parse RFC 4180-ish CSV text into rows of string cells.
  *
- * Handles quoted fields (embedded commas, newlines, and `""` escapes), both
- * LF and CRLF line endings, and a leading UTF-8 BOM. A trailing newline does
- * not produce a phantom empty row. This is deliberately a small hand-rolled
- * scanner rather than a dependency (§2 — simplest correct solution): the dock
- * only needs to *display* a CSV, not round-trip it.
+ * Handles quoted fields (embedded separators, newlines, and `""` escapes),
+ * both LF and CRLF line endings, and a leading UTF-8 BOM. A trailing newline
+ * does not produce a phantom empty row. The field separator is sniffed from
+ * the header line (see `sniffCsvDelimiter`). This is deliberately a small
+ * hand-rolled scanner rather than a dependency (§2 — simplest correct
+ * solution): the dock only needs to *display* a CSV, not round-trip it.
  */
 export declare const parseCsv: (input: string) => string[][];
+export {};

package/dist/components/embed/use-preview-bytes.d.ts

@@ -31,6 +31,18 @@ export type PreviewBytes = {
     readonly status: "objectUrl";
     readonly url: string;
 };
+/**
+ * Decode preview bytes as text, tolerating legacy single-byte encodings.
+ *
+ * `Response.text()` always decodes UTF-8 and silently substitutes U+FFFD for
+ * bytes that aren't valid UTF-8 — so a CSV or .txt written by Excel/Notepad on
+ * Windows (Latin-1 / CP1252, still the default on a Spanish locale) rendered as
+ * mojibake: `Balance añadido` came out `Balance a�adido`. Decode UTF-8 in FATAL
+ * mode first, which is an exact test rather than a guess, and fall back to
+ * windows-1252 — a total mapping, so it never throws and never emits U+FFFD.
+ * Exported for the unit test; the hook below is the only production caller.
+ */
+export declare const decodePreviewText: (bytes: ArrayBuffer) => string;
 export declare const blobToDataUrl: (blob: Blob) => Promise<string>;
 export declare const usePreviewBytes: (contentUrl: string, opts: {
     readonly enabled: boolean;

package/dist/components/embed/use-workspace-preview-file.d.ts

@@ -0,0 +1,34 @@
+/**
+ * useWorkspacePreviewFile — stage a workspace OFFICE file into belong-cloud's
+ * file-preview pipeline and expose the id `HeavyPreview` polls.
+ *
+ * The workspace surface has no preview endpoints of its own: its files are
+ * bytes in a Daytona volume, not rows, so there is nothing for the converter
+ * to key on. `POST /v1/terminal/workspace/file/preview` stages the bytes as a
+ * preview-only file and hands back its id; from there the render is the same
+ * `/v1/files/<fileId>/preview…` flow uploaded files and artifacts already use.
+ * That is why the same .xlsx no longer previews in chat and downloads-only in
+ * the Files tab.
+ *
+ * Staging is content-addressed server-side, so this stays one POST per opened
+ * file — a re-open of an unchanged file resolves to the conversion that
+ * already happened. The panel remounts `PreviewContent` per target (keyed on
+ * the content URL), so there is no refresh cycle to own here.
+ */
+export type WorkspacePreviewTarget = {
+    readonly path: string;
+    /** The workspace the path is relative to, pinned when the preview opened. */
+    readonly workspaceExternalId: string | null;
+};
+export type WorkspacePreviewFile = {
+    readonly status: "loading";
+}
+/** Staging failed, or the format isn't one the converter handles — the
+ *  caller falls back to its download affordance. */
+ | {
+    readonly status: "error";
+} | {
+    readonly status: "ready";
+    readonly fileId: string;
+};
+export declare const useWorkspacePreviewFile: (target: WorkspacePreviewTarget | null) => WorkspacePreviewFile;

package/dist/components/scheduled/ScheduledDetailSurface.d.ts

@@ -1,7 +1,7 @@
 import { TaskScheduleDetail, TaskScheduleRun } from '../../api/task-schedules.ts';
-export declare const CustomEmailIndicator: (props: {
+export declare const EmailNotificationIndicator: (props: {
     readonly notification: TaskScheduleDetail["notification"];
-}) => import("react").JSX.Element | null;
+}) => import("react").JSX.Element;
 export declare const RunCard: (props: {
     readonly run: TaskScheduleRun;
     readonly scheduleTitle: string;

package/dist/components/ui/input-group.d.ts

@@ -1,15 +1,18 @@
 import { VariantProps } from 'class-variance-authority';
-import { Button } from './button';
 import * as React from "react";
 declare function InputGroup({ className, ...props }: React.ComponentProps<"div">): React.JSX.Element;
 declare const inputGroupAddonVariants: (props?: ({
     align?: "inline-end" | "inline-start" | "block-end" | "block-start" | null | undefined;
 } & import('class-variance-authority/types').ClassProp) | undefined) => string;
 declare function InputGroupAddon({ className, align, ...props }: React.ComponentProps<"div"> & VariantProps<typeof inputGroupAddonVariants>): React.JSX.Element;
-declare const inputGroupButtonVariants: (props?: ({
+declare const InputGroupButton: React.ForwardRefExoticComponent<Omit<Omit<Omit<React.ClassAttributes<HTMLButtonElement> & React.ButtonHTMLAttributes<HTMLButtonElement> & VariantProps<(props?: ({
+    variant?: "default" | "link" | "destructive" | "outline" | "secondary" | "ghost" | null | undefined;
+    size?: "default" | "xs" | "sm" | "lg" | "icon" | "icon-xs" | "icon-sm" | "icon-lg" | null | undefined;
+} & import('class-variance-authority/types').ClassProp) | undefined) => string> & {
+    asChild?: boolean;
+}, "ref"> & React.RefAttributes<HTMLButtonElement>, "size"> & VariantProps<(props?: ({
     size?: "xs" | "sm" | "icon-xs" | "icon-sm" | null | undefined;
-} & import('class-variance-authority/types').ClassProp) | undefined) => string;
-declare function InputGroupButton({ className, type, variant, size, ...props }: Omit<React.ComponentProps<typeof Button>, "size"> & VariantProps<typeof inputGroupButtonVariants>): React.JSX.Element;
+} & import('class-variance-authority/types').ClassProp) | undefined) => string>, "ref"> & React.RefAttributes<HTMLButtonElement>>;
 declare function InputGroupText({ className, ...props }: React.ComponentProps<"span">): React.JSX.Element;
 declare function InputGroupInput({ className, ...props }: React.ComponentProps<"input">): React.JSX.Element;
 declare function InputGroupTextarea({ className, ...props }: React.ComponentProps<"textarea">): React.JSX.Element;

package/dist/embed/slash-commands.d.ts

@@ -13,8 +13,14 @@ export declare const commandOptions: (commands: readonly CommandSummary[]) => re
  * Client-side commands offered in the slash menu next to the skills. They
  * reuse the `SkillSummary` shape so the picker (filter/rank/render) treats
  * both uniformly; `group: "Built-in"` distinguishes them from skill groups.
- * A builtin shadows a same-named skill at submit time (builtins are checked
- * first), so keep these names out of the skill namespace.
+ *
+ * PRECEDENCE (BEL-167): a builtin token wins over a skill token and over a
+ * workspace-tree command token REGARDLESS of position — the submit path checks
+ * builtins first, so `/schedule` claims "run /reconciliation and /schedule
+ * tomorrow" even though the skill token comes earlier. This is not just
+ * check-order inertia: every builtin is terminal for the submission (it runs
+ * locally and posts NOTHING), so a skill picked in the same draft would have no
+ * turn to apply to. Keep these names out of the skill namespace.
  */
 export declare const BUILTIN_COMMANDS: readonly SkillSummary[];
 export type BuiltinCommand = {
@@ -37,6 +43,10 @@ export type BuiltinCommand = {
  * message handling. `/schedule` and `/unschedule` claim their complete command
  * token even when their arguments are invalid, preventing malformed commands
  * from reaching the agent runtime as raw messages.
+ *
+ * LEADING-ONLY BY DESIGN. A mid-message token is handled by feeding this a
+ * draft {@link hoistBuiltinCommand} has already rewritten, so the semantics
+ * below stay the single source of truth for what each builtin accepts.
  */
 export declare const parseBuiltinCommand: (draft: string) => BuiltinCommand | null;
 /**
@@ -44,17 +54,14 @@ export declare const parseBuiltinCommand: (draft: string) => BuiltinCommand | nu
  * by {@link filterSkills} (prefix matches first; input order — built-ins
  * before skills — breaks ties within each bucket).
  *
- * `includeBuiltins` (default `true`) gates the built-in group. Built-ins are
- * parsed by {@link parseBuiltinCommand} against the SUBMITTED draft, which
- * only recognizes a LEADING `/command` — a mid-message token (`please
- * /clear`) can never match one. Offering `/clear` there is a dead end: the
- * picked token splices `please /clear ` into the draft, which then posts as
- * raw text instead of running the command. Callers pass `false` for a
- * mid-message token (caller determines "leading" from the token's `start`
- * offset); the voice `invoke_skill` resolver (chat.tsx) always dispatches a
- * synthesized leading `/name` and keeps the default.
+ * Built-ins are offered for a token at ANY position (BEL-167). They used to be
+ * withheld from a mid-message token because {@link parseBuiltinCommand} could
+ * only match a LEADING `/command`, which made picking one a dead end (the
+ * splice produced `please /clear`, which then posted as raw text). Submit now
+ * runs {@link hoistBuiltinCommand} first, so the pick is honored wherever the
+ * token sits and the gate is gone.
  */
-export declare const filterSlashOptions: (skills: readonly SkillSummary[], query: string, includeBuiltins?: boolean) => readonly SkillSummary[];
+export declare const filterSlashOptions: (skills: readonly SkillSummary[], query: string) => readonly SkillSummary[];
 /** An active `/`-command token: the `/` at [start], caret at [end], `query` between. */
 export type SlashTokenMatch = {
     readonly query: string;
@@ -94,5 +101,27 @@ export declare const parseSlashSubmission: (draft: string, skills: readonly Skil
  * "/command works anywhere" holds for commands too.
  */
 export declare const hoistCommandSubmission: (draft: string, commands: readonly CommandSummary[]) => string;
+/**
+ * BEL-167 — "/command solo funciona al principio". Built-ins are parsed by
+ * {@link parseBuiltinCommand} (and `/plan` by `detectPlanIntent`), both of
+ * which only recognize a LEADING `/command`. A known builtin token found
+ * mid-message is hoisted to the front so "use /schedule to send the report
+ * tomorrow" runs the command instead of posting as a message.
+ *
+ * Same device as {@link hoistCommandSubmission}, with two deliberate rules:
+ *
+ * - A draft that ALREADY starts with `/` is returned untouched. The leading
+ *   position is the runtime's business and its semantics are pinned by tests
+ *   (`/compact now` is a message, not a command); hoisting must add a path,
+ *   never rewrite the existing one.
+ * - An argument-free builtin hoists to the bare token, dropping the prose.
+ *   Leading `/compact now` falls through because it is genuinely ambiguous —
+ *   the user may have chosen to start a sentence with a slash. A token typed
+ *   (or spliced by the picker) INTO prose is not ambiguous: it is a command
+ *   insertion, and keeping "please" as an argument would only make it a no-op.
+ *
+ * The argument-taking builtins ROTATE rather than splice — see below.
+ */
+export declare const hoistBuiltinCommand: (draft: string) => string;
 /** Name-prefix matches first, then other name/description substring matches. */
 export declare const filterSkills: (skills: readonly SkillSummary[], query: string) => readonly SkillSummary[];

package/dist/embed/voice/line-dispatch.d.ts

@@ -20,27 +20,62 @@
  * sessions list names the background conversation.
  *
  * BOOT RE-ATTACH (F3/R4): `attachLineReader` below is the ONE seam that wires
- * a line-run reader onto a line, shared by a fresh dispatch (this module,
- * right after a POST accepts a run) and `reattachPendingLineRuns` (called
- * once at boot, after `initAgentLines()` rehydrates the registry) resuming a
- * run that was still going when the page reloaded. Both paths persist the
- * binding (`persistSlotRun`) and wire the identical phase/approval/navigate/
- * artifact/finish/error callbacks — a reload must behave exactly like the
- * live dispatch it is standing in for, not a parallel, easier-to-drift copy.
+ * a VOICE-dispatched line-run reader onto a line, shared by a fresh dispatch
+ * (this module, right after a POST accepts a run) and `reattachPendingLineRuns`
+ * (called once at boot, after `initAgentLines()` rehydrates the registry)
+ * resuming a run that was still going when the page reloaded. Both paths
+ * persist the binding (`persistSlotRun`) and wire the identical phase/approval/
+ * navigate/artifact/finish/error callbacks — a reload must behave exactly like
+ * the live dispatch it is standing in for, not a parallel, easier-to-drift copy.
+ *
+ * TWO READER KINDS (BEL-90). This module now attaches two, and which callback
+ * set a caller gets is a correctness question, not a style one:
+ *
+ *   - `attachLineReader` — the voice-NARRATION reader. Its callbacks are not
+ *     plain setters: `deliverLineReply`/`deliverLineFailure` push
+ *     `conversation.item.create` events into an active voice call and ask the
+ *     model to respond, `notifyLinePhase` appends timeline rows and nudges
+ *     spoken progress, `deliverLineArtifact` opens a preview panel. Correct
+ *     for a run the operator dispatched BY VOICE.
+ *   - `attachLineProgressReader` — the plain-progress reader, for a run the
+ *     user started by TYPING that was still in flight at reload. It goes
+ *     through `reportRunLineProgress` and touches only the registry, so a
+ *     typed run can never make the agent start talking about background
+ *     progress mid-call.
  */
 /** Abort every live line reader and invalidate their callbacks (call teardown).
  * Subscribed below to fire whenever a call leaves in_call/connecting. */
 export declare const abortAllLineReaders: () => void;
+/** Test-only: drop every plain-progress reader (and the active-session latch)
+ * so a case never inherits either from the previous case. The narration
+ * readers have `abortAllLineReaders`; these deliberately do NOT ride on it — a
+ * voice call ending has nothing to do with a typed run still streaming. */
+export declare const __detachLineProgressReadersForTest: () => void;
 /**
- * BOOT RE-ATTACH (F3/R4): call this once, right after `initAgentLines()`
- * rehydrates the registry from persisted slots. Every background line (2/3)
- * whose slot carried a non-null `runId` already shows `status: "working"`
- * (`rehydratedLines()` in voice-call-lines.ts) — this re-attaches its reader
- * so the line actually converges to ready/failed via the SAME
- * `attachLineReader` a live dispatch uses, instead of sitting at an
- * honest-looking but permanently stuck "working". Line 1 never carries a
- * registry `runId` (see `AgentLine.runId`'s doc) and is skipped here — its
- * own reload-resume path is the stream-state store's, not this one.
+ * BOOT RE-ATTACH: call this once, right after `initAgentLines()` rehydrates
+ * the registry. A line rehydrated as `status: "working"` has a run that was
+ * still going when the page went away (`rehydratedLines()` in
+ * voice-call-lines.ts) — this attaches the reader that actually converges it
+ * to ready/failed, instead of leaving an honest-looking but permanently stuck
+ * "working".
+ *
+ * TWO paths, because the two dispatch kinds have genuinely different
+ * contracts (BEL-90 / B1 — see `attachLineProgressReader`'s doc):
+ *
+ *  - F3/R4, UNCHANGED — a line whose durable SLOT carries a runId was
+ *    dispatched by voice. It gets the narration reader, on every line that has
+ *    one, INCLUDING when its session is the one on screen. That last part is
+ *    load-bearing: `persistSlotRun(line, null)` in that reader's terminal
+ *    callbacks is the durable slot's clearer, and skipping the on-screen line
+ *    would leave a stale slot runId that rehydrates as "working" on every
+ *    future reload (§41). The transport's terminal now clears the slot too, so
+ *    both routes converge.
+ *  - BEL-90 — a line with NO slot runId but a fresh parked run cursor was
+ *    started by typing. It gets the plain-progress reader, and it is SKIPPED
+ *    when its session is the active one: ChatRoute is about to mount for that
+ *    session and its transport will claim the single reader. Skipping is safe
+ *    here precisely because a typed run writes no durable slot runId — there
+ *    is nothing that could get stuck.
  */
 export declare const reattachPendingLineRuns: (fetchFn?: typeof fetch) => void;
 export declare const dispatchToLine: (req: {