@flyos/design-system 1.4.0 → 1.6.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flyos/design-system",
-  "version": "1.4.0",
+  "version": "1.6.0",
   "description": "FlyOS design system — shared components, directives, pipes, services, and models for Business App developers.",
   "keywords": [
     "flyos",

package/scss/_ink-baseline.scss

@@ -1,29 +1,29 @@
-// ─── Inherited-ink baseline ──────────────────────────────────────────────────
-//
-// Establishes the document's inherited `color`. Until this existed, NOTHING in
-// the shell ever set `color` on `html` or `body` — `_theme-light.scss` and
-// `_theme-dark.scss` declare custom properties only. So the inherited colour was
-// the user-agent default, **black**, and every component that says
-// `color: inherit` (fly-tree-nav rows, fly-breadcrumb's current crumb,
-// fly-search-input's typed text, fly-card's meta slot, and any consumer markup
-// that simply doesn't mention colour) rendered black ink on the smoked glass.
-//
-// That is why the "text is invisible in light theme" bug kept coming back app
-// after app: it was never really an app's mistake. There was no baseline to
-// inherit, so *forgetting* to set a colour was the failure mode, and the fix
-// kept being applied one component at a time. `--text-color` is white in BOTH
-// themes since the Liquid-Glass flip, so one declaration settles it everywhere.
-//
-// Scoped to the two theme classes on purpose — NOT `:root`. A business app
-// running STANDALONE renders on its own opaque paper (`--bg`, near-black
-// `--ink`) and does not load `fly-theme` at all; keying on the class means a
-// surface that never opted into a shell theme is never repainted white.
-//
-// A deliberate paper surface inside the shell (the documents editor) still
-// brings its own dark ink locally — a component rule beats this baseline, which
-// is exactly the intended precedence.
-
-html.light-theme,
-html.dark-theme {
-  color: var(--text-color);
-}
+// ─── Inherited-ink baseline ──────────────────────────────────────────────────
+//
+// Establishes the document's inherited `color`. Until this existed, NOTHING in
+// the shell ever set `color` on `html` or `body` — `_theme-light.scss` and
+// `_theme-dark.scss` declare custom properties only. So the inherited colour was
+// the user-agent default, **black**, and every component that says
+// `color: inherit` (fly-tree-nav rows, fly-breadcrumb's current crumb,
+// fly-search-input's typed text, fly-card's meta slot, and any consumer markup
+// that simply doesn't mention colour) rendered black ink on the smoked glass.
+//
+// That is why the "text is invisible in light theme" bug kept coming back app
+// after app: it was never really an app's mistake. There was no baseline to
+// inherit, so *forgetting* to set a colour was the failure mode, and the fix
+// kept being applied one component at a time. `--text-color` is white in BOTH
+// themes since the Liquid-Glass flip, so one declaration settles it everywhere.
+//
+// Scoped to the two theme classes on purpose — NOT `:root`. A business app
+// running STANDALONE renders on its own opaque paper (`--bg`, near-black
+// `--ink`) and does not load `fly-theme` at all; keying on the class means a
+// surface that never opted into a shell theme is never repainted white.
+//
+// A deliberate paper surface inside the shell (the documents editor) still
+// brings its own dark ink locally — a component rule beats this baseline, which
+// is exactly the intended precedence.
+
+html.light-theme,
+html.dark-theme {
+  color: var(--text-color);
+}

package/scss/_shell-embed-bridge.scss

@@ -1,81 +1,81 @@
-// ─── Shell-embed bridge — app-surface tokens re-tinted onto shell glass ──────
-// MIXIN ONLY. This partial emits no CSS on import; it exists so the mapping
-// below lives in ONE place instead of being retyped per feature app.
-//
-// WHY IT IS NEEDED
-// The DS carries two token families on purpose (see `_app-surface-tokens.scss`'s
-// header). `--ink-*`/`--bg-*`/`--line-*` dress BUSINESS-APP CONTENT: an opaque
-// reading surface, dark ink on white in light mode. `--label-*`/`--surface-*`
-// dress SHELL CHROME: white ink on translucent glass over the user's wallpaper.
-//
-// A desktop-shell feature app renders inside a glass window, so its chrome is
-// necessarily the second family — but the moment it mounts a component from the
-// `fly-*` app-surface kit (or `@flyos/design-system-board`), that component
-// themes itself from the FIRST family and paints an opaque white slab with
-// near-black ink. One region, two families: the app's own header ink is white,
-// the slab beneath it is white, and the header goes invisible.
-//
-// That is not hypothetical. It shipped in canvas-boards and was measured live:
-// `.cbe__export-btn` computed `color: rgb(255,255,255)` sitting on a board whose
-// `--_surface` resolved to `oklch(100% 0 0deg)`. `core/theme/feature-app-surface-tokens.ts`
-// documents the same class of trap ("a dark-mode-only review passes while light
-// mode renders a white slab") — and note the failure is LIGHT-mode-only, because
-// in dark mode both families happen to agree on light-ink-on-dark.
-//
-// THE FIX is the seam the tokens file already names: an app that embeds in the
-// shell re-tints the content family onto glass. help-center (`.hc-shell`) and
-// dashboard-app hand-rolled identical copies of this map before it lived here.
-//
-// ALIASES ONLY — every value is another token, never a literal, so the whole map
-// follows the shell's theme automatically. The ONE exception is `--on-ink`, and
-// its reason is written at the declaration.
-@mixin app-surface-on-glass {
-  // Surfaces: the window chrome supplies the material, so the app's own page
-  // background is nothing at all; cards/tracks are lifts ON that plate.
-  --bg: transparent;
-  --bg-2: var(--surface-card);
-  --bg-3: var(--fill-tertiary);
-  --bg-hover: var(--surface-active);
-
-  // Hairlines.
-  --line: var(--separator);
-  --line-2: var(--surface-border);
-  --line-3: var(--separator);
-
-  // Ink — opaque label tokens, never a surface token. Aliasing a translucent
-  // surface onto an ink slot is what turns a control into an empty coloured
-  // square (see the note in help-center.component.scss).
-  --ink: var(--label-primary);
-  --ink-2: var(--label-secondary);
-  --ink-3: var(--label-secondary);
-  --ink-4: var(--label-tertiary);
-
-  // CONTRACT (`_app-surface-tokens.scss`): anything that redefines `--ink` MUST
-  // redefine `--on-ink`, and it must be OPAQUE. `--on-ink` labels a fill of
-  // `--ink` itself — the primary button. Above we pin `--ink` to the shell's
-  // white label ink in BOTH themes, so its counter-ink is a fixed DARK value in
-  // both. It cannot alias a shell token: the shell is glass and owns no
-  // dark-opaque ink. This literal is the same value `--ink` carries in the
-  // app-surface light theme, i.e. the colour a white pill is designed to label.
-  //
-  // `app-surface-conventions.spec.ts` can only police the DS token file itself;
-  // its doc says consumers that remap `--ink` "carry the same obligation".
-  // Routing every consumer through this mixin is how that obligation is met.
-  --on-ink: oklch(18% 0.005 250deg);
-
-  // `--ink-inverse` carries the SAME obligation as `--on-ink` and was missed.
-  //
-  // The app-surface family defines it once, as "text on dark / gradient fills" — near-white, which
-  // is correct while `--ink` is near-black. This mixin flips `--ink` to the shell's WHITE label ink
-  // and updated `--on-ink` accordingly, but left `--ink-inverse` at its near-white resting value.
-  // Every `background: var(--ink); color: var(--ink-inverse)` pair inside an embedded app therefore
-  // became WHITE ON WHITE at a contrast ratio of about 1:1.
-  //
-  // That is not hypothetical: it is what made `[data-tooltip]` (the CSS tooltip behind every
-  // `fly-icon-button`'s `tooltipKey`) invisible across the board editor — measured live at
-  // background rgb(255,255,255) with colour oklch(0.99 0 0). The same pair is used by the button,
-  // icon-button, checkbox and card components, so this was never a Boards-only bug.
-  //
-  // Pinned to `--on-ink` rather than restated, so the two counter-inks cannot drift apart again.
-  --ink-inverse: var(--on-ink);
-}
+// ─── Shell-embed bridge — app-surface tokens re-tinted onto shell glass ──────
+// MIXIN ONLY. This partial emits no CSS on import; it exists so the mapping
+// below lives in ONE place instead of being retyped per feature app.
+//
+// WHY IT IS NEEDED
+// The DS carries two token families on purpose (see `_app-surface-tokens.scss`'s
+// header). `--ink-*`/`--bg-*`/`--line-*` dress BUSINESS-APP CONTENT: an opaque
+// reading surface, dark ink on white in light mode. `--label-*`/`--surface-*`
+// dress SHELL CHROME: white ink on translucent glass over the user's wallpaper.
+//
+// A desktop-shell feature app renders inside a glass window, so its chrome is
+// necessarily the second family — but the moment it mounts a component from the
+// `fly-*` app-surface kit (or `@flyos/design-system-board`), that component
+// themes itself from the FIRST family and paints an opaque white slab with
+// near-black ink. One region, two families: the app's own header ink is white,
+// the slab beneath it is white, and the header goes invisible.
+//
+// That is not hypothetical. It shipped in canvas-boards and was measured live:
+// `.cbe__export-btn` computed `color: rgb(255,255,255)` sitting on a board whose
+// `--_surface` resolved to `oklch(100% 0 0deg)`. `core/theme/feature-app-surface-tokens.ts`
+// documents the same class of trap ("a dark-mode-only review passes while light
+// mode renders a white slab") — and note the failure is LIGHT-mode-only, because
+// in dark mode both families happen to agree on light-ink-on-dark.
+//
+// THE FIX is the seam the tokens file already names: an app that embeds in the
+// shell re-tints the content family onto glass. help-center (`.hc-shell`) and
+// dashboard-app hand-rolled identical copies of this map before it lived here.
+//
+// ALIASES ONLY — every value is another token, never a literal, so the whole map
+// follows the shell's theme automatically. The ONE exception is `--on-ink`, and
+// its reason is written at the declaration.
+@mixin app-surface-on-glass {
+  // Surfaces: the window chrome supplies the material, so the app's own page
+  // background is nothing at all; cards/tracks are lifts ON that plate.
+  --bg: transparent;
+  --bg-2: var(--surface-card);
+  --bg-3: var(--fill-tertiary);
+  --bg-hover: var(--surface-active);
+
+  // Hairlines.
+  --line: var(--separator);
+  --line-2: var(--surface-border);
+  --line-3: var(--separator);
+
+  // Ink — opaque label tokens, never a surface token. Aliasing a translucent
+  // surface onto an ink slot is what turns a control into an empty coloured
+  // square (see the note in help-center.component.scss).
+  --ink: var(--label-primary);
+  --ink-2: var(--label-secondary);
+  --ink-3: var(--label-secondary);
+  --ink-4: var(--label-tertiary);
+
+  // CONTRACT (`_app-surface-tokens.scss`): anything that redefines `--ink` MUST
+  // redefine `--on-ink`, and it must be OPAQUE. `--on-ink` labels a fill of
+  // `--ink` itself — the primary button. Above we pin `--ink` to the shell's
+  // white label ink in BOTH themes, so its counter-ink is a fixed DARK value in
+  // both. It cannot alias a shell token: the shell is glass and owns no
+  // dark-opaque ink. This literal is the same value `--ink` carries in the
+  // app-surface light theme, i.e. the colour a white pill is designed to label.
+  //
+  // `app-surface-conventions.spec.ts` can only police the DS token file itself;
+  // its doc says consumers that remap `--ink` "carry the same obligation".
+  // Routing every consumer through this mixin is how that obligation is met.
+  --on-ink: oklch(18% 0.005 250deg);
+
+  // `--ink-inverse` carries the SAME obligation as `--on-ink` and was missed.
+  //
+  // The app-surface family defines it once, as "text on dark / gradient fills" — near-white, which
+  // is correct while `--ink` is near-black. This mixin flips `--ink` to the shell's WHITE label ink
+  // and updated `--on-ink` accordingly, but left `--ink-inverse` at its near-white resting value.
+  // Every `background: var(--ink); color: var(--ink-inverse)` pair inside an embedded app therefore
+  // became WHITE ON WHITE at a contrast ratio of about 1:1.
+  //
+  // That is not hypothetical: it is what made `[data-tooltip]` (the CSS tooltip behind every
+  // `fly-icon-button`'s `tooltipKey`) invisible across the board editor — measured live at
+  // background rgb(255,255,255) with colour oklch(0.99 0 0). The same pair is used by the button,
+  // icon-button, checkbox and card components, so this was never a Boards-only bug.
+  //
+  // Pinned to `--on-ink` rather than restated, so the two counter-inks cannot drift apart again.
+  --ink-inverse: var(--on-ink);
+}

package/scss/_vos-button-mixins.scss

@@ -1,28 +1,28 @@
-// visionOS button pseudo-element layers (used by _business-app-buttons.scss).
-// Kept separate from desktop-app glass mixins so Business Apps only pull button-related SCSS.
-
-@mixin vos-platter-layers($radius) {
-  content: '';
-  position: absolute;
-  inset: 0;
-  border-radius: $radius;
-  pointer-events: none;
-  background:
-    linear-gradient(var(--btn-platter-lighten), var(--btn-platter-lighten)),
-    linear-gradient(var(--btn-platter-dodge), var(--btn-platter-dodge));
-  background-blend-mode: lighten, color-dodge;
-  mix-blend-mode: screen;
-}
-
-@mixin vos-disabled-layers($radius) {
-  content: '';
-  position: absolute;
-  inset: 0;
-  border-radius: $radius;
-  pointer-events: none;
-  background:
-    linear-gradient(var(--btn-disabled-lighten), var(--btn-disabled-lighten)),
-    linear-gradient(var(--btn-disabled-dodge), var(--btn-disabled-dodge));
-  background-blend-mode: lighten, color-dodge;
-  mix-blend-mode: screen;
-}
+// visionOS button pseudo-element layers (used by _business-app-buttons.scss).
+// Kept separate from desktop-app glass mixins so Business Apps only pull button-related SCSS.
+
+@mixin vos-platter-layers($radius) {
+  content: '';
+  position: absolute;
+  inset: 0;
+  border-radius: $radius;
+  pointer-events: none;
+  background:
+    linear-gradient(var(--btn-platter-lighten), var(--btn-platter-lighten)),
+    linear-gradient(var(--btn-platter-dodge), var(--btn-platter-dodge));
+  background-blend-mode: lighten, color-dodge;
+  mix-blend-mode: screen;
+}
+
+@mixin vos-disabled-layers($radius) {
+  content: '';
+  position: absolute;
+  inset: 0;
+  border-radius: $radius;
+  pointer-events: none;
+  background:
+    linear-gradient(var(--btn-disabled-lighten), var(--btn-disabled-lighten)),
+    linear-gradient(var(--btn-disabled-dodge), var(--btn-disabled-dodge));
+  background-blend-mode: lighten, color-dodge;
+  mix-blend-mode: screen;
+}

package/types/flyos-design-system.d.ts

@@ -1,13 +1,13 @@
 import * as _angular_core from '@angular/core';
 import { Type, InjectionToken, Signal, WritableSignal, OnInit, EventEmitter, OnChanges, OnDestroy, SimpleChanges, EnvironmentProviders, PipeTransform, signal, AfterViewInit, ElementRef, AfterViewChecked, ErrorHandler, Provider, TemplateRef } from '@angular/core';
 import * as rxjs from 'rxjs';
-import { Observable } from 'rxjs';
+import { Observable, MonoTypeOperatorFunction } from 'rxjs';
 import { ControlValueAccessor, Validator, AbstractControl, ValidationErrors } from '@angular/forms';
+import * as _angular_common_http from '@angular/common/http';
+import { HttpRequest, HttpHandlerFn, HttpErrorResponse } from '@angular/common/http';
 import { ConnectedPosition } from '@angular/cdk/overlay';
 import * as _flyos_design_system from '@flyos/design-system';
 import { CanActivateFn, NavigationExtras } from '@angular/router';
-import * as _angular_common_http from '@angular/common/http';
-import { HttpRequest, HttpHandlerFn } from '@angular/common/http';
 
 /**
  * FlyOS architectural app category — see repo `docs/01-ecosystem-overview.md`.
@@ -1344,6 +1344,24 @@ interface FlyStandaloneAuthConfig {
      * does not (yet) return.
      */
     readonly scope?: string;
+    /**
+     * Extra same-origin path fragments that are reachable **anonymously**, matched as substrings of
+     * the request pathname (e.g. `['/api/thoughts/public/']`).
+     *
+     * A request to one of these is treated exactly like the built-in pre-auth paths: no bearer is
+     * attached, and — critically — a `401` from it never triggers `startLogin()`.
+     *
+     * **Why an app must be able to declare these.** The interceptor kicks off PKCE login on any `401`
+     * received while no session exists, which is right for a gated app but wrong for an app that also
+     * serves an anonymous surface: Thoughts' public idea portal is `[AllowAnonymous]` and reached
+     * shell-less with no session, so a stray `401` there would bounce a member of the public into a
+     * login they neither need nor can complete. The app cannot fix this on its own — Angular's
+     * interceptor chain is fixed, so a local interceptor can neither skip this one nor suppress its
+     * side effect — which is why the exemption has to be declarable here.
+     *
+     * Defaults to none, so existing consumers are unaffected.
+     */
+    readonly anonymousPaths?: readonly string[];
 }
 /**
  * DI token carrying the {@link FlyStandaloneAuthConfig}. Provided by {@link provideFlyStandaloneAuth};
@@ -1481,9 +1499,14 @@ declare const flyStandaloneAuthGuard: CanActivateFn;
  * token — attaching it would exfiltrate the token to whatever host the app happens to call.
  *
  * Requests that MUST NOT carry the bearer even same-origin: the STS token endpoint (its own client
- * auth) and the pre-auth BFF endpoints under `/api/{appId}/auth/` (they authenticate via the HttpOnly
- * cookie). The exclusion runs on the origin-NORMALIZED pathname, so an absolute same-origin URL to
- * the BFF is excluded exactly like its relative spelling.
+ * auth), the pre-auth BFF endpoints under `/api/{appId}/auth/` (they authenticate via the HttpOnly
+ * cookie), and any path the app declared in `anonymousPaths` (an `[AllowAnonymous]` surface such as
+ * a public portal). The exclusion runs on the origin-NORMALIZED pathname, so an absolute same-origin
+ * URL to the BFF is excluded exactly like its relative spelling.
+ *
+ * The same exclusion governs the 401 handling: a `401` from an excluded path never starts a login.
+ * That matters most for `anonymousPaths` — without it, a stray 401 on a public surface would bounce
+ * an anonymous visitor into a PKCE login they cannot complete.
  *
  * Ordering: register this AFTER any offline/sample-data interceptor and BEFORE `stepUpInterceptor`
  * (a `401 step_up_required` arrives while the session is valid, so this interceptor passes it through
@@ -7146,7 +7169,7 @@ type FlySecureSrcState = 'idle' | 'loading' | 'ready' | 'error';
  * few seconds of its life; the Files Manager download endpoint answers
  * `423 Locked` / `SCAN_PENDING` (with an advisory `Retry-After` header) until
  * the scan clears. Rather than treating that like a permission error, the
- * directive retries the fetch — up to {@link SCAN_PENDING_MAX_RETRIES} times,
+ * directive retries the fetch — up to {@link FLY_SCAN_PENDING_MAX_RETRIES} times,
  * honoring `Retry-After` when present (falling back to a flat 2s) — and swaps
  * in the image automatically once the scan reports Clean. This mirrors the
  * hand-rolled `retry({ count: 6, delay: … })` policy already used by the
@@ -8547,6 +8570,176 @@ declare function flyDownloadBlob(blob: Blob, fileName: string, mimeFallback?: st
  */
 declare function flyExportFileName(contentDisposition: string | null | undefined, fallback: string): string;
 
+/**
+ * Downloads a Files-Manager file through the authenticated `HttpClient` and hands it to the
+ * browser's save dialog.
+ *
+ * **Why this exists rather than an `<a href>`.** `/api/files/{id}/download` is bearer-gated and
+ * Files-Manager exposes no signed or public URL, so a browser-native navigation carries no
+ * `Authorization` header and answers **401**. That is not a hypothetical: three Circles templates
+ * shipped plain `<a href>` download links that were simply broken, Thoughts hit the same 401 on
+ * its story attachments, and in both apps other screens had already hand-rolled the correct blob
+ * fetch inline. The design system shipped the *save* half (`flyDownloadBlob`) and the image-side
+ * *fetch* half (`img[flySecureSrc]`) but nothing for a plain authenticated download, so every app
+ * rediscovered the same 401 and wrote the same fix.
+ *
+ * It also rides out the `423 SCAN_PENDING` window via {@link flyScanRetry}: a freshly-produced
+ * export or upload is still being virus-scanned for the first seconds of its life, which is
+ * exactly when a user clicks.
+ *
+ * @example
+ * private readonly downloads = inject(FlyFileDownloadService);
+ * this.downloads.download(attachment.fileId, attachment.fileName);
+ */
+declare class FlyFileDownloadService {
+    private readonly http;
+    /**
+     * Fetches a file and saves it, subscribing internally — the fire-and-forget form for a click
+     * handler that has no state to drive.
+     *
+     * Errors are left to the app's global `HttpClient` error handling. Use {@link fetch} instead
+     * when the caller needs to show a spinner or a per-row failure state.
+     *
+     * @param fileIdOrUrl A bare Files-Manager file id, or a path starting with `/` used verbatim.
+     * @param fileName    Name offered to the OS save dialog, extension included.
+     */
+    download(fileIdOrUrl: string, fileName: string): void;
+    /**
+     * The observable form: emits the blob after saving it, so a caller can drive its own loading
+     * and error state. The save happens on emission — subscribing is what triggers the download.
+     *
+     * @param fileIdOrUrl A bare Files-Manager file id, or a path starting with `/` used verbatim.
+     * @param fileName    Name offered to the OS save dialog, extension included.
+     */
+    fetch(fileIdOrUrl: string, fileName: string): Observable<Blob>;
+    static ɵfac: _angular_core.ɵɵFactoryDeclaration<FlyFileDownloadService, never>;
+    static ɵprov: _angular_core.ɵɵInjectableDeclaration<FlyFileDownloadService>;
+}
+
+/**
+ * Files-Manager answers a fresh (still-scanning) upload with `423 Locked` / `SCAN_PENDING` until
+ * the background virus scan clears it.
+ */
+declare const FLY_SCAN_PENDING_STATUS = 423;
+/**
+ * Retry budget. The scan usually clears within a few seconds, so six attempts comfortably covers
+ * the common case without hammering the endpoint indefinitely on a stuck scan.
+ */
+declare const FLY_SCAN_PENDING_MAX_RETRIES = 6;
+/** Fallback delay when the response carries no (or an unparsable) `Retry-After` header. */
+declare const FLY_SCAN_PENDING_DEFAULT_DELAY_MS = 2000;
+/**
+ * Resolves a `423 Locked` / `SCAN_PENDING` error's `Retry-After` header to a delay in
+ * milliseconds. The header is advisory and, per RFC 9110, either a number of seconds or an
+ * HTTP-date — both are handled. Falls back to {@link FLY_SCAN_PENDING_DEFAULT_DELAY_MS} when the
+ * header is missing, unparsable, or already in the past.
+ */
+declare function flyScanPendingDelayMs(err: HttpErrorResponse): number;
+/**
+ * Rides out the `423 SCAN_PENDING` window on any authenticated Files-Manager request.
+ *
+ * A file is not readable for the first seconds of its life — Files-Manager holds it at `423` until
+ * the virus scan clears. Without this, the first read after an upload or an export completes just
+ * fails, which is exactly when a user is most likely to click.
+ *
+ * **This honours `Retry-After`.** Every hand-rolled copy of this policy across the platform used a
+ * flat `timer(2000)`, which is both slower than necessary when the server says "200ms" and a
+ * hammer when it says "30s". The header is advisory, so the flat fallback remains for responses
+ * that omit it.
+ *
+ * Only `423` is retried. A terminal outcome — `403 SCAN_INFECTED`, `422 SCAN_FAILED`, `401`, or
+ * anything else — re-throws immediately: the `delay` notifier erroring stops `retry` at once
+ * rather than waiting out the budget.
+ *
+ * @example
+ * this.http.get(url, { responseType: 'blob' }).pipe(flyScanRetry())
+ */
+declare function flyScanRetry<T>(options?: {
+    readonly count?: number;
+}): MonoTypeOperatorFunction<T>;
+
+/**
+ * The `ApiResponse<T>` envelope every FlyOS endpoint returns, as it serializes over the wire
+ * (the backend's `Success` is camel-cased to `success` in production JSON).
+ *
+ * `errors` is the business-rule failure list some endpoints return instead of a single `error`;
+ * both shapes are live, which is why {@link flyApiErrorMessage} probes for both.
+ */
+interface FlyApiResponse<T = void> {
+    success: boolean;
+    data?: T;
+    error?: FlyApiError;
+    errors?: string[];
+    meta?: FlyPageMeta;
+}
+/** The structured error an endpoint returns alongside `success: false`. */
+interface FlyApiError {
+    code: string;
+    message: string;
+}
+/** Paging counters an endpoint may return in `meta` rather than inside the payload. */
+interface FlyPageMeta {
+    page: number;
+    pageSize: number;
+    total: number;
+    totalPages: number;
+}
+/** A paged payload as the backend `PagedResult<T>` serializes it. */
+interface FlyPaged<T> {
+    items: T[];
+    total: number;
+    page: number;
+    pageSize: number;
+}
+/**
+ * A page of results normalized for the UI. Deliberately narrower than {@link FlyPaged}: a list
+ * component needs the rows and the total, and carrying `page`/`pageSize` back out invites a
+ * component to trust the server's echo of a request parameter it already owns.
+ */
+interface FlyPageResult<T> {
+    items: T[];
+    total: number;
+}
+/**
+ * Unwraps `FlyApiResponse<T>` to its payload, or `null` when the call did not succeed.
+ *
+ * This is the STRICT reading: `success: false` yields `null` even if a partial `data` came with
+ * it. Prefer it. Use {@link flyUnwrapLenient} only against an endpoint that is known to answer
+ * unwrapped.
+ */
+declare function flyUnwrap<T>(res: FlyApiResponse<T>): T | null;
+/**
+ * Unwraps `FlyApiResponse<T>`, tolerating an endpoint that answered UNWRAPPED — i.e. returned the
+ * payload as the whole body with no envelope around it.
+ *
+ * **This is a workaround for a backend that is inconsistent, not a preference.** Every endpoint is
+ * supposed to wrap its payload; a handful do not, and call sites carried a defensive
+ * `res.data ?? res` for them. That expression forced the surrounding chain to `any`, which
+ * silenced the mismatch rather than naming it. This keeps the identical runtime behaviour while
+ * staying typed — but a call site reaching for it is evidence of an endpoint worth fixing, and it
+ * cannot distinguish "unwrapped payload" from "envelope with `success: false`".
+ */
+declare function flyUnwrapLenient<T>(res: FlyApiResponse<T>): T;
+/**
+ * Normalizes the `FlyApiResponse<FlyPaged<T>>` envelope to the flat `{ items, total }` a list UI
+ * reads. An absent `total` falls back to the row count, so a server that omits it still renders a
+ * correct count for the page in hand rather than `0`.
+ */
+declare function flyToPage<T>(res: FlyApiResponse<FlyPaged<T>>): FlyPageResult<T>;
+/**
+ * Best-effort extraction of the message (usually an i18n key) out of an
+ * `HttpErrorResponse.error` body returned by a FlyOS endpoint.
+ *
+ * The wire format is inconsistent by design: business-rule failures arrive as `{ errors: [key] }`,
+ * the structured envelope as `{ error: { code, message } }`, framework failures as `{ message }`,
+ * and some proxies hand back a bare string. Call sites used to inline this probe behind
+ * `err?.error as any`, typing the whole chain as `any` and duplicating the logic verbatim.
+ *
+ * @returns the first `errors[]` entry, else `error.message`, else `message`, else the raw string
+ *          body — or `undefined` when none of those is present.
+ */
+declare function flyApiErrorMessage(err: unknown): string | undefined;
+
 /**
  * Shared presence-colour utility — one deterministic seed → colour mapping so
  * every co-authoring surface (mind-maps, canvas-boards, and future Documents/
@@ -10473,6 +10666,6 @@ declare const AUDIENCE_ERROR_CODES: {
 };
 type AudienceErrorCode = (typeof AUDIENCE_ERROR_CODES)[keyof typeof AUDIENCE_ERROR_CODES];
 
-export { AGENT_DRAG_MIME, AGENT_PAYLOAD_VERSION, APP_LOOKUP, AUDIENCE_ERROR_CODES, AUDIENCE_LIMITS, AUDIENCE_PRESETS, AUDIENCE_TERM_KINDS, AgentActionBus, AgentActionUnsupportedDispatchError, AgentCommandRegistry, AgentDropRegistry, AgentFlightAnimator, AgentLookupRegistry, AgentPayloadOversizeError, AudienceBuilderComponent, AuthService, BilingualFieldComponent, CRON_MODES, CRON_WEEKDAYS, ContextMenuComponent, DEFAULT_AGENT_PAYLOAD_LIMITS, DEFAULT_FLY_THEME_MODE, DS_BASELINE_LOCALES, DashboardKpiComponent, DialogResult, EntityLookupComponent, FLYOS_LAUNCH_EVENT, FLYOS_LAUNCH_REQUEST_EVENT, FLYOS_REMOTE_ROUTE_EVENT, FLY_ACCENT_PROPERTY, FLY_ADMIN_ROLES, FLY_CHUNK_RELOAD_FLAG, FLY_COMPACT_THRESHOLD, FLY_COUNTRIES, FLY_EMOJI_BY_ID, FLY_EMOJI_CATEGORIES, FLY_EMOJI_CATEGORY_BY_ID, FLY_EMOJI_DEFAULT_CATEGORIES, FLY_EMOJI_PACK, FLY_EMOJI_PACK_MISSING_MESSAGE, FLY_EMOJI_PREVIEW_COUNT, FLY_EMPTY_VALUE, FLY_LOCALE_CATALOG, FLY_NF_CACHE_HEAL_FLAG, FLY_RELOAD_DEBOUNCE_MS, FLY_RELOAD_REARM_MS, FLY_REMOTE_BASE_PATH, FLY_REMOTE_CONTEXT_EVENT, FLY_REMOTE_CONTEXT_STORE_KEY, FLY_REMOTE_ROUTES, FLY_SEARCH_DEBOUNCE_MS, FLY_SKIN_TONES, FLY_STANDALONE_AUTH_CONFIG, FLY_THEME_MODE_IDS, FLY_WINDOW_HELP_HINT_EVENT, FLY_WINDOW_PAGE_TITLE_EVENT, FlyAchievementProgressComponent, FlyActionMenuComponent, FlyActionStackComponent, FlyAgentDraggableDirective, FlyAnimatedEmojiComponent, FlyAppHomeComponent, FlyAppTopbarComponent, FlyAuthLiveRefresh, FlyBadgeWallComponent, FlyBlockUiComponent, FlyBreadcrumbComponent, FlyButtonComponent, FlyBytesPipe, FlyCaptchaComponent, FlyCardActionsComponent, FlyCardBodyComponent, FlyCardComponent, FlyCardFooterComponent, FlyCardGridComponent, FlyCardMediaComponent, FlyCardMetaComponent, FlyCardStatusComponent, FlyCardTitleComponent, FlyCellDirective, FlyCheckboxComponent, FlyChipComponent, FlyChunkReloadErrorHandler, FlyClickOutsideDirective, FlyCollapsibleComponent, FlyCommentThreadComponent, FlyCompactNumberPipe, FlyConfirmDialogComponent, FlyControlDirective, FlyCronBuilderComponent, FlyDataTableComponent, FlyDatePipe, FlyDateTimePipe, FlyDebouncer, FlyDecimalNumberPipe, FlyDetailCardComponent, FlyDetailShellComponent, FlyDrawerComponent, FlyDurationPipe, FlyDynamicFormComponent, FlyEmojiPickerComponent, FlyFieldComponent, FlyFileUploadComponent, FlyFilterPanelComponent, FlyFormBannerComponent, FlyFormFooterComponent, FlyFormGridComponent, FlyFormSectionComponent, FlyFullNumberPipe, FlyGanttComponent, FlyHubClient, FlyIconButtonComponent, FlyIfAdminDirective, FlyIfRoleDirective, FlyImageUploadComponent, FlyLeaderboardComponent, FlyMetaListComponent, FlyModalComponent, FlyModerationQueueComponent, FlyModuleIconDirective, FlyPaginationComponent, FlyPeoplePickerComponent, FlyPointsTierComponent, FlyProgressComponent, FlyRelativeTimePipe, FlyRemoteContextService, FlyRemoteRouter, FlyRemoteRouterOutletComponent, FlySearchInputComponent, FlySectionHeaderComponent, FlySecureSrcDirective, FlySegmentedComponent, FlySelectComponent, FlySkeletonComponent, FlySliderComponent, FlySparklineComponent, FlySpinnerComponent, FlyStandaloneAuthCallbackComponent, FlyStandaloneAuthService, FlyStateMessageComponent, FlyDynamicFormComponent as FlySurveyFormComponent, FlyTabComponent, FlyTabsComponent, FlyTagsInputComponent, FlyThemeService, FlyTimePipe, FlyToastService, FlyToggleComponent, FlyTooltipDirective, FlyTreeNavComponent, FlyTypeaheadComponent, FlyUserDirectoryService, FlyWindowHelpService, FlyWindowTitleService, FlyosPendingLaunchesGlobalKey, FlyosShellHandlesLaunchRequestsGlobalKey, FlyosShellOwnsHistoryGlobalKey, GANTT_ZOOMS, I18nService, LAUNCH_CONTEXT, MessageBoxButtons, MessageBoxComponent, MessageBoxIcon, MessageBoxService, MockAuthService, OverlayStack, PRESENCE_COLORS, PageHeaderComponent, RTL_LOCALE_SET, SHARE_ORG_CHART_SYSTEM_KEY_APPS, SHARE_ORG_CHART_SYSTEM_KEY_DEFAULT, SHARE_PANEL_DEFAULT_FILE_LEVELS, STATE_DEFAULT_ICONS, STATE_DEFAULT_MESSAGE_KEYS, STEP_UP_CODE, STEP_UP_REAUTH_HANDLER, STEP_UP_RETURN_KEY, SUPPORTED_AGENT_PAYLOAD_VERSIONS, SharePanelComponent, SourceAppResolver, StandaloneWindowManagerService, StatusBadgeComponent, StepUpService, ToastHostComponent, TranslatePipe, WINDOW_DATA, WINDOW_HELP_HINT, WindowManagerService, applySkinTone, applySuggestion, ariaSort, buildCron, canConfirm, canGoNext, canGoPrev, captureFocus, clampPage, clampSliderValue, connectRemoteLaunch, enterActivatesNatively, filterGroup, filterSuggestions, findLocaleByDialect, findLocaleByPrefix, firstEnabledIndex, firstModuleIndex, flattenModules, flyAdminGuard, flyCaptchaBase64Utf8, flyCaptchaBuildToken, flyCaptchaSha256Hex, flyCompactNumber, flyDebounced, flyDecimalNumber, flyDownloadBlob, flyDuration, flyEmojiFor, flyEmojiIsTonable, flyEmojiPackUrl, flyExportFileName, flyFirstEnabledIndex, flyFormatBytes, flyFormatDate, flyFormatDateTime, flyFormatTime, flyFullNumber, flyNextEnabledIndex, flyNextSegmentIndex, flyRelativeTime, flyResolveActiveTab, flyRoleGuard, flySignedCompact, flySkinToneLabelKey, flyStandaloneAuthGuard, flyStandaloneAuthInterceptor, flyToDateOnly, hasAnyRoleIn, healNativeFederationCacheOnce, initialExpanded, isAccentColor, isChunkLoadError, isFlyAuthStorePopulated, isNativeFederationCacheError, isRtlLocale, isRtlLocaleEntry, isValidCron, isValidSingleField, loadRemoteStyles, matchFlyRoutePattern, nextEnabledIndex, nextModuleIndex, nextSegmentIndex, nextSort, normalizeFlyTheme, normalizeRoles, overlayStack, parseCron, parseStepUpChallenge, parseTags, presenceColorFor, printConsoleSecurityWarning, provideFlyChunkReloadRecovery, provideFlyEmojiPack, provideFlyStandaloneAuth, reloadOnceForChunkError, requestAppLaunch, resolveActiveModule, resolveActiveSection, resolveActiveTab, resolveCellValue, resolveStateIcon, resolveStateMessageKey, restoreFocus, sameTags, sectionHintKey, sectionLayout, sliderTrackGradient, sparklinePath, sparklinePoints, stepUpInterceptor, stepUpReturnKey, trimAgentPayload, trimAgentString, unloadRemoteStyles, utf8ByteLength, validateAgentPayload, warnIfEmbeddedSessionMissing };
-export type { ActionMenuItem, AgentAction, AgentActionDispatch, AgentActionVerb, AgentChipHostInputs, AgentCommand, AgentCommandContextBinding, AgentCommandHandle, AgentCommandRegistration, AgentCommandScope, AgentCommandSlashSpec, AgentDragPayload, AgentDraggableItem, AgentDropChipMode, AgentDropRendererRegistration, AgentEnvelopeAttachment, AgentMcpScope, AgentMessageEnvelope, AgentPayloadLimits, AgentPayloadValidationResult, AppEveryonePrincipal, AppEveryoneTerm, AppLookup, AppLookupEntry, AudienceEditTarget, AudienceErrorCode, AudienceFilter, AudienceOptions, AudiencePresetKind, AudienceTerm, AudienceTermKind, BreadcrumbItem, ButtonSize, ButtonVariant, CardLayout, ChartTerm, ChildWindowData, ChipTone, ConfirmKind, ConnectRemoteLaunchOptions, ContextMenuAlign, ContextMenuItem, ContextMenuSection, CronAdvancedFieldDef, CronMode, CronParts, CronWeekday, DesktopApp, DesktopAppCategory, DesktopAppKind, DetailSection, DialogResultWithAcknowledgement, EmbeddedSessionProbe, EntityLinkSelection, FilterGroup, FlyAchievementRow, FlyAppHomeLayout, FlyAppModule, FlyAppModuleSection, FlyAuthRefreshPayload, FlyAuthStoreReadable, FlyBadgeTile, FlyBreadcrumbItem, FlyCaptchaChallenge, FlyCaptchaSolution, FlyCaptchaState, FlyCellContext, FlyColumn, FlyColumnKind, FlyComment, FlyCommentDeleteRequest, FlyCommentEditRequest, FlyCommentLoadMoreRequest, FlyCommentLoadRepliesRequest, FlyCommentLockToggleRequest, FlyCommentPage, FlyCommentReportReason, FlyCommentReportRequest, FlyCommentReportStatus, FlyCommentSubmitRequest, FlyCountry, FlyDrawerSide, FlyDrawerSize, FlyEmojiCategory, FlyEmojiCell, FlyEmojiEntry, FlyEmojiPack, FlyEmojiPackEntry, FlyEmojiPackManifest, FlyEmojiPickerSize, FlyEmojiPickerTab, FlyEmojiSection, FlyFileInfo, FlyFileSelection, FlyFormAnswer, FlyFormAnswerValue, FlyFormDefinition, FlyFormFieldOptions, FlyFormOption, FlyFormQuestion, FlyFormQuestionType, FlyFormScoreDisplay, FlyLaunchEventDetail, FlyLaunchRequestDetail, FlyLeaderboardRow, FlyLiveRefreshOptions, FlyLocaleEntry, FlyMetaItem, FlyModerationLoadPageRequest, FlyModerationLockThreadRequest, FlyModerationOpenSubjectRequest, FlyModerationReport, FlyModerationReportPage, FlyModerationResolutionStatus, FlyModerationResolveRequest, FlyNavigableItem, FlyPeoplePickerMode, FlyPeoplePickerOption, FlyPeopleSearchFn, FlyPointsSummary, FlyRemoteContext, FlyRemoteMatch, FlyRemoteRoute, FlyRemoteRouteEventDetail, FlySearchExpandTrigger, FlySearchInputSize, FlySecureSrcState, FlySelectOption, FlySelectValue, FlySkeletonAnimation, FlySkeletonLayout, FlySkeletonShape, FlySkinTone, FlySort, FlyStandaloneAuthConfig, FlyFileSelection as FlySurveyFileSelection, FlyFormAnswer as FlySurveyFormAnswer, FlyFormAnswerValue as FlySurveyFormAnswerValue, FlyFormDefinition as FlySurveyFormDefinition, FlyFormFieldOptions as FlySurveyFormFieldOptions, FlyFormOption as FlySurveyFormOption, FlyFormQuestion as FlySurveyFormQuestion, FlyFormQuestionType as FlySurveyQuestionType, FlyThemeMode, FlyTooltipPlacement, FlyTreeNavNode, FlyTypeaheadOption, FlyWindowHelpHintEventDetail, FlyWindowHelpPublisher, FlyWindowPageTitleEventDetail, FlyWindowTitlePublisher, FlyosPendingLaunches, FocusRestore, FormBannerKind, GanttDependency, GanttDependencyCreate, GanttRow, GanttRowDatesChange, GanttRowKind, GanttZoom, IconButtonVariant, LaunchContext, LoadBundleOptions, LookupDescriptor, LookupHandle, LookupRegistration, LookupResult, LookupSearch, MessageBoxButton, MessageBoxDontAskAgainConfig, MessageBoxOptions, MessageBoxOptionsWithAcknowledgement, MockAuthConfig, OpenWindowOptions, OuPrincipal, OuTerm, OverlayHandle, PageHeaderVariant, PresetTerm, ProgressTone, RemoteAppDef, RequestAppLaunchOptions, RoleOuLookupRow, RolePrincipal, RolesTerm, SegmentedOption, ShareOrgChartOption, ShareOuNode, SharePanelLevelOption, SharePermissionEntry, SharePrincipal, SharePrincipalKind, ShareUserResult, StateMessageKind, StepUpChallenge, StepUpReauthHandler, StepUpReauthRequest, ToastAction, ToastEntry, ToastOptions, ToastVariant, User, UserPrincipal, UsersTerm, WindowHelpHint, WindowInstance, WindowState };
+export { AGENT_DRAG_MIME, AGENT_PAYLOAD_VERSION, APP_LOOKUP, AUDIENCE_ERROR_CODES, AUDIENCE_LIMITS, AUDIENCE_PRESETS, AUDIENCE_TERM_KINDS, AgentActionBus, AgentActionUnsupportedDispatchError, AgentCommandRegistry, AgentDropRegistry, AgentFlightAnimator, AgentLookupRegistry, AgentPayloadOversizeError, AudienceBuilderComponent, AuthService, BilingualFieldComponent, CRON_MODES, CRON_WEEKDAYS, ContextMenuComponent, DEFAULT_AGENT_PAYLOAD_LIMITS, DEFAULT_FLY_THEME_MODE, DS_BASELINE_LOCALES, DashboardKpiComponent, DialogResult, EntityLookupComponent, FLYOS_LAUNCH_EVENT, FLYOS_LAUNCH_REQUEST_EVENT, FLYOS_REMOTE_ROUTE_EVENT, FLY_ACCENT_PROPERTY, FLY_ADMIN_ROLES, FLY_CHUNK_RELOAD_FLAG, FLY_COMPACT_THRESHOLD, FLY_COUNTRIES, FLY_EMOJI_BY_ID, FLY_EMOJI_CATEGORIES, FLY_EMOJI_CATEGORY_BY_ID, FLY_EMOJI_DEFAULT_CATEGORIES, FLY_EMOJI_PACK, FLY_EMOJI_PACK_MISSING_MESSAGE, FLY_EMOJI_PREVIEW_COUNT, FLY_EMPTY_VALUE, FLY_LOCALE_CATALOG, FLY_NF_CACHE_HEAL_FLAG, FLY_RELOAD_DEBOUNCE_MS, FLY_RELOAD_REARM_MS, FLY_REMOTE_BASE_PATH, FLY_REMOTE_CONTEXT_EVENT, FLY_REMOTE_CONTEXT_STORE_KEY, FLY_REMOTE_ROUTES, FLY_SCAN_PENDING_DEFAULT_DELAY_MS, FLY_SCAN_PENDING_MAX_RETRIES, FLY_SCAN_PENDING_STATUS, FLY_SEARCH_DEBOUNCE_MS, FLY_SKIN_TONES, FLY_STANDALONE_AUTH_CONFIG, FLY_THEME_MODE_IDS, FLY_WINDOW_HELP_HINT_EVENT, FLY_WINDOW_PAGE_TITLE_EVENT, FlyAchievementProgressComponent, FlyActionMenuComponent, FlyActionStackComponent, FlyAgentDraggableDirective, FlyAnimatedEmojiComponent, FlyAppHomeComponent, FlyAppTopbarComponent, FlyAuthLiveRefresh, FlyBadgeWallComponent, FlyBlockUiComponent, FlyBreadcrumbComponent, FlyButtonComponent, FlyBytesPipe, FlyCaptchaComponent, FlyCardActionsComponent, FlyCardBodyComponent, FlyCardComponent, FlyCardFooterComponent, FlyCardGridComponent, FlyCardMediaComponent, FlyCardMetaComponent, FlyCardStatusComponent, FlyCardTitleComponent, FlyCellDirective, FlyCheckboxComponent, FlyChipComponent, FlyChunkReloadErrorHandler, FlyClickOutsideDirective, FlyCollapsibleComponent, FlyCommentThreadComponent, FlyCompactNumberPipe, FlyConfirmDialogComponent, FlyControlDirective, FlyCronBuilderComponent, FlyDataTableComponent, FlyDatePipe, FlyDateTimePipe, FlyDebouncer, FlyDecimalNumberPipe, FlyDetailCardComponent, FlyDetailShellComponent, FlyDrawerComponent, FlyDurationPipe, FlyDynamicFormComponent, FlyEmojiPickerComponent, FlyFieldComponent, FlyFileDownloadService, FlyFileUploadComponent, FlyFilterPanelComponent, FlyFormBannerComponent, FlyFormFooterComponent, FlyFormGridComponent, FlyFormSectionComponent, FlyFullNumberPipe, FlyGanttComponent, FlyHubClient, FlyIconButtonComponent, FlyIfAdminDirective, FlyIfRoleDirective, FlyImageUploadComponent, FlyLeaderboardComponent, FlyMetaListComponent, FlyModalComponent, FlyModerationQueueComponent, FlyModuleIconDirective, FlyPaginationComponent, FlyPeoplePickerComponent, FlyPointsTierComponent, FlyProgressComponent, FlyRelativeTimePipe, FlyRemoteContextService, FlyRemoteRouter, FlyRemoteRouterOutletComponent, FlySearchInputComponent, FlySectionHeaderComponent, FlySecureSrcDirective, FlySegmentedComponent, FlySelectComponent, FlySkeletonComponent, FlySliderComponent, FlySparklineComponent, FlySpinnerComponent, FlyStandaloneAuthCallbackComponent, FlyStandaloneAuthService, FlyStateMessageComponent, FlyDynamicFormComponent as FlySurveyFormComponent, FlyTabComponent, FlyTabsComponent, FlyTagsInputComponent, FlyThemeService, FlyTimePipe, FlyToastService, FlyToggleComponent, FlyTooltipDirective, FlyTreeNavComponent, FlyTypeaheadComponent, FlyUserDirectoryService, FlyWindowHelpService, FlyWindowTitleService, FlyosPendingLaunchesGlobalKey, FlyosShellHandlesLaunchRequestsGlobalKey, FlyosShellOwnsHistoryGlobalKey, GANTT_ZOOMS, I18nService, LAUNCH_CONTEXT, MessageBoxButtons, MessageBoxComponent, MessageBoxIcon, MessageBoxService, MockAuthService, OverlayStack, PRESENCE_COLORS, PageHeaderComponent, RTL_LOCALE_SET, SHARE_ORG_CHART_SYSTEM_KEY_APPS, SHARE_ORG_CHART_SYSTEM_KEY_DEFAULT, SHARE_PANEL_DEFAULT_FILE_LEVELS, STATE_DEFAULT_ICONS, STATE_DEFAULT_MESSAGE_KEYS, STEP_UP_CODE, STEP_UP_REAUTH_HANDLER, STEP_UP_RETURN_KEY, SUPPORTED_AGENT_PAYLOAD_VERSIONS, SharePanelComponent, SourceAppResolver, StandaloneWindowManagerService, StatusBadgeComponent, StepUpService, ToastHostComponent, TranslatePipe, WINDOW_DATA, WINDOW_HELP_HINT, WindowManagerService, applySkinTone, applySuggestion, ariaSort, buildCron, canConfirm, canGoNext, canGoPrev, captureFocus, clampPage, clampSliderValue, connectRemoteLaunch, enterActivatesNatively, filterGroup, filterSuggestions, findLocaleByDialect, findLocaleByPrefix, firstEnabledIndex, firstModuleIndex, flattenModules, flyAdminGuard, flyApiErrorMessage, flyCaptchaBase64Utf8, flyCaptchaBuildToken, flyCaptchaSha256Hex, flyCompactNumber, flyDebounced, flyDecimalNumber, flyDownloadBlob, flyDuration, flyEmojiFor, flyEmojiIsTonable, flyEmojiPackUrl, flyExportFileName, flyFirstEnabledIndex, flyFormatBytes, flyFormatDate, flyFormatDateTime, flyFormatTime, flyFullNumber, flyNextEnabledIndex, flyNextSegmentIndex, flyRelativeTime, flyResolveActiveTab, flyRoleGuard, flyScanPendingDelayMs, flyScanRetry, flySignedCompact, flySkinToneLabelKey, flyStandaloneAuthGuard, flyStandaloneAuthInterceptor, flyToDateOnly, flyToPage, flyUnwrap, flyUnwrapLenient, hasAnyRoleIn, healNativeFederationCacheOnce, initialExpanded, isAccentColor, isChunkLoadError, isFlyAuthStorePopulated, isNativeFederationCacheError, isRtlLocale, isRtlLocaleEntry, isValidCron, isValidSingleField, loadRemoteStyles, matchFlyRoutePattern, nextEnabledIndex, nextModuleIndex, nextSegmentIndex, nextSort, normalizeFlyTheme, normalizeRoles, overlayStack, parseCron, parseStepUpChallenge, parseTags, presenceColorFor, printConsoleSecurityWarning, provideFlyChunkReloadRecovery, provideFlyEmojiPack, provideFlyStandaloneAuth, reloadOnceForChunkError, requestAppLaunch, resolveActiveModule, resolveActiveSection, resolveActiveTab, resolveCellValue, resolveStateIcon, resolveStateMessageKey, restoreFocus, sameTags, sectionHintKey, sectionLayout, sliderTrackGradient, sparklinePath, sparklinePoints, stepUpInterceptor, stepUpReturnKey, trimAgentPayload, trimAgentString, unloadRemoteStyles, utf8ByteLength, validateAgentPayload, warnIfEmbeddedSessionMissing };
+export type { ActionMenuItem, AgentAction, AgentActionDispatch, AgentActionVerb, AgentChipHostInputs, AgentCommand, AgentCommandContextBinding, AgentCommandHandle, AgentCommandRegistration, AgentCommandScope, AgentCommandSlashSpec, AgentDragPayload, AgentDraggableItem, AgentDropChipMode, AgentDropRendererRegistration, AgentEnvelopeAttachment, AgentMcpScope, AgentMessageEnvelope, AgentPayloadLimits, AgentPayloadValidationResult, AppEveryonePrincipal, AppEveryoneTerm, AppLookup, AppLookupEntry, AudienceEditTarget, AudienceErrorCode, AudienceFilter, AudienceOptions, AudiencePresetKind, AudienceTerm, AudienceTermKind, BreadcrumbItem, ButtonSize, ButtonVariant, CardLayout, ChartTerm, ChildWindowData, ChipTone, ConfirmKind, ConnectRemoteLaunchOptions, ContextMenuAlign, ContextMenuItem, ContextMenuSection, CronAdvancedFieldDef, CronMode, CronParts, CronWeekday, DesktopApp, DesktopAppCategory, DesktopAppKind, DetailSection, DialogResultWithAcknowledgement, EmbeddedSessionProbe, EntityLinkSelection, FilterGroup, FlyAchievementRow, FlyApiError, FlyApiResponse, FlyAppHomeLayout, FlyAppModule, FlyAppModuleSection, FlyAuthRefreshPayload, FlyAuthStoreReadable, FlyBadgeTile, FlyBreadcrumbItem, FlyCaptchaChallenge, FlyCaptchaSolution, FlyCaptchaState, FlyCellContext, FlyColumn, FlyColumnKind, FlyComment, FlyCommentDeleteRequest, FlyCommentEditRequest, FlyCommentLoadMoreRequest, FlyCommentLoadRepliesRequest, FlyCommentLockToggleRequest, FlyCommentPage, FlyCommentReportReason, FlyCommentReportRequest, FlyCommentReportStatus, FlyCommentSubmitRequest, FlyCountry, FlyDrawerSide, FlyDrawerSize, FlyEmojiCategory, FlyEmojiCell, FlyEmojiEntry, FlyEmojiPack, FlyEmojiPackEntry, FlyEmojiPackManifest, FlyEmojiPickerSize, FlyEmojiPickerTab, FlyEmojiSection, FlyFileInfo, FlyFileSelection, FlyFormAnswer, FlyFormAnswerValue, FlyFormDefinition, FlyFormFieldOptions, FlyFormOption, FlyFormQuestion, FlyFormQuestionType, FlyFormScoreDisplay, FlyLaunchEventDetail, FlyLaunchRequestDetail, FlyLeaderboardRow, FlyLiveRefreshOptions, FlyLocaleEntry, FlyMetaItem, FlyModerationLoadPageRequest, FlyModerationLockThreadRequest, FlyModerationOpenSubjectRequest, FlyModerationReport, FlyModerationReportPage, FlyModerationResolutionStatus, FlyModerationResolveRequest, FlyNavigableItem, FlyPageMeta, FlyPageResult, FlyPaged, FlyPeoplePickerMode, FlyPeoplePickerOption, FlyPeopleSearchFn, FlyPointsSummary, FlyRemoteContext, FlyRemoteMatch, FlyRemoteRoute, FlyRemoteRouteEventDetail, FlySearchExpandTrigger, FlySearchInputSize, FlySecureSrcState, FlySelectOption, FlySelectValue, FlySkeletonAnimation, FlySkeletonLayout, FlySkeletonShape, FlySkinTone, FlySort, FlyStandaloneAuthConfig, FlyFileSelection as FlySurveyFileSelection, FlyFormAnswer as FlySurveyFormAnswer, FlyFormAnswerValue as FlySurveyFormAnswerValue, FlyFormDefinition as FlySurveyFormDefinition, FlyFormFieldOptions as FlySurveyFormFieldOptions, FlyFormOption as FlySurveyFormOption, FlyFormQuestion as FlySurveyFormQuestion, FlyFormQuestionType as FlySurveyQuestionType, FlyThemeMode, FlyTooltipPlacement, FlyTreeNavNode, FlyTypeaheadOption, FlyWindowHelpHintEventDetail, FlyWindowHelpPublisher, FlyWindowPageTitleEventDetail, FlyWindowTitlePublisher, FlyosPendingLaunches, FocusRestore, FormBannerKind, GanttDependency, GanttDependencyCreate, GanttRow, GanttRowDatesChange, GanttRowKind, GanttZoom, IconButtonVariant, LaunchContext, LoadBundleOptions, LookupDescriptor, LookupHandle, LookupRegistration, LookupResult, LookupSearch, MessageBoxButton, MessageBoxDontAskAgainConfig, MessageBoxOptions, MessageBoxOptionsWithAcknowledgement, MockAuthConfig, OpenWindowOptions, OuPrincipal, OuTerm, OverlayHandle, PageHeaderVariant, PresetTerm, ProgressTone, RemoteAppDef, RequestAppLaunchOptions, RoleOuLookupRow, RolePrincipal, RolesTerm, SegmentedOption, ShareOrgChartOption, ShareOuNode, SharePanelLevelOption, SharePermissionEntry, SharePrincipal, SharePrincipalKind, ShareUserResult, StateMessageKind, StepUpChallenge, StepUpReauthHandler, StepUpReauthRequest, ToastAction, ToastEntry, ToastOptions, ToastVariant, User, UserPrincipal, UsersTerm, WindowHelpHint, WindowInstance, WindowState };
 //# sourceMappingURL=flyos-design-system.d.ts.map