@kortix/sdk 0.9.98

package/dist/platform/projects-client/projects.d.ts

@@ -0,0 +1,235 @@
+import { type ApiClientOptions } from '../api-client.js';
+import { type ProjectFileEntry, type ProjectGitConnection, type ProjectRole, type ServerTokenOptions } from './shared.js';
+/** Stable ids for experimental features (mirrors apps/api experimental/features). */
+export type ExperimentalFeatureKey = 'apps' | 'agent_tunnel' | 'marketplace' | 'agentmail_email' | 'meet' | 'llm_gateway' | 'review_center';
+/** One experimental feature as described by the API catalog. */
+export interface ExperimentalFeatureView {
+    key: ExperimentalFeatureKey;
+    name: string;
+    description: string;
+    stability: 'experimental' | 'beta';
+    /** Platform supports it (operator env). When false the UI hides the toggle. */
+    available: boolean;
+    /** Effective per-project state (the switch position). */
+    enabled: boolean;
+    /** True when this project set an explicit choice (vs inheriting the default). */
+    overridden: boolean;
+}
+export interface KortixProject {
+    project_id: string;
+    account_id: string;
+    name: string;
+    repo_url: string;
+    default_branch: string;
+    manifest_path: string;
+    status: 'active' | 'archived';
+    metadata: Record<string, unknown>;
+    last_opened_at: string | null;
+    created_at: string;
+    updated_at: string;
+    project_role?: ProjectRole | null;
+    effective_project_role?: ProjectRole | null;
+    /** Effective on/off for each experimental feature for THIS project. */
+    experimental?: Record<ExperimentalFeatureKey, boolean>;
+    /** Full experimental-feature catalog (drives Customize → Settings →
+     *  Experimental). Self-describing so the UI never hard-codes the list. */
+    experimental_features?: ExperimentalFeatureView[];
+    /** Back-compat alias for `experimental.apps`. */
+    apps_enabled?: boolean;
+    /** Effective per-project warm sandbox pool config (Customize → Sandbox). */
+    warm_pool?: {
+        enabled: boolean;
+        size: number;
+    };
+    /** Whether the warm pool feature is enabled platform-wide (gates the UI). */
+    warm_pool_available?: boolean;
+    /** Per-project sandbox-provider pin (Customize → Settings). null = follow the
+     *  platform default/distribution. */
+    default_sandbox_provider?: string | null;
+    /** Enabled sandbox providers the picker offers (ALLOWED ∩ has-API-key). */
+    available_sandbox_providers?: string[];
+}
+export interface ProjectConfigSummary {
+    is_kortix_repo: boolean;
+    signals: Record<string, boolean>;
+    manifest_raw: string | null;
+    open_code_raw: string | null;
+    open_code_default_agent: string | null;
+    agent_discovery: 'opencode' | 'declarative';
+    agents: Array<{
+        name: string;
+        path: string;
+        description: string | null;
+        mode: string | null;
+        source?: 'opencode' | 'kortix.toml';
+        enabled?: boolean;
+        /** Per-agent governance from `kortix.toml [[agents]]` (read-only mirror).
+         *  `'all'` = unscoped; a list = the allowlist; `[]` = none. Absent for
+         *  OpenCode-discovered agents (not governed by [[agents]]). */
+        scope?: {
+            env: string[] | 'all';
+            connectors: string[] | 'all';
+            kortix_cli: string[] | 'all';
+        };
+    }>;
+    skills: Array<{
+        name: string;
+        path: string;
+        description: string | null;
+    }>;
+    commands: Array<{
+        name: string;
+        path: string;
+        description: string | null;
+    }>;
+    env: {
+        required: string[];
+        optional: string[];
+    };
+}
+export interface ProjectDetail {
+    project: KortixProject;
+    git_connection?: ProjectGitConnection | null;
+    config: ProjectConfigSummary;
+    file_count: number;
+    files: ProjectFileEntry[];
+}
+export interface ProjectLlmCatalogResponse {
+    models: Record<string, {
+        name: string;
+        free?: boolean;
+        reasoning?: boolean;
+        tool_call?: boolean;
+        attachment?: boolean;
+        temperature?: boolean;
+        limit?: {
+            context?: number;
+            output?: number;
+        };
+    }>;
+}
+export interface ProjectInput {
+    account_id?: string;
+    name?: string;
+    repo_url: string;
+    default_branch?: string;
+    manifest_path?: string;
+}
+export interface CreateProjectRepoInput {
+    account_id?: string;
+    name: string;
+    installation_id?: string;
+    private?: boolean;
+    description?: string;
+    starter_template?: 'general-knowledge-worker' | 'minimal';
+}
+export interface ProvisionProjectInput {
+    account_id?: string;
+    name: string;
+    /** Seed the managed repo with the Kortix starter so sessions can boot. */
+    seed_starter?: boolean;
+    starter_template?: 'general-knowledge-worker' | 'minimal';
+    marketplace_items?: string[];
+}
+export interface RepoCollaboratorInvite {
+    username: string;
+    permission: string;
+    /** Pending-invitation URL to accept on GitHub, or null if already a collaborator. */
+    invitationUrl: string | null;
+    alreadyCollaborator: boolean;
+}
+export declare function listProjects(): Promise<KortixProject[]>;
+export declare function listProjectsForAccount(accountId?: string): Promise<KortixProject[]>;
+export declare function getProject(projectId: string, options?: ApiClientOptions): Promise<KortixProject>;
+/**
+ * Invite a GitHub user as a collaborator on a MANAGED repo — lets the project
+ * creator pull "their" Kortix-managed repo into their own GitHub account.
+ */
+export declare function inviteRepoCollaborator(projectId: string, githubUsername: string, permission?: 'read' | 'write'): Promise<RepoCollaboratorInvite>;
+export interface ManifestValidationIssue {
+    [key: string]: unknown;
+}
+export interface ManifestValidationResult {
+    valid: boolean;
+    issues: ManifestValidationIssue[];
+}
+/**
+ * Validate a `kortix.toml` manifest's raw TOML text server-side — the same
+ * schema the CLI (`kortix ship` pre-flight / `kortix validate`) and the CR-merge
+ * gate exercise. Always resolves (never throws on an invalid manifest) — the
+ * verdict is in the body.
+ */
+export declare function validateProjectManifest(projectId: string, raw: string): Promise<ManifestValidationResult>;
+export interface ProjectGitToken {
+    push_token: string;
+    repo_id: string | null;
+    repo_url: string | null;
+}
+/**
+ * Mint a fresh scoped git push token for a *managed* project (so the CLI can
+ * `kortix ship` without persisting credentials in git config). Throws (409)
+ * for BYO projects — they push with the user's own git remote auth.
+ */
+export declare function getProjectGitToken(projectId: string): Promise<ProjectGitToken>;
+/** True when this project's repo is a Kortix-managed GitHub repo (invitable). */
+export declare function isManagedGithubProject(project: {
+    metadata?: Record<string, unknown> | null;
+}): boolean;
+export declare function getProjectDetail(projectId: string, options?: ApiClientOptions): Promise<ProjectDetail>;
+export declare function getProjectLlmCatalog(projectId: string, options?: ApiClientOptions): Promise<ProjectLlmCatalogResponse>;
+export declare function createProject(input: ProjectInput): Promise<KortixProject>;
+export declare function createProjectRepo(input: CreateProjectRepoInput): Promise<KortixProject>;
+/**
+ * Create a project backed by a managed Kortix git repo — the
+ * default. No GitHub account or repo-name uniqueness needed; the starter is
+ * seeded server-side so the project boots immediately.
+ */
+export declare function provisionProject(input: ProvisionProjectInput): Promise<KortixProject>;
+export declare function updateProject(projectId: string, input: Partial<ProjectInput>): Promise<KortixProject>;
+/** Toggle an experimental feature for a project (Customize → Settings →
+ *  Experimental). Pass `enabled: null` to clear the override and fall back to
+ *  the operator default. */
+export declare function updateExperimentalFeature(projectId: string, feature: ExperimentalFeatureKey, enabled: boolean | null): Promise<KortixProject>;
+/** Set or clear the per-project sandbox-provider pin (Customize → Settings).
+ *  Pass `null` to clear (follow the platform default/distribution). The value must
+ *  be one of the project's `available_sandbox_providers`. */
+export declare function updateProjectSandboxProvider(projectId: string, provider: string | null): Promise<KortixProject>;
+/** @deprecated Use {@link updateExperimentalFeature}('apps', …). */
+export declare function updateAppsConfig(projectId: string, input: {
+    enabled: boolean | null;
+}): Promise<KortixProject>;
+/**
+ * Configure the warm sandbox pool for one sandbox template (Customize → Sandbox).
+ * Warm pool is per-template + opt-in; `slug` selects which template (defaults to
+ * the platform default). Live ready/warming counts come back on each template via
+ * `listProjectSnapshots`.
+ */
+export declare function updateTemplateWarmPool(projectId: string, input: {
+    slug: string;
+    enabled?: boolean;
+    size?: number;
+}): Promise<KortixProject>;
+export declare function setProjectOnboardingComplete(projectId: string, completed: boolean): Promise<KortixProject>;
+export declare function archiveProject(projectId: string): Promise<{
+    ok: boolean;
+}>;
+/**
+ * Server-side / explicit-token variant of {@link listProjectsForAccount}.
+ * Returns `null` on any failure.
+ */
+export declare function fetchProjectsForAccountWithToken(opts: ServerTokenOptions, accountId: string): Promise<KortixProject[] | null>;
+export type ProvisionProjectWithTokenResult = {
+    ok: true;
+    project: KortixProject;
+} | {
+    ok: false;
+    limitReached: boolean;
+};
+/**
+ * Server-side / explicit-token variant of {@link provisionProject}. Mirrors
+ * the original bootstrap behavior: a 403 with `code: 'project_limit_reached'`
+ * is reported distinctly so the caller can fall back to re-listing existing
+ * projects instead of treating it as a hard failure.
+ */
+export declare function provisionProjectWithToken(opts: ServerTokenOptions, input: ProvisionProjectInput): Promise<ProvisionProjectWithTokenResult>;
+//# sourceMappingURL=projects.d.ts.map

package/dist/platform/projects-client/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/projects.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,UAAU,CAAC;AAElB,qFAAqF;AACrF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,cAAc,GAAG,aAAa,GAAG,iBAAiB,GAAG,MAAM,GAAG,aAAa,GAAG,eAAe,CAAC;AAE5I,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,sBAAsB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,cAAc,GAAG,MAAM,CAAC;IACnC,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;IACnB,yDAAyD;IACzD,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC,sBAAsB,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5C,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IACvD;8EAC0E;IAC1E,qBAAqB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAClD,iDAAiD;IACjD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,SAAS,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;yCACqC;IACrC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,2EAA2E;IAC3E,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,eAAe,EAAE,UAAU,GAAG,aAAa,CAAC;IAC5C,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;QACpC,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;uEAE+D;QAC/D,KAAK,CAAC,EAAE;YACN,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YACtB,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YAC7B,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;SAC9B,CAAC;KACH,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC1E,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC5E,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,cAAc,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC7C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,gBAAgB,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/C,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAC3D;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC1D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAsB,YAAY,6BAEjC;AAED,wBAAsB,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,4BAG9D;AAED,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,0BAE7E;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,UAAU,GAAE,MAAM,GAAG,OAAiB,mCAQvC;AAED,MAAM,WAAW,uBAAuB;IACtC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,uBAAuB,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,wBAAwB,CAAC,CAKnC;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAKpF;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAGtG;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,0BAOnF;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,sCAOvF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,YAAY,0BAEtD;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,0BAIpE;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,0BAOlE;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,0BAK7B;AAED;;4BAE4B;AAC5B,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,OAAO,GAAG,IAAI,0BAQxB;AAED;;6DAE6D;AAC7D,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,0BAOxB;AAED,oEAAoE;AACpE,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,0BAGnC;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,0BAK1D;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,OAAO,0BAQnB;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM;QAEpB,OAAO;GAExC;AAOD;;;GAGG;AACH,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAKjC;AAED,MAAM,MAAM,+BAA+B,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC;AAEzC;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,kBAAkB,EACxB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,+BAA+B,CAAC,CA6B1C"}

package/dist/platform/projects-client/projects.js

@@ -0,0 +1,161 @@
+// Projects — project CRUD, detail, experimental features, warm pool, onboarding.
+import { backendApi } from '../api-client.js';
+import { normalizeServerBackendBase, serverTokenGet, unwrap, } from './shared.js';
+export async function listProjects() {
+    return unwrap(await backendApi.get('/projects'));
+}
+export async function listProjectsForAccount(accountId) {
+    const query = accountId ? `?account_id=${encodeURIComponent(accountId)}` : '';
+    return unwrap(await backendApi.get(`/projects${query}`));
+}
+export async function getProject(projectId, options) {
+    return unwrap(await backendApi.get(`/projects/${projectId}`, options));
+}
+/**
+ * Invite a GitHub user as a collaborator on a MANAGED repo — lets the project
+ * creator pull "their" Kortix-managed repo into their own GitHub account.
+ */
+export async function inviteRepoCollaborator(projectId, githubUsername, permission = 'write') {
+    return unwrap(await backendApi.post(`/projects/${projectId}/git/collaborators`, { github_username: githubUsername, permission }));
+}
+/**
+ * Validate a `kortix.toml` manifest's raw TOML text server-side — the same
+ * schema the CLI (`kortix ship` pre-flight / `kortix validate`) and the CR-merge
+ * gate exercise. Always resolves (never throws on an invalid manifest) — the
+ * verdict is in the body.
+ */
+export async function validateProjectManifest(projectId, raw) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/manifest/validate`, { raw }), 'Failed to validate manifest');
+}
+/**
+ * Mint a fresh scoped git push token for a *managed* project (so the CLI can
+ * `kortix ship` without persisting credentials in git config). Throws (409)
+ * for BYO projects — they push with the user's own git remote auth.
+ */
+export async function getProjectGitToken(projectId) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/git-token`, {}), 'Failed to mint git token');
+}
+/** True when this project's repo is a Kortix-managed GitHub repo (invitable). */
+export function isManagedGithubProject(project) {
+    const git = project.metadata?.git;
+    return git?.provider === 'github' && git?.managed === true;
+}
+export async function getProjectDetail(projectId, options) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/detail`, {
+        showErrors: false,
+        ...options,
+    }));
+}
+export async function getProjectLlmCatalog(projectId, options) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/llm-catalog`, {
+        showErrors: false,
+        ...options,
+    }));
+}
+export async function createProject(input) {
+    return unwrap(await backendApi.post('/projects', input));
+}
+export async function createProjectRepo(input) {
+    return unwrap(await backendApi.post('/projects/create-repo', input));
+}
+/**
+ * Create a project backed by a managed Kortix git repo — the
+ * default. No GitHub account or repo-name uniqueness needed; the starter is
+ * seeded server-side so the project boots immediately.
+ */
+export async function provisionProject(input) {
+    return unwrap(await backendApi.post('/projects/provision', {
+        seed_starter: true,
+        ...input,
+    }));
+}
+export async function updateProject(projectId, input) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}`, input));
+}
+/** Toggle an experimental feature for a project (Customize → Settings →
+ *  Experimental). Pass `enabled: null` to clear the override and fall back to
+ *  the operator default. */
+export async function updateExperimentalFeature(projectId, feature, enabled) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/experimental`, {
+        feature,
+        enabled,
+    }));
+}
+/** Set or clear the per-project sandbox-provider pin (Customize → Settings).
+ *  Pass `null` to clear (follow the platform default/distribution). The value must
+ *  be one of the project's `available_sandbox_providers`. */
+export async function updateProjectSandboxProvider(projectId, provider) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/sandbox-provider`, {
+        provider,
+    }));
+}
+/** @deprecated Use {@link updateExperimentalFeature}('apps', …). */
+export async function updateAppsConfig(projectId, input) {
+    return updateExperimentalFeature(projectId, 'apps', input.enabled);
+}
+/**
+ * Configure the warm sandbox pool for one sandbox template (Customize → Sandbox).
+ * Warm pool is per-template + opt-in; `slug` selects which template (defaults to
+ * the platform default). Live ready/warming counts come back on each template via
+ * `listProjectSnapshots`.
+ */
+export async function updateTemplateWarmPool(projectId, input) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/warm-pool`, input));
+}
+export async function setProjectOnboardingComplete(projectId, completed) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/onboarding`, { completed }));
+}
+export async function archiveProject(projectId) {
+    return unwrap(await backendApi.delete(`/projects/${projectId}`));
+}
+// ── Server-side explicit-token variants ──────────────────────────────────────
+// Next.js server actions / route handlers (post-signup first-project
+// bootstrap) run per-request with an already-resolved Supabase access token —
+// they must not rely on the SDK's process-wide `configureKortix()` seam.
+/**
+ * Server-side / explicit-token variant of {@link listProjectsForAccount}.
+ * Returns `null` on any failure.
+ */
+export async function fetchProjectsForAccountWithToken(opts, accountId) {
+    return serverTokenGet(opts, `/v1/projects?account_id=${encodeURIComponent(accountId)}`);
+}
+/**
+ * Server-side / explicit-token variant of {@link provisionProject}. Mirrors
+ * the original bootstrap behavior: a 403 with `code: 'project_limit_reached'`
+ * is reported distinctly so the caller can fall back to re-listing existing
+ * projects instead of treating it as a hard failure.
+ */
+export async function provisionProjectWithToken(opts, input) {
+    if (!opts.backendUrl || !opts.accessToken)
+        return { ok: false, limitReached: false };
+    const base = normalizeServerBackendBase(opts.backendUrl);
+    try {
+        const res = await fetch(`${base}/v1/projects/provision`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${opts.accessToken}`,
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({ seed_starter: true, ...input }),
+            signal: AbortSignal.timeout(opts.timeoutMs ?? 90_000),
+        });
+        if (res.ok) {
+            const project = (await res.json().catch(() => null));
+            // A 200 whose body doesn't actually carry a project_id is not a usable
+            // success — report it as not-ok instead of handing the caller a project
+            // it can't build a `/projects/{id}` path from.
+            if (!project?.project_id)
+                return { ok: false, limitReached: false };
+            return { ok: true, project };
+        }
+        if (res.status === 403) {
+            const body = (await res.json().catch(() => null));
+            return { ok: false, limitReached: body?.code === 'project_limit_reached' };
+        }
+        return { ok: false, limitReached: false };
+    }
+    catch {
+        return { ok: false, limitReached: false };
+    }
+}
+//# sourceMappingURL=projects.js.map

package/dist/platform/projects-client/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../src/platform/projects-client/projects.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,UAAU,EAAyB,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,0BAA0B,EAC1B,cAAc,EACd,MAAM,GAKP,MAAM,UAAU,CAAC;AAqIlB,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,GAAG,CAAkB,WAAW,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAkB;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,GAAG,CAAkB,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,OAA0B;IAC5E,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,GAAG,CAAgB,aAAa,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,cAAsB,EACtB,aAA+B,OAAO;IAEtC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,oBAAoB,EAC1C,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,CAChD,CACF,CAAC;AACJ,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,GAAW;IAEX,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAA2B,aAAa,SAAS,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,EACpG,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAkB,aAAa,SAAS,YAAY,EAAE,EAAE,CAAC,EAC9E,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,OAAsD;IAC3F,MAAM,GAAG,GAAI,OAAO,CAAC,QAA2E,EAAE,GAAG,CAAC;IACtG,OAAO,GAAG,EAAE,QAAQ,KAAK,QAAQ,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAA0B;IAClF,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAAgB,aAAa,SAAS,SAAS,EAAE;QACnE,UAAU,EAAE,KAAK;QACjB,GAAG,OAAO;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,OAA0B;IACtF,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAA4B,aAAa,SAAS,cAAc,EAAE;QACpF,UAAU,EAAE,KAAK;QACjB,GAAG,OAAO;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAmB;IACrD,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAgB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAA6B;IACnE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAgB,uBAAuB,EAAE,KAAK,CAAC,CACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA4B;IACjE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAgB,qBAAqB,EAAE;QAC1D,YAAY,EAAE,IAAI;QAClB,GAAG,KAAK;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,KAA4B;IAE5B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CAAgB,aAAa,SAAS,EAAE,EAAE,KAAK,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;4BAE4B;AAC5B,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,OAA+B,EAC/B,OAAuB;IAEvB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CAAgB,aAAa,SAAS,eAAe,EAAE;QAC3E,OAAO;QACP,OAAO;KACR,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;6DAE6D;AAC7D,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,QAAuB;IAEvB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CAAgB,aAAa,SAAS,mBAAmB,EAAE;QAC/E,QAAQ;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,KAAkC;IAElC,OAAO,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,KAAyD;IAEzD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CAAgB,aAAa,SAAS,YAAY,EAAE,KAAK,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,SAAkB;IAElB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CACpB,aAAa,SAAS,aAAa,EACnC,EAAE,SAAS,EAAE,CACd,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CAAkB,aAAa,SAAS,EAAE,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,qEAAqE;AACrE,8EAA8E;AAC9E,yEAAyE;AAEzE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,IAAwB,EACxB,SAAiB;IAEjB,OAAO,cAAc,CACnB,IAAI,EACJ,2BAA2B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC3D,CAAC;AACJ,CAAC;AAMD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAwB,EACxB,KAA4B;IAE5B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,wBAAwB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;YACtD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;SACtD,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAyB,CAAC;YAC7E,uEAAuE;YACvE,wEAAwE;YACxE,+CAA+C;YAC/C,IAAI,CAAC,OAAO,EAAE,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA6B,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/platform/projects-client/public-session-shares.d.ts

@@ -0,0 +1,52 @@
+export declare class PublicSessionShareError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+export interface PublicSessionShareMeta {
+    share: {
+        share_id: string;
+        session_id: string;
+        project_id: string;
+        resource_type: string;
+        label: string;
+        sandbox_status: string | null;
+        expires_at: string | null;
+    };
+    session: {
+        session_id: string;
+        title: string | null;
+        status: string;
+        created_at: string;
+        updated_at: string;
+    };
+}
+export interface PublicSessionTranscriptToolCall {
+    tool: string;
+    status: string | null;
+}
+export interface PublicSessionTranscriptMessage {
+    role: string;
+    created: string | null;
+    completed: string | null;
+    text: string;
+    tools: PublicSessionTranscriptToolCall[];
+    files: Array<{
+        filename: string | null;
+        mime: string | null;
+    }>;
+    reasoning_omitted: boolean;
+}
+export interface PublicSessionTranscript {
+    available: boolean;
+    reason: string | null;
+    opencode_session_id: string | null;
+    message_count: number;
+    messages: PublicSessionTranscriptMessage[];
+}
+/** Anonymous session metadata (title/status/timestamps) for a share id — the
+ *  route's own `:shareId` param, NOT the `kps_...` public token. */
+export declare function getPublicSessionShare(shareId: string): Promise<PublicSessionShareMeta>;
+/** Anonymous, sanitized (text-only, no tool args/output, no file contents)
+ *  transcript digest for a share id. */
+export declare function getPublicSessionShareMessages(shareId: string): Promise<PublicSessionTranscript>;
+//# sourceMappingURL=public-session-shares.d.ts.map

package/dist/platform/projects-client/public-session-shares.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-session-shares.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/public-session-shares.ts"],"names":[],"mappings":"AAgBA,qBAAa,uBAAwB,SAAQ,KAAK;aAG9B,MAAM,EAAE,MAAM;gBAD9B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM;CAKjC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACzC,KAAK,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/D,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,8BAA8B,EAAE,CAAC;CAC5C;AAyBD;oEACoE;AACpE,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAE5F;AAED;wCACwC;AACxC,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAErG"}

package/dist/platform/projects-client/public-session-shares.js

@@ -0,0 +1,54 @@
+// Anonymous, read-only session-share viewing — `/v1/public/session-shares/:shareId`
+// and `.../messages` (apps/api/src/public-session-shares/index.ts). Backs the
+// logged-out `(public)/share/[shareId]` page (`ShareViewer.tsx`).
+//
+// Deliberately NOT built on `backendApi` (platform/api-client.ts): that client
+// wraps every call in the authenticated fetch path, which for a visitor with
+// no token synthesizes a failure WITHOUT ever making the network call (see
+// `opencode/client.ts`'s `getPublicClientForUrl` doc comment for the same
+// footgun on the sandbox side). These routes are genuinely public — no
+// Authorization header is ever sent, and no `configureKortix()` call is
+// required for these functions to work; `getBackendUrl()` degrades to a sane
+// localhost default when unconfigured, exactly like the sibling
+// `getPublicShareUrlForToken`.
+import { getBackendUrl } from '../../state/server-store/url-helpers.js';
+export class PublicSessionShareError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'PublicSessionShareError';
+    }
+}
+function publicSessionShareUrl(shareId, suffix = '') {
+    return `${getBackendUrl()}/public/session-shares/${encodeURIComponent(shareId)}${suffix}`;
+}
+async function getJson(url) {
+    const res = await fetch(url, { method: 'GET', headers: { Accept: 'application/json' } });
+    const text = await res.text().catch(() => '');
+    let body = null;
+    try {
+        body = text ? JSON.parse(text) : null;
+    }
+    catch {
+        // Non-JSON body — fall through to the generic error message below.
+    }
+    if (!res.ok) {
+        const message = (body && typeof body === 'object' && 'error' in body && typeof body.error === 'string'
+            ? body.error
+            : null) || res.statusText || `HTTP ${res.status}`;
+        throw new PublicSessionShareError(message, res.status);
+    }
+    return body;
+}
+/** Anonymous session metadata (title/status/timestamps) for a share id — the
+ *  route's own `:shareId` param, NOT the `kps_...` public token. */
+export async function getPublicSessionShare(shareId) {
+    return getJson(publicSessionShareUrl(shareId));
+}
+/** Anonymous, sanitized (text-only, no tool args/output, no file contents)
+ *  transcript digest for a share id. */
+export async function getPublicSessionShareMessages(shareId) {
+    return getJson(publicSessionShareUrl(shareId, '/messages'));
+}
+//# sourceMappingURL=public-session-shares.js.map

package/dist/platform/projects-client/public-session-shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-session-shares.js","sourceRoot":"","sources":["../../../src/platform/projects-client/public-session-shares.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,6EAA6E;AAC7E,gEAAgE;AAChE,+BAA+B;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAG9B;IAFlB,YACE,OAAe,EACC,MAAc;QAE9B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AA4CD,SAAS,qBAAqB,CAAC,OAAe,EAAE,MAAM,GAAG,EAAE;IACzD,OAAO,GAAG,aAAa,EAAE,0BAA0B,kBAAkB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,OAAO,CAAI,GAAW;IACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GACX,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ;YAC7G,CAAC,CAAE,IAA0B,CAAC,KAAK;YACnC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED;oEACoE;AACpE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,OAAO,OAAO,CAAyB,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;wCACwC;AACxC,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAe;IACjE,OAAO,OAAO,CAA0B,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACvF,CAAC"}

package/dist/platform/projects-client/review.d.ts

@@ -0,0 +1,57 @@
+export type ReviewItemKind = 'change' | 'approval' | 'output' | 'decision' | 'batch';
+export type ReviewItemStatus = 'needs_you' | 'waiting' | 'approved' | 'changes_requested' | 'rejected' | 'done' | 'dismissed';
+export type ReviewItemRisk = 'none' | 'low' | 'medium' | 'high';
+export type ReviewItemSource = 'web' | 'slack' | 'agent';
+export type ReviewVerdict = 'approve' | 'reject' | 'changes' | 'answer' | 'dismiss';
+export type ReviewSegment = 'needs_you' | 'waiting' | 'done';
+export interface ApiReviewItem {
+    review_item_id: string;
+    account_id: string;
+    project_id: string;
+    origin_session_id: string | null;
+    kind: ReviewItemKind;
+    status: ReviewItemStatus;
+    risk: ReviewItemRisk;
+    source: ReviewItemSource;
+    title: string;
+    summary: string;
+    detail: Record<string, unknown>;
+    agent: string;
+    created_by: string;
+    acted_by: string | null;
+    acted_at: string | null;
+    feedback: string | null;
+    metadata: Record<string, unknown>;
+    created_at: string;
+    updated_at: string;
+}
+export declare function listReviewItems(projectId: string, params?: {
+    segment?: ReviewSegment;
+    kind?: ReviewItemKind;
+}): Promise<{
+    review_items: ApiReviewItem[];
+}>;
+export declare function getReviewItem(projectId: string, reviewItemId: string): Promise<{
+    review_item: ApiReviewItem;
+}>;
+export declare function submitReviewItem(projectId: string, input: {
+    kind: 'output' | 'decision' | 'batch';
+    title: string;
+    summary?: string;
+    risk?: ReviewItemRisk;
+    detail?: Record<string, unknown>;
+    agent?: string;
+    session_id?: string;
+}): Promise<ApiReviewItem>;
+export declare function actReviewItem(projectId: string, reviewItemId: string, input: {
+    verdict: ReviewVerdict;
+    feedback?: string;
+}): Promise<ApiReviewItem>;
+export declare function bulkActReviewItems(projectId: string, input: {
+    ids: string[];
+    verdict: ReviewVerdict;
+}): Promise<{
+    updated: number;
+    review_items: ApiReviewItem[];
+}>;
+//# sourceMappingURL=review.d.ts.map

package/dist/platform/projects-client/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/review.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;AACrF,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,SAAS,GACT,UAAU,GACV,mBAAmB,GACnB,UAAU,GACV,MAAM,GACN,WAAW,CAAC;AAChB,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,CAAC;AACzD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AACpF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,aAAa,CAAC;IAAC,IAAI,CAAC,EAAE,cAAc,CAAA;CAAE;kBAOpB,aAAa,EAAE;GAMvD;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;iBAEnC,aAAa;GAIpD;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,0BAGF;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,0BAQrD;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE;aAGb,MAAM;kBAAgB,aAAa,EAAE;GAKzE"}

package/dist/platform/projects-client/review.js

@@ -0,0 +1,28 @@
+// Review Center — per-project human-in-the-loop inbox (change requests, tool
+// approvals, agent outputs/decisions) surfaced as one reviewable queue.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function listReviewItems(projectId, params) {
+    const q = new URLSearchParams();
+    if (params?.segment)
+        q.set('segment', params.segment);
+    if (params?.kind)
+        q.set('kind', params.kind);
+    const qs = q.toString();
+    return unwrap(await backendApi.get(`/projects/${projectId}/review/items${qs ? `?${qs}` : ''}`, 
+    // Background poll — keep failures with the query consumer, not the console.
+    { showErrors: false }));
+}
+export async function getReviewItem(projectId, reviewItemId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/review/items/${reviewItemId}`));
+}
+export async function submitReviewItem(projectId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/review/items`, input));
+}
+export async function actReviewItem(projectId, reviewItemId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/review/items/${reviewItemId}/act`, input));
+}
+export async function bulkActReviewItems(projectId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/review/bulk`, input));
+}
+//# sourceMappingURL=review.js.map

package/dist/platform/projects-client/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../../src/platform/projects-client/review.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAsClC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,MAA2D;IAE3D,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;IAChC,IAAI,MAAM,EAAE,OAAO;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,MAAM,EAAE,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAC1D,4EAA4E;IAC5E,EAAE,UAAU,EAAE,KAAK,EAAE,CACtB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,YAAoB;IACzE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,iBAAiB,YAAY,EAAE,CACtD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,KAQC;IAED,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAgB,aAAa,SAAS,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,YAAoB,EACpB,KAAoD;IAEpD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,iBAAiB,YAAY,MAAM,EACzD,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,KAAgD;IAEhD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,cAAc,EACpC,KAAK,CACN,CACF,CAAC;AACJ,CAAC"}