@kortix/sdk 0.9.98

package/dist/platform/projects-client/transcription.js

@@ -0,0 +1,14 @@
+// Speech-to-text transcription — POSTs an audio file as multipart form-data.
+import { backendApi } from '../api-client.js';
+export async function transcribeAudio(audioFile) {
+    const formData = new FormData();
+    formData.append('audio_file', audioFile);
+    const response = await backendApi.upload('/transcription', formData, {
+        showErrors: true,
+    });
+    if (response.error) {
+        throw new Error(`Error transcribing audio: ${response.error.message} (${response.error.status})`);
+    }
+    return response.data;
+}
+//# sourceMappingURL=transcription.js.map

package/dist/platform/projects-client/transcription.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcription.js","sourceRoot":"","sources":["../../../src/platform/projects-client/transcription.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAM3C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAe;IACnD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAwB,gBAAgB,EAAE,QAAQ,EAAE;QAC1F,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CACjF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAK,CAAC;AACxB,CAAC"}

package/dist/platform/projects-client/triggers.d.ts

@@ -0,0 +1,102 @@
+export type ProjectTriggerType = 'cron' | 'webhook';
+/** Parsed trigger spec — what the listing endpoint returns. */
+export interface ProjectTrigger {
+    /** URL-safe slug (the filename minus `.md`). */
+    slug: string;
+    /** Where the entry is sourced from. Always `kortix.toml#triggers.<slug>`
+     *  now that triggers are centralized in the manifest. */
+    path: string;
+    name: string;
+    type: ProjectTriggerType;
+    agent: string;
+    /** Wire-form model (`provider/model`) pinned to this trigger's runs, or
+     *  null to resolve the default chain (agent → project → account →
+     *  platform) at fire time. */
+    model: string | null;
+    enabled: boolean;
+    cron: string | null;
+    /** ISO-8601 instant for a one-off ("run once") schedule; null for recurring/webhook. */
+    run_at: string | null;
+    timezone: string;
+    /** project_secrets key holding the webhook HMAC secret. */
+    secret_env: string | null;
+    prompt_template: string;
+    last_fired_at: string | null;
+    /** Public fire URL for webhook triggers; null for cron. */
+    webhook_url: string | null;
+}
+/** Parse error surfaced by the listing endpoint so the UI can render
+ * broken triggers next to green ones. */
+export interface ProjectTriggerParseError {
+    slug: string;
+    path: string;
+    error: string;
+}
+export interface ProjectTriggerListing {
+    triggers: ProjectTrigger[];
+    errors: ProjectTriggerParseError[];
+    /**
+     * Server-side, per-project kill-switch (`projects.metadata.triggers_paused`).
+     * When true the platform auto-runs NONE of this project's triggers — the cron
+     * sweep skips it and inbound webhooks are acknowledged-but-ignored, regardless
+     * of each trigger's repo `enabled`. Manual `fire` still works. Use it to stop
+     * ONE repo deployed to two control planes (e.g. dev + prod) from double-firing.
+     */
+    triggers_paused?: boolean;
+}
+export interface CreateProjectTriggerInput {
+    /** Required — used as the title and shown in the UI. */
+    name: string;
+    /**
+     * Optional slug override. When omitted, derived from `name`. Once
+     * created, the slug is immutable (changing it would orphan runtime state).
+     */
+    slug?: string;
+    type: ProjectTriggerType;
+    prompt_template: string;
+    /** Defaults to 'default'. */
+    agent?: string;
+    /** Wire-form model (`provider/model`). Omit or pass null to resolve the
+     *  default chain (agent → project → account → platform) at fire time. */
+    model?: string | null;
+    enabled?: boolean;
+    /** For type='cron'. 6-field croner expression. Omit when using `run_at`. */
+    cron?: string;
+    /** For type='cron'. ISO-8601 instant for a one-off run. Mutually exclusive with `cron`. */
+    run_at?: string;
+    /** For type='cron'. IANA timezone. Defaults to 'UTC'. */
+    timezone?: string;
+    /** For type='webhook'. Name of a project_secrets entry. */
+    secret_env?: string;
+}
+export interface UpdateProjectTriggerInput {
+    name?: string;
+    prompt_template?: string;
+    agent?: string;
+    /** Wire-form model (`provider/model`). null resets to the default chain. */
+    model?: string | null;
+    enabled?: boolean;
+    cron?: string;
+    timezone?: string;
+    secret_env?: string;
+}
+export declare function listProjectTriggers(projectId: string): Promise<ProjectTriggerListing>;
+export declare function createProjectTrigger(projectId: string, input: CreateProjectTriggerInput): Promise<ProjectTriggerListing>;
+export declare function updateProjectTrigger(projectId: string, slug: string, input: UpdateProjectTriggerInput): Promise<ProjectTriggerListing>;
+export declare function deleteProjectTrigger(projectId: string, slug: string): Promise<{
+    ok: boolean;
+}>;
+/**
+ * Pause or resume ALL of a project's triggers server-side (the per-project
+ * kill-switch — see {@link ProjectTriggerListing.triggers_paused}). Returns the
+ * updated trigger listing, including the new `triggers_paused` value.
+ */
+export declare function setProjectTriggersActivation(projectId: string, paused: boolean): Promise<ProjectTriggerListing>;
+export interface FireProjectTriggerResponse {
+    status: 'fired' | 'queued' | 'failed';
+    session_id?: string | null;
+    reason?: string;
+    error?: string;
+}
+export declare function fireProjectTrigger(projectId: string, slug: string): Promise<FireProjectTriggerResponse>;
+//# sourceMappingURL=triggers.d.ts.map

package/dist/platform/projects-client/triggers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/triggers.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAAC;AAEpD,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb;6DACyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd;;kCAE8B;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,wFAAwF;IACxF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,2DAA2D;IAC3D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;yCACyC;AACzC,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,kBAAkB,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;6EACyE;IACzE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,kCAM1D;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,yBAAyB,kCAQjC;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,yBAAyB,kCAQjC;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;QAExC,OAAO;GAIxC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,kCAQhB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,uCAOvE"}

package/dist/platform/projects-client/triggers.js

@@ -0,0 +1,27 @@
+// Triggers — cron/webhook triggers defined in the project manifest.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function listProjectTriggers(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/triggers`));
+}
+export async function createProjectTrigger(projectId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/triggers`, input));
+}
+export async function updateProjectTrigger(projectId, slug, input) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/triggers/${slug}`, input));
+}
+export async function deleteProjectTrigger(projectId, slug) {
+    return unwrap(await backendApi.delete(`/projects/${projectId}/triggers/${slug}`));
+}
+/**
+ * Pause or resume ALL of a project's triggers server-side (the per-project
+ * kill-switch — see {@link ProjectTriggerListing.triggers_paused}). Returns the
+ * updated trigger listing, including the new `triggers_paused` value.
+ */
+export async function setProjectTriggersActivation(projectId, paused) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/triggers/activation`, { paused }));
+}
+export async function fireProjectTrigger(projectId, slug) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/triggers/${slug}/fire`, {}));
+}
+//# sourceMappingURL=triggers.js.map

package/dist/platform/projects-client/triggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers.js","sourceRoot":"","sources":["../../../src/platform/projects-client/triggers.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAkGlC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,WAAW,CAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,KAAgC;IAEhC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,WAAW,EACjC,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,IAAY,EACZ,KAAgC;IAEhC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CACpB,aAAa,SAAS,aAAa,IAAI,EAAE,EACzC,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,IAAY;IACxE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CACrB,aAAa,SAAS,aAAa,IAAI,EAAE,CAC1C,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,MAAe;IAEf,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CACpB,aAAa,SAAS,sBAAsB,EAC5C,EAAE,MAAM,EAAE,CACX,CACF,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,IAAY;IACtE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,aAAa,IAAI,OAAO,EAC9C,EAAE,CACH,CACF,CAAC;AACJ,CAAC"}

package/dist/platform/session-id.d.ts

@@ -0,0 +1,9 @@
+/**
+ * RFC 4122 v4 id for a new session. `crypto.randomUUID` only exists in secure
+ * contexts (https or localhost), so a self-hosted white-label served over plain
+ * http on a LAN would throw. Fall back to `getRandomValues` (broadly available)
+ * and only then to `Math.random`. Owned by the SDK so every host generates
+ * session ids the same way instead of reimplementing the fallback.
+ */
+export declare function generateSessionId(): string;
+//# sourceMappingURL=session-id.d.ts.map

package/dist/platform/session-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.d.ts","sourceRoot":"","sources":["../../src/platform/session-id.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAU1C"}

package/dist/platform/session-id.js

@@ -0,0 +1,23 @@
+/**
+ * RFC 4122 v4 id for a new session. `crypto.randomUUID` only exists in secure
+ * contexts (https or localhost), so a self-hosted white-label served over plain
+ * http on a LAN would throw. Fall back to `getRandomValues` (broadly available)
+ * and only then to `Math.random`. Owned by the SDK so every host generates
+ * session ids the same way instead of reimplementing the fallback.
+ */
+export function generateSessionId() {
+    const c = typeof crypto !== 'undefined' ? crypto : undefined;
+    if (c?.randomUUID)
+        return c.randomUUID();
+    const b = new Uint8Array(16);
+    if (c?.getRandomValues)
+        c.getRandomValues(b);
+    else
+        for (let i = 0; i < 16; i++)
+            b[i] = Math.floor(Math.random() * 256);
+    b[6] = (b[6] & 0x0f) | 0x40; // version 4
+    b[8] = (b[8] & 0x3f) | 0x80; // variant
+    const h = [...b].map((x) => x.toString(16).padStart(2, '0'));
+    return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h.slice(10).join('')}`;
+}
+//# sourceMappingURL=session-id.js.map

package/dist/platform/session-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../../src/platform/session-id.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,CAAC,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,eAAe;QAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,YAAY;IACzC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU;IACvC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC"}

package/dist/platform/storage/managed-storage.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Centralized, quota-resilient localStorage.
+ *
+ * The whole origin shares ONE ~5–10MB localStorage bucket. Every store, cache
+ * and feature flag writes into it. Historically a few caches were keyed by the
+ * *ephemeral* per-sandbox server id (`kortix_cache_sessions:<serverId>`, …) and
+ * never evicted — so every new session minted a fresh set of keys that piled up
+ * forever. Eventually the bucket saturated and the *next* `setItem` from *any*
+ * store threw `QuotaExceededError` synchronously, crashing whatever happened to
+ * write next (often something tiny and innocent, like the tab list).
+ *
+ * This module is the single chokepoint that keeps the bucket healthy:
+ *
+ *  1. `safeSetItem` NEVER throws. On a quota error it reclaims space by evicting
+ *     the oldest *disposable* cache entries (across every registered family),
+ *     then retries — and if it still can't fit, it gives up silently instead of
+ *     crashing the UI. Losing a disposable cache is free; it just refetches.
+ *  2. `ScopedCache` is the right way to write a per-scope cache: it stamps each
+ *     entry with a timestamp and prunes its family to the N most-recent scopes
+ *     on every write, so an ephemeral key space can't grow unbounded.
+ *  3. `createSafeJSONStorage` gives every zustand `persist` store the same
+ *     never-throw guarantee, so no store can ever be the crash site again.
+ *
+ * Anything that should be sacrificed under memory pressure must register its
+ * key family here (ScopedCache does this for you). Durable user preferences are
+ * deliberately NOT registered, so they survive a reclaim.
+ */
+import { type StateStorage } from 'zustand/middleware';
+/**
+ * Register a `<prefix>:<scope>` key family as disposable. Entries under it may
+ * be evicted (oldest first) when the bucket is full. Idempotent.
+ */
+export declare function registerDisposableFamily(prefix: string): void;
+/**
+ * Register a single exact key (a self-contained cache blob, e.g. an internally
+ * LRU'd map) as disposable. These are evicted only as a LAST resort — after
+ * every scoped-family entry — since they tend to be already-bounded and more
+ * valuable than a stale per-sandbox snapshot. Idempotent.
+ */
+export declare function registerDisposableKey(key: string): void;
+/**
+ * Write to localStorage without ever throwing. On a quota error, evict the
+ * oldest disposable entries one at a time, retrying after each eviction, until
+ * the write fits or there's nothing left to drop. The key being written is
+ * never evicted. Returns whether the value was ultimately persisted.
+ */
+export declare function safeSetItem(key: string, value: string): boolean;
+export declare function safeGetItem(key: string): string | null;
+export declare function safeRemoveItem(key: string): void;
+/**
+ * A localStorage-backed cache for data keyed by a *scope* (a server id, a
+ * directory, `'global'`, …). Each family is automatically capped to its
+ * `maxScopes` most-recently-written scopes, so an ephemeral scope space (e.g.
+ * per-sandbox server ids) can never grow without bound. Entries are also
+ * globally evictable under quota pressure (the family is registered as
+ * disposable on construction).
+ *
+ * Values are stored wrapped as `{ v, t }`; callers see only the unwrapped
+ * value. Legacy un-wrapped entries from before this layer existed simply read
+ * as a miss (and get rewritten in the new shape on the next set).
+ */
+export declare class ScopedCache<T> {
+    private readonly family;
+    private readonly maxScopes;
+    constructor(family: string, maxScopes: number);
+    private keyFor;
+    get(scope: string): T | undefined;
+    set(scope: string, value: T): void;
+    remove(scope: string): void;
+    /** Drop all but the `maxScopes` most-recently-written scopes in this family. */
+    prune(): void;
+}
+/**
+ * Prune every registered disposable family back to its cap and drop foreign /
+ * legacy un-stamped entries within those families. Call once on boot to reclaim
+ * space left by older builds that never evicted; cheap and idempotent.
+ *
+ * Pass the live ScopedCache instances so each family's own `maxScopes` is
+ * respected.
+ */
+export declare function pruneDisposableCaches(caches: ReadonlyArray<ScopedCache<unknown>>): void;
+/**
+ * Prune every ScopedCache constructed so far back to its cap. Safe to call on
+ * boot to reclaim space left by older builds that never evicted. Only sees
+ * caches whose modules have loaded — but those are the large per-sandbox
+ * families, and they're imported as soon as the app shell mounts.
+ */
+export declare function pruneAllRegisteredCaches(): void;
+/**
+ * Shared zustand `StateStorage` that never throws. Every `persist(...)` store
+ * should route through this via `createSafeJSONStorage()` so a full bucket
+ * degrades to "preferences didn't save" instead of crashing the render.
+ */
+export declare const safeLocalStorage: StateStorage;
+/** Drop-in replacement for `createJSONStorage(() => localStorage)`. */
+export declare function createSafeJSONStorage<S>(): import("zustand/middleware").PersistStorage<S, unknown> | undefined;
+//# sourceMappingURL=managed-storage.d.ts.map

package/dist/platform/storage/managed-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-storage.d.ts","sourceRoot":"","sources":["../../../src/platform/storage/managed-storage.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAO1E;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEvD;AAyDD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAuB/D;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOtD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAOhD;AAYD;;;;;;;;;;;GAWG;AACH,qBAAa,WAAW,CAAC,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAQ7C,OAAO,CAAC,MAAM;IAId,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAejC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAOlC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI3B,gFAAgF;IAChF,KAAK,IAAI,IAAI;CAcd;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAGvF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAM9B,CAAC;AAEF,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,CAAC,yEAEtC"}

package/dist/platform/storage/managed-storage.js

@@ -0,0 +1,271 @@
+'use client';
+/**
+ * Centralized, quota-resilient localStorage.
+ *
+ * The whole origin shares ONE ~5–10MB localStorage bucket. Every store, cache
+ * and feature flag writes into it. Historically a few caches were keyed by the
+ * *ephemeral* per-sandbox server id (`kortix_cache_sessions:<serverId>`, …) and
+ * never evicted — so every new session minted a fresh set of keys that piled up
+ * forever. Eventually the bucket saturated and the *next* `setItem` from *any*
+ * store threw `QuotaExceededError` synchronously, crashing whatever happened to
+ * write next (often something tiny and innocent, like the tab list).
+ *
+ * This module is the single chokepoint that keeps the bucket healthy:
+ *
+ *  1. `safeSetItem` NEVER throws. On a quota error it reclaims space by evicting
+ *     the oldest *disposable* cache entries (across every registered family),
+ *     then retries — and if it still can't fit, it gives up silently instead of
+ *     crashing the UI. Losing a disposable cache is free; it just refetches.
+ *  2. `ScopedCache` is the right way to write a per-scope cache: it stamps each
+ *     entry with a timestamp and prunes its family to the N most-recent scopes
+ *     on every write, so an ephemeral key space can't grow unbounded.
+ *  3. `createSafeJSONStorage` gives every zustand `persist` store the same
+ *     never-throw guarantee, so no store can ever be the crash site again.
+ *
+ * Anything that should be sacrificed under memory pressure must register its
+ * key family here (ScopedCache does this for you). Durable user preferences are
+ * deliberately NOT registered, so they survive a reclaim.
+ */
+import { createJSONStorage } from 'zustand/middleware';
+/** Registered prefixes for caches that are safe to evict to reclaim quota. */
+const disposableFamilies = new Set();
+/** Registered exact keys (single-blob caches) that are safe to evict. */
+const disposableKeys = new Set();
+/**
+ * Register a `<prefix>:<scope>` key family as disposable. Entries under it may
+ * be evicted (oldest first) when the bucket is full. Idempotent.
+ */
+export function registerDisposableFamily(prefix) {
+    disposableFamilies.add(prefix);
+}
+/**
+ * Register a single exact key (a self-contained cache blob, e.g. an internally
+ * LRU'd map) as disposable. These are evicted only as a LAST resort — after
+ * every scoped-family entry — since they tend to be already-bounded and more
+ * valuable than a stale per-sandbox snapshot. Idempotent.
+ */
+export function registerDisposableKey(key) {
+    disposableKeys.add(key);
+}
+function hasWindow() {
+    return typeof window !== 'undefined' && typeof localStorage !== 'undefined';
+}
+/** Every localStorage key currently present (snapshot — safe to mutate during). */
+function allKeys() {
+    const keys = [];
+    for (let i = 0; i < localStorage.length; i++) {
+        const k = localStorage.key(i);
+        if (k !== null)
+            keys.push(k);
+    }
+    return keys;
+}
+/** A scope key belongs to a family iff it starts with `<family>:`. */
+function keyBelongsToFamily(key, family) {
+    return key.startsWith(`${family}:`);
+}
+/**
+ * Read the timestamp a ScopedCache stamped into an entry. Legacy / foreign
+ * entries (raw arrays, un-stamped values) report 0 so they're evicted first.
+ */
+function entryTimestamp(raw) {
+    if (!raw)
+        return 0;
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed.t === 'number' ? parsed.t : 0;
+    }
+    catch {
+        return 0;
+    }
+}
+/**
+ * All disposable entries currently in storage, oldest first. Used both for the
+ * under-pressure reclaim and as the eviction order for any single family.
+ */
+function disposableEntriesOldestFirst() {
+    const entries = [];
+    for (const key of allKeys()) {
+        if (disposableKeys.has(key)) {
+            // Exact-key blobs are evicted last (sort to the end).
+            entries.push({ key, t: Number.MAX_SAFE_INTEGER });
+            continue;
+        }
+        for (const family of disposableFamilies) {
+            if (keyBelongsToFamily(key, family)) {
+                entries.push({ key, t: entryTimestamp(localStorage.getItem(key)) });
+                break;
+            }
+        }
+    }
+    return entries.sort((a, b) => a.t - b.t);
+}
+/**
+ * Write to localStorage without ever throwing. On a quota error, evict the
+ * oldest disposable entries one at a time, retrying after each eviction, until
+ * the write fits or there's nothing left to drop. The key being written is
+ * never evicted. Returns whether the value was ultimately persisted.
+ */
+export function safeSetItem(key, value) {
+    if (!hasWindow())
+        return false;
+    try {
+        localStorage.setItem(key, value);
+        return true;
+    }
+    catch {
+        // Likely QuotaExceededError. Reclaim space from disposable caches.
+        const victims = disposableEntriesOldestFirst().filter((e) => e.key !== key);
+        for (const victim of victims) {
+            try {
+                localStorage.removeItem(victim.key);
+            }
+            catch {
+                /* ignore — try the next victim */
+            }
+            try {
+                localStorage.setItem(key, value);
+                return true;
+            }
+            catch {
+                /* still over quota — keep evicting */
+            }
+        }
+        return false;
+    }
+}
+export function safeGetItem(key) {
+    if (!hasWindow())
+        return null;
+    try {
+        return localStorage.getItem(key);
+    }
+    catch {
+        return null;
+    }
+}
+export function safeRemoveItem(key) {
+    if (!hasWindow())
+        return;
+    try {
+        localStorage.removeItem(key);
+    }
+    catch {
+        /* ignore */
+    }
+}
+/** Every ScopedCache constructed this session — drives the global boot sweep. */
+const registeredCaches = [];
+/**
+ * A localStorage-backed cache for data keyed by a *scope* (a server id, a
+ * directory, `'global'`, …). Each family is automatically capped to its
+ * `maxScopes` most-recently-written scopes, so an ephemeral scope space (e.g.
+ * per-sandbox server ids) can never grow without bound. Entries are also
+ * globally evictable under quota pressure (the family is registered as
+ * disposable on construction).
+ *
+ * Values are stored wrapped as `{ v, t }`; callers see only the unwrapped
+ * value. Legacy un-wrapped entries from before this layer existed simply read
+ * as a miss (and get rewritten in the new shape on the next set).
+ */
+export class ScopedCache {
+    family;
+    maxScopes;
+    constructor(family, maxScopes) {
+        if (maxScopes < 1)
+            throw new Error('ScopedCache maxScopes must be >= 1');
+        this.family = family;
+        this.maxScopes = maxScopes;
+        registerDisposableFamily(family);
+        registeredCaches.push(this);
+    }
+    keyFor(scope) {
+        return `${this.family}:${scope}`;
+    }
+    get(scope) {
+        const raw = safeGetItem(this.keyFor(scope));
+        if (!raw)
+            return undefined;
+        try {
+            const parsed = JSON.parse(raw);
+            // Only honor entries written in the wrapped shape; anything else is a miss.
+            if (parsed && typeof parsed === 'object' && 't' in parsed) {
+                return parsed.v;
+            }
+            return undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    set(scope, value) {
+        if (!hasWindow())
+            return;
+        const wrapped = { v: value, t: Date.now() };
+        safeSetItem(this.keyFor(scope), JSON.stringify(wrapped));
+        this.prune();
+    }
+    remove(scope) {
+        safeRemoveItem(this.keyFor(scope));
+    }
+    /** Drop all but the `maxScopes` most-recently-written scopes in this family. */
+    prune() {
+        if (!hasWindow())
+            return;
+        const entries = [];
+        for (const key of allKeys()) {
+            if (keyBelongsToFamily(key, this.family)) {
+                entries.push({ key, t: entryTimestamp(localStorage.getItem(key)) });
+            }
+        }
+        if (entries.length <= this.maxScopes)
+            return;
+        entries
+            .sort((a, b) => b.t - a.t) // newest first
+            .slice(this.maxScopes) // everything past the cap
+            .forEach((e) => safeRemoveItem(e.key));
+    }
+}
+/**
+ * Prune every registered disposable family back to its cap and drop foreign /
+ * legacy un-stamped entries within those families. Call once on boot to reclaim
+ * space left by older builds that never evicted; cheap and idempotent.
+ *
+ * Pass the live ScopedCache instances so each family's own `maxScopes` is
+ * respected.
+ */
+export function pruneDisposableCaches(caches) {
+    if (!hasWindow())
+        return;
+    for (const cache of caches)
+        cache.prune();
+}
+/**
+ * Prune every ScopedCache constructed so far back to its cap. Safe to call on
+ * boot to reclaim space left by older builds that never evicted. Only sees
+ * caches whose modules have loaded — but those are the large per-sandbox
+ * families, and they're imported as soon as the app shell mounts.
+ */
+export function pruneAllRegisteredCaches() {
+    if (!hasWindow())
+        return;
+    for (const cache of registeredCaches)
+        cache.prune();
+}
+/**
+ * Shared zustand `StateStorage` that never throws. Every `persist(...)` store
+ * should route through this via `createSafeJSONStorage()` so a full bucket
+ * degrades to "preferences didn't save" instead of crashing the render.
+ */
+export const safeLocalStorage = {
+    getItem: (name) => safeGetItem(name),
+    setItem: (name, value) => {
+        safeSetItem(name, value);
+    },
+    removeItem: (name) => safeRemoveItem(name),
+};
+/** Drop-in replacement for `createJSONStorage(() => localStorage)`. */
+export function createSafeJSONStorage() {
+    return createJSONStorage(() => safeLocalStorage);
+}
+//# sourceMappingURL=managed-storage.js.map

package/dist/platform/storage/managed-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-storage.js","sourceRoot":"","sources":["../../../src/platform/storage/managed-storage.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE1E,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;AAC7C,yEAAyE;AACzE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,YAAY,KAAK,WAAW,CAAC;AAC9E,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO;IACd,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAAc;IACrD,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAkB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;QACzD,OAAO,MAAM,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,4BAA4B;IACnC,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,sDAAsD;YACtD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;YACxC,IAAI,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpE,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,KAAa;IACpD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,MAAM,OAAO,GAAG,4BAA4B,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;YACD,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,gBAAgB,GAA2B,EAAE,CAAC;AASpD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,WAAW;IACL,MAAM,CAAS;IACf,SAAS,CAAS;IAEnC,YAAY,MAAc,EAAE,SAAiB;QAC3C,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACjC,gBAAgB,CAAC,IAAI,CAAC,IAA4B,CAAC,CAAC;IACtD,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,KAAa;QACf,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;YACpD,4EAA4E;YAC5E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAa,EAAE,KAAQ;QACzB,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QACzB,MAAM,OAAO,GAAe,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,gFAAgF;IAChF,KAAK;QACH,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QACzB,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,EAAE,CAAC;YAC5B,IAAI,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC7C,OAAO;aACJ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe;aACzC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,0BAA0B;aAChD,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA2C;IAC/E,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,KAAK,MAAM,KAAK,IAAI,gBAAgB;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACvB,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;CAC3C,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,qBAAqB;IACnC,OAAO,iBAAiB,CAAI,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;AACtD,CAAC"}

package/dist/platform/strings.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Dependency-free string helpers shared across the SDK (and its hosts).
+ */
+/**
+ * Strip trailing '/' characters in linear time. The idiomatic regex form
+ * (`.replace(/\/+$/, '')`) backtracks quadratically on adversarial inputs
+ * with many repeated slashes (CodeQL `js/polynomial-redos`) — URLs here come
+ * from config/runtime state, but every call site sits on a hot request path,
+ * so the SDK standardizes on this loop instead.
+ */
+export declare function stripTrailingSlashes(s: string): string;
+//# sourceMappingURL=strings.d.ts.map

package/dist/platform/strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.d.ts","sourceRoot":"","sources":["../../src/platform/strings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAItD"}

package/dist/platform/strings.js

@@ -0,0 +1,17 @@
+/**
+ * Dependency-free string helpers shared across the SDK (and its hosts).
+ */
+/**
+ * Strip trailing '/' characters in linear time. The idiomatic regex form
+ * (`.replace(/\/+$/, '')`) backtracks quadratically on adversarial inputs
+ * with many repeated slashes (CodeQL `js/polynomial-redos`) — URLs here come
+ * from config/runtime state, but every call site sits on a hot request path,
+ * so the SDK standardizes on this loop instead.
+ */
+export function stripTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s.charCodeAt(end - 1) === 47 /* '/' */)
+        end--;
+    return end === s.length ? s : s.slice(0, end);
+}
+//# sourceMappingURL=strings.js.map

package/dist/platform/strings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.js","sourceRoot":"","sources":["../../src/platform/strings.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAC;IAChE,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC"}

package/dist/platform/ui.d.ts

@@ -0,0 +1,11 @@
+/**
+ * UI side-effect sink. The SDK fires these during event handling; the host wires
+ * them to its real toast / OS-notification surfaces via `configureKortix`. No
+ * UI components live in the SDK — these just forward to injected callbacks.
+ */
+export declare function infoToast(message: string, options?: unknown): void;
+export declare function notifyTaskComplete(sessionId: string, sessionTitle?: string): void;
+export declare function notifySessionError(sessionId: string, errorTitle: string, sessionTitle?: string): void;
+export declare function notifyQuestion(sessionId: string, questionText: string, sessionTitle?: string): void;
+export declare function notifyPermissionRequest(sessionId: string, toolName: string, sessionTitle?: string): void;
+//# sourceMappingURL=ui.d.ts.map

package/dist/platform/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/platform/ui.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAElE;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAEjF;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAEN;AAED,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAEN;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAEN"}