@kortix/ui 0.14.8 → 0.14.9

package/README.md

@@ -22,7 +22,7 @@ the component subpaths and the stylesheets. Inside kortix-ai/suna:
 `"@kortix/ui": "workspace:*"`.
 `react` and `react-dom` 19 are peers (the PowerPoint preview needs React 19.2.7 or later).
 
-- Public docs: `apps/web/content/docs/sdk/ui.mdx` (https://kortix.com/docs/sdk/ui).
+- Public docs: the "Kortix UI" section of `apps/web/content/docs/developers.mdx` (https://kortix.com/docs/developers#kortix-ui).
 - Agent skill: `skills/kortix-ui/SKILL.md`, with `references/custom-dashboard.md`
   (a whole dashboard), `references/modules.md` (every entry, its props, an example) and
   `references/theming.md` (every theme key). Kortix sessions load the same files
@@ -186,7 +186,7 @@ The root `@kortix/ui` barrel holds only light core primitives. Toasts need one
 
 ### Routes
 
-Every URL the components link to comes from one route table, `setUiRoutes` (`@kortix/ui`), called once at module load. The defaults are Kortix's own paths: `project` `/projects/<id>`, `session` `/projects/<id>/sessions/<sessionId>`, `sessions` `/projects/<id>/sessions` (`?view=archived|deleted`), `files` `/projects/<id>/files`, `drive` `/projects/<id>/drive`, `apps` `/projects/<id>/apps`, `members` `/projects/<id>/members`, `sandboxSettings` `/projects/<id>/config?section=sandbox`, `customize` `/projects/<id>/customize/<page>` (agents, skills, connectors, triggers, reminders, models, secrets, review, settings). Return your own path for a page you serve elsewhere. Return `null` for a page you do not serve: every link to it is hidden. `project` and `session` cannot be null.
+Every URL the components link to comes from one route table, `setUiRoutes` (`@kortix/ui`), called once at module load. The defaults are Kortix's own paths: `project` `/projects/<id>`, `session` `/projects/<id>/sessions/<sessionId>`, `sessions` `/projects/<id>/sessions` (`?view=archived|deleted`), `files` `/projects/<id>/files`, `drive` `/projects/<id>/drive`, `apps` `/projects/<id>/apps`, `members` `/projects/<id>/members`, `sandboxSettings` `/projects/<id>/config?section=sandbox`, `customize` `/projects/<id>/customize/<page>` (agents, skills, connectors, triggers, reminders, models, secrets, review, settings), `channel` `/projects/<id>/c/<slug>` and `dm` `/projects/<id>/dm/<agent>` (the sidebar links them while the project's `project_channels` flag is on). Return your own path for a page you serve elsewhere. Return `null` for a page you do not serve: every link to it is hidden. `project`, `session`, `channel` and `dm` cannot be null.
 
 ## Modules
 

package/dist/_vendor/kortix-shared.js

@@ -6954,6 +6954,29 @@ function parseManifestText(raw, format) {
   return value;
 }
 
+// ../shared/src/app-config.ts
+function appAdminsOnly(app) {
+  return app.services?.find((service) => service.name === "http")?.access === "admins";
+}
+function gridApps(apps, canAdmin = true) {
+  const slugs = new Set(apps.map((app) => app.slug));
+  return apps.filter(
+    (app) => app.display?.listed === true && !(app.display?.parent && slugs.has(app.display.parent)) && (canAdmin || !appAdminsOnly(app))
+  );
+}
+
+// ../manifest-schema/src/policy-sets.ts
+var POLICY_SET_NAME_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+var RESERVED_POLICY_SET_NAME = "base";
+var POLICY_SETS_UNSUPPORTED_PROVIDERS = ["channel", "computer"];
+function policySetNameError(name) {
+  if (typeof name !== "string" || !POLICY_SET_NAME_RE.test(name)) {
+    return 'a policy set name is lowercase letters, digits, "_" or "-" (at most 64 characters).';
+  }
+  if (name === RESERVED_POLICY_SET_NAME) return `"base" is reserved: it names the connector's base rules.`;
+  return null;
+}
+
 // ../manifest-schema/src/slug.ts
 var SLUG_MAX_LENGTH = 128;
 function trimSeparators(value) {
@@ -8600,6 +8623,7 @@ function readSlackFollowUpHeader(line) {
 }
 
 // ../shared/src/channel-message.ts
+var CHANNEL_PLATFORMS = ["Slack", "Teams", "Telegram", "Email"];
 var TAIL_MARKERS = [
   /^How to work:/m,
   /^Attached files \(download with/m,
@@ -8678,6 +8702,29 @@ var FOLLOW_UP_HEADERS = [
   { platform: "Teams", header: /^New message from (.+?) in the same Teams conversation:$/m },
   { platform: "Slack", header: /^New message from (.+?) in the same Slack thread:$/m }
 ];
+var TELEGRAM_FIRST_HEADER = "You received a message on Telegram.";
+var TELEGRAM_FOLLOW_UP_HEADER = /^New Telegram message from (\S+) in the same chat:$/;
+var TELEGRAM_TAIL = "\n\nHow to answer:\n- Reply with the ";
+function readTelegramPrompt(text) {
+  const lineEnd3 = text.indexOf("\n");
+  if (lineEnd3 < 0) return void 0;
+  const header = text.slice(0, lineEnd3).trimEnd();
+  const followUp = TELEGRAM_FOLLOW_UP_HEADER.exec(header);
+  if (header !== TELEGRAM_FIRST_HEADER && !followUp) return void 0;
+  const idLine = /^Message id:[^\n]*\n/m.exec(text);
+  if (!idLine) return void 0;
+  const start = idLine.index + idLine[0].length;
+  const rest = text.slice(start).replace(/^\r?\n/, "");
+  if (/^Message:\r?\n/.test(rest)) return void 0;
+  const tail = text.lastIndexOf(TELEGRAM_TAIL);
+  return {
+    platform: "Telegram",
+    context: "",
+    userName: field(text.slice(lineEnd3, idLine.index), "From") || followUp?.[1] || "unknown",
+    messageText: text.slice(start, tail > start ? tail : text.length).trim(),
+    followUp: followUp !== null
+  };
+}
 function opensPrompt(text, headerIndex) {
   const before = text.slice(0, headerIndex).trim();
   return before === "" || before.startsWith("NOTE:");
@@ -8687,8 +8734,13 @@ function parseChannelMessage(rawText) {
   if (!text) return void 0;
   const legacy = readLegacyChannelHeader(text);
   if (legacy) {
-    const platform = legacy.platform === "Teams" ? "Teams" : legacy.platform === "Telegram" ? "Telegram" : "Slack";
-    const messageText = cutAtTail(text.slice(legacy.length));
+    const platform = CHANNEL_PLATFORMS.find((p2) => p2 === legacy.platform) ?? "Slack";
+    const rest = text.slice(legacy.length);
+    const end = rest.lastIndexOf(`
+
+\u2500\u2500 ${legacy.platform} instructions
+`);
+    const messageText = end >= 0 ? rest.slice(0, end).trim() : cutAtTail(rest);
     return {
       platform,
       context: legacy.context,
@@ -8697,6 +8749,8 @@ function parseChannelMessage(rawText) {
       followUp: false
     };
   }
+  const telegram = readTelegramPrompt(text);
+  if (telegram) return telegram;
   for (const shape of FIRST_MESSAGE_HEADERS) {
     const m = shape.header.exec(text);
     if (!m || !opensPrompt(text, m.index)) continue;
@@ -8830,6 +8884,12 @@ function utf8Bytes(text) {
   return new TextEncoder().encode(text).length;
 }
 
+// ../shared/src/space-slug.ts
+var SPACE_SLUG_MAX = 40;
+function spaceSlug(name) {
+  return name.toLowerCase().trim().replace(/\s+/g, "-").replace(/[^a-z0-9-]/g, "").replace(/-+/g, "-").slice(0, SPACE_SLUG_MAX).replace(/^-+|-+$/g, "");
+}
+
 // ../shared/src/code-language.ts
 var LANGUAGE_ALIASES = {
   // web
@@ -10943,4 +11003,4 @@ smol-toml/dist/index.js:
    *)
 */
 
-export { AVATAR_INK, CARD_TEXT_RATIO, COMMIT_CONFIRM_ATTEMPTS, COMMIT_CONFIRM_DELAY_MS, CREDITS_PER_DOLLAR, CURATED_SECTIONS, KATEX_FENCE_LANGUAGES, LANGUAGE_ALIASES, MAX_PROMPT_ATTACHMENTS_BYTES, MAX_PROMPT_ATTACHMENT_BYTES, MAX_PROMPT_ATTACHMENT_FILES, MAX_PROMPT_UPLOAD_FILENAME_BYTES, META_AGENT_DISPLAY_NAME, META_SANDBOX_SLUG, OTHER, PASTED_INLINE_MAX_BYTES, POPULAR_SECTION, PREVIEW_BUILDING_STATES, PREVIEW_STATE_MESSAGE, PROJECT_GLYPH_COLORS, PROJECT_GLYPH_NAMES, UNKNOWN_RATIO, UPLOAD_LIMITS, autoLinkUrls, avatarFill, buildWebhookSampleRequest, capitalizeWords, cardImageShape, cardListLayout, chalkColors, confirmCommitted, countInSection, dollarsToCredits, editConfigPrompt, errorCode, escapeCurrencyDollars, expandPastedContent, extractReadableHtml, fileTagBlocks, formatFileSize, formatRelative, formatUsdAsCredits, groupIntoSections, hasReferenceDefinitionOutsideFences, humanizeCategory, indexOfIgnoreCase, isAllowedWebPushHost, isAmbiguousCreateFailure, isMermaidCode, isMetaAgentName, languageLabel, looksLikeMarkdown, masonryColumns, neutralizePastedTags, newConfigPrompt, newPastedContentId, normalizeLanguage, normalizeLatexDelimiters, openMarkdownLinkAtEnd, parseBackgroundWorkers, parseBalanceUsd, parseChannelMessage, parseGrepOutput, parseManifestText, parseMemoryEntryOutput, parseMemorySearchOutput, parseReminderPrompt, parseRoomDigest, parseRoomPrompt, parseSessionGetOutput, parseSessionMessagesOutput, parseSessionMetadataOutput, parseSessionSearchHits, parseTriggerEvent, parseTriggerLines, prefersPreviewLink, prepareMarkdownForKatex, prepareMarkdownForMath, promptFileReferenceXml, ptyOutputBlock, ptySpawnedBody, pushTypeOf, referenceHeaders, removeSpans, replaceSpans, resolveRegisteredKey, safeHttpUrl, sandboxMediaPath, sanitizePromptUploadFilename, sectionKeyForCategory, sectionKeysForEntry, sectionTitle, selfClosingTags, serializePromptWithPastes, shouldTilePaste, skillDocumentBody, slackPlainText, slugifySlug, splitPastedContent, stripBashMetadata, stripChatMentionMarkup, stripMarkupForToolOutput, tagBlocks, toolRegistryCandidates, trimPastedText, truncateString, utf8Bytes, withoutEdgeQuotes, xmlBlocks };
+export { AVATAR_INK, CARD_TEXT_RATIO, COMMIT_CONFIRM_ATTEMPTS, COMMIT_CONFIRM_DELAY_MS, CREDITS_PER_DOLLAR, CURATED_SECTIONS, KATEX_FENCE_LANGUAGES, LANGUAGE_ALIASES, MAX_PROMPT_ATTACHMENTS_BYTES, MAX_PROMPT_ATTACHMENT_BYTES, MAX_PROMPT_ATTACHMENT_FILES, MAX_PROMPT_UPLOAD_FILENAME_BYTES, META_AGENT_DISPLAY_NAME, META_SANDBOX_SLUG, OTHER, PASTED_INLINE_MAX_BYTES, POLICY_SETS_UNSUPPORTED_PROVIDERS, POPULAR_SECTION, PREVIEW_BUILDING_STATES, PREVIEW_STATE_MESSAGE, PROJECT_GLYPH_COLORS, PROJECT_GLYPH_NAMES, UNKNOWN_RATIO, UPLOAD_LIMITS, appAdminsOnly, autoLinkUrls, avatarFill, buildWebhookSampleRequest, capitalizeWords, cardImageShape, cardListLayout, chalkColors, confirmCommitted, countInSection, dollarsToCredits, editConfigPrompt, errorCode, escapeCurrencyDollars, expandPastedContent, extractReadableHtml, fileTagBlocks, formatFileSize, formatRelative, formatUsdAsCredits, gridApps, groupIntoSections, hasReferenceDefinitionOutsideFences, humanizeCategory, indexOfIgnoreCase, isAllowedWebPushHost, isAmbiguousCreateFailure, isMermaidCode, isMetaAgentName, languageLabel, looksLikeMarkdown, masonryColumns, neutralizePastedTags, newConfigPrompt, newPastedContentId, normalizeLanguage, normalizeLatexDelimiters, openMarkdownLinkAtEnd, parseBackgroundWorkers, parseBalanceUsd, parseChannelMessage, parseGrepOutput, parseManifestText, parseMemoryEntryOutput, parseMemorySearchOutput, parseReminderPrompt, parseRoomDigest, parseRoomPrompt, parseSessionGetOutput, parseSessionMessagesOutput, parseSessionMetadataOutput, parseSessionSearchHits, parseTriggerEvent, parseTriggerLines, policySetNameError, prefersPreviewLink, prepareMarkdownForKatex, prepareMarkdownForMath, promptFileReferenceXml, ptyOutputBlock, ptySpawnedBody, pushTypeOf, referenceHeaders, removeSpans, replaceSpans, resolveRegisteredKey, safeHttpUrl, sandboxMediaPath, sanitizePromptUploadFilename, sectionKeyForCategory, sectionKeysForEntry, sectionTitle, selfClosingTags, serializePromptWithPastes, shouldTilePaste, skillDocumentBody, slackPlainText, slugifySlug, spaceSlug, splitPastedContent, stripBashMetadata, stripChatMentionMarkup, stripMarkupForToolOutput, tagBlocks, toolRegistryCandidates, trimPastedText, truncateString, utf8Bytes, withoutEdgeQuotes, xmlBlocks };

package/dist/_vendor/shared/app-config.d.ts

@@ -0,0 +1,175 @@
+/**
+ * The configuration of one App release: process groups,
+ * services (named ports), mounts (volumes), VM sizes, checks and the deploy
+ * strategy. `kortix.yaml` `apps.<name>` is the authored form; the
+ * CLI resolves it with `resolveAppReleaseConfig`, the API validates it again
+ * with `appReleaseConfigIssues` and stores the result on the release, and the
+ * deploy engine reads only the resolved form.
+ *
+ * Pure and dependency-free: the API, the CLI, the SDK and the manifest schema
+ * share it.
+ */
+export type AppDeployStrategy = 'rolling' | 'immediate' | 'bluegreen' | 'canary';
+export type AppAutoStop = 'off' | 'stop' | 'suspend';
+/** `public`: no gate. `app`: the App's access policy and Kortix sign-in. `admins`: project admins only. */
+export type AppServiceAccess = 'public' | 'app' | 'admins';
+export type AppServiceProtocol = 'http' | 'tcp';
+export interface AppCheck {
+    type: 'http' | 'tcp';
+    /** Defaults to the service's `internal_port`. */
+    port?: number;
+    /** http only. */
+    path?: string;
+    interval_s: number;
+    timeout_s: number;
+    grace_period_s: number;
+}
+export interface AppService {
+    /** `http` is the primary service: it answers on the App's own host. */
+    name: string;
+    internal_port: number;
+    protocol: AppServiceProtocol;
+    access: AppServiceAccess;
+    auto_stop_machines: AppAutoStop;
+    auto_start_machines: boolean;
+    min_machines_running: number;
+    /** Process groups that serve this port. */
+    processes: string[];
+    checks: AppCheck[];
+}
+export interface AppMount {
+    /** Volume name. Each machine of the group gets its own volume of this name. */
+    source: string;
+    destination: string;
+    initial_size_gb: number;
+    snapshot_retention_days: number;
+    processes: string[];
+}
+export interface AppVmSize {
+    cpu: number;
+    memory_gb: number;
+    /** Root disk; the data belongs on a mount. */
+    disk_gb: number;
+    /** Groups this size applies to; empty = every group without a more specific entry. */
+    processes: string[];
+}
+export interface AppDeployConfig {
+    strategy: AppDeployStrategy;
+    /** Runs once per release in a temporary machine (new image, secrets, no mounts) before machines update. */
+    release_command: string | null;
+}
+export interface AppReleaseConfig {
+    /** Group name → command. `""` runs the image's own command. */
+    processes: Record<string, string>;
+    services: AppService[];
+    mounts: AppMount[];
+    vm: AppVmSize[];
+    deploy: AppDeployConfig;
+}
+/** The authored form: every field optional, plus the shorthands Apps had before this model. */
+export interface AppReleaseConfigInput {
+    processes?: Record<string, string>;
+    http_service?: Partial<Omit<AppService, 'name' | 'checks'>> & {
+        checks?: Array<Partial<AppCheck>>;
+    };
+    services?: Array<Partial<Omit<AppService, 'checks'>> & {
+        checks?: Array<Partial<AppCheck>>;
+    }>;
+    mounts?: Array<Partial<AppMount>>;
+    vm?: Partial<AppVmSize> | Array<Partial<AppVmSize>>;
+    deploy?: Partial<AppDeployConfig>;
+    /** Shorthands. */
+    port?: number;
+    command?: string;
+    readiness_path?: string;
+    always_on?: boolean;
+    resources?: {
+        cpu?: number;
+        memory_gb?: number;
+        disk_gb?: number;
+    };
+}
+export interface AppConfigIssue {
+    path: string;
+    message: string;
+}
+export declare const DEFAULT_PROCESS_GROUP = "app";
+export declare const PRIMARY_SERVICE = "http";
+/** Ports the App supervisor owns inside every machine. */
+export declare const RESERVED_APP_PORTS: readonly [7331, 8080];
+export declare const APP_VM_LIMITS: {
+    readonly cpu: {
+        readonly min: 1;
+        readonly max: 32;
+    };
+    readonly memory_gb: {
+        readonly min: 1;
+        readonly max: 128;
+    };
+    readonly disk_gb: {
+        readonly min: 1;
+        readonly max: 500;
+    };
+};
+export declare const DEFAULT_APP_VM: {
+    readonly cpu: 1;
+    readonly memory_gb: 2;
+    readonly disk_gb: 10;
+};
+export declare const DEFAULT_SNAPSHOT_RETENTION_DAYS = 5;
+export declare const MAX_SNAPSHOT_RETENTION_DAYS = 60;
+/** Platinum caps a volume at 100 GiB (its largest size class). */
+export declare const MAX_VOLUME_GB = 100;
+/**
+ * The resolved release config. Shorthands map onto the full fields:
+ * `port` → `http_service.internal_port`, `command` → `processes.app`,
+ * `readiness_path` → an http check, `always_on` → `auto_stop_machines: off` and
+ * `min_machines_running: 1` (`false`: `stop` and 0), `resources` → the default VM.
+ * An explicit full field wins over its shorthand.
+ */
+export declare function resolveAppReleaseConfig(input?: AppReleaseConfigInput): AppReleaseConfig;
+/** Every rule the deploy engine relies on. Empty = valid. */
+export declare function appReleaseConfigIssues(config: AppReleaseConfig): AppConfigIssue[];
+/** The VM size of one process group: its own entry, else the default entry, else the platform default. */
+export declare function appVmFor(config: AppReleaseConfig, group: string): Omit<AppVmSize, 'processes'>;
+/** The mount a machine of this group gets, or null. */
+export declare function appMountFor(config: AppReleaseConfig, group: string): AppMount | null;
+/** The services a machine of this group serves. */
+export declare function appServicesFor(config: AppReleaseConfig, group: string): AppService[];
+/**
+ * Where Kortix shows an App (`kortix.yaml` `apps.<name>.display`). Presentation
+ * only: nothing about how the App runs or who may open it changes.
+ */
+export interface AppDisplay {
+    /** A card in the Apps grid. Default false: an App is on the Apps page only when registered with `listed: true`. A `parent` puts it in that App's tabs instead. */
+    listed?: boolean;
+    /** The card thumbnail: `live` frames the App, `none` shows an icon. Default `live`. */
+    preview?: 'live' | 'none';
+    /** The App, by slug, whose detail shows this one as a tab (a backend's admin dashboard). */
+    parent?: string;
+}
+/** What the Apps grid reads of an App: the web's `App` and the API's App JSON both fit. */
+export interface GridApp {
+    slug: string;
+    display?: AppDisplay | null;
+    services?: ReadonlyArray<{
+        name: string;
+        access?: string | null;
+    }> | null;
+}
+/**
+ * Its primary service is `access: admins` (a backend's admin dashboard): only
+ * project admins can open it, so nobody else is shown a card or tab for it.
+ */
+export declare function appAdminsOnly(app: GridApp): boolean;
+/**
+ * The Apps the grid shows as cards (`display`): registered with `listed: true`,
+ * not a tab of a parent in the same list, and not admins-only for a non-admin.
+ * A tab whose parent is gone stays reachable as a card. Background Apps (a
+ * poller, a bot, a backend) stay out of the grid unless their author registers
+ * them. The Apps page, a channel's Apps tab and the channel's Apps count all
+ * apply this one rule.
+ */
+export declare function gridApps<T extends GridApp>(apps: readonly T[], canAdmin?: boolean): T[];
+/** What is wrong with an authored `display` block of the App `slug`. Paths are relative to the block. */
+export declare function appDisplayIssues(display: unknown, slug: string): AppConfigIssue[];

package/dist/_vendor/shared/channel-message.d.ts

@@ -1,20 +1,24 @@
 /**
  * Recognise a channel-originated user message (Slack, Microsoft Teams,
- * Telegram) inside the raw prompt text the API scaffolds for the agent, and
+ * Telegram, email) inside the raw prompt text the API scaffolds for the agent, and
  * pull out what a person wants to see: who wrote it, where, and the words they
  * typed — not the tenant ids and the `How to work:` instructions.
  *
- * Every shape here is produced by exactly one API renderer:
+ * `channelPromptText` below writes the current shape, so its writer and reader
+ * are one module. Every other shape is produced by exactly one API renderer:
  *
  * | Shape | Producer |
  * | --- | --- |
+ * | `[<Platform> · <where> · message from <sender>]`, the text, then `── <Platform> instructions` after a blank line | `channelPromptText` (this module) |
  * | `You're answering a message on Slack as a teammate.` | `channels/slack/session.ts` renderAgentPrompt |
  * | `New message from <user> in Slack channel <channel>, thread <ts>:` | `channels/slack/session.ts` renderFollowUpPrompt |
  * | `New message from <user> in the same Slack thread:` | the same renderer before 2026-09, kept for old transcripts |
  * | `You're answering a message on Microsoft Teams as a teammate.` | `channels/teams/session.ts` renderAgentPrompt |
  * | `New message from <user> in the same Teams conversation:` | `channels/teams/session.ts` renderFollowUpPrompt |
- * | `You received a message on Telegram.` | `channels/telegram-webhook.ts` renderAgentPrompt |
- * | `[<Platform> · <context> · message from <user>]` | the pre-2026 header, kept so old transcripts still render |
+ * | `You received a message on Telegram.` + `Chat:`/`From:`/`Message id:`, the text, `How to answer:` | the Telegram renderer from 2026-10-24 until `channelPromptText`, kept so old transcripts still render |
+ * | `New Telegram message from <user> in the same chat:` + the same block | the same renderer, kept so old transcripts still render |
+ * | `You received a message on Telegram.` + a `Message:` line | the retired one-session-per-message Telegram webhook (removed 2026-10-24), kept so old transcripts still render |
+ * | `[<Platform> · <context> · message from <user>]` with no such delimiter | the pre-2026 header, kept so old transcripts still render |
  *
  * The parser is pure and framework-free so `channel-message.test.ts` can pin
  * each shape against the real prompt text. The web and mobile session views
@@ -25,7 +29,9 @@
  * attempt. The pre-2026 header regex and the `<at>` strip did: 240k characters
  * took 22 s and 7 s.
  */
-export type ChannelPlatform = 'Slack' | 'Teams' | 'Telegram';
+/** The platform words a header names. Any other word reads as Slack, as every deployed build reads it. */
+export declare const CHANNEL_PLATFORMS: readonly ["Slack", "Teams", "Telegram", "Email"];
+export type ChannelPlatform = (typeof CHANNEL_PLATFORMS)[number];
 export interface ChannelMessageInfo {
     platform: ChannelPlatform;
     /** Channel / conversation / chat id; empty for a follow-up, which carries none. */
@@ -36,3 +42,26 @@ export interface ChannelMessageInfo {
     followUp: boolean;
 }
 export declare function parseChannelMessage(rawText: string | null | undefined): ChannelMessageInfo | undefined;
+/** What a channel adapter knows about one incoming message; `channelPromptText` writes it. */
+export interface ChannelEnvelope {
+    platform: ChannelPlatform;
+    /** What a person reads: `@sam`, `Sam Rivera`, `a@b.c`. */
+    sender: string;
+    /** The chat title, `direct message`, or an email subject. */
+    where: string;
+    /** The person's words, or a question answer. */
+    text: string;
+    /** One shell command that answers THIS message. */
+    reply: string;
+    /** Ids, limits and platform rules: for the agent only, one line each. */
+    notes: string[];
+}
+/**
+ * The prompt for one channel message. The header line is the one every client
+ * build reads (`readLegacyChannelHeader`), the text follows unchanged, and the
+ * agent-only lines start at the last `── <Platform> instructions` line, where
+ * `parseChannelMessage` cuts.
+ */
+export declare function channelPromptText(e: ChannelEnvelope, opts?: {
+    revived?: boolean;
+}): string;

package/dist/_vendor/shared/index.d.ts

@@ -26,3 +26,4 @@ export * from './slack-text';
 export * from './chat-mention';
 export * from './webhook-signing';
 export * from './pasted-content';
+export * from './space-slug';

package/dist/_vendor/shared/space-slug.d.ts

@@ -0,0 +1,37 @@
+/**
+ * A channel's slug from its name: lowercase, whitespace runs → `-`, other
+ * characters dropped, `-` runs collapsed and trimmed, at most 40 characters.
+ * Empty when the name has no `a-z0-9`. The API derives the stored slug with
+ * this function, and the create dialog previews it, so the two never differ.
+ */
+export declare function spaceSlug(name: string): string;
+/**
+ * Where every private channel's folder lives: outside `/Company`, so the
+ * project grant on `/Company` and project admins never reach it. Only the
+ * channel's members (one grant each) and the channel's own threads do. The
+ * folder is named by the channel's id, never its name: a rename moves
+ * nothing, and a later channel that takes the name never inherits the folder.
+ * Only `/Channels/<space_id>` of a private channel of the project is reserved;
+ * any other path under `/Channels` is an ordinary folder (the API's
+ * `privateChannelFolderOf`).
+ */
+export declare const PRIVATE_CHANNELS_DIR = "/Channels";
+/**
+ * A space's two folders in the project's Files (drive paths). A public
+ * channel's are shared with the project: `/Company/Channels/<slug>` and its
+ * `Memory`. A private channel's are `/Channels/<space_id>` and its `Memory`
+ * (pass its id as `privateSpaceId`). A DM's
+ * are in the member's own folder: `<personal>/Agents/<agent>` and its
+ * memory `<personal>/Memory/<agent>` (the agent folder of the DM's Memory
+ * tab, which also lists the rest of `<personal>/Memory`). Null for a DM without a personal folder,
+ * and for a name that is not one plain path segment (an agent name is not
+ * validated as one when the DM is opened).
+ * The API (folder create, rename, the session's /drives/README.md) and the web
+ * tabs read this, so both name the same folders.
+ */
+export declare function spaceDriveFolders(kind: 'channel' | 'dm', name: string, personalFolder: string | null, 
+/** A private channel's id; null for a public channel or a DM. */
+privateSpaceId?: string | null): {
+    files: string;
+    memory: string;
+} | null;

package/dist/access/access/access-detail-shell.js

@@ -18,5 +18,5 @@ import { UiLink as Link } from '../../providers/ui-provider.js';
 export function AccessDetailShell({ back, avatar, title, badges, meta, actions, tabs, activeTab, onTabChange, loading = false, children, className, }) {
     const backContent = back ? (_jsxs(_Fragment, { children: [_jsx(CaretLeftIcon, { className: "size-4" }), back.label] })) : null;
     const backClass = 'text-muted-foreground hover:text-foreground flex w-fit items-center gap-1 text-sm transition-colors';
-    return (_jsxs("div", { className: cn('mx-auto w-full max-w-6xl space-y-5 pb-10', className), children: [_jsxs("div", { className: "space-y-5", children: [!back ? null : back.href ? (_jsx(Link, { href: back.href, className: backClass, children: backContent })) : (_jsx("button", { type: "button", onClick: back.onClick, className: backClass, children: backContent })), _jsxs("div", { className: "flex min-w-0 items-start gap-3.5", children: [loading ? _jsx(Skeleton, { className: "size-10 rounded-md" }) : avatar, _jsxs("div", { className: "min-w-0 flex-1 space-y-0.5", children: [loading ? (_jsx(Skeleton, { className: "h-6 w-44" })) : (_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("h2", { className: "text-foreground truncate text-xl font-medium", children: title }), badges] })), meta ? _jsx("div", { className: "text-muted-foreground truncate text-sm", children: meta }) : null] }), actions ? _jsx("div", { className: "flex shrink-0 items-center gap-2", children: actions }) : null] })] }), tabs && tabs.length > 0 ? (_jsxs(Tabs, { value: activeTab, onValueChange: onTabChange, className: "space-y-6", children: [_jsx(TabsList, { type: "underline", className: "flex w-full items-center justify-start", children: tabs.map((tab) => (_jsxs(TabsTrigger, { value: tab.value, className: "w-fit flex-none", children: [tab.label, tab.badge] }, tab.value))) }), children] })) : (_jsx("div", { className: "space-y-6", children: children }))] }));
+    return (_jsxs("div", { className: cn('mx-auto w-full max-w-6xl space-y-5 pb-10', className), children: [_jsxs("div", { className: "space-y-5", children: [!back ? null : back.href ? (_jsx(Link, { href: back.href, className: backClass, children: backContent })) : (_jsx("button", { type: "button", onClick: back.onClick, className: backClass, children: backContent })), _jsxs("div", { className: "flex min-w-0 items-center gap-3.5", children: [loading ? _jsx(Skeleton, { className: "size-10 rounded-md" }) : avatar, _jsxs("div", { className: "min-w-0 flex-1 space-y-0.5", children: [loading ? (_jsx(Skeleton, { className: "h-6 w-44" })) : (_jsxs("div", { className: "flex min-w-0 items-center gap-2", children: [_jsx("h2", { className: "text-foreground truncate text-base leading-6 font-medium", children: title }), badges] })), meta ? _jsx("div", { className: "text-muted-foreground truncate text-sm", children: meta }) : null] }), actions ? _jsx("div", { className: "flex shrink-0 items-center gap-2", children: actions }) : null] })] }), tabs && tabs.length > 0 ? (_jsxs(Tabs, { value: activeTab, onValueChange: onTabChange, className: "space-y-6", children: [_jsx(TabsList, { type: "underline", className: "flex w-full items-center justify-start", children: tabs.map((tab) => (_jsxs(TabsTrigger, { value: tab.value, className: "w-fit flex-none", children: [tab.label, tab.badge] }, tab.value))) }), children] })) : (_jsx("div", { className: "space-y-6", children: children }))] }));
 }

package/dist/access/access/principal-picker.d.ts

@@ -88,3 +88,14 @@ export interface PrincipalPickerProps {
     className?: string;
 }
 export declare function PrincipalPicker({ scope, selection, kinds, allowInvite, everyone, excludeUserIds, value, onChange, emptyLabel, allExcludedLabel, autoFocus, disabled, searchPlaceholder, className, }: PrincipalPickerProps): import("react").JSX.Element;
+/** One picker row. Exported for the channel "Add members" picker, which moves `highlighted` with the arrow keys. */
+export declare function PickerRow({ selected, selection, highlighted, disabled, onSelect, leading, label, suffix, }: {
+    selected: boolean;
+    selection: 'single' | 'multi';
+    highlighted?: boolean;
+    disabled?: boolean;
+    onSelect: () => void;
+    leading: React.ReactNode;
+    label: string;
+    suffix?: string;
+}): import("react").JSX.Element;

package/dist/access/access/principal-picker.js

@@ -267,6 +267,7 @@ export function PrincipalPicker({ scope, selection = 'multi', kinds = ['member',
 function PickerSectionLabel({ children }) {
     return (_jsx("p", { className: "text-muted-foreground px-2 pt-2 pb-1 text-xs font-medium first:pt-1.5", children: children }));
 }
-function PickerRow({ selected, selection, disabled, onSelect, leading, label, suffix, }) {
-    return (_jsxs("button", { type: "button", role: selection === 'single' ? 'radio' : undefined, "aria-checked": selection === 'single' ? selected : undefined, "aria-pressed": selection === 'multi' ? selected : undefined, disabled: disabled, onClick: onSelect, className: cn('flex w-full items-center gap-2.5 rounded-lg px-2 py-1.5 text-left transition-colors', 'disabled:cursor-not-allowed disabled:opacity-50', selected ? 'bg-primary/[0.06]' : 'hover:bg-muted/50'), children: [leading, _jsxs("span", { className: "text-foreground min-w-0 flex-1 truncate text-sm", children: [label, suffix ? _jsx("span", { className: "text-muted-foreground ml-1 text-xs", children: suffix }) : null] }), selected ? (_jsx("span", { className: "shrink-0 px-1", children: _jsx(CheckCircleIcon, { weight: "fill", className: "size-[1.1rem]" }) })) : null] }));
+/** One picker row. Exported for the channel "Add members" picker, which moves `highlighted` with the arrow keys. */
+export function PickerRow({ selected, selection, highlighted = false, disabled, onSelect, leading, label, suffix, }) {
+    return (_jsxs("button", { type: "button", role: selection === 'single' ? 'radio' : undefined, "aria-checked": selection === 'single' ? selected : undefined, "aria-pressed": selection === 'multi' ? selected : undefined, disabled: disabled, onClick: onSelect, className: cn('flex w-full items-center gap-2.5 rounded-lg px-2 py-1.5 text-left transition-colors', 'disabled:cursor-not-allowed disabled:opacity-50', selected ? 'bg-primary/[0.06]' : highlighted ? 'bg-muted/50' : 'hover:bg-muted/50'), children: [leading, _jsxs("span", { className: "text-foreground min-w-0 flex-1 truncate text-sm", children: [label, suffix ? _jsx("span", { className: "text-muted-foreground ml-1 text-xs", children: suffix }) : null] }), selected ? (_jsx("span", { className: "shrink-0 px-1", children: _jsx(CheckCircleIcon, { weight: "fill", className: "size-[1.1rem]" }) })) : null] }));
 }

package/dist/apps/app-preview-pool.d.ts

@@ -12,6 +12,8 @@ export declare function ensureFrame(key: string, url: string, attributes: {
     title: string;
     sandbox: string;
     allow: string;
+    testid?: string;
+    referrerPolicy?: ReferrerPolicy;
 }): void;
 /** Show the frame in `slot`. Returns the release: the frame goes back to the previous claim. */
 export declare function claimFrame(key: string, slot: HTMLElement, placement: FramePlacement): () => void;
@@ -19,8 +21,11 @@ export declare function claimFrame(key: string, slot: HTMLElement, placement: Fr
 export declare function restyleFrame(key: string, slot: HTMLElement, placement: FramePlacement): void;
 /** Load the App again from `url` (a fresh access session). */
 export declare function reloadFrame(key: string, url: string): void;
-/** Drop every frame whose key is not in `keep` (a new release, a deleted App, another project). */
-export declare function pruneFrames(keep: Set<string>): void;
+/**
+ * Drop every frame whose key is not in `keep` (a new release, a deleted App,
+ * another project). `owns` limits the sweep to one kind of frame.
+ */
+export declare function pruneFrames(keep: Set<string>, owns?: (key: string) => boolean): void;
 /** The frame's load status, or null before it exists. */
 export declare function frameStatus(key: string): FrameStatus | null;
 export declare function useFrameStatus(key: string): FrameStatus | null;

package/dist/apps/app-preview-pool.js

@@ -1,6 +1,7 @@
 'use client';
 /**
- * One live frame per App preview, kept for as long as the project is open.
+ * One live frame per App preview (and per artifact page), kept for as long as
+ * the project is open.
  *
  * A card thumbnail and the big view used to each own an `<iframe>`, so every
  * page switch and every open loaded the App again. Here a frame is created
@@ -76,7 +77,9 @@ export function ensureFrame(key, url, attributes) {
     frame.title = attributes.title;
     frame.setAttribute('sandbox', attributes.sandbox);
     frame.allow = attributes.allow;
-    frame.dataset.testid = 'app-live-preview';
+    frame.dataset.testid = attributes.testid ?? 'app-live-preview';
+    if (attributes.referrerPolicy)
+        frame.referrerPolicy = attributes.referrerPolicy;
     frame.dataset.frameKey = key;
     const entry = { frame, status: 'loading', claims: [] };
     frame.addEventListener('load', () => {
@@ -127,11 +130,14 @@ export function reloadFrame(key, url) {
     entry.frame.src = url;
     notify();
 }
-/** Drop every frame whose key is not in `keep` (a new release, a deleted App, another project). */
-export function pruneFrames(keep) {
+/**
+ * Drop every frame whose key is not in `keep` (a new release, a deleted App,
+ * another project). `owns` limits the sweep to one kind of frame.
+ */
+export function pruneFrames(keep, owns = () => true) {
     let changed = false;
     for (const [key, entry] of entries) {
-        if (keep.has(key) || entry.claims.length > 0)
+        if (!owns(key) || keep.has(key) || entry.claims.length > 0)
             continue;
         entry.frame.remove();
         entries.delete(key);

package/dist/apps/app-shared.d.ts

@@ -1,5 +1,5 @@
 import type { UiTranslator } from '../i18n/index.js';
-import { type App, type AppAccessMode, type AppCapability, type AppDeployment, type AppViewerTokenScope } from '@kortix/sdk';
+import { type App, type AppAccessMode, type AppCapability, type AppDeployment, type AppViewerTokenScope, type ProjectTrigger } from '@kortix/sdk';
 type DeploymentTone = 'success' | 'destructive' | 'warning' | 'muted';
 /**
  * Every deployment status, in words a person who did not build this can read.
@@ -65,31 +65,39 @@ export declare function appStatus(app: App, tI18nComplete: UiTranslator): {
     label: string;
     dot: string;
 };
+export { appAdminsOnly, gridApps } from '../_vendor/shared/app-config.js';
+/** The Apps of the project that are neither a card nor a tab: the ones the page counts as hidden. */
+export declare function hiddenApps(apps: App[], canAdmin?: boolean): App[];
 /**
- * Does this App offer `capability`? The ONE way the Apps UI branches between
- * Apps: the server lists what each App supports (`app.capabilities`), and a
- * control shows only for the Apps that support it.
+ * How an App is wired into the project's triggers: the ones that call it
+ * (`run: { app }`) and the ones its own events start (`on: { event, app }`).
  */
-/**
- * The Apps the grid shows as cards (`display`): not `listed: false`, and not a
- * tab of a parent that exists. A tab whose parent is gone stays reachable as a card.
- */
-export declare function gridApps(apps: App[], canAdmin?: boolean): App[];
+export declare function appTriggers(app: App, triggers: ProjectTrigger[]): {
+    calledBy: ProjectTrigger[];
+    startsOn: ProjectTrigger[];
+};
+/** The one-line state of the Background list: how many Apps are up, asleep, not deployed, external. */
+export declare function backgroundSummary(apps: App[]): {
+    running: number;
+    asleep: number;
+    undeployed: number;
+    external: number;
+};
 /** The Apps `app`'s detail shows as tabs (their `display.parent` is its slug). */
 export declare function childApps(apps: App[], app: App, canAdmin?: boolean): App[];
-/**
- * Its primary service is `access: admins` (a backend's admin dashboard): only
- * project admins can open it, so nobody else is shown a card or tab for it.
- */
 /**
  * The App whose live preview a card shows: the App itself, or, when it hides
  * its own (`display.preview: none`), its first tab the viewer may open (a
  * backend's dashboard). Null: the card shows an icon.
  */
 export declare function cardPreviewApp(apps: App[], app: App, canAdmin?: boolean): App | null;
-export declare function appAdminsOnly(app: App): boolean;
 /** A tab's label: the App's name without its parent's slug ("crm-data-dashboard" → "Dashboard"). */
 export declare function appTabLabel(child: App, parent: App): string;
+/**
+ * Does this App offer `capability`? The ONE way the Apps UI branches between
+ * Apps: the server lists what each App supports (`app.capabilities`), and a
+ * control shows only for the Apps that support it.
+ */
 export declare function appCan(app: App, capability: AppCapability): boolean;
 /** "2 vCPU · 4 GB · 20 GB": the machine size of an App. */
 export declare function appSizeLabel(app: App, t: UiTranslator): string;
@@ -151,4 +159,3 @@ export declare function localizedAppCopy(tI18nComplete: UiTranslator): {
         desc: string;
     }>;
 };
-export {};