@kortix/ui 0.14.8 → 0.14.9

package/dist/internal/layout/project-page-header.d.ts

@@ -5,12 +5,14 @@
  * same title-bar classes as the Customize tab bar (`CapabilityTabs`), so it
  * has the same height and clears the desktop window controls the same way.
  * A page has one view, so the title is plain text, not a one-tab underline
- * bar. `children` sit at the trailing edge (page actions, a docs link).
+ * bar. `titleAccessory` sits right after the title (a docs link). `children`
+ * sit at the trailing edge (page actions).
  *
  * The e2e journey `18-apps-ui` finds the page by the
  * `<h1>`.
  */
-export declare function ProjectPageHeader({ title, children, }: {
+export declare function ProjectPageHeader({ title, titleAccessory, children, }: {
     title: string;
+    titleAccessory?: React.ReactNode;
     children?: React.ReactNode;
 }): import("react").JSX.Element;

package/dist/internal/layout/project-page-header.js

@@ -8,12 +8,13 @@ import { SidebarToggle } from './sidebar-toggle.js';
  * same title-bar classes as the Customize tab bar (`CapabilityTabs`), so it
  * has the same height and clears the desktop window controls the same way.
  * A page has one view, so the title is plain text, not a one-tab underline
- * bar. `children` sit at the trailing edge (page actions, a docs link).
+ * bar. `titleAccessory` sits right after the title (a docs link). `children`
+ * sit at the trailing edge (page actions).
  *
  * The e2e journey `18-apps-ui` finds the page by the
  * `<h1>`.
  */
-export function ProjectPageHeader({ title, children, }) {
+export function ProjectPageHeader({ title, titleAccessory, children, }) {
     const sidebar = useOptionalSidebar();
-    return (_jsxs("div", { className: "kx-titlebar-row kx-capability-titlebar relative flex shrink-0 items-center gap-1 border-b px-2", "data-sidebar-collapsed": sidebar?.state === 'collapsed' || undefined, children: [_jsx(SidebarToggle, {}), _jsx("div", { className: "kx-titlebar-tabs flex h-10 min-w-0 flex-1 items-center px-3", children: _jsx("h1", { className: "text-foreground truncate text-sm font-medium", children: title }) }), children ? _jsx("div", { className: "flex shrink-0 items-center gap-1", children: children }) : null] }));
+    return (_jsxs("div", { className: "kx-titlebar-row kx-capability-titlebar relative flex shrink-0 items-center gap-1 border-b px-2", "data-sidebar-collapsed": sidebar?.state === 'collapsed' || undefined, children: [_jsx(SidebarToggle, {}), _jsxs("div", { className: "kx-titlebar-tabs flex h-10 min-w-0 flex-1 items-center gap-1.5 px-3", children: [_jsx("h1", { className: "text-foreground truncate text-sm font-medium", children: title }), titleAccessory] }), children ? _jsx("div", { className: "flex shrink-0 items-center gap-1", children: children }) : null] }));
 }

package/dist/internal/layout/project-settings-nav.js

@@ -7,11 +7,37 @@ export { CustomizeGlyph } from '../icons/customize.js';
 import { useTranslations } from '../../i18n/index.js';
 import { useUiPathname } from '../../providers/ui-provider.js';
 import { CountBadge } from '../../primitives/count-badge.js';
-import { activeCapabilityTab, capabilityTabHref, } from '../lib/capability-tab-routes.js';
+import { cn } from '../lib/utils.js';
+import { CAPABILITY_TABS, activeCapabilityTab, capabilityTabHref, } from '../lib/capability-tab-routes.js';
 import { PROJECT_ACTIONS } from '../lib/project-actions.js';
 import { useFeatureFlag } from '@kortix/sdk/react';
 import { useProjectPageCans } from '../lib/use-project-can.js';
 import { useReviewSessionSummary } from '../hooks/use-review-session-summary.js';
+import { HubLink } from '../account-hub/account-hub-location.js';
+import { hubTarget } from '../stores/account-panel-store.js';
+import { HoverPrefetchLink } from '../components/hover-prefetch-link.js';
+import { NavHoverCardContent, NavHoverCardList, useNavHoverCard } from './nav-hover-card.js';
+import { useLocalizedUiCatalog } from '../../i18n/ui-catalog/use-localized-ui-catalog.js';
+import { MENU_SEPARATOR, menuRow } from '../../primitives/menu-recipe.js';
+import { Popover, PopoverAnchor } from '../../primitives/popover.js';
+import { getProjectDetail } from '@kortix/sdk';
+import { contract, qk } from '@kortix/sdk/react';
+import { useQuery } from '@tanstack/react-query';
+import { AlarmIcon, CalendarIcon, CpuIcon, GearSixIcon, GitBranchIcon, LockKeyIcon, PlugIcon, RobotIcon, SquaresFourIcon, TrayIcon, UsersIcon, } from '@phosphor-icons/react';
+import { Fragment } from 'react';
+/** Each tab's glyph: the one the command palette shows for the same page (`menu-registry.ts`). */
+const TAB_ICONS = {
+    agent: RobotIcon,
+    skills: SquaresFourIcon,
+    connectors: PlugIcon,
+    triggers: AlarmIcon,
+    reminders: CalendarIcon,
+    models: CpuIcon,
+    secrets: LockKeyIcon,
+    files: GitBranchIcon,
+    review: TrayIcon,
+    config: GearSixIcon,
+};
 /**
  * The one project-configuration entry in the sidebar:
  * ProjectCustomizeNavItem, top of the panel under New session, navigating to
@@ -197,10 +223,41 @@ export function ProjectCustomizeNavItem({ projectId }) {
     // Connectors or one agent's page, not just on the landing tab.
     const isActive = !!pathname &&
         (pathname === customizePath(projectId) || activeCapabilityTab(pathname) !== null);
+    const card = useNavHoverCard({ enabled: !!tab && !!projectId });
     if (!tab)
         return null;
     // No project id means no valid href, so there is nothing to render.
     if (!projectId)
         return null;
-    return (_jsxs(ProjectNavRow, { active: isActive, label: t('customize'), href: capabilityTabHref(projectId, tab), prefetch: true, children: [_jsx("span", { className: "shrink-0", children: _jsx(CustomizeGlyph, {}) }), t('customize'), reviewCount > 0 ? (_jsx("span", { className: "ml-auto flex shrink-0 items-center gap-1", children: _jsx(CountBadge, { count: reviewCount, tone: "waiting" }) })) : null] }));
+    return (_jsxs(Popover, { open: card.open, onOpenChange: card.setOpen, children: [_jsx(PopoverAnchor, { virtualRef: card.anchorRef }), _jsxs(ProjectNavRow, { active: isActive, label: t('customize'), href: capabilityTabHref(projectId, tab), prefetch: true, ...card.rowProps, children: [_jsx("span", { className: "shrink-0", children: _jsx(CustomizeGlyph, {}) }), t('customize'), reviewCount > 0 ? (_jsx("span", { className: "ml-auto flex shrink-0 items-center gap-1", children: _jsx(CountBadge, { count: reviewCount, tone: "waiting" }) })) : null] }), _jsx(NavHoverCardContent, { ...card.contentProps, children: _jsx(CustomizeCardList, { projectId: projectId, tabs: access.tabs, reviewCount: reviewCount, onOpen: () => card.setOpen(false) }) })] }));
+}
+/**
+ * The Customize card: every tab the caller may open, in the tab bar's order
+ * and with its seams (Agents | the library | Members and Settings), so the
+ * card and the bar read as one list. Members is the bar's launcher into the
+ * Access hub, gated the same way (`project.members.read`).
+ */
+function CustomizeCardList({ projectId, tabs, reviewCount, onOpen, }) {
+    const tI18nComplete = useTranslations('hardcodedUi.i18nComplete');
+    const allTabs = useLocalizedUiCatalog(CAPABILITY_TABS);
+    const { data } = useQuery({
+        queryKey: qk.project.detail(projectId),
+        queryFn: () => getProjectDetail(projectId),
+        ...contract('config'),
+    });
+    const canReadMembers = useProjectPageCans(projectId)[PROJECT_ACTIONS.PROJECT_MEMBERS_READ]?.allowed === true;
+    const accountId = data?.project?.account_id;
+    const allowed = new Set(tabs);
+    const shown = allTabs.filter((entry) => allowed.has(entry.key));
+    const rowClass = menuRow('sm', 'default', 'cursor-pointer');
+    const tabRow = (entry) => {
+        const TabIcon = TAB_ICONS[entry.key];
+        return (_jsx("li", { children: _jsxs(HoverPrefetchLink, { href: capabilityTabHref(projectId, entry.key), onClick: onOpen, className: rowClass, children: [_jsx(TabIcon, { "aria-hidden": true }), _jsx("span", { className: "min-w-0 flex-1 truncate", children: entry.label }), entry.key === 'review' && reviewCount > 0 ? _jsx(CountBadge, { count: reviewCount, tone: "waiting" }) : null] }) }, entry.key));
+    };
+    const primary = shown.filter((entry) => entry.key === 'agent');
+    const library = shown.filter((entry) => entry.key !== 'agent' && entry.key !== 'config');
+    const trailing = shown.filter((entry) => entry.key === 'config');
+    const members = canReadMembers && accountId ? (_jsx("li", { children: _jsxs(HubLink, { to: hubTarget(accountId, { tab: 'access-projects', project: projectId }), onClick: onOpen, className: rowClass, children: [_jsx(UsersIcon, { "aria-hidden": true }), _jsx("span", { className: "min-w-0 flex-1 truncate", children: tI18nComplete.raw('text1044a4c056d0') })] }) }, "members")) : null;
+    const groups = [primary.map(tabRow), library.map(tabRow), [members, ...trailing.map(tabRow)].filter(Boolean)].filter((group) => group.length > 0);
+    return (_jsx(NavHoverCardList, { children: groups.map((group, index) => (_jsxs(Fragment, { children: [index > 0 ? _jsx("li", { "aria-hidden": true, className: cn(MENU_SEPARATOR, '-mx-1') }) : null, group] }, index))) }));
 }

package/dist/internal/lib/browser-error-noise.d.ts

@@ -4,7 +4,7 @@ export { isEmptyMessageUnresolvedBrowserChunkNoise, isStaleWebpackRuntimeCallNoi
 export { isClientRequestTimeoutMessage, isExpectedBillingGateMessage, isExpectedCompactionNoModelMessage, isGitMirrorUnavailableNoiseMessage, isModelNotServableNoise, isRuntimeNotReadyNoiseMessage, isServerDeadlineNoiseMessage, } from './browser-noise/rules/expected-states.js';
 export { isCaptchaInterceptorNoise, isExtensionRejectedObjectNoise, isExtensionSource, isInjectedAppSource, isInjectedScriptSendMessageNoise, isInpageJsNoErrorMessageNoise, isInpageWalletStreamNoise, isTronLinkProxyNoise, isUserscriptManagerNoise, } from './browser-noise/rules/extensions.js';
 export { isCanvasImageDataOOMNoise, isPaperShaderImageUniformNoise, isPaperShaderNullContextNoise, isPaperShaderWebGLUnsupportedNoise, isSpoofedWebGLGetParameterNoise, } from './browser-noise/rules/graphics.js';
-export { isOneTrustJsonParseNoise, isRedefineInjectedWalletNoise, isRedefineWebdriverNoise, isVercelLiveFeedbackNoise, } from './browser-noise/rules/injected-scripts.js';
+export { isGoogletagUndefinedNoise, isOneTrustJsonParseNoise, isRedefineInjectedWalletNoise, isRedefineWebdriverNoise, isVercelLiveFeedbackNoise, } from './browser-noise/rules/injected-scripts.js';
 export { isKnownBrowserNoiseMessage, isKnownTestNoiseMessage, } from './browser-noise/rules/messages.js';
 export { isConnectionClosedNoise, isFailedToSendMessageNoise, isFramelessNetworkErrorNoise, isSignalTimeoutNoise, } from './browser-noise/rules/network.js';
 export { isIosWebViewInjectedStackOverflowNoise, isOldBrowserDomNullDerefNoise, isFirefoxDeadObjectUnattributableNoise, isOldBrowserSyntaxParseError, isOldWebkitRegexNoiseMessage, isUndefinedVariableThirdPartyNoise, isUnresolvableStackOverflowNoise, } from './browser-noise/rules/old-browsers.js';

package/dist/internal/lib/browser-error-noise.js

@@ -29,7 +29,7 @@ export { isEmptyMessageUnresolvedBrowserChunkNoise, isStaleWebpackRuntimeCallNoi
 export { isClientRequestTimeoutMessage, isExpectedBillingGateMessage, isExpectedCompactionNoModelMessage, isGitMirrorUnavailableNoiseMessage, isModelNotServableNoise, isRuntimeNotReadyNoiseMessage, isServerDeadlineNoiseMessage, } from './browser-noise/rules/expected-states.js';
 export { isCaptchaInterceptorNoise, isExtensionRejectedObjectNoise, isExtensionSource, isInjectedAppSource, isInjectedScriptSendMessageNoise, isInpageJsNoErrorMessageNoise, isInpageWalletStreamNoise, isTronLinkProxyNoise, isUserscriptManagerNoise, } from './browser-noise/rules/extensions.js';
 export { isCanvasImageDataOOMNoise, isPaperShaderImageUniformNoise, isPaperShaderNullContextNoise, isPaperShaderWebGLUnsupportedNoise, isSpoofedWebGLGetParameterNoise, } from './browser-noise/rules/graphics.js';
-export { isOneTrustJsonParseNoise, isRedefineInjectedWalletNoise, isRedefineWebdriverNoise, isVercelLiveFeedbackNoise, } from './browser-noise/rules/injected-scripts.js';
+export { isGoogletagUndefinedNoise, isOneTrustJsonParseNoise, isRedefineInjectedWalletNoise, isRedefineWebdriverNoise, isVercelLiveFeedbackNoise, } from './browser-noise/rules/injected-scripts.js';
 export { isKnownBrowserNoiseMessage, isKnownTestNoiseMessage, } from './browser-noise/rules/messages.js';
 export { isConnectionClosedNoise, isFailedToSendMessageNoise, isFramelessNetworkErrorNoise, isSignalTimeoutNoise, } from './browser-noise/rules/network.js';
 export { isIosWebViewInjectedStackOverflowNoise, isOldBrowserDomNullDerefNoise, isFirefoxDeadObjectUnattributableNoise, isOldBrowserSyntaxParseError, isOldWebkitRegexNoiseMessage, isUndefinedVariableThirdPartyNoise, isUnresolvableStackOverflowNoise, } from './browser-noise/rules/old-browsers.js';

package/dist/internal/lib/browser-noise/rules/injected-scripts.d.ts

@@ -70,6 +70,13 @@ export declare function isInjectedWalletProviderWriteNoise(input: {
         filename?: unknown;
     } | undefined>;
 }): boolean;
+export declare function isGoogletagUndefinedNoise(input: {
+    message?: unknown;
+    filename?: unknown;
+    frames?: Array<{
+        filename?: unknown;
+    } | undefined>;
+}): boolean;
 /** Vercel toolbar frames have a reserved source path outside app bundles. */
 export declare function isVercelLiveFeedbackNoise(input: {
     filename?: unknown;

package/dist/internal/lib/browser-noise/rules/injected-scripts.js

@@ -213,6 +213,20 @@ export function isInjectedWalletProviderWriteNoise(input) {
     return (UNDEFINED_WALLET_PROVIDER_WRITE_MESSAGE.test(stripped) &&
         !sources.some((source) => isBrowserBundleSource(source) || isFirstPartyResolvedSource(source)));
 }
+/**
+ * A tag that calls Google Publisher Tag (`googletag`) before its library
+ * loads: `googletag is not defined` (V8, Gecko) or `Can't find variable:
+ * googletag` (WebKit). Better Stack, Kortix Frontend prod, 2026-10-27
+ * (KRTX-3549): 71 events in 2 s from one `<anonymous>` frame, 0 users. Kortix
+ * never loads or calls `googletag`; its Google Tag Manager writes only to
+ * `dataLayer`. A frame in our bundles or resolved first-party source keeps
+ * reporting.
+ */
+const GOOGLETAG_UNDEFINED_MESSAGE = /^(?:googletag is not defined|Can't find variable: googletag)$/;
+export function isGoogletagUndefinedNoise(input) {
+    return (GOOGLETAG_UNDEFINED_MESSAGE.test(stripErrorWrappers(normalizeString(input.message))) &&
+        !sourcesOf(input).some((source) => isBrowserBundleSource(source) || isFirstPartyResolvedSource(source)));
+}
 /** Vercel toolbar frames have a reserved source path outside app bundles. */
 export function isVercelLiveFeedbackNoise(input) {
     const sources = sourcesOf(input);
@@ -225,5 +239,6 @@ export const INJECTED_SCRIPT_RULES = [
     { id: 'redefine-webdriver', appliesTo: 'both', match: isRedefineWebdriverNoise },
     { id: 'redefine-wallet-provider', appliesTo: 'both', match: isRedefineInjectedWalletNoise },
     { id: 'wallet-provider-write', appliesTo: 'both', match: isInjectedWalletProviderWriteNoise },
+    { id: 'googletag-undefined', appliesTo: 'both', match: isGoogletagUndefinedNoise },
     { id: 'vercel-live-feedback', appliesTo: 'both', match: isVercelLiveFeedbackNoise },
 ];

package/dist/internal/lib/manifest-version.d.ts

@@ -3,7 +3,7 @@ export type ManifestVersion = 1 | 2 | 3;
 export declare function detectManifestVersion(manifestRaw: string | null | undefined): ManifestVersion;
 /** The manifest file a version lives in. An unresolved read (`null`) reads as v1. */
 export declare function manifestFilename(version: number | null): 'kortix.toml' | 'kortix.yaml';
-/** Only a v1 project is offered an upgrade (to v2). v3 is opt-in and not offered yet. `null` (not read yet) is not. */
+/** A v1 or v2 project is offered the upgrade to v3. `null` (not read yet) is not. */
 export declare function manifestNeedsUpgrade(version: ManifestVersion | null): boolean;
 export interface ProjectManifestVersionState {
     /** `null` while the project-detail fetch is still in flight — callers that

package/dist/internal/lib/manifest-version.js

@@ -27,9 +27,9 @@ export function detectManifestVersion(manifestRaw) {
 export function manifestFilename(version) {
     return (version ?? 1) >= 2 ? 'kortix.yaml' : 'kortix.toml';
 }
-/** Only a v1 project is offered an upgrade (to v2). v3 is opt-in and not offered yet. `null` (not read yet) is not. */
+/** A v1 or v2 project is offered the upgrade to v3. `null` (not read yet) is not. */
 export function manifestNeedsUpgrade(version) {
-    return version === 1;
+    return version === 1 || version === 2;
 }
 /**
  * Reads the SAME `qk.project.detail(id)` query the rest of Customize already

package/dist/internal/lib/memory-href.d.ts

@@ -0,0 +1,16 @@
+/** @internal Kortix apps only. No semver: it may change in any release. */
+import type { ProjectMemoryLayerScope } from '@kortix/sdk';
+/** A memory layer as a link target: its scope and its key (`company` or the space id). */
+export interface MemoryLayerRef {
+    scope: ProjectMemoryLayerScope;
+    key: string;
+}
+/**
+ * Where a memory page opens: the Company Memory page, or its channel's or DM's
+ * Memory tab, with `?page=` (`&history=1` opens its History too). A channel or
+ * DM the reader is on keeps its other params, so an open thread stays beside
+ * the tab. Null when the host serves no such page or the space is not loaded.
+ */
+export declare function useMemoryPageHref(projectId: string | null | undefined, enabled?: boolean): (layer: MemoryLayerRef, pageId: string, options?: {
+    history?: boolean;
+}) => string | null;

package/dist/internal/lib/memory-href.js

@@ -0,0 +1,46 @@
+'use client';
+import { useProjectSpaces } from '@kortix/sdk/react';
+import { useCallback } from 'react';
+import { uiRoutes } from '../../lib/routes.js';
+import { useUiPathname, useUiSearchParams } from '../../providers/ui-provider.js';
+/**
+ * Where a memory page opens: the Company Memory page, or its channel's or DM's
+ * Memory tab, with `?page=` (`&history=1` opens its History too). A channel or
+ * DM the reader is on keeps its other params, so an open thread stays beside
+ * the tab. Null when the host serves no such page or the space is not loaded.
+ */
+export function useMemoryPageHref(projectId, enabled = true) {
+    const pathname = useUiPathname();
+    const searchParams = useUiSearchParams();
+    const spaces = useProjectSpaces(projectId, { enabled }).data;
+    return useCallback((layer, pageId, options) => {
+        if (!projectId)
+            return null;
+        if (layer.scope === 'company') {
+            const memory = uiRoutes().memory(projectId);
+            if (!memory)
+                return null;
+            const params = new URLSearchParams({ page: pageId });
+            if (options?.history)
+                params.set('history', '1');
+            return `${memory}?${params.toString()}`;
+        }
+        const space = spaces?.find((candidate) => candidate.space_id === layer.key);
+        let path = null;
+        if (space?.kind === 'channel' && space.slug)
+            path = uiRoutes().channel(projectId, space.slug);
+        else if (space?.kind === 'dm' && space.dm_agent_name)
+            path = uiRoutes().dm(projectId, space.dm_agent_name);
+        if (!path)
+            return null;
+        const here = pathname === path || !!pathname?.endsWith(path);
+        const params = new URLSearchParams(here ? searchParams.toString() : '');
+        params.set('tab', 'memory');
+        params.set('page', pageId);
+        if (options?.history)
+            params.set('history', '1');
+        else
+            params.delete('history');
+        return `${here ? pathname : path}?${params.toString()}`;
+    }, [projectId, pathname, searchParams, spaces]);
+}

package/dist/internal/lib/use-project-feature-flags.js

@@ -22,10 +22,7 @@ import { useFeatureFlag } from '@kortix/sdk/react';
  */
 export function useProjectFeatureFlags(projectId) {
     const marketplace = useFeatureFlag(projectId, 'marketplace');
-    const connectorsApiDiscover = useFeatureFlag(projectId, 'connectors_api_discover');
-    const agentmailEmail = useFeatureFlag(projectId, 'agentmail_email');
     const metaAgent = useFeatureFlag(projectId, 'meta_agent');
-    const monitors = useFeatureFlag(projectId, 'monitors');
     const reminders = useFeatureFlag(projectId, 'reminders');
     const warmSessions = useFeatureFlag(projectId, 'warm_sessions');
     const secretsEgress = useFeatureFlag(projectId, 'secrets_egress');
@@ -38,17 +35,17 @@ export function useProjectFeatureFlags(projectId) {
     const drives = useFeatureFlag(projectId, 'drives');
     const sessionLog = useFeatureFlag(projectId, 'session_log');
     const sessionLogRestore = useFeatureFlag(projectId, 'session_log_restore');
-    const connectorsV2 = useFeatureFlag(projectId, 'connectors_v2');
+    const projectChannels = useFeatureFlag(projectId, 'project_channels');
     const agentRooms = useFeatureFlag(projectId, 'agent_rooms');
     const goals = useFeatureFlag(projectId, 'goals');
+    const artifacts = useFeatureFlag(projectId, 'artifacts');
+    const emailChannel = useFeatureFlag(projectId, 'email_channel');
     const workspaceVolume = useFeatureFlag(projectId, 'workspace_volume');
+    const sessionGroups = useFeatureFlag(projectId, 'session_groups');
     return {
         flags: {
             marketplace: marketplace.enabled,
-            connectors_api_discover: connectorsApiDiscover.enabled,
-            agentmail_email: agentmailEmail.enabled,
             meta_agent: metaAgent.enabled,
-            monitors: monitors.enabled,
             reminders: reminders.enabled,
             warm_sessions: warmSessions.enabled,
             secrets_egress: secretsEgress.enabled,
@@ -61,12 +58,15 @@ export function useProjectFeatureFlags(projectId) {
             drives: drives.enabled,
             session_log: sessionLog.enabled,
             session_log_restore: sessionLogRestore.enabled,
-            connectors_v2: connectorsV2.enabled,
+            project_channels: projectChannels.enabled,
             agent_rooms: agentRooms.enabled,
             goals: goals.enabled,
+            artifacts: artifacts.enabled,
+            email_channel: emailChannel.enabled,
             workspace_volume: workspaceVolume.enabled,
+            session_groups: sessionGroups.enabled,
         },
         // The trailing hook's loading state — keep this on the LAST hook above.
-        isLoading: workspaceVolume.isLoading,
+        isLoading: sessionGroups.isLoading,
     };
 }

package/dist/internal/lib/utils/heic-convert.d.ts

@@ -1,7 +1,7 @@
 /** @internal Kortix apps only. No semver: it may change in any release. */
 /**
  * HEIC/HEIF → JPEG conversion.
- * heic2any is lazy-loaded — zero bundle cost when no HEIC files are opened.
+ * The CSP-safe decoder is lazy-loaded; production never permits unsafe-eval.
  */
 export declare function isHeicFile(filename: string): boolean;
 export declare function convertHeicBlobToJpeg(blob: Blob): Promise<Blob>;

package/dist/internal/lib/utils/heic-convert.js

@@ -1,13 +1,12 @@
 /**
  * HEIC/HEIF → JPEG conversion.
- * heic2any is lazy-loaded — zero bundle cost when no HEIC files are opened.
+ * The CSP-safe decoder is lazy-loaded; production never permits unsafe-eval.
  */
 const HEIC_EXT = new Set(['heic', 'heif']);
 export function isHeicFile(filename) {
     return HEIC_EXT.has(filename.split('.').pop()?.toLowerCase() || '');
 }
 export async function convertHeicBlobToJpeg(blob) {
-    const heic2any = (await import('heic2any')).default;
-    const result = await heic2any({ blob, toType: 'image/jpeg', quality: 0.92 });
-    return Array.isArray(result) ? result[0] : result;
+    const { heicTo } = await import('heic-to/csp');
+    return heicTo({ blob, type: 'image/jpeg', quality: 0.92 });
 }

package/dist/internal/lib/web-notifications.d.ts

@@ -2,6 +2,7 @@
 import type { UiTranslator } from '../../i18n/index.js';
 import { type TurnCompleteMsg } from './turn-broadcast.js';
 import { type NotificationPreferences } from '@kortix/sdk';
+import type { QueryClient } from '@tanstack/react-query';
 /** The push `type` of each inbox kind (`pushTypeOf` in `@kortix/shared/notification-kinds`). */
 export type WebNotificationType = 'completion' | 'error' | 'question' | 'permission' | 'shared' | 'automation_failed' | 'automation_recovered' | 'capture_device_down' | 'capture_device_recovered' | 'message';
 export interface WebNotificationPayload {
@@ -36,6 +37,11 @@ export interface WebNotificationPayload {
     preview?: string;
     /** Localized "Open session" for the finished-turn toast. */
     openSessionLabel?: string;
+    /**
+     * Set when the turn ended while a channel or DM page was on screen: its
+     * thread opens in that page's panel (`?thread=`), not on the session page.
+     */
+    threadHref?: string;
     /** The open change request the finished turn produced: the toast offers Review. */
     changeRequest?: {
         crId: string;
@@ -59,6 +65,20 @@ export declare function setServerPushPreferences(kinds: NotificationPreferences[
  * via Cmd+Tab / Alt+Tab (`!document.hasFocus()`).
  */
 export declare function isTabHidden(): boolean;
+/**
+ * A finished turn opens in the thread panel of the channel or DM page on
+ * screen (`?thread=<id>`) only when it is one of that space's threads: the
+ * path's project is the session's, and the cached thread list of the space
+ * holds the session. Null otherwise, so any other session keeps its session
+ * page. Reads the query cache; never fetches.
+ */
+export declare function spacesThreadHref(location: {
+    pathname: string;
+    search: string;
+}, session: {
+    sessionId: string;
+    projectId: string | null | undefined;
+}, cache: QueryClient): string | null;
 /**
  * Check if the user is currently viewing a specific session.
  * Checks the tab store (dashboard session tabs) and the current URL

package/dist/internal/lib/web-notifications.js

@@ -33,6 +33,7 @@ import { hasWebPushSubscription } from '../notifications/web-push.js';
 import { customToast, dismissToast, ToastCard, toastIcon, errorToast, infoToast, successToast, warningToast, } from '../../primitives/toast.js';
 import { ClockIcon, GitPullRequestIcon } from '@phosphor-icons/react';
 import { SessionFailedCard, SessionStackCard, } from '../notifications/session-toast-cards.js';
+import { decodeSpaceSegment } from '../../lib/routes.js';
 import { logger } from './logger.js';
 import { softNavigate } from './navigation/router-bridge.js';
 import { projectSessionHref } from './navigation/session-href.js';
@@ -43,6 +44,7 @@ import { openTabAndNavigate, useTabStore } from '../stores/tab-store.js';
 import { useTurnAttentionStore } from '../stores/turn-attention-store.js';
 import { useWebNotificationStore } from '../stores/web-notification-store.js';
 import { listChangeRequests, normalizeAppPathname, } from '@kortix/sdk';
+import { findCachedProjectSession, qk } from '@kortix/sdk/react';
 // ============================================================================
 // Server push preference
 // ============================================================================
@@ -169,6 +171,32 @@ export function isTabHidden() {
         return false;
     return document.hidden || !document.hasFocus();
 }
+/**
+ * A finished turn opens in the thread panel of the channel or DM page on
+ * screen (`?thread=<id>`) only when it is one of that space's threads: the
+ * path's project is the session's, and the cached thread list of the space
+ * holds the session. Null otherwise, so any other session keeps its session
+ * page. Reads the query cache; never fetches.
+ */
+export function spacesThreadHref(location, session, cache) {
+    // An optional two-letter locale segment leads (`/de/projects/…`).
+    const match = /^(?:\/[a-z]{2})?\/projects\/([^/]+)\/(c|dm)\/([^/]+)\/?$/.exec(normalizeAppPathname(location.pathname));
+    if (!match || match[1] !== session.projectId)
+        return null;
+    const [, projectId, kind, segment] = match;
+    const name = decodeSpaceSegment(segment);
+    const space = cache
+        .getQueryData(qk.project.spaces(projectId))
+        ?.find((candidate) => (kind === 'c' ? candidate.slug === name : candidate.dm_agent_name === name));
+    if (!space)
+        return null;
+    const thread = findCachedProjectSession(cache, projectId, (row) => row.session_id === session.sessionId && row.space_id === space.space_id);
+    if (!thread)
+        return null;
+    const params = new URLSearchParams(location.search);
+    params.set('thread', session.sessionId);
+    return `${location.pathname}?${params.toString()}`;
+}
 /**
  * Check if the user is currently viewing a specific session.
  * Checks the tab store (dashboard session tabs) and the current URL
@@ -199,6 +227,9 @@ export function isViewingSession(sessionId) {
         const path = normalizeAppPathname(window.location.pathname);
         if (path.includes(sessionId))
             return true;
+        // A channel or DM page with the thread open in its panel.
+        if (new URLSearchParams(window.location.search).get('thread') === sessionId)
+            return true;
         if (path.startsWith('/onboarding'))
             return true;
     }
@@ -392,7 +423,10 @@ const NOTIFICATION_TOAST_VARIANT = {
 };
 /** Open what the notification is about: its session, or its `href`. */
 function openPayload(payload, forceNavigation) {
-    if (payload.sessionId) {
+    if (payload.threadHref) {
+        softNavigate(payload.threadHref);
+    }
+    else if (payload.sessionId) {
         navigateToSession(payload.sessionId, payload.body, {
             forceNavigation,
             projectId: payload.projectId,
@@ -594,12 +628,22 @@ handoff) {
  */
 export function notifyTaskCompleteFor({ sessionId, sessionTitle, projectId, notificationCenter }, tI18nComplete) {
     noteTurnCompleteShown(sessionId);
-    const name = sessionDisplayName(sessionTitle, sessionId);
-    const label = sessionTitle ? `"${name.slice(0, 60)}"` : name;
+    // On a channel or DM page the turn is a thread: it says "thread" and opens
+    // in the page's panel. A default title ("New session - <time>") names nothing.
+    const cache = getSharedQueryClient();
+    const threadHref = typeof window === 'undefined' || !cache
+        ? null
+        : spacesThreadHref(window.location, { sessionId, projectId }, cache);
+    const defaultTitle = !sessionTitle || /^New session(\s-\s|$)/.test(sessionTitle);
+    const name = threadHref && defaultTitle
+        ? tI18nComplete.raw('untitledThread')
+        : sessionDisplayName(sessionTitle, sessionId);
+    const label = sessionTitle && !(threadHref && defaultTitle) ? `"${name.slice(0, 60)}"` : name;
     const payload = {
         type: 'completion',
         entityLabel: name,
-        openSessionLabel: tI18nComplete.raw('textb205bb47f81a'),
+        openSessionLabel: threadHref ? tI18nComplete.raw('openThreadAction') : tI18nComplete.raw('textb205bb47f81a'),
+        threadHref: threadHref ?? undefined,
         stackTitle: (count) => tI18nComplete('textc0589750863c', { count }),
         title: tI18nComplete.raw('text107f1806b5d7'),
         body: tI18nComplete('text27d628c8b427', { label }),

package/dist/internal/notifications/notification-bell.d.ts

@@ -1,5 +1,6 @@
 /** @internal Kortix apps only. No semver: it may change in any release. */
 import type { InboxNotification } from '@kortix/sdk';
+import { BellIcon } from '@phosphor-icons/react';
 export interface NotificationPanelProps {
     rows: readonly InboxNotification[];
     state: 'loading' | 'error' | 'ready';
@@ -27,10 +28,12 @@ export declare function NotificationPanel({ rows, state, unreadCount, prompt, on
  * sits. At full size it would tint the whole bell.
  */
 export declare const BELL_REFLECTION_MASK = "radial-gradient(circle 12px at 100% 100%, #000 35%, transparent 100%)";
-export declare function BellMark({ count, needsYou, surface, }: {
+export declare function BellMark({ count, needsYou, surface, icon: Glyph, }: {
     count: number;
     needsYou: boolean;
     surface?: 'bg-background' | 'bg-sidebar';
+    /** The glyph under the count: the bell, or another control's own mark. */
+    icon?: typeof BellIcon;
 }): import("react").JSX.Element;
 /**
  * The bell and its popover. Renders nothing, and reads no inbox, while signed

package/dist/internal/notifications/notification-bell.js

@@ -79,11 +79,11 @@ export function NotificationPanel({ rows, state, unreadCount, prompt, onOpenRow,
  * sits. At full size it would tint the whole bell.
  */
 export const BELL_REFLECTION_MASK = 'radial-gradient(circle 12px at 100% 100%, #000 35%, transparent 100%)';
-export function BellMark({ count, needsYou, surface = 'bg-background', }) {
+export function BellMark({ count, needsYou, surface = 'bg-background', icon: Glyph = BellIcon, }) {
     const tone = needsYou
         ? { reflection: 'text-kortix-yellow', disc: 'bg-kortix-yellow' }
         : { reflection: 'text-kortix-blue', disc: 'bg-kortix-blue' };
-    return (_jsxs("span", { className: "relative size-4 shrink-0", children: [_jsx(BellIcon, { className: "size-4" }), count > 0 ? (_jsxs(_Fragment, { children: [_jsx(BellIcon, { "aria-hidden": true, className: cn('absolute inset-0 size-4', tone.reflection), style: { maskImage: BELL_REFLECTION_MASK, WebkitMaskImage: BELL_REFLECTION_MASK } }), _jsx("span", { "aria-hidden": true, className: cn('absolute -right-2.5 -bottom-2 flex rounded-full p-px', surface), children: _jsx("span", { "data-slot": "bell-count", className: cn('text-background flex h-3.5 min-w-3.5 items-center justify-center rounded-full px-0.5 text-[9px] leading-none font-semibold tabular-nums', // audit:allow a numeral in a 13px disc on a 16px glyph; no type rung fits
+    return (_jsxs("span", { className: "relative size-4 shrink-0", children: [_jsx(Glyph, { className: "size-4" }), count > 0 ? (_jsxs(_Fragment, { children: [_jsx(Glyph, { "aria-hidden": true, className: cn('absolute inset-0 size-4', tone.reflection), style: { maskImage: BELL_REFLECTION_MASK, WebkitMaskImage: BELL_REFLECTION_MASK } }), _jsx("span", { "aria-hidden": true, className: cn('absolute -right-2.5 -bottom-2 flex rounded-full p-px', surface), children: _jsx("span", { "data-slot": "bell-count", className: cn('text-background flex h-3.5 min-w-3.5 items-center justify-center rounded-full px-0.5 text-[9px] leading-none font-semibold tabular-nums', // audit:allow a numeral in a 13px disc on a 16px glyph; no type rung fits
                             tone.disc), children: badgeCount(count) }) })] })) : null] }));
 }
 /**

package/dist/internal/selection/selection-bar.d.ts

@@ -2,7 +2,8 @@
 export interface SelectionBarAction {
     id: string;
     label: string;
-    tone?: 'default' | 'destructive';
+    /** `success` for an approving verb (Approve), `destructive` for a removing one. */
+    tone?: 'default' | 'success' | 'destructive';
     disabled?: boolean;
     onSelect: () => void;
 }

package/dist/internal/selection/selection-bar.js

@@ -31,7 +31,7 @@ export function SelectionBar({ selectedCount, allSelected, canSelectAll = true,
     const selectLabel = allSelected ? t.raw('text83b12c2216ef') : t.raw('text1fc9a387654d');
     // One action: a fixed-height button that reads its label. No glyph: a
     // verb in a bulk bar is read, not recognised.
-    const action = (a) => (_jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: a.onSelect, disabled: busy || a.disabled, className: cn('h-8 shrink-0', a.tone === 'destructive' && 'text-destructive hover:text-destructive'), children: a.label }, a.id));
+    const action = (a) => (_jsx(Button, { type: "button", variant: "secondary", size: "sm", onClick: a.onSelect, disabled: busy || a.disabled, className: cn('h-8 shrink-0', a.tone === 'destructive' && 'text-destructive hover:text-destructive', a.tone === 'success' && 'text-kortix-green hover:text-kortix-green'), children: a.label }, a.id));
     return (_jsxs(m.div, { initial: animateIn ? { opacity: 0, transform: reduceMotion ? REST : RISE } : false, animate: {
             opacity: 1,
             transform: REST,

package/dist/internal/stores/file-preview-store.d.ts

@@ -1,4 +1,19 @@
 /** @internal Kortix apps only. No semver: it may change in any release. */
+/**
+ * What the full-screen viewer shows under a file opened with one: a generated
+ * image's prompt (`text`) and the model that made it.
+ */
+export interface FileCaption {
+    text: string;
+    model?: string | null;
+    /**
+     * The sha256 of the image's bytes (R38): the viewer draws those bytes from
+     * the shared store at once, with no read.
+     */
+    sha256?: string;
+}
+/** One key per sandbox file, with or without the `/workspace/` prefix. */
+export declare function fileCaptionKey(path: string): string;
 interface FilePreviewState {
     /** Whether the preview dialog is open */
     isOpen: boolean;
@@ -6,10 +21,22 @@ interface FilePreviewState {
     filePath: string | null;
     /** Optional line number to highlight */
     lineNumber?: number;
-    /** Open the preview dialog with the given file */
-    openPreview: (filePath: string, lineNumber?: number) => void;
+    /**
+     * Captions of the files opened with one, by `fileCaptionKey`. Kept after
+     * the open: the session panel's viewer, the Files explorer and this dialog
+     * all read it for the path they show.
+     */
+    captions: Record<string, FileCaption>;
+    /** Open the preview dialog with the given file; `caption` shows under it in the viewer. */
+    openPreview: (filePath: string, lineNumber?: number, caption?: FileCaption) => void;
     /** Close the preview dialog */
     closePreview: () => void;
 }
 export declare const useFilePreviewStore: import("zustand").UseBoundStore<import("zustand").StoreApi<FilePreviewState>>;
+/**
+ * The caption the viewer shows under `filePath`, when it was opened with one.
+ * The live state on both snapshots: a static render (tests, a prerender)
+ * reads what was opened, not the store's initial state.
+ */
+export declare function useFileCaption(filePath: string): FileCaption | undefined;
 export {};