@neta-art/cohub 5.2.0 → 5.3.0

package/dist/chunks/http.d.ts

@@ -1,4 +1,4 @@
-import { $ as CreateSpacePromptInput, $i as BoardValidationResult, $n as SpaceFsTreeResponse, Ai as WorkContentKind, Ar as SpaceUsageResponse, At as Permission, Br as ChannelHealth, Bt as ReferenceAggregateGroupBy, Ci as BoardAwarenessUpdate, Cn as SpaceCommerceBenefit, Ct as LabelResourceType, Dn as SpaceCommerceOrder, Dt as ModelCatalogEntry, Er as SpaceTurnAuthorFilter, Et as MeResponse, Fi as BoardCreateInput, Fn as SpaceCreateResponse, Fr as UserRulesResponse, Ft as PublicUserPageResponse, Gi as BoardPlaybackCommand, Gt as ReferenceQueryableType, Hn as SpaceFsCreateUploadResponse, Ht as ReferenceDirection, In as SpaceDefaultResponse, J as ClaimReferralResponse, Ji as BoardPlaybackSnapshot, Jn as SpaceFsMoveInput, Jt as ReferralDashboard, K as CheckpointDiffSummary, Ln as SpaceEnvInput, Mi as BoardBootstrap, Mn as SpaceConfigInput, Mr as TaskRunDetailResponse, Ni as BoardCapabilities, Nn as SpaceConfigResponse, Nr as TaskRunRecord, Nt as PromptTemplateCatalogResponse, On as SpaceCommerceProduct, Ot as PatchResourceLabelsInput, Pn as SpaceConfigUpdateResponse, Pr as UserProfile, Pt as PublicReferral, Qi as BoardTransaction, Qn as SpaceFsReadFilesResponse, R as Channel, Rn as SpaceFsCompleteUploadInput, Rr as UserSessionsResponse, Sn as SpaceCheckpointDetailResponse, Ta as RequestSource, Tr as SpaceSessionsResponse, Ut as ReferenceKind, V as CheckpointDiffFileResponse, Vn as SpaceFsCreateUploadInput, Vt as ReferenceAggregateResponse, Wt as ReferenceQueryResponse, X as CreateInvitationResponse, Y as CreateInvitationInput, Yn as SpaceFsPreparingFile, Z as CreateSpaceInput, _a as SpaceCompletionResult, _r as SpacePresenceSnapshot, a as WebsocketClientOptions, aa as SessionForkRecord, an as SessionRecord, at as CursorPageInfo, ba as BillingPayload, br as SpaceRecord, ca as SessionTurnRecord, ci as BoardTransactionAppliedEvent$1, cn as SessionTurnSignedUrlsResponse, d as BatchUserProfilesResponse, di as RealtimePatchOperation, dn as SessionTurnsPaginatedResponse, dt as GlobalSearchType, et as CreateSpacePromptResponse, fr as SpaceMember, ft as InvitationDetail, gn as SpaceAccessPolicy, gr as SpacePendingDiffSummary, ha as CreateSpaceCompletionInput, hr as SpacePendingDiffFileResponse, ia as MessageRecord, ii as GenerationModelDeclaration, in as SessionMessagesResponse, it as CronJobUpdatePatch, kn as SpaceCommerceProductBenefitBinding, kt as PatchResourceLabelsResponse, l as AcceptInvitationResponse, la as SpaceTurnsResponse, ln as SessionTurnStreamSnapshotResponse, lr as SpaceInvitationListResponse, lt as GlobalSearchResponse, mr as SpaceModListItem, nn as SessionMessageResponse, oi as BoardAwarenessUpdatedEvent$1, on as SessionTurnIndexResponse, or as SpaceFsUploadResponse, pn as SkillCatalogResponse, q as CheckpointRecord, qn as SpaceFsFileResponse, r as WebsocketClient, ra as SpacePublicEndpoints, ri as GenerationContentBlock, rn as SessionMessagesPaginatedResponse, rt as CronJobRecord, s as WebsocketEventPayload, si as BoardPlaybackChangedEvent$1, sn as SessionTurnResponse, sr as SpaceFsWriteFileInput, tt as CreateSpaceSessionInput, un as SessionTurnWindowResponse, va as SpaceCompletionStreamEvent, vi as SessionTurnPatchEvent, vt as LabelAssignmentRecord, wi as WorkArtifactDescriptor, wn as SpaceCommerceBuyerProfile, xa as ContentBlock, xr as SpaceRole, xt as LabelListItem, ya as Usage, yr as SpacePublicProfile, yt as LabelItemsResponse, zi as BoardInspectInput, zn as SpaceFsCompleteUploadResponse, zr as ChannelConfig } from "./websocket.js";
+import { $ as CreateSpacePromptInput, $n as SpaceFsTreeResponse, Ai as WorkContentKind, Ar as SpaceUsageResponse, At as Permission, Ba as ContentBlock, Bi as UiCommandError, Br as ChannelHealth, Bt as ReferenceAggregateGroupBy, Ca as MessageRecord, Ci as BoardAwarenessUpdate, Cn as SpaceCommerceBenefit, Ct as LabelResourceType, Da as SessionTurnRecord, Dn as SpaceCommerceOrder, Dt as ModelCatalogEntry, Er as SpaceTurnAuthorFilter, Et as MeResponse, Fn as SpaceCreateResponse, Fr as UserRulesResponse, Ft as PublicUserPageResponse, Gt as ReferenceQueryableType, Hi as UiCommandStatus, Hn as SpaceFsCreateUploadResponse, Ht as ReferenceDirection, Ia as SpaceCompletionResult, In as SpaceDefaultResponse, J as ClaimReferralResponse, Jn as SpaceFsMoveInput, Jt as ReferralDashboard, K as CheckpointDiffSummary, La as SpaceCompletionStreamEvent, Ln as SpaceEnvInput, Mn as SpaceConfigInput, Mr as TaskRunDetailResponse, Nn as SpaceConfigResponse, Nr as TaskRunRecord, Nt as PromptTemplateCatalogResponse, Oa as SpaceTurnsResponse, On as SpaceCommerceProduct, Ot as PatchResourceLabelsInput, Pa as CreateSpaceCompletionInput, Pn as SpaceConfigUpdateResponse, Pr as UserProfile, Pt as PublicReferral, Qi as BoardCapabilities, Qn as SpaceFsReadFilesResponse, R as Channel, Ra as Usage, Ri as UiCommand, Rn as SpaceFsCompleteUploadInput, Rr as UserSessionsResponse, Sa as SpacePublicEndpoints, Sn as SpaceCheckpointDetailResponse, Tr as SpaceSessionsResponse, Ut as ReferenceKind, V as CheckpointDiffFileResponse, Vi as UiCommandRecord, Vn as SpaceFsCreateUploadInput, Vt as ReferenceAggregateResponse, Wa as RequestSource, Wt as ReferenceQueryResponse, X as CreateInvitationResponse, Y as CreateInvitationInput, Yn as SpaceFsPreparingFile, Z as CreateSpaceInput, Zi as BoardBootstrap, _a as BoardTransaction, _r as SpacePresenceSnapshot, a as WebsocketClientOptions, an as SessionRecord, at as CursorPageInfo, br as SpaceRecord, ci as BoardTransactionAppliedEvent$1, cn as SessionTurnSignedUrlsResponse, d as BatchUserProfilesResponse, di as RealtimePatchOperation, dn as SessionTurnsPaginatedResponse, dt as GlobalSearchType, ea as BoardCreateInput, et as CreateSpacePromptResponse, fr as SpaceMember, ft as InvitationDetail, gn as SpaceAccessPolicy, gr as SpacePendingDiffSummary, hr as SpacePendingDiffFileResponse, ia as BoardInspectInput, ii as GenerationModelDeclaration, in as SessionMessagesResponse, it as CronJobUpdatePatch, kn as SpaceCommerceProductBenefitBinding, kt as PatchResourceLabelsResponse, l as AcceptInvitationResponse, ln as SessionTurnStreamSnapshotResponse, lr as SpaceInvitationListResponse, lt as GlobalSearchResponse, mr as SpaceModListItem, nn as SessionMessageResponse, oi as BoardAwarenessUpdatedEvent$1, on as SessionTurnIndexResponse, or as SpaceFsUploadResponse, pa as BoardPlaybackSnapshot, pn as SkillCatalogResponse, q as CheckpointRecord, qn as SpaceFsFileResponse, r as WebsocketClient, ri as GenerationContentBlock, rn as SessionMessagesPaginatedResponse, rt as CronJobRecord, s as WebsocketEventPayload, si as BoardPlaybackChangedEvent$1, sn as SessionTurnResponse, sr as SpaceFsWriteFileInput, tt as CreateSpaceSessionInput, ua as BoardPlaybackCommand, un as SessionTurnWindowResponse, va as BoardValidationResult, vi as SessionTurnPatchEvent, vt as LabelAssignmentRecord, wa as SessionForkRecord, wi as WorkArtifactDescriptor, wn as SpaceCommerceBuyerProfile, xr as SpaceRole, xt as LabelListItem, yr as SpacePublicProfile, yt as LabelItemsResponse, za as BillingPayload, zn as SpaceFsCompleteUploadResponse, zr as ChannelConfig } from "./websocket.js";
 import { n as CohubEnvironment } from "./environment.js";
 import { a as VoiceInputCreateOptions } from "./voice-input.js";
 //#region ../protocol/dist/model/status.d.ts
@@ -1616,6 +1616,37 @@ declare class TasksApi {
   }>;
 }
 //#endregion
+//#region src/apis/ui-commands.d.ts
+type CreateUiCommandInput = {
+  command: UiCommand;
+  commandId?: string;
+  targetClientId?: string;
+};
+type WaitForUiCommandOptions = {
+  timeoutMs?: number;
+  pollIntervalMs?: number;
+  signal?: AbortSignal;
+};
+declare class UiCommandsApi {
+  private readonly transport;
+  constructor(transport: HttpTransport);
+  create(input: CreateUiCommandInput): Promise<{
+    command: UiCommandRecord;
+  }>;
+  get(commandId: string): Promise<{
+    command: UiCommandRecord;
+  }>;
+  reportResult(commandId: string, input: {
+    status: UiCommandStatus;
+    result?: unknown;
+    error?: UiCommandError | null;
+  }): Promise<{
+    command: UiCommandRecord;
+  }>;
+  run(input: CreateUiCommandInput, options?: WaitForUiCommandOptions): Promise<UiCommandRecord>;
+  wait(commandId: string, options?: WaitForUiCommandOptions): Promise<UiCommandRecord>;
+}
+//#endregion
 //#region src/apis/user.d.ts
 declare class UserApi {
   private readonly transport;
@@ -1991,10 +2022,11 @@ declare class CohubHttpClient {
   readonly referrals: ReferralsApi;
   readonly works: WorksApi;
   readonly workCommerce: WorkCommerceApi;
+  readonly ui: UiCommandsApi;
   private readonly transport;
   constructor(options?: CohubClientOptions);
   space(spaceId: string): SpaceClient;
 }
 declare const createHttpClient: (options?: CohubClientOptions) => CohubHttpClient;
 //#endregion
-export { WebSocketConnectionState as $, sanitizeAccessToken as $t, WorkViewSource as A, CreatePublicAssetUploadInput as At, BoardEventName as B, SkillsApi as Bt, WorkRecord as C, SessionPatchState as Ct, WorkTargetType as D, ReferenceResourceSelector as Dt, WorkStatus as E, SessionAccessApi as Et, UsersApi as F, PublicAssetUploadProtocol as Ft, BoardTransactionInput as G, ChannelsApi as Gt, BoardSubscriptionHandlers as H, ModelsApi as Ht, UserApi as I, PublicAssetsApi as It, SpaceChannelBindingRecord as J, HttpError as Jt, SessionEventName as K, CohubClientOptions as Kt, TasksApi as L, UploadChatAttachmentInput as Lt, WorkVisibility as M, PublicAssetMimeType as Mt, WorksApi as N, PublicAssetPurpose as Nt, WorkUpdateInput as O, ReferencesApi as Ot, ReferralsApi as P, PublicAssetUploadProgress as Pt, SpacesApi as Q, matchesUnauthorizedErrorToken as Qt, BoardAwarenessUpdatedEvent as R, UploadChatImageAttachmentInput as Rt, WorkPublicSpaceRecord as S, SessionPatchReducer as St, WorkSessionResponse as T, createSessionPatchReducer as Tt, BoardTransactionAppliedEvent as U, GenerationsApi as Ut, BoardPlaybackChangedEvent as V, PromptsApi as Vt, BoardTransactionError as W, CronJobsApi as Wt, SpaceEventName as X, RawHttpResponse as Xt, SpaceClient as Y, HttpTransport as Yt, SpaceTurnListOptions as Z, joinApiUrl as Zt, WorkExtractedPageMeta as _, GenerationUsageBilling as _n, SessionGenerationStreamClient as _t, WorkCommerceCreditConsumeResponse as a, WorkRuntimeCheckoutStatus as an, AssistantMessageCommit as at, WorkPresentationMeta as b, ModelStatusEntry as bn, SessionPatchApplyInput as bt, WorkCommerceEntitlementsResponse as c, WorkRuntimeRequestOptions as cn, GenerationStreamEvent as ct, WorkCommercePurchaseResponse as d, createWorkRuntime as dn, GenerationStreamLifecycleEvent as dt, ParentBridgeTransport as en, BuildSpaceInvitePathInput as et, WorkAuthorizeResponse as f, resolveWorkTransport as fn, GenerationStreamOutOfSyncEvent as ft, WorkDetailResponse as g, GenerationTaskResult as gn, GenerationStreamTurnUpdatedEvent as gt, WorkCreateInput as h, CreateGenerationTaskResponse as hn, GenerationStreamSubscriptionHandlers as ht, WorkCommerceCheckoutStatus as i, WorkRuntimeCheckoutState as in, buildSpacePath as it, WorkViewStatsResponse as j, CreatePublicAssetUploadResponse as jt, WorkVersionRecord as k, SearchApi as kt, WorkCommerceOrder as l, WorkRuntimeTransport as ln, GenerationStreamFinalizedEvent as lt, WorkContentDownload as m, CreateGenerationTaskRequest as mn, GenerationStreamSubscribeOptions as mt, createHttpClient as n, WorkIdResolver as nn, PublicInviteApi as nt, WorkCommerceCreditConsumeStatus as o, WorkRuntimeContext as on, GenerationStreamCommitEvent as ot, WorkContent as p, SpaceStartupResponse as pn, GenerationStreamStateEvent as pt, SessionSubscriptionHandlers as q, Fetch as qt, WorkCommerceApi as r, WorkRuntimeApi as rn, buildSpaceInvitePath as rt, WorkCommerceEntitlement as s, WorkRuntimeModeConfig as sn, GenerationStreamErrorEvent as st, CohubHttpClient as t, PopupBrokerTransport as tn, BuildSpacePathInput as tt, WorkCommerceProductResolveResponse as u, createSlugWorkIdResolver as un, GenerationStreamIntermediateMessage as ut, WorkGetResponse as v, ListGenerationModelsResponse as vn, createSessionGenerationStreamClient as vt, WorkResolveResponse as w, SessionPatchStatus as wt, WorkPublicOwnerRecord as x, ModelStatusResponse as xn, SessionPatchApplyResult as xt, WorkMeta as y, PublicGenerationDeclaration as yn, parseAssistantMessageCommit as yt, BoardClient as z, UploadPublicAssetInput as zt };
+export { SpaceEventName as $, RawHttpResponse as $t, WorkViewSource as A, ReferenceResourceSelector as At, TasksApi as B, UploadChatAttachmentInput as Bt, WorkRecord as C, ModelStatusEntry as Cn, SessionPatchApplyInput as Ct, WorkTargetType as D, SessionPatchStatus as Dt, WorkStatus as E, SessionPatchState as Et, UsersApi as F, PublicAssetMimeType as Ft, BoardSubscriptionHandlers as G, ModelsApi as Gt, BoardClient as H, UploadPublicAssetInput as Ht, UserApi as I, PublicAssetPurpose as It, BoardTransactionInput as J, ChannelsApi as Jt, BoardTransactionAppliedEvent as K, GenerationsApi as Kt, CreateUiCommandInput as L, PublicAssetUploadProgress as Lt, WorkVisibility as M, SearchApi as Mt, WorksApi as N, CreatePublicAssetUploadInput as Nt, WorkUpdateInput as O, createSessionPatchReducer as Ot, ReferralsApi as P, CreatePublicAssetUploadResponse as Pt, SpaceClient as Q, HttpTransport as Qt, UiCommandsApi as R, PublicAssetUploadProtocol as Rt, WorkPublicSpaceRecord as S, PublicGenerationDeclaration as Sn, parseAssistantMessageCommit as St, WorkSessionResponse as T, SessionPatchReducer as Tt, BoardEventName as U, SkillsApi as Ut, BoardAwarenessUpdatedEvent as V, UploadChatImageAttachmentInput as Vt, BoardPlaybackChangedEvent as W, PromptsApi as Wt, SessionSubscriptionHandlers as X, Fetch as Xt, SessionEventName as Y, CohubClientOptions as Yt, SpaceChannelBindingRecord as Z, HttpError as Zt, WorkExtractedPageMeta as _, CreateGenerationTaskRequest as _n, GenerationStreamSubscribeOptions as _t, WorkCommerceCreditConsumeResponse as a, WorkIdResolver as an, PublicInviteApi as at, WorkPresentationMeta as b, GenerationUsageBilling as bn, SessionGenerationStreamClient as bt, WorkCommerceEntitlementsResponse as c, WorkRuntimeCheckoutStatus as cn, AssistantMessageCommit as ct, WorkCommercePurchaseResponse as d, WorkRuntimeRequestOptions as dn, GenerationStreamEvent as dt, joinApiUrl as en, SpaceTurnListOptions as et, WorkAuthorizeResponse as f, WorkRuntimeTransport as fn, GenerationStreamFinalizedEvent as ft, WorkDetailResponse as g, SpaceStartupResponse as gn, GenerationStreamStateEvent as gt, WorkCreateInput as h, resolveWorkTransport as hn, GenerationStreamOutOfSyncEvent as ht, WorkCommerceCheckoutStatus as i, PopupBrokerTransport as in, BuildSpacePathInput as it, WorkViewStatsResponse as j, ReferencesApi as jt, WorkVersionRecord as k, SessionAccessApi as kt, WorkCommerceOrder as l, WorkRuntimeContext as ln, GenerationStreamCommitEvent as lt, WorkContentDownload as m, createWorkRuntime as mn, GenerationStreamLifecycleEvent as mt, createHttpClient as n, sanitizeAccessToken as nn, WebSocketConnectionState as nt, WorkCommerceCreditConsumeStatus as o, WorkRuntimeApi as on, buildSpaceInvitePath as ot, WorkContent as p, createSlugWorkIdResolver as pn, GenerationStreamIntermediateMessage as pt, BoardTransactionError as q, CronJobsApi as qt, WorkCommerceApi as r, ParentBridgeTransport as rn, BuildSpaceInvitePathInput as rt, WorkCommerceEntitlement as s, WorkRuntimeCheckoutState as sn, buildSpacePath as st, CohubHttpClient as t, matchesUnauthorizedErrorToken as tn, SpacesApi as tt, WorkCommerceProductResolveResponse as u, WorkRuntimeModeConfig as un, GenerationStreamErrorEvent as ut, WorkGetResponse as v, CreateGenerationTaskResponse as vn, GenerationStreamSubscriptionHandlers as vt, WorkResolveResponse as w, ModelStatusResponse as wn, SessionPatchApplyResult as wt, WorkPublicOwnerRecord as x, ListGenerationModelsResponse as xn, createSessionGenerationStreamClient as xt, WorkMeta as y, GenerationTaskResult as yn, GenerationStreamTurnUpdatedEvent as yt, WaitForUiCommandOptions as z, PublicAssetsApi as zt };

package/dist/chunks/http.js

@@ -1,4 +1,4 @@
-import { T as getRealtimeSpaceRoom, n as HttpTransport, t as HttpError, w as getRealtimeBoardRoom } from "./transport.js";
+import { E as getRealtimeSpaceRoom, T as getRealtimeBoardRoom, n as HttpTransport, t as HttpError } from "./transport.js";
 import { a as resolveApiBaseUrl } from "./environment.js";
 //#region src/apis/channels.ts
 var ChannelsApi = class {
@@ -82,7 +82,7 @@ var CronJobsApi = class {
 //#region src/apis/generations.ts
 const DEFAULT_INTERVAL_MS = 1500;
 const DEFAULT_TIMEOUT_MS = 1800 * 1e3;
-function sleep(ms, signal) {
+function sleep$1(ms, signal) {
 	if (signal?.aborted) return Promise.reject(signal.reason ?? /* @__PURE__ */ new Error("Generation wait aborted"));
 	return new Promise((resolve, reject) => {
 		const cleanup = () => signal?.removeEventListener("abort", onAbort);
@@ -147,7 +147,7 @@ var GenerationsApi = class {
 			}
 			const remainingMs = timeoutMs - (Date.now() - startedAt);
 			if (remainingMs <= 0) throw new Error(`Generation task timed out after ${timeoutMs}ms`);
-			await sleep(Math.min(intervalMs, remainingMs), options.signal);
+			await sleep$1(Math.min(intervalMs, remainingMs), options.signal);
 		}
 	}
 	async createAndWait(request, options) {
@@ -847,8 +847,8 @@ const createSessionPatchReducer = () => new SessionPatchReducer();
 //#region src/session-generation-stream.ts
 const SNAPSHOT_RECOVERY_TIMEOUT_MS = 2500;
 const SNAPSHOT_RECOVERY_MAX_BUFFERED_EVENTS = 256;
-const isRecord = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
-const isContentBlockArray = (value) => Array.isArray(value) && value.every((item) => isRecord(item) && typeof item.type === "string");
+const isRecord$1 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const isContentBlockArray = (value) => Array.isArray(value) && value.every((item) => isRecord$1(item) && typeof item.type === "string");
 const getMessageKind = (message) => {
 	const kind = message.meta?.messageKind;
 	return typeof kind === "string" ? kind : null;
@@ -888,7 +888,7 @@ function parseAssistantMessageCommit(message) {
 }
 function messageRecordToIntermediate(message) {
 	if (!isContentBlockArray(message.content) || message.content.length === 0) return null;
-	const meta = isRecord(message.meta) ? message.meta : {};
+	const meta = isRecord$1(message.meta) ? message.meta : {};
 	return {
 		id: message.id,
 		sessionId: message.sessionId,
@@ -1006,9 +1006,9 @@ function mergeMessagesSharingToolUseId(messages) {
 	return merged;
 }
 function getCompactionPlacement(message) {
-	const meta = isRecord(message.meta) ? message.meta : null;
-	const compaction = isRecord(meta?.compaction) ? meta.compaction : null;
-	const placement = isRecord(compaction?.placement) ? compaction.placement : null;
+	const meta = isRecord$1(message.meta) ? message.meta : null;
+	const compaction = isRecord$1(meta?.compaction) ? meta.compaction : null;
+	const placement = isRecord$1(compaction?.placement) ? compaction.placement : null;
 	return meta?.messageKind === "compacted" ? {
 		beforeMessageId: typeof placement?.beforeMessageId === "string" ? placement.beforeMessageId : null,
 		sequence: typeof message.sequence === "number" ? message.sequence : null
@@ -1282,7 +1282,7 @@ var SessionGenerationStreamClient = class SessionGenerationStreamClient {
 	}
 	handlePersisted(event, handlers) {
 		const message = event.payload.message;
-		if (!isRecord(message)) return;
+		if (!isRecord$1(message)) return;
 		const commit = parseAssistantMessageCommit(message);
 		if (commit.kind === "intermediate") {
 			const intermediate = messageRecordToIntermediate(commit.message);
@@ -1317,7 +1317,7 @@ var SessionGenerationStreamClient = class SessionGenerationStreamClient {
 	}
 	handleFinalized(event, handlers) {
 		const turn = event.payload.turn;
-		if (!isRecord(turn)) return;
+		if (!isRecord$1(turn)) return;
 		const typedTurn = turn;
 		if (typedTurn.status === "interrupted") this.reducer.interrupt({
 			spaceId: this.spaceId,
@@ -1349,7 +1349,7 @@ var SessionGenerationStreamClient = class SessionGenerationStreamClient {
 				return;
 			case "session.turn.updated": {
 				const turn = event.payload.turn;
-				if (!isRecord(turn)) return;
+				if (!isRecord$1(turn)) return;
 				this.emit(handlers, {
 					type: "turn_updated",
 					turn,
@@ -2863,6 +2863,231 @@ var TasksApi = class {
 	}
 };
 //#endregion
+//#region ../protocol/dist/ui-command.js
+/**
+* Lets an agent drive the Cohub frontend that originated the work. Routing comes
+* from request provenance, never a caller-supplied target, so a command only
+* reaches the actor's own instances.
+*/
+const UI_COMMAND_VERSION = 1;
+/** Persisted and broadcast, so every field is capped; MAX_BYTES bounds the whole. */
+const UI_COMMAND_PAYLOAD_MAX_BYTES = 32 * 1024;
+const UI_COMMAND_MAX_BYTES = 40 * 1024;
+const UI_COMMAND_LAUNCH_MAX_LENGTH = 2048;
+const UI_COMMAND_DEFAULT_TIMEOUT_MS = 600 * 1e3;
+const UI_COMMAND_MAX_TIMEOUT_MS = 720 * 60 * 1e3;
+const UI_COMMAND_SETTLEMENT_GRACE_SECONDS = 600;
+/** Keeps pending commands reportable for the full wait window plus settlement grace. */
+const UI_COMMAND_PENDING_TTL_SECONDS = 43800;
+const UI_COMMAND_TERMINAL_TTL_SECONDS = 1800;
+const UI_COMMAND_TERMINAL_STATUSES = [
+	"applied",
+	"no_active_client",
+	"ui_host_unavailable",
+	"rejected",
+	"unsupported",
+	"timeout"
+];
+const isTerminalUiCommandStatus = (status) => UI_COMMAND_TERMINAL_STATUSES.includes(status);
+const METHOD_RE = /^[A-Za-z][A-Za-z0-9_.:-]{0,63}$/;
+const isUiSurfaceMethod = (value) => typeof value === "string" && METHOD_RE.test(value);
+const WORK_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const UI_COMMAND_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+const parseUiCommandId = (value) => {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return UI_COMMAND_ID_RE.test(trimmed) ? trimmed : null;
+};
+const isRecord = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const asTrimmed = (value) => {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	return trimmed ? trimmed : null;
+};
+const parseLaunch = (value) => {
+	if (!isRecord(value)) return void 0;
+	const search = asTrimmed(value.search);
+	const hash = asTrimmed(value.hash);
+	if (!search && !hash) return void 0;
+	return {
+		...search ? { search: search.startsWith("?") ? search : `?${search}` } : {},
+		...hash ? { hash: hash.startsWith("#") ? hash : `#${hash}` } : {}
+	};
+};
+const measureUiCommandPayload = (value) => {
+	if (value === void 0) return 0;
+	try {
+		return new TextEncoder().encode(JSON.stringify(value) ?? "").length;
+	} catch {
+		return null;
+	}
+};
+const parseUiCommand = (input) => {
+	if (!isRecord(input)) return {
+		command: null,
+		error: "command must be an object"
+	};
+	if (input.type !== "preview.show") return {
+		command: null,
+		error: "command.type must be one of: preview.show"
+	};
+	const preview = input.preview;
+	if (!isRecord(preview)) return {
+		command: null,
+		error: "command.preview is required"
+	};
+	if (preview.kind !== "work") return {
+		command: null,
+		error: "command.preview.kind must be one of: work"
+	};
+	const workId = asTrimmed(preview.workId);
+	if (!workId) return {
+		command: null,
+		error: "command.preview.workId is required"
+	};
+	if (!WORK_ID_RE.test(workId)) return {
+		command: null,
+		error: "command.preview.workId must be a Work id"
+	};
+	const label = asTrimmed(preview.label);
+	if (label && label.length > 200) return {
+		command: null,
+		error: `command.preview.label exceeds 200 characters`
+	};
+	const launch = parseLaunch(preview.launch);
+	if (launch) {
+		for (const [field, value] of [["search", launch.search], ["hash", launch.hash]]) if (value && value.length > 2048) return {
+			command: null,
+			error: `command.preview.launch.${field} exceeds ${UI_COMMAND_LAUNCH_MAX_LENGTH} characters`
+		};
+	}
+	let request;
+	if (input.request !== void 0 && input.request !== null) {
+		if (!isRecord(input.request)) return {
+			command: null,
+			error: "command.request must be an object"
+		};
+		const method = asTrimmed(input.request.method);
+		if (!method) return {
+			command: null,
+			error: "command.request.method is required"
+		};
+		if (!isUiSurfaceMethod(method)) return {
+			command: null,
+			error: "command.request.method has an unsupported format"
+		};
+		const size = measureUiCommandPayload(input.request.input);
+		if (size === null) return {
+			command: null,
+			error: "command.request.input must be JSON-serializable"
+		};
+		if (size > 32768) return {
+			command: null,
+			error: `command.request.input exceeds ${UI_COMMAND_PAYLOAD_MAX_BYTES} bytes`
+		};
+		request = {
+			method,
+			...input.request.input === void 0 ? {} : { input: input.request.input }
+		};
+	}
+	const command = {
+		type: "preview.show",
+		preview: {
+			kind: "work",
+			workId,
+			...label ? { label } : {},
+			...launch ? { launch } : {}
+		},
+		...request ? { request } : {}
+	};
+	const totalSize = measureUiCommandPayload(command);
+	if (totalSize === null) return {
+		command: null,
+		error: "command must be JSON-serializable"
+	};
+	if (totalSize > 40960) return {
+		command: null,
+		error: `command exceeds ${UI_COMMAND_MAX_BYTES} bytes`
+	};
+	return {
+		command,
+		error: null
+	};
+};
+//#endregion
+//#region src/apis/ui-commands.ts
+const DEFAULT_POLL_INTERVAL_MS = 300;
+const resolveTimeoutMs = (timeoutMs) => {
+	const value = timeoutMs ?? 6e5;
+	if (!Number.isFinite(value) || value <= 0 || value > 432e5) throw new RangeError(`timeoutMs must be between 1 and ${UI_COMMAND_MAX_TIMEOUT_MS} milliseconds`);
+	return value;
+};
+const sleep = (ms, signal) => new Promise((resolve, reject) => {
+	if (signal?.aborted) {
+		reject(/* @__PURE__ */ new Error("aborted"));
+		return;
+	}
+	const timer = setTimeout(() => {
+		signal?.removeEventListener("abort", onAbort);
+		resolve();
+	}, ms);
+	const onAbort = () => {
+		clearTimeout(timer);
+		reject(/* @__PURE__ */ new Error("aborted"));
+	};
+	signal?.addEventListener("abort", onAbort, { once: true });
+});
+var UiCommandsApi = class {
+	transport;
+	constructor(transport) {
+		this.transport = transport;
+	}
+	create(input) {
+		return this.transport.request("/api/ui/commands", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+	}
+	get(commandId) {
+		return this.transport.request(`/api/ui/commands/${encodeURIComponent(commandId)}`);
+	}
+	reportResult(commandId, input) {
+		return this.transport.request(`/api/ui/commands/${encodeURIComponent(commandId)}/result`, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(input)
+		});
+	}
+	async run(input, options = {}) {
+		const { command } = await this.create(input);
+		if (isTerminalUiCommandStatus(command.status)) return command;
+		return this.wait(command.commandId, options);
+	}
+	async wait(commandId, options = {}) {
+		const timeoutMs = resolveTimeoutMs(options.timeoutMs);
+		const pollIntervalMs = Math.max(50, options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS);
+		const deadline = Date.now() + timeoutMs;
+		let latest = (await this.get(commandId)).command;
+		while (!isTerminalUiCommandStatus(latest.status)) {
+			const remaining = deadline - Date.now();
+			if (remaining <= 0) break;
+			await sleep(Math.min(pollIntervalMs, remaining), options.signal);
+			latest = (await this.get(commandId)).command;
+		}
+		if (isTerminalUiCommandStatus(latest.status)) return latest;
+		return {
+			...latest,
+			status: "timeout",
+			error: {
+				code: "timeout",
+				message: "No Cohub frontend reported a result before the timeout."
+			},
+			settledAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+	}
+};
+//#endregion
 //#region src/apis/user.ts
 var UserApi = class {
 	transport;
@@ -3104,6 +3329,7 @@ var CohubHttpClient = class {
 	referrals;
 	works;
 	workCommerce;
+	ui;
 	transport;
 	constructor(options = {}) {
 		const apiBaseUrl = resolveApiBaseUrl(options);
@@ -3126,6 +3352,7 @@ var CohubHttpClient = class {
 		this.referrals = new ReferralsApi(this.transport);
 		this.works = new WorksApi(this.transport);
 		this.workCommerce = new WorkCommerceApi(this.transport);
+		this.ui = new UiCommandsApi(this.transport);
 	}
 	space(spaceId) {
 		return new SpaceClient(spaceId, this.transport, null);
@@ -3133,4 +3360,4 @@ var CohubHttpClient = class {
 };
 const createHttpClient = (options) => new CohubHttpClient(options);
 //#endregion
-export { CronJobsApi as A, ReferencesApi as C, PromptsApi as D, SkillsApi as E, ModelsApi as O, SessionAccessApi as S, PublicAssetsApi as T, createSessionGenerationStreamClient as _, ReferralsApi as a, createSessionPatchReducer as b, TasksApi as c, SpaceClient as d, SpacesApi as f, SessionGenerationStreamClient as g, buildSpacePath as h, WorksApi as i, ChannelsApi as j, GenerationsApi as k, BoardClient as l, buildSpaceInvitePath as m, createHttpClient as n, UsersApi as o, PublicInviteApi as p, WorkCommerceApi as r, UserApi as s, CohubHttpClient as t, BoardTransactionError as u, parseAssistantMessageCommit as v, SearchApi as w, ensureRealtimeConnected as x, SessionPatchReducer as y };
+export { parseAssistantMessageCommit as A, ModelsApi as B, SpaceClient as C, buildSpacePath as D, buildSpaceInvitePath as E, ReferencesApi as F, CronJobsApi as H, SearchApi as I, PublicAssetsApi as L, createSessionPatchReducer as M, ensureRealtimeConnected as N, SessionGenerationStreamClient as O, SessionAccessApi as P, SkillsApi as R, BoardTransactionError as S, PublicInviteApi as T, ChannelsApi as U, GenerationsApi as V, isUiSurfaceMethod as _, ReferralsApi as a, TasksApi as b, UiCommandsApi as c, UI_COMMAND_PAYLOAD_MAX_BYTES as d, UI_COMMAND_PENDING_TTL_SECONDS as f, isTerminalUiCommandStatus as g, UI_COMMAND_VERSION as h, WorksApi as i, SessionPatchReducer as j, createSessionGenerationStreamClient as k, UI_COMMAND_DEFAULT_TIMEOUT_MS as l, UI_COMMAND_TERMINAL_TTL_SECONDS as m, createHttpClient as n, UsersApi as o, UI_COMMAND_SETTLEMENT_GRACE_SECONDS as p, WorkCommerceApi as r, UserApi as s, CohubHttpClient as t, UI_COMMAND_MAX_TIMEOUT_MS as u, parseUiCommand as v, SpacesApi as w, BoardClient as x, parseUiCommandId as y, PromptsApi as z };

package/dist/chunks/transport.js

@@ -49,11 +49,15 @@ const COHUB_SOURCE_HEADER = {
 	session: "X-Cohub-Source-Session",
 	turn: "X-Cohub-Source-Turn",
 	toolCall: "X-Cohub-Source-Tool-Call",
+	client: "X-Cohub-Source-Client",
 	via: "X-Cohub-Source-Via"
 };
 const UUID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 const isRequestSourceUuid = (value) => typeof value === "string" && UUID_RE.test(value);
 const REQUEST_SOURCE_VIA_MAX_LENGTH = 64;
+/** Opaque, url-safe client instance id. */
+const CLIENT_ID_RE = /^[A-Za-z0-9_-]{8,64}$/;
+const isRequestSourceClientId = (value) => typeof value === "string" && CLIENT_ID_RE.test(value);
 /** Remove C0 controls and DEL without a control-char regex (biome-friendly). */
 const stripControlChars = (value) => {
 	let out = "";
@@ -77,13 +81,17 @@ const asVia = (value) => {
 	if (!cleaned) return void 0;
 	return cleaned.slice(0, 64);
 };
+const asClientId = (value) => {
+	const cleaned = asNonEmpty(value);
+	return cleaned && isRequestSourceClientId(cleaned) ? cleaned : void 0;
+};
 const isRequestSourceEmpty = (source) => {
 	if (!source) return true;
-	return !source.spaceId && !source.sessionId && !source.turnId && !source.toolCallId && !source.via;
+	return !source.spaceId && !source.sessionId && !source.turnId && !source.toolCallId && !source.clientId && !source.via;
 };
 const hasRequestSourceIdentity = (source) => {
 	if (!source) return false;
-	return Boolean(source.spaceId || source.sessionId || source.turnId || source.toolCallId);
+	return Boolean(source.spaceId || source.sessionId || source.turnId || source.toolCallId || source.clientId);
 };
 /** Drop invalid UUIDs; via-only is valid. */
 const normalizeRequestSource = (input) => {
@@ -93,12 +101,14 @@ const normalizeRequestSource = (input) => {
 	const sessionId = asUuid(record.sessionId);
 	const turnId = asUuid(record.turnId);
 	const toolCallId = asUuid(record.toolCallId);
+	const clientId = asClientId(record.clientId);
 	const via = asVia(record.via);
 	const source = {
 		...spaceId ? { spaceId } : {},
 		...sessionId ? { sessionId } : {},
 		...turnId ? { turnId } : {},
 		...toolCallId ? { toolCallId } : {},
+		...clientId ? { clientId } : {},
 		...via ? { via } : {}
 	};
 	return isRequestSourceEmpty(source) ? null : source;
@@ -108,6 +118,7 @@ const parseRequestSourceFromHeaders = (getHeader) => normalizeRequestSource({
 	sessionId: getHeader(COHUB_SOURCE_HEADER.session),
 	turnId: getHeader(COHUB_SOURCE_HEADER.turn),
 	toolCallId: getHeader(COHUB_SOURCE_HEADER.toolCall),
+	clientId: getHeader(COHUB_SOURCE_HEADER.client),
 	via: getHeader(COHUB_SOURCE_HEADER.via)
 });
 const requestSourceToHeaders = (source) => {
@@ -118,6 +129,7 @@ const requestSourceToHeaders = (source) => {
 	if (normalized.sessionId) headers[COHUB_SOURCE_HEADER.session] = normalized.sessionId;
 	if (normalized.turnId) headers[COHUB_SOURCE_HEADER.turn] = normalized.turnId;
 	if (normalized.toolCallId) headers[COHUB_SOURCE_HEADER.toolCall] = normalized.toolCallId;
+	if (normalized.clientId) headers[COHUB_SOURCE_HEADER.client] = normalized.clientId;
 	if (normalized.via) headers[COHUB_SOURCE_HEADER.via] = normalized.via;
 	return headers;
 };
@@ -127,6 +139,7 @@ const readRequestSourceFromEnv = (env = {}, defaults) => normalizeRequestSource(
 	sessionId: env.COHUB_SESSION_ID,
 	turnId: env.COHUB_TURN_ID,
 	toolCallId: env.COHUB_TOOL_CALL_ID,
+	clientId: env.COHUB_SOURCE_CLIENT_ID,
 	via: env.COHUB_SOURCE_VIA ?? defaults?.via
 });
 const resolveRequestSourceChannel = (source, fallback = "public_api") => {
@@ -390,4 +403,4 @@ var HttpTransport = class {
 	}
 };
 //#endregion
-export { WS_ROOM_SUBSCRIPTION_CAPABILITY as C, normalizeRealtimeRooms as D, getSessionTurnPatchStreamKey as E, WS_REALTIME_ROOM_CAPABILITY as S, getRealtimeSpaceRoom as T, resolveRequestSourceChannel as _, sanitizeAccessToken as a, WS_BOARD_AWARENESS_CAPABILITY as b, REQUEST_SOURCE_VIA_MAX_LENGTH as c, isRequestSourceUuid as d, mergeRequestSourceIntoMeta as f, requestSourceToHeaders as g, readRequestSourceFromEnv as h, matchesUnauthorizedErrorToken as i, hasRequestSourceIdentity as l, parseRequestSourceFromHeaders as m, HttpTransport as n, COHUB_SOURCE_HEADER as o, normalizeRequestSource as p, joinApiUrl as r, COHUB_SOURCE_HEADER_NAMES as s, HttpError as t, isRequestSourceEmpty as u, REALTIME_ROOM_EVENT_NAME_PATTERN as v, getRealtimeBoardRoom as w, WS_COMPACT_STREAM_CAPABILITY as x, REALTIME_ROOM_MAX_PAYLOAD_BYTES as y };
+export { WS_REALTIME_ROOM_CAPABILITY as C, getSessionTurnPatchStreamKey as D, getRealtimeSpaceRoom as E, normalizeRealtimeRooms as O, WS_COMPACT_STREAM_CAPABILITY as S, getRealtimeBoardRoom as T, requestSourceToHeaders as _, sanitizeAccessToken as a, REALTIME_ROOM_MAX_PAYLOAD_BYTES as b, REQUEST_SOURCE_VIA_MAX_LENGTH as c, isRequestSourceEmpty as d, isRequestSourceUuid as f, readRequestSourceFromEnv as g, parseRequestSourceFromHeaders as h, matchesUnauthorizedErrorToken as i, hasRequestSourceIdentity as l, normalizeRequestSource as m, HttpTransport as n, COHUB_SOURCE_HEADER as o, mergeRequestSourceIntoMeta as p, joinApiUrl as r, COHUB_SOURCE_HEADER_NAMES as s, HttpError as t, isRequestSourceClientId as u, resolveRequestSourceChannel as v, WS_ROOM_SUBSCRIPTION_CAPABILITY as w, WS_BOARD_AWARENESS_CAPABILITY as x, REALTIME_ROOM_EVENT_NAME_PATTERN as y };