@neta-art/cohub 8.21.1 → 8.23.0

package/dist/index.js

@@ -14,15 +14,28 @@ const appAuthorizationTargetSchema = z.discriminatedUnion("kind", [
 	}),
 	z.object({ kind: z.literal("pick-space") })
 ]);
-const APP_SILENT_SHELL_SCOPE_SET = /* @__PURE__ */ new Set([
+/**
+* Read-only scopes the Shell may renew without a dialog for any App on the
+* Space it shows. The API still checks the viewer's own permissions.
+*/
+const APP_SILENT_SHELL_SCOPES = [
 	"space.view",
 	"file.view",
 	"file.view.filtered",
 	"session.view",
 	"taskrun.view",
 	"checkpoint.view"
-]);
+];
+const APP_SILENT_SHELL_SCOPE_SET = new Set(APP_SILENT_SHELL_SCOPES);
 const isAppSilentShellScope = (scope) => APP_SILENT_SHELL_SCOPE_SET.has(scope);
+/**
+* The API-enforced ceiling for Host consent (`consent: "host"`), given to Apps
+* the Shell Space published or installed. Trust is decided by the Shell, the
+* only holder of the viewer's token.
+*/
+const APP_HOST_CONSENT_SCOPES = [...APP_SILENT_SHELL_SCOPES, "file.edit"];
+const APP_HOST_CONSENT_SCOPE_SET = new Set(APP_HOST_CONSENT_SCOPES);
+const isAppHostConsentScope = (scope) => APP_HOST_CONSENT_SCOPE_SET.has(scope);
 const appAuthorizationRequestSchema = z.object({
 	target: appAuthorizationTargetSchema,
 	scopes: z.array(z.string().min(1)).min(1).max(128),
@@ -281,8 +294,8 @@ const BUILTIN_VERSIONS = new Set(BOARD_BUILTIN_CAPABILITIES.map((c) => `${c.kind
 function isBuiltinBoardCapability(kind, id, version) {
 	return BUILTIN_VERSIONS.has(`${kind}:${id}@${version}`);
 }
-const record = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
-const finite = (value) => typeof value === "number" && Number.isFinite(value);
+const record$1 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const finite$1 = (value) => typeof value === "number" && Number.isFinite(value);
 function validateBuiltinBoardClip(clip, path = "clip") {
 	if (!CLIPS.has(clip.kind)) return [];
 	const errors = [];
@@ -300,13 +313,13 @@ function validateBuiltinBoardClip(clip, path = "clip") {
 	if (clip.kind === "motion.path") {
 		const points = clip.params.points;
 		if (!Array.isArray(points) || points.length < 2 || points.length > 1e4) error("motion path must contain 2 to 10000 world-offset points", "params.points", "world-offset");
-		else for (const [index, point] of points.entries()) if (!record(point) || !finite(point.x) || !finite(point.y)) error("motion path point must contain finite x and y", `params.points.${index}`, "world-offset");
+		else for (const [index, point] of points.entries()) if (!record$1(point) || !finite$1(point.x) || !finite$1(point.y)) error("motion path point must contain finite x and y", `params.points.${index}`, "world-offset");
 	}
 	if (clip.kind === "effects.particles") {
 		const count = clip.params.count;
 		if (!Number.isSafeInteger(count) || count < 1 || count > DEFAULT_BOARD_RENDER_LIMITS.particles) error(`particle count must be an integer from 1 to ${DEFAULT_BOARD_RENDER_LIMITS.particles}`, "params.count", void 0, "INVALID_PARTICLE_COUNT");
 		const bounds = clip.params.bounds;
-		if (!record(bounds) || !finite(bounds.x) || !finite(bounds.y) || !finite(bounds.width) || !finite(bounds.height) || bounds.width <= 0 || bounds.height <= 0) error("particles require positive finite world bounds", "params.bounds", "world", "PARTICLE_BOUNDS_REQUIRED");
+		if (!record$1(bounds) || !finite$1(bounds.x) || !finite$1(bounds.y) || !finite$1(bounds.width) || !finite$1(bounds.height) || bounds.width <= 0 || bounds.height <= 0) error("particles require positive finite world bounds", "params.bounds", "world", "PARTICLE_BOUNDS_REQUIRED");
 	}
 	if (clip.kind === "camera.focus") {
 		const parsed = BoardCameraFocusParamsSchema.safeParse(clip.params);
@@ -1036,14 +1049,14 @@ var GenerationPolicyError = class extends Error {
 		this.name = "GenerationPolicyError";
 	}
 };
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function isPrimitiveEnumValue(value) {
 	return typeof value === "string" || typeof value === "number" || typeof value === "boolean";
 }
 function normalizeConstraint(value) {
-	if (!isRecord$4(value) || typeof value.kind !== "string") return null;
+	if (!isRecord$5(value) || typeof value.kind !== "string") return null;
 	if (value.kind === "enum") {
 		if (!Array.isArray(value.values) || value.values.length === 0 || !value.values.every(isPrimitiveEnumValue)) return null;
 		return {
@@ -1073,7 +1086,7 @@ function normalizeConstraint(value) {
 	return null;
 }
 function normalizeGenerationPolicy(value) {
-	if (!isRecord$4(value) || value.version !== 1) return null;
+	if (!isRecord$5(value) || value.version !== 1) return null;
 	if (value.mode === "auto") return {
 		version: 1,
 		mode: "auto"
@@ -1081,10 +1094,10 @@ function normalizeGenerationPolicy(value) {
 	if (value.mode !== "limited" || !Array.isArray(value.models) || value.models.length === 0) return null;
 	const models = [];
 	for (const item of value.models) {
-		if (!isRecord$4(item) || typeof item.model !== "string" || !item.model.trim()) return null;
+		if (!isRecord$5(item) || typeof item.model !== "string" || !item.model.trim()) return null;
 		const modelPolicy = { model: item.model.trim() };
 		if (item.parameters !== void 0) {
-			if (!isRecord$4(item.parameters)) return null;
+			if (!isRecord$5(item.parameters)) return null;
 			const parameters = {};
 			for (const [key, rawConstraint] of Object.entries(item.parameters)) {
 				if (!key.trim()) return null;
@@ -1372,8 +1385,7 @@ const usage = z.object({
 	}).nullable().optional()
 });
 const nativeOrigin = z.enum(["local_import"]);
-/** One native execution maps to one Cohub Turn. No message-level fork anchors. */
-const nativeTurnStartSchema = z.object({
+z.object({
 	turnId: id$1,
 	sessionId: id$1.nullable(),
 	parentTurnId: id$1.nullable(),
@@ -1383,7 +1395,8 @@ const nativeTurnStartSchema = z.object({
 	userContent: content$1,
 	startedAt: z.iso.datetime(),
 	sessionStartedAt: z.iso.datetime().optional(),
-	origin: nativeOrigin.optional()
+	origin: nativeOrigin.optional(),
+	controllable: z.boolean().optional()
 }).strict().refine((value) => value.sessionId !== null || value.parentTurnId === null, "A parent Turn requires a Session");
 const nativeTurnMessageSchema = z.object({
 	content: content$1,
@@ -1393,9 +1406,10 @@ const nativeTurnMessageSchema = z.object({
 	stopReason: z.string().max(64).nullable().optional(),
 	errorMessage: z.string().max(16384).nullable().optional()
 }).strict();
-/** Ephemeral display snapshot within a Turn; never a fork or persistence boundary. */
+/** Ephemeral display state within a Turn; never a fork or persistence boundary. */
 const nativeTurnProgressSchema = z.object({
 	revision: z.number().int().safe().positive(),
+	from: z.number().int().nonnegative().max(1e4).optional(),
 	messages: z.array(nativeTurnMessageSchema).max(1e4)
 }).strict();
 /** Final, immutable Turn receipt. Native bytes are archived separately, without lossy normalization. */
@@ -1408,10 +1422,41 @@ const nativeTurnCompleteSchema = z.object({
 	]),
 	completedAt: z.iso.datetime()
 }).strict();
+/** Durable ingest of one transcript's Turns. */
+const nativeIngestTurnSchema = z.object({
+	turnId: id$1,
+	parentTurnId: id$1.nullable(),
+	userContent: content$1,
+	startedAt: z.iso.datetime(),
+	origin: nativeOrigin.optional(),
+	result: nativeTurnCompleteSchema.nullable(),
+	controllable: z.boolean().optional()
+}).strict();
+/** Turn states that end a Turn; a native Turn in one of them is settled on both sides. */
+const SETTLED_TURN_STATUSES = [
+	"completed",
+	"failed",
+	"interrupted",
+	"cancelled",
+	"merged"
+];
+/** How many Turns one ingest may carry; a larger backlog is sent as consecutive batches. */
+const NATIVE_INGEST_MAX_TURNS = 500;
+const nativeIngestSchema = z.object({
+	harness: z.enum(["pi", "codex"]),
+	nativeSessionId: z.string().min(1).max(255),
+	turns: z.array(nativeIngestTurnSchema).min(1).max(500)
+}).strict();
+/** Which of these Turns the Space already recorded; lets a restart resume without local receipts. */
+const nativeKnownSchema = z.object({ turnIds: z.array(id$1).min(1).max(500) }).strict();
 const nativeRuntimeEventSchema = z.discriminatedUnion("type", [
 	z.object({
-		type: z.literal("start"),
-		input: nativeTurnStartSchema
+		type: z.literal("ingest"),
+		input: nativeIngestSchema
+	}).strict(),
+	z.object({
+		type: z.literal("known"),
+		input: nativeKnownSchema
 	}).strict(),
 	z.object({
 		type: z.literal("progress"),
@@ -1420,17 +1465,19 @@ const nativeRuntimeEventSchema = z.discriminatedUnion("type", [
 		progress: nativeTurnProgressSchema
 	}).strict(),
 	z.object({
-		type: z.literal("complete"),
+		type: z.literal("status"),
 		sessionId: id$1,
 		turnId: id$1,
-		result: nativeTurnCompleteSchema
-	}).strict(),
-	z.object({
-		type: z.literal("heartbeat"),
-		sessionId: id$1,
-		turnId: id$1
+		controllable: z.boolean().optional()
 	}).strict()
 ]);
+/** Pushed to the Runtime: stop a running native Turn, as the web's stop button asks. */
+const runtimeNativeStopSchema = z.object({
+	type: z.literal("runtime.native.stop"),
+	spaceId: id$1,
+	sessionId: id$1,
+	turnId: id$1
+}).strict();
 const NATIVE_SYNC_SOURCE = "native_client";
 const isNativeClientTurn = (meta) => {
 	if (!meta || typeof meta !== "object") return false;
@@ -2344,8 +2391,8 @@ const APP_SURFACE_REQUEST_TIMEOUT_MS = 15e3;
 const APP_COMPOSER_CHIP_KEY_MAX_LENGTH = 80;
 const APP_COMPOSER_CHIP_LABEL_MAX_LENGTH = 120;
 const APP_COMPOSER_CHIP_CONTENT_MAX_BYTES = 32768;
-const isRecord$3 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
-const isSurfaceEnvelope = (value) => isRecord$3(value) && value.protocol === "cohub.app.surface" && value.version === 1;
+const isRecord$4 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const isSurfaceEnvelope = (value) => isRecord$4(value) && value.protocol === "cohub.app.surface" && value.version === 1;
 const parseAppSurfaceReady = (value) => {
 	if (!isSurfaceEnvelope(value) || value.type !== "ready") return null;
 	const methods = Array.isArray(value.methods) ? value.methods.filter((method) => typeof method === "string" && Boolean(method)) : [];
@@ -2359,7 +2406,7 @@ const parseAppSurfaceReady = (value) => {
 const parseAppSurfaceResponse = (value) => {
 	if (!isSurfaceEnvelope(value) || value.type !== "response") return null;
 	if (typeof value.requestId !== "string" || !value.requestId) return null;
-	const error = isRecord$3(value.error) ? {
+	const error = isRecord$4(value.error) ? {
 		code: typeof value.error.code === "string" && value.error.code ? value.error.code : "surface_error",
 		message: typeof value.error.message === "string" ? value.error.message : "App surface call failed"
 	} : void 0;
@@ -2379,7 +2426,7 @@ const parseComposerChipKey = (value) => {
 	return key;
 };
 const parseAppComposerChipSet = (value) => {
-	if (!isSurfaceEnvelope(value) || value.type !== "composer.chip.set" || !isRecord$3(value.chip)) return null;
+	if (!isSurfaceEnvelope(value) || value.type !== "composer.chip.set" || !isRecord$4(value.chip)) return null;
 	const key = parseComposerChipKey(value.chip.key);
 	if (!key || typeof value.chip.label !== "string" || typeof value.chip.content !== "string") return null;
 	const label = value.chip.label.trim();
@@ -2456,6 +2503,7 @@ const buildAppComposerChipClear = (key) => ({
 //#endregion
 //#region ../protocol/dist/app-runtime.js
 const APP_RUNTIME_PROTOCOL = "cohub.app.runtime";
+const isRecord$3 = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
 const buildAppRuntimeReady = () => ({
 	protocol: APP_RUNTIME_PROTOCOL,
 	version: 1,
@@ -2466,6 +2514,7 @@ const buildAppRuntimeCloseRequest = () => ({
 	version: 1,
 	type: "close.request"
 });
+const finite = (value) => typeof value === "number" && Number.isFinite(value);
 const buildAppRuntimeConfigureRequest = (input) => ({
 	protocol: APP_RUNTIME_PROTOCOL,
 	version: 1,
@@ -2480,6 +2529,154 @@ const buildAppRuntimePointer = (input) => ({
 	y: input.y,
 	down: input.down
 });
+const isRuntimeMessage = (value, type) => isRecord$3(value) && value.protocol === "cohub.app.runtime" && value.version === 1 && value.type === type;
+const envelope$1 = (type) => ({
+	protocol: APP_RUNTIME_PROTOCOL,
+	version: 1,
+	type
+});
+const boundedText = (value, max) => {
+	if (typeof value !== "string") return null;
+	const text = value.replace(/\s+/g, " ").trim();
+	return text ? text.slice(0, max) : null;
+};
+const buildAppRuntimeAnnounce = () => envelope$1("announce");
+const parseAppRuntimeAnnounce = (value) => isRuntimeMessage(value, "announce") ? buildAppRuntimeAnnounce() : null;
+const buildAppRuntimeWindowState = (state) => ({
+	...envelope$1("window.state"),
+	title: state.title,
+	status: state.status,
+	dirty: state.dirty
+});
+const requestIdOf = (value) => typeof value.requestId === "string" && value.requestId && value.requestId.length <= 128 ? value.requestId : null;
+const buildAppRuntimeClosePrepare = (requestId) => ({
+	...envelope$1("close.prepare"),
+	requestId
+});
+const parseAppRuntimeClosePrepare = (value) => {
+	if (!isRuntimeMessage(value, "close.prepare")) return null;
+	const requestId = requestIdOf(value);
+	return requestId ? buildAppRuntimeClosePrepare(requestId) : null;
+};
+const buildAppRuntimeClosePrepared = (input) => ({
+	...envelope$1("close.prepared"),
+	requestId: input.requestId,
+	ok: input.ok
+});
+/** Select all, copy, paste, cut, undo, redo: the browser's, and the App's. */
+const EDITING_CHORD_KEYS = /* @__PURE__ */ new Set([
+	"a",
+	"c",
+	"v",
+	"x",
+	"y",
+	"z"
+]);
+/** Whether a Ctrl / Meta chord may reach the host; both sides apply this rule. */
+const isAppRuntimeHostChord = (input) => (input.ctrlKey || input.metaKey) && !EDITING_CHORD_KEYS.has(input.key.toLowerCase());
+const buildAppRuntimeKey = (input) => ({
+	...envelope$1("key"),
+	key: input.key,
+	code: input.code,
+	altKey: input.altKey,
+	ctrlKey: input.ctrlKey,
+	metaKey: input.metaKey,
+	shiftKey: input.shiftKey
+});
+/** Resource kinds the Cohub host can drop into an App. */
+const APP_DROP_RESOURCE_TYPES = [
+	"file",
+	"task",
+	"app",
+	"session",
+	"checkpoint"
+];
+const isDropResourceType = (value) => APP_DROP_RESOURCE_TYPES.includes(value);
+const MAX_DROP_RESOURCES = 100;
+const parseDropResource = (value) => {
+	if (!isRecord$3(value) || !isDropResourceType(value.type)) return null;
+	const ref = boundedText(value.ref, 4096);
+	if (!ref) return null;
+	const resource = {
+		type: value.type,
+		ref
+	};
+	for (const key of [
+		"title",
+		"path",
+		"mimeType",
+		"appId",
+		"href",
+		"taskRunId"
+	]) {
+		const text = boundedText(value[key], 4096);
+		if (text) resource[key] = text;
+	}
+	if (finite(value.size) && value.size >= 0) resource.size = value.size;
+	if (finite(value.mtimeMs)) resource.mtimeMs = value.mtimeMs;
+	if (isRecord$3(value.snapshot)) resource.snapshot = value.snapshot;
+	return resource;
+};
+const parseDropTypes = (value) => Array.isArray(value) ? [...new Set(value.filter(isDropResourceType))] : [];
+const buildAppRuntimeDropConfig = (accept) => ({
+	...envelope$1("drop.config"),
+	accept: [...accept]
+});
+const buildAppRuntimeDrag = (input) => ({
+	...envelope$1("drag"),
+	phase: input.phase,
+	x: input.x,
+	y: input.y,
+	types: [...input.types],
+	...input.phase === "drop" ? { resources: input.resources ?? [] } : {}
+});
+const parseAppRuntimeDrag = (value) => {
+	if (!isRuntimeMessage(value, "drag")) return null;
+	if (value.phase !== "over" && value.phase !== "leave" && value.phase !== "drop") return null;
+	if (!finite(value.x) || !finite(value.y)) return null;
+	const resources = value.phase === "drop" && Array.isArray(value.resources) ? value.resources.slice(0, MAX_DROP_RESOURCES).map(parseDropResource).filter((resource) => resource !== null) : void 0;
+	return buildAppRuntimeDrag({
+		phase: value.phase,
+		x: value.x,
+		y: value.y,
+		types: parseDropTypes(value.types),
+		...resources ? { resources } : {}
+	});
+};
+/** Public design tokens, sent as resolved CSS values. */
+const APP_APPEARANCE_TOKENS = [
+	"bg-primary",
+	"bg-content",
+	"bg-surface",
+	"bg-elevated",
+	"bg-input",
+	"bg-hover",
+	"bg-active",
+	"text-primary",
+	"text-secondary",
+	"text-tertiary",
+	"text-placeholder",
+	"text-disabled",
+	"border-primary",
+	"border-subtle",
+	"brand",
+	"brand-hover",
+	"brand-soft",
+	"brand-muted",
+	"brand-border",
+	"brand-ring",
+	"brand-contrast-fg",
+	"error-fg",
+	"selection-bg",
+	"overlay-scrim",
+	"shadow-subtle",
+	"shadow-medium",
+	"shadow-strong",
+	"font-sans",
+	"font-mono"
+];
+/** CSS custom property an App reads a shared token from, e.g. `--cohub-bg-primary`. */
+const appAppearanceVar = (token) => `--cohub-${token}`;
 //#endregion
 //#region ../protocol/dist/app-navigation.js
 const APP_NAVIGATION_PROTOCOL = "cohub.app.navigation";
@@ -3104,6 +3301,8 @@ var AppSurfaceApi = class {
 	listening = false;
 	allowedOrigins = null;
 	trustedOrigin;
+	/** The chip on show, so it can be announced again. */
+	chip = null;
 	allowHostOrigins(origins) {
 		this.allowedOrigins = origins.map((origin) => origin.trim()).filter(Boolean).map((origin) => {
 			try {
@@ -3134,11 +3333,14 @@ var AppSurfaceApi = class {
 	setComposerChip(chip) {
 		const message = parseAppComposerChipSet(buildAppComposerChipSet(chip));
 		if (!message) throw new Error("Invalid App composer chip");
+		this.chip = message.chip;
+		this.start();
 		this.post(message);
 	}
 	clearComposerChip(key) {
 		const message = parseAppComposerChipClear(buildAppComposerChipClear(key));
 		if (!message) throw new Error("Invalid App composer chip key");
+		if (this.chip?.key === message.key) this.chip = null;
 		this.post(message);
 	}
 	announce() {
@@ -3163,6 +3365,11 @@ var AppSurfaceApi = class {
 	onMessage = (event) => {
 		if (typeof window === "undefined" || event.source !== window.parent) return;
 		if (!this.isTrusted(event.origin)) return;
+		if (parseAppRuntimeAnnounce(event.data)) {
+			if (this.handlers.size > 0) this.announce();
+			if (this.chip) this.post(buildAppComposerChipSet(this.chip));
+			return;
+		}
 		const request = parseAppSurfaceRequest(event.data);
 		if (!request) return;
 		const commandId = request.commandId;
@@ -3267,6 +3474,171 @@ function attachAppEmbed(frame, options) {
 	};
 }
 //#endregion
+//#region src/app-window.ts
+/** One document listener for all clients, so a chord reaches the host once. */
+const keyTransports = /* @__PURE__ */ new Set();
+function forwardKey(event) {
+	if (event.isComposing || !isAppRuntimeHostChord(event)) return;
+	setTimeout(() => {
+		if (event.defaultPrevented) return;
+		[...keyTransports].find((candidate) => candidate.isHostConnected?.())?.notify?.(buildAppRuntimeKey({
+			key: event.key,
+			code: event.code,
+			altKey: event.altKey,
+			ctrlKey: event.ctrlKey,
+			metaKey: event.metaKey,
+			shiftKey: event.shiftKey
+		}));
+	}, 0);
+}
+function attachKeys(transport) {
+	if (keyTransports.size === 0) window.addEventListener("keydown", forwardKey);
+	keyTransports.add(transport);
+}
+function detachKeys(transport) {
+	if (!keyTransports.delete(transport)) return;
+	if (keyTransports.size === 0) window.removeEventListener("keydown", forwardKey);
+}
+/** The App's side of its host window; a no-op outside a Cohub host. */
+var AppWindowApi = class {
+	transport;
+	runtime;
+	state = {
+		title: null,
+		status: "idle",
+		dirty: false
+	};
+	/** Only a client that reported state re-announces it; others must not reset it. */
+	stateReported = false;
+	beforeClose = null;
+	dropHandler = null;
+	hostUnsubscribe = null;
+	constructor(transport, runtime) {
+		this.transport = transport;
+		this.runtime = runtime;
+		if (typeof window === "undefined" || !transport.notify) return;
+		if (window.parent === window || typeof window.addEventListener !== "function") return;
+		attachKeys(transport);
+	}
+	/** Report the tab title, save status, and whether work is still unsaved. */
+	setState(patch) {
+		this.state = {
+			...this.state,
+			...patch
+		};
+		this.stateReported = true;
+		this.listen();
+		this.transport.notify?.(buildAppRuntimeWindowState(this.state));
+	}
+	/** Persist work before a `dirty` window closes; `false` or throw keeps it open. */
+	onBeforeClose(handler) {
+		this.beforeClose = handler;
+		this.listen();
+		return () => {
+			if (this.beforeClose === handler) this.beforeClose = null;
+		};
+	}
+	/** Accept Cohub resources dragged from the host onto this App. */
+	onDrop(handler) {
+		this.dropHandler = handler;
+		this.listen();
+		this.transport.notify?.(buildAppRuntimeDropConfig(handler.accept));
+		return () => {
+			if (this.dropHandler !== handler) return;
+			this.dropHandler = null;
+			this.transport.notify?.(buildAppRuntimeDropConfig([]));
+		};
+	}
+	/** The window's file: on open, on reopen, and after a rename or move. */
+	onLaunch(listener) {
+		let last = null;
+		const handle = (context) => {
+			const invocation = context?.invocation;
+			if (!invocation?.file || !invocation.spaceId) return;
+			const key = `${invocation.id ?? ""}:${invocation.spaceId}:${invocation.file.path}`;
+			if (key === last) return;
+			last = key;
+			listener({ file: {
+				spaceId: invocation.spaceId,
+				path: invocation.file.path
+			} });
+		};
+		const unsubscribe = this.runtime.onContextChanged(handle);
+		this.runtime.context().then(handle, () => {});
+		return unsubscribe;
+	}
+	dispose() {
+		this.hostUnsubscribe?.();
+		this.hostUnsubscribe = null;
+		detachKeys(this.transport);
+	}
+	listen() {
+		if (this.hostUnsubscribe || !this.transport.subscribeHostMessages) return;
+		this.hostUnsubscribe = this.transport.subscribeHostMessages((data) => {
+			if (parseAppRuntimeAnnounce(data)) {
+				this.announce();
+				return;
+			}
+			if (!this.transport.isHostConnected?.()) return;
+			const prepare = parseAppRuntimeClosePrepare(data);
+			if (prepare) {
+				this.prepareClose(prepare.requestId);
+				return;
+			}
+			const drag = parseAppRuntimeDrag(data);
+			if (drag) this.dispatchDrag(drag);
+		});
+		this.runtime.context().catch(() => {});
+	}
+	/** A reloaded frame forgot the tab state and drops; report them again. */
+	announce() {
+		if (this.stateReported) this.transport.notify?.(buildAppRuntimeWindowState(this.state));
+		if (this.dropHandler) this.transport.notify?.(buildAppRuntimeDropConfig(this.dropHandler.accept));
+	}
+	async prepareClose(requestId) {
+		let ok;
+		try {
+			ok = this.beforeClose ? await this.beforeClose() !== false : !this.state.dirty;
+		} catch {
+			ok = false;
+		}
+		this.transport.notify?.(buildAppRuntimeClosePrepared({
+			requestId,
+			ok
+		}));
+	}
+	dispatchDrag(drag) {
+		const handler = this.dropHandler;
+		if (!handler) return;
+		const point = {
+			x: drag.x,
+			y: drag.y,
+			types: drag.types
+		};
+		if (drag.phase === "over") handler.over?.(point);
+		else if (drag.phase === "leave") handler.leave?.();
+		else handler.drop({
+			...point,
+			resources: drag.resources ?? []
+		});
+	}
+};
+/** Writes host tokens (`--cohub-*`), color scheme, and `lang` onto `root`. */
+function applyAppAppearance(root, context) {
+	const appearance = context?.appearance;
+	for (const token of APP_APPEARANCE_TOKENS) {
+		const value = appearance?.tokens[token];
+		if (value) root.style.setProperty(appAppearanceVar(token), value);
+		else root.style.removeProperty(appAppearanceVar(token));
+	}
+	if (appearance) {
+		root.style.colorScheme = appearance.colorScheme;
+		root.dataset.cohubColorScheme = appearance.colorScheme;
+		root.dataset.cohubReducedMotion = String(appearance.reducedMotion);
+	}
+	if (context?.locale) root.lang = context.locale;
+}
+//#endregion
 //#region src/app-runtime.ts
 var AppRuntimeError = class extends Error {
 	code;
@@ -3306,6 +3678,36 @@ var ParentBridgeTransport = class {
 	contextListener = null;
 	diagnosticListeners = /* @__PURE__ */ new Set();
 	diagnosticListener = null;
+	hostListeners = /* @__PURE__ */ new Set();
+	hostListener = null;
+	announceListener = null;
+	isHostConnected() {
+		return this.trustedParentOrigin !== null;
+	}
+	isFromParent(event) {
+		if (event.source !== window.parent) return false;
+		const parentOrigin = this.trustedParentOrigin ?? getParentOrigin();
+		return !parentOrigin || event.origin === parentOrigin;
+	}
+	subscribeHostMessages(listener) {
+		if (!hasParent() || typeof window.addEventListener !== "function") return () => {};
+		this.hostListeners.add(listener);
+		this.announceReady();
+		if (!this.hostListener) {
+			this.hostListener = (event) => {
+				if (!this.isFromParent(event)) return;
+				for (const current of this.hostListeners) current(event.data);
+			};
+			window.addEventListener("message", this.hostListener);
+		}
+		return () => {
+			this.hostListeners.delete(listener);
+			if (this.hostListeners.size === 0 && this.hostListener) {
+				window.removeEventListener("message", this.hostListener);
+				this.hostListener = null;
+			}
+		};
+	}
 	/**
 	* Tells the host the runtime is ready once, before any subscription. Hosts
 	* gate unsolicited messages (context pushes, diagnostics) on this handshake,
@@ -3319,8 +3721,19 @@ var ParentBridgeTransport = class {
 		try {
 			window.parent.postMessage(buildAppRuntimeReady(), parentOrigin);
 			this.readyAnnounced = true;
+			this.answerAnnounceRequests();
 		} catch {}
 	}
+	/** Says ready again when a reloaded host asks. */
+	answerAnnounceRequests() {
+		if (this.announceListener || typeof window.addEventListener !== "function") return;
+		this.announceListener = (event) => {
+			if (!this.isFromParent(event) || !parseAppRuntimeAnnounce(event.data)) return;
+			this.readyAnnounced = false;
+			this.announceReady();
+		};
+		window.addEventListener("message", this.announceListener);
+	}
 	subscribeDiagnostics(listener) {
 		if (!hasParent() || typeof window.addEventListener !== "function") return () => {};
 		this.diagnosticListeners.add(listener);
@@ -4299,6 +4712,7 @@ var CohubClient = class {
 	transport;
 	websocketClient;
 	appRuntime;
+	appWindow;
 	constructor(options = {}) {
 		const apiBaseUrl = resolveApiBaseUrl(options);
 		const appRuntime = options.app ?? options.work;
@@ -4314,6 +4728,10 @@ var CohubClient = class {
 			fetch: options.fetch
 		}), resolveWebBaseUrl({ env: options.env }));
 		this.appRuntime = createAppRuntime(appTransport, appRuntime?.appId, appIdResolver);
+		this.appWindow = new AppWindowApi(appTransport, {
+			context: () => this.appRuntime.context(),
+			onContextChanged: (listener) => this.appRuntime.onContextChanged(listener)
+		});
 		const executionToken = resolveExecutionToken();
 		const getAccessToken = options.getAccessToken ?? (executionToken ? () => executionToken : (tokenOptions) => this.appRuntime.getAccessToken(tokenOptions));
 		const resolvedOptions = {
@@ -4369,6 +4787,7 @@ var CohubClient = class {
 	/** Releases listeners this client registered. Safe to call more than once. */
 	dispose() {
 		this.appRuntime.dispose();
+		this.appWindow.dispose();
 	}
 	auth = {
 		authorize: (input) => this.appRuntime.authorize(input),
@@ -4390,6 +4809,26 @@ var CohubClient = class {
 		/** Expose callable methods from inside a published app. */
 		surface: new AppSurfaceApi(),
 		onContextChanged: (listener) => this.appRuntime.onContextChanged(listener),
+		/** Files the host opens with this App — the first one and every later open. */
+		onLaunch: (listener) => this.appWindow.onLaunch(listener),
+		/** Accept Cohub resources the viewer drags from the host onto this App. */
+		onDrop: (handler) => this.appWindow.onDrop(handler),
+		window: {
+			/** Report the tab title, save status, and whether work is still unsaved. */
+			setState: (patch) => this.appWindow.setState(patch),
+			/** Persist pending work before the host closes a `dirty` window. */
+			onBeforeClose: (handler) => this.appWindow.onBeforeClose(handler)
+		},
+		appearance: { 
+		/** Keep `root` (default `<html>`) in sync with the host theme and locale. */
+sync: (root) => {
+			const target = root ?? (typeof document === "undefined" ? null : document.documentElement);
+			if (!target) return () => {};
+			const apply = (context) => applyAppAppearance(target, context);
+			const stop = this.appRuntime.onContextChanged(apply);
+			this.appRuntime.context().then(apply, () => {});
+			return stop;
+		} },
 		/** Ask the host to close this App's surface. */
 		requestClose: () => this.appRuntime.requestClose(),
 		/**
@@ -4759,7 +5198,17 @@ function cloneInvocation(invocation) {
 		...invocation.embedder ? { embedder: {
 			appId: invocation.embedder.appId,
 			slug: invocation.embedder.slug
-		} } : {}
+		} } : {},
+		...invocation.file ? { file: { path: invocation.file.path } } : {}
+	};
+}
+/** Host appearance can be reactive state too; copy it into plain data. */
+function cloneAppearance(appearance) {
+	return {
+		colorScheme: appearance.colorScheme,
+		theme: appearance.theme,
+		tokens: { ...appearance.tokens },
+		reducedMotion: appearance.reducedMotion
 	};
 }
 /**
@@ -5012,6 +5461,9 @@ function createAppBridgeCore(config) {
 	async function getContext() {
 		const invocation = activeInvocation !== void 0 ? activeInvocation : config.getInvocation?.() ?? config.invocation;
 		const shell = config.getShell?.() ?? config.shell;
+		const locale = config.getLocale?.();
+		const appearance = config.getAppearance?.();
+		const windowState = config.getWindow?.();
 		const appScopes = clonePermissionScopes(app.appScopes);
 		const viewerUuid = await getViewerUuid();
 		synchronizeViewer(viewerUuid);
@@ -5040,6 +5492,9 @@ function createAppBridgeCore(config) {
 				session: shell.session ? { ...shell.session } : null,
 				turn: shell.turn ? { ...shell.turn } : null
 			} } : {},
+			...locale ? { locale } : {},
+			...appearance ? { appearance: cloneAppearance(appearance) } : {},
+			...windowState ? { window: { visible: windowState.visible } } : {},
 			permissions: {
 				scopes: normalizePermissionScopes([...appScopes, ...viewerGrants.flatMap((grant) => grant.scopes)]),
 				appScopes,
@@ -5217,8 +5672,7 @@ function createAppBridgeCore(config) {
 	/**
 	* Calls the authorize endpoint. `silent` marks a background refresh of a
 	* previous consent: the server then only renews a live grant and never
-	* creates or revives one, so a revoked grant cannot come back without a
-	* fresh dialog.
+	* creates or revives one. `consent: "host"` may also create or widen one.
 	*/
 	async function authorize(scopes, spaceId, options) {
 		const incremental = Boolean(state.pendingAuth && authorizationRequests.has(state.pendingAuth.requestId));
@@ -5242,6 +5696,7 @@ function createAppBridgeCore(config) {
 					scopes,
 					...spaceId ? { spaceId } : {},
 					...options?.silent ? { silent: true } : {},
+					...options?.consent ? { consent: options.consent } : {},
 					...incremental ? { scopeMode: "extend" } : {}
 				})
 			});
@@ -5288,17 +5743,15 @@ function createAppBridgeCore(config) {
 		}
 	}
 	/**
-	* Silently renews the approved read-only scopes on the current Shell Space.
+	* Grants scopes on the current Shell Space without opening the dialog.
 	*
 	* Deciding that a request needs no dialog is the Host's job: it compares the
-	* target against the Space it is actually showing. That check only decides
-	* *whether to ask*; the server still decides *what may be granted* through
-	* the silent path, so a revoked consent can never come back on its own.
+	* target and trust; the server still caps what may be granted.
 	*/
 	const shellAuthorizationInFlight = /* @__PURE__ */ new Map();
 	const shellAuthorizationCache = /* @__PURE__ */ new Map();
 	const SHELL_AUTH_CACHE_MS = 3e4;
-	async function authorizeShellSilently(scopes, spaceId) {
+	async function authorizeShellSilently(scopes, spaceId, consent) {
 		const shellContext = config.getShell?.() ?? config.shell;
 		const shell = shellContext?.space ?? null;
 		if (!shellContext || authorizationContext.surface === "broker" || !shell || shell.id !== spaceId) throw new AppAuthorizationError("Shell authorization is unavailable for this surface.", 403, "consent_required");
@@ -5307,13 +5760,16 @@ function createAppBridgeCore(config) {
 			await startSignIn();
 			throw new AppLoginRedirect();
 		}
-		const cacheKey = `${viewerUuid}:${app.id}:${spaceId}:${[...scopes].sort().join(",")}`;
+		const cacheKey = `${viewerUuid}:${app.id}:${spaceId}:${consent}:${[...scopes].sort().join(",")}`;
 		const cached = shellAuthorizationCache.get(cacheKey);
 		if (cached && cached.expiresAt > Date.now()) return cached.result;
 		if (cached) shellAuthorizationCache.delete(cacheKey);
 		const pending = shellAuthorizationInFlight.get(cacheKey);
 		if (pending) return pending;
-		const request = authorize(scopes, spaceId, { silent: true });
+		const request = authorize(scopes, spaceId, consent === "host" ? {
+			silent: true,
+			consent: "host"
+		} : { silent: true });
 		shellAuthorizationInFlight.set(cacheKey, request);
 		try {
 			const result = await request;
@@ -5326,6 +5782,20 @@ function createAppBridgeCore(config) {
 			shellAuthorizationInFlight.delete(cacheKey);
 		}
 	}
+	/** Trusted Apps get Host consent; others may only renew read-only grants. */
+	async function shellConsentFor(scopes, spaceId) {
+		if (!scopes.every(isAppHostConsentScope)) return null;
+		if (await isTrustedIn(spaceId)) return "host";
+		return scopes.every(isAppSilentShellScope) ? "renew" : null;
+	}
+	async function isTrustedIn(spaceId) {
+		if (app.spaceId === spaceId) return true;
+		try {
+			return await config.isInstalledIn?.(spaceId) === true;
+		} catch {
+			return false;
+		}
+	}
 	/**
 	* Reads the Shell Space supplied by the current Host. Invocation context is
 	* deliberately excluded: an App may be opened from one Space while the Shell
@@ -5789,9 +6259,11 @@ function createAppBridgeCore(config) {
 					return;
 				}
 				const shellSpace = resolveShellSpace();
-				const shellTargetId = spaceId ?? shellSpace?.id;
-				if (!alwaysAsk && !selectSpace && Boolean(shellTargetId && (!spaceId || shellSpace?.id === spaceId)) && scopes.every(isAppSilentShellScope) && shellTargetId) try {
-					const result = await authorizeShellSilently(scopes, shellTargetId);
+				const shellTargetId = !alwaysAsk && !selectSpace && shellSpace && (!spaceId || spaceId === shellSpace.id) ? shellSpace.id : null;
+				const shellConsent = shellTargetId ? await shellConsentFor(scopes, shellTargetId) : null;
+				if (state.pendingAuth !== reserved) return;
+				if (shellConsent && shellTargetId) try {
+					const result = await authorizeShellSilently(scopes, shellTargetId, shellConsent);
 					if (state.pendingAuth !== reserved) return;
 					setGrantedAppScopes(await getViewerUuid(), app.id, result.scopes, result.spaceId);
 					replyPendingAuth(reserved, authorizeResult(result.token, result.spaceId, shellSpace?.name ?? null));
@@ -6044,6 +6516,213 @@ function createAppBridgeCore(config) {
 	};
 }
 //#endregion
+//#region src/generation-blocks.ts
+/** Tolerant readers for generation payloads, shared by every task projection. */
+const EXCERPT_LIMIT = 240;
+function record(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function cleanExcerpt(value, limit = EXCERPT_LIMIT) {
+	if (typeof value !== "string") return void 0;
+	const clean = value.replace(/\s+/g, " ").trim();
+	if (!clean) return void 0;
+	return clean.length > limit ? `${clean.slice(0, limit - 3).trimEnd()}...` : clean;
+}
+function blockText(block) {
+	return cleanExcerpt(block.text ?? block.content ?? block.value);
+}
+function blockUrl(block) {
+	const source = record(block.source);
+	return normalizeBoardRemoteUrl(source?.url ?? source?.src ?? block.url ?? block.src);
+}
+function blockMimeType(block) {
+	const source = record(block.source);
+	const value = source?.mediaType ?? source?.media_type ?? source?.mimeType ?? block.mediaType ?? block.media_type ?? block.mimeType;
+	return typeof value === "string" ? value : void 0;
+}
+function positiveNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+function blockNaturalSize(block) {
+	const source = record(block.source);
+	const naturalWidth = positiveNumber(source?.width ?? source?.naturalWidth ?? block.width ?? block.naturalWidth);
+	const naturalHeight = positiveNumber(source?.height ?? source?.naturalHeight ?? block.height ?? block.naturalHeight);
+	return {
+		...naturalWidth ? { naturalWidth } : {},
+		...naturalHeight ? { naturalHeight } : {}
+	};
+}
+function contentBlocks(value) {
+	return Array.isArray(value) ? value.filter((item) => record(item)) : [];
+}
+function taskData(run) {
+	const payload = record(run.payload);
+	return record(payload?.data) ?? payload;
+}
+function generationOutput(run) {
+	return contentBlocks(record(run.result)?.output);
+}
+function generationPrompt(run) {
+	for (const block of contentBlocks(taskData(run)?.content)) {
+		const text = blockText(block);
+		if (text) return text;
+	}
+}
+function blockMeta(block) {
+	return record(block.meta);
+}
+function blockIdentity(block) {
+	const meta = blockMeta(block);
+	const value = meta?.id ?? meta?.clip_id ?? meta?.clipId ?? block.id ?? block.clip_id ?? block.clipId;
+	if (typeof value !== "string" && typeof value !== "number") return void 0;
+	return cleanExcerpt(String(value), 220);
+}
+function blockTitle(block) {
+	return cleanExcerpt(blockMeta(block)?.title ?? block.title ?? block.name, 240);
+}
+function blockDurationMs(block) {
+	const source = record(block.source);
+	const meta = blockMeta(block);
+	const milliseconds = positiveNumber(source?.durationMs ?? meta?.durationMs ?? block.durationMs);
+	if (milliseconds) return Math.round(milliseconds);
+	const seconds = positiveNumber(source?.duration ?? meta?.duration ?? block.duration);
+	return seconds ? Math.round(seconds * 1e3) : void 0;
+}
+function blockPreviewUrl(block) {
+	const source = record(block.source);
+	return normalizeBoardRemoteUrl(source?.poster ?? source?.thumbnail ?? source?.previewUrl ?? block.poster ?? block.thumbnail ?? block.previewUrl);
+}
+/**
+* Image roles that depict playable media, by the media types they may cover;
+* `last_frame` stays a result of its own.
+*/
+const COVER_ROLES = /* @__PURE__ */ new Map([
+	["first_frame", /* @__PURE__ */ new Set(["video"])],
+	["cover", /* @__PURE__ */ new Set(["video", "audio"])],
+	["poster", /* @__PURE__ */ new Set(["video", "audio"])],
+	["thumbnail", /* @__PURE__ */ new Set(["video", "audio"])]
+]);
+function isPlayable(block) {
+	return block.type === "video" || block.type === "audio";
+}
+/**
+* Pair playable media with its cover image, returning media index → cover
+* index. An image sharing the provider id wins (music tracks and their art,
+* shared by every media of that id); otherwise cover-role images pair in
+* order with remaining media their role fits (a video and its `first_frame`).
+* Covers need a remote URL, so an inline image is never folded away.
+*/
+function generationCovers(blocks) {
+	const covers = /* @__PURE__ */ new Map();
+	const isCover = (block) => block.type === "image" && blockUrl(block) !== void 0 && blockMeta(block)?.role !== "last_frame";
+	blocks.forEach((block, index) => {
+		const id = blockIdentity(block);
+		if (!isPlayable(block) || id === void 0) return;
+		const cover = blocks.findIndex((candidate) => isCover(candidate) && blockIdentity(candidate) === id);
+		if (cover >= 0) covers.set(index, cover);
+	});
+	const paired = new Set(covers.values());
+	const roleCovers = blocks.flatMap((block, index) => {
+		const role = blockMeta(block)?.role;
+		const types = typeof role === "string" ? COVER_ROLES.get(role) : void 0;
+		return isCover(block) && !paired.has(index) && types ? [{
+			index,
+			types
+		}] : [];
+	});
+	blocks.forEach((block, index) => {
+		if (!isPlayable(block) || covers.has(index)) return;
+		const at = roleCovers.findIndex(({ types }) => types.has(String(block.type)));
+		const [cover] = at < 0 ? [] : roleCovers.splice(at, 1);
+		if (cover) covers.set(index, cover.index);
+	});
+	return covers;
+}
+//#endregion
+//#region src/generation-task.ts
+const INLINE_KEYS = [
+	"data",
+	"base64",
+	"contentBase64"
+];
+function isDeferred(block) {
+	return block.deferredBase64 === true || record(block.source)?.deferredBase64 === true;
+}
+const MEDIA_TYPE_PATTERN = /^(image|video|audio)\/[\w.+-]+$/;
+const DEFAULT_MEDIA_TYPES = {
+	image: "image/png",
+	video: "video/mp4",
+	audio: "audio/mpeg"
+};
+function outputType(value) {
+	return value === "image" || value === "video" || value === "audio" || value === "text" ? value : null;
+}
+/** Covers fold into the media they depict instead of listing as images. */
+function projectOutputs(run) {
+	const blocks = generationOutput(run);
+	const covers = generationCovers(blocks);
+	const coverIndexes = new Set(covers.values());
+	const coverUrl = (index) => {
+		const cover = covers.get(index);
+		return cover === void 0 ? void 0 : blockUrl(blocks[cover] ?? {});
+	};
+	return blocks.flatMap((block, index) => {
+		const type = outputType(block.type);
+		if (!type || coverIndexes.has(index)) return [];
+		const size = blockNaturalSize(block);
+		const text = type === "text" ? blockText(block) ?? null : null;
+		if (type === "text" && !text) return [];
+		return [{
+			index,
+			type,
+			url: type === "text" ? null : blockUrl(block) ?? null,
+			previewUrl: blockPreviewUrl(block) ?? coverUrl(index) ?? null,
+			title: blockTitle(block) ?? null,
+			mimeType: blockMimeType(block) ?? null,
+			text,
+			width: size.naturalWidth ?? null,
+			height: size.naturalHeight ?? null,
+			durationMs: blockDurationMs(block) ?? null,
+			deferred: type !== "text" && isDeferred(block)
+		}];
+	});
+}
+function toGenerationTaskView(run) {
+	const data = taskData(run);
+	const result = record(run.result);
+	const model = data?.model ?? result?.model;
+	return {
+		id: run.id,
+		status: run.status,
+		spaceId: run.spaceId,
+		sessionId: run.sessionId,
+		turnId: run.turnId,
+		model: typeof model === "string" && model ? model : null,
+		prompt: generationPrompt(run) ?? null,
+		errorMessage: run.errorMessage,
+		outputs: run.status === "completed" ? projectOutputs(run) : [],
+		createdAt: run.createdAt,
+		startedAt: run.startedAt,
+		finishedAt: run.finishedAt,
+		updatedAt: run.updatedAt
+	};
+}
+function isActiveGenerationTask(task) {
+	return task.status === "pending" || task.status === "running";
+}
+/** Playable source of an output: its URL, or a data URL for inline payloads. */
+function generationOutputSource(result, outputIndex) {
+	const block = contentBlocks(record(result)?.output)[outputIndex];
+	if (!block) return null;
+	const url = blockUrl(block);
+	if (url) return url;
+	const source = record(block.source);
+	const data = INLINE_KEYS.map((key) => source?.[key] ?? block[key]).find((value) => typeof value === "string" && value !== "");
+	if (!data) return null;
+	const declared = blockMimeType(block);
+	return `data:${declared && MEDIA_TYPE_PATTERN.test(declared) ? declared : DEFAULT_MEDIA_TYPES[String(block.type)] ?? "application/octet-stream"};base64,${data}`;
+}
+//#endregion
 //#region src/board/animation.ts
 function track(input) {
 	return BoardTrackSchema.parse(input);
@@ -6289,4 +6968,4 @@ function createBoardExtensionRegistry() {
 }
 const BOARD_CHANNELS = BOARD_ANIMATION_CHANNELS;
 //#endregion
-export { APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_ANIMATION_CHANNEL_CAPABILITIES, BOARD_CHANNELS, BOARD_COLOR_IDS, BOARD_GEO_KINDS, BillingApi, BoardAnimationSpecSchema, BoardAuthoringItemSchema, BoardClient, BoardCompositionInputSchema, BoardCompositionSchema, BoardDealParamsSchema, BoardEffectInputSchema, BoardEffectSchema, BoardExtensionRegistry, BoardItemPatchSchema, BoardPlaybackPolicySchema, BoardSemanticCommandSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DEFAULT_BOARD_LIMITS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DesktopCommandsApi, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HttpError, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, SessionGenerationStreamClient, SessionPatchReducer, SpacePublicFilesApi, SpaceWebhooksApi, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileComposition, composition, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createBoardExtensionRegistry, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeTurnCompleteSchema, nativeTurnProgressSchema, nativeTurnStartSchema, normalizeBaseUrl, normalizeGenerationPolicy, normalizeRequestSource, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardCompositionInput, parseBoardEffectInput, parseBoardPlaybackPolicy, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseWorkRef, proceduralClip, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeReadySchema, sampleCompositionTracks, sampleEasing, sampleTrack, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, track, trimProjectionTurnsToCompaction, validateArchiveBoundary };
+export { APP_APPEARANCE_TOKENS, APP_COMPOSER_CHIP_CONTENT_MAX_BYTES, APP_COMPOSER_CHIP_KEY_MAX_LENGTH, APP_COMPOSER_CHIP_LABEL_MAX_LENGTH, APP_SURFACE_READY_TIMEOUT_MS, APP_SURFACE_REQUEST_TIMEOUT_MS, AppCommerceApi, AppRealtimeApi, AppRefParseError, AppRoom, AppRuntimeApi, AppRuntimeApi as WorkRuntimeApi, AppRuntimeError, AppSurfaceApi, AppWindowApi, AppsApi, BILLING_ACCESS_BLOCKED_ERROR_CODE, BOARD_ANIMATION_CHANNEL_CAPABILITIES, BOARD_CHANNELS, BOARD_COLOR_IDS, BOARD_GEO_KINDS, BillingApi, BoardAnimationSpecSchema, BoardAuthoringItemSchema, BoardClient, BoardCompositionInputSchema, BoardCompositionSchema, BoardDealParamsSchema, BoardEffectInputSchema, BoardEffectSchema, BoardExtensionRegistry, BoardItemPatchSchema, BoardPlaybackPolicySchema, BoardSemanticCommandSchema, COHUB_ENVIRONMENTS, COHUB_SOURCE_HEADER, COHUB_SOURCE_HEADER_NAMES, CohubClient, CohubHttpClient, DEFAULT_BOARD_LIMITS, DESKTOP_COMMAND_DEFAULT_TIMEOUT_MS, DESKTOP_COMMAND_MAX_TIMEOUT_MS, DESKTOP_COMMAND_PAYLOAD_MAX_BYTES, DESKTOP_COMMAND_PENDING_TTL_SECONDS, DESKTOP_COMMAND_SETTLEMENT_GRACE_SECONDS, DESKTOP_COMMAND_TERMINAL_TTL_SECONDS, DESKTOP_COMMAND_VERSION, DesktopCommandsApi, FEATURE_NOT_ENTITLED_ERROR_CODE, GenerationPolicyError, HttpError, NATIVE_INGEST_MAX_TURNS, NATIVE_SYNC_SOURCE, OriginBrokerTransport, PERMISSIONS, ParentBridgeTransport, PopupBrokerTransport, REQUEST_SOURCE_VIA_MAX_LENGTH, RUNTIME_ARCHIVE_SEGMENT_BYTES, RUNTIME_MAX_FRAME_BYTES, RUNTIME_PROTOCOL_VERSION, RUNTIME_RECOVERY_BATCH_SIZE, ReferencesApi, ReferralsApi, SETTLED_TURN_STATUSES, SessionGenerationStreamClient, SessionPatchReducer, SpacePublicFilesApi, SpaceWebhooksApi, USER_LEVEL_PERMISSIONS, UiCommandsApi, UsersApi, VoiceApi, VoiceInputClient, WebsocketClient, WorkCommerceApi, WorkRealtimeApi, WorkRefParseError, WorkRoom, WorkSurfaceApi, appAppearanceVar, applyAppAppearance, assertGenerationRequestAllowedByPolicy, attachAppEmbed, buildAppSurfaceRequest, buildSpaceInvitePath, buildSpacePath, clearGrantedAppScopes, compileComposition, composition, contextToPiMessages, createAppBridgeCore, createAppBridgeCore as createWorkBridgeCore, createAppRuntime, createAppRuntime as createWorkRuntime, createBoardExtensionRegistry, createCohubClient, createHttpClient, createOriginAppResolver, createSessionGenerationStreamClient, createSessionPatchReducer, createSlugAppIdResolver, createSlugAppIdResolver as createSlugWorkIdResolver, createVoiceInputClient, createWebsocketClient, decodeGenerationPolicy, encodeGenerationPolicy, extractBillingPayload, filterDiscoverableGenerationModels, filterGenerationDeclarationsByPolicy, filterSpacePickerItems, findGenerationModelPolicy, fingerprintProjectionTurns, formatAppRef, formatWorkRef, generationOutputSource, getAllowedGenerationModelIds, getCohubContext, harnessArchiveIndexSchema, hasGrantedAppScopes, hasRequestSourceIdentity, isActiveGenerationTask, isAppId, isBillingAccessBlockedCode, isBillingAccessBlockedError, isDesktopCallMethod, isFeatureNotEntitledError, isGenerationModelHidden, isHttpErrorCode, isLocalHarness, isNativeClientTurn, isProjectionCompaction, isRequestSourceClientId, isRequestSourceEmpty, isRequestSourceUuid, isTerminalDesktopCommandStatus, isUserLevelPermission, isUuid, isWorkId, joinApiUrl, matchesUnauthorizedErrorToken, mergeRequestSourceIntoMeta, nativeIngestTurnSchema, nativeRuntimeEventSchema, nativeTurnCompleteSchema, nativeTurnProgressSchema, normalizeBaseUrl, normalizeGenerationPolicy, normalizeRequestSource, normalizeSpacePickerQuery, normalizeVoiceInputWebsocketUrl, normalizeWebsocketUrl, orderSpacePickerItems, parseAppRef, parseAppSurfaceReady, parseAppSurfaceResponse, parseAssistantMessageCommit, parseBoardCompositionInput, parseBoardEffectInput, parseBoardPlaybackPolicy, parseDesktopCommand, parseGenerationPolicyFromEnv, parseRequestSourceFromHeaders, parseWorkRef, proceduralClip, projectNativeMessageMeta, projectNativeSession, readRequestSourceFromEnv, requestSourceToHeaders, resolveApiBaseUrl, resolveAppTransport, resolveAppTransport as resolveWorkTransport, resolveCohubEnvironment, resolveExecutionAppId, resolveExecutionToken, resolveHarness, resolveOpenSurface, resolveRequestSourceChannel, resolveVoiceInputWebsocketUrl, resolveWebBaseUrl, resolveWebsocketUrl, runtimeCommandSchema, runtimeEventSchema, runtimeNativeStopSchema, runtimeReadySchema, sampleCompositionTracks, sampleEasing, sampleTrack, sanitizeAccessToken, scopeListHasPermission, selectRuntimeContextMessages, selectSpacePickerItems, serializeProjection, serializeProjectionRecords, setGrantedAppScopes, toGenerationTaskView, track, trimProjectionTurnsToCompaction, validateArchiveBoundary };