@shuffleio/shuffle-mcps 0.0.35 → 0.0.37

package/dist/{appsCache-PP55YC62.mjs → appsCache-H7SZLNQW.mjs}

@@ -2,7 +2,7 @@ import {
   fetchApps,
   fetchAppsViaApiConfig,
   invalidateAppsCache
-} from "./chunk-5B3Q2RHS.mjs";
+} from "./chunk-5ZQ2BL47.mjs";
 export {
   fetchApps,
   fetchAppsViaApiConfig,

package/dist/{chunk-5B3Q2RHS.mjs → chunk-5ZQ2BL47.mjs}

@@ -50,6 +50,30 @@ var keyFor = (input, init) => {
     return null;
   }
 };
+var withStoredApiKey = (input, init) => {
+  if (typeof window === "undefined") return init;
+  let urlStr;
+  if (typeof input === "string") urlStr = input;
+  else if (input instanceof URL) urlStr = input.toString();
+  else if (input && typeof input.url === "string") urlStr = input.url;
+  else return init;
+  try {
+    const url = new URL(urlStr, window.location.href);
+    const isKnownShuffleOrigin = allowedOrigins.has(url.origin) || url.origin === window.location.origin || url.hostname === "shuffler.io" || url.hostname.endsWith(".shuffler.io") || url.hostname === "tunnel.schemaless.org";
+    if (!url.pathname.startsWith("/api/") || !isKnownShuffleOrigin) return init;
+    const apiKey = window.localStorage.getItem("shuffle_api_key");
+    if (!apiKey) return init;
+    const requestHeaders = typeof Request !== "undefined" && input instanceof Request ? input.headers : void 0;
+    const headers = new Headers(requestHeaders);
+    if (init?.headers) {
+      new Headers(init.headers).forEach((value, name) => headers.set(name, value));
+    }
+    if (!headers.has("Authorization")) headers.set("Authorization", `Bearer ${apiKey}`);
+    return { ...init, headers };
+  } catch {
+    return init;
+  }
+};
 var synthetic503 = (key, retryInMs) => new Response(
   JSON.stringify({
     error: "circuit_breaker_open",
@@ -75,8 +99,9 @@ var installFetchBreaker = () => {
   installed = true;
   const original = window.fetch.bind(window);
   window.fetch = (async (input, init) => {
-    const key = keyFor(input, init);
-    if (!key) return original(input, init);
+    const authenticatedInit = withStoredApiKey(input, init);
+    const key = keyFor(input, authenticatedInit);
+    if (!key) return original(input, authenticatedInit);
     const entry = getEntry(key);
     const now = Date.now();
     let isProbe = false;
@@ -110,7 +135,7 @@ var installFetchBreaker = () => {
     };
     let response;
     try {
-      response = await original(input, init);
+      response = await original(input, authenticatedInit);
     } catch (err) {
       const ts = Date.now();
       entry.failures.push(ts);
@@ -186,9 +211,54 @@ var getDefaultBaseUrl = () => {
   }
   return PROD_BACKEND;
 };
-var _regionUrl = null;
-var _trackedOrgId = null;
+var REGION_STORAGE_KEY = "shuffle_region_url";
+var readCachedRegion = () => {
+  if (typeof window === "undefined") return { url: null, orgId: null };
+  try {
+    const raw = localStorage.getItem(REGION_STORAGE_KEY);
+    if (!raw) return { url: null, orgId: null };
+    const parsed = JSON.parse(raw);
+    return { url: parsed?.url || null, orgId: parsed?.orgId || null };
+  } catch {
+    return { url: null, orgId: null };
+  }
+};
+var cached = readCachedRegion();
+var _regionUrl = cached.url;
+var _trackedOrgId = cached.orgId;
 var _hostBaseUrl = null;
+var REGION_EVENT = "shuffle:region-url";
+var _lastBroadcastUrl = cached.url;
+var persistRegion = (url, orgId) => {
+  if (typeof window === "undefined") return;
+  const changed = url !== _lastBroadcastUrl;
+  _lastBroadcastUrl = url;
+  try {
+    if (url) localStorage.setItem(REGION_STORAGE_KEY, JSON.stringify({ url, orgId }));
+    else localStorage.removeItem(REGION_STORAGE_KEY);
+  } catch {
+  }
+  if (!changed) return;
+  try {
+    window.dispatchEvent(new CustomEvent(REGION_EVENT, { detail: { url, orgId } }));
+  } catch {
+  }
+};
+if (typeof window !== "undefined") {
+  const sync = () => {
+    const next = readCachedRegion();
+    if (next.url !== _regionUrl) {
+      _regionUrl = next.url;
+      _lastBroadcastUrl = next.url;
+      console.log(`[API] Region URL synced to: ${_regionUrl || "default"}`);
+    }
+    _trackedOrgId = next.orgId;
+  };
+  window.addEventListener(REGION_EVENT, sync);
+  window.addEventListener("storage", (e) => {
+    if (e.key === REGION_STORAGE_KEY) sync();
+  });
+}
 var isShufflerSubdomain = (url) => {
   try {
     const parsed = new URL(url);
@@ -198,26 +268,32 @@ var isShufflerSubdomain = (url) => {
   }
 };
 var setRegionUrl = (regionUrl, orgId) => {
-  if (isDevEnvironment()) {
-    _trackedOrgId = orgId || null;
-    return;
-  }
   _trackedOrgId = orgId || null;
   if (regionUrl && isShufflerSubdomain(regionUrl)) {
     const normalized = regionUrl.replace(/\/+$/, "");
     if (normalized !== PROD_BACKEND) {
       _regionUrl = normalized;
+      persistRegion(_regionUrl, _trackedOrgId);
       console.log(`[API] Region URL set to: ${_regionUrl}`);
       return;
     }
   }
   _regionUrl = null;
+  persistRegion(null, _trackedOrgId);
+};
+var applyRegionFromPayload = (payload, orgIdOverride) => {
+  if (!payload || typeof payload !== "object") return null;
+  const orgId = orgIdOverride ?? payload?.active_org?.id ?? payload?.org_id ?? null;
+  const regionUrl = payload?.region_url || payload?.active_org?.region_url || null;
+  setRegionUrl(regionUrl, orgId);
+  return regionUrl;
 };
 var resetRegionUrl = () => {
   if (_regionUrl) {
     console.log(`[API] Region URL reset to default (org changed)`);
   }
   _regionUrl = null;
+  persistRegion(null, null);
 };
 var SHUFFLE_HOST_BASE_URL_EVENT = "shuffle:set-host-base-url";
 var setHostBaseUrl = (url) => {
@@ -251,7 +327,7 @@ var getTrackedOrgId = () => _trackedOrgId;
 var API_CONFIG = {
   // Shuffle backend URL — host override beats region URL beats default.
   get baseUrl() {
-    const url = _hostBaseUrl || _regionUrl || getDefaultBaseUrl();
+    const url = _hostBaseUrl || (isDevEnvironment() || getEnvVar("VITE_SHUFFLE_API_URL") ? getDefaultBaseUrl() : _regionUrl || getDefaultBaseUrl());
     try {
       registerProtectedOrigin(url);
     } catch {
@@ -359,6 +435,7 @@ export {
   isCloud,
   isOnprem,
   setRegionUrl,
+  applyRegionFromPayload,
   resetRegionUrl,
   setHostBaseUrl,
   getHostBaseUrl,

package/dist/index.d.mts

@@ -374,8 +374,10 @@ interface AgentPresetsProps {
     presets?: AgentPreset[];
     /** Ref forwarded to the trigger button so the host can measure its width. */
     chipRef?: React.Ref<HTMLButtonElement>;
+    /** Authoritative support flag from the host's getinfo payload. */
+    isSupport?: boolean;
 }
-declare const AgentPresets: ({ variant, onSelectPreset, selectedPreset, onRemoveSelected, presets, chipRef }: AgentPresetsProps) => React$1.JSX.Element;
+declare const AgentPresets: ({ variant, onSelectPreset, selectedPreset, onRemoveSelected, presets, chipRef, isSupport }: AgentPresetsProps) => React$1.JSX.Element;
 
 /**
  * AgentUI — Standalone "start + debug agents" surface.
@@ -416,6 +418,20 @@ interface AgentUIProps {
      * token to be set on `API_CONFIG`).
      */
     autoLoadApps?: boolean;
+    /** Authoritative support flag from `/api/v1/getinfo`. */
+    isSupport?: boolean;
+    /**
+     * Optional per-skill readiness CTAs. Keyed by skill (preset) id. When the
+     * matching skill is selected and the host reports it has no real content
+     * yet, AgentUI renders a small call-to-action under the prompt.
+     */
+    presetCtas?: Record<string, {
+        /** When false, nothing is rendered (content exists / still loading). */
+        show?: boolean;
+        message: string;
+        actionLabel: string;
+        onAction?: () => void;
+    }>;
     /** Hero title above the prompt. */
     title?: string;
     /** Optional subtitle/description shown under the title. */
@@ -676,9 +692,18 @@ declare const isCloud: () => boolean;
 declare const isOnprem: () => boolean;
 /**
  * Set the dynamic region URL from getinfo response.
- * Only applies if the URL is a shuffler.io subdomain and different from default.
+ * ALWAYS honored for the current org/tenant (including dev/preview) as long as
+ * the URL is a valid shuffler.io subdomain different from the default backend.
+ * Persisted in localStorage so later page loads do not have to wait on getinfo.
  */
 declare const setRegionUrl: (regionUrl: string | undefined | null, orgId: string | undefined | null) => void;
+/**
+ * Single entry point for applying a region from ANY backend response that
+ * carries one (`/api/v1/getinfo`, `/api/v1/orgs/{id}/change`, ...). Extracts
+ * `region_url` (top-level first, then `active_org`) and routes it through
+ * `setRegionUrl`, so setting + broadcasting always happens in one place.
+ */
+declare const applyRegionFromPayload: (payload: any, orgIdOverride?: string | null) => string | null;
 /**
  * Called when org changes. Resets region URL to default until next getinfo.
  */
@@ -931,6 +956,8 @@ interface AgentsViewProps extends ShuffleHostProps {
     appsStorageKey?: string;
     /** Usecase-backed agent types shown in the activity list filter dropdown. */
     usecaseFilters?: AgentUsecaseFilter[];
+    /** Per-skill readiness CTAs forwarded to the embedded AgentUI. */
+    presetCtas?: AgentUIProps['presetCtas'];
 }
 
 interface AgentLocalModel {
@@ -949,6 +976,10 @@ interface LocalLLMConfigProps extends ShuffleHostProps {
     hasOpenAIAuth?: boolean;
     onSave?: (model: AgentLocalModel) => void;
     onTestResult?: (result: LocalLLMTestResult) => void;
+    /** When the panel is rendered inside a drawer, pass the drawer open state
+     *  so the provider selector can reset to the currently active provider each
+     *  time the drawer opens. */
+    open?: boolean;
 }
 
 /**
@@ -1482,6 +1513,8 @@ declare const DATASTORE_CATEGORIES: {
     readonly INCIDENTS: "shuffle-security_incidents";
     readonly VULNERABILITIES: "shuffle-security_vulnerabilities";
     readonly ASSETS: "shuffle-security_assets";
+    readonly PACKAGES: "shuffle-security_packages";
+    readonly SOFTWARE: "shuffle-security_software";
     readonly TEMPLATES: "shuffle-security_templates";
     readonly CONFIGURATION: "shuffle-security_configuration";
     readonly IOCS: "shuffle-security_ioc-config";
@@ -1613,6 +1646,67 @@ interface UsageBarProps {
 }
 declare const UsageBar: React__default.FC<UsageBarProps>;
 
+/**
+ * ShuffleMarkdown — the ONE markdown renderer for the platform.
+ *
+ * Every place that renders user/AI/remote markdown should use this component
+ * (or `InlineMarkdown` for single-line strings) instead of importing
+ * `react-markdown` directly, so plugins, link safety and typography stay
+ * identical everywhere.
+ *
+ * Defaults:
+ *  - remark-gfm (tables, strikethrough, task lists, autolinks)
+ *  - remark-breaks (single newline = <br>, matches how LLM/agent output reads)
+ *  - rehype-sanitize (defense in depth; raw HTML is never enabled)
+ *  - external links open in a new tab with noopener/noreferrer
+ *  - shared code / table / blockquote styling based on HSL design tokens
+ */
+
+/** Standardised JSON tree used inside markdown (same viewer as the rest of the platform). */
+declare const MarkdownJsonBlock: React__default.FC<{
+    src: object;
+}>;
+/**
+ * Deliberately loose (not react-markdown's own `Components` type): that type is a mapped
+ * type over `keyof JSX.IntrinsicElements`, which tsup's declaration bundler (rollup-plugin-dts)
+ * cannot inline into this package's published `.d.ts` without erroring (TS2709).
+ */
+type MarkdownComponentOverrides = Record<string, React__default.ElementType>;
+interface ShuffleMarkdownProps {
+    /** The markdown source. */
+    children?: string | null;
+    /** Component overrides merged on top of the shared defaults. */
+    components?: MarkdownComponentOverrides;
+    /** Extra remark plugins appended to the defaults. */
+    remarkPlugins?: any[];
+    /** Disable remark-breaks (for prose docs where blank lines separate paragraphs). */
+    disableBreaks?: boolean;
+    /** Styling applied to the wrapping Box. */
+    sx?: SxProps<Theme>;
+    className?: string;
+}
+declare const ShuffleMarkdown: React__default.FC<ShuffleMarkdownProps>;
+
+/**
+ * VideoEmbed — shared inline video player for markdown content.
+ *
+ * Supports YouTube, Loom and direct video files (mp4/webm/ogg).
+ * Rendered as a block-level span so it is valid inside <p> elements.
+ */
+
+type VideoKind = 'youtube' | 'loom' | 'file';
+interface ResolvedVideo {
+    kind: VideoKind;
+    /** Embed URL for iframes, or the direct file URL for <video>. */
+    src: string;
+}
+/** Returns embed info when the URL points at a supported video, otherwise null. */
+declare function resolveVideoUrl(raw?: string | null): ResolvedVideo | null;
+declare const VideoEmbed: React__default.FC<{
+    video: ResolvedVideo;
+    title?: string;
+}>;
+
 /**
  * Local Singul Library — fully self-contained.
  * No host-app `@/` imports remain inside this folder (assets aside).
@@ -1659,4 +1753,4 @@ declare const LocalLLMConfig: React__default.ComponentType<any>;
 
 declare const AddAppModal: React__default.ComponentType<any>;
 
-export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailDrawer, AppDetailProvider, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_PROMPT_PREFIX, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, type OutputDiagnosis, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getApiUrl, getAuthHeader, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerProtectedOrigin, resetRegionUrl, resolveApp, resolveApps, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useSyncHostBaseUrl };
+export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailDrawer, AppDetailProvider, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_PROMPT_PREFIX, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, ShuffleMarkdown as Markdown, MarkdownJsonBlock, type OutputDiagnosis, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, ShuffleMarkdown, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, VideoEmbed, applyRegionFromPayload, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getApiUrl, getAuthHeader, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerProtectedOrigin, resetRegionUrl, resolveApp, resolveApps, resolveVideoUrl, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useSyncHostBaseUrl };

package/dist/index.d.ts

@@ -374,8 +374,10 @@ interface AgentPresetsProps {
     presets?: AgentPreset[];
     /** Ref forwarded to the trigger button so the host can measure its width. */
     chipRef?: React.Ref<HTMLButtonElement>;
+    /** Authoritative support flag from the host's getinfo payload. */
+    isSupport?: boolean;
 }
-declare const AgentPresets: ({ variant, onSelectPreset, selectedPreset, onRemoveSelected, presets, chipRef }: AgentPresetsProps) => React$1.JSX.Element;
+declare const AgentPresets: ({ variant, onSelectPreset, selectedPreset, onRemoveSelected, presets, chipRef, isSupport }: AgentPresetsProps) => React$1.JSX.Element;
 
 /**
  * AgentUI — Standalone "start + debug agents" surface.
@@ -416,6 +418,20 @@ interface AgentUIProps {
      * token to be set on `API_CONFIG`).
      */
     autoLoadApps?: boolean;
+    /** Authoritative support flag from `/api/v1/getinfo`. */
+    isSupport?: boolean;
+    /**
+     * Optional per-skill readiness CTAs. Keyed by skill (preset) id. When the
+     * matching skill is selected and the host reports it has no real content
+     * yet, AgentUI renders a small call-to-action under the prompt.
+     */
+    presetCtas?: Record<string, {
+        /** When false, nothing is rendered (content exists / still loading). */
+        show?: boolean;
+        message: string;
+        actionLabel: string;
+        onAction?: () => void;
+    }>;
     /** Hero title above the prompt. */
     title?: string;
     /** Optional subtitle/description shown under the title. */
@@ -676,9 +692,18 @@ declare const isCloud: () => boolean;
 declare const isOnprem: () => boolean;
 /**
  * Set the dynamic region URL from getinfo response.
- * Only applies if the URL is a shuffler.io subdomain and different from default.
+ * ALWAYS honored for the current org/tenant (including dev/preview) as long as
+ * the URL is a valid shuffler.io subdomain different from the default backend.
+ * Persisted in localStorage so later page loads do not have to wait on getinfo.
  */
 declare const setRegionUrl: (regionUrl: string | undefined | null, orgId: string | undefined | null) => void;
+/**
+ * Single entry point for applying a region from ANY backend response that
+ * carries one (`/api/v1/getinfo`, `/api/v1/orgs/{id}/change`, ...). Extracts
+ * `region_url` (top-level first, then `active_org`) and routes it through
+ * `setRegionUrl`, so setting + broadcasting always happens in one place.
+ */
+declare const applyRegionFromPayload: (payload: any, orgIdOverride?: string | null) => string | null;
 /**
  * Called when org changes. Resets region URL to default until next getinfo.
  */
@@ -931,6 +956,8 @@ interface AgentsViewProps extends ShuffleHostProps {
     appsStorageKey?: string;
     /** Usecase-backed agent types shown in the activity list filter dropdown. */
     usecaseFilters?: AgentUsecaseFilter[];
+    /** Per-skill readiness CTAs forwarded to the embedded AgentUI. */
+    presetCtas?: AgentUIProps['presetCtas'];
 }
 
 interface AgentLocalModel {
@@ -949,6 +976,10 @@ interface LocalLLMConfigProps extends ShuffleHostProps {
     hasOpenAIAuth?: boolean;
     onSave?: (model: AgentLocalModel) => void;
     onTestResult?: (result: LocalLLMTestResult) => void;
+    /** When the panel is rendered inside a drawer, pass the drawer open state
+     *  so the provider selector can reset to the currently active provider each
+     *  time the drawer opens. */
+    open?: boolean;
 }
 
 /**
@@ -1482,6 +1513,8 @@ declare const DATASTORE_CATEGORIES: {
     readonly INCIDENTS: "shuffle-security_incidents";
     readonly VULNERABILITIES: "shuffle-security_vulnerabilities";
     readonly ASSETS: "shuffle-security_assets";
+    readonly PACKAGES: "shuffle-security_packages";
+    readonly SOFTWARE: "shuffle-security_software";
     readonly TEMPLATES: "shuffle-security_templates";
     readonly CONFIGURATION: "shuffle-security_configuration";
     readonly IOCS: "shuffle-security_ioc-config";
@@ -1613,6 +1646,67 @@ interface UsageBarProps {
 }
 declare const UsageBar: React__default.FC<UsageBarProps>;
 
+/**
+ * ShuffleMarkdown — the ONE markdown renderer for the platform.
+ *
+ * Every place that renders user/AI/remote markdown should use this component
+ * (or `InlineMarkdown` for single-line strings) instead of importing
+ * `react-markdown` directly, so plugins, link safety and typography stay
+ * identical everywhere.
+ *
+ * Defaults:
+ *  - remark-gfm (tables, strikethrough, task lists, autolinks)
+ *  - remark-breaks (single newline = <br>, matches how LLM/agent output reads)
+ *  - rehype-sanitize (defense in depth; raw HTML is never enabled)
+ *  - external links open in a new tab with noopener/noreferrer
+ *  - shared code / table / blockquote styling based on HSL design tokens
+ */
+
+/** Standardised JSON tree used inside markdown (same viewer as the rest of the platform). */
+declare const MarkdownJsonBlock: React__default.FC<{
+    src: object;
+}>;
+/**
+ * Deliberately loose (not react-markdown's own `Components` type): that type is a mapped
+ * type over `keyof JSX.IntrinsicElements`, which tsup's declaration bundler (rollup-plugin-dts)
+ * cannot inline into this package's published `.d.ts` without erroring (TS2709).
+ */
+type MarkdownComponentOverrides = Record<string, React__default.ElementType>;
+interface ShuffleMarkdownProps {
+    /** The markdown source. */
+    children?: string | null;
+    /** Component overrides merged on top of the shared defaults. */
+    components?: MarkdownComponentOverrides;
+    /** Extra remark plugins appended to the defaults. */
+    remarkPlugins?: any[];
+    /** Disable remark-breaks (for prose docs where blank lines separate paragraphs). */
+    disableBreaks?: boolean;
+    /** Styling applied to the wrapping Box. */
+    sx?: SxProps<Theme>;
+    className?: string;
+}
+declare const ShuffleMarkdown: React__default.FC<ShuffleMarkdownProps>;
+
+/**
+ * VideoEmbed — shared inline video player for markdown content.
+ *
+ * Supports YouTube, Loom and direct video files (mp4/webm/ogg).
+ * Rendered as a block-level span so it is valid inside <p> elements.
+ */
+
+type VideoKind = 'youtube' | 'loom' | 'file';
+interface ResolvedVideo {
+    kind: VideoKind;
+    /** Embed URL for iframes, or the direct file URL for <video>. */
+    src: string;
+}
+/** Returns embed info when the URL points at a supported video, otherwise null. */
+declare function resolveVideoUrl(raw?: string | null): ResolvedVideo | null;
+declare const VideoEmbed: React__default.FC<{
+    video: ResolvedVideo;
+    title?: string;
+}>;
+
 /**
  * Local Singul Library — fully self-contained.
  * No host-app `@/` imports remain inside this folder (assets aside).
@@ -1659,4 +1753,4 @@ declare const LocalLLMConfig: React__default.ComponentType<any>;
 
 declare const AddAppModal: React__default.ComponentType<any>;
 
-export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailDrawer, AppDetailProvider, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_PROMPT_PREFIX, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, type OutputDiagnosis, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getApiUrl, getAuthHeader, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerProtectedOrigin, resetRegionUrl, resolveApp, resolveApps, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useSyncHostBaseUrl };
+export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailDrawer, AppDetailProvider, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_PROMPT_PREFIX, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, ShuffleMarkdown as Markdown, MarkdownJsonBlock, type OutputDiagnosis, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, ShuffleMarkdown, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, VideoEmbed, applyRegionFromPayload, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getApiUrl, getAuthHeader, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerProtectedOrigin, resetRegionUrl, resolveApp, resolveApps, resolveVideoUrl, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useSyncHostBaseUrl };