@shuffleio/shuffle-mcps 0.0.45 → 0.0.47

package/dist/index.d.ts

@@ -256,6 +256,177 @@ interface ShuffleMCPHandle {
     focus: (selectAll?: boolean) => void;
 }
 
+type AuthStatus = 'pending' | 'testing' | 'connected' | 'error';
+interface AppAuthState {
+    systemId: string;
+    status: AuthStatus;
+    credentials: Record<string, string>;
+    errorMessage?: string;
+    successMessage?: string;
+    warningMessage?: string;
+    workflowId?: string;
+    executionId?: string;
+    errorCode?: number;
+}
+interface AuthParameter {
+    description: string;
+    example: string;
+    id: string;
+    name: string;
+    required: boolean;
+    schema: {
+        type: string;
+    };
+}
+interface AppAuthentication {
+    type: string;
+    description?: string;
+    redirect_uri?: string;
+    token_uri?: string;
+    refresh_uri?: string;
+    authorization_url?: string;
+    auth_uri?: string;
+    authorize_url?: string;
+    scope?: string[];
+    client_id?: string;
+    client_secret?: string;
+    parameters?: AuthParameter[];
+}
+interface ApiAuthEntry {
+    id?: string;
+    label?: string;
+    app: {
+        id: string;
+        name: string;
+        large_image?: string;
+    };
+    active?: boolean;
+    created?: number;
+    edited?: number;
+    validation?: {
+        valid: boolean;
+        error?: string;
+        last_valid?: number;
+    };
+}
+interface AppAuthConfigProps extends ShuffleHostProps {
+    apps: AlgoliaSearchApp[];
+    authStates: Record<string, AppAuthState>;
+    authenticatedApps?: ApiAuthEntry[];
+    onAuthChange: (appId: string, credentials: Record<string, string>) => void;
+    onTestConnection: (appId: string, authenticationId?: string) => void;
+    onSaveAuth: (appId: string, credentials: Record<string, string>) => Promise<boolean>;
+    onSelectAuth?: (appId: string, authId: string) => void;
+    onRefreshAuth?: () => Promise<void> | void;
+}
+interface AppAuthCardProps extends ShuffleHostProps {
+    app: AlgoliaSearchApp;
+    authState: AppAuthState;
+    isExpanded: boolean;
+    onToggle: () => void;
+    onAuthChange: (appId: string, credentials: Record<string, string>) => void;
+    onTestConnection: (appId: string, authenticationId?: string) => void;
+    onSaveAuth: (appId: string, credentials: Record<string, string>) => Promise<boolean>;
+    apiAuthEntries: ApiAuthEntry[];
+    onSelectAuth?: (appId: string, authId: string) => void;
+    /** Called to refresh auth entries (e.g. after OAuth popup closes) */
+    onRefreshAuth?: () => Promise<void> | void;
+    /** When true, do NOT auto-fill URL fields with the param.example value. */
+    disableUrlPrefill?: boolean;
+    /** Hide the entire card header row (app icon, name, description, chips, docs, expand). Body stays expanded. */
+    hideHeader?: boolean;
+    /** Hide the "Configured / Not configured" and "Tested / Not tested" chips. */
+    hideStatusChips?: boolean;
+    /** Hide the documentation (book icon) link. */
+    hideDocsLink?: boolean;
+    /** Hide URL-like fields (name/id containing "url", "endpoint", or "host").
+     *  Use when the URL is supplied externally (e.g. via a provider preset). */
+    hideUrlFields?: boolean;
+    /** Render without the outer Card border so the component can be embedded
+     *  inside another bordered container without the nested "double border" look. */
+    borderless?: boolean;
+    /** Compact mode for embedded auth setup (e.g. Local LLM). Hides the
+     *  "Select authentication" dropdown and the large "Pending Verification"
+     *  detail panel with its standalone Test Connection button. The inline
+     *  credentials form (with the small "Test Authentication" CTA) is always
+     *  visible so users can edit & retest in one place. */
+    compactAuthForm?: boolean;
+    /** Always render the "Select authentication" dropdown, even when there are no
+     *  saved entries yet, so the UI does not switch between two different shapes. */
+    alwaysShowAuthSelector?: boolean;
+    /** Suppress the "Authentication saved" success toast (embedded flows that
+     *  already give their own feedback, e.g. the LLM provider config). */
+    suppressSaveToast?: boolean;
+    /** Render additional fields inside the expanded body, above the credential
+     *  inputs. The slot receives the live `localCredentials` and a `setField`
+     *  helper so its values are persisted as part of the auth on Save. */
+    extraFieldsSlot?: (api: {
+        credentials: Record<string, string>;
+        setField: (key: string, value: string) => void;
+    }) => React.ReactNode;
+    /** Known-ahead-of-time auth schema. When provided the fields render
+     *  instantly and no app-config request is made (no "Loading configuration"). */
+    initialAuthConfig?: AppAuthentication;
+}
+declare const AppAuthCard: ({ app, authState, isExpanded, onToggle, onAuthChange, onTestConnection, onSaveAuth, apiAuthEntries, onSelectAuth, onRefreshAuth, disableUrlPrefill, hideHeader, hideStatusChips, hideDocsLink, hideUrlFields, borderless, compactAuthForm, alwaysShowAuthSelector, suppressSaveToast, extraFieldsSlot, initialAuthConfig, globalUrl, userdata, isLoaded, isLoggedIn, serverside, }: AppAuthCardProps) => React$1.JSX.Element;
+declare const AppAuthConfig: ({ apps, authStates, authenticatedApps, onAuthChange, onTestConnection, onSaveAuth, onSelectAuth, onRefreshAuth, globalUrl, userdata, isLoaded, isLoggedIn, serverside, }: AppAuthConfigProps) => React$1.JSX.Element;
+
+interface AppInfo {
+    name: string;
+    description: string;
+    large_image?: string;
+    categories?: string[];
+    actions?: unknown[];
+    authentication?: AppAuthentication;
+    algoliaId?: string;
+    [key: string]: unknown;
+}
+interface AppDetailContentProps extends ShuffleHostProps {
+    /** Display mode */
+    mode?: 'drawer' | 'page';
+    /** Whether the parent container is open/mounted (used in drawer mode to defer network requests) */
+    open?: boolean;
+    /** App name to load */
+    appName: string | null;
+    /** Pre-resolved Algolia objectID (optional fast path) */
+    appId?: string | null;
+    /** Callback to close the view (drawer mode) */
+    onClose?: () => void;
+    /** Callback when data is refreshed */
+    onRefresh?: () => void;
+    /** Action when adding to canvas (builder mode) */
+    onAddToCanvas?: (app: {
+        name: string;
+        icon: string;
+        algoliaId?: string | null;
+    }) => void;
+    /** Whether the user is authenticated. In page mode, false enables guest locked sections */
+    isAuthenticated?: boolean;
+    /** Active organization ID for multi-tenant scoping */
+    activeOrgId?: string | null;
+    /** Automatically fire Activate action once app is loaded */
+    autoActivate?: boolean;
+    /** Show incident ingestion/forwarding stats */
+    showIncidentStats?: boolean;
+    /** Show quick info summary cards (Auth Type, Configurations, Status) */
+    showQuickInfo?: boolean;
+    /** Show the live MCP ApiCallViewer */
+    showApiCallViewer?: boolean;
+    /** When true and isAuthenticated is false, renders GuestLockedSection */
+    allowGuestLocked?: boolean;
+    /** Notifies parent when app info is resolved (useful for page SEO / usePageMeta) */
+    onAppInfoLoaded?: (info: AppInfo | null) => void;
+}
+/**
+ * Compares a requested app name against a resolved app name to determine if they match,
+ * close-match, or mismatch.
+ */
+declare function checkAppNameMatch(requested?: string | null, resolved?: string | null): {
+    isMatch: boolean;
+    isCloseMatch: boolean;
+    mismatch: boolean;
+};
+
 interface AiAgentPromptsEditorProps {
     /** Ordered list of prompts. */
     prompts: string[];
@@ -308,6 +479,8 @@ interface AppTitleHeaderProps extends ShuffleHostProps {
     highlightActivate?: boolean;
     /** When provided, replaces the Activate button with "+ Add". */
     onAdd?: () => void;
+    /** Called when the auth status chip is clicked (host may expand its auth section). */
+    onAuthClick?: () => void;
 }
 
 interface AppAuthSectionProps extends ShuffleHostProps {
@@ -353,6 +526,8 @@ interface AgentPreset {
     icon: React.ReactNode;
     /** When true, the preset is clickable and pre-fills the prompt. Others are placeholders. */
     enabled?: boolean;
+    /** Optional badge/tag label to display next to the preset name, e.g. "Beta", "Coming soon" */
+    tag?: string;
     /** Optional tools/apps to pre-select when this preset is clicked. */
     defaultApps?: Array<{
         name: string;
@@ -488,6 +663,8 @@ interface AgentUIProps {
     onChooseLLM?: () => void;
     /** Hide the "Choose LLM" chip entirely. */
     hideChooseLLM?: boolean;
+    /** Whether the user is currently authenticated */
+    isLoggedIn?: boolean;
     /** Tooltip on the submit button. Default: "⌘+Enter to send". */
     submitTooltip?: string;
     /** Custom icon for the submit button. */
@@ -616,7 +793,29 @@ interface AgentUIProps {
     contextCategory?: 'incidents' | 'vulnerabilities' | string;
     /** Storage key of the active page context to detect user overrides */
     contextStorageKey?: string;
+    /**
+     * When true, applies the dedicated Ask AI sidebar layout:
+     * - Pins run switcher directly beneath the panel header
+     * - Locks continuation form to the bottom of the sidebar
+     * - Provides independent scroll container for middle content without top clipping
+     */
+    sidebarLayout?: boolean;
+    /**
+     * Optional callback to transform/compose raw prompt input before submitting to the backend
+     * (e.g. pre-injecting dynamic documentation markdown).
+     */
+    composeSubmitInput?: (raw: string) => string;
+    /** Context parameters (e.g. { id: 'hello' } when on /incidents/:id) */
+    contextParams?: Record<string, string>;
+    /** Optional target incident ID for incident-handler skill */
+    incidentId?: string;
+    /** Optional target vulnerability ID for vulnerability skill */
+    vulnerabilityId?: string;
+    /** Optional target workflow ID for edit-workflow skill */
+    workflowId?: string;
 }
+/** Set of confirmed live built-in Shuffle services that are always available in the platform */
+declare const VERIFIED_BUILTIN_APPS: Set<string>;
 
 interface AgentPromptPrefixChipProps {
     /** Optional label override. Defaults to "Shuffle Tools MCP". */
@@ -716,11 +915,13 @@ interface AskAiButtonProps {
      * Default: true ("This is for now just for support users").
      */
     requireSupport?: boolean;
+    /** Whether Ask AI is in Beta on this page, enabling it for normal users */
+    isBeta?: boolean;
     /** Current URL pathname. Automatically disables button on /agents and /agent */
     pathname?: string;
     /** Custom button label. Default: "Ask AI". */
     label?: string;
-    /** Tag label in the button. Default: "Support only". Set to null to hide tag. */
+    /** Tag label in the button. When undefined, defaults to "Beta" if isBeta is true, else "Support". Set to null to hide tag. */
     tagLabel?: string | null;
     /** Optional context name or subtitle shown in tooltip (e.g. "Shuffle Incidents MCP") */
     contextHint?: string;
@@ -757,15 +958,19 @@ interface AgentContextRule {
     /** Default MCP apps to pre-select for this context */
     defaultApps: AgentContextApp[];
     /** Default skill/preset id (e.g. 'incident-response', 'vulnerability', 'build-workflows') */
-    defaultPresetId?: string;
+    defaultPresetId?: string | null;
     /** Title shown on drawer header */
-    title?: string | ((params: Record<string, string>, pathname: string) => string);
+    title?: string | ((params: Record<string, string>, pathname: string, entityOverride?: string) => string);
     /** Subtitle or context description shown under the drawer header */
-    subtitle?: string | ((params: Record<string, string>, pathname: string) => string);
+    subtitle?: string | ((params: Record<string, string>, pathname: string, entityOverride?: string) => string);
     /** Contextual prompt seed */
-    defaultPrompt?: string | ((params: Record<string, string>, pathname: string) => string);
+    defaultPrompt?: string | ((params: Record<string, string>, pathname: string, entityOverride?: string) => string);
     /** Custom placeholder for the prompt input */
     placeholder?: string;
+    /** Custom label for the trigger button (e.g. 'Ask about Workflows') */
+    buttonLabel?: string | ((params: Record<string, string>, pathname: string, entityOverride?: string) => string);
+    /** Custom title for the panel/drawer header bar */
+    headerTitle?: string | ((params: Record<string, string>, pathname: string, entityOverride?: string) => string);
     /** Key used for localStorage persistence. Defaults to the rule id or parameterized key */
     getStorageKey?: (params: Record<string, string>, pathname: string) => string;
     /** Human-readable description of what this context provides */
@@ -774,14 +979,26 @@ interface AgentContextRule {
     sourceCategory?: 'incidents' | 'vulnerabilities' | string;
     /** Explicit flag indicating this route lacks a dedicated MCP mapping */
     missingConfig?: boolean;
+    /** Whether Ask AI is in Beta and enabled for normal users on this page */
+    isBeta?: boolean | ((params: Record<string, string>, pathname: string) => boolean);
     /** Whether opening the panel should sideshift the page layout. Default: true */
     sideshift?: boolean;
+    /** Optional function to transform/compose user prompt input before submission (e.g. injecting markdown context for doc pages) */
+    composeInput?: (rawInput: string, params: Record<string, string>, pathname: string) => string;
 }
 interface AgentResolvedContext {
     ruleId: string;
     apps: AgentContextApp[];
-    presetId?: string;
+    presetId?: string | null;
     title: string;
+    /** Function to dynamically re-evaluate the title with an active entity name override */
+    titleFn?: (entityOverride?: string) => string;
+    /** Custom label for trigger button */
+    buttonLabel?: string;
+    buttonLabelFn?: (entityOverride?: string) => string;
+    /** Custom title for panel header */
+    headerTitle?: string;
+    headerTitleFn?: (entityOverride?: string) => string;
     subtitle: string;
     defaultPrompt: string;
     placeholder?: string;
@@ -795,15 +1012,24 @@ interface AgentResolvedContext {
     /** The default apps before any user customization */
     originalDefaultApps: AgentContextApp[];
     /** The default preset before any user customization */
-    originalDefaultPresetId?: string;
+    originalDefaultPresetId?: string | null;
     /** True when no specific rule was configured for this route (fallback rule used) */
     missingConfig: boolean;
+    /** Whether Ask AI is in Beta and enabled for normal users on this page */
+    isBeta?: boolean;
     /** Whether opening the panel should sideshift the page layout */
     sideshift?: boolean;
+    /** Optional function to transform/compose user prompt input before submission */
+    composeInput?: (rawInput: string) => string;
 }
 interface PageContextChoice {
     apps?: AgentContextApp[];
     presetId?: string | null;
+    draftPrompt?: string;
+    executionId?: string | null;
+    authorization?: string | null;
+    executionStatus?: string | null;
+    viewMode?: 'start' | 'simple' | 'detailed' | null;
     updatedAt: number;
 }
 /** Match a URL pathname against a route pattern with `:param` segments */
@@ -823,11 +1049,8 @@ declare const registerAgentContextRule: (rule: AgentContextRule, prepend?: boole
 declare const getAgentContextRules: (customRules?: AgentContextRule[]) => AgentContextRule[];
 /** Read saved user choice for a specific page storage key */
 declare const getPageContextChoice: (storageKey: string) => PageContextChoice | null;
-/** Save user's customized apps and preset for a specific page storage key */
-declare const setPageContextChoice: (storageKey: string, choice: {
-    apps?: AgentContextApp[];
-    presetId?: string | null;
-}) => void;
+/** Save user's customized apps, preset, draft prompt, and execution for a specific page storage key */
+declare const setPageContextChoice: (storageKey: string, choice: Partial<Omit<PageContextChoice, "updatedAt">>) => void;
 /** Clear saved user choice for a specific page, reverting it to defaults */
 declare const clearPageContextChoice: (storageKey: string) => void;
 /**
@@ -883,6 +1106,9 @@ interface AskAiDrawerProps extends Omit<AgentRunDrawerProps, 'title' | 'subtitle
  *  - Choice persistence: remembers tool and skill modifications per page.
  */
 
+declare const ASK_AI_PANEL_WIDTH_STORAGE_KEY = "shuffle:ask_ai_panel_width";
+declare const MIN_ASK_AI_PANEL_WIDTH = 340;
+declare const MAX_ASK_AI_PANEL_WIDTH = 960;
 interface AskAiSidePanelProps extends ShuffleHostProps {
     /** Whether the side panel is open */
     open: boolean;
@@ -894,6 +1120,8 @@ interface AskAiSidePanelProps extends ShuffleHostProps {
     activeTab?: AgentRunDrawerTab;
     /** Tab change callback */
     onTabChange?: (tab: AgentRunDrawerTab) => void;
+    /** Optional pre-filled default input prompt */
+    defaultInput?: string;
     /** Render content for the Permissions tab. Tab is hidden when omitted. */
     permissionsSlot?: React__default.ReactNode;
     /** Render content for the Local LLM tab. Defaults to bundled Local LLM configuration UI. */
@@ -995,6 +1223,18 @@ declare const useContextAwareAgent: (pathname?: string, search?: string) => Agen
  * If the user switches orgs, it resets to the default until getinfo is called again.
  */
 
+/** Check if a URL belongs to a Shuffle Cloud domain (*.shuffler.io or *.shuffle.security) */
+declare const isShuffleCloudDomain: (url?: string | null) => boolean;
+/**
+ * Maps legacy shuffler.io cloud URLs to shuffle.security redirect routes.
+ *
+ * Mapping rules:
+ * - shuffler.io / shuffle.security -> https://uk.shuffle.security (default cloud backend)
+ * - <subdomain>.shuffler.io -> https://<subdomain>.shuffle.security (e.g. ca, us, eu, au, uk, frankfurt)
+ * - <subdomain>.shuffle.security -> preserved as https://<subdomain>.shuffle.security
+ * - Self-hosted / on-prem / dev URLs -> preserved as-is
+ */
+declare const mapCloudRegionUrl: (url?: string | null) => string;
 /** Check if running on a known Shuffle Cloud domain */
 declare const isCloudDomain: () => boolean;
 /**
@@ -1011,8 +1251,8 @@ declare const isCloud: () => boolean;
 declare const isOnprem: () => boolean;
 /**
  * Set the dynamic region URL from getinfo response.
- * ALWAYS honored for the current org/tenant (including dev/preview) as long as
- * the URL is a valid shuffler.io subdomain different from the default backend.
+ * Honored for the current org/tenant when different from the default backend.
+ * Automatically maps cloud subdomains to .shuffle.security while preserving self-hosted hosts.
  * Persisted in localStorage so later page loads do not have to wait on getinfo.
  */
 declare const setRegionUrl: (regionUrl: string | undefined | null, orgId: string | undefined | null) => void;
@@ -1030,6 +1270,11 @@ declare const resetRegionUrl: () => void;
 declare const setHostBaseUrl: (url: string | undefined | null) => void;
 /** Get the currently active host override, if any. */
 declare const getHostBaseUrl: () => string | null;
+/**
+ * Checks whether the active backend is on *.shuffle.security (or shuffle.security),
+ * or if the frontend is hosted on *.shuffle.security.
+ */
+declare const isShuffleSecurityBackend: (backendUrl?: string) => boolean;
 declare const API_CONFIG: {
     readonly baseUrl: string;
     version: string;
@@ -1212,6 +1457,10 @@ interface AgentActivityListProps extends ShuffleHostProps {
     rowSx?: SxProps<Theme>;
     /** Usecase-backed agent types shown in the run filter dropdown. */
     usecaseFilters?: AgentUsecaseFilter[];
+    /** Pre-loaded initial/fallback runs, e.g. for demo mode or offline preview. */
+    initialRuns?: AgentRun[];
+    /** When true, skips remote activity fetching entirely (e.g. for demo runs). */
+    disableFetch?: boolean;
 }
 
 interface AgentExecutionDrawerProps extends ShuffleHostProps {
@@ -1330,121 +1579,6 @@ interface AddAppModalProps {
     categoryLabel: string;
 }
 
-type AuthStatus = 'pending' | 'testing' | 'connected' | 'error';
-interface AppAuthState {
-    systemId: string;
-    status: AuthStatus;
-    credentials: Record<string, string>;
-    errorMessage?: string;
-    successMessage?: string;
-    warningMessage?: string;
-    workflowId?: string;
-    executionId?: string;
-    errorCode?: number;
-}
-interface AuthParameter {
-    description: string;
-    example: string;
-    id: string;
-    name: string;
-    required: boolean;
-    schema: {
-        type: string;
-    };
-}
-interface AppAuthentication {
-    type: string;
-    description?: string;
-    redirect_uri?: string;
-    token_uri?: string;
-    refresh_uri?: string;
-    authorization_url?: string;
-    auth_uri?: string;
-    authorize_url?: string;
-    scope?: string[];
-    client_id?: string;
-    client_secret?: string;
-    parameters?: AuthParameter[];
-}
-interface ApiAuthEntry {
-    id?: string;
-    label?: string;
-    app: {
-        id: string;
-        name: string;
-        large_image?: string;
-    };
-    active?: boolean;
-    created?: number;
-    edited?: number;
-    validation?: {
-        valid: boolean;
-        error?: string;
-        last_valid?: number;
-    };
-}
-interface AppAuthConfigProps extends ShuffleHostProps {
-    apps: AlgoliaSearchApp[];
-    authStates: Record<string, AppAuthState>;
-    authenticatedApps?: ApiAuthEntry[];
-    onAuthChange: (appId: string, credentials: Record<string, string>) => void;
-    onTestConnection: (appId: string, authenticationId?: string) => void;
-    onSaveAuth: (appId: string, credentials: Record<string, string>) => Promise<boolean>;
-    onSelectAuth?: (appId: string, authId: string) => void;
-    onRefreshAuth?: () => Promise<void> | void;
-}
-interface AppAuthCardProps extends ShuffleHostProps {
-    app: AlgoliaSearchApp;
-    authState: AppAuthState;
-    isExpanded: boolean;
-    onToggle: () => void;
-    onAuthChange: (appId: string, credentials: Record<string, string>) => void;
-    onTestConnection: (appId: string, authenticationId?: string) => void;
-    onSaveAuth: (appId: string, credentials: Record<string, string>) => Promise<boolean>;
-    apiAuthEntries: ApiAuthEntry[];
-    onSelectAuth?: (appId: string, authId: string) => void;
-    /** Called to refresh auth entries (e.g. after OAuth popup closes) */
-    onRefreshAuth?: () => Promise<void> | void;
-    /** When true, do NOT auto-fill URL fields with the param.example value. */
-    disableUrlPrefill?: boolean;
-    /** Hide the entire card header row (app icon, name, description, chips, docs, expand). Body stays expanded. */
-    hideHeader?: boolean;
-    /** Hide the "Configured / Not configured" and "Tested / Not tested" chips. */
-    hideStatusChips?: boolean;
-    /** Hide the documentation (book icon) link. */
-    hideDocsLink?: boolean;
-    /** Hide URL-like fields (name/id containing "url", "endpoint", or "host").
-     *  Use when the URL is supplied externally (e.g. via a provider preset). */
-    hideUrlFields?: boolean;
-    /** Render without the outer Card border so the component can be embedded
-     *  inside another bordered container without the nested "double border" look. */
-    borderless?: boolean;
-    /** Compact mode for embedded auth setup (e.g. Local LLM). Hides the
-     *  "Select authentication" dropdown and the large "Pending Verification"
-     *  detail panel with its standalone Test Connection button. The inline
-     *  credentials form (with the small "Test Authentication" CTA) is always
-     *  visible so users can edit & retest in one place. */
-    compactAuthForm?: boolean;
-    /** Always render the "Select authentication" dropdown, even when there are no
-     *  saved entries yet, so the UI does not switch between two different shapes. */
-    alwaysShowAuthSelector?: boolean;
-    /** Suppress the "Authentication saved" success toast (embedded flows that
-     *  already give their own feedback, e.g. the LLM provider config). */
-    suppressSaveToast?: boolean;
-    /** Render additional fields inside the expanded body, above the credential
-     *  inputs. The slot receives the live `localCredentials` and a `setField`
-     *  helper so its values are persisted as part of the auth on Save. */
-    extraFieldsSlot?: (api: {
-        credentials: Record<string, string>;
-        setField: (key: string, value: string) => void;
-    }) => React.ReactNode;
-    /** Known-ahead-of-time auth schema. When provided the fields render
-     *  instantly and no app-config request is made (no "Loading configuration"). */
-    initialAuthConfig?: AppAuthentication;
-}
-declare const AppAuthCard: ({ app, authState, isExpanded, onToggle, onAuthChange, onTestConnection, onSaveAuth, apiAuthEntries, onSelectAuth, onRefreshAuth, disableUrlPrefill, hideHeader, hideStatusChips, hideDocsLink, hideUrlFields, borderless, compactAuthForm, alwaysShowAuthSelector, suppressSaveToast, extraFieldsSlot, initialAuthConfig, globalUrl, userdata, isLoaded, isLoggedIn, serverside, }: AppAuthCardProps) => React$1.JSX.Element;
-declare const AppAuthConfig: ({ apps, authStates, authenticatedApps, onAuthChange, onTestConnection, onSaveAuth, onSelectAuth, onRefreshAuth, globalUrl, userdata, isLoaded, isLoggedIn, serverside, }: AppAuthConfigProps) => React$1.JSX.Element;
-
 /**
  * useAppAuthFlow — Shared hook for the search→authenticate flow.
  * Encapsulates fetching auth entries, saving credentials, and testing connections.
@@ -1508,7 +1642,8 @@ type DiagnosisEvidence = {
     value: string;
 };
 type OutputDiagnosis = {
-    kind: 'auth' | 'permission' | 'not_found' | 'rate_limit' | 'token_limit' | 'network' | 'validation' | 'generic';
+    kind: 'auth' | 'ai_auth' | 'permission' | 'not_found' | 'rate_limit' | 'token_limit' | 'network' | 'validation' | 'generic';
+    isAiAuth?: boolean;
     status?: number;
     title: string;
     explanation: string;
@@ -1518,6 +1653,8 @@ type OutputDiagnosis = {
 };
 declare const diagnoseOutputWarning: (run: DiagnosableRun) => OutputDiagnosis | null;
 
+declare const DEMO_AGENT_RUNS: AgentRun[];
+
 /**
  * useAppLookup — Resolve an app's display name, image, categories,
  * canonical Algolia objectID and matching auth entries from just
@@ -1645,31 +1782,13 @@ interface AppDetailContextType {
 declare const AppDetailProvider: ({ children }: {
     children: ReactNode;
 }) => React$1.JSX.Element;
+/** Safe hook: returns context if inside AppDetailProvider, or a graceful fallback (navigating to /apps/:name on openApp) if outside. Never throws. */
 declare const useAppDetail: () => AppDetailContextType;
 /** Safe variant: returns null if no provider is mounted. Useful for components used both inside and outside the dashboard. */
-declare const useAppDetailOptional: () => AppDetailContextType;
+declare const useAppDetailOptional: () => AppDetailContextType | null;
 
 declare const useSyncHostBaseUrl: (globalUrl: string | undefined | null) => void;
 
-/**
- * Global fetch circuit breaker.
- *
- * Installs a one-time wrapper around `window.fetch` that protects the Shuffle
- * backend from infinite-loop spam. If the same endpoint (method + URL pathname,
- * scoped to a Shuffle backend origin) fails repeatedly inside a short window,
- * subsequent calls fail-fast with a synthetic 503 for a cooldown period.
- *
- * The breaker is "half-open": shortly after tripping it lets a single probe
- * request through. If that probe succeeds the endpoint is restored immediately
- * instead of staying blocked for the full cooldown.
- *
- * This is a safety net — components and hooks should still throttle / cache
- * their own requests. The breaker only kicks in when something has gone wrong
- * (a useEffect missing deps, a render loop, an unreachable backend).
- *
- * Both Shuffle-Core and Shuffle-MCPs install this — it is idempotent so the
- * first call wins and the second is a no-op.
- */
 /** Register a backend origin as one we should guard. Idempotent. */
 declare const registerProtectedOrigin: (url: string | undefined | null) => void;
 declare const installFetchBreaker: () => void;
@@ -1730,6 +1849,21 @@ interface DatastoreItem {
         value?: string;
         data?: string;
     }>;
+    rbac?: RBACConfig;
+}
+interface PermissionRule {
+    roles?: string[];
+    users?: string[];
+    groups?: string[];
+    scopes?: string[];
+}
+interface RBACConfig {
+    inherit?: boolean;
+    public?: boolean;
+    read?: PermissionRule;
+    write?: PermissionRule;
+    execute?: PermissionRule;
+    admin?: PermissionRule;
 }
 interface CategoryAutomation {
     id?: string;
@@ -1753,6 +1887,7 @@ interface CategoryConfig {
     settings: {
         timeout: number;
         public: boolean;
+        rbac?: RBACConfig;
     };
 }
 interface DatastoreKeyExisted {
@@ -1782,7 +1917,7 @@ interface DatastoreDiagnostics {
     status?: number;
     statusText?: string;
     contentType?: string | null;
-    responseShape?: 'array' | 'keys' | 'data' | 'unknown';
+    responseShape?: 'array' | 'keys' | 'data' | 'object' | 'unknown';
     itemCount?: number;
     totalAmount?: number | null;
     bodyPreview?: string;
@@ -1793,7 +1928,9 @@ declare const setRuntimeOrgId: (orgId: string | null) => void;
 /**
  * Set a single item in the datastore
  */
-declare const setDatastoreItem: (key: string, value: string | object, category: string, overrideOrgId?: string) => Promise<DatastoreResponse>;
+declare const setDatastoreItem: (key: string, value: string | object, category: string, overrideOrgId?: string, options?: {
+    regionUrl?: string;
+}) => Promise<DatastoreResponse>;
 /**
  * Set multiple items in the datastore (bulk create) using v2 API
  */
@@ -1806,6 +1943,7 @@ declare const setDatastoreItems: (items: {
  */
 declare const getDatastoreItem: (key: string, category: string, overrideOrgId?: string, options?: {
     priority?: boolean;
+    regionUrl?: string;
 }) => Promise<DatastoreResponse & {
     item?: DatastoreItem;
 }>;
@@ -1829,7 +1967,9 @@ declare const getDatastoreByCategory: (category: string, cursor?: string, limit?
 /**
  * Delete a single item from the datastore
  */
-declare const deleteDatastoreItem: (key: string, category: string, overrideOrgId?: string) => Promise<DatastoreResponse>;
+declare const deleteDatastoreItem: (key: string, category: string, overrideOrgId?: string, options?: {
+    regionUrl?: string;
+}) => Promise<DatastoreResponse>;
 /**
  * Delete multiple items from the datastore (bulk delete)
  */
@@ -1841,7 +1981,8 @@ declare const deleteDatastoreItems: (keys: string[], category: string) => Promis
 }>;
 declare const DATASTORE_CATEGORIES: {
     readonly INCIDENTS: "shuffle-security_incidents";
-    readonly VULNERABILITIES: "shuffle-security_vulnerabilities";
+    readonly VULNERABILITIES: "shuffle-security_vulns";
+    readonly VULNS: "shuffle-security_vulns";
     readonly ASSETS: "shuffle-security_assets";
     readonly PACKAGES: "shuffle-security_packages";
     readonly SOFTWARE: "shuffle-security_software";
@@ -2037,6 +2178,43 @@ declare const VideoEmbed: React__default.FC<{
     title?: string;
 }>;
 
+/**
+ * connectedSourcesService — Discovers and connects tenant ingestion sources and forward destinations
+ * as active AI tools in contextual Ask AI panels.
+ *
+ * Self-contained: relative imports only within Shuffle-MCPs.
+ */
+interface ConnectedToolApp {
+    name: string;
+    id?: string;
+    icon?: string;
+}
+/**
+ * Retrieve cached connected tools from localStorage for immediate synchronous render.
+ */
+declare function getCachedConnectedTools(category?: string): ConnectedToolApp[];
+/**
+ * Save discovered connected tools to localStorage cache.
+ */
+declare function setCachedConnectedTools(category: string, tools: ConnectedToolApp[]): void;
+/** Maximum number of automatically assigned tools. */
+declare const MAX_AUTO_ASSIGNED_TOOLS = 6;
+/**
+ * Merge connected tools into a base app list without duplicating entries,
+ * preserving base apps first and appending tools enabled for ingestion.
+ */
+declare function mergeConnectedTools(baseApps?: ConnectedToolApp[], connectedTools?: ConnectedToolApp[], maxTools?: number): ConnectedToolApp[];
+/**
+ * Derives connected tools from raw API responses.
+ * Strictly includes only available tools that are BOTH authenticated AND configured for ingestion,
+ * capped to a maximum number of tools (default 4).
+ */
+declare function resolveConnectedTools(category: 'incidents' | 'vulnerabilities' | string, authApiResponse?: any[], workflowsResponse?: any[], maxTools?: number): ConnectedToolApp[];
+/**
+ * Fetch live connected tools from tenant workflows and authenticated apps.
+ */
+declare function fetchConnectedTools(category: string, resolveUrl?: (path: string) => string, resolveHeaders?: () => Record<string, string>): Promise<ConnectedToolApp[]>;
+
 /**
  * Local Singul Library — fully self-contained.
  * No host-app `@/` imports remain inside this folder (assets aside).
@@ -2057,6 +2235,8 @@ type ShuffleTheme = 'light' | 'dark' | 'system';
 declare const ShuffleMCP: React__default.ForwardRefExoticComponent<any>;
 
 declare const AppDetailDrawer: React__default.ComponentType<any>;
+declare const AppDetailContent: React__default.ComponentType<any>;
+
 declare const AppSearchDrawer: React__default.ComponentType<any>;
 declare const AiAgentPromptsEditor: React__default.ComponentType<any>;
 
@@ -2091,4 +2271,4 @@ declare const LocalLLMConfig: React__default.ComponentType<any>;
 
 declare const AddAppModal: React__default.ComponentType<any>;
 
-export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentContextApp, type AgentContextRule, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentResolvedContext, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailDrawer, AppDetailProvider, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, AskAiButton, type AskAiButtonProps, AskAiDrawer, type AskAiDrawerProps, AskAiSidePanel, type AskAiSidePanelProps, AskAiWidget, type AskAiWidgetProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_CONTEXT_RULES, DEFAULT_AGENT_PROMPT_PREFIX, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, ShuffleMarkdown as Markdown, MarkdownJsonBlock, type OutputDiagnosis, type PageContextChoice, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, ShuffleMarkdown, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, VideoEmbed, applyRegionFromPayload, clearPageContextChoice, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getActivePageEntityName, getAgentContextRules, getApiUrl, getAuthHeader, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, getPageContextChoice, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isAgentRoute, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, matchRoutePattern, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerAgentContextRule, registerProtectedOrigin, resetRegionUrl, resolveAgentContext, resolveApp, resolveApps, resolveVideoUrl, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setPageContextChoice, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useContextAwareAgent, useSyncHostBaseUrl };
+export { AGENT_PRESETS, AGENT_PROMPT_PREFIX_CATEGORY, API_CONFIG, ASK_AI_PANEL_WIDTH_STORAGE_KEY, AddAppModal, type AddAppModalProps, AgentActivityList, type AgentActivityListProps, type AgentActivityParams, type AgentActivityResponse, type AgentContextApp, type AgentContextRule, type AgentDecision, AgentExecutionDrawer, type AgentExecutionDrawerProps, AgentIcon, type AgentLocalModel, type AgentPreset, AgentPresets, type AgentPresetsProps, AgentPromptPrefixChip, type AgentPromptPrefixChipProps, type AgentResolvedContext, type AgentRun, AgentRunDiagnosisBanner, AgentRunDrawer, type AgentRunDrawerProps, type AgentRunDrawerTab, type AgentRunResult, AgentUI, type AgentUIApp, type AgentUIProps, AgentsView, type AgentsViewProps, AiAgentPromptsEditor, type AiAgentPromptsEditorProps, type AlgoliaSearchApp, type ApiAuthEntry, AppAuthCard, type AppAuthCardProps, AppAuthConfig, AppAuthSection, type AppAuthSectionProps, type AppAuthState, type AppAuthentication$1 as AppAuthentication, AppDetailContent, type AppDetailContentProps, AppDetailDrawer, AppDetailProvider, type AppInfo, type AppLookupResult, AppSearchDrawer, type AppSelectedEvent, AppTitleHeader, type AppTitleHeaderProps, AskAiButton, type AskAiButtonProps, AskAiDrawer, type AskAiDrawerProps, AskAiSidePanel, type AskAiSidePanelProps, AskAiWidget, type AskAiWidgetProps, type AuthStatus, CASES_PATTERNS, COMMUNICATION_PATTERNS_NAMES, type CategoryAutomation, type CategoryConfig, type ConnectedToolApp, type CustomStyles, DATASTORE_CATEGORIES, DEFAULT_AGENT_CONTEXT_RULES, DEFAULT_AGENT_PROMPT_PREFIX, DEMO_AGENT_RUNS, type DatastoreDiagnostics, type DatastoreItem, type DatastoreResponse, type DiagnosableRun, type DiagnosisEvidence, EDR_PATTERNS, EMAIL_APP_PATTERNS, FORWARD_TICKETS_WORKFLOW_NAME, type FetchAppsOptions, INGEST_TICKETS_WORKFLOW_NAME, type IngestionCategory, IntegrationStatus, LocalLLMConfig, type LocalLLMConfigProps, type LocalLLMTestResult, MAX_ASK_AI_PANEL_WIDTH, MAX_AUTO_ASSIGNED_TOOLS, MIN_ASK_AI_PANEL_WIDTH, ShuffleMarkdown as Markdown, MarkdownJsonBlock, type OutputDiagnosis, type PageContextChoice, type ResolvedApp, SIEM_PATTERNS, type ShuffleHostProps, ShuffleMCP, type ShuffleMCPHandle, type ShuffleMCPProps, ShuffleMarkdown, type ShuffleMcpColorMode, ShuffleMcpThemeProvider, type ShuffleMcpThemeProviderProps, ShufflePipelinesBanner, type ShuffleTheme, SingulActionsPreview, THREAT_INTEL_PATTERNS, TryMcpSection, type TryMcpSectionProps, UsageBar, type UsageBarProps, type UseAgentPromptPrefixOptions, VERIFIED_BUILTIN_APPS, VULN_SCANNER_PATTERNS, type ValidatedIngestionApp, VideoEmbed, applyRegionFromPayload, checkAppNameMatch, clearPageContextChoice, ShuffleMCP as default, deleteDatastoreItem, deleteDatastoreItems, diagnoseOutputWarning, extractActionAppNames, extractValidatedIngestionApps, extractWorkflowActionAppNames, extractWorkflowAppNames, fetchApps, fetchAppsViaApiConfig, fetchConnectedTools, findForwardTicketsWorkflow, findIngestTicketsWorkflow, getActivePageEntityName, getAgentContextRules, getApiUrl, getAuthHeader, getCachedConnectedTools, getDatastoreByCategory, getDatastoreItem, getDatastoreItemPublic, getDatastorePageSize, getFailureInfo, getHostBaseUrl, getIngestionCategory, getPageContextChoice, hasOutputWarning, installFetchBreaker, invalidateAppsCache, invalidateResolvedApps, isAgentRoute, isCloud, isCloudDomain, isEmailApp, isIngestionApp, isOnprem, isShuffleCloudDomain, isShuffleSecurityBackend, isThreatIntelApp, isVulnScannerApp, isWorkflowScheduleStopped, mapCloudRegionUrl, matchRoutePattern, mergeConnectedTools, normalizeAppName, parseRunResult, refreshAllIntegrationStatus, registerAgentContextRule, registerProtectedOrigin, resetRegionUrl, resolveAgentContext, resolveApp, resolveApps, resolveConnectedTools, resolveVideoUrl, scheduleAgentRun, searchAgentActivity, seedResolvedApp, setCachedConnectedTools, setDatastoreItem, setDatastoreItems, setHostBaseUrl, setPageContextChoice, setRegionUrl, setRuntimeOrgId, setToastImpl, shuffleFetch, toast, useAgentPromptPrefix, useAppAuth, useAppAuthFlow, useAppDetail, useAppDetailOptional, useAppLookup, useContextAwareAgent, useSyncHostBaseUrl };