@tangle-network/agent-app 0.43.39 → 0.43.41

package/dist/index.js

@@ -202,11 +202,45 @@ import {
   runPreflight,
   sandboxAuthProbe
 } from "./chunk-Q4TKVF3L.js";
+import {
+  assertSafeKeySegment,
+  createProxiedArtifactRoute,
+  createR2ObjectStore,
+  objectKey,
+  signObjectUrl,
+  verifyObjectUrl
+} from "./chunk-UMSOSUEU.js";
 import {
   BULK_DELETE_MAX_THREADS,
   ChatStoreInputError,
   threadTitleFromMessage
 } from "./chunk-5EQCITY3.js";
+import {
+  TURN_EVENTS_MIGRATION_SQL,
+  TURN_STATUS_SCOPE_MIGRATION_SQL,
+  asRecord,
+  asString,
+  buildUserTextParts,
+  coalesceChatStreamEvents,
+  coalesceDeltas,
+  createBufferedTurnTap,
+  createD1TurnEventStore,
+  createMemoryTurnEventStore,
+  encodeEvent,
+  finalizeAssistantParts,
+  getPartKey,
+  mergePersistedPart,
+  messageHasTurnId,
+  normalizeClientTurnId,
+  normalizePersistedPart,
+  normalizeTime,
+  normalizeToolEvent,
+  pumpBufferedTurn,
+  replayTurnEvents,
+  resolveChatTurn,
+  resolveToolId,
+  resolveToolName
+} from "./chunk-XYWCGFII.js";
 import {
   createInteractionAnswerRoute,
   listSessionInteractions,
@@ -266,32 +300,6 @@ import {
   encryptBytes,
   encryptWithKey
 } from "./chunk-TA5Q4I2K.js";
-import {
-  TURN_EVENTS_MIGRATION_SQL,
-  TURN_STATUS_SCOPE_MIGRATION_SQL,
-  asRecord,
-  asString,
-  buildUserTextParts,
-  coalesceChatStreamEvents,
-  coalesceDeltas,
-  createBufferedTurnTap,
-  createD1TurnEventStore,
-  createMemoryTurnEventStore,
-  encodeEvent,
-  finalizeAssistantParts,
-  getPartKey,
-  mergePersistedPart,
-  messageHasTurnId,
-  normalizeClientTurnId,
-  normalizePersistedPart,
-  normalizeTime,
-  normalizeToolEvent,
-  pumpBufferedTurn,
-  replayTurnEvents,
-  resolveChatTurn,
-  resolveToolId,
-  resolveToolName
-} from "./chunk-XYWCGFII.js";
 import {
   createKnowledgeLoop,
   createReviewerDecider,
@@ -353,7 +361,7 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "./chunk-H4WCEZE3.js";
+} from "./chunk-5GWXCSLQ.js";
 import {
   DEFAULT_HARNESS,
   KNOWN_HARNESSES,
@@ -374,7 +382,7 @@ import {
   restrictTaxonomy,
   verifyCapabilityToken,
   verifyExpiringCapabilityToken
-} from "./chunk-3II3AWHY.js";
+} from "./chunk-PJC4NXPA.js";
 import {
   DEFAULT_APP_TOOL_PATHS,
   DEFAULT_HEADER_NAMES,
@@ -386,6 +394,7 @@ import {
   createMcpToolHandler,
   readToolArgs
 } from "./chunk-7EVZUIHW.js";
+import "./chunk-S5SRJJQG.js";
 import {
   buildConsentUrl,
   createBrokerTokenProvider
@@ -523,6 +532,7 @@ export {
   assertMediaUrl,
   assertPositiveFinite,
   assertProvisionPayloadWithinCap,
+  assertSafeKeySegment,
   assertSceneMediaSrc,
   assertSequenceMediaUrl,
   attachReasoningEffort,
@@ -604,6 +614,8 @@ export {
   createPresetToolHandlers,
   createPresetWorkspaceKeyManager,
   createPresetWorkspaceKeyStore,
+  createProxiedArtifactRoute,
+  createR2ObjectStore,
   createReviewerDecider,
   createSandboxTerminalToken,
   createSequencesMcpHandler,
@@ -711,6 +723,7 @@ export {
   normalizeToolEvent,
   noticePart,
   noticePartKey,
+  objectKey,
   outcomeStatus,
   parseAssetSpec,
   parseInteractionCancel,
@@ -772,6 +785,7 @@ export {
   secondsToFrames,
   secretStoreFromClient,
   serializeCookie,
+  signObjectUrl,
   snapHarnessToModel,
   snapModelToHarness,
   snapshotFrame,
@@ -819,6 +833,7 @@ export {
   verifyCapabilityToken,
   verifyCompletion,
   verifyExpiringCapabilityToken,
+  verifyObjectUrl,
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   volumeGateProposalId,

package/dist/object-store/index.d.ts

@@ -0,0 +1,202 @@
+/**
+ * `/object-store` — a portable, secure object store for durable large
+ * attachments (uploaded PDFs, images, exports) that are too big to ride a chat
+ * turn body or live in KV.
+ *
+ * SECURITY POSTURE (this module guards a legal privilege wall). Every object key
+ * carries an operator segment and a customer segment, and access is by a
+ * short-lived HMAC-signed URL whose signature covers the EXACT key (operator +
+ * customer + upload id + filename) AND the expiry. A tampered key, a swapped
+ * customer segment, or a replayed-after-expiry URL all fail the signature or the
+ * expiry check and are refused. The signing secret is a PARAMETER on every call
+ * — this module reads NOTHING global (no `process.env`, no ambient config); if a
+ * product forgets to bind the secret, {@link verifyObjectUrl} fails closed and
+ * {@link signObjectUrl} throws rather than minting an unsigned URL.
+ *
+ * PURE MECHANISM behind two seams: an {@link ObjectStore} port (the R2 impl maps
+ * 1:1 to a bucket held behind the structural {@link R2LikeBucket} — so
+ * `@cloudflare/workers-types` never leaks into this package's public `.d.ts`)
+ * and the signing `secret`. Reads and writes STREAM: {@link createR2ObjectStore}
+ * returns the R2 object's `.body` stream directly and never calls
+ * `.text()`/`.arrayBuffer()`, so a 15 MB PDF flows through the worker without
+ * buffering the whole file into the isolate's heap.
+ *
+ * RECONCILIATION with the sandbox `storage` seam (`../sandbox` →
+ * `SandboxRuntimeConfig.storage`): that is BYOS3/R2 *snapshot* storage — it
+ * checkpoints and restores a sandbox box's filesystem for durable session
+ * execution. This is a DIFFERENT concern: a content-addressed store for
+ * user-facing attachments gated by a signed-URL privilege wall. They are not
+ * interchangeable and must not be merged: one persists agent runtime state, the
+ * other serves per-operator/per-customer documents to browsers. Do not route
+ * artifact downloads through the snapshot bucket, or vice versa.
+ */
+/** Options for a single {@link ObjectStore.put}. Both fields are optional; a
+ *  store that needs a fixed content length (e.g. R2 with a `ReadableStream`
+ *  body) uses `contentLength` when present. */
+interface PutObjectOptions {
+    /** MIME type recorded with the object (returned by `get`/`head`). Advisory:
+     *  the proxied download route always serves `application/octet-stream`. */
+    contentType?: string;
+    /** Byte length of `body`, when known. Some backends require it for a
+     *  streamed body; the R2 impl passes a known length through when supplied. */
+    contentLength?: number;
+}
+/** A retrieved object. `stream()` is the ONLY way to read the bytes — there is
+ *  deliberately no `text()`/`arrayBuffer()`, so a large object never buffers
+ *  into the isolate heap. */
+interface ObjectBody {
+    /** The object's bytes as a `ReadableStream` (backed by R2's `.body`). */
+    stream(): ReadableStream;
+    /** Size in bytes. */
+    size: number;
+    /** Recorded MIME type, if any. */
+    contentType?: string;
+}
+/**
+ * Portable object-store port. `get`/`head` return `null` on a miss and NEVER
+ * throw for a missing key (a miss is a normal control-flow outcome, not an
+ * error); `delete` is idempotent.
+ */
+interface ObjectStore {
+    put(key: string, body: ReadableStream | Uint8Array, opts?: PutObjectOptions): Promise<void>;
+    /** `null` on a miss — never throws for a missing key. */
+    get(key: string): Promise<ObjectBody | null>;
+    /** `null` on a miss — never throws for a missing key. */
+    head(key: string): Promise<{
+        size: number;
+        contentType?: string;
+    } | null>;
+    delete(key: string): Promise<void>;
+}
+/** Head/metadata shape of a stored object (structural match of R2's `R2Object`). */
+interface R2LikeObjectHead {
+    size: number;
+    httpMetadata?: {
+        contentType?: string;
+    };
+}
+/** Body shape of a retrieved object (structural match of R2's `R2ObjectBody`).
+ *  `body` is the streamed content — the impl reads this, never `.text()`. */
+interface R2LikeObjectBody extends R2LikeObjectHead {
+    body: ReadableStream;
+}
+/**
+ * The minimal slice of Cloudflare's `R2Bucket` this module calls. A real
+ * `R2Bucket` satisfies it structurally, so the consumer passes its binding
+ * without this package ever importing `@cloudflare/workers-types` (which would
+ * otherwise leak into the public `.d.ts`).
+ */
+interface R2LikeBucket {
+    put(key: string, value: ReadableStream | Uint8Array | ArrayBuffer, options?: {
+        httpMetadata?: {
+            contentType?: string;
+        };
+    }): Promise<unknown>;
+    get(key: string): Promise<R2LikeObjectBody | null>;
+    head(key: string): Promise<R2LikeObjectHead | null>;
+    delete(key: string): Promise<void>;
+}
+/**
+ * Map the {@link ObjectStore} port onto an R2 bucket 1:1. `get` STREAMS: it
+ * returns the R2 object's `.body` behind `ObjectBody.stream()` and never calls
+ * `.text()`/`.arrayBuffer()`, so a large file flows through the worker rather
+ * than buffering into the isolate.
+ */
+declare function createR2ObjectStore({ bucket }: {
+    bucket: R2LikeBucket;
+}): ObjectStore;
+/**
+ * Assert a single object-key path SEGMENT (an operator id, customer id, or
+ * upload id) is safe to interpolate into a key, and return it. Throws on the
+ * traversal / injection shapes: `..` anywhere, a leading `/`, a backslash, or an
+ * empty segment. Consumers should call this on caller-supplied identifiers
+ * BEFORE any `get`/`put` so an attacker-controlled id can never widen the key
+ * beyond its own operator+customer prefix.
+ */
+declare function assertSafeKeySegment(s: string): string;
+/** Inputs to {@link objectKey}. `customerId` is optional — an unattributed
+ *  upload lands under the reserved `_unattributed` customer segment. */
+interface ObjectKeyParts {
+    operatorId: string;
+    /** Optional — omitted/undefined groups the upload under `_unattributed`. */
+    customerId?: string;
+    uploadId: string;
+    filename: string;
+}
+/**
+ * Build the canonical object key: `operator/customer/upload-filename`. The
+ * operator, customer, and upload segments are asserted safe (throwing on
+ * traversal); the filename is sanitized to a safe leaf. The customer segment
+ * falls back to `_unattributed` when no customer is attributed. Because a signed
+ * URL binds the EXACT key, the operator and customer segments are part of the
+ * privilege wall — a caller cannot later swap them without breaking the
+ * signature.
+ */
+declare function objectKey({ operatorId, customerId, uploadId, filename }: ObjectKeyParts): string;
+/** Arguments to {@link signObjectUrl}. */
+interface SignObjectUrlArgs {
+    /** The exact object key to authorize (from {@link objectKey}). */
+    key: string;
+    /** Absolute expiry in epoch MILLISECONDS (e.g. `Date.now() + 5 * 60_000` for a
+     *  ~5-minute TTL — the recommended default; keep it short). */
+    exp: number;
+    /** HMAC signing secret. Must be non-empty — signing fails closed otherwise. */
+    secret: string;
+}
+/**
+ * Mint a signed query string (`?key=…&exp=…&sig=…`) authorizing a download of
+ * `key` until `exp`. The product appends it to its artifact route path
+ * (`` `/artifacts${await signObjectUrl(...)}` ``); {@link createProxiedArtifactRoute}
+ * / {@link verifyObjectUrl} read it straight off the request URL, so the route's
+ * own mount path never matters.
+ *
+ * FAIL-CLOSED: throws if `secret` is empty (never mints an unsigned URL) and if
+ * `key` is unsafe (traversal). Async because the HMAC primitive is WebCrypto.
+ *
+ * TTL: `exp` is caller-supplied on purpose (the caller knows the sensitivity);
+ * keep it SHORT — ~5 minutes is the recommended default for a privilege-walled
+ * document.
+ */
+declare function signObjectUrl({ key, exp, secret }: SignObjectUrlArgs): Promise<string>;
+/** Result of {@link verifyObjectUrl}: the canonical key on success, nothing
+ *  distinguishing on failure (so a rejection leaks no detail). */
+type VerifyObjectUrlResult = {
+    ok: true;
+    key: string;
+} | {
+    ok: false;
+};
+/**
+ * Verify a signed download request. Reads `key`/`exp`/`sig` off the request URL,
+ * canonicalizes the key identically to the signer, recomputes the HMAC and
+ * constant-time-compares it, and checks the expiry. Returns the canonical key on
+ * success.
+ *
+ * FAIL-CLOSED everywhere: an empty `secret`, a missing/ malformed parameter, a
+ * non-finite expiry, a signature mismatch, or an expired URL all return
+ * `{ ok: false }` — and the mismatch path uses a constant-time compare so a
+ * near-correct signature is not distinguishable by timing. Async because the
+ * HMAC primitive is WebCrypto.
+ */
+declare function verifyObjectUrl(request: Request, { secret }: {
+    secret: string;
+}): Promise<VerifyObjectUrlResult>;
+/**
+ * Build a download handler that verifies a signed request and STREAMS the object
+ * back with a conservative, non-executable content type. Status contract:
+ *
+ * - `400` — the `key` is missing or malformed (bad encoding / traversal). This
+ *   is an unauthenticated client error and leaks NOTHING about object existence.
+ * - `403` — the signature is missing, wrong, or expired.
+ * - `404` — the signature was valid but no object exists at that key (existence
+ *   is only ever revealed to a validly-signed request).
+ * - `200` — streams the bytes with `Content-Disposition: attachment`,
+ *   `Content-Type: application/octet-stream`, and `X-Content-Type-Options:
+ *   nosniff`, so the worker never serves active/inline content.
+ */
+declare function createProxiedArtifactRoute({ store, secret, }: {
+    store: ObjectStore;
+    secret: string;
+}): (request: Request) => Promise<Response>;
+
+export { type ObjectBody, type ObjectKeyParts, type ObjectStore, type PutObjectOptions, type R2LikeBucket, type R2LikeObjectBody, type R2LikeObjectHead, type SignObjectUrlArgs, type VerifyObjectUrlResult, assertSafeKeySegment, createProxiedArtifactRoute, createR2ObjectStore, objectKey, signObjectUrl, verifyObjectUrl };

package/dist/object-store/index.js

@@ -0,0 +1,18 @@
+import {
+  assertSafeKeySegment,
+  createProxiedArtifactRoute,
+  createR2ObjectStore,
+  objectKey,
+  signObjectUrl,
+  verifyObjectUrl
+} from "../chunk-UMSOSUEU.js";
+import "../chunk-S5SRJJQG.js";
+export {
+  assertSafeKeySegment,
+  createProxiedArtifactRoute,
+  createR2ObjectStore,
+  objectKey,
+  signObjectUrl,
+  verifyObjectUrl
+};
+//# sourceMappingURL=index.js.map

package/dist/object-store/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/sandbox/index.js

@@ -54,10 +54,11 @@ import {
   verifySandboxTerminalToken,
   verifyTerminalProxyToken,
   writeProfileFilesToBox
-} from "../chunk-H4WCEZE3.js";
+} from "../chunk-5GWXCSLQ.js";
 import "../chunk-E7QYOOON.js";
-import "../chunk-3II3AWHY.js";
+import "../chunk-PJC4NXPA.js";
 import "../chunk-7EVZUIHW.js";
+import "../chunk-S5SRJJQG.js";
 import "../chunk-7W5XSTUF.js";
 import "../chunk-MFRCM32T.js";
 export {

package/dist/teams-react/index.js

@@ -1,12 +1,12 @@
+import {
+  MembersPanel
+} from "../chunk-GNL3MG5J.js";
 import {
   InvitationsPanel
 } from "../chunk-7C64WKAH.js";
 import {
   InviteAcceptPage
 } from "../chunk-VCPZ3HTN.js";
-import {
-  MembersPanel
-} from "../chunk-GNL3MG5J.js";
 import "../chunk-63CE7FEZ.js";
 export {
   InvitationsPanel,

package/dist/tools/index.js

@@ -6,7 +6,7 @@ import {
   restrictTaxonomy,
   verifyCapabilityToken,
   verifyExpiringCapabilityToken
-} from "../chunk-3II3AWHY.js";
+} from "../chunk-PJC4NXPA.js";
 import {
   DEFAULT_APP_TOOL_PATHS,
   DEFAULT_HEADER_NAMES,
@@ -18,6 +18,7 @@ import {
   createMcpToolHandler,
   readToolArgs
 } from "../chunk-7EVZUIHW.js";
+import "../chunk-S5SRJJQG.js";
 import {
   APP_TOOL_NAMES,
   ToolInputError,

package/dist/web-react/index.d.ts

@@ -4,12 +4,13 @@ import { C as ChatInteraction, a as ChatInteractionField, b as ChatInteractionSt
 export { d as ComposerAnswerDelivery, I as INTERACTION_CANCEL_EVENT, e as INTERACTION_EVENT, f as INTERACTION_RESOLVED_EVENT, h as InteractionPersistedPart, N as NoticeKind, j as NoticePersistedPart, P as ParseInteractionResult, k as canTransitionInteractionStatus, l as cancelStatusFor, m as composerAnswerData, n as composerAnswerDeliveries, o as dedupeQuestionInteractionsByContent, p as fieldAcceptsFreeText, q as interactionFromWireRequest, r as interactionPartKey, s as interactionToPersistedPart, t as isRenderableInteractionKind, u as isSafeInteractionFieldKey, v as isTerminalInteractionStatus, w as noticePart, x as noticePartKey, y as parseInteractionCancel, z as parseInteractionRequest, A as persistedPartToInteraction, B as questionInteractionContentSignature } from '../contract-DYbTzEDf.js';
 import { InteractionData } from '@tangle-network/agent-interface';
 export { InteractionData, InteractionOutcome, InteractionRequest } from '@tangle-network/agent-interface';
+import { j as FileMention } from '../file-index-Bw_IQE_G.js';
+export { b as ChatTurnFilePartInput, a as ChatTurnPartInput, C as ChatTurnRequestPayload, g as FileIndexReadyResponse, h as FileIndexResponse, i as FileIndexWarmingResponse, o as buildMentionPromptBlock, p as chatTurnRequestInit, r as fileMentionsToParts, s as mediaTypeForMentionPath } from '../file-index-Bw_IQE_G.js';
 import { S as StepAgentActivity } from '../agent-activity-C8ZG0F0M.js';
 import { a as FlowTrace } from '../flow-types-Cb_AblZs.js';
 export { S as SandboxTerminalConnection, a as SandboxTerminalConnectionResponse, U as UseSandboxTerminalConnectionOptions, b as UseSandboxTerminalConnectionResult, t as tabTerminalConnectionId, u as useSandboxTerminalConnection } from '../sandbox-terminal-BIIC__CP.js';
 import { CatalogModel } from '../catalog/index.js';
 import { Harness } from '../harness/index.js';
-export { b as ChatTurnFilePartInput, a as ChatTurnPartInput, C as ChatTurnRequestPayload, f as chatTurnRequestInit } from '../wire-BaUF66AS.js';
 
 /**
  * Client-side chat-stream consumption — the NDJSON parse loop every agent
@@ -363,6 +364,97 @@ interface UseChatInteractionsResult {
 }
 declare function useChatInteractions(): UseChatInteractionsResult;
 
+/**
+ * `useFileMentions` — the glue a host passes straight into `AgentComposer`'s
+ * `mention` prop (`@tangle-network/sandbox-ui#184`) to wire up `@`-file
+ * mentions against `createSandboxFileIndexRoute` (`/chat-routes`).
+ *
+ * Fetches the index once per session from `indexUrl`, refreshes it in the
+ * background whenever the popover opens (a `fetchItems` call) if the cached
+ * copy has aged past `refreshAfterMs`, and answers every keystroke from an
+ * in-memory fuzzy filter — no per-keystroke network round trip. The returned
+ * `refresh()` lets a caller force a re-fetch immediately instead of waiting
+ * on `refreshAfterMs` — e.g. right after the agent creates a file mid-session.
+ *
+ * `MentionItem`/the `mention` prop shape mirror the FROZEN contract from
+ * sandbox-ui#184 structurally (no import: `/web-react` stays dependency-free
+ * beyond React, and `@tangle-network/sandbox-ui` is an optional peer).
+ */
+
+/** Mirrors sandbox-ui#184's `MentionItem` — the atomic pill's payload. For a
+ *  file mention, `id` is the workspace-relative path (the pill's stable
+ *  identity and the `@<id>` serialization sandbox-ui uses to round-trip
+ *  `value`), `label` is the display name, and `detail` carries the full path
+ *  for the popover row's secondary line. */
+interface MentionItem {
+    id: string;
+    label: string;
+    detail?: string;
+    kind?: string;
+}
+/** Mirrors sandbox-ui#184's `AgentComposerProps['mention']` shape — plug the
+ *  hook's `mention` return value straight into that prop. */
+interface ComposerMentionProp {
+    trigger?: string;
+    fetchItems(query: string): Promise<MentionItem[]>;
+    onMentionsChange?(mentions: MentionItem[]): void;
+    renderItem?(item: MentionItem): ReactNode;
+    emptyText?: string;
+}
+/**
+ * Ranks `files` against `query` (case-insensitive), capped to `limit`:
+ * name-prefix matches first, then name-substring, then path-substring.
+ * Within a tier, shorter names sort first (the more specific match), then
+ * alphabetically by path for a stable order. An empty query returns the
+ * first `limit` entries unranked — the popover's default list before typing.
+ * Pure and dependency-free (no fuzzy-match library) so it's cheap enough to
+ * re-run on every keystroke against a 10k-entry index.
+ */
+declare function rankFileMentions(files: readonly FileMention[], query: string, limit: number): FileMention[];
+/** Max popover results per query — enough to show a useful spread of matches
+ *  without pushing the fuzzy-filtered list past what a popover can usefully
+ *  render in one screen. */
+declare const DEFAULT_MENTION_LIMIT = 20;
+/** How long a `ready` index is served before a background refetch — long
+ *  enough that a full session's worth of popover opens don't repeatedly hit
+ *  the index endpoint, short enough that a stale listing doesn't linger too
+ *  far past workspace file changes. Callers who need the index current right
+ *  now (e.g. just after the agent creates a file) call `refresh()` instead of
+ *  waiting on this window. */
+declare const INDEX_REFRESH_AFTER_MS: number;
+/** Popover empty-state copy for a `ready` index whose query matched nothing.
+ *  Loading/warming/error states have their own copy — see `emptyTextFor`. */
+declare const DEFAULT_MENTION_EMPTY_TEXT = "No matching files";
+interface UseFileMentionsOptions {
+    /** GET endpoint returning `FileIndexResponse` (a `createSandboxFileIndexRoute`). */
+    indexUrl: string;
+    /** Max popover results per query. Default {@link DEFAULT_MENTION_LIMIT}. */
+    limit?: number;
+    /** How long a `ready` index is served without a background refetch.
+     *  Default {@link INDEX_REFRESH_AFTER_MS}. */
+    refreshAfterMs?: number;
+    /** `fetch` override for tests / non-global-fetch hosts. Default `fetch`. */
+    fetchImpl?: typeof fetch;
+    /** Text shown in the popover's empty state once the index is loaded and
+     *  the query matched nothing. Default {@link DEFAULT_MENTION_EMPTY_TEXT}. */
+    emptyText?: string;
+}
+interface UseFileMentionsResult {
+    /** Spread straight into `AgentComposer`'s `mention` prop. */
+    mention: ComposerMentionProp;
+    /** The files currently referenced by mentions in the composer's value —
+     *  the send-body list (map through `fileMentionsToParts`). */
+    mentions: FileMention[];
+    /** Drop all currently-referenced mentions (e.g. after a successful send). */
+    clearMentions: () => void;
+    /** Force a re-fetch of the index right now, ignoring `refreshAfterMs` — for
+     *  example right after the agent creates a file mid-session, so the next
+     *  popover open sees it. Dedupes against an already-in-flight load rather
+     *  than firing a second request. */
+    refresh: () => Promise<void>;
+}
+declare function useFileMentions(options: UseFileMentionsOptions): UseFileMentionsResult;
+
 /**
  * Provider brand marks — real logo path data (simple-icons / SVG Logos, both
  * CC0) inlined so the picker shows actual provider identity instead of
@@ -792,4 +884,4 @@ declare function useThinkingSeconds(active: boolean): number;
  */
 declare function ChatMessages({ messages, models, renderMarkdown, renderExtras, userLabel, agentLabel, loading, approval, onToolCallClick, toolRenderers, error, onRetry, renderEmpty, emptyState, header, }: ChatMessagesProps): react.JSX.Element;
 
-export { type ActivityTone, type AgentActivityPage, AgentActivityPanel, type AgentActivityPanelProps, type AgentActivityRecord, AgentSessionControls, type AgentSessionControlsProps, CatalogModel, ChatComposer, type ChatComposerProps, type ChatEmptyDoor, ChatEmptyState, type ChatEmptyStateProps, ChatInteraction, ChatInteractionField, ChatInteractionStatus, type ChatMessageMetrics, type ChatMessageSegment, ChatMessages, type ChatMessagesProps, ChatSelectField, type ChatStreamCallbacks, type ChatStreamToolCall, type ChatStreamToolResult, type ChatToolCallInfo, type ChatUiMessage, type ComposerFile, type ComposerFilePart, type ConsumeChatStreamResult, DEFAULT_EFFORT_LEVELS, type EffortLevel, EffortPicker, type EffortPickerProps, type FieldValues, FlowWaterfall, type FlowWaterfallProps, INTERACTION_SUBMIT_TIMEOUT_MESSAGE, INTERACTION_SUBMIT_TIMEOUT_MS, InteractionActionButton, type InteractionAnswerSubmission, type InteractionAnswerSubmitterOptions, InteractionBadge, type InteractionBadgeVariant, InteractionCancelData, InteractionPlanCard, type InteractionPlanCardProps, InteractionQuestionCard, type InteractionQuestionCardProps, InteractionRequestWire, type InteractionSubmitResult, MissionActivityLane, type MissionActivityLaneProps, ModelPicker, type ModelPickerProps, type ProposalApprovalHandlers, ProviderLogo, type ProviderLogoProps, QuestionOptionList, type QuestionOptionListProps, RunDrillIn, type RunDrillInProps, SeatPaywall, type SeatPaywallProps, type SmoothRevealOptions, type StreamChatOptions, type SubmitInteractionAnswer, type ToolDetailRenderers, type ToolRunRecord, type ToolRunStep, type UseChatInteractionsResult, type WaterfallRow, activityTone, buildAnswerData, cancelChatInteraction, consumeChatStream, createInteractionAnswerSubmitter, dispatchChatStreamLine, fieldAnswer, formatActivityCost, formatActivityDuration, formatModelCost, formatTokensPerSecond, hasSecretField, interactionStatusLabels, interactionTerminalNotes, isLateAnswerableStatus, lateAnswerMessage, mergeActivityPages, nextRevealCount, pendingApprovalOf, resolveChatInteraction, responseErrorMessage, restoreChatInteractions, streamChatTurn, terminalizePendingChatInteractions, upsertChatInteraction, useChatInteractions, usePending, usePopover, useSmoothText, useThinkingSeconds, waterfallLayout };
+export { type ActivityTone, type AgentActivityPage, AgentActivityPanel, type AgentActivityPanelProps, type AgentActivityRecord, AgentSessionControls, type AgentSessionControlsProps, CatalogModel, ChatComposer, type ChatComposerProps, type ChatEmptyDoor, ChatEmptyState, type ChatEmptyStateProps, ChatInteraction, ChatInteractionField, ChatInteractionStatus, type ChatMessageMetrics, type ChatMessageSegment, ChatMessages, type ChatMessagesProps, ChatSelectField, type ChatStreamCallbacks, type ChatStreamToolCall, type ChatStreamToolResult, type ChatToolCallInfo, type ChatUiMessage, type ComposerFile, type ComposerFilePart, type ComposerMentionProp, type ConsumeChatStreamResult, DEFAULT_EFFORT_LEVELS, DEFAULT_MENTION_EMPTY_TEXT, DEFAULT_MENTION_LIMIT, type EffortLevel, EffortPicker, type EffortPickerProps, type FieldValues, FileMention, FlowWaterfall, type FlowWaterfallProps, INDEX_REFRESH_AFTER_MS, INTERACTION_SUBMIT_TIMEOUT_MESSAGE, INTERACTION_SUBMIT_TIMEOUT_MS, InteractionActionButton, type InteractionAnswerSubmission, type InteractionAnswerSubmitterOptions, InteractionBadge, type InteractionBadgeVariant, InteractionCancelData, InteractionPlanCard, type InteractionPlanCardProps, InteractionQuestionCard, type InteractionQuestionCardProps, InteractionRequestWire, type InteractionSubmitResult, type MentionItem, MissionActivityLane, type MissionActivityLaneProps, ModelPicker, type ModelPickerProps, type ProposalApprovalHandlers, ProviderLogo, type ProviderLogoProps, QuestionOptionList, type QuestionOptionListProps, RunDrillIn, type RunDrillInProps, SeatPaywall, type SeatPaywallProps, type SmoothRevealOptions, type StreamChatOptions, type SubmitInteractionAnswer, type ToolDetailRenderers, type ToolRunRecord, type ToolRunStep, type UseChatInteractionsResult, type UseFileMentionsOptions, type UseFileMentionsResult, type WaterfallRow, activityTone, buildAnswerData, cancelChatInteraction, consumeChatStream, createInteractionAnswerSubmitter, dispatchChatStreamLine, fieldAnswer, formatActivityCost, formatActivityDuration, formatModelCost, formatTokensPerSecond, hasSecretField, interactionStatusLabels, interactionTerminalNotes, isLateAnswerableStatus, lateAnswerMessage, mergeActivityPages, nextRevealCount, pendingApprovalOf, rankFileMentions, resolveChatInteraction, responseErrorMessage, restoreChatInteractions, streamChatTurn, terminalizePendingChatInteractions, upsertChatInteraction, useChatInteractions, useFileMentions, usePending, usePopover, useSmoothText, useThinkingSeconds, waterfallLayout };

package/dist/web-react/index.js

@@ -5,8 +5,11 @@ import {
   ChatEmptyState,
   ChatMessages,
   DEFAULT_EFFORT_LEVELS,
+  DEFAULT_MENTION_EMPTY_TEXT,
+  DEFAULT_MENTION_LIMIT,
   EffortPicker,
   FlowWaterfall,
+  INDEX_REFRESH_AFTER_MS,
   INTERACTION_SUBMIT_TIMEOUT_MESSAGE,
   INTERACTION_SUBMIT_TIMEOUT_MS,
   InteractionActionButton,
@@ -38,6 +41,7 @@ import {
   mergeActivityPages,
   nextRevealCount,
   pendingApprovalOf,
+  rankFileMentions,
   resolveChatInteraction,
   responseErrorMessage,
   restoreChatInteractions,
@@ -45,19 +49,23 @@ import {
   terminalizePendingChatInteractions,
   upsertChatInteraction,
   useChatInteractions,
+  useFileMentions,
   usePending,
   usePopover,
   useSmoothText,
   useThinkingSeconds,
   waterfallLayout
-} from "../chunk-D4HB72W2.js";
+} from "../chunk-KM766NN3.js";
 import {
   tabTerminalConnectionId,
   useSandboxTerminalConnection
 } from "../chunk-65P3HJY3.js";
 import {
-  chatTurnRequestInit
-} from "../chunk-5SV5PSU7.js";
+  buildMentionPromptBlock,
+  chatTurnRequestInit,
+  fileMentionsToParts,
+  mediaTypeForMentionPath
+} from "../chunk-2EO7CPL3.js";
 import "../chunk-2QI7XV2T.js";
 import {
   INTERACTION_CANCEL_EVENT,
@@ -90,8 +98,11 @@ export {
   ChatEmptyState,
   ChatMessages,
   DEFAULT_EFFORT_LEVELS,
+  DEFAULT_MENTION_EMPTY_TEXT,
+  DEFAULT_MENTION_LIMIT,
   EffortPicker,
   FlowWaterfall,
+  INDEX_REFRESH_AFTER_MS,
   INTERACTION_CANCEL_EVENT,
   INTERACTION_EVENT,
   INTERACTION_RESOLVED_EVENT,
@@ -109,6 +120,7 @@ export {
   SeatPaywall,
   activityTone,
   buildAnswerData,
+  buildMentionPromptBlock,
   canTransitionInteractionStatus,
   cancelChatInteraction,
   cancelStatusFor,
@@ -121,6 +133,7 @@ export {
   dispatchChatStreamLine,
   fieldAcceptsFreeText,
   fieldAnswer,
+  fileMentionsToParts,
   formatActivityCost,
   formatActivityDuration,
   formatModelCost,
@@ -136,6 +149,7 @@ export {
   isSafeInteractionFieldKey,
   isTerminalInteractionStatus,
   lateAnswerMessage,
+  mediaTypeForMentionPath,
   mergeActivityPages,
   nextRevealCount,
   noticePart,
@@ -145,6 +159,7 @@ export {
   pendingApprovalOf,
   persistedPartToInteraction,
   questionInteractionContentSignature,
+  rankFileMentions,
   resolveChatInteraction,
   responseErrorMessage,
   restoreChatInteractions,
@@ -153,6 +168,7 @@ export {
   terminalizePendingChatInteractions,
   upsertChatInteraction,
   useChatInteractions,
+  useFileMentions,
   usePending,
   usePopover,
   useSandboxTerminalConnection,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.43.39",
+  "version": "0.43.41",
   "packageManager": "pnpm@10.33.4",
   "description": "Application-shell framework for Tangle agent products: a bounded tool loop, the structured agent→app tool side channel, integration-hub client, per-workspace billing, and crypto — composed over the Tangle agent substrate through typed seams.",
   "keywords": [
@@ -147,6 +147,11 @@
       "import": "./dist/preflight/index.js",
       "default": "./dist/preflight/index.js"
     },
+    "./object-store": {
+      "types": "./dist/object-store/index.d.ts",
+      "import": "./dist/object-store/index.js",
+      "default": "./dist/object-store/index.js"
+    },
     "./chat-store": {
       "types": "./dist/chat-store/index.d.ts",
       "import": "./dist/chat-store/index.js",