flowstack-sdk 0.2.1 → 0.2.2

package/dist/{index-BkACA2ls.d.ts → index-CUyJ5c2d.d.ts}

@@ -1236,6 +1236,59 @@ declare function deleteDocuments(credentials: FlowstackCredentials, collection:
     deleted_count: number;
     collection: string;
 }>>;
+interface DmMessage {
+    message_id: string;
+    from: string;
+    to: string;
+    /** UNTRUSTED user input — render as text, never raw HTML. */
+    body: string;
+    created_at: string;
+    read_at: string | null;
+}
+interface DmThread {
+    pair_key: string;
+    with_user_key: string;
+    status: 'pending' | 'open';
+    last_message: DmMessage | null;
+    unread_count: number;
+    updated_at: string | null;
+}
+/**
+ * Deterministic, order-independent thread key for a pair of user keys.
+ * Mirrors the backend's `pair_key` (sorted, '::'-joined).
+ */
+declare function dmPairKey(a: string, b: string): string;
+/** List the caller's threads (counterpart key, last message, unread count). */
+declare function listThreads(credentials: FlowstackCredentials, config?: FlowstackClientConfig): Promise<ApiResponse<{
+    threads: DmThread[];
+    count: number;
+}>>;
+/** List messages in the caller's thread with `withUserKey`. ACL'd server-side. */
+declare function listMessages(credentials: FlowstackCredentials, withUserKey: string, options?: {
+    limit?: number;
+    before?: string;
+}, config?: FlowstackClientConfig): Promise<ApiResponse<{
+    messages: DmMessage[];
+    count: number;
+}>>;
+/** Send a message to `toUserKey`. 403 unless the thread is mutually open. */
+declare function sendMessage(credentials: FlowstackCredentials, toUserKey: string, body: string, config?: FlowstackClientConfig): Promise<ApiResponse<{
+    message_id: string;
+    created_at: string;
+}>>;
+/**
+ * Record the caller's consent to open a thread with `withUserKey`.
+ * The thread becomes `open` (sendable) only once BOTH parties have consented.
+ */
+declare function openThread(credentials: FlowstackCredentials, withUserKey: string, config?: FlowstackClientConfig): Promise<ApiResponse<{
+    pair_key: string;
+    status: string;
+}>>;
+/** Mark a received message as read (recipient only). */
+declare function markMessageRead(credentials: FlowstackCredentials, messageId: string, config?: FlowstackClientConfig): Promise<ApiResponse<{
+    message_id: string;
+    read: boolean;
+}>>;
 /**
  * Invoke an agent tool directly (bypasses LLM orchestration).
  */
@@ -1543,4 +1596,4 @@ declare function getCachedSites(credentials: FlowstackCredentials, config: Redis
 declare function setCachedSites(credentials: FlowstackCredentials, sites: PublishedSiteInfo[], config: RedisConfig): Promise<boolean>;
 declare function invalidateSitesCache(credentials: FlowstackCredentials, config: RedisConfig): Promise<boolean>;
 
-export { type RedisConfig$1 as $, type AgentTemplate as A, type DataSourceBadgeInfo as B, type ChatMessage as C, type DatasetInfo as D, type AgentConfig as E, type FlowstackConfig as F, type ModelPreferenceState as G, type ModelOption as H, type AdminProviderCredential as I, type ExistingProviderCredential as J, type CreateAdminProviderCredentialInput as K, type LLMProvider as L, type ManagedUser as M, type FlowstackClientConfig as N, type OllamaLocalModel as O, type ProviderCredential as P, LLM_PROVIDERS as Q, CREDENTIAL_PURPOSES as R, type StreamEvent as S, type ToolCall as T, type UseAuthReturn as U, type VisualizationData as V, type WorkspaceInfo as W, DEFAULT_PROVIDER_MODEL_SETTINGS as X, isProviderCredential as Y, COLLECTION_LAYERS as Z, type AuthConfig as _, type FlowstackContextValue as a, deleteDataSource as a$, type DatabaseConfig as a0, type LoginRequest as a1, type LoginResponse as a2, type RegisterRequest as a3, type RegisterResponse as a4, type GoogleAuthResponse as a5, type SessionState as a6, type CreateWorkspaceRequest as a7, type DatasetPreview as a8, type ColumnSchema as a9, type PiiSettings as aA, type PiiEntitySettings as aB, type PiiRedactedEntity as aC, type ApiResponse as aD, type ListResponse as aE, type UserRole as aF, type UserStatus as aG, type UserActivityType as aH, type UpdateUserRequest as aI, type UserListParams as aJ, type UserListResponse as aK, flowstackFetch as aL, listWorkspaces as aM, createWorkspace as aN, getWorkspace as aO, listDatasets as aP, getDataset as aQ, getDatasetPreview as aR, deleteDataset as aS, listVisualizations as aT, listReports as aU, listModels as aV, listScripts as aW, getModel as aX, listDataSources as aY, createDataSource as aZ, testDataSource as a_, type DatasetRow as aa, type DatasetStreamOptions as ab, type ReportInfo as ac, type ModelInfo as ad, type ScriptInfo as ae, type DataSourceType as af, type DataSourceConfig as ag, type ConnectionTestResult as ah, type SearchResult as ai, type SearchResultsData as aj, type StreamEventType as ak, type InterruptInfo as al, type QueryOptions as am, type UsageStats as an, type UsagePeriod as ao, type CreditStatus as ap, type AgentInfo as aq, type PublishedSiteInfo as ar, type CreateSiteParams$1 as as, type SiteVersion as at, type SiteVersionManifest as au, type PublishToGitHubParams as av, type PublishToGitHubResult as aw, type CredentialPurpose as ax, type UserDataOverviewWorkspace as ay, type GitHubRepo as az, type UseWorkspaceReturn as b, getCachedSites as b$, executeQuery as b0, executeQueryWithConfig as b1, uploadFile as b2, login as b3, register as b4, googleLogin as b5, listUsers as b6, getUser as b7, updateUser as b8, deleteUser as b9, updatePiiSettings as bA, previewPiiMasking as bB, getPiiAllowlist as bC, addPiiAllowlistTerm as bD, removePiiAllowlistTerm as bE, getUserDataOverview as bF, getUserCollections as bG, getUserCollectionDocuments as bH, getUserCollectionSchema as bI, deleteUserCollection as bJ, exportUserCollection as bK, type RequestOptions as bL, CACHE_TTL as bM, getCachedWorkspaces as bN, setCachedWorkspaces as bO, invalidateWorkspacesCache as bP, getCachedDatasets as bQ, setCachedDatasets as bR, invalidateDatasetsCache as bS, getCachedVisualizations as bT, setCachedVisualizations as bU, invalidateVisualizationsCache as bV, getCachedReports as bW, setCachedReports as bX, invalidateReportsCache as bY, invalidateWorkspaceArtifacts as bZ, invalidateAllUserCache as b_, suspendUser as ba, reactivateUser as bb, getUserActivity as bc, getUserStats as bd, checkAdminPermissions as be, getConversationHistory as bf, listAgents as bg, listSites as bh, getSite as bi, createSite as bj, addSiteFile as bk, publishStagedSite as bl, deleteSite as bm, getSiteVersions as bn, promoteSiteVersion as bo, deleteSiteVersion as bp, setSiteAlias as bq, removeSiteAlias as br, publishToGitHub as bs, insertDocuments as bt, updateDocuments as bu, deleteDocuments as bv, invokeTool as bw, listGitHubRepos as bx, importFromGitHub as by, getPiiSettings as bz, type UseDatasetsReturn as c, setCachedSites as c0, invalidateSitesCache as c1, getCached as c2, setCached as c3, deleteCached as c4, queryCollection as c5, uploadDocument as c6, type CreateSiteParams as c7, type RedisConfig as c8, type UseVisualizationsReturn as d, type UseReportsReturn as e, type UseModelsReturn as f, type UseDataSourcesReturn as g, type UseAgentOptions as h, type UseAgentReturn as i, type UseQueryReturn as j, type UseUserManagementReturn as k, type UseSitesReturn as l, type UseAgentsReturn as m, type CollectionLayer as n, type UseSiteVersionsReturn as o, type PurposeInfo as p, type ProviderModelSettings as q, type OllamaStatus as r, type UserDataOverview as s, type UserCollectionInfo as t, type CollectionSchemaInfo as u, type FlowstackCredentials as v, type User as w, type DataSource as x, type UserStats as y, type UserActivityLog as z };
+export { COLLECTION_LAYERS as $, type AgentTemplate as A, type UserStats as B, type ChatMessage as C, type DmThread as D, type UserActivityLog as E, type FlowstackConfig as F, type DataSourceBadgeInfo as G, type AgentConfig as H, type ModelPreferenceState as I, type ModelOption as J, type AdminProviderCredential as K, type LLMProvider as L, type ManagedUser as M, type ExistingProviderCredential as N, type OllamaLocalModel as O, type ProviderCredential as P, type CreateAdminProviderCredentialInput as Q, type FlowstackClientConfig as R, type StreamEvent as S, type ToolCall as T, type UseAuthReturn as U, type VisualizationData as V, type WorkspaceInfo as W, LLM_PROVIDERS as X, CREDENTIAL_PURPOSES as Y, DEFAULT_PROVIDER_MODEL_SETTINGS as Z, isProviderCredential as _, type FlowstackContextValue as a, createDataSource as a$, type AuthConfig as a0, type RedisConfig$1 as a1, type DatabaseConfig as a2, type LoginRequest as a3, type LoginResponse as a4, type RegisterRequest as a5, type RegisterResponse as a6, type GoogleAuthResponse as a7, type SessionState as a8, type CreateWorkspaceRequest as a9, type UserDataOverviewWorkspace as aA, type GitHubRepo as aB, type PiiSettings as aC, type PiiEntitySettings as aD, type PiiRedactedEntity as aE, type ApiResponse as aF, type ListResponse as aG, type UserRole as aH, type UserStatus as aI, type UserActivityType as aJ, type UpdateUserRequest as aK, type UserListParams as aL, type UserListResponse as aM, flowstackFetch as aN, listWorkspaces as aO, createWorkspace as aP, getWorkspace as aQ, listDatasets as aR, getDataset as aS, getDatasetPreview as aT, deleteDataset as aU, listVisualizations as aV, listReports as aW, listModels as aX, listScripts as aY, getModel as aZ, listDataSources as a_, type DatasetPreview as aa, type ColumnSchema as ab, type DatasetRow as ac, type DatasetStreamOptions as ad, type ReportInfo as ae, type ModelInfo as af, type ScriptInfo as ag, type DataSourceType as ah, type DataSourceConfig as ai, type ConnectionTestResult as aj, type SearchResult as ak, type SearchResultsData as al, type StreamEventType as am, type InterruptInfo as an, type QueryOptions as ao, type UsageStats as ap, type UsagePeriod as aq, type CreditStatus as ar, type AgentInfo as as, type PublishedSiteInfo as at, type CreateSiteParams$1 as au, type SiteVersion as av, type SiteVersionManifest as aw, type PublishToGitHubParams as ax, type PublishToGitHubResult as ay, type CredentialPurpose as az, type UseWorkspaceReturn as b, getCachedVisualizations as b$, testDataSource as b0, deleteDataSource as b1, executeQuery as b2, executeQueryWithConfig as b3, uploadFile as b4, login as b5, register as b6, googleLogin as b7, listUsers as b8, getUser as b9, sendMessage as bA, openThread as bB, markMessageRead as bC, dmPairKey as bD, invokeTool as bE, listGitHubRepos as bF, importFromGitHub as bG, getPiiSettings as bH, updatePiiSettings as bI, previewPiiMasking as bJ, getPiiAllowlist as bK, addPiiAllowlistTerm as bL, removePiiAllowlistTerm as bM, getUserDataOverview as bN, getUserCollections as bO, getUserCollectionDocuments as bP, getUserCollectionSchema as bQ, deleteUserCollection as bR, exportUserCollection as bS, type RequestOptions as bT, CACHE_TTL as bU, getCachedWorkspaces as bV, setCachedWorkspaces as bW, invalidateWorkspacesCache as bX, getCachedDatasets as bY, setCachedDatasets as bZ, invalidateDatasetsCache as b_, updateUser as ba, deleteUser as bb, suspendUser as bc, reactivateUser as bd, getUserActivity as be, getUserStats as bf, checkAdminPermissions as bg, getConversationHistory as bh, listAgents as bi, listSites as bj, getSite as bk, createSite as bl, addSiteFile as bm, publishStagedSite as bn, deleteSite as bo, getSiteVersions as bp, promoteSiteVersion as bq, deleteSiteVersion as br, setSiteAlias as bs, removeSiteAlias as bt, publishToGitHub as bu, insertDocuments as bv, updateDocuments as bw, deleteDocuments as bx, listThreads as by, listMessages as bz, type UseDatasetsReturn as c, setCachedVisualizations as c0, invalidateVisualizationsCache as c1, getCachedReports as c2, setCachedReports as c3, invalidateReportsCache as c4, invalidateWorkspaceArtifacts as c5, invalidateAllUserCache as c6, getCachedSites as c7, setCachedSites as c8, invalidateSitesCache as c9, getCached as ca, setCached as cb, deleteCached as cc, queryCollection as cd, uploadDocument as ce, type CreateSiteParams as cf, type RedisConfig as cg, type UseVisualizationsReturn as d, type UseReportsReturn as e, type UseModelsReturn as f, type UseDataSourcesReturn as g, type UseAgentOptions as h, type UseAgentReturn as i, type UseQueryReturn as j, type UseUserManagementReturn as k, type UseSitesReturn as l, type UseAgentsReturn as m, type CollectionLayer as n, type DmMessage as o, type UseSiteVersionsReturn as p, type PurposeInfo as q, type ProviderModelSettings as r, type OllamaStatus as s, type UserDataOverview as t, type UserCollectionInfo as u, type CollectionSchemaInfo as v, type FlowstackCredentials as w, type User as x, type DatasetInfo as y, type DataSource as z };

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React, { ReactNode } from 'react';
-import { F as FlowstackConfig, a as FlowstackContextValue, U as UseAuthReturn, b as UseWorkspaceReturn, c as UseDatasetsReturn, d as UseVisualizationsReturn, e as UseReportsReturn, f as UseModelsReturn, g as UseDataSourcesReturn, A as AgentTemplate, h as UseAgentOptions, i as UseAgentReturn, j as UseQueryReturn, C as ChatMessage, T as ToolCall, k as UseUserManagementReturn, l as UseSitesReturn, m as UseAgentsReturn, n as CollectionLayer, o as UseSiteVersionsReturn, P as ProviderCredential, p as PurposeInfo, L as LLMProvider, q as ProviderModelSettings, O as OllamaLocalModel, r as OllamaStatus, s as UserDataOverview, t as UserCollectionInfo, u as CollectionSchemaInfo, v as FlowstackCredentials, w as User, W as WorkspaceInfo, D as DatasetInfo, V as VisualizationData, x as DataSource, M as ManagedUser, y as UserStats, z as UserActivityLog, B as DataSourceBadgeInfo, S as StreamEvent, E as AgentConfig, G as ModelPreferenceState, H as ModelOption, I as AdminProviderCredential, J as ExistingProviderCredential, K as CreateAdminProviderCredentialInput, N as FlowstackClientConfig } from './index-BkACA2ls.mjs';
-export { aq as AgentInfo, aD as ApiResponse, _ as AuthConfig, bM as CACHE_TTL, Z as COLLECTION_LAYERS, R as CREDENTIAL_PURPOSES, a9 as ColumnSchema, ah as ConnectionTestResult, as as CreateSiteParams, a7 as CreateWorkspaceRequest, ax as CredentialPurpose, ap as CreditStatus, X as DEFAULT_PROVIDER_MODEL_SETTINGS, ag as DataSourceConfig, af as DataSourceType, a0 as DatabaseConfig, a8 as DatasetPreview, aa as DatasetRow, ab as DatasetStreamOptions, az as GitHubRepo, a5 as GoogleAuthResponse, al as InterruptInfo, Q as LLM_PROVIDERS, aE as ListResponse, a1 as LoginRequest, a2 as LoginResponse, ad as ModelInfo, aB as PiiEntitySettings, aC as PiiRedactedEntity, aA as PiiSettings, av as PublishToGitHubParams, aw as PublishToGitHubResult, ar as PublishedSiteInfo, am as QueryOptions, $ as RedisConfig, a3 as RegisterRequest, a4 as RegisterResponse, ac as ReportInfo, bL as RequestOptions, ae as ScriptInfo, ai as SearchResult, aj as SearchResultsData, a6 as SessionState, at as SiteVersion, au as SiteVersionManifest, ak as StreamEventType, aI as UpdateUserRequest, ao as UsagePeriod, an as UsageStats, aH as UserActivityType, ay as UserDataOverviewWorkspace, aJ as UserListParams, aK as UserListResponse, aF as UserRole, aG as UserStatus, bD as addPiiAllowlistTerm, bk as addSiteFile, be as checkAdminPermissions, aZ as createDataSource, bj as createSite, aN as createWorkspace, c4 as deleteCached, a$ as deleteDataSource, aS as deleteDataset, bv as deleteDocuments, bm as deleteSite, bp as deleteSiteVersion, b9 as deleteUser, bJ as deleteUserCollection, b0 as executeQuery, b1 as executeQueryWithConfig, bK as exportUserCollection, aL as flowstackFetch, c2 as getCached, bQ as getCachedDatasets, bW as getCachedReports, b$ as getCachedSites, bT as getCachedVisualizations, bN as getCachedWorkspaces, bf as getConversationHistory, aQ as getDataset, aR as getDatasetPreview, aX as getModel, bC as getPiiAllowlist, bz as getPiiSettings, bi as getSite, bn as getSiteVersions, b7 as getUser, bc as getUserActivity, bH as getUserCollectionDocuments, bI as getUserCollectionSchema, bG as getUserCollections, bF as getUserDataOverview, bd as getUserStats, aO as getWorkspace, b5 as googleLogin, by as importFromGitHub, bt as insertDocuments, b_ as invalidateAllUserCache, bS as invalidateDatasetsCache, bY as invalidateReportsCache, c1 as invalidateSitesCache, bV as invalidateVisualizationsCache, bZ as invalidateWorkspaceArtifacts, bP as invalidateWorkspacesCache, bw as invokeTool, Y as isProviderCredential, bg as listAgents, aY as listDataSources, aP as listDatasets, bx as listGitHubRepos, aV as listModels, aU as listReports, aW as listScripts, bh as listSites, b6 as listUsers, aT as listVisualizations, aM as listWorkspaces, b3 as login, bB as previewPiiMasking, bo as promoteSiteVersion, bl as publishStagedSite, bs as publishToGitHub, bb as reactivateUser, b4 as register, bE as removePiiAllowlistTerm, br as removeSiteAlias, c3 as setCached, bR as setCachedDatasets, bX as setCachedReports, c0 as setCachedSites, bU as setCachedVisualizations, bO as setCachedWorkspaces, bq as setSiteAlias, ba as suspendUser, a_ as testDataSource, bu as updateDocuments, bA as updatePiiSettings, b8 as updateUser, b2 as uploadFile } from './index-BkACA2ls.mjs';
+import { F as FlowstackConfig, a as FlowstackContextValue, U as UseAuthReturn, b as UseWorkspaceReturn, c as UseDatasetsReturn, d as UseVisualizationsReturn, e as UseReportsReturn, f as UseModelsReturn, g as UseDataSourcesReturn, A as AgentTemplate, h as UseAgentOptions, i as UseAgentReturn, j as UseQueryReturn, C as ChatMessage, T as ToolCall, k as UseUserManagementReturn, l as UseSitesReturn, m as UseAgentsReturn, n as CollectionLayer, D as DmThread, o as DmMessage, p as UseSiteVersionsReturn, P as ProviderCredential, q as PurposeInfo, L as LLMProvider, r as ProviderModelSettings, O as OllamaLocalModel, s as OllamaStatus, t as UserDataOverview, u as UserCollectionInfo, v as CollectionSchemaInfo, w as FlowstackCredentials, x as User, W as WorkspaceInfo, y as DatasetInfo, V as VisualizationData, z as DataSource, M as ManagedUser, B as UserStats, E as UserActivityLog, G as DataSourceBadgeInfo, S as StreamEvent, H as AgentConfig, I as ModelPreferenceState, J as ModelOption, K as AdminProviderCredential, N as ExistingProviderCredential, Q as CreateAdminProviderCredentialInput, R as FlowstackClientConfig } from './index-CUyJ5c2d.mjs';
+export { as as AgentInfo, aF as ApiResponse, a0 as AuthConfig, bU as CACHE_TTL, $ as COLLECTION_LAYERS, Y as CREDENTIAL_PURPOSES, ab as ColumnSchema, aj as ConnectionTestResult, au as CreateSiteParams, a9 as CreateWorkspaceRequest, az as CredentialPurpose, ar as CreditStatus, Z as DEFAULT_PROVIDER_MODEL_SETTINGS, ai as DataSourceConfig, ah as DataSourceType, a2 as DatabaseConfig, aa as DatasetPreview, ac as DatasetRow, ad as DatasetStreamOptions, aB as GitHubRepo, a7 as GoogleAuthResponse, an as InterruptInfo, X as LLM_PROVIDERS, aG as ListResponse, a3 as LoginRequest, a4 as LoginResponse, af as ModelInfo, aD as PiiEntitySettings, aE as PiiRedactedEntity, aC as PiiSettings, ax as PublishToGitHubParams, ay as PublishToGitHubResult, at as PublishedSiteInfo, ao as QueryOptions, a1 as RedisConfig, a5 as RegisterRequest, a6 as RegisterResponse, ae as ReportInfo, bT as RequestOptions, ag as ScriptInfo, ak as SearchResult, al as SearchResultsData, a8 as SessionState, av as SiteVersion, aw as SiteVersionManifest, am as StreamEventType, aK as UpdateUserRequest, aq as UsagePeriod, ap as UsageStats, aJ as UserActivityType, aA as UserDataOverviewWorkspace, aL as UserListParams, aM as UserListResponse, aH as UserRole, aI as UserStatus, bL as addPiiAllowlistTerm, bm as addSiteFile, bg as checkAdminPermissions, a$ as createDataSource, bl as createSite, aP as createWorkspace, cc as deleteCached, b1 as deleteDataSource, aU as deleteDataset, bx as deleteDocuments, bo as deleteSite, br as deleteSiteVersion, bb as deleteUser, bR as deleteUserCollection, bD as dmPairKey, b2 as executeQuery, b3 as executeQueryWithConfig, bS as exportUserCollection, aN as flowstackFetch, ca as getCached, bY as getCachedDatasets, c2 as getCachedReports, c7 as getCachedSites, b$ as getCachedVisualizations, bV as getCachedWorkspaces, bh as getConversationHistory, aS as getDataset, aT as getDatasetPreview, aZ as getModel, bK as getPiiAllowlist, bH as getPiiSettings, bk as getSite, bp as getSiteVersions, b9 as getUser, be as getUserActivity, bP as getUserCollectionDocuments, bQ as getUserCollectionSchema, bO as getUserCollections, bN as getUserDataOverview, bf as getUserStats, aQ as getWorkspace, b7 as googleLogin, bG as importFromGitHub, bv as insertDocuments, c6 as invalidateAllUserCache, b_ as invalidateDatasetsCache, c4 as invalidateReportsCache, c9 as invalidateSitesCache, c1 as invalidateVisualizationsCache, c5 as invalidateWorkspaceArtifacts, bX as invalidateWorkspacesCache, bE as invokeTool, _ as isProviderCredential, bi as listAgents, a_ as listDataSources, aR as listDatasets, bF as listGitHubRepos, bz as listMessages, aX as listModels, aW as listReports, aY as listScripts, bj as listSites, by as listThreads, b8 as listUsers, aV as listVisualizations, aO as listWorkspaces, b5 as login, bC as markMessageRead, bB as openThread, bJ as previewPiiMasking, bq as promoteSiteVersion, bn as publishStagedSite, bu as publishToGitHub, bd as reactivateUser, b6 as register, bM as removePiiAllowlistTerm, bt as removeSiteAlias, bA as sendMessage, cb as setCached, bZ as setCachedDatasets, c3 as setCachedReports, c8 as setCachedSites, c0 as setCachedVisualizations, bW as setCachedWorkspaces, bs as setSiteAlias, bc as suspendUser, b0 as testDataSource, bw as updateDocuments, bI as updatePiiSettings, ba as updateUser, b4 as uploadFile } from './index-CUyJ5c2d.mjs';
 export { h as AppAccessStatus, A as AppPaywallProps, e as UseAppAccessReturn } from './types-BmCPwbGH.mjs';
 
 /**
@@ -733,6 +733,80 @@ interface UseConnectionsReturn {
 }
 declare function useConnections(): UseConnectionsReturn;
 
+/**
+ * useThreads — list a built-app user's private message threads (P0-138).
+ *
+ * Backed by the server-owned, ACL'd DM store: the backend only ever returns
+ * threads the authenticated caller participates in. Each thread carries the
+ * counterpart's user key, the last message, and an unread count.
+ *
+ * Private messaging is a built-app capability — requires an `appScope` on the
+ * FlowstackProvider config. In a Casino personal session the backend returns 403
+ * and this hook surfaces an error.
+ *
+ * Usage:
+ *   const { threads, isLoading, refresh } = useThreads({ refreshInterval: 5000 });
+ *   threads.map(t => <ThreadRow key={t.pair_key} counterpart={t.with_user_key} ... />)
+ */
+
+interface UseThreadsOptions {
+    /** Auto-poll interval in ms (optional — no polling by default). */
+    refreshInterval?: number;
+    /** Skip initial fetch. */
+    enabled?: boolean;
+}
+interface UseThreadsReturn {
+    threads: DmThread[];
+    isLoading: boolean;
+    error: string | null;
+    refresh: () => Promise<void>;
+    /**
+     * Record the caller's consent to open a thread with `withUserKey`. The thread
+     * becomes sendable only once BOTH parties have consented. Idempotent per caller;
+     * refetches the thread list on success. Returns the resulting status.
+     */
+    openThread: (withUserKey: string) => Promise<'pending' | 'open' | null>;
+}
+declare function useThreads(options?: UseThreadsOptions): UseThreadsReturn;
+
+/**
+ * useMessages — read + send private messages in one thread (P0-138).
+ *
+ * Mirrors `useCollection`'s ergonomics but is backed by the server-owned, ACL'd
+ * DM endpoints instead of a Mongo collection. The backend pins the sender to the
+ * caller's identity and only delivers into a mutually-consented (open) thread, so
+ * a `send()` to a not-yet-open thread returns an error.
+ *
+ * SECURITY: message bodies are UNTRUSTED user input. Render them as plain text or
+ * sanitized markdown — never as raw HTML (no dangerouslySetInnerHTML). If a body
+ * is ever fed to an agent, treat it as data, not instructions.
+ *
+ * Usage:
+ *   const { messages, send, isLoading, refresh } = useMessages(counterpartUserKey, {
+ *     refreshInterval: 4000,
+ *   });
+ *   await send('hey there');
+ *   messages.map(m => <Bubble key={m.message_id} mine={m.from === myKey}>{m.body}</Bubble>)
+ */
+
+interface UseMessagesOptions {
+    /** Max messages to load (default 50, max 200). */
+    limit?: number;
+    /** Auto-poll interval in ms (optional — no polling by default). */
+    refreshInterval?: number;
+    /** Skip initial fetch (e.g. before a counterpart is selected). */
+    enabled?: boolean;
+}
+interface UseMessagesReturn {
+    messages: DmMessage[];
+    isLoading: boolean;
+    error: string | null;
+    /** Send a message to the counterpart. Refetches on success. */
+    send: (body: string) => Promise<void>;
+    refresh: () => Promise<void>;
+}
+declare function useMessages(withUserKey: string | null | undefined, options?: UseMessagesOptions): UseMessagesReturn;
+
 declare function useSiteVersions(siteId: string | null): UseSiteVersionsReturn;
 
 /**
@@ -2322,4 +2396,4 @@ type SubagentInvokeRun = {
     output: string | null;
 };
 
-export { AdminGate, type AdminGateProps, AdminProviderCredential, AgentConfig, AgentFactory, type AgentFactoryOptions, AgentRegistry, type AgentRegistryOptions, AgentTemplate, AuthGuard, type AuthGuardOptions, type AuthGuardProps, AuthPage, type AuthPageProps, type Automation, type AutomationOutputConfig, type AutomationOutputType, type AutomationRun, type AutomationStatus, BrokeredLoginButton, type BrokeredLoginButtonProps, COLLECTION_CHANGED_EVENT, ChatInterface, type ChatInterfaceProps, ChatMessage, ChatPage, type ChatPageProps, CollectionLayer, CollectionSchemaInfo, type ConnectionStatus, type ConnectionsState, type ContentSegment, CreateAdminProviderCredentialInput, type CreateAutomationInput, type CreateCredentialParams, type CreateIntegrationInput, CreateWorkspaceModal, type CreateWorkspaceModalProps, DEFAULT_PATTERNS, DashboardLayout, type DashboardLayoutProps, DataSource, DataSourceBadgeInfo, DatasetInfo, DatasetUploader, type DatasetUploaderProps, type DynamicAgentConfig, type ErrorCode, ErrorCodes, ErrorMessages, ExistingProviderCredential, FlowstackClientConfig, FlowstackConfig, FlowstackContextValue, FlowstackCredentials, FlowstackError, type FlowstackErrorOptions, FlowstackProvider, type GitHubConnectionStatus, type GoogleService, GoogleSignIn, type GoogleSignInProps, type Integration, type IntegrationAuthType, type IntegrationEndpoint, type IntentAnalysis, IntentAnalyzer, type IntentAnalyzerOptions, type IntentCategory, type IntentEntity, type IntentPattern, type LLMExecutor, LLMProvider, type LibraryConversationSummary, type LibraryItem, type LibraryItemDetail, type LibraryItemType, LoginForm, type LoginFormProps, type LoginRouteConfig, ManagedUser, MarkdownRenderer, type MarkdownRendererProps, MessageList, type MessageListProps, ModelOption, ModelPreferenceState, OllamaLocalModel, OllamaStatus, ProviderCredential, ProviderModelSettings, PurposeInfo, RecoveryActions, RegisterForm, type RegisterFormProps, type RegisterRouteConfig, type RegisteredAgent, type ServiceProvider, StreamEvent, type SubagentDefinition, type SubagentInvokeRun, type SubagentSummary, ToolCall, type TrashedItem, type UpdateAutomationInput, type UpdateIntegrationInput, type UseAdminProviderCredentialsReturn, UseAgentOptions, UseAgentReturn, UseAgentsReturn, type UseAuthGuardReturn, UseAuthReturn, type UseAutomationsReturn, type UseCollectionExplorerOptions, type UseCollectionExplorerReturn, type UseCollectionOptions, type UseCollectionReturn, type UseConnectionsReturn, type UseConversationReturn, type UseDataOverviewReturn, UseDataSourcesReturn, UseDatasetsReturn, type UseFlowstackStatusOptions, type UseFlowstackStatusReturn, type UseIntegrationsReturn, type UseIntentAgentOptions, type UseIntentAgentReturn, type UseLibraryReturn, type UseModelPreferenceReturn, UseModelsReturn, type UseProviderCredentialsReturn, type UsePublicCollectionOptions, type UsePublicCollectionReturn, UseQueryReturn, UseReportsReturn, UseSiteVersionsReturn, UseSitesReturn, type UseToolInvocationOptions, type UseToolInvocationReturn, type UseUserCollectionsOptions, type UseUserCollectionsReturn, UseUserManagementReturn, UseVisualizationsReturn, UseWorkspaceReturn, User, UserActivityLog, UserCollectionInfo, UserDataOverview, UserStats, type ValidationResult, VisualizationData, WorkspaceInfo, WorkspaceSelector, type WorkspaceSelectorProps, analyzeWithRules, clearAllFlowstackData, clearCredentials, clearMessages, clearSelectedWorkspace, createCustomTemplate, dataScienceTemplate, extractEntities, generateMockId, getAgentTemplate, getConfigSummary, getItem, getSubagent, isDevelopmentConfig, isFlowstackError, listLibraryItems, loadCredentials, loadMessages, loadSelectedWorkspace, marketingTemplate, mockChatHistory, mockCredentials, mockDataSources, mockDatasets, mockDelay, mockManagedUsers, mockUser, mockUserActivity, mockUserStats, mockVisualizations, mockWorkspaces, parseSSELine, parseSSEStream, processSSEStream, removeItem, sanitizeMermaidCode, saveCredentials, saveMessages, saveSelectedWorkspace, setItem, splitContentSegments, supportTemplate, useAdminProviderCredentials, useAgent, useAgents, useAuth, useAuthGuard, useAutomations, useCollection, useCollectionExplorer, useConnections, useConversation, useConversations, useCurrentSession, useDataOverview, useDataSources, useDatasets, useFlowstack, useFlowstackOptional, useFlowstackStatus, useIntegrations, useIntentAgent, useLibrary, useLibraryConversations, useLibrarySearch, useLibraryTrash, useModelPreference, useModels, useOllamaDetection, useProviderCredentials, usePublicCollection, useQuery, useRecentLibraryConversations, useReports, useSiteVersions, useSites, useSubagentInvoke, useSubagents, useToolInvocation, useUserCollections, useUserManagement, useVisualizations, useWorkspace, validateConfig, validateConfigOrThrow, withErrorHandling };
+export { AdminGate, type AdminGateProps, AdminProviderCredential, AgentConfig, AgentFactory, type AgentFactoryOptions, AgentRegistry, type AgentRegistryOptions, AgentTemplate, AuthGuard, type AuthGuardOptions, type AuthGuardProps, AuthPage, type AuthPageProps, type Automation, type AutomationOutputConfig, type AutomationOutputType, type AutomationRun, type AutomationStatus, BrokeredLoginButton, type BrokeredLoginButtonProps, COLLECTION_CHANGED_EVENT, ChatInterface, type ChatInterfaceProps, ChatMessage, ChatPage, type ChatPageProps, CollectionLayer, CollectionSchemaInfo, type ConnectionStatus, type ConnectionsState, type ContentSegment, CreateAdminProviderCredentialInput, type CreateAutomationInput, type CreateCredentialParams, type CreateIntegrationInput, CreateWorkspaceModal, type CreateWorkspaceModalProps, DEFAULT_PATTERNS, DashboardLayout, type DashboardLayoutProps, DataSource, DataSourceBadgeInfo, DatasetInfo, DatasetUploader, type DatasetUploaderProps, DmMessage, DmThread, type DynamicAgentConfig, type ErrorCode, ErrorCodes, ErrorMessages, ExistingProviderCredential, FlowstackClientConfig, FlowstackConfig, FlowstackContextValue, FlowstackCredentials, FlowstackError, type FlowstackErrorOptions, FlowstackProvider, type GitHubConnectionStatus, type GoogleService, GoogleSignIn, type GoogleSignInProps, type Integration, type IntegrationAuthType, type IntegrationEndpoint, type IntentAnalysis, IntentAnalyzer, type IntentAnalyzerOptions, type IntentCategory, type IntentEntity, type IntentPattern, type LLMExecutor, LLMProvider, type LibraryConversationSummary, type LibraryItem, type LibraryItemDetail, type LibraryItemType, LoginForm, type LoginFormProps, type LoginRouteConfig, ManagedUser, MarkdownRenderer, type MarkdownRendererProps, MessageList, type MessageListProps, ModelOption, ModelPreferenceState, OllamaLocalModel, OllamaStatus, ProviderCredential, ProviderModelSettings, PurposeInfo, RecoveryActions, RegisterForm, type RegisterFormProps, type RegisterRouteConfig, type RegisteredAgent, type ServiceProvider, StreamEvent, type SubagentDefinition, type SubagentInvokeRun, type SubagentSummary, ToolCall, type TrashedItem, type UpdateAutomationInput, type UpdateIntegrationInput, type UseAdminProviderCredentialsReturn, UseAgentOptions, UseAgentReturn, UseAgentsReturn, type UseAuthGuardReturn, UseAuthReturn, type UseAutomationsReturn, type UseCollectionExplorerOptions, type UseCollectionExplorerReturn, type UseCollectionOptions, type UseCollectionReturn, type UseConnectionsReturn, type UseConversationReturn, type UseDataOverviewReturn, UseDataSourcesReturn, UseDatasetsReturn, type UseFlowstackStatusOptions, type UseFlowstackStatusReturn, type UseIntegrationsReturn, type UseIntentAgentOptions, type UseIntentAgentReturn, type UseLibraryReturn, type UseMessagesOptions, type UseMessagesReturn, type UseModelPreferenceReturn, UseModelsReturn, type UseProviderCredentialsReturn, type UsePublicCollectionOptions, type UsePublicCollectionReturn, UseQueryReturn, UseReportsReturn, UseSiteVersionsReturn, UseSitesReturn, type UseThreadsOptions, type UseThreadsReturn, type UseToolInvocationOptions, type UseToolInvocationReturn, type UseUserCollectionsOptions, type UseUserCollectionsReturn, UseUserManagementReturn, UseVisualizationsReturn, UseWorkspaceReturn, User, UserActivityLog, UserCollectionInfo, UserDataOverview, UserStats, type ValidationResult, VisualizationData, WorkspaceInfo, WorkspaceSelector, type WorkspaceSelectorProps, analyzeWithRules, clearAllFlowstackData, clearCredentials, clearMessages, clearSelectedWorkspace, createCustomTemplate, dataScienceTemplate, extractEntities, generateMockId, getAgentTemplate, getConfigSummary, getItem, getSubagent, isDevelopmentConfig, isFlowstackError, listLibraryItems, loadCredentials, loadMessages, loadSelectedWorkspace, marketingTemplate, mockChatHistory, mockCredentials, mockDataSources, mockDatasets, mockDelay, mockManagedUsers, mockUser, mockUserActivity, mockUserStats, mockVisualizations, mockWorkspaces, parseSSELine, parseSSEStream, processSSEStream, removeItem, sanitizeMermaidCode, saveCredentials, saveMessages, saveSelectedWorkspace, setItem, splitContentSegments, supportTemplate, useAdminProviderCredentials, useAgent, useAgents, useAuth, useAuthGuard, useAutomations, useCollection, useCollectionExplorer, useConnections, useConversation, useConversations, useCurrentSession, useDataOverview, useDataSources, useDatasets, useFlowstack, useFlowstackOptional, useFlowstackStatus, useIntegrations, useIntentAgent, useLibrary, useLibraryConversations, useLibrarySearch, useLibraryTrash, useMessages, useModelPreference, useModels, useOllamaDetection, useProviderCredentials, usePublicCollection, useQuery, useRecentLibraryConversations, useReports, useSiteVersions, useSites, useSubagentInvoke, useSubagents, useThreads, useToolInvocation, useUserCollections, useUserManagement, useVisualizations, useWorkspace, validateConfig, validateConfigOrThrow, withErrorHandling };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React, { ReactNode } from 'react';
-import { F as FlowstackConfig, a as FlowstackContextValue, U as UseAuthReturn, b as UseWorkspaceReturn, c as UseDatasetsReturn, d as UseVisualizationsReturn, e as UseReportsReturn, f as UseModelsReturn, g as UseDataSourcesReturn, A as AgentTemplate, h as UseAgentOptions, i as UseAgentReturn, j as UseQueryReturn, C as ChatMessage, T as ToolCall, k as UseUserManagementReturn, l as UseSitesReturn, m as UseAgentsReturn, n as CollectionLayer, o as UseSiteVersionsReturn, P as ProviderCredential, p as PurposeInfo, L as LLMProvider, q as ProviderModelSettings, O as OllamaLocalModel, r as OllamaStatus, s as UserDataOverview, t as UserCollectionInfo, u as CollectionSchemaInfo, v as FlowstackCredentials, w as User, W as WorkspaceInfo, D as DatasetInfo, V as VisualizationData, x as DataSource, M as ManagedUser, y as UserStats, z as UserActivityLog, B as DataSourceBadgeInfo, S as StreamEvent, E as AgentConfig, G as ModelPreferenceState, H as ModelOption, I as AdminProviderCredential, J as ExistingProviderCredential, K as CreateAdminProviderCredentialInput, N as FlowstackClientConfig } from './index-BkACA2ls.js';
-export { aq as AgentInfo, aD as ApiResponse, _ as AuthConfig, bM as CACHE_TTL, Z as COLLECTION_LAYERS, R as CREDENTIAL_PURPOSES, a9 as ColumnSchema, ah as ConnectionTestResult, as as CreateSiteParams, a7 as CreateWorkspaceRequest, ax as CredentialPurpose, ap as CreditStatus, X as DEFAULT_PROVIDER_MODEL_SETTINGS, ag as DataSourceConfig, af as DataSourceType, a0 as DatabaseConfig, a8 as DatasetPreview, aa as DatasetRow, ab as DatasetStreamOptions, az as GitHubRepo, a5 as GoogleAuthResponse, al as InterruptInfo, Q as LLM_PROVIDERS, aE as ListResponse, a1 as LoginRequest, a2 as LoginResponse, ad as ModelInfo, aB as PiiEntitySettings, aC as PiiRedactedEntity, aA as PiiSettings, av as PublishToGitHubParams, aw as PublishToGitHubResult, ar as PublishedSiteInfo, am as QueryOptions, $ as RedisConfig, a3 as RegisterRequest, a4 as RegisterResponse, ac as ReportInfo, bL as RequestOptions, ae as ScriptInfo, ai as SearchResult, aj as SearchResultsData, a6 as SessionState, at as SiteVersion, au as SiteVersionManifest, ak as StreamEventType, aI as UpdateUserRequest, ao as UsagePeriod, an as UsageStats, aH as UserActivityType, ay as UserDataOverviewWorkspace, aJ as UserListParams, aK as UserListResponse, aF as UserRole, aG as UserStatus, bD as addPiiAllowlistTerm, bk as addSiteFile, be as checkAdminPermissions, aZ as createDataSource, bj as createSite, aN as createWorkspace, c4 as deleteCached, a$ as deleteDataSource, aS as deleteDataset, bv as deleteDocuments, bm as deleteSite, bp as deleteSiteVersion, b9 as deleteUser, bJ as deleteUserCollection, b0 as executeQuery, b1 as executeQueryWithConfig, bK as exportUserCollection, aL as flowstackFetch, c2 as getCached, bQ as getCachedDatasets, bW as getCachedReports, b$ as getCachedSites, bT as getCachedVisualizations, bN as getCachedWorkspaces, bf as getConversationHistory, aQ as getDataset, aR as getDatasetPreview, aX as getModel, bC as getPiiAllowlist, bz as getPiiSettings, bi as getSite, bn as getSiteVersions, b7 as getUser, bc as getUserActivity, bH as getUserCollectionDocuments, bI as getUserCollectionSchema, bG as getUserCollections, bF as getUserDataOverview, bd as getUserStats, aO as getWorkspace, b5 as googleLogin, by as importFromGitHub, bt as insertDocuments, b_ as invalidateAllUserCache, bS as invalidateDatasetsCache, bY as invalidateReportsCache, c1 as invalidateSitesCache, bV as invalidateVisualizationsCache, bZ as invalidateWorkspaceArtifacts, bP as invalidateWorkspacesCache, bw as invokeTool, Y as isProviderCredential, bg as listAgents, aY as listDataSources, aP as listDatasets, bx as listGitHubRepos, aV as listModels, aU as listReports, aW as listScripts, bh as listSites, b6 as listUsers, aT as listVisualizations, aM as listWorkspaces, b3 as login, bB as previewPiiMasking, bo as promoteSiteVersion, bl as publishStagedSite, bs as publishToGitHub, bb as reactivateUser, b4 as register, bE as removePiiAllowlistTerm, br as removeSiteAlias, c3 as setCached, bR as setCachedDatasets, bX as setCachedReports, c0 as setCachedSites, bU as setCachedVisualizations, bO as setCachedWorkspaces, bq as setSiteAlias, ba as suspendUser, a_ as testDataSource, bu as updateDocuments, bA as updatePiiSettings, b8 as updateUser, b2 as uploadFile } from './index-BkACA2ls.js';
+import { F as FlowstackConfig, a as FlowstackContextValue, U as UseAuthReturn, b as UseWorkspaceReturn, c as UseDatasetsReturn, d as UseVisualizationsReturn, e as UseReportsReturn, f as UseModelsReturn, g as UseDataSourcesReturn, A as AgentTemplate, h as UseAgentOptions, i as UseAgentReturn, j as UseQueryReturn, C as ChatMessage, T as ToolCall, k as UseUserManagementReturn, l as UseSitesReturn, m as UseAgentsReturn, n as CollectionLayer, D as DmThread, o as DmMessage, p as UseSiteVersionsReturn, P as ProviderCredential, q as PurposeInfo, L as LLMProvider, r as ProviderModelSettings, O as OllamaLocalModel, s as OllamaStatus, t as UserDataOverview, u as UserCollectionInfo, v as CollectionSchemaInfo, w as FlowstackCredentials, x as User, W as WorkspaceInfo, y as DatasetInfo, V as VisualizationData, z as DataSource, M as ManagedUser, B as UserStats, E as UserActivityLog, G as DataSourceBadgeInfo, S as StreamEvent, H as AgentConfig, I as ModelPreferenceState, J as ModelOption, K as AdminProviderCredential, N as ExistingProviderCredential, Q as CreateAdminProviderCredentialInput, R as FlowstackClientConfig } from './index-CUyJ5c2d.js';
+export { as as AgentInfo, aF as ApiResponse, a0 as AuthConfig, bU as CACHE_TTL, $ as COLLECTION_LAYERS, Y as CREDENTIAL_PURPOSES, ab as ColumnSchema, aj as ConnectionTestResult, au as CreateSiteParams, a9 as CreateWorkspaceRequest, az as CredentialPurpose, ar as CreditStatus, Z as DEFAULT_PROVIDER_MODEL_SETTINGS, ai as DataSourceConfig, ah as DataSourceType, a2 as DatabaseConfig, aa as DatasetPreview, ac as DatasetRow, ad as DatasetStreamOptions, aB as GitHubRepo, a7 as GoogleAuthResponse, an as InterruptInfo, X as LLM_PROVIDERS, aG as ListResponse, a3 as LoginRequest, a4 as LoginResponse, af as ModelInfo, aD as PiiEntitySettings, aE as PiiRedactedEntity, aC as PiiSettings, ax as PublishToGitHubParams, ay as PublishToGitHubResult, at as PublishedSiteInfo, ao as QueryOptions, a1 as RedisConfig, a5 as RegisterRequest, a6 as RegisterResponse, ae as ReportInfo, bT as RequestOptions, ag as ScriptInfo, ak as SearchResult, al as SearchResultsData, a8 as SessionState, av as SiteVersion, aw as SiteVersionManifest, am as StreamEventType, aK as UpdateUserRequest, aq as UsagePeriod, ap as UsageStats, aJ as UserActivityType, aA as UserDataOverviewWorkspace, aL as UserListParams, aM as UserListResponse, aH as UserRole, aI as UserStatus, bL as addPiiAllowlistTerm, bm as addSiteFile, bg as checkAdminPermissions, a$ as createDataSource, bl as createSite, aP as createWorkspace, cc as deleteCached, b1 as deleteDataSource, aU as deleteDataset, bx as deleteDocuments, bo as deleteSite, br as deleteSiteVersion, bb as deleteUser, bR as deleteUserCollection, bD as dmPairKey, b2 as executeQuery, b3 as executeQueryWithConfig, bS as exportUserCollection, aN as flowstackFetch, ca as getCached, bY as getCachedDatasets, c2 as getCachedReports, c7 as getCachedSites, b$ as getCachedVisualizations, bV as getCachedWorkspaces, bh as getConversationHistory, aS as getDataset, aT as getDatasetPreview, aZ as getModel, bK as getPiiAllowlist, bH as getPiiSettings, bk as getSite, bp as getSiteVersions, b9 as getUser, be as getUserActivity, bP as getUserCollectionDocuments, bQ as getUserCollectionSchema, bO as getUserCollections, bN as getUserDataOverview, bf as getUserStats, aQ as getWorkspace, b7 as googleLogin, bG as importFromGitHub, bv as insertDocuments, c6 as invalidateAllUserCache, b_ as invalidateDatasetsCache, c4 as invalidateReportsCache, c9 as invalidateSitesCache, c1 as invalidateVisualizationsCache, c5 as invalidateWorkspaceArtifacts, bX as invalidateWorkspacesCache, bE as invokeTool, _ as isProviderCredential, bi as listAgents, a_ as listDataSources, aR as listDatasets, bF as listGitHubRepos, bz as listMessages, aX as listModels, aW as listReports, aY as listScripts, bj as listSites, by as listThreads, b8 as listUsers, aV as listVisualizations, aO as listWorkspaces, b5 as login, bC as markMessageRead, bB as openThread, bJ as previewPiiMasking, bq as promoteSiteVersion, bn as publishStagedSite, bu as publishToGitHub, bd as reactivateUser, b6 as register, bM as removePiiAllowlistTerm, bt as removeSiteAlias, bA as sendMessage, cb as setCached, bZ as setCachedDatasets, c3 as setCachedReports, c8 as setCachedSites, c0 as setCachedVisualizations, bW as setCachedWorkspaces, bs as setSiteAlias, bc as suspendUser, b0 as testDataSource, bw as updateDocuments, bI as updatePiiSettings, ba as updateUser, b4 as uploadFile } from './index-CUyJ5c2d.js';
 export { h as AppAccessStatus, A as AppPaywallProps, e as UseAppAccessReturn } from './types-BmCPwbGH.js';
 
 /**
@@ -733,6 +733,80 @@ interface UseConnectionsReturn {
 }
 declare function useConnections(): UseConnectionsReturn;
 
+/**
+ * useThreads — list a built-app user's private message threads (P0-138).
+ *
+ * Backed by the server-owned, ACL'd DM store: the backend only ever returns
+ * threads the authenticated caller participates in. Each thread carries the
+ * counterpart's user key, the last message, and an unread count.
+ *
+ * Private messaging is a built-app capability — requires an `appScope` on the
+ * FlowstackProvider config. In a Casino personal session the backend returns 403
+ * and this hook surfaces an error.
+ *
+ * Usage:
+ *   const { threads, isLoading, refresh } = useThreads({ refreshInterval: 5000 });
+ *   threads.map(t => <ThreadRow key={t.pair_key} counterpart={t.with_user_key} ... />)
+ */
+
+interface UseThreadsOptions {
+    /** Auto-poll interval in ms (optional — no polling by default). */
+    refreshInterval?: number;
+    /** Skip initial fetch. */
+    enabled?: boolean;
+}
+interface UseThreadsReturn {
+    threads: DmThread[];
+    isLoading: boolean;
+    error: string | null;
+    refresh: () => Promise<void>;
+    /**
+     * Record the caller's consent to open a thread with `withUserKey`. The thread
+     * becomes sendable only once BOTH parties have consented. Idempotent per caller;
+     * refetches the thread list on success. Returns the resulting status.
+     */
+    openThread: (withUserKey: string) => Promise<'pending' | 'open' | null>;
+}
+declare function useThreads(options?: UseThreadsOptions): UseThreadsReturn;
+
+/**
+ * useMessages — read + send private messages in one thread (P0-138).
+ *
+ * Mirrors `useCollection`'s ergonomics but is backed by the server-owned, ACL'd
+ * DM endpoints instead of a Mongo collection. The backend pins the sender to the
+ * caller's identity and only delivers into a mutually-consented (open) thread, so
+ * a `send()` to a not-yet-open thread returns an error.
+ *
+ * SECURITY: message bodies are UNTRUSTED user input. Render them as plain text or
+ * sanitized markdown — never as raw HTML (no dangerouslySetInnerHTML). If a body
+ * is ever fed to an agent, treat it as data, not instructions.
+ *
+ * Usage:
+ *   const { messages, send, isLoading, refresh } = useMessages(counterpartUserKey, {
+ *     refreshInterval: 4000,
+ *   });
+ *   await send('hey there');
+ *   messages.map(m => <Bubble key={m.message_id} mine={m.from === myKey}>{m.body}</Bubble>)
+ */
+
+interface UseMessagesOptions {
+    /** Max messages to load (default 50, max 200). */
+    limit?: number;
+    /** Auto-poll interval in ms (optional — no polling by default). */
+    refreshInterval?: number;
+    /** Skip initial fetch (e.g. before a counterpart is selected). */
+    enabled?: boolean;
+}
+interface UseMessagesReturn {
+    messages: DmMessage[];
+    isLoading: boolean;
+    error: string | null;
+    /** Send a message to the counterpart. Refetches on success. */
+    send: (body: string) => Promise<void>;
+    refresh: () => Promise<void>;
+}
+declare function useMessages(withUserKey: string | null | undefined, options?: UseMessagesOptions): UseMessagesReturn;
+
 declare function useSiteVersions(siteId: string | null): UseSiteVersionsReturn;
 
 /**
@@ -2322,4 +2396,4 @@ type SubagentInvokeRun = {
     output: string | null;
 };
 
-export { AdminGate, type AdminGateProps, AdminProviderCredential, AgentConfig, AgentFactory, type AgentFactoryOptions, AgentRegistry, type AgentRegistryOptions, AgentTemplate, AuthGuard, type AuthGuardOptions, type AuthGuardProps, AuthPage, type AuthPageProps, type Automation, type AutomationOutputConfig, type AutomationOutputType, type AutomationRun, type AutomationStatus, BrokeredLoginButton, type BrokeredLoginButtonProps, COLLECTION_CHANGED_EVENT, ChatInterface, type ChatInterfaceProps, ChatMessage, ChatPage, type ChatPageProps, CollectionLayer, CollectionSchemaInfo, type ConnectionStatus, type ConnectionsState, type ContentSegment, CreateAdminProviderCredentialInput, type CreateAutomationInput, type CreateCredentialParams, type CreateIntegrationInput, CreateWorkspaceModal, type CreateWorkspaceModalProps, DEFAULT_PATTERNS, DashboardLayout, type DashboardLayoutProps, DataSource, DataSourceBadgeInfo, DatasetInfo, DatasetUploader, type DatasetUploaderProps, type DynamicAgentConfig, type ErrorCode, ErrorCodes, ErrorMessages, ExistingProviderCredential, FlowstackClientConfig, FlowstackConfig, FlowstackContextValue, FlowstackCredentials, FlowstackError, type FlowstackErrorOptions, FlowstackProvider, type GitHubConnectionStatus, type GoogleService, GoogleSignIn, type GoogleSignInProps, type Integration, type IntegrationAuthType, type IntegrationEndpoint, type IntentAnalysis, IntentAnalyzer, type IntentAnalyzerOptions, type IntentCategory, type IntentEntity, type IntentPattern, type LLMExecutor, LLMProvider, type LibraryConversationSummary, type LibraryItem, type LibraryItemDetail, type LibraryItemType, LoginForm, type LoginFormProps, type LoginRouteConfig, ManagedUser, MarkdownRenderer, type MarkdownRendererProps, MessageList, type MessageListProps, ModelOption, ModelPreferenceState, OllamaLocalModel, OllamaStatus, ProviderCredential, ProviderModelSettings, PurposeInfo, RecoveryActions, RegisterForm, type RegisterFormProps, type RegisterRouteConfig, type RegisteredAgent, type ServiceProvider, StreamEvent, type SubagentDefinition, type SubagentInvokeRun, type SubagentSummary, ToolCall, type TrashedItem, type UpdateAutomationInput, type UpdateIntegrationInput, type UseAdminProviderCredentialsReturn, UseAgentOptions, UseAgentReturn, UseAgentsReturn, type UseAuthGuardReturn, UseAuthReturn, type UseAutomationsReturn, type UseCollectionExplorerOptions, type UseCollectionExplorerReturn, type UseCollectionOptions, type UseCollectionReturn, type UseConnectionsReturn, type UseConversationReturn, type UseDataOverviewReturn, UseDataSourcesReturn, UseDatasetsReturn, type UseFlowstackStatusOptions, type UseFlowstackStatusReturn, type UseIntegrationsReturn, type UseIntentAgentOptions, type UseIntentAgentReturn, type UseLibraryReturn, type UseModelPreferenceReturn, UseModelsReturn, type UseProviderCredentialsReturn, type UsePublicCollectionOptions, type UsePublicCollectionReturn, UseQueryReturn, UseReportsReturn, UseSiteVersionsReturn, UseSitesReturn, type UseToolInvocationOptions, type UseToolInvocationReturn, type UseUserCollectionsOptions, type UseUserCollectionsReturn, UseUserManagementReturn, UseVisualizationsReturn, UseWorkspaceReturn, User, UserActivityLog, UserCollectionInfo, UserDataOverview, UserStats, type ValidationResult, VisualizationData, WorkspaceInfo, WorkspaceSelector, type WorkspaceSelectorProps, analyzeWithRules, clearAllFlowstackData, clearCredentials, clearMessages, clearSelectedWorkspace, createCustomTemplate, dataScienceTemplate, extractEntities, generateMockId, getAgentTemplate, getConfigSummary, getItem, getSubagent, isDevelopmentConfig, isFlowstackError, listLibraryItems, loadCredentials, loadMessages, loadSelectedWorkspace, marketingTemplate, mockChatHistory, mockCredentials, mockDataSources, mockDatasets, mockDelay, mockManagedUsers, mockUser, mockUserActivity, mockUserStats, mockVisualizations, mockWorkspaces, parseSSELine, parseSSEStream, processSSEStream, removeItem, sanitizeMermaidCode, saveCredentials, saveMessages, saveSelectedWorkspace, setItem, splitContentSegments, supportTemplate, useAdminProviderCredentials, useAgent, useAgents, useAuth, useAuthGuard, useAutomations, useCollection, useCollectionExplorer, useConnections, useConversation, useConversations, useCurrentSession, useDataOverview, useDataSources, useDatasets, useFlowstack, useFlowstackOptional, useFlowstackStatus, useIntegrations, useIntentAgent, useLibrary, useLibraryConversations, useLibrarySearch, useLibraryTrash, useModelPreference, useModels, useOllamaDetection, useProviderCredentials, usePublicCollection, useQuery, useRecentLibraryConversations, useReports, useSiteVersions, useSites, useSubagentInvoke, useSubagents, useToolInvocation, useUserCollections, useUserManagement, useVisualizations, useWorkspace, validateConfig, validateConfigOrThrow, withErrorHandling };
+export { AdminGate, type AdminGateProps, AdminProviderCredential, AgentConfig, AgentFactory, type AgentFactoryOptions, AgentRegistry, type AgentRegistryOptions, AgentTemplate, AuthGuard, type AuthGuardOptions, type AuthGuardProps, AuthPage, type AuthPageProps, type Automation, type AutomationOutputConfig, type AutomationOutputType, type AutomationRun, type AutomationStatus, BrokeredLoginButton, type BrokeredLoginButtonProps, COLLECTION_CHANGED_EVENT, ChatInterface, type ChatInterfaceProps, ChatMessage, ChatPage, type ChatPageProps, CollectionLayer, CollectionSchemaInfo, type ConnectionStatus, type ConnectionsState, type ContentSegment, CreateAdminProviderCredentialInput, type CreateAutomationInput, type CreateCredentialParams, type CreateIntegrationInput, CreateWorkspaceModal, type CreateWorkspaceModalProps, DEFAULT_PATTERNS, DashboardLayout, type DashboardLayoutProps, DataSource, DataSourceBadgeInfo, DatasetInfo, DatasetUploader, type DatasetUploaderProps, DmMessage, DmThread, type DynamicAgentConfig, type ErrorCode, ErrorCodes, ErrorMessages, ExistingProviderCredential, FlowstackClientConfig, FlowstackConfig, FlowstackContextValue, FlowstackCredentials, FlowstackError, type FlowstackErrorOptions, FlowstackProvider, type GitHubConnectionStatus, type GoogleService, GoogleSignIn, type GoogleSignInProps, type Integration, type IntegrationAuthType, type IntegrationEndpoint, type IntentAnalysis, IntentAnalyzer, type IntentAnalyzerOptions, type IntentCategory, type IntentEntity, type IntentPattern, type LLMExecutor, LLMProvider, type LibraryConversationSummary, type LibraryItem, type LibraryItemDetail, type LibraryItemType, LoginForm, type LoginFormProps, type LoginRouteConfig, ManagedUser, MarkdownRenderer, type MarkdownRendererProps, MessageList, type MessageListProps, ModelOption, ModelPreferenceState, OllamaLocalModel, OllamaStatus, ProviderCredential, ProviderModelSettings, PurposeInfo, RecoveryActions, RegisterForm, type RegisterFormProps, type RegisterRouteConfig, type RegisteredAgent, type ServiceProvider, StreamEvent, type SubagentDefinition, type SubagentInvokeRun, type SubagentSummary, ToolCall, type TrashedItem, type UpdateAutomationInput, type UpdateIntegrationInput, type UseAdminProviderCredentialsReturn, UseAgentOptions, UseAgentReturn, UseAgentsReturn, type UseAuthGuardReturn, UseAuthReturn, type UseAutomationsReturn, type UseCollectionExplorerOptions, type UseCollectionExplorerReturn, type UseCollectionOptions, type UseCollectionReturn, type UseConnectionsReturn, type UseConversationReturn, type UseDataOverviewReturn, UseDataSourcesReturn, UseDatasetsReturn, type UseFlowstackStatusOptions, type UseFlowstackStatusReturn, type UseIntegrationsReturn, type UseIntentAgentOptions, type UseIntentAgentReturn, type UseLibraryReturn, type UseMessagesOptions, type UseMessagesReturn, type UseModelPreferenceReturn, UseModelsReturn, type UseProviderCredentialsReturn, type UsePublicCollectionOptions, type UsePublicCollectionReturn, UseQueryReturn, UseReportsReturn, UseSiteVersionsReturn, UseSitesReturn, type UseThreadsOptions, type UseThreadsReturn, type UseToolInvocationOptions, type UseToolInvocationReturn, type UseUserCollectionsOptions, type UseUserCollectionsReturn, UseUserManagementReturn, UseVisualizationsReturn, UseWorkspaceReturn, User, UserActivityLog, UserCollectionInfo, UserDataOverview, UserStats, type ValidationResult, VisualizationData, WorkspaceInfo, WorkspaceSelector, type WorkspaceSelectorProps, analyzeWithRules, clearAllFlowstackData, clearCredentials, clearMessages, clearSelectedWorkspace, createCustomTemplate, dataScienceTemplate, extractEntities, generateMockId, getAgentTemplate, getConfigSummary, getItem, getSubagent, isDevelopmentConfig, isFlowstackError, listLibraryItems, loadCredentials, loadMessages, loadSelectedWorkspace, marketingTemplate, mockChatHistory, mockCredentials, mockDataSources, mockDatasets, mockDelay, mockManagedUsers, mockUser, mockUserActivity, mockUserStats, mockVisualizations, mockWorkspaces, parseSSELine, parseSSEStream, processSSEStream, removeItem, sanitizeMermaidCode, saveCredentials, saveMessages, saveSelectedWorkspace, setItem, splitContentSegments, supportTemplate, useAdminProviderCredentials, useAgent, useAgents, useAuth, useAuthGuard, useAutomations, useCollection, useCollectionExplorer, useConnections, useConversation, useConversations, useCurrentSession, useDataOverview, useDataSources, useDatasets, useFlowstack, useFlowstackOptional, useFlowstackStatus, useIntegrations, useIntentAgent, useLibrary, useLibraryConversations, useLibrarySearch, useLibraryTrash, useMessages, useModelPreference, useModels, useOllamaDetection, useProviderCredentials, usePublicCollection, useQuery, useRecentLibraryConversations, useReports, useSiteVersions, useSites, useSubagentInvoke, useSubagents, useThreads, useToolInvocation, useUserCollections, useUserManagement, useVisualizations, useWorkspace, validateConfig, validateConfigOrThrow, withErrorHandling };

package/dist/index.js

@@ -344,6 +344,63 @@ async function deleteDocuments(credentials, collection, filter, config, layer) {
     config
   );
 }
+function dmPairKey(a, b) {
+  return [a, b].sort().join("::");
+}
+function requireAppScope(config) {
+  const scope = config?.appScope;
+  if (!scope) {
+    throw new Error("Private messaging requires an app scope (built-app context).");
+  }
+  return scope;
+}
+async function listThreads(credentials, config) {
+  const scope = requireAppScope(config);
+  return flowstackFetch(
+    `/apps/${encodeURIComponent(scope)}/threads`,
+    { credentials },
+    config
+  );
+}
+async function listMessages(credentials, withUserKey, options, config) {
+  const scope = requireAppScope(config);
+  const params = new URLSearchParams();
+  params.set("with", withUserKey);
+  if (options?.limit) params.set("limit", String(options.limit));
+  if (options?.before) params.set("before", options.before);
+  return flowstackFetch(
+    `/apps/${encodeURIComponent(scope)}/messages?${params.toString()}`,
+    { credentials },
+    config
+  );
+}
+async function sendMessage(credentials, toUserKey, body, config) {
+  const scope = requireAppScope(config);
+  return flowstackFetch(
+    `/apps/${encodeURIComponent(scope)}/messages`,
+    { method: "POST", credentials, body: { to_user_key: toUserKey, body } },
+    config
+  );
+}
+async function openThread(credentials, withUserKey, config) {
+  const scope = requireAppScope(config);
+  const me = credentials.userId;
+  if (!me) throw new Error("openThread requires an authenticated user.");
+  const pk = dmPairKey(me, withUserKey);
+  return flowstackFetch(
+    `/apps/${encodeURIComponent(scope)}/threads/${encodeURIComponent(pk)}/consent`,
+    { method: "POST", credentials },
+    config
+  );
+}
+async function markMessageRead(credentials, messageId, config) {
+  const scope = requireAppScope(config);
+  return flowstackFetch(
+    `/apps/${encodeURIComponent(scope)}/messages/${encodeURIComponent(messageId)}/read`,
+    { method: "POST", credentials },
+    config
+  );
+}
 async function invokeTool(credentials, agentName, toolName, kwargs = {}, config) {
   return flowstackFetch(
     "/tool/invoke",
@@ -6178,6 +6235,124 @@ function useConnections() {
   }, [credentials, config.baseUrl, config.tenantId, refresh]);
   return { connections, isLoading, error, connect, disconnect, refresh };
 }
+function useThreads(options) {
+  const { credentials, config } = useFlowstack();
+  const [threads, setThreads] = react.useState([]);
+  const [isLoading, setIsLoading] = react.useState(false);
+  const [error, setError] = react.useState(null);
+  const enabled = options?.enabled !== false;
+  const clientConfig = {
+    baseUrl: config.baseUrl,
+    tenantId: config.tenantId,
+    appScope: config.appScope
+  };
+  const refresh = react.useCallback(async () => {
+    if (!credentials || !enabled) return;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const res = await listThreads(credentials, clientConfig);
+      if (res.ok && res.data) {
+        setThreads(res.data.threads);
+      } else {
+        setError(res.error || "Failed to load threads");
+      }
+    } catch (err) {
+      setError(err?.message || "Failed to load threads");
+    } finally {
+      setIsLoading(false);
+    }
+  }, [credentials, config.baseUrl, config.tenantId, config.appScope, enabled]);
+  react.useEffect(() => {
+    refresh();
+  }, [refresh]);
+  const intervalRef = react.useRef(null);
+  react.useEffect(() => {
+    if (!options?.refreshInterval || !enabled) return;
+    intervalRef.current = setInterval(refresh, options.refreshInterval);
+    return () => {
+      if (intervalRef.current) clearInterval(intervalRef.current);
+    };
+  }, [options?.refreshInterval, enabled, refresh]);
+  const openThread2 = react.useCallback(
+    async (withUserKey) => {
+      if (!credentials || !withUserKey) return null;
+      const res = await openThread(credentials, withUserKey, clientConfig);
+      if (res.ok && res.data) {
+        await refresh();
+        return res.data.status;
+      }
+      setError(res.error || "Failed to open thread");
+      return null;
+    },
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [credentials, config.baseUrl, config.tenantId, config.appScope, refresh]
+  );
+  return { threads, isLoading, error, refresh, openThread: openThread2 };
+}
+function useMessages(withUserKey, options) {
+  const { credentials, config } = useFlowstack();
+  const [messages, setMessages] = react.useState([]);
+  const [isLoading, setIsLoading] = react.useState(false);
+  const [error, setError] = react.useState(null);
+  const enabled = options?.enabled !== false && !!withUserKey;
+  const clientConfig = {
+    baseUrl: config.baseUrl,
+    tenantId: config.tenantId,
+    appScope: config.appScope
+  };
+  const refresh = react.useCallback(async () => {
+    if (!credentials || !withUserKey || !enabled) return;
+    setIsLoading(true);
+    setError(null);
+    try {
+      const res = await listMessages(
+        credentials,
+        withUserKey,
+        { limit: options?.limit },
+        clientConfig
+      );
+      if (res.ok && res.data) {
+        setMessages(res.data.messages);
+      } else {
+        setError(res.error || "Failed to load messages");
+      }
+    } catch (err) {
+      setError(err?.message || "Failed to load messages");
+    } finally {
+      setIsLoading(false);
+    }
+  }, [credentials, withUserKey, config.baseUrl, config.tenantId, config.appScope, enabled, options?.limit]);
+  react.useEffect(() => {
+    refresh();
+  }, [refresh]);
+  const intervalRef = react.useRef(null);
+  react.useEffect(() => {
+    if (!options?.refreshInterval || !enabled) return;
+    intervalRef.current = setInterval(refresh, options.refreshInterval);
+    return () => {
+      if (intervalRef.current) clearInterval(intervalRef.current);
+    };
+  }, [options?.refreshInterval, enabled, refresh]);
+  const send = react.useCallback(
+    async (body) => {
+      if (!credentials) throw new Error("Not authenticated");
+      if (!withUserKey) throw new Error("No counterpart selected");
+      if (!body || !body.trim()) return;
+      setError(null);
+      const res = await sendMessage(credentials, withUserKey, body, clientConfig);
+      if (!res.ok) {
+        const msg = res.error || "Failed to send message";
+        setError(msg);
+        throw new Error(msg);
+      }
+      await refresh();
+    },
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [credentials, withUserKey, config.baseUrl, config.tenantId, config.appScope, refresh]
+  );
+  return { messages, isLoading, error, send, refresh };
+}
 function normalizeVersion(raw) {
   return {
     version: raw.version || 0,
@@ -10663,6 +10838,7 @@ exports.deleteSite = deleteSite;
 exports.deleteSiteVersion = deleteSiteVersion;
 exports.deleteUser = deleteUser;
 exports.deleteUserCollection = deleteUserCollection;
+exports.dmPairKey = dmPairKey;
 exports.executeQuery = executeQuery;
 exports.executeQueryWithConfig = executeQueryWithConfig;
 exports.exportUserCollection = exportUserCollection;
@@ -10714,10 +10890,12 @@ exports.listDataSources = listDataSources;
 exports.listDatasets = listDatasets;
 exports.listGitHubRepos = listGitHubRepos;
 exports.listLibraryItems = listLibraryItems;
+exports.listMessages = listMessages;
 exports.listModels = listModels;
 exports.listReports = listReports;
 exports.listScripts = listScripts;
 exports.listSites = listSites;
+exports.listThreads = listThreads;
 exports.listUsers = listUsers;
 exports.listVisualizations = listVisualizations;
 exports.listWorkspaces = listWorkspaces;
@@ -10725,6 +10903,7 @@ exports.loadCredentials = loadCredentials;
 exports.loadMessages = loadMessages;
 exports.loadSelectedWorkspace = loadSelectedWorkspace;
 exports.login = login;
+exports.markMessageRead = markMessageRead;
 exports.marketingTemplate = marketingTemplate;
 exports.mockChatHistory = mockChatHistory;
 exports.mockCredentials = mockCredentials;
@@ -10737,6 +10916,7 @@ exports.mockUserActivity = mockUserActivity;
 exports.mockUserStats = mockUserStats;
 exports.mockVisualizations = mockVisualizations;
 exports.mockWorkspaces = mockWorkspaces;
+exports.openThread = openThread;
 exports.parseSSELine = parseSSELine;
 exports.parseSSEStream = parseSSEStream;
 exports.previewPiiMasking = previewPiiMasking;
@@ -10753,6 +10933,7 @@ exports.sanitizeMermaidCode = sanitizeMermaidCode;
 exports.saveCredentials = saveCredentials;
 exports.saveMessages = saveMessages;
 exports.saveSelectedWorkspace = saveSelectedWorkspace;
+exports.sendMessage = sendMessage;
 exports.setCached = setCached;
 exports.setCachedDatasets = setCachedDatasets;
 exports.setCachedReports = setCachedReports;
@@ -10793,6 +10974,7 @@ exports.useLibrary = useLibrary;
 exports.useLibraryConversations = useLibraryConversations;
 exports.useLibrarySearch = useLibrarySearch;
 exports.useLibraryTrash = useLibraryTrash;
+exports.useMessages = useMessages;
 exports.useModelPreference = useModelPreference;
 exports.useModels = useModels;
 exports.useOllamaDetection = useOllamaDetection;
@@ -10805,6 +10987,7 @@ exports.useSiteVersions = useSiteVersions;
 exports.useSites = useSites;
 exports.useSubagentInvoke = useSubagentInvoke;
 exports.useSubagents = useSubagents;
+exports.useThreads = useThreads;
 exports.useToolInvocation = useToolInvocation;
 exports.useUserCollections = useUserCollections;
 exports.useUserManagement = useUserManagement;