madarx 2.18.0 → 2.21.0

package/.next/static/mu47BRCkKEvvz6S5ipLGz/_buildManifest.js

@@ -0,0 +1 @@
+self.__BUILD_MANIFEST=function(e,r,t,_){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},__routerFilterStatic:{numItems:145,errorRate:1e-4,numBits:2780,numHashes:14,bitArray:[0,0,1,1,e,e,e,r,e,e,r,e,r,e,r,r,e,e,e,e,e,r,r,e,e,r,e,r,r,e,r,e,e,e,e,r,r,e,r,e,r,e,e,e,r,e,e,r,r,e,e,e,e,e,e,r,e,e,r,e,e,e,e,r,r,e,r,e,e,e,e,e,e,r,e,e,e,r,e,r,e,e,r,r,r,e,e,e,e,r,r,e,r,e,e,r,r,r,r,r,r,e,e,r,r,r,e,e,r,r,e,r,r,r,r,e,r,e,r,e,e,e,e,r,r,e,e,r,e,r,e,e,r,r,r,r,r,e,r,r,e,r,r,e,r,e,r,e,r,e,e,r,e,r,r,r,r,r,r,r,e,r,e,r,e,e,e,e,r,e,e,e,r,e,r,e,e,e,r,e,e,r,e,r,r,r,e,r,r,e,e,e,e,e,e,r,e,r,r,e,r,e,r,e,e,e,e,r,e,r,e,e,e,e,e,e,e,r,r,e,r,r,e,e,r,r,r,r,e,r,e,r,r,r,r,r,r,e,r,e,r,r,r,r,e,e,e,e,r,r,e,e,e,e,r,e,r,r,r,r,e,r,r,r,r,r,r,r,r,r,r,r,e,e,e,r,e,r,r,e,e,r,e,e,e,r,e,r,r,e,e,r,e,r,r,r,e,r,e,r,r,e,e,r,r,r,e,e,e,r,r,r,r,e,r,e,r,e,r,e,e,e,e,e,r,r,r,e,e,r,r,e,e,e,r,e,r,r,e,e,e,r,e,e,e,e,r,e,e,r,r,e,r,e,e,r,e,e,e,r,e,e,e,r,r,r,r,r,r,r,e,e,e,e,r,r,e,r,e,r,e,r,r,e,e,e,e,r,e,r,e,r,r,r,e,r,e,r,e,r,r,r,r,e,e,r,r,e,r,e,r,e,e,e,r,r,r,e,e,r,r,r,e,r,e,e,r,e,e,e,r,e,r,r,r,r,e,r,e,r,e,e,e,e,e,e,r,e,r,e,e,r,r,r,r,r,e,e,e,r,e,e,r,e,r,e,e,e,r,r,e,r,e,r,r,e,r,e,r,e,e,e,e,r,e,e,e,r,e,e,e,r,r,r,e,e,e,r,r,e,r,r,r,e,e,e,e,r,r,r,e,e,r,r,e,r,r,r,r,r,r,e,r,r,e,e,r,e,r,e,e,r,r,e,e,e,e,r,r,e,r,e,e,e,r,e,e,r,r,e,e,r,r,r,e,r,r,e,e,e,r,e,r,e,r,r,e,e,e,r,e,r,r,e,r,r,e,r,r,e,r,e,r,r,e,e,r,r,e,e,e,r,r,e,r,e,r,e,e,r,e,e,r,e,r,r,e,e,e,r,r,r,r,r,r,r,r,e,e,e,r,r,r,e,r,r,r,e,r,e,e,e,e,r,e,r,e,r,r,r,r,e,e,r,r,r,e,r,r,r,e,e,e,r,e,e,e,r,e,r,e,r,e,r,r,e,e,e,e,e,e,e,r,e,e,e,r,e,e,e,e,r,e,e,e,e,r,r,e,r,r,r,e,e,r,e,e,e,r,r,r,e,r,r,r,r,e,r,e,r,r,e,e,e,e,e,r,r,r,r,e,r,e,e,r,r,r,e,e,e,r,r,e,e,r,e,r,r,e,e,e,r,e,e,e,e,e,e,e,r,r,r,r,r,e,e,e,e,e,e,r,r,e,r,r,r,e,e,r,r,e,r,r,e,e,r,e,r,e,e,e,e,e,e,r,r,r,r,r,e,e,e,e,e,e,e,r,e,e,e,e,r,r,e,r,r,e,e,r,e,e,r,e,e,r,r,r,r,r,e,e,e,r,e,e,r,r,e,e,e,e,r,r,r,r,e,e,e,e,r,e,r,r,e,e,e,e,r,r,e,e,e,e,r,r,e,e,e,e,e,r,r,e,e,r,e,e,r,e,e,r,e,r,e,r,e,e,r,e,r,r,r,e,r,r,e,r,e,e,e,e,r,e,r,e,r,r,e,r,r,r,e,r,e,r,e,r,e,r,e,e,e,e,r,e,r,r,r,e,r,e,r,r,e,r,r,e,r,r,r,e,e,e,r,e,r,r,e,r,e,r,e,r,e,e,r,e,e,e,r,e,e,e,e,r,e,r,r,e,r,e,r,r,r,r,e,r,e,e,r,r,r,r,e,r,r,e,e,e,r,r,r,e,e,e,e,e,r,e,r,r,r,r,r,r,e,e,e,r,r,e,r,e,r,r,r,e,r,r,e,r,e,r,e,e,r,r,e,e,e,e,e,r,e,r,r,r,r,e,e,e,e,r,r,e,e,r,e,r,r,e,r,e,r,e,r,r,r,e,e,e,e,e,e,e,r,e,e,e,r,r,r,r,e,r,r,r,e,r,e,r,e,r,r,r,e,r,e,r,r,e,e,r,r,r,r,e,r,r,e,e,e,r,r,e,e,e,r,e,r,r,e,r,r,e,e,r,e,r,e,r,e,e,e,r,r,r,e,e,e,e,e,r,r,e,e,r,e,r,e,r,r,r,e,r,r,e,e,r,e,r,r,r,r,e,e,e,r,e,e,e,e,r,r,r,e,r,r,e,e,e,r,e,r,e,e,e,r,r,e,r,r,r,e,r,r,e,e,e,e,r,e,e,e,e,r,e,e,r,e,r,e,r,e,e,r,e,r,e,r,e,r,e,r,r,e,r,r,r,e,e,e,r,e,e,e,e,e,e,e,e,r,r,e,r,e,e,r,r,r,e,e,r,r,e,r,e,r,e,r,r,r,r,r,e,e,e,r,e,e,r,r,e,e,e,e,r,e,r,r,e,e,e,r,e,e,r,e,e,r,e,r,r,r,e,r,e,e,e,r,e,e,r,e,e,r,e,r,r,e,e,e,e,r,e,e,e,e,e,e,r,e,r,e,r,r,r,r,e,e,e,r,e,e,e,e,r,e,r,e,e,r,e,r,e,e,r,r,e,r,e,e,e,e,e,e,e,e,r,e,e,e,e,r,e,e,e,r,r,e,e,r,r,e,r,e,e,r,e,e,r,r,e,e,r,r,e,e,e,e,e,r,e,r,r,e,e,r,e,e,e,r,e,r,e,r,r,r,r,e,e,e,r,r,r,e,e,e,r,e,r,e,e,r,r,r,e,r,r,e,r,e,r,e,e,e,e,r,r,e,e,e,r,e,r,e,r,r,e,e,e,e,e,r,e,e,e,e,e,e,e,e,r,e,e,r,r,e,e,e,r,r,e,e,e,r,e,e,e,r,r,e,r,e,e,r,r,e,e,r,r,r,e,r,e,e,r,r,r,e,r,e,e,r,e,e,e,r,e,e,e,r,r,e,r,e,r,e,r,r,e,e,e,r,e,r,r,r,r,r,r,e,e,r,e,r,e,e,e,e,e,e,e,e,r,r,r,e,e,e,e,r,e,e,r,r,e,r,r,e,r,e,e,r,r,e,r,r,r,e,r,r,r,e,e,e,r,e,e,r,r,e,r,r,e,e,e,e,e,r,e,r,e,r,r,r,e,r,e,e,e,e,e,e,r,r,r,r,r,e,e,r,r,e,e,e,e,e,r,r,e,r,e,r,e,r,e,r,e,r,e,e,r,e,e,e,r,e,r,r,r,r,r,e,e,e,r,r,e,r,e,e,r,e,r,e,e,e,e,r,r,e,r,e,r,e,r,e,e,r,e,r,r,r,r,e,r,r,e,r,e,r,r,r,e,e,r,r,e,r,e,e,r,e,r,e,r,e,r,e,r,r,e,r,e,e,e,r,r,e,r,r,r,r,e,r,e,e,e,e,e,r,r,e,r,e,e,e,e,r,r,e,e,r,r,e,e,r,e,e,e,r,e,e,e,e,r,r,r,r,r,r,r,r,e,e,r,e,e,e,r,e,e,e,r,r,r,r,r,r,e,r,r,e,r,r,e,r,e,e,r,r,e,r,r,e,e,e,r,e,r,r,e,e,r,e,r,e,r,r,e,r,r,e,e,e,r,e,e,e,e,r,r,r,r,e,r,r,r,r,r,r,r,e,r,e,r,e,e,e,e,e,r,e,e,e,r,e,r,r,e,e,e,e,e,r,r,r,r,e,e,e,r,e,e,e,r,r,e,e,r,r,e,e,e,e,r,e,r,r,r,r,r,e,r,e,e,r,r,r,r,e,e,e,r,r,e,e,e,r,r,r,r,e,e,e,e,e,e,e,r,r,r,r,r,r,e,r,r,r,r,e,r,r,e,e,r,r,e,r,r,r,e,e,e,r,e,e,e,e,r,e,e,r,r,e,e,r,r,r,r,r,e,r,e,r,r,e,e,r,r,e,e,r,r,r,e,r,e,e,r,r,r,r,e,e,r,r,r,r,r,e,e,e,e,e,r,e,e,r,e,r,e,e,r,r,r,e,e,e,e,r,e,r,r,e,e,r,r,e,e,r,r,r,e,e,e,e,r,r,e,e,e,e,e,r,e,r,e,r,e,e,e,e,r,r,r,e,e,e,e,r,e,e,e,r,e,e,e,e,r,e,r,e,r,e,e,e,r,r,e,e,r,e,r,e,r,r,r,e,e,r,e,r,r,r,r,e,e,e,e,r,e,e,r,r,r,e,e,r,r,e,e,r,e,e,r,r,e,r,r,r,r,r,r,r,e,r,e,e,e,e,r,r,e,r,e,r,r,e,e,e,e,e,r,e,e,r,e,e,e,e,r,r,e,r,r,r,r,r,e,e,r,r,r,r,r,e,e,e,r,e,r,e,e,e,e,r,e,r,e,e,r,r,r,e,e,e,e,e,r,e,r,r,r,e,r,e,e,r,e,e,e,r,r,e,e,e,r,r,r,e,e,e,e,r,r,e,r,r,r,e,r,r,r,r,e,e,r,r,e,r,r,r,e,e,e,r,r,r,r,e,e,e,r,e,r,e,r,r,r,e,e,r,e,r,r,r,e,r,r,e,r,r,r,r,e,r,e,r,e,r,e,r,r,e,r,r,e,r,e,r,e,r,r,r,e,r,r,r,r,e,r,e,e,e,r,r,r,r,r,e,e,r,r,e,r,r,e,r,e,e,e,r,e,e,r,e,e,e,e,e,r,e,e,r,e,r,e,e,r,r,e,e,r,e,e,e,e,r,e,r,e,e,e,e,e,e,r,r,r,e,e,r,e,e,e,e,r,e,r,e,r,e,r,r,r,r,e,r,e,r,e,e,e,e,r,r,e,r,r,e,r,r,e,r,r,e,r,r,e,e,r,r,e,r,e,e,r,e,r,e,e,r,r,e,r,r,e,r,e,e,e,e,e,r,e,e,r,r,r,e,r,e,r,e,e,e,r,e,e,e,e,e,r,e,e,e,r,e,r,r,r,r,r,r,e,e,r,e,e,r,r,e,r,e,r,e,r,e,r,r,r,e,r,r,e,r,r,e,r,e,e,r,e,e,e,r,e,e,r,e,e,r,e,r,r,e,e,r,e,e,r,e,r,r,e,r,e,r,r,r,e,e,r,r,e,r,r,r,e,r,e,r,e,e,r,r,e,e,r,e,e,e,r,r,r,r,r,e,r,r,e,r,r,e,e,r,r,e,e,e,r,e,e,r,e,r,e,e,e,r,e,e,r,e,e,r,r,r,r,r,r,r,e,r,r,e,e,r,r,e,r,r,r,e,e,e,e,e,e,e,e,r,e,r,r,e,r,e,r,r,e,r,e,e,e,e,e,r,r,r,r,e,r,e,e,r,r,r,e,r,r,e,r,r,e,e,r,r,e,r,e,r,e,r,r,r,e,e,r,e,e,r,e,e,r,e,e,r,r,e,r,r,r,r,e,r,e,r,r,e,e,e,r,e,e,e,r,r,e,r,r,e,e,e,e,r,e,r,e,e,r,e,e,r,r,e,e,e,r,e,r,e,e,r,e,r,e,r,r,r,e,r,r,e,r,e,e,e,e,r,e,e,e,r,r,r,e,e,r,r,e,e,e,r,r,r,r,e,e,r,r,e,r,e,r,e,r,r,e,e,r,r,e,r,e,e,r,r,e,e,r,e,e,r,r,e,r,r,r,r,e,r,r,r,r,e,e,r,e,r,e,r,r,e,e,e,r,e,r,r,r,e,r,e,r,e,r,r,e,e,r,e,e,r,e,e,e,e,r,r,e,e,e,r,e,r,e,r,r,r,r,e,e,e,r,r,r,r,e,r,r,r,e,e,e,r,r,e,r,e,e,e,e,r,r,e,e,r]},__routerFilterDynamic:{numItems:39,errorRate:1e-4,numBits:748,numHashes:14,bitArray:[r,e,r,r,e,e,e,e,r,r,r,e,r,r,e,r,e,r,e,r,e,e,r,e,e,r,e,e,e,e,r,r,e,r,e,r,e,r,e,r,e,e,e,r,r,r,r,r,e,r,r,r,e,e,r,e,e,r,r,r,r,r,e,e,r,r,r,e,e,r,r,e,r,e,e,r,r,e,r,e,e,e,e,e,e,r,e,e,r,r,r,e,e,e,r,e,r,e,r,r,e,r,e,r,e,e,e,r,e,e,e,e,r,r,e,e,r,r,e,r,r,r,r,e,e,r,e,e,e,r,e,e,e,r,r,r,r,r,e,r,r,r,r,e,r,e,e,r,r,e,e,r,e,r,e,r,r,r,r,r,e,r,r,e,r,e,r,r,e,r,r,e,e,e,e,e,r,r,r,e,r,r,e,e,r,r,e,e,e,r,r,e,r,e,e,e,r,r,e,e,r,e,r,r,e,r,e,e,e,e,e,r,r,r,e,r,r,r,e,r,e,e,e,r,e,e,e,e,r,e,r,e,e,r,e,e,r,e,e,r,r,r,r,e,e,r,e,r,r,r,e,e,r,r,r,r,e,e,r,r,e,r,r,r,e,e,e,r,r,e,e,r,e,e,e,e,e,e,e,r,r,e,r,e,r,e,e,r,r,r,r,r,r,r,e,r,r,e,r,r,e,r,e,e,r,e,e,e,e,r,r,e,r,e,e,r,r,r,e,e,e,r,e,e,r,r,e,r,e,r,r,r,r,r,r,e,r,e,e,e,r,r,e,r,e,r,r,e,r,e,r,e,e,e,r,e,e,r,r,r,r,r,r,r,r,e,e,e,e,r,r,e,r,e,e,r,r,e,e,r,e,e,r,e,e,e,e,e,e,e,r,r,e,e,e,r,r,e,e,r,r,e,e,r,r,r,r,r,r,r,r,e,e,r,r,r,e,e,r,r,e,e,e,e,r,r,e,r,r,r,r,r,r,e,r,e,r,e,e,e,e,e,e,r,e,r,r,e,r,r,e,e,r,e,e,r,e,e,r,r,r,r,e,r,r,e,r,r,r,e,e,e,e,r,e,e,e,e,r,r,r,r,r,e,e,e,r,e,e,e,e,r,r,e,r,r,r,e,r,r,e,e,r,r,r,e,e,e,r,r,r,e,r,e,r,r,e,r,e,e,e,e,e,r,r,e,r,r,e,r,e,r,e,r,e,r,e,r,r,r,e,r,e,e,r,r,e,e,r,r,e,e,e,e,r,r,r,e,r,r,e,e,e,e,e,e,e,r,e,r,e,e,r,e,r,e,r,r,e,r,e,e,e,e,e,e,r,r,e,e,r,r,e,e,e,e,e,e,r,e,r,e,e,r,r,r,r,e,r,e,e,e,e,r,r,r,r,e,e,e,r,e,r,r,r,r,e,e,r,e,r,r,r,e,r,e,e,r,e,r,r,e,e,e,r,r,r,r,e,r,r,r,e,r,e,e,r,e,e,r,e,r,r,r,e,r,r,e,e,e,r,e,r,e,e,e,e,r,e,e,e,e,e,e,e,e,r,e,e,r,r,r,r,e,r,e,e,e,r,r,e,r,e,e,r,e,e,e,e,r,e,r,e,e,r,e,e,e,e,e,r,e,e,e,r,e,r,r,e,r,e,e,e,e,r,r,r,e,e,r,e,e,r,e,r,e,r,r]},"/_error":["static/chunks/pages/_error-c970d8b55ace1b48.js"],sortedPages:["/_app","/_error"]}}(1,0,1e-4,14),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

package/CHANGELOG.md

@@ -4,6 +4,31 @@ All notable changes to Madarx OS. Newest first.
 
 ## Unreleased
 
+## [2.21.0] - 2026-06-06
+
+### Added
+
+- **Higgsfield AI generation — native tools, easy connect, results on the canvas.** Three approval-gated registry tools (`higgsfield_generate_image` — Soul text-to-image, `higgsfield_product_photoshoot` — image-conditioned product imagery, `higgsfield_generate_video` — DoP image-to-video) backed by one async submit-then-poll adapter (`lib/tools/adapters/higgsfield.js`; base `platform.higgsfield.ai`, `Authorization: Key <id>:<secret>`, egress-logged, credentials never echoed; risk `high`, `enabled_default:false`). A new `kind:'connection'` (`higgsfield`, api_key: `HIGGSFIELD_KEY_ID` + `HIGGSFIELD_KEY_SECRET`) plus a `verifyHiggsfield` path lets a user paste a key once and use it. The marketplace bundle (`higgsfield`, 4 skills) is now **actually installable** — `setItemInstalled` installs each referenced item + surfaces a `requires_connection` hint (replacing the Phase-2 "deferred" stub). Generated media renders **directly on the canvas**: main-agent runs emit a branded media card (`lib/higgsfield-media-card.js`), and delegated sub-agent runs build an embedded gallery artifact (image shown inline, markdown spec preserved as `source_md`) instead of a link-only document. Files: `lib/tools/adapters/higgsfield.js`, `lib/higgsfield-media-card.js`, `lib/tools/registry.js`, `lib/connection-seeds.js`, `lib/marketplace-seeds.js`, `lib/marketplace.js`, `lib/agent-runner.js`. Tests: `tests/marketplace-listing.test.js`, `tests/marketplace-api.test.js`.
+- **Connect-to-unlock: a verified connection auto-enables its tools.** On successful verify, `enableUnlockedTools` flips every registry tool the connection declares in `manifest.unlocks_tool_slugs` to enabled — so a freshly connected service is callable from chat without a separate `/tools` toggle. Generic across all connections; guarded to real registry tools; audited (`connection.tools.auto_enabled`). Enabling only makes a tool *callable* — `high`/`irreversible_external` tiers still hit the approval gate at execution, so consent is never bypassed. File: `app/api/connections/[service]/verify/route.js`.
+- **Inline sub-agent approvals in chat (no approvals page).** When a delegated sub-agent pauses on an owner-approval gate, the chat thread now shows an **Approve / Deny** card instead of sending the owner to the approvals page and losing the activity feed. Approve **re-dispatches the exact delegation** (captured on the approval payload) with the granted `approval_id` injected so the gated tool consumes it and runs — result pins to the canvas, live tool events show in the activity toolbar. `runAgentTick` gains `pending_approvals` injection + `created_approvals` reporting + resume-context persistence; `run_agent` threads approvals through; the orchestrator emits an `agent_approval` SSE event; a new `POST /api/agents/resume-approval` performs the approve-and-re-dispatch (security-checked — `consumeApprovalRequest` requires `approved` status). Files: `lib/agent-runner.js`, `lib/orchestrator-tools.js`, `app/api/orchestrator/stream/route.js`, `app/api/agents/resume-approval/route.js`, `app/components/dashboard/{apply-stream-event.js,use-stream-command.js,chat-panel.jsx}`.
+
+## [2.20.0] - 2026-06-06
+
+### Added
+
+- **Delegation-first goal enforcement (route → delegate → build-if-missing → verify).** The main agent now turns a request into a goal and routes it to the dedicated specialist that owns the tools, instead of doing specialist work itself. Enforcement is **structural, not prompt-only**: specialist domain tools (travel, email, calendar, supabase, vercel, mines) are stripped from the main agent's directly-callable catalog (`getTools()` narrowing) and blocked at the `executeTool` entry with `delegate_required` — so neither the Anthropic loop nor a CLI engine emitting a raw `madarx-action` can bypass it; sub-agents still receive their granted tools via `getEnabledToolSchemasForAgent`. Routing is **LLM-reasoned over a live capability registry, not a keyword table**: the new `route_goal` core tool returns every active agent (role/mission/skills/granted tools), the tool catalog, and whether Tool Smith can build what's missing, plus the exhaustive fallback ladder `delegate → create_then_delegate → build_capability → direct_fallback` — so any goal resolves to a path, including novel domains absent from the hint map. A **Travel Concierge** specialist is auto-seeded on first launch (idempotent, mirrors the Tool Smith seed) so the most common delegation target exists out of the box. Specialist sub-agents that hit a missing tool emit a `madarx-escalate` block; `runAgentTick` files a Tool Smith build task on their behalf and ends the run **blocked** (no half-answer, no new sub-agent privilege — `request_capability` stays orchestrator-only). `CORE_CONTRACTS` (`ORCHESTRATOR_MODE`, reconciled `LIVE_DATA_RESEARCH_RULE`, new `GOAL_COMPLETION_RULE`) and the CLI prompt are rewritten to the route→delegate→verify contract. Kill-switch: `MADARX_DELEGATION_ENFORCEMENT=off`. Spec: `specs/active/delegation-first-goal-enforcement.md`. Files: `lib/role-capability-map.js`, `lib/agent-routing.js`, `lib/orchestrator-tools.js`, `lib/agent-runner.js`, `lib/agent-config.js`, `lib/agent-templates.js`, `lib/seeds.js`, `app/api/orchestrator/stream/route.js`. Tests: `tests/delegation-routing.test.js`.
+
+## [2.19.0] - 2026-06-06
+
+### Added
+
+- **Chat persistence & live-activity continuity across navigation.** Navigate away from the dashboard during a main-agent turn and come back — the chat now resumes instead of going silent until a manual refresh. Two phases ship together. **Phase 1:** the orchestrator stamps an `active_turn_id` / `active_turn_started_at` on the chat session at turn start and clears it in `finally` (so it self-heals on error/cancel), with a derived `agent_working` flag gated by a TTL (`MADARX_ACTIVE_TURN_TTL_MS`, default 15 min) so a crashed turn reads as idle instead of stuck. On return the UI shows an "Agent still working…" banner and progressively refetches persisted turns — including tool-call steps, which the restore path previously dropped. **Phase 2:** a process-local broadcaster (`lib/orchestrator-broadcast.js`) decouples the running turn from the originating request via a per-session ring buffer (`MADARX_TURN_BUFFER_MAX`, default 1000) retained briefly after completion (`MADARX_TURN_BUFFER_RETENTION_MS`, default 30 s); a new `GET /api/orchestrator/stream/attach?session_id=&from_seq=` replays the buffered tail then tails live, so a returning client resumes token-level output and ends on the same transcript as if it never left. The SSE event handling is extracted into a shared reducer (`app/components/dashboard/apply-stream-event.js`) used by both the live POST stream and the attach reconnect, so behavior stays identical. `chat_turn` events are observation-only (persisted to `activity_log`, never mutate agent/case state) and a per-session attach-subscriber cap (`MADARX_TURN_MAX_SUBSCRIBERS`, default 8) bounds listener growth. Single-process / local-first: on a server restart mid-turn the live buffer is lost, but Phase-1 persistence + the TTL flag are the durable fallback. Spec: `specs/active/chat-persistence-live-continuity.md`. Files: `lib/schema.js`, `lib/db.js`, `lib/runtime.js`, `lib/orchestrator-broadcast.js`, `lib/delegation-contracts.js`, `app/api/orchestrator/stream/route.js`, `app/api/orchestrator/stream/attach/route.js`, `app/components/dashboard/*`. Tests: `tests/chat-continuity.test.js`, `tests/chat-continuity-phase2.test.js`.
+- **Artifact layout & team onboarding.** Improved canvas artifact positioning/ordering (`app/components/dashboard/artifact-board.jsx`, `artifact-order.js`, `use-artifact-layout.js`) with regression coverage in `tests/artifact-layout.test.js`, plus a dedicated team-onboarding flow (`app/onboarding/team/`) and team settings/invite refinements. Adds a cloud-schema export pipeline (`lib/cloud-schema.js`, `scripts/build-cloud-schema.mjs`, `GET /api/cloud/schema`) and a `lib/public-url.js` helper for share/public URL resolution.
+
+### Fixed
+
+- **CLI-install login lockout in supabase mode.** Under `madarx` (separate `~/.madarx` data home, plain `SUPABASE_*` env + vault keys) three gaps stacked into a hard lockout: a correct password sign-in succeeded, then the next page load bounced back to `/login?error=missing_supabase_env`. The middleware auth gate's env fast-path read only `NEXT_PUBLIC_SUPABASE_*`; it now resolves plain `SUPABASE_*` too and defers to the vault-backed `/api/auth/config` (returns null instead of short-circuiting) when a mode is named but creds are absent. Auth-mode drift (stale config-table `local` overriding env) and related resolution gaps closed. New pure, unit-tested `lib/auth-env-fastpath.js::resolveEnvAuthConfig()`. Only reproduced under the CLI install, never under `npm run dev`.
+
 ## [2.18.0] - 2026-06-06
 
 ### Added

package/app/api/agents/resume-approval/route.js

@@ -0,0 +1,102 @@
+// Resume a delegated sub-agent run after the owner approves its tool inline in chat.
+//
+// POST /api/agents/resume-approval  body: { approval_id }
+//   1. Approve the pending request (decideApprovalRequest 'approved').
+//   2. Re-dispatch the EXACT delegation captured on the approval payload
+//      (payload.resume = { agent_id, instruction, expected_output }), injecting
+//      the now-approved approval_id so the sub-agent's gated tool consumes it
+//      instead of re-prompting.
+//   3. Return the produced artifact so the chat pins it to the canvas.
+//
+// This keeps the owner in the chat — they never visit the approvals page, and the
+// re-dispatch publishes live tool events so the activity toolbar shows the work.
+
+import { getApprovalRequest, decideApprovalRequest } from '@/lib/approvals.js';
+import { requireSession } from '@/lib/auth.js';
+import { runAgentTick } from '@/lib/agent-runner.js';
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+function requireAdmin(session) {
+  if (session.role !== 'admin' && session.role !== 'owner') {
+    throw { status: 403, error: 'forbidden' };
+  }
+}
+
+export async function POST(req) {
+  let body;
+  try {
+    body = await req.json();
+  } catch {
+    return Response.json({ ok: false, error: 'invalid_json' }, { status: 400 });
+  }
+  const approvalId = typeof body?.approval_id === 'string' ? body.approval_id.trim() : '';
+  if (!approvalId) return Response.json({ ok: false, error: 'missing_approval_id' }, { status: 400 });
+
+  try {
+    const session = await requireSession(req);
+    requireAdmin(session);
+
+    const approval = getApprovalRequest(approvalId);
+    if (!approval) return Response.json({ ok: false, error: 'not_found' }, { status: 404 });
+
+    const resume = approval.payload?.resume || null;
+    const toolName = approval.payload?.tool_name
+      || (typeof approval.action_type === 'string' ? approval.action_type.split(':').pop() : null);
+
+    if (!resume || !resume.agent_id) {
+      // No captured delegation context — approve so a later main-agent re-delegation
+      // can consume it, but we cannot auto-resume here.
+      decideApprovalRequest(approvalId, 'approved', { approved_by: session.user_id || 'owner' });
+      return Response.json({
+        ok: true,
+        resumed: false,
+        reason: 'Approved, but no delegation context to auto-resume. Re-send your request and it will continue.',
+      });
+    }
+
+    // Approve first so the re-dispatched tool call consumes it.
+    decideApprovalRequest(approvalId, 'approved', { approved_by: session.user_id || 'owner' });
+
+    const run = await runAgentTick(resume.agent_id, {
+      triggered_by: 'approval_resume',
+      wake_reason: 'owner approved tool inline in chat',
+      instruction: resume.instruction || null,
+      expected_output: resume.expected_output || null,
+      pending_approvals: toolName ? [{ approval_id: approvalId, tool_name: toolName }] : [],
+      acting_on_behalf_of_user_id: session.user_id || null,
+    });
+
+    if (!run) {
+      return Response.json({ ok: false, error: 'resume_dispatch_failed', agent_id: resume.agent_id }, { status: 500 });
+    }
+
+    // If the sub-agent paused AGAIN (e.g. a second gated tool), surface that.
+    if (run.pending_approval?.approval_id) {
+      return Response.json({
+        ok: true,
+        resumed: true,
+        status: 'awaiting_approval',
+        agent_name: resume.agent_name || run.agent || null,
+        pending_approval: run.pending_approval,
+      });
+    }
+
+    return Response.json({
+      ok: true,
+      resumed: true,
+      status: run.status || 'complete',
+      agent_name: resume.agent_name || run.agent || null,
+      run_id: run.id || null,
+      artifact_id: run.artifact_id || null,
+      title: run.artifact_title || run.title || null,
+      preview: (run.preview || '').slice(0, 600),
+    });
+  } catch (err) {
+    if (err && typeof err === 'object' && err.status) {
+      return Response.json({ ok: false, error: err.error || 'unauthorized' }, { status: err.status });
+    }
+    return Response.json({ ok: false, error: String(err?.message || err) }, { status: 500 });
+  }
+}

package/app/api/auth/config/route.js

@@ -22,6 +22,7 @@ import {
   testSupabaseConnection,
   verifyRecoveryToken,
 } from '@/lib/auth-config.js';
+import { getPublicBaseUrl, setPublicBaseUrl } from '@/lib/public-url.js';
 import { requireSession } from '@/lib/auth.js';
 
 export const runtime = 'nodejs';
@@ -35,6 +36,7 @@ export async function GET() {
     supabaseConfigured: Boolean(url && anonKey),
     supabaseUrl: url || null,
     supabaseAnonKey: anonKey || null,
+    publicBaseUrl: getPublicBaseUrl() || null,
   });
 }
 
@@ -105,9 +107,14 @@ export async function POST(req) {
       anonKey: body.anonKey,
       serviceKey: body.serviceKey,
     });
+    // The public app URL is not a secret; persist it on the same save so invite
+    // and share links resolve to a host teammates can actually reach.
+    if (body.publicBaseUrl !== undefined) {
+      setPublicBaseUrl(body.publicBaseUrl);
+    }
   } catch (err) {
     return Response.json({ ok: false, error: err.message }, { status: 400 });
   }
 
-  return Response.json({ ok: true, authMode: getAuthMode() });
+  return Response.json({ ok: true, authMode: getAuthMode(), publicBaseUrl: getPublicBaseUrl() || null });
 }

package/app/api/cloud/schema/route.js

@@ -0,0 +1,109 @@
+/**
+ * /api/cloud/schema — Supabase shared-layer schema bootstrap surface.
+ *
+ *   GET                         → readiness snapshot for the onboarding wizard:
+ *                                 { configured, ready, present[], missing[],
+ *                                   total, version, projectRef, sqlEditorUrl,
+ *                                   schemaSql, serviceKeyConfigured }
+ *   POST { action: 'verify' }   → re-probe the tables (after a manual apply).
+ *   POST { action: 'apply', accessToken } → one-click apply via the Supabase
+ *                                 Management API using a personal access token.
+ *                                 The token is used once and never persisted.
+ *
+ * Authorization mirrors /api/auth/config: in local mode the app is already open
+ * to the single operator; in supabase mode an owner/admin session is required.
+ * The schema SQL is public DDL (safe to return); no secret is ever returned.
+ */
+
+import { getAuthMode } from '@/lib/auth.js';
+import { requireSession } from '@/lib/auth.js';
+import { getSupabaseAuthConfig, isServiceKeyConfigured } from '@/lib/auth-config.js';
+import {
+  probeCloudSchema,
+  applySchemaViaManagementApi,
+  projectRefFromUrl,
+  sqlEditorUrl,
+  CLOUD_SCHEMA_SQL,
+  SCHEMA_VERSION,
+} from '@/lib/cloud-schema.js';
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+/** Owner/admin gate; in local mode the single operator is always allowed. */
+async function canManage(req) {
+  if (getAuthMode() === 'local') return true;
+  let session = null;
+  try {
+    session = await requireSession(req);
+  } catch {
+    session = null;
+  }
+  return Boolean(session && ['owner', 'admin'].includes(session.role));
+}
+
+function baseSnapshot() {
+  const { url } = getSupabaseAuthConfig();
+  return {
+    projectRef: projectRefFromUrl(url) || null,
+    sqlEditorUrl: sqlEditorUrl(url) || null,
+    serviceKeyConfigured: isServiceKeyConfigured(),
+    schemaSql: CLOUD_SCHEMA_SQL,
+    version: SCHEMA_VERSION,
+  };
+}
+
+export async function GET(req) {
+  if (!(await canManage(req))) {
+    return Response.json({ ok: false, error: 'forbidden' }, { status: 403 });
+  }
+  const snap = baseSnapshot();
+  let probe = { configured: false };
+  try {
+    probe = await probeCloudSchema();
+  } catch {
+    probe = { configured: false };
+  }
+  return Response.json({ ok: true, ...snap, ...probe });
+}
+
+export async function POST(req) {
+  if (!(await canManage(req))) {
+    return Response.json({ ok: false, error: 'forbidden' }, { status: 403 });
+  }
+  const body = await req.json().catch(() => ({}));
+  const action = body.action || 'verify';
+
+  if (action === 'verify') {
+    let probe = { configured: false };
+    try {
+      probe = await probeCloudSchema();
+    } catch {
+      probe = { configured: false };
+    }
+    return Response.json({ ok: true, ...probe });
+  }
+
+  if (action === 'apply') {
+    const { url } = getSupabaseAuthConfig();
+    const ref = projectRefFromUrl(body.projectRef || url);
+    if (!ref) {
+      return Response.json({ ok: false, error: 'no_project_ref' }, { status: 400 });
+    }
+    const result = await applySchemaViaManagementApi({ ref, pat: body.accessToken });
+    if (!result.ok) {
+      const status = result.error === 'unauthorized_token' ? 422 : 400;
+      return Response.json({ ok: false, error: result.error }, { status });
+    }
+    // Re-probe so the client gets fresh readiness in the same round-trip.
+    let probe = { configured: false };
+    try {
+      probe = await probeCloudSchema();
+    } catch {
+      probe = { configured: false };
+    }
+    return Response.json({ ok: true, applied: true, ...probe });
+  }
+
+  return Response.json({ ok: false, error: 'unknown_action' }, { status: 400 });
+}

package/app/api/connections/[service]/verify/route.js

@@ -21,6 +21,7 @@ import { summarizeConnection, fingerprintLast4 } from '../../../../../lib/connec
 import { setSecret } from '../../../../../lib/secrets.js';
 import { wrapFetch } from '../../../../../lib/egress.js';
 import { getDb, nowIso, newId } from '../../../../../lib/db.js';
+import { setToolEnabled, listMarketplaceTools } from '../../../../../lib/tools/registry.js';
 import { getBridgeHealth } from '../../../../../lib/whatsapp.js';
 import { getHermesStatus, resolveHermesDir } from '../../../../../lib/hermes.js';
 import fs from 'node:fs';
@@ -43,6 +44,39 @@ function friendly(reason) {
   return FRIENDLY_ERRORS[reason] || "We couldn't reach the service. Check the value and try again.";
 }
 
+/**
+ * Enable the registry tools a connection declares in `unlocks_tool_slugs`, so a
+ * freshly verified service is callable from chat without a manual /tools toggle.
+ * Only slugs that resolve to real registry tools are enabled; connector/skill
+ * slugs (which are not in MARKETPLACE_TOOLS) are skipped. Best-effort.
+ *
+ * @returns {string[]} the slugs that were enabled.
+ */
+function enableUnlockedTools(connection) {
+  const slugs =
+    connection?.connection?.unlocks_tool_slugs ||
+    connection?.manifest?.unlocks_tool_slugs ||
+    [];
+  if (!Array.isArray(slugs) || slugs.length === 0) return [];
+  let registryNames;
+  try {
+    registryNames = new Set(listMarketplaceTools().map((t) => t.name));
+  } catch {
+    return [];
+  }
+  const enabled = [];
+  for (const slug of slugs) {
+    if (typeof slug !== 'string' || !registryNames.has(slug)) continue;
+    try {
+      setToolEnabled(slug, true);
+      enabled.push(slug);
+    } catch {
+      // best-effort — one bad slug never blocks verification
+    }
+  }
+  return enabled;
+}
+
 function writeAudit(type, meta, status = 'ok', summary = '') {
   try {
     getDb().prepare(`
@@ -296,6 +330,40 @@ async function verifySupabase(creds) {
   }
 }
 
+async function verifyHiggsfield(creds) {
+  const keyId = creds.HIGGSFIELD_KEY_ID;
+  const keySecret = creds.HIGGSFIELD_KEY_SECRET;
+  if (!keyId) return { ok: false, reason: 'missing_field', field: 'HIGGSFIELD_KEY_ID' };
+  if (!keySecret) return { ok: false, reason: 'missing_field', field: 'HIGGSFIELD_KEY_SECRET' };
+  // Live probe against the platform with the Key id:secret header. We treat an
+  // explicit auth rejection (401/403) as a hard failure, but accept other
+  // statuses (the public REST surface is thin and a probe path may 404) so a
+  // valid key is never blocked by an endpoint guess.
+  try {
+    const fetchFn = wrapFetch('connection.verify.higgsfield', null, fetch);
+    const res = await fetchFn('https://platform.higgsfield.ai/v1/job-sets?limit=1', {
+      method: 'GET',
+      headers: { authorization: `Key ${keyId}:${keySecret}`, accept: 'application/json' },
+    });
+    if (res.status === 401 || res.status === 403) return { ok: false, reason: 'unauthorized' };
+    return {
+      ok: true,
+      account_label: 'Higgsfield AI',
+      last_4: fingerprintLast4(keySecret),
+      summary: { key_id_last_4: fingerprintLast4(keyId), live_probe_status: res.status },
+    };
+  } catch {
+    // Network/endpoint uncertainty: save the credentials rather than reject a
+    // possibly-valid key. Generation calls will surface a clear auth error if wrong.
+    return {
+      ok: true,
+      account_label: 'Higgsfield AI',
+      last_4: fingerprintLast4(keySecret),
+      summary: { key_id_last_4: fingerprintLast4(keyId), saved_without_live_verify: true },
+    };
+  }
+}
+
 async function verifyWhatsapp() {
   try {
     const health = await getBridgeHealth();
@@ -378,6 +446,7 @@ const VERIFIERS = {
   kimi: { fn: verifyKimi, persist: ['KIMI_API_KEY'] },
   github: { fn: verifyGithub, persist: ['GITHUB_TOKEN'] },
   resend: { fn: verifyResend, persist: ['RESEND_API_KEY', 'RESEND_FROM_EMAIL'] },
+  higgsfield: { fn: verifyHiggsfield, persist: ['HIGGSFIELD_KEY_ID', 'HIGGSFIELD_KEY_SECRET'] },
   supabase: {
     fn: verifySupabase,
     persist: ['SUPABASE_URL', 'SUPABASE_SERVICE_ROLE_KEY', 'SUPABASE_ANON_KEY', 'SUPABASE_ACCESS_TOKEN'],
@@ -558,6 +627,19 @@ export async function POST(request, context) {
     }
   }
 
+  // Step 3c: auto-enable the registry tools this connection unlocks, so a freshly
+  // connected service is usable from chat without a separate /tools toggle.
+  // Enabling only makes a tool callable — risky tiers (high / irreversible_external)
+  // still hit the approval gate at execution time, so this never bypasses consent.
+  // Best-effort and idempotent; non-registry unlocks (e.g. connector slugs) are skipped.
+  const enabledTools = enableUnlockedTools(connection);
+  if (enabledTools.length) {
+    writeAudit('connection.tools.auto_enabled', {
+      service_key: service,
+      tools: enabledTools,
+    }, 'ok', `Auto-enabled ${enabledTools.length} tool(s) for ${service}`);
+  }
+
   writeAudit('connection.verify.succeeded', {
     service_key: service,
     scope: scopeTuple.scope,
@@ -565,6 +647,7 @@ export async function POST(request, context) {
     agent_id: scopeTuple.agent_id,
     account_label: result.account_label || null,
     last_4: result.last_4 || null,
+    auto_enabled_tools: enabledTools,
   }, 'ok', `Verify succeeded: ${service} (${scopeTuple.scope})`);
 
   const next = getConnection(service);

package/app/api/orchestrator/stream/attach/route.js

@@ -0,0 +1,101 @@
+import { requireSession } from '@/lib/auth.js';
+import { getActiveTurn, subscribe } from '@/lib/orchestrator-broadcast.js';
+
+export const runtime = 'nodejs';
+export const dynamic = 'force-dynamic';
+
+// Phase 2: re-attach to an in-flight orchestrator turn.
+//
+// GET /api/orchestrator/stream/attach?session_id=<id>&from_seq=<n>
+//
+// When a turn is live (or just finished, within the broadcaster's retention
+// window) for the session, this replays the buffered tail after `from_seq`,
+// then streams live frames until the terminal `__end`. When nothing is in
+// flight it returns 204 so the client can stay on its persisted state.
+// SECURITY — session ownership: `requireSession` authenticates the caller but
+// `chat_sessions` has no `user_id` column yet, so we cannot scope the attach to
+// the owner. In `MADARX_AUTH_MODE=local` (single synthetic user) this is moot.
+// In `supabase` multi-user mode an authenticated user could attach to another
+// user's live turn by guessing its session_id. Closing this requires adding
+// `user_id` to `chat_sessions` (set at createChatSession, propagated from the
+// orchestrator's authenticated session) and an ownership assert here — tracked
+// as a follow-up, out of scope for the continuity feature. The broadcaster only
+// holds an in-flight turn for a session that genuinely started one, so this is
+// not a path to historical/persisted data, only the live token tail.
+export async function GET(req) {
+  try {
+    await requireSession(req);
+  } catch (err) {
+    if (err && typeof err === 'object' && err.status) {
+      return Response.json({ error: err.error || 'unauthorized' }, { status: err.status });
+    }
+    throw err;
+  }
+
+  const url = new URL(req.url);
+  const sessionId = url.searchParams.get('session_id');
+  const fromSeq = Number(url.searchParams.get('from_seq')) || 0;
+  if (!sessionId) {
+    return Response.json({ error: 'session_id required' }, { status: 400 });
+  }
+
+  const active = getActiveTurn(sessionId);
+  if (!active) {
+    // Nothing in flight — the client keeps its persisted view.
+    return new Response(null, { status: 204 });
+  }
+
+  const encoder = new TextEncoder();
+  let cleanup = () => {};
+
+  const stream = new ReadableStream({
+    start(ctrl) {
+      let closed = false;
+      function safeEnqueue(chunk) {
+        if (closed) return;
+        try { ctrl.enqueue(encoder.encode(chunk)); }
+        catch { closed = true; }
+      }
+      function send(event, data) {
+        // Serialise exactly as the live stream's emit() does so the shared
+        // client reducer treats replayed and live frames identically.
+        const payload = typeof data === 'string' ? data : JSON.stringify(data);
+        safeEnqueue(`event: ${event}\ndata: ${payload}\n\n`);
+      }
+
+      // Tell the client which turn it attached to.
+      send('attach', { session_id: sessionId, turn_id: active.turnId });
+
+      const unsubscribe = subscribe(sessionId, fromSeq, (frame) => {
+        if (frame.event === '__end') {
+          send('done', { ok: true, resumed: true });
+          cleanup();
+          return;
+        }
+        send(frame.event, frame.data);
+      });
+
+      cleanup = () => {
+        if (closed) return;
+        closed = true;
+        try { unsubscribe(); } catch { /* ignore */ }
+        try { ctrl.close(); } catch { /* ignore */ }
+      };
+
+      req.signal.addEventListener('abort', cleanup);
+
+      // If the turn already finished before we subscribed, the buffered tail
+      // (incl. __end) was replayed synchronously above and cleanup ran.
+    },
+    cancel() { cleanup(); },
+  });
+
+  return new Response(stream, {
+    headers: {
+      'Content-Type': 'text/event-stream',
+      'Cache-Control': 'no-cache, no-transform',
+      Connection: 'keep-alive',
+      'X-Accel-Buffering': 'no',
+    },
+  });
+}