tands 0.1.0 → 0.2.0

package/README.md

@@ -13,6 +13,8 @@ npx tands dev                      # a local workspace for it, on http://localho
 - **`tands check [manifest]`** checks a manifest (a file, or its address) as a workspace would.
 - **`tands dev [manifest address]`** stands in for a workspace: your tab as someone you choose,
   real tokens signed with its own keys, your data in memory, your events and your actions.
+- **`tands publish [--changes "…"]`** sends a new version of your listed app to the marketplace
+  for review, with a publishing key from its workspace (`TANDS_URL`, `TANDS_PUBLISH_KEY`).
 
 For your own build, the SDK is [`@tabs-and-spaces/sdk`](https://www.npmjs.com/package/@tabs-and-spaces/sdk).
 

package/dist/sdk/tands-sdk-server.js

@@ -1,3 +1,6 @@
+// ../sdk/src/protocol.ts
+var isHome = (context) => Boolean(context.home);
+
 // ../sdk/src/server.ts
 var TokenError = class extends Error {
 };
@@ -121,6 +124,20 @@ function dataClient({ dataKey, dataUrl }, fetcher = fetch) {
     }
   };
 }
+async function reportEvent({ key, eventsUrl }, name, fields = {}, fetcher = fetch) {
+  const response = await fetcher(eventsUrl, {
+    method: "POST",
+    headers: { "content-type": "application/json", authorization: `Bearer ${key}` },
+    body: JSON.stringify({ name, data: fields })
+  });
+  if (!response.ok) {
+    const body = await response.json().catch(() => null);
+    throw new DataError(
+      body?.error?.message ?? `It answered ${response.status}.`,
+      body?.error?.code ?? null
+    );
+  }
+}
 var DataError = class extends Error {
   constructor(message, code) {
     super(message);
@@ -133,5 +150,7 @@ export {
   TokenError,
   dataClient,
   fetchKeys,
+  isHome,
+  reportEvent,
   verifyToken
 };

package/dist/sdk/tands-sdk.js

@@ -1,5 +1,6 @@
 // ../sdk/src/protocol.ts
 var PROTOCOL_VERSION = 1;
+var isHome = (context) => Boolean(context.home);
 var isRecord = (value) => typeof value === "object" && value !== null;
 function readAppMessage(data) {
   if (!isRecord(data) || data.tands !== PROTOCOL_VERSION) return null;
@@ -10,6 +11,27 @@ function readAppMessage(data) {
   if (data.type === "data" && typeof data.id === "string" && data.id.length <= 64 && isRecord(data.request) && typeof data.request.op === "string") {
     return { tands: 1, type: "data", id: data.id, request: data.request };
   }
+  if (data.type === "eventKey" && typeof data.id === "string" && data.id.length <= 64) {
+    return { tands: 1, type: "eventKey", id: data.id };
+  }
+  if (data.type === "openTrigger" && typeof data.id === "string" && data.id.length <= 64 && (data.event === void 0 || data.event === null || typeof data.event === "string" && data.event.length <= 40)) {
+    return {
+      tands: 1,
+      type: "openTrigger",
+      id: data.id,
+      event: typeof data.event === "string" ? data.event : null
+    };
+  }
+  const id = (value) => typeof value === "string" && value.length > 0 && value.length <= 64;
+  if (data.type === "open" && id(data.id) && id(data.space) && (data.tab === void 0 || data.tab === null || id(data.tab))) {
+    return {
+      tands: 1,
+      type: "open",
+      id: data.id,
+      space: data.space,
+      tab: typeof data.tab === "string" ? data.tab : null
+    };
+  }
   if (data.type === "event" && typeof data.id === "string" && data.id.length <= 64 && typeof data.name === "string" && data.name.length <= 40 && (data.data === void 0 || isRecord(data.data))) {
     return {
       tands: 1,
@@ -155,6 +177,19 @@ function connect({ timeoutMs = 1e4, window: win = window } = {}) {
       async emit(name, fields = {}) {
         await ask((id) => ({ tands: 1, type: "event", id, name, data: fields }));
       },
+      requestEventKey: () => ask((id) => ({ tands: 1, type: "eventKey", id })),
+      async open(target) {
+        await ask((id) => ({
+          tands: 1,
+          type: "open",
+          id,
+          space: target.space,
+          tab: target.tab ?? null
+        }));
+      },
+      async openTrigger(event) {
+        await ask((id) => ({ tands: 1, type: "openTrigger", id, event: event ?? null }));
+      },
       values(scope) {
         return {
           get: async (key) => (await data({ op: "values.get", scope, key })).value,
@@ -198,6 +233,7 @@ export {
   PROTOCOL_VERSION,
   WorkspaceError,
   connect,
+  isHome,
   readAppMessage,
   readHostMessage
 };

package/dist/tands.js

@@ -19676,9 +19676,101 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
+// ../types/src/time.ts
+function isTimeZone(value) {
+  if (!value || value.length > 64) return false;
+  try {
+    new Intl.DateTimeFormat("en", { timeZone: value });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var TimeZoneSchema = external_exports.string().refine(isTimeZone, "Not a known time zone.");
+var DEFAULT_TIME_ZONE = "UTC";
+
+// ../types/src/recurrence.ts
+var WeekdaySchema = external_exports.number().int().min(0).max(6);
+var RecurrenceSchema = external_exports.discriminatedUnion("freq", [
+  external_exports.object({ freq: external_exports.literal("daily"), interval: external_exports.number().int().min(1).max(365) }),
+  external_exports.object({
+    freq: external_exports.literal("weekly"),
+    interval: external_exports.number().int().min(1).max(52),
+    /** The days of the week it happens on (Monday to Friday: every weekday). */
+    weekdays: external_exports.array(WeekdaySchema).min(1).max(7)
+  }),
+  external_exports.object({
+    freq: external_exports.literal("monthly"),
+    interval: external_exports.number().int().min(1).max(12),
+    on: external_exports.discriminatedUnion("kind", [
+      /** A day of the month; in shorter months, their last day. */
+      external_exports.object({ kind: external_exports.literal("day"), day: external_exports.number().int().min(1).max(31) }),
+      /** The first … fourth, or last (-1), such weekday of the month. */
+      external_exports.object({
+        kind: external_exports.literal("weekday"),
+        week: external_exports.union([external_exports.literal(1), external_exports.literal(2), external_exports.literal(3), external_exports.literal(4), external_exports.literal(-1)]),
+        weekday: WeekdaySchema
+      })
+    ])
+  })
+]);
+var IsoDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2026-10-16.");
+var ClockTimeSchema = external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "A time like 17:00.");
+var DAY_MS = 24 * 60 * 6e4;
+
+// ../types/src/notifications.ts
+var NOTIFICATION_KINDS = ["mention", "dm", "approval", "thread"];
+var NotificationKindSchema = external_exports.enum(NOTIFICATION_KINDS);
+var QuietHoursSchema = external_exports.object({
+  on: external_exports.boolean().default(false),
+  from: ClockTimeSchema.default("22:00"),
+  to: ClockTimeSchema.default("08:00"),
+  days: external_exports.array(external_exports.number().int().min(0).max(6)).max(7).default([0, 1, 2, 3, 4, 5, 6])
+});
+var NotificationSettingsSchema = external_exports.object({
+  /** A gentle chime (and the Inbox icon's pulse) when something new arrives. */
+  sound: external_exports.boolean().default(true),
+  /** Which kinds chime and pop up (threads you follow: quiet, unless you add them). */
+  alert: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  /** Do not disturb (decision 194): quiet hours, each week. */
+  quietHours: QuietHoursSchema.default(QuietHoursSchema.parse({})),
+  /** Paused until then (a quick "for an hour"); null: not paused. */
+  pausedUntil: external_exports.iso.datetime().nullable().default(null),
+  /** What still gets through while you're quiet (a DM, a request for your yes). */
+  allowWhenQuiet: external_exports.array(NotificationKindSchema).default([]),
+  /**
+   * Away from the app (decision 195): what's emailed when it's still unread a
+   * little later (grouped into one email), and what's sent to your linked chats.
+   */
+  email: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  chat: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  /** A short email when something has waited unread for hours (at most one a day). */
+  reminder: external_exports.boolean().default(true)
+});
+var DEFAULT_NOTIFICATION_SETTINGS = NotificationSettingsSchema.parse(
+  {}
+);
+var UpdateNotificationSettingsSchema = external_exports.object({
+  sound: external_exports.boolean(),
+  alert: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  quietHours: QuietHoursSchema,
+  pausedUntil: external_exports.iso.datetime().nullable(),
+  allowWhenQuiet: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  email: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  chat: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  reminder: external_exports.boolean()
+}).partial().strict();
+var NotificationSettingsResponseSchema = external_exports.object({
+  settings: NotificationSettingsSchema
+});
+var SPACE_NOTIFY_LEVELS = ["all", "mentions", "muted"];
+var SpaceNotifySchema = external_exports.enum(SPACE_NOTIFY_LEVELS);
+var SetSpaceNotifyRequestSchema = external_exports.object({ level: SpaceNotifySchema });
+
 // ../types/src/apps.ts
 var APP_MANIFEST_VERSION = 1;
 var MAX_APP_TABS = 10;
+var MAX_APP_HOME_PAGES = 3;
 var APP_TOKEN_SECONDS = 600;
 var APP_DATA_LIMIT_BYTES = 100 * 1024 * 1024;
 var APP_RECORD_MAX_BYTES = 32 * 1024;
@@ -19751,6 +19843,18 @@ var AppManifestSchema = external_exports.object({
       url: external_exports.string().min(1).max(500)
     })
   ).min(1, "An app needs at least one tab.").max(MAX_APP_TABS),
+  /**
+   * Home pages it offers (decision 177): an owner or admin may choose one as the
+   * workspace's Home. Shown like a tab, without a space around it.
+   */
+  home: external_exports.array(
+    external_exports.object({
+      id: AppTabIdSchema,
+      name: external_exports.string().trim().min(1).max(40),
+      description: external_exports.string().trim().max(200).default(""),
+      url: external_exports.string().min(1).max(500)
+    })
+  ).max(MAX_APP_HOME_PAGES).optional(),
   /** The data it keeps in the workspace (M9 slice 2). */
   data: external_exports.object({
     collections: external_exports.record(DataNameSchema, AppCollectionSchema).refine(
@@ -19761,8 +19865,15 @@ var AppManifestSchema = external_exports.object({
   /** What it does when agents ask (M9 slice 3). */
   actions: external_exports.record(DataNameSchema, AppActionSchema).refine((actions) => Object.keys(actions).length <= 20, "An app has at most 20 actions.").optional(),
   /** What happens in it, for triggers to listen for (M9 slice 5). */
-  events: external_exports.record(DataNameSchema, AppEventSchema).refine((events) => Object.keys(events).length <= 20, "An app has at most 20 events.").optional()
+  events: external_exports.record(DataNameSchema, AppEventSchema).refine((events) => Object.keys(events).length <= 20, "An app has at most 20 events.").optional(),
+  /**
+   * Publishing it to the marketplace (decision 203): `verify` is the token of
+   * the workspace that may publish it, shown on its Publish page. Only whoever
+   * controls the manifest's address can put it there.
+   */
+  marketplace: external_exports.object({ verify: external_exports.string().trim().max(100) }).optional()
 });
+var ManifestHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "A manifest's hash.");
 var AppActionInfoSchema = external_exports.object({
   name: external_exports.string(),
   description: external_exports.string(),
@@ -19823,6 +19934,8 @@ var AppSchema = external_exports.object({
   origin: external_exports.string(),
   manifestUrl: external_exports.string(),
   tabs: external_exports.array(AppTabSchema),
+  /** Home pages it offers (decision 177). */
+  homePages: external_exports.array(AppTabSchema).default([]),
   /** The data it keeps (M9 slice 2). */
   collections: external_exports.array(AppCollectionInfoSchema),
   /** What it does when agents ask (M9 slice 3). */
@@ -19834,7 +19947,14 @@ var AppSchema = external_exports.object({
   dataLimitBytes: external_exports.number(),
   installedBy: external_exports.object({ userId: external_exports.string(), name: external_exports.string() }),
   installedAt: external_exports.string(),
-  updatedAt: external_exports.string()
+  updatedAt: external_exports.string(),
+  /** The marketplace listing it was installed from (decision 205; null: by its address). */
+  fromListing: external_exports.object({ id: external_exports.string(), slug: external_exports.string() }).nullable().default(null),
+  /**
+   * Tabs & Spaces took that listing down (decision 205), and why: it still
+   * works here, for the workspace's owners and admins to decide.
+   */
+  takenDown: external_exports.object({ reason: external_exports.string(), at: external_exports.string() }).nullable().default(null)
 });
 var AppListSchema = external_exports.object({
   apps: external_exports.array(AppSchema),
@@ -19843,7 +19963,9 @@ var AppListSchema = external_exports.object({
 });
 var AppResponseSchema = external_exports.object({ app: AppSchema });
 var InstallAppRequestSchema = external_exports.object({
-  manifestUrl: external_exports.url({ protocol: /^https?$/, error: "Enter the manifest's full address." })
+  manifestUrl: external_exports.url({ protocol: /^https?$/, error: "Enter the manifest's full address." }),
+  /** From a listing (decision 203): only the manifest it reviewed, by its hash. */
+  manifestHash: ManifestHashSchema.optional()
 });
 var AppPreviewSchema = external_exports.object({
   app: AppSchema.omit({
@@ -19852,7 +19974,9 @@ var AppPreviewSchema = external_exports.object({
     updatedAt: true,
     iconUrl: true,
     dataBytes: true,
-    dataLimitBytes: true
+    dataLimitBytes: true,
+    fromListing: true,
+    takenDown: true
   }),
   /** Its picture, inline (it isn't kept until installed). */
   icon: external_exports.string().nullable(),
@@ -19876,11 +20000,30 @@ var AppContextSchema = external_exports.object({
   app: external_exports.object({ id: external_exports.string() }),
   locale: external_exports.string()
 });
+var AppHomeContextSchema = AppContextSchema.extend({
+  user: external_exports.object({ id: external_exports.string(), name: external_exports.string(), guest: external_exports.boolean() }),
+  space: external_exports.null(),
+  tab: external_exports.null(),
+  /** Which of the app's home pages. */
+  home: external_exports.object({ id: external_exports.string() })
+});
+var AppEventKeySchema = external_exports.object({ key: external_exports.string(), eventsUrl: external_exports.string() });
+var AppEventKeyStatusSchema = external_exports.object({
+  on: external_exports.boolean(),
+  /** Its app declares events (else there's nothing to report). */
+  available: external_exports.boolean(),
+  /** Who allowed it: events report for them. */
+  by: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable(),
+  createdAt: external_exports.string().nullable(),
+  lastUsedAt: external_exports.string().nullable(),
+  /** You may turn it on or off (you manage this space's tabs). */
+  canManage: external_exports.boolean()
+});
 var AppTokenResponseSchema = external_exports.object({
   /** A JWT (EdDSA), verified with the deployment's keys at /api/apps/keys. */
   token: external_exports.string(),
   expiresAt: external_exports.string(),
-  context: AppContextSchema,
+  context: external_exports.union([AppContextSchema, AppHomeContextSchema]),
   /** The frame's address and origin (messages go to and come from it only). */
   url: external_exports.string(),
   origin: external_exports.string()
@@ -20024,6 +20167,7 @@ var TabSettingsSchema = external_exports.object({
 });
 var AgentManagementSchema = external_exports.enum(["admins", "members"]);
 var TaskAssignmentSchema = external_exports.enum(["members", "admins"]);
+var GroupMentionsSchema = external_exports.enum(["members", "admins"]);
 var SpaceSchema = external_exports.object({
   id: SpaceIdSchema,
   kind: SpaceKindSchema,
@@ -20043,6 +20187,8 @@ var SpaceSchema = external_exports.object({
   unpinnedByYou: external_exports.boolean(),
   /** In your Starred section. */
   starred: external_exports.boolean(),
+  /** How much it notifies you (decision 199): your own choice. */
+  notify: SpaceNotifySchema.default("all"),
   /** DMs only: the participants (you included), so each reader can name it (§9.1). */
   people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() })),
   /** Your tab row: pinned first, then the rest in your (or the space's) order. */
@@ -20076,8 +20222,15 @@ var SpaceSchema = external_exports.object({
   canManage: external_exports.boolean(),
   /** Set once archived: hidden from sidebars, restorable or deletable by managers. */
   archivedAt: external_exports.iso.datetime().nullable(),
-  createdAt: external_exports.iso.datetime()
-});
+  createdAt: external_exports.iso.datetime(),
+  /** Who may notify everyone here with `@space` and `@here` (decision 197). */
+  groupMentions: GroupMentionsSchema.default("members"),
+  /** You may: a member of a normal space as its rule says, General's for workspace admins. */
+  canMentionEveryone: external_exports.boolean().default(false),
+  /** Its icon (normal spaces and General), a picture its managers chose; versioned, so cacheable. */
+  iconUrl: external_exports.string().nullable().default(null)
+});
+var MAX_SPACE_ICON_BYTES = 1024 * 1024;
 var SpaceListSchema = external_exports.object({
   spaces: external_exports.array(SpaceSchema),
   canCreate: external_exports.boolean()
@@ -20092,7 +20245,8 @@ var CreateSpaceRequestSchema = external_exports.object({
 var UpdateSpaceRequestSchema = external_exports.object({
   name: SpaceNameSchema,
   description: SpaceDescriptionSchema,
-  visibility: SpaceVisibilitySchema
+  visibility: SpaceVisibilitySchema,
+  groupMentions: GroupMentionsSchema
 }).partial().refine((patch) => Object.keys(patch).length > 0, "Nothing to change.");
 var ArchivedSpacesResponseSchema = external_exports.object({ spaces: external_exports.array(SpaceSchema) });
 var SpaceMemberSchema = external_exports.object({
@@ -20164,48 +20318,6 @@ var UpdateAgentSettingsRequestSchema = external_exports.object({
   respondingAgentId: external_exports.string().nullable()
 }).partial().refine((patch) => Object.keys(patch).length > 0, "Nothing to change.");
 
-// ../types/src/time.ts
-function isTimeZone(value) {
-  if (!value || value.length > 64) return false;
-  try {
-    new Intl.DateTimeFormat("en", { timeZone: value });
-    return true;
-  } catch {
-    return false;
-  }
-}
-var TimeZoneSchema = external_exports.string().refine(isTimeZone, "Not a known time zone.");
-var DEFAULT_TIME_ZONE = "UTC";
-
-// ../types/src/recurrence.ts
-var WeekdaySchema = external_exports.number().int().min(0).max(6);
-var RecurrenceSchema = external_exports.discriminatedUnion("freq", [
-  external_exports.object({ freq: external_exports.literal("daily"), interval: external_exports.number().int().min(1).max(365) }),
-  external_exports.object({
-    freq: external_exports.literal("weekly"),
-    interval: external_exports.number().int().min(1).max(52),
-    /** The days of the week it happens on (Monday to Friday: every weekday). */
-    weekdays: external_exports.array(WeekdaySchema).min(1).max(7)
-  }),
-  external_exports.object({
-    freq: external_exports.literal("monthly"),
-    interval: external_exports.number().int().min(1).max(12),
-    on: external_exports.discriminatedUnion("kind", [
-      /** A day of the month; in shorter months, their last day. */
-      external_exports.object({ kind: external_exports.literal("day"), day: external_exports.number().int().min(1).max(31) }),
-      /** The first … fourth, or last (-1), such weekday of the month. */
-      external_exports.object({
-        kind: external_exports.literal("weekday"),
-        week: external_exports.union([external_exports.literal(1), external_exports.literal(2), external_exports.literal(3), external_exports.literal(4), external_exports.literal(-1)]),
-        weekday: WeekdaySchema
-      })
-    ])
-  })
-]);
-var IsoDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2026-10-16.");
-var ClockTimeSchema = external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "A time like 17:00.");
-var DAY_MS = 24 * 60 * 6e4;
-
 // ../types/src/workflows.ts
 var MAX_WORKFLOW_STEPS = 30;
 var WorkflowStepIdSchema = external_exports.string().regex(/^[a-z0-9]{1,16}$/, "A step id.");
@@ -20394,6 +20506,7 @@ var FinishPersonStepRequestSchema = external_exports.object({ note: external_exp
 // ../types/src/triggers.ts
 var TaskStatusSchema = external_exports.enum(["todo", "in_progress", "waiting", "done", "cancelled"]);
 var MAX_TASK_ASSIGNEES = 10;
+var INBOX_TRIGGER_KINDS = ["mention", "dm", "thread"];
 var TriggerEventSchema = external_exports.discriminatedUnion("kind", [
   /** Someone posts in a conversation of the space (optionally with words in it, or by someone). */
   external_exports.object({
@@ -20428,6 +20541,14 @@ var TriggerEventSchema = external_exports.discriminatedUnion("kind", [
     event: external_exports.string().min(1).max(40),
     field: external_exports.string().max(40).nullable().default(null),
     value: external_exports.string().trim().max(200).nullable().default(null)
+  }),
+  /**
+   * Something new in your Inbox (decision 198): a personal trigger, only in
+   * your own My Space; what people (not agents) send you, from elsewhere.
+   */
+  external_exports.object({
+    kind: external_exports.literal("inbox"),
+    kinds: external_exports.array(external_exports.enum(INBOX_TRIGGER_KINDS)).min(1, "Choose what starts it.").max(INBOX_TRIGGER_KINDS.length).default(["mention", "dm"])
   })
 ]);
 var TriggerTaskSchema = external_exports.object({
@@ -20512,6 +20633,8 @@ var TaskRunStatusSchema = external_exports.enum([
 var TaskRunErrorSchema = external_exports.enum([
   "NOT_CONNECTED",
   "NOT_READY",
+  // Every Gateway the deployment runs was busy, each time it tried (decision 121).
+  "BUSY",
   "PROVIDER_REFUSED",
   "RUN_FAILED",
   "BUDGET_TURNS",
@@ -20654,7 +20777,13 @@ var TaskSeriesSchema = external_exports.object({
   lastAt: external_exports.string().nullable(),
   occurrences: external_exports.number().int(),
   createdBy: external_exports.object({ userId: external_exports.string(), name: external_exports.string() }),
-  createdAt: external_exports.string()
+  createdAt: external_exports.string(),
+  /** Made ready-made (decision 198): the unread report. */
+  preset: external_exports.enum(["unread_report"]).nullable().default(null)
+});
+var UnreadReportResponseSchema = external_exports.object({ report: TaskSeriesSchema.nullable() });
+var CreateUnreadReportRequestSchema = external_exports.object({
+  time: ClockTimeSchema.default("08:00")
 });
 var TaskSeriesResponseSchema = external_exports.object({ series: TaskSeriesSchema });
 var CreateTaskSeriesRequestSchema = external_exports.object({
@@ -20810,7 +20939,9 @@ var ApprovalSchema = external_exports.object({
     description: external_exports.string(),
     input: external_exports.record(external_exports.string(), external_exports.unknown()),
     result: external_exports.string().nullable(),
-    error: external_exports.string().nullable()
+    error: external_exports.string().nullable(),
+    /** A connector's tool: whose account it uses (the workspace's, or the asker's own). */
+    account: external_exports.enum(["workspace", "person"]).nullable().default(null)
   }).nullable().default(null),
   /** An email (M9 slice 4): from, to, subject; its text is `body` (editable before it's sent). */
   email: EmailDraftSchema.nullable().default(null),
@@ -21049,7 +21180,9 @@ var AgentToolSchema = external_exports.enum([
   // An agent changing its own profile (title, face, instructions…) when asked, approved first.
   "update_my_profile",
   // Connectors (M12 slice 2): a remote MCP server's tools the workspace chose (reading ones).
-  "use_connector"
+  "use_connector",
+  // Notifications (decision 198): the asker's own Inbox, where only they read the answer.
+  "read_inbox"
 ]);
 var AgentStepSchema = external_exports.object({
   tool: AgentToolSchema,
@@ -21154,7 +21287,9 @@ var ReferenceSchema = external_exports.object({
     id: external_exports.string(),
     kind: external_exports.enum(["general", "personal", "normal", "dm"]),
     name: external_exports.string().nullable(),
-    people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() }))
+    people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() })),
+    /** Its icon, when it has one (decision 190). */
+    iconUrl: external_exports.string().nullable().default(null)
   }).nullable(),
   tab: external_exports.object({
     id: external_exports.string(),
@@ -21463,12 +21598,15 @@ var AUDIT_ACTIONS = {
     "member.invite_link_created",
     "member.invitation_revoked",
     "member.joined",
-    "member.title_changed"
+    "member.title_changed",
+    "member.role_changed"
   ],
   spaces: [
     "space.created",
     "space.updated",
     "space.deleted",
+    "space.icon_changed",
+    "space.icon_removed",
     "space.archived",
     "space.unarchived",
     "space.converted",
@@ -21508,6 +21646,9 @@ var AUDIT_ACTIONS = {
     "agent.avatar_changed",
     "agent.host_access_changed",
     "agent.memory_changed",
+    "agent.published",
+    "agent.unpublished",
+    "agent.added_from_marketplace",
     "approval.requested",
     "gateway.connected",
     "gateway.disconnected",
@@ -21536,6 +21677,14 @@ var AUDIT_ACTIONS = {
     "app.installed",
     "app.updated",
     "app.removed",
+    "app.added_from_marketplace",
+    "app.published",
+    "app.unpublished",
+    "app.publishing_key_created",
+    "app.publishing_key_revoked",
+    "app.taken_down",
+    "app.event_key_allowed",
+    "app.event_key_turned_off",
     "app.action_run",
     "connection.added",
     "connection.removed",
@@ -21784,12 +21933,18 @@ var DeploymentSettingsFields = external_exports.object({
    * for you") keep it awake, never put to sleep (decision 151)? They pay its
    * hours where the deployment bills them.
    */
-  allowGatewayKeepAwake: external_exports.boolean()
+  allowGatewayKeepAwake: external_exports.boolean(),
+  /**
+   * Workspaces browse and add from the marketplace (decision 161): Tabs &
+   * Spaces' catalogue, reviewed by us. On unless its admins turn it off.
+   */
+  marketplace: external_exports.boolean()
 });
 var DeploymentSettingsSchema = DeploymentSettingsFields.extend({
   // Missing in older responses and fixtures: off.
   shareFeedback: external_exports.boolean().default(false),
-  allowGatewayKeepAwake: external_exports.boolean().default(false)
+  allowGatewayKeepAwake: external_exports.boolean().default(false),
+  marketplace: external_exports.boolean().default(true)
 });
 var DeploymentSettingsPatchSchema = DeploymentSettingsFields.partial().strict().refine((patch) => Object.keys(patch).length > 0, "Nothing to update");
 var DeploymentInfoSchema = external_exports.object({
@@ -22073,6 +22228,10 @@ var WorkspaceAccentSchema = external_exports.object({ light: HexColorSchema, dar
 var WorkspaceRoleSchema = external_exports.enum(["owner", "admin", "member", "guest"]);
 var WorkspaceSlugSchema = external_exports.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/, "Use lowercase letters, numbers and hyphens");
 var WorkspaceNameSchema = external_exports.string().trim().min(1).max(60);
+var WorkspaceHomePageSchema = external_exports.object({
+  appId: external_exports.string().min(1).max(64),
+  pageId: external_exports.string().min(1).max(40)
+});
 var WorkspaceSchema = external_exports.object({
   id: external_exports.string(),
   slug: WorkspaceSlugSchema,
@@ -22086,7 +22245,9 @@ var WorkspaceSchema = external_exports.object({
   /** Its accent colour for each mode; null: the default ink. */
   accent: WorkspaceAccentSchema.nullable().default(null),
   /** Its default time zone (M8 slice 1): for schedules when a person's own isn't known. */
-  timeZone: TimeZoneSchema.default(DEFAULT_TIME_ZONE)
+  timeZone: TimeZoneSchema.default(DEFAULT_TIME_ZONE),
+  /** Its Home (decision 177): one of an installed app's home pages; null: ours. */
+  homePage: WorkspaceHomePageSchema.nullable().default(null)
 });
 var MAX_WORKSPACE_LOGO_BYTES = 2 * 1024 * 1024;
 var WorkspaceListSchema = external_exports.object({
@@ -22194,7 +22355,9 @@ var UpdateWorkspaceRequestSchema = external_exports.object({
   /** Owners and admins: the accent colour (null: back to the default). */
   accent: WorkspaceAccentSchema.nullable(),
   /** Owners and admins: the default time zone. */
-  timeZone: TimeZoneSchema
+  timeZone: TimeZoneSchema,
+  /** Owners and admins: Home, from an installed app (null: back to ours). */
+  homePage: WorkspaceHomePageSchema.nullable()
 }).partial().strict().refine((patch) => Object.keys(patch).length > 0, "Nothing to update");
 var WorkspaceResponseSchema = external_exports.object({ workspace: WorkspaceSchema });
 var TRANSLITERATIONS = {
@@ -22267,10 +22430,13 @@ var WorkspaceMemberSchema = external_exports.object({
   title: external_exports.string().default(""),
   /** Their profile picture's address (null: initials), decision 145. */
   picture: external_exports.string().nullable().default(null),
-  joinedAt: external_exports.iso.datetime()
+  joinedAt: external_exports.iso.datetime(),
+  /** Their notifications are paused, or in quiet hours, until then (decision 194); null: not. */
+  quietUntil: external_exports.iso.datetime().nullable().default(null)
 });
 var TitleSchema = external_exports.string().trim().max(60, "Keep the title under 60 characters.");
 var UpdateMemberRequestSchema = external_exports.object({ title: TitleSchema });
+var ChangeRoleRequestSchema = external_exports.object({ role: WorkspaceRoleSchema }).strict();
 var WorkspaceMemberListSchema = external_exports.object({ members: external_exports.array(WorkspaceMemberSchema) });
 var MAX_PROFILE_PICTURE_BYTES = 2 * 1024 * 1024;
 
@@ -23163,7 +23329,19 @@ var McpConnectorSchema = external_exports.object({
   addedAt: external_exports.string(),
   checkedAt: external_exports.string().nullable()
 });
-var McpConnectorListSchema = external_exports.object({ connectors: external_exports.array(McpConnectorSchema) });
+var ConnectorPresetSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string(),
+  auth: external_exports.enum(["oauth", "header"]),
+  headerName: external_exports.string().nullable(),
+  /** How its key is written ("Bearer github_pat_…"). */
+  keyHint: external_exports.string().nullable()
+});
+var McpConnectorListSchema = external_exports.object({
+  connectors: external_exports.array(McpConnectorSchema),
+  presets: external_exports.array(ConnectorPresetSchema).default([])
+});
 var HeaderNameSchema = external_exports.string().trim().regex(/^[A-Za-z0-9-]{1,64}$/, "A header's name: letters, digits and dashes.").refine(
   (name) => !["host", "content-length", "content-type", "accept", "connection"].includes(
     name.toLowerCase()
@@ -23219,6 +23397,574 @@ var MyConnectorSchema = external_exports.object({
 var MyConnectorListSchema = external_exports.object({ connectors: external_exports.array(MyConnectorSchema) });
 var SetMyConnectorKeyRequestSchema = external_exports.object({ value: external_exports.string().trim().min(1, "Enter your key.").max(4e3) }).strict();
 
+// ../types/src/marketplace.ts
+var LISTING_KINDS = ["agent", "app"];
+var ListingKindSchema = external_exports.enum(LISTING_KINDS);
+var LISTING_CATEGORIES = [
+  "productivity",
+  "research",
+  "writing",
+  "support",
+  "sales",
+  "marketing",
+  "engineering",
+  "operations",
+  "finance",
+  "people",
+  "education",
+  "personal"
+];
+var ListingCategorySchema = external_exports.enum(LISTING_CATEGORIES);
+var LISTED_AGENT = "@self";
+var LISTED_TABBY = "@tabby";
+var LISTED_ADDER = "@adder";
+var LISTED_TABS = {
+  conversations: "@conversations",
+  docs: "@docs",
+  tasks: "@tasks"
+};
+var listedAppTab = (app) => `@app:${app.id}/${app.tab}`;
+var AGENT_PLACEHOLDERS = [LISTED_AGENT, LISTED_TABBY];
+var TAB_PLACEHOLDERS = Object.values(LISTED_TABS);
+var ASSIGNEE_PLACEHOLDERS = [LISTED_AGENT, LISTED_TABBY, LISTED_ADDER];
+var ListedAssigneesSchema = external_exports.array(external_exports.enum([LISTED_AGENT, LISTED_TABBY, LISTED_ADDER])).max(3).default([LISTED_AGENT]);
+var ListedSkillSchema = external_exports.discriminatedUnion("source", [
+  external_exports.object({
+    source: external_exports.literal("builtin"),
+    name: external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "A skill's name."),
+    displayName: external_exports.string().trim().min(1).max(80)
+  }),
+  external_exports.object({
+    source: external_exports.literal("clawhub"),
+    ref: ClawHubRefSchema,
+    displayName: external_exports.string().trim().min(1).max(80)
+  })
+]);
+var ListedConnectorSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(40),
+  url: external_exports.url({ protocol: /^https$/, message: "A connector's https:// address." }).max(500),
+  auth: external_exports.enum(["none", "header", "oauth"]),
+  /** With a header: its name (its value is asked for when it's added). */
+  headerName: external_exports.string().regex(/^[A-Za-z0-9-]{1,64}$/).nullable().default(null),
+  identity: ConnectorIdentitySchema.default("workspace"),
+  /** OAuth: what its sign-in asks for (null: what its server suggests, or our default for it). */
+  scope: external_exports.string().trim().max(500).nullable().default(null),
+  /** What it's for, for whoever adds it. */
+  description: external_exports.string().trim().max(300).default(""),
+  /** Its tools the agent may use, by name (the rest stay off). */
+  tools: external_exports.array(external_exports.string().max(200)).max(500).default([])
+});
+var ListedAppSchema = external_exports.object({
+  /** Its manifest's `id`. */
+  id: external_exports.string().min(3).max(64),
+  name: external_exports.string().trim().min(1).max(40),
+  manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+  /** Which of its tabs goes in the space: `listedAppTab()` names it. */
+  tab: external_exports.string().min(1).max(40),
+  /** What it's for, for whoever adds it. */
+  description: external_exports.string().trim().max(300).default("")
+});
+var ListedWorkflowSchema = external_exports.object({
+  key: WorkflowStepIdSchema,
+  name: external_exports.string().trim().min(1).max(120),
+  description: external_exports.string().max(2e3).default(""),
+  steps: external_exports.array(WorkflowStepSchema).min(1).max(30)
+});
+var ListedSeriesSchema = external_exports.object({
+  title: external_exports.string().trim().min(1).max(200),
+  description: external_exports.string().max(4e3).default(""),
+  assignees: ListedAssigneesSchema,
+  recurrence: RecurrenceSchema,
+  time: ClockTimeSchema,
+  /** Its results are also posted in a conversation (`@conversations`). */
+  postTo: external_exports.literal(LISTED_TABS.conversations).nullable().default(null),
+  approveResults: external_exports.boolean().default(false),
+  workflowKey: WorkflowStepIdSchema.nullable().default(null)
+});
+var ListedTriggerSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(120),
+  event: TriggerEventSchema,
+  task: external_exports.object({
+    title: external_exports.string().trim().min(1).max(200),
+    description: external_exports.string().max(4e3).default(""),
+    assignees: ListedAssigneesSchema,
+    workflowKey: WorkflowStepIdSchema.nullable().default(null)
+  })
+});
+var AgentListingContentSchema = external_exports.object({
+  agent: external_exports.object({
+    name: external_exports.string().trim().min(1).max(40),
+    title: external_exports.string().trim().max(60).default(""),
+    // An agent's own limits, so whatever's listed can be added.
+    description: external_exports.string().trim().min(1, "Say what it's for.").max(120),
+    instructions: external_exports.string().max(MAX_AGENT_INSTRUCTIONS).default(""),
+    /** One of the drawn faces; or "custom", with the listing's picture. */
+    avatar: external_exports.enum([...AGENT_AVATARS, "custom"])
+  }),
+  skills: external_exports.array(ListedSkillSchema).max(30).default([]),
+  connectors: external_exports.array(ListedConnectorSchema).max(10).default([]),
+  apps: external_exports.array(ListedAppSchema).max(3).default([]),
+  workflows: external_exports.array(ListedWorkflowSchema).max(10).default([]),
+  series: external_exports.array(ListedSeriesSchema).max(10).default([]),
+  triggers: external_exports.array(ListedTriggerSchema).max(10).default([])
+}).superRefine((content, ctx) => {
+  for (const problem of portabilityProblems(content))
+    ctx.addIssue({ code: "custom", ...problem });
+});
+function portabilityProblems(content) {
+  const problems = [];
+  const keys = new Set(content.workflows.map((w) => w.key));
+  const appTabs = new Set((content.apps ?? []).map(listedAppTab));
+  const agent = (id, path) => {
+    if (!AGENT_PLACEHOLDERS.includes(id)) {
+      problems.push({ message: "It can only use this agent or Tabby.", path });
+    }
+  };
+  const tab = (id, path) => {
+    if (!TAB_PLACEHOLDERS.includes(id) && !appTabs.has(id)) {
+      problems.push({ message: "It can only use a conversation, Docs or Tasks tab.", path });
+    }
+  };
+  const person = (id, path) => {
+    if (!ASSIGNEE_PLACEHOLDERS.includes(id)) {
+      problems.push({ message: "It can only be for this agent, Tabby or whoever adds it.", path });
+    }
+  };
+  const workflow = (key, path) => {
+    if (key !== null && !keys.has(key)) {
+      problems.push({ message: "It names a workflow the listing doesn't have.", path });
+    }
+  };
+  content.workflows.forEach((w, i) => {
+    if (content.workflows.findIndex((other) => other.key === w.key) !== i) {
+      problems.push({ message: "Workflows' keys must differ.", path: ["workflows", i, "key"] });
+    }
+    for (const step of allSteps(w.steps)) {
+      const at = ["workflows", i, "steps", step.id];
+      switch (step.kind) {
+        case "agent":
+          agent(step.agentId, at);
+          break;
+        case "post":
+          agent(step.agentId, at);
+          tab(step.tabId, at);
+          break;
+        case "create_task":
+          tab(step.tabId, at);
+          step.assigneeIds.forEach((id) => person(id, at));
+          break;
+        case "person":
+          person(step.assigneeId, at);
+          break;
+        case "if":
+          if (step.condition.op === "agent") agent(step.condition.agentId, at);
+          break;
+        case "app_action":
+          if (!appTabs.has(step.tabId)) {
+            problems.push({ message: "Its actions need an app the listing brings.", path: at });
+          }
+          break;
+      }
+    }
+  });
+  content.series.forEach((s, i) => workflow(s.workflowKey, ["series", i, "workflowKey"]));
+  content.triggers.forEach((t, i) => {
+    const at = ["triggers", i, "event"];
+    const event = t.event;
+    if (event.kind === "app") {
+      if (!appTabs.has(event.tabId)) {
+        problems.push({ message: "Its events need an app the listing brings.", path: at });
+      }
+    } else if (event.kind === "inbox") {
+      problems.push({ message: "A personal trigger (someone's Inbox) can't be listed.", path: at });
+    } else if (event.kind !== "webhook") tab(event.tabId, at);
+    if (event.kind === "message" && event.fromId !== null) person(event.fromId, at);
+    workflow(t.task.workflowKey, ["triggers", i, "task", "workflowKey"]);
+  });
+  return problems;
+}
+var ListingPublisherSchema = external_exports.object({
+  /** The workspace that publishes it, or Tabs & Spaces. */
+  name: external_exports.string(),
+  /** Made by Tabs & Spaces (decision 167): kept in our repository, listed as it changes. */
+  official: external_exports.boolean().default(false)
+});
+var ListingNeedsSchema = external_exports.object({
+  skills: external_exports.number().int().nonnegative(),
+  connectors: external_exports.number().int().nonnegative(),
+  workflows: external_exports.number().int().nonnegative(),
+  recurring: external_exports.number().int().nonnegative(),
+  triggers: external_exports.number().int().nonnegative(),
+  tabs: external_exports.number().int().nonnegative().default(0),
+  /** An agent's apps (decision 178). */
+  apps: external_exports.number().int().nonnegative().default(0),
+  actions: external_exports.number().int().nonnegative().default(0),
+  events: external_exports.number().int().nonnegative().default(0)
+});
+var ListingSummarySchema = external_exports.object({
+  id: external_exports.string(),
+  slug: external_exports.string(),
+  kind: ListingKindSchema,
+  name: external_exports.string(),
+  /** Its job title (agents), or a tagline. */
+  title: external_exports.string(),
+  description: external_exports.string(),
+  categories: external_exports.array(ListingCategorySchema),
+  avatar: external_exports.string(),
+  /** Its own picture's address, if it has one. */
+  pictureUrl: external_exports.string().nullable(),
+  publisher: ListingPublisherSchema,
+  version: external_exports.number().int().positive(),
+  installs: external_exports.number().int().nonnegative(),
+  needs: ListingNeedsSchema,
+  publishedAt: external_exports.iso.datetime(),
+  updatedAt: external_exports.iso.datetime()
+});
+var ListingSearchSchema = external_exports.object({
+  listings: external_exports.array(ListingSummarySchema),
+  total: external_exports.number().int().nonnegative()
+});
+var ListingImageViewSchema = external_exports.object({
+  id: external_exports.string(),
+  url: external_exports.string(),
+  caption: external_exports.string()
+});
+var ListingPage = ListingSummarySchema.extend({
+  /** A longer account of it, in Markdown. */
+  about: external_exports.string(),
+  /** What changed in this version. */
+  changes: external_exports.string(),
+  /** Screenshots and pictures of it at work (decision 202), in order. */
+  images: external_exports.array(ListingImageViewSchema).default([])
+});
+var AgentListingSchema = ListingPage.extend({
+  kind: external_exports.literal("agent"),
+  content: AgentListingContentSchema
+});
+var AppListingSchema = ListingPage.extend({
+  kind: external_exports.literal("app"),
+  content: external_exports.lazy(() => AppListingContentSchema)
+});
+var ListingSchema = external_exports.discriminatedUnion("kind", [AgentListingSchema, AppListingSchema]);
+var ListingResponseSchema = external_exports.object({ listing: ListingSchema });
+var ListingPictureSchema = external_exports.object({
+  type: external_exports.enum(["image/png", "image/jpeg", "image/webp"]),
+  base64: external_exports.string().max(35e4, "The picture is too big (256 kB at most).").regex(/^[A-Za-z0-9+/]+=*$/)
+});
+var MAX_LISTING_IMAGES = 6;
+var MAX_LISTING_IMAGE_BYTES = 1048576;
+var ListingImageIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "An image's id.");
+var ImageCaption = external_exports.string().trim().max(140, "A caption is 140 characters at most.").default("");
+var ListingImageSchema = external_exports.union([
+  external_exports.object({
+    type: external_exports.enum(["image/png", "image/jpeg", "image/webp"]),
+    base64: external_exports.string().max(Math.ceil(MAX_LISTING_IMAGE_BYTES / 3) * 4, "An image is 1 MB at most.").regex(/^[A-Za-z0-9+/]+=*$/),
+    caption: ImageCaption
+  }).strict(),
+  external_exports.object({ id: ListingImageIdSchema, caption: ImageCaption }).strict()
+]);
+var ListingImages = external_exports.array(ListingImageSchema).max(MAX_LISTING_IMAGES, `${MAX_LISTING_IMAGES} images at most.`).default([]);
+var PrivacyUrlSchema = external_exports.url({ protocol: /^https$/, message: "The privacy policy's address, starting https://." }).max(500);
+var AppListingContentSchema = external_exports.object({
+  app: external_exports.object({
+    /** Its manifest's `id`. */
+    id: external_exports.string().min(3).max(64),
+    name: external_exports.string().trim().min(1).max(40),
+    /** A line about it. */
+    title: external_exports.string().trim().max(60).default(""),
+    description: external_exports.string().trim().min(1).max(300),
+    // https, as installing requires (http only where a deployment allows private networks).
+    manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+    /**
+     * The manifest we reviewed (decision 203): installing from the listing refuses
+     * another. Ours have none (we serve them, and change them as we deploy).
+     */
+    manifestHash: ManifestHashSchema.optional(),
+    /**
+     * Its developer's privacy policy (decision 205): what happens to the data
+     * the app is sent. Every workspace's app has one; ours are on our site.
+     */
+    privacyUrl: PrivacyUrlSchema.optional()
+  }),
+  tabs: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().max(40),
+      name: external_exports.string().max(40),
+      description: external_exports.string().max(200).default("")
+    })
+  ).min(1).max(10),
+  actions: external_exports.array(
+    external_exports.object({
+      name: external_exports.string().max(40),
+      description: external_exports.string().max(300),
+      changes: external_exports.boolean()
+    })
+  ).max(20).default([]),
+  events: external_exports.array(external_exports.object({ name: external_exports.string().max(40), description: external_exports.string().max(300) })).max(20).default([])
+});
+var DraftCommon = {
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  picture: ListingPictureSchema.nullable().default(null),
+  images: ListingImages
+};
+var AgentListingDraftSchema = external_exports.object({
+  kind: external_exports.literal("agent"),
+  ...DraftCommon,
+  content: AgentListingContentSchema
+});
+var ListingDraftSchema = external_exports.discriminatedUnion("kind", [
+  AgentListingDraftSchema,
+  external_exports.object({ kind: external_exports.literal("app"), ...DraftCommon, content: AppListingContentSchema })
+]);
+var PublishedFrom = {
+  /** Its listing, for a new version (one this workspace published). */
+  listingId: external_exports.string().max(64).nullable().default(null),
+  workspace: external_exports.object({ id: external_exports.string().min(1).max(64), name: external_exports.string().trim().min(1).max(120) }),
+  /** Who sent it (we write to them about the review; never shown). */
+  publishedBy: external_exports.object({ name: external_exports.string().trim().min(1).max(120), email: external_exports.email() }),
+  /**
+   * The publisher terms' version its sender accepted just now (decision 205;
+   * null: the workspace accepted these terms before).
+   */
+  acceptedTerms: external_exports.string().max(20).nullable().default(null)
+};
+var ControlPublishAppSchema = external_exports.object({
+  kind: external_exports.literal("app"),
+  ...DraftCommon,
+  manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+  manifestHash: ManifestHashSchema,
+  privacyUrl: PrivacyUrlSchema,
+  ...PublishedFrom
+});
+var ControlPublishListingSchema = external_exports.discriminatedUnion("kind", [
+  AgentListingDraftSchema.extend(PublishedFrom),
+  ControlPublishAppSchema
+]);
+var ListingStatusSchema = external_exports.enum(["pending", "approved", "rejected", "removed"]);
+var PublishedListingSchema = external_exports.object({
+  id: external_exports.string(),
+  slug: external_exports.string(),
+  kind: ListingKindSchema,
+  name: external_exports.string(),
+  /** The version everyone sees (null: none approved yet). */
+  liveVersion: external_exports.number().int().positive().nullable(),
+  /** The newest version and its review. */
+  latest: external_exports.object({
+    version: external_exports.number().int().positive(),
+    status: external_exports.enum(["pending", "approved", "rejected"]),
+    /** Why we didn't list it. */
+    reason: external_exports.string().nullable(),
+    submittedAt: external_exports.iso.datetime()
+  }),
+  /** Taken down by us (with why), or by the workspace. */
+  removed: external_exports.object({ reason: external_exports.string(), at: external_exports.iso.datetime() }).nullable(),
+  installs: external_exports.number().int().nonnegative()
+});
+var PublishedListingsSchema = external_exports.object({
+  listings: external_exports.array(PublishedListingSchema),
+  /**
+   * The workspace's token (decision 203): an app's manifest names it in
+   * `marketplace.verify` to say this workspace may publish it.
+   */
+  publisherToken: external_exports.string().nullable().default(null),
+  /** The publisher terms (decision 205), and the version this workspace accepted. */
+  terms: external_exports.object({ version: external_exports.string(), url: external_exports.string(), accepted: external_exports.string().nullable() }).nullable().default(null)
+});
+var PublisherTermsSchema = external_exports.object({
+  version: external_exports.string(),
+  url: external_exports.string(),
+  /** This workspace accepted this version. */
+  accepted: external_exports.boolean()
+});
+var ListingStatusRequestSchema = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1).max(64)).min(1).max(100)
+});
+var ListingStatusesSchema = external_exports.object({
+  listings: external_exports.array(
+    external_exports.object({
+      id: external_exports.string(),
+      /** Live, for anyone to add. */
+      listed: external_exports.boolean(),
+      /** Taken down by Tabs & Spaces, and why (its workspace taking it out isn't this). */
+      takenDown: external_exports.object({ reason: external_exports.string(), at: external_exports.iso.datetime() }).nullable()
+    })
+  )
+});
+var PublishingItemSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  /** A line about it ("ClawHub: @acme/notes", "Every Friday at 16:00"). */
+  detail: external_exports.string(),
+  /** Ticked to start with. */
+  suggested: external_exports.boolean(),
+  /** Why it can't be listed (empty: it can). */
+  problems: external_exports.array(external_exports.string())
+});
+var AgentPublishingSchema = external_exports.object({
+  /** This deployment is registered with Tabs & Spaces (publishing needs it). */
+  registered: external_exports.boolean(),
+  /** The agent's listing, if it was published. */
+  listing: PublishedListingSchema.nullable(),
+  /** Its live version's words, to start a new version from. */
+  previous: external_exports.object({
+    categories: external_exports.array(ListingCategorySchema),
+    about: external_exports.string(),
+    /** Its images, kept by id unless they're taken out (decision 202). */
+    images: external_exports.array(ListingImageViewSchema).default([])
+  }).nullable(),
+  /** Where the marketplace shows a listing (its slug follows). */
+  listingBase: external_exports.string(),
+  /** The publisher terms (null: not registered, or unknown). */
+  terms: PublisherTermsSchema.nullable().default(null),
+  skills: external_exports.array(PublishingItemSchema),
+  connectors: external_exports.array(PublishingItemSchema),
+  /** Spaces where it has workflows, recurring tasks or triggers. */
+  spaces: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string() })),
+  /** The space whose work is shown below (null: none). */
+  spaceId: external_exports.string().nullable(),
+  workflows: external_exports.array(PublishingItemSchema),
+  series: external_exports.array(PublishingItemSchema),
+  triggers: external_exports.array(PublishingItemSchema)
+});
+var PublishAgentRequestSchema = external_exports.object({
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  spaceId: external_exports.string().max(64).nullable().default(null),
+  skills: external_exports.array(external_exports.string().max(200)).max(30).default([]),
+  connectors: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  workflows: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  series: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  triggers: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  images: ListingImages,
+  /** The publisher terms' version accepted now (decision 205; left out: accepted before). */
+  acceptTerms: external_exports.string().max(20).optional()
+}).strict();
+var PublishedListingResponseSchema = external_exports.object({ listing: PublishedListingSchema });
+var AppPublishingSchema = external_exports.object({
+  /** This deployment is registered with Tabs & Spaces (publishing needs it). */
+  registered: external_exports.boolean(),
+  /** The app's listing, if this workspace published it. */
+  listing: PublishedListingSchema.nullable(),
+  /** Its live version's words and images, to start a new version from. */
+  previous: external_exports.object({
+    categories: external_exports.array(ListingCategorySchema),
+    about: external_exports.string(),
+    images: external_exports.array(ListingImageViewSchema).default([]),
+    privacyUrl: external_exports.string().nullable().default(null)
+  }).nullable(),
+  listingBase: external_exports.string(),
+  terms: PublisherTermsSchema.nullable().default(null),
+  /** What its manifest says to name this workspace (null: not registered, or unknown). */
+  publisherToken: external_exports.string().nullable(),
+  /** The installed manifest names it. */
+  verified: external_exports.boolean(),
+  /** Why it can't be sent yet, as the installed manifest stands. */
+  problems: external_exports.array(external_exports.string())
+});
+var PublishAppRequestSchema = external_exports.object({
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  images: ListingImages,
+  privacyUrl: PrivacyUrlSchema,
+  acceptTerms: external_exports.string().max(20).optional()
+}).strict();
+var PublishingKeySchema = external_exports.object({
+  id: external_exports.string(),
+  /** Its first characters, to tell keys apart (the rest is never shown again). */
+  prefix: external_exports.string(),
+  createdBy: external_exports.object({ name: external_exports.string() }),
+  createdAt: external_exports.iso.datetime(),
+  lastUsedAt: external_exports.iso.datetime().nullable()
+});
+var PublishingKeysSchema = external_exports.object({ keys: external_exports.array(PublishingKeySchema) });
+var CreatedPublishingKeySchema = external_exports.object({
+  key: PublishingKeySchema,
+  /** Shown once: `tands publish` sends it (TANDS_PUBLISH_KEY). */
+  secret: external_exports.string()
+});
+var KeyPublishRequestSchema = external_exports.object({ changes: external_exports.string().max(2e3).default("") }).strict();
+var KeyPublishResultSchema = external_exports.object({
+  app: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  listing: PublishedListingSchema,
+  /** The installed manifest changed (checked for updates first). */
+  updated: external_exports.boolean()
+});
+var MarketplaceBrowseSchema = external_exports.object({
+  /** Off: its deployment's admins turned the marketplace off. */
+  enabled: external_exports.boolean(),
+  listings: external_exports.array(ListingSummarySchema),
+  total: external_exports.number().int().nonnegative(),
+  /** Listings this workspace has added: listing id → its agent. */
+  added: external_exports.record(external_exports.string(), external_exports.string()),
+  /** Workspace owners and admins add them (skills and connectors are theirs to set up). */
+  canAdd: external_exports.boolean()
+});
+var MarketplaceListingSchema = external_exports.object({
+  listing: ListingSchema,
+  /** The agent it was added as, if it was. */
+  addedAs: external_exports.string().nullable(),
+  /** What the workspace has already (it's shared, not added twice). */
+  has: external_exports.object({ skills: external_exports.array(external_exports.string()), connectors: external_exports.array(external_exports.string()) }),
+  /**
+   * How each of its connectors signs in here (by its place in the listing):
+   * a known server (GitHub) uses OAuth where this deployment registered its
+   * app, else each person's own key in `headerName` (decision 167).
+   */
+  connectorAuth: external_exports.array(
+    external_exports.object({
+      auth: external_exports.enum(["none", "header", "oauth"]),
+      headerName: external_exports.string().nullable(),
+      keyHint: external_exports.string().nullable()
+    })
+  ).default([]),
+  canAdd: external_exports.boolean()
+});
+var AddListingRequestSchema = external_exports.object({
+  /** Where its work goes (needed when it has some). */
+  spaceId: external_exports.string().max(64).nullable().default(null),
+  /** Its recurring tasks' time zone: the adder's. */
+  timeZone: external_exports.string().min(1).max(64),
+  /** Keys for its connectors that sign in with one, by the connector's place in the listing. */
+  keys: external_exports.record(external_exports.string().regex(/^\d{1,2}$/), external_exports.string().trim().min(1).max(4e3)).default({})
+}).strict();
+var AddedStepSchema = external_exports.object({
+  what: external_exports.enum([
+    "agent",
+    "picture",
+    "skill",
+    "connector",
+    "space",
+    "workflow",
+    "series",
+    "trigger",
+    "app",
+    "tab"
+  ]),
+  name: external_exports.string(),
+  ok: external_exports.boolean(),
+  /** Why it didn't work (it can be done by hand). */
+  message: external_exports.string().nullable()
+});
+var AddListingResultSchema = external_exports.object({
+  /** The agent it was added as. */
+  agent: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  steps: external_exports.array(AddedStepSchema),
+  /** Connectors waiting for an OAuth sign-in. */
+  signIns: external_exports.array(external_exports.object({ connectorId: external_exports.string(), name: external_exports.string() }))
+});
+var AddAppListingRequestSchema = external_exports.object({ spaceId: external_exports.string().max(64).nullable().default(null) }).strict();
+var AddAppListingResultSchema = external_exports.object({
+  /** The app, installed (or updated, if it was). */
+  app: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  /** Its tab, where it was added. */
+  tab: external_exports.object({ spaceId: external_exports.string(), tabId: external_exports.string() }).nullable(),
+  steps: external_exports.array(AddedStepSchema)
+});
+
 // src/harness.ts
 import { createHash, generateKeyPairSync, randomBytes, sign } from "node:crypto";
 import { createServer } from "node:http";
@@ -23948,6 +24694,49 @@ async function startHarness({
   };
 }
 
+// src/publish.ts
+async function publish({
+  url: url2,
+  key,
+  changes = "",
+  fetchImpl = fetch
+}) {
+  let origin;
+  try {
+    origin = new URL(url2).origin;
+  } catch {
+    return { ok: false, message: `\u201C${url2}\u201D isn't a web address (TANDS_URL).` };
+  }
+  let response;
+  try {
+    response = await fetchImpl(`${origin}/api/publish/app`, {
+      method: "POST",
+      headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
+      body: JSON.stringify({ changes }),
+      signal: AbortSignal.timeout(6e4)
+    });
+  } catch (error62) {
+    return {
+      ok: false,
+      message: `${origin} can't be reached: ${error62 instanceof Error ? error62.message : String(error62)}`
+    };
+  }
+  const json2 = await response.json().catch(() => null);
+  if (!response.ok || !json2?.app || !json2.listing) {
+    return {
+      ok: false,
+      message: json2?.error?.message ?? `${origin} answered HTTP ${response.status}.`
+    };
+  }
+  return {
+    ok: true,
+    app: json2.app,
+    version: json2.listing.latest.version,
+    live: json2.listing.liveVersion,
+    updated: Boolean(json2.updated)
+  };
+}
+
 // src/scaffold.ts
 import { existsSync } from "node:fs";
 import { copyFile, mkdir, readdir, writeFile } from "node:fs/promises";
@@ -24212,7 +25001,7 @@ your manifest's address. See https://developer.tabsandspaces.dev.
 `;
 
 // src/bin.ts
-var version2 = true ? "0.1.0" : "dev";
+var version2 = true ? "0.2.0" : "dev";
 var USAGE = `tands: developer tools for Tabs & Spaces apps
 
   tands new <folder> [--name "My app"] [--id my-app]
@@ -24227,13 +25016,21 @@ var USAGE = `tands: developer tools for Tabs & Spaces apps
       choose, with your data in memory, your events and your actions.
       Default: http://localhost:5480/tands.json
 
+  tands publish [--changes "What changed"]
+      Sends a new version of your app to the marketplace for review. Its
+      workspace checks it for updates first, then sends it with its listing's
+      words and images. Needs TANDS_URL (the workspace's address) and
+      TANDS_PUBLISH_KEY (a key from Settings \u2192 Apps \u2192 Publish\u2026 there).
+
   tands --version
 
 Docs: https://developer.tabsandspaces.dev`;
 async function main(argv, {
   cwd = process.env.INIT_CWD ?? process.cwd(),
   out = (line) => console.log(line),
-  err = (line) => console.error(line)
+  err = (line) => console.error(line),
+  env = process.env,
+  fetchImpl = fetch
 } = {}) {
   const { values, positionals } = parseArgs({
     args: argv,
@@ -24242,6 +25039,7 @@ async function main(argv, {
       name: { type: "string" },
       id: { type: "string" },
       port: { type: "string" },
+      changes: { type: "string" },
       help: { type: "boolean", short: "h" },
       version: { type: "boolean", short: "v" }
     }
@@ -24334,6 +25132,29 @@ async function main(argv, {
         return 1;
       }
     }
+    case "publish": {
+      const url2 = env.TANDS_URL?.trim();
+      const key = env.TANDS_PUBLISH_KEY?.trim();
+      if (!url2 || !key) {
+        err("tands publish needs your workspace's address and a publishing key:");
+        err("  TANDS_URL=https://your.workspace TANDS_PUBLISH_KEY=tas-pk-\u2026 npx tands publish");
+        err("Make the key in the workspace: Settings \u2192 Apps \u2192 Publish\u2026 \u2192 Make a key.");
+        return 1;
+      }
+      const sent = await publish({ url: url2, key, changes: values.changes ?? "", fetchImpl });
+      if (!sent.ok) {
+        err(sent.message);
+        return 1;
+      }
+      out(
+        `\u2713 Sent ${sent.app.name} (${sent.app.id}) version ${sent.version} to the marketplace for review.`
+      );
+      if (sent.updated) out("  Its workspace had an older manifest: it's up to date now.");
+      out(
+        sent.live ? `  Version ${sent.live} stays listed until it's reviewed; you'll get an email then.` : "  You'll get an email when it's reviewed."
+      );
+      return 0;
+    }
     default:
       err(`There's no command \u201C${command}\u201D.`);
       out(USAGE);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tands",
-  "version": "0.1.0",
-  "description": "Developer tools for Tabs & Spaces apps: `tands new`, `tands check` and `tands dev` (a local harness that stands in for a workspace).",
+  "version": "0.2.0",
+  "description": "Developer tools for Tabs & Spaces apps: `tands new`, `tands check`, `tands dev` (a local harness that stands in for a workspace) and `tands publish`.",
   "license": "MIT",
   "author": "Tabs & Spaces",
   "homepage": "https://developer.tabsandspaces.dev/tools/",
@@ -38,7 +38,7 @@
     "test:coverage": "vitest run --coverage"
   },
   "devDependencies": {
-    "@tabs-and-spaces/sdk": "0.1.0",
+    "@tabs-and-spaces/sdk": "0.3.0",
     "@tabs-and-spaces/types": "0.0.0",
     "@types/node": "^26.6.3",
     "@vitest/coverage-v8": "5.0.2",