tands 0.1.0 → 0.3.0

package/dist/tands.js

@@ -2580,8 +2580,8 @@ var Doc = class {
     const lines = content.split("\n").filter((x) => x);
     const minIndent = Math.min(...lines.map((x) => x.length - x.trimStart().length));
     const dedented = lines.map((x) => x.slice(minIndent)).map((x) => " ".repeat(this.indent * 2) + x);
-    for (const line of dedented) {
-      this.content.push(line);
+    for (const line2 of dedented) {
+      this.content.push(line2);
     }
   }
   compile() {
@@ -19676,9 +19676,101 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
+// ../types/src/time.ts
+function isTimeZone(value) {
+  if (!value || value.length > 64) return false;
+  try {
+    new Intl.DateTimeFormat("en", { timeZone: value });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var TimeZoneSchema = external_exports.string().refine(isTimeZone, "Not a known time zone.");
+var DEFAULT_TIME_ZONE = "UTC";
+
+// ../types/src/recurrence.ts
+var WeekdaySchema = external_exports.number().int().min(0).max(6);
+var RecurrenceSchema = external_exports.discriminatedUnion("freq", [
+  external_exports.object({ freq: external_exports.literal("daily"), interval: external_exports.number().int().min(1).max(365) }),
+  external_exports.object({
+    freq: external_exports.literal("weekly"),
+    interval: external_exports.number().int().min(1).max(52),
+    /** The days of the week it happens on (Monday to Friday: every weekday). */
+    weekdays: external_exports.array(WeekdaySchema).min(1).max(7)
+  }),
+  external_exports.object({
+    freq: external_exports.literal("monthly"),
+    interval: external_exports.number().int().min(1).max(12),
+    on: external_exports.discriminatedUnion("kind", [
+      /** A day of the month; in shorter months, their last day. */
+      external_exports.object({ kind: external_exports.literal("day"), day: external_exports.number().int().min(1).max(31) }),
+      /** The first … fourth, or last (-1), such weekday of the month. */
+      external_exports.object({
+        kind: external_exports.literal("weekday"),
+        week: external_exports.union([external_exports.literal(1), external_exports.literal(2), external_exports.literal(3), external_exports.literal(4), external_exports.literal(-1)]),
+        weekday: WeekdaySchema
+      })
+    ])
+  })
+]);
+var IsoDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2026-10-16.");
+var ClockTimeSchema = external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "A time like 17:00.");
+var DAY_MS = 24 * 60 * 6e4;
+
+// ../types/src/notifications.ts
+var NOTIFICATION_KINDS = ["mention", "dm", "approval", "thread"];
+var NotificationKindSchema = external_exports.enum(NOTIFICATION_KINDS);
+var QuietHoursSchema = external_exports.object({
+  on: external_exports.boolean().default(false),
+  from: ClockTimeSchema.default("22:00"),
+  to: ClockTimeSchema.default("08:00"),
+  days: external_exports.array(external_exports.number().int().min(0).max(6)).max(7).default([0, 1, 2, 3, 4, 5, 6])
+});
+var NotificationSettingsSchema = external_exports.object({
+  /** A gentle chime (and the Inbox icon's pulse) when something new arrives. */
+  sound: external_exports.boolean().default(true),
+  /** Which kinds chime and pop up (threads you follow: quiet, unless you add them). */
+  alert: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  /** Do not disturb (decision 194): quiet hours, each week. */
+  quietHours: QuietHoursSchema.default(QuietHoursSchema.parse({})),
+  /** Paused until then (a quick "for an hour"); null: not paused. */
+  pausedUntil: external_exports.iso.datetime().nullable().default(null),
+  /** What still gets through while you're quiet (a DM, a request for your yes). */
+  allowWhenQuiet: external_exports.array(NotificationKindSchema).default([]),
+  /**
+   * Away from the app (decision 195): what's emailed when it's still unread a
+   * little later (grouped into one email), and what's sent to your linked chats.
+   */
+  email: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  chat: external_exports.array(NotificationKindSchema).default(["mention", "dm", "approval"]),
+  /** A short email when something has waited unread for hours (at most one a day). */
+  reminder: external_exports.boolean().default(true)
+});
+var DEFAULT_NOTIFICATION_SETTINGS = NotificationSettingsSchema.parse(
+  {}
+);
+var UpdateNotificationSettingsSchema = external_exports.object({
+  sound: external_exports.boolean(),
+  alert: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  quietHours: QuietHoursSchema,
+  pausedUntil: external_exports.iso.datetime().nullable(),
+  allowWhenQuiet: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  email: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  chat: external_exports.array(NotificationKindSchema).max(NOTIFICATION_KINDS.length),
+  reminder: external_exports.boolean()
+}).partial().strict();
+var NotificationSettingsResponseSchema = external_exports.object({
+  settings: NotificationSettingsSchema
+});
+var SPACE_NOTIFY_LEVELS = ["all", "mentions", "muted"];
+var SpaceNotifySchema = external_exports.enum(SPACE_NOTIFY_LEVELS);
+var SetSpaceNotifyRequestSchema = external_exports.object({ level: SpaceNotifySchema });
+
 // ../types/src/apps.ts
 var APP_MANIFEST_VERSION = 1;
 var MAX_APP_TABS = 10;
+var MAX_APP_HOME_PAGES = 3;
 var APP_TOKEN_SECONDS = 600;
 var APP_DATA_LIMIT_BYTES = 100 * 1024 * 1024;
 var APP_RECORD_MAX_BYTES = 32 * 1024;
@@ -19722,7 +19814,20 @@ var AppActionSchema = external_exports.object({
   /** It changes something (the default): agents ask first. `false`: it only reads. */
   changes: external_exports.boolean().default(true),
   /** What it's given, checked like a record's fields. */
-  input: external_exports.record(DataNameSchema, AppFieldSchema).refine((fields) => Object.keys(fields).length <= 20, "An action takes at most 20 inputs.").default({})
+  input: external_exports.record(DataNameSchema, AppFieldSchema).refine((fields) => Object.keys(fields).length <= 20, "An action takes at most 20 inputs.").default({}),
+  /**
+   * Its view (decision 216): a page on the app's origin shown under the agent's
+   * answer, told what the action was asked and answered (MCP Apps). Only for
+   * actions that only read, for now.
+   */
+  view: external_exports.object({
+    url: external_exports.string().min(1).max(500),
+    /** What it's called above the page (default: the action's name). */
+    title: external_exports.string().trim().min(1).max(60).optional()
+  }).optional()
+}).refine((action) => !action.view || !action.changes, {
+  message: "Only an action that only reads (changes: false) can have a view, for now.",
+  path: ["view"]
 });
 var AppEventSchema = external_exports.object({
   /** What happened, for people choosing it in a trigger. */
@@ -19751,6 +19856,18 @@ var AppManifestSchema = external_exports.object({
       url: external_exports.string().min(1).max(500)
     })
   ).min(1, "An app needs at least one tab.").max(MAX_APP_TABS),
+  /**
+   * Home pages it offers (decision 177): an owner or admin may choose one as the
+   * workspace's Home. Shown like a tab, without a space around it.
+   */
+  home: external_exports.array(
+    external_exports.object({
+      id: AppTabIdSchema,
+      name: external_exports.string().trim().min(1).max(40),
+      description: external_exports.string().trim().max(200).default(""),
+      url: external_exports.string().min(1).max(500)
+    })
+  ).max(MAX_APP_HOME_PAGES).optional(),
   /** The data it keeps in the workspace (M9 slice 2). */
   data: external_exports.object({
     collections: external_exports.record(DataNameSchema, AppCollectionSchema).refine(
@@ -19761,12 +19878,21 @@ var AppManifestSchema = external_exports.object({
   /** What it does when agents ask (M9 slice 3). */
   actions: external_exports.record(DataNameSchema, AppActionSchema).refine((actions) => Object.keys(actions).length <= 20, "An app has at most 20 actions.").optional(),
   /** What happens in it, for triggers to listen for (M9 slice 5). */
-  events: external_exports.record(DataNameSchema, AppEventSchema).refine((events) => Object.keys(events).length <= 20, "An app has at most 20 events.").optional()
+  events: external_exports.record(DataNameSchema, AppEventSchema).refine((events) => Object.keys(events).length <= 20, "An app has at most 20 events.").optional(),
+  /**
+   * Publishing it to the marketplace (decision 203): `verify` is the token of
+   * the workspace that may publish it, shown on its Publish page. Only whoever
+   * controls the manifest's address can put it there.
+   */
+  marketplace: external_exports.object({ verify: external_exports.string().trim().max(100) }).optional()
 });
+var ManifestHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "A manifest's hash.");
 var AppActionInfoSchema = external_exports.object({
   name: external_exports.string(),
   description: external_exports.string(),
   changes: external_exports.boolean(),
+  /** It shows its own view under the agent's answer (decision 216). */
+  view: external_exports.boolean().default(false),
   input: external_exports.array(
     external_exports.object({
       name: external_exports.string(),
@@ -19823,6 +19949,8 @@ var AppSchema = external_exports.object({
   origin: external_exports.string(),
   manifestUrl: external_exports.string(),
   tabs: external_exports.array(AppTabSchema),
+  /** Home pages it offers (decision 177). */
+  homePages: external_exports.array(AppTabSchema).default([]),
   /** The data it keeps (M9 slice 2). */
   collections: external_exports.array(AppCollectionInfoSchema),
   /** What it does when agents ask (M9 slice 3). */
@@ -19834,7 +19962,14 @@ var AppSchema = external_exports.object({
   dataLimitBytes: external_exports.number(),
   installedBy: external_exports.object({ userId: external_exports.string(), name: external_exports.string() }),
   installedAt: external_exports.string(),
-  updatedAt: external_exports.string()
+  updatedAt: external_exports.string(),
+  /** The marketplace listing it was installed from (decision 205; null: by its address). */
+  fromListing: external_exports.object({ id: external_exports.string(), slug: external_exports.string() }).nullable().default(null),
+  /**
+   * Tabs & Spaces took that listing down (decision 205), and why: it still
+   * works here, for the workspace's owners and admins to decide.
+   */
+  takenDown: external_exports.object({ reason: external_exports.string(), at: external_exports.string() }).nullable().default(null)
 });
 var AppListSchema = external_exports.object({
   apps: external_exports.array(AppSchema),
@@ -19843,7 +19978,9 @@ var AppListSchema = external_exports.object({
 });
 var AppResponseSchema = external_exports.object({ app: AppSchema });
 var InstallAppRequestSchema = external_exports.object({
-  manifestUrl: external_exports.url({ protocol: /^https?$/, error: "Enter the manifest's full address." })
+  manifestUrl: external_exports.url({ protocol: /^https?$/, error: "Enter the manifest's full address." }),
+  /** From a listing (decision 203): only the manifest it reviewed, by its hash. */
+  manifestHash: ManifestHashSchema.optional()
 });
 var AppPreviewSchema = external_exports.object({
   app: AppSchema.omit({
@@ -19852,7 +19989,9 @@ var AppPreviewSchema = external_exports.object({
     updatedAt: true,
     iconUrl: true,
     dataBytes: true,
-    dataLimitBytes: true
+    dataLimitBytes: true,
+    fromListing: true,
+    takenDown: true
   }),
   /** Its picture, inline (it isn't kept until installed). */
   icon: external_exports.string().nullable(),
@@ -19862,7 +20001,17 @@ var AppPreviewSchema = external_exports.object({
 var TabAppSchema = external_exports.object({ appId: external_exports.string(), tabId: external_exports.string() });
 var AppContextSchema = external_exports.object({
   user: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
-  workspace: external_exports.object({ id: external_exports.string(), slug: external_exports.string(), name: external_exports.string() }),
+  /**
+   * `readOnly` (decision 215): the workspace is read-only until its bill is
+   * paid, so the app's writes are refused; its page and server can say so.
+   * (False when a token from before it was told says nothing.)
+   */
+  workspace: external_exports.object({
+    id: external_exports.string(),
+    slug: external_exports.string(),
+    name: external_exports.string(),
+    readOnly: external_exports.boolean().default(false)
+  }),
   /**
    * `name` is the one the reader sees: General and My Space in their language,
    * a DM by its other people. Not imported from ./space, which imports this file.
@@ -19876,11 +20025,30 @@ var AppContextSchema = external_exports.object({
   app: external_exports.object({ id: external_exports.string() }),
   locale: external_exports.string()
 });
+var AppHomeContextSchema = AppContextSchema.extend({
+  user: external_exports.object({ id: external_exports.string(), name: external_exports.string(), guest: external_exports.boolean() }),
+  space: external_exports.null(),
+  tab: external_exports.null(),
+  /** Which of the app's home pages. */
+  home: external_exports.object({ id: external_exports.string() })
+});
+var AppEventKeySchema = external_exports.object({ key: external_exports.string(), eventsUrl: external_exports.string() });
+var AppEventKeyStatusSchema = external_exports.object({
+  on: external_exports.boolean(),
+  /** Its app declares events (else there's nothing to report). */
+  available: external_exports.boolean(),
+  /** Who allowed it: events report for them. */
+  by: external_exports.object({ id: external_exports.string(), name: external_exports.string() }).nullable(),
+  createdAt: external_exports.string().nullable(),
+  lastUsedAt: external_exports.string().nullable(),
+  /** You may turn it on or off (you manage this space's tabs). */
+  canManage: external_exports.boolean()
+});
 var AppTokenResponseSchema = external_exports.object({
   /** A JWT (EdDSA), verified with the deployment's keys at /api/apps/keys. */
   token: external_exports.string(),
   expiresAt: external_exports.string(),
-  context: AppContextSchema,
+  context: external_exports.union([AppContextSchema, AppHomeContextSchema]),
   /** The frame's address and origin (messages go to and come from it only). */
   url: external_exports.string(),
   origin: external_exports.string()
@@ -20024,6 +20192,7 @@ var TabSettingsSchema = external_exports.object({
 });
 var AgentManagementSchema = external_exports.enum(["admins", "members"]);
 var TaskAssignmentSchema = external_exports.enum(["members", "admins"]);
+var GroupMentionsSchema = external_exports.enum(["members", "admins"]);
 var SpaceSchema = external_exports.object({
   id: SpaceIdSchema,
   kind: SpaceKindSchema,
@@ -20043,6 +20212,8 @@ var SpaceSchema = external_exports.object({
   unpinnedByYou: external_exports.boolean(),
   /** In your Starred section. */
   starred: external_exports.boolean(),
+  /** How much it notifies you (decision 199): your own choice. */
+  notify: SpaceNotifySchema.default("all"),
   /** DMs only: the participants (you included), so each reader can name it (§9.1). */
   people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() })),
   /** Your tab row: pinned first, then the rest in your (or the space's) order. */
@@ -20076,8 +20247,15 @@ var SpaceSchema = external_exports.object({
   canManage: external_exports.boolean(),
   /** Set once archived: hidden from sidebars, restorable or deletable by managers. */
   archivedAt: external_exports.iso.datetime().nullable(),
-  createdAt: external_exports.iso.datetime()
-});
+  createdAt: external_exports.iso.datetime(),
+  /** Who may notify everyone here with `@space` and `@here` (decision 197). */
+  groupMentions: GroupMentionsSchema.default("members"),
+  /** You may: a member of a normal space as its rule says, General's for workspace admins. */
+  canMentionEveryone: external_exports.boolean().default(false),
+  /** Its icon (normal spaces and General), a picture its managers chose; versioned, so cacheable. */
+  iconUrl: external_exports.string().nullable().default(null)
+});
+var MAX_SPACE_ICON_BYTES = 1024 * 1024;
 var SpaceListSchema = external_exports.object({
   spaces: external_exports.array(SpaceSchema),
   canCreate: external_exports.boolean()
@@ -20092,7 +20270,8 @@ var CreateSpaceRequestSchema = external_exports.object({
 var UpdateSpaceRequestSchema = external_exports.object({
   name: SpaceNameSchema,
   description: SpaceDescriptionSchema,
-  visibility: SpaceVisibilitySchema
+  visibility: SpaceVisibilitySchema,
+  groupMentions: GroupMentionsSchema
 }).partial().refine((patch) => Object.keys(patch).length > 0, "Nothing to change.");
 var ArchivedSpacesResponseSchema = external_exports.object({ spaces: external_exports.array(SpaceSchema) });
 var SpaceMemberSchema = external_exports.object({
@@ -20164,48 +20343,6 @@ var UpdateAgentSettingsRequestSchema = external_exports.object({
   respondingAgentId: external_exports.string().nullable()
 }).partial().refine((patch) => Object.keys(patch).length > 0, "Nothing to change.");
 
-// ../types/src/time.ts
-function isTimeZone(value) {
-  if (!value || value.length > 64) return false;
-  try {
-    new Intl.DateTimeFormat("en", { timeZone: value });
-    return true;
-  } catch {
-    return false;
-  }
-}
-var TimeZoneSchema = external_exports.string().refine(isTimeZone, "Not a known time zone.");
-var DEFAULT_TIME_ZONE = "UTC";
-
-// ../types/src/recurrence.ts
-var WeekdaySchema = external_exports.number().int().min(0).max(6);
-var RecurrenceSchema = external_exports.discriminatedUnion("freq", [
-  external_exports.object({ freq: external_exports.literal("daily"), interval: external_exports.number().int().min(1).max(365) }),
-  external_exports.object({
-    freq: external_exports.literal("weekly"),
-    interval: external_exports.number().int().min(1).max(52),
-    /** The days of the week it happens on (Monday to Friday: every weekday). */
-    weekdays: external_exports.array(WeekdaySchema).min(1).max(7)
-  }),
-  external_exports.object({
-    freq: external_exports.literal("monthly"),
-    interval: external_exports.number().int().min(1).max(12),
-    on: external_exports.discriminatedUnion("kind", [
-      /** A day of the month; in shorter months, their last day. */
-      external_exports.object({ kind: external_exports.literal("day"), day: external_exports.number().int().min(1).max(31) }),
-      /** The first … fourth, or last (-1), such weekday of the month. */
-      external_exports.object({
-        kind: external_exports.literal("weekday"),
-        week: external_exports.union([external_exports.literal(1), external_exports.literal(2), external_exports.literal(3), external_exports.literal(4), external_exports.literal(-1)]),
-        weekday: WeekdaySchema
-      })
-    ])
-  })
-]);
-var IsoDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2026-10-16.");
-var ClockTimeSchema = external_exports.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "A time like 17:00.");
-var DAY_MS = 24 * 60 * 6e4;
-
 // ../types/src/workflows.ts
 var MAX_WORKFLOW_STEPS = 30;
 var WorkflowStepIdSchema = external_exports.string().regex(/^[a-z0-9]{1,16}$/, "A step id.");
@@ -20394,6 +20531,7 @@ var FinishPersonStepRequestSchema = external_exports.object({ note: external_exp
 // ../types/src/triggers.ts
 var TaskStatusSchema = external_exports.enum(["todo", "in_progress", "waiting", "done", "cancelled"]);
 var MAX_TASK_ASSIGNEES = 10;
+var INBOX_TRIGGER_KINDS = ["mention", "dm", "thread"];
 var TriggerEventSchema = external_exports.discriminatedUnion("kind", [
   /** Someone posts in a conversation of the space (optionally with words in it, or by someone). */
   external_exports.object({
@@ -20428,6 +20566,14 @@ var TriggerEventSchema = external_exports.discriminatedUnion("kind", [
     event: external_exports.string().min(1).max(40),
     field: external_exports.string().max(40).nullable().default(null),
     value: external_exports.string().trim().max(200).nullable().default(null)
+  }),
+  /**
+   * Something new in your Inbox (decision 198): a personal trigger, only in
+   * your own My Space; what people (not agents) send you, from elsewhere.
+   */
+  external_exports.object({
+    kind: external_exports.literal("inbox"),
+    kinds: external_exports.array(external_exports.enum(INBOX_TRIGGER_KINDS)).min(1, "Choose what starts it.").max(INBOX_TRIGGER_KINDS.length).default(["mention", "dm"])
   })
 ]);
 var TriggerTaskSchema = external_exports.object({
@@ -20512,6 +20658,8 @@ var TaskRunStatusSchema = external_exports.enum([
 var TaskRunErrorSchema = external_exports.enum([
   "NOT_CONNECTED",
   "NOT_READY",
+  // Every Gateway the deployment runs was busy, each time it tried (decision 121).
+  "BUSY",
   "PROVIDER_REFUSED",
   "RUN_FAILED",
   "BUDGET_TURNS",
@@ -20654,7 +20802,13 @@ var TaskSeriesSchema = external_exports.object({
   lastAt: external_exports.string().nullable(),
   occurrences: external_exports.number().int(),
   createdBy: external_exports.object({ userId: external_exports.string(), name: external_exports.string() }),
-  createdAt: external_exports.string()
+  createdAt: external_exports.string(),
+  /** Made ready-made (decision 198): the unread report. */
+  preset: external_exports.enum(["unread_report"]).nullable().default(null)
+});
+var UnreadReportResponseSchema = external_exports.object({ report: TaskSeriesSchema.nullable() });
+var CreateUnreadReportRequestSchema = external_exports.object({
+  time: ClockTimeSchema.default("08:00")
 });
 var TaskSeriesResponseSchema = external_exports.object({ series: TaskSeriesSchema });
 var CreateTaskSeriesRequestSchema = external_exports.object({
@@ -20767,6 +20921,126 @@ var EmailDraftSchema = external_exports.object({
   error: external_exports.string().nullable()
 });
 
+// ../types/src/cards.ts
+var MAX_MESSAGE_CARDS = 8;
+var line = (max) => external_exports.string().trim().min(1).max(max);
+var optionalLine = (max) => external_exports.string().trim().max(max).optional();
+var link = external_exports.url({ protocol: /^https?$/, error: "An http(s) address." }).max(2e3);
+var when = external_exports.union([
+  external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "A date like 2030-01-08."),
+  external_exports.iso.datetime({ offset: true })
+]);
+var tone = external_exports.enum(["good", "warning", "bad", "neutral"]);
+var title = optionalLine(120);
+var EmailsCardSchema = external_exports.object({
+  type: external_exports.literal("emails"),
+  title,
+  items: external_exports.array(
+    external_exports.object({
+      from: line(120),
+      subject: external_exports.string().trim().max(200),
+      snippet: optionalLine(300),
+      at: when.optional(),
+      url: link.optional(),
+      unread: external_exports.boolean().optional(),
+      important: external_exports.boolean().optional(),
+      /** Why it matters, or what to do. */
+      note: optionalLine(240)
+    })
+  ).min(1).max(20)
+});
+var EventsCardSchema = external_exports.object({
+  type: external_exports.literal("events"),
+  title,
+  items: external_exports.array(
+    external_exports.object({
+      title: line(160),
+      start: when,
+      end: when.optional(),
+      where: optionalLine(160),
+      people: external_exports.array(line(80)).max(20).optional(),
+      url: link.optional(),
+      /** A video call's link. */
+      join: link.optional(),
+      /** The asker's answer to it. */
+      status: external_exports.enum(["accepted", "tentative", "declined", "needs_answer"]).optional(),
+      note: optionalLine(240)
+    })
+  ).min(1).max(20)
+});
+var MetricsCardSchema = external_exports.object({
+  type: external_exports.literal("metrics"),
+  title,
+  items: external_exports.array(
+    external_exports.object({
+      label: line(60),
+      value: line(40),
+      detail: optionalLine(80),
+      tone: tone.optional()
+    })
+  ).min(1).max(6)
+});
+var TableCardSchema = external_exports.object({
+  type: external_exports.literal("table"),
+  title,
+  columns: external_exports.array(line(60)).min(1).max(8),
+  rows: external_exports.array(external_exports.array(external_exports.union([external_exports.string().max(200), external_exports.number(), external_exports.null()])).max(8)).min(1).max(50)
+}).refine((card) => card.rows.every((row) => row.length === card.columns.length), {
+  error: "Every row needs one cell per column.",
+  path: ["rows"]
+});
+var ListCardSchema = external_exports.object({
+  type: external_exports.literal("list"),
+  title,
+  items: external_exports.array(
+    external_exports.object({
+      title: line(160),
+      detail: optionalLine(240),
+      /** On the side: a date, an amount, a status. */
+      meta: optionalLine(60),
+      url: link.optional(),
+      tone: tone.optional()
+    })
+  ).min(1).max(30)
+});
+var LinksCardSchema = external_exports.object({
+  type: external_exports.literal("links"),
+  title,
+  items: external_exports.array(external_exports.object({ label: line(120), url: link, detail: optionalLine(160) })).min(1).max(12)
+});
+var NoteCardSchema = external_exports.object({
+  type: external_exports.literal("note"),
+  tone: external_exports.enum(["info", "success", "warning", "danger"]).default("info"),
+  title,
+  text: line(600)
+});
+var BarsCardSchema = external_exports.object({
+  type: external_exports.literal("bars"),
+  title,
+  /** After each value: "h", "%", "€". */
+  unit: optionalLine(12),
+  items: external_exports.array(external_exports.object({ label: line(60), value: external_exports.number().finite().nonnegative() })).min(1).max(12)
+});
+var ActionsCardSchema = external_exports.object({
+  type: external_exports.literal("actions"),
+  items: external_exports.array(external_exports.object({ label: line(40), prompt: line(500) })).min(1).max(4)
+});
+var MessageCardSchema = external_exports.discriminatedUnion("type", [
+  EmailsCardSchema,
+  EventsCardSchema,
+  MetricsCardSchema,
+  TableCardSchema,
+  ListCardSchema,
+  LinksCardSchema,
+  NoteCardSchema,
+  BarsCardSchema,
+  ActionsCardSchema
+]);
+var MESSAGE_CARD_TYPES = MessageCardSchema.options.map(
+  (option) => option.shape.type.value
+);
+var MessageCardsSchema = external_exports.array(MessageCardSchema).max(MAX_MESSAGE_CARDS);
+
 // ../types/src/approvals.ts
 var ApprovalStatusSchema = external_exports.enum(["pending", "approved", "declined", "expired"]);
 var ApprovalSchema = external_exports.object({
@@ -20785,6 +21059,8 @@ var ApprovalSchema = external_exports.object({
   }).nullable(),
   /** The message, as proposed (or as approved, when edited). */
   body: external_exports.string(),
+  /** Cards posted with it (decision 211: a recurring task's results). */
+  cards: MessageCardsSchema.optional(),
   edited: external_exports.boolean(),
   /** Why, in the agent's words (optional); a workflow's step: what it asks. */
   reason: external_exports.string().nullable(),
@@ -20810,7 +21086,9 @@ var ApprovalSchema = external_exports.object({
     description: external_exports.string(),
     input: external_exports.record(external_exports.string(), external_exports.unknown()),
     result: external_exports.string().nullable(),
-    error: external_exports.string().nullable()
+    error: external_exports.string().nullable(),
+    /** A connector's tool: whose account it uses (the workspace's, or the asker's own). */
+    account: external_exports.enum(["workspace", "person"]).nullable().default(null)
   }).nullable().default(null),
   /** An email (M9 slice 4): from, to, subject; its text is `body` (editable before it's sent). */
   email: EmailDraftSchema.nullable().default(null),
@@ -20959,6 +21237,40 @@ var ChannelLoginSchema = external_exports.object({
   qr: external_exports.string().nullable()
 });
 
+// ../types/src/views.ts
+var MessageViewSchema = external_exports.object({
+  id: external_exports.string().regex(/^[a-f0-9]{24}$/),
+  /** Whose it is: a connector's (its page served by us, sandboxed), or an app's. */
+  source: external_exports.object({ kind: external_exports.enum(["connector", "app"]), id: external_exports.string(), name: external_exports.string() }),
+  /** The tool it shows (an app's: the action). */
+  tool: external_exports.string(),
+  /** An app's view: its page, on the app's origin (null: a connector's, served by us). */
+  url: external_exports.string().nullable().default(null),
+  title: external_exports.string().nullable(),
+  /** Its server asks for a border (true), none (false), or leaves it to us (null). */
+  border: external_exports.boolean().nullable()
+});
+var ViewToolResultSchema = external_exports.object({
+  content: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())),
+  structuredContent: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  isError: external_exports.boolean().optional()
+});
+var MessageViewDataSchema = external_exports.object({
+  tool: external_exports.object({
+    name: external_exports.string(),
+    title: external_exports.string().nullable(),
+    description: external_exports.string(),
+    inputSchema: external_exports.record(external_exports.string(), external_exports.unknown())
+  }),
+  input: external_exports.record(external_exports.string(), external_exports.unknown()),
+  result: ViewToolResultSchema
+});
+var ViewCallRequestSchema = external_exports.object({
+  name: external_exports.string().min(1).max(200),
+  arguments: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
+});
+var ViewCallResponseSchema = external_exports.object({ result: ViewToolResultSchema });
+
 // ../types/src/message.ts
 var MAX_MESSAGE_LENGTH = 1e4;
 var MessageIdSchema = external_exports.string().regex(/^[a-f0-9]{24}$/, "Invalid message id");
@@ -21049,7 +21361,11 @@ var AgentToolSchema = external_exports.enum([
   // An agent changing its own profile (title, face, instructions…) when asked, approved first.
   "update_my_profile",
   // Connectors (M12 slice 2): a remote MCP server's tools the workspace chose (reading ones).
-  "use_connector"
+  "use_connector",
+  // Notifications (decision 198): the asker's own Inbox, where only they read the answer.
+  "read_inbox",
+  // Cards (decision 211): mail, events, figures and rows shown under its answer.
+  "show_cards"
 ]);
 var AgentStepSchema = external_exports.object({
   tool: AgentToolSchema,
@@ -21104,6 +21420,10 @@ var MessageSchema = external_exports.object({
   proposal: TaskProposalSchema.optional(),
   /** Something an agent wants to do, waiting for a person's yes (M8 slice 6). */
   approval: ApprovalSchema.optional(),
+  /** What an agent's answer shows (decision 211): mail, events, figures, rows… */
+  cards: MessageCardsSchema.optional(),
+  /** Connectors' views in an agent's answer (MCP Apps, decision 213). */
+  views: external_exports.array(MessageViewSchema).optional(),
   /** Sent from a messaging app (M13): Telegram… */
   via: MessageViaSchema.optional()
 });
@@ -21154,7 +21474,9 @@ var ReferenceSchema = external_exports.object({
     id: external_exports.string(),
     kind: external_exports.enum(["general", "personal", "normal", "dm"]),
     name: external_exports.string().nullable(),
-    people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() }))
+    people: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string() })),
+    /** Its icon, when it has one (decision 190). */
+    iconUrl: external_exports.string().nullable().default(null)
   }).nullable(),
   tab: external_exports.object({
     id: external_exports.string(),
@@ -21453,6 +21775,10 @@ var AUDIT_ACTIONS = {
     "workspace.data_moved",
     "workspace.previous_data_deleted",
     "workspace.support_plan_changed",
+    "workspace.billing_contact_changed",
+    "workspace.card_saved",
+    "workspace.card_removed",
+    "workspace.statement_paid",
     "workspace.space_imported",
     "audit.exported",
     "audit.destination_added",
@@ -21463,12 +21789,15 @@ var AUDIT_ACTIONS = {
     "member.invite_link_created",
     "member.invitation_revoked",
     "member.joined",
-    "member.title_changed"
+    "member.title_changed",
+    "member.role_changed"
   ],
   spaces: [
     "space.created",
     "space.updated",
     "space.deleted",
+    "space.icon_changed",
+    "space.icon_removed",
     "space.archived",
     "space.unarchived",
     "space.converted",
@@ -21508,6 +21837,9 @@ var AUDIT_ACTIONS = {
     "agent.avatar_changed",
     "agent.host_access_changed",
     "agent.memory_changed",
+    "agent.published",
+    "agent.unpublished",
+    "agent.added_from_marketplace",
     "approval.requested",
     "gateway.connected",
     "gateway.disconnected",
@@ -21536,6 +21868,14 @@ var AUDIT_ACTIONS = {
     "app.installed",
     "app.updated",
     "app.removed",
+    "app.added_from_marketplace",
+    "app.published",
+    "app.unpublished",
+    "app.publishing_key_created",
+    "app.publishing_key_revoked",
+    "app.taken_down",
+    "app.event_key_allowed",
+    "app.event_key_turned_off",
     "app.action_run",
     "connection.added",
     "connection.removed",
@@ -21573,6 +21913,10 @@ var AUDIT_ACTIONS = {
     "billing.stripe_connected",
     "billing.stripe_disconnected",
     "statement.changed",
+    "statement.extended",
+    "agreement.created",
+    "agreement.updated",
+    "agreement.deleted",
     "support.registered",
     "support.unregistered",
     "support.report_sent",
@@ -21632,6 +21976,7 @@ var AuditTargetSchema = external_exports.object({
     "workflow",
     "approval",
     "statement",
+    "agreement",
     "ticket",
     "help_request",
     "skill",
@@ -21784,12 +22129,18 @@ var DeploymentSettingsFields = external_exports.object({
    * for you") keep it awake, never put to sleep (decision 151)? They pay its
    * hours where the deployment bills them.
    */
-  allowGatewayKeepAwake: external_exports.boolean()
+  allowGatewayKeepAwake: external_exports.boolean(),
+  /**
+   * Workspaces browse and add from the marketplace (decision 161): Tabs &
+   * Spaces' catalogue, reviewed by us. On unless its admins turn it off.
+   */
+  marketplace: external_exports.boolean()
 });
 var DeploymentSettingsSchema = DeploymentSettingsFields.extend({
   // Missing in older responses and fixtures: off.
   shareFeedback: external_exports.boolean().default(false),
-  allowGatewayKeepAwake: external_exports.boolean().default(false)
+  allowGatewayKeepAwake: external_exports.boolean().default(false),
+  marketplace: external_exports.boolean().default(true)
 });
 var DeploymentSettingsPatchSchema = DeploymentSettingsFields.partial().strict().refine((patch) => Object.keys(patch).length > 0, "Nothing to update");
 var DeploymentInfoSchema = external_exports.object({
@@ -22065,78 +22416,380 @@ var ReadinessSchema = external_exports.object({
   checks: external_exports.array(ReadinessCheckSchema)
 });
 
-// ../types/src/accent.ts
-var HexColorSchema = external_exports.string().regex(/^#[0-9a-fA-F]{6}$/, "Use a colour like #4f46e5").transform((hex3) => hex3.toLowerCase());
-var WorkspaceAccentSchema = external_exports.object({ light: HexColorSchema, dark: HexColorSchema });
-
-// ../types/src/workspace.ts
-var WorkspaceRoleSchema = external_exports.enum(["owner", "admin", "member", "guest"]);
-var WorkspaceSlugSchema = external_exports.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/, "Use lowercase letters, numbers and hyphens");
-var WorkspaceNameSchema = external_exports.string().trim().min(1).max(60);
-var WorkspaceSchema = external_exports.object({
-  id: external_exports.string(),
-  slug: WorkspaceSlugSchema,
-  name: external_exports.string(),
-  role: WorkspaceRoleSchema,
-  createdAt: external_exports.iso.datetime(),
-  /** The workspace's logo (optional), served from its own storage; versioned, so cacheable. */
-  logoUrl: external_exports.string().nullable().default(null),
-  /** Its data is moving to new storage (M5 slice 4): read-only until it's done. */
-  moving: external_exports.boolean().default(false),
-  /** Its accent colour for each mode; null: the default ink. */
-  accent: WorkspaceAccentSchema.nullable().default(null),
-  /** Its default time zone (M8 slice 1): for schedules when a person's own isn't known. */
-  timeZone: TimeZoneSchema.default(DEFAULT_TIME_ZONE)
-});
-var MAX_WORKSPACE_LOGO_BYTES = 2 * 1024 * 1024;
-var WorkspaceListSchema = external_exports.object({
-  workspaces: external_exports.array(WorkspaceSchema),
-  /** Whether the current user may create a(nother) workspace right now. */
-  canCreate: external_exports.boolean(),
-  /** Whether a new workspace may keep its data in its own MongoDB and bucket (M5). */
-  customInfrastructure: external_exports.boolean()
-});
-var MongoUriSchema = external_exports.string().trim().max(2e3).regex(/^mongodb(\+srv)?:\/\/[^\s]+$/, "Use a mongodb:// or mongodb+srv:// connection string");
-var BucketSchema = external_exports.object({
-  endpoint: external_exports.string().trim().max(500).regex(/^https?:\/\/[^\s/@]+(\/[^\s]*)?$/, "Use an http(s) address, without credentials").optional(),
-  region: external_exports.string().trim().min(1).max(64).default("us-east-1"),
-  bucket: external_exports.string().trim().regex(/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/, "Use a valid bucket name"),
-  accessKeyId: external_exports.string().trim().min(1).max(256),
-  secretAccessKey: external_exports.string().min(1).max(512),
-  /** Path-style addresses (MinIO and most self-hosted stores need them). */
-  forcePathStyle: external_exports.boolean().default(false)
-});
-var STORAGE_PROBLEMS = [
-  "INVALID",
-  "UNREACHABLE",
-  "PRIVATE_ADDRESS",
-  "AUTH_FAILED",
-  "NO_BUCKET",
-  "NO_PERMISSION",
-  "NOT_EMPTY"
+// ../types/src/billing.ts
+var COMMON_CURRENCIES = [
+  "USD",
+  "EUR",
+  "GBP",
+  "NGN",
+  "KES",
+  "GHS",
+  "ZAR",
+  "CAD",
+  "AUD",
+  "CHF",
+  "JPY",
+  "INR",
+  "BRL"
 ];
-var StorageProblemSchema = external_exports.enum(STORAGE_PROBLEMS);
-var StorageCheckSchema = external_exports.discriminatedUnion("ok", [
-  external_exports.object({
-    ok: external_exports.literal(true),
-    /** Where it is: "s3.eu-west-1.amazonaws.com" or the endpoint's host. */
-    host: external_exports.string(),
-    bucket: external_exports.string()
-  }),
-  external_exports.object({ ok: external_exports.literal(false), problem: StorageProblemSchema, detail: external_exports.string() })
-]);
-var CreateWorkspaceRequestSchema = external_exports.object({
-  name: WorkspaceNameSchema,
-  /** Optional explicit address; derived from the name when omitted. */
-  slug: WorkspaceSlugSchema.optional(),
-  /** Keep the workspace's data in this MongoDB instead of the deployment's (M5 slice 1). */
-  database: external_exports.object({ uri: MongoUriSchema }).optional(),
-  /** Keep its files in this bucket instead of the deployment's (M5 slice 2). */
-  files: BucketSchema.optional(),
-  /** The creating browser's time zone, used when the account has none yet (M8 slice 1). */
-  timeZone: TimeZoneSchema.optional()
+var CurrencySchema = external_exports.string().regex(/^[A-Z]{3}$/, "Use a three-letter currency code, like USD").refine((code) => knownCurrencies().has(code), "Unknown currency");
+var known = null;
+function knownCurrencies() {
+  known ??= new Set(
+    typeof Intl.supportedValuesOf === "function" ? Intl.supportedValuesOf("currency") : COMMON_CURRENCIES
+  );
+  return known;
+}
+var PriceSchema = external_exports.number().min(0, "Prices can't be negative").max(1e6).transform((value) => Math.round(value * 1e4) / 1e4);
+var priced = external_exports.object({ enabled: external_exports.boolean(), price: PriceSchema });
+var ModelPriceSchema = external_exports.object({
+  /** As agents name it: `provider/model`. */
+  model: external_exports.string().trim().min(3).max(200),
+  input: PriceSchema,
+  /** Input read from the prompt cache. */
+  cachedInput: PriceSchema,
+  /** Input written to the prompt cache. */
+  cacheWrite: PriceSchema,
+  output: PriceSchema
 });
-var DatabaseCheckRequestSchema = external_exports.object({ uri: MongoUriSchema });
+var BillingSettingsSchema = external_exports.object({
+  currency: CurrencySchema,
+  /** Per person who used the workspace in the month. */
+  seats: priced,
+  /** Per GB-month in the deployment's bucket. */
+  files: priced,
+  /** Per GB-month in the deployment's MongoDB. */
+  database: priced,
+  /** Model cost (from `models`) plus a markup, for runs on the deployment's Gateway. */
+  ai: external_exports.object({
+    enabled: external_exports.boolean(),
+    markupPercent: external_exports.number().min(0).max(1e3),
+    models: external_exports.array(ModelPriceSchema).max(100).refine(
+      (models) => new Set(models.map((m) => m.model)).size === models.length,
+      "Each model once"
+    )
+  }),
+  /** A flat amount per workspace per month (prorated from the day it was created). */
+  deploymentFee: priced,
+  /**
+   * A support plan per workspace per month, opt-in (decision 74): workspaces
+   * that turn it on pay it (prorated by day) and can ask the deployment for
+   * help. Absent in settings saved before it existed: off.
+   */
+  support: priced.default({ enabled: false, price: 0 }),
+  /**
+   * The deployment's Gateways (decision 151), per hour: a workspace's own
+   * ("Managed for you") while it's awake, or the deployment's shared one while
+   * the workspace is connected to it. Absent in older settings: off.
+   */
+  gatewayHours: priced.default({ enabled: false, price: 0 }),
+  /** A workspace's own Gateway's storage (its volume), per GB-month, asleep or awake. */
+  gatewayStorage: priced.default({ enabled: false, price: 0 }),
+  /**
+   * What happens when a statement isn't paid (decision 209): reminders always;
+   * with `readOnly`, the workspace becomes read-only `graceDays` after its
+   * due date, until it's paid. Absent in older settings: on, 30 days.
+   */
+  overdue: external_exports.object({ readOnly: external_exports.boolean(), graceDays: external_exports.number().int().min(1).max(365) }).default({ readOnly: true, graceDays: 30 })
+});
+var BILLING_METERS = [
+  "seats",
+  "files",
+  "database",
+  "ai",
+  "deploymentFee",
+  "support",
+  "gatewayHours",
+  "gatewayStorage"
+];
+var StripeConnectionSchema = external_exports.object({
+  connected: external_exports.boolean(),
+  /** Test keys create test invoices that nobody really pays. */
+  mode: external_exports.enum(["test", "live"]).nullable(),
+  /** The key's last four characters, to recognise it. */
+  keyHint: external_exports.string().nullable(),
+  connectedAt: external_exports.iso.datetime().nullable()
+});
+var ConnectStripeRequestSchema = external_exports.object({
+  secretKey: external_exports.string().trim().regex(
+    /^(sk|rk)_(test|live)_[A-Za-z0-9]{10,}$/,
+    "Use a Stripe secret key (sk_\u2026) or restricted key (rk_\u2026)"
+  )
+});
+var AdminBillingSchema = external_exports.object({
+  settings: BillingSettingsSchema,
+  /** Models agents have run on this deployment's Gateways, to price. */
+  modelsInUse: external_exports.array(external_exports.string()),
+  stripe: StripeConnectionSchema
+});
+var BillLineSchema = external_exports.object({
+  meter: external_exports.enum([...BILLING_METERS, "agreement"]),
+  /**
+   * billed: charged; notBilled: this deployment doesn't bill it;
+   * own: the workspace brings this resource itself; notChosen: an opt-in plan
+   * (support) the workspace doesn't have; included: its agreement covers it.
+   */
+  status: external_exports.enum(["billed", "notBilled", "own", "notChosen", "included"]),
+  /** People, GB-months, tokens, or the share of the month (deployment fee, support plan). */
+  quantity: external_exports.number().nonnegative(),
+  /** Price per unit; null for AI (priced per model). */
+  unitPrice: external_exports.number().nullable(),
+  amount: external_exports.number().nonnegative()
+});
+var WorkspaceBillSchema = external_exports.object({
+  currency: external_exports.string(),
+  lines: external_exports.array(BillLineSchema),
+  /** AI amount per model (null: the model has no price set). */
+  aiByModel: external_exports.array(external_exports.object({ model: external_exports.string(), amount: external_exports.number().nullable() })),
+  /** Models used but not priced: their tokens aren't charged. */
+  unpricedModels: external_exports.array(external_exports.string()),
+  total: external_exports.number().nonnegative(),
+  /** True for the current month: amounts grow until it ends. */
+  toDate: external_exports.boolean()
+});
+var StatementStatusSchema = external_exports.enum(["nothingDue", "due", "paid", "void"]);
+var StatementSchema = external_exports.object({
+  id: external_exports.string(),
+  workspaceId: external_exports.string(),
+  /**
+   * usage: a month's metered bill, after it ends; agreement: a period of an
+   * agreement's fixed price, at its start (decision 209).
+   */
+  kind: external_exports.enum(["usage", "agreement"]).default("usage"),
+  /** usage: the month; agreement: the period's first month. */
+  month: external_exports.string(),
+  /** An agreement's period: its first and last months (null for usage). */
+  period: external_exports.object({ from: external_exports.string(), to: external_exports.string() }).nullable().default(null),
+  currency: external_exports.string(),
+  lines: external_exports.array(BillLineSchema),
+  aiByModel: external_exports.array(external_exports.object({ model: external_exports.string(), amount: external_exports.number().nullable() })),
+  unpricedModels: external_exports.array(external_exports.string()),
+  total: external_exports.number().nonnegative(),
+  status: StatementStatusSchema,
+  createdAt: external_exports.iso.datetime(),
+  /** When it must be paid by (null: nothing due, or from before due dates were kept). */
+  dueAt: external_exports.iso.datetime().nullable().default(null),
+  paidAt: external_exports.iso.datetime().nullable(),
+  payment: external_exports.object({
+    /** stripe: an invoice on the deployment's Stripe; manual: settled outside the app. */
+    provider: external_exports.enum(["stripe", "manual"]),
+    invoiceNumber: external_exports.string().nullable(),
+    /** Stripe's page where the invoice can be paid. */
+    invoiceUrl: external_exports.url().nullable(),
+    /** Why the invoice couldn't be created yet (retried every hour). */
+    error: external_exports.string().nullable(),
+    /** Why the saved card couldn't pay it (it can still be paid on Stripe's page). */
+    chargeError: external_exports.string().nullable().default(null)
+  })
+});
+var WorkspaceStatementsSchema = external_exports.object({ statements: external_exports.array(StatementSchema) });
+var AdminStatementsSchema = external_exports.object({
+  month: external_exports.string(),
+  /** Months with statements, newest first. */
+  months: external_exports.array(external_exports.string()),
+  statements: external_exports.array(
+    StatementSchema.extend({
+      workspace: external_exports.object({ id: external_exports.string(), name: external_exports.string(), slug: external_exports.string() })
+    })
+  )
+});
+var AgreementPeriodSchema = external_exports.enum(["month", "year"]);
+var AgreementSchema = external_exports.object({
+  id: external_exports.string(),
+  workspaceId: external_exports.string(),
+  /** What it's called on invoices, like "Enterprise". */
+  name: external_exports.string(),
+  currency: external_exports.string(),
+  /** The fixed price per period. */
+  amount: external_exports.number().nonnegative(),
+  period: AgreementPeriodSchema,
+  startMonth: UsageMonthOf(),
+  /** Its last month, included; null: until it's ended. */
+  endMonth: UsageMonthOf().nullable(),
+  included: external_exports.array(external_exports.enum(BILLING_METERS)),
+  /** For the deployment's admins only (never shown to the workspace). */
+  note: external_exports.string(),
+  createdAt: external_exports.iso.datetime()
+});
+function UsageMonthOf() {
+  return external_exports.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/, "Use a month like 2026-11");
+}
+var agreementFields = {
+  name: external_exports.string().trim().min(1, "Give it a name").max(80),
+  amount: PriceSchema.refine((amount) => amount > 0, "Use an amount above 0"),
+  period: AgreementPeriodSchema,
+  startMonth: UsageMonthOf(),
+  endMonth: UsageMonthOf().nullable(),
+  included: external_exports.array(external_exports.enum(BILLING_METERS)).max(BILLING_METERS.length).transform((meters) => [...new Set(meters)]),
+  note: external_exports.string().trim().max(2e3)
+};
+var endsAfterStart = (a) => !a.startMonth || !a.endMonth || a.endMonth >= a.startMonth;
+var CreateAgreementRequestSchema = external_exports.object({
+  workspaceId: external_exports.string().min(1),
+  ...agreementFields,
+  note: agreementFields.note.default("")
+}).refine(endsAfterStart, { message: "It can't end before it starts", path: ["endMonth"] });
+var UpdateAgreementRequestSchema = external_exports.object(agreementFields).partial().refine((patch) => Object.keys(patch).length > 0, "Nothing to change.").refine(endsAfterStart, { message: "It can't end before it starts", path: ["endMonth"] });
+var AdminAgreementsSchema = external_exports.object({
+  currency: external_exports.string(),
+  /** The current month (UTC): agreements start then or later. */
+  month: external_exports.string(),
+  agreements: external_exports.array(
+    AgreementSchema.extend({
+      workspace: external_exports.object({ id: external_exports.string(), name: external_exports.string(), slug: external_exports.string() })
+    })
+  ),
+  workspaces: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string(), slug: external_exports.string() }))
+});
+var BillingContactSchema = external_exports.object({
+  /** The name on invoices: a company, or a person. */
+  name: external_exports.string().trim().max(120),
+  email: external_exports.union([external_exports.literal(""), external_exports.email()]),
+  address: external_exports.object({
+    line1: external_exports.string().trim().max(200),
+    line2: external_exports.string().trim().max(200),
+    city: external_exports.string().trim().max(100),
+    postalCode: external_exports.string().trim().max(20),
+    state: external_exports.string().trim().max(100),
+    /** ISO 3166-1 alpha-2, or empty. */
+    country: external_exports.union([
+      external_exports.literal(""),
+      external_exports.string().regex(/^[A-Z]{2}$/, "Use a two-letter country code")
+    ])
+  }),
+  /** A VAT or tax number, printed on invoices. */
+  taxId: external_exports.string().trim().max(50)
+});
+var SavedCardSchema = external_exports.object({
+  brand: external_exports.string(),
+  last4: external_exports.string(),
+  expMonth: external_exports.number().int(),
+  expYear: external_exports.number().int()
+});
+var BillingHoldSchema = external_exports.object({
+  state: external_exports.enum(["overdue", "readOnly"]),
+  /** The oldest unpaid statement's due date. */
+  dueAt: external_exports.iso.datetime(),
+  /** When it becomes read-only (null: the deployment doesn't do that). */
+  readOnlyAt: external_exports.iso.datetime().nullable()
+});
+var WorkspaceBillingSchema = external_exports.object({
+  /** null: the deployment doesn't bill workspaces. */
+  plan: external_exports.discriminatedUnion("kind", [
+    external_exports.object({
+      kind: external_exports.literal("usage"),
+      currency: external_exports.string(),
+      /** The meters billed and their prices (null: priced per model, for AI). */
+      meters: external_exports.array(
+        external_exports.object({ meter: external_exports.enum(BILLING_METERS), unitPrice: external_exports.number().nullable() })
+      )
+    }),
+    external_exports.object({
+      kind: external_exports.literal("agreement"),
+      currency: external_exports.string(),
+      agreement: AgreementSchema.omit({ note: true }),
+      /** The meters it doesn't include, billed as usual. */
+      meters: external_exports.array(
+        external_exports.object({ meter: external_exports.enum(BILLING_METERS), unitPrice: external_exports.number().nullable() })
+      )
+    })
+  ]).nullable(),
+  /** An agreement that starts later, if one is set. */
+  upcoming: AgreementSchema.omit({ note: true }).nullable(),
+  statements: external_exports.array(StatementSchema),
+  contact: BillingContactSchema,
+  /** Whether invoices can be paid online (the deployment has Stripe). */
+  online: external_exports.boolean(),
+  card: SavedCardSchema.nullable(),
+  hold: BillingHoldSchema.nullable(),
+  /** Owners change the contact and the card; admins see. */
+  canManage: external_exports.boolean()
+});
+var CardSetupSchema = external_exports.object({ url: external_exports.url() });
+
+// ../types/src/accent.ts
+var HexColorSchema = external_exports.string().regex(/^#[0-9a-fA-F]{6}$/, "Use a colour like #4f46e5").transform((hex3) => hex3.toLowerCase());
+var WorkspaceAccentSchema = external_exports.object({ light: HexColorSchema, dark: HexColorSchema });
+
+// ../types/src/workspace.ts
+var WorkspaceRoleSchema = external_exports.enum(["owner", "admin", "member", "guest"]);
+var WorkspaceSlugSchema = external_exports.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/, "Use lowercase letters, numbers and hyphens");
+var WorkspaceNameSchema = external_exports.string().trim().min(1).max(60);
+var WorkspaceHomePageSchema = external_exports.object({
+  appId: external_exports.string().min(1).max(64),
+  pageId: external_exports.string().min(1).max(40)
+});
+var WorkspaceSchema = external_exports.object({
+  id: external_exports.string(),
+  slug: WorkspaceSlugSchema,
+  name: external_exports.string(),
+  role: WorkspaceRoleSchema,
+  createdAt: external_exports.iso.datetime(),
+  /** The workspace's logo (optional), served from its own storage; versioned, so cacheable. */
+  logoUrl: external_exports.string().nullable().default(null),
+  /** Its data is moving to new storage (M5 slice 4): read-only until it's done. */
+  moving: external_exports.boolean().default(false),
+  /**
+   * Its bills are late (decision 209): owners and admins see it as overdue;
+   * everyone sees it once it's read-only until paid. Null: nothing late.
+   */
+  billingHold: BillingHoldSchema.nullable().default(null),
+  /** Its accent colour for each mode; null: the default ink. */
+  accent: WorkspaceAccentSchema.nullable().default(null),
+  /** Its default time zone (M8 slice 1): for schedules when a person's own isn't known. */
+  timeZone: TimeZoneSchema.default(DEFAULT_TIME_ZONE),
+  /** Its Home (decision 177): one of an installed app's home pages; null: ours. */
+  homePage: WorkspaceHomePageSchema.nullable().default(null)
+});
+var MAX_WORKSPACE_LOGO_BYTES = 2 * 1024 * 1024;
+var WorkspaceListSchema = external_exports.object({
+  workspaces: external_exports.array(WorkspaceSchema),
+  /** Whether the current user may create a(nother) workspace right now. */
+  canCreate: external_exports.boolean(),
+  /** Whether a new workspace may keep its data in its own MongoDB and bucket (M5). */
+  customInfrastructure: external_exports.boolean()
+});
+var MongoUriSchema = external_exports.string().trim().max(2e3).regex(/^mongodb(\+srv)?:\/\/[^\s]+$/, "Use a mongodb:// or mongodb+srv:// connection string");
+var BucketSchema = external_exports.object({
+  endpoint: external_exports.string().trim().max(500).regex(/^https?:\/\/[^\s/@]+(\/[^\s]*)?$/, "Use an http(s) address, without credentials").optional(),
+  region: external_exports.string().trim().min(1).max(64).default("us-east-1"),
+  bucket: external_exports.string().trim().regex(/^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/, "Use a valid bucket name"),
+  accessKeyId: external_exports.string().trim().min(1).max(256),
+  secretAccessKey: external_exports.string().min(1).max(512),
+  /** Path-style addresses (MinIO and most self-hosted stores need them). */
+  forcePathStyle: external_exports.boolean().default(false)
+});
+var STORAGE_PROBLEMS = [
+  "INVALID",
+  "UNREACHABLE",
+  "PRIVATE_ADDRESS",
+  "AUTH_FAILED",
+  "NO_BUCKET",
+  "NO_PERMISSION",
+  "NOT_EMPTY"
+];
+var StorageProblemSchema = external_exports.enum(STORAGE_PROBLEMS);
+var StorageCheckSchema = external_exports.discriminatedUnion("ok", [
+  external_exports.object({
+    ok: external_exports.literal(true),
+    /** Where it is: "s3.eu-west-1.amazonaws.com" or the endpoint's host. */
+    host: external_exports.string(),
+    bucket: external_exports.string()
+  }),
+  external_exports.object({ ok: external_exports.literal(false), problem: StorageProblemSchema, detail: external_exports.string() })
+]);
+var CreateWorkspaceRequestSchema = external_exports.object({
+  name: WorkspaceNameSchema,
+  /** Optional explicit address; derived from the name when omitted. */
+  slug: WorkspaceSlugSchema.optional(),
+  /** Keep the workspace's data in this MongoDB instead of the deployment's (M5 slice 1). */
+  database: external_exports.object({ uri: MongoUriSchema }).optional(),
+  /** Keep its files in this bucket instead of the deployment's (M5 slice 2). */
+  files: BucketSchema.optional(),
+  /** The creating browser's time zone, used when the account has none yet (M8 slice 1). */
+  timeZone: TimeZoneSchema.optional()
+});
+var DatabaseCheckRequestSchema = external_exports.object({ uri: MongoUriSchema });
 var DATABASE_PROBLEMS = [
   "INVALID",
   "UNREACHABLE",
@@ -22194,7 +22847,9 @@ var UpdateWorkspaceRequestSchema = external_exports.object({
   /** Owners and admins: the accent colour (null: back to the default). */
   accent: WorkspaceAccentSchema.nullable(),
   /** Owners and admins: the default time zone. */
-  timeZone: TimeZoneSchema
+  timeZone: TimeZoneSchema,
+  /** Owners and admins: Home, from an installed app (null: back to ours). */
+  homePage: WorkspaceHomePageSchema.nullable()
 }).partial().strict().refine((patch) => Object.keys(patch).length > 0, "Nothing to update");
 var WorkspaceResponseSchema = external_exports.object({ workspace: WorkspaceSchema });
 var TRANSLITERATIONS = {
@@ -22267,10 +22922,13 @@ var WorkspaceMemberSchema = external_exports.object({
   title: external_exports.string().default(""),
   /** Their profile picture's address (null: initials), decision 145. */
   picture: external_exports.string().nullable().default(null),
-  joinedAt: external_exports.iso.datetime()
+  joinedAt: external_exports.iso.datetime(),
+  /** Their notifications are paused, or in quiet hours, until then (decision 194); null: not. */
+  quietUntil: external_exports.iso.datetime().nullable().default(null)
 });
 var TitleSchema = external_exports.string().trim().max(60, "Keep the title under 60 characters.");
 var UpdateMemberRequestSchema = external_exports.object({ title: TitleSchema });
+var ChangeRoleRequestSchema = external_exports.object({ role: WorkspaceRoleSchema }).strict();
 var WorkspaceMemberListSchema = external_exports.object({ members: external_exports.array(WorkspaceMemberSchema) });
 var MAX_PROFILE_PICTURE_BYTES = 2 * 1024 * 1024;
 
@@ -22521,227 +23179,67 @@ var ExportManifestSchema = external_exports.object({
   scope: external_exports.enum(["shared", "space"]),
   /** The space, for a space export. */
   space: external_exports.object({
-    id: external_exports.string(),
-    kind: external_exports.enum(["general", "personal", "normal"]),
-    name: external_exports.string().nullable(),
-    description: external_exports.string(),
-    visibility: external_exports.enum(["public", "private"])
-  }).nullable().default(null),
-  exportedAt: external_exports.iso.datetime(),
-  exportedBy: external_exports.object({ name: external_exports.string(), email: external_exports.string() }),
-  workspace: external_exports.object({
-    id: external_exports.string(),
-    name: external_exports.string(),
-    slug: external_exports.string(),
-    createdAt: external_exports.iso.datetime(),
-    logo: external_exports.object({ key: external_exports.string(), contentType: external_exports.string() }).nullable()
-  }),
-  counts: external_exports.record(external_exports.string(), external_exports.number().int().nonnegative()),
-  files: external_exports.number().int().nonnegative()
-});
-var ExportPersonSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  email: external_exports.string(),
-  role: external_exports.enum(["owner", "admin", "member", "guest"])
-});
-var ExportPeopleSchema = external_exports.array(ExportPersonSchema);
-var ImportPreviewSchema = external_exports.object({
-  importId: external_exports.string(),
-  name: external_exports.string(),
-  /** What it holds: a whole workspace, or one space (and which kind). */
-  scope: external_exports.enum(["shared", "space"]).default("shared"),
-  spaceKind: external_exports.enum(["general", "personal", "normal"]).nullable().default(null),
-  exportedAt: external_exports.iso.datetime(),
-  exportedBy: external_exports.string(),
-  counts: external_exports.object({
-    spaces: external_exports.number().int(),
-    messages: external_exports.number().int(),
-    files: external_exports.number().int(),
-    agents: external_exports.number().int(),
-    people: external_exports.number().int()
-  })
-});
-var ImportRequestSchema = external_exports.object({
-  name: WorkspaceNameSchema,
-  slug: WorkspaceSlugSchema.optional(),
-  database: external_exports.object({ uri: MongoUriSchema }).optional(),
-  files: BucketSchema.optional()
-});
-var ImportResultSchema = external_exports.object({
-  workspace: WorkspaceSchema,
-  /** The other people from the export, to invite (their old messages keep their names). */
-  people: external_exports.array(external_exports.object({ name: external_exports.string(), email: external_exports.string() }))
-});
-var SpaceImportRequestSchema = external_exports.object({
-  /** For a new space: its name (the exported one when left out). */
-  name: external_exports.string().trim().min(1).max(80).optional()
-});
-var SpaceImportResultSchema = external_exports.object({
-  spaceId: external_exports.string(),
-  /** Messages and files brought in. */
-  messages: external_exports.number().int(),
-  files: external_exports.number().int()
-});
-
-// ../types/src/billing.ts
-var COMMON_CURRENCIES = [
-  "USD",
-  "EUR",
-  "GBP",
-  "NGN",
-  "KES",
-  "GHS",
-  "ZAR",
-  "CAD",
-  "AUD",
-  "CHF",
-  "JPY",
-  "INR",
-  "BRL"
-];
-var CurrencySchema = external_exports.string().regex(/^[A-Z]{3}$/, "Use a three-letter currency code, like USD").refine((code) => knownCurrencies().has(code), "Unknown currency");
-var known = null;
-function knownCurrencies() {
-  known ??= new Set(
-    typeof Intl.supportedValuesOf === "function" ? Intl.supportedValuesOf("currency") : COMMON_CURRENCIES
-  );
-  return known;
-}
-var PriceSchema = external_exports.number().min(0, "Prices can't be negative").max(1e6).transform((value) => Math.round(value * 1e4) / 1e4);
-var priced = external_exports.object({ enabled: external_exports.boolean(), price: PriceSchema });
-var ModelPriceSchema = external_exports.object({
-  /** As agents name it: `provider/model`. */
-  model: external_exports.string().trim().min(3).max(200),
-  input: PriceSchema,
-  /** Input read from the prompt cache. */
-  cachedInput: PriceSchema,
-  /** Input written to the prompt cache. */
-  cacheWrite: PriceSchema,
-  output: PriceSchema
-});
-var BillingSettingsSchema = external_exports.object({
-  currency: CurrencySchema,
-  /** Per person who used the workspace in the month. */
-  seats: priced,
-  /** Per GB-month in the deployment's bucket. */
-  files: priced,
-  /** Per GB-month in the deployment's MongoDB. */
-  database: priced,
-  /** Model cost (from `models`) plus a markup, for runs on the deployment's Gateway. */
-  ai: external_exports.object({
-    enabled: external_exports.boolean(),
-    markupPercent: external_exports.number().min(0).max(1e3),
-    models: external_exports.array(ModelPriceSchema).max(100).refine(
-      (models) => new Set(models.map((m) => m.model)).size === models.length,
-      "Each model once"
-    )
-  }),
-  /** A flat amount per workspace per month (prorated from the day it was created). */
-  deploymentFee: priced,
-  /**
-   * A support plan per workspace per month, opt-in (decision 74): workspaces
-   * that turn it on pay it (prorated by day) and can ask the deployment for
-   * help. Absent in settings saved before it existed: off.
-   */
-  support: priced.default({ enabled: false, price: 0 }),
-  /**
-   * The deployment's Gateways (decision 151), per hour: a workspace's own
-   * ("Managed for you") while it's awake, or the deployment's shared one while
-   * the workspace is connected to it. Absent in older settings: off.
-   */
-  gatewayHours: priced.default({ enabled: false, price: 0 }),
-  /** A workspace's own Gateway's storage (its volume), per GB-month, asleep or awake. */
-  gatewayStorage: priced.default({ enabled: false, price: 0 })
-});
-var BILLING_METERS = [
-  "seats",
-  "files",
-  "database",
-  "ai",
-  "deploymentFee",
-  "support",
-  "gatewayHours",
-  "gatewayStorage"
-];
-var StripeConnectionSchema = external_exports.object({
-  connected: external_exports.boolean(),
-  /** Test keys create test invoices that nobody really pays. */
-  mode: external_exports.enum(["test", "live"]).nullable(),
-  /** The key's last four characters, to recognise it. */
-  keyHint: external_exports.string().nullable(),
-  connectedAt: external_exports.iso.datetime().nullable()
-});
-var ConnectStripeRequestSchema = external_exports.object({
-  secretKey: external_exports.string().trim().regex(
-    /^(sk|rk)_(test|live)_[A-Za-z0-9]{10,}$/,
-    "Use a Stripe secret key (sk_\u2026) or restricted key (rk_\u2026)"
-  )
-});
-var AdminBillingSchema = external_exports.object({
-  settings: BillingSettingsSchema,
-  /** Models agents have run on this deployment's Gateways, to price. */
-  modelsInUse: external_exports.array(external_exports.string()),
-  stripe: StripeConnectionSchema
-});
-var BillLineSchema = external_exports.object({
-  meter: external_exports.enum(BILLING_METERS),
-  /**
-   * billed: charged; notBilled: this deployment doesn't bill it;
-   * own: the workspace brings this resource itself; notChosen: an opt-in plan
-   * (support) the workspace doesn't have.
-   */
-  status: external_exports.enum(["billed", "notBilled", "own", "notChosen"]),
-  /** People, GB-months, tokens, or the share of the month (deployment fee, support plan). */
-  quantity: external_exports.number().nonnegative(),
-  /** Price per unit; null for AI (priced per model). */
-  unitPrice: external_exports.number().nullable(),
-  amount: external_exports.number().nonnegative()
-});
-var WorkspaceBillSchema = external_exports.object({
-  currency: external_exports.string(),
-  lines: external_exports.array(BillLineSchema),
-  /** AI amount per model (null: the model has no price set). */
-  aiByModel: external_exports.array(external_exports.object({ model: external_exports.string(), amount: external_exports.number().nullable() })),
-  /** Models used but not priced: their tokens aren't charged. */
-  unpricedModels: external_exports.array(external_exports.string()),
-  total: external_exports.number().nonnegative(),
-  /** True for the current month: amounts grow until it ends. */
-  toDate: external_exports.boolean()
+    id: external_exports.string(),
+    kind: external_exports.enum(["general", "personal", "normal"]),
+    name: external_exports.string().nullable(),
+    description: external_exports.string(),
+    visibility: external_exports.enum(["public", "private"])
+  }).nullable().default(null),
+  exportedAt: external_exports.iso.datetime(),
+  exportedBy: external_exports.object({ name: external_exports.string(), email: external_exports.string() }),
+  workspace: external_exports.object({
+    id: external_exports.string(),
+    name: external_exports.string(),
+    slug: external_exports.string(),
+    createdAt: external_exports.iso.datetime(),
+    logo: external_exports.object({ key: external_exports.string(), contentType: external_exports.string() }).nullable()
+  }),
+  counts: external_exports.record(external_exports.string(), external_exports.number().int().nonnegative()),
+  files: external_exports.number().int().nonnegative()
 });
-var StatementStatusSchema = external_exports.enum(["nothingDue", "due", "paid", "void"]);
-var StatementSchema = external_exports.object({
+var ExportPersonSchema = external_exports.object({
   id: external_exports.string(),
-  workspaceId: external_exports.string(),
-  month: external_exports.string(),
-  currency: external_exports.string(),
-  lines: external_exports.array(BillLineSchema),
-  aiByModel: external_exports.array(external_exports.object({ model: external_exports.string(), amount: external_exports.number().nullable() })),
-  unpricedModels: external_exports.array(external_exports.string()),
-  total: external_exports.number().nonnegative(),
-  status: StatementStatusSchema,
-  createdAt: external_exports.iso.datetime(),
-  paidAt: external_exports.iso.datetime().nullable(),
-  payment: external_exports.object({
-    /** stripe: an invoice on the deployment's Stripe; manual: settled outside the app. */
-    provider: external_exports.enum(["stripe", "manual"]),
-    invoiceNumber: external_exports.string().nullable(),
-    /** Stripe's page where the invoice can be paid. */
-    invoiceUrl: external_exports.url().nullable(),
-    /** Why the invoice couldn't be created yet (retried every hour). */
-    error: external_exports.string().nullable()
+  name: external_exports.string(),
+  email: external_exports.string(),
+  role: external_exports.enum(["owner", "admin", "member", "guest"])
+});
+var ExportPeopleSchema = external_exports.array(ExportPersonSchema);
+var ImportPreviewSchema = external_exports.object({
+  importId: external_exports.string(),
+  name: external_exports.string(),
+  /** What it holds: a whole workspace, or one space (and which kind). */
+  scope: external_exports.enum(["shared", "space"]).default("shared"),
+  spaceKind: external_exports.enum(["general", "personal", "normal"]).nullable().default(null),
+  exportedAt: external_exports.iso.datetime(),
+  exportedBy: external_exports.string(),
+  counts: external_exports.object({
+    spaces: external_exports.number().int(),
+    messages: external_exports.number().int(),
+    files: external_exports.number().int(),
+    agents: external_exports.number().int(),
+    people: external_exports.number().int()
   })
 });
-var WorkspaceStatementsSchema = external_exports.object({ statements: external_exports.array(StatementSchema) });
-var AdminStatementsSchema = external_exports.object({
-  month: external_exports.string(),
-  /** Months with statements, newest first. */
-  months: external_exports.array(external_exports.string()),
-  statements: external_exports.array(
-    StatementSchema.extend({
-      workspace: external_exports.object({ id: external_exports.string(), name: external_exports.string(), slug: external_exports.string() })
-    })
-  )
+var ImportRequestSchema = external_exports.object({
+  name: WorkspaceNameSchema,
+  slug: WorkspaceSlugSchema.optional(),
+  database: external_exports.object({ uri: MongoUriSchema }).optional(),
+  files: BucketSchema.optional()
+});
+var ImportResultSchema = external_exports.object({
+  workspace: WorkspaceSchema,
+  /** The other people from the export, to invite (their old messages keep their names). */
+  people: external_exports.array(external_exports.object({ name: external_exports.string(), email: external_exports.string() }))
+});
+var SpaceImportRequestSchema = external_exports.object({
+  /** For a new space: its name (the exported one when left out). */
+  name: external_exports.string().trim().min(1).max(80).optional()
+});
+var SpaceImportResultSchema = external_exports.object({
+  spaceId: external_exports.string(),
+  /** Messages and files brought in. */
+  messages: external_exports.number().int(),
+  files: external_exports.number().int()
 });
 
 // ../types/src/usage.ts
@@ -23131,7 +23629,11 @@ var ConnectorToolSchema = external_exports.object({
   /** A tool its server doesn't describe, which an owner says only reads. */
   markedReadOnly: external_exports.boolean(),
   /** Agents may use it (only tools that read, or that an owner says only read). */
-  enabled: external_exports.boolean()
+  enabled: external_exports.boolean(),
+  /** It shows a view in conversations (MCP Apps, decision 213). */
+  view: external_exports.boolean().default(false),
+  /** Only its views call it, not agents. */
+  viewsOnly: external_exports.boolean().default(false)
 });
 var McpConnectorSchema = external_exports.object({
   id: external_exports.string(),
@@ -23163,7 +23665,19 @@ var McpConnectorSchema = external_exports.object({
   addedAt: external_exports.string(),
   checkedAt: external_exports.string().nullable()
 });
-var McpConnectorListSchema = external_exports.object({ connectors: external_exports.array(McpConnectorSchema) });
+var ConnectorPresetSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string(),
+  auth: external_exports.enum(["oauth", "header"]),
+  headerName: external_exports.string().nullable(),
+  /** How its key is written ("Bearer github_pat_…"). */
+  keyHint: external_exports.string().nullable()
+});
+var McpConnectorListSchema = external_exports.object({
+  connectors: external_exports.array(McpConnectorSchema),
+  presets: external_exports.array(ConnectorPresetSchema).default([])
+});
 var HeaderNameSchema = external_exports.string().trim().regex(/^[A-Za-z0-9-]{1,64}$/, "A header's name: letters, digits and dashes.").refine(
   (name) => !["host", "content-length", "content-type", "accept", "connection"].includes(
     name.toLowerCase()
@@ -23219,6 +23733,574 @@ var MyConnectorSchema = external_exports.object({
 var MyConnectorListSchema = external_exports.object({ connectors: external_exports.array(MyConnectorSchema) });
 var SetMyConnectorKeyRequestSchema = external_exports.object({ value: external_exports.string().trim().min(1, "Enter your key.").max(4e3) }).strict();
 
+// ../types/src/marketplace.ts
+var LISTING_KINDS = ["agent", "app"];
+var ListingKindSchema = external_exports.enum(LISTING_KINDS);
+var LISTING_CATEGORIES = [
+  "productivity",
+  "research",
+  "writing",
+  "support",
+  "sales",
+  "marketing",
+  "engineering",
+  "operations",
+  "finance",
+  "people",
+  "education",
+  "personal"
+];
+var ListingCategorySchema = external_exports.enum(LISTING_CATEGORIES);
+var LISTED_AGENT = "@self";
+var LISTED_TABBY = "@tabby";
+var LISTED_ADDER = "@adder";
+var LISTED_TABS = {
+  conversations: "@conversations",
+  docs: "@docs",
+  tasks: "@tasks"
+};
+var listedAppTab = (app) => `@app:${app.id}/${app.tab}`;
+var AGENT_PLACEHOLDERS = [LISTED_AGENT, LISTED_TABBY];
+var TAB_PLACEHOLDERS = Object.values(LISTED_TABS);
+var ASSIGNEE_PLACEHOLDERS = [LISTED_AGENT, LISTED_TABBY, LISTED_ADDER];
+var ListedAssigneesSchema = external_exports.array(external_exports.enum([LISTED_AGENT, LISTED_TABBY, LISTED_ADDER])).max(3).default([LISTED_AGENT]);
+var ListedSkillSchema = external_exports.discriminatedUnion("source", [
+  external_exports.object({
+    source: external_exports.literal("builtin"),
+    name: external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "A skill's name."),
+    displayName: external_exports.string().trim().min(1).max(80)
+  }),
+  external_exports.object({
+    source: external_exports.literal("clawhub"),
+    ref: ClawHubRefSchema,
+    displayName: external_exports.string().trim().min(1).max(80)
+  })
+]);
+var ListedConnectorSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(40),
+  url: external_exports.url({ protocol: /^https$/, message: "A connector's https:// address." }).max(500),
+  auth: external_exports.enum(["none", "header", "oauth"]),
+  /** With a header: its name (its value is asked for when it's added). */
+  headerName: external_exports.string().regex(/^[A-Za-z0-9-]{1,64}$/).nullable().default(null),
+  identity: ConnectorIdentitySchema.default("workspace"),
+  /** OAuth: what its sign-in asks for (null: what its server suggests, or our default for it). */
+  scope: external_exports.string().trim().max(500).nullable().default(null),
+  /** What it's for, for whoever adds it. */
+  description: external_exports.string().trim().max(300).default(""),
+  /** Its tools the agent may use, by name (the rest stay off). */
+  tools: external_exports.array(external_exports.string().max(200)).max(500).default([])
+});
+var ListedAppSchema = external_exports.object({
+  /** Its manifest's `id`. */
+  id: external_exports.string().min(3).max(64),
+  name: external_exports.string().trim().min(1).max(40),
+  manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+  /** Which of its tabs goes in the space: `listedAppTab()` names it. */
+  tab: external_exports.string().min(1).max(40),
+  /** What it's for, for whoever adds it. */
+  description: external_exports.string().trim().max(300).default("")
+});
+var ListedWorkflowSchema = external_exports.object({
+  key: WorkflowStepIdSchema,
+  name: external_exports.string().trim().min(1).max(120),
+  description: external_exports.string().max(2e3).default(""),
+  steps: external_exports.array(WorkflowStepSchema).min(1).max(30)
+});
+var ListedSeriesSchema = external_exports.object({
+  title: external_exports.string().trim().min(1).max(200),
+  description: external_exports.string().max(4e3).default(""),
+  assignees: ListedAssigneesSchema,
+  recurrence: RecurrenceSchema,
+  time: ClockTimeSchema,
+  /** Its results are also posted in a conversation (`@conversations`). */
+  postTo: external_exports.literal(LISTED_TABS.conversations).nullable().default(null),
+  approveResults: external_exports.boolean().default(false),
+  workflowKey: WorkflowStepIdSchema.nullable().default(null)
+});
+var ListedTriggerSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(120),
+  event: TriggerEventSchema,
+  task: external_exports.object({
+    title: external_exports.string().trim().min(1).max(200),
+    description: external_exports.string().max(4e3).default(""),
+    assignees: ListedAssigneesSchema,
+    workflowKey: WorkflowStepIdSchema.nullable().default(null)
+  })
+});
+var AgentListingContentSchema = external_exports.object({
+  agent: external_exports.object({
+    name: external_exports.string().trim().min(1).max(40),
+    title: external_exports.string().trim().max(60).default(""),
+    // An agent's own limits, so whatever's listed can be added.
+    description: external_exports.string().trim().min(1, "Say what it's for.").max(120),
+    instructions: external_exports.string().max(MAX_AGENT_INSTRUCTIONS).default(""),
+    /** One of the drawn faces; or "custom", with the listing's picture. */
+    avatar: external_exports.enum([...AGENT_AVATARS, "custom"])
+  }),
+  skills: external_exports.array(ListedSkillSchema).max(30).default([]),
+  connectors: external_exports.array(ListedConnectorSchema).max(10).default([]),
+  apps: external_exports.array(ListedAppSchema).max(3).default([]),
+  workflows: external_exports.array(ListedWorkflowSchema).max(10).default([]),
+  series: external_exports.array(ListedSeriesSchema).max(10).default([]),
+  triggers: external_exports.array(ListedTriggerSchema).max(10).default([])
+}).superRefine((content, ctx) => {
+  for (const problem of portabilityProblems(content))
+    ctx.addIssue({ code: "custom", ...problem });
+});
+function portabilityProblems(content) {
+  const problems = [];
+  const keys = new Set(content.workflows.map((w) => w.key));
+  const appTabs = new Set((content.apps ?? []).map(listedAppTab));
+  const agent = (id, path) => {
+    if (!AGENT_PLACEHOLDERS.includes(id)) {
+      problems.push({ message: "It can only use this agent or Tabby.", path });
+    }
+  };
+  const tab = (id, path) => {
+    if (!TAB_PLACEHOLDERS.includes(id) && !appTabs.has(id)) {
+      problems.push({ message: "It can only use a conversation, Docs or Tasks tab.", path });
+    }
+  };
+  const person = (id, path) => {
+    if (!ASSIGNEE_PLACEHOLDERS.includes(id)) {
+      problems.push({ message: "It can only be for this agent, Tabby or whoever adds it.", path });
+    }
+  };
+  const workflow = (key, path) => {
+    if (key !== null && !keys.has(key)) {
+      problems.push({ message: "It names a workflow the listing doesn't have.", path });
+    }
+  };
+  content.workflows.forEach((w, i) => {
+    if (content.workflows.findIndex((other) => other.key === w.key) !== i) {
+      problems.push({ message: "Workflows' keys must differ.", path: ["workflows", i, "key"] });
+    }
+    for (const step of allSteps(w.steps)) {
+      const at = ["workflows", i, "steps", step.id];
+      switch (step.kind) {
+        case "agent":
+          agent(step.agentId, at);
+          break;
+        case "post":
+          agent(step.agentId, at);
+          tab(step.tabId, at);
+          break;
+        case "create_task":
+          tab(step.tabId, at);
+          step.assigneeIds.forEach((id) => person(id, at));
+          break;
+        case "person":
+          person(step.assigneeId, at);
+          break;
+        case "if":
+          if (step.condition.op === "agent") agent(step.condition.agentId, at);
+          break;
+        case "app_action":
+          if (!appTabs.has(step.tabId)) {
+            problems.push({ message: "Its actions need an app the listing brings.", path: at });
+          }
+          break;
+      }
+    }
+  });
+  content.series.forEach((s, i) => workflow(s.workflowKey, ["series", i, "workflowKey"]));
+  content.triggers.forEach((t, i) => {
+    const at = ["triggers", i, "event"];
+    const event = t.event;
+    if (event.kind === "app") {
+      if (!appTabs.has(event.tabId)) {
+        problems.push({ message: "Its events need an app the listing brings.", path: at });
+      }
+    } else if (event.kind === "inbox") {
+      problems.push({ message: "A personal trigger (someone's Inbox) can't be listed.", path: at });
+    } else if (event.kind !== "webhook") tab(event.tabId, at);
+    if (event.kind === "message" && event.fromId !== null) person(event.fromId, at);
+    workflow(t.task.workflowKey, ["triggers", i, "task", "workflowKey"]);
+  });
+  return problems;
+}
+var ListingPublisherSchema = external_exports.object({
+  /** The workspace that publishes it, or Tabs & Spaces. */
+  name: external_exports.string(),
+  /** Made by Tabs & Spaces (decision 167): kept in our repository, listed as it changes. */
+  official: external_exports.boolean().default(false)
+});
+var ListingNeedsSchema = external_exports.object({
+  skills: external_exports.number().int().nonnegative(),
+  connectors: external_exports.number().int().nonnegative(),
+  workflows: external_exports.number().int().nonnegative(),
+  recurring: external_exports.number().int().nonnegative(),
+  triggers: external_exports.number().int().nonnegative(),
+  tabs: external_exports.number().int().nonnegative().default(0),
+  /** An agent's apps (decision 178). */
+  apps: external_exports.number().int().nonnegative().default(0),
+  actions: external_exports.number().int().nonnegative().default(0),
+  events: external_exports.number().int().nonnegative().default(0)
+});
+var ListingSummarySchema = external_exports.object({
+  id: external_exports.string(),
+  slug: external_exports.string(),
+  kind: ListingKindSchema,
+  name: external_exports.string(),
+  /** Its job title (agents), or a tagline. */
+  title: external_exports.string(),
+  description: external_exports.string(),
+  categories: external_exports.array(ListingCategorySchema),
+  avatar: external_exports.string(),
+  /** Its own picture's address, if it has one. */
+  pictureUrl: external_exports.string().nullable(),
+  publisher: ListingPublisherSchema,
+  version: external_exports.number().int().positive(),
+  installs: external_exports.number().int().nonnegative(),
+  needs: ListingNeedsSchema,
+  publishedAt: external_exports.iso.datetime(),
+  updatedAt: external_exports.iso.datetime()
+});
+var ListingSearchSchema = external_exports.object({
+  listings: external_exports.array(ListingSummarySchema),
+  total: external_exports.number().int().nonnegative()
+});
+var ListingImageViewSchema = external_exports.object({
+  id: external_exports.string(),
+  url: external_exports.string(),
+  caption: external_exports.string()
+});
+var ListingPage = ListingSummarySchema.extend({
+  /** A longer account of it, in Markdown. */
+  about: external_exports.string(),
+  /** What changed in this version. */
+  changes: external_exports.string(),
+  /** Screenshots and pictures of it at work (decision 202), in order. */
+  images: external_exports.array(ListingImageViewSchema).default([])
+});
+var AgentListingSchema = ListingPage.extend({
+  kind: external_exports.literal("agent"),
+  content: AgentListingContentSchema
+});
+var AppListingSchema = ListingPage.extend({
+  kind: external_exports.literal("app"),
+  content: external_exports.lazy(() => AppListingContentSchema)
+});
+var ListingSchema = external_exports.discriminatedUnion("kind", [AgentListingSchema, AppListingSchema]);
+var ListingResponseSchema = external_exports.object({ listing: ListingSchema });
+var ListingPictureSchema = external_exports.object({
+  type: external_exports.enum(["image/png", "image/jpeg", "image/webp"]),
+  base64: external_exports.string().max(35e4, "The picture is too big (256 kB at most).").regex(/^[A-Za-z0-9+/]+=*$/)
+});
+var MAX_LISTING_IMAGES = 6;
+var MAX_LISTING_IMAGE_BYTES = 1048576;
+var ListingImageIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "An image's id.");
+var ImageCaption = external_exports.string().trim().max(140, "A caption is 140 characters at most.").default("");
+var ListingImageSchema = external_exports.union([
+  external_exports.object({
+    type: external_exports.enum(["image/png", "image/jpeg", "image/webp"]),
+    base64: external_exports.string().max(Math.ceil(MAX_LISTING_IMAGE_BYTES / 3) * 4, "An image is 1 MB at most.").regex(/^[A-Za-z0-9+/]+=*$/),
+    caption: ImageCaption
+  }).strict(),
+  external_exports.object({ id: ListingImageIdSchema, caption: ImageCaption }).strict()
+]);
+var ListingImages = external_exports.array(ListingImageSchema).max(MAX_LISTING_IMAGES, `${MAX_LISTING_IMAGES} images at most.`).default([]);
+var PrivacyUrlSchema = external_exports.url({ protocol: /^https$/, message: "The privacy policy's address, starting https://." }).max(500);
+var AppListingContentSchema = external_exports.object({
+  app: external_exports.object({
+    /** Its manifest's `id`. */
+    id: external_exports.string().min(3).max(64),
+    name: external_exports.string().trim().min(1).max(40),
+    /** A line about it. */
+    title: external_exports.string().trim().max(60).default(""),
+    description: external_exports.string().trim().min(1).max(300),
+    // https, as installing requires (http only where a deployment allows private networks).
+    manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+    /**
+     * The manifest we reviewed (decision 203): installing from the listing refuses
+     * another. Ours have none (we serve them, and change them as we deploy).
+     */
+    manifestHash: ManifestHashSchema.optional(),
+    /**
+     * Its developer's privacy policy (decision 205): what happens to the data
+     * the app is sent. Every workspace's app has one; ours are on our site.
+     */
+    privacyUrl: PrivacyUrlSchema.optional()
+  }),
+  tabs: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().max(40),
+      name: external_exports.string().max(40),
+      description: external_exports.string().max(200).default("")
+    })
+  ).min(1).max(10),
+  actions: external_exports.array(
+    external_exports.object({
+      name: external_exports.string().max(40),
+      description: external_exports.string().max(300),
+      changes: external_exports.boolean()
+    })
+  ).max(20).default([]),
+  events: external_exports.array(external_exports.object({ name: external_exports.string().max(40), description: external_exports.string().max(300) })).max(20).default([])
+});
+var DraftCommon = {
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  picture: ListingPictureSchema.nullable().default(null),
+  images: ListingImages
+};
+var AgentListingDraftSchema = external_exports.object({
+  kind: external_exports.literal("agent"),
+  ...DraftCommon,
+  content: AgentListingContentSchema
+});
+var ListingDraftSchema = external_exports.discriminatedUnion("kind", [
+  AgentListingDraftSchema,
+  external_exports.object({ kind: external_exports.literal("app"), ...DraftCommon, content: AppListingContentSchema })
+]);
+var PublishedFrom = {
+  /** Its listing, for a new version (one this workspace published). */
+  listingId: external_exports.string().max(64).nullable().default(null),
+  workspace: external_exports.object({ id: external_exports.string().min(1).max(64), name: external_exports.string().trim().min(1).max(120) }),
+  /** Who sent it (we write to them about the review; never shown). */
+  publishedBy: external_exports.object({ name: external_exports.string().trim().min(1).max(120), email: external_exports.email() }),
+  /**
+   * The publisher terms' version its sender accepted just now (decision 205;
+   * null: the workspace accepted these terms before).
+   */
+  acceptedTerms: external_exports.string().max(20).nullable().default(null)
+};
+var ControlPublishAppSchema = external_exports.object({
+  kind: external_exports.literal("app"),
+  ...DraftCommon,
+  manifestUrl: external_exports.url({ protocol: /^https?$/, message: "The manifest's address." }).max(500),
+  manifestHash: ManifestHashSchema,
+  privacyUrl: PrivacyUrlSchema,
+  ...PublishedFrom
+});
+var ControlPublishListingSchema = external_exports.discriminatedUnion("kind", [
+  AgentListingDraftSchema.extend(PublishedFrom),
+  ControlPublishAppSchema
+]);
+var ListingStatusSchema = external_exports.enum(["pending", "approved", "rejected", "removed"]);
+var PublishedListingSchema = external_exports.object({
+  id: external_exports.string(),
+  slug: external_exports.string(),
+  kind: ListingKindSchema,
+  name: external_exports.string(),
+  /** The version everyone sees (null: none approved yet). */
+  liveVersion: external_exports.number().int().positive().nullable(),
+  /** The newest version and its review. */
+  latest: external_exports.object({
+    version: external_exports.number().int().positive(),
+    status: external_exports.enum(["pending", "approved", "rejected"]),
+    /** Why we didn't list it. */
+    reason: external_exports.string().nullable(),
+    submittedAt: external_exports.iso.datetime()
+  }),
+  /** Taken down by us (with why), or by the workspace. */
+  removed: external_exports.object({ reason: external_exports.string(), at: external_exports.iso.datetime() }).nullable(),
+  installs: external_exports.number().int().nonnegative()
+});
+var PublishedListingsSchema = external_exports.object({
+  listings: external_exports.array(PublishedListingSchema),
+  /**
+   * The workspace's token (decision 203): an app's manifest names it in
+   * `marketplace.verify` to say this workspace may publish it.
+   */
+  publisherToken: external_exports.string().nullable().default(null),
+  /** The publisher terms (decision 205), and the version this workspace accepted. */
+  terms: external_exports.object({ version: external_exports.string(), url: external_exports.string(), accepted: external_exports.string().nullable() }).nullable().default(null)
+});
+var PublisherTermsSchema = external_exports.object({
+  version: external_exports.string(),
+  url: external_exports.string(),
+  /** This workspace accepted this version. */
+  accepted: external_exports.boolean()
+});
+var ListingStatusRequestSchema = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1).max(64)).min(1).max(100)
+});
+var ListingStatusesSchema = external_exports.object({
+  listings: external_exports.array(
+    external_exports.object({
+      id: external_exports.string(),
+      /** Live, for anyone to add. */
+      listed: external_exports.boolean(),
+      /** Taken down by Tabs & Spaces, and why (its workspace taking it out isn't this). */
+      takenDown: external_exports.object({ reason: external_exports.string(), at: external_exports.iso.datetime() }).nullable()
+    })
+  )
+});
+var PublishingItemSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  /** A line about it ("ClawHub: @acme/notes", "Every Friday at 16:00"). */
+  detail: external_exports.string(),
+  /** Ticked to start with. */
+  suggested: external_exports.boolean(),
+  /** Why it can't be listed (empty: it can). */
+  problems: external_exports.array(external_exports.string())
+});
+var AgentPublishingSchema = external_exports.object({
+  /** This deployment is registered with Tabs & Spaces (publishing needs it). */
+  registered: external_exports.boolean(),
+  /** The agent's listing, if it was published. */
+  listing: PublishedListingSchema.nullable(),
+  /** Its live version's words, to start a new version from. */
+  previous: external_exports.object({
+    categories: external_exports.array(ListingCategorySchema),
+    about: external_exports.string(),
+    /** Its images, kept by id unless they're taken out (decision 202). */
+    images: external_exports.array(ListingImageViewSchema).default([])
+  }).nullable(),
+  /** Where the marketplace shows a listing (its slug follows). */
+  listingBase: external_exports.string(),
+  /** The publisher terms (null: not registered, or unknown). */
+  terms: PublisherTermsSchema.nullable().default(null),
+  skills: external_exports.array(PublishingItemSchema),
+  connectors: external_exports.array(PublishingItemSchema),
+  /** Spaces where it has workflows, recurring tasks or triggers. */
+  spaces: external_exports.array(external_exports.object({ id: external_exports.string(), name: external_exports.string() })),
+  /** The space whose work is shown below (null: none). */
+  spaceId: external_exports.string().nullable(),
+  workflows: external_exports.array(PublishingItemSchema),
+  series: external_exports.array(PublishingItemSchema),
+  triggers: external_exports.array(PublishingItemSchema)
+});
+var PublishAgentRequestSchema = external_exports.object({
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  spaceId: external_exports.string().max(64).nullable().default(null),
+  skills: external_exports.array(external_exports.string().max(200)).max(30).default([]),
+  connectors: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  workflows: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  series: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  triggers: external_exports.array(external_exports.string().max(64)).max(10).default([]),
+  images: ListingImages,
+  /** The publisher terms' version accepted now (decision 205; left out: accepted before). */
+  acceptTerms: external_exports.string().max(20).optional()
+}).strict();
+var PublishedListingResponseSchema = external_exports.object({ listing: PublishedListingSchema });
+var AppPublishingSchema = external_exports.object({
+  /** This deployment is registered with Tabs & Spaces (publishing needs it). */
+  registered: external_exports.boolean(),
+  /** The app's listing, if this workspace published it. */
+  listing: PublishedListingSchema.nullable(),
+  /** Its live version's words and images, to start a new version from. */
+  previous: external_exports.object({
+    categories: external_exports.array(ListingCategorySchema),
+    about: external_exports.string(),
+    images: external_exports.array(ListingImageViewSchema).default([]),
+    privacyUrl: external_exports.string().nullable().default(null)
+  }).nullable(),
+  listingBase: external_exports.string(),
+  terms: PublisherTermsSchema.nullable().default(null),
+  /** What its manifest says to name this workspace (null: not registered, or unknown). */
+  publisherToken: external_exports.string().nullable(),
+  /** The installed manifest names it. */
+  verified: external_exports.boolean(),
+  /** Why it can't be sent yet, as the installed manifest stands. */
+  problems: external_exports.array(external_exports.string())
+});
+var PublishAppRequestSchema = external_exports.object({
+  categories: external_exports.array(ListingCategorySchema).min(1, "Choose a category.").max(3),
+  about: external_exports.string().max(1e4).default(""),
+  changes: external_exports.string().max(2e3).default(""),
+  images: ListingImages,
+  privacyUrl: PrivacyUrlSchema,
+  acceptTerms: external_exports.string().max(20).optional()
+}).strict();
+var PublishingKeySchema = external_exports.object({
+  id: external_exports.string(),
+  /** Its first characters, to tell keys apart (the rest is never shown again). */
+  prefix: external_exports.string(),
+  createdBy: external_exports.object({ name: external_exports.string() }),
+  createdAt: external_exports.iso.datetime(),
+  lastUsedAt: external_exports.iso.datetime().nullable()
+});
+var PublishingKeysSchema = external_exports.object({ keys: external_exports.array(PublishingKeySchema) });
+var CreatedPublishingKeySchema = external_exports.object({
+  key: PublishingKeySchema,
+  /** Shown once: `tands publish` sends it (TANDS_PUBLISH_KEY). */
+  secret: external_exports.string()
+});
+var KeyPublishRequestSchema = external_exports.object({ changes: external_exports.string().max(2e3).default("") }).strict();
+var KeyPublishResultSchema = external_exports.object({
+  app: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  listing: PublishedListingSchema,
+  /** The installed manifest changed (checked for updates first). */
+  updated: external_exports.boolean()
+});
+var MarketplaceBrowseSchema = external_exports.object({
+  /** Off: its deployment's admins turned the marketplace off. */
+  enabled: external_exports.boolean(),
+  listings: external_exports.array(ListingSummarySchema),
+  total: external_exports.number().int().nonnegative(),
+  /** Listings this workspace has added: listing id → its agent. */
+  added: external_exports.record(external_exports.string(), external_exports.string()),
+  /** Workspace owners and admins add them (skills and connectors are theirs to set up). */
+  canAdd: external_exports.boolean()
+});
+var MarketplaceListingSchema = external_exports.object({
+  listing: ListingSchema,
+  /** The agent it was added as, if it was. */
+  addedAs: external_exports.string().nullable(),
+  /** What the workspace has already (it's shared, not added twice). */
+  has: external_exports.object({ skills: external_exports.array(external_exports.string()), connectors: external_exports.array(external_exports.string()) }),
+  /**
+   * How each of its connectors signs in here (by its place in the listing):
+   * a known server (GitHub) uses OAuth where this deployment registered its
+   * app, else each person's own key in `headerName` (decision 167).
+   */
+  connectorAuth: external_exports.array(
+    external_exports.object({
+      auth: external_exports.enum(["none", "header", "oauth"]),
+      headerName: external_exports.string().nullable(),
+      keyHint: external_exports.string().nullable()
+    })
+  ).default([]),
+  canAdd: external_exports.boolean()
+});
+var AddListingRequestSchema = external_exports.object({
+  /** Where its work goes (needed when it has some). */
+  spaceId: external_exports.string().max(64).nullable().default(null),
+  /** Its recurring tasks' time zone: the adder's. */
+  timeZone: external_exports.string().min(1).max(64),
+  /** Keys for its connectors that sign in with one, by the connector's place in the listing. */
+  keys: external_exports.record(external_exports.string().regex(/^\d{1,2}$/), external_exports.string().trim().min(1).max(4e3)).default({})
+}).strict();
+var AddedStepSchema = external_exports.object({
+  what: external_exports.enum([
+    "agent",
+    "picture",
+    "skill",
+    "connector",
+    "space",
+    "workflow",
+    "series",
+    "trigger",
+    "app",
+    "tab"
+  ]),
+  name: external_exports.string(),
+  ok: external_exports.boolean(),
+  /** Why it didn't work (it can be done by hand). */
+  message: external_exports.string().nullable()
+});
+var AddListingResultSchema = external_exports.object({
+  /** The agent it was added as. */
+  agent: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  steps: external_exports.array(AddedStepSchema),
+  /** Connectors waiting for an OAuth sign-in. */
+  signIns: external_exports.array(external_exports.object({ connectorId: external_exports.string(), name: external_exports.string() }))
+});
+var AddAppListingRequestSchema = external_exports.object({ spaceId: external_exports.string().max(64).nullable().default(null) }).strict();
+var AddAppListingResultSchema = external_exports.object({
+  /** The app, installed (or updated, if it was). */
+  app: external_exports.object({ id: external_exports.string(), name: external_exports.string() }),
+  /** Its tab, where it was added. */
+  tab: external_exports.object({ spaceId: external_exports.string(), tabId: external_exports.string() }).nullable(),
+  steps: external_exports.array(AddedStepSchema)
+});
+
 // src/harness.ts
 import { createHash, generateKeyPairSync, randomBytes, sign } from "node:crypto";
 import { createServer } from "node:http";
@@ -23254,6 +24336,7 @@ function checkManifest(json2, url2) {
     manifest2.tabs.forEach((tab) => onOrigin(tab.url, `tabs.${tab.id}.url`));
     for (const [name, action] of Object.entries(manifest2.actions ?? {})) {
       onOrigin(action.url, `actions.${name}.url`);
+      if (action.view) onOrigin(action.view.url, `actions.${name}.view.url`);
     }
     if (manifest2.icon) onOrigin(manifest2.icon, "icon");
   }
@@ -23329,6 +24412,7 @@ function harnessPage() {
   input, select, textarea { width: 100%; padding: 7px 9px; border: 1px solid var(--border); border-radius: 8px; background: var(--surface); }
   button { padding: 7px 12px; border-radius: 8px; border: 1px solid var(--border); background: var(--canvas); cursor: pointer; }
   button.primary { background: var(--accent); color: var(--canvas); border-color: var(--accent); }
+  button[aria-pressed="true"] { background: var(--text); color: var(--canvas); border-color: var(--text); }
   .frame { display: flex; flex-direction: column; }
   .frame .bar { display: flex; align-items: center; gap: 8px; padding: 10px 14px; border-bottom: 1px solid var(--border); color: var(--muted); font-size: 12px; }
   .frame .bar code { color: var(--text); }
@@ -23352,6 +24436,7 @@ function harnessPage() {
   <strong>App harness</strong><span class="muted" id="appName"></span>
   <span class="spacer"></span>
   <button type="button" id="theme">Dark</button>
+  <button type="button" id="readOnly" aria-pressed="false" title="As when its bill is unpaid: reads work, writes are refused">Read-only</button>
   <button type="button" id="reset">Clear data</button>
 </header>
 <div id="problems" class="problems" hidden></div>
@@ -23395,6 +24480,8 @@ function harnessPage() {
 const $ = (id) => document.getElementById(id);
 const frame = $("frame");
 let theme = "light";
+// The workspace read-only (an unpaid bill): the page is told, and writes are refused.
+let readOnly = false;
 let info = null;
 let origin = null;
 
@@ -23402,7 +24489,7 @@ const post = async (path, body) => {
   const response = await fetch(path, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
   return response.json();
 };
-const who = () => Object.fromEntries(new FormData($("who")));
+const who = () => ({ ...Object.fromEntries(new FormData($("who"))), readOnly });
 const send = (message) => frame.contentWindow?.postMessage({ tands: 1, ...message }, origin);
 const reply = (id, out) =>
   out && out.error ? send({ type: "error", id, code: out.error.code, message: out.error.message }) : send({ type: "data", id, result: out.result });
@@ -23505,6 +24592,11 @@ $("theme").addEventListener("click", () => {
   $("theme").textContent = theme === "light" ? "Dark" : "Light";
   send({ type: "theme", theme });
 });
+$("readOnly").addEventListener("click", () => {
+  readOnly = !readOnly;
+  $("readOnly").setAttribute("aria-pressed", String(readOnly));
+  send({ type: "readOnly", readOnly });
+});
 $("reset").addEventListener("click", async () => { await post("/harness/reset", {}); void refresh(); });
 void load().then(refresh);
 setInterval(refresh, 2000);
@@ -23674,6 +24766,9 @@ function createMemoryStore() {
 }
 
 // src/harness.ts
+var READING = /* @__PURE__ */ new Set(["values.get", "values.list", "records.list", "records.get"]);
+var READ_ONLY_MESSAGE = "This workspace is read-only until its bill is paid.";
+var writes = (request) => !READING.has(String(request?.op));
 var ACTION_TOKEN_SECONDS = 120;
 var DATA_KEY_MS = 5 * 6e4;
 var ACTION_TIMEOUT_MS = 1e4;
@@ -23722,7 +24817,12 @@ async function startHarness({
     const spaceId = idFrom("s", who.spaceName || "Design");
     return {
       user: { id: idFrom("u", who.name || "Ada Lovelace"), name: who.name || "Ada Lovelace" },
-      workspace: { id: "dev-workspace", slug: "dev", name: "Harness workspace" },
+      workspace: {
+        id: "dev-workspace",
+        slug: "dev",
+        name: "Harness workspace",
+        readOnly: who.readOnly === true
+      },
       space: { id: spaceId, kind: who.spaceKind, name: who.spaceName || "Design" },
       tab: { id: `${spaceId}-${who.appTabId}`, appTabId: who.appTabId },
       app: { id: manifest2.id },
@@ -23757,7 +24857,7 @@ async function startHarness({
   }
   const isWho = (value) => {
     const who = value;
-    return typeof who?.name === "string" && typeof who.spaceName === "string" && typeof who.locale === "string" && typeof who.appTabId === "string" && ["normal", "general", "personal", "dm"].includes(String(who.spaceKind));
+    return typeof who?.name === "string" && typeof who.spaceName === "string" && typeof who.locale === "string" && typeof who.appTabId === "string" && (who.readOnly === void 0 || typeof who.readOnly === "boolean") && ["normal", "general", "personal", "dm"].includes(String(who.spaceKind));
   };
   function logEvent(loaded, body, from, person) {
     const manifest2 = loaded.manifest;
@@ -23887,6 +24987,9 @@ async function startHarness({
       }
       const loaded2 = await current();
       if (!loaded2.manifest) return refused2(409, "BAD_MANIFEST", loaded2.problems.join(" "));
+      if (claims.who.readOnly && (url2.pathname === "/api/apps/events" || writes(body))) {
+        return refused2(423, "WORKSPACE_READ_ONLY", READ_ONLY_MESSAGE);
+      }
       if (url2.pathname === "/api/apps/events") {
         const outcome2 = logEvent(loaded2, body, "server", claims.who.name);
         return "error" in outcome2 ? send(outcome2.status, { error: outcome2.error }) : send(200, { result: outcome2.result });
@@ -23903,6 +25006,9 @@ async function startHarness({
       return refused2(404, "NOT_FOUND", `${manifest2.name} has no tab \u201C${who.appTabId}\u201D.`);
     }
     const context = contextFor(who, manifest2);
+    if (who.readOnly && (url2.pathname === "/harness/event" || url2.pathname === "/harness/data" && writes(body.request))) {
+      return refused2(423, "WORKSPACE_READ_ONLY", READ_ONLY_MESSAGE);
+    }
     switch (url2.pathname) {
       case "/harness/token": {
         const tab = manifest2.tabs.find((one) => one.id === who.appTabId);
@@ -23948,6 +25054,49 @@ async function startHarness({
   };
 }
 
+// src/publish.ts
+async function publish({
+  url: url2,
+  key,
+  changes = "",
+  fetchImpl = fetch
+}) {
+  let origin;
+  try {
+    origin = new URL(url2).origin;
+  } catch {
+    return { ok: false, message: `\u201C${url2}\u201D isn't a web address (TANDS_URL).` };
+  }
+  let response;
+  try {
+    response = await fetchImpl(`${origin}/api/publish/app`, {
+      method: "POST",
+      headers: { authorization: `Bearer ${key}`, "content-type": "application/json" },
+      body: JSON.stringify({ changes }),
+      signal: AbortSignal.timeout(6e4)
+    });
+  } catch (error62) {
+    return {
+      ok: false,
+      message: `${origin} can't be reached: ${error62 instanceof Error ? error62.message : String(error62)}`
+    };
+  }
+  const json2 = await response.json().catch(() => null);
+  if (!response.ok || !json2?.app || !json2.listing) {
+    return {
+      ok: false,
+      message: json2?.error?.message ?? `${origin} answered HTTP ${response.status}.`
+    };
+  }
+  return {
+    ok: true,
+    app: json2.app,
+    version: json2.listing.latest.version,
+    live: json2.listing.liveVersion,
+    updated: Boolean(json2.updated)
+  };
+}
+
 // src/scaffold.ts
 import { existsSync } from "node:fs";
 import { copyFile, mkdir, readdir, writeFile } from "node:fs/promises";
@@ -24212,7 +25361,7 @@ your manifest's address. See https://developer.tabsandspaces.dev.
 `;
 
 // src/bin.ts
-var version2 = true ? "0.1.0" : "dev";
+var version2 = true ? "0.3.0" : "dev";
 var USAGE = `tands: developer tools for Tabs & Spaces apps
 
   tands new <folder> [--name "My app"] [--id my-app]
@@ -24227,13 +25376,21 @@ var USAGE = `tands: developer tools for Tabs & Spaces apps
       choose, with your data in memory, your events and your actions.
       Default: http://localhost:5480/tands.json
 
+  tands publish [--changes "What changed"]
+      Sends a new version of your app to the marketplace for review. Its
+      workspace checks it for updates first, then sends it with its listing's
+      words and images. Needs TANDS_URL (the workspace's address) and
+      TANDS_PUBLISH_KEY (a key from Settings \u2192 Apps \u2192 Publish\u2026 there).
+
   tands --version
 
 Docs: https://developer.tabsandspaces.dev`;
 async function main(argv, {
   cwd = process.env.INIT_CWD ?? process.cwd(),
-  out = (line) => console.log(line),
-  err = (line) => console.error(line)
+  out = (line2) => console.log(line2),
+  err = (line2) => console.error(line2),
+  env = process.env,
+  fetchImpl = fetch
 } = {}) {
   const { values, positionals } = parseArgs({
     args: argv,
@@ -24242,6 +25399,7 @@ async function main(argv, {
       name: { type: "string" },
       id: { type: "string" },
       port: { type: "string" },
+      changes: { type: "string" },
       help: { type: "boolean", short: "h" },
       version: { type: "boolean", short: "v" }
     }
@@ -24334,6 +25492,29 @@ async function main(argv, {
         return 1;
       }
     }
+    case "publish": {
+      const url2 = env.TANDS_URL?.trim();
+      const key = env.TANDS_PUBLISH_KEY?.trim();
+      if (!url2 || !key) {
+        err("tands publish needs your workspace's address and a publishing key:");
+        err("  TANDS_URL=https://your.workspace TANDS_PUBLISH_KEY=tas-pk-\u2026 npx tands publish");
+        err("Make the key in the workspace: Settings \u2192 Apps \u2192 Publish\u2026 \u2192 Make a key.");
+        return 1;
+      }
+      const sent = await publish({ url: url2, key, changes: values.changes ?? "", fetchImpl });
+      if (!sent.ok) {
+        err(sent.message);
+        return 1;
+      }
+      out(
+        `\u2713 Sent ${sent.app.name} (${sent.app.id}) version ${sent.version} to the marketplace for review.`
+      );
+      if (sent.updated) out("  Its workspace had an older manifest: it's up to date now.");
+      out(
+        sent.live ? `  Version ${sent.live} stays listed until it's reviewed; you'll get an email then.` : "  You'll get an email when it's reviewed."
+      );
+      return 0;
+    }
     default:
       err(`There's no command \u201C${command}\u201D.`);
       out(USAGE);