Modules

Keeper control plane for Wippy development, governance, agents, tasks, MCP, and runtime operations

KickSide uploads — upload API, storage pipeline, preview endpoints, artifact storage, file capabilities, and default text/image/document processors.

KickSide settings — runtime, admin-editable, DB-backed application settings. Modules declare typed setting definitions in the registry; the DB stores only admin overrides; reads fall back to declared defaults.

KickSide connections — provider credentials, resource discovery, and reply targets as components.

Typed executable Blocks for headless and visual Flow composition.

KickSide Widgets — shared UI web components reused across modules. Ships icon/model/multiselect/schedule pickers used by agents, knowledge, skills, and navigation appearance.

KickSide Models — the LLM model catalog, app-level provider profiles, DB-backed model overlays, resolver binding, discovery APIs, and settings web component. Registry ships defaults; runtime profiles/discovered models live in DB/cache.

The generic install/control/uninstall engine for the unified automation model.

KickSide users — auth, token storage, user/group persistence, directory lookup, per-user profile field store, admin API, and admin web component.

KickSide knowledge bases — KB registry, document/graph KB schema and data-access stores, ingestion/injection workers, concept-graph enrichment, and a user-facing CRUD API.

KickSide user agents — agent/tool registries, user-created agent components, the agent resolver, runner, and capability library, with a user-facing CRUD API.

KickSide security — scope and policy administration surface for app-owned security scopes.

KickSide dashboard — a registry-driven deployment overview. Discovers the installed navigable surfaces (view.components / ui.nav_items) and renders each as a card with the human description pulled from the entry meta and the owning module's ns.definition. No hardcoded module list; the page reflects whatever is installed.

KickSide inbox — central review/approval inbox with declarative, web-component-rendered item types and realtime updates.

Renders a PDF from a URL or a binary blob into per-page PNG, JPEG, or WEBP images

KickSide OAuth — OAuth 2.0 connection management with PKCE, encrypted token storage, and background refresh. Exposes the connector + oauth_connection contracts that provider plugins bind to.

KickSide Content Renderers — isolated, reusable content-viewer web components. <wc-resource-view> host picks + mounts a viewer (<wc-render-markdown>/<wc-render-pdf>/<wc-render-image>) by content-type; each viewer is its own lazy bundle so heavy deps never enter a host. Used by the wiki, uploads, inbox, anywhere a resource needs inline rendering.

Shared item transform (none, expr, llm, code, or func) that maps a source item into sink or endpoint input.

Base contracts for userspace components

Multi-user-safe Streamable HTTP MCP connections and dynamic agent tools for KickSide.