Modules

e2e cross-env queue fix validation (incident 2026-05-18)

Kickside KB10 — the document/graph knowledge-base engine. Owns the kb10_* schema and node/edge/embedding store, durable embeddable/queryable/deletable bindings, and the kb_store engine contract used by kickside/knowledge.

System monitor — stats collector and TUI dashboard for Wippy applications

Self-modifying development agent that builds its own tools at runtime

Kickside Transfer — export and import a user's own components (and their backing data) between environments. Owns the exportable-component picker, the batch orchestrator, archive packaging, and the export/import API.

Document analysis and field extraction

Kickside webhooks — user-minted, secret-secured, schema-validated public webhook endpoints. Each webhook is a thread-backed component (class kickside.webhooks) that acts as a data-flow trigger source; the public endpoint verifies the secret, validates the body against the webhook's declared schema, and appends it as a thread event the poller drains.

Docker integration for Wippy - container, image, network, and volume management over the daemon socket with declarative container reconcile

Kickside Atlassian — Jira and Confluence provider. Self-declares as an oauth_provider discovered by kickside/oauth (3LO) and supports stored-credential connections (Cloud API token / Server PAT). Ships agent tools (JiraRead/JiraWrite, ConfluenceRead/ConfluenceWrite) over a shared authenticated transport.

Kickside webscout — web research tools and an installable GTM candidate scan through Google Custom Search.

Kickside Discord provider — bot-token connection, reply provider, resource discovery, normalized inbound adapter for DM/channel bots, and data-sync source/sink for channel messages.

Kickside Google — Google OAuth connection provider, agent traits and connection picker for Gmail, Drive, Calendar, Docs, Sheets, Slides, Contacts and Analytics.

Kickside MCP — user- and workspace-scoped Model Context Protocol endpoints. A user mints a scoped bearer credential whose synthetic principal is granted, over a chosen component subtree (their account root or a workspace slice), only the access the owner themselves holds. A single stateless streamable-HTTP endpoint multiplexes every credential; two-layer authz (tool allowlist + the native component access model) gates each call. Tokens are hashed at rest and shown once.

Kickside PhantomBuster — API-key connection provider with agent discovery, read/write tools, and an installable GTM candidate pull.

Kickside DM — bridges inbound external direct messages onto private, user-owned agent chats. After pairing an external identity to an internal user (surfaced via inbox), a DM is backed by a user-owned kickside.core thread; a provider-chosen automation runs the agent on it under the user's actor, and replies go back out via kickside.connection.

OAuth 2.0 connection management with PKCE support

Kickside llm-ocr — LLM-based OCR for scanned/image-only documents. Transcribes stored page screenshots into text and supersedes empty extracted content, with an admin-editable model pointer.

Kickside Fireflies — API-key connection provider for Fireflies.ai meeting transcripts, with agent read tools.

Kickside HubSpot — private-app-token connection provider for the HubSpot CRM, with split read/write agent tools over contacts, companies, deals, and tasks.

Kickside skills — reusable agent procedures stored as a component plus a versioned markdown body. Owns the skills + skill_versions schema and store, a six-route CRUD/read API, and the Skills agent capability (dual-mode Skill tool + pin-by-context build func) that agents discover via the registry.