@8wave/ai-elements 0.114.0 → 0.115.0-beta.16

package/dist-vue/locales.js

@@ -266,6 +266,7 @@ var e = {
 		comment: "Comment",
 		file: "File",
 		message: "Message",
+		messageNumber: "Message {n}",
 		tokens: "tokens",
 		answeringOnTheCall: "Answering…",
 		conversationOutline: "Conversation outline",
@@ -367,6 +368,7 @@ var e = {
 		voiceId: "Cloned voices are not listed: the provider forbids them here.",
 		freshnessScaleExplanationMonths: "A document updated today gets a +{weight} bonus. This bonus halves to +{halfWeight} after {half} days and practically drops to zero (+{zeroWeight}) after {zero} days (approx. {months} months).",
 		freshnessScaleExplanationDays: "A document updated today gets a +{weight} bonus. This bonus halves to +{halfWeight} after {half} days and practically drops to zero (+{zeroWeight}) after {zero} days.",
+		reasoningVisibility: "A reasoning agent is always visible to the members of its organization only.",
 		agentOnOwnEndpoint: "This agent runs on your organization's endpoint.",
 		providerTimeoutMs: "Timeout in milliseconds before falling back to the next provider (min 1000, max 789000). BYOK credentials only.",
 		showExtendedSteps: "Shows reasoning and tool calls as an expandable timeline in the chat.",
@@ -857,6 +859,7 @@ var e = {
 		comment: "Commento",
 		file: "File",
 		message: "Messaggio",
+		messageNumber: "Messaggio {n}",
 		tokens: "token",
 		answeringOnTheCall: "Sto rispondendo…",
 		conversationOutline: "Indice della conversazione",
@@ -958,6 +961,7 @@ var e = {
 		voiceId: "Le voci clonate non sono in elenco: il fornitore non le ammette qui.",
 		freshnessScaleExplanationMonths: "Un documento modificato oggi ottiene un bonus di +{weight}. Il bonus si dimezza a +{halfWeight} dopo {half} giorni e si azzera praticamente (+{zeroWeight}) dopo {zero} giorni (circa {months} mesi).",
 		freshnessScaleExplanationDays: "Un documento modificato oggi ottiene un bonus di +{weight}. Il bonus si dimezza a +{halfWeight} dopo {half} giorni e si azzera praticamente (+{zeroWeight}) dopo {zero} giorni.",
+		reasoningVisibility: "Un agente reasoning è sempre visibile solo ai membri dell'organizzazione.",
 		agentOnOwnEndpoint: "Questo agente gira sull’endpoint della tua organizzazione.",
 		providerTimeoutMs: "Timeout in millisecondi prima di passare al provider successivo (min 1000, max 789000). Solo credenziali BYOK.",
 		showExtendedSteps: "Visualizza la timeline con il ragionamento e gli strumenti nella chat.",

package/dist-vue/packages/auth/src/active-membership.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The role `userId` holds in `organizationId` now, or `null` when they are
+ * not a member. A role is cached, an absence is not: a membership created
+ * after a refusal is seen on the next request, so the paths that add members
+ * have nothing to invalidate.
+ */
+export declare function currentMemberRole(userId: string, organizationId: string): Promise<string | null>;
+type OrganizationSession = {
+    userId: string;
+    activeOrganizationId?: string | null;
+    organizationRole?: string | null;
+};
+/**
+ * The session as a request may trust it: its active organization only while
+ * the user is still a member of it, and the role they hold there now.
+ *
+ * The two fields are written when the organization is activated and nothing
+ * rewrites them when the membership changes. Every service reads the tenant
+ * from the first and every permission from the second, so a member removed
+ * from an organization kept reading and writing it for the life of their
+ * session (90 days, renewed daily), and a demoted admin kept the admin rules.
+ * A session whose organization was unset kept the role it had there, which
+ * still opened the audience gates.
+ */
+export declare function withCurrentMembership<T extends OrganizationSession>(session: T): Promise<T>;
+/**
+ * Brings the stored sessions of `userId` in line with their membership of
+ * `organizationId`, after a write to it: a new role replaces the old one, a
+ * membership that is gone takes the active organization with it. Call it
+ * after every role change and every removal. The request check does not
+ * depend on it, it reads the membership itself, but the client does: it
+ * reads its organization and role from the session. The role is read from
+ * the database, not the cache, which a request may still be refilling.
+ */
+export declare function syncSessionsWithMembership(userId: string, organizationId: string): Promise<void>;
+export {};

package/dist-vue/packages/auth/src/add-member-to-organization.d.ts

@@ -5,7 +5,11 @@
  * because the organization is full. An automatic join does not take a seat
  * an open invitation holds either, and a skipped one is not retried at the
  * next sign-in: the person joins through an invitation once a seat is free.
+ *
+ * The role has no default: it used to be `member`, and the external login,
+ * which did not pass one, made every visitor of the widget a member with the
+ * frontoffice of the organization, whatever its configuration said.
  */
-export declare function addMemberToOrganizationIfNotExists(userId: string, organizationId: string, role?: string, { respectMemberLimit }?: {
+export declare function addMemberToOrganizationIfNotExists(userId: string, organizationId: string, role: string, { respectMemberLimit }?: {
     respectMemberLimit?: boolean;
 }): Promise<boolean>;

package/dist-vue/packages/auth/src/passkey-policy-client-plugin.d.ts

@@ -1,7 +1,7 @@
 import { BetterFetch } from 'better-auth/client';
 /**
  * Client counterpart of the server `passkeyPolicy()` plugin, see
- * docs/specs/two-factor-authentication.md, D10.
+ * docs/specs/released/two-factor-authentication.md, D10.
  */
 export declare function passkeyPolicyClient(): {
     id: "passkey-policy";

package/dist-vue/packages/auth/src/two-factor-policy-client-plugin.d.ts

@@ -2,7 +2,7 @@ import { SignInSecurityState } from '../../models/src';
 import { BetterFetch } from 'better-auth/client';
 /**
  * What `GET /two-factor-policy/user-security` answers to a system
- * administrator, see docs/specs/two-factor-system-assistance.md (D3). Dates
+ * administrator, see docs/specs/released/two-factor-system-assistance.md (D3). Dates
  * arrive as ISO strings.
  */
 export interface UserSignInSecurity {
@@ -60,8 +60,8 @@ export interface TwoFactorStatus {
 }
 /**
  * Client counterpart of the server `twoFactorPolicy()` and `twoFactorAdmin()`
- * plugins, see docs/specs/two-factor-authentication.md and
- * docs/specs/two-factor-system-assistance.md.
+ * plugins, see docs/specs/released/two-factor-authentication.md and
+ * docs/specs/released/two-factor-system-assistance.md.
  */
 export declare function twoFactorPolicyClient(): {
     id: "two-factor-policy";

package/dist-vue/packages/auth/src/two-factor-policy-plugin.d.ts

@@ -95,7 +95,7 @@ export declare function isTwoFactorSetupRequiredForSession(input: {
 }): Promise<boolean>;
 /**
  * The status endpoint, the widget bridge and the announcements of
- * docs/specs/two-factor-authentication.md. The administrator's endpoints are
+ * docs/specs/released/two-factor-authentication.md. The administrator's endpoints are
  * in two-factor-admin-plugin.ts.
  *
  * The endpoints live under `/two-factor-policy/` and not `/two-factor/` on

package/dist-vue/packages/components/src/chat/PkChatbotMessages.d.ts

@@ -19,6 +19,11 @@ type __VLS_Props = {
     disableHeightAdjustment?: boolean;
     showMessageDateTime?: boolean;
     showMessageTokensCount?: boolean;
+    /**
+     * Shows each answer's position in the chat, from 1, the numbering the
+     * conversation analysis cites ("message 62").
+     */
+    showMessageNumber?: boolean;
     showAllMessageParts?: boolean;
     /**
      * Lets the user answer the tool requests rendered in the feed (approval

package/dist-vue/packages/models/src/schema/AgentApiTool.d.ts

@@ -38,6 +38,30 @@ export declare const AgentApiToolSecretParameterDtoSchema: z.ZodObject<{
     position: z.ZodEnum<typeof AgentApiToolSecretPosition>;
     value: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/**
+ * A header as the API returns it: its name, and whether a value is stored.
+ * Headers carry the keys of the services a tool calls (`Authorization`,
+ * `X-Api-Key`), so like the secret parameters the value never leaves the
+ * backend, the contract of the headers of the organization's model provider.
+ */
+export declare const AgentApiToolHeaderSchema: z.ZodObject<{
+    key: z.ZodString;
+    hasValue: z.ZodBoolean;
+}, z.core.$strip>;
+/**
+ * Headers as a save sends them. On an update an empty value keeps the one
+ * stored under the same name, while the URL keeps its origin; a name left out
+ * is removed. A row without a name is an empty row of the form, and dropped.
+ * Two names that differ only in case are one HTTP header, so they are refused:
+ * a kept value would match the first and the request send the last.
+ */
+export declare const AgentApiToolHeaderListSchema: z.ZodCodec<z.ZodArray<z.ZodObject<{
+    key: z.ZodOptional<z.ZodString>;
+    value: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, z.ZodArray<z.ZodObject<{
+    key: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>>;
 /**
  * The public parameters whose name looks like a credential: `apikey`,
  * `api_key`, `token`, `secret` or `password` as a word of the name, in any
@@ -64,13 +88,10 @@ export declare const AgentApiToolSchema: z.ZodObject<{
     description: z.ZodString;
     method: z.ZodEnum<typeof HttpMethod>;
     url: z.ZodString;
-    headers: z.ZodOptional<z.ZodNullable<z.ZodCodec<z.ZodArray<z.ZodObject<{
-        key: z.ZodOptional<z.ZodString>;
-        value: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
+    headers: z.ZodDefault<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
-    }, z.core.$strip>>>>>;
+        hasValue: z.ZodBoolean;
+    }, z.core.$strip>>>;
     secretParameters: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         position: z.ZodEnum<typeof AgentApiToolSecretPosition>;
@@ -98,7 +119,7 @@ export declare const AgentApiToolCreateSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>>;
     secretParameters: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -120,7 +141,7 @@ export declare const AgentApiToolUpdateSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>>;
     secretParameters: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -151,4 +172,15 @@ export type AgentApiToolCreate = z.infer<typeof AgentApiToolCreateSchema>;
 export type AgentApiToolUpdate = z.infer<typeof AgentApiToolUpdateSchema>;
 export type AgentApiToolSecretParameter = z.infer<typeof AgentApiToolSecretParameterSchema>;
 export type AgentApiToolSecretParameterDto = z.infer<typeof AgentApiToolSecretParameterDtoSchema>;
+export type AgentApiToolHeader = z.infer<typeof AgentApiToolHeaderSchema>;
+export type AgentApiToolHeaderDto = z.infer<typeof AgentApiToolHeaderListSchema>[number];
+/**
+ * A header as stored in `agent_api_tools.headers`, with `value` encrypted by
+ * `encryptSecret` (rows saved before 0.115.0 hold it in clear until their
+ * next save). Backend only: it never reaches a response.
+ */
+export type AgentApiToolStoredHeader = {
+    key: string;
+    value: string;
+};
 export type AgentApiToolQuerystring = z.infer<typeof AgentApiToolQuerystringSchema>;

package/dist-vue/packages/models/src/schema/ConversationAnalysis.d.ts

@@ -23,7 +23,10 @@ export declare enum LlmIssueCategory {
     DataLeak = "data_leak",
     InappropriateTone = "inappropriate_tone",
     RefusalLoop = "refusal_loop",
-    Repetition = "repetition"
+    Repetition = "repetition",
+    FailedAction = "failed_action",
+    EmptyReply = "empty_reply",
+    StuckFlow = "stuck_flow"
 }
 export declare enum ConversationAnalysisTrigger {
     SummaryCycle = "summary_cycle",
@@ -55,6 +58,8 @@ export declare enum SentimentTrend {
     Stable = "stable",
     Degrading = "degrading"
 }
+/** Longest abuse or LLM issue summary an analysis stores. */
+export declare const CONVERSATION_ANALYSIS_SUMMARY_MAX_CHARS = 1000;
 export declare const ConversationAnalysisSchema: z.ZodObject<{
     analyzedAt: z.ZodCoercedDate<unknown>;
     analysisTrigger: z.ZodEnum<typeof ConversationAnalysisTrigger>;