@8wave/ai-elements 0.115.0-beta.2 → 0.115.0-beta.30

package/dist-vue/locales.js

@@ -266,6 +266,7 @@ var e = {
 		comment: "Comment",
 		file: "File",
 		message: "Message",
+		messageNumber: "Message {n}",
 		tokens: "tokens",
 		answeringOnTheCall: "Answering…",
 		conversationOutline: "Conversation outline",
@@ -367,6 +368,7 @@ var e = {
 		voiceId: "Cloned voices are not listed: the provider forbids them here.",
 		freshnessScaleExplanationMonths: "A document updated today gets a +{weight} bonus. This bonus halves to +{halfWeight} after {half} days and practically drops to zero (+{zeroWeight}) after {zero} days (approx. {months} months).",
 		freshnessScaleExplanationDays: "A document updated today gets a +{weight} bonus. This bonus halves to +{halfWeight} after {half} days and practically drops to zero (+{zeroWeight}) after {zero} days.",
+		reasoningVisibility: "A reasoning agent is always visible to the members of its organization only.",
 		agentOnOwnEndpoint: "This agent runs on your organization's endpoint.",
 		providerTimeoutMs: "Timeout in milliseconds before falling back to the next provider (min 1000, max 789000). BYOK credentials only.",
 		showExtendedSteps: "Shows reasoning and tool calls as an expandable timeline in the chat.",
@@ -857,6 +859,7 @@ var e = {
 		comment: "Commento",
 		file: "File",
 		message: "Messaggio",
+		messageNumber: "Messaggio {n}",
 		tokens: "token",
 		answeringOnTheCall: "Sto rispondendo…",
 		conversationOutline: "Indice della conversazione",
@@ -958,6 +961,7 @@ var e = {
 		voiceId: "Le voci clonate non sono in elenco: il fornitore non le ammette qui.",
 		freshnessScaleExplanationMonths: "Un documento modificato oggi ottiene un bonus di +{weight}. Il bonus si dimezza a +{halfWeight} dopo {half} giorni e si azzera praticamente (+{zeroWeight}) dopo {zero} giorni (circa {months} mesi).",
 		freshnessScaleExplanationDays: "Un documento modificato oggi ottiene un bonus di +{weight}. Il bonus si dimezza a +{halfWeight} dopo {half} giorni e si azzera praticamente (+{zeroWeight}) dopo {zero} giorni.",
+		reasoningVisibility: "Un agente reasoning è sempre visibile solo ai membri dell'organizzazione.",
 		agentOnOwnEndpoint: "Questo agente gira sull’endpoint della tua organizzazione.",
 		providerTimeoutMs: "Timeout in millisecondi prima di passare al provider successivo (min 1000, max 789000). Solo credenziali BYOK.",
 		showExtendedSteps: "Visualizza la timeline con il ragionamento e gli strumenti nella chat.",

package/dist-vue/packages/auth/src/active-membership.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The role `userId` holds in `organizationId` now, or `null` when they are
+ * not a member. A role is cached, an absence is not: a membership created
+ * after a refusal is seen on the next request, so the paths that add members
+ * have nothing to invalidate.
+ */
+export declare function currentMemberRole(userId: string, organizationId: string): Promise<string | null>;
+type OrganizationSession = {
+    userId: string;
+    activeOrganizationId?: string | null;
+    organizationRole?: string | null;
+};
+/**
+ * The session as a request may trust it: its active organization only while
+ * the user is still a member of it, and the role they hold there now.
+ *
+ * The two fields are written when the organization is activated and nothing
+ * rewrites them when the membership changes. Every service reads the tenant
+ * from the first and every permission from the second, so a member removed
+ * from an organization kept reading and writing it for the life of their
+ * session (90 days, renewed daily), and a demoted admin kept the admin rules.
+ * A session whose organization was unset kept the role it had there, which
+ * still opened the audience gates.
+ */
+export declare function withCurrentMembership<T extends OrganizationSession>(session: T): Promise<T>;
+/**
+ * Brings the stored sessions of `userId` in line with their membership of
+ * `organizationId`, after a write to it: a new role replaces the old one, a
+ * membership that is gone takes the active organization with it. Call it
+ * after every role change and every removal. The request check does not
+ * depend on it, it reads the membership itself, but the client does: it
+ * reads its organization and role from the session. The role is read from
+ * the database, not the cache, which a request may still be refilling.
+ */
+export declare function syncSessionsWithMembership(userId: string, organizationId: string): Promise<void>;
+export {};

package/dist-vue/packages/auth/src/add-member-to-organization.d.ts

@@ -5,7 +5,11 @@
  * because the organization is full. An automatic join does not take a seat
  * an open invitation holds either, and a skipped one is not retried at the
  * next sign-in: the person joins through an invitation once a seat is free.
+ *
+ * The role has no default: it used to be `member`, and the external login,
+ * which did not pass one, made every visitor of the widget a member with the
+ * frontoffice of the organization, whatever its configuration said.
  */
-export declare function addMemberToOrganizationIfNotExists(userId: string, organizationId: string, role?: string, { respectMemberLimit }?: {
+export declare function addMemberToOrganizationIfNotExists(userId: string, organizationId: string, role: string, { respectMemberLimit }?: {
     respectMemberLimit?: boolean;
 }): Promise<boolean>;

package/dist-vue/packages/auth/src/passkey-policy-client-plugin.d.ts

@@ -1,7 +1,7 @@
 import { BetterFetch } from 'better-auth/client';
 /**
  * Client counterpart of the server `passkeyPolicy()` plugin, see
- * docs/specs/two-factor-authentication.md, D10.
+ * docs/specs/released/two-factor-authentication.md, D10.
  */
 export declare function passkeyPolicyClient(): {
     id: "passkey-policy";

package/dist-vue/packages/auth/src/social-redirect-plugin.d.ts

@@ -7,6 +7,17 @@ import { BetterAuthPlugin } from 'better-auth';
  * whose host it refuses cannot run anyway.
  */
 export declare function isListedOrigin(value: string, trusted: string[]): boolean;
+/**
+ * The provider's authorization URL with its account chooser asked for.
+ *
+ * The widget's popup hands the session it creates to the page that opened it,
+ * a page listed by an agent and so chosen by a customer. Without a prompt, a
+ * visitor already signed in at the provider who had consented once went
+ * through without a single screen: one click anywhere on such a page was
+ * enough for it to receive their session. The chooser makes signing in
+ * something the visitor does. An existing prompt is kept, except `none`.
+ */
+export declare function withAccountChooser(location: string): string;
 /**
  * Backs the social sign-in that runs in a browser window on the backend origin.
  *
@@ -23,6 +34,7 @@ export declare function isListedOrigin(value: string, trusted: string[]): boolea
  * callback hands back the token of the session it just created, and only to the
  * origin that started it.
  *
- * The before hook narrows the origin `oauthPopup` accepts to the listed ones.
+ * The before hook narrows the origin `oauthPopup` accepts to the listed ones,
+ * the after hook makes the provider show its account chooser.
  */
 export declare function socialRedirect(): BetterAuthPlugin;

package/dist-vue/packages/auth/src/two-factor-policy-client-plugin.d.ts

@@ -2,7 +2,7 @@ import { SignInSecurityState } from '../../models/src';
 import { BetterFetch } from 'better-auth/client';
 /**
  * What `GET /two-factor-policy/user-security` answers to a system
- * administrator, see docs/specs/two-factor-system-assistance.md (D3). Dates
+ * administrator, see docs/specs/released/two-factor-system-assistance.md (D3). Dates
  * arrive as ISO strings.
  */
 export interface UserSignInSecurity {
@@ -60,8 +60,8 @@ export interface TwoFactorStatus {
 }
 /**
  * Client counterpart of the server `twoFactorPolicy()` and `twoFactorAdmin()`
- * plugins, see docs/specs/two-factor-authentication.md and
- * docs/specs/two-factor-system-assistance.md.
+ * plugins, see docs/specs/released/two-factor-authentication.md and
+ * docs/specs/released/two-factor-system-assistance.md.
  */
 export declare function twoFactorPolicyClient(): {
     id: "two-factor-policy";

package/dist-vue/packages/auth/src/two-factor-policy-plugin.d.ts

@@ -95,7 +95,7 @@ export declare function isTwoFactorSetupRequiredForSession(input: {
 }): Promise<boolean>;
 /**
  * The status endpoint, the widget bridge and the announcements of
- * docs/specs/two-factor-authentication.md. The administrator's endpoints are
+ * docs/specs/released/two-factor-authentication.md. The administrator's endpoints are
  * in two-factor-admin-plugin.ts.
  *
  * The endpoints live under `/two-factor-policy/` and not `/two-factor/` on

package/dist-vue/packages/components/src/chat/PkChatbotMessages.d.ts

@@ -19,6 +19,11 @@ type __VLS_Props = {
     disableHeightAdjustment?: boolean;
     showMessageDateTime?: boolean;
     showMessageTokensCount?: boolean;
+    /**
+     * Shows each answer's position in the chat, from 1, the numbering the
+     * conversation analysis cites ("message 62").
+     */
+    showMessageNumber?: boolean;
     showAllMessageParts?: boolean;
     /**
      * Lets the user answer the tool requests rendered in the feed (approval

package/dist-vue/packages/components/src/chat/PkToolRequestOAuthConnection.d.ts

@@ -1,6 +1,11 @@
 import { DefineComponent, ComponentOptionsMixin, PublicProps, ComponentProvideOptions } from 'vue';
 type __VLS_Props = {
     part: unknown;
+    /**
+     * The backend the chat talks to, where the sign-in's callback page
+     * runs. Without it the card hears no report and relies on its poll.
+     */
+    backendUrl?: string;
     resolveConnection?: (serverName: string) => Promise<{
         mcpServerId: string;
         authorizeUrl: string;

package/dist-vue/packages/components/src/chat/index.d.ts

@@ -53,4 +53,5 @@ import { default as PkVoiceSession } from './PkVoiceSession';
 import { default as PkVoiceOrb } from './PkVoiceOrb';
 import { default as PkChatButton } from './PkChatButton';
 export { MODEL_CATALOG_KEY, provideModelCatalog, useModelCatalogEntry, } from './modelCatalog';
+export { isMcpOAuthReport } from './mcpOAuthReport';
 export { PkAgentSelectorInline, PkAgentSettingsPanel, PkAuroraCanvas, PkAvatar, PkChatSidebar, PkChatSidebarConversationItem, PkChatbot, PkChatbotEmptyState, PkChatbotError, PkChatbotFeedbackForm, PkChatbotFilePreview, PkChatbotInput, PkChatbotMessages, PkChatbotSteps, PkChatbotStepToolDetail, PkChatbotStepPayload, PkChatbotViewChat, PkChunkPreview, PkChatbotViewConversations, PkChatbotViewProfile, PkCode, PkCopyBlock, PkDocumentHeader, PkLanguageModel, PkLanguageModelCombobox, PkModelOption, PkMessageParts, PkMessageDetail, PkStreamingMarkdown, PkStreamingMarkdownAutoscroll, PkToolShowForm, PkToolShowArtifact, PkToolApprovalBadge, PkToolShowEmail, PkToolShowMessage, PkToolShowWebPages, PkToolShowProductList, PkToolShowContactForm, PkToolShowCalendarEvent, PkToolShowComparison, PkToolShowLocation, PkToolShowQrCode, PkToolShowImageGallery, PkToolShowSuggestedReply, PkToolShowSources, PkRetryCountdown, PkReasoningChat, PkReasoningSettings, PkWebSearchSettings, PkWelcomePopup, PkChatbotAuth, PkVoiceSession, PkVoiceOrb, PkChatButton, };

package/dist-vue/packages/components/src/chat/mcpOAuthReport.d.ts

@@ -0,0 +1,11 @@
+/** The `type` the MCP sign-in callback page posts (mcpOAuth.controller.ts). */
+export declare const MCP_OAUTH_REPORT_TYPE = "mcp-oauth-complete";
+/**
+ * Whether a `message` event is the report of the MCP sign-in a page opened:
+ * posted by that window while it shows the callback page, which runs on the
+ * backend's origin. Any other window holding the page could post the same
+ * message, success included, and so could the provider's own pages, which run
+ * in that same window before the callback. Without the window or the backend
+ * URL nothing is a report, and the caller relies on reading the connection.
+ */
+export declare function isMcpOAuthReport(event: MessageEvent, signInWindow: Window | null | undefined, backendUrl: string | undefined): boolean;

package/dist-vue/packages/models/src/schema/AgentApiTool.d.ts

@@ -64,13 +64,10 @@ export declare const AgentApiToolSchema: z.ZodObject<{
     description: z.ZodString;
     method: z.ZodEnum<typeof HttpMethod>;
     url: z.ZodString;
-    headers: z.ZodOptional<z.ZodNullable<z.ZodCodec<z.ZodArray<z.ZodObject<{
-        key: z.ZodOptional<z.ZodString>;
-        value: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
+    headers: z.ZodDefault<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
-    }, z.core.$strip>>>>>;
+        hasValue: z.ZodBoolean;
+    }, z.core.$strip>>>;
     secretParameters: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         position: z.ZodEnum<typeof AgentApiToolSecretPosition>;
@@ -98,7 +95,7 @@ export declare const AgentApiToolCreateSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>>;
     secretParameters: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -120,7 +117,7 @@ export declare const AgentApiToolUpdateSchema: z.ZodObject<{
         value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>, z.ZodArray<z.ZodObject<{
         key: z.ZodString;
-        value: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>>;
     secretParameters: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         name: z.ZodString;

package/dist-vue/packages/models/src/schema/ConversationAnalysis.d.ts

@@ -23,7 +23,10 @@ export declare enum LlmIssueCategory {
     DataLeak = "data_leak",
     InappropriateTone = "inappropriate_tone",
     RefusalLoop = "refusal_loop",
-    Repetition = "repetition"
+    Repetition = "repetition",
+    FailedAction = "failed_action",
+    EmptyReply = "empty_reply",
+    StuckFlow = "stuck_flow"
 }
 export declare enum ConversationAnalysisTrigger {
     SummaryCycle = "summary_cycle",
@@ -55,6 +58,8 @@ export declare enum SentimentTrend {
     Stable = "stable",
     Degrading = "degrading"
 }
+/** Longest abuse or LLM issue summary an analysis stores. */
+export declare const CONVERSATION_ANALYSIS_SUMMARY_MAX_CHARS = 1000;
 export declare const ConversationAnalysisSchema: z.ZodObject<{
     analyzedAt: z.ZodCoercedDate<unknown>;
     analysisTrigger: z.ZodEnum<typeof ConversationAnalysisTrigger>;