@agentproto/apps 0.11.0 → 0.13.0

package/dist/session-chat/index.d.ts

@@ -34,6 +34,7 @@ import { type AppHandle } from "@agentproto/app-kit";
 import type { AgnoMcpApp } from "../mcp-app-types.js";
 import { SESSION_CHAT_FALLBACK_HTML, sessionChatEmbedHtml } from "./panel.js";
 export { SESSION_CHAT_FALLBACK_HTML, sessionChatEmbedHtml };
+export { BLOB_BOOT_MESSAGE_TYPE, blobEmbedScript } from "./blob-embed.js";
 /** The installed studio app this builtin widget is a launcher for. */
 export declare const SESSION_CHAT_APP_ID = "@agentik/session-chat";
 export declare const sessionChatInputSchema: z.ZodObject<{
@@ -46,6 +47,13 @@ export interface SessionChatOutput {
     installed: boolean;
     /** The app's standalone deep-link url when installed, else null. */
     url: string | null;
+    /** A live per-boot embed token, when the host daemon supplies one (see
+     *  `SessionChatOps.mintEmbedToken`). The panel adopts it over the token
+     *  baked into its resource HTML, which dies with the daemon boot that
+     *  rendered it — hosts that cache the widget per conversation (Claude
+     *  Desktop) otherwise replay a dead token and 403 forever after a daemon
+     *  restart. Absent when the deep link is unavailable anyway. */
+    embedToken?: string;
 }
 export interface SessionChatOps {
     /** The daemon's own HTTP origin, e.g. "http://127.0.0.1:18790" — the
@@ -55,6 +63,11 @@ export interface SessionChatOps {
      *  block. The runtime supplies this from its AppRegistry; optional so
      *  tests/consumers without a registry can omit it (treated as false). */
     isSessionChatInstalled?: () => boolean;
+    /** A live per-boot embed token for the panel to adopt (runtime
+     *  embed-tokens.ts `stableAppEmbedToken`). Optional: consumers without a
+     *  token registry (tests, docs) omit it and the panel keeps whatever was
+     *  baked into its HTML. */
+    mintEmbedToken?: () => string;
 }
 /**
  * Deep-link into the installed app's standalone UI — the same url shape the

package/dist/session-chat/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session-chat/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE7E,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,CAAA;AAE3D,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,0BAA0B,CAAA;AAE1D,eAAO,MAAM,sBAAsB;;iBAQjC,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,MAAM,WAAW,iBAAiB;IAChC;gDAC4C;IAC5C,SAAS,EAAE,OAAO,CAAA;IAClB,oEAAoE;IACpE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B;0DACsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB;;6EAEyE;IACzE,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAA;CACvC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAMjF;AAQD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,cAAc,GAClB,UAAU,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAoBjD;AAED,eAAO,MAAM,cAAc,EAAE,SAY3B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session-chat/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE7E,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,CAAA;AAC3D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEzE,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,0BAA0B,CAAA;AAE1D,eAAO,MAAM,sBAAsB;;iBAQjC,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,MAAM,WAAW,iBAAiB;IAChC;gDAC4C;IAC5C,SAAS,EAAE,OAAO,CAAA;IAClB,oEAAoE;IACpE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB;;;;;oEAKgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B;0DACsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB;;6EAEyE;IACzE,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAA;IACtC;;;+BAG2B;IAC3B,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAMjF;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,cAAc,GAClB,UAAU,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAmCjD;AAED,eAAO,MAAM,cAAc,EAAE,SA0B3B,CAAA"}

package/dist/session-chat/panel.d.ts

@@ -4,7 +4,9 @@
  * (`SESSION_CHAT_FALLBACK_HTML`) served as the
  * `ui://agentproto_session_chat/view` resource by `registerMcpApps` (see
  * ../mcp-app-types.ts and runtime's mcp-apps-adapter.ts). Mounted via the
- * `agentproto_session_chat` tool defined in ./index.ts.
+ * `agentproto_session_chat` tool defined in ./index.ts, AND bound to
+ * `agent_start` (runtime agent-tools.ts `_meta.ui.resourceUri`) so a launch
+ * card opens the chat of the session it just spawned.
  *
  * Deliberately NOT a chat UI reimplementation: the real chat lives in the
  * installed `@agentik/session-chat` app, served by the daemon's standalone
@@ -15,6 +17,40 @@
  * http-server.ts handleAppUiPage) and the VS Code chat-panel webview
  * already uses. No second chat bundle exists anywhere in agentproto/ts.
  *
+ * Self-bootstrapping (same pattern as live-session/panel.ts): the static
+ * ui:// resource is rendered ONCE at server-registration time with EMPTY
+ * initData (mcp-apps-adapter.ts registerMcpApps), so the deep link can't
+ * be baked in. The page resolves it at runtime, in priority order:
+ *   1. `initData.url` when the html was rendered with a real tool output
+ *      (tests, and any host that re-renders per call) — iframe is inline.
+ *   2. The host's `ui/notifications/tool-result` push of the tool call that
+ *      mounted the widget. An `agent_start` result IS the spawned session's
+ *      descriptor (`{ id: "sess_…", … }`) → the widget calls
+ *      `agentproto_session_chat({ sessionId })` over the bridge to turn that
+ *      id into the deep link; an `agentproto_session_chat` result already
+ *      carries `{ installed, url }` and mounts directly.
+ *   3. Otherwise (opened bare from the catalog) `agentproto_session_chat({})`
+ *      → the app's session picker.
+ * Both orders of (2) vs. bridge init are handled: a result that lands
+ * before `initBridge()` resolves is held and applied once it does.
+ *
+ * Mount order (see `mount()` below):
+ *   1. Blob pass-through, when a per-boot embed token is baked in (i.e. an
+ *      MCP-Apps host rendered this resource): fetch the chat html with the
+ *      token, rewrite it (./blob-embed.ts `transformChatHtmlForBlob`) and
+ *      mount it as a `blob:` document. Claude Desktop / Codex widget frames
+ *      run `frame-src 'self' blob: data:` and do not merge our declared
+ *      `csp.frameDomains`, so a direct daemon iframe is refused host-side —
+ *      `blob:` is the pass-through. The blob document must post a boot ack
+ *      within a settle window (`armBlobBootProbe`); a missing ack (host CSP
+ *      killed its inline scripts, or refused the blob frame) tears it down
+ *      and falls through to 2.
+ *   2. Direct-src iframe of the deep link (VS Code HTTP-iframe panels, a
+ *      standalone tab — no token, and their origin already passes the
+ *      daemon's checks; or the blob path's fallback). If the host refuses
+ *      the frame, `armBlockProbe` removes it and the launcher card becomes
+ *      the interactive surface.
+ *
  * A persistent header with the deep link stays visible above the iframe, so
  * if the frame is refused (older daemon without the embed relaxation, or a
  * host whose own CSP blocks daemon frames) the user still has a one-click
@@ -23,6 +59,6 @@
  * fallback branch, never a vendored UI.
  */
 import type { SessionChatOutput } from "./index.js";
-export declare function sessionChatEmbedHtml(initData: SessionChatOutput): string;
+export declare function sessionChatEmbedHtml(initData: Partial<SessionChatOutput>): string;
 export declare const SESSION_CHAT_FALLBACK_HTML = "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n<title>Session Chat \u2014 not installed</title>\n<style>\n*{box-sizing:border-box;margin:0;padding:0}\nhtml,body{height:100%;font-family:system-ui,-apple-system,sans-serif;background:#0d1117;color:#e6edf3}\n#wrap{max-width:560px;margin:0 auto;padding:48px 24px;line-height:1.6}\nh1{font-size:18px;margin-bottom:12px}\ncode{background:#161b22;border:1px solid #30363d;border-radius:4px;padding:2px 6px;font-size:13px}\np{margin:8px 0;color:#8b949e;font-size:13px}\n</style>\n</head>\n<body>\n<div id=\"wrap\">\n  <h1>Session Chat is not installed</h1>\n  <p>This panel is a thin launcher for the <code>@agentik/session-chat</code> app &#8212;\n  it does not bundle the chat UI itself.</p>\n  <p>To use it, install the app into this daemon:</p>\n  <p><code>agentproto app install @agentik/session-chat</code></p>\n  <p>Once installed, call <code>agentproto_session_chat</code> again (optionally with a\n  <code>sessionId</code>) and the panel will embed the app's chat UI deep-linked to that\n  session.</p>\n</div>\n</body>\n</html>";
 //# sourceMappingURL=panel.d.ts.map

package/dist/session-chat/panel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"panel.d.ts","sourceRoot":"","sources":["../../src/session-chat/panel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAOnD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CA6BxE;AAED,eAAO,MAAM,0BAA0B,gqCA2B/B,CAAA"}
+{"version":3,"file":"panel.d.ts","sourceRoot":"","sources":["../../src/session-chat/panel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAOnD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,MAAM,CA0XjF;AAED,eAAO,MAAM,0BAA0B,gqCA2B/B,CAAA"}