@agents24/client 0.2.0 → 0.2.2

package/README.md

@@ -1,24 +1,33 @@
 # `@agents24/client`
 
-Last Updated: 2026-07-19
+Last Updated: 2026-08-12
 
 Framework-neutral end-user runtime client for one deployment-scoped Agents24 Agent. It supports public client sessions, authenticated streaming, durable reconnect, threads, attachments, HITL, and MCP without accepting organization API keys.
 
 The root package uses structural capabilities and resolves without DOM or Node declarations. Runtime adapter subpaths provide verified global-capability bindings. The canonical wire validators and SSE parser are exported from `@agents24/client/protocol`.
 
-Persistent refresh grants require DPoP and an explicit storage adapter. `createFencedRefreshCoordinator` accepts an atomic compare-and-swap store for cross-tab refresh rotation; lease takeovers retain the server idempotency operation ID and stale owners cannot write rotated credentials. Access tokens remain memory-only.
+Persistent refresh grants require DPoP plus durable credential and refresh-fence storage. In browsers, `createBrowserSessionPersistence(...)` provides the complete IndexedDB-backed persistence set, including fenced cross-tab refresh coordination. `createFencedRefreshCoordinator` remains available for non-browser adapters with an atomic compare-and-swap store. Access tokens remain memory-only.
 
 Allowlisted host headers can be carried through `chat.stream` and durable `runs.attach`; authentication, DPoP, Origin, cache, content-type, and idempotency headers remain client-owned and cannot be overridden.
 
 ## Browser quickstart
 
 ```ts
-import { createAnonymousSessionProvider } from "@agents24/client";
-import { createBrowserAgentClient } from "@agents24/client/browser";
+import { createAnonymousSessionProvider, createWebCryptoDpopKeyProvider } from "@agents24/client";
+import { createBrowserAgentClient, createBrowserSessionPersistence } from "@agents24/client/browser";
 
 const baseUrl = "https://api.agents24.example";
 const deploymentId = "public-deployment-id";
-const sessionProvider = createAnonymousSessionProvider({ baseUrl, deploymentId });
+const persistence = createBrowserSessionPersistence({ namespace: `${baseUrl}:${deploymentId}` });
+const dpopKeyProvider = createWebCryptoDpopKeyProvider({ storage: persistence.dpopKeyStorage });
+const sessionProvider = createAnonymousSessionProvider({
+  baseUrl,
+  deploymentId,
+  persistent: true,
+  dpopKeyProvider,
+  storage: persistence.sessionStorage,
+  coordinator: persistence.refreshCoordinator,
+});
 const client = createBrowserAgentClient({ baseUrl, deploymentId, sessionProvider });
 
 await client.chat.stream({ input: "Hello" }, (event) => {
@@ -26,13 +35,32 @@ await client.chat.stream({ input: "Hello" }, (event) => {
 });
 ```
 
+The browser adapter stores the rotating refresh grant, non-extractable WebCrypto key, and refresh fence in IndexedDB. It coordinates reloads and concurrent tabs so only the canonical rotated grant is used. Once enrollment or refresh rotation starts, it finishes persisting the replacement credential even if the initiating React request is disposed. Access tokens remain memory-only. Namespace persistence by both API origin and deployment ID so credentials cannot collide across environments.
+
 Use `createManagedSessionProvider` when a trusted backend mints a session after authenticating the user. The backend must derive the subject from its own session and accept only deployment-registered origins/native profiles. Use `createHostedOidcSessionProvider` for hosted Authorization Code + PKCE. Organization keys, raw customer identities, tenant IDs, Agent/version choices, and fixed credential bindings never belong in client runtime requests.
 
-The client also exposes threads, thread-summary events, run attach/cancel, attachments, HITL resume, MCP authorization, refresh, and revoke. Aborting a stream detaches locally; call `client.runs.cancel` for durable cancellation.
+The client also exposes threads, thread-summary events, run attach/cancel, attachments, HITL resume, MCP authorization, refresh, and revoke. Bootstrap V2 exposes the exact resolved Agent's canonical `features.inputs` and model default. `client.attachments.uploadBatch(...)` uploads one turn's selected items atomically and returns all attachment records. `client.attachments.createContentAccess({ attachmentId, disposition })` returns a private inline-render or direct-download URL valid for at most five minutes and never beyond payload expiry. Aborting a stream detaches locally; call `client.runs.cancel` for durable cancellation.
+
+Agent questions resume through the existing HITL method:
+
+```ts
+await client.hitl.resume({
+  runId,
+  interruptId,
+  action: "respond",
+  answers: [{
+    question_id: "framework",
+    selected_option_ids: ["react"],
+  }],
+  idempotencyKey,
+});
+```
+
+For a single-choice question, send exactly one listed option or `custom_text` for Other, not both. Multi-select questions may combine them. Reattach to the same run after a successful or idempotent resolution.
 
 ## Same-origin BFF
 
-`@agents24/client/bff` exposes `createBffAgentClient({ basePath })`, an `AgentClient` implementation for a customer-owned same-origin BFF. It covers the complete chat lifecycle, uses same-origin credentials, and accepts only an absolute path such as `/api/agents24`. Pair it with `createAgents24BffHandler` from `@agents24/node/bff`; use `npm create agents24-app@latest` for the complete React/Vite setup.
+`@agents24/client/bff` exposes `createBffAgentClient({ basePath })`, an `AgentClient` implementation for a customer-owned same-origin BFF. It covers the complete chat lifecycle, uses same-origin credentials, reconnects with the last durable cursor, and reuses caller idempotency keys for mutations. It accepts only an absolute path such as `/api/agents24`. Pair it with `createAgents24BffHandler` from `@agents24/node/bff`; use `npm create agents24-app@latest` for the complete React/Vite setup.
 
 `compatibility.json` contains the exact generated contract hash, protocol versions, peers, and target operation counts. Do not infer compatibility from semver alone.
 
@@ -48,4 +76,4 @@ The client also exposes threads, thread-summary events, run attach/cancel, attac
 | Tauri 2 and Expo iOS/Android | Experimental and unverified; no support claim |
 | Bare React Native/Metro | Experimental compile-only; packed iOS and Android bundles pass |
 
-Run the maintained non-UI gates with `pnpm check:bun`, `pnpm check:deno`, `pnpm check:service-worker`, `pnpm check:electron`, and `pnpm check:metro`. Every gate installs an `npm pack` artifact rather than a workspace link.
+Run the maintained non-UI gates with `pnpm check:bun`, `pnpm check:deno`, `pnpm check:service-worker`, and `pnpm check:metro`. Every gate installs an `npm pack` artifact rather than a workspace link. Electron runs only when the client package changes and is outside release admission.

package/compatibility.json

@@ -1,5 +1,5 @@
 {
-  "contractHash": "90a64d2df2facc3c4510edc7a0762cb86a336578667d3bc6cfeb7ae035133e00",
+  "contractHash": "a409af6996d10a8d94e0f6332c9a381c3535a9c8511314b6c42b237d7e057029",
   "contractVersion": "0.2.0",
   "corpus": "conformance/v1/corpus.json",
   "generatedBy": "@agents24/sdk-contract",
@@ -15,11 +15,11 @@
       "reactDom": ">=19 <20"
     },
     "@agents24/client": {
-      "contract": "90a64d2df2facc3c4510edc7a0762cb86a336578667d3bc6cfeb7ae035133e00",
-      "runtime": "run-stream.v2"
+      "contract": "a409af6996d10a8d94e0f6332c9a381c3535a9c8511314b6c42b237d7e057029",
+      "runtime": "run-stream.v3"
     },
     "@agents24/node": {
-      "contract": "90a64d2df2facc3c4510edc7a0762cb86a336578667d3bc6cfeb7ae035133e00",
+      "contract": "a409af6996d10a8d94e0f6332c9a381c3535a9c8511314b6c42b237d7e057029",
       "node": "^22.0.0 || ^24.0.0"
     },
     "@agents24/react": {
@@ -27,18 +27,18 @@
       "react": ">=19 <20"
     },
     "@talmudpedia/runtime-sdk": {
-      "contract": "90a64d2df2facc3c4510edc7a0762cb86a336578667d3bc6cfeb7ae035133e00",
+      "contract": "a409af6996d10a8d94e0f6332c9a381c3535a9c8511314b6c42b237d7e057029",
       "protocolOwner": "@agents24/client"
     },
     "agents24": {
-      "contract": "90a64d2df2facc3c4510edc7a0762cb86a336578667d3bc6cfeb7ae035133e00",
+      "contract": "a409af6996d10a8d94e0f6332c9a381c3535a9c8511314b6c42b237d7e057029",
       "python": ">=3.10"
     }
   },
   "protocols": {
     "runtime": {
       "minimum": "2.0.0",
-      "wire": "run-stream.v2"
+      "wire": "run-stream.v3"
     },
     "threadSummary": {
       "minimum": "1.0.0",
@@ -47,8 +47,8 @@
   },
   "schemaVersion": "agents24.compatibility.v1",
   "targetOperationCounts": {
-    "client": 19,
-    "node": 60,
-    "python": 55
+    "client": 22,
+    "node": 79,
+    "python": 70
   }
 }

package/dist/adapters/browser.d.ts

@@ -1,3 +1,85 @@
-import type { AgentClient, Agents24ClientOptions } from "../types.js";
+import type { DpopKeyHandleStorage } from "../dpop.js";
+import type { AgentClient, Agents24ClientOptions, ClientSessionStorage, SessionRefreshCoordinator } from "../types.js";
 export declare const runtimeAdapter: "browser";
+type RequestLike<T> = {
+    error?: unknown;
+    result: T;
+    onsuccess: (() => void) | null;
+    onerror: (() => void) | null;
+};
+type OpenRequestLike = RequestLike<DatabaseLike> & {
+    onupgradeneeded: (() => void) | null;
+};
+type ObjectStoreLike = {
+    delete(key: string): RequestLike<unknown>;
+    get(key: string): RequestLike<unknown>;
+    put(value: unknown, key: string): RequestLike<unknown>;
+};
+type TransactionLike = {
+    error?: unknown;
+    objectStore(name: string): ObjectStoreLike;
+    oncomplete: (() => void) | null;
+    onabort: (() => void) | null;
+    onerror: (() => void) | null;
+};
+type DatabaseLike = {
+    close(): void;
+    createObjectStore(name: string): unknown;
+    objectStoreNames: {
+        contains(name: string): boolean;
+    };
+    transaction(name: string, mode: "readonly" | "readwrite"): TransactionLike;
+};
+type IndexedDatabaseLike = {
+    open(name: string, version: number): OpenRequestLike;
+};
+export type BrowserSessionPersistenceOptions = {
+    databaseName?: string;
+    indexedDatabase?: IndexedDatabaseLike;
+    namespace: string;
+};
+export type BrowserSessionPersistence = {
+    dpopKeyStorage: DpopKeyHandleStorage;
+    refreshCoordinator: SessionRefreshCoordinator;
+    sessionStorage: ClientSessionStorage;
+};
+export declare function createBrowserSessionPersistence(options: BrowserSessionPersistenceOptions): BrowserSessionPersistence;
 export declare function createBrowserAgentClient(options: Agents24ClientOptions): AgentClient;
+export type BrowserDeploymentIdentityState = "loading" | "guest" | "authenticated" | "signed_out" | "error";
+export type BrowserDeploymentSessionSnapshot = {
+    identity: {
+        state: BrowserDeploymentIdentityState;
+        displayName?: string;
+        secondaryText?: string;
+    };
+    authModes: readonly string[];
+    error?: string;
+};
+type BrowserStorageLike = {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+};
+export type BrowserDeploymentSessionControllerOptions = {
+    deploymentId: string;
+    baseUrl?: string;
+    fetch?: Agents24ClientOptions["fetch"];
+    sessionStorage?: BrowserStorageLike;
+    getLocationHref?: () => string;
+    navigate?: (url: string) => void;
+    replaceLocation?: (url: string) => void;
+    persistence?: {
+        anonymous: BrowserSessionPersistence;
+        oidc: BrowserSessionPersistence;
+    };
+};
+export type BrowserDeploymentSessionController = {
+    client: AgentClient;
+    getSnapshot(): BrowserDeploymentSessionSnapshot;
+    subscribe(listener: () => void): () => void;
+    initialize(): Promise<void>;
+    signIn(): Promise<void>;
+    signOut(): Promise<void>;
+};
+export declare function createBrowserDeploymentSessionController(options: BrowserDeploymentSessionControllerOptions): BrowserDeploymentSessionController;
+export {};

package/dist/adapters/browser.js

@@ -1,13 +1,312 @@
-import { createAgents24Client } from '../chunk-QAIOKNUK.js';
-import '../chunk-SCZMUBXD.js';
-import '../chunk-NGZUJ3YT.js';
+import { createFencedRefreshCoordinator, createWebCryptoDpopKeyProvider, createAnonymousSessionProvider, createHostedOidcSessionProvider, createPkcePair } from '../chunk-ZDLWNALI.js';
+import { createAgents24Client } from '../chunk-DEXGPNLL.js';
+import '../chunk-LG3ZMQ2W.js';
+import '../chunk-FLTCOJZR.js';
 
 // src/adapters/browser.ts
 var runtimeAdapter = "browser";
+var STORE_NAME = "runtime";
+function requestResult(request) {
+  return new Promise((resolve, reject) => {
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => reject(request.error instanceof Error ? request.error : new Error("Browser storage request failed."));
+  });
+}
+function transactionDone(transaction) {
+  return new Promise((resolve, reject) => {
+    transaction.oncomplete = () => resolve();
+    const fail = () => reject(transaction.error instanceof Error ? transaction.error : new Error("Browser storage transaction failed."));
+    transaction.onabort = fail;
+    transaction.onerror = fail;
+  });
+}
+function resolveIndexedDatabase(injected) {
+  const value = injected ?? globalThis.indexedDB;
+  if (!value) throw new Error("Persistent browser sessions require IndexedDB.");
+  return value;
+}
+async function openDatabase(options) {
+  const request = resolveIndexedDatabase(options.indexedDatabase).open(
+    options.databaseName || "agents24-client",
+    1
+  );
+  request.onupgradeneeded = () => {
+    if (!request.result.objectStoreNames.contains(STORE_NAME)) request.result.createObjectStore(STORE_NAME);
+  };
+  return requestResult(request);
+}
+function createRecordStorage(options, suffix) {
+  const key = `${options.namespace}:${suffix}`;
+  return {
+    async load() {
+      const database = await openDatabase(options);
+      try {
+        const transaction = database.transaction(STORE_NAME, "readonly");
+        const value = await requestResult(transaction.objectStore(STORE_NAME).get(key));
+        return value ?? null;
+      } finally {
+        database.close();
+      }
+    },
+    async save(value) {
+      const database = await openDatabase(options);
+      try {
+        const transaction = database.transaction(STORE_NAME, "readwrite");
+        transaction.objectStore(STORE_NAME).put(value, key);
+        await transactionDone(transaction);
+      } finally {
+        database.close();
+      }
+    },
+    async clear() {
+      const database = await openDatabase(options);
+      try {
+        const transaction = database.transaction(STORE_NAME, "readwrite");
+        transaction.objectStore(STORE_NAME).delete(key);
+        await transactionDone(transaction);
+      } finally {
+        database.close();
+      }
+    }
+  };
+}
+function createRefreshFenceStorage(options) {
+  const key = `${options.namespace}:refresh-fence`;
+  return {
+    async load() {
+      const database = await openDatabase(options);
+      try {
+        const transaction = database.transaction(STORE_NAME, "readonly");
+        const value = await requestResult(transaction.objectStore(STORE_NAME).get(key));
+        return value ?? null;
+      } finally {
+        database.close();
+      }
+    },
+    async compareAndSwap(expectedFence, next) {
+      const database = await openDatabase(options);
+      try {
+        const transaction = database.transaction(STORE_NAME, "readwrite");
+        const store = transaction.objectStore(STORE_NAME);
+        const current = await requestResult(store.get(key));
+        if ((current?.fence ?? null) !== expectedFence) {
+          await transactionDone(transaction);
+          return false;
+        }
+        store.put(next, key);
+        await transactionDone(transaction);
+        return true;
+      } finally {
+        database.close();
+      }
+    }
+  };
+}
+function createBrowserSessionPersistence(options) {
+  const sessionStorage = createRecordStorage(options, "session");
+  const dpopKeyStorage = createRecordStorage(options, "dpop-key");
+  const refreshCoordinator = createFencedRefreshCoordinator({
+    storage: createRefreshFenceStorage(options)
+  });
+  return { sessionStorage, dpopKeyStorage, refreshCoordinator };
+}
 function createBrowserAgentClient(options) {
   return createAgents24Client(options);
 }
+var DEFAULT_API_BASE_URL = "https://api.agents24.dev";
+function createBrowserDeploymentSessionController(options) {
+  const baseUrl = String(options.baseUrl || DEFAULT_API_BASE_URL).replace(/\/+$/, "");
+  const namespace = `${baseUrl}:${options.deploymentId}`;
+  const anonymousPersistence = options.persistence?.anonymous ?? createBrowserSessionPersistence({ namespace: `${namespace}:anonymous` });
+  const oidcPersistence = options.persistence?.oidc ?? createBrowserSessionPersistence({ namespace: `${namespace}:oidc` });
+  const anonymousDpop = createWebCryptoDpopKeyProvider({ storage: anonymousPersistence.dpopKeyStorage });
+  const oidcDpop = createWebCryptoDpopKeyProvider({ storage: oidcPersistence.dpopKeyStorage });
+  const anonymousProvider = createAnonymousSessionProvider({
+    baseUrl,
+    deploymentId: options.deploymentId,
+    ...options.fetch ? { fetch: options.fetch } : {},
+    dpopKeyProvider: anonymousDpop,
+    persistent: true,
+    coordinator: anonymousPersistence.refreshCoordinator,
+    storage: anonymousPersistence.sessionStorage
+  });
+  const oidcProvider = createHostedOidcSessionProvider({
+    baseUrl,
+    deploymentId: options.deploymentId,
+    ...options.fetch ? { fetch: options.fetch } : {},
+    dpopKeyProvider: oidcDpop,
+    coordinator: oidcPersistence.refreshCoordinator,
+    storage: oidcPersistence.sessionStorage
+  });
+  let activeProvider;
+  const awaitActiveProvider = async () => {
+    if (!activeProvider) await initialize();
+    if (!activeProvider) throw new Error("The browser deployment session could not be initialized.");
+    return activeProvider;
+  };
+  const delegatingProvider = {
+    async getAccess(context) {
+      return (await awaitActiveProvider()).getAccess(context);
+    },
+    async refresh(context) {
+      const provider = await awaitActiveProvider();
+      if (!provider.refresh) throw new Error("Session refresh is unavailable.");
+      return provider.refresh(context);
+    },
+    async revoke(input) {
+      return (await awaitActiveProvider()).revoke?.(input);
+    }
+  };
+  const client = createBrowserAgentClient({
+    baseUrl,
+    deploymentId: options.deploymentId,
+    sessionProvider: delegatingProvider,
+    ...options.fetch ? { fetch: options.fetch } : {}
+  });
+  const listeners = /* @__PURE__ */ new Set();
+  let bootstrap;
+  let snapshot = {
+    identity: { state: "loading" },
+    authModes: []
+  };
+  let initializing;
+  const pkceKey = `${namespace}:oidc-return`;
+  const browserStorage = () => {
+    const value = options.sessionStorage ?? globalThis.sessionStorage;
+    if (!value) throw new Error("OIDC sign-in requires browser sessionStorage.");
+    return value;
+  };
+  const locationHref = () => options.getLocationHref?.() ?? globalThis.location?.href ?? "";
+  const publish = (next) => {
+    snapshot = next;
+    listeners.forEach((listener) => listener());
+  };
+  const modes = () => [...bootstrap?.authentication.modes ?? []];
+  const failure = (message) => publish({ identity: { state: "error", secondaryText: message }, authModes: modes(), error: message });
+  const cleanCallbackUrl = (href) => {
+    const url = new URL(href);
+    url.searchParams.delete("code");
+    return url.toString();
+  };
+  const readPkceState = () => {
+    const raw = browserStorage().getItem(pkceKey);
+    if (!raw) return null;
+    try {
+      const value = JSON.parse(raw);
+      if (!value.verifier || !value.redirectUri || !value.returnUrl || !value.createdAt) return null;
+      if (Date.now() - value.createdAt > 10 * 60 * 1e3) return null;
+      return value;
+    } catch {
+      return null;
+    }
+  };
+  const finishCallback = async (code) => {
+    const state = readPkceState();
+    if (!state) {
+      browserStorage().removeItem(pkceKey);
+      throw new Error("The OIDC callback is missing valid local PKCE state.");
+    }
+    const currentOrigin = new URL(locationHref()).origin;
+    if (new URL(state.returnUrl).origin !== currentOrigin) throw new Error("The OIDC return location is invalid.");
+    await oidcProvider.exchange({ code, codeVerifier: state.verifier });
+    browserStorage().removeItem(pkceKey);
+    activeProvider = oidcProvider;
+    if (options.replaceLocation) options.replaceLocation(state.returnUrl);
+    else globalThis.history?.replaceState(null, "", state.returnUrl);
+    publish({ identity: { state: "authenticated", displayName: "Signed in" }, authModes: modes() });
+  };
+  const initialize = async () => {
+    if (initializing) return initializing;
+    initializing = (async () => {
+      publish({ identity: { state: "loading" }, authModes: [] });
+      try {
+        bootstrap = await client.bootstrap();
+        const authModes = modes();
+        const href = locationHref();
+        const callbackCode = href ? new URL(href).searchParams.get("code") : null;
+        if (callbackCode) {
+          if (!authModes.includes("external_oidc")) throw new Error("This deployment does not allow OIDC authentication.");
+          await finishCallback(callbackCode);
+          return;
+        }
+        if (href && new URL(href).searchParams.has("code")) throw new Error("The OIDC callback code is malformed.");
+        if (authModes.includes("external_oidc") && await oidcPersistence.sessionStorage.load()) {
+          activeProvider = oidcProvider;
+          await oidcProvider.getAccess({ reason: "request" });
+          publish({ identity: { state: "authenticated", displayName: "Signed in" }, authModes });
+          return;
+        }
+        if (authModes.includes("anonymous")) {
+          activeProvider = anonymousProvider;
+          publish({ identity: { state: "guest", displayName: "Guest" }, authModes });
+          return;
+        }
+        if (authModes.includes("external_oidc")) {
+          activeProvider = oidcProvider;
+          publish({ identity: { state: "signed_out" }, authModes });
+          return;
+        }
+        failure("Backend exchange requires a host integration and cannot run as a direct browser app.");
+      } catch (error) {
+        const href = locationHref();
+        const callbackPending = Boolean(href && new URL(href).searchParams.has("code"));
+        if (!callbackPending && modes().includes("anonymous")) {
+          activeProvider = anonymousProvider;
+          publish({ identity: { state: "guest", displayName: "Guest" }, authModes: modes() });
+        } else {
+          failure(error instanceof Error ? error.message : "The browser deployment session could not be initialized.");
+        }
+      }
+    })().finally(() => {
+      initializing = void 0;
+    });
+    return initializing;
+  };
+  return {
+    client,
+    getSnapshot: () => snapshot,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+    initialize,
+    async signIn() {
+      if (!bootstrap) await initialize();
+      if (!modes().includes("external_oidc")) throw new Error("This deployment does not allow OIDC sign-in.");
+      const href = locationHref();
+      if (!href) throw new Error("OIDC sign-in requires a browser location.");
+      const returnUrl = cleanCallbackUrl(href);
+      const redirect = new URL(returnUrl);
+      redirect.search = "";
+      const redirectUri = redirect.toString();
+      const pkce = await createPkcePair();
+      browserStorage().setItem(pkceKey, JSON.stringify({ verifier: pkce.verifier, redirectUri, returnUrl, createdAt: Date.now() }));
+      publish({ identity: { state: "loading" }, authModes: modes() });
+      try {
+        const authorization = await oidcProvider.beginAuthorization({ redirectUri, codeChallenge: pkce.challenge });
+        if (options.navigate) options.navigate(authorization.authorizationUrl);
+        else globalThis.location?.assign(authorization.authorizationUrl);
+      } catch (error) {
+        browserStorage().removeItem(pkceKey);
+        failure(error instanceof Error ? error.message : "OIDC sign-in could not start.");
+        throw error;
+      }
+    },
+    async signOut() {
+      publish({ identity: { state: "loading" }, authModes: modes() });
+      await oidcProvider.revoke?.();
+      browserStorage().removeItem(pkceKey);
+      if (modes().includes("anonymous")) {
+        activeProvider = anonymousProvider;
+        publish({ identity: { state: "guest", displayName: "Guest" }, authModes: modes() });
+      } else {
+        activeProvider = oidcProvider;
+        publish({ identity: { state: "signed_out" }, authModes: modes() });
+      }
+    }
+  };
+}
 
-export { createBrowserAgentClient, runtimeAdapter };
+export { createBrowserAgentClient, createBrowserDeploymentSessionController, createBrowserSessionPersistence, runtimeAdapter };
 //# sourceMappingURL=browser.js.map
 //# sourceMappingURL=browser.js.map

package/dist/adapters/browser.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/browser.ts"],"names":[],"mappings":";;;;;AAGO,IAAM,cAAA,GAAiB;AAEvB,SAAS,yBAAyB,OAAA,EAA6C;AACpF,EAAA,OAAO,qBAAqB,OAAO,CAAA;AACrC","file":"browser.js","sourcesContent":["import { createAgents24Client } from \"../client.js\";\nimport type { AgentClient, Agents24ClientOptions } from \"../types.js\";\n\nexport const runtimeAdapter = \"browser\" as const;\n\nexport function createBrowserAgentClient(options: Agents24ClientOptions): AgentClient {\n  return createAgents24Client(options);\n}\n"]}
+{"version":3,"sources":["../../src/adapters/browser.ts"],"names":[],"mappings":";;;;;;AAoBO,IAAM,cAAA,GAAiB;AA4C9B,IAAM,UAAA,GAAa,SAAA;AAEnB,SAAS,cAAiB,OAAA,EAAqC;AAC7D,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,OAAA,CAAQ,SAAA,GAAY,MAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,OAAA,CAAQ,OAAA,GAAU,MAAM,MAAA,CAAO,OAAA,CAAQ,KAAA,YAAiB,KAAA,GAAQ,OAAA,CAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,iCAAiC,CAAC,CAAA;AAAA,EAC9H,CAAC,CAAA;AACH;AAEA,SAAS,gBAAgB,WAAA,EAA6C;AACpE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,WAAA,CAAY,UAAA,GAAa,MAAM,OAAA,EAAQ;AACvC,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,WAAA,CAAY,KAAA,YAAiB,KAAA,GAAQ,WAAA,CAAY,KAAA,GAAQ,IAAI,KAAA,CAAM,qCAAqC,CAAC,CAAA;AACnI,IAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AACtB,IAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AAAA,EACxB,CAAC,CAAA;AACH;AAEA,SAAS,uBAAuB,QAAA,EAAqD;AACnF,EAAA,MAAM,KAAA,GAAQ,YAAa,UAAA,CAA8D,SAAA;AACzF,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAC5E,EAAA,OAAO,KAAA;AACT;AAEA,eAAe,aAAa,OAAA,EAAkE;AAC5F,EAAA,MAAM,OAAA,GAAU,sBAAA,CAAuB,OAAA,CAAQ,eAAe,CAAA,CAAE,IAAA;AAAA,IAC9D,QAAQ,YAAA,IAAgB,iBAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,OAAA,CAAQ,kBAAkB,MAAM;AAC9B,IAAA,IAAI,CAAC,OAAA,CAAQ,MAAA,CAAO,gBAAA,CAAiB,QAAA,CAAS,UAAU,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,iBAAA,CAAkB,UAAU,CAAA;AAAA,EACxG,CAAA;AACA,EAAA,OAAO,cAAc,OAAO,CAAA;AAC9B;AAEA,SAAS,mBAAA,CAAuB,SAA2C,MAAA,EAAgB;AACzF,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,OAAA,CAAQ,SAAS,IAAI,MAAM,CAAA,CAAA;AAC1C,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,GAA0B;AAC9B,MAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,OAAO,CAAA;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,CAAY,UAAA,EAAY,UAAU,CAAA;AAC/D,QAAA,MAAM,KAAA,GAAQ,MAAM,aAAA,CAAc,WAAA,CAAY,YAAY,UAAU,CAAA,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA;AAC9E,QAAA,OAAQ,KAAA,IAA2B,IAAA;AAAA,MACrC,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,KAAA,EAAM;AAAA,MACjB;AAAA,IACF,CAAA;AAAA,IACA,MAAM,KAAK,KAAA,EAAyB;AAClC,MAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,OAAO,CAAA;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AAChE,QAAA,WAAA,CAAY,WAAA,CAAY,UAAU,CAAA,CAAE,GAAA,CAAI,OAAO,GAAG,CAAA;AAClD,QAAA,MAAM,gBAAgB,WAAW,CAAA;AAAA,MACnC,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,KAAA,EAAM;AAAA,MACjB;AAAA,IACF,CAAA;AAAA,IACA,MAAM,KAAA,GAAuB;AAC3B,MAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,OAAO,CAAA;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AAChE,QAAA,WAAA,CAAY,WAAA,CAAY,UAAU,CAAA,CAAE,MAAA,CAAO,GAAG,CAAA;AAC9C,QAAA,MAAM,gBAAgB,WAAW,CAAA;AAAA,MACnC,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,KAAA,EAAM;AAAA,MACjB;AAAA,IACF;AAAA,GACF;AACF;AAEA,SAAS,0BACP,OAAA,EAC4B;AAC5B,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,OAAA,CAAQ,SAAS,CAAA,cAAA,CAAA;AAChC,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,GAAkD;AACtD,MAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,OAAO,CAAA;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,CAAY,UAAA,EAAY,UAAU,CAAA;AAC/D,QAAA,MAAM,KAAA,GAAQ,MAAM,aAAA,CAAc,WAAA,CAAY,YAAY,UAAU,CAAA,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA;AAC9E,QAAA,OAAQ,KAAA,IAAmD,IAAA;AAAA,MAC7D,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,KAAA,EAAM;AAAA,MACjB;AAAA,IACF,CAAA;AAAA,IACA,MAAM,cAAA,CACJ,aAAA,EACA,IAAA,EACkB;AAClB,MAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,OAAO,CAAA;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,QAAA,CAAS,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AAChE,QAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,WAAA,CAAY,UAAU,CAAA;AAChD,QAAA,MAAM,UAAU,MAAM,aAAA,CAAc,KAAA,CAAM,GAAA,CAAI,GAAG,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,OAAA,EAAS,KAAA,IAAS,IAAA,MAAU,aAAA,EAAe;AAC9C,UAAA,MAAM,gBAAgB,WAAW,CAAA;AACjC,UAAA,OAAO,KAAA;AAAA,QACT;AACA,QAAA,KAAA,CAAM,GAAA,CAAI,MAAM,GAAG,CAAA;AACnB,QAAA,MAAM,gBAAgB,WAAW,CAAA;AACjC,QAAA,OAAO,IAAA;AAAA,MACT,CAAA,SAAE;AACA,QAAA,QAAA,CAAS,KAAA,EAAM;AAAA,MACjB;AAAA,IACF;AAAA,GACF;AACF;AAQO,SAAS,gCAAgC,OAAA,EAAsE;AACpH,EAAA,MAAM,cAAA,GAAiB,mBAAA,CAAgD,OAAA,EAAS,SAAS,CAAA;AACzF,EAAA,MAAM,cAAA,GAAiB,mBAAA,CAAmC,OAAA,EAAS,UAAU,CAAA;AAC7E,EAAA,MAAM,qBAAqB,8BAAA,CAA+B;AAAA,IACxD,OAAA,EAAS,0BAA0B,OAAO;AAAA,GAC3C,CAAA;AACD,EAAA,OAAO,EAAE,cAAA,EAAgB,cAAA,EAAgB,kBAAA,EAAmB;AAC9D;AAEO,SAAS,yBAAyB,OAAA,EAA6C;AACpF,EAAA,OAAO,qBAAqB,OAAO,CAAA;AACrC;AAuDA,IAAM,oBAAA,GAAuB,0BAAA;AAEtB,SAAS,yCACd,OAAA,EACoC;AACpC,EAAA,MAAM,OAAA,GAAU,OAAO,OAAA,CAAQ,OAAA,IAAW,oBAAoB,CAAA,CAAE,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAClF,EAAA,MAAM,SAAA,GAAY,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,QAAQ,YAAY,CAAA,CAAA;AACpD,EAAA,MAAM,oBAAA,GAAuB,OAAA,CAAQ,WAAA,EAAa,SAAA,IAAa,+BAAA,CAAgC,EAAE,SAAA,EAAW,CAAA,EAAG,SAAS,CAAA,UAAA,CAAA,EAAc,CAAA;AACtI,EAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,WAAA,EAAa,IAAA,IAAQ,+BAAA,CAAgC,EAAE,SAAA,EAAW,CAAA,EAAG,SAAS,CAAA,KAAA,CAAA,EAAS,CAAA;AACvH,EAAA,MAAM,gBAAgB,8BAAA,CAA+B,EAAE,OAAA,EAAS,oBAAA,CAAqB,gBAAgB,CAAA;AACrG,EAAA,MAAM,WAAW,8BAAA,CAA+B,EAAE,OAAA,EAAS,eAAA,CAAgB,gBAAgB,CAAA;AAC3F,EAAA,MAAM,oBAAoB,8BAAA,CAA+B;AAAA,IACvD,OAAA;AAAA,IACA,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU,EAAC;AAAA,IAChD,eAAA,EAAiB,aAAA;AAAA,IACjB,UAAA,EAAY,IAAA;AAAA,IACZ,aAAa,oBAAA,CAAqB,kBAAA;AAAA,IAClC,SAAS,oBAAA,CAAqB;AAAA,GAC/B,CAAA;AACD,EAAA,MAAM,eAAe,+BAAA,CAAgC;AAAA,IACnD,OAAA;AAAA,IACA,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU,EAAC;AAAA,IAChD,eAAA,EAAiB,QAAA;AAAA,IACjB,aAAa,eAAA,CAAgB,kBAAA;AAAA,IAC7B,SAAS,eAAA,CAAgB;AAAA,GAC1B,CAAA;AACD,EAAA,IAAI,cAAA;AACJ,EAAA,MAAM,sBAAsB,YAA4C;AACtE,IAAA,IAAI,CAAC,cAAA,EAAgB,MAAM,UAAA,EAAW;AACtC,IAAA,IAAI,CAAC,cAAA,EAAgB,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAC/F,IAAA,OAAO,cAAA;AAAA,EACT,CAAA;AACA,EAAA,MAAM,kBAAA,GAA4C;AAAA,IAChD,MAAM,UAAU,OAAA,EAAS;AACvB,MAAA,OAAA,CAAQ,MAAM,mBAAA,EAAoB,EAAG,SAAA,CAAU,OAAO,CAAA;AAAA,IACxD,CAAA;AAAA,IACA,MAAM,QAAQ,OAAA,EAAS;AACrB,MAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,EAAoB;AAC3C,MAAA,IAAI,CAAC,QAAA,CAAS,OAAA,EAAS,MAAM,IAAI,MAAM,iCAAiC,CAAA;AACxE,MAAA,OAAO,QAAA,CAAS,QAAQ,OAAO,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,OAAO,KAAA,EAAO;AAClB,MAAA,OAAA,CAAQ,MAAM,mBAAA,EAAoB,EAAG,MAAA,GAAS,KAAK,CAAA;AAAA,IACrD;AAAA,GACF;AACA,EAAA,MAAM,SAAS,wBAAA,CAAyB;AAAA,IACtC,OAAA;AAAA,IACA,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,eAAA,EAAiB,kBAAA;AAAA,IACjB,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,GACjD,CAAA;AACD,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAgB;AACtC,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,QAAA,GAA6C;AAAA,IAC/C,QAAA,EAAU,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA,IAC7B,WAAW;AAAC,GACd;AACA,EAAA,IAAI,YAAA;AACJ,EAAA,MAAM,OAAA,GAAU,GAAG,SAAS,CAAA,YAAA,CAAA;AAE5B,EAAA,MAAM,iBAAiB,MAA0B;AAC/C,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,cAAA,IAAmB,UAAA,CAAkE,cAAA;AAC3G,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAC3E,IAAA,OAAO,KAAA;AAAA,EACT,CAAA;AACA,EAAA,MAAM,eAAe,MAAM,OAAA,CAAQ,mBAAkB,IAAM,UAAA,CAA2D,UAAU,IAAA,IAAQ,EAAA;AACxI,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,KAA2C;AAC1D,IAAA,QAAA,GAAW,IAAA;AACX,IAAA,SAAA,CAAU,OAAA,CAAQ,CAAC,QAAA,KAAa,QAAA,EAAU,CAAA;AAAA,EAC5C,CAAA;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,CAAC,GAAI,WAAW,cAAA,CAAe,KAAA,IAAS,EAAG,CAAA;AAC/D,EAAA,MAAM,UAAU,CAAC,OAAA,KAAoB,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,OAAA,EAAS,aAAA,EAAe,SAAQ,EAAG,SAAA,EAAW,OAAM,EAAG,KAAA,EAAO,SAAS,CAAA;AACzI,EAAA,MAAM,gBAAA,GAAmB,CAAC,IAAA,KAAyB;AACjD,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAI,CAAA;AACxB,IAAA,GAAA,CAAI,YAAA,CAAa,OAAO,MAAM,CAAA;AAC9B,IAAA,OAAO,IAAI,QAAA,EAAS;AAAA,EACtB,CAAA;AACA,EAAA,MAAM,gBAAgB,MAA8B;AAClD,IAAA,MAAM,GAAA,GAAM,cAAA,EAAe,CAAE,OAAA,CAAQ,OAAO,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,MAAA,IAAI,CAAC,KAAA,CAAM,QAAA,IAAY,CAAC,KAAA,CAAM,WAAA,IAAe,CAAC,KAAA,CAAM,SAAA,IAAa,CAAC,KAAA,CAAM,SAAA,EAAW,OAAO,IAAA;AAC1F,MAAA,IAAI,IAAA,CAAK,KAAI,GAAI,KAAA,CAAM,YAAY,EAAA,GAAK,EAAA,GAAK,KAAM,OAAO,IAAA;AAC1D,MAAA,OAAO,KAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA;AACA,EAAA,MAAM,cAAA,GAAiB,OAAO,IAAA,KAAiB;AAC7C,IAAA,MAAM,QAAQ,aAAA,EAAc;AAC5B,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,cAAA,EAAe,CAAE,WAAW,OAAO,CAAA;AACnC,MAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,IACxE;AACA,IAAA,MAAM,aAAA,GAAgB,IAAI,GAAA,CAAI,YAAA,EAAc,CAAA,CAAE,MAAA;AAC9C,IAAA,IAAI,IAAI,GAAA,CAAI,KAAA,CAAM,SAAS,CAAA,CAAE,WAAW,aAAA,EAAe,MAAM,IAAI,KAAA,CAAM,sCAAsC,CAAA;AAC7G,IAAA,MAAM,aAAa,QAAA,CAAS,EAAE,MAAM,YAAA,EAAc,KAAA,CAAM,UAAU,CAAA;AAClE,IAAA,cAAA,EAAe,CAAE,WAAW,OAAO,CAAA;AACnC,IAAA,cAAA,GAAiB,YAAA;AACjB,IAAA,IAAI,OAAA,CAAQ,eAAA,EAAiB,OAAA,CAAQ,eAAA,CAAgB,MAAM,SAAS,CAAA;AAAA,SAC9D,UAAA,CAA4G,OAAA,EAAS,aAAa,IAAA,EAAM,EAAA,EAAI,MAAM,SAAS,CAAA;AACjK,IAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,EAAE,KAAA,EAAO,eAAA,EAAiB,WAAA,EAAa,WAAA,EAAY,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAAA,EAChG,CAAA;AAEA,EAAA,MAAM,aAAa,YAAY;AAC7B,IAAA,IAAI,cAAc,OAAO,YAAA;AACzB,IAAA,YAAA,GAAA,CAAgB,YAAY;AAC1B,MAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,WAAU,EAAG,SAAA,EAAW,EAAC,EAAG,CAAA;AACzD,MAAA,IAAI;AACF,QAAA,SAAA,GAAY,MAAM,OAAO,SAAA,EAAU;AACnC,QAAA,MAAM,YAAY,KAAA,EAAM;AACxB,QAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,QAAA,MAAM,YAAA,GAAe,OAAO,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,GAAI,IAAA;AACrE,QAAA,IAAI,YAAA,EAAc;AAChB,UAAA,IAAI,CAAC,UAAU,QAAA,CAAS,eAAe,GAAG,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAC/G,UAAA,MAAM,eAAe,YAAY,CAAA;AACjC,UAAA;AAAA,QACF;AACA,QAAA,IAAI,IAAA,IAAQ,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,MAAM,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,sCAAsC,CAAA;AAC1G,QAAA,IAAI,SAAA,CAAU,SAAS,eAAe,CAAA,IAAK,MAAM,eAAA,CAAgB,cAAA,CAAe,MAAK,EAAG;AACtF,UAAA,cAAA,GAAiB,YAAA;AACjB,UAAA,MAAM,YAAA,CAAa,SAAA,CAAU,EAAE,MAAA,EAAQ,WAAW,CAAA;AAClD,UAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,iBAAiB,WAAA,EAAa,WAAA,EAAY,EAAG,SAAA,EAAW,CAAA;AACrF,UAAA;AAAA,QACF;AACA,QAAA,IAAI,SAAA,CAAU,QAAA,CAAS,WAAW,CAAA,EAAG;AACnC,UAAA,cAAA,GAAiB,iBAAA;AACjB,UAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,SAAS,WAAA,EAAa,OAAA,EAAQ,EAAG,SAAA,EAAW,CAAA;AACzE,UAAA;AAAA,QACF;AACA,QAAA,IAAI,SAAA,CAAU,QAAA,CAAS,eAAe,CAAA,EAAG;AACvC,UAAA,cAAA,GAAiB,YAAA;AACjB,UAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,EAAE,OAAO,YAAA,EAAa,EAAG,WAAW,CAAA;AACxD,UAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,sFAAsF,CAAA;AAAA,MAChG,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,QAAA,MAAM,eAAA,GAAkB,OAAA,CAAQ,IAAA,IAAQ,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,MAAM,CAAC,CAAA;AAC9E,QAAA,IAAI,CAAC,eAAA,IAAmB,KAAA,EAAM,CAAE,QAAA,CAAS,WAAW,CAAA,EAAG;AACrD,UAAA,cAAA,GAAiB,iBAAA;AACjB,UAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,EAAE,KAAA,EAAO,OAAA,EAAS,WAAA,EAAa,OAAA,EAAQ,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAAA,QACpF,CAAA,MAAO;AACL,UAAA,OAAA,CAAQ,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,0DAA0D,CAAA;AAAA,QAC7G;AAAA,MACF;AAAA,IACF,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAAE,MAAA,YAAA,GAAe,MAAA;AAAA,IAAW,CAAC,CAAA;AAChD,IAAA,OAAO,YAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,aAAa,MAAM,QAAA;AAAA,IACnB,UAAU,QAAA,EAAU;AAClB,MAAA,SAAA,CAAU,IAAI,QAAQ,CAAA;AACtB,MAAA,OAAO,MAAM,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,IACxC,CAAA;AAAA,IACA,UAAA;AAAA,IACA,MAAM,MAAA,GAAS;AACb,MAAA,IAAI,CAAC,SAAA,EAAW,MAAM,UAAA,EAAW;AACjC,MAAA,IAAI,CAAC,OAAM,CAAE,QAAA,CAAS,eAAe,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,8CAA8C,CAAA;AACtG,MAAA,MAAM,OAAO,YAAA,EAAa;AAC1B,MAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,MAAM,2CAA2C,CAAA;AACtE,MAAA,MAAM,SAAA,GAAY,iBAAiB,IAAI,CAAA;AACvC,MAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,SAAS,CAAA;AAClC,MAAA,QAAA,CAAS,MAAA,GAAS,EAAA;AAClB,MAAA,MAAM,WAAA,GAAc,SAAS,QAAA,EAAS;AACtC,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,EAAe;AAClC,MAAA,cAAA,GAAiB,OAAA,CAAQ,OAAA,EAAS,IAAA,CAAK,SAAA,CAAU,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAU,WAAA,EAAa,WAAW,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI,EAA6B,CAAC,CAAA;AACtJ,MAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,WAAU,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAC9D,MAAA,IAAI;AACF,QAAA,MAAM,aAAA,GAAgB,MAAM,YAAA,CAAa,kBAAA,CAAmB,EAAE,WAAA,EAAa,aAAA,EAAe,IAAA,CAAK,SAAA,EAAW,CAAA;AAC1G,QAAA,IAAI,OAAA,CAAQ,QAAA,EAAU,OAAA,CAAQ,QAAA,CAAS,cAAc,gBAAgB,CAAA;AAAA,aAC/D,UAAA,CAAuE,QAAA,EAAU,MAAA,CAAO,cAAc,gBAAgB,CAAA;AAAA,MAC9H,SAAS,KAAA,EAAO;AACd,QAAA,cAAA,EAAe,CAAE,WAAW,OAAO,CAAA;AACnC,QAAA,OAAA,CAAQ,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,+BAA+B,CAAA;AAChF,QAAA,MAAM,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IACA,MAAM,OAAA,GAAU;AACd,MAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,WAAU,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAC9D,MAAA,MAAM,aAAa,MAAA,IAAS;AAC5B,MAAA,cAAA,EAAe,CAAE,WAAW,OAAO,CAAA;AACnC,MAAA,IAAI,KAAA,EAAM,CAAE,QAAA,CAAS,WAAW,CAAA,EAAG;AACjC,QAAA,cAAA,GAAiB,iBAAA;AACjB,QAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,EAAE,KAAA,EAAO,OAAA,EAAS,WAAA,EAAa,OAAA,EAAQ,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAAA,MACpF,CAAA,MAAO;AACL,QAAA,cAAA,GAAiB,YAAA;AACjB,QAAA,OAAA,CAAQ,EAAE,UAAU,EAAE,KAAA,EAAO,cAAa,EAAG,SAAA,EAAW,KAAA,EAAM,EAAG,CAAA;AAAA,MACnE;AAAA,IACF;AAAA,GACF;AACF","file":"browser.js","sourcesContent":["import { createAgents24Client } from \"../client.js\";\nimport { createPkcePair, createWebCryptoDpopKeyProvider } from \"../dpop.js\";\nimport type { DpopKeyHandle, DpopKeyHandleStorage } from \"../dpop.js\";\nimport {\n  createAnonymousSessionProvider,\n  createFencedRefreshCoordinator,\n  createHostedOidcSessionProvider,\n} from \"../sessions.js\";\nimport type {\n  AgentClient,\n  Agents24ClientOptions,\n  ClientSessionStorage,\n  ClientSessionStorageRecord,\n  ClientSessionProvider,\n  ClientBootstrap,\n  SessionRefreshCoordinator,\n  SessionRefreshFenceRecord,\n  SessionRefreshFenceStorage,\n} from \"../types.js\";\n\nexport const runtimeAdapter = \"browser\" as const;\n\ntype RequestLike<T> = {\n  error?: unknown;\n  result: T;\n  onsuccess: (() => void) | null;\n  onerror: (() => void) | null;\n};\n\ntype OpenRequestLike = RequestLike<DatabaseLike> & {\n  onupgradeneeded: (() => void) | null;\n};\n\ntype ObjectStoreLike = {\n  delete(key: string): RequestLike<unknown>;\n  get(key: string): RequestLike<unknown>;\n  put(value: unknown, key: string): RequestLike<unknown>;\n};\n\ntype TransactionLike = {\n  error?: unknown;\n  objectStore(name: string): ObjectStoreLike;\n  oncomplete: (() => void) | null;\n  onabort: (() => void) | null;\n  onerror: (() => void) | null;\n};\n\ntype DatabaseLike = {\n  close(): void;\n  createObjectStore(name: string): unknown;\n  objectStoreNames: { contains(name: string): boolean };\n  transaction(name: string, mode: \"readonly\" | \"readwrite\"): TransactionLike;\n};\n\ntype IndexedDatabaseLike = {\n  open(name: string, version: number): OpenRequestLike;\n};\n\nexport type BrowserSessionPersistenceOptions = {\n  databaseName?: string;\n  indexedDatabase?: IndexedDatabaseLike;\n  namespace: string;\n};\n\nconst STORE_NAME = \"runtime\";\n\nfunction requestResult<T>(request: RequestLike<T>): Promise<T> {\n  return new Promise((resolve, reject) => {\n    request.onsuccess = () => resolve(request.result);\n    request.onerror = () => reject(request.error instanceof Error ? request.error : new Error(\"Browser storage request failed.\"));\n  });\n}\n\nfunction transactionDone(transaction: TransactionLike): Promise<void> {\n  return new Promise((resolve, reject) => {\n    transaction.oncomplete = () => resolve();\n    const fail = () => reject(transaction.error instanceof Error ? transaction.error : new Error(\"Browser storage transaction failed.\"));\n    transaction.onabort = fail;\n    transaction.onerror = fail;\n  });\n}\n\nfunction resolveIndexedDatabase(injected?: IndexedDatabaseLike): IndexedDatabaseLike {\n  const value = injected ?? (globalThis as unknown as { indexedDB?: IndexedDatabaseLike }).indexedDB;\n  if (!value) throw new Error(\"Persistent browser sessions require IndexedDB.\");\n  return value;\n}\n\nasync function openDatabase(options: BrowserSessionPersistenceOptions): Promise<DatabaseLike> {\n  const request = resolveIndexedDatabase(options.indexedDatabase).open(\n    options.databaseName || \"agents24-client\",\n    1,\n  );\n  request.onupgradeneeded = () => {\n    if (!request.result.objectStoreNames.contains(STORE_NAME)) request.result.createObjectStore(STORE_NAME);\n  };\n  return requestResult(request);\n}\n\nfunction createRecordStorage<T>(options: BrowserSessionPersistenceOptions, suffix: string) {\n  const key = `${options.namespace}:${suffix}`;\n  return {\n    async load(): Promise<T | null> {\n      const database = await openDatabase(options);\n      try {\n        const transaction = database.transaction(STORE_NAME, \"readonly\");\n        const value = await requestResult(transaction.objectStore(STORE_NAME).get(key));\n        return (value as T | undefined) ?? null;\n      } finally {\n        database.close();\n      }\n    },\n    async save(value: T): Promise<void> {\n      const database = await openDatabase(options);\n      try {\n        const transaction = database.transaction(STORE_NAME, \"readwrite\");\n        transaction.objectStore(STORE_NAME).put(value, key);\n        await transactionDone(transaction);\n      } finally {\n        database.close();\n      }\n    },\n    async clear(): Promise<void> {\n      const database = await openDatabase(options);\n      try {\n        const transaction = database.transaction(STORE_NAME, \"readwrite\");\n        transaction.objectStore(STORE_NAME).delete(key);\n        await transactionDone(transaction);\n      } finally {\n        database.close();\n      }\n    },\n  };\n}\n\nfunction createRefreshFenceStorage(\n  options: BrowserSessionPersistenceOptions,\n): SessionRefreshFenceStorage {\n  const key = `${options.namespace}:refresh-fence`;\n  return {\n    async load(): Promise<SessionRefreshFenceRecord | null> {\n      const database = await openDatabase(options);\n      try {\n        const transaction = database.transaction(STORE_NAME, \"readonly\");\n        const value = await requestResult(transaction.objectStore(STORE_NAME).get(key));\n        return (value as SessionRefreshFenceRecord | undefined) ?? null;\n      } finally {\n        database.close();\n      }\n    },\n    async compareAndSwap(\n      expectedFence: number | null,\n      next: SessionRefreshFenceRecord,\n    ): Promise<boolean> {\n      const database = await openDatabase(options);\n      try {\n        const transaction = database.transaction(STORE_NAME, \"readwrite\");\n        const store = transaction.objectStore(STORE_NAME);\n        const current = await requestResult(store.get(key)) as SessionRefreshFenceRecord | undefined;\n        if ((current?.fence ?? null) !== expectedFence) {\n          await transactionDone(transaction);\n          return false;\n        }\n        store.put(next, key);\n        await transactionDone(transaction);\n        return true;\n      } finally {\n        database.close();\n      }\n    },\n  };\n}\n\nexport type BrowserSessionPersistence = {\n  dpopKeyStorage: DpopKeyHandleStorage;\n  refreshCoordinator: SessionRefreshCoordinator;\n  sessionStorage: ClientSessionStorage;\n};\n\nexport function createBrowserSessionPersistence(options: BrowserSessionPersistenceOptions): BrowserSessionPersistence {\n  const sessionStorage = createRecordStorage<ClientSessionStorageRecord>(options, \"session\");\n  const dpopKeyStorage = createRecordStorage<DpopKeyHandle>(options, \"dpop-key\");\n  const refreshCoordinator = createFencedRefreshCoordinator({\n    storage: createRefreshFenceStorage(options),\n  });\n  return { sessionStorage, dpopKeyStorage, refreshCoordinator };\n}\n\nexport function createBrowserAgentClient(options: Agents24ClientOptions): AgentClient {\n  return createAgents24Client(options);\n}\n\nexport type BrowserDeploymentIdentityState =\n  | \"loading\"\n  | \"guest\"\n  | \"authenticated\"\n  | \"signed_out\"\n  | \"error\";\n\nexport type BrowserDeploymentSessionSnapshot = {\n  identity: {\n    state: BrowserDeploymentIdentityState;\n    displayName?: string;\n    secondaryText?: string;\n  };\n  authModes: readonly string[];\n  error?: string;\n};\n\ntype BrowserStorageLike = {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n};\n\nexport type BrowserDeploymentSessionControllerOptions = {\n  deploymentId: string;\n  baseUrl?: string;\n  fetch?: Agents24ClientOptions[\"fetch\"];\n  sessionStorage?: BrowserStorageLike;\n  getLocationHref?: () => string;\n  navigate?: (url: string) => void;\n  replaceLocation?: (url: string) => void;\n  persistence?: {\n    anonymous: BrowserSessionPersistence;\n    oidc: BrowserSessionPersistence;\n  };\n};\n\nexport type BrowserDeploymentSessionController = {\n  client: AgentClient;\n  getSnapshot(): BrowserDeploymentSessionSnapshot;\n  subscribe(listener: () => void): () => void;\n  initialize(): Promise<void>;\n  signIn(): Promise<void>;\n  signOut(): Promise<void>;\n};\n\ntype PkceReturnState = {\n  verifier: string;\n  redirectUri: string;\n  returnUrl: string;\n  createdAt: number;\n};\n\nconst DEFAULT_API_BASE_URL = \"https://api.agents24.dev\";\n\nexport function createBrowserDeploymentSessionController(\n  options: BrowserDeploymentSessionControllerOptions,\n): BrowserDeploymentSessionController {\n  const baseUrl = String(options.baseUrl || DEFAULT_API_BASE_URL).replace(/\\/+$/, \"\");\n  const namespace = `${baseUrl}:${options.deploymentId}`;\n  const anonymousPersistence = options.persistence?.anonymous ?? createBrowserSessionPersistence({ namespace: `${namespace}:anonymous` });\n  const oidcPersistence = options.persistence?.oidc ?? createBrowserSessionPersistence({ namespace: `${namespace}:oidc` });\n  const anonymousDpop = createWebCryptoDpopKeyProvider({ storage: anonymousPersistence.dpopKeyStorage });\n  const oidcDpop = createWebCryptoDpopKeyProvider({ storage: oidcPersistence.dpopKeyStorage });\n  const anonymousProvider = createAnonymousSessionProvider({\n    baseUrl,\n    deploymentId: options.deploymentId,\n    ...(options.fetch ? { fetch: options.fetch } : {}),\n    dpopKeyProvider: anonymousDpop,\n    persistent: true,\n    coordinator: anonymousPersistence.refreshCoordinator,\n    storage: anonymousPersistence.sessionStorage,\n  });\n  const oidcProvider = createHostedOidcSessionProvider({\n    baseUrl,\n    deploymentId: options.deploymentId,\n    ...(options.fetch ? { fetch: options.fetch } : {}),\n    dpopKeyProvider: oidcDpop,\n    coordinator: oidcPersistence.refreshCoordinator,\n    storage: oidcPersistence.sessionStorage,\n  });\n  let activeProvider: ClientSessionProvider | undefined;\n  const awaitActiveProvider = async (): Promise<ClientSessionProvider> => {\n    if (!activeProvider) await initialize();\n    if (!activeProvider) throw new Error(\"The browser deployment session could not be initialized.\");\n    return activeProvider;\n  };\n  const delegatingProvider: ClientSessionProvider = {\n    async getAccess(context) {\n      return (await awaitActiveProvider()).getAccess(context);\n    },\n    async refresh(context) {\n      const provider = await awaitActiveProvider();\n      if (!provider.refresh) throw new Error(\"Session refresh is unavailable.\");\n      return provider.refresh(context);\n    },\n    async revoke(input) {\n      return (await awaitActiveProvider()).revoke?.(input);\n    },\n  };\n  const client = createBrowserAgentClient({\n    baseUrl,\n    deploymentId: options.deploymentId,\n    sessionProvider: delegatingProvider,\n    ...(options.fetch ? { fetch: options.fetch } : {}),\n  });\n  const listeners = new Set<() => void>();\n  let bootstrap: ClientBootstrap | undefined;\n  let snapshot: BrowserDeploymentSessionSnapshot = {\n    identity: { state: \"loading\" },\n    authModes: [],\n  };\n  let initializing: Promise<void> | undefined;\n  const pkceKey = `${namespace}:oidc-return`;\n\n  const browserStorage = (): BrowserStorageLike => {\n    const value = options.sessionStorage ?? (globalThis as unknown as { sessionStorage?: BrowserStorageLike }).sessionStorage;\n    if (!value) throw new Error(\"OIDC sign-in requires browser sessionStorage.\");\n    return value;\n  };\n  const locationHref = () => options.getLocationHref?.() ?? (globalThis as unknown as { location?: { href?: string } }).location?.href ?? \"\";\n  const publish = (next: BrowserDeploymentSessionSnapshot) => {\n    snapshot = next;\n    listeners.forEach((listener) => listener());\n  };\n  const modes = () => [...(bootstrap?.authentication.modes ?? [])];\n  const failure = (message: string) => publish({ identity: { state: \"error\", secondaryText: message }, authModes: modes(), error: message });\n  const cleanCallbackUrl = (href: string): string => {\n    const url = new URL(href);\n    url.searchParams.delete(\"code\");\n    return url.toString();\n  };\n  const readPkceState = (): PkceReturnState | null => {\n    const raw = browserStorage().getItem(pkceKey);\n    if (!raw) return null;\n    try {\n      const value = JSON.parse(raw) as Partial<PkceReturnState>;\n      if (!value.verifier || !value.redirectUri || !value.returnUrl || !value.createdAt) return null;\n      if (Date.now() - value.createdAt > 10 * 60 * 1000) return null;\n      return value as PkceReturnState;\n    } catch {\n      return null;\n    }\n  };\n  const finishCallback = async (code: string) => {\n    const state = readPkceState();\n    if (!state) {\n      browserStorage().removeItem(pkceKey);\n      throw new Error(\"The OIDC callback is missing valid local PKCE state.\");\n    }\n    const currentOrigin = new URL(locationHref()).origin;\n    if (new URL(state.returnUrl).origin !== currentOrigin) throw new Error(\"The OIDC return location is invalid.\");\n    await oidcProvider.exchange({ code, codeVerifier: state.verifier });\n    browserStorage().removeItem(pkceKey);\n    activeProvider = oidcProvider;\n    if (options.replaceLocation) options.replaceLocation(state.returnUrl);\n    else (globalThis as unknown as { history?: { replaceState(data: unknown, unused: string, url?: string): void } }).history?.replaceState(null, \"\", state.returnUrl);\n    publish({ identity: { state: \"authenticated\", displayName: \"Signed in\" }, authModes: modes() });\n  };\n\n  const initialize = async () => {\n    if (initializing) return initializing;\n    initializing = (async () => {\n      publish({ identity: { state: \"loading\" }, authModes: [] });\n      try {\n        bootstrap = await client.bootstrap();\n        const authModes = modes();\n        const href = locationHref();\n        const callbackCode = href ? new URL(href).searchParams.get(\"code\") : null;\n        if (callbackCode) {\n          if (!authModes.includes(\"external_oidc\")) throw new Error(\"This deployment does not allow OIDC authentication.\");\n          await finishCallback(callbackCode);\n          return;\n        }\n        if (href && new URL(href).searchParams.has(\"code\")) throw new Error(\"The OIDC callback code is malformed.\");\n        if (authModes.includes(\"external_oidc\") && await oidcPersistence.sessionStorage.load()) {\n          activeProvider = oidcProvider;\n          await oidcProvider.getAccess({ reason: \"request\" });\n          publish({ identity: { state: \"authenticated\", displayName: \"Signed in\" }, authModes });\n          return;\n        }\n        if (authModes.includes(\"anonymous\")) {\n          activeProvider = anonymousProvider;\n          publish({ identity: { state: \"guest\", displayName: \"Guest\" }, authModes });\n          return;\n        }\n        if (authModes.includes(\"external_oidc\")) {\n          activeProvider = oidcProvider;\n          publish({ identity: { state: \"signed_out\" }, authModes });\n          return;\n        }\n        failure(\"Backend exchange requires a host integration and cannot run as a direct browser app.\");\n      } catch (error) {\n        const href = locationHref();\n        const callbackPending = Boolean(href && new URL(href).searchParams.has(\"code\"));\n        if (!callbackPending && modes().includes(\"anonymous\")) {\n          activeProvider = anonymousProvider;\n          publish({ identity: { state: \"guest\", displayName: \"Guest\" }, authModes: modes() });\n        } else {\n          failure(error instanceof Error ? error.message : \"The browser deployment session could not be initialized.\");\n        }\n      }\n    })().finally(() => { initializing = undefined; });\n    return initializing;\n  };\n\n  return {\n    client,\n    getSnapshot: () => snapshot,\n    subscribe(listener) {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    initialize,\n    async signIn() {\n      if (!bootstrap) await initialize();\n      if (!modes().includes(\"external_oidc\")) throw new Error(\"This deployment does not allow OIDC sign-in.\");\n      const href = locationHref();\n      if (!href) throw new Error(\"OIDC sign-in requires a browser location.\");\n      const returnUrl = cleanCallbackUrl(href);\n      const redirect = new URL(returnUrl);\n      redirect.search = \"\";\n      const redirectUri = redirect.toString();\n      const pkce = await createPkcePair();\n      browserStorage().setItem(pkceKey, JSON.stringify({ verifier: pkce.verifier, redirectUri, returnUrl, createdAt: Date.now() } satisfies PkceReturnState));\n      publish({ identity: { state: \"loading\" }, authModes: modes() });\n      try {\n        const authorization = await oidcProvider.beginAuthorization({ redirectUri, codeChallenge: pkce.challenge });\n        if (options.navigate) options.navigate(authorization.authorizationUrl);\n        else (globalThis as unknown as { location?: { assign(url: string): void } }).location?.assign(authorization.authorizationUrl);\n      } catch (error) {\n        browserStorage().removeItem(pkceKey);\n        failure(error instanceof Error ? error.message : \"OIDC sign-in could not start.\");\n        throw error;\n      }\n    },\n    async signOut() {\n      publish({ identity: { state: \"loading\" }, authModes: modes() });\n      await oidcProvider.revoke?.();\n      browserStorage().removeItem(pkceKey);\n      if (modes().includes(\"anonymous\")) {\n        activeProvider = anonymousProvider;\n        publish({ identity: { state: \"guest\", displayName: \"Guest\" }, authModes: modes() });\n      } else {\n        activeProvider = oidcProvider;\n        publish({ identity: { state: \"signed_out\" }, authModes: modes() });\n      }\n    },\n  };\n}\n"]}

package/dist/adapters/cloudflare.js

@@ -1,6 +1,6 @@
-import { createAgents24Client } from '../chunk-QAIOKNUK.js';
-import '../chunk-SCZMUBXD.js';
-import '../chunk-NGZUJ3YT.js';
+import { createAgents24Client } from '../chunk-DEXGPNLL.js';
+import '../chunk-LG3ZMQ2W.js';
+import '../chunk-FLTCOJZR.js';
 
 // src/adapters/cloudflare.ts
 var runtimeAdapter = "cloudflare";

package/dist/adapters/node.js

@@ -1,6 +1,6 @@
-import { createAgents24Client } from '../chunk-QAIOKNUK.js';
-import '../chunk-SCZMUBXD.js';
-import '../chunk-NGZUJ3YT.js';
+import { createAgents24Client } from '../chunk-DEXGPNLL.js';
+import '../chunk-LG3ZMQ2W.js';
+import '../chunk-FLTCOJZR.js';
 
 // src/adapters/node.ts
 var runtimeAdapter = "node";

package/dist/adapters/worker.js

@@ -1,6 +1,6 @@
-import { createAgents24Client } from '../chunk-QAIOKNUK.js';
-import '../chunk-SCZMUBXD.js';
-import '../chunk-NGZUJ3YT.js';
+import { createAgents24Client } from '../chunk-DEXGPNLL.js';
+import '../chunk-LG3ZMQ2W.js';
+import '../chunk-FLTCOJZR.js';
 
 // src/adapters/worker.ts
 var runtimeAdapter = "worker";