@aparte/core 0.7.0 → 0.8.0

package/dist/types/models.d.ts

@@ -41,7 +41,7 @@ export interface AparteAttachment {
 /**
  * A single branch (alternative response) within an assistant message.
  *
- * @deprecated The active branching system is tree-based via `MessageRepository`
+ * @deprecated The active branching system is tree-based via `AparteMessageRepository`
  *   (siblings under the same parent node). This in-message versioning struct is
  *   kept only for backwards compatibility with existing serialised payloads.
  *   New code should rely on viewport methods `addSiblingOf` / `navigateBranch`
@@ -66,7 +66,7 @@ export interface AparteMessageBranch {
 export type AparteBubbleActionName = 'copy' | 'edit' | 'retry' | 'thumbUp' | 'thumbDown' | 'info';
 /**
  * Controls which action buttons are rendered in message bubbles.
- * Pass to `AparteConfig.setBubbleActions()` to customise or disable actions.
+ * Pass to `aparteGlobalConfig.setBubbleActions()` to customise or disable actions.
  *
  * **Only `copy` is on by default.** Core can copy text on its own; every other
  * button needs someone outside core to honor it — `AparteClient` (retry, edit) or
@@ -74,7 +74,7 @@ export type AparteBubbleActionName = 'copy' | 'edit' | 'retry' | 'thumbUp' | 'th
  * user, so aparté ships them off and you turn on what you handle:
  *
  * ```ts
- * AparteConfig.setBubbleActions({ retry: true, edit: true });   // you run AparteClient
+ * aparteGlobalConfig.setBubbleActions({ retry: true, edit: true });   // you run AparteClient
  * ```
  *
  * Two ways to configure:
@@ -107,11 +107,11 @@ export interface AparteBubbleActionsConfig {
 /**
  * The affordances core RENDERS but cannot COMPLETE — each one only asks, through a
  * DOM event, and the app does the work. Declare what your app actually handles
- * with `AparteConfig.setHostHandlers()`; everything else stays out of the UI
+ * with `aparteGlobalConfig.setHostHandlers()`; everything else stays out of the UI
  * rather than showing a control that answers to nobody.
  *
  * ```ts
- * AparteConfig.setHostHandlers({ attachmentPreview: true });   // you open a lightbox
+ * aparteGlobalConfig.setHostHandlers({ attachmentPreview: true });   // you open a lightbox
  * ```
  *
  * These are declarations, not callbacks: the events (`aparte-attachment-preview`,
@@ -136,6 +136,28 @@ export interface AparteHostHandlersConfig {
      * their button: core writes those out itself. Default: false
      */
     artifactRedownload?: boolean;
+    /**
+     * Re-running the generation of a **persisted binary artifact** when a saved
+     * conversation is re-opened (`aparte-artifact-ready`, dispatched from
+     * `setup()` rather than from a stream). Default: false
+     *
+     * Why this is off unless declared, and why it is separate from
+     * `artifactRedownload`: that flag guards a BUTTON, and a button is a request.
+     * This guards an automatic dispatch on mount — nobody asked for it, and the
+     * payload is model-authored content the receiving app is expected to run in a
+     * sandbox. Reloading a conversation would therefore re-execute whatever a
+     * prompt injection had persuaded the model to emit, on every reload, forever.
+     *
+     * Core cannot honour it end to end either: it owns no sandbox and no file
+     * generator, so a dispatch with nothing listening leaves the card stuck at
+     * "generating" — the same reasoning that made the artifact preview require a
+     * click. Declare it when your app really does listen for
+     * `aparte-artifact-ready` and can regenerate the file safely.
+     *
+     * Not affected: the dispatch at the END of a live stream, which follows a turn
+     * the user asked for. This flag is only about mount-time rehydration.
+     */
+    artifactRehydrate?: boolean;
 }
 /**
  * Core message structure for the chat
@@ -169,7 +191,7 @@ export interface AparteMessage {
     /**
      * Alternative responses generated by retrying.
      *
-     * @deprecated Use the tree-based branching exposed by `MessageRepository`
+     * @deprecated Use the tree-based branching exposed by `AparteMessageRepository`
      *   (siblings under the same parent). The bubble no longer reads this field
      *   — sibling counts come from `aparte-path-changed` event metadata.
      */
@@ -197,7 +219,7 @@ export interface AparteViewportConfig {
      * @deprecated Renamed to {@link maxRenderedBubbles}. This used to silently
      * evict messages from the conversation model (data loss); it now only caps
      * rendered bubbles. For real history retention, configure it on your
-     * ConversationManager instead.
+     * AparteConversationManager instead.
      */
     maxMessages?: number;
     /**

package/dist/types/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/types/models.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAMhG,mDAAmD;AACnD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,CAAC;AAMpD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IAEX,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IAEZ,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC;CACf;AAUD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAChC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,oBAAoB;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;AAElG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,yBAAyB;IACtC,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mGAAmG;IACnG,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qGAAqG;IACrG,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kFAAkF;IAClF,IAAI,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAChC,gHAAgH;IAChH,SAAS,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,iCAAiC;IACjC,IAAI,EAAE,gBAAgB,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAE3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAElB,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,oCAAoC;IACpC,MAAM,CAAC,EAAE,YAAY,CAAC;IAEtB,iDAAiD;IACjD,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,WAAW,EAAE,WAAW,CAAC;IAExC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAEjC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAMD,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACjC,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAC9B,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/types/models.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAMnD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;AAMhG,mDAAmD;AACnD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,CAAC;AAMpD;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IAEX,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IAEb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IAEZ,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC;CACf;AAUD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAChC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,oBAAoB;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;AAElG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,yBAAyB;IACtC,uFAAuF;IACvF,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mGAAmG;IACnG,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qGAAqG;IACrG,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kFAAkF;IAClF,IAAI,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAChC,gHAAgH;IAChH,SAAS,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACxC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC1B,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IAEX,iCAAiC;IACjC,IAAI,EAAE,gBAAgB,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAE3B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAElB,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,oCAAoC;IACpC,MAAM,CAAC,EAAE,YAAY,CAAC;IAEtB,iDAAiD;IACjD,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,WAAW,EAAE,WAAW,CAAC;IAExC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAEjC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAMD,mDAAmD;AACnD,MAAM,WAAW,oBAAoB;IACjC,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAC9B,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB"}

package/dist/types/segments.d.ts

@@ -204,15 +204,8 @@ export interface AparteSegmentRenderer<T extends AparteSegmentBase = AparteSegme
      */
     cleanup?(element: HTMLElement): void;
 }
-/** Event when a segment action is triggered (e.g., "Run", "Copy") */
-export interface AparteSegmentActionEvent {
-    messageId: string;
-    segmentId: string;
-    action: string;
-    payload?: unknown;
-}
 /** Event when segment content is updated during streaming */
-export interface AparteSegmentUpdateEvent {
+export interface AparteSegmentUpdateEventDetail {
     messageId: string;
     segmentId: string;
     content: string;

package/dist/types/segments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"segments.d.ts","sourceRoot":"","sources":["../../src/types/segments.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAC9B,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IAEX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,mDAAmD;AACnD,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CAC7C;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6BAA6B;AAC7B,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC3D,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;CACzD;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,mBAAmB,GAAG,UAAU,CAAC;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC1D,IAAI,EAAE,QAAQ,CAAC;IACf,yGAAyG;IACzG,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAMD,gEAAgE;AAChE,MAAM,WAAW,4BAA6B,SAAQ,iBAAiB;IACnE,IAAI,EAAE,kBAAkB,CAAC;CAC5B;AAED,iCAAiC;AACjC,MAAM,MAAM,aAAa,GACnB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,4BAA4B,CAAC;AAEnC,wCAAwC;AACxC,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AAMtD;;;GAGG;AACH,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAClF,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,CAAC;IAEzC;;;OAGG;IACH,SAAS,CAAC,IAAI,MAAM,CAAC;IAErB;;;;OAIG;IACH,KAAK,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAE/C;;;;;OAKG;IACH,MAAM,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAEhD;;;OAGG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAMD,qEAAqE;AACrE,MAAM,WAAW,wBAAwB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,6DAA6D;AAC7D,MAAM,WAAW,wBAAwB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB"}
+{"version":3,"file":"segments.d.ts","sourceRoot":"","sources":["../../src/types/segments.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IAC9B,gCAAgC;IAChC,EAAE,EAAE,MAAM,CAAC;IAEX,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IAEb,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,mDAAmD;AACnD,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CAC7C;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6BAA6B;AAC7B,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC3D,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,oBAAoB;AACpB,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,6CAA6C;AAC7C,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;CACzD;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,mBAAmB,GAAG,UAAU,CAAC;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC1D,IAAI,EAAE,QAAQ,CAAC;IACf,yGAAyG;IACzG,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC5D,IAAI,EAAE,UAAU,CAAC;IACjB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAMD,gEAAgE;AAChE,MAAM,WAAW,4BAA6B,SAAQ,iBAAiB;IACnE,IAAI,EAAE,kBAAkB,CAAC;CAC5B;AAED,iCAAiC;AACjC,MAAM,MAAM,aAAa,GACnB,iBAAiB,GACjB,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,4BAA4B,CAAC;AAEnC,wCAAwC;AACxC,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AAMtD;;;GAGG;AACH,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,iBAAiB,GAAG,iBAAiB;IAClF,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,CAAC;IAEzC;;;OAGG;IACH,SAAS,CAAC,IAAI,MAAM,CAAC;IAErB;;;;OAIG;IACH,KAAK,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAE/C;;;;;OAKG;IACH,MAAM,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAEhD;;;OAGG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CACxC;AAMD,6DAA6D;AAC7D,MAAM,WAAW,8BAA8B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/types/theming.d.ts

@@ -3,42 +3,30 @@
  * CSS Custom Properties interfaces for theming
  */
 /**
- * CSS Custom Properties available for theming
- * All properties are optional - defaults are applied in components
+ * Any aparté CSS custom property, for typing a theme object or a `style` record:
+ *
+ * ```ts
+ * const brand: AparteThemeVariables = {
+ *   '--aparte-primary': '#b45309',
+ *   '--aparte-surface-1': '#ffffff',
+ * };
+ * ```
+ *
+ * This was a hand-written list of 33 named properties, and it could not work. Ten
+ * of the 33 named variables were neither declared nor read anywhere in aparté —
+ * so the type autocompleted ten knobs that did nothing — while the real surface is
+ * 254 tokens, meaning even the 23 live members were an arbitrary slice presented as
+ * the whole. A hand-maintained mirror of a stylesheet that size is wrong the day
+ * after it is written, and nothing could tell you.
+ *
+ * What this trades away, stated rather than glossed: autocomplete, and catching a
+ * typo in the part after `--aparte-`. What it buys is that the type cannot lie. The
+ * discoverable list is the generated
+ * [CSS variables reference](https://apartejs.dev/reference/css-variables/), which
+ * is swept from the source on every build and marks which tokens aparté actually
+ * reads.
  */
-export interface AparteThemeVariables {
-    '--aparte-primary'?: string;
-    '--aparte-primary-hover'?: string;
-    '--aparte-secondary'?: string;
-    '--aparte-neutral'?: string;
-    '--aparte-message-content-bg-user'?: string;
-    '--aparte-message-content-bg-assistant'?: string;
-    '--aparte-message-content-text-user'?: string;
-    '--aparte-message-content-text-assistant'?: string;
-    '--aparte-message-content-radius'?: string;
-    '--aparte-message-content-radius-corner'?: string;
-    '--aparte-message-content-padding'?: string;
-    '--aparte-message-content-max-width'?: string;
-    '--aparte-message-content-font-size'?: string;
-    '--aparte-input-bg'?: string;
-    '--aparte-input-border'?: string;
-    '--aparte-input-text'?: string;
-    '--aparte-input-placeholder'?: string;
-    '--aparte-input-focus-border'?: string;
-    '--aparte-input-focus-ring'?: string;
-    '--aparte-input-radius'?: string;
-    '--aparte-input-font-size'?: string;
-    '--aparte-input-disabled-bg'?: string;
-    '--aparte-viewport-padding'?: string;
-    '--aparte-message-gap'?: string;
-    '--aparte-input-padding'?: string;
-    '--aparte-font-family'?: string;
-    '--aparte-timestamp-font-size'?: string;
-    '--aparte-status-color'?: string;
-    '--aparte-status-font-size'?: string;
-    '--aparte-status-dot-size'?: string;
-    '--aparte-status-padding'?: string;
-    '--aparte-button-radius'?: string;
-    '--aparte-button-text'?: string;
-}
+export type AparteThemeVariables = {
+    [K in `--aparte-${string}`]?: string;
+};
 //# sourceMappingURL=theming.d.ts.map

package/dist/types/theming.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theming.d.ts","sourceRoot":"","sources":["../../src/types/theming.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IAEjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,uCAAuC,CAAC,EAAE,MAAM,CAAC;IACjD,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,yCAAyC,CAAC,EAAE,MAAM,CAAC;IACnD,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,wCAAwC,CAAC,EAAE,MAAM,CAAC;IAClD,kCAAkC,CAAC,EAAE,MAAM,CAAC;IAC5C,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAG9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAGtC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAGxC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAGnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACnC"}
+{"version":3,"file":"theming.d.ts","sourceRoot":"","sources":["../../src/types/theming.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,oBAAoB,GAAG;KAAG,CAAC,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM;CAAE,CAAC"}

package/dist/types/tools.d.ts

@@ -52,16 +52,6 @@ export interface AparteToolApprovalRequestDetail {
     toolName: string;
     input: Record<string, unknown>;
 }
-/**
- * Detail for `aparte-tool-action` — a generic callback channel so any rendered
- * tool UI (via {@link AparteToolRenderer.setup}) can post an interactive action
- * back toward the host/loop (e.g. a custom confirm/choose/retry button).
- */
-export interface AparteToolActionDetail {
-    toolCallId: string;
-    action: string;
-    payload?: unknown;
-}
 /** A tool call emitted by the AI during streaming */
 export interface AparteToolCall {
     id: string;
@@ -78,18 +68,73 @@ export interface AparteToolResult {
  * Receives the tool call and an AbortSignal (fires after timeout or on cancellation).
  * Must resolve with a AparteToolResult.
  */
-export type AparteToolHandler = (call: AparteToolCall, signal: AbortSignal) => Promise<AparteToolResult>;
+export type AparteToolHandler = (call: AparteToolCall, signal: AbortSignal, context?: AparteToolContext) => Promise<AparteToolResult>;
+/**
+ * Which chat a tool handler is running for.
+ *
+ * Optional and third, so every existing handler keeps compiling and working —
+ * nothing has to be rewritten to ignore it.
+ *
+ * It exists because a handler had NO way to know. `@aparte/plugin-ask-user`
+ * calls `requestUserInput({ message, schema, signal })` with no `target`, and
+ * `requestUserInput` resolves its presenter with `resolveConfig(request.target ??
+ * null)` — so with an instance config carrying the presenter, the call resolved
+ * against the GLOBAL config, found nothing, and returned `{ action: 'cancel' }`.
+ * The model was told the user refused a question the user was never shown.
+ *
+ * That failure is described in `AparteConfig.requestUserInput` as "a lie told
+ * quietly", and the plugin walked straight into it because the handler signature
+ * gave it nothing to walk around with.
+ *
+ * Both loops supply it — core's inline loop and the injected `runStreamAgent` — so
+ * a handler behaves the same whichever one is running.
+ */
+export interface AparteToolContext {
+    /**
+     * The chat element this turn belongs to. Pass it as `target` to
+     * `requestUserInput` (or to anything else that resolves a config from the DOM)
+     * and the right instance answers.
+     */
+    target?: HTMLElement;
+    /**
+     * The resolved config for this chat, for a handler that needs it without going
+     * through the DOM — a handler running in a worker, or one reading a provider.
+     */
+    config?: unknown;
+}
 /**
  * Per-tool segment renderer.
- * Registered via AparteConfig.registerToolRenderer(toolName, renderer).
+ * Registered via aparteGlobalConfig.registerToolRenderer(toolName, renderer).
  * When the AI calls a tool, this renderer controls what appears in the bubble
  * for that specific tool instead of the generic tool_call renderer.
  *
- * Return an empty string from render() to render nothing (e.g. for UI-only tools like ask_question).
+ * Return an empty string from render() to render nothing (e.g. for UI-only tools like ask_user).
  */
 export interface AparteToolRenderer {
-    /** HTML to render for the tool call segment. Return empty string to hide. */
-    render: (segment: AparteToolCallSegment) => string;
+    /**
+     * Render the tool-call segment, as an HTML string or a ready DOM element.
+     *
+     * **The segment carries model-chosen data.** `segment.toolCall.input` is
+     * whatever the model decided to pass, and `segment.result` is whatever the tool
+     * returned — on the SEGMENT, because `AparteToolCall` is `{ id, name, input }`
+     * and nothing else. This line used to say `segment.toolCall.result`, which does
+     * not compile; the first renderer written against it found out.
+     * Both values are untrusted.
+     *
+     * Return an **HTMLElement** and there is no innerHTML surface at all — set
+     * `textContent`, attach listeners, insert framework nodes. That is the safe
+     * default and the reason this arm exists.
+     *
+     * Return a **string** and core inserts it with `innerHTML`, so every
+     * interpolated value must go through `escapeHtml` (text position) or
+     * `escapeAttr` (inside an attribute). The natural first thing to write here is
+     * `\`<div>Searching for ${s.toolCall.input.query}</div>\``, and that is a direct
+     * model-to-DOM XSS in the host page's origin.
+     *
+     * Return an empty string to render nothing (e.g. a UI-only tool like
+     * `ask_user`).
+     */
+    render: (segment: AparteToolCallSegment) => string | HTMLElement;
     /** Optional DOM setup (event listeners etc.) called after HTML is injected */
     setup?: (element: HTMLElement, segment: AparteToolCallSegment) => void;
     /** Optional CSS to inject once into document.head */

package/dist/types/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/types/tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,8GAA8G;IAC9G,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC5B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,KAClB,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAC/B,6EAA6E;IAC7E,MAAM,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACvE,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/types/tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,8GAA8G;IAC9G,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,qDAAqD;AACrD,MAAM,WAAW,cAAc;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC5B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,iBAAiB,KAC1B,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,MAAM,GAAG,WAAW,CAAC;IACjE,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACvE,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B"}

package/dist/utils/escape.d.ts

@@ -0,0 +1,46 @@
+/**
+ * HTML escaping — one implementation, for every interpolation core makes.
+ *
+ * There used to be SEVEN copies of this across the package (`_escapeHtml` in the
+ * bubble and in the config, `_escapeAttr` in the chat shell, the composer action
+ * and the composer input, plus `escapeHtml` and `escapeAttr` in the segment
+ * renderers). They had already drifted: the chat shell's copy escaped only `&`,
+ * `"` and `<`, leaving `'` and `>` through, so it was strictly weaker than its
+ * six siblings while looking identical at the call site. That is the failure mode
+ * a duplicated security helper always ends in — one of them stops matching, and
+ * nothing tells you which.
+ *
+ * Escapes all five characters that matter, which makes the result safe in BOTH
+ * text position and quoted-attribute position (single or double quotes). Callers
+ * that read better saying "attribute" use {@link escapeAttr}, which is this same
+ * function under a second name — an alias, deliberately not a second body.
+ *
+ * PUBLIC. Both names are exported from the barrel and documented in the
+ * customization guide, because a render hook that returns a string needs them and
+ * telling an author to "escape it yourself" without naming the function is how a
+ * capability becomes invisible. An earlier version of this comment claimed the
+ * opposite ("not exported from the package barrel… not a public API") while
+ * `index.ts` exported both — the export was real, the comment was not.
+ */
+export declare function escapeHtml(value: string): string;
+/**
+ * The same escaping as {@link escapeHtml}, named for the position it guards.
+ *
+ * An attribute value needs exactly the same five characters escaped as a text
+ * node — quotes to keep the value from ending early, angle brackets so a broken
+ * value cannot start a tag, and the ampersand so none of it can be smuggled back
+ * in as an entity. Two names, one body.
+ *
+ * REQUIRES A QUOTED ATTRIBUTE. `title="${escapeAttr(v)}"` and `title='…'` are
+ * both safe; bare `title=${escapeAttr(v)}` is NOT, because a space, tab, newline
+ * or backtick in the value ends an unquoted attribute and starts the next one —
+ * and none of those five escaped characters is one of them. An audit raised this
+ * as a latent gap (no unquoted interpolation exists in the library today).
+ *
+ * The fix is to quote the attribute, not to escape harder: encoding spaces would
+ * make every legitimate `title="Hello world"` read `Hello&#32;world`. So
+ * `pnpm check:attr-escaping` now rejects an unquoted attribute interpolation
+ * outright rather than trusting this function to cover a position it cannot.
+ */
+export declare const escapeAttr: typeof escapeHtml;
+//# sourceMappingURL=escape.d.ts.map

package/dist/utils/escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.d.ts","sourceRoot":"","sources":["../../src/utils/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYhD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,UAAU,mBAAa,CAAC"}

package/dist/utils/files-to-attachments.d.ts

@@ -13,7 +13,7 @@ import type { AparteAttachment } from '../types/models.js';
  * chat.addEventListener('aparte-send', (e) => {
  *   const { content, files } = e.detail;
  *   chat.viewport?.appendMessage({
- *     id: crypto.randomUUID(), role: 'user', content, timestamp: Date.now(),
+ *     id: uuid(), role: 'user', content, timestamp: Date.now(),
  *     ...(files?.length ? { attachments: filesToAttachments(files) } : {}),
  *   });
  * });
@@ -22,6 +22,23 @@ import type { AparteAttachment } from '../types/models.js';
  * The `url` comes from `URL.createObjectURL`, so it lives as long as the
  * document; the raw `File` rides along on `blob` for storage adapters that
  * persist attachments and rebuild the url on reload.
+ *
+ * That lifetime is deliberate for a rendered attachment — but it is also a leak
+ * once the attachment is gone: a long session that sends many files retains every
+ * `File` for the life of the page. Call {@link revokeAttachmentUrls} when you know
+ * they are no longer rendered; core does it on `clearAll()`.
  */
 export declare function filesToAttachments(files: readonly File[]): AparteAttachment[];
+/**
+ * Release the object URLs of attachments that are no longer on screen.
+ *
+ * Nothing revoked them, so every `File` a session sent stayed reachable until the
+ * page went away. Only the caller knows when an attachment stops being rendered —
+ * a persisted conversation may re-render one much later — so this is a function
+ * rather than something `filesToAttachments` could schedule.
+ *
+ * Safe to call twice: revoking an already-revoked or foreign URL is a no-op, and a
+ * `blob` is left in place so a storage adapter can still rebuild the url.
+ */
+export declare function revokeAttachmentUrls(attachments: readonly AparteAttachment[] | undefined): void;
 //# sourceMappingURL=files-to-attachments.d.ts.map

package/dist/utils/files-to-attachments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files-to-attachments.d.ts","sourceRoot":"","sources":["../../src/utils/files-to-attachments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAS7E"}
+{"version":3,"file":"files-to-attachments.d.ts","sourceRoot":"","sources":["../../src/utils/files-to-attachments.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAK3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAS7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,GAAG,IAAI,CAM/F"}

package/dist/utils/uuid.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A unique id, in every context the library actually runs in.
+ *
+ * `crypto.randomUUID` is **secure-context only**. On `http://` — which includes
+ * `http://192.168.1.x`, the archetypal deployment for this library's own audience
+ * (bring-your-own-key, a local model on the LAN box) — it does not exist, and
+ * calling it throws `TypeError: crypto.randomUUID is not a function`.
+ *
+ * That was not a theoretical edge. A cold audit found 27 call sites across ten
+ * files and exactly TWO of them guarded, and the first thing to break was the
+ * stream parser: `_generateId()` runs from `_createTextSegment`, so
+ * `parser.parse('hello')` threw on the very first token of the very first reply.
+ * The two guarded sites — `conversation-controller.ts` and
+ * `files-to-attachments.ts` — prove the hazard was known and the sweep was never
+ * finished. This is that sweep, in one place.
+ *
+ * The fallback is NOT cryptographic and does not need to be: these ids address
+ * DOM nodes and map keys inside one page. Where a real UUID matters (a persisted
+ * conversation id a consumer may treat as stable), `crypto.randomUUID` is still
+ * used first, so a secure context gets the strong value.
+ *
+ * `pnpm check:secure-context` refuses a bare `crypto.randomUUID` anywhere but
+ * here, so the sweep cannot come undone one call site at a time.
+ */
+export declare function uuid(): string;
+//# sourceMappingURL=uuid.d.ts.map

package/dist/utils/uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../../src/utils/uuid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,IAAI,IAAI,MAAM,CAM7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aparte/core",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "High-performance AI conversation engine - Zero-dependency Web Components",
   "type": "module",
   "//sideEffects": "The BROWSER entry defines the custom elements and imports CSS at module scope, so it must never be tree-shaken; the Node entry (`index.node`) and every other module are pure. Listing them explicitly is what lets a bundler drop the rest — the whole package was implicitly side-effectful before, the only one of the 14 without this field.",
@@ -28,8 +28,7 @@
     "./styles.css": {
       "@aparte-workspace/source": "./src/styles/bundle.css",
       "default": "./dist/index.css"
-    },
-    "./dist/index.css": "./dist/index.css"
+    }
   },
   "files": [
     "dist",
@@ -44,8 +43,7 @@
     "@types/node": "^22.0.0",
     "esbuild": "^0.27.2",
     "typescript": "^5.4.0",
-    "vite": "^6.0.0",
-    "vite-plugin-dts": "^4.5.4"
+    "vite": "^6.0.0"
   },
   "keywords": [
     "web-components",