@artooi/ag-ui-web-component 0.41.0 → 0.41.2

package/CHANGELOG.md

@@ -7,6 +7,50 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.41.2] — 2026-09-23
+
+### Changed
+
+- **The demo answers a denied approval with a result, as a real server does.**
+  The mock streamed a result only for the calls a person approved, and said so
+  in a comment: a denial was left for the model to answer. django-ag-ui streams
+  one for every answered call, and a denied one carries pydantic-ai's denial
+  message with `outcome: "denied"` on both carriers. With no result, the next
+  request answered the call as not finished, so the playground's own
+  multi-approval scenario came back from a reload with every declined card
+  reading "not finished". The mock also denies by default now, as pydantic-ai
+  does, so only an answer whose payload says `approved: true` runs the call.
+
+### Fixed
+
+- **A navigating tool's card reads done on the page it navigated to.** A tool
+  marked `x-navigates` reloads the page, and the next mount answers its call
+  with the landed page's result and continues the run. That result reached the
+  agent, but the call's card was never settled from it: it spun for the whole
+  continuation, and when the run finished, the sweep that closes any card still
+  open marked it "not finished" -- on the one call known to have finished. The
+  resume now settles the card from the result it sends, so it reads done with
+  that result while the continuation runs, and matches what a later reload
+  shows from the stored message.
+
+## [0.41.1] — 2026-09-22
+
+### Changed
+
+- **The vendored bundle no longer carries zod code nothing calls.**
+  `ag-ui-web-component.bundle.js` shipped every locale zod has and its JSON
+  Schema generator, because `@ag-ui/core` and `@ag-ui/client` both write
+  `import { z } from "zod/v4"`: that `z` is a namespace zod re-exports as a
+  value, and a bundler cannot tell which of its members are read. The build now
+  resolves the namespace statically, so only what the two packages call is
+  kept, and installs zod's English messages explicitly -- zod's
+  `sideEffects: false` would otherwise drop the module that sets them, and a
+  rejected event would be reported as "Invalid input" and nothing more. The
+  bundle goes from 840,847 to 651,996 bytes, and from 203,433 to 172,151 gzipped.
+  Decoding, the 1.0 client's enforcement and its error text are unchanged, and a
+  browser test now loads the built bundle to hold all three. The npm build,
+  which leaves `@ag-ui/*` to the host's bundler, is byte-identical.
+
 ## [0.41.0] — 2026-09-22
 
 ### Changed
@@ -4178,7 +4222,9 @@ hosts that both arrange the page the way it expects.
 ### Notes
 - First release — exercising the automated npm OIDC publish pipeline end-to-end.
 
-[Unreleased]: https://github.com/Artui/ag-ui-web-component/compare/v0.41.0...HEAD
+[Unreleased]: https://github.com/Artui/ag-ui-web-component/compare/v0.41.2...HEAD
+[0.41.2]: https://github.com/Artui/ag-ui-web-component/compare/v0.41.1...v0.41.2
+[0.41.1]: https://github.com/Artui/ag-ui-web-component/compare/v0.41.0...v0.41.1
 [0.41.0]: https://github.com/Artui/ag-ui-web-component/compare/v0.40.0...v0.41.0
 [0.40.0]: https://github.com/Artui/ag-ui-web-component/compare/v0.39.0...v0.40.0
 [0.39.0]: https://github.com/Artui/ag-ui-web-component/compare/v0.38.0...v0.39.0