@astralbeam/sdk 0.9.0 → 0.11.0

package/dist/{core-Eh2vyhUP.js → core-xh4NLb1l.js}

@@ -1,19 +1,30 @@
+import { D as isAstralBeamApiError, E as astralBeamChatFetch, O as resolveApiUrl, c as getCurrentUser, g as getRunChatUrl, i as getChatConfig } from "./api-DrKgAIBT.js";
+import { d as JWTInvalid, h as strictDecoder, r as isObject, s as decode } from "./type_checks-C-WTHaWs.js";
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
-/**
-* The chat API's URLs under an API base: the stream itself, the agent capability handshake,
-* and artifact downloads. Chat is one API under the base; others will sit beside it.
-*/
-function chatApiUrls(apiUrl) {
-	const chat = `${(apiUrl ?? "https://app.astralbeam.ai/api").replace(/\/+$/, "")}/v1/chat`;
-	return {
-		chat,
-		config: `${chat}/config`,
-		files: `${chat}/files`
-	};
+//#endregion
+//#region node_modules/.deno/jose@6.2.9/node_modules/jose/dist/webapi/util/decode_jwt.js
+function decodeJwt(jwt) {
+	if (typeof jwt !== "string") throw new JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");
+	const { 1: payload, length } = jwt.split(".");
+	if (length === 5) throw new JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");
+	if (length !== 3) throw new JWTInvalid("Invalid JWT");
+	if (!payload) throw new JWTInvalid("JWTs must contain a payload");
+	let decoded;
+	try {
+		decoded = decode(payload);
+	} catch {
+		throw new JWTInvalid("Failed to base64url decode the payload");
+	}
+	let result;
+	try {
+		result = JSON.parse(strictDecoder.decode(decoded));
+	} catch {
+		throw new JWTInvalid("Failed to parse the decoded payload as JSON");
+	}
+	if (!isObject(result)) throw new JWTInvalid("Invalid JWT Claims Set");
+	return result;
 }
-/** Color scheme used when the mount options and the React prop give none. */
-const DEFAULT_COLOR_SCHEME = "system";
 //#endregion
 //#region node_modules/.deno/@tanstack+ai-client@0.28.0/node_modules/@tanstack/ai-client/dist/esm/response-stream.js
 var UnsupportedResponseStreamError = class extends Error {
@@ -7841,29 +7852,24 @@ function buildHostTools(tools, debug) {
 //#region src/core/auth.ts
 const REFRESH_SKEW_MS = 6e4;
 const MAX_TOKEN_LENGTH = 16384;
-function tokenExpiry(token) {
+function tokenTiming(token) {
 	if (token.length > MAX_TOKEN_LENGTH) throw new Error("The chat auth token is too large");
-	const parts = token.split(".");
-	if (parts.length !== 3 || !parts[1]) throw new Error("The chat auth token is not a JWT");
-	const encoded = parts[1].replaceAll("-", "+").replaceAll("_", "/");
-	const padded = encoded.padEnd(Math.ceil(encoded.length / 4) * 4, "=");
-	let payload;
-	try {
-		payload = JSON.parse(atob(padded));
-	} catch {
-		throw new Error("The chat auth token has an invalid payload");
-	}
-	const exp = payload?.exp;
+	const { exp, iat, user } = decodeJwt(token);
 	if (!Number.isInteger(exp) || Number(exp) <= 0) throw new Error("The chat auth token has no valid expiry");
-	return Number(exp) * 1e3;
-}
-function bearerToken(headers) {
-	const authorization = headers.get("authorization");
-	return authorization?.startsWith("Bearer ") ? authorization.slice(7) : void 0;
+	const expiresAt = Number(exp) * 1e3;
+	const lifetime = iat === void 0 ? 3e5 : expiresAt - iat * 1e3;
+	const margin = Math.min(REFRESH_SKEW_MS, lifetime * .2);
+	const tenantAdmin = user?.admin === true;
+	return {
+		expiresAt,
+		refreshAt: expiresAt - margin,
+		tenantAdmin
+	};
 }
 async function requestChatAuthToken(options, signal) {
 	const { fetchAstralBeamToken, fetchClient } = options;
 	if (typeof fetchAstralBeamToken === "function") return (await fetchAstralBeamToken())?.token;
+	if (!fetchAstralBeamToken) throw new Error("Provide fetchAstralBeamToken.");
 	const { url, ...init } = fetchAstralBeamToken;
 	const headers = new Headers(init.headers);
 	if (!headers.has("accept")) headers.set("accept", "application/json");
@@ -7875,43 +7881,120 @@ async function requestChatAuthToken(options, signal) {
 		headers,
 		signal: init.signal ? AbortSignal.any([signal, init.signal]) : signal
 	});
-	if (!response.ok) throw new Error(`Authentication endpoint returned HTTP ${response.status}`);
+	if (!response.ok) throw Object.assign(/* @__PURE__ */ new Error(`Authentication endpoint returned HTTP ${response.status}`), {
+		status: response.status,
+		headers: response.headers
+	});
 	return (await response.json())?.token;
 }
+const initialAuthenticationState = { status: "loading" };
+function createChatAuthentication(options) {
+	return {
+		...options,
+		fetchAstralBeamToken: options.fetchAstralBeamToken,
+		session: {
+			cached: void 0,
+			refreshPromise: void 0,
+			abortController: new AbortController(),
+			state: initialAuthenticationState,
+			listeners: /* @__PURE__ */ new Set()
+		},
+		fetchClient: globalThis.fetch.bind(globalThis),
+		debug: void 0
+	};
+}
+function authenticationState(options) {
+	return options.session.state;
+}
+function subscribeAuthentication(options, listener) {
+	const { listeners } = options.session;
+	listeners.add(listener);
+	return () => {
+		listeners.delete(listener);
+	};
+}
+function publishAuthentication(options, state) {
+	options.session.state = state;
+	for (const listener of options.session.listeners) listener();
+}
+function updateAuthentication(options, next) {
+	if (options.apiUrl !== next.apiUrl) {
+		disposeChatAuthentication(options);
+		options.session.abortController = new AbortController();
+		publishAuthentication(options, { status: "loading" });
+	}
+	options.apiUrl = next.apiUrl;
+	options.fetchAstralBeamToken = next.fetchAstralBeamToken;
+}
+function authenticationIdentity(current, tenantAdmin) {
+	return JSON.stringify([
+		current.scope,
+		current.organization.id,
+		current.scope === "tenant" ? current.tenant.id : null,
+		current.user.id,
+		tenantAdmin !== void 0 ? current.scope === "tenant" ? tenantAdmin : current.user.role : null
+	]);
+}
 async function loadChatAuthToken(options) {
-	const { session, onStateChange, debug } = options;
+	const { session, debug, apiUrl } = options;
 	const { signal } = session.abortController;
 	const source = typeof options.fetchAstralBeamToken === "function" ? "fetchAstralBeamToken" : "Authentication endpoint";
 	try {
-		const token = await requestChatAuthToken(options, signal);
-		if (typeof token !== "string" || !token) throw new Error(`${source} did not return a token`);
-		const expiresAt = tokenExpiry(token);
-		if (expiresAt <= Date.now()) throw new Error(`${source} returned an expired token`);
-		session.cached = {
-			value: token,
-			expiresAt
-		};
-		onStateChange({ status: "ready" });
-		debug?.("auth", "chat authentication ready", { expiresAt: new Date(expiresAt) });
-		return token;
-	} catch (cause) {
-		const error = cause instanceof Error ? cause : /* @__PURE__ */ new Error("Chat authentication failed");
-		if (!signal.aborted) {
-			onStateChange({
-				status: "error",
-				error
+		for (let attempt = 0; attempt < 2; attempt++) {
+			const token = await requestChatAuthToken(options, signal);
+			signal.throwIfAborted();
+			if (typeof token !== "string" || !token) throw new Error(`${source} did not return a token`);
+			const { expiresAt, refreshAt, tenantAdmin } = tokenTiming(token);
+			if (expiresAt <= Date.now()) throw new Error(`${source} returned an expired token`);
+			if (!Number.isFinite(refreshAt) || refreshAt <= Date.now() || expiresAt - Date.now() < 5e3) throw new Error(`${source} returned a token too close to expiry`);
+			let currentUser;
+			try {
+				currentUser = await getCurrentUser({
+					apiUrl,
+					astralBeamToken: token,
+					fetchClient: options.fetchClient,
+					signal,
+					cache: "no-store",
+					credentials: "omit"
+				});
+			} catch (error) {
+				if (!attempt && options.retryUnauthorized !== false && isAstralBeamApiError(error) && error.status === 401) continue;
+				throw error;
+			}
+			signal.throwIfAborted();
+			if (options.scope && options.scope !== currentUser.scope) throw new Error(`Expected ${options.scope} authentication`);
+			session.cached = {
+				value: token,
+				expiresAt,
+				refreshAt,
+				synchronizedAt: Date.now(),
+				tenantAdmin
+			};
+			publishAuthentication(options, {
+				status: "ready",
+				currentUser
 			});
-			debug?.("error", `chat authentication failed: ${error.message}`);
+			debug?.("auth", "authentication ready", { expiresAt: new Date(expiresAt) });
+			return token;
 		}
+		throw new Error("Authentication failed");
+	} catch (cause) {
+		signal.throwIfAborted();
+		const error = cause instanceof Error ? cause : /* @__PURE__ */ new Error("Authentication failed");
+		session.cached = void 0;
+		publishAuthentication(options, {
+			status: "error",
+			error
+		});
 		throw error;
 	}
 }
 async function getValidChatAuthToken(options) {
-	const { session, force = false, onStateChange } = options;
-	const now = Date.now();
-	if (!force && session.cached && session.cached.expiresAt - now > REFRESH_SKEW_MS) return session.cached.value;
+	const { session, force = false } = options;
+	session.abortController.signal.throwIfAborted();
 	if (session.refreshPromise) return await session.refreshPromise;
-	onStateChange({ status: "loading" });
+	if (!force && session.cached && session.cached.refreshAt > Date.now()) return session.cached.value;
+	if (!session.cached || session.cached.expiresAt <= Date.now()) publishAuthentication(options, { status: "loading" });
 	const refresh = loadChatAuthToken(options);
 	session.refreshPromise = refresh;
 	try {
@@ -7920,6 +8003,15 @@ async function getValidChatAuthToken(options) {
 		if (session.refreshPromise === refresh) session.refreshPromise = void 0;
 	}
 }
+function refreshRejectedAuthentication(options, token) {
+	const rejectedCurrentToken = !token || options.session.cached?.value === token;
+	if (rejectedCurrentToken) options.session.cached = void 0;
+	return getValidChatAuthToken({
+		...options,
+		force: rejectedCurrentToken,
+		retryUnauthorized: false
+	});
+}
 async function initializeChatAuthentication(options) {
 	if (options.session.abortController.signal.aborted) options.session.abortController = new AbortController();
 	await getValidChatAuthToken(options);
@@ -7927,28 +8019,86 @@ async function initializeChatAuthentication(options) {
 function disposeChatAuthentication({ session }) {
 	session.abortController.abort();
 	session.refreshPromise = void 0;
+	session.cached = void 0;
+	session.state = initialAuthenticationState;
 }
 async function fetchAuthenticatedChat(options) {
 	const { input, init, session, fetchClient, debug } = options;
+	const previous = authenticationState(options);
 	const response = await fetchClient(input, init);
 	if (response.status !== 401 || session.abortController.signal.aborted) return response;
-	const usedToken = bearerToken(new Headers(init?.headers));
-	const rejectedCurrentToken = !usedToken || session.cached?.value === usedToken;
-	if (rejectedCurrentToken) session.cached = void 0;
-	debug?.("auth", "chat auth token was rejected; refreshing once");
-	const token = await getValidChatAuthToken({
-		...options,
-		force: rejectedCurrentToken
-	});
 	const headers = new Headers(init?.headers);
-	headers.set("authorization", `Bearer ${token}`);
+	const authorization = headers.get("authorization");
+	const usedToken = authorization?.startsWith("Bearer ") ? authorization.slice(7) : void 0;
+	debug?.("auth", "chat auth token was rejected; refreshing once");
 	await response.body?.cancel();
+	const token = await refreshRejectedAuthentication(options, usedToken);
+	const current = authenticationState(options);
+	if (previous.status !== "ready" || current.status !== "ready" || authenticationIdentity(previous.currentUser) !== authenticationIdentity(current.currentUser)) throw new DOMException("Identity changed", "AbortError");
+	init?.signal?.throwIfAborted();
+	headers.set("authorization", `Bearer ${token}`);
 	return await fetchClient(input, {
 		...init,
 		headers
 	});
 }
 //#endregion
+//#region src/core/auth-lifecycle.ts
+function startAuthentication(options) {
+	let timer;
+	const events = new AbortController();
+	let retries = 0;
+	const visible = () => typeof document === "undefined" || document.visibilityState !== "hidden" && globalThis.navigator?.onLine !== false;
+	const refresh = () => {
+		if (events.signal.aborted || !visible()) return;
+		getValidChatAuthToken({
+			...options,
+			force: true
+		}).catch(() => {});
+	};
+	const schedule = () => {
+		clearTimeout(timer);
+		if (events.signal.aborted || typeof document === "undefined" || !visible()) return;
+		const state = authenticationState(options);
+		if (state.status === "ready") {
+			retries = 0;
+			timer = setTimeout(refresh, Math.max(1e3, options.session.cached.refreshAt - Date.now()));
+		} else if (state.status === "error" && retries < 3) {
+			const error = state.error;
+			if (error.status !== void 0 && error.status !== 429 && error.status < 500) return;
+			if (error.status === void 0 && !(error instanceof TypeError)) return;
+			const retryAfter = error.headers?.get("retry-after");
+			const delay = retryAfter ? /^\d+$/.test(retryAfter) ? Number(retryAfter) * 1e3 : Date.parse(retryAfter) - Date.now() : 0;
+			timer = setTimeout(refresh, Math.max(1e3 * 2 ** retries++, Number.isFinite(delay) ? delay : 0));
+		}
+	};
+	const foreground = () => {
+		if (!visible()) {
+			clearTimeout(timer);
+			return;
+		}
+		const cached = options.session.cached;
+		if (!cached || Date.now() - cached.synchronizedAt >= 6e4 || cached.refreshAt <= Date.now()) refresh();
+		else schedule();
+	};
+	const unsubscribe = subscribeAuthentication(options, schedule);
+	if (typeof document !== "undefined") {
+		for (const event of [
+			"focus",
+			"online",
+			"offline"
+		]) globalThis.addEventListener(event, foreground, { signal: events.signal });
+		document.addEventListener("visibilitychange", foreground, { signal: events.signal });
+	}
+	initializeChatAuthentication(options).catch(() => {});
+	schedule();
+	return () => {
+		events.abort();
+		clearTimeout(timer);
+		unsubscribe();
+	};
+}
+//#endregion
 //#region src/core/messages.ts
 function isSettledToolCall(part) {
 	return part.state === "complete" || part.state === "error" || part.output !== void 0;
@@ -8094,7 +8244,7 @@ function sameAgentTools(current, next) {
 * transcript state, with no markup. The drop-in widget is one consumer; a host that owns its
 * whole UI is another.
 */
-function createAstralBeamChat(options) {
+function createAstralBeamChat(options, deferStart = false) {
 	let live = { ...options };
 	let debug = createDebugLogger(live.debug);
 	const listeners = /* @__PURE__ */ new Set();
@@ -8118,28 +8268,32 @@ function createAstralBeamChat(options) {
 		};
 		for (const listener of listeners) listener();
 	};
-	const authentication = {
-		fetchAstralBeamToken: live.fetchAstralBeamToken ?? { url: "/api/astralbeam/token" },
-		session: {
-			cached: void 0,
-			refreshPromise: void 0,
-			abortController: new AbortController()
-		},
-		onStateChange: (auth) => update({ auth }),
-		fetchClient: globalThis.fetch.bind(globalThis),
-		debug
-	};
-	initializeChatAuthentication(authentication).catch(() => void 0);
+	const authentication = createChatAuthentication({
+		apiUrl: live.apiUrl,
+		scope: "tenant",
+		fetchAstralBeamToken: live.fetchAstralBeamToken ?? { url: "/api/astralbeam/token" }
+	});
+	let stopAuthentication;
+	let unsubscribeAuthentication;
+	let identity;
+	let started = false;
 	let capabilitiesGeneration = 0;
+	let capabilityIdentity;
 	const resolveCapabilities = async () => {
 		const generation = ++capabilitiesGeneration;
 		try {
-			const url = new URL(chatApiUrls(live.apiUrl).config, globalThis.location?.href);
-			if (live.agentId) url.searchParams.set("agentId", live.agentId);
 			const token = await getValidChatAuthToken(authentication);
-			const response = await fetch(url, { headers: { authorization: `Bearer ${token}` } });
-			if (!response.ok) throw new Error(`The config request answered ${response.status}`);
-			const body = await response.json();
+			if (generation !== capabilitiesGeneration) return;
+			const body = await getChatConfig(live.agentId ? { agentId: live.agentId } : {}, {
+				apiUrl: authentication.apiUrl,
+				astralBeamToken: token,
+				signal: authentication.session.abortController.signal,
+				fetchClient: (input, init) => fetchAuthenticatedChat({
+					...authentication,
+					input,
+					init
+				})
+			});
 			if (generation !== capabilitiesGeneration) return;
 			const attachments = body.capabilities?.attachments !== false;
 			update({ capabilities: { attachments } });
@@ -8148,7 +8302,6 @@ function createAstralBeamChat(options) {
 			debug?.("error", "agent capabilities could not be resolved; keeping the defaults", error);
 		}
 	};
-	resolveCapabilities();
 	const renderCleanups = /* @__PURE__ */ new Map();
 	const disposeRenders = () => {
 		for (const cleanup of renderCleanups.values()) cleanup();
@@ -8198,15 +8351,31 @@ function createAstralBeamChat(options) {
 		...live.agentId ? { agentId: live.agentId } : {},
 		...live.debug ? { debug: true } : {}
 	});
-	const client = new ChatClient({
-		connection: fetchServerSentEvents(() => chatApiUrls(live.apiUrl).chat, async () => ({
-			headers: { authorization: `Bearer ${await getValidChatAuthToken(authentication)}` },
-			fetchClient: (input, init) => fetchAuthenticatedChat({
+	const connection = fetchServerSentEvents(() => resolveApiUrl(getRunChatUrl(), authentication.apiUrl), async () => {
+		const previousIdentity = identity;
+		const token = await getValidChatAuthToken(authentication);
+		if (previousIdentity !== void 0 && previousIdentity !== identity) throw new DOMException("Identity changed", "AbortError");
+		return { fetchClient: (_input, init) => astralBeamChatFetch(getRunChatUrl(), {
+			...init,
+			apiUrl: authentication.apiUrl,
+			astralBeamToken: token,
+			fetchClient: (input, request) => fetchAuthenticatedChat({
 				...authentication,
 				input,
-				init
+				init: request
 			})
-		})),
+		}) };
+	});
+	const connect = connection.connect;
+	connection.connect = async function* (...args) {
+		try {
+			yield* connect(...args);
+		} catch (error) {
+			throw error instanceof Error && isAstralBeamApiError(error.cause) ? error.cause : error;
+		}
+	};
+	const client = new ChatClient({
+		connection,
 		tools: declareTools(),
 		forwardedProps: forwardedProps(),
 		onMessagesChange: (messages) => {
@@ -8259,7 +8428,41 @@ function createAstralBeamChat(options) {
 			}
 		}
 	};
+	const observeAuthentication = () => {
+		const auth = authenticationState(authentication);
+		if (auth.status === "ready") {
+			const nextIdentity = authenticationIdentity(auth.currentUser);
+			if (identity !== void 0 && identity !== nextIdentity) {
+				client.stop();
+				client.clear();
+				disposeRenders();
+				update({
+					messages: [],
+					sandbox: {
+						files: [],
+						commands: []
+					},
+					sandboxStatus: void 0
+				});
+			}
+			identity = nextIdentity;
+			if (capabilityIdentity !== nextIdentity) {
+				capabilityIdentity = nextIdentity;
+				resolveCapabilities();
+			}
+		}
+		update({ auth });
+	};
+	const start = () => {
+		if (started) return;
+		started = true;
+		unsubscribeAuthentication = subscribeAuthentication(authentication, observeAuthentication);
+		observeAuthentication();
+		stopAuthentication = startAuthentication(authentication);
+	};
+	if (!deferStart) start();
 	return {
+		start,
 		getState: () => state,
 		subscribe: (listener) => {
 			listeners.add(listener);
@@ -8273,13 +8476,16 @@ function createAstralBeamChat(options) {
 				...next
 			};
 			debug = createDebugLogger(live.debug);
-			authentication.fetchAstralBeamToken = live.fetchAstralBeamToken ?? { url: "/api/astralbeam/token" };
+			updateAuthentication(authentication, {
+				apiUrl: live.apiUrl,
+				fetchAstralBeamToken: live.fetchAstralBeamToken ?? { url: "/api/astralbeam/token" }
+			});
 			authentication.debug = debug;
 			client.updateOptions({
 				tools: declareTools(),
 				forwardedProps: forwardedProps()
 			});
-			if (live.agentId !== agent || live.apiUrl !== apiUrl) resolveCapabilities();
+			if (started && (live.agentId !== agent || live.apiUrl !== apiUrl)) resolveCapabilities();
 		},
 		sendMessage: (content) => {
 			settleDanglingToolCalls();
@@ -8310,8 +8516,16 @@ function createAstralBeamChat(options) {
 		},
 		dispose: () => {
 			disposeRenders();
-			client.dispose();
+			client.stop();
+			capabilitiesGeneration++;
+			capabilityIdentity = void 0;
+			stopAuthentication?.();
+			unsubscribeAuthentication?.();
 			disposeChatAuthentication(authentication);
+			started = false;
+			queueMicrotask(() => {
+				if (!started) client.dispose();
+			});
 			listeners.clear();
 		}
 	};
@@ -8323,4 +8537,4 @@ function defineTool(tool) {
 	return tool;
 }
 //#endregion
-export { DEFAULT_COLOR_SCHEME as C, SANDBOX_WRITE_FILE_TOOL as S, SANDBOX_LIST_FILES_TOOL as _, describeSandboxCommandRun as a, SANDBOX_RUN_COMMAND_TOOL as b, readSandboxCommandRun as c, hasPendingToolRun as d, isSettledToolCall as f, RENDER_WIDGET_TOOL as g, ASK_QUESTIONNAIRE_TOOL as h, collectSandboxActivity as i, readSandboxFileWrite as l, buildAgentTools as m, CORE_OPTION_KEYS as n, isSandboxTool as o, lastPartInProgress as p, createAstralBeamChat as r, readSandboxArtifact as s, defineTool as t, sandboxRefusal as u, SANDBOX_PUBLISH_ARTIFACT_TOOL as v, SANDBOX_STATUS_EVENT as x, SANDBOX_READ_FILE_TOOL as y };
+export { SANDBOX_WRITE_FILE_TOOL as S, SANDBOX_LIST_FILES_TOOL as _, describeSandboxCommandRun as a, SANDBOX_RUN_COMMAND_TOOL as b, readSandboxCommandRun as c, hasPendingToolRun as d, isSettledToolCall as f, RENDER_WIDGET_TOOL as g, ASK_QUESTIONNAIRE_TOOL as h, collectSandboxActivity as i, readSandboxFileWrite as l, buildAgentTools as m, CORE_OPTION_KEYS as n, isSandboxTool as o, lastPartInProgress as p, createAstralBeamChat as r, readSandboxArtifact as s, defineTool as t, sandboxRefusal as u, SANDBOX_PUBLISH_ARTIFACT_TOOL as v, SANDBOX_STATUS_EVENT as x, SANDBOX_READ_FILE_TOOL as y };

package/dist/core.d.ts

@@ -1,2 +1,2 @@
-import { A as RenderWidgetInput, B as ToolDefinition, C as AstralBeamChatState, D as ChatAuthenticationState, E as createAstralBeamChat, F as SandboxStatus, I as InferParameters, L as JsonSchemaObject, M as SandboxArtifact, N as SandboxCommandRun, O as WidgetDeclaration, P as SandboxFileWrite, R as ParametersSchema, S as AstralBeamChatCoreOptions, T as WidgetRenderRequest, _ as hasPendingToolRun, a as SANDBOX_PUBLISH_ARTIFACT_TOOL, b as AgentToolInfo, c as SANDBOX_STATUS_EVENT, d as describeSandboxCommandRun, f as isSandboxTool, g as sandboxRefusal, h as readSandboxFileWrite, i as SANDBOX_LIST_FILES_TOOL, j as SandboxActivity, k as buildAgentTools, l as SANDBOX_WRITE_FILE_TOOL, m as readSandboxCommandRun, n as ASK_QUESTIONNAIRE_TOOL, o as SANDBOX_READ_FILE_TOOL, p as readSandboxArtifact, r as RENDER_WIDGET_TOOL, s as SANDBOX_RUN_COMMAND_TOOL, t as defineTool, u as collectSandboxActivity, v as isSettledToolCall, w as ChatStreamCallbacks, x as AstralBeamChatCore, y as lastPartInProgress, z as StandardSchemaV1 } from "./index-BQBdZKyB.js";
+import { A as RenderWidgetInput, B as JsonSchemaObject, C as AstralBeamChatState, D as ChatAuthenticationState, E as createAstralBeamChat, F as SandboxStatus, H as StandardSchemaV1, M as SandboxArtifact, N as SandboxCommandRun, O as WidgetDeclaration, P as SandboxFileWrite, S as AstralBeamChatCoreOptions, T as WidgetRenderRequest, U as ToolDefinition, V as ParametersSchema, _ as hasPendingToolRun, a as SANDBOX_PUBLISH_ARTIFACT_TOOL, b as AgentToolInfo, c as SANDBOX_STATUS_EVENT, d as describeSandboxCommandRun, f as isSandboxTool, g as sandboxRefusal, h as readSandboxFileWrite, i as SANDBOX_LIST_FILES_TOOL, j as SandboxActivity, k as buildAgentTools, l as SANDBOX_WRITE_FILE_TOOL, m as readSandboxCommandRun, n as ASK_QUESTIONNAIRE_TOOL, o as SANDBOX_READ_FILE_TOOL, p as readSandboxArtifact, r as RENDER_WIDGET_TOOL, s as SANDBOX_RUN_COMMAND_TOOL, t as defineTool, u as collectSandboxActivity, v as isSettledToolCall, w as ChatStreamCallbacks, x as AstralBeamChatCore, y as lastPartInProgress, z as InferParameters } from "./index-C4uH8CV1.js";
 export { ASK_QUESTIONNAIRE_TOOL, type AgentToolInfo, type AstralBeamChatCore, type AstralBeamChatCoreOptions, type AstralBeamChatState, type ChatAuthenticationState, type ChatStreamCallbacks, type InferParameters, type JsonSchemaObject, type ParametersSchema, RENDER_WIDGET_TOOL, type RenderWidgetInput, SANDBOX_LIST_FILES_TOOL, SANDBOX_PUBLISH_ARTIFACT_TOOL, SANDBOX_READ_FILE_TOOL, SANDBOX_RUN_COMMAND_TOOL, SANDBOX_STATUS_EVENT, SANDBOX_WRITE_FILE_TOOL, type SandboxActivity, type SandboxArtifact, type SandboxCommandRun, type SandboxFileWrite, type SandboxStatus, type StandardSchemaV1, type ToolDefinition, type WidgetDeclaration, type WidgetRenderRequest, buildAgentTools, collectSandboxActivity, createAstralBeamChat, defineTool, describeSandboxCommandRun, hasPendingToolRun, isSandboxTool, isSettledToolCall, lastPartInProgress, readSandboxArtifact, readSandboxCommandRun, readSandboxFileWrite, sandboxRefusal };

package/dist/core.js

@@ -1,2 +1,2 @@
-import { S as SANDBOX_WRITE_FILE_TOOL, _ as SANDBOX_LIST_FILES_TOOL, a as describeSandboxCommandRun, b as SANDBOX_RUN_COMMAND_TOOL, c as readSandboxCommandRun, d as hasPendingToolRun, f as isSettledToolCall, g as RENDER_WIDGET_TOOL, h as ASK_QUESTIONNAIRE_TOOL, i as collectSandboxActivity, l as readSandboxFileWrite, m as buildAgentTools, o as isSandboxTool, p as lastPartInProgress, r as createAstralBeamChat, s as readSandboxArtifact, t as defineTool, u as sandboxRefusal, v as SANDBOX_PUBLISH_ARTIFACT_TOOL, x as SANDBOX_STATUS_EVENT, y as SANDBOX_READ_FILE_TOOL } from "./core-Eh2vyhUP.js";
+import { S as SANDBOX_WRITE_FILE_TOOL, _ as SANDBOX_LIST_FILES_TOOL, a as describeSandboxCommandRun, b as SANDBOX_RUN_COMMAND_TOOL, c as readSandboxCommandRun, d as hasPendingToolRun, f as isSettledToolCall, g as RENDER_WIDGET_TOOL, h as ASK_QUESTIONNAIRE_TOOL, i as collectSandboxActivity, l as readSandboxFileWrite, m as buildAgentTools, o as isSandboxTool, p as lastPartInProgress, r as createAstralBeamChat, s as readSandboxArtifact, t as defineTool, u as sandboxRefusal, v as SANDBOX_PUBLISH_ARTIFACT_TOOL, x as SANDBOX_STATUS_EVENT, y as SANDBOX_READ_FILE_TOOL } from "./core-xh4NLb1l.js";
 export { ASK_QUESTIONNAIRE_TOOL, RENDER_WIDGET_TOOL, SANDBOX_LIST_FILES_TOOL, SANDBOX_PUBLISH_ARTIFACT_TOOL, SANDBOX_READ_FILE_TOOL, SANDBOX_RUN_COMMAND_TOOL, SANDBOX_STATUS_EVENT, SANDBOX_WRITE_FILE_TOOL, buildAgentTools, collectSandboxActivity, createAstralBeamChat, defineTool, describeSandboxCommandRun, hasPendingToolRun, isSandboxTool, isSettledToolCall, lastPartInProgress, readSandboxArtifact, readSandboxCommandRun, readSandboxFileWrite, sandboxRefusal };

package/dist/debug-qLts7gEt.js

@@ -0,0 +1 @@
+const e=e=>`background:${e};color:#fff;border-radius:3px;padding:1px 5px`,t=`${e(`#7c3aed`)};font-weight:600`,n={mount:`#7c3aed`,auth:`#be185d`,theme:`#8b5cf6`,send:`#2563eb`,run:`#0891b2`,stream:`#0e7490`,text:`#16a34a`,reasoning:`#64748b`,tool:`#d97706`,widget:`#db2777`,attachment:`#0d9488`,sandbox:`#0369a1`,questionnaire:`#9333ea`,status:`#475569`,error:`#dc2626`};function r(r){if(r)return(r,i,a)=>{console.log(`%cAstralBeam%c ${new Date().toISOString().slice(11,19)} %c${r}%c ${i}`,t,`color:#94a3b8;font-weight:400`,e(n[r]),``,...a===void 0?[]:[a])}}export{r as t};

package/dist/index-BVVgDSdq.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/{index-BQBdZKyB.d.ts → index-C4uH8CV1.d.ts}

@@ -1,3 +1,5 @@
+import { f as CurrentUser } from "./api-CWgQSDaI.js";
+
 //#region node_modules/.deno/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts
 /** The Standard Typed interface. This is a base type extended by other specs. */
 interface StandardTypedV1<Input = unknown, Output = Input> {
@@ -3262,7 +3264,7 @@ interface StandardSchemaV1<Input = unknown, Output = Input> {
  * Input type `defineTool`/`defineWidget` derive from a `parameters` schema: a Standard Schema's
  * validated output, or untyped props for a plain JSON Schema, which nothing validates in the browser.
  */
-type InferParameters<S extends ParametersSchema> = S extends StandardSchemaV1<any, infer O> ? O : Record<string, unknown>;
+type InferParameters<S extends ParametersSchema> = S extends StandardSchemaV1<unknown, infer O> ? O : Record<string, unknown>;
 /** A plain JSON Schema object, the same shape tool definitions use for their parameters. */
 interface JsonSchemaObject {
   type: "object";
@@ -3303,7 +3305,7 @@ interface ToolDefinition {
    * Runs in the host page with the agent-chosen input. The resolved value is returned
    * to the agent as the tool result; a thrown error is returned as a tool error.
    */
-  execute: (input: Record<string, unknown>) => unknown | Promise<unknown>;
+  execute: (input: Record<string, unknown>) => unknown;
 }
 /**
  * Limits and accepted types for the composer's file attachments. Every field is optional;
@@ -3435,6 +3437,8 @@ interface MountAstralBeamChatOptions {
   colorScheme?: AstralBeamChatColorScheme | undefined;
   /** Custom values for the widget's theming CSS variables, per color scheme. */
   theme?: AstralBeamChatTheme | undefined;
+  /** Trusted application CSS, scoped to this widget's shadow root. */
+  customCss?: string | undefined;
   /**
    * Logs every SDK action to the browser console with UTC timestamps and full payloads,
    * and asks the endpoint (via the forwarded props) to log its side of the run too.
@@ -3710,6 +3714,7 @@ type ChatAuthenticationState = {
   status: "loading";
 } | {
   status: "ready";
+  currentUser: CurrentUser;
 } | {
   status: "error";
   error: Error;
@@ -3771,6 +3776,8 @@ interface AstralBeamChatState {
   sandbox: SandboxActivity;
 }
 interface AstralBeamChatCore {
+  /** Start browser side effects after a React commit. Vanilla sessions start automatically. */
+  start: () => void;
   getState: () => AstralBeamChatState;
   /** Notifies on every state change; returns the unsubscribe. */
   subscribe: (listener: () => void) => () => void;
@@ -3799,7 +3806,7 @@ interface AstralBeamChatCore {
  * transcript state, with no markup. The drop-in widget is one consumer; a host that owns its
  * whole UI is another.
  */
-declare function createAstralBeamChat(options: AstralBeamChatCoreOptions): AstralBeamChatCore;
+declare function createAstralBeamChat(options: AstralBeamChatCoreOptions, deferStart?: boolean): AstralBeamChatCore;
 //#endregion
 //#region src/core/messages.d.ts
 declare function isSettledToolCall(part: {
@@ -3852,9 +3859,9 @@ interface TypedToolDefinition<S extends ParametersSchema = JsonSchemaObject> {
   description: string;
   metadata?: Record<string, unknown> | undefined;
   parameters?: S;
-  execute: (input: InferParameters<S>) => unknown | Promise<unknown>;
+  execute: (input: InferParameters<S>) => unknown;
 }
 /** Declares a host tool; a Standard Schema `parameters` types (and validates) `execute`'s input. */
 declare function defineTool<const S extends ParametersSchema = JsonSchemaObject>(tool: TypedToolDefinition<S>): ToolDefinition;
 //#endregion
-export { RenderWidgetInput as A, ToolDefinition as B, AstralBeamChatState as C, ChatAuthenticationState as D, createAstralBeamChat as E, SandboxStatus as F, InferParameters as I, JsonSchemaObject as L, SandboxArtifact as M, SandboxCommandRun as N, WidgetDeclaration as O, SandboxFileWrite as P, ParametersSchema as R, AstralBeamChatCoreOptions as S, WidgetRenderRequest as T, hasPendingToolRun as _, SANDBOX_PUBLISH_ARTIFACT_TOOL as a, AgentToolInfo as b, SANDBOX_STATUS_EVENT as c, describeSandboxCommandRun as d, isSandboxTool as f, sandboxRefusal as g, readSandboxFileWrite as h, SANDBOX_LIST_FILES_TOOL as i, SandboxActivity as j, buildAgentTools as k, SANDBOX_WRITE_FILE_TOOL as l, readSandboxCommandRun as m, ASK_QUESTIONNAIRE_TOOL as n, SANDBOX_READ_FILE_TOOL as o, readSandboxArtifact as p, RENDER_WIDGET_TOOL as r, SANDBOX_RUN_COMMAND_TOOL as s, defineTool as t, collectSandboxActivity as u, isSettledToolCall as v, ChatStreamCallbacks as w, AstralBeamChatCore as x, lastPartInProgress as y, StandardSchemaV1 as z };
+export { RenderWidgetInput as A, JsonSchemaObject as B, AstralBeamChatState as C, ChatAuthenticationState as D, createAstralBeamChat as E, SandboxStatus as F, StandardSchemaV1 as H, AstralBeamChatColorScheme as I, AstralBeamChatTheme as L, SandboxArtifact as M, SandboxCommandRun as N, WidgetDeclaration as O, SandboxFileWrite as P, AstralBeamTokenSource as R, AstralBeamChatCoreOptions as S, WidgetRenderRequest as T, ToolDefinition as U, ParametersSchema as V, hasPendingToolRun as _, SANDBOX_PUBLISH_ARTIFACT_TOOL as a, AgentToolInfo as b, SANDBOX_STATUS_EVENT as c, describeSandboxCommandRun as d, isSandboxTool as f, sandboxRefusal as g, readSandboxFileWrite as h, SANDBOX_LIST_FILES_TOOL as i, SandboxActivity as j, buildAgentTools as k, SANDBOX_WRITE_FILE_TOOL as l, readSandboxCommandRun as m, ASK_QUESTIONNAIRE_TOOL as n, SANDBOX_READ_FILE_TOOL as o, readSandboxArtifact as p, RENDER_WIDGET_TOOL as r, SANDBOX_RUN_COMMAND_TOOL as s, defineTool as t, collectSandboxActivity as u, isSettledToolCall as v, ChatStreamCallbacks as w, AstralBeamChatCore as x, lastPartInProgress as y, InferParameters as z };