@belonguniverseai/react-sdk 0.6.20 → 0.6.22

package/dist/types/public.d.ts

@@ -106,7 +106,7 @@ export type PartialBelongTheme = {
 /** Built-in theme presets selectable via `belong.applyPreset(name)`. */
 export type PresetName = "belong" | "simetrik" | "custom";
 /** UI languages the dock ships. `setLocale` / `init({ locale })` accept these. */
-export type BelongLocale = "en" | "es" | "pt";
+export type BelongLocale = "en" | "es" | "pt" | "it";
 export type BelongInitInput = {
     /** Belong cloud base URL, e.g. `https://api.belong.host` or `http://localhost:8787`. */
     readonly apiBaseUrl: string;
@@ -218,6 +218,53 @@ export type BelongInitInput = {
          */
         readonly scopeUrlParam?: string;
     };
+    /**
+     * Host-bridged MCP (opt-in). Same-origin paths of MCP endpoints the host app
+     * lets the agent call THROUGH THIS PAGE, with the signed-in viewer's own
+     * session (cookies), e.g. `{ allowedPaths: ["/mcp"] }`. The agent reaches
+     * them only via tools its tenant published with `transport: "host"`; a path
+     * not listed here is refused in the page, whatever the tenant publishes.
+     * Omitted = no host MCP at all.
+     */
+    readonly hostMcp?: BelongHostMcpConfig;
+    /**
+     * Which browser-control ops the agent may run on THIS page (opt-in
+     * restriction). Omitted = every op (reading, clicking, typing, navigating,
+     * running JS, host MCP), exactly as before. A host that only bridges MCP
+     * should pass `{ allowedOps: ["mcp_call"] }`, so the agent cannot drive or
+     * script the page with the viewer's session. `allowedOps: []` = none. A
+     * value that is present but invalid allows NOTHING (with a console warning).
+     * Restated on every `init`: omitting it on a re-init lifts the restriction.
+     */
+    readonly browserControl?: BelongBrowserControlConfig;
+};
+export type BelongHostMcpConfig = {
+    /**
+     * Root-relative paths (`/mcp`, `/api/mcp?x=1`) on this page's origin, each at
+     * most 512 URL path/query characters (no whitespace, `\`, `#` or `..`
+     * segment). At most 8.
+     */
+    readonly allowedPaths: readonly string[];
+};
+/** A browser-control op the dock can run on the host page. */
+export type BelongBrowserOpName = "snapshot" | "read" | "click" | "type" | "select" | "press" | "navigate" | "eval" | "mcp_call";
+export type BelongBrowserControlConfig = {
+    /** The ops this page runs; every other op is refused in the page. */
+    readonly allowedOps: readonly BelongBrowserOpName[];
+};
+/** `window.belong.open(options)` — what the host asks the dock to show. */
+export type BelongOpenOptions = {
+    /**
+     * The size to open at. `fullscreen` covers the viewport on desktop (mobile
+     * resolves it to the open sheet, as the rail toggle does). The user can
+     * still leave it. Omitted = the dock's current size, expanded if collapsed.
+     */
+    readonly size?: "expanded" | "fullscreen";
+    /**
+     * Prefill (never send) the composer — only when it is empty — and focus it.
+     * At most 4,000 characters.
+     */
+    readonly draft?: string;
 };
 export type RouteHandlerResult = {
     readonly ok: true;
@@ -272,7 +319,13 @@ export type BelongGlobal = {
     readonly setPageContext: (label: string | null) => void;
     readonly setTheme: (theme: PartialBelongTheme) => void;
     readonly applyPreset: (name: PresetName) => void;
-    readonly open: () => void;
+    /**
+     * Show the dock: switch to the chat view at the requested size (and
+     * optionally prefill the composer). Safe to call BEFORE `init` resolves — a
+     * request made before the dock mounts is applied at mount, with no flash of
+     * the docked size.
+     */
+    readonly open: (options?: BelongOpenOptions) => void;
     readonly close: () => void;
     readonly registerRouteHandler: (routeName: string, handler: RouteHandler) => void;
     readonly registerUiAction: <I, O>(name: string, handler: UiActionHandler<I, O>) => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@belonguniverseai/react-sdk",
-  "version": "0.6.20",
+  "version": "0.6.22",
   "description": "Belong — embeddable React AI assistant dock. Mount <BelongWidget> in your app tree with getToken dependency-injection auth.",
   "license": "UNLICENSED",
   "type": "module",