@belonguniverseai/react-sdk 0.6.28 → 0.6.29

package/README.md

@@ -82,10 +82,10 @@ tenant bucket and backend read permissions.
 The script-tag embed's `init` takes two optional host-context props that
 personalise what the dock shows before the first message:
 
-| Prop          | Type                                              | Required | Description                                                         |
-| ------------- | ------------------------------------------------- | -------- | ------------------------------------------------------------------- |
-| `user`        | `{ displayName?: string }`                        | no       | Signed-in user; personalises the first message and the avatar menu. |
-| `pageContext` | `{ label?: string; fromDocumentTitle?: boolean }` | no       | Page label for the first message; defaults to the tab title.        |
+| Prop          | Type                                              | Required | Description                                                                         |
+| ------------- | ------------------------------------------------- | -------- | ----------------------------------------------------------------------------------- |
+| `user`        | `{ displayName?: string }`                        | no       | Signed-in user; personalises the first message and the avatar menu.                 |
+| `pageContext` | `{ label?: string; fromDocumentTitle?: boolean }` | no       | Page label shown in the dock and sent with each message; defaults to the tab title. |
 
 Both have runtime setters on `window.belong`, alongside `setLocale` and
 `setWorkspace`:
@@ -98,6 +98,16 @@ Both have runtime setters on `window.belong`, alongside `setLocale` and
   dock reads `document.title` live (SPA navigation updates it), unless the host
   passed `pageContext: { fromDocumentTitle: false }`.
 
+The page label is also **sent with every message**, so the agent can resolve
+"this page": the label the composer's page chip shows at send time (host label,
+`init` label, or the tab title) rides the message, and the agent reads it as
+host-reported context, never as something the user typed. Only the label is
+sent, never the page's contents, and it is stored with the message like the
+message text. A tab title can carry customer names, record ids or the
+signed-in user's email: if yours does, give the dock a clean label with
+`setPageContext(label)`, or pass `pageContext: { fromDocumentTitle: false }` so
+nothing is sent unless you set one.
+
 A re-`init` states the host's context in full: omitting `user` or
 `pageContext` CLEARS what a previous `init` seeded (the config is replaced
 wholesale, not merged). A live `setUser` / `setPageContext` override outranks

package/dist/api/artifact-actions.d.ts

@@ -24,6 +24,5 @@ export type ArtifactActionApi = {
 };
 /** What the report bridge may call: everything except the parent-only stop control. */
 export type ArtifactBridgeApi = Omit<ArtifactActionApi, "settle">;
-export declare const ARTIFACT_API_REQUEST_TIMEOUT_MS = 20000;
 /** Parent-only authenticated adapter. Generated HTML cannot select the target or auth source. */
 export declare const createArtifactActionApi: (apiBaseUrl: string, artifactId: string, workspaceExternalId: string | null) => ArtifactActionApi;

package/dist/api/auth-errors.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The dock's "the host session is gone" error. A leaf module so the request
+ * layer (client.ts), the chat transport and the chat route share one prefix
+ * without importing each other.
+ */
+/**
+ * The prefix the dock recognizes as "the host session is gone" — the chat
+ * renders `chat.authExpired` with a Retry for any error that starts with it.
+ */
+export declare const AUTH_EXPIRED_ERROR_PREFIX = "auth_expired:";
+/**
+ * Raised INSTEAD of sending an authenticated request when the registered auth
+ * source yields no usable token, even after one forced refresh and a bounded
+ * wait. A header-less request can only 401 (`missing_authorization_header`)
+ * and, from a long-lived loop, it never stops — prod 2026-10-15 saw 1,246 of
+ * them. Failing locally keeps the backend quiet and gives the dock a
+ * recognizable signed-out error (the `auth_expired:` prefix).
+ */
+export declare class BelongAuthUnavailableError extends Error {
+    constructor();
+}