@burtson-labs/bandit-engine 2.0.149 → 2.0.151

package/dist/index.js

@@ -232,7 +232,7 @@ function emitAuthTokenChanged(token) {
     detail: { token }
   }));
 }
-var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
+var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService2;
 var init_authenticationService = __esm({
   "src/services/auth/authenticationService.ts"() {
     "use strict";
@@ -285,7 +285,7 @@ var init_authenticationService = __esm({
         }
       }
     };
-    authenticationService = new AuthenticationService();
+    authenticationService2 = new AuthenticationService();
   }
 });
 
@@ -2149,7 +2149,7 @@ function buildUrl(path) {
 }
 function buildHeaders() {
   const headers = { "Content-Type": "application/json" };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) {
     headers["Authorization"] = `Bearer ${token}`;
   }
@@ -2297,7 +2297,7 @@ function resolveAuthIdentity(token) {
   if (!token) {
     return null;
   }
-  const claims = authenticationService.parseJwtClaims(token);
+  const claims = authenticationService2.parseJwtClaims(token);
   if (claims?.sub) {
     return claims.sub;
   }
@@ -2830,7 +2830,7 @@ var init_conversationSyncStore = __esm({
       async initialize() {
         ensureTrackersInitialized();
         const gatewayUrl = usePackageSettingsStore.getState().settings?.gatewayApiUrl;
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         const tokenIdentity = resolveAuthIdentity(token);
         const current = get();
         const storedIdentity = getStoredSyncIdentity();
@@ -2956,10 +2956,10 @@ var init_conversationSyncStore = __esm({
           });
           set({
             hasLoadedPreference: true,
-            initializedForToken: authenticationService.getToken(),
-            initializedForIdentity: resolveAuthIdentity(authenticationService.getToken())
+            initializedForToken: authenticationService2.getToken(),
+            initializedForIdentity: resolveAuthIdentity(authenticationService2.getToken())
           });
-          setStoredSyncIdentity(resolveAuthIdentity(authenticationService.getToken()));
+          setStoredSyncIdentity(resolveAuthIdentity(authenticationService2.getToken()));
           if (enabled) {
             set({ hasCompletedInitialUpload: false });
           }
@@ -2999,10 +2999,10 @@ var init_conversationSyncStore = __esm({
           });
           set({
             hasLoadedPreference: true,
-            initializedForToken: authenticationService.getToken(),
-            initializedForIdentity: resolveAuthIdentity(authenticationService.getToken())
+            initializedForToken: authenticationService2.getToken(),
+            initializedForIdentity: resolveAuthIdentity(authenticationService2.getToken())
           });
-          setStoredSyncIdentity(resolveAuthIdentity(authenticationService.getToken()));
+          setStoredSyncIdentity(resolveAuthIdentity(authenticationService2.getToken()));
           if (preference.syncEnabled && preference.isAdvancedVectorFeaturesEnabled) {
             await get().runSync({ force: true });
           }
@@ -3042,7 +3042,7 @@ var init_conversationSyncStore = __esm({
           debugLogger.error("conversationSyncStore: runSync error - missing gateway URL");
           return;
         }
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (!token) {
           set({ status: "error", lastError: "Authentication required to sync conversations." });
           debugLogger.error("conversationSyncStore: runSync error - missing auth token");
@@ -3342,7 +3342,7 @@ var init_mcpServersService = __esm({
     };
     authHeaders = () => {
       const headers = { "Content-Type": "application/json" };
-      const token = authenticationService.getToken();
+      const token = authenticationService2.getToken();
       if (token) headers["Authorization"] = `Bearer ${token}`;
       return headers;
     };
@@ -4778,12 +4778,15 @@ var init_gateway_service = __esm({
           return;
         }
         const data = error.response?.data;
-        const code = data?.code;
-        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED") {
+        let code = data?.code;
+        if (status === 401 && !code) {
+          code = "TOKEN_EXPIRED";
+        }
+        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED" && code !== "TOKEN_EXPIRED") {
           return;
         }
         try {
-          authenticationService.clearToken();
+          authenticationService2.clearToken();
         } catch {
         }
         if (typeof window !== "undefined" && typeof window.dispatchEvent === "function") {
@@ -11424,6 +11427,46 @@ var init_lucide_icons = __esm({
   }
 });
 
+// src/utils/openFileLink.ts
+var FILE_EXT_RE, isStandalonePwa, isFileLink, maybeHandleFileLinkClick;
+var init_openFileLink = __esm({
+  "src/utils/openFileLink.ts"() {
+    "use strict";
+    init_debugLogger();
+    FILE_EXT_RE = /\.(docx|pptx|xlsx|csv|json|md|txt|html|xml|ya?ml|pdf|zip)(?:[?#]|$)/i;
+    isStandalonePwa = () => typeof window !== "undefined" && (window.matchMedia?.("(display-mode: standalone)").matches || window.navigator.standalone === true);
+    isFileLink = (href) => Boolean(href && FILE_EXT_RE.test(href));
+    maybeHandleFileLinkClick = (event, href) => {
+      if (!href || !isStandalonePwa() || !isFileLink(href)) return;
+      event.preventDefault();
+      void (async () => {
+        try {
+          const res = await fetch(href);
+          if (!res.ok) throw new Error(`fetch ${res.status}`);
+          const blob = await res.blob();
+          const rawName = new URL(href, window.location.href).pathname.split("/").pop() || "download";
+          const name = decodeURIComponent(rawName);
+          const file = new File([blob], name, {
+            type: blob.type || "application/octet-stream"
+          });
+          const nav = navigator;
+          if (nav.canShare?.({ files: [file] }) && nav.share) {
+            await nav.share({ files: [file], title: name });
+            return;
+          }
+          window.location.href = URL.createObjectURL(blob);
+        } catch (error) {
+          debugLogger.warn("openFileLink: share flow failed, falling back", {
+            error: error instanceof Error ? error.message : String(error)
+          });
+          if (error?.name === "AbortError") return;
+          window.open(href, "_blank", "noopener");
+        }
+      })();
+    };
+  }
+});
+
 // src/components/StreamingMarkdown.tsx
 var import_react10, import_material4, import_react_markdown, import_remark_gfm, import_rehype_raw, import_rehype_sanitize2, import_styles2, import_jsx_runtime6, StreamingMarkdown, arePropsEqual, StreamingMarkdown_default;
 var init_StreamingMarkdown = __esm({
@@ -11439,6 +11482,7 @@ var init_StreamingMarkdown = __esm({
     init_lowlight();
     init_markdownRendering();
     init_lucide_icons();
+    init_openFileLink();
     import_jsx_runtime6 = require("react/jsx-runtime");
     StreamingMarkdown = ({
       content,
@@ -11592,6 +11636,7 @@ ${listMarkdown}`;
           href,
           target: "_blank",
           rel: "noopener noreferrer",
+          onClick: (e) => maybeHandleFileLinkClick(e, href),
           style: {
             color: theme.palette.info?.main ?? theme.palette.primary.main,
             textDecoration: "underline",
@@ -13523,7 +13568,7 @@ var init_voiceService = __esm({
           debugLogger.error("Gateway API URL not configured");
           throw new Error("Gateway API URL not configured");
         }
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (!token) {
           debugLogger.warn("No JWT token available - skipping voice models fetch");
           const emptyModels = {
@@ -13533,7 +13578,7 @@ var init_voiceService = __esm({
           };
           return emptyModels;
         }
-        if (authenticationService.isTokenExpired(token)) {
+        if (authenticationService2.isTokenExpired(token)) {
           debugLogger.warn("JWT token is expired - skipping voice models fetch");
           const emptyModels = {
             models: [],
@@ -13622,7 +13667,7 @@ var init_tts_client = __esm({
     init_packageSettingsStore();
     init_debugLogger();
     getOrAppendAuthHeader = (existing = {}) => {
-      const token = authenticationService.getToken();
+      const token = authenticationService2.getToken();
       if (token) {
         existing["Authorization"] = `Bearer ${token}`;
         return existing;
@@ -14319,8 +14364,8 @@ var init_ai_response_action_bar = __esm({
       const { preferences } = usePreferencesStore();
       const { settings: packageSettings } = usePackageSettingsStore();
       (0, import_react16.useEffect)(() => {
-        const isAuthenticated = authenticationService.isAuthenticated();
-        const token = authenticationService.getToken();
+        const isAuthenticated = authenticationService2.isAuthenticated();
+        const token = authenticationService2.getToken();
         if (!initialized || availableVoices.length === 0) {
           if (token && isAuthenticated) {
             debugLogger.debug("AI Action Bar: Voices not initialized or unavailable, attempting to load from API");
@@ -14509,6 +14554,7 @@ var init_ai_response_text_field = __esm({
     init_lowlight();
     init_markdownRendering();
     init_lucide_icons();
+    init_openFileLink();
     init_ai_response_action_bar();
     import_jsx_runtime13 = require("react/jsx-runtime");
     brainIcon = "https://cdn.burtson.ai/images/brain-icon.png";
@@ -14941,6 +14987,7 @@ ${sourcesMarkdownList.join("\n")}`;
               },
               target: "_blank",
               rel: "noopener noreferrer",
+              onClick: (e) => maybeHandleFileLinkClick(e, href),
               children
             }
           );
@@ -15980,7 +16027,7 @@ var init_engineStore = __esm({
         }
         try {
           const headers = { "Content-Type": "application/json" };
-          const token = authenticationService.getToken();
+          const token = authenticationService2.getToken();
           if (token) headers["Authorization"] = `Bearer ${token}`;
           const res = await fetch(`${base}/models`, { headers });
           const data = await res.json();
@@ -16298,7 +16345,7 @@ var init_stt_client = __esm({
           filename,
           url: `${gatewayUrl}/stt/transcribe`
         });
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         const response = await fetch(`${gatewayUrl}/stt/transcribe`, {
           method: "POST",
           headers: {
@@ -19386,7 +19433,7 @@ function syncTelemetry() {
     const settings = usePackageSettingsStore.getState().settings;
     const cfg = resolveTelemetryConfig({
       telemetry: settings?.telemetry,
-      banditApiKey: authenticationService.getToken() ?? void 0
+      banditApiKey: authenticationService2.getToken() ?? void 0
     });
     active = cfg ? new TelemetryExporter(cfg) : null;
   } catch {
@@ -20037,7 +20084,7 @@ var init_mcpService = __esm({
         }
         if (tool.mcpServerId) {
           const base2 = settings.gatewayApiUrl.replace(/\/$/, "");
-          const token2 = authenticationService.getToken();
+          const token2 = authenticationService2.getToken();
           const controller2 = new AbortController();
           const timeoutId2 = setTimeout(() => controller2.abort(), 3e4);
           try {
@@ -20084,7 +20131,7 @@ var init_mcpService = __esm({
             "Content-Type": "application/json"
           }
         };
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (token) {
           requestOptions.headers = {
             ...requestOptions.headers,
@@ -21082,6 +21129,29 @@ ${protocol}`;
               overrideComponentStatus("Idle");
               setIsSubmitting(false);
               setIsStreaming(false);
+              if (/lifetime validation|token.*(expired|invalid)|unauthorized|\b401\b/i.test(err.message || "")) {
+                const { replaceLastAnswer: replaceLastAnswer2 } = useConversationStore.getState();
+                replaceLastAnswer2(
+                  "_Your session ended \u2014 sign back in to continue._",
+                  lastPartialRef.current.images,
+                  false,
+                  lastPartialRef.current.usedDocs,
+                  true
+                );
+                setResponse("");
+                setStreamBuffer("");
+                setIsThinking?.(false);
+                setPendingMessage(null);
+                try {
+                  authenticationService.clearToken();
+                } catch {
+                }
+                window.dispatchEvent(
+                  new CustomEvent("auth:force-relogin", { detail: { code: "TOKEN_EXPIRED" } })
+                );
+                telemetryEndTurn({ error: "auth_expired" });
+                return;
+              }
               const rateLimit = parseRateLimitError(err);
               if (rateLimit) {
                 debugLogger.info("Chat hit usage limit (429) \u2014 showing upgrade prompt", {
@@ -22236,7 +22306,7 @@ var init_FeedbackModal = __esm({
           }
           const gatewayService = new GatewayService(
             gatewayUrl,
-            () => authenticationService.getToken(),
+            () => authenticationService2.getToken(),
             feedbackEmail || settings?.feedbackEmail
           );
           const feedbackRequest = {
@@ -25465,7 +25535,7 @@ var init_conversation_drawer = __esm({
                           title: "Sign out",
                           onClick: (event) => {
                             event.stopPropagation();
-                            authenticationService.clearToken();
+                            authenticationService2.clearToken();
                             window.location.href = "/login";
                           },
                           sx: {
@@ -26581,7 +26651,7 @@ var init_enhanced_mobile_conversations_modal = __esm({
                             title: "Sign out",
                             onClick: (event) => {
                               event.stopPropagation();
-                              authenticationService.clearToken();
+                              authenticationService2.clearToken();
                               window.location.href = "/login";
                             },
                             sx: {
@@ -29920,7 +29990,7 @@ var init_UnderReview = __esm({
       const theme = (0, import_material30.useTheme)();
       const navigate = (0, import_react_router_dom3.useNavigate)();
       const handleResetSession = () => {
-        authenticationService.clearToken();
+        authenticationService2.clearToken();
         navigate("/login");
       };
       return /* @__PURE__ */ (0, import_jsx_runtime31.jsxs)(
@@ -30623,8 +30693,8 @@ var init_chat2 = __esm({
       const notificationService2 = useNotificationService();
       const [selectedTheme, setSelectedTheme] = (0, import_react41.useState)(null);
       const [themeLoading, setThemeLoading] = (0, import_react41.useState)(true);
-      const token = authenticationService.getToken();
-      const claims = token ? authenticationService.parseJwtClaims(token) : null;
+      const token = authenticationService2.getToken();
+      const claims = token ? authenticationService2.parseJwtClaims(token) : null;
       const baseTheme = themeMap_default[selectedTheme ?? "bandit-dark"] || banditDarkTheme;
       const banditTheme = (0, import_react41.useMemo)(() => {
         return (0, import_styles33.createTheme)(baseTheme, {
@@ -30697,7 +30767,7 @@ var init_chat2 = __esm({
       } = useTTS();
       (0, import_react41.useEffect)(() => {
         const timer = setTimeout(() => {
-          const isAuthenticated = authenticationService.isAuthenticated();
+          const isAuthenticated = authenticationService2.isAuthenticated();
           if (!initialized || availableVoices.length === 0) {
             if (token && isAuthenticated) {
               debugLogger.debug("Chat: Voices not initialized or unavailable, attempting to load from API");
@@ -30710,7 +30780,7 @@ var init_chat2 = __esm({
         return () => clearTimeout(timer);
       }, [initialized, availableVoices.length, loadVoicesFromAPI, token]);
       (0, import_react41.useEffect)(() => {
-        const isAuthenticated = authenticationService.isAuthenticated();
+        const isAuthenticated = authenticationService2.isAuthenticated();
         if (packageSettings?.gatewayApiUrl && availableVoices.length === 0 && !initialized) {
           if (token && isAuthenticated) {
             debugLogger.debug("Chat: Gateway URL available and no voices loaded, attempting to load from API");
@@ -30732,6 +30802,7 @@ var init_chat2 = __esm({
       const [isMobile, setIsMobile] = (0, import_react41.useState)(false);
       const [drawerOpen, setDrawerOpen] = (0, import_react41.useState)(false);
       const [mobileConversationsOpen, setMobileConversationsOpen] = (0, import_react41.useState)(false);
+      const cardSwipeStartXRef = (0, import_react41.useRef)(null);
       (0, import_react41.useEffect)(() => {
         if (typeof document === "undefined") return;
         const meta = document.querySelector('meta[name="theme-color"]');
@@ -31606,7 +31677,12 @@ var init_chat2 = __esm({
               // reads as full physical height with the rounded corner visible
               // where it overlaps the drawer.
               transform: isMobile && mobileConversationsOpen ? "translateX(calc(min(calc(100vw - 56px), 360px) - 12px))" : "none",
-              borderRadius: isMobile && mobileConversationsOpen ? "44px" : 0,
+              // Square top-left + no top border: the card's edge runs unbroken
+              // from the very top of the screen (all surfaces share one color),
+              // which reads as true full height; a soft bottom-left corner keeps
+              // the sheet feel.
+              borderRadius: isMobile && mobileConversationsOpen ? "0 0 0 28px" : 0,
+              borderTop: isMobile && mobileConversationsOpen ? "none" : void 0,
               zIndex: isMobile && mobileConversationsOpen ? theme.zIndex.modal + 1 : 0,
               // Hairline border so the rounded card reads even when the backdrop
               // is the same near-black as the shell.
@@ -31619,6 +31695,20 @@ var init_chat2 = __esm({
                 setMobileConversationsOpen(false);
               }
             } : void 0,
+            onTouchStart: isMobile && mobileConversationsOpen ? (e) => {
+              if (e.currentTarget.contains(e.target)) {
+                cardSwipeStartXRef.current = e.touches[0]?.clientX ?? null;
+              }
+            } : void 0,
+            onTouchMove: isMobile && mobileConversationsOpen ? (e) => {
+              const start = cardSwipeStartXRef.current;
+              if (start === null) return;
+              const dx = (e.touches[0]?.clientX ?? start) - start;
+              if (Math.abs(dx) > 40) {
+                cardSwipeStartXRef.current = null;
+                setMobileConversationsOpen(false);
+              }
+            } : void 0,
             children: [
               /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(
                 chat_app_bar_default,
@@ -31916,12 +32006,12 @@ var init_chat2 = __esm({
         ossConfigured,
         isOSSMode: isOSSMode(),
         tier: featureFlag.getEvaluation()?.tier,
-        hasToken: authenticationService.isAuthenticated(),
+        hasToken: authenticationService2.isAuthenticated(),
         playgroundBypassAuth,
         isPlaygroundRoute,
         bypassAuth
       });
-      if (!allowUnauthenticated && !bypassAuth && !authenticationService.isAuthenticated()) {
+      if (!allowUnauthenticated && !bypassAuth && !authenticationService2.isAuthenticated()) {
         debugLogger.debug("User is not authenticated, redirecting to login");
         return /* @__PURE__ */ (0, import_jsx_runtime34.jsx)(import_react_router_dom4.Navigate, { to: "/login", replace: true });
       }
@@ -31957,7 +32047,7 @@ __export(index_exports, {
   VectorDatabaseService: () => VectorDatabaseService,
   VectorMigrationService: () => VectorMigrationService,
   VoiceService: () => VoiceService,
-  authenticationService: () => authenticationService,
+  authenticationService: () => authenticationService2,
   debugLogger: () => debugLogger,
   defineCustomElement: () => defineCustomElement,
   featureFlagService: () => featureFlagService,
@@ -32104,7 +32194,7 @@ var AIProviderInitService = class _AIProviderInitService {
         type: "ollama" /* OLLAMA */,
         baseUrl: settings.ollamaUrl,
         tokenFactory: () => {
-          let token = authenticationService.getToken();
+          let token = authenticationService2.getToken();
           if (!token) {
             token = localStorage.getItem("authToken");
           }
@@ -32145,7 +32235,7 @@ var AIProviderInitService = class _AIProviderInitService {
             type: "ollama" /* OLLAMA */,
             baseUrl: settings.ollamaUrl || "http://localhost:11434",
             tokenFactory: () => {
-              let token = authenticationService.getToken();
+              let token = authenticationService2.getToken();
               if (!token) {
                 token = localStorage.getItem("authToken");
               }
@@ -32176,7 +32266,7 @@ var AIProviderInitService = class _AIProviderInitService {
             type: "ollama" /* OLLAMA */,
             baseUrl: "http://localhost:11434",
             tokenFactory: () => {
-              let token = authenticationService.getToken();
+              let token = authenticationService2.getToken();
               if (!token) {
                 token = localStorage.getItem("authToken");
               }
@@ -32266,7 +32356,7 @@ var AIProviderInitService = class _AIProviderInitService {
         return config;
       }
       config.tokenFactory = () => {
-        let token = authenticationService.getToken();
+        let token = authenticationService2.getToken();
         if (!token && typeof localStorage !== "undefined") {
           try {
             token = localStorage.getItem("authToken");
@@ -32323,11 +32413,11 @@ var ChatProvider = (props) => {
       } catch (error) {
         debugLogger.error("Failed to initialize AI provider:", { error });
       }
-      const token = authenticationService.getToken();
-      if (token && !authenticationService.isTokenExpired(token)) {
-        authenticationService.setToken(token);
+      const token = authenticationService2.getToken();
+      if (token && !authenticationService2.isTokenExpired(token)) {
+        authenticationService2.setToken(token);
       } else {
-        authenticationService.clearToken();
+        authenticationService2.clearToken();
       }
       useConversationStore.getState().hydrate();
       useProjectStore.getState().hydrate();
@@ -37258,7 +37348,7 @@ var useGatewayClient = () => {
     }
     return new GatewayService(
       gatewayUrl,
-      () => authenticationService.getToken(),
+      () => authenticationService2.getToken(),
       feedbackEmail
     );
   }, [gatewayUrl, feedbackEmail]);
@@ -41137,7 +41227,7 @@ var buildHeaders2 = () => {
   const headers = {
     "Content-Type": "application/json"
   };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) {
     headers.Authorization = `Bearer ${token}`;
   }
@@ -44268,7 +44358,7 @@ function buildUrl3(path) {
 }
 function authHeaders2() {
   const headers = { "Content-Type": "application/json" };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) headers["Authorization"] = `Bearer ${token}`;
   return headers;
 }
@@ -45613,7 +45703,7 @@ var Management = () => {
     let isActive = true;
     const loadCapabilities = async () => {
       try {
-        const token = authToken ?? authenticationService.getToken();
+        const token = authToken ?? authenticationService2.getToken();
         const headers = {
           "Content-Type": "application/json"
         };
@@ -45749,7 +45839,7 @@ var Management = () => {
     "admin",
     "platform_admin"
   ]);
-  const userRoles = (authenticationService.parseJwtClaims(authenticationService.getToken() ?? "")?.roles ?? []).map((r) => r.toLowerCase());
+  const userRoles = (authenticationService2.parseJwtClaims(authenticationService2.getToken() ?? "")?.roles ?? []).map((r) => r.toLowerCase());
   const isWorkspaceAdmin = userRoles.some(
     (r) => platformAdminRoles.has(r) || r.endsWith("-admin")
   );
@@ -46568,7 +46658,7 @@ var useVoices = () => {
   const gatewayApiUrl = usePackageSettingsStore((state) => state.settings?.gatewayApiUrl);
   const { token } = useAuthenticationStore();
   (0, import_react68.useEffect)(() => {
-    const isAuthenticated = authenticationService.isAuthenticated();
+    const isAuthenticated = authenticationService2.isAuthenticated();
     if (gatewayApiUrl && token && isAuthenticated && !isServiceAvailable) {
       debugLogger.debug("Gateway API URL and JWT token available, loading voice models...");
       loadVoicesFromAPI();