@burtson-labs/bandit-engine 2.0.150 → 2.0.152

package/dist/index.mjs

@@ -1,26 +1,26 @@
 import {
   chat_default
-} from "./chunk-YEPJ7DWZ.mjs";
+} from "./chunk-7ESJJN6D.mjs";
 import {
   chat_provider_default
-} from "./chunk-PU74BI6Y.mjs";
+} from "./chunk-QLATFSSO.mjs";
 import "./chunk-ONQMRE2G.mjs";
 import {
   management_default,
   useGatewayHealth,
   useGatewayMemory,
   useGatewayModels
-} from "./chunk-IJTDHBHP.mjs";
-import "./chunk-7P7IS6UA.mjs";
-import "./chunk-F7JXIW6T.mjs";
-import "./chunk-K2JGFKEB.mjs";
+} from "./chunk-LPSM62OE.mjs";
+import "./chunk-6STVJJSG.mjs";
+import "./chunk-RRCCSN3N.mjs";
+import "./chunk-CVFFNX7H.mjs";
 import {
   defineCustomElement
 } from "./chunk-IXIM7BNO.mjs";
 import {
   FeedbackButton,
   chat_modal_default
-} from "./chunk-L37EUHMZ.mjs";
+} from "./chunk-U33KBX3Y.mjs";
 import {
   FeedbackModal,
   StreamingTTSClient,
@@ -37,7 +37,7 @@ import {
   useTTS,
   useVoiceStore,
   voiceService
-} from "./chunk-FFVGZK5D.mjs";
+} from "./chunk-TYRYAAP2.mjs";
 import {
   DEFAULT_TIER_FEATURES,
   FeatureFlagContext,
@@ -56,7 +56,7 @@ import {
   useVectorStore,
   vectorDatabaseService,
   vectorMigrationService
-} from "./chunk-NLBZZP3B.mjs";
+} from "./chunk-VLUXQE24.mjs";
 import {
   usePackageSettingsStore,
   usePreferencesStore
@@ -64,7 +64,7 @@ import {
 import {
   authenticationService,
   useAuthenticationStore
-} from "./chunk-43MLINPL.mjs";
+} from "./chunk-GWQRTUKF.mjs";
 import {
   DebugLogger,
   debugLogger

package/dist/management/management.js

@@ -1585,7 +1585,7 @@ function emitAuthTokenChanged(token) {
     detail: { token }
   }));
 }
-var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService;
+var TOKEN_KEY2, AUTH_TOKEN_CHANGED_EVENT, AuthenticationService, authenticationService2;
 var init_authenticationService = __esm({
   "src/services/auth/authenticationService.ts"() {
     "use strict";
@@ -1638,7 +1638,7 @@ var init_authenticationService = __esm({
         }
       }
     };
-    authenticationService = new AuthenticationService();
+    authenticationService2 = new AuthenticationService();
   }
 });
 
@@ -1721,12 +1721,15 @@ var init_gateway_service = __esm({
           return;
         }
         const data = error.response?.data;
-        const code = data?.code;
-        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED") {
+        let code = data?.code;
+        if (status === 401 && !code) {
+          code = "TOKEN_EXPIRED";
+        }
+        if (code !== "FORCE_RELOGIN" && code !== "ACCOUNT_LOCKED" && code !== "TOKEN_EXPIRED") {
           return;
         }
         try {
-          authenticationService.clearToken();
+          authenticationService2.clearToken();
         } catch {
         }
         if (typeof window !== "undefined" && typeof window.dispatchEvent === "function") {
@@ -8137,7 +8140,7 @@ function buildUrl(path) {
 }
 function buildHeaders() {
   const headers = { "Content-Type": "application/json" };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) {
     headers["Authorization"] = `Bearer ${token}`;
   }
@@ -8285,7 +8288,7 @@ function resolveAuthIdentity(token) {
   if (!token) {
     return null;
   }
-  const claims = authenticationService.parseJwtClaims(token);
+  const claims = authenticationService2.parseJwtClaims(token);
   if (claims?.sub) {
     return claims.sub;
   }
@@ -8818,7 +8821,7 @@ var init_conversationSyncStore = __esm({
       async initialize() {
         ensureTrackersInitialized();
         const gatewayUrl = usePackageSettingsStore.getState().settings?.gatewayApiUrl;
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         const tokenIdentity = resolveAuthIdentity(token);
         const current = get();
         const storedIdentity = getStoredSyncIdentity();
@@ -8944,10 +8947,10 @@ var init_conversationSyncStore = __esm({
           });
           set({
             hasLoadedPreference: true,
-            initializedForToken: authenticationService.getToken(),
-            initializedForIdentity: resolveAuthIdentity(authenticationService.getToken())
+            initializedForToken: authenticationService2.getToken(),
+            initializedForIdentity: resolveAuthIdentity(authenticationService2.getToken())
           });
-          setStoredSyncIdentity(resolveAuthIdentity(authenticationService.getToken()));
+          setStoredSyncIdentity(resolveAuthIdentity(authenticationService2.getToken()));
           if (enabled) {
             set({ hasCompletedInitialUpload: false });
           }
@@ -8987,10 +8990,10 @@ var init_conversationSyncStore = __esm({
           });
           set({
             hasLoadedPreference: true,
-            initializedForToken: authenticationService.getToken(),
-            initializedForIdentity: resolveAuthIdentity(authenticationService.getToken())
+            initializedForToken: authenticationService2.getToken(),
+            initializedForIdentity: resolveAuthIdentity(authenticationService2.getToken())
           });
-          setStoredSyncIdentity(resolveAuthIdentity(authenticationService.getToken()));
+          setStoredSyncIdentity(resolveAuthIdentity(authenticationService2.getToken()));
           if (preference.syncEnabled && preference.isAdvancedVectorFeaturesEnabled) {
             await get().runSync({ force: true });
           }
@@ -9030,7 +9033,7 @@ var init_conversationSyncStore = __esm({
           debugLogger.error("conversationSyncStore: runSync error - missing gateway URL");
           return;
         }
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (!token) {
           set({ status: "error", lastError: "Authentication required to sync conversations." });
           debugLogger.error("conversationSyncStore: runSync error - missing auth token");
@@ -11919,7 +11922,7 @@ var init_voiceService = __esm({
           debugLogger.error("Gateway API URL not configured");
           throw new Error("Gateway API URL not configured");
         }
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (!token) {
           debugLogger.warn("No JWT token available - skipping voice models fetch");
           const emptyModels = {
@@ -11929,7 +11932,7 @@ var init_voiceService = __esm({
           };
           return emptyModels;
         }
-        if (authenticationService.isTokenExpired(token)) {
+        if (authenticationService2.isTokenExpired(token)) {
           debugLogger.warn("JWT token is expired - skipping voice models fetch");
           const emptyModels = {
             models: [],
@@ -12018,7 +12021,7 @@ var init_tts_client = __esm({
     init_packageSettingsStore();
     init_debugLogger();
     getOrAppendAuthHeader = (existing = {}) => {
-      const token = authenticationService.getToken();
+      const token = authenticationService2.getToken();
       if (token) {
         existing["Authorization"] = `Bearer ${token}`;
         return existing;
@@ -12709,8 +12712,8 @@ var init_ai_response_action_bar = __esm({
       const { preferences } = usePreferencesStore();
       const { settings: packageSettings } = usePackageSettingsStore();
       (0, import_react13.useEffect)(() => {
-        const isAuthenticated = authenticationService.isAuthenticated();
-        const token = authenticationService.getToken();
+        const isAuthenticated = authenticationService2.isAuthenticated();
+        const token = authenticationService2.getToken();
         if (!initialized || availableVoices.length === 0) {
           if (token && isAuthenticated) {
             debugLogger.debug("AI Action Bar: Voices not initialized or unavailable, attempting to load from API");
@@ -15563,7 +15566,7 @@ var init_FeedbackModal = __esm({
           }
           const gatewayService = new GatewayService(
             gatewayUrl,
-            () => authenticationService.getToken(),
+            () => authenticationService2.getToken(),
             feedbackEmail || settings?.feedbackEmail
           );
           const feedbackRequest = {
@@ -19507,7 +19510,7 @@ var init_mcpServersService = __esm({
     };
     authHeaders2 = () => {
       const headers = { "Content-Type": "application/json" };
-      const token = authenticationService.getToken();
+      const token = authenticationService2.getToken();
       if (token) headers["Authorization"] = `Bearer ${token}`;
       return headers;
     };
@@ -20706,7 +20709,7 @@ var init_engineStore = __esm({
         }
         try {
           const headers = { "Content-Type": "application/json" };
-          const token = authenticationService.getToken();
+          const token = authenticationService2.getToken();
           if (token) headers["Authorization"] = `Bearer ${token}`;
           const res = await fetch(`${base}/models`, { headers });
           const data = await res.json();
@@ -21024,7 +21027,7 @@ var init_stt_client = __esm({
           filename,
           url: `${gatewayUrl}/stt/transcribe`
         });
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         const response = await fetch(`${gatewayUrl}/stt/transcribe`, {
           method: "POST",
           headers: {
@@ -22624,7 +22627,7 @@ function syncTelemetry() {
     const settings = usePackageSettingsStore.getState().settings;
     const cfg = resolveTelemetryConfig({
       telemetry: settings?.telemetry,
-      banditApiKey: authenticationService.getToken() ?? void 0
+      banditApiKey: authenticationService2.getToken() ?? void 0
     });
     active = cfg ? new TelemetryExporter(cfg) : null;
   } catch {
@@ -23275,7 +23278,7 @@ var init_mcpService = __esm({
         }
         if (tool.mcpServerId) {
           const base2 = settings.gatewayApiUrl.replace(/\/$/, "");
-          const token2 = authenticationService.getToken();
+          const token2 = authenticationService2.getToken();
           const controller2 = new AbortController();
           const timeoutId2 = setTimeout(() => controller2.abort(), 3e4);
           try {
@@ -23322,7 +23325,7 @@ var init_mcpService = __esm({
             "Content-Type": "application/json"
           }
         };
-        const token = authenticationService.getToken();
+        const token = authenticationService2.getToken();
         if (token) {
           requestOptions.headers = {
             ...requestOptions.headers,
@@ -24320,6 +24323,29 @@ ${protocol}`;
               overrideComponentStatus("Idle");
               setIsSubmitting(false);
               setIsStreaming(false);
+              if (/lifetime validation|token.*(expired|invalid)|unauthorized|\b401\b/i.test(err.message || "")) {
+                const { replaceLastAnswer: replaceLastAnswer2 } = useConversationStore.getState();
+                replaceLastAnswer2(
+                  "_Your session ended \u2014 sign back in to continue._",
+                  lastPartialRef.current.images,
+                  false,
+                  lastPartialRef.current.usedDocs,
+                  true
+                );
+                setResponse("");
+                setStreamBuffer("");
+                setIsThinking?.(false);
+                setPendingMessage(null);
+                try {
+                  authenticationService.clearToken();
+                } catch {
+                }
+                window.dispatchEvent(
+                  new CustomEvent("auth:force-relogin", { detail: { code: "TOKEN_EXPIRED" } })
+                );
+                telemetryEndTurn({ error: "auth_expired" });
+                return;
+              }
               const rateLimit = parseRateLimitError(err);
               if (rateLimit) {
                 debugLogger.info("Chat hit usage limit (429) \u2014 showing upgrade prompt", {
@@ -27602,7 +27628,7 @@ var init_conversation_drawer = __esm({
                           title: "Sign out",
                           onClick: (event) => {
                             event.stopPropagation();
-                            authenticationService.clearToken();
+                            authenticationService2.clearToken();
                             window.location.href = "/login";
                           },
                           sx: {
@@ -28718,7 +28744,7 @@ var init_enhanced_mobile_conversations_modal = __esm({
                             title: "Sign out",
                             onClick: (event) => {
                               event.stopPropagation();
-                              authenticationService.clearToken();
+                              authenticationService2.clearToken();
                               window.location.href = "/login";
                             },
                             sx: {
@@ -29598,7 +29624,7 @@ var init_UnderReview = __esm({
       const theme = (0, import_material51.useTheme)();
       const navigate = (0, import_react_router_dom4.useNavigate)();
       const handleResetSession = () => {
-        authenticationService.clearToken();
+        authenticationService2.clearToken();
         navigate("/login");
       };
       return /* @__PURE__ */ (0, import_jsx_runtime50.jsxs)(
@@ -30277,8 +30303,8 @@ var init_chat2 = __esm({
       const notificationService2 = useNotificationService();
       const [selectedTheme, setSelectedTheme] = (0, import_react63.useState)(null);
       const [themeLoading, setThemeLoading] = (0, import_react63.useState)(true);
-      const token = authenticationService.getToken();
-      const claims = token ? authenticationService.parseJwtClaims(token) : null;
+      const token = authenticationService2.getToken();
+      const claims = token ? authenticationService2.parseJwtClaims(token) : null;
       const baseTheme = themeMap_default[selectedTheme ?? "bandit-dark"] || banditDarkTheme;
       const banditTheme = (0, import_react63.useMemo)(() => {
         return (0, import_styles34.createTheme)(baseTheme, {
@@ -30351,7 +30377,7 @@ var init_chat2 = __esm({
       } = useTTS();
       (0, import_react63.useEffect)(() => {
         const timer = setTimeout(() => {
-          const isAuthenticated = authenticationService.isAuthenticated();
+          const isAuthenticated = authenticationService2.isAuthenticated();
           if (!initialized || availableVoices.length === 0) {
             if (token && isAuthenticated) {
               debugLogger.debug("Chat: Voices not initialized or unavailable, attempting to load from API");
@@ -30364,7 +30390,7 @@ var init_chat2 = __esm({
         return () => clearTimeout(timer);
       }, [initialized, availableVoices.length, loadVoicesFromAPI, token]);
       (0, import_react63.useEffect)(() => {
-        const isAuthenticated = authenticationService.isAuthenticated();
+        const isAuthenticated = authenticationService2.isAuthenticated();
         if (packageSettings?.gatewayApiUrl && availableVoices.length === 0 && !initialized) {
           if (token && isAuthenticated) {
             debugLogger.debug("Chat: Gateway URL available and no voices loaded, attempting to load from API");
@@ -30386,6 +30412,7 @@ var init_chat2 = __esm({
       const [isMobile, setIsMobile] = (0, import_react63.useState)(false);
       const [drawerOpen, setDrawerOpen] = (0, import_react63.useState)(false);
       const [mobileConversationsOpen, setMobileConversationsOpen] = (0, import_react63.useState)(false);
+      const cardSwipeStartXRef = (0, import_react63.useRef)(null);
       (0, import_react63.useEffect)(() => {
         if (typeof document === "undefined") return;
         const meta = document.querySelector('meta[name="theme-color"]');
@@ -31260,6 +31287,10 @@ var init_chat2 = __esm({
               // reads as full physical height with the rounded corner visible
               // where it overlaps the drawer.
               transform: isMobile && mobileConversationsOpen ? "translateX(calc(min(calc(100vw - 56px), 360px) - 12px))" : "none",
+              // Rounded card corner, positioned exactly where Claude's sits: at
+              // the top of the webview, just below the OS status strip. The strip
+              // itself is reserved by iOS in web-app mode — no web content can
+              // draw there, so this IS the full available height.
               borderRadius: isMobile && mobileConversationsOpen ? "44px" : 0,
               zIndex: isMobile && mobileConversationsOpen ? theme.zIndex.modal + 1 : 0,
               // Hairline border so the rounded card reads even when the backdrop
@@ -31273,6 +31304,20 @@ var init_chat2 = __esm({
                 setMobileConversationsOpen(false);
               }
             } : void 0,
+            onTouchStart: isMobile && mobileConversationsOpen ? (e) => {
+              if (e.currentTarget.contains(e.target)) {
+                cardSwipeStartXRef.current = e.touches[0]?.clientX ?? null;
+              }
+            } : void 0,
+            onTouchMove: isMobile && mobileConversationsOpen ? (e) => {
+              const start = cardSwipeStartXRef.current;
+              if (start === null) return;
+              const dx = (e.touches[0]?.clientX ?? start) - start;
+              if (Math.abs(dx) > 40) {
+                cardSwipeStartXRef.current = null;
+                setMobileConversationsOpen(false);
+              }
+            } : void 0,
             children: [
               /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(
                 chat_app_bar_default,
@@ -31570,12 +31615,12 @@ var init_chat2 = __esm({
         ossConfigured,
         isOSSMode: isOSSMode(),
         tier: featureFlag.getEvaluation()?.tier,
-        hasToken: authenticationService.isAuthenticated(),
+        hasToken: authenticationService2.isAuthenticated(),
         playgroundBypassAuth,
         isPlaygroundRoute,
         bypassAuth
       });
-      if (!allowUnauthenticated && !bypassAuth && !authenticationService.isAuthenticated()) {
+      if (!allowUnauthenticated && !bypassAuth && !authenticationService2.isAuthenticated()) {
         debugLogger.debug("User is not authenticated, redirecting to login");
         return /* @__PURE__ */ (0, import_jsx_runtime53.jsx)(import_react_router_dom5.Navigate, { to: "/login", replace: true });
       }
@@ -36395,7 +36440,7 @@ var useGatewayClient = () => {
     }
     return new GatewayService(
       gatewayUrl,
-      () => authenticationService.getToken(),
+      () => authenticationService2.getToken(),
       feedbackEmail
     );
   }, [gatewayUrl, feedbackEmail]);
@@ -40244,7 +40289,7 @@ var buildHeaders2 = () => {
   const headers = {
     "Content-Type": "application/json"
   };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) {
     headers.Authorization = `Bearer ${token}`;
   }
@@ -42843,7 +42888,7 @@ var AIProviderInitService = class _AIProviderInitService {
         type: "ollama" /* OLLAMA */,
         baseUrl: settings.ollamaUrl,
         tokenFactory: () => {
-          let token = authenticationService.getToken();
+          let token = authenticationService2.getToken();
           if (!token) {
             token = localStorage.getItem("authToken");
           }
@@ -42884,7 +42929,7 @@ var AIProviderInitService = class _AIProviderInitService {
             type: "ollama" /* OLLAMA */,
             baseUrl: settings.ollamaUrl || "http://localhost:11434",
             tokenFactory: () => {
-              let token = authenticationService.getToken();
+              let token = authenticationService2.getToken();
               if (!token) {
                 token = localStorage.getItem("authToken");
               }
@@ -42915,7 +42960,7 @@ var AIProviderInitService = class _AIProviderInitService {
             type: "ollama" /* OLLAMA */,
             baseUrl: "http://localhost:11434",
             tokenFactory: () => {
-              let token = authenticationService.getToken();
+              let token = authenticationService2.getToken();
               if (!token) {
                 token = localStorage.getItem("authToken");
               }
@@ -43005,7 +43050,7 @@ var AIProviderInitService = class _AIProviderInitService {
         return config;
       }
       config.tokenFactory = () => {
-        let token = authenticationService.getToken();
+        let token = authenticationService2.getToken();
         if (!token && typeof localStorage !== "undefined") {
           try {
             token = localStorage.getItem("authToken");
@@ -43652,7 +43697,7 @@ function buildUrl3(path) {
 }
 function authHeaders() {
   const headers = { "Content-Type": "application/json" };
-  const token = authenticationService.getToken();
+  const token = authenticationService2.getToken();
   if (token) headers["Authorization"] = `Bearer ${token}`;
   return headers;
 }
@@ -44997,7 +45042,7 @@ var Management = () => {
     let isActive = true;
     const loadCapabilities = async () => {
       try {
-        const token = authToken ?? authenticationService.getToken();
+        const token = authToken ?? authenticationService2.getToken();
         const headers = {
           "Content-Type": "application/json"
         };
@@ -45133,7 +45178,7 @@ var Management = () => {
     "admin",
     "platform_admin"
   ]);
-  const userRoles = (authenticationService.parseJwtClaims(authenticationService.getToken() ?? "")?.roles ?? []).map((r) => r.toLowerCase());
+  const userRoles = (authenticationService2.parseJwtClaims(authenticationService2.getToken() ?? "")?.roles ?? []).map((r) => r.toLowerCase());
   const isWorkspaceAdmin = userRoles.some(
     (r) => platformAdminRoles.has(r) || r.endsWith("-admin")
   );