npm - @cerebro-labs/agentnava-sdk - Versions diffs - 0.75.1 → 0.79.0 - Mend

@cerebro-labs/agentnava-sdk 0.75.1 → 0.79.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (27) hide show

package/end-user.d.ts CHANGED Viewed

@@ -4,7 +4,13 @@ import { Conversation } from './conversation.ts';
 import type { Http } from './http.ts';
 import type { AppId } from './apps.generated.ts';
 /**
- * One of YOUR end users, as this platform sees them.
+ * One of YOUR end users, of ONE agent, as this platform sees them.
+ *
+ * EACH AGENT IS ITS OWN APP, WITH ITS OWN END USERS. The same id on two agents is
+ * two different people, with separate accounts, secrets and conversations. A
+ * person using two of your agents signs in to each. There is no workspace-wide
+ * end user, and no way to erase one, because the same id on another agent may be
+ * someone else.
  *
  * WHY THE NAME IS `EndUser` AND NOT `User`. There are two populations of people
  * in this product, and calling both of them "user" was a bug waiting to be
@@ -13,10 +19,11 @@ import type { AppId } from './apps.generated.ts';
  * | | workspace member | END USER |
  * |---|---|---|
  * | who | your colleague, on a seat | the person your application serves |
+ * | belongs to | the workspace | one agent |
  * | signs in to this platform | yes | NEVER |
  * | who issues the id | we do | YOUR database |
  * | do we authenticate it | yes | no, deliberately |
- * | in this SDK | `ws.members()` | `ws.endUser(id)` |
+ * | in this SDK | `ws.members()` | `agent.endUser(id)` |
  *
  * They were both spelled `userId`, so `ws.members()` handed you an id that
  * `agent.start()` would accept without complaint and label a conversation with
@@ -43,21 +50,22 @@ import type { AppId } from './apps.generated.ts';
  * // once, in the agent's setup: each person uses their own Gmail
  * await agent.connections.add(Connection.endUserAccount(App.GMAIL));
  *
- * const ananya = ws.endUser(row.userId);       // no request
+ * const ananya = agent.endUser(row.userId);    // no request
  * const { url } = await ananya.accounts.connect({ app: App.GMAIL });
- * showToUser(url);                             // she signs in ONCE
+ * showToUser(url);                             // she signs in ONCE, for this agent
  *
  * const conversation = await agent.start({ endUserId: ananya.id });
  * await conversation.ask('what did I miss this morning?');
  *
- * await ananya.conversations();                // everything of hers, any agent
+ * await ananya.conversations();                // everything of hers, with this agent
+ * await ananya.erase();                        // she left: all of it, on this agent
  * ```
  *
  * WHAT NAMING AN END USER DOES, exactly. `start({ endUserId })` labels the
  * conversation so it can be listed back to them, and it decides whose account
- * a connection to the end user's account uses: this person's, for that app,
- * and nobody else's. The grant is the agent's setup, which you can read; it never
- * falls back to the workspace's account or to anybody else's.
+ * a connection to the end user's account uses: this person's, on this agent, for
+ * that app, and nobody else's. The grant is the agent's setup, which you can read;
+ * it never falls back to the workspace's account, or to anybody else's.
  *
  * THE ID IS YOURS. A row id from your database, opaque to us, and we never
  * authenticate it. We are not an identity provider and do not want to be. It
@@ -69,20 +77,23 @@ import type { AppId } from './apps.generated.ts';
 export declare class EndUser {
     #private;
     readonly id: string;
-    constructor(http: Http, id: string);
+    /** The agent this person belongs to, as you addressed it. */
+    readonly agentId: string;
+    constructor(http: Http, agentId: string, id: string);
     private get base();
     /**
-     * This person's own accounts: the "end user's account" that a connection
-     * built with `Connection.endUserAccount(app)` uses.
+     * This person's own accounts on this agent: the "end user's account" that a
+     * connection built with `Connection.endUserAccount(app)` uses.
      *
      * Connected ONCE, on the app's own page. After that the account is theirs
-     * and stays theirs: every conversation of theirs uses it, with any agent
-     * whose setup asks for the end user's account of that app, and nobody is
-     * sent through a sign-in again per thread. Nothing is attached per
-     * conversation.
+     * on this agent and stays theirs: every conversation of theirs with this agent
+     * uses it, and nobody is sent through a sign-in again per thread. Nothing is
+     * attached per conversation.
      *
      * An agent never reaches these any other way: not through the workspace's
-     * own account of the same app, and not in another person's conversation.
+     * own account of the same app, not in another person's conversation, and not
+     * on another agent. The same id on another agent is another person, who signs
+     * in there.
      */
     readonly accounts: {
         /** Begin connecting one of their accounts. Returns it, still `pending`,
@@ -97,14 +108,15 @@ export declare class EndUser {
             account: Account;
             url: string;
         }>;
-        /** Theirs alone. The agent creators' accounts are not here:
+        /** Theirs on this agent alone. The agent creators' accounts are not here:
          *  `ws.accounts.list()` is the view that shows those. */
         list: () => Promise<Account[]>;
         /**
-         * Disconnect every account they connected, in one call: what
-         * off-boarding calls, so it is not a loop the caller has to remember to
-         * write. Every conversation of theirs stops reaching those apps from the
-         * next turn, and nothing is kept. Returns how many were disconnected.
+         * Disconnect every account they connected on this agent, in one call, so it
+         * is not a loop the caller has to remember to write. Every conversation of
+         * theirs with this agent stops reaching those apps from the next turn, and
+         * nothing is kept. Returns how many were disconnected. To remove everything
+         * about them, use `erase()`.
          */
         disconnectAll: () => Promise<{
             disconnected: number;
@@ -129,7 +141,7 @@ export declare class EndUser {
      * explicit line:
      *
      * ```ts
-     * const ananya = ws.endUser(row.userId);
+     * const ananya = agent.endUser(row.userId);
      * const key = await ananya.secrets.create({ name: 'ZENDESK_TOKEN', value: token });
      *
      * const conversation = await agent.start({ endUserId: ananya.id });
@@ -139,8 +151,9 @@ export declare class EndUser {
      * TWO THINGS THE PLATFORM ENFORCES, neither of which you can turn off:
      * the agent must DECLARE that secret name at session scope, so attaching by
      * id is not a way around the allowlist; and a secret belonging to one end
-     * user can only be attached to a conversation launched for that same person,
-     * so one mistyped id cannot hand Ananya's key to somebody else's turn.
+     * user can only be attached to a conversation launched for that same person
+     * with this same agent, so one mistyped id cannot hand Ananya's key to somebody
+     * else's turn.
      * Both are checked again at every tool call, not only when you attach.
      *
      * THE CONVERSATION FOLLOWS THE SECRET. It keeps a pointer, never a copy, so
@@ -155,26 +168,42 @@ export declare class EndUser {
             name: string;
             value: string;
             description?: string;
-            agentId?: string;
             /** The only hosts a tool may send it to, checked at every call of a
              *  conversation it is attached to. Left out, it goes only to the host
              *  the agent's tool writes out in full. */
             allowedHosts?: string[];
         }) => Promise<Secret>;
-        /** This person's secrets, values excluded. The workspace's own are not in
-         *  here: `ws.secrets.list()` answers that. */
+        /** This person's secrets on this agent, values excluded. The workspace's own
+         *  are not in here: `ws.secrets.list()` answers that. */
         list: () => Promise<Secret[]>;
     };
     /**
-     * Everything this person has said, ACROSS EVERY AGENT, newest first.
-     *
-     * `agent.conversations({ endUser })` answers the narrower question, one agent
-     * at a time. This is the one an application renders as "your chats", and it
-     * is the only listing in this SDK with a real cursor: pass `before` from the
-     * previous page to keep going, rather than being capped at 200.
+     * Everything this person has said to this agent, newest first. Pass `before`
+     * from the previous page to keep going, rather than being capped at 200.
      */
     conversations(options?: {
         limit?: number;
         before?: string;
     }): Promise<Conversation[]>;
+    /**
+     * Delete everything about them on this agent, in one call: their accounts
+     * (signed out at the app first), their secrets, their conversations, and the
+     * wakeups those conversations set. What off-boarding and an erasure request call.
+     *
+     * This agent only. The same id on another agent may be someone else, so there
+     * is no workspace-wide erase: if one person uses two of your agents, erase them
+     * from each. A schedule you configured on the agent to name them stays, because
+     * it is your setup. A project's conversations belong to the project and are
+     * deleted by id.
+     *
+     * Safe to call again. An account that cannot be signed out fails the call with
+     * the rest still in place, so a credential is never orphaned. A turn still running
+     * when this lands can write after it, and a second call clears what it left.
+     * Returns how many of each went.
+     */
+    erase(): Promise<{
+        accounts: number;
+        secrets: number;
+        conversations: number;
+    }>;
 }

package/end-user.js CHANGED Viewed

@@ -3,7 +3,13 @@ import { Account, accountIn } from "./account.js";
 import { Secret } from "./secret.js";
 import { Conversation } from "./conversation.js";
 /**
- * One of YOUR end users, as this platform sees them.
+ * One of YOUR end users, of ONE agent, as this platform sees them.
+ *
+ * EACH AGENT IS ITS OWN APP, WITH ITS OWN END USERS. The same id on two agents is
+ * two different people, with separate accounts, secrets and conversations. A
+ * person using two of your agents signs in to each. There is no workspace-wide
+ * end user, and no way to erase one, because the same id on another agent may be
+ * someone else.
  *
  * WHY THE NAME IS `EndUser` AND NOT `User`. There are two populations of people
  * in this product, and calling both of them "user" was a bug waiting to be
@@ -12,10 +18,11 @@ import { Conversation } from "./conversation.js";
  * | | workspace member | END USER |
  * |---|---|---|
  * | who | your colleague, on a seat | the person your application serves |
+ * | belongs to | the workspace | one agent |
  * | signs in to this platform | yes | NEVER |
  * | who issues the id | we do | YOUR database |
  * | do we authenticate it | yes | no, deliberately |
- * | in this SDK | `ws.members()` | `ws.endUser(id)` |
+ * | in this SDK | `ws.members()` | `agent.endUser(id)` |
  *
  * They were both spelled `userId`, so `ws.members()` handed you an id that
  * `agent.start()` would accept without complaint and label a conversation with
@@ -42,21 +49,22 @@ import { Conversation } from "./conversation.js";
  * // once, in the agent's setup: each person uses their own Gmail
  * await agent.connections.add(Connection.endUserAccount(App.GMAIL));
  *
- * const ananya = ws.endUser(row.userId);       // no request
+ * const ananya = agent.endUser(row.userId);    // no request
  * const { url } = await ananya.accounts.connect({ app: App.GMAIL });
- * showToUser(url);                             // she signs in ONCE
+ * showToUser(url);                             // she signs in ONCE, for this agent
  *
  * const conversation = await agent.start({ endUserId: ananya.id });
  * await conversation.ask('what did I miss this morning?');
  *
- * await ananya.conversations();                // everything of hers, any agent
+ * await ananya.conversations();                // everything of hers, with this agent
+ * await ananya.erase();                        // she left: all of it, on this agent
  * ```
  *
  * WHAT NAMING AN END USER DOES, exactly. `start({ endUserId })` labels the
  * conversation so it can be listed back to them, and it decides whose account
- * a connection to the end user's account uses: this person's, for that app,
- * and nobody else's. The grant is the agent's setup, which you can read; it never
- * falls back to the workspace's account or to anybody else's.
+ * a connection to the end user's account uses: this person's, on this agent, for
+ * that app, and nobody else's. The grant is the agent's setup, which you can read;
+ * it never falls back to the workspace's account, or to anybody else's.
  *
  * THE ID IS YOURS. A row id from your database, opaque to us, and we never
  * authenticate it. We are not an identity provider and do not want to be. It
@@ -67,26 +75,30 @@ import { Conversation } from "./conversation.js";
  */
 export class EndUser {
     id;
+    /** The agent this person belongs to, as you addressed it. */
+    agentId;
     #http;
-    constructor(http, id) {
+    constructor(http, agentId, id) {
         this.#http = http;
+        this.agentId = agentId;
         this.id = id;
     }
     get base() {
-        return `/v1/end-users/${encodeURIComponent(this.id)}/accounts`;
+        return `/v1/agents/${encodeURIComponent(this.agentId)}/end-users/${encodeURIComponent(this.id)}`;
     }
     /**
-     * This person's own accounts: the "end user's account" that a connection
-     * built with `Connection.endUserAccount(app)` uses.
+     * This person's own accounts on this agent: the "end user's account" that a
+     * connection built with `Connection.endUserAccount(app)` uses.
      *
      * Connected ONCE, on the app's own page. After that the account is theirs
-     * and stays theirs: every conversation of theirs uses it, with any agent
-     * whose setup asks for the end user's account of that app, and nobody is
-     * sent through a sign-in again per thread. Nothing is attached per
-     * conversation.
+     * on this agent and stays theirs: every conversation of theirs with this agent
+     * uses it, and nobody is sent through a sign-in again per thread. Nothing is
+     * attached per conversation.
      *
      * An agent never reaches these any other way: not through the workspace's
-     * own account of the same app, and not in another person's conversation.
+     * own account of the same app, not in another person's conversation, and not
+     * on another agent. The same id on another agent is another person, who signs
+     * in there.
      */
     accounts = {
         /** Begin connecting one of their accounts. Returns it, still `pending`,
@@ -96,27 +108,28 @@ export class EndUser {
          *  hands you the same kind of link for whatever a conversation is still
          *  missing. */
         connect: async (input) => {
-            // FIELDS PICKED: the person comes from the path, never from the body.
-            const res = await this.#http.post(`${this.base}/connect`, {
+            // FIELDS PICKED: the agent and the person come from the path, never from the body.
+            const res = await this.#http.post(`${this.base}/accounts/connect`, {
                 app: input.app,
             });
-            const account = accountIn(res, `${this.base}/connect`);
+            const account = accountIn(res, `${this.base}/accounts/connect`);
             return { account: new Account(this.#http, account.id, account), url: res.url };
         },
-        /** Theirs alone. The agent creators' accounts are not here:
+        /** Theirs on this agent alone. The agent creators' accounts are not here:
          *  `ws.accounts.list()` is the view that shows those. */
         list: async () => {
-            const res = await this.#http.get(this.base);
+            const res = await this.#http.get(`${this.base}/accounts`);
             return (res.accounts ?? []).map((a) => new Account(this.#http, a.id, a));
         },
         /**
-         * Disconnect every account they connected, in one call: what
-         * off-boarding calls, so it is not a loop the caller has to remember to
-         * write. Every conversation of theirs stops reaching those apps from the
-         * next turn, and nothing is kept. Returns how many were disconnected.
+         * Disconnect every account they connected on this agent, in one call, so it
+         * is not a loop the caller has to remember to write. Every conversation of
+         * theirs with this agent stops reaching those apps from the next turn, and
+         * nothing is kept. Returns how many were disconnected. To remove everything
+         * about them, use `erase()`.
          */
         disconnectAll: async () => {
-            const res = await this.#http.delete(this.base);
+            const res = await this.#http.delete(`${this.base}/accounts`);
             return { disconnected: res?.disconnected ?? 0 };
         },
     };
@@ -139,7 +152,7 @@ export class EndUser {
      * explicit line:
      *
      * ```ts
-     * const ananya = ws.endUser(row.userId);
+     * const ananya = agent.endUser(row.userId);
      * const key = await ananya.secrets.create({ name: 'ZENDESK_TOKEN', value: token });
      *
      * const conversation = await agent.start({ endUserId: ananya.id });
@@ -149,8 +162,9 @@ export class EndUser {
      * TWO THINGS THE PLATFORM ENFORCES, neither of which you can turn off:
      * the agent must DECLARE that secret name at session scope, so attaching by
      * id is not a way around the allowlist; and a secret belonging to one end
-     * user can only be attached to a conversation launched for that same person,
-     * so one mistyped id cannot hand Ananya's key to somebody else's turn.
+     * user can only be attached to a conversation launched for that same person
+     * with this same agent, so one mistyped id cannot hand Ananya's key to somebody
+     * else's turn.
      * Both are checked again at every tool call, not only when you attach.
      *
      * THE CONVERSATION FOLLOWS THE SECRET. It keeps a pointer, never a copy, so
@@ -170,37 +184,63 @@ export class EndUser {
                 name: input.name,
                 value: input.value,
                 endUserId: this.id,
+                agentId: this.agentId,
                 ...(input.description !== undefined && { description: input.description }),
-                ...(input.agentId !== undefined && { agentId: input.agentId }),
                 ...(input.allowedHosts !== undefined && { allowedHosts: input.allowedHosts }),
             });
             const meta = res.secret ?? res;
             return new Secret(this.#http, meta.id, meta);
         },
-        /** This person's secrets, values excluded. The workspace's own are not in
-         *  here: `ws.secrets.list()` answers that. */
+        /** This person's secrets on this agent, values excluded. The workspace's own
+         *  are not in here: `ws.secrets.list()` answers that. */
         list: async () => {
             const res = await this.#http.get('/v1/secrets', {
                 end_user_id: this.id,
+                agentId: this.agentId,
             });
             return (res.secrets ?? []).map((m) => new Secret(this.#http, m.id, m));
         },
     };
     /**
-     * Everything this person has said, ACROSS EVERY AGENT, newest first.
-     *
-     * `agent.conversations({ endUser })` answers the narrower question, one agent
-     * at a time. This is the one an application renders as "your chats", and it
-     * is the only listing in this SDK with a real cursor: pass `before` from the
-     * previous page to keep going, rather than being capped at 200.
+     * Everything this person has said to this agent, newest first. Pass `before`
+     * from the previous page to keep going, rather than being capped at 200.
      */
     async conversations(options = {}) {
         const res = await this.#http.get('/v1/conversations', {
+            agentId: this.agentId,
             end_user_id: this.id,
             ...(options.limit !== undefined && { limit: options.limit }),
             ...(options.before && { before: options.before }),
         });
         return (res.conversations ?? []).map((c) => new Conversation(this.#http, c.id, c));
     }
+    /**
+     * Delete everything about them on this agent, in one call: their accounts
+     * (signed out at the app first), their secrets, their conversations, and the
+     * wakeups those conversations set. What off-boarding and an erasure request call.
+     *
+     * This agent only. The same id on another agent may be someone else, so there
+     * is no workspace-wide erase: if one person uses two of your agents, erase them
+     * from each. A schedule you configured on the agent to name them stays, because
+     * it is your setup. A project's conversations belong to the project and are
+     * deleted by id.
+     *
+     * Safe to call again. An account that cannot be signed out fails the call with
+     * the rest still in place, so a credential is never orphaned. A turn still running
+     * when this lands can write after it, and a second call clears what it left.
+     * Returns how many of each went.
+     */
+    async erase() {
+        const total = { accounts: 0, secrets: 0, conversations: 0 };
+        let more = true;
+        while (more) {
+            const res = await this.#http.delete(this.base);
+            total.accounts += res?.accounts ?? 0;
+            total.secrets += res?.secrets ?? 0;
+            total.conversations += res?.conversations ?? 0;
+            more = res?.more === true;
+        }
+        return total;
+    }
 }
 //# sourceMappingURL=end-user.js.map

package/end-user.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"end-user.js","sourceRoot":"","sources":["../src/end-user.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AACH,MAAM,OAAO,OAAO;IACV,EAAE,CAAS;IACX,KAAK,CAAO;IAErB,YAAY,IAAU,EAAE,EAAU;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACd,CAAC;IAED,IAAY,IAAI;QACf,OAAO,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;OAYG;IACM,QAAQ,GAAG;QACnB;;;;;uBAKe;QACf,OAAO,EAAE,KAAK,EAAE,KAAqB,EAA8C,EAAE;YACpF,sEAAsE;YACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyC,GAAG,IAAI,CAAC,IAAI,UAAU,EAAE;gBACjG,GAAG,EAAE,KAAK,CAAC,GAAG;aACd,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QAChF,CAAC;QAED;iEACyD;QACzD,IAAI,EAAE,KAAK,IAAwB,EAAE;YACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED;;;;;WAKG;QACH,aAAa,EAAE,KAAK,IAAuC,EAAE;YAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC,EAAE,CAAC;QACjD,CAAC;KACD,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqCG;IACM,OAAO,GAAG;QAClB;yEACiE;QACjE,MAAM,EAAE,KAAK,EAAE,KASd,EAAmB,EAAE;YACrB,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,aAAa,EAAE;gBACtF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9D,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aAC7E,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;YAC/B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD;sDAC8C;QAC9C,IAAI,EAAE,KAAK,IAAuB,EAAE;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,aAAa,EAAE;gBAC1E,WAAW,EAAE,IAAI,CAAC,EAAE;aACpB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;KACD,CAAC;IAEF;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,UAA+C,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,mBAAmB,EAAE;YACjG,WAAW,EAAE,IAAI,CAAC,EAAE;YACpB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACjD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;CACD","sourcesContent":["// One of YOUR end users: a person your application serves, who never signs in here.\n\nimport { Account, accountIn } from './account.ts';\nimport { Secret } from './secret.ts';\nimport { Conversation } from './conversation.ts';\nimport type { Http } from './http.ts';\nimport type { AppId } from './apps.generated.ts';\nimport type { AccountData, AgentConversationData, SecretMeta } from './types.ts';\n\n/*\n One of YOUR end users, as this platform sees them.\n \n WHY THE NAME IS `EndUser` AND NOT `User`. There are two populations of people\n * in this product, and calling both of them \"user\" was a bug waiting to be\n * written:\n \n \| \| workspace member \| END USER \|\n * \|---\|---\|---\|\n * \| who \| your colleague, on a seat \| the person your application serves \|\n * \| signs in to this platform \| yes \| NEVER \|\n * \| who issues the id \| we do \| YOUR database \|\n * \| do we authenticate it \| yes \| no, deliberately \|\n * \| in this SDK \| `ws.members()` \| `ws.endUser(id)` \|\n \n They were both spelled `userId`, so `ws.members()` handed you an id that\n * `agent.start()` would accept without complaint and label a conversation with\n * a teammate's internal platform id. It could never have errored, because an\n * end-user id is never checked against anything. The two names now make that\n * call impossible to write by accident.\n \n NOT `Customer`, which was tried and reverted. Two reasons. \"Customer\" already\n * means the party that BUYS this platform, in our own strategy documents and in\n * `subscriptions.stripe_customer_id`, so the word points the other way. And it\n * is wrong for the common case: an enterprise deploying an internal workflow\n * agent serves its own EMPLOYEES, who are not anybody's customers.\n \n WHY THIS OBJECT EXISTS. You are building an application for many people.\n * Ananya has her own Gmail, her own conversations and her own history, and so\n * do the other ten thousand. Every call you make is on behalf of one of them.\n \n Without this, the person is an argument: `endUserId` threaded through\n * `accounts.connect`, `secrets.create`, `conversations` and `start`, and\n * forgotten in exactly one of them one day. With it, you say who once and the\n * rest follows:\n \n ```ts\n * // once, in the agent's setup: each person uses their own Gmail\n * await agent.connections.add(Connection.endUserAccount(App.GMAIL));\n \n const ananya = ws.endUser(row.userId); // no request\n * const { url } = await ananya.accounts.connect({ app: App.GMAIL });\n * showToUser(url); // she signs in ONCE\n \n const conversation = await agent.start({ endUserId: ananya.id });\n * await conversation.ask('what did I miss this morning?');\n \n await ananya.conversations(); // everything of hers, any agent\n * ```\n \n WHAT NAMING AN END USER DOES, exactly. `start({ endUserId })` labels the\n * conversation so it can be listed back to them, and it decides whose account\n * a connection to the end user's account uses: this person's, for that app,\n * and nobody else's. The grant is the agent's setup, which you can read; it never\n * falls back to the workspace's account or to anybody else's.\n \n THE ID IS YOURS. A row id from your database, opaque to us, and we never\n * authenticate it. We are not an identity provider and do not want to be. It\n * also means passing the wrong one hands that person somebody else's mailbox,\n * which is a sharper consequence than the same mistake has for a chat list.\n \n Holding one makes NO request.\n /\nexport class EndUser {\n\treadonly id: string;\n\treadonly #http: Http;\n\n\tconstructor(http: Http, id: string) {\n\t\tthis.#http = http;\n\t\tthis.id = id;\n\t}\n\n\tprivate get base(): string {\n\t\treturn `/v1/end-users/${encodeURIComponent(this.id)}/accounts`;\n\t}\n\n\t/\n\t This person's own accounts: the \"end user's account\" that a connection\n\t * built with `Connection.endUserAccount(app)` uses.\n\t \n\t Connected ONCE, on the app's own page. After that the account is theirs\n\t * and stays theirs: every conversation of theirs uses it, with any agent\n\t * whose setup asks for the end user's account of that app, and nobody is\n\t * sent through a sign-in again per thread. Nothing is attached per\n\t * conversation.\n\t \n\t An agent never reaches these any other way: not through the workspace's\n\t * own account of the same app, and not in another person's conversation.\n\t /\n\treadonly accounts = {\n\t\t/* Begin connecting one of their accounts. Returns it, still `pending`,\n\t\t * and the url to send them to. It is an ordinary `Account`:\n\t\t * `account.waitUntilConnected()` tells you when they are done, and\n\t\t * `ws.account(id)` reaches it later. `conversation.accountsNeeded()`\n\t\t * hands you the same kind of link for whatever a conversation is still\n\t\t * missing. /\n\t\tconnect: async (input: { app: AppId }): Promise<{ account: Account; url: string }> => {\n\t\t\t// FIELDS PICKED: the person comes from the path, never from the body.\n\t\t\tconst res = await this.#http.post<{ account?: AccountData; url: string }>(`${this.base}/connect`, {\n\t\t\t\tapp: input.app,\n\t\t\t});\n\t\t\tconst account = accountIn(res, `${this.base}/connect`);\n\t\t\treturn { account: new Account(this.#http, account.id, account), url: res.url };\n\t\t},\n\n\t\t/* Theirs alone. The agent creators' accounts are not here:\n\t\t * `ws.accounts.list()` is the view that shows those. /\n\t\tlist: async (): Promise<Account[]> => {\n\t\t\tconst res = await this.#http.get<{ accounts: AccountData[] }>(this.base);\n\t\t\treturn (res.accounts ?? []).map((a) => new Account(this.#http, a.id, a));\n\t\t},\n\n\t\t/\n\t\t Disconnect every account they connected, in one call: what\n\t\t * off-boarding calls, so it is not a loop the caller has to remember to\n\t\t * write. Every conversation of theirs stops reaching those apps from the\n\t\t * next turn, and nothing is kept. Returns how many were disconnected.\n\t\t /\n\t\tdisconnectAll: async (): Promise<{ disconnected: number }> => {\n\t\t\tconst res = await this.#http.delete<{ disconnected?: number }>(this.base);\n\t\t\treturn { disconnected: res?.disconnected ?? 0 };\n\t\t},\n\t};\n\n\t/\n\t Credentials that belong to THIS PERSON: their API key for a system you\n\t * integrate with, their token for a service only they have an account on.\n\t \n\t THIS WAS ABSENT UNTIL THERE WAS A WAY TO USE IT. A secret reaches a turn\n\t * only by being ATTACHED, and for a long time it could not be, because\n\t * binding one took its VALUE, and you do not hold the value of a secret the\n\t * platform stored for you. So a per-person secret would have been a surface\n\t * that accepted writes, listed them back, and was read by nothing. It was\n\t * left out rather than shipped looking like a feature.\n\t \n\t Secrets are still attached; accounts are not (0.44). A person's account is\n\t * reached through the agent's setup (`Connection.endUserAccount`), so there is\n\t * nothing to attach for it.\n\t \n\t `sessionBindings.secretIds` is what closed it, and attaching is still an\n\t * explicit line:\n\t \n\t ```ts\n\t * const ananya = ws.endUser(row.userId);\n\t * const key = await ananya.secrets.create({ name: 'ZENDESK_TOKEN', value: token });\n\t \n\t const conversation = await agent.start({ endUserId: ananya.id });\n\t * await conversation.attach(key); // EXPLICIT. Nothing is implied.\n\t * ```\n\t \n\t TWO THINGS THE PLATFORM ENFORCES, neither of which you can turn off:\n\t * the agent must DECLARE that secret name at session scope, so attaching by\n\t * id is not a way around the allowlist; and a secret belonging to one end\n\t * user can only be attached to a conversation launched for that same person,\n\t * so one mistyped id cannot hand Ananya's key to somebody else's turn.\n\t * Both are checked again at every tool call, not only when you attach.\n\t \n\t THE CONVERSATION FOLLOWS THE SECRET. It keeps a pointer, never a copy, so\n\t * when your app gets a new token for this person, `key.update(newToken)`\n\t * reaches every conversation it is attached to on the next call, and\n\t * `key.delete()` stops them all at once.\n\t /\n\treadonly secrets = {\n\t\t/* Store a credential for this person. The value is encrypted on arrival\n\t\t * and never handed back, which is why attaching uses the id. /\n\t\tcreate: async (input: {\n\t\t\tname: string;\n\t\t\tvalue: string;\n\t\t\tdescription?: string;\n\t\t\tagentId?: string;\n\t\t\t/* The only hosts a tool may send it to, checked at every call of a\n\t\t\t * conversation it is attached to. Left out, it goes only to the host\n\t\t\t * the agent's tool writes out in full. /\n\t\t\tallowedHosts?: string[];\n\t\t}): Promise<Secret> => {\n\t\t\t// FIELDS PICKED, never the input object forwarded. Removing a field\n\t\t\t// from a type does not stop a JavaScript caller sending it, and\n\t\t\t// forwarding wholesale is how `endUserId` kept reaching the API after\n\t\t\t// it had supposedly been removed.\n\t\t\tconst res = await this.#http.post<{ secret?: SecretMeta } & SecretMeta>('/v1/secrets', {\n\t\t\t\tname: input.name,\n\t\t\t\tvalue: input.value,\n\t\t\t\tendUserId: this.id,\n\t\t\t\t...(input.description !== undefined && { description: input.description }),\n\t\t\t\t...(input.agentId !== undefined && { agentId: input.agentId }),\n\t\t\t\t...(input.allowedHosts !== undefined && { allowedHosts: input.allowedHosts }),\n\t\t\t});\n\t\t\tconst meta = res.secret ?? res;\n\t\t\treturn new Secret(this.#http, meta.id, meta);\n\t\t},\n\t\t/* This person's secrets, values excluded. The workspace's own are not in\n\t\t * here: `ws.secrets.list()` answers that. /\n\t\tlist: async (): Promise<Secret[]> => {\n\t\t\tconst res = await this.#http.get<{ secrets: SecretMeta[] }>('/v1/secrets', {\n\t\t\t\tend_user_id: this.id,\n\t\t\t});\n\t\t\treturn (res.secrets ?? []).map((m) => new Secret(this.#http, m.id, m));\n\t\t},\n\t};\n\n\t/\n\t Everything this person has said, ACROSS EVERY AGENT, newest first.\n\t \n\t `agent.conversations({ endUser })` answers the narrower question, one agent\n\t * at a time. This is the one an application renders as \"your chats\", and it\n\t * is the only listing in this SDK with a real cursor: pass `before` from the\n\t * previous page to keep going, rather than being capped at 200.\n\t */\n\tasync conversations(options: { limit?: number; before?: string } = {}): Promise<Conversation[]> {\n\t\tconst res = await this.#http.get<{ conversations: AgentConversationData[] }>('/v1/conversations', {\n\t\t\tend_user_id: this.id,\n\t\t\t...(options.limit !== undefined && { limit: options.limit }),\n\t\t\t...(options.before && { before: options.before }),\n\t\t});\n\t\treturn (res.conversations ?? []).map((c) => new Conversation(this.#http, c.id, c));\n\t}\n}\n"]}
1	+ {"version":3,"file":"end-user.js","sourceRoot":"","sources":["../src/end-user.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AACH,MAAM,OAAO,OAAO;IACV,EAAE,CAAS;IACpB,6DAA6D;IACpD,OAAO,CAAS;IAChB,KAAK,CAAO;IAErB,YAAY,IAAU,EAAE,OAAe,EAAE,EAAU;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACd,CAAC;IAED,IAAY,IAAI;QACf,OAAO,cAAc,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAClG,CAAC;IAED;;;;;;;;;;;;;OAaG;IACM,QAAQ,GAAG;QACnB;;;;;uBAKe;QACf,OAAO,EAAE,KAAK,EAAE,KAAqB,EAA8C,EAAE;YACpF,mFAAmF;YACnF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE;gBAC1G,GAAG,EAAE,KAAK,CAAC,GAAG;aACd,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QAChF,CAAC;QAED;iEACyD;QACzD,IAAI,EAAE,KAAK,IAAwB,EAAE;YACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,GAAG,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED;;;;;;WAMG;QACH,aAAa,EAAE,KAAK,IAAuC,EAAE;YAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,GAAG,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC;YACxF,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC,EAAE,CAAC;QACjD,CAAC;KACD,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACM,OAAO,GAAG;QAClB;yEACiE;QACjE,MAAM,EAAE,KAAK,EAAE,KAQd,EAAmB,EAAE;YACrB,oEAAoE;YACpE,gEAAgE;YAChE,sEAAsE;YACtE,kCAAkC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuC,aAAa,EAAE;gBACtF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1E,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;aAC7E,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;YAC/B,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD;iEACyD;QACzD,IAAI,EAAE,KAAK,IAAuB,EAAE;YACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,aAAa,EAAE;gBAC1E,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,OAAO,EAAE,IAAI,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;KACD,CAAC;IAEF;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,UAA+C,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6C,mBAAmB,EAAE;YACjG,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,EAAE;YACpB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACjD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,KAAK;QACV,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAkF,IAAI,CAAC,IAAI,CAAC,CAAC;YAChI,KAAK,CAAC,QAAQ,IAAI,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;YACrC,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,aAAa,IAAI,GAAG,EAAE,aAAa,IAAI,CAAC,CAAC;YAC/C,IAAI,GAAG,GAAG,EAAE,IAAI,KAAK,IAAI,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD","sourcesContent":["// One of YOUR end users: a person your application serves, who never signs in here.\n\nimport { Account, accountIn } from './account.ts';\nimport { Secret } from './secret.ts';\nimport { Conversation } from './conversation.ts';\nimport type { Http } from './http.ts';\nimport type { AppId } from './apps.generated.ts';\nimport type { AccountData, AgentConversationData, SecretMeta } from './types.ts';\n\n/*\n One of YOUR end users, of ONE agent, as this platform sees them.\n \n EACH AGENT IS ITS OWN APP, WITH ITS OWN END USERS. The same id on two agents is\n * two different people, with separate accounts, secrets and conversations. A\n * person using two of your agents signs in to each. There is no workspace-wide\n * end user, and no way to erase one, because the same id on another agent may be\n * someone else.\n \n WHY THE NAME IS `EndUser` AND NOT `User`. There are two populations of people\n * in this product, and calling both of them \"user\" was a bug waiting to be\n * written:\n \n \| \| workspace member \| END USER \|\n * \|---\|---\|---\|\n * \| who \| your colleague, on a seat \| the person your application serves \|\n * \| belongs to \| the workspace \| one agent \|\n * \| signs in to this platform \| yes \| NEVER \|\n * \| who issues the id \| we do \| YOUR database \|\n * \| do we authenticate it \| yes \| no, deliberately \|\n * \| in this SDK \| `ws.members()` \| `agent.endUser(id)` \|\n \n They were both spelled `userId`, so `ws.members()` handed you an id that\n * `agent.start()` would accept without complaint and label a conversation with\n * a teammate's internal platform id. It could never have errored, because an\n * end-user id is never checked against anything. The two names now make that\n * call impossible to write by accident.\n \n NOT `Customer`, which was tried and reverted. Two reasons. \"Customer\" already\n * means the party that BUYS this platform, in our own strategy documents and in\n * `subscriptions.stripe_customer_id`, so the word points the other way. And it\n * is wrong for the common case: an enterprise deploying an internal workflow\n * agent serves its own EMPLOYEES, who are not anybody's customers.\n \n WHY THIS OBJECT EXISTS. You are building an application for many people.\n * Ananya has her own Gmail, her own conversations and her own history, and so\n * do the other ten thousand. Every call you make is on behalf of one of them.\n \n Without this, the person is an argument: `endUserId` threaded through\n * `accounts.connect`, `secrets.create`, `conversations` and `start`, and\n * forgotten in exactly one of them one day. With it, you say who once and the\n * rest follows:\n \n ```ts\n * // once, in the agent's setup: each person uses their own Gmail\n * await agent.connections.add(Connection.endUserAccount(App.GMAIL));\n \n const ananya = agent.endUser(row.userId); // no request\n * const { url } = await ananya.accounts.connect({ app: App.GMAIL });\n * showToUser(url); // she signs in ONCE, for this agent\n \n const conversation = await agent.start({ endUserId: ananya.id });\n * await conversation.ask('what did I miss this morning?');\n \n await ananya.conversations(); // everything of hers, with this agent\n * await ananya.erase(); // she left: all of it, on this agent\n * ```\n \n WHAT NAMING AN END USER DOES, exactly. `start({ endUserId })` labels the\n * conversation so it can be listed back to them, and it decides whose account\n * a connection to the end user's account uses: this person's, on this agent, for\n * that app, and nobody else's. The grant is the agent's setup, which you can read;\n * it never falls back to the workspace's account, or to anybody else's.\n \n THE ID IS YOURS. A row id from your database, opaque to us, and we never\n * authenticate it. We are not an identity provider and do not want to be. It\n * also means passing the wrong one hands that person somebody else's mailbox,\n * which is a sharper consequence than the same mistake has for a chat list.\n \n Holding one makes NO request.\n /\nexport class EndUser {\n\treadonly id: string;\n\t/* The agent this person belongs to, as you addressed it. /\n\treadonly agentId: string;\n\treadonly #http: Http;\n\n\tconstructor(http: Http, agentId: string, id: string) {\n\t\tthis.#http = http;\n\t\tthis.agentId = agentId;\n\t\tthis.id = id;\n\t}\n\n\tprivate get base(): string {\n\t\treturn `/v1/agents/${encodeURIComponent(this.agentId)}/end-users/${encodeURIComponent(this.id)}`;\n\t}\n\n\t/\n\t This person's own accounts on this agent: the \"end user's account\" that a\n\t * connection built with `Connection.endUserAccount(app)` uses.\n\t \n\t Connected ONCE, on the app's own page. After that the account is theirs\n\t * on this agent and stays theirs: every conversation of theirs with this agent\n\t * uses it, and nobody is sent through a sign-in again per thread. Nothing is\n\t * attached per conversation.\n\t \n\t An agent never reaches these any other way: not through the workspace's\n\t * own account of the same app, not in another person's conversation, and not\n\t * on another agent. The same id on another agent is another person, who signs\n\t * in there.\n\t /\n\treadonly accounts = {\n\t\t/* Begin connecting one of their accounts. Returns it, still `pending`,\n\t\t * and the url to send them to. It is an ordinary `Account`:\n\t\t * `account.waitUntilConnected()` tells you when they are done, and\n\t\t * `ws.account(id)` reaches it later. `conversation.accountsNeeded()`\n\t\t * hands you the same kind of link for whatever a conversation is still\n\t\t * missing. /\n\t\tconnect: async (input: { app: AppId }): Promise<{ account: Account; url: string }> => {\n\t\t\t// FIELDS PICKED: the agent and the person come from the path, never from the body.\n\t\t\tconst res = await this.#http.post<{ account?: AccountData; url: string }>(`${this.base}/accounts/connect`, {\n\t\t\t\tapp: input.app,\n\t\t\t});\n\t\t\tconst account = accountIn(res, `${this.base}/accounts/connect`);\n\t\t\treturn { account: new Account(this.#http, account.id, account), url: res.url };\n\t\t},\n\n\t\t/* Theirs on this agent alone. The agent creators' accounts are not here:\n\t\t * `ws.accounts.list()` is the view that shows those. /\n\t\tlist: async (): Promise<Account[]> => {\n\t\t\tconst res = await this.#http.get<{ accounts: AccountData[] }>(`${this.base}/accounts`);\n\t\t\treturn (res.accounts ?? []).map((a) => new Account(this.#http, a.id, a));\n\t\t},\n\n\t\t/\n\t\t Disconnect every account they connected on this agent, in one call, so it\n\t\t * is not a loop the caller has to remember to write. Every conversation of\n\t\t * theirs with this agent stops reaching those apps from the next turn, and\n\t\t * nothing is kept. Returns how many were disconnected. To remove everything\n\t\t * about them, use `erase()`.\n\t\t /\n\t\tdisconnectAll: async (): Promise<{ disconnected: number }> => {\n\t\t\tconst res = await this.#http.delete<{ disconnected?: number }>(`${this.base}/accounts`);\n\t\t\treturn { disconnected: res?.disconnected ?? 0 };\n\t\t},\n\t};\n\n\t/\n\t Credentials that belong to THIS PERSON: their API key for a system you\n\t * integrate with, their token for a service only they have an account on.\n\t \n\t THIS WAS ABSENT UNTIL THERE WAS A WAY TO USE IT. A secret reaches a turn\n\t * only by being ATTACHED, and for a long time it could not be, because\n\t * binding one took its VALUE, and you do not hold the value of a secret the\n\t * platform stored for you. So a per-person secret would have been a surface\n\t * that accepted writes, listed them back, and was read by nothing. It was\n\t * left out rather than shipped looking like a feature.\n\t \n\t Secrets are still attached; accounts are not (0.44). A person's account is\n\t * reached through the agent's setup (`Connection.endUserAccount`), so there is\n\t * nothing to attach for it.\n\t \n\t `sessionBindings.secretIds` is what closed it, and attaching is still an\n\t * explicit line:\n\t \n\t ```ts\n\t * const ananya = agent.endUser(row.userId);\n\t * const key = await ananya.secrets.create({ name: 'ZENDESK_TOKEN', value: token });\n\t \n\t const conversation = await agent.start({ endUserId: ananya.id });\n\t * await conversation.attach(key); // EXPLICIT. Nothing is implied.\n\t * ```\n\t \n\t TWO THINGS THE PLATFORM ENFORCES, neither of which you can turn off:\n\t * the agent must DECLARE that secret name at session scope, so attaching by\n\t * id is not a way around the allowlist; and a secret belonging to one end\n\t * user can only be attached to a conversation launched for that same person\n\t * with this same agent, so one mistyped id cannot hand Ananya's key to somebody\n\t * else's turn.\n\t * Both are checked again at every tool call, not only when you attach.\n\t \n\t THE CONVERSATION FOLLOWS THE SECRET. It keeps a pointer, never a copy, so\n\t * when your app gets a new token for this person, `key.update(newToken)`\n\t * reaches every conversation it is attached to on the next call, and\n\t * `key.delete()` stops them all at once.\n\t /\n\treadonly secrets = {\n\t\t/* Store a credential for this person. The value is encrypted on arrival\n\t\t * and never handed back, which is why attaching uses the id. /\n\t\tcreate: async (input: {\n\t\t\tname: string;\n\t\t\tvalue: string;\n\t\t\tdescription?: string;\n\t\t\t/* The only hosts a tool may send it to, checked at every call of a\n\t\t\t * conversation it is attached to. Left out, it goes only to the host\n\t\t\t * the agent's tool writes out in full. /\n\t\t\tallowedHosts?: string[];\n\t\t}): Promise<Secret> => {\n\t\t\t// FIELDS PICKED, never the input object forwarded. Removing a field\n\t\t\t// from a type does not stop a JavaScript caller sending it, and\n\t\t\t// forwarding wholesale is how `endUserId` kept reaching the API after\n\t\t\t// it had supposedly been removed.\n\t\t\tconst res = await this.#http.post<{ secret?: SecretMeta } & SecretMeta>('/v1/secrets', {\n\t\t\t\tname: input.name,\n\t\t\t\tvalue: input.value,\n\t\t\t\tendUserId: this.id,\n\t\t\t\tagentId: this.agentId,\n\t\t\t\t...(input.description !== undefined && { description: input.description }),\n\t\t\t\t...(input.allowedHosts !== undefined && { allowedHosts: input.allowedHosts }),\n\t\t\t});\n\t\t\tconst meta = res.secret ?? res;\n\t\t\treturn new Secret(this.#http, meta.id, meta);\n\t\t},\n\t\t/* This person's secrets on this agent, values excluded. The workspace's own\n\t\t * are not in here: `ws.secrets.list()` answers that. /\n\t\tlist: async (): Promise<Secret[]> => {\n\t\t\tconst res = await this.#http.get<{ secrets: SecretMeta[] }>('/v1/secrets', {\n\t\t\t\tend_user_id: this.id,\n\t\t\t\tagentId: this.agentId,\n\t\t\t});\n\t\t\treturn (res.secrets ?? []).map((m) => new Secret(this.#http, m.id, m));\n\t\t},\n\t};\n\n\t/\n\t Everything this person has said to this agent, newest first. Pass `before`\n\t * from the previous page to keep going, rather than being capped at 200.\n\t /\n\tasync conversations(options: { limit?: number; before?: string } = {}): Promise<Conversation[]> {\n\t\tconst res = await this.#http.get<{ conversations: AgentConversationData[] }>('/v1/conversations', {\n\t\t\tagentId: this.agentId,\n\t\t\tend_user_id: this.id,\n\t\t\t...(options.limit !== undefined && { limit: options.limit }),\n\t\t\t...(options.before && { before: options.before }),\n\t\t});\n\t\treturn (res.conversations ?? []).map((c) => new Conversation(this.#http, c.id, c));\n\t}\n\n\t/\n\t Delete everything about them on this agent, in one call: their accounts\n\t * (signed out at the app first), their secrets, their conversations, and the\n\t * wakeups those conversations set. What off-boarding and an erasure request call.\n\t \n\t This agent only. The same id on another agent may be someone else, so there\n\t * is no workspace-wide erase: if one person uses two of your agents, erase them\n\t * from each. A schedule you configured on the agent to name them stays, because\n\t * it is your setup. A project's conversations belong to the project and are\n\t * deleted by id.\n\t \n\t Safe to call again. An account that cannot be signed out fails the call with\n\t * the rest still in place, so a credential is never orphaned. A turn still running\n\t * when this lands can write after it, and a second call clears what it left.\n\t * Returns how many of each went.\n\t */\n\tasync erase(): Promise<{ accounts: number; secrets: number; conversations: number }> {\n\t\tconst total = { accounts: 0, secrets: 0, conversations: 0 };\n\t\tlet more = true;\n\t\twhile (more) {\n\t\t\tconst res = await this.#http.delete<{ accounts?: number; secrets?: number; conversations?: number; more?: boolean }>(this.base);\n\t\t\ttotal.accounts += res?.accounts ?? 0;\n\t\t\ttotal.secrets += res?.secrets ?? 0;\n\t\t\ttotal.conversations += res?.conversations ?? 0;\n\t\t\tmore = res?.more === true;\n\t\t}\n\t\treturn total;\n\t}\n}\n"]}

package/index.d.ts CHANGED Viewed

@@ -17,5 +17,5 @@ export { loadAgentDir } from './load-agent-dir.ts';
 export { loadManagerTemplate } from './templates.ts';
 export type { Turn } from './turn.ts';
 export type { ClientOptions } from './http.ts';
-export type { AppTool, AccountData, AccountNeeded, AccountStatus, AgentConnection, AgentConversationData, AgentData, AgentDraft, AgentFields, AgentStatus, WebsiteChatAppearance, Attachment, Bindings, ConnectionStatus, Credits, Guardrails, DatabaseColumn, DatabaseData, DatabaseEngine, DatabaseFields, DatabaseLogin, DatabaseTable, DatabaseTestResult, DatabaseTls, DatabaseUsedBy, FileEntry, Filesystem, Grade, HttpTool, HttpToolParam, McpServer, ProjectAgent, Message, Parameter, ProjectConversationData, ProjectData, ProjectFields, Requirement, Scope, SeatPlan, SecretMeta, SecretRequirement, Step, Trigger, WebhookDelivery, WebhookVerify, TriggerTarget, TurnEvent, Widget, WidgetPart, UsedBy, WebsiteChat, WebsiteChatAccess, Workflow, WorkspaceInfo, WorkspaceMember, } from './types.ts';
+export type { AppTool, AccountData, AccountNeeded, AccountStatus, AgentConnection, AgentConversationData, AgentData, AgentDraft, AgentFields, AgentStatus, WebsiteChatAppearance, Attachment, Bindings, ConnectionStatus, Credits, Guardrails, DatabaseColumn, DatabaseData, DatabaseEngine, DatabaseFields, DatabaseLogin, DatabaseTable, DatabaseTestResult, DatabaseTls, DatabaseUsedBy, FileEntry, Filesystem, Grade, HttpTool, HttpToolParam, McpServer, ProjectAgent, Message, SentAttachment, Parameter, ProjectConversationData, ProjectData, ProjectFields, Requirement, Scope, SeatPlan, SecretMeta, SecretRequirement, Step, Trigger, WebhookDelivery, WebhookVerify, TriggerTarget, TurnEvent, Widget, WidgetPart, UsedBy, WebsiteChat, WebsiteChatAccess, Workflow, WorkspaceInfo, WorkspaceMember, } from './types.ts';
 export { placeWidgets, type ReplyPiece } from './widgets.ts';

package/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,6DAA6D;AAC7D,EAAE;AACF,yCAAyC;AACzC,2CAA2C;AAC3C,8BAA8B;AAC9B,8EAA8E;AAC9E,QAAQ;AACR,uEAAuE;AACvE,2EAA2E;AAC3E,EAAE;AACF,yDAAyD;AAEzD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAgE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,KAAK,EAAqB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,2EAA2E;AAC3E,iFAAiF;AACjF,OAAO,EACN,UAAU,GAGV,MAAM,iBAAiB,CAAC;AACzB,6EAA6E;AAC7E,wEAAwE;AACxE,OAAO,EAAE,GAAG,EAAc,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAA4D,MAAM,mBAAmB,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAA4B,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC9D,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EACN,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,EACX,QAAQ,EACR,YAAY,GASZ,MAAM,mBAAmB,CAAC;AAC3B,4EAA4E;AAC5E,kEAAkE;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,+EAA+E;AAC/E,6EAA6E;AAC7E,2BAA2B;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;~~AA6DrD~~,OAAO,EAAE,YAAY,EAAmB,MAAM,cAAc,CAAC","sourcesContent":["// @cerebro-labs/agentnava-sdk\n//\n// Configure an agent, start a conversation, work with it.\n//\n// import { AgentNava } from '@cerebro-labs/agentnava-sdk';\n//\n// const ws = AgentNava.getWorkspace();\n// const agent = await ws.agents.create({\n// name: 'Refund checker',\n// instructions: 'Decide whether a late delivery qualifies for a refund.',\n// });\n// const conversation = await agent.start({ endUserId: 'u_ananya' });\n// console.log(await conversation.ask('Order 4471 was nine days late.'));\n//\n// The reference this implements is design/sdk-design.md.\n\nexport { AgentNava, Workspace } from './workspace.ts';\nexport { PartnerApp, type PartnerAppOptions, type ExchangedCode, type CreditGrant } from './partner-app.ts';\nexport { Agent, type StartOptions } from './agent.ts';\nexport { Account } from './account.ts';\n// Builds one entry of an agent's setup: an app, and whose account. NOT the\n// 0.43 `Connection`, which was a handle on a signed-in account and is `Account`.\nexport {\n\tConnection,\n\ttype CreatorAccountConnection,\n\ttype EndUserAccountConnection,\n} from './connection.ts';\n// Every app the platform can connect, as constants: `App.GMAIL === 'gmail'`.\n// Generated from the connections catalog; any plain string still works.\nexport { App, type AppId } from './apps.generated.ts';\nexport { Secret } from './secret.ts';\nexport { EndUser } from './end-user.ts';\nexport { Conversation, type AskOptions, type AttachOptions, type FileUrlOptions } from './conversation.ts';\nexport { KnowledgeBase } from './knowledge-base.ts';\nexport { Database } from './database.ts';\nexport { Project, type ProjectStartOptions } from './project.ts';\nexport { AgentNavaError, SecretHostNotAllowed } from './errors.ts';\nexport { loadWorkflows, parseWorkflow } from './workflows.ts';\n// Draft an agent's tools from whatever a company already has: an OpenAPI\n// document, a Postman collection, or a working curl command. Runs entirely on\n// your machine: nothing about the source is sent to AgentNava, which matters\n// because those files routinely contain a live credential.\nexport {\n\timportTools,\n\tfromOpenApi,\n\tfromOpenApiUrl,\n\tfromPostman,\n\tfromCurl,\n\ttoolNameFrom,\n\ttype ImportSource,\n\ttype ImportOptions,\n\ttype ImportedTools,\n\ttype ImportedSecret,\n\ttype ImportWarning,\n\ttype ImportWarningKind,\n\ttype OpenApiDocument,\n\ttype PostmanCollection,\n} from './import-tools.ts';\n// Reads a whole Claude-Code-shaped agent directory (AGENT.md + workflows/ +\n// mcp-servers.json ...) into the fields ws.agents.create() takes.\nexport { loadAgentDir } from './load-agent-dir.ts';\n// The platform's built-in project-manager configuration. apps/api imports this\n// through the './templates' subpath; re-exported here so the package has one\n// surface rather than two.\nexport { loadManagerTemplate } from './templates.ts';\nexport type { Turn } from './turn.ts';\nexport type { ClientOptions } from './http.ts';\nexport type {\n\tAppTool,\n\tAccountData,\n\tAccountNeeded,\n\tAccountStatus,\n\tAgentConnection,\n\tAgentConversationData,\n\tAgentData,\n\tAgentDraft,\n\tAgentFields,\n\tAgentStatus,\n\tWebsiteChatAppearance,\n\tAttachment,\n\tBindings,\n\tConnectionStatus,\n\tCredits,\n\tGuardrails,\n\tDatabaseColumn,\n\tDatabaseData,\n\tDatabaseEngine,\n\tDatabaseFields,\n\tDatabaseLogin,\n\tDatabaseTable,\n\tDatabaseTestResult,\n\tDatabaseTls,\n\tDatabaseUsedBy,\n\tFileEntry,\n\tFilesystem,\n\tGrade,\n\tHttpTool,\n\tHttpToolParam,\n\tMcpServer,\n\tProjectAgent,\n\tMessage,\n\tParameter,\n\tProjectConversationData,\n\tProjectData,\n\tProjectFields,\n\tRequirement,\n\tScope,\n\tSeatPlan,\n\tSecretMeta,\n\tSecretRequirement,\n\tStep,\n\tTrigger,\n\tWebhookDelivery,\n\tWebhookVerify,\n\tTriggerTarget,\n\tTurnEvent,\n\tWidget,\n\tWidgetPart,\n\tUsedBy,\n\tWebsiteChat,\n\tWebsiteChatAccess,\n\tWorkflow,\n\tWorkspaceInfo,\n\tWorkspaceMember,\n} from './types.ts';\nexport { placeWidgets, type ReplyPiece } from './widgets.ts';\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,6DAA6D;AAC7D,EAAE;AACF,yCAAyC;AACzC,2CAA2C;AAC3C,8BAA8B;AAC9B,8EAA8E;AAC9E,QAAQ;AACR,uEAAuE;AACvE,2EAA2E;AAC3E,EAAE;AACF,yDAAyD;AAEzD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAgE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,KAAK,EAAqB,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,2EAA2E;AAC3E,iFAAiF;AACjF,OAAO,EACN,UAAU,GAGV,MAAM,iBAAiB,CAAC;AACzB,6EAA6E;AAC7E,wEAAwE;AACxE,OAAO,EAAE,GAAG,EAAc,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAA4D,MAAM,mBAAmB,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAA4B,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC9D,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EACN,WAAW,EACX,WAAW,EACX,cAAc,EACd,WAAW,EACX,QAAQ,EACR,YAAY,GASZ,MAAM,mBAAmB,CAAC;AAC3B,4EAA4E;AAC5E,kEAAkE;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,+EAA+E;AAC/E,6EAA6E;AAC7E,2BAA2B;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AA8DrD,OAAO,EAAE,YAAY,EAAmB,MAAM,cAAc,CAAC","sourcesContent":["// @cerebro-labs/agentnava-sdk\n//\n// Configure an agent, start a conversation, work with it.\n//\n// import { AgentNava } from '@cerebro-labs/agentnava-sdk';\n//\n// const ws = AgentNava.getWorkspace();\n// const agent = await ws.agents.create({\n// name: 'Refund checker',\n// instructions: 'Decide whether a late delivery qualifies for a refund.',\n// });\n// const conversation = await agent.start({ endUserId: 'u_ananya' });\n// console.log(await conversation.ask('Order 4471 was nine days late.'));\n//\n// The reference this implements is design/sdk-design.md.\n\nexport { AgentNava, Workspace } from './workspace.ts';\nexport { PartnerApp, type PartnerAppOptions, type ExchangedCode, type CreditGrant } from './partner-app.ts';\nexport { Agent, type StartOptions } from './agent.ts';\nexport { Account } from './account.ts';\n// Builds one entry of an agent's setup: an app, and whose account. NOT the\n// 0.43 `Connection`, which was a handle on a signed-in account and is `Account`.\nexport {\n\tConnection,\n\ttype CreatorAccountConnection,\n\ttype EndUserAccountConnection,\n} from './connection.ts';\n// Every app the platform can connect, as constants: `App.GMAIL === 'gmail'`.\n// Generated from the connections catalog; any plain string still works.\nexport { App, type AppId } from './apps.generated.ts';\nexport { Secret } from './secret.ts';\nexport { EndUser } from './end-user.ts';\nexport { Conversation, type AskOptions, type AttachOptions, type FileUrlOptions } from './conversation.ts';\nexport { KnowledgeBase } from './knowledge-base.ts';\nexport { Database } from './database.ts';\nexport { Project, type ProjectStartOptions } from './project.ts';\nexport { AgentNavaError, SecretHostNotAllowed } from './errors.ts';\nexport { loadWorkflows, parseWorkflow } from './workflows.ts';\n// Draft an agent's tools from whatever a company already has: an OpenAPI\n// document, a Postman collection, or a working curl command. Runs entirely on\n// your machine: nothing about the source is sent to AgentNava, which matters\n// because those files routinely contain a live credential.\nexport {\n\timportTools,\n\tfromOpenApi,\n\tfromOpenApiUrl,\n\tfromPostman,\n\tfromCurl,\n\ttoolNameFrom,\n\ttype ImportSource,\n\ttype ImportOptions,\n\ttype ImportedTools,\n\ttype ImportedSecret,\n\ttype ImportWarning,\n\ttype ImportWarningKind,\n\ttype OpenApiDocument,\n\ttype PostmanCollection,\n} from './import-tools.ts';\n// Reads a whole Claude-Code-shaped agent directory (AGENT.md + workflows/ +\n// mcp-servers.json ...) into the fields ws.agents.create() takes.\nexport { loadAgentDir } from './load-agent-dir.ts';\n// The platform's built-in project-manager configuration. apps/api imports this\n// through the './templates' subpath; re-exported here so the package has one\n// surface rather than two.\nexport { loadManagerTemplate } from './templates.ts';\nexport type { Turn } from './turn.ts';\nexport type { ClientOptions } from './http.ts';\nexport type {\n\tAppTool,\n\tAccountData,\n\tAccountNeeded,\n\tAccountStatus,\n\tAgentConnection,\n\tAgentConversationData,\n\tAgentData,\n\tAgentDraft,\n\tAgentFields,\n\tAgentStatus,\n\tWebsiteChatAppearance,\n\tAttachment,\n\tBindings,\n\tConnectionStatus,\n\tCredits,\n\tGuardrails,\n\tDatabaseColumn,\n\tDatabaseData,\n\tDatabaseEngine,\n\tDatabaseFields,\n\tDatabaseLogin,\n\tDatabaseTable,\n\tDatabaseTestResult,\n\tDatabaseTls,\n\tDatabaseUsedBy,\n\tFileEntry,\n\tFilesystem,\n\tGrade,\n\tHttpTool,\n\tHttpToolParam,\n\tMcpServer,\n\tProjectAgent,\n\tMessage,\n\tSentAttachment,\n\tParameter,\n\tProjectConversationData,\n\tProjectData,\n\tProjectFields,\n\tRequirement,\n\tScope,\n\tSeatPlan,\n\tSecretMeta,\n\tSecretRequirement,\n\tStep,\n\tTrigger,\n\tWebhookDelivery,\n\tWebhookVerify,\n\tTriggerTarget,\n\tTurnEvent,\n\tWidget,\n\tWidgetPart,\n\tUsedBy,\n\tWebsiteChat,\n\tWebsiteChatAccess,\n\tWorkflow,\n\tWorkspaceInfo,\n\tWorkspaceMember,\n} from './types.ts';\nexport { placeWidgets, type ReplyPiece } from './widgets.ts';\n"]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@cerebro-labs/agentnava-sdk",
-  "version": "0.75.1",
+  "version": "0.79.0",
   "description": "The AgentNava SDK. Configure an agent, start a conversation, and work with it.",
   "license": "Apache-2.0",
   "repository": {

package/react.d.ts CHANGED Viewed

@@ -34,7 +34,9 @@ export interface ReplyViewProps extends Omit<WidgetViewProps, 'widget' | 'classN
     renderText?: (text: string) => ReactNode;
     className?: string;
 }
-/** One widget, drawn from its root part. Draws nothing when there is no root yet. */
+/** One widget, drawn from its root part. Draws nothing when there is no root
+ *  yet, or nothing in it to draw: a container that lists none of its parts
+ *  drew an empty frame (Complexity, 2026-11-02, a root Column with no children). */
 export declare function WidgetView(props: WidgetViewProps): import("react/jsx-runtime").JSX.Element | null;
 /** A whole reply: its words, with each widget drawn where it sits. */
 export declare function ReplyView({ text, widgets, renderText, className, ...widgetProps }: ReplyViewProps): import("react/jsx-runtime").JSX.Element;

package/react.js CHANGED Viewed

@@ -275,7 +275,23 @@ function draw(id, ctx) {
     const own = ctx.props.parts?.[part.component];
     return own ? own({ part, children: kids, onAsk: ctx.props.onAsk }) : defaultPart(part, kids, ctx);
 }
-/** One widget, drawn from its root part. Draws nothing when there is no root yet. */
+/** Whether a part draws anything: a part that is not a container does; a
+ *  container only through a child that does (a Card through its picture too).
+ *  A part listed twice, or a loop, counts once. */
+function drawsSomething(id, byId, seen = new Set()) {
+    const part = byId.get(id);
+    if (!part || seen.has(id))
+        return false;
+    seen.add(id);
+    if (!CONTAINERS.has(part.component))
+        return true;
+    if (part.component === 'Card' && part.image)
+        return true;
+    return list(part.children).some((k) => typeof k === 'string' && drawsSomething(k, byId, seen));
+}
+/** One widget, drawn from its root part. Draws nothing when there is no root
+ *  yet, or nothing in it to draw: a container that lists none of its parts
+ *  drew an empty frame (Complexity, 2026-11-02, a root Column with no children). */
 export function WidgetView(props) {
     const { widget, currency = 'USD', locale, allowUrl } = props;
     const byId = new Map();
@@ -283,7 +299,7 @@ export function WidgetView(props) {
         if (p && typeof p === 'object' && typeof p.id === 'string' && typeof p.component === 'string' && !byId.has(p.id))
             byId.set(p.id, p);
     }
-    if (!byId.has('root'))
+    if (!drawsSomething('root', byId))
         return null;
     let moneyFormat;
     try {