@classic-homes/agent-chat 0.1.0 → 0.1.2

package/dist/components/AgentChat.svelte

@@ -6,6 +6,7 @@
     DocumentContext,
     FileRef,
   } from '@classic-homes/agent-contracts';
+  import type { BackendMode } from '@classic-homes/agent-contracts';
   import { ChatSession } from '../session.svelte.js';
   import ArtifactPanel from './ArtifactPanel.svelte';
   import Composer from './Composer.svelte';
@@ -17,6 +18,8 @@
     /** Sandbox origin for artifacts and MCP-UI (agent-api `/frame`). */
     sandboxOrigin: string;
     conversationId?: string | null;
+    /** Backend mode from `/api/me`; shows the mock banner before any turn runs. */
+    mode?: BackendMode;
     agent?: AgentKey;
     clientKind?: ClientKind;
     variant?: 'page' | 'panel';
@@ -36,6 +39,7 @@
     client,
     sandboxOrigin,
     conversationId = null,
+    mode,
     agent = 'classic-agent',
     clientKind,
     variant = 'page',
@@ -54,16 +58,26 @@
   const session = new ChatSession({
     client,
     conversationId,
+    mode,
     agent,
     clientKind,
     getContext,
     onConversationStarted: (id) => onconversationstarted?.(id),
     onToolResult: (name, status) => ontoolresult?.(name, status),
   });
+  // The constructor already knows `conversationId`; what decides a fetch is whether the
+  // transcript for it has been loaded (or started) in this session.
   $effect(() => {
-    if (conversationId && conversationId !== session.conversationId)
+    if (
+      conversationId &&
+      conversationId !== session.loadedConversationId &&
+      session.status !== 'loading'
+    )
       void session.load(conversationId);
   });
+  $effect(() => {
+    if (mode && !session.mode) session.mode = mode;
+  });
 
   let composer: Composer | undefined = $state();
   let draft = $state('');

package/dist/components/AgentChat.svelte.d.ts

@@ -1,10 +1,13 @@
 import type { AgentApiClient } from '@classic-homes/agent-client';
 import type { AgentKey, ClientKind, DocumentContext } from '@classic-homes/agent-contracts';
+import type { BackendMode } from '@classic-homes/agent-contracts';
 interface Props {
     client: AgentApiClient;
     /** Sandbox origin for artifacts and MCP-UI (agent-api `/frame`). */
     sandboxOrigin: string;
     conversationId?: string | null;
+    /** Backend mode from `/api/me`; shows the mock banner before any turn runs. */
+    mode?: BackendMode;
     agent?: AgentKey;
     clientKind?: ClientKind;
     variant?: 'page' | 'panel';

package/dist/components/AgentChat.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentChat.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/AgentChat.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EACR,QAAQ,EACR,UAAU,EACV,eAAe,EAEhB,MAAM,gCAAgC,CAAC;AAQxC,UAAU,KAAK;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACtD,qBAAqB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,iGAAiG;IACjG,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,QAAQ,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,QAAQ,EAAE,OAAO,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAmGH,QAAA,MAAM,SAAS,2CAAwC,CAAC;AACxD,KAAK,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;AAC9C,eAAe,SAAS,CAAC"}
+{"version":3,"file":"AgentChat.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/AgentChat.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EACR,QAAQ,EACR,UAAU,EACV,eAAe,EAEhB,MAAM,gCAAgC,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAQhE,UAAU,KAAK;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACtD,qBAAqB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,iGAAiG;IACjG,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,QAAQ,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,QAAQ,EAAE,OAAO,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA+GH,QAAA,MAAM,SAAS,2CAAwC,CAAC;AACxD,KAAK,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;AAC9C,eAAe,SAAS,CAAC"}

package/dist/components/UiFrame.svelte

@@ -2,6 +2,7 @@
   import { onMount } from 'svelte';
   import type { UiResourceState } from '../reducer.js';
   import {
+    FRAME_TARGET_ORIGIN,
     MIN_FRAME_HEIGHT,
     UI_FRAME_RENDER,
     composerTextFor,
@@ -27,7 +28,7 @@
   function send(): void {
     frame?.contentWindow?.postMessage(
       { type: UI_FRAME_RENDER, html: resource.html, uri: resource.uri },
-      sandboxOrigin,
+      FRAME_TARGET_ORIGIN,
     );
   }
 

package/dist/components/UiFrame.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UiFrame.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/UiFrame.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAWnD,UAAU,KAAK;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA8DH,QAAA,MAAM,OAAO,2CAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}
+{"version":3,"file":"UiFrame.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/UiFrame.svelte.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYnD,UAAU,KAAK;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,gGAAgG;IAChG,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACtE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AA8DH,QAAA,MAAM,OAAO,2CAAwC,CAAC;AACtD,KAAK,OAAO,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;AAC1C,eAAe,OAAO,CAAC"}

package/dist/session.svelte.d.ts

@@ -1,9 +1,11 @@
 import type { AgentApiClient } from '@classic-homes/agent-client';
-import type { AgentKey, ChatEvent, ClientKind, DocumentContext, FileRef } from '@classic-homes/agent-contracts';
+import type { AgentKey, BackendMode, ChatEvent, ClientKind, DocumentContext, FileRef } from '@classic-homes/agent-contracts';
 import { type AssistantMessage, type ChatMessage } from './reducer.js';
 export interface ChatSessionOptions {
     client: AgentApiClient;
     conversationId?: string | null;
+    /** Backend mode known before the first turn (from `/api/me`), so the mock banner shows at once. */
+    mode?: BackendMode;
     agent?: AgentKey;
     clientKind?: ClientKind;
     /** Context attached to each turn when the host's toggle is on. */
@@ -21,6 +23,8 @@ export declare class ChatSession {
     messages: ChatMessage[];
     status: SessionStatus;
     conversationId: string | null;
+    /** The conversation whose transcript `messages` holds (loaded or started here); null before. */
+    loadedConversationId: string | null;
     mode: "mock" | "live" | undefined;
     loadError: string | undefined;
     pendingFiles: {

package/dist/session.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.svelte.d.ts","sourceRoot":"","sources":["../src/lib/session.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EACV,QAAQ,EAER,SAAS,EAET,UAAU,EACV,eAAe,EACf,OAAO,EACR,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACtD,qBAAqB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D;;;GAGG;AACH,qBAAa,WAAW;IACtB,QAAQ,gBAA6B;IACrC,MAAM,gBAAiC;IACvC,cAAc,gBAA+B;IAC7C,IAAI,8BAA8C;IAClD,SAAS,qBAAyC;IAClD,YAAY;;;;;;QAAyB;IAErC,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEjC,OAAO,EAAE,kBAAkB;IAKvC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,OAAO,IAAI,gBAAgB,GAAG,SAAS,CAG1C;IAED,yFAAyF;IACnF,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8B3C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B5E,+FAA+F;IACzF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa9C,MAAM,IAAI,IAAI;YAOA,GAAG;IAkDjB,OAAO,CAAC,QAAQ;IAOhB,OAAO,CAAC,MAAM;CAKf;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}
+{"version":3,"file":"session.svelte.d.ts","sourceRoot":"","sources":["../src/lib/session.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EAET,UAAU,EACV,eAAe,EACf,OAAO,EACR,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mGAAmG;IACnG,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;IACtD,qBAAqB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D;;;GAGG;AACH,qBAAa,WAAW;IACtB,QAAQ,gBAA6B;IACrC,MAAM,gBAAiC;IACvC,cAAc,gBAA+B;IAC7C,gGAAgG;IAChG,oBAAoB,gBAA+B;IACnD,IAAI,8BAA8C;IAClD,SAAS,qBAAyC;IAClD,YAAY;;;;;;QAAyB;IAErC,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAEjC,OAAO,EAAE,kBAAkB;IAMvC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,IAAI,OAAO,IAAI,gBAAgB,GAAG,SAAS,CAG1C;IAED,yFAAyF;IACnF,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+B3C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B5E,+FAA+F;IACzF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa9C,MAAM,IAAI,IAAI;YAOA,GAAG;IAmDjB,OAAO,CAAC,QAAQ;IAOhB,OAAO,CAAC,MAAM;CAKf;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}

package/dist/session.svelte.js

@@ -8,6 +8,8 @@ export class ChatSession {
     messages = $state([]);
     status = $state('idle');
     conversationId = $state(null);
+    /** The conversation whose transcript `messages` holds (loaded or started here); null before. */
+    loadedConversationId = $state(null);
     mode = $state(undefined);
     loadError = $state(undefined);
     pendingFiles = $state([]);
@@ -16,6 +18,7 @@ export class ChatSession {
     constructor(options) {
         this.options = options;
         this.conversationId = options.conversationId ?? null;
+        this.mode = options.mode;
     }
     get streaming() {
         return this.status === 'streaming';
@@ -31,6 +34,7 @@ export class ChatSession {
         try {
             const detail = await this.options.client.getConversation(conversationId);
             this.conversationId = conversationId;
+            this.loadedConversationId = conversationId;
             this.messages = detail.messages.map((m) => m.role === 'user'
                 ? {
                     id: m.id,
@@ -106,6 +110,7 @@ export class ChatSession {
                 this.mode = event.mode;
                 if (this.conversationId !== event.conversationId) {
                     this.conversationId = event.conversationId;
+                    this.loadedConversationId = event.conversationId;
                     this.options.onConversationStarted?.(event.conversationId);
                 }
             }

package/dist/ui-frame-protocol.d.ts

@@ -33,8 +33,20 @@ export declare const MIN_FRAME_HEIGHT = 120;
 export declare const MAX_FRAME_HEIGHT = 1200;
 /** Parse a message from the sandbox into a FrameAction, or null when it is not one. */
 export declare function parseFrameMessage(data: unknown): FrameAction | null;
-/** True when a message event came from our sandbox frame and nowhere else. */
+/**
+ * True when a message event came from our sandbox frame and nowhere else. The frame runs with
+ * `sandbox` and no `allow-same-origin`, so its origin is opaque and the browser reports it as
+ * the string "null"; the window identity is the check that matters. The page's own origin is
+ * accepted too for a frame that is not sandboxed (tests, future same-origin hosting).
+ */
 export declare function isFromFrame(event: MessageEvent, frame: HTMLIFrameElement | null, sandboxOrigin: string): boolean;
+/**
+ * Target origin for messages to the sandbox frame. An opaque origin matches nothing but "*",
+ * so a message addressed to the sandbox's https origin would be dropped silently. The window
+ * reference itself (`frame.contentWindow`) is what scopes the message; the HTML it carries is
+ * model output that is untrusted anyway.
+ */
+export declare const FRAME_TARGET_ORIGIN = "*";
 /** Text an intent or prompt action becomes in the composer. */
 export declare function composerTextFor(action: Extract<FrameAction, {
     type: 'prompt' | 'intent';

package/dist/ui-frame-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-frame-protocol.d.ts","sourceRoot":"","sources":["../src/lib/ui-frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAC1D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CA0CnE;AAQD,8EAA8E;AAC9E,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAC/B,aAAa,EAAE,MAAM,GACpB,OAAO,CAET;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC,GAC1D,MAAM,CAIR"}
+{"version":3,"file":"ui-frame-protocol.d.ts","sourceRoot":"","sources":["../src/lib/ui-frame-protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,cAAc,8BAA8B,CAAC;AAC1D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CA0CnE;AAQD;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAC/B,aAAa,EAAE,MAAM,GACpB,OAAO,CAGT;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,+DAA+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAAC,GAC1D,MAAM,CAIR"}

package/dist/ui-frame-protocol.js

@@ -60,10 +60,24 @@ function asRecord(value) {
         ? value
         : undefined;
 }
-/** True when a message event came from our sandbox frame and nowhere else. */
+/**
+ * True when a message event came from our sandbox frame and nowhere else. The frame runs with
+ * `sandbox` and no `allow-same-origin`, so its origin is opaque and the browser reports it as
+ * the string "null"; the window identity is the check that matters. The page's own origin is
+ * accepted too for a frame that is not sandboxed (tests, future same-origin hosting).
+ */
 export function isFromFrame(event, frame, sandboxOrigin) {
-    return !!frame && event.source === frame.contentWindow && event.origin === sandboxOrigin;
+    if (!frame || !frame.contentWindow || event.source !== frame.contentWindow)
+        return false;
+    return event.origin === 'null' || event.origin === sandboxOrigin;
 }
+/**
+ * Target origin for messages to the sandbox frame. An opaque origin matches nothing but "*",
+ * so a message addressed to the sandbox's https origin would be dropped silently. The window
+ * reference itself (`frame.contentWindow`) is what scopes the message; the HTML it carries is
+ * model output that is untrusted anyway.
+ */
+export const FRAME_TARGET_ORIGIN = '*';
 /** Text an intent or prompt action becomes in the composer. */
 export function composerTextFor(action) {
     if (action.type === 'prompt')

package/dist/ui-frame-protocol.test.js

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest';
-import { composerTextFor, parseFrameMessage } from './ui-frame-protocol.js';
+import { composerTextFor, isFromFrame, parseFrameMessage } from './ui-frame-protocol.js';
 describe('parseFrameMessage', () => {
     it('accepts the MCP-UI action set and clamps sizes', () => {
         expect(parseFrameMessage({ type: 'ui-lifecycle-iframe-ready' })).toEqual({ type: 'ready' });
@@ -32,3 +32,17 @@ describe('parseFrameMessage', () => {
         expect(parseFrameMessage({ type: 'eval', payload: {} })).toBeNull();
     });
 });
+describe('isFromFrame', () => {
+    const win = {};
+    const frame = { contentWindow: win };
+    const event = (source, origin) => ({ source, origin });
+    it('accepts the sandbox window with an opaque ("null") or the sandbox origin', () => {
+        expect(isFromFrame(event(win, 'null'), frame, 'https://sandbox.example')).toBe(true);
+        expect(isFromFrame(event(win, 'https://sandbox.example'), frame, 'https://sandbox.example')).toBe(true);
+    });
+    it('rejects other windows, other origins and a missing frame', () => {
+        expect(isFromFrame(event({}, 'null'), frame, 'https://sandbox.example')).toBe(false);
+        expect(isFromFrame(event(win, 'https://evil.example'), frame, 'https://sandbox.example')).toBe(false);
+        expect(isFromFrame(event(win, 'null'), null, 'https://sandbox.example')).toBe(false);
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@classic-homes/agent-chat",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "private": false,
   "type": "module",
   "description": "Svelte 5 chat UI for Classic Agent: session state, message list, composer, tool timeline, artifacts and MCP-UI sandbox frames. Consumed by the Classic App.",
@@ -17,8 +17,8 @@
     "dist"
   ],
   "dependencies": {
-    "@classic-homes/agent-client": "0.1.0",
-    "@classic-homes/agent-contracts": "0.1.0",
+    "@classic-homes/agent-client": "0.1.2",
+    "@classic-homes/agent-contracts": "0.1.2",
     "dompurify": "3.4.17"
   },
   "peerDependencies": {