@convai/web-sdk 1.8.0-beta.8 → 1.8.0

package/dist/core/rosterRequest.js

@@ -1,210 +0,0 @@
-import { isCharacterUuid } from "./characterReference.js";
-/**
- * Validation and request-body construction for multi-character rooms.
- *
- * Pure: no transport, no client state. Every rule below runs before a request
- * is built, so an illegal topology costs nothing and reports the rule it broke
- * rather than a 422 from the runtime.
- */
-/**
- * Server-wide roster cap. Checked client-side only to fail fast with a clear
- * message — the server stays authoritative, and a plan may configure a lower
- * `max_characters` that surfaces as 403 `MULTI_CHARACTER_ROSTER_LIMIT_EXCEEDED`.
- * This is an operational limit, not a protocol maximum, so it must not leak
- * into any public type.
- */
-export const MULTI_CHARACTER_MAX_CHARACTERS = 50;
-/** `shared_session_key` and `connect_attempt_id` share one charset. */
-const KEY_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
-/** True when this config asks for a multi-character room. */
-export function isRosterConfig(config) {
-    return Array.isArray(config.characters) && config.characters.length > 0;
-}
-function assertKey(value, field) {
-    if (value === undefined)
-        return;
-    if (!KEY_PATTERN.test(value)) {
-        throw new Error(`${field} must be 1-128 characters of letters, digits, hyphen or underscore`);
-    }
-}
-function nonblank(value) {
-    return typeof value === "string" && value.trim().length > 0;
-}
-/**
- * Validate a roster create config.
- *
- * Throws on the first broken rule. Ordered so the most structural problems
- * (which topology did you mean?) report before the detail ones.
- */
-export function validateRosterConfig(config) {
-    const characters = config.characters ?? [];
-    if (config.characterId) {
-        throw new Error("Pass either characterId or characters, not both");
-    }
-    if (characters.length === 0) {
-        throw new Error("characters must contain at least one entry");
-    }
-    if (characters.length > MULTI_CHARACTER_MAX_CHARACTERS) {
-        throw new Error(`characters accepts at most ${MULTI_CHARACTER_MAX_CHARACTERS} entries; ` +
-            `your plan may allow fewer`);
-    }
-    const seenSessions = new Set();
-    characters.forEach((spec, index) => {
-        if (!spec || !nonblank(spec.characterId)) {
-            throw new Error(`characters[${index}] requires a characterId`);
-        }
-        // A roster entry is typed as a bare UUID on the runtime. The version
-        // selectors that single-character `characterId` has accepted since
-        // 1.8.0-beta.5 are a 422 here, and the failure would otherwise only show
-        // up as an opaque validation error from the server.
-        if (!isCharacterUuid(spec.characterId.trim())) {
-            throw new Error(`characters[${index}].characterId must be a bare character UUID; ` +
-                `version selectors are not supported inside a roster`);
-        }
-        if (spec.characterSessionId !== undefined) {
-            if (!nonblank(spec.characterSessionId)) {
-                throw new Error(`characters[${index}].characterSessionId must be nonblank when supplied`);
-            }
-            if (seenSessions.has(spec.characterSessionId)) {
-                throw new Error(`characters[${index}].characterSessionId is repeated; resume ids must be unique within the roster`);
-            }
-            seenSessions.add(spec.characterSessionId);
-        }
-    });
-    if (config.characterSessionId) {
-        throw new Error("characterSessionId is not valid with characters; use characters[].characterSessionId");
-    }
-    if (!nonblank(config.endUserId)) {
-        throw new Error("characters requires a nonblank endUserId");
-    }
-    if (config.transport && config.transport !== "livekit") {
-        throw new Error("Multi-character rooms require the LiveKit transport");
-    }
-    if (config.interactionApiUrl) {
-        throw new Error("Multi-character rooms require the LiveKit transport; interactionApiUrl selects SSE");
-    }
-    if (config.characterVersion) {
-        throw new Error("characterVersion applies to a single character; roster entries take bare UUIDs");
-    }
-    assertKey(config.sharedSessionKey, "sharedSessionKey");
-    assertKey(config.connectAttemptId, "connectAttemptId");
-    if (config.maxNumParticipants !== undefined &&
-        (!Number.isInteger(config.maxNumParticipants) ||
-            config.maxNumParticipants < 1)) {
-        throw new Error("maxNumParticipants must be a positive integer");
-    }
-}
-/**
- * Reject a config that negotiates v2 output protocols alongside room options
- * the runtime cannot combine them with.
- *
- * Verified against staging 2026-09-08: `capabilities.actionProtocolVersion: 2`
- * or `modelOutputVersion: 2` is answered with 422
- * `unsupported_action_protocol_topology` / `unsupported_model_output_topology`
- * unless the request uses `mode='create'`, a singular `characterId`, no
- * `sharedSessionKey`, and `maxNumParticipants` of 1. Version 1 carries no such
- * constraint.
- *
- * The published contract mentions only the multi-character half of this. The
- * `sharedSessionKey` and `maxNumParticipants` constraints bite in
- * single-character sessions too, which is why this runs on every connect
- * rather than only the roster path.
- */
-export function validateProtocolTopology(config) {
-    const negotiatesV2 = config.capabilities?.actionProtocolVersion === 2 ||
-        config.capabilities?.modelOutputVersion === 2;
-    if (!negotiatesV2) {
-        // Tools need v2, so without it they are refused whatever the topology.
-        if (config.actionConfig?.tools?.length) {
-            throw new Error("actionConfig.tools requires capabilities.actionProtocolVersion: 2");
-        }
-        return;
-    }
-    const offenders = [];
-    if (isRosterConfig(config))
-        offenders.push("characters");
-    if (config.sharedSessionKey)
-        offenders.push("sharedSessionKey");
-    if (config.maxNumParticipants !== undefined && config.maxNumParticipants !== 1) {
-        offenders.push("maxNumParticipants greater than 1");
-    }
-    if (offenders.length === 0)
-        return;
-    throw new Error(`Negotiated v2 output protocols require a single-character room: ` +
-        `remove ${offenders.join(", ")}, or drop capabilities to version 1. ` +
-        (offenders.includes("characters")
-            ? "Multi-character rooms cannot use action protocol v2, and therefore cannot use client tools. "
-            : "") +
-        "The runtime rejects this combination with unsupported_action_protocol_topology.");
-}
-/** Validate join options. */
-export function validateJoinOptions(options) {
-    const locators = Number(nonblank(options?.roomSessionId)) +
-        Number(nonblank(options?.sharedSessionKey));
-    if (locators !== 1) {
-        throw new Error("joinRoom requires exactly one of roomSessionId or sharedSessionKey");
-    }
-    if (!nonblank(options.endUserId)) {
-        throw new Error("joinRoom requires a nonblank endUserId");
-    }
-    // Guard the shape even though the type forbids it: a plain-JS caller, or a
-    // config object spread in wholesale, would otherwise send topology that the
-    // runtime rejects with a less specific message.
-    const stray = options;
-    if (stray.characters || stray.characterId || stray.characterSessionId) {
-        throw new Error("joinRoom must not carry character topology; the room's roster is server-owned");
-    }
-    assertKey(options.sharedSessionKey, "sharedSessionKey");
-    assertKey(options.connectAttemptId, "connectAttemptId");
-}
-/**
- * The roster half of a create request. Merged into the existing single-character
- * body by the caller, so every current option (blendshape, TTS/STT, dynamic
- * info, action, scene, VAD, vision) continues to apply to every member.
- */
-export function buildRosterConnectFields(config) {
-    const characters = (config.characters ?? []).map((spec) => ({
-        character_id: spec.characterId.trim(),
-        ...(spec.characterSessionId
-            ? { character_session_id: spec.characterSessionId }
-            : {}),
-    }));
-    return {
-        // Both carry server defaults that already match, but a roster room is
-        // rejected outright without them, so they are stated rather than assumed.
-        mode: "create",
-        spawn_agent: true,
-        characters,
-        ...(config.sharedSessionKey
-            ? { shared_session_key: config.sharedSessionKey }
-            : {}),
-        ...(config.connectAttemptId
-            ? { connect_attempt_id: config.connectAttemptId }
-            : {}),
-        ...(config.maxNumParticipants !== undefined
-            ? { max_num_participants: config.maxNumParticipants }
-            : {}),
-    };
-}
-/**
- * The complete join request body. A join carries a locator and the human, and
- * nothing else — the roster is loaded from persisted room state, and resending
- * topology is rejected.
- */
-export function buildJoinRequestBody(options) {
-    return {
-        mode: "join",
-        transport: "livekit",
-        ...(options.roomSessionId
-            ? { room_session_id: options.roomSessionId }
-            : { shared_session_key: options.sharedSessionKey }),
-        end_user_id: options.endUserId,
-        ...(options.endUserMetadata
-            ? { end_user_metadata: options.endUserMetadata }
-            : {}),
-        ...(options.connectAttemptId
-            ? { connect_attempt_id: options.connectAttemptId }
-            : {}),
-    };
-}
-//# sourceMappingURL=rosterRequest.js.map

package/dist/core/rosterRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rosterRequest.js","sourceRoot":"","sources":["../../src/core/rosterRequest.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD;;;;;;GAMG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,uEAAuE;AACvE,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAC5B,MAAwC;IAExC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,KAAa;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,oEAAoE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAE3C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,8BAA8B,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,8BAA8B,8BAA8B,YAAY;YACtE,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,0BAA0B,CAC9C,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,mEAAmE;QACnE,yEAAyE;QACzE,oDAAoD;QACpD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,+CAA+C;gBAChE,qDAAqD,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,qDAAqD,CACzE,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,+EAA+E,CACnG,CAAC;YACJ,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACvD,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACvD,IACE,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACvC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC3C,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAoB;IAC3D,MAAM,YAAY,GAChB,MAAM,CAAC,YAAY,EAAE,qBAAqB,KAAK,CAAC;QAChD,MAAM,CAAC,YAAY,EAAE,kBAAkB,KAAK,CAAC,CAAC;IAEhD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,uEAAuE;QACvE,IAAI,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,gBAAgB;QAAE,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,IAAI,MAAM,CAAC,kBAAkB,KAAK,CAAC,EAAE,CAAC;QAC/E,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,MAAM,IAAI,KAAK,CACb,kEAAkE;QAChE,UAAU,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;QACrE,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC/B,CAAC,CAAC,8FAA8F;YAChG,CAAC,CAAC,EAAE,CAAC;QACP,iFAAiF,CACpF,CAAC;AACJ,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,KAAK,GAAG,OAA6C,CAAC;IAC5D,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACxD,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAoB;IAEpB,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAC9C,CAAC,IAAyB,EAAE,EAAE,CAAC,CAAC;QAC9B,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QACrC,GAAG,CAAC,IAAI,CAAC,kBAAkB;YACzB,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CACH,CAAC;IAEF,OAAO;QACL,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,IAAI;QACjB,UAAU;QACV,GAAG,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAwB;IAExB,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,SAAS;QACpB,GAAG,CAAC,OAAO,CAAC,aAAa;YACvB,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,aAAa,EAAE;YAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACrD,WAAW,EAAE,OAAO,CAAC,SAAS;QAC9B,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,gBAAgB;YAC1B,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,gBAAgB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  ConvaiCharacterSpec,\n  ConvaiConfig,\n  JoinRoomOptions,\n} from \"./types\";\nimport { isCharacterUuid } from \"./characterReference\";\n\n/**\n * Validation and request-body construction for multi-character rooms.\n *\n * Pure: no transport, no client state. Every rule below runs before a request\n * is built, so an illegal topology costs nothing and reports the rule it broke\n * rather than a 422 from the runtime.\n */\n\n/**\n * Server-wide roster cap. Checked client-side only to fail fast with a clear\n * message — the server stays authoritative, and a plan may configure a lower\n * `max_characters` that surfaces as 403 `MULTI_CHARACTER_ROSTER_LIMIT_EXCEEDED`.\n * This is an operational limit, not a protocol maximum, so it must not leak\n * into any public type.\n */\nexport const MULTI_CHARACTER_MAX_CHARACTERS = 50;\n\n/** `shared_session_key` and `connect_attempt_id` share one charset. */\nconst KEY_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;\n\n/** True when this config asks for a multi-character room. */\nexport function isRosterConfig(\n  config: Pick<ConvaiConfig, \"characters\">,\n): boolean {\n  return Array.isArray(config.characters) && config.characters.length > 0;\n}\n\nfunction assertKey(value: string | undefined, field: string): void {\n  if (value === undefined) return;\n  if (!KEY_PATTERN.test(value)) {\n    throw new Error(\n      `${field} must be 1-128 characters of letters, digits, hyphen or underscore`,\n    );\n  }\n}\n\nfunction nonblank(value: string | undefined | null): boolean {\n  return typeof value === \"string\" && value.trim().length > 0;\n}\n\n/**\n * Validate a roster create config.\n *\n * Throws on the first broken rule. Ordered so the most structural problems\n * (which topology did you mean?) report before the detail ones.\n */\nexport function validateRosterConfig(config: ConvaiConfig): void {\n  const characters = config.characters ?? [];\n\n  if (config.characterId) {\n    throw new Error(\"Pass either characterId or characters, not both\");\n  }\n  if (characters.length === 0) {\n    throw new Error(\"characters must contain at least one entry\");\n  }\n  if (characters.length > MULTI_CHARACTER_MAX_CHARACTERS) {\n    throw new Error(\n      `characters accepts at most ${MULTI_CHARACTER_MAX_CHARACTERS} entries; ` +\n        `your plan may allow fewer`,\n    );\n  }\n\n  const seenSessions = new Set<string>();\n  characters.forEach((spec, index) => {\n    if (!spec || !nonblank(spec.characterId)) {\n      throw new Error(\n        `characters[${index}] requires a characterId`,\n      );\n    }\n    // A roster entry is typed as a bare UUID on the runtime. The version\n    // selectors that single-character `characterId` has accepted since\n    // 1.8.0-beta.5 are a 422 here, and the failure would otherwise only show\n    // up as an opaque validation error from the server.\n    if (!isCharacterUuid(spec.characterId.trim())) {\n      throw new Error(\n        `characters[${index}].characterId must be a bare character UUID; ` +\n          `version selectors are not supported inside a roster`,\n      );\n    }\n    if (spec.characterSessionId !== undefined) {\n      if (!nonblank(spec.characterSessionId)) {\n        throw new Error(\n          `characters[${index}].characterSessionId must be nonblank when supplied`,\n        );\n      }\n      if (seenSessions.has(spec.characterSessionId)) {\n        throw new Error(\n          `characters[${index}].characterSessionId is repeated; resume ids must be unique within the roster`,\n        );\n      }\n      seenSessions.add(spec.characterSessionId);\n    }\n  });\n\n  if (config.characterSessionId) {\n    throw new Error(\n      \"characterSessionId is not valid with characters; use characters[].characterSessionId\",\n    );\n  }\n  if (!nonblank(config.endUserId)) {\n    throw new Error(\"characters requires a nonblank endUserId\");\n  }\n  if (config.transport && config.transport !== \"livekit\") {\n    throw new Error(\"Multi-character rooms require the LiveKit transport\");\n  }\n  if (config.interactionApiUrl) {\n    throw new Error(\n      \"Multi-character rooms require the LiveKit transport; interactionApiUrl selects SSE\",\n    );\n  }\n  if (config.characterVersion) {\n    throw new Error(\n      \"characterVersion applies to a single character; roster entries take bare UUIDs\",\n    );\n  }\n  assertKey(config.sharedSessionKey, \"sharedSessionKey\");\n  assertKey(config.connectAttemptId, \"connectAttemptId\");\n  if (\n    config.maxNumParticipants !== undefined &&\n    (!Number.isInteger(config.maxNumParticipants) ||\n      config.maxNumParticipants < 1)\n  ) {\n    throw new Error(\"maxNumParticipants must be a positive integer\");\n  }\n}\n\n/**\n * Reject a config that negotiates v2 output protocols alongside room options\n * the runtime cannot combine them with.\n *\n * Verified against staging 2026-09-08: `capabilities.actionProtocolVersion: 2`\n * or `modelOutputVersion: 2` is answered with 422\n * `unsupported_action_protocol_topology` / `unsupported_model_output_topology`\n * unless the request uses `mode='create'`, a singular `characterId`, no\n * `sharedSessionKey`, and `maxNumParticipants` of 1. Version 1 carries no such\n * constraint.\n *\n * The published contract mentions only the multi-character half of this. The\n * `sharedSessionKey` and `maxNumParticipants` constraints bite in\n * single-character sessions too, which is why this runs on every connect\n * rather than only the roster path.\n */\nexport function validateProtocolTopology(config: ConvaiConfig): void {\n  const negotiatesV2 =\n    config.capabilities?.actionProtocolVersion === 2 ||\n    config.capabilities?.modelOutputVersion === 2;\n\n  if (!negotiatesV2) {\n    // Tools need v2, so without it they are refused whatever the topology.\n    if (config.actionConfig?.tools?.length) {\n      throw new Error(\n        \"actionConfig.tools requires capabilities.actionProtocolVersion: 2\",\n      );\n    }\n    return;\n  }\n\n  const offenders: string[] = [];\n  if (isRosterConfig(config)) offenders.push(\"characters\");\n  if (config.sharedSessionKey) offenders.push(\"sharedSessionKey\");\n  if (config.maxNumParticipants !== undefined && config.maxNumParticipants !== 1) {\n    offenders.push(\"maxNumParticipants greater than 1\");\n  }\n  if (offenders.length === 0) return;\n\n  throw new Error(\n    `Negotiated v2 output protocols require a single-character room: ` +\n      `remove ${offenders.join(\", \")}, or drop capabilities to version 1. ` +\n      (offenders.includes(\"characters\")\n        ? \"Multi-character rooms cannot use action protocol v2, and therefore cannot use client tools. \"\n        : \"\") +\n      \"The runtime rejects this combination with unsupported_action_protocol_topology.\",\n  );\n}\n\n/** Validate join options. */\nexport function validateJoinOptions(options: JoinRoomOptions): void {\n  const locators =\n    Number(nonblank(options?.roomSessionId)) +\n    Number(nonblank(options?.sharedSessionKey));\n  if (locators !== 1) {\n    throw new Error(\n      \"joinRoom requires exactly one of roomSessionId or sharedSessionKey\",\n    );\n  }\n  if (!nonblank(options.endUserId)) {\n    throw new Error(\"joinRoom requires a nonblank endUserId\");\n  }\n  // Guard the shape even though the type forbids it: a plain-JS caller, or a\n  // config object spread in wholesale, would otherwise send topology that the\n  // runtime rejects with a less specific message.\n  const stray = options as unknown as Record<string, unknown>;\n  if (stray.characters || stray.characterId || stray.characterSessionId) {\n    throw new Error(\n      \"joinRoom must not carry character topology; the room's roster is server-owned\",\n    );\n  }\n  assertKey(options.sharedSessionKey, \"sharedSessionKey\");\n  assertKey(options.connectAttemptId, \"connectAttemptId\");\n}\n\n/**\n * The roster half of a create request. Merged into the existing single-character\n * body by the caller, so every current option (blendshape, TTS/STT, dynamic\n * info, action, scene, VAD, vision) continues to apply to every member.\n */\nexport function buildRosterConnectFields(\n  config: ConvaiConfig,\n): Record<string, unknown> {\n  const characters = (config.characters ?? []).map(\n    (spec: ConvaiCharacterSpec) => ({\n      character_id: spec.characterId.trim(),\n      ...(spec.characterSessionId\n        ? { character_session_id: spec.characterSessionId }\n        : {}),\n    }),\n  );\n\n  return {\n    // Both carry server defaults that already match, but a roster room is\n    // rejected outright without them, so they are stated rather than assumed.\n    mode: \"create\",\n    spawn_agent: true,\n    characters,\n    ...(config.sharedSessionKey\n      ? { shared_session_key: config.sharedSessionKey }\n      : {}),\n    ...(config.connectAttemptId\n      ? { connect_attempt_id: config.connectAttemptId }\n      : {}),\n    ...(config.maxNumParticipants !== undefined\n      ? { max_num_participants: config.maxNumParticipants }\n      : {}),\n  };\n}\n\n/**\n * The complete join request body. A join carries a locator and the human, and\n * nothing else — the roster is loaded from persisted room state, and resending\n * topology is rejected.\n */\nexport function buildJoinRequestBody(\n  options: JoinRoomOptions,\n): Record<string, unknown> {\n  return {\n    mode: \"join\",\n    transport: \"livekit\",\n    ...(options.roomSessionId\n      ? { room_session_id: options.roomSessionId }\n      : { shared_session_key: options.sharedSessionKey }),\n    end_user_id: options.endUserId,\n    ...(options.endUserMetadata\n      ? { end_user_metadata: options.endUserMetadata }\n      : {}),\n    ...(options.connectAttemptId\n      ? { connect_attempt_id: options.connectAttemptId }\n      : {}),\n  };\n}\n"]}

package/dist/utils/inlineMarkdown.d.ts

@@ -1,60 +0,0 @@
-/**
- * Inline markdown tokenizer shared by the React and vanilla chat bubbles.
- *
- * Core-service can hand the client bot text with links preserved
- * (`preserve_links_in_output` on /connect): `[text](url)`, `![alt](url)` and
- * bare `http(s)://` URLs arrive verbatim, everything else is still flattened
- * server-side. This turns one line of that text into nodes a renderer can
- * map onto DOM or JSX.
- *
- * Only `http:` and `https:` become links or images. Anything else — including
- * `javascript:` — stays literal text, regardless of what the server sent.
- * A link whose closing paren has not streamed in yet is left as text too, so
- * a bubble does not flicker between shapes mid-response.
- */
-export type MediaKind = "image" | "video";
-export type InlineNode = {
-    kind: "text";
-    text: string;
-} | {
-    kind: "strong";
-    text: string;
-} | {
-    kind: "em";
-    text: string;
-} | {
-    kind: "link";
-    href: string;
-    label: string;
-    media: MediaKind | null;
-} | {
-    kind: "image";
-    src: string;
-    alt: string;
-}
-/**
- * A `[label](target)` whose scheme is not on the allowlist. It carries the
- * label so a renderer can show the words the character wrote instead of raw
- * markdown, and the target so it can be surfaced on hover — but a renderer
- * must never put `href` on an anchor. That is the whole point of the node.
- */
- | {
-    kind: "blocked";
-    href: string;
-    label: string;
-};
-/** Classify a URL by its path extension; null for anything not previewable. */
-export declare function mediaKindForUrl(url: string): MediaKind | null;
-/**
- * A bare URL is its own label, and a long one wraps over several lines before
- * the message even starts — in a 400px panel that swamps the bubble. Compact it
- * the way a browser address bar does: keep what identifies the target, elide
- * the middle. `https://a.example.com/x/y/z/file.mp4` → `a.example.com/…/file.mp4`
- *
- * Presentation only: the href is always the full URL.
- */
-export declare function compactUrl(url: string, max?: number): string;
-/** True when `url` uses a scheme safe to expose as an anchor href. */
-export declare function isSafeHref(url: string): boolean;
-export declare function parseInlineMarkdown(line: string): InlineNode[];
-//# sourceMappingURL=inlineMarkdown.d.ts.map

package/dist/utils/inlineMarkdown.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"inlineMarkdown.d.ts","sourceRoot":"","sources":["../../src/utils/inlineMarkdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1C,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAC7C;;;;;GAKG;GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAKrD,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAU7D;AAoBD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,MAAM,CAkBxD;AAED,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG/C;AAqDD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CA4C9D"}

package/dist/utils/inlineMarkdown.js

@@ -1,183 +0,0 @@
-/**
- * Inline markdown tokenizer shared by the React and vanilla chat bubbles.
- *
- * Core-service can hand the client bot text with links preserved
- * (`preserve_links_in_output` on /connect): `[text](url)`, `![alt](url)` and
- * bare `http(s)://` URLs arrive verbatim, everything else is still flattened
- * server-side. This turns one line of that text into nodes a renderer can
- * map onto DOM or JSX.
- *
- * Only `http:` and `https:` become links or images. Anything else — including
- * `javascript:` — stays literal text, regardless of what the server sent.
- * A link whose closing paren has not streamed in yet is left as text too, so
- * a bubble does not flicker between shapes mid-response.
- */
-const IMAGE_EXT = /\.(png|jpe?g|gif|webp|avif)$/i;
-const VIDEO_EXT = /\.(mp4|webm|mov|ogg)$/i;
-/** Classify a URL by its path extension; null for anything not previewable. */
-export function mediaKindForUrl(url) {
-    let pathname;
-    try {
-        pathname = new URL(url).pathname;
-    }
-    catch {
-        return null;
-    }
-    if (IMAGE_EXT.test(pathname))
-        return "image";
-    if (VIDEO_EXT.test(pathname))
-        return "video";
-    return null;
-}
-/**
- * Schemes a renderer may turn into an anchor.
- *
- * The list is an allowlist, never a denylist, because the server does NOT
- * sanitise schemes — core-service echoes `[x](javascript:alert(1))` back
- * verbatim (verified against dev4, 2026-09-10). The character's output is
- * attacker-influenced text, so this is the only thing standing between a
- * prompt-injected `javascript:` href and script execution in the host page.
- * Anything not listed here stays literal text.
- */
-const SAFE_SCHEMES = ["http", "https", "ftp", "ftps", "mailto", "tel", "sms"];
-/** Schemes with an authority; the rest (mailto/tel/sms) are opaque. */
-const NETWORK_SCHEMES = ["http", "https", "ftp", "ftps"];
-const schemeAlt = SAFE_SCHEMES.join("|");
-const networkAlt = NETWORK_SCHEMES.join("|");
-/**
- * A bare URL is its own label, and a long one wraps over several lines before
- * the message even starts — in a 400px panel that swamps the bubble. Compact it
- * the way a browser address bar does: keep what identifies the target, elide
- * the middle. `https://a.example.com/x/y/z/file.mp4` → `a.example.com/…/file.mp4`
- *
- * Presentation only: the href is always the full URL.
- */
-export function compactUrl(url, max = 44) {
-    if (url.length <= max)
-        return url;
-    let host;
-    let pathname;
-    try {
-        ({ host, pathname } = new URL(url));
-    }
-    catch {
-        return `${url.slice(0, max - 1)}…`;
-    }
-    const file = pathname.split("/").filter(Boolean).pop();
-    if (!file)
-        return host.length <= max ? host : `${host.slice(0, max - 1)}…`;
-    const compact = `${host}/…/${file}`;
-    if (compact.length <= max)
-        return compact;
-    // A long host would otherwise eat the budget and clip the filename down to
-    // its extension. The filename identifies what the link actually is, so drop
-    // the host instead of shortening it.
-    if (file.length <= max)
-        return file;
-    return `…${file.slice(-(max - 1))}`;
-}
-/** True when `url` uses a scheme safe to expose as an anchor href. */
-export function isSafeHref(url) {
-    const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(url)?.[1];
-    return scheme !== undefined && SAFE_SCHEMES.includes(scheme.toLowerCase());
-}
-// Alternatives are tried in this order at every position:
-//   1. ![alt](url) / [text](url), with an optional CommonMark "title"
-//   2. <url> autolink, angle brackets consumed
-//   3. bare URL, unless it is the target of a link still streaming in
-//   4. **bold** / __bold__ / *em* / _em_
-// Matching URLs before emphasis is what keeps `_` inside a URL literal.
-// Alternative 1 accepts ANY scheme so an unsafe one can be recognised and
-// re-emitted as literal text; without that, `[x](javascript:…)` would fall
-// through to the emphasis rules and get partially mangled.
-const TOKEN = new RegExp([
-    // The target allows one level of balanced parens, so `javascript:alert(1)`
-    // and `…/a_(b).pdf` are consumed whole. Without it the inner `)` ended the
-    // match and the outer one was left stranded in the text.
-    `(!?)\\[([^\\]]*)\\]\\(\\s*((?:[^\\s()]|\\([^()]*\\))+)(?:\\s+"[^"]*")?\\s*\\)`,
-    `<((?:${schemeAlt}):[^\\s<>]+)>`,
-    `(?<!\\]\\()((?:${networkAlt}):\\/\\/[^\\s<>"'\`]+|(?:mailto|tel|sms):[^\\s<>"'\`]+)`,
-    `(\\*\\*|__)(.*?)\\6`,
-    `\\*([^*]+)\\*`,
-    `_([^_]+)_`,
-].join("|"), "gi");
-const TRAILING_PUNCTUATION = ".,;:!?'\"";
-/**
- * Sentence punctuation after a bare URL belongs to the sentence, and an
- * unbalanced `)` belongs to the surrounding parenthetical.
- */
-function splitTrailingPunctuation(raw) {
-    let url = raw;
-    while (url.length > 0) {
-        const last = url[url.length - 1];
-        if (TRAILING_PUNCTUATION.includes(last)) {
-            url = url.slice(0, -1);
-            continue;
-        }
-        if (last === ")") {
-            const opens = (url.match(/\(/g) ?? []).length;
-            const closes = (url.match(/\)/g) ?? []).length;
-            if (closes > opens) {
-                url = url.slice(0, -1);
-                continue;
-            }
-        }
-        break;
-    }
-    return [url, raw.slice(url.length)];
-}
-export function parseInlineMarkdown(line) {
-    const nodes = [];
-    const pushText = (text) => {
-        if (!text)
-            return;
-        const last = nodes[nodes.length - 1];
-        if (last?.kind === "text")
-            last.text += text;
-        else
-            nodes.push({ kind: "text", text });
-    };
-    let lastIndex = 0;
-    TOKEN.lastIndex = 0;
-    let match;
-    while ((match = TOKEN.exec(line)) !== null) {
-        pushText(line.slice(lastIndex, match.index));
-        const [, bang, label, linkUrl, autoUrl, bareUrl, , boldText, starEm, underscoreEm] = match;
-        if (linkUrl !== undefined) {
-            if (!isSafeHref(linkUrl)) {
-                // Not an anchor, ever. It keeps the label so the bubble reads as the
-                // character wrote it rather than showing raw markdown, and the target
-                // so a renderer can reveal it on hover.
-                nodes.push({ kind: "blocked", href: linkUrl, label: bang ? label || linkUrl : label });
-            }
-            else if (bang) {
-                nodes.push({ kind: "image", src: linkUrl, alt: label });
-            }
-            else {
-                nodes.push({ kind: "link", href: linkUrl, label, media: mediaKindForUrl(linkUrl) });
-            }
-        }
-        else if (autoUrl !== undefined) {
-            nodes.push({ kind: "link", href: autoUrl, label: autoUrl, media: mediaKindForUrl(autoUrl) });
-        }
-        else if (bareUrl !== undefined) {
-            const [href, rest] = splitTrailingPunctuation(bareUrl);
-            if (href)
-                nodes.push({ kind: "link", href, label: href, media: mediaKindForUrl(href) });
-            pushText(rest);
-        }
-        else if (boldText !== undefined) {
-            nodes.push({ kind: "strong", text: boldText });
-        }
-        else if (starEm !== undefined) {
-            nodes.push({ kind: "em", text: starEm });
-        }
-        else if (underscoreEm !== undefined) {
-            nodes.push({ kind: "em", text: underscoreEm });
-        }
-        lastIndex = match.index + match[0].length;
-    }
-    pushText(line.slice(lastIndex));
-    return nodes;
-}
-//# sourceMappingURL=inlineMarkdown.js.map

package/dist/utils/inlineMarkdown.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"inlineMarkdown.js","sourceRoot":"","sources":["../../src/utils/inlineMarkdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAkBH,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAClD,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAE9E,uEAAuE;AACvE,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEzD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,GAAG,GAAG,EAAE;IAC9C,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,IAAY,CAAC;IACjB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;IAC3E,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAC;IAC1C,2EAA2E;IAC3E,4EAA4E;IAC5E,qCAAqC;IACrC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,0DAA0D;AAC1D,sEAAsE;AACtE,+CAA+C;AAC/C,sEAAsE;AACtE,yCAAyC;AACzC,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,2DAA2D;AAC3D,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB;IACE,2EAA2E;IAC3E,2EAA2E;IAC3E,yDAAyD;IACzD,+EAA+E;IAC/E,QAAQ,SAAS,eAAe;IAChC,kBAAkB,UAAU,yDAAyD;IACrF,qBAAqB;IACrB,eAAe;IACf,WAAW;CACZ,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,IAAI,CACL,CAAC;AAEF,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEzC;;;GAGG;AACH,SAAS,wBAAwB,CAAC,GAAW;IAC3C,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;gBACnB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM;IACR,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;;YACxC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,AAAD,EAAG,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAE3F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,qEAAqE;gBACrE,sEAAsE;gBACtE,wCAAwC;gBACxC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACzF,CAAC;iBAAM,IAAI,IAAI,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;YACvD,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxF,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Inline markdown tokenizer shared by the React and vanilla chat bubbles.\n *\n * Core-service can hand the client bot text with links preserved\n * (`preserve_links_in_output` on /connect): `[text](url)`, `![alt](url)` and\n * bare `http(s)://` URLs arrive verbatim, everything else is still flattened\n * server-side. This turns one line of that text into nodes a renderer can\n * map onto DOM or JSX.\n *\n * Only `http:` and `https:` become links or images. Anything else — including\n * `javascript:` — stays literal text, regardless of what the server sent.\n * A link whose closing paren has not streamed in yet is left as text too, so\n * a bubble does not flicker between shapes mid-response.\n */\n\nexport type MediaKind = \"image\" | \"video\";\n\nexport type InlineNode =\n  | { kind: \"text\"; text: string }\n  | { kind: \"strong\"; text: string }\n  | { kind: \"em\"; text: string }\n  | { kind: \"link\"; href: string; label: string; media: MediaKind | null }\n  | { kind: \"image\"; src: string; alt: string }\n  /**\n   * A `[label](target)` whose scheme is not on the allowlist. It carries the\n   * label so a renderer can show the words the character wrote instead of raw\n   * markdown, and the target so it can be surfaced on hover — but a renderer\n   * must never put `href` on an anchor. That is the whole point of the node.\n   */\n  | { kind: \"blocked\"; href: string; label: string };\n\nconst IMAGE_EXT = /\\.(png|jpe?g|gif|webp|avif)$/i;\nconst VIDEO_EXT = /\\.(mp4|webm|mov|ogg)$/i;\n\n/** Classify a URL by its path extension; null for anything not previewable. */\nexport function mediaKindForUrl(url: string): MediaKind | null {\n  let pathname: string;\n  try {\n    pathname = new URL(url).pathname;\n  } catch {\n    return null;\n  }\n  if (IMAGE_EXT.test(pathname)) return \"image\";\n  if (VIDEO_EXT.test(pathname)) return \"video\";\n  return null;\n}\n\n/**\n * Schemes a renderer may turn into an anchor.\n *\n * The list is an allowlist, never a denylist, because the server does NOT\n * sanitise schemes — core-service echoes `[x](javascript:alert(1))` back\n * verbatim (verified against dev4, 2026-09-10). The character's output is\n * attacker-influenced text, so this is the only thing standing between a\n * prompt-injected `javascript:` href and script execution in the host page.\n * Anything not listed here stays literal text.\n */\nconst SAFE_SCHEMES = [\"http\", \"https\", \"ftp\", \"ftps\", \"mailto\", \"tel\", \"sms\"];\n\n/** Schemes with an authority; the rest (mailto/tel/sms) are opaque. */\nconst NETWORK_SCHEMES = [\"http\", \"https\", \"ftp\", \"ftps\"];\n\nconst schemeAlt = SAFE_SCHEMES.join(\"|\");\nconst networkAlt = NETWORK_SCHEMES.join(\"|\");\n\n/**\n * A bare URL is its own label, and a long one wraps over several lines before\n * the message even starts — in a 400px panel that swamps the bubble. Compact it\n * the way a browser address bar does: keep what identifies the target, elide\n * the middle. `https://a.example.com/x/y/z/file.mp4` → `a.example.com/…/file.mp4`\n *\n * Presentation only: the href is always the full URL.\n */\nexport function compactUrl(url: string, max = 44): string {\n  if (url.length <= max) return url;\n  let host: string;\n  let pathname: string;\n  try {\n    ({ host, pathname } = new URL(url));\n  } catch {\n    return `${url.slice(0, max - 1)}…`;\n  }\n  const file = pathname.split(\"/\").filter(Boolean).pop();\n  if (!file) return host.length <= max ? host : `${host.slice(0, max - 1)}…`;\n  const compact = `${host}/…/${file}`;\n  if (compact.length <= max) return compact;\n  // A long host would otherwise eat the budget and clip the filename down to\n  // its extension. The filename identifies what the link actually is, so drop\n  // the host instead of shortening it.\n  if (file.length <= max) return file;\n  return `…${file.slice(-(max - 1))}`;\n}\n\n/** True when `url` uses a scheme safe to expose as an anchor href. */\nexport function isSafeHref(url: string): boolean {\n  const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(url)?.[1];\n  return scheme !== undefined && SAFE_SCHEMES.includes(scheme.toLowerCase());\n}\n\n// Alternatives are tried in this order at every position:\n//   1. ![alt](url) / [text](url), with an optional CommonMark \"title\"\n//   2. <url> autolink, angle brackets consumed\n//   3. bare URL, unless it is the target of a link still streaming in\n//   4. **bold** / __bold__ / *em* / _em_\n// Matching URLs before emphasis is what keeps `_` inside a URL literal.\n// Alternative 1 accepts ANY scheme so an unsafe one can be recognised and\n// re-emitted as literal text; without that, `[x](javascript:…)` would fall\n// through to the emphasis rules and get partially mangled.\nconst TOKEN = new RegExp(\n  [\n    // The target allows one level of balanced parens, so `javascript:alert(1)`\n    // and `…/a_(b).pdf` are consumed whole. Without it the inner `)` ended the\n    // match and the outer one was left stranded in the text.\n    `(!?)\\\\[([^\\\\]]*)\\\\]\\\\(\\\\s*((?:[^\\\\s()]|\\\\([^()]*\\\\))+)(?:\\\\s+\"[^\"]*\")?\\\\s*\\\\)`,\n    `<((?:${schemeAlt}):[^\\\\s<>]+)>`,\n    `(?<!\\\\]\\\\()((?:${networkAlt}):\\\\/\\\\/[^\\\\s<>\"'\\`]+|(?:mailto|tel|sms):[^\\\\s<>\"'\\`]+)`,\n    `(\\\\*\\\\*|__)(.*?)\\\\6`,\n    `\\\\*([^*]+)\\\\*`,\n    `_([^_]+)_`,\n  ].join(\"|\"),\n  \"gi\",\n);\n\nconst TRAILING_PUNCTUATION = \".,;:!?'\\\"\";\n\n/**\n * Sentence punctuation after a bare URL belongs to the sentence, and an\n * unbalanced `)` belongs to the surrounding parenthetical.\n */\nfunction splitTrailingPunctuation(raw: string): [string, string] {\n  let url = raw;\n  while (url.length > 0) {\n    const last = url[url.length - 1];\n    if (TRAILING_PUNCTUATION.includes(last)) {\n      url = url.slice(0, -1);\n      continue;\n    }\n    if (last === \")\") {\n      const opens = (url.match(/\\(/g) ?? []).length;\n      const closes = (url.match(/\\)/g) ?? []).length;\n      if (closes > opens) {\n        url = url.slice(0, -1);\n        continue;\n      }\n    }\n    break;\n  }\n  return [url, raw.slice(url.length)];\n}\n\nexport function parseInlineMarkdown(line: string): InlineNode[] {\n  const nodes: InlineNode[] = [];\n  const pushText = (text: string) => {\n    if (!text) return;\n    const last = nodes[nodes.length - 1];\n    if (last?.kind === \"text\") last.text += text;\n    else nodes.push({ kind: \"text\", text });\n  };\n\n  let lastIndex = 0;\n  TOKEN.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = TOKEN.exec(line)) !== null) {\n    pushText(line.slice(lastIndex, match.index));\n    const [, bang, label, linkUrl, autoUrl, bareUrl, , boldText, starEm, underscoreEm] = match;\n\n    if (linkUrl !== undefined) {\n      if (!isSafeHref(linkUrl)) {\n        // Not an anchor, ever. It keeps the label so the bubble reads as the\n        // character wrote it rather than showing raw markdown, and the target\n        // so a renderer can reveal it on hover.\n        nodes.push({ kind: \"blocked\", href: linkUrl, label: bang ? label || linkUrl : label });\n      } else if (bang) {\n        nodes.push({ kind: \"image\", src: linkUrl, alt: label });\n      } else {\n        nodes.push({ kind: \"link\", href: linkUrl, label, media: mediaKindForUrl(linkUrl) });\n      }\n    } else if (autoUrl !== undefined) {\n      nodes.push({ kind: \"link\", href: autoUrl, label: autoUrl, media: mediaKindForUrl(autoUrl) });\n    } else if (bareUrl !== undefined) {\n      const [href, rest] = splitTrailingPunctuation(bareUrl);\n      if (href) nodes.push({ kind: \"link\", href, label: href, media: mediaKindForUrl(href) });\n      pushText(rest);\n    } else if (boldText !== undefined) {\n      nodes.push({ kind: \"strong\", text: boldText });\n    } else if (starEm !== undefined) {\n      nodes.push({ kind: \"em\", text: starEm });\n    } else if (underscoreEm !== undefined) {\n      nodes.push({ kind: \"em\", text: underscoreEm });\n    }\n    lastIndex = match.index + match[0].length;\n  }\n  pushText(line.slice(lastIndex));\n  return nodes;\n}\n"]}