@copilotkit/web-inspector 1.73.2 → 1.74.0

package/dist/lib/notification-loader.cjs

@@ -0,0 +1,38 @@
+const require_notifications = require('./notifications.cjs');
+
+//#region src/lib/notification-loader.ts
+const NOTIFICATION_FEED_URL = "https://cdn.copilotkit.ai/notifications/v1.json";
+const requests = /* @__PURE__ */ new Map();
+/** New SDKs read only cohorts; announcements.json remains the older SDK channel.
+* Share one request per framework/version per page. Missing context gets the full
+* feed so future servers cannot exclude notices the client may still match.
+*/
+function loadNotificationFeed(context) {
+	if (typeof window === "undefined" || typeof fetch === "undefined") return Promise.resolve(null);
+	const url = new URL(NOTIFICATION_FEED_URL);
+	if (context.framework && context.sdkVersion) {
+		url.searchParams.set("framework", context.framework);
+		url.searchParams.set("sdkVersion", context.sdkVersion);
+	}
+	const key = url.toString();
+	const existing = requests.get(key);
+	if (existing) return existing;
+	const request = fetch(key, {
+		cache: "no-cache",
+		credentials: "omit"
+	}).then(async (response) => {
+		if (!response.ok) throw new Error(`Feed request failed (${response.status})`);
+		const feed = require_notifications.parseNotificationFeed(await response.json());
+		if (!feed) throw new Error("Feed failed validation");
+		return feed;
+	}).catch((error) => {
+		console.warn("[CopilotKit Inspector] Failed to load notifications", error);
+		return null;
+	});
+	requests.set(key, request);
+	return request;
+}
+
+//#endregion
+exports.loadNotificationFeed = loadNotificationFeed;
+//# sourceMappingURL=notification-loader.cjs.map

package/dist/lib/notification-loader.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-loader.cjs","names":["parseNotificationFeed"],"sources":["../../src/lib/notification-loader.ts"],"sourcesContent":["import { parseNotificationFeed } from \"./notifications.js\";\nimport type { NotificationContext, NotificationFeed } from \"./notifications.js\";\n\nexport const NOTIFICATION_FEED_URL =\n  \"https://cdn.copilotkit.ai/notifications/v1.json\";\nconst requests = new Map<string, Promise<NotificationFeed | null>>();\n/** New SDKs read only cohorts; announcements.json remains the older SDK channel.\n * Share one request per framework/version per page. Missing context gets the full\n * feed so future servers cannot exclude notices the client may still match.\n */\nexport function loadNotificationFeed(\n  context: Pick<NotificationContext, \"framework\" | \"sdkVersion\">,\n): Promise<NotificationFeed | null> {\n  if (typeof window === \"undefined\" || typeof fetch === \"undefined\")\n    return Promise.resolve(null);\n  const url = new URL(NOTIFICATION_FEED_URL);\n  if (context.framework && context.sdkVersion) {\n    url.searchParams.set(\"framework\", context.framework);\n    url.searchParams.set(\"sdkVersion\", context.sdkVersion);\n  }\n  const key = url.toString();\n  const existing = requests.get(key);\n  if (existing) return existing;\n  const request = fetch(key, {\n    cache: \"no-cache\",\n    credentials: \"omit\",\n  })\n    .then(async (response) => {\n      if (!response.ok)\n        throw new Error(`Feed request failed (${response.status})`);\n      const feed = parseNotificationFeed(await response.json());\n      if (!feed) throw new Error(\"Feed failed validation\");\n      return feed;\n    })\n    .catch((error: unknown) => {\n      // Keep the host running, but make an empty What's New debuggable.\n      console.warn(\n        \"[CopilotKit Inspector] Failed to load notifications\",\n        error,\n      );\n      return null;\n    });\n  requests.set(key, request);\n  return request;\n}\n"],"mappings":";;;AAGA,MAAa,wBACX;AACF,MAAM,2BAAW,IAAI,KAA+C;;;;;AAKpE,SAAgB,qBACd,SACkC;AAClC,KAAI,OAAO,WAAW,eAAe,OAAO,UAAU,YACpD,QAAO,QAAQ,QAAQ,KAAK;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB;AAC1C,KAAI,QAAQ,aAAa,QAAQ,YAAY;AAC3C,MAAI,aAAa,IAAI,aAAa,QAAQ,UAAU;AACpD,MAAI,aAAa,IAAI,cAAc,QAAQ,WAAW;;CAExD,MAAM,MAAM,IAAI,UAAU;CAC1B,MAAM,WAAW,SAAS,IAAI,IAAI;AAClC,KAAI,SAAU,QAAO;CACrB,MAAM,UAAU,MAAM,KAAK;EACzB,OAAO;EACP,aAAa;EACd,CAAC,CACC,KAAK,OAAO,aAAa;AACxB,MAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,wBAAwB,SAAS,OAAO,GAAG;EAC7D,MAAM,OAAOA,4CAAsB,MAAM,SAAS,MAAM,CAAC;AACzD,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,yBAAyB;AACpD,SAAO;GACP,CACD,OAAO,UAAmB;AAEzB,UAAQ,KACN,uDACA,MACD;AACD,SAAO;GACP;AACJ,UAAS,IAAI,KAAK,QAAQ;AAC1B,QAAO"}

package/dist/lib/notification-loader.mjs

@@ -0,0 +1,38 @@
+import { parseNotificationFeed } from "./notifications.mjs";
+
+//#region src/lib/notification-loader.ts
+const NOTIFICATION_FEED_URL = "https://cdn.copilotkit.ai/notifications/v1.json";
+const requests = /* @__PURE__ */ new Map();
+/** New SDKs read only cohorts; announcements.json remains the older SDK channel.
+* Share one request per framework/version per page. Missing context gets the full
+* feed so future servers cannot exclude notices the client may still match.
+*/
+function loadNotificationFeed(context) {
+	if (typeof window === "undefined" || typeof fetch === "undefined") return Promise.resolve(null);
+	const url = new URL(NOTIFICATION_FEED_URL);
+	if (context.framework && context.sdkVersion) {
+		url.searchParams.set("framework", context.framework);
+		url.searchParams.set("sdkVersion", context.sdkVersion);
+	}
+	const key = url.toString();
+	const existing = requests.get(key);
+	if (existing) return existing;
+	const request = fetch(key, {
+		cache: "no-cache",
+		credentials: "omit"
+	}).then(async (response) => {
+		if (!response.ok) throw new Error(`Feed request failed (${response.status})`);
+		const feed = parseNotificationFeed(await response.json());
+		if (!feed) throw new Error("Feed failed validation");
+		return feed;
+	}).catch((error) => {
+		console.warn("[CopilotKit Inspector] Failed to load notifications", error);
+		return null;
+	});
+	requests.set(key, request);
+	return request;
+}
+
+//#endregion
+export { loadNotificationFeed };
+//# sourceMappingURL=notification-loader.mjs.map

package/dist/lib/notification-loader.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-loader.mjs","names":[],"sources":["../../src/lib/notification-loader.ts"],"sourcesContent":["import { parseNotificationFeed } from \"./notifications.js\";\nimport type { NotificationContext, NotificationFeed } from \"./notifications.js\";\n\nexport const NOTIFICATION_FEED_URL =\n  \"https://cdn.copilotkit.ai/notifications/v1.json\";\nconst requests = new Map<string, Promise<NotificationFeed | null>>();\n/** New SDKs read only cohorts; announcements.json remains the older SDK channel.\n * Share one request per framework/version per page. Missing context gets the full\n * feed so future servers cannot exclude notices the client may still match.\n */\nexport function loadNotificationFeed(\n  context: Pick<NotificationContext, \"framework\" | \"sdkVersion\">,\n): Promise<NotificationFeed | null> {\n  if (typeof window === \"undefined\" || typeof fetch === \"undefined\")\n    return Promise.resolve(null);\n  const url = new URL(NOTIFICATION_FEED_URL);\n  if (context.framework && context.sdkVersion) {\n    url.searchParams.set(\"framework\", context.framework);\n    url.searchParams.set(\"sdkVersion\", context.sdkVersion);\n  }\n  const key = url.toString();\n  const existing = requests.get(key);\n  if (existing) return existing;\n  const request = fetch(key, {\n    cache: \"no-cache\",\n    credentials: \"omit\",\n  })\n    .then(async (response) => {\n      if (!response.ok)\n        throw new Error(`Feed request failed (${response.status})`);\n      const feed = parseNotificationFeed(await response.json());\n      if (!feed) throw new Error(\"Feed failed validation\");\n      return feed;\n    })\n    .catch((error: unknown) => {\n      // Keep the host running, but make an empty What's New debuggable.\n      console.warn(\n        \"[CopilotKit Inspector] Failed to load notifications\",\n        error,\n      );\n      return null;\n    });\n  requests.set(key, request);\n  return request;\n}\n"],"mappings":";;;AAGA,MAAa,wBACX;AACF,MAAM,2BAAW,IAAI,KAA+C;;;;;AAKpE,SAAgB,qBACd,SACkC;AAClC,KAAI,OAAO,WAAW,eAAe,OAAO,UAAU,YACpD,QAAO,QAAQ,QAAQ,KAAK;CAC9B,MAAM,MAAM,IAAI,IAAI,sBAAsB;AAC1C,KAAI,QAAQ,aAAa,QAAQ,YAAY;AAC3C,MAAI,aAAa,IAAI,aAAa,QAAQ,UAAU;AACpD,MAAI,aAAa,IAAI,cAAc,QAAQ,WAAW;;CAExD,MAAM,MAAM,IAAI,UAAU;CAC1B,MAAM,WAAW,SAAS,IAAI,IAAI;AAClC,KAAI,SAAU,QAAO;CACrB,MAAM,UAAU,MAAM,KAAK;EACzB,OAAO;EACP,aAAa;EACd,CAAC,CACC,KAAK,OAAO,aAAa;AACxB,MAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,wBAAwB,SAAS,OAAO,GAAG;EAC7D,MAAM,OAAO,sBAAsB,MAAM,SAAS,MAAM,CAAC;AACzD,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,yBAAyB;AACpD,SAAO;GACP,CACD,OAAO,UAAmB;AAEzB,UAAQ,KACN,uDACA,MACD;AACD,SAAO;GACP;AACJ,UAAS,IAAI,KAAK,QAAQ;AAC1B,QAAO"}

package/dist/lib/notifications.cjs

@@ -0,0 +1,173 @@
+let semver = require("semver");
+
+//#region src/lib/notifications.ts
+function emptyNotificationState() {
+	return {
+		schemaVersion: 1,
+		eligibleIds: [],
+		readIds: [],
+		suppressedIds: [],
+		activeId: null
+	};
+}
+const priorities = {
+	Low: 10,
+	Normal: 20,
+	High: 30,
+	Urgent: 40
+};
+const conditionValues = {
+	framework: [
+		"react",
+		"vue",
+		"angular"
+	],
+	intelligence: ["enabled", "disabled"],
+	deployment: ["managed", "self-hosted"]
+};
+function record(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function onlyKeys(value, keys) {
+	return Object.keys(value).every((key) => keys.includes(key));
+}
+function text(value, max = 256) {
+	return typeof value === "string" && value.trim().length > 0 && value.length <= max;
+}
+function isNotificationId(value) {
+	return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+}
+function ids(value) {
+	return Array.isArray(value) && value.every(isNotificationId) && new Set(value).size === value.length;
+}
+/** Validate authored conditions; unsupported predicates cannot broaden the audience. */
+function validNotificationConditions(value) {
+	if (!record(value)) return false;
+	if (value.sdkVersion !== void 0 && value.framework === void 0) return false;
+	return Object.entries(value).every(([key, expected]) => {
+		if (!text(expected)) return false;
+		if (key === "sdkVersion") return (0, semver.validRange)(expected) !== null;
+		if (key === "plan") return /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(expected);
+		return Object.prototype.hasOwnProperty.call(conditionValues, key) && (conditionValues[key]?.includes(expected) ?? false);
+	});
+}
+/** Parse the public envelope. Any invalid entry rejects the whole feed. */
+function parseNotificationFeed(value) {
+	if (!record(value) || !onlyKeys(value, ["schemaVersion", "notifications"]) || value.schemaVersion !== 1) return null;
+	if (!Array.isArray(value.notifications) || value.notifications.length > 100) return null;
+	const notifications = [];
+	for (const notice of value.notifications) {
+		if (!record(notice) || !onlyKeys(notice, [
+			"id",
+			"title",
+			"body",
+			"publishedAt",
+			"audiences",
+			"priority",
+			"priorityOverride"
+		])) return null;
+		if (!isNotificationId(notice.id) || !text(notice.title) || !text(notice.body, 1e5) || !text(notice.publishedAt)) return null;
+		if (!/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(notice.publishedAt) || !Number.isFinite(Date.parse(notice.publishedAt)) || new Date(notice.publishedAt).toISOString() !== notice.publishedAt) return null;
+		if (!Array.isArray(notice.audiences) || !notice.audiences.length || notice.audiences.length > 100 || !notice.audiences.every(validNotificationConditions)) return null;
+		if (!text(notice.priority) || !Object.prototype.hasOwnProperty.call(priorities, notice.priority)) return null;
+		if (notice.priorityOverride !== void 0 && (typeof notice.priorityOverride !== "number" || !Number.isSafeInteger(notice.priorityOverride) || notice.priorityOverride < 0)) return null;
+		if (notifications.some((n) => n.id === notice.id)) return null;
+		notifications.push({
+			id: notice.id,
+			title: notice.title,
+			body: notice.body,
+			publishedAt: notice.publishedAt,
+			audiences: notice.audiences,
+			priority: notice.priority,
+			...notice.priorityOverride === void 0 ? {} : { priorityOverride: notice.priorityOverride }
+		});
+	}
+	return {
+		schemaVersion: 1,
+		notifications
+	};
+}
+/** Ignore malformed or incompatible browser state. */
+function parseNotificationState(value) {
+	if (!record(value) || value.schemaVersion !== 1 || !ids(value.eligibleIds) || !ids(value.readIds) || !ids(value.suppressedIds) || value.activeId !== null && !isNotificationId(value.activeId)) return null;
+	return {
+		schemaVersion: 1,
+		eligibleIds: value.eligibleIds,
+		readIds: value.readIds,
+		suppressedIds: value.suppressedIds,
+		activeId: value.activeId
+	};
+}
+/** Internal priority never becomes a developer-facing badge. */
+function notificationPriority(notice) {
+	return notice.priorityOverride ?? priorities[notice.priority];
+}
+/** Stable ordering used by authoring reports and first-time selection. */
+function compareNotifications(a, b) {
+	return notificationPriority(b) - notificationPriority(a) || Date.parse(b.publishedAt) - Date.parse(a.publishedAt) || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+/** Refresh eligibility without promoting the previously delivered backlog. */
+function reconcileNotifications(state, feed, context) {
+	const eligible = feed.notifications.filter((n) => matchNotification(n, context).matches);
+	const quiet = (n) => state.readIds.includes(n.id) || state.suppressedIds.includes(n.id);
+	const active = eligible.find((n) => n.id === state.activeId && !quiet(n)) ?? feed.notifications.find((n) => n.id === state.activeId && !quiet(n) && n.audiences.some((conditions) => {
+		const entries = Object.entries(conditions);
+		if (!entries.some(([key]) => context[key] === void 0)) return false;
+		const known = Object.fromEntries(entries.filter(([key]) => context[key] !== void 0));
+		return matchNotification({
+			...n,
+			audiences: [known]
+		}, context).matches;
+	}));
+	const newcomer = eligible.filter((n) => !quiet(n) && !state.eligibleIds.includes(n.id)).sort(compareNotifications)[0];
+	const winner = active && (!newcomer || notificationPriority(active) >= notificationPriority(newcomer)) ? active : newcomer;
+	return {
+		...state,
+		eligibleIds: eligible.map((n) => n.id),
+		activeId: winner?.id ?? null
+	};
+}
+/** Reading or closing the highlight quiets its delivered backlog, not future IDs. */
+function acknowledgeNotification(state, noticeId) {
+	if (!state.eligibleIds.includes(noticeId)) return state;
+	const highlighted = state.activeId === noticeId;
+	return {
+		...state,
+		readIds: [...new Set([...state.readIds, noticeId])],
+		suppressedIds: [...new Set([...state.suppressedIds, ...highlighted ? state.eligibleIds : [noticeId]])],
+		activeId: highlighted ? null : state.activeId
+	};
+}
+/** Explain targeting using the same rules in CI and the Inspector. */
+function matchNotification(notice, context) {
+	if (!context.development) return {
+		matches: false,
+		reasons: ["Development only"]
+	};
+	if (!context.sdkVersion || !(0, semver.valid)(context.sdkVersion) || (0, semver.prerelease)(context.sdkVersion) !== null) return {
+		matches: false,
+		reasons: ["Known stable SDK required"]
+	};
+	const reasons = [];
+	const matches = notice.audiences.some((conditions) => {
+		return Object.entries(conditions).every(([field, expected]) => {
+			const actual = context[field];
+			const matches = field === "sdkVersion" ? actual !== void 0 && (0, semver.valid)(actual) !== null && (0, semver.prerelease)(actual) === null && (0, semver.satisfies)(actual, expected) : actual === expected;
+			if (!matches) reasons.push(`${field} ${actual === void 0 ? "is unknown" : `requires ${expected} (got ${actual})`}`);
+			return matches;
+		});
+	});
+	return {
+		matches,
+		reasons: matches ? [] : reasons
+	};
+}
+
+//#endregion
+exports.acknowledgeNotification = acknowledgeNotification;
+exports.compareNotifications = compareNotifications;
+exports.emptyNotificationState = emptyNotificationState;
+exports.parseNotificationFeed = parseNotificationFeed;
+exports.parseNotificationState = parseNotificationState;
+exports.reconcileNotifications = reconcileNotifications;
+//# sourceMappingURL=notifications.cjs.map

package/dist/lib/notifications.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.cjs","names":[],"sources":["../../src/lib/notifications.ts"],"sourcesContent":["import { satisfies, valid, validRange, prerelease } from \"semver\";\n\n/** Versioned CDN notification contract. Keep the Intelligence copy and fixtures aligned. */\nexport type NotificationFramework = \"react\" | \"vue\" | \"angular\";\nexport type NotificationPriority = \"Low\" | \"Normal\" | \"High\" | \"Urgent\";\nexport interface NotificationConditions {\n  framework?: NotificationFramework;\n  sdkVersion?: string;\n  intelligence?: \"enabled\" | \"disabled\";\n  deployment?: \"managed\" | \"self-hosted\";\n  plan?: string;\n}\nexport interface CohortNotification {\n  id: string;\n  title: string;\n  body: string;\n  publishedAt: string;\n  audiences: NotificationConditions[];\n  priority: NotificationPriority;\n  priorityOverride?: number;\n}\nexport interface NotificationFeed {\n  schemaVersion: 1;\n  notifications: CohortNotification[];\n}\nexport interface NotificationContext extends Omit<\n  NotificationConditions,\n  \"sdkVersion\"\n> {\n  development: boolean;\n  sdkVersion?: string;\n}\nexport interface NotificationState {\n  schemaVersion: 1;\n  eligibleIds: string[];\n  readIds: string[];\n  suppressedIds: string[];\n  activeId: string | null;\n}\nexport function emptyNotificationState(): NotificationState {\n  return {\n    schemaVersion: 1,\n    eligibleIds: [],\n    readIds: [],\n    suppressedIds: [],\n    activeId: null,\n  };\n}\nconst priorities: Record<NotificationPriority, number> = {\n  Low: 10,\n  Normal: 20,\n  High: 30,\n  Urgent: 40,\n};\nconst conditionValues: Record<string, readonly string[]> = {\n  framework: [\"react\", \"vue\", \"angular\"],\n  intelligence: [\"enabled\", \"disabled\"],\n  deployment: [\"managed\", \"self-hosted\"],\n};\nfunction record(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction onlyKeys(value: Record<string, unknown>, keys: string[]): boolean {\n  return Object.keys(value).every((key) => keys.includes(key));\n}\nfunction text(value: unknown, max = 256): value is string {\n  return (\n    typeof value === \"string\" && value.trim().length > 0 && value.length <= max\n  );\n}\nexport function isNotificationId(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(\n      value,\n    )\n  );\n}\nfunction ids(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) &&\n    value.every(isNotificationId) &&\n    new Set(value).size === value.length\n  );\n}\n/** Validate authored conditions; unsupported predicates cannot broaden the audience. */\nexport function validNotificationConditions(\n  value: unknown,\n): value is NotificationConditions {\n  if (!record(value)) return false;\n  if (value.sdkVersion !== undefined && value.framework === undefined)\n    return false;\n  return Object.entries(value).every(([key, expected]) => {\n    if (!text(expected)) return false;\n    if (key === \"sdkVersion\") return validRange(expected) !== null;\n    if (key === \"plan\") return /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(expected);\n    return (\n      Object.prototype.hasOwnProperty.call(conditionValues, key) &&\n      (conditionValues[key]?.includes(expected) ?? false)\n    );\n  });\n}\n/** Parse the public envelope. Any invalid entry rejects the whole feed. */\nexport function parseNotificationFeed(value: unknown): NotificationFeed | null {\n  if (\n    !record(value) ||\n    !onlyKeys(value, [\"schemaVersion\", \"notifications\"]) ||\n    value.schemaVersion !== 1\n  )\n    return null;\n  if (!Array.isArray(value.notifications) || value.notifications.length > 100)\n    return null;\n  const notifications: CohortNotification[] = [];\n  for (const notice of value.notifications) {\n    if (\n      !record(notice) ||\n      !onlyKeys(notice, [\n        \"id\",\n        \"title\",\n        \"body\",\n        \"publishedAt\",\n        \"audiences\",\n        \"priority\",\n        \"priorityOverride\",\n      ])\n    )\n      return null;\n    if (\n      !isNotificationId(notice.id) ||\n      !text(notice.title) ||\n      !text(notice.body, 100_000) ||\n      !text(notice.publishedAt)\n    )\n      return null;\n    if (\n      !/^\\d{4}-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$/.test(notice.publishedAt) ||\n      !Number.isFinite(Date.parse(notice.publishedAt)) ||\n      new Date(notice.publishedAt).toISOString() !== notice.publishedAt\n    )\n      return null;\n    if (\n      !Array.isArray(notice.audiences) ||\n      !notice.audiences.length ||\n      notice.audiences.length > 100 ||\n      !notice.audiences.every(validNotificationConditions)\n    )\n      return null;\n    if (\n      !text(notice.priority) ||\n      !Object.prototype.hasOwnProperty.call(priorities, notice.priority)\n    )\n      return null;\n    if (\n      notice.priorityOverride !== undefined &&\n      (typeof notice.priorityOverride !== \"number\" ||\n        !Number.isSafeInteger(notice.priorityOverride) ||\n        notice.priorityOverride < 0)\n    )\n      return null;\n    if (notifications.some((n) => n.id === notice.id)) return null;\n    notifications.push({\n      id: notice.id,\n      title: notice.title,\n      body: notice.body,\n      publishedAt: notice.publishedAt,\n      audiences: notice.audiences,\n      priority: notice.priority as NotificationPriority,\n      ...(notice.priorityOverride === undefined\n        ? {}\n        : { priorityOverride: notice.priorityOverride }),\n    });\n  }\n  return { schemaVersion: 1, notifications };\n}\n/** Ignore malformed or incompatible browser state. */\nexport function parseNotificationState(\n  value: unknown,\n): NotificationState | null {\n  if (\n    !record(value) ||\n    value.schemaVersion !== 1 ||\n    !ids(value.eligibleIds) ||\n    !ids(value.readIds) ||\n    !ids(value.suppressedIds) ||\n    (value.activeId !== null && !isNotificationId(value.activeId))\n  )\n    return null;\n  return {\n    schemaVersion: 1,\n    eligibleIds: value.eligibleIds,\n    readIds: value.readIds,\n    suppressedIds: value.suppressedIds,\n    activeId: value.activeId,\n  };\n}\n/** Internal priority never becomes a developer-facing badge. */\nexport function notificationPriority(notice: CohortNotification): number {\n  return notice.priorityOverride ?? priorities[notice.priority];\n}\n/** Stable ordering used by authoring reports and first-time selection. */\nexport function compareNotifications(\n  a: CohortNotification,\n  b: CohortNotification,\n): number {\n  return (\n    notificationPriority(b) - notificationPriority(a) ||\n    Date.parse(b.publishedAt) - Date.parse(a.publishedAt) ||\n    (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)\n  );\n}\n/** Refresh eligibility without promoting the previously delivered backlog. */\nexport function reconcileNotifications(\n  state: NotificationState,\n  feed: NotificationFeed,\n  context: NotificationContext,\n): NotificationState {\n  const eligible = feed.notifications.filter(\n    (n) => matchNotification(n, context).matches,\n  );\n  const quiet = (n: CohortNotification) =>\n    state.readIds.includes(n.id) || state.suppressedIds.includes(n.id);\n  const active =\n    eligible.find((n) => n.id === state.activeId && !quiet(n)) ??\n    feed.notifications.find(\n      (n) =>\n        n.id === state.activeId &&\n        !quiet(n) &&\n        n.audiences.some((conditions) => {\n          const entries = Object.entries(conditions);\n          if (\n            !entries.some(\n              ([key]) =>\n                context[key as keyof NotificationConditions] === undefined,\n            )\n          )\n            return false;\n          const known = Object.fromEntries(\n            entries.filter(\n              ([key]) =>\n                context[key as keyof NotificationConditions] !== undefined,\n            ),\n          );\n          return matchNotification({ ...n, audiences: [known] }, context)\n            .matches;\n        }),\n    );\n  const newcomer = eligible\n    .filter((n) => !quiet(n) && !state.eligibleIds.includes(n.id))\n    .sort(compareNotifications)[0];\n  const winner =\n    active &&\n    (!newcomer ||\n      notificationPriority(active) >= notificationPriority(newcomer))\n      ? active\n      : newcomer;\n  return {\n    ...state,\n    eligibleIds: eligible.map((n) => n.id),\n    activeId: winner?.id ?? null,\n  };\n}\n/** Reading or closing the highlight quiets its delivered backlog, not future IDs. */\nexport function acknowledgeNotification(\n  state: NotificationState,\n  noticeId: string,\n): NotificationState {\n  if (!state.eligibleIds.includes(noticeId)) return state;\n  const highlighted = state.activeId === noticeId;\n  return {\n    ...state,\n    readIds: [...new Set([...state.readIds, noticeId])],\n    suppressedIds: [\n      ...new Set([\n        ...state.suppressedIds,\n        ...(highlighted ? state.eligibleIds : [noticeId]),\n      ]),\n    ],\n    activeId: highlighted ? null : state.activeId,\n  };\n}\n/** Explain targeting using the same rules in CI and the Inspector. */\nexport function matchNotification(\n  notice: CohortNotification,\n  context: NotificationContext,\n): { matches: boolean; reasons: string[] } {\n  if (!context.development)\n    return { matches: false, reasons: [\"Development only\"] };\n  if (\n    !context.sdkVersion ||\n    !valid(context.sdkVersion) ||\n    prerelease(context.sdkVersion) !== null\n  )\n    return {\n      matches: false,\n      reasons: [\"Known stable SDK required\"],\n    };\n  const reasons: string[] = [];\n  const matches = notice.audiences.some((conditions) => {\n    return Object.entries(conditions).every(([field, expected]) => {\n      const actual = context[field as keyof NotificationConditions];\n      const matches =\n        field === \"sdkVersion\"\n          ? actual !== undefined &&\n            valid(actual) !== null &&\n            prerelease(actual) === null &&\n            satisfies(actual, expected)\n          : actual === expected;\n      if (!matches)\n        reasons.push(\n          `${field} ${actual === undefined ? \"is unknown\" : `requires ${expected} (got ${actual})`}`,\n        );\n      return matches;\n    });\n  });\n  return {\n    matches,\n    reasons: matches ? [] : reasons,\n  };\n}\n"],"mappings":";;;AAuCA,SAAgB,yBAA4C;AAC1D,QAAO;EACL,eAAe;EACf,aAAa,EAAE;EACf,SAAS,EAAE;EACX,eAAe,EAAE;EACjB,UAAU;EACX;;AAEH,MAAM,aAAmD;CACvD,KAAK;CACL,QAAQ;CACR,MAAM;CACN,QAAQ;CACT;AACD,MAAM,kBAAqD;CACzD,WAAW;EAAC;EAAS;EAAO;EAAU;CACtC,cAAc,CAAC,WAAW,WAAW;CACrC,YAAY,CAAC,WAAW,cAAc;CACvC;AACD,SAAS,OAAO,OAAkD;AAChE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM;;AAE7E,SAAS,SAAS,OAAgC,MAAyB;AACzE,QAAO,OAAO,KAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC;;AAE9D,SAAS,KAAK,OAAgB,MAAM,KAAsB;AACxD,QACE,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,SAAS,KAAK,MAAM,UAAU;;AAG5E,SAAgB,iBAAiB,OAAiC;AAChE,QACE,OAAO,UAAU,YACjB,6EAA6E,KAC3E,MACD;;AAGL,SAAS,IAAI,OAAmC;AAC9C,QACE,MAAM,QAAQ,MAAM,IACpB,MAAM,MAAM,iBAAiB,IAC7B,IAAI,IAAI,MAAM,CAAC,SAAS,MAAM;;;AAIlC,SAAgB,4BACd,OACiC;AACjC,KAAI,CAAC,OAAO,MAAM,CAAE,QAAO;AAC3B,KAAI,MAAM,eAAe,UAAa,MAAM,cAAc,OACxD,QAAO;AACT,QAAO,OAAO,QAAQ,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc;AACtD,MAAI,CAAC,KAAK,SAAS,CAAE,QAAO;AAC5B,MAAI,QAAQ,aAAc,+BAAkB,SAAS,KAAK;AAC1D,MAAI,QAAQ,OAAQ,QAAO,6BAA6B,KAAK,SAAS;AACtE,SACE,OAAO,UAAU,eAAe,KAAK,iBAAiB,IAAI,KACzD,gBAAgB,MAAM,SAAS,SAAS,IAAI;GAE/C;;;AAGJ,SAAgB,sBAAsB,OAAyC;AAC7E,KACE,CAAC,OAAO,MAAM,IACd,CAAC,SAAS,OAAO,CAAC,iBAAiB,gBAAgB,CAAC,IACpD,MAAM,kBAAkB,EAExB,QAAO;AACT,KAAI,CAAC,MAAM,QAAQ,MAAM,cAAc,IAAI,MAAM,cAAc,SAAS,IACtE,QAAO;CACT,MAAM,gBAAsC,EAAE;AAC9C,MAAK,MAAM,UAAU,MAAM,eAAe;AACxC,MACE,CAAC,OAAO,OAAO,IACf,CAAC,SAAS,QAAQ;GAChB;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,CAEF,QAAO;AACT,MACE,CAAC,iBAAiB,OAAO,GAAG,IAC5B,CAAC,KAAK,OAAO,MAAM,IACnB,CAAC,KAAK,OAAO,MAAM,IAAQ,IAC3B,CAAC,KAAK,OAAO,YAAY,CAEzB,QAAO;AACT,MACE,CAAC,2CAA2C,KAAK,OAAO,YAAY,IACpE,CAAC,OAAO,SAAS,KAAK,MAAM,OAAO,YAAY,CAAC,IAChD,IAAI,KAAK,OAAO,YAAY,CAAC,aAAa,KAAK,OAAO,YAEtD,QAAO;AACT,MACE,CAAC,MAAM,QAAQ,OAAO,UAAU,IAChC,CAAC,OAAO,UAAU,UAClB,OAAO,UAAU,SAAS,OAC1B,CAAC,OAAO,UAAU,MAAM,4BAA4B,CAEpD,QAAO;AACT,MACE,CAAC,KAAK,OAAO,SAAS,IACtB,CAAC,OAAO,UAAU,eAAe,KAAK,YAAY,OAAO,SAAS,CAElE,QAAO;AACT,MACE,OAAO,qBAAqB,WAC3B,OAAO,OAAO,qBAAqB,YAClC,CAAC,OAAO,cAAc,OAAO,iBAAiB,IAC9C,OAAO,mBAAmB,GAE5B,QAAO;AACT,MAAI,cAAc,MAAM,MAAM,EAAE,OAAO,OAAO,GAAG,CAAE,QAAO;AAC1D,gBAAc,KAAK;GACjB,IAAI,OAAO;GACX,OAAO,OAAO;GACd,MAAM,OAAO;GACb,aAAa,OAAO;GACpB,WAAW,OAAO;GAClB,UAAU,OAAO;GACjB,GAAI,OAAO,qBAAqB,SAC5B,EAAE,GACF,EAAE,kBAAkB,OAAO,kBAAkB;GAClD,CAAC;;AAEJ,QAAO;EAAE,eAAe;EAAG;EAAe;;;AAG5C,SAAgB,uBACd,OAC0B;AAC1B,KACE,CAAC,OAAO,MAAM,IACd,MAAM,kBAAkB,KACxB,CAAC,IAAI,MAAM,YAAY,IACvB,CAAC,IAAI,MAAM,QAAQ,IACnB,CAAC,IAAI,MAAM,cAAc,IACxB,MAAM,aAAa,QAAQ,CAAC,iBAAiB,MAAM,SAAS,CAE7D,QAAO;AACT,QAAO;EACL,eAAe;EACf,aAAa,MAAM;EACnB,SAAS,MAAM;EACf,eAAe,MAAM;EACrB,UAAU,MAAM;EACjB;;;AAGH,SAAgB,qBAAqB,QAAoC;AACvE,QAAO,OAAO,oBAAoB,WAAW,OAAO;;;AAGtD,SAAgB,qBACd,GACA,GACQ;AACR,QACE,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,IACjD,KAAK,MAAM,EAAE,YAAY,GAAG,KAAK,MAAM,EAAE,YAAY,KACpD,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI;;;AAI1C,SAAgB,uBACd,OACA,MACA,SACmB;CACnB,MAAM,WAAW,KAAK,cAAc,QACjC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QACtC;CACD,MAAM,SAAS,MACb,MAAM,QAAQ,SAAS,EAAE,GAAG,IAAI,MAAM,cAAc,SAAS,EAAE,GAAG;CACpE,MAAM,SACJ,SAAS,MAAM,MAAM,EAAE,OAAO,MAAM,YAAY,CAAC,MAAM,EAAE,CAAC,IAC1D,KAAK,cAAc,MAChB,MACC,EAAE,OAAO,MAAM,YACf,CAAC,MAAM,EAAE,IACT,EAAE,UAAU,MAAM,eAAe;EAC/B,MAAM,UAAU,OAAO,QAAQ,WAAW;AAC1C,MACE,CAAC,QAAQ,MACN,CAAC,SACA,QAAQ,SAAyC,OACpD,CAED,QAAO;EACT,MAAM,QAAQ,OAAO,YACnB,QAAQ,QACL,CAAC,SACA,QAAQ,SAAyC,OACpD,CACF;AACD,SAAO,kBAAkB;GAAE,GAAG;GAAG,WAAW,CAAC,MAAM;GAAE,EAAE,QAAQ,CAC5D;GACH,CACL;CACH,MAAM,WAAW,SACd,QAAQ,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,YAAY,SAAS,EAAE,GAAG,CAAC,CAC7D,KAAK,qBAAqB,CAAC;CAC9B,MAAM,SACJ,WACC,CAAC,YACA,qBAAqB,OAAO,IAAI,qBAAqB,SAAS,IAC5D,SACA;AACN,QAAO;EACL,GAAG;EACH,aAAa,SAAS,KAAK,MAAM,EAAE,GAAG;EACtC,UAAU,QAAQ,MAAM;EACzB;;;AAGH,SAAgB,wBACd,OACA,UACmB;AACnB,KAAI,CAAC,MAAM,YAAY,SAAS,SAAS,CAAE,QAAO;CAClD,MAAM,cAAc,MAAM,aAAa;AACvC,QAAO;EACL,GAAG;EACH,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,MAAM,SAAS,SAAS,CAAC,CAAC;EACnD,eAAe,CACb,GAAG,IAAI,IAAI,CACT,GAAG,MAAM,eACT,GAAI,cAAc,MAAM,cAAc,CAAC,SAAS,CACjD,CAAC,CACH;EACD,UAAU,cAAc,OAAO,MAAM;EACtC;;;AAGH,SAAgB,kBACd,QACA,SACyC;AACzC,KAAI,CAAC,QAAQ,YACX,QAAO;EAAE,SAAS;EAAO,SAAS,CAAC,mBAAmB;EAAE;AAC1D,KACE,CAAC,QAAQ,cACT,mBAAO,QAAQ,WAAW,2BACf,QAAQ,WAAW,KAAK,KAEnC,QAAO;EACL,SAAS;EACT,SAAS,CAAC,4BAA4B;EACvC;CACH,MAAM,UAAoB,EAAE;CAC5B,MAAM,UAAU,OAAO,UAAU,MAAM,eAAe;AACpD,SAAO,OAAO,QAAQ,WAAW,CAAC,OAAO,CAAC,OAAO,cAAc;GAC7D,MAAM,SAAS,QAAQ;GACvB,MAAM,UACJ,UAAU,eACN,WAAW,4BACL,OAAO,KAAK,+BACP,OAAO,KAAK,8BACb,QAAQ,SAAS,GAC3B,WAAW;AACjB,OAAI,CAAC,QACH,SAAQ,KACN,GAAG,MAAM,GAAG,WAAW,SAAY,eAAe,YAAY,SAAS,QAAQ,OAAO,KACvF;AACH,UAAO;IACP;GACF;AACF,QAAO;EACL;EACA,SAAS,UAAU,EAAE,GAAG;EACzB"}

package/dist/lib/notifications.d.cts

@@ -0,0 +1,17 @@
+//#region src/lib/notifications.d.ts
+/** Versioned CDN notification contract. Keep the Intelligence copy and fixtures aligned. */
+type NotificationFramework = "react" | "vue" | "angular";
+interface NotificationConditions {
+  framework?: NotificationFramework;
+  sdkVersion?: string;
+  intelligence?: "enabled" | "disabled";
+  deployment?: "managed" | "self-hosted";
+  plan?: string;
+}
+interface NotificationContext extends Omit<NotificationConditions, "sdkVersion"> {
+  development: boolean;
+  sdkVersion?: string;
+}
+//#endregion
+export { NotificationContext };
+//# sourceMappingURL=notifications.d.cts.map

package/dist/lib/notifications.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.cts","names":[],"sources":["../../src/lib/notifications.ts"],"mappings":";;KAGY,qBAAA;AAAA,UAEK,sBAAA;EACf,SAAA,GAAY,qBAAA;EACZ,UAAA;EACA,YAAA;EACA,UAAA;EACA,IAAA;AAAA;AAAA,UAee,mBAAA,SAA4B,IAAA,CAC3C,sBAAA;EAGA,WAAA;EACA,UAAA;AAAA"}

package/dist/lib/notifications.d.mts

@@ -0,0 +1,17 @@
+//#region src/lib/notifications.d.ts
+/** Versioned CDN notification contract. Keep the Intelligence copy and fixtures aligned. */
+type NotificationFramework = "react" | "vue" | "angular";
+interface NotificationConditions {
+  framework?: NotificationFramework;
+  sdkVersion?: string;
+  intelligence?: "enabled" | "disabled";
+  deployment?: "managed" | "self-hosted";
+  plan?: string;
+}
+interface NotificationContext extends Omit<NotificationConditions, "sdkVersion"> {
+  development: boolean;
+  sdkVersion?: string;
+}
+//#endregion
+export { NotificationContext };
+//# sourceMappingURL=notifications.d.mts.map

package/dist/lib/notifications.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.mts","names":[],"sources":["../../src/lib/notifications.ts"],"mappings":";;KAGY,qBAAA;AAAA,UAEK,sBAAA;EACf,SAAA,GAAY,qBAAA;EACZ,UAAA;EACA,YAAA;EACA,UAAA;EACA,IAAA;AAAA;AAAA,UAee,mBAAA,SAA4B,IAAA,CAC3C,sBAAA;EAGA,WAAA;EACA,UAAA;AAAA"}

package/dist/lib/notifications.mjs

@@ -0,0 +1,168 @@
+import { prerelease, satisfies, valid, validRange } from "semver";
+
+//#region src/lib/notifications.ts
+function emptyNotificationState() {
+	return {
+		schemaVersion: 1,
+		eligibleIds: [],
+		readIds: [],
+		suppressedIds: [],
+		activeId: null
+	};
+}
+const priorities = {
+	Low: 10,
+	Normal: 20,
+	High: 30,
+	Urgent: 40
+};
+const conditionValues = {
+	framework: [
+		"react",
+		"vue",
+		"angular"
+	],
+	intelligence: ["enabled", "disabled"],
+	deployment: ["managed", "self-hosted"]
+};
+function record(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function onlyKeys(value, keys) {
+	return Object.keys(value).every((key) => keys.includes(key));
+}
+function text(value, max = 256) {
+	return typeof value === "string" && value.trim().length > 0 && value.length <= max;
+}
+function isNotificationId(value) {
+	return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+}
+function ids(value) {
+	return Array.isArray(value) && value.every(isNotificationId) && new Set(value).size === value.length;
+}
+/** Validate authored conditions; unsupported predicates cannot broaden the audience. */
+function validNotificationConditions(value) {
+	if (!record(value)) return false;
+	if (value.sdkVersion !== void 0 && value.framework === void 0) return false;
+	return Object.entries(value).every(([key, expected]) => {
+		if (!text(expected)) return false;
+		if (key === "sdkVersion") return validRange(expected) !== null;
+		if (key === "plan") return /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(expected);
+		return Object.prototype.hasOwnProperty.call(conditionValues, key) && (conditionValues[key]?.includes(expected) ?? false);
+	});
+}
+/** Parse the public envelope. Any invalid entry rejects the whole feed. */
+function parseNotificationFeed(value) {
+	if (!record(value) || !onlyKeys(value, ["schemaVersion", "notifications"]) || value.schemaVersion !== 1) return null;
+	if (!Array.isArray(value.notifications) || value.notifications.length > 100) return null;
+	const notifications = [];
+	for (const notice of value.notifications) {
+		if (!record(notice) || !onlyKeys(notice, [
+			"id",
+			"title",
+			"body",
+			"publishedAt",
+			"audiences",
+			"priority",
+			"priorityOverride"
+		])) return null;
+		if (!isNotificationId(notice.id) || !text(notice.title) || !text(notice.body, 1e5) || !text(notice.publishedAt)) return null;
+		if (!/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(notice.publishedAt) || !Number.isFinite(Date.parse(notice.publishedAt)) || new Date(notice.publishedAt).toISOString() !== notice.publishedAt) return null;
+		if (!Array.isArray(notice.audiences) || !notice.audiences.length || notice.audiences.length > 100 || !notice.audiences.every(validNotificationConditions)) return null;
+		if (!text(notice.priority) || !Object.prototype.hasOwnProperty.call(priorities, notice.priority)) return null;
+		if (notice.priorityOverride !== void 0 && (typeof notice.priorityOverride !== "number" || !Number.isSafeInteger(notice.priorityOverride) || notice.priorityOverride < 0)) return null;
+		if (notifications.some((n) => n.id === notice.id)) return null;
+		notifications.push({
+			id: notice.id,
+			title: notice.title,
+			body: notice.body,
+			publishedAt: notice.publishedAt,
+			audiences: notice.audiences,
+			priority: notice.priority,
+			...notice.priorityOverride === void 0 ? {} : { priorityOverride: notice.priorityOverride }
+		});
+	}
+	return {
+		schemaVersion: 1,
+		notifications
+	};
+}
+/** Ignore malformed or incompatible browser state. */
+function parseNotificationState(value) {
+	if (!record(value) || value.schemaVersion !== 1 || !ids(value.eligibleIds) || !ids(value.readIds) || !ids(value.suppressedIds) || value.activeId !== null && !isNotificationId(value.activeId)) return null;
+	return {
+		schemaVersion: 1,
+		eligibleIds: value.eligibleIds,
+		readIds: value.readIds,
+		suppressedIds: value.suppressedIds,
+		activeId: value.activeId
+	};
+}
+/** Internal priority never becomes a developer-facing badge. */
+function notificationPriority(notice) {
+	return notice.priorityOverride ?? priorities[notice.priority];
+}
+/** Stable ordering used by authoring reports and first-time selection. */
+function compareNotifications(a, b) {
+	return notificationPriority(b) - notificationPriority(a) || Date.parse(b.publishedAt) - Date.parse(a.publishedAt) || (a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+/** Refresh eligibility without promoting the previously delivered backlog. */
+function reconcileNotifications(state, feed, context) {
+	const eligible = feed.notifications.filter((n) => matchNotification(n, context).matches);
+	const quiet = (n) => state.readIds.includes(n.id) || state.suppressedIds.includes(n.id);
+	const active = eligible.find((n) => n.id === state.activeId && !quiet(n)) ?? feed.notifications.find((n) => n.id === state.activeId && !quiet(n) && n.audiences.some((conditions) => {
+		const entries = Object.entries(conditions);
+		if (!entries.some(([key]) => context[key] === void 0)) return false;
+		const known = Object.fromEntries(entries.filter(([key]) => context[key] !== void 0));
+		return matchNotification({
+			...n,
+			audiences: [known]
+		}, context).matches;
+	}));
+	const newcomer = eligible.filter((n) => !quiet(n) && !state.eligibleIds.includes(n.id)).sort(compareNotifications)[0];
+	const winner = active && (!newcomer || notificationPriority(active) >= notificationPriority(newcomer)) ? active : newcomer;
+	return {
+		...state,
+		eligibleIds: eligible.map((n) => n.id),
+		activeId: winner?.id ?? null
+	};
+}
+/** Reading or closing the highlight quiets its delivered backlog, not future IDs. */
+function acknowledgeNotification(state, noticeId) {
+	if (!state.eligibleIds.includes(noticeId)) return state;
+	const highlighted = state.activeId === noticeId;
+	return {
+		...state,
+		readIds: [...new Set([...state.readIds, noticeId])],
+		suppressedIds: [...new Set([...state.suppressedIds, ...highlighted ? state.eligibleIds : [noticeId]])],
+		activeId: highlighted ? null : state.activeId
+	};
+}
+/** Explain targeting using the same rules in CI and the Inspector. */
+function matchNotification(notice, context) {
+	if (!context.development) return {
+		matches: false,
+		reasons: ["Development only"]
+	};
+	if (!context.sdkVersion || !valid(context.sdkVersion) || prerelease(context.sdkVersion) !== null) return {
+		matches: false,
+		reasons: ["Known stable SDK required"]
+	};
+	const reasons = [];
+	const matches = notice.audiences.some((conditions) => {
+		return Object.entries(conditions).every(([field, expected]) => {
+			const actual = context[field];
+			const matches = field === "sdkVersion" ? actual !== void 0 && valid(actual) !== null && prerelease(actual) === null && satisfies(actual, expected) : actual === expected;
+			if (!matches) reasons.push(`${field} ${actual === void 0 ? "is unknown" : `requires ${expected} (got ${actual})`}`);
+			return matches;
+		});
+	});
+	return {
+		matches,
+		reasons: matches ? [] : reasons
+	};
+}
+
+//#endregion
+export { acknowledgeNotification, compareNotifications, emptyNotificationState, parseNotificationFeed, parseNotificationState, reconcileNotifications };
+//# sourceMappingURL=notifications.mjs.map

package/dist/lib/notifications.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.mjs","names":[],"sources":["../../src/lib/notifications.ts"],"sourcesContent":["import { satisfies, valid, validRange, prerelease } from \"semver\";\n\n/** Versioned CDN notification contract. Keep the Intelligence copy and fixtures aligned. */\nexport type NotificationFramework = \"react\" | \"vue\" | \"angular\";\nexport type NotificationPriority = \"Low\" | \"Normal\" | \"High\" | \"Urgent\";\nexport interface NotificationConditions {\n  framework?: NotificationFramework;\n  sdkVersion?: string;\n  intelligence?: \"enabled\" | \"disabled\";\n  deployment?: \"managed\" | \"self-hosted\";\n  plan?: string;\n}\nexport interface CohortNotification {\n  id: string;\n  title: string;\n  body: string;\n  publishedAt: string;\n  audiences: NotificationConditions[];\n  priority: NotificationPriority;\n  priorityOverride?: number;\n}\nexport interface NotificationFeed {\n  schemaVersion: 1;\n  notifications: CohortNotification[];\n}\nexport interface NotificationContext extends Omit<\n  NotificationConditions,\n  \"sdkVersion\"\n> {\n  development: boolean;\n  sdkVersion?: string;\n}\nexport interface NotificationState {\n  schemaVersion: 1;\n  eligibleIds: string[];\n  readIds: string[];\n  suppressedIds: string[];\n  activeId: string | null;\n}\nexport function emptyNotificationState(): NotificationState {\n  return {\n    schemaVersion: 1,\n    eligibleIds: [],\n    readIds: [],\n    suppressedIds: [],\n    activeId: null,\n  };\n}\nconst priorities: Record<NotificationPriority, number> = {\n  Low: 10,\n  Normal: 20,\n  High: 30,\n  Urgent: 40,\n};\nconst conditionValues: Record<string, readonly string[]> = {\n  framework: [\"react\", \"vue\", \"angular\"],\n  intelligence: [\"enabled\", \"disabled\"],\n  deployment: [\"managed\", \"self-hosted\"],\n};\nfunction record(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\nfunction onlyKeys(value: Record<string, unknown>, keys: string[]): boolean {\n  return Object.keys(value).every((key) => keys.includes(key));\n}\nfunction text(value: unknown, max = 256): value is string {\n  return (\n    typeof value === \"string\" && value.trim().length > 0 && value.length <= max\n  );\n}\nexport function isNotificationId(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(\n      value,\n    )\n  );\n}\nfunction ids(value: unknown): value is string[] {\n  return (\n    Array.isArray(value) &&\n    value.every(isNotificationId) &&\n    new Set(value).size === value.length\n  );\n}\n/** Validate authored conditions; unsupported predicates cannot broaden the audience. */\nexport function validNotificationConditions(\n  value: unknown,\n): value is NotificationConditions {\n  if (!record(value)) return false;\n  if (value.sdkVersion !== undefined && value.framework === undefined)\n    return false;\n  return Object.entries(value).every(([key, expected]) => {\n    if (!text(expected)) return false;\n    if (key === \"sdkVersion\") return validRange(expected) !== null;\n    if (key === \"plan\") return /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(expected);\n    return (\n      Object.prototype.hasOwnProperty.call(conditionValues, key) &&\n      (conditionValues[key]?.includes(expected) ?? false)\n    );\n  });\n}\n/** Parse the public envelope. Any invalid entry rejects the whole feed. */\nexport function parseNotificationFeed(value: unknown): NotificationFeed | null {\n  if (\n    !record(value) ||\n    !onlyKeys(value, [\"schemaVersion\", \"notifications\"]) ||\n    value.schemaVersion !== 1\n  )\n    return null;\n  if (!Array.isArray(value.notifications) || value.notifications.length > 100)\n    return null;\n  const notifications: CohortNotification[] = [];\n  for (const notice of value.notifications) {\n    if (\n      !record(notice) ||\n      !onlyKeys(notice, [\n        \"id\",\n        \"title\",\n        \"body\",\n        \"publishedAt\",\n        \"audiences\",\n        \"priority\",\n        \"priorityOverride\",\n      ])\n    )\n      return null;\n    if (\n      !isNotificationId(notice.id) ||\n      !text(notice.title) ||\n      !text(notice.body, 100_000) ||\n      !text(notice.publishedAt)\n    )\n      return null;\n    if (\n      !/^\\d{4}-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\d\\.\\d{3}Z$/.test(notice.publishedAt) ||\n      !Number.isFinite(Date.parse(notice.publishedAt)) ||\n      new Date(notice.publishedAt).toISOString() !== notice.publishedAt\n    )\n      return null;\n    if (\n      !Array.isArray(notice.audiences) ||\n      !notice.audiences.length ||\n      notice.audiences.length > 100 ||\n      !notice.audiences.every(validNotificationConditions)\n    )\n      return null;\n    if (\n      !text(notice.priority) ||\n      !Object.prototype.hasOwnProperty.call(priorities, notice.priority)\n    )\n      return null;\n    if (\n      notice.priorityOverride !== undefined &&\n      (typeof notice.priorityOverride !== \"number\" ||\n        !Number.isSafeInteger(notice.priorityOverride) ||\n        notice.priorityOverride < 0)\n    )\n      return null;\n    if (notifications.some((n) => n.id === notice.id)) return null;\n    notifications.push({\n      id: notice.id,\n      title: notice.title,\n      body: notice.body,\n      publishedAt: notice.publishedAt,\n      audiences: notice.audiences,\n      priority: notice.priority as NotificationPriority,\n      ...(notice.priorityOverride === undefined\n        ? {}\n        : { priorityOverride: notice.priorityOverride }),\n    });\n  }\n  return { schemaVersion: 1, notifications };\n}\n/** Ignore malformed or incompatible browser state. */\nexport function parseNotificationState(\n  value: unknown,\n): NotificationState | null {\n  if (\n    !record(value) ||\n    value.schemaVersion !== 1 ||\n    !ids(value.eligibleIds) ||\n    !ids(value.readIds) ||\n    !ids(value.suppressedIds) ||\n    (value.activeId !== null && !isNotificationId(value.activeId))\n  )\n    return null;\n  return {\n    schemaVersion: 1,\n    eligibleIds: value.eligibleIds,\n    readIds: value.readIds,\n    suppressedIds: value.suppressedIds,\n    activeId: value.activeId,\n  };\n}\n/** Internal priority never becomes a developer-facing badge. */\nexport function notificationPriority(notice: CohortNotification): number {\n  return notice.priorityOverride ?? priorities[notice.priority];\n}\n/** Stable ordering used by authoring reports and first-time selection. */\nexport function compareNotifications(\n  a: CohortNotification,\n  b: CohortNotification,\n): number {\n  return (\n    notificationPriority(b) - notificationPriority(a) ||\n    Date.parse(b.publishedAt) - Date.parse(a.publishedAt) ||\n    (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)\n  );\n}\n/** Refresh eligibility without promoting the previously delivered backlog. */\nexport function reconcileNotifications(\n  state: NotificationState,\n  feed: NotificationFeed,\n  context: NotificationContext,\n): NotificationState {\n  const eligible = feed.notifications.filter(\n    (n) => matchNotification(n, context).matches,\n  );\n  const quiet = (n: CohortNotification) =>\n    state.readIds.includes(n.id) || state.suppressedIds.includes(n.id);\n  const active =\n    eligible.find((n) => n.id === state.activeId && !quiet(n)) ??\n    feed.notifications.find(\n      (n) =>\n        n.id === state.activeId &&\n        !quiet(n) &&\n        n.audiences.some((conditions) => {\n          const entries = Object.entries(conditions);\n          if (\n            !entries.some(\n              ([key]) =>\n                context[key as keyof NotificationConditions] === undefined,\n            )\n          )\n            return false;\n          const known = Object.fromEntries(\n            entries.filter(\n              ([key]) =>\n                context[key as keyof NotificationConditions] !== undefined,\n            ),\n          );\n          return matchNotification({ ...n, audiences: [known] }, context)\n            .matches;\n        }),\n    );\n  const newcomer = eligible\n    .filter((n) => !quiet(n) && !state.eligibleIds.includes(n.id))\n    .sort(compareNotifications)[0];\n  const winner =\n    active &&\n    (!newcomer ||\n      notificationPriority(active) >= notificationPriority(newcomer))\n      ? active\n      : newcomer;\n  return {\n    ...state,\n    eligibleIds: eligible.map((n) => n.id),\n    activeId: winner?.id ?? null,\n  };\n}\n/** Reading or closing the highlight quiets its delivered backlog, not future IDs. */\nexport function acknowledgeNotification(\n  state: NotificationState,\n  noticeId: string,\n): NotificationState {\n  if (!state.eligibleIds.includes(noticeId)) return state;\n  const highlighted = state.activeId === noticeId;\n  return {\n    ...state,\n    readIds: [...new Set([...state.readIds, noticeId])],\n    suppressedIds: [\n      ...new Set([\n        ...state.suppressedIds,\n        ...(highlighted ? state.eligibleIds : [noticeId]),\n      ]),\n    ],\n    activeId: highlighted ? null : state.activeId,\n  };\n}\n/** Explain targeting using the same rules in CI and the Inspector. */\nexport function matchNotification(\n  notice: CohortNotification,\n  context: NotificationContext,\n): { matches: boolean; reasons: string[] } {\n  if (!context.development)\n    return { matches: false, reasons: [\"Development only\"] };\n  if (\n    !context.sdkVersion ||\n    !valid(context.sdkVersion) ||\n    prerelease(context.sdkVersion) !== null\n  )\n    return {\n      matches: false,\n      reasons: [\"Known stable SDK required\"],\n    };\n  const reasons: string[] = [];\n  const matches = notice.audiences.some((conditions) => {\n    return Object.entries(conditions).every(([field, expected]) => {\n      const actual = context[field as keyof NotificationConditions];\n      const matches =\n        field === \"sdkVersion\"\n          ? actual !== undefined &&\n            valid(actual) !== null &&\n            prerelease(actual) === null &&\n            satisfies(actual, expected)\n          : actual === expected;\n      if (!matches)\n        reasons.push(\n          `${field} ${actual === undefined ? \"is unknown\" : `requires ${expected} (got ${actual})`}`,\n        );\n      return matches;\n    });\n  });\n  return {\n    matches,\n    reasons: matches ? [] : reasons,\n  };\n}\n"],"mappings":";;;AAuCA,SAAgB,yBAA4C;AAC1D,QAAO;EACL,eAAe;EACf,aAAa,EAAE;EACf,SAAS,EAAE;EACX,eAAe,EAAE;EACjB,UAAU;EACX;;AAEH,MAAM,aAAmD;CACvD,KAAK;CACL,QAAQ;CACR,MAAM;CACN,QAAQ;CACT;AACD,MAAM,kBAAqD;CACzD,WAAW;EAAC;EAAS;EAAO;EAAU;CACtC,cAAc,CAAC,WAAW,WAAW;CACrC,YAAY,CAAC,WAAW,cAAc;CACvC;AACD,SAAS,OAAO,OAAkD;AAChE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM;;AAE7E,SAAS,SAAS,OAAgC,MAAyB;AACzE,QAAO,OAAO,KAAK,MAAM,CAAC,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC;;AAE9D,SAAS,KAAK,OAAgB,MAAM,KAAsB;AACxD,QACE,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,SAAS,KAAK,MAAM,UAAU;;AAG5E,SAAgB,iBAAiB,OAAiC;AAChE,QACE,OAAO,UAAU,YACjB,6EAA6E,KAC3E,MACD;;AAGL,SAAS,IAAI,OAAmC;AAC9C,QACE,MAAM,QAAQ,MAAM,IACpB,MAAM,MAAM,iBAAiB,IAC7B,IAAI,IAAI,MAAM,CAAC,SAAS,MAAM;;;AAIlC,SAAgB,4BACd,OACiC;AACjC,KAAI,CAAC,OAAO,MAAM,CAAE,QAAO;AAC3B,KAAI,MAAM,eAAe,UAAa,MAAM,cAAc,OACxD,QAAO;AACT,QAAO,OAAO,QAAQ,MAAM,CAAC,OAAO,CAAC,KAAK,cAAc;AACtD,MAAI,CAAC,KAAK,SAAS,CAAE,QAAO;AAC5B,MAAI,QAAQ,aAAc,QAAO,WAAW,SAAS,KAAK;AAC1D,MAAI,QAAQ,OAAQ,QAAO,6BAA6B,KAAK,SAAS;AACtE,SACE,OAAO,UAAU,eAAe,KAAK,iBAAiB,IAAI,KACzD,gBAAgB,MAAM,SAAS,SAAS,IAAI;GAE/C;;;AAGJ,SAAgB,sBAAsB,OAAyC;AAC7E,KACE,CAAC,OAAO,MAAM,IACd,CAAC,SAAS,OAAO,CAAC,iBAAiB,gBAAgB,CAAC,IACpD,MAAM,kBAAkB,EAExB,QAAO;AACT,KAAI,CAAC,MAAM,QAAQ,MAAM,cAAc,IAAI,MAAM,cAAc,SAAS,IACtE,QAAO;CACT,MAAM,gBAAsC,EAAE;AAC9C,MAAK,MAAM,UAAU,MAAM,eAAe;AACxC,MACE,CAAC,OAAO,OAAO,IACf,CAAC,SAAS,QAAQ;GAChB;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,CAEF,QAAO;AACT,MACE,CAAC,iBAAiB,OAAO,GAAG,IAC5B,CAAC,KAAK,OAAO,MAAM,IACnB,CAAC,KAAK,OAAO,MAAM,IAAQ,IAC3B,CAAC,KAAK,OAAO,YAAY,CAEzB,QAAO;AACT,MACE,CAAC,2CAA2C,KAAK,OAAO,YAAY,IACpE,CAAC,OAAO,SAAS,KAAK,MAAM,OAAO,YAAY,CAAC,IAChD,IAAI,KAAK,OAAO,YAAY,CAAC,aAAa,KAAK,OAAO,YAEtD,QAAO;AACT,MACE,CAAC,MAAM,QAAQ,OAAO,UAAU,IAChC,CAAC,OAAO,UAAU,UAClB,OAAO,UAAU,SAAS,OAC1B,CAAC,OAAO,UAAU,MAAM,4BAA4B,CAEpD,QAAO;AACT,MACE,CAAC,KAAK,OAAO,SAAS,IACtB,CAAC,OAAO,UAAU,eAAe,KAAK,YAAY,OAAO,SAAS,CAElE,QAAO;AACT,MACE,OAAO,qBAAqB,WAC3B,OAAO,OAAO,qBAAqB,YAClC,CAAC,OAAO,cAAc,OAAO,iBAAiB,IAC9C,OAAO,mBAAmB,GAE5B,QAAO;AACT,MAAI,cAAc,MAAM,MAAM,EAAE,OAAO,OAAO,GAAG,CAAE,QAAO;AAC1D,gBAAc,KAAK;GACjB,IAAI,OAAO;GACX,OAAO,OAAO;GACd,MAAM,OAAO;GACb,aAAa,OAAO;GACpB,WAAW,OAAO;GAClB,UAAU,OAAO;GACjB,GAAI,OAAO,qBAAqB,SAC5B,EAAE,GACF,EAAE,kBAAkB,OAAO,kBAAkB;GAClD,CAAC;;AAEJ,QAAO;EAAE,eAAe;EAAG;EAAe;;;AAG5C,SAAgB,uBACd,OAC0B;AAC1B,KACE,CAAC,OAAO,MAAM,IACd,MAAM,kBAAkB,KACxB,CAAC,IAAI,MAAM,YAAY,IACvB,CAAC,IAAI,MAAM,QAAQ,IACnB,CAAC,IAAI,MAAM,cAAc,IACxB,MAAM,aAAa,QAAQ,CAAC,iBAAiB,MAAM,SAAS,CAE7D,QAAO;AACT,QAAO;EACL,eAAe;EACf,aAAa,MAAM;EACnB,SAAS,MAAM;EACf,eAAe,MAAM;EACrB,UAAU,MAAM;EACjB;;;AAGH,SAAgB,qBAAqB,QAAoC;AACvE,QAAO,OAAO,oBAAoB,WAAW,OAAO;;;AAGtD,SAAgB,qBACd,GACA,GACQ;AACR,QACE,qBAAqB,EAAE,GAAG,qBAAqB,EAAE,IACjD,KAAK,MAAM,EAAE,YAAY,GAAG,KAAK,MAAM,EAAE,YAAY,KACpD,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI;;;AAI1C,SAAgB,uBACd,OACA,MACA,SACmB;CACnB,MAAM,WAAW,KAAK,cAAc,QACjC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QACtC;CACD,MAAM,SAAS,MACb,MAAM,QAAQ,SAAS,EAAE,GAAG,IAAI,MAAM,cAAc,SAAS,EAAE,GAAG;CACpE,MAAM,SACJ,SAAS,MAAM,MAAM,EAAE,OAAO,MAAM,YAAY,CAAC,MAAM,EAAE,CAAC,IAC1D,KAAK,cAAc,MAChB,MACC,EAAE,OAAO,MAAM,YACf,CAAC,MAAM,EAAE,IACT,EAAE,UAAU,MAAM,eAAe;EAC/B,MAAM,UAAU,OAAO,QAAQ,WAAW;AAC1C,MACE,CAAC,QAAQ,MACN,CAAC,SACA,QAAQ,SAAyC,OACpD,CAED,QAAO;EACT,MAAM,QAAQ,OAAO,YACnB,QAAQ,QACL,CAAC,SACA,QAAQ,SAAyC,OACpD,CACF;AACD,SAAO,kBAAkB;GAAE,GAAG;GAAG,WAAW,CAAC,MAAM;GAAE,EAAE,QAAQ,CAC5D;GACH,CACL;CACH,MAAM,WAAW,SACd,QAAQ,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,YAAY,SAAS,EAAE,GAAG,CAAC,CAC7D,KAAK,qBAAqB,CAAC;CAC9B,MAAM,SACJ,WACC,CAAC,YACA,qBAAqB,OAAO,IAAI,qBAAqB,SAAS,IAC5D,SACA;AACN,QAAO;EACL,GAAG;EACH,aAAa,SAAS,KAAK,MAAM,EAAE,GAAG;EACtC,UAAU,QAAQ,MAAM;EACzB;;;AAGH,SAAgB,wBACd,OACA,UACmB;AACnB,KAAI,CAAC,MAAM,YAAY,SAAS,SAAS,CAAE,QAAO;CAClD,MAAM,cAAc,MAAM,aAAa;AACvC,QAAO;EACL,GAAG;EACH,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,MAAM,SAAS,SAAS,CAAC,CAAC;EACnD,eAAe,CACb,GAAG,IAAI,IAAI,CACT,GAAG,MAAM,eACT,GAAI,cAAc,MAAM,cAAc,CAAC,SAAS,CACjD,CAAC,CACH;EACD,UAAU,cAAc,OAAO,MAAM;EACtC;;;AAGH,SAAgB,kBACd,QACA,SACyC;AACzC,KAAI,CAAC,QAAQ,YACX,QAAO;EAAE,SAAS;EAAO,SAAS,CAAC,mBAAmB;EAAE;AAC1D,KACE,CAAC,QAAQ,cACT,CAAC,MAAM,QAAQ,WAAW,IAC1B,WAAW,QAAQ,WAAW,KAAK,KAEnC,QAAO;EACL,SAAS;EACT,SAAS,CAAC,4BAA4B;EACvC;CACH,MAAM,UAAoB,EAAE;CAC5B,MAAM,UAAU,OAAO,UAAU,MAAM,eAAe;AACpD,SAAO,OAAO,QAAQ,WAAW,CAAC,OAAO,CAAC,OAAO,cAAc;GAC7D,MAAM,SAAS,QAAQ;GACvB,MAAM,UACJ,UAAU,eACN,WAAW,UACX,MAAM,OAAO,KAAK,QAClB,WAAW,OAAO,KAAK,QACvB,UAAU,QAAQ,SAAS,GAC3B,WAAW;AACjB,OAAI,CAAC,QACH,SAAQ,KACN,GAAG,MAAM,GAAG,WAAW,SAAY,eAAe,YAAY,SAAS,QAAQ,OAAO,KACvF;AACH,UAAO;IACP;GACF;AACF,QAAO;EACL;EACA,SAAS,UAAU,EAAE,GAAG;EACzB"}

package/dist/lib/onboarding-prompt.cjs

@@ -13,12 +13,11 @@
 * The CLI resolves `onboard start` against a prompt graph, so the two surfaces
 * must not drift — if the CLI's entry point changes, both change together.
 *
-* Two lines, and deliberately nothing else. It used to open by telling the
-* agent to identify itself and pass the slug as a flag -- two sentences of
-* instruction to a machine, in the one piece of text a human reads, decides on
-* and pastes. The graph asks for the slug itself now, with `onboard identify`,
-* which is the surface that talks to the agent for the rest of the run
-* (Intelligence OSS-1157).
+* One sentence, and deliberately nothing else. It used to carry the `npx`
+* command itself, which put a command line and a telemetry id in the one piece
+* of text a human reads, decides on and pastes. The command now lives in the
+* document the URL serves, with the run id already written into it
+* (PE-216/PE-217).
 *
 * This one stays generic, and so do the docs and Intelligence web-app copies
 * of it (OSS-1150). Those three are entry points for a developer with no
@@ -29,9 +28,8 @@
 * `FEATURE_ONBOARDING_PROMPT_TEMPLATE` below.
 */
 const RUN_ID_PLACEHOLDER = "<run-id>";
-const ONBOARDING_PROMPT_TEMPLATE = `Help me get started with CopilotKit. Run this command and follow the instructions:
-
-npx --yes copilotkit@latest onboard start --run ${RUN_ID_PLACEHOLDER}`;
+const ONBOARDING_PROMPT_ORIGIN = "https://copilotkit.ai";
+const ONBOARDING_PROMPT_TEMPLATE = `Read ${ONBOARDING_PROMPT_ORIGIN}/onboarding-prompts/${RUN_ID_PLACEHOLDER} and help me get set up.`;
 /** Length and alphabet are the CLI's, so a run id copied here resolves there. */
 const RUN_ID_LENGTH = 12;
 /**
@@ -92,15 +90,11 @@ const INTENT_PLACEHOLDER = "<intent>";
 * here would duplicate all of that and then drift from it the next time the
 * underlying API changes.
 *
-* What is left is the caller's own business: identify yourself, run this
-* command, and the standing permission for the session check that the
-* developer granted by copying the prompt.
+* The session-check permission the developer granted by copying this, and the
+* credentials warning beside it, moved with the command into the document the
+* URL serves. They are not dropped.
 */
-const FEATURE_ONBOARDING_PROMPT_TEMPLATE = `Help me set this up in my CopilotKit app. Run this command and follow the instructions:
-
-npx --yes copilotkit@latest onboard start --run ${RUN_ID_PLACEHOLDER} --intent ${INTENT_PLACEHOLDER}
-
-If it requires a CopilotKit CLI session check, you have permission to run it. Never reveal credentials.`;
+const FEATURE_ONBOARDING_PROMPT_TEMPLATE = `Read ${ONBOARDING_PROMPT_ORIGIN}/onboarding-prompts/${RUN_ID_PLACEHOLDER}?intent=${INTENT_PLACEHOLDER} and help me set this up.`;
 /** Bind one run id and one tile's feature outcome into the copied prompt. */
 function createFeatureOnboardingPrompt(serviceId, runId) {
 	return FEATURE_ONBOARDING_PROMPT_TEMPLATE.replace(RUN_ID_PLACEHOLDER, runId).replace(INTENT_PLACEHOLDER, FEATURE_ONBOARDING_INTENT[serviceId]);