@diegoaltoworks/chatter 0.67.0 → 2.0.0

package/dist/personas/index.mjs

@@ -96,7 +96,19 @@ function createPersonaResolver(options = {}) {
       return void 0;
     }
   }
-  function rollPersonaId(contactId) {
+  function endpointPersonaId(endpointId) {
+    if (!endpointId) return null;
+    try {
+      return loadRegistry().endpoints?.[endpointId]?.persona ?? null;
+    } catch {
+      return null;
+    }
+  }
+  function rollPersonaId(key) {
+    const { contactId, endpointId } = typeof key === "string" ? { contactId: key } : key;
+    const boundToEndpoint = endpointPersonaId(endpointId);
+    if (boundToEndpoint) return boundToEndpoint;
+    if (contactId === void 0) return null;
     try {
       const reg = loadRegistry();
       const nowMs = now();
@@ -104,8 +116,8 @@ function createPersonaResolver(options = {}) {
       if (existing && existing.expiresAt > nowMs) {
         return existing.personaId;
       }
-      for (const [key, value] of window) {
-        if (value.expiresAt <= nowMs) window.delete(key);
+      for (const [held, value] of window) {
+        if (value.expiresAt <= nowMs) window.delete(held);
       }
       const contact = reg.contacts?.[contactId];
       let personaId = null;
@@ -153,8 +165,8 @@ function createPersonaResolver(options = {}) {
       return null;
     }
   }
-  function resolvePersonaLayer(contactId) {
-    return personaLayerFor(rollPersonaId(contactId)) ?? personaLayerFor(defaultPersonaId());
+  function resolvePersonaLayer(key) {
+    return personaLayerFor(rollPersonaId(key)) ?? personaLayerFor(defaultPersonaId());
   }
   return {
     rollPersonaId,

package/dist/personas/resolver.d.ts

@@ -20,6 +20,14 @@ export interface PersonaContact {
     /** Overrides `personaProbability` for this contact when set. */
     probability?: number;
 }
+/**
+ * A persona bound to one of the bot's own endpoints - which of its numbers,
+ * tokens or rooms the message arrived on, rather than who sent it.
+ */
+export interface PersonaEndpoint {
+    /** Persona id this endpoint always answers as. */
+    persona: string;
+}
 export interface PersonaRegistry {
     /** Persona id used when a contact is unmapped or its roll doesn't land. */
     defaultPersona: string;
@@ -28,8 +36,23 @@ export interface PersonaRegistry {
     /** Minutes a roll is held before the next message re-rolls it. Default 10. */
     personaWindowMinutes?: number;
     contacts?: Record<string, PersonaContact>;
+    /**
+     * Personas keyed on the endpoint that received the message
+     * (`ChannelMessage.endpointId`), for a bot whose voice is decided by which
+     * of its own identities was reached rather than by who reached it.
+     */
+    endpoints?: Record<string, PersonaEndpoint>;
     personas: Record<string, PersonaDefinition>;
 }
+/**
+ * Who a persona is resolved for. A bare string is the contact id, which is
+ * every call that predates endpoint keying; the object form adds the endpoint
+ * the message arrived on, and either half may be omitted.
+ */
+export type PersonaKey = string | {
+    contactId?: string;
+    endpointId?: string;
+};
 export interface PersonaResolverOptions {
     /** Inline registry — takes priority over `registryPath` when both are set. */
     registry?: PersonaRegistry;
@@ -48,17 +71,21 @@ export interface PersonaResolverOptions {
 }
 export interface PersonaResolver {
     /**
-     * The persona id in effect for a contact right now: rolled at
-     * `personaProbability` once per window, held for `personaWindowMinutes`.
-     * `null` means "use the default persona" (unmapped contact or a lost roll).
+     * The persona id in effect right now. A key naming an endpoint that the
+     * registry binds resolves to that persona deterministically - no roll, no
+     * window - because an endpoint-bound voice is a property of the identity
+     * reached, not something that varies over a conversation. Otherwise the
+     * contact is rolled at `personaProbability` once per window and held for
+     * `personaWindowMinutes`. `null` means "use the default persona" (no key,
+     * an unmapped contact, or a lost roll).
      */
-    rollPersonaId(contactId: string): string | null;
+    rollPersonaId(key: PersonaKey): string | null;
     /**
-     * The interpolated prompt layer for the contact's currently-held persona,
-     * falling back to the default persona's layer. Feeds `prepareChat`'s
-     * `personaLayer` directly.
+     * The interpolated prompt layer for the persona {@link rollPersonaId}
+     * yields, falling back to the default persona's layer. Feeds
+     * `prepareChat`'s `personaLayer` directly.
      */
-    resolvePersonaLayer(contactId: string): string | null;
+    resolvePersonaLayer(key: PersonaKey): string | null;
     /** Deterministic layer for an explicit persona id (no dice roll), or null. */
     personaLayerFor(personaId: string | null): string | null;
     /** Registry contact record, or undefined. */

package/dist/personas/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/personas/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0HAA0H;IAC1H,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChD;;;;OAIG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtD,8EAA8E;IAC9E,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,6CAA6C;IAC7C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,wEAAwE;IACxE,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAAC;CACnC;AAYD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,eAAe,CAgI3F"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/personas/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC7C;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,MAAM,WAAW,sBAAsB;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0HAA0H;IAC1H,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C;;;;OAIG;IACH,mBAAmB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IACpD,8EAA8E;IAC9E,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IACzD,6CAA6C;IAC7C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,wEAAwE;IACxE,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAAC;CACnC;AAYD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,eAAe,CAmJ3F"}

package/dist/routes/demo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/routes/demo.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAa5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AA6FnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,kBAAkB,8EAmIlD"}
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/routes/demo.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAa5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AA6FnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,kBAAkB,8EAqIlD"}

package/dist/routes/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/routes/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsDnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAoLpD"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../src/routes/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAsDnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAsLpD"}

package/dist/routes/private.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private.d.ts","sourceRoot":"","sources":["../../src/routes/private.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,aAAa,CAAC,IAAI,EAAE,kBAAkB,8EAuFrD"}
+{"version":3,"file":"private.d.ts","sourceRoot":"","sources":["../../src/routes/private.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,aAAa,CAAC,IAAI,EAAE,kBAAkB,8EAyFrD"}

package/dist/routes/public.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/routes/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EAsFpD"}
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../src/routes/public.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AASnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,kBAAkB,8EA+FpD"}

package/dist/scheduler/index.js

@@ -116,9 +116,10 @@ function detectLeakage(text) {
 function scrubOutput(text) {
   return text.replace(/sk-[A-Za-z0-9]{15,}/g, "[REDACTED]").replace(/AIza[0-9A-Za-z_-]{30,}/g, "[REDACTED]");
 }
-function guardOutput(text) {
+var DEFAULT_REFUSAL = "Sorry, I can't share internal instructions. How else can I help?";
+function guardOutput(text, refusal) {
   if (detectLeakage(text)) {
-    return "Sorry, I can't share internal instructions. How else can I help?";
+    return typeof refusal === "string" && refusal.trim() ? refusal : DEFAULT_REFUSAL;
   }
   return scrubOutput(text);
 }
@@ -130,7 +131,8 @@ async function completeOnce({
   system,
   messages,
   temperature = 0.2,
-  model = DEFAULT_MODEL
+  model = DEFAULT_MODEL,
+  refusal
 }) {
   const res = await client.chat.completions.create({
     model,
@@ -139,19 +141,19 @@ async function completeOnce({
   });
   const text = res.choices[0]?.message?.content ?? "";
   return {
-    content: guardOutput(text),
+    content: guardOutput(text, refusal),
     usage: res.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 }
   };
 }
 
 // src/core/answer.ts
 var noUsage = () => ({ prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 });
-async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }) {
+async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal) {
   const result = await answerFn({ system, messages, mode, sender, conversationId });
   const raw = typeof result === "string" ? result : result?.content;
   const usage = typeof result === "string" ? void 0 : result?.usage;
   return {
-    content: guardOutput(typeof raw === "string" ? raw : ""),
+    content: guardOutput(typeof raw === "string" ? raw : "", refusal),
     usage: usage ?? noUsage()
   };
 }
@@ -164,12 +166,13 @@ async function answerOnce({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId });
+    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal);
   }
-  return completeOnce({ client, system, messages, temperature, model });
+  return completeOnce({ client, system, messages, temperature, model, refusal });
 }
 
 // src/core/logger.ts

package/dist/scheduler/index.mjs

@@ -75,9 +75,10 @@ function detectLeakage(text) {
 function scrubOutput(text) {
   return text.replace(/sk-[A-Za-z0-9]{15,}/g, "[REDACTED]").replace(/AIza[0-9A-Za-z_-]{30,}/g, "[REDACTED]");
 }
-function guardOutput(text) {
+var DEFAULT_REFUSAL = "Sorry, I can't share internal instructions. How else can I help?";
+function guardOutput(text, refusal) {
   if (detectLeakage(text)) {
-    return "Sorry, I can't share internal instructions. How else can I help?";
+    return typeof refusal === "string" && refusal.trim() ? refusal : DEFAULT_REFUSAL;
   }
   return scrubOutput(text);
 }
@@ -89,7 +90,8 @@ async function completeOnce({
   system,
   messages,
   temperature = 0.2,
-  model = DEFAULT_MODEL
+  model = DEFAULT_MODEL,
+  refusal
 }) {
   const res = await client.chat.completions.create({
     model,
@@ -98,19 +100,19 @@ async function completeOnce({
   });
   const text = res.choices[0]?.message?.content ?? "";
   return {
-    content: guardOutput(text),
+    content: guardOutput(text, refusal),
     usage: res.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 }
   };
 }
 
 // src/core/answer.ts
 var noUsage = () => ({ prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 });
-async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }) {
+async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal) {
   const result = await answerFn({ system, messages, mode, sender, conversationId });
   const raw = typeof result === "string" ? result : result?.content;
   const usage = typeof result === "string" ? void 0 : result?.usage;
   return {
-    content: guardOutput(typeof raw === "string" ? raw : ""),
+    content: guardOutput(typeof raw === "string" ? raw : "", refusal),
     usage: usage ?? noUsage()
   };
 }
@@ -123,12 +125,13 @@ async function answerOnce({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId });
+    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal);
   }
-  return completeOnce({ client, system, messages, temperature, model });
+  return completeOnce({ client, system, messages, temperature, model, refusal });
 }
 
 // src/core/logger.ts

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAiB5B,OAAO,KAAK,EAAE,aAAa,EAAsB,MAAM,SAAS,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG;IAAE,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAEtE;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CA+P7E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAiB5B,OAAO,KAAK,EAAE,aAAa,EAAsB,MAAM,SAAS,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG;IAAE,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAEtE;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAqQ7E"}

package/dist/server.js

@@ -672,9 +672,10 @@ function detectLeakage(text) {
 function scrubOutput(text) {
   return text.replace(/sk-[A-Za-z0-9]{15,}/g, "[REDACTED]").replace(/AIza[0-9A-Za-z_-]{30,}/g, "[REDACTED]");
 }
-function guardOutput(text) {
+var DEFAULT_REFUSAL = "Sorry, I can't share internal instructions. How else can I help?";
+function guardOutput(text, refusal) {
   if (detectLeakage(text)) {
-    return "Sorry, I can't share internal instructions. How else can I help?";
+    return typeof refusal === "string" && refusal.trim() ? refusal : DEFAULT_REFUSAL;
   }
   return scrubOutput(text);
 }
@@ -686,7 +687,8 @@ async function completeOnce({
   system,
   messages,
   temperature = 0.2,
-  model = DEFAULT_MODEL
+  model = DEFAULT_MODEL,
+  refusal
 }) {
   const res = await client.chat.completions.create({
     model,
@@ -695,7 +697,7 @@ async function completeOnce({
   });
   const text = res.choices[0]?.message?.content ?? "";
   return {
-    content: guardOutput(text),
+    content: guardOutput(text, refusal),
     usage: res.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 }
   };
 }
@@ -720,12 +722,12 @@ async function* completeStream({
 
 // src/core/answer.ts
 var noUsage = () => ({ prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 });
-async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }) {
+async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal) {
   const result = await answerFn({ system, messages, mode, sender, conversationId });
   const raw = typeof result === "string" ? result : result?.content;
   const usage = typeof result === "string" ? void 0 : result?.usage;
   return {
-    content: guardOutput(typeof raw === "string" ? raw : ""),
+    content: guardOutput(typeof raw === "string" ? raw : "", refusal),
     usage: usage ?? noUsage()
   };
 }
@@ -738,12 +740,13 @@ async function answerOnce({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId });
+    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal);
   }
-  return completeOnce({ client, system, messages, temperature, model });
+  return completeOnce({ client, system, messages, temperature, model, refusal });
 }
 async function applyTransformReply(transformReply, input, logger) {
   if (!transformReply) return input.text;
@@ -767,16 +770,15 @@ async function* answerStream({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    const { content } = await runAnswerFn(answerFn, {
-      system,
-      messages,
-      mode,
-      sender,
-      conversationId
-    });
+    const { content } = await runAnswerFn(
+      answerFn,
+      { system, messages, mode, sender, conversationId },
+      refusal
+    );
     if (content) yield content;
     return;
   }
@@ -1425,7 +1427,8 @@ function demoRoutes(deps) {
               system,
               messages,
               mode: "public",
-              model
+              model,
+              refusal: config.refusal
             })) {
               await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1440,7 +1443,8 @@ function demoRoutes(deps) {
           system,
           messages,
           mode: "public",
-          model
+          model,
+          refusal: config.refusal
         });
         const reply = await applyTransformReply(
           config.transformReply,
@@ -1662,7 +1666,8 @@ function openaiRoutes(deps) {
           sender,
           conversationId,
           temperature,
-          model: serverModel
+          model: serverModel,
+          refusal: config.refusal
         })) {
           await s.write(chunk2({ content: delta }, null));
         }
@@ -1679,7 +1684,8 @@ function openaiRoutes(deps) {
       sender,
       conversationId,
       temperature,
-      model: serverModel
+      model: serverModel,
+      refusal: config.refusal
     });
     const reply = await applyTransformReply(
       config.transformReply,
@@ -1770,7 +1776,8 @@ function privateRoutes(deps) {
           messages,
           mode: "private",
           sender,
-          model
+          model,
+          refusal: config.refusal
         })) {
           await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1786,7 +1793,8 @@ function privateRoutes(deps) {
       messages,
       mode: "private",
       sender,
-      model
+      model,
+      refusal: config.refusal
     });
     const reply = await applyTransformReply(
       config.transformReply,
@@ -1953,7 +1961,8 @@ function publicRoutes(deps) {
           system,
           messages,
           mode: "public",
-          model
+          model,
+          refusal: config.refusal
         })) {
           await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1962,7 +1971,15 @@ function publicRoutes(deps) {
         await s.write("event: end\ndata: {}\n\n");
       });
     }
-    const out = await answerOnce({ answerFn, client, system, messages, mode: "public", model });
+    const out = await answerOnce({
+      answerFn,
+      client,
+      system,
+      messages,
+      mode: "public",
+      model,
+      refusal: config.refusal
+    });
     const reply = await applyTransformReply(
       config.transformReply,
       { channel: "widget-public", text: out.content },
@@ -2101,6 +2118,7 @@ async function createServer(config) {
     app.get("/demo/react", serveStatic({ path: `${publicDir}/react-demo.html` }));
   }
   const senders = createSenderRegistry(logger);
+  const identities = /* @__PURE__ */ new Map();
   const deps = {
     client,
     store,
@@ -2112,6 +2130,7 @@ async function createServer(config) {
     prompts,
     apiKeyManager,
     senders,
+    identities,
     logger
   };
   if (enablePublic) {

package/dist/server.mjs

@@ -644,9 +644,10 @@ function detectLeakage(text) {
 function scrubOutput(text) {
   return text.replace(/sk-[A-Za-z0-9]{15,}/g, "[REDACTED]").replace(/AIza[0-9A-Za-z_-]{30,}/g, "[REDACTED]");
 }
-function guardOutput(text) {
+var DEFAULT_REFUSAL = "Sorry, I can't share internal instructions. How else can I help?";
+function guardOutput(text, refusal) {
   if (detectLeakage(text)) {
-    return "Sorry, I can't share internal instructions. How else can I help?";
+    return typeof refusal === "string" && refusal.trim() ? refusal : DEFAULT_REFUSAL;
   }
   return scrubOutput(text);
 }
@@ -658,7 +659,8 @@ async function completeOnce({
   system,
   messages,
   temperature = 0.2,
-  model = DEFAULT_MODEL
+  model = DEFAULT_MODEL,
+  refusal
 }) {
   const res = await client.chat.completions.create({
     model,
@@ -667,7 +669,7 @@ async function completeOnce({
   });
   const text = res.choices[0]?.message?.content ?? "";
   return {
-    content: guardOutput(text),
+    content: guardOutput(text, refusal),
     usage: res.usage || { prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 }
   };
 }
@@ -692,12 +694,12 @@ async function* completeStream({
 
 // src/core/answer.ts
 var noUsage = () => ({ prompt_tokens: 0, completion_tokens: 0, total_tokens: 0 });
-async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }) {
+async function runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal) {
   const result = await answerFn({ system, messages, mode, sender, conversationId });
   const raw = typeof result === "string" ? result : result?.content;
   const usage = typeof result === "string" ? void 0 : result?.usage;
   return {
-    content: guardOutput(typeof raw === "string" ? raw : ""),
+    content: guardOutput(typeof raw === "string" ? raw : "", refusal),
     usage: usage ?? noUsage()
   };
 }
@@ -710,12 +712,13 @@ async function answerOnce({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId });
+    return runAnswerFn(answerFn, { system, messages, mode, sender, conversationId }, refusal);
   }
-  return completeOnce({ client, system, messages, temperature, model });
+  return completeOnce({ client, system, messages, temperature, model, refusal });
 }
 async function applyTransformReply(transformReply, input, logger) {
   if (!transformReply) return input.text;
@@ -739,16 +742,15 @@ async function* answerStream({
   sender,
   conversationId,
   temperature,
-  model
+  model,
+  refusal
 }) {
   if (answerFn) {
-    const { content } = await runAnswerFn(answerFn, {
-      system,
-      messages,
-      mode,
-      sender,
-      conversationId
-    });
+    const { content } = await runAnswerFn(
+      answerFn,
+      { system, messages, mode, sender, conversationId },
+      refusal
+    );
     if (content) yield content;
     return;
   }
@@ -1396,7 +1398,8 @@ function demoRoutes(deps) {
               system,
               messages,
               mode: "public",
-              model
+              model,
+              refusal: config.refusal
             })) {
               await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1411,7 +1414,8 @@ function demoRoutes(deps) {
           system,
           messages,
           mode: "public",
-          model
+          model,
+          refusal: config.refusal
         });
         const reply = await applyTransformReply(
           config.transformReply,
@@ -1633,7 +1637,8 @@ function openaiRoutes(deps) {
           sender,
           conversationId,
           temperature,
-          model: serverModel
+          model: serverModel,
+          refusal: config.refusal
         })) {
           await s.write(chunk2({ content: delta }, null));
         }
@@ -1650,7 +1655,8 @@ function openaiRoutes(deps) {
       sender,
       conversationId,
       temperature,
-      model: serverModel
+      model: serverModel,
+      refusal: config.refusal
     });
     const reply = await applyTransformReply(
       config.transformReply,
@@ -1741,7 +1747,8 @@ function privateRoutes(deps) {
           messages,
           mode: "private",
           sender,
-          model
+          model,
+          refusal: config.refusal
         })) {
           await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1757,7 +1764,8 @@ function privateRoutes(deps) {
       messages,
       mode: "private",
       sender,
-      model
+      model,
+      refusal: config.refusal
     });
     const reply = await applyTransformReply(
       config.transformReply,
@@ -1924,7 +1932,8 @@ function publicRoutes(deps) {
           system,
           messages,
           mode: "public",
-          model
+          model,
+          refusal: config.refusal
         })) {
           await s.write(`data: ${JSON.stringify({ delta })}
 
@@ -1933,7 +1942,15 @@ function publicRoutes(deps) {
         await s.write("event: end\ndata: {}\n\n");
       });
     }
-    const out = await answerOnce({ answerFn, client, system, messages, mode: "public", model });
+    const out = await answerOnce({
+      answerFn,
+      client,
+      system,
+      messages,
+      mode: "public",
+      model,
+      refusal: config.refusal
+    });
     const reply = await applyTransformReply(
       config.transformReply,
       { channel: "widget-public", text: out.content },
@@ -2072,6 +2089,7 @@ async function createServer(config) {
     app.get("/demo/react", serveStatic({ path: `${publicDir}/react-demo.html` }));
   }
   const senders = createSenderRegistry(logger);
+  const identities = /* @__PURE__ */ new Map();
   const deps = {
     client,
     store,
@@ -2083,6 +2101,7 @@ async function createServer(config) {
     prompts,
     apiKeyManager,
     senders,
+    identities,
     logger
   };
   if (enablePublic) {