@epam/ai-dial-chat-hooks 1.3.0-dev.35 → 1.3.0-dev.45

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sDAAsD,CAAC;AACrE,cAAc,8DAA8D,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAC3F,OAAO,EACL,YAAY,EACZ,aAAa,GACd,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAChG,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,0CAA0C,CAAC;AACzD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6DAA6D,CAAC;AAC5E,cAAc,iCAAiC,CAAC;AAChD,cAAc,qEAAqE,CAAC;AACpF,cAAc,+DAA+D,CAAC;AAC9E,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6DAA6D,CAAC;AAC5E,cAAc,6DAA6D,CAAC;AAC5E,cAAc,+CAA+C,CAAC;AAC9D,cAAc,qCAAqC,CAAC;AACpD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kDAAkD,CAAC;AACjE,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,+DAA+D,CAAC;AAC9E,cAAc,yCAAyC,CAAC;AACxD,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0CAA0C,CAAC;AACzD,cAAc,yCAAyC,CAAC;AACxD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AACzD,cAAc,yCAAyC,CAAC;AACxD,cAAc,eAAe,CAAC;AAC9B,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uCAAuC,CAAC;AACtD,cAAc,qDAAqD,CAAC;AACpE,cAAc,kFAAkF,CAAC;AACjG,cAAc,oEAAoE,CAAC;AACnF,cAAc,4DAA4D,CAAC;AAC3E,cAAc,oEAAoE,CAAC;AACnF,cAAc,oEAAoE,CAAC;AACnF,cAAc,wDAAwD,CAAC;AACvE,cAAc,kEAAkE,CAAC;AACjF,cAAc,wDAAwD,CAAC;AACvE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,sDAAsD,CAAC;AACrE,cAAc,4DAA4D,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,GACjB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,uDAAuD,CAAC;AAC/D,cAAc,gEAAgE,CAAC;AAC/E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4DAA4D,CAAC;AAC3E,OAAO,EACL,oBAAoB,EACpB,WAAW,GACZ,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wDAAwD,CAAC;AACpG,cAAc,4DAA4D,CAAC;AAC3E,cAAc,sEAAsE,CAAC;AACrF,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0CAA0C,CAAC;AACzD,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+DAA+D,CAAC;AAC9E,cAAc,iEAAiE,CAAC;AAChF,cAAc,iDAAiD,CAAC;AAChE,cAAc,mDAAmD,CAAC;AAClE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,uDAAuD,CAAC;AACtE,cAAc,yDAAyD,CAAC;AACxE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uDAAuD,CAAC;AACtE,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mDAAmD,CAAC;AAClE,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,uBAAuB,GAC7B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EACL,mBAAmB,EACnB,KAAK,yBAAyB,GAC/B,MAAM,oDAAoD,CAAC;AAO5D,YAAY,EACV,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/mcp-apps/mcp-apps-api-client.d.ts

@@ -0,0 +1,28 @@
+import { McpAppToolSummaryDto, ToolsetsApi } from '@epam/ai-dial-chat-api-client';
+import { CallMcpAppTool, FetchMcpAppResourceHtml, McpDeploymentKind } from '@epam/ai-dial-mcp-apps';
+/** A single MCP tool that declares an MCP Apps UI resource. */
+export type McpAppToolSummary = McpAppToolSummaryDto;
+/** Thrown by `McpAppsApiClient.fetchResourceHtml` on a non-OK response, carrying the HTTP status so callers can distinguish `403` (forbidden) from any other failure. */
+export declare class McpAppResourceFetchError extends Error {
+    readonly status: number;
+    constructor(status: number);
+}
+/** The MCP Apps API surface produced by {@link createMcpAppsApiClient}. */
+export interface McpAppsApiClient {
+    /** Fetches a toolset's MCP Apps `ui://` resource and resolves to its HTML body. Throws `McpAppResourceFetchError` on a non-OK response. */
+    fetchResourceHtml: FetchMcpAppResourceHtml;
+    /** Forwards an MCP App's tool call (self-initiated, or `@epam/ai-dial-mcp-apps`'s live re-call) through chat-api. */
+    callTool: CallMcpAppTool;
+    /** Lists the tools of an MCP-capable deployment that declare an MCP Apps UI resource. */
+    listAppTools: (deploymentId: string, kind: McpDeploymentKind) => Promise<McpAppToolSummary[]>;
+    /** Lists every tool name exposed by an MCP-capable deployment's `tools/list`, unfiltered. */
+    listToolNames: (deploymentId: string, kind: McpDeploymentKind) => Promise<string[]>;
+}
+/**
+ * Wraps the generated `ToolsetsApi` in the surface `useMcpAppTools`,
+ * `useOpenMcpAppCanvas`, and `@epam/ai-dial-mcp-apps`'s hooks/utilities call,
+ * so a host app configures one `ToolsetsApi` instance (base URL, auth
+ * headers, CSRF) and passes it here once. Mirrors `createPublishApiClient`.
+ */
+export declare const createMcpAppsApiClient: (toolsetsApi: ToolsetsApi) => McpAppsApiClient;
+//# sourceMappingURL=mcp-apps-api-client.d.ts.map

package/mcp-apps/mcp-apps-api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-apps-api-client.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/mcp-apps-api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAIhC,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAErD,yKAAyK;AACzK,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAG3C;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,2IAA2I;IAC3I,iBAAiB,EAAE,uBAAuB,CAAC;IAC3C,qHAAqH;IACrH,QAAQ,EAAE,cAAc,CAAC;IACzB,yFAAyF;IACzF,YAAY,EAAE,CACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,iBAAiB,KACpB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAClC,6FAA6F;IAC7F,aAAa,EAAE,CACb,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,iBAAiB,KACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxB;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GACjC,aAAa,WAAW,KACvB,gBAwCD,CAAC"}

package/mcp-apps/useMcpAppHostAdapter/useMcpAppHostAdapter.d.ts

@@ -0,0 +1,14 @@
+import { McpAppHostAdapter } from '@epam/ai-dial-mcp-apps';
+import { Implementation } from '@modelcontextprotocol/sdk/types.js';
+import { McpAppsApiClient } from '../mcp-apps-api-client';
+import { McpAppHostContextParams } from '../useMcpAppHostContext/useMcpAppHostContext';
+/**
+ * Builds the `McpAppHostAdapter` a host injects into `@epam/ai-dial-mcp-apps`'s
+ * hooks/components, wiring the library's host-context/tool-call/resource-fetch
+ * contract to a configured `McpAppsApiClient` and this app's theme/locale/config
+ * values (`hostContextParams`, `sandboxUrl`), plus the host's own identity
+ * (`hostInfo`) — this hook itself never reads app context, so a host builds
+ * those values wherever it already has them.
+ */
+export declare const useMcpAppHostAdapter: (displayMode: "inline" | "fullscreen", client: McpAppsApiClient, sandboxUrl: string | null, hostContextParams: McpAppHostContextParams, hostInfo: Implementation) => McpAppHostAdapter;
+//# sourceMappingURL=useMcpAppHostAdapter.d.ts.map

package/mcp-apps/useMcpAppHostAdapter/useMcpAppHostAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMcpAppHostAdapter.d.ts","sourceRoot":"","sources":["../../../src/mcp-apps/useMcpAppHostAdapter/useMcpAppHostAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,8CAA8C,CAAC;AAEtD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAC/B,aAAa,QAAQ,GAAG,YAAY,EACpC,QAAQ,gBAAgB,EACxB,YAAY,MAAM,GAAG,IAAI,EACzB,mBAAmB,uBAAuB,EAC1C,UAAU,cAAc,KACvB,iBA0BF,CAAC"}

package/mcp-apps/useMcpAppHostContext/useMcpAppHostContext.d.ts

@@ -0,0 +1,29 @@
+import { McpAppDisplayMode } from '@epam/ai-dial-attachment-canvas';
+import { McpUiHostContext } from '@mcp-ui/client';
+/** Host values `useMcpAppHostContext` needs but cannot read itself — a lib must not import the app's theme/i18n/config context. */
+export interface McpAppHostContextParams {
+    /** Host's current theme id (e.g. `'light'`/`'dark'`), used when `mcpAppTheme` is unset. */
+    theme: string;
+    /** Operator-configured MCP App theme override, if any. */
+    mcpAppTheme?: string;
+    /** Host's current i18n locale (BCP 47). */
+    locale: string;
+    /** Operator-configured MCP App user-agent override. Defaults to the browser's own `navigator.userAgent`. */
+    mcpAppUserAgent?: string;
+    /**
+     * Display modes the host can switch an app between via
+     * `ui/request-display-mode`. Defaults to `['inline', 'fullscreen']` — the
+     * compact inline preview and the full-width canvas.
+     */
+    availableDisplayModes?: McpAppDisplayMode[];
+}
+/**
+ * Builds the `McpUiHostContext` delivered to a mounted MCP App during its
+ * `ui/initialize` handshake, shared by every place that mounts an app —
+ * a full-width attachment canvas (`displayMode: 'fullscreen'`) and a compact
+ * inline preview under a message (`displayMode: 'inline'`) — so the app can
+ * size/style itself differently for each, and knows (via
+ * `availableDisplayModes`) which surfaces it may ask the host to switch to.
+ */
+export declare const useMcpAppHostContext: (displayMode: "inline" | "fullscreen", { theme, mcpAppTheme, locale, mcpAppUserAgent, availableDisplayModes, }: McpAppHostContextParams) => McpUiHostContext;
+//# sourceMappingURL=useMcpAppHostContext.d.ts.map

package/mcp-apps/useMcpAppHostContext/useMcpAppHostContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMcpAppHostContext.d.ts","sourceRoot":"","sources":["../../../src/mcp-apps/useMcpAppHostContext/useMcpAppHostContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAiGvD,mIAAmI;AACnI,MAAM,WAAW,uBAAuB;IACtC,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,4GAA4G;IAC5G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,GAC/B,aAAa,QAAQ,GAAG,YAAY,EACpC,yEAMG,uBAAuB,KACzB,gBAoBA,CAAC"}

package/mcp-apps/useMcpAppTools/useMcpAppTools.d.ts

@@ -0,0 +1,22 @@
+import { DeploymentItemDto, DialToolsetDto } from '@epam/ai-dial-chat-api-client';
+import { Message } from '@epam/ai-dial-chat-shared';
+import { McpAppToolRef } from '@epam/ai-dial-mcp-apps';
+import { McpAppsApiClient } from '../mcp-apps-api-client';
+/**
+ * Discovers MCP Apps-capable tools available to the current conversation, merging two
+ * sources:
+ *
+ * 1. **Direct** — the active deployment itself, when it declares `features.mcp` (a
+ *    toolset, or an application that is itself an MCP server).
+ * 2. **Indirect** — any toolset in `toolsets` whose name prefixes a tool-call name
+ *    actually seen in `messages` (e.g. `weather_get_weather` implies the `weather`
+ *    toolset). This covers a quick app that has no MCP capability of its own but
+ *    internally delegates to an MCP-capable toolset — a link the host does not
+ *    otherwise expose. Tool names discovered this way are re-prefixed with the
+ *    toolset's name so they match the `{toolset}_{tool}` form seen in real tool
+ *    calls, keeping downstream name-matching (`findMcpAppForMessage`) unchanged.
+ *
+ * Empty until loaded, or if neither source yields anything.
+ */
+export declare const useMcpAppTools: (client: McpAppsApiClient, deployment: DeploymentItemDto | undefined, messages: Message[], toolsets: DialToolsetDto[]) => McpAppToolRef[];
+//# sourceMappingURL=useMcpAppTools.d.ts.map

package/mcp-apps/useMcpAppTools/useMcpAppTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useMcpAppTools.d.ts","sourceRoot":"","sources":["../../../src/mcp-apps/useMcpAppTools/useMcpAppTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACf,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc,GACzB,QAAQ,gBAAgB,EACxB,YAAY,iBAAiB,GAAG,SAAS,EACzC,UAAU,OAAO,EAAE,EACnB,UAAU,cAAc,EAAE,KACzB,aAAa,EAuFf,CAAC"}

package/mcp-apps/useOpenMcpAppCanvas/useOpenMcpAppCanvas.d.ts

@@ -0,0 +1,36 @@
+import { McpAppHostAdapter, McpAppResponseCache, McpAppToolCallSeed, McpAppToolRef } from '@epam/ai-dial-mcp-apps';
+/** User-facing text `useOpenMcpAppCanvas` needs but cannot resolve itself — a lib must not call `t()`. */
+export interface UseOpenMcpAppCanvasLabels {
+    /** Error label shown when the resource fetch is forbidden (HTTP 403). */
+    forbiddenErrorLabel: string;
+    /** Error label shown for any other resource-load/tool-call failure. */
+    loadErrorLabel: string;
+}
+/**
+ * Returns `openMcpAppCanvas`, an async function that opens the attachment
+ * canvas for a discovered MCP App tool. `canvasKey`, when passed, is
+ * forwarded as the canvas's `attachmentId` (and as the key into `cache`) so
+ * callers can compare it against `useAttachmentCanvas().attachmentId` to
+ * know whether this exact canvas is the one currently open. `toolCall`, when
+ * passed, seeds the mounted app's initial `toolInput`/`toolResult`. Returns
+ * `true` if the canvas was opened, `false` if `hostAdapter.sandboxUrl` isn't
+ * configured or the resource failed to load.
+ *
+ * `cache` (shared with `@epam/ai-dial-mcp-apps`'s `useMcpAppInlinePreview` via
+ * the same cache instance) is checked before fetching the resource or
+ * re-resolving the tool result — reopening the canvas for a message already
+ * seen (inline or in a prior canvas open) reuses that fetch instead of
+ * repeating it, and a concurrent in-flight fetch for the same message (e.g.
+ * the inline preview hasn't finished loading yet) is coalesced onto rather
+ * than raced against (`cache.getOrFetch`). Pass `forceReload: true` (wired to
+ * the canvas header's reload button, `content.onReload`) to bypass and
+ * refresh the cache entry.
+ *
+ * `onBeforeOpen`, if passed, runs before the canvas opens (e.g. to close
+ * other panels a host keeps mutually exclusive with the canvas) — this hook
+ * has no opinion on what else is open in the host UI.
+ */
+export declare const useOpenMcpAppCanvas: (cache: McpAppResponseCache, hostAdapter: McpAppHostAdapter, labels: UseOpenMcpAppCanvasLabels, onBeforeOpen?: () => void) => {
+    openMcpAppCanvas: (match: McpAppToolRef, canvasKey?: string, toolCall?: McpAppToolCallSeed, forceReload?: boolean) => Promise<boolean>;
+};
+//# sourceMappingURL=useOpenMcpAppCanvas.d.ts.map

package/mcp-apps/useOpenMcpAppCanvas/useOpenMcpAppCanvas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useOpenMcpAppCanvas.d.ts","sourceRoot":"","sources":["../../../src/mcp-apps/useOpenMcpAppCanvas/useOpenMcpAppCanvas.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,wBAAwB,CAAC;AAKhC,0GAA0G;AAC1G,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,mBAAmB,GAC9B,OAAO,mBAAmB,EAC1B,aAAa,iBAAiB,EAC9B,QAAQ,yBAAyB,EACjC,eAAe,MAAM,IAAI;8BA6Cd,aAAa,cACR,MAAM,aACP,kBAAkB,4BAE5B,OAAO,CAAC,OAAO,CAAC;CA2GtB,CAAC"}

package/mcp-apps.d.ts

@@ -1,256 +1,2 @@
-import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
-import { DeploymentItemDto } from '@epam/ai-dial-chat-api-client';
-import { DialToolsetDto } from '@epam/ai-dial-chat-api-client';
-import { Implementation } from '@modelcontextprotocol/sdk/types.js';
-import { McpAppToolSummaryDto } from '@epam/ai-dial-chat-api-client';
-import { McpUiHostContext } from '@mcp-ui/client';
-import { Message } from '@epam/ai-dial-chat-shared';
-import { ToolsetsApi } from '@epam/ai-dial-chat-api-client';
-
-/** A cached MCP App resource fetch plus its resolved tool result. */
-declare interface CachedMcpAppResponse {
-    /** The fetched resource's HTML body. */
-    html: string;
-    /** The tool call's resolved result, if any. */
-    toolResult?: CallToolResult;
-}
-
-/** Host-provided function that forwards an MCP App's tool call through the host's backend. */
-declare type CallMcpAppTool = (
-toolsetId: string,
-toolName: string,
-args: unknown,
-kind: McpDeploymentKind,
-) => Promise<CallToolResult>;
-
-/**
- * Wraps the generated `ToolsetsApi` in the surface `useMcpAppTools`,
- * `useOpenMcpAppCanvas`, and `@epam/ai-dial-mcp-apps`'s hooks/utilities call,
- * so a host app configures one `ToolsetsApi` instance (base URL, auth
- * headers, CSRF) and passes it here once. Mirrors `createPublishApiClient`.
- */
-export declare const createMcpAppsApiClient: (toolsetsApi: ToolsetsApi) => McpAppsApiClient;
-
-/** Host-provided function that fetches a toolset's MCP Apps `ui://` resource and resolves to its HTML body. */
-declare type FetchMcpAppResourceHtml = (
-toolsetId: string,
-resourceUri: string,
-) => Promise<string>;
-
-/** Display mode an MCP App can ask the host to switch to via `ui/request-display-mode` — the MCP UI protocol's `inline`/`fullscreen`/`pip` union. */
-declare type McpAppDisplayMode = NonNullable<McpUiHostContext['displayMode']>;
-
-/**
- * Dependencies the host must inject into `useMcpAppInlinePreview` /
- * `McpAppInlinePreview` — everything that requires host context (theming,
- * locale, the configured API client) rather than being derivable from the
- * hook's own arguments.
- */
-declare interface McpAppHostAdapter {
-    /** `McpUiHostContext` to deliver to the mounted app's `ui/initialize` handshake. */
-    hostContext: McpUiHostContext;
-    /** Host identity (`name`/`version`) to deliver to the mounted app's `ui/initialize` handshake. */
-    hostInfo: Implementation;
-    /** Operator-configured MCP Apps sandbox-proxy URL, or `null` when unconfigured. */
-    sandboxUrl: string | null;
-    /** Fetches the matched tool's MCP Apps `ui://` resource. */
-    fetchResourceHtml: FetchMcpAppResourceHtml;
-    /** Forwards a tool call the mounted app makes on its own (`onToolCall`) or the live re-call `resolveMcpAppToolResult` performs. */
-    callTool: CallMcpAppTool;
-}
-
-/** Host values `useMcpAppHostContext` needs but cannot read itself — a lib must not import the app's theme/i18n/config context. */
-export declare interface McpAppHostContextParams {
-    /** Host's current theme id (e.g. `'light'`/`'dark'`), used when `mcpAppTheme` is unset. */
-    theme: string;
-    /** Operator-configured MCP App theme override, if any. */
-    mcpAppTheme?: string;
-    /** Host's current i18n locale (BCP 47). */
-    locale: string;
-    /** Operator-configured MCP App user-agent override. Defaults to the browser's own `navigator.userAgent`. */
-    mcpAppUserAgent?: string;
-    /**
-     * Display modes the host can switch an app between via
-     * `ui/request-display-mode`. Defaults to `['inline', 'fullscreen']` — the
-     * compact inline preview and the full-width canvas.
-     */
-    availableDisplayModes?: McpAppDisplayMode[];
-}
-
-/** Thrown by `McpAppsApiClient.fetchResourceHtml` on a non-OK response, carrying the HTTP status so callers can distinguish `403` (forbidden) from any other failure. */
-export declare class McpAppResourceFetchError extends Error {
-    readonly status: number;
-    constructor(status: number);
-}
-
-/** Reads/writes `useMcpAppResponseCache`'s per-conversation cache. */
-declare interface McpAppResponseCache {
-    /**
-     * Returns the cached entry only if it was written for this exact
-     * `seedKey` (`computeMcpAppSeedKey`) and is younger than the cache's TTL;
-     * otherwise `undefined` (a miss), so a stale or seed-mismatched entry is
-     * never served.
-     */
-    get: (
-    key: string,
-    seedKey: string | undefined,
-    ) => CachedMcpAppResponse | undefined;
-    /** Writes an entry for `key`, tagged with the seed it was resolved from. */
-    set: (
-    key: string,
-    value: CachedMcpAppResponse,
-    seedKey: string | undefined,
-    ) => void;
-    /** Removes the cached entry for `key`, if any. */
-    invalidate: (key: string) => void;
-    /**
-     * Returns the fresh cached entry for `(key, seedKey)` if one exists
-     * (same rules as `get`); otherwise runs `fetchFn` and caches its result.
-     * Concurrent calls for the same `(key, seedKey)` before `fetchFn` settles
-     * are coalesced onto the same in-flight promise instead of each starting
-     * their own — without this, a component re-rendered before its first
-     * fetch resolves (e.g. React StrictMode's dev-only double effect
-     * invocation) would race two independent fetches/live tool re-calls for
-     * the same message.
-     */
-    getOrFetch: (
-    key: string,
-    seedKey: string | undefined,
-    fetchFn: () => Promise<CachedMcpAppResponse>,
-    ) => Promise<CachedMcpAppResponse>;
-}
-
-/** The MCP Apps API surface produced by {@link createMcpAppsApiClient}. */
-export declare interface McpAppsApiClient {
-    /** Fetches a toolset's MCP Apps `ui://` resource and resolves to its HTML body. Throws `McpAppResourceFetchError` on a non-OK response. */
-    fetchResourceHtml: FetchMcpAppResourceHtml;
-    /** Forwards an MCP App's tool call (self-initiated, or `@epam/ai-dial-mcp-apps`'s live re-call) through chat-api. */
-    callTool: CallMcpAppTool;
-    /** Lists the tools of an MCP-capable deployment that declare an MCP Apps UI resource. */
-    listAppTools: (deploymentId: string, kind: McpDeploymentKind) => Promise<McpAppToolSummary[]>;
-    /** Lists every tool name exposed by an MCP-capable deployment's `tools/list`, unfiltered. */
-    listToolNames: (deploymentId: string, kind: McpDeploymentKind) => Promise<string[]>;
-}
-
-/** Original tool call's arguments/result, seeded into the mounted app so it renders that invocation immediately instead of an empty initial state. */
-declare interface McpAppToolCallSeed {
-    /** The tool call's real structured arguments. */
-    toolInput?: Record<string, unknown>;
-    /** The tool call's result, if already known. */
-    toolResult?: CallToolResult;
-}
-
-/**
- * How a tool was discovered — determines whether it's safe to live-re-call
- * (see `resolveMcpAppToolResult`) or treat as "always available" for a
- * message with no other evidence (see `findMcpAppForMessage`).
- *
- * - `'direct'`: the active deployment itself IS this MCP server (whether
- *   it's a bare Toolset or an Application declaring `features.mcp`) — the
- *   host is talking to it directly, so which tool a mounted app's own
- *   invocation targets is unambiguous.
- * - `'indirect'`: a different, tool-calling deployment's message happened to
- *   call a name prefixed with a toolset's display name; the toolset is a
- *   name-prefix *guess*, not a confirmed link the host was told about, so
- *   re-calling it live risks hitting the wrong tool or re-triggering a
- *   non-idempotent side effect.
- */
-declare type McpAppToolDiscovery = 'direct' | 'indirect';
-
-/** A tool's declared MCP Apps UI resource, keyed by the toolset it was discovered on. */
-declare interface McpAppToolRef {
-    /** Id of the toolset/application this tool was discovered on. */
-    toolsetId: string;
-    /** The tool's declared `ui://` resource. */
-    resourceUri: string;
-    /** Name used to correlate this ref against a message's real tool-call data (`resolveMcpAppToolCallSeed`/`findMcpAppForMessage`). */
-    toolName: string;
-    /** The tool's real name as declared by its owning toolset's `tools/list` — what must be passed to the mounted app/`onToolCall`. */
-    mcpToolName: string;
-    /** Deployment kind — determines which host MCP proxy route resolves `tools/call` for this tool. */
-    kind: McpDeploymentKind;
-    /** How this tool was discovered — see `McpAppToolDiscovery`. */
-    discovery: McpAppToolDiscovery;
-}
-
-/** A single MCP tool that declares an MCP Apps UI resource. */
-export declare type McpAppToolSummary = McpAppToolSummaryDto;
-
-/** Which of the host's two MCP proxy routes a deployment id resolves through — a plain toolset, or an application that is itself an MCP server. */
-declare type McpDeploymentKind = 'toolset' | 'application';
-
-/**
- * Builds the `McpAppHostAdapter` a host injects into `@epam/ai-dial-mcp-apps`'s
- * hooks/components, wiring the library's host-context/tool-call/resource-fetch
- * contract to a configured `McpAppsApiClient` and this app's theme/locale/config
- * values (`hostContextParams`, `sandboxUrl`), plus the host's own identity
- * (`hostInfo`) — this hook itself never reads app context, so a host builds
- * those values wherever it already has them.
- */
-export declare const useMcpAppHostAdapter: (displayMode: "inline" | "fullscreen", client: McpAppsApiClient, sandboxUrl: string | null, hostContextParams: McpAppHostContextParams, hostInfo: Implementation) => McpAppHostAdapter;
-
-/**
- * Builds the `McpUiHostContext` delivered to a mounted MCP App during its
- * `ui/initialize` handshake, shared by every place that mounts an app —
- * a full-width attachment canvas (`displayMode: 'fullscreen'`) and a compact
- * inline preview under a message (`displayMode: 'inline'`) — so the app can
- * size/style itself differently for each, and knows (via
- * `availableDisplayModes`) which surfaces it may ask the host to switch to.
- */
-export declare const useMcpAppHostContext: (displayMode: "inline" | "fullscreen", { theme, mcpAppTheme, locale, mcpAppUserAgent, availableDisplayModes, }: McpAppHostContextParams) => McpUiHostContext;
-
-/**
- * Discovers MCP Apps-capable tools available to the current conversation, merging two
- * sources:
- *
- * 1. **Direct** — the active deployment itself, when it declares `features.mcp` (a
- *    toolset, or an application that is itself an MCP server).
- * 2. **Indirect** — any toolset in `toolsets` whose name prefixes a tool-call name
- *    actually seen in `messages` (e.g. `weather_get_weather` implies the `weather`
- *    toolset). This covers a quick app that has no MCP capability of its own but
- *    internally delegates to an MCP-capable toolset — a link the host does not
- *    otherwise expose. Tool names discovered this way are re-prefixed with the
- *    toolset's name so they match the `{toolset}_{tool}` form seen in real tool
- *    calls, keeping downstream name-matching (`findMcpAppForMessage`) unchanged.
- *
- * Empty until loaded, or if neither source yields anything.
- */
-export declare const useMcpAppTools: (client: McpAppsApiClient, deployment: DeploymentItemDto | undefined, messages: Message[], toolsets: DialToolsetDto[]) => McpAppToolRef[];
-
-/**
- * Returns `openMcpAppCanvas`, an async function that opens the attachment
- * canvas for a discovered MCP App tool. `canvasKey`, when passed, is
- * forwarded as the canvas's `attachmentId` (and as the key into `cache`) so
- * callers can compare it against `useAttachmentCanvas().attachmentId` to
- * know whether this exact canvas is the one currently open. `toolCall`, when
- * passed, seeds the mounted app's initial `toolInput`/`toolResult`. Returns
- * `true` if the canvas was opened, `false` if `hostAdapter.sandboxUrl` isn't
- * configured or the resource failed to load.
- *
- * `cache` (shared with `@epam/ai-dial-mcp-apps`'s `useMcpAppInlinePreview` via
- * the same cache instance) is checked before fetching the resource or
- * re-resolving the tool result — reopening the canvas for a message already
- * seen (inline or in a prior canvas open) reuses that fetch instead of
- * repeating it, and a concurrent in-flight fetch for the same message (e.g.
- * the inline preview hasn't finished loading yet) is coalesced onto rather
- * than raced against (`cache.getOrFetch`). Pass `forceReload: true` (wired to
- * the canvas header's reload button, `content.onReload`) to bypass and
- * refresh the cache entry.
- *
- * `onBeforeOpen`, if passed, runs before the canvas opens (e.g. to close
- * other panels a host keeps mutually exclusive with the canvas) — this hook
- * has no opinion on what else is open in the host UI.
- */
-export declare const useOpenMcpAppCanvas: (cache: McpAppResponseCache, hostAdapter: McpAppHostAdapter, labels: UseOpenMcpAppCanvasLabels, onBeforeOpen?: () => void) => {
-    openMcpAppCanvas: (match: McpAppToolRef, canvasKey?: string, toolCall?: McpAppToolCallSeed, forceReload?: boolean) => Promise<boolean>;
-};
-
-/** User-facing text `useOpenMcpAppCanvas` needs but cannot resolve itself — a lib must not call `t()`. */
-export declare interface UseOpenMcpAppCanvasLabels {
-    /** Error label shown when the resource fetch is forbidden (HTTP 403). */
-    forbiddenErrorLabel: string;
-    /** Error label shown for any other resource-load/tool-call failure. */
-    loadErrorLabel: string;
-}
-
-export { }
+export * from './entry-points/mcp-apps.js'
+export {}

package/oauth/authorize-url.d.ts

@@ -0,0 +1,16 @@
+import { ToolsetOAuthSettings } from './models';
+/**
+ * Resolves the OAuth callback location against the current origin. The
+ * callback path is supplied by the host: this module owns no application
+ * route.
+ */
+export declare const getToolsetRedirectUri: (callbackPath: string) => string;
+/**
+ * Builds the OAuth authorize URL for a given, already-generated `state`
+ * value. The caller owns what `state` carries — see `initiateOAuthLogin`.
+ * Returns `null` rather than throwing for a configuration that cannot
+ * produce a valid URL, including one whose authorization endpoint is not an
+ * `http:`/`https:` URL.
+ */
+export declare const buildToolsetAuthorizeUrl: (auth: ToolsetOAuthSettings, redirectUri: string, state: string) => string | null;
+//# sourceMappingURL=authorize-url.d.ts.map

package/oauth/authorize-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize-url.d.ts","sourceRoot":"","sources":["../../src/oauth/authorize-url.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,cAAc,MAAM,KAAG,MACjB,CAAC;AAU7C;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,MAAM,oBAAoB,EAC1B,aAAa,MAAM,EACnB,OAAO,MAAM,KACZ,MAAM,GAAG,IA0BX,CAAC"}

package/oauth/handshake.d.ts

@@ -0,0 +1,30 @@
+import { ToolsetOAuthResult } from './models';
+import { ToolsetCredentialsLevel } from './types';
+/** Name of the same-origin `BroadcastChannel` shared by an OAuth flow's opener and its callback popup. */
+export declare const getToolsetOAuthChannelName: (flowId: string) => string;
+/** Options for {@link waitForToolsetOAuthResult}. */
+export interface WaitForToolsetOAuthResultOptions {
+    /** Resource id echoed back in a success result. */
+    toolsetId: string;
+    /** Credentials level echoed back in a success result. */
+    credentialsLevel: ToolsetCredentialsLevel;
+    /**
+     * The host's callback route — the same path the flow's popup was opened
+     * against. The popup-URL reader treats a same-origin URL as a result only
+     * when its pathname equals this value, so a host serving more than one
+     * callback route passes whichever one it actually opened.
+     */
+    callbackPath: string;
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+}
+/**
+ * Waits for the OAuth callback popup to report a result over BroadcastChannel
+ * or through the completion marker in its same-origin URL. A cross-origin
+ * provider can make the retained WindowProxy look closed even while the popup
+ * remains open, so cancellation is confirmed only when the initiating window
+ * regains focus. Reported results are acknowledged so the callback can close
+ * itself even when the retained WindowProxy was severed.
+ */
+export declare const waitForToolsetOAuthResult: (popup: Window, flowId: string, { toolsetId, credentialsLevel, callbackPath, timeoutMs, pollIntervalMs, }: WaitForToolsetOAuthResultOptions) => Promise<ToolsetOAuthResult>;
+//# sourceMappingURL=handshake.d.ts.map

package/oauth/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/oauth/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA8B,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC/E,OAAO,EACL,uBAAuB,EAKxB,MAAM,SAAS,CAAC;AAIjB,0GAA0G;AAC1G,eAAO,MAAM,0BAA0B,GAAI,QAAQ,MAAM,KAAG,MAChB,CAAC;AA4B7C,qDAAqD;AACrD,MAAM,WAAW,gCAAgC;IAC/C,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C;;;;;OAKG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,MAAM,EACb,QAAQ,MAAM,EACd,2EAMG,gCAAgC,KAClC,OAAO,CAAC,kBAAkB,CAkHzB,CAAC"}

package/oauth/models.d.ts

@@ -0,0 +1,81 @@
+import { OAuthResourceKind, ToolsetCredentialsLevel, ToolsetOAuthChannelControlType, ToolsetOAuthFailureReason, ToolsetOAuthInitiationResultType, ToolsetOAuthResultType } from './types';
+/**
+ * OAuth client settings needed to build an authorize URL — the narrow subset
+ * of a toolset's `authSettings` this module reads. Declared as its own shape
+ * so hosts can keep their wider editor form models app-owned and still pass
+ * them straight in.
+ */
+export interface ToolsetOAuthSettings {
+    clientId?: string;
+    authorizationEndpoint?: string;
+    scopes?: string[];
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+}
+/**
+ * Redirect state for an OAuth login flow. The flow writes this into the
+ * *popup's own* `sessionStorage` before navigating it to the provider, since
+ * the popup and its opener do not share a `sessionStorage` partition once
+ * navigated cross-origin.
+ */
+export interface ToolsetRedirectState {
+    toolsetId: string;
+    credentialsLevel?: ToolsetCredentialsLevel;
+    redirectUri?: string;
+    /** CSRF state token generated by the client before the OAuth redirect. */
+    state?: string;
+    /**
+     * Which sign-in endpoint the host's callback route should submit the
+     * authorization code to. Defaults to `Toolset` when absent so every
+     * existing redirect state (written before this field existed) keeps
+     * calling the toolset login unchanged. `ExternalService` reuses the same
+     * popup/BroadcastChannel machinery with `toolsetId` repurposed as an
+     * `{appId}::{serviceId}` composite key. `OfflineCredentials` reuses the
+     * same machinery again, with `toolsetId` repurposed as a fixed sentinel
+     * correlation id (`'offline-credentials'`) — the field carries no real
+     * toolset/external-service meaning there, only the opaque
+     * flow-correlation string the shared popup/`BroadcastChannel` utilities
+     * require structurally.
+     */
+    resourceKind?: OAuthResourceKind;
+    /**
+     * Whether the user agreed the application may use the resulting credential
+     * while they are away. Carried through the popup because the choice is made
+     * before the redirect and the code exchange happens after it — the callback
+     * route has no other way to learn it. Absent means "not granted".
+     */
+    offlineUsageConsent?: boolean;
+}
+export type ToolsetOAuthInitiationResult = {
+    type: ToolsetOAuthInitiationResultType.Started;
+    popup: Window;
+    flowId: string;
+} | {
+    type: ToolsetOAuthInitiationResultType.Blocked;
+} | {
+    type: ToolsetOAuthInitiationResultType.InvalidConfig;
+};
+export interface ToolsetOAuthSuccessMessage {
+    type: ToolsetOAuthResultType.Success;
+    toolsetId: string;
+    credentialsLevel: ToolsetCredentialsLevel;
+}
+export interface ToolsetOAuthFailureMessage {
+    type: ToolsetOAuthResultType.Failure;
+    reason: ToolsetOAuthFailureReason;
+}
+/** Confirms that the initiating tab consumed the callback result. */
+export interface ToolsetOAuthResultAcknowledgement {
+    type: ToolsetOAuthChannelControlType.ResultAcknowledged;
+}
+/**
+ * Non-secret result reported by the OAuth callback popup for one flow. Used
+ * unchanged by every resource kind — the callback branch only needs to signal
+ * success/failure, not resource details, back through the channel.
+ */
+export type ToolsetOAuthChannelMessage = ToolsetOAuthSuccessMessage | ToolsetOAuthFailureMessage;
+/** Result resolved by `waitForToolsetOAuthResult` to the tab that initiated the login. */
+export type ToolsetOAuthResult = ToolsetOAuthSuccessMessage | ToolsetOAuthFailureMessage | {
+    type: ToolsetOAuthResultType.Cancelled;
+};
+//# sourceMappingURL=models.d.ts.map

package/oauth/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/oauth/models.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,8BAA8B,EAC9B,yBAAyB,EACzB,gCAAgC,EAChC,sBAAsB,EACvB,MAAM,SAAS,CAAC;AAEjB;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,gCAAgC,CAAC,aAAa,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,uBAAuB,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC;IACrC,MAAM,EAAE,yBAAyB,CAAC;CACnC;AAED,qEAAqE;AACrE,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,8BAA8B,CAAC,kBAAkB,CAAC;CACzD;AAED;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GACpC,0BAA0B,GAAG,0BAA0B,CAAC;AAE1D,0FAA0F;AAC1F,MAAM,MAAM,kBAAkB,GAC1B,0BAA0B,GAC1B,0BAA0B,GAC1B;IAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAA;CAAE,CAAC"}

package/oauth/popup.d.ts

@@ -0,0 +1,30 @@
+import { ToolsetOAuthInitiationResult, ToolsetOAuthSettings } from './models';
+import { OAuthResourceKind, ToolsetCredentialsLevel } from './types';
+/**
+ * Opens a same-origin, blank popup synchronously — call this as the very
+ * first thing in a click (or click-derived) handler so the browser still
+ * treats it as user-triggered, before doing any `await`. A caller that needs
+ * to fetch the OAuth config first (it isn't known synchronously) opens the
+ * popup with this, then calls `navigateToolsetOAuthPopup` once the config has
+ * been fetched.
+ */
+export declare const openToolsetOAuthPopup: () => Window | null;
+/**
+ * Builds the OAuth authorize URL for an already-open popup and navigates it,
+ * closing the popup and returning `InvalidConfig` if the auth config can't
+ * produce a valid authorize URL. `callbackPath` is the host's own callback
+ * route — this module owns no application route.
+ */
+export declare const navigateToolsetOAuthPopup: (popup: Window, auth: ToolsetOAuthSettings, toolsetId: string, callbackPath: string, credentialsLevel?: ToolsetCredentialsLevel, resourceKind?: OAuthResourceKind, offlineUsageConsent?: boolean) => ToolsetOAuthInitiationResult;
+/**
+ * Builds the OAuth authorize URL, opens a same-origin popup synchronously (so
+ * a blocked popup can be reliably detected), writes the redirect state into
+ * *that popup's own* `sessionStorage` while it is still same-origin
+ * `about:blank`, then navigates it to the provider's authorization page.
+ * `auth` must already be known synchronously here, so the config is validated
+ * *before* opening the popup — unlike `navigateToolsetOAuthPopup`, used when
+ * the auth config can only be fetched asynchronously after the popup is
+ * already open.
+ */
+export declare const initiateOAuthLogin: (auth: ToolsetOAuthSettings, toolsetId: string, callbackPath: string, credentialsLevel?: ToolsetCredentialsLevel, offlineUsageConsent?: boolean) => ToolsetOAuthInitiationResult;
+//# sourceMappingURL=popup.d.ts.map

package/oauth/popup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"popup.d.ts","sourceRoot":"","sources":["../../src/oauth/popup.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,4BAA4B,EAC5B,oBAAoB,EAErB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,iBAAiB,EAEjB,uBAAuB,EAExB,MAAM,SAAS,CAAC;AAiDjB;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAO,MAAM,GAAG,IACvB,CAAC;AAE5B;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,MAAM,EACb,MAAM,oBAAoB,EAC1B,WAAW,MAAM,EACjB,cAAc,MAAM,EACpB,mBAAkB,uBAAsD,EACxE,eAAc,iBAA6C,EAC3D,sBAAsB,OAAO,KAC5B,4BAkBF,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,GAC7B,MAAM,oBAAoB,EAC1B,WAAW,MAAM,EACjB,cAAc,MAAM,EACpB,mBAAkB,uBAAsD,EACxE,sBAAsB,OAAO,KAC5B,4BAmBF,CAAC"}