@frankieai/core 0.1.0 → 0.1.1

package/dist/index.cjs

@@ -27,9 +27,11 @@ __export(index_exports, {
   defineFrankieConfig: () => defineFrankieConfig,
   describeTool: () => describeTool,
   evaluateToolPolicy: () => evaluateToolPolicy,
+  featuresConfigSchema: () => featuresConfigSchema,
   frankieConfigSchema: () => frankieConfigSchema,
   limitsConfigSchema: () => limitsConfigSchema,
   mcpServerSchema: () => mcpServerSchema,
+  modelChoiceSchema: () => modelChoiceSchema,
   modelConfigSchema: () => modelConfigSchema,
   parseFrankieConfig: () => parseFrankieConfig,
   thinkingLevelSchema: () => thinkingLevelSchema,
@@ -78,6 +80,30 @@ var modelConfigSchema = import_zod.z.object({
   /** Forward the model's reasoning stream to the client as thinking deltas. */
   streamReasoning: import_zod.z.boolean().default(false)
 });
+var modelChoiceSchema = import_zod.z.object({
+  /** Provider model id, e.g. "accounts/fireworks/models/kimi-k2p7-code". */
+  id: import_zod.z.string().min(1),
+  /** Shown in the picker, e.g. "Fast" or "Smart". */
+  label: import_zod.z.string().min(1),
+  /** Defaults to the workspace's default provider when omitted. */
+  provider: import_zod.z.string().optional()
+});
+var featuresConfigSchema = import_zod.z.object({
+  /** Let end users attach files. Images go to a vision model; docs are read as text. */
+  attachments: import_zod.z.object({
+    enabled: import_zod.z.boolean().default(false),
+    /** Accepted MIME patterns, e.g. "image/*", "text/*", "application/json". */
+    accept: import_zod.z.array(import_zod.z.string()).default(["image/*", "text/*", "application/json"]),
+    maxMb: import_zod.z.number().positive().max(25).default(10),
+    maxCount: import_zod.z.number().int().positive().max(10).default(4)
+  }).prefault({}),
+  /** Let end users choose the model, from a curated list you control. */
+  modelPicker: import_zod.z.object({
+    enabled: import_zod.z.boolean().default(false),
+    /** The models offered to end users. The workspace default is always allowed. */
+    models: import_zod.z.array(modelChoiceSchema).default([])
+  }).prefault({})
+}).prefault({});
 var mcpServerSchema = import_zod.z.object({
   name: import_zod.z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "MCP server names must be alphanumeric with - or _"),
   /** `http` covers streamable HTTP; `sse` is the legacy transport. */
@@ -203,7 +229,9 @@ var frankieConfigSchema = import_zod.z.object({
   mcpServers: import_zod.z.array(mcpServerSchema).default([]),
   /** APIs turned into tools from their OpenAPI document. */
   apis: import_zod.z.array(apiSourceSchema).default([]),
-  limits: limitsConfigSchema.prefault({})
+  limits: limitsConfigSchema.prefault({}),
+  /** Opt-in end-user chat capabilities (attachments, model picker). */
+  features: featuresConfigSchema
 });
 function parseFrankieConfig(input) {
   return frankieConfigSchema.parse(input);
@@ -259,9 +287,11 @@ function truncate(value, max) {
   defineFrankieConfig,
   describeTool,
   evaluateToolPolicy,
+  featuresConfigSchema,
   frankieConfigSchema,
   limitsConfigSchema,
   mcpServerSchema,
+  modelChoiceSchema,
   modelConfigSchema,
   parseFrankieConfig,
   thinkingLevelSchema,

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/config.ts","../src/tools.ts"],"sourcesContent":["export * from \"./config.js\";\nexport * from \"./protocol.js\";\nexport * from \"./tools.js\";\n","import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAkB;AAQX,IAAM,oBAAoB,aAC9B,OAAO;AAAA,EACN,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,aAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,aAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,aAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,aAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,aAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAEM,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,aAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,aAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,aAAE,MAAM,aAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,aAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA,EAExC,cAAc,aAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,aAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,aAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,aAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,aAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,aAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,aAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,MAAM,aAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,aAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,aAAE,OAAO;AAAA,EAC1C,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AACxC,CAAC;AAeM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;AC5MO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/config.ts","../src/tools.ts"],"sourcesContent":["export * from \"./config.js\";\nexport * from \"./protocol.js\";\nexport * from \"./tools.js\";\n","import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\n/** One selectable model in the (optional) end-user model picker. */\nexport const modelChoiceSchema = z.object({\n  /** Provider model id, e.g. \"accounts/fireworks/models/kimi-k2p7-code\". */\n  id: z.string().min(1),\n  /** Shown in the picker, e.g. \"Fast\" or \"Smart\". */\n  label: z.string().min(1),\n  /** Defaults to the workspace's default provider when omitted. */\n  provider: z.string().optional(),\n});\n\n/**\n * Optional, opt-in chat capabilities the SDK consumer turns on per workspace.\n * Everything here is OFF by default: an embedded agent only gets a wider surface\n * when the customer deliberately enables it.\n */\nexport const featuresConfigSchema = z\n  .object({\n    /** Let end users attach files. Images go to a vision model; docs are read as text. */\n    attachments: z\n      .object({\n        enabled: z.boolean().default(false),\n        /** Accepted MIME patterns, e.g. \"image/*\", \"text/*\", \"application/json\". */\n        accept: z.array(z.string()).default([\"image/*\", \"text/*\", \"application/json\"]),\n        maxMb: z.number().positive().max(25).default(10),\n        maxCount: z.number().int().positive().max(10).default(4),\n      })\n      .prefault({}),\n    /** Let end users choose the model, from a curated list you control. */\n    modelPicker: z\n      .object({\n        enabled: z.boolean().default(false),\n        /** The models offered to end users. The workspace default is always allowed. */\n        models: z.array(modelChoiceSchema).default([]),\n      })\n      .prefault({}),\n  })\n  .prefault({});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n  /** Opt-in end-user chat capabilities (attachments, model picker). */\n  features: featuresConfigSchema,\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelChoice = z.infer<typeof modelChoiceSchema>;\nexport type FeaturesConfig = z.infer<typeof featuresConfigSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAkB;AAQX,IAAM,oBAAoB,aAC9B,OAAO;AAAA,EACN,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,aAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,aAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,aAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,aAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,aAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAGM,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA,EAExC,IAAI,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEpB,OAAO,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEvB,UAAU,aAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAOM,IAAM,uBAAuB,aACjC,OAAO;AAAA;AAAA,EAEN,aAAa,aACV,OAAO;AAAA,IACN,SAAS,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,IAElC,QAAQ,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,UAAU,kBAAkB,CAAC;AAAA,IAC7E,OAAO,aAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA,IAC/C,UAAU,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACzD,CAAC,EACA,SAAS,CAAC,CAAC;AAAA;AAAA,EAEd,aAAa,aACV,OAAO;AAAA,IACN,SAAS,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,IAElC,QAAQ,aAAE,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS,CAAC,CAAC;AAChB,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,aAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,aAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,aAAE,MAAM,aAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,aAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA,EAExC,cAAc,aAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,aAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,aAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,aAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,aAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,aAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,aAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,MAAM,aAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,aAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,aAAE,OAAO;AAAA,EAC1C,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEtC,UAAU;AACZ,CAAC;AAiBM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;ACtPO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}

package/dist/index.d.cts

@@ -45,6 +45,33 @@ declare const modelConfigSchema: z.ZodObject<{
     }>>;
     streamReasoning: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
+/** One selectable model in the (optional) end-user model picker. */
+declare const modelChoiceSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    provider: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Optional, opt-in chat capabilities the SDK consumer turns on per workspace.
+ * Everything here is OFF by default: an embedded agent only gets a wider surface
+ * when the customer deliberately enables it.
+ */
+declare const featuresConfigSchema: z.ZodPrefault<z.ZodObject<{
+    attachments: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        accept: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        maxMb: z.ZodDefault<z.ZodNumber>;
+        maxCount: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    modelPicker: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        models: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            provider: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
 declare const mcpServerSchema: z.ZodObject<{
     name: z.ZodString;
     transport: z.ZodDefault<z.ZodEnum<{
@@ -222,9 +249,27 @@ declare const frankieConfigSchema: z.ZodObject<{
         sessionsPerIpPerWindow: z.ZodDefault<z.ZodNumber>;
         turnTimeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    features: z.ZodPrefault<z.ZodObject<{
+        attachments: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            accept: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            maxMb: z.ZodDefault<z.ZodNumber>;
+            maxCount: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        modelPicker: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            models: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                label: z.ZodString;
+                provider: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;
 type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;
+type ModelChoice = z.infer<typeof modelChoiceSchema>;
+type FeaturesConfig = z.infer<typeof featuresConfigSchema>;
 type ModelConfig = z.infer<typeof modelConfigSchema>;
 type McpServerConfig = z.infer<typeof mcpServerSchema>;
 type ApiSourceConfig = z.infer<typeof apiSourceSchema>;
@@ -296,6 +341,14 @@ type FrankieServerEvent = {
     type: "ping";
 };
 type FrankieErrorCode = "unauthorized" | "forbidden_origin" | "rate_limited" | "session_not_found" | "upstream_error" | "budget_exceeded" | "internal";
+/** A file the end user attached to a turn. `data` is base64 (no data-URL prefix). */
+interface ChatAttachment {
+    name: string;
+    /** MIME type, e.g. "image/png", "application/pdf", "text/csv". */
+    mimeType: string;
+    /** Base64-encoded file bytes. */
+    data: string;
+}
 /** Client -> server body for `POST /v1/chat`. */
 interface ChatRequestBody {
     /** Omit to start a new conversation; the server replies with a `session` event. */
@@ -307,6 +360,13 @@ interface ChatRequestBody {
      * as an instruction.
      */
     context?: Record<string, string | number | boolean | null>;
+    /**
+     * Model id to run this turn with. Honoured only when the workspace enables the
+     * model picker and the id is in its curated list; otherwise the default is used.
+     */
+    model?: string;
+    /** Files attached to this turn. Honoured only when attachments are enabled. */
+    attachments?: ChatAttachment[];
 }
 /** Client -> server body for `POST /v1/session`. */
 interface CreateSessionBody {
@@ -344,6 +404,26 @@ interface PublicWidgetConfig {
     allowAnonymous: boolean;
     /** Show tool calls inline as they run. */
     showToolActivity: boolean;
+    /** Opt-in capabilities the widget should render (attachments, model picker). */
+    features: PublicFeatures;
+}
+/** The subset of `features` config the widget needs to render its controls. */
+interface PublicFeatures {
+    attachments: {
+        enabled: boolean;
+        /** Accepted MIME patterns for the file input, e.g. "image/*". */
+        accept: string[];
+        maxMb: number;
+        maxCount: number;
+    };
+    modelPicker: {
+        enabled: boolean;
+        /** Curated models the end user may choose from. */
+        models: {
+            id: string;
+            label: string;
+        }[];
+    };
 }
 interface WidgetTheme {
     /** CSS color for primary actions. Any valid CSS color string. */
@@ -374,4 +454,4 @@ declare function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolD
 /** A short human label for a tool call, for the "Frankie is …" line in the UI. */
 declare function describeTool(toolName: string, input: unknown): string;
 
-export { type AgentConfig, type ApiSourceConfig, type AuthConfig, type BrandingConfig, type ChatRequestBody, type CreateSessionBody, type CreateSessionResponse, type FrankieConfig, type FrankieConfigInput, type FrankieErrorCode, type FrankieServerEvent, type LimitsConfig, type McpServerConfig, type ModelConfig, type PublicWidgetConfig, type StopReason, type ThinkingLevel, type ToolDecision, type ToolPolicy, type UsageSummary, type WidgetTheme, type WidgetThemeConfig, agentConfigSchema, apiSourceSchema, authConfigSchema, brandingConfigSchema, defineFrankieConfig, describeTool, evaluateToolPolicy, frankieConfigSchema, limitsConfigSchema, mcpServerSchema, modelConfigSchema, parseFrankieConfig, thinkingLevelSchema, toolPolicySchema, widgetThemeSchema };
+export { type AgentConfig, type ApiSourceConfig, type AuthConfig, type BrandingConfig, type ChatAttachment, type ChatRequestBody, type CreateSessionBody, type CreateSessionResponse, type FeaturesConfig, type FrankieConfig, type FrankieConfigInput, type FrankieErrorCode, type FrankieServerEvent, type LimitsConfig, type McpServerConfig, type ModelChoice, type ModelConfig, type PublicFeatures, type PublicWidgetConfig, type StopReason, type ThinkingLevel, type ToolDecision, type ToolPolicy, type UsageSummary, type WidgetTheme, type WidgetThemeConfig, agentConfigSchema, apiSourceSchema, authConfigSchema, brandingConfigSchema, defineFrankieConfig, describeTool, evaluateToolPolicy, featuresConfigSchema, frankieConfigSchema, limitsConfigSchema, mcpServerSchema, modelChoiceSchema, modelConfigSchema, parseFrankieConfig, thinkingLevelSchema, toolPolicySchema, widgetThemeSchema };

package/dist/index.d.ts

@@ -45,6 +45,33 @@ declare const modelConfigSchema: z.ZodObject<{
     }>>;
     streamReasoning: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>;
+/** One selectable model in the (optional) end-user model picker. */
+declare const modelChoiceSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    provider: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Optional, opt-in chat capabilities the SDK consumer turns on per workspace.
+ * Everything here is OFF by default: an embedded agent only gets a wider surface
+ * when the customer deliberately enables it.
+ */
+declare const featuresConfigSchema: z.ZodPrefault<z.ZodObject<{
+    attachments: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        accept: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        maxMb: z.ZodDefault<z.ZodNumber>;
+        maxCount: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    modelPicker: z.ZodPrefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        models: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            provider: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
 declare const mcpServerSchema: z.ZodObject<{
     name: z.ZodString;
     transport: z.ZodDefault<z.ZodEnum<{
@@ -222,9 +249,27 @@ declare const frankieConfigSchema: z.ZodObject<{
         sessionsPerIpPerWindow: z.ZodDefault<z.ZodNumber>;
         turnTimeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    features: z.ZodPrefault<z.ZodObject<{
+        attachments: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            accept: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            maxMb: z.ZodDefault<z.ZodNumber>;
+            maxCount: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+        modelPicker: z.ZodPrefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            models: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                label: z.ZodString;
+                provider: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;
 type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;
+type ModelChoice = z.infer<typeof modelChoiceSchema>;
+type FeaturesConfig = z.infer<typeof featuresConfigSchema>;
 type ModelConfig = z.infer<typeof modelConfigSchema>;
 type McpServerConfig = z.infer<typeof mcpServerSchema>;
 type ApiSourceConfig = z.infer<typeof apiSourceSchema>;
@@ -296,6 +341,14 @@ type FrankieServerEvent = {
     type: "ping";
 };
 type FrankieErrorCode = "unauthorized" | "forbidden_origin" | "rate_limited" | "session_not_found" | "upstream_error" | "budget_exceeded" | "internal";
+/** A file the end user attached to a turn. `data` is base64 (no data-URL prefix). */
+interface ChatAttachment {
+    name: string;
+    /** MIME type, e.g. "image/png", "application/pdf", "text/csv". */
+    mimeType: string;
+    /** Base64-encoded file bytes. */
+    data: string;
+}
 /** Client -> server body for `POST /v1/chat`. */
 interface ChatRequestBody {
     /** Omit to start a new conversation; the server replies with a `session` event. */
@@ -307,6 +360,13 @@ interface ChatRequestBody {
      * as an instruction.
      */
     context?: Record<string, string | number | boolean | null>;
+    /**
+     * Model id to run this turn with. Honoured only when the workspace enables the
+     * model picker and the id is in its curated list; otherwise the default is used.
+     */
+    model?: string;
+    /** Files attached to this turn. Honoured only when attachments are enabled. */
+    attachments?: ChatAttachment[];
 }
 /** Client -> server body for `POST /v1/session`. */
 interface CreateSessionBody {
@@ -344,6 +404,26 @@ interface PublicWidgetConfig {
     allowAnonymous: boolean;
     /** Show tool calls inline as they run. */
     showToolActivity: boolean;
+    /** Opt-in capabilities the widget should render (attachments, model picker). */
+    features: PublicFeatures;
+}
+/** The subset of `features` config the widget needs to render its controls. */
+interface PublicFeatures {
+    attachments: {
+        enabled: boolean;
+        /** Accepted MIME patterns for the file input, e.g. "image/*". */
+        accept: string[];
+        maxMb: number;
+        maxCount: number;
+    };
+    modelPicker: {
+        enabled: boolean;
+        /** Curated models the end user may choose from. */
+        models: {
+            id: string;
+            label: string;
+        }[];
+    };
 }
 interface WidgetTheme {
     /** CSS color for primary actions. Any valid CSS color string. */
@@ -374,4 +454,4 @@ declare function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolD
 /** A short human label for a tool call, for the "Frankie is …" line in the UI. */
 declare function describeTool(toolName: string, input: unknown): string;
 
-export { type AgentConfig, type ApiSourceConfig, type AuthConfig, type BrandingConfig, type ChatRequestBody, type CreateSessionBody, type CreateSessionResponse, type FrankieConfig, type FrankieConfigInput, type FrankieErrorCode, type FrankieServerEvent, type LimitsConfig, type McpServerConfig, type ModelConfig, type PublicWidgetConfig, type StopReason, type ThinkingLevel, type ToolDecision, type ToolPolicy, type UsageSummary, type WidgetTheme, type WidgetThemeConfig, agentConfigSchema, apiSourceSchema, authConfigSchema, brandingConfigSchema, defineFrankieConfig, describeTool, evaluateToolPolicy, frankieConfigSchema, limitsConfigSchema, mcpServerSchema, modelConfigSchema, parseFrankieConfig, thinkingLevelSchema, toolPolicySchema, widgetThemeSchema };
+export { type AgentConfig, type ApiSourceConfig, type AuthConfig, type BrandingConfig, type ChatAttachment, type ChatRequestBody, type CreateSessionBody, type CreateSessionResponse, type FeaturesConfig, type FrankieConfig, type FrankieConfigInput, type FrankieErrorCode, type FrankieServerEvent, type LimitsConfig, type McpServerConfig, type ModelChoice, type ModelConfig, type PublicFeatures, type PublicWidgetConfig, type StopReason, type ThinkingLevel, type ToolDecision, type ToolPolicy, type UsageSummary, type WidgetTheme, type WidgetThemeConfig, agentConfigSchema, apiSourceSchema, authConfigSchema, brandingConfigSchema, defineFrankieConfig, describeTool, evaluateToolPolicy, featuresConfigSchema, frankieConfigSchema, limitsConfigSchema, mcpServerSchema, modelChoiceSchema, modelConfigSchema, parseFrankieConfig, thinkingLevelSchema, toolPolicySchema, widgetThemeSchema };

package/dist/index.js

@@ -38,6 +38,30 @@ var modelConfigSchema = z.object({
   /** Forward the model's reasoning stream to the client as thinking deltas. */
   streamReasoning: z.boolean().default(false)
 });
+var modelChoiceSchema = z.object({
+  /** Provider model id, e.g. "accounts/fireworks/models/kimi-k2p7-code". */
+  id: z.string().min(1),
+  /** Shown in the picker, e.g. "Fast" or "Smart". */
+  label: z.string().min(1),
+  /** Defaults to the workspace's default provider when omitted. */
+  provider: z.string().optional()
+});
+var featuresConfigSchema = z.object({
+  /** Let end users attach files. Images go to a vision model; docs are read as text. */
+  attachments: z.object({
+    enabled: z.boolean().default(false),
+    /** Accepted MIME patterns, e.g. "image/*", "text/*", "application/json". */
+    accept: z.array(z.string()).default(["image/*", "text/*", "application/json"]),
+    maxMb: z.number().positive().max(25).default(10),
+    maxCount: z.number().int().positive().max(10).default(4)
+  }).prefault({}),
+  /** Let end users choose the model, from a curated list you control. */
+  modelPicker: z.object({
+    enabled: z.boolean().default(false),
+    /** The models offered to end users. The workspace default is always allowed. */
+    models: z.array(modelChoiceSchema).default([])
+  }).prefault({})
+}).prefault({});
 var mcpServerSchema = z.object({
   name: z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "MCP server names must be alphanumeric with - or _"),
   /** `http` covers streamable HTTP; `sse` is the legacy transport. */
@@ -163,7 +187,9 @@ var frankieConfigSchema = z.object({
   mcpServers: z.array(mcpServerSchema).default([]),
   /** APIs turned into tools from their OpenAPI document. */
   apis: z.array(apiSourceSchema).default([]),
-  limits: limitsConfigSchema.prefault({})
+  limits: limitsConfigSchema.prefault({}),
+  /** Opt-in end-user chat capabilities (attachments, model picker). */
+  features: featuresConfigSchema
 });
 function parseFrankieConfig(input) {
   return frankieConfigSchema.parse(input);
@@ -218,9 +244,11 @@ export {
   defineFrankieConfig,
   describeTool,
   evaluateToolPolicy,
+  featuresConfigSchema,
   frankieConfigSchema,
   limitsConfigSchema,
   mcpServerSchema,
+  modelChoiceSchema,
   modelConfigSchema,
   parseFrankieConfig,
   thinkingLevelSchema,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts","../src/tools.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAQX,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,EAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,EAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,EAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,EAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA,EAExC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,EAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,EAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,EAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AACxC,CAAC;AAeM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;AC5MO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}
+{"version":3,"sources":["../src/config.ts","../src/tools.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\n/** One selectable model in the (optional) end-user model picker. */\nexport const modelChoiceSchema = z.object({\n  /** Provider model id, e.g. \"accounts/fireworks/models/kimi-k2p7-code\". */\n  id: z.string().min(1),\n  /** Shown in the picker, e.g. \"Fast\" or \"Smart\". */\n  label: z.string().min(1),\n  /** Defaults to the workspace's default provider when omitted. */\n  provider: z.string().optional(),\n});\n\n/**\n * Optional, opt-in chat capabilities the SDK consumer turns on per workspace.\n * Everything here is OFF by default: an embedded agent only gets a wider surface\n * when the customer deliberately enables it.\n */\nexport const featuresConfigSchema = z\n  .object({\n    /** Let end users attach files. Images go to a vision model; docs are read as text. */\n    attachments: z\n      .object({\n        enabled: z.boolean().default(false),\n        /** Accepted MIME patterns, e.g. \"image/*\", \"text/*\", \"application/json\". */\n        accept: z.array(z.string()).default([\"image/*\", \"text/*\", \"application/json\"]),\n        maxMb: z.number().positive().max(25).default(10),\n        maxCount: z.number().int().positive().max(10).default(4),\n      })\n      .prefault({}),\n    /** Let end users choose the model, from a curated list you control. */\n    modelPicker: z\n      .object({\n        enabled: z.boolean().default(false),\n        /** The models offered to end users. The workspace default is always allowed. */\n        models: z.array(modelChoiceSchema).default([]),\n      })\n      .prefault({}),\n  })\n  .prefault({});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n  /** Opt-in end-user chat capabilities (attachments, model picker). */\n  features: featuresConfigSchema,\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelChoice = z.infer<typeof modelChoiceSchema>;\nexport type FeaturesConfig = z.infer<typeof featuresConfigSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";AAAA,SAAS,SAAS;AAQX,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,EAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,EAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,EAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAGM,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA,EAExC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEvB,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAOM,IAAM,uBAAuB,EACjC,OAAO;AAAA;AAAA,EAEN,aAAa,EACV,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,IAElC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,WAAW,UAAU,kBAAkB,CAAC;AAAA,IAC7E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA,IAC/C,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AAAA,EACzD,CAAC,EACA,SAAS,CAAC,CAAC;AAAA;AAAA,EAEd,aAAa,EACV,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,IAElC,QAAQ,EAAE,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC;AAAA,EAC/C,CAAC,EACA,SAAS,CAAC,CAAC;AAChB,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,EAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,EAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,EAAE,OAAO;AAAA;AAAA,EAExC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,EAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,EAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,EAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,EAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,EAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEtC,UAAU;AACZ,CAAC;AAiBM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;ACtPO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frankieai/core",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Shared config schema and wire protocol for Frankie.",
   "license": "MIT",
   "type": "module",