@guuey/agent-client 0.3.0 → 0.3.1

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { parseSseEvents, extractAssistantText, reduceAssistantText, stringField, parseConsentRequest, parseLinkRequest, type ParsedSseEvent, } from "./sse";
 export { dismissLinkPrompt } from "./link-prompt";
-export { createUiResourceReader, type CreateUiResourceReaderOptions, type ResolvedUiResourceMount, createWebAdapters, localStorageThreadStore, webGenerateId, fetchStreamTransport, AgentResponseError, type CreateWebAdaptersOptions, } from "./web-adapters";
+export { createUiResourceReader, type CreateUiResourceReaderOptions, createWebAdapters, localStorageThreadStore, webGenerateId, fetchStreamTransport, AgentResponseError, type CreateWebAdaptersOptions, } from "./web-adapters";
 export { fetchThreadHistory, threadHistoryRowsToMessages, threadHistoryRowsToCards, HistoryUnauthorizedError, type ThreadHistoryRow, type ThreadHistoryFetchOptions, } from "./history";
 export { ingestMessageFrame } from "./blocks";
 export { sortHistoryCards, toolNameFor } from "./history";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAK9C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAI1D,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EACV,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,GACpB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,iBAAiB,EACjB,uBAAuB,EACvB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,wBAAwB,GAC9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAK9C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAI1D,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACxF,YAAY,EACV,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,SAAS,CAAC"}

package/dist/web-adapters.d.ts

@@ -6,6 +6,7 @@
  * functions — never at module load — so this file is import-safe under SSR
  * (the functions guard on `typeof window`).
  */
+import { type ResolvedViewMount } from "@guuey/mcp-apps-host";
 import type { AgentInvokeAdapters, InvokeRequest, ThreadIdStore } from "./types";
 /**
  * Thrown when the pod returns a non-2xx status on `/agent/invoke` (before any
@@ -136,36 +137,18 @@ export interface CreateUiResourceReaderOptions {
     fetchImpl?: typeof fetch;
 }
 /**
- * Build a `@guuey/mcp-apps-host` `UiResourceReader` over guuey's
- * authenticated resources/read proxy (guuey#122 Gap 1:
- * `GET /v1/threads/:threadId/ui-resource?uri=…`).
+ * Build a `UiResourceReader` over guuey's authenticated resources/read proxy
+ * (guuey#122 Gap 1: `GET /v1/threads/:threadId/ui-resource?uri=…`).
  *
+ * This is `@guuey/mcp-apps-host`'s `createMcpUiResourceReader` assembly over
+ * a guuey-platform transport (guuey#127) — channel resolution and payload
+ * narrowing live in the host package; only the transport is guuey-shaped.
  * The proxy owns EVERYTHING trust-shaped: caller identity (the same three
  * families as the history read), thread ownership, the locator-to-thread
- * scope guard, and the per-user federation mint. This reader only carries
+ * scope guard, and the per-user federation mint. This transport only carries
  * the surface's existing credential and maps EVERY non-OK — 401/403/404/502
  * alike — to `undefined`: deny is byte-identical to a miss, and a miss
  * renders the host's placeholder, never an error surface.
- *
- * Channel resolution is the phase-1 heuristic: a `ui://ggui/…` uri mounts in
- * the ggui-CSP sandbox page (`channel: "ggui"`), anything else in the
- * self-only page (`channel: "inline"`). Phase 2 (per-resource declared-CSP
- * construction from the response `_meta.ui.csp`) retires the heuristic —
- * conformance map, retirement step 3.
- */
-/**
- * The mount the reader resolves — structurally assignable to
- * `@guuey/mcp-apps-host`'s `ViewMount` mountable arms (typed inline so this
- * package carries no dependency on the host package; hosts that consume
- * both see one structural type).
  */
-export interface ResolvedUiResourceMount {
-    channel: "inline" | "ggui";
-    resource: {
-        uri: string;
-        mimeType?: string;
-        text: string;
-    };
-}
-export declare function createUiResourceReader(options: CreateUiResourceReaderOptions): (resourceUri: string) => Promise<ResolvedUiResourceMount | undefined>;
+export declare function createUiResourceReader(options: CreateUiResourceReaderOptions): (resourceUri: string) => Promise<ResolvedViewMount | undefined>;
 //# sourceMappingURL=web-adapters.d.ts.map

package/dist/web-adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-adapters.d.ts","sourceRoot":"","sources":["../src/web-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EAEb,aAAa,EACd,MAAM,SAAS,CAAC;AAGjB;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAFtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,EAAE,aAiBrC,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAwCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAuB,oBAAoB,CACzC,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAC1B,cAAc,CAAC,MAAM,CAAC,CA4CxB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,wBAA6B,GAClC,mBAAmB,CAwErB;AAED,mGAAmG;AACnG,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC3B,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAkDvE"}
+{"version":3,"file":"web-adapters.d.ts","sourceRoot":"","sources":["../src/web-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EAEb,aAAa,EACd,MAAM,SAAS,CAAC;AAGjB;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAFtB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,EAAE,aAiBrC,CAAC;AAEF,mEAAmE;AACnE,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAwCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAuB,oBAAoB,CACzC,GAAG,EAAE,aAAa,EAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAC1B,cAAc,CAAC,MAAM,CAAC,CA4CxB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;;;;;;;OAiBG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;IACH,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,wBAA6B,GAClC,mBAAmB,CAwErB;AAED,mGAAmG;AACnG,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,6BAA6B,GACrC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAoDjE"}

package/dist/web-adapters.js

@@ -1,3 +1,12 @@
+/**
+ * Web (browser / Next.js) host adapters for {@link useAgentInvoke}.
+ *
+ * Studio builds its bundle via {@link createWebAdapters}. The implementations
+ * touch `window.localStorage`, `crypto`, and `fetch` only inside their
+ * functions — never at module load — so this file is import-safe under SSR
+ * (the functions guard on `typeof window`).
+ */
+import { createMcpUiResourceReader, } from "@guuey/mcp-apps-host";
 import { fetchThreadHistory, HistoryUnauthorizedError } from "./history";
 /**
  * Thrown when the pod returns a non-2xx status on `/agent/invoke` (before any
@@ -227,9 +236,23 @@ export function createWebAdapters(opts = {}) {
     }
     return adapters;
 }
+/**
+ * Build a `UiResourceReader` over guuey's authenticated resources/read proxy
+ * (guuey#122 Gap 1: `GET /v1/threads/:threadId/ui-resource?uri=…`).
+ *
+ * This is `@guuey/mcp-apps-host`'s `createMcpUiResourceReader` assembly over
+ * a guuey-platform transport (guuey#127) — channel resolution and payload
+ * narrowing live in the host package; only the transport is guuey-shaped.
+ * The proxy owns EVERYTHING trust-shaped: caller identity (the same three
+ * families as the history read), thread ownership, the locator-to-thread
+ * scope guard, and the per-user federation mint. This transport only carries
+ * the surface's existing credential and maps EVERY non-OK — 401/403/404/502
+ * alike — to `undefined`: deny is byte-identical to a miss, and a miss
+ * renders the host's placeholder, never an error surface.
+ */
 export function createUiResourceReader(options) {
     const fetchImpl = options.fetchImpl ?? fetch;
-    return async (resourceUri) => {
+    const readResource = async (resourceUri) => {
         const headers = {};
         const token = options.getAccessToken ? await options.getAccessToken() : null;
         const guest = sendableGuestSecret(options.guestSecret);
@@ -272,15 +295,18 @@ export function createUiResourceReader(options) {
         catch {
             return undefined;
         }
-        if (typeof body.uri !== "string" || typeof body.text !== "string")
+        // The proxy passes the blob arm through (a blob-only resource is not
+        // silently a miss — its route contract); mirror that here.
+        if (typeof body.uri !== "string")
+            return undefined;
+        if (typeof body.text !== "string" && typeof body.blob !== "string")
             return undefined;
         return {
-            channel: resourceUri.startsWith("ui://ggui/") ? "ggui" : "inline",
-            resource: {
-                uri: body.uri,
-                ...(typeof body.mimeType === "string" ? { mimeType: body.mimeType } : {}),
-                text: body.text,
-            },
+            uri: body.uri,
+            ...(typeof body.mimeType === "string" ? { mimeType: body.mimeType } : {}),
+            ...(typeof body.text === "string" ? { text: body.text } : {}),
+            ...(typeof body.blob === "string" ? { blob: body.blob } : {}),
         };
     };
+    return createMcpUiResourceReader({ readResource });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/agent-client",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Client SDK for Guuey's agent runtime: the `useAgentInvoke` React hook + pure SSE helpers that speak the /agent/invoke streaming contract, plus the paginated thread-history read plane. Host adapters (storage / id / transport) are injected, so it runs on web (Next) and React Native alike.",
   "license": "MIT",
   "type": "module",
@@ -28,7 +28,8 @@
     }
   },
   "dependencies": {
-    "@silverprotocol/core": "0.4.1"
+    "@silverprotocol/core": "0.4.1",
+    "@guuey/mcp-apps-host": "0.3.1"
   },
   "peerDependencies": {
     "react": ">=18"

package/src/index.ts

@@ -11,7 +11,6 @@ export { dismissLinkPrompt } from "./link-prompt";
 export {
   createUiResourceReader,
   type CreateUiResourceReaderOptions,
-  type ResolvedUiResourceMount,
   createWebAdapters,
   localStorageThreadStore,
   webGenerateId,

package/src/web-adapters.ts

@@ -6,6 +6,11 @@
  * functions — never at module load — so this file is import-safe under SSR
  * (the functions guard on `typeof window`).
  */
+import {
+  createMcpUiResourceReader,
+  type McpResourceReadResult,
+  type ResolvedViewMount,
+} from "@guuey/mcp-apps-host";
 import type {
   AgentInvokeAdapters,
   InvokeRequest,
@@ -333,39 +338,24 @@ export interface CreateUiResourceReaderOptions {
 }
 
 /**
- * Build a `@guuey/mcp-apps-host` `UiResourceReader` over guuey's
- * authenticated resources/read proxy (guuey#122 Gap 1:
- * `GET /v1/threads/:threadId/ui-resource?uri=…`).
+ * Build a `UiResourceReader` over guuey's authenticated resources/read proxy
+ * (guuey#122 Gap 1: `GET /v1/threads/:threadId/ui-resource?uri=…`).
  *
+ * This is `@guuey/mcp-apps-host`'s `createMcpUiResourceReader` assembly over
+ * a guuey-platform transport (guuey#127) — channel resolution and payload
+ * narrowing live in the host package; only the transport is guuey-shaped.
  * The proxy owns EVERYTHING trust-shaped: caller identity (the same three
  * families as the history read), thread ownership, the locator-to-thread
- * scope guard, and the per-user federation mint. This reader only carries
+ * scope guard, and the per-user federation mint. This transport only carries
  * the surface's existing credential and maps EVERY non-OK — 401/403/404/502
  * alike — to `undefined`: deny is byte-identical to a miss, and a miss
  * renders the host's placeholder, never an error surface.
- *
- * Channel resolution is the phase-1 heuristic: a `ui://ggui/…` uri mounts in
- * the ggui-CSP sandbox page (`channel: "ggui"`), anything else in the
- * self-only page (`channel: "inline"`). Phase 2 (per-resource declared-CSP
- * construction from the response `_meta.ui.csp`) retires the heuristic —
- * conformance map, retirement step 3.
- */
-/**
- * The mount the reader resolves — structurally assignable to
- * `@guuey/mcp-apps-host`'s `ViewMount` mountable arms (typed inline so this
- * package carries no dependency on the host package; hosts that consume
- * both see one structural type).
  */
-export interface ResolvedUiResourceMount {
-  channel: "inline" | "ggui";
-  resource: { uri: string; mimeType?: string; text: string };
-}
-
 export function createUiResourceReader(
   options: CreateUiResourceReaderOptions,
-): (resourceUri: string) => Promise<ResolvedUiResourceMount | undefined> {
+): (resourceUri: string) => Promise<ResolvedViewMount | undefined> {
   const fetchImpl = options.fetchImpl ?? fetch;
-  return async (resourceUri) => {
+  const readResource = async (resourceUri: string): Promise<McpResourceReadResult | undefined> => {
     const headers: Record<string, string> = {};
     const token = options.getAccessToken ? await options.getAccessToken() : null;
     const guest = sendableGuestSecret(options.guestSecret);
@@ -397,20 +387,22 @@ export function createUiResourceReader(
       }
     }
     if (!res.ok) return undefined;
-    let body: { uri?: unknown; mimeType?: unknown; text?: unknown };
+    let body: { uri?: unknown; mimeType?: unknown; text?: unknown; blob?: unknown };
     try {
       body = (await res.json()) as typeof body;
     } catch {
       return undefined;
     }
-    if (typeof body.uri !== "string" || typeof body.text !== "string") return undefined;
+    // The proxy passes the blob arm through (a blob-only resource is not
+    // silently a miss — its route contract); mirror that here.
+    if (typeof body.uri !== "string") return undefined;
+    if (typeof body.text !== "string" && typeof body.blob !== "string") return undefined;
     return {
-      channel: resourceUri.startsWith("ui://ggui/") ? "ggui" : "inline",
-      resource: {
-        uri: body.uri,
-        ...(typeof body.mimeType === "string" ? { mimeType: body.mimeType } : {}),
-        text: body.text,
-      },
+      uri: body.uri,
+      ...(typeof body.mimeType === "string" ? { mimeType: body.mimeType } : {}),
+      ...(typeof body.text === "string" ? { text: body.text } : {}),
+      ...(typeof body.blob === "string" ? { blob: body.blob } : {}),
     };
   };
+  return createMcpUiResourceReader({ readResource });
 }