@hainiva/agent-sdk 0.0.0-stage → 0.3.0

package/dist/esm/embed.d.ts

@@ -0,0 +1,188 @@
+/**
+ * @hainiva/agent-sdk/embed — the HAINIVA desk inside your web product.
+ *
+ *   import { HainivaAgent } from "@hainiva/agent-sdk";
+ *   import { mountDesk } from "@hainiva/agent-sdk/embed";
+ *
+ *   const agent = new HainivaAgent({ baseUrl: "https://api.hainiva.com", tenantId, getAssertion });
+ *   await agent.connect();
+ *   const desk = mountDesk(document.getElementById("desk")!, {
+ *     agent, appId: "<your agent app id>", baseUrl: "https://app.hainiva.com",
+ *     onEnded: (reason) => showSignedOut(reason),
+ *   });
+ *   // later: desk.setTheme("dark"); desk.destroy();
+ *
+ * Your staff member is signed in with YOUR agent session: the SDK exchanges it
+ * for a 15-minute desk token (POST /agent/v1/desk-session) and hands that to
+ * the desk over postMessage — never in the URL, never stored. The desk asks
+ * for a fresh one before it expires; when the session ends (signed out,
+ * suspended, app paused) the desk shows "ended" and `onEnded` fires.
+ *
+ * Your page's origin must be in the agent app's `allowedOrigins`: that list is
+ * also the desk's CSP frame-ancestors, so any other site gets a blank frame.
+ *
+ * Security, both directions:
+ *   - only messages whose `event.source` is THIS iframe's window and whose
+ *     `event.origin` is the HAINIVA desk origin are read, and only in the exact
+ *     message shapes below;
+ *   - everything we send goes to the desk origin only (never "*").
+ */
+import type { AgentDeskSessionDto } from "./contract.js";
+export type DeskEndReason = "not_embedded" | "no_host" | "expired" | "revoked" | "host_ended" | "misconfigured"
+/** The desk never answered (wrong origin: the CSP blocked the frame; network). */
+ | "load_failed"
+/** Your agent session could not provide a desk token. */
+ | "session_ended";
+/** From the desk. */
+export type DeskToHost = {
+    v: 1;
+    type: "hainiva:ready";
+    appId: string;
+} | {
+    v: 1;
+    type: "hainiva:token-request";
+    reason: "expiring" | "unauthorized";
+} | {
+    v: 1;
+    type: "hainiva:ended";
+    reason: Exclude<DeskEndReason, "load_failed" | "session_ended">;
+} | {
+    v: 1;
+    type: "hainiva:dial";
+    number: string;
+    contactId?: string;
+} | {
+    v: 1;
+    type: "hainiva:dialer";
+    number?: string;
+    contactId?: string;
+} | {
+    v: 1;
+    type: "hainiva:open-url";
+    url: string;
+} | {
+    v: 1;
+    type: "hainiva:media-error";
+    name: string;
+};
+/** To the desk. */
+export type HostToDesk = {
+    v: 1;
+    type: "hainiva:token";
+    token: string;
+    expiresAt: string;
+} | {
+    v: 1;
+    type: "hainiva:theme";
+    mode: "light" | "dark";
+} | {
+    v: 1;
+    type: "hainiva:locale";
+    locale: "vi" | "en";
+} | {
+    v: 1;
+    type: "hainiva:end";
+};
+/** Exactly one of the desk's messages, or null. */
+export declare function parseDeskMessage(data: unknown): DeskToHost | null;
+/** Where the desk token comes from: `HainivaAgent` (its `desk.session()`), or anything shaped like it. */
+export interface DeskTokenSource {
+    desk: {
+        session(): Promise<AgentDeskSessionDto>;
+    };
+}
+export interface DeskCallbacks {
+    /** The desk wants to place a call (React Native: your native call; web: the desk calls itself and never sends this). */
+    onDial?: (number: string, contactId?: string) => void;
+    /** Open your dialer, optionally pre-filled. */
+    onDialer?: (prefill: {
+        number?: string;
+        contactId?: string;
+    }) => void;
+    /** The desk's session is over. Show your own signed-out state; mount again after a new sign-in. */
+    onEnded?: (reason: DeskEndReason) => void;
+    /** A link the desk cannot open itself (React Native). Default: ignored. */
+    onOpenUrl?: (url: string) => void;
+    /** The microphone/camera was refused (web): check your iframe's `allow` and the browser's permission. */
+    onMediaError?: (name: string) => void;
+}
+/**
+ * The host side of the desk protocol, transport-agnostic: `mountDesk` (iframe)
+ * and `<HainivaDesk/>` (React Native WebView) both drive one.
+ * @internal exported for the React Native entry and tests.
+ */
+export declare class DeskHost {
+    private readonly appId;
+    private readonly source;
+    private readonly send;
+    private readonly cb;
+    private ended;
+    private ready;
+    private inflight;
+    constructor(appId: string, source: DeskTokenSource, send: (m: HostToDesk) => void, cb: DeskCallbacks);
+    get isReady(): boolean;
+    get isEnded(): boolean;
+    /** A raw message from the desk (already origin/source-checked by the transport). */
+    receive(raw: unknown): void;
+    /** One desk-session request at a time; the token goes to the desk only. */
+    supplyToken(): Promise<void>;
+    setTheme(mode: "light" | "dark"): void;
+    setLocale(locale: "vi" | "en"): void;
+    finish(reason: DeskEndReason, tellDesk: boolean): void;
+}
+/** The desk page for an app. The URL carries the app id ONLY. */
+export declare function deskUrl(baseUrl: string, appId: string, opts?: {
+    allowInsecureLocalhost?: boolean;
+}): URL;
+/**
+ * The iframe's sandbox — every flag the desk needs and nothing more:
+ *   allow-scripts                 the desk is an application;
+ *   allow-same-origin             the desk keeps ITS OWN origin (app.hainiva.com):
+ *                                 its same-origin API calls, its session storage
+ *                                 and the gateway's Origin check depend on it. It
+ *                                 gives the desk no access to your page — that is
+ *                                 a different origin;
+ *   allow-forms                   the composer and every dialog submit forms;
+ *   allow-popups                  links, recordings and help open in a new tab…
+ *   allow-popups-to-escape-sandbox …as normal pages, not sandboxed copies;
+ *   allow-downloads               call recordings, attachments, exports;
+ *   allow-modals                  the desk confirms destructive actions (confirm()).
+ * Deliberately NOT: allow-top-navigation(-by-user-activation) — the desk can
+ * never navigate your page; allow-pointer-lock, allow-presentation,
+ * allow-orientation-lock, allow-storage-access-by-user-activation.
+ */
+export declare const DESK_SANDBOX = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox allow-downloads allow-modals";
+/** Calls in the iframe are WebRTC: the microphone (and camera for video) must be delegated. */
+export declare const DESK_ALLOW = "microphone; camera; autoplay; clipboard-write";
+export interface MountDeskOptions extends DeskCallbacks {
+    /** A connected HainivaAgent (or anything with `desk.session()`). */
+    agent: DeskTokenSource;
+    /** Your agent app id (its allowedOrigins must list this page's origin). */
+    appId: string;
+    /** The HAINIVA desk, e.g. https://app.hainiva.com. */
+    baseUrl: string;
+    theme?: "light" | "dark";
+    locale?: "vi" | "en";
+    /** The iframe's accessible title. Default "HAINIVA". */
+    title?: string;
+    /** No `hainiva:ready` within this long = onEnded("load_failed"). Default 20 s. */
+    loadTimeoutMs?: number;
+    /** Local development only (http://localhost desk). */
+    allowInsecureLocalhost?: boolean;
+}
+export interface MountedDesk {
+    /** Remove the desk (it is told to drop its token first). */
+    destroy(): void;
+    setTheme(mode: "light" | "dark"): void;
+    setLocale(locale: "vi" | "en"): void;
+    /** The iframe, for sizing. */
+    readonly iframe: HTMLIFrameElement;
+}
+interface ContainerLike {
+    appendChild(n: unknown): unknown;
+    ownerDocument?: Document | null;
+}
+/** Show the HAINIVA desk in `container`, signed in as your agent session's staff member. */
+export declare function mountDesk(container: ContainerLike, o: MountDeskOptions): MountedDesk;
+export {};
+//# sourceMappingURL=embed.d.ts.map

package/dist/esm/embed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.d.ts","sourceRoot":"","sources":["../../src/embed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAMzD,MAAM,MAAM,aAAa,GACrB,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,eAAe;AACrF,kFAAkF;GAChF,aAAa;AACf,yDAAyD;GACvD,eAAe,CAAC;AAEpB,qBAAqB;AACrB,MAAM,MAAM,UAAU,GAClB;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,cAAc,CAAA;CAAE,GAC5E;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,GAAG,eAAe,CAAC,CAAA;CAAE,GAChG;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,mBAAmB;AACnB,MAAM,MAAM,UAAU,GAClB;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAA;CAAE,GACvD;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,GACrD;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAYlC,mDAAmD;AACnD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAgCjE;AAED,0GAA0G;AAC1G,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE;QAAE,OAAO,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAA;KAAE,CAAA;CAAE;AAEtF,MAAM,WAAW,aAAa;IAC5B,wHAAwH;IACxH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACtE,mGAAmG;IACnG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C,2EAA2E;IAC3E,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,yGAAyG;IACzG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED;;;;GAIG;AACH,qBAAa,QAAQ;IAMjB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IARrB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,QAAQ,CAA8B;gBAG3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,EAC7B,EAAE,EAAE,aAAa;IAGpC,IAAI,OAAO,IAAI,OAAO,CAAuB;IAC7C,IAAI,OAAO,IAAI,OAAO,CAAuB;IAE7C,oFAAoF;IACpF,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI;IAmB3B,2EAA2E;IAC3E,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;IACtC,SAAS,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;IAEpC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI;CAMvD;AAED,iEAAiE;AACjE,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,GAAG,CAM5G;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,yHAAyH,CAAC;AACnJ,+FAA+F;AAC/F,eAAO,MAAM,UAAU,kDAAkD,CAAC;AAE1E,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,oEAAoE;IACpE,KAAK,EAAE,eAAe,CAAC;IACvB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sDAAsD;IACtD,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,OAAO,IAAI,IAAI,CAAC;IAChB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IACrC,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED,UAAU,aAAa;IAAG,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE;AAE7F,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,GAAG,WAAW,CAmDpF"}

package/dist/esm/embed.js

@@ -0,0 +1,247 @@
+import { HainivaAgentError } from "./errors.js";
+import { assertSafeUrl } from "./url.js";
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const END_REASONS = new Set(["not_embedded", "no_host", "expired", "revoked", "host_ended", "misconfigured"]);
+const PHONE = /^[0-9+*#() .-]{1,40}$/;
+function keysAre(o, required, optional = []) {
+    const k = Object.keys(o);
+    return required.every((r) => k.includes(r)) && k.every((x) => required.includes(x) || optional.includes(x));
+}
+const optId = (v) => v === undefined || (typeof v === "string" && UUID.test(v));
+/** Exactly one of the desk's messages, or null. */
+export function parseDeskMessage(data) {
+    let d = data;
+    if (typeof d === "string") {
+        if (d.length > 8192)
+            return null;
+        try {
+            d = JSON.parse(d);
+        }
+        catch {
+            return null;
+        }
+    }
+    if (!d || typeof d !== "object" || Array.isArray(d))
+        return null;
+    const o = d;
+    if (o["v"] !== 1)
+        return null;
+    switch (o["type"]) {
+        case "hainiva:ready":
+            return keysAre(o, ["v", "type", "appId"]) && typeof o["appId"] === "string" && UUID.test(o["appId"]) ? { v: 1, type: "hainiva:ready", appId: o["appId"] } : null;
+        case "hainiva:token-request":
+            return keysAre(o, ["v", "type", "reason"]) && (o["reason"] === "expiring" || o["reason"] === "unauthorized") ? { v: 1, type: "hainiva:token-request", reason: o["reason"] } : null;
+        case "hainiva:ended":
+            return keysAre(o, ["v", "type", "reason"]) && typeof o["reason"] === "string" && END_REASONS.has(o["reason"])
+                ? { v: 1, type: "hainiva:ended", reason: o["reason"] } : null;
+        case "hainiva:dial":
+            if (!keysAre(o, ["v", "type", "number"], ["contactId"]) || typeof o["number"] !== "string" || !PHONE.test(o["number"]) || !optId(o["contactId"]))
+                return null;
+            return { v: 1, type: "hainiva:dial", number: o["number"], ...(o["contactId"] ? { contactId: o["contactId"] } : {}) };
+        case "hainiva:dialer":
+            if (!keysAre(o, ["v", "type"], ["number", "contactId"]) || !optId(o["contactId"]))
+                return null;
+            if (o["number"] !== undefined && (typeof o["number"] !== "string" || !PHONE.test(o["number"])))
+                return null;
+            return { v: 1, type: "hainiva:dialer", ...(o["number"] ? { number: o["number"] } : {}), ...(o["contactId"] ? { contactId: o["contactId"] } : {}) };
+        case "hainiva:open-url": {
+            if (!keysAre(o, ["v", "type", "url"]) || typeof o["url"] !== "string" || o["url"].length > 2048)
+                return null;
+            let u;
+            try {
+                u = new URL(o["url"]);
+            }
+            catch {
+                return null;
+            }
+            return ["https:", "http:", "mailto:", "tel:"].includes(u.protocol) ? { v: 1, type: "hainiva:open-url", url: u.href } : null;
+        }
+        case "hainiva:media-error":
+            return keysAre(o, ["v", "type", "name"]) && typeof o["name"] === "string" && o["name"].length <= 60 ? { v: 1, type: "hainiva:media-error", name: o["name"] } : null;
+        default:
+            return null;
+    }
+}
+/**
+ * The host side of the desk protocol, transport-agnostic: `mountDesk` (iframe)
+ * and `<HainivaDesk/>` (React Native WebView) both drive one.
+ * @internal exported for the React Native entry and tests.
+ */
+export class DeskHost {
+    constructor(appId, source, send, cb) {
+        this.appId = appId;
+        this.source = source;
+        this.send = send;
+        this.cb = cb;
+        this.ended = false;
+        this.ready = false;
+        this.inflight = null;
+    }
+    get isReady() { return this.ready; }
+    get isEnded() { return this.ended; }
+    /** A raw message from the desk (already origin/source-checked by the transport). */
+    receive(raw) {
+        if (this.ended)
+            return;
+        const m = parseDeskMessage(raw);
+        if (!m)
+            return;
+        switch (m.type) {
+            case "hainiva:ready":
+                if (m.appId.toLowerCase() !== this.appId.toLowerCase())
+                    return;
+                this.ready = true;
+                void this.supplyToken();
+                return;
+            case "hainiva:token-request":
+                void this.supplyToken();
+                return;
+            case "hainiva:ended":
+                this.finish(m.reason, false);
+                return;
+            case "hainiva:dial":
+                this.cb.onDial?.(m.number, m.contactId);
+                return;
+            case "hainiva:dialer":
+                this.cb.onDialer?.({ ...(m.number ? { number: m.number } : {}), ...(m.contactId ? { contactId: m.contactId } : {}) });
+                return;
+            case "hainiva:open-url":
+                this.cb.onOpenUrl?.(m.url);
+                return;
+            case "hainiva:media-error":
+                this.cb.onMediaError?.(m.name);
+                return;
+        }
+    }
+    /** One desk-session request at a time; the token goes to the desk only. */
+    supplyToken() {
+        if (this.ended)
+            return Promise.resolve();
+        this.inflight ?? (this.inflight = (async () => {
+            try {
+                const d = await this.source.desk.session();
+                if (!this.ended)
+                    this.send({ v: 1, type: "hainiva:token", token: d.token, expiresAt: d.expiresAt });
+            }
+            catch (e) {
+                // A final refusal of the agent session: the desk ends with it. A
+                // transient failure: the desk asks again (or ends on its own timeout).
+                const final = e instanceof HainivaAgentError && (e.status === 401 || e.status === 403);
+                if (final)
+                    this.finish("session_ended", true);
+            }
+            finally {
+                this.inflight = null;
+            }
+        })());
+        return this.inflight;
+    }
+    setTheme(mode) { if (mode === "light" || mode === "dark")
+        this.send({ v: 1, type: "hainiva:theme", mode }); }
+    setLocale(locale) { if (locale === "vi" || locale === "en")
+        this.send({ v: 1, type: "hainiva:locale", locale }); }
+    finish(reason, tellDesk) {
+        if (this.ended)
+            return;
+        if (tellDesk) {
+            try {
+                this.send({ v: 1, type: "hainiva:end" });
+            }
+            catch { /* gone */ }
+        }
+        this.ended = true;
+        this.cb.onEnded?.(reason);
+    }
+}
+/** The desk page for an app. The URL carries the app id ONLY. */
+export function deskUrl(baseUrl, appId, opts = {}) {
+    if (!UUID.test(appId))
+        throw new HainivaAgentError(0, "invalid_id", { field: "appId" });
+    const base = assertSafeUrl(baseUrl, { kind: "http", ...(opts.allowInsecureLocalhost ? { allowInsecureLocalhost: true } : {}) });
+    const u = new URL("/embed", base.origin);
+    u.searchParams.set("app", appId.toLowerCase());
+    return u;
+}
+// ── Web: the iframe ──────────────────────────────────────────────────────────
+/**
+ * The iframe's sandbox — every flag the desk needs and nothing more:
+ *   allow-scripts                 the desk is an application;
+ *   allow-same-origin             the desk keeps ITS OWN origin (app.hainiva.com):
+ *                                 its same-origin API calls, its session storage
+ *                                 and the gateway's Origin check depend on it. It
+ *                                 gives the desk no access to your page — that is
+ *                                 a different origin;
+ *   allow-forms                   the composer and every dialog submit forms;
+ *   allow-popups                  links, recordings and help open in a new tab…
+ *   allow-popups-to-escape-sandbox …as normal pages, not sandboxed copies;
+ *   allow-downloads               call recordings, attachments, exports;
+ *   allow-modals                  the desk confirms destructive actions (confirm()).
+ * Deliberately NOT: allow-top-navigation(-by-user-activation) — the desk can
+ * never navigate your page; allow-pointer-lock, allow-presentation,
+ * allow-orientation-lock, allow-storage-access-by-user-activation.
+ */
+export const DESK_SANDBOX = "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox allow-downloads allow-modals";
+/** Calls in the iframe are WebRTC: the microphone (and camera for video) must be delegated. */
+export const DESK_ALLOW = "microphone; camera; autoplay; clipboard-write";
+/** Show the HAINIVA desk in `container`, signed in as your agent session's staff member. */
+export function mountDesk(container, o) {
+    if (!container || typeof container.appendChild !== "function")
+        throw new HainivaAgentError(0, "invalid_container", {});
+    if (!o?.agent?.desk || typeof o.agent.desk.session !== "function")
+        throw new HainivaAgentError(0, "invalid_agent", {});
+    const url = deskUrl(o.baseUrl, o.appId, o.allowInsecureLocalhost ? { allowInsecureLocalhost: true } : {});
+    const deskOrigin = url.origin;
+    const doc = container.ownerDocument ?? globalThis.document;
+    const win = (doc?.defaultView ?? globalThis);
+    if (!doc)
+        throw new HainivaAgentError(0, "no_document", {});
+    if (win.location?.origin === deskOrigin)
+        throw new HainivaAgentError(0, "same_origin_host", { origin: deskOrigin });
+    const iframe = doc.createElement("iframe");
+    iframe.setAttribute("sandbox", DESK_SANDBOX);
+    iframe.setAttribute("allow", DESK_ALLOW);
+    iframe.setAttribute("title", o.title ?? "HAINIVA");
+    iframe.setAttribute("referrerpolicy", "origin");
+    iframe.style.border = "0";
+    iframe.style.width = "100%";
+    iframe.style.height = "100%";
+    const host = new DeskHost(o.appId, o.agent, (m) => { iframe.contentWindow?.postMessage(m, deskOrigin); }, {
+        ...o,
+        onEnded: (r) => { clearTimeout(loadTimer); o.onEnded?.(r); },
+    });
+    const onMessage = (e) => {
+        if (e.source !== iframe.contentWindow || e.origin !== deskOrigin)
+            return;
+        const wasReady = host.isReady;
+        host.receive(e.data);
+        if (!wasReady && host.isReady) {
+            clearTimeout(loadTimer);
+            if (o.theme)
+                host.setTheme(o.theme);
+            if (o.locale)
+                host.setLocale(o.locale);
+        }
+    };
+    win.addEventListener("message", onMessage);
+    const loadTimer = setTimeout(() => { if (!host.isReady)
+        host.finish("load_failed", false); }, o.loadTimeoutMs ?? 20000);
+    iframe.setAttribute("src", url.href);
+    container.appendChild(iframe);
+    return {
+        iframe,
+        setTheme: (m) => host.setTheme(m),
+        setLocale: (l) => host.setLocale(l),
+        destroy: () => {
+            clearTimeout(loadTimer);
+            if (!host.isEnded) {
+                try {
+                    iframe.contentWindow?.postMessage({ v: 1, type: "hainiva:end" }, deskOrigin);
+                }
+                catch { /* gone */ }
+            }
+            win.removeEventListener("message", onMessage);
+            iframe.remove();
+        },
+    };
+}
+//# sourceMappingURL=embed.js.map

package/dist/esm/embed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed.js","sourceRoot":"","sources":["../../src/embed.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA4BzC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAC9G,MAAM,KAAK,GAAG,uBAAuB,CAAC;AAEtC,SAAS,OAAO,CAAC,CAA0B,EAAE,QAAkB,EAAE,WAAqB,EAAE;IACtF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9G,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzF,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI;YAAE,OAAO,IAAI,CAAC;QAAC,IAAI,CAAC;YAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAAC,CAAC;IAClH,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnK,KAAK,uBAAuB;YAC1B,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrL,KAAK,eAAe;YAClB,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC3G,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAA4D,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7H,KAAK,cAAc;YACjB,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC9J,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACjI,KAAK,gBAAgB;YACnB,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/F,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5G,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzK,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC7G,IAAI,CAAM,CAAC;YACX,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YACrD,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9H,CAAC;QACD,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtK;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAkBD;;;;GAIG;AACH,MAAM,OAAO,QAAQ;IAKnB,YACmB,KAAa,EACb,MAAuB,EACvB,IAA6B,EAC7B,EAAiB;QAHjB,UAAK,GAAL,KAAK,CAAQ;QACb,WAAM,GAAN,MAAM,CAAiB;QACvB,SAAI,GAAJ,IAAI,CAAyB;QAC7B,OAAE,GAAF,EAAE,CAAe;QAR5B,UAAK,GAAG,KAAK,CAAC;QACd,UAAK,GAAG,KAAK,CAAC;QACd,aAAQ,GAAyB,IAAI,CAAC;IAO3C,CAAC;IAEJ,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7C,oFAAoF;IACpF,OAAO,CAAC,GAAY;QAClB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,eAAe;gBAClB,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO;gBAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBAClB,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO;YACT,KAAK,uBAAuB;gBAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAC,OAAO;YAC9D,KAAK,eAAe;gBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAO;YAC3D,KAAK,cAAc;gBAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAC,OAAO;YACrE,KAAK,gBAAgB;gBAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO;YACrJ,KAAK,kBAAkB;gBAAE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO;YAC5D,KAAK,qBAAqB;gBAAE,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO;QACrE,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,WAAW;QACT,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,KAAb,IAAI,CAAC,QAAQ,GAAK,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACtG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,iEAAiE;gBACjE,uEAAuE;gBACvE,MAAM,KAAK,GAAG,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;gBACvF,IAAI,KAAK;oBAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,CAAC;QACrC,CAAC,CAAC,EAAE,EAAC;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAsB,IAAU,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrI,SAAS,CAAC,MAAmB,IAAU,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAErI,MAAM,CAAC,MAAqB,EAAE,QAAiB;QAC7C,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,iEAAiE;AACjE,MAAM,UAAU,OAAO,CAAC,OAAe,EAAE,KAAa,EAAE,OAA6C,EAAE;IACrG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChI,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,sHAAsH,CAAC;AACnJ,+FAA+F;AAC/F,MAAM,CAAC,MAAM,UAAU,GAAG,+CAA+C,CAAC;AA8B1E,4FAA4F;AAC5F,MAAM,UAAU,SAAS,CAAC,SAAwB,EAAE,CAAmB;IACrE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACvH,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACvH,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1G,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,aAAa,IAAK,UAAsC,CAAC,QAAQ,CAAC;IACxF,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,WAAW,IAAI,UAAU,CAAsB,CAAC;IAClE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAEpH,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;IACnD,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAE7B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;QACxG,GAAG,CAAC;QACJ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC7D,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,IAAI,KAAM,CAAC,CAAC;IAEzH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACnC,OAAO,EAAE,GAAG,EAAE;YACZ,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,UAAU,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YACjI,GAAG,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/emitter.d.ts

@@ -0,0 +1,23 @@
+/**
+ * A small typed event emitter. `Events` maps each event name to its payload:
+ *
+ *   const e = new TypedEmitter<{ state: ConnectionState; ready: undefined }>();
+ *   const off = e.on("state", (s) => …);   e.emit("state", "open");   e.emit("ready", undefined);
+ *
+ * A listener that throws does not stop the others; the error goes to `onError`.
+ */
+export declare class TypedEmitter<Events extends {
+    [K in keyof Events]: unknown;
+}> {
+    private readonly onError?;
+    private readonly listeners;
+    constructor(onError?: ((error: unknown, event: keyof Events) => void) | undefined);
+    on<K extends keyof Events>(event: K, fn: (payload: Events[K]) => void): () => void;
+    once<K extends keyof Events>(event: K, fn: (payload: Events[K]) => void): () => void;
+    /** Remove a listener added with on(). (A once() listener is removed by the function once() returned.) */
+    off<K extends keyof Events>(event: K, fn: (payload: Events[K]) => void): void;
+    emit<K extends keyof Events>(event: K, payload: Events[K]): void;
+    listenerCount(event: keyof Events): number;
+    removeAll(): void;
+}
+//# sourceMappingURL=emitter.d.ts.map

package/dist/esm/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../src/emitter.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,qBAAa,YAAY,CAAC,MAAM,SAAS;KAAG,CAAC,IAAI,MAAM,MAAM,GAAG,OAAO;CAAE;IAG3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAFrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;gBAEvC,OAAO,CAAC,GAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,KAAK,IAAI,aAAA;IAEpF,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI;IAOlF,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI;IAKpF,yGAAyG;IACzG,GAAG,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAI7E,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI;IAShE,aAAa,CAAC,KAAK,EAAE,MAAM,MAAM,GAAG,MAAM;IAE1C,SAAS,IAAI,IAAI;CAClB"}

package/dist/esm/emitter.js

@@ -0,0 +1,47 @@
+/**
+ * A small typed event emitter. `Events` maps each event name to its payload:
+ *
+ *   const e = new TypedEmitter<{ state: ConnectionState; ready: undefined }>();
+ *   const off = e.on("state", (s) => …);   e.emit("state", "open");   e.emit("ready", undefined);
+ *
+ * A listener that throws does not stop the others; the error goes to `onError`.
+ */
+export class TypedEmitter {
+    constructor(onError) {
+        this.onError = onError;
+        this.listeners = new Map();
+    }
+    on(event, fn) {
+        let set = this.listeners.get(event);
+        if (!set) {
+            set = new Set();
+            this.listeners.set(event, set);
+        }
+        set.add(fn);
+        return () => this.off(event, fn);
+    }
+    once(event, fn) {
+        const off = this.on(event, (p) => { off(); fn(p); });
+        return off;
+    }
+    /** Remove a listener added with on(). (A once() listener is removed by the function once() returned.) */
+    off(event, fn) {
+        this.listeners.get(event)?.delete(fn);
+    }
+    emit(event, payload) {
+        const set = this.listeners.get(event);
+        if (!set)
+            return;
+        for (const fn of [...set]) {
+            try {
+                fn(payload);
+            }
+            catch (e) {
+                this.onError?.(e, event);
+            }
+        }
+    }
+    listenerCount(event) { return this.listeners.get(event)?.size ?? 0; }
+    removeAll() { this.listeners.clear(); }
+}
+//# sourceMappingURL=emitter.js.map

package/dist/esm/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../src/emitter.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAGvB,YAA6B,OAAuD;QAAvD,YAAO,GAAP,OAAO,CAAgD;QAFnE,cAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEmB,CAAC;IAExF,EAAE,CAAyB,KAAQ,EAAE,EAAgC;QACnE,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,EAAc,CAAC,CAAC;QACxB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAyB,KAAQ,EAAE,EAAgC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yGAAyG;IACzG,GAAG,CAAyB,KAAQ,EAAE,EAAgC;QACpE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAc,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAyB,KAAQ,EAAE,OAAkB;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACpB,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,KAAmB,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3F,SAAS,KAAW,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC9C"}

package/dist/esm/errors.d.ts

@@ -0,0 +1,16 @@
+import { Redactor } from "./redact.js";
+/**
+ * Every error the SDK raises. The message is only `status code`, and the body is
+ * redacted when the error is made: a partner who logs errors (or sends them to a
+ * crash reporter) never ships a token with them.
+ */
+export declare class HainivaAgentError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly body: Record<string, unknown>;
+    /** status 0 = raised by the SDK itself (configuration, network), not by HAINIVA. */
+    constructor(status: number, code: string, body?: Record<string, unknown>, redactor?: Redactor);
+    /** Wrap anything thrown below the SDK (fetch, WebSocket, LiveKit) without carrying its secrets along. */
+    static from(e: unknown, code?: string, redactor?: Redactor): HainivaAgentError;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6B,MAAM,aAAa,CAAC;AAElE;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC,oFAAoF;gBACxE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ;IASjG,yGAAyG;IACzG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,SAAW,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,iBAAiB;CAKjF"}

package/dist/esm/errors.js

@@ -0,0 +1,25 @@
+import { redactString, redactValue } from "./redact.js";
+/**
+ * Every error the SDK raises. The message is only `status code`, and the body is
+ * redacted when the error is made: a partner who logs errors (or sends them to a
+ * crash reporter) never ships a token with them.
+ */
+export class HainivaAgentError extends Error {
+    /** status 0 = raised by the SDK itself (configuration, network), not by HAINIVA. */
+    constructor(status, code, body = {}, redactor) {
+        const c = redactor ? redactor.string(code) : redactString(code);
+        super(`${status} ${c}`);
+        this.name = "HainivaAgentError";
+        this.status = status;
+        this.code = c;
+        this.body = (redactor ? redactor.value(body) : redactValue(body));
+    }
+    /** Wrap anything thrown below the SDK (fetch, WebSocket, LiveKit) without carrying its secrets along. */
+    static from(e, code = "failed", redactor) {
+        if (e instanceof HainivaAgentError)
+            return e;
+        const message = e instanceof Error ? e.message : String(e);
+        return new HainivaAgentError(0, code, { cause: message }, redactor);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAK1C,oFAAoF;IACpF,YAAY,MAAc,EAAE,IAAY,EAAE,OAAgC,EAAE,EAAE,QAAmB;QAC/F,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAA4B,CAAC;IAC/F,CAAC;IAED,yGAAyG;IACzG,MAAM,CAAC,IAAI,CAAC,CAAU,EAAE,IAAI,GAAG,QAAQ,EAAE,QAAmB;QAC1D,IAAI,CAAC,YAAY,iBAAiB;YAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC;CACF"}