@hanzo/rooms 0.1.92 → 0.1.94

package/dist/Chat.d.ts

@@ -2,10 +2,9 @@ export declare function Chat(): import("react").JSX.Element;
 /**
  * The same conversation, embedded in a page that is not /chat.
  *
- * R8: there were TWO live chat surfaces with different consent semantics — this
- * one asks at SEND and fails closed, the other gated on ARRIVAL through a
- * separate copy of the consent code. Two answers to one question is how they
- * drift, so /models mounts this and the second surface is gone. It carries no
+ * R8: there were TWO live chat surfaces, so /models mounts this one and the
+ * second is gone. The data-share choice is made once at onboarding; this room
+ * does not ask again when a message is sent. It carries no
  * heading of its own: the host page already has one, and a second `<h1>` is the
  * defect that took the landings off /chat and /dev.
  *
@@ -32,4 +31,3 @@ export declare function refusalOf(error: Error): {
     visitor: boolean;
     provider: boolean;
 };
-/** The agreement free asks for, in @hanzo/ai's words so every surface says one thing. */

package/dist/Chat.js

@@ -17,10 +17,10 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 // the free pool, so what changes at sign-in is the menu, not the room.
 //
 // The FREE lane is about PRICE, not identity: a free turn spends no balance and
-// is data-shared in exchange, which is what the consent block asks about, at
-// SEND rather than on arrival — consent is owed when someone sends, not when
-// they walk in. Signing in is what buys the paid models and a history that
-// follows you; it is never the price of asking a question.
+// is data-shared in exchange. That choice is made once, at onboarding, where
+// the terms are linked. Nothing under the composer repeats it. Signing in buys
+// the paid models and a history that follows you; it is never the price of
+// asking a question.
 //
 // This file used to branch on `isAuthenticated` and hand a visitor a composer
 // whose only action was a trip to hanzo.id, captioned "Sign in to send". The
@@ -31,7 +31,6 @@ import { useCallback, useContext, useEffect, useMemo, useRef, useState } from "r
 import { billed, detail, familyOf, planRequired, plainly, refused } from "./failure.js";
 import { Prose } from "./Prose.js";
 import { useAgent, useAi, useChat, } from "@hanzo/ai/react";
-import { freeCopy, grantConsent, hasConsent, isFree, } from "@hanzo/ai";
 import { ASK, Chat as ChatSurface, Failure, Parts, words } from "@hanzo/ui/chat";
 import { carriedIn, carrying, compose, partsOf, said as told, weigh } from "./lib/attach.js";
 import { download, dropped, fileOf, pct, readable, refOf, retrieve } from "./lib/files.js";
@@ -69,10 +68,8 @@ import { checkoutUrl } from './lib/pay.js';
 import { Upgrade, useFree } from './Upgrade.js';
 import { enter, LOGIN } from './lib/destination.js';
 import { first } from './lib/first.js';
-import { BAD, mix } from "./lib/mix.js";
-import { brand, site } from './where.js';
-/** The veil under the free lane's consent sheet. */
-const SCRIM = mix("var(--pure-black)", 72, "srgb");
+import { BAD } from "./lib/mix.js";
+import { brand } from './where.js';
 // NO REASONING PANEL HERE. Every assistant turn opened a "Thinking" disclosure
 // listing seven steps — "Planning CSS extraction for chat styles", "Designing
 // responsive top bar grid layout" — typed into this file as a literal array.
@@ -89,24 +86,6 @@ const SCRIM = mix("var(--pure-black)", 72, "srgb");
  * room has always read at, so an untouched setting changes nothing.
  */
 const MEASURE = "var(--container-prose, 48rem)";
-/**
- * The store, or null when the browser will not give us one.
- *
- * Reading `window.localStorage` THROWS `SecurityError` where site data is
- * blocked — third-party contexts, Safari's Block All Cookies, a hardened
- * profile — and this is called from inside a send handler, so an unguarded
- * access takes the send down rather than the storage.
- */
-const store = () => {
-    if (typeof window === "undefined")
-        return null;
-    try {
-        return window.localStorage;
-    }
-    catch {
-        return null;
-    }
-};
 /**
  * The text this screen arrived with, TYPED INTO THE COMPOSER — never sent.
  *
@@ -182,8 +161,8 @@ export function Chat() {
     // mounted under the provider the shell already put above it.
     //
     // ONE room, for everyone. `anonymous` changes which models are on offer and
-    // nothing else — the composer, the consent and the transcript are the same
-    // components either way, because a visitor is having the same conversation.
+    // nothing else — the composer and the transcript are the same components
+    // either way, because a visitor is having the same conversation.
     //
     // The conversations are NOT drawn here. `Threads` is the list and the shell
     // owns the column it sits in — one sidebar for six rooms, already built, and a
@@ -194,10 +173,9 @@ export function Chat() {
 /**
  * The same conversation, embedded in a page that is not /chat.
  *
- * R8: there were TWO live chat surfaces with different consent semantics — this
- * one asks at SEND and fails closed, the other gated on ARRIVAL through a
- * separate copy of the consent code. Two answers to one question is how they
- * drift, so /models mounts this and the second surface is gone. It carries no
+ * R8: there were TWO live chat surfaces, so /models mounts this one and the
+ * second is gone. The data-share choice is made once at onboarding; this room
+ * does not ask again when a message is sent. It carries no
  * heading of its own: the host page already has one, and a second `<h1>` is the
  * defect that took the landings off /chat and /dev.
  *
@@ -476,9 +454,9 @@ function Plan({ onPress }) {
  *
  * `anonymous` opens on the free pool and offers only what the free pool can
  * answer, because listing a paid model to someone with no balance is an offer
- * that fails at send. Everything else — the transcript, the composer, the
- * consent — is identical, which is the point: signing in later changes the
- * models on the menu, not the room.
+ * that fails at send. Everything else — the transcript, the composer — is
+ * identical, which is the point: signing in later changes the models on the
+ * menu, not the room.
  */
 function Thread({ placeholder = message(), initial, anonymous = false, heading, }) {
     /**
@@ -487,16 +465,13 @@ function Thread({ placeholder = message(), initial, anonymous = false, heading,
      * `useState(anonymous ? FREE : ENSO)` read the flag ONCE, on the first render
      * — which is the render before hydration settles, where `anonymous` is always
      * false. So every visitor opened on ENSO while the composer beside them said
-     * "Enso Free", `isFree(model)` was false, and the two things that hang off it
-     * both went quiet: the data-sharing notice never appeared, and the consent
-     * block never asked. A visitor was sending on the paid pool having agreed to
-     * nothing, because a state initialiser cannot see a value that arrives later.
+     * "Enso Free". A visitor was sending on the paid pool, because a state
+     * initialiser cannot see a value that arrives later.
      *
      * A CHOICE, or the identity. `null` is "nobody has chosen", which is a
      * different fact from either model and the only one that can defer to a flag
      * that settles after mount. Picking from the menu still wins, permanently.
      */
-    const [asking, setAsking] = useState(null);
     // THE MODEL AND THE EFFORT are the one choice Chat and Dev share
     // (@hanzo/build `useMind`): the catalog from `GET /v1/models` and what the
     // reader kept, changed from the composer's chip or from Settings.
@@ -707,8 +682,7 @@ function Thread({ placeholder = message(), initial, anonymous = false, heading,
     // EVERY MODEL IS CHOSEN, never asked for: one the plan does not cover still
     // picks, and the gateway answers it with the policy's refusal or from Enso,
     // which the room then shows. A turn the gateway refuses `plan_required`
-    // opens the upgrade, titled with the model. `isFree` still drives the
-    // free-lane notice.
+    // opens the upgrade, titled with the model.
     const free = useFree(!anonymous) && !held;
     const [ask, setAsk] = useState(null);
     // KEEPING THE CONVERSATION is the reader's account, not this pane's choice:
@@ -1138,17 +1112,8 @@ function Thread({ placeholder = message(), initial, anonymous = false, heading,
      *  no longer allowed to draw. `:focus-within` would say this in CSS; the
      *  stylesheet that would hold it cannot reach past gui's own rule, so the
      *  state is read where the event is. */
-    const guarded = useCallback((text) => {
-        const s = store();
-        // FAILS CLOSED. This read `s && !hasConsent(s)`, so a browser that gives
-        // us no store answered "no consent needed" and sent a data-shared turn
-        // having asked nobody. No store means no record, and no record means ask.
-        if (isFree(model) && (!s || !hasConsent(s))) {
-            setAsking(text);
-            return;
-        }
-        speak(text);
-    }, [model, speak]);
+    // A free send goes. The data-share choice was made at onboarding, once.
+    const guarded = speak;
     /**
      * The draft and the files, sent as one turn.
      *
@@ -1317,25 +1282,6 @@ function Thread({ placeholder = message(), initial, anonymous = false, heading,
                                 enter(LOGIN);
                             }, children: "Sign in" })) : lift ? (_jsx(Button, { size: "sm", variant: "outline", onClick: () => setAsk({ ...lift, model: nameOf(model, listed) }), children: "Upgrade" })) : how?.visitor ? (_jsx(Button, { size: "sm", variant: "outline", onClick: () => enter(), children: "Sign in to keep going" })) : (_jsx(Anchor, { href: checkoutUrl(), children: _jsx(Button, { size: "sm", variant: "outline", children: "Add credit" }) })) })) : null] }) }));
     };
-    // The agreement is asked OVER the room, not instead of it. Returning the
-    // consent on its own replaced the whole pane: the question the reader had
-    // just typed left the screen, and the first thing a stranger saw of the
-    // product was a page about training data. The room stays; the sheet sits on
-    // top of it, and the question is still there behind it.
-    const consent = asking === null ? null : (_jsx(Consent, { question: told(asking).text, onAgree: () => {
-            const s = store();
-            // Nothing to persist into is not a reason to refuse the turn the
-            // reader just agreed to; it means the question is asked again next
-            // time, which is the honest cost of a browser that stores nothing.
-            if (s)
-                grantConsent(s);
-            const held = asking;
-            setAsking(null);
-            if (held)
-                speak(held);
-        }, onCancel: () => {
-            setAsking(null);
-        } }));
     // Dev, from the Summary's Create file or site: a move inside the app where the
     // host's app reads the path (hanzo.ai), else Dev on hanzo.ai, as the shell's
     // Dev place goes from a host without it (hanzo.team).
@@ -1573,9 +1519,5 @@ function Thread({ placeholder = message(), initial, anonymous = false, heading,
                 empty: heading === null ? undefined : (_jsxs(YStack, { "data-slot": "opening", items: "center", width: "100%", pt: "$6", pb: "$2", ...(media.sm ? null : { flex: 1, justify: "flex-end" }), children: [room.length > 1 ? (_jsx(XStack, { items: "center", justify: "center", mb: "$4", children: room.map((name, i) => (_jsx(Box, { ml: i ? -16 : 0, rounded: 40, borderWidth: 2, borderColor: "$background", z: room.length - i, children: _jsx(Face, { src: faces[name]?.avatar, emoji: faces[name]?.emoji, name: name, size: 72 }) }, name))) })) : portrait ? (_jsx(Box, { width: 160, height: 160, rounded: 24, overflow: "hidden", borderWidth: 2, borderColor: "var(--white-15)", boxShadow: "0 10px 24px color-mix(in srgb, var(--pure-black) 70%, transparent)", mb: "$4", bg: "var(--neutral-900)", children: _jsx(View, { render: _jsx("img", { src: portrait, alt: withWhom }), width: "100%", height: "100%", objectFit: "cover" }) })) : null, room.length === 1 && !portrait ? (_jsx(Box, { mb: "$3", children: _jsx(Face, { emoji: mate?.emoji ?? persona?.emoji, name: withWhom, size: 72 }) })) : null, _jsx(Text, { render: "h1", fontSize: "$7", lineHeight: "$7", fontWeight: "700", color: "$ink", text: "center", mb: "$1", children: join(room) || heading || (firstName ? `What’s up, ${firstName}?` : "What’s up?") }), room.length === 1 && (mate?.description ?? persona?.description) ? (_jsx(Text, { fontSize: "$3", color: "$soft", text: "center", maxW: 500, mb: "$4", lineHeight: "$4", children: mate?.description ?? persona?.description })) : null] })), 
                 // The transcript reads at the same measure. `Thread` defaults to 768
                 // itself; handing it the column here is what lets Width reach it.
-                column: { maxW: MEASURE }, composer: prompt({ ...composing, field: mention.field }, mention.state) }), _jsx(AgentMaker, {}), carry.dialog, _jsx(XStack, { items: "center", justify: "center", py: "$1", px: "$3", gap: "$2", children: isFree(model) ? (_jsxs(Text, { fontSize: "$1", color: "$soft", children: ["Free chat is data-shared to train models.", " ", _jsx(Anchor, { href: site("/legal/privacy"), fontSize: "$1", color: "$ink", children: "Privacy" })] })) : (_jsxs(_Fragment, { children: [_jsx(Anchor, { href: site("/legal/terms"), fontSize: "$1", color: "$soft", children: "Terms" }), _jsx(Text, { fontSize: "$1", color: "$soft", children: "\u00B7" }), _jsx(Anchor, { href: site("/legal/privacy"), fontSize: "$1", color: "$soft", children: "Privacy" })] })) }), consent, _jsx(Upgrade, { ask: ask, onClose: () => setAsk(null) })] }));
-}
-/** The agreement free asks for, in @hanzo/ai's words so every surface says one thing. */
-function Consent({ question, onAgree, onCancel, }) {
-    return (_jsx(YStack, { position: "absolute", t: 0, l: 0, r: 0, b: 0, items: "center", justify: "center", p: "$4", z: 40, bg: SCRIM, children: _jsxs(YStack, { width: "100%", maxW: 512, px: "$5", py: "$5", gap: "$4", rounded: "$4", borderWidth: 1, borderColor: "$borderColor", bg: "$background", children: [_jsx(Text, { render: "h2", fontSize: "$6", fontWeight: "500", color: "$ink", children: freeCopy.consentTitle }), question ? (_jsxs(Text, { fontSize: "$3", color: "$soft", numberOfLines: 2, children: ["Your question is waiting: \u201C", question, "\u201D"] })) : null, _jsx(Text, { fontSize: "$4", color: "$soft", children: freeCopy.consentBody }), _jsx(YStack, { gap: "$2", children: freeCopy.consentPoints.map((point) => (_jsx(Text, { fontSize: "$3", color: "$soft", children: point }, point))) }), _jsxs(XStack, { gap: "$3", flexWrap: "wrap", children: [_jsx(Button, { onClick: onAgree, children: freeCopy.consentAgreeCta }), _jsx(Button, { variant: "outline", onClick: onCancel, children: freeCopy.consentCancelCta })] }), _jsxs(Text, { fontSize: "$2", color: "$soft", children: [freeCopy.termsText, " ", _jsx(Anchor, { href: site("/legal/terms"), children: "Terms" }), " · ", _jsx(Anchor, { href: site("/legal/privacy"), children: "Privacy" })] })] }) }));
+                column: { maxW: MEASURE }, composer: prompt({ ...composing, field: mention.field }, mention.state) }), _jsx(AgentMaker, {}), carry.dialog, _jsx(Upgrade, { ask: ask, onClose: () => setAsk(null) })] }));
 }

package/dist/lib/ai.d.ts

@@ -40,7 +40,7 @@ export declare const base: () => {
 export interface Ai {
     client: AiClient | null;
     model: string;
-    /** Answering free, so the turn is data-shared and owes the notice. */
+    /** Answering on the free pool. The data-share choice was made at onboarding. */
     free: boolean;
     /** Mounted client-side. The static export always prerenders the signed-out
      *  page, so nothing interactive may render until this is true. */

package/dist/lib/ai.js

@@ -5,8 +5,8 @@
 // their account like every other turn they run.
 //
 // Signed out — the FREE POOL, anonymously. There is no account to bill and none
-// is needed: a free turn spends no balance, and what it costs instead is stated
-// in the consent block the composer asks before the first send. A widget key, if
+// is needed: a free turn spends no balance. The data-share choice is made
+// once, at onboarding. A widget key, if
 // one is configured, rides along so the turn attributes to the org that minted
 // it; without one the turn is simply anonymous. Either way the client EXISTS,
 // because a chat you cannot send is not a chat.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.92",
+  "version": "0.1.94",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",