@hosty-sdk/app 0.8.0 → 0.9.0

package/dist/embedder.d.ts

@@ -51,6 +51,18 @@ export interface AskAssistantIntent {
  * embedder must still decide is *where* the text goes — this function says an app asked, never that
  * the assistant should send anything. Nothing here may be auto-sent.
  */
+/**
+ * Verifies an attention count posted by a frame the embedder deliberately embeds.
+ *
+ * Read from the frame rather than polled by the embedder: the page that holds the session list and
+ * its event stream is the one source, and a shell asking the same question on a timer would be a
+ * second source that disagrees with the first for the length of its interval.
+ *
+ * Sender-verified like every other message here, though the payload is only a count: a wrong badge is
+ * a small harm, and a wrong badge that any page could set is a way to make an operator stop trusting
+ * the badge that matters.
+ */
+export declare function parseActiveFrameAttention(event: EmbedderMessage, activeFrameWindow: unknown, activeFrameUrl: string): number | null;
 export declare function parseActiveFrameAskAssistant(event: EmbedderMessage, activeFrameWindow: unknown, activeFrameUrl: string): AskAssistantIntent | null;
 /**
  * Per-app reissue throttle: a frame that keeps re-posting (e.g. it never accepts the new

package/dist/embedder.js

@@ -12,7 +12,7 @@
 // you have decided to grant one, mint a token from Core with your own session and post it back
 // to that frame's origin. Both requests are unauthenticated by design; what makes them safe is
 // that the embedder answers from facts about its own DOM rather than from what the frame claims.
-import { ASK_ASSISTANT_MAX_CHARS, ASK_ASSISTANT_TYPE, AUTH_REQUIRED_INTENT_TYPE, DELEGATED_TOKEN_REQUEST_TYPE, } from "./index.js";
+import { ASK_ASSISTANT_MAX_CHARS, ASK_ASSISTANT_TYPE, ATTENTION_TYPE, AUTH_REQUIRED_INTENT_TYPE, DELEGATED_TOKEN_REQUEST_TYPE, } from "./index.js";
 /**
  * Verifies that a `message` event is a genuine auth-required intent from the active app
  * frame. Every check is about facts only the embedder can know:
@@ -66,6 +66,31 @@ export function parseActiveFrameDelegatedTokenRequest(event, activeFrameWindow,
  * embedder must still decide is *where* the text goes — this function says an app asked, never that
  * the assistant should send anything. Nothing here may be auto-sent.
  */
+/**
+ * Verifies an attention count posted by a frame the embedder deliberately embeds.
+ *
+ * Read from the frame rather than polled by the embedder: the page that holds the session list and
+ * its event stream is the one source, and a shell asking the same question on a timer would be a
+ * second source that disagrees with the first for the length of its interval.
+ *
+ * Sender-verified like every other message here, though the payload is only a count: a wrong badge is
+ * a small harm, and a wrong badge that any page could set is a way to make an operator stop trusting
+ * the badge that matters.
+ */
+export function parseActiveFrameAttention(event, activeFrameWindow, activeFrameUrl) {
+    if (!isActiveFrameMessage(event, activeFrameWindow, activeFrameUrl)) {
+        return null;
+    }
+    const candidate = event.data;
+    // `typeof NaN === "number"`, and NaN survives every clamp below to arrive as a badge count no
+    // renderer can do anything with. Finiteness is the check that was actually meant.
+    if (candidate.type !== ATTENTION_TYPE || !Number.isFinite(candidate.count)) {
+        return null;
+    }
+    // Clamped rather than trusted: a negative or absurd count would render as a badge nobody can
+    // explain, and the frame has no business deciding how large a number the shell displays.
+    return Math.max(0, Math.min(99, Math.floor(candidate.count)));
+}
 export function parseActiveFrameAskAssistant(event, activeFrameWindow, activeFrameUrl) {
     if (!isActiveFrameMessage(event, activeFrameWindow, activeFrameUrl)) {
         return null;

package/dist/index.d.ts

@@ -34,6 +34,13 @@ export declare function createAuthRequiredIntent(appId: string): AuthRequiredInt
  * operator cannot read at a glance, and an answer would turn a hand-off into a channel.
  */
 export declare const ASK_ASSISTANT_TYPE = "hosty:ask-assistant";
+/**
+ * How many of an embedded assistant's sessions are waiting for the operator.
+ *
+ * Published by the page that holds them, not asked for on a timer: one source, so a shell's badge and
+ * the list behind it can never disagree.
+ */
+export declare const ATTENTION_TYPE = "hosty:assistant-attention";
 /** Longer than a prompt fragment is a page dumping itself into someone's draft. */
 export declare const ASK_ASSISTANT_MAX_CHARS = 4000;
 export interface AskAssistantMessage {

package/dist/index.js

@@ -37,6 +37,13 @@ export function createAuthRequiredIntent(appId) {
  * operator cannot read at a glance, and an answer would turn a hand-off into a channel.
  */
 export const ASK_ASSISTANT_TYPE = "hosty:ask-assistant";
+/**
+ * How many of an embedded assistant's sessions are waiting for the operator.
+ *
+ * Published by the page that holds them, not asked for on a timer: one source, so a shell's badge and
+ * the list behind it can never disagree.
+ */
+export const ATTENTION_TYPE = "hosty:assistant-attention";
 /** Longer than a prompt fragment is a page dumping itself into someone's draft. */
 export const ASK_ASSISTANT_MAX_CHARS = 4000;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hosty-sdk/app",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Hosty app auth: session state machine, recovery bridge, Core revalidation, and the embedder responder.",
   "license": "AGPL-3.0-only",
   "type": "module",