@introspection-sdk/introspection-browser 0.31.0 → 0.35.0

package/README.md

@@ -59,7 +59,7 @@ customer web origins.
    Plane URL, so the SPA needs no Introspection config of its own.
 2. `client.connect()` redeems the token at the **Data Plane**
    `POST /v1/oauth/exchange` for an HttpOnly session cookie, named for the
-   token's environment lane (see [Environments](#environments)).
+   token's environment lane and project (see [Environments](#environments)).
 3. `client.tasks.start({ runtime_id })` and friends ride that cookie against
    the Data Plane for tasks, files, conversations, and shares.
 
@@ -78,7 +78,7 @@ const client = new IntrospectionApiClient({
   getToken: () => token,
 });
 
-await client.connect(); // -> intro_dp_<environment> session cookie
+await client.connect(); // -> intro_dp_<lane>_<project> session cookie
 
 const run = await client.tasks.start({
   prompt: "Summarize my latest order",
@@ -105,17 +105,21 @@ named recipe agent instead.
 
 ### Environments
 
-The session cookie is named for its environment lane —
-`intro_dp_development`, `intro_dp_staging`, `intro_dp_production` — so an app
-running more than one lane holds a live session for **each** in one browser. A
-single shared name gave the browser one slot, so a second `connect()` evicted
-the first.
-
-**You never pass the environment in.** Your backend picks the lane when it
-mints the token; the Data Plane reads it off the token's claim and returns it,
-and the client sends it back as the `lane` query parameter so the right cookie
-is resolved. A query parameter, not a header, so requests stay CORS-simple and
-skip the preflight a custom header forces on every call:
+The session cookie is a signed `browser_session` JWT named for its environment
+lane **and** project — `intro_dp_{lane}_{base64url(project_uuid_bytes)}`, e.g.
+`intro_dp_production_AZLVpGw-ehCAAAAAAAAAAQ` — so an app running more than one
+lane or project holds a live session for **each** in one browser. A single
+shared name gave the browser one slot, so a second `connect()` evicted the
+first.
+
+**You never pass the environment or project in.** Your backend picks them when
+it mints the token; the Data Plane reads them off the token's claims and
+returns them, and the client sends them back as the `lane` and `project_id`
+query parameters so the right cookie is resolved. Both are selectors, not
+credentials: the cookie's own signed lane and project are checked against
+them, so naming one this browser holds no cookie for grants nothing. Query
+parameters, not headers, so requests stay CORS-simple and skip the preflight a
+custom header forces on every call:
 
 ```typescript
 const dev = new IntrospectionApiClient({
@@ -129,11 +133,12 @@ const prod = new IntrospectionApiClient({
 
 await Promise.all([dev.connect(), prod.connect()]);
 
-dev.environment; // "development" -> cookie intro_dp_development
-prod.environment; // "production"  -> cookie intro_dp_production
+dev.environment; // "development" -> cookie intro_dp_development_<project>
+prod.environment; // "production"  -> cookie intro_dp_production_<project>
+dev.projectId; // the project the token was minted for
 
-await dev.tasks.list(); // GET /v1/tasks?lane=development
-await prod.tasks.list(); // GET /v1/tasks?lane=production
+await dev.tasks.list(); // GET /v1/tasks?lane=development&project_id=<uuid>
+await prod.tasks.list(); // GET /v1/tasks?lane=production&project_id=<uuid>
 ```
 
 `client.environment` is `undefined` until `connect()` resolves. The optional
@@ -141,10 +146,16 @@ await prod.tasks.list(); // GET /v1/tasks?lane=production
 if it disagrees with the token, `connect()` throws rather than silently
 preferring one — the token is the authority.
 
-> **Requires a Data Plane that returns `environment` from
-> `/v1/oauth/exchange`.** Against an older deployment `client.environment`
-> stays `undefined`, no header is sent, and a single-lane app keeps working
-> unchanged.
+Without `project_id` the Data Plane picks the lane's most recently issued
+cookie, so a page that connected to two projects on one lane would silently
+read whichever exchanged last; sending it is what keeps two clients on one lane
+apart.
+
+> **Requires a Data Plane that returns `environment` and `project_id` from
+> `/v1/oauth/exchange`.** Against an older deployment that omits `project_id`,
+> `client.projectId` stays `undefined` and only `lane` is sent; one that also
+> omits `environment` leaves `client.environment` `undefined` and sends
+> neither, so a single-lane app keeps working unchanged.
 
 ## Files and conversations
 

package/dist/api/client.d.ts

@@ -14,10 +14,12 @@
  *      is needed, resolves its `runtime_id` server-side. The SPA fetches
  *      the token through the `getToken` callback.
  *   2. `connect()` redeems the token at the DP `POST /v1/oauth/exchange`
- *      for an HttpOnly session cookie, named for the token's environment lane
- *      (`intro_dp_development` / `intro_dp_staging` / `intro_dp_production`).
- *      Distinct names mean an app running several lanes holds a live session
- *      for each in one browser instead of the newest evicting the last.
+ *      for an HttpOnly session cookie named for the token's environment lane
+ *      and project (`intro_dp_{lane}_{base64url(project_uuid_bytes)}`).
+ *      Distinct names mean an app running several lanes or projects holds a
+ *      live session for each in one browser instead of the newest evicting
+ *      the last. Every request names the lane and project it means in the
+ *      `?lane=` / `?project_id=` query — selectors, not credentials.
  *   3. Every subsequent call rides that cookie (`credentials: "include"`)
  *      — `client.tasks.start({ runtime_id })`, `.get(...)`, run streaming,
  *      etc.
@@ -71,6 +73,8 @@ export declare class IntrospectionApiClient {
      * scope — two clients on one page holding different lanes is the point.
      */
     private resolvedEnvironment?;
+    /** Project established by the most recent exchange; per instance likewise. */
+    private resolvedProjectId?;
     /** The exchange currently in flight, shared by every concurrent 401. */
     private inFlightExchange?;
     constructor(opts: IntrospectionApiClientOptions);
@@ -90,6 +94,12 @@ export declare class IntrospectionApiClient {
      * was given one.
      */
     get environment(): Environment | undefined;
+    /**
+     * Project this client is connected to, once `connect()` has resolved.
+     * `undefined` before the first exchange, or against a DP that does not
+     * return `project_id`, in which case requests name only the lane.
+     */
+    get projectId(): string | undefined;
     /**
      * Mint a token via `getToken` and redeem it at the DP for the session
      * cookie. Call once before issuing task requests.

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,sBAAsB;IAWrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAVjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAC,CAAc;IAC1C,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CAAC,CAAmB;gBAEf,IAAI,EAAE,6BAA6B;IA0BhE,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,mBAAmB,CAEvC;IAED,+DAA+D;IAC/D,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,mEAAmE;IACnE,IAAI,WAAW,IAAI,iBAAiB,CAEnC;IAED;;;;OAIG;IACH,IAAI,WAAW,IAAI,WAAW,GAAG,SAAS,CAEzC;IAED;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,QAAQ;IAmCtB;;;;;;;OAOG;YACW,UAAU;CASzB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,sBAAsB;IAarB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAZjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAC,CAAc;IAC1C,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB,CAAC,CAAS;IACnC,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,CAAC,CAAmB;gBAEf,IAAI,EAAE,6BAA6B;IA2BhE,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,6DAA6D;IAC7D,IAAI,KAAK,IAAI,WAAW,CAEvB;IAED,4EAA4E;IAC5E,IAAI,aAAa,IAAI,mBAAmB,CAEvC;IAED,+DAA+D;IAC/D,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,mEAAmE;IACnE,IAAI,WAAW,IAAI,iBAAiB,CAEnC;IAED;;;;OAIG;IACH,IAAI,WAAW,IAAI,WAAW,GAAG,SAAS,CAEzC;IAED;;;;OAIG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAIhB,QAAQ;IAwCtB;;;;;;;OAOG;YACW,UAAU;CASzB"}

package/dist/api/client.js

@@ -14,10 +14,12 @@
  *      is needed, resolves its `runtime_id` server-side. The SPA fetches
  *      the token through the `getToken` callback.
  *   2. `connect()` redeems the token at the DP `POST /v1/oauth/exchange`
- *      for an HttpOnly session cookie, named for the token's environment lane
- *      (`intro_dp_development` / `intro_dp_staging` / `intro_dp_production`).
- *      Distinct names mean an app running several lanes holds a live session
- *      for each in one browser instead of the newest evicting the last.
+ *      for an HttpOnly session cookie named for the token's environment lane
+ *      and project (`intro_dp_{lane}_{base64url(project_uuid_bytes)}`).
+ *      Distinct names mean an app running several lanes or projects holds a
+ *      live session for each in one browser instead of the newest evicting
+ *      the last. Every request names the lane and project it means in the
+ *      `?lane=` / `?project_id=` query — selectors, not credentials.
  *   3. Every subsequent call rides that cookie (`credentials: "include"`)
  *      — `client.tasks.start({ runtime_id })`, `.get(...)`, run streaming,
  *      etc.
@@ -39,6 +41,8 @@ export class IntrospectionApiClient {
      * scope — two clients on one page holding different lanes is the point.
      */
     resolvedEnvironment;
+    /** Project established by the most recent exchange; per instance likewise. */
+    resolvedProjectId;
     /** The exchange currently in flight, shared by every concurrent 401. */
     inFlightExchange;
     constructor(opts) {
@@ -58,6 +62,7 @@ export class IntrospectionApiClient {
             fetch: this.fetchImpl,
             onUnauthorized: () => this.reexchange(),
             environment: () => this.resolvedEnvironment,
+            projectId: () => this.resolvedProjectId,
         });
         this.cookieClients = {
             tasks: new TasksClient(http),
@@ -95,6 +100,14 @@ export class IntrospectionApiClient {
     get environment() {
         return this.resolvedEnvironment;
     }
+    /**
+     * Project this client is connected to, once `connect()` has resolved.
+     * `undefined` before the first exchange, or against a DP that does not
+     * return `project_id`, in which case requests name only the lane.
+     */
+    get projectId() {
+        return this.resolvedProjectId;
+    }
     /**
      * Mint a token via `getToken` and redeem it at the DP for the session
      * cookie. Call once before issuing task requests.
@@ -128,6 +141,10 @@ export class IntrospectionApiClient {
             }
             this.resolvedEnvironment = body.environment;
         }
+        // Overwritten, not kept, when absent: naming a project whose cookie this
+        // exchange did not establish would be a 401/409, while omitting it falls
+        // back to the lane's newest cookie, which is the one just issued.
+        this.resolvedProjectId = body.project_id || undefined;
     }
     /**
      * 401 recovery: re-exchange, reporting success so the call can retry.

package/dist/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA4CzC,MAAM,OAAO,sBAAsB;IAWJ;IAVZ,SAAS,CAAe;IACxB,aAAa,CAAgB;IAC9C;;;OAGG;IACK,mBAAmB,CAAe;IAC1C,wEAAwE;IAChE,gBAAgB,CAAoB;IAE5C,YAA6B,IAAmC;QAAnC,SAAI,GAAJ,IAAI,CAA+B;QAC9D,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,6EAA6E;QAC7E,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE;YACvC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG;YACnB,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,aAAa,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAC5C,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC;YAC9B,WAAW,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,+DAA+D;IAC/D,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAC1D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzC,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAE/C,CAAC;QACF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,wCAAwC;oBACjE,IAAI,IAAI,CAAC,WAAW,IAAI,CAC3B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,EAAE;aACtC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;aAClB,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACpC,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA4CzC,MAAM,OAAO,sBAAsB;IAaJ;IAZZ,SAAS,CAAe;IACxB,aAAa,CAAgB;IAC9C;;;OAGG;IACK,mBAAmB,CAAe;IAC1C,8EAA8E;IACtE,iBAAiB,CAAU;IACnC,wEAAwE;IAChE,gBAAgB,CAAoB;IAE5C,YAA6B,IAAmC;QAAnC,SAAI,GAAJ,IAAI,CAA+B;QAC9D,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,6EAA6E;QAC7E,IAAI,CAAC,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,SAAS;YACrB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE;YACvC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB;YAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG;YACnB,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC;YAC5B,aAAa,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAC5C,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC;YAC9B,WAAW,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,6DAA6D;IAC7D,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;IAClC,CAAC;IAED,4EAA4E;IAC5E,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,+DAA+D;IAC/D,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAC1D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,WAAW,EAAE,SAAS;SACvB,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzC,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAG/C,CAAC;QACF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CACb,uDAAuD;oBACrD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,wCAAwC;oBACjE,IAAI,IAAI,CAAC,WAAW,IAAI,CAC3B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9C,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,EAAE;aACtC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;aAClB,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACpC,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;CACF"}

package/dist/api/http.d.ts

@@ -10,13 +10,15 @@
  * credential ever lives in JavaScript. A 401 (expired session cookie)
  * triggers a single `onUnauthorized` refresh + retry.
  *
- * The session cookie is named for its environment lane
- * (`intro_dp_development` / `intro_dp_staging` / `intro_dp_production`), so an
- * app running several lanes holds a live session for each in one browser. When
- * more than one is present the DP cannot tell which a request means, so we name
- * it in the {@link LANE_QUERY_PARAM} query parameter. A query parameter rather
- * than a header because a custom header makes every cross-origin request pay a
- * CORS preflight.
+ * The session cookie is a CP-signed `browser_session` JWT named per lane and
+ * project — `intro_dp_{lane}_{base64url(project_uuid_bytes)}`, e.g.
+ * `intro_dp_production_AZLVpGw-ehCAAAAAAAAAAQ` — so one browser holds a live
+ * session for each lane and project it connected to. When more than one is
+ * present the DP cannot tell which a request means, so we name it in the
+ * {@link LANE_QUERY_PARAM} and {@link PROJECT_ID_QUERY_PARAM} query parameters;
+ * with only the lane, the DP falls back to that lane's most recently issued
+ * cookie. Query parameters rather than headers because a custom header makes
+ * every cross-origin request pay a CORS preflight.
  */
 import { BaseHttpClient, stripTrailingSlash, toApiError } from "@introspection-sdk/http";
 import type { Environment } from "@introspection-sdk/types";
@@ -30,6 +32,15 @@ export { stripTrailingSlash, toApiError };
  * nothing rather than granting anything.
  */
 export declare const LANE_QUERY_PARAM = "lane";
+/**
+ * Query parameter naming which project's session cookie, within the lane, the
+ * DP should resolve.
+ *
+ * A selector, not a credential: the cookie's own signed project is checked
+ * against it server-side, so naming a project this browser holds no cookie for
+ * is a 401 rather than access to that project.
+ */
+export declare const PROJECT_ID_QUERY_PARAM = "project_id";
 /**
  * Header form of the lane selector, which the DP still accepts.
  *
@@ -58,6 +69,12 @@ export interface BrowserHttpConfig {
      * re-exchange.
      */
     environment?: () => Environment | undefined;
+    /**
+     * Reads the project established by the most recent exchange, read per
+     * request for the same reason as {@link environment}. `undefined` against a
+     * DP that does not return one, in which case only the lane is sent.
+     */
+    projectId?: () => string | undefined;
 }
 /**
  * Cookie-authenticated HTTP wrapper bound to one DP endpoint. Has no

package/dist/api/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,UAAU,EACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAK5D,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,gCAAgC,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CAC7C;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,cAAc;gBACvC,GAAG,EAAE,iBAAiB;CAmBnC"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,UAAU,EACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAK5D,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,eAAe,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,gCAAgC,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;IAC5C;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,cAAc;gBACvC,GAAG,EAAE,iBAAiB;CAuBnC"}

package/dist/api/http.js

@@ -10,13 +10,15 @@
  * credential ever lives in JavaScript. A 401 (expired session cookie)
  * triggers a single `onUnauthorized` refresh + retry.
  *
- * The session cookie is named for its environment lane
- * (`intro_dp_development` / `intro_dp_staging` / `intro_dp_production`), so an
- * app running several lanes holds a live session for each in one browser. When
- * more than one is present the DP cannot tell which a request means, so we name
- * it in the {@link LANE_QUERY_PARAM} query parameter. A query parameter rather
- * than a header because a custom header makes every cross-origin request pay a
- * CORS preflight.
+ * The session cookie is a CP-signed `browser_session` JWT named per lane and
+ * project — `intro_dp_{lane}_{base64url(project_uuid_bytes)}`, e.g.
+ * `intro_dp_production_AZLVpGw-ehCAAAAAAAAAAQ` — so one browser holds a live
+ * session for each lane and project it connected to. When more than one is
+ * present the DP cannot tell which a request means, so we name it in the
+ * {@link LANE_QUERY_PARAM} and {@link PROJECT_ID_QUERY_PARAM} query parameters;
+ * with only the lane, the DP falls back to that lane's most recently issued
+ * cookie. Query parameters rather than headers because a custom header makes
+ * every cross-origin request pay a CORS preflight.
  */
 import { BaseHttpClient, stripTrailingSlash, toApiError, } from "@introspection-sdk/http";
 import { resolveBrowserFetch } from "./fetch.js";
@@ -31,6 +33,15 @@ export { stripTrailingSlash, toApiError };
  * nothing rather than granting anything.
  */
 export const LANE_QUERY_PARAM = "lane";
+/**
+ * Query parameter naming which project's session cookie, within the lane, the
+ * DP should resolve.
+ *
+ * A selector, not a credential: the cookie's own signed project is checked
+ * against it server-side, so naming a project this browser holds no cookie for
+ * is a 401 rather than access to that project.
+ */
+export const PROJECT_ID_QUERY_PARAM = "project_id";
 /**
  * Header form of the lane selector, which the DP still accepts.
  *
@@ -51,11 +62,17 @@ export class BrowserHttpClient extends BaseHttpClient {
             additionalHeaders: cfg.additionalHeaders,
             transport: {
                 // No bearer token and no header — the HttpOnly cookie is the
-                // credential, and the lane selector rides the URL.
+                // credential, and the lane and project selectors ride the URL.
                 authHeaders: () => ({}),
                 authQuery: () => {
+                    const query = {};
                     const environment = cfg.environment?.();
-                    return environment ? { [LANE_QUERY_PARAM]: environment } : {};
+                    if (environment)
+                        query[LANE_QUERY_PARAM] = environment;
+                    const projectId = cfg.projectId?.();
+                    if (projectId)
+                        query[PROJECT_ID_QUERY_PARAM] = projectId;
+                    return query;
                 },
                 credentials: "include",
                 onUnauthorized: cfg.onUnauthorized,

package/dist/api/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAyBhE;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,cAAc;IACnD,YAAY,GAAsB;QAChC,KAAK,CAAC;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,uEAAuE;YACvE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YACrC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,SAAS,EAAE;gBACT,6DAA6D;gBAC7D,mDAAmD;gBACnD,WAAW,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC/C,SAAS,EAAE,GAA2B,EAAE;oBACtC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxC,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,CAAC;gBACD,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAIjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AA+BhE;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,cAAc;IACnD,YAAY,GAAsB;QAChC,KAAK,CAAC;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,uEAAuE;YACvE,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;YACrC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,SAAS,EAAE;gBACT,6DAA6D;gBAC7D,+DAA+D;gBAC/D,WAAW,EAAE,GAA2B,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC/C,SAAS,EAAE,GAA2B,EAAE;oBACtC,MAAM,KAAK,GAA2B,EAAE,CAAC;oBACzC,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;oBACxC,IAAI,WAAW;wBAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,WAAW,CAAC;oBACvD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC;oBACpC,IAAI,SAAS;wBAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC;oBACzD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,WAAW,EAAE,SAAS;gBACtB,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/api/index.d.ts

@@ -26,7 +26,7 @@
  *   getToken: () => token,
  * });
  *
- * await client.connect(); // -> intro_dp_<environment> session cookie
+ * await client.connect(); // -> intro_dp_<lane>_<project> session cookie
  * const run = await client.tasks.start({
  *   prompt: "Summarize my latest order",
  *   runtime_id: runtimeId,
@@ -37,7 +37,7 @@
 export { IntrospectionApiClient, type IntrospectionApiClientOptions, } from "./client.js";
 export { TasksClient, TaskRunsClient, RunHandle, type CreateTaskParams, type StartTaskParams, } from "./tasks.js";
 export { AutomationsClient, ConversationItemsClient, ConversationsClient, FileVersionsClient, FilesClient, SharesClient, type FileUploadBody, } from "@introspection-sdk/http";
-export { BrowserHttpClient, ENVIRONMENT_HEADER, LANE_QUERY_PARAM, type BrowserHttpConfig, } from "./http.js";
+export { BrowserHttpClient, ENVIRONMENT_HEADER, LANE_QUERY_PARAM, PROJECT_ID_QUERY_PARAM, type BrowserHttpConfig, } from "./http.js";
 export { Paginator, cursorPaginate, type PageSource, } from "@introspection-sdk/http";
 export { TranscriptAccumulator, foldAgui, foldSpans, mergeTranscripts, } from "@introspection-sdk/http";
 export { EventType } from "@introspection-sdk/types";

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,OAAO,EACP,WAAW,EACX,aAAa,EACb,IAAI,EACJ,OAAO,EACP,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,EACtB,KAAK,6BAA6B,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,EACT,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,OAAO,EACP,WAAW,EACX,aAAa,EACb,IAAI,EACJ,OAAO,EACP,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/api/index.js

@@ -26,7 +26,7 @@
  *   getToken: () => token,
  * });
  *
- * await client.connect(); // -> intro_dp_<environment> session cookie
+ * await client.connect(); // -> intro_dp_<lane>_<project> session cookie
  * const run = await client.tasks.start({
  *   prompt: "Summarize my latest order",
  *   runtime_id: runtimeId,
@@ -37,7 +37,7 @@
 export { IntrospectionApiClient, } from "./client.js";
 export { TasksClient, TaskRunsClient, RunHandle, } from "./tasks.js";
 export { AutomationsClient, ConversationItemsClient, ConversationsClient, FileVersionsClient, FilesClient, SharesClient, } from "@introspection-sdk/http";
-export { BrowserHttpClient, ENVIRONMENT_HEADER, LANE_QUERY_PARAM, } from "./http.js";
+export { BrowserHttpClient, ENVIRONMENT_HEADER, LANE_QUERY_PARAM, PROJECT_ID_QUERY_PARAM, } from "./http.js";
 export { Paginator, cursorPaginate, } from "@introspection-sdk/http";
 export { TranscriptAccumulator, foldAgui, foldSpans, mergeTranscripts, } from "@introspection-sdk/http";
 export { EventType } from "@introspection-sdk/types";

package/dist/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,GAGV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,GAEb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GAEjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,EACT,cAAc,GAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAsDlC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EACL,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,cAAc,EACd,SAAS,GAGV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,GAEb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,GAEvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,SAAS,EACT,cAAc,GAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,SAAS,EACT,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAsDlC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/version.d.ts

@@ -1,3 +1,3 @@
 /** Version information for introspection-sdk browser package. */
-export declare const VERSION = "0.31.0";
+export declare const VERSION = "0.35.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 /** Version information for introspection-sdk browser package. */
-export const VERSION = "0.31.0"; // x-release-please-version
+export const VERSION = "0.35.0"; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@introspection-sdk/introspection-browser",
-  "version": "0.31.0",
+  "version": "0.35.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -31,18 +31,18 @@
     "@types/node": "^22.20.5",
     "eslint": "^9.39.5",
     "typescript": "5.9.3",
-    "@repo/eslint-config": "0.0.0",
-    "@repo/typescript-config": "0.0.0"
+    "@repo/typescript-config": "0.0.0",
+    "@repo/eslint-config": "0.0.0"
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/api-logs": "^0.222.0",
-    "@opentelemetry/sdk-logs": "^0.222.0",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.222.0",
-    "@opentelemetry/resources": "^2.11.0",
+    "@opentelemetry/api-logs": "^0.223.0",
+    "@opentelemetry/sdk-logs": "^0.223.0",
+    "@opentelemetry/exporter-logs-otlp-http": "^0.223.0",
+    "@opentelemetry/resources": "^2.12.0",
     "@opentelemetry/semantic-conventions": "^1.38.0",
-    "@introspection-sdk/types": "0.31.0",
-    "@introspection-sdk/http": "0.31.0"
+    "@introspection-sdk/types": "0.35.0",
+    "@introspection-sdk/http": "0.35.0"
   },
   "scripts": {
     "lint": "eslint . --max-warnings 0",