@jini-ai/chat 0.1.0

package/dist/core/util/validate.js

@@ -0,0 +1,202 @@
+/**
+ * @module validate
+ *
+ * Pre-write structural sniff for AI-emitted HTML artifacts.
+ *
+ * Defends an HTML-artifact persistence path against the failure mode where a
+ * model emits an `<artifact type="text/html">…</artifact>` block whose body
+ * is a prose summary instead of a complete document. Without this gate, such
+ * content can land on disk as a real `.html` file and pollute a file panel
+ * as a phantom artifact tab.
+ *
+ * Policy (intentionally narrow — false positives here block real saves):
+ * - non-empty after trimming BOM and leading whitespace
+ * - meets a minimum length threshold
+ * - the *first* non-whitespace token is `<!doctype html>` or `<html`
+ *   (anchored at the start; mid-string mentions of these tags do NOT count —
+ *   prose like "Updated the <html lang> attribute…" must be rejected)
+ * - URL-bearing attributes or CSS `url(...)` / `@import` values do not point
+ *   at a reserved internal workspace-storage path
+ *
+ * What this gate is NOT:
+ * - It is **not** an HTML linter or validator. Malformed but
+ *   recognizably document-shaped HTML passes; only content that obviously
+ *   isn't a document fails. The guarantee is "blocks obvious prose-as-HTML",
+ *   not "validates well-formed HTML."
+ * - It does **not** cover `.jsx`/`.tsx` or any other artifact kind — a caller
+ *   should only invoke this for an HTML-typed artifact.
+ * - It does **not** apply to user-driven file saves through some other path;
+ *   those may legitimately persist partial drafts.
+ *
+ * Threshold note: 64 chars rejects minimal empty-body documents like
+ * `<!doctype html><html><body></body></html>` (49 chars) — AI-emitted
+ * artifacts are expected to be non-trivial deliverables, not test fixtures,
+ * so the lower bound favors fewer phantom files over preserving
+ * fixture-grade empties.
+ */
+const MIN_HTML_LENGTH = 64;
+const STARTS_WITH_DOCUMENT_RE = /^(?:<!doctype\s+html\b|<html\b)/i;
+/** Path segments reserved for internal workspace/artifact storage that a saved document must never reference. */
+const RESERVED_WORKSPACE_PATH_RE = /(?:^|\/|\.\/)(?:\.live-artifacts|\.workspace|\.tmp)(?=$|[/?#"'`\s>)])/i;
+const URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
+const URL_ATTRIBUTE_RE = /\b(href|src|srcset|poster|action|formaction|data|xlink:href)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'`=<>]+))/gi;
+const STYLE_ATTRIBUTE_RE = /\bstyle\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'`=<>]+))/gi;
+const HTML_TAG_RE = /<[a-z][^>]*>/gi;
+const STYLE_BLOCK_RE = /<style\b[^>]*>([\s\S]*?)<\/style>/gi;
+const CSS_URL_RE = /\burl\(\s*(?:"([^"]*)"|'([^']*)'|([^)]*?))\s*\)/gi;
+const CSS_IMPORT_RE = /@import\s+(?:url\(\s*(?:"([^"]*)"|'([^']*)'|([^)]*?))\s*\)|"([^"]*)"|'([^']*)')/gi;
+/**
+ * Sniff-test whether `content` looks like a complete HTML document rather
+ * than prose that happens to mention HTML.
+ *
+ * @complexity O(n) in `content.length` — a handful of linear regex scans.
+ */
+export function validateHtmlArtifact(content) {
+    const trimmed = content.replace(/^/, '').trim();
+    if (trimmed.length === 0) {
+        return { ok: false, reason: 'empty content' };
+    }
+    if (trimmed.length < MIN_HTML_LENGTH) {
+        return { ok: false, reason: `content too short to be HTML (got ${trimmed.length} chars, need ≥${MIN_HTML_LENGTH})` };
+    }
+    if (!STARTS_WITH_DOCUMENT_RE.test(trimmed)) {
+        return { ok: false, reason: 'content does not start with <!doctype html> or <html — looks like prose, not a complete HTML document' };
+    }
+    if (referencesReservedWorkspacePath(trimmed)) {
+        return { ok: false, reason: 'content references a reserved internal workspace-storage path' };
+    }
+    return { ok: true };
+}
+function referencesReservedWorkspacePath(content) {
+    return hasReservedWorkspacePathInTags(content) || hasReservedWorkspacePathInStyleBlocks(content);
+}
+function hasReservedWorkspacePathInTags(content) {
+    HTML_TAG_RE.lastIndex = 0;
+    let match;
+    while ((match = HTML_TAG_RE.exec(content)) !== null) {
+        // A successful regex-exec result's whole-match slot (`match[0]`) is never
+        // undefined; the assertion just satisfies `noUncheckedIndexedAccess`.
+        const tag = match[0];
+        if (hasReservedWorkspacePathAttribute(tag) || hasReservedWorkspacePathInStyleAttributes(tag)) {
+            return true;
+        }
+    }
+    return false;
+}
+function hasReservedWorkspacePathAttribute(tag) {
+    URL_ATTRIBUTE_RE.lastIndex = 0;
+    let match;
+    while ((match = URL_ATTRIBUTE_RE.exec(tag)) !== null) {
+        const attributeName = match[1]?.toLowerCase();
+        // Exactly one of the three quote-form alternatives (groups 2/3/4)
+        // participates in any successful match, so this is always defined; the
+        // cast just satisfies `noUncheckedIndexedAccess`.
+        const candidate = (match[2] ?? match[3] ?? match[4]);
+        if (candidateReferencesReservedWorkspacePath(candidate, attributeName === 'srcset')) {
+            return true;
+        }
+    }
+    return false;
+}
+function hasReservedWorkspacePathInStyleAttributes(tag) {
+    STYLE_ATTRIBUTE_RE.lastIndex = 0;
+    let match;
+    while ((match = STYLE_ATTRIBUTE_RE.exec(tag)) !== null) {
+        // Exactly one of the three quote-form alternatives (groups 1/2/3)
+        // participates in any successful match, so this is always defined; the
+        // cast just satisfies `noUncheckedIndexedAccess`.
+        const cssText = (match[1] ?? match[2] ?? match[3]);
+        if (cssTextReferencesReservedWorkspacePath(cssText)) {
+            return true;
+        }
+    }
+    return false;
+}
+function hasReservedWorkspacePathInStyleBlocks(content) {
+    STYLE_BLOCK_RE.lastIndex = 0;
+    let match;
+    while ((match = STYLE_BLOCK_RE.exec(content)) !== null) {
+        // The style-block body group uses a lazy `*?` quantifier (matches even an
+        // empty body), so it always participates in a successful match; the
+        // assertion just satisfies `noUncheckedIndexedAccess`.
+        const cssText = match[1];
+        if (cssTextReferencesReservedWorkspacePath(cssText)) {
+            return true;
+        }
+    }
+    return false;
+}
+function cssTextReferencesReservedWorkspacePath(cssText) {
+    for (const pattern of [CSS_URL_RE, CSS_IMPORT_RE]) {
+        pattern.lastIndex = 0;
+        let match;
+        while ((match = pattern.exec(cssText)) !== null) {
+            // Both CSS_URL_RE and CSS_IMPORT_RE are single top-level alternations
+            // across all their capture groups, so exactly one group is ever defined
+            // on a successful match — `.find` always finds it; the assertion just
+            // satisfies `noUncheckedIndexedAccess`.
+            const candidate = match.slice(1).find((value) => value !== undefined);
+            if (candidateReferencesReservedWorkspacePath(candidate, false)) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+function candidateReferencesReservedWorkspacePath(candidate, splitCandidates) {
+    const paths = splitCandidates ? srcsetCandidateUrls(candidate) : [firstUrlToken(candidate)];
+    return paths.some((path) => {
+        if (!isLocalPathLike(path)) {
+            return false;
+        }
+        return RESERVED_WORKSPACE_PATH_RE.test(pathnameOnly(path));
+    });
+}
+function pathnameOnly(path) {
+    const separator = path.search(/[?#]/);
+    if (separator === -1) {
+        return path;
+    }
+    return path.slice(0, separator);
+}
+function srcsetCandidateUrls(srcset) {
+    const candidates = [];
+    let start = 0;
+    let sawCandidate = false;
+    let dataUrlCandidate = false;
+    let sawWhitespaceAfterUrl = false;
+    for (let index = 0; index < srcset.length; index += 1) {
+        const char = srcset[index];
+        if (!sawCandidate) {
+            if (char === ',' || /\s/.test(char)) {
+                start = index + 1;
+                continue;
+            }
+            sawCandidate = true;
+            dataUrlCandidate = /^data:/i.test(srcset.slice(index));
+        }
+        if (/\s/.test(char)) {
+            sawWhitespaceAfterUrl = true;
+            continue;
+        }
+        if (char === ',' && (!dataUrlCandidate || sawWhitespaceAfterUrl)) {
+            candidates.push(srcset.slice(start, index));
+            start = index + 1;
+            sawCandidate = false;
+            dataUrlCandidate = false;
+            sawWhitespaceAfterUrl = false;
+        }
+    }
+    candidates.push(srcset.slice(start));
+    return candidates.map(firstUrlToken).filter(Boolean);
+}
+function firstUrlToken(value) {
+    // `String.split()` on a regex separator always returns at least one
+    // element (even `''.split(/\s+/)` is `['']`), so `[0]` is never
+    // `undefined` here — the assertion only satisfies `noUncheckedIndexedAccess`.
+    return value.trim().split(/\s+/)[0];
+}
+function isLocalPathLike(path) {
+    return path.length > 0 && !path.startsWith('#') && !path.startsWith('//') && !URL_SCHEME_RE.test(path);
+}
+//# sourceMappingURL=validate.js.map

package/dist/core/util/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/core/util/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AACnE,iHAAiH;AACjH,MAAM,0BAA0B,GAAG,wEAAwE,CAAC;AAC5G,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,6GAA6G,CAAC;AACvI,MAAM,kBAAkB,GAAG,wDAAwD,CAAC;AACpF,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,UAAU,GAAG,mDAAmD,CAAC;AACvE,MAAM,aAAa,GAAG,mFAAmF,CAAC;AAI1G;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,OAAO,CAAC,MAAM,iBAAiB,eAAe,GAAG,EAAE,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uGAAuG,EAAE,CAAC;IACxI,CAAC;IACD,IAAI,+BAA+B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,+BAA+B,CAAC,OAAe;IACtD,OAAO,8BAA8B,CAAC,OAAO,CAAC,IAAI,qCAAqC,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,8BAA8B,CAAC,OAAe;IACrD,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;IAC1B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpD,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,iCAAiC,CAAC,GAAG,CAAC,IAAI,yCAAyC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iCAAiC,CAAC,GAAW;IACpD,gBAAgB,CAAC,SAAS,GAAG,CAAC,CAAC;IAC/B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC9C,kEAAkE;QAClE,uEAAuE;QACvE,kDAAkD;QAClD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAW,CAAC;QAC/D,IAAI,wCAAwC,CAAC,SAAS,EAAE,aAAa,KAAK,QAAQ,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,yCAAyC,CAAC,GAAW;IAC5D,kBAAkB,CAAC,SAAS,GAAG,CAAC,CAAC;IACjC,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,kEAAkE;QAClE,uEAAuE;QACvE,kDAAkD;QAClD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAW,CAAC;QAC7D,IAAI,sCAAsC,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qCAAqC,CAAC,OAAe;IAC5D,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,0EAA0E;QAC1E,oEAAoE;QACpE,uDAAuD;QACvD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QAC1B,IAAI,sCAAsC,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sCAAsC,CAAC,OAAe;IAC7D,KAAK,MAAM,OAAO,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAChD,sEAAsE;YACtE,wEAAwE;YACxE,sEAAsE;YACtE,wCAAwC;YACxC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAE,CAAC;YACvE,IAAI,wCAAwC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wCAAwC,CAAC,SAAiB,EAAE,eAAwB;IAC3F,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,0BAA0B,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,qBAAqB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5C,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;YAClB,YAAY,GAAG,KAAK,CAAC;YACrB,gBAAgB,GAAG,KAAK,CAAC;YACzB,qBAAqB,GAAG,KAAK,CAAC;QAChC,CAAC;IACH,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,oEAAoE;IACpE,gEAAgE;IAChE,8EAA8E;IAC9E,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC"}

package/dist/react/agent-bridge/frontend-session-bridge.d.ts

@@ -0,0 +1,45 @@
+import { type PageDriver } from '@jini-ai/agentic';
+import type { ChatPaneAgentBridgeAccess, ChatPaneAgentToolAction } from '../features/chat-pane/types.js';
+export interface FrontendSessionBridgeOptions {
+    /** Daemon origin. Defaults to same-origin, which is how the dev server proxies `/api`. */
+    readonly baseUrl?: string;
+    /** Supplying one claims the six `page.*` verbs. Omit for a chat-only surface. */
+    readonly pageDriver?: PageDriver;
+    /**
+     * Product capabilities, keyed by id prefix (`'cms.'`). Each claims every capability under it.
+     * This is how a consumer exposes verbs the engine has never heard of.
+     */
+    readonly executors?: Readonly<Record<string, (capabilityId: string, input: Record<string, unknown>) => Promise<unknown>>>;
+    /** Called for every invocation before it runs — the hook a product uses to show an activity trail. */
+    readonly onInvocation?: (action: ChatPaneAgentToolAction) => void;
+    /** Reported for failures that are nobody's tool call: stream errors, malformed frames. */
+    readonly onError?: (error: unknown) => void;
+}
+export interface FrontendSessionBridge {
+    /** Hand this to `ChatPane`'s `agentControl.bridgeAccess`. */
+    readonly bridgeAccess: ChatPaneAgentBridgeAccess;
+    /**
+     * Resolves the *first* time the daemon attaches this surface — an "is it live yet" signal.
+     *
+     * Its `bindToken` is only correct until the next reconnect, so do not stash it. Call
+     * {@link FrontendSessionBridge.bindToken} when building a run request instead.
+     */
+    readonly ready: Promise<{
+        sessionId: string;
+        bindToken: string;
+    }>;
+    /**
+     * The token for the attachment that is live *now*, or `undefined` before the first attach and
+     * after {@link FrontendSessionBridge.close}. Read it at run-start; see the module doc.
+     */
+    bindToken(): string | undefined;
+    close(): void;
+}
+/**
+ * Opens the surface's connection and starts routing invocations.
+ *
+ * @param options - What this page can serve and where the daemon is.
+ * @returns The pane's bridge, the attach result, and a teardown.
+ */
+export declare function createFrontendSessionBridge(options?: FrontendSessionBridgeOptions): FrontendSessionBridge;
+//# sourceMappingURL=frontend-session-bridge.d.ts.map

package/dist/react/agent-bridge/frontend-session-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-session-bridge.d.ts","sourceRoot":"","sources":["../../../src/react/agent-bridge/frontend-session-bridge.ts"],"names":[],"mappings":"AAsCA,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAKzG,MAAM,WAAW,4BAA4B;IAC3C,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1H,sGAAsG;IACtG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IAClE,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE;;;OAGG;IACH,SAAS,IAAI,MAAM,GAAG,SAAS,CAAC;IAChC,KAAK,IAAI,IAAI,CAAC;CACf;AAkBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,4BAAiC,GAAG,qBAAqB,CAmK7G"}

package/dist/react/agent-bridge/frontend-session-bridge.js

@@ -0,0 +1,214 @@
+/**
+ * @module agent-bridge/frontend-session-bridge
+ *
+ * The browser half of agent-driven frontend control: one SSE connection to the daemon, and the
+ * routing that turns each relayed invocation into a call on something in this page.
+ *
+ * Everything on the server side already existed — `FrontendSessionRegistry` addresses a run to a
+ * surface, the frontend-session routes carry invocations out and answers back, and
+ * `createFrontendControl` assembles them. `ChatPaneAgentBridgeAccess` declared the contract this
+ * satisfies and had **zero implementations**, which is why an agent could reach a tool and the
+ * tool could reach nothing.
+ *
+ * Design notes worth knowing before changing this:
+ *
+ * - **The connection is owned here, not by `subscribe`.** `ChatPaneAgentBridgeAccess.subscribe` is
+ *   called by the chat pane's own effect, so tying the stream's lifetime to it would mean page
+ *   control dies when the pane unmounts — and the page is drivable whether or not a chat pane
+ *   exists. `subscribe` registers a listener; `close()` tears the connection down.
+ * - **Capabilities are claimed from what is actually wired.** The claim sent at connect time is
+ *   derived from the presence of a `pageDriver` and the keys of `executors`, never from a static
+ *   list. A surface that claims what it cannot serve turns a fast, named refusal into a timeout.
+ * - **An executed invocation is never executed twice.** If the stream drops between the daemon
+ *   delivering an invocation and this page POSTing the answer, the daemon correctly fails that
+ *   call — but the click already happened. Without the `executed` set below, the retry clicks
+ *   again. Buttons are not idempotent.
+ * - **The bind token never leaves this module except to the host.** It arrives on the `attached`
+ *   event and must ride to run-start; it deliberately does not appear in any URL (see
+ *   `@jini-ai/daemon`'s `FrontendSessionHandle`).
+ * - **Read the bind token at send time, not once.** `EventSource` reconnects on its own — after a
+ *   daemon restart, a sleeping laptop, or an ordinary network blip — and each reattach mints a new
+ *   session and a new token. A host that captured `ready`'s token keeps sending a dead one, every
+ *   later run fails to bind, and the only trace is a daemon-side log line: the agent is simply told
+ *   "no frontend is bound to this run". `ready` therefore answers "has it attached at least once";
+ *   {@link FrontendSessionBridge.bindToken} answers "what is valid now", and only the latter
+ *   belongs in a run request.
+ */
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform/fetch-with-timeout';
+import { CHAT_CAPABILITIES } from '../../core/index.js';
+import { PAGE_CAPABILITIES, executePageCapability } from '@jini-ai/agentic';
+/** How many settled invocation ids to remember for replay suppression. */
+const EXECUTED_MEMORY = 256;
+/** Ids this surface can actually serve, given what the host wired up. */
+function claimedCapabilities(options) {
+    const claims = CHAT_CAPABILITIES.map((capability) => capability.id);
+    if (options.pageDriver !== undefined) {
+        claims.push(...PAGE_CAPABILITIES.map((capability) => capability.id));
+    }
+    for (const [prefix, _executor] of Object.entries(options.executors ?? {})) {
+        claims.push(prefix);
+    }
+    return claims;
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Opens the surface's connection and starts routing invocations.
+ *
+ * @param options - What this page can serve and where the daemon is.
+ * @returns The pane's bridge, the attach result, and a teardown.
+ */
+export function createFrontendSessionBridge(options = {}) {
+    const base = options.baseUrl ?? '';
+    const capabilities = claimedCapabilities(options);
+    let sessionId;
+    /** Replaced on every reattach; a promise resolved once could never carry this. */
+    let currentBindToken;
+    // Definite assignment rather than no-op placeholders: a Promise executor runs synchronously, so
+    // both are set before this line finishes, and placeholders would only add two functions that
+    // can never be called.
+    let resolveReady;
+    let rejectReady;
+    const ready = new Promise((resolve, reject) => {
+        resolveReady = resolve;
+        rejectReady = reject;
+    });
+    /** Chat-pane listeners. The pane registers exactly one; a second host could register another. */
+    const chatListeners = new Set();
+    /** Invocation ids already run here, so a stream reconnect cannot double-click a button. */
+    const executed = new Set();
+    const query = capabilities.map((id) => `capability=${encodeURIComponent(id)}`).join('&');
+    const source = new EventSource(`${base}/api/frontend-sessions/stream?${query}`);
+    async function respond(invocationId, body) {
+        if (sessionId === undefined)
+            throw new Error('the surface is not attached yet');
+        const response = await fetchWithTimeout(`${base}/api/frontend-sessions/${encodeURIComponent(sessionId)}/responses`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ invocationId, ...body }) }, { timeoutMs: FETCH_TIMEOUT_MS.QUICK });
+        if (!response.ok)
+            throw new Error(`answering "${invocationId}" failed: ${response.status}`);
+    }
+    const respondSuccess = (invocationId, output) => respond(invocationId, { ok: true, output });
+    const respondError = (invocationId, message) => respond(invocationId, { ok: false, message });
+    /** Runs one non-chat invocation here and answers it. Chat ones go to the pane instead. */
+    async function serveLocally(action) {
+        let output;
+        try {
+            if (options.pageDriver !== undefined && action.capabilityId.startsWith('page.')) {
+                output = await executePageCapability(options.pageDriver, action.capabilityId, action.input);
+            }
+            else {
+                const entry = Object.entries(options.executors ?? {})
+                    .find(([prefix]) => action.capabilityId.startsWith(prefix));
+                if (entry === undefined)
+                    throw new Error(`nothing on this page serves "${action.capabilityId}"`);
+                output = await entry[1](action.capabilityId, action.input);
+            }
+        }
+        catch (error) {
+            await respondError(action.invocationId, errorMessage(error)).catch(options.onError ?? (() => undefined));
+            return;
+        }
+        await respondSuccess(action.invocationId, output).catch(options.onError ?? (() => undefined));
+    }
+    function remember(invocationId) {
+        executed.add(invocationId);
+        if (executed.size > EXECUTED_MEMORY) {
+            const oldest = executed.values().next().value;
+            if (oldest !== undefined)
+                executed.delete(oldest);
+        }
+    }
+    source.addEventListener('message', (event) => {
+        let parsed;
+        try {
+            parsed = JSON.parse(event.data);
+        }
+        catch (error) {
+            options.onError?.(error);
+            return;
+        }
+        // `JSON.parse` succeeds on any valid JSON value, not just objects — a bare `null`, number,
+        // string or boolean parses cleanly and would throw *outside* this try/catch on the very next
+        // `frame['type']` read (`null` is the one of those that actually throws; the others just read
+        // back `undefined` harmlessly). Guarding here routes every one of those through the same
+        // `onError` path as an unparseable frame, rather than only some of them crashing the listener.
+        if (parsed === null || typeof parsed !== 'object') {
+            options.onError?.(new Error(`malformed frame: expected a JSON object, got ${JSON.stringify(parsed)}`));
+            return;
+        }
+        const frame = parsed;
+        if (frame['type'] === 'attached') {
+            sessionId = String(frame['sessionId']);
+            currentBindToken = String(frame['bindToken']);
+            // A no-op after the first attach — which is exactly why `currentBindToken` exists.
+            resolveReady({ sessionId, bindToken: currentBindToken });
+            return;
+        }
+        if (frame['type'] === 'error') {
+            rejectReady(new Error(String(frame['message'])));
+            return;
+        }
+        // Unknown frame types are ignored rather than treated as errors, so the daemon's event
+        // vocabulary can grow without every deployed surface needing to ship first.
+        if (frame['type'] !== 'invocation')
+            return;
+        const rawInvocationId = frame['invocationId'];
+        if (typeof rawInvocationId !== 'string' || rawInvocationId.length === 0) {
+            options.onError?.(new Error('invocation frame missing invocationId'));
+            return;
+        }
+        const action = {
+            invocationId: rawInvocationId,
+            capabilityId: String(frame['capabilityId']),
+            input: (frame['input'] ?? {}),
+        };
+        // A redelivery after a dropped answer must not re-run the side effect.
+        if (executed.has(action.invocationId)) {
+            void respondError(action.invocationId, 'already executed on this surface').catch(() => undefined);
+            return;
+        }
+        remember(action.invocationId);
+        options.onInvocation?.(action);
+        if (action.capabilityId.startsWith('chat.')) {
+            for (const listener of chatListeners)
+                listener(action);
+            return;
+        }
+        void serveLocally(action);
+    });
+    source.addEventListener('error', (event) => {
+        // The daemon deletes a session's bind token the instant that connection drops, so by the time
+        // this fires the token in hand is already gone from the registry. Holding it until the next
+        // `attached` frame leaves a window where `bindToken()` hands back something dead, and a run
+        // started in that window fails to bind — reported to the agent only as "no frontend is bound
+        // to this run", with the real reason (a reconnect it never saw) nowhere in view.
+        // Reporting no token is the honest answer for a surface that is, right now, not attached.
+        currentBindToken = undefined;
+        sessionId = undefined;
+        options.onError?.(event);
+    });
+    const bridgeAccess = {
+        subscribe(onAction) {
+            chatListeners.add(onAction);
+            // Removes this listener only. The connection outlives any one pane — see the module doc.
+            return () => chatListeners.delete(onAction);
+        },
+        respondSuccess,
+        respondError,
+    };
+    return {
+        bridgeAccess,
+        ready,
+        bindToken: () => currentBindToken,
+        close() {
+            source.close();
+            chatListeners.clear();
+            // A closed bridge serves nothing, so binding a run to it would strand that run rather than
+            // fail it — this is what stops a torn-down surface (a StrictMode remount, a route change)
+            // from handing its dead token to the next run.
+            currentBindToken = undefined;
+            sessionId = undefined;
+        },
+    };
+}
+//# sourceMappingURL=frontend-session-bridge.js.map

package/dist/react/agent-bridge/frontend-session-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-session-bridge.js","sourceRoot":"","sources":["../../../src/react/agent-bridge/frontend-session-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAmB,MAAM,kBAAkB,CAAC;AAI7F,0EAA0E;AAC1E,MAAM,eAAe,GAAG,GAAG,CAAC;AAoC5B,yEAAyE;AACzE,SAAS,mBAAmB,CAAC,OAAqC;IAChE,MAAM,MAAM,GAAa,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAwC,EAAE;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAElD,IAAI,SAA6B,CAAC;IAClC,kFAAkF;IAClF,IAAI,gBAAoC,CAAC;IACzC,gGAAgG;IAChG,6FAA6F;IAC7F,uBAAuB;IACvB,IAAI,YAAwE,CAAC;IAC7E,IAAI,WAAsC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,OAAO,CAA2C,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtF,YAAY,GAAG,OAAO,CAAC;QACvB,WAAW,GAAG,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC3E,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,IAAI,iCAAiC,KAAK,EAAE,CAAC,CAAC;IAEhF,KAAK,UAAU,OAAO,CAAC,YAAoB,EAAE,IAA6B;QACxE,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,GAAG,IAAI,0BAA0B,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAC1E,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,EACpH,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,EAAE,CACtC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,YAAY,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAE,MAAe,EAAiB,EAAE,CAC9E,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,CAAC,YAAoB,EAAE,OAAe,EAAiB,EAAE,CAC5E,OAAO,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAEhD,0FAA0F;IAC1F,KAAK,UAAU,YAAY,CAAC,MAA+B;QACzD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChF,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;qBAClD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9D,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;gBACjG,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YACzG,OAAO;QACT,CAAC;QACD,MAAM,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,SAAS,QAAQ,CAAC,YAAoB;QACpC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3B,IAAI,QAAQ,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAA2B,EAAE,EAAE;QACjE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,2FAA2F;QAC3F,6FAA6F;QAC7F,8FAA8F;QAC9F,yFAAyF;QACzF,+FAA+F;QAC/F,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAiC,CAAC;QAEhD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;YACjC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACvC,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAC9C,mFAAmF;YACnF,YAAY,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,uFAAuF;QACvF,4EAA4E;QAC5E,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY;YAAE,OAAO;QAE3C,MAAM,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAA4B;YACtC,YAAY,EAAE,eAAe;YAC7B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC3C,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B;SACzD,CAAC;QAEF,uEAAuE;QACvE,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACtC,KAAK,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9B,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;QAE/B,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,KAAK,MAAM,QAAQ,IAAI,aAAa;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACzC,8FAA8F;QAC9F,4FAA4F;QAC5F,4FAA4F;QAC5F,6FAA6F;QAC7F,iFAAiF;QACjF,0FAA0F;QAC1F,gBAAgB,GAAG,SAAS,CAAC;QAC7B,SAAS,GAAG,SAAS,CAAC;QACtB,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAA8B;QAC9C,SAAS,CAAC,QAAQ;YAChB,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,yFAAyF;YACzF,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc;QACd,YAAY;KACb,CAAC;IAEF,OAAO;QACL,YAAY;QACZ,KAAK;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB;QACjC,KAAK;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,KAAK,EAAE,CAAC;YACtB,2FAA2F;YAC3F,0FAA0F;YAC1F,+CAA+C;YAC/C,gBAAgB,GAAG,SAAS,CAAC;YAC7B,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/react/artifact-types.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @module artifact-types
+ *
+ * Minimal `ArtifactFile`/`ArtifactRenderer`/`RendererRegistry` shapes,
+ * defined locally per this task's SCOPE NOTE: r4b calls the artifact-renderer
+ * package `@jini-ai/artifacts-react`; the actual locked name
+ * (`ADS-memory/reports/jini-port/extraction-plan.md` §3) is `@jini-ai/renderers-react`, which
+ * is still a placeholder stub being built in a separate session. `chat-react`
+ * needs these shapes now (for `useArtifactStream` and the `ArtifactFile`
+ * field on `ProjectContextValue`), so they are defined here to the exact
+ * shape r4b §2 specifies, with the intent that a future pass re-points every
+ * import below at `@jini-ai/renderers-react`'s real exports once that package
+ * lands, deletes this file, and removes the re-export from `index.ts`.
+ *
+ * TODO(renderers-react): replace this file's contents with
+ * `export * from '@jini-ai/renderers-react'` (or the equivalent named
+ * re-exports) once `@jini-ai/renderers-react` ships real `ArtifactFile`/
+ * `ArtifactRenderer`/`RendererRegistry` implementations. Do not block this
+ * package's other work on that package landing first.
+ */
+import type { ArtifactManifest } from '../core/index.js';
+/** Generic artifact-file shape a host's project/workspace file maps onto. */
+export interface ArtifactFile {
+    name: string;
+    kind: string;
+    content?: string;
+    url?: string;
+    manifest?: ArtifactManifest;
+}
+export interface ArtifactRenderContext {
+    file: ArtifactFile;
+    hints?: Record<string, unknown>;
+}
+export interface ArtifactRenderer {
+    id: string;
+    supportsStreaming: boolean;
+    renderPartial?: (content: string) => string;
+    canRender: (ctx: ArtifactRenderContext) => boolean;
+}
+export interface ArtifactRenderMatch {
+    renderer: ArtifactRenderer;
+    file: ArtifactFile;
+}
+/**
+ * A minimal ordered registry of `ArtifactRenderer`s: first-registered,
+ * first-matched (later registrations can still override by registering
+ * before resolution, mirroring the tool-renderer registry's "last writer
+ * wins on the same id" convention is intentionally NOT used here — artifact
+ * renderers are matched by predicate, not by name, so ordering is the
+ * override mechanism instead).
+ */
+export declare class RendererRegistry {
+    private readonly renderers;
+    /** Registers `renderer`, returning an unregister handle. */
+    register(renderer: ArtifactRenderer): () => void;
+    /** The first registered renderer whose `canRender` accepts `ctx`, or `null`. */
+    resolve(ctx: ArtifactRenderContext): ArtifactRenderMatch | null;
+    /** Visible mainly for tests. */
+    list(): readonly ArtifactRenderer[];
+}
+//# sourceMappingURL=artifact-types.d.ts.map

package/dist/react/artifact-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-types.d.ts","sourceRoot":"","sources":["../../src/react/artifact-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,SAAS,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,OAAO,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,IAAI,EAAE,YAAY,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IAEpD,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAQhD,gFAAgF;IAChF,OAAO,CAAC,GAAG,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,IAAI;IAO/D,gCAAgC;IAChC,IAAI,IAAI,SAAS,gBAAgB,EAAE;CAGpC"}

package/dist/react/artifact-types.js

@@ -0,0 +1,33 @@
+/**
+ * A minimal ordered registry of `ArtifactRenderer`s: first-registered,
+ * first-matched (later registrations can still override by registering
+ * before resolution, mirroring the tool-renderer registry's "last writer
+ * wins on the same id" convention is intentionally NOT used here — artifact
+ * renderers are matched by predicate, not by name, so ordering is the
+ * override mechanism instead).
+ */
+export class RendererRegistry {
+    renderers = [];
+    /** Registers `renderer`, returning an unregister handle. */
+    register(renderer) {
+        this.renderers.unshift(renderer);
+        return () => {
+            const idx = this.renderers.indexOf(renderer);
+            if (idx !== -1)
+                this.renderers.splice(idx, 1);
+        };
+    }
+    /** The first registered renderer whose `canRender` accepts `ctx`, or `null`. */
+    resolve(ctx) {
+        for (const renderer of this.renderers) {
+            if (renderer.canRender(ctx))
+                return { renderer, file: ctx.file };
+        }
+        return null;
+    }
+    /** Visible mainly for tests. */
+    list() {
+        return this.renderers;
+    }
+}
+//# sourceMappingURL=artifact-types.js.map

package/dist/react/artifact-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-types.js","sourceRoot":"","sources":["../../src/react/artifact-types.ts"],"names":[],"mappings":"AAgDA;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IACV,SAAS,GAAuB,EAAE,CAAC;IAEpD,4DAA4D;IAC5D,QAAQ,CAAC,QAA0B;QACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,GAAG,EAAE;YACV,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,GAA0B;QAChC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gCAAgC;IAChC,IAAI;QACF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/react/chat-pane.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `@jini-ai/chat/react/chat-pane` — the canonical public surface for `ChatPane`, the one
+ * product-like composition this package ships (REF-001 Step C, 2026-08-05).
+ *
+ * This subpath exists so a minimal-controller or non-React-preset host can depend on
+ * `@jini-ai/chat/react` without pulling in `ChatPane` at all, and so `ChatPane` itself has a
+ * package-boundary home distinct from the neutral engine surface — see
+ * `ADS-memory/reports/refactor/2026-08-05-ref-001-steps-bcd-proposal.md` §1 and §5 (Step C) for
+ * the full history: the original REF-001 finding wanted `ChatPane` removed from the generic
+ * barrel entirely; Section 1 resolved instead to keep it exported and guard it (R10 in
+ * `scripts/check-chatpane-public-surface.ts`, which treats *this* file as the public barrel to
+ * check `features/chat-pane/**`'s reach against — update `barrelPath` there if this file ever
+ * moves again).
+ *
+ * `@jini-ai/chat/react`'s own barrel (`index.ts`) re-exports these same names from here, marked
+ * `@deprecated`, so every existing `import { ChatPane } from '@jini-ai/chat/react'` keeps working
+ * unchanged. New code should import from this subpath directly.
+ */
+export { AgentRuntimePicker, CHAT_PANE_AGENT_TOOLS, ChatPane, createDaemonAttachmentUploader, createMcpUiToolCaller, defaultChatPaneSelection, orderChatPaneAgents, resolveChatPaneSelection, useChatPane, useChatPaneAgentControl, useChatPaneRuntimeInventory, useChatPaneWorkingDirectory, } from './features/chat-pane/index.js';
+export type { AgentRuntimePickerProps, ByokRuntimeSummary, ChatPaneActivity, ChatPaneAgent, ChatPaneAgentBridgeAccess, ChatPaneAgentControlOptions, ChatPaneAgentOption, ChatPaneAgentSelection, ChatPaneAgentToolAction, ChatPaneAgentToolDef, ChatPaneAgentToolInputSchema, ChatPaneAgentToolRisk, ChatPaneAttachmentUploadOptions, ChatPaneComposerHandle, ChatPaneProps, ChatPaneRunContext, ChatPaneRunContextInput, ChatPaneRuntimeAccess, ChatPaneVariant, ChatPaneWorkingDirectoryAccess, CreateDaemonAttachmentUploaderOptions, CreateMcpUiToolCallerOptions, McpUiToolCallRequest, RuntimePickerPlacement, UseChatPaneAgentControlOptions, UseChatPaneOptions, UseChatPaneResult, UseChatPaneRuntimeInventoryOptions, UseChatPaneRuntimeInventoryResult, UseChatPaneWorkingDirectoryOptions, UseChatPaneWorkingDirectoryResult, } from './features/chat-pane/index.js';
+//# sourceMappingURL=chat-pane.d.ts.map

package/dist/react/chat-pane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-pane.d.ts","sourceRoot":"","sources":["../../src/react/chat-pane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,QAAQ,EACR,8BAA8B,EAC9B,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,WAAW,EACX,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,yBAAyB,EACzB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,+BAA+B,EAC/B,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,8BAA8B,EAC9B,qCAAqC,EACrC,4BAA4B,EAC5B,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,kBAAkB,EAClB,iBAAiB,EACjB,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,+BAA+B,CAAC"}

package/dist/react/chat-pane.js

@@ -0,0 +1,20 @@
+/**
+ * `@jini-ai/chat/react/chat-pane` — the canonical public surface for `ChatPane`, the one
+ * product-like composition this package ships (REF-001 Step C, 2026-08-05).
+ *
+ * This subpath exists so a minimal-controller or non-React-preset host can depend on
+ * `@jini-ai/chat/react` without pulling in `ChatPane` at all, and so `ChatPane` itself has a
+ * package-boundary home distinct from the neutral engine surface — see
+ * `ADS-memory/reports/refactor/2026-08-05-ref-001-steps-bcd-proposal.md` §1 and §5 (Step C) for
+ * the full history: the original REF-001 finding wanted `ChatPane` removed from the generic
+ * barrel entirely; Section 1 resolved instead to keep it exported and guard it (R10 in
+ * `scripts/check-chatpane-public-surface.ts`, which treats *this* file as the public barrel to
+ * check `features/chat-pane/**`'s reach against — update `barrelPath` there if this file ever
+ * moves again).
+ *
+ * `@jini-ai/chat/react`'s own barrel (`index.ts`) re-exports these same names from here, marked
+ * `@deprecated`, so every existing `import { ChatPane } from '@jini-ai/chat/react'` keeps working
+ * unchanged. New code should import from this subpath directly.
+ */
+export { AgentRuntimePicker, CHAT_PANE_AGENT_TOOLS, ChatPane, createDaemonAttachmentUploader, createMcpUiToolCaller, defaultChatPaneSelection, orderChatPaneAgents, resolveChatPaneSelection, useChatPane, useChatPaneAgentControl, useChatPaneRuntimeInventory, useChatPaneWorkingDirectory, } from './features/chat-pane/index.js';
+//# sourceMappingURL=chat-pane.js.map