@jini-ai/chat 0.5.3 → 0.5.5

package/dist/core/durable-runs/ports.d.ts

@@ -0,0 +1,123 @@
+import type { AgentEvent, ChatMessage } from "../index.js";
+import type { RunRef, RunSettlement } from "./ledger-contracts.js";
+export interface AcceptedRunRequest {
+    readonly agentId?: string;
+    readonly contextRef: string;
+}
+export interface DurableRun extends RunRef {
+    readonly workspaceId: string;
+    readonly principalId: string | null;
+    readonly engine: string;
+    readonly message: ChatMessage;
+    readonly request: AcceptedRunRequest;
+    readonly transcript: readonly ChatMessage[];
+    readonly recoveryCount: number;
+    readonly recoveryDeadline: number | null;
+    readonly attemptStartedAt: number;
+    readonly lastProgressAt: number;
+    readonly cancelReason: string | null;
+    readonly sessionId: string | null;
+    readonly sessionConfirmed: boolean;
+    readonly child: {
+        pid: number;
+        startedAt: string;
+    } | null;
+    readonly attemptBase: readonly AgentEvent[];
+}
+export interface DurableRunStore {
+    load(required: {
+        messageId: string;
+    }, optional: {}): Promise<DurableRun | null>;
+    find(required: {
+        runId: string;
+        principalId?: string;
+    }, optional: {}): Promise<DurableRun | null>;
+    accept(required: RunRef & {
+        principalId: string;
+        workspaceId: string;
+        request: AcceptedRunRequest;
+        now: number;
+    }, optional: {}): Promise<DurableRun | null>;
+    advance(required: {
+        run: DurableRun;
+        nextRunId: string;
+        now: number;
+        events: readonly AgentEvent[];
+    }, optional: {}): Promise<boolean>;
+    cancel(required: {
+        runId: string;
+        reason: string;
+    }, optional: {}): Promise<void>;
+    cancelPending(required: RunRef & {
+        principalId: string;
+        workspaceId: string;
+        now: number;
+    }, optional: {}): Promise<DurableRun | null>;
+    captureSession(required: {
+        runId: string;
+        sessionId: string;
+        confirmed?: boolean;
+        child?: {
+            pid: number;
+            startedAt: string;
+        };
+    }, optional: {}): Promise<boolean>;
+    clearSession(required: {
+        runId: string;
+        sessionId: string;
+    }, optional: {}): Promise<void>;
+    recoveryClock(required: {
+        runId: string;
+        now: number;
+        active: boolean;
+    }, optional: {}): Promise<void>;
+    guardTool(required: {
+        runId: string;
+        toolId: string;
+        input: unknown;
+        toolUseId?: string;
+    }, optional: {}): Promise<"allowed" | "unknown" | "stale">;
+    completeTool(required: {
+        runId: string;
+        toolUseId: string;
+        content: string;
+    }, optional: {}): Promise<void>;
+}
+export type RunProbe = "live" | "dead" | "uncertain";
+export interface RecoveryPorts {
+    readonly store: DurableRunStore;
+    readonly now: () => number;
+    readonly mintRunId: () => string;
+    readonly probe: (required: DurableRun, optional: {}) => Promise<RunProbe>;
+    readonly attach: (required: DurableRun, optional: {}) => void;
+    readonly launch: (required: {
+        run: DurableRun;
+        request: AcceptedRunRequest;
+    }, optional: {}) => Promise<void>;
+    readonly cancelAttempt: (required: DurableRun, optional: {}) => Promise<void>;
+    readonly verifyChildDead: (required: {
+        pid: number;
+        startedAt: string;
+    }, optional: {}) => Promise<boolean>;
+    readonly supportsNativeResume: (required: {
+        agentId: string;
+    }, optional: {}) => boolean;
+    readonly settle: (required: RunSettlement, optional: {}) => Promise<boolean>;
+}
+export type RecoveryTrigger = "boot" | "browser" | "stream" | "timeout" | "attempt-failed";
+export type RecoveryResult = "gone" | "terminal" | "reattached" | "waiting" | "continued" | "superseded" | "finalized";
+export interface DurableRecovery {
+    recover(required: {
+        messageId: string;
+        trigger: RecoveryTrigger;
+        expectedRunId?: string;
+    }, optional: {
+        /** Fresh HTTP 200 from the owning watch's bounded probe, scoped to exactly that attempt. */
+        liveRunId?: string;
+    }): Promise<RecoveryResult>;
+}
+/** Host run-ID classification; never infer transport identity from an engine default. */
+export type RunIdPolicy = (required: {
+    runId: string;
+}, optional?: {}) => boolean;
+//# sourceMappingURL=ports.d.ts.map

package/dist/core/durable-runs/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/core/durable-runs/run-contracts.d.ts

@@ -0,0 +1,17 @@
+import type { AgentEvent } from "../events.js";
+import type { ChatRunStatus } from "../messages.js";
+/** Exactly which run owns the row; the host binds authorization and storage scope. */
+export interface RunRef {
+    readonly conversationId: string;
+    readonly messageId: string;
+    readonly runId: string;
+}
+export interface RunProgress extends RunRef {
+    readonly content: string;
+    readonly events: readonly AgentEvent[];
+}
+export interface RunSettlement extends RunProgress {
+    readonly status: Extract<ChatRunStatus, 'succeeded' | 'failed' | 'canceled'>;
+    readonly endedAt: number;
+}
+//# sourceMappingURL=run-contracts.d.ts.map

package/dist/core/durable-runs/run-contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run-contracts.js.map

package/dist/core/durable-runs/run-lock.d.ts

@@ -0,0 +1,4 @@
+/** Every checkpoint, settlement and attempt CAS shares this message lock. */
+import type { RunRef } from "./ledger-contracts.js";
+export declare function runLockKey(run: RunRef, _optional?: {}): string;
+//# sourceMappingURL=run-lock.d.ts.map

package/dist/core/durable-runs/run-lock.js

@@ -0,0 +1,4 @@
+export function runLockKey(run, _optional = {}) {
+    return `chat-run:${run.conversationId}:${run.messageId}`;
+}
+//# sourceMappingURL=run-lock.js.map

package/dist/core/index.d.ts

@@ -1,16 +1,7 @@
 /**
- * `@jini-ai/chat/core` — framework-free chat vocabulary + pure parsers.
- *
- * Zero React, zero DOM/browser globals, zero Node built-ins, zero imports
- * from any product package's scope. See ADS-memory/reports/jini-port/extraction-plan.md
- * §12 C2/C3 and ADS-memory/reports/jini-port/recon/r4b-webui-design.md §1 for the design
- * this package targets, and archived provenance ledger for exact provenance.
- *
- * Was `@jini-ai/chat-core` (its own top-level package, one entry point) through npm 0.1.2 —
- * consolidated 2026-08-03 into `@jini-ai/chat`'s `./core` subpath alongside `./react` (formerly
- * `@jini-ai/ui`'s `./chat` export), following `@jini-ai/admin`'s umbrella-with-subpaths precedent.
- * `@jini-ai/chat-core` is retired, not deprecated-and-kept — its published npm versions
- * (0.1.0–0.1.2) go end-of-life as-is; `@jini-ai/chat` supersedes it.
+ * @jini-ai/chat/core — framework-free chat vocabulary and pure parsers.
+ * No React, DOM/browser globals, Node built-ins or product-package imports (extraction-plan §12
+ * C2/C3). Hosts can implement the transport port without importing a browser component graph.
  */
 export * from './events.js';
 export * from './messages.js';
@@ -27,13 +18,8 @@ export * from './run-activity.js';
 export * from './surface-expiry.js';
 export * from './assistant-content.js';
 export * from './compact-events.js';
-/**
- * The chat pane's own capability manifest (`CHAT_CAPABILITIES`). The framework-free agent-control
- * vocabulary this used to sit alongside — `CapabilityDef`, `PAGE_CAPABILITIES`, the
- * `data-agent-*` convention, the policy gate, the protocol projections — moved to `@jini-ai/agentic`
- * on 2026-07-26; import it directly rather than through this package. See
- * `packages/agentic/archived provenance ledger` and this package's own archived provenance ledger for the extraction.
- */
+/** Chat-pane capability manifest. Generic agent-control vocabulary, markup and projections are
+ * owned by @jini-ai/agentic; import them there so non-chat callers stay independent of chat. */
 export * from './agentic/index.js';
 /**
  * Durable chat history — the storage-neutral `ChatHistoryStore` port and the local title
@@ -42,4 +28,8 @@ export * from './agentic/index.js';
  * module, and a host binds it to its own authentication.
  */
 export * from './persistence/index.js';
+export { recoveredRunEvents } from './durable-projection.js';
+export { composerHistoryKeyAction, createComposerHistoryState, mergeComposerHistory, normalizeComposerHistory, transitionComposerHistory, } from './composer-history.js';
+export type { ComposerHistoryKeyInput, ComposerHistoryState, ComposerHistoryStoragePort } from './composer-history.js';
+export * from './user-text-redaction.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.js

@@ -1,16 +1,7 @@
 /**
- * `@jini-ai/chat/core` — framework-free chat vocabulary + pure parsers.
- *
- * Zero React, zero DOM/browser globals, zero Node built-ins, zero imports
- * from any product package's scope. See ADS-memory/reports/jini-port/extraction-plan.md
- * §12 C2/C3 and ADS-memory/reports/jini-port/recon/r4b-webui-design.md §1 for the design
- * this package targets, and archived provenance ledger for exact provenance.
- *
- * Was `@jini-ai/chat-core` (its own top-level package, one entry point) through npm 0.1.2 —
- * consolidated 2026-08-03 into `@jini-ai/chat`'s `./core` subpath alongside `./react` (formerly
- * `@jini-ai/ui`'s `./chat` export), following `@jini-ai/admin`'s umbrella-with-subpaths precedent.
- * `@jini-ai/chat-core` is retired, not deprecated-and-kept — its published npm versions
- * (0.1.0–0.1.2) go end-of-life as-is; `@jini-ai/chat` supersedes it.
+ * @jini-ai/chat/core — framework-free chat vocabulary and pure parsers.
+ * No React, DOM/browser globals, Node built-ins or product-package imports (extraction-plan §12
+ * C2/C3). Hosts can implement the transport port without importing a browser component graph.
  */
 export * from './events.js';
 export * from './messages.js';
@@ -27,13 +18,8 @@ export * from './run-activity.js';
 export * from './surface-expiry.js';
 export * from './assistant-content.js';
 export * from './compact-events.js';
-/**
- * The chat pane's own capability manifest (`CHAT_CAPABILITIES`). The framework-free agent-control
- * vocabulary this used to sit alongside — `CapabilityDef`, `PAGE_CAPABILITIES`, the
- * `data-agent-*` convention, the policy gate, the protocol projections — moved to `@jini-ai/agentic`
- * on 2026-07-26; import it directly rather than through this package. See
- * `packages/agentic/archived provenance ledger` and this package's own archived provenance ledger for the extraction.
- */
+/** Chat-pane capability manifest. Generic agent-control vocabulary, markup and projections are
+ * owned by @jini-ai/agentic; import them there so non-chat callers stay independent of chat. */
 export * from './agentic/index.js';
 /**
  * Durable chat history — the storage-neutral `ChatHistoryStore` port and the local title
@@ -42,4 +28,7 @@ export * from './agentic/index.js';
  * module, and a host binds it to its own authentication.
  */
 export * from './persistence/index.js';
+export { recoveredRunEvents } from './durable-projection.js';
+export { composerHistoryKeyAction, createComposerHistoryState, mergeComposerHistory, normalizeComposerHistory, transitionComposerHistory, } from './composer-history.js';
+export * from './user-text-redaction.js';
 //# sourceMappingURL=index.js.map

package/dist/core/messages.d.ts

@@ -33,6 +33,8 @@ export interface ChatAttachment {
  * host layers those on top via its own message extension, not this type.
  */
 export interface ChatMessage {
+    /** Transient safe receipt; storage requires no new column. */
+    secretRedaction?: import('./user-text-redaction.js').SecretRedactionSignal;
     id: string;
     role: ChatRole;
     content: string;

package/dist/core/question-form/format.d.ts

@@ -1,12 +1,3 @@
-/**
- * @module question-form/format
- *
- * Answer presentation: turning a submitted answer set into the prose the
- * agent reads on its next turn, plus the label/value lookups also used by
- * `normalize.ts`'s default-value resolution. Split out of the original
- * single-file `question-form.ts`; see `../question-form.ts` for the public
- * facade.
- */
 import type { FormOption, QuestionForm } from './types.js';
 /**
  * Format a finished set of answers into a prose user message the agent can

package/dist/core/question-form/format.js

@@ -1,3 +1,14 @@
+/**
+ * @module question-form/format
+ *
+ * Answer presentation: turning a submitted answer set into the prose the
+ * agent reads on its next turn, plus the label/value lookups also used by
+ * `normalize.ts`'s default-value resolution. Split out of the original
+ * single-file `question-form.ts`; see `../question-form.ts` for the public
+ * facade.
+ */
+import { redactQuestionAnswers, isSecretQuestion } from './secret-answers.js';
+import { CREDENTIAL_CARD_GUIDANCE, redactUserText } from '../user-text-redaction.js';
 /**
  * Format a finished set of answers into a prose user message the agent can
  * read on its next turn. The shape is stable enough that the agent can
@@ -6,10 +17,11 @@
  * @complexity O(q) in the number of questions on the form.
  */
 export function formatFormAnswers({ form, answers }) {
+    const safe = redactQuestionAnswers({ form, answers });
     const lines = [];
     lines.push(`[form answers — ${form.id}]`);
     for (const q of form.questions) {
-        const v = answers[q.id];
+        const v = safe.answers[q.id];
         let display;
         if (Array.isArray(v)) {
             display = v.length > 0 ? v.map((value) => formOptionDisplayForValue(q, value)).join(', ') : '(skipped)';
@@ -22,7 +34,9 @@ export function formatFormAnswers({ form, answers }) {
         }
         lines.push(`- ${q.label}: ${display}`);
     }
-    return lines.join('\n');
+    if (safe.secretRedacted || form.questions.some(question => isSecretQuestion({ question })))
+        lines.push(CREDENTIAL_CARD_GUIDANCE);
+    return redactUserText({ text: lines.join('\n') }).text;
 }
 function formOptionDisplayForValue(question, value) {
     const match = question.options?.find((option) => option.value === value || option.label === value);

package/dist/core/question-form/normalize.js

@@ -25,6 +25,7 @@ export function mapRawQuestion({ q, index }) {
     const accept = typeof qo.accept === 'string' ? qo.accept : undefined;
     return {
         id,
+        ...(typeof qo.name === 'string' ? { name: qo.name } : {}),
         label,
         type,
         ...(options ? { options } : {}),

package/dist/core/question-form/secret-answers.d.ts

@@ -0,0 +1,38 @@
+/** Chat question forms are model-visible text, never secure credential storage. */
+import { type UserTextRedactionOptions } from '../user-text-redaction.js';
+import type { FormQuestion, QuestionForm } from './types.js';
+export declare function isSecretQuestion({ question }: {
+    readonly question: Pick<FormQuestion, 'id' | 'label' | 'type' | 'name'>;
+}): boolean;
+/** The map as well as its formatted transcript must be safe: hosts often persist both. */
+export declare function redactQuestionAnswers({ form, answers }: {
+    readonly form: QuestionForm;
+    readonly answers: Readonly<Record<string, string | string[]>>;
+}, options?: UserTextRedactionOptions): {
+    readonly answers: Record<string, string | string[]>;
+    readonly secretRedacted: boolean;
+    readonly count: number;
+};
+/** Never populate a credential text question from model-supplied defaults. */
+export declare function withoutSecretQuestionDefaults({ form }: {
+    readonly form: QuestionForm;
+}): QuestionForm;
+/** Attributes are presentation policy, shared by any host renderer. */
+export declare function questionTextInputProps({ question }: {
+    readonly question: FormQuestion;
+}): {
+    type: 'password' | 'text';
+    autoComplete?: string;
+    spellCheck?: boolean;
+};
+export declare function questionTextareaProps({ question }: {
+    readonly question: FormQuestion;
+}): {
+    autoComplete?: string;
+    spellCheck?: boolean;
+    style?: {
+        WebkitTextSecurity: string;
+        whiteSpace: 'pre-wrap';
+    };
+};
+//# sourceMappingURL=secret-answers.d.ts.map

package/dist/core/question-form/secret-answers.js

@@ -0,0 +1,45 @@
+/** Chat question forms are model-visible text, never secure credential storage. */
+import { redactUserText } from '../user-text-redaction.js';
+export function isSecretQuestion({ question }) {
+    if (question.type !== 'text' && question.type !== 'textarea')
+        return false;
+    const names = [question.id, question.label, question.name ?? ''].join(' ').replace(/([a-z])([A-Z])/g, '$1 $2');
+    return /(?:^|[^a-z0-9])(?:key|token|password|passwd|secret)(?:$|[^a-z0-9])/i.test(names);
+}
+/** The map as well as its formatted transcript must be safe: hosts often persist both. */
+export function redactQuestionAnswers({ form, answers }, options = {}) {
+    let count = 0;
+    const cleaned = {};
+    const redact = options.redactUserText ?? redactUserText;
+    for (const question of form.questions) {
+        const value = answers[question.id];
+        if (value === undefined)
+            continue;
+        const guard = (text) => {
+            const result = redact({ text }, { secretField: isSecretQuestion({ question }) });
+            count += result.count;
+            return result.text;
+        };
+        cleaned[question.id] = Array.isArray(value) ? value.map(guard) : guard(value);
+    }
+    if (count > 0)
+        options.onSecretRedacted?.({ secretRedacted: true, count });
+    return { answers: cleaned, secretRedacted: count > 0, count };
+}
+/** Never populate a credential text question from model-supplied defaults. */
+export function withoutSecretQuestionDefaults({ form }) {
+    return { ...form, questions: form.questions.map(question => {
+            if (!isSecretQuestion({ question }))
+                return question;
+            const { defaultValue: _defaultValue, ...safe } = question;
+            return safe;
+        }) };
+}
+/** Attributes are presentation policy, shared by any host renderer. */
+export function questionTextInputProps({ question }) {
+    return isSecretQuestion({ question }) ? { type: 'password', autoComplete: 'new-password', spellCheck: false } : { type: 'text' };
+}
+export function questionTextareaProps({ question }) {
+    return isSecretQuestion({ question }) ? { autoComplete: 'off', spellCheck: false, style: { WebkitTextSecurity: 'disc', whiteSpace: 'pre-wrap' } } : {};
+}
+//# sourceMappingURL=secret-answers.js.map

package/dist/core/question-form/types.d.ts

@@ -37,6 +37,8 @@ export interface FormOption {
     description?: string;
 }
 export interface FormQuestion {
+    /** Optional model-supplied field name, retained for credential masking policy. */
+    name?: string;
     id: string;
     label: string;
     type: QuestionType;

package/dist/core/question-form.d.ts

@@ -36,4 +36,5 @@ export type { QuestionType, DirectionCard, FormOption, FormQuestion, QuestionFor
 export { splitOnQuestionForms, findFirstQuestionForm, parseQuestionForm, stripTrailingOpenQuestionForm, hasUnterminatedQuestionForm, parsePartialQuestionForm, } from './question-form/scan.js';
 export { isRenderableColor } from './question-form/normalize.js';
 export { formatFormAnswers, formOptionLabelForValue, formOptionValueForLabel } from './question-form/format.js';
+export { isSecretQuestion, redactQuestionAnswers, withoutSecretQuestionDefaults, questionTextInputProps, questionTextareaProps } from './question-form/secret-answers.js';
 //# sourceMappingURL=question-form.d.ts.map

package/dist/core/question-form.js

@@ -1,4 +1,5 @@
 export { splitOnQuestionForms, findFirstQuestionForm, parseQuestionForm, stripTrailingOpenQuestionForm, hasUnterminatedQuestionForm, parsePartialQuestionForm, } from './question-form/scan.js';
 export { isRenderableColor } from './question-form/normalize.js';
 export { formatFormAnswers, formOptionLabelForValue, formOptionValueForLabel } from './question-form/format.js';
+export { isSecretQuestion, redactQuestionAnswers, withoutSecretQuestionDefaults, questionTextInputProps, questionTextareaProps } from './question-form/secret-answers.js';
 //# sourceMappingURL=question-form.js.map