@jini-ai/chat 0.6.15 → 0.6.16

package/dist/embed-widget/vanilla/index.js

@@ -1,7 +1,6 @@
 const ARIA_LABEL = 'aria-label';
 import { CHAT_BUBBLE_STYLE } from '../../contracts/chat-bubble-style.js';
 import { createVanillaChatController } from './state.js';
-import { isQueuedPageAction } from '../../core/browser/page-actions.js';
 export { createVanillaChatController } from './state.js';
 function svgIcon({ document, path }) {
     const svg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
@@ -75,9 +74,11 @@ export function mountVanillaChat(args, options = {}) {
     announcements.setAttribute('aria-atomic', 'false');
     const error = node('div', 'jini-chat-vanilla__error');
     error.setAttribute('role', 'alert');
-    const proposal = node('div', 'jini-chat-vanilla__proposal');
+    const proposal = node('div', 'jini-chat-vanilla__tool-confirmation');
+    proposal.hidden = true;
+    proposal.setAttribute('data-agent-private', '');
     const proposalText = node('span', '');
-    const go = button(copy.proposalGo);
+    const go = button('Allow');
     proposal.append(proposalText, go);
     const form = node('form', 'jini-chat-vanilla__composer');
     const input = node('textarea', 'jini-chat-vanilla__input');
@@ -122,8 +123,6 @@ export function mountVanillaChat(args, options = {}) {
         send.disabled = state.busy || !input.value.trim();
         input.disabled = state.busy;
         stop.hidden = !state.busy;
-        proposal.hidden = state.proposal === null;
-        proposalText.textContent = state.proposal ? copy.proposalLabel({ title: state.proposal.navigate.target.title }) : '';
     };
     const createRow = ({ message }) => {
         const row = { element: node('div', `jini-chat-vanilla__message jini-chat-vanilla__message--${message.role}`), content: '\0' };
@@ -256,7 +255,6 @@ export function mountVanillaChat(args, options = {}) {
     const dismissConfirmation = () => { confirmation.hidden = true; reset.focus(); };
     listen(keep, 'click', dismissConfirmation);
     listen(confirm, 'click', () => { confirmation.hidden = true; input.value = ''; controller.reset({}); input.focus(); });
-    listen(go, 'click', () => controller.acceptProposal({}));
     listen(stop, 'click', () => controller.cancel({}));
     listen(form, 'submit', event => {
         event.preventDefault();
@@ -311,12 +309,6 @@ export function mountVanillaChat(args, options = {}) {
         controller.setOpen({ open: true });
         focusEntry({ busy: controller.getState({}).busy });
     });
-    const queued = { value: args.session.drain({}) };
-    let cancelFrame = () => { };
-    if (isQueuedPageAction(queued) && queued.value.type !== 'navigate') {
-        const action = queued.value;
-        cancelFrame = args.scheduleFrame({ callback: () => { args.pageActions.execute({ action }); } });
-    }
     controller.setOpen({ open: options.initialOpen ?? controller.getState({}).open });
     initialized = true;
     element.dataset.chatMounted = 'true';
@@ -325,11 +317,9 @@ export function mountVanillaChat(args, options = {}) {
         controller,
         unmount(_input = {}, _opts = {}) {
             listeners.forEach(dispose => dispose());
-            cancelFrame();
             cancelRenderFrame();
             delete element.dataset.chatMounted;
             controller.dispose({});
-            args.pageActions.clearHighlight({});
             shell.remove();
         },
     };

package/dist/embed-widget/vanilla/state.d.ts

@@ -1,22 +1,15 @@
 import type { ChatMessage } from '../../core/messages.js';
 import type { ChatTransport } from '../../core/transport.js';
 import type { BrowserSessionStore } from '../browser/session-store.js';
-import type { PageActionPort, NavigateAction, NonNavigateAction } from '../../core/browser/page-actions.js';
 export interface VanillaChatState {
     readonly open: boolean;
     readonly messages: ChatMessage[];
     readonly busy: boolean;
     readonly error: string | null;
-    readonly proposal: {
-        navigate: NavigateAction;
-        bundled: NonNavigateAction | null;
-    } | null;
 }
 export interface VanillaChatControllerArgs {
     readonly transport: ChatTransport;
     readonly session: BrowserSessionStore;
-    readonly pageActions: PageActionPort;
-    readonly directiveEventName: string;
     readonly agentId: string;
     readonly ids: (args: Record<string, never>) => string;
     readonly createAbortController: (args: Record<string, never>) => AbortController;
@@ -25,9 +18,9 @@ export interface VanillaChatControllerArgs {
     }) => void;
 }
 /**
- * Framework-free visitor state over the existing transport/session/page-action owners.
- * Restored messages never replay directives. Only a successful live settlement can act;
- * persistence and queued effects finish synchronously before navigation tears down the page.
+ * Framework-free visitor state over the existing transport/session owners.
+ * Restored messages never replay effects; page control belongs to the shared frontend bridge.
+ * Terminal navigation flushes the transport snapshot before the host tears down the page.
  * Reset invalidates callbacks before aborting, preventing late chunks from reviving a thread.
  * @complexity O(retained transcript + reply events + reply characters) per update; storage writes
  * occur only on settle/open/reset/navigation, never per streamed chunk. Session bounds persisted bytes.
@@ -40,7 +33,6 @@ export declare function createVanillaChatController(args: VanillaChatControllerA
     send({ text }: {
         text: string;
     }, _opts?: {}): Promise<boolean>;
-    acceptProposal(_input?: Record<string, never>, _opts?: {}): void;
     cancel(_input?: Record<string, never>, _opts?: {}): void;
     reset(_input?: Record<string, never>, _opts?: {}): void;
     dispose(_input?: Record<string, never>, _opts?: {}): void;

package/dist/embed-widget/vanilla/state.js

@@ -1,16 +1,15 @@
 import { assistantContentFromEvents } from '../../core/assistant-content.js';
-import { extractPageActions, splitPageActions } from '../../core/browser/page-actions.js';
 /**
- * Framework-free visitor state over the existing transport/session/page-action owners.
- * Restored messages never replay directives. Only a successful live settlement can act;
- * persistence and queued effects finish synchronously before navigation tears down the page.
+ * Framework-free visitor state over the existing transport/session owners.
+ * Restored messages never replay effects; page control belongs to the shared frontend bridge.
+ * Terminal navigation flushes the transport snapshot before the host tears down the page.
  * Reset invalidates callbacks before aborting, preventing late chunks from reviving a thread.
  * @complexity O(retained transcript + reply events + reply characters) per update; storage writes
  * occur only on settle/open/reset/navigation, never per streamed chunk. Session bounds persisted bytes.
  */
 export function createVanillaChatController(args, _options = {}) {
     const initial = args.session.load({});
-    let state = { ...initial, busy: false, error: null, proposal: null };
+    let state = { ...initial, busy: false, error: null };
     let generation = 0;
     let active = null;
     const publish = ({ persist = true } = {}) => {
@@ -18,32 +17,6 @@ export function createVanillaChatController(args, _options = {}) {
             args.session.save({ state: { open: state.open, messages: state.messages } });
         args.onChange({ state });
     };
-    const go = (proposal) => {
-        if (!args.pageActions.allows({ action: proposal.navigate }))
-            return;
-        if (proposal.bundled && args.pageActions.allows({ action: proposal.bundled }))
-            args.session.enqueue({ action: proposal.bundled });
-        state = { ...state, proposal: null };
-        publish();
-        args.pageActions.navigate({ action: proposal.navigate });
-    };
-    const settleActions = (events) => {
-        const actions = extractPageActions({ events, directiveEventName: args.directiveEventName })
-            .filter(action => args.pageActions.allows({ action }));
-        const { navigate, other } = splitPageActions({ actions });
-        if (!navigate) {
-            if (other)
-                args.pageActions.execute({ action: other });
-            return;
-        }
-        const proposal = { navigate, bundled: other };
-        if (navigate.auto)
-            go(proposal);
-        else {
-            state = { ...state, proposal };
-            publish();
-        }
-    };
     return {
         getState(_input = {}, _opts = {}) { return state; },
         setOpen({ open }, _opts = {}) { state = { ...state, open }; publish(); },
@@ -57,7 +30,7 @@ export function createVanillaChatController(args, _options = {}) {
             active = abort;
             const history = [...state.messages, { id: args.ids({}), role: 'user', content }];
             const reply = { id: args.ids({}), role: 'assistant', content: '', events: [], runStatus: 'running' };
-            state = { ...state, messages: [...history, reply], busy: true, error: null, proposal: null };
+            state = { ...state, messages: [...history, reply], busy: true, error: null };
             publish({ persist: false });
             let events = [];
             let failed = false;
@@ -84,8 +57,6 @@ export function createVanillaChatController(args, _options = {}) {
                 const completedStatus = abort.signal.aborted ? 'canceled' : 'succeeded';
                 updateReply({ ...reply, content: assistantContentFromEvents({ events }), events: [...events],
                     runStatus: failed ? 'failed' : completedStatus }, { persist: true });
-                if (!failed && !abort.signal.aborted)
-                    settleActions(events);
             };
             try {
                 await args.transport.startRun({ history, agentId: args.agentId, assistantMessageId: reply.id, signal: abort.signal }, {
@@ -105,15 +76,13 @@ export function createVanillaChatController(args, _options = {}) {
             }
             return true;
         },
-        acceptProposal(_input = {}, _opts = {}) { if (state.proposal)
-            go(state.proposal); },
         cancel(_input = {}, _opts = {}) { active?.abort(); },
         reset(_input = {}, _opts = {}) {
             generation += 1;
             active?.abort();
             active = null;
             args.session.clear({});
-            state = { open: state.open, messages: [], busy: false, error: null, proposal: null };
+            state = { open: state.open, messages: [], busy: false, error: null };
             publish();
         },
         dispose(_input = {}, _opts = {}) { generation += 1; active?.abort(); active = null; },

package/dist/embed-widget/vanilla/style.css

@@ -10,7 +10,7 @@
 .jini-chat-vanilla :focus-visible{outline:3px solid var(--jini-chat-accent,#2563eb);outline-offset:3px}
 .jini-chat-vanilla{font:14px/1.5 var(--font-body,system-ui,sans-serif);color:var(--jini-chat-text,var(--color-text,CanvasText))}
 .jini-chat-vanilla__panel{position:fixed;right:var(--jini-embed-right,24px);bottom:88px;width:min(var(--jini-embed-width,440px),calc(100vw - 32px));height:min(var(--jini-embed-height,620px),calc(100dvh - 120px));z-index:var(--jini-embed-z-index,1000);display:flex;flex-direction:column;background:var(--jini-chat-background,var(--color-background,Canvas));border:1px solid var(--jini-chat-border,#767676);border-radius:16px;box-shadow:0 12px 48px #0003;overflow:hidden}
-.jini-chat-vanilla__header,.jini-chat-vanilla__composer,.jini-chat-vanilla__confirmation,.jini-chat-vanilla__proposal{display:flex;align-items:center;gap:8px;padding:12px;border-bottom:1px solid var(--jini-chat-border,#767676)}
+.jini-chat-vanilla__header,.jini-chat-vanilla__composer,.jini-chat-vanilla__confirmation,.jini-chat-vanilla__tool-confirmation{display:flex;align-items:center;gap:8px;padding:12px;border-bottom:1px solid var(--jini-chat-border,#767676)}
 .jini-chat-vanilla__title{flex:1}
 .jini-chat-vanilla__button{font:inherit;color:inherit;background:transparent;border:1px solid var(--jini-chat-border,#767676);border-radius:8px;padding:6px 10px;cursor:pointer}
 .jini-chat-vanilla__button:disabled{opacity:.5;cursor:default}

package/dist/react/agent-bridge/frontend-session-bridge.d.ts

@@ -1,57 +1,3 @@
-import { type PageDriver } from '@jini-ai/agentic';
-import type { ChatPaneAgentBridgeAccess, ChatPaneAgentToolAction } from '../features/chat-pane/types.js';
-export interface FrontendSessionBridgeOptions {
-    /** Supplying one claims the six `page.*` verbs. Omit for a chat-only surface. */
-    readonly pageDriver?: PageDriver;
-    /**
-     * Product capabilities, keyed by id prefix (`'cms.'`). Each claims every capability under it.
-     * This is how a consumer exposes verbs the engine has never heard of.
-     */
-    readonly executors?: Readonly<Record<string, (capabilityId: string, input: Record<string, unknown>) => Promise<unknown>>>;
-    /** Called for every invocation before it runs — the hook a product uses to show an activity trail. */
-    readonly onInvocation?: (action: ChatPaneAgentToolAction) => void;
-    /** Reported for failures that are nobody's tool call: stream errors, malformed frames. */
-    readonly onError?: (error: unknown) => void;
-}
-/** The host supplies its origin and stream transport; native fetch defaults may be overridden. */
-export interface FrontendSessionBridgeArgs {
-    /** Pass an empty string for the same-origin proxy used by a browser host. */
-    readonly baseUrl: string;
-    readonly openStream: (args: {
-        url: string;
-    }) => EventSource;
-    readonly fetch?: typeof globalThis.fetch;
-    readonly request?: (args: {
-        url: string;
-        init: RequestInit;
-        timeoutMs: number;
-    }) => Promise<Response>;
-}
-export interface FrontendSessionBridge {
-    /** Hand this to `ChatPane`'s `agentControl.bridgeAccess`. */
-    readonly bridgeAccess: ChatPaneAgentBridgeAccess;
-    /**
-     * Resolves the *first* time the daemon attaches this surface — an "is it live yet" signal.
-     *
-     * Its `bindToken` is only correct until the next reconnect, so do not stash it. Call
-     * {@link FrontendSessionBridge.bindToken} when building a run request instead.
-     */
-    readonly ready: Promise<{
-        sessionId: string;
-        bindToken: string;
-    }>;
-    /**
-     * The token for the attachment that is live *now*, or `undefined` before the first attach and
-     * after {@link FrontendSessionBridge.close}. Read it at run-start; see the module doc.
-     */
-    bindToken(): string | undefined;
-    close(): void;
-}
-/**
- * Opens the surface's connection and starts routing invocations.
- *
- * @param options - What this page can serve and where the daemon is.
- * @returns The pane's bridge, the attach result, and a teardown.
- */
-export declare function createFrontendSessionBridge({ baseUrl: base, openStream, request, fetch }: FrontendSessionBridgeArgs, options?: FrontendSessionBridgeOptions): FrontendSessionBridge;
+/** Compatibility entry; the framework-free browser bridge owns the lifecycle. */
+export * from '../../embed-widget/browser/frontend-session-bridge.js';
 //# sourceMappingURL=frontend-session-bridge.d.ts.map

package/dist/react/agent-bridge/frontend-session-bridge.js

@@ -1,249 +1,3 @@
-/**
- * @module agent-bridge/frontend-session-bridge
- *
- * The browser half of agent-driven frontend control: one SSE connection to the daemon, and the
- * routing that turns each relayed invocation into a call on something in this page.
- *
- * Everything on the server side already existed — `FrontendSessionRegistry` addresses a run to a
- * surface, the frontend-session routes carry invocations out and answers back, and
- * `createFrontendControl` assembles them. `ChatPaneAgentBridgeAccess` declared the contract this
- * satisfies and had **zero implementations**, which is why an agent could reach a tool and the
- * tool could reach nothing.
- *
- * Design notes worth knowing before changing this:
- *
- * - **The connection is owned here, not by `subscribe`.** `ChatPaneAgentBridgeAccess.subscribe` is
- *   called by the chat pane's own effect, so tying the stream's lifetime to it would mean page
- *   control dies when the pane unmounts — and the page is drivable whether or not a chat pane
- *   exists. `subscribe` registers a listener; `close()` tears the connection down.
- * - **Capabilities are claimed from what is actually wired.** The claim sent at connect time is
- *   derived from the presence of a `pageDriver` and the keys of `executors`, never from a static
- *   list. A surface that claims what it cannot serve turns a fast, named refusal into a timeout.
- * - **An executed invocation is never executed twice.** If the stream drops between the daemon
- *   delivering an invocation and this page POSTing the answer, the daemon correctly fails that
- *   call — but the click already happened. Without the `executed` set below, the retry clicks
- *   again. Buttons are not idempotent.
- * - **The bind token never leaves this module except to the host.** It arrives on the `attached`
- *   event and must ride to run-start; it deliberately does not appear in any URL (see
- *   `@jini-ai/daemon`'s `FrontendSessionHandle`).
- * - **Read the bind token at send time, not once.** `EventSource` reconnects on its own — after a
- *   daemon restart, a sleeping laptop, or an ordinary network blip — and each reattach mints a new
- *   session and a new token. A host that captured `ready`'s token keeps sending a dead one, every
- *   later run fails to bind, and the only trace is a daemon-side log line: the agent is simply told
- *   "no frontend is bound to this run". `ready` therefore answers "has it attached at least once";
- *   {@link FrontendSessionBridge.bindToken} answers "what is valid now", and only the latter
- *   belongs in a run request.
- */
-import { CHAT_CAPABILITIES } from '../../core/index.js';
-import { PAGE_CAPABILITIES, executePageCapability } from '@jini-ai/agentic';
-/** How many settled invocation ids to remember for replay suppression. */
-const EXECUTED_MEMORY = 256;
-/** Ids this surface can actually serve, given what the host wired up. */
-function claimedCapabilities(options) {
-    const claims = CHAT_CAPABILITIES.map((capability) => capability.id);
-    if (options.pageDriver !== undefined) {
-        claims.push(...PAGE_CAPABILITIES.map((capability) => capability.id));
-    }
-    claims.push(...Object.keys(options.executors ?? {}));
-    return claims;
-}
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-/** Parses a frame's data into an object, or says why it is not one. */
-function parseFrameObject(data) {
-    let parsed;
-    try {
-        parsed = JSON.parse(data);
-    }
-    catch (error) {
-        return { error };
-    }
-    // `JSON.parse` succeeds on any valid JSON value, not just objects — a bare `null`, number,
-    // string or boolean parses cleanly and would throw *outside* this try/catch on the very next
-    // `frame['type']` read (`null` is the one of those that actually throws; the others just read
-    // back `undefined` harmlessly). Guarding here routes every one of those through the same
-    // `onError` path as an unparseable frame, rather than only some of them crashing the listener.
-    if (parsed === null || typeof parsed !== 'object') {
-        return { error: new Error(`malformed frame: expected a JSON object, got ${JSON.stringify(parsed)}`) };
-    }
-    return { frame: parsed };
-}
-/** Reads an `invocation` frame into the pane's action shape, refusing one with no usable id. */
-function readInvocation(frame) {
-    const rawInvocationId = frame['invocationId'];
-    if (typeof rawInvocationId !== 'string' || rawInvocationId.length === 0) {
-        return { kind: 'malformed', error: new Error('invocation frame missing invocationId') };
-    }
-    return {
-        kind: 'invocation',
-        action: {
-            invocationId: rawInvocationId,
-            capabilityId: String(frame['capabilityId']),
-            input: (frame['input'] ?? {}),
-        },
-    };
-}
-/** Classifies one frame's raw data; the listener only applies the result. */
-function readFrame(data) {
-    const parsed = parseFrameObject(data);
-    if ('error' in parsed)
-        return { kind: 'malformed', error: parsed.error };
-    const { frame } = parsed;
-    switch (frame['type']) {
-        case 'attached':
-            return { kind: 'attached', sessionId: String(frame['sessionId']), bindToken: String(frame['bindToken']) };
-        case 'error':
-            return { kind: 'refused', message: String(frame['message']) };
-        case 'invocation':
-            return readInvocation(frame);
-        default:
-            // Unknown frame types are ignored rather than treated as errors, so the daemon's event
-            // vocabulary can grow without every deployed surface needing to ship first.
-            return { kind: 'ignored' };
-    }
-}
-/**
- * Opens the surface's connection and starts routing invocations.
- *
- * @param options - What this page can serve and where the daemon is.
- * @returns The pane's bridge, the attach result, and a teardown.
- */
-export function createFrontendSessionBridge({ baseUrl: base, openStream, request, fetch }, options = {}) {
-    const capabilities = claimedCapabilities(options);
-    // The only caller (`respond`) never passes its own signal, so the deadline is the whole signal.
-    const send = request ?? (({ url, init, timeoutMs }) => (fetch ?? globalThis.fetch)(url, { ...init, signal: AbortSignal.timeout(timeoutMs) }));
-    let sessionId;
-    /** Replaced on every reattach; a promise resolved once could never carry this. */
-    let currentBindToken;
-    // Definite assignment rather than no-op placeholders: a Promise executor runs synchronously, so
-    // both are set before this line finishes, and placeholders would only add two functions that
-    // can never be called.
-    let resolveReady;
-    let rejectReady;
-    const ready = new Promise((resolve, reject) => {
-        resolveReady = resolve;
-        rejectReady = reject;
-    });
-    /** Chat-pane listeners. The pane registers exactly one; a second host could register another. */
-    const chatListeners = new Set();
-    /** Invocation ids already run here, so a stream reconnect cannot double-click a button. */
-    const executed = new Set();
-    const query = capabilities.map((id) => `capability=${encodeURIComponent(id)}`).join('&');
-    const source = openStream({ url: `${base}/api/frontend-sessions/stream?${query}` });
-    async function respond(invocationId, body) {
-        if (sessionId === undefined)
-            throw new Error('the surface is not attached yet');
-        const response = await send({
-            url: `${base}/api/frontend-sessions/${encodeURIComponent(sessionId)}/responses`,
-            init: { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ invocationId, ...body }) },
-            timeoutMs: 15_000,
-        });
-        if (!response.ok)
-            throw new Error(`answering "${invocationId}" failed: ${response.status}`);
-    }
-    const respondSuccess = (invocationId, output) => respond(invocationId, { ok: true, output });
-    const respondError = (invocationId, message) => respond(invocationId, { ok: false, message });
-    /** Runs one non-chat invocation here and answers it. Chat ones go to the pane instead. */
-    async function serveLocally(action) {
-        let output;
-        try {
-            if (options.pageDriver !== undefined && action.capabilityId.startsWith('page.')) {
-                output = await executePageCapability({ driver: options.pageDriver, capabilityId: action.capabilityId, input: action.input });
-            }
-            else {
-                const entry = Object.entries(options.executors ?? {})
-                    .find(([prefix]) => action.capabilityId.startsWith(prefix));
-                if (entry === undefined)
-                    throw new Error(`nothing on this page serves "${action.capabilityId}"`);
-                output = await entry[1](action.capabilityId, action.input);
-            }
-        }
-        catch (error) {
-            await respondError(action.invocationId, errorMessage(error)).catch(options.onError ?? (() => undefined));
-            return;
-        }
-        await respondSuccess(action.invocationId, output).catch(options.onError ?? (() => undefined));
-    }
-    function remember(invocationId) {
-        executed.add(invocationId);
-        if (executed.size > EXECUTED_MEMORY) {
-            const oldest = executed.values().next().value;
-            if (oldest !== undefined)
-                executed.delete(oldest);
-        }
-    }
-    /** Runs one well-formed invocation: replay check, announcement, then pane or local serving. */
-    function handleInvocation(action) {
-        // A redelivery after a dropped answer must not re-run the side effect.
-        if (executed.has(action.invocationId)) {
-            void respondError(action.invocationId, 'already executed on this surface').catch(() => undefined);
-            return;
-        }
-        remember(action.invocationId);
-        options.onInvocation?.(action);
-        if (action.capabilityId.startsWith('chat.')) {
-            for (const listener of chatListeners)
-                listener(action);
-            return;
-        }
-        void serveLocally(action);
-    }
-    source.addEventListener('message', (event) => {
-        const frame = readFrame(event.data);
-        switch (frame.kind) {
-            case 'attached':
-                sessionId = frame.sessionId;
-                currentBindToken = frame.bindToken;
-                // A no-op after the first attach — which is exactly why `currentBindToken` exists.
-                resolveReady({ sessionId, bindToken: currentBindToken });
-                return;
-            case 'refused':
-                rejectReady(new Error(frame.message));
-                return;
-            case 'malformed':
-                options.onError?.(frame.error);
-                return;
-            case 'invocation':
-                handleInvocation(frame.action);
-                return;
-            case 'ignored':
-                return;
-        }
-    });
-    source.addEventListener('error', (event) => {
-        // The daemon deletes a session's bind token the instant that connection drops, so by the time
-        // this fires the token in hand is already gone from the registry. Holding it until the next
-        // `attached` frame leaves a window where `bindToken()` hands back something dead, and a run
-        // started in that window fails to bind — reported to the agent only as "no frontend is bound
-        // to this run", with the real reason (a reconnect it never saw) nowhere in view.
-        // Reporting no token is the honest answer for a surface that is, right now, not attached.
-        currentBindToken = undefined;
-        sessionId = undefined;
-        options.onError?.(event);
-    });
-    const bridgeAccess = {
-        subscribe(onAction) {
-            chatListeners.add(onAction);
-            // Removes this listener only. The connection outlives any one pane — see the module doc.
-            return () => chatListeners.delete(onAction);
-        },
-        respondSuccess,
-        respondError,
-    };
-    return {
-        bridgeAccess,
-        ready,
-        bindToken: () => currentBindToken,
-        close() {
-            source.close();
-            chatListeners.clear();
-            // A closed bridge serves nothing, so binding a run to it would strand that run rather than
-            // fail it — this is what stops a torn-down surface (a StrictMode remount, a route change)
-            // from handing its dead token to the next run.
-            currentBindToken = undefined;
-            sessionId = undefined;
-        },
-    };
-}
+/** Compatibility entry; the framework-free browser bridge owns the lifecycle. */
+export * from '../../embed-widget/browser/frontend-session-bridge.js';
 //# sourceMappingURL=frontend-session-bridge.js.map

package/dist/react/components/Icon.d.ts

@@ -7,7 +7,7 @@
  * AgentIcon and WorkingDirPicker.
  */
 import type { SVGProps } from 'react';
-export type IconName = 'spinner' | 'check' | 'close' | 'chevron-down' | 'chevron-left' | 'chevron-right' | 'attach' | 'file' | 'image' | 'x' | 'comment' | 'search' | 'plus' | 'pencil' | 'copy';
+export type IconName = 'spinner' | 'check' | 'close' | 'chevron-down' | 'chevron-left' | 'chevron-right' | 'attach' | 'file' | 'image' | 'x' | 'comment' | 'search' | 'plus' | 'pencil' | 'copy' | 'retry';
 interface IconProps extends Omit<SVGProps<SVGSVGElement>, 'name'> {
     name: IconName;
     size?: number | string;

package/dist/react/components/Icon.js

@@ -6,6 +6,7 @@ const ICON_GLYPHS = {
     check: _jsx("path", { d: "M20 6 9 17l-5-5" }),
     close: CROSS,
     x: CROSS,
+    retry: _jsxs(_Fragment, { children: [_jsx("path", { d: "M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8" }), _jsx("path", { d: "M3 3v5h5" })] }),
     'chevron-down': _jsx("path", { d: "m6 9 6 6 6-6" }),
     /** Conversation-switcher trigger — a speech bubble reads as "chat history" without a label. */
     comment: (_jsx("path", { d: "M21 11.5a8.38 8.38 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.38 8.38 0 0 1-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.38 8.38 0 0 1 3.8-.9h.5a8.48 8.48 0 0 1 8 8v.5z" })),

package/dist/react/components/Markdown.d.ts

@@ -2,4 +2,5 @@ export interface MarkdownProps {
     children: string;
 }
 export declare function Markdown({ children }: MarkdownProps): import("react").JSX.Element;
+export declare const SAFE_LINK_HREF: RegExp;
 //# sourceMappingURL=Markdown.d.ts.map

package/dist/react/components/Markdown.js

@@ -415,7 +415,7 @@ const MD_LINK_PARTS = /^\[([^\]\n]+)\]\((.+)\)$/u;
 const INLINE_RE = new RegExp(String.raw `(\x60[^\x60]+\x60)|(${MD_LINK})|(\*\*[^*]+\*\*)|(\*[^*]+\*|${UNDERSCORE_EM})|(https?:\/\/[^\s)]+)`, 'gu');
 // Only these targets become anchors; anything else (`javascript:`, `data:`, protocol-relative
 // `//host`) stays literal text, since the text is untrusted model output.
-const SAFE_LINK_HREF = /^(?:https?:\/\/|mailto:|\/(?!\/)|#)/iu;
+export const SAFE_LINK_HREF = /^(?:https?:\/\/|mailto:|\/(?!\/)|#)/iu;
 // Every link opens in a new tab — an in-app path too, so following one never navigates the tab the
 // chat lives in (owner 2026-10-08). Only a `#` same-document anchor stays in place. ChatPane's
 // click guard (`useChatPaneNewTabLinks`) covers links this renderer does not draw.

package/dist/react/components/MessageList.d.ts

@@ -6,7 +6,7 @@ interface PendingPrompt {
     attachments?: ChatAttachment[];
     onCancel: () => void;
 }
-export interface MessageListProps extends Pick<MessageRowProps, 'projectFileNames' | 'onRequestOpenFile' | 'renderAttachment' | 'showUsageTotal' | 'showUsageLine' | 'toolCallDisplay' | 'showThinking'> {
+export interface MessageListProps extends Pick<MessageRowProps, 'projectFileNames' | 'onRequestOpenFile' | 'renderAttachment' | 'showUsageTotal' | 'showUsageLine' | 'toolCallDisplay' | 'showThinking' | 'sendingLabel'> {
     messages: ChatMessage[];
     isStreaming?: boolean;
     /** Mirrors `useConversation().scrollIntent` — when `true`, this component scrolls to the bottom on mount/update. */

package/dist/react/components/MessageRow.d.ts

@@ -73,6 +73,9 @@ export interface MessageRowProps {
     runStreaming?: boolean;
     /** Whether the server has yet to accept this reply's run (its user turn is still pending). */
     runSending?: boolean;
+    /** Host-localized text shown verbatim only while this run is active and sending.
+     * Omit to use the translated `Sending…` label. */
+    sendingLabel?: string;
     runSucceeded?: boolean;
     /** Whether this message's question-form (if any) is still the active/answerable one. */
     questionFormInteractive?: boolean;