@jini-ai/chat 0.6.16 → 0.6.17

package/dist/react/hooks/useConversation.js

@@ -32,6 +32,7 @@ function pendingUserMessage({ content, sendOptions, createMessageId }, options =
             content,
             createdAt: Date.now(),
             ...(sendOptions.secretRedaction ? { secretRedaction: sendOptions.secretRedaction } : {}),
+            ...(sendOptions.folders ? { folders: sendOptions.folders } : {}),
             ...(sendOptions.attachments ? { attachments: sendOptions.attachments } : {}),
         } }, options).message;
 }
@@ -213,6 +214,7 @@ export function useConversation(options) {
             history,
             ...(resolvedAgentId !== undefined ? { agentId: resolvedAgentId } : {}),
             conversationId,
+            ...(sendOptions.folders !== undefined ? { folders: sendOptions.folders } : {}),
             ...(sendOptions.attachments !== undefined ? { attachments: sendOptions.attachments } : {}),
             ...(sendOptions.context !== undefined ? { context: sendOptions.context } : {}),
         });
@@ -222,7 +224,7 @@ export function useConversation(options) {
             setSendRefused(true);
             return;
         }
-        const inputs = sendOptions.acceptedInputs ?? [{ id: userMessage.id, text: userMessage.content }];
+        const inputs = sendOptions.acceptedInputs ?? [{ id: userMessage.id, text: userMessage.content, ...(userMessage.folders ? { folders: userMessage.folders } : {}) }];
         setMessagesState(prev => prev.map(message => message.id === userMessage.id ? { ...message, inputPending: false } : message));
         sendOptions.onAccepted?.({ inputs });
     }, [agentId, conversationId, createMessageId, run, options.redactUserText, options.onSecretRedacted]);
@@ -254,6 +256,7 @@ export function useConversation(options) {
             history,
             ...(resolvedAgentId !== undefined ? { agentId: resolvedAgentId } : {}),
             conversationId,
+            ...(priorUser.folders !== undefined ? { folders: priorUser.folders } : {}),
             ...(priorUser.attachments !== undefined ? { attachments: priorUser.attachments } : {}),
         });
     }, [agentId, conversationId, run, options.redactUserText, options.onSecretRedacted]);

package/dist/react/styles/reference.css

@@ -328,3 +328,9 @@
  * deleted silently) so a future reader who remembers seeing "queued" in this file finds the pointer
  * instead of concluding the removal was accidental.
  */
+
+.jini-composer-attachments, .jini-folder-chips__list { display: flex; flex-wrap: wrap; }
+.jini-folder-chips, .jini-folder-chips__name { min-width: 0; max-width: 100%; overflow-wrap: anywhere; }
+.jini-folder-chips__toggle, .jini-folder-chips__item { display: flex; align-items: center; }
+.jini-folder-chips__list { list-style: none; }
+.jini-folder-chips svg, .jini-folder-chips button { flex-shrink: 0; }

package/dist/store/legacy/sqlite/messages.d.ts

@@ -25,6 +25,12 @@ export declare function listMessages({ db, conversationId }: {
     db: SqliteDb;
     conversationId: string;
 }): {
+    sessionMode: ChatSessionMode | undefined;
+    runContext: any;
+    createdAt: any;
+    startedAt: any;
+    endedAt: any;
+    folders?: string[];
     id: any;
     role: any;
     content: any;
@@ -35,11 +41,6 @@ export declare function listMessages({ db, conversationId }: {
     lastRunEventId: any;
     events: any;
     attachments: any;
-    sessionMode: ChatSessionMode | undefined;
-    runContext: any;
-    createdAt: any;
-    startedAt: any;
-    endedAt: any;
 }[];
 /**
  * Thrown by `upsertMessage` when the caller presents a message `id` together with a
@@ -150,6 +151,12 @@ export declare function deleteMessage({ db, id }: {
 }): void;
 /** @internal Converts a raw SQLite row to a plain object with JSON columns parsed and null coerced to undefined. */
 declare function normalizeMessage(row: DbRow): {
+    sessionMode: ChatSessionMode | undefined;
+    runContext: any;
+    createdAt: any;
+    startedAt: any;
+    endedAt: any;
+    folders?: string[];
     id: any;
     role: any;
     content: any;
@@ -160,11 +167,6 @@ declare function normalizeMessage(row: DbRow): {
     lastRunEventId: any;
     events: any;
     attachments: any;
-    sessionMode: ChatSessionMode | undefined;
-    runContext: any;
-    createdAt: any;
-    startedAt: any;
-    endedAt: any;
 };
 export {};
 //# sourceMappingURL=messages.d.ts.map

package/dist/store/legacy/sqlite/messages.js

@@ -1,3 +1,4 @@
+import { withFolderReceipt, foldersFromReceipts } from "../../../core/accepted-input.js";
 import { redactUserText } from '../../../core/user-text-redaction.js';
 import { parseJsonOrUndef } from '@jini-ai/db/core';
 /** @internal Column alias list used by both `listMessages` and `upsertMessage`'s re-fetch. */
@@ -117,7 +118,7 @@ function messageFieldValues(m) {
         m.role,
         m.content,
         ...[m.agentId, m.agentName, m.runId, m.runStatus, m.lastRunEventId].map(orNull),
-        jsonOrNull(m.events),
+        jsonOrNull(withFolderReceipt({ message: m }).events),
         jsonOrNull(m.attachments),
         normalizeMessageSessionMode(m.sessionMode) ?? null,
         jsonOrNull(m.runContext),
@@ -273,6 +274,7 @@ export function deleteMessage({ db, id }) {
 }
 /** @internal Converts a raw SQLite row to a plain object with JSON columns parsed and null coerced to undefined. */
 function normalizeMessage(row) {
+    const folders = foldersFromReceipts({ events: parseJsonOrUndef(row.eventsJson) });
     return {
         id: row.id,
         role: row.role,
@@ -284,6 +286,7 @@ function normalizeMessage(row) {
         lastRunEventId: row.lastRunEventId ?? undefined,
         events: parseJsonOrUndef(row.eventsJson),
         attachments: parseJsonOrUndef(row.attachmentsJson),
+        ...(folders.length ? { folders } : {}),
         sessionMode: normalizeMessageSessionMode(row.sessionMode),
         runContext: parseJsonOrUndef(row.runContextJson),
         createdAt: row.createdAt ?? undefined,

package/dist/store/runtime/durable-run-store.js

@@ -1,3 +1,5 @@
+import { acceptedInputEvent, acceptedInputUserEvent } from "../../core/accepted-input.js";
+import { redactUserMessage } from "../../core/user-text-redaction.js";
 import { recoveredRunEvents } from "../../core/index.js";
 import { chatKernelTables } from "../sql/boundary.js";
 import { sql } from "kysely";
@@ -18,6 +20,10 @@ function isAcceptedUserShape({ message }, _optional = {}) {
         return false;
     return message.createdAt === undefined || Number.isFinite(message.createdAt);
 }
+/** Directory existence is host policy; the neutral store validates only its message contract. */
+function validAcceptedFolders({ folders }, _options = {}) {
+    return Array.isArray(folders) && folders.length <= 10 && folders.every(path => typeof path === 'string' && path.length > 0);
+}
 function areAcceptedAttachments({ attachments }, _optional = {}) {
     return Array.isArray(attachments) && attachments.every((attachment) => {
         if (!attachment || typeof attachment.path !== "string" || typeof attachment.name !== "string")
@@ -25,6 +31,31 @@ function areAcceptedAttachments({ attachments }, _optional = {}) {
         return attachment.kind === "file" || attachment.kind === "image";
     });
 }
+/** Both top-level and queued user inputs obey the same reference contract. */
+function validateAcceptedMetadata({ message }, _options = {}) {
+    if (message.folders !== undefined && !validAcceptedFolders({ folders: message.folders }))
+        throw new Error("Invalid accepted user folders");
+    if (message.attachments !== undefined && !areAcceptedAttachments({ attachments: message.attachments }, {}))
+        throw new Error("Invalid accepted user attachments");
+}
+/** Preserve only accepted user receipts; a browser cannot supply assistant lifecycle events.
+ * Receipt text uses the same guard as ordinary user text; folder data remains byte-exact.
+ */
+function acceptedReceiptFields({ message }, _options = {}) {
+    if (!Array.isArray(message.events))
+        return {};
+    const events = message.events.flatMap(event => {
+        if (!event || typeof event !== 'object')
+            return [];
+        const input = acceptedInputEvent({ event })?.data;
+        if (!input)
+            return [];
+        validateAcceptedMetadata({ message: input });
+        const safe = redactUserMessage({ message: { role: 'user', content: input.text } }).message;
+        return [acceptedInputUserEvent({ input: { ...input, text: safe.content } }, { receipt: 'accepted' })];
+    });
+    return events.length ? { events } : {};
+}
 function acceptedUserMessage({ request, now }, _optional = {}) {
     const context = JSON.parse(request.contextRef);
     // Older clients supplied only a prompt; never invent a user identity from that transcript.
@@ -33,11 +64,12 @@ function acceptedUserMessage({ request, now }, _optional = {}) {
         return null;
     if (!isAcceptedUserShape({ message }, {}))
         throw new Error("Invalid accepted user message");
-    if (message.attachments !== undefined && !areAcceptedAttachments({ attachments: message.attachments }, {}))
-        throw new Error("Invalid accepted user attachments");
-    // User input cannot claim an assistant run's status/events. Keep the same identity and payload
+    validateAcceptedMetadata({ message });
+    // User input cannot claim assistant lifecycle events. Keep the same identity and payload
     // as its browser PUT, including the original clock and attachment order.
     return { id: message.id, role: "user", content: message.content, createdAt: message.createdAt ?? now,
+        ...acceptedReceiptFields({ message }),
+        ...(message.folders ? { folders: message.folders } : {}),
         ...(message.attachments ? { attachments: message.attachments } : {}) };
 }
 function recoveryFields({ row, metadata }, _optional = {}) {

package/dist/store/sql/store.js

@@ -1,3 +1,4 @@
+import { withFolderReceipt, foldersFromReceipts } from '../../core/accepted-input.js';
 const MESSAGE_POSITION = 'm.position';
 const CONVERSATION_UPDATED_AT = 'c.updated_at';
 /** One SQL query body upstreamed from the existing host adapter; no resource/schema ownership. */
@@ -84,8 +85,10 @@ function agentFields(row) {
 function jsonFields(row) {
     const events = parseJsonColumn(row.events_json);
     const attachments = parseJsonColumn(row.attachments_json);
+    const folders = foldersFromReceipts({ events });
     return {
         ...(events === undefined ? {} : { events }),
+        ...(folders.length ? { folders } : {}),
         ...(attachments === undefined ? {} : { attachments }),
     };
 }
@@ -190,7 +193,8 @@ export function createSqlChatStore({ kernel, scope: inputScope }, { clock = crea
         return rows.map(toMessage);
     }
     /** Writes and projects one message inside the borrowed transaction; null for absent/foreign IDs. */
-    function writeMessage(conversationId, m) {
+    function writeMessage(conversationId, message) {
+        const m = withFolderReceipt({ message });
         return kernel.transaction(async () => {
             await kernel.lockKey(conversationLockKey(conversationId));
             const owned = await run((db) => db

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jini-ai/chat",
-  "version": "0.6.16",
+  "version": "0.6.17",
   "description": "Jini's chat/artifact frontend, consolidated into one package with two subpaths: framework-free chat vocabulary and pure parsers in `/core`, headless hooks + presentational components + slots in `/react`. Import only the layer you need.",
   "license": "Apache-2.0",
   "repository": {
@@ -214,10 +214,10 @@
   },
   "dependencies": {
     "kysely": "^0.29.6",
-    "@jini-ai/core": "^0.6.16",
-    "@jini-ai/diagnostics": "^0.6.16",
-    "@jini-ai/db": "^0.6.16",
-    "@jini-ai/agentic": "^0.6.16"
+    "@jini-ai/core": "^0.6.17",
+    "@jini-ai/agentic": "^0.6.17",
+    "@jini-ai/db": "^0.6.17",
+    "@jini-ai/diagnostics": "^0.6.17"
   },
   "peerDependencies": {
     "react": "^18.3.0 || ^19.0.0",
@@ -261,13 +261,13 @@
     "pg": "8.23.0",
     "@ag-ui/core": "0.0.58",
     "fast-check": "4.3.0",
-    "@jini-ai/agent-runtime": "0.6.16",
-    "@jini-ai/db": "0.6.16",
-    "@jini-ai/agentic": "^0.6.16",
-    "@jini-ai/diagnostics": "^0.6.16",
-    "@jini-ai/core": "^0.6.16",
-    "@jini-ai/protocol": "^0.6.16",
-    "@jini-ai/ui": "^0.6.16"
+    "@jini-ai/agentic": "^0.6.17",
+    "@jini-ai/agent-runtime": "0.6.17",
+    "@jini-ai/db": "0.6.17",
+    "@jini-ai/protocol": "^0.6.17",
+    "@jini-ai/core": "^0.6.17",
+    "@jini-ai/diagnostics": "^0.6.17",
+    "@jini-ai/ui": "^0.6.17"
   },
   "typesVersions": {
     "*": {