@m6d/cortex-angular 0.13.0 → 0.14.0

package/README.md

@@ -42,7 +42,7 @@ No root-level providers are needed. Each widget is self-contained, so one page c
 | `viewMode`                 | `'helper' \| 'full'`                              | Compact panel or full layout with a sidebar (default: `'helper'`)               |
 | `theme`                    | `'light' \| 'dark' \| 'system'`                   | Color scheme (default: `'light'`)                                               |
 | `agentName`                | `string \| { en, ar }`                            | Header title while no thread is selected (optional)                             |
-| `showDebugButton`          | `boolean`                                         | Show/hide the debug toggle button (default: `false`)                            |
+| `thread`                   | `string`                                          | A thread id to open on mount (optional)                                         |
 | `mediaRenderers`           | `Record<string, MediaRenderer>`                   | Replace or add the media fences the assistant can draw (optional)               |
 | `trustSameOriginEmbeds`    | `boolean`                                         | Allow embedded tool pages served from this page's own origin (default: `false`) |
 | `hooks.onToolCall`         | `(toolCall, context) => unknown`                  | Answers a client tool; return `undefined` for tools you do not own (optional)   |
@@ -51,7 +51,7 @@ No root-level providers are needed. Each widget is self-contained, so one page c
 | `toolComponents`           | `Record<string, Type<CortexToolComponentInputs>>` | Custom Angular components for tool rendering (optional)                         |
 | `injector`                 | `Injector`                                        | Injector for `toolComponents` (optional)                                        |
 
-`transport.getHeaders` returns the headers every call carries, usually a bearer `Authorization`. Called straight from another origin, the engine accepts only `Authorization` and the headers the widget sets itself; route anything else through a same-origin proxy. The WebSocket takes its `token` query param from a bearer `Authorization` header when there is one.
+`transport.getHeaders` returns the headers every call carries, usually a bearer `Authorization`. Called straight from another origin, the engine accepts only `Authorization` and the headers the widget sets itself; route anything else through a same-origin proxy. The WebSocket takes its `token` query param from a bearer `Authorization` header when there is one. The debug toggle shows only when Cortex offers this caller the debug view: always to a console operator, and to everyone only where the engine runs with `ENGINE_DEBUG=true`. Anyone else gets only what the widget's normal view draws, and so does a `toolComponents` entry for one of the agent's server tools: the model's line for the user as the call's input, and only whether it failed (or a dataset read's row count) as its output.
 
 ## Custom parts
 
@@ -119,19 +119,19 @@ for typing your own rows and chips.
 
 One header serves both screens; `screen` says which is showing.
 
-| Field          | Type                  | Description                                                        |
-| -------------- | --------------------- | ------------------------------------------------------------------ |
-| `screen`       | `'chat' \| 'threads'` | Which screen the header is on                                      |
-| `viewMode`     | `'helper' \| 'full'`  | The configured view mode                                           |
-| `title`        | `string \| null`      | The open thread's title; `null` on a new chat                      |
-| `agentName`    | `string \| undefined` | `agentName` in the widget's locale                                 |
-| `threadCount`  | `number \| undefined` | How many conversations the history lists; undefined while it loads |
-| `isWorking`    | `boolean`             | The agent is answering                                             |
-| `debug`        | `{ shown, on }`       | Whether `showDebugButton` is set, and whether debug mode is on     |
-| `newChat`      | `() => void`          | Starts a new chat                                                  |
-| `openHistory`  | `() => void`          | Shows the history: its screen, or the sidebar in full mode         |
-| `closeHistory` | `() => void`          | Returns to the open chat                                           |
-| `toggleDebug`  | `() => void`          | Switches debug mode                                                |
+| Field          | Type                  | Description                                                          |
+| -------------- | --------------------- | -------------------------------------------------------------------- |
+| `screen`       | `'chat' \| 'threads'` | Which screen the header is on                                        |
+| `viewMode`     | `'helper' \| 'full'`  | The configured view mode                                             |
+| `title`        | `string \| null`      | The open thread's title; `null` on a new chat                        |
+| `agentName`    | `string \| undefined` | `agentName` in the widget's locale                                   |
+| `threadCount`  | `number \| undefined` | How many conversations the history lists; undefined while it loads   |
+| `isWorking`    | `boolean`             | The agent is answering                                               |
+| `debug`        | `{ shown, on }`       | Whether Cortex offers the debug view, and whether it is on           |
+| `newChat`      | `() => void`          | Starts a new chat; absent until Cortex confirms the caller may write |
+| `openHistory`  | `() => void`          | Shows the history: its screen, or the sidebar in full mode           |
+| `closeHistory` | `() => void`          | Returns to the open chat                                             |
+| `toggleDebug`  | `() => void`          | Switches debug mode                                                  |
 
 ### `landing`
 
@@ -152,13 +152,13 @@ landing for it.
 
 The history's list. Its header is the `header` slot.
 
-| Field              | Type                              | Description                                           |
-| ------------------ | --------------------------------- | ----------------------------------------------------- |
-| `threads`          | `ThreadSummary[] \| undefined`    | Newest first; `undefined` while the first load is out |
-| `selectedThreadId` | `string \| undefined`             | The open thread's id; `undefined` on a new chat       |
-| `openThread`       | `(thread: ThreadSummary) => void` | Opens a thread                                        |
-| `deleteThread`     | `(threadId: string) => void`      | Deletes a thread                                      |
-| `newChat`          | `() => void`                      | Starts a new chat                                     |
+| Field              | Type                              | Description                                                          |
+| ------------------ | --------------------------------- | -------------------------------------------------------------------- |
+| `threads`          | `ThreadSummary[] \| undefined`    | Newest first; `undefined` while the first load is out                |
+| `selectedThreadId` | `string \| undefined`             | The open thread's id; `undefined` on a new chat                      |
+| `openThread`       | `(thread: ThreadSummary) => void` | Opens a thread                                                       |
+| `deleteThread`     | `(threadId: string) => void`      | Deletes a thread; absent until Cortex confirms the caller may write  |
+| `newChat`          | `() => void`                      | Starts a new chat; absent until Cortex confirms the caller may write |
 
 ## Theming
 

package/fesm2022/m6d-cortex-angular.mjs

@@ -49,6 +49,12 @@ function checkAttachmentPolicy(file) {
 }
 var STATEMENT_TOOLS = ["executeCode", "queryDataset", "describeDataset"];
 var APPROVAL_TITLE_FIELD = "approvalTitle";
+function approvalTitleOf(input) {
+  if (!input || typeof input !== "object" || !(APPROVAL_TITLE_FIELD in input))
+    return;
+  const title = input[APPROVAL_TITLE_FIELD];
+  return typeof title === "string" && title.trim() ? title.trim() : undefined;
+}
 function toolCallMetadataOf(part) {
   const metadata = part.metadata;
   return metadata?.cortex ?? undefined;
@@ -61,6 +67,8 @@ function approvalIdOf(part) {
   return part.approval?.id ?? `approval_${part.id}`;
 }
 var TIMEZONE_HEADER = "X-Cortex-Timezone";
+var OPERATOR_HEADER = "X-Cortex-Operator";
+var INSPECT_HEADER = "X-Cortex-Inspect";
 
 // src/internal/client/src/chat/api-client.ts
 function resolveTransportHeaders(transport) {
@@ -323,6 +331,7 @@ var ar_default = {
   translate_trigger_fired: "تم التشغيل بواسطة",
   translate_trigger_payload: "الحمولة",
   translate_messages_disabled: "يعمل هذا الوكيل من مشغّلاته فقط.",
+  translate_read_only: "أنت تطّلع على هذه المحادثة. لا يمكن إرسال شيء من هنا.",
   translate_access_refused: "لم يقبل هذا الوكيل تسجيل دخولك.",
   translate_agent_unreachable: "تعذّر الوصول إلى هذا الوكيل الآن. نعيد المحاولة...",
   translate_agent_missing: "هذا الوكيل غير متاح.",
@@ -477,6 +486,7 @@ var en_default = {
   translate_trigger_fired: "Triggered by",
   translate_trigger_payload: "Payload",
   translate_messages_disabled: "This agent only runs from its triggers.",
+  translate_read_only: "You're viewing this conversation. Nothing can be sent from here.",
   translate_access_refused: "This agent did not accept your sign-in.",
   translate_agent_unreachable: "This agent cannot be reached right now. Trying again...",
   translate_agent_missing: "This agent is not available.",
@@ -725,19 +735,12 @@ function toolCallAnimation(part) {
     rows: state === "complete" ? toolCallRows(part) : undefined
   };
 }
-function approvalTitle(part) {
-  const input = part.input;
-  if (!input || typeof input !== "object" || !(APPROVAL_TITLE_FIELD in input))
-    return;
-  const title = input[APPROVAL_TITLE_FIELD];
-  return typeof title === "string" && title.trim() ? title.trim() : undefined;
-}
 function approvalCard(part, locale) {
   const approved = part.approval?.approved;
   const { state } = toolCallAnimation(part);
   const decision = approved === undefined ? part.state === "approval-requested" ? "pending" : "cancelled" : !approved ? "declined" : state === "error" ? "failed" : "approved";
   return {
-    sentence: approvalTitle(part) ?? translate(locale, "translate_approval_action", { tool: wordsOf(part.name) }),
+    sentence: approvalTitleOf(part.input) ?? translate(locale, "translate_approval_action", { tool: wordsOf(part.name) }),
     decision,
     decisionKey: DECISION_KEYS[decision]
   };
@@ -1529,7 +1532,7 @@ function createCortexSocket(options) {
     resolveTransportHeaders(transport).then((headers) => {
       if (closed)
         return;
-      ws = new WebSocket(appendTokenToUrl(wsUrl, headers));
+      ws = new WebSocket(appendAuthToUrl(wsUrl, headers));
       ws.addEventListener("open", () => {
         open = true;
         const opened = ws;
@@ -1588,14 +1591,21 @@ function resolveWsUrl(wsUrl, baseUrl) {
   parsed.pathname = parsed.pathname.replace(/\/$/, "") + "/ws";
   return parsed.toString();
 }
-function appendTokenToUrl(wsUrl, headers) {
-  const authHeader = headers["Authorization"] ?? headers["authorization"];
-  if (!authHeader?.startsWith("Bearer "))
+function appendAuthToUrl(wsUrl, headers) {
+  const header = (name) => Object.entries(headers).find(([key]) => key.toLowerCase() === name.toLowerCase())?.[1];
+  const bearer = header("Authorization");
+  const params = Object.entries({
+    token: bearer?.startsWith("Bearer ") ? bearer.slice(7) : undefined,
+    operator: header(OPERATOR_HEADER),
+    inspect: header(INSPECT_HEADER)
+  }).filter((entry) => Boolean(entry[1]));
+  if (params.length === 0)
     return wsUrl;
   const parsed = new URL(wsUrl, window.location.origin);
-  if (parsed.searchParams.has("token"))
-    return parsed.toString();
-  parsed.searchParams.set("token", authHeader.slice(7));
+  for (const [param, value] of params) {
+    if (!parsed.searchParams.has(param))
+      parsed.searchParams.set(param, value);
+  }
   return parsed.toString();
 }
 // src/internal/client/src/chat/ask-until-answered.ts
@@ -1816,7 +1826,7 @@ function splitTail(text, consumed, runs) {
     if (end <= 0)
       break;
     let take = Math.min(end, run.length - consumed);
-    if (take < end && /[\uDC00-\uDFFF]/.test(text[end - take]))
+    if (take < end && /[\uDC00-\uDFFF]/.test(text.charAt(end - take)))
       take += 1;
     const span = document.createElement("span");
     span.className = "cortex-stream-fade";
@@ -4562,17 +4572,19 @@ var ChatHeaderComponent = class ChatHeaderComponent2 {
     template: `@let header = context();
 
 <ng-template #newChatButton>
-  <button
-    type="button"
-    (click)="header.newChat()"
-    [attr.aria-label]="'translate_new_chat' | translate"
-    [title]="'translate_new_chat' | translate"
-    class="cortex-widget__header-btn cortex-widget__new-btn"
-  >
-    <svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true">
-      <path d="M8 3v10M3 8h10" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" />
-    </svg>
-  </button>
+  @if (header.newChat; as newChat) {
+    <button
+      type="button"
+      (click)="newChat()"
+      [attr.aria-label]="'translate_new_chat' | translate"
+      [title]="'translate_new_chat' | translate"
+      class="cortex-widget__header-btn cortex-widget__new-btn"
+    >
+      <svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true">
+        <path d="M8 3v10M3 8h10" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" />
+      </svg>
+    </button>
+  }
 </ng-template>
 
 @if (header.screen === 'threads') {
@@ -4701,17 +4713,19 @@ i0.ɵɵngDeclareClassMetadata({
       template: `@let header = context();
 
 <ng-template #newChatButton>
-  <button
-    type="button"
-    (click)="header.newChat()"
-    [attr.aria-label]="'translate_new_chat' | translate"
-    [title]="'translate_new_chat' | translate"
-    class="cortex-widget__header-btn cortex-widget__new-btn"
-  >
-    <svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true">
-      <path d="M8 3v10M3 8h10" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" />
-    </svg>
-  </button>
+  @if (header.newChat; as newChat) {
+    <button
+      type="button"
+      (click)="newChat()"
+      [attr.aria-label]="'translate_new_chat' | translate"
+      [title]="'translate_new_chat' | translate"
+      class="cortex-widget__header-btn cortex-widget__new-btn"
+    >
+      <svg width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true">
+        <path d="M8 3v10M3 8h10" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" />
+      </svg>
+    </button>
+  }
 </ng-template>
 
 @if (header.screen === 'threads') {
@@ -9694,9 +9708,10 @@ var MessageToolCallAnimatedComponent = class MessageToolCallAnimatedComponent2 {
     } : null;
   }, ...ngDevMode ? [{ debugName: "mountedComponent" }] : []);
   clientToolFallback = signal(false, ...ngDevMode ? [{ debugName: "clientToolFallback" }] : []);
-  owed = computed(() => this.toolCallPart().state === "input-complete" && !this.chatService.isAgentWorking(), ...ngDevMode ? [{ debugName: "owed" }] : []);
+  answers = computed(() => this.chatService.capabilities()?.messages === true, ...ngDevMode ? [{ debugName: "answers" }] : []);
+  owed = computed(() => this.answers() && this.toolCallPart().state === "input-complete" && !this.chatService.isAgentWorking(), ...ngDevMode ? [{ debugName: "owed" }] : []);
   showClientTool = computed(() => !this.clientToolFallback() && this.owed() && toolCallMetadataOf(this.toolCallPart())?.embed !== undefined, ...ngDevMode ? [{ debugName: "showClientTool" }] : []);
-  approvalRequested = computed(() => this.toolCallPart().state === "approval-requested" && !this.chatService.isAgentWorking(), ...ngDevMode ? [{ debugName: "approvalRequested" }] : []);
+  approvalRequested = computed(() => this.answers() && this.toolCallPart().state === "approval-requested" && !this.chatService.isAgentWorking(), ...ngDevMode ? [{ debugName: "approvalRequested" }] : []);
   animation = computed(() => toolCallAnimation(this.toolCallPart()), ...ngDevMode ? [{ debugName: "animation" }] : []);
   animState = computed(() => this.animation().state, ...ngDevMode ? [{ debugName: "animState" }] : []);
   gated = computed(() => this.animation().gated, ...ngDevMode ? [{ debugName: "gated" }] : []);
@@ -11626,7 +11641,7 @@ var MessageListComponent = class MessageListComponent2 {
       <cortex-message-aborted-flag [label]="failureLabel(failure)" />
       <!-- The reason may name the model provider's answer: shown only where
            the debug view is offered. -->
-      @if (config().showDebugButton && failure.reason) {
+      @if (chatService.capabilities()?.debug && failure.reason) {
         <p class="cortex-aborted-flag__reason">{{ failure.reason }}</p>
       }
     }
@@ -11722,7 +11737,7 @@ i0.ɵɵngDeclareClassMetadata({
       <cortex-message-aborted-flag [label]="failureLabel(failure)" />
       <!-- The reason may name the model provider's answer: shown only where
            the debug view is offered. -->
-      @if (config().showDebugButton && failure.reason) {
+      @if (chatService.capabilities()?.debug && failure.reason) {
         <p class="cortex-aborted-flag__reason">{{ failure.reason }}</p>
       }
     }
@@ -11949,22 +11964,24 @@ var ThreadListComponent = class ThreadListComponent2 {
       }
     </button>
 
-    <button
-      type="button"
-      [attr.aria-label]="'translate_delete_conversation' | translate"
-      (click)="list.deleteThread(thread.id)"
-      class="cortex-widget__thread-delete"
-      [class.cortex-widget__thread-delete--active]="isActive"
-    >
-      <svg width="12" height="12" viewBox="0 0 16 16" fill="none">
-        <path
-          d="M4 4l8 8M12 4l-8 8"
-          stroke="currentColor"
-          stroke-width="1.3"
-          stroke-linecap="round"
-        />
-      </svg>
-    </button>
+    @if (list.deleteThread; as deleteThread) {
+      <button
+        type="button"
+        [attr.aria-label]="'translate_delete_conversation' | translate"
+        (click)="deleteThread(thread.id)"
+        class="cortex-widget__thread-delete"
+        [class.cortex-widget__thread-delete--active]="isActive"
+      >
+        <svg width="12" height="12" viewBox="0 0 16 16" fill="none">
+          <path
+            d="M4 4l8 8M12 4l-8 8"
+            stroke="currentColor"
+            stroke-width="1.3"
+            stroke-linecap="round"
+          />
+        </svg>
+      </button>
+    }
 
     <svg
       class="cortex-widget__thread-arrow"
@@ -12010,12 +12027,14 @@ var ThreadListComponent = class ThreadListComponent2 {
     <p class="cortex-widget__threads-empty-subtitle">
       {{ 'translate_start_a_new_conversation' | translate }}
     </p>
-    <button
-      (click)="list.newChat()"
-      class="cortex-widget__new-chat-btn cortex-widget__new-chat-btn--empty-state"
-    >
-      {{ 'translate_new_chat' | translate }}
-    </button>
+    @if (list.newChat; as newChat) {
+      <button
+        (click)="newChat()"
+        class="cortex-widget__new-chat-btn cortex-widget__new-chat-btn--empty-state"
+      >
+        {{ 'translate_new_chat' | translate }}
+      </button>
+    }
   </div>
 }
 `,
@@ -12105,22 +12124,24 @@ i0.ɵɵngDeclareClassMetadata({
       }
     </button>
 
-    <button
-      type="button"
-      [attr.aria-label]="'translate_delete_conversation' | translate"
-      (click)="list.deleteThread(thread.id)"
-      class="cortex-widget__thread-delete"
-      [class.cortex-widget__thread-delete--active]="isActive"
-    >
-      <svg width="12" height="12" viewBox="0 0 16 16" fill="none">
-        <path
-          d="M4 4l8 8M12 4l-8 8"
-          stroke="currentColor"
-          stroke-width="1.3"
-          stroke-linecap="round"
-        />
-      </svg>
-    </button>
+    @if (list.deleteThread; as deleteThread) {
+      <button
+        type="button"
+        [attr.aria-label]="'translate_delete_conversation' | translate"
+        (click)="deleteThread(thread.id)"
+        class="cortex-widget__thread-delete"
+        [class.cortex-widget__thread-delete--active]="isActive"
+      >
+        <svg width="12" height="12" viewBox="0 0 16 16" fill="none">
+          <path
+            d="M4 4l8 8M12 4l-8 8"
+            stroke="currentColor"
+            stroke-width="1.3"
+            stroke-linecap="round"
+          />
+        </svg>
+      </button>
+    }
 
     <svg
       class="cortex-widget__thread-arrow"
@@ -12166,12 +12187,14 @@ i0.ɵɵngDeclareClassMetadata({
     <p class="cortex-widget__threads-empty-subtitle">
       {{ 'translate_start_a_new_conversation' | translate }}
     </p>
-    <button
-      (click)="list.newChat()"
-      class="cortex-widget__new-chat-btn cortex-widget__new-chat-btn--empty-state"
-    >
-      {{ 'translate_new_chat' | translate }}
-    </button>
+    @if (list.newChat; as newChat) {
+      <button
+        (click)="newChat()"
+        class="cortex-widget__new-chat-btn cortex-widget__new-chat-btn--empty-state"
+      >
+        {{ 'translate_new_chat' | translate }}
+      </button>
+    }
   </div>
 }
 `
@@ -12243,6 +12266,7 @@ i0.ɵɵngDeclareClassMetadata({
 var CortexChatWidgetComponent = class CortexChatWidgetComponent2 {
   config = input.required(...ngDevMode ? [{ debugName: "config" }] : []);
   debugMode = signal(false, ...ngDevMode ? [{ debugName: "debugMode" }] : []);
+  writes = computed(() => this.chatService.capabilities()?.readOnly === false, ...ngDevMode ? [{ debugName: "writes" }] : []);
   screen = signal("chat", ...ngDevMode ? [{ debugName: "screen" }] : []);
   sidebarOpen = signal(false, ...ngDevMode ? [{ debugName: "sidebarOpen" }] : []);
   viewMode = computed(() => this.config().viewMode ?? "helper", ...ngDevMode ? [{ debugName: "viewMode" }] : []);
@@ -12270,8 +12294,10 @@ var CortexChatWidgetComponent = class CortexChatWidgetComponent2 {
     threads: this.threadService.threads(),
     selectedThreadId: this.chatService.selectedThread()?.id,
     openThread: (thread) => this.selectThread(thread),
-    deleteThread: (threadId) => this.chatService.deleteThread(threadId).subscribe(),
-    newChat: () => this.newChat()
+    ...this.writes() && {
+      deleteThread: (threadId) => this.chatService.deleteThread(threadId).subscribe(),
+      newChat: () => this.newChat()
+    }
   }), ...ngDevMode ? [{ debugName: "threadList" }] : []);
   chatService;
   queue;
@@ -12291,6 +12317,15 @@ var CortexChatWidgetComponent = class CortexChatWidgetComponent2 {
       this.queue.store.clear(selectedThreadId);
       selectedThreadId = nextThreadId;
     }, { injector: this.injector });
+    let openedConfigThread = false;
+    effect(() => {
+      const id = this.config().thread;
+      const named = id && this.threadService.threads()?.find((thread) => thread.id === id);
+      if (openedConfigThread || !named)
+        return;
+      openedConfigThread = true;
+      untracked(() => this.selectThread(named));
+    }, { injector: this.injector });
     this.chatService.events$.pipe(takeUntilDestroyed(this.destroyRef)).subscribe((event) => {
       if (event === "onError") {
         this.queue.store.restoreConsumed(this.chatService.selectedThread()?.id);
@@ -12313,10 +12348,10 @@ var CortexChatWidgetComponent = class CortexChatWidgetComponent2 {
       threadCount: this.threadService.threads()?.length,
       isWorking: this.chatService.isAgentWorking(),
       debug: {
-        shown: Boolean(this.config().showDebugButton),
+        shown: Boolean(this.chatService.capabilities()?.debug),
         on: this.debugMode()
       },
-      newChat: () => this.newChat(),
+      ...this.writes() && { newChat: () => this.newChat() },
       openHistory: () => this.openHistory(),
       closeHistory: () => this.closeHistory(),
       toggleDebug: () => this.toggleDebugMode()
@@ -12507,7 +12542,12 @@ var CortexChatWidgetComponent = class CortexChatWidgetComponent2 {
     </p>
   } @else if (chatService.capabilities()?.messages === false) {
     <p class="cortex-widget__messages-disabled">
-      {{ 'translate_messages_disabled' | translate }}
+      {{
+        (chatService.capabilities()?.readOnly
+          ? 'translate_read_only'
+          : 'translate_messages_disabled'
+        ) | translate
+      }}
     </p>
   } @else if (chatService.capabilities() !== undefined) {
     <cortex-chat-composer />
@@ -12708,7 +12748,12 @@ i0.ɵɵngDeclareClassMetadata({
     </p>
   } @else if (chatService.capabilities()?.messages === false) {
     <p class="cortex-widget__messages-disabled">
-      {{ 'translate_messages_disabled' | translate }}
+      {{
+        (chatService.capabilities()?.readOnly
+          ? 'translate_read_only'
+          : 'translate_messages_disabled'
+        ) | translate
+      }}
     </p>
   } @else if (chatService.capabilities() !== undefined) {
     <cortex-chat-composer />

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m6d/cortex-angular",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "Angular chat widget for Cortex agents",
   "license": "MIT",
   "sideEffects": false,

package/types/m6d-cortex-angular.d.ts

@@ -61,12 +61,23 @@ export type CreateThreadRequest = {
  */
 export type AgentCapabilities = {
 	attachments: boolean;
-	/** False when the agent's `message` trigger is off: the widget hides its composer. */
+	/**
+	 * False when this caller may not send to the chat: the agent's `message`
+	 * trigger is off, or the caller only reads (`readOnly`). The widget hides
+	 * its composer and answers no tool call.
+	 */
 	messages: boolean;
+	/** True when the caller only reads, as an operator inspecting a user's thread does. */
+	readOnly: boolean;
 	/** Prompt chips on the blank-chat landing per locale; clicking one sends its `prompt` as the first message. */
 	suggestions: Suggestions;
 	/** Headline of the blank-chat landing per locale; "" falls back to the widget's built-in copy. */
 	greeting: Greeting;
+	/**
+	 * Whether this caller gets the debug view: tool inputs and outputs, reasoning,
+	 * model calls. Cortex sends anyone else only what the widget's normal UI draws.
+	 */
+	debug: boolean;
 };
 /**
  * One landing-page chip: the widget shows `title` and sends `prompt` as the
@@ -165,7 +176,11 @@ export type CortexConfig = {
 	 * or a map keyed by locale (`{ en: 'Support', ar: 'الدعم' }`).
 	 */
 	agentName?: Localized<string>;
-	showDebugButton?: boolean;
+	/**
+	 * A thread to open when the widget mounts, by id, once the thread list holds
+	 * it: a deep link into one conversation, such as the console's inspector.
+	 */
+	thread?: string;
 	/**
 	 * Render embedded tool pages served from this page's own origin with their
 	 * full identity — which, same-origin, means no effective sandbox at all: such
@@ -193,12 +208,13 @@ export type CortexHeaderContext = {
 	/** How many conversations the history lists; undefined while the first load is out. */
 	threadCount: number | undefined;
 	isWorking: boolean;
-	/** Whether the consumer enabled the debug switch, and whether it is on. */
+	/** Whether Cortex offers this caller the debug view, and whether it is on. */
 	debug: {
 		shown: boolean;
 		on: boolean;
 	};
-	newChat: () => void;
+	/** Absent until the handshake says the caller may write; an operator inspecting a thread only reads. */
+	newChat?: () => void;
 	/** Shows the history: the history screen, or in full mode the sidebar where it is hidden. */
 	openHistory: () => void;
 	/** Returns to the open chat from wherever `openHistory` went. */
@@ -236,8 +252,9 @@ export type CortexThreadListContext = {
 	/** The open thread's id; undefined on a new chat. */
 	selectedThreadId: string | undefined;
 	openThread: (thread: ThreadSummary) => void;
-	deleteThread: (threadId: string) => void;
-	newChat: () => void;
+	/** Both absent until the handshake says the caller may write; an operator inspecting a thread only reads. */
+	deleteThread?: (threadId: string) => void;
+	newChat?: () => void;
 };
 /** Each part of the widget a consumer can draw itself, with the context it receives. */
 export type CortexSlotContexts<View> = {
@@ -442,6 +459,12 @@ declare class CortexChatService {
 export declare class CortexChatWidgetComponent implements OnInit {
 	readonly config: import("@angular/core").InputSignal<CortexAngularConfig>;
 	protected readonly debugMode: import("@angular/core").WritableSignal<boolean>;
+	/**
+	 * Whether this caller may start and delete conversations: only once the
+	 * handshake says so, like every capability-gated control, and never for a
+	 * caller that only reads, as an operator inspecting a thread does.
+	 */
+	private readonly writes;
 	protected readonly screen: import("@angular/core").WritableSignal<"chat" | "threads">;
 	protected readonly sidebarOpen: import("@angular/core").WritableSignal<boolean>;
 	protected readonly viewMode: import("@angular/core").Signal<CortexViewMode>;
@@ -455,6 +478,10 @@ export declare class CortexChatWidgetComponent implements OnInit {
 	/** Why the handshake has not answered, worded for the composer's place. */
 	protected readonly unansweredNotice: import("@angular/core").Signal<"translate_access_refused" | "translate_agent_unreachable" | "translate_agent_missing" | undefined>;
 	protected readonly chatHeader: import("@angular/core").Signal<{
+		openHistory: () => void;
+		closeHistory: () => void;
+		toggleDebug: () => void;
+		newChat?: (() => void) | undefined;
 		screen: "chat" | "threads";
 		viewMode: CortexViewMode;
 		title: string | null;
@@ -465,12 +492,12 @@ export declare class CortexChatWidgetComponent implements OnInit {
 			shown: boolean;
 			on: boolean;
 		};
-		newChat: () => void;
+	}>;
+	protected readonly threadsHeader: import("@angular/core").Signal<{
 		openHistory: () => void;
 		closeHistory: () => void;
 		toggleDebug: () => void;
-	}>;
-	protected readonly threadsHeader: import("@angular/core").Signal<{
+		newChat?: (() => void) | undefined;
 		screen: "chat" | "threads";
 		viewMode: CortexViewMode;
 		title: string | null;
@@ -481,10 +508,6 @@ export declare class CortexChatWidgetComponent implements OnInit {
 			shown: boolean;
 			on: boolean;
 		};
-		newChat: () => void;
-		openHistory: () => void;
-		closeHistory: () => void;
-		toggleDebug: () => void;
 	}>;
 	protected readonly landing: import("@angular/core").Signal<{
 		threads: ThreadSummary[] | undefined;
@@ -496,11 +519,11 @@ export declare class CortexChatWidgetComponent implements OnInit {
 		send: (prompt: string) => void;
 	}>;
 	protected readonly threadList: import("@angular/core").Signal<{
+		deleteThread?: ((threadId: string) => import("rxjs").Subscription) | undefined;
+		newChat?: (() => void) | undefined;
 		threads: ThreadSummary[] | undefined;
 		selectedThreadId: string | undefined;
 		openThread: (thread: ThreadSummary) => void;
-		deleteThread: (threadId: string) => import("rxjs").Subscription;
-		newChat: () => void;
 	}>;
 	protected chatService: CortexChatService;
 	protected queue: AttachmentQueueService;