@matterfact/embed 0.11.2 → 0.12.0

package/dist/index.d.cts

@@ -370,6 +370,13 @@ type WidgetToHost = {
  | {
     type: 'widget.requestContext';
 }
+/**
+ * Admin max page-context mode from bootstrap — host clamps observation to this.
+ */
+ | {
+    type: 'widget.pageContextMax';
+    mode: 'full' | 'declared' | 'off';
+}
 /** Zoom in: the a11y sub-tree under one ref (a table, a form, a card the agent cares about). */
  | {
     type: 'widget.readRegion';
@@ -523,9 +530,9 @@ type PageContextProvider = () => PageContext | null | undefined | Promise<PageCo
 /**
  * The matterfact embed loader.
  *
- *   <script src="https://cdn.matterfact.com/embed.js"
+ *   <script type="module" src="https://app.matterfact.com/embed/embed.js"
  *           data-key="pk_live_acme_..."
- *           defer></script>
+ *           data-origin="https://app.matterfact.com"></script>
  *
  * This file runs on EVERY page load of a customer's site, so it is deliberately
  * tiny and deliberately dumb:
@@ -590,15 +597,10 @@ interface LoaderConfig {
      */
     container?: HTMLElement | null;
     /**
-     * Turn off ALL host-page observation — no `host.context`, no `host.focus`, no
-     * `host.snapshot`, no `host.activity`, no `host.artifactGrants`. Not a filter on what
-     * gets sent: when this is false the loader never installs the DOM/nav/focus/activity
-     * observers in the first place, and an inbound `widget.requestSnapshot` is ignored
-     * rather than answered. Default `true` — seeing the page is the widget's whole value
-     * proposition; this is the escape hatch for a host that wants agent chat with nothing
-     * about the page ever reaching it.
+     * Page observation mode: `full` (default / `true`), `declared` (getPageContext +
+     * host sitemap only), or `off` (`false`). Auto DOM/focus/activity require `full`.
      */
-    pageContext?: boolean;
+    pageContext?: boolean | 'full' | 'declared' | 'off';
     /**
      * Force dev mode (see `devRequested()` below) without needing `?mfdev=1` on the host
      * URL. This is the programmatic equivalent of that trigger, not a replacement for it —

package/dist/index.d.ts

@@ -370,6 +370,13 @@ type WidgetToHost = {
  | {
     type: 'widget.requestContext';
 }
+/**
+ * Admin max page-context mode from bootstrap — host clamps observation to this.
+ */
+ | {
+    type: 'widget.pageContextMax';
+    mode: 'full' | 'declared' | 'off';
+}
 /** Zoom in: the a11y sub-tree under one ref (a table, a form, a card the agent cares about). */
  | {
     type: 'widget.readRegion';
@@ -523,9 +530,9 @@ type PageContextProvider = () => PageContext | null | undefined | Promise<PageCo
 /**
  * The matterfact embed loader.
  *
- *   <script src="https://cdn.matterfact.com/embed.js"
+ *   <script type="module" src="https://app.matterfact.com/embed/embed.js"
  *           data-key="pk_live_acme_..."
- *           defer></script>
+ *           data-origin="https://app.matterfact.com"></script>
  *
  * This file runs on EVERY page load of a customer's site, so it is deliberately
  * tiny and deliberately dumb:
@@ -590,15 +597,10 @@ interface LoaderConfig {
      */
     container?: HTMLElement | null;
     /**
-     * Turn off ALL host-page observation — no `host.context`, no `host.focus`, no
-     * `host.snapshot`, no `host.activity`, no `host.artifactGrants`. Not a filter on what
-     * gets sent: when this is false the loader never installs the DOM/nav/focus/activity
-     * observers in the first place, and an inbound `widget.requestSnapshot` is ignored
-     * rather than answered. Default `true` — seeing the page is the widget's whole value
-     * proposition; this is the escape hatch for a host that wants agent chat with nothing
-     * about the page ever reaching it.
+     * Page observation mode: `full` (default / `true`), `declared` (getPageContext +
+     * host sitemap only), or `off` (`false`). Auto DOM/focus/activity require `full`.
      */
-    pageContext?: boolean;
+    pageContext?: boolean | 'full' | 'declared' | 'off';
     /**
      * Force dev mode (see `devRequested()` below) without needing `?mfdev=1` on the host
      * URL. This is the programmatic equivalent of that trigger, not a replacement for it —

package/dist/index.js

@@ -224,11 +224,19 @@ function dockBox(g, vw, _vh) {
 var DEFAULT_ORIGIN = "https://app.matterfact.com";
 function devRequested() {
   try {
-    return new URLSearchParams(location.search).get("mfdev") === "1";
+    if (new URLSearchParams(location.search).get("mfdev") === "1") return true;
+    try {
+      return localStorage.getItem("mfdev") === "1";
+    } catch {
+      return false;
+    }
   } catch {
     return false;
   }
 }
+function alog(m, x) {
+  if (devRequested()) console.info("[embed auth] host: " + m, x ?? "");
+}
 function readConfig() {
   const el = document.currentScript ?? document.querySelector('script[data-key][src*="embed"]');
   const publishableKey = el?.dataset.key;
@@ -244,13 +252,21 @@ function readConfig() {
     );
   }
   const pageContextAttr = el?.dataset.pageContext?.toLowerCase();
+  let pageContext = true;
+  if (pageContextAttr === "off" || pageContextAttr === "false" || pageContextAttr === "0") {
+    pageContext = false;
+  } else if (pageContextAttr === "declared") {
+    pageContext = "declared";
+  } else if (pageContextAttr === "full" || pageContextAttr === "on" || pageContextAttr === "true" || pageContextAttr === "1") {
+    pageContext = true;
+  }
   return {
     publishableKey,
     origin: el?.dataset.origin || DEFAULT_ORIGIN,
     theme: el?.dataset.theme || "auto",
     surface: el?.dataset.surface || "",
     container,
-    pageContext: pageContextAttr !== "off" && pageContextAttr !== "false" && pageContextAttr !== "0"
+    pageContext
     // No `data-dev` — see the `dev` field's doc comment: the URL trigger is the
     // point for the script-tag path, so there is deliberately no script-tag knob here.
     // No `data-actions` either: the action policy lives entirely in the lazy chunk,
@@ -520,6 +536,11 @@ var EmbedHost = class {
       case "widget.requestContext":
         void this.loadContext().then((m) => m.provideContext());
         break;
+      case "widget.pageContextMax":
+        void this.loadContext().then((m) => {
+          m.setPageContextMax(msg.mode);
+        });
+        break;
       case "widget.requestSnapshot":
         void this.loadContext().then((m) => m.sendSnapshot(this.send));
         break;
@@ -731,18 +752,26 @@ var EmbedHost = class {
    */
   async provideAuth() {
     const provider = this.config.authTokenProvider ?? globalThis.matterfact?.getEmbedAuthToken;
-    if (!provider) return;
-    if (++this.ac > 5) return;
+    if (!provider) {
+      alog("no provider");
+      return;
+    }
+    if (++this.ac > 5) {
+      alog("storm cap");
+      return;
+    }
     try {
       const token = await provider();
       if (token) this.send({ type: "host.auth", token, expiresAt: 0 });
       this.emit({ type: "auth", phase: token ? "granted" : "failed" });
-    } catch {
+      alog(token ? "token" : "empty");
+    } catch (e) {
       this.emit({ type: "auth", phase: "failed" });
+      alog("threw", e);
     }
   }
   loadContext() {
-    this.context ?? (this.context = import('./context-FR7VFENN.js').then((m) => {
+    this.context ?? (this.context = import('./context-4LP3EDXL.js').then((m) => {
       m.start(
         this.send,
         this.config.origin,