@mihe-dev/js 0.0.0-stage → 0.1.0

package/dist/voice.js

@@ -0,0 +1,443 @@
+/**
+ * The voice session (doc 03, phase 5a).
+ *
+ * A second, short-lived WebSocket carrying audio only. Commands and
+ * confirmation cards keep arriving on the chat socket, which is the whole
+ * design: voice is an input modality, not a second command channel, so a
+ * confirmation card is the same card whether the user typed or spoke and there
+ * is exactly one place that draws it.
+ *
+ * Push-to-talk, deliberately, before hands-free. It has no VAD edge cases, it
+ * works on a phone the day it ships, and the button press doubles as the user
+ * gesture iOS Safari requires before any audio can start. Hands-free is 5b.
+ */
+import { VOICE_SAMPLE_RATE, } from "@mihe-dev/protocol";
+import { MicrophoneCapture, SpeakerQueue, pcmLevel } from "./audio.js";
+export class VoiceSession {
+    options;
+    socket = null;
+    state = "idle";
+    mic;
+    speaker;
+    /**
+     * Audio captured since a held press began, not yet sent.
+     *
+     * A press on a draggable orb is ambiguous for its first moment: it may be
+     * the start of speech or the start of a drag. Holding the frames here means
+     * neither answer costs anything. Confirmed, they go up in order and the first
+     * word survives. Discarded, they never leave the browser, because the voice
+     * socket has no way to take back audio it has been sent.
+     */
+    held = null;
+    stopped = false;
+    /**
+     * Milliseconds of audio captured since the last commit.
+     *
+     * Counted rather than timed from the button press, because those differ:
+     * the microphone graph delivers in render quanta, so a press held for
+     * exactly the floor produces slightly less audio than the clock suggests.
+     * The provider measures the buffer, so we measure the buffer too.
+     */
+    utteranceMs = 0;
+    /** The assistant's line so far, joined from streamed transcript deltas. */
+    assistantLine = "";
+    /** Reports playback position while speaking, for barge-in truncation. */
+    playbackTimer = null;
+    /**
+     * The provider's shortest acceptable utterance, learned at `ready`.
+     *
+     * Defaults high enough to be safe before the runtime has told us, since
+     * guessing low means the first press of a session is the one that fails.
+     */
+    minUtteranceMs = 150;
+    constructor(options) {
+        this.options = options;
+        this.speaker = new SpeakerQueue((level) => options.onLevel?.("assistant", level));
+        this.mic = new MicrophoneCapture((pcm) => this.sendAudio(pcm));
+    }
+    get currentState() {
+        return this.state;
+    }
+    /**
+     * Open the socket and the audio devices.
+     *
+     * Must be called from a user gesture. Both the microphone permission prompt
+     * and iOS Safari's audio unlock require one, and a session started from an
+     * effect will connect happily and then be silent in both directions with no
+     * error anywhere.
+     */
+    async start() {
+        if (this.socket)
+            return;
+        this.stopped = false;
+        this.setState("connecting");
+        try {
+            // Devices before the socket: a user who declines the microphone prompt
+            // should not have consumed their single-use voice token, because the
+            // next attempt would then fail for a second, unrelated reason.
+            await this.mic.start();
+            await this.speaker.start();
+        }
+        catch (cause) {
+            this.emit({
+                type: "error",
+                code: "microphone_unavailable",
+                message: cause instanceof Error && cause.name === "NotAllowedError"
+                    ? "Microphone access was declined, so voice cannot start."
+                    : "No microphone is available.",
+                // No microphone means no voice at all, so this one really is the end.
+                recoverable: false,
+                fallbackToChat: true,
+            });
+            this.setState("error");
+            return;
+        }
+        const factory = this.options.socketFactory ??
+            ((url) => new WebSocket(url));
+        const socket = factory(this.options.url);
+        socket.binaryType = "arraybuffer";
+        this.socket = socket;
+        socket.onmessage = (event) => {
+            if (typeof event.data === "string") {
+                this.handleControl(event.data);
+            }
+            else if (event.data instanceof ArrayBuffer) {
+                this.speaker.enqueue(event.data);
+                // The runtime never says `speaking`; the first audio of a reply is how
+                // the client knows. Without this a push-to-talk session sat in
+                // `thinking` after its first answer, `speech_done` only moves
+                // `speaking` on, and every later press was refused.
+                if (this.state === "thinking")
+                    this.setState("speaking");
+            }
+        };
+        socket.onclose = () => {
+            // No reconnect, unlike the chat socket. A voice token is single use and
+            // a provider session is not resumable, so reconnecting would mean a new
+            // session with none of this one's context — better to end cleanly and
+            // let the user press the button again.
+            void this.stop();
+        };
+        socket.onerror = () => {
+            // `onclose` always follows.
+        };
+    }
+    /**
+     * The user pressed the button. Push-to-talk only.
+     *
+     * With `hold`, capture starts but nothing is sent, and the assistant is not
+     * interrupted, until `confirmUtterance`. `discardUtterance` drops it
+     * instead. For a control where a press might turn out to be a drag.
+     */
+    beginUtterance(options) {
+        if (this.options.handsFree)
+            return;
+        if (this.state !== "listening" && this.state !== "speaking")
+            return;
+        this.utteranceMs = 0;
+        if (options?.hold) {
+            this.held = [];
+            this.mic.unmute();
+            this.setState("recording");
+            return;
+        }
+        this.interruptPlayback();
+        this.mic.unmute();
+        this.setState("recording");
+    }
+    /** A held press was speech after all: send what was captured, and carry on. */
+    confirmUtterance() {
+        const held = this.held;
+        if (!held)
+            return;
+        this.held = null;
+        this.interruptPlayback();
+        for (const pcm of held)
+            this.sendAudio(pcm);
+    }
+    /** A held press was a drag: drop what was captured, and send nothing. */
+    discardUtterance() {
+        if (!this.held)
+            return;
+        this.held = null;
+        this.mic.mute();
+        this.utteranceMs = 0;
+        this.options.onLevel?.("user", 0);
+        this.setState(this.speaker.speaking ? "speaking" : "listening");
+    }
+    /**
+     * Pressing while the assistant is talking is an interruption. Split out so a
+     * held press does not cut the assistant off before it is known to be speech.
+     */
+    interruptPlayback() {
+        // Stop the playback the user has clearly stopped listening to, and tell
+        // the runtime how much of it they actually heard so the model's history
+        // matches their memory of the conversation.
+        if (this.speaker.speaking) {
+            this.sendControl({
+                type: "playback",
+                data: { ms: this.speaker.heardMs() },
+            });
+            this.speaker.flush();
+        }
+    }
+    /** The user released the button. Push-to-talk only. */
+    endUtterance() {
+        if (this.options.handsFree)
+            return;
+        if (this.state !== "recording")
+            return;
+        // Released before anyone decided: a press that never moved is speech.
+        this.confirmUtterance();
+        this.mic.mute();
+        this.options.onLevel?.("user", 0);
+        // A tap, not speech. Committing this comes back from the provider as
+        // "buffer too small", which is a true statement about something the user
+        // should never have been able to send — so it is caught here instead, and
+        // again in the runtime, which is the authority for clients that are not
+        // this one.
+        if (this.utteranceMs < this.minUtteranceMs) {
+            this.emit({
+                type: "error",
+                code: "utterance_too_short",
+                message: "Hold the button while you speak.",
+                recoverable: true,
+                fallbackToChat: false,
+            });
+            this.setState("listening");
+            return;
+        }
+        this.sendControl({ type: "commit" });
+        this.setState("thinking");
+    }
+    async stop() {
+        if (this.stopped)
+            return;
+        this.stopped = true;
+        if (this.playbackTimer !== null) {
+            clearInterval(this.playbackTimer);
+            this.playbackTimer = null;
+        }
+        this.sendControl({ type: "end" });
+        this.socket?.close();
+        this.socket = null;
+        await Promise.all([this.mic.stop(), this.speaker.stop()]);
+        this.setState("idle");
+    }
+    // ------------------------------------------------------------- internals
+    handleControl(raw) {
+        let message;
+        try {
+            message = JSON.parse(raw);
+        }
+        catch {
+            return;
+        }
+        switch (message.type) {
+            case "ready":
+                // Tolerating an absent value keeps a newer SDK working against an older
+                // runtime, where guessing low would fail the first press of a session.
+                this.minUtteranceMs = message.data.minUtteranceMs ?? this.minUtteranceMs;
+                // Hands-free opens the microphone here and not in `start`, and the
+                // difference is a whole class of bug. Unmuting early meant capturing
+                // from before the socket existed until the provider accepted its
+                // configuration — a second or two of the room — and every frame after
+                // the socket opened was sent, queued behind a relay still sitting in
+                // `wait_for_ready`. It arrived in one burst the moment the loop began
+                // reading, the provider's VAD read the burst as an utterance, and the
+                // session answered something nobody said. Reliably at the start of a
+                // session and never afterwards, because it can only happen once.
+                //
+                // The runtime already holds this rule for its own upstream: nothing is
+                // sent until the provider has accepted the configuration. This is the
+                // client keeping the same rule.
+                //
+                // Still open for the whole session once it opens — there is no press
+                // to open it on, and opening per detected utterance would clip the
+                // first word, which is usually the one carrying the intent.
+                if (this.options.handsFree)
+                    this.mic.unmute();
+                this.setState("listening");
+                break;
+            case "transcript": {
+                // The runtime forwards the provider's deltas as they arrive, a few
+                // characters each, so the line so far is built here. Emitting the raw
+                // delta made the caption show only the latest fragment, which read as
+                // gibberish flickering over the orb.
+                let text = message.data.text;
+                if (message.data.role === "assistant") {
+                    if (message.data.final) {
+                        this.assistantLine = "";
+                    }
+                    else {
+                        this.assistantLine += text;
+                        text = this.assistantLine;
+                    }
+                }
+                this.emit({
+                    type: "transcript",
+                    role: message.data.role,
+                    text,
+                    final: message.data.final,
+                });
+                break;
+            }
+            case "status":
+                // A status of `listening` means one thing: the user interrupted. The
+                // queued audio has to go, or the assistant carries on out of the
+                // speaker after being cut off — and the runtime has already truncated
+                // its history to what was heard, so the two would disagree about the
+                // conversation.
+                //
+                // This is safe only because a *finished* reply arrives as
+                // `speech_done` instead. The relay used to send both, and flushing on
+                // a completed response threw away everything still queued — heard as
+                // every answer breaking off part-way through.
+                if (message.data.state === "listening" &&
+                    this.speaker.speaking) {
+                    this.speaker.flush();
+                }
+                // An interrupted line may never be marked final, and its leftovers
+                // must not prefix the next reply's caption.
+                if (message.data.state === "listening")
+                    this.assistantLine = "";
+                // The server's view of the session, except while the button is down —
+                // the client knows about a press before the server does, and letting a
+                // status frame overwrite `recording` makes the button flicker.
+                if (this.state !== "recording") {
+                    this.setState(message.data.state === "reconnecting"
+                        ? "connecting"
+                        : message.data.state);
+                }
+                break;
+            case "speech_done":
+                // From `thinking` too: a reply can finish with no audio at all, a tool
+                // call and nothing said, and the session must still take the next
+                // press.
+                if (this.state === "speaking" || this.state === "thinking") {
+                    this.setState("listening");
+                }
+                break;
+            case "ending_soon":
+                this.emit({
+                    type: "ending_soon",
+                    secondsRemaining: message.data.secondsRemaining,
+                });
+                break;
+            case "ended":
+                this.emit({
+                    type: "ended",
+                    reason: message.data.reason,
+                    message: message.data.message,
+                });
+                // `stop` leaves the state `idle`, which is the point: the microphone
+                // button goes back to its resting look rather than the failed one, and
+                // pressing it again starts a fresh session on the same conversation.
+                void this.stop();
+                break;
+            case "error":
+                this.emit({
+                    type: "error",
+                    code: message.data.code,
+                    message: message.data.message,
+                    recoverable: message.data.recoverable,
+                    fallbackToChat: message.data.fallbackToChat,
+                });
+                // A recoverable error is one operation failing, not the call ending.
+                // Tearing the session down here was the bug: a mistimed press hung up
+                // on the user and made them start over.
+                if (!message.data.recoverable) {
+                    this.setState("error");
+                    void this.stop();
+                }
+                break;
+        }
+    }
+    sendAudio(pcm) {
+        // Hands-free sends throughout: the provider's VAD is what decides where an
+        // utterance begins, and it cannot do that on audio it never receives.
+        if (!this.options.handsFree && this.state !== "recording")
+            return;
+        if (this.held) {
+            this.held.push(pcm);
+            this.options.onLevel?.("user", pcmLevel(pcm));
+            return;
+        }
+        this.options.onLevel?.("user", pcmLevel(pcm));
+        // Two bytes per sample, one channel.
+        this.utteranceMs += (pcm.byteLength * 1000) / (2 * VOICE_SAMPLE_RATE);
+        try {
+            this.socket?.send(pcm);
+        }
+        catch {
+            // A send on a closing socket throws; `onclose` handles the rest.
+        }
+    }
+    sendControl(message) {
+        try {
+            this.socket?.send(JSON.stringify(message));
+        }
+        catch {
+            // Same.
+        }
+    }
+    setState(state) {
+        if (this.state === state)
+            return;
+        this.state = state;
+        this.reportPlaybackWhileSpeaking();
+        this.options.onEvent({ type: "state", state });
+    }
+    /**
+     * Tell the runtime how much of the current reply has actually been heard,
+     * a few times a second, for as long as the assistant is speaking.
+     *
+     * Push-to-talk does not need this: the interruption *is* a button press, so
+     * the position can be measured at exactly that moment. Hands-free has no
+     * such moment on this side — the provider notices the user talking, upstream
+     * — so the runtime has to already hold a recent figure when it truncates.
+     *
+     * Without it, truncation falls back to nothing and the model's history keeps
+     * the whole reply, including the part the user cut off. It then answers
+     * follow-ups about words nobody heard.
+     *
+     * Four frames a second of small JSON, against fifty of audio.
+     */
+    reportPlaybackWhileSpeaking() {
+        const shouldReport = Boolean(this.options.handsFree) && this.state === "speaking";
+        if (!shouldReport) {
+            if (this.playbackTimer !== null) {
+                clearInterval(this.playbackTimer);
+                this.playbackTimer = null;
+            }
+            return;
+        }
+        if (this.playbackTimer !== null)
+            return;
+        this.playbackTimer = setInterval(() => {
+            if (!this.speaker.speaking)
+                return;
+            this.sendControl({
+                type: "playback",
+                data: { ms: this.speaker.heardMs() },
+            });
+        }, 250);
+    }
+    emit(event) {
+        this.options.onEvent(event);
+    }
+}
+/**
+ * Derive the voice socket URL from the chat socket URL.
+ *
+ * One `url` prop for the whole SDK rather than two: the two sockets are always
+ * served by the same runtime, and a second prop would be a second thing to get
+ * wrong in every integration for no configurability anyone wants.
+ */
+export function voiceUrl(chatUrl, token, handsFree = false) {
+    const base = chatUrl.replace(/\/v1\/ws\/?$/, "/v1/voice");
+    const separator = base.includes("?") ? "&" : "?";
+    const mode = handsFree ? "&handsFree=true" : "";
+    return `${base}${separator}token=${encodeURIComponent(token)}${mode}`;
+}
+//# sourceMappingURL=voice.js.map

package/dist/voice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice.js","sourceRoot":"","sources":["../../../js/src/voice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,iBAAiB,GAIlB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA8EpE,MAAM,OAAO,YAAY;IAqCM;IApCrB,MAAM,GAA2B,IAAI,CAAC;IACtC,KAAK,GAAe,MAAM,CAAC;IAC3B,GAAG,CAAoB;IACvB,OAAO,CAAe;IAC9B;;;;;;;;OAQG;IACK,IAAI,GAAyB,IAAI,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC;IACxB;;;;;;;OAOG;IACK,WAAW,GAAG,CAAC,CAAC;IACxB,2EAA2E;IACnE,aAAa,GAAG,EAAE,CAAC;IAC3B,yEAAyE;IACjE,aAAa,GAA0C,IAAI,CAAC;IACpE;;;;;OAKG;IACK,cAAc,GAAG,GAAG,CAAC;IAE7B,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE5B,IAAI,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EACL,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;oBACxD,CAAC,CAAC,wDAAwD;oBAC1D,CAAC,CAAC,6BAA6B;gBACnC,sEAAsE;gBACtE,WAAW,EAAE,KAAK;gBAClB,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,CAAC,aAAa;YAC1B,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAA+B,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,MAAM,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,YAAY,WAAW,EAAE,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,uEAAuE;gBACvE,+DAA+D;gBAC/D,8DAA8D;gBAC9D,oDAAoD;gBACpD,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;oBAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,wEAAwE;YACxE,wEAAwE;YACxE,sEAAsE;YACtE,uCAAuC;YACvC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,4BAA4B;QAC9B,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,OAA4B;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO;QACnC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO;QAEpE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QAErB,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACzE,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACK,iBAAiB;QACvB,wEAAwE;QACxE,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE;aACrC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,YAAY;QACV,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO;QACnC,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QACvC,sEAAsE;QACtE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAElC,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,YAAY;QACZ,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,kCAAkC;gBAC3C,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAEnB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,0EAA0E;IAElE,aAAa,CAAC,GAAW;QAC/B,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,OAAO;gBACV,wEAAwE;gBACxE,uEAAuE;gBACvE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC;gBAEzE,mEAAmE;gBACnE,qEAAqE;gBACrE,iEAAiE;gBACjE,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,sEAAsE;gBACtE,qEAAqE;gBACrE,iEAAiE;gBACjE,EAAE;gBACF,uEAAuE;gBACvE,sEAAsE;gBACtE,gCAAgC;gBAChC,EAAE;gBACF,qEAAqE;gBACrE,mEAAmE;gBACnE,4DAA4D;gBAC5D,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS;oBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBAE9C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC3B,MAAM;YAER,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,mEAAmE;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,qCAAqC;gBACrC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;wBACvB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;wBAC3B,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;oBACvB,IAAI;oBACJ,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;iBAC1B,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YAED,KAAK,QAAQ;gBACX,qEAAqE;gBACrE,iEAAiE;gBACjE,sEAAsE;gBACtE,qEAAqE;gBACrE,gBAAgB;gBAChB,EAAE;gBACF,0DAA0D;gBAC1D,sEAAsE;gBACtE,qEAAqE;gBACrE,8CAA8C;gBAC9C,IACE,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW;oBAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,EACrB,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBACD,mEAAmE;gBACnE,4CAA4C;gBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW;oBAAE,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;gBAEhE,sEAAsE;gBACtE,uEAAuE;gBACvE,+DAA+D;gBAC/D,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,CACX,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc;wBACnC,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CACvB,CAAC;gBACJ,CAAC;gBACD,MAAM;YAER,KAAK,aAAa;gBAChB,uEAAuE;gBACvE,kEAAkE;gBAClE,SAAS;gBACT,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBAC3D,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC7B,CAAC;gBACD,MAAM;YAER,KAAK,aAAa;gBAChB,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,aAAa;oBACnB,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB;iBAChD,CAAC,CAAC;gBACH,MAAM;YAER,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;oBAC3B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;iBAC9B,CAAC,CAAC;gBACH,qEAAqE;gBACrE,uEAAuE;gBACvE,qEAAqE;gBACrE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM;YAER,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;oBACvB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;oBAC7B,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;oBACrC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;iBAC5C,CAAC,CAAC;gBACH,qEAAqE;gBACrE,sEAAsE;gBACtE,wCAAwC;gBACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC9B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACvB,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,GAAgB;QAChC,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAClE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,qCAAqC;QACrC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAA2B;QAC7C,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ;QACV,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,2BAA2B;QACjC,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC;QAE/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAChC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO;QAExC,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO;YACnC,IAAI,CAAC,WAAW,CAAC;gBACf,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE;aACrC,CAAC,CAAC;QACL,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAEO,IAAI,CAAC,KAAiB;QAC5B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,KAAa,EACb,SAAS,GAAG,KAAK;IAEjB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,OAAO,GAAG,IAAI,GAAG,SAAS,SAAS,kBAAkB,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;AACxE,CAAC"}

package/dist/widget/card.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The approval surface for a proposed action, shared by the panel and the orb.
+ *
+ * It renders `label`, `description` and `input` from the proposal payload,
+ * which the runtime copies from its registry, never from the assistant's
+ * prose. Text smuggled into a product name or a document therefore cannot
+ * change what a user is shown they are about to approve, and it is added as
+ * text, so markup in it is shown rather than run.
+ *
+ * High-risk actions require this tap — the runtime refuses a spoken or typed
+ * "yes" for them — so this is a security boundary, not decoration.
+ */
+import type { ProposalPayload } from "../client.js";
+export declare function confirmationCard(proposal: ProposalPayload, onRespond: (proposalId: string, confirmed: boolean) => void): HTMLElement;
+//# sourceMappingURL=card.d.ts.map

package/dist/widget/card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.d.ts","sourceRoot":"","sources":["../../../../js/src/widget/card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAIjD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,KAAK,IAAI,GAC1D,WAAW,CA0Cb"}

package/dist/widget/card.js

@@ -0,0 +1,28 @@
+/**
+ * The approval surface for a proposed action, shared by the panel and the orb.
+ *
+ * It renders `label`, `description` and `input` from the proposal payload,
+ * which the runtime copies from its registry, never from the assistant's
+ * prose. Text smuggled into a product name or a document therefore cannot
+ * change what a user is shown they are about to approve, and it is added as
+ * text, so markup in it is shown rather than run.
+ *
+ * High-risk actions require this tap — the runtime refuses a spoken or typed
+ * "yes" for them — so this is a security boundary, not decoration.
+ */
+import { h } from "./dom.js";
+import { formatValue, humanizeKey } from "./format.js";
+export function confirmationCard(proposal, onRespond) {
+    const entries = Object.entries(proposal.input ?? {});
+    const high = proposal.risk === "high";
+    return h("div", { class: "card", attrs: { role: "group", "aria-label": `Confirm: ${proposal.label}` } }, h("div", { class: "card-header" }, h("strong", {}, proposal.label), h("span", { class: high ? "risk risk-high" : "risk" }, high ? "Needs care" : "Confirm")), h("p", { class: "card-description" }, proposal.description), entries.length > 0 &&
+        h("dl", { class: "card-input" }, ...entries.map(([key, value]) => h("div", { class: "card-row" }, h("dt", { class: "card-key" }, humanizeKey(key)), h("dd", { class: "card-value" }, inputValue(value))))), h("div", { class: "card-actions" }, h("button", { class: "button-secondary", attrs: { type: "button" }, on: { click: () => onRespond(proposal.proposalId, false) } }, "Cancel"), h("button", { class: "button-primary", attrs: { type: "button" }, on: { click: () => onRespond(proposal.proposalId, true) } }, "Confirm")));
+}
+/** Lists stay separate so a user can check each line before approving. */
+function inputValue(value) {
+    if (Array.isArray(value) && value.length > 0) {
+        return h("ol", { class: "input-list" }, ...value.map((item) => h("li", {}, inputValue(item))));
+    }
+    return h("span", { class: "input-text" }, formatValue(value));
+}
+//# sourceMappingURL=card.js.map

package/dist/widget/card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.js","sourceRoot":"","sources":["../../../../js/src/widget/card.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEpD,MAAM,UAAU,gBAAgB,CAC9B,QAAyB,EACzB,SAA2D;IAE3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC;IAEtC,OAAO,CAAC,CACN,KAAK,EACL,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,EACvF,CAAC,CACC,KAAK,EACL,EAAE,KAAK,EAAE,aAAa,EAAE,EACxB,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EAC/B,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CACxF,EACD,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,EAC3D,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CACC,IAAI,EACJ,EAAE,KAAK,EAAE,YAAY,EAAE,EACvB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAC9B,CAAC,CACC,KAAK,EACL,EAAE,KAAK,EAAE,UAAU,EAAE,EACrB,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,EAChD,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CACpD,CACF,CACF,EACH,CAAC,CACC,KAAK,EACL,EAAE,KAAK,EAAE,cAAc,EAAE,EACzB,CAAC,CACC,QAAQ,EACR,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,EACpH,QAAQ,CACT,EACD,CAAC,CACC,QAAQ,EACR,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,EACjH,SAAS,CACV,CACF,CACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/widget/dom.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Building DOM without a framework, and without ever parsing a string.
+ *
+ * Text goes in as text nodes, so a product name holding `<img onerror=…>`
+ * is shown as those characters and never runs: the card's firebreak depends
+ * on it. Nothing in the widget sets `innerHTML`.
+ */
+type Child = Node | string | null | undefined | false;
+export interface Props {
+    class?: string;
+    /** Set with `setAttribute`; `false` and `undefined` leave it off. */
+    attrs?: Record<string, string | number | boolean | undefined>;
+    on?: {
+        [K in keyof HTMLElementEventMap]?: (event: HTMLElementEventMap[K]) => void;
+    };
+}
+export declare function h<K extends keyof HTMLElementTagNameMap>(tag: K, props?: Props, ...children: Child[]): HTMLElementTagNameMap[K];
+export declare function svg(tag: string, attrs: Record<string, string | number>, ...children: Node[]): SVGElement;
+export declare function setAttrs(element: Element, attrs: Record<string, string | number | boolean | undefined>): void;
+export declare function append(element: Node, children: Child[]): void;
+/** Replace an element's children. */
+export declare function replace(element: Node, ...children: Child[]): void;
+export {};
+//# sourceMappingURL=dom.d.ts.map

package/dist/widget/dom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.d.ts","sourceRoot":"","sources":["../../../../js/src/widget/dom.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC;AAEtD,MAAM,WAAW,KAAK;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,EAAE,CAAC,EAAE;SAAG,CAAC,IAAI,MAAM,mBAAmB,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI;KAAE,CAAC;CACrF;AAED,wBAAgB,CAAC,CAAC,CAAC,SAAS,MAAM,qBAAqB,EACrD,GAAG,EAAE,CAAC,EACN,KAAK,GAAE,KAAU,EACjB,GAAG,QAAQ,EAAE,KAAK,EAAE,GACnB,qBAAqB,CAAC,CAAC,CAAC,CAS1B;AAID,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,GAAG,UAAU,CAKxG;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,IAAI,CAK7G;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAK7D;AAED,qCAAqC;AACrC,wBAAgB,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAGjE"}

package/dist/widget/dom.js

@@ -0,0 +1,49 @@
+/**
+ * Building DOM without a framework, and without ever parsing a string.
+ *
+ * Text goes in as text nodes, so a product name holding `<img onerror=…>`
+ * is shown as those characters and never runs: the card's firebreak depends
+ * on it. Nothing in the widget sets `innerHTML`.
+ */
+export function h(tag, props = {}, ...children) {
+    const element = document.createElement(tag);
+    if (props.class)
+        element.className = props.class;
+    setAttrs(element, props.attrs ?? {});
+    for (const [type, listener] of Object.entries(props.on ?? {})) {
+        element.addEventListener(type, listener);
+    }
+    append(element, children);
+    return element;
+}
+const SVG = "http://www.w3.org/2000/svg";
+export function svg(tag, attrs, ...children) {
+    const element = document.createElementNS(SVG, tag);
+    for (const [name, value] of Object.entries(attrs))
+        element.setAttribute(name, String(value));
+    for (const child of children)
+        element.appendChild(child);
+    return element;
+}
+export function setAttrs(element, attrs) {
+    for (const [name, value] of Object.entries(attrs)) {
+        if (value === undefined || value === false)
+            element.removeAttribute(name);
+        else
+            element.setAttribute(name, value === true ? "" : String(value));
+    }
+}
+export function append(element, children) {
+    for (const child of children) {
+        if (child === null || child === undefined || child === false)
+            continue;
+        element.appendChild(typeof child === "string" ? document.createTextNode(child) : child);
+    }
+}
+/** Replace an element's children. */
+export function replace(element, ...children) {
+    while (element.firstChild)
+        element.removeChild(element.firstChild);
+    append(element, children);
+}
+//# sourceMappingURL=dom.js.map

package/dist/widget/dom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.js","sourceRoot":"","sources":["../../../../js/src/widget/dom.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,MAAM,UAAU,CAAC,CACf,GAAM,EACN,QAAe,EAAE,EACjB,GAAG,QAAiB;IAEpB,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAyB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,GAAG,GAAG,4BAA4B,CAAC;AAEzC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,KAAsC,EAAE,GAAG,QAAgB;IAC1F,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7F,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,KAA4D;IACrG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;;YACrE,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAa,EAAE,QAAiB;IACrD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;YAAE,SAAS;QACvE,OAAO,CAAC,WAAW,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,OAAO,CAAC,OAAa,EAAE,GAAG,QAAiB;IACzD,OAAO,OAAO,CAAC,UAAU;QAAE,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5B,CAAC"}