@noodleseed/assistant 1.1.1 → 1.3.0

package/dist/react.d.cts

@@ -1,6 +1,7 @@
 import * as react from 'react';
-import { A as AssistantThemeMode } from './appearance-KDbtkt2G.cjs';
-import { AssistantErrorDetail, NoodleAssistantElement } from './index.cjs';
+import { A as AssistantThemeMode } from './appearance-BLO7kFYB.cjs';
+import { NoodleAssistantElement } from './index.cjs';
+import { A as AssistantErrorDetail } from './client-Bm990MFE.cjs';
 
 interface NoodleAssistantProps {
     readonly sessionEndpoint: string;

package/dist/react.d.ts

@@ -1,6 +1,7 @@
 import * as react from 'react';
-import { A as AssistantThemeMode } from './appearance-KDbtkt2G.js';
-import { AssistantErrorDetail, NoodleAssistantElement } from './index.js';
+import { A as AssistantThemeMode } from './appearance-BLO7kFYB.js';
+import { NoodleAssistantElement } from './index.js';
+import { A as AssistantErrorDetail } from './client-Dd7_LZLY.js';
 
 interface NoodleAssistantProps {
     readonly sessionEndpoint: string;

package/dist/react.js

@@ -1,6 +1,7 @@
 import {
   registerNoodleAssistant
-} from "./chunk-IM7SAHNE.js";
+} from "./chunk-QMDSNLTA.js";
+import "./chunk-N6TFOYOX.js";
 
 // src/react.ts
 import {
@@ -13,18 +14,24 @@ import {
 var NoodleAssistant = forwardRef(
   function NoodleAssistant2(props, forwardedRef) {
     const ref = useRef(null);
+    const readyNotified = useRef(false);
     useImperativeHandle(forwardedRef, () => ref.current, []);
     useEffect(() => {
-      registerNoodleAssistant();
       const element = ref.current;
       if (!element) return;
-      element.sessionEndpoint = props.sessionEndpoint;
-      const ready = () => props.onReady?.();
+      const ready = () => {
+        if (readyNotified.current) return;
+        readyNotified.current = true;
+        props.onReady?.();
+      };
       const error = (event) => props.onError?.(event.detail);
       const expired = () => props.onSessionExpired?.();
       element.addEventListener("assistant-ready", ready);
       element.addEventListener("assistant-error", error);
       element.addEventListener("assistant-session-expired", expired);
+      registerNoodleAssistant();
+      element.sessionEndpoint = props.sessionEndpoint;
+      if (element.shadowRoot) ready();
       return () => {
         element.removeEventListener("assistant-ready", ready);
         element.removeEventListener("assistant-error", error);

package/dist/react.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/react.ts"],"sourcesContent":["import {\n  createElement,\n  forwardRef,\n  type ReactElement,\n  useEffect,\n  useImperativeHandle,\n  useRef,\n} from 'react';\nimport type { AssistantThemeMode } from './appearance.js';\nimport { type NoodleAssistantElement, registerNoodleAssistant } from './element.js';\nimport type { AssistantErrorDetail } from './transport.js';\n\nexport interface NoodleAssistantProps {\n  readonly sessionEndpoint: string;\n  readonly theme?: AssistantThemeMode;\n  readonly open?: boolean;\n  readonly className?: string;\n  readonly onReady?: () => void;\n  readonly onError?: (error: AssistantErrorDetail) => void;\n  readonly onSessionExpired?: () => void;\n}\n\nexport const NoodleAssistant = forwardRef<NoodleAssistantElement, NoodleAssistantProps>(\n  function NoodleAssistant(props, forwardedRef): ReactElement {\n    const ref = useRef<NoodleAssistantElement>(null);\n    useImperativeHandle(forwardedRef, () => ref.current as NoodleAssistantElement, []);\n    useEffect(() => {\n      registerNoodleAssistant();\n      const element = ref.current;\n      if (!element) return;\n      element.sessionEndpoint = props.sessionEndpoint;\n      const ready = () => props.onReady?.();\n      const error = (event: Event) =>\n        props.onError?.((event as CustomEvent<AssistantErrorDetail>).detail);\n      const expired = () => props.onSessionExpired?.();\n      element.addEventListener('assistant-ready', ready);\n      element.addEventListener('assistant-error', error);\n      element.addEventListener('assistant-session-expired', expired);\n      return () => {\n        element.removeEventListener('assistant-ready', ready);\n        element.removeEventListener('assistant-error', error);\n        element.removeEventListener('assistant-session-expired', expired);\n      };\n    }, [props.onError, props.onReady, props.onSessionExpired, props.sessionEndpoint]);\n    return createElement('noodle-assistant', {\n      ref,\n      class: props.className,\n      'session-endpoint': props.sessionEndpoint,\n      ...(props.theme ? { theme: props.theme } : {}),\n      ...(props.open ? { open: '' } : {}),\n    });\n  },\n);\n"],"mappings":";;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAeA,IAAM,kBAAkB;AAAA,EAC7B,SAASA,iBAAgB,OAAO,cAA4B;AAC1D,UAAM,MAAM,OAA+B,IAAI;AAC/C,wBAAoB,cAAc,MAAM,IAAI,SAAmC,CAAC,CAAC;AACjF,cAAU,MAAM;AACd,8BAAwB;AACxB,YAAM,UAAU,IAAI;AACpB,UAAI,CAAC,QAAS;AACd,cAAQ,kBAAkB,MAAM;AAChC,YAAM,QAAQ,MAAM,MAAM,UAAU;AACpC,YAAM,QAAQ,CAAC,UACb,MAAM,UAAW,MAA4C,MAAM;AACrE,YAAM,UAAU,MAAM,MAAM,mBAAmB;AAC/C,cAAQ,iBAAiB,mBAAmB,KAAK;AACjD,cAAQ,iBAAiB,mBAAmB,KAAK;AACjD,cAAQ,iBAAiB,6BAA6B,OAAO;AAC7D,aAAO,MAAM;AACX,gBAAQ,oBAAoB,mBAAmB,KAAK;AACpD,gBAAQ,oBAAoB,mBAAmB,KAAK;AACpD,gBAAQ,oBAAoB,6BAA6B,OAAO;AAAA,MAClE;AAAA,IACF,GAAG,CAAC,MAAM,SAAS,MAAM,SAAS,MAAM,kBAAkB,MAAM,eAAe,CAAC;AAChF,WAAO,cAAc,oBAAoB;AAAA,MACvC;AAAA,MACA,OAAO,MAAM;AAAA,MACb,oBAAoB,MAAM;AAAA,MAC1B,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAI,MAAM,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;AAAA,IACnC,CAAC;AAAA,EACH;AACF;","names":["NoodleAssistant"]}
+{"version":3,"sources":["../src/react.ts"],"sourcesContent":["import {\n  createElement,\n  forwardRef,\n  type ReactElement,\n  useEffect,\n  useImperativeHandle,\n  useRef,\n} from 'react';\nimport type { AssistantThemeMode } from './appearance.js';\nimport { type NoodleAssistantElement, registerNoodleAssistant } from './element.js';\nimport type { AssistantErrorDetail } from './transport.js';\n\nexport interface NoodleAssistantProps {\n  readonly sessionEndpoint: string;\n  readonly theme?: AssistantThemeMode;\n  readonly open?: boolean;\n  readonly className?: string;\n  readonly onReady?: () => void;\n  readonly onError?: (error: AssistantErrorDetail) => void;\n  readonly onSessionExpired?: () => void;\n}\n\nexport const NoodleAssistant = forwardRef<NoodleAssistantElement, NoodleAssistantProps>(\n  function NoodleAssistant(props, forwardedRef): ReactElement {\n    const ref = useRef<NoodleAssistantElement>(null);\n    const readyNotified = useRef(false);\n    useImperativeHandle(forwardedRef, () => ref.current as NoodleAssistantElement, []);\n    useEffect(() => {\n      const element = ref.current;\n      if (!element) return;\n      const ready = () => {\n        if (readyNotified.current) return;\n        readyNotified.current = true;\n        props.onReady?.();\n      };\n      const error = (event: Event) =>\n        props.onError?.((event as CustomEvent<AssistantErrorDetail>).detail);\n      const expired = () => props.onSessionExpired?.();\n      element.addEventListener('assistant-ready', ready);\n      element.addEventListener('assistant-error', error);\n      element.addEventListener('assistant-session-expired', expired);\n      registerNoodleAssistant();\n      element.sessionEndpoint = props.sessionEndpoint;\n      // The canonical entry may have registered and upgraded the element before this effect ran.\n      // Readiness is sticky once the shadow root exists, so late React listeners still fire once.\n      if (element.shadowRoot) ready();\n      return () => {\n        element.removeEventListener('assistant-ready', ready);\n        element.removeEventListener('assistant-error', error);\n        element.removeEventListener('assistant-session-expired', expired);\n      };\n    }, [props.onError, props.onReady, props.onSessionExpired, props.sessionEndpoint]);\n    return createElement('noodle-assistant', {\n      ref,\n      class: props.className,\n      'session-endpoint': props.sessionEndpoint,\n      ...(props.theme ? { theme: props.theme } : {}),\n      ...(props.open ? { open: '' } : {}),\n    });\n  },\n);\n"],"mappings":";;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAeA,IAAM,kBAAkB;AAAA,EAC7B,SAASA,iBAAgB,OAAO,cAA4B;AAC1D,UAAM,MAAM,OAA+B,IAAI;AAC/C,UAAM,gBAAgB,OAAO,KAAK;AAClC,wBAAoB,cAAc,MAAM,IAAI,SAAmC,CAAC,CAAC;AACjF,cAAU,MAAM;AACd,YAAM,UAAU,IAAI;AACpB,UAAI,CAAC,QAAS;AACd,YAAM,QAAQ,MAAM;AAClB,YAAI,cAAc,QAAS;AAC3B,sBAAc,UAAU;AACxB,cAAM,UAAU;AAAA,MAClB;AACA,YAAM,QAAQ,CAAC,UACb,MAAM,UAAW,MAA4C,MAAM;AACrE,YAAM,UAAU,MAAM,MAAM,mBAAmB;AAC/C,cAAQ,iBAAiB,mBAAmB,KAAK;AACjD,cAAQ,iBAAiB,mBAAmB,KAAK;AACjD,cAAQ,iBAAiB,6BAA6B,OAAO;AAC7D,8BAAwB;AACxB,cAAQ,kBAAkB,MAAM;AAGhC,UAAI,QAAQ,WAAY,OAAM;AAC9B,aAAO,MAAM;AACX,gBAAQ,oBAAoB,mBAAmB,KAAK;AACpD,gBAAQ,oBAAoB,mBAAmB,KAAK;AACpD,gBAAQ,oBAAoB,6BAA6B,OAAO;AAAA,MAClE;AAAA,IACF,GAAG,CAAC,MAAM,SAAS,MAAM,SAAS,MAAM,kBAAkB,MAAM,eAAe,CAAC;AAChF,WAAO,cAAc,oBAAoB;AAAA,MACvC;AAAA,MACA,OAAO,MAAM;AAAA,MACb,oBAAoB,MAAM;AAAA,MAC1B,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MAC5C,GAAI,MAAM,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;AAAA,IACnC,CAAC;AAAA,EACH;AACF;","names":["NoodleAssistant"]}

package/dist/server.cjs

@@ -40,7 +40,8 @@ async function createAssistantSession(input, dependencies = {}) {
       origin: input.origin,
       user: input.user,
       ...input.claims ? { claims: input.claims } : {},
-      ...input.context ? { context: input.context } : {}
+      ...input.context ? { context: input.context } : {},
+      ...input.preferences ? { preferences: input.preferences } : {}
     })
   });
   if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\nexport interface CreateAssistantSessionInput {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n  };\n  readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n  };\n  readonly configuration?: AssistantConfiguration;\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n    }),\n  });\n  if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAkCA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,sCAAsC,SAAS,MAAM,GAAG;AAC1F,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\nexport interface CreateAssistantSessionInput {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n  };\n  readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n  };\n  readonly configuration?: AssistantConfiguration;\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n    }),\n  });\n  if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAwCA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,sCAAsC,SAAS,MAAM,GAAG;AAC1F,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}

package/dist/server.d.cts

@@ -1,4 +1,4 @@
-import { a as AssistantConfiguration } from './appearance-KDbtkt2G.cjs';
+import { a as AssistantConfiguration } from './appearance-BLO7kFYB.cjs';
 
 interface CreateAssistantSessionInput {
     readonly serviceUrl: string;
@@ -14,6 +14,11 @@ interface CreateAssistantSessionInput {
         readonly roles?: readonly string[];
     };
     readonly context?: Readonly<Record<string, string | number | boolean | null>>;
+    /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */
+    readonly preferences?: {
+        readonly locale?: string;
+        readonly timeZone?: string;
+    };
     /**
      * Verified session claims from your authenticated backend. Only claims the server declares in
      * `embeddedAssistant({ sessionClaims })` reach tools (`\${user.claims.<key>}`) and, when marked
@@ -27,6 +32,7 @@ interface AssistantSession {
     readonly endpoints: {
         readonly turns: string;
         readonly toolConfirmations: string;
+        readonly interactions?: string;
     };
     readonly configuration?: AssistantConfiguration;
 }

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-import { a as AssistantConfiguration } from './appearance-KDbtkt2G.js';
+import { a as AssistantConfiguration } from './appearance-BLO7kFYB.js';
 
 interface CreateAssistantSessionInput {
     readonly serviceUrl: string;
@@ -14,6 +14,11 @@ interface CreateAssistantSessionInput {
         readonly roles?: readonly string[];
     };
     readonly context?: Readonly<Record<string, string | number | boolean | null>>;
+    /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */
+    readonly preferences?: {
+        readonly locale?: string;
+        readonly timeZone?: string;
+    };
     /**
      * Verified session claims from your authenticated backend. Only claims the server declares in
      * `embeddedAssistant({ sessionClaims })` reach tools (`\${user.claims.<key>}`) and, when marked
@@ -27,6 +32,7 @@ interface AssistantSession {
     readonly endpoints: {
         readonly turns: string;
         readonly toolConfirmations: string;
+        readonly interactions?: string;
     };
     readonly configuration?: AssistantConfiguration;
 }

package/dist/server.js

@@ -16,7 +16,8 @@ async function createAssistantSession(input, dependencies = {}) {
       origin: input.origin,
       user: input.user,
       ...input.claims ? { claims: input.claims } : {},
-      ...input.context ? { context: input.context } : {}
+      ...input.context ? { context: input.context } : {},
+      ...input.preferences ? { preferences: input.preferences } : {}
     })
   });
   if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\nexport interface CreateAssistantSessionInput {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n  };\n  readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n  };\n  readonly configuration?: AssistantConfiguration;\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n    }),\n  });\n  if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";AAkCA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,sCAAsC,SAAS,MAAM,GAAG;AAC1F,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\nexport interface CreateAssistantSessionInput {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n  };\n  readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n  };\n  readonly configuration?: AssistantConfiguration;\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n    }),\n  });\n  if (!response.ok) throw new Error(`Assistant session exchange failed (${response.status})`);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";AAwCA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,CAAC;AACD,MAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,sCAAsC,SAAS,MAAM,GAAG;AAC1F,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/assistant",
-  "version": "1.1.1",
+  "version": "1.3.0",
   "description": "Embed the Noodle Seed customer-branded assistant in your web app: Web Component, React wrapper, and backend session helper. Authoring and deploying the server is @noodleseed/one.",
   "license": "Apache-2.0",
   "repository": {
@@ -21,6 +21,12 @@
       "require": "./dist/index.cjs",
       "default": "./dist/index.js"
     },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "require": "./dist/client.cjs",
+      "default": "./dist/client.js"
+    },
     "./react": {
       "types": "./dist/react.d.ts",
       "import": "./dist/react.js",
@@ -68,9 +74,16 @@
       "react": [
         "./dist/react.d.ts"
       ],
+      "client": [
+        "./dist/client.d.ts"
+      ],
       "server": [
         "./dist/server.d.ts"
       ]
     }
+  },
+  "dependencies": {
+    "dompurify": "^3.4.11",
+    "marked": "^16.4.2"
   }
 }