@noodleseed/assistant 1.13.0 → 1.15.0

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { d as AssistantViewAvailableDetail, f as AssistantClientEvent, a as AssistantContext, e as AssistantModelContextUpdate, A as AssistantPageContext, h as AssistantInteractionResponse } from './client-BKIeuSVS.cjs';
-export { g as AssistantErrorDetail, i as AssistantEvent, j as AssistantViewAvailableEvent } from './client-BKIeuSVS.cjs';
+import { d as AssistantViewAvailableDetail, f as AssistantClientEvent, a as AssistantContext, e as AssistantModelContextUpdate, A as AssistantPageContext, h as AssistantInteractionResponse } from './client-B_l59rWg.cjs';
+export { g as AssistantErrorDetail, i as AssistantEvent, j as AssistantViewAvailableEvent } from './client-B_l59rWg.cjs';
 import './appearance-Cc-eqSbp.cjs';
 import 'ai';
 
@@ -58,6 +58,10 @@ declare class NoodleAssistantElement extends HTMLElementBase {
     #private;
     static readonly observedAttributes: string[];
     sessionEndpoint: string;
+    /** Public mount: the non-secret embed id `noodle deploy` printed. Mutually exclusive with the above. */
+    embedId: string;
+    /** Only for a dev or self-hosted service; the published snippet needs no origin. */
+    serviceUrl: string;
     get appearance(): AssistantAppearance | undefined;
     set appearance(value: AssistantAppearance | undefined);
     connectedCallback(): void;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { d as AssistantViewAvailableDetail, f as AssistantClientEvent, a as AssistantContext, e as AssistantModelContextUpdate, A as AssistantPageContext, h as AssistantInteractionResponse } from './client-BccAX_om.js';
-export { g as AssistantErrorDetail, i as AssistantEvent, j as AssistantViewAvailableEvent } from './client-BccAX_om.js';
+import { d as AssistantViewAvailableDetail, f as AssistantClientEvent, a as AssistantContext, e as AssistantModelContextUpdate, A as AssistantPageContext, h as AssistantInteractionResponse } from './client-MnLfiyo2.js';
+export { g as AssistantErrorDetail, i as AssistantEvent, j as AssistantViewAvailableEvent } from './client-MnLfiyo2.js';
 import './appearance-Cc-eqSbp.js';
 import 'ai';
 
@@ -58,6 +58,10 @@ declare class NoodleAssistantElement extends HTMLElementBase {
     #private;
     static readonly observedAttributes: string[];
     sessionEndpoint: string;
+    /** Public mount: the non-secret embed id `noodle deploy` printed. Mutually exclusive with the above. */
+    embedId: string;
+    /** Only for a dev or self-hosted service; the published snippet needs no origin. */
+    serviceUrl: string;
     get appearance(): AssistantAppearance | undefined;
     set appearance(value: AssistantAppearance | undefined);
     connectedCallback(): void;

package/dist/index.js

@@ -2,8 +2,8 @@ import {
   ASSISTANT_TAG_NAME,
   NoodleAssistantElement,
   registerNoodleAssistant
-} from "./chunk-ZPELSHUP.js";
-import "./chunk-KRB2SXFD.js";
+} from "./chunk-SUHNNWKP.js";
+import "./chunk-RRJIK473.js";
 import "./chunk-3YYTUJPJ.js";
 import "./chunk-5FUTL2UF.js";
 

package/dist/react/client.cjs

@@ -22644,7 +22644,7 @@ var AssistantChatStateStore = class {
         this.#writeText(event.data.delta);
         return;
       case "tool_proposed":
-        this.#writeConfirmation(event.data);
+        this.#writeStandaloneData(() => this.#writeConfirmation(event.data));
         return;
       case "interaction_proposed":
         this.#writeData("confirmation", event.data.id, {
@@ -22653,10 +22653,12 @@ var AssistantChatStateStore = class {
         });
         return;
       case "input_requested":
-        this.#writeData("input-request", event.data.id, {
-          ...event.data,
-          status: "pending"
-        });
+        this.#writeStandaloneData(
+          () => this.#writeData("input-request", event.data.id, {
+            ...event.data,
+            status: "pending"
+          })
+        );
         return;
       case "tool_completed":
         this.#writeData("tool-result", event.data.id, event.data);
@@ -22763,6 +22765,12 @@ var AssistantChatStateStore = class {
   #writeConfirmation(data) {
     this.#writeData("confirmation", data.id, { ...data, status: "pending" });
   }
+  #writeStandaloneData(write) {
+    const standalone = this.#operation === void 0;
+    if (standalone) this.#startOperation();
+    write();
+    if (standalone) this.#closeOperation("ready");
+  }
   #writeData(name21, id, data) {
     const operation = this.#operation;
     if (!operation || operation.closed) return;
@@ -23095,6 +23103,21 @@ function hasToJsonProperty(value) {
   return false;
 }
 
+// src/session-source.ts
+var NOODLE_CLOUD_URL = "https://cloud.noodleseed.dev";
+var PUBLIC_SESSION_PATH = "/v1/assistant/public-sessions";
+function resolveSessionSource(options) {
+  const { sessionEndpoint, embedId, serviceUrl } = options;
+  if (Boolean(embedId) === Boolean(sessionEndpoint)) {
+    throw new Error("pass either embedId or sessionEndpoint, not both and not neither");
+  }
+  if (embedId) {
+    const base = (serviceUrl ?? NOODLE_CLOUD_URL).replace(/\/+$/, "");
+    return { kind: "public", url: `${base}${PUBLIC_SESSION_PATH}`, embedId };
+  }
+  return { kind: "exchange", url: sessionEndpoint };
+}
+
 // src/transport.ts
 var AssistantTransportError = class extends Error {
   code = "invalid_response";
@@ -23222,6 +23245,19 @@ function isAbortError2(error51) {
 }
 
 // src/client.ts
+async function refusalCode(response) {
+  try {
+    const body = await response.clone().json();
+    const code = body.code;
+    return typeof code === "string" ? code : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var UNRETRYABLE_SERVICE_CODES = /* @__PURE__ */ new Set([
+  "daily_turn_budget_exhausted",
+  "daily_session_budget_exhausted"
+]);
 var AssistantClientError = class extends Error {
   detail;
   constructor(detail, message, options) {
@@ -23231,7 +23267,7 @@ var AssistantClientError = class extends Error {
   }
 };
 var DefaultAssistantClient = class {
-  #sessionEndpoint;
+  #source;
   #fetch;
   #listeners = /* @__PURE__ */ new Set();
   #chat = new AssistantChatStateStore();
@@ -23241,9 +23277,9 @@ var DefaultAssistantClient = class {
   #context;
   #modelContext;
   #active;
+  #pendingAppInteractions = /* @__PURE__ */ new Map();
   constructor(options) {
-    if (!options.sessionEndpoint) throw new Error("sessionEndpoint is required");
-    this.#sessionEndpoint = options.sessionEndpoint;
+    this.#source = resolveSessionSource(options);
     this.#fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
     this.#context = options.context ? { ...options.context } : void 0;
     this.#modelContext = options.modelContext ? copyAssistantModelContext(options.modelContext) : void 0;
@@ -23282,6 +23318,7 @@ var DefaultAssistantClient = class {
     }
     await this.#singleFlight(async (signal) => {
       await this.#runChatOperation(signal, async () => {
+        const pendingApp = this.#pendingAppInteractions.get(id);
         const session = this.#session;
         if (!session) {
           throw clientError("confirmation_expired", "assistant session is not active", false);
@@ -23301,32 +23338,67 @@ var DefaultAssistantClient = class {
           ...resolution.action === "accept" && resolution.content !== void 0 ? { content: resolution.content } : {}
         } : { id };
         this.#emit({ event: "interaction_started", data: { id, action: resolution.action } });
-        const response = await this.#request(
-          endpoint,
-          {
-            method: "POST",
-            headers: authorizedHeaders(session.token, "text/event-stream"),
-            body: JSON.stringify(body),
-            signal
-          },
-          "confirmation_failed"
-        );
-        if (response.status === 401) {
-          this.#session = void 0;
-          this.#emit({ event: "session_expired", data: {} });
-        }
-        if (!response.ok) {
-          const serverCode = await readStableErrorCode(response);
-          const expired = response.status === 401 || response.status === 409;
-          throw clientError(
-            serverCode ?? (expired ? "confirmation_expired" : "confirmation_failed"),
-            `Assistant interaction failed (${response.status})`,
-            false,
-            response.status
+        try {
+          const response = await this.#request(
+            endpoint,
+            {
+              method: "POST",
+              headers: authorizedHeaders(session.token, "text/event-stream"),
+              body: JSON.stringify(body),
+              signal
+            },
+            "confirmation_failed"
           );
+          if (response.status === 401) {
+            this.#session = void 0;
+            this.#emit({ event: "session_expired", data: {} });
+          }
+          if (!response.ok) {
+            const serverCode = await readStableErrorCode(response);
+            const expired = response.status === 401 || response.status === 409;
+            throw clientError(
+              serverCode ?? (expired ? "confirmation_expired" : "confirmation_failed"),
+              `Assistant interaction failed (${response.status})`,
+              false,
+              response.status
+            );
+          }
+          let completedResult;
+          let nextInteractionId;
+          await this.#consume(response, (event) => {
+            if (event.event === "tool_completed" && event.data.id === id) {
+              completedResult = event.data.result;
+            }
+            if ((event.event === "tool_proposed" || event.event === "input_requested") && event.data.id !== id) {
+              nextInteractionId = event.data.id;
+            }
+          });
+          this.#emit({ event: "interaction_completed", data: { id, action: resolution.action } });
+          if (pendingApp) {
+            this.#pendingAppInteractions.delete(id);
+            if (nextInteractionId) {
+              this.#pendingAppInteractions.set(nextInteractionId, pendingApp);
+            } else if (resolution.action !== "accept") {
+              pendingApp.resolve(appInteractionStopped(resolution.action));
+            } else if (completedResult !== void 0) {
+              pendingApp.resolve(appToolResult(completedResult));
+            } else {
+              pendingApp.reject(
+                clientError(
+                  "invalid_response",
+                  "Assistant app interaction completed without a tool result",
+                  false
+                )
+              );
+            }
+          }
+        } catch (error51) {
+          if (pendingApp && this.#pendingAppInteractions.get(id) === pendingApp) {
+            this.#pendingAppInteractions.delete(id);
+            pendingApp.reject(error51);
+          }
+          throw error51;
         }
-        await this.#consume(response);
-        this.#emit({ event: "interaction_completed", data: { id, action: resolution.action } });
       });
     });
   }
@@ -23367,12 +23439,29 @@ var DefaultAssistantClient = class {
         response.status
       );
     }
-    return response.json();
+    const value = await response.json();
+    const interaction = parseAppInteraction(value);
+    if (!interaction) return value;
+    return new Promise((resolve2, reject) => {
+      const id = interaction.data.id;
+      const replaced = this.#pendingAppInteractions.get(id);
+      if (replaced) {
+        replaced.reject(
+          clientError("invalid_response", "Assistant returned a duplicate app interaction", false)
+        );
+      }
+      this.#pendingAppInteractions.set(id, { resolve: resolve2, reject });
+      this.#emit(interaction);
+      void this.#chat.flush();
+    });
   }
   appSandboxUrl() {
     return this.#session?.endpoints.sandbox;
   }
   resetSession() {
+    this.#rejectPendingAppInteractions(
+      clientError("confirmation_expired", "assistant session is not active", false)
+    );
     this.#session = void 0;
     this.#emit({ event: "session_reset", data: {} });
   }
@@ -23406,11 +23495,14 @@ var DefaultAssistantClient = class {
       return;
     }
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "turn_failed",
         `Assistant turn failed (${response.status})`,
         false,
-        response.status
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     await this.#consume(response);
@@ -23449,23 +23541,25 @@ var DefaultAssistantClient = class {
     }
   }
   async #createSession(signal) {
-    const response = await this.#request(
-      this.#sessionEndpoint,
-      {
-        method: "POST",
-        headers: { Accept: "application/json", "Content-Type": "application/json" },
-        body: JSON.stringify(this.#context ? { context: this.#context } : {}),
-        credentials: "same-origin",
-        signal
-      },
-      "session_failed"
-    );
+    const source = this.#source;
+    const response = await this.#requestSession(source, {
+      method: "POST",
+      headers: { Accept: "application/json", "Content-Type": "application/json" },
+      body: JSON.stringify(
+        source.kind === "public" ? { embedId: source.embedId } : this.#context ? { context: this.#context } : {}
+      ),
+      credentials: source.kind === "public" ? "omit" : "same-origin",
+      signal
+    });
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "session_failed",
         `Assistant session failed (${response.status})`,
-        true,
-        response.status
+        serviceCode === void 0 || !UNRETRYABLE_SERVICE_CODES.has(serviceCode),
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     let value;
@@ -23493,12 +23587,13 @@ var DefaultAssistantClient = class {
     });
     return session;
   }
-  async #consume(response) {
+  async #consume(response, observe) {
     let streamError;
     try {
       await consumeAssistantEvents(response, (event) => {
         const clientEvent = toAssistantClientEvent(event);
         this.#emit(clientEvent);
+        observe?.(clientEvent);
         if (clientEvent.event !== "error" || typeof clientEvent.data.code !== "string") return;
         streamError = {
           code: clientEvent.data.code,
@@ -23521,6 +23616,34 @@ var DefaultAssistantClient = class {
       );
     }
   }
+  /**
+   * The mint, with the one failure a public page hits that an in-app embed cannot.
+   *
+   * A page that loads the embed script and then blocks `connect-src` fails here as a bare network
+   * rejection — no status, no body, nothing to read. "Assistant request failed" sends a developer
+   * hunting through their own code; naming the directive and the origin ends the search. The message
+   * covers a plain outage too, because from inside the browser the two are indistinguishable.
+   */
+  async #requestSession(source, init) {
+    try {
+      return await this.#fetch(source.url, init);
+    } catch (error51) {
+      if (init.signal?.aborted) throw error51;
+      if (source.kind !== "public") {
+        throw clientError("session_failed", "Assistant request failed", true, void 0, {
+          cause: error51
+        });
+      }
+      throw clientError(
+        "session_failed",
+        `Assistant could not reach ${new URL(source.url).origin}. If the page sets a Content-Security-Policy, allow that origin in connect-src (and in script-src and frame-src).`,
+        true,
+        void 0,
+        { cause: error51 },
+        "blocked_by_page"
+      );
+    }
+  }
   async #request(input, init, failureCode) {
     try {
       return await this.#fetch(input, init);
@@ -23567,6 +23690,10 @@ var DefaultAssistantClient = class {
       }
     }
   }
+  #rejectPendingAppInteractions(error51) {
+    for (const pending of this.#pendingAppInteractions.values()) pending.reject(error51);
+    this.#pendingAppInteractions.clear();
+  }
 };
 function createAssistantClient(options) {
   return new DefaultAssistantClient(options);
@@ -23578,6 +23705,30 @@ function authorizedHeaders(token, accept) {
     Accept: accept
   };
 }
+function parseAppInteraction(value) {
+  if (!isRecord4(value) || !isRecord4(value.interaction)) return void 0;
+  const event = value.interaction.event;
+  const data = value.interaction.data;
+  if (event !== "tool_proposed" && event !== "input_requested" || !isRecord4(data)) {
+    return void 0;
+  }
+  const parsed = toAssistantClientEvent({ event, data });
+  return parsed.event === "tool_proposed" || parsed.event === "input_requested" ? parsed : void 0;
+}
+function appToolResult(result) {
+  const text2 = typeof result === "string" ? result : JSON.stringify(result);
+  return result !== null && typeof result === "object" && !Array.isArray(result) ? {
+    content: [{ type: "text", text: text2 }],
+    structuredContent: result,
+    isError: false
+  } : { content: [{ type: "text", text: text2 }], isError: false };
+}
+function appInteractionStopped(action) {
+  return {
+    content: [{ type: "text", text: `interaction_${action}` }],
+    isError: true
+  };
+}
 function parseSession(value) {
   if (!isRecord4(value) || !isRecord4(value.endpoints)) {
     throw clientError("session_failed", "Assistant session response is invalid", true);
@@ -23614,9 +23765,14 @@ async function readStableErrorCode(response) {
   if (!isRecord4(value) || typeof value.code !== "string") return void 0;
   return /^[A-Za-z0-9_.-]{1,64}$/.test(value.code) ? value.code : void 0;
 }
-function clientError(code, message, retryable, status, options) {
+function clientError(code, message, retryable, status, options, serviceCode) {
   return new AssistantClientError(
-    { code, ...status === void 0 ? {} : { status }, retryable },
+    {
+      code,
+      ...status === void 0 ? {} : { status },
+      retryable,
+      ...serviceCode === void 0 ? {} : { serviceCode }
+    },
     message,
     options
   );
@@ -23626,16 +23782,23 @@ function clientError(code, message, retryable, status, options) {
 var useCommittedLayoutEffect = typeof window === "undefined" ? import_react.useEffect : import_react.useLayoutEffect;
 function useNoodleAssistant(options) {
   const optionsRef = (0, import_react.useRef)(options);
-  const { fetch: injectedFetch, principalKey, sessionEndpoint } = options;
+  const { fetch: injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl } = options;
   const client = (0, import_react.useMemo)(() => {
     if (!principalKey.trim()) throw new Error("principalKey is required");
-    return createAssistantClient({
-      sessionEndpoint,
+    const behavior = {
       ...injectedFetch ? { fetch: injectedFetch } : {},
       clientContext: () => readProvider(optionsRef.current.clientContext),
       pageContext: () => readProvider(optionsRef.current.pageContext)
+    };
+    return embedId !== void 0 ? createAssistantClient({
+      embedId,
+      ...serviceUrl !== void 0 ? { serviceUrl } : {},
+      ...behavior
+    }) : createAssistantClient({
+      sessionEndpoint: sessionEndpoint ?? "",
+      ...behavior
     });
-  }, [injectedFetch, principalKey, sessionEndpoint]);
+  }, [injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl]);
   const store = (0, import_react.useMemo)(() => createAssistantReactStore(client), [client]);
   const state = (0, import_react.useSyncExternalStore)(store.subscribe, store.getSnapshot, store.getSnapshot);
   const synchronized = (0, import_react.useRef)(void 0);