@noodleseed/assistant 1.14.0 → 1.16.0

package/dist/react/client.d.cts

@@ -1,14 +1,14 @@
-import { A as AssistantPageContext, a as AssistantContext, C as CreateAssistantClientOptions, b as AssistantChatState, c as AssistantClient } from '../client-BKIeuSVS.cjs';
+import { A as AssistantPageContext, a as AssistantContext, C as CreateAssistantClientOptions, b as AssistantChatState, c as AssistantClient } from '../client-401BAJqk.cjs';
 import '../appearance-Cc-eqSbp.cjs';
 import 'ai';
 
-interface UseNoodleAssistantOptions<TPageContext extends AssistantPageContext = AssistantContext> extends CreateAssistantClientOptions<TPageContext> {
+type UseNoodleAssistantOptions<TPageContext extends AssistantPageContext = AssistantContext> = CreateAssistantClientOptions<TPageContext> & {
     /**
      * Browser-local identity for the authenticated principal/tenant.
      * Changing it discards the previous in-memory session and transcript; it is never sent to Noodle.
      */
     readonly principalKey: string;
-}
+};
 type UseNoodleAssistantResult<TPageContext extends AssistantPageContext = AssistantContext> = AssistantChatState & {
     /** Canonical controller for turns, interactions, context, Apps requests, and aborts. */
     readonly client: AssistantClient<TPageContext>;

package/dist/react/client.d.ts

@@ -1,14 +1,14 @@
-import { A as AssistantPageContext, a as AssistantContext, C as CreateAssistantClientOptions, b as AssistantChatState, c as AssistantClient } from '../client-BccAX_om.js';
+import { A as AssistantPageContext, a as AssistantContext, C as CreateAssistantClientOptions, b as AssistantChatState, c as AssistantClient } from '../client-Ii_xTV09.js';
 import '../appearance-Cc-eqSbp.js';
 import 'ai';
 
-interface UseNoodleAssistantOptions<TPageContext extends AssistantPageContext = AssistantContext> extends CreateAssistantClientOptions<TPageContext> {
+type UseNoodleAssistantOptions<TPageContext extends AssistantPageContext = AssistantContext> = CreateAssistantClientOptions<TPageContext> & {
     /**
      * Browser-local identity for the authenticated principal/tenant.
      * Changing it discards the previous in-memory session and transcript; it is never sent to Noodle.
      */
     readonly principalKey: string;
-}
+};
 type UseNoodleAssistantResult<TPageContext extends AssistantPageContext = AssistantContext> = AssistantChatState & {
     /** Canonical controller for turns, interactions, context, Apps requests, and aborts. */
     readonly client: AssistantClient<TPageContext>;

package/dist/react/client.js

@@ -1,7 +1,7 @@
 "use client";
 import {
   createAssistantClient
-} from "../chunk-RITHSCTD.js";
+} from "../chunk-NPV64PUX.js";
 import "../chunk-3YYTUJPJ.js";
 import "../chunk-5FUTL2UF.js";
 
@@ -10,16 +10,23 @@ import { useEffect, useLayoutEffect, useMemo, useRef, useSyncExternalStore } fro
 var useCommittedLayoutEffect = typeof window === "undefined" ? useEffect : useLayoutEffect;
 function useNoodleAssistant(options) {
   const optionsRef = useRef(options);
-  const { fetch: injectedFetch, principalKey, sessionEndpoint } = options;
+  const { fetch: injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl } = options;
   const client = useMemo(() => {
     if (!principalKey.trim()) throw new Error("principalKey is required");
-    return createAssistantClient({
-      sessionEndpoint,
+    const behavior = {
       ...injectedFetch ? { fetch: injectedFetch } : {},
       clientContext: () => readProvider(optionsRef.current.clientContext),
       pageContext: () => readProvider(optionsRef.current.pageContext)
+    };
+    return embedId !== void 0 ? createAssistantClient({
+      embedId,
+      ...serviceUrl !== void 0 ? { serviceUrl } : {},
+      ...behavior
+    }) : createAssistantClient({
+      sessionEndpoint: sessionEndpoint ?? "",
+      ...behavior
     });
-  }, [injectedFetch, principalKey, sessionEndpoint]);
+  }, [injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl]);
   const store = useMemo(() => createAssistantReactStore(client), [client]);
   const state = useSyncExternalStore(store.subscribe, store.getSnapshot, store.getSnapshot);
   const synchronized = useRef(void 0);

package/dist/react/client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/react-client.ts"],"sourcesContent":["'use client';\n\nimport { useEffect, useLayoutEffect, useMemo, useRef, useSyncExternalStore } from 'react';\nimport {\n  type AssistantChatState,\n  type AssistantClient,\n  type AssistantContext,\n  type AssistantModelContextUpdate,\n  type AssistantPageContext,\n  type CreateAssistantClientOptions,\n  createAssistantClient,\n} from './client.js';\n\nexport interface UseNoodleAssistantOptions<\n  TPageContext extends AssistantPageContext = AssistantContext,\n> extends CreateAssistantClientOptions<TPageContext> {\n  /**\n   * Browser-local identity for the authenticated principal/tenant.\n   * Changing it discards the previous in-memory session and transcript; it is never sent to Noodle.\n   */\n  readonly principalKey: string;\n}\n\nexport type UseNoodleAssistantResult<TPageContext extends AssistantPageContext = AssistantContext> =\n  AssistantChatState & {\n    /** Canonical controller for turns, interactions, context, Apps requests, and aborts. */\n    readonly client: AssistantClient<TPageContext>;\n  };\n\ninterface AssistantReactStore {\n  readonly getSnapshot: () => AssistantChatState;\n  readonly subscribe: (listener: () => void) => () => void;\n}\n\nconst useCommittedLayoutEffect = typeof window === 'undefined' ? useEffect : useLayoutEffect;\n\n/**\n * Subscribe a customer-owned React renderer to the DOM-free assistant client.\n *\n * The hook owns only client lifetime and React state projection. Session exchange, transport,\n * retries, interaction continuations, and transcript construction remain client responsibilities.\n */\nexport function useNoodleAssistant<TPageContext extends AssistantPageContext = AssistantContext>(\n  options: UseNoodleAssistantOptions<TPageContext>,\n): UseNoodleAssistantResult<TPageContext> {\n  const optionsRef = useRef(options);\n  const { fetch: injectedFetch, principalKey, sessionEndpoint } = options;\n\n  const client = useMemo(() => {\n    if (!principalKey.trim()) throw new Error('principalKey is required');\n    return createAssistantClient<TPageContext>({\n      sessionEndpoint,\n      ...(injectedFetch ? { fetch: injectedFetch } : {}),\n      clientContext: () => readProvider(optionsRef.current.clientContext),\n      pageContext: () => readProvider(optionsRef.current.pageContext),\n    });\n  }, [injectedFetch, principalKey, sessionEndpoint]);\n  const store = useMemo(() => createAssistantReactStore(client), [client]);\n  const state = useSyncExternalStore(store.subscribe, store.getSnapshot, store.getSnapshot);\n  const synchronized = useRef<\n    | {\n        readonly client: AssistantClient<TPageContext>;\n        readonly context: AssistantContext | undefined;\n        readonly modelContext: AssistantModelContextUpdate | undefined;\n      }\n    | undefined\n  >(undefined);\n\n  useCommittedLayoutEffect(() => {\n    optionsRef.current = options;\n    const previous = synchronized.current;\n    if (previous?.client === client) {\n      if (previous.context !== options.context) {\n        client.updateContext(options.context ?? {});\n      }\n      if (previous.modelContext !== options.modelContext) {\n        client.updateModelContext(options.modelContext ?? {});\n      }\n    } else {\n      if (options.context !== undefined) client.updateContext(options.context);\n      if (options.modelContext !== undefined) client.updateModelContext(options.modelContext);\n    }\n    synchronized.current = {\n      client,\n      context: options.context,\n      modelContext: options.modelContext,\n    };\n  }, [client, options]);\n\n  useCommittedLayoutEffect(\n    () => () => {\n      client.abort();\n      client.resetSession();\n    },\n    [client],\n  );\n\n  return useMemo(() => ({ client, ...state }), [client, state]);\n}\n\nfunction createAssistantReactStore<TPageContext extends AssistantPageContext>(\n  client: AssistantClient<TPageContext>,\n): AssistantReactStore {\n  let snapshot = client.getChatState();\n  return {\n    getSnapshot: () => snapshot,\n    subscribe(listener) {\n      let subscribing = true;\n      const unsubscribe = client.subscribeChat((next) => {\n        snapshot = next;\n        if (!subscribing) listener();\n      });\n      subscribing = false;\n      return unsubscribe;\n    },\n  };\n}\n\nfunction readProvider<T>(value: T | (() => T | undefined) | undefined): T | undefined {\n  return typeof value === 'function' ? (value as () => T | undefined)() : value;\n}\n"],"mappings":";;;;;;;;AAEA,SAAS,WAAW,iBAAiB,SAAS,QAAQ,4BAA4B;AAgClF,IAAM,2BAA2B,OAAO,WAAW,cAAc,YAAY;AAQtE,SAAS,mBACd,SACwC;AACxC,QAAM,aAAa,OAAO,OAAO;AACjC,QAAM,EAAE,OAAO,eAAe,cAAc,gBAAgB,IAAI;AAEhE,QAAM,SAAS,QAAQ,MAAM;AAC3B,QAAI,CAAC,aAAa,KAAK,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACpE,WAAO,sBAAoC;AAAA,MACzC;AAAA,MACA,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;AAAA,MAChD,eAAe,MAAM,aAAa,WAAW,QAAQ,aAAa;AAAA,MAClE,aAAa,MAAM,aAAa,WAAW,QAAQ,WAAW;AAAA,IAChE,CAAC;AAAA,EACH,GAAG,CAAC,eAAe,cAAc,eAAe,CAAC;AACjD,QAAM,QAAQ,QAAQ,MAAM,0BAA0B,MAAM,GAAG,CAAC,MAAM,CAAC;AACvE,QAAM,QAAQ,qBAAqB,MAAM,WAAW,MAAM,aAAa,MAAM,WAAW;AACxF,QAAM,eAAe,OAOnB,MAAS;AAEX,2BAAyB,MAAM;AAC7B,eAAW,UAAU;AACrB,UAAM,WAAW,aAAa;AAC9B,QAAI,UAAU,WAAW,QAAQ;AAC/B,UAAI,SAAS,YAAY,QAAQ,SAAS;AACxC,eAAO,cAAc,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC5C;AACA,UAAI,SAAS,iBAAiB,QAAQ,cAAc;AAClD,eAAO,mBAAmB,QAAQ,gBAAgB,CAAC,CAAC;AAAA,MACtD;AAAA,IACF,OAAO;AACL,UAAI,QAAQ,YAAY,OAAW,QAAO,cAAc,QAAQ,OAAO;AACvE,UAAI,QAAQ,iBAAiB,OAAW,QAAO,mBAAmB,QAAQ,YAAY;AAAA,IACxF;AACA,iBAAa,UAAU;AAAA,MACrB;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,QAAQ,OAAO,CAAC;AAEpB;AAAA,IACE,MAAM,MAAM;AACV,aAAO,MAAM;AACb,aAAO,aAAa;AAAA,IACtB;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,SAAO,QAAQ,OAAO,EAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,KAAK,CAAC;AAC9D;AAEA,SAAS,0BACP,QACqB;AACrB,MAAI,WAAW,OAAO,aAAa;AACnC,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,UAAU,UAAU;AAClB,UAAI,cAAc;AAClB,YAAM,cAAc,OAAO,cAAc,CAAC,SAAS;AACjD,mBAAW;AACX,YAAI,CAAC,YAAa,UAAS;AAAA,MAC7B,CAAC;AACD,oBAAc;AACd,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,aAAgB,OAA6D;AACpF,SAAO,OAAO,UAAU,aAAc,MAA8B,IAAI;AAC1E;","names":[]}
+{"version":3,"sources":["../../src/react-client.ts"],"sourcesContent":["'use client';\n\nimport { useEffect, useLayoutEffect, useMemo, useRef, useSyncExternalStore } from 'react';\nimport {\n  type AssistantChatState,\n  type AssistantClient,\n  type AssistantContext,\n  type AssistantModelContextUpdate,\n  type AssistantPageContext,\n  type CreateAssistantClientOptions,\n  createAssistantClient,\n} from './client.js';\n\nexport type UseNoodleAssistantOptions<\n  TPageContext extends AssistantPageContext = AssistantContext,\n> = CreateAssistantClientOptions<TPageContext> & {\n  /**\n   * Browser-local identity for the authenticated principal/tenant.\n   * Changing it discards the previous in-memory session and transcript; it is never sent to Noodle.\n   */\n  readonly principalKey: string;\n};\n\nexport type UseNoodleAssistantResult<TPageContext extends AssistantPageContext = AssistantContext> =\n  AssistantChatState & {\n    /** Canonical controller for turns, interactions, context, Apps requests, and aborts. */\n    readonly client: AssistantClient<TPageContext>;\n  };\n\ninterface AssistantReactStore {\n  readonly getSnapshot: () => AssistantChatState;\n  readonly subscribe: (listener: () => void) => () => void;\n}\n\nconst useCommittedLayoutEffect = typeof window === 'undefined' ? useEffect : useLayoutEffect;\n\n/**\n * Subscribe a customer-owned React renderer to the DOM-free assistant client.\n *\n * The hook owns only client lifetime and React state projection. Session exchange, transport,\n * retries, interaction continuations, and transcript construction remain client responsibilities.\n */\nexport function useNoodleAssistant<TPageContext extends AssistantPageContext = AssistantContext>(\n  options: UseNoodleAssistantOptions<TPageContext>,\n): UseNoodleAssistantResult<TPageContext> {\n  const optionsRef = useRef(options);\n  const { fetch: injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl } = options;\n\n  const client = useMemo(() => {\n    if (!principalKey.trim()) throw new Error('principalKey is required');\n    // The two mounts are spelled out rather than spread from one object: the exclusive union is what\n    // stops a caller passing both, and a spread would collapse it back into an ambiguous shape.\n    const behavior = {\n      ...(injectedFetch ? { fetch: injectedFetch } : {}),\n      clientContext: () => readProvider(optionsRef.current.clientContext),\n      pageContext: () => readProvider(optionsRef.current.pageContext),\n    };\n    return embedId !== undefined\n      ? createAssistantClient<TPageContext>({\n          embedId,\n          ...(serviceUrl !== undefined ? { serviceUrl } : {}),\n          ...behavior,\n        })\n      : createAssistantClient<TPageContext>({\n          sessionEndpoint: sessionEndpoint ?? '',\n          ...behavior,\n        });\n  }, [injectedFetch, principalKey, sessionEndpoint, embedId, serviceUrl]);\n  const store = useMemo(() => createAssistantReactStore(client), [client]);\n  const state = useSyncExternalStore(store.subscribe, store.getSnapshot, store.getSnapshot);\n  const synchronized = useRef<\n    | {\n        readonly client: AssistantClient<TPageContext>;\n        readonly context: AssistantContext | undefined;\n        readonly modelContext: AssistantModelContextUpdate | undefined;\n      }\n    | undefined\n  >(undefined);\n\n  useCommittedLayoutEffect(() => {\n    optionsRef.current = options;\n    const previous = synchronized.current;\n    if (previous?.client === client) {\n      if (previous.context !== options.context) {\n        client.updateContext(options.context ?? {});\n      }\n      if (previous.modelContext !== options.modelContext) {\n        client.updateModelContext(options.modelContext ?? {});\n      }\n    } else {\n      if (options.context !== undefined) client.updateContext(options.context);\n      if (options.modelContext !== undefined) client.updateModelContext(options.modelContext);\n    }\n    synchronized.current = {\n      client,\n      context: options.context,\n      modelContext: options.modelContext,\n    };\n  }, [client, options]);\n\n  useCommittedLayoutEffect(\n    () => () => {\n      client.abort();\n      client.resetSession();\n    },\n    [client],\n  );\n\n  return useMemo(() => ({ client, ...state }), [client, state]);\n}\n\nfunction createAssistantReactStore<TPageContext extends AssistantPageContext>(\n  client: AssistantClient<TPageContext>,\n): AssistantReactStore {\n  let snapshot = client.getChatState();\n  return {\n    getSnapshot: () => snapshot,\n    subscribe(listener) {\n      let subscribing = true;\n      const unsubscribe = client.subscribeChat((next) => {\n        snapshot = next;\n        if (!subscribing) listener();\n      });\n      subscribing = false;\n      return unsubscribe;\n    },\n  };\n}\n\nfunction readProvider<T>(value: T | (() => T | undefined) | undefined): T | undefined {\n  return typeof value === 'function' ? (value as () => T | undefined)() : value;\n}\n"],"mappings":";;;;;;;;AAEA,SAAS,WAAW,iBAAiB,SAAS,QAAQ,4BAA4B;AAgClF,IAAM,2BAA2B,OAAO,WAAW,cAAc,YAAY;AAQtE,SAAS,mBACd,SACwC;AACxC,QAAM,aAAa,OAAO,OAAO;AACjC,QAAM,EAAE,OAAO,eAAe,cAAc,iBAAiB,SAAS,WAAW,IAAI;AAErF,QAAM,SAAS,QAAQ,MAAM;AAC3B,QAAI,CAAC,aAAa,KAAK,EAAG,OAAM,IAAI,MAAM,0BAA0B;AAGpE,UAAM,WAAW;AAAA,MACf,GAAI,gBAAgB,EAAE,OAAO,cAAc,IAAI,CAAC;AAAA,MAChD,eAAe,MAAM,aAAa,WAAW,QAAQ,aAAa;AAAA,MAClE,aAAa,MAAM,aAAa,WAAW,QAAQ,WAAW;AAAA,IAChE;AACA,WAAO,YAAY,SACf,sBAAoC;AAAA,MAClC;AAAA,MACA,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD,GAAG;AAAA,IACL,CAAC,IACD,sBAAoC;AAAA,MAClC,iBAAiB,mBAAmB;AAAA,MACpC,GAAG;AAAA,IACL,CAAC;AAAA,EACP,GAAG,CAAC,eAAe,cAAc,iBAAiB,SAAS,UAAU,CAAC;AACtE,QAAM,QAAQ,QAAQ,MAAM,0BAA0B,MAAM,GAAG,CAAC,MAAM,CAAC;AACvE,QAAM,QAAQ,qBAAqB,MAAM,WAAW,MAAM,aAAa,MAAM,WAAW;AACxF,QAAM,eAAe,OAOnB,MAAS;AAEX,2BAAyB,MAAM;AAC7B,eAAW,UAAU;AACrB,UAAM,WAAW,aAAa;AAC9B,QAAI,UAAU,WAAW,QAAQ;AAC/B,UAAI,SAAS,YAAY,QAAQ,SAAS;AACxC,eAAO,cAAc,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC5C;AACA,UAAI,SAAS,iBAAiB,QAAQ,cAAc;AAClD,eAAO,mBAAmB,QAAQ,gBAAgB,CAAC,CAAC;AAAA,MACtD;AAAA,IACF,OAAO;AACL,UAAI,QAAQ,YAAY,OAAW,QAAO,cAAc,QAAQ,OAAO;AACvE,UAAI,QAAQ,iBAAiB,OAAW,QAAO,mBAAmB,QAAQ,YAAY;AAAA,IACxF;AACA,iBAAa,UAAU;AAAA,MACrB;AAAA,MACA,SAAS,QAAQ;AAAA,MACjB,cAAc,QAAQ;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,QAAQ,OAAO,CAAC;AAEpB;AAAA,IACE,MAAM,MAAM;AACV,aAAO,MAAM;AACb,aAAO,aAAa;AAAA,IACtB;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,SAAO,QAAQ,OAAO,EAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,KAAK,CAAC;AAC9D;AAEA,SAAS,0BACP,QACqB;AACrB,MAAI,WAAW,OAAO,aAAa;AACnC,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,UAAU,UAAU;AAClB,UAAI,cAAc;AAClB,YAAM,cAAc,OAAO,cAAc,CAAC,SAAS;AACjD,mBAAW;AACX,YAAI,CAAC,YAAa,UAAS;AAAA,MAC7B,CAAC;AACD,oBAAc;AACd,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,SAAS,aAAgB,OAA6D;AACpF,SAAO,OAAO,UAAU,aAAc,MAA8B,IAAI;AAC1E;","names":[]}

package/dist/react.cjs

@@ -27095,6 +27095,11 @@ function toAssistantClientEvent(event) {
         return event;
       }
       break;
+    case "auth_requested":
+      if (hasString(value, "id") && hasString(value, "tool") && hasString(value, "continuation") && hasString(value, "expiresAt") && hasOptionalTurnId(value)) {
+        return event;
+      }
+      break;
     case "interaction_resolved":
       if (hasString(value, "id") && (value.action === void 0 || isInteractionAction(value.action)) && hasOptionalTurnId(value)) {
         return event;
@@ -27279,6 +27284,24 @@ function hasToJsonProperty(value) {
   return false;
 }
 
+// src/session-source.ts
+var NOODLE_CLOUD_URL = "https://cloud.noodleseed.dev";
+var PUBLIC_SESSION_PATH = "/v1/assistant/public-sessions";
+function resolveSessionSource(options) {
+  const { sessionEndpoint, embedId, serviceUrl } = options;
+  if (Boolean(embedId) === Boolean(sessionEndpoint)) {
+    throw new Error("pass either embedId or sessionEndpoint, not both and not neither");
+  }
+  if (embedId) {
+    const base = (serviceUrl ?? NOODLE_CLOUD_URL).replace(/\/+$/, "");
+    return { kind: "public", url: `${base}${PUBLIC_SESSION_PATH}`, embedId };
+  }
+  return { kind: "exchange", url: sessionEndpoint };
+}
+function sessionSourceKey(options) {
+  return `${options.embedId ?? ""}|${options.serviceUrl ?? ""}|${options.sessionEndpoint ?? ""}`;
+}
+
 // src/transport.ts
 var AssistantTransportError = class extends Error {
   code = "invalid_response";
@@ -27406,6 +27429,19 @@ function isAbortError2(error51) {
 }
 
 // src/client.ts
+async function refusalCode(response) {
+  try {
+    const body = await response.clone().json();
+    const code = body.code;
+    return typeof code === "string" ? code : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var UNRETRYABLE_SERVICE_CODES = /* @__PURE__ */ new Set([
+  "daily_turn_budget_exhausted",
+  "daily_session_budget_exhausted"
+]);
 var AssistantClientError = class extends Error {
   detail;
   constructor(detail, message, options) {
@@ -27415,7 +27451,7 @@ var AssistantClientError = class extends Error {
   }
 };
 var DefaultAssistantClient = class {
-  #sessionEndpoint;
+  #source;
   #fetch;
   #listeners = /* @__PURE__ */ new Set();
   #chat = new AssistantChatStateStore();
@@ -27427,8 +27463,7 @@ var DefaultAssistantClient = class {
   #active;
   #pendingAppInteractions = /* @__PURE__ */ new Map();
   constructor(options) {
-    if (!options.sessionEndpoint) throw new Error("sessionEndpoint is required");
-    this.#sessionEndpoint = options.sessionEndpoint;
+    this.#source = resolveSessionSource(options);
     this.#fetch = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
     this.#context = options.context ? { ...options.context } : void 0;
     this.#modelContext = options.modelContext ? copyAssistantModelContext(options.modelContext) : void 0;
@@ -27644,11 +27679,14 @@ var DefaultAssistantClient = class {
       return;
     }
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "turn_failed",
         `Assistant turn failed (${response.status})`,
         false,
-        response.status
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     await this.#consume(response);
@@ -27687,23 +27725,25 @@ var DefaultAssistantClient = class {
     }
   }
   async #createSession(signal) {
-    const response = await this.#request(
-      this.#sessionEndpoint,
-      {
-        method: "POST",
-        headers: { Accept: "application/json", "Content-Type": "application/json" },
-        body: JSON.stringify(this.#context ? { context: this.#context } : {}),
-        credentials: "same-origin",
-        signal
-      },
-      "session_failed"
-    );
+    const source = this.#source;
+    const response = await this.#requestSession(source, {
+      method: "POST",
+      headers: { Accept: "application/json", "Content-Type": "application/json" },
+      body: JSON.stringify(
+        source.kind === "public" ? { embedId: source.embedId } : this.#context ? { context: this.#context } : {}
+      ),
+      credentials: source.kind === "public" ? "omit" : "same-origin",
+      signal
+    });
     if (!response.ok) {
+      const serviceCode = await refusalCode(response);
       throw clientError(
         "session_failed",
         `Assistant session failed (${response.status})`,
-        true,
-        response.status
+        serviceCode === void 0 || !UNRETRYABLE_SERVICE_CODES.has(serviceCode),
+        response.status,
+        void 0,
+        serviceCode
       );
     }
     let value;
@@ -27760,6 +27800,34 @@ var DefaultAssistantClient = class {
       );
     }
   }
+  /**
+   * The mint, with the one failure a public page hits that an in-app embed cannot.
+   *
+   * A page that loads the embed script and then blocks `connect-src` fails here as a bare network
+   * rejection — no status, no body, nothing to read. "Assistant request failed" sends a developer
+   * hunting through their own code; naming the directive and the origin ends the search. The message
+   * covers a plain outage too, because from inside the browser the two are indistinguishable.
+   */
+  async #requestSession(source, init) {
+    try {
+      return await this.#fetch(source.url, init);
+    } catch (error51) {
+      if (init.signal?.aborted) throw error51;
+      if (source.kind !== "public") {
+        throw clientError("session_failed", "Assistant request failed", true, void 0, {
+          cause: error51
+        });
+      }
+      throw clientError(
+        "session_failed",
+        `Assistant could not reach ${new URL(source.url).origin}. If the page sets a Content-Security-Policy, allow that origin in connect-src (and in script-src and frame-src).`,
+        true,
+        void 0,
+        { cause: error51 },
+        "blocked_by_page"
+      );
+    }
+  }
   async #request(input, init, failureCode) {
     try {
       return await this.#fetch(input, init);
@@ -27881,9 +27949,14 @@ async function readStableErrorCode(response) {
   if (!isRecord4(value) || typeof value.code !== "string") return void 0;
   return /^[A-Za-z0-9_.-]{1,64}$/.test(value.code) ? value.code : void 0;
 }
-function clientError(code, message, retryable, status, options) {
+function clientError(code, message, retryable, status, options, serviceCode) {
   return new AssistantClientError(
-    { code, ...status === void 0 ? {} : { status }, retryable },
+    {
+      code,
+      ...status === void 0 ? {} : { status },
+      retryable,
+      ...serviceCode === void 0 ? {} : { serviceCode }
+    },
     message,
     options
   );
@@ -30976,6 +31049,28 @@ function renderMarkdown(text3) {
   });
 }
 
+// src/sign-in-card.ts
+function createSignInCard(options) {
+  const card = document.createElement("div");
+  card.className = "noodle-assistant-card noodle-assistant-sign-in";
+  card.dataset.tool = options.tool;
+  card.setAttribute("role", "status");
+  const heading = document.createElement("p");
+  heading.className = "noodle-assistant-card-heading";
+  heading.textContent = options.labels.heading;
+  card.append(heading);
+  const action = document.createElement("button");
+  action.type = "button";
+  action.className = "noodle-assistant-card-action";
+  action.textContent = options.labels.action;
+  action.addEventListener("click", () => {
+    action.disabled = true;
+    options.onSignIn();
+  });
+  card.append(action);
+  return card;
+}
+
 // src/element-event-controller.ts
 var AssistantElementEventController = class {
   #host;
@@ -31070,6 +31165,15 @@ var AssistantElementEventController = class {
       );
       return;
     }
+    if (name21 === "auth_requested" && typeof data.continuation === "string") {
+      this.#appendSignInRequest(
+        String(data.id ?? ""),
+        String(data.tool ?? "this"),
+        data.continuation,
+        String(data.expiresAt ?? "")
+      );
+      return;
+    }
     if (name21 === "input_requested" && isRecord5(data.requestedSchema)) {
       this.#appendInputRequest(
         String(data.id ?? ""),
@@ -31155,6 +31259,40 @@ var AssistantElementEventController = class {
       })
     );
   }
+  /**
+   * The host application owns the login. This renders the prompt and raises
+   * `assistant-sign-in-requested`; the page signs the visitor in however it already does, then its
+   * backend spends the continuation. Nothing here talks to an identity provider.
+   */
+  #appendSignInRequest(id, tool, continuation, expiresAt) {
+    const messages = this.#host.messages();
+    if (!messages) return;
+    this.#proposalCards.get(id)?.remove();
+    const card = createSignInCard({
+      tool,
+      continuation,
+      expiresAt,
+      labels: {
+        heading: "Sign in to continue",
+        action: "Sign in"
+      },
+      onSignIn: () => this.#host.element.dispatchEvent(
+        new CustomEvent("assistant-sign-in-requested", {
+          detail: { id, tool, continuation, expiresAt },
+          bubbles: true,
+          composed: true
+        })
+      )
+    });
+    messages.append(card);
+    this.#proposalCards.set(id, card);
+    this.#host.revealLatest();
+    this.#host.element.dispatchEvent(
+      new CustomEvent("assistant-sign-in-required", {
+        detail: { id, tool, continuation, expiresAt }
+      })
+    );
+  }
   #appendInputRequest(id, message, requestedSchema) {
     const messages = this.#host.messages();
     if (!messages || !id) return;
@@ -31974,6 +32112,10 @@ var NoodleAssistantElement = class extends HTMLElementBase {
   #appearanceStyleSnapshot = /* @__PURE__ */ new Map();
   #scroll = new AssistantElementScrollController();
   sessionEndpoint = "";
+  /** Public mount: the non-secret embed id `noodle deploy` printed. Mutually exclusive with the above. */
+  embedId = "";
+  /** Only for a dev or self-hosted service; the published snippet needs no origin. */
+  serviceUrl = "";
   get appearance() {
     return this.#hostAppearance;
   }
@@ -32028,6 +32170,8 @@ var NoodleAssistantElement = class extends HTMLElementBase {
   connectedCallback() {
     if (!this.shadowRoot) this.attachShadow({ mode: "open" });
     if (!this.sessionEndpoint) this.sessionEndpoint = this.getAttribute("session-endpoint") ?? "";
+    if (!this.embedId) this.embedId = this.getAttribute("embed-id") ?? "";
+    if (!this.serviceUrl) this.serviceUrl = this.getAttribute("service-url") ?? "";
     this.#media = globalThis.matchMedia?.("(prefers-color-scheme: dark)");
     this.#media?.addEventListener("change", this.#handleSystemTheme);
     document.addEventListener("keydown", this.#handleDocumentKeydown);
@@ -32199,26 +32343,31 @@ var NoodleAssistantElement = class extends HTMLElementBase {
     }
   };
   #ensureClient() {
-    if (this.#client && this.#clientEndpoint === this.sessionEndpoint) return this.#client;
+    const key = sessionSourceKey(this);
+    if (this.#client && this.#clientEndpoint === key) return this.#client;
     this.#client?.abort();
     this.#unsubscribeClient?.();
     this.#sessionBootstrap = void 0;
-    const client = createAssistantClient({
-      sessionEndpoint: this.sessionEndpoint,
+    const behavior = {
       ...this.#context ? { context: this.#context } : {},
       clientContext: browserClientContext,
       ...this.#pageContext ? { pageContext: this.#pageContext } : {},
       ...this.#modelContext ? { modelContext: this.#modelContext } : {}
-    });
+    };
+    const client = this.embedId ? createAssistantClient({
+      embedId: this.embedId,
+      ...this.serviceUrl ? { serviceUrl: this.serviceUrl } : {},
+      ...behavior
+    }) : createAssistantClient({ sessionEndpoint: this.sessionEndpoint, ...behavior });
     this.#client = client;
-    this.#clientEndpoint = this.sessionEndpoint;
+    this.#clientEndpoint = key;
     this.#unsubscribeClient = client.subscribe((event) => {
       if (this.#client === client) this.#handleClientEvent(event);
     });
     return client;
   }
   #primeSession() {
-    if (!this.sessionEndpoint) return;
+    if (!this.sessionEndpoint && !this.embedId) return;
     const client = this.#ensureClient();
     const generation = this.#conversationGeneration;
     this.#setSessionState("loading");
@@ -32342,23 +32491,30 @@ var NoodleAssistantElement = class extends HTMLElementBase {
     }
     const detail = error51 instanceof AssistantClientError ? error51.detail : { code: fallbackCode, retryable: false };
     this.#appendRecoveryError(
-      detail.code === "session_expired" ? this.#appearance.labels.sessionExpired : this.#appearance.labels.unavailable
+      detail.code === "session_expired" ? this.#appearance.labels.sessionExpired : this.#appearance.labels.unavailable,
+      // A spent or switched-off daily budget offers no retry. Reconnecting cannot succeed, and every
+      // open tab trying is exactly the load the cap was set to refuse — so the button goes, not just
+      // the alarming words. A spent *session* keeps it: reconnect mints a fresh one, which is the fix.
+      detail.retryable !== false || detail.serviceCode === void 0
     );
     this.#dispatchError(detail);
   }
-  #appendRecoveryError(message) {
+  #appendRecoveryError(message, offerRetry = true) {
     if (!this.#messages) return;
     this.#messages.querySelector(".conversation-error")?.remove();
     const error51 = document.createElement("section");
     error51.className = "conversation-error";
-    error51.setAttribute("role", "alert");
+    error51.setAttribute("role", offerRetry ? "alert" : "status");
     const text3 = document.createElement("p");
     text3.textContent = message;
-    const retry = document.createElement("button");
-    retry.type = "button";
-    retry.textContent = this.#appearance.labels.reconnect;
-    retry.addEventListener("click", () => this.reconnect());
-    error51.append(text3, retry);
+    error51.append(text3);
+    if (offerRetry) {
+      const retry = document.createElement("button");
+      retry.type = "button";
+      retry.textContent = this.#appearance.labels.reconnect;
+      retry.addEventListener("click", () => this.reconnect());
+      error51.append(retry);
+    }
     this.#messages.append(error51);
     this.#revealLatest();
   }
@@ -32636,7 +32792,9 @@ var NoodleAssistantWithRef = (0, import_react2.forwardRef)(
       element.addEventListener("assistant-event", assistantEvent);
       element.addEventListener("assistant-appearance-warning", appearanceWarning);
       registerNoodleAssistant();
-      element.sessionEndpoint = props.sessionEndpoint;
+      element.sessionEndpoint = props.sessionEndpoint ?? "";
+      element.embedId = props.embedId ?? "";
+      element.serviceUrl = props.serviceUrl ?? "";
       element.appearance = props.appearance;
       element.toggleAttribute("open", props.open === true);
       if (props.context) element.updateContext(props.context);
@@ -32661,12 +32819,16 @@ var NoodleAssistantWithRef = (0, import_react2.forwardRef)(
       props.onSessionExpired,
       props.open,
       props.pageContext,
-      props.sessionEndpoint
+      props.sessionEndpoint,
+      props.embedId,
+      props.serviceUrl
     ]);
     return (0, import_react2.createElement)("noodle-assistant", {
       ref,
       class: props.className,
-      "session-endpoint": props.sessionEndpoint,
+      ...props.sessionEndpoint ? { "session-endpoint": props.sessionEndpoint } : {},
+      ...props.embedId ? { "embed-id": props.embedId } : {},
+      ...props.serviceUrl ? { "service-url": props.serviceUrl } : {},
       ...props.theme ? { theme: props.theme } : {}
     });
   }