@noodleseed/assistant 1.23.0 → 1.25.0

package/dist/index.cjs

@@ -15197,7 +15197,7 @@ __export(src_exports, {
 });
 module.exports = __toCommonJS(src_exports);
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 init_v4();
 var RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
 var JSONRPC_VERSION = "2.0";
@@ -20594,7 +20594,7 @@ var pipelineType = ZodPipeline.create;
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/mini/parse.js
 init_core2();
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-compat.js
 function isZ4Schema(s2) {
   const schema = s2;
   return !!schema._zod;
@@ -20657,7 +20657,7 @@ function getLiteralValue(schema) {
   return void 0;
 }
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/experimental/tasks/interfaces.js
 function isTerminal(status) {
   return status === "completed" || status === "failed" || status === "cancelled";
 }
@@ -20665,7 +20665,7 @@ function isTerminal(status) {
 // ../../node_modules/.pnpm/zod-to-json-schema@3.25.2_zod@4.4.3/node_modules/zod-to-json-schema/dist/esm/parsers/string.js
 var ALPHA_NUMERIC = new Set("ABCDEFGHIJKLMNOPQRSTUVXYZabcdefghijklmnopqrstuvxyz0123456789");
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/server/zod-json-schema-compat.js
 function getMethodLiteral(schema) {
   const shape = getObjectShape(schema);
   const methodSchema = shape?.method;
@@ -20686,7 +20686,7 @@ function parseWithCompat(schema, data) {
   return result.data;
 }
 
-// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
+// ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_supports-color@7.2.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 var DEFAULT_REQUEST_TIMEOUT_MSEC = 6e4;
 var Protocol = class {
   constructor(_options) {
@@ -21798,6 +21798,15 @@ var E = class {
   sessionId;
   setProtocolVersion;
 };
+function AZ(X2) {
+  if (!X2) return "";
+  let Y = [];
+  if (X2.camera) Y.push("camera");
+  if (X2.microphone) Y.push("microphone");
+  if (X2.geolocation) Y.push("geolocation");
+  if (X2.clipboardWrite) Y.push("clipboard-write");
+  return Y.join("; ");
+}
 var KX = [j];
 var DX = class extends _ {
   _client;
@@ -22068,34 +22077,131 @@ function GX(X2, Y) {
   return JSON.stringify(X2) === JSON.stringify(Y);
 }
 
+// src/app-sandbox-policy.ts
+var MAX_DOMAINS_PER_DIRECTIVE = 32;
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isLoopback(hostname3) {
+  return hostname3 === "localhost" || hostname3 === "127.0.0.1" || hostname3 === "[::1]";
+}
+function normalizeDomain(value, connect) {
+  if (value.length > 512 || /[;\r\n'"\s]/u.test(value)) return void 0;
+  try {
+    const parsed = new URL(value);
+    const secure = parsed.protocol === "https:" || connect && parsed.protocol === "wss:";
+    const local = isLoopback(parsed.hostname) && (parsed.protocol === "http:" || connect && parsed.protocol === "ws:");
+    if (!secure && !local) return void 0;
+    if (parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash) {
+      return void 0;
+    }
+    return parsed.origin;
+  } catch {
+    return void 0;
+  }
+}
+function normalizeDomains(values, connect) {
+  const normalized = [
+    ...new Set(
+      values.slice(0, MAX_DOMAINS_PER_DIRECTIVE).map((value) => typeof value === "string" ? normalizeDomain(value, connect) : void 0).filter((value) => value !== void 0)
+    )
+  ];
+  return normalized;
+}
+function resolveAssistantAppSandboxPolicy(resourceMeta) {
+  if (!isRecord(resourceMeta)) return {};
+  const rawCsp = resourceMeta.csp;
+  const csp = isRecord(rawCsp) ? {
+    ...Array.isArray(rawCsp.connectDomains) ? { connectDomains: normalizeDomains(rawCsp.connectDomains, true) } : {},
+    ...Array.isArray(rawCsp.resourceDomains) ? { resourceDomains: normalizeDomains(rawCsp.resourceDomains, false) } : {},
+    ...Array.isArray(rawCsp.frameDomains) ? { frameDomains: normalizeDomains(rawCsp.frameDomains, false) } : {},
+    ...Array.isArray(rawCsp.baseUriDomains) ? { baseUriDomains: normalizeDomains(rawCsp.baseUriDomains, false) } : {}
+  } : void 0;
+  const rawPermissions = resourceMeta.permissions;
+  const permissions = isRecord(rawPermissions) ? {
+    ...isRecord(rawPermissions.camera) ? { camera: {} } : {},
+    ...isRecord(rawPermissions.microphone) ? { microphone: {} } : {},
+    ...isRecord(rawPermissions.geolocation) ? { geolocation: {} } : {},
+    ...isRecord(rawPermissions.clipboardWrite) ? { clipboardWrite: {} } : {}
+  } : void 0;
+  const allowAttribute = AZ(permissions);
+  return {
+    ...csp === void 0 ? {} : { csp },
+    ...permissions === void 0 ? {} : { permissions },
+    ...allowAttribute ? { allowAttribute } : {}
+  };
+}
+function assistantAppSandboxUrl(sandboxUrl, policy) {
+  const parsed = new URL(sandboxUrl);
+  if (policy.csp) parsed.searchParams.set("csp", JSON.stringify(policy.csp));
+  const parentOrigin = globalThis.location?.origin;
+  if (parentOrigin && parentOrigin !== "null") {
+    parsed.hash = new URLSearchParams({ parentOrigin }).toString();
+  }
+  return parsed.href;
+}
+
 // src/app-host.ts
-var PROXY_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><script>
-let inner;
+var PROXY_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>
+let inner,loaded=false;
+if(self===top)throw new Error('The assistant sandbox relay must be embedded');
+const standardSandbox='allow-scripts allow-same-origin allow-forms';
+const rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');
+let expectedParentOrigin;
+try{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}
+const parentTarget=expectedParentOrigin||'*';
+const ownOrigin=self.origin;
 const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
 // Re-announce until the host acknowledges with the resource: when this document is hosted
 // cross-origin, the first announcement can arrive before the host's load handler is listening.
-const announce=setInterval(()=>parent.postMessage(ready,'*'),120);
+const announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);
 setTimeout(()=>clearInterval(announce),15000);
 addEventListener('message',(event)=>{
   if(event.source===parent){
+    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;
     const message=event.data;
     if(message?.method==='ui/notifications/sandbox-resource-ready'){
       clearInterval(announce);
-      if(inner)return;
+      if(loaded)return;
+      loaded=true;
+      const requestedSandbox=message.params?.sandbox;
       inner=document.createElement('iframe');
-      inner.setAttribute('sandbox',message.params?.sandbox||'allow-scripts');
+      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');
       inner.setAttribute('referrerpolicy','no-referrer');
-      inner.srcdoc=String(message.params?.html||'');
-      document.body.replaceChildren(inner);
+      const permissions=message.params?.permissions;
+      const allow=[];
+      if(permissions?.camera)allow.push('camera');
+      if(permissions?.microphone)allow.push('microphone');
+      if(permissions?.geolocation)allow.push('geolocation');
+      if(permissions?.clipboardWrite)allow.push('clipboard-write');
+      if(allow.length)inner.setAttribute('allow',allow.join('; '));
+      document.body.append(inner);
+      let html=String(message.params?.html||'');
+      const csp=message.params?.csp;
+      if(csp&&typeof csp==='object'){
+        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;
+        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];
+        const suffix=resources.length?' '+resources.join(' '):'';
+        const policy=["default-src 'none'","script-src 'unsafe-inline'"+suffix,"style-src 'unsafe-inline'"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,"'none'"),'frame-src '+list(csp.frameDomains,"'none'"),"object-src 'none'","form-action 'none'",'base-uri '+list(csp.baseUriDomains,"'none'")].join('; ');
+        const meta='<meta http-equiv="Content-Security-Policy" content="'+policy.replace(/&/g,'&amp;').replace(/"/g,'&quot;')+'">';
+        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);
+        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;
+      }
+      try{
+        const doc=inner.contentDocument||inner.contentWindow?.document;
+        if(!doc)throw new Error('document unavailable');
+        doc.open();doc.write(html);doc.close();
+      }catch{inner.srcdoc=html}
       return;
     }
     inner?.contentWindow?.postMessage(message,'*');
   } else if(inner && event.source===inner.contentWindow) {
-    parent.postMessage(event.data,'*');
+    if(event.origin!==ownOrigin)return;
+    parent.postMessage(event.data,parentTarget);
   }
 });
-parent.postMessage(ready,'*');
-</script>`;
+parent.postMessage(ready,parentTarget);
+</script></body>`;
 function isAllowedAppLink(value, allowedDomains, baseUrl) {
   try {
     const parsed = new URL(value, baseUrl);
@@ -22122,16 +22228,42 @@ function createAssistantAppHostContext(theme, allowFullscreen = false, displayMo
 }
 var APP_RENDER_TIMEOUT_MS = 1e4;
 var APP_TEARDOWN_TIMEOUT_MS = 1e3;
+var STANDARD_SANDBOX = "allow-scripts allow-same-origin allow-forms";
 var mountedApps = /* @__PURE__ */ new WeakMap();
 function resolveSandboxUrl(value) {
   if (!value) return void 0;
   try {
     const parsed = new URL(value);
-    return parsed.protocol === "https:" || parsed.protocol === "http:" ? parsed.href : void 0;
+    const loopback = parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1" || parsed.hostname === "[::1]";
+    const permittedProtocol = parsed.protocol === "https:" || parsed.protocol === "http:" && loopback;
+    const embedderOrigin = globalThis.location?.origin;
+    if (!permittedProtocol || embedderOrigin && embedderOrigin !== "null" && parsed.origin === embedderOrigin) {
+      return void 0;
+    }
+    return parsed.href;
   } catch {
     return void 0;
   }
 }
+function copyAppJson(value, depth = 0) {
+  if (depth > 64) throw new Error("App payload nesting exceeds the host limit");
+  if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) throw new Error("App payload numbers must be finite");
+    return value;
+  }
+  if (Array.isArray(value)) return value.map((entry) => copyAppJson(entry, depth + 1));
+  const copied = {};
+  for (const [key, entry] of Object.entries(value)) {
+    Object.defineProperty(copied, key, {
+      value: copyAppJson(entry, depth + 1),
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  }
+  return copied;
+}
 function mountAssistantApp(detail, actions, options = {}) {
   if (!detail.html) return void 0;
   const card = document.createElement("section");
@@ -22152,16 +22284,25 @@ function mountAssistantApp(detail, actions, options = {}) {
   const frame = document.createElement("iframe");
   frame.className = "noodle-app-frame";
   frame.title = detail.title ?? detail.tool;
-  frame.setAttribute("sandbox", "allow-scripts");
+  const policy = resolveAssistantAppSandboxPolicy(detail.resourceMeta);
   frame.setAttribute("referrerpolicy", "no-referrer");
   const sandboxUrl = resolveSandboxUrl(options.sandboxUrl);
-  if (sandboxUrl) frame.src = sandboxUrl;
-  else frame.srcdoc = PROXY_DOCUMENT;
+  const appliedPolicy = sandboxUrl ? policy : { csp: policy.csp ?? {} };
+  if (sandboxUrl) {
+    frame.setAttribute("sandbox", STANDARD_SANDBOX);
+    if (policy.allowAttribute) frame.setAttribute("allow", policy.allowAttribute);
+    frame.src = assistantAppSandboxUrl(sandboxUrl, policy);
+  } else {
+    frame.setAttribute("sandbox", "allow-scripts");
+    frame.srcdoc = PROXY_DOCUMENT;
+  }
   card.append(frame);
   let mountedBridge;
   let mountedTransport;
   let destroyed = false;
   let initialized = false;
+  let renderFailed = false;
+  let renderStage = "sandbox_load";
   let currentTheme = actions.theme;
   let displayMode = "inline";
   let hostContext = createAssistantAppHostContext(
@@ -22170,6 +22311,15 @@ function mountAssistantApp(detail, actions, options = {}) {
     displayMode
   );
   let destroyPromise;
+  let transportClosePromise;
+  let renderTimer;
+  const closeTransport = () => {
+    if (transportClosePromise) return transportClosePromise;
+    const closing = mountedTransport?.close().catch(() => {
+    }) ?? Promise.resolve();
+    transportClosePromise = closing;
+    return closing;
+  };
   const applyDisplayMode = (requestedMode) => {
     displayMode = requestedMode === "fullscreen" && options.allowFullscreen === true ? "fullscreen" : "inline";
     card.toggleAttribute("data-fullscreen", displayMode === "fullscreen");
@@ -22187,18 +22337,26 @@ function mountAssistantApp(detail, actions, options = {}) {
     applyDisplayMode("inline");
     frame.focus();
   });
-  const renderTimer = setTimeout(() => {
-    if (initialized || !frame.isConnected) return;
+  const showRenderFailure = (code) => {
+    if (code === "view_render_timeout" && initialized || destroyed || renderFailed || !frame.isConnected)
+      return;
+    renderFailed = true;
+    clearTimeout(renderTimer);
     const note = document.createElement("div");
     note.className = "noodle-app-fallback";
     note.textContent = "This app view could not be displayed.";
     frame.replaceWith(note);
-    options.onRenderFailure?.({ code: "view_render_timeout", retryable: false });
+    options.onRenderFailure?.({ code, retryable: false, stage: renderStage });
+    void closeTransport();
+  };
+  renderTimer = setTimeout(() => {
+    showRenderFailure("view_render_timeout");
   }, APP_RENDER_TIMEOUT_MS);
   frame.addEventListener(
     "load",
     () => {
-      if (destroyed) return;
+      if (destroyed || renderFailed) return;
+      renderStage = "sandbox_proxy";
       const target = frame.contentWindow;
       if (!target) return;
       const bridge = new DX(
@@ -22209,7 +22367,11 @@ function mountAssistantApp(detail, actions, options = {}) {
           serverTools: {},
           serverResources: {},
           updateModelContext: { text: {}, structuredContent: {} },
-          message: { text: {} }
+          message: { text: {} },
+          sandbox: {
+            ...appliedPolicy.csp === void 0 ? {} : { csp: appliedPolicy.csp },
+            ...appliedPolicy.permissions === void 0 ? {} : { permissions: appliedPolicy.permissions }
+          }
         },
         {
           hostContext
@@ -22217,13 +22379,15 @@ function mountAssistantApp(detail, actions, options = {}) {
       );
       mountedBridge = bridge;
       bridge.onsandboxready = () => {
-        if (destroyed) return;
+        if (destroyed || renderFailed) return;
+        renderStage = "app_initialize";
         const current = options.getDetail?.() ?? detail;
         void bridge.sendSandboxResourceReady({
           html: current.html,
-          sandbox: "allow-scripts",
-          ...current.resourceMeta ?? {}
-        });
+          sandbox: sandboxUrl ? STANDARD_SANDBOX : "allow-scripts",
+          ...appliedPolicy.csp === void 0 ? {} : { csp: appliedPolicy.csp },
+          ...appliedPolicy.permissions === void 0 ? {} : { permissions: appliedPolicy.permissions }
+        }).catch(() => showRenderFailure("view_bridge_error"));
       };
       bridge.onsizechange = ({ height }) => {
         if (destroyed) return;
@@ -22287,21 +22451,30 @@ function mountAssistantApp(detail, actions, options = {}) {
         return await actions.client.requestApp("resources/read", params);
       };
       bridge.oninitialized = () => {
-        if (destroyed) return;
-        initialized = true;
-        clearTimeout(renderTimer);
-        bridge.setHostContext(hostContext);
-        const current = options.getDetail?.() ?? detail;
-        void bridge.sendToolInput({ arguments: current.arguments ?? {} });
-        void bridge.sendToolResult({
-          content: [{ type: "text", text: JSON.stringify(current.result) }],
-          ...typeof current.result === "object" && current.result !== null && !Array.isArray(current.result) ? { structuredContent: current.result } : {}
-        });
+        if (destroyed || renderFailed) return;
+        try {
+          const current = options.getDetail?.() ?? detail;
+          const copiedArguments = copyAppJson(current.arguments ?? {});
+          const copiedResult = copyAppJson(current.result);
+          const argumentsRecord = typeof copiedArguments === "object" && copiedArguments !== null && !Array.isArray(copiedArguments) ? copiedArguments : {};
+          initialized = true;
+          clearTimeout(renderTimer);
+          bridge.setHostContext(hostContext);
+          void Promise.all([
+            bridge.sendToolInput({ arguments: argumentsRecord }),
+            bridge.sendToolResult({
+              content: [{ type: "text", text: JSON.stringify(copiedResult) }],
+              ...typeof copiedResult === "object" && copiedResult !== null && !Array.isArray(copiedResult) ? { structuredContent: copiedResult } : {}
+            })
+          ]).catch(() => showRenderFailure("view_bridge_error"));
+        } catch {
+          showRenderFailure("view_bridge_error");
+        }
       };
       const transport = new E(target, target);
       mountedTransport = transport;
       void bridge.connect(transport).catch(() => {
-        void destroy();
+        showRenderFailure("view_bridge_error");
       });
     },
     { once: true }
@@ -22327,8 +22500,7 @@ function mountAssistantApp(detail, actions, options = {}) {
         }
       } catch {
       }
-      await mountedTransport?.close().catch(() => {
-      });
+      await closeTransport();
       card.remove();
       mountedApps.delete(card);
     })();
@@ -22448,13 +22620,19 @@ var DEFAULT_APPEARANCE = {
     copy: "Copy",
     newMessages: "New messages",
     reconnect: "Reconnect",
+    newConversation: "New conversation",
     retry: "Try again",
     unavailable: "The assistant is temporarily unavailable.",
     sessionExpired: "Your assistant session expired. Reopen it to continue.",
     sessionIdle: "Assistant session idle",
     sessionLoading: "Assistant session loading",
     sessionReady: "Assistant session ready",
-    sessionError: "Assistant session unavailable"
+    sessionError: "Assistant session unavailable",
+    signInHeading: "Sign in to continue",
+    signInBody: "",
+    signInAction: "Sign in",
+    // Empty means no sign-up button: authoring the label is the opt-in (ADR 0201, 2026-08-22).
+    signUpAction: ""
   },
   presentation: {
     panel: {
@@ -27094,6 +27272,9 @@ var AssistantChatStateStore = class {
           })
         );
         return;
+      case "auth_requested":
+        this.#writeStandaloneData(() => this.#writeData("sign-in", event.data.id, event.data));
+        return;
       case "tool_completed":
         this.#writeData("tool-result", event.data.id, event.data);
         return;
@@ -27318,14 +27499,14 @@ function toChatError(error51) {
 }
 function readErrorDetail(error51) {
   const detail = Reflect.get(error51, "detail");
-  if (!isRecord(detail) || typeof detail.code !== "string") return void 0;
+  if (!isRecord2(detail) || typeof detail.code !== "string") return void 0;
   return {
     code: detail.code,
     ...typeof detail.status === "number" ? { status: detail.status } : {},
     retryable: detail.retryable === true
   };
 }
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -27352,13 +27533,14 @@ var AssistantClientError = class extends Error {
   }
 };
 function parseSession(value) {
-  if (!isRecord2(value) || !isRecord2(value.endpoints)) {
+  if (!isRecord3(value) || !isRecord3(value.endpoints)) {
     throw clientError("session_failed", "Assistant session response is invalid", true);
   }
   const interactions = value.endpoints.interactions;
   const apps = value.endpoints.apps;
   const sandbox = value.endpoints.sandbox;
-  if (typeof value.token !== "string" || typeof value.expiresAt !== "string" || typeof value.endpoints.turns !== "string" || typeof value.endpoints.toolConfirmations !== "string" || interactions !== void 0 && typeof interactions !== "string" || apps !== void 0 && typeof apps !== "string" || sandbox !== void 0 && typeof sandbox !== "string") {
+  const transcript = value.endpoints.transcript;
+  if (typeof value.token !== "string" || typeof value.expiresAt !== "string" || typeof value.endpoints.turns !== "string" || typeof value.endpoints.toolConfirmations !== "string" || interactions !== void 0 && typeof interactions !== "string" || apps !== void 0 && typeof apps !== "string" || sandbox !== void 0 && typeof sandbox !== "string" || transcript !== void 0 && typeof transcript !== "string") {
     throw clientError("session_failed", "Assistant session response is invalid", true);
   }
   return {
@@ -27369,13 +27551,14 @@ function parseSession(value) {
       toolConfirmations: value.endpoints.toolConfirmations,
       ...typeof interactions === "string" ? { interactions } : {},
       ...typeof apps === "string" ? { apps } : {},
-      ...typeof sandbox === "string" ? { sandbox } : {}
+      ...typeof sandbox === "string" ? { sandbox } : {},
+      ...typeof transcript === "string" ? { transcript } : {}
     },
-    ...isRecord2(value.configuration) ? { configuration: value.configuration } : {},
-    ...isRecord2(value.resume) && typeof value.resume.tool === "string" ? { resume: { tool: value.resume.tool } } : {}
+    ...isRecord3(value.configuration) ? { configuration: value.configuration } : {},
+    ...isRecord3(value.resume) && typeof value.resume.tool === "string" ? { resume: { tool: value.resume.tool } } : {}
   };
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readStableErrorCode(response) {
@@ -27385,7 +27568,7 @@ async function readStableErrorCode(response) {
   } catch {
     return void 0;
   }
-  if (!isRecord2(value) || typeof value.code !== "string") return void 0;
+  if (!isRecord3(value) || typeof value.code !== "string") return void 0;
   return /^[A-Za-z0-9_.-]{1,64}$/.test(value.code) ? value.code : void 0;
 }
 function clientError(code, message, retryable, status, options, serviceCode) {
@@ -27416,12 +27599,12 @@ function toAssistantClientEvent(event) {
       }
       break;
     case "tool_proposed":
-      if (hasString(value, "id") && hasString(value, "tool") && hasOptionalString(value.title) && hasOptionalString(value.description) && hasOptionalJson(value.arguments) && (value.reviewSchema === void 0 || isRecord3(value.reviewSchema)) && hasOptionalString(value.expiresAt) && (value.requiresConfirmation === void 0 || value.requiresConfirmation === true) && hasOptionalTurnId(value)) {
+      if (hasString(value, "id") && hasString(value, "tool") && hasOptionalString(value.title) && hasOptionalString(value.description) && hasOptionalJson(value.arguments) && (value.reviewSchema === void 0 || isRecord4(value.reviewSchema)) && hasOptionalString(value.expiresAt) && (value.requiresConfirmation === void 0 || value.requiresConfirmation === true) && hasOptionalTurnId(value)) {
         return event;
       }
       break;
     case "input_requested":
-      if (hasString(value, "id") && hasString(value, "message") && isRecord3(value.requestedSchema) && hasString(value, "expiresAt") && hasOptionalTurnId(value)) {
+      if (hasString(value, "id") && hasString(value, "message") && isRecord4(value.requestedSchema) && hasString(value, "expiresAt") && hasOptionalTurnId(value)) {
         return event;
       }
       break;
@@ -27465,7 +27648,7 @@ function toAssistantClientEvent(event) {
   return { event: "unrecognized", data: { name: event.event, payload: value } };
 }
 function isViewAvailableDetail(value) {
-  return hasString(value, "id") && hasString(value, "tool") && typeof value.resourceUri === "string" && value.resourceUri.startsWith("ui://") && hasOptionalString(value.title) && (value.replayed === void 0 || value.replayed === true) && isJsonValue(value.result, 0) && hasOptionalJson(value.arguments) && hasOptionalString(value.html) && (value.resourceMeta === void 0 || isRecord3(value.resourceMeta)) && (value.allowedOpenDomains === void 0 || Array.isArray(value.allowedOpenDomains) && value.allowedOpenDomains.every(isHttpsUrl)) && hasOptionalTurnId(value);
+  return hasString(value, "id") && hasString(value, "tool") && typeof value.resourceUri === "string" && value.resourceUri.startsWith("ui://") && hasOptionalString(value.title) && (value.replayed === void 0 || value.replayed === true) && isJsonValue(value.result, 0) && hasOptionalJson(value.arguments) && hasOptionalString(value.html) && (value.resourceMeta === void 0 || isRecord4(value.resourceMeta)) && (value.allowedOpenDomains === void 0 || Array.isArray(value.allowedOpenDomains) && value.allowedOpenDomains.every(isHttpsUrl)) && hasOptionalTurnId(value);
 }
 function isHttpsUrl(value) {
   if (typeof value !== "string") return false;
@@ -27498,11 +27681,11 @@ function isJsonValue(value, depth) {
   if (Array.isArray(value)) {
     return value.length <= 256 && value.every((entry) => isJsonValue(entry, depth + 1));
   }
-  if (!isRecord3(value)) return false;
+  if (!isRecord4(value)) return false;
   const entries2 = Object.entries(value);
   return entries2.length <= 256 && entries2.every(([, entry]) => isJsonValue(entry, depth + 1));
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -27524,6 +27707,43 @@ function sessionSourceKey(options) {
   return `${options.embedId ?? ""}|${options.serviceUrl ?? ""}|${options.sessionEndpoint ?? ""}`;
 }
 
+// src/transcript-replay.ts
+function parseTranscriptEntries(value) {
+  if (typeof value !== "object" || value === null) return [];
+  const entries2 = value.entries;
+  if (!Array.isArray(entries2)) return [];
+  const parsed = [];
+  for (const entry of entries2) {
+    const { role, text: text3 } = entry ?? {};
+    if (role !== "user" && role !== "assistant" || typeof text3 !== "string") return [];
+    parsed.push({ role, text: text3 });
+  }
+  return parsed;
+}
+function transcriptReplayEvents(entries2) {
+  const events = [];
+  let open = false;
+  let awaitingAssistant = false;
+  for (const entry of entries2) {
+    if (entry.role === "user") {
+      if (open) events.push({ event: "message_completed", data: {} });
+      events.push({ event: "message_started", data: { message: entry.text } });
+      open = true;
+      awaitingAssistant = true;
+      continue;
+    }
+    if (!open || !awaitingAssistant) {
+      if (open) events.push({ event: "message_completed", data: {} });
+      events.push({ event: "resume_started", data: { tool: "" } });
+      open = true;
+    }
+    events.push({ event: "content", data: { delta: entry.text } });
+    awaitingAssistant = false;
+  }
+  if (open) events.push({ event: "message_completed", data: {} });
+  return events;
+}
+
 // src/transport.ts
 var AssistantTransportError = class extends Error {
   code = "invalid_response";
@@ -27632,15 +27852,15 @@ function parseFrame(frame) {
   if (event === "done" && !isValidDonePayload(parsed)) {
     throw invalidStream("assistant event stream contained an invalid done event");
   }
-  return { event, data: isRecord4(parsed) ? parsed : { value: parsed } };
+  return { event, data: isRecord5(parsed) ? parsed : { value: parsed } };
 }
 function normalizeLineEndings(input) {
   return input.replaceAll("\r\n", "\n").replaceAll("\r", "\n");
 }
 function isValidDonePayload(value) {
-  return isRecord4(value) && (value.turnId === void 0 || typeof value.turnId === "string" && value.turnId.length > 0);
+  return isRecord5(value) && (value.turnId === void 0 || typeof value.turnId === "string" && value.turnId.length > 0);
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function invalidStream(message, cause) {
@@ -27694,6 +27914,12 @@ var DefaultAssistantClient = class {
     await this.#singleFlight(async (signal) => {
       if (this.#session) return;
       const session = await this.#createSession(signal);
+      if (this.#source.kind !== "public" && session.endpoints.transcript) {
+        try {
+          await this.#replayTranscript(session, signal);
+        } catch {
+        }
+      }
       if (session.resume) {
         try {
           await this.#runChatOperation(signal, () => this.#resumeTurn(session, signal));
@@ -27702,6 +27928,26 @@ var DefaultAssistantClient = class {
       }
     });
   }
+  /** Fetch and re-emit the bounded visible transcript through the standard event path. */
+  async #replayTranscript(session, signal) {
+    const endpoint = session.endpoints.transcript;
+    if (!endpoint) return;
+    const response = await this.#request(
+      endpoint,
+      {
+        method: "POST",
+        headers: authorizedHeaders(session.token, "application/json"),
+        body: "{}",
+        signal
+      },
+      "turn_failed"
+    );
+    if (!response.ok) return;
+    for (const event of transcriptReplayEvents(parseTranscriptEntries(await response.json()))) {
+      this.#emit(event);
+      if (event.event === "message_completed") await this.#chat.flush();
+    }
+  }
   /** POST the one-shot resume trigger; a 409 means nothing was pending, which renders as silence. */
   async #resumeTurn(session, signal) {
     const response = await this.#request(
@@ -28133,10 +28379,10 @@ function authorizedHeaders(token, accept) {
   };
 }
 function parseAppInteraction(value) {
-  if (!isRecord2(value) || !isRecord2(value.interaction)) return void 0;
+  if (!isRecord3(value) || !isRecord3(value.interaction)) return void 0;
   const event = value.interaction.event;
   const data = value.interaction.data;
-  if (event !== "tool_proposed" && event !== "input_requested" || !isRecord2(data)) {
+  if (event !== "tool_proposed" && event !== "input_requested" || !isRecord3(data)) {
     return void 0;
   }
   const parsed = toAssistantClientEvent({ event, data });
@@ -28157,6 +28403,27 @@ function appInteractionStopped(action) {
   };
 }
 
+// src/conversation-recovery.ts
+function appendConversationRecovery(input) {
+  if (!input.messages) return;
+  input.messages.querySelector(".conversation-error")?.remove();
+  const error51 = document.createElement("section");
+  error51.className = "conversation-error";
+  error51.setAttribute("role", input.action ? "alert" : "status");
+  const text3 = document.createElement("p");
+  text3.textContent = input.message;
+  error51.append(text3);
+  if (input.action) {
+    const button2 = document.createElement("button");
+    button2.type = "button";
+    button2.textContent = input.action.label;
+    button2.addEventListener("click", input.action.run);
+    error51.append(button2);
+  }
+  input.messages.append(error51);
+  input.revealLatest();
+}
+
 // src/input-request-card.ts
 function createInputRequestCard(options) {
   const card = document.createElement("section");
@@ -31247,22 +31514,46 @@ function renderMarkdown(text3) {
 // src/sign-in-card.ts
 function createSignInCard(options) {
   const card = document.createElement("div");
-  card.className = "noodle-assistant-card noodle-assistant-sign-in";
+  card.className = "tool-proposal sign-in";
   card.dataset.tool = options.tool;
   card.setAttribute("role", "status");
-  const heading = document.createElement("p");
-  heading.className = "noodle-assistant-card-heading";
+  const badge = document.createElement("span");
+  badge.className = "sign-in-badge";
+  badge.setAttribute("aria-hidden", "true");
+  card.append(badge);
+  const heading = document.createElement("h3");
   heading.textContent = options.labels.heading;
   card.append(heading);
-  const action = document.createElement("button");
-  action.type = "button";
-  action.className = "noodle-assistant-card-action";
-  action.textContent = options.labels.action;
-  action.addEventListener("click", () => {
-    action.disabled = true;
-    options.onSignIn();
-  });
-  card.append(action);
+  if (options.labels.body) {
+    const body = document.createElement("p");
+    body.className = "proposal-description";
+    body.textContent = options.labels.body;
+    card.append(body);
+  }
+  const actions = document.createElement("div");
+  actions.className = "proposal-actions";
+  const buttons = [];
+  const act = (intent) => {
+    for (const button2 of buttons) button2.disabled = true;
+    options.onAction(intent);
+  };
+  const signIn = document.createElement("button");
+  signIn.type = "button";
+  signIn.className = "sign-in-action";
+  signIn.textContent = options.labels.action;
+  signIn.addEventListener("click", () => act("sign-in"));
+  buttons.push(signIn);
+  actions.append(signIn);
+  if (options.labels.signUpAction) {
+    const signUp = document.createElement("button");
+    signUp.type = "button";
+    signUp.className = "sign-up-action";
+    signUp.textContent = options.labels.signUpAction;
+    signUp.addEventListener("click", () => act("sign-up"));
+    buttons.push(signUp);
+    actions.append(signUp);
+  }
+  card.append(actions);
   return card;
 }
 
@@ -31290,7 +31581,7 @@ var AssistantElementEventController = class {
     if (event.event === "unrecognized") return;
     const { event: name21, data } = event;
     if (name21 === "session_started") {
-      if (isRecord5(data.configuration)) {
+      if (isRecord6(data.configuration)) {
         this.#host.applyConfiguration(data.configuration);
       }
       this.#host.element.dispatchEvent(
@@ -31358,10 +31649,10 @@ var AssistantElementEventController = class {
       this.#appendToolProposal(
         String(data.id ?? ""),
         String(data.tool ?? "action"),
-        isRecord5(data.arguments) ? data.arguments : void 0,
+        isRecord6(data.arguments) ? data.arguments : void 0,
         typeof data.title === "string" ? data.title : void 0,
         "description" in data && typeof data.description === "string" ? data.description : void 0,
-        "reviewSchema" in data && isRecord5(data.reviewSchema) ? data.reviewSchema : void 0
+        "reviewSchema" in data && isRecord6(data.reviewSchema) ? data.reviewSchema : void 0
       );
       return;
     }
@@ -31374,7 +31665,7 @@ var AssistantElementEventController = class {
       );
       return;
     }
-    if (name21 === "input_requested" && isRecord5(data.requestedSchema)) {
+    if (name21 === "input_requested" && isRecord6(data.requestedSchema)) {
       this.#appendInputRequest(
         String(data.id ?? ""),
         String(data.message ?? "More information is required"),
@@ -31468,17 +31759,20 @@ var AssistantElementEventController = class {
     const messages = this.#host.messages();
     if (!messages) return;
     this.#proposalCards.get(id)?.remove();
+    const labels = this.#host.labels();
     const card = createSignInCard({
       tool,
       signInTicket,
       expiresAt,
       labels: {
-        heading: "Sign in to continue",
-        action: "Sign in"
+        heading: labels.signInHeading,
+        body: labels.signInBody,
+        action: labels.signInAction,
+        signUpAction: labels.signUpAction
       },
-      onSignIn: () => this.#host.element.dispatchEvent(
+      onAction: (intent) => this.#host.element.dispatchEvent(
         new CustomEvent("assistant-sign-in-requested", {
-          detail: { id, tool, signInTicket, expiresAt },
+          detail: { id, tool, signInTicket, expiresAt, intent },
           bubbles: true,
           composed: true
         })
@@ -31542,7 +31836,7 @@ var AssistantElementEventController = class {
     this.#host.revealLatest();
   }
 };
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -31874,8 +32168,10 @@ var ASSISTANT_ELEMENT_STYLES = `<style>
   .proposal-details .proposal-arguments { margin-top: 4px; }
   .proposal-actions { display: flex; flex-wrap: wrap; gap: 8px; justify-content: end; }
   .tool-proposal button { min-height: 44px; padding: 9px 16px; border: 1px solid var(--ns-assistant-secondary-button-border, transparent); border-radius: var(--ns-assistant-button-radius, var(--ns-assistant-default-button-radius)); color: var(--ns-assistant-secondary-button-text, var(--ns-assistant-text, var(--ns-assistant-default-text))); background: var(--ns-assistant-secondary-button, var(--ns-assistant-elevated, var(--ns-assistant-default-elevated))); cursor: pointer; font-weight: 600; }
-  .tool-proposal .proposal-accept { color: var(--ns-assistant-primary-button-text, var(--ns-assistant-accent-text, var(--ns-assistant-default-accent-text))); background: var(--ns-assistant-primary-button, var(--ns-assistant-accent, var(--ns-assistant-default-accent))); border-color: var(--ns-assistant-primary-button-border, transparent); }
+  .tool-proposal .proposal-accept, .tool-proposal .sign-in-action { color: var(--ns-assistant-primary-button-text, var(--ns-assistant-accent-text, var(--ns-assistant-default-accent-text))); background: var(--ns-assistant-primary-button, var(--ns-assistant-accent, var(--ns-assistant-default-accent))); border-color: var(--ns-assistant-primary-button-border, transparent); }
   .tool-proposal button:disabled { opacity: .55; cursor: not-allowed; }
+  .sign-in .sign-in-badge { display: grid; place-items: center; width: 38px; height: 38px; border-radius: 999px; color: var(--ns-assistant-accent, var(--ns-assistant-default-accent)); background: color-mix(in srgb, var(--ns-assistant-accent, var(--ns-assistant-default-accent)) 12%, transparent); }
+  .sign-in .sign-in-badge::before { content: ''; width: 19px; height: 19px; background: currentColor; -webkit-mask: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M12 12a4.5 4.5 0 1 0 0-9 4.5 4.5 0 0 0 0 9Zm0 2.2c-4.3 0-7.8 2.6-7.8 5.8v1h15.6v-1c0-3.2-3.5-5.8-7.8-5.8Z'/%3E%3C/svg%3E") center / contain no-repeat; mask: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath d='M12 12a4.5 4.5 0 1 0 0-9 4.5 4.5 0 0 0 0 9Zm0 2.2c-4.3 0-7.8 2.6-7.8 5.8v1h15.6v-1c0-3.2-3.5-5.8-7.8-5.8Z'/%3E%3C/svg%3E") center / contain no-repeat; }
   .tool-proposal button { min-height: 45px; }
   .tool-result { display: grid; gap: 10px; margin: 8px 0 16px; padding: 16px; border: 1px solid var(--ns-assistant-divider, var(--ns-assistant-default-divider)); border-radius: var(--ns-assistant-card-radius, 14px); background: var(--ns-assistant-assistant-message, var(--ns-assistant-elevated, var(--ns-assistant-default-elevated))); }
   .tool-result > strong { color: var(--ns-assistant-success, var(--ns-assistant-default-success)); }
@@ -32843,33 +33139,28 @@ var NoodleAssistantElement = class extends HTMLElementBase {
       this.#setSessionState("error");
     }
     const detail = error51 instanceof AssistantClientError ? error51.detail : { code: fallbackCode, retryable: false };
-    this.#appendRecoveryError(
-      detail.code === "session_expired" ? this.#appearance.labels.sessionExpired : this.#appearance.labels.unavailable,
+    const startNewConversation = detail.serviceCode === "session_turn_budget_exhausted";
+    const reconnect = detail.retryable !== false || detail.serviceCode === void 0;
+    const recoveryAction = startNewConversation ? {
+      label: this.#appearance.labels.newConversation,
+      run: () => this.#startNewConversation()
+    } : reconnect ? { label: this.#appearance.labels.reconnect, run: () => this.reconnect() } : void 0;
+    appendConversationRecovery({
+      messages: this.#messages,
+      message: detail.code === "session_expired" ? this.#appearance.labels.sessionExpired : this.#appearance.labels.unavailable,
       // A spent or switched-off daily budget offers no retry. Reconnecting cannot succeed, and every
       // open tab trying is exactly the load the cap was set to refuse — so the button goes, not just
       // the alarming words. A spent *session* keeps it: reconnect mints a fresh one, which is the fix.
-      detail.retryable !== false || detail.serviceCode === void 0
-    );
+      ...recoveryAction === void 0 ? {} : { action: recoveryAction },
+      revealLatest: () => this.#revealLatest()
+    });
     this.#dispatchError(detail);
   }
-  #appendRecoveryError(message, offerRetry = true) {
-    if (!this.#messages) return;
-    this.#messages.querySelector(".conversation-error")?.remove();
-    const error51 = document.createElement("section");
-    error51.className = "conversation-error";
-    error51.setAttribute("role", offerRetry ? "alert" : "status");
-    const text3 = document.createElement("p");
-    text3.textContent = message;
-    error51.append(text3);
-    if (offerRetry) {
-      const retry = document.createElement("button");
-      retry.type = "button";
-      retry.textContent = this.#appearance.labels.reconnect;
-      retry.addEventListener("click", () => this.reconnect());
-      error51.append(retry);
-    }
-    this.#messages.append(error51);
-    this.#revealLatest();
+  #startNewConversation() {
+    this.resetSession();
+    this.#setSessionState("loading");
+    this.#primeSession();
+    this.dispatchEvent(new CustomEvent("assistant-new-conversation"));
   }
   #resolvedMode() {
     const configured = this.getAttribute("theme") ?? this.#appearance.theme.defaultMode;