@noodleseed/assistant 1.23.0 → 1.25.0

package/dist/react.d.cts

@@ -1,8 +1,8 @@
 import { ReactElement, RefAttributes } from 'react';
-import { a as AssistantThemeMode } from './appearance-Cc-eqSbp.cjs';
+import { a as AssistantThemeMode } from './appearance-B6vSg8Ub.cjs';
 import { AssistantAppearance, AssistantAppearanceWarning, NoodleAssistantElement } from './index.cjs';
-import { A as AssistantClient, a as AssistantViewAvailableDetail, b as AssistantPageContext, c as AssistantContext, f as AssistantModelContextUpdate, g as AssistantClientEvent, e as AssistantErrorDetail } from './client-uo57Swlm.cjs';
-import { a as AssistantAppViewErrorDetail } from './app-view-element-1i_w6FDf.cjs';
+import { A as AssistantClient, a as AssistantViewAvailableDetail, b as AssistantPageContext, c as AssistantContext, f as AssistantModelContextUpdate, g as AssistantClientEvent, e as AssistantErrorDetail } from './client-C07ppTU_.cjs';
+import { a as AssistantAppViewErrorDetail } from './app-view-element-9ojWWYov.cjs';
 import 'ai';
 
 interface NoodleAppViewProps {

package/dist/react.d.ts

@@ -1,8 +1,8 @@
 import { ReactElement, RefAttributes } from 'react';
-import { a as AssistantThemeMode } from './appearance-Cc-eqSbp.js';
+import { a as AssistantThemeMode } from './appearance-B6vSg8Ub.js';
 import { AssistantAppearance, AssistantAppearanceWarning, NoodleAssistantElement } from './index.js';
-import { A as AssistantClient, a as AssistantViewAvailableDetail, b as AssistantPageContext, c as AssistantContext, f as AssistantModelContextUpdate, g as AssistantClientEvent, e as AssistantErrorDetail } from './client-Bp_VKpMg.js';
-import { a as AssistantAppViewErrorDetail } from './app-view-element-7ZQZLYbL.js';
+import { A as AssistantClient, a as AssistantViewAvailableDetail, b as AssistantPageContext, c as AssistantContext, f as AssistantModelContextUpdate, g as AssistantClientEvent, e as AssistantErrorDetail } from './client-BkogON2A.js';
+import { a as AssistantAppViewErrorDetail } from './app-view-element-BM4lral-.js';
 import 'ai';
 
 interface NoodleAppViewProps {

package/dist/react.js

@@ -1,12 +1,12 @@
 import {
   registerNoodleAssistant
-} from "./chunk-X7UQDIGS.js";
+} from "./chunk-SGMECNNU.js";
 import {
   APP_VIEW_TAG_NAME,
   registerNoodleAppView
-} from "./chunk-5NBHHNI3.js";
-import "./chunk-XKTUXFGX.js";
-import "./chunk-IBDP6PXQ.js";
+} from "./chunk-LNBUYHL7.js";
+import "./chunk-P32MAR4K.js";
+import "./chunk-7BQHW37I.js";
 import "./chunk-P223CYPO.js";
 import "./chunk-3YYTUJPJ.js";
 import "./chunk-5FUTL2UF.js";

package/dist/server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\ninterface AssistantSessionExchangeBase {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  /** The signed-in person your backend vouches for — on both arms: an elevation IS this vouching. */\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n    readonly scopes?: readonly string[];\n  };\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\n/**\n * Fresh mint XOR mid-conversation sign-in, exclusive rather than merged for the same reason the\n * client's `sessionEndpoint`/`embedId` pair is: the two are different operations, and the wrong\n * combination should fail to typecheck instead of silently picking a meaning.\n *\n * `context` applies only when a session is being created; an elevation keeps the existing\n * conversation, so it is excluded rather than silently ignored. `routing` is allowed on both arms —\n * elevation is the first authenticated moment, so it is the only chance a routed connector's\n * session ever gets its backend-verified customer routes.\n */\nexport type CreateAssistantSessionInput =\n  | (AssistantSessionExchangeBase & {\n      readonly signInTicket?: undefined;\n      readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /** Resume applies only when spending a sign-in ticket; a fresh mint has nothing pending. */\n      readonly resume?: undefined;\n    })\n  | (AssistantSessionExchangeBase & {\n      /**\n       * Single-use sign-in ticket from the widget's `assistant-sign-in-requested` event\n       * (ADR 0201, 5.6b). Spending it binds this signed-in user to the visitor's existing\n       * anonymous conversation instead of minting a new one. Unrelated to the server-held\n       * interaction continuation, which never reaches browser code.\n       */\n      readonly signInTicket: string;\n      readonly context?: undefined;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /**\n       * Whether the service resumes the intercepted tool call as the elevated session's first\n       * turn (issue #1177). ON by default — omit it and the visitor's pending question answers\n       * itself after sign-in; pass `false` if your application provides its own affordance.\n       */\n      readonly resume?: boolean;\n    });\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n    readonly apps?: string;\n    /** Additive hosted sandbox document for widget frames; absent on older services. */\n    readonly sandbox?: string;\n  };\n  /**\n   * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward\n   * the response body unchanged and the widget answers with one automatic turn.\n   */\n  readonly resume?: { readonly tool: string };\n  readonly configuration?: AssistantConfiguration;\n}\n\n/** The service's refusal codes for a sign-in ticket the exchange would not honour. */\nexport const ASSISTANT_ELEVATION_REFUSAL_CODES = [\n  'elevation_ticket_invalid',\n  'elevation_ticket_expired',\n  'elevation_tenant_mismatch',\n  'elevation_session_unavailable',\n  'elevation_already_signed_in',\n] as const;\nexport type AssistantElevationRefusalCode = (typeof ASSISTANT_ELEVATION_REFUSAL_CODES)[number];\n\n/**\n * Structurally mirrors the browser client's `AssistantErrorDetail` (declared locally: the backend\n * entry must not pull the browser transport module into its graph). `code` is a closed union owned\n * by this package; `serviceCode` passes the service's machine code through additively.\n */\nexport interface AssistantSessionExchangeErrorDetail {\n  readonly code: 'session_exchange_failed';\n  readonly status: number;\n  /** 5xx infrastructure failures may be retried; a refused exchange must not be — tickets are single-use. */\n  readonly retryable: boolean;\n  /** The service's machine code when the body carried one, e.g. `elevation_ticket_expired`. */\n  readonly serviceCode?: string;\n}\n\nexport class AssistantSessionExchangeError extends Error {\n  readonly detail: AssistantSessionExchangeErrorDetail;\n\n  constructor(detail: AssistantSessionExchangeErrorDetail, message: string) {\n    super(message);\n    this.name = 'AssistantSessionExchangeError';\n    this.detail = detail;\n  }\n\n  /**\n   * The narrowed sign-in refusal, when this failure is one. `elevation_ticket_expired` means the\n   * visitor took too long — re-prompt; `elevation_tenant_mismatch` means a client reached for a\n   * conversation it does not own — alert someone, never retry.\n   */\n  get elevationRefusal(): AssistantElevationRefusalCode | undefined {\n    const code = this.detail.serviceCode;\n    return code !== undefined &&\n      (ASSISTANT_ELEVATION_REFUSAL_CODES as readonly string[]).includes(code)\n      ? (code as AssistantElevationRefusalCode)\n      : undefined;\n  }\n}\n\n/** Never throws while reading the body — a proxy can answer with HTML instead of JSON. */\nasync function exchangeError(response: Response): Promise<AssistantSessionExchangeError> {\n  const body = (await response.json().catch(() => undefined)) as\n    | { readonly error?: unknown; readonly code?: unknown }\n    | undefined;\n  const serviceCode = typeof body?.code === 'string' ? body.code : undefined;\n  return new AssistantSessionExchangeError(\n    {\n      code: 'session_exchange_failed',\n      status: response.status,\n      // `elevation_unavailable` is a 503 an operator has to fix; retrying cannot help.\n      retryable: response.status >= 500 && serviceCode !== 'elevation_unavailable',\n      ...(serviceCode === undefined ? {} : { serviceCode }),\n    },\n    `Assistant session exchange failed (${response.status})`,\n  );\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  if (input.signInTicket !== undefined && (input as { context?: unknown }).context !== undefined) {\n    // Mirrors resolveSessionSource: silently dropping what the service ignores would pick a\n    // meaning the developer did not intend.\n    throw new Error('context does not apply when spending a sign-in ticket');\n  }\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.signInTicket === undefined ? {} : { signInTicket: input.signInTicket }),\n      ...(input.signInTicket !== undefined && input.resume !== undefined\n        ? { resume: input.resume }\n        : {}),\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n      ...(input.routing ? { routing: input.routing } : {}),\n    }),\n  });\n  // A fresh mint answers 201, an elevation 200; both are the same wire shape (ADR 0151).\n  if (!response.ok) throw await exchangeError(response);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4FO,IAAM,oCAAoC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiBO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9C;AAAA,EAET,YAAY,QAA6C,SAAiB;AACxE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,mBAA8D;AAChE,UAAM,OAAO,KAAK,OAAO;AACzB,WAAO,SAAS,UACb,kCAAwD,SAAS,IAAI,IACnE,OACD;AAAA,EACN;AACF;AAGA,eAAe,cAAc,UAA4D;AACvF,QAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,MAAS;AAGzD,QAAM,cAAc,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AACjE,SAAO,IAAI;AAAA,IACT;AAAA,MACE,MAAM;AAAA,MACN,QAAQ,SAAS;AAAA;AAAA,MAEjB,WAAW,SAAS,UAAU,OAAO,gBAAgB;AAAA,MACrD,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,IACrD;AAAA,IACA,sCAAsC,SAAS,MAAM;AAAA,EACvD;AACF;AAEA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,MAAI,MAAM,iBAAiB,UAAc,MAAgC,YAAY,QAAW;AAG9F,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,MAC/E,GAAI,MAAM,iBAAiB,UAAa,MAAM,WAAW,SACrD,EAAE,QAAQ,MAAM,OAAO,IACvB,CAAC;AAAA,MACL,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,MAC9D,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,GAAI,OAAM,MAAM,cAAc,QAAQ;AACpD,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\ninterface AssistantSessionExchangeBase {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  /** The signed-in person your backend vouches for — on both arms: an elevation IS this vouching. */\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n    readonly scopes?: readonly string[];\n  };\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\n/**\n * Fresh mint XOR mid-conversation sign-in, exclusive rather than merged for the same reason the\n * client's `sessionEndpoint`/`embedId` pair is: the two are different operations, and the wrong\n * combination should fail to typecheck instead of silently picking a meaning.\n *\n * `context` applies only when a session is being created; an elevation keeps the existing\n * conversation, so it is excluded rather than silently ignored. `routing` is allowed on both arms —\n * elevation is the first authenticated moment, so it is the only chance a routed connector's\n * session ever gets its backend-verified customer routes.\n */\nexport type CreateAssistantSessionInput =\n  | (AssistantSessionExchangeBase & {\n      readonly signInTicket?: undefined;\n      readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /** Resume applies only when spending a sign-in ticket; a fresh mint has nothing pending. */\n      readonly resume?: undefined;\n    })\n  | (AssistantSessionExchangeBase & {\n      /**\n       * Single-use sign-in ticket from the widget's `assistant-sign-in-requested` event\n       * (ADR 0201, 5.6b). Spending it binds this signed-in user to the visitor's existing\n       * anonymous conversation instead of minting a new one. Unrelated to the server-held\n       * interaction continuation, which never reaches browser code.\n       */\n      readonly signInTicket: string;\n      readonly context?: undefined;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /**\n       * Whether the service resumes the intercepted tool call as the elevated session's first\n       * turn (issue #1177). ON by default — omit it and the visitor's pending question answers\n       * itself after sign-in; pass `false` if your application provides its own affordance.\n       */\n      readonly resume?: boolean;\n    });\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n    readonly apps?: string;\n    /** Additive hosted sandbox document for widget frames; absent on older services. */\n    readonly sandbox?: string;\n    /** Additive bounded visible-transcript endpoint; absent on older services. */\n    readonly transcript?: string;\n  };\n  /**\n   * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward\n   * the response body unchanged and the widget answers with one automatic turn.\n   */\n  readonly resume?: { readonly tool: string };\n  readonly configuration?: AssistantConfiguration;\n}\n\n/** The service's refusal codes for a sign-in ticket the exchange would not honour. */\nexport const ASSISTANT_ELEVATION_REFUSAL_CODES = [\n  'elevation_ticket_invalid',\n  'elevation_ticket_expired',\n  'elevation_tenant_mismatch',\n  'elevation_session_unavailable',\n  'elevation_already_signed_in',\n] as const;\nexport type AssistantElevationRefusalCode = (typeof ASSISTANT_ELEVATION_REFUSAL_CODES)[number];\n\n/**\n * Structurally mirrors the browser client's `AssistantErrorDetail` (declared locally: the backend\n * entry must not pull the browser transport module into its graph). `code` is a closed union owned\n * by this package; `serviceCode` passes the service's machine code through additively.\n */\nexport interface AssistantSessionExchangeErrorDetail {\n  readonly code: 'session_exchange_failed';\n  readonly status: number;\n  /** 5xx infrastructure failures may be retried; a refused exchange must not be — tickets are single-use. */\n  readonly retryable: boolean;\n  /** The service's machine code when the body carried one, e.g. `elevation_ticket_expired`. */\n  readonly serviceCode?: string;\n}\n\nexport class AssistantSessionExchangeError extends Error {\n  readonly detail: AssistantSessionExchangeErrorDetail;\n\n  constructor(detail: AssistantSessionExchangeErrorDetail, message: string) {\n    super(message);\n    this.name = 'AssistantSessionExchangeError';\n    this.detail = detail;\n  }\n\n  /**\n   * The narrowed sign-in refusal, when this failure is one. `elevation_ticket_expired` means the\n   * visitor took too long — re-prompt; `elevation_tenant_mismatch` means a client reached for a\n   * conversation it does not own — alert someone, never retry.\n   */\n  get elevationRefusal(): AssistantElevationRefusalCode | undefined {\n    const code = this.detail.serviceCode;\n    return code !== undefined &&\n      (ASSISTANT_ELEVATION_REFUSAL_CODES as readonly string[]).includes(code)\n      ? (code as AssistantElevationRefusalCode)\n      : undefined;\n  }\n}\n\n/** Never throws while reading the body — a proxy can answer with HTML instead of JSON. */\nasync function exchangeError(response: Response): Promise<AssistantSessionExchangeError> {\n  const body = (await response.json().catch(() => undefined)) as\n    | { readonly error?: unknown; readonly code?: unknown }\n    | undefined;\n  const serviceCode = typeof body?.code === 'string' ? body.code : undefined;\n  return new AssistantSessionExchangeError(\n    {\n      code: 'session_exchange_failed',\n      status: response.status,\n      // `elevation_unavailable` is a 503 an operator has to fix; retrying cannot help.\n      retryable: response.status >= 500 && serviceCode !== 'elevation_unavailable',\n      ...(serviceCode === undefined ? {} : { serviceCode }),\n    },\n    `Assistant session exchange failed (${response.status})`,\n  );\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  if (input.signInTicket !== undefined && (input as { context?: unknown }).context !== undefined) {\n    // Mirrors resolveSessionSource: silently dropping what the service ignores would pick a\n    // meaning the developer did not intend.\n    throw new Error('context does not apply when spending a sign-in ticket');\n  }\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.signInTicket === undefined ? {} : { signInTicket: input.signInTicket }),\n      ...(input.signInTicket !== undefined && input.resume !== undefined\n        ? { resume: input.resume }\n        : {}),\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n      ...(input.routing ? { routing: input.routing } : {}),\n    }),\n  });\n  // A fresh mint answers 201, an elevation 200; both are the same wire shape (ADR 0151).\n  if (!response.ok) throw await exchangeError(response);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8FO,IAAM,oCAAoC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiBO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9C;AAAA,EAET,YAAY,QAA6C,SAAiB;AACxE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,mBAA8D;AAChE,UAAM,OAAO,KAAK,OAAO;AACzB,WAAO,SAAS,UACb,kCAAwD,SAAS,IAAI,IACnE,OACD;AAAA,EACN;AACF;AAGA,eAAe,cAAc,UAA4D;AACvF,QAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,MAAS;AAGzD,QAAM,cAAc,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AACjE,SAAO,IAAI;AAAA,IACT;AAAA,MACE,MAAM;AAAA,MACN,QAAQ,SAAS;AAAA;AAAA,MAEjB,WAAW,SAAS,UAAU,OAAO,gBAAgB;AAAA,MACrD,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,IACrD;AAAA,IACA,sCAAsC,SAAS,MAAM;AAAA,EACvD;AACF;AAEA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,MAAI,MAAM,iBAAiB,UAAc,MAAgC,YAAY,QAAW;AAG9F,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,MAC/E,GAAI,MAAM,iBAAiB,UAAa,MAAM,WAAW,SACrD,EAAE,QAAQ,MAAM,OAAO,IACvB,CAAC;AAAA,MACL,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,MAC9D,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,GAAI,OAAM,MAAM,cAAc,QAAQ;AACpD,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}

package/dist/server.d.cts

@@ -1,4 +1,4 @@
-import { A as AssistantConfiguration } from './appearance-Cc-eqSbp.cjs';
+import { A as AssistantConfiguration } from './appearance-B6vSg8Ub.cjs';
 
 interface AssistantSessionExchangeBase {
     readonly serviceUrl: string;
@@ -76,6 +76,8 @@ interface AssistantSession {
         readonly apps?: string;
         /** Additive hosted sandbox document for widget frames; absent on older services. */
         readonly sandbox?: string;
+        /** Additive bounded visible-transcript endpoint; absent on older services. */
+        readonly transcript?: string;
     };
     /**
      * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-import { A as AssistantConfiguration } from './appearance-Cc-eqSbp.js';
+import { A as AssistantConfiguration } from './appearance-B6vSg8Ub.js';
 
 interface AssistantSessionExchangeBase {
     readonly serviceUrl: string;
@@ -76,6 +76,8 @@ interface AssistantSession {
         readonly apps?: string;
         /** Additive hosted sandbox document for widget frames; absent on older services. */
         readonly sandbox?: string;
+        /** Additive bounded visible-transcript endpoint; absent on older services. */
+        readonly transcript?: string;
     };
     /**
      * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\ninterface AssistantSessionExchangeBase {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  /** The signed-in person your backend vouches for — on both arms: an elevation IS this vouching. */\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n    readonly scopes?: readonly string[];\n  };\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\n/**\n * Fresh mint XOR mid-conversation sign-in, exclusive rather than merged for the same reason the\n * client's `sessionEndpoint`/`embedId` pair is: the two are different operations, and the wrong\n * combination should fail to typecheck instead of silently picking a meaning.\n *\n * `context` applies only when a session is being created; an elevation keeps the existing\n * conversation, so it is excluded rather than silently ignored. `routing` is allowed on both arms —\n * elevation is the first authenticated moment, so it is the only chance a routed connector's\n * session ever gets its backend-verified customer routes.\n */\nexport type CreateAssistantSessionInput =\n  | (AssistantSessionExchangeBase & {\n      readonly signInTicket?: undefined;\n      readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /** Resume applies only when spending a sign-in ticket; a fresh mint has nothing pending. */\n      readonly resume?: undefined;\n    })\n  | (AssistantSessionExchangeBase & {\n      /**\n       * Single-use sign-in ticket from the widget's `assistant-sign-in-requested` event\n       * (ADR 0201, 5.6b). Spending it binds this signed-in user to the visitor's existing\n       * anonymous conversation instead of minting a new one. Unrelated to the server-held\n       * interaction continuation, which never reaches browser code.\n       */\n      readonly signInTicket: string;\n      readonly context?: undefined;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /**\n       * Whether the service resumes the intercepted tool call as the elevated session's first\n       * turn (issue #1177). ON by default — omit it and the visitor's pending question answers\n       * itself after sign-in; pass `false` if your application provides its own affordance.\n       */\n      readonly resume?: boolean;\n    });\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n    readonly apps?: string;\n    /** Additive hosted sandbox document for widget frames; absent on older services. */\n    readonly sandbox?: string;\n  };\n  /**\n   * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward\n   * the response body unchanged and the widget answers with one automatic turn.\n   */\n  readonly resume?: { readonly tool: string };\n  readonly configuration?: AssistantConfiguration;\n}\n\n/** The service's refusal codes for a sign-in ticket the exchange would not honour. */\nexport const ASSISTANT_ELEVATION_REFUSAL_CODES = [\n  'elevation_ticket_invalid',\n  'elevation_ticket_expired',\n  'elevation_tenant_mismatch',\n  'elevation_session_unavailable',\n  'elevation_already_signed_in',\n] as const;\nexport type AssistantElevationRefusalCode = (typeof ASSISTANT_ELEVATION_REFUSAL_CODES)[number];\n\n/**\n * Structurally mirrors the browser client's `AssistantErrorDetail` (declared locally: the backend\n * entry must not pull the browser transport module into its graph). `code` is a closed union owned\n * by this package; `serviceCode` passes the service's machine code through additively.\n */\nexport interface AssistantSessionExchangeErrorDetail {\n  readonly code: 'session_exchange_failed';\n  readonly status: number;\n  /** 5xx infrastructure failures may be retried; a refused exchange must not be — tickets are single-use. */\n  readonly retryable: boolean;\n  /** The service's machine code when the body carried one, e.g. `elevation_ticket_expired`. */\n  readonly serviceCode?: string;\n}\n\nexport class AssistantSessionExchangeError extends Error {\n  readonly detail: AssistantSessionExchangeErrorDetail;\n\n  constructor(detail: AssistantSessionExchangeErrorDetail, message: string) {\n    super(message);\n    this.name = 'AssistantSessionExchangeError';\n    this.detail = detail;\n  }\n\n  /**\n   * The narrowed sign-in refusal, when this failure is one. `elevation_ticket_expired` means the\n   * visitor took too long — re-prompt; `elevation_tenant_mismatch` means a client reached for a\n   * conversation it does not own — alert someone, never retry.\n   */\n  get elevationRefusal(): AssistantElevationRefusalCode | undefined {\n    const code = this.detail.serviceCode;\n    return code !== undefined &&\n      (ASSISTANT_ELEVATION_REFUSAL_CODES as readonly string[]).includes(code)\n      ? (code as AssistantElevationRefusalCode)\n      : undefined;\n  }\n}\n\n/** Never throws while reading the body — a proxy can answer with HTML instead of JSON. */\nasync function exchangeError(response: Response): Promise<AssistantSessionExchangeError> {\n  const body = (await response.json().catch(() => undefined)) as\n    | { readonly error?: unknown; readonly code?: unknown }\n    | undefined;\n  const serviceCode = typeof body?.code === 'string' ? body.code : undefined;\n  return new AssistantSessionExchangeError(\n    {\n      code: 'session_exchange_failed',\n      status: response.status,\n      // `elevation_unavailable` is a 503 an operator has to fix; retrying cannot help.\n      retryable: response.status >= 500 && serviceCode !== 'elevation_unavailable',\n      ...(serviceCode === undefined ? {} : { serviceCode }),\n    },\n    `Assistant session exchange failed (${response.status})`,\n  );\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  if (input.signInTicket !== undefined && (input as { context?: unknown }).context !== undefined) {\n    // Mirrors resolveSessionSource: silently dropping what the service ignores would pick a\n    // meaning the developer did not intend.\n    throw new Error('context does not apply when spending a sign-in ticket');\n  }\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.signInTicket === undefined ? {} : { signInTicket: input.signInTicket }),\n      ...(input.signInTicket !== undefined && input.resume !== undefined\n        ? { resume: input.resume }\n        : {}),\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n      ...(input.routing ? { routing: input.routing } : {}),\n    }),\n  });\n  // A fresh mint answers 201, an elevation 200; both are the same wire shape (ADR 0151).\n  if (!response.ok) throw await exchangeError(response);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;AA4FO,IAAM,oCAAoC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiBO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9C;AAAA,EAET,YAAY,QAA6C,SAAiB;AACxE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,mBAA8D;AAChE,UAAM,OAAO,KAAK,OAAO;AACzB,WAAO,SAAS,UACb,kCAAwD,SAAS,IAAI,IACnE,OACD;AAAA,EACN;AACF;AAGA,eAAe,cAAc,UAA4D;AACvF,QAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,MAAS;AAGzD,QAAM,cAAc,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AACjE,SAAO,IAAI;AAAA,IACT;AAAA,MACE,MAAM;AAAA,MACN,QAAQ,SAAS;AAAA;AAAA,MAEjB,WAAW,SAAS,UAAU,OAAO,gBAAgB;AAAA,MACrD,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,IACrD;AAAA,IACA,sCAAsC,SAAS,MAAM;AAAA,EACvD;AACF;AAEA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,MAAI,MAAM,iBAAiB,UAAc,MAAgC,YAAY,QAAW;AAG9F,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,MAC/E,GAAI,MAAM,iBAAiB,UAAa,MAAM,WAAW,SACrD,EAAE,QAAQ,MAAM,OAAO,IACvB,CAAC;AAAA,MACL,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,MAC9D,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,GAAI,OAAM,MAAM,cAAc,QAAQ;AACpD,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["import type { AssistantConfiguration } from './appearance.js';\n\ninterface AssistantSessionExchangeBase {\n  readonly serviceUrl: string;\n  readonly clientId: string;\n  readonly clientSecret: string;\n  /** Browser origin to bind into the short-lived assistant session. */\n  readonly origin: string;\n  /** The signed-in person your backend vouches for — on both arms: an elevation IS this vouching. */\n  readonly user: {\n    readonly id: string;\n    readonly email?: string;\n    readonly name?: string;\n    readonly tenant?: string;\n    readonly roles?: readonly string[];\n    readonly scopes?: readonly string[];\n  };\n  /** Backend-verified user preferences; these outrank untrusted browser presentation hints. */\n  readonly preferences?: {\n    readonly locale?: string;\n    readonly timeZone?: string;\n  };\n  /**\n   * Verified session claims from your authenticated backend. Only claims the server declares in\n   * `embeddedAssistant({ sessionClaims })` reach tools (`\\${user.claims.<key>}`) and, when marked\n   * `exposeToModel`, the assistant's identity context. Flat scalars only.\n   */\n  readonly claims?: Readonly<Record<string, string | number | boolean | null>>;\n}\n\n/**\n * Fresh mint XOR mid-conversation sign-in, exclusive rather than merged for the same reason the\n * client's `sessionEndpoint`/`embedId` pair is: the two are different operations, and the wrong\n * combination should fail to typecheck instead of silently picking a meaning.\n *\n * `context` applies only when a session is being created; an elevation keeps the existing\n * conversation, so it is excluded rather than silently ignored. `routing` is allowed on both arms —\n * elevation is the first authenticated moment, so it is the only chance a routed connector's\n * session ever gets its backend-verified customer routes.\n */\nexport type CreateAssistantSessionInput =\n  | (AssistantSessionExchangeBase & {\n      readonly signInTicket?: undefined;\n      readonly context?: Readonly<Record<string, string | number | boolean | null>>;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /** Resume applies only when spending a sign-in ticket; a fresh mint has nothing pending. */\n      readonly resume?: undefined;\n    })\n  | (AssistantSessionExchangeBase & {\n      /**\n       * Single-use sign-in ticket from the widget's `assistant-sign-in-requested` event\n       * (ADR 0201, 5.6b). Spending it binds this signed-in user to the visitor's existing\n       * anonymous conversation instead of minting a new one. Unrelated to the server-held\n       * interaction continuation, which never reaches browser code.\n       */\n      readonly signInTicket: string;\n      readonly context?: undefined;\n      /** Backend-verified connector routes keyed by authored `customerEndpoint` name. */\n      readonly routing?: {\n        readonly endpoints: Readonly<Record<string, string>>;\n      };\n      /**\n       * Whether the service resumes the intercepted tool call as the elevated session's first\n       * turn (issue #1177). ON by default — omit it and the visitor's pending question answers\n       * itself after sign-in; pass `false` if your application provides its own affordance.\n       */\n      readonly resume?: boolean;\n    });\n\nexport interface AssistantSession {\n  readonly token: string;\n  readonly expiresAt: string;\n  readonly endpoints: {\n    readonly turns: string;\n    readonly toolConfirmations: string;\n    readonly interactions?: string;\n    readonly apps?: string;\n    /** Additive hosted sandbox document for widget frames; absent on older services. */\n    readonly sandbox?: string;\n    /** Additive bounded visible-transcript endpoint; absent on older services. */\n    readonly transcript?: string;\n  };\n  /**\n   * Present only on an elevation that armed the one-shot resume of the intercepted tool. Forward\n   * the response body unchanged and the widget answers with one automatic turn.\n   */\n  readonly resume?: { readonly tool: string };\n  readonly configuration?: AssistantConfiguration;\n}\n\n/** The service's refusal codes for a sign-in ticket the exchange would not honour. */\nexport const ASSISTANT_ELEVATION_REFUSAL_CODES = [\n  'elevation_ticket_invalid',\n  'elevation_ticket_expired',\n  'elevation_tenant_mismatch',\n  'elevation_session_unavailable',\n  'elevation_already_signed_in',\n] as const;\nexport type AssistantElevationRefusalCode = (typeof ASSISTANT_ELEVATION_REFUSAL_CODES)[number];\n\n/**\n * Structurally mirrors the browser client's `AssistantErrorDetail` (declared locally: the backend\n * entry must not pull the browser transport module into its graph). `code` is a closed union owned\n * by this package; `serviceCode` passes the service's machine code through additively.\n */\nexport interface AssistantSessionExchangeErrorDetail {\n  readonly code: 'session_exchange_failed';\n  readonly status: number;\n  /** 5xx infrastructure failures may be retried; a refused exchange must not be — tickets are single-use. */\n  readonly retryable: boolean;\n  /** The service's machine code when the body carried one, e.g. `elevation_ticket_expired`. */\n  readonly serviceCode?: string;\n}\n\nexport class AssistantSessionExchangeError extends Error {\n  readonly detail: AssistantSessionExchangeErrorDetail;\n\n  constructor(detail: AssistantSessionExchangeErrorDetail, message: string) {\n    super(message);\n    this.name = 'AssistantSessionExchangeError';\n    this.detail = detail;\n  }\n\n  /**\n   * The narrowed sign-in refusal, when this failure is one. `elevation_ticket_expired` means the\n   * visitor took too long — re-prompt; `elevation_tenant_mismatch` means a client reached for a\n   * conversation it does not own — alert someone, never retry.\n   */\n  get elevationRefusal(): AssistantElevationRefusalCode | undefined {\n    const code = this.detail.serviceCode;\n    return code !== undefined &&\n      (ASSISTANT_ELEVATION_REFUSAL_CODES as readonly string[]).includes(code)\n      ? (code as AssistantElevationRefusalCode)\n      : undefined;\n  }\n}\n\n/** Never throws while reading the body — a proxy can answer with HTML instead of JSON. */\nasync function exchangeError(response: Response): Promise<AssistantSessionExchangeError> {\n  const body = (await response.json().catch(() => undefined)) as\n    | { readonly error?: unknown; readonly code?: unknown }\n    | undefined;\n  const serviceCode = typeof body?.code === 'string' ? body.code : undefined;\n  return new AssistantSessionExchangeError(\n    {\n      code: 'session_exchange_failed',\n      status: response.status,\n      // `elevation_unavailable` is a 503 an operator has to fix; retrying cannot help.\n      retryable: response.status >= 500 && serviceCode !== 'elevation_unavailable',\n      ...(serviceCode === undefined ? {} : { serviceCode }),\n    },\n    `Assistant session exchange failed (${response.status})`,\n  );\n}\n\nexport async function createAssistantSession(\n  input: CreateAssistantSessionInput,\n  dependencies: { readonly fetch?: typeof fetch } = {},\n): Promise<AssistantSession> {\n  if (input.signInTicket !== undefined && (input as { context?: unknown }).context !== undefined) {\n    // Mirrors resolveSessionSource: silently dropping what the service ignores would pick a\n    // meaning the developer did not intend.\n    throw new Error('context does not apply when spending a sign-in ticket');\n  }\n  const request = dependencies.fetch ?? fetch;\n  const serviceUrl = input.serviceUrl.replace(/\\/$/, '');\n  const credentials = Buffer.from(`${input.clientId}:${input.clientSecret}`, 'utf8').toString(\n    'base64',\n  );\n  const response = await request(`${serviceUrl}/v1/assistant/sessions`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Basic ${credentials}`,\n      Accept: 'application/json',\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      origin: input.origin,\n      user: input.user,\n      ...(input.signInTicket === undefined ? {} : { signInTicket: input.signInTicket }),\n      ...(input.signInTicket !== undefined && input.resume !== undefined\n        ? { resume: input.resume }\n        : {}),\n      ...(input.claims ? { claims: input.claims } : {}),\n      ...(input.context ? { context: input.context } : {}),\n      ...(input.preferences ? { preferences: input.preferences } : {}),\n      ...(input.routing ? { routing: input.routing } : {}),\n    }),\n  });\n  // A fresh mint answers 201, an elevation 200; both are the same wire shape (ADR 0151).\n  if (!response.ok) throw await exchangeError(response);\n  return (await response.json()) as AssistantSession;\n}\n"],"mappings":";;;AA8FO,IAAM,oCAAoC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiBO,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC9C;AAAA,EAET,YAAY,QAA6C,SAAiB;AACxE,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAI,mBAA8D;AAChE,UAAM,OAAO,KAAK,OAAO;AACzB,WAAO,SAAS,UACb,kCAAwD,SAAS,IAAI,IACnE,OACD;AAAA,EACN;AACF;AAGA,eAAe,cAAc,UAA4D;AACvF,QAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,MAAS;AAGzD,QAAM,cAAc,OAAO,MAAM,SAAS,WAAW,KAAK,OAAO;AACjE,SAAO,IAAI;AAAA,IACT;AAAA,MACE,MAAM;AAAA,MACN,QAAQ,SAAS;AAAA;AAAA,MAEjB,WAAW,SAAS,UAAU,OAAO,gBAAgB;AAAA,MACrD,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,YAAY;AAAA,IACrD;AAAA,IACA,sCAAsC,SAAS,MAAM;AAAA,EACvD;AACF;AAEA,eAAsB,uBACpB,OACA,eAAkD,CAAC,GACxB;AAC3B,MAAI,MAAM,iBAAiB,UAAc,MAAgC,YAAY,QAAW;AAG9F,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,QAAM,UAAU,aAAa,SAAS;AACtC,QAAM,aAAa,MAAM,WAAW,QAAQ,OAAO,EAAE;AACrD,QAAM,cAAc,OAAO,KAAK,GAAG,MAAM,QAAQ,IAAI,MAAM,YAAY,IAAI,MAAM,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,WAAW,MAAM,QAAQ,GAAG,UAAU,0BAA0B;AAAA,IACpE,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,SAAS,WAAW;AAAA,MACnC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,UAAU;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,GAAI,MAAM,iBAAiB,SAAY,CAAC,IAAI,EAAE,cAAc,MAAM,aAAa;AAAA,MAC/E,GAAI,MAAM,iBAAiB,UAAa,MAAM,WAAW,SACrD,EAAE,QAAQ,MAAM,OAAO,IACvB,CAAC;AAAA,MACL,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,MAClD,GAAI,MAAM,cAAc,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,MAC9D,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IACpD,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,GAAI,OAAM,MAAM,cAAc,QAAQ;AACpD,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/assistant",
-  "version": "1.23.0",
+  "version": "1.25.0",
   "description": "Embed the Noodle Seed customer-branded assistant in your web app with managed or framework-owned UI, a framework-neutral MCP App host, a DOM-free client, and a backend session helper. Authoring and deploying the server is @noodleseed/one.",
   "license": "Apache-2.0",
   "repository": {

package/dist/chunk-5NBHHNI3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/app-view-element.ts","../src/app-view.ts"],"sourcesContent":["import { mountAssistantApp, unmountAssistantApp, updateAssistantAppTheme } from './app-host.js';\nimport { ASSISTANT_APP_VIEW_STYLES } from './app-view-styles.js';\nimport type { AssistantClient, AssistantViewAvailableDetail } from './client.js';\nimport type { AssistantErrorDetail } from './transport.js';\n\nexport const APP_VIEW_TAG_NAME = 'noodle-app-view';\n\nexport interface AssistantAppViewErrorDetail {\n  readonly code: 'view_render_timeout';\n  readonly retryable: false;\n}\n\ndeclare global {\n  interface HTMLElementTagNameMap {\n    'noodle-app-view': NoodleAppViewElement;\n  }\n\n  interface HTMLElementEventMap {\n    'assistant-error': CustomEvent<AssistantErrorDetail>;\n  }\n}\n\nconst HTMLElementBase: typeof HTMLElement =\n  globalThis.HTMLElement ?? (class {} as unknown as typeof HTMLElement);\n\nfunction viewIdentity(view: AssistantViewAvailableDetail): string {\n  return `${view.id}\\u0000${view.resourceUri}`;\n}\n\n/**\n * Framework-neutral host for one service-resolved MCP App view.\n *\n * `client` and `view` are object properties, not serialized attributes. Vue, Angular, and plain DOM\n * renderers can therefore pass the same `data-view` payload without taking a React dependency.\n */\nexport class NoodleAppViewElement extends HTMLElementBase {\n  static readonly observedAttributes = ['allow-fullscreen', 'theme'];\n\n  #allowFullscreen = false;\n  #client: AssistantClient | undefined;\n  #view: AssistantViewAvailableDetail | undefined;\n  #theme: 'light' | 'dark' = 'light';\n  #container: HTMLElement | undefined;\n  #mounted: HTMLElement | undefined;\n  #mountedClient: AssistantClient | undefined;\n  #mountedAllowFullscreen = false;\n  #mountedIdentity: string | undefined;\n  #requestedTeardown: { readonly client: AssistantClient; readonly identity: string } | undefined;\n\n  get client(): AssistantClient | undefined {\n    return this.#client;\n  }\n\n  /** Allow the hosted App to request fullscreen. Disabled by default. */\n  get allowFullscreen(): boolean {\n    return this.#allowFullscreen;\n  }\n\n  set allowFullscreen(value: boolean) {\n    const next = value === true;\n    if (next === this.#allowFullscreen) return;\n    this.#allowFullscreen = next;\n    this.toggleAttribute('allow-fullscreen', next);\n    this.#reconcile();\n  }\n\n  set client(value: AssistantClient | undefined) {\n    if (value === this.#client) return;\n    this.#client = value;\n    this.#reconcile();\n  }\n\n  get view(): AssistantViewAvailableDetail | undefined {\n    return this.#view;\n  }\n\n  set view(value: AssistantViewAvailableDetail | undefined) {\n    this.#view = value;\n    this.#reconcile();\n  }\n\n  get theme(): 'light' | 'dark' {\n    return this.#theme;\n  }\n\n  set theme(value: 'light' | 'dark') {\n    const next = value === 'dark' ? 'dark' : 'light';\n    const changed = next !== this.#theme;\n    this.#theme = next;\n    if (this.getAttribute('data-theme') !== next) this.setAttribute('data-theme', next);\n    if (changed && this.#mounted) updateAssistantAppTheme(this.#mounted, next);\n  }\n\n  connectedCallback(): void {\n    this.#ensureContainer();\n    this.#upgradeProperty('allowFullscreen');\n    this.#upgradeProperty('client');\n    this.#upgradeProperty('theme');\n    this.#upgradeProperty('view');\n    this.#reconcile();\n  }\n\n  disconnectedCallback(): void {\n    this.#requestedTeardown = undefined;\n    this.#releaseMount();\n  }\n\n  attributeChangedCallback(name: string, _previous: string | null, value: string | null): void {\n    if (name === 'allow-fullscreen') this.allowFullscreen = value !== null;\n    if (name === 'theme') this.theme = value === 'dark' ? 'dark' : 'light';\n  }\n\n  #ensureContainer(): HTMLElement {\n    if (this.#container) return this.#container;\n    const root = this.shadowRoot ?? this.attachShadow({ mode: 'open' });\n    root.innerHTML = ASSISTANT_APP_VIEW_STYLES;\n    const container = document.createElement('div');\n    container.className = 'noodle-app-mount';\n    container.setAttribute('part', 'mount');\n    root.append(container);\n    this.#container = container;\n    return container;\n  }\n\n  #upgradeProperty(name: 'allowFullscreen' | 'client' | 'theme' | 'view'): void {\n    const property = Object.getOwnPropertyDescriptor(this, name);\n    if (!property) return;\n    Reflect.deleteProperty(this, name);\n    Reflect.set(this, name, property.value);\n  }\n\n  #releaseMount(): void {\n    const mounted = this.#mounted;\n    this.#mounted = undefined;\n    this.#mountedClient = undefined;\n    this.#mountedAllowFullscreen = false;\n    this.#mountedIdentity = undefined;\n    this.#container?.replaceChildren();\n    if (mounted) void unmountAssistantApp(mounted);\n  }\n\n  #reconcile(): void {\n    if (!this.isConnected) return;\n    const client = this.#client;\n    const detail = this.#view;\n    const identity = detail ? viewIdentity(detail) : undefined;\n\n    if (this.#mounted) {\n      if (\n        client === this.#mountedClient &&\n        identity === this.#mountedIdentity &&\n        this.#allowFullscreen === this.#mountedAllowFullscreen\n      ) {\n        return;\n      }\n      this.#releaseMount();\n    }\n\n    if (\n      this.#requestedTeardown &&\n      (client !== this.#requestedTeardown.client || identity !== this.#requestedTeardown.identity)\n    ) {\n      this.#requestedTeardown = undefined;\n    }\n    if (!client || !detail?.html || !identity || this.#requestedTeardown) return;\n\n    const initialHtml = detail.html;\n    const sandboxUrl = client.appSandboxUrl?.();\n    let card: HTMLElement | undefined;\n    card = mountAssistantApp(\n      detail,\n      {\n        client,\n        sendMessage: (message) => client.sendMessage(message),\n        updateModelContext: (update) => client.updateModelContext(update),\n        theme: this.#theme,\n      },\n      {\n        allowFullscreen: this.#allowFullscreen,\n        ...(sandboxUrl ? { sandboxUrl } : {}),\n        getDetail: () => {\n          const latest = this.#view;\n          if (this.#client !== client || !latest || viewIdentity(latest) !== identity)\n            return detail;\n          return latest.html ? latest : { ...latest, html: initialHtml };\n        },\n        onRenderFailure: (failure) => {\n          this.dispatchEvent(\n            new CustomEvent<AssistantAppViewErrorDetail>('assistant-error', {\n              detail: failure,\n              bubbles: true,\n              composed: true,\n            }),\n          );\n        },\n        onTeardownRequest: () => {\n          if (this.#mounted !== card) return;\n          this.#mounted = undefined;\n          this.#mountedClient = undefined;\n          this.#mountedIdentity = undefined;\n          this.#requestedTeardown = { client, identity };\n        },\n      },\n    );\n    if (!card) return;\n    this.#mounted = card;\n    this.#mountedClient = client;\n    this.#mountedAllowFullscreen = this.#allowFullscreen;\n    this.#mountedIdentity = identity;\n    this.#ensureContainer().replaceChildren(card);\n  }\n}\n","import { APP_VIEW_TAG_NAME, NoodleAppViewElement } from './app-view-element.js';\n\nexport {\n  APP_VIEW_TAG_NAME,\n  type AssistantAppViewErrorDetail,\n  NoodleAppViewElement,\n} from './app-view-element.js';\nexport type { AssistantClient, AssistantViewAvailableDetail } from './client.js';\n\n/** Register the framework-neutral MCP App host. Safe to call more than once or during SSR. */\nexport function registerNoodleAppView(): void {\n  if (!globalThis.customElements?.get(APP_VIEW_TAG_NAME)) {\n    globalThis.customElements?.define(APP_VIEW_TAG_NAME, NoodleAppViewElement);\n  }\n}\n\nregisterNoodleAppView();\n"],"mappings":";;;;;;;;AAKO,IAAM,oBAAoB;AAiBjC,IAAM,kBACJ,WAAW,eAAgB,MAAM;AAAC;AAEpC,SAAS,aAAa,MAA4C;AAChE,SAAO,GAAG,KAAK,EAAE,KAAS,KAAK,WAAW;AAC5C;AAQO,IAAM,uBAAN,cAAmC,gBAAgB;AAAA,EACxD,OAAgB,qBAAqB,CAAC,oBAAoB,OAAO;AAAA,EAEjE,mBAAmB;AAAA,EACnB;AAAA,EACA;AAAA,EACA,SAA2B;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA,0BAA0B;AAAA,EAC1B;AAAA,EACA;AAAA,EAEA,IAAI,SAAsC;AACxC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,kBAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,gBAAgB,OAAgB;AAClC,UAAM,OAAO,UAAU;AACvB,QAAI,SAAS,KAAK,iBAAkB;AACpC,SAAK,mBAAmB;AACxB,SAAK,gBAAgB,oBAAoB,IAAI;AAC7C,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,IAAI,OAAO,OAAoC;AAC7C,QAAI,UAAU,KAAK,QAAS;AAC5B,SAAK,UAAU;AACf,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,IAAI,OAAiD;AACnD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,KAAK,OAAiD;AACxD,SAAK,QAAQ;AACb,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,IAAI,QAA0B;AAC5B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,MAAM,OAAyB;AACjC,UAAM,OAAO,UAAU,SAAS,SAAS;AACzC,UAAM,UAAU,SAAS,KAAK;AAC9B,SAAK,SAAS;AACd,QAAI,KAAK,aAAa,YAAY,MAAM,KAAM,MAAK,aAAa,cAAc,IAAI;AAClF,QAAI,WAAW,KAAK,SAAU,yBAAwB,KAAK,UAAU,IAAI;AAAA,EAC3E;AAAA,EAEA,oBAA0B;AACxB,SAAK,iBAAiB;AACtB,SAAK,iBAAiB,iBAAiB;AACvC,SAAK,iBAAiB,QAAQ;AAC9B,SAAK,iBAAiB,OAAO;AAC7B,SAAK,iBAAiB,MAAM;AAC5B,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,uBAA6B;AAC3B,SAAK,qBAAqB;AAC1B,SAAK,cAAc;AAAA,EACrB;AAAA,EAEA,yBAAyB,MAAc,WAA0B,OAA4B;AAC3F,QAAI,SAAS,mBAAoB,MAAK,kBAAkB,UAAU;AAClE,QAAI,SAAS,QAAS,MAAK,QAAQ,UAAU,SAAS,SAAS;AAAA,EACjE;AAAA,EAEA,mBAAgC;AAC9B,QAAI,KAAK,WAAY,QAAO,KAAK;AACjC,UAAM,OAAO,KAAK,cAAc,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AAClE,SAAK,YAAY;AACjB,UAAM,YAAY,SAAS,cAAc,KAAK;AAC9C,cAAU,YAAY;AACtB,cAAU,aAAa,QAAQ,OAAO;AACtC,SAAK,OAAO,SAAS;AACrB,SAAK,aAAa;AAClB,WAAO;AAAA,EACT;AAAA,EAEA,iBAAiB,MAA6D;AAC5E,UAAM,WAAW,OAAO,yBAAyB,MAAM,IAAI;AAC3D,QAAI,CAAC,SAAU;AACf,YAAQ,eAAe,MAAM,IAAI;AACjC,YAAQ,IAAI,MAAM,MAAM,SAAS,KAAK;AAAA,EACxC;AAAA,EAEA,gBAAsB;AACpB,UAAM,UAAU,KAAK;AACrB,SAAK,WAAW;AAChB,SAAK,iBAAiB;AACtB,SAAK,0BAA0B;AAC/B,SAAK,mBAAmB;AACxB,SAAK,YAAY,gBAAgB;AACjC,QAAI,QAAS,MAAK,oBAAoB,OAAO;AAAA,EAC/C;AAAA,EAEA,aAAmB;AACjB,QAAI,CAAC,KAAK,YAAa;AACvB,UAAM,SAAS,KAAK;AACpB,UAAM,SAAS,KAAK;AACpB,UAAM,WAAW,SAAS,aAAa,MAAM,IAAI;AAEjD,QAAI,KAAK,UAAU;AACjB,UACE,WAAW,KAAK,kBAChB,aAAa,KAAK,oBAClB,KAAK,qBAAqB,KAAK,yBAC/B;AACA;AAAA,MACF;AACA,WAAK,cAAc;AAAA,IACrB;AAEA,QACE,KAAK,uBACJ,WAAW,KAAK,mBAAmB,UAAU,aAAa,KAAK,mBAAmB,WACnF;AACA,WAAK,qBAAqB;AAAA,IAC5B;AACA,QAAI,CAAC,UAAU,CAAC,QAAQ,QAAQ,CAAC,YAAY,KAAK,mBAAoB;AAEtE,UAAM,cAAc,OAAO;AAC3B,UAAM,aAAa,OAAO,gBAAgB;AAC1C,QAAI;AACJ,WAAO;AAAA,MACL;AAAA,MACA;AAAA,QACE;AAAA,QACA,aAAa,CAAC,YAAY,OAAO,YAAY,OAAO;AAAA,QACpD,oBAAoB,CAAC,WAAW,OAAO,mBAAmB,MAAM;AAAA,QAChE,OAAO,KAAK;AAAA,MACd;AAAA,MACA;AAAA,QACE,iBAAiB,KAAK;AAAA,QACtB,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,QACnC,WAAW,MAAM;AACf,gBAAM,SAAS,KAAK;AACpB,cAAI,KAAK,YAAY,UAAU,CAAC,UAAU,aAAa,MAAM,MAAM;AACjE,mBAAO;AACT,iBAAO,OAAO,OAAO,SAAS,EAAE,GAAG,QAAQ,MAAM,YAAY;AAAA,QAC/D;AAAA,QACA,iBAAiB,CAAC,YAAY;AAC5B,eAAK;AAAA,YACH,IAAI,YAAyC,mBAAmB;AAAA,cAC9D,QAAQ;AAAA,cACR,SAAS;AAAA,cACT,UAAU;AAAA,YACZ,CAAC;AAAA,UACH;AAAA,QACF;AAAA,QACA,mBAAmB,MAAM;AACvB,cAAI,KAAK,aAAa,KAAM;AAC5B,eAAK,WAAW;AAChB,eAAK,iBAAiB;AACtB,eAAK,mBAAmB;AACxB,eAAK,qBAAqB,EAAE,QAAQ,SAAS;AAAA,QAC/C;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,KAAM;AACX,SAAK,WAAW;AAChB,SAAK,iBAAiB;AACtB,SAAK,0BAA0B,KAAK;AACpC,SAAK,mBAAmB;AACxB,SAAK,iBAAiB,EAAE,gBAAgB,IAAI;AAAA,EAC9C;AACF;;;ACzMO,SAAS,wBAA8B;AAC5C,MAAI,CAAC,WAAW,gBAAgB,IAAI,iBAAiB,GAAG;AACtD,eAAW,gBAAgB,OAAO,mBAAmB,oBAAoB;AAAA,EAC3E;AACF;AAEA,sBAAsB;","names":[]}