@noodleseed/one 0.141.1 → 0.142.0

package/node_modules/@noodleseed/assistant/README.md

@@ -6,10 +6,10 @@ The package exports the canonical `<noodle-assistant>` managed Web Component, th
 `<noodle-app-view>` MCP App host from `@noodleseed/assistant/app-view`, a managed React wrapper and
 `NoodleAppView` adapter from `@noodleseed/assistant/react`, a renderer-free React hook from
 `@noodleseed/assistant/react/client`, a DOM-free client from `@noodleseed/assistant/client`, and the
-backend-only `createAssistantSession` helper from `@noodleseed/assistant/server`. Light, dark, and automatic
-themes work without configuration; the component inherits the deployed MCP server's brand kit while slots,
-methods, events, and semantic CSS variables let a SaaS developer integrate it without depending on internal
-DOM selectors.
+backend-only `createAssistantSession` helper from `@noodleseed/assistant/server`. The component inherits the
+deployed MCP server's brand kit while slots, methods, events, and semantic CSS variables let a SaaS developer
+integrate it without depending on internal DOM selectors. Light, dark, automatic host-page matching, and
+host-page inversion work without replacing conversation or App DOM.
 
 Never pass an embed client secret, model key, MCP token, or raw application session into the browser
 component. Exchange the already-authenticated user from the customer backend and return only the short-lived
@@ -22,7 +22,7 @@ The model configuration and SaaS integration credentials have different owners:
 | Noodle deployment | `ASSISTANT_MODEL_BASE_URL`, `ASSISTANT_MODEL`, `ASSISTANT_MODEL_API_KEY`             | Managed with `noodle variables set` / `noodle secrets set` |
 | Customer backend  | `NOODLE_SERVICE_URL`, `NOODLE_ASSISTANT_CLIENT_ID`, `NOODLE_ASSISTANT_CLIENT_SECRET` | Backend environment or secret manager only                 |
 
-`allowedOrigins` accepts exact origins. Production origins must be HTTPS; plain HTTP is accepted only for
+`access.origins` accepts exact origins. Production origins must be HTTPS; plain HTTP is accepted only for
 loopback development origins such as `http://localhost:3000`. Local MCP authoring remains available without
 login, but an external browser embed needs an active deployment before its deployment-bound client can be
 created.
@@ -35,8 +35,8 @@ troubleshooting) lives at <https://docs.noodleseed.dev/guides/embedded-assistant
 the server itself is `@noodleseed/one` (`npm install -g @noodleseed/one`).
 
 If your page sends a `Content-Security-Policy`, allow the Noodle service origin in `connect-src` (turns and
-event streams) and the exact session-advertised `endpoints.sandbox` origin in `frame-src` (it may be a
-dedicated sandbox origin, so your `script-src` can stay strict). Details are in the guide's
+event streams) **and** `frame-src` (app widgets render inside a hosted sandbox document served from the
+service origin, `endpoints.sandbox`, so your `script-src` can stay strict). Details are in the guide's
 "Content-Security-Policy on your page" section.
 
 ## Quick start
@@ -55,6 +55,7 @@ structure and treatment in `embeddedAssistant({ presentation })`:
 
 ```ts
 import {
+  authenticatedWebsite,
   embeddedAssistant,
   openAICompatible,
   secret,
@@ -83,19 +84,23 @@ export default server(
         model: variable("ASSISTANT_MODEL"),
         apiKey: secret("ASSISTANT_MODEL_API_KEY"),
       }),
-      allowedOrigins: ["http://localhost:3000", "https://app.acme.example"],
+      access: authenticatedWebsite({
+        origins: ["http://localhost:3000", "https://app.acme.example"],
+      }),
       layout: {
         mode: "floating",
-        position: "bottom-right",
-        panelWidth: 520,
+        position: "bottom-center",
+        panelWidth: 970,
         panelMinHeight: 540,
-        panelMaxHeight: 740,
-        edgeOffset: 24,
+        panelMaxHeight: 1025,
+        edgeOffset: 20,
       },
-      behavior: { showTimestamps: true },
+      theme: "invert",
+      behavior: { showTimestamps: true, showPoweredBy: false },
       labels: {
         welcomeHeading: "How can Acme help?",
         welcomeMessage: "Fast answers from the tools your team already uses.",
+        launcherPlaceholder: "Ask Acme anything",
         composerPlaceholder: "Message Acme Support…",
         sessionReady: "Acme support is online",
       },
@@ -107,6 +112,7 @@ export default server(
           radius: 20,
         },
         launcher: {
+          style: "bubble",
           icon: "chat",
           size: "lg",
           status: "session",
@@ -144,10 +150,15 @@ markup-looking text stays text. `presentation.panel.radius` is a bounded panel-s
 not a second color or identity source. An HTTPS or packaged SVG referenced by `branding.logo`, `branding.mark`, or
 `branding.avatar` is a bounded asset, not inline renderer markup.
 
-If `presentation` is omitted, the rounded Halo-inspired baseline remains: a frosted glass panel with a 24px
-radius, soft elevation, subtle border/motion, medium brand-mark launcher without status or effect,
-undecorated header, pill composer and action controls, and rounded user bubbles with plain assistant messages
-at comfortable width. Partial objects merge with those defaults.
+With UI overrides omitted, the complete managed baseline remains: a bottom-center frosted launcher pill that
+morphs into a prompt input before opening; a 970px outer desktop shell with 20px side padding, 85vh height,
+1025px maximum height, and a 24px panel using the built-in `#F8F8F8` light and `#0C0A09` dark surfaces;
+bottom prompt chips and pill composer; plain assistant messages and 85%-wide user bubbles; a Noodle Seed
+attribution row; and safe-area-aware mobile fullscreen.
+The generic prompt chips ship as defaults, while an authored list—including `[]`—replaces them. Set
+`presentation.launcher.style` to `bubble` for a direct-open 44px launcher. The baseline does not include the
+“Available on ChatGPT” promotion. Partial configuration objects merge with the remaining defaults;
+`presentation.panel.surface: "glass"` remains available when a translucent panel is intentional.
 
 ### Configure and deploy
 
@@ -294,6 +305,22 @@ import "@noodleseed/assistant";
 ></noodle-assistant>
 ```
 
+That single element is the complete managed assistant in React, Vue, Angular, or plain DOM. The
+default pill expands into a prompt first; set `presentation.launcher.style: "bubble"` in `server.ts` when the
+launcher should open the panel directly. Frameworks must treat `noodle-assistant` as a custom element.
+
+When the host needs an authenticated fetch wrapper, assign complex values as properties before connecting
+the element so the first session exchange already carries the application's credentials:
+
+```ts
+import type { NoodleAssistantElement } from "@noodleseed/assistant";
+
+const assistant = document.createElement("noodle-assistant") as NoodleAssistantElement;
+assistant.fetch = authenticatedFetch;
+assistant.sessionEndpoint = "/api/assistant/session";
+document.body.append(assistant);
+```
+
 Or use React:
 
 ```tsx
@@ -410,8 +437,13 @@ import "@noodleseed/assistant/app-view";
 </template>
 ```
 
-Framework setup, lifecycle ownership, sandbox/CSP behavior, and staged diagnostics are owned by the
-[Bring your own UI guide](https://docs.noodleseed.dev/docs/guides/bring-your-own-ui).
+Configure Vue's `isCustomElement` for `noodle-app-view`. Angular uses the same element with `[client]`,
+`[view]`, and `[theme]` property bindings. Do not serialize `client` or `view` into attributes.
+
+`<noodle-app-view>` is the canonical host; `NoodleAppView` delegates to it. Both use the
+service-advertised sandbox URL, route App calls through the supplied client, publish theme changes without
+replacing the iframe, and request standard teardown on semantic replacement, disconnect, or an App teardown
+request.
 
 The App document owns its action intent: it calls standard `tools/call` after connecting and never relies on
 native form navigation. If that call needs input or confirmation, the same `client` publishes the normal
@@ -636,24 +668,31 @@ noodle-assistant {
 ```
 
 For each matching region or token, precedence is the typed host appearance object, then host-provided slot
-content or a public CSS custom property, then compiled server `presentation`/`branding`, then built-in
-defaults. The public slots are `launcher-icon`,
+content or a public CSS custom property, then the saved environment operator override, compiled server
+`presentation`/`branding`, and built-in defaults. The public slots are `launcher-icon`,
 `header-leading`, `header-actions`, `empty-state`, `composer-leading`, `composer-trailing`, and
 `conversation-footer`; slotted host DOM replaces the renderer fallback for that region. Slots are a trusted
 embedding-page integration API, not a way to put HTML or callbacks in deployment configuration. Internal
 shadow-DOM selectors and classes are not public API.
 
-`theme="auto"` follows the browser's operating-system color preference. When the embedding application has
+The Console **Assistant** tab and `noodle assistant appearance show|apply|reset` manage that environment
+override. Existing embed code does not change: public elements load its non-secret configuration before
+first paint without spending a session mint, while authenticated elements receive it from session exchange.
+Each new session pins one resolved revision; an open conversation remains visually stable.
+
+`theme="auto"` follows an explicit `light`/`dark` host-page class or data attribute, then the browser's
+operating-system preference; `theme="invert"` selects the opposite host mode. When the embedding application has
 its own theme toggle, pass its resolved `"light"` or `"dark"` value to `NoodleAssistant` and every
 `<noodle-app-view>`/`NoodleAppView`. Updates change the assistant in place and notify mounted MCP Apps through standard host
 context.
 
 Server branding controls customer name, themed logo/mark/avatar assets, semantic light/dark colors, density,
-radius, typography, and automatic theme. `embeddedAssistant(...)` controls floating/inline/drawer layout,
-position and dimensions, mobile and launcher/header/avatar/timestamp behavior, visible labels, suggested
+radius, typography, and automatic theme. `embeddedAssistant(...)` controls theme selection,
+floating/inline/drawer layout, position and dimensions, mobile and launcher/header/avatar/timestamp/attribution behavior, visible labels, suggested
 prompts, privacy/terms links, locale, and text direction.
 Named slots cover launcher/header/composer/footer extensions. Public methods include `open`, `close`,
 `toggle`, `focusComposer`, `sendMessage`, `stop`, `reconnect`, `updateContext`, `updateModelContext`, `respond`, `confirmTool`, and `resetSession`;
+lifecycle properties include `sessionEndpoint`, `embedId`, `serviceUrl`, `fetch`, and `appearance`;
 lifecycle, message, tool-proposal, interaction-resolution, view-availability, context, and error events
 support application integration. `confirmTool(id)` remains the compatibility shorthand for
 `respond(id, { action: 'accept' })`.

package/node_modules/@noodleseed/assistant/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/assistant",
-  "version": "1.25.0",
+  "version": "1.25.1",
   "description": "Embed the Noodle Seed customer-branded assistant in your web app with managed or framework-owned UI, a framework-neutral MCP App host, a DOM-free client, and a backend session helper. Authoring and deploying the server is @noodleseed/one.",
   "license": "Apache-2.0",
   "repository": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodleseed/one",
-  "version": "0.141.1",
+  "version": "0.142.0",
   "private": false,
   "description": "Noodle CLI by Noodle Seed — author, run, and deploy declarative MCP servers. Embedding the assistant in your own web app is @noodleseed/assistant.",
   "license": "Apache-2.0",

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-app-sandbox.d.ts

@@ -1,13 +0,0 @@
-/** Relay body pinned to `contract/v1/assistant-sandbox-document.html` and the browser client. */
-export declare const ASSISTANT_SANDBOX_DOCUMENT = "<!doctype html><meta charset=\"utf-8\"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>\nlet inner,loaded=false;\nif(self===top)throw new Error('The assistant sandbox relay must be embedded');\nconst standardSandbox='allow-scripts allow-same-origin allow-forms';\nconst rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');\nlet expectedParentOrigin;\ntry{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}\nconst parentTarget=expectedParentOrigin||'*';\nconst ownOrigin=self.origin;\nconst ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};\n// Re-announce until the host acknowledges with the resource: when this document is hosted\n// cross-origin, the first announcement can arrive before the host's load handler is listening.\nconst announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);\nsetTimeout(()=>clearInterval(announce),15000);\naddEventListener('message',(event)=>{\n  if(event.source===parent){\n    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;\n    const message=event.data;\n    if(message?.method==='ui/notifications/sandbox-resource-ready'){\n      clearInterval(announce);\n      if(loaded)return;\n      loaded=true;\n      const requestedSandbox=message.params?.sandbox;\n      inner=document.createElement('iframe');\n      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');\n      inner.setAttribute('referrerpolicy','no-referrer');\n      const permissions=message.params?.permissions;\n      const allow=[];\n      if(permissions?.camera)allow.push('camera');\n      if(permissions?.microphone)allow.push('microphone');\n      if(permissions?.geolocation)allow.push('geolocation');\n      if(permissions?.clipboardWrite)allow.push('clipboard-write');\n      if(allow.length)inner.setAttribute('allow',allow.join('; '));\n      document.body.append(inner);\n      let html=String(message.params?.html||'');\n      const csp=message.params?.csp;\n      if(csp&&typeof csp==='object'){\n        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;\n        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];\n        const suffix=resources.length?' '+resources.join(' '):'';\n        const policy=[\"default-src 'none'\",\"script-src 'unsafe-inline'\"+suffix,\"style-src 'unsafe-inline'\"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,\"'none'\"),'frame-src '+list(csp.frameDomains,\"'none'\"),\"object-src 'none'\",\"form-action 'none'\",'base-uri '+list(csp.baseUriDomains,\"'none'\")].join('; ');\n        const meta='<meta http-equiv=\"Content-Security-Policy\" content=\"'+policy.replace(/&/g,'&amp;').replace(/\"/g,'&quot;')+'\">';\n        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);\n        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;\n      }\n      try{\n        const doc=inner.contentDocument||inner.contentWindow?.document;\n        if(!doc)throw new Error('document unavailable');\n        doc.open();doc.write(html);doc.close();\n      }catch{inner.srcdoc=html}\n      return;\n    }\n    inner?.contentWindow?.postMessage(message,'*');\n  } else if(inner && event.source===inner.contentWindow) {\n    if(event.origin!==ownOrigin)return;\n    parent.postMessage(event.data,parentTarget);\n  }\n});\nparent.postMessage(ready,parentTarget);\n</script></body>";
-export interface AssistantSandboxResponsePolicy {
-    readonly ok: boolean;
-    readonly contentSecurityPolicy: string;
-}
-/** Match a request authority to the configured sandbox origin, normalizing default ports. */
-export declare function isAssistantSandboxHost(requestHost: string | undefined, sandboxBaseUrl: string | undefined): boolean;
-/** Validate an untrusted query and return the CSP response header to apply before navigation. */
-export declare function resolveAssistantSandboxResponsePolicy(requestUrl: string, isolatedOrigin?: boolean): AssistantSandboxResponsePolicy;
-/** Normalize the operator-provided dedicated sandbox origin and keep it off the service origin. */
-export declare function validateAssistantSandboxBaseUrl(value: string, serviceBase: string | undefined): string;
-//# sourceMappingURL=assistant-app-sandbox.d.ts.map

package/node_modules/@noodle-borg/assistant-gateway/dist/assistant-app-sandbox.js

@@ -1,204 +0,0 @@
-/** Relay body pinned to `contract/v1/assistant-sandbox-document.html` and the browser client. */
-export const ASSISTANT_SANDBOX_DOCUMENT = `<!doctype html><meta charset="utf-8"><style>html,body,iframe{border:0;margin:0;width:100%;height:100%;overflow:hidden}body{background:transparent}</style><body><script>
-let inner,loaded=false;
-if(self===top)throw new Error('The assistant sandbox relay must be embedded');
-const standardSandbox='allow-scripts allow-same-origin allow-forms';
-const rawParentOrigin=new URLSearchParams(location.hash.slice(1)).get('parentOrigin');
-let expectedParentOrigin;
-try{const parsed=new URL(rawParentOrigin||'');if(parsed.origin===rawParentOrigin&&/^https?:$/.test(parsed.protocol))expectedParentOrigin=parsed.origin}catch{}
-const parentTarget=expectedParentOrigin||'*';
-const ownOrigin=self.origin;
-const ready={jsonrpc:'2.0',method:'ui/notifications/sandbox-proxy-ready',params:{}};
-// Re-announce until the host acknowledges with the resource: when this document is hosted
-// cross-origin, the first announcement can arrive before the host's load handler is listening.
-const announce=setInterval(()=>parent.postMessage(ready,parentTarget),120);
-setTimeout(()=>clearInterval(announce),15000);
-addEventListener('message',(event)=>{
-  if(event.source===parent){
-    if(expectedParentOrigin&&event.origin!==expectedParentOrigin)return;
-    const message=event.data;
-    if(message?.method==='ui/notifications/sandbox-resource-ready'){
-      clearInterval(announce);
-      if(loaded)return;
-      loaded=true;
-      const requestedSandbox=message.params?.sandbox;
-      inner=document.createElement('iframe');
-      inner.setAttribute('sandbox',requestedSandbox===standardSandbox?standardSandbox:'allow-scripts');
-      inner.setAttribute('referrerpolicy','no-referrer');
-      const permissions=message.params?.permissions;
-      const allow=[];
-      if(permissions?.camera)allow.push('camera');
-      if(permissions?.microphone)allow.push('microphone');
-      if(permissions?.geolocation)allow.push('geolocation');
-      if(permissions?.clipboardWrite)allow.push('clipboard-write');
-      if(allow.length)inner.setAttribute('allow',allow.join('; '));
-      document.body.append(inner);
-      let html=String(message.params?.html||'');
-      const csp=message.params?.csp;
-      if(csp&&typeof csp==='object'){
-        const list=(value,fallback)=>Array.isArray(value)&&value.length?value.join(' '):fallback;
-        const resources=Array.isArray(csp.resourceDomains)?csp.resourceDomains:[];
-        const suffix=resources.length?' '+resources.join(' '):'';
-        const policy=["default-src 'none'","script-src 'unsafe-inline'"+suffix,"style-src 'unsafe-inline'"+suffix,'img-src data: blob:'+suffix,'font-src data: blob:'+suffix,'media-src data: blob:'+suffix,'worker-src blob:'+suffix,'connect-src '+list(csp.connectDomains,"'none'"),'frame-src '+list(csp.frameDomains,"'none'"),"object-src 'none'","form-action 'none'",'base-uri '+list(csp.baseUriDomains,"'none'")].join('; ');
-        const meta='<meta http-equiv="Content-Security-Policy" content="'+policy.replace(/&/g,'&amp;').replace(/"/g,'&quot;')+'">';
-        const doctype=html.match(/^\\s*<!doctype[^>]*>/i);
-        html=doctype?html.slice(0,doctype[0].length)+meta+html.slice(doctype[0].length):meta+html;
-      }
-      try{
-        const doc=inner.contentDocument||inner.contentWindow?.document;
-        if(!doc)throw new Error('document unavailable');
-        doc.open();doc.write(html);doc.close();
-      }catch{inner.srcdoc=html}
-      return;
-    }
-    inner?.contentWindow?.postMessage(message,'*');
-  } else if(inner && event.source===inner.contentWindow) {
-    if(event.origin!==ownOrigin)return;
-    parent.postMessage(event.data,parentTarget);
-  }
-});
-parent.postMessage(ready,parentTarget);
-</script></body>`;
-const COMPATIBILITY_CSP = "sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; frame-src about:; form-action 'none'; base-uri 'none'; frame-ancestors *";
-const MAX_CSP_QUERY_LENGTH = 8_192;
-const MAX_DOMAINS_PER_DIRECTIVE = 32;
-const CSP_KEYS = ['connectDomains', 'resourceDomains', 'frameDomains', 'baseUriDomains'];
-const CSP_KEY_SET = new Set(CSP_KEYS);
-/** Match a request authority to the configured sandbox origin, normalizing default ports. */
-export function isAssistantSandboxHost(requestHost, sandboxBaseUrl) {
-    if (requestHost === undefined || sandboxBaseUrl === undefined)
-        return false;
-    try {
-        const sandboxUrl = new URL(sandboxBaseUrl);
-        const requestUrl = new URL(`${sandboxUrl.protocol}//${requestHost}`);
-        return requestUrl.href === `${sandboxUrl.origin}/`;
-    }
-    catch {
-        return false;
-    }
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function isLoopback(hostname) {
-    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';
-}
-function normalizeCspDomain(value, connect) {
-    if (value.length > 512 || /[;\r\n'"\s]/u.test(value))
-        return undefined;
-    try {
-        const parsed = new URL(value);
-        const secure = parsed.protocol === 'https:' || (connect && parsed.protocol === 'wss:');
-        const local = isLoopback(parsed.hostname) &&
-            (parsed.protocol === 'http:' || (connect && parsed.protocol === 'ws:'));
-        if (!secure && !local)
-            return undefined;
-        if (parsed.username ||
-            parsed.password ||
-            parsed.pathname !== '/' ||
-            parsed.search ||
-            parsed.hash) {
-            return undefined;
-        }
-        return parsed.origin;
-    }
-    catch {
-        return undefined;
-    }
-}
-function parseSandboxCsp(requestUrl) {
-    const url = new URL(requestUrl, 'http://sandbox.invalid');
-    const values = url.searchParams.getAll('csp');
-    if (values.length === 0)
-        return { ok: true };
-    const serialized = values[0];
-    if (values.length !== 1 || serialized === undefined || serialized.length > MAX_CSP_QUERY_LENGTH) {
-        return { ok: false };
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(serialized);
-    }
-    catch {
-        return { ok: false };
-    }
-    if (!isRecord(parsed) || Object.keys(parsed).some((key) => !CSP_KEY_SET.has(key))) {
-        return { ok: false };
-    }
-    const csp = {};
-    for (const key of CSP_KEYS) {
-        const raw = parsed[key];
-        if (raw === undefined)
-            continue;
-        if (!Array.isArray(raw) || raw.length > MAX_DOMAINS_PER_DIRECTIVE)
-            return { ok: false };
-        const normalized = [];
-        for (const entry of raw) {
-            if (typeof entry !== 'string')
-                return { ok: false };
-            const domain = normalizeCspDomain(entry, key === 'connectDomains');
-            if (!domain)
-                return { ok: false };
-            normalized.push(domain);
-        }
-        csp[key] = [...new Set(normalized)];
-    }
-    return { ok: true, value: csp };
-}
-function sources(values, fallback) {
-    return values && values.length > 0 ? values.join(' ') : fallback;
-}
-function sandboxCsp(csp, isolatedOrigin) {
-    const resources = csp.resourceDomains ?? [];
-    const resourceSuffix = resources.length > 0 ? ` ${resources.join(' ')}` : '';
-    return [
-        isolatedOrigin
-            ? 'sandbox allow-scripts allow-same-origin allow-forms'
-            : 'sandbox allow-scripts',
-        "default-src 'none'",
-        `script-src 'self' 'unsafe-inline'${resourceSuffix}`,
-        `style-src 'self' 'unsafe-inline'${resourceSuffix}`,
-        `img-src 'self' data: blob:${resourceSuffix}`,
-        `font-src 'self' data: blob:${resourceSuffix}`,
-        `media-src 'self' data: blob:${resourceSuffix}`,
-        `worker-src 'self' blob:${resourceSuffix}`,
-        `connect-src 'self'${csp.connectDomains && csp.connectDomains.length > 0 ? ` ${csp.connectDomains.join(' ')}` : ''}`,
-        `frame-src ${sources(csp.frameDomains, "'none'")}`,
-        "object-src 'none'",
-        "form-action 'none'",
-        `base-uri ${sources(csp.baseUriDomains, "'none'")}`,
-        'frame-ancestors *',
-    ].join('; ');
-}
-/** Validate an untrusted query and return the CSP response header to apply before navigation. */
-export function resolveAssistantSandboxResponsePolicy(requestUrl, isolatedOrigin = false) {
-    const parsed = parseSandboxCsp(requestUrl);
-    if (!parsed.ok)
-        return { ok: false, contentSecurityPolicy: COMPATIBILITY_CSP };
-    return {
-        ok: true,
-        contentSecurityPolicy: parsed.value !== undefined || isolatedOrigin
-            ? sandboxCsp(parsed.value ?? {}, isolatedOrigin)
-            : COMPATIBILITY_CSP,
-    };
-}
-/** Normalize the operator-provided dedicated sandbox origin and keep it off the service origin. */
-export function validateAssistantSandboxBaseUrl(value, serviceBase) {
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        throw new Error('assistantSandboxBaseUrl must be an exact HTTPS or HTTP loopback origin');
-    }
-    const loopback = isLoopback(parsed.hostname);
-    if (parsed.origin !== value ||
-        (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopback))) {
-        throw new Error('assistantSandboxBaseUrl must be an exact HTTPS or HTTP loopback origin');
-    }
-    if (serviceBase !== undefined && new URL(serviceBase).origin === parsed.origin) {
-        throw new Error('assistantSandboxBaseUrl must use an origin separate from publicBaseUrl');
-    }
-    return parsed.origin;
-}
-//# sourceMappingURL=assistant-app-sandbox.js.map