@omg-dev/app 0.1.323 → 0.1.325

package/dist-lib/{highlighted-body-OFNGDK62-DI8qFchC.js → highlighted-body-OFNGDK62-BFHCVYnY.js}

@@ -1,4 +1,4 @@
-import { R as c, L as f, A as d } from "./streamdown-response-BaisNaaU.js";
+import { R as c, L as f, A as d } from "./streamdown-response-C7vdsjzr.js";
 import { useContext as p, useState as L, useEffect as N } from "react";
 import { jsx as x } from "react/jsx-runtime";
 var A = ({ code: s, language: e, raw: a, className: o, startLine: m, lineNumbers: u, ...g }) => {

package/dist-lib/{index-DbqbmqNj.js → index-DNB8RA4N.js}

@@ -1,4 +1,4 @@
-import { w as T, s as U, h as X, c as Y, v as G, S as J, o as k, l as Q, f as M, m as y } from "./streamdown-response-BaisNaaU.js";
+import { w as T, s as U, h as X, c as Y, v as G, S as J, o as k, l as Q, f as M, m as y } from "./streamdown-response-C7vdsjzr.js";
 import v from "./katex-jHfnQmlp.js";
 function Z(t, e) {
   return B(t, {}) || { type: "root", children: [] };

package/dist-lib/index.d.ts

@@ -25,6 +25,41 @@ export interface OmgErrorSink {
   appVersion?: string;
 }
 
+/**
+ * Push notifications in an embedded surface.
+ *
+ * The machine encrypts each notice INTO the push (RFC 8291), so the worker that
+ * receives it needs no callback to the machine — which matters here, because
+ * the receiving worker belongs to the HOST's origin, where the machine's
+ * /api/push/pending does not exist.
+ *
+ * A host that wants notifications only has to render the decrypted message in
+ * its own service worker:
+ *
+ *     self.addEventListener("push", (event) => {
+ *       const n = event.data?.json();
+ *       if (!n?.title) return;
+ *       event.waitUntil(self.registration.showNotification(n.title, {
+ *         body: n.body || "",
+ *         tag: n.tag,
+ *         requireInteraction: !!n.requireInteraction,
+ *         data: { url: n.url },
+ *       }));
+ *     });
+ *
+ * `url` arrives absolute, resolved against the origin the device subscribed
+ * from. The host never sees the notification text — it is encrypted end to end
+ * between the machine and the device.
+ */
+export interface OmgPushNotification {
+  title: string;
+  body?: string;
+  /** Absolute deep link into the surface the device subscribed from. */
+  url?: string;
+  tag?: string;
+  requireInteraction?: boolean;
+}
+
 /** Presentation-only identity supplied by an embedding host. */
 export interface EmbeddedViewer {
   id: string;
@@ -48,9 +83,23 @@ export interface OmgAppSurfaceProps {
    * session ownership, filtering, or authorization semantics.
    */
   viewer?: EmbeddedViewer;
+  /**
+   * Route dictation audio to the host's own transcription broker instead of to
+   * the LFG server this UI was served from. A hosted surface should set this:
+   * transcription is funded and metered by the platform, so it must not depend
+   * on a provider key the connected machine may or may not hold.
+   */
+  hostedTranscription?: HostedTranscription;
   errorSink?: OmgErrorSink;
 }
 
+export interface HostedTranscription {
+  /** Absolute wss:// URL of the transcription broker. */
+  url: string;
+  /** Fresh viewer JWT, or null when the session can no longer be proven. */
+  getToken: () => Promise<string | null>;
+}
+
 export declare function OmgAppSurface(
   props: OmgAppSurfaceProps,
 ): JSX.Element;

package/dist-lib/index.js

@@ -1,6 +1,6 @@
 import "react/jsx-runtime";
 import "react";
-import { ae as p, af as m, ag as o } from "./embedded-BgLSMF4E.js";
+import { ae as p, af as m, ag as o } from "./embedded-B_CV8zzR.js";
 export {
   p as OmgAppSurface,
   m as OmgSettingsSurface,

package/dist-lib/mermaid-GHXKKRXX-DbAgzNwG.js

@@ -0,0 +1,4 @@
+import { p } from "./streamdown-response-C7vdsjzr.js";
+export {
+  p as Mermaid
+};

package/dist-lib/{resume-session-sheet-D5RZ8bwQ.js → resume-session-sheet-Cezw8wk-.js}

@@ -1,5 +1,5 @@
 import { jsx as t, jsxs as s, Fragment as N } from "react/jsx-runtime";
-import { r as H, n as Q, a as le, o as re, p as oe, q as ie, X, A, f as u, R as B, s as ce, u as de, v as J, T as ue, w as me, x as he, y as pe, L as fe } from "./embedded-BgLSMF4E.js";
+import { r as H, n as Q, a as le, o as re, p as oe, q as ie, X, A, f as u, R as B, s as ce, u as de, v as J, T as ue, w as me, x as he, y as pe, L as fe } from "./embedded-B_CV8zzR.js";
 import { useState as a, useRef as L, useEffect as v, useCallback as ge } from "react";
 function we({
   initial: m,

package/dist-lib/{session-token-usage-CFXPavjx.js → session-token-usage-DnxWQClQ.js}

@@ -1,5 +1,5 @@
 import { jsx as s, jsxs as n, Fragment as $ } from "react/jsx-runtime";
-import { a as C, D as T, b as M, c as D, d as S, G as F, e as L, t as R, L as j, f as z } from "./embedded-BgLSMF4E.js";
+import { a as C, D as T, b as M, c as D, d as S, G as F, e as L, t as R, L as j, f as z } from "./embedded-B_CV8zzR.js";
 import { useState as g, useCallback as P, useEffect as U } from "react";
 function u({
   title: r,

package/dist-lib/{shipped-page-DWKpmjtx.js → shipped-page-BlyiY5sW.js}

@@ -1,6 +1,6 @@
 import { jsxs as l, jsx as r, Fragment as me } from "react/jsx-runtime";
 import { useState as f, useEffect as w, useRef as fe, useContext as $e, useMemo as ze } from "react";
-import { z as ve, O as he, Q as Te, U as S, V as ge, W as Se, Y as Pe, Z as je, B as Fe, L as pe, v as J, y as Ye, R as Ge, f as P, T as Be, _ as Ke, k as be, g as Ue, $ as He, a as L, a0 as k, a1 as R, l as _, a2 as W, a3 as Ve, a4 as qe, a5 as Qe, a6 as Xe, P as Je, a7 as We } from "./embedded-BgLSMF4E.js";
+import { z as ve, O as he, Q as Te, U as S, V as ge, W as Se, Y as Pe, Z as je, B as Fe, L as pe, v as J, y as Ye, R as Ge, f as P, T as Be, _ as Ke, k as be, g as Ue, $ as He, a as L, a0 as k, a1 as R, l as _, a2 as W, a3 as Ve, a4 as qe, a5 as Qe, a6 as Xe, P as Je, a7 as We } from "./embedded-B_CV8zzR.js";
 /**
  * @license lucide-react v0.577.0 - ISC
  *

package/dist-lib/{streamdown-response-BaisNaaU.js → streamdown-response-C7vdsjzr.js}

@@ -3,7 +3,7 @@ var Od = (e, t, n) => t in e ? Rd(e, t, { enumerable: !0, configurable: !0, writ
 var le = (e, t, n) => Od(e, typeof t != "symbol" ? t + "" : t, n);
 import { jsx as y, jsxs as J, Fragment as _t } from "react/jsx-runtime";
 import { memo as he, useId as Dd, useTransition as Pd, useMemo as Ee, useRef as Re, useEffect as De, useState as ge, createElement as Xa, isValidElement as Vt, cloneElement as Md, useContext as Pe, createContext as Jt, useCallback as ze, Suspense as wi, lazy as Zu } from "react";
-import { ad as Ju, f as eo, a8 as vd, m as Bd, a9 as Fd } from "./embedded-BgLSMF4E.js";
+import { ad as Ju, f as eo, a8 as vd, m as Bd, a9 as Fd } from "./embedded-B_CV8zzR.js";
 import { createPortal as to } from "react-dom";
 import { f as Ur, p as Ka, e as Za, g as Ja, h as Jn, s as Mt, z as no, i as ro, j as io, k as Hd, l as es, w as Ud, b as zd, c as $d, m as jd, d as qd } from "./engine-compile-BeZvvx0I.js";
 import { g as ao } from "./_commonjsHelpers-C6fGbg64.js";
@@ -18959,7 +18959,7 @@ var yc = Jt(!1), kk = () => Pe(yc), Ua = (...e) => nc(Ju(e)), xk = (e, t) => {
   for (; t > 0 && e[t - 1] === `
 `; ) t--;
   return e.slice(0, t);
-}, wk = Zu(() => import("./highlighted-body-OFNGDK62-DI8qFchC.js").then((e) => ({ default: e.HighlightedCodeBlockBody }))), Lk = ({ code: e, language: t, className: n, children: r, isIncomplete: i = !1, startLine: a, lineNumbers: s, ...u }) => {
+}, wk = Zu(() => import("./highlighted-body-OFNGDK62-BFHCVYnY.js").then((e) => ({ default: e.HighlightedCodeBlockBody }))), Lk = ({ code: e, language: t, className: n, children: r, isIncomplete: i = !1, startLine: a, lineNumbers: s, ...u }) => {
   let o = ee(), l = Ee(() => Sk(e), [e]), d = Ee(() => ({ bg: "transparent", fg: "inherit", tokens: l.split(`
 `).map((f) => [{ content: f, color: "inherit", bgColor: "transparent", htmlStyle: {}, offset: 0 }]) }), [l]);
   return y(Cc.Provider, { value: { code: e }, children: J(Ik, { isIncomplete: i, language: t, children: [y(Nk, { language: t }), r ? y("div", { className: o("pointer-events-none sticky top-2 z-10 -mt-10 flex h-8 items-center justify-end"), children: y("div", { className: o("pointer-events-auto flex shrink-0 items-center gap-2 rounded-md border border-sidebar bg-sidebar/80 px-1.5 py-1 supports-[backdrop-filter]:bg-sidebar/70 supports-[backdrop-filter]:backdrop-blur"), "data-streamdown": "code-block-actions", children: r }) }) : null, y(wi, { fallback: y(Ck, { className: n, language: t, lineNumbers: s, result: d, startLine: a, ...u }), children: y(wk, { className: n, code: l, language: t, lineNumbers: s, raw: d, startLine: a, ...u }) })] }) });
@@ -19301,7 +19301,7 @@ var yc = Jt(!1), kk = () => Pe(yc), Ua = (...e) => nc(Ju(e)), xk = (e, t) => {
 }, Zk = ({ children: e, className: t, showControls: n, showCopy: r = !0, showDownload: i = !0, showFullscreen: a = !0, ...s }) => {
   let u = ee(), o = n && r, l = n && i, d = n && a, f = o || l || d;
   return J("div", { className: u("my-4 flex flex-col gap-2 rounded-lg border border-border bg-sidebar p-2"), "data-streamdown": "table-wrapper", children: [f ? J("div", { className: u("flex items-center justify-end gap-1"), children: [o ? y(Rc, {}) : null, l ? y(Oc, {}) : null, d ? y(Kk, { showCopy: o, showDownload: l, children: e }) : null] }) : null, y("div", { className: u("border-collapse overflow-x-auto overflow-y-auto rounded-md border border-border bg-background"), children: y("table", { className: u("w-full divide-y divide-border", t), "data-streamdown": "table", ...s, children: e }) })] });
-}, Jk = /startLine=(\d+)/, ex = /\bnoLineNumbers\b/, tx = Zu(() => import("./mermaid-GHXKKRXX-CV6iAjsp.js").then((e) => ({ default: e.Mermaid }))), nx = /language-([^\s]+)/;
+}, Jk = /startLine=(\d+)/, ex = /\bnoLineNumbers\b/, tx = Zu(() => import("./mermaid-GHXKKRXX-DbAgzNwG.js").then((e) => ({ default: e.Mermaid }))), nx = /language-([^\s]+)/;
 function Jr(e, t) {
   if (!(e != null && e.position || t != null && t.position)) return !0;
   if (!(e != null && e.position && t != null && t.position)) return !1;
@@ -20814,7 +20814,7 @@ function S6(e) {
 }
 function w6() {
   return Tr || (Tr = Promise.all([
-    import("./index-DbqbmqNj.js"),
+    import("./index-DNB8RA4N.js"),
     import("./index-JkCQXUYs.js").then((e) => e.bp)
   ]).then(([e, t]) => {
     Hn = { math: e.math, mermaid: t.mermaid };

package/dist-lib/sw.js

@@ -121,6 +121,9 @@ async function showOmgNotification(title, options) {
 }
 
 async function showLatest(payload) {
+  // Encrypted-payload push: everything needed is in the message, so render it
+  // without calling back to the API. This is the path that works when the app
+  // is served from an origin that is not the lfg box.
   if (payload?.title) {
     await showOmgNotification(payload.title, {
       body: payload.body || "",
@@ -128,6 +131,7 @@ async function showLatest(payload) {
       badge: "/icon-maskable.svg",
       tag: payload.tag || "lfg",
       renotify: true,
+      requireInteraction: !!payload.requireInteraction,
       data: { url: payload.url || "/" },
     });
     return;
@@ -205,9 +209,19 @@ self.addEventListener("notificationclick", (event) => {
       const all = await self.clients.matchAll({ type: "window", includeUncontrolled: true });
       const client = all.find((c) => "focus" in c);
       if (client) {
-        if ("navigate" in client) await client.navigate(target);
+        // navigate() rejects for a cross-origin target — which an absolute url
+        // from a hosted surface legitimately is. Focus the window regardless,
+        // then let openWindow handle the destination we could not navigate to.
+        let navigated = true;
+        if ("navigate" in client) {
+          try {
+            await client.navigate(target);
+          } catch {
+            navigated = false;
+          }
+        }
         await client.focus();
-        return;
+        if (navigated) return;
       }
       if (self.clients.openWindow) await self.clients.openWindow(target);
     })(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omg-dev/app",
-  "version": "0.1.323",
+  "version": "0.1.325",
   "description": "The full OMG application surface for React hosts.",
   "license": "MIT",
   "homepage": "https://omg.dev",
@@ -24,7 +24,7 @@
   },
   "type": "module",
   "dependencies": {
-    "@omg-dev/client": "0.1.323",
+    "@omg-dev/client": "0.1.325",
     "@ai-sdk/react": "^4.0.19",
     "@base-ui/react": "^1.3.0",
     "@number-flow/react": "^0.6.2",

package/dist-lib/mermaid-GHXKKRXX-CV6iAjsp.js

@@ -1,4 +0,0 @@
-import { p } from "./streamdown-response-BaisNaaU.js";
-export {
-  p as Mermaid
-};