@opengeni/react 3.3.2 → 3.7.0-canary.0

package/dist/interaction.js

@@ -7,19 +7,20 @@ import {
   useBrowserSession,
   useBrowserSessions,
   useSiteAuthConnections
-} from "./chunk-ZPBTI3TE.js";
+} from "./chunk-W2RGYBCV.js";
 import {
   ComputerViewer,
   useComputerFrameStream,
   useComputerSession,
   useComputerSessions
-} from "./chunk-ELIYWBZR.js";
+} from "./chunk-BV5A4OTE.js";
 import {
   useInteractionInterventions,
   useInteractionInvalidation
 } from "./chunk-H5YGYNXS.js";
 import "./chunk-4MDLEHXL.js";
 import "./chunk-5YK2ZDIG.js";
+import "./chunk-JVYQRRC4.js";
 import "./chunk-KZ73RL76.js";
 import {
   useEmbeddedBrowserInteraction,
@@ -27,7 +28,6 @@ import {
   useEmbeddedInteraction,
   useEmbeddedInterventions
 } from "./chunk-NEXLLTP4.js";
-import "./chunk-JVYQRRC4.js";
 import "./chunk-VTOREEXF.js";
 import "./chunk-22KP6LR5.js";
 

package/dist/model-policy.d.ts

@@ -1,5 +1,6 @@
+import { type ModelPickerBillingClass } from "@opengeni/sdk/model-picker-order";
 import type { ClientModel, ReasoningEffort, WorkspaceModelCatalogModel } from "@opengeni/sdk";
-export type PickerBillingClass = "opengeni_credits" | "external" | "codex_subscription" | "supergrok_subscription" | "byok";
+export type PickerBillingClass = ModelPickerBillingClass;
 export type PickerModelRow<TCatalog extends ClientModel = WorkspaceModelCatalogModel> = {
     id: string;
     label: string;

package/dist/model-policy.js

@@ -15,7 +15,7 @@ import {
   projectPickerRows,
   runnableLatencyModesForModel,
   sortPickerRows
-} from "./chunk-X4A66EWZ.js";
+} from "./chunk-WMGF4Z7X.js";
 export {
   advancedSourceSummary,
   availabilityReasonLabel,

package/dist/{queue-surface-implementation-BSKUWHRI.js → queue-surface-implementation-XL2A6PBM.js}

@@ -3,7 +3,7 @@ import {
   QueueStoppingStatus,
   TimelineAnnotationsChip,
   requestQueueDraftEdit
-} from "./chunk-WSK7G5LE.js";
+} from "./chunk-W3OUAH6M.js";
 import {
   usePortalTokenSource,
   usePortalTokenStyle
@@ -1047,4 +1047,4 @@ export {
   QueueSurface,
   queueComposerCheckoutEnabled
 };
-//# sourceMappingURL=queue-surface-implementation-BSKUWHRI.js.map
+//# sourceMappingURL=queue-surface-implementation-XL2A6PBM.js.map

package/dist/realtime.js

@@ -3,8 +3,7 @@ import {
   PickerAnimatedPage,
   PickerBackHeader,
   PickerNavRow
-} from "./chunk-2DZVYHVO.js";
-import "./chunk-X4A66EWZ.js";
+} from "./chunk-4JFUT22W.js";
 import {
   usePortalTokenSource,
   usePortalTokenStyle
@@ -12,6 +11,7 @@ import {
 import {
   useEmbeddedRealtimeSession
 } from "./chunk-NEXLLTP4.js";
+import "./chunk-WMGF4Z7X.js";
 import {
   cn
 } from "./chunk-22KP6LR5.js";

package/dist/session-ui.js

@@ -11,14 +11,14 @@ import {
   sessionChromeGoalPillLabel,
   sessionChromeGoalPillState,
   userMessageLikelyNeedsDisclosure
-} from "./chunk-YG4QEQF5.js";
-import {
-  createOlderHistoryLoadReceipt
-} from "./chunk-JAQ5K7W6.js";
-import "./chunk-WSK7G5LE.js";
+} from "./chunk-DOK4KZF2.js";
+import "./chunk-W3OUAH6M.js";
+import "./chunk-JVYQRRC4.js";
 import "./chunk-7EAFGICR.js";
 import "./chunk-VZTQ73XT.js";
-import "./chunk-JVYQRRC4.js";
+import {
+  createOlderHistoryLoadReceipt
+} from "./chunk-FJBOU2TH.js";
 import "./chunk-VTOREEXF.js";
 import "./chunk-22KP6LR5.js";
 export {

package/dist/session.js

@@ -17,7 +17,7 @@ import {
   useSessionLineage,
   useSessionMcpApprovalPolicy,
   useTurnQueue
-} from "./chunk-3AGBGTRT.js";
+} from "./chunk-C6WDLHBA.js";
 import {
   FILE_ONLY_MESSAGE_TEXT,
   composeSendInput,
@@ -25,6 +25,8 @@ import {
   shouldSubmitOnKey,
   useComposer
 } from "./chunk-IOLVN74D.js";
+import "./chunk-KZ73RL76.js";
+import "./chunk-NEXLLTP4.js";
 import {
   buildTimeline,
   createOlderHistoryLoadReceipt,
@@ -35,9 +37,7 @@ import {
   projectPendingHumanInputRequests,
   sessionStatusFromEvents,
   toolDisplayName
-} from "./chunk-JAQ5K7W6.js";
-import "./chunk-KZ73RL76.js";
-import "./chunk-NEXLLTP4.js";
+} from "./chunk-FJBOU2TH.js";
 import "./chunk-VTOREEXF.js";
 export {
   FILE_ONLY_MESSAGE_TEXT,

package/dist/timeline/registry.d.ts

@@ -22,6 +22,8 @@ export type ToolRegistryEntry = {
     match: "name";
     name: string;
     render: ToolRenderer;
+    /** Disable untrusted `<server>__${name}` leaf matching for identity-sensitive renderers. */
+    matchPrefixedLeaf?: boolean | undefined;
 };
 export type ToolRegistry = {
     /** Resolve the renderer for a call (never null — falls back to generic). */

package/dist/timeline/types.d.ts

@@ -228,7 +228,7 @@ export type FleetDecisionItem = {
     policyVersion: "adaptive-shadow-v1";
     actualOutcome: "selected" | "waiting" | "none";
     actualCandidateKey: string | null;
-    actualReason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "none";
+    actualReason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "allocator_disabled" | "none";
     shadowOutcome: "selected" | "paced" | "none";
     shadowCandidateKey: string | null;
     shadowReason: "fenced_in_flight" | "fenced_candidate_missing" | "admission_paced" | "no_eligible_candidate" | "overlay_isolated_empty" | "best_score" | "affinity_best" | "hysteresis_hold";
@@ -332,6 +332,8 @@ export type AuthNeededItem = {
     providerDomain: string;
     /** The lapsed connection to reconnect, when the row survived. */
     connectionId: string | null;
+    /** Host-owned bindings must never be routed into OpenGeni's native reconnect flow. */
+    authoritySource?: ToolAuthNeededPayload["authoritySource"] | null | undefined;
     reason: ToolAuthNeededPayload["reason"] | null;
     /** Scopes the provider now needs; may inform the copy, never shown as a raw label. */
     scopes: string[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/react",
-  "version": "3.3.2",
+  "version": "3.7.0-canary.0",
   "description": "React hooks and styled components for OpenGeni: live session streaming, chat composer, message timeline, session status, and fleet views — token-themed (CSS variables), dark-first, built on Tailwind v4 + Radix + Motion.",
   "license": "Apache-2.0",
   "repository": {
@@ -120,7 +120,7 @@
     "@dnd-kit/utilities": "3.2.2",
     "@fontsource-variable/noto-sans-arabic": "5.2.10",
     "@fontsource-variable/noto-sans-jp": "5.2.10",
-    "@opengeni/sdk": "^3.3.2",
+    "@opengeni/sdk": "^3.7.0-canary.0",
     "clsx": "^2.1.1",
     "dequal": "2.0.3",
     "lucide-react": "^1.8.0",

package/src/artifacts.ts

@@ -18,6 +18,8 @@ export {
   PresentationProjectionEditor,
   PublishedHtmlArtifactFrame,
   PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX,
+  openGeniSiteBridgePortFromBootstrap,
+  publishedHtmlArtifactDocument,
   SpreadsheetArtifactSurface,
   SpreadsheetGrid,
   SpreadsheetProjectionGrid,
@@ -62,6 +64,7 @@ export {
   type PresentationProjectionConnector,
   type PresentationProjectionEditorProps,
   type PublishedHtmlArtifactFrameProps,
+  type PublishedHtmlArtifactToolBridge,
   type PresentationProjectionElementMetadata,
   type PresentationProjectionElement,
   type PresentationProjectionFill,

package/src/client.ts

@@ -246,7 +246,8 @@ export type EmbeddedSessionLineageClientLike = EmbeddedSessionEventClientLike &
   Pick<OpenGeniClient, "getSessionLineage">;
 
 /** Exact client surface required by {@link useFileAttachments}. */
-export type EmbeddedFileAttachmentClientLike = Pick<OpenGeniClient, "uploadFile">;
+export type EmbeddedFileAttachmentClientLike = Pick<OpenGeniClient, "uploadFile"> &
+  Partial<Pick<OpenGeniClient, "createFileDownloadUrl">>;
 
 /** Exact client surface required by structured human-input hooks. */
 export type EmbeddedHumanInputSessionClientLike = EmbeddedSessionEventClientLike &

package/src/components/artifacts/index.ts

@@ -6,7 +6,10 @@ export {
 export {
   PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX,
   PublishedHtmlArtifactFrame,
+  openGeniSiteBridgePortFromBootstrap,
+  publishedHtmlArtifactDocument,
   type PublishedHtmlArtifactFrameProps,
+  type PublishedHtmlArtifactToolBridge,
 } from "./published-html-artifact-frame";
 export {
   SpreadsheetArtifactSurface,

package/src/components/artifacts/published-html-artifact-frame.tsx

@@ -1,4 +1,21 @@
-import type { CSSProperties } from "react";
+import {
+  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL,
+  OPENGENI_SITE_BRIDGE_READY,
+  OPENGENI_SITE_BRIDGE_RESPONSE,
+  OPENGENI_SITE_BRIDGE_VERSION,
+  isOpenGeniSiteBridgeCancelMessage,
+  isOpenGeniSiteBridgeConnectMessage,
+  isOpenGeniSiteBridgeRequestMessage,
+  sanitizeOpenGeniSiteToolCallRequest,
+  type OpenGeniSiteBridgeResponseMessage,
+  type OpenGeniSiteToolCatalog,
+} from "@opengeni/sdk/site";
+import type {
+  ToolGatewayCallRequest,
+  ToolGatewayCallResponse,
+  ToolGatewayDeclarationsResponse,
+} from "@opengeni/sdk";
+import { useEffect, useRef, type CSSProperties } from "react";
 
 export const PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX = [
   "allow-downloads",
@@ -17,22 +34,285 @@ export type PublishedHtmlArtifactFrameProps = {
   title: string;
   className?: string;
   style?: CSSProperties;
+  toolBridge?: PublishedHtmlArtifactToolBridge;
 };
 
+export type PublishedHtmlArtifactToolBridge = {
+  catalog: (options: { signal: AbortSignal }) => Promise<OpenGeniSiteToolCatalog>;
+  call: (
+    request: ToolGatewayCallRequest,
+    options: { signal: AbortSignal },
+  ) => Promise<ToolGatewayCallResponse>;
+  declarations?: (options: { signal: AbortSignal }) => Promise<ToolGatewayDeclarationsResponse>;
+};
+
+const SITE_BRIDGE_BOOTSTRAP_SCRIPT = `<script>(()=>{const key=${JSON.stringify(
+  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL,
+)};const parentWindow=window.parent;if(parentWindow===window)return;window.addEventListener("message",event=>{const data=event.data;if(event.source!==parentWindow||!data||data.type!==${JSON.stringify(
+  OPENGENI_SITE_BRIDGE_READY,
+)}||data.version!==${OPENGENI_SITE_BRIDGE_VERSION}||event.ports.length!==1)return;const port=event.ports[0];const previous=window[key]?.port;if(previous&&previous!==port)previous.close();Object.defineProperty(window,key,{configurable:true,value:{port}});port.start();});})();</script>`;
+
+export function publishedHtmlArtifactDocument(html: string, toolBridgeEnabled: boolean): string {
+  if (!toolBridgeEnabled) return html;
+  const doctypeEnd = leadingDoctypeEnd(html);
+  if (doctypeEnd >= 0) {
+    return `${html.slice(0, doctypeEnd + 1)}${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html.slice(doctypeEnd + 1)}`;
+  }
+  return `${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html}`;
+}
+
+function leadingDoctypeEnd(html: string): number {
+  const lower = html.toLowerCase();
+  let cursor = html.charCodeAt(0) === 0xfeff ? 1 : 0;
+  while (cursor < html.length) {
+    while (/\s/.test(html[cursor] ?? "")) cursor += 1;
+    if (!html.startsWith("<!--", cursor)) break;
+    const commentEnd = html.indexOf("-->", cursor + 4);
+    if (commentEnd < 0) return -1;
+    cursor = commentEnd + 3;
+  }
+  if (!lower.startsWith("<!doctype", cursor)) return -1;
+  return html.indexOf(">", cursor + 9);
+}
+
 /**
  * Render exact published HTML in an opaque-origin iframe. Artifact scripts,
- * external resources, forms, popups, and downloads work without granting
- * parent-origin authority, shared cookies/storage, or top-level navigation.
+ * external resources, forms, popups, downloads, and the host-filtered tool
+ * bridge work without granting parent-origin authority, shared cookies/storage,
+ * or top-level navigation.
  */
 export function PublishedHtmlArtifactFrame(props: PublishedHtmlArtifactFrameProps) {
+  const frameRef = useRef<HTMLIFrameElement | null>(null);
+  const bridgeRef = useRef(props.toolBridge);
+  const onFrameLoadRef = useRef<() => void>(() => undefined);
+  const frameLoadPendingRef = useRef(false);
+  const toolBridgeEnabled = props.toolBridge !== undefined;
+  useEffect(() => {
+    bridgeRef.current = props.toolBridge;
+  }, [props.toolBridge]);
+  useEffect(() => {
+    if (!toolBridgeEnabled || typeof window === "undefined") return;
+    const requests = new SiteBridgeRequestRegistry();
+    const attachToolPort = (data: unknown, ports: readonly MessagePort[]) => {
+      const port = openGeniSiteBridgePortFromBootstrap(data, ports);
+      if (!port) return;
+      requests.replacePort(port);
+      port.addEventListener("message", (portEvent: MessageEvent<unknown>) => {
+        const message = portEvent.data;
+        if (isOpenGeniSiteBridgeCancelMessage(message)) {
+          requests.cancel(port, message.requestId);
+          return;
+        }
+        if (!isOpenGeniSiteBridgeRequestMessage(message)) return;
+        const controller = requests.start(port, message.requestId);
+        if (!controller) {
+          port.postMessage({
+            type: OPENGENI_SITE_BRIDGE_RESPONSE,
+            version: OPENGENI_SITE_BRIDGE_VERSION,
+            requestId: message.requestId,
+            ok: false,
+            error: {
+              code: "duplicate_request_id",
+              message: "A Site tool request with this id is already running",
+              retryable: false,
+            },
+          } satisfies OpenGeniSiteBridgeResponseMessage);
+          return;
+        }
+        void handleSiteBridgeRequest(bridgeRef.current, message, controller.signal)
+          .then((value) => {
+            if (!controller.signal.aborted) {
+              port.postMessage({
+                type: OPENGENI_SITE_BRIDGE_RESPONSE,
+                version: OPENGENI_SITE_BRIDGE_VERSION,
+                requestId: message.requestId,
+                ok: true,
+                value,
+              } satisfies OpenGeniSiteBridgeResponseMessage);
+            }
+          })
+          .catch((error) => {
+            if (!controller.signal.aborted) {
+              port.postMessage({
+                type: OPENGENI_SITE_BRIDGE_RESPONSE,
+                version: OPENGENI_SITE_BRIDGE_VERSION,
+                requestId: message.requestId,
+                ok: false,
+                error: siteBridgeError(error),
+              } satisfies OpenGeniSiteBridgeResponseMessage);
+            }
+          })
+          .finally(() => requests.complete(port, message.requestId, controller));
+      });
+      port.addEventListener("messageerror", () => requests.closePort(port));
+      port.start();
+      port.postMessage({
+        type: OPENGENI_SITE_BRIDGE_READY,
+        version: OPENGENI_SITE_BRIDGE_VERSION,
+      });
+    };
+    const documentLease = new SiteBridgeDocumentLease(attachToolPort, () => requests.closeAll());
+    const onFrameLoad = () => {
+      frameLoadPendingRef.current = false;
+      const frameWindow = frameRef.current?.contentWindow ?? null;
+      if (!frameWindow) return;
+      documentLease.load(frameWindow);
+    };
+    onFrameLoadRef.current = onFrameLoad;
+    if (frameLoadPendingRef.current) {
+      frameLoadPendingRef.current = false;
+      onFrameLoad();
+    }
+    return () => {
+      onFrameLoadRef.current = () => undefined;
+      documentLease.close();
+    };
+  }, [props.html, toolBridgeEnabled]);
   return (
     <iframe
+      ref={frameRef}
       title={props.title}
       sandbox={PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX}
       referrerPolicy="no-referrer"
-      srcDoc={props.html}
+      srcDoc={publishedHtmlArtifactDocument(props.html, toolBridgeEnabled)}
+      onLoad={() => {
+        frameLoadPendingRef.current = true;
+        onFrameLoadRef.current();
+      }}
       className={props.className}
       style={props.style}
     />
   );
 }
+
+export class SiteBridgeRequestRegistry {
+  private readonly controllersByPort = new Map<MessagePort, Map<string, AbortController>>();
+
+  replacePort(port: MessagePort): void {
+    this.closeAll();
+    this.controllersByPort.set(port, new Map());
+  }
+
+  start(port: MessagePort, requestId: string): AbortController | null {
+    const controllers = this.controllersByPort.get(port);
+    if (!controllers || controllers.has(requestId)) return null;
+    const controller = new AbortController();
+    controllers.set(requestId, controller);
+    return controller;
+  }
+
+  cancel(port: MessagePort, requestId: string): void {
+    const controllers = this.controllersByPort.get(port);
+    const controller = controllers?.get(requestId);
+    if (!controller) return;
+    controller.abort(new Error("Site tool request cancelled"));
+    controllers!.delete(requestId);
+  }
+
+  complete(port: MessagePort, requestId: string, controller: AbortController): void {
+    const controllers = this.controllersByPort.get(port);
+    if (controllers?.get(requestId) === controller) controllers.delete(requestId);
+  }
+
+  closePort(port: MessagePort): void {
+    const controllers = this.controllersByPort.get(port);
+    if (!controllers) return;
+    for (const controller of controllers.values()) {
+      controller.abort(new Error("Site tool bridge port closed"));
+    }
+    controllers.clear();
+    this.controllersByPort.delete(port);
+    port.close();
+  }
+
+  closeAll(): void {
+    for (const port of [...this.controllersByPort.keys()]) this.closePort(port);
+  }
+}
+
+export class SiteBridgeDocumentLease {
+  private loaded = false;
+  private bootstrapPort: MessagePort | null = null;
+
+  constructor(
+    private readonly attachToolPort: (data: unknown, ports: readonly MessagePort[]) => void,
+    private readonly closeActivePorts: () => void,
+    private readonly createMessageChannel: () => MessageChannel = () => new MessageChannel(),
+  ) {}
+
+  load(frameWindow: Pick<Window, "postMessage">): boolean {
+    if (this.loaded) {
+      this.close();
+      return false;
+    }
+    this.loaded = true;
+    const channel = this.createMessageChannel();
+    this.bootstrapPort = channel.port1;
+    channel.port1.addEventListener("message", (event: MessageEvent<unknown>) => {
+      this.attachToolPort(event.data, event.ports);
+    });
+    channel.port1.start();
+    frameWindow.postMessage(
+      {
+        type: OPENGENI_SITE_BRIDGE_READY,
+        version: OPENGENI_SITE_BRIDGE_VERSION,
+      },
+      "*",
+      [channel.port2],
+    );
+    return true;
+  }
+
+  close(): void {
+    this.bootstrapPort?.close();
+    this.bootstrapPort = null;
+    this.closeActivePorts();
+  }
+}
+
+export function openGeniSiteBridgePortFromBootstrap(
+  data: unknown,
+  ports: readonly MessagePort[],
+): MessagePort | null {
+  if (!isOpenGeniSiteBridgeConnectMessage(data)) return null;
+  return ports.length === 1 ? ports[0]! : null;
+}
+
+async function handleSiteBridgeRequest(
+  bridge: PublishedHtmlArtifactToolBridge | undefined,
+  message: Parameters<typeof isOpenGeniSiteBridgeRequestMessage>[0] & {
+    method: "catalog" | "call" | "declarations";
+    requestId: string;
+    payload?: ToolGatewayCallRequest;
+  },
+  signal: AbortSignal,
+): Promise<OpenGeniSiteToolCatalog | ToolGatewayCallResponse | ToolGatewayDeclarationsResponse> {
+  if (!bridge) throw new Error("Site tool bridge is unavailable");
+  if (message.method === "catalog") return await bridge.catalog({ signal });
+  if (message.method === "declarations") {
+    if (!bridge.declarations) throw new Error("Site tool declarations are unavailable");
+    return await bridge.declarations({ signal });
+  }
+  return await bridge.call(sanitizeOpenGeniSiteToolCallRequest(message.payload!), { signal });
+}
+
+export function siteBridgeError(error: unknown): {
+  code: string;
+  message: string;
+  retryable: boolean;
+  outcomeUnknown: boolean;
+} {
+  const candidate = error as {
+    code?: unknown;
+    message?: unknown;
+    retryable?: unknown;
+    outcomeUnknown?: unknown;
+  };
+  return {
+    code: typeof candidate?.code === "string" ? candidate.code : "site_tool_call_failed",
+    message:
+      typeof candidate?.message === "string" ? candidate.message : "Site tool request failed",
+    retryable: candidate?.retryable === true,
+    outcomeUnknown: candidate?.outcomeUnknown === true,
+  };
+}