@pagelines/sdk 1.0.472 → 1.0.474

package/dist/sdkClient.js

@@ -1,28 +1,28 @@
-var Q = Object.defineProperty;
-var Y = (c, e, t) => e in c ? Q(c, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : c[e] = t;
-var l = (c, e) => Q(c, "name", { value: e, configurable: !0 });
-var i = (c, e, t) => Y(c, typeof e != "symbol" ? e + "" : e, t);
-import { APP_PORT as Z, APP_PROD_URL as ee, createRefreshingFetch as te, cookieUtil as x, createLogger as re, objectId as B, SettingsObject as oe } from "@pagelines/core";
-import { watch as $, ref as k, computed as V } from "vue";
-import { hc as se } from "hono/client";
-function f(c, e) {
-  return c || (e ? `http://localhost:${Z}` : ee);
+var V = Object.defineProperty;
+var Z = (l, e, t) => e in l ? V(l, e, { enumerable: !0, configurable: !0, writable: !0, value: t }) : l[e] = t;
+var d = (l, e) => V(l, "name", { value: e, configurable: !0 });
+var n = (l, e, t) => Z(l, typeof e != "symbol" ? e + "" : e, t);
+import { APP_PORT as ee, APP_PROD_URL as te, createRefreshingFetch as re, cookieUtil as b, createLogger as oe, shortId as se, objectId as O, SettingsObject as ae } from "@pagelines/core";
+import { watch as R, ref as A, computed as Q } from "vue";
+import { hc as ie } from "hono/client";
+function y(l, e) {
+  return l || (e ? `http://localhost:${ee}` : te);
 }
-l(f, "resolveApiBase");
-function ie(c, e, t) {
-  const r = f(c.apiBase, c.isDev), o = t ? te({
+d(y, "resolveApiBase");
+function ne(l, e, t) {
+  const r = y(l.apiBase, l.isDev), o = t ? re({
     fetch: globalThis.fetch.bind(globalThis),
     getDeviceId: t.getDeviceId,
     refreshUrl: `${r}/api/auth/refresh`,
     onAccessTokenRefreshed: t.onAccessTokenRefreshed,
     onTerminalFailure: t.onTerminalFailure
   }) : globalThis.fetch.bind(globalThis);
-  return se(r, {
-    fetch: /* @__PURE__ */ l(async (n, u) => {
-      const a = x.getAuthToken(), d = await o(n, {
-        ...u,
+  return ie(r, {
+    fetch: /* @__PURE__ */ d(async (c, h) => {
+      const a = b.getAuthToken(), i = await o(c, {
+        ...h,
         headers: {
-          ...u?.headers,
+          ...h?.headers,
           "Content-Type": "application/json",
           // Only include Authorization header if token exists
           ...a && { Authorization: `Bearer ${a}` }
@@ -34,46 +34,48 @@ function ie(c, e, t) {
         credentials: "include"
       });
       if (e) {
-        const p = d.json.bind(d);
-        d.json = async () => {
-          const g = await p();
-          return typeof g == "object" && g !== null && "ok" in g && ("user" in g || "token" in g) && e(g), g;
+        const f = i.json.bind(i);
+        i.json = async () => {
+          const u = await f();
+          return typeof u == "object" && u !== null && "ok" in u && ("user" in u || "token" in u) && e(u), u;
         };
       }
-      return d;
+      return i;
     }, "fetch")
   });
 }
-l(ie, "createApiClient");
-let ae = /* @__PURE__ */ Symbol("clean"), v = [], y = 0;
-const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
+d(ne, "createApiClient");
+const ce = /* @__PURE__ */ Symbol("clean");
+let p = [], x = 0;
+const U = 4, le = globalThis.nanostoresGlobal || (globalThis.nanostoresGlobal = { epoch: 0 }), G = /* @__PURE__ */ d(/* @__NO_SIDE_EFFECTS__ */ (l) => {
   let e = [], t = {
     get() {
       return t.lc || t.listen(() => {
       })(), t.value;
     },
-    init: c,
+    init: l,
     lc: 0,
     listen(r) {
       return t.lc = e.push(r), () => {
-        for (let s = y + b; s < v.length; )
-          v[s] === r ? v.splice(s, b) : s += b;
+        for (let s = x + U; s < p.length; )
+          p[s] === r ? p.splice(s, U) : s += U;
         let o = e.indexOf(r);
         ~o && (e.splice(o, 1), --t.lc || t.off());
       };
     },
     notify(r, o) {
-      let s = !v.length;
-      for (let n of e)
-        v.push(n, t.value, r, o);
+      le.epoch++;
+      let s = !p.length;
+      for (let c of e)
+        p.push(c, t.value, r, o);
       if (s) {
-        for (y = 0; y < v.length; y += b)
-          v[y](
-            v[y + 1],
-            v[y + 2],
-            v[y + 3]
+        for (x = 0; x < p.length; x += U)
+          p[x](
+            p[x + 1],
+            p[x + 2],
+            p[x + 3]
           );
-        v.length = 0;
+        p.length = 0;
       }
     },
     /* It will be called on last listener unsubscribing.
@@ -88,14 +90,14 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
       let o = t.listen(r);
       return r(t.value), o;
     },
-    value: c
+    value: l
   };
-  return process.env.NODE_ENV !== "production" && (t[ae] = () => {
+  return process.env.NODE_ENV !== "production" && (t[ce] = () => {
     e = [], t.lc = 0, t.off();
   }), t;
-}, "atom"), m = globalThis, A = m.__PL_AUTH_USER__ ?? (m.__PL_AUTH_USER__ = /* @__PURE__ */ L(void 0)), U = m.__PL_AUTH_TOKEN__ ?? (m.__PL_AUTH_TOKEN__ = /* @__PURE__ */ L(null)), E = m.__PL_AUTH_DEVICE_ID__ ?? (m.__PL_AUTH_DEVICE_ID__ = /* @__PURE__ */ L(null)), N = class N {
+}, "atom"), w = globalThis, E = w.__PL_AUTH_USER__ ?? (w.__PL_AUTH_USER__ = /* @__PURE__ */ G(void 0)), T = w.__PL_AUTH_TOKEN__ ?? (w.__PL_AUTH_TOKEN__ = /* @__PURE__ */ G(null)), $ = w.__PL_AUTH_DEVICE_ID__ ?? (w.__PL_AUTH_DEVICE_ID__ = /* @__PURE__ */ G(null)), W = class W {
   constructor() {
-    i(this, "logger", re("SDKStorage"));
+    n(this, "logger", oe("SDKStorage"));
   }
   /**
    * Check if localStorage is fully functional (some test environments provide partial mocks)
@@ -107,12 +109,12 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
    * Sync Vue reactive refs with global nanostores for cross-bundle persistence.
    */
   syncWithGlobalStores(e) {
-    const { activeUser: t, token: r, deviceId: o } = e, s = A.get(), n = U.get(), u = E.get();
-    s && (t.value = s), n && (r.value = n), u && (o.value = u), $(t, (a) => A.set(a), { immediate: !0 }), $(r, (a) => U.set(a), { immediate: !0 }), $(o, (a) => E.set(a), { immediate: !0 }), A.subscribe((a) => {
+    const { activeUser: t, token: r, deviceId: o } = e, s = E.get(), c = T.get(), h = $.get();
+    s && (t.value = s), c && (r.value = c), h && (o.value = h), R(t, (a) => E.set(a), { immediate: !0 }), R(r, (a) => T.set(a), { immediate: !0 }), R(o, (a) => $.set(a), { immediate: !0 }), E.subscribe((a) => {
       a !== t.value && (t.value = a);
-    }), U.subscribe((a) => {
+    }), T.subscribe((a) => {
       a !== r.value && (r.value = a);
-    }), E.subscribe((a) => {
+    }), $.subscribe((a) => {
       a !== o.value && (o.value = a);
     });
   }
@@ -123,9 +125,9 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
   loadFromStorage(e) {
     if (typeof window > "u")
       return;
-    const t = x.getAuthToken();
+    const t = b.getAuthToken();
     t && (e.token.value = t);
-    const r = x.getDeviceId();
+    const r = b.getDeviceId();
     if (r && (e.deviceId.value = r), this.isLocalStorageFunctional())
       try {
         const o = localStorage.getItem("pagelines-user");
@@ -139,7 +141,7 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
    * deviceId is server-owned (Set-Cookie) — JS doesn't write it.
    */
   saveToStorage(e) {
-    if (!(typeof window > "u") && (e.token.value ? x.setAuthToken(e.token.value) : x.removeAuthToken(), this.isLocalStorageFunctional()))
+    if (!(typeof window > "u") && (e.token.value ? b.setAuthToken(e.token.value) : b.removeAuthToken(), this.isLocalStorageFunctional()))
       try {
         e.activeUser.value ? localStorage.setItem("pagelines-user", JSON.stringify(e.activeUser.value)) : localStorage.removeItem("pagelines-user");
       } catch (t) {
@@ -153,13 +155,13 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
    */
   clearStorage() {
     if (!(typeof window > "u")) {
-      if (x.removeAuthToken(), this.isLocalStorageFunctional())
+      if (b.removeAuthToken(), this.isLocalStorageFunctional())
         try {
           localStorage.removeItem("pagelines-user");
         } catch (e) {
           this.logger.error("Failed to clear user from localStorage", { data: e });
         }
-      A.set(void 0), U.set(null), E.set(null);
+      E.set(void 0), T.set(null), $.set(null);
     }
   }
   /**
@@ -186,20 +188,20 @@ const b = 4, L = /* @__PURE__ */ l(/* @__NO_SIDE_EFFECTS__ */ (c) => {
       }
   }
 };
-l(N, "SDKStorage");
-let R = N;
-const H = [
+d(W, "SDKStorage");
+let P = W;
+const X = [
   "Deploying your server...",
   "Setting up your workspace...",
   "Installing tools...",
   "Almost ready..."
-], G = class G {
+], M = class M {
   constructor(e) {
-    i(this, "ctx");
+    n(this, "ctx");
     this.ctx = e;
   }
   async create(e) {
-    const t = e.orgId || this.resolveOrgId(), r = f(this.ctx.apiBase, this.ctx.isDev), s = await (await fetch(`${r}/api/agent`, {
+    const t = e.orgId || this.resolveOrgId(), r = y(this.ctx.apiBase, this.ctx.isDev), s = await (await fetch(`${r}/api/agent`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -208,13 +210,13 @@ const H = [
       body: JSON.stringify({ name: e.name, orgId: t })
     })).json();
     if (!s.ok || !s.data?.[0]) {
-      const n = s.error || "Failed to create agent";
-      throw this.ctx.error.value = n, new Error(n);
+      const c = s.error || "Failed to create agent";
+      throw this.ctx.error.value = c, new Error(c);
     }
     return this.ctx.processApiResponse(s), s.data[0];
   }
   async getStatus(e) {
-    const t = f(this.ctx.apiBase, this.ctx.isDev), o = await (await fetch(`${t}/api/agent/${e.agentId}/status`, {
+    const t = y(this.ctx.apiBase, this.ctx.isDev), o = await (await fetch(`${t}/api/agent/${e.agentId}/status`, {
       headers: {
         ...this.ctx.token.value && { Authorization: `Bearer ${this.ctx.token.value}` }
       }
@@ -222,9 +224,9 @@ const H = [
     return !o.ok || !o.data ? { status: "unknown", ready: !1, error: "Failed to check status" } : o.data;
   }
   async waitUntilReady(e) {
-    const { agentId: t, onStatus: r, timeoutMs: o = 3e5, pollIntervalMs: s = 3e3 } = e, n = Date.now();
-    let u = 0;
-    for (; Date.now() - n < o; ) {
+    const { agentId: t, onStatus: r, timeoutMs: o = 3e5, pollIntervalMs: s = 3e3 } = e, c = Date.now();
+    let h = 0;
+    for (; Date.now() - c < o; ) {
       const a = await this.getStatus({ agentId: t });
       if (a.ready) {
         r?.("Ready!");
@@ -232,13 +234,13 @@ const H = [
       }
       if (a.status === "error")
         throw new Error(a.error || "Provisioning failed");
-      r && u < H.length && (r(H[u]), u++), await new Promise((d) => setTimeout(d, s));
+      r && h < X.length && (r(X[h]), h++), await new Promise((i) => setTimeout(i, s));
     }
     throw new Error("Agent provisioning timed out — please try again");
   }
   /** Send a typed webhook event to a bot agent. No auth required — the proxy is public. */
   async webhook(e) {
-    const r = `${f(this.ctx.apiBase, this.ctx.isDev)}/api/bot-api/agents/${e.agentId}/webhook`, o = { type: e.type, data: e.data };
+    const r = `${y(this.ctx.apiBase, this.ctx.isDev)}/api/bot-api/agents/${e.agentId}/webhook`, o = { type: e.type, data: e.data };
     e.meta && (o.meta = e.meta);
     const s = await fetch(r, {
       method: "POST",
@@ -246,8 +248,8 @@ const H = [
       body: JSON.stringify(o)
     });
     if (!s.ok) {
-      const n = await s.text().catch(() => "Unknown error");
-      throw new Error(`Webhook delivery failed (${s.status}): ${n.slice(0, 200)}`);
+      const c = await s.text().catch(() => "Unknown error");
+      throw new Error(`Webhook delivery failed (${s.status}): ${c.slice(0, 200)}`);
     }
     return s.json();
   }
@@ -258,24 +260,24 @@ const H = [
     return t;
   }
 };
-l(G, "AgentClient");
-let P = G;
-async function w(c, e) {
-  c.loading.value = !0, c.error.value = null;
+d(M, "AgentClient");
+let _ = M;
+async function S(l, e) {
+  l.loading.value = !0, l.error.value = null;
   try {
     return await e();
   } finally {
-    c.loading.value = !1;
+    l.loading.value = !1;
   }
 }
-l(w, "withLoadingState");
-const M = class M {
+d(S, "withLoadingState");
+const z = class z {
   constructor(e) {
-    i(this, "ctx");
+    n(this, "ctx");
     this.ctx = e;
   }
   async sendCode(e) {
-    return w(this.ctx, async () => {
+    return S(this.ctx, async () => {
       try {
         const r = await (await this.ctx.api.auth["check-email"].$post({
           json: { email: e }
@@ -290,7 +292,7 @@ const M = class M {
     });
   }
   async verifyCode(e, t) {
-    return w(this.ctx, async () => {
+    return S(this.ctx, async () => {
       try {
         const o = await (await this.ctx.api.auth["verify-code"].$post({
           json: { email: e, code: t }
@@ -305,7 +307,7 @@ const M = class M {
     });
   }
   async logout() {
-    return w(this.ctx, async () => {
+    return S(this.ctx, async () => {
       try {
         await this.ctx.api.auth.logout.$post();
       } catch (e) {
@@ -316,7 +318,7 @@ const M = class M {
   }
   async getCurrentUser() {
     if (this.ctx.token.value)
-      return w(this.ctx, async () => {
+      return S(this.ctx, async () => {
         try {
           const t = await (await this.ctx.api.auth.me.$get()).json();
           if (!t.ok) {
@@ -331,7 +333,7 @@ const M = class M {
       });
   }
   async requestAuthCode(e) {
-    return w(this.ctx, async () => {
+    return S(this.ctx, async () => {
       try {
         const r = await (await this.ctx.api.auth["check-email"].$post({
           json: { email: e.email }
@@ -343,7 +345,7 @@ const M = class M {
     });
   }
   async loginWithCode(e) {
-    return w(this.ctx, async () => {
+    return S(this.ctx, async () => {
       try {
         const r = await (await this.ctx.api.auth["verify-code"].$post({
           json: { email: e.email, code: e.code }
@@ -359,45 +361,45 @@ const M = class M {
       this.ctx.logger.error("loginWithGoogle: Only available in browser");
       return;
     }
-    const t = f(this.ctx.apiBase, this.ctx.isDev), r = window.location.origin, o = `${t}/auth/google-popup?origin=${encodeURIComponent(r)}`, s = 500, n = 600, u = window.screenX + (window.outerWidth - s) / 2, a = window.screenY + (window.outerHeight - n) / 2, d = window.open(
+    const t = y(this.ctx.apiBase, this.ctx.isDev), r = window.location.origin, o = `${t}/auth/google-popup?origin=${encodeURIComponent(r)}`, s = 500, c = 600, h = window.screenX + (window.outerWidth - s) / 2, a = window.screenY + (window.outerHeight - c) / 2, i = window.open(
       o,
       "google-auth",
-      `width=${s},height=${n},left=${u},top=${a},popup=yes`
+      `width=${s},height=${c},left=${h},top=${a},popup=yes`
     );
-    if (!d) {
-      const h = "Popup was blocked. Please allow popups for this site.";
-      this.ctx.error.value = h, e?.onError?.(h);
+    if (!i) {
+      const v = "Popup was blocked. Please allow popups for this site.";
+      this.ctx.error.value = v, e?.onError?.(v);
       return;
     }
-    const p = /* @__PURE__ */ l((h) => {
-      const S = new URL(t).origin;
-      if (h.origin === S) {
-        if (h.data?.type === "auth-success") {
-          window.removeEventListener("message", p);
-          const { token: I, user: K } = h.data;
-          this.ctx.processApiResponse({ ok: !0, data: {}, token: I, user: K }), this.ctx.logger.info("Google login successful"), e?.onSuccess?.(K);
-        } else if (h.data?.type === "auth-error") {
-          window.removeEventListener("message", p);
-          const I = h.data.error || "Google authentication failed";
-          this.ctx.error.value = I, this.ctx.logger.error("Google login failed", { error: I }), e?.onError?.(I);
+    const f = /* @__PURE__ */ d((v) => {
+      const k = new URL(t).origin;
+      if (v.origin === k) {
+        if (v.data?.type === "auth-success") {
+          window.removeEventListener("message", f);
+          const { token: g, user: I } = v.data;
+          this.ctx.processApiResponse({ ok: !0, data: {}, token: g, user: I }), this.ctx.logger.info("Google login successful"), e?.onSuccess?.(I);
+        } else if (v.data?.type === "auth-error") {
+          window.removeEventListener("message", f);
+          const g = v.data.error || "Google authentication failed";
+          this.ctx.error.value = g, this.ctx.logger.error("Google login failed", { error: g }), e?.onError?.(g);
         }
       }
     }, "handler");
-    window.addEventListener("message", p);
-    const g = setInterval(() => {
-      d.closed && (clearInterval(g), window.removeEventListener("message", p));
+    window.addEventListener("message", f);
+    const u = setInterval(() => {
+      i.closed && (clearInterval(u), window.removeEventListener("message", f));
     }, 500);
   }
 };
-l(M, "AuthClient");
-let j = M;
-const W = class W {
+d(z, "AuthClient");
+let j = z;
+const J = class J {
   constructor(e) {
-    i(this, "ctx");
+    n(this, "ctx");
     this.ctx = e;
   }
   async startTrial(e) {
-    const t = this.resolveOrgId(), r = f(this.ctx.apiBase, this.ctx.isDev), s = await (await fetch(`${r}/api/billing/checkout/create`, {
+    const t = this.resolveOrgId(), r = y(this.ctx.apiBase, this.ctx.isDev), s = await (await fetch(`${r}/api/billing/checkout/create`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -410,8 +412,8 @@ const W = class W {
       })
     })).json();
     if (!s.ok || !s.data?.url) {
-      const n = s.error || "Failed to create checkout session";
-      throw this.ctx.error.value = n, new Error(n);
+      const c = s.error || "Failed to create checkout session";
+      throw this.ctx.error.value = c, new Error(c);
     }
     window.location.href = s.data.url;
   }
@@ -419,7 +421,7 @@ const W = class W {
     return this.getStatus();
   }
   async getStatus() {
-    const e = this.resolveOrgId(), t = f(this.ctx.apiBase, this.ctx.isDev), o = await (await fetch(`${t}/api/billing/details/${e}`, {
+    const e = this.resolveOrgId(), t = y(this.ctx.apiBase, this.ctx.isDev), o = await (await fetch(`${t}/api/billing/details/${e}`, {
       headers: {
         ...this.ctx.token.value && { Authorization: `Bearer ${this.ctx.token.value}` }
       }
@@ -448,110 +450,177 @@ const W = class W {
     return t;
   }
 };
-l(W, "BillingClient");
-let C = W;
-const z = class z {
+d(J, "BillingClient");
+let F = J;
+const ue = /* @__PURE__ */ new Set(["message", "message_delta", "working_state", "working_end", "error", "stream_end"]);
+function de(l) {
+  const e = l.split(`
+`).filter((o) => o.length > 0);
+  let t, r;
+  for (const o of e)
+    o.startsWith("event:") ? t = o.slice(6).trim() : o.startsWith("data:") && (r = o.slice(5).trim());
+  if (!t || r === void 0 || !ue.has(t))
+    return null;
+  try {
+    return { event: t, data: JSON.parse(r) };
+  } catch {
+    return null;
+  }
+}
+d(de, "parseChatEvent");
+const q = class q {
   constructor(e) {
-    i(this, "ctx");
+    n(this, "ctx");
     this.ctx = e;
   }
+  /**
+   * Public/visitor chat — anonymous chat against an agent's public handle.
+   * Stays on the legacy `AgentChatServer` route for now; substrate doesn't
+   * support visitor identities yet (deferred per `plans/features/chat.md`).
+   */
   async chatStream(e) {
-    const r = `${f(this.ctx.apiBase, this.ctx.isDev)}/api/agent/public/${encodeURIComponent(e.handle)}/chat/stream`;
-    return this._streamChat({
-      url: r,
-      headers: { "Content-Type": "application/json" },
-      body: {
-        message: e.message,
-        conversationId: e.conversationId,
-        history: e.history,
-        visitorId: e.visitorId,
-        context: e.context,
-        attachments: e.attachments
-      },
-      conversationId: e.conversationId,
-      onDelta: e.onDelta,
-      onDone: e.onDone,
-      onError: e.onError,
-      onStatus: e.onStatus
-    });
-  }
-  async chatStreamAuthenticated(e) {
-    const r = `${f(this.ctx.apiBase, this.ctx.isDev)}/api/agent/${encodeURIComponent(e.agentId)}/chat/stream`;
-    return this._streamChat({
-      url: r,
-      headers: {
-        "Content-Type": "application/json",
-        ...this.ctx.token.value && { Authorization: `Bearer ${this.ctx.token.value}` }
-      },
-      body: {
-        message: e.message,
-        conversationId: e.conversationId,
-        history: e.history,
-        attachments: e.attachments
-      },
-      conversationId: e.conversationId,
-      onDelta: e.onDelta,
-      onDone: e.onDone,
-      onError: e.onError,
-      onStatus: e.onStatus
-    });
-  }
-  /** Shared SSE streaming logic for both public and authenticated chat */
-  async _streamChat(e) {
+    const r = `${y(this.ctx.apiBase, this.ctx.isDev)}/api/agent/public/${encodeURIComponent(e.handle)}/chat/stream`;
     try {
-      const t = await fetch(e.url, {
+      const o = await fetch(r, {
         method: "POST",
-        headers: e.headers,
-        body: JSON.stringify(e.body)
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          message: e.message,
+          conversationId: e.conversationId,
+          history: e.history,
+          visitorId: e.visitorId,
+          context: e.context,
+          attachments: e.attachments
+        })
       });
-      if (!t.ok) {
-        const u = await t.json().catch(() => ({ error: "Request failed" }));
-        e.onError(u.error || `HTTP ${t.status}`);
+      if (!o.ok) {
+        const i = await o.json().catch(() => ({ error: "Request failed" }));
+        e.onError(i.error || `HTTP ${o.status}`);
         return;
       }
-      const r = t.body?.getReader();
-      if (!r) {
+      const s = o.body?.getReader();
+      if (!s) {
         e.onError("No response stream");
         return;
       }
-      const o = new TextDecoder();
-      let s = "", n = e.conversationId || "";
+      const c = new TextDecoder();
+      let h = "", a = e.conversationId || "";
       for (; ; ) {
-        const { done: u, value: a } = await r.read();
-        if (u)
+        const { done: i, value: f } = await s.read();
+        if (i)
           break;
-        s += o.decode(a, { stream: !0 });
-        const d = s.split(`
+        h += c.decode(f, { stream: !0 });
+        const u = h.split(`
 `);
-        s = d.pop() || "";
-        for (const p of d) {
-          if (!p.startsWith("data: "))
+        h = u.pop() || "";
+        for (const v of u) {
+          if (!v.startsWith("data: "))
             continue;
-          const g = p.slice(6).trim();
-          if (g === "[DONE]") {
-            e.onDone(n);
+          const k = v.slice(6).trim();
+          if (k === "[DONE]") {
+            e.onDone(a);
             return;
           }
           try {
-            const h = JSON.parse(g);
-            if (h.pl_status) {
-              e.onStatus?.(h.pl_status);
+            const g = JSON.parse(k);
+            if (g.pl_status) {
+              e.onStatus?.(g.pl_status);
               continue;
             }
-            h.pl_metadata?.conversationId && (n = h.pl_metadata.conversationId);
-            const S = h.choices?.[0]?.delta;
-            S?.content && e.onDelta(S.content);
+            g.pl_metadata?.conversationId && (a = g.pl_metadata.conversationId);
+            const I = g.choices?.[0]?.delta;
+            I?.content && e.onDelta(I.content);
           } catch {
           }
         }
       }
-      e.onDone(n);
-    } catch (t) {
-      e.onError(t instanceof Error ? t.message : "Stream failed");
+      e.onDone(a);
+    } catch (o) {
+      e.onError(o instanceof Error ? o.message : "Stream failed");
+    }
+  }
+  /**
+   * Authenticated chat — substrate-backed (POST /api/messages + SSE on
+   * /api/chat/:agentId/stream). Same callback contract as the legacy
+   * `chatStream` so callers don't need to know which transport runs underneath.
+   * Mirrors `src/modules/agent/client.ts → sendChatMessageStream`.
+   */
+  async chatStreamAuthenticated(e) {
+    const t = y(this.ctx.apiBase, this.ctx.isDev), r = this.ctx.token.value ? { Authorization: `Bearer ${this.ctx.token.value}` } : {}, o = `nonce_${se(16)}`;
+    let s;
+    try {
+      const i = await fetch(`${t}/api/messages`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", ...r },
+        body: JSON.stringify({ agentId: e.agentId, content: e.message, clientNonce: o })
+      }), f = await i.json();
+      if (!f.ok) {
+        e.onError(f.error || `Send failed: HTTP ${i.status}`);
+        return;
+      }
+      s = f.data;
+    } catch (i) {
+      e.onError(i instanceof Error ? i.message : "Send failed");
+      return;
+    }
+    let c = !1, h = !1, a;
+    try {
+      const i = await fetch(`${t}/api/chat/${encodeURIComponent(e.agentId)}/stream?since=${encodeURIComponent(s.sequence)}`, {
+        headers: r
+      });
+      if (!i.ok) {
+        e.onError(`Stream failed: HTTP ${i.status}`);
+        return;
+      }
+      if (a = i.body?.getReader(), !a) {
+        e.onError("No response stream");
+        return;
+      }
+      const f = new TextDecoder();
+      let u = "";
+      e: for (; ; ) {
+        const { done: v, value: k } = await a.read();
+        if (v)
+          break;
+        u += f.decode(k, { stream: !0 });
+        let g = u.indexOf(`
+
+`);
+        for (; g !== -1; ) {
+          const I = u.slice(0, g);
+          u = u.slice(g + 2);
+          const m = de(I);
+          if (m) {
+            if (m.event === "working_state")
+              e.onStatus?.(m.data.description);
+            else if (m.event === "message_delta")
+              e.onDelta(m.data.delta);
+            else if (m.event === "error") {
+              c = !0, e.onError(m.data.message);
+              break e;
+            } else if (m.event === "message" && m.data.message.role === "assistant") {
+              h = !0;
+              break e;
+            } else if (m.event === "stream_end")
+              break e;
+          }
+          g = u.indexOf(`
+
+`);
+        }
+      }
+      !c && h ? e.onDone(s.conversationId) : c || e.onError("Stream ended before reply arrived");
+    } catch (i) {
+      e.onError(i instanceof Error ? i.message : "Stream failed");
+    } finally {
+      try {
+        await a?.cancel();
+      } catch {
+      }
     }
   }
   async chatMessage(e) {
-    const r = `${f(this.ctx.apiBase, this.ctx.isDev)}/api/agent/public/${encodeURIComponent(e.handle)}/chat`;
+    const r = `${y(this.ctx.apiBase, this.ctx.isDev)}/api/agent/public/${encodeURIComponent(e.handle)}/chat`;
     try {
       const s = await (await fetch(r, {
         method: "POST",
@@ -577,11 +646,11 @@ const z = class z {
     }
   }
 };
-l(z, "ChatClient");
-let F = z;
-const q = class q {
+d(q, "ChatClient");
+let C = q;
+const K = class K {
   constructor(e) {
-    i(this, "ctx");
+    n(this, "ctx");
     this.ctx = e;
   }
   async getPublicAgent(e) {
@@ -623,7 +692,7 @@ const q = class q {
   generateAnonId() {
     const e = "pagelinesAnonId";
     let t = this.ctx.storage.getItem(e);
-    return t || (t = B({ prefix: "anon" }), this.ctx.storage.setItem(e, t)), t;
+    return t || (t = O({ prefix: "anon" }), this.ctx.storage.setItem(e, t)), t;
   }
   track(e) {
     try {
@@ -638,11 +707,11 @@ const q = class q {
     }
   }
 };
-l(q, "UserClient");
-let O = q;
-const J = class J {
+d(K, "UserClient");
+let L = K;
+const H = class H {
   constructor() {
-    i(this, "key", "__PAGELINES_SDK__");
+    n(this, "key", "__PAGELINES_SDK__");
   }
   get() {
     if (!(typeof window > "u"))
@@ -655,33 +724,33 @@ const J = class J {
     typeof window < "u" && delete globalThis[this.key];
   }
 };
-l(J, "SDKGlobal");
-let _ = J;
-const T = new _(), D = class D extends oe {
+d(H, "SDKGlobal");
+let N = H;
+const D = new N(), B = class B extends ae {
   constructor(t = {}) {
-    const r = T.get();
+    const r = D.get();
     if (r)
       return console.debug("[PageLinesSDK] Returning existing singleton instance"), r;
     super("PageLinesSDK", t);
     // Vue reactive state
-    i(this, "activeUser", k());
-    i(this, "token", k(null));
+    n(this, "activeUser", A());
+    n(this, "token", A(null));
     // Refresh credential lives in HttpOnly pl-refresh-token cookie — JS never
     // holds it, so no reactive ref. /api/auth/refresh reads the cookie via the
     // browser's automatic credentials: 'include' attach.
-    i(this, "deviceId", k(null));
-    i(this, "loading", k(!1));
-    i(this, "error", k(null));
-    i(this, "apiBase", this.settings.apiBase || void 0);
+    n(this, "deviceId", A(null));
+    n(this, "loading", A(!1));
+    n(this, "error", A(null));
+    n(this, "apiBase", this.settings.apiBase || void 0);
     // Storage handler for persistence
-    i(this, "storage", new R());
+    n(this, "storage", new P());
     // Auto-managed session ID for usage tracking
-    i(this, "sessionId", B({ prefix: "ses" }));
+    n(this, "sessionId", O({ prefix: "ses" }));
     // Typed Hono RPC client - uses SDKAppType (auth/self/usage routes only)
     // Initialized in constructor (definite assignment via singleton pattern)
-    i(this, "apiClient");
+    n(this, "apiClient");
     // Computed properties derived from activeUser (matches UserClient pattern)
-    i(this, "currentAgent", V(() => {
+    n(this, "currentAgent", Q(() => {
       const t = this.activeUser.value;
       if (!t?.agents)
         return;
@@ -689,7 +758,7 @@ const T = new _(), D = class D extends oe {
       if (r)
         return t.agents.find((o) => o.agentId === r);
     }));
-    i(this, "currentOrg", V(() => {
+    n(this, "currentOrg", Q(() => {
       const t = this.currentAgent.value;
       if (!t?.orgId)
         return;
@@ -698,23 +767,23 @@ const T = new _(), D = class D extends oe {
         return r.orgs.find((o) => o.orgId === t.orgId);
     }));
     // Initialization state
-    i(this, "initialized");
-    i(this, "resolveUser");
+    n(this, "initialized");
+    n(this, "resolveUser");
     // Sub-clients (new preferred API surface)
-    i(this, "agent");
-    i(this, "auth");
-    i(this, "billing");
-    i(this, "chat");
-    i(this, "user");
-    T.set(this), this.apiClient = ie(
+    n(this, "agent");
+    n(this, "auth");
+    n(this, "billing");
+    n(this, "chat");
+    n(this, "user");
+    D.set(this), this.apiClient = ne(
       { isDev: this.isDev, apiBase: this.apiBase },
       this.processApiResponse.bind(this),
       {
-        getDeviceId: /* @__PURE__ */ l(() => this.deviceId.value, "getDeviceId"),
-        onAccessTokenRefreshed: /* @__PURE__ */ l((s) => {
+        getDeviceId: /* @__PURE__ */ d(() => this.deviceId.value, "getDeviceId"),
+        onAccessTokenRefreshed: /* @__PURE__ */ d((s) => {
           this.token.value = s, this.persistAuth();
         }, "onAccessTokenRefreshed"),
-        onTerminalFailure: /* @__PURE__ */ l(() => {
+        onTerminalFailure: /* @__PURE__ */ d(() => {
           this.clearSession();
         }, "onTerminalFailure")
       }
@@ -733,7 +802,7 @@ const T = new _(), D = class D extends oe {
       logger: this.logger,
       processApiResponse: this.processApiResponse.bind(this)
     };
-    this.agent = new P(o), this.auth = new j(o), this.billing = new C(o), this.chat = new F(o), this.user = new O(o), this.logger.info("PageLinesSDK initialized"), this.storage.loadFromStorage(this.authRefs()), this.storage.syncWithGlobalStores(this.authRefs()), this.initialized = new Promise((s) => {
+    this.agent = new _(o), this.auth = new j(o), this.billing = new F(o), this.chat = new C(o), this.user = new L(o), this.logger.info("PageLinesSDK initialized"), this.storage.loadFromStorage(this.authRefs()), this.storage.syncWithGlobalStores(this.authRefs()), this.initialized = new Promise((s) => {
       this.resolveUser = s;
     }), this.token.value && !this.activeUser.value ? this.getCurrentUser().then((s) => {
       this.resolveUser && (this.resolveUser(s), this.resolveUser = void 0);
@@ -747,7 +816,7 @@ const T = new _(), D = class D extends oe {
    * Recommended: Use this instead of constructor for shared state
    */
   static getInstance(t = {}) {
-    return T.get() || new D(t);
+    return D.get() || new B(t);
   }
   get isDev() {
     return this.settings.isDev ?? (typeof window < "u" ? window.location.hostname === "localhost" || window.location.hostname.includes("127.0.0.1") : !1);
@@ -781,7 +850,7 @@ const T = new _(), D = class D extends oe {
   }
   // Full reset - clears session + state + destroys singleton
   clear() {
-    this.logger.info("Clearing SDK completely"), this.clearSession(), this.loading.value = !1, this.sessionId = B({ prefix: "ses" }), T.delete();
+    this.logger.info("Clearing SDK completely"), this.clearSession(), this.loading.value = !1, this.sessionId = O({ prefix: "ses" }), D.delete();
   }
   // Backward-compatible delegates — these forward to sub-clients
   // Can be removed in a future breaking change
@@ -812,9 +881,6 @@ const T = new _(), D = class D extends oe {
   async chatStreamAuthenticated(t) {
     return this.chat.chatStreamAuthenticated(t);
   }
-  async chatMessage(t) {
-    return this.chat.chatMessage(t);
-  }
   async getPublicAgent(t) {
     return this.user.getPublicAgent(t);
   }
@@ -828,14 +894,14 @@ const T = new _(), D = class D extends oe {
     return this.user.track(t);
   }
 };
-l(D, "PageLinesSDK");
-let X = D;
+d(B, "PageLinesSDK");
+let Y = B;
 export {
-  P as A,
-  F as C,
-  X as P,
-  O as U,
+  _ as A,
+  C,
+  Y as P,
+  L as U,
   j as a,
-  f as r
+  y as r
 };
 //# sourceMappingURL=sdkClient.js.map