@pluno/product-agent-web 0.1.101 → 0.1.103

package/dist/index.d.ts

@@ -39,6 +39,7 @@ export type ProductAgentMessage = {
     attachments?: ProductAgentAttachment[];
     loading?: boolean;
     retryable?: boolean;
+    securitySettingsUrl?: string;
 };
 export type ProductAgentAttachment = {
     id?: string;
@@ -102,6 +103,7 @@ export type ProductAgentState = {
     isThinking: boolean;
     lastError: string | null;
     lastErrorCode: string | null;
+    lastErrorSecuritySettingsUrl: string | null;
 };
 export type ProductAgentInitOptions = {
     token?: string;

package/dist/product-agent-sdk.js

@@ -263,7 +263,7 @@ function J(e) {
   return `${H}${e}`;
 }
 const Y = "pluno.productAgent.transportId", Te = "pluno.productAgent.transportIdentity", V = "pluno.productAgent.transportIdentity.event", we = 50, Ie = globalThis.setTimeout.bind(globalThis);
-let P = null;
+let U = null;
 const q = /* @__PURE__ */ new Set();
 async function Ae(e = $t()) {
   const t = e.randomUUID(), s = e.storage.getItem(Y);
@@ -302,13 +302,13 @@ async function Ae(e = $t()) {
   };
 }
 async function Se() {
-  P || (P = Ae($t()), P.then((n) => {
+  U || (U = Ae($t()), U.then((n) => {
     const r = (i) => {
-      i.persisted || (n.release(), P = null, q.clear(), window.removeEventListener("pagehide", r));
+      i.persisted || (n.release(), U = null, q.clear(), window.removeEventListener("pagehide", r));
     };
     window.addEventListener("pagehide", r);
   }));
-  const e = await P, t = ke();
+  const e = await U, t = ke();
   q.add(t);
   let s = !1;
   return {
@@ -368,7 +368,7 @@ function Re() {
     }
   };
 }
-const rt = '.pluno-pa-widget-host[data-pluno-product-agent-ui="widget"]', Ce = '.pluno-pa-widget[data-pluno-product-agent-ui-root="widget"]', _e = ".pluno-pa-widget__panel", be = ".pluno-pa-widget__timeline", St = `${rt}[data-pluno-sdk-preview-channel]`, Me = "https://app.pluno.ai", Pe = "gpt-5.6-terra", Ue = 2e4, De = 1e4, ve = 1e4, Ne = 1e4, Oe = 1e4, Le = 1e3, kt = 3e4, Et = 0.2, Rt = 6e4, Be = 15e3, N = 8, qe = 15e3, xe = 2e3, Fe = 1e3, He = 100, We = 8e3, je = 15e3, Ct = 3, $e = [300, 1e3], pt = 64e3, Z = 4e3, ft = 30, ze = 2e3, Ge = 1e3, Xe = 200 * 1024 * 1024, gt = "Image is too large for model vision input.", Ke = 100, zt = "pluno.productAgent.state.", it = "pluno.productAgent.pendingEvents.", z = "pluno.productAgent.activeToolCalls.", Je = 100;
+const rt = '.pluno-pa-widget-host[data-pluno-product-agent-ui="widget"]', Ce = '.pluno-pa-widget[data-pluno-product-agent-ui-root="widget"]', _e = ".pluno-pa-widget__panel", be = ".pluno-pa-widget__timeline", St = `${rt}[data-pluno-sdk-preview-channel]`, Me = "https://app.pluno.ai", Ue = "gpt-5.6-terra", Pe = 2e4, De = 1e4, ve = 1e4, Ne = 1e4, Oe = 1e4, Le = 1e3, kt = 3e4, Et = 0.2, Rt = 6e4, Be = 15e3, N = 8, qe = 15e3, xe = 2e3, Fe = 1e3, He = 100, We = 8e3, je = 15e3, Ct = 3, $e = [300, 1e3], pt = 64e3, Z = 4e3, ft = 30, ze = 2e3, Ge = 1e3, Xe = 200 * 1024 * 1024, gt = "Image is too large for model vision input.", Ke = 100, zt = "pluno.productAgent.state.", it = "pluno.productAgent.pendingEvents.", z = "pluno.productAgent.activeToolCalls.", Je = 100;
 function O(e, t = 0) {
   const s = e === 0 ? 0 : Math.min(3e4, 1e3 * 2 ** (e - 1));
   return Math.max(t, s);
@@ -412,7 +412,7 @@ class Gt {
     }), this.queuedClientEvents = un(
       rn(t.clientId),
       an(t.clientId)
-    ), U(t.clientId, this.queuedClientEvents), this.scheduledChatContinuationScheduler = me({
+    ), P(t.clientId, this.queuedClientEvents), this.scheduledChatContinuationScheduler = me({
       clientId: t.clientId,
       canDeliver: (r) => r.sessionId === this.state.sessionId,
       deliver: async (r) => {
@@ -481,14 +481,15 @@ class Gt {
     assistantDraftRunId: null,
     isThinking: !1,
     lastError: null,
-    lastErrorCode: null
+    lastErrorCode: null,
+    lastErrorSecuritySettingsUrl: null
   };
   static async init(t) {
     const s = await Se(), n = new Gt({
       ...t,
       backendUrl: gs(t.backendUrl ?? Me),
       clientId: t.clientId ?? Ms(),
-      model: t.model ?? Pe
+      model: t.model ?? Ue
     }, s);
     try {
       de().catch((r) => {
@@ -831,7 +832,7 @@ class Gt {
     });
   }
   send(t) {
-    this.sendNow(k(t)) || (this.queuedClientEvents.push(t), U(this.options.clientId, this.queuedClientEvents), this.setState({ status: "reconnecting" }), this.scheduleReconnect());
+    this.sendNow(k(t)) || (this.queuedClientEvents.push(t), P(this.options.clientId, this.queuedClientEvents), this.setState({ status: "reconnecting" }), this.scheduleReconnect());
   }
   async getUploadToken() {
     const t = this.options.token ?? await this.options.tokenProvider?.() ?? this.token ?? null;
@@ -889,14 +890,14 @@ class Gt {
     if (this.socket?.readyState !== WebSocket.OPEN || this.queuedClientEvents.length === 0)
       return;
     const t = this.queuedClientEvents.splice(0, this.queuedClientEvents.length);
-    U(this.options.clientId, this.queuedClientEvents);
+    P(this.options.clientId, this.queuedClientEvents);
     for (let s = 0; s < t.length; s += 1) {
       const n = t[s];
       if (!this.sendNow(k(n))) {
-        this.queuedClientEvents.unshift(n, ...t.slice(s + 1)), U(this.options.clientId, this.queuedClientEvents);
+        this.queuedClientEvents.unshift(n, ...t.slice(s + 1)), P(this.options.clientId, this.queuedClientEvents);
         return;
       }
-      U(this.options.clientId, this.queuedClientEvents);
+      P(this.options.clientId, this.queuedClientEvents);
     }
   }
   handleServerEvent(t) {
@@ -917,7 +918,7 @@ class Gt {
         normalizedAppearance: s
       }), this.runtimeHelperJavascript = Cs(t.runtimeHelpers)?.javascript ?? null;
       const r = Mt(t, "starterPrompts"), i = Object.prototype.hasOwnProperty.call(t, "starterPrompts"), o = t.starterPromptsLoading === !0, c = {
-        user: Ps(t.user),
+        user: Us(t.user),
         status: "connected"
       };
       (i || this.state.starterPrompts.length === 0) && (c.starterPrompts = r, c.starterPromptsLoading = r.length > 0 ? !1 : o), i && r.length > 0 && (this.transientStarterPromptsRequestInFlight = !1, this.transientStarterPromptsRequestAttempted = !0), (n || s) && (c.appearance = s), this.setState(c), i && r.length === 0 && !o && !As() && this.requestTransientStarterPrompts(), this.state.sessionId && this.send({
@@ -951,8 +952,8 @@ class Gt {
         return !Dt(h) && (!n || !at(h));
       }), i = xs(
         this.state.messages,
-        Us(r, this.options.backendUrl)
-      ), o = Ut(i), c = s.some(
+        Ps(r, this.options.backendUrl)
+      ), o = Pt(i), c = s.some(
         (a) => Nt(
           v(a),
           this.state.assistantDraft,
@@ -1017,7 +1018,7 @@ class Gt {
         n.role === "assistant" && (this.retryableClientMessageId = null, this.clearRetryTimers(), this.clearRunAckResyncRetryTimer());
         const r = t.item.data;
         Js(r) && this.clearRunAckResyncRetryTimer();
-        const i = qs(this.state.messages, n), o = Ut(i), c = Nt(
+        const i = qs(this.state.messages, n), o = Pt(i), c = Nt(
           r,
           this.state.assistantDraft,
           this.state.assistantDraftRespondsToUserMessageId,
@@ -1076,7 +1077,8 @@ class Gt {
         status: "error",
         isThinking: !1,
         lastError: c.message,
-        lastErrorCode: typeof t.code == "string" ? t.code : null
+        lastErrorCode: typeof t.code == "string" ? t.code : null,
+        lastErrorSecuritySettingsUrl: typeof t.securitySettingsUrl == "string" ? t.securitySettingsUrl : null
       }), this.clearThinkingWatchdog(), this.emit("error", c);
     }
   }
@@ -1376,7 +1378,7 @@ class Gt {
       !t || !this.sendNow({ type: "runtime.ping" }) || (this.clearHeartbeatAckTimer(), this.heartbeatAckTimer = window.setTimeout(() => {
         this.socket === t && (y("web-sdk.agent", "Pluno heartbeat acknowledgement timed out; reconnecting"), this.replaceTimedOutSocket(t));
       }, De));
-    }, Ue);
+    }, Pe);
   }
   stopHeartbeat() {
     this.heartbeatTimer !== null && (window.clearInterval(this.heartbeatTimer), this.heartbeatTimer = null), this.clearHeartbeatAckTimer();
@@ -1400,7 +1402,8 @@ class Gt {
     this.state = {
       ...this.state,
       ...t,
-      ...t.lastError === null && t.lastErrorCode === void 0 ? { lastErrorCode: null } : {}
+      ...t.lastError === null && t.lastErrorCode === void 0 ? { lastErrorCode: null } : {},
+      ...t.lastError !== void 0 && t.lastErrorSecuritySettingsUrl === void 0 ? { lastErrorSecuritySettingsUrl: null } : {}
     }, nn(this.options.clientId, this.state), this.emit("state", this.getState());
   }
   emit(t, s) {
@@ -2017,7 +2020,7 @@ function Ms() {
 function B() {
   return crypto.randomUUID();
 }
-function Ps(e) {
+function Us(e) {
   if (!e || typeof e != "object")
     return null;
   const t = e, s = typeof t.id == "string" ? t.id : null;
@@ -2028,7 +2031,7 @@ function Ps(e) {
     avatarUrl: typeof t.avatarUrl == "string" ? t.avatarUrl : null
   } : null;
 }
-function Us(e, t) {
+function Ps(e, t) {
   return Array.isArray(e) ? lt(
     ut(
       e.map((s) => Kt(s, t)).filter((s) => s !== null)
@@ -2098,7 +2101,8 @@ function Kt(e, t) {
     ...C(r) ? { runId: C(r) } : {},
     dataType: String(r.type),
     loading: r.type === "run_status" && (r.status === "running" || r.status === "retrying"),
-    ...typeof r.retryable == "boolean" ? { retryable: r.retryable } : {}
+    ...typeof r.retryable == "boolean" ? { retryable: r.retryable } : {},
+    ...typeof r.securitySettingsUrl == "string" ? { securitySettingsUrl: r.securitySettingsUrl } : {}
   } : null;
 }
 function vs(e) {
@@ -2191,13 +2195,13 @@ function Ws(e, t) {
   return n.splice(s, 1), n;
 }
 function Yt(e, t) {
-  const s = Pt(e), n = Pt(t);
+  const s = Ut(e), n = Ut(t);
   return s && n ? s === n : e.content === t.content;
 }
 function mt(e) {
   return e.role === "user" && (e.id.startsWith("local-") || e.id.startsWith("optimistic-user-message:"));
 }
-function Pt(e) {
+function Ut(e) {
   const t = e.clientMessageId;
   if (t)
     return t;
@@ -2206,7 +2210,7 @@ function Pt(e) {
   );
   return n ? e.id.slice(n.length) : null;
 }
-function Ut(e) {
+function Pt(e) {
   const t = Vt(e);
   if (t === null)
     return !1;
@@ -2463,7 +2467,7 @@ function rn(e) {
     return [];
   }
 }
-function U(e, t) {
+function P(e, t) {
   try {
     const s = t.filter(wt);
     if (s.length === 0) {
@@ -2622,6 +2626,7 @@ function gn(e) {
     respondsToUserMessageId: typeof t.respondsToUserMessageId == "string" ? t.respondsToUserMessageId : void 0,
     ...typeof t.runId == "string" ? { runId: t.runId } : {},
     dataType: typeof t.dataType == "string" ? t.dataType : void 0,
+    securitySettingsUrl: typeof t.securitySettingsUrl == "string" ? t.securitySettingsUrl : void 0,
     attachments: Qt(t.attachments)?.map(It),
     loading: typeof t.loading == "boolean" ? t.loading : void 0
   };
@@ -2829,7 +2834,7 @@ function bn(e) {
 function Mn(e) {
   return e === 401 || e === 403;
 }
-const X = "[REDACTED_SECRET]", R = "[REDACTED_TOKEN]", Pn = "[REDACTED_SIGNED_URL]", Un = 20, Dn = /^(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|token|api_key|apiKey|apikey|key|secret|signature|sig|password|passwd|pwd|code|state|session|jwt|csrf|csrfToken|xsrf|xsrfToken)$/i, ne = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi, re = /\bBasic\s+[A-Za-z0-9+/=-]{12,}/gi, ie = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, oe = /\b(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|api_key|apiKey|apikey|client_secret|clientSecret|password|secret|token|jwt|csrf|csrfToken|xsrf|xsrfToken)\b\s*[:=]\s*["']?[^"',&\s}]+/gi, vn = /\bhttps?:\/\/[^\s"'<>]+(?:X-Amz-Signature|X-Goog-Signature|Signature|sig=)[^\s"'<>]*/gi, Nn = /\bhttps?:\/\/[^\s"'<>]+/gi, On = /[),.;\]]+$/;
+const X = "[REDACTED_SECRET]", R = "[REDACTED_TOKEN]", Un = "[REDACTED_SIGNED_URL]", Pn = 20, Dn = /^(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|token|api_key|apiKey|apikey|key|secret|signature|sig|password|passwd|pwd|code|state|session|jwt|csrf|csrfToken|xsrf|xsrfToken)$/i, ne = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi, re = /\bBasic\s+[A-Za-z0-9+/=-]{12,}/gi, ie = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, oe = /\b(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|api_key|apiKey|apikey|client_secret|clientSecret|password|secret|token|jwt|csrf|csrfToken|xsrf|xsrfToken)\b\s*[:=]\s*["']?[^"',&\s}]+/gi, vn = /\bhttps?:\/\/[^\s"'<>]+(?:X-Amz-Signature|X-Goog-Signature|Signature|sig=)[^\s"'<>]*/gi, Nn = /\bhttps?:\/\/[^\s"'<>]+/gi, On = /[),.;\]]+$/;
 function k(e) {
   return W(e, 0, /* @__PURE__ */ new WeakSet());
 }
@@ -2838,7 +2843,7 @@ function W(e, t, s) {
     return e.startsWith("data:image/") || e.startsWith("data:application/pdf;") ? e : j(e);
   if (e === null || typeof e != "object")
     return e;
-  if (t >= Un)
+  if (t >= Pn)
     return "[REDACTED_MAX_DEPTH]";
   if (s.has(e))
     return "[REDACTED_CIRCULAR]";
@@ -2867,7 +2872,7 @@ function ce(e) {
   }
 }
 function j(e) {
-  return e.replace(vn, Pn).replace(Nn, qn).replace(ne, `Bearer ${R}`).replace(re, `Basic ${R}`).replace(ie, R).replace(oe, (t, s) => `${s}: ${X}`);
+  return e.replace(vn, Un).replace(Nn, qn).replace(ne, `Bearer ${R}`).replace(re, `Basic ${R}`).replace(ie, R).replace(oe, (t, s) => `${s}: ${X}`);
 }
 function Bn(e) {
   return e.replace(ne, `Bearer ${R}`).replace(re, `Basic ${R}`).replace(ie, R).replace(oe, (t, s) => `${s}: ${X}`);