@pluno/product-agent-web 0.1.102 → 0.1.104

package/dist/product-agent-sdk.js

@@ -1,11 +1,11 @@
-const le = "pluno-product-agent-attachments";
+const ue = "pluno-product-agent-attachments";
 const st = "files";
-async function xt(e) {
+async function Ft(e) {
   const t = await $();
-  await Ht(t, "readwrite", (s) => s.put(e));
+  await Wt(t, "readwrite", (s) => s.put(e));
 }
-async function ue(e) {
-  const t = await $(), s = await Ht(
+async function de(e) {
+  const t = await $(), s = await Wt(
     t,
     "readonly",
     (r) => r.get(e)
@@ -13,9 +13,9 @@ async function ue(e) {
   if (!s)
     return null;
   const n = Date.now();
-  return await Ft(e, { lastUsedAt: n }), { ...s, lastUsedAt: n };
+  return await Ht(e, { lastUsedAt: n }), { ...s, lastUsedAt: n };
 }
-async function Ft(e, t) {
+async function Ht(e, t) {
   const s = await $();
   await dt(s, "readwrite", async (n) => {
     const r = await ht(
@@ -27,7 +27,7 @@ async function Ft(e, t) {
     });
   });
 }
-async function de(e = 864e5) {
+async function he(e = 864e5) {
   const t = await $(), s = Date.now() - e;
   await dt(t, "readwrite", async (n) => {
     const r = n.index("lastUsedAt");
@@ -36,14 +36,14 @@ async function de(e = 864e5) {
 }
 function $() {
   return typeof indexedDB > "u" ? Promise.reject(new Error("Product Agent attachment storage is unavailable")) : new Promise((e, t) => {
-    const s = indexedDB.open(le, 1);
+    const s = indexedDB.open(ue, 1);
     s.onupgradeneeded = () => {
       const r = s.result.createObjectStore(st, { keyPath: "attachmentId" });
       r.createIndex("lastUsedAt", "lastUsedAt", { unique: !1 }), r.createIndex("sessionId", "sessionId", { unique: !1 }), r.createIndex("origin", "origin", { unique: !1 });
     }, s.onsuccess = () => e(s.result), s.onerror = () => t(s.error ?? new Error("Failed to open Product Agent attachment storage"));
   });
 }
-async function Ht(e, t, s) {
+async function Wt(e, t, s) {
   return await dt(e, t, async (n) => await ht(s(n)));
 }
 function dt(e, t, s) {
@@ -73,11 +73,11 @@ function ht(e) {
     e.onsuccess = () => t(e.result), e.onerror = () => s(e.error ?? new Error("Product Agent attachment storage request failed"));
   });
 }
-function he(e) {
+function pe(e) {
   return e !== null && (typeof e == "object" || typeof e == "function");
 }
-function Wt(e, t, s) {
-  const n = Reflect.get(e, "pluno"), r = he(n) ? n : {};
+function jt(e, t, s) {
+  const n = Reflect.get(e, "pluno"), r = pe(n) ? n : {};
   if (r !== n && !Reflect.set(e, "pluno", r))
     return null;
   const i = Object.getOwnPropertyDescriptor(r, t);
@@ -91,8 +91,8 @@ function Wt(e, t, s) {
     }
   };
 }
-const H = "pluno.productAgent.scheduledChatContinuation.", nt = "pluno:scheduled-chat-continuation-changed", jt = 10080 * 6e4, pe = 5e3, fe = 15e3;
-function ge(e, {
+const H = "pluno.productAgent.scheduledChatContinuation.", nt = "pluno:scheduled-chat-continuation-changed", $t = 10080 * 6e4, fe = 5e3, ge = 15e3;
+function me(e, {
   clientId: t,
   sessionId: s,
   callId: n
@@ -103,7 +103,7 @@ function ge(e, {
     clientId: t,
     sessionId: s,
     defaultTaskId: `scheduled-${n}`,
-    expiresAfterDueMs: jt
+    expiresAfterDueMs: $t
   })});
 const scheduleQuery = (query, delaySeconds) => {
   if (typeof query !== "string" || query.trim().length === 0) {
@@ -132,15 +132,15 @@ const scheduleQuery = (query, delaySeconds) => {
 };
 ${e}`;
 }
-function me(e) {
-  const t = e.storage === void 0 ? ye() : e.storage;
+function ye(e) {
+  const t = e.storage === void 0 ? Te() : e.storage;
   let s = null, n = !1, r = !1, i = !1, o = t !== null;
   const c = /* @__PURE__ */ new Map(), u = () => {
     s !== null && (clearTimeout(s), s = null);
   }, l = () => {
     u(), !(i || !o) && (s = setTimeout(() => {
       s = null, h();
-    }, pe));
+    }, fe));
   }, a = () => {
     o = !1, u();
   }, h = async () => {
@@ -170,7 +170,7 @@ function me(e) {
         e.onTasksChanged?.(m);
         for (const g of m)
           if (!(g.clientId !== e.clientId || g.dueAt > f || c.has(g.id) || !await e.canDeliver(g))) {
-            c.set(g.id, f + fe);
+            c.set(g.id, f + ge);
             try {
               await e.deliver(g);
             } catch {
@@ -216,9 +216,9 @@ function D(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
-  return typeof t.id == "string" && t.id.length > 0 && typeof t.clientId == "string" && t.clientId.length > 0 && typeof t.sessionId == "string" && t.sessionId.length > 0 && typeof t.prompt == "string" && t.prompt.trim().length > 0 && typeof t.dueAt == "number" && Number.isFinite(t.dueAt) && typeof t.expiresAt == "number" && Number.isFinite(t.expiresAt) && t.expiresAt === t.dueAt + jt;
+  return typeof t.id == "string" && t.id.length > 0 && typeof t.clientId == "string" && t.clientId.length > 0 && typeof t.sessionId == "string" && t.sessionId.length > 0 && typeof t.prompt == "string" && t.prompt.trim().length > 0 && typeof t.dueAt == "number" && Number.isFinite(t.dueAt) && typeof t.expiresAt == "number" && Number.isFinite(t.expiresAt) && t.expiresAt === t.dueAt + $t;
 }
-function ye() {
+function Te() {
   let e;
   try {
     e = window.localStorage, e.length;
@@ -262,10 +262,10 @@ function ye() {
 function J(e) {
   return `${H}${e}`;
 }
-const Y = "pluno.productAgent.transportId", Te = "pluno.productAgent.transportIdentity", V = "pluno.productAgent.transportIdentity.event", we = 50, Ie = globalThis.setTimeout.bind(globalThis);
-let P = null;
+const Y = "pluno.productAgent.transportId", we = "pluno.productAgent.transportIdentity", V = "pluno.productAgent.transportIdentity.event", Ie = 50, Ae = globalThis.setTimeout.bind(globalThis);
+let U = null;
 const q = /* @__PURE__ */ new Set();
-async function Ae(e = $t()) {
+async function Se(e = zt()) {
   const t = e.randomUUID(), s = e.storage.getItem(Y);
   let n = s ?? e.randomUUID(), r = !1, i = !1;
   const o = e.channel.subscribe((u) => {
@@ -301,14 +301,14 @@ async function Ae(e = $t()) {
     }
   };
 }
-async function Se() {
-  P || (P = Ae($t()), P.then((n) => {
+async function ke() {
+  U || (U = Se(zt()), U.then((n) => {
     const r = (i) => {
-      i.persisted || (n.release(), P = null, q.clear(), window.removeEventListener("pagehide", r));
+      i.persisted || (n.release(), U = null, q.clear(), window.removeEventListener("pagehide", r));
     };
     window.addEventListener("pagehide", r);
   }));
-  const e = await P, t = ke();
+  const e = await U, t = Ee();
   q.add(t);
   let s = !1;
   return {
@@ -319,23 +319,23 @@ async function Se() {
     }
   };
 }
-function ke() {
+function Ee() {
   let e = 0;
   for (; q.has(e); )
     e += 1;
   return e;
 }
-function $t() {
+function zt() {
   return {
     storage: window.sessionStorage,
-    channel: Ee(),
+    channel: _e(),
     randomUUID: () => crypto.randomUUID(),
-    settle: () => new Promise((e) => Ie(e, we))
+    settle: () => new Promise((e) => Ae(e, Ie))
   };
 }
-function Ee() {
+function _e() {
   if (typeof BroadcastChannel < "u") {
-    const e = new BroadcastChannel(Te);
+    const e = new BroadcastChannel(we);
     return {
       postMessage: (t) => e.postMessage(t),
       subscribe: (t) => {
@@ -368,18 +368,18 @@ function Re() {
     }
   };
 }
-const rt = '.pluno-pa-widget-host[data-pluno-product-agent-ui="widget"]', Ce = '.pluno-pa-widget[data-pluno-product-agent-ui-root="widget"]', _e = ".pluno-pa-widget__panel", be = ".pluno-pa-widget__timeline", St = `${rt}[data-pluno-sdk-preview-channel]`, Me = "https://app.pluno.ai", Pe = "gpt-5.6-terra", Ue = 2e4, De = 1e4, ve = 1e4, Ne = 1e4, Oe = 1e4, Le = 1e3, kt = 3e4, Et = 0.2, Rt = 6e4, Be = 15e3, N = 8, qe = 15e3, xe = 2e3, Fe = 1e3, He = 100, We = 8e3, je = 15e3, Ct = 3, $e = [300, 1e3], pt = 64e3, Z = 4e3, ft = 30, ze = 2e3, Ge = 1e3, Xe = 200 * 1024 * 1024, gt = "Image is too large for model vision input.", Ke = 100, zt = "pluno.productAgent.state.", it = "pluno.productAgent.pendingEvents.", z = "pluno.productAgent.activeToolCalls.", Je = 100;
+const rt = '.pluno-pa-widget-host[data-pluno-product-agent-ui="widget"]', Ce = '.pluno-pa-widget[data-pluno-product-agent-ui-root="widget"]', be = ".pluno-pa-widget__panel", Me = ".pluno-pa-widget__timeline", St = `${rt}[data-pluno-sdk-preview-channel]`, Ue = "https://app.pluno.ai", Pe = "gpt-5.6-terra", De = 2e4, ve = 1e4, Ne = 1e4, Oe = 1e4, Le = 1e4, Be = 1e3, kt = 3e4, Et = 0.2, _t = 6e4, qe = 15e3, N = 8, xe = 15e3, Fe = 2e3, He = 1e3, We = 100, je = 8e3, $e = 15e3, Rt = 3, ze = [300, 1e3], pt = 64e3, Z = 4e3, ft = 30, Ge = 2e3, Xe = 1e3, Ke = 200 * 1024 * 1024, gt = "Image is too large for model vision input.", Je = 100, Gt = "pluno.productAgent.state.", it = "pluno.productAgent.pendingEvents.", z = "pluno.productAgent.activeToolCalls.", Ye = 100;
 function O(e, t = 0) {
   const s = e === 0 ? 0 : Math.min(3e4, 1e3 * 2 ** (e - 1));
   return Math.max(t, s);
 }
 const x = /* @__PURE__ */ new Set();
 let L = null;
-function Ye(e, t = Math.random) {
-  const s = Math.min(kt, Le * 2 ** e), n = 1 - Et + t() * Et * 2;
+function Ve(e, t = Math.random) {
+  const s = Math.min(kt, Be * 2 ** e), n = 1 - Et + t() * Et * 2;
   return Math.min(kt, Math.round(s * n));
 }
-function Ve(e, t, s) {
+function Ze(e, t, s) {
   return new Promise((n, r) => {
     const i = setTimeout(() => r(new Error(s)), t);
     e.then(
@@ -392,13 +392,13 @@ function Ve(e, t, s) {
     );
   });
 }
-class Gt {
+class Xt {
   constructor(t, s) {
     this.options = t, this.transportIdentity = s, this.state = {
       ...this.state,
-      starterPrompts: Es(t.initialStarterPrompts)
+      starterPrompts: _s(t.initialStarterPrompts)
     };
-    const n = t.restorePersistedState === !1 ? null : sn(t.clientId, t.expectedPersistedSessionId);
+    const n = t.restorePersistedState === !1 ? null : rn(t.clientId, t.expectedPersistedSessionId);
     n && (this.state = {
       ...this.state,
       ...n,
@@ -409,10 +409,10 @@ class Gt {
       assistantDraftRunId: null,
       isThinking: !1,
       lastError: null
-    }), this.queuedClientEvents = un(
-      rn(t.clientId),
-      an(t.clientId)
-    ), U(t.clientId, this.queuedClientEvents), this.scheduledChatContinuationScheduler = me({
+    }), this.queuedClientEvents = hn(
+      an(t.clientId),
+      ln(t.clientId)
+    ), P(t.clientId, this.queuedClientEvents), this.scheduledChatContinuationScheduler = ye({
       clientId: t.clientId,
       canDeliver: (r) => r.sessionId === this.state.sessionId,
       deliver: async (r) => {
@@ -481,17 +481,18 @@ class Gt {
     assistantDraftRunId: null,
     isThinking: !1,
     lastError: null,
-    lastErrorCode: null
+    lastErrorCode: null,
+    lastErrorSecuritySettingsUrl: null
   };
   static async init(t) {
-    const s = await Se(), n = new Gt({
+    const s = await ke(), n = new Xt({
       ...t,
-      backendUrl: gs(t.backendUrl ?? Me),
-      clientId: t.clientId ?? Ms(),
+      backendUrl: ms(t.backendUrl ?? Ue),
+      clientId: t.clientId ?? Us(),
       model: t.model ?? Pe
     }, s);
     try {
-      de().catch((r) => {
+      he().catch((r) => {
         y("web-sdk.attachments", "Failed to delete stale Product Agent attachments", {
           message: r instanceof Error ? r.message : String(r)
         });
@@ -523,14 +524,14 @@ class Gt {
       lastError: null
     });
     try {
-      if (this.token = this.options.token ?? (this.options.tokenProvider ? await Ve(this.options.tokenProvider(), ve, "Pluno token provider timed out") : null), t !== this.connectionAttemptId || this.state.status === "closed")
+      if (this.token = this.options.token ?? (this.options.tokenProvider ? await Ze(this.options.tokenProvider(), Ne, "Pluno token provider timed out") : null), t !== this.connectionAttemptId || this.state.status === "closed")
         return;
       if (!this.token && !this.options.webSocketFactory)
         throw new Error("Pluno requires a token or tokenProvider");
-      const s = ys(this.options.backendUrl), n = this.options.webSocketFactory?.(s) ?? new WebSocket(s);
+      const s = Ts(this.options.backendUrl), n = this.options.webSocketFactory?.(s) ?? new WebSocket(s);
       this.socket = n, this.socketConnectTimer = window.setTimeout(() => {
         this.socket === n && n.readyState === WebSocket.CONNECTING && (y("web-sdk.agent", "Pluno socket opening timed out; reconnecting"), this.replaceTimedOutSocket(n));
-      }, Ne), n.addEventListener("open", () => {
+      }, Oe), n.addEventListener("open", () => {
         this.socket !== n || (this.clearSocketConnectTimer(), y("web-sdk.agent", "Pluno socket opened", {
           queuedClientEventCount: this.queuedClientEvents.length,
           isThinking: this.state.isThinking
@@ -542,9 +543,9 @@ class Gt {
           pageUrl: location.href
         }) : !0)) || (this.socketAuthTimer = window.setTimeout(() => {
           this.socket === n && (y("web-sdk.agent", "Pluno socket authentication timed out; reconnecting"), this.replaceTimedOutSocket(n));
-        }, Oe));
+        }, Le));
       }), n.addEventListener("message", (r) => {
-        this.socket === n && this.handleServerEvent(ks(r.data));
+        this.socket === n && this.handleServerEvent(Es(r.data));
       }), n.addEventListener("close", (r) => {
         this.socket === n && (this.clearSocketPhaseTimers(), this.stopHeartbeat(), this.socket = null, this.state.status !== "closed" && (y("web-sdk.agent", "Pluno socket closed; scheduling reconnect", {
           code: typeof r?.code == "number" ? r.code : null,
@@ -577,7 +578,7 @@ class Gt {
     this.connectionAttemptId += 1, this.setState({ status: "closed", isThinking: !1 }), this.clearSocketPhaseTimers(), this.stopHeartbeat(), this.clearStarterPromptUrlRefreshTimer(), this.clearRetryTimers(), this.clearThinkingWatchdog(), this.rejectPendingSessionHistoryRequests("Pluno disconnected."), this.reconnectTimer !== null && (window.clearTimeout(this.reconnectTimer), this.reconnectTimer = null), this.queuedClientEvents = [], this.socket?.close(), this.socket = null;
   }
   destroy() {
-    this.disconnect(), this.locationChangeCleanup?.(), this.locationChangeCleanup = null, this.cleanupSessionUserFilesApi(), this.pageLifecycleCleanup?.(), this.pageLifecycleCleanup = null, this.activeBrowserToolCalls.clear(), this.scheduledChatContinuationScheduler.destroy(), dn(this.options.clientId), this.transportIdentity.release(), this.networkCaptureCleanup?.(), this.networkCaptureCleanup = null, this.networkBatchTimer !== null && (window.clearTimeout(this.networkBatchTimer), this.networkBatchTimer = null), this.queuedNetworkEvents = [];
+    this.disconnect(), this.locationChangeCleanup?.(), this.locationChangeCleanup = null, this.cleanupSessionUserFilesApi(), this.pageLifecycleCleanup?.(), this.pageLifecycleCleanup = null, this.activeBrowserToolCalls.clear(), this.scheduledChatContinuationScheduler.destroy(), pn(this.options.clientId), this.transportIdentity.release(), this.networkCaptureCleanup?.(), this.networkCaptureCleanup = null, this.networkBatchTimer !== null && (window.clearTimeout(this.networkBatchTimer), this.networkBatchTimer = null), this.queuedNetworkEvents = [];
     for (const t of Object.values(this.listeners))
       t?.clear();
   }
@@ -613,7 +614,7 @@ class Gt {
       attachments: i.length > 0 ? i : void 0,
       page: o,
       model: this.options.model,
-      metadata: _t(this.options.metadata)
+      metadata: Ct(this.options.metadata)
     };
     return this.activeClientMessageId = c, this.activeUserMessageEvent = a, this.markThinkingProgress(), this.send(a), this.startBackgroundAttachmentUploads(c, i), c;
   }
@@ -625,12 +626,12 @@ class Gt {
     const s = B(), n = {
       id: s,
       name: t.name || "attachment",
-      mimeType: Lt(t),
+      mimeType: Bt(t),
       sizeBytes: t.size
     };
     this.attachmentFiles.set(s, t), this.attachmentBlobCache.set(s, t);
     const r = Date.now();
-    return xt({
+    return Ft({
       attachmentId: s,
       name: n.name,
       mimeType: n.mimeType,
@@ -685,7 +686,7 @@ class Gt {
     waitForSession: r,
     notifyCompletion: i
   }) {
-    const o = r ? await this.waitForSessionId() : this.state.sessionId, c = Lt(t), u = {
+    const o = r ? await this.waitForSessionId() : this.state.sessionId, c = Bt(t), u = {
       sessionId: o ?? void 0,
       attachmentId: s.id,
       clientId: this.options.clientId,
@@ -695,7 +696,7 @@ class Gt {
       sizeBytes: t.size,
       page: S(),
       model: this.options.model,
-      metadata: _t(this.options.metadata)
+      metadata: Ct(this.options.metadata)
     }, l = this.options.prepareAttachmentUpload ? await et(
       () => this.options.prepareAttachmentUpload(u),
       "Failed to prepare attachment upload"
@@ -710,8 +711,8 @@ class Gt {
         throw new F("Failed to upload attachment", h.status);
       return h;
     }, "Failed to upload attachment"), this.setState({ sessionId: l.sessionId });
-    const a = te(l.attachment, this.options.backendUrl);
-    return this.updateAttachmentInState(s.id, a), s.id && Ft(s.id, {
+    const a = ee(l.attachment, this.options.backendUrl);
+    return this.updateAttachmentInState(s.id, a), s.id && Ht(s.id, {
       sessionId: l.sessionId,
       fileUrl: a.fileUrl,
       gcsPath: a.gcsPath,
@@ -733,7 +734,7 @@ class Gt {
     return this.state.sessionId ? Promise.resolve(this.state.sessionId) : new Promise((t, s) => {
       const n = window.setTimeout(() => {
         r(), s(new Error("Timed out waiting for Pluno session before persisting attachment"));
-      }, je), r = this.on("state", (i) => {
+      }, $e), r = this.on("state", (i) => {
         i.sessionId && (window.clearTimeout(n), r(), t(i.sessionId));
       });
     });
@@ -755,7 +756,7 @@ class Gt {
       const n = await this.fetchEmbedAttachmentUpload(t);
       if (n.ok)
         return await n.json();
-      if (Mn(n.status) && this.options.tokenProvider && !s) {
+      if (Pn(n.status) && this.options.tokenProvider && !s) {
         s = !0;
         const r = await this.fetchEmbedAttachmentUpload(t);
         if (r.ok)
@@ -800,7 +801,7 @@ class Gt {
     const s = B(), n = new Promise((i, o) => {
       const c = window.setTimeout(() => {
         this.pendingSessionHistoryRequests.delete(s), o(new Error("Session history did not respond in time"));
-      }, We);
+      }, je);
       this.pendingSessionHistoryRequests.set(s, { resolve: i, reject: o, timeout: c });
     }), r = {
       type: "sessions.list",
@@ -831,7 +832,7 @@ class Gt {
     });
   }
   send(t) {
-    this.sendNow(k(t)) || (this.queuedClientEvents.push(t), U(this.options.clientId, this.queuedClientEvents), this.setState({ status: "reconnecting" }), this.scheduleReconnect());
+    this.sendNow(k(t)) || (this.queuedClientEvents.push(t), P(this.options.clientId, this.queuedClientEvents), this.setState({ status: "reconnecting" }), this.scheduleReconnect());
   }
   async getUploadToken() {
     const t = this.options.token ?? await this.options.tokenProvider?.() ?? this.token ?? null;
@@ -857,7 +858,7 @@ class Gt {
     if (this.state.starterPromptsLoading || this.transientStarterPromptsRequestInFlight || this.transientStarterPromptsRequestAttempted)
       return;
     this.transientStarterPromptsRequestInFlight = !0, this.transientStarterPromptsRequestAttempted = !0, this.setState({ starterPromptsLoading: !0 });
-    const t = Ts();
+    const t = ws();
     this.sendNow(
       k({
         type: "starter_prompts.page_context",
@@ -868,13 +869,13 @@ class Gt {
     ) || (this.transientStarterPromptsRequestInFlight = !1, this.transientStarterPromptsRequestAttempted = !1, this.setState({ starterPromptsLoading: !1 }));
   }
   startStarterPromptUrlWatcher() {
-    this.locationChangeCleanup || (this.locationChangeCleanup = ws(() => this.handleStarterPromptUrlChange()));
+    this.locationChangeCleanup || (this.locationChangeCleanup = Is(() => this.handleStarterPromptUrlChange()));
   }
   handleStarterPromptUrlChange() {
     const t = location.href;
     t !== this.lastStarterPromptPageUrl && (this.lastStarterPromptPageUrl = t, this.clearStarterPromptUrlRefreshTimer(), this.starterPromptUrlRefreshTimer = window.setTimeout(() => {
       this.starterPromptUrlRefreshTimer = null, this.refreshStarterPromptsForCurrentUrl();
-    }, Je));
+    }, Ye));
   }
   refreshStarterPromptsForCurrentUrl() {
     this.socket?.readyState !== WebSocket.OPEN || this.state.status === "closed" || (this.setState({ starterPromptsLoading: this.state.messages.length === 0 }), this.sendNow({
@@ -889,14 +890,14 @@ class Gt {
     if (this.socket?.readyState !== WebSocket.OPEN || this.queuedClientEvents.length === 0)
       return;
     const t = this.queuedClientEvents.splice(0, this.queuedClientEvents.length);
-    U(this.options.clientId, this.queuedClientEvents);
+    P(this.options.clientId, this.queuedClientEvents);
     for (let s = 0; s < t.length; s += 1) {
       const n = t[s];
       if (!this.sendNow(k(n))) {
-        this.queuedClientEvents.unshift(n, ...t.slice(s + 1)), U(this.options.clientId, this.queuedClientEvents);
+        this.queuedClientEvents.unshift(n, ...t.slice(s + 1)), P(this.options.clientId, this.queuedClientEvents);
         return;
       }
-      U(this.options.clientId, this.queuedClientEvents);
+      P(this.options.clientId, this.queuedClientEvents);
     }
   }
   handleServerEvent(t) {
@@ -908,7 +909,7 @@ class Gt {
       this.clearHeartbeatAckTimer();
       return;
     }
-    if (ts(t) && this.markThinkingProgress(), t.type === "auth.ok") {
+    if (es(t) && this.markThinkingProgress(), t.type === "auth.ok") {
       this.clearSocketAuthTimer(), this.reconnectAttempts = 0, this.flushQueuedClientEvents(), this.startHeartbeat();
       const s = Rs(t), n = Object.prototype.hasOwnProperty.call(t, "appearance");
       y("web-sdk.agent", "Received auth.ok appearance", {
@@ -920,7 +921,7 @@ class Gt {
         user: Ps(t.user),
         status: "connected"
       };
-      (i || this.state.starterPrompts.length === 0) && (c.starterPrompts = r, c.starterPromptsLoading = r.length > 0 ? !1 : o), i && r.length > 0 && (this.transientStarterPromptsRequestInFlight = !1, this.transientStarterPromptsRequestAttempted = !0), (n || s) && (c.appearance = s), this.setState(c), i && r.length === 0 && !o && !As() && this.requestTransientStarterPrompts(), this.state.sessionId && this.send({
+      (i || this.state.starterPrompts.length === 0) && (c.starterPrompts = r, c.starterPromptsLoading = r.length > 0 ? !1 : o), i && r.length > 0 && (this.transientStarterPromptsRequestInFlight = !1, this.transientStarterPromptsRequestAttempted = !0), (n || s) && (c.appearance = s), this.setState(c), i && r.length === 0 && !o && !Ss() && this.requestTransientStarterPrompts(), this.state.sessionId && this.send({
         type: "page.upsert",
         sessionId: this.state.sessionId,
         page: S(),
@@ -938,9 +939,9 @@ class Gt {
     if (t.type === "conversation.state") {
       const s = Array.isArray(t.items) ? t.items : [];
       this.rememberUserMessageClientMessageIds(s);
-      const n = Gs(s);
+      const n = Ks(s);
       if (n) {
-        const a = Xs(s, n);
+        const a = Js(s, n);
         this.retryAttemptsByClientMessageId[n] = Math.max(
           this.retryAttemptsByClientMessageId[n] ?? 0,
           a
@@ -948,22 +949,22 @@ class Gt {
       }
       const r = s.filter((a) => {
         const h = v(a);
-        return !Dt(h) && (!n || !at(h));
-      }), i = xs(
+        return !vt(h) && (!n || !at(h));
+      }), i = Hs(
         this.state.messages,
-        Us(r, this.options.backendUrl)
-      ), o = Ut(i), c = s.some(
-        (a) => Nt(
+        Ds(r, this.options.backendUrl)
+      ), o = Dt(i), c = s.some(
+        (a) => Ot(
           v(a),
           this.state.assistantDraft,
           this.state.assistantDraftRespondsToUserMessageId,
           this.state.assistantDraftRunId
         )
       ), u = o && (!this.state.assistantDraft || c);
-      if (!o && zs(this.state.messages, s))
+      if (!o && Xs(this.state.messages, s))
         return;
       const l = u ? null : ct(s);
-      if (this.latestRecoverableClientMessageId = l, js(i) && this.clearRetryTimers(), this.setState({
+      if (this.latestRecoverableClientMessageId = l, zs(i) && this.clearRetryTimers(), this.setState({
         sessionId: I(t.session, "id") ?? this.state.sessionId,
         messages: i,
         ...u ? {
@@ -986,7 +987,7 @@ class Gt {
     if (t.type === "sessions.page") {
       const s = typeof t.requestId == "string" ? t.requestId : null, n = s ? this.pendingSessionHistoryRequests.get(s) : null;
       s && n && (window.clearTimeout(n.timeout), this.pendingSessionHistoryRequests.delete(s), n.resolve({
-        sessions: Ds(t.sessions),
+        sessions: vs(t.sessions),
         nextCursor: typeof t.nextCursor == "string" ? t.nextCursor : null
       }));
       return;
@@ -1000,7 +1001,7 @@ class Gt {
       const s = v(t.item);
       if (at(s)) {
         typeof s?.runId == "string" && this.retryableFailureRunIdsAwaitingDone.add(s.runId);
-        const r = I(t.item, "sessionId") ?? this.state.sessionId, i = s ? M(s) : null, o = i ? this.clientMessageIdsByUserMessageItemId.get(i) : null, c = typeof s?.clientMessageId == "string" ? s.clientMessageId : o ?? (i ? null : this.activeClientMessageId ?? this.latestRecoverableClientMessageId);
+        const r = I(t.item, "sessionId") ?? this.state.sessionId, i = s ? C(s) : null, o = i ? this.clientMessageIdsByUserMessageItemId.get(i) : null, c = typeof s?.clientMessageId == "string" ? s.clientMessageId : o ?? (i ? null : this.activeClientMessageId ?? this.latestRecoverableClientMessageId);
         if (r && c) {
           this.retryAfterInterruptedRun(r, c);
           return;
@@ -1010,14 +1011,14 @@ class Gt {
           return;
         }
       }
-      if (Dt(s))
+      if (vt(s))
         return;
-      const n = Kt(t.item, this.options.backendUrl);
+      const n = Jt(t.item, this.options.backendUrl);
       if (n) {
         n.role === "assistant" && (this.retryableClientMessageId = null, this.clearRetryTimers(), this.clearRunAckResyncRetryTimer());
         const r = t.item.data;
-        Js(r) && this.clearRunAckResyncRetryTimer();
-        const i = qs(this.state.messages, n), o = Ut(i), c = Nt(
+        Vs(r) && this.clearRunAckResyncRetryTimer();
+        const i = Fs(this.state.messages, n), o = Dt(i), c = Ot(
           r,
           this.state.assistantDraft,
           this.state.assistantDraftRespondsToUserMessageId,
@@ -1071,12 +1072,13 @@ class Gt {
         return;
       }
       o && r && i && (this.retryableClientMessageId = i);
-      const c = new Error(typeof t.message == "string" ? t.message.replace(/Product Agent/g, "Pluno") : "Pluno error"), u = ms(c.message);
+      const c = new Error(typeof t.message == "string" ? t.message.replace(/Product Agent/g, "Pluno") : "Pluno error"), u = ys(c.message);
       u && console.error(u), this.setState({
         status: "error",
         isThinking: !1,
         lastError: c.message,
-        lastErrorCode: typeof t.code == "string" ? t.code : null
+        lastErrorCode: typeof t.code == "string" ? t.code : null,
+        lastErrorSecuritySettingsUrl: typeof t.securitySettingsUrl == "string" ? t.securitySettingsUrl : null
       }), this.clearThinkingWatchdog(), this.emit("error", c);
     }
   }
@@ -1145,7 +1147,7 @@ class Gt {
     this.pendingSessionHistoryRequests.clear();
   }
   markThinkingProgress() {
-    !this.state.isThinking || this.state.status === "closed" || (this.scheduleThinkingWatchdog(Rt), this.activeClientMessageId && this.scheduleRunAckWatchdog(this.activeClientMessageId));
+    !this.state.isThinking || this.state.status === "closed" || (this.scheduleThinkingWatchdog(_t), this.activeClientMessageId && this.scheduleRunAckWatchdog(this.activeClientMessageId));
   }
   scheduleThinkingWatchdog(t) {
     this.thinkingWatchdogTimer !== null && window.clearTimeout(this.thinkingWatchdogTimer), this.thinkingWatchdogTimer = window.setTimeout(() => {
@@ -1165,7 +1167,7 @@ class Gt {
   scheduleRunAckWatchdog(t) {
     this.runAckWatchdogTimer !== null && window.clearTimeout(this.runAckWatchdogTimer), this.runAckWatchdogTimer = window.setTimeout(() => {
       this.runAckWatchdogTimer = null, this.recoverMissedRunAck(t);
-    }, qe);
+    }, xe);
   }
   recoverMissedRunAck(t) {
     !this.state.isThinking || this.state.status === "closed" || this.activeClientMessageId !== t || (y("web-sdk.agent", "Pluno run ack missed; resyncing session", {
@@ -1189,8 +1191,8 @@ class Gt {
         sessionId: this.state.sessionId,
         clientMessageId: t,
         automatic: !0
-      }) : this.activeUserMessageEvent && this.send(this.activeUserMessageEvent), this.scheduleThinkingWatchdog(Rt)));
-    }, O(s, xe)));
+      }) : this.activeUserMessageEvent && this.send(this.activeUserMessageEvent), this.scheduleThinkingWatchdog(_t)));
+    }, O(s, Fe)));
   }
   clearRunAckResyncRetryTimer() {
     this.runAckResyncRetryTimer !== null && (window.clearTimeout(this.runAckResyncRetryTimer), this.runAckResyncRetryTimer = null);
@@ -1229,7 +1231,7 @@ class Gt {
         sessionId: this.state.sessionId,
         clientMessageId: t,
         resyncAttempts: s + 1
-      }), this.resyncThinkingSession(), this.scheduleThinkingWatchdog(Be);
+      }), this.resyncThinkingSession(), this.scheduleThinkingWatchdog(qe);
       return;
     }
     this.setState({
@@ -1261,7 +1263,7 @@ class Gt {
     const s = typeof t.sessionId == "string" ? t.sessionId : null, n = typeof t.callId == "string" ? t.callId : null, r = typeof t.toolName == "string" ? t.toolName : null, i = typeof t.summary == "string" ? t.summary : "Running browser tool", o = t.rawInput;
     if (!s || !n || !r)
       return;
-    if (r !== "execute_code" || !yn(o)) {
+    if (r !== "execute_code" || !wn(o)) {
       this.send({
         type: "tool.result",
         sessionId: s,
@@ -1277,7 +1279,7 @@ class Gt {
       });
       return;
     }
-    const c = ns(this.state.messages);
+    const c = rs(this.state.messages);
     this.activeBrowserToolCalls.set(n, {
       event: {
         type: "tool.result",
@@ -1295,7 +1297,7 @@ class Gt {
     let u = null, l;
     u = await this.executeRuntimeHelper(), l = await bt({
       ...o,
-      javascript: ge(o.javascript, {
+      javascript: me(o.javascript, {
         clientId: this.options.clientId,
         sessionId: s,
         callId: n
@@ -1312,24 +1314,24 @@ class Gt {
       toolName: r,
       summary: o.summary,
       rawInput: k(o),
-      rawOutput: k(_s(l, u))
-    }), on(this.options.clientId, this.activeBrowserToolCalls.values());
+      rawOutput: k(bs(l, u))
+    }), cn(this.options.clientId, this.activeBrowserToolCalls.values());
   }
   startPageLifecycleRecovery() {
     if (this.pageLifecycleCleanup)
       return;
     const t = () => {
-      Zt(this.options.clientId, this.activeBrowserToolCalls.values());
+      Qt(this.options.clientId, this.activeBrowserToolCalls.values());
     };
     window.addEventListener("pagehide", t), window.addEventListener("beforeunload", t), this.pageLifecycleCleanup = () => {
       window.removeEventListener("pagehide", t), window.removeEventListener("beforeunload", t);
     };
   }
   installSessionUserFilesApi(t) {
-    this.cleanupSessionUserFilesApi(), this.sessionUserFilesApiCleanup = rs(t, this.attachmentFiles, this.attachmentBlobCache);
+    this.cleanupSessionUserFilesApi(), this.sessionUserFilesApiCleanup = is(t, this.attachmentFiles, this.attachmentBlobCache);
   }
   cleanupSessionUserFilesApi() {
-    this.sessionUserFilesApiCleanup && (hs(this.sessionUserFilesApiCleanup), this.sessionUserFilesApiCleanup = null);
+    this.sessionUserFilesApiCleanup && (ps(this.sessionUserFilesApiCleanup), this.sessionUserFilesApiCleanup = null);
   }
   async executeRuntimeHelper() {
     if (!this.runtimeHelperJavascript?.trim())
@@ -1337,15 +1339,15 @@ class Gt {
     const t = await bt({
       javascript: this.runtimeHelperJavascript
     });
-    return t.ok === !1 ? bs(t) : null;
+    return t.ok === !1 ? Ms(t) : null;
   }
   enableNetworkCapture() {
-    this.networkCaptureCleanup || (this.networkCaptureCleanup = Ze((t) => {
-      kn(t.url, this.options.backendUrl) || this.enqueueNetworkEvent(t);
+    this.networkCaptureCleanup || (this.networkCaptureCleanup = Qe((t) => {
+      _n(t.url, this.options.backendUrl) || this.enqueueNetworkEvent(t);
     }));
   }
   enqueueNetworkEvent(t) {
-    this.queuedNetworkEvents.length >= He || (this.queuedNetworkEvents.push(Sn(t)), this.networkBatchTimer === null && (this.networkBatchTimer = window.setTimeout(() => {
+    this.queuedNetworkEvents.length >= We || (this.queuedNetworkEvents.push(En(t)), this.networkBatchTimer === null && (this.networkBatchTimer = window.setTimeout(() => {
       this.networkBatchTimer = null;
       const s = this.queuedNetworkEvents.splice(0, this.queuedNetworkEvents.length);
       s.length === 0 || this.socket?.readyState !== WebSocket.OPEN || this.sendNow({
@@ -1354,12 +1356,12 @@ class Gt {
         page: S(),
         events: s
       });
-    }, Fe)));
+    }, He)));
   }
   scheduleReconnect() {
     if (this.reconnectTimer !== null || this.state.status === "closed")
       return;
-    const t = Ye(this.reconnectAttempts);
+    const t = Ve(this.reconnectAttempts);
     this.reconnectAttempts += 1, this.reconnectTimer = window.setTimeout(() => {
       this.reconnectTimer = null, this.connect().catch((s) => {
         y("web-sdk.agent", "Pluno reconnect failed; retrying", {
@@ -1375,8 +1377,8 @@ class Gt {
       const t = this.socket;
       !t || !this.sendNow({ type: "runtime.ping" }) || (this.clearHeartbeatAckTimer(), this.heartbeatAckTimer = window.setTimeout(() => {
         this.socket === t && (y("web-sdk.agent", "Pluno heartbeat acknowledgement timed out; reconnecting"), this.replaceTimedOutSocket(t));
-      }, De));
-    }, Ue);
+      }, ve));
+    }, De);
   }
   stopHeartbeat() {
     this.heartbeatTimer !== null && (window.clearInterval(this.heartbeatTimer), this.heartbeatTimer = null), this.clearHeartbeatAckTimer();
@@ -1400,21 +1402,22 @@ class Gt {
     this.state = {
       ...this.state,
       ...t,
-      ...t.lastError === null && t.lastErrorCode === void 0 ? { lastErrorCode: null } : {}
-    }, nn(this.options.clientId, this.state), this.emit("state", this.getState());
+      ...t.lastError === null && t.lastErrorCode === void 0 ? { lastErrorCode: null } : {},
+      ...t.lastError !== void 0 && t.lastErrorSecuritySettingsUrl === void 0 ? { lastErrorSecuritySettingsUrl: null } : {}
+    }, on(this.options.clientId, this.state), this.emit("state", this.getState());
   }
   emit(t, s) {
     this.listeners[t]?.forEach((r) => r(s));
   }
 }
 const Q = /* @__PURE__ */ new WeakMap();
-function Ze(e) {
-  const t = window.__plunoProductAgentNetworkCapture ?? Qe();
+function Qe(e) {
+  const t = window.__plunoProductAgentNetworkCapture ?? ts();
   return t.subscribers.add(e), () => {
     t.subscribers.delete(e), !(t.subscribers.size > 0) && (t.destroy(), window.__plunoProductAgentNetworkCapture === t && delete window.__plunoProductAgentNetworkCapture);
   };
 }
-function Qe() {
+function ts() {
   const e = /* @__PURE__ */ new Set(), t = (T) => {
     e.forEach((p) => {
       try {
@@ -1431,31 +1434,31 @@ function Qe() {
       throw m;
     }
     try {
-      const m = p instanceof Request ? p : null, g = Tn(p, m), A = ee(d?.headers ?? m?.headers);
-      if (!b(g, A, d?.body)) {
+      const m = p instanceof Request ? p : null, g = In(p, m), A = se(d?.headers ?? m?.headers);
+      if (!M(g, A, d?.body)) {
         const K = {
           requestId: tt("fetch"),
-          url: E(g, Z),
+          url: _(g, Z),
           method: (d?.method ?? m?.method ?? "GET").toUpperCase(),
           requestHeaders: A,
-          requestBody: Bt(d?.body),
+          requestBody: qt(d?.body),
           resourceType: "fetch",
           startedAt: new Date(f).toISOString()
         };
         w.then(
-          (_) => {
-            wn(_, K, f, t).catch(() => {
+          (b) => {
+            An(b, K, f, t).catch(() => {
               t({
                 ...K,
-                responseStatus: _.status,
+                responseStatus: b.status,
                 durationMs: Date.now() - f
               });
             });
           },
-          (_) => {
+          (b) => {
             t({
               ...K,
-              errorText: E(_ instanceof Error ? _.message : String(_)),
+              errorText: _(b instanceof Error ? b.message : String(b)),
               durationMs: Date.now() - f
             });
           }
@@ -1469,24 +1472,24 @@ function Qe() {
     return Q.set(this, {
       requestId: tt("xhr"),
       method: String(p ?? "GET").toUpperCase(),
-      url: E(A, Z),
+      url: _(A, Z),
       requestHeaders: {},
       startedAtMs: Date.now(),
       startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      excluded: b(A)
+      excluded: M(A)
     }), g;
   }, u = function(p, d) {
     const f = r.call(this, p, d), w = Q.get(this);
-    return w && Object.keys(w.requestHeaders).length < ft && (w.requestHeaders[p] = At(p, d), w.excluded = w.excluded || b(w.url, w.requestHeaders)), f;
+    return w && Object.keys(w.requestHeaders).length < ft && (w.requestHeaders[p] = At(p, d), w.excluded = w.excluded || M(w.url, w.requestHeaders)), f;
   }, l = function(p) {
     try {
       const d = Q.get(this);
-      d && (d.excluded = d.excluded || b(d.url, d.requestHeaders, p), d.requestBody = Bt(p), d.excluded || this.addEventListener(
+      d && (d.excluded = d.excluded || M(d.url, d.requestHeaders, p), d.requestBody = qt(p), d.excluded || this.addEventListener(
         "loadend",
         () => {
           queueMicrotask(() => {
             try {
-              const f = Rn(this.getAllResponseHeaders());
+              const f = Cn(this.getAllResponseHeaders());
               t({
                 requestId: d.requestId,
                 url: d.url,
@@ -1496,7 +1499,7 @@ function Qe() {
                 resourceType: "xhr",
                 responseStatus: this.status,
                 responseHeaders: f,
-                responseBody: An(this, f),
+                responseBody: kn(this, f),
                 errorText: this.status === 0 ? "XHR request failed or was aborted" : void 0,
                 startedAt: d.startedAt,
                 durationMs: Date.now() - d.startedAtMs
@@ -1533,12 +1536,12 @@ function Qe() {
     a = new PerformanceObserver((T) => {
       for (const p of T.getEntries()) {
         const d = p;
-        if (d.initiatorType === "fetch" || d.initiatorType === "xmlhttprequest" || b(d.name))
+        if (d.initiatorType === "fetch" || d.initiatorType === "xmlhttprequest" || M(d.name))
           continue;
         const f = performance.timeOrigin + d.startTime;
         t({
           requestId: tt("resource"),
-          url: E(d.name, Z),
+          url: _(d.name, Z),
           method: "GET",
           resourceType: "resource",
           responseStatus: d.responseStatus,
@@ -1588,15 +1591,15 @@ function y(e, t, s) {
   }, i = n.__plunoProductAgentDiagnostics__ ?? [];
   i.push(r), i.length > 120 && i.splice(0, i.length - 120), n.__plunoProductAgentDiagnostics__ = i, n.__PLUNO_PRODUCT_AGENT_DIAGNOSTICS__ = () => [...i], window.dispatchEvent(new CustomEvent("product-agent:preview-diagnostic", { detail: r }));
 }
-function _t(e) {
+function Ct(e) {
   const t = typeof e == "function" ? e() : e;
   return t && Object.keys(t).length > 0 ? t : void 0;
 }
-function ts(e) {
+function es(e) {
   return e.type === "conversation.state" || e.type === "session.updated" || e.type === "session.item" || e.type === "chat.assistant_delta" || e.type === "chat.assistant_done" || e.type === "tool.call";
 }
-const es = 5e3, ss = 12e4;
-function ns(e) {
+const ss = 5e3, ns = 12e4;
+function rs(e) {
   const t = [];
   for (const s of e)
     s.role !== "user" || !s.attachments?.length || s.attachments.forEach((n, r) => {
@@ -1607,17 +1610,17 @@ function ns(e) {
     });
   return t;
 }
-function rs(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
+function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
   const n = [
-    is(e, t, s),
-    os()
+    os(e, t, s),
+    as()
   ].filter((r) => typeof r == "function");
   return () => {
     for (const r of n.reverse())
       r();
   };
 }
-function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
+function os(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
   const n = new Map(e.map((l) => [l.id, l])), r = (l) => ({
     id: l.id,
     name: l.name,
@@ -1637,7 +1640,7 @@ function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
     const T = s.get(a.id);
     if (T)
       return T;
-    const p = await ue(a.id).then((m) => m?.blob ?? null).catch((m) => (y("web-sdk.attachments", "Failed to load Product Agent attachment from IndexedDB", {
+    const p = await de(a.id).then((m) => m?.blob ?? null).catch((m) => (y("web-sdk.attachments", "Failed to load Product Agent attachment from IndexedDB", {
       attachmentId: a.id,
       name: a.name,
       message: m instanceof Error ? m.message : String(m)
@@ -1646,13 +1649,13 @@ function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
       return s.set(a.id, p), p;
     if (!a.fileUrl)
       throw new Error(`Pluno user file is missing content: ${l}`);
-    const d = await fetch(a.fileUrl, hn(a.fileUrl));
+    const d = await fetch(a.fileUrl, fn(a.fileUrl));
     if (!d.ok)
       throw new Error(`Failed to load Pluno user file: ${l}`);
     const f = await d.blob();
     s.set(a.id, f);
     const w = Date.now();
-    return xt({
+    return Ft({
       attachmentId: a.id,
       name: a.name,
       mimeType: a.mimeType,
@@ -1670,7 +1673,7 @@ function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
       });
     }), f;
   };
-  return Wt(globalThis, "userFiles", {
+  return jt(globalThis, "userFiles", {
     list: () => e.map(r),
     get: (l) => {
       const a = n.get(l);
@@ -1681,7 +1684,7 @@ function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
       if (!T.startsWith("image/"))
         throw new Error(`Pluno user file is not an image: ${l}`);
       const p = h.type === T ? h : new Blob([h], { type: T });
-      return ps(T, p.size) > Xe ? {
+      return fs(T, p.size) > Ke ? {
         type: "pluno.userFiles.inspectImage",
         id: a.id,
         name: a.name,
@@ -1708,13 +1711,13 @@ function is(e, t = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map()) {
     }
   });
 }
-function os() {
-  return Wt(globalThis, "pageImages", {
-    inspectImage: async (t, s) => await as(t, s)
+function as() {
+  return jt(globalThis, "pageImages", {
+    inspectImage: async (t, s) => await cs(t, s)
   });
 }
-async function as(e, t = {}) {
-  const s = ds(t.name), n = await cs(e);
+async function cs(e, t = {}) {
+  const s = hs(t.name), n = await ls(e);
   return n.ok ? n.sizeBytes > 8 * 1024 * 1024 ? {
     type: "pluno.pageImages.inspectImage",
     imageAttached: !1,
@@ -1732,15 +1735,15 @@ async function as(e, t = {}) {
     imageAttachmentError: n.error
   };
 }
-async function cs(e) {
+async function ls(e) {
   return e instanceof Blob ? e.type.startsWith("image/") ? e.size === 0 ? { ok: !1, error: "Page image is empty." } : e.size > 8 * 1024 * 1024 ? { ok: !1, error: gt } : {
     ok: !0,
     mimeType: e.type,
     sizeBytes: e.size,
     dataUrl: await ot(e)
-  } : { ok: !1, error: "Page image must be an image Blob or complete data:image/* URL." } : typeof e != "string" ? { ok: !1, error: "Page image must be an image Blob or complete data:image/* URL." } : ls(e);
+  } : { ok: !1, error: "Page image must be an image Blob or complete data:image/* URL." } : typeof e != "string" ? { ok: !1, error: "Page image must be an image Blob or complete data:image/* URL." } : us(e);
 }
-function ls(e) {
+function us(e) {
   if (!e.startsWith("data:") || !e.includes(","))
     return { ok: !1, error: "Page image must be a complete data:image/* URL, not bare base64." };
   const [t, s] = e.slice(5).split(",", 2), n = t.split(";").map((c) => c.trim()).filter(Boolean), r = n[0] ?? "";
@@ -1751,7 +1754,7 @@ function ls(e) {
   const i = s.replace(/[ \t\r\n\f]+/g, "");
   if (!/^[A-Za-z0-9+/]*={0,2}$/.test(i))
     return { ok: !1, error: "Page image data URL has invalid base64." };
-  const o = us(i);
+  const o = ds(i);
   return o === null ? { ok: !1, error: "Page image data URL has invalid base64." } : o === 0 ? { ok: !1, error: "Page image is empty." } : {
     ok: !0,
     mimeType: r,
@@ -1759,16 +1762,16 @@ function ls(e) {
     dataUrl: `data:${r};base64,${i}`
   };
 }
-function us(e) {
+function ds(e) {
   if (e.length === 0 || e.length % 4 !== 0)
     return null;
   const t = e.length - e.replace(/=+$/, "").length;
   return t > 2 ? null : e.length / 4 * 3 - t;
 }
-function ds(e) {
+function hs(e) {
   return (typeof e == "string" ? e.trim() : "") || "Page image";
 }
-function hs(e) {
+function ps(e) {
   try {
     e();
   } catch {
@@ -1786,12 +1789,12 @@ function ot(e) {
     }, n.onerror = () => s(n.error ?? new Error("Failed to read Pluno user file")), n.readAsDataURL(e);
   });
 }
-function ps(e, t) {
+function fs(e, t) {
   return `data:${e};base64,`.length + Math.ceil(t / 3) * 4;
 }
 async function bt(e) {
   const t = Object.getPrototypeOf(async function() {
-  }).constructor, s = e.timeoutMs ?? es, n = Date.now(), r = [];
+  }).constructor, s = e.timeoutMs ?? ss, n = Date.now(), r = [];
   let i;
   const o = {
     log: console.log,
@@ -1809,7 +1812,7 @@ async function bt(e) {
         i = window.setTimeout(() => a(u), s);
       })
     ]);
-    return l === u ? fs(s) : {
+    return l === u ? gs(s) : {
       ok: !0,
       result: l,
       console: r,
@@ -1838,7 +1841,7 @@ async function bt(e) {
     i !== void 0 && window.clearTimeout(i), console.log = o.log, console.info = o.info, console.warn = o.warn, console.error = o.error;
   }
 }
-function fs(e) {
+function gs(e) {
   return {
     ok: !1,
     exception: {
@@ -1852,18 +1855,18 @@ function fs(e) {
     }
   };
 }
-function gs(e) {
+function ms(e) {
   return e.replace(/\/+$/, "");
 }
-function ms(e, t = location.origin) {
+function ys(e, t = location.origin) {
   return /origin (?:is not allowed|does not match browser origin)/i.test(e) ? `Pluno widget blocked on ${t}: this domain is not allowed. Add ${t} in Pluno under Integration > Domains.` : null;
 }
-function ys(e) {
+function Ts(e) {
   const t = new URL("/api/product-agent/embed/ws", e);
   return t.protocol = t.protocol === "https:" ? "wss:" : "ws:", t.toString();
 }
 function S() {
-  const e = Xt();
+  const e = Kt();
   return {
     url: location.href,
     title: document.title,
@@ -1871,19 +1874,19 @@ function S() {
     ...e ? { plunoProductAgentUi: e } : {}
   };
 }
-function Ts() {
+function ws() {
   return {
     pageUrl: location.href,
     pageTitle: document.title,
-    htmlContent: Ss()
+    htmlContent: ks()
   };
 }
-function ws(e) {
-  return x.add(e), L || (L = Is()), () => {
+function Is(e) {
+  return x.add(e), L || (L = As()), () => {
     x.delete(e), x.size === 0 && (L?.(), L = null);
   };
 }
-function Is() {
+function As() {
   const e = () => {
     for (const i of Array.from(x))
       i();
@@ -1898,10 +1901,10 @@ function Is() {
     window.history.pushState === n && (window.history.pushState = t), window.history.replaceState === r && (window.history.replaceState = s), window.removeEventListener("popstate", e), window.removeEventListener("hashchange", e);
   };
 }
-function As() {
-  return Xt()?.surface === "browser_extension_sdk_preview";
-}
 function Ss() {
+  return Kt()?.surface === "browser_extension_sdk_preview";
+}
+function ks() {
   const e = document.body?.cloneNode(!0);
   return e instanceof HTMLElement ? (e.querySelectorAll(
     [
@@ -1925,7 +1928,7 @@ function Ss() {
       s.name === "href" || s.name === "aria-label" || s.name === "role" || t.removeAttribute(s.name);
   }), e.textContent?.replace(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/gi, "[email]").replace(/\b(?:\d[ -]*?){13,19}\b/g, "[number]").replace(/\b(?:sk|pk|tok|key|secret|token)_[A-Za-z0-9_-]{8,}\b/gi, "[secret]").replace(/\s+/g, " ").trim().slice(0, 12e3) ?? "") : "";
 }
-function Xt() {
+function Kt() {
   const e = document.querySelector(St);
   if (!(e ?? document.querySelector(rt)))
     return;
@@ -1946,18 +1949,18 @@ function Xt() {
       },
       {
         name: "widget_panel",
-        selector: _e,
+        selector: be,
         description: "Finds Pluno's open chat panel inside the widget host shadow root."
       },
       {
         name: "widget_timeline",
-        selector: be,
+        selector: Me,
         description: "Finds Pluno's chat timeline inside the widget host shadow root."
       }
     ]
   };
 }
-function ks(e) {
+function Es(e) {
   try {
     const t = JSON.parse(e);
     return t && typeof t == "object" ? t : { type: "error", message: "Invalid server event" };
@@ -1971,7 +1974,7 @@ function Mt(e, t) {
   const s = e[t];
   return Array.isArray(s) ? s.filter((n) => typeof n == "string" && n.trim().length > 0) : [];
 }
-function Es(e) {
+function _s(e) {
   return Array.isArray(e) ? e.filter((t) => typeof t == "string" && t.trim().length > 0) : [];
 }
 function Rs(e) {
@@ -1991,7 +1994,7 @@ function Cs(e) {
   const t = e.javascript;
   return typeof t != "string" || !t.trim() ? null : { javascript: t };
 }
-function _s(e, t) {
+function bs(e, t) {
   return t ? e && typeof e == "object" ? {
     ...e,
     helperError: t
@@ -2001,13 +2004,13 @@ function _s(e, t) {
     helperError: t
   } : e;
 }
-function bs(e) {
+function Ms(e) {
   if (!e || typeof e != "object")
     return e;
   const t = e;
   return typeof t.exception?.message == "string" ? t.exception.message : typeof t.error == "string" ? t.error : e;
 }
-function Ms() {
+function Us() {
   const e = "pluno.productAgent.clientId", t = window.localStorage.getItem(e);
   if (t)
     return t;
@@ -2028,14 +2031,14 @@ function Ps(e) {
     avatarUrl: typeof t.avatarUrl == "string" ? t.avatarUrl : null
   } : null;
 }
-function Us(e, t) {
+function Ds(e, t) {
   return Array.isArray(e) ? lt(
     ut(
-      e.map((s) => Kt(s, t)).filter((s) => s !== null)
+      e.map((s) => Jt(s, t)).filter((s) => s !== null)
     )
   ) : [];
 }
-function Ds(e) {
+function vs(e) {
   return Array.isArray(e) ? e.flatMap((t) => {
     if (!t || typeof t != "object")
       return [];
@@ -2054,7 +2057,7 @@ function Ds(e) {
     ];
   }) : [];
 }
-function Kt(e, t) {
+function Jt(e, t) {
   if (!e || typeof e != "object")
     return null;
   const s = e, n = s.data;
@@ -2064,47 +2067,86 @@ function Kt(e, t) {
   if (r.type === "tab_lifecycle_decision" && r.decision === "keep")
     return null;
   if (r.type === "message") {
+    if (r.hiddenFromTranscript === !0)
+      return null;
     const i = r.role === "assistant" ? "assistant" : r.role === "user" ? "user" : "system", o = {
       id: String(s.id ?? crypto.randomUUID()),
       role: i,
-      content: Bs(r.content),
+      content: xs(r.content),
       createdAt: typeof s.createdAt == "string" ? s.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
-      respondsToUserMessageId: M(r) ?? void 0,
-      ...C(r) ? { runId: C(r) } : {},
-      attachments: Qt(r.attachments, t)
+      respondsToUserMessageId: C(r) ?? void 0,
+      ...E(r) ? { runId: E(r) } : {},
+      attachments: te(r.attachments, t)
     };
     return typeof r.clientMessageId == "string" && Object.defineProperty(o, "clientMessageId", {
       value: r.clientMessageId,
       enumerable: !1
     }), o;
   }
-  return r.type === "function_call" || r.type === "tool_call" || r.type === "web_search_call" || r.type === "tab_lifecycle_decision" ? {
+  if (r.type === "function_call_output") {
+    const i = Os(r.output);
+    return i ? {
+      id: String(s.id ?? crypto.randomUUID()),
+      role: "tool",
+      content: `Connect ${i.appName} to continue`,
+      createdAt: typeof s.createdAt == "string" ? s.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
+      respondsToUserMessageId: C(r) ?? void 0,
+      ...E(r) ? { runId: E(r) } : {},
+      dataType: "function_call_output",
+      toolName: "authenticate_pipedream_app",
+      callId: Ut(r) ?? void 0,
+      integrationAuthRequest: i
+    } : null;
+  }
+  return r.type === "function_call" || r.type === "tool_call" || r.type === "web_search_call" || r.type === "mcp_call" || r.type === "tab_lifecycle_decision" ? {
     id: String(s.id ?? crypto.randomUUID()),
     role: "tool",
-    content: Ns(r),
+    content: r.type === "mcp_call" ? Ns(r) : Bs(r),
     createdAt: typeof s.createdAt == "string" ? s.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
-    respondsToUserMessageId: M(r) ?? void 0,
-    ...C(r) ? { runId: C(r) } : {},
+    respondsToUserMessageId: C(r) ?? void 0,
+    ...E(r) ? { runId: E(r) } : {},
     dataType: String(r.type),
     toolName: r.type === "tab_lifecycle_decision" ? "tab_lifecycle_decision" : typeof r.name == "string" ? r.name : void 0,
-    callId: Ls(r) ?? void 0,
+    callId: Ut(r) ?? void 0,
     loading: r.localExecutionStatus === "running"
   } : r.type === "run_status" || r.type === "run_error" ? r.type === "run_error" && r.stage === "tool_execution" ? null : {
     id: String(s.id ?? crypto.randomUUID()),
     role: "system",
-    content: vs(r),
+    content: Ls(r),
     createdAt: typeof s.createdAt == "string" ? s.createdAt : (/* @__PURE__ */ new Date()).toISOString(),
-    respondsToUserMessageId: M(r) ?? void 0,
-    ...C(r) ? { runId: C(r) } : {},
+    respondsToUserMessageId: C(r) ?? void 0,
+    ...E(r) ? { runId: E(r) } : {},
     dataType: String(r.type),
     loading: r.type === "run_status" && (r.status === "running" || r.status === "retrying"),
-    ...typeof r.retryable == "boolean" ? { retryable: r.retryable } : {}
+    ...typeof r.retryable == "boolean" ? { retryable: r.retryable } : {},
+    ...typeof r.securitySettingsUrl == "string" ? { securitySettingsUrl: r.securitySettingsUrl } : {}
   } : null;
 }
-function vs(e) {
+function Ns(e) {
+  const s = (typeof e.server_label == "string" ? e.server_label : "").replace(/^pipedream_/, "").split(/[_-]+/).filter(Boolean).map((n) => `${n.charAt(0).toUpperCase()}${n.slice(1)}`).join(" ");
+  return s ? `Using ${s}` : "Using connected integration";
+}
+function Os(e) {
+  if (typeof e != "string")
+    return null;
+  try {
+    const t = JSON.parse(e);
+    return t.type !== "pipedream_auth_required" || typeof t.authRequestId != "string" || typeof t.appSlug != "string" || typeof t.appName != "string" || typeof t.expiresAt != "string" ? null : {
+      type: "pipedream_auth_required",
+      authRequestId: t.authRequestId,
+      appSlug: t.appSlug,
+      appName: t.appName,
+      appLogo: typeof t.appLogo == "string" ? t.appLogo : null,
+      expiresAt: t.expiresAt
+    };
+  } catch {
+    return null;
+  }
+}
+function Ls(e) {
   return typeof e.message == "string" && e.message.trim().length > 0 ? e.message.replace(/Product Agent/g, "Pluno") : e.type === "run_status" && e.status === "interrupted" ? "Pluno was interrupted before it could finish this message." : e.type === "run_status" && e.status === "stopped" ? "Pluno stopped." : "Pluno run status changed.";
 }
-function Ns(e) {
+function Bs(e) {
   if (e.type === "web_search_call") {
     const t = e.action;
     if (t && typeof t == "object") {
@@ -2116,9 +2158,9 @@ function Ns(e) {
     }
     return "Searching the web";
   }
-  return Os(e);
+  return qs(e);
 }
-function Os(e) {
+function qs(e) {
   if (typeof e.summary == "string" && e.summary.trim().length > 0)
     return e.summary;
   if (typeof e.arguments == "string")
@@ -2131,11 +2173,11 @@ function Os(e) {
     }
   return typeof e.name == "string" && e.name.trim().length > 0 ? e.name : "Run tool";
 }
-function Ls(e) {
+function Ut(e) {
   const t = e.callId ?? e.call_id;
   return typeof t == "string" && t ? t : null;
 }
-function Bs(e) {
+function xs(e) {
   return typeof e == "string" ? e : Array.isArray(e) ? e.map((t) => {
     if (!t || typeof t != "object")
       return "";
@@ -2143,8 +2185,8 @@ function Bs(e) {
     return typeof s.text == "string" ? s.text : typeof s.content == "string" ? s.content : "";
   }).filter(Boolean).join("") : "";
 }
-function qs(e, t) {
-  const s = Jt(e, t), n = Ws(e, t), r = n.findIndex((o) => o.id === s.id);
+function Fs(e, t) {
+  const s = Yt(e, t), n = $s(e, t), r = n.findIndex((o) => o.id === s.id);
   if (r === -1)
     return lt(
       ut([...n, s])
@@ -2152,45 +2194,45 @@ function qs(e, t) {
   const i = [...n];
   return i[r] = s, lt(ut(i));
 }
-function xs(e, t) {
+function Hs(e, t) {
   const s = t.map(
-    (n) => Jt(e, n)
+    (n) => Yt(e, n)
   );
   return t.length > 0 ? s : e.filter(mt);
 }
-function Jt(e, t) {
+function Yt(e, t) {
   if (t.role !== "user" || !t.attachments?.length)
     return t;
   const s = e.find(
-    (r) => r.role === "user" && (r.id === t.id || mt(r) && Yt(r, t))
+    (r) => r.role === "user" && (r.id === t.id || mt(r) && Vt(r, t))
   );
   if (!s?.attachments?.length)
     return t;
   const n = t.attachments.map((r) => {
-    const i = Fs(s.attachments ?? [], r);
-    return i ? Hs(r, i) : r;
+    const i = Ws(s.attachments ?? [], r);
+    return i ? js(r, i) : r;
   });
   return { ...t, attachments: n };
 }
-function Fs(e, t) {
+function Ws(e, t) {
   return t.id ? e.find((s) => s.id === t.id) ?? null : null;
 }
-function Hs(e, t) {
+function js(e, t) {
   const { previewUrl: s } = t;
   return s ? { ...e, previewUrl: s } : e;
 }
-function Ws(e, t) {
+function $s(e, t) {
   if (t.role !== "user")
     return e;
   const s = e.findIndex(
-    (r) => mt(r) && Yt(r, t)
+    (r) => mt(r) && Vt(r, t)
   );
   if (s === -1)
     return e;
   const n = [...e];
   return n.splice(s, 1), n;
 }
-function Yt(e, t) {
+function Vt(e, t) {
   const s = Pt(e), n = Pt(t);
   return s && n ? s === n : e.content === t.content;
 }
@@ -2206,8 +2248,8 @@ function Pt(e) {
   );
   return n ? e.id.slice(n.length) : null;
 }
-function Ut(e) {
-  const t = Vt(e);
+function Dt(e) {
+  const t = Zt(e);
   if (t === null)
     return !1;
   for (let s = e.length - 1; s > t; s -= 1) {
@@ -2223,17 +2265,17 @@ function Ut(e) {
   }
   return !1;
 }
-function js(e) {
-  const t = Vt(e);
+function zs(e) {
+  const t = Zt(e);
   return t === null ? e.some((s) => s.role === "assistant") : e.slice(t + 1).some((s) => s.role === "assistant");
 }
-function Vt(e) {
+function Zt(e) {
   for (let t = e.length - 1; t >= 0; t -= 1)
     if (e[t].role === "user")
       return t;
   return null;
 }
-function $s(e) {
+function Gs(e) {
   return e.role === "assistant" ? !0 : e.role !== "system" ? !1 : e.dataType === "run_error" ? !0 : e.dataType === "run_status" && e.loading !== !0;
 }
 function yt(e) {
@@ -2259,10 +2301,10 @@ function v(e) {
 function at(e) {
   return e?.retryable !== !0 ? !1 : e.type === "run_error" ? !0 : e.type === "run_status" && e.status === "interrupted";
 }
-function Dt(e) {
+function vt(e) {
   return e?.type === "run_status" && e.status === "interrupted" && e.reason === "backend_restart";
 }
-function zs(e, t) {
+function Xs(e, t) {
   const s = yt(t);
   if (s === null)
     return !1;
@@ -2270,7 +2312,7 @@ function zs(e, t) {
   if (typeof r != "string" || !r)
     return !1;
   const i = e.findIndex((o) => o.role === "user" && o.id === r);
-  return i === -1 ? !1 : e.slice(i + 1).some($s);
+  return i === -1 ? !1 : e.slice(i + 1).some(Gs);
 }
 function ct(e) {
   const t = yt(e);
@@ -2285,7 +2327,7 @@ function ct(e) {
   const r = n.clientMessageId;
   return typeof r == "string" ? r : null;
 }
-function Gs(e) {
+function Ks(e) {
   const t = yt(e);
   if (t === null)
     return null;
@@ -2300,22 +2342,22 @@ function Gs(e) {
     if (i.type === "message" && i.role === "assistant")
       return null;
     if (i.type === "run_error")
-      return i.retryable !== !0 ? null : vt(e, i) ?? ct(e);
+      return i.retryable !== !0 ? null : Nt(e, i) ?? ct(e);
     if (i.type === "run_status")
-      return i.status === "interrupted" && i.retryable === !0 ? vt(e, i) ?? ct(e) : null;
+      return i.status === "interrupted" && i.retryable === !0 ? Nt(e, i) ?? ct(e) : null;
   }
   return null;
 }
-function vt(e, t) {
+function Nt(e, t) {
   if (typeof t.clientMessageId == "string")
     return t.clientMessageId;
-  const s = M(t);
+  const s = C(t);
   if (!s)
     return null;
   const n = e.find((i) => I(i, "id") === s), r = v(n);
   return r?.type === "message" && r.role === "user" && typeof r.clientMessageId == "string" ? r.clientMessageId : null;
 }
-function Xs(e, t) {
+function Js(e, t) {
   let s = 0;
   for (const n of e) {
     if (!n || typeof n != "object")
@@ -2328,28 +2370,28 @@ function Xs(e, t) {
   }
   return s;
 }
-function Nt(e, t, s, n) {
-  if (!t || !Ks(e))
+function Ot(e, t, s, n) {
+  if (!t || !Ys(e))
     return !1;
   const r = e;
-  return !(at(r) || s !== null && M(r) !== s || n !== null && C(r) !== n);
+  return !(at(r) || s !== null && C(r) !== s || n !== null && E(r) !== n);
 }
-function Ks(e) {
+function Ys(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
   return t.type === "message" && t.role === "assistant" ? !0 : t.type === "run_error" ? t.stage !== "tool_execution" : t.type === "run_status" && (t.status === "stopped" || t.status === "interrupted");
 }
-function Js(e) {
+function Vs(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
   return t.type === "message" && t.role === "user" ? !1 : t.type === "message" || t.type === "function_call" || t.type === "function_call_output" || t.type === "run_error" || t.type === "run_status";
 }
 function lt(e) {
-  return e.filter((t, s) => Tt(t) ? !en(e, s) && !Qs(e, s) && !tn(e, s) : Ys(t) ? t.retryable === !0 && Zs(e, s) ? !1 : !Vs(e, s) : !0);
+  return e.filter((t, s) => Tt(t) ? !nn(e, s) && !en(e, s) && !sn(e, s) : Zs(t) ? t.retryable === !0 && tn(e, s) ? !1 : !Qs(e, s) : !0);
 }
-function Ys(e) {
+function Zs(e) {
   return e.role === "system" && (e.dataType === "run_status" || e.dataType === "run_error");
 }
 function Tt(e) {
@@ -2371,7 +2413,7 @@ function ut(e) {
     n.has(i.id) || (r.push(i), i.role === "user" && r.push(...s.get(i.id) ?? []));
   return r;
 }
-function Vs(e, t) {
+function Qs(e, t) {
   const s = e[t];
   for (let n = t + 1; n < e.length; n += 1) {
     const r = e[n];
@@ -2382,7 +2424,7 @@ function Vs(e, t) {
   }
   return !1;
 }
-function Zs(e, t) {
+function tn(e, t) {
   const s = e[t];
   if (!s.respondsToUserMessageId)
     return !1;
@@ -2395,21 +2437,21 @@ function Zs(e, t) {
   }
   return !1;
 }
-function Qs(e, t) {
+function en(e, t) {
   const s = e[t];
   for (let n = t + 1; n < e.length; n += 1)
     if (e[n].role === "assistant" && G(s, e[n]))
       return !0;
   return !1;
 }
-function tn(e, t) {
+function sn(e, t) {
   const s = e[t];
   for (let n = t + 1; n < e.length; n += 1)
     if (e[n].role === "tool" && G(s, e[n]))
       return !0;
   return !1;
 }
-function en(e, t) {
+function nn(e, t) {
   const s = e[t];
   for (let n = t + 1; n < e.length; n += 1)
     if (Tt(e[n]) && G(s, e[n]))
@@ -2422,15 +2464,15 @@ function G(e, t) {
 function I(e, t) {
   return e && typeof e == "object" && typeof e[t] == "string" ? e[t] : null;
 }
-function sn(e, t) {
+function rn(e, t) {
   try {
-    const s = window.localStorage.getItem(`${zt}${e}`);
+    const s = window.localStorage.getItem(`${Gt}${e}`);
     if (!s)
       return null;
     const n = JSON.parse(s), r = typeof n.sessionId == "string" ? n.sessionId : null;
     if (t !== void 0 && r !== t)
       return null;
-    const i = Array.isArray(n.messages) ? n.messages.map(gn).filter((o) => !!o) : [];
+    const i = Array.isArray(n.messages) ? n.messages.map(yn).filter((o) => !!o) : [];
     return {
       sessionId: r,
       messages: i
@@ -2439,20 +2481,20 @@ function sn(e, t) {
     return null;
   }
 }
-function nn(e, t) {
+function on(e, t) {
   try {
     window.localStorage.setItem(
-      `${zt}${e}`,
+      `${Gt}${e}`,
       JSON.stringify({
         sessionId: t.sessionId,
-        messages: t.messages.slice(-Ke).map(mn)
+        messages: t.messages.slice(-Je).map(Tn)
       })
     );
   } catch {
     return;
   }
 }
-function rn(e) {
+function an(e) {
   try {
     const t = window.localStorage.getItem(`${it}${e}`);
     if (!t)
@@ -2463,7 +2505,7 @@ function rn(e) {
     return [];
   }
 }
-function U(e, t) {
+function P(e, t) {
   try {
     const s = t.filter(wt);
     if (s.length === 0) {
@@ -2478,7 +2520,7 @@ function U(e, t) {
     return;
   }
 }
-function Zt(e, t) {
+function Qt(e, t) {
   try {
     const s = `${z}${e}`, n = location.href, r = location.origin, i = Array.from(t, (o) => ({
       ...o,
@@ -2494,28 +2536,28 @@ function Zt(e, t) {
   } catch {
   }
 }
-function on(e, t) {
+function cn(e, t) {
   try {
     if (window.sessionStorage.getItem(`${z}${e}`) === null)
       return;
   } catch {
     return;
   }
-  Zt(e, t);
+  Qt(e, t);
 }
-function an(e) {
+function ln(e) {
   try {
     const t = `${z}${e}`, s = window.sessionStorage.getItem(t);
     if (window.sessionStorage.removeItem(t), !s)
       return [];
     const n = JSON.parse(s);
-    return Array.isArray(n) ? n.flatMap((r) => ln(r) ? [{
+    return Array.isArray(n) ? n.flatMap((r) => dn(r) ? [{
       ...r.event,
       page: S(),
       rawOutput: {
         pageContextRestarted: !0,
         outcome: "unknown",
-        message: cn(location.href),
+        message: un(location.href),
         currentUrl: location.href,
         console: [],
         metadata: {
@@ -2532,17 +2574,17 @@ function an(e) {
     return [];
   }
 }
-function cn(e) {
+function un(e) {
   return `The page context restarted. This is expected when the action included page navigation. Otherwise, it's unknown whether the action completed.
 Current URL: ${e}`;
 }
-function ln(e) {
+function dn(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e, s = t.event;
   return typeof t.startedAtMs == "number" && typeof t.startedAtUrl == "string" && t.startedAtOrigin === location.origin && t.unloadOrigin === location.origin && typeof t.unloadUrl == "string" && wt(s) && s.type === "tool.result";
 }
-function un(e, t) {
+function hn(e, t) {
   const s = new Set(
     e.flatMap((n) => n.type === "tool.result" ? [n.callId] : [])
   );
@@ -2551,7 +2593,7 @@ function un(e, t) {
     ...t.filter((n) => !s.has(n.callId))
   ];
 }
-function dn(e) {
+function pn(e) {
   try {
     window.sessionStorage.removeItem(`${z}${e}`);
   } catch {
@@ -2562,15 +2604,15 @@ function wt(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
-  return t.type === "chat.user_message" ? typeof t.content == "string" && Ot(t.page) : t.type === "page.upsert" || t.type === "session.reset" || t.type === "network.batch" ? Ot(t.page) : t.type === "tool.result" ? typeof t.sessionId == "string" && typeof t.callId == "string" && t.toolName === "execute_code" : t.type === "chat.retry_last_user_message" ? typeof t.sessionId == "string" && typeof t.clientMessageId == "string" : t.type === "run.stop" ? typeof t.sessionId == "string" && (t.reason === "user_requested" || t.reason === "new_chat" || t.reason === "session_switch") : !1;
+  return t.type === "chat.user_message" ? typeof t.content == "string" && Lt(t.page) : t.type === "page.upsert" || t.type === "session.reset" || t.type === "network.batch" ? Lt(t.page) : t.type === "tool.result" ? typeof t.sessionId == "string" && typeof t.callId == "string" && t.toolName === "execute_code" : t.type === "chat.retry_last_user_message" ? typeof t.sessionId == "string" && typeof t.clientMessageId == "string" : t.type === "run.stop" ? typeof t.sessionId == "string" && (t.reason === "user_requested" || t.reason === "new_chat" || t.reason === "session_switch") : !1;
 }
-function Ot(e) {
+function Lt(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
   return typeof t.url == "string" && typeof t.title == "string" && typeof t.origin == "string";
 }
-function Qt(e, t) {
+function te(e, t) {
   if (!Array.isArray(e))
     return;
   const s = e.filter((r) => {
@@ -2578,24 +2620,24 @@ function Qt(e, t) {
       return !1;
     const i = r;
     return typeof i.name == "string" && typeof i.mimeType == "string" && typeof i.sizeBytes == "number";
-  }), n = t ? s.map((r) => te(r, t)) : s;
+  }), n = t ? s.map((r) => ee(r, t)) : s;
   return n.length > 0 ? n : void 0;
 }
-function te(e, t) {
+function ee(e, t) {
   return e.fileUrl?.startsWith("/") ? {
     ...e,
     fileUrl: new URL(e.fileUrl, t).toString()
   } : e;
 }
-function hn(e) {
-  if (pn(e))
+function fn(e) {
+  if (gn(e))
     return {
       headers: {
         "ngrok-skip-browser-warning": "true"
       }
     };
 }
-function pn(e) {
+function gn(e) {
   try {
     const t = new URL(e).hostname;
     return t.endsWith(".ngrok-free.dev") || t.endsWith(".ngrok-free.app") || t.endsWith(".ngrok.app") || t.endsWith(".ngrok.io");
@@ -2603,14 +2645,14 @@ function pn(e) {
     return !1;
   }
 }
-function Lt(e) {
-  return e.type || fn(e.name) || "application/octet-stream";
+function Bt(e) {
+  return e.type || mn(e.name) || "application/octet-stream";
 }
-function fn(e) {
+function mn(e) {
   const t = e.toLowerCase();
   return t.endsWith(".png") ? "image/png" : t.endsWith(".jpg") || t.endsWith(".jpeg") ? "image/jpeg" : t.endsWith(".webp") ? "image/webp" : t.endsWith(".gif") ? "image/gif" : t.endsWith(".pdf") ? "application/pdf" : null;
 }
-function gn(e) {
+function yn(e) {
   if (!e || typeof e != "object")
     return null;
   const t = e;
@@ -2622,11 +2664,12 @@ function gn(e) {
     respondsToUserMessageId: typeof t.respondsToUserMessageId == "string" ? t.respondsToUserMessageId : void 0,
     ...typeof t.runId == "string" ? { runId: t.runId } : {},
     dataType: typeof t.dataType == "string" ? t.dataType : void 0,
-    attachments: Qt(t.attachments)?.map(It),
+    securitySettingsUrl: typeof t.securitySettingsUrl == "string" ? t.securitySettingsUrl : void 0,
+    attachments: te(t.attachments)?.map(It),
     loading: typeof t.loading == "boolean" ? t.loading : void 0
   };
 }
-function mn(e) {
+function Tn(e) {
   return e.attachments?.length ? {
     ...e,
     attachments: e.attachments.map(It)
@@ -2641,19 +2684,19 @@ function It(e) {
   } = e;
   return r;
 }
-function M(e) {
+function C(e) {
   const t = e.respondsToUserMessageId;
   return typeof t == "string" && t ? t : null;
 }
-function C(e) {
+function E(e) {
   const t = e.runId;
   return typeof t == "string" && t ? t : null;
 }
-function yn(e) {
+function wn(e) {
   const t = e?.timeoutMs;
-  return !!e && typeof e == "object" && typeof e.summary == "string" && typeof e.javascript == "string" && (t === void 0 || typeof t == "number" && Number.isInteger(t) && t > 0 && t <= ss);
+  return !!e && typeof e == "object" && typeof e.summary == "string" && typeof e.javascript == "string" && (t === void 0 || typeof t == "number" && Number.isInteger(t) && t > 0 && t <= ns);
 }
-function ee(e) {
+function se(e) {
   const t = {};
   try {
     new Headers(e).forEach((s, n) => {
@@ -2665,23 +2708,23 @@ function ee(e) {
   return t;
 }
 function At(e, t) {
-  return ae(e) ? X : E(j(t), ze);
+  return ce(e) ? X : _(j(t), Ge);
 }
-function Tn(e, t) {
+function In(e, t) {
   return typeof e == "string" ? e : e instanceof URL ? e.toString() : t?.url ?? "";
 }
-async function wn(e, t, s, n) {
-  const r = ee(e.headers);
+async function An(e, t, s, n) {
+  const r = se(e.headers);
   n({
     ...t,
     responseStatus: e.status,
     responseHeaders: r,
-    responseBody: await In(e),
+    responseBody: await Sn(e),
     durationMs: Date.now() - s
   });
 }
-async function In(e) {
-  if (!se(e.headers))
+async function Sn(e) {
+  if (!ne(e.headers))
     return;
   let t = null, s = null;
   try {
@@ -2690,7 +2733,7 @@ async function In(e) {
     const n = new Promise((c) => {
       s = window.setTimeout(() => {
         t?.cancel(), c("timeout");
-      }, Ge);
+      }, Xe);
     }), r = new TextDecoder();
     let i = "", o = 0;
     for (; ; ) {
@@ -2699,10 +2742,10 @@ async function In(e) {
         return;
       const { done: u, value: l } = c;
       if (u)
-        return E(i + r.decode());
+        return _(i + r.decode());
       const a = pt - o;
       if (l.byteLength > a)
-        return i += r.decode(l.subarray(0, Math.max(a, 0)), { stream: !0 }), t.cancel(), `${E(i)}... [truncated]`;
+        return i += r.decode(l.subarray(0, Math.max(a, 0)), { stream: !0 }), t.cancel(), `${_(i)}... [truncated]`;
       o += l.byteLength, i += r.decode(l, { stream: !0 });
     }
   } catch {
@@ -2712,26 +2755,26 @@ async function In(e) {
     s !== null && window.clearTimeout(s);
   }
 }
-function An(e, t) {
-  if (se(new Headers(t)))
+function kn(e, t) {
+  if (ne(new Headers(t)))
     try {
-      return e.responseType === "" || e.responseType === "text" ? E(e.responseText ?? "") : void 0;
+      return e.responseType === "" || e.responseType === "text" ? _(e.responseText ?? "") : void 0;
     } catch {
       return;
     }
 }
-function Bt(e) {
+function qt(e) {
   if (typeof e == "string")
-    return E(e);
+    return _(e);
 }
-function Sn(e) {
+function En(e) {
   return k({
     ...e,
-    requestBody: qt(e.requestBody),
-    responseBody: qt(e.responseBody)
+    requestBody: xt(e.requestBody),
+    responseBody: xt(e.responseBody)
   });
 }
-function qt(e) {
+function xt(e) {
   if (typeof e != "string")
     return e;
   const t = e.trim();
@@ -2743,14 +2786,14 @@ function qt(e) {
     return j(e);
   }
 }
-function se(e) {
+function ne(e) {
   if (!e)
     return !1;
   const t = e.get("content-type")?.toLowerCase() ?? "", s = e.get("content-length"), n = Number(s);
   return s !== null && Number.isInteger(n) && n >= 0 && n <= pt && (t.startsWith("text/") || t.includes("json") || t.includes("javascript"));
 }
-function b(e, t = {}, s) {
-  if (En(s))
+function M(e, t = {}, s) {
+  if (Rn(s))
     return !0;
   const n = Object.entries(t).find(([r]) => r.toLowerCase() === "content-type")?.[1]?.toLowerCase();
   if (n?.includes("multipart/form-data") || n?.includes("application/octet-stream"))
@@ -2765,8 +2808,8 @@ function b(e, t = {}, s) {
     return !0;
   }
 }
-function kn(e, t) {
-  if (b(e))
+function _n(e, t) {
+  if (M(e))
     return !0;
   try {
     const s = new URL(e, location.href), n = new URL(t);
@@ -2775,10 +2818,10 @@ function kn(e, t) {
     return !0;
   }
 }
-function En(e) {
+function Rn(e) {
   return e instanceof FormData || e instanceof Blob || e instanceof ArrayBuffer || ArrayBuffer.isView(e) || typeof ReadableStream < "u" && e instanceof ReadableStream;
 }
-function Rn(e) {
+function Cn(e) {
   const t = {};
   for (const s of e.trim().split(/[\r\n]+/)) {
     const n = s.indexOf(":");
@@ -2791,7 +2834,7 @@ function Rn(e) {
   }
   return t;
 }
-function E(e, t = pt) {
+function _(e, t = pt) {
   return e.length <= t ? e : `${e.slice(0, t)}... [truncated ${e.length - t} chars]`;
 }
 function tt(e) {
@@ -2805,31 +2848,31 @@ class F extends Error {
 }
 async function et(e, t) {
   let s = null;
-  for (let n = 0; n < Ct; n += 1)
+  for (let n = 0; n < Rt; n += 1)
     try {
       return await e();
     } catch (r) {
-      if (s = r, n >= Ct - 1 || !_n(r))
+      if (s = r, n >= Rt - 1 || !Mn(r))
         throw r;
-      await Cn(n);
+      await bn(n);
     }
   throw s instanceof Error ? s : new Error(t);
 }
-function Cn(e) {
+function bn(e) {
   return new Promise((t) => {
-    window.setTimeout(t, $e[e] ?? 0);
+    window.setTimeout(t, ze[e] ?? 0);
   });
 }
-function _n(e) {
-  return e instanceof F ? bn(e.status) : e instanceof TypeError;
+function Mn(e) {
+  return e instanceof F ? Un(e.status) : e instanceof TypeError;
 }
-function bn(e) {
+function Un(e) {
   return e === 408 || e === 409 || e === 429 || e >= 500;
 }
-function Mn(e) {
+function Pn(e) {
   return e === 401 || e === 403;
 }
-const X = "[REDACTED_SECRET]", R = "[REDACTED_TOKEN]", Pn = "[REDACTED_SIGNED_URL]", Un = 20, Dn = /^(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|token|api_key|apiKey|apikey|key|secret|signature|sig|password|passwd|pwd|code|state|session|jwt|csrf|csrfToken|xsrf|xsrfToken)$/i, ne = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi, re = /\bBasic\s+[A-Za-z0-9+/=-]{12,}/gi, ie = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, oe = /\b(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|api_key|apiKey|apikey|client_secret|clientSecret|password|secret|token|jwt|csrf|csrfToken|xsrf|xsrfToken)\b\s*[:=]\s*["']?[^"',&\s}]+/gi, vn = /\bhttps?:\/\/[^\s"'<>]+(?:X-Amz-Signature|X-Goog-Signature|Signature|sig=)[^\s"'<>]*/gi, Nn = /\bhttps?:\/\/[^\s"'<>]+/gi, On = /[),.;\]]+$/;
+const X = "[REDACTED_SECRET]", R = "[REDACTED_TOKEN]", Dn = "[REDACTED_SIGNED_URL]", vn = 20, Nn = /^(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|token|api_key|apiKey|apikey|key|secret|signature|sig|password|passwd|pwd|code|state|session|jwt|csrf|csrfToken|xsrf|xsrfToken)$/i, re = /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi, ie = /\bBasic\s+[A-Za-z0-9+/=-]{12,}/gi, oe = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, ae = /\b(access_token|accessToken|refresh_token|refreshToken|id_token|idToken|authToken|api_key|apiKey|apikey|client_secret|clientSecret|password|secret|token|jwt|csrf|csrfToken|xsrf|xsrfToken)\b\s*[:=]\s*["']?[^"',&\s}]+/gi, On = /\bhttps?:\/\/[^\s"'<>]+(?:X-Amz-Signature|X-Goog-Signature|Signature|sig=)[^\s"'<>]*/gi, Ln = /\bhttps?:\/\/[^\s"'<>]+/gi, Bn = /[),.;\]]+$/;
 function k(e) {
   return W(e, 0, /* @__PURE__ */ new WeakSet());
 }
@@ -2838,7 +2881,7 @@ function W(e, t, s) {
     return e.startsWith("data:image/") || e.startsWith("data:application/pdf;") ? e : j(e);
   if (e === null || typeof e != "object")
     return e;
-  if (t >= Un)
+  if (t >= vn)
     return "[REDACTED_MAX_DEPTH]";
   if (s.has(e))
     return "[REDACTED_CIRCULAR]";
@@ -2846,44 +2889,44 @@ function W(e, t, s) {
     return e.map((r) => W(r, t + 1, s));
   const n = {};
   for (const [r, i] of Object.entries(e))
-    ae(r) ? n[r] = X : n[r] = r.toLowerCase() === "url" ? Ln(i) : W(i, t + 1, s);
+    ce(r) ? n[r] = X : n[r] = r.toLowerCase() === "url" ? qn(i) : W(i, t + 1, s);
   return n;
 }
-function ae(e) {
+function ce(e) {
   const t = e.replace(/[^a-z0-9]/gi, "").toLowerCase();
   return t.includes("authorization") || t.includes("cookie") || t.includes("password") || t.includes("passwd") || t === "pwd" || t.includes("secret") || t === "token" || t.endsWith("token") || t.includes("apikey") || t.includes("csrf") || t.includes("xsrf") || t === "jwt" || t === "session" || t === "signature" || t.includes("privatekey");
 }
-function Ln(e) {
-  return typeof e == "string" ? ce(e) : W(e, 0, /* @__PURE__ */ new WeakSet());
+function qn(e) {
+  return typeof e == "string" ? le(e) : W(e, 0, /* @__PURE__ */ new WeakSet());
 }
-function ce(e) {
+function le(e) {
   try {
     const t = new URL(e, location.href);
     for (const s of Array.from(t.searchParams.keys()))
-      Dn.test(s) && t.searchParams.set(s, R);
+      Nn.test(s) && t.searchParams.set(s, R);
     return t.username && (t.username = R), t.password && (t.password = R), t.toString();
   } catch {
-    return Bn(e);
+    return xn(e);
   }
 }
 function j(e) {
-  return e.replace(vn, Pn).replace(Nn, qn).replace(ne, `Bearer ${R}`).replace(re, `Basic ${R}`).replace(ie, R).replace(oe, (t, s) => `${s}: ${X}`);
+  return e.replace(On, Dn).replace(Ln, Fn).replace(re, `Bearer ${R}`).replace(ie, `Basic ${R}`).replace(oe, R).replace(ae, (t, s) => `${s}: ${X}`);
 }
-function Bn(e) {
-  return e.replace(ne, `Bearer ${R}`).replace(re, `Basic ${R}`).replace(ie, R).replace(oe, (t, s) => `${s}: ${X}`);
+function xn(e) {
+  return e.replace(re, `Bearer ${R}`).replace(ie, `Basic ${R}`).replace(oe, R).replace(ae, (t, s) => `${s}: ${X}`);
 }
-function qn(e) {
-  const t = e.match(On)?.[0] ?? "", s = t ? e.slice(0, -t.length) : e;
-  return `${ce(s)}${t}`;
+function Fn(e) {
+  const t = e.match(Bn)?.[0] ?? "", s = t ? e.slice(0, -t.length) : e;
+  return `${le(s)}${t}`;
 }
 export {
   St as PLUNO_PRODUCT_AGENT_SDK_PREVIEW_HOST_SELECTOR,
   rt as PLUNO_PRODUCT_AGENT_WIDGET_HOST_SELECTOR,
-  _e as PLUNO_PRODUCT_AGENT_WIDGET_PANEL_SELECTOR,
+  be as PLUNO_PRODUCT_AGENT_WIDGET_PANEL_SELECTOR,
   Ce as PLUNO_PRODUCT_AGENT_WIDGET_ROOT_SELECTOR,
-  be as PLUNO_PRODUCT_AGENT_WIDGET_TIMELINE_SELECTOR,
-  Gt as PlunoProductAgent,
-  Ye as calculateReconnectDelay,
-  Gt as default,
-  ms as getProductAgentOriginAccessErrorMessage
+  Me as PLUNO_PRODUCT_AGENT_WIDGET_TIMELINE_SELECTOR,
+  Xt as PlunoProductAgent,
+  Ve as calculateReconnectDelay,
+  Xt as default,
+  ys as getProductAgentOriginAccessErrorMessage
 };