@proveanything/smartlinks 2.0.10 → 2.0.12

package/dist/docs/host-dependency-contract.md

@@ -32,7 +32,8 @@ export default defineConfig({
         'react', 'react-dom', 'react/jsx-runtime',
         '@proveanything/smartlinks',
         'react-router-dom', '@tanstack/react-query',
-        'lucide-react', 'date-fns', 'liquidjs', 'class-variance-authority',
+        'lucide-react', 'date-fns', 'liquidjs', 'marked', 'dompurify', 'clsx', 'tailwind-merge',
+        'class-variance-authority',
         '@radix-ui/react-slot', '@radix-ui/react-dialog', '@radix-ui/react-popover',
         '@radix-ui/react-tooltip', '@radix-ui/react-tabs', '@radix-ui/react-accordion',
         '@radix-ui/react-select', '@radix-ui/react-scroll-area', '@radix-ui/react-label',
@@ -44,7 +45,8 @@ export default defineConfig({
           '@proveanything/smartlinks': 'SL',
           'react-router-dom': 'ReactRouterDOM', '@tanstack/react-query': 'ReactQuery',
           'lucide-react': 'LucideReact', 'date-fns': 'dateFns', 'liquidjs': 'LiquidJS',
-          'class-variance-authority': 'CVA',
+          'marked': 'marked', 'dompurify': 'DOMPurify', 'clsx': 'clsx',
+          'tailwind-merge': 'tailwindMerge', 'class-variance-authority': 'CVA',
           '@radix-ui/react-slot': 'RadixSlot', '@radix-ui/react-dialog': 'RadixDialog',
           '@radix-ui/react-popover': 'RadixPopover', '@radix-ui/react-tooltip': 'RadixTooltip',
           '@radix-ui/react-tabs': 'RadixTabs', '@radix-ui/react-accordion': 'RadixAccordion',
@@ -71,6 +73,10 @@ export default defineConfig({
 | `lucide-react` | `LucideReact` | 1.47 |
 | `date-fns` | `dateFns` | 4.4 |
 | `liquidjs` | `LiquidJS` | 10.27+ |
+| `marked` | `marked` | 12+ |
+| `dompurify` | `DOMPurify` | 3+ |
+| `clsx` | `clsx` | 2+ |
+| `tailwind-merge` | `tailwindMerge` | 3+ |
 | `class-variance-authority` | `CVA` | 0.7 |
 | `@radix-ui/react-slot` | `RadixSlot` | 1.2.4 |
 | `@radix-ui/react-dialog` | `RadixDialog` | 1.1.23 |
@@ -85,7 +91,15 @@ export default defineConfig({
 | `@radix-ui/react-progress` | `RadixProgress` | 1.1.8 |
 | `@radix-ui/react-avatar` | `RadixAvatar` | 1.1.11 |
 
-`liquidjs` is **host-provided** — externalise it, don't ship a second copy (frequently missed).
+`liquidjs`, `marked`, `dompurify`, `clsx` and `tailwind-merge` are **host-provided** — externalise
+them, don't ship a second copy (frequently missed). `marked` arrived in **v6**; `dompurify`, `clsx`
+and `tailwind-merge` in **v7**. The portal and hub render markdown in the container, so use the
+host's `marked` rather than bundling your own. `marked` does not sanitise HTML — pair it with the
+shared `dompurify`: `el.innerHTML = DOMPurify.sanitize(marked.parse(md))`. `window.DOMPurify` is the
+**configured instance** (callable, `.sanitize()`), so `import DOMPurify from 'dompurify'` behaves
+exactly like a bundled default import. `clsx` + `tailwind-merge` are the standard `cn()` pair
+(`import { clsx } from 'clsx'; import { twMerge } from 'tailwind-merge'`) — keep your local `cn()`
+helper if you like, it just stops paying the bundle cost.
 
 ## Backwards compatibility
 
@@ -111,7 +125,8 @@ app ships the Tailwind 4 CSS-first layout as the default; see its README.)
 
 React **19.3** · Vite **8.3** · react-router-dom **7.18** · Tailwind **4.3** (CSS-first) ·
 TypeScript **6.0** · ESLint **10.11** · `@proveanything/smartlinks` **2.0.5** ·
-`@proveanything/smartlinks-utils-ui` **1.16.4** · liquidjs **10.29**.
+`@proveanything/smartlinks-utils-ui` **1.16.4** · liquidjs **10.29** · marked **12+** ·
+dompurify **3+** · clsx **2+** · tailwind-merge **3+**.
 
 > **TypeScript 7** (the native/Go compiler) is **deliberately deferred** — tooling hasn't settled.
 > Target **TS 6** for R5; it compiles existing code with no source changes.
@@ -138,8 +153,8 @@ never drift:
 
 ```ts
 import {
-  SHARED_DEPENDENCY_CONTRACT_VERSION, // 'v5'
-  SHARED_DEPENDENCIES,                // [{ specifier, globalName, minVersion, importMapPath }, …] (25)
+  SHARED_DEPENDENCY_CONTRACT_VERSION, // 'v7'
+  SHARED_DEPENDENCIES,                // [{ specifier, globalName, minVersion, importMapPath }, …] (29)
   SHARED_DEPENDENCY_SPECIFIERS,       // bare specifiers — drop straight into a bundler `external` list
   getHostSharedDependencies,          // what the live host advertises at runtime, or null
 } from '@proveanything/smartlinks'

package/dist/index.d.ts

@@ -8,6 +8,8 @@ export { IframeResponder, isAdminFromRoles, buildIframeSrc, } from './iframeResp
 export * as utils from './utils/index.js';
 export { SHARED_DEPENDENCY_CONTRACT_VERSION, SHARED_DEPENDENCIES, SHARED_DEPENDENCY_SPECIFIERS, importMapPathFor, getHostSharedDependencies, } from './shared-dependencies.js';
 export type { SharedDependency, HostSharedDependencies } from './shared-dependencies.js';
+export { AI_TOOL_NAMES, BUILTIN_AI_TOOLS, getBuiltinAiTool } from './ai-tools.js';
+export type { BuiltinAiToolDescriptor } from './ai-tools.js';
 export type { PortalPathParams, Gs1DigitalLinkParams, ConditionParams, ConditionDebugOptions, ConditionDebugLogger, ConditionSet, Condition, UserInfo, ProductInfo, ProofInfo, CollectionInfo, } from './utils/index.js';
 export type { LoginResponse, VerifyTokenResponse, AccountInfoResponse, AuthLocation, } from "./api/auth.js";
 export type { UserAccountRegistrationRequest, } from "./types/auth.js";

package/dist/index.js

@@ -13,4 +13,6 @@ import * as utils_1 from './utils/index.js';
 export { utils_1 as utils };
 // Shared dependency contract (host↔app) — one source of truth for externalized deps
 export { SHARED_DEPENDENCY_CONTRACT_VERSION, SHARED_DEPENDENCIES, SHARED_DEPENDENCY_SPECIFIERS, importMapPathFor, getHostSharedDependencies, } from './shared-dependencies.js';
+// Built-in AI tool catalog (design-time discovery of the core agentic toolset)
+export { AI_TOOL_NAMES, BUILTIN_AI_TOOLS, getBuiltinAiTool } from './ai-tools.js';
 export { HostCapabilityUnavailableError, HostPermissionDeniedError, HostTimeoutError, } from './mobile-admin/errors.js';

package/dist/openapi.yaml

@@ -777,7 +777,8 @@ paths:
           description: Success
           content:
             application/json:
-              schema: {}
+              schema:
+                $ref: "#/components/schemas/AICacheRef"
         400:
           description: Bad request
         401:
@@ -803,7 +804,8 @@ paths:
           description: Success
           content:
             application/json:
-              schema: {}
+              schema:
+                $ref: "#/components/schemas/AIGenerateImageResponse"
         400:
           description: Bad request
         401:
@@ -1011,9 +1013,7 @@ paths:
           content:
             application/json:
               schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/AISearchPhotosPhoto"
+                $ref: "#/components/schemas/AISearchPhotosResponse"
         400:
           description: Bad request
         401:
@@ -1132,7 +1132,8 @@ paths:
           description: Success
           content:
             application/json:
-              schema: {}
+              schema:
+                $ref: "#/components/schemas/AIUploadedFile"
         400:
           description: Bad request
         401:
@@ -15222,6 +15223,25 @@ components:
             - standard
             - flex
             - priority
+        server_tools:
+          type: array
+          items:
+            type: object
+            additionalProperties: true
+        allowCapabilities:
+          type: array
+          items:
+            $ref: "#/components/schemas/AiToolCapability"
+        only:
+          type: array
+          items:
+            $ref: "#/components/schemas/AiToolName"
+        exclude:
+          type: array
+          items:
+            $ref: "#/components/schemas/AiToolName"
+        maxSteps:
+          type: number
       required:
         - enabled
     ResponsesResult:
@@ -15275,6 +15295,8 @@ components:
             - openai
         responseTime:
           type: number
+        _agent:
+          $ref: "#/components/schemas/ResponsesAgentTrace"
       required:
         - id
         - object
@@ -16023,16 +16045,121 @@ components:
     AISearchPhotosPhoto:
       type: object
       properties:
+        id:
+          type: string
         url:
           type: string
+        thumb:
+          type: string
         alt:
           type: string
+        width:
+          type: number
+        height:
+          type: number
         photographer:
           type: string
         photographerUrl:
           type: string
       required:
         - url
+    AISearchPhotosResponse:
+      type: object
+      properties:
+        provider:
+          type: string
+        results:
+          type: array
+          items:
+            $ref: "#/components/schemas/AISearchPhotosPhoto"
+        total:
+          type: number
+        total_pages:
+          type: number
+      required:
+        - provider
+        - results
+    AIGeneratedImage:
+      type: object
+      properties:
+        url:
+          type: string
+        b64_json:
+          type: string
+        revised_prompt:
+          type: string
+      required:
+        - url
+        - b64_json
+    AIGenerateImageResponse:
+      type: object
+      properties:
+        provider:
+          type: string
+        model:
+          type: string
+        images:
+          type: array
+          items:
+            $ref: "#/components/schemas/AIGeneratedImage"
+      required:
+        - provider
+        - images
+    AIGenerateContentCandidate:
+      type: object
+      properties:
+        content:
+          type: object
+          additionalProperties: true
+        finishReason:
+          type: string
+    AIGenerateContentResponse:
+      type: object
+      properties:
+        provider:
+          type: string
+        model:
+          type: string
+        candidates:
+          type: array
+          items:
+            $ref: "#/components/schemas/AIGenerateContentCandidate"
+        usageMetadata:
+          type: object
+          additionalProperties: true
+        promptTokenCount:
+          type: number
+        candidatesTokenCount:
+          type: number
+        totalTokenCount:
+          type: number
+        responseTime:
+          type: number
+    AIUploadedFile:
+      type: object
+      properties:
+        name:
+          type: string
+        uri:
+          type: string
+        url:
+          type: string
+        mimeType:
+          type: string
+        sizeBytes:
+          type: object
+          additionalProperties: true
+        state:
+          type: string
+    AICacheRef:
+      type: object
+      properties:
+        name:
+          type: string
+        model:
+          type: string
+        expireTime:
+          type: string
     AgentRunRequest:
       type: object
       properties:
@@ -16170,6 +16297,357 @@ components:
       required:
         - tools
         - skills
+    WebFetchPageArgs:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    WebExtractSchemaArgs:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    WebScreenshotArgs:
+      type: object
+      properties:
+        url:
+          type: string
+      required:
+        - url
+    WebSearchArgs:
+      type: object
+      properties:
+        query:
+          type: object
+          additionalProperties: true
+      required:
+        - query
+    BrandAssetsArgs:
+      type: object
+      properties:
+        url:
+          type: string
+      required:
+        - url
+    DocumentReadArgs:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    DataExtractArgs:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    ImageDescribeArgs:
+      type: object
+      properties:
+        imageUrl:
+          type: object
+          additionalProperties: true
+      required:
+        - imageUrl
+    ImageGenerateArgs:
+      type: object
+      properties:
+        prompt:
+          type: string
+          enum:
+            - openai
+            - gemini
+      required:
+        - prompt
+    ImageFromReferenceArgs:
+      type: object
+      properties:
+        prompt:
+          type: object
+          additionalProperties: true
+      required:
+        - prompt
+    ImageSearchStockArgs:
+      type: object
+      properties:
+        query:
+          type: string
+          enum:
+            - landscape
+            - portrait
+            - squarish
+      required:
+        - query
+    ImageTransformArgs:
+      type: object
+      properties:
+        imageUrl:
+          type: string
+        resize:
+          type: string
+          enum:
+            - cover
+            - contain
+            - fill
+            - inside
+            - outside
+        crop:
+          type: object
+          additionalProperties: true
+        rotate:
+          type: number
+        flip:
+          type: boolean
+        flop:
+          type: boolean
+        grayscale:
+          type: boolean
+        tint:
+          type: string
+        modulate:
+          type: object
+          additionalProperties: true
+        format:
+          type: string
+          enum:
+            - jpeg
+            - png
+            - webp
+            - avif
+        quality:
+          type: number
+      required:
+        - imageUrl
+    PdfCreateArgs:
+      type: object
+      properties:
+        html:
+          type: object
+          additionalProperties: true
+      required:
+        - html
+    PdfFillArgs:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    PdfMergeArgs:
+      type: object
+      properties:
+        urls:
+          type: array
+          items:
+            type: string
+      required:
+        - urls
+    HttpRequestArgs:
+      type: object
+      properties:
+        url:
+          type: string
+          enum:
+            - GET
+            - POST
+            - PUT
+            - PATCH
+            - DELETE
+            - HEAD
+      required:
+        - url
+    TranslateArgs:
+      type: object
+      properties:
+        text:
+          type: object
+          additionalProperties: true
+      required:
+        - text
+    AiToolArgsMap:
+      type: object
+      properties:
+        web.fetchPage:
+          $ref: "#/components/schemas/WebFetchPageArgs"
+        web.extractSchema:
+          $ref: "#/components/schemas/WebExtractSchemaArgs"
+        web.screenshot:
+          $ref: "#/components/schemas/WebScreenshotArgs"
+        web.search:
+          $ref: "#/components/schemas/WebSearchArgs"
+        brand.assets:
+          $ref: "#/components/schemas/BrandAssetsArgs"
+        document.read:
+          $ref: "#/components/schemas/DocumentReadArgs"
+        data.extract:
+          $ref: "#/components/schemas/DataExtractArgs"
+        image.describe:
+          $ref: "#/components/schemas/ImageDescribeArgs"
+        image.generate:
+          $ref: "#/components/schemas/ImageGenerateArgs"
+        image.fromReference:
+          $ref: "#/components/schemas/ImageFromReferenceArgs"
+        image.searchStock:
+          $ref: "#/components/schemas/ImageSearchStockArgs"
+        image.transform:
+          $ref: "#/components/schemas/ImageTransformArgs"
+        pdf.create:
+          $ref: "#/components/schemas/PdfCreateArgs"
+        pdf.fill:
+          $ref: "#/components/schemas/PdfFillArgs"
+        pdf.merge:
+          $ref: "#/components/schemas/PdfMergeArgs"
+        http.request:
+          $ref: "#/components/schemas/HttpRequestArgs"
+        translate:
+          $ref: "#/components/schemas/TranslateArgs"
+      required:
+        - web.fetchPage
+        - web.extractSchema
+        - web.screenshot
+        - web.search
+        - brand.assets
+        - document.read
+        - data.extract
+        - image.describe
+        - image.generate
+        - image.fromReference
+        - image.searchStock
+        - image.transform
+        - pdf.create
+        - pdf.fill
+        - pdf.merge
+        - http.request
+        - translate
+    WebSearchResultItem:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    WebSearchResult:
+      type: object
+      properties:
+        query:
+          type: array
+          items:
+            type: object
+            additionalProperties: true
+      required:
+        - query
+    DocumentReadResult:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    DataExtractResult:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    WebFetchPageResult:
+      type: object
+      properties:
+        url:
+          type: object
+          additionalProperties: true
+      required:
+        - url
+    ImageDescribeResult:
+      type: object
+      properties:
+        imageUrl:
+          type: object
+          additionalProperties: true
+      required:
+        - imageUrl
+    HostedAssetResult:
+      type: object
+      properties:
+        hostedUrl:
+          type: object
+          additionalProperties: true
+      required:
+        - hostedUrl
+    HttpRequestResult:
+      type: object
+      properties:
+        status:
+          type: object
+          additionalProperties: true
+      required:
+        - status
+    TranslateResult:
+      type: object
+      properties:
+        translations:
+          type: object
+          additionalProperties: true
+      required:
+        - translations
+    ResponsesAgentTrace:
+      type: object
+      properties:
+        steps:
+          type: number
+        maxStepsReached:
+          type: boolean
+        toolResults:
+          type: array
+          items:
+            $ref: "#/components/schemas/AgentToolResult"
+        availableTools:
+          type: array
+          items:
+            type: string
+      required:
+        - steps
+        - maxStepsReached
+        - toolResults
+        - availableTools
+    AgentToolCallEvent:
+      type: object
+      properties:
+        type:
+          type: object
+          additionalProperties: true
+      required:
+        - type
+    AgentToolResultEvent:
+      type: object
+      properties:
+        type:
+          type: object
+          additionalProperties: true
+      required:
+        - type
+    AgentResponseCompletedEvent:
+      type: object
+      properties:
+        type:
+          type: object
+          additionalProperties: true
+      required:
+        - type
     AnalyticsLocation:
       type: object
       properties:

package/dist/shared-dependencies.d.ts

@@ -1,5 +1,5 @@
 /** Current contract revision. Bumped when the entry list or host versions change. */
-export declare const SHARED_DEPENDENCY_CONTRACT_VERSION: "v5";
+export declare const SHARED_DEPENDENCY_CONTRACT_VERSION: "v7";
 export interface SharedDependency {
     /** Bare import specifier the app writes, e.g. `react-dom/client`. */
     specifier: string;
@@ -13,8 +13,8 @@ export interface SharedDependency {
 /**
  * Canonical import-map path for a specifier: drop the leading `@` scope marker and
  * turn every `/` into `-`.
- *   'react-dom/client'      -> '/sl-shared/v5/react-dom-client.js'
- *   '@radix-ui/react-slot'  -> '/sl-shared/v5/radix-ui-react-slot.js'
+ *   'react-dom/client'      -> '/sl-shared/v7/react-dom-client.js'
+ *   '@radix-ui/react-slot'  -> '/sl-shared/v7/radix-ui-react-slot.js'
  * Hosts MUST serve shims at these paths so the map the SDK advertises resolves.
  */
 export declare function importMapPathFor(specifier: string, version?: string): string;

package/dist/shared-dependencies.js

@@ -11,21 +11,24 @@
 //
 // See docs/host-dependency-contract.md.
 /** Current contract revision. Bumped when the entry list or host versions change. */
-export const SHARED_DEPENDENCY_CONTRACT_VERSION = 'v5';
+export const SHARED_DEPENDENCY_CONTRACT_VERSION = 'v7';
 /**
  * Canonical import-map path for a specifier: drop the leading `@` scope marker and
  * turn every `/` into `-`.
- *   'react-dom/client'      -> '/sl-shared/v5/react-dom-client.js'
- *   '@radix-ui/react-slot'  -> '/sl-shared/v5/radix-ui-react-slot.js'
+ *   'react-dom/client'      -> '/sl-shared/v7/react-dom-client.js'
+ *   '@radix-ui/react-slot'  -> '/sl-shared/v7/radix-ui-react-slot.js'
  * Hosts MUST serve shims at these paths so the map the SDK advertises resolves.
  */
 export function importMapPathFor(specifier, version = SHARED_DEPENDENCY_CONTRACT_VERSION) {
     const slug = specifier.replace(/^@/, '').replace(/\//g, '-');
     return `/sl-shared/${version}/${slug}.js`;
 }
-// The 25-entry v5 contract: the historical 23 plus `react-dom/client` and
-// `react/jsx-dev-runtime`. minVersion follows the R5 host baseline (React 19,
-// Router 7.18.4 security floor, LiquidJS 10.27+, current Radix majors).
+// The 29-entry v7 contract: the v6 set plus `dompurify` (HTML sanitizer — pairs with
+// the shared `marked` so output apps sanitize instead of each bundling their own),
+// `clsx` + `tailwind-merge` (the standard `cn()` pair the portal/hub already ship, now
+// exposed to apps). All small, version-stable, ubiquitous — apps stop bundling copies.
+// minVersion follows the R5 host baseline (React 19, Router 7.18.4 security floor,
+// LiquidJS 10.27+, current Radix majors).
 const CONTRACT = [
     { specifier: 'react', globalName: 'React', minVersion: '19.0.0' },
     { specifier: 'react-dom', globalName: 'ReactDOM', minVersion: '19.0.0' },
@@ -39,6 +42,13 @@ const CONTRACT = [
     { specifier: 'lucide-react', globalName: 'LucideReact', minVersion: '1.0.0' },
     { specifier: 'date-fns', globalName: 'dateFns', minVersion: '4.0.0' },
     { specifier: 'liquidjs', globalName: 'LiquidJS', minVersion: '10.27.0' },
+    { specifier: 'marked', globalName: 'marked', minVersion: '12.0.0' },
+    // `window.DOMPurify` is the CONFIGURED instance (callable, `.sanitize()`), exactly as
+    // dompurify's own UMD build exposes it — so `import DOMPurify from 'dompurify'`
+    // resolves to the same instance a bundled default import would.
+    { specifier: 'dompurify', globalName: 'DOMPurify', minVersion: '3.0.0' },
+    { specifier: 'clsx', globalName: 'clsx', minVersion: '2.0.0' },
+    { specifier: 'tailwind-merge', globalName: 'tailwindMerge', minVersion: '3.0.0' },
     { specifier: 'class-variance-authority', globalName: 'CVA', minVersion: '0.7.0' },
     { specifier: '@radix-ui/react-slot', globalName: 'RadixSlot', minVersion: '1.2.0' },
     { specifier: '@radix-ui/react-dialog', globalName: 'RadixDialog', minVersion: '1.1.0' },