@runtypelabs/persona 4.22.1 → 4.23.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/persona",
-  "version": "4.22.1",
+  "version": "4.23.0",
   "description": "Themeable, pluggable streaming agent widget for websites, in plain JS with support for voice input and reasoning / tool output.",
   "type": "module",
   "main": "dist/index.cjs",

package/src/client-visitor-history.test.ts

@@ -1080,3 +1080,89 @@ describe('client visitor history - dedupe', () => {
     expect(h.sessionInits).toHaveLength(1);
   });
 });
+
+describe('voice integration visitor credential access', () => {
+  const controllers: ReturnType<typeof createAgentExperience>[] = [];
+  const mountWidget = (config: Partial<AgentWidgetConfig> = {}) => {
+    const mount = document.createElement('div');
+    document.body.appendChild(mount);
+    const controller = createAgentExperience(mount, {
+      apiUrl: API_URL,
+      clientToken: CLIENT_TOKEN,
+      launcher: { enabled: false },
+      ...config,
+    });
+    controllers.push(controller);
+    return controller;
+  };
+
+  afterEach(() => {
+    controllers.forEach((controller) => controller.destroy());
+    controllers.length = 0;
+    document.body.innerHTML = '';
+  });
+
+  it('reads minted proof after the claim response omits it without enriching the callback', async () => {
+    const minted = { id: 'vis_1', token: 'cvt_minted', expiresAt: futureIso(), endUserId: null };
+    installFetch([
+      ok({ sessionId: 'sess_first', visitor: minted }),
+      ok({ sessionId: 'sess_claimed', visitor: { ...minted, token: undefined } }),
+    ]);
+    const onSessionInit = vi.fn();
+    const controller = mountWidget({ persistState: false, onSessionInit });
+    await vi.waitFor(() => expect(onSessionInit).toHaveBeenCalledOnce());
+    expect(onSessionInit.mock.calls[0][0].visitor.token).toBeUndefined();
+    await expect(controller.getVisitorToken()).resolves.toBe('cvt_minted');
+    expect(JSON.stringify(controller.getState())).not.toContain('cvt_minted');
+    expect(window.localStorage.getItem(await storageKeyFor())).toBeNull();
+  });
+
+  it('reads the current persisted credential after reload and after rotation or removal', async () => {
+    await seedToken('cvt_stored');
+    installFetch([ok()]);
+    const controller = mountWidget();
+    await expect(controller.getVisitorToken()).resolves.toBe('cvt_stored');
+    await seedToken('cvt_rotated');
+    await expect(controller.getVisitorToken()).resolves.toBe('cvt_rotated');
+    window.localStorage.removeItem(await storageKeyFor());
+    await expect(controller.getVisitorToken()).resolves.toBeNull();
+  });
+
+  it('does not return credentials from a replaced client-token scope', async () => {
+    await seedToken('cvt_stored');
+    installFetch([ok(), ok()]);
+    const controller = mountWidget();
+    await vi.waitFor(() => expect(requests).toHaveLength(1));
+    const pending = controller.getVisitorToken();
+    controller.update({ clientToken: 'ct_other' });
+    await expect(pending).resolves.toBeNull();
+    await expect(controller.getVisitorToken()).resolves.toBeNull();
+  });
+
+  it('returns null after teardown, including a read already in flight', async () => {
+    await seedToken('cvt_stored');
+    installFetch([ok()]);
+    const controller = mountWidget();
+    await vi.waitFor(() => expect(requests).toHaveLength(1));
+    const pending = controller.getVisitorToken();
+    controller.destroy();
+    controllers.length = 0;
+    await expect(pending).resolves.toBeNull();
+    await expect(controller.getVisitorToken()).resolves.toBeNull();
+  });
+
+  it('returns null when no credential has been minted', async () => {
+    installFetch([ok()]);
+    const controller = mountWidget({ persistState: false });
+    await expect(controller.getVisitorToken()).resolves.toBeNull();
+  });
+
+  it('does not fetch or mint a visitor outside client-token mode', async () => {
+    const fetch = vi.fn();
+    vi.stubGlobal('fetch', fetch);
+    const controller = mountWidget({ clientToken: undefined });
+    await expect(controller.getVisitorToken()).resolves.toBeNull();
+    expect(fetch).not.toHaveBeenCalled();
+    vi.unstubAllGlobals();
+  });
+});

package/src/launcher-global.ts

@@ -13,7 +13,7 @@
  * EXTRA-tier icon (`launcher.agentIconName: "shopping-cart"`) paints a
  * correctly-sized empty placeholder and fills within one round-trip of the
  * `icons-extra.js` sibling chunk (loader registered below). See the
- * "Deferred Launcher Loading" pattern in CLAUDE.md.
+ * "Deferred Launcher Loading" pattern in AGENTS.md.
  *
  * Public global (via tsup `--global-name AgentWidgetLauncher`):
  *

package/src/ui.ts

@@ -731,6 +731,12 @@ type Controller = {
    * Required host logout wiring.
    */
   resetHistoryIdentity: () => Promise<{ remoteRevocationConfirmed: boolean }>;
+  /**
+   * Read the current browser visitor credential for a trusted voice integration.
+   * Returns null before minting, outside client-token mode, or after teardown.
+   * Never put this bearer credential in logs, URLs, or model context.
+   */
+  getVisitorToken: () => Promise<string | null>;
   /** Latest sanitized identity state; carries no token, proof, or identity id. */
   getHistoryIdentityStatus: () => HistoryIdentityStatus;
   /** `focus: false` keeps focus where it is (programmatic/preview opens). */
@@ -8982,6 +8988,7 @@ export const createAgentExperience = (
   destroyCallbacks.push(() => {
     session.destroy();
     visitorStore?.destroy();
+    visitorStore = null;
   });
 
   // Mirror read-aloud playback state into the action buttons, and surface it as
@@ -15215,6 +15222,12 @@ export const createAgentExperience = (
     resetHistoryIdentity(): Promise<{ remoteRevocationConfirmed: boolean }> {
       return resetHistoryIdentity();
     },
+    async getVisitorToken(): Promise<string | null> {
+      const store = visitorStore;
+      if (!store) return null;
+      const token = await store.get();
+      return store === visitorStore ? token : null;
+    },
     getHistoryIdentityStatus(): HistoryIdentityStatus {
       if (!historyProvider) {
         return historyFeatureEnabled()