@runtypelabs/persona 4.34.0 → 4.35.1

package/dist/{webmcp-runtime-entry-B8g46vS0.d.cts → webmcp-runtime-entry-XNaXa-9h.d.ts}

@@ -1,4 +1,4 @@
-import { Ca as WebMcpToolResult, Nn as AgentWidgetWebMcpConfig, rr as ClientToolDefinition, ta as VoiceClientToolOutcome, xa as WebMcpConfirmHandler } from "./types-BC7MRxO5.cjs";
+import { Ca as WebMcpToolResult, Nn as AgentWidgetWebMcpConfig, rr as ClientToolDefinition, ta as VoiceClientToolOutcome, xa as WebMcpConfirmHandler } from "./types-9i0xcAMT.js";
 /** Server-applied wire prefix; strip when looking up registry entries. */
 declare const WEBMCP_TOOL_PREFIX = "webmcp:";
 /**
@@ -67,6 +67,14 @@ interface WebMcpBridgeDeps {
   getToolDisplayTitle: (toolName: string) => string | undefined;
   /** Core's `loadWebMcpPolyfillModule` (slot-aware polyfill resolution). */
   loadPolyfill: () => Promise<WebMcpPolyfillModule>;
+  /**
+   * Server-supplied `requireConfirmFor` patterns (the bound surface's policy
+   * from client-token init), read at call time because init can land after
+   * the bridge is built. Merged with `config.requireConfirmFor`. `null` means
+   * a policy is expected but not loaded yet: every call then needs
+   * confirmation (fail closed).
+   */
+  getRequireConfirmFor?: () => readonly string[] | null | undefined;
 }
 declare class WebMcpBridge {
   #private;

package/dist/webmcp-runtime.cjs

@@ -1,2 +1,2 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=(e,t)=>({ok:!1,reason:e,message:t}),t=e=>e.startsWith(`webmcp:`)?e.slice(7):e,n={warn(e,...t){typeof console<`u`&&typeof console.warn==`function`&&console.warn(`[Persona/WebMCP] ${e}`,...t)}};var r=class{#e;#t;#n=!1;#r=null;#i=!1;#a;constructor(e,t){this.config=e,this.#a=t,this.#e=e.onConfirm??null,this.#t=3e4}setConfirmHandler(e){this.#e=e}isOperational(){return this.config.enabled!==!0||!this.#n?!1:this.#l()!==null}async snapshotForDispatch(){if(await this.#s(),this.config.enabled!==!0)return[];let e=this.#l();if(!e)return[];let t;try{t=(await e.getTools()).filter(h)}catch(e){return n.warn(`getTools() threw: shipping an empty WebMCP snapshot.`,e),[]}this.#a.recordToolDisplayTitles(t);let r=typeof location<`u`?location.origin:``;return t.filter(e=>this.#d(e.name)).map(e=>{let t=o(e.annotations);return{name:e.name,description:e.description,parametersSchema:s(e.inputSchema),origin:`webmcp`,...r?{pageOrigin:r}:{},...t?{annotations:t}:{},...t?.untrustedContentHint===!0?{untrustedContentHint:!0}:{}}})}async executeToolCall(e,t,n,r){let i=await this.#o(e,t,n,!1,r);return i.ok?c(i.raw):u(i.message)}async executeVoiceToolCall(e,t,n={}){let r=await this.#o(e,t,n.signal,n.autoConfirmReadOnly===!0);return r.ok?f(r.raw):{status:r.reason===`aborted`?`failed`:r.reason,error:{message:r.message}}}watchToolChanges(e){let t=!1,n=null;return this.#s().then(()=>{if(t||this.config.enabled!==!0)return;let r=this.#l();r&&typeof r.addEventListener==`function`&&(n=r,n.addEventListener(`toolchange`,e))}),()=>{t=!0,n?.removeEventListener(`toolchange`,e),n=null}}async#o(n,r,i,a,s){if(await this.#s(),this.config.enabled!==!0)return e(`failed`,`WebMCP is not enabled on this widget.`);let c=this.#l();if(!c){let t=typeof document<`u`&&!!document.modelContext;return e(`failed`,t?`WebMCP is not operational: document.modelContext is present but does not expose the strict getTools()/executeTool() surface (likely a different or older WebMCP polyfill).`:`WebMCP bridge is not operational on this page (document.modelContext not available).`)}let u=t(n),d;try{d=(await c.getTools()).filter(h)}catch(t){let n=t instanceof Error?t.message:String(t);return e(`failed`,`Failed to read WebMCP registry: ${n}`)}this.#a.recordToolDisplayTitles(d);let f=d.find(e=>e.name===u);if(!f)return e(`stale`,`WebMCP tool not registered on this page: ${u}`);if(!this.#d(u))return e(`stale`,`WebMCP tool not allowed by client allowlist: ${u}`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let p=this.#a.getToolDisplayTitle(u),m=o(f.annotations),g={toolName:u,...s?{toolCallId:s}:{},args:r,description:f.description,...m?{annotations:m}:{},...p?{title:p}:{},...i?{signal:i}:{},reason:`gate`};if(!(a&&m?.readOnlyHint===!0)&&!await this.#u(g))return e(`denied`,`User declined the tool call.`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let _=new AbortController,v=!1,y=setTimeout(()=>{v=!0,_.abort()},this.#t),b=()=>_.abort();i&&(i.aborted?_.abort():i.addEventListener(`abort`,b,{once:!0}));try{return{ok:!0,raw:await c.executeTool(f,l(r),{signal:_.signal})}}catch(t){if(v)return e(`timeout`,`WebMCP tool '${u}' timed out after ${this.#t}ms`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let n=t instanceof Error?t.message:String(t);return e(`failed`,n)}finally{clearTimeout(y),i&&i.removeEventListener(`abort`,b)}}#s(){return this.config.enabled===!0?(this.#r||=this.#c(),this.#r):Promise.resolve()}async#c(){try{if(this.#l()){this.#n=!0;return}let e=await this.#a.loadPolyfill();`initializeWebMCPPolyfill`in e?e.initializeWebMCPPolyfill():e.installWebMCP(),this.#n=!0}catch(e){n.warn(`Failed to load @mcp-b/webmcp-polyfill: WebMCP consumption disabled.`,e),this.#n=!1}}#l(){if(typeof document>`u`)return null;let e=document.modelContext;if(!e||typeof e!=`object`)return null;let t=e;return typeof t.getTools!=`function`||typeof t.executeTool!=`function`?(this.#i||(this.#i=!0,n.warn(`document.modelContext is present but does not expose getTools()/executeTool(): WebMCP consumption is disabled. Another (incompatible or older) WebMCP polyfill likely installed document.modelContext before Persona. Remove it, or use a polyfill implementing the strict standard surface (e.g. @mcp-b/webmcp-polyfill).`)),null):e}async#u(e){let t=this.#e??p;try{return await t(e)}catch(t){return n.warn(`Confirm handler threw for WebMCP tool '${e.toolName}'; declining.`,t),!1}}#d(e){let t=this.config.allowlist;return!t||t.length===0||t.some(t=>i(e,t))}};const i=(e,t)=>{if(t===`*`)return!0;let n=t.replace(/[.+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`^`+n.replace(/\*/g,`.*`)+`$`).test(e)},a={type:`object`,properties:{}},o=e=>{if(!e||typeof e!=`object`)return;let t={};for(let n of[`readOnlyHint`,`destructiveHint`,`consequentialHint`,`untrustedContentHint`,`idempotentHint`,`openWorldHint`,`debugging`]){let r=e[n];typeof r==`boolean`&&(t[n]=r)}return Object.keys(t).length>0?t:void 0},s=e=>{if(e===void 0||e===``)return{...a};if(typeof e==`object`)return e!==null&&!Array.isArray(e)?e:{...a};try{let t=JSON.parse(e);return typeof t==`object`&&t&&!Array.isArray(t)?t:{...a}}catch{return{...a}}},c=e=>{if(e==null)return{content:[{type:`text`,text:``}]};let t;try{t=JSON.parse(e)}catch{return{content:[{type:`text`,text:e}]}}return typeof t==`object`&&t&&Array.isArray(t.content)?t:{content:[{type:`text`,text:typeof t==`string`?t:g(t)}]}},l=e=>{let t;try{t=JSON.stringify(e)??`{}`}catch{t=`{}`}let n=JSON.parse(t);if(typeof n!=`object`||!n)throw TypeError(`WebMCP tool arguments must be an object or array.`);return Object.defineProperty(n,Symbol.toPrimitive,{value:()=>t}),n},u=e=>({isError:!0,content:[{type:`text`,text:e}]}),d=e=>Array.isArray(e)?e.map(e=>e&&typeof e==`object`&&typeof e.text==`string`?e.text:``).filter(Boolean).join(`
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=(e,t)=>({ok:!1,reason:e,message:t}),t=e=>e.startsWith(`webmcp:`)?e.slice(7):e,n={warn(e,...t){typeof console<`u`&&typeof console.warn==`function`&&console.warn(`[Persona/WebMCP] ${e}`,...t)}};var r=class{#e;#t;#n=!1;#r=null;#i=!1;#a;constructor(e,t){this.config=e,this.#a=t,this.#e=e.onConfirm??null,this.#t=3e4}setConfirmHandler(e){this.#e=e}isOperational(){return this.config.enabled!==!0||!this.#n?!1:this.#l()!==null}async snapshotForDispatch(){if(await this.#s(),this.config.enabled!==!0)return[];let e=this.#l();if(!e)return[];let t;try{t=(await e.getTools()).filter(h)}catch(e){return n.warn(`getTools() threw: shipping an empty WebMCP snapshot.`,e),[]}this.#a.recordToolDisplayTitles(t);let r=typeof location<`u`?location.origin:``;return t.filter(e=>this.#f(e.name)).map(e=>{let t=o(e.annotations);return{name:e.name,description:e.description,parametersSchema:s(e.inputSchema),origin:`webmcp`,...r?{pageOrigin:r}:{},...t?{annotations:t}:{},...t?.untrustedContentHint===!0?{untrustedContentHint:!0}:{}}})}async executeToolCall(e,t,n,r){let i=await this.#o(e,t,n,!1,r);return i.ok?c(i.raw):u(i.message)}async executeVoiceToolCall(e,t,n={}){let r=await this.#o(e,t,n.signal,n.autoConfirmReadOnly===!0);return r.ok?f(r.raw):{status:r.reason===`aborted`?`failed`:r.reason,error:{message:r.message}}}watchToolChanges(e){let t=!1,n=null;return this.#s().then(()=>{if(t||this.config.enabled!==!0)return;let r=this.#l();r&&typeof r.addEventListener==`function`&&(n=r,n.addEventListener(`toolchange`,e))}),()=>{t=!0,n?.removeEventListener(`toolchange`,e),n=null}}async#o(n,r,i,a,s){if(await this.#s(),this.config.enabled!==!0)return e(`failed`,`WebMCP is not enabled on this widget.`);let c=this.#l();if(!c){let t=typeof document<`u`&&!!document.modelContext;return e(`failed`,t?`WebMCP is not operational: document.modelContext is present but does not expose the strict getTools()/executeTool() surface (likely a different or older WebMCP polyfill).`:`WebMCP bridge is not operational on this page (document.modelContext not available).`)}let u=t(n),d;try{d=(await c.getTools()).filter(h)}catch(t){let n=t instanceof Error?t.message:String(t);return e(`failed`,`Failed to read WebMCP registry: ${n}`)}this.#a.recordToolDisplayTitles(d);let f=d.find(e=>e.name===u);if(!f)return e(`stale`,`WebMCP tool not registered on this page: ${u}`);if(!this.#f(u))return e(`stale`,`WebMCP tool not allowed by client allowlist: ${u}`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let p=this.#a.getToolDisplayTitle(u),m=o(f.annotations),g={toolName:u,...s?{toolCallId:s}:{},args:r,description:f.description,...m?{annotations:m}:{},...p?{title:p}:{},...i?{signal:i}:{},reason:`gate`},_=this.#d(u);if(_&&(g.confirmRequired=!0),(_||!a||m?.readOnlyHint!==!0)&&!await this.#u(g))return e(`denied`,`User declined the tool call.`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let v=new AbortController,y=!1,b=setTimeout(()=>{y=!0,v.abort()},this.#t),x=()=>v.abort();i&&(i.aborted?v.abort():i.addEventListener(`abort`,x,{once:!0}));try{return{ok:!0,raw:await c.executeTool(f,l(r),{signal:v.signal})}}catch(t){if(y)return e(`timeout`,`WebMCP tool '${u}' timed out after ${this.#t}ms`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let n=t instanceof Error?t.message:String(t);return e(`failed`,n)}finally{clearTimeout(b),i&&i.removeEventListener(`abort`,x)}}#s(){return this.config.enabled===!0?(this.#r||=this.#c(),this.#r):Promise.resolve()}async#c(){try{if(this.#l()){this.#n=!0;return}let e=await this.#a.loadPolyfill();`initializeWebMCPPolyfill`in e?e.initializeWebMCPPolyfill():e.installWebMCP(),this.#n=!0}catch(e){n.warn(`Failed to load @mcp-b/webmcp-polyfill: WebMCP consumption disabled.`,e),this.#n=!1}}#l(){if(typeof document>`u`)return null;let e=document.modelContext;if(!e||typeof e!=`object`)return null;let t=e;return typeof t.getTools!=`function`||typeof t.executeTool!=`function`?(this.#i||(this.#i=!0,n.warn(`document.modelContext is present but does not expose getTools()/executeTool(): WebMCP consumption is disabled. Another (incompatible or older) WebMCP polyfill likely installed document.modelContext before Persona. Remove it, or use a polyfill implementing the strict standard surface (e.g. @mcp-b/webmcp-polyfill).`)),null):e}async#u(e){let t=this.#e??p;try{return await t(e)}catch(t){return n.warn(`Confirm handler threw for WebMCP tool '${e.toolName}'; declining.`,t),!1}}#d(e){let t;try{t=this.#a.getRequireConfirmFor?.()}catch{t=null}if(t===null)return!0;let n=t=>Array.isArray(t)&&t.some(t=>typeof t==`string`&&i(e,t));return n(this.config.requireConfirmFor)||n(t)}#f(e){let t=this.config.allowlist;return!t||t.length===0||t.some(t=>i(e,t))}};const i=(e,t)=>{if(t===`*`)return!0;let n=t.replace(/[.+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`^`+n.replace(/\*/g,`.*`)+`$`).test(e)},a={type:`object`,properties:{}},o=e=>{if(!e||typeof e!=`object`)return;let t={};for(let n of[`readOnlyHint`,`destructiveHint`,`consequentialHint`,`untrustedContentHint`,`idempotentHint`,`openWorldHint`,`debugging`]){let r=e[n];typeof r==`boolean`&&(t[n]=r)}return Object.keys(t).length>0?t:void 0},s=e=>{if(e===void 0||e===``)return{...a};if(typeof e==`object`)return e!==null&&!Array.isArray(e)?e:{...a};try{let t=JSON.parse(e);return typeof t==`object`&&t&&!Array.isArray(t)?t:{...a}}catch{return{...a}}},c=e=>{if(e==null)return{content:[{type:`text`,text:``}]};let t;try{t=JSON.parse(e)}catch{return{content:[{type:`text`,text:e}]}}return typeof t==`object`&&t&&Array.isArray(t.content)?t:{content:[{type:`text`,text:typeof t==`string`?t:g(t)}]}},l=e=>{let t;try{t=JSON.stringify(e)??`{}`}catch{t=`{}`}let n=JSON.parse(t);if(typeof n!=`object`||!n)throw TypeError(`WebMCP tool arguments must be an object or array.`);return Object.defineProperty(n,Symbol.toPrimitive,{value:()=>t}),n},u=e=>({isError:!0,content:[{type:`text`,text:e}]}),d=e=>Array.isArray(e)?e.map(e=>e&&typeof e==`object`&&typeof e.text==`string`?e.text:``).filter(Boolean).join(`
 `):``,f=e=>{if(e==null)return{status:`completed`};let t;try{t=JSON.parse(e)}catch{return{status:`completed`,result:e}}return typeof t==`object`&&t&&t.isError===!0?{status:`failed`,error:{message:d(t.content)||`The page tool reported an error.`}}:t===void 0?{status:`completed`}:{status:`completed`,result:t}},p=async e=>{if(typeof window>`u`||typeof window.confirm!=`function`)return!1;let t=m(e.args),n=`Allow the AI to call ${e.toolName}`+(t?`\n\nArguments:\n${t}`:``)+(e.description?`\n\n${e.description}`:``);return window.confirm(n)},m=e=>{if(e==null)return``;try{let t=JSON.stringify(e,null,2);return t.length>500?t.slice(0,500)+`…`:t}catch{return String(e)}},h=e=>(e.window===void 0||typeof window<`u`&&e.window===window)&&(e.origin===void 0||typeof location<`u`&&e.origin===location.origin),g=e=>{if(e===void 0)return``;try{return JSON.stringify(e)}catch{return String(e)}};exports.WebMcpBridge=r;

package/dist/webmcp-runtime.d.cts

@@ -1,3 +1,3 @@
-import { n as WebMcpBridgeDeps, t as WebMcpBridge } from "./webmcp-runtime-entry-B8g46vS0.cjs";
+import { n as WebMcpBridgeDeps, t as WebMcpBridge } from "./webmcp-runtime-entry-XNaXa-9h.cjs";
 export { WebMcpBridge, type WebMcpBridgeDeps };
 export {}

package/dist/webmcp-runtime.d.ts

@@ -1,3 +1,3 @@
-import { n as WebMcpBridgeDeps, t as WebMcpBridge } from "./webmcp-runtime-entry-B8g46vS0.js";
+import { n as WebMcpBridgeDeps, t as WebMcpBridge } from "./webmcp-runtime-entry-XNaXa-9h.js";
 export { WebMcpBridge, type WebMcpBridgeDeps };
 export {}

package/dist/webmcp-runtime.js

@@ -1,2 +1,2 @@
-const e=(e,t)=>({ok:!1,reason:e,message:t}),t=e=>e.startsWith(`webmcp:`)?e.slice(7):e,n={warn(e,...t){typeof console<`u`&&typeof console.warn==`function`&&console.warn(`[Persona/WebMCP] ${e}`,...t)}};var r=class{#e;#t;#n=!1;#r=null;#i=!1;#a;constructor(e,t){this.config=e,this.#a=t,this.#e=e.onConfirm??null,this.#t=3e4}setConfirmHandler(e){this.#e=e}isOperational(){return this.config.enabled!==!0||!this.#n?!1:this.#l()!==null}async snapshotForDispatch(){if(await this.#s(),this.config.enabled!==!0)return[];let e=this.#l();if(!e)return[];let t;try{t=(await e.getTools()).filter(h)}catch(e){return n.warn(`getTools() threw: shipping an empty WebMCP snapshot.`,e),[]}this.#a.recordToolDisplayTitles(t);let r=typeof location<`u`?location.origin:``;return t.filter(e=>this.#d(e.name)).map(e=>{let t=o(e.annotations);return{name:e.name,description:e.description,parametersSchema:s(e.inputSchema),origin:`webmcp`,...r?{pageOrigin:r}:{},...t?{annotations:t}:{},...t?.untrustedContentHint===!0?{untrustedContentHint:!0}:{}}})}async executeToolCall(e,t,n,r){let i=await this.#o(e,t,n,!1,r);return i.ok?c(i.raw):u(i.message)}async executeVoiceToolCall(e,t,n={}){let r=await this.#o(e,t,n.signal,n.autoConfirmReadOnly===!0);return r.ok?f(r.raw):{status:r.reason===`aborted`?`failed`:r.reason,error:{message:r.message}}}watchToolChanges(e){let t=!1,n=null;return this.#s().then(()=>{if(t||this.config.enabled!==!0)return;let r=this.#l();r&&typeof r.addEventListener==`function`&&(n=r,n.addEventListener(`toolchange`,e))}),()=>{t=!0,n?.removeEventListener(`toolchange`,e),n=null}}async#o(n,r,i,a,s){if(await this.#s(),this.config.enabled!==!0)return e(`failed`,`WebMCP is not enabled on this widget.`);let c=this.#l();if(!c){let t=typeof document<`u`&&!!document.modelContext;return e(`failed`,t?`WebMCP is not operational: document.modelContext is present but does not expose the strict getTools()/executeTool() surface (likely a different or older WebMCP polyfill).`:`WebMCP bridge is not operational on this page (document.modelContext not available).`)}let u=t(n),d;try{d=(await c.getTools()).filter(h)}catch(t){let n=t instanceof Error?t.message:String(t);return e(`failed`,`Failed to read WebMCP registry: ${n}`)}this.#a.recordToolDisplayTitles(d);let f=d.find(e=>e.name===u);if(!f)return e(`stale`,`WebMCP tool not registered on this page: ${u}`);if(!this.#d(u))return e(`stale`,`WebMCP tool not allowed by client allowlist: ${u}`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let p=this.#a.getToolDisplayTitle(u),m=o(f.annotations),g={toolName:u,...s?{toolCallId:s}:{},args:r,description:f.description,...m?{annotations:m}:{},...p?{title:p}:{},...i?{signal:i}:{},reason:`gate`};if(!(a&&m?.readOnlyHint===!0)&&!await this.#u(g))return e(`denied`,`User declined the tool call.`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let _=new AbortController,v=!1,y=setTimeout(()=>{v=!0,_.abort()},this.#t),b=()=>_.abort();i&&(i.aborted?_.abort():i.addEventListener(`abort`,b,{once:!0}));try{return{ok:!0,raw:await c.executeTool(f,l(r),{signal:_.signal})}}catch(t){if(v)return e(`timeout`,`WebMCP tool '${u}' timed out after ${this.#t}ms`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let n=t instanceof Error?t.message:String(t);return e(`failed`,n)}finally{clearTimeout(y),i&&i.removeEventListener(`abort`,b)}}#s(){return this.config.enabled===!0?(this.#r||=this.#c(),this.#r):Promise.resolve()}async#c(){try{if(this.#l()){this.#n=!0;return}let e=await this.#a.loadPolyfill();`initializeWebMCPPolyfill`in e?e.initializeWebMCPPolyfill():e.installWebMCP(),this.#n=!0}catch(e){n.warn(`Failed to load @mcp-b/webmcp-polyfill: WebMCP consumption disabled.`,e),this.#n=!1}}#l(){if(typeof document>`u`)return null;let e=document.modelContext;if(!e||typeof e!=`object`)return null;let t=e;return typeof t.getTools!=`function`||typeof t.executeTool!=`function`?(this.#i||(this.#i=!0,n.warn(`document.modelContext is present but does not expose getTools()/executeTool(): WebMCP consumption is disabled. Another (incompatible or older) WebMCP polyfill likely installed document.modelContext before Persona. Remove it, or use a polyfill implementing the strict standard surface (e.g. @mcp-b/webmcp-polyfill).`)),null):e}async#u(e){let t=this.#e??p;try{return await t(e)}catch(t){return n.warn(`Confirm handler threw for WebMCP tool '${e.toolName}'; declining.`,t),!1}}#d(e){let t=this.config.allowlist;return!t||t.length===0||t.some(t=>i(e,t))}};const i=(e,t)=>{if(t===`*`)return!0;let n=t.replace(/[.+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`^`+n.replace(/\*/g,`.*`)+`$`).test(e)},a={type:`object`,properties:{}},o=e=>{if(!e||typeof e!=`object`)return;let t={};for(let n of[`readOnlyHint`,`destructiveHint`,`consequentialHint`,`untrustedContentHint`,`idempotentHint`,`openWorldHint`,`debugging`]){let r=e[n];typeof r==`boolean`&&(t[n]=r)}return Object.keys(t).length>0?t:void 0},s=e=>{if(e===void 0||e===``)return{...a};if(typeof e==`object`)return e!==null&&!Array.isArray(e)?e:{...a};try{let t=JSON.parse(e);return typeof t==`object`&&t&&!Array.isArray(t)?t:{...a}}catch{return{...a}}},c=e=>{if(e==null)return{content:[{type:`text`,text:``}]};let t;try{t=JSON.parse(e)}catch{return{content:[{type:`text`,text:e}]}}return typeof t==`object`&&t&&Array.isArray(t.content)?t:{content:[{type:`text`,text:typeof t==`string`?t:g(t)}]}},l=e=>{let t;try{t=JSON.stringify(e)??`{}`}catch{t=`{}`}let n=JSON.parse(t);if(typeof n!=`object`||!n)throw TypeError(`WebMCP tool arguments must be an object or array.`);return Object.defineProperty(n,Symbol.toPrimitive,{value:()=>t}),n},u=e=>({isError:!0,content:[{type:`text`,text:e}]}),d=e=>Array.isArray(e)?e.map(e=>e&&typeof e==`object`&&typeof e.text==`string`?e.text:``).filter(Boolean).join(`
+const e=(e,t)=>({ok:!1,reason:e,message:t}),t=e=>e.startsWith(`webmcp:`)?e.slice(7):e,n={warn(e,...t){typeof console<`u`&&typeof console.warn==`function`&&console.warn(`[Persona/WebMCP] ${e}`,...t)}};var r=class{#e;#t;#n=!1;#r=null;#i=!1;#a;constructor(e,t){this.config=e,this.#a=t,this.#e=e.onConfirm??null,this.#t=3e4}setConfirmHandler(e){this.#e=e}isOperational(){return this.config.enabled!==!0||!this.#n?!1:this.#l()!==null}async snapshotForDispatch(){if(await this.#s(),this.config.enabled!==!0)return[];let e=this.#l();if(!e)return[];let t;try{t=(await e.getTools()).filter(h)}catch(e){return n.warn(`getTools() threw: shipping an empty WebMCP snapshot.`,e),[]}this.#a.recordToolDisplayTitles(t);let r=typeof location<`u`?location.origin:``;return t.filter(e=>this.#f(e.name)).map(e=>{let t=o(e.annotations);return{name:e.name,description:e.description,parametersSchema:s(e.inputSchema),origin:`webmcp`,...r?{pageOrigin:r}:{},...t?{annotations:t}:{},...t?.untrustedContentHint===!0?{untrustedContentHint:!0}:{}}})}async executeToolCall(e,t,n,r){let i=await this.#o(e,t,n,!1,r);return i.ok?c(i.raw):u(i.message)}async executeVoiceToolCall(e,t,n={}){let r=await this.#o(e,t,n.signal,n.autoConfirmReadOnly===!0);return r.ok?f(r.raw):{status:r.reason===`aborted`?`failed`:r.reason,error:{message:r.message}}}watchToolChanges(e){let t=!1,n=null;return this.#s().then(()=>{if(t||this.config.enabled!==!0)return;let r=this.#l();r&&typeof r.addEventListener==`function`&&(n=r,n.addEventListener(`toolchange`,e))}),()=>{t=!0,n?.removeEventListener(`toolchange`,e),n=null}}async#o(n,r,i,a,s){if(await this.#s(),this.config.enabled!==!0)return e(`failed`,`WebMCP is not enabled on this widget.`);let c=this.#l();if(!c){let t=typeof document<`u`&&!!document.modelContext;return e(`failed`,t?`WebMCP is not operational: document.modelContext is present but does not expose the strict getTools()/executeTool() surface (likely a different or older WebMCP polyfill).`:`WebMCP bridge is not operational on this page (document.modelContext not available).`)}let u=t(n),d;try{d=(await c.getTools()).filter(h)}catch(t){let n=t instanceof Error?t.message:String(t);return e(`failed`,`Failed to read WebMCP registry: ${n}`)}this.#a.recordToolDisplayTitles(d);let f=d.find(e=>e.name===u);if(!f)return e(`stale`,`WebMCP tool not registered on this page: ${u}`);if(!this.#f(u))return e(`stale`,`WebMCP tool not allowed by client allowlist: ${u}`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let p=this.#a.getToolDisplayTitle(u),m=o(f.annotations),g={toolName:u,...s?{toolCallId:s}:{},args:r,description:f.description,...m?{annotations:m}:{},...p?{title:p}:{},...i?{signal:i}:{},reason:`gate`},_=this.#d(u);if(_&&(g.confirmRequired=!0),(_||!a||m?.readOnlyHint!==!0)&&!await this.#u(g))return e(`denied`,`User declined the tool call.`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let v=new AbortController,y=!1,b=setTimeout(()=>{y=!0,v.abort()},this.#t),x=()=>v.abort();i&&(i.aborted?v.abort():i.addEventListener(`abort`,x,{once:!0}));try{return{ok:!0,raw:await c.executeTool(f,l(r),{signal:v.signal})}}catch(t){if(y)return e(`timeout`,`WebMCP tool '${u}' timed out after ${this.#t}ms`);if(i?.aborted)return e(`aborted`,`Aborted by cancel()`);let n=t instanceof Error?t.message:String(t);return e(`failed`,n)}finally{clearTimeout(b),i&&i.removeEventListener(`abort`,x)}}#s(){return this.config.enabled===!0?(this.#r||=this.#c(),this.#r):Promise.resolve()}async#c(){try{if(this.#l()){this.#n=!0;return}let e=await this.#a.loadPolyfill();`initializeWebMCPPolyfill`in e?e.initializeWebMCPPolyfill():e.installWebMCP(),this.#n=!0}catch(e){n.warn(`Failed to load @mcp-b/webmcp-polyfill: WebMCP consumption disabled.`,e),this.#n=!1}}#l(){if(typeof document>`u`)return null;let e=document.modelContext;if(!e||typeof e!=`object`)return null;let t=e;return typeof t.getTools!=`function`||typeof t.executeTool!=`function`?(this.#i||(this.#i=!0,n.warn(`document.modelContext is present but does not expose getTools()/executeTool(): WebMCP consumption is disabled. Another (incompatible or older) WebMCP polyfill likely installed document.modelContext before Persona. Remove it, or use a polyfill implementing the strict standard surface (e.g. @mcp-b/webmcp-polyfill).`)),null):e}async#u(e){let t=this.#e??p;try{return await t(e)}catch(t){return n.warn(`Confirm handler threw for WebMCP tool '${e.toolName}'; declining.`,t),!1}}#d(e){let t;try{t=this.#a.getRequireConfirmFor?.()}catch{t=null}if(t===null)return!0;let n=t=>Array.isArray(t)&&t.some(t=>typeof t==`string`&&i(e,t));return n(this.config.requireConfirmFor)||n(t)}#f(e){let t=this.config.allowlist;return!t||t.length===0||t.some(t=>i(e,t))}};const i=(e,t)=>{if(t===`*`)return!0;let n=t.replace(/[.+?^${}()|[\]\\]/g,`\\$&`);return RegExp(`^`+n.replace(/\*/g,`.*`)+`$`).test(e)},a={type:`object`,properties:{}},o=e=>{if(!e||typeof e!=`object`)return;let t={};for(let n of[`readOnlyHint`,`destructiveHint`,`consequentialHint`,`untrustedContentHint`,`idempotentHint`,`openWorldHint`,`debugging`]){let r=e[n];typeof r==`boolean`&&(t[n]=r)}return Object.keys(t).length>0?t:void 0},s=e=>{if(e===void 0||e===``)return{...a};if(typeof e==`object`)return e!==null&&!Array.isArray(e)?e:{...a};try{let t=JSON.parse(e);return typeof t==`object`&&t&&!Array.isArray(t)?t:{...a}}catch{return{...a}}},c=e=>{if(e==null)return{content:[{type:`text`,text:``}]};let t;try{t=JSON.parse(e)}catch{return{content:[{type:`text`,text:e}]}}return typeof t==`object`&&t&&Array.isArray(t.content)?t:{content:[{type:`text`,text:typeof t==`string`?t:g(t)}]}},l=e=>{let t;try{t=JSON.stringify(e)??`{}`}catch{t=`{}`}let n=JSON.parse(t);if(typeof n!=`object`||!n)throw TypeError(`WebMCP tool arguments must be an object or array.`);return Object.defineProperty(n,Symbol.toPrimitive,{value:()=>t}),n},u=e=>({isError:!0,content:[{type:`text`,text:e}]}),d=e=>Array.isArray(e)?e.map(e=>e&&typeof e==`object`&&typeof e.text==`string`?e.text:``).filter(Boolean).join(`
 `):``,f=e=>{if(e==null)return{status:`completed`};let t;try{t=JSON.parse(e)}catch{return{status:`completed`,result:e}}return typeof t==`object`&&t&&t.isError===!0?{status:`failed`,error:{message:d(t.content)||`The page tool reported an error.`}}:t===void 0?{status:`completed`}:{status:`completed`,result:t}},p=async e=>{if(typeof window>`u`||typeof window.confirm!=`function`)return!1;let t=m(e.args),n=`Allow the AI to call ${e.toolName}`+(t?`\n\nArguments:\n${t}`:``)+(e.description?`\n\n${e.description}`:``);return window.confirm(n)},m=e=>{if(e==null)return``;try{let t=JSON.stringify(e,null,2);return t.length>500?t.slice(0,500)+`…`:t}catch{return String(e)}},h=e=>(e.window===void 0||typeof window<`u`&&e.window===window)&&(e.origin===void 0||typeof location<`u`&&e.origin===location.origin),g=e=>{if(e===void 0)return``;try{return JSON.stringify(e)}catch{return String(e)}};export{r as WebMcpBridge};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/persona",
-  "version": "4.34.0",
+  "version": "4.35.1",
   "description": "Themeable, pluggable streaming agent widget for websites, in plain JS with support for voice input and reasoning / tool output.",
   "type": "module",
   "main": "dist/index.cjs",
@@ -235,7 +235,7 @@
     "check:size": "node scripts/check-size.mjs",
     "check:dist-vite8": "node scripts/check-dist-no-in-for-init.mjs",
     "build:styles": "node scripts/build-styles.mjs",
-    "lint": "oxlint",
+    "lint": "node ../../scripts/lint.mjs",
     "typecheck": "pnpm run check:runtype-types && node ../../scripts/typecheck.mjs --noEmit",
     "test": "vitest",
     "test:ui": "vitest --ui",

package/src/client-dispatch.ts

@@ -394,6 +394,8 @@ export class ClientDispatch {
         welcomeMessage: data.config.welcomeMessage,
         placeholder: data.config.placeholder,
         theme: data.config.theme as ClientSession["config"]["theme"],
+        // Kept only as a non-empty array; the bridge ignores non-string entries.
+        ...readWebMcpInitConfig(data.config),
       },
     };
   }
@@ -1087,3 +1089,14 @@ export class ClientDispatch {
   }
 
 }
+
+/** `config.webmcp` from `/v1/client/init`, kept only with a non-empty pattern array. */
+const readWebMcpInitConfig = (
+  config: unknown
+): Pick<ClientSession["config"], "webmcp"> => {
+  const list = (config as { webmcp?: { requireConfirmFor?: unknown } }).webmcp
+    ?.requireConfirmFor;
+  return Array.isArray(list) && list.length
+    ? { webmcp: { requireConfirmFor: list as string[] } }
+    : {};
+};

package/src/client.ts

@@ -181,7 +181,18 @@ export class AgentWidgetClient {
    * matches is superseded, and every SSE frame it still receives is dropped
    */
   #currentClientTurnId: string | null = null;
-  private clientSession: ClientSession | null = null;
+  #clientSession: ClientSession | null = null;
+  /** Last surface `requireConfirmFor` installed with a session; `null` until one loads. */
+  #knownRequireConfirmFor: readonly string[] | null = null;
+  // Every install path assigns here, so the surface policy is recorded the
+  // moment a session lands, not when a tool call next reads it.
+  private get clientSession(): ClientSession | null {
+    return this.#clientSession;
+  }
+  private set clientSession(session: ClientSession | null) {
+    this.#clientSession = session;
+    if (session) this.#knownRequireConfirmFor = session.config?.webmcp?.requireConfirmFor ?? [];
+  }
   #sessionInitPromise: Promise<ClientSession> | null = null;
   /**
    * Early-init latch for `warmSession()`. `false` = armed. Otherwise it holds
@@ -275,6 +286,7 @@ export class AgentWidgetClient {
           recordToolDisplayTitles: recordWebMcpToolDisplayTitles,
           getToolDisplayTitle: getWebMcpToolDisplayTitle,
           loadPolyfill: loadWebMcpPolyfillModule,
+          getRequireConfirmFor: () => this.#surfaceRequireConfirmFor(),
         });
         if (this.#pendingWebMcpConfirmHandler !== undefined) {
           bridge.setConfirmHandler(this.#pendingWebMcpConfirmHandler);
@@ -408,12 +420,35 @@ export class AgentWidgetClient {
         if (!b) {
           return { status: "failed", error: { message: "WebMCP runtime failed to load." } };
         }
-        return b.executeVoiceToolCall(name, args, options);
+        return b.executeVoiceToolCall(name, args, await this.#voiceToolOptions(options));
       },
     };
     return surface;
   }
 
+  /**
+   * The bound surface's `requireConfirmFor` for the WebMCP bridge. Sticky: the
+   * policy of the last installed session survives `clearClientSession()` (same
+   * token, same surface), so a session cleared mid-call cannot drop it. `null`
+   * means client-token mode with no policy loaded yet; the bridge then
+   * confirms every call. `undefined` outside client-token mode.
+   */
+  #surfaceRequireConfirmFor(): readonly string[] | null | undefined {
+    return this.isClientTokenMode() ? this.#knownRequireConfirmFor : undefined;
+  }
+
+  /**
+   * A voice call can start before any typed turn has run client-token init.
+   * Try to load the surface policy first so read-only tools keep their fast
+   * tier; on failure the policy stays unknown and the bridge gates the call.
+   */
+  async #voiceToolOptions<T extends { autoConfirmReadOnly: boolean }>(options: T): Promise<T> {
+    if (options.autoConfirmReadOnly && this.isClientTokenMode() && !this.clientSession) {
+      await this.initSession().catch(() => undefined);
+    }
+    return options;
+  }
+
   public executeWebMcpToolCall(
     wireToolName: string,
     args: unknown,

package/src/client.webmcp-require-confirm.test.ts

@@ -0,0 +1,212 @@
+// @vitest-environment jsdom
+
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { AgentWidgetClient } from "./client";
+import type { AgentWidgetConfig, ClientInitResponse, WebMcpConfirmHandler } from "./types";
+
+const API_URL = "https://api.runtype.com";
+
+const initBody = (config: Record<string, unknown> = {}): ClientInitResponse =>
+  ({
+    sessionId: "sess_1",
+    expiresAt: new Date(Date.now() + 5 * 60_000).toISOString(),
+    flow: { id: "flow_1", name: "Flow", description: null },
+    config: { welcomeMessage: null, placeholder: "Ask...", theme: null, ...config },
+  }) as ClientInitResponse;
+
+const installInit = (body: ClientInitResponse) => {
+  global.fetch = vi.fn(async () => ({
+    ok: true,
+    status: 200,
+    json: async () => body,
+  })) as unknown as typeof fetch;
+};
+
+const makeClient = (webmcp?: AgentWidgetConfig["webmcp"]) =>
+  new AgentWidgetClient({
+    apiUrl: API_URL,
+    clientToken: "ct_live_x",
+    ...(webmcp ? { webmcp } : {}),
+  });
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  delete (document as Document & { modelContext?: unknown }).modelContext;
+});
+
+describe("client-token init: config.webmcp.requireConfirmFor", () => {
+  it("keeps the surface's patterns on the session", async () => {
+    installInit(initBody({ webmcp: { requireConfirmFor: ["checkout_*"] } }));
+    const session = await makeClient().initSession();
+    expect(session.config.webmcp).toEqual({ requireConfirmFor: ["checkout_*"] });
+  });
+
+  it.each([
+    ["absent", {}],
+    ["empty", { webmcp: { requireConfirmFor: [] } }],
+    ["malformed", { webmcp: { requireConfirmFor: "checkout_*" } }],
+  ])("omits config.webmcp when the list is %s", async (_label, config) => {
+    installInit(initBody(config));
+    const session = await makeClient().initSession();
+    expect(session.config).not.toHaveProperty("webmcp");
+  });
+});
+
+describe("client-token init feeds the WebMCP confirm gate", () => {
+  it("flags a matched page tool for the host's onConfirm after init", async () => {
+    const execute = vi.fn(async () => JSON.stringify("ran"));
+    (document as Document & { modelContext?: unknown }).modelContext = {
+      getTools: async () => [
+        { name: "checkout_submit", description: "Place the order", title: "", window, origin: location.origin },
+        { name: "search", description: "Search", title: "", window, origin: location.origin },
+      ],
+      executeTool: execute,
+    };
+    installInit(initBody({ webmcp: { requireConfirmFor: ["checkout_*"] } }));
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => true);
+    const client = makeClient({ enabled: true, onConfirm });
+    await client.initSession();
+
+    await client.executeWebMcpToolCall("webmcp:checkout_submit", {});
+    await client.executeWebMcpToolCall("webmcp:search", {});
+
+    expect(onConfirm).toHaveBeenCalledTimes(2);
+    expect(onConfirm.mock.calls[0]?.[0]).toMatchObject({
+      toolName: "checkout_submit",
+      confirmRequired: true,
+    });
+    expect(onConfirm.mock.calls[1]?.[0]).not.toHaveProperty("confirmRequired");
+    expect(execute).toHaveBeenCalledTimes(2);
+  });
+});
+
+describe("voice before any client-token init", () => {
+  const installReadOnlyTools = () => {
+    (document as Document & { modelContext?: unknown }).modelContext = {
+      getTools: async () =>
+        ["checkout_preview", "next_slide"].map((name) => ({
+          name,
+          description: name,
+          title: "",
+          window,
+          origin: location.origin,
+          annotations: { readOnlyHint: true },
+        })),
+      executeTool: vi.fn(async () => JSON.stringify("ran")),
+    };
+  };
+  const voiceExecute = (client: AgentWidgetClient, name: string) =>
+    client
+      .getVoiceClientTools()!
+      .execute(name, {}, { signal: new AbortController().signal, autoConfirmReadOnly: true });
+
+  it("loads the surface policy so a matched read-only tool still confirms", async () => {
+    installReadOnlyTools();
+    installInit(initBody({ webmcp: { requireConfirmFor: ["checkout_*"] } }));
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => false);
+    const client = makeClient({ enabled: true, onConfirm });
+
+    const matched = await voiceExecute(client, "webmcp:checkout_preview");
+    const unmatched = await voiceExecute(client, "webmcp:next_slide");
+
+    expect(global.fetch).toHaveBeenCalledTimes(1);
+    expect(onConfirm).toHaveBeenCalledTimes(1);
+    expect(onConfirm.mock.calls[0]?.[0]).toMatchObject({
+      toolName: "checkout_preview",
+      confirmRequired: true,
+    });
+    expect(matched.status).toBe("denied");
+    expect(unmatched.status).toBe("completed");
+  });
+
+  it("keeps every voice call gated when init fails", async () => {
+    installReadOnlyTools();
+    global.fetch = vi.fn(async () => {
+      throw new Error("offline");
+    }) as unknown as typeof fetch;
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => false);
+    const client = makeClient({ enabled: true, onConfirm });
+
+    const result = await voiceExecute(client, "webmcp:next_slide");
+
+    expect(onConfirm).toHaveBeenCalledTimes(1);
+    expect(result.status).toBe("denied");
+  });
+});
+
+describe("surface policy lifetime", () => {
+  const installTools = () => {
+    (document as Document & { modelContext?: unknown }).modelContext = {
+      getTools: async () =>
+        ["checkout_submit", "search"].map((name) => ({
+          name,
+          description: name,
+          title: "",
+          window,
+          origin: location.origin,
+        })),
+      executeTool: vi.fn(async () => JSON.stringify("ran")),
+    };
+  };
+
+  it("keeps the last loaded policy after clearClientSession()", async () => {
+    installTools();
+    installInit(initBody({ webmcp: { requireConfirmFor: ["checkout_*"] } }));
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => true);
+    const client = makeClient({ enabled: true, onConfirm });
+    await client.initSession();
+    // Read the policy once while the session is live, then drop the session.
+    await client.executeWebMcpToolCall("webmcp:search", {});
+    client.clearClientSession();
+
+    await client.executeWebMcpToolCall("webmcp:checkout_submit", {});
+    await client.executeWebMcpToolCall("webmcp:search", {});
+
+    expect(onConfirm.mock.calls.map((c) => c[0]?.confirmRequired)).toEqual([
+      undefined,
+      true,
+      undefined,
+    ]);
+  });
+
+  it("records a policy when a session installs, not when a call reads it", async () => {
+    installTools();
+    // First session: no policy. A tool call reads (and would have cached) [].
+    installInit(initBody());
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => true);
+    const client = makeClient({ enabled: true, onConfirm });
+    await client.initSession();
+    await client.executeWebMcpToolCall("webmcp:checkout_submit", {});
+
+    // Second session adds a policy, then is cleared before any tool call reads it.
+    client.clearClientSession();
+    installInit(initBody({ webmcp: { requireConfirmFor: ["checkout_*"] } }));
+    await client.initSession();
+    client.clearClientSession();
+
+    await client.executeWebMcpToolCall("webmcp:checkout_submit", {});
+
+    expect(onConfirm.mock.calls.map((c) => c[0]?.confirmRequired)).toEqual([undefined, true]);
+  });
+
+  it("flags every call while no client-token policy has loaded", async () => {
+    installTools();
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => true);
+    const client = makeClient({ enabled: true, onConfirm });
+
+    await client.executeWebMcpToolCall("webmcp:search", {});
+
+    expect(onConfirm.mock.calls[0]?.[0]).toMatchObject({ toolName: "search", confirmRequired: true });
+  });
+
+  it("leaves proxy mode (no client token) unflagged", async () => {
+    installTools();
+    const onConfirm = vi.fn<WebMcpConfirmHandler>(async () => true);
+    const client = new AgentWidgetClient({ apiUrl: API_URL, webmcp: { enabled: true, onConfirm } });
+
+    await client.executeWebMcpToolCall("webmcp:checkout_submit", {});
+
+    expect(onConfirm.mock.calls[0]?.[0]).not.toHaveProperty("confirmRequired");
+  });
+});

package/src/components/composer-model-picker.ts

@@ -18,25 +18,12 @@ import { createPopover, type PopoverHandle } from "../plugin-kit";
 import type { ComposerCustomAction, ComposerModel } from "../types";
 import { createElement, createNode } from "../utils/dom";
 import type { renderLucideIcon } from "../utils/icons";
-import { forwardMenuTokens } from "./composer-tokens";
 
 export const COMPOSER_MODEL_PICKER_ACTION_ID = "core:model";
 export const COMPOSER_MODEL_PICKER_ORDER = 700;
 
 const ROW_ICON_SIZE = 16;
 
-/**
- * Tokens the popover panel reads, forwarded onto the portaled panel on every
- * open; unset ones clear so the stylesheet's fallbacks stand.
- */
-const MENU_TOKEN_VARS = [
-  "--persona-components-composer-modelPicker-menuBackground",
-  "--persona-components-composer-modelPicker-menuBorderRadius",
-  "--persona-components-composer-modelPicker-rowHoverBackground",
-  "--persona-components-composer-modelPicker-labelColor",
-  "--persona-components-composer-modelPicker-descriptionColor",
-] as const;
-
 export interface ComposerModelPickerOptions {
   renderIcon: typeof renderLucideIcon;
   getModels: () => ReadonlyArray<ComposerModel>;
@@ -212,7 +199,6 @@ export function createComposerModelPickerAction(
           onDismiss: () => trigger.setAttribute("aria-expanded", "false"),
         });
       }
-      forwardMenuTokens(trigger, menu, MENU_TOKEN_VARS);
       popover.open();
       trigger.setAttribute("aria-expanded", "true");
       const ids = [...rows.keys()];

package/src/components/composer-overflow-menu.ts

@@ -22,7 +22,6 @@ import {
   COMPOSER_CONTROL_CLASS,
   COMPOSER_CONTROL_GLYPH_CLASS,
   COMPOSER_CONTROL_ICON_FALLBACK_PX,
-  forwardMenuTokens,
 } from "./composer-tokens";
 
 export interface ComposerOverflowMenuOptions {
@@ -66,19 +65,6 @@ export interface ComposerOverflowMenu {
 const focusableSelector =
   'button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])';
 
-/**
- * Panel surface tokens, forwarded onto the portaled panel on every open; unset
- * ones clear so the stylesheet's fallbacks stand.
- */
-const MENU_TOKEN_VARS = [
-  "--persona-components-composer-overflowMenu-background",
-  "--persona-components-composer-overflowMenu-borderColor",
-  "--persona-components-composer-overflowMenu-borderRadius",
-  "--persona-components-composer-overflowMenu-foreground",
-  "--persona-components-composer-overflowMenu-shadow",
-  ...["padding", "rowGap", "rowPadding", "rowBorderRadius", "fontSize", "lineHeight", "iconSize", "iconGap", "hoverBackground", "focusBackground", "descriptionColor", "descriptionFontSize", "dividerColor", "dividerSpacing", "minWidth", "maxHeight"].map((name) => `--persona-components-composer-overflowMenu-${name}`),
-] as const;
-
 /**
  * Set on the menu row that holds keyboard focus. Rows that shade on
  * `:focus-visible` do not need it; wrapper rows around a live control do.
@@ -296,7 +282,6 @@ export function createComposerOverflowMenu(
   };
 
   const refresh = (): void => {
-    forwardMenuTokens(triggerButton, panel, MENU_TOKEN_VARS);
     panel.setAttribute("data-persona-menu-description-layout", options.getConfig?.()?.descriptionLayout ?? "stacked");
     const width = options.getConfig?.()?.width;
     panel.style.width = width === "composer"

package/src/components/composer-tokens.ts

@@ -12,23 +12,3 @@ export const COMPOSER_CONTROL_GLYPH_CLASS = "persona-composer-control--glyph";
 export const COMPOSER_CONTROL_FALLBACK_PX = 40;
 /** Icon-size token default in CSS pixels, for the same JS-derived cases. */
 export const COMPOSER_CONTROL_ICON_FALLBACK_PX = 24;
-
-/**
- * Forward theme vars onto a portaled menu panel, which lives outside the
- * themed mount. The panel is reused across opens, so an unset var must clear
- * any previously stamped value for the stylesheet fallback to paint again.
- */
-export const forwardMenuTokens = (
-  from: HTMLElement,
-  to: HTMLElement,
-  names: readonly string[]
-): void => {
-  const view = from.ownerDocument?.defaultView;
-  if (!view) return;
-  const computed = view.getComputedStyle(from);
-  for (const name of names) {
-    const value = computed.getPropertyValue(name).trim();
-    if (value) to.style.setProperty(name, value);
-    else to.style.removeProperty(name);
-  }
-};

package/src/generated/runtype-openapi-contract.ts

@@ -36,6 +36,12 @@ export type RuntypeExecutionStreamEvent = ({
   iterations?: number;
   kind: "agent" | "flow";
   outcome?: "completed" | "error" | "aborted";
+  output?: {
+  validation?: {
+  errored?: Array<string>;
+  failed?: Array<string>;
+};
+};
   seq: number;
   stepErrorCount?: number;
   stopReason?: string;
@@ -48,7 +54,12 @@ export type RuntypeExecutionStreamEvent = ({
   output: number;
 };
   totalTokensUsed?: number;
+  truncatedStepCount?: number;
   type: "execution_complete";
+  warnings?: Array<{
+  code: string;
+  message: string;
+}>;
 }) | ({
   blockReason?: string;
   code?: string;
@@ -216,6 +227,7 @@ export type RuntypeExecutionStreamEvent = ({
 };
   success?: boolean;
   tokensUsed?: number;
+  truncated?: boolean;
   type: "step_complete";
   unresolvedVariables?: Array<string>;
 }) | {
@@ -439,6 +451,7 @@ export type RuntypeExecutionStreamEvent = ({
   toolCallId: string;
   type: "tool_output_delta";
 } | {
+  completedAt?: string;
   error?: string;
   executionId: string;
   executionTime?: number;