@solidxai/core-ui 0.1.19-beta.0 → 0.1.19

package/dist/components/core/solid-agent/client/agentAuth.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Agent login (same flow as the SolidX agent-ui).
+ *
+ * The user pastes a Solid API key once; POST <backend>/api/agent/api-keys/me (with the agentId, if
+ * any) checks it with Solid and returns a random `agentToken`, a few public user fields, and where
+ * to chat: `wsUrl` for the WebSocket and `httpUrl` for the REST calls. The configured backend URL is
+ * only used to sign in and out. The API key stays on the agent server. The UI keeps the reply in
+ * sessionStorage, so it is gone when the tab closes, and sends the agentToken on every WebSocket
+ * frame and REST call. One entry per agent URL (backend + agent id).
+ * An entry is also tied to the Solid user who created it, so another user in the same tab never
+ * reuses it.
+ */
+export type AgentUser = {
+    id?: number | string;
+    username?: string;
+    email?: string;
+    mobile?: string;
+    [key: string]: unknown;
+};
+export type AgentAuth = {
+    agentToken: string;
+    user: AgentUser;
+    solidUserId: string | null;
+    /** WebSocket URL to chat on. */
+    wsUrl: string;
+    /** Base URL for the REST calls (sessions, history). */
+    httpUrl: string;
+};
+export type AgentSignInResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    status: number;
+};
+type Listener = () => void;
+export type AgentBootstrap = Pick<AgentAuth, "agentToken" | "wsUrl" | "httpUrl" | "user">;
+export declare function isExternalAgentAuth(agentUrl: string): boolean;
+export declare function registerExternalAgentAuth(agentUrl: string, renew: () => Promise<AgentAuth>): {
+    setAuth(auth: AgentAuth): void;
+    dispose(): void;
+};
+export declare function renewExternalAgentAuth(agentUrl: string): Promise<void>;
+/** The stored login for this agent backend, if it belongs to the signed-in Solid user. */
+export declare function loadAgentAuth(agentUrl: string): Promise<AgentAuth | null>;
+export declare function clearAgentAuth(agentUrl: string): void;
+/**
+ * Signs out of the agent: forgets the login in this tab and asks the sign-in backend to forget the
+ * token too (`DELETE /api/agent/api-keys/me`). A backend without that call just lets the token expire.
+ */
+export declare function signOutOfAgent(agentUrl: string): Promise<void>;
+/** Forget every agent login in this tab (e.g. on logout). */
+export declare function clearAllAgentAuth(): void;
+/** The chat's full WebSocket endpoint, as named at sign-in; null until signed in. */
+export declare function agentWsUrl(agentUrl: string): string | null;
+/** Checks the process named by the most recent AgentHub login before reusing its WebSocket URL. */
+export declare function isAgentProcessAvailable(auth: AgentAuth): Promise<boolean>;
+/** Exchanges a Solid API key for an agentToken and stores it for this tab. */
+export declare function signInWithApiKey(agentUrl: string, apiKey: string): Promise<AgentSignInResult>;
+/** Calls `listener` whenever this agent backend's login is stored or cleared. Returns an unsubscribe. */
+export declare function onAgentAuthChange(agentUrl: string, listener: Listener): () => void;
+export {};
+//# sourceMappingURL=agentAuth.d.ts.map

package/dist/components/core/solid-agent/client/agentAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentAuth.d.ts","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/client/agentAuth.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,SAAS,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7H,MAAM,MAAM,SAAS,GAAG;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAI5F,KAAK,QAAQ,GAAG,MAAM,IAAI,CAAC;AAM3B,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,CAAC;AAE1F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAA+C;AAE7G,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC;kBAKrE,SAAS;;EAG9B;AAED,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS5E;AAoCD,0FAA0F;AAC1F,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAU/E;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,QAc9C;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,iBASpD;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,SAShC;AAED,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1D;AAED,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB/E;AAED,8EAA8E;AAC9E,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiCnG;AAED,yGAAyG;AACzG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,cAOrE"}

package/dist/components/core/solid-agent/client/agentAuth.js

@@ -0,0 +1,307 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+import { getSession } from "../../../../adapters/auth/getSession";
+import { agentIdOf, toHttpBase } from "./agentUrls";
+var STORAGE_PREFIX = "solidx.agent-session:";
+var listeners = new Map();
+// Embed credentials never enter browser storage or depend on a Solid admin login.
+var external = new Map();
+export function isExternalAgentAuth(agentUrl) { return external.has(loginScope(agentUrl)); }
+export function registerExternalAgentAuth(agentUrl, renew) {
+    var scope = loginScope(agentUrl);
+    var entry = { auth: null, renew: renew };
+    external.set(scope, entry);
+    return {
+        setAuth: function (auth) { entry.auth = auth; notify(agentUrl); },
+        dispose: function () { if (external.get(scope) === entry) {
+            external.delete(scope);
+            notify(agentUrl);
+        } },
+    };
+}
+export function renewExternalAgentAuth(agentUrl) {
+    return __awaiter(this, void 0, void 0, function () {
+        var entry;
+        return __generator(this, function (_a) {
+            entry = external.get(loginScope(agentUrl));
+            if (!entry)
+                return [2 /*return*/];
+            if (!entry.pending) {
+                entry.pending = entry.renew().then(function (auth) {
+                    if (external.get(loginScope(agentUrl)) === entry) {
+                        entry.auth = auth;
+                        notify(agentUrl);
+                    }
+                }).finally(function () { entry.pending = undefined; });
+            }
+            return [2 /*return*/, entry.pending];
+        });
+    });
+}
+/** One login per backend and agent. */
+function loginScope(agentUrl) {
+    if (/[?&]embedInstance=/.test(agentUrl))
+        return agentUrl;
+    var agentId = agentIdOf(agentUrl);
+    return agentId === undefined ? toHttpBase(agentUrl) : "".concat(toHttpBase(agentUrl), "?agentId=").concat(agentId);
+}
+function storageKey(agentUrl) {
+    return "".concat(STORAGE_PREFIX).concat(loginScope(agentUrl));
+}
+function notify(agentUrl) {
+    var _a;
+    (_a = listeners.get(loginScope(agentUrl))) === null || _a === void 0 ? void 0 : _a.forEach(function (listener) { return listener(); });
+}
+function currentSolidUserId() {
+    var _a;
+    return __awaiter(this, void 0, void 0, function () {
+        var session, id;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, getSession()];
+                case 1:
+                    session = _b.sent();
+                    id = (_a = session === null || session === void 0 ? void 0 : session.user) === null || _a === void 0 ? void 0 : _a.id;
+                    return [2 /*return*/, id === undefined || id === null ? null : String(id)];
+            }
+        });
+    });
+}
+function readStored(agentUrl) {
+    var embed = external.get(loginScope(agentUrl));
+    if (embed)
+        return embed.auth;
+    try {
+        var raw = sessionStorage.getItem(storageKey(agentUrl));
+        var parsed = raw ? JSON.parse(raw) : null;
+        // Entries from before sign-in returned wsUrl/httpUrl are dropped, so the user signs in again.
+        return (parsed === null || parsed === void 0 ? void 0 : parsed.agentToken) && parsed.wsUrl && parsed.httpUrl ? parsed : null;
+    }
+    catch (_a) {
+        return null;
+    }
+}
+/** The stored login for this agent backend, if it belongs to the signed-in Solid user. */
+export function loadAgentAuth(agentUrl) {
+    return __awaiter(this, void 0, void 0, function () {
+        var embed, stored, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    embed = external.get(loginScope(agentUrl));
+                    if (embed)
+                        return [2 /*return*/, embed.auth];
+                    stored = readStored(agentUrl);
+                    if (!stored)
+                        return [2 /*return*/, null];
+                    _a = stored.solidUserId;
+                    return [4 /*yield*/, currentSolidUserId()];
+                case 1:
+                    if (_a !== (_b.sent())) {
+                        clearAgentAuth(agentUrl);
+                        return [2 /*return*/, null];
+                    }
+                    return [2 /*return*/, stored];
+            }
+        });
+    });
+}
+export function clearAgentAuth(agentUrl) {
+    var embed = external.get(loginScope(agentUrl));
+    if (embed) {
+        embed.auth = null;
+        notify(agentUrl);
+        void renewExternalAgentAuth(agentUrl).catch(function () { });
+        return;
+    }
+    try {
+        sessionStorage.removeItem(storageKey(agentUrl));
+    }
+    catch (_a) {
+        // Storage blocked: nothing was stored.
+    }
+    notify(agentUrl);
+}
+/**
+ * Signs out of the agent: forgets the login in this tab and asks the sign-in backend to forget the
+ * token too (`DELETE /api/agent/api-keys/me`). A backend without that call just lets the token expire.
+ */
+export function signOutOfAgent(agentUrl) {
+    return __awaiter(this, void 0, void 0, function () {
+        var stored, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    stored = readStored(agentUrl);
+                    clearAgentAuth(agentUrl);
+                    if (!stored)
+                        return [2 /*return*/];
+                    _b.label = 1;
+                case 1:
+                    _b.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, fetch("".concat(toHttpBase(agentUrl), "/api/agent/api-keys/me"), { method: "DELETE", headers: { Authorization: "Bearer ".concat(stored.agentToken) } })];
+                case 2:
+                    _b.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    _a = _b.sent();
+                    return [3 /*break*/, 4];
+                case 4: return [2 /*return*/];
+            }
+        });
+    });
+}
+/** Forget every agent login in this tab (e.g. on logout). */
+export function clearAllAgentAuth() {
+    try {
+        Object.keys(sessionStorage)
+            .filter(function (key) { return key.startsWith(STORAGE_PREFIX); })
+            .forEach(function (key) { return sessionStorage.removeItem(key); });
+    }
+    catch (_a) {
+        // Storage blocked: nothing was stored.
+    }
+    listeners.forEach(function (set) { return set.forEach(function (listener) { return listener(); }); });
+}
+/** The chat's full WebSocket endpoint, as named at sign-in; null until signed in. */
+export function agentWsUrl(agentUrl) {
+    var _a, _b;
+    return (_b = (_a = readStored(agentUrl)) === null || _a === void 0 ? void 0 : _a.wsUrl) !== null && _b !== void 0 ? _b : null;
+}
+/** Checks the process named by the most recent AgentHub login before reusing its WebSocket URL. */
+export function isAgentProcessAvailable(auth) {
+    return __awaiter(this, void 0, void 0, function () {
+        var controller, timeout, response, body, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    controller = new AbortController();
+                    timeout = window.setTimeout(function () { return controller.abort(); }, 5000);
+                    _b.label = 1;
+                case 1:
+                    _b.trys.push([1, 4, 5, 6]);
+                    return [4 /*yield*/, fetch("".concat(auth.httpUrl.replace(/\/$/, ""), "/health"), {
+                            cache: "no-store",
+                            signal: controller.signal,
+                        })];
+                case 2:
+                    response = _b.sent();
+                    if (!response.ok)
+                        return [2 /*return*/, false];
+                    return [4 /*yield*/, response.json().catch(function () { return null; })];
+                case 3:
+                    body = _b.sent();
+                    return [2 /*return*/, (body === null || body === void 0 ? void 0 : body.status) === "ready"];
+                case 4:
+                    _a = _b.sent();
+                    return [2 /*return*/, false];
+                case 5:
+                    window.clearTimeout(timeout);
+                    return [7 /*endfinally*/];
+                case 6: return [2 /*return*/];
+            }
+        });
+    });
+}
+/** Exchanges a Solid API key for an agentToken and stores it for this tab. */
+export function signInWithApiKey(agentUrl, apiKey) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function () {
+        var key, res, body, detail, auth, error_1;
+        var _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    key = apiKey.trim();
+                    if (!key)
+                        return [2 /*return*/, { ok: false, error: "Enter your API key.", status: 0 }];
+                    _c.label = 1;
+                case 1:
+                    _c.trys.push([1, 5, , 6]);
+                    return [4 /*yield*/, fetch("".concat(toHttpBase(agentUrl), "/api/agent/api-keys/me"), {
+                            method: "POST",
+                            headers: { "Content-Type": "application/json" },
+                            body: JSON.stringify({ apiKey: key, agentId: agentIdOf(agentUrl) }),
+                        })];
+                case 2:
+                    res = _c.sent();
+                    return [4 /*yield*/, res.json().catch(function () { return null; })];
+                case 3:
+                    body = _c.sent();
+                    if (!res.ok) {
+                        detail = typeof (body === null || body === void 0 ? void 0 : body.detail) === "string" ? body.detail : null;
+                        return [2 /*return*/, { ok: false, error: detail !== null && detail !== void 0 ? detail : "Sign-in failed (HTTP ".concat(res.status, ")."), status: res.status }];
+                    }
+                    if (typeof (body === null || body === void 0 ? void 0 : body.agentToken) !== "string" || !body.agentToken) {
+                        return [2 /*return*/, { ok: false, error: "The agent did not return a token.", status: res.status }];
+                    }
+                    if (typeof body.wsUrl !== "string" || !body.wsUrl || typeof body.httpUrl !== "string" || !body.httpUrl) {
+                        return [2 /*return*/, { ok: false, error: "The agent did not say where to connect.", status: res.status }];
+                    }
+                    _b = {
+                        agentToken: body.agentToken,
+                        user: (_a = body.user) !== null && _a !== void 0 ? _a : {}
+                    };
+                    return [4 /*yield*/, currentSolidUserId()];
+                case 4:
+                    auth = (_b.solidUserId = _c.sent(),
+                        _b.wsUrl = body.wsUrl,
+                        _b.httpUrl = body.httpUrl,
+                        _b);
+                    sessionStorage.setItem(storageKey(agentUrl), JSON.stringify(auth));
+                    notify(agentUrl);
+                    return [2 /*return*/, { ok: true }];
+                case 5:
+                    error_1 = _c.sent();
+                    return [2 /*return*/, { ok: false, error: error_1 instanceof Error ? error_1.message : "Could not reach the agent.", status: 0 }];
+                case 6: return [2 /*return*/];
+            }
+        });
+    });
+}
+/** Calls `listener` whenever this agent backend's login is stored or cleared. Returns an unsubscribe. */
+export function onAgentAuthChange(agentUrl, listener) {
+    var base = loginScope(agentUrl);
+    if (!listeners.has(base))
+        listeners.set(base, new Set());
+    listeners.get(base).add(listener);
+    return function () {
+        var _a;
+        (_a = listeners.get(base)) === null || _a === void 0 ? void 0 : _a.delete(listener);
+    };
+}
+//# sourceMappingURL=agentAuth.js.map

package/dist/components/core/solid-agent/client/agentAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentAuth.js","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/client/agentAuth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BpD,IAAM,cAAc,GAAG,uBAAuB,CAAC;AAG/C,IAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEnD,kFAAkF;AAClF,IAAM,QAAQ,GAAG,IAAI,GAAG,EAAgG,CAAC;AAIzH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,IAAa,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7G,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,KAA+B;IACvF,IAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAM,KAAK,GAAG,EAAE,IAAI,EAAE,IAAwB,EAAE,KAAK,OAAA,EAAE,CAAC;IACxD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO;QACH,OAAO,YAAC,IAAe,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,gBAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE;YAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SAAE,CAAC,CAAC;KACjG,CAAC;AACN,CAAC;AAED,MAAM,UAAgB,sBAAsB,CAAC,QAAgB;;;;YACnD,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK;gBAAE,sBAAO;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAChB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,UAAC,IAAI;oBACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,KAAK,EAAE;wBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;wBAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;qBAAE;gBAC9F,CAAC,CAAC,CAAC,OAAO,CAAC,cAAQ,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;aACpD;YACD,sBAAO,KAAK,CAAC,OAAO,EAAC;;;CACxB;AAED,uCAAuC;AACvC,SAAS,UAAU,CAAC,QAAgB;IAChC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzD,IAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAG,UAAU,CAAC,QAAQ,CAAC,sBAAY,OAAO,CAAE,CAAC;AACvG,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAChC,OAAO,UAAG,cAAc,SAAG,UAAU,CAAC,QAAQ,CAAC,CAAE,CAAC;AACtD,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;;IAC5B,MAAA,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,0CAAE,OAAO,CAAC,UAAC,QAAQ,IAAK,OAAA,QAAQ,EAAE,EAAV,CAAU,CAAC,CAAC;AAC3E,CAAC;AAED,SAAe,kBAAkB;;;;;;wBACb,qBAAM,UAAU,EAAE,EAAA;;oBAA5B,OAAO,GAAG,SAAkB;oBAC5B,EAAE,GAAG,MAAC,OAAe,aAAf,OAAO,uBAAP,OAAO,CAAU,IAAI,0CAAE,EAAE,CAAC;oBACtC,sBAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC;;;;CAC9D;AAED,SAAS,UAAU,CAAC,QAAgB;IAChC,IAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC7B,IAAI;QACA,IAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,IAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,8FAA8F;QAC9F,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,KAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;KAC/E;IAAC,WAAM;QACJ,OAAO,IAAI,CAAC;KACf;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAgB,aAAa,CAAC,QAAgB;;;;;;oBAC1C,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACjD,IAAI,KAAK;wBAAE,sBAAO,KAAK,CAAC,IAAI,EAAC;oBACvB,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACpC,IAAI,CAAC,MAAM;wBAAE,sBAAO,IAAI,EAAC;oBACrB,KAAA,MAAM,CAAC,WAAW,CAAA;oBAAM,qBAAM,kBAAkB,EAAE,EAAA;;oBAAtD,IAAI,OAAuB,CAAC,SAA0B,CAAC,EAAE;wBACrD,cAAc,CAAC,QAAQ,CAAC,CAAC;wBACzB,sBAAO,IAAI,EAAC;qBACf;oBACD,sBAAO,MAAM,EAAC;;;;CACjB;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC3C,IAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE;QACP,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjB,KAAK,sBAAsB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,cAAqE,CAAC,CAAC,CAAC;QACpH,OAAO;KACV;IACD,IAAI;QACA,cAAc,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;KACnD;IAAC,WAAM;QACJ,uCAAuC;KAC1C;IACD,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,cAAc,CAAC,QAAgB;;;;;;oBAC3C,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACpC,cAAc,CAAC,QAAQ,CAAC,CAAC;oBACzB,IAAI,CAAC,MAAM;wBAAE,sBAAO;;;;oBAEhB,qBAAM,KAAK,CAAC,UAAG,UAAU,CAAC,QAAQ,CAAC,2BAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,MAAM,CAAC,UAAU,CAAE,EAAE,EAAE,CAAC,EAAA;;oBAA7I,SAA6I,CAAC;;;;;;;;;CAIrJ;AAED,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB;IAC7B,IAAI;QACA,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;aACtB,MAAM,CAAC,UAAC,GAAG,IAAK,OAAA,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAA9B,CAA8B,CAAC;aAC/C,OAAO,CAAC,UAAC,GAAG,IAAK,OAAA,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAA9B,CAA8B,CAAC,CAAC;KACzD;IAAC,WAAM;QACJ,uCAAuC;KAC1C;IACD,SAAS,CAAC,OAAO,CAAC,UAAC,GAAG,IAAK,OAAA,GAAG,CAAC,OAAO,CAAC,UAAC,QAAQ,IAAK,OAAA,QAAQ,EAAE,EAAV,CAAU,CAAC,EAArC,CAAqC,CAAC,CAAC;AACtE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,QAAgB;;IACvC,OAAO,MAAA,MAAA,UAAU,CAAC,QAAQ,CAAC,0CAAE,KAAK,mCAAI,IAAI,CAAC;AAC/C,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAgB,uBAAuB,CAAC,IAAe;;;;;;oBACnD,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;oBACnC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,cAAM,OAAA,UAAU,CAAC,KAAK,EAAE,EAAlB,CAAkB,EAAE,IAAI,CAAC,CAAC;;;;oBAE7C,qBAAM,KAAK,CAAC,UAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAS,EAAE;4BACtE,KAAK,EAAE,UAAU;4BACjB,MAAM,EAAE,UAAU,CAAC,MAAM;yBAC5B,CAAC,EAAA;;oBAHI,QAAQ,GAAG,SAGf;oBACF,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,sBAAO,KAAK,EAAC;oBAClB,qBAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,IAAI,EAAJ,CAAI,CAAC,EAAA;;oBAA9C,IAAI,GAAG,SAAuC;oBACpD,sBAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,MAAK,OAAO,EAAC;;;oBAEhC,sBAAO,KAAK,EAAC;;oBAEb,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;;;;;;CAEpC;AAED,8EAA8E;AAC9E,MAAM,UAAgB,gBAAgB,CAAC,QAAgB,EAAE,MAAc;;;;;;;;oBAC7D,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC1B,IAAI,CAAC,GAAG;wBAAE,sBAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,EAAC;;;;oBAExD,qBAAM,KAAK,CAAC,UAAG,UAAU,CAAC,QAAQ,CAAC,2BAAwB,EAAE;4BACrE,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;yBACtE,CAAC,EAAA;;oBAJI,GAAG,GAAG,SAIV;oBACW,qBAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,cAAM,OAAA,IAAI,EAAJ,CAAI,CAAC,EAAA;;oBAAzC,IAAI,GAAG,SAAkC;oBAC/C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;wBACH,MAAM,GAAG,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;wBACrE,sBAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,+BAAwB,GAAG,CAAC,MAAM,OAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAC;qBACrG;oBACD,IAAI,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,CAAA,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;wBAC1D,sBAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAC;qBACxF;oBACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;wBACpG,sBAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAC;qBAC9F;;wBAEG,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,IAAI,EAAE,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE;;oBACR,qBAAM,kBAAkB,EAAE,EAAA;;oBAHrC,IAAI,IAGN,cAAW,GAAE,SAA0B;wBACvC,QAAK,GAAE,IAAI,CAAC,KAAK;wBACjB,UAAO,GAAE,IAAI,CAAC,OAAO;2BACxB;oBACD,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;oBACnE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACjB,sBAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAC;;;oBAEpB,sBAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAK,YAAY,KAAK,CAAC,CAAC,CAAC,OAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,EAAE,MAAM,EAAE,CAAC,EAAE,EAAC;;;;;CAErH;AAED,yGAAyG;AACzG,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAkB;IAClE,IAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO;;QACH,MAAA,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC;AACN,CAAC","sourcesContent":["import { getSession } from \"../../../../adapters/auth/getSession\";\nimport { agentIdOf, toHttpBase } from \"./agentUrls\";\n\n/**\n * Agent login (same flow as the SolidX agent-ui).\n *\n * The user pastes a Solid API key once; POST <backend>/api/agent/api-keys/me (with the agentId, if\n * any) checks it with Solid and returns a random `agentToken`, a few public user fields, and where\n * to chat: `wsUrl` for the WebSocket and `httpUrl` for the REST calls. The configured backend URL is\n * only used to sign in and out. The API key stays on the agent server. The UI keeps the reply in\n * sessionStorage, so it is gone when the tab closes, and sends the agentToken on every WebSocket\n * frame and REST call. One entry per agent URL (backend + agent id).\n * An entry is also tied to the Solid user who created it, so another user in the same tab never\n * reuses it.\n */\n\nexport type AgentUser = { id?: number | string; username?: string; email?: string; mobile?: string; [key: string]: unknown };\n\nexport type AgentAuth = {\n    agentToken: string;\n    user: AgentUser;\n    solidUserId: string | null;\n    /** WebSocket URL to chat on. */\n    wsUrl: string;\n    /** Base URL for the REST calls (sessions, history). */\n    httpUrl: string;\n};\n\nexport type AgentSignInResult = { ok: true } | { ok: false; error: string; status: number };\n\nconst STORAGE_PREFIX = \"solidx.agent-session:\";\n\ntype Listener = () => void;\nconst listeners = new Map<string, Set<Listener>>();\n\n// Embed credentials never enter browser storage or depend on a Solid admin login.\nconst external = new Map<string, { auth: AgentAuth | null; renew: () => Promise<AgentAuth>; pending?: Promise<void> }>();\n\nexport type AgentBootstrap = Pick<AgentAuth, \"agentToken\" | \"wsUrl\" | \"httpUrl\" | \"user\">;\n\nexport function isExternalAgentAuth(agentUrl: string): boolean { return external.has(loginScope(agentUrl)); }\n\nexport function registerExternalAgentAuth(agentUrl: string, renew: () => Promise<AgentAuth>) {\n    const scope = loginScope(agentUrl);\n    const entry = { auth: null as AgentAuth | null, renew };\n    external.set(scope, entry);\n    return {\n        setAuth(auth: AgentAuth) { entry.auth = auth; notify(agentUrl); },\n        dispose() { if (external.get(scope) === entry) { external.delete(scope); notify(agentUrl); } },\n    };\n}\n\nexport async function renewExternalAgentAuth(agentUrl: string): Promise<void> {\n    const entry = external.get(loginScope(agentUrl));\n    if (!entry) return;\n    if (!entry.pending) {\n        entry.pending = entry.renew().then((auth) => {\n            if (external.get(loginScope(agentUrl)) === entry) { entry.auth = auth; notify(agentUrl); }\n        }).finally(() => { entry.pending = undefined; });\n    }\n    return entry.pending;\n}\n\n/** One login per backend and agent. */\nfunction loginScope(agentUrl: string) {\n    if (/[?&]embedInstance=/.test(agentUrl)) return agentUrl;\n    const agentId = agentIdOf(agentUrl);\n    return agentId === undefined ? toHttpBase(agentUrl) : `${toHttpBase(agentUrl)}?agentId=${agentId}`;\n}\n\nfunction storageKey(agentUrl: string) {\n    return `${STORAGE_PREFIX}${loginScope(agentUrl)}`;\n}\n\nfunction notify(agentUrl: string) {\n    listeners.get(loginScope(agentUrl))?.forEach((listener) => listener());\n}\n\nasync function currentSolidUserId(): Promise<string | null> {\n    const session = await getSession();\n    const id = (session as any)?.user?.id;\n    return id === undefined || id === null ? null : String(id);\n}\n\nfunction readStored(agentUrl: string): AgentAuth | null {\n    const embed = external.get(loginScope(agentUrl));\n    if (embed) return embed.auth;\n    try {\n        const raw = sessionStorage.getItem(storageKey(agentUrl));\n        const parsed = raw ? (JSON.parse(raw) as AgentAuth) : null;\n        // Entries from before sign-in returned wsUrl/httpUrl are dropped, so the user signs in again.\n        return parsed?.agentToken && parsed.wsUrl && parsed.httpUrl ? parsed : null;\n    } catch {\n        return null;\n    }\n}\n\n/** The stored login for this agent backend, if it belongs to the signed-in Solid user. */\nexport async function loadAgentAuth(agentUrl: string): Promise<AgentAuth | null> {\n    const embed = external.get(loginScope(agentUrl));\n    if (embed) return embed.auth;\n    const stored = readStored(agentUrl);\n    if (!stored) return null;\n    if (stored.solidUserId !== (await currentSolidUserId())) {\n        clearAgentAuth(agentUrl);\n        return null;\n    }\n    return stored;\n}\n\nexport function clearAgentAuth(agentUrl: string) {\n    const embed = external.get(loginScope(agentUrl));\n    if (embed) {\n        embed.auth = null;\n        notify(agentUrl);\n        void renewExternalAgentAuth(agentUrl).catch(() => { /* The embed route displays the failure and retry action. */ });\n        return;\n    }\n    try {\n        sessionStorage.removeItem(storageKey(agentUrl));\n    } catch {\n        // Storage blocked: nothing was stored.\n    }\n    notify(agentUrl);\n}\n\n/**\n * Signs out of the agent: forgets the login in this tab and asks the sign-in backend to forget the\n * token too (`DELETE /api/agent/api-keys/me`). A backend without that call just lets the token expire.\n */\nexport async function signOutOfAgent(agentUrl: string) {\n    const stored = readStored(agentUrl);\n    clearAgentAuth(agentUrl);\n    if (!stored) return;\n    try {\n        await fetch(`${toHttpBase(agentUrl)}/api/agent/api-keys/me`, { method: \"DELETE\", headers: { Authorization: `Bearer ${stored.agentToken}` } });\n    } catch {\n        // Offline or unknown call: the token still expires when idle.\n    }\n}\n\n/** Forget every agent login in this tab (e.g. on logout). */\nexport function clearAllAgentAuth() {\n    try {\n        Object.keys(sessionStorage)\n            .filter((key) => key.startsWith(STORAGE_PREFIX))\n            .forEach((key) => sessionStorage.removeItem(key));\n    } catch {\n        // Storage blocked: nothing was stored.\n    }\n    listeners.forEach((set) => set.forEach((listener) => listener()));\n}\n\n/** The chat's full WebSocket endpoint, as named at sign-in; null until signed in. */\nexport function agentWsUrl(agentUrl: string): string | null {\n    return readStored(agentUrl)?.wsUrl ?? null;\n}\n\n/** Checks the process named by the most recent AgentHub login before reusing its WebSocket URL. */\nexport async function isAgentProcessAvailable(auth: AgentAuth): Promise<boolean> {\n    const controller = new AbortController();\n    const timeout = window.setTimeout(() => controller.abort(), 5000);\n    try {\n        const response = await fetch(`${auth.httpUrl.replace(/\\/$/, \"\")}/health`, {\n            cache: \"no-store\",\n            signal: controller.signal,\n        });\n        if (!response.ok) return false;\n        const body = await response.json().catch(() => null);\n        return body?.status === \"ready\";\n    } catch {\n        return false;\n    } finally {\n        window.clearTimeout(timeout);\n    }\n}\n\n/** Exchanges a Solid API key for an agentToken and stores it for this tab. */\nexport async function signInWithApiKey(agentUrl: string, apiKey: string): Promise<AgentSignInResult> {\n    const key = apiKey.trim();\n    if (!key) return { ok: false, error: \"Enter your API key.\", status: 0 };\n    try {\n        const res = await fetch(`${toHttpBase(agentUrl)}/api/agent/api-keys/me`, {\n            method: \"POST\",\n            headers: { \"Content-Type\": \"application/json\" },\n            body: JSON.stringify({ apiKey: key, agentId: agentIdOf(agentUrl) }),\n        });\n        const body = await res.json().catch(() => null);\n        if (!res.ok) {\n            const detail = typeof body?.detail === \"string\" ? body.detail : null;\n            return { ok: false, error: detail ?? `Sign-in failed (HTTP ${res.status}).`, status: res.status };\n        }\n        if (typeof body?.agentToken !== \"string\" || !body.agentToken) {\n            return { ok: false, error: \"The agent did not return a token.\", status: res.status };\n        }\n        if (typeof body.wsUrl !== \"string\" || !body.wsUrl || typeof body.httpUrl !== \"string\" || !body.httpUrl) {\n            return { ok: false, error: \"The agent did not say where to connect.\", status: res.status };\n        }\n        const auth: AgentAuth = {\n            agentToken: body.agentToken,\n            user: body.user ?? {},\n            solidUserId: await currentSolidUserId(),\n            wsUrl: body.wsUrl,\n            httpUrl: body.httpUrl,\n        };\n        sessionStorage.setItem(storageKey(agentUrl), JSON.stringify(auth));\n        notify(agentUrl);\n        return { ok: true };\n    } catch (error) {\n        return { ok: false, error: error instanceof Error ? error.message : \"Could not reach the agent.\", status: 0 };\n    }\n}\n\n/** Calls `listener` whenever this agent backend's login is stored or cleared. Returns an unsubscribe. */\nexport function onAgentAuthChange(agentUrl: string, listener: Listener) {\n    const base = loginScope(agentUrl);\n    if (!listeners.has(base)) listeners.set(base, new Set());\n    listeners.get(base)!.add(listener);\n    return () => {\n        listeners.get(base)?.delete(listener);\n    };\n}\n"]}

package/dist/components/core/solid-agent/client/agentAuth.ts

@@ -0,0 +1,222 @@
+import { getSession } from "../../../../adapters/auth/getSession";
+import { agentIdOf, toHttpBase } from "./agentUrls";
+
+/**
+ * Agent login (same flow as the SolidX agent-ui).
+ *
+ * The user pastes a Solid API key once; POST <backend>/api/agent/api-keys/me (with the agentId, if
+ * any) checks it with Solid and returns a random `agentToken`, a few public user fields, and where
+ * to chat: `wsUrl` for the WebSocket and `httpUrl` for the REST calls. The configured backend URL is
+ * only used to sign in and out. The API key stays on the agent server. The UI keeps the reply in
+ * sessionStorage, so it is gone when the tab closes, and sends the agentToken on every WebSocket
+ * frame and REST call. One entry per agent URL (backend + agent id).
+ * An entry is also tied to the Solid user who created it, so another user in the same tab never
+ * reuses it.
+ */
+
+export type AgentUser = { id?: number | string; username?: string; email?: string; mobile?: string; [key: string]: unknown };
+
+export type AgentAuth = {
+    agentToken: string;
+    user: AgentUser;
+    solidUserId: string | null;
+    /** WebSocket URL to chat on. */
+    wsUrl: string;
+    /** Base URL for the REST calls (sessions, history). */
+    httpUrl: string;
+};
+
+export type AgentSignInResult = { ok: true } | { ok: false; error: string; status: number };
+
+const STORAGE_PREFIX = "solidx.agent-session:";
+
+type Listener = () => void;
+const listeners = new Map<string, Set<Listener>>();
+
+// Embed credentials never enter browser storage or depend on a Solid admin login.
+const external = new Map<string, { auth: AgentAuth | null; renew: () => Promise<AgentAuth>; pending?: Promise<void> }>();
+
+export type AgentBootstrap = Pick<AgentAuth, "agentToken" | "wsUrl" | "httpUrl" | "user">;
+
+export function isExternalAgentAuth(agentUrl: string): boolean { return external.has(loginScope(agentUrl)); }
+
+export function registerExternalAgentAuth(agentUrl: string, renew: () => Promise<AgentAuth>) {
+    const scope = loginScope(agentUrl);
+    const entry = { auth: null as AgentAuth | null, renew };
+    external.set(scope, entry);
+    return {
+        setAuth(auth: AgentAuth) { entry.auth = auth; notify(agentUrl); },
+        dispose() { if (external.get(scope) === entry) { external.delete(scope); notify(agentUrl); } },
+    };
+}
+
+export async function renewExternalAgentAuth(agentUrl: string): Promise<void> {
+    const entry = external.get(loginScope(agentUrl));
+    if (!entry) return;
+    if (!entry.pending) {
+        entry.pending = entry.renew().then((auth) => {
+            if (external.get(loginScope(agentUrl)) === entry) { entry.auth = auth; notify(agentUrl); }
+        }).finally(() => { entry.pending = undefined; });
+    }
+    return entry.pending;
+}
+
+/** One login per backend and agent. */
+function loginScope(agentUrl: string) {
+    if (/[?&]embedInstance=/.test(agentUrl)) return agentUrl;
+    const agentId = agentIdOf(agentUrl);
+    return agentId === undefined ? toHttpBase(agentUrl) : `${toHttpBase(agentUrl)}?agentId=${agentId}`;
+}
+
+function storageKey(agentUrl: string) {
+    return `${STORAGE_PREFIX}${loginScope(agentUrl)}`;
+}
+
+function notify(agentUrl: string) {
+    listeners.get(loginScope(agentUrl))?.forEach((listener) => listener());
+}
+
+async function currentSolidUserId(): Promise<string | null> {
+    const session = await getSession();
+    const id = (session as any)?.user?.id;
+    return id === undefined || id === null ? null : String(id);
+}
+
+function readStored(agentUrl: string): AgentAuth | null {
+    const embed = external.get(loginScope(agentUrl));
+    if (embed) return embed.auth;
+    try {
+        const raw = sessionStorage.getItem(storageKey(agentUrl));
+        const parsed = raw ? (JSON.parse(raw) as AgentAuth) : null;
+        // Entries from before sign-in returned wsUrl/httpUrl are dropped, so the user signs in again.
+        return parsed?.agentToken && parsed.wsUrl && parsed.httpUrl ? parsed : null;
+    } catch {
+        return null;
+    }
+}
+
+/** The stored login for this agent backend, if it belongs to the signed-in Solid user. */
+export async function loadAgentAuth(agentUrl: string): Promise<AgentAuth | null> {
+    const embed = external.get(loginScope(agentUrl));
+    if (embed) return embed.auth;
+    const stored = readStored(agentUrl);
+    if (!stored) return null;
+    if (stored.solidUserId !== (await currentSolidUserId())) {
+        clearAgentAuth(agentUrl);
+        return null;
+    }
+    return stored;
+}
+
+export function clearAgentAuth(agentUrl: string) {
+    const embed = external.get(loginScope(agentUrl));
+    if (embed) {
+        embed.auth = null;
+        notify(agentUrl);
+        void renewExternalAgentAuth(agentUrl).catch(() => { /* The embed route displays the failure and retry action. */ });
+        return;
+    }
+    try {
+        sessionStorage.removeItem(storageKey(agentUrl));
+    } catch {
+        // Storage blocked: nothing was stored.
+    }
+    notify(agentUrl);
+}
+
+/**
+ * Signs out of the agent: forgets the login in this tab and asks the sign-in backend to forget the
+ * token too (`DELETE /api/agent/api-keys/me`). A backend without that call just lets the token expire.
+ */
+export async function signOutOfAgent(agentUrl: string) {
+    const stored = readStored(agentUrl);
+    clearAgentAuth(agentUrl);
+    if (!stored) return;
+    try {
+        await fetch(`${toHttpBase(agentUrl)}/api/agent/api-keys/me`, { method: "DELETE", headers: { Authorization: `Bearer ${stored.agentToken}` } });
+    } catch {
+        // Offline or unknown call: the token still expires when idle.
+    }
+}
+
+/** Forget every agent login in this tab (e.g. on logout). */
+export function clearAllAgentAuth() {
+    try {
+        Object.keys(sessionStorage)
+            .filter((key) => key.startsWith(STORAGE_PREFIX))
+            .forEach((key) => sessionStorage.removeItem(key));
+    } catch {
+        // Storage blocked: nothing was stored.
+    }
+    listeners.forEach((set) => set.forEach((listener) => listener()));
+}
+
+/** The chat's full WebSocket endpoint, as named at sign-in; null until signed in. */
+export function agentWsUrl(agentUrl: string): string | null {
+    return readStored(agentUrl)?.wsUrl ?? null;
+}
+
+/** Checks the process named by the most recent AgentHub login before reusing its WebSocket URL. */
+export async function isAgentProcessAvailable(auth: AgentAuth): Promise<boolean> {
+    const controller = new AbortController();
+    const timeout = window.setTimeout(() => controller.abort(), 5000);
+    try {
+        const response = await fetch(`${auth.httpUrl.replace(/\/$/, "")}/health`, {
+            cache: "no-store",
+            signal: controller.signal,
+        });
+        if (!response.ok) return false;
+        const body = await response.json().catch(() => null);
+        return body?.status === "ready";
+    } catch {
+        return false;
+    } finally {
+        window.clearTimeout(timeout);
+    }
+}
+
+/** Exchanges a Solid API key for an agentToken and stores it for this tab. */
+export async function signInWithApiKey(agentUrl: string, apiKey: string): Promise<AgentSignInResult> {
+    const key = apiKey.trim();
+    if (!key) return { ok: false, error: "Enter your API key.", status: 0 };
+    try {
+        const res = await fetch(`${toHttpBase(agentUrl)}/api/agent/api-keys/me`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ apiKey: key, agentId: agentIdOf(agentUrl) }),
+        });
+        const body = await res.json().catch(() => null);
+        if (!res.ok) {
+            const detail = typeof body?.detail === "string" ? body.detail : null;
+            return { ok: false, error: detail ?? `Sign-in failed (HTTP ${res.status}).`, status: res.status };
+        }
+        if (typeof body?.agentToken !== "string" || !body.agentToken) {
+            return { ok: false, error: "The agent did not return a token.", status: res.status };
+        }
+        if (typeof body.wsUrl !== "string" || !body.wsUrl || typeof body.httpUrl !== "string" || !body.httpUrl) {
+            return { ok: false, error: "The agent did not say where to connect.", status: res.status };
+        }
+        const auth: AgentAuth = {
+            agentToken: body.agentToken,
+            user: body.user ?? {},
+            solidUserId: await currentSolidUserId(),
+            wsUrl: body.wsUrl,
+            httpUrl: body.httpUrl,
+        };
+        sessionStorage.setItem(storageKey(agentUrl), JSON.stringify(auth));
+        notify(agentUrl);
+        return { ok: true };
+    } catch (error) {
+        return { ok: false, error: error instanceof Error ? error.message : "Could not reach the agent.", status: 0 };
+    }
+}
+
+/** Calls `listener` whenever this agent backend's login is stored or cleared. Returns an unsubscribe. */
+export function onAgentAuthChange(agentUrl: string, listener: Listener) {
+    const base = loginScope(agentUrl);
+    if (!listeners.has(base)) listeners.set(base, new Set());
+    listeners.get(base)!.add(listener);
+    return () => {
+        listeners.get(base)?.delete(listener);
+    };
+}

package/dist/components/core/solid-agent/client/agentRest.d.ts

@@ -0,0 +1,30 @@
+import type { AgentUploadedAttachment } from "../types";
+import type { AgentModelAssignments } from "../types";
+export declare const HISTORY_PAGE_SIZE = 50;
+export type AgentSessionSummary = {
+    session_id: string;
+    status: string;
+    totalSteps: number;
+    created_at: string | null;
+    preview: string;
+};
+export type AgentHistoryPage = {
+    messages: any[];
+    has_more: boolean;
+};
+export type AgentConfigVersionStatus = {
+    processConfigVersion: number;
+    latestConfigVersion: number;
+    stale: boolean;
+};
+/** One page of a session's stored events, oldest first (page 1 = most recent page). */
+export declare function fetchSessionHistory(agentUrl: string, sessionId: string, page?: number): Promise<AgentHistoryPage | null>;
+/** The current user's past conversations (the agent derives the user from the token). */
+export declare function fetchSessionList(agentUrl: string): Promise<AgentSessionSummary[] | null>;
+export declare function fetchAgentConfigVersionStatus(agentUrl: string): Promise<AgentConfigVersionStatus | null>;
+/** Model labels reported by the connected agent backend (never provider credentials). */
+export declare function fetchAgentModelAssignments(agentUrl: string): Promise<AgentModelAssignments | null>;
+export declare function deleteSession(agentUrl: string, sessionId: string): Promise<unknown>;
+/** Upload files through the agent runtime into SolidX media storage. */
+export declare function uploadAgentAttachments(agentUrl: string, files: File[], retried?: boolean): Promise<AgentUploadedAttachment[]>;
+//# sourceMappingURL=agentRest.d.ts.map