@solidxai/core-ui 0.1.19-beta.0 → 0.1.19

package/dist/components/core/solid-agent/composer/AgentComposer.tsx

@@ -0,0 +1,241 @@
+import React, { useEffect, useMemo, useRef, useState } from "react";
+import { ArrowUp, FileText, Paperclip, Square, X } from "lucide-react";
+import styles from "../SolidAgent.module.css";
+import type { AgentAttachment, AgentCommand } from "../types";
+import { AGENT_ATTACHMENT_ACCEPT, MAX_AGENT_ATTACHMENTS, formatFileSize, readAgentAttachments } from "../agentAttachments";
+
+type Props = {
+    working: boolean;
+    disabled: boolean;
+    placeholder?: string;
+    commands: AgentCommand[];
+    /** Text to place in the box (e.g. a prefilled prompt); changing `seedKey` re-applies it. */
+    seed?: string;
+    seedKey?: number;
+    onSend: (text: string, attachments: AgentAttachment[]) => void | Promise<void>;
+    onStop: () => void;
+    modelIndicator?: React.ReactNode;
+};
+
+/**
+ * Message box: Enter sends, Shift+Enter adds a line, "/" at the start lists the agent's commands.
+ * Files can be attached with the paperclip, dropped onto the box, or pasted.
+ */
+export function AgentComposer({ working, disabled, placeholder, commands, seed, seedKey, onSend, onStop, modelIndicator }: Props) {
+    const [text, setText] = useState("");
+    const [active, setActive] = useState(0);
+    const [attachments, setAttachments] = useState<AgentAttachment[]>([]);
+    const [attachErrors, setAttachErrors] = useState<string[]>([]);
+    const [dragging, setDragging] = useState(false);
+    const [sending, setSending] = useState(false);
+    const ref = useRef<HTMLTextAreaElement>(null);
+    const fileInputRef = useRef<HTMLInputElement>(null);
+
+    useEffect(() => {
+        if (seed == null) return;
+        setText(seed);
+        requestAnimationFrame(() => {
+            ref.current?.focus();
+            autosize();
+        });
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [seedKey]);
+
+    useEffect(() => {
+        if (!disabled) ref.current?.focus();
+    }, [disabled]);
+
+    const slashQuery = text.startsWith("/") && !text.includes(" ") ? text.slice(1).toLowerCase() : null;
+    const matches = useMemo(
+        () => (slashQuery == null ? [] : commands.filter((cmd) => cmd.name.replace(/^\//, "").toLowerCase().startsWith(slashQuery))),
+        [commands, slashQuery],
+    );
+
+    function autosize() {
+        const el = ref.current;
+        if (!el) return;
+        el.style.height = "auto";
+        el.style.height = `${Math.min(el.scrollHeight, 200)}px`;
+    }
+
+    const addFiles = async (files: File[]) => {
+        if (!files.length || disabled || sending) return;
+        const { added, errors } = await readAgentAttachments(files, attachments);
+        if (added.length) setAttachments((prev) => [...prev, ...added]);
+        setAttachErrors(errors);
+    };
+
+    const removeAttachment = (index: number) => {
+        setAttachments((prev) => prev.filter((_, i) => i !== index));
+        setAttachErrors([]);
+    };
+
+    const canSend = (!!text.trim() || attachments.length > 0) && !working && !disabled && !sending;
+
+    const submit = async () => {
+        if (!canSend) return;
+        setSending(true);
+        setAttachErrors([]);
+        try {
+            await onSend(text.trim(), attachments);
+            setText("");
+            setAttachments([]);
+            requestAnimationFrame(autosize);
+        } catch (error) {
+            setAttachErrors([error instanceof Error ? error.message : "The message could not be sent."]);
+        } finally {
+            setSending(false);
+        }
+    };
+
+    const pickCommand = (cmd: AgentCommand) => {
+        setText(`/${cmd.name.replace(/^\//, "")} `);
+        ref.current?.focus();
+    };
+
+    const onKeyDown = (event: React.KeyboardEvent<HTMLTextAreaElement>) => {
+        if (matches.length) {
+            if (event.key === "ArrowDown" || event.key === "ArrowUp") {
+                event.preventDefault();
+                setActive((i) => (i + (event.key === "ArrowDown" ? 1 : -1) + matches.length) % matches.length);
+                return;
+            }
+            if (event.key === "Tab" || (event.key === "Enter" && !event.shiftKey)) {
+                event.preventDefault();
+                pickCommand(matches[Math.min(active, matches.length - 1)]);
+                return;
+            }
+        }
+        if (event.key === "Enter" && !event.shiftKey) {
+            event.preventDefault();
+            submit();
+        }
+    };
+
+    const onPaste = (event: React.ClipboardEvent<HTMLTextAreaElement>) => {
+        const files = Array.from(event.clipboardData?.files ?? []);
+        if (files.length) {
+            event.preventDefault();
+            void addFiles(files);
+        }
+    };
+
+    const dropHandlers = {
+        onDragOver: (event: React.DragEvent) => {
+            if (disabled || sending || !event.dataTransfer?.types?.includes("Files")) return;
+            event.preventDefault();
+            setDragging(true);
+        },
+        onDragLeave: (event: React.DragEvent) => {
+            if (!event.currentTarget.contains(event.relatedTarget as Node)) setDragging(false);
+        },
+        onDrop: (event: React.DragEvent) => {
+            if (disabled || sending) return;
+            event.preventDefault();
+            setDragging(false);
+            void addFiles(Array.from(event.dataTransfer?.files ?? []));
+        },
+    };
+
+    return (
+        <div className={`${styles.composer} ${dragging ? styles.composerDragging : ""}`} {...dropHandlers}>
+            {matches.length > 0 && (
+                <div className={styles.popover} role="listbox" aria-label="Commands">
+                    {matches.map((cmd, i) => (
+                        <button
+                            key={cmd.name}
+                            type="button"
+                            role="option"
+                            aria-selected={i === active}
+                            className={`${styles.popoverItem} ${i === active ? styles.popoverItemActive : ""}`}
+                            onMouseDown={(event) => {
+                                event.preventDefault();
+                                pickCommand(cmd);
+                            }}
+                        >
+                            <span className={styles.popoverCmd}>/{cmd.name.replace(/^\//, "")}</span>
+                            {cmd.description && <span className={styles.popoverDesc}>{cmd.description}</span>}
+                        </button>
+                    ))}
+                </div>
+            )}
+
+            {attachments.length > 0 && (
+                <ul className={styles.attachmentTray} aria-label="Attached files">
+                    {attachments.map((item, index) => (
+                        <li key={`${item.meta.name}-${index}`} className={styles.attachmentChip}>
+                            {item.meta.previewUrl ? (
+                                <img className={styles.attachmentThumb} src={item.meta.previewUrl} alt="" />
+                            ) : (
+                                <span className={styles.attachmentIcon}><FileText size={14} /></span>
+                            )}
+                            <span className={styles.attachmentText}>
+                                <span className={styles.attachmentName} title={item.meta.name}>{item.meta.name}</span>
+                                <span className={styles.attachmentSize}>{formatFileSize(item.meta.size)}</span>
+                            </span>
+                            <button type="button" className={styles.attachmentRemove} aria-label={`Remove ${item.meta.name}`} onClick={() => removeAttachment(index)}>
+                                <X size={12} />
+                            </button>
+                        </li>
+                    ))}
+                </ul>
+            )}
+
+            {attachErrors.length > 0 && (
+                <div className={styles.attachmentErrors} role="alert">
+                    {attachErrors.map((error) => <div key={error}>{error}</div>)}
+                </div>
+            )}
+
+            <textarea
+                ref={ref}
+                className={styles.textarea}
+                rows={1}
+                value={text}
+                disabled={disabled || sending}
+                aria-label="Message the SolidX Agent"
+                placeholder={dragging ? "Drop files to attach" : placeholder ?? "Ask the agent…"}
+                onChange={(event) => {
+                    setText(event.target.value);
+                    setActive(0);
+                    autosize();
+                }}
+                onKeyDown={onKeyDown}
+                onPaste={onPaste}
+            />
+            <div className={styles.composerRow}>
+                <input
+                    ref={fileInputRef}
+                    type="file"
+                    multiple
+                    accept={AGENT_ATTACHMENT_ACCEPT}
+                    hidden
+                    onChange={(event) => {
+                        void addFiles(Array.from(event.target.files ?? []));
+                        event.target.value = "";
+                    }}
+                />
+                <button
+                    type="button"
+                    className={styles.iconBtn}
+                    aria-label="Attach files"
+                    title={`Attach files (up to ${MAX_AGENT_ATTACHMENTS}: images or text files)`}
+                    disabled={disabled || sending || attachments.length >= MAX_AGENT_ATTACHMENTS}
+                    onClick={() => fileInputRef.current?.click()}
+                >
+                    <Paperclip size={16} />
+                </button>
+                {modelIndicator}
+                {working ? (
+                    <button type="button" className={styles.stopBtn} onClick={onStop} aria-label="Stop the agent">
+                        <Square size={10} fill="currentColor" /> Stop
+                    </button>
+                ) : (
+                    <button type="button" className={styles.sendBtn} onClick={submit} disabled={!canSend} aria-label="Send">
+                        <ArrowUp size={16} />
+                    </button>
+                )}
+            </div>
+        </div>
+    );
+}

package/dist/components/core/solid-agent/embed/AgentEmbeddingPanel.d.ts

@@ -0,0 +1,8 @@
+import type { AgentInputDefinition } from "./agentEmbedProtocol";
+export declare function AgentEmbeddingPanel({ agentId, fields, hubUrl, active }: {
+    agentId: number;
+    fields: AgentInputDefinition[];
+    hubUrl: string;
+    active: boolean;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=AgentEmbeddingPanel.d.ts.map

package/dist/components/core/solid-agent/embed/AgentEmbeddingPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentEmbeddingPanel.d.ts","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/embed/AgentEmbeddingPanel.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGjE,wBAAgB,mBAAmB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,2CAkD5J"}

package/dist/components/core/solid-agent/embed/AgentEmbeddingPanel.js

@@ -0,0 +1,87 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from "react";
+import { Copy, Check } from "lucide-react";
+import { env } from "../../../../adapters/env";
+import { SolidButton, SolidCodeEditor, SolidTabGroup } from "../../../shad-cn-ui";
+import { embedSamples } from "./agentEmbedSamples";
+export function AgentEmbeddingPanel(_a) {
+    var agentId = _a.agentId, fields = _a.fields, hubUrl = _a.hubUrl, active = _a.active;
+    var _b = useState("javascript"), tab = _b[0], setTab = _b[1];
+    var _c = useState("express"), backend = _c[0], setBackend = _c[1];
+    var _d = useState(""), copied = _d[0], setCopied = _d[1];
+    var _e = useState(""), copyError = _e[0], setCopyError = _e[1];
+    var sdkUrl = "".concat(env("NEXT_PUBLIC_BACKEND_API_URL").replace(/\/$/, ""), "/api/agent-embed/sdk.js?v=2");
+    var samples = embedSamples(agentId, fields, sdkUrl, hubUrl || "https://agenthub.example.com");
+    function copy(key, code) {
+        return __awaiter(this, void 0, void 0, function () {
+            var _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _b.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, navigator.clipboard.writeText(code)];
+                    case 1:
+                        _b.sent();
+                        setCopied(key);
+                        setCopyError("");
+                        return [3 /*break*/, 3];
+                    case 2:
+                        _a = _b.sent();
+                        setCopyError("Clipboard access is unavailable. Select and copy the code below.");
+                        return [3 /*break*/, 3];
+                    case 3: return [2 /*return*/];
+                }
+            });
+        });
+    }
+    var code = function (value, language) { return _jsx(SolidCodeEditor, { readOnly: true, value: value, language: language, fontSize: 11, height: "420px" }); };
+    var copyButton = function (key, value) { return _jsxs(SolidButton, { variant: "secondary", size: "small", onClick: function () { return void copy(key, value); }, children: [copied === key ? _jsx(Check, { size: 14 }) : _jsx(Copy, { size: 14 }), " ", copied === key ? "Copied" : "Copy code"] }); };
+    return _jsxs("div", { className: "agent-editor__stack", children: [!active && _jsx("p", { role: "status", className: "agent-editor__hint", children: "Activate this agent before embedding it. Samples use the saved agent definition." }), _jsxs("section", { className: "agent-editor__section", children: [_jsx("h2", { children: "1. Keep your API key on your server" }), _jsxs("p", { children: ["Configure ", _jsx("code", { children: "AGENTHUB_API_KEY" }), ", ", _jsx("code", { children: "AGENTHUB_AGENT_ID" }), ", and ", _jsx("code", { children: "AGENTHUB_BACKEND_URL" }), " on the server that hosts your app API. Never expose the API key or AgentHub runtime URL in browser code. The browser receives only the short-lived embed response through the SDK handshake."] })] }), _jsxs("section", { className: "agent-editor__section", children: [_jsx("h2", { children: "2. Create your token endpoint" }), _jsxs("p", { children: ["Your app API accepts the SDK's token request, ignores any client-selected backend or API key, and uses the configured agent ID to call ", _jsx("code", { children: "/api/agent/api-keys/embedded/me" }), " on AgentHub Runtime. Return the successful JSON response unchanged with ", _jsx("code", { children: "Cache-Control: no-store" }), "; never cache or log credentials or tokens."] }), _jsxs("p", { children: ["Anonymous embeds can expose this endpoint publicly, as in the demo. Add rate limiting at your API or gateway and use your app's authorization policy when chat access should require sign-in. ", _jsx("code", { children: "externalUserId" }), " is optional: when the trusted auth layer supplies a stable user ID, send a namespaced value; omit it for anonymous visitors. The runtime manages chat sessions independently."] }), _jsx(SolidTabGroup, { tabs: [
+                            { value: "python", label: "Python / FastAPI", content: code(samples.python, "python") },
+                            { value: "nestjs", label: "NestJS", content: code(samples.nestjs, "typescript") },
+                            { value: "express", label: "Express", content: code(samples.express, "javascript") },
+                            { value: "java", label: "Java / Spring Boot", content: code(samples.java, "java") },
+                            { value: "dotnet", label: ".NET / ASP.NET Core", content: code(samples.dotnet, "csharp") },
+                        ], value: backend, onValueChange: setBackend, extra: copyButton(backend, samples[backend]) })] }), _jsxs("section", { className: "agent-editor__section", children: [_jsx("h2", { children: "3. Embed the chat" }), _jsxs("p", { children: ["Load the SDK from the public SDK URL shown below and mount it into a browser container. The SDK calls your app's ", _jsx("code", { children: "tokenEndpoint" }), ", passes the response to the hosted chat in memory, and manages the iframe handshake and token renewal. No SolidX npm dependency is required."] }), _jsxs("p", { children: ["Use a same-origin path such as ", _jsx("code", { children: "/api/agent-chat/token" }), " when possible. If your app API has another origin, give ", _jsx("code", { children: "tokenEndpoint" }), " its absolute URL and configure that API's CORS policy for the browser app origin."] }), _jsxs("p", { children: ["The SDK-serving SolidX API selects the hosted chat UI from its server-side ", _jsx("code", { children: "AGENT_EMBED_UI_URL" }), " setting. The consuming app does not supply an ", _jsx("code", { children: "embedUrl" }), " or choose the iframe host. Keep the SDK script URL and the configured hosted UI origin aligned to the same SolidX deployment."] }), _jsxs("p", { children: ["Pass the current page's required input values in ", _jsx("code", { children: "inputs" }), " using the names and types in this agent's schema. These values provide task context; they are not authorization to access records. Enforce access to protected data in your own API/tools. For a logged-in app, use ", _jsx("code", { children: "getTokenHeaders" }), " to send the app's normal bearer or CSRF header to your app API; do not send the AgentHub API key from the browser."] }), _jsx(SolidTabGroup, { tabs: [
+                            { value: "javascript", label: "JavaScript", content: code(samples.javascript, "html") },
+                            { value: "react", label: "React", content: code(samples.react, "javascript") },
+                        ], value: tab, onValueChange: setTab, extra: copyButton(tab, tab === "javascript" ? samples.javascript : samples.react) })] }), _jsxs("section", { className: "agent-editor__section", children: [_jsx("h2", { children: "Required inputs" }), fields.length ? _jsxs("table", { style: { width: "100%", textAlign: "left" }, children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: "Variable" }), _jsx("th", { children: "Data type" }), _jsx("th", { children: "Description" })] }) }), _jsx("tbody", { children: fields.map(function (field) { return _jsxs("tr", { children: [_jsx("td", { children: _jsx("code", { children: field.name }) }), _jsx("td", { children: field.dataType }), _jsx("td", { children: field.description })] }, field.name); }) })] })
+                        : _jsx("p", { children: "This agent has no required inputs." }), _jsx("p", { children: "Replace sample values with the current page's values and preserve each declared type. The SDK validates required inputs before the chat starts. Inputs are fixed after the first message; start a new chat to change them. They describe the task and do not grant access to data." })] }), _jsxs("section", { className: "agent-editor__section", children: [_jsx("h2", { children: "Hosting and deployment" }), _jsxs("p", { children: ["Make ", _jsxs("code", { children: ["/embed/agent/", agentId] }), " available on the hosted UI selected by ", _jsx("code", { children: "AGENT_EMBED_UI_URL" }), ". Allow the consuming app origin in the hosted UI's frame-ancestors policy, the AgentHub Runtime origin in its CORS configuration, and the SDK/API/iframe origins in the consuming app's CSP. Use HTTPS for the consuming page, SDK, hosted UI, and runtime in production."] })] }), copyError && _jsx("p", { role: "alert", children: copyError })] });
+}
+//# sourceMappingURL=AgentEmbeddingPanel.js.map

package/dist/components/core/solid-agent/embed/AgentEmbeddingPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentEmbeddingPanel.js","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/embed/AgentEmbeddingPanel.tsx"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,UAAU,mBAAmB,CAAC,EAAyH;QAAvH,OAAO,aAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA;IAC3D,IAAA,KAAgB,QAAQ,CAAC,YAAY,CAAC,EAArC,GAAG,QAAA,EAAE,MAAM,QAA0B,CAAC;IACvC,IAAA,KAAwB,QAAQ,CAAC,SAAS,CAAC,EAA1C,OAAO,QAAA,EAAE,UAAU,QAAuB,CAAC;IAC5C,IAAA,KAAsB,QAAQ,CAAC,EAAE,CAAC,EAAjC,MAAM,QAAA,EAAE,SAAS,QAAgB,CAAC;IACnC,IAAA,KAA4B,QAAQ,CAAC,EAAE,CAAC,EAAvC,SAAS,QAAA,EAAE,YAAY,QAAgB,CAAC;IAC/C,IAAM,MAAM,GAAG,UAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gCAA6B,CAAC;IACrG,IAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,8BAA8B,CAAC,CAAC;IAChG,SAAe,IAAI,CAAC,GAAW,EAAE,IAAY;;;;;;;wBACnC,qBAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EAAA;;wBAAzC,SAAyC,CAAC;wBAAC,SAAS,CAAC,GAAG,CAAC,CAAC;wBAAC,YAAY,CAAC,EAAE,CAAC,CAAC;;;;wBAC1E,YAAY,CAAC,kEAAkE,CAAC,CAAC;;;;;;KAC5F;IACD,IAAM,IAAI,GAAG,UAAC,KAAa,EAAE,QAAgB,IAAK,OAAA,KAAC,eAAe,IAAC,QAAQ,QAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAC,OAAO,GAAG,EAA3F,CAA2F,CAAC;IAC9I,IAAM,UAAU,GAAG,UAAC,GAAW,EAAE,KAAa,IAAK,OAAA,MAAC,WAAW,IAAC,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,OAAO,EAAC,OAAO,EAAE,cAAM,OAAA,KAAK,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAArB,CAAqB,aAChI,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAC,KAAK,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,IAAI,EAAE,EAAE,GAAI,OAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,IAC1F,EAFqC,CAErC,CAAC;IACf,OAAO,eAAK,SAAS,EAAC,qBAAqB,aACtC,CAAC,MAAM,IAAI,YAAG,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,oBAAoB,iGAAqF,EAChJ,mBAAS,SAAS,EAAC,uBAAuB,aAAC,+DAA4C,EACnF,sCAAa,8CAA6B,QAAE,+CAA8B,YAAM,kDAAiC,qMAAiM,IAC5S,EACV,mBAAS,SAAS,EAAC,uBAAuB,aAAC,yDAAsC,EAC7E,mKAA0I,6DAA4C,+EAAyE,qDAAoC,mDAA+C,EAClV,0NAAiM,4CAA2B,sLAAkL,EAC9Y,KAAC,aAAa,IAAC,IAAI,EAAE;4BACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;4BACvF,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE;4BACjF,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE;4BACpF,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;4BACnF,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;yBAC7F,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAA+B,CAAC,CAAC,GAAI,IAChH,EACV,mBAAS,SAAS,EAAC,uBAAuB,aAAC,6CAA0B,EACjE,6IAAoH,2CAA0B,qJAAiJ,EAC/R,2DAAkC,mDAAkC,+DAAyD,2CAA0B,0FAAsF,EAC7O,uGAA8E,gDAA+B,qDAA+C,sCAAqB,sIAAkI,EACnT,6EAAoD,oCAAmB,2NAAqN,6CAA4B,2HAAuH,EAC/a,KAAC,aAAa,IAAC,IAAI,EAAE;4BACjB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE;4BACvF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE;yBACjF,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAI,IACrH,EACV,mBAAS,SAAS,EAAC,uBAAuB,aAAC,2CAAwB,EAC9D,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAO,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAE,0BAAO,yBAAI,oCAAiB,EAAA,qCAAkB,EAAA,uCAAoB,IAAK,GAAQ,EAChJ,0BAAQ,MAAM,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,yBAAqB,uBAAI,yBAAO,KAAK,CAAC,IAAI,GAAQ,GAAK,EAAA,uBAAK,KAAK,CAAC,QAAQ,GAAM,EAAA,uBAAK,KAAK,CAAC,WAAW,GAAM,KAAnG,KAAK,CAAC,IAAI,CAA8F,EAAjH,CAAiH,CAAC,GAAS,IAAQ;wBACjK,CAAC,CAAC,6DAAyC,EAC/C,6SAAyR,IACnR,EACV,mBAAS,SAAS,EAAC,uBAAuB,aAAC,kDAA+B,EAAA,iCAAQ,4CAAoB,OAAO,IAAQ,8CAAwC,gDAA+B,kRAA8Q,IAAU,EACnd,SAAS,IAAI,YAAG,IAAI,EAAC,OAAO,YAAE,SAAS,GAAK,IAC3C,CAAC;AACX,CAAC","sourcesContent":["import React, { useState } from \"react\";\nimport { Copy, Check } from \"lucide-react\";\nimport { env } from \"../../../../adapters/env\";\nimport { SolidButton, SolidCodeEditor, SolidTabGroup } from \"../../../shad-cn-ui\";\nimport type { AgentInputDefinition } from \"./agentEmbedProtocol\";\nimport { embedSamples } from \"./agentEmbedSamples\";\n\nexport function AgentEmbeddingPanel({ agentId, fields, hubUrl, active }: { agentId: number; fields: AgentInputDefinition[]; hubUrl: string; active: boolean }) {\n    const [tab, setTab] = useState(\"javascript\");\n    const [backend, setBackend] = useState(\"express\");\n    const [copied, setCopied] = useState(\"\");\n    const [copyError, setCopyError] = useState(\"\");\n    const sdkUrl = `${env(\"NEXT_PUBLIC_BACKEND_API_URL\").replace(/\\/$/, \"\")}/api/agent-embed/sdk.js?v=2`;\n    const samples = embedSamples(agentId, fields, sdkUrl, hubUrl || \"https://agenthub.example.com\");\n    async function copy(key: string, code: string) {\n        try { await navigator.clipboard.writeText(code); setCopied(key); setCopyError(\"\"); }\n        catch { setCopyError(\"Clipboard access is unavailable. Select and copy the code below.\"); }\n    }\n    const code = (value: string, language: string) => <SolidCodeEditor readOnly value={value} language={language} fontSize={11} height=\"420px\" />;\n    const copyButton = (key: string, value: string) => <SolidButton variant=\"secondary\" size=\"small\" onClick={() => void copy(key, value)}>\n        {copied === key ? <Check size={14} /> : <Copy size={14} />} {copied === key ? \"Copied\" : \"Copy code\"}\n    </SolidButton>;\n    return <div className=\"agent-editor__stack\">\n        {!active && <p role=\"status\" className=\"agent-editor__hint\">Activate this agent before embedding it. Samples use the saved agent definition.</p>}\n        <section className=\"agent-editor__section\"><h2>1. Keep your API key on your server</h2>\n            <p>Configure <code>AGENTHUB_API_KEY</code>, <code>AGENTHUB_AGENT_ID</code>, and <code>AGENTHUB_BACKEND_URL</code> on the server that hosts your app API. Never expose the API key or AgentHub runtime URL in browser code. The browser receives only the short-lived embed response through the SDK handshake.</p>\n        </section>\n        <section className=\"agent-editor__section\"><h2>2. Create your token endpoint</h2>\n            <p>Your app API accepts the SDK's token request, ignores any client-selected backend or API key, and uses the configured agent ID to call <code>/api/agent/api-keys/embedded/me</code> on AgentHub Runtime. Return the successful JSON response unchanged with <code>Cache-Control: no-store</code>; never cache or log credentials or tokens.</p>\n            <p>Anonymous embeds can expose this endpoint publicly, as in the demo. Add rate limiting at your API or gateway and use your app's authorization policy when chat access should require sign-in. <code>externalUserId</code> is optional: when the trusted auth layer supplies a stable user ID, send a namespaced value; omit it for anonymous visitors. The runtime manages chat sessions independently.</p>\n            <SolidTabGroup tabs={[\n                { value: \"python\", label: \"Python / FastAPI\", content: code(samples.python, \"python\") },\n                { value: \"nestjs\", label: \"NestJS\", content: code(samples.nestjs, \"typescript\") },\n                { value: \"express\", label: \"Express\", content: code(samples.express, \"javascript\") },\n                { value: \"java\", label: \"Java / Spring Boot\", content: code(samples.java, \"java\") },\n                { value: \"dotnet\", label: \".NET / ASP.NET Core\", content: code(samples.dotnet, \"csharp\") },\n            ]} value={backend} onValueChange={setBackend} extra={copyButton(backend, samples[backend as keyof typeof samples])} />\n        </section>\n        <section className=\"agent-editor__section\"><h2>3. Embed the chat</h2>\n            <p>Load the SDK from the public SDK URL shown below and mount it into a browser container. The SDK calls your app's <code>tokenEndpoint</code>, passes the response to the hosted chat in memory, and manages the iframe handshake and token renewal. No SolidX npm dependency is required.</p>\n            <p>Use a same-origin path such as <code>/api/agent-chat/token</code> when possible. If your app API has another origin, give <code>tokenEndpoint</code> its absolute URL and configure that API's CORS policy for the browser app origin.</p>\n            <p>The SDK-serving SolidX API selects the hosted chat UI from its server-side <code>AGENT_EMBED_UI_URL</code> setting. The consuming app does not supply an <code>embedUrl</code> or choose the iframe host. Keep the SDK script URL and the configured hosted UI origin aligned to the same SolidX deployment.</p>\n            <p>Pass the current page's required input values in <code>inputs</code> using the names and types in this agent's schema. These values provide task context; they are not authorization to access records. Enforce access to protected data in your own API/tools. For a logged-in app, use <code>getTokenHeaders</code> to send the app's normal bearer or CSRF header to your app API; do not send the AgentHub API key from the browser.</p>\n            <SolidTabGroup tabs={[\n                { value: \"javascript\", label: \"JavaScript\", content: code(samples.javascript, \"html\") },\n                { value: \"react\", label: \"React\", content: code(samples.react, \"javascript\") },\n            ]} value={tab} onValueChange={setTab} extra={copyButton(tab, tab === \"javascript\" ? samples.javascript : samples.react)} />\n        </section>\n        <section className=\"agent-editor__section\"><h2>Required inputs</h2>\n            {fields.length ? <table style={{ width: \"100%\", textAlign: \"left\" }}><thead><tr><th>Variable</th><th>Data type</th><th>Description</th></tr></thead>\n                <tbody>{fields.map((field) => <tr key={field.name}><td><code>{field.name}</code></td><td>{field.dataType}</td><td>{field.description}</td></tr>)}</tbody></table>\n                : <p>This agent has no required inputs.</p>}\n            <p>Replace sample values with the current page's values and preserve each declared type. The SDK validates required inputs before the chat starts. Inputs are fixed after the first message; start a new chat to change them. They describe the task and do not grant access to data.</p>\n        </section>\n        <section className=\"agent-editor__section\"><h2>Hosting and deployment</h2><p>Make <code>/embed/agent/{agentId}</code> available on the hosted UI selected by <code>AGENT_EMBED_UI_URL</code>. Allow the consuming app origin in the hosted UI's frame-ancestors policy, the AgentHub Runtime origin in its CORS configuration, and the SDK/API/iframe origins in the consuming app's CSP. Use HTTPS for the consuming page, SDK, hosted UI, and runtime in production.</p></section>\n        {copyError && <p role=\"alert\">{copyError}</p>}\n    </div>;\n}\n"]}

package/dist/components/core/solid-agent/embed/AgentEmbeddingPanel.tsx

@@ -0,0 +1,58 @@
+import React, { useState } from "react";
+import { Copy, Check } from "lucide-react";
+import { env } from "../../../../adapters/env";
+import { SolidButton, SolidCodeEditor, SolidTabGroup } from "../../../shad-cn-ui";
+import type { AgentInputDefinition } from "./agentEmbedProtocol";
+import { embedSamples } from "./agentEmbedSamples";
+
+export function AgentEmbeddingPanel({ agentId, fields, hubUrl, active }: { agentId: number; fields: AgentInputDefinition[]; hubUrl: string; active: boolean }) {
+    const [tab, setTab] = useState("javascript");
+    const [backend, setBackend] = useState("express");
+    const [copied, setCopied] = useState("");
+    const [copyError, setCopyError] = useState("");
+    const sdkUrl = `${env("NEXT_PUBLIC_BACKEND_API_URL").replace(/\/$/, "")}/api/agent-embed/sdk.js?v=2`;
+    const samples = embedSamples(agentId, fields, sdkUrl, hubUrl || "https://agenthub.example.com");
+    async function copy(key: string, code: string) {
+        try { await navigator.clipboard.writeText(code); setCopied(key); setCopyError(""); }
+        catch { setCopyError("Clipboard access is unavailable. Select and copy the code below."); }
+    }
+    const code = (value: string, language: string) => <SolidCodeEditor readOnly value={value} language={language} fontSize={11} height="420px" />;
+    const copyButton = (key: string, value: string) => <SolidButton variant="secondary" size="small" onClick={() => void copy(key, value)}>
+        {copied === key ? <Check size={14} /> : <Copy size={14} />} {copied === key ? "Copied" : "Copy code"}
+    </SolidButton>;
+    return <div className="agent-editor__stack">
+        {!active && <p role="status" className="agent-editor__hint">Activate this agent before embedding it. Samples use the saved agent definition.</p>}
+        <section className="agent-editor__section"><h2>1. Keep your API key on your server</h2>
+            <p>Configure <code>AGENTHUB_API_KEY</code>, <code>AGENTHUB_AGENT_ID</code>, and <code>AGENTHUB_BACKEND_URL</code> on the server that hosts your app API. Never expose the API key or AgentHub runtime URL in browser code. The browser receives only the short-lived embed response through the SDK handshake.</p>
+        </section>
+        <section className="agent-editor__section"><h2>2. Create your token endpoint</h2>
+            <p>Your app API accepts the SDK's token request, ignores any client-selected backend or API key, and uses the configured agent ID to call <code>/api/agent/api-keys/embedded/me</code> on AgentHub Runtime. Return the successful JSON response unchanged with <code>Cache-Control: no-store</code>; never cache or log credentials or tokens.</p>
+            <p>Anonymous embeds can expose this endpoint publicly, as in the demo. Add rate limiting at your API or gateway and use your app's authorization policy when chat access should require sign-in. <code>externalUserId</code> is optional: when the trusted auth layer supplies a stable user ID, send a namespaced value; omit it for anonymous visitors. The runtime manages chat sessions independently.</p>
+            <SolidTabGroup tabs={[
+                { value: "python", label: "Python / FastAPI", content: code(samples.python, "python") },
+                { value: "nestjs", label: "NestJS", content: code(samples.nestjs, "typescript") },
+                { value: "express", label: "Express", content: code(samples.express, "javascript") },
+                { value: "java", label: "Java / Spring Boot", content: code(samples.java, "java") },
+                { value: "dotnet", label: ".NET / ASP.NET Core", content: code(samples.dotnet, "csharp") },
+            ]} value={backend} onValueChange={setBackend} extra={copyButton(backend, samples[backend as keyof typeof samples])} />
+        </section>
+        <section className="agent-editor__section"><h2>3. Embed the chat</h2>
+            <p>Load the SDK from the public SDK URL shown below and mount it into a browser container. The SDK calls your app's <code>tokenEndpoint</code>, passes the response to the hosted chat in memory, and manages the iframe handshake and token renewal. No SolidX npm dependency is required.</p>
+            <p>Use a same-origin path such as <code>/api/agent-chat/token</code> when possible. If your app API has another origin, give <code>tokenEndpoint</code> its absolute URL and configure that API's CORS policy for the browser app origin.</p>
+            <p>The SDK-serving SolidX API selects the hosted chat UI from its server-side <code>AGENT_EMBED_UI_URL</code> setting. The consuming app does not supply an <code>embedUrl</code> or choose the iframe host. Keep the SDK script URL and the configured hosted UI origin aligned to the same SolidX deployment.</p>
+            <p>Pass the current page's required input values in <code>inputs</code> using the names and types in this agent's schema. These values provide task context; they are not authorization to access records. Enforce access to protected data in your own API/tools. For a logged-in app, use <code>getTokenHeaders</code> to send the app's normal bearer or CSRF header to your app API; do not send the AgentHub API key from the browser.</p>
+            <SolidTabGroup tabs={[
+                { value: "javascript", label: "JavaScript", content: code(samples.javascript, "html") },
+                { value: "react", label: "React", content: code(samples.react, "javascript") },
+            ]} value={tab} onValueChange={setTab} extra={copyButton(tab, tab === "javascript" ? samples.javascript : samples.react)} />
+        </section>
+        <section className="agent-editor__section"><h2>Required inputs</h2>
+            {fields.length ? <table style={{ width: "100%", textAlign: "left" }}><thead><tr><th>Variable</th><th>Data type</th><th>Description</th></tr></thead>
+                <tbody>{fields.map((field) => <tr key={field.name}><td><code>{field.name}</code></td><td>{field.dataType}</td><td>{field.description}</td></tr>)}</tbody></table>
+                : <p>This agent has no required inputs.</p>}
+            <p>Replace sample values with the current page's values and preserve each declared type. The SDK validates required inputs before the chat starts. Inputs are fixed after the first message; start a new chat to change them. They describe the task and do not grant access to data.</p>
+        </section>
+        <section className="agent-editor__section"><h2>Hosting and deployment</h2><p>Make <code>/embed/agent/{agentId}</code> available on the hosted UI selected by <code>AGENT_EMBED_UI_URL</code>. Allow the consuming app origin in the hosted UI's frame-ancestors policy, the AgentHub Runtime origin in its CORS configuration, and the SDK/API/iframe origins in the consuming app's CSP. Use HTTPS for the consuming page, SDK, hosted UI, and runtime in production.</p></section>
+        {copyError && <p role="alert">{copyError}</p>}
+    </div>;
+}

package/dist/components/core/solid-agent/embed/agentEmbedProtocol.d.ts

@@ -0,0 +1,20 @@
+import type { AgentBootstrap } from "../client/agentAuth";
+export declare const EMBED_CHANNEL = "solidx-agent-embed";
+export type AgentInputDefinition = {
+    name: string;
+    description: string;
+    dataType: string;
+};
+export type AgentEmbedBootstrap = AgentBootstrap & {
+    embed: true;
+    agentId: number;
+    title?: string;
+    requiredInputs: AgentInputDefinition[];
+};
+export declare class MissingAgentInputsError extends Error {
+    readonly inputNames: string[];
+    constructor(inputNames: string[]);
+}
+export declare function validateBootstrap(value: unknown, agentId: number): AgentEmbedBootstrap;
+export declare function validateEmbedInputs(fields: AgentInputDefinition[], suppliedValues?: Record<string, unknown>): void;
+//# sourceMappingURL=agentEmbedProtocol.d.ts.map

package/dist/components/core/solid-agent/embed/agentEmbedProtocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentEmbedProtocol.d.ts","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/embed/agentEmbedProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,eAAO,MAAM,aAAa,uBAAuB,CAAC;AAClD,MAAM,MAAM,oBAAoB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3F,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG;IAC/C,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,oBAAoB,EAAE,CAAC;CAC1C,CAAC;AAEF,qBAAa,uBAAwB,SAAQ,KAAK;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE;gBAApB,UAAU,EAAE,MAAM,EAAE;CAI5C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,mBAAmB,CAWtF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CA4BlH"}

package/dist/components/core/solid-agent/embed/agentEmbedProtocol.js

@@ -0,0 +1,103 @@
+var __extends = (this && this.__extends) || (function () {
+    var extendStatics = function (d, b) {
+        extendStatics = Object.setPrototypeOf ||
+            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
+            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };
+        return extendStatics(d, b);
+    };
+    return function (d, b) {
+        if (typeof b !== "function" && b !== null)
+            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");
+        extendStatics(d, b);
+        function __() { this.constructor = d; }
+        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
+    };
+})();
+export var EMBED_CHANNEL = "solidx-agent-embed";
+var MissingAgentInputsError = /** @class */ (function (_super) {
+    __extends(MissingAgentInputsError, _super);
+    function MissingAgentInputsError(inputNames) {
+        var _this = _super.call(this, "Required inputs are missing: ".concat(inputNames.join(", "))) || this;
+        Object.defineProperty(_this, "inputNames", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: inputNames
+        });
+        _this.name = "MissingAgentInputsError";
+        return _this;
+    }
+    return MissingAgentInputsError;
+}(Error));
+export { MissingAgentInputsError };
+export function validateBootstrap(value, agentId) {
+    var body = value;
+    if (!body || body.embed !== true || body.agentId !== agentId || typeof body.agentToken !== "string" || !body.agentToken
+        || !Array.isArray(body.requiredInputs))
+        throw new Error("The token endpoint returned an invalid embed response.");
+    var ws = new URL(body.wsUrl), http = new URL(body.httpUrl);
+    if (!["ws:", "wss:"].includes(ws.protocol) || !["http:", "https:"].includes(http.protocol)
+        || ws.username || ws.password || http.username || http.password || ws.search || http.search || ws.hash || http.hash)
+        throw new Error("The token endpoint returned invalid connection URLs.");
+    if (window.location.protocol === "https:" && (ws.protocol !== "wss:" || http.protocol !== "https:"))
+        throw new Error("HTTPS embeds require HTTPS and WSS AgentHub endpoints.");
+    return body;
+}
+export function validateEmbedInputs(fields, suppliedValues) {
+    var values = suppliedValues !== null && suppliedValues !== void 0 ? suppliedValues : {};
+    if (typeof values !== "object" || Array.isArray(values))
+        throw new Error("inputs must be an object.");
+    var names = new Set(fields.map(function (field) { return field.name; }));
+    for (var _i = 0, _a = Object.keys(values); _i < _a.length; _i++) {
+        var name_1 = _a[_i];
+        if (!names.has(name_1))
+            throw new Error("Unknown input: ".concat(name_1));
+    }
+    var missing = fields
+        .filter(function (_a) {
+        var name = _a.name;
+        var value = values[name];
+        return value === undefined || value === null || (typeof value === "string" && !value.trim());
+    })
+        .map(function (_a) {
+        var name = _a.name;
+        return name;
+    });
+    if (missing.length)
+        throw new MissingAgentInputsError(missing);
+    for (var _b = 0, fields_1 = fields; _b < fields_1.length; _b++) {
+        var field = fields_1[_b];
+        var value = values[field.name];
+        var valid = false;
+        switch (field.dataType) {
+            case "string":
+                valid = typeof value === "string";
+                break;
+            case "number":
+                valid = typeof value === "number" && Number.isFinite(value);
+                break;
+            case "integer":
+                valid = typeof value === "number" && Number.isSafeInteger(value);
+                break;
+            case "boolean":
+                valid = typeof value === "boolean";
+                break;
+            case "array":
+                valid = Array.isArray(value);
+                break;
+            case "object":
+                valid = typeof value === "object" && value !== null && !Array.isArray(value);
+                break;
+            case "date":
+                valid = typeof value === "string" && /^\d{4}-\d{2}-\d{2}$/.test(value)
+                    && !Number.isNaN(Date.parse(value)) && new Date(value).toISOString().slice(0, 10) === value;
+                break;
+            case "datetime":
+                valid = typeof value === "string" && /^\d{4}-\d{2}-\d{2}T/.test(value) && !Number.isNaN(Date.parse(value));
+                break;
+        }
+        if (!valid)
+            throw new Error("Input ".concat(field.name, " must have data type ").concat(field.dataType, "."));
+    }
+}
+//# sourceMappingURL=agentEmbedProtocol.js.map

package/dist/components/core/solid-agent/embed/agentEmbedProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentEmbedProtocol.js","sourceRoot":"","sources":["../../../../../src/components/core/solid-agent/embed/agentEmbedProtocol.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,MAAM,CAAC,IAAM,aAAa,GAAG,oBAAoB,CAAC;AASlD;IAA6C,2CAAK;IAC9C,iCAAqB,UAAoB;QAAzC,YACI,kBAAM,uCAAgC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAAC,SAEjE;QAHW;;;;mBAAS,UAAU;WAAU;QAErC,KAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;;IAC1C,CAAC;IACL,8BAAC;AAAD,CAAC,AALD,CAA6C,KAAK,GAKjD;;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,OAAe;IAC7D,IAAM,IAAI,GAAG,KAA4B,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU;WAChH,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACtH,IAAM,EAAE,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;WACnF,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI;QACnH,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA8B,EAAE,cAAwC;IACxG,IAAM,MAAM,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,EAAE,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACtG,IAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,KAAK,CAAC,IAAI,EAAV,CAAU,CAAC,CAAC,CAAC;IACzD,KAAmB,UAAmB,EAAnB,KAAA,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAnB,cAAmB,EAAnB,IAAmB;QAAjC,IAAM,MAAI,SAAA;QAAyB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAkB,MAAI,CAAE,CAAC,CAAC;KAAA;IACxG,IAAM,OAAO,GAAG,MAAM;SACjB,MAAM,CAAC,UAAC,EAAQ;YAAN,IAAI,UAAA;QACX,IAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC;SACD,GAAG,CAAC,UAAC,EAAQ;YAAN,IAAI,UAAA;QAAO,OAAA,IAAI;IAAJ,CAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC/D,KAAoB,UAAM,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;QAAvB,IAAM,KAAK,eAAA;QACZ,IAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,QAAQ,KAAK,CAAC,QAAQ,EAAE;YACpB,KAAK,QAAQ;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC;gBAAC,MAAM;YACxD,KAAK,QAAQ;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM;YAClF,KAAK,SAAS;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM;YACxF,KAAK,SAAS;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,SAAS,CAAC;gBAAC,MAAM;YAC1D,KAAK,OAAO;gBAAE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM;YAClD,KAAK,QAAQ;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM;YACnG,KAAK,MAAM;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;uBAC5E,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC;gBAAC,MAAM;YACvG,KAAK,UAAU;gBAAE,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAC,MAAM;SACtI;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAS,KAAK,CAAC,IAAI,kCAAwB,KAAK,CAAC,QAAQ,MAAG,CAAC,CAAC;KAC7F;AACL,CAAC","sourcesContent":["import type { AgentBootstrap } from \"../client/agentAuth\";\n\nexport const EMBED_CHANNEL = \"solidx-agent-embed\";\nexport type AgentInputDefinition = { name: string; description: string; dataType: string };\nexport type AgentEmbedBootstrap = AgentBootstrap & {\n    embed: true;\n    agentId: number;\n    title?: string;\n    requiredInputs: AgentInputDefinition[];\n};\n\nexport class MissingAgentInputsError extends Error {\n    constructor(readonly inputNames: string[]) {\n        super(`Required inputs are missing: ${inputNames.join(\", \")}`);\n        this.name = \"MissingAgentInputsError\";\n    }\n}\n\nexport function validateBootstrap(value: unknown, agentId: number): AgentEmbedBootstrap {\n    const body = value as AgentEmbedBootstrap;\n    if (!body || body.embed !== true || body.agentId !== agentId || typeof body.agentToken !== \"string\" || !body.agentToken\n        || !Array.isArray(body.requiredInputs)) throw new Error(\"The token endpoint returned an invalid embed response.\");\n    const ws = new URL(body.wsUrl), http = new URL(body.httpUrl);\n    if (![\"ws:\", \"wss:\"].includes(ws.protocol) || ![\"http:\", \"https:\"].includes(http.protocol)\n        || ws.username || ws.password || http.username || http.password || ws.search || http.search || ws.hash || http.hash)\n        throw new Error(\"The token endpoint returned invalid connection URLs.\");\n    if (window.location.protocol === \"https:\" && (ws.protocol !== \"wss:\" || http.protocol !== \"https:\"))\n        throw new Error(\"HTTPS embeds require HTTPS and WSS AgentHub endpoints.\");\n    return body;\n}\n\nexport function validateEmbedInputs(fields: AgentInputDefinition[], suppliedValues?: Record<string, unknown>): void {\n    const values = suppliedValues ?? {};\n    if (typeof values !== \"object\" || Array.isArray(values)) throw new Error(\"inputs must be an object.\");\n    const names = new Set(fields.map((field) => field.name));\n    for (const name of Object.keys(values)) if (!names.has(name)) throw new Error(`Unknown input: ${name}`);\n    const missing = fields\n        .filter(({ name }) => {\n            const value = values[name];\n            return value === undefined || value === null || (typeof value === \"string\" && !value.trim());\n        })\n        .map(({ name }) => name);\n    if (missing.length) throw new MissingAgentInputsError(missing);\n    for (const field of fields) {\n        const value = values[field.name];\n        let valid = false;\n        switch (field.dataType) {\n            case \"string\": valid = typeof value === \"string\"; break;\n            case \"number\": valid = typeof value === \"number\" && Number.isFinite(value); break;\n            case \"integer\": valid = typeof value === \"number\" && Number.isSafeInteger(value); break;\n            case \"boolean\": valid = typeof value === \"boolean\"; break;\n            case \"array\": valid = Array.isArray(value); break;\n            case \"object\": valid = typeof value === \"object\" && value !== null && !Array.isArray(value); break;\n            case \"date\": valid = typeof value === \"string\" && /^\\d{4}-\\d{2}-\\d{2}$/.test(value)\n                && !Number.isNaN(Date.parse(value)) && new Date(value).toISOString().slice(0, 10) === value; break;\n            case \"datetime\": valid = typeof value === \"string\" && /^\\d{4}-\\d{2}-\\d{2}T/.test(value) && !Number.isNaN(Date.parse(value)); break;\n        }\n        if (!valid) throw new Error(`Input ${field.name} must have data type ${field.dataType}.`);\n    }\n}\n"]}