@xnetjs/plugins 0.0.3 → 0.1.0

package/dist/index.d.ts

@@ -2819,10 +2819,8 @@ declare function runAction(action: DefinedAction, event: ActionEvent, ports: Run
  * private RFC-1918 range — to exfiltrate credentials or reach internal
  * services. {@link assertPublicUrl} rejects those before the request leaves.
  *
- * This is a *literal-host* guard (scheme + hostname/IP inspection), not a
- * post-DNS-resolution guard: a hostname that resolves to a private IP at
- * request time is not caught here. That deeper check belongs in the fetch
- * implementation; this closes the common, cheap holes by construction.
+ * The literal-host check itself lives in `@xnetjs/core`; this module keeps the
+ * action-specific {@link ActionSsrfError} contract that callers/tests depend on.
  */
 declare class ActionSsrfError extends Error {
     readonly url: string;
@@ -4534,6 +4532,13 @@ declare class ManagedProvider implements AIProvider {
     getCapabilities(): AIModelCapabilities;
     generate(prompt: string): Promise<string>;
     generateWithTools(request: AIGenerateRequest): Promise<AIGenerateResponse>;
+    /**
+     * Stream the managed completion over SSE (`/ai/chat/stream`). Yields a `text`
+     * chunk per delta, then `usage` + `done`; emits the live budget from the terminal
+     * `done` event. A `402` (pre-stream) or an `ai_budget_exceeded` error event
+     * becomes an {@link AiBudgetError} (exploration 0244).
+     */
+    stream(request: AIGenerateRequest): AsyncIterable<AIStreamChunk>;
     private emitBudget;
 }
 /** Build a {@link ManagedProvider} (parallels `createPromptApiProvider`). */
@@ -4672,6 +4677,15 @@ declare function generateScript(provider: AIProvider, request: AIScriptRequest):
  */
 
 type AiAgentOrchestratorMode = 'custom' | 'codex-app-server' | 'hybrid';
+/**
+ * How the assistant relates to the user's work (xNet Humane Internet Charter
+ * §Agency). `scaffold` — the default — keeps the human as the author: the model
+ * proposes and cites, the user writes and owns. It is a guard against the
+ * cognitive-debt / deskilling effect of LLM-authored work (MIT Media Lab,
+ * arXiv:2506.08872). `draft`, where the model produces finished prose, must be
+ * opted into explicitly. Either way the resulting turn is tagged `ai-generated`.
+ */
+type AiAssistMode = 'scaffold' | 'draft';
 type AiAgentThreadStatus = 'idle' | 'running' | 'waiting-approval' | 'cancelled' | 'failed';
 type AiAgentTurnRole = 'system' | 'user' | 'assistant' | 'tool';
 type AiAgentTurnStatus = 'pending' | 'streaming' | 'completed' | 'cancelled' | 'failed';
@@ -4783,6 +4797,13 @@ type AiAgentRuntimeConfig = {
     systemPrompt?: string;
     /** Optional hook injecting grounding context messages before the history. */
     contextProvider?: AiAgentContextProvider;
+    /**
+     * Assist mode (default `scaffold`). Tags every assistant turn's provenance and
+     * is exposed via {@link AiAgentRuntime.getAssistMode}; apps compose the
+     * scaffold guard into their system prompt with {@link composeAssistSystemPrompt}.
+     * `draft` is never the default — it must be set explicitly.
+     */
+    assistMode?: AiAssistMode;
 };
 type AiAgentThreadCreateInput = {
     title: string;
@@ -4851,6 +4872,7 @@ declare class AiAgentRuntime {
     private readonly storage;
     private readonly clock;
     private readonly mode;
+    private readonly assistMode;
     private readonly maxEvents;
     private sequence;
     private loaded;
@@ -4858,6 +4880,8 @@ declare class AiAgentRuntime {
     private readonly activeRuns;
     private readonly activeJobs;
     constructor(config: AiAgentRuntimeConfig);
+    /** The active assist mode (`scaffold` by default; `draft` is opt-in only). */
+    getAssistMode(): AiAssistMode;
     load(): Promise<AiAgentRuntimeSnapshot>;
     getSnapshot(): AiAgentRuntimeSnapshot;
     subscribe(listener: AiAgentRuntimeListener): () => void;
@@ -4905,6 +4929,26 @@ declare function createAiAgentRuntime(config: AiAgentRuntimeConfig): AiAgentRunt
 declare function createMemoryAiAgentRuntimeStorage(initial?: AiAgentRuntimeSnapshot): AiAgentRuntimeStorage & {
     snapshot(): AiAgentRuntimeSnapshot;
 };
+/** Provenance tag stamped on every assistant turn (xNet trust tiers). */
+declare const AI_GENERATED_PROVENANCE: "ai-generated";
+/**
+ * The cognitive-debt guard appended to the system prompt in scaffold mode. It
+ * asks the model to help the user think rather than think for them — an answer
+ * to the deskilling effect of LLM-authored work (MIT, arXiv:2506.08872).
+ */
+declare const SCAFFOLD_SYSTEM_GUARD: string;
+/**
+ * Compose the system prompt for an assist mode. In `scaffold` mode the guard is
+ * appended so the assistant scaffolds rather than substitutes; in `draft` mode
+ * the base prompt passes through unchanged. Returned to apps so the runtime's
+ * own message composition stays backward-compatible.
+ */
+declare function composeAssistSystemPrompt(base: string | undefined, mode: AiAssistMode): string | undefined;
+/** Metadata stamped on an assistant turn so its provenance is always legible. */
+declare function assistTurnProvenance(mode: AiAssistMode): {
+    provenance: typeof AI_GENERATED_PROVENANCE;
+    assistMode: AiAssistMode;
+};
 declare function renderSelectionPrompt(instruction: string, selection: AiAgentSelectionContext): string;
 declare function classifyAiAgentDisplayState(input: {
     plan?: AiMutationPlan;
@@ -4947,7 +4991,20 @@ interface ConnectorEnv {
     managedUrl?: string;
     /** WebGPU present (enables in-tab models). Default: `navigator.gpu` check. */
     hasWebGpu?: () => boolean | Promise<boolean>;
-    /** Chrome built-in `LanguageModel` present. Default: global check. */
+    /**
+     * Whether the host can actually build an in-tab WebLLM engine (the heavy
+     * `@mlc-ai/web-llm` import is host-supplied, see the panel). The `webllm` tier
+     * is reported available only when this AND {@link hasWebGpu} are true —
+     * detecting WebGPU alone would advertise a tier the host can't instantiate,
+     * leaving the composer silently disabled. Default: `false` (no engine wired).
+     */
+    hasWebLLMEngine?: () => boolean | Promise<boolean>;
+    /**
+     * Chrome built-in `LanguageModel` is present *and the model is ready to use*.
+     * Default: probes `LanguageModel.availability()` and reports ready only for
+     * `'available'` — mere API presence (`'downloadable'`) means a session can't
+     * be created without a user-gesture download first (see the panel's gesture).
+     */
     hasPromptApi?: () => boolean | Promise<boolean>;
     /** Local model endpoints to probe, in priority order. Default: Ollama, LM Studio. */
     localServerProbes?: readonly LocalServerProbe[];
@@ -5110,14 +5167,24 @@ interface LanguageModelSessionLike {
     prompt(input: string): Promise<string>;
     promptStreaming(input: string): AsyncIterable<string>;
 }
+/** The four states Chrome's `LanguageModel.availability()` can report. */
+type PromptApiAvailability = 'unavailable' | 'downloadable' | 'downloading' | 'available';
+/** A download-progress monitor passed to `create({ monitor })`. */
+interface LanguageModelMonitor {
+    addEventListener(type: 'downloadprogress', listener: (event: {
+        loaded: number;
+    }) => void): void;
+}
 /** Minimal shape of the global `LanguageModel` factory. */
 interface LanguageModelLike {
-    availability(): Promise<'unavailable' | 'downloadable' | 'downloading' | 'available'>;
+    availability(): Promise<PromptApiAvailability>;
     create(options?: {
         initialPrompts?: Array<{
             role: string;
             content: string;
         }>;
+        /** Observe the on-device model download (fires `downloadprogress`). */
+        monitor?: (monitor: LanguageModelMonitor) => void;
     }): Promise<LanguageModelSessionLike>;
 }
 interface PromptApiProviderOptions {
@@ -5138,6 +5205,22 @@ declare class PromptApiProvider implements AIProvider {
  * needed. Returns null if the API is unavailable (not Chrome, or no model).
  */
 declare function createPromptApiProvider(factory?: LanguageModelLike): Promise<PromptApiProvider | null>;
+/**
+ * Raw availability of the on-device model, or `'unavailable'` when the API is
+ * absent (not Chrome) or the probe throws. Unlike `createPromptApiProvider`,
+ * this distinguishes `'downloadable'`/`'downloading'` from `'available'` so the
+ * UI can offer a download gesture instead of silently reporting "unavailable".
+ */
+declare function promptApiAvailability(factory?: LanguageModelLike): Promise<PromptApiAvailability>;
+/**
+ * Trigger the on-device model download from a **user gesture**, reporting
+ * progress as a fraction in [0, 1]. Chrome gates the download behind a user
+ * activation, so this must be called from a click handler — not an effect.
+ * Resolves `true` once a session is creatable; the runtime rebuilds its own
+ * session once detection re-flips to `'available'`. Returns `false` when the
+ * API is absent; throws (for the caller to `.catch`) if `create()` rejects.
+ */
+declare function downloadPromptApiModel(onProgress?: (fraction: number) => void, factory?: LanguageModelLike): Promise<boolean>;
 
 /**
  * Service Plugin Types
@@ -5630,4 +5713,62 @@ interface MCPServerConfig {
     version?: string;
 }
 
-export { type AIComplexityLevel, type AICostModel, type AIGenerateRequest, type AIGenerateResponse, AIGenerationError, type AIMessage, type AIMessageRole, type AIModelCapabilities, type AIModelQuality, type AIPrivacyLevel, type AIProvider, type AIProviderConfig, type AIProviderOptions, AIProviderRouter, type AIProviderRouterOptions, type AIProviderType, type AIProviderUsage, AIRTABLE_CONNECTOR_ID, type AIRiskLevel, type AIScriptRequest, type AIScriptResponse, type AIStreamChunk, type AIToolCall, type AIToolSpec, type AIUsage, AI_RISK_LEVELS, AI_SCOPES, AI_TARGET_KINDS, ALLOWED_PLUGIN_LICENSES, type ActionContext, type ActionDefinition, ActionDefinitionError, ActionDispatchError, type ActionEvent, ActionSsrfError, type ActionTrigger, type AgentToolContribution, type AgentToolInputSchema, type AiAgentApproval, type AiAgentApprovalRequestInput, type AiAgentApprovalResolveInput, type AiAgentApprovalStatus, type AiAgentBackgroundJob, type AiAgentBackgroundJobInput, type AiAgentBackgroundJobRunner, type AiAgentBackgroundJobStatus, type AiAgentDisplayState, type AiAgentDisplayStateKind, type AiAgentEvent, type AiAgentEventType, type AiAgentOrchestratorMode, type AiAgentRunSelectionTurnInput, type AiAgentRunTurnInput, type AiAgentRunTurnResult, AiAgentRuntime, type AiAgentRuntimeConfig, type AiAgentRuntimeListener, type AiAgentRuntimeSnapshot, type AiAgentRuntimeStorage, type AiAgentSelectionContext, type AiAgentSelectionKind, type AiAgentTelemetrySnapshot, type AiAgentThread, type AiAgentThreadCreateInput, type AiAgentThreadStatus, type AiAgentTurn, type AiAgentTurnRole, type AiAgentTurnStatus, type AiAuditEvent, type AiAuthoredPlugin, AiAuthoringError, AiBudgetError, type AiCallableTool, type AiChangeSet, type AiCommandExposure, type AiContextPack, type AiContextPackResource, type AiContextRetriever, type AiContextSeed, type AiDatabaseMutationApplyResult, type AiExtraTool, type AiJsonSchema, type AiJsonSchemaType, type AiMutationPlan, type AiMutationPlanStatus, type AiOperation, type AiPageMarkdownApplyAdapter, type AiPageMarkdownApplyAdapterInput, type AiPageMarkdownApplyAdapterResult, type AiPageMarkdownApplyResult, type AiPageMarkdownRollbackResult, type AiPluginPipelineInput, type AiPluginPipelinePorts, type AiPluginPipelineResult, type AiResource, type AiResourceContent, type AiRetrievedNode, type AiRiskLevel, type AiScope, type AiSearchOptions, type AiSearchResult, type AiSurfaceLimits, AiSurfaceService, type AiSurfaceServiceConfig, type AiTargetKind, type AiToolCallResult, type AiToolDefinition, type AiValidationResult, type AirtableConnectorOptions, type AllowedPluginLicense, AnthropicProvider, type ArrayHelpers, type BlockContribution, type BlockProps, CANVAS_PLUGIN_FIXTURES, CHANNEL_SCHEMA, CHAT_MESSAGE_SCHEMA, CONNECTOR_CATEGORY, CONNECTOR_META, CRM_CANVAS_PLUGIN_FIXTURE, type CanvasCardContribution, type CanvasContribution, type CanvasContributionBase, type CanvasContributionPermission, type CanvasEdgeContribution, type CanvasErpPrototypeAuditEntry, type CanvasErpPrototypeAuditOperation, type CanvasErpPrototypeAuditSource, type CanvasErpPrototypeCard, type CanvasErpPrototypeCommand, type CanvasErpPrototypeEdge, type CanvasErpPrototypeEntityKind, type CanvasErpPrototypeLayoutKind, type CanvasErpPrototypeQueryFrame, type CanvasErpPrototypeQueryPredicate, type CanvasErpPrototypeRect, type CanvasErpPrototypeRisk, type CanvasErpPrototypeRiskSummary, type CanvasErpPrototypeScenario, type CanvasErpPrototypeStatus, type CanvasIngestInputKind, type CanvasIngestorContribution, type CanvasInspectorContribution, type CanvasInspectorPlacement, type CanvasLayoutContribution, type CanvasLayoutScope, type CanvasPluginFixture, type CanvasPluginFixtureCardSample, type CanvasPluginFixtureKind, type CanvasPluginPermissionDecisionStatus, type CanvasPluginPermissionGateDecision, type CanvasPluginPermissionGateInput, type CanvasPluginPermissionPrompt, type CanvasPluginPermissionPromptOption, type CanvasPluginPromptMode, type CanvasPluginSandboxDecision, type CanvasPluginSandboxDomAccess, type CanvasPluginSandboxKind, type CanvasPluginSandboxMutationAccess, type CanvasPluginSandboxNetworkAccess, type CanvasPluginSandboxOutput, type CanvasPluginSandboxOutputKind, type CanvasPluginSandboxOutputValidation, type CanvasPluginSandboxPolicy, type CanvasPluginSandboxRequest, type CanvasPluginWorkspacePolicy, type CanvasPreviewTier, type CanvasRendererSandboxContribution, type CanvasTemplateCategory, type CanvasTemplateContribution, type CanvasToolContribution, type CanvasToolGroup, CapabilityError, type CommandContext, type CommandContribution, CommandRegistry, type CommandScope, type ConnectorArtifacts, type ConnectorCadence, type ConnectorDefinition, ConnectorDefinitionError, type ConnectorDetection, type ConnectorEnv, type ConnectorFetch, type ConnectorInstallGate, type ConnectorStore, type ConnectorSyncContext, ConnectorSyncError, type ConnectorSyncResult, type ConnectorSyncSpec, type ConnectorTier, type ConnectorToolDescriptor, type ConsentDecision, type ConsentLine, ContributionRegistry, DEFAULT_PLUGIN_LICENSE, type DefinedAction, type DefinedConnector, type DeliveryResult, DependencyCycleError, type DependencyNode, type Disposable$1 as Disposable, ERP_CANVAS_PLUGIN_FIXTURE, EXTERNAL_ITEM_SCHEMA, type EditorContribution, type EditorSchemaRisk, type EmailActionOptions, type ExtensionContext, type ExtensionStorage, FEED_ITEM_SCHEMA, type FeatureModule, type FeedEntry, type FetchJson, type FetchLike, type FlatNode, type FormatHelpers, GITHUB_CONNECTOR_ID, type GeneratedScript, type GithubConnectorOptions, type GuardableConnectorStore, type IProcessManager, type ImporterContribution, type InstallOptions, LINEAR_CONNECTOR_ID, type LabRunOutcome, type LadderRuntimeTier, type LanguageModelLike, type LanguageModelSessionLike, type LicenseCheckResult, LicenseRequiredError, type LinearConnectorOptions, type LocalAPIConfig, type LocalAPITokenConfig, type LocalAPITokenScope, type LocalAPITokenSummary, type LocalServerProbe, MARKETPLACE_PROVENANCE, type MCPPropertySchema, type MCPRequest, type MCPResource, type MCPResponse, type MCPServerConfig, type MCPTool, MEDIA_PROVIDER_CANVAS_PLUGIN_FIXTURE, type ManagedBudgetSnapshot, ManagedProvider, type ManagedProviderOptions, MarketplaceClient, type MarketplaceClientOptions, type MarketplaceEntry, type MarketplaceSort, type MathHelpers, type MentionProviderContribution, type MentionSuggestion, MiddlewareChain, type MissingDependency, type ModuleCapabilities, NOTION_CONNECTOR_ID, type NodeChangeEvent, type NodeChangeEventData, type NodeData, type NodeStoreAPI, type NodeStoreMiddleware, type NotionConnectorOptions, OllamaProvider, OpenAICompatibleProvider, type OpenAICompatibleProviderOptions, OpenAIProvider, type PendingChange, type Platform, type PlatformCapabilities, type PluginContributions, PluginError, type PluginNode, type PluginNodeChangeEvent, type PluginNodeChangeListener, type PluginPermissions, type PluginPricing, type PluginRating, PluginRegistry, type PluginRunInput, type PluginRunResult, PluginRuntimeError, type PluginRuntimeLadder, PluginSchema, type PluginStatus, PluginValidationError, type ProcessManagerEvents, PromptApiProvider, type PromptApiProviderOptions, type PropertyCellProps, type PropertyEditorProps, type PropertyHandler, type PropertyHandlerContribution, type Provenance, type ProvenanceResult, type ProvenanceVerifier, type QueryFilter, RSS_CONNECTOR_ID, type RatingSummary, type RecommendOptions, type RegisteredPlugin, type ResolveMentionOptions, type RssConnectorOptions, type RunActionPorts, type RunConnectorSyncPorts, type RunPluginCodeInput, SERVICE_IPC_CHANNELS, SLACK_CONNECTOR_ID, type SandboxOptions, ScaffoldError, type ScaffoldResult, type ScaffoldSpec, type ScaffoldTemplate, type SchemaContribution, type SchemaData, type SchemaDefinition, type SchemaProperty, type SchemaRegistryAPI, type ScriptContext, ScriptError, type ScriptExecutionResult, type ScriptExecutor, ScriptGenerationError, ScriptGenerator, type ScriptGeneratorOptions, type ScriptNode, type ScriptNodeChangeEvent, type ScriptOutputType, ScriptRunner, type ScriptRunnerOptions, ScriptSandbox, ScriptSchema, type ScriptStore, ScriptTimeoutError, type ScriptToManifestInput, type ScriptTriggerType, ScriptValidationError, type SemVer, type ServiceClient, type ServiceCommunication, type ServiceDefinition, type ServiceHealthCheck, type ServiceLifecycle, type ServiceOutputEvent, type ServiceProcessConfig, type ServiceProvides, type ServiceState, type ServiceStatus, type ServiceStatusEvent, type SettingContribution, type SettingsPanelProps, ShortcutManager, type SidebarContribution, type SlackConnectorOptions, type SlashCommandContext, type SlashCommandContribution, type StatusBarContribution, type TelemetryReporter, type TestHarnessOptions, type TestNodeStore, type TestPluginHarness, type TextHelpers, type ToolCallingFidelity, type ToolbarContribution, TypedRegistry, type UsageSignal, type ValidationResult, type VerifyProvenanceInput, type ViewContribution, type ViewProps, type WebLLMEngineLike, WebLLMProvider, type WebLLMProviderOptions, type WebhookConfig, WebhookEmitter, type WebhookOutOptions, type WebhookPayload, type WidgetContribution, type WidgetContributionConfigField, type WidgetContributionProps, type WorkspaceCommand, type WrapCliConnectorOptions, type WriteMode, XNET_MARKDOWN_DIRECTIVE_SPECS, type XNetExtension, type XNetMarkdownDiffLine, type XNetMarkdownDiffLineKind, type XNetMarkdownDirective, type XNetMarkdownDirectiveSpec, type XNetMarkdownReviewDiff, type XNetPageMarkdownFrontmatter, type XNetPageMarkdownValidation, type XNetPageMarkdownValidationOptions, agentToolToExtraTool, agentToolsAsExtraTools, aggregateRatings, assertNetwork, assertPublicUrl, assertSchemaWrite, attachAiPlanValidation, buildAirtableConnector, buildDiscordAction, buildEmailAction, buildGithubConnector, buildLinearConnector, buildNotionConnector, buildRetryPrompt, buildRssConnector, buildScriptPrompt, buildSlackConnector, buildSlackWebhookAction, buildTelegramAction, buildWebhookOutAction, classifyAiAgentDisplayState, compareVersions, connectorAsImporter, connectorMarketplaceEntry, contributionsAsAiTools, createAIProvider, createAIProviderRouter, createAiAgentRuntime, createAiChangeSet, createAiOperation, createAiSurfaceService, createAiValidationResult, createCanvasErpPrototypeRiskSummary, createCanvasErpPrototypeScenario, createCanvasPluginFixtureCards, createCanvasPluginFixtureManifests, createCanvasPluginPermissionPrompt, createCanvasPluginSandboxPolicy, createCanvasPreviewSandboxRequest, createCanvasRendererSandboxRequest, createExtensionContext, createExtensionStorage, createManagedProvider, createMemoryAiAgentRuntimeStorage, createPromptApiProvider, createScriptContext, createServiceClient, createTestNodeStore, createTestPluginHarness, createWebLLMProvider, createWebhookEmitter, defaultLocalServerProbes, defineAction, defineConnector, defineExtension, defineFeatureModule, describeCapabilities, detectConnectors, emitConnectorArtifacts, evaluateCanvasPluginPermissionGate, evaluateCanvasPluginSandboxRequest, evaluateConnectorInstall, evaluateInstallConsent, executeScript, failClosedVerifier, filterByCategory, findEditorSchemaRisks, findMissingDependencies, generateScript, getCanvasErpPrototypeAuditEntriesForCard, getCanvasErpPrototypeCardsForFrame, getCanvasPluginFixture, getCommandRegistry, getPlatformCapabilities, getShortcutManager, getXNetMarkdownDirectiveSpecs, guardStore, guardedActionFetch, guardedFetch, hasUpdate, importerAdapters, installCommandHandler, installShortcutHandler, isAiRiskLevel, isAiScope, isAiTargetKind, isAllowedPluginLicense, isHostCompatible, isNetworkAllowed, isOllamaAvailable, isPaidPricing, isSchemaDefiningExtension, isSchemaReadAllowed, isSchemaWriteAllowed, isScriptNode, isServiceClientAvailable, ladderTierForTrust, listOllamaModels, matchSchemaIri, normalizeCanvasPluginWorkspacePolicy, packageName, parseAiMutationPlan, parseFeed, parseVersion, parseXNetPageFrontmatter, pascalCase, pickBestConnector, pluginLicenseText, probeOpenAiCompatible, quickSafetyCheck, recommendExtensions, renderEvent, renderMarkdownLineDiff, renderMarkdownReviewDiff, renderSelectionPrompt, resolveImporters, resolveInstallOrder, resolveMentionProviders, runAction, runAiPluginPipeline, runConnectorSync, runPluginCode, satisfiesRange, scaffoldPlugin, scriptToPluginManifest, searchMarketplace, serializeAiMutationPlan, shortSchemaName, shouldDispatch, sortMarketplace, stripXNetPageFrontmatter, summarizeProvenance, validateAiMutationPlan, validateCanvasPluginSandboxOutput, validateManifest, validateScript, validateScriptAST, validateXNetPageMarkdown, verifyProvenance, warnOnEditorSchemaRisks, wrapCliConnector, writeModeFor };
+/**
+ * Right to Leave (xNet Humane Internet Charter §Exit, exploration 0234).
+ *
+ * Leaving is a right, not a retention funnel. `leaveWithEverything` bundles
+ * everything you'd need to recreate yourself elsewhere — your whole workspace,
+ * your portable identity, and a README on how to re-import — into one archive.
+ * `deleteDay` is the honest, irreversible version: stop feeding the system.
+ *
+ * This module is the orchestration; the app injects the real capabilities
+ * (AiWorkspaceExporter for the workspace, the identity keystore, hub purge, OPFS
+ * destroy, consent-gated telemetry). Keeping them as ports makes the policy —
+ * "no confirmshaming, take everything, the local copy is yours" — testable in
+ * isolation.
+ */
+/** The capabilities the app wires in. Only `exportWorkspace`/`exportIdentity` are required. */
+interface RightToLeavePorts {
+    /** The full workspace as relative-path → file-content (e.g. via AiWorkspaceExporter). */
+    exportWorkspace(): Promise<Record<string, string>>;
+    /** The portable identity bundle (did:key + recovery), JSON-serializable. */
+    exportIdentity(): Promise<unknown>;
+    /** Tombstone the user's copies on every connected hub. Absent ⇒ offline-only user. */
+    purgeRemoteCopies?(): Promise<void>;
+    /** Wipe the local master copy (OPFS/SQLite). Absent ⇒ nothing local to wipe. */
+    destroyLocal?(): Promise<void>;
+    /** Record a non-identifying `account.left` signal (consent-gated). */
+    recordLeft?(): void;
+}
+interface LeaveBundle {
+    /** relative path → file content; a complete, portable copy of you. */
+    files: Record<string, string>;
+    exportedAt: string;
+}
+interface DeleteDayOptions {
+    /** Keep the local master copy on this device (export-and-go) vs. full wipe. */
+    keepLocal: boolean;
+    /** Injected timestamp (ISO) — no implicit clock, so the result is deterministic. */
+    now: string;
+}
+interface DeleteDayResult {
+    remotePurged: boolean;
+    localWiped: boolean;
+    recordedLeft: boolean;
+}
+declare const LEAVE_README = "# Your xNet data \u2014 yours to keep\n\nThis archive is a complete, portable copy of your workspace.\n\n- `workspace/` \u2014 every page, database, canvas, and node, plus a manifest.\n- `identity.did.json` \u2014 your portable did:key identity and recovery material.\n\nTo continue elsewhere: run your own hub (`xnet-hub start`) or any xNet-compatible\nbackend, then import this archive. Your did:key works on any hub \u2014 there is no\naccount to transfer and nothing held back. You don't need our permission to leave.\n";
+/**
+ * Everything you'd need to recreate yourself elsewhere, in one bundle. There is
+ * deliberately no "are you sure you'll miss out?" — this is a right, not a funnel.
+ */
+declare function leaveWithEverything(ports: RightToLeavePorts, opts: {
+    now: string;
+}): Promise<LeaveBundle>;
+/**
+ * Delete Day: stop feeding the system, for real. Tombstones remote copies on
+ * every hub and (unless `keepLocal`) wipes the local master too. The only signal
+ * emitted is an anonymous `account.left` — never anything that identifies who.
+ */
+declare function deleteDay(ports: RightToLeavePorts, opts: DeleteDayOptions): Promise<DeleteDayResult>;
+
+export { type AIComplexityLevel, type AICostModel, type AIGenerateRequest, type AIGenerateResponse, AIGenerationError, type AIMessage, type AIMessageRole, type AIModelCapabilities, type AIModelQuality, type AIPrivacyLevel, type AIProvider, type AIProviderConfig, type AIProviderOptions, AIProviderRouter, type AIProviderRouterOptions, type AIProviderType, type AIProviderUsage, AIRTABLE_CONNECTOR_ID, type AIRiskLevel, type AIScriptRequest, type AIScriptResponse, type AIStreamChunk, type AIToolCall, type AIToolSpec, type AIUsage, AI_GENERATED_PROVENANCE, AI_RISK_LEVELS, AI_SCOPES, AI_TARGET_KINDS, ALLOWED_PLUGIN_LICENSES, type ActionContext, type ActionDefinition, ActionDefinitionError, ActionDispatchError, type ActionEvent, ActionSsrfError, type ActionTrigger, type AgentToolContribution, type AgentToolInputSchema, type AiAgentApproval, type AiAgentApprovalRequestInput, type AiAgentApprovalResolveInput, type AiAgentApprovalStatus, type AiAgentBackgroundJob, type AiAgentBackgroundJobInput, type AiAgentBackgroundJobRunner, type AiAgentBackgroundJobStatus, type AiAgentDisplayState, type AiAgentDisplayStateKind, type AiAgentEvent, type AiAgentEventType, type AiAgentOrchestratorMode, type AiAgentRunSelectionTurnInput, type AiAgentRunTurnInput, type AiAgentRunTurnResult, AiAgentRuntime, type AiAgentRuntimeConfig, type AiAgentRuntimeListener, type AiAgentRuntimeSnapshot, type AiAgentRuntimeStorage, type AiAgentSelectionContext, type AiAgentSelectionKind, type AiAgentTelemetrySnapshot, type AiAgentThread, type AiAgentThreadCreateInput, type AiAgentThreadStatus, type AiAgentTurn, type AiAgentTurnRole, type AiAgentTurnStatus, type AiAssistMode, type AiAuditEvent, type AiAuthoredPlugin, AiAuthoringError, AiBudgetError, type AiCallableTool, type AiChangeSet, type AiCommandExposure, type AiContextPack, type AiContextPackResource, type AiContextRetriever, type AiContextSeed, type AiDatabaseMutationApplyResult, type AiExtraTool, type AiJsonSchema, type AiJsonSchemaType, type AiMutationPlan, type AiMutationPlanStatus, type AiOperation, type AiPageMarkdownApplyAdapter, type AiPageMarkdownApplyAdapterInput, type AiPageMarkdownApplyAdapterResult, type AiPageMarkdownApplyResult, type AiPageMarkdownRollbackResult, type AiPluginPipelineInput, type AiPluginPipelinePorts, type AiPluginPipelineResult, type AiResource, type AiResourceContent, type AiRetrievedNode, type AiRiskLevel, type AiScope, type AiSearchOptions, type AiSearchResult, type AiSurfaceLimits, AiSurfaceService, type AiSurfaceServiceConfig, type AiTargetKind, type AiToolCallResult, type AiToolDefinition, type AiValidationResult, type AirtableConnectorOptions, type AllowedPluginLicense, AnthropicProvider, type ArrayHelpers, type BlockContribution, type BlockProps, CANVAS_PLUGIN_FIXTURES, CHANNEL_SCHEMA, CHAT_MESSAGE_SCHEMA, CONNECTOR_CATEGORY, CONNECTOR_META, CRM_CANVAS_PLUGIN_FIXTURE, type CanvasCardContribution, type CanvasContribution, type CanvasContributionBase, type CanvasContributionPermission, type CanvasEdgeContribution, type CanvasErpPrototypeAuditEntry, type CanvasErpPrototypeAuditOperation, type CanvasErpPrototypeAuditSource, type CanvasErpPrototypeCard, type CanvasErpPrototypeCommand, type CanvasErpPrototypeEdge, type CanvasErpPrototypeEntityKind, type CanvasErpPrototypeLayoutKind, type CanvasErpPrototypeQueryFrame, type CanvasErpPrototypeQueryPredicate, type CanvasErpPrototypeRect, type CanvasErpPrototypeRisk, type CanvasErpPrototypeRiskSummary, type CanvasErpPrototypeScenario, type CanvasErpPrototypeStatus, type CanvasIngestInputKind, type CanvasIngestorContribution, type CanvasInspectorContribution, type CanvasInspectorPlacement, type CanvasLayoutContribution, type CanvasLayoutScope, type CanvasPluginFixture, type CanvasPluginFixtureCardSample, type CanvasPluginFixtureKind, type CanvasPluginPermissionDecisionStatus, type CanvasPluginPermissionGateDecision, type CanvasPluginPermissionGateInput, type CanvasPluginPermissionPrompt, type CanvasPluginPermissionPromptOption, type CanvasPluginPromptMode, type CanvasPluginSandboxDecision, type CanvasPluginSandboxDomAccess, type CanvasPluginSandboxKind, type CanvasPluginSandboxMutationAccess, type CanvasPluginSandboxNetworkAccess, type CanvasPluginSandboxOutput, type CanvasPluginSandboxOutputKind, type CanvasPluginSandboxOutputValidation, type CanvasPluginSandboxPolicy, type CanvasPluginSandboxRequest, type CanvasPluginWorkspacePolicy, type CanvasPreviewTier, type CanvasRendererSandboxContribution, type CanvasTemplateCategory, type CanvasTemplateContribution, type CanvasToolContribution, type CanvasToolGroup, CapabilityError, type CommandContext, type CommandContribution, CommandRegistry, type CommandScope, type ConnectorArtifacts, type ConnectorCadence, type ConnectorDefinition, ConnectorDefinitionError, type ConnectorDetection, type ConnectorEnv, type ConnectorFetch, type ConnectorInstallGate, type ConnectorStore, type ConnectorSyncContext, ConnectorSyncError, type ConnectorSyncResult, type ConnectorSyncSpec, type ConnectorTier, type ConnectorToolDescriptor, type ConsentDecision, type ConsentLine, ContributionRegistry, DEFAULT_PLUGIN_LICENSE, type DefinedAction, type DefinedConnector, type DeleteDayOptions, type DeleteDayResult, type DeliveryResult, DependencyCycleError, type DependencyNode, type Disposable$1 as Disposable, ERP_CANVAS_PLUGIN_FIXTURE, EXTERNAL_ITEM_SCHEMA, type EditorContribution, type EditorSchemaRisk, type EmailActionOptions, type ExtensionContext, type ExtensionStorage, FEED_ITEM_SCHEMA, type FeatureModule, type FeedEntry, type FetchJson, type FetchLike, type FlatNode, type FormatHelpers, GITHUB_CONNECTOR_ID, type GeneratedScript, type GithubConnectorOptions, type GuardableConnectorStore, type IProcessManager, type ImporterContribution, type InstallOptions, LEAVE_README, LINEAR_CONNECTOR_ID, type LabRunOutcome, type LadderRuntimeTier, type LanguageModelLike, type LanguageModelMonitor, type LanguageModelSessionLike, type LeaveBundle, type LicenseCheckResult, LicenseRequiredError, type LinearConnectorOptions, type LocalAPIConfig, type LocalAPITokenConfig, type LocalAPITokenScope, type LocalAPITokenSummary, type LocalServerProbe, MARKETPLACE_PROVENANCE, type MCPPropertySchema, type MCPRequest, type MCPResource, type MCPResponse, type MCPServerConfig, type MCPTool, MEDIA_PROVIDER_CANVAS_PLUGIN_FIXTURE, type ManagedBudgetSnapshot, ManagedProvider, type ManagedProviderOptions, MarketplaceClient, type MarketplaceClientOptions, type MarketplaceEntry, type MarketplaceSort, type MathHelpers, type MentionProviderContribution, type MentionSuggestion, MiddlewareChain, type MissingDependency, type ModuleCapabilities, NOTION_CONNECTOR_ID, type NodeChangeEvent, type NodeChangeEventData, type NodeData, type NodeStoreAPI, type NodeStoreMiddleware, type NotionConnectorOptions, OllamaProvider, OpenAICompatibleProvider, type OpenAICompatibleProviderOptions, OpenAIProvider, type PendingChange, type Platform, type PlatformCapabilities, type PluginContributions, PluginError, type PluginNode, type PluginNodeChangeEvent, type PluginNodeChangeListener, type PluginPermissions, type PluginPricing, type PluginRating, PluginRegistry, type PluginRunInput, type PluginRunResult, PluginRuntimeError, type PluginRuntimeLadder, PluginSchema, type PluginStatus, PluginValidationError, type ProcessManagerEvents, type PromptApiAvailability, PromptApiProvider, type PromptApiProviderOptions, type PropertyCellProps, type PropertyEditorProps, type PropertyHandler, type PropertyHandlerContribution, type Provenance, type ProvenanceResult, type ProvenanceVerifier, type QueryFilter, RSS_CONNECTOR_ID, type RatingSummary, type RecommendOptions, type RegisteredPlugin, type ResolveMentionOptions, type RightToLeavePorts, type RssConnectorOptions, type RunActionPorts, type RunConnectorSyncPorts, type RunPluginCodeInput, SCAFFOLD_SYSTEM_GUARD, SERVICE_IPC_CHANNELS, SLACK_CONNECTOR_ID, type SandboxOptions, ScaffoldError, type ScaffoldResult, type ScaffoldSpec, type ScaffoldTemplate, type SchemaContribution, type SchemaData, type SchemaDefinition, type SchemaProperty, type SchemaRegistryAPI, type ScriptContext, ScriptError, type ScriptExecutionResult, type ScriptExecutor, ScriptGenerationError, ScriptGenerator, type ScriptGeneratorOptions, type ScriptNode, type ScriptNodeChangeEvent, type ScriptOutputType, ScriptRunner, type ScriptRunnerOptions, ScriptSandbox, ScriptSchema, type ScriptStore, ScriptTimeoutError, type ScriptToManifestInput, type ScriptTriggerType, ScriptValidationError, type SemVer, type ServiceClient, type ServiceCommunication, type ServiceDefinition, type ServiceHealthCheck, type ServiceLifecycle, type ServiceOutputEvent, type ServiceProcessConfig, type ServiceProvides, type ServiceState, type ServiceStatus, type ServiceStatusEvent, type SettingContribution, type SettingsPanelProps, ShortcutManager, type SidebarContribution, type SlackConnectorOptions, type SlashCommandContext, type SlashCommandContribution, type StatusBarContribution, type TelemetryReporter, type TestHarnessOptions, type TestNodeStore, type TestPluginHarness, type TextHelpers, type ToolCallingFidelity, type ToolbarContribution, TypedRegistry, type UsageSignal, type ValidationResult, type VerifyProvenanceInput, type ViewContribution, type ViewProps, type WebLLMEngineLike, WebLLMProvider, type WebLLMProviderOptions, type WebhookConfig, WebhookEmitter, type WebhookOutOptions, type WebhookPayload, type WidgetContribution, type WidgetContributionConfigField, type WidgetContributionProps, type WorkspaceCommand, type WrapCliConnectorOptions, type WriteMode, XNET_MARKDOWN_DIRECTIVE_SPECS, type XNetExtension, type XNetMarkdownDiffLine, type XNetMarkdownDiffLineKind, type XNetMarkdownDirective, type XNetMarkdownDirectiveSpec, type XNetMarkdownReviewDiff, type XNetPageMarkdownFrontmatter, type XNetPageMarkdownValidation, type XNetPageMarkdownValidationOptions, agentToolToExtraTool, agentToolsAsExtraTools, aggregateRatings, assertNetwork, assertPublicUrl, assertSchemaWrite, assistTurnProvenance, attachAiPlanValidation, buildAirtableConnector, buildDiscordAction, buildEmailAction, buildGithubConnector, buildLinearConnector, buildNotionConnector, buildRetryPrompt, buildRssConnector, buildScriptPrompt, buildSlackConnector, buildSlackWebhookAction, buildTelegramAction, buildWebhookOutAction, classifyAiAgentDisplayState, compareVersions, composeAssistSystemPrompt, connectorAsImporter, connectorMarketplaceEntry, contributionsAsAiTools, createAIProvider, createAIProviderRouter, createAiAgentRuntime, createAiChangeSet, createAiOperation, createAiSurfaceService, createAiValidationResult, createCanvasErpPrototypeRiskSummary, createCanvasErpPrototypeScenario, createCanvasPluginFixtureCards, createCanvasPluginFixtureManifests, createCanvasPluginPermissionPrompt, createCanvasPluginSandboxPolicy, createCanvasPreviewSandboxRequest, createCanvasRendererSandboxRequest, createExtensionContext, createExtensionStorage, createManagedProvider, createMemoryAiAgentRuntimeStorage, createPromptApiProvider, createScriptContext, createServiceClient, createTestNodeStore, createTestPluginHarness, createWebLLMProvider, createWebhookEmitter, defaultLocalServerProbes, defineAction, defineConnector, defineExtension, defineFeatureModule, deleteDay, describeCapabilities, detectConnectors, downloadPromptApiModel, emitConnectorArtifacts, evaluateCanvasPluginPermissionGate, evaluateCanvasPluginSandboxRequest, evaluateConnectorInstall, evaluateInstallConsent, executeScript, failClosedVerifier, filterByCategory, findEditorSchemaRisks, findMissingDependencies, generateScript, getCanvasErpPrototypeAuditEntriesForCard, getCanvasErpPrototypeCardsForFrame, getCanvasPluginFixture, getCommandRegistry, getPlatformCapabilities, getShortcutManager, getXNetMarkdownDirectiveSpecs, guardStore, guardedActionFetch, guardedFetch, hasUpdate, importerAdapters, installCommandHandler, installShortcutHandler, isAiRiskLevel, isAiScope, isAiTargetKind, isAllowedPluginLicense, isHostCompatible, isNetworkAllowed, isOllamaAvailable, isPaidPricing, isSchemaDefiningExtension, isSchemaReadAllowed, isSchemaWriteAllowed, isScriptNode, isServiceClientAvailable, ladderTierForTrust, leaveWithEverything, listOllamaModels, matchSchemaIri, normalizeCanvasPluginWorkspacePolicy, packageName, parseAiMutationPlan, parseFeed, parseVersion, parseXNetPageFrontmatter, pascalCase, pickBestConnector, pluginLicenseText, probeOpenAiCompatible, promptApiAvailability, quickSafetyCheck, recommendExtensions, renderEvent, renderMarkdownLineDiff, renderMarkdownReviewDiff, renderSelectionPrompt, resolveImporters, resolveInstallOrder, resolveMentionProviders, runAction, runAiPluginPipeline, runConnectorSync, runPluginCode, satisfiesRange, scaffoldPlugin, scriptToPluginManifest, searchMarketplace, serializeAiMutationPlan, shortSchemaName, shouldDispatch, sortMarketplace, stripXNetPageFrontmatter, summarizeProvenance, validateAiMutationPlan, validateCanvasPluginSandboxOutput, validateManifest, validateScript, validateScriptAST, validateXNetPageMarkdown, verifyProvenance, warnOnEditorSchemaRisks, wrapCliConnector, writeModeFor };

package/dist/index.js

@@ -2851,6 +2851,7 @@ function defineAction(def) {
 }
 
 // src/actions/ssrf.ts
+import { validateExternalUrl } from "@xnetjs/core";
 var ActionSsrfError = class extends Error {
   constructor(message, url) {
     super(message);
@@ -2858,58 +2859,13 @@ var ActionSsrfError = class extends Error {
     this.name = "ActionSsrfError";
   }
 };
-function parseIpv4(host) {
-  const parts = host.split(".");
-  if (parts.length !== 4) return null;
-  let value = 0;
-  for (const part of parts) {
-    if (!/^\d{1,3}$/.test(part)) return null;
-    const octet = Number(part);
-    if (octet > 255) return null;
-    value = value * 256 + octet;
-  }
-  return value >>> 0;
-}
-function isPrivateIpv4(host) {
-  const ip = parseIpv4(host);
-  if (ip === null) return false;
-  const inRange = (base, bits) => {
-    const baseIp = parseIpv4(base);
-    const mask = bits === 0 ? 0 : 4294967295 << 32 - bits >>> 0;
-    return (ip & mask) === (baseIp & mask);
-  };
-  return inRange("0.0.0.0", 8) || // "this" network / 0.0.0.0
-  inRange("10.0.0.0", 8) || // private
-  inRange("127.0.0.0", 8) || // loopback
-  inRange("169.254.0.0", 16) || // link-local + cloud metadata (169.254.169.254)
-  inRange("172.16.0.0", 12) || // private
-  inRange("192.168.0.0", 16) || // private
-  inRange("100.64.0.0", 10);
-}
-function isBlockedIpv6(host) {
-  const h = host.replace(/^\[|\]$/g, "").toLowerCase();
-  if (h === "::1" || h === "::") return true;
-  if (h.startsWith("fc") || h.startsWith("fd")) return true;
-  if (h.startsWith("::ffff:") || h.startsWith("64:ff9b::")) return true;
-  const firstHextet = parseInt(h.split(":")[0] || "0", 16);
-  if (Number.isFinite(firstHextet) && (firstHextet & 65472) === 65152) return true;
-  return false;
-}
-var BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "metadata.google.internal"]);
 function assertPublicUrl(rawUrl) {
-  let url;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    throw new ActionSsrfError(`outbound action URL is not a valid URL: ${rawUrl}`, rawUrl);
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new ActionSsrfError(`outbound action URL must be http(s): ${rawUrl}`, rawUrl);
-  }
-  const host = url.hostname.toLowerCase().replace(/\.$/, "");
-  const blocked = BLOCKED_HOSTNAMES.has(host) || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || (host.startsWith("[") ? isBlockedIpv6(host) : isPrivateIpv4(host));
-  if (blocked) {
-    throw new ActionSsrfError(`outbound action URL targets a non-public host: ${host}`, rawUrl);
+  const result = validateExternalUrl(rawUrl);
+  if (!result.valid) {
+    throw new ActionSsrfError(
+      result.error ?? `outbound action URL targets a non-public host: ${rawUrl}`,
+      rawUrl
+    );
   }
 }
 
@@ -10234,7 +10190,7 @@ var ManagedProvider = class {
     return createCapabilities({
       tools: true,
       structuredOutputs: true,
-      streaming: false,
+      streaming: true,
       contextWindow: 2e5,
       local: false,
       privacy: "proxy",
@@ -10277,6 +10233,82 @@ var ManagedProvider = class {
       } : {}
     };
   }
+  /**
+   * Stream the managed completion over SSE (`/ai/chat/stream`). Yields a `text`
+   * chunk per delta, then `usage` + `done`; emits the live budget from the terminal
+   * `done` event. A `402` (pre-stream) or an `ai_budget_exceeded` error event
+   * becomes an {@link AiBudgetError} (exploration 0244).
+   */
+  async *stream(request) {
+    const reqModel = this.model ?? "openrouter/auto";
+    const res = await this.fetchImpl(`${this.baseUrl}/ai/chat/stream`, {
+      method: "POST",
+      headers: { "content-type": "application/json", accept: "text/event-stream" },
+      credentials: "include",
+      body: JSON.stringify({ model: reqModel, messages: requestToMessages(request) })
+    });
+    if (res.status === 402) {
+      const data = await res.json().catch(() => ({}));
+      throw new AiBudgetError(data.spentUsd ?? 0, data.budgetUsd ?? 0);
+    }
+    if (!res.ok || !res.body) {
+      const data = await res.json().catch(() => ({}));
+      throw new AIGenerationError(
+        `Managed AI stream error: ${res.status} ${data.error ?? ""}`.trim(),
+        this.name
+      );
+    }
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let event = "message";
+    let model = reqModel;
+    const handle = (ev, payload) => {
+      if (!payload) return null;
+      const data = JSON.parse(payload);
+      if (ev === "delta" && typeof data.text === "string") {
+        return { chunk: { type: "text", text: data.text, provider: this.name, model } };
+      }
+      if (ev === "done") {
+        model = data.model ?? model;
+        this.emitBudget(data);
+        return { done: true };
+      }
+      if (ev === "error") {
+        if (data.error === "ai_budget_exceeded") {
+          throw new AiBudgetError(data.spentUsd ?? 0, data.budgetUsd ?? 0);
+        }
+        throw new AIGenerationError(
+          `Managed AI stream error: ${data.error ?? ""}`.trim(),
+          this.name
+        );
+      }
+      return null;
+    };
+    for (; ; ) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      let nl;
+      while ((nl = buffer.indexOf("\n")) !== -1) {
+        const line = buffer.slice(0, nl).trimEnd();
+        buffer = buffer.slice(nl + 1);
+        if (line === "") {
+          event = "message";
+          continue;
+        }
+        if (line.startsWith("event:")) {
+          event = line.slice(6).trim();
+          continue;
+        }
+        if (line.startsWith("data:")) {
+          const out = handle(event, line.slice(5).trim());
+          if (out?.chunk) yield out.chunk;
+        }
+      }
+    }
+    yield { type: "done", provider: this.name, model };
+  }
   emitBudget(data) {
     if (!this.onBudget) return;
     if (typeof data.spendThisPeriodUsd !== "number" || typeof data.budgetUsd !== "number") return;
@@ -10510,18 +10542,24 @@ var AiAgentRuntime = class {
     this.storage = config.storage ?? createMemoryAiAgentRuntimeStorage();
     this.clock = config.clock ?? (() => /* @__PURE__ */ new Date());
     this.mode = config.mode ?? "hybrid";
+    this.assistMode = config.assistMode ?? "scaffold";
     this.maxEvents = config.maxEvents ?? DEFAULT_MAX_EVENTS;
   }
   snapshot = createEmptySnapshot();
   storage;
   clock;
   mode;
+  assistMode;
   maxEvents;
   sequence = 0;
   loaded = false;
   listeners = /* @__PURE__ */ new Set();
   activeRuns = /* @__PURE__ */ new Map();
   activeJobs = /* @__PURE__ */ new Map();
+  /** The active assist mode (`scaffold` by default; `draft` is opt-in only). */
+  getAssistMode() {
+    return this.assistMode;
+  }
   async load() {
     const stored = await this.storage.load();
     this.snapshot = normalizeSnapshot(stored);
@@ -10578,7 +10616,10 @@ var AiAgentRuntime = class {
       content: "",
       createdAt: now,
       updatedAt: now,
-      metadata: { runId }
+      // Provenance is always legible: every assistant turn is marked
+      // ai-generated and carries the assist mode it was produced under, so a
+      // surface can show an `ai-generated` badge (Charter §Agency).
+      metadata: { runId, ...assistTurnProvenance(this.assistMode) }
     });
     this.activeRuns.set(runId, controller);
     this.snapshot = {
@@ -11048,6 +11089,17 @@ function createMemoryAiAgentRuntimeStorage(initial) {
     snapshot: () => cloneSnapshot(current)
   };
 }
+var AI_GENERATED_PROVENANCE = "ai-generated";
+var SCAFFOLD_SYSTEM_GUARD = "Work in scaffold mode: help the user think, do not think for them. Prefer an outline, options, and cited sources over finished prose, and leave the writing \u2014 and the authorship \u2014 to the user. Mark anything you author as AI-generated.";
+function composeAssistSystemPrompt(base, mode) {
+  if (mode !== "scaffold") return base;
+  return base ? `${base}
+
+${SCAFFOLD_SYSTEM_GUARD}` : SCAFFOLD_SYSTEM_GUARD;
+}
+function assistTurnProvenance(mode) {
+  return { provenance: AI_GENERATED_PROVENANCE, assistMode: mode };
+}
 function renderSelectionPrompt(instruction, selection) {
   const lines = [
     instruction.trim(),
@@ -11162,6 +11214,75 @@ function writeModeFor(toolCalling) {
   return toolCalling === "reliable" ? "agentic" : "propose-only";
 }
 
+// src/ai/connectors/prompt-api-provider.ts
+var PromptApiProvider = class {
+  name = "prompt-api";
+  session;
+  model;
+  constructor(options) {
+    this.session = options.session;
+    this.model = options.model ?? "gemini-nano";
+  }
+  async generate(prompt) {
+    return this.session.prompt(prompt);
+  }
+  async *stream(request) {
+    const input = toPromptInput(request);
+    for await (const text3 of this.session.promptStreaming(input)) {
+      if (text3) yield { type: "text", text: text3, provider: this.name, model: this.model };
+    }
+    yield { type: "done", provider: this.name, model: this.model };
+  }
+  getCapabilities() {
+    return {
+      tools: false,
+      // no tool calling in the Prompt API yet
+      structuredOutputs: true,
+      // via responseConstraint, not modeled here
+      streaming: true,
+      contextWindow: 4096,
+      local: true,
+      privacy: "local",
+      quality: "local"
+    };
+  }
+};
+async function createPromptApiProvider(factory) {
+  const lm = factory ?? getGlobalLanguageModel();
+  if (!lm) return null;
+  const availability = await lm.availability();
+  if (availability === "unavailable") return null;
+  const session = await lm.create();
+  return new PromptApiProvider({ session });
+}
+async function promptApiAvailability(factory) {
+  const lm = factory ?? getGlobalLanguageModel();
+  if (!lm) return "unavailable";
+  try {
+    return await lm.availability();
+  } catch {
+    return "unavailable";
+  }
+}
+async function downloadPromptApiModel(onProgress, factory) {
+  const lm = factory ?? getGlobalLanguageModel();
+  if (!lm) return false;
+  await lm.create({
+    monitor: (monitor) => monitor.addEventListener("downloadprogress", (event) => onProgress?.(event.loaded))
+  });
+  return true;
+}
+function getGlobalLanguageModel() {
+  const candidate = globalThis.LanguageModel;
+  return candidate ?? null;
+}
+function toPromptInput(request) {
+  if (request.messages && request.messages.length > 0) {
+    return request.messages.map((m) => `${m.role}: ${m.content}`).join("\n");
+  }
+  return request.prompt ?? "";
+}
+
 // src/ai/connectors/detect.ts
 var CONNECTOR_META = {
   // Preferred when available: no key to paste, metered + budget-capped, switchable
@@ -11247,14 +11368,16 @@ async function detectConnectors(env = {}) {
   const probeBridge = env.probeBridge ?? defaultProbeBridge;
   const managedUrl = env.managedUrl ?? "";
   const probeManaged = env.probeManaged ?? defaultProbeManaged;
-  const [webgpu, promptApi, localServer, cloudKey, bridge, managed] = await Promise.all([
+  const [webgpu, webllmEngine, promptApi, localServer, cloudKey, bridge, managed] = await Promise.all([
     resolveBool(env.hasWebGpu, defaultHasWebGpu),
+    resolveBool(env.hasWebLLMEngine, () => false),
     resolveBool(env.hasPromptApi, defaultHasPromptApi),
     detectLocalServer(localServerProbes),
     resolveBool(env.hasCloudKey, () => false),
     probeBridge(bridgeUrl),
     probeManaged(managedUrl).catch(() => false)
   ]);
+  const webllm = webgpu && webllmEngine;
   const base = [
     {
       tier: "managed",
@@ -11280,8 +11403,10 @@ async function detectConnectors(env = {}) {
     },
     {
       tier: "webllm",
-      available: webgpu,
-      ...webgpu ? {} : { setupHint: "WebGPU unavailable; use a Chromium browser or Safari 26+." }
+      available: webllm,
+      ...webllm ? {} : {
+        setupHint: webgpu ? "In-browser model not enabled in this build yet." : "WebGPU unavailable; use a Chromium browser or Safari 26+."
+      }
     },
     {
       tier: "prompt-api",
@@ -11319,8 +11444,8 @@ async function resolveBool(fn, fallback) {
 function defaultHasWebGpu() {
   return typeof navigator !== "undefined" && "gpu" in navigator;
 }
-function defaultHasPromptApi() {
-  return typeof globalThis !== "undefined" && "LanguageModel" in globalThis;
+async function defaultHasPromptApi() {
+  return await promptApiAvailability() === "available";
 }
 
 // src/ai/connectors/webllm-provider.ts
@@ -11391,58 +11516,6 @@ function toWebLLMMessages(request) {
   return [{ role: "user", content: request.prompt ?? "" }];
 }
 
-// src/ai/connectors/prompt-api-provider.ts
-var PromptApiProvider = class {
-  name = "prompt-api";
-  session;
-  model;
-  constructor(options) {
-    this.session = options.session;
-    this.model = options.model ?? "gemini-nano";
-  }
-  async generate(prompt) {
-    return this.session.prompt(prompt);
-  }
-  async *stream(request) {
-    const input = toPromptInput(request);
-    for await (const text3 of this.session.promptStreaming(input)) {
-      if (text3) yield { type: "text", text: text3, provider: this.name, model: this.model };
-    }
-    yield { type: "done", provider: this.name, model: this.model };
-  }
-  getCapabilities() {
-    return {
-      tools: false,
-      // no tool calling in the Prompt API yet
-      structuredOutputs: true,
-      // via responseConstraint, not modeled here
-      streaming: true,
-      contextWindow: 4096,
-      local: true,
-      privacy: "local",
-      quality: "local"
-    };
-  }
-};
-async function createPromptApiProvider(factory) {
-  const lm = factory ?? getGlobalLanguageModel();
-  if (!lm) return null;
-  const availability = await lm.availability();
-  if (availability === "unavailable") return null;
-  const session = await lm.create();
-  return new PromptApiProvider({ session });
-}
-function getGlobalLanguageModel() {
-  const candidate = globalThis.LanguageModel;
-  return candidate ?? null;
-}
-function toPromptInput(request) {
-  if (request.messages && request.messages.length > 0) {
-    return request.messages.map((m) => `${m.role}: ${m.content}`).join("\n");
-  }
-  return request.prompt ?? "";
-}
-
 // src/services/client.ts
 var SERVICE_IPC_CHANNELS = {
   START: "xnet:service:start",
@@ -11697,10 +11770,51 @@ var WebhookEmitter = class {
 function createWebhookEmitter(store) {
   return new WebhookEmitter(store);
 }
+
+// src/services/right-to-leave.ts
+var LEAVE_README = `# Your xNet data \u2014 yours to keep
+
+This archive is a complete, portable copy of your workspace.
+
+- \`workspace/\` \u2014 every page, database, canvas, and node, plus a manifest.
+- \`identity.did.json\` \u2014 your portable did:key identity and recovery material.
+
+To continue elsewhere: run your own hub (\`xnet-hub start\`) or any xNet-compatible
+backend, then import this archive. Your did:key works on any hub \u2014 there is no
+account to transfer and nothing held back. You don't need our permission to leave.
+`;
+function underFolder(folder, files) {
+  const out = {};
+  for (const [path, content] of Object.entries(files)) out[`${folder}${path}`] = content;
+  return out;
+}
+async function leaveWithEverything(ports, opts) {
+  const [workspace, identity] = await Promise.all([ports.exportWorkspace(), ports.exportIdentity()]);
+  const files = {
+    ...underFolder("workspace/", workspace),
+    "identity.did.json": `${JSON.stringify(identity, null, 2)}
+`,
+    "README.md": LEAVE_README
+  };
+  return { files, exportedAt: opts.now };
+}
+async function ran(fn) {
+  if (!fn) return false;
+  await fn();
+  return true;
+}
+async function deleteDay(ports, opts) {
+  return {
+    remotePurged: await ran(ports.purgeRemoteCopies),
+    localWiped: opts.keepLocal ? false : await ran(ports.destroyLocal),
+    recordedLeft: await ran(ports.recordLeft)
+  };
+}
 export {
   AIGenerationError,
   AIProviderRouter,
   AIRTABLE_CONNECTOR_ID,
+  AI_GENERATED_PROVENANCE,
   AI_RISK_LEVELS,
   AI_SCOPES,
   AI_TARGET_KINDS,
@@ -11730,6 +11844,7 @@ export {
   EXTERNAL_ITEM_SCHEMA,
   FEED_ITEM_SCHEMA,
   GITHUB_CONNECTOR_ID,
+  LEAVE_README,
   LINEAR_CONNECTOR_ID,
   LicenseRequiredError,
   MARKETPLACE_PROVENANCE,
@@ -11748,6 +11863,7 @@ export {
   PluginValidationError,
   PromptApiProvider,
   RSS_CONNECTOR_ID,
+  SCAFFOLD_SYSTEM_GUARD,
   SERVICE_IPC_CHANNELS,
   SLACK_CONNECTOR_ID,
   ScaffoldError,
@@ -11770,6 +11886,7 @@ export {
   assertNetwork,
   assertPublicUrl,
   assertSchemaWrite,
+  assistTurnProvenance,
   attachAiPlanValidation,
   buildAirtableConnector,
   buildDiscordAction,
@@ -11786,6 +11903,7 @@ export {
   buildWebhookOutAction,
   classifyAiAgentDisplayState,
   compareVersions,
+  composeAssistSystemPrompt,
   connectorAsImporter,
   connectorMarketplaceEntry,
   contributionsAsAiTools,
@@ -11820,9 +11938,11 @@ export {
   defineConnector,
   defineExtension,
   defineFeatureModule,
+  deleteDay,
   deriveTrustTier,
   describeCapabilities,
   detectConnectors,
+  downloadPromptApiModel,
   emitConnectorArtifacts,
   evaluateCanvasPluginPermissionGate,
   evaluateCanvasPluginSandboxRequest,
@@ -11862,6 +11982,7 @@ export {
   isScriptNode,
   isServiceClientAvailable,
   ladderTierForTrust,
+  leaveWithEverything,
   listOllamaModels,
   matchSchemaIri,
   normalizeCanvasPluginWorkspacePolicy,
@@ -11874,6 +11995,7 @@ export {
   pickBestConnector,
   pluginLicenseText,
   probeOpenAiCompatible,
+  promptApiAvailability,
   quickSafetyCheck,
   recommendExtensions,
   renderEvent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xnetjs/plugins",
-  "version": "0.0.3",
+  "version": "0.1.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -30,10 +30,10 @@
   },
   "dependencies": {
     "acorn": "^8.15.0",
-    "@xnetjs/core": "0.0.3",
-    "@xnetjs/abuse": "0.0.3",
+    "@xnetjs/abuse": "0.1.0",
+    "@xnetjs/core": "0.1.0",
     "@xnetjs/trust": "0.0.2",
-    "@xnetjs/data": "0.0.3",
+    "@xnetjs/data": "0.1.0",
     "@xnetjs/slack-compat": "0.0.2"
   },
   "peerDependencies": {
@@ -48,7 +48,7 @@
     "tsup": "^8.0.0",
     "typescript": "^5.4.0",
     "vitest": "^4.0.0",
-    "@xnetjs/licenses": "0.0.2"
+    "@xnetjs/licenses": "0.0.3"
   },
   "scripts": {
     "build": "tsup",