@yieldfabric/terminal 1.0.0 → 1.1.1

package/LICENSE.md

@@ -0,0 +1,293 @@
+# YieldFabric Proprietary Source Code Review and Non-Use Agreement
+
+Version 1.0
+
+Copyright (c) 2026 YieldFabric Technologies Ltd, DIFC, UAE.
+All rights reserved.
+
+## 1. Parties, scope, and acceptance
+
+1.1. "YieldFabric" means YieldFabric Technologies Ltd, incorporated in the
+Dubai International Financial Centre, United Arab Emirates. "Customer" means
+the legal entity identified in a Source Review Authorization signed by both
+parties. That authorization and this version of these terms together form
+the "Agreement".
+
+1.2. These materials are proprietary. Possession of a copy, access to a
+repository, package installation, technical documentation, or payment for
+another YieldFabric service does not by itself grant a source-code license.
+Review access under this Agreement begins only after both parties sign an
+authorization incorporating these terms. YieldFabric supplies the customer
+authorization form; the source repository includes the template as
+`SOURCE_REVIEW_AUTHORIZATION.md`. A separate express written license from
+YieldFabric may grant other specified rights.
+
+1.3. "Source Materials" means the YieldFabric-owned source code in the
+repositories and exact snapshots identified in the authorization, together
+with associated comments, scripts, tests, type declarations, schemas,
+designs, specifications, documentation, and extracts made available for
+review. Updates, other repositories, and repository history are excluded
+unless expressly identified in an additional written authorization.
+
+1.4. "Confidential Information" means non-public Source Materials and
+non-public technical or business information disclosed by YieldFabric in
+connection with the review, including architecture, algorithms, methods,
+workflows, security designs, know-how, and information learned through the
+review. It includes notes, analyses, reports, and other records to the extent
+they contain or reveal that information. Information marked confidential or
+reasonably understood to be confidential from its nature or the circumstances
+of disclosure is covered.
+
+1.5. These terms govern Customer and its Authorized Reviewers. They do not
+restrict YieldFabric's own development, licensing, or use of its property, or
+work performed on its behalf under its separate written authorizations.
+
+## 2. Limited permission to view
+
+2.1. During the specified access period, YieldFabric grants Customer a limited,
+revocable, non-exclusive, non-transferable, non-sublicensable permission for
+the individuals named in the authorization ("Authorized Reviewers") to
+visually inspect the identified Source Materials solely for the exact
+internal assessment described there ("Review Purpose").
+
+2.2. Inspection may take place only in the review environment identified by
+YieldFabric. Only transient technical copies strictly necessary to display
+the materials in that environment are permitted. There is no permission to
+clone, pull, download, export, print, photograph, screen-record, or retain the
+Source Materials, or to copy them to a clipboard or another system. Technical
+availability of any such function does not authorize its use.
+
+2.3. Unless the authorization expressly permits them, Customer may not make
+review notes or reports containing source excerpts or confidential technical
+detail. Any permitted notes or reports must remain in the approved environment,
+be used only for the Review Purpose, and remain subject to this Agreement.
+Disclosure of findings is limited to Authorized Reviewers and YieldFabric.
+
+2.4. No right to compile, build, execute, test by execution, deploy, host,
+integrate, modify, distribute, or commercially exploit the Source Materials
+is granted. Rights to use any runtime package, compiled output, hosted service,
+or API require a separate express license. Technical examples and installation
+instructions do not expand this permission.
+
+## 3. Prohibited copying, development, and other use
+
+3.1. Except for the specific permission in section 2 or an express written
+exception signed by YieldFabric, Customer shall not, directly or indirectly:
+
+- reproduce, modify, translate, adapt, port, distribute, publish, sell,
+  license, sublicense, assign, or otherwise transfer the Source Materials;
+- create derivative works, replacement implementations, or other software,
+  products, services, designs, or specifications using the Source Materials
+  or Confidential Information;
+- extract, reconstruct, or reimplement confidential algorithms, architecture,
+  methods, workflows, or know-how, including in another programming language;
+- use the Source Materials or Confidential Information for development,
+  competitive analysis, benchmarking, commercialization, or any purpose
+  outside the Review Purpose;
+- direct, enable, or assist another person to perform a prohibited act,
+  including by passing on descriptions, specifications, or remembered details;
+- remove or obscure proprietary notices, circumvent review controls, or
+  represent that access grants ownership or broader rights.
+
+The permitted visual inspection itself is not prohibited by this section.
+
+3.2. Customer receives no "residuals" right to use or disclose Confidential
+Information retained in unaided memory. Remembering information, changing its
+form, or avoiding literal copying does not authorize its use.
+
+3.3. Confidentiality and confidential-information non-use restrictions do not
+apply to information Customer demonstrates through contemporaneous written
+records: (a) was lawfully known to it without restriction before disclosure;
+(b) became publicly available without breach by Customer or its representatives;
+(c) was lawfully received from a third party entitled to disclose it without
+restriction; or (d) was independently developed without using or referring
+to the Source Materials or Confidential Information. Public knowledge of
+individual elements does not establish that a confidential combination is
+public. These exceptions do not grant rights in YieldFabric's copyrighted
+expression, patents, or other protected property.
+
+## 4. No patenting or appropriation of disclosed technology
+
+4.1. Customer shall not directly or indirectly apply for, procure, prosecute,
+or assist any person in obtaining any patent, utility model, or other
+registered intellectual property right claiming subject matter derived from
+or developed using the Source Materials or Confidential Information. Customer
+shall not acquire or assert such a right against YieldFabric, its licensees,
+or customers. No patent license is granted by this Agreement.
+
+4.2. "Restricted Developments" means modifications, derivative works, or
+inventions created by or for Customer through an act prohibited by section 3
+and incorporating, derived from, or developed using the Source Materials or
+Confidential Information. To the extent legally permitted, Customer hereby
+assigns to YieldFabric all intellectual property rights that Customer owns
+or subsequently acquires in Restricted Developments. Where a present
+assignment is ineffective, Customer shall assign those rights promptly when
+they arise or are acquired and execute the documents necessary to do so.
+
+4.3. Customer shall promptly notify YieldFabric of any Restricted Development
+or application contrary to this section, preserve relevant evidence, and
+reasonably cooperate in establishing and protecting YieldFabric's rights.
+Customer must secure obligations from Authorized Reviewers sufficient to
+perform this section. This clause does not authorize prohibited development
+or grant Customer a license back.
+
+4.4. This section does not assign Customer's independently developed technology,
+pre-existing rights, or ownership of ordinary review commentary that does not
+constitute a Restricted Development. Any confidential content in commentary
+remains protected. It does not alter legally required inventorship, assign
+rights Customer does not own or acquire, or purport to bind an unrelated
+third party that has not agreed to these obligations.
+
+## 5. Confidentiality, people, and security
+
+5.1. Customer shall keep the Source Materials and Confidential Information
+confidential, use them only for the Review Purpose, and protect them with
+at least reasonable care and no less than the care used for its own most
+sensitive confidential technical information.
+
+5.2. Access is limited to Authorized Reviewers with a need to know for the
+Review Purpose. Before access, each must be bound by written confidentiality,
+non-use, and intellectual property obligations sufficient to give effect to
+this Agreement. Customer is responsible for their acts and omissions as if
+they were its own. Affiliates, contractors, advisers, and auditors receive
+no automatic access and must be expressly approved and named.
+
+5.3. Customer shall use individual accounts, the authentication and access
+controls required by YieldFabric, and only approved devices, locations, and
+environments. Account sharing and onward disclosure are prohibited. Customer
+must not connect unapproved repository integrations, bots, or external services.
+
+5.4. Customer shall notify YieldFabric without undue delay, and in any event
+within 24 hours after becoming aware, of suspected unauthorized access, use,
+copying, disclosure, or loss. It shall immediately contain the incident,
+preserve evidence, and cooperate reasonably with investigation and remediation.
+
+5.5. If disclosure is required by law or a binding order, Customer may disclose
+only what is legally required. To the extent lawful, it must first give
+YieldFabric prompt notice and reasonable assistance to seek protective
+measures, and seek confidential treatment. This does not authorize voluntary
+public disclosure or further use.
+
+## 6. AI, automated processing, and external tools
+
+Without YieldFabric's prior express written authorization, Customer shall not
+submit, upload, expose, or make available the Source Materials or Confidential
+Information to AI assistants, code-generation tools, external analysis or
+indexing services, or other automated processing systems. This includes
+prompts, retrieval indexes, embeddings, training or evaluation datasets,
+model training or fine-tuning, and generating code or specifications from
+the disclosure. These restrictions apply to local and hosted systems alike.
+Only the tools and processing expressly approved for the Review Purpose may
+be used; approval does not permit use for another purpose.
+
+## 7. Ownership, third-party materials, and reserved rights
+
+7.1. YieldFabric retains its rights, title, and interest in its Source Materials
+and intellectual property. Disclosure creates no sale, joint ownership,
+work-for-hire relationship, or implied license. All rights not expressly
+granted are reserved. Customer shall retain all proprietary notices on any
+copy expressly permitted by YieldFabric.
+
+7.2. Third-party components remain owned by their respective owners and are
+governed by their applicable licenses. This Agreement does not relicense them,
+claim ownership of them, or remove rights granted by their licenses. Customer
+receives no broader rights in YieldFabric's own materials merely because
+third-party components are used with them. See [NOTICE.md](NOTICE.md).
+
+7.3. General feedback provisions do not expand Customer's right to use or
+disclose the Source Materials or Confidential Information. No right to use
+YieldFabric's names, trademarks, or branding is granted.
+
+## 8. Expiry, termination, and survival
+
+8.1. Permission expires on the authorization's end date. YieldFabric may revoke
+or suspend review access at any time by written notice, and immediately upon
+suspected breach. Customer may terminate its review by written notice.
+
+8.2. On expiry, termination, or YieldFabric's written request, Customer shall
+immediately cease access and use. Within five business days it shall return
+or securely delete all Source Materials and Confidential Information in its
+possession or control, including permitted notes, extracts, and copies, and
+provide a deletion certificate signed by an authorized officer. YieldFabric
+controls deletion within its own review environment; Customer must cooperate.
+
+8.3. Retention is permitted only to the extent required by mandatory law or
+a binding preservation order. Such material must be isolated, access restricted
+to legal or compliance custodians, remain subject to this Agreement, and be
+deleted when retention is no longer required. Ordinary backup policies do
+not authorize retention or creation of additional copies.
+
+8.4. Confidentiality and confidential-information non-use obligations survive
+for as long as the relevant information remains confidential, subject to
+section 3.3; trade secrets remain protected for as long as they qualify for
+protection. Ownership, assignment, accrued claims, remedies, and dispute
+provisions survive termination. Expiry or termination never grants a right
+to use, copy, or exploit the Source Materials.
+
+## 9. Review conditions and remedies
+
+9.1. Materials are provided "as is" and "as available", without a commitment
+to accuracy, completeness, fitness for a purpose, support, maintenance, or
+continued access, to the extent permitted by applicable law. A review does
+not authorize reliance on the materials for operating a production system.
+
+9.2. Customer acknowledges that unauthorized use or disclosure may cause harm
+that monetary damages alone cannot adequately remedy. YieldFabric may seek
+interim and final injunctive relief, specific performance, damages, and other
+available remedies. Relief remains subject to the requirements and discretion
+of the competent court; no remedy is automatic.
+
+9.3. Customer is responsible for loss caused by its breach, subject to
+applicable law. YieldFabric may recover enforcement costs to the extent
+awarded by a court or otherwise permitted by law. A general liability cap
+in another agreement does not limit Customer's liability under this Agreement
+unless a signed provision expressly identifies this Agreement and that limit.
+No fixed penalty or automatic damages amount is imposed.
+
+## 10. Governing law and jurisdiction
+
+10.1. This Agreement and non-contractual obligations arising from it are
+governed by the laws in force in the Dubai International Financial Centre,
+United Arab Emirates, subject to applicable mandatory law.
+
+10.2. Both parties expressly and irrevocably agree in writing to the exclusive
+jurisdiction of the Courts of the Dubai International Financial Centre
+("DIFC Courts") over disputes arising out of or relating to this Agreement,
+including its formation, validity, interpretation, performance, breach,
+termination, and associated non-contractual obligations.
+
+10.3. Either party may seek urgent interim or protective relief from another
+court of competent jurisdiction, or seek recognition or enforcement of a
+judgment there. Doing so does not change the agreed forum for the merits of
+the dispute. The parties do not represent that foreign enforcement is automatic.
+
+## 11. Mandatory rights and general terms
+
+11.1. Nothing restricts rights or exceptions that applicable law does not
+permit the parties to exclude, or excludes liability that cannot lawfully
+be excluded. Any such exception applies only to its legally required extent
+and does not create a general right to reuse confidential information.
+
+11.2. If a provision is unenforceable, it is severed only to the extent
+necessary, and the remaining provisions continue to apply to the extent
+permitted by law. Any permissible narrowing must preserve the agreed
+protective purpose as closely as the law allows.
+
+11.3. This Agreement governs the authorized source review. A conflicting term
+in another agreement, purchase order, portal, feedback policy, or residuals
+clause does not override it unless an instrument signed by both parties
+expressly identifies this Agreement and the provision being overridden.
+Other expressly licensed runtime or service rights remain governed by their
+separate agreements.
+
+11.4. Amendments must be in writing and signed by both parties. A later
+repository edit does not amend an already executed Agreement. Additional
+reviewers or access details may be approved in writing by the designated
+YieldFabric representative only within the existing Review Purpose,
+restrictions, and term; a broader grant requires a signed amendment.
+
+11.5. Customer may not assign this Agreement or delegate its rights without
+YieldFabric's prior written consent. Failure or delay to enforce a provision
+does not waive it. Notices go to the contacts specified in the authorization.
+Counterparts and electronic signatures may be used to the extent recognized
+by applicable law.

package/NOTICE.md

@@ -0,0 +1,28 @@
+# Proprietary and third-party notices
+
+Copyright (c) 2026 YieldFabric Technologies Ltd, DIFC, UAE.
+All rights reserved.
+
+YieldFabric's source code and associated non-public materials are proprietary
+and confidential. Source review requires an express written authorization
+from YieldFabric. The terms of that review are in [LICENSE.md](LICENSE.md).
+Possession, repository access, documentation, and package installation do not
+themselves grant permission to use, copy, modify, distribute, reimplement, or
+patent subject matter derived from those materials.
+
+Runtime and integration rights require a separate express license.
+This notice does not limit YieldFabric's own rights or separately authorized
+work performed on its behalf.
+
+## Third-party materials
+
+Third-party dependencies, peer dependencies, and any separately identified
+third-party material remain owned by their respective owners and subject to
+their own licenses. YieldFabric does not claim ownership of those materials
+or replace their licenses with its source-review terms.
+
+Dependency names and versions are recorded in the package manifest and lockfile.
+Consult each component's own license and notices for the applicable terms.
+This file is an ownership notice, not a complete dependency license inventory.
+Before any authorized distribution, preserve required third-party notices
+and review the components actually included in the distributed artifact.

package/README.md

@@ -1,15 +1,28 @@
 # @yieldfabric/terminal
 
+**Proprietary and confidential — Copyright (c) 2026 YieldFabric Technologies Ltd,
+DIFC, UAE. All rights reserved.** Source review requires a signed Source Review
+Authorization incorporating [LICENSE.md](LICENSE.md). Review access permits
+visual inspection only. Obtain the authorization form from YieldFabric.
+The installation, build, and integration instructions below are for YieldFabric
+developers or users with a separate express license permitting those activities.
+See [NOTICE.md](NOTICE.md) for ownership and third-party notices.
+
 Reusable AI-powered terminal component for YieldFabric applications.
 
 ## Installation
 
-Published to the **public npm registry** — no scope `.npmrc`, no token:
+For authorized runtime use, install the versioned compiled package from npm:
 
 ```bash
-npm install @yieldfabric/terminal
+npm install --save-exact @yieldfabric/terminal@1.1.0
 ```
 
+The package is publicly downloadable from npm; neither repository access nor an
+npm token is required to install it.
+The package contains compiled JavaScript and TypeScript declarations, without
+TypeScript source or source maps. The existing license and notices still apply.
+
 ### Peer dependencies
 
 `react` and `react-dom` (^18) are peer deps — install them in the host app.
@@ -81,6 +94,38 @@ function MyPage() {
 }
 ```
 
+### Activating cited sources
+
+`ChatTerminal` and `StandardTerminal` can expose each cited source as an
+independent control. The host application decides what activation means, such
+as opening a file drawer:
+
+```typescript
+<ChatTerminal
+  config={config}
+  onStreamRequest={handleStreaming}
+  onSourceActivate={(source, entry) => openSource(source.id)}
+/>
+```
+
+Use `onSourcesActivate` instead when the complete citation set should be
+handled as one action.
+
+### Completion and authenticated run controls
+
+Pass current credentials through `config.getAuthHeaders` (or the terminal's
+`authToken`) so guidance and cancellation requests use the renewed session.
+Failed guidance cannot advance a pipeline, and a rejected cancellation keeps
+the run marked as running.
+
+The app's `/chat` adapter requires an explicit `is_final` event. Its
+`completion: AgentCompletion` is retained in `entry.metadata.completion`, along
+with sources and agent attribution. Incomplete, cancelled, failed, and interrupted
+answers have visible outcome notices; an interrupted stream retains received
+text and warns that the server may still be working. Persist and restore this
+metadata with the message so reload does not turn a partial answer into success.
+Other SSE endpoints can opt into the same `requireFinal` decoder contract.
+
 ## Building
 
 Built with [tsup](https://tsup.egoist.dev/) → dual ESM + CJS bundles plus
@@ -93,18 +138,29 @@ npm run dev         # watch mode
 npm run typecheck   # tsc --noEmit
 ```
 
-## Publishing
+## Controlled distribution
+
+Publication targets the npm registry using the existing `prepublishOnly` build
+hook. `publishConfig.access: public` publishes the compiled artifact publicly.
+The source repository retains its separate Git hosting access controls.
+An authorized release requires an unused version and npm publish rights.
 
-Public scoped package on the **public npm registry** (`publishConfig.access:
-public`). Requires the `yieldfabric` scope = an npm org (or user) named
-`yieldfabric`. `npm login` once, then:
+For YieldFabric's authorized preparation of a runtime artifact:
 
 ```bash
-npm publish   # prepublishOnly cleans + rebuilds first
+npm run build
+npm pack --dry-run --ignore-scripts
 ```
 
-Bump `version` in `package.json` first (npm rejects re-publishing an existing
-version). The tarball ships `dist/` + `README.md` only — no `src/`, no maps.
+The package allowlist contains only `dist/index.js`, `dist/index.cjs`,
+`dist/index.d.ts`, `dist/index.d.cts`, `README.md`, `LICENSE.md`, and `NOTICE.md`
+(npm also includes `package.json`). Source and declaration maps are disabled.
+Built JavaScript and declarations still disclose implementation information;
+they require an appropriate license and delivery decision.
+
+Customer source review follows the source repository's `SOURCE_ACCESS.md` guide,
+including a signed authorization and a controlled viewer. The source-review
+agreement does not grant runtime or integration rights.
 
 ## Features
 
@@ -116,3 +172,16 @@ version). The tarball ships `dist/` + `README.md` only — no `src/`, no maps.
 - ✅ Page navigation suggestions
 - ✅ Fully customizable via config
 
+## Stream completion
+
+`handleSSEStream` and `useStreamingChat` require an explicit terminal answer
+event by default. EOF after text is an interrupted reply and calls `onError`;
+it never silently calls `onComplete`. A custom non-answer protocol that uses
+EOF as its terminal signal must explicitly set `requireFinal: false`.
+
+## License
+
+[YieldFabric Proprietary Source Code Review and Non-Use Agreement](LICENSE.md).
+Ownership remains with YieldFabric Technologies Ltd, subject to the
+[third-party notices](NOTICE.md). No rights are granted merely by repository
+access, possession of a package, or the technical examples in this README.