npm - agentic-assistant - Versions diffs - 0.2.0 → 0.4.0 - Mend

agentic-assistant 0.2.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (23) hide show

package/CHANGELOG.md +31 -0
package/README.md +35 -5
package/dist/{chat-pBg4wRjQ.d.ts → chat-CXbhePC5.d.ts} +1 -1
package/dist/{chunk-T4ZMDOB4.js → chunk-C44QT474.js} +174 -2
package/dist/chunk-FQD4OK2R.js +142 -0
package/dist/{chunk-6UD2QQA4.js → chunk-KNUEYFX2.js} +2 -2
package/dist/{chunk-BDXAUNMR.js → chunk-MESH6X6N.js} +6 -135
package/dist/chunk-YMEM57LX.js +305 -0
package/dist/cli.d.ts +2 -2
package/dist/cli.js +4 -3
package/dist/client.d.ts +78 -0
package/dist/client.js +195 -0
package/dist/demo.d.ts +21 -0
package/dist/demo.js +158 -0
package/dist/index.d.ts +3 -3
package/dist/index.js +8 -6
package/dist/{loop-42giKLVa.d.ts → loop-D4qWbRu6.d.ts} +6 -1
package/dist/{mcp-server-X5VTHZVM.js → mcp-server-LXGWKEHG.js} +4 -3
package/dist/react.d.ts +1 -1
package/dist/worker.d.ts +16 -6
package/dist/worker.js +8 -271
package/llms.txt +2 -1
package/package.json +10 -4

package/dist/demo.js ADDED Viewed

@@ -0,0 +1,158 @@
+import {
+  createStaticTokenAuth,
+  createWorker
+} from "./chunk-YMEM57LX.js";
+import {
+  AnthropicProvider
+} from "./chunk-FQD4OK2R.js";
+import {
+  ToolRegistry,
+  VERSION
+} from "./chunk-C44QT474.js";
+// src/demo-page.ts
+var DEMO_CSP = "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
+var DEMO_PAGE = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>agentic-assistant demo</title>
+<style>
+body{font:16px/1.5 system-ui,sans-serif;max-width:42rem;margin:2rem auto;padding:0 1rem;color:#1a1a1a;background:#fff}
+label{display:block;margin-top:1rem;font-weight:600}
+input,textarea,button{font:inherit;padding:.5rem;width:100%;box-sizing:border-box}
+button{width:auto;min-height:2.5rem;margin-top:1rem;cursor:pointer}
+:focus-visible{outline:3px solid #0b57d0;outline-offset:2px}
+#out{white-space:pre-wrap;border:1px solid #767676;padding:1rem;margin-top:1rem;min-height:4rem}
+.badge{display:inline-block;border:1px solid #1a1a1a;padding:0 .5rem;font-size:.875rem}
+</style>
+</head>
+<body>
+<main>
+<h1>agentic-assistant demo</h1>
+<p>Send a message to the hosted API. You need a bearer key. The key stays in this page and goes only to this Worker.</p>
+<form id="f">
+<label for="key">Bearer key</label>
+<input id="key" type="password" autocomplete="off" required>
+<label for="msg">Message</label>
+<textarea id="msg" rows="3" required></textarea>
+<button type="submit">Send</button>
+</form>
+<h2>Answer <span class="badge">AI-generated</span></h2>
+<div id="out" role="log" aria-live="polite" aria-label="Assistant answer, AI-generated"></div>
+</main>
+<script>
+const out = document.getElementById("out");
+document.getElementById("f").addEventListener("submit", async (e) => {
+  e.preventDefault();
+  out.textContent = "";
+  let res;
+  try {
+    res = await fetch("/api/v1/chat", {
+      method: "POST",
+      headers: { authorization: "Bearer " + document.getElementById("key").value, "content-type": "application/json" },
+      body: JSON.stringify({ message: document.getElementById("msg").value }),
+    });
+  } catch {
+    out.textContent = "The request failed. Check the network and try again.";
+    return;
+  }
+  if (!res.ok || !res.body) {
+    const body = await res.json().catch(() => ({}));
+    out.textContent = "Error " + res.status + ": " + (body.message || body.error || "request failed");
+    return;
+  }
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let finished = false;
+  try {
+    for (;;) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      let end;
+      while ((end = buffer.indexOf("\\n\\n")) >= 0) {
+        const block = buffer.slice(0, end);
+        buffer = buffer.slice(end + 2);
+        const data = block.split("\\n").find((l) => l.startsWith("data: "));
+        if (!data) continue;
+        let event;
+        try { event = JSON.parse(data.slice(6)); } catch { continue; }
+        if (event.type === "text_delta" && typeof event.text === "string") out.textContent += event.text;
+        if (event.type === "error") { finished = true; out.textContent += "\\n[stopped: " + event.error + "]"; }
+        if (event.type === "done") { finished = true; if (event.reason !== "end_turn") out.textContent += "\\n[stopped: " + event.reason + (event.error ? ", " + event.error : "") + "]"; }
+      }
+    }
+  } catch {
+    // The stream broke. The check below reports it.
+  }
+  if (!finished) out.textContent += "\\n[stopped: the connection closed before the answer was complete]";
+});
+</script>
+</body>
+</html>`;
+// src/demo.ts
+var demoRegistry = () => new ToolRegistry().register({
+  name: "demo_time",
+  description: "Return the current UTC time as an ISO 8601 text.",
+  inputSchema: { type: "object", properties: {}, additionalProperties: false },
+  scope: "demo:read",
+  risk: "safe",
+  handler: () => ({ now: (/* @__PURE__ */ new Date()).toISOString() })
+});
+var DEMO_SYSTEM = "You are a demo assistant. You may use the demo_time tool. Answer in short, plain text.";
+function modelOptions(env) {
+  if (!env.MODEL_KEY) return void 0;
+  if (env.MODEL_URL) return { apiKey: env.MODEL_KEY, baseUrl: env.MODEL_URL, model: env.MODEL_NAME || void 0 };
+  if (env.MODEL_USE_DEFAULT_ENDPOINT === "1") return { apiKey: env.MODEL_KEY, useDefaultEndpoint: true, model: env.MODEL_NAME || void 0 };
+  return void 0;
+}
+var notConfigured = (message) => Response.json({ error: "not_configured", message }, { status: 503, headers: { "cache-control": "no-store" } });
+var demos = /* @__PURE__ */ new WeakMap();
+async function buildDemo(env) {
+  const tokens = env.ASSISTANT_TOKENS ? JSON.parse(env.ASSISTANT_TOKENS) : {};
+  const auth = await createStaticTokenAuth(tokens);
+  const worker = createWorker({
+    auth,
+    registry: demoRegistry(),
+    system: DEMO_SYSTEM,
+    limits: { maxTurns: 4, maxTotalTokens: 2e4, maxOutputTokensPerTurn: 1024 },
+    provider: () => {
+      const options = modelOptions(env);
+      if (options === void 0) throw new Error("no model");
+      return new AnthropicProvider(options);
+    }
+  });
+  return { worker, auth };
+}
+var demo_default = {
+  async fetch(request, env) {
+    const url = new URL(request.url);
+    if (request.method === "GET" && url.pathname === "/health") return Response.json({ ok: true, pack: env.PACK_NAME ?? "agentic-assistant", version: VERSION });
+    if (request.method === "GET" && url.pathname === "/") {
+      return new Response(DEMO_PAGE, {
+        headers: { "content-type": "text/html; charset=utf-8", "content-security-policy": DEMO_CSP, "cache-control": "no-store", "x-content-type-options": "nosniff" }
+      });
+    }
+    if (!url.pathname.startsWith("/api/v1/")) return Response.json({ error: "not found" }, { status: 404 });
+    let demo;
+    try {
+      let built = demos.get(env);
+      if (built === void 0) demos.set(env, built = buildDemo(env));
+      demo = await built;
+    } catch {
+      demos.delete(env);
+      return notConfigured("this demo is not set up");
+    }
+    if (request.method === "POST" && url.pathname.replace(/\/$/, "") === "/api/v1/chat" && modelOptions(env) === void 0) {
+      if (await demo.auth.authenticate(request.clone()) !== null) return notConfigured("this demo has no model key or model endpoint set");
+    }
+    return demo.worker.fetch(request, env);
+  }
+};
+export {
+  demo_default as default
+};

package/dist/index.d.ts CHANGED Viewed

@@ -1,6 +1,6 @@
-export { A as ACTIONS, a as Action, b as Actor, c as ApprovalDecision, d as ApprovalGate, e as ApprovalRequest, f as Approver, g as ApproverKind, h as AssistantEvent, i as AssistantPrincipal, D as DATA_NOTICE, j as DeniedReason, k as DoneReason, P as PrincipalError, l as PrincipalInput, m as Provenance, n as ProvenanceInput, Q as QueueApprovalGate, R as RunLimits, o as RunOptions, p as RunTotals, S as Scope, T as TOOL_RISKS, q as TRAINED_ALGORITHMIC_MEDIA, r as ToolContext, s as ToolDefinition, t as ToolRegistry, u as ToolRisk, v as actorOf, w as assertPrincipal, x as canonicalJson, y as createPrincipal, z as createProvenance, B as defineTool, C as digestCall, E as hasScope, F as parseScope, G as provenanceLabel, H as provenanceMarker, I as runAssistant, J as scopeCovers } from './loop-42giKLVa.js';
-import { S as Setup } from './chat-pBg4wRjQ.js';
-export { C as ChatConfig, a as ChatIo, b as ConfigError, c as ConnectMcpOptions, M as McpToolInfo, d as McpTools, e as McpTransportConfig, f as buildSetup, g as connectMcpTools, p as parseTarget, r as runChat } from './chat-pBg4wRjQ.js';
+export { d as ACTIONS, e as Action, b as Actor, f as ApprovalDecision, g as ApprovalGate, a as ApprovalRequest, h as Approver, i as ApproverKind, A as AssistantEvent, j as AssistantPrincipal, k as DATA_NOTICE, D as DeniedReason, c as DoneReason, P as PrincipalError, l as PrincipalInput, m as Provenance, n as ProvenanceInput, Q as QueueApprovalGate, o as RunLimits, p as RunOptions, R as RunTotals, S as Scope, T as TOOL_RISKS, q as TRAINED_ALGORITHMIC_MEDIA, r as ToolContext, s as ToolDefinition, t as ToolRegistry, u as ToolRisk, v as actorOf, w as assertPrincipal, x as canonicalJson, y as createPrincipal, z as createProvenance, B as defineTool, C as digestCall, E as hasScope, F as parseScope, G as provenanceLabel, H as provenanceMarker, I as runAssistant, J as scopeCovers } from './loop-D4qWbRu6.js';
+import { S as Setup } from './chat-CXbhePC5.js';
+export { C as ChatConfig, a as ChatIo, b as ConfigError, c as ConnectMcpOptions, M as McpToolInfo, d as McpTools, e as McpTransportConfig, f as buildSetup, g as connectMcpTools, p as parseTarget, r as runChat } from './chat-CXbhePC5.js';
 import Anthropic from '@anthropic-ai/sdk';
 import { M as ModelProvider, P as Pricing, a as ModelRequest, b as ModelEvent } from './types-DGH8FS56.js';
 export { A as AnsweredBy, C as ContentBlock, J as JsonSchema, c as Message, d as ProviderError, S as StopReason, T as ToolSpec, U as Usage } from './types-DGH8FS56.js';

package/dist/index.js CHANGED Viewed

@@ -1,20 +1,22 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-6UD2QQA4.js";
+} from "./chunk-KNUEYFX2.js";
 import {
-  AnthropicProvider,
   ConfigError,
-  DEFAULT_ANTHROPIC_MODEL,
   FallbackProvider,
   OpenAICompatibleProvider,
-  PRICING_CHECKED_ON,
   buildSetup,
   connectMcpTools,
   parseTarget,
   runChat
-} from "./chunk-BDXAUNMR.js";
+} from "./chunk-MESH6X6N.js";
 import "./chunk-HYT732TN.js";
+import {
+  AnthropicProvider,
+  DEFAULT_ANTHROPIC_MODEL,
+  PRICING_CHECKED_ON
+} from "./chunk-FQD4OK2R.js";
 import {
   ACTIONS,
   DATA_NOTICE,
@@ -38,7 +40,7 @@ import {
   provenanceMarker,
   runAssistant,
   scopeCovers
-} from "./chunk-T4ZMDOB4.js";
+} from "./chunk-C44QT474.js";
 export {
   ACTIONS,
   AnthropicProvider,

package/dist/{loop-42giKLVa.d.ts → loop-D4qWbRu6.d.ts} RENAMED Viewed

@@ -175,6 +175,11 @@ declare function defineTool<Input>(tool: ToolDefinition<Input>): ToolDefinition;
 declare class ToolRegistry {
     private readonly tools;
     private readonly ajv;
+    /**
+     * Ajv builds validators with `new Function`. Workers refuse that inside a request, though not while a module loads.
+     * So try Ajv first, and use the small checker when this host refuses code generation. A bad schema still throws.
+     */
+    private compile;
     register(tool: ToolDefinition): this;
     registerAll(tools: readonly ToolDefinition[]): this;
     get(name: string): ToolDefinition | undefined;
@@ -282,4 +287,4 @@ declare const DATA_NOTICE: string;
  */
 declare function runAssistant(options: RunOptions): AsyncGenerator<AssistantEvent>;
-export { ACTIONS as A, defineTool as B, digestCall as C, DATA_NOTICE as D, hasScope as E, parseScope as F, provenanceLabel as G, provenanceMarker as H, runAssistant as I, scopeCovers as J, PrincipalError as P, QueueApprovalGate as Q, type RunLimits as R, type Scope as S, TOOL_RISKS as T, type Action as a, type Actor as b, type ApprovalDecision as c, type ApprovalGate as d, type ApprovalRequest as e, type Approver as f, type ApproverKind as g, type AssistantEvent as h, type AssistantPrincipal as i, type DeniedReason as j, type DoneReason as k, type PrincipalInput as l, type Provenance as m, type ProvenanceInput as n, type RunOptions as o, type RunTotals as p, TRAINED_ALGORITHMIC_MEDIA as q, type ToolContext as r, type ToolDefinition as s, ToolRegistry as t, type ToolRisk as u, actorOf as v, assertPrincipal as w, canonicalJson as x, createPrincipal as y, createProvenance as z };
+export { type AssistantEvent as A, defineTool as B, digestCall as C, type DeniedReason as D, hasScope as E, parseScope as F, provenanceLabel as G, provenanceMarker as H, runAssistant as I, scopeCovers as J, PrincipalError as P, QueueApprovalGate as Q, type RunTotals as R, type Scope as S, TOOL_RISKS as T, type ApprovalRequest as a, type Actor as b, type DoneReason as c, ACTIONS as d, type Action as e, type ApprovalDecision as f, type ApprovalGate as g, type Approver as h, type ApproverKind as i, type AssistantPrincipal as j, DATA_NOTICE as k, type PrincipalInput as l, type Provenance as m, type ProvenanceInput as n, type RunLimits as o, type RunOptions as p, TRAINED_ALGORITHMIC_MEDIA as q, type ToolContext as r, type ToolDefinition as s, ToolRegistry as t, type ToolRisk as u, actorOf as v, assertPrincipal as w, canonicalJson as x, createPrincipal as y, createProvenance as z };

package/dist/{mcp-server-X5VTHZVM.js → mcp-server-LXGWKEHG.js} RENAMED Viewed

@@ -1,10 +1,11 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-6UD2QQA4.js";
-import "./chunk-BDXAUNMR.js";
+} from "./chunk-KNUEYFX2.js";
+import "./chunk-MESH6X6N.js";
 import "./chunk-HYT732TN.js";
-import "./chunk-T4ZMDOB4.js";
+import "./chunk-FQD4OK2R.js";
+import "./chunk-C44QT474.js";
 export {
   createAssistantMcpServer,
   startAssistantMcp

package/dist/react.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import * as react from 'react';
-import { h as AssistantEvent, u as ToolRisk } from './loop-42giKLVa.js';
+import { A as AssistantEvent, u as ToolRisk } from './loop-D4qWbRu6.js';
 import { c as Message } from './types-DGH8FS56.js';
 type PanelItem = {

package/dist/worker.d.ts CHANGED Viewed

@@ -1,5 +1,5 @@
 import { Auth } from 'agentic-identity';
-import { t as ToolRegistry, R as RunLimits } from './loop-42giKLVa.js';
+import { t as ToolRegistry, o as RunLimits } from './loop-D4qWbRu6.js';
 import { M as ModelProvider } from './types-DGH8FS56.js';
 interface AssistantApiOptions {
@@ -11,6 +11,8 @@ interface AssistantApiOptions {
     registry: ToolRegistry;
     system?: string;
     limits?: RunLimits;
+    /** Origins (such as `https://app.example.org`) that may send a write signed in with a session cookie. A write with a cookie from any other origin is a 403. A Bearer key needs no origin. */
+    origins?: readonly string[];
     /** Most chat turns one principal may run at once. Default 4. */
     maxConcurrentRuns?: number;
 }
@@ -26,6 +28,18 @@ declare function createAssistantApi(options: AssistantApiOptions): {
     fetch(request: Request): Promise<Response>;
 };
+/** What one bearer token stands for. The caller is always a person: `kind: "human"`. */
+interface StaticTokenEntry {
+    id: string;
+    scopes: string[];
+}
+/**
+ * An `agentic-identity` Auth that reads `Authorization: Bearer <token>` against a fixed map.
+ * It keeps only SHA-256 digests. It throws on a token shorter than 32 bytes or an entry of the wrong shape.
+ * An empty map is allowed: every request is then a 401.
+ */
+declare function createStaticTokenAuth(tokens: Record<string, StaticTokenEntry>): Promise<Auth>;
 interface WorkerEnv {
     PACK_NAME?: string;
 }
@@ -33,9 +47,5 @@ interface WorkerEnv {
 declare function createWorker(options: AssistantApiOptions): {
     fetch(request: Request, env?: WorkerEnv): Promise<Response>;
 };
-/** The sample Worker has no auth, tools, or model, so it serves `/health` only. Use `createWorker` for the API. */
-declare const _default: {
-    fetch(request: Request, env: WorkerEnv): Promise<Response>;
-};
-export { APPROVER_SCOPE, type AssistantApiOptions, type WorkerEnv, createAssistantApi, createWorker, _default as default };
+export { APPROVER_SCOPE, type AssistantApiOptions, type StaticTokenEntry, type WorkerEnv, createAssistantApi, createStaticTokenAuth, createWorker };

package/dist/worker.js CHANGED Viewed

@@ -1,276 +1,13 @@
 import {
-  VERSION,
-  createPrincipal,
-  hasScope,
-  parseScope,
-  runAssistant
-} from "./chunk-T4ZMDOB4.js";
-// src/api.ts
-var MAX_BODY_BYTES = 65536;
-var MAX_MESSAGE_CHARS = 1e4;
-var MAX_REASON_CHARS = 500;
-var DEFAULT_MAX_CONCURRENT_RUNS = 4;
-var KINDS = ["human", "agent_of_human", "agent_of_agent", "agent", "user_token"];
-var APPROVER_SCOPE = "assistant:admin";
-var json = (body, status = 200, headers = {}) => Response.json(body, { status, headers: { "cache-control": "no-store", ...headers } });
-var fail = (status, error, headers = {}) => json({ error }, status, headers);
-function toCaller(context) {
-  if (typeof context !== "object" || context === null) return void 0;
-  const { principalId, kind, chain, scopes } = context;
-  if (typeof principalId !== "string" || principalId === "" || !KINDS.includes(kind)) return void 0;
-  if (!Array.isArray(chain) || chain.length === 0 || chain[chain.length - 1]?.id !== principalId) return void 0;
-  if (chain[chain.length - 1]?.kind !== kind || kind === "human" && chain.length !== 1) return void 0;
-  const ids = chain.map((step) => step?.id);
-  if (ids.some((id) => typeof id !== "string" || id === "")) return void 0;
-  const rootId = ids[0];
-  if (!Array.isArray(scopes)) return void 0;
-  try {
-    for (const scope of scopes) parseScope(scope);
-  } catch {
-    return void 0;
-  }
-  return { id: principalId, kind, rootId, chain: ids, scopes: [...scopes] };
-}
-var assistantId = (caller) => `assistant:${caller.id}`;
-async function readJson(request) {
-  if (Number(request.headers.get("content-length") ?? 0) > MAX_BODY_BYTES) return void 0;
-  let text = "";
-  if (request.body !== null) {
-    const reader = request.body.getReader();
-    const decoder = new TextDecoder();
-    let bytes = 0;
-    for (; ; ) {
-      const chunk = await reader.read();
-      if (chunk.done) break;
-      bytes += chunk.value.byteLength;
-      if (bytes > MAX_BODY_BYTES) {
-        await reader.cancel();
-        return void 0;
-      }
-      text += decoder.decode(chunk.value, { stream: true });
-    }
-    text += decoder.decode();
-  }
-  try {
-    const body = JSON.parse(text);
-    return typeof body === "object" && body !== null && !Array.isArray(body) ? body : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function sseChunk(event) {
-  return new TextEncoder().encode(`event: ${event.type}
-data: ${JSON.stringify(event)}
-`);
-}
-function createAssistantApi(options) {
-  const pending = /* @__PURE__ */ new Map();
-  const running = /* @__PURE__ */ new Map();
-  const maxRuns = options.maxConcurrentRuns ?? DEFAULT_MAX_CONCURRENT_RUNS;
-  function whyNotDecide(caller, entry) {
-    const { proposer } = entry;
-    if (caller.id === assistantId(proposer)) return "an agent cannot decide on its own action";
-    if (proposer.kind !== "human") {
-      if (caller.chain.includes(proposer.id) || caller.kind !== "human" && proposer.chain.includes(caller.id)) {
-        return "an agent cannot decide on its own action, or on one from an agent it made or that made it";
-      }
-    }
-    if (caller.kind !== "human" && !hasScope(caller.scopes, APPROVER_SCOPE)) {
-      return `an agent needs the ${APPROVER_SCOPE} scope to decide`;
-    }
-    const tool = options.registry.get(entry.request.tool);
-    if (tool === void 0 || !hasScope(caller.scopes, tool.scope)) return "the approver does not hold the scope of this tool";
-    return void 0;
-  }
-  const gateFor = (proposer) => ({
-    request(request, signal) {
-      return new Promise((resolve, reject) => {
-        if (signal.aborted) return reject(new Error("the request was cancelled"));
-        pending.set(request.id, { request, proposer, resolve });
-        signal.addEventListener(
-          "abort",
-          () => {
-            pending.delete(request.id);
-            reject(new Error("the request was cancelled"));
-          },
-          { once: true }
-        );
-      });
-    }
-  });
-  function chat(request, caller, message) {
-    const abort = new AbortController();
-    running.set(caller.id, (running.get(caller.id) ?? 0) + 1);
-    let released = false;
-    const release = () => {
-      if (released) return;
-      released = true;
-      const left = (running.get(caller.id) ?? 1) - 1;
-      if (left <= 0) running.delete(caller.id);
-      else running.set(caller.id, left);
-    };
-    request.signal.addEventListener(
-      "abort",
-      () => {
-        abort.abort();
-        release();
-      },
-      { once: true }
-    );
-    let events;
-    try {
-      events = runAssistant({
-        provider: options.provider(),
-        registry: options.registry,
-        // The assistant holds the caller's scopes and no more.
-        principal: createPrincipal({
-          id: assistantId(caller),
-          kind: "agent_of_human",
-          parentId: caller.id,
-          scopes: caller.scopes,
-          // Each check asks the Auth again. A key revoked during a run, or one with other scopes, stops it.
-          isRevoked: async () => {
-            const now = toCaller(await options.auth.authenticate(request));
-            return now?.id !== caller.id || [...now.scopes].sort().join(" ") !== [...caller.scopes].sort().join(" ");
-          }
-        }),
-        approvals: gateFor(caller),
-        messages: [{ role: "user", content: [{ type: "text", text: message }] }],
-        system: options.system,
-        limits: options.limits,
-        signal: abort.signal
-      });
-    } catch {
-      release();
-      return fail(500, "the assistant could not start");
-    }
-    const body = new ReadableStream({
-      async pull(controller) {
-        try {
-          const next = await events.next();
-          if (next.done) {
-            release();
-            controller.close();
-          } else controller.enqueue(sseChunk(next.value));
-        } catch {
-          release();
-          controller.enqueue(sseChunk({ type: "error", error: "the run failed" }));
-          controller.close();
-        }
-      },
-      cancel() {
-        abort.abort();
-        release();
-        void events.return(void 0).catch(() => void 0);
-      }
-    });
-    return new Response(body, {
-      headers: { "content-type": "text/event-stream", "cache-control": "no-store", "x-accel-buffering": "no" }
-    });
-  }
-  async function decide(request, caller, id, approve) {
-    const body = await readJson(request);
-    if (body === void 0) return fail(400, "the body must be a JSON object");
-    const entry = pending.get(id);
-    if (entry === void 0 || entry.proposer.rootId !== caller.rootId) return fail(404, "no pending approval with this id");
-    const why = whyNotDecide(caller, entry);
-    if (why !== void 0) return fail(403, why);
-    let decision;
-    if (approve) {
-      if (body.digest !== entry.request.digest) return fail(409, "digest does not match the pending call");
-      decision = { requestId: id, approved: true, digest: entry.request.digest, decidedBy: caller.id, approverKind: caller.kind === "human" ? "human" : "agent" };
-    } else {
-      const reason = typeof body.reason === "string" ? body.reason.slice(0, MAX_REASON_CHARS) : void 0;
-      decision = { requestId: id, approved: false, decidedBy: caller.id, reason };
-    }
-    pending.delete(id);
-    entry.resolve(decision);
-    return json({ requestId: id, approved: approve, decidedBy: caller.id, machineMade: caller.kind !== "human" });
-  }
-  return {
-    async fetch(request) {
-      const url = new URL(request.url);
-      const match = /^\/api\/v1\/(tools|chat|approvals)(?:\/([^/]+)\/(approve|deny))?\/?$/.exec(url.pathname);
-      if (match === null) return fail(404, "not found");
-      const [, route, id, verb] = match;
-      const allowed = route === "chat" || verb !== void 0 ? "POST" : "GET";
-      if (request.method !== allowed) return fail(405, "method not allowed", { allow: allowed });
-      if (route !== "approvals" && id !== void 0) return fail(404, "not found");
-      let caller;
-      try {
-        caller = toCaller(await options.auth.authenticate(request));
-      } catch {
-        caller = void 0;
-      }
-      if (caller === void 0) return fail(401, "sign in with a valid key", { "www-authenticate": "Bearer" });
-      if (route === "tools") {
-        const tools = options.registry.list().filter((tool) => hasScope(caller.scopes, tool.scope)).map(({ name, description, scope, risk, inputSchema }) => ({ name, description, scope, risk, inputSchema }));
-        return json({ tools });
-      }
-      if (route === "approvals" && verb === void 0) {
-        const list = [...pending.values()].filter((entry) => entry.proposer.rootId === caller.rootId).filter((entry) => {
-          const tool = options.registry.get(entry.request.tool);
-          return tool !== void 0 && hasScope(caller.scopes, tool.scope);
-        }).map((entry) => ({
-          id: entry.request.id,
-          tool: entry.request.tool,
-          risk: entry.request.risk,
-          input: entry.request.input,
-          digest: entry.request.digest,
-          proposedBy: entry.request.actor,
-          requestedBy: entry.proposer.id,
-          canDecide: whyNotDecide(caller, entry) === void 0
-        }));
-        return json({ approvals: list });
-      }
-      if (route === "approvals" && id !== void 0) {
-        let requestId;
-        try {
-          requestId = decodeURIComponent(id);
-        } catch {
-          return fail(404, "no pending approval with this id");
-        }
-        return decide(request, caller, requestId, verb === "approve");
-      }
-      const body = await readJson(request);
-      const message = body?.message;
-      if (typeof message !== "string" || message.trim() === "" || message.length > MAX_MESSAGE_CHARS) {
-        return fail(400, `message must be a text of 1 to ${MAX_MESSAGE_CHARS} characters`);
-      }
-      if ((running.get(caller.id) ?? 0) >= maxRuns) return fail(429, "too many chat turns at once", { "retry-after": "5" });
-      return chat(request, caller, message);
-    }
-  };
-}
-// src/worker.ts
-var health = (env) => Response.json({ ok: true, pack: env.PACK_NAME ?? "agentic-assistant", version: VERSION });
-function createWorker(options) {
-  const api = createAssistantApi(options);
-  return {
-    async fetch(request, env = {}) {
-      const url = new URL(request.url);
-      if (request.method === "GET" && url.pathname === "/health") return health(env);
-      if (url.pathname.startsWith("/api/v1/")) return api.fetch(request);
-      return Response.json({ error: "not found" }, { status: 404 });
-    }
-  };
-}
-var worker_default = {
-  async fetch(request, env) {
-    const url = new URL(request.url);
-    if (request.method === "GET" && url.pathname === "/health") return health(env);
-    if (url.pathname.startsWith("/api/v1/")) {
-      return Response.json({ error: "the API is not set up: build the Worker with createWorker" }, { status: 503 });
-    }
-    return Response.json({ error: "not found" }, { status: 404 });
-  }
-};
+  APPROVER_SCOPE,
+  createAssistantApi,
+  createStaticTokenAuth,
+  createWorker
+} from "./chunk-YMEM57LX.js";
+import "./chunk-C44QT474.js";
 export {
   APPROVER_SCOPE,
   createAssistantApi,
-  createWorker,
-  worker_default as default
+  createStaticTokenAuth,
+  createWorker
 };

package/llms.txt CHANGED Viewed

@@ -6,7 +6,8 @@ Keywords: assistant,ai,agent,tools,mcp,sdk,side-panel,approvals,eu,model-port.
 - SDK: import { runAssistant, ToolRegistry, createPrincipal } from "agentic-assistant".
 - CLI: agentic-assistant chat --tools <mcp-url> --scope <s> --tool-scope <s> "message". MCP server: agentic-assistant mcp.
-- HTTP API: import { createWorker } from "agentic-assistant/worker". Routes under /api/v1: GET /tools, POST /chat (SSE), GET /approvals, POST /approvals/:id/approve|deny. Sign-in with agentic-identity principals.
+- HTTP API: import { createWorker } from "agentic-assistant/worker". Routes under /api/v1: GET /tools, POST /chat (SSE), GET /approvals, POST /approvals/:id/approve|deny. Sign-in with agentic-identity principals. Chat responses carry x-ai-generated: true. Demo: https://agentic-assistant-demo.hello-fd1.workers.dev (needs a bearer key; no model key set, so chat answers 503 not_configured).
+- HTTP client: import { createClient, AssistantApiError } from "agentic-assistant/client"; createClient({ baseUrl, token, fetch? }) gives health, tools, chat (async generator of events), approvals, approve(id, digest), deny(id, reason?). Typed errors with code and status.
 - AI marking: events carry `provenance`; use provenanceLabel and provenanceMarker (JSON-LD, IPTC trainedAlgorithmicMedia). Also in HTTP, CLI --json and MCP results.
 - Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-assistant/react.css".
 - Test provider: import { ScriptedProvider } from "agentic-assistant/testing".

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "agentic-assistant",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "An AI assistant that acts inside your apps with the user's own permissions.",
   "keywords": [
     "assistant",
@@ -23,7 +23,7 @@
   "type": "module",
   "private": false,
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "files": [
     "dist",
@@ -45,6 +45,10 @@
       "types": "./dist/worker.d.ts",
       "import": "./dist/worker.js"
     },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    },
     "./testing": {
       "types": "./dist/testing.d.ts",
       "import": "./dist/testing.js"
@@ -63,13 +67,14 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "clean": "rm -rf dist",
+    "deploy:demo": "npm run build && WRANGLER_SEND_METRICS=false wrangler deploy --config wrangler.demo.jsonc",
     "prepack": "npm run build",
     "ci:local": "npm run build && npm run typecheck && npm test"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^1.3.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "agentic-identity": "^0.3.0",
+    "agentic-identity": "^0.6.0",
     "ajv": "^8.20.0"
   },
   "devDependencies": {
@@ -84,7 +89,8 @@
     "react-dom": "^19.3.1",
     "tsup": "^8.0.0",
     "typescript": "^5.6.0",
-    "vitest": "^3.0.0"
+    "vitest": "^3.0.0",
+    "wrangler": "^4.155.0"
   },
   "peerDependencies": {
     "react": ">=18"