agentic-assistant 0.3.0 → 0.5.0

package/dist/index.d.ts

@@ -1,10 +1,11 @@
-export { d as ACTIONS, e as Action, b as Actor, f as ApprovalDecision, g as ApprovalGate, a as ApprovalRequest, h as Approver, i as ApproverKind, A as AssistantEvent, j as AssistantPrincipal, k as DATA_NOTICE, D as DeniedReason, c as DoneReason, P as PrincipalError, l as PrincipalInput, m as Provenance, n as ProvenanceInput, Q as QueueApprovalGate, o as RunLimits, p as RunOptions, R as RunTotals, S as Scope, T as TOOL_RISKS, q as TRAINED_ALGORITHMIC_MEDIA, r as ToolContext, s as ToolDefinition, t as ToolRegistry, u as ToolRisk, v as actorOf, w as assertPrincipal, x as canonicalJson, y as createPrincipal, z as createProvenance, B as defineTool, C as digestCall, E as hasScope, F as parseScope, G as provenanceLabel, H as provenanceMarker, I as runAssistant, J as scopeCovers } from './loop-D4qWbRu6.js';
-import { S as Setup } from './chat-CXbhePC5.js';
-export { C as ChatConfig, a as ChatIo, b as ConfigError, c as ConnectMcpOptions, M as McpToolInfo, d as McpTools, e as McpTransportConfig, f as buildSetup, g as connectMcpTools, p as parseTarget, r as runChat } from './chat-CXbhePC5.js';
+export { A as ACTIONS, a as Action, b as Actor, c as ApprovalDecision, d as ApprovalGate, e as ApprovalRequest, f as Approver, g as ApproverKind, h as AssistantEvent, i as AssistantPrincipal, D as DATA_NOTICE, j as DeniedReason, k as DoneReason, P as PrincipalError, l as PrincipalInput, m as Provenance, n as ProvenanceInput, Q as QueueApprovalGate, R as RunLimits, o as RunOptions, p as RunTotals, S as Scope, T as TOOL_RISKS, q as TRAINED_ALGORITHMIC_MEDIA, r as ToolContext, s as ToolDefinition, t as ToolRegistry, u as ToolRisk, v as actorOf, w as assertPrincipal, x as canonicalJson, y as createPrincipal, z as createProvenance, B as defineTool, C as digestCall, E as hasScope, F as parseScope, G as provenanceLabel, H as provenanceMarker, I as runAssistant, J as scopeCovers } from './loop-B6aowbyz.js';
+import { S as Setup } from './chat-CGITyrxg.js';
+export { C as ChatConfig, a as ChatIo, b as ConfigError, c as ConnectMcpOptions, M as McpToolInfo, d as McpTools, e as McpTransportConfig, f as buildSetup, g as connectMcpTools, p as parseTarget, r as runChat } from './chat-CGITyrxg.js';
 import Anthropic from '@anthropic-ai/sdk';
 import { M as ModelProvider, P as Pricing, a as ModelRequest, b as ModelEvent } from './types-DGH8FS56.js';
 export { A as AnsweredBy, C as ContentBlock, J as JsonSchema, c as Message, d as ProviderError, S as StopReason, T as ToolSpec, U as Usage } from './types-DGH8FS56.js';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { AssistantClient } from './client.js';
 
 declare const VERSION: string;
 
@@ -81,9 +82,16 @@ declare class FallbackProvider implements ModelProvider {
     stream(request: ModelRequest): AsyncGenerator<ModelEvent>;
 }
 
-/** An MCP server with one tool, `assistant_chat`. Each call starts a new conversation. */
-declare function createAssistantMcpServer(setup: Setup, shutdown?: AbortSignal): Server;
+/**
+ * An MCP server with the tool `assistant_chat`. Each call starts a new conversation. With a `remote` client it
+ * also serves `assistant_tools`, `assistant_approvals`, and `assistant_deny`. `assistant_approve` needs `allow.approve`.
+ */
+declare function createAssistantMcpServer(setup: Setup, shutdown?: AbortSignal, remote?: AssistantClient, allow?: {
+    approve?: boolean;
+}): Server;
 /** Serves on stdio. Resolves when the client closes its input, or the transport closes. */
-declare function startAssistantMcp(setup: Setup): Promise<void>;
+declare function startAssistantMcp(setup: Setup, remote?: AssistantClient, allow?: {
+    approve?: boolean;
+}): Promise<void>;
 
 export { AnthropicProvider, type AnthropicProviderOptions, DEFAULT_ANTHROPIC_MODEL, FallbackProvider, ModelEvent, ModelProvider, ModelRequest, type OpenAICompatibleOptions, OpenAICompatibleProvider, PRICING_CHECKED_ON, Pricing, Setup, VERSION, createAssistantMcpServer, startAssistantMcp };

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-T5WVSGYQ.js";
+} from "./chunk-Q3GGWNW5.js";
 import {
   ConfigError,
   FallbackProvider,
@@ -10,13 +10,13 @@ import {
   connectMcpTools,
   parseTarget,
   runChat
-} from "./chunk-3X6KU636.js";
+} from "./chunk-KSVH5NNA.js";
 import "./chunk-HYT732TN.js";
 import {
   AnthropicProvider,
   DEFAULT_ANTHROPIC_MODEL,
   PRICING_CHECKED_ON
-} from "./chunk-DXTIEMOT.js";
+} from "./chunk-XSRGG7SB.js";
 import {
   ACTIONS,
   DATA_NOTICE,
@@ -40,7 +40,8 @@ import {
   provenanceMarker,
   runAssistant,
   scopeCovers
-} from "./chunk-3LKTJJ75.js";
+} from "./chunk-RHGVOR6N.js";
+import "./chunk-QTIEDY3V.js";
 export {
   ACTIONS,
   AnthropicProvider,

package/dist/{loop-D4qWbRu6.d.ts → loop-B6aowbyz.d.ts}

@@ -287,4 +287,4 @@ declare const DATA_NOTICE: string;
  */
 declare function runAssistant(options: RunOptions): AsyncGenerator<AssistantEvent>;
 
-export { type AssistantEvent as A, defineTool as B, digestCall as C, type DeniedReason as D, hasScope as E, parseScope as F, provenanceLabel as G, provenanceMarker as H, runAssistant as I, scopeCovers as J, PrincipalError as P, QueueApprovalGate as Q, type RunTotals as R, type Scope as S, TOOL_RISKS as T, type ApprovalRequest as a, type Actor as b, type DoneReason as c, ACTIONS as d, type Action as e, type ApprovalDecision as f, type ApprovalGate as g, type Approver as h, type ApproverKind as i, type AssistantPrincipal as j, DATA_NOTICE as k, type PrincipalInput as l, type Provenance as m, type ProvenanceInput as n, type RunLimits as o, type RunOptions as p, TRAINED_ALGORITHMIC_MEDIA as q, type ToolContext as r, type ToolDefinition as s, ToolRegistry as t, type ToolRisk as u, actorOf as v, assertPrincipal as w, canonicalJson as x, createPrincipal as y, createProvenance as z };
+export { ACTIONS as A, defineTool as B, digestCall as C, DATA_NOTICE as D, hasScope as E, parseScope as F, provenanceLabel as G, provenanceMarker as H, runAssistant as I, scopeCovers as J, PrincipalError as P, QueueApprovalGate as Q, type RunLimits as R, type Scope as S, TOOL_RISKS as T, type Action as a, type Actor as b, type ApprovalDecision as c, type ApprovalGate as d, type ApprovalRequest as e, type Approver as f, type ApproverKind as g, type AssistantEvent as h, type AssistantPrincipal as i, type DeniedReason as j, type DoneReason as k, type PrincipalInput as l, type Provenance as m, type ProvenanceInput as n, type RunOptions as o, type RunTotals as p, TRAINED_ALGORITHMIC_MEDIA as q, type ToolContext as r, type ToolDefinition as s, ToolRegistry as t, type ToolRisk as u, actorOf as v, assertPrincipal as w, canonicalJson as x, createPrincipal as y, createProvenance as z };

package/dist/mcp-server-U3UQIB7H.js

@@ -0,0 +1,13 @@
+import {
+  createAssistantMcpServer,
+  startAssistantMcp
+} from "./chunk-Q3GGWNW5.js";
+import "./chunk-KSVH5NNA.js";
+import "./chunk-HYT732TN.js";
+import "./chunk-XSRGG7SB.js";
+import "./chunk-RHGVOR6N.js";
+import "./chunk-QTIEDY3V.js";
+export {
+  createAssistantMcpServer,
+  startAssistantMcp
+};

package/dist/react.css

@@ -1,19 +1,22 @@
-/* Plain CSS variables. Set them on .aa-panel or a parent to match your app. Every pair below meets
-   WCAG 2.2 AA contrast; src/react/styles.test.ts checks it. No remote fonts or images. */
+/* Plain CSS variables. They read the agentic-design tokens (--ad-color-*), so load
+   agentic-design/tokens.css once on the page. Override --aa-* on .aa-panel or a parent to match your app.
+   Without the tokens, each variable falls back to a system color, so focus and borders stay visible.
+   Every token pair meets WCAG 2.2 AA contrast in light and dark; src/react/styles.test.ts checks it.
+   No remote fonts or images. */
 .aa-panel {
-  --aa-bg: #ffffff;
-  --aa-fg: #1b1b1b;
-  --aa-muted: #4d4d4d;
-  --aa-border: #767676;
-  --aa-accent: #0b57d0;
-  --aa-accent-fg: #ffffff;
-  --aa-focus: #0b57d0;
-  --aa-machine-bg: #e8eefc;
-  --aa-machine-fg: #0a2a6b;
-  --aa-card-bg: #f4f4f4;
-  --aa-warn-bg: #fff4d6;
-  --aa-warn-fg: #5c3d00;
-  --aa-danger: #b3261e;
+  --aa-bg: var(--ad-color-surface, Canvas);
+  --aa-fg: var(--ad-color-text, CanvasText);
+  --aa-muted: var(--ad-color-text-muted, CanvasText);
+  --aa-border: var(--ad-color-border-strong, CanvasText);
+  --aa-accent: var(--ad-color-accent, LinkText);
+  --aa-accent-fg: var(--ad-color-text-on-accent, Canvas);
+  --aa-focus: var(--ad-color-focus, LinkText);
+  --aa-machine-bg: var(--ad-color-accent-subtle, Canvas);
+  --aa-machine-fg: var(--ad-color-accent-text, CanvasText);
+  --aa-card-bg: var(--ad-color-surface-sunken, Canvas);
+  --aa-warn-bg: var(--ad-color-warning-subtle, Canvas);
+  --aa-warn-fg: var(--ad-color-warning-text, CanvasText);
+  --aa-danger: var(--ad-color-danger, LinkText);
 
   display: flex;
   flex-direction: column;

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import * as react from 'react';
-import { A as AssistantEvent, u as ToolRisk } from './loop-D4qWbRu6.js';
+import { h as AssistantEvent, u as ToolRisk } from './loop-B6aowbyz.js';
 import { c as Message } from './types-DGH8FS56.js';
 
 type PanelItem = {

package/dist/worker.d.ts

@@ -1,5 +1,5 @@
 import { Auth } from 'agentic-identity';
-import { t as ToolRegistry, o as RunLimits } from './loop-D4qWbRu6.js';
+import { t as ToolRegistry, R as RunLimits } from './loop-B6aowbyz.js';
 import { M as ModelProvider } from './types-DGH8FS56.js';
 
 interface AssistantApiOptions {
@@ -11,6 +11,14 @@ interface AssistantApiOptions {
     registry: ToolRegistry;
     system?: string;
     limits?: RunLimits;
+    /** Origins (such as `https://app.example.org`) that may send a write signed in with a session cookie. A write with a cookie from any other origin is a 403. A Bearer key needs no origin. */
+    origins?: readonly string[];
+    /** A scope a caller must hold for each route group. A caller without it gets a 403. A group left out needs no extra scope. `approvals` covers list, approve, and deny. */
+    routeScopes?: {
+        tools?: string;
+        chat?: string;
+        approvals?: string;
+    };
     /** Most chat turns one principal may run at once. Default 4. */
     maxConcurrentRuns?: number;
 }
@@ -32,7 +40,7 @@ interface StaticTokenEntry {
     scopes: string[];
 }
 /**
- * An `agentic-identity` Auth that reads `Authorization: Bearer <token>` against a fixed map.
+ * An `agentic-identity` Auth (`createStoreAuth` over a memory Store) for a fixed map of bearer tokens.
  * It keeps only SHA-256 digests. It throws on a token shorter than 32 bytes or an entry of the wrong shape.
  * An empty map is allowed: every request is then a 401.
  */

package/dist/worker.js

@@ -3,8 +3,8 @@ import {
   createAssistantApi,
   createStaticTokenAuth,
   createWorker
-} from "./chunk-GLU222OQ.js";
-import "./chunk-3LKTJJ75.js";
+} from "./chunk-PRQTL5VS.js";
+import "./chunk-RHGVOR6N.js";
 export {
   APPROVER_SCOPE,
   createAssistantApi,

package/llms.txt

@@ -5,11 +5,11 @@ An AI assistant that acts inside your apps with the user's own permissions.
 Keywords: assistant,ai,agent,tools,mcp,sdk,side-panel,approvals,eu,model-port.
 
 - SDK: import { runAssistant, ToolRegistry, createPrincipal } from "agentic-assistant".
-- CLI: agentic-assistant chat --tools <mcp-url> --scope <s> --tool-scope <s> "message". MCP server: agentic-assistant mcp.
+- CLI: agentic-assistant chat --tools <mcp-url> --scope <s> --tool-scope <s> "message". MCP server: agentic-assistant mcp. Remote: agentic-assistant tools|approvals|approve <id> --digest <d>|deny <id> --api <url> --api-token-env <NAME>.
 - HTTP API: import { createWorker } from "agentic-assistant/worker". Routes under /api/v1: GET /tools, POST /chat (SSE), GET /approvals, POST /approvals/:id/approve|deny. Sign-in with agentic-identity principals. Chat responses carry x-ai-generated: true. Demo: https://agentic-assistant-demo.hello-fd1.workers.dev (needs a bearer key; no model key set, so chat answers 503 not_configured).
 - HTTP client: import { createClient, AssistantApiError } from "agentic-assistant/client"; createClient({ baseUrl, token, fetch? }) gives health, tools, chat (async generator of events), approvals, approve(id, digest), deny(id, reason?). Typed errors with code and status.
 - AI marking: events carry `provenance`; use provenanceLabel and provenanceMarker (JSON-LD, IPTC trainedAlgorithmicMedia). Also in HTTP, CLI --json and MCP results.
-- Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-assistant/react.css".
+- Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-design/tokens.css"; import "agentic-assistant/react.css" (colors are agentic-design tokens).
 - Test provider: import { ScriptedProvider } from "agentic-assistant/testing".
 
 ## Docs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-assistant",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "An AI assistant that acts inside your apps with the user's own permissions.",
   "keywords": [
     "assistant",
@@ -74,7 +74,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^1.3.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "agentic-identity": "^0.4.0",
+    "agentic-identity": "^0.6.0",
     "ajv": "^8.20.0"
   },
   "devDependencies": {
@@ -84,6 +84,7 @@
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
+    "agentic-design": "^0.3.1",
     "jsdom": "^30.1.3",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
@@ -93,9 +94,13 @@
     "wrangler": "^4.155.0"
   },
   "peerDependencies": {
+    "agentic-design": "^0.3.1",
     "react": ">=18"
   },
   "peerDependenciesMeta": {
+    "agentic-design": {
+      "optional": true
+    },
     "react": {
       "optional": true
     }

package/dist/chunk-T5WVSGYQ.js

@@ -1,82 +0,0 @@
-import {
-  runChat
-} from "./chunk-3X6KU636.js";
-import {
-  VERSION,
-  provenanceLabel,
-  provenanceMarker
-} from "./chunk-3LKTJJ75.js";
-
-// src/mcp-server.ts
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-var MAX_MESSAGE_CHARS = 1e4;
-var TOOL = {
-  name: "assistant_chat",
-  description: "Send one message to the assistant. It acts for a person with the scopes the host gave it. A risky action runs only if the host pre-approved that exact call. The reply says it is machine-made.",
-  inputSchema: {
-    type: "object",
-    properties: { message: { type: "string", minLength: 1, maxLength: MAX_MESSAGE_CHARS, description: "What to ask the assistant." } },
-    required: ["message"],
-    additionalProperties: false
-  },
-  annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }
-};
-var fail = (text) => ({ isError: true, content: [{ type: "text", text }] });
-function createAssistantMcpServer(setup, shutdown) {
-  const server = new Server({ name: "agentic-assistant", version: VERSION }, { capabilities: { tools: {} } });
-  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: [TOOL] }));
-  server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
-    if (request.params.name !== TOOL.name) return fail(`unknown tool "${request.params.name}"`);
-    const message = request.params.arguments?.message;
-    if (typeof message !== "string" || message.trim() === "" || message.length > MAX_MESSAGE_CHARS) {
-      return fail(`message must be a text of 1 to ${MAX_MESSAGE_CHARS} characters`);
-    }
-    const call = new AbortController();
-    const stop = () => call.abort();
-    extra.signal.addEventListener("abort", stop, { once: true });
-    shutdown?.addEventListener("abort", stop, { once: true });
-    if (extra.signal.aborted || shutdown?.aborted) stop();
-    let reply = "";
-    const toolCalls = [];
-    let outcome;
-    for await (const event of runChat(setup, [{ role: "user", content: [{ type: "text", text: message }] }], call.signal)) {
-      if (event.type === "text_delta") reply += event.text;
-      else if (event.type === "turn_start") reply = "";
-      else if (event.type === "tool_result") toolCalls.push({ name: event.name, isError: event.isError, ...event.denied ? { denied: event.denied } : {}, ...event.provenance ? { provenance: event.provenance } : {} });
-      else if (event.type === "done") outcome = { reason: event.reason, totals: event.totals, provenance: event.provenance };
-    }
-    extra.signal.removeEventListener("abort", stop);
-    shutdown?.removeEventListener("abort", stop);
-    const provenance = outcome?.provenance;
-    const result = {
-      machineMade: true,
-      reply,
-      reason: outcome?.reason ?? "unknown",
-      toolCalls,
-      totals: outcome?.totals,
-      ...provenance ? { provenance, label: provenanceLabel(provenance), marker: provenanceMarker(provenance) } : {}
-    };
-    return { ...outcome?.reason === "end_turn" ? {} : { isError: true }, content: [{ type: "text", text: JSON.stringify(result) }] };
-  });
-  return server;
-}
-async function startAssistantMcp(setup) {
-  const shutdown = new AbortController();
-  const server = createAssistantMcpServer(setup, shutdown.signal);
-  const ended = new Promise((resolve) => {
-    server.onclose = resolve;
-    process.stdin.once("end", resolve);
-    process.stdin.once("close", resolve);
-  });
-  await server.connect(new StdioServerTransport());
-  await ended;
-  shutdown.abort();
-  await server.close().catch(() => void 0);
-}
-
-export {
-  createAssistantMcpServer,
-  startAssistantMcp
-};

package/dist/mcp-server-ZPCPYMCT.js

@@ -1,12 +0,0 @@
-import {
-  createAssistantMcpServer,
-  startAssistantMcp
-} from "./chunk-T5WVSGYQ.js";
-import "./chunk-3X6KU636.js";
-import "./chunk-HYT732TN.js";
-import "./chunk-DXTIEMOT.js";
-import "./chunk-3LKTJJ75.js";
-export {
-  createAssistantMcpServer,
-  startAssistantMcp
-};