agentic-assistant 0.4.0 → 0.5.1

package/dist/react.css

@@ -1,19 +1,22 @@
-/* Plain CSS variables. Set them on .aa-panel or a parent to match your app. Every pair below meets
-   WCAG 2.2 AA contrast; src/react/styles.test.ts checks it. No remote fonts or images. */
+/* Plain CSS variables. They read the agentic-design tokens (--ad-color-*), so load
+   agentic-design/tokens.css once on the page. Override --aa-* on .aa-panel or a parent to match your app.
+   Without the tokens, each variable falls back to a system color, so focus and borders stay visible.
+   Every token pair meets WCAG 2.2 AA contrast in light and dark; src/react/styles.test.ts checks it.
+   No remote fonts or images. */
 .aa-panel {
-  --aa-bg: #ffffff;
-  --aa-fg: #1b1b1b;
-  --aa-muted: #4d4d4d;
-  --aa-border: #767676;
-  --aa-accent: #0b57d0;
-  --aa-accent-fg: #ffffff;
-  --aa-focus: #0b57d0;
-  --aa-machine-bg: #e8eefc;
-  --aa-machine-fg: #0a2a6b;
-  --aa-card-bg: #f4f4f4;
-  --aa-warn-bg: #fff4d6;
-  --aa-warn-fg: #5c3d00;
-  --aa-danger: #b3261e;
+  --aa-bg: var(--ad-color-surface, Canvas);
+  --aa-fg: var(--ad-color-text, CanvasText);
+  --aa-muted: var(--ad-color-text-muted, CanvasText);
+  --aa-border: var(--ad-color-border-strong, CanvasText);
+  --aa-accent: var(--ad-color-accent, LinkText);
+  --aa-accent-fg: var(--ad-color-text-on-accent, Canvas);
+  --aa-focus: var(--ad-color-focus, LinkText);
+  --aa-machine-bg: var(--ad-color-accent-subtle, Canvas);
+  --aa-machine-fg: var(--ad-color-accent-text, CanvasText);
+  --aa-card-bg: var(--ad-color-surface-sunken, Canvas);
+  --aa-warn-bg: var(--ad-color-warning-subtle, Canvas);
+  --aa-warn-fg: var(--ad-color-warning-text, CanvasText);
+  --aa-danger: var(--ad-color-danger, LinkText);
 
   display: flex;
   flex-direction: column;

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import * as react from 'react';
-import { A as AssistantEvent, u as ToolRisk } from './loop-D4qWbRu6.js';
+import { h as AssistantEvent, u as ToolRisk } from './loop-B6aowbyz.js';
 import { c as Message } from './types-DGH8FS56.js';
 
 type PanelItem = {

package/dist/worker.d.ts

@@ -1,5 +1,5 @@
 import { Auth } from 'agentic-identity';
-import { t as ToolRegistry, o as RunLimits } from './loop-D4qWbRu6.js';
+import { t as ToolRegistry, R as RunLimits } from './loop-B6aowbyz.js';
 import { M as ModelProvider } from './types-DGH8FS56.js';
 
 interface AssistantApiOptions {
@@ -13,6 +13,12 @@ interface AssistantApiOptions {
     limits?: RunLimits;
     /** Origins (such as `https://app.example.org`) that may send a write signed in with a session cookie. A write with a cookie from any other origin is a 403. A Bearer key needs no origin. */
     origins?: readonly string[];
+    /** A scope a caller must hold for each route group. A caller without it gets a 403. A group left out needs no extra scope. `approvals` covers list, approve, and deny. */
+    routeScopes?: {
+        tools?: string;
+        chat?: string;
+        approvals?: string;
+    };
     /** Most chat turns one principal may run at once. Default 4. */
     maxConcurrentRuns?: number;
 }
@@ -34,7 +40,7 @@ interface StaticTokenEntry {
     scopes: string[];
 }
 /**
- * An `agentic-identity` Auth that reads `Authorization: Bearer <token>` against a fixed map.
+ * An `agentic-identity` Auth (`createStoreAuth` over a memory Store) for a fixed map of bearer tokens.
  * It keeps only SHA-256 digests. It throws on a token shorter than 32 bytes or an entry of the wrong shape.
  * An empty map is allowed: every request is then a 401.
  */

package/dist/worker.js

@@ -3,8 +3,8 @@ import {
   createAssistantApi,
   createStaticTokenAuth,
   createWorker
-} from "./chunk-YMEM57LX.js";
-import "./chunk-C44QT474.js";
+} from "./chunk-TOQIHYDH.js";
+import "./chunk-JNZPVHNN.js";
 export {
   APPROVER_SCOPE,
   createAssistantApi,

package/llms.txt

@@ -5,11 +5,11 @@ An AI assistant that acts inside your apps with the user's own permissions.
 Keywords: assistant,ai,agent,tools,mcp,sdk,side-panel,approvals,eu,model-port.
 
 - SDK: import { runAssistant, ToolRegistry, createPrincipal } from "agentic-assistant".
-- CLI: agentic-assistant chat --tools <mcp-url> --scope <s> --tool-scope <s> "message". MCP server: agentic-assistant mcp.
+- CLI: agentic-assistant chat --tools <mcp-url> --scope <s> --tool-scope <s> "message". MCP server: agentic-assistant mcp. Remote: agentic-assistant tools|approvals|approve <id> --digest <d>|deny <id> --api <url> --api-token-env <NAME>.
 - HTTP API: import { createWorker } from "agentic-assistant/worker". Routes under /api/v1: GET /tools, POST /chat (SSE), GET /approvals, POST /approvals/:id/approve|deny. Sign-in with agentic-identity principals. Chat responses carry x-ai-generated: true. Demo: https://agentic-assistant-demo.hello-fd1.workers.dev (needs a bearer key; no model key set, so chat answers 503 not_configured).
 - HTTP client: import { createClient, AssistantApiError } from "agentic-assistant/client"; createClient({ baseUrl, token, fetch? }) gives health, tools, chat (async generator of events), approvals, approve(id, digest), deny(id, reason?). Typed errors with code and status.
 - AI marking: events carry `provenance`; use provenanceLabel and provenanceMarker (JSON-LD, IPTC trainedAlgorithmicMedia). Also in HTTP, CLI --json and MCP results.
-- Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-assistant/react.css".
+- Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-design/tokens.css"; import "agentic-assistant/react.css" (colors are agentic-design tokens).
 - Test provider: import { ScriptedProvider } from "agentic-assistant/testing".
 
 ## Docs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-assistant",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "An AI assistant that acts inside your apps with the user's own permissions.",
   "keywords": [
     "assistant",
@@ -74,7 +74,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^1.3.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "agentic-identity": "^0.6.0",
+    "agentic-identity": "^0.7.0",
     "ajv": "^8.20.0"
   },
   "devDependencies": {
@@ -84,6 +84,7 @@
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
+    "agentic-design": "^0.3.1",
     "jsdom": "^30.1.3",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
@@ -93,9 +94,13 @@
     "wrangler": "^4.155.0"
   },
   "peerDependencies": {
+    "agentic-design": "^0.3.1",
     "react": ">=18"
   },
   "peerDependenciesMeta": {
+    "agentic-design": {
+      "optional": true
+    },
     "react": {
       "optional": true
     }

package/dist/chunk-KNUEYFX2.js

@@ -1,82 +0,0 @@
-import {
-  runChat
-} from "./chunk-MESH6X6N.js";
-import {
-  VERSION,
-  provenanceLabel,
-  provenanceMarker
-} from "./chunk-C44QT474.js";
-
-// src/mcp-server.ts
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-var MAX_MESSAGE_CHARS = 1e4;
-var TOOL = {
-  name: "assistant_chat",
-  description: "Send one message to the assistant. It acts for a person with the scopes the host gave it. A risky action runs only if the host pre-approved that exact call. The reply says it is machine-made.",
-  inputSchema: {
-    type: "object",
-    properties: { message: { type: "string", minLength: 1, maxLength: MAX_MESSAGE_CHARS, description: "What to ask the assistant." } },
-    required: ["message"],
-    additionalProperties: false
-  },
-  annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }
-};
-var fail = (text) => ({ isError: true, content: [{ type: "text", text }] });
-function createAssistantMcpServer(setup, shutdown) {
-  const server = new Server({ name: "agentic-assistant", version: VERSION }, { capabilities: { tools: {} } });
-  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: [TOOL] }));
-  server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
-    if (request.params.name !== TOOL.name) return fail(`unknown tool "${request.params.name}"`);
-    const message = request.params.arguments?.message;
-    if (typeof message !== "string" || message.trim() === "" || message.length > MAX_MESSAGE_CHARS) {
-      return fail(`message must be a text of 1 to ${MAX_MESSAGE_CHARS} characters`);
-    }
-    const call = new AbortController();
-    const stop = () => call.abort();
-    extra.signal.addEventListener("abort", stop, { once: true });
-    shutdown?.addEventListener("abort", stop, { once: true });
-    if (extra.signal.aborted || shutdown?.aborted) stop();
-    let reply = "";
-    const toolCalls = [];
-    let outcome;
-    for await (const event of runChat(setup, [{ role: "user", content: [{ type: "text", text: message }] }], call.signal)) {
-      if (event.type === "text_delta") reply += event.text;
-      else if (event.type === "turn_start") reply = "";
-      else if (event.type === "tool_result") toolCalls.push({ name: event.name, isError: event.isError, ...event.denied ? { denied: event.denied } : {}, ...event.provenance ? { provenance: event.provenance } : {} });
-      else if (event.type === "done") outcome = { reason: event.reason, totals: event.totals, provenance: event.provenance };
-    }
-    extra.signal.removeEventListener("abort", stop);
-    shutdown?.removeEventListener("abort", stop);
-    const provenance = outcome?.provenance;
-    const result = {
-      machineMade: true,
-      reply,
-      reason: outcome?.reason ?? "unknown",
-      toolCalls,
-      totals: outcome?.totals,
-      ...provenance ? { provenance, label: provenanceLabel(provenance), marker: provenanceMarker(provenance) } : {}
-    };
-    return { ...outcome?.reason === "end_turn" ? {} : { isError: true }, content: [{ type: "text", text: JSON.stringify(result) }] };
-  });
-  return server;
-}
-async function startAssistantMcp(setup) {
-  const shutdown = new AbortController();
-  const server = createAssistantMcpServer(setup, shutdown.signal);
-  const ended = new Promise((resolve) => {
-    server.onclose = resolve;
-    process.stdin.once("end", resolve);
-    process.stdin.once("close", resolve);
-  });
-  await server.connect(new StdioServerTransport());
-  await ended;
-  shutdown.abort();
-  await server.close().catch(() => void 0);
-}
-
-export {
-  createAssistantMcpServer,
-  startAssistantMcp
-};

package/dist/mcp-server-LXGWKEHG.js

@@ -1,12 +0,0 @@
-import {
-  createAssistantMcpServer,
-  startAssistantMcp
-} from "./chunk-KNUEYFX2.js";
-import "./chunk-MESH6X6N.js";
-import "./chunk-HYT732TN.js";
-import "./chunk-FQD4OK2R.js";
-import "./chunk-C44QT474.js";
-export {
-  createAssistantMcpServer,
-  startAssistantMcp
-};