agentic-assistant 0.5.1 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 0.6.0
+
+Changed
+
+- BREAKING: design class prefix is now agd-. The panel and demo page read the `--agd-color-*` tokens from `agentic-design` 0.4.0. The old prefix matches EasyList cosmetic rules, so ad blockers hid design-styled controls. Migration: set the `--agd-color-*` tokens in place of the old names, and load `agentic-design/tokens.css` from `agentic-design` ^0.4.0.
+- `agentic-design` peer dependency and dev dependency raised to `^0.4.0`.
+
+## 0.5.2 - 2026-10-29
+
+No breaking changes. This is a patch release.
+
+Changed
+
+- The demo page sets `color-scheme: light dark`, so its system-color fallbacks follow the user's dark mode.
+- A test fails if a hard-coded hex color returns to the demo page style. This does not change the package.
+- An end-to-end test covers `mcp` with no model key, and the README documents that behavior. This does not change the package.
+
+Security
+
+- An npm `overrides` entry sets `zod` to `^4.6.7`, for GHSA-mrhx-c7xc-m3w5 (memory exhaustion while validating oversized constrained collections, fixed in 4.6.6 and later). The entry applies only to this repo. An install of `agentic-assistant` gets the zod that each dependency allows. The optional peer `agentic-design` 0.3.x can bring zod 3 into your project, so run `npm audit` after you upgrade.
+
 ## 0.5.1
 
 Changed
@@ -19,7 +40,7 @@ Changed
 
 - `createStaticTokenAuth` now builds a `createStoreAuth` over a memory Store. The local `Authorization` header parser is gone, so `agentic-identity` reads the credential. A token now also signs in as a `session` cookie, and a write by cookie needs an origin in `origins`. A token map may not use one `id` twice.
 - The demo Worker needs the scope `demo:read` on every `/api/v1` route. A token without it gets a 403. Migration: add `demo:read` to each scope list in `ASSISTANT_TOKENS`.
-- `react.css` has no hex colors. Its `--aa-*` variables read the `agentic-design` tokens (`--ad-color-*`), so the panel follows the host theme, including dark mode. Load `agentic-design/tokens.css` on the page. Without it each variable falls back to a system color, and the panel loses its blue accent, tinted cards, amber approval box, and red danger color (the risk notice shows in link blue). The palette shifts a little (for example the accent is now `#2B4BC4`). `agentic-design` is an optional peer dependency (`^0.3.1`).
+- `react.css` has no hex colors. Its `--aa-*` variables read the color tokens of `agentic-design` 0.3, so the panel follows the host theme, including dark mode. Load `agentic-design/tokens.css` on the page. Without it each variable falls back to a system color, and the panel loses its blue accent, tinted cards, amber approval box, and red danger color (the risk notice shows in link blue). The palette shifts a little (for example the accent is now `#2B4BC4`). `agentic-design` is an optional peer dependency (`^0.3.1`).
 - The OpenAI-compatible provider skips a chunk or tool-call part that is not an object, so a JSON `null` no longer throws. It gives a tool-call part with no `index` its own call when it has an `id`, and continues the last call when it has none. It cancels the body of a failed response.
 - The MCP tool source has unit tests.
 

package/README.md

@@ -118,7 +118,7 @@ import "agentic-assistant/react.css";
 />;
 ```
 
-The panel colors are `agentic-design` tokens (`--ad-color-*`), so load `agentic-design/tokens.css` once, as above. The panel then follows your light or dark theme. Without the tokens the panel uses system colors. Set all `--ad-color-*` tokens or none: a partial set can give a pair that fails contrast. To set your own colors, override the `--aa-*` variables on `.aa-panel`.
+The panel colors are `agentic-design` tokens (`--agd-color-*`), so load `agentic-design/tokens.css` once, as above. The panel then follows your light or dark theme. Without the tokens the panel uses system colors. Set all `--agd-color-*` tokens or none: a partial set can give a pair that fails contrast. To set your own colors, override the `--aa-*` variables on `.aa-panel`.
 
 The panel streams the answer, shows each tool call as a card, and shows an approval prompt with the exact arguments. Every message, card, and prompt that the assistant makes carries a visible "Machine-made" label. Tool output is shown as text and never as HTML. The panel does not hold a model, a key, or a gate. It needs `react` 18 or newer.
 
@@ -141,6 +141,7 @@ The assistant prints its answer on stdout. The answer starts with `Assistant (ma
 - `--scope` is what the assistant may hold. `--tool-scope` is what each tool needs. Both are required, and the CLI guesses neither.
 - `--tool-risk` defaults to `risky`. A risky call needs approval. Approve one exact call ahead of time with `--approve-call '{"tool":"notes_write","input":{"id":"7","text":"hi"}}'`. The call must match the tool and the arguments, and each approval is used once. On a terminal, `--approve ask` asks you.
 - Keys come from the environment: `ANTHROPIC_API_KEY`, or the variable named by `--api-key-env`. There is no flag that takes a key.
+- With `ANTHROPIC_API_KEY`, or the variable named by `--api-key-env`, unset or empty, `mcp` prints one line on stderr that names the variable, writes nothing to stdout, and exits 2.
 - For an EU-hosted model, use `--provider openai-compatible --base-url https://models.example.eu/v1 --model <id> --api-key-env EU_KEY`. Add `--price-in` and `--price-out` to use the cost cap.
 - A message on stdin may be up to 1 MB.
 - Limits: `--max-turns`, `--max-tokens`, `--max-cost`, `--max-tool-calls`.

package/dist/{chunk-TOQIHYDH.js → chunk-4N722U3I.js}

@@ -4,7 +4,7 @@ import {
   hasScope,
   parseScope,
   runAssistant
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 
 // src/api.ts
 import { PRINCIPAL_KINDS } from "agentic-identity";

package/dist/{chunk-JNZPVHNN.js → chunk-4YOTNHWM.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.5.1" : readPackageVersion();
+var VERSION = true ? "0.6.0" : readPackageVersion();
 
 // src/approvals.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-2RRM6OLC.js → chunk-IXOE6XPI.js}

@@ -1,6 +1,6 @@
 import {
   ProviderError
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 
 // src/providers/anthropic.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/{chunk-E7TFMM2Z.js → chunk-UJIYGGF5.js}

@@ -2,12 +2,12 @@ import {
   describeFailure,
   runChat,
   runRemote
-} from "./chunk-5BZENFYL.js";
+} from "./chunk-WDZUIVU7.js";
 import {
   VERSION,
   provenanceLabel,
   provenanceMarker
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 
 // src/mcp-server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";

package/dist/{chunk-5BZENFYL.js → chunk-WDZUIVU7.js}

@@ -5,7 +5,7 @@ import {
   AnthropicProvider,
   checkBaseUrl,
   isLoopback
-} from "./chunk-2RRM6OLC.js";
+} from "./chunk-IXOE6XPI.js";
 import {
   PrincipalError,
   ProviderError,
@@ -17,7 +17,7 @@ import {
   digestCall,
   printable,
   runAssistant
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 import {
   AssistantApiError,
   createClient

package/dist/cli.js

@@ -7,15 +7,15 @@ import {
   readTextFile,
   runChat,
   runRemote
-} from "./chunk-5BZENFYL.js";
+} from "./chunk-WDZUIVU7.js";
 import "./chunk-HYT732TN.js";
-import "./chunk-2RRM6OLC.js";
+import "./chunk-IXOE6XPI.js";
 import {
   TOOL_RISKS,
   VERSION,
   printable,
   provenanceLabel
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 import "./chunk-QTIEDY3V.js";
 
 // src/cli.ts
@@ -327,7 +327,7 @@ async function runCli(argv, io = defaultIo()) {
     for (const skip of setup.skipped.slice(0, MAX_SKIPPED_LINES)) io.err(`skipped tool ${oneLine(skip.name, 100)}: ${oneLine(skip.reason, 200)}`);
     if (setup.skipped.length > MAX_SKIPPED_LINES) io.err(`skipped ${setup.skipped.length - MAX_SKIPPED_LINES} more tools`);
     if (parsed.command === "mcp") {
-      const { startAssistantMcp } = await import("./mcp-server-7R5WCSID.js");
+      const { startAssistantMcp } = await import("./mcp-server-SYJM77VO.js");
       await startAssistantMcp(setup, remote, { approve: parsed.allowApprove ?? false });
       return 0;
     }

package/dist/demo.js

@@ -1,15 +1,15 @@
 import {
   createStaticTokenAuth,
   createWorker
-} from "./chunk-TOQIHYDH.js";
+} from "./chunk-4N722U3I.js";
 import {
   AnthropicProvider
-} from "./chunk-2RRM6OLC.js";
+} from "./chunk-IXOE6XPI.js";
 import {
   ToolRegistry,
   VERSION,
   hasScope
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 
 // src/demo-page.ts
 var DEMO_CSP = "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
@@ -20,13 +20,14 @@ var DEMO_PAGE = `<!doctype html>
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>agentic-assistant demo</title>
 <style>
-body{font:16px/1.5 system-ui,sans-serif;max-width:42rem;margin:2rem auto;padding:0 1rem;color:var(--ad-color-text,CanvasText);background:var(--ad-color-surface,Canvas)}
+:root{color-scheme:light dark}
+body{font:16px/1.5 system-ui,sans-serif;max-width:42rem;margin:2rem auto;padding:0 1rem;color:var(--agd-color-text,CanvasText);background:var(--agd-color-surface,Canvas)}
 label{display:block;margin-top:1rem;font-weight:600}
 input,textarea,button{font:inherit;padding:.5rem;width:100%;box-sizing:border-box}
 button{width:auto;min-height:2.5rem;margin-top:1rem;cursor:pointer}
-:focus-visible{outline:3px solid var(--ad-color-focus,LinkText);outline-offset:2px}
-#out{white-space:pre-wrap;border:1px solid var(--ad-color-border-strong,CanvasText);padding:1rem;margin-top:1rem;min-height:4rem}
-.badge{display:inline-block;border:1px solid var(--ad-color-text,CanvasText);padding:0 .5rem;font-size:.875rem}
+:focus-visible{outline:3px solid var(--agd-color-focus,LinkText);outline-offset:2px}
+#out{white-space:pre-wrap;border:1px solid var(--agd-color-border-strong,CanvasText);padding:1rem;margin-top:1rem;min-height:4rem}
+.badge{display:inline-block;border:1px solid var(--agd-color-text,CanvasText);padding:0 .5rem;font-size:.875rem}
 </style>
 </head>
 <body>

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-E7TFMM2Z.js";
+} from "./chunk-UJIYGGF5.js";
 import {
   ConfigError,
   FallbackProvider,
@@ -10,13 +10,13 @@ import {
   connectMcpTools,
   parseTarget,
   runChat
-} from "./chunk-5BZENFYL.js";
+} from "./chunk-WDZUIVU7.js";
 import "./chunk-HYT732TN.js";
 import {
   AnthropicProvider,
   DEFAULT_ANTHROPIC_MODEL,
   PRICING_CHECKED_ON
-} from "./chunk-2RRM6OLC.js";
+} from "./chunk-IXOE6XPI.js";
 import {
   ACTIONS,
   DATA_NOTICE,
@@ -40,7 +40,7 @@ import {
   provenanceMarker,
   runAssistant,
   scopeCovers
-} from "./chunk-JNZPVHNN.js";
+} from "./chunk-4YOTNHWM.js";
 import "./chunk-QTIEDY3V.js";
 export {
   ACTIONS,

package/dist/{mcp-server-7R5WCSID.js → mcp-server-SYJM77VO.js}

@@ -1,11 +1,11 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-E7TFMM2Z.js";
-import "./chunk-5BZENFYL.js";
+} from "./chunk-UJIYGGF5.js";
+import "./chunk-WDZUIVU7.js";
 import "./chunk-HYT732TN.js";
-import "./chunk-2RRM6OLC.js";
-import "./chunk-JNZPVHNN.js";
+import "./chunk-IXOE6XPI.js";
+import "./chunk-4YOTNHWM.js";
 import "./chunk-QTIEDY3V.js";
 export {
   createAssistantMcpServer,

package/dist/react.css

@@ -1,22 +1,22 @@
-/* Plain CSS variables. They read the agentic-design tokens (--ad-color-*), so load
+/* Plain CSS variables. They read the agentic-design tokens (--agd-color-*), so load
    agentic-design/tokens.css once on the page. Override --aa-* on .aa-panel or a parent to match your app.
    Without the tokens, each variable falls back to a system color, so focus and borders stay visible.
    Every token pair meets WCAG 2.2 AA contrast in light and dark; src/react/styles.test.ts checks it.
    No remote fonts or images. */
 .aa-panel {
-  --aa-bg: var(--ad-color-surface, Canvas);
-  --aa-fg: var(--ad-color-text, CanvasText);
-  --aa-muted: var(--ad-color-text-muted, CanvasText);
-  --aa-border: var(--ad-color-border-strong, CanvasText);
-  --aa-accent: var(--ad-color-accent, LinkText);
-  --aa-accent-fg: var(--ad-color-text-on-accent, Canvas);
-  --aa-focus: var(--ad-color-focus, LinkText);
-  --aa-machine-bg: var(--ad-color-accent-subtle, Canvas);
-  --aa-machine-fg: var(--ad-color-accent-text, CanvasText);
-  --aa-card-bg: var(--ad-color-surface-sunken, Canvas);
-  --aa-warn-bg: var(--ad-color-warning-subtle, Canvas);
-  --aa-warn-fg: var(--ad-color-warning-text, CanvasText);
-  --aa-danger: var(--ad-color-danger, LinkText);
+  --aa-bg: var(--agd-color-surface, Canvas);
+  --aa-fg: var(--agd-color-text, CanvasText);
+  --aa-muted: var(--agd-color-text-muted, CanvasText);
+  --aa-border: var(--agd-color-border-strong, CanvasText);
+  --aa-accent: var(--agd-color-accent, LinkText);
+  --aa-accent-fg: var(--agd-color-text-on-accent, Canvas);
+  --aa-focus: var(--agd-color-focus, LinkText);
+  --aa-machine-bg: var(--agd-color-accent-subtle, Canvas);
+  --aa-machine-fg: var(--agd-color-accent-text, CanvasText);
+  --aa-card-bg: var(--agd-color-surface-sunken, Canvas);
+  --aa-warn-bg: var(--agd-color-warning-subtle, Canvas);
+  --aa-warn-fg: var(--agd-color-warning-text, CanvasText);
+  --aa-danger: var(--agd-color-danger, LinkText);
 
   display: flex;
   flex-direction: column;

package/dist/worker.js

@@ -3,8 +3,8 @@ import {
   createAssistantApi,
   createStaticTokenAuth,
   createWorker
-} from "./chunk-TOQIHYDH.js";
-import "./chunk-JNZPVHNN.js";
+} from "./chunk-4N722U3I.js";
+import "./chunk-4YOTNHWM.js";
 export {
   APPROVER_SCOPE,
   createAssistantApi,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-assistant",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "description": "An AI assistant that acts inside your apps with the user's own permissions.",
   "keywords": [
     "assistant",
@@ -84,7 +84,7 @@
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
-    "agentic-design": "^0.3.1",
+    "agentic-design": "^0.4.0",
     "jsdom": "^30.1.3",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
@@ -94,7 +94,7 @@
     "wrangler": "^4.155.0"
   },
   "peerDependencies": {
-    "agentic-design": "^0.3.1",
+    "agentic-design": "^0.4.0",
     "react": ">=18"
   },
   "peerDependenciesMeta": {
@@ -104,5 +104,8 @@
     "react": {
       "optional": true
     }
+  },
+  "overrides": {
+    "zod": "^4.6.7"
   }
 }