agentic-assistant 0.7.2 → 0.7.4

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.7.4
+
+- Add `agentic-assistant/account` with a typed, stateless account contributor.
+- Require `agentic-identity` 0.10 for the account registry contract; drop 0.9 support.
+- Document the host boundary for transcripts, shared data, and agent outputs.
+
+## 0.7.3
+
+- Support agentic-design 0.8 and 0.9 and agentic-identity 0.9 and 0.10.
+
 ## 0.7.2
 
 Patch. No change to the SDK, CLI, React panel, or HTTP shape.

package/README.md

@@ -7,7 +7,7 @@
 
 An AI assistant that acts inside your apps with the user's own permissions.
 
-> Status: early. The core loop, the tool sources, approvals, the React panel, the CLI, the MCP server, and the hosted HTTP API work.
+> Status: 0.7.4, early. The core loop, the tool sources, approvals, the React panel, the CLI, the MCP server, and the hosted HTTP API work.
 
 A demo Worker runs at https://agentic-assistant-demo.hello-fd1.workers.dev. `GET /` shows a demo page and `GET /health` answers 200. The `/api/v1` routes need a bearer key, so without one they answer 401. The demo has no model key set. A signed-in `POST /api/v1/chat` answers 503 with `not_configured`. The demo never fakes an answer.
 
@@ -292,6 +292,40 @@ The record says who made the content. It does not say the content is true.
 - A tool error text goes to the `detail` field of the event. The model sees only `tool failed`.
 - A model refusal stops the run, unless you set a fallback model. `FallbackProvider(primary, fallback)` or `--fallback-model <id>` asks the second model once when the first refuses or fails. Each `turn_end` event has `answeredBy` with the model that answered. The text of the first model is held until its turn ends, so a turn with a fallback does not stream word by word. A refusal from the fallback stops the run. The fallback gets only the output room that the first ask left, and the caps count the input of both asks, so a token or cost cap holds. A first ask that failed after it streamed is counted by an estimate. If the fallback itself fails after it streamed, the totals of that run leave out the first ask. Its error text is not kept.
 
+## Account export and erase
+
+```ts
+import { createMemoryStore, type PrincipalContext } from "agentic-identity";
+import { assistantAccount } from "agentic-assistant/account";
+import { createAccountRegistry } from "agentic-identity/account";
+
+const registry = createAccountRegistry().register(assistantAccount, undefined);
+const subject = { id: "ana", kind: "human" } as const;
+const store = createMemoryStore(); // Use the host identity store in production.
+declare const actor: PrincipalContext; // Use the signed-in actor from the host.
+const data = await registry.export(subject);
+const result = await registry.erase(subject, store, { actor });
+// data.manifest.apps is [{ id: "assistant", files: [] }].
+// result.counts.assistant is {}.
+```
+
+The contributor implements `AccountPackage<void>` from `agentic-identity` 0.10.
+It holds no persistent account data. Both calls check the subject id and kind.
+An invalid subject stops the call. A repeat erase returns empty counts.
+
+The runtime sends messages, tool results, and machine-made provenance to the
+host. It stores no items, versions, history, sharing grants, attachments, or
+blobs. Pending approvals live in memory during a run. Stop active runs and
+cancel pending approvals before account erasure. This contributor does not stop
+runs or clear host memory.
+
+The host must register the packages that store its data. Those packages must
+export owned and authored data, delete sole-owned items, and keep other owners
+on shared items. They must handle damaged records and retries. Retained agent
+outputs must keep their machine-made labels. Empty counts here cover only this
+package; they do not confirm that the host erased the account. Credentials and
+identity audit records belong to the identity account flow.
+
 ## Develop
 
 ```sh

package/SKILL.md

@@ -53,6 +53,10 @@ To list tools and decide on pending calls on a running API, use `agentic-assista
 
 Import `agentic-design/tokens.css` and `agentic-assistant/react.css` too (the panel colors are design tokens). Label every assistant part as machine-made.
 
+## Account export and erase
+
+- Account contributor: `import { assistantAccount } from "agentic-assistant/account"`; register it with `createAccountRegistry()` from `agentic-identity/account`. It holds no persistent account data.
+
 ## Test without a model
 
 Use `ScriptedProvider` from `agentic-assistant/testing`. Give it one scripted turn per model call.

package/dist/account.d.ts

@@ -0,0 +1,16 @@
+import { AccountPackage } from 'agentic-identity/account';
+
+/** The assistant has no persistent account data and needs no storage dependency. */
+type AssistantAccount = AccountPackage<void>;
+/**
+ * Account registry contributor for the stateless assistant runtime.
+ * Messages, tool results, and provenance are returned to the host, never saved
+ * here. Pending approvals exist only during a run. Stop active runs before an
+ * account erase. Hosts must export and erase their own retained transcripts,
+ * outputs, grants, history, and blobs through the packages that store them.
+ * Empty records and counts mean this package has no persistent data; they do
+ * not confirm that the host erased an account or stopped an active run.
+ */
+declare const assistantAccount: AssistantAccount;
+
+export { type AssistantAccount, assistantAccount };

package/dist/account.js

@@ -0,0 +1,21 @@
+// src/account.ts
+import { PRINCIPAL_KINDS } from "agentic-identity";
+function checkSubject(subject) {
+  if (typeof subject?.id !== "string" || subject.id.trim() === "" || !PRINCIPAL_KINDS.includes(subject.kind)) {
+    throw new TypeError("subject needs a non-empty id and a valid principal kind");
+  }
+}
+var assistantAccount = {
+  id: "assistant",
+  async exportAccount(subject) {
+    checkSubject(subject);
+    return {};
+  },
+  async eraseAccount(subject) {
+    checkSubject(subject);
+    return {};
+  }
+};
+export {
+  assistantAccount
+};

package/dist/{chunk-2EGHI5R5.js → chunk-7E4CVVOB.js}

@@ -4,7 +4,7 @@ import {
   hasScope,
   parseScope,
   runAssistant
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 
 // src/api.ts
 import { PRINCIPAL_KINDS } from "agentic-identity";

package/dist/{chunk-7T7GHGRH.js → chunk-P7PDVTZV.js}

@@ -1,6 +1,6 @@
 // src/version.ts
 import { createRequire } from "module";
-var VERSION = true ? "0.7.2" : readPackageVersion();
+var VERSION = true ? "0.7.4" : readPackageVersion();
 
 // src/approvals.ts
 import { createHash, randomUUID } from "crypto";

package/dist/{chunk-6GHMDRBO.js → chunk-QF4GC5IN.js}

@@ -5,7 +5,7 @@ import {
   AnthropicProvider,
   checkBaseUrl,
   isLoopback
-} from "./chunk-QCDYCSLO.js";
+} from "./chunk-VRQ23I3J.js";
 import {
   PrincipalError,
   ProviderError,
@@ -17,7 +17,7 @@ import {
   digestCall,
   printable,
   runAssistant
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 import {
   AssistantApiError,
   createClient

package/dist/{chunk-XTUZBZJV.js → chunk-UDNV7TOY.js}

@@ -2,12 +2,12 @@ import {
   describeFailure,
   runChat,
   runRemote
-} from "./chunk-6GHMDRBO.js";
+} from "./chunk-QF4GC5IN.js";
 import {
   VERSION,
   provenanceLabel,
   provenanceMarker
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 
 // src/mcp-server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";

package/dist/{chunk-QCDYCSLO.js → chunk-VRQ23I3J.js}

@@ -1,6 +1,6 @@
 import {
   ProviderError
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 
 // src/providers/anthropic.ts
 import Anthropic from "@anthropic-ai/sdk";

package/dist/cli.js

@@ -7,15 +7,15 @@ import {
   readTextFile,
   runChat,
   runRemote
-} from "./chunk-6GHMDRBO.js";
+} from "./chunk-QF4GC5IN.js";
 import "./chunk-HYT732TN.js";
-import "./chunk-QCDYCSLO.js";
+import "./chunk-VRQ23I3J.js";
 import {
   TOOL_RISKS,
   VERSION,
   printable,
   provenanceLabel
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 import "./chunk-QTIEDY3V.js";
 
 // src/cli.ts
@@ -327,7 +327,7 @@ async function runCli(argv, io = defaultIo()) {
     for (const skip of setup.skipped.slice(0, MAX_SKIPPED_LINES)) io.err(`skipped tool ${oneLine(skip.name, 100)}: ${oneLine(skip.reason, 200)}`);
     if (setup.skipped.length > MAX_SKIPPED_LINES) io.err(`skipped ${setup.skipped.length - MAX_SKIPPED_LINES} more tools`);
     if (parsed.command === "mcp") {
-      const { startAssistantMcp } = await import("./mcp-server-TSP6G47K.js");
+      const { startAssistantMcp } = await import("./mcp-server-DJH3N6SF.js");
       await startAssistantMcp(setup, remote, { approve: parsed.allowApprove ?? false });
       return 0;
     }

package/dist/demo.js

@@ -1,15 +1,15 @@
+import {
+  AnthropicProvider
+} from "./chunk-VRQ23I3J.js";
 import {
   createStaticTokenAuth,
   createWorker
-} from "./chunk-2EGHI5R5.js";
-import {
-  AnthropicProvider
-} from "./chunk-QCDYCSLO.js";
+} from "./chunk-7E4CVVOB.js";
 import {
   ToolRegistry,
   VERSION,
   hasScope
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 
 // src/demo-page.ts
 var DEMO_CSP = "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-XTUZBZJV.js";
+} from "./chunk-UDNV7TOY.js";
 import {
   ConfigError,
   FallbackProvider,
@@ -10,13 +10,13 @@ import {
   connectMcpTools,
   parseTarget,
   runChat
-} from "./chunk-6GHMDRBO.js";
+} from "./chunk-QF4GC5IN.js";
 import "./chunk-HYT732TN.js";
 import {
   AnthropicProvider,
   DEFAULT_ANTHROPIC_MODEL,
   PRICING_CHECKED_ON
-} from "./chunk-QCDYCSLO.js";
+} from "./chunk-VRQ23I3J.js";
 import {
   ACTIONS,
   DATA_NOTICE,
@@ -40,7 +40,7 @@ import {
   provenanceMarker,
   runAssistant,
   scopeCovers
-} from "./chunk-7T7GHGRH.js";
+} from "./chunk-P7PDVTZV.js";
 import "./chunk-QTIEDY3V.js";
 export {
   ACTIONS,

package/dist/{mcp-server-TSP6G47K.js → mcp-server-DJH3N6SF.js}

@@ -1,11 +1,11 @@
 import {
   createAssistantMcpServer,
   startAssistantMcp
-} from "./chunk-XTUZBZJV.js";
-import "./chunk-6GHMDRBO.js";
+} from "./chunk-UDNV7TOY.js";
+import "./chunk-QF4GC5IN.js";
 import "./chunk-HYT732TN.js";
-import "./chunk-QCDYCSLO.js";
-import "./chunk-7T7GHGRH.js";
+import "./chunk-VRQ23I3J.js";
+import "./chunk-P7PDVTZV.js";
 import "./chunk-QTIEDY3V.js";
 export {
   createAssistantMcpServer,

package/dist/worker.js

@@ -3,8 +3,8 @@ import {
   createAssistantApi,
   createStaticTokenAuth,
   createWorker
-} from "./chunk-2EGHI5R5.js";
-import "./chunk-7T7GHGRH.js";
+} from "./chunk-7E4CVVOB.js";
+import "./chunk-P7PDVTZV.js";
 export {
   APPROVER_SCOPE,
   createAssistantApi,

package/llms.txt

@@ -10,6 +10,7 @@ Keywords: assistant,ai,agent,tools,mcp,sdk,side-panel,approvals,eu,model-port.
 - HTTP client: import { createClient, AssistantApiError } from "agentic-assistant/client"; createClient({ baseUrl, token, fetch? }) gives health, tools, chat (async generator of events), approvals, approve(id, digest), deny(id, reason?). Typed errors with code and status.
 - AI marking: events carry `provenance`; use provenanceLabel and provenanceMarker (JSON-LD, IPTC trainedAlgorithmicMedia). Also in HTTP, CLI --json and MCP results.
 - Panel: import { AssistantPanel } from "agentic-assistant/react"; import "agentic-design/tokens.css"; import "agentic-assistant/react.css" (colors are agentic-design tokens).
+- Account contributor: `import { assistantAccount } from "agentic-assistant/account"`; register it with `createAccountRegistry()` from `agentic-identity/account`. It holds no persistent account data.
 - Test provider: import { ScriptedProvider } from "agentic-assistant/testing".
 
 ## Docs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-assistant",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "An AI assistant that acts inside your apps with the user's own permissions.",
   "keywords": [
     "assistant",
@@ -57,7 +57,11 @@
       "types": "./dist/react.d.ts",
       "import": "./dist/react.js"
     },
-    "./react.css": "./dist/react.css"
+    "./react.css": "./dist/react.css",
+    "./account": {
+      "types": "./dist/account.d.ts",
+      "import": "./dist/account.js"
+    }
   },
   "bin": {
     "agentic-assistant": "./dist/cli.js"
@@ -74,7 +78,7 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^1.3.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
-    "agentic-identity": "^0.8.0",
+    "agentic-identity": "^0.10.0",
     "ajv": "^8.20.0"
   },
   "devDependencies": {
@@ -84,7 +88,7 @@
     "@types/node": "^22.0.0",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
-    "agentic-design": "^0.8.0",
+    "agentic-design": ">=0.8.0 <0.10.0",
     "jsdom": "^30.1.3",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
@@ -94,7 +98,7 @@
     "wrangler": "^4.155.0"
   },
   "peerDependencies": {
-    "agentic-design": ">=0.5.0 <0.9.0",
+    "agentic-design": ">=0.8.0 <0.10.0",
     "react": ">=18"
   },
   "peerDependenciesMeta": {