bunnyquery 1.10.12 → 1.11.1

package/README.md

@@ -86,6 +86,11 @@ call `BunnyQuery.init()`:
 That's it. BunnyQuery takes over the `#chatbox` element and renders the login or
 chat view depending on the user's session.
 
+The widget works with whichever `skapi-js` your page loads. On a current SDK it calls the
+`forwardRequest` family, and on an earlier one it falls back to the `clientSecretRequest` family,
+deciding by whether the SDK has `forwardRequestHistory`. It never decides by `forwardRequest` alone,
+because on an earlier SDK that name belongs to a different, retired method.
+
 ## What's in the package
 
 | Path                          | Purpose                                                                          |
@@ -130,7 +135,7 @@ Mounts the widget. Returns the `BunnyQuery` object.
 | `attachmentParsers`      | `array`   | `null`   | Client-side attachment parsers. See [Attachment parser plugins](#attachment-parser-plugins). |
 | `windowedIndexing`       | `boolean` | `true`   | Server-driven windowed indexing for text and grid files (see [file types](#supported-file-types)). Pass `false` to fall back to agent-driven paging, which keeps the traversal inside the model's turn budget and the tab open. |
 | `allowAnonymous`         | `boolean` | `null`   | Open the chat with no login for visitors without an account. `null` follows the project's own "Allow anonymous users" setting (`getConnectionInfo().conf.require_login`); `true`/`false` pins it. |
-| `liveStreaming`          | `boolean` | `false`  | Paint a chat answer into its bubble as it arrives, instead of at the end. A **request**, not a switch: the widget honours it only when your page's `skapi-js` actually carries skapi's half of the stream flag (it checks for `clientSecretRequestStream` and `clientSecretRequestFinalize`), and otherwise warns once and falls back to buffered replies. An older SDK silently drops the flag, which would leave the destination streaming SSE into a buffered row that reads back empty. It still also needs a polling worker that relays the response bytes, which the widget cannot check, so leave it off until the region you talk to is deployed. |
+| `liveStreaming`          | `boolean` | `false`  | Paint a chat answer into its bubble as it arrives, instead of at the end. A **request**, not a switch: the widget honours it only when your page's `skapi-js` actually carries skapi's half of the stream flag (it checks for `forwardRequestStream` and `forwardRequestFinalize`, or their older names `clientSecretRequestStream` and `clientSecretRequestFinalize` on an earlier `skapi-js`), and otherwise warns once and falls back to buffered replies. An older SDK silently drops the flag, which would leave the destination streaming SSE into a buffered row that reads back empty. It still also needs a polling worker that relays the response bytes, which the widget cannot check, so leave it off until the region you talk to is deployed. |
 | `liveStreamingRealtime`  | `boolean` | `false`  | Deliver streamed chunks over skapi's websocket instead of waiting for the next poll tick. Requires `liveStreaming`. Off unless you ask for it: skapi's `joinRealtime` **replaces** the connection's group, so for the length of a turn it takes the room out from under whatever else your app uses realtime for. Purely an accelerator; with it off the reply still streams, on the poll's cadence. |
 
 ### Rebranding the widget
@@ -447,9 +452,9 @@ import 'bunnyquery/styles/chat.css';
 
 // 1. Inject the skapi transport + MCP endpoint ONCE at startup.
 configureChatEngine({
-  clientSecretRequest: (opts) => skapi.clientSecretRequest(opts),
-  clientSecretRequestHistory: (params, fetchOptions) =>
-    skapi.clientSecretRequestHistory(params, fetchOptions),
+  forwardRequest: (form, opts) => skapi.forwardRequest(form, opts),
+  forwardRequestHistory: (params, fetchOptions) =>
+    skapi.forwardRequestHistory(params, fetchOptions),
   mcpBaseUrl: 'https://mcp.broadwayinc.computer',
   poll: 0, // see the note below
 });
@@ -474,22 +479,29 @@ helpers. See the `.d.ts` shipped with `bunnyquery/engine`.
 
 | Option                        | Type       | Description                                                                                                   |
 | ----------------------------- | ---------- | ------------------------------------------------------------------------------------------------------------ |
-| `clientSecretRequest`         | `function` | `skapi.clientSecretRequest`, bound to your Skapi instance. **Required.**                                      |
-| `clientSecretRequestHistory`  | `function` | `skapi.clientSecretRequestHistory`, bound to your Skapi instance. **Required.**                              |
+| `forwardRequest`              | `function` | `skapi.forwardRequest`, bound to your Skapi instance. The engine calls it as `forwardRequest(null, opts)`. **Required**, or its deprecated alias below. |
+| `forwardRequestHistory`       | `function` | `skapi.forwardRequestHistory`, bound to your Skapi instance. **Required**, or its deprecated alias below.   |
 | `mcpBaseUrl`                  | `string`   | MCP server base URL (you resolve prod vs dev). **Required.**                                                  |
-| `poll`                        | `number?`  | Value attached as `poll` on every request. Omit it if your `clientSecretRequest` already resolves with the final body; pass `0` for the deployed `skapi-js@latest` (needed for the early ack + a manual `.poll()` handle that powers queued-send cancel, the widget's case). |
+| `poll`                        | `number?`  | Value attached as `poll` on every request. Omit it if your `forwardRequest` already resolves with the final body; pass `0` for the deployed `skapi-js@latest` (needed for the early ack + a manual `.poll()` handle that powers queued-send cancel, the widget's case). |
 | `attachmentParsers`           | `array?`   | Client-side attachment parsers, registered at configure time. More can be added later with `registerAttachmentParser()`. See [Attachment parser plugins](#attachment-parser-plugins). |
 | `windowedIndexing`            | `boolean?` | Opt in to **server-driven** windowed indexing for text and grid files (see [file types](#supported-file-types)). Off by default in the engine; the widget passes it as `true`. The deployed skapi workers support it; only leave it off against a self-hosted worker that does not yet strip the `_skapi_window` directive, where it would reach the provider as an unknown body field and fail the call terminally with no retry. |
-| `liveStreaming`               | `boolean?` | Opt in to **live streaming** of chat turns. Off by default, and the backend ships first: a streamed row settles with a status and NO body (the answer was the stream), so against a worker that does not relay, the turn reads back empty. Pair it with `clientSecretRequestFinalize` and `clientSecretRequestStream`, and gate it on `skapiSupportsStreaming(skapi)`. |
-| `clientSecretRequestFinalize` | `function?` | `skapi.clientSecretRequestFinalize`, bound to your Skapi instance. Stores the version of a streamed turn that history keeps (the engine sends the assembled provider body, so it reads back exactly like a buffered turn) and releases that request's chunks. Without it a streamed turn is never finalized and its row stays empty. |
-| `clientSecretRequestStream`   | `function?` | `skapi.clientSecretRequestStream`, bound to your Skapi instance. The **second half of the durability guarantee**: a row that settles while no poll is attached (closed tab, discarded background tab, slept device) is never finalized, so its answer stays in the chunk store and its history row is terminal and empty. Given the request id this drains that turn's chunks in one pass; the engine parses them exactly as it parses a live stream and finalizes what it read, so each row is recovered at most once. Without it the engine mints no recovery marker at all and behaves as it did before streaming. |
+| `liveStreaming`               | `boolean?` | Opt in to **live streaming** of chat turns. Off by default, and the backend ships first: a streamed row settles with a status and NO body (the answer was the stream), so against a worker that does not relay, the turn reads back empty. Pair it with `forwardRequestFinalize` and `forwardRequestStream`, and gate it on `skapiSupportsStreaming(skapi)`. |
+| `forwardRequestFinalize`      | `function?` | `skapi.forwardRequestFinalize`, bound to your Skapi instance. Stores the version of a streamed turn that history keeps (the engine sends the assembled provider body, so it reads back exactly like a buffered turn) and releases that request's chunks. Without it a streamed turn is never finalized and its row stays empty. |
+| `forwardRequestStream`        | `function?` | `skapi.forwardRequestStream`, bound to your Skapi instance. The **second half of the durability guarantee**: a row that settles while no poll is attached (closed tab, discarded background tab, slept device) is never finalized, so its answer stays in the chunk store and its history row is terminal and empty. Given the request id this drains that turn's chunks in one pass; the engine parses them exactly as it parses a live stream and finalizes what it read, so each row is recovered at most once. Without it the engine mints no recovery marker at all and behaves as it did before streaming. |
 | `onLiveStreamUpdate`          | `function?` | Observation hook for a streaming turn (`{ serverItemId, ownerKey, phase, text, thinkingText, toolNames, complete, errored }`). The engine already paints the answer text itself, so this is only for affordances it does not decide the presentation of. Never throw from it. |
 | `liveStreamingRealtime`       | `boolean?`  | Push relayed chunks over skapi's websocket as well. Requires `liveStreaming`. Off by default: `joinRealtime` replaces the connection's group for the length of a turn, so only a host that owns its skapi instance should opt in. |
-| `streamRecovery`              | `boolean?`  | Set `false` to force the read-back of already-streamed turns **off**, even though the chunk reader is injected. There is no need to set it to turn recovery on: injecting `clientSecretRequestStream` is what arms it. |
+| `streamRecovery`              | `boolean?`  | Set `false` to force the read-back of already-streamed turns **off**, even though the chunk reader is injected. There is no need to set it to turn recovery on: injecting `forwardRequestStream` is what arms it. |
 | `mintIndexDoneMarker`         | `function?` | Write the durable "indexing finished" marker (`done::<path>`, reference `src::<path>`, table `__INDEXING__`) for the runs this client knows are complete. Best-effort, must never throw. Without it the engine falls back to inference. |
 | `upsertIndexRunRecord`        | `function?` | Create-or-update the per-file run record (`run::<path>`, reference `src::<path>`, table `__INDEXING__`), which is what lets chat rows and files-page badges paint without scanning background history. You implement the upsert (the records API has none) and the status precedence: `'working'` must never overwrite a terminal status. Without it the engine uses the legacy scan/probe path. |
 | `csrHistoryItemLookup`        | `function?` | Single-item `csr-poll` point lookup, used by `ChatSession.hydrateCompactItems` to fetch a compact history stub's real body when an indexing row is expanded. Without it stubs keep their server-extracted heads. |
 
+**Deprecated config keys.** `clientSecretRequest`, `clientSecretRequestHistory`,
+`clientSecretRequestFinalize` and `clientSecretRequestStream` are still accepted, so a host written
+against an earlier release keeps working unchanged. When both spellings are given the new one wins.
+Through the old `clientSecretRequest` key the engine sends the secret's name as `clientSecretName`,
+exactly as before, and through `forwardRequest` it sends `secretName`. Every request also names the
+project it runs against in `service` and `owner`, and both keys pass those through.
+
 ### Display and paging helpers
 
 Two shared transforms exist so that a second chat UI behaves identically to the

package/bunnyquery.js

@@ -56,6 +56,46 @@
     }
     return _config;
   }
+  function resolveForwardRequest() {
+    const cfg = chatEngineConfig();
+    const fwd = cfg.forwardRequest;
+    if (typeof fwd === "function") {
+      return (opts) => fwd.call(cfg, null, opts);
+    }
+    const legacy = cfg.clientSecretRequest;
+    if (typeof legacy === "function") {
+      return (opts) => {
+        if (!opts || typeof opts !== "object" || !("secretName" in opts)) return legacy.call(cfg, opts);
+        const { secretName, ...rest } = opts;
+        return legacy.call(cfg, Object.assign({ clientSecretName: secretName }, rest));
+      };
+    }
+    throw new Error(
+      "[chat-engine] No request transport: configureChatEngine() needs forwardRequest (or the deprecated clientSecretRequest), bound to a skapi instance."
+    );
+  }
+  function resolveForwardRequestHistory() {
+    const cfg = chatEngineConfig();
+    const hist = typeof cfg.forwardRequestHistory === "function" ? cfg.forwardRequestHistory : cfg.clientSecretRequestHistory;
+    if (typeof hist === "function") {
+      return (params, fetchOptions) => hist.call(cfg, params, fetchOptions);
+    }
+    throw new Error(
+      "[chat-engine] No history transport: configureChatEngine() needs forwardRequestHistory (or the deprecated clientSecretRequestHistory), bound to a skapi instance."
+    );
+  }
+  function resolveForwardRequestFinalize() {
+    const cfg = chatEngineConfig();
+    if (typeof cfg.forwardRequestFinalize === "function") return cfg.forwardRequestFinalize;
+    if (typeof cfg.clientSecretRequestFinalize === "function") return cfg.clientSecretRequestFinalize;
+    return void 0;
+  }
+  function resolveForwardRequestStream() {
+    const cfg = chatEngineConfig();
+    if (typeof cfg.forwardRequestStream === "function") return cfg.forwardRequestStream;
+    if (typeof cfg.clientSecretRequestStream === "function") return cfg.clientSecretRequestStream;
+    return void 0;
+  }
   function windowedIndexingEnabled() {
     return _config?.windowedIndexing === true;
   }
@@ -66,11 +106,13 @@
     return _config?.liveStreaming === true;
   }
   function streamRecoveryEnabled() {
-    if (_config?.streamRecovery === false) return false;
-    return typeof _config?.clientSecretRequestStream === "function";
+    if (!_config) return false;
+    if (_config.streamRecovery === false) return false;
+    return typeof resolveForwardRequestStream() === "function";
   }
   function skapiSupportsStreaming(sk) {
-    return !!sk && typeof sk.clientSecretRequestStream === "function" && typeof sk.clientSecretRequestFinalize === "function";
+    if (!sk) return false;
+    return typeof sk.forwardRequestStream === "function" && typeof sk.forwardRequestFinalize === "function" || typeof sk.clientSecretRequestStream === "function" && typeof sk.clientSecretRequestFinalize === "function";
   }
   function pollOpt() {
     const p = _config?.poll;
@@ -982,6 +1024,9 @@ Index the REMAINING windows - one record per row/item, looking at any page image
   var CONTEXT_WINDOW_DEFAULT = { claude: 2e5, openai: 128e3 };
   var CONTEXT_WINDOW_BY_MODEL = {
     // claude, exact ids
+    "claude-fable-5-1": 1e6,
+    "claude-opus-5-5": 1e6,
+    "claude-sonnet-5-5": 1e6,
     "claude-fable-5": 1e6,
     "claude-opus-5": 1e6,
     "claude-opus-4-8": 1e6,
@@ -995,6 +1040,9 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     "claude-haiku-4-5": 2e5,
     "claude-3-5-sonnet": 2e5,
     // openai, exact ids
+    "gpt-6-astra": 105e4,
+    "gpt-6-sol": 105e4,
+    "gpt-6-luna": 105e4,
     "gpt-5.6-sol": 105e4,
     "gpt-5.6-terra": 105e4,
     "gpt-5.6-luna": 105e4,
@@ -1011,11 +1059,15 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     "claude-opus": 1e6,
     "claude-sonnet": 1e6,
     "claude-haiku": 2e5,
+    "gpt-6": 105e4,
     "gpt-5.6": 105e4,
     "gpt-5": 128e3
   };
   var MAX_OUTPUT_BY_MODEL = {
     // claude
+    "claude-fable-5-1": 128e3,
+    "claude-opus-5-5": 128e3,
+    "claude-sonnet-5-5": 128e3,
     "claude-fable-5": 128e3,
     "claude-opus-5": 128e3,
     "claude-opus-4-8": 128e3,
@@ -1024,6 +1076,9 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     "claude-haiku-4-5": 64e3,
     "claude-3-5-sonnet": 8e3,
     // openai
+    "gpt-6-astra": 128e3,
+    "gpt-6-sol": 128e3,
+    "gpt-6-luna": 128e3,
     "gpt-5.6-sol": 128e3,
     "gpt-5.6-terra": 128e3,
     "gpt-5.6-luna": 128e3,
@@ -1040,6 +1095,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     "claude-opus": 128e3,
     "claude-sonnet": 64e3,
     "claude-haiku": 64e3,
+    "gpt-6": 128e3,
     "gpt-5.6": 128e3,
     "gpt-5": 128e3
   };
@@ -2092,7 +2148,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     const project = publicProjectId || service;
     return { url: String(mcpUrl()).replace(/\/+$/, "") + "/p/" + project };
   }
-  var clientSecretRequest = (opts) => chatEngineConfig().clientSecretRequest(opts);
+  var forwardRequest = (opts) => resolveForwardRequest()(opts);
   var CHAT_STREAM_ON = Object.freeze({
     transport: Object.freeze({ stream: true }),
     body: Object.freeze({ stream: true })
@@ -2283,8 +2339,8 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       mcpServerDefinition.authorization_token = mcpServer.authorizationToken;
     }
     const stream = chatStreamWiring(userId || service);
-    return clientSecretRequest({
-      clientSecretName: "claude",
+    return forwardRequest({
+      secretName: "claude",
       queue: userId || service,
       service,
       owner,
@@ -2389,8 +2445,8 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       }))
     ];
     const stream = chatStreamWiring(userId || service);
-    return clientSecretRequest({
-      clientSecretName: "openai",
+    return forwardRequest({
+      secretName: "openai",
       queue: userId || service,
       service,
       owner,
@@ -2539,8 +2595,8 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     if (platform === "openai") {
       const resolvedModel2 = info.model || DEFAULT_OPENAI_MODEL;
       const imageDetail = getOpenAIImageDetail(resolvedModel2);
-      return tapDispatchFailure(clientSecretRequest({
-        clientSecretName: "openai",
+      return tapDispatchFailure(forwardRequest({
+        secretName: "openai",
         queue: bgIndexingQueueName(info.userId, service),
         service,
         owner,
@@ -2586,8 +2642,8 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       }));
     }
     const resolvedModel = info.model || DEFAULT_CLAUDE_MODEL;
-    return tapDispatchFailure(clientSecretRequest({
-      clientSecretName: "claude",
+    return tapDispatchFailure(forwardRequest({
+      secretName: "claude",
       queue: bgIndexingQueueName(info.userId, service),
       service,
       owner,
@@ -2721,7 +2777,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       params.compact ? { compact: true } : {},
       params.queue_exclude ? { queue_exclude: params.queue_exclude } : {}
     );
-    return chatEngineConfig().clientSecretRequestHistory(
+    return resolveForwardRequestHistory()(
       p,
       Object.assign({ ascending: false, limit: CHAT_HISTORY_PAGE_LIMIT }, fetchOptions)
     );
@@ -4460,7 +4516,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
     _finalizeStreamedTurn(st) {
       if (st.finalized) return;
       if (!this._mayFinalize(st)) return;
-      var fin = chatEngineConfig().clientSecretRequestFinalize;
+      var fin = resolveForwardRequestFinalize();
       if (!fin || st.finalBody == null) return;
       st.finalized = true;
       var url = st.platform === "openai" ? OPENAI_RESPONSES_API_URL : ANTHROPIC_MESSAGES_API_URL;
@@ -4471,10 +4527,10 @@ Index the REMAINING windows - one record per row/item, looking at any page image
           service: st.projectId,
           owner: st.owner
         })).catch(function(err) {
-          console.warn("[chat-engine] clientSecretRequestFinalize failed", err);
+          console.warn("[chat-engine] forwardRequestFinalize failed", err);
         });
       } catch (e) {
-        console.warn("[chat-engine] clientSecretRequestFinalize threw", e);
+        console.warn("[chat-engine] forwardRequestFinalize threw", e);
       }
     }
     /** Painted-but-unsettled live text on a bubble, for the typewriter to resume from.
@@ -4689,8 +4745,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       return this._readBackStreamedTurn(itemId, this.getHistoryCacheKey(), platform, id ? id.projectId : "", id ? id.owner : "", true);
     }
     _readBackStreamedTurn(itemId, ownerKey, platform, projectId, owner, manual) {
-      var cfg = chatEngineConfig();
-      var read = cfg.clientSecretRequestStream;
+      var read = resolveForwardRequestStream();
       if (!read || !itemId) return Promise.resolve();
       if (this._rec().inflight[itemId]) return Promise.resolve();
       if (!manual && this._rec().attempted[itemId]) {
@@ -4803,7 +4858,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       }
       if (!degraded) delete this._rec().incomplete[itemId];
       if (!store || body == null || isErr) return;
-      var fin = chatEngineConfig().clientSecretRequestFinalize;
+      var fin = resolveForwardRequestFinalize();
       if (!fin) return;
       var url = platform === "openai" ? OPENAI_RESPONSES_API_URL : ANTHROPIC_MESSAGES_API_URL;
       try {
@@ -8319,7 +8374,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
   (function() {
     var MCP_PROD = "https://mcp.broadwayinc.computer";
     var MCP_DEV = "https://mcp-dev.broadwayinc.computer";
-    var BQ_VERSION = "1.10.12" ;
+    var BQ_VERSION = "1.11.1" ;
     var ATTACHMENT_URL_EXPIRES_SECONDS = 600;
     var GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
     var GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
@@ -8587,6 +8642,50 @@ Index the REMAINING windows - one record per row/item, looking at any page image
         return null;
       });
     }
+    function skapiHasForwardRequest(sk) {
+      return !!sk && typeof sk.forwardRequestHistory === "function" && typeof sk.forwardRequest === "function";
+    }
+    function skapiForwardWithSecret(secretName, request) {
+      if (skapiHasForwardRequest(S.skapi)) {
+        return S.skapi.forwardRequest(null, Object.assign({ secretName }, request));
+      }
+      return S.skapi.clientSecretRequest(Object.assign({ clientSecretName: secretName }, request));
+    }
+    function skapiCancelRequest(opts) {
+      return skapiHasForwardRequest(S.skapi) ? S.skapi.cancelForwardRequest(opts) : S.skapi.cancelClientSecretRequest(opts);
+    }
+    function skapiEngineTransport(canStream) {
+      if (skapiHasForwardRequest(S.skapi)) {
+        return {
+          forwardRequest: function(form, o) {
+            return S.skapi.forwardRequest(form, o);
+          },
+          forwardRequestHistory: function(p, f) {
+            return S.skapi.forwardRequestHistory(p, f);
+          },
+          forwardRequestFinalize: canStream ? function(requestId, data, options) {
+            return S.skapi.forwardRequestFinalize(requestId, data, options);
+          } : void 0,
+          forwardRequestStream: canStream ? function(requestId, options) {
+            return S.skapi.forwardRequestStream(requestId, options);
+          } : void 0
+        };
+      }
+      return {
+        clientSecretRequest: function(o) {
+          return S.skapi.clientSecretRequest(o);
+        },
+        clientSecretRequestHistory: function(p, f) {
+          return S.skapi.clientSecretRequestHistory(p, f);
+        },
+        clientSecretRequestFinalize: canStream ? function(requestId, data, options) {
+          return S.skapi.clientSecretRequestFinalize(requestId, data, options);
+        } : void 0,
+        clientSecretRequestStream: canStream ? function(requestId, options) {
+          return S.skapi.clientSecretRequestStream(requestId, options);
+        } : void 0
+      };
+    }
     function render(viewName, builder) {
       if (!S.root) return;
       S.view = viewName;
@@ -8880,8 +8979,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       var code = getQueryParam("code");
       var redirectUrl = ssGet(skey(SK.googleRedirect)) || window.location.origin + window.location.pathname;
       var secretName = S.opts.googleClientSecretName || "ggl";
-      return S.skapi.clientSecretRequest({
-        clientSecretName: secretName,
+      return skapiForwardWithSecret(secretName, {
         url: GOOGLE_TOKEN_URL,
         method: "POST",
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
@@ -9559,9 +9657,11 @@ Index the REMAINING windows - one record per row/item, looking at any page image
         onAction ? h("button", { class: "bq-link" + (opts.dangerAction ? " bq-link--danger" : ""), type: "button", onclick: onAction, text: actionLabel || "Change" }) : null
       );
     }
-    function getNewsletterStatus() {
+    function getNewsletterStatus(user) {
+      var userId = user && typeof user.user_id === "string" ? user.user_id : null;
+      if (!userId) return Promise.resolve(false);
       try {
-        return Promise.resolve(S.skapi.getNewsletterSubscription({ group: "authorized" })).then(function(res) {
+        return Promise.resolve(S.skapi.getNewsletterSubscription({ group: "authorized", user_id: userId })).then(function(res) {
           var list = res && res.list ? res.list : res;
           if (!Array.isArray(list)) return false;
           return list.some(function(s) {
@@ -9601,9 +9701,11 @@ Index the REMAINING windows - one record per row/item, looking at any page image
         { class: "bq-chat-settings" },
         h("div", { class: "bq-chat-settings-loading" }, bunnyLoader("Loading..."))
       ));
-      Promise.all([getProfile(), getNewsletterStatus()]).then(function(res) {
-        if (res[0]) S.user = res[0];
-        S.newsletterSubscribed = res[1];
+      getProfile().then(function(user) {
+        if (user) S.user = user;
+        return getNewsletterStatus(S.user);
+      }).then(function(subscribed) {
+        S.newsletterSubscribed = subscribed;
         renderSettingsIntoBox();
       }).catch(function() {
         renderSettingsIntoBox();
@@ -10080,7 +10182,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
         settleScrollAfterRefresh();
       },
       cancelRequest: function(opts) {
-        return S.skapi.cancelClientSecretRequest(opts);
+        return skapiCancelRequest(opts);
       },
       refreshSession: function() {
         return refreshSkapiSession();
@@ -12852,7 +12954,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
       if (liveStreaming && !canStream) {
         liveStreaming = false;
         console.warn(
-          "[bunnyquery] liveStreaming was requested but this page's skapi-js has no clientSecretRequestStream/clientSecretRequestFinalize, so skapi's half of the stream flag would be dropped and every reply would read back empty. Falling back to buffered replies - update skapi-js to enable streaming."
+          "[bunnyquery] liveStreaming was requested but this page's skapi-js has neither forwardRequestStream/forwardRequestFinalize nor the older clientSecretRequestStream/clientSecretRequestFinalize, so skapi's half of the stream flag would be dropped and every reply would read back empty. Falling back to buffered replies - update skapi-js to enable streaming."
         );
       }
       configureProjectSettings(function(service) {
@@ -12862,13 +12964,7 @@ Index the REMAINING windows - one record per row/item, looking at any page image
           return rec && rec.data || null;
         });
       });
-      configureChatEngine({
-        clientSecretRequest: function(o) {
-          return S.skapi.clientSecretRequest(o);
-        },
-        clientSecretRequestHistory: function(p, f) {
-          return S.skapi.clientSecretRequestHistory(p, f);
-        },
+      configureChatEngine(Object.assign({
         // Single-item csr-poll point lookup: how the engine hydrates a
         // compact history stub's real body when an indexing row expands.
         csrHistoryItemLookup: function(fullId, service, owner) {
@@ -12912,32 +13008,13 @@ Index the REMAINING windows - one record per row/item, looking at any page image
         liveStreaming,
         // Requires liveStreaming, and cannot outlive it: the AND is what stops an
         // embedder turning on socket delivery for a reply that is not streamed.
-        liveStreamingRealtime: liveStreaming && S.opts.liveStreamingRealtime === true,
-        // What stores the version of a streamed turn that history keeps. The
-        // engine sends the ASSEMBLED provider body, so a streamed turn reads
-        // back through exactly the extractors a buffered one does, with no
-        // branch in the mapper; storing is also what releases the chunks.
-        // Called only for a streamed turn, and best-effort inside the engine.
-        // Handed over only when the SDK actually has it, so the engine's own
-        // "is this host able to?" checks answer honestly instead of a call
-        // reaching an undefined method mid-turn.
-        clientSecretRequestFinalize: canStream ? function(requestId, data, options) {
-          return S.skapi.clientSecretRequestFinalize(requestId, data, options);
-        } : void 0,
-        // THE SECOND HALF OF THE DURABILITY GUARANTEE. A streamed row settles
-        // with a status and NO body: the answer is chunks until finalize copies
-        // a version onto the row. A row that settles while no poll is attached
-        // (the tab was closed, a mobile browser discarded it, the device slept
-        // and the interval stopped) is therefore never finalized, and without
-        // this hook the engine has no way back to it - the answer reads as gone
-        // from the conversation with every byte of it still stored. Given the
-        // request id this drains that turn's chunks in one pass, and the engine
-        // parses them exactly as it parses a live stream, finalizing what it
-        // read so the row becomes ordinary history and is never re-read.
-        clientSecretRequestStream: canStream ? function(requestId, options) {
-          return S.skapi.clientSecretRequestStream(requestId, options);
-        } : void 0
-      });
+        liveStreamingRealtime: liveStreaming && S.opts.liveStreamingRealtime === true
+        // The transport: dispatch and history, plus the finalize hook that stores
+        // a streamed turn's kept version and the chunk reader that is the second
+        // half of the durability guarantee. The two optional hooks are handed
+        // over only when canStream says the SDK has them. skapiEngineTransport
+        // says what each one is for, and picks the family.
+      }, skapiEngineTransport(canStream)));
       if (!S._resizeBound && typeof window !== "undefined" && window.addEventListener) {
         S._resizeBound = true;
         window.addEventListener("resize", function() {