dewee-webchat 0.5.0-beta.1 → 0.5.0-beta.2

package/README.md

@@ -202,8 +202,24 @@ The script-tag equivalent is `data-image-origins`; vanilla JS uses
 redirects, and accepts PNG, JPEG, GIF and WebP only after validating the content type and file
 signature. Node and PHP pin a checked public DNS address; Cloudflare Workers use the platform's
 network boundary. Workers conservatively refuse sources sharing the endpoint's last two hostname
-labels (including sibling subdomains), to avoid bypassing Cloudflare's own-zone protections; host
-images on a separate approved domain there. Files are limited to 2 MiB and 4096
+labels (including sibling subdomains), to avoid bypassing Cloudflare's own-zone protections. For
+same-origin static files in the Worker's own Assets binding, a host can explicitly opt in:
+
+```ts
+createDeweeHandler({
+  // ... other handler options
+  imageSources: ["https://chat.example.com/public-chat-images/"],
+  cloudflarePublicImageAssets: { binding: env.ASSETS, prefixes: ["/public-chat-images/"] },
+});
+```
+
+Only exact same-origin paths in both lists use the binding. This reads the Assets collection directly,
+**bypassing Worker middleware, Cloudflare Access, and cookie-based authorization**. Every file under
+the configured prefixes must be public to any valid chat visitor; keep private files elsewhere,
+inspect the build output, and exclude sensitive files using `.assetsignore`. The URL query is not
+passed to the binding. Sibling domains still require a separate approved image domain.
+
+Files are limited to 2 MiB and 4096
 pixels per edge, and responses are not cached. Animated GIF/PNG/WebP are refused. Raw HTML,
 SVG, unsafe schemes, credentials in URLs and unapproved origins are rejected.
 

package/dist/{chunk-WHHQ6FKK.js → chunk-KXW4EWXA.js}

@@ -21,7 +21,7 @@ function isLinkErrorCode(code) {
 }
 var HEADER_GATEWAY_URL = "x-dewee-gateway-url";
 var HEADER_GATEWAY_TOKEN = "x-dewee-gateway-token";
-var VERSION = "0.5.0-beta.1";
+var VERSION = "0.5.0-beta.2";
 
 // src/actions/page-block.ts
 var ACTION_NAME_RE = /^[a-z][a-z0-9_.-]{0,63}$/;

package/dist/{chunk-M6J3IXEI.js → chunk-XCO4TCKF.js}

@@ -9,7 +9,7 @@ import {
   isLinkErrorCode,
   parseJobAccessLaunch,
   stripPageBlock
-} from "./chunk-WHHQ6FKK.js";
+} from "./chunk-KXW4EWXA.js";
 
 // src/actions/directives.ts
 var DIRECTIVE_LANG = "dewee-action";

package/dist/{handler-B-c6tDr7.d.ts → handler-SsDyK0TG.d.ts}

@@ -290,6 +290,13 @@ interface DeweeHandlerOptions {
     allowedHeaders?: string[];
     /** HTTPS directory prefixes from which the backend may proxy images; disabled when unset. */
     imageSources?: string[];
+    /** Explicitly public directories in this Worker's Assets binding. Bypasses site middleware. */
+    cloudflarePublicImageAssets?: {
+        binding: {
+            fetch(request: Request): Promise<Response>;
+        };
+        prefixes: string[];
+    };
     /**
      * Legacy gateway transport: let visitors bring their own gateway URL + token (sent per request, never stored).
      * Meant for playgrounds. `allowedHosts` restricts which gateways may be targeted.

package/dist/index.js

@@ -7,8 +7,8 @@ import {
   defineDeweeChat,
   mount,
   renderMarkdown
-} from "./chunk-M6J3IXEI.js";
-import "./chunk-WHHQ6FKK.js";
+} from "./chunk-XCO4TCKF.js";
+import "./chunk-KXW4EWXA.js";
 export {
   ApiClient,
   ApiError,

package/dist/react.js

@@ -1,7 +1,7 @@
 import {
   defineDeweeChat
-} from "./chunk-M6J3IXEI.js";
-import "./chunk-WHHQ6FKK.js";
+} from "./chunk-XCO4TCKF.js";
+import "./chunk-KXW4EWXA.js";
 
 // src/react.ts
 import { createElement, forwardRef, useEffect, useImperativeHandle, useRef } from "react";

package/dist/server-identity.d.ts

@@ -1,4 +1,4 @@
-import { D as DeweeIdentitySdk } from './handler-B-c6tDr7.js';
+import { D as DeweeIdentitySdk } from './handler-SsDyK0TG.js';
 import './protocol-BbjGSfZa.js';
 
 declare const deweeIdentitySdk: DeweeIdentitySdk;

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-export { A as AuthenticatedUser, C as CcpError, a as CcpOptions, b as DeweeHandler, c as DeweeHandlerOptions, d as DeweeIdentityOptions, D as DeweeIdentitySdk, e as DeweeTransport, I as IdentityPrivateJwk, f as IdentitySessionStore, g as IdentitySigner, M as MemoryRateLimits, R as RateLimitBucket, h as RateLimiter, S as StoredIdentitySession, V as VisitorClaims, i as createDeweeHandler, m as memoryIdentitySessionStore, j as memoryRateLimiter, o as optionsFromEnv, s as signVisitorToken, v as verifyVisitorToken } from './handler-B-c6tDr7.js';
+export { A as AuthenticatedUser, C as CcpError, a as CcpOptions, b as DeweeHandler, c as DeweeHandlerOptions, d as DeweeIdentityOptions, D as DeweeIdentitySdk, e as DeweeTransport, I as IdentityPrivateJwk, f as IdentitySessionStore, g as IdentitySigner, M as MemoryRateLimits, R as RateLimitBucket, h as RateLimiter, S as StoredIdentitySession, V as VisitorClaims, i as createDeweeHandler, m as memoryIdentitySessionStore, j as memoryRateLimiter, o as optionsFromEnv, s as signVisitorToken, v as verifyVisitorToken } from './handler-SsDyK0TG.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { R as Remediation, H as HistoryMessage, A as AgentInfo, C as ChatStreamEvent, a as ActionManifestEntry, b as AdmissionErrorCode } from './protocol-BbjGSfZa.js';
 export { c as ADMISSION_ERROR_CODES, d as ActionSensitivity, e as ChatRequestBody, E as ErrorBody, I as IdentityErrorCode, L as LinkResponse, f as LinkTarget, P as PublicConfig, S as SessionResponse, i as isAdmissionErrorCode } from './protocol-BbjGSfZa.js';

package/dist/server.js

@@ -13,7 +13,7 @@ import {
   parseJobAccessLaunch,
   serializePageContext,
   stripPageBlock
-} from "./chunk-WHHQ6FKK.js";
+} from "./chunk-KXW4EWXA.js";
 
 // src/server/admission-errors.ts
 var MESSAGES = {
@@ -1325,7 +1325,7 @@ async function verifyImageTicket(secret, namespace, ticket) {
     return null;
   }
 }
-function allowedImageSource(raw, prefixes, endpoint, cloudflare) {
+function allowedImageSource(raw, prefixes, endpoint, cloudflare, publicAssets = []) {
   try {
     if (!raw || raw.length > 4096 || /[\u0000-\u0020\u007f\\]/.test(raw)) return null;
     const match = /^https:\/\/[^/?#]+([^?#]*)/i.exec(raw);
@@ -1337,7 +1337,9 @@ function allowedImageSource(raw, prefixes, endpoint, cloudflare) {
     if (!parent && /^\/(?:image|image-ticket)(?:\/|$)/.test(source.pathname)) return null;
     if (cloudflare) {
       const suffix = endpoint.hostname.split(".").slice(-2).join(".");
-      if (source.hostname === suffix || source.hostname.endsWith(`.${suffix}`)) return null;
+      const sameZone = source.hostname === suffix || source.hostname.endsWith(`.${suffix}`);
+      const isPublicAsset = source.origin === endpoint.origin && publicAssets.some((prefix) => source.pathname.startsWith(prefix));
+      if (sameZone && !isPublicAsset) return null;
     }
     return prefixes.some((prefix) => prefix.origin === source.origin && source.pathname.startsWith(prefix.pathname)) ? source : null;
   } catch {
@@ -1675,6 +1677,11 @@ function createDeweeHandler(options) {
     if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.port || !url.pathname.endsWith("/") || /%(?:2f|5c|25|2e|0[0-9a-f]|1[0-9a-f]|7f)/i.test(url.pathname)) throw new Error("[dewee-webchat] Image sources must be HTTPS directory prefixes on the default port");
     return url;
   });
+  const publicAssets = o.cloudflarePublicImageAssets;
+  if (publicAssets && (typeof publicAssets.binding?.fetch !== "function" || !Array.isArray(publicAssets.prefixes) || !publicAssets.prefixes.length || publicAssets.prefixes.some((path) => typeof path !== "string" || !/^\/(?:[A-Za-z0-9_-]+\/)+$/.test(path)))) {
+    throw new Error("[dewee-webchat] Public image asset prefixes must be explicit absolute directory paths");
+  }
+  const assetPrefixes = publicAssets?.prefixes ?? [];
   let activeImages = 0;
   const imageNamespace = `${o.ccp?.chatUrl ?? o.gatewayUrl ?? ""}
 ${o.ccp?.integrationId ?? o.tenantId ?? ""}`;
@@ -2545,22 +2552,32 @@ ${o.ccp?.integrationId ?? o.tenantId ?? ""}`;
         }
         const raw = parsed?.url;
         const worker = globalThis.navigator?.userAgent === "Cloudflare-Workers";
-        const source = typeof raw === "string" ? allowedImageSource(raw, imageSources, new URL(req.url), worker) : null;
+        const source = typeof raw === "string" ? allowedImageSource(raw, imageSources, new URL(req.url), worker, worker ? assetPrefixes : []) : null;
         if (!source) return fail(req, 403, "Image not allowed", "forbidden_image");
-        return json(req, { ticket: await issueImageTicket(secret, imageNamespace, claims.v, source.href) });
+        const endpoint = new URL(req.url);
+        const asset = publicAssets && source.origin === endpoint.origin && assetPrefixes.some((prefix) => source.pathname.startsWith(prefix));
+        const namespace = asset ? `${imageNamespace}
+assets:${endpoint.origin}` : imageNamespace;
+        return json(req, { ticket: await issueImageTicket(secret, namespace, claims.v, source.href) });
       }
       if (req.method === "GET" && action === "image" && imageSources.length) {
         const ticket = new URL(req.url).searchParams.get("ticket") ?? "";
-        const claims = await verifyImageTicket(secret, imageNamespace, ticket);
+        const endpoint = new URL(req.url);
+        const assetClaims = await verifyImageTicket(secret, `${imageNamespace}
+assets:${endpoint.origin}`, ticket);
+        const claims = assetClaims ?? await verifyImageTicket(secret, imageNamespace, ticket);
         if (!claims) return fail(req, 401, "Image ticket expired", "unauthorized");
         const worker = globalThis.navigator?.userAgent === "Cloudflare-Workers";
-        const source = allowedImageSource(claims.source, imageSources, new URL(req.url), worker);
+        const source = allowedImageSource(claims.source, imageSources, endpoint, worker, worker ? assetPrefixes : []);
         if (!source) return fail(req, 403, "Image not allowed", "forbidden_image");
+        const asset = publicAssets && source.origin === endpoint.origin && assetPrefixes.some((prefix) => source.pathname.startsWith(prefix));
+        if (Boolean(asset) !== Boolean(assetClaims)) return fail(req, 403, "Image not allowed", "forbidden_image");
         if (limiter && !await limiter(`image:${claims.visitor}`, "preauth")) return fail(req, 429, "Too many requests, try again later", "rate_limited");
         if (activeImages >= 8) return fail(req, 429, "Too many requests, try again later", "rate_limited");
         activeImages++;
         try {
-          const result = await fetchRasterImage(source.href, worker ? globalThis.fetch : publicImageFetchNode, worker ? "manual" : "error");
+          const assetFetch = (input, init) => publicAssets.binding.fetch(new Request(new URL(new URL(String(input)).pathname, "https://assets.invalid"), init));
+          const result = await fetchRasterImage(source.href, asset ? assetFetch : worker ? globalThis.fetch : publicImageFetchNode, worker ? "manual" : "error");
           return result ?? fail(req, 502, "Image unavailable", "image_unavailable");
         } finally {
           activeImages--;

package/dist/vue.d.ts

@@ -40,26 +40,6 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
         type: PropType<any>;
         default: undefined;
     };
-    imageOrigins: {
-        type: PropType<any>;
-        default: undefined;
-    };
-    pageContext: {
-        type: PropType<any>;
-        default: undefined;
-    };
-    contextSelector: {
-        type: PropType<any>;
-        default: undefined;
-    };
-    excludeSelectors: {
-        type: PropType<any>;
-        default: undefined;
-    };
-    contextProvider: {
-        type: PropType<any>;
-        default: undefined;
-    };
     launcherAvatar: {
         type: PropType<any>;
         default: undefined;
@@ -148,78 +128,78 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
         type: PropType<any>;
         default: undefined;
     };
-    domActions: {
+    headers: {
         type: PropType<any>;
         default: undefined;
     };
-    domActionsRoot: {
+    fetch: {
         type: PropType<any>;
         default: undefined;
     };
-    headers: {
+    domActions: {
         type: PropType<any>;
         default: undefined;
     };
-    fetch: {
+    domActionsRoot: {
         type: PropType<any>;
         default: undefined;
     };
-}>, () => vue.VNode<vue.RendererNode, vue.RendererElement, {
-    [key: string]: any;
-}>, {}, {}, {}, vue.ComponentOptionsMixin, vue.ComponentOptionsMixin, ("open" | "close" | "error" | "send" | "action" | "ready" | "reply" | "context-ready" | "context-error")[], "open" | "close" | "error" | "send" | "action" | "ready" | "reply" | "context-ready" | "context-error", vue.PublicProps, Readonly<vue.ExtractPropTypes<{
-    endpoint: {
+    imageOrigins: {
         type: PropType<any>;
         default: undefined;
     };
-    agent: {
+    pageContext: {
         type: PropType<any>;
         default: undefined;
     };
-    title: {
+    contextSelector: {
         type: PropType<any>;
         default: undefined;
     };
-    subtitle: {
+    excludeSelectors: {
         type: PropType<any>;
         default: undefined;
     };
-    greeting: {
+    contextProvider: {
         type: PropType<any>;
         default: undefined;
     };
-    intro: {
+}>, () => vue.VNode<vue.RendererNode, vue.RendererElement, {
+    [key: string]: any;
+}>, {}, {}, {}, vue.ComponentOptionsMixin, vue.ComponentOptionsMixin, ("open" | "ready" | "send" | "reply" | "error" | "close" | "action" | "context-ready" | "context-error")[], "open" | "ready" | "send" | "reply" | "error" | "close" | "action" | "context-ready" | "context-error", vue.PublicProps, Readonly<vue.ExtractPropTypes<{
+    endpoint: {
         type: PropType<any>;
         default: undefined;
     };
-    placeholder: {
+    agent: {
         type: PropType<any>;
         default: undefined;
     };
-    suggestions: {
+    title: {
         type: PropType<any>;
         default: undefined;
     };
-    avatar: {
+    subtitle: {
         type: PropType<any>;
         default: undefined;
     };
-    imageOrigins: {
+    greeting: {
         type: PropType<any>;
         default: undefined;
     };
-    pageContext: {
+    intro: {
         type: PropType<any>;
         default: undefined;
     };
-    contextSelector: {
+    placeholder: {
         type: PropType<any>;
         default: undefined;
     };
-    excludeSelectors: {
+    suggestions: {
         type: PropType<any>;
         default: undefined;
     };
-    contextProvider: {
+    avatar: {
         type: PropType<any>;
         default: undefined;
     };
@@ -311,6 +291,14 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
         type: PropType<any>;
         default: undefined;
     };
+    headers: {
+        type: PropType<any>;
+        default: undefined;
+    };
+    fetch: {
+        type: PropType<any>;
+        default: undefined;
+    };
     domActions: {
         type: PropType<any>;
         default: undefined;
@@ -319,20 +307,32 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
         type: PropType<any>;
         default: undefined;
     };
-    headers: {
+    imageOrigins: {
         type: PropType<any>;
         default: undefined;
     };
-    fetch: {
+    pageContext: {
+        type: PropType<any>;
+        default: undefined;
+    };
+    contextSelector: {
+        type: PropType<any>;
+        default: undefined;
+    };
+    excludeSelectors: {
+        type: PropType<any>;
+        default: undefined;
+    };
+    contextProvider: {
         type: PropType<any>;
         default: undefined;
     };
 }>> & Readonly<{
+    onOpen?: ((...args: any[]) => any) | undefined;
     onReady?: ((...args: any[]) => any) | undefined;
     onSend?: ((...args: any[]) => any) | undefined;
     onReply?: ((...args: any[]) => any) | undefined;
     onError?: ((...args: any[]) => any) | undefined;
-    onOpen?: ((...args: any[]) => any) | undefined;
     onClose?: ((...args: any[]) => any) | undefined;
     onAction?: ((...args: any[]) => any) | undefined;
     "onContext-ready"?: ((...args: any[]) => any) | undefined;
@@ -347,11 +347,6 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
     placeholder: any;
     suggestions: any;
     avatar: any;
-    imageOrigins: any;
-    pageContext: any;
-    contextSelector: any;
-    excludeSelectors: any;
-    contextProvider: any;
     launcherAvatar: any;
     position: any;
     mode: any;
@@ -374,10 +369,15 @@ declare const DeweeChat: vue.DefineComponent<vue.ExtractPropTypes<{
     getPageContext: any;
     maxActionRounds: any;
     actionTimeoutMs: any;
-    domActions: any;
-    domActionsRoot: any;
     headers: any;
     fetch: any;
+    domActions: any;
+    domActionsRoot: any;
+    imageOrigins: any;
+    pageContext: any;
+    contextSelector: any;
+    excludeSelectors: any;
+    contextProvider: any;
 }, {}, {}, {}, string, vue.ComponentProvideOptions, true, {}, any>;
 
 export { DeweeChat, DeweeChat as default };

package/dist/vue.js

@@ -1,7 +1,7 @@
 import {
   defineDeweeChat
-} from "./chunk-M6J3IXEI.js";
-import "./chunk-WHHQ6FKK.js";
+} from "./chunk-XCO4TCKF.js";
+import "./chunk-KXW4EWXA.js";
 
 // src/vue.ts
 import { defineComponent, h, onMounted, ref, watch } from "vue";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dewee-webchat",
-  "version": "0.5.0-beta.1",
+  "version": "0.5.0-beta.2",
   "description": "Embeddable chat widget for Dewee AI agents — web component, React/Vue/Astro wrappers and a secure backend handler (Workers, Next.js, Node, Bun, Deno).",
   "license": "MIT",
   "type": "module",