@ai-matrx/chat 0.5.16 → 0.5.18

package/CHANGELOG.md

@@ -1,9 +1,15 @@
 # @ai-matrx/chat
 
-## 0.5.16
+## 0.5.18
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see
-`git diff npm/chat/v0.5.15..npm/chat/v0.5.16 -- apps/shared/chat`).
+`git diff npm/chat/v0.5.17..npm/chat/v0.5.18 -- apps/shared/chat`).
+No source changes intended and no consumer action required.
+
+## 0.5.17
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/chat/v0.5.16..npm/chat/v0.5.17 -- apps/shared/chat`).
 No source changes intended and no consumer action required.
 
 ## 0.5.10 — message Print is the one message print

package/dist/agents/redux/execution-system/thunks/execute-instance.thunk.js

@@ -348,7 +348,7 @@ const executeInstance = createAsyncThunk(
         );
         return rejectWithValue("Nothing to send \u2014 the message is empty");
       }
-      if (payload.organization_id && instance.organizationId !== payload.organization_id) {
+      if (payload.organization_id && instance.replySeat !== "admin" && instance.organizationId !== payload.organization_id) {
         dispatch(
           patchConversation({
             conversationId,

package/dist/agents/redux/execution-system/thunks/load-conversation.thunk.js

@@ -72,6 +72,8 @@ import {
 } from "./conversation-bundle.js";
 import { getClaimsUser } from "../../../../host/db.js";
 import { canActOn } from "../../../../ui/canActOn.js";
+import { adminLaneOrganizationId } from "../../../../host/server/admin-lane.js";
+import { selectIsAdmin } from "../../../../host/identity.js";
 import { ensureAgentCatalog } from "../../../identity/agent-identity.js";
 const NOT_READABLE_DETAIL = "it may have been removed, or your sign-in lost access to it";
 const loadConversation = createAsyncThunk(
@@ -190,11 +192,20 @@ const loadConversation = createAsyncThunk(
         }
       }
     }
-    const viewerCanReply = authedUserId && conv.created_by !== authedUserId ? await canActOn("conversation", conversationId, "editor") : void 0;
+    let replySeat;
+    let viewerCanReply;
+    if (authedUserId && conv.created_by !== authedUserId) {
+      viewerCanReply = await canActOn("conversation", conversationId, "editor");
+      if (!viewerCanReply && adminLaneOrganizationId() !== null && selectIsAdmin(getState())) {
+        viewerCanReply = true;
+        replySeat = "admin";
+      }
+    }
     dispatch(
       hydrateConversation({
         conversationId,
-        ...viewerCanReply !== void 0 ? { viewerCanReply } : {},
+        // replySeat is written (cleared too) whenever the viewer was asked about.
+        ...viewerCanReply !== void 0 ? { viewerCanReply, replySeat } : {},
         agentId: conv.initial_agent_id ?? "",
         agentType: "user",
         origin: "manual",

package/dist/agents/redux/execution-system/thunks/resolve-base-url.js

@@ -1,4 +1,5 @@
 import { adminLaneHeadersFor, adminLaneOrganizationId } from "../../../../host/server/admin-lane.js";
+import { adminSeatReplyOrganizationId } from "../utils/required-organization.js";
 import {
   selectResolvedBaseUrl,
   selectActiveServer
@@ -95,7 +96,7 @@ function resolveBackendUnchecked(state, conversationId) {
     headers["X-Fingerprint-ID"] = fingerprintId;
   }
   const conversationOrganizationId = state.conversations?.byConversationId?.[conversationId]?.organizationId ?? null;
-  const organizationId = conversationOrganizationId ?? adminLaneOrganizationId() ?? selectOrganizationId(state);
+  const organizationId = adminSeatReplyOrganizationId(state, conversationId) ?? conversationOrganizationId ?? adminLaneOrganizationId() ?? selectOrganizationId(state);
   if (organizationId) {
     headers["X-Organization-Id"] = organizationId;
     Object.assign(headers, adminLaneHeadersFor(organizationId));

package/dist/agents/redux/execution-system/thunks/smart-execute.thunk.js

@@ -66,7 +66,11 @@ import { markResourcesSubmitted } from "../instance-resources/instance-resources
 import { flushRemarkWrites, hasPendingRemarkWrites } from "../instance-resources/remarks.js";
 import { withFreshRemarkRefs } from "../instance-resources/remarks-wire.js";
 import { isOrganizationSelectionCancelled } from "../../../../host/org.js";
-import { runBeforeSend } from "../../../../host/conversation-hooks.js";
+import {
+  runBeforeSend,
+  startHostConversation,
+  startsConversationOnFirstSend
+} from "../../../../host/conversation-hooks.js";
 function hasConversationAtExecutionBoundary(state, conversationId) {
   return state.conversations.byConversationId[conversationId] !== void 0;
 }
@@ -154,6 +158,35 @@ function holdBehindInFlightSend(dispatch, getState, args) {
 const smartExecute = createAsyncThunk(
   "instances/smartExecute",
   async ({ conversationId, surfaceKey, whileRunning = "queue", submission: handed }, { getState, dispatch }) => {
+    if (!handed && startsConversationOnFirstSend(conversationId)) {
+      const draft = captureSubmission(getState(), conversationId);
+      if (isEmptySubmission(draft)) return;
+      if (draft.resources.length > 0) {
+        toast.info("Attachments can't be added yet", {
+          description: "Send your first message as text \u2014 attachments work from the next one."
+        });
+        return;
+      }
+      detachFromComposer(dispatch, getState, conversationId, draft);
+      let realId = null;
+      try {
+        realId = await startHostConversation(conversationId, { text: draft.text });
+      } catch (error) {
+        returnToComposer(dispatch, getState, conversationId, draft);
+        toast.error("Message not sent", {
+          description: error instanceof Error ? error.message : String(error)
+        });
+        return;
+      }
+      if (!realId) {
+        returnToComposer(dispatch, getState, conversationId, draft);
+        toast.error("Message not sent", { description: "The conversation could not be started." });
+        return;
+      }
+      dispatch(setUserInputText({ conversationId: realId, text: draft.text, userValues: draft.userValues }));
+      await dispatch(smartExecute({ conversationId: realId, surfaceKey, whileRunning }));
+      return;
+    }
     if (!handed && !hasConversationAtExecutionBoundary(getState(), conversationId)) {
       await awaitLaunchingConversation(getState, conversationId);
     }

package/dist/agents/redux/execution-system/utils/required-organization.d.ts

@@ -11,6 +11,16 @@ import type { ChatRootState } from "../../../../store/root-state.js";
  * still names its organization exactly as before.
  */
 export declare function isFingerprintGuestExecution(state: ChatRootState): boolean;
+/**
+ * THE ADMIN SEAT REPLY (Arman: admins keep full access inside the admin apps,
+ * and only there). When `loadConversation` let a platform admin reply ONLY
+ * because they stand on the admin seat (`replySeat: "admin"`), every request
+ * for that conversation names the platform tenant — the one organization the
+ * server's admin lane admits (re-verified in `admin.admins`, audited). Null on
+ * every user page (the seat is closed there), for every conversation the
+ * viewer reaches by ordinary access, and in a host with no database.
+ */
+export declare function adminSeatReplyOrganizationId(state: ChatRootState, conversationId: string): string | null;
 /**
  * The organization a start request names: the conversation's / selected
  * organization for every signed-in lane (refusing exactly as

package/dist/agents/redux/execution-system/utils/required-organization.js

@@ -5,6 +5,10 @@ import { selectAccessToken, selectFingerprintId } from "../../../../host/identit
 function isFingerprintGuestExecution(state) {
   return !selectAccessToken(state) && Boolean(selectFingerprintId(state));
 }
+function adminSeatReplyOrganizationId(state, conversationId) {
+  if (state.conversations?.byConversationId?.[conversationId]?.replySeat !== "admin") return null;
+  return chatHostHasDatabase() ? adminLaneOrganizationId() : null;
+}
 function executionOrganizationForRequest(state, conversationId) {
   if (isFingerprintGuestExecution(state)) return void 0;
   return requireExecutionOrganizationId(state, conversationId);
@@ -42,7 +46,7 @@ function requireExecutionOrganizationId(state, conversationId) {
       "Select an organization before sending this message. The request was not sent."
     );
   }
-  const organizationId = instance.organizationId;
+  const organizationId = adminSeatReplyOrganizationId(state, conversationId) ?? instance.organizationId;
   if (!organizationId) {
     throw new Error(
       "This conversation has no organization. Reload it before sending another message."
@@ -51,6 +55,7 @@ function requireExecutionOrganizationId(state, conversationId) {
   return organizationId;
 }
 export {
+  adminSeatReplyOrganizationId,
   ensureExecutionOrganization,
   executionOrganizationForRequest,
   isFingerprintGuestExecution,

package/dist/agents/types/instance.types.d.ts

@@ -168,6 +168,15 @@ export interface ExecutionInstance {
      * view-only bar (W-65). Read only through `selectViewerCanReply`.
      */
     viewerCanReply?: boolean;
+    /**
+     * `"admin"` when the viewer may reply ONLY because they are a platform admin
+     * on the admin seat (an /administration page — Arman's rule: admins keep full
+     * access inside the admin apps, and only there). Such a turn is sent in the
+     * platform tenant on the admin lane (`adminSeatReplyOrganizationId`), which
+     * the server admits and audits; it never moves this record's own
+     * `organizationId`. Unset everywhere else, including every user page.
+     */
+    replySeat?: "admin";
     /** Canonical DB column name for the agent that started this conversation. */
     initialAgentId?: string | null;
     /** Agent version that started this conversation (pinned for shortcuts/apps). */

package/dist/host/conversation-hooks.d.ts

@@ -15,6 +15,13 @@
  *                      it. Must not throw (a throw is reported and swallowed).
  *   startConversation  the host names the next conversation's id; the client
  *                      never mints one.
+ *   startsOnFirstSend  this conversation is a DRAFT: it has no server-side
+ *                      conversation yet (the thing it talks about does not
+ *                      exist). The first send calls `startConversation` — the
+ *                      host creates what it must and names the REAL
+ *                      conversation (instance already in the store) — and the
+ *                      words travel to that one. Text only; the draft is
+ *                      never sent to a server under its own id.
  *   everyTurnThroughMandate
  *                      every turn (not only turn 1) POSTs the mandate route,
  *                      with the gate's variables + context — for a mandate
@@ -45,7 +52,11 @@ export interface ConversationHostHooks {
     beforeSend?: (input: HostBeforeSendInput) => Promise<HostTurnExtras | HostSendRefused>;
     held?: HostHeld;
     onEvent?: (event: TypedStreamEvent, ctx: HostStreamTapContext) => void;
-    startConversation?: () => Promise<string>;
+    startConversation?: (input?: {
+        text: string;
+    }) => Promise<string>;
+    /** With `startConversation`: this id is a draft; the first send goes through `startConversation`. */
+    startsOnFirstSend?: boolean;
     everyTurnThroughMandate?: boolean;
     /** How a stored user turn reads on screen (display only; the record is unchanged). */
     displayUserText?: (text: string) => string;
@@ -81,8 +92,12 @@ export declare function takeTurnExtras(conversationId: string): HostTurnExtras |
 export declare function tapStreamEvent(conversationId: string, requestId: string, event: unknown): void;
 /** Should this conversation's later turns also POST the mandate route? */
 export declare function continuesThroughMandate(conversationId: string): boolean;
+/** Is this id a draft whose first send must first create the real conversation? */
+export declare function startsConversationOnFirstSend(conversationId: string): boolean;
 /** Ask the conversation's host for the next conversation id; null when it has no say. */
-export declare function startHostConversation(conversationId: string): Promise<string | null>;
+export declare function startHostConversation(conversationId: string, input?: {
+    text: string;
+}): Promise<string | null>;
 /**
  * Subscribe to changes of this conversation's held sentence: the host's own
  * source, and the registry (a registration swaps which source is listened to).

package/dist/host/conversation-hooks.js

@@ -58,9 +58,13 @@ function tapStreamEvent(conversationId, requestId, event) {
 function continuesThroughMandate(conversationId) {
   return hooksByConversation.get(conversationId)?.everyTurnThroughMandate === true;
 }
-async function startHostConversation(conversationId) {
+function startsConversationOnFirstSend(conversationId) {
+  const hooks = hooksByConversation.get(conversationId);
+  return hooks?.startsOnFirstSend === true && typeof hooks.startConversation === "function";
+}
+async function startHostConversation(conversationId, input) {
   const start = hooksByConversation.get(conversationId)?.startConversation;
-  return start ? start() : null;
+  return start ? start(input) : null;
 }
 function subscribeConversationHeld(conversationId, listener) {
   let current;
@@ -93,6 +97,7 @@ export {
   registerConversationHooks,
   runBeforeSend,
   startHostConversation,
+  startsConversationOnFirstSend,
   subscribeConversationHeld,
   subscribeConversationHooks,
   takeTurnExtras,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/chat",
-  "version": "0.5.16",
+  "version": "0.5.18",
   "description": "THE one AI Matrx person-to-agent chat system: the full chat (running agents, conversations, tool calls, streaming, context, surfaces, voice) as per-module subpaths @ai-matrx/chat/<domain>/<module> over a host contract (/host, /host/react) whose only required value is a db. One chat, one renderer: the old kernel entries (., /external-store, /matrx, /react, /tools, styles.css, tokens.css) are retired.",
   "type": "module",
   "license": "MIT",
@@ -167,6 +167,7 @@
     "uuid": "^14.0.2",
     "zod": "^4.6.5",
     "@ai-matrx/agents": "latest",
+    "@ai-matrx/alchemy": "latest",
     "@ai-matrx/associations": "latest",
     "@ai-matrx/browser-audio": "latest",
     "@ai-matrx/canvas": "latest",
@@ -174,6 +175,7 @@
     "@ai-matrx/content-ir-react": "latest",
     "@ai-matrx/data": "latest",
     "@ai-matrx/design-system": "latest",
+    "@ai-matrx/diff": "latest",
     "@ai-matrx/icons": "latest",
     "@ai-matrx/kit": "latest",
     "@ai-matrx/media": "latest",
@@ -182,9 +184,7 @@
     "@ai-matrx/records": "latest",
     "@ai-matrx/records-ui": "latest",
     "@ai-matrx/rich-content": "latest",
-    "@ai-matrx/rich-editor": "latest",
-    "@ai-matrx/alchemy": "latest",
-    "@ai-matrx/diff": "latest"
+    "@ai-matrx/rich-editor": "latest"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
@@ -299,5 +299,6 @@
     "deps:write": "node ./scripts/finish-build.mjs --write-deps",
     "check:side-panel-bundle": "node ./scripts/check-side-panel-bundle.mjs",
     "check:side-effects": "node ../scripts/check-side-effects-listed.mjs . && node ../scripts/check-side-effects-listed.mjs --self-test"
-  }
+  },
+  "gitHead": "ded4f1f1eb83b1d00da17c7fc7482f9647010157"
 }