@ai-matrx/chat 0.5.17 → 0.5.18

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @ai-matrx/chat
 
+## 0.5.18
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/chat/v0.5.17..npm/chat/v0.5.18 -- apps/shared/chat`).
+No source changes intended and no consumer action required.
+
 ## 0.5.17
 
 Automatic changed-only republish (docs/metadata drift since the last tag — see

package/dist/agents/redux/execution-system/thunks/execute-instance.thunk.js

@@ -348,7 +348,7 @@ const executeInstance = createAsyncThunk(
         );
         return rejectWithValue("Nothing to send \u2014 the message is empty");
       }
-      if (payload.organization_id && instance.organizationId !== payload.organization_id) {
+      if (payload.organization_id && instance.replySeat !== "admin" && instance.organizationId !== payload.organization_id) {
         dispatch(
           patchConversation({
             conversationId,

package/dist/agents/redux/execution-system/thunks/load-conversation.thunk.js

@@ -72,6 +72,8 @@ import {
 } from "./conversation-bundle.js";
 import { getClaimsUser } from "../../../../host/db.js";
 import { canActOn } from "../../../../ui/canActOn.js";
+import { adminLaneOrganizationId } from "../../../../host/server/admin-lane.js";
+import { selectIsAdmin } from "../../../../host/identity.js";
 import { ensureAgentCatalog } from "../../../identity/agent-identity.js";
 const NOT_READABLE_DETAIL = "it may have been removed, or your sign-in lost access to it";
 const loadConversation = createAsyncThunk(
@@ -190,11 +192,20 @@ const loadConversation = createAsyncThunk(
         }
       }
     }
-    const viewerCanReply = authedUserId && conv.created_by !== authedUserId ? await canActOn("conversation", conversationId, "editor") : void 0;
+    let replySeat;
+    let viewerCanReply;
+    if (authedUserId && conv.created_by !== authedUserId) {
+      viewerCanReply = await canActOn("conversation", conversationId, "editor");
+      if (!viewerCanReply && adminLaneOrganizationId() !== null && selectIsAdmin(getState())) {
+        viewerCanReply = true;
+        replySeat = "admin";
+      }
+    }
     dispatch(
       hydrateConversation({
         conversationId,
-        ...viewerCanReply !== void 0 ? { viewerCanReply } : {},
+        // replySeat is written (cleared too) whenever the viewer was asked about.
+        ...viewerCanReply !== void 0 ? { viewerCanReply, replySeat } : {},
         agentId: conv.initial_agent_id ?? "",
         agentType: "user",
         origin: "manual",

package/dist/agents/redux/execution-system/thunks/resolve-base-url.js

@@ -1,4 +1,5 @@
 import { adminLaneHeadersFor, adminLaneOrganizationId } from "../../../../host/server/admin-lane.js";
+import { adminSeatReplyOrganizationId } from "../utils/required-organization.js";
 import {
   selectResolvedBaseUrl,
   selectActiveServer
@@ -95,7 +96,7 @@ function resolveBackendUnchecked(state, conversationId) {
     headers["X-Fingerprint-ID"] = fingerprintId;
   }
   const conversationOrganizationId = state.conversations?.byConversationId?.[conversationId]?.organizationId ?? null;
-  const organizationId = conversationOrganizationId ?? adminLaneOrganizationId() ?? selectOrganizationId(state);
+  const organizationId = adminSeatReplyOrganizationId(state, conversationId) ?? conversationOrganizationId ?? adminLaneOrganizationId() ?? selectOrganizationId(state);
   if (organizationId) {
     headers["X-Organization-Id"] = organizationId;
     Object.assign(headers, adminLaneHeadersFor(organizationId));

package/dist/agents/redux/execution-system/utils/required-organization.d.ts

@@ -11,6 +11,16 @@ import type { ChatRootState } from "../../../../store/root-state.js";
  * still names its organization exactly as before.
  */
 export declare function isFingerprintGuestExecution(state: ChatRootState): boolean;
+/**
+ * THE ADMIN SEAT REPLY (Arman: admins keep full access inside the admin apps,
+ * and only there). When `loadConversation` let a platform admin reply ONLY
+ * because they stand on the admin seat (`replySeat: "admin"`), every request
+ * for that conversation names the platform tenant — the one organization the
+ * server's admin lane admits (re-verified in `admin.admins`, audited). Null on
+ * every user page (the seat is closed there), for every conversation the
+ * viewer reaches by ordinary access, and in a host with no database.
+ */
+export declare function adminSeatReplyOrganizationId(state: ChatRootState, conversationId: string): string | null;
 /**
  * The organization a start request names: the conversation's / selected
  * organization for every signed-in lane (refusing exactly as

package/dist/agents/redux/execution-system/utils/required-organization.js

@@ -5,6 +5,10 @@ import { selectAccessToken, selectFingerprintId } from "../../../../host/identit
 function isFingerprintGuestExecution(state) {
   return !selectAccessToken(state) && Boolean(selectFingerprintId(state));
 }
+function adminSeatReplyOrganizationId(state, conversationId) {
+  if (state.conversations?.byConversationId?.[conversationId]?.replySeat !== "admin") return null;
+  return chatHostHasDatabase() ? adminLaneOrganizationId() : null;
+}
 function executionOrganizationForRequest(state, conversationId) {
   if (isFingerprintGuestExecution(state)) return void 0;
   return requireExecutionOrganizationId(state, conversationId);
@@ -42,7 +46,7 @@ function requireExecutionOrganizationId(state, conversationId) {
       "Select an organization before sending this message. The request was not sent."
     );
   }
-  const organizationId = instance.organizationId;
+  const organizationId = adminSeatReplyOrganizationId(state, conversationId) ?? instance.organizationId;
   if (!organizationId) {
     throw new Error(
       "This conversation has no organization. Reload it before sending another message."
@@ -51,6 +55,7 @@ function requireExecutionOrganizationId(state, conversationId) {
   return organizationId;
 }
 export {
+  adminSeatReplyOrganizationId,
   ensureExecutionOrganization,
   executionOrganizationForRequest,
   isFingerprintGuestExecution,

package/dist/agents/types/instance.types.d.ts

@@ -168,6 +168,15 @@ export interface ExecutionInstance {
      * view-only bar (W-65). Read only through `selectViewerCanReply`.
      */
     viewerCanReply?: boolean;
+    /**
+     * `"admin"` when the viewer may reply ONLY because they are a platform admin
+     * on the admin seat (an /administration page — Arman's rule: admins keep full
+     * access inside the admin apps, and only there). Such a turn is sent in the
+     * platform tenant on the admin lane (`adminSeatReplyOrganizationId`), which
+     * the server admits and audits; it never moves this record's own
+     * `organizationId`. Unset everywhere else, including every user page.
+     */
+    replySeat?: "admin";
     /** Canonical DB column name for the agent that started this conversation. */
     initialAgentId?: string | null;
     /** Agent version that started this conversation (pinned for shortcuts/apps). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/chat",
-  "version": "0.5.17",
+  "version": "0.5.18",
   "description": "THE one AI Matrx person-to-agent chat system: the full chat (running agents, conversations, tool calls, streaming, context, surfaces, voice) as per-module subpaths @ai-matrx/chat/<domain>/<module> over a host contract (/host, /host/react) whose only required value is a db. One chat, one renderer: the old kernel entries (., /external-store, /matrx, /react, /tools, styles.css, tokens.css) are retired.",
   "type": "module",
   "license": "MIT",
@@ -172,19 +172,19 @@
     "@ai-matrx/browser-audio": "latest",
     "@ai-matrx/canvas": "latest",
     "@ai-matrx/content-ir": "latest",
-    "@ai-matrx/data": "latest",
     "@ai-matrx/content-ir-react": "latest",
-    "@ai-matrx/diff": "latest",
+    "@ai-matrx/data": "latest",
     "@ai-matrx/design-system": "latest",
+    "@ai-matrx/diff": "latest",
+    "@ai-matrx/icons": "latest",
     "@ai-matrx/kit": "latest",
+    "@ai-matrx/media": "latest",
+    "@ai-matrx/print": "latest",
     "@ai-matrx/realtime": "latest",
     "@ai-matrx/records": "latest",
-    "@ai-matrx/rich-content": "latest",
     "@ai-matrx/records-ui": "latest",
-    "@ai-matrx/rich-editor": "latest",
-    "@ai-matrx/print": "latest",
-    "@ai-matrx/icons": "latest",
-    "@ai-matrx/media": "latest"
+    "@ai-matrx/rich-content": "latest",
+    "@ai-matrx/rich-editor": "latest"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
@@ -300,5 +300,5 @@
     "check:side-panel-bundle": "node ./scripts/check-side-panel-bundle.mjs",
     "check:side-effects": "node ../scripts/check-side-effects-listed.mjs . && node ../scripts/check-side-effects-listed.mjs --self-test"
   },
-  "gitHead": "72c166ca9e3b90dc0f6648754257142aba4756b6"
+  "gitHead": "ded4f1f1eb83b1d00da17c7fc7482f9647010157"
 }