@aiquants/daily-report 0.48.0 → 0.49.0

package/CHANGELOG.md

@@ -2,6 +2,42 @@
 
 All notable changes to `@aiquants/daily-report` are documented here.
 
+## 0.49.0 (2026-10-21)
+
+### Breaking
+
+- **`DailyReportPage` の `sessionEpoch` は必須**: ホストが失効の後に同じ利用者で確かめたセッションの数 (0 以上の安全な整数)。欠けると描画時に
+  `TypeError`、ほかの値は `RangeError`。失効で読み直すホストは定数 (`0` など) を渡せば、これまでと同じに動く。
+- **`DailyReportErrorInfo` は `reason: "failed" | "refused"` を持ち、`operation` は `"liveUpdates"` も取る**: 403 (権限の断り) とライブ更新の
+  `forbidden` の終わりは `refused`、ほかは `failed`。`operation` を網羅して分けるホストは `"liveUpdates"` を足す。
+- **検索・絞り込み・印のフックと置き場の options から `onSessionExpired` を外した**: `useDailyReportSearch`・`useDailyReportSearchFacets`・
+  `useShownSearchMarksStore`・`createDailyReportSearchSession`・`createDailyReportSearchMarksStore` は、セッションの終わりを API の基点の
+  セッションの門へ知らせる (下)。公開の `useDailyReportSseConnection` は `onSessionEnded` と `onRefused` を必須で受ける。
+- **`DailyReportSearchFailure` に `refused` を足した** (403)。
+
+### Added
+
+- **セッションの終わりで読み直さずに止め、ホストが確かめたら続ける (WCAG 2.2.5 Re-authenticating)**: どの読み取り (ids の流れ・詳細・検索・
+  絞り込み・印) か書き込みが 401 で答えるか、SSE が `auth-required` で終わると、パッケージは API の基点ごとのセッションの門で通信を止め、
+  `config.onSessionExpired` を止めるたびに 1 回だけ呼ぶ (これまでは場所ごとに、1 回の失効で何度も呼びえた)。読み取りは中断し、SSE は閉じ、
+  ids の流れ・詳細・検索は新しい要求を出さず、書き込みは送らない (何も送らずに拒み、コメントの欄は下書きを残す)。下書き・開いた編集の形・
+  選択・検索・スクロールはメモリに残る。`sessionEpoch` が止めた時の値と違えば続ける: ids の流れは続きを読み (完走したことのある一覧は
+  読み直す)、SSE はカーソルから開き直し、待たせた詳細と絞り込みの候補を読み、検索と印を頼み直す。書き込みは送り直さない。続ける前に送った
+  要求の 401 は、その後のセッションを止めない。一度完走した一覧は、止めても本体を外さない (選択・検索・スクロールが残る)。
+- **ラベル `operationRefused` (関数) と `liveUpdatesRefused`**: 断られた書き込みと、断られたライブ更新の知らせの文言。固有のキーは 116
+  (文字列 92 → 93・関数 22 → 23) になる。ログのチャンネル `SessionGate` (クライアントのチャンネルは 5 つ)。
+
+### Fixed
+
+- **書き込みの 401 がセッションの終わりを知らせなかった**: 8 つの書き込みは 401 で汎用の「操作に失敗」を出すだけだった。いまは門を止めて
+  `onSessionExpired` を 1 回呼び、パッケージの誤りの知らせは出さない (ホストの知らせが伝える)。
+- **403 を失効として扱っていた**: ids の流れ・検索・絞り込み・印は 403 で `onSessionExpired` を呼び、詳細の置き場は 403 を失効の断りとして
+  扱っていた。403 は権限の断りで、サインインし直しても変わらない: 書き込みは `labels.operationRefused` の知らせ (`reason: "refused"`)、
+  検索と絞り込みは `refused`、詳細は断りを記録の誤りとして分け合い、印は付けず、ids の流れはやり直さずに `failed` で止まる。どれもホストの
+  再認証を求めない。
+- **SSE の `forbidden` が記録だけだった**: ライブ更新が止まったことを読み手が知れるよう、断りとして知らせの口へ出す
+  (`operation: "liveUpdates"`, `reason: "refused"`, `labels.liveUpdatesRefused`)。
+
 ## 0.48.0 (2026-10-21)
 
 ### Added

package/README.md

@@ -660,11 +660,12 @@ its payload — with one strict parser each, after authentication and before any
   | `[DailyReportSseReader]` | `info` | the shared SSE reader's Redis errors |
   | `[DailyReportExternalSource]` | `info` | `transformJsonArray`'s malformed JSON columns of an external source |
 
-  The client has no host logger port: its four channels of the same list write to the console from `info` — `[DailyReportActionProvider]` (the action
+  The client has no host logger port: its five channels of the same list write to the console from `info` — `[DailyReportActionProvider]` (the action
   provider: a failed action, the queue of SSE messages about uncached reports, a cache reload), `[DailyReportDetailLoader]` (the detail loading: a
   stale update of a report's cache, a failed prefetch of a business date, a failed refetch that left the shown report in place),
   `[DailyReportIdsStream]` (the ids stream client: a revalidation that gave up, a rejected malformed line, which ends the attempt, a skipped line of
-  an unknown kind, a malformed stream anchor) and `[DailyReportSseConnection]` (the SSE connection hook).
+  an unknown kind, a malformed stream anchor), `[DailyReportSseConnection]` (the SSE connection hook) and `[DailyReportSessionGate]` (the session
+  gate: a pause because the viewer's session ended, and the resume).
   Every line, the server's and the client's, carries exactly one channel prefix: no message spells a `[DailyReport…]` prefix of its own.
 
   A 500 is one line: its message (`500 endpoint=<name> elapsed=<ms>ms name=<error name> code=<code or N/A> message=<message>`,
@@ -1741,8 +1742,8 @@ unexpected error, a request that is not the package's client (another origin's p
 
 | Server-side situation | Response | Client (`useDailyReportSseConnection`) |
 | --- | --- | --- |
-| Not authenticated | 200, `retry: 86400000` → `event: auth-required` (`Set-Cookie` forwarded) | terminated; calls `config.onSessionExpired()` once; never reconnects |
-| Authenticated but no internal user | 200, `retry: 86400000` → `event: forbidden` | terminated; no navigation (a reload cannot fix it); visible through `sseStatus` |
+| Not authenticated | 200, `retry: 86400000` → `event: auth-required` (`Set-Cookie` forwarded) | terminated; pauses the package (`config.onSessionExpired()` once) and reconnects from its cursor when `sessionEpoch` changes |
+| Authenticated but no internal user | 200, `retry: 86400000` → `event: forbidden` | terminated; no navigation (a reload cannot fix it); reported as a refusal through the error surface (`operation: "liveUpdates"`, `reason: "refused"`, `labels.liveUpdatesRefused`) and visible through `sseStatus` |
 | A request from another origin's page that the isolation refuses ([Request isolation](#request-isolation)) | 403 JSON before authentication (`Cache-Control: no-store`, the routes' security headers, no `Set-Cookie`), counted in the bounded refusal record | never met: the package's client connects from the page's own origin |
 | A React Router single-fetch data request (`<path>.data`, `GET` or `HEAD`) | 404 JSON before authentication (`{"error":{"message":"Not Found"}}`, `Cache-Control: no-store`, the routes' security headers, no `Set-Cookie`), with no subscription or timer and no line in the refusal record ([Request isolation](#request-isolation)) | never sent by the client: `EventSource` requests the route itself |
 | Unknown endpoint | 404 | treated as retryable; backoff up to 30 s |
@@ -2301,8 +2302,8 @@ The remainder does not go between a caption and its control: at q = 8 that gap w
   Each request is sent `cache: "no-cache"`: the browser revalidates its previous answer with the ETag (`If-None-Match`) and, on a 304, hands over its
   cached 200, so an unchanged answer's body is not sent again.
   A failed first load shows only the status line and is retried at the next opening; a failed reload keeps the previous candidates and shows the
-  failure in the status line. 401 and 403 call `onSessionExpired`; 404 shows `unavailable`, 429 `busy`, and anything else, a malformed answer
-  included, `failed`.
+  failure in the status line. A 401 pauses the package at the session's end (see [Client wiring](#client-wiring)) and loads the candidates again
+  when it resumes; a 403 shows `refused`, 404 `unavailable`, 429 `busy`, and anything else, a malformed answer included, `failed`.
   The cells render once the candidates are loaded. The author and customer options are sorted with `Intl.Collator(config.locale)` (values the
   collation ties are ordered by UTF-16 code units) and labelled with their value; the source-type options keep the server's order and are labelled
   with their badge label from `sourceTypeConfigs` (the source type itself without one).
@@ -2426,13 +2427,13 @@ While an answer shows, the List cards, the side pane and the DetailList rows mar
   A field is painted only when its marks were computed on the value drawn (the fingerprint): after a save or an SSE update the old ranges are not
   painted and the field asks once for fresh marks. An answer whose `wordsDigest` differs from the shown answer's words is dropped; a quiet re-query of
   the same search makes the marks stale and the mounted rows ask again;
-  401 and 403 call `onSessionExpired`; a 429 whose `Retry-After` is at most 60 s (one window of the server's rate bucket) is asked again once, after
+  a 401 pauses the package at the session's end (the marks are asked again when it resumes) and a 403 leaves the rows plain; a 429 whose `Retry-After` is at most 60 s (one window of the server's rate bucket) is asked again once, after
   that delay, for the reports still subscribed then (one whose subscribers left meanwhile asks again when it is subscribed again), and a 429 without a
   `Retry-After`, or with a longer one, sets no timer and leaves its reports plain for the answer's epoch (a delay of 2^31 ms or more would overflow
   the timer and ask again at once);
   any other failure of the request — a network failure, an abort, another status, a body that is not JSON — leaves those rows plain for as long as the
   shown answer stays the same and reports nothing.
-  Only the request's own failures are dropped: an error thrown by the host's `onSessionExpired`, by holding a 429's retry or by applying an answer and
+  Only the request's own failures are dropped: an error thrown by the session report (the host's `onSessionExpired`), by holding a 429's retry or by applying an answer and
   notifying the rows rejects the batch, and the scheduler reports it with `reportError` (the window's `error` event, where a host's error monitoring
   sees it) after it has freed the request's slot; a batch that rejects with its own abort's reason reports nothing.
   Disposing the store — a new search, or React hiding the screen inside an `<Activity>` — aborts its requests, cancels its retry timers and gives
@@ -2487,13 +2488,15 @@ export const clientLoader = createDailyReportClientLoader()   // Bootstraps the
 
 export default function Route() {
     const { user, userId } = useLoaderData<typeof clientLoader>()
+    const { sessionEpoch, showSignInNotice } = useYourReauthentication(user)   // Your notice, sign-in window and same-user check
     return (
         <YourAppLayout>
             <DailyReportPage
                 user={user}
                 userId={userId}
+                sessionEpoch={sessionEpoch}                 // Required: advance it when the same user has signed in again (the package resumes)
                 config={{
-                    onSessionExpired: () => navigate(0),    // Required: the host decides the navigation on session expiry
+                    onSessionExpired: showSignInNotice,     // Required: called once each time the package pauses at a session end
                     renderHeader: ({ title, annotation }) => <YourHeader title={title} annotation={annotation} />,
                     showDevControls: import.meta.env.DEV,   // Toggle SSE subscriptions, etc.
                     locale: "en",                           // UI chrome language: "en" (default) | "ja"
@@ -2519,10 +2522,20 @@ one definition of a draft (`draftLabelNames` in [DI ports](#di-ports)), so `conf
 unknown key.
 An optimistic report the viewer creates is a draft with no labels until the server's answer brings its labels (the draft label among them); an
 optimistic publish clears `isDraft` at once and keeps the labels until the answer, and a failed publish restores `isDraft`.
-The package never navigates by itself: when the session is gone — the SSE stream ends with `auth-required`, or the ids stream, a `search` request,
-the filters' candidates (`search-facets`) or the marks (`search-marks`) answer 401 / 403 — it
-calls `onSessionExpired()` exactly once per occurrence and stops. A typical host reloads the route (`navigate(0)`) so its own loader redirects to the
-login page.
+The package never navigates or reloads by itself. When the viewer's session ends — the SSE stream ends with `auth-required`, or the ids stream, a
+detail read, a `search` request, the filters' candidates (`search-facets`), the marks (`search-marks`) or a write answers 401 — it **pauses** its
+network activity and calls `onSessionExpired()` once per pause: in-flight reads are aborted, the SSE connection closes, the ids stream, the detail
+reads and the search requests stop, no new request starts, and a write is not sent at all (it rejects without touching the server or the view; a
+comment field keeps its draft). Everything the page holds in memory stays: comment drafts, an open edit form, the selection, the search and the scroll.
+The package resumes when the page's required `sessionEpoch` prop (a safe integer >= 0; a missing one throws a `TypeError` at render and any other
+value a `RangeError`) differs from the value it paused at: the ids stream continues, the SSE reconnects from its cursor, held detail reads and the
+filters' candidates load again, and the search and the marks are asked again. Nothing is sent again on the viewer's behalf. A request sent before a
+resume whose 401 arrives after it does not pause the session that followed. A 403 is a refusal of the viewer, never a session end: a write answered 403
+is reported through the error surface with `reason: "refused"` and `labels.operationRefused(operation)`, the live updates ending with `forbidden`
+are reported the same way (`operation: "liveUpdates"`, `labels.liveUpdatesRefused`), a search or the filters show `refused`, a detail read keeps the
+refusal as the record's error, the marks stay plain, and the ids stream fails without retrying.
+A host that re-authenticates without a reload shows its own notice from `onSessionExpired`, lets the viewer sign in again (in another window, say), checks
+that the same user signed in, and then advances `sessionEpoch`; a host that reloads instead passes a constant and navigates from `onSessionExpired`.
 `DailyReportConfigProvider` takes the same required `config`, and every component and hook of the package that reads the configuration needs it above:
 outside it `useDailyReportConfig` throws at render (`[daily-report] useDailyReportConfig must be used within a DailyReportConfigProvider`); no default
 configuration renders silently.
@@ -2554,16 +2567,18 @@ inside its TTL is not fetched. A refetch of a shown report that fails (the re-va
 leaves the report in place with no error and only logs a warning on `[DailyReportDetailLoader]`, so the next new reader re-validates again. A settled
 load error is not shared either: a reader that subscribes to a record holding an error — a row that mounts, an id that enters the input lead's band,
 the side pane — asks again, and the answer replaces the error. Only a new subscription asks again or re-validates (a re-render or a second
-subscription of the same listener does not, so a row that keeps showing a failure or an expired report never loops), and a refusal of the viewer's
-session (401 or 403, which cannot succeed before `onSessionExpired` has run) is shared like an answer: it becomes the record's error even over a
-shown report, and no new reader asks again or re-validates.
+subscription of the same listener does not, so a row that keeps showing a failure or an expired report never loops), and a refusal of this read to
+the viewer (403, which signing in again does not change) is shared like an answer: it becomes the record's error even over a shown report, and no new
+reader asks again or re-validates. A session end (401) is not an error: the record keeps what it shows, the package pauses (see
+[Client wiring](#client-wiring)), no load starts while it is paused, and the held reports are asked again when it resumes.
 The first load of a report that is not cached starts inside its first reader's subscription, with no task between the row's mount and its request,
 so a held arrow key's stream of keydowns cannot postpone it until the key is released; only the refetch of an expired cached report waits 120 ms, to
 absorb rows that only scroll past. Loads of reports of one business date share one request.
 
 Mutation failures (save / publish / delete / comment) are surfaced through an error seam: inject `config.onError(info: DailyReportErrorInfo)` to route
 them into your own toast/notification system, or omit it to use the package's built-in notice. Failures on a continuation that resolves after a
-no-reload user switch are suppressed.
+no-reload user switch are suppressed, and so is a write answered 401 (the package pauses at the session's end and the host's notice speaks) or refused
+while the package is paused (nothing was sent). A write answered 403 is a refusal (`reason: "refused"`), which trying again does not change.
 Deleting a report or a comment that the server no longer has (404) counts as done: the row or the comment stays removed and nothing is shown. Only the
 deleting intents, `delete` and `deleteComment`, read a 404 so (their callbacks must say what a 404 means, `onGone`, and no other intent's callbacks
 may, by type: `ActionCallbacks`); the 404 of any other intent rolls back and is reported.
@@ -3333,8 +3348,9 @@ the resize handle and the side pane lie outside the list.
   The comment field is named by that heading (`aria-labelledby`; `labels.comments`), which renders whenever the form does, so the field has a name of
   its own in the DetailList row, the side pane and the mobile overlay; its placeholder (`labels.commentPlaceholder`) stays a hint, not its name.
   While a post is sent, the field keeps the draft, read-only, with the submit button disabled, and empties only when the post is accepted; a refused
-  post (401, 403, a 5xx) leaves the draft, its text and its caret untouched, so a viewer whose session ended sends it again after signing in
-  (the package's part of WCAG 2.2.5; keeping a draft across a navigation or a reload is the host's).
+  post (401, 403, a 5xx), and a post while the package is paused at a session end (never sent), leave the draft, its text and its caret untouched, so a
+  viewer whose session ended sends it again after signing in again, on the same page (WCAG 2.2.5, with the host's re-authentication; see
+  [Client wiring](#client-wiring)).
   A report of a source that takes no comments and has none shows no empty section, and deleting the last comment of such a report removes the section,
   so focus goes to the report's anchor above.
 - **Mobile detail overlay** (List, single-column layout): the platform's modal dialog, a `<dialog data-daily-report-mobile-overlay>` (implicit
@@ -3859,8 +3875,10 @@ luminance by 0.026 in the light theme, and a `shadow-md` brings the ring down to
   the scroll anchoring keeps the rows on screen in place. Not met at AA: 2.5.8 for the List's resize handle and the scroll bar beside it (**Side pane** above): larger hit areas for the handle and the
   bar wait for the same layout pass as 2.5.5. Not claimed yet: 2.5.5 (44 px targets), 1.4.8 (a line measure and the List preview's
   leading) and 3.3.5 (a help control for the search syntax), which need a layout pass, and 3.1.6 (readings of names), which needs readings from the
-  host's directory. 2.2.5 is met by the package for a refused comment post (**One comment section rule** above); keeping work across a
-  re-authentication elsewhere is the host's, as is 2.2.6 (telling users how long a session lasts). The floating tap-scroll circle hides while the view root carries `data-daily-report-keyboard-focus` (through the class both views pass in
+  host's directory. 2.2.5 (Re-authenticating) is met with the host: at a session end the package pauses without reloading and keeps every draft, the
+  open edit form, the selection, the search and the scroll in memory; the host lets the viewer sign in again without leaving the page and advances
+  `sessionEpoch`, and the package resumes and sends nothing again by itself ([Client wiring](#client-wiring)). 2.2.6 (Timeouts) is the host's: the
+  package keeps unsent work only in the open tab's memory until it is closed, and the host states how long a session lasts and what ends it. The floating tap-scroll circle hides while the view root carries `data-daily-report-keyboard-focus` (through the class both views pass in
   `VirtualScroll`'s tap-scroll circle options).
 - **Action buttons and icons**: the List card's star and read toggles, the star, read, edit and delete buttons of the DetailList header and the side
   pane, and the trash button of the viewer's comments share one 24 px round target that never shrinks, with a 16 px SVG icon centred in it (4 px on
@@ -4212,7 +4230,7 @@ locale**: English (`"en"`, the default) and Japanese (`"ja"`). Pick the language
 />
 ```
 
-- **One surface for all wording.** The catalog covers the engine chrome keys of `@aiquants/virtualscroll` (every label key it exports) plus 114 own keys: field headings, the
+- **One surface for all wording.** The catalog covers the engine chrome keys of `@aiquants/virtualscroll` (every label key it exports) plus 116 own keys: field headings, the
   page title (`title`, passed to `renderHeader` and used as the accessible name of both lists), the lists' keyboard help, the row states (read, read and updated since, and
   starred, editing), the updated-since-read pill and the List card's position read to screen readers, tabs, buttons, placeholders, the `confirm()` text, stream badges, the search box, its filter row and the
   search's match indicator, the status screen and the page's status region and the mutation-failure message with its repeat count. The engine part of
@@ -4271,13 +4289,16 @@ locale**: English (`"en"`, the default) and Japanese (`"ja"`). Pick the language
 - **Not tied to `locale`**: `sourceTypeConfigs` (host data). Only the built-in default badge map used when `sourceTypeConfigs`
   is omitted takes its `Internal` label from `labels.sourceInternal`.
 - **Host notifications**: `config.onError` receives `DailyReportErrorInfo` with the stable
-  `operation` key and `message` = `labels.operationFailed(operation)` in the chosen locale.
+  `operation` key (an operation, or `"liveUpdates"` when the server refused the viewer the live updates), the `reason` (`"refused"` for a 403 or the
+  live updates' `forbidden` end, `"failed"` otherwise) and `message` = `labels.operationRefused(operation)`, `labels.liveUpdatesRefused` or
+  `labels.operationFailed(operation)` in the chosen locale. A session end (401) is never reported here: the package pauses and calls
+  `onSessionExpired` instead.
 - **`locale` is the only language axis.** This package has no BCP 47 `formatLocale` option: digit
   grouping follows `locale` (`en` → `"en-US"`, `ja` → `"ja-JP"`) and dates stay in ISO form. Packages
   that do format dates (for example `@aiquants/period-slider`) name that separate axis `formatLocale`.
 
 Exported API (`@aiquants/daily-report/client`): `DAILY_REPORT_LABEL_KEYS` (every key: the engine keys `@aiquants/virtualscroll` exports, in its order,
-first, then the 114 own keys), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReportLabels(locale, labels)`
+first, then the 116 own keys), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReportLabels(locale, labels)`
 (the effective frozen labels — the catalog object itself when `labels` is `undefined`), the resolved
 `locale` / `labels` on `useDailyReportConfig()`, and the types `DailyReportLocale` (= `VirtualScrollLocale`),
 `DailyReportLabels`, `DailyReportLabelOverrides` and `DailyReportOperation`.

package/dist/client.d.mts

@@ -37,7 +37,7 @@ type DailyReportDetailListProps = {
     scrollRestoreRef?: RefObject<DailyReportDetailListScrollRestore>;
 };
 declare const DailyReportDetailList: (props: DailyReportDetailListProps) => react.JSX.Element;
-type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed";
+type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed" | "refused";
 type DailyReportLocale = VirtualScrollLocale;
 type DailyReportOperation = Exclude<DailyReportActionIntent, "clearCache">;
 type DailyReportLabels = VirtualScrollLabels & {
@@ -84,6 +84,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reload: string;
     readonly loadingIds: string;
     readonly streamFailed: string;
+    readonly liveUpdatesRefused: string;
     readonly streamRetry: string;
     readonly streamRevalidating: string;
     readonly selectPrompt: string;
@@ -142,6 +143,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reportSummaryLoadFailed: (reportHubId: number) => string;
     readonly interviewerWithAffiliation: (name: string, affiliation: string) => string;
     readonly operationFailed: (operation: DailyReportOperation) => string;
+    readonly operationRefused: (operation: DailyReportOperation) => string;
     readonly noticeRepeated: (count: number) => string;
     readonly rowState: (state: {
         readonly readState: DailyReportReadState;
@@ -217,6 +219,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reload",
     "loadingIds",
     "streamFailed",
+    "liveUpdatesRefused",
     "streamRetry",
     "streamRevalidating",
     "selectPrompt",
@@ -275,6 +278,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reportSummaryLoadFailed",
     "interviewerWithAffiliation",
     "operationFailed",
+    "operationRefused",
     "noticeRepeated",
     "rowState",
     "rowEditingState",
@@ -364,7 +368,8 @@ type DailyReportHeaderProps = {
     annotation?: ReactNode;
 };
 type DailyReportErrorInfo = {
-    operation: DailyReportOperation;
+    operation: DailyReportOperation | "liveUpdates";
+    reason: "failed" | "refused";
     message: string;
     cause?: unknown;
 };
@@ -413,6 +418,7 @@ type DailyReportPageProps = {
     user?: DailyReportUser;
     userId?: string | null;
     config: DailyReportClientConfigInput;
+    sessionEpoch: number;
 };
 declare const DailyReportPage: ({ config, ...rest }: DailyReportPageProps) => react.JSX.Element;
 type DailyReportResolvedContentProps = {
@@ -427,8 +433,10 @@ type UseDailyReportSseConnectionOptions = {
     onMessage: (payload: Exclude<DailyReportSseMessage, {
         type: "connected";
     }>) => void;
+    onSessionEnded: () => void;
+    onRefused: () => void;
 };
-declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
+declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage, onSessionEnded, onRefused }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
 type ReportBusinessDate = DailyReportDetail["date"];
 type DailyReportActionFunctions = {
     toggleSse: () => void;

package/dist/client.d.ts

@@ -37,7 +37,7 @@ type DailyReportDetailListProps = {
     scrollRestoreRef?: RefObject<DailyReportDetailListScrollRestore>;
 };
 declare const DailyReportDetailList: (props: DailyReportDetailListProps) => react.JSX.Element;
-type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed";
+type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed" | "refused";
 type DailyReportLocale = VirtualScrollLocale;
 type DailyReportOperation = Exclude<DailyReportActionIntent, "clearCache">;
 type DailyReportLabels = VirtualScrollLabels & {
@@ -84,6 +84,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reload: string;
     readonly loadingIds: string;
     readonly streamFailed: string;
+    readonly liveUpdatesRefused: string;
     readonly streamRetry: string;
     readonly streamRevalidating: string;
     readonly selectPrompt: string;
@@ -142,6 +143,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reportSummaryLoadFailed: (reportHubId: number) => string;
     readonly interviewerWithAffiliation: (name: string, affiliation: string) => string;
     readonly operationFailed: (operation: DailyReportOperation) => string;
+    readonly operationRefused: (operation: DailyReportOperation) => string;
     readonly noticeRepeated: (count: number) => string;
     readonly rowState: (state: {
         readonly readState: DailyReportReadState;
@@ -217,6 +219,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reload",
     "loadingIds",
     "streamFailed",
+    "liveUpdatesRefused",
     "streamRetry",
     "streamRevalidating",
     "selectPrompt",
@@ -275,6 +278,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reportSummaryLoadFailed",
     "interviewerWithAffiliation",
     "operationFailed",
+    "operationRefused",
     "noticeRepeated",
     "rowState",
     "rowEditingState",
@@ -364,7 +368,8 @@ type DailyReportHeaderProps = {
     annotation?: ReactNode;
 };
 type DailyReportErrorInfo = {
-    operation: DailyReportOperation;
+    operation: DailyReportOperation | "liveUpdates";
+    reason: "failed" | "refused";
     message: string;
     cause?: unknown;
 };
@@ -413,6 +418,7 @@ type DailyReportPageProps = {
     user?: DailyReportUser;
     userId?: string | null;
     config: DailyReportClientConfigInput;
+    sessionEpoch: number;
 };
 declare const DailyReportPage: ({ config, ...rest }: DailyReportPageProps) => react.JSX.Element;
 type DailyReportResolvedContentProps = {
@@ -427,8 +433,10 @@ type UseDailyReportSseConnectionOptions = {
     onMessage: (payload: Exclude<DailyReportSseMessage, {
         type: "connected";
     }>) => void;
+    onSessionEnded: () => void;
+    onRefused: () => void;
 };
-declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
+declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage, onSessionEnded, onRefused }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
 type ReportBusinessDate = DailyReportDetail["date"];
 type DailyReportActionFunctions = {
     toggleSse: () => void;