@athenaintel/react 0.18.0 → 0.20.0

package/dist/packages/agent-runtime/src/client-tool-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-tool-bridge.js","sources":["../../../../../agent-runtime/src/client-tool-bridge.ts"],"sourcesContent":["/**\n * The statewire client-tool bridge loop, shared by every surface that executes\n * frontend tool calls (Olympus, the React SDK, the Office add-in, mobile).\n *\n * Tools declared through `runConfig.custom.client_tools` have no backend\n * implementation: a call parks the run on an interrupt that arrives as a\n * statewire input request. The bridge claims the request (exactly-once per\n * ownership domain), runs the matching local handlers, and resumes the run\n * with per-call result envelopes — so a missing tool or a thrown handler still\n * frees the run with an error the model can act on instead of hanging it.\n *\n * Wire-adjacent correctness invariants this module owns, so they can never\n * drift apart per surface again:\n * - exactly-once claim per request, with un-claim on every path that did NOT\n *   run any handler (abandoned before execution, consent dismissed, unmount\n *   before the first handler) so a re-emitted request is executable instead\n *   of stranding the run;\n * - once a batch has STARTED executing handlers, its claim is never released\n *   by unmount: handlers cannot be cancelled, so releasing would let another\n *   mount re-claim the re-emitted request and re-execute side effects that\n *   already ran (double-executing a mutating tool). The completed wire-safe\n *   result is cached and may be replayed across reconnects/remounts instead;\n * - liveness checks between awaits (the run can be stopped or answered\n *   elsewhere while a handler runs) so a stale request is never resumed;\n * - per-call JSON wire-safety, so one unrepresentable handler result answers\n *   that one call with an error instead of failing the whole batch.\n *\n * Like `interrupts.ts`, this is parameterized rather than self-wiring: the\n * host component reads `useStatewireRuns().inputRequests` and\n * `useStatewireSendCommand()` itself (both mockable per surface) and passes\n * them in, together with its ownership tracker and write-consent policy.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef } from 'react';\nimport {\n  type ClientToolCallRequest,\n  type ClientToolRequestTracker,\n  type ClientToolResultEnvelope,\n  clientToolCallArgs,\n  clientToolErrorEnvelope,\n  clientToolResultsResumeValue,\n  clientToolSuccessEnvelope,\n  isClientToolInterrupt,\n} from './client-tools';\n\n/** A locally executable tool, normalized across the per-surface tool shapes. */\nexport interface ClientToolBridgeTool {\n  /** Snake_case tool id the model calls (e.g. `update_sheet_range`). */\n  name: string;\n  /** Mutating tools gate on the surface's write-consent flow (`confirmWrites`). */\n  requiresWrite?: boolean;\n  run: (\n    args: Record<string, unknown>,\n    context: { toolCallId: string },\n  ) => Promise<unknown>;\n}\n\n/**\n * Batch write-consent outcome. `proceed` runs the write calls, `declined`\n * answers them with the declined message while reads still run, `abandoned`\n * releases the claim without resuming (the request died, or the consent UI was\n * dismissed by the run moving on). Grant persistence (a thread set, a stored\n * preference) is the surface's own policy, applied inside its callback.\n */\nexport type ClientToolWriteConsentDecision = 'proceed' | 'declined' | 'abandoned';\n\nexport interface ClientToolCallSettledEvent {\n  toolName: string;\n  status: 'success' | 'error' | 'declined';\n  errorType?: string;\n}\n\n/** Default resume error for a write call the user declined. */\nexport const CLIENT_TOOL_WRITE_DECLINED_MESSAGE =\n  'The user declined this edit. Do not retry it; ask the user how to proceed.';\n\n/** Default resume error for a call naming a tool this surface does not have. */\nexport function defaultMissingClientToolMessage(toolName: string): string {\n  return `This surface has no tool named '${toolName}'.`;\n}\n\n/** Statewire request ids are unique per run, but a thread scope keeps a\n * process-wide claim unambiguous when two conversations are open at once. */\nexport function clientToolClaimKey(threadId: string, requestId: string): string {\n  return `${threadId}:${requestId}`;\n}\n\nconst CLIENT_TOOL_RESUME_RETRY_DELAYS_MS = [2_000, 5_000, 10_000, 15_000, 30_000];\nconst MAX_CLIENT_TOOL_RESUME_ATTEMPTS = 25;\n\nfunction clientToolResumeRetryDelayMs(attemptNumber: number): number {\n  const index = Math.min(\n    Math.max(attemptNumber - 1, 0),\n    CLIENT_TOOL_RESUME_RETRY_DELAYS_MS.length - 1,\n  );\n  return CLIENT_TOOL_RESUME_RETRY_DELAYS_MS[index] ?? 30_000;\n}\n\n/**\n * A wire-safe copy of a handler's return value: handlers can return values\n * JSON cannot represent (DOM nodes, host objects, bigints), which must never\n * reach the transport. Throws for an unrepresentable value so the caller can\n * answer that one call with an error instead of stranding the whole batch.\n */\nexport function jsonSafeClientToolResult(value: unknown): unknown {\n  const serialized = JSON.stringify(value);\n  return serialized === undefined ? null : JSON.parse(serialized);\n}\n\n/** A parked, unanswered client-tool input request. */\nexport function isPendingClientToolRequest(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (request.type !== 'interrupt' || 'response' in request) return false;\n  return isClientToolInterrupt((request as { payload?: unknown }).payload);\n}\n\nexport interface ExecuteClientToolBatchOptions {\n  calls: readonly ClientToolCallRequest[];\n  tools: readonly ClientToolBridgeTool[];\n  /** Whether the parked request still exists and this surface may answer it.\n   * Checked before consent resolution, before every call, and before the\n   * results are handed back for resume. */\n  isLive: () => boolean;\n  /** Batch write gate; absent means writes run without consent (surfaces that\n   * only register read tools). Called once per batch, before any handler. */\n  confirmWrites?: (batch: {\n    writeToolNames: readonly string[];\n  }) => Promise<ClientToolWriteConsentDecision>;\n  writeDeclinedMessage?: string;\n  missingToolMessage?: (toolName: string) => string;\n  /** Per-call telemetry (the Office add-in's tool events). */\n  onCallSettled?: (event: ClientToolCallSettledEvent) => void;\n  /**\n   * Called once, after the write-consent gate resolves and immediately before\n   * the first handler runs — the point where side effects begin. There is no\n   * await between this callback and the first handler invocation, so a caller\n   * marking \"execution started\" here can never miss a handler that ran.\n   */\n  onExecutionStart?: () => void;\n}\n\n/**\n * Execute one batched client-tool park: consent, per-call execution with\n * wire-safe envelopes, liveness aborts. Returns the per-interrupt result map\n * to resume with, or `null` when the batch was abandoned (the request died,\n * consent was abandoned, or the surface went away) — the caller must release\n * its claim and must NOT resume.\n */\nexport async function executeClientToolBatch(\n  options: ExecuteClientToolBatchOptions,\n): Promise<Record<string, ClientToolResultEnvelope> | null> {\n  const {\n    calls,\n    tools,\n    isLive,\n    confirmWrites,\n    writeDeclinedMessage = CLIENT_TOOL_WRITE_DECLINED_MESSAGE,\n    missingToolMessage = defaultMissingClientToolMessage,\n    onCallSettled,\n    onExecutionStart,\n  } = options;\n  const registry = new Map(tools.map((tool) => [tool.name, tool]));\n\n  // One consent covers the whole batch (and whatever scope the surface's\n  // callback persists): writes are declined together while reads still run.\n  let writesDeclined = false;\n  const writeToolNames = calls\n    .filter((call) => registry.get(call.tool_name)?.requiresWrite === true)\n    .map((call) => call.tool_name);\n  if (writeToolNames.length > 0 && confirmWrites) {\n    const decision = await confirmWrites({ writeToolNames });\n    if (decision === 'abandoned' || !isLive()) {\n      // The run was stopped (or answered elsewhere) while consent was\n      // pending: abort before any handler mutates the user's asset.\n      return null;\n    }\n    writesDeclined = decision === 'declined';\n  }\n\n  onExecutionStart?.();\n\n  const results: Record<string, ClientToolResultEnvelope> = {};\n  for (const call of calls) {\n    if (!isLive()) return null;\n    const tool = registry.get(call.tool_name);\n    let envelope: ClientToolResultEnvelope;\n    let status: ClientToolCallSettledEvent['status'] = 'success';\n    let errorType: string | undefined;\n    if (!tool) {\n      envelope = clientToolErrorEnvelope(missingToolMessage(call.tool_name));\n      status = 'error';\n      errorType = 'UnknownClientTool';\n    } else if (tool.requiresWrite === true && writesDeclined) {\n      envelope = clientToolErrorEnvelope(writeDeclinedMessage);\n      status = 'declined';\n    } else {\n      try {\n        envelope = clientToolSuccessEnvelope(\n          jsonSafeClientToolResult(\n            await tool.run(clientToolCallArgs(call), {\n              toolCallId: call.interrupt_id,\n            }),\n          ),\n        );\n      } catch (error) {\n        envelope = clientToolErrorEnvelope(error);\n        status = 'error';\n        errorType = error instanceof Error ? error.name : typeof error;\n      }\n    }\n    results[call.interrupt_id] = envelope;\n    onCallSettled?.({\n      toolName: call.tool_name,\n      status,\n      ...(errorType !== undefined ? { errorType } : {}),\n    });\n  }\n\n  // Abandoned mid-flight: resuming a dead request would error, and a\n  // re-emitted one must be executable again.\n  return isLive() ? results : null;\n}\n\nexport interface UseStatewireClientToolBridgeOptions {\n  threadId: string;\n  tools: readonly ClientToolBridgeTool[];\n  /**\n   * Ownership domain for parked-request claims. Pass a module-scoped tracker\n   * to make ownership process-wide across every mount of the surface (two\n   * mounted surfaces of one conversation execute each request exactly once),\n   * or a per-mount tracker to scope ownership to one mounted bridge.\n   */\n  tracker: ClientToolRequestTracker;\n  /** The surface's `useStatewireRuns().inputRequests` read. */\n  inputRequests: readonly StatewireThread.InputRequestState[] | undefined;\n  /** Dispatch the `run/input` resume on the surface's transport. The value is\n   * already wire-safe (per-call JSON round-trip inside the batch engine). */\n  /** Dispatch the answer and settle only once the Statewire host accepts or\n   * rejects the command. The bridge deliberately keeps replaying while this\n   * promise is pending: `run/input` removes the request optimistically before\n   * the server has accepted the answer. */\n  sendResume: (\n    requestId: string,\n    value: Record<string, unknown>,\n  ) => PromiseLike<unknown>;\n  /** Batch write gate, with the parked request's id so the surface can close\n   * its consent UI the instant that request disappears. */\n  confirmWrites?: (batch: {\n    requestId: string;\n    writeToolNames: readonly string[];\n  }) => Promise<ClientToolWriteConsentDecision>;\n  writeDeclinedMessage?: string;\n  missingToolMessage?: (toolName: string) => string;\n  onCallSettled?: (event: ClientToolCallSettledEvent) => void;\n  /** Log prefix for resume-dispatch failures. */\n  logLabel?: string;\n}\n\n/**\n * The claim lifecycle around {@link executeClientToolBatch}: claim the pending\n * request once per ownership domain, execute, resume — releasing the claim on\n * every path that ran no handler, so re-emitted requests recover.\n *\n * Unmount splits by whether side effects began:\n * - a claim whose batch has NOT started executing (claimed this tick, or\n *   parked on write consent) is released, so another mount — or a remount —\n *   can execute the re-emitted request instead of stranding the parked run;\n * - a claim whose batch HAS started stays held: handlers cannot be cancelled,\n *   so releasing would let a sibling mount re-claim and re-execute a mutation\n *   whose side effects already ran. The detached execution caches its result\n *   and attempts one resume through its captured transport; a later mount can\n *   replay the same result without repeating the side effect.\n */\nexport function useStatewireClientToolBridge(\n  options: UseStatewireClientToolBridgeOptions,\n): void {\n  const { threadId, tracker, inputRequests, logLabel = '[AthenaSDK]' } = options;\n  const optionsRef = useRef(options);\n  optionsRef.current = options;\n\n  const pendingRequest = inputRequests?.find(isPendingClientToolRequest);\n\n  // Claims this bridge holds but has not resumed, split by whether their\n  // batch has begun running handlers. The ref Set instances are stable (only\n  // their contents mutate), so the unmount cleanup sees every claim.\n  const ownedClaimsRef = useRef<Set<string>>(new Set());\n  const startedClaimsRef = useRef<Set<string>>(new Set());\n  const resumeOwnerRef = useRef(Symbol('client-tool-resume-owner'));\n  const resumeClaimsRef = useRef<Set<string>>(new Set());\n  const resumeTimersRef = useRef<\n    Map<string, { requestId: string; timer: ReturnType<typeof setTimeout> }>\n  >(new Map());\n  const activeRef = useRef(true);\n  const releaseClaim = useCallback(\n    (claim: string) => {\n      // Release the shared tracker entry only while THIS mount still owns it.\n      // A detached batch can settle after the unmount cleanup already released\n      // (and disowned) its claim; by then the tracker entry may belong to\n      // another mount that claimed, executed, and resumed — releasing it here\n      // would let a stale re-emission of the same request execute again.\n      const owned = ownedClaimsRef.current.delete(claim);\n      startedClaimsRef.current.delete(claim);\n      if (owned) tracker.release(claim);\n    },\n    [tracker],\n  );\n  const stopResumeReplay = useCallback(\n    (claim: string) => {\n      const timerEntry = resumeTimersRef.current.get(claim);\n      if (timerEntry) clearTimeout(timerEntry.timer);\n      resumeTimersRef.current.delete(claim);\n      if (resumeClaimsRef.current.delete(claim)) {\n        tracker.releaseResumeReplay(claim, resumeOwnerRef.current);\n      }\n    },\n    [tracker],\n  );\n  useEffect(() => {\n    activeRef.current = true;\n    const ownedClaims = ownedClaimsRef.current;\n    const startedClaims = startedClaimsRef.current;\n    return () => {\n      activeRef.current = false;\n      for (const claim of Array.from(resumeClaimsRef.current)) {\n        stopResumeReplay(claim);\n      }\n      for (const claim of ownedClaims) {\n        // Started batches keep their claim — their detached execution settles\n        // it (resume, or release on a failed dispatch). Releasing here would\n        // double-execute the side effects that already ran.\n        if (startedClaims.has(claim)) continue;\n        ownedClaims.delete(claim);\n        tracker.release(claim);\n      }\n    };\n  }, [stopResumeReplay, tracker]);\n\n  // Handlers (and consent) are async, so the run can be stopped or the request\n  // answered elsewhere while we await. The live ids let us abandon an\n  // unfinished local execution when its request is no longer present. Once a\n  // result is cached, only command settlement may stop its replay: Statewire\n  // removes submitted requests optimistically before the host accepts them.\n  const liveRequestIdsRef = useRef<ReadonlySet<string>>(new Set());\n  liveRequestIdsRef.current = new Set((inputRequests ?? []).map((request) => request.id));\n\n  const startResumeReplay = useCallback(\n    (claim: string, requestId: string) => {\n      if (!activeRef.current || resumeClaimsRef.current.has(claim)) return;\n      if (!tracker.claimResumeReplay(claim, resumeOwnerRef.current)) return;\n      resumeClaimsRef.current.add(claim);\n\n      const dispatch = (): void => {\n        resumeTimersRef.current.delete(claim);\n        if (!activeRef.current) {\n          stopResumeReplay(claim);\n          return;\n        }\n        const attempt = tracker.takeResumeAttempt(claim, {\n          owner: resumeOwnerRef.current,\n          maxAttempts: MAX_CLIENT_TOOL_RESUME_ATTEMPTS,\n        });\n        if (!attempt) {\n          stopResumeReplay(claim);\n          return;\n        }\n\n        try {\n          const settled = optionsRef.current.sendResume(requestId, attempt.value);\n          // A fulfilled command result is the authoritative acknowledgement:\n          // the host accepted and applied the answer. The local input request\n          // disappearing is NOT an acknowledgement because the Statewire\n          // reducer does that optimistically as soon as the command is\n          // submitted.\n          void Promise.resolve(settled).then(\n            () => {\n              // Keep the execution claim, but discard the cached result once\n              // the host accepts it. A stale pending-request render can no\n              // longer replay the command or re-execute the local mutation.\n              tracker.settleResume(claim);\n              stopResumeReplay(claim);\n            },\n            (error) => {\n              // A rejected attempt may have raced another still-pending\n              // replay. Keep the bounded loop alive; any accepted sibling\n              // stops it, while the global attempt cap prevents storms.\n              console.error(`${logLabel} failed to resume client tool results:`, error);\n            },\n          );\n        } catch (error) {\n          // Keep the cached result and retry it. Re-executing a mutating local\n          // handler would be unsafe; replaying its id-stamped result is safe.\n          console.error(`${logLabel} failed to resume client tool results:`, error);\n        }\n\n        if (\n          attempt.attemptNumber >= MAX_CLIENT_TOOL_RESUME_ATTEMPTS ||\n          !activeRef.current ||\n          !resumeClaimsRef.current.has(claim)\n        ) {\n          stopResumeReplay(claim);\n          return;\n        }\n        const timer = setTimeout(dispatch, clientToolResumeRetryDelayMs(attempt.attemptNumber));\n        resumeTimersRef.current.set(claim, { requestId, timer });\n      };\n\n      dispatch();\n    },\n    [logLabel, stopResumeReplay, tracker],\n  );\n\n  const executeRequest = useCallback(\n    async (request: StatewireThread.CustomInputRequest) => {\n      const payload = request.payload;\n      if (!isClientToolInterrupt(payload)) return;\n      const claim = clientToolClaimKey(threadId, request.id);\n      const {\n        tools,\n        confirmWrites,\n        writeDeclinedMessage,\n        missingToolMessage,\n        onCallSettled,\n        sendResume,\n      } = optionsRef.current;\n\n      const results = await executeClientToolBatch({\n        calls: payload.context.requests,\n        tools,\n        // Live while the request still exists AND this surface may answer it:\n        // mounted, or already past the point of no return (handlers started —\n        // the detached execution must finish and settle, never re-execute).\n        // After unmount the request-id snapshot freezes at its last observed\n        // state, which keeps a started batch's own request visible to it.\n        isLive: () =>\n          liveRequestIdsRef.current.has(request.id) &&\n          (activeRef.current || startedClaimsRef.current.has(claim)),\n        onExecutionStart: () => {\n          startedClaimsRef.current.add(claim);\n        },\n        ...(confirmWrites\n          ? {\n              confirmWrites: ({ writeToolNames }: { writeToolNames: readonly string[] }) =>\n                confirmWrites({ requestId: request.id, writeToolNames }),\n            }\n          : {}),\n        ...(writeDeclinedMessage !== undefined ? { writeDeclinedMessage } : {}),\n        ...(missingToolMessage ? { missingToolMessage } : {}),\n        ...(onCallSettled ? { onCallSettled } : {}),\n      });\n      if (results === null) {\n        releaseClaim(claim);\n        return;\n      }\n\n      const resumeValue = clientToolResultsResumeValue(results);\n      tracker.cacheResume(claim, resumeValue);\n      // Execution is complete, but the exactly-once claim remains. A pending\n      // re-emission must replay this cached value, never run the handlers again.\n      ownedClaimsRef.current.delete(claim);\n      startedClaimsRef.current.delete(claim);\n\n      if (!activeRef.current) {\n        // The handler crossed an unmount. Preserve the pre-existing best-effort\n        // settle through its captured transport, but leave the cached result\n        // available for a later mount if this dispatch is lost.\n        if (tracker.claimResumeReplay(claim, resumeOwnerRef.current)) {\n          const attempt = tracker.takeResumeAttempt(claim, {\n            owner: resumeOwnerRef.current,\n            maxAttempts: MAX_CLIENT_TOOL_RESUME_ATTEMPTS,\n          });\n          if (attempt) {\n            try {\n              void Promise.resolve(sendResume(request.id, attempt.value)).then(\n                () => tracker.settleResume(claim),\n                (error) => {\n                  console.error(`${logLabel} failed to resume client tool results:`, error);\n                },\n              );\n            } catch (error) {\n              console.error(`${logLabel} failed to resume client tool results:`, error);\n            }\n          }\n          // Ownership only fences this best-effort dispatch; a future mount\n          // may claim and replay the cached value if it did not settle.\n          tracker.releaseResumeReplay(claim, resumeOwnerRef.current);\n        }\n        return;\n      }\n\n      startResumeReplay(claim, request.id);\n    },\n    [logLabel, releaseClaim, startResumeReplay, threadId, tracker],\n  );\n\n  useEffect(() => {\n    if (!pendingRequest) return;\n    const claim = clientToolClaimKey(threadId, pendingRequest.id);\n    if (!tracker.claim(claim)) {\n      // The local handler already ran. This is the reconnect/remount path:\n      // replay its cached answer instead of double-executing the side effect.\n      if (tracker.getCachedResume(claim)) {\n        startResumeReplay(claim, pendingRequest.id);\n      }\n      return;\n    }\n    ownedClaimsRef.current.add(claim);\n    void executeRequest(pendingRequest);\n  }, [executeRequest, pendingRequest, startResumeReplay, threadId, tracker]);\n}\n"],"names":[],"mappings":";;AA0EO,MAAM,qCACX;AAGK,SAAS,gCAAgC,UAA0B;AACxE,SAAO,mCAAmC,QAAQ;AACpD;AAIO,SAAS,mBAAmB,UAAkB,WAA2B;AAC9E,SAAO,GAAG,QAAQ,IAAI,SAAS;AACjC;AAEA,MAAM,qCAAqC,CAAC,KAAO,KAAO,KAAQ,MAAQ,GAAM;AAChF,MAAM,kCAAkC;AAExC,SAAS,6BAA6B,eAA+B;AACnE,QAAM,QAAQ,KAAK;AAAA,IACjB,KAAK,IAAI,gBAAgB,GAAG,CAAC;AAAA,IAC7B,mCAAmC,SAAS;AAAA,EAAA;AAE9C,SAAO,mCAAmC,KAAK,KAAK;AACtD;AAQO,SAAS,yBAAyB,OAAyB;AAChE,QAAM,aAAa,KAAK,UAAU,KAAK;AACvC,SAAO,eAAe,SAAY,OAAO,KAAK,MAAM,UAAU;AAChE;AAGO,SAAS,2BACd,SAC+C;AAC/C,MAAI,QAAQ,SAAS,eAAe,cAAc,QAAS,QAAO;AAClE,SAAO,sBAAuB,QAAkC,OAAO;AACzE;AAkCA,eAAsB,uBACpB,SAC0D;AAC1D,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,uBAAuB;AAAA,IACvB,qBAAqB;AAAA,IACrB;AAAA,IACA;AAAA,EAAA,IACE;AACJ,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;AAI/D,MAAI,iBAAiB;AACrB,QAAM,iBAAiB,MACpB,OAAO,CAAC,SAAA;;AAAS,2BAAS,IAAI,KAAK,SAAS,MAA3B,mBAA8B,mBAAkB;AAAA,GAAI,EACrE,IAAI,CAAC,SAAS,KAAK,SAAS;AAC/B,MAAI,eAAe,SAAS,KAAK,eAAe;AAC9C,UAAM,WAAW,MAAM,cAAc,EAAE,gBAAgB;AACvD,QAAI,aAAa,eAAe,CAAC,UAAU;AAGzC,aAAO;AAAA,IACT;AACA,qBAAiB,aAAa;AAAA,EAChC;AAEA;AAEA,QAAM,UAAoD,CAAA;AAC1D,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,OAAA,EAAU,QAAO;AACtB,UAAM,OAAO,SAAS,IAAI,KAAK,SAAS;AACxC,QAAI;AACJ,QAAI,SAA+C;AACnD,QAAI;AACJ,QAAI,CAAC,MAAM;AACT,iBAAW,wBAAwB,mBAAmB,KAAK,SAAS,CAAC;AACrE,eAAS;AACT,kBAAY;AAAA,IACd,WAAW,KAAK,kBAAkB,QAAQ,gBAAgB;AACxD,iBAAW,wBAAwB,oBAAoB;AACvD,eAAS;AAAA,IACX,OAAO;AACL,UAAI;AACF,mBAAW;AAAA,UACT;AAAA,YACE,MAAM,KAAK,IAAI,mBAAmB,IAAI,GAAG;AAAA,cACvC,YAAY,KAAK;AAAA,YAAA,CAClB;AAAA,UAAA;AAAA,QACH;AAAA,MAEJ,SAAS,OAAO;AACd,mBAAW,wBAAwB,KAAK;AACxC,iBAAS;AACT,oBAAY,iBAAiB,QAAQ,MAAM,OAAO,OAAO;AAAA,MAC3D;AAAA,IACF;AACA,YAAQ,KAAK,YAAY,IAAI;AAC7B,mDAAgB;AAAA,MACd,UAAU,KAAK;AAAA,MACf;AAAA,MACA,GAAI,cAAc,SAAY,EAAE,cAAc,CAAA;AAAA,IAAC;AAAA,EAEnD;AAIA,SAAO,OAAA,IAAW,UAAU;AAC9B;AAoDO,SAAS,6BACd,SACM;AACN,QAAM,EAAE,UAAU,SAAS,eAAe,WAAW,kBAAkB;AACvE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,iBAAiB,+CAAe,KAAK;AAK3C,QAAM,iBAAiB,OAAoB,oBAAI,KAAK;AACpD,QAAM,mBAAmB,OAAoB,oBAAI,KAAK;AACtD,QAAM,iBAAiB,OAAO,OAAO,0BAA0B,CAAC;AAChE,QAAM,kBAAkB,OAAoB,oBAAI,KAAK;AACrD,QAAM,kBAAkB,OAEtB,oBAAI,KAAK;AACX,QAAM,YAAY,OAAO,IAAI;AAC7B,QAAM,eAAe;AAAA,IACnB,CAAC,UAAkB;AAMjB,YAAM,QAAQ,eAAe,QAAQ,OAAO,KAAK;AACjD,uBAAiB,QAAQ,OAAO,KAAK;AACrC,UAAI,MAAO,SAAQ,QAAQ,KAAK;AAAA,IAClC;AAAA,IACA,CAAC,OAAO;AAAA,EAAA;AAEV,QAAM,mBAAmB;AAAA,IACvB,CAAC,UAAkB;AACjB,YAAM,aAAa,gBAAgB,QAAQ,IAAI,KAAK;AACpD,UAAI,WAAY,cAAa,WAAW,KAAK;AAC7C,sBAAgB,QAAQ,OAAO,KAAK;AACpC,UAAI,gBAAgB,QAAQ,OAAO,KAAK,GAAG;AACzC,gBAAQ,oBAAoB,OAAO,eAAe,OAAO;AAAA,MAC3D;AAAA,IACF;AAAA,IACA,CAAC,OAAO;AAAA,EAAA;AAEV,YAAU,MAAM;AACd,cAAU,UAAU;AACpB,UAAM,cAAc,eAAe;AACnC,UAAM,gBAAgB,iBAAiB;AACvC,WAAO,MAAM;AACX,gBAAU,UAAU;AACpB,iBAAW,SAAS,MAAM,KAAK,gBAAgB,OAAO,GAAG;AACvD,yBAAiB,KAAK;AAAA,MACxB;AACA,iBAAW,SAAS,aAAa;AAI/B,YAAI,cAAc,IAAI,KAAK,EAAG;AAC9B,oBAAY,OAAO,KAAK;AACxB,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAAA,IACF;AAAA,EACF,GAAG,CAAC,kBAAkB,OAAO,CAAC;AAO9B,QAAM,oBAAoB,OAA4B,oBAAI,KAAK;AAC/D,oBAAkB,UAAU,IAAI,KAAK,iBAAiB,IAAI,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;AAEtF,QAAM,oBAAoB;AAAA,IACxB,CAAC,OAAe,cAAsB;AACpC,UAAI,CAAC,UAAU,WAAW,gBAAgB,QAAQ,IAAI,KAAK,EAAG;AAC9D,UAAI,CAAC,QAAQ,kBAAkB,OAAO,eAAe,OAAO,EAAG;AAC/D,sBAAgB,QAAQ,IAAI,KAAK;AAEjC,YAAM,WAAW,MAAY;AAC3B,wBAAgB,QAAQ,OAAO,KAAK;AACpC,YAAI,CAAC,UAAU,SAAS;AACtB,2BAAiB,KAAK;AACtB;AAAA,QACF;AACA,cAAM,UAAU,QAAQ,kBAAkB,OAAO;AAAA,UAC/C,OAAO,eAAe;AAAA,UACtB,aAAa;AAAA,QAAA,CACd;AACD,YAAI,CAAC,SAAS;AACZ,2BAAiB,KAAK;AACtB;AAAA,QACF;AAEA,YAAI;AACF,gBAAM,UAAU,WAAW,QAAQ,WAAW,WAAW,QAAQ,KAAK;AAMtE,eAAK,QAAQ,QAAQ,OAAO,EAAE;AAAA,YAC5B,MAAM;AAIJ,sBAAQ,aAAa,KAAK;AAC1B,+BAAiB,KAAK;AAAA,YACxB;AAAA,YACA,CAAC,UAAU;AAIT,sBAAQ,MAAM,GAAG,QAAQ,0CAA0C,KAAK;AAAA,YAC1E;AAAA,UAAA;AAAA,QAEJ,SAAS,OAAO;AAGd,kBAAQ,MAAM,GAAG,QAAQ,0CAA0C,KAAK;AAAA,QAC1E;AAEA,YACE,QAAQ,iBAAiB,mCACzB,CAAC,UAAU,WACX,CAAC,gBAAgB,QAAQ,IAAI,KAAK,GAClC;AACA,2BAAiB,KAAK;AACtB;AAAA,QACF;AACA,cAAM,QAAQ,WAAW,UAAU,6BAA6B,QAAQ,aAAa,CAAC;AACtF,wBAAgB,QAAQ,IAAI,OAAO,EAAE,WAAW,OAAO;AAAA,MACzD;AAEA,eAAA;AAAA,IACF;AAAA,IACA,CAAC,UAAU,kBAAkB,OAAO;AAAA,EAAA;AAGtC,QAAM,iBAAiB;AAAA,IACrB,OAAO,YAAgD;AACrD,YAAM,UAAU,QAAQ;AACxB,UAAI,CAAC,sBAAsB,OAAO,EAAG;AACrC,YAAM,QAAQ,mBAAmB,UAAU,QAAQ,EAAE;AACrD,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MAAA,IACE,WAAW;AAEf,YAAM,UAAU,MAAM,uBAAuB;AAAA,QAC3C,OAAO,QAAQ,QAAQ;AAAA,QACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,QAAQ,MACN,kBAAkB,QAAQ,IAAI,QAAQ,EAAE,MACvC,UAAU,WAAW,iBAAiB,QAAQ,IAAI,KAAK;AAAA,QAC1D,kBAAkB,MAAM;AACtB,2BAAiB,QAAQ,IAAI,KAAK;AAAA,QACpC;AAAA,QACA,GAAI,gBACA;AAAA,UACE,eAAe,CAAC,EAAE,qBAChB,cAAc,EAAE,WAAW,QAAQ,IAAI,eAAA,CAAgB;AAAA,QAAA,IAE3D,CAAA;AAAA,QACJ,GAAI,yBAAyB,SAAY,EAAE,qBAAA,IAAyB,CAAA;AAAA,QACpE,GAAI,qBAAqB,EAAE,mBAAA,IAAuB,CAAA;AAAA,QAClD,GAAI,gBAAgB,EAAE,kBAAkB,CAAA;AAAA,MAAC,CAC1C;AACD,UAAI,YAAY,MAAM;AACpB,qBAAa,KAAK;AAClB;AAAA,MACF;AAEA,YAAM,cAAc,6BAA6B,OAAO;AACxD,cAAQ,YAAY,OAAO,WAAW;AAGtC,qBAAe,QAAQ,OAAO,KAAK;AACnC,uBAAiB,QAAQ,OAAO,KAAK;AAErC,UAAI,CAAC,UAAU,SAAS;AAItB,YAAI,QAAQ,kBAAkB,OAAO,eAAe,OAAO,GAAG;AAC5D,gBAAM,UAAU,QAAQ,kBAAkB,OAAO;AAAA,YAC/C,OAAO,eAAe;AAAA,YACtB,aAAa;AAAA,UAAA,CACd;AACD,cAAI,SAAS;AACX,gBAAI;AACF,mBAAK,QAAQ,QAAQ,WAAW,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE;AAAA,gBAC1D,MAAM,QAAQ,aAAa,KAAK;AAAA,gBAChC,CAAC,UAAU;AACT,0BAAQ,MAAM,GAAG,QAAQ,0CAA0C,KAAK;AAAA,gBAC1E;AAAA,cAAA;AAAA,YAEJ,SAAS,OAAO;AACd,sBAAQ,MAAM,GAAG,QAAQ,0CAA0C,KAAK;AAAA,YAC1E;AAAA,UACF;AAGA,kBAAQ,oBAAoB,OAAO,eAAe,OAAO;AAAA,QAC3D;AACA;AAAA,MACF;AAEA,wBAAkB,OAAO,QAAQ,EAAE;AAAA,IACrC;AAAA,IACA,CAAC,UAAU,cAAc,mBAAmB,UAAU,OAAO;AAAA,EAAA;AAG/D,YAAU,MAAM;AACd,QAAI,CAAC,eAAgB;AACrB,UAAM,QAAQ,mBAAmB,UAAU,eAAe,EAAE;AAC5D,QAAI,CAAC,QAAQ,MAAM,KAAK,GAAG;AAGzB,UAAI,QAAQ,gBAAgB,KAAK,GAAG;AAClC,0BAAkB,OAAO,eAAe,EAAE;AAAA,MAC5C;AACA;AAAA,IACF;AACA,mBAAe,QAAQ,IAAI,KAAK;AAChC,SAAK,eAAe,cAAc;AAAA,EACpC,GAAG,CAAC,gBAAgB,gBAAgB,mBAAmB,UAAU,OAAO,CAAC;AAC3E;"}

package/dist/packages/agent-runtime/src/client-tools.cjs

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const runconfigContract = require("./generated/runconfig-contract.cjs");
+function isClientToolCallRequest(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const candidate = value;
+  return typeof candidate.interrupt_id === "string" && candidate.interrupt_id.length > 0 && typeof candidate.tool_name === "string";
+}
+function hasClientToolInterruptSource(payload) {
+  return !!payload && typeof payload === "object" && !Array.isArray(payload) && payload.source === runconfigContract.CLIENT_TOOL_INTERRUPT_SOURCE;
+}
+function isClientToolInterrupt(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    return false;
+  }
+  const candidate = payload;
+  return candidate.source === runconfigContract.CLIENT_TOOL_INTERRUPT_SOURCE && candidate.type === runconfigContract.CLIENT_TOOL_INTERRUPT_SOURCE && typeof candidate.context === "object" && candidate.context !== null && Array.isArray(candidate.context.requests) && candidate.context.requests.length > 0 && candidate.context.requests.every(isClientToolCallRequest);
+}
+function clientToolCallArgs(request) {
+  const args = request.tool_args;
+  return args && typeof args === "object" && !Array.isArray(args) ? args : {};
+}
+function clientToolResultsResumeValue(results) {
+  return { client_tool_results: results };
+}
+function clientToolRunConfigEntries(tools) {
+  return tools.map(({ definition }) => ({
+    name: definition.name,
+    description: definition.description,
+    parameters: definition.parameters,
+    requires_write: definition.requiresWrite
+  }));
+}
+function clientToolSuccessEnvelope(result) {
+  return {
+    status: runconfigContract.CLIENT_TOOL_RESULT_STATUS_SUCCESS,
+    result: result === void 0 ? null : result
+  };
+}
+function clientToolErrorEnvelope(error) {
+  const message = error instanceof Error ? error.message : typeof error === "string" ? error : "Client tool execution failed.";
+  return { status: runconfigContract.CLIENT_TOOL_RESULT_STATUS_ERROR, error: message };
+}
+const DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES = 128;
+function createClientToolRequestTracker(options = {}) {
+  const maxCachedResumes = options.maxCachedResumes ?? DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES;
+  const requests = /* @__PURE__ */ new Map();
+  const pruneCompletedRequests = (protectedRequestId) => {
+    let completedCount = 0;
+    for (const entry of requests.values()) {
+      if (entry.resumeValue !== void 0 || entry.settled === true) completedCount += 1;
+    }
+    if (completedCount <= maxCachedResumes) return;
+    for (const [requestId, entry] of requests) {
+      if (completedCount <= maxCachedResumes) break;
+      if (requestId === protectedRequestId || entry.resumeValue === void 0 && entry.settled !== true || entry.resumeOwner !== void 0) {
+        continue;
+      }
+      requests.delete(requestId);
+      completedCount -= 1;
+    }
+  };
+  return {
+    claim(requestId) {
+      if (requests.has(requestId)) return false;
+      requests.set(requestId, { resumeAttemptCount: 0 });
+      return true;
+    },
+    release(requestId) {
+      requests.delete(requestId);
+    },
+    has(requestId) {
+      return requests.has(requestId);
+    },
+    cacheResume(requestId, value) {
+      const entry = requests.get(requestId) ?? { resumeAttemptCount: 0 };
+      entry.resumeValue = value;
+      entry.settled = false;
+      requests.delete(requestId);
+      requests.set(requestId, entry);
+      pruneCompletedRequests(requestId);
+    },
+    getCachedResume(requestId) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0) return void 0;
+      return {
+        value: entry.resumeValue,
+        attemptCount: entry.resumeAttemptCount
+      };
+    },
+    claimResumeReplay(requestId, owner) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0) return false;
+      if (entry.resumeOwner !== void 0 && entry.resumeOwner !== owner) {
+        return false;
+      }
+      entry.resumeOwner = owner;
+      return true;
+    },
+    releaseResumeReplay(requestId, owner) {
+      const entry = requests.get(requestId);
+      if ((entry == null ? void 0 : entry.resumeOwner) === owner) entry.resumeOwner = void 0;
+      pruneCompletedRequests();
+    },
+    settleResume(requestId) {
+      const entry = requests.get(requestId);
+      if (!entry) return;
+      entry.resumeValue = void 0;
+      entry.resumeOwner = void 0;
+      entry.settled = true;
+      requests.delete(requestId);
+      requests.set(requestId, entry);
+      pruneCompletedRequests(requestId);
+    },
+    takeResumeAttempt(requestId, attemptOptions) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0 || entry.resumeOwner !== attemptOptions.owner || entry.resumeAttemptCount >= attemptOptions.maxAttempts) {
+        return void 0;
+      }
+      entry.resumeAttemptCount += 1;
+      return {
+        value: entry.resumeValue,
+        attemptNumber: entry.resumeAttemptCount
+      };
+    }
+  };
+}
+exports.CLIENT_TOOL_INTERRUPT_SOURCE = runconfigContract.CLIENT_TOOL_INTERRUPT_SOURCE;
+exports.clientToolCallArgs = clientToolCallArgs;
+exports.clientToolErrorEnvelope = clientToolErrorEnvelope;
+exports.clientToolResultsResumeValue = clientToolResultsResumeValue;
+exports.clientToolRunConfigEntries = clientToolRunConfigEntries;
+exports.clientToolSuccessEnvelope = clientToolSuccessEnvelope;
+exports.createClientToolRequestTracker = createClientToolRequestTracker;
+exports.hasClientToolInterruptSource = hasClientToolInterruptSource;
+exports.isClientToolInterrupt = isClientToolInterrupt;
+//# sourceMappingURL=client-tools.cjs.map

package/dist/packages/agent-runtime/src/client-tools.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-tools.cjs","sources":["../../../../../agent-runtime/src/client-tools.ts"],"sourcesContent":["/**\n * Client-executed tools for statewire deep-agent threads.\n *\n * A client (the Office add-in, the Chrome extension, …) declares tools it can\n * execute locally by sending their JSON-schema definitions through\n * `runConfig.custom.client_tools`. The deep-agent runtime binds them as\n * interrupt-backed tools: when the model calls one, the run parks on a\n * LangGraph interrupt whose payload carries the tool name and arguments, the\n * statewire host publishes it as an `interrupt` input request, and the client\n * executes the tool and resumes the run with the result envelope.\n *\n * This module is transport-agnostic: it holds the wire contract (definitions,\n * interrupt payload shape, result envelopes) and a duplicate-execution guard.\n * The React hook that watches input requests lives with each client, next to\n * its host-specific tool handlers.\n */\n\nimport {\n  CLIENT_TOOL_INTERRUPT_SOURCE,\n  CLIENT_TOOL_RESULT_STATUS_ERROR,\n  CLIENT_TOOL_RESULT_STATUS_SUCCESS,\n} from './generated/runconfig-contract';\n\n/** `source`/`type` stamped on the interrupt payload by the agora runtime. */\nexport { CLIENT_TOOL_INTERRUPT_SOURCE } from './generated/runconfig-contract';\n\n/** JSON-schema description of one client-executed tool. */\nexport interface ClientToolDefinition {\n  /** Snake_case tool id the model calls (e.g. `update_sheet_range`). */\n  name: string;\n  description: string;\n  /** JSON schema for the tool arguments (`{\"type\": \"object\", ...}`). */\n  parameters: Record<string, unknown>;\n  /** Mutating tools gate on the client's write-approval flow before running. */\n  requiresWrite: boolean;\n}\n\n/** Per-call context the client-tool bridge hands a handler; absent when a host\n * invokes a handler outside a parked run. */\nexport interface ClientToolHandlerContext {\n  /** The model's tool-call id, for handlers that correlate calls. */\n  toolCallId: string;\n}\n\nexport type ClientToolHandler = (\n  args: Record<string, unknown>,\n  context?: ClientToolHandlerContext,\n) => Promise<unknown>;\n\nexport interface RegisteredClientTool {\n  definition: ClientToolDefinition;\n  handler: ClientToolHandler;\n}\n\n/** One parked tool call inside a batched client-tool input request. */\nexport interface ClientToolCallRequest {\n  /** LangGraph interrupt id — the key the resume result map must use. */\n  interrupt_id: string;\n  tool_name: string;\n  tool_args: Record<string, unknown>;\n  requires_write?: boolean;\n}\n\n/**\n * The input-request payload the agora runtime publishes for parked client\n * tool calls. A parallel model turn parks several interrupts at once; the\n * runtime batches them into one payload and the client answers once with\n * `{ client_tool_results: { <interrupt_id>: <result envelope> } }`.\n */\nexport interface ClientToolInterruptPayload {\n  source: typeof CLIENT_TOOL_INTERRUPT_SOURCE;\n  type: typeof CLIENT_TOOL_INTERRUPT_SOURCE;\n  message: string;\n  context: {\n    requests: ClientToolCallRequest[];\n  };\n}\n\nfunction isClientToolCallRequest(value: unknown): value is ClientToolCallRequest {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;\n  const candidate = value as Partial<ClientToolCallRequest>;\n  return (\n    typeof candidate.interrupt_id === 'string' &&\n    candidate.interrupt_id.length > 0 &&\n    typeof candidate.tool_name === 'string'\n  );\n}\n\n/**\n * Loose source check for surfaces that must NOT handle a client-tool park\n * (e.g. the generic approval banner). Unlike `isClientToolInterrupt`, this\n * matches any payload stamped with the client-tool source — including shapes\n * from a mismatched client/server version — so a skewed deploy can never\n * surface a generic \"Continue\" resume that corrupts a parked tool call.\n */\nexport function hasClientToolInterruptSource(payload: unknown): boolean {\n  return (\n    !!payload &&\n    typeof payload === 'object' &&\n    !Array.isArray(payload) &&\n    (payload as { source?: unknown }).source === CLIENT_TOOL_INTERRUPT_SOURCE\n  );\n}\n\nexport function isClientToolInterrupt(\n  payload: unknown,\n): payload is ClientToolInterruptPayload {\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {\n    return false;\n  }\n  const candidate = payload as Partial<ClientToolInterruptPayload>;\n  return (\n    candidate.source === CLIENT_TOOL_INTERRUPT_SOURCE &&\n    candidate.type === CLIENT_TOOL_INTERRUPT_SOURCE &&\n    typeof candidate.context === 'object' &&\n    candidate.context !== null &&\n    Array.isArray(candidate.context.requests) &&\n    candidate.context.requests.length > 0 &&\n    candidate.context.requests.every(isClientToolCallRequest)\n  );\n}\n\n/** Tool arguments from a call request, defaulting to an empty object. */\nexport function clientToolCallArgs(\n  request: ClientToolCallRequest,\n): Record<string, unknown> {\n  const args = request.tool_args;\n  return args && typeof args === 'object' && !Array.isArray(args) ? args : {};\n}\n\n/** The `run/input` resume value answering a batched client-tool park. */\nexport function clientToolResultsResumeValue(\n  results: Record<string, ClientToolResultEnvelope>,\n): Record<string, unknown> {\n  return { client_tool_results: results };\n}\n\n/** Wire entries for `runConfig.custom.client_tools`. */\nexport function clientToolRunConfigEntries(\n  tools: readonly RegisteredClientTool[],\n): Record<string, unknown>[] {\n  return tools.map(({ definition }) => ({\n    name: definition.name,\n    description: definition.description,\n    parameters: definition.parameters,\n    requires_write: definition.requiresWrite,\n  }));\n}\n\n/** Successful tool execution, resumed back into the parked run. */\nexport interface ClientToolSuccessEnvelope {\n  status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS;\n  result: unknown;\n}\n\n/** Failed or declined tool execution, resumed back into the parked run. */\nexport interface ClientToolErrorEnvelope {\n  status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR;\n  error: string;\n}\n\nexport type ClientToolResultEnvelope =\n  | ClientToolSuccessEnvelope\n  | ClientToolErrorEnvelope;\n\nexport function clientToolSuccessEnvelope(\n  result: unknown,\n): ClientToolSuccessEnvelope {\n  return {\n    status: CLIENT_TOOL_RESULT_STATUS_SUCCESS,\n    result: result === undefined ? null : result,\n  };\n}\n\nexport function clientToolErrorEnvelope(error: unknown): ClientToolErrorEnvelope {\n  const message =\n    error instanceof Error\n      ? error.message\n      : typeof error === 'string'\n        ? error\n        : 'Client tool execution failed.';\n  return { status: CLIENT_TOOL_RESULT_STATUS_ERROR, error: message };\n}\n\n/**\n * Once-per-request execution guard. Statewire re-emits the pending input\n * request on every state update, so an executor effect can observe the same\n * request many times; the tracker makes exactly one observation win.\n */\nexport interface ClientToolRequestTracker {\n  /** True exactly once per request id; later calls return false. */\n  claim(requestId: string): boolean;\n  /** Un-claim a request that was NOT resumed (e.g. abandoned mid-approval),\n   * so a re-emitted request can be executed instead of stranding the run. */\n  release(requestId: string): void;\n  has(requestId: string): boolean;\n  /** Cache the completed, wire-safe resume value without releasing the\n   * exactly-once execution claim. A reconnect may replay this value, but it\n   * must never execute the local handler again. */\n  cacheResume(requestId: string, value: Record<string, unknown>): void;\n  getCachedResume(requestId: string): ClientToolCachedResume | undefined;\n  /** Give one mounted bridge ownership of retrying a cached resume. */\n  claimResumeReplay(requestId: string, owner: symbol): boolean;\n  releaseResumeReplay(requestId: string, owner: symbol): void;\n  /** Record authoritative host acceptance. The execution claim remains held\n   * so a briefly stale request cannot execute its local side effects again. */\n  settleResume(requestId: string): void;\n  /** Atomically consume one bounded replay attempt for the current owner. */\n  takeResumeAttempt(\n    requestId: string,\n    options: { owner: symbol; maxAttempts: number },\n  ): ClientToolResumeAttempt | undefined;\n}\n\nexport interface ClientToolCachedResume {\n  value: Record<string, unknown>;\n  attemptCount: number;\n}\n\nexport interface ClientToolResumeAttempt {\n  value: Record<string, unknown>;\n  attemptNumber: number;\n}\n\nexport interface CreateClientToolRequestTrackerOptions {\n  /** Maximum completed resume values retained for reconnect recovery. Active\n   * executions are never evicted. */\n  maxCachedResumes?: number;\n}\n\ninterface ClientToolRequestEntry {\n  resumeValue?: Record<string, unknown>;\n  resumeAttemptCount: number;\n  resumeOwner?: symbol;\n  settled?: boolean;\n}\n\nconst DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES = 128;\n\nexport function createClientToolRequestTracker(\n  options: CreateClientToolRequestTrackerOptions = {},\n): ClientToolRequestTracker {\n  const maxCachedResumes = options.maxCachedResumes ?? DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES;\n  const requests = new Map<string, ClientToolRequestEntry>();\n\n  const pruneCompletedRequests = (protectedRequestId?: string): void => {\n    let completedCount = 0;\n    for (const entry of requests.values()) {\n      if (entry.resumeValue !== undefined || entry.settled === true) completedCount += 1;\n    }\n    if (completedCount <= maxCachedResumes) return;\n\n    // Map iteration is insertion order. Only inactive, completed entries are\n    // eligible: evicting an executing request could allow a document mutation\n    // to run twice, evicting an active replay would split ownership, and the\n    // newly completed request must survive long enough for its first dispatch.\n    for (const [requestId, entry] of requests) {\n      if (completedCount <= maxCachedResumes) break;\n      if (\n        requestId === protectedRequestId ||\n        (entry.resumeValue === undefined && entry.settled !== true) ||\n        entry.resumeOwner !== undefined\n      ) {\n        continue;\n      }\n      requests.delete(requestId);\n      completedCount -= 1;\n    }\n  };\n\n  return {\n    claim(requestId: string): boolean {\n      if (requests.has(requestId)) return false;\n      requests.set(requestId, { resumeAttemptCount: 0 });\n      return true;\n    },\n    release(requestId: string): void {\n      requests.delete(requestId);\n    },\n    has(requestId: string): boolean {\n      return requests.has(requestId);\n    },\n    cacheResume(requestId: string, value: Record<string, unknown>): void {\n      const entry = requests.get(requestId) ?? { resumeAttemptCount: 0 };\n      entry.resumeValue = value;\n      entry.settled = false;\n      requests.delete(requestId);\n      requests.set(requestId, entry);\n      pruneCompletedRequests(requestId);\n    },\n    getCachedResume(requestId: string): ClientToolCachedResume | undefined {\n      const entry = requests.get(requestId);\n      if (!entry || entry.resumeValue === undefined) return undefined;\n      return {\n        value: entry.resumeValue,\n        attemptCount: entry.resumeAttemptCount,\n      };\n    },\n    claimResumeReplay(requestId: string, owner: symbol): boolean {\n      const entry = requests.get(requestId);\n      if (!entry || entry.resumeValue === undefined) return false;\n      if (entry.resumeOwner !== undefined && entry.resumeOwner !== owner) {\n        return false;\n      }\n      entry.resumeOwner = owner;\n      return true;\n    },\n    releaseResumeReplay(requestId: string, owner: symbol): void {\n      const entry = requests.get(requestId);\n      if (entry?.resumeOwner === owner) entry.resumeOwner = undefined;\n      pruneCompletedRequests();\n    },\n    settleResume(requestId: string): void {\n      const entry = requests.get(requestId);\n      if (!entry) return;\n      entry.resumeValue = undefined;\n      entry.resumeOwner = undefined;\n      entry.settled = true;\n      requests.delete(requestId);\n      requests.set(requestId, entry);\n      pruneCompletedRequests(requestId);\n    },\n    takeResumeAttempt(\n      requestId: string,\n      attemptOptions: { owner: symbol; maxAttempts: number },\n    ): ClientToolResumeAttempt | undefined {\n      const entry = requests.get(requestId);\n      if (\n        !entry ||\n        entry.resumeValue === undefined ||\n        entry.resumeOwner !== attemptOptions.owner ||\n        entry.resumeAttemptCount >= attemptOptions.maxAttempts\n      ) {\n        return undefined;\n      }\n      entry.resumeAttemptCount += 1;\n      return {\n        value: entry.resumeValue,\n        attemptNumber: entry.resumeAttemptCount,\n      };\n    },\n  };\n}\n"],"names":["CLIENT_TOOL_INTERRUPT_SOURCE","CLIENT_TOOL_RESULT_STATUS_SUCCESS","CLIENT_TOOL_RESULT_STATUS_ERROR"],"mappings":";;;AA8EA,SAAS,wBAAwB,OAAgD;AAC/E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,YAAY;AAClB,SACE,OAAO,UAAU,iBAAiB,YAClC,UAAU,aAAa,SAAS,KAChC,OAAO,UAAU,cAAc;AAEnC;AASO,SAAS,6BAA6B,SAA2B;AACtE,SACE,CAAC,CAAC,WACF,OAAO,YAAY,YACnB,CAAC,MAAM,QAAQ,OAAO,KACrB,QAAiC,WAAWA,kBAAAA;AAEjD;AAEO,SAAS,sBACd,SACuC;AACvC,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG;AACrE,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAClB,SACE,UAAU,WAAWA,kBAAAA,gCACrB,UAAU,SAASA,kBAAAA,gCACnB,OAAO,UAAU,YAAY,YAC7B,UAAU,YAAY,QACtB,MAAM,QAAQ,UAAU,QAAQ,QAAQ,KACxC,UAAU,QAAQ,SAAS,SAAS,KACpC,UAAU,QAAQ,SAAS,MAAM,uBAAuB;AAE5D;AAGO,SAAS,mBACd,SACyB;AACzB,QAAM,OAAO,QAAQ;AACrB,SAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AAC3E;AAGO,SAAS,6BACd,SACyB;AACzB,SAAO,EAAE,qBAAqB,QAAA;AAChC;AAGO,SAAS,2BACd,OAC2B;AAC3B,SAAO,MAAM,IAAI,CAAC,EAAE,kBAAkB;AAAA,IACpC,MAAM,WAAW;AAAA,IACjB,aAAa,WAAW;AAAA,IACxB,YAAY,WAAW;AAAA,IACvB,gBAAgB,WAAW;AAAA,EAAA,EAC3B;AACJ;AAkBO,SAAS,0BACd,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQC,kBAAAA;AAAAA,IACR,QAAQ,WAAW,SAAY,OAAO;AAAA,EAAA;AAE1C;AAEO,SAAS,wBAAwB,OAAyC;AAC/E,QAAM,UACJ,iBAAiB,QACb,MAAM,UACN,OAAO,UAAU,WACf,QACA;AACR,SAAO,EAAE,QAAQC,mDAAiC,OAAO,QAAA;AAC3D;AAuDA,MAAM,yCAAyC;AAExC,SAAS,+BACd,UAAiD,IACvB;AAC1B,QAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAM,+BAAe,IAAA;AAErB,QAAM,yBAAyB,CAAC,uBAAsC;AACpE,QAAI,iBAAiB;AACrB,eAAW,SAAS,SAAS,UAAU;AACrC,UAAI,MAAM,gBAAgB,UAAa,MAAM,YAAY,KAAM,mBAAkB;AAAA,IACnF;AACA,QAAI,kBAAkB,iBAAkB;AAMxC,eAAW,CAAC,WAAW,KAAK,KAAK,UAAU;AACzC,UAAI,kBAAkB,iBAAkB;AACxC,UACE,cAAc,sBACb,MAAM,gBAAgB,UAAa,MAAM,YAAY,QACtD,MAAM,gBAAgB,QACtB;AACA;AAAA,MACF;AACA,eAAS,OAAO,SAAS;AACzB,wBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,WAA4B;AAChC,UAAI,SAAS,IAAI,SAAS,EAAG,QAAO;AACpC,eAAS,IAAI,WAAW,EAAE,oBAAoB,GAAG;AACjD,aAAO;AAAA,IACT;AAAA,IACA,QAAQ,WAAyB;AAC/B,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,IACA,IAAI,WAA4B;AAC9B,aAAO,SAAS,IAAI,SAAS;AAAA,IAC/B;AAAA,IACA,YAAY,WAAmB,OAAsC;AACnE,YAAM,QAAQ,SAAS,IAAI,SAAS,KAAK,EAAE,oBAAoB,EAAA;AAC/D,YAAM,cAAc;AACpB,YAAM,UAAU;AAChB,eAAS,OAAO,SAAS;AACzB,eAAS,IAAI,WAAW,KAAK;AAC7B,6BAAuB,SAAS;AAAA,IAClC;AAAA,IACA,gBAAgB,WAAuD;AACrE,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,SAAS,MAAM,gBAAgB,OAAW,QAAO;AACtD,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,cAAc,MAAM;AAAA,MAAA;AAAA,IAExB;AAAA,IACA,kBAAkB,WAAmB,OAAwB;AAC3D,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,SAAS,MAAM,gBAAgB,OAAW,QAAO;AACtD,UAAI,MAAM,gBAAgB,UAAa,MAAM,gBAAgB,OAAO;AAClE,eAAO;AAAA,MACT;AACA,YAAM,cAAc;AACpB,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB,WAAmB,OAAqB;AAC1D,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,WAAI,+BAAO,iBAAgB,MAAO,OAAM,cAAc;AACtD,6BAAA;AAAA,IACF;AAAA,IACA,aAAa,WAAyB;AACpC,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,MAAO;AACZ,YAAM,cAAc;AACpB,YAAM,cAAc;AACpB,YAAM,UAAU;AAChB,eAAS,OAAO,SAAS;AACzB,eAAS,IAAI,WAAW,KAAK;AAC7B,6BAAuB,SAAS;AAAA,IAClC;AAAA,IACA,kBACE,WACA,gBACqC;AACrC,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UACE,CAAC,SACD,MAAM,gBAAgB,UACtB,MAAM,gBAAgB,eAAe,SACrC,MAAM,sBAAsB,eAAe,aAC3C;AACA,eAAO;AAAA,MACT;AACA,YAAM,sBAAsB;AAC5B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,eAAe,MAAM;AAAA,MAAA;AAAA,IAEzB;AAAA,EAAA;AAEJ;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/client-tools.js

@@ -0,0 +1,137 @@
+import { CLIENT_TOOL_INTERRUPT_SOURCE, CLIENT_TOOL_RESULT_STATUS_ERROR, CLIENT_TOOL_RESULT_STATUS_SUCCESS } from "./generated/runconfig-contract.js";
+function isClientToolCallRequest(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const candidate = value;
+  return typeof candidate.interrupt_id === "string" && candidate.interrupt_id.length > 0 && typeof candidate.tool_name === "string";
+}
+function hasClientToolInterruptSource(payload) {
+  return !!payload && typeof payload === "object" && !Array.isArray(payload) && payload.source === CLIENT_TOOL_INTERRUPT_SOURCE;
+}
+function isClientToolInterrupt(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    return false;
+  }
+  const candidate = payload;
+  return candidate.source === CLIENT_TOOL_INTERRUPT_SOURCE && candidate.type === CLIENT_TOOL_INTERRUPT_SOURCE && typeof candidate.context === "object" && candidate.context !== null && Array.isArray(candidate.context.requests) && candidate.context.requests.length > 0 && candidate.context.requests.every(isClientToolCallRequest);
+}
+function clientToolCallArgs(request) {
+  const args = request.tool_args;
+  return args && typeof args === "object" && !Array.isArray(args) ? args : {};
+}
+function clientToolResultsResumeValue(results) {
+  return { client_tool_results: results };
+}
+function clientToolRunConfigEntries(tools) {
+  return tools.map(({ definition }) => ({
+    name: definition.name,
+    description: definition.description,
+    parameters: definition.parameters,
+    requires_write: definition.requiresWrite
+  }));
+}
+function clientToolSuccessEnvelope(result) {
+  return {
+    status: CLIENT_TOOL_RESULT_STATUS_SUCCESS,
+    result: result === void 0 ? null : result
+  };
+}
+function clientToolErrorEnvelope(error) {
+  const message = error instanceof Error ? error.message : typeof error === "string" ? error : "Client tool execution failed.";
+  return { status: CLIENT_TOOL_RESULT_STATUS_ERROR, error: message };
+}
+const DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES = 128;
+function createClientToolRequestTracker(options = {}) {
+  const maxCachedResumes = options.maxCachedResumes ?? DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES;
+  const requests = /* @__PURE__ */ new Map();
+  const pruneCompletedRequests = (protectedRequestId) => {
+    let completedCount = 0;
+    for (const entry of requests.values()) {
+      if (entry.resumeValue !== void 0 || entry.settled === true) completedCount += 1;
+    }
+    if (completedCount <= maxCachedResumes) return;
+    for (const [requestId, entry] of requests) {
+      if (completedCount <= maxCachedResumes) break;
+      if (requestId === protectedRequestId || entry.resumeValue === void 0 && entry.settled !== true || entry.resumeOwner !== void 0) {
+        continue;
+      }
+      requests.delete(requestId);
+      completedCount -= 1;
+    }
+  };
+  return {
+    claim(requestId) {
+      if (requests.has(requestId)) return false;
+      requests.set(requestId, { resumeAttemptCount: 0 });
+      return true;
+    },
+    release(requestId) {
+      requests.delete(requestId);
+    },
+    has(requestId) {
+      return requests.has(requestId);
+    },
+    cacheResume(requestId, value) {
+      const entry = requests.get(requestId) ?? { resumeAttemptCount: 0 };
+      entry.resumeValue = value;
+      entry.settled = false;
+      requests.delete(requestId);
+      requests.set(requestId, entry);
+      pruneCompletedRequests(requestId);
+    },
+    getCachedResume(requestId) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0) return void 0;
+      return {
+        value: entry.resumeValue,
+        attemptCount: entry.resumeAttemptCount
+      };
+    },
+    claimResumeReplay(requestId, owner) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0) return false;
+      if (entry.resumeOwner !== void 0 && entry.resumeOwner !== owner) {
+        return false;
+      }
+      entry.resumeOwner = owner;
+      return true;
+    },
+    releaseResumeReplay(requestId, owner) {
+      const entry = requests.get(requestId);
+      if ((entry == null ? void 0 : entry.resumeOwner) === owner) entry.resumeOwner = void 0;
+      pruneCompletedRequests();
+    },
+    settleResume(requestId) {
+      const entry = requests.get(requestId);
+      if (!entry) return;
+      entry.resumeValue = void 0;
+      entry.resumeOwner = void 0;
+      entry.settled = true;
+      requests.delete(requestId);
+      requests.set(requestId, entry);
+      pruneCompletedRequests(requestId);
+    },
+    takeResumeAttempt(requestId, attemptOptions) {
+      const entry = requests.get(requestId);
+      if (!entry || entry.resumeValue === void 0 || entry.resumeOwner !== attemptOptions.owner || entry.resumeAttemptCount >= attemptOptions.maxAttempts) {
+        return void 0;
+      }
+      entry.resumeAttemptCount += 1;
+      return {
+        value: entry.resumeValue,
+        attemptNumber: entry.resumeAttemptCount
+      };
+    }
+  };
+}
+export {
+  CLIENT_TOOL_INTERRUPT_SOURCE,
+  clientToolCallArgs,
+  clientToolErrorEnvelope,
+  clientToolResultsResumeValue,
+  clientToolRunConfigEntries,
+  clientToolSuccessEnvelope,
+  createClientToolRequestTracker,
+  hasClientToolInterruptSource,
+  isClientToolInterrupt
+};
+//# sourceMappingURL=client-tools.js.map

package/dist/packages/agent-runtime/src/client-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-tools.js","sources":["../../../../../agent-runtime/src/client-tools.ts"],"sourcesContent":["/**\n * Client-executed tools for statewire deep-agent threads.\n *\n * A client (the Office add-in, the Chrome extension, …) declares tools it can\n * execute locally by sending their JSON-schema definitions through\n * `runConfig.custom.client_tools`. The deep-agent runtime binds them as\n * interrupt-backed tools: when the model calls one, the run parks on a\n * LangGraph interrupt whose payload carries the tool name and arguments, the\n * statewire host publishes it as an `interrupt` input request, and the client\n * executes the tool and resumes the run with the result envelope.\n *\n * This module is transport-agnostic: it holds the wire contract (definitions,\n * interrupt payload shape, result envelopes) and a duplicate-execution guard.\n * The React hook that watches input requests lives with each client, next to\n * its host-specific tool handlers.\n */\n\nimport {\n  CLIENT_TOOL_INTERRUPT_SOURCE,\n  CLIENT_TOOL_RESULT_STATUS_ERROR,\n  CLIENT_TOOL_RESULT_STATUS_SUCCESS,\n} from './generated/runconfig-contract';\n\n/** `source`/`type` stamped on the interrupt payload by the agora runtime. */\nexport { CLIENT_TOOL_INTERRUPT_SOURCE } from './generated/runconfig-contract';\n\n/** JSON-schema description of one client-executed tool. */\nexport interface ClientToolDefinition {\n  /** Snake_case tool id the model calls (e.g. `update_sheet_range`). */\n  name: string;\n  description: string;\n  /** JSON schema for the tool arguments (`{\"type\": \"object\", ...}`). */\n  parameters: Record<string, unknown>;\n  /** Mutating tools gate on the client's write-approval flow before running. */\n  requiresWrite: boolean;\n}\n\n/** Per-call context the client-tool bridge hands a handler; absent when a host\n * invokes a handler outside a parked run. */\nexport interface ClientToolHandlerContext {\n  /** The model's tool-call id, for handlers that correlate calls. */\n  toolCallId: string;\n}\n\nexport type ClientToolHandler = (\n  args: Record<string, unknown>,\n  context?: ClientToolHandlerContext,\n) => Promise<unknown>;\n\nexport interface RegisteredClientTool {\n  definition: ClientToolDefinition;\n  handler: ClientToolHandler;\n}\n\n/** One parked tool call inside a batched client-tool input request. */\nexport interface ClientToolCallRequest {\n  /** LangGraph interrupt id — the key the resume result map must use. */\n  interrupt_id: string;\n  tool_name: string;\n  tool_args: Record<string, unknown>;\n  requires_write?: boolean;\n}\n\n/**\n * The input-request payload the agora runtime publishes for parked client\n * tool calls. A parallel model turn parks several interrupts at once; the\n * runtime batches them into one payload and the client answers once with\n * `{ client_tool_results: { <interrupt_id>: <result envelope> } }`.\n */\nexport interface ClientToolInterruptPayload {\n  source: typeof CLIENT_TOOL_INTERRUPT_SOURCE;\n  type: typeof CLIENT_TOOL_INTERRUPT_SOURCE;\n  message: string;\n  context: {\n    requests: ClientToolCallRequest[];\n  };\n}\n\nfunction isClientToolCallRequest(value: unknown): value is ClientToolCallRequest {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;\n  const candidate = value as Partial<ClientToolCallRequest>;\n  return (\n    typeof candidate.interrupt_id === 'string' &&\n    candidate.interrupt_id.length > 0 &&\n    typeof candidate.tool_name === 'string'\n  );\n}\n\n/**\n * Loose source check for surfaces that must NOT handle a client-tool park\n * (e.g. the generic approval banner). Unlike `isClientToolInterrupt`, this\n * matches any payload stamped with the client-tool source — including shapes\n * from a mismatched client/server version — so a skewed deploy can never\n * surface a generic \"Continue\" resume that corrupts a parked tool call.\n */\nexport function hasClientToolInterruptSource(payload: unknown): boolean {\n  return (\n    !!payload &&\n    typeof payload === 'object' &&\n    !Array.isArray(payload) &&\n    (payload as { source?: unknown }).source === CLIENT_TOOL_INTERRUPT_SOURCE\n  );\n}\n\nexport function isClientToolInterrupt(\n  payload: unknown,\n): payload is ClientToolInterruptPayload {\n  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {\n    return false;\n  }\n  const candidate = payload as Partial<ClientToolInterruptPayload>;\n  return (\n    candidate.source === CLIENT_TOOL_INTERRUPT_SOURCE &&\n    candidate.type === CLIENT_TOOL_INTERRUPT_SOURCE &&\n    typeof candidate.context === 'object' &&\n    candidate.context !== null &&\n    Array.isArray(candidate.context.requests) &&\n    candidate.context.requests.length > 0 &&\n    candidate.context.requests.every(isClientToolCallRequest)\n  );\n}\n\n/** Tool arguments from a call request, defaulting to an empty object. */\nexport function clientToolCallArgs(\n  request: ClientToolCallRequest,\n): Record<string, unknown> {\n  const args = request.tool_args;\n  return args && typeof args === 'object' && !Array.isArray(args) ? args : {};\n}\n\n/** The `run/input` resume value answering a batched client-tool park. */\nexport function clientToolResultsResumeValue(\n  results: Record<string, ClientToolResultEnvelope>,\n): Record<string, unknown> {\n  return { client_tool_results: results };\n}\n\n/** Wire entries for `runConfig.custom.client_tools`. */\nexport function clientToolRunConfigEntries(\n  tools: readonly RegisteredClientTool[],\n): Record<string, unknown>[] {\n  return tools.map(({ definition }) => ({\n    name: definition.name,\n    description: definition.description,\n    parameters: definition.parameters,\n    requires_write: definition.requiresWrite,\n  }));\n}\n\n/** Successful tool execution, resumed back into the parked run. */\nexport interface ClientToolSuccessEnvelope {\n  status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS;\n  result: unknown;\n}\n\n/** Failed or declined tool execution, resumed back into the parked run. */\nexport interface ClientToolErrorEnvelope {\n  status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR;\n  error: string;\n}\n\nexport type ClientToolResultEnvelope =\n  | ClientToolSuccessEnvelope\n  | ClientToolErrorEnvelope;\n\nexport function clientToolSuccessEnvelope(\n  result: unknown,\n): ClientToolSuccessEnvelope {\n  return {\n    status: CLIENT_TOOL_RESULT_STATUS_SUCCESS,\n    result: result === undefined ? null : result,\n  };\n}\n\nexport function clientToolErrorEnvelope(error: unknown): ClientToolErrorEnvelope {\n  const message =\n    error instanceof Error\n      ? error.message\n      : typeof error === 'string'\n        ? error\n        : 'Client tool execution failed.';\n  return { status: CLIENT_TOOL_RESULT_STATUS_ERROR, error: message };\n}\n\n/**\n * Once-per-request execution guard. Statewire re-emits the pending input\n * request on every state update, so an executor effect can observe the same\n * request many times; the tracker makes exactly one observation win.\n */\nexport interface ClientToolRequestTracker {\n  /** True exactly once per request id; later calls return false. */\n  claim(requestId: string): boolean;\n  /** Un-claim a request that was NOT resumed (e.g. abandoned mid-approval),\n   * so a re-emitted request can be executed instead of stranding the run. */\n  release(requestId: string): void;\n  has(requestId: string): boolean;\n  /** Cache the completed, wire-safe resume value without releasing the\n   * exactly-once execution claim. A reconnect may replay this value, but it\n   * must never execute the local handler again. */\n  cacheResume(requestId: string, value: Record<string, unknown>): void;\n  getCachedResume(requestId: string): ClientToolCachedResume | undefined;\n  /** Give one mounted bridge ownership of retrying a cached resume. */\n  claimResumeReplay(requestId: string, owner: symbol): boolean;\n  releaseResumeReplay(requestId: string, owner: symbol): void;\n  /** Record authoritative host acceptance. The execution claim remains held\n   * so a briefly stale request cannot execute its local side effects again. */\n  settleResume(requestId: string): void;\n  /** Atomically consume one bounded replay attempt for the current owner. */\n  takeResumeAttempt(\n    requestId: string,\n    options: { owner: symbol; maxAttempts: number },\n  ): ClientToolResumeAttempt | undefined;\n}\n\nexport interface ClientToolCachedResume {\n  value: Record<string, unknown>;\n  attemptCount: number;\n}\n\nexport interface ClientToolResumeAttempt {\n  value: Record<string, unknown>;\n  attemptNumber: number;\n}\n\nexport interface CreateClientToolRequestTrackerOptions {\n  /** Maximum completed resume values retained for reconnect recovery. Active\n   * executions are never evicted. */\n  maxCachedResumes?: number;\n}\n\ninterface ClientToolRequestEntry {\n  resumeValue?: Record<string, unknown>;\n  resumeAttemptCount: number;\n  resumeOwner?: symbol;\n  settled?: boolean;\n}\n\nconst DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES = 128;\n\nexport function createClientToolRequestTracker(\n  options: CreateClientToolRequestTrackerOptions = {},\n): ClientToolRequestTracker {\n  const maxCachedResumes = options.maxCachedResumes ?? DEFAULT_MAX_CACHED_CLIENT_TOOL_RESUMES;\n  const requests = new Map<string, ClientToolRequestEntry>();\n\n  const pruneCompletedRequests = (protectedRequestId?: string): void => {\n    let completedCount = 0;\n    for (const entry of requests.values()) {\n      if (entry.resumeValue !== undefined || entry.settled === true) completedCount += 1;\n    }\n    if (completedCount <= maxCachedResumes) return;\n\n    // Map iteration is insertion order. Only inactive, completed entries are\n    // eligible: evicting an executing request could allow a document mutation\n    // to run twice, evicting an active replay would split ownership, and the\n    // newly completed request must survive long enough for its first dispatch.\n    for (const [requestId, entry] of requests) {\n      if (completedCount <= maxCachedResumes) break;\n      if (\n        requestId === protectedRequestId ||\n        (entry.resumeValue === undefined && entry.settled !== true) ||\n        entry.resumeOwner !== undefined\n      ) {\n        continue;\n      }\n      requests.delete(requestId);\n      completedCount -= 1;\n    }\n  };\n\n  return {\n    claim(requestId: string): boolean {\n      if (requests.has(requestId)) return false;\n      requests.set(requestId, { resumeAttemptCount: 0 });\n      return true;\n    },\n    release(requestId: string): void {\n      requests.delete(requestId);\n    },\n    has(requestId: string): boolean {\n      return requests.has(requestId);\n    },\n    cacheResume(requestId: string, value: Record<string, unknown>): void {\n      const entry = requests.get(requestId) ?? { resumeAttemptCount: 0 };\n      entry.resumeValue = value;\n      entry.settled = false;\n      requests.delete(requestId);\n      requests.set(requestId, entry);\n      pruneCompletedRequests(requestId);\n    },\n    getCachedResume(requestId: string): ClientToolCachedResume | undefined {\n      const entry = requests.get(requestId);\n      if (!entry || entry.resumeValue === undefined) return undefined;\n      return {\n        value: entry.resumeValue,\n        attemptCount: entry.resumeAttemptCount,\n      };\n    },\n    claimResumeReplay(requestId: string, owner: symbol): boolean {\n      const entry = requests.get(requestId);\n      if (!entry || entry.resumeValue === undefined) return false;\n      if (entry.resumeOwner !== undefined && entry.resumeOwner !== owner) {\n        return false;\n      }\n      entry.resumeOwner = owner;\n      return true;\n    },\n    releaseResumeReplay(requestId: string, owner: symbol): void {\n      const entry = requests.get(requestId);\n      if (entry?.resumeOwner === owner) entry.resumeOwner = undefined;\n      pruneCompletedRequests();\n    },\n    settleResume(requestId: string): void {\n      const entry = requests.get(requestId);\n      if (!entry) return;\n      entry.resumeValue = undefined;\n      entry.resumeOwner = undefined;\n      entry.settled = true;\n      requests.delete(requestId);\n      requests.set(requestId, entry);\n      pruneCompletedRequests(requestId);\n    },\n    takeResumeAttempt(\n      requestId: string,\n      attemptOptions: { owner: symbol; maxAttempts: number },\n    ): ClientToolResumeAttempt | undefined {\n      const entry = requests.get(requestId);\n      if (\n        !entry ||\n        entry.resumeValue === undefined ||\n        entry.resumeOwner !== attemptOptions.owner ||\n        entry.resumeAttemptCount >= attemptOptions.maxAttempts\n      ) {\n        return undefined;\n      }\n      entry.resumeAttemptCount += 1;\n      return {\n        value: entry.resumeValue,\n        attemptNumber: entry.resumeAttemptCount,\n      };\n    },\n  };\n}\n"],"names":[],"mappings":";AA8EA,SAAS,wBAAwB,OAAgD;AAC/E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AACxE,QAAM,YAAY;AAClB,SACE,OAAO,UAAU,iBAAiB,YAClC,UAAU,aAAa,SAAS,KAChC,OAAO,UAAU,cAAc;AAEnC;AASO,SAAS,6BAA6B,SAA2B;AACtE,SACE,CAAC,CAAC,WACF,OAAO,YAAY,YACnB,CAAC,MAAM,QAAQ,OAAO,KACrB,QAAiC,WAAW;AAEjD;AAEO,SAAS,sBACd,SACuC;AACvC,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,GAAG;AACrE,WAAO;AAAA,EACT;AACA,QAAM,YAAY;AAClB,SACE,UAAU,WAAW,gCACrB,UAAU,SAAS,gCACnB,OAAO,UAAU,YAAY,YAC7B,UAAU,YAAY,QACtB,MAAM,QAAQ,UAAU,QAAQ,QAAQ,KACxC,UAAU,QAAQ,SAAS,SAAS,KACpC,UAAU,QAAQ,SAAS,MAAM,uBAAuB;AAE5D;AAGO,SAAS,mBACd,SACyB;AACzB,QAAM,OAAO,QAAQ;AACrB,SAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,IAAI,OAAO,CAAA;AAC3E;AAGO,SAAS,6BACd,SACyB;AACzB,SAAO,EAAE,qBAAqB,QAAA;AAChC;AAGO,SAAS,2BACd,OAC2B;AAC3B,SAAO,MAAM,IAAI,CAAC,EAAE,kBAAkB;AAAA,IACpC,MAAM,WAAW;AAAA,IACjB,aAAa,WAAW;AAAA,IACxB,YAAY,WAAW;AAAA,IACvB,gBAAgB,WAAW;AAAA,EAAA,EAC3B;AACJ;AAkBO,SAAS,0BACd,QAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,QAAQ,WAAW,SAAY,OAAO;AAAA,EAAA;AAE1C;AAEO,SAAS,wBAAwB,OAAyC;AAC/E,QAAM,UACJ,iBAAiB,QACb,MAAM,UACN,OAAO,UAAU,WACf,QACA;AACR,SAAO,EAAE,QAAQ,iCAAiC,OAAO,QAAA;AAC3D;AAuDA,MAAM,yCAAyC;AAExC,SAAS,+BACd,UAAiD,IACvB;AAC1B,QAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAM,+BAAe,IAAA;AAErB,QAAM,yBAAyB,CAAC,uBAAsC;AACpE,QAAI,iBAAiB;AACrB,eAAW,SAAS,SAAS,UAAU;AACrC,UAAI,MAAM,gBAAgB,UAAa,MAAM,YAAY,KAAM,mBAAkB;AAAA,IACnF;AACA,QAAI,kBAAkB,iBAAkB;AAMxC,eAAW,CAAC,WAAW,KAAK,KAAK,UAAU;AACzC,UAAI,kBAAkB,iBAAkB;AACxC,UACE,cAAc,sBACb,MAAM,gBAAgB,UAAa,MAAM,YAAY,QACtD,MAAM,gBAAgB,QACtB;AACA;AAAA,MACF;AACA,eAAS,OAAO,SAAS;AACzB,wBAAkB;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,WAA4B;AAChC,UAAI,SAAS,IAAI,SAAS,EAAG,QAAO;AACpC,eAAS,IAAI,WAAW,EAAE,oBAAoB,GAAG;AACjD,aAAO;AAAA,IACT;AAAA,IACA,QAAQ,WAAyB;AAC/B,eAAS,OAAO,SAAS;AAAA,IAC3B;AAAA,IACA,IAAI,WAA4B;AAC9B,aAAO,SAAS,IAAI,SAAS;AAAA,IAC/B;AAAA,IACA,YAAY,WAAmB,OAAsC;AACnE,YAAM,QAAQ,SAAS,IAAI,SAAS,KAAK,EAAE,oBAAoB,EAAA;AAC/D,YAAM,cAAc;AACpB,YAAM,UAAU;AAChB,eAAS,OAAO,SAAS;AACzB,eAAS,IAAI,WAAW,KAAK;AAC7B,6BAAuB,SAAS;AAAA,IAClC;AAAA,IACA,gBAAgB,WAAuD;AACrE,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,SAAS,MAAM,gBAAgB,OAAW,QAAO;AACtD,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,cAAc,MAAM;AAAA,MAAA;AAAA,IAExB;AAAA,IACA,kBAAkB,WAAmB,OAAwB;AAC3D,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,SAAS,MAAM,gBAAgB,OAAW,QAAO;AACtD,UAAI,MAAM,gBAAgB,UAAa,MAAM,gBAAgB,OAAO;AAClE,eAAO;AAAA,MACT;AACA,YAAM,cAAc;AACpB,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB,WAAmB,OAAqB;AAC1D,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,WAAI,+BAAO,iBAAgB,MAAO,OAAM,cAAc;AACtD,6BAAA;AAAA,IACF;AAAA,IACA,aAAa,WAAyB;AACpC,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UAAI,CAAC,MAAO;AACZ,YAAM,cAAc;AACpB,YAAM,cAAc;AACpB,YAAM,UAAU;AAChB,eAAS,OAAO,SAAS;AACzB,eAAS,IAAI,WAAW,KAAK;AAC7B,6BAAuB,SAAS;AAAA,IAClC;AAAA,IACA,kBACE,WACA,gBACqC;AACrC,YAAM,QAAQ,SAAS,IAAI,SAAS;AACpC,UACE,CAAC,SACD,MAAM,gBAAgB,UACtB,MAAM,gBAAgB,eAAe,SACrC,MAAM,sBAAsB,eAAe,aAC3C;AACA,eAAO;AAAA,MACT;AACA,YAAM,sBAAsB;AAC5B,aAAO;AAAA,QACL,OAAO,MAAM;AAAA,QACb,eAAe,MAAM;AAAA,MAAA;AAAA,IAEzB;AAAA,EAAA;AAEJ;"}

package/dist/packages/agent-runtime/src/conversation-index.cjs

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const tap = require("@assistant-ui/tap");
+const react = require("react");
+const statewire = require("statewire");
+const authDenial = require("./auth-denial.cjs");
+const errors = require("./errors.cjs");
+const statewireSuspended = require("./statewire-suspended.cjs");
+const statewireTransport = require("./statewire-transport.cjs");
+function conversationIndexUrlFromStatewireUrl(statewireUrl) {
+  return statewireUrl.replace(/\/threads\/?$/, "/conversation-index");
+}
+function useConversationIndex({
+  baseUrl,
+  userId,
+  sse = false,
+  headers,
+  enabled = true
+}) {
+  var _a, _b, _c;
+  const headersRef = react.useRef(headers);
+  headersRef.current = headers;
+  const [parked, setParked] = react.useState(
+    null
+  );
+  const denialRef = react.useRef({ userId, state: authDenial.initialAuthDenialTrackerState() });
+  if (denialRef.current.userId !== userId) {
+    denialRef.current = { userId, state: authDenial.initialAuthDenialTrackerState() };
+  }
+  const isParked = parked !== null && parked.userId === userId;
+  const client = statewire.useStatewire({
+    transport: tap.withKey(
+      userId,
+      !enabled || isParked ? statewireSuspended.StatewireSuspended({
+        message: (parked == null ? void 0 : parked.message) ?? (enabled ? "Conversation index authorization was refused." : "Conversation index is waiting for a signed-in user."),
+        ...enabled ? {
+          onReconnectRequested: () => {
+            denialRef.current = { userId, state: authDenial.initialAuthDenialTrackerState() };
+            setParked(null);
+          }
+        } : {}
+      }) : statewireTransport.statewireTransport(
+        {
+          url: `${baseUrl.replace(/\/+$/, "")}/${encodeURIComponent(userId)}`,
+          headers: (ctx) => headersRef.current(ctx)
+        },
+        { sse }
+      )
+    ),
+    initialState: void 0
+  });
+  const denial = authDenial.observeAuthDenial(
+    denialRef.current.state,
+    errors.projectDeepAgentConnection(client.connection)
+  );
+  denialRef.current.state = denial.state;
+  const shouldPark = denial.park;
+  const parkMessage = denial.state.message;
+  react.useEffect(() => {
+    if (!enabled || !shouldPark) return;
+    setParked(
+      (prev) => (prev == null ? void 0 : prev.userId) === userId ? prev : { userId, message: parkMessage }
+    );
+  }, [enabled, shouldPark, parkMessage, userId]);
+  const commandsRef = react.useRef(client.commands);
+  commandsRef.current = client.commands;
+  const refresh = react.useCallback(() => commandsRef.current.refresh(), []);
+  const loadMore = react.useCallback(() => commandsRef.current.load_more(), []);
+  return {
+    entries: ((_a = client.state) == null ? void 0 : _a.conversations) ?? null,
+    hasNextPage: ((_b = client.state) == null ? void 0 : _b.has_more) ?? false,
+    totalCount: ((_c = client.state) == null ? void 0 : _c.total_count) ?? null,
+    connection: client.connection,
+    refresh,
+    loadMore
+  };
+}
+exports.conversationIndexUrlFromStatewireUrl = conversationIndexUrlFromStatewireUrl;
+exports.useConversationIndex = useConversationIndex;
+//# sourceMappingURL=conversation-index.cjs.map

package/dist/packages/agent-runtime/src/conversation-index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-index.cjs","sources":["../../../../../agent-runtime/src/conversation-index.ts"],"sourcesContent":["import { withKey } from '@assistant-ui/tap';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { useStatewire, type StatewireClient } from 'statewire';\nimport { initialAuthDenialTrackerState, observeAuthDenial } from './auth-denial';\nimport { projectDeepAgentConnection } from './errors';\nimport { StatewireSuspended } from './statewire-suspended';\nimport { statewireTransport } from './statewire-transport';\nimport type { DeepAgentHeadersResolver } from './use-deep-agent-thread';\n\n/**\n * Client side of the per-user conversation-index statewire (issue #29088):\n * agora replicates the newest page of the user's conversation list as one\n * state object, so thread creation / lifecycle / title changes arrive as ops\n * instead of newest-page polling. The replicated rows are renderable and the\n * typed commands extend or refresh the inclusive window; reconnects are free\n * because the protocol's snapshot-first attach IS the newest-page reconcile.\n */\nexport interface ConversationIndexEntry {\n  thread_id: string;\n  title: string;\n  updated_at: string;\n  state: string | null;\n  runtime: string | null;\n  start_channel: string | null;\n  asset_type: string;\n  asset_id: string | null;\n  app_id: string | null;\n  trigger_type: string | null;\n  last_message_preview: string | null;\n  message_count: number | null;\n  is_unread: boolean | null;\n  /**\n   * Canonical status_v2 planes, present once the publishing agora reports them\n   * (absent from snapshots replicated by an older pod during a rollout).\n   */\n  session_status?: string | null;\n  run_status?: string | null;\n}\n\ninterface ConversationIndexState {\n  conversations?: ConversationIndexEntry[];\n  has_more?: boolean;\n  total_count?: number;\n}\n\ninterface ConversationIndexCommands {\n  [key: string]: (...args: never[]) => unknown;\n  refresh(): void;\n  load_more(): void;\n}\n\nexport interface UseConversationIndexOptions {\n  /** Base URL of the conversation-index host (the `…/v2/conversation-index` mount). */\n  baseUrl: string;\n  /** The signed-in user's id — the index instance id. Callers gate mounting on it. */\n  userId: string;\n  /** Transport selection: SSE when true, WebSocket otherwise. */\n  sse?: boolean;\n  headers: DeepAgentHeadersResolver;\n  /** Park the transport until the caller has a resolved principal. */\n  enabled?: boolean;\n}\n\nexport interface UseConversationIndexResult {\n  /** Newest-page entries, or `null` until the attach snapshot applies. */\n  entries: ConversationIndexEntry[] | null;\n  hasNextPage: boolean;\n  totalCount: number | null;\n  connection: StatewireClient.Connection;\n  refresh: () => Promise<void>;\n  loadMore: () => Promise<void>;\n}\n\n/** The conversation-index host is mounted beside the threads host. */\nexport function conversationIndexUrlFromStatewireUrl(statewireUrl: string): string {\n  return statewireUrl.replace(/\\/threads\\/?$/, '/conversation-index');\n}\n\n/**\n * Attach to the user's live conversation index.\n */\nexport function useConversationIndex({\n  baseUrl,\n  userId,\n  sse = false,\n  headers,\n  enabled = true,\n}: UseConversationIndexOptions): UseConversationIndexResult {\n  const headersRef = useRef(headers);\n  headersRef.current = headers;\n  // Auth-denial park (same policy as the thread transport): the index is a\n  // pure push signal, so after a streak of `unauthorized` denials the retry\n  // loop stops instead of hammering the attach endpoint every 30s for as long\n  // as the tab lives. A remount or the parked connection's `reconnect()`\n  // re-arms it.\n  const [parked, setParked] = useState<{ userId: string; message: string | undefined } | null>(\n    null\n  );\n  const denialRef = useRef({ userId, state: initialAuthDenialTrackerState() });\n  if (denialRef.current.userId !== userId) {\n    denialRef.current = { userId, state: initialAuthDenialTrackerState() };\n  }\n  const isParked = parked !== null && parked.userId === userId;\n  const client = useStatewire<ConversationIndexState | undefined, ConversationIndexCommands>({\n    transport: withKey(\n      userId,\n      !enabled || isParked\n        ? StatewireSuspended<ConversationIndexCommands>({\n            message:\n              parked?.message ??\n              (enabled\n                ? 'Conversation index authorization was refused.'\n                : 'Conversation index is waiting for a signed-in user.'),\n            ...(enabled\n              ? {\n                  onReconnectRequested: () => {\n                    denialRef.current = { userId, state: initialAuthDenialTrackerState() };\n                    setParked(null);\n                  },\n                }\n              : {}),\n          })\n        : statewireTransport<ConversationIndexState, ConversationIndexCommands>(\n            {\n              url: `${baseUrl.replace(/\\/+$/, '')}/${encodeURIComponent(userId)}`,\n              headers: (ctx: { staleAuth: boolean }) => headersRef.current(ctx),\n            },\n            { sse }\n          )\n    ),\n    initialState: undefined,\n  });\n  // Observing during render is idempotent (the tracker dedupes by attempt\n  // number), so a re-render of the same connection state cannot double-count.\n  // The tracker consumes the projected vocabulary, never the raw connection.\n  const denial = observeAuthDenial(\n    denialRef.current.state,\n    projectDeepAgentConnection(client.connection)\n  );\n  denialRef.current.state = denial.state;\n  const shouldPark = denial.park;\n  const parkMessage = denial.state.message;\n  useEffect(() => {\n    if (!enabled || !shouldPark) return;\n    setParked((prev) =>\n      prev?.userId === userId ? prev : { userId, message: parkMessage }\n    );\n  }, [enabled, shouldPark, parkMessage, userId]);\n  const commandsRef = useRef(client.commands);\n  commandsRef.current = client.commands;\n  const refresh = useCallback(() => commandsRef.current.refresh(), []);\n  const loadMore = useCallback(() => commandsRef.current.load_more(), []);\n  return {\n    entries: client.state?.conversations ?? null,\n    hasNextPage: client.state?.has_more ?? false,\n    totalCount: client.state?.total_count ?? null,\n    connection: client.connection,\n    refresh,\n    loadMore,\n  };\n}\n\n/**\n * Stable change fingerprint over the entries a list surface reacts to. An\n * empty string means \"no snapshot yet\" — effects keyed on the fingerprint\n * should treat it as a no-op rather than an empty list. An applied-but-empty\n * snapshot serializes to `'[]'`, so deleting the last conversation still\n * changes the fingerprint. JSON-encoding keeps arbitrary titles from\n * colliding across field or entry boundaries.\n */\nexport function conversationIndexFingerprint(\n  entries: ConversationIndexEntry[] | null\n): string {\n  if (entries === null) return '';\n  return JSON.stringify(\n    entries.map((entry) => [\n      entry.thread_id,\n      entry.updated_at,\n      entry.state,\n      entry.title,\n      entry.run_status ?? null,\n      entry.is_unread ?? null,\n    ])\n  );\n}\n"],"names":["useRef","useState","initialAuthDenialTrackerState","useStatewire","withKey","StatewireSuspended","statewireTransport","observeAuthDenial","projectDeepAgentConnection","useEffect","useCallback"],"mappings":";;;;;;;;;AA0EO,SAAS,qCAAqC,cAA8B;AACjF,SAAO,aAAa,QAAQ,iBAAiB,qBAAqB;AACpE;AAKO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA,UAAU;AACZ,GAA4D;;AAC1D,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAMrB,QAAM,CAAC,QAAQ,SAAS,IAAIC,MAAAA;AAAAA,IAC1B;AAAA,EAAA;AAEF,QAAM,YAAYD,MAAAA,OAAO,EAAE,QAAQ,OAAOE,WAAAA,8BAAA,GAAiC;AAC3E,MAAI,UAAU,QAAQ,WAAW,QAAQ;AACvC,cAAU,UAAU,EAAE,QAAQ,OAAOA,WAAAA,gCAA8B;AAAA,EACrE;AACA,QAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,QAAM,SAASC,UAAAA,aAA4E;AAAA,IACzF,WAAWC,IAAAA;AAAAA,MACT;AAAA,MACA,CAAC,WAAW,WACRC,sCAA8C;AAAA,QAC5C,UACE,iCAAQ,aACP,UACG,kDACA;AAAA,QACN,GAAI,UACA;AAAA,UACE,sBAAsB,MAAM;AAC1B,sBAAU,UAAU,EAAE,QAAQ,OAAOH,WAAAA,gCAA8B;AACnE,sBAAU,IAAI;AAAA,UAChB;AAAA,QAAA,IAEF,CAAA;AAAA,MAAC,CACN,IACDI,mBAAAA;AAAAA,QACE;AAAA,UACE,KAAK,GAAG,QAAQ,QAAQ,QAAQ,EAAE,CAAC,IAAI,mBAAmB,MAAM,CAAC;AAAA,UACjE,SAAS,CAAC,QAAgC,WAAW,QAAQ,GAAG;AAAA,QAAA;AAAA,QAElE,EAAE,IAAA;AAAA,MAAI;AAAA,IACR;AAAA,IAEN,cAAc;AAAA,EAAA,CACf;AAID,QAAM,SAASC,WAAAA;AAAAA,IACb,UAAU,QAAQ;AAAA,IAClBC,OAAAA,2BAA2B,OAAO,UAAU;AAAA,EAAA;AAE9C,YAAU,QAAQ,QAAQ,OAAO;AACjC,QAAM,aAAa,OAAO;AAC1B,QAAM,cAAc,OAAO,MAAM;AACjCC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,WAAY;AAC7B;AAAA,MAAU,CAAC,UACT,6BAAM,YAAW,SAAS,OAAO,EAAE,QAAQ,SAAS,YAAA;AAAA,IAAY;AAAA,EAEpE,GAAG,CAAC,SAAS,YAAY,aAAa,MAAM,CAAC;AAC7C,QAAM,cAAcT,MAAAA,OAAO,OAAO,QAAQ;AAC1C,cAAY,UAAU,OAAO;AAC7B,QAAM,UAAUU,MAAAA,YAAY,MAAM,YAAY,QAAQ,QAAA,GAAW,EAAE;AACnE,QAAM,WAAWA,MAAAA,YAAY,MAAM,YAAY,QAAQ,UAAA,GAAa,EAAE;AACtE,SAAO;AAAA,IACL,WAAS,YAAO,UAAP,mBAAc,kBAAiB;AAAA,IACxC,eAAa,YAAO,UAAP,mBAAc,aAAY;AAAA,IACvC,cAAY,YAAO,UAAP,mBAAc,gBAAe;AAAA,IACzC,YAAY,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,EAAA;AAEJ;;;"}

package/dist/packages/agent-runtime/src/conversation-index.js

@@ -0,0 +1,80 @@
+import { withKey } from "@assistant-ui/tap";
+import { useRef, useState, useEffect, useCallback } from "react";
+import { useStatewire } from "statewire";
+import { initialAuthDenialTrackerState, observeAuthDenial } from "./auth-denial.js";
+import { projectDeepAgentConnection } from "./errors.js";
+import { StatewireSuspended } from "./statewire-suspended.js";
+import { statewireTransport } from "./statewire-transport.js";
+function conversationIndexUrlFromStatewireUrl(statewireUrl) {
+  return statewireUrl.replace(/\/threads\/?$/, "/conversation-index");
+}
+function useConversationIndex({
+  baseUrl,
+  userId,
+  sse = false,
+  headers,
+  enabled = true
+}) {
+  var _a, _b, _c;
+  const headersRef = useRef(headers);
+  headersRef.current = headers;
+  const [parked, setParked] = useState(
+    null
+  );
+  const denialRef = useRef({ userId, state: initialAuthDenialTrackerState() });
+  if (denialRef.current.userId !== userId) {
+    denialRef.current = { userId, state: initialAuthDenialTrackerState() };
+  }
+  const isParked = parked !== null && parked.userId === userId;
+  const client = useStatewire({
+    transport: withKey(
+      userId,
+      !enabled || isParked ? StatewireSuspended({
+        message: (parked == null ? void 0 : parked.message) ?? (enabled ? "Conversation index authorization was refused." : "Conversation index is waiting for a signed-in user."),
+        ...enabled ? {
+          onReconnectRequested: () => {
+            denialRef.current = { userId, state: initialAuthDenialTrackerState() };
+            setParked(null);
+          }
+        } : {}
+      }) : statewireTransport(
+        {
+          url: `${baseUrl.replace(/\/+$/, "")}/${encodeURIComponent(userId)}`,
+          headers: (ctx) => headersRef.current(ctx)
+        },
+        { sse }
+      )
+    ),
+    initialState: void 0
+  });
+  const denial = observeAuthDenial(
+    denialRef.current.state,
+    projectDeepAgentConnection(client.connection)
+  );
+  denialRef.current.state = denial.state;
+  const shouldPark = denial.park;
+  const parkMessage = denial.state.message;
+  useEffect(() => {
+    if (!enabled || !shouldPark) return;
+    setParked(
+      (prev) => (prev == null ? void 0 : prev.userId) === userId ? prev : { userId, message: parkMessage }
+    );
+  }, [enabled, shouldPark, parkMessage, userId]);
+  const commandsRef = useRef(client.commands);
+  commandsRef.current = client.commands;
+  const refresh = useCallback(() => commandsRef.current.refresh(), []);
+  const loadMore = useCallback(() => commandsRef.current.load_more(), []);
+  return {
+    entries: ((_a = client.state) == null ? void 0 : _a.conversations) ?? null,
+    hasNextPage: ((_b = client.state) == null ? void 0 : _b.has_more) ?? false,
+    totalCount: ((_c = client.state) == null ? void 0 : _c.total_count) ?? null,
+    connection: client.connection,
+    refresh,
+    loadMore
+  };
+}
+export {
+  conversationIndexUrlFromStatewireUrl,
+  useConversationIndex
+};
+//# sourceMappingURL=conversation-index.js.map

package/dist/packages/agent-runtime/src/conversation-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-index.js","sources":["../../../../../agent-runtime/src/conversation-index.ts"],"sourcesContent":["import { withKey } from '@assistant-ui/tap';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { useStatewire, type StatewireClient } from 'statewire';\nimport { initialAuthDenialTrackerState, observeAuthDenial } from './auth-denial';\nimport { projectDeepAgentConnection } from './errors';\nimport { StatewireSuspended } from './statewire-suspended';\nimport { statewireTransport } from './statewire-transport';\nimport type { DeepAgentHeadersResolver } from './use-deep-agent-thread';\n\n/**\n * Client side of the per-user conversation-index statewire (issue #29088):\n * agora replicates the newest page of the user's conversation list as one\n * state object, so thread creation / lifecycle / title changes arrive as ops\n * instead of newest-page polling. The replicated rows are renderable and the\n * typed commands extend or refresh the inclusive window; reconnects are free\n * because the protocol's snapshot-first attach IS the newest-page reconcile.\n */\nexport interface ConversationIndexEntry {\n  thread_id: string;\n  title: string;\n  updated_at: string;\n  state: string | null;\n  runtime: string | null;\n  start_channel: string | null;\n  asset_type: string;\n  asset_id: string | null;\n  app_id: string | null;\n  trigger_type: string | null;\n  last_message_preview: string | null;\n  message_count: number | null;\n  is_unread: boolean | null;\n  /**\n   * Canonical status_v2 planes, present once the publishing agora reports them\n   * (absent from snapshots replicated by an older pod during a rollout).\n   */\n  session_status?: string | null;\n  run_status?: string | null;\n}\n\ninterface ConversationIndexState {\n  conversations?: ConversationIndexEntry[];\n  has_more?: boolean;\n  total_count?: number;\n}\n\ninterface ConversationIndexCommands {\n  [key: string]: (...args: never[]) => unknown;\n  refresh(): void;\n  load_more(): void;\n}\n\nexport interface UseConversationIndexOptions {\n  /** Base URL of the conversation-index host (the `…/v2/conversation-index` mount). */\n  baseUrl: string;\n  /** The signed-in user's id — the index instance id. Callers gate mounting on it. */\n  userId: string;\n  /** Transport selection: SSE when true, WebSocket otherwise. */\n  sse?: boolean;\n  headers: DeepAgentHeadersResolver;\n  /** Park the transport until the caller has a resolved principal. */\n  enabled?: boolean;\n}\n\nexport interface UseConversationIndexResult {\n  /** Newest-page entries, or `null` until the attach snapshot applies. */\n  entries: ConversationIndexEntry[] | null;\n  hasNextPage: boolean;\n  totalCount: number | null;\n  connection: StatewireClient.Connection;\n  refresh: () => Promise<void>;\n  loadMore: () => Promise<void>;\n}\n\n/** The conversation-index host is mounted beside the threads host. */\nexport function conversationIndexUrlFromStatewireUrl(statewireUrl: string): string {\n  return statewireUrl.replace(/\\/threads\\/?$/, '/conversation-index');\n}\n\n/**\n * Attach to the user's live conversation index.\n */\nexport function useConversationIndex({\n  baseUrl,\n  userId,\n  sse = false,\n  headers,\n  enabled = true,\n}: UseConversationIndexOptions): UseConversationIndexResult {\n  const headersRef = useRef(headers);\n  headersRef.current = headers;\n  // Auth-denial park (same policy as the thread transport): the index is a\n  // pure push signal, so after a streak of `unauthorized` denials the retry\n  // loop stops instead of hammering the attach endpoint every 30s for as long\n  // as the tab lives. A remount or the parked connection's `reconnect()`\n  // re-arms it.\n  const [parked, setParked] = useState<{ userId: string; message: string | undefined } | null>(\n    null\n  );\n  const denialRef = useRef({ userId, state: initialAuthDenialTrackerState() });\n  if (denialRef.current.userId !== userId) {\n    denialRef.current = { userId, state: initialAuthDenialTrackerState() };\n  }\n  const isParked = parked !== null && parked.userId === userId;\n  const client = useStatewire<ConversationIndexState | undefined, ConversationIndexCommands>({\n    transport: withKey(\n      userId,\n      !enabled || isParked\n        ? StatewireSuspended<ConversationIndexCommands>({\n            message:\n              parked?.message ??\n              (enabled\n                ? 'Conversation index authorization was refused.'\n                : 'Conversation index is waiting for a signed-in user.'),\n            ...(enabled\n              ? {\n                  onReconnectRequested: () => {\n                    denialRef.current = { userId, state: initialAuthDenialTrackerState() };\n                    setParked(null);\n                  },\n                }\n              : {}),\n          })\n        : statewireTransport<ConversationIndexState, ConversationIndexCommands>(\n            {\n              url: `${baseUrl.replace(/\\/+$/, '')}/${encodeURIComponent(userId)}`,\n              headers: (ctx: { staleAuth: boolean }) => headersRef.current(ctx),\n            },\n            { sse }\n          )\n    ),\n    initialState: undefined,\n  });\n  // Observing during render is idempotent (the tracker dedupes by attempt\n  // number), so a re-render of the same connection state cannot double-count.\n  // The tracker consumes the projected vocabulary, never the raw connection.\n  const denial = observeAuthDenial(\n    denialRef.current.state,\n    projectDeepAgentConnection(client.connection)\n  );\n  denialRef.current.state = denial.state;\n  const shouldPark = denial.park;\n  const parkMessage = denial.state.message;\n  useEffect(() => {\n    if (!enabled || !shouldPark) return;\n    setParked((prev) =>\n      prev?.userId === userId ? prev : { userId, message: parkMessage }\n    );\n  }, [enabled, shouldPark, parkMessage, userId]);\n  const commandsRef = useRef(client.commands);\n  commandsRef.current = client.commands;\n  const refresh = useCallback(() => commandsRef.current.refresh(), []);\n  const loadMore = useCallback(() => commandsRef.current.load_more(), []);\n  return {\n    entries: client.state?.conversations ?? null,\n    hasNextPage: client.state?.has_more ?? false,\n    totalCount: client.state?.total_count ?? null,\n    connection: client.connection,\n    refresh,\n    loadMore,\n  };\n}\n\n/**\n * Stable change fingerprint over the entries a list surface reacts to. An\n * empty string means \"no snapshot yet\" — effects keyed on the fingerprint\n * should treat it as a no-op rather than an empty list. An applied-but-empty\n * snapshot serializes to `'[]'`, so deleting the last conversation still\n * changes the fingerprint. JSON-encoding keeps arbitrary titles from\n * colliding across field or entry boundaries.\n */\nexport function conversationIndexFingerprint(\n  entries: ConversationIndexEntry[] | null\n): string {\n  if (entries === null) return '';\n  return JSON.stringify(\n    entries.map((entry) => [\n      entry.thread_id,\n      entry.updated_at,\n      entry.state,\n      entry.title,\n      entry.run_status ?? null,\n      entry.is_unread ?? null,\n    ])\n  );\n}\n"],"names":[],"mappings":";;;;;;;AA0EO,SAAS,qCAAqC,cAA8B;AACjF,SAAO,aAAa,QAAQ,iBAAiB,qBAAqB;AACpE;AAKO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA,UAAU;AACZ,GAA4D;;AAC1D,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAMrB,QAAM,CAAC,QAAQ,SAAS,IAAI;AAAA,IAC1B;AAAA,EAAA;AAEF,QAAM,YAAY,OAAO,EAAE,QAAQ,OAAO,8BAAA,GAAiC;AAC3E,MAAI,UAAU,QAAQ,WAAW,QAAQ;AACvC,cAAU,UAAU,EAAE,QAAQ,OAAO,gCAA8B;AAAA,EACrE;AACA,QAAM,WAAW,WAAW,QAAQ,OAAO,WAAW;AACtD,QAAM,SAAS,aAA4E;AAAA,IACzF,WAAW;AAAA,MACT;AAAA,MACA,CAAC,WAAW,WACR,mBAA8C;AAAA,QAC5C,UACE,iCAAQ,aACP,UACG,kDACA;AAAA,QACN,GAAI,UACA;AAAA,UACE,sBAAsB,MAAM;AAC1B,sBAAU,UAAU,EAAE,QAAQ,OAAO,gCAA8B;AACnE,sBAAU,IAAI;AAAA,UAChB;AAAA,QAAA,IAEF,CAAA;AAAA,MAAC,CACN,IACD;AAAA,QACE;AAAA,UACE,KAAK,GAAG,QAAQ,QAAQ,QAAQ,EAAE,CAAC,IAAI,mBAAmB,MAAM,CAAC;AAAA,UACjE,SAAS,CAAC,QAAgC,WAAW,QAAQ,GAAG;AAAA,QAAA;AAAA,QAElE,EAAE,IAAA;AAAA,MAAI;AAAA,IACR;AAAA,IAEN,cAAc;AAAA,EAAA,CACf;AAID,QAAM,SAAS;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB,2BAA2B,OAAO,UAAU;AAAA,EAAA;AAE9C,YAAU,QAAQ,QAAQ,OAAO;AACjC,QAAM,aAAa,OAAO;AAC1B,QAAM,cAAc,OAAO,MAAM;AACjC,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,WAAY;AAC7B;AAAA,MAAU,CAAC,UACT,6BAAM,YAAW,SAAS,OAAO,EAAE,QAAQ,SAAS,YAAA;AAAA,IAAY;AAAA,EAEpE,GAAG,CAAC,SAAS,YAAY,aAAa,MAAM,CAAC;AAC7C,QAAM,cAAc,OAAO,OAAO,QAAQ;AAC1C,cAAY,UAAU,OAAO;AAC7B,QAAM,UAAU,YAAY,MAAM,YAAY,QAAQ,QAAA,GAAW,EAAE;AACnE,QAAM,WAAW,YAAY,MAAM,YAAY,QAAQ,UAAA,GAAa,EAAE;AACtE,SAAO;AAAA,IACL,WAAS,YAAO,UAAP,mBAAc,kBAAiB;AAAA,IACxC,eAAa,YAAO,UAAP,mBAAc,aAAY;AAAA,IACvC,cAAY,YAAO,UAAP,mBAAc,gBAAe;AAAA,IACzC,YAAY,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,EAAA;AAEJ;"}