@athenaintel/react 0.20.0 → 0.21.0

package/dist/packages/agent-runtime/src/edit-command.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"edit-command.cjs","sources":["../../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport {\n  buildHistoryLoadCommand,\n  type DeepAgentMessagesWindow,\n  readDeepAgentMessagesWindow,\n  readHistoryLoadResult,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * On a windowed wire the raw list is the tail of the transcript, so the first\n * loaded message's parent is not in it: the host publishes that id as the\n * `messagesWindow` lane's `anchorBefore`, and an edit at the window edge\n * anchors there — never on `null`, which would assert the root and be\n * rejected `wrong-anchor`. A message below the loaded range has no parent on\n * this client at all; {@link resolveDeepAgentEditCommand} loads older pages\n * until it does.\n */\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (command: StatewireThread.Command) => Promise<unknown> | void;\n  /** The replicated host state — its `messages` are the raw wire messages. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The live run, when one is in flight. */\n  runs: { runId?: string | null };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below a windowed wire's loaded range, or\n * a surface whose state this module cannot read — so the caller can fall back\n * to the library's own path instead of asserting a wrong anchor.\n *\n * On a windowed wire (`window`), the first loaded message's parent is the\n * lane's `anchorBefore`; a truncated window that carries no anchor resolves\n * `undefined` rather than `null` (the root), which the host would reject.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  window = null,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window?: DeepAgentMessagesWindow | null;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) {\n    if (window === null || window.start === 0) return null;\n    return window.anchorBefore ?? undefined;\n  }\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId` lies below a windowed wire's loaded range: not in the raw\n * list while the lane says older messages exist. The caller loads older\n * history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessagesWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || window.start === 0) return false;\n  return !wireMessages.some((message) => message?.id === sourceId);\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: extras.state?.messages,\n    sourceId,\n    window: readDeepAgentMessagesWindow(extras.state),\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Pages of older history loaded while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, loading older history a page at a\n * time when the message lies below a windowed wire's loaded range. Every page\n * is read back from the live thread state (`readExtras` — the host prepends\n * it as ops before it answers the command), so the anchor is always the host's\n * own parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the prepended range. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const wireMessages = extras.state?.messages;\n    const window = readDeepAgentMessagesWindow(extras.state);\n    if (!isSourceBelowLoadedWindow({ wireMessages, sourceId, window })) return null;\n    const load = window === null ? null : buildHistoryLoadCommand({ window });\n    if (load === null) return null;\n    const result = readHistoryLoadResult(await extras.sendCommand(load));\n    // A current view that yielded nothing older: the message is not in this\n    // thread's history at all. (A stale view is retried with the fresh lane.)\n    if (result === null || (result.loaded === 0 && !result.stale)) return null;\n  }\n  return null;\n}\n"],"names":["hasStatewireThreadExtras","readDeepAgentMessagesWindow","buildHistoryLoadCommand","readHistoryLoadResult"],"mappings":";;;;AA2DO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAACA,aAAAA,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAcO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,GAAG;AACf,QAAI,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AAClD,WAAO,OAAO,gBAAgB;AAAA,EAChC;AACA,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AACnE,SAAO,CAAC,aAAa,KAAK,CAAC,aAAY,mCAAS,QAAO,QAAQ;AACjE;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;;AACxC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,eAAc,YAAO,UAAP,mBAAc;AAAA,IAC5B;AAAA,IACA,QAAQC,cAAAA,4BAA4B,OAAO,KAAK;AAAA,EAAA,CACjD;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAMmD;;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,gBAAe,YAAO,UAAP,mBAAc;AACnC,UAAM,SAASA,cAAAA,4BAA4B,OAAO,KAAK;AACvD,QAAI,CAAC,0BAA0B,EAAE,cAAc,UAAU,OAAA,CAAQ,EAAG,QAAO;AAC3E,UAAM,OAAO,WAAW,OAAO,OAAOC,cAAAA,wBAAwB,EAAE,QAAQ;AACxE,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,SAASC,cAAAA,sBAAsB,MAAM,OAAO,YAAY,IAAI,CAAC;AAGnE,QAAI,WAAW,QAAS,OAAO,WAAW,KAAK,CAAC,OAAO,MAAQ,QAAO;AAAA,EACxE;AACA,SAAO;AACT;;;;;;;"}
+{"version":3,"file":"edit-command.cjs","sources":["../../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport {\n  buildHistoryLoadCommand,\n  type DeepAgentMessagesWindow,\n  readDeepAgentMessagesWindow,\n  readHistoryLoadResult,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * On a windowed wire the raw list is the tail of the transcript, so the first\n * loaded message's parent is not in it: the host publishes that id as the\n * `messagesWindow` lane's `anchorBefore`, and an edit at the window edge\n * anchors there — never on `null`, which would assert the root and be\n * rejected `wrong-anchor`. A message below the loaded range has no parent on\n * this client at all; {@link resolveDeepAgentEditCommand} loads older pages\n * until it does.\n */\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: StatewireThread.SendOptions,\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: StatewireThread.Extras['prepareMessageMetadata'];\n  discardPreparedMessageMetadata?: StatewireThread.Extras['discardPreparedMessageMetadata'];\n  sendPreparedEdit?: StatewireThread.Extras['sendPreparedEdit'];\n  isPreparingSubmission?: boolean;\n  /** The replicated host state — its `messages` are the raw wire messages. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below a windowed wire's loaded range, or\n * a surface whose state this module cannot read — so the caller can fall back\n * to the library's own path instead of asserting a wrong anchor.\n *\n * On a windowed wire (`window`), the first loaded message's parent is the\n * lane's `anchorBefore`; a truncated window that carries no anchor resolves\n * `undefined` rather than `null` (the root), which the host would reject.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  window = null,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window?: DeepAgentMessagesWindow | null;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) {\n    if (window === null || window.start === 0) return null;\n    return window.anchorBefore ?? undefined;\n  }\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId` lies below a windowed wire's loaded range: not in the raw\n * list while the lane says older messages exist. The caller loads older\n * history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessagesWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || window.start === 0) return false;\n  return !wireMessages.some((message) => message?.id === sourceId);\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: extras.state?.messages,\n    sourceId,\n    window: readDeepAgentMessagesWindow(extras.state),\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Pages of older history loaded while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, loading older history a page at a\n * time when the message lies below a windowed wire's loaded range. Every page\n * is read back from the live thread state (`readExtras` — the host prepends\n * it as ops before it answers the command), so the anchor is always the host's\n * own parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the prepended range. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const wireMessages = extras.state?.messages;\n    const window = readDeepAgentMessagesWindow(extras.state);\n    if (!isSourceBelowLoadedWindow({ wireMessages, sourceId, window })) return null;\n    const load = window === null ? null : buildHistoryLoadCommand({ window });\n    if (load === null) return null;\n    const result = readHistoryLoadResult(await extras.sendCommand(load));\n    // A current view that yielded nothing older: the message is not in this\n    // thread's history at all. (A stale view is retried with the fresh lane.)\n    if (result === null || (result.loaded === 0 && !result.stale)) return null;\n  }\n  return null;\n}\n"],"names":["hasStatewireThreadExtras","readDeepAgentMessagesWindow","buildHistoryLoadCommand","readHistoryLoadResult"],"mappings":";;;;AAmEO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAACA,aAAAA,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAcO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,GAAG;AACf,QAAI,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AAClD,WAAO,OAAO,gBAAgB;AAAA,EAChC;AACA,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AACnE,SAAO,CAAC,aAAa,KAAK,CAAC,aAAY,mCAAS,QAAO,QAAQ;AACjE;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;;AACxC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,eAAc,YAAO,UAAP,mBAAc;AAAA,IAC5B;AAAA,IACA,QAAQC,cAAAA,4BAA4B,OAAO,KAAK;AAAA,EAAA,CACjD;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAMmD;;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,gBAAe,YAAO,UAAP,mBAAc;AACnC,UAAM,SAASA,cAAAA,4BAA4B,OAAO,KAAK;AACvD,QAAI,CAAC,0BAA0B,EAAE,cAAc,UAAU,OAAA,CAAQ,EAAG,QAAO;AAC3E,UAAM,OAAO,WAAW,OAAO,OAAOC,cAAAA,wBAAwB,EAAE,QAAQ;AACxE,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,SAASC,cAAAA,sBAAsB,MAAM,OAAO,YAAY,IAAI,CAAC;AAGnE,QAAI,WAAW,QAAS,OAAO,WAAW,KAAK,CAAC,OAAO,MAAQ,QAAO;AAAA,EACxE;AACA,SAAO;AACT;;;;;;;"}

package/dist/packages/agent-runtime/src/edit-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"edit-command.js","sources":["../../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport {\n  buildHistoryLoadCommand,\n  type DeepAgentMessagesWindow,\n  readDeepAgentMessagesWindow,\n  readHistoryLoadResult,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * On a windowed wire the raw list is the tail of the transcript, so the first\n * loaded message's parent is not in it: the host publishes that id as the\n * `messagesWindow` lane's `anchorBefore`, and an edit at the window edge\n * anchors there — never on `null`, which would assert the root and be\n * rejected `wrong-anchor`. A message below the loaded range has no parent on\n * this client at all; {@link resolveDeepAgentEditCommand} loads older pages\n * until it does.\n */\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (command: StatewireThread.Command) => Promise<unknown> | void;\n  /** The replicated host state — its `messages` are the raw wire messages. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The live run, when one is in flight. */\n  runs: { runId?: string | null };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below a windowed wire's loaded range, or\n * a surface whose state this module cannot read — so the caller can fall back\n * to the library's own path instead of asserting a wrong anchor.\n *\n * On a windowed wire (`window`), the first loaded message's parent is the\n * lane's `anchorBefore`; a truncated window that carries no anchor resolves\n * `undefined` rather than `null` (the root), which the host would reject.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  window = null,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window?: DeepAgentMessagesWindow | null;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) {\n    if (window === null || window.start === 0) return null;\n    return window.anchorBefore ?? undefined;\n  }\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId` lies below a windowed wire's loaded range: not in the raw\n * list while the lane says older messages exist. The caller loads older\n * history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessagesWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || window.start === 0) return false;\n  return !wireMessages.some((message) => message?.id === sourceId);\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: extras.state?.messages,\n    sourceId,\n    window: readDeepAgentMessagesWindow(extras.state),\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Pages of older history loaded while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, loading older history a page at a\n * time when the message lies below a windowed wire's loaded range. Every page\n * is read back from the live thread state (`readExtras` — the host prepends\n * it as ops before it answers the command), so the anchor is always the host's\n * own parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the prepended range. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const wireMessages = extras.state?.messages;\n    const window = readDeepAgentMessagesWindow(extras.state);\n    if (!isSourceBelowLoadedWindow({ wireMessages, sourceId, window })) return null;\n    const load = window === null ? null : buildHistoryLoadCommand({ window });\n    if (load === null) return null;\n    const result = readHistoryLoadResult(await extras.sendCommand(load));\n    // A current view that yielded nothing older: the message is not in this\n    // thread's history at all. (A stale view is retried with the fresh lane.)\n    if (result === null || (result.loaded === 0 && !result.stale)) return null;\n  }\n  return null;\n}\n"],"names":[],"mappings":";;AA2DO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAAC,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAcO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,GAAG;AACf,QAAI,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AAClD,WAAO,OAAO,gBAAgB;AAAA,EAChC;AACA,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AACnE,SAAO,CAAC,aAAa,KAAK,CAAC,aAAY,mCAAS,QAAO,QAAQ;AACjE;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;;AACxC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,eAAc,YAAO,UAAP,mBAAc;AAAA,IAC5B;AAAA,IACA,QAAQ,4BAA4B,OAAO,KAAK;AAAA,EAAA,CACjD;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAMmD;;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,gBAAe,YAAO,UAAP,mBAAc;AACnC,UAAM,SAAS,4BAA4B,OAAO,KAAK;AACvD,QAAI,CAAC,0BAA0B,EAAE,cAAc,UAAU,OAAA,CAAQ,EAAG,QAAO;AAC3E,UAAM,OAAO,WAAW,OAAO,OAAO,wBAAwB,EAAE,QAAQ;AACxE,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,SAAS,sBAAsB,MAAM,OAAO,YAAY,IAAI,CAAC;AAGnE,QAAI,WAAW,QAAS,OAAO,WAAW,KAAK,CAAC,OAAO,MAAQ,QAAO;AAAA,EACxE;AACA,SAAO;AACT;"}
+{"version":3,"file":"edit-command.js","sources":["../../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport {\n  buildHistoryLoadCommand,\n  type DeepAgentMessagesWindow,\n  readDeepAgentMessagesWindow,\n  readHistoryLoadResult,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * On a windowed wire the raw list is the tail of the transcript, so the first\n * loaded message's parent is not in it: the host publishes that id as the\n * `messagesWindow` lane's `anchorBefore`, and an edit at the window edge\n * anchors there — never on `null`, which would assert the root and be\n * rejected `wrong-anchor`. A message below the loaded range has no parent on\n * this client at all; {@link resolveDeepAgentEditCommand} loads older pages\n * until it does.\n */\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: StatewireThread.SendOptions,\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: StatewireThread.Extras['prepareMessageMetadata'];\n  discardPreparedMessageMetadata?: StatewireThread.Extras['discardPreparedMessageMetadata'];\n  sendPreparedEdit?: StatewireThread.Extras['sendPreparedEdit'];\n  isPreparingSubmission?: boolean;\n  /** The replicated host state — its `messages` are the raw wire messages. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below a windowed wire's loaded range, or\n * a surface whose state this module cannot read — so the caller can fall back\n * to the library's own path instead of asserting a wrong anchor.\n *\n * On a windowed wire (`window`), the first loaded message's parent is the\n * lane's `anchorBefore`; a truncated window that carries no anchor resolves\n * `undefined` rather than `null` (the root), which the host would reject.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  window = null,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window?: DeepAgentMessagesWindow | null;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) {\n    if (window === null || window.start === 0) return null;\n    return window.anchorBefore ?? undefined;\n  }\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId` lies below a windowed wire's loaded range: not in the raw\n * list while the lane says older messages exist. The caller loads older\n * history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessagesWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || window.start === 0) return false;\n  return !wireMessages.some((message) => message?.id === sourceId);\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: extras.state?.messages,\n    sourceId,\n    window: readDeepAgentMessagesWindow(extras.state),\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Pages of older history loaded while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, loading older history a page at a\n * time when the message lies below a windowed wire's loaded range. Every page\n * is read back from the live thread state (`readExtras` — the host prepends\n * it as ops before it answers the command), so the anchor is always the host's\n * own parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the prepended range. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const wireMessages = extras.state?.messages;\n    const window = readDeepAgentMessagesWindow(extras.state);\n    if (!isSourceBelowLoadedWindow({ wireMessages, sourceId, window })) return null;\n    const load = window === null ? null : buildHistoryLoadCommand({ window });\n    if (load === null) return null;\n    const result = readHistoryLoadResult(await extras.sendCommand(load));\n    // A current view that yielded nothing older: the message is not in this\n    // thread's history at all. (A stale view is retried with the fresh lane.)\n    if (result === null || (result.loaded === 0 && !result.stale)) return null;\n  }\n  return null;\n}\n"],"names":[],"mappings":";;AAmEO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAAC,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAcO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,GAAG;AACf,QAAI,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AAClD,WAAO,OAAO,gBAAgB;AAAA,EAChC;AACA,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,OAAO,UAAU,EAAG,QAAO;AACnE,SAAO,CAAC,aAAa,KAAK,CAAC,aAAY,mCAAS,QAAO,QAAQ;AACjE;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;;AACxC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,eAAc,YAAO,UAAP,mBAAc;AAAA,IAC5B;AAAA,IACA,QAAQ,4BAA4B,OAAO,KAAK;AAAA,EAAA,CACjD;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAMmD;;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,gBAAe,YAAO,UAAP,mBAAc;AACnC,UAAM,SAAS,4BAA4B,OAAO,KAAK;AACvD,QAAI,CAAC,0BAA0B,EAAE,cAAc,UAAU,OAAA,CAAQ,EAAG,QAAO;AAC3E,UAAM,OAAO,WAAW,OAAO,OAAO,wBAAwB,EAAE,QAAQ;AACxE,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,SAAS,sBAAsB,MAAM,OAAO,YAAY,IAAI,CAAC;AAGnE,QAAI,WAAW,QAAS,OAAO,WAAW,KAAK,CAAC,OAAO,MAAQ,QAAO;AAAA,EACxE;AACA,SAAO;AACT;"}

package/dist/packages/agent-runtime/src/generated/runconfig-contract.cjs

@@ -58,6 +58,7 @@ const RUN_CONFIG_CUSTOM_KEYS = [
   "permissions",
   "project_id",
   "recursion_limit",
+  "run_budget",
   "run_label",
   "runtime",
   "sandbox_runtime",
@@ -101,6 +102,7 @@ const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [
   "muses_recall_enabled",
   "office_context",
   "project_id",
+  "run_budget",
   "runtime",
   "session_id",
   "session_origin_kind",

package/dist/packages/agent-runtime/src/generated/runconfig-contract.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runconfig-contract.cjs","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (windowed hello negotiation + history commands)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks —\n * declared on every attach and compared against the server's\n * advertised `minClientVersion` (the `protocol` state lane).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/**\n * Attach header opting into a windowed hello: its value is the window\n * size the client wants (the host clamps it). Undeclared clients keep\n * receiving the full snapshot.\n */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Attach header opting a windowed client back into the provenance blobs. */\nexport const DEEP_AGENT_PROVENANCE_HEADER = \"x-athena-deep-agent-provenance\";\n\n/** The `DEEP_AGENT_PROVENANCE_HEADER` value that keeps full provenance. */\nexport const DEEP_AGENT_PROVENANCE_FULL = \"full\";\n\n/** Window size a declaring client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Host clamp bounds on a declared window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Upper bound on the `limit` of one `history/load`. */\nexport const DEEP_AGENT_HISTORY_LOAD_MAX_LIMIT = 200;\n\n/** Replicated-state key of the window lane a windowed hello carries. */\nexport const DEEP_AGENT_MESSAGES_WINDOW_STATE_KEY = \"messagesWindow\";\n\n/** Command loading older messages into a windowed client's view. */\nexport const DEEP_AGENT_HISTORY_LOAD_COMMAND = \"history/load\";\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":";;AAyGO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AAMO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAiBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,gCAAgC;AAOtC,MAAM,mCAAmC;AAGzC,MAAM,+BAA+B;AAGrC,MAAM,6BAA6B;AAGnC,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,oCAAoC;AAG1C,MAAM,uCAAuC;AAG7C,MAAM,kCAAkC;AAGxC,MAAM,yCAAyC;AAG/C,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"runconfig-contract.cjs","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (windowed hello negotiation + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/**\n * Attach header opting into a windowed hello: its value is the window\n * size the client wants (the host clamps it). Undeclared clients keep\n * receiving the full snapshot.\n */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Attach header opting a windowed client back into the provenance blobs. */\nexport const DEEP_AGENT_PROVENANCE_HEADER = \"x-athena-deep-agent-provenance\";\n\n/** The `DEEP_AGENT_PROVENANCE_HEADER` value that keeps full provenance. */\nexport const DEEP_AGENT_PROVENANCE_FULL = \"full\";\n\n/** Window size a declaring client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Host clamp bounds on a declared window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Upper bound on the `limit` of one `history/load`. */\nexport const DEEP_AGENT_HISTORY_LOAD_MAX_LIMIT = 200;\n\n/** Replicated-state key of the window lane a windowed hello carries. */\nexport const DEEP_AGENT_MESSAGES_WINDOW_STATE_KEY = \"messagesWindow\";\n\n/** Command loading older messages into a windowed client's view. */\nexport const DEEP_AGENT_HISTORY_LOAD_COMMAND = \"history/load\";\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":";;AA2GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,gCAAgC;AAOtC,MAAM,mCAAmC;AAGzC,MAAM,+BAA+B;AAGrC,MAAM,6BAA6B;AAGnC,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,oCAAoC;AAG1C,MAAM,uCAAuC;AAG7C,MAAM,kCAAkC;AAGxC,MAAM,yCAAyC;AAG/C,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/generated/runconfig-contract.js

@@ -56,6 +56,7 @@ const RUN_CONFIG_CUSTOM_KEYS = [
   "permissions",
   "project_id",
   "recursion_limit",
+  "run_budget",
   "run_label",
   "runtime",
   "sandbox_runtime",
@@ -99,6 +100,7 @@ const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [
   "muses_recall_enabled",
   "office_context",
   "project_id",
+  "run_budget",
   "runtime",
   "session_id",
   "session_origin_kind",

package/dist/packages/agent-runtime/src/generated/runconfig-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"runconfig-contract.js","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (windowed hello negotiation + history commands)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks —\n * declared on every attach and compared against the server's\n * advertised `minClientVersion` (the `protocol` state lane).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/**\n * Attach header opting into a windowed hello: its value is the window\n * size the client wants (the host clamps it). Undeclared clients keep\n * receiving the full snapshot.\n */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Attach header opting a windowed client back into the provenance blobs. */\nexport const DEEP_AGENT_PROVENANCE_HEADER = \"x-athena-deep-agent-provenance\";\n\n/** The `DEEP_AGENT_PROVENANCE_HEADER` value that keeps full provenance. */\nexport const DEEP_AGENT_PROVENANCE_FULL = \"full\";\n\n/** Window size a declaring client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Host clamp bounds on a declared window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Upper bound on the `limit` of one `history/load`. */\nexport const DEEP_AGENT_HISTORY_LOAD_MAX_LIMIT = 200;\n\n/** Replicated-state key of the window lane a windowed hello carries. */\nexport const DEEP_AGENT_MESSAGES_WINDOW_STATE_KEY = \"messagesWindow\";\n\n/** Command loading older messages into a windowed client's view. */\nexport const DEEP_AGENT_HISTORY_LOAD_COMMAND = \"history/load\";\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":"AAyGO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AAMO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAiBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,gCAAgC;AAOtC,MAAM,mCAAmC;AAGzC,MAAM,+BAA+B;AAGrC,MAAM,6BAA6B;AAGnC,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,oCAAoC;AAG1C,MAAM,uCAAuC;AAG7C,MAAM,kCAAkC;AAGxC,MAAM,yCAAyC;AAG/C,MAAM,mCAAmC;"}
+{"version":3,"file":"runconfig-contract.js","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (windowed hello negotiation + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/**\n * Attach header opting into a windowed hello: its value is the window\n * size the client wants (the host clamps it). Undeclared clients keep\n * receiving the full snapshot.\n */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Attach header opting a windowed client back into the provenance blobs. */\nexport const DEEP_AGENT_PROVENANCE_HEADER = \"x-athena-deep-agent-provenance\";\n\n/** The `DEEP_AGENT_PROVENANCE_HEADER` value that keeps full provenance. */\nexport const DEEP_AGENT_PROVENANCE_FULL = \"full\";\n\n/** Window size a declaring client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Host clamp bounds on a declared window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Upper bound on the `limit` of one `history/load`. */\nexport const DEEP_AGENT_HISTORY_LOAD_MAX_LIMIT = 200;\n\n/** Replicated-state key of the window lane a windowed hello carries. */\nexport const DEEP_AGENT_MESSAGES_WINDOW_STATE_KEY = \"messagesWindow\";\n\n/** Command loading older messages into a windowed client's view. */\nexport const DEEP_AGENT_HISTORY_LOAD_COMMAND = \"history/load\";\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":"AA2GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,gCAAgC;AAOtC,MAAM,mCAAmC;AAGzC,MAAM,+BAA+B;AAGrC,MAAM,6BAA6B;AAGnC,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,oCAAoC;AAG1C,MAAM,uCAAuC;AAG7C,MAAM,kCAAkC;AAGxC,MAAM,yCAAyC;AAG/C,MAAM,mCAAmC;"}

package/dist/packages/agent-runtime/src/interrupts.cjs

@@ -9,9 +9,16 @@ function isRecord(value) {
 function isPendingInterrupt(request) {
   return request.type === "interrupt" && !("response" in request);
 }
+const LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES = /* @__PURE__ */ new Set(["deep_research_pending"]);
+function isSystemPauseInterrupt(payload) {
+  if (!isRecord(payload)) return false;
+  if (payload.requires_user_action === false) return true;
+  return typeof payload.source === "string" && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source);
+}
 function isApprovalCardInterrupt(request) {
   if (!isPendingInterrupt(request)) return false;
-  return !clientTools.hasClientToolInterruptSource(request.payload);
+  const payload = request.payload;
+  return !clientTools.hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);
 }
 function asHitlApproval(value) {
   if (!isRecord(value)) return null;
@@ -52,11 +59,12 @@ function hitlResumeApprove() {
 function hitlResumeReject(reason = HITL_REJECT_REASON) {
   return { action: "reject", reason };
 }
-function hitlResumeContinue() {
-  return { action: "continue" };
+const INTERRUPT_DECLINE_REASON = "User declined the request.";
+function interruptResumeDecline(reason = INTERRUPT_DECLINE_REASON) {
+  return { action: "reject", reason };
 }
 function useApprovalResumeLock(options) {
-  const { requestId, isRunning, sendResume, pendingResumeGraceMs } = options;
+  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;
   const [pending, setPending] = react.useState(false);
   const prevRequestIdRef = react.useRef(requestId);
   if (prevRequestIdRef.current !== requestId) {
@@ -87,14 +95,28 @@ function useApprovalResumeLock(options) {
   }, [pending, requestId, pendingResumeGraceMs]);
   const sendResumeRef = react.useRef(sendResume);
   sendResumeRef.current = sendResume;
+  const onResumeRejectedRef = react.useRef(onResumeRejected);
+  onResumeRejectedRef.current = onResumeRejected;
+  const currentRequestIdRef = react.useRef(requestId);
+  currentRequestIdRef.current = requestId;
   const pendingRef = react.useRef(pending);
   pendingRef.current = pending;
   const resume = react.useCallback(
     (value) => {
-      if (requestId === void 0 || pendingRef.current) return;
+      if (requestId === void 0 || pendingRef.current) return void 0;
       setPending(true);
       pendingRef.current = true;
-      sendResumeRef.current(requestId, value);
+      const dispatched = sendResumeRef.current(requestId, value);
+      if (!(dispatched instanceof Promise)) return void 0;
+      dispatched.then(void 0, (error) => {
+        var _a;
+        const current = currentRequestIdRef.current;
+        if (current !== void 0 && current !== requestId) return;
+        setPending(false);
+        pendingRef.current = false;
+        (_a = onResumeRejectedRef.current) == null ? void 0 : _a.call(onResumeRejectedRef, error, requestId);
+      });
+      return dispatched;
     },
     [requestId]
   );
@@ -103,13 +125,15 @@ function useApprovalResumeLock(options) {
 exports.DEFAULT_INTERRUPT_PAUSED_MESSAGE = DEFAULT_INTERRUPT_PAUSED_MESSAGE;
 exports.HITL_PENDING_RESUME_GRACE_MS = HITL_PENDING_RESUME_GRACE_MS;
 exports.HITL_REJECT_REASON = HITL_REJECT_REASON;
+exports.INTERRUPT_DECLINE_REASON = INTERRUPT_DECLINE_REASON;
 exports.asHitlApproval = asHitlApproval;
 exports.findAbandonedInterrupt = findAbandonedInterrupt;
 exports.hitlResumeApprove = hitlResumeApprove;
-exports.hitlResumeContinue = hitlResumeContinue;
 exports.hitlResumeReject = hitlResumeReject;
+exports.interruptResumeDecline = interruptResumeDecline;
 exports.isApprovalCardInterrupt = isApprovalCardInterrupt;
 exports.isPendingInterrupt = isPendingInterrupt;
+exports.isSystemPauseInterrupt = isSystemPauseInterrupt;
 exports.pendingActionRequests = pendingActionRequests;
 exports.readAbandonedInputRequests = readAbandonedInputRequests;
 exports.readInterruptMessage = readInterruptMessage;

package/dist/packages/agent-runtime/src/interrupts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"interrupts.cjs","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * A pending interrupt an approval card may answer. Client-tool parks are\n * excluded — the client-tool bridge owns those, and a generic Continue resume\n * would corrupt the parked tool call. The source check is deliberately loose\n * (any payload stamped with the client-tool source) so a skewed deploy can\n * never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  return !hasClientToolInterruptSource((request as { payload?: unknown }).payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n  }));\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** `run/input` resume value for a non-HITL park (generic Continue). */\nexport function hitlResumeContinue(): Record<string, string> {\n  return { action: 'continue' };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /** Dispatch the `run/input` resume for `requestId` on the surface's transport. */\n  sendResume: (requestId: string, value: TValue) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /** Send the resume value, locking the actions. No-op while pending or unparked. */\n  resume: (value: TValue) => void;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue) => {\n      if (requestId === undefined || pendingRef.current) return;\n      setPending(true);\n      pendingRef.current = true;\n      sendResumeRef.current(requestId, value);\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":["hasClientToolInterruptSource","readDeepAgentStreamValues","useState","useRef","useEffect","useCallback"],"mappings":";;;;;AA4DA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,SAAO,CAACA,YAAAA,6BAA8B,QAAkC,OAAO;AACjF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAgBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,EAAa,EACpF;AACJ;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAYC,eAAAA,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,SAAS,qBAA6C;AAC3D,SAAO,EAAE,QAAQ,WAAA;AACnB;AAwCO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,yBAAyB;AAEnE,QAAM,CAAC,SAAS,UAAU,IAAIC,MAAAA,SAAS,KAAK;AAC5C,QAAM,mBAAmBC,MAAAA,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkBA,MAAAA,OAAO,KAAK;AACpCC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvBA,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgBD,MAAAA,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAASE,MAAAA;AAAAA,IACb,CAAC,UAAkB;AACjB,UAAI,cAAc,UAAa,WAAW,QAAS;AACnD,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,oBAAc,QAAQ,WAAW,KAAK;AAAA,IACxC;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;;;;;;;;;;;;;;;"}
+{"version":3,"file":"interrupts.cjs","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * Interrupt sources that were system pauses before the host stamped\n * `requires_user_action: false` on them (a background deep-research wait). Kept\n * only for the deploy skew between an older agora and a newer client; delete\n * once every deployment's raiser stamps the flag.\n */\nconst LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES: ReadonlySet<string> = new Set(['deep_research_pending']);\n\n/**\n * A park nobody answers: the agent is still working (a background research\n * wait) and the backend resumes it itself. The raiser stamps\n * `requires_user_action: false`; older raisers are recognised by source.\n */\nexport function isSystemPauseInterrupt(payload: unknown): boolean {\n  if (!isRecord(payload)) return false;\n  if (payload.requires_user_action === false) return true;\n  return (\n    typeof payload.source === 'string' && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source)\n  );\n}\n\n/**\n * A pending interrupt an approval card may answer. Two kinds are excluded —\n * client-tool parks (the client-tool bridge owns those, and a generic resume\n * would corrupt the parked tool call) and system pauses (nothing to answer; the\n * backend resumes them). The source checks are deliberately loose so a skewed\n * deploy can never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  const payload = (request as { payload?: unknown }).payload;\n  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n  }));\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** Canonical reason string carried by a user declining a non-HITL park. */\nexport const INTERRUPT_DECLINE_REASON = 'User declined the request.';\n\n/**\n * `run/input` resume value declining a non-HITL park. `{ action: 'reject' }`\n * is the one value every typed raiser treats as a clean user decline\n * (`FormCancelledError` / `ToolRejectedError`); a generic `continue` would be\n * rejected by their resume schemas and surface as a tool error the agent then\n * improvises around.\n */\nexport function interruptResumeDecline(\n  reason: string = INTERRUPT_DECLINE_REASON,\n): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /**\n   * Dispatch the `run/input` resume for `requestId` on the surface's transport.\n   * Return the dispatch promise so a refused or lost command releases the lock\n   * at once and reaches `onResumeRejected`; a `void` return leaves the\n   * recovery paths below as the only release.\n   */\n  sendResume: (requestId: string, value: TValue) => void | Promise<unknown>;\n  /**\n   * The dispatch `sendResume` returned rejected — the host refused the\n   * `run/input` or the transport lost it. The lock is already released when\n   * this fires; the surface tells the user, since the request is back on\n   * screen with nothing else saying why.\n   */\n  onResumeRejected?: (error: unknown, requestId: string) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /**\n   * Send the resume value, locking the actions. No-op (returns `undefined`)\n   * while pending or unparked. Returns the dispatch promise when `sendResume`\n   * produced one, so a surface can hold its own state until the host settles.\n   */\n  resume: (value: TValue) => Promise<unknown> | undefined;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 0. The dispatch itself rejected (a `sendResume` that returned a promise) —\n *    released at once, and reported through `onResumeRejected`.\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const onResumeRejectedRef = useRef(onResumeRejected);\n  onResumeRejectedRef.current = onResumeRejected;\n  const currentRequestIdRef = useRef(requestId);\n  currentRequestIdRef.current = requestId;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue): Promise<unknown> | undefined => {\n      if (requestId === undefined || pendingRef.current) return undefined;\n      setPending(true);\n      pendingRef.current = true;\n      const dispatched: unknown = sendResumeRef.current(requestId, value);\n      if (!(dispatched instanceof Promise)) return undefined;\n      dispatched.then(undefined, (error: unknown) => {\n        // A late refusal for a request the lock has since moved past (the\n        // park was re-keyed, or a newer answer is in flight) must neither\n        // release that answer's lock nor be reported as a failure of it.\n        const current = currentRequestIdRef.current;\n        if (current !== undefined && current !== requestId) return;\n        setPending(false);\n        pendingRef.current = false;\n        onResumeRejectedRef.current?.(error, requestId);\n      });\n      return dispatched;\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":["hasClientToolInterruptSource","readDeepAgentStreamValues","useState","useRef","useEffect","useCallback"],"mappings":";;;;;AA4DA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AAQA,MAAM,wCAA6D,oBAAI,IAAI,CAAC,uBAAuB,CAAC;AAO7F,SAAS,uBAAuB,SAA2B;AAChE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,yBAAyB,MAAO,QAAO;AACnD,SACE,OAAO,QAAQ,WAAW,YAAY,sCAAsC,IAAI,QAAQ,MAAM;AAElG;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,QAAM,UAAW,QAAkC;AACnD,SAAO,CAACA,YAAAA,6BAA6B,OAAO,KAAK,CAAC,uBAAuB,OAAO;AAClF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAgBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,EAAa,EACpF;AACJ;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAYC,eAAAA,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,MAAM,2BAA2B;AASjC,SAAS,uBACd,SAAiB,0BACO;AACxB,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AA0DO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,sBAAsB,qBAAqB;AAErF,QAAM,CAAC,SAAS,UAAU,IAAIC,MAAAA,SAAS,KAAK;AAC5C,QAAM,mBAAmBC,MAAAA,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkBA,MAAAA,OAAO,KAAK;AACpCC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvBA,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgBD,MAAAA,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,sBAAsBA,MAAAA,OAAO,gBAAgB;AACnD,sBAAoB,UAAU;AAC9B,QAAM,sBAAsBA,MAAAA,OAAO,SAAS;AAC5C,sBAAoB,UAAU;AAC9B,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAASE,MAAAA;AAAAA,IACb,CAAC,UAAgD;AAC/C,UAAI,cAAc,UAAa,WAAW,QAAS,QAAO;AAC1D,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,YAAM,aAAsB,cAAc,QAAQ,WAAW,KAAK;AAClE,UAAI,EAAE,sBAAsB,SAAU,QAAO;AAC7C,iBAAW,KAAK,QAAW,CAAC,UAAmB;;AAI7C,cAAM,UAAU,oBAAoB;AACpC,YAAI,YAAY,UAAa,YAAY,UAAW;AACpD,mBAAW,KAAK;AAChB,mBAAW,UAAU;AACrB,kCAAoB,YAApB,6CAA8B,OAAO;AAAA,MACvC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;;;;;;;;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/interrupts.js

@@ -7,9 +7,16 @@ function isRecord(value) {
 function isPendingInterrupt(request) {
   return request.type === "interrupt" && !("response" in request);
 }
+const LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES = /* @__PURE__ */ new Set(["deep_research_pending"]);
+function isSystemPauseInterrupt(payload) {
+  if (!isRecord(payload)) return false;
+  if (payload.requires_user_action === false) return true;
+  return typeof payload.source === "string" && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source);
+}
 function isApprovalCardInterrupt(request) {
   if (!isPendingInterrupt(request)) return false;
-  return !hasClientToolInterruptSource(request.payload);
+  const payload = request.payload;
+  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);
 }
 function asHitlApproval(value) {
   if (!isRecord(value)) return null;
@@ -50,11 +57,12 @@ function hitlResumeApprove() {
 function hitlResumeReject(reason = HITL_REJECT_REASON) {
   return { action: "reject", reason };
 }
-function hitlResumeContinue() {
-  return { action: "continue" };
+const INTERRUPT_DECLINE_REASON = "User declined the request.";
+function interruptResumeDecline(reason = INTERRUPT_DECLINE_REASON) {
+  return { action: "reject", reason };
 }
 function useApprovalResumeLock(options) {
-  const { requestId, isRunning, sendResume, pendingResumeGraceMs } = options;
+  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;
   const [pending, setPending] = useState(false);
   const prevRequestIdRef = useRef(requestId);
   if (prevRequestIdRef.current !== requestId) {
@@ -85,14 +93,28 @@ function useApprovalResumeLock(options) {
   }, [pending, requestId, pendingResumeGraceMs]);
   const sendResumeRef = useRef(sendResume);
   sendResumeRef.current = sendResume;
+  const onResumeRejectedRef = useRef(onResumeRejected);
+  onResumeRejectedRef.current = onResumeRejected;
+  const currentRequestIdRef = useRef(requestId);
+  currentRequestIdRef.current = requestId;
   const pendingRef = useRef(pending);
   pendingRef.current = pending;
   const resume = useCallback(
     (value) => {
-      if (requestId === void 0 || pendingRef.current) return;
+      if (requestId === void 0 || pendingRef.current) return void 0;
       setPending(true);
       pendingRef.current = true;
-      sendResumeRef.current(requestId, value);
+      const dispatched = sendResumeRef.current(requestId, value);
+      if (!(dispatched instanceof Promise)) return void 0;
+      dispatched.then(void 0, (error) => {
+        var _a;
+        const current = currentRequestIdRef.current;
+        if (current !== void 0 && current !== requestId) return;
+        setPending(false);
+        pendingRef.current = false;
+        (_a = onResumeRejectedRef.current) == null ? void 0 : _a.call(onResumeRejectedRef, error, requestId);
+      });
+      return dispatched;
     },
     [requestId]
   );
@@ -102,13 +124,15 @@ export {
   DEFAULT_INTERRUPT_PAUSED_MESSAGE,
   HITL_PENDING_RESUME_GRACE_MS,
   HITL_REJECT_REASON,
+  INTERRUPT_DECLINE_REASON,
   asHitlApproval,
   findAbandonedInterrupt,
   hitlResumeApprove,
-  hitlResumeContinue,
   hitlResumeReject,
+  interruptResumeDecline,
   isApprovalCardInterrupt,
   isPendingInterrupt,
+  isSystemPauseInterrupt,
   pendingActionRequests,
   readAbandonedInputRequests,
   readInterruptMessage,