@athenaintel/react 0.21.1 → 0.22.0

package/dist/collab/token-refresh.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Token-refresh policy shared by every Keryx client in this package.
+ *
+ * Both the Generic Doc client and the workspace-presence observer mint a
+ * short-lived room-bound token and must replace it before it expires. The
+ * constants live here so the two clients cannot drift apart: a presence feed
+ * that re-minted on a different schedule than a document would be a second
+ * policy to reason about during an incident, for no benefit.
+ */
+/** Re-mint this long before token expiry (clamped to a floor for short TTLs). */
+export declare const REFRESH_HEADROOM_MS: number;
+/** Never schedule a refresh sooner than this, however short the grant. */
+export declare const MIN_REFRESH_DELAY_MS: number;
+/** Consecutive 4401→mint cycles allowed without a successful connect between. */
+export declare const MAX_CONSECUTIVE_REMINTS = 2;
+/** Milliseconds until the scheduled re-mint for a grant expiring at `expiresAtMs`. */
+export declare function refreshDelayMs({ expiresAtMs, now }: {
+    expiresAtMs: number;
+    now: number;
+}): number;

package/dist/collab/token-refresh.js

@@ -0,0 +1,13 @@
+const REFRESH_HEADROOM_MS = 5 * 60 * 1e3;
+const MIN_REFRESH_DELAY_MS = 30 * 1e3;
+const MAX_CONSECUTIVE_REMINTS = 2;
+function refreshDelayMs({ expiresAtMs, now }) {
+  return Math.max(expiresAtMs - now - REFRESH_HEADROOM_MS, MIN_REFRESH_DELAY_MS);
+}
+export {
+  MAX_CONSECUTIVE_REMINTS,
+  MIN_REFRESH_DELAY_MS,
+  REFRESH_HEADROOM_MS,
+  refreshDelayMs
+};
+//# sourceMappingURL=token-refresh.js.map

package/dist/collab/token-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-refresh.js","sources":["../../src/collab/token-refresh.ts"],"sourcesContent":["/**\n * Token-refresh policy shared by every Keryx client in this package.\n *\n * Both the Generic Doc client and the workspace-presence observer mint a\n * short-lived room-bound token and must replace it before it expires. The\n * constants live here so the two clients cannot drift apart: a presence feed\n * that re-minted on a different schedule than a document would be a second\n * policy to reason about during an incident, for no benefit.\n */\n\n/** Re-mint this long before token expiry (clamped to a floor for short TTLs). */\nexport const REFRESH_HEADROOM_MS = 5 * 60 * 1000;\n\n/** Never schedule a refresh sooner than this, however short the grant. */\nexport const MIN_REFRESH_DELAY_MS = 30 * 1000;\n\n/** Consecutive 4401→mint cycles allowed without a successful connect between. */\nexport const MAX_CONSECUTIVE_REMINTS = 2;\n\n/** Milliseconds until the scheduled re-mint for a grant expiring at `expiresAtMs`. */\nexport function refreshDelayMs({ expiresAtMs, now }: { expiresAtMs: number; now: number }): number {\n  return Math.max(expiresAtMs - now - REFRESH_HEADROOM_MS, MIN_REFRESH_DELAY_MS);\n}\n"],"names":[],"mappings":"AAWO,MAAM,sBAAsB,IAAI,KAAK;AAGrC,MAAM,uBAAuB,KAAK;AAGlC,MAAM,0BAA0B;AAGhC,SAAS,eAAe,EAAE,aAAa,OAAqD;AACjG,SAAO,KAAK,IAAI,cAAc,MAAM,qBAAqB,oBAAoB;AAC/E;"}

package/dist/packages/agent-runtime/src/interrupts.cjs

@@ -39,13 +39,42 @@ function pendingActionRequests(hitl) {
     name: typeof request.name === "string" ? request.name : "tool",
     args: isRecord(request.args) ? request.args : {},
     ...typeof request.tool_call_id === "string" && { toolCallId: request.tool_call_id },
-    ...typeof request.interrupt_id === "string" && { interruptId: request.interrupt_id }
+    ...typeof request.interrupt_id === "string" && { interruptId: request.interrupt_id },
+    ...request.session_approval_allowed === true && { sessionApprovalAllowed: true }
   }));
 }
+function canApproveForSession(actionRequests) {
+  return actionRequests.length > 0 && actionRequests.every((request) => request.sessionApprovalAllowed === true);
+}
 function readAbandonedInputRequests(state) {
   const abandoned = statewireState.readDeepAgentStreamValues(state).abandonedInputRequests;
   return Array.isArray(abandoned) ? abandoned : void 0;
 }
+function readInterruptMirror(state) {
+  return statewireState.readDeepAgentStreamValues(state).__interrupt__;
+}
+function interruptMirrorPayload(mirror) {
+  return isRecord(mirror) ? mirror.value : void 0;
+}
+function readQueuedLaneDecisions(state) {
+  const queued = statewireState.readDeepAgentStreamValues(state).queuedLaneDecisions;
+  return isRecord(queued) ? queued : void 0;
+}
+function laneInterruptIds(actionRequests) {
+  if (actionRequests.length === 0) return null;
+  const ids = [];
+  for (const request of actionRequests) {
+    if (request.interruptId === void 0) return null;
+    if (!ids.includes(request.interruptId)) ids.push(request.interruptId);
+  }
+  return ids;
+}
+function fanLaneDecision({
+  interruptIds,
+  decision
+}) {
+  return Object.fromEntries(interruptIds.map((id) => [id, decision]));
+}
 function findAbandonedInterrupt(abandoned) {
   return abandoned == null ? void 0 : abandoned.find(
     (request) => isRecord(request) && request.type === "interrupt" && typeof request.id === "string"
@@ -56,6 +85,9 @@ const HITL_PENDING_RESUME_GRACE_MS = 15e3;
 function hitlResumeApprove() {
   return { action: "approve" };
 }
+function hitlResumeApproveForSession() {
+  return { action: "approve", scope: "session" };
+}
 function hitlResumeReject(reason = HITL_REJECT_REASON) {
   return { action: "reject", reason };
 }
@@ -127,15 +159,22 @@ exports.HITL_PENDING_RESUME_GRACE_MS = HITL_PENDING_RESUME_GRACE_MS;
 exports.HITL_REJECT_REASON = HITL_REJECT_REASON;
 exports.INTERRUPT_DECLINE_REASON = INTERRUPT_DECLINE_REASON;
 exports.asHitlApproval = asHitlApproval;
+exports.canApproveForSession = canApproveForSession;
+exports.fanLaneDecision = fanLaneDecision;
 exports.findAbandonedInterrupt = findAbandonedInterrupt;
 exports.hitlResumeApprove = hitlResumeApprove;
+exports.hitlResumeApproveForSession = hitlResumeApproveForSession;
 exports.hitlResumeReject = hitlResumeReject;
+exports.interruptMirrorPayload = interruptMirrorPayload;
 exports.interruptResumeDecline = interruptResumeDecline;
 exports.isApprovalCardInterrupt = isApprovalCardInterrupt;
 exports.isPendingInterrupt = isPendingInterrupt;
 exports.isSystemPauseInterrupt = isSystemPauseInterrupt;
+exports.laneInterruptIds = laneInterruptIds;
 exports.pendingActionRequests = pendingActionRequests;
 exports.readAbandonedInputRequests = readAbandonedInputRequests;
 exports.readInterruptMessage = readInterruptMessage;
+exports.readInterruptMirror = readInterruptMirror;
+exports.readQueuedLaneDecisions = readQueuedLaneDecisions;
 exports.useApprovalResumeLock = useApprovalResumeLock;
 //# sourceMappingURL=interrupts.cjs.map

package/dist/packages/agent-runtime/src/interrupts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"interrupts.cjs","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * Interrupt sources that were system pauses before the host stamped\n * `requires_user_action: false` on them (a background deep-research wait). Kept\n * only for the deploy skew between an older agora and a newer client; delete\n * once every deployment's raiser stamps the flag.\n */\nconst LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES: ReadonlySet<string> = new Set(['deep_research_pending']);\n\n/**\n * A park nobody answers: the agent is still working (a background research\n * wait) and the backend resumes it itself. The raiser stamps\n * `requires_user_action: false`; older raisers are recognised by source.\n */\nexport function isSystemPauseInterrupt(payload: unknown): boolean {\n  if (!isRecord(payload)) return false;\n  if (payload.requires_user_action === false) return true;\n  return (\n    typeof payload.source === 'string' && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source)\n  );\n}\n\n/**\n * A pending interrupt an approval card may answer. Two kinds are excluded —\n * client-tool parks (the client-tool bridge owns those, and a generic resume\n * would corrupt the parked tool call) and system pauses (nothing to answer; the\n * backend resumes them). The source checks are deliberately loose so a skewed\n * deploy can never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  const payload = (request as { payload?: unknown }).payload;\n  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n  }));\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** Canonical reason string carried by a user declining a non-HITL park. */\nexport const INTERRUPT_DECLINE_REASON = 'User declined the request.';\n\n/**\n * `run/input` resume value declining a non-HITL park. `{ action: 'reject' }`\n * is the one value every typed raiser treats as a clean user decline\n * (`FormCancelledError` / `ToolRejectedError`); a generic `continue` would be\n * rejected by their resume schemas and surface as a tool error the agent then\n * improvises around.\n */\nexport function interruptResumeDecline(\n  reason: string = INTERRUPT_DECLINE_REASON,\n): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /**\n   * Dispatch the `run/input` resume for `requestId` on the surface's transport.\n   * Return the dispatch promise so a refused or lost command releases the lock\n   * at once and reaches `onResumeRejected`; a `void` return leaves the\n   * recovery paths below as the only release.\n   */\n  sendResume: (requestId: string, value: TValue) => void | Promise<unknown>;\n  /**\n   * The dispatch `sendResume` returned rejected — the host refused the\n   * `run/input` or the transport lost it. The lock is already released when\n   * this fires; the surface tells the user, since the request is back on\n   * screen with nothing else saying why.\n   */\n  onResumeRejected?: (error: unknown, requestId: string) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /**\n   * Send the resume value, locking the actions. No-op (returns `undefined`)\n   * while pending or unparked. Returns the dispatch promise when `sendResume`\n   * produced one, so a surface can hold its own state until the host settles.\n   */\n  resume: (value: TValue) => Promise<unknown> | undefined;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 0. The dispatch itself rejected (a `sendResume` that returned a promise) —\n *    released at once, and reported through `onResumeRejected`.\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const onResumeRejectedRef = useRef(onResumeRejected);\n  onResumeRejectedRef.current = onResumeRejected;\n  const currentRequestIdRef = useRef(requestId);\n  currentRequestIdRef.current = requestId;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue): Promise<unknown> | undefined => {\n      if (requestId === undefined || pendingRef.current) return undefined;\n      setPending(true);\n      pendingRef.current = true;\n      const dispatched: unknown = sendResumeRef.current(requestId, value);\n      if (!(dispatched instanceof Promise)) return undefined;\n      dispatched.then(undefined, (error: unknown) => {\n        // A late refusal for a request the lock has since moved past (the\n        // park was re-keyed, or a newer answer is in flight) must neither\n        // release that answer's lock nor be reported as a failure of it.\n        const current = currentRequestIdRef.current;\n        if (current !== undefined && current !== requestId) return;\n        setPending(false);\n        pendingRef.current = false;\n        onResumeRejectedRef.current?.(error, requestId);\n      });\n      return dispatched;\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":["hasClientToolInterruptSource","readDeepAgentStreamValues","useState","useRef","useEffect","useCallback"],"mappings":";;;;;AA4DA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AAQA,MAAM,wCAA6D,oBAAI,IAAI,CAAC,uBAAuB,CAAC;AAO7F,SAAS,uBAAuB,SAA2B;AAChE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,yBAAyB,MAAO,QAAO;AACnD,SACE,OAAO,QAAQ,WAAW,YAAY,sCAAsC,IAAI,QAAQ,MAAM;AAElG;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,QAAM,UAAW,QAAkC;AACnD,SAAO,CAACA,YAAAA,6BAA6B,OAAO,KAAK,CAAC,uBAAuB,OAAO;AAClF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAgBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,EAAa,EACpF;AACJ;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAYC,eAAAA,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,MAAM,2BAA2B;AASjC,SAAS,uBACd,SAAiB,0BACO;AACxB,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AA0DO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,sBAAsB,qBAAqB;AAErF,QAAM,CAAC,SAAS,UAAU,IAAIC,MAAAA,SAAS,KAAK;AAC5C,QAAM,mBAAmBC,MAAAA,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkBA,MAAAA,OAAO,KAAK;AACpCC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvBA,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgBD,MAAAA,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,sBAAsBA,MAAAA,OAAO,gBAAgB;AACnD,sBAAoB,UAAU;AAC9B,QAAM,sBAAsBA,MAAAA,OAAO,SAAS;AAC5C,sBAAoB,UAAU;AAC9B,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAASE,MAAAA;AAAAA,IACb,CAAC,UAAgD;AAC/C,UAAI,cAAc,UAAa,WAAW,QAAS,QAAO;AAC1D,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,YAAM,aAAsB,cAAc,QAAQ,WAAW,KAAK;AAClE,UAAI,EAAE,sBAAsB,SAAU,QAAO;AAC7C,iBAAW,KAAK,QAAW,CAAC,UAAmB;;AAI7C,cAAM,UAAU,oBAAoB;AACpC,YAAI,YAAY,UAAa,YAAY,UAAW;AACpD,mBAAW,KAAK;AAChB,mBAAW,UAAU;AACrB,kCAAoB,YAApB,6CAA8B,OAAO;AAAA,MACvC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"interrupts.cjs","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n      /**\n       * True when \"approve all for this session\" would take effect for this\n       * tool (the workspace allows overriding its approval). Absent on older\n       * backends and on non-overridable tools: the option is not offered.\n       */\n      session_approval_allowed?: boolean;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * Interrupt sources that were system pauses before the host stamped\n * `requires_user_action: false` on them (a background deep-research wait). Kept\n * only for the deploy skew between an older agora and a newer client; delete\n * once every deployment's raiser stamps the flag.\n */\nconst LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES: ReadonlySet<string> = new Set(['deep_research_pending']);\n\n/**\n * A park nobody answers: the agent is still working (a background research\n * wait) and the backend resumes it itself. The raiser stamps\n * `requires_user_action: false`; older raisers are recognised by source.\n */\nexport function isSystemPauseInterrupt(payload: unknown): boolean {\n  if (!isRecord(payload)) return false;\n  if (payload.requires_user_action === false) return true;\n  return (\n    typeof payload.source === 'string' && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source)\n  );\n}\n\n/**\n * A pending interrupt an approval card may answer. Two kinds are excluded —\n * client-tool parks (the client-tool bridge owns those, and a generic resume\n * would corrupt the parked tool call) and system pauses (nothing to answer; the\n * backend resumes them). The source checks are deliberately loose so a skewed\n * deploy can never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  const payload = (request as { payload?: unknown }).payload;\n  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n  /** Present (true) when a session-wide approval would cover later calls of this tool. */\n  sessionApprovalAllowed?: true;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n    ...(request.session_approval_allowed === true && { sessionApprovalAllowed: true }),\n  }));\n}\n\n/**\n * Whether the card may offer \"approve all for this session\": every pending\n * call must be one the backend stamped as session-approvable, so a batch that\n * mixes in a tool the workspace pinned as always-prompt only offers the\n * one-time answer.\n */\nexport function canApproveForSession(actionRequests: readonly PendingActionRequest[]): boolean {\n  return (\n    actionRequests.length > 0 &&\n    actionRequests.every((request) => request.sessionApprovalAllowed === true)\n  );\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/**\n * `useStatewireState` selector body for the host's mirrored interrupt\n * (`__interrupt__`, the LangGraph `{value, resumable}` wrapper). The mirror\n * is published the moment a lane parks on its gate — while sibling lanes are\n * still streaming and the run manager has NOT yet published an answerable\n * input request. Raw reference, selector-safe; unwrap with\n * {@link interruptMirrorPayload}.\n */\nexport function readInterruptMirror(state: unknown): unknown {\n  return readDeepAgentStreamValues(state).__interrupt__;\n}\n\n/** The payload of a mirrored interrupt wrapper, or `undefined` for anything else. */\nexport function interruptMirrorPayload(mirror: unknown): unknown {\n  return isRecord(mirror) ? mirror.value : undefined;\n}\n\n/**\n * `useStatewireState` selector body for the per-dispatch lane decisions the\n * host accepted through `run/lane-input` while the run was still streaming\n * (`queuedLaneDecisions`, keyed by langgraph interrupt id). Held until the\n * run parks, then answered as a native `lane_decisions` resume; every attached\n * client reads a queued lane as decided. Raw reference, selector-safe.\n */\nexport function readQueuedLaneDecisions(\n  state: unknown,\n): Readonly<Record<string, unknown>> | undefined {\n  const queued = readDeepAgentStreamValues(state).queuedLaneDecisions;\n  return isRecord(queued) ? queued : undefined;\n}\n\n/**\n * The distinct langgraph interrupt ids a `lane_decisions` resume answers for\n * these gated calls, in first-seen order — or `null` when any call lacks its\n * stamp (a legacy batch payload only a positional resume can answer). A\n * nested HITL request gating several calls contributes one id: the lane is\n * the interrupt, and one decision fans across its calls server-side.\n */\nexport function laneInterruptIds(actionRequests: readonly PendingActionRequest[]): string[] | null {\n  if (actionRequests.length === 0) return null;\n  const ids: string[] = [];\n  for (const request of actionRequests) {\n    if (request.interruptId === undefined) return null;\n    if (!ids.includes(request.interruptId)) ids.push(request.interruptId);\n  }\n  return ids;\n}\n\n/** One decision for every lane — the `lane_decisions` map a run-wide approve or reject sends. */\nexport function fanLaneDecision<T>({\n  interruptIds,\n  decision,\n}: {\n  interruptIds: readonly string[];\n  decision: T;\n}): Record<string, T> {\n  return Object.fromEntries(interruptIds.map((id) => [id, decision]));\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/**\n * `run/input` resume value approving the gated call(s) AND every later call of\n * the same tool(s) on this thread. The backend records the tools from its own\n * parked interrupt (never from this payload), so the value carries no names.\n */\nexport function hitlResumeApproveForSession(): Record<string, string> {\n  return { action: 'approve', scope: 'session' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** Canonical reason string carried by a user declining a non-HITL park. */\nexport const INTERRUPT_DECLINE_REASON = 'User declined the request.';\n\n/**\n * `run/input` resume value declining a non-HITL park. `{ action: 'reject' }`\n * is the one value every typed raiser treats as a clean user decline\n * (`FormCancelledError` / `ToolRejectedError`); a generic `continue` would be\n * rejected by their resume schemas and surface as a tool error the agent then\n * improvises around.\n */\nexport function interruptResumeDecline(\n  reason: string = INTERRUPT_DECLINE_REASON,\n): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /**\n   * Dispatch the `run/input` resume for `requestId` on the surface's transport.\n   * Return the dispatch promise so a refused or lost command releases the lock\n   * at once and reaches `onResumeRejected`; a `void` return leaves the\n   * recovery paths below as the only release.\n   */\n  sendResume: (requestId: string, value: TValue) => void | Promise<unknown>;\n  /**\n   * The dispatch `sendResume` returned rejected — the host refused the\n   * `run/input` or the transport lost it. The lock is already released when\n   * this fires; the surface tells the user, since the request is back on\n   * screen with nothing else saying why.\n   */\n  onResumeRejected?: (error: unknown, requestId: string) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /**\n   * Send the resume value, locking the actions. No-op (returns `undefined`)\n   * while pending or unparked. Returns the dispatch promise when `sendResume`\n   * produced one, so a surface can hold its own state until the host settles.\n   */\n  resume: (value: TValue) => Promise<unknown> | undefined;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 0. The dispatch itself rejected (a `sendResume` that returned a promise) —\n *    released at once, and reported through `onResumeRejected`.\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const onResumeRejectedRef = useRef(onResumeRejected);\n  onResumeRejectedRef.current = onResumeRejected;\n  const currentRequestIdRef = useRef(requestId);\n  currentRequestIdRef.current = requestId;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue): Promise<unknown> | undefined => {\n      if (requestId === undefined || pendingRef.current) return undefined;\n      setPending(true);\n      pendingRef.current = true;\n      const dispatched: unknown = sendResumeRef.current(requestId, value);\n      if (!(dispatched instanceof Promise)) return undefined;\n      dispatched.then(undefined, (error: unknown) => {\n        // A late refusal for a request the lock has since moved past (the\n        // park was re-keyed, or a newer answer is in flight) must neither\n        // release that answer's lock nor be reported as a failure of it.\n        const current = currentRequestIdRef.current;\n        if (current !== undefined && current !== requestId) return;\n        setPending(false);\n        pendingRef.current = false;\n        onResumeRejectedRef.current?.(error, requestId);\n      });\n      return dispatched;\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":["hasClientToolInterruptSource","readDeepAgentStreamValues","useState","useRef","useEffect","useCallback"],"mappings":";;;;;AAkEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AAQA,MAAM,wCAA6D,oBAAI,IAAI,CAAC,uBAAuB,CAAC;AAO7F,SAAS,uBAAuB,SAA2B;AAChE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,yBAAyB,MAAO,QAAO;AACnD,SACE,OAAO,QAAQ,WAAW,YAAY,sCAAsC,IAAI,QAAQ,MAAM;AAElG;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,QAAM,UAAW,QAAkC;AACnD,SAAO,CAACA,YAAAA,6BAA6B,OAAO,KAAK,CAAC,uBAAuB,OAAO;AAClF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAkBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,IACvE,GAAI,QAAQ,6BAA6B,QAAQ,EAAE,wBAAwB,KAAA;AAAA,EAAK,EAChF;AACJ;AAQO,SAAS,qBAAqB,gBAA0D;AAC7F,SACE,eAAe,SAAS,KACxB,eAAe,MAAM,CAAC,YAAY,QAAQ,2BAA2B,IAAI;AAE7E;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAYC,eAAAA,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAUO,SAAS,oBAAoB,OAAyB;AAC3D,SAAOA,eAAAA,0BAA0B,KAAK,EAAE;AAC1C;AAGO,SAAS,uBAAuB,QAA0B;AAC/D,SAAO,SAAS,MAAM,IAAI,OAAO,QAAQ;AAC3C;AASO,SAAS,wBACd,OAC+C;AAC/C,QAAM,SAASA,eAAAA,0BAA0B,KAAK,EAAE;AAChD,SAAO,SAAS,MAAM,IAAI,SAAS;AACrC;AASO,SAAS,iBAAiB,gBAAkE;AACjG,MAAI,eAAe,WAAW,EAAG,QAAO;AACxC,QAAM,MAAgB,CAAA;AACtB,aAAW,WAAW,gBAAgB;AACpC,QAAI,QAAQ,gBAAgB,OAAW,QAAO;AAC9C,QAAI,CAAC,IAAI,SAAS,QAAQ,WAAW,EAAG,KAAI,KAAK,QAAQ,WAAW;AAAA,EACtE;AACA,SAAO;AACT;AAGO,SAAS,gBAAmB;AAAA,EACjC;AAAA,EACA;AACF,GAGsB;AACpB,SAAO,OAAO,YAAY,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC;AACpE;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAOO,SAAS,8BAAsD;AACpE,SAAO,EAAE,QAAQ,WAAW,OAAO,UAAA;AACrC;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,MAAM,2BAA2B;AASjC,SAAS,uBACd,SAAiB,0BACO;AACxB,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AA0DO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,sBAAsB,qBAAqB;AAErF,QAAM,CAAC,SAAS,UAAU,IAAIC,MAAAA,SAAS,KAAK;AAC5C,QAAM,mBAAmBC,MAAAA,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkBA,MAAAA,OAAO,KAAK;AACpCC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvBA,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgBD,MAAAA,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,sBAAsBA,MAAAA,OAAO,gBAAgB;AACnD,sBAAoB,UAAU;AAC9B,QAAM,sBAAsBA,MAAAA,OAAO,SAAS;AAC5C,sBAAoB,UAAU;AAC9B,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAASE,MAAAA;AAAAA,IACb,CAAC,UAAgD;AAC/C,UAAI,cAAc,UAAa,WAAW,QAAS,QAAO;AAC1D,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,YAAM,aAAsB,cAAc,QAAQ,WAAW,KAAK;AAClE,UAAI,EAAE,sBAAsB,SAAU,QAAO;AAC7C,iBAAW,KAAK,QAAW,CAAC,UAAmB;;AAI7C,cAAM,UAAU,oBAAoB;AACpC,YAAI,YAAY,UAAa,YAAY,UAAW;AACpD,mBAAW,KAAK;AAChB,mBAAW,UAAU;AACrB,kCAAoB,YAApB,6CAA8B,OAAO;AAAA,MACvC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/interrupts.js

@@ -37,13 +37,42 @@ function pendingActionRequests(hitl) {
     name: typeof request.name === "string" ? request.name : "tool",
     args: isRecord(request.args) ? request.args : {},
     ...typeof request.tool_call_id === "string" && { toolCallId: request.tool_call_id },
-    ...typeof request.interrupt_id === "string" && { interruptId: request.interrupt_id }
+    ...typeof request.interrupt_id === "string" && { interruptId: request.interrupt_id },
+    ...request.session_approval_allowed === true && { sessionApprovalAllowed: true }
   }));
 }
+function canApproveForSession(actionRequests) {
+  return actionRequests.length > 0 && actionRequests.every((request) => request.sessionApprovalAllowed === true);
+}
 function readAbandonedInputRequests(state) {
   const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;
   return Array.isArray(abandoned) ? abandoned : void 0;
 }
+function readInterruptMirror(state) {
+  return readDeepAgentStreamValues(state).__interrupt__;
+}
+function interruptMirrorPayload(mirror) {
+  return isRecord(mirror) ? mirror.value : void 0;
+}
+function readQueuedLaneDecisions(state) {
+  const queued = readDeepAgentStreamValues(state).queuedLaneDecisions;
+  return isRecord(queued) ? queued : void 0;
+}
+function laneInterruptIds(actionRequests) {
+  if (actionRequests.length === 0) return null;
+  const ids = [];
+  for (const request of actionRequests) {
+    if (request.interruptId === void 0) return null;
+    if (!ids.includes(request.interruptId)) ids.push(request.interruptId);
+  }
+  return ids;
+}
+function fanLaneDecision({
+  interruptIds,
+  decision
+}) {
+  return Object.fromEntries(interruptIds.map((id) => [id, decision]));
+}
 function findAbandonedInterrupt(abandoned) {
   return abandoned == null ? void 0 : abandoned.find(
     (request) => isRecord(request) && request.type === "interrupt" && typeof request.id === "string"
@@ -54,6 +83,9 @@ const HITL_PENDING_RESUME_GRACE_MS = 15e3;
 function hitlResumeApprove() {
   return { action: "approve" };
 }
+function hitlResumeApproveForSession() {
+  return { action: "approve", scope: "session" };
+}
 function hitlResumeReject(reason = HITL_REJECT_REASON) {
   return { action: "reject", reason };
 }
@@ -126,16 +158,23 @@ export {
   HITL_REJECT_REASON,
   INTERRUPT_DECLINE_REASON,
   asHitlApproval,
+  canApproveForSession,
+  fanLaneDecision,
   findAbandonedInterrupt,
   hitlResumeApprove,
+  hitlResumeApproveForSession,
   hitlResumeReject,
+  interruptMirrorPayload,
   interruptResumeDecline,
   isApprovalCardInterrupt,
   isPendingInterrupt,
   isSystemPauseInterrupt,
+  laneInterruptIds,
   pendingActionRequests,
   readAbandonedInputRequests,
   readInterruptMessage,
+  readInterruptMirror,
+  readQueuedLaneDecisions,
   useApprovalResumeLock
 };
 //# sourceMappingURL=interrupts.js.map

package/dist/packages/agent-runtime/src/interrupts.js.map

@@ -1 +1 @@
-{"version":3,"file":"interrupts.js","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * Interrupt sources that were system pauses before the host stamped\n * `requires_user_action: false` on them (a background deep-research wait). Kept\n * only for the deploy skew between an older agora and a newer client; delete\n * once every deployment's raiser stamps the flag.\n */\nconst LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES: ReadonlySet<string> = new Set(['deep_research_pending']);\n\n/**\n * A park nobody answers: the agent is still working (a background research\n * wait) and the backend resumes it itself. The raiser stamps\n * `requires_user_action: false`; older raisers are recognised by source.\n */\nexport function isSystemPauseInterrupt(payload: unknown): boolean {\n  if (!isRecord(payload)) return false;\n  if (payload.requires_user_action === false) return true;\n  return (\n    typeof payload.source === 'string' && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source)\n  );\n}\n\n/**\n * A pending interrupt an approval card may answer. Two kinds are excluded —\n * client-tool parks (the client-tool bridge owns those, and a generic resume\n * would corrupt the parked tool call) and system pauses (nothing to answer; the\n * backend resumes them). The source checks are deliberately loose so a skewed\n * deploy can never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  const payload = (request as { payload?: unknown }).payload;\n  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n  }));\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** Canonical reason string carried by a user declining a non-HITL park. */\nexport const INTERRUPT_DECLINE_REASON = 'User declined the request.';\n\n/**\n * `run/input` resume value declining a non-HITL park. `{ action: 'reject' }`\n * is the one value every typed raiser treats as a clean user decline\n * (`FormCancelledError` / `ToolRejectedError`); a generic `continue` would be\n * rejected by their resume schemas and surface as a tool error the agent then\n * improvises around.\n */\nexport function interruptResumeDecline(\n  reason: string = INTERRUPT_DECLINE_REASON,\n): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /**\n   * Dispatch the `run/input` resume for `requestId` on the surface's transport.\n   * Return the dispatch promise so a refused or lost command releases the lock\n   * at once and reaches `onResumeRejected`; a `void` return leaves the\n   * recovery paths below as the only release.\n   */\n  sendResume: (requestId: string, value: TValue) => void | Promise<unknown>;\n  /**\n   * The dispatch `sendResume` returned rejected — the host refused the\n   * `run/input` or the transport lost it. The lock is already released when\n   * this fires; the surface tells the user, since the request is back on\n   * screen with nothing else saying why.\n   */\n  onResumeRejected?: (error: unknown, requestId: string) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /**\n   * Send the resume value, locking the actions. No-op (returns `undefined`)\n   * while pending or unparked. Returns the dispatch promise when `sendResume`\n   * produced one, so a surface can hold its own state until the host settles.\n   */\n  resume: (value: TValue) => Promise<unknown> | undefined;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 0. The dispatch itself rejected (a `sendResume` that returned a promise) —\n *    released at once, and reported through `onResumeRejected`.\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const onResumeRejectedRef = useRef(onResumeRejected);\n  onResumeRejectedRef.current = onResumeRejected;\n  const currentRequestIdRef = useRef(requestId);\n  currentRequestIdRef.current = requestId;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue): Promise<unknown> | undefined => {\n      if (requestId === undefined || pendingRef.current) return undefined;\n      setPending(true);\n      pendingRef.current = true;\n      const dispatched: unknown = sendResumeRef.current(requestId, value);\n      if (!(dispatched instanceof Promise)) return undefined;\n      dispatched.then(undefined, (error: unknown) => {\n        // A late refusal for a request the lock has since moved past (the\n        // park was re-keyed, or a newer answer is in flight) must neither\n        // release that answer's lock nor be reported as a failure of it.\n        const current = currentRequestIdRef.current;\n        if (current !== undefined && current !== requestId) return;\n        setPending(false);\n        pendingRef.current = false;\n        onResumeRejectedRef.current?.(error, requestId);\n      });\n      return dispatched;\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":[],"mappings":";;;AA4DA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AAQA,MAAM,wCAA6D,oBAAI,IAAI,CAAC,uBAAuB,CAAC;AAO7F,SAAS,uBAAuB,SAA2B;AAChE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,yBAAyB,MAAO,QAAO;AACnD,SACE,OAAO,QAAQ,WAAW,YAAY,sCAAsC,IAAI,QAAQ,MAAM;AAElG;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,QAAM,UAAW,QAAkC;AACnD,SAAO,CAAC,6BAA6B,OAAO,KAAK,CAAC,uBAAuB,OAAO;AAClF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAgBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,EAAa,EACpF;AACJ;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAY,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,MAAM,2BAA2B;AASjC,SAAS,uBACd,SAAiB,0BACO;AACxB,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AA0DO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,sBAAsB,qBAAqB;AAErF,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,mBAAmB,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkB,OAAO,KAAK;AACpC,YAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvB,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgB,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,sBAAsB,OAAO,gBAAgB;AACnD,sBAAoB,UAAU;AAC9B,QAAM,sBAAsB,OAAO,SAAS;AAC5C,sBAAoB,UAAU;AAC9B,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAAS;AAAA,IACb,CAAC,UAAgD;AAC/C,UAAI,cAAc,UAAa,WAAW,QAAS,QAAO;AAC1D,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,YAAM,aAAsB,cAAc,QAAQ,WAAW,KAAK;AAClE,UAAI,EAAE,sBAAsB,SAAU,QAAO;AAC7C,iBAAW,KAAK,QAAW,CAAC,UAAmB;;AAI7C,cAAM,UAAU,oBAAoB;AACpC,YAAI,YAAY,UAAa,YAAY,UAAW;AACpD,mBAAW,KAAK;AAChB,mBAAW,UAAU;AACrB,kCAAoB,YAApB,6CAA8B,OAAO;AAAA,MACvC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;"}
+{"version":3,"file":"interrupts.js","sources":["../../../../../agent-runtime/src/interrupts.ts"],"sourcesContent":["/**\n * Human-in-the-loop interrupt primitives shared by every statewire chat\n * surface (Olympus, the React SDK, the Office add-in, the Chrome extension,\n * mobile).\n *\n * The agora deep-agent runtime parks a gated run on an `interrupt` input\n * request whose payload carries the Athena `hitl_approval` shape\n * (`athena_deep_agent/hitl_bridge.py`). A surface answers it with\n * `{ type: 'run/input', requestId, response: { type: 'resume', value } }` —\n * the exact command the backend's resume path consumes. This module holds the\n * payload contract (narrowing, resume values) and the shared resume-lock state\n * machine; rendering stays with each surface.\n *\n * Deliberately parameterized rather than self-wiring: these helpers never call\n * `useStatewireRuns`/`useAuiState` themselves. Each surface reads its own\n * statewire hooks (which its tests already mock) and passes the values in, so\n * the shared semantics cannot drift while per-surface wiring stays testable.\n */\n\nimport type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useRef, useState } from 'react';\nimport { hasClientToolInterruptSource } from './client-tools';\nimport { readDeepAgentStreamValues } from './statewire-state';\n\n/** Human-in-the-loop approval payload the agora deep-agent runtime parks a run\n *  on (shaped by `athena_deep_agent/hitl_bridge.py`). */\nexport interface HitlApprovalPayload {\n  source: string;\n  type: string;\n  message: string;\n  /** Risk headline/facts/warnings, when the host includes them. */\n  approval_context?: unknown;\n  context?: {\n    tool_name?: string;\n    tool_id?: string;\n    tool_call_id?: string;\n    tool_args?: Record<string, unknown>;\n    pending_action_count?: number;\n    approval_context?: unknown;\n    /**\n     * Every pending gated call (name + args), in decision order. Absent on\n     * older backends — fall back to the single `tool_name`/`tool_args` pair.\n     * Per-dispatch payloads also carry each lane's `tool_call_id` (the lane\n     * card key) and `interrupt_id` (the lane resume key).\n     */\n    action_requests?: {\n      name?: string;\n      args?: Record<string, unknown>;\n      tool_call_id?: string;\n      interrupt_id?: string;\n      /**\n       * True when \"approve all for this session\" would take effect for this\n       * tool (the workspace allows overriding its approval). Absent on older\n       * backends and on non-overridable tools: the option is not offered.\n       */\n      session_approval_allowed?: boolean;\n    }[];\n    /**\n     * True when each dispatch parked on its own interrupt: decisions submit\n     * per lane via `lane_decisions` and each approved lane starts immediately,\n     * instead of the legacy batch where one resume must answer every lane.\n     */\n    per_dispatch?: boolean;\n  };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\n/** A pending `interrupt` input request; a present `response` key marks it answered. */\nexport function isPendingInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  return request.type === 'interrupt' && !('response' in request);\n}\n\n/**\n * Interrupt sources that were system pauses before the host stamped\n * `requires_user_action: false` on them (a background deep-research wait). Kept\n * only for the deploy skew between an older agora and a newer client; delete\n * once every deployment's raiser stamps the flag.\n */\nconst LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES: ReadonlySet<string> = new Set(['deep_research_pending']);\n\n/**\n * A park nobody answers: the agent is still working (a background research\n * wait) and the backend resumes it itself. The raiser stamps\n * `requires_user_action: false`; older raisers are recognised by source.\n */\nexport function isSystemPauseInterrupt(payload: unknown): boolean {\n  if (!isRecord(payload)) return false;\n  if (payload.requires_user_action === false) return true;\n  return (\n    typeof payload.source === 'string' && LEGACY_SYSTEM_PAUSE_INTERRUPT_SOURCES.has(payload.source)\n  );\n}\n\n/**\n * A pending interrupt an approval card may answer. Two kinds are excluded —\n * client-tool parks (the client-tool bridge owns those, and a generic resume\n * would corrupt the parked tool call) and system pauses (nothing to answer; the\n * backend resumes them). The source checks are deliberately loose so a skewed\n * deploy can never route one here.\n */\nexport function isApprovalCardInterrupt(\n  request: StatewireThread.InputRequestState,\n): request is StatewireThread.CustomInputRequest {\n  if (!isPendingInterrupt(request)) return false;\n  const payload = (request as { payload?: unknown }).payload;\n  return !hasClientToolInterruptSource(payload) && !isSystemPauseInterrupt(payload);\n}\n\n/** Narrow an interrupt payload to the Athena HITL approval shape. */\nexport function asHitlApproval(value: unknown): HitlApprovalPayload | null {\n  if (!isRecord(value)) return null;\n  return value.type === 'hitl' &&\n    value.source === 'hitl_approval' &&\n    typeof value.message === 'string'\n    ? (value as unknown as HitlApprovalPayload)\n    : null;\n}\n\n/** Default paused-run copy when an interrupt payload carries no message. */\nexport const DEFAULT_INTERRUPT_PAUSED_MESSAGE =\n  'The agent is paused and waiting for input.';\n\n/** Best-effort human-readable message from any interrupt payload. */\nexport function readInterruptMessage(\n  value: unknown,\n  fallback: string = DEFAULT_INTERRUPT_PAUSED_MESSAGE,\n): string {\n  if (isRecord(value) && typeof value.message === 'string' && value.message.length > 0) {\n    return value.message;\n  }\n  return fallback;\n}\n\nexport interface PendingActionRequest {\n  name: string;\n  args: Record<string, unknown>;\n  /** The lane's `task` tool-call id (present on per-dispatch payloads). */\n  toolCallId?: string;\n  /** The lane's langgraph interrupt id — the `lane_decisions` resume key. */\n  interruptId?: string;\n  /** Present (true) when a session-wide approval would cover later calls of this tool. */\n  sessionApprovalAllowed?: true;\n}\n\n/**\n * Every gated call this approval covers, in decision order. One resume answers\n * ALL of them, so every entry must stay reviewable somewhere. Falls back to\n * the single first-call fields on older backends without `action_requests`.\n */\nexport function pendingActionRequests(hitl: HitlApprovalPayload | null): PendingActionRequest[] {\n  const context = hitl?.context;\n  if (!context) return [];\n  // The payload crosses the wire with only its top-level shape narrowed\n  // (`asHitlApproval`), so the nested collection must be validated before any\n  // array/property access: a malformed host value must degrade to \"no\n  // reviewable entries\", never crash the approval surface.\n  const requests: Record<string, unknown>[] = Array.isArray(context.action_requests)\n    ? context.action_requests.filter(isRecord)\n    : context.tool_name && context.tool_args\n      ? [{ name: context.tool_name, args: context.tool_args }]\n      : [];\n  return requests.map((request) => ({\n    name: typeof request.name === 'string' ? request.name : 'tool',\n    args: isRecord(request.args) ? request.args : {},\n    ...(typeof request.tool_call_id === 'string' && { toolCallId: request.tool_call_id }),\n    ...(typeof request.interrupt_id === 'string' && { interruptId: request.interrupt_id }),\n    ...(request.session_approval_allowed === true && { sessionApprovalAllowed: true }),\n  }));\n}\n\n/**\n * Whether the card may offer \"approve all for this session\": every pending\n * call must be one the backend stamped as session-approvable, so a batch that\n * mixes in a tool the workspace pinned as always-prompt only offers the\n * one-time answer.\n */\nexport function canApproveForSession(actionRequests: readonly PendingActionRequest[]): boolean {\n  return (\n    actionRequests.length > 0 &&\n    actionRequests.every((request) => request.sessionApprovalAllowed === true)\n  );\n}\n\n/** An interrupt a non-resume dispatch dropped, published by the host. */\nexport interface AbandonedInputRequest {\n  id: string;\n  type: string;\n}\n\n/**\n * `useStatewireState` selector body for the host-published abandoned input\n * requests. Reads through {@link readDeepAgentStreamValues} so the selector is\n * safe on the pre-attach (`undefined`) wire state, and returns the raw array\n * reference so the subscription stays shallow-stable — derive (`.find`) on the\n * result, never inside the selector.\n */\nexport function readAbandonedInputRequests(\n  state: unknown,\n): readonly AbandonedInputRequest[] | undefined {\n  const abandoned = readDeepAgentStreamValues(state).abandonedInputRequests;\n  // Wire value: anything non-array (including a malformed host publication)\n  // reads as \"none\" rather than crashing the consuming surface. Identity-\n  // preserving for the valid case, so it stays selector-safe.\n  return Array.isArray(abandoned)\n    ? (abandoned as readonly AbandonedInputRequest[])\n    : undefined;\n}\n\n/**\n * `useStatewireState` selector body for the host's mirrored interrupt\n * (`__interrupt__`, the LangGraph `{value, resumable}` wrapper). The mirror\n * is published the moment a lane parks on its gate — while sibling lanes are\n * still streaming and the run manager has NOT yet published an answerable\n * input request. Raw reference, selector-safe; unwrap with\n * {@link interruptMirrorPayload}.\n */\nexport function readInterruptMirror(state: unknown): unknown {\n  return readDeepAgentStreamValues(state).__interrupt__;\n}\n\n/** The payload of a mirrored interrupt wrapper, or `undefined` for anything else. */\nexport function interruptMirrorPayload(mirror: unknown): unknown {\n  return isRecord(mirror) ? mirror.value : undefined;\n}\n\n/**\n * `useStatewireState` selector body for the per-dispatch lane decisions the\n * host accepted through `run/lane-input` while the run was still streaming\n * (`queuedLaneDecisions`, keyed by langgraph interrupt id). Held until the\n * run parks, then answered as a native `lane_decisions` resume; every attached\n * client reads a queued lane as decided. Raw reference, selector-safe.\n */\nexport function readQueuedLaneDecisions(\n  state: unknown,\n): Readonly<Record<string, unknown>> | undefined {\n  const queued = readDeepAgentStreamValues(state).queuedLaneDecisions;\n  return isRecord(queued) ? queued : undefined;\n}\n\n/**\n * The distinct langgraph interrupt ids a `lane_decisions` resume answers for\n * these gated calls, in first-seen order — or `null` when any call lacks its\n * stamp (a legacy batch payload only a positional resume can answer). A\n * nested HITL request gating several calls contributes one id: the lane is\n * the interrupt, and one decision fans across its calls server-side.\n */\nexport function laneInterruptIds(actionRequests: readonly PendingActionRequest[]): string[] | null {\n  if (actionRequests.length === 0) return null;\n  const ids: string[] = [];\n  for (const request of actionRequests) {\n    if (request.interruptId === undefined) return null;\n    if (!ids.includes(request.interruptId)) ids.push(request.interruptId);\n  }\n  return ids;\n}\n\n/** One decision for every lane — the `lane_decisions` map a run-wide approve or reject sends. */\nexport function fanLaneDecision<T>({\n  interruptIds,\n  decision,\n}: {\n  interruptIds: readonly string[];\n  decision: T;\n}): Record<string, T> {\n  return Object.fromEntries(interruptIds.map((id) => [id, decision]));\n}\n\n/** The abandoned `interrupt` entry, if any — the \"approval was cancelled\" notice. */\nexport function findAbandonedInterrupt(\n  abandoned: readonly AbandonedInputRequest[] | undefined,\n): AbandonedInputRequest | undefined {\n  return abandoned?.find(\n    (request) => isRecord(request) && request.type === 'interrupt' && typeof request.id === 'string',\n  );\n}\n\n/** Canonical reason string carried by a user rejection. */\nexport const HITL_REJECT_REASON = 'User rejected the action.';\n\n/**\n * Default {@link UseApprovalResumeLockOptions.pendingResumeGraceMs} for every\n * approval surface: how long a clicked decision waits for its resume run to\n * start before the actions unlock again. Covers a `run/input` the host\n * rejected or a disconnected transport swallowed before any run began — the\n * one failure neither identity-change nor observed-run recovery can detect.\n */\nexport const HITL_PENDING_RESUME_GRACE_MS = 15_000;\n\n/** `run/input` resume value approving the gated call(s). */\nexport function hitlResumeApprove(): Record<string, string> {\n  return { action: 'approve' };\n}\n\n/**\n * `run/input` resume value approving the gated call(s) AND every later call of\n * the same tool(s) on this thread. The backend records the tools from its own\n * parked interrupt (never from this payload), so the value carries no names.\n */\nexport function hitlResumeApproveForSession(): Record<string, string> {\n  return { action: 'approve', scope: 'session' };\n}\n\n/** `run/input` resume value rejecting the gated call(s). */\nexport function hitlResumeReject(reason: string = HITL_REJECT_REASON): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\n/** Canonical reason string carried by a user declining a non-HITL park. */\nexport const INTERRUPT_DECLINE_REASON = 'User declined the request.';\n\n/**\n * `run/input` resume value declining a non-HITL park. `{ action: 'reject' }`\n * is the one value every typed raiser treats as a clean user decline\n * (`FormCancelledError` / `ToolRejectedError`); a generic `continue` would be\n * rejected by their resume schemas and surface as a tool error the agent then\n * improvises around.\n */\nexport function interruptResumeDecline(\n  reason: string = INTERRUPT_DECLINE_REASON,\n): Record<string, string> {\n  return { action: 'reject', reason };\n}\n\nexport interface UseApprovalResumeLockOptions<TValue> {\n  /** The pending interrupt's request id (`undefined` when nothing is parked). */\n  requestId: string | undefined;\n  /** The surface's thread `isRunning` read (mockable per surface). */\n  isRunning: boolean;\n  /**\n   * Dispatch the `run/input` resume for `requestId` on the surface's transport.\n   * Return the dispatch promise so a refused or lost command releases the lock\n   * at once and reaches `onResumeRejected`; a `void` return leaves the\n   * recovery paths below as the only release.\n   */\n  sendResume: (requestId: string, value: TValue) => void | Promise<unknown>;\n  /**\n   * The dispatch `sendResume` returned rejected — the host refused the\n   * `run/input` or the transport lost it. The lock is already released when\n   * this fires; the surface tells the user, since the request is back on\n   * screen with nothing else saying why.\n   */\n  onResumeRejected?: (error: unknown, requestId: string) => void;\n  /**\n   * Re-enable the actions when no resume run started within this window —\n   * covers a `run/input` that was rejected or lost before any run began, so\n   * neither reset path below can fire. Omit to keep the pre-existing surface\n   * behavior of staying locked until a resume run is observed.\n   */\n  pendingResumeGraceMs?: number;\n}\n\nexport interface ApprovalResumeLock<TValue> {\n  /** True after a resume until the request identity changes (or recovery fires). */\n  pending: boolean;\n  /**\n   * Send the resume value, locking the actions. No-op (returns `undefined`)\n   * while pending or unparked. Returns the dispatch promise when `sendResume`\n   * produced one, so a surface can hold its own state until the host settles.\n   */\n  resume: (value: TValue) => Promise<unknown> | undefined;\n}\n\n/**\n * Optimistic action lock shared by every approval surface: disable the\n * decision buttons the moment one is clicked, until the request identity\n * changes (it clears after the resume, or a fresh interrupt arrives). This\n * closes the double-click → duplicate-resume window.\n *\n * Recovery paths, in order of specificity:\n * 0. The dispatch itself rejected (a `sendResume` that returned a promise) —\n *    released at once, and reported through `onResumeRejected`.\n * 1. Identity change — the resume landed (or a new interrupt replaced the\n *    request). Reset during render via React's \"previous value\" pattern.\n * 2. A resume run was observed starting and then settling with the request\n *    still pending (failed/cancelled resume) — clear the lock so the user can\n *    answer again.\n * 3. Optional grace window ({@link UseApprovalResumeLockOptions.pendingResumeGraceMs})\n *    for a `run/input` that never started a run at all.\n */\nexport function useApprovalResumeLock<TValue = Record<string, string>>(\n  options: UseApprovalResumeLockOptions<TValue>,\n): ApprovalResumeLock<TValue> {\n  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;\n\n  const [pending, setPending] = useState(false);\n  const prevRequestIdRef = useRef(requestId);\n  if (prevRequestIdRef.current !== requestId) {\n    prevRequestIdRef.current = requestId;\n    if (pending) setPending(false);\n  }\n\n  // Track the resume run we kicked off (isRunning observed true→false while\n  // pending) and clear `pending` when it ends with the request unresolved.\n  const sawResumeRunRef = useRef(false);\n  useEffect(() => {\n    if (!pending) {\n      sawResumeRunRef.current = false;\n      return;\n    }\n    if (isRunning) {\n      sawResumeRunRef.current = true;\n      return;\n    }\n    if (sawResumeRunRef.current) {\n      sawResumeRunRef.current = false;\n      setPending(false);\n    }\n  }, [pending, isRunning]);\n\n  // Pre-start failure recovery: re-enable after the grace window when no\n  // resume run began; answering the still-parked request again is exactly\n  // what the user needs to be able to do.\n  useEffect(() => {\n    if (!pending || pendingResumeGraceMs === undefined) return;\n    const timer = setTimeout(() => {\n      if (!sawResumeRunRef.current) setPending(false);\n    }, pendingResumeGraceMs);\n    return () => clearTimeout(timer);\n  }, [pending, requestId, pendingResumeGraceMs]);\n\n  const sendResumeRef = useRef(sendResume);\n  sendResumeRef.current = sendResume;\n  const onResumeRejectedRef = useRef(onResumeRejected);\n  onResumeRejectedRef.current = onResumeRejected;\n  const currentRequestIdRef = useRef(requestId);\n  currentRequestIdRef.current = requestId;\n  const pendingRef = useRef(pending);\n  pendingRef.current = pending;\n\n  const resume = useCallback(\n    (value: TValue): Promise<unknown> | undefined => {\n      if (requestId === undefined || pendingRef.current) return undefined;\n      setPending(true);\n      pendingRef.current = true;\n      const dispatched: unknown = sendResumeRef.current(requestId, value);\n      if (!(dispatched instanceof Promise)) return undefined;\n      dispatched.then(undefined, (error: unknown) => {\n        // A late refusal for a request the lock has since moved past (the\n        // park was re-keyed, or a newer answer is in flight) must neither\n        // release that answer's lock nor be reported as a failure of it.\n        const current = currentRequestIdRef.current;\n        if (current !== undefined && current !== requestId) return;\n        setPending(false);\n        pendingRef.current = false;\n        onResumeRejectedRef.current?.(error, requestId);\n      });\n      return dispatched;\n    },\n    [requestId],\n  );\n\n  return { pending, resume };\n}\n"],"names":[],"mappings":";;;AAkEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAGO,SAAS,mBACd,SAC+C;AAC/C,SAAO,QAAQ,SAAS,eAAe,EAAE,cAAc;AACzD;AAQA,MAAM,wCAA6D,oBAAI,IAAI,CAAC,uBAAuB,CAAC;AAO7F,SAAS,uBAAuB,SAA2B;AAChE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,yBAAyB,MAAO,QAAO;AACnD,SACE,OAAO,QAAQ,WAAW,YAAY,sCAAsC,IAAI,QAAQ,MAAM;AAElG;AASO,SAAS,wBACd,SAC+C;AAC/C,MAAI,CAAC,mBAAmB,OAAO,EAAG,QAAO;AACzC,QAAM,UAAW,QAAkC;AACnD,SAAO,CAAC,6BAA6B,OAAO,KAAK,CAAC,uBAAuB,OAAO;AAClF;AAGO,SAAS,eAAe,OAA4C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SAAO,MAAM,SAAS,UACpB,MAAM,WAAW,mBACjB,OAAO,MAAM,YAAY,WACtB,QACD;AACN;AAGO,MAAM,mCACX;AAGK,SAAS,qBACd,OACA,WAAmB,kCACX;AACR,MAAI,SAAS,KAAK,KAAK,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,SAAS,GAAG;AACpF,WAAO,MAAM;AAAA,EACf;AACA,SAAO;AACT;AAkBO,SAAS,sBAAsB,MAA0D;AAC9F,QAAM,UAAU,6BAAM;AACtB,MAAI,CAAC,QAAS,QAAO,CAAA;AAKrB,QAAM,WAAsC,MAAM,QAAQ,QAAQ,eAAe,IAC7E,QAAQ,gBAAgB,OAAO,QAAQ,IACvC,QAAQ,aAAa,QAAQ,YAC3B,CAAC,EAAE,MAAM,QAAQ,WAAW,MAAM,QAAQ,UAAA,CAAW,IACrD,CAAA;AACN,SAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IAChC,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,IACxD,MAAM,SAAS,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAA;AAAA,IAC9C,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,YAAY,QAAQ,aAAA;AAAA,IACtE,GAAI,OAAO,QAAQ,iBAAiB,YAAY,EAAE,aAAa,QAAQ,aAAA;AAAA,IACvE,GAAI,QAAQ,6BAA6B,QAAQ,EAAE,wBAAwB,KAAA;AAAA,EAAK,EAChF;AACJ;AAQO,SAAS,qBAAqB,gBAA0D;AAC7F,SACE,eAAe,SAAS,KACxB,eAAe,MAAM,CAAC,YAAY,QAAQ,2BAA2B,IAAI;AAE7E;AAeO,SAAS,2BACd,OAC8C;AAC9C,QAAM,YAAY,0BAA0B,KAAK,EAAE;AAInD,SAAO,MAAM,QAAQ,SAAS,IACzB,YACD;AACN;AAUO,SAAS,oBAAoB,OAAyB;AAC3D,SAAO,0BAA0B,KAAK,EAAE;AAC1C;AAGO,SAAS,uBAAuB,QAA0B;AAC/D,SAAO,SAAS,MAAM,IAAI,OAAO,QAAQ;AAC3C;AASO,SAAS,wBACd,OAC+C;AAC/C,QAAM,SAAS,0BAA0B,KAAK,EAAE;AAChD,SAAO,SAAS,MAAM,IAAI,SAAS;AACrC;AASO,SAAS,iBAAiB,gBAAkE;AACjG,MAAI,eAAe,WAAW,EAAG,QAAO;AACxC,QAAM,MAAgB,CAAA;AACtB,aAAW,WAAW,gBAAgB;AACpC,QAAI,QAAQ,gBAAgB,OAAW,QAAO;AAC9C,QAAI,CAAC,IAAI,SAAS,QAAQ,WAAW,EAAG,KAAI,KAAK,QAAQ,WAAW;AAAA,EACtE;AACA,SAAO;AACT;AAGO,SAAS,gBAAmB;AAAA,EACjC;AAAA,EACA;AACF,GAGsB;AACpB,SAAO,OAAO,YAAY,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC;AACpE;AAGO,SAAS,uBACd,WACmC;AACnC,SAAO,uCAAW;AAAA,IAChB,CAAC,YAAY,SAAS,OAAO,KAAK,QAAQ,SAAS,eAAe,OAAO,QAAQ,OAAO;AAAA;AAE5F;AAGO,MAAM,qBAAqB;AAS3B,MAAM,+BAA+B;AAGrC,SAAS,oBAA4C;AAC1D,SAAO,EAAE,QAAQ,UAAA;AACnB;AAOO,SAAS,8BAAsD;AACpE,SAAO,EAAE,QAAQ,WAAW,OAAO,UAAA;AACrC;AAGO,SAAS,iBAAiB,SAAiB,oBAA4C;AAC5F,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AAGO,MAAM,2BAA2B;AASjC,SAAS,uBACd,SAAiB,0BACO;AACxB,SAAO,EAAE,QAAQ,UAAU,OAAA;AAC7B;AA0DO,SAAS,sBACd,SAC4B;AAC5B,QAAM,EAAE,WAAW,WAAW,YAAY,sBAAsB,qBAAqB;AAErF,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,mBAAmB,OAAO,SAAS;AACzC,MAAI,iBAAiB,YAAY,WAAW;AAC1C,qBAAiB,UAAU;AAC3B,QAAI,oBAAoB,KAAK;AAAA,EAC/B;AAIA,QAAM,kBAAkB,OAAO,KAAK;AACpC,YAAU,MAAM;AACd,QAAI,CAAC,SAAS;AACZ,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,WAAW;AACb,sBAAgB,UAAU;AAC1B;AAAA,IACF;AACA,QAAI,gBAAgB,SAAS;AAC3B,sBAAgB,UAAU;AAC1B,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,SAAS,CAAC;AAKvB,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,yBAAyB,OAAW;AACpD,UAAM,QAAQ,WAAW,MAAM;AAC7B,UAAI,CAAC,gBAAgB,QAAS,YAAW,KAAK;AAAA,IAChD,GAAG,oBAAoB;AACvB,WAAO,MAAM,aAAa,KAAK;AAAA,EACjC,GAAG,CAAC,SAAS,WAAW,oBAAoB,CAAC;AAE7C,QAAM,gBAAgB,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,sBAAsB,OAAO,gBAAgB;AACnD,sBAAoB,UAAU;AAC9B,QAAM,sBAAsB,OAAO,SAAS;AAC5C,sBAAoB,UAAU;AAC9B,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,SAAS;AAAA,IACb,CAAC,UAAgD;AAC/C,UAAI,cAAc,UAAa,WAAW,QAAS,QAAO;AAC1D,iBAAW,IAAI;AACf,iBAAW,UAAU;AACrB,YAAM,aAAsB,cAAc,QAAQ,WAAW,KAAK;AAClE,UAAI,EAAE,sBAAsB,SAAU,QAAO;AAC7C,iBAAW,KAAK,QAAW,CAAC,UAAmB;;AAI7C,cAAM,UAAU,oBAAoB;AACpC,YAAI,YAAY,UAAa,YAAY,UAAW;AACpD,mBAAW,KAAK;AAChB,mBAAW,UAAU;AACrB,kCAAoB,YAApB,6CAA8B,OAAO;AAAA,MACvC,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,CAAC,SAAS;AAAA,EAAA;AAGZ,SAAO,EAAE,SAAS,OAAA;AACpB;"}

package/dist/packages/react/package.json.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const version = "0.21.1";
+const version = "0.22.0";
 const packageJson = {
   version
 };

package/dist/packages/react/package.json.js

@@ -1,4 +1,4 @@
-const version = "0.21.1";
+const version = "0.22.0";
 const packageJson = {
   version
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@athenaintel/react",
-  "version": "0.21.1",
+  "version": "0.22.0",
   "description": "Athena React SDK — Build AI-powered chat applications with the Athena platform",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -85,12 +85,12 @@
     }
   },
   "dependencies": {
-    "@assistant-ui/core": "0.3.17",
-    "@assistant-ui/react": "0.15.18",
-    "@assistant-ui/react-markdown": "0.14.14",
+    "@assistant-ui/core": "0.3.19",
+    "@assistant-ui/react": "0.15.20",
+    "@assistant-ui/react-markdown": "0.14.15",
     "@assistant-ui/react-statewire": "0.28.1",
-    "@assistant-ui/store": "0.3.12",
-    "@assistant-ui/tap": "0.9.16",
+    "@assistant-ui/store": "0.3.13",
+    "@assistant-ui/tap": "0.9.17",
     "@floating-ui/react": "^0.27.7",
     "@tailwindcss/typography": "^0.5.19",
     "@tanstack/react-query": "5.99.2",
@@ -113,7 +113,7 @@
     "@tiptap/suggestion": "^2.11",
     "@y/websocket": "4.0.0-rc.2",
     "@y/y": "14.0.0-rc.26",
-    "assistant-stream": "0.3.41",
+    "assistant-stream": "0.3.43",
     "class-variance-authority": "^0.7.1",
     "cnfast": "0.0.8",
     "lucide-react": "^0.575.0",