@athenaintel/react 0.21.2 → 0.22.0

package/dist/collab/presence-client.js

@@ -0,0 +1,194 @@
+import { WebsocketProvider } from "@y/websocket";
+import * as Y from "@y/y";
+import { classifyClose } from "./close-policy.js";
+import { mintWorkspacePresenceToken } from "./presence-mint.js";
+import { mergePresenceStates } from "./presence-slots.js";
+import { MIN_REFRESH_DELAY_MS, MAX_CONSECUTIVE_REMINTS, refreshDelayMs } from "./token-refresh.js";
+const PRESENCE_SWEEP_INTERVAL_MS = 15e3;
+const EMPTY_ROSTER = { humans: [], agents: [] };
+function connectWorkspacePresence(args) {
+  const doc = new Y.Doc();
+  const listeners = /* @__PURE__ */ new Set();
+  let provider = null;
+  let refreshTimer = null;
+  let destroyed = false;
+  let status = "connecting";
+  let accessType = null;
+  let error = null;
+  let version = 0;
+  let consecutiveRemints = 0;
+  let connectSeq = 0;
+  let roster = EMPTY_ROSTER;
+  let rosterFingerprint = JSON.stringify(EMPTY_ROSTER);
+  const notify = () => {
+    version += 1;
+    for (const listener of listeners) listener();
+  };
+  const applyRoster = (next) => {
+    const fingerprint = JSON.stringify(next);
+    if (fingerprint === rosterFingerprint) return false;
+    roster = next;
+    rosterFingerprint = fingerprint;
+    return true;
+  };
+  const recomputeRoster = () => {
+    if (destroyed) return;
+    const next = provider ? mergePresenceStates(provider.awareness.getStates()) : EMPTY_ROSTER;
+    if (applyRoster(next)) notify();
+  };
+  const setStatus = (next, err = null) => {
+    if (destroyed && next !== "closed") return;
+    status = next;
+    error = err;
+    if (next === "closed" || next === "error") applyRoster(EMPTY_ROSTER);
+    notify();
+  };
+  const clearRefreshTimer = () => {
+    if (refreshTimer !== null) {
+      clearTimeout(refreshTimer);
+      refreshTimer = null;
+    }
+  };
+  const teardownProvider = () => {
+    clearRefreshTimer();
+    if (provider) {
+      const stale = provider;
+      provider = null;
+      stale.destroy();
+      stale.awareness.destroy();
+    }
+  };
+  const scheduleRefresh = (grant) => {
+    clearRefreshTimer();
+    const delay = refreshDelayMs({ expiresAtMs: grant.expires_at_ms, now: Date.now() });
+    refreshTimer = setTimeout(() => {
+      void connect({ scheduledRefresh: true });
+    }, delay);
+  };
+  const connect = async (opts) => {
+    if (destroyed) return;
+    const attempt = ++connectSeq;
+    const scheduledRefresh = (opts == null ? void 0 : opts.scheduledRefresh) === true;
+    if (!scheduledRefresh) {
+      teardownProvider();
+    } else {
+      clearRefreshTimer();
+    }
+    let grant;
+    try {
+      grant = await mintWorkspacePresenceToken({ auth: args.auth, workspaceId: args.workspaceId });
+    } catch (err) {
+      if (destroyed || attempt !== connectSeq) return;
+      if (scheduledRefresh) {
+        refreshTimer = setTimeout(() => {
+          void connect({ scheduledRefresh: true });
+        }, MIN_REFRESH_DELAY_MS);
+        return;
+      }
+      setStatus("error", err instanceof Error ? err : new Error(String(err)));
+      return;
+    }
+    if (destroyed || attempt !== connectSeq) return;
+    if (scheduledRefresh) {
+      teardownProvider();
+    }
+    accessType = grant.access_type;
+    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {
+      params: {
+        yauth: grant.token,
+        branch: grant.branch
+      },
+      // BroadcastChannel would share this room with same-origin tabs
+      // locally, bypassing the server's per-recipient filter. Presence must
+      // round-trip the server.
+      disableBc: true
+    });
+    provider = nextProvider;
+    nextProvider.awareness.off("update", nextProvider._awarenessUpdateHandler);
+    nextProvider.awareness.setLocalState(null);
+    nextProvider.on("status", (event) => {
+      if (provider !== nextProvider) return;
+      if (event.status === "connected") {
+        consecutiveRemints = 0;
+      }
+      setStatus(event.status);
+    });
+    nextProvider.on("connection-close", (event) => {
+      if (provider !== nextProvider) return;
+      const action = classifyClose(event == null ? void 0 : event.code);
+      if (action === "remint") {
+        consecutiveRemints += 1;
+        teardownProvider();
+        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {
+          setStatus(
+            "closed",
+            new Error("Access repeatedly revoked mid-session (4401); giving up.")
+          );
+          return;
+        }
+        applyRoster(EMPTY_ROSTER);
+        setStatus("connecting");
+        void connect();
+      } else if (action === "stop") {
+        teardownProvider();
+        setStatus(
+          "closed",
+          new Error(`Connection closed permanently (code ${(event == null ? void 0 : event.code) ?? "unknown"})`)
+        );
+      }
+    });
+    const onAwareness = () => {
+      if (provider !== nextProvider) return;
+      recomputeRoster();
+    };
+    nextProvider.awareness.on("change", onAwareness);
+    nextProvider.awareness.on("update", onAwareness);
+    scheduleRefresh(grant);
+  };
+  void connect();
+  const sweepTimer = setInterval(recomputeRoster, PRESENCE_SWEEP_INTERVAL_MS);
+  return {
+    get status() {
+      return status;
+    },
+    get error() {
+      return error;
+    },
+    get accessType() {
+      return accessType;
+    },
+    get version() {
+      return version;
+    },
+    get humans() {
+      return roster.humans;
+    },
+    get agents() {
+      return roster.agents;
+    },
+    refreshNow: () => connect({ scheduledRefresh: true }),
+    onChange: (listener) => {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    destroy: () => {
+      if (destroyed) return;
+      destroyed = true;
+      clearInterval(sweepTimer);
+      teardownProvider();
+      status = "closed";
+      applyRoster(EMPTY_ROSTER);
+      version += 1;
+      for (const listener of [...listeners]) listener();
+      listeners.clear();
+      doc.destroy();
+    }
+  };
+}
+export {
+  PRESENCE_SWEEP_INTERVAL_MS,
+  connectWorkspacePresence
+};
+//# sourceMappingURL=presence-client.js.map

package/dist/collab/presence-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-client.js","sources":["../../src/collab/presence-client.ts"],"sourcesContent":["/**\n * Vanilla (framework-agnostic) observer of a workspace's presence feed.\n *\n * `connectWorkspacePresence` mints a read-only token for the workspace\n * awareness room (`<workspaceId>/awareness`), opens the Keryx WebSocket with\n * the v14 provider, and keeps a merged roster of the people and agent runs in\n * the room — the same per-recipient-filtered feed the Olympus People page\n * renders. Token lifecycle matches `connectGenericDoc`: re-mint before expiry,\n * one fresh mint on a 4401 kick, permanent stop on any other 44xx code,\n * provider backoff for everything else.\n *\n * The client is a **pure observer**. It never writes to the Y.Doc, it drops\n * the provider's default local awareness slot before the socket opens so the\n * token holder never announces itself, and it detaches y-websocket's echo of\n * remote awareness updates — the room's read-only grant carries no broadcast\n * permission, so anything sent would only be discarded server-side. React\n * apps use `useWorkspacePresence` from `@athenaintel/react/collab` instead of\n * calling this directly.\n */\n\nimport { WebsocketProvider } from '@y/websocket';\nimport * as Y from '@y/y';\nimport type { GenericDocStatus } from './client';\nimport { classifyClose } from './close-policy';\nimport type { CollabAuth } from './mint';\nimport { mintWorkspacePresenceToken, type WorkspacePresenceTokenResponse } from './presence-mint';\nimport {\n  mergePresenceStates,\n  type PresenceAgent,\n  type PresenceHuman,\n  type PresenceRoster,\n} from './presence-slots';\nimport { MAX_CONSECUTIVE_REMINTS, MIN_REFRESH_DELAY_MS, refreshDelayMs } from './token-refresh';\n\n/** Same vocabulary as the Generic Doc client; a presence feed has no sync phase of its own. */\nexport type WorkspacePresenceStatus = GenericDocStatus;\n\n/**\n * How often the roster is re-derived without an awareness event. y-protocols\n * drops a slot whose publisher went silent for its `outdatedTimeout` (30 s)\n * from a timer of its own, and this sweep is the belt to that brace: a stale\n * slot falls out of `humans` even if no event reaches us for it.\n */\nexport const PRESENCE_SWEEP_INTERVAL_MS = 15_000;\n\nexport interface WorkspacePresenceHandle {\n  readonly status: WorkspacePresenceStatus;\n  /** Terminal error, when status is 'error' or 'closed'. */\n  readonly error: Error | null;\n  /** Granted access from the last successful mint — always 'r' for this feed. */\n  readonly accessType: 'r' | 'rw' | null;\n  /** Monotonic change counter — bumps on every status or roster notification. */\n  readonly version: number;\n  /**\n   * People in the room, one entry per person (tabs merged by attested id).\n   * Identity-stable between notifications: the array only changes when the\n   * derived roster does, so it is safe to key memoisation on.\n   */\n  readonly humans: PresenceHuman[];\n  /** Agent runs in the room with something the token holder may see. */\n  readonly agents: PresenceAgent[];\n  /**\n   * Force an early token refresh. Session-preserving: the live connection\n   * stays up until the fresh token is minted; a failed mint retries on a\n   * short timer instead of dropping the session.\n   */\n  refreshNow: () => Promise<void>;\n  onChange: (listener: () => void) => () => void;\n  destroy: () => void;\n}\n\nconst EMPTY_ROSTER: PresenceRoster = { humans: [], agents: [] };\n\nexport function connectWorkspacePresence(args: {\n  workspaceId: string;\n  auth: CollabAuth;\n}): WorkspacePresenceHandle {\n  // The awareness room is a Keryx doc like any other; the provider needs a\n  // Y.Doc to attach to. Nothing here ever writes to it.\n  const doc = new Y.Doc();\n  const listeners = new Set<() => void>();\n\n  let provider: WebsocketProvider | null = null;\n  let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n  let destroyed = false;\n  let status: WorkspacePresenceStatus = 'connecting';\n  let accessType: 'r' | 'rw' | null = null;\n  let error: Error | null = null;\n  let version = 0;\n  let consecutiveRemints = 0;\n  /**\n   * Connection attempts can overlap — the initial mint, `refreshNow`, the\n   * refresh timer and a 4401 kick all enter `connect()`. The newest attempt\n   * owns the connection; an older one still waiting on its mint drops its\n   * result when it lands, so an out-of-order grant can neither replace a newer\n   * provider nor leave one connected but orphaned.\n   */\n  let connectSeq = 0;\n  let roster: PresenceRoster = EMPTY_ROSTER;\n  let rosterFingerprint = JSON.stringify(EMPTY_ROSTER);\n\n  const notify = () => {\n    version += 1;\n    for (const listener of listeners) listener();\n  };\n\n  /** Replace the roster only when the derived value changed; returns whether it did. */\n  const applyRoster = (next: PresenceRoster): boolean => {\n    const fingerprint = JSON.stringify(next);\n    if (fingerprint === rosterFingerprint) return false;\n    roster = next;\n    rosterFingerprint = fingerprint;\n    return true;\n  };\n\n  const recomputeRoster = () => {\n    if (destroyed) return;\n    const next = provider ? mergePresenceStates(provider.awareness.getStates()) : EMPTY_ROSTER;\n    if (applyRoster(next)) notify();\n  };\n\n  const setStatus = (next: WorkspacePresenceStatus, err: Error | null = null) => {\n    if (destroyed && next !== 'closed') return;\n    status = next;\n    error = err;\n    // A feed that stopped must not keep showing the last roster: silence\n    // reading as \"these people are still here\" is the failure presence exists\n    // to avoid.\n    if (next === 'closed' || next === 'error') applyRoster(EMPTY_ROSTER);\n    notify();\n  };\n\n  const clearRefreshTimer = () => {\n    if (refreshTimer !== null) {\n      clearTimeout(refreshTimer);\n      refreshTimer = null;\n    }\n  };\n\n  const teardownProvider = () => {\n    clearRefreshTimer();\n    if (provider) {\n      const stale = provider;\n      // Null first so the awareness listeners below see a superseded provider\n      // and ignore the events its destruction emits.\n      provider = null;\n      stale.destroy();\n      // The provider does not destroy the awareness it created; without this\n      // every superseded instance keeps its outdated-state timer alive until\n      // the doc is destroyed.\n      stale.awareness.destroy();\n    }\n  };\n\n  const scheduleRefresh = (grant: WorkspacePresenceTokenResponse) => {\n    clearRefreshTimer();\n    const delay = refreshDelayMs({ expiresAtMs: grant.expires_at_ms, now: Date.now() });\n    refreshTimer = setTimeout(() => {\n      void connect({ scheduledRefresh: true });\n    }, delay);\n  };\n\n  const connect = async (opts?: { scheduledRefresh?: boolean }): Promise<void> => {\n    if (destroyed) return;\n    const attempt = ++connectSeq;\n    const scheduledRefresh = opts?.scheduledRefresh === true;\n    // A scheduled refresh mints FIRST and keeps the live session up: the old\n    // token has ~5 minutes of headroom, so a transient mint failure retries\n    // on a short timer instead of dropping a healthy connection.\n    if (!scheduledRefresh) {\n      teardownProvider();\n    } else {\n      clearRefreshTimer();\n    }\n    let grant: WorkspacePresenceTokenResponse;\n    try {\n      grant = await mintWorkspacePresenceToken({ auth: args.auth, workspaceId: args.workspaceId });\n    } catch (err) {\n      // Superseded while minting: the newer attempt owns the outcome, and a\n      // retry timer from this one would only stomp on its schedule.\n      if (destroyed || attempt !== connectSeq) return;\n      if (scheduledRefresh) {\n        refreshTimer = setTimeout(() => {\n          void connect({ scheduledRefresh: true });\n        }, MIN_REFRESH_DELAY_MS);\n        return;\n      }\n      // A denied mint is authoritative (not an admin / roster not enabled /\n      // sandbox credential refused); anything else (network) is worth telling\n      // the caller about too — the handle stays usable via a later explicit\n      // reconnect-by-recreate.\n      setStatus('error', err instanceof Error ? err : new Error(String(err)));\n      return;\n    }\n    if (destroyed || attempt !== connectSeq) return;\n    if (scheduledRefresh) {\n      teardownProvider();\n    }\n    accessType = grant.access_type;\n\n    const nextProvider = new WebsocketProvider(grant.ws_url, `${grant.org}/${grant.doc_id}`, doc, {\n      params: {\n        yauth: grant.token,\n        branch: grant.branch,\n      },\n      // BroadcastChannel would share this room with same-origin tabs\n      // locally, bypassing the server's per-recipient filter. Presence must\n      // round-trip the server.\n      disableBc: true,\n    });\n    provider = nextProvider;\n\n    // Pure observer. y-websocket re-broadcasts every awareness update it\n    // sees (including remote ones) and announces a default `{}` local slot on\n    // connect; drop both before the socket opens. Detach the echo handler\n    // first so clearing the local slot does not itself get echoed.\n    nextProvider.awareness.off('update', nextProvider._awarenessUpdateHandler);\n    nextProvider.awareness.setLocalState(null);\n\n    nextProvider.on('status', (event: { status: 'connecting' | 'connected' | 'disconnected' }) => {\n      if (provider !== nextProvider) return;\n      if (event.status === 'connected') {\n        consecutiveRemints = 0;\n      }\n      setStatus(event.status);\n    });\n\n    nextProvider.on('connection-close', (event: CloseEvent | null) => {\n      if (provider !== nextProvider) return;\n      const action = classifyClose(event?.code);\n      if (action === 'remint') {\n        // Revoked mid-session: a fresh mint re-runs the server-side check. If\n        // access is truly gone the mint 403s and we land in 'error'. Bounded:\n        // repeated 4401s without an intervening successful connect mean the\n        // server keeps rejecting freshly minted tokens — stop rather than\n        // loop mint→connect→kick.\n        consecutiveRemints += 1;\n        teardownProvider();\n        if (consecutiveRemints > MAX_CONSECUTIVE_REMINTS) {\n          setStatus(\n            'closed',\n            new Error('Access repeatedly revoked mid-session (4401); giving up.')\n          );\n          return;\n        }\n        // The socket is gone and the fresh grant is a network round-trip\n        // away: until it connects there is no live feed, so neither\n        // 'connected' nor the last roster may stand.\n        applyRoster(EMPTY_ROSTER);\n        setStatus('connecting');\n        void connect();\n      } else if (action === 'stop') {\n        teardownProvider();\n        setStatus(\n          'closed',\n          new Error(`Connection closed permanently (code ${event?.code ?? 'unknown'})`)\n        );\n      }\n      // 'retry': the provider's exponential backoff handles it.\n    });\n\n    const onAwareness = () => {\n      if (provider !== nextProvider) return;\n      recomputeRoster();\n    };\n    // 'change' fires when a slot's content changed; 'update' also on\n    // keepalive renewals. Both re-derive; the fingerprint gate keeps a\n    // renewal from notifying subscribers.\n    nextProvider.awareness.on('change', onAwareness);\n    nextProvider.awareness.on('update', onAwareness);\n\n    scheduleRefresh(grant);\n  };\n\n  void connect();\n\n  const sweepTimer = setInterval(recomputeRoster, PRESENCE_SWEEP_INTERVAL_MS);\n\n  return {\n    get status() {\n      return status;\n    },\n    get error() {\n      return error;\n    },\n    get accessType() {\n      return accessType;\n    },\n    get version() {\n      return version;\n    },\n    get humans() {\n      return roster.humans;\n    },\n    get agents() {\n      return roster.agents;\n    },\n    refreshNow: () => connect({ scheduledRefresh: true }),\n    onChange: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    destroy: () => {\n      if (destroyed) return;\n      destroyed = true;\n      clearInterval(sweepTimer);\n      teardownProvider();\n      status = 'closed';\n      applyRoster(EMPTY_ROSTER);\n      // Final notification so subscribers observe the closed, empty feed\n      // before their listeners are dropped.\n      version += 1;\n      for (const listener of [...listeners]) listener();\n      listeners.clear();\n      doc.destroy();\n    },\n  };\n}\n"],"names":[],"mappings":";;;;;;AA2CO,MAAM,6BAA6B;AA4B1C,MAAM,eAA+B,EAAE,QAAQ,IAAI,QAAQ,CAAA,EAAC;AAErD,SAAS,yBAAyB,MAGb;AAG1B,QAAM,MAAM,IAAI,EAAE,IAAA;AAClB,QAAM,gCAAgB,IAAA;AAEtB,MAAI,WAAqC;AACzC,MAAI,eAAqD;AACzD,MAAI,YAAY;AAChB,MAAI,SAAkC;AACtC,MAAI,aAAgC;AACpC,MAAI,QAAsB;AAC1B,MAAI,UAAU;AACd,MAAI,qBAAqB;AAQzB,MAAI,aAAa;AACjB,MAAI,SAAyB;AAC7B,MAAI,oBAAoB,KAAK,UAAU,YAAY;AAEnD,QAAM,SAAS,MAAM;AACnB,eAAW;AACX,eAAW,YAAY,UAAW,UAAA;AAAA,EACpC;AAGA,QAAM,cAAc,CAAC,SAAkC;AACrD,UAAM,cAAc,KAAK,UAAU,IAAI;AACvC,QAAI,gBAAgB,kBAAmB,QAAO;AAC9C,aAAS;AACT,wBAAoB;AACpB,WAAO;AAAA,EACT;AAEA,QAAM,kBAAkB,MAAM;AAC5B,QAAI,UAAW;AACf,UAAM,OAAO,WAAW,oBAAoB,SAAS,UAAU,UAAA,CAAW,IAAI;AAC9E,QAAI,YAAY,IAAI,EAAG,QAAA;AAAA,EACzB;AAEA,QAAM,YAAY,CAAC,MAA+B,MAAoB,SAAS;AAC7E,QAAI,aAAa,SAAS,SAAU;AACpC,aAAS;AACT,YAAQ;AAIR,QAAI,SAAS,YAAY,SAAS,qBAAqB,YAAY;AACnE,WAAA;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAC9B,QAAI,iBAAiB,MAAM;AACzB,mBAAa,YAAY;AACzB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,mBAAmB,MAAM;AAC7B,sBAAA;AACA,QAAI,UAAU;AACZ,YAAM,QAAQ;AAGd,iBAAW;AACX,YAAM,QAAA;AAIN,YAAM,UAAU,QAAA;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,kBAAkB,CAAC,UAA0C;AACjE,sBAAA;AACA,UAAM,QAAQ,eAAe,EAAE,aAAa,MAAM,eAAe,KAAK,KAAK,IAAA,GAAO;AAClF,mBAAe,WAAW,MAAM;AAC9B,WAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACzC,GAAG,KAAK;AAAA,EACV;AAEA,QAAM,UAAU,OAAO,SAAyD;AAC9E,QAAI,UAAW;AACf,UAAM,UAAU,EAAE;AAClB,UAAM,oBAAmB,6BAAM,sBAAqB;AAIpD,QAAI,CAAC,kBAAkB;AACrB,uBAAA;AAAA,IACF,OAAO;AACL,wBAAA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,cAAQ,MAAM,2BAA2B,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa;AAAA,IAC7F,SAAS,KAAK;AAGZ,UAAI,aAAa,YAAY,WAAY;AACzC,UAAI,kBAAkB;AACpB,uBAAe,WAAW,MAAM;AAC9B,eAAK,QAAQ,EAAE,kBAAkB,MAAM;AAAA,QACzC,GAAG,oBAAoB;AACvB;AAAA,MACF;AAKA,gBAAU,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE;AAAA,IACF;AACA,QAAI,aAAa,YAAY,WAAY;AACzC,QAAI,kBAAkB;AACpB,uBAAA;AAAA,IACF;AACA,iBAAa,MAAM;AAEnB,UAAM,eAAe,IAAI,kBAAkB,MAAM,QAAQ,GAAG,MAAM,GAAG,IAAI,MAAM,MAAM,IAAI,KAAK;AAAA,MAC5F,QAAQ;AAAA,QACN,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,MAAA;AAAA;AAAA;AAAA;AAAA,MAKhB,WAAW;AAAA,IAAA,CACZ;AACD,eAAW;AAMX,iBAAa,UAAU,IAAI,UAAU,aAAa,uBAAuB;AACzE,iBAAa,UAAU,cAAc,IAAI;AAEzC,iBAAa,GAAG,UAAU,CAAC,UAAmE;AAC5F,UAAI,aAAa,aAAc;AAC/B,UAAI,MAAM,WAAW,aAAa;AAChC,6BAAqB;AAAA,MACvB;AACA,gBAAU,MAAM,MAAM;AAAA,IACxB,CAAC;AAED,iBAAa,GAAG,oBAAoB,CAAC,UAA6B;AAChE,UAAI,aAAa,aAAc;AAC/B,YAAM,SAAS,cAAc,+BAAO,IAAI;AACxC,UAAI,WAAW,UAAU;AAMvB,8BAAsB;AACtB,yBAAA;AACA,YAAI,qBAAqB,yBAAyB;AAChD;AAAA,YACE;AAAA,YACA,IAAI,MAAM,0DAA0D;AAAA,UAAA;AAEtE;AAAA,QACF;AAIA,oBAAY,YAAY;AACxB,kBAAU,YAAY;AACtB,aAAK,QAAA;AAAA,MACP,WAAW,WAAW,QAAQ;AAC5B,yBAAA;AACA;AAAA,UACE;AAAA,UACA,IAAI,MAAM,wCAAuC,+BAAO,SAAQ,SAAS,GAAG;AAAA,QAAA;AAAA,MAEhF;AAAA,IAEF,CAAC;AAED,UAAM,cAAc,MAAM;AACxB,UAAI,aAAa,aAAc;AAC/B,sBAAA;AAAA,IACF;AAIA,iBAAa,UAAU,GAAG,UAAU,WAAW;AAC/C,iBAAa,UAAU,GAAG,UAAU,WAAW;AAE/C,oBAAgB,KAAK;AAAA,EACvB;AAEA,OAAK,QAAA;AAEL,QAAM,aAAa,YAAY,iBAAiB,0BAA0B;AAE1E,SAAO;AAAA,IACL,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,IAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,IACA,IAAI,aAAa;AACf,aAAO;AAAA,IACT;AAAA,IACA,IAAI,UAAU;AACZ,aAAO;AAAA,IACT;AAAA,IACA,IAAI,SAAS;AACX,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,IAAI,SAAS;AACX,aAAO,OAAO;AAAA,IAChB;AAAA,IACA,YAAY,MAAM,QAAQ,EAAE,kBAAkB,MAAM;AAAA,IACpD,UAAU,CAAC,aAAa;AACtB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,SAAS,MAAM;AACb,UAAI,UAAW;AACf,kBAAY;AACZ,oBAAc,UAAU;AACxB,uBAAA;AACA,eAAS;AACT,kBAAY,YAAY;AAGxB,iBAAW;AACX,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AACvC,gBAAU,MAAA;AACV,UAAI,QAAA;AAAA,IACN;AAAA,EAAA;AAEJ;"}

package/dist/collab/presence-mint.cjs

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const mint = require("./mint.cjs");
+function workspaceUrl({
+  auth,
+  workspaceId,
+  path
+}) {
+  const base = mint.getAthenaApiBaseUrl(auth.backendUrl);
+  return `${base}/api/v0/workspaces/${encodeURIComponent(workspaceId)}/${path}`;
+}
+async function mintWorkspacePresenceToken(args) {
+  const response = await fetch(
+    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: "presence-token" }),
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...mint.getCollabAuthHeaders(args.auth)
+      },
+      body: JSON.stringify({}),
+      signal: args.signal
+    }
+  );
+  if (!response.ok) {
+    throw await mint.collabErrorFromResponse(
+      response,
+      `Workspace presence token mint failed with status ${response.status}`
+    );
+  }
+  return await response.json();
+}
+function arrayOrEmpty(value) {
+  return Array.isArray(value) ? value : [];
+}
+async function resolveWorkspacePresence(args) {
+  const response = await fetch(
+    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: "presence/resolve" }),
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...mint.getCollabAuthHeaders(args.auth)
+      },
+      body: JSON.stringify(args.request),
+      signal: args.signal
+    }
+  );
+  if (!response.ok) {
+    throw await mint.collabErrorFromResponse(
+      response,
+      `Workspace presence resolve failed with status ${response.status}`
+    );
+  }
+  const body = await response.json();
+  if (!body || typeof body !== "object") {
+    throw new mint.CollabTokenError(response.status, "Workspace presence resolve returned no body");
+  }
+  return {
+    assets: arrayOrEmpty(body.assets),
+    sessions: arrayOrEmpty(body.sessions),
+    projects: arrayOrEmpty(body.projects),
+    members: arrayOrEmpty(body.members)
+  };
+}
+exports.mintWorkspacePresenceToken = mintWorkspacePresenceToken;
+exports.resolveWorkspacePresence = resolveWorkspacePresence;
+//# sourceMappingURL=presence-mint.cjs.map

package/dist/collab/presence-mint.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-mint.cjs","sources":["../../src/collab/presence-mint.ts"],"sourcesContent":["/**\n * Public-API clients for the workspace presence feed.\n *\n * Two endpoints, both admin-only and both under the workspace:\n *\n * - `POST /api/v0/workspaces/{workspaceId}/presence-token` mints a\n *   **read-only** Keryx token for the workspace awareness room\n *   (`<workspaceId>/awareness`) — the same per-recipient-filtered presence\n *   feed the Olympus People page renders. The holder can receive presence and\n *   broadcast nothing; `connectWorkspacePresence` re-mints before expiry.\n * - `POST /api/v0/workspaces/{workspaceId}/presence/resolve` turns the opaque\n *   ids carried in awareness contexts (asset ids, session thread ids, project\n *   ids) into titles the caller may see. Only things the caller may open come\n *   back; missing ids are simply absent.\n *\n * Wire shapes are snake_case, matching `CollabTokenResponse`.\n */\n\nimport {\n  type CollabAuth,\n  CollabTokenError,\n  collabErrorFromResponse,\n  getAthenaApiBaseUrl,\n  getCollabAuthHeaders,\n} from './mint';\n\n/** Grant for the workspace awareness room. Always read-only (`access_type: 'r'`). */\nexport interface WorkspacePresenceTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport interface WorkspacePresenceResolveRequest {\n  asset_ids?: string[];\n  /** Thread ids, as published in `session` awareness contexts. */\n  session_ids?: string[];\n  project_ids?: string[];\n  include_projects?: boolean;\n  include_members?: boolean;\n}\n\nexport interface WorkspacePresenceResolvedAsset {\n  id: string;\n  title: string;\n  asset_type: string;\n}\n\nexport interface WorkspacePresenceResolvedSession {\n  thread_id: string;\n  asset_id: string;\n  title: string;\n}\n\nexport interface WorkspacePresenceResolvedProject {\n  id: string;\n  title: string;\n  assets: WorkspacePresenceResolvedAsset[];\n}\n\nexport interface WorkspacePresenceResolvedMember {\n  id: string;\n  name: string;\n  email: string;\n  avatar_url: string | null;\n}\n\nexport interface WorkspacePresenceResolveResponse {\n  assets: WorkspacePresenceResolvedAsset[];\n  sessions: WorkspacePresenceResolvedSession[];\n  projects: WorkspacePresenceResolvedProject[];\n  members: WorkspacePresenceResolvedMember[];\n}\n\nfunction workspaceUrl({\n  auth,\n  workspaceId,\n  path,\n}: {\n  auth: CollabAuth;\n  workspaceId: string;\n  path: string;\n}): string {\n  const base = getAthenaApiBaseUrl(auth.backendUrl);\n  return `${base}/api/v0/workspaces/${encodeURIComponent(workspaceId)}/${path}`;\n}\n\n/**\n * Mint a read-only token for the workspace awareness room.\n *\n * Rejects with `CollabTokenError` on 401 (bad credential) and 403 (admin\n * required, roster not enabled for this workspace, or a sandbox credential\n * that may not read presence), carrying the server's `detail`.\n */\nexport async function mintWorkspacePresenceToken(args: {\n  auth: CollabAuth;\n  workspaceId: string;\n  signal?: AbortSignal;\n}): Promise<WorkspacePresenceTokenResponse> {\n  const response = await fetch(\n    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: 'presence-token' }),\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({}),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Workspace presence token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as WorkspacePresenceTokenResponse;\n}\n\nfunction arrayOrEmpty<T>(value: T[] | undefined | null): T[] {\n  return Array.isArray(value) ? value : [];\n}\n\n/**\n * Resolve awareness ids to titles. Every section of the response is always\n * present on the returned object (an omitted section reads as empty), so\n * callers can index without guarding. Failures reject with `CollabTokenError`\n * — the same status + detail shape as the mint.\n */\nexport async function resolveWorkspacePresence(args: {\n  auth: CollabAuth;\n  workspaceId: string;\n  request: WorkspacePresenceResolveRequest;\n  signal?: AbortSignal;\n}): Promise<WorkspacePresenceResolveResponse> {\n  const response = await fetch(\n    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: 'presence/resolve' }),\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify(args.request),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Workspace presence resolve failed with status ${response.status}`\n    );\n  }\n  const body = (await response.json()) as Partial<WorkspacePresenceResolveResponse> | null;\n  if (!body || typeof body !== 'object') {\n    throw new CollabTokenError(response.status, 'Workspace presence resolve returned no body');\n  }\n  return {\n    assets: arrayOrEmpty(body.assets),\n    sessions: arrayOrEmpty(body.sessions),\n    projects: arrayOrEmpty(body.projects),\n    members: arrayOrEmpty(body.members),\n  };\n}\n"],"names":["getAthenaApiBaseUrl","getCollabAuthHeaders","collabErrorFromResponse","CollabTokenError"],"mappings":";;;AA8EA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIW;AACT,QAAM,OAAOA,KAAAA,oBAAoB,KAAK,UAAU;AAChD,SAAO,GAAG,IAAI,sBAAsB,mBAAmB,WAAW,CAAC,IAAI,IAAI;AAC7E;AASA,eAAsB,2BAA2B,MAIL;AAC1C,QAAM,WAAW,MAAM;AAAA,IACrB,aAAa,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,MAAM,kBAAkB;AAAA,IACvF;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAGC,KAAAA,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,EAAE;AAAA,MACvB,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAMC,KAAAA;AAAAA,MACV;AAAA,MACA,oDAAoD,SAAS,MAAM;AAAA,IAAA;AAAA,EAEvE;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;AAEA,SAAS,aAAgB,OAAoC;AAC3D,SAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAA;AACxC;AAQA,eAAsB,yBAAyB,MAKD;AAC5C,QAAM,WAAW,MAAM;AAAA,IACrB,aAAa,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,MAAM,oBAAoB;AAAA,IACzF;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAGD,KAAAA,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,KAAK,OAAO;AAAA,MACjC,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAMC,KAAAA;AAAAA,MACV;AAAA,MACA,iDAAiD,SAAS,MAAM;AAAA,IAAA;AAAA,EAEpE;AACA,QAAM,OAAQ,MAAM,SAAS,KAAA;AAC7B,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,UAAM,IAAIC,KAAAA,iBAAiB,SAAS,QAAQ,6CAA6C;AAAA,EAC3F;AACA,SAAO;AAAA,IACL,QAAQ,aAAa,KAAK,MAAM;AAAA,IAChC,UAAU,aAAa,KAAK,QAAQ;AAAA,IACpC,UAAU,aAAa,KAAK,QAAQ;AAAA,IACpC,SAAS,aAAa,KAAK,OAAO;AAAA,EAAA;AAEtC;;;"}

package/dist/collab/presence-mint.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Public-API clients for the workspace presence feed.
+ *
+ * Two endpoints, both admin-only and both under the workspace:
+ *
+ * - `POST /api/v0/workspaces/{workspaceId}/presence-token` mints a
+ *   **read-only** Keryx token for the workspace awareness room
+ *   (`<workspaceId>/awareness`) — the same per-recipient-filtered presence
+ *   feed the Olympus People page renders. The holder can receive presence and
+ *   broadcast nothing; `connectWorkspacePresence` re-mints before expiry.
+ * - `POST /api/v0/workspaces/{workspaceId}/presence/resolve` turns the opaque
+ *   ids carried in awareness contexts (asset ids, session thread ids, project
+ *   ids) into titles the caller may see. Only things the caller may open come
+ *   back; missing ids are simply absent.
+ *
+ * Wire shapes are snake_case, matching `CollabTokenResponse`.
+ */
+import { type CollabAuth } from './mint';
+/** Grant for the workspace awareness room. Always read-only (`access_type: 'r'`). */
+export interface WorkspacePresenceTokenResponse {
+    token: string;
+    access_type: 'r' | 'rw';
+    expires_at_ms: number;
+    ws_url: string;
+    org: string;
+    doc_id: string;
+    branch: string;
+}
+export interface WorkspacePresenceResolveRequest {
+    asset_ids?: string[];
+    /** Thread ids, as published in `session` awareness contexts. */
+    session_ids?: string[];
+    project_ids?: string[];
+    include_projects?: boolean;
+    include_members?: boolean;
+}
+export interface WorkspacePresenceResolvedAsset {
+    id: string;
+    title: string;
+    asset_type: string;
+}
+export interface WorkspacePresenceResolvedSession {
+    thread_id: string;
+    asset_id: string;
+    title: string;
+}
+export interface WorkspacePresenceResolvedProject {
+    id: string;
+    title: string;
+    assets: WorkspacePresenceResolvedAsset[];
+}
+export interface WorkspacePresenceResolvedMember {
+    id: string;
+    name: string;
+    email: string;
+    avatar_url: string | null;
+}
+export interface WorkspacePresenceResolveResponse {
+    assets: WorkspacePresenceResolvedAsset[];
+    sessions: WorkspacePresenceResolvedSession[];
+    projects: WorkspacePresenceResolvedProject[];
+    members: WorkspacePresenceResolvedMember[];
+}
+/**
+ * Mint a read-only token for the workspace awareness room.
+ *
+ * Rejects with `CollabTokenError` on 401 (bad credential) and 403 (admin
+ * required, roster not enabled for this workspace, or a sandbox credential
+ * that may not read presence), carrying the server's `detail`.
+ */
+export declare function mintWorkspacePresenceToken(args: {
+    auth: CollabAuth;
+    workspaceId: string;
+    signal?: AbortSignal;
+}): Promise<WorkspacePresenceTokenResponse>;
+/**
+ * Resolve awareness ids to titles. Every section of the response is always
+ * present on the returned object (an omitted section reads as empty), so
+ * callers can index without guarding. Failures reject with `CollabTokenError`
+ * — the same status + detail shape as the mint.
+ */
+export declare function resolveWorkspacePresence(args: {
+    auth: CollabAuth;
+    workspaceId: string;
+    request: WorkspacePresenceResolveRequest;
+    signal?: AbortSignal;
+}): Promise<WorkspacePresenceResolveResponse>;

package/dist/collab/presence-mint.js

@@ -0,0 +1,68 @@
+import { getCollabAuthHeaders, collabErrorFromResponse, CollabTokenError, getAthenaApiBaseUrl } from "./mint.js";
+function workspaceUrl({
+  auth,
+  workspaceId,
+  path
+}) {
+  const base = getAthenaApiBaseUrl(auth.backendUrl);
+  return `${base}/api/v0/workspaces/${encodeURIComponent(workspaceId)}/${path}`;
+}
+async function mintWorkspacePresenceToken(args) {
+  const response = await fetch(
+    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: "presence-token" }),
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...getCollabAuthHeaders(args.auth)
+      },
+      body: JSON.stringify({}),
+      signal: args.signal
+    }
+  );
+  if (!response.ok) {
+    throw await collabErrorFromResponse(
+      response,
+      `Workspace presence token mint failed with status ${response.status}`
+    );
+  }
+  return await response.json();
+}
+function arrayOrEmpty(value) {
+  return Array.isArray(value) ? value : [];
+}
+async function resolveWorkspacePresence(args) {
+  const response = await fetch(
+    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: "presence/resolve" }),
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...getCollabAuthHeaders(args.auth)
+      },
+      body: JSON.stringify(args.request),
+      signal: args.signal
+    }
+  );
+  if (!response.ok) {
+    throw await collabErrorFromResponse(
+      response,
+      `Workspace presence resolve failed with status ${response.status}`
+    );
+  }
+  const body = await response.json();
+  if (!body || typeof body !== "object") {
+    throw new CollabTokenError(response.status, "Workspace presence resolve returned no body");
+  }
+  return {
+    assets: arrayOrEmpty(body.assets),
+    sessions: arrayOrEmpty(body.sessions),
+    projects: arrayOrEmpty(body.projects),
+    members: arrayOrEmpty(body.members)
+  };
+}
+export {
+  mintWorkspacePresenceToken,
+  resolveWorkspacePresence
+};
+//# sourceMappingURL=presence-mint.js.map

package/dist/collab/presence-mint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-mint.js","sources":["../../src/collab/presence-mint.ts"],"sourcesContent":["/**\n * Public-API clients for the workspace presence feed.\n *\n * Two endpoints, both admin-only and both under the workspace:\n *\n * - `POST /api/v0/workspaces/{workspaceId}/presence-token` mints a\n *   **read-only** Keryx token for the workspace awareness room\n *   (`<workspaceId>/awareness`) — the same per-recipient-filtered presence\n *   feed the Olympus People page renders. The holder can receive presence and\n *   broadcast nothing; `connectWorkspacePresence` re-mints before expiry.\n * - `POST /api/v0/workspaces/{workspaceId}/presence/resolve` turns the opaque\n *   ids carried in awareness contexts (asset ids, session thread ids, project\n *   ids) into titles the caller may see. Only things the caller may open come\n *   back; missing ids are simply absent.\n *\n * Wire shapes are snake_case, matching `CollabTokenResponse`.\n */\n\nimport {\n  type CollabAuth,\n  CollabTokenError,\n  collabErrorFromResponse,\n  getAthenaApiBaseUrl,\n  getCollabAuthHeaders,\n} from './mint';\n\n/** Grant for the workspace awareness room. Always read-only (`access_type: 'r'`). */\nexport interface WorkspacePresenceTokenResponse {\n  token: string;\n  access_type: 'r' | 'rw';\n  expires_at_ms: number;\n  ws_url: string;\n  org: string;\n  doc_id: string;\n  branch: string;\n}\n\nexport interface WorkspacePresenceResolveRequest {\n  asset_ids?: string[];\n  /** Thread ids, as published in `session` awareness contexts. */\n  session_ids?: string[];\n  project_ids?: string[];\n  include_projects?: boolean;\n  include_members?: boolean;\n}\n\nexport interface WorkspacePresenceResolvedAsset {\n  id: string;\n  title: string;\n  asset_type: string;\n}\n\nexport interface WorkspacePresenceResolvedSession {\n  thread_id: string;\n  asset_id: string;\n  title: string;\n}\n\nexport interface WorkspacePresenceResolvedProject {\n  id: string;\n  title: string;\n  assets: WorkspacePresenceResolvedAsset[];\n}\n\nexport interface WorkspacePresenceResolvedMember {\n  id: string;\n  name: string;\n  email: string;\n  avatar_url: string | null;\n}\n\nexport interface WorkspacePresenceResolveResponse {\n  assets: WorkspacePresenceResolvedAsset[];\n  sessions: WorkspacePresenceResolvedSession[];\n  projects: WorkspacePresenceResolvedProject[];\n  members: WorkspacePresenceResolvedMember[];\n}\n\nfunction workspaceUrl({\n  auth,\n  workspaceId,\n  path,\n}: {\n  auth: CollabAuth;\n  workspaceId: string;\n  path: string;\n}): string {\n  const base = getAthenaApiBaseUrl(auth.backendUrl);\n  return `${base}/api/v0/workspaces/${encodeURIComponent(workspaceId)}/${path}`;\n}\n\n/**\n * Mint a read-only token for the workspace awareness room.\n *\n * Rejects with `CollabTokenError` on 401 (bad credential) and 403 (admin\n * required, roster not enabled for this workspace, or a sandbox credential\n * that may not read presence), carrying the server's `detail`.\n */\nexport async function mintWorkspacePresenceToken(args: {\n  auth: CollabAuth;\n  workspaceId: string;\n  signal?: AbortSignal;\n}): Promise<WorkspacePresenceTokenResponse> {\n  const response = await fetch(\n    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: 'presence-token' }),\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify({}),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Workspace presence token mint failed with status ${response.status}`\n    );\n  }\n  return (await response.json()) as WorkspacePresenceTokenResponse;\n}\n\nfunction arrayOrEmpty<T>(value: T[] | undefined | null): T[] {\n  return Array.isArray(value) ? value : [];\n}\n\n/**\n * Resolve awareness ids to titles. Every section of the response is always\n * present on the returned object (an omitted section reads as empty), so\n * callers can index without guarding. Failures reject with `CollabTokenError`\n * — the same status + detail shape as the mint.\n */\nexport async function resolveWorkspacePresence(args: {\n  auth: CollabAuth;\n  workspaceId: string;\n  request: WorkspacePresenceResolveRequest;\n  signal?: AbortSignal;\n}): Promise<WorkspacePresenceResolveResponse> {\n  const response = await fetch(\n    workspaceUrl({ auth: args.auth, workspaceId: args.workspaceId, path: 'presence/resolve' }),\n    {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        ...getCollabAuthHeaders(args.auth),\n      },\n      body: JSON.stringify(args.request),\n      signal: args.signal,\n    }\n  );\n  if (!response.ok) {\n    throw await collabErrorFromResponse(\n      response,\n      `Workspace presence resolve failed with status ${response.status}`\n    );\n  }\n  const body = (await response.json()) as Partial<WorkspacePresenceResolveResponse> | null;\n  if (!body || typeof body !== 'object') {\n    throw new CollabTokenError(response.status, 'Workspace presence resolve returned no body');\n  }\n  return {\n    assets: arrayOrEmpty(body.assets),\n    sessions: arrayOrEmpty(body.sessions),\n    projects: arrayOrEmpty(body.projects),\n    members: arrayOrEmpty(body.members),\n  };\n}\n"],"names":[],"mappings":";AA8EA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AACF,GAIW;AACT,QAAM,OAAO,oBAAoB,KAAK,UAAU;AAChD,SAAO,GAAG,IAAI,sBAAsB,mBAAmB,WAAW,CAAC,IAAI,IAAI;AAC7E;AASA,eAAsB,2BAA2B,MAIL;AAC1C,QAAM,WAAW,MAAM;AAAA,IACrB,aAAa,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,MAAM,kBAAkB;AAAA,IACvF;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,EAAE;AAAA,MACvB,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAM;AAAA,MACV;AAAA,MACA,oDAAoD,SAAS,MAAM;AAAA,IAAA;AAAA,EAEvE;AACA,SAAQ,MAAM,SAAS,KAAA;AACzB;AAEA,SAAS,aAAgB,OAAoC;AAC3D,SAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAA;AACxC;AAQA,eAAsB,yBAAyB,MAKD;AAC5C,QAAM,WAAW,MAAM;AAAA,IACrB,aAAa,EAAE,MAAM,KAAK,MAAM,aAAa,KAAK,aAAa,MAAM,oBAAoB;AAAA,IACzF;AAAA,MACE,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG,qBAAqB,KAAK,IAAI;AAAA,MAAA;AAAA,MAEnC,MAAM,KAAK,UAAU,KAAK,OAAO;AAAA,MACjC,QAAQ,KAAK;AAAA,IAAA;AAAA,EACf;AAEF,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,MAAM;AAAA,MACV;AAAA,MACA,iDAAiD,SAAS,MAAM;AAAA,IAAA;AAAA,EAEpE;AACA,QAAM,OAAQ,MAAM,SAAS,KAAA;AAC7B,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,UAAM,IAAI,iBAAiB,SAAS,QAAQ,6CAA6C;AAAA,EAC3F;AACA,SAAO;AAAA,IACL,QAAQ,aAAa,KAAK,MAAM;AAAA,IAChC,UAAU,aAAa,KAAK,QAAQ;AAAA,IACpC,UAAU,aAAa,KAAK,QAAQ;AAAA,IACpC,SAAS,aAAa,KAAK,OAAO;AAAA,EAAA;AAEtC;"}

package/dist/collab/presence-react.cjs

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const react = require("react");
+const AthenaContext = require("../provider/AthenaContext.cjs");
+const presenceClient = require("./presence-client.cjs");
+const presenceMint = require("./presence-mint.cjs");
+const presenceSlots = require("./presence-slots.cjs");
+const PRESENCE_DEFAULT_TICK_MS = 1e4;
+const EMPTY_SNAPSHOT = "init||0";
+const NO_HUMANS = [];
+const NO_AGENTS = [];
+function useWorkspacePresence(workspaceId, options) {
+  const config = AthenaContext.useAthenaConfig();
+  const enabled = (options == null ? void 0 : options.enabled) !== false && workspaceId !== null;
+  const tickMs = (options == null ? void 0 : options.tickMs) ?? PRESENCE_DEFAULT_TICK_MS;
+  const [entry, setEntry] = react.useState(null);
+  const handleRef = react.useRef(null);
+  react.useEffect(() => {
+    if (!enabled || workspaceId === null) {
+      setEntry(null);
+      return;
+    }
+    const next = presenceClient.connectWorkspacePresence({
+      workspaceId,
+      auth: {
+        backendUrl: config.backendUrl,
+        apiKey: config.apiKey,
+        token: config.token
+      }
+    });
+    handleRef.current = next;
+    setEntry({ workspaceId, handle: next });
+    return () => {
+      handleRef.current = null;
+      next.destroy();
+    };
+  }, [enabled, workspaceId, config.backendUrl, config.apiKey, config.token]);
+  const handle = enabled && entry !== null && entry.workspaceId === workspaceId ? entry.handle : null;
+  const subscribe = react.useMemo(() => {
+    return (onStoreChange) => {
+      if (!handle) return () => {
+      };
+      return handle.onChange(onStoreChange);
+    };
+  }, [handle]);
+  react.useSyncExternalStore(
+    subscribe,
+    () => {
+      if (!handle) return EMPTY_SNAPSHOT;
+      return `${handle.status}|${handle.accessType ?? ""}|${handle.version}`;
+    },
+    () => EMPTY_SNAPSHOT
+  );
+  const [now, setNow] = react.useState(() => Date.now());
+  react.useEffect(() => {
+    if (!enabled) return;
+    setNow(Date.now());
+    const timer = setInterval(() => {
+      setNow(Date.now());
+    }, tickMs);
+    return () => {
+      clearInterval(timer);
+    };
+  }, [enabled, tickMs]);
+  const rosterHumans = (handle == null ? void 0 : handle.humans) ?? NO_HUMANS;
+  const humans = react.useMemo(
+    () => rosterHumans.map((human) => ({
+      ...human,
+      state: presenceSlots.derivePresenceState({
+        lastIntentAt: human.lastIntentAt,
+        hidden: human.hidden,
+        manualAway: human.manualAway,
+        now
+      })
+    })),
+    [rosterHumans, now]
+  );
+  const refreshNow = react.useCallback(() => {
+    var _a;
+    return ((_a = handleRef.current) == null ? void 0 : _a.refreshNow()) ?? Promise.resolve();
+  }, []);
+  return {
+    status: handle ? handle.status : enabled ? "connecting" : "closed",
+    error: (handle == null ? void 0 : handle.error) ?? null,
+    accessType: (handle == null ? void 0 : handle.accessType) ?? null,
+    humans,
+    agents: (handle == null ? void 0 : handle.agents) ?? NO_AGENTS,
+    refreshNow
+  };
+}
+function useWorkspacePresenceResolver(workspaceId) {
+  const config = AthenaContext.useAthenaConfig();
+  const { backendUrl, apiKey, token } = config;
+  return react.useCallback(
+    (request, signal) => {
+      if (workspaceId === null) {
+        return Promise.reject(
+          new Error("[AthenaSDK] useWorkspacePresenceResolver: no workspace selected")
+        );
+      }
+      return presenceMint.resolveWorkspacePresence({
+        auth: { backendUrl, apiKey, token },
+        workspaceId,
+        request,
+        signal
+      });
+    },
+    [workspaceId, backendUrl, apiKey, token]
+  );
+}
+exports.PRESENCE_DEFAULT_TICK_MS = PRESENCE_DEFAULT_TICK_MS;
+exports.useWorkspacePresence = useWorkspacePresence;
+exports.useWorkspacePresenceResolver = useWorkspacePresenceResolver;
+//# sourceMappingURL=presence-react.cjs.map

package/dist/collab/presence-react.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence-react.cjs","sources":["../../src/collab/presence-react.ts"],"sourcesContent":["/**\n * React bindings for the workspace presence feed.\n *\n * `useWorkspacePresence(workspaceId)` opens (and owns) a\n * `connectWorkspacePresence` handle, resolving auth from the surrounding\n * `AthenaProvider` (per-viewer bearer when present, API key otherwise), and\n * re-renders on status/roster changes via `useSyncExternalStore`. Each person\n * carries a `state` on the intent ladder, recomputed against a clock that\n * ticks every `tickMs` so `active` decays to `idle` and `away` between\n * awareness events.\n *\n * `useWorkspacePresenceResolver(workspaceId)` returns the batch id→title\n * resolver bound to the same auth. It is deliberately thin: callers own\n * caching (TanStack Query is the expected home for it).\n */\n\nimport { useCallback, useEffect, useMemo, useRef, useState, useSyncExternalStore } from 'react';\nimport { useAthenaConfig } from '../provider/AthenaContext';\nimport {\n  type WorkspacePresenceHandle,\n  type WorkspacePresenceStatus,\n  connectWorkspacePresence,\n} from './presence-client';\nimport {\n  type WorkspacePresenceResolveRequest,\n  type WorkspacePresenceResolveResponse,\n  resolveWorkspacePresence,\n} from './presence-mint';\nimport {\n  type PresenceAgent,\n  type PresenceHuman,\n  type PresenceState,\n  derivePresenceState,\n} from './presence-slots';\n\n/** Default cadence for re-deriving each person's intent state. */\nexport const PRESENCE_DEFAULT_TICK_MS = 10_000;\n\nexport interface PresenceHumanWithState extends PresenceHuman {\n  /** Where the person sits on the intent ladder as of the last tick. */\n  state: PresenceState;\n}\n\nexport interface UseWorkspacePresenceOptions {\n  /** `false` closes the feed without unmounting the caller. Default `true`. */\n  enabled?: boolean;\n  /** How often `state` is re-derived from `lastIntentAt`. Default 10 s. */\n  tickMs?: number;\n}\n\nexport interface UseWorkspacePresenceResult {\n  /** `'closed'` while disabled or without a workspace; `'connecting'` until the first mint resolves. */\n  status: WorkspacePresenceStatus;\n  error: Error | null;\n  accessType: 'r' | 'rw' | null;\n  humans: PresenceHumanWithState[];\n  agents: PresenceAgent[];\n  /** Force an early token refresh; resolves immediately when no feed is open. */\n  refreshNow: () => Promise<void>;\n}\n\nconst EMPTY_SNAPSHOT = 'init||0';\nconst NO_HUMANS: PresenceHuman[] = [];\nconst NO_AGENTS: PresenceAgent[] = [];\n\nexport function useWorkspacePresence(\n  workspaceId: string | null,\n  options?: UseWorkspacePresenceOptions\n): UseWorkspacePresenceResult {\n  const config = useAthenaConfig();\n  const enabled = options?.enabled !== false && workspaceId !== null;\n  const tickMs = options?.tickMs ?? PRESENCE_DEFAULT_TICK_MS;\n  const [entry, setEntry] = useState<{\n    workspaceId: string;\n    handle: WorkspacePresenceHandle;\n  } | null>(null);\n  const handleRef = useRef<WorkspacePresenceHandle | null>(null);\n\n  useEffect(() => {\n    if (!enabled || workspaceId === null) {\n      setEntry(null);\n      return;\n    }\n    const next = connectWorkspacePresence({\n      workspaceId,\n      auth: {\n        backendUrl: config.backendUrl,\n        apiKey: config.apiKey,\n        token: config.token,\n      },\n    });\n    handleRef.current = next;\n    setEntry({ workspaceId, handle: next });\n    return () => {\n      handleRef.current = null;\n      next.destroy();\n    };\n    // Recreate when the target or credentials change; the handle re-mints on\n    // its own schedule otherwise.\n  }, [enabled, workspaceId, config.backendUrl, config.apiKey, config.token]);\n\n  // React renders with the new arguments before the effect above runs, so a\n  // handle opened for a previous workspace, or before the feed was disabled,\n  // still sits in state for that one render. Expose it only while it is the\n  // handle this render asked for; otherwise the closed / connecting empty\n  // result wins, and a disabled feed never leaks a roster.\n  const handle =\n    enabled && entry !== null && entry.workspaceId === workspaceId ? entry.handle : null;\n\n  const subscribe = useMemo(() => {\n    return (onStoreChange: () => void) => {\n      if (!handle) return () => {};\n      return handle.onChange(onStoreChange);\n    };\n  }, [handle]);\n\n  const snapshot = useSyncExternalStore(\n    subscribe,\n    () => {\n      if (!handle) return EMPTY_SNAPSHOT;\n      return `${handle.status}|${handle.accessType ?? ''}|${handle.version}`;\n    },\n    () => EMPTY_SNAPSHOT\n  );\n  void snapshot;\n\n  // The ladder decays with wall-clock time, not with awareness events; a\n  // person who stops typing must drift to idle even when nothing arrives.\n  const [now, setNow] = useState(() => Date.now());\n  useEffect(() => {\n    if (!enabled) return;\n    setNow(Date.now());\n    const timer = setInterval(() => {\n      setNow(Date.now());\n    }, tickMs);\n    return () => {\n      clearInterval(timer);\n    };\n  }, [enabled, tickMs]);\n\n  const rosterHumans = handle?.humans ?? NO_HUMANS;\n  const humans = useMemo(\n    () =>\n      rosterHumans.map((human) => ({\n        ...human,\n        state: derivePresenceState({\n          lastIntentAt: human.lastIntentAt,\n          hidden: human.hidden,\n          manualAway: human.manualAway,\n          now,\n        }),\n      })),\n    [rosterHumans, now]\n  );\n\n  const refreshNow = useCallback(() => handleRef.current?.refreshNow() ?? Promise.resolve(), []);\n\n  return {\n    status: handle ? handle.status : enabled ? 'connecting' : 'closed',\n    error: handle?.error ?? null,\n    accessType: handle?.accessType ?? null,\n    humans,\n    agents: handle?.agents ?? NO_AGENTS,\n    refreshNow,\n  };\n}\n\nexport type WorkspacePresenceResolver = (\n  request: WorkspacePresenceResolveRequest,\n  signal?: AbortSignal\n) => Promise<WorkspacePresenceResolveResponse>;\n\n/**\n * A stable resolver bound to the provider's auth and the given workspace.\n * Rejects when called without a workspace; no caching — callers own that.\n */\nexport function useWorkspacePresenceResolver(\n  workspaceId: string | null\n): WorkspacePresenceResolver {\n  const config = useAthenaConfig();\n  const { backendUrl, apiKey, token } = config;\n  return useCallback<WorkspacePresenceResolver>(\n    (request, signal) => {\n      if (workspaceId === null) {\n        return Promise.reject(\n          new Error('[AthenaSDK] useWorkspacePresenceResolver: no workspace selected')\n        );\n      }\n      return resolveWorkspacePresence({\n        auth: { backendUrl, apiKey, token },\n        workspaceId,\n        request,\n        signal,\n      });\n    },\n    [workspaceId, backendUrl, apiKey, token]\n  );\n}\n"],"names":["useAthenaConfig","useState","useRef","useEffect","connectWorkspacePresence","useMemo","useSyncExternalStore","derivePresenceState","useCallback","resolveWorkspacePresence"],"mappings":";;;;;;;AAoCO,MAAM,2BAA2B;AAyBxC,MAAM,iBAAiB;AACvB,MAAM,YAA6B,CAAA;AACnC,MAAM,YAA6B,CAAA;AAE5B,SAAS,qBACd,aACA,SAC4B;AAC5B,QAAM,SAASA,cAAAA,gBAAA;AACf,QAAM,WAAU,mCAAS,aAAY,SAAS,gBAAgB;AAC9D,QAAM,UAAS,mCAAS,WAAU;AAClC,QAAM,CAAC,OAAO,QAAQ,IAAIC,MAAAA,SAGhB,IAAI;AACd,QAAM,YAAYC,MAAAA,OAAuC,IAAI;AAE7DC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAW,gBAAgB,MAAM;AACpC,eAAS,IAAI;AACb;AAAA,IACF;AACA,UAAM,OAAOC,eAAAA,yBAAyB;AAAA,MACpC;AAAA,MACA,MAAM;AAAA,QACJ,YAAY,OAAO;AAAA,QACnB,QAAQ,OAAO;AAAA,QACf,OAAO,OAAO;AAAA,MAAA;AAAA,IAChB,CACD;AACD,cAAU,UAAU;AACpB,aAAS,EAAE,aAAa,QAAQ,KAAA,CAAM;AACtC,WAAO,MAAM;AACX,gBAAU,UAAU;AACpB,WAAK,QAAA;AAAA,IACP;AAAA,EAGF,GAAG,CAAC,SAAS,aAAa,OAAO,YAAY,OAAO,QAAQ,OAAO,KAAK,CAAC;AAOzE,QAAM,SACJ,WAAW,UAAU,QAAQ,MAAM,gBAAgB,cAAc,MAAM,SAAS;AAElF,QAAM,YAAYC,MAAAA,QAAQ,MAAM;AAC9B,WAAO,CAAC,kBAA8B;AACpC,UAAI,CAAC,OAAQ,QAAO,MAAM;AAAA,MAAC;AAC3B,aAAO,OAAO,SAAS,aAAa;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAEMC,QAAAA;AAAAA,IACf;AAAA,IACA,MAAM;AACJ,UAAI,CAAC,OAAQ,QAAO;AACpB,aAAO,GAAG,OAAO,MAAM,IAAI,OAAO,cAAc,EAAE,IAAI,OAAO,OAAO;AAAA,IACtE;AAAA,IACA,MAAM;AAAA,EAAA;AAMR,QAAM,CAAC,KAAK,MAAM,IAAIL,MAAAA,SAAS,MAAM,KAAK,KAAK;AAC/CE,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,QAAS;AACd,WAAO,KAAK,KAAK;AACjB,UAAM,QAAQ,YAAY,MAAM;AAC9B,aAAO,KAAK,KAAK;AAAA,IACnB,GAAG,MAAM;AACT,WAAO,MAAM;AACX,oBAAc,KAAK;AAAA,IACrB;AAAA,EACF,GAAG,CAAC,SAAS,MAAM,CAAC;AAEpB,QAAM,gBAAe,iCAAQ,WAAU;AACvC,QAAM,SAASE,MAAAA;AAAAA,IACb,MACE,aAAa,IAAI,CAAC,WAAW;AAAA,MAC3B,GAAG;AAAA,MACH,OAAOE,cAAAA,oBAAoB;AAAA,QACzB,cAAc,MAAM;AAAA,QACpB,QAAQ,MAAM;AAAA,QACd,YAAY,MAAM;AAAA,QAClB;AAAA,MAAA,CACD;AAAA,IAAA,EACD;AAAA,IACJ,CAAC,cAAc,GAAG;AAAA,EAAA;AAGpB,QAAM,aAAaC,kBAAY,MAAA;;AAAM,4BAAU,YAAV,mBAAmB,iBAAgB,QAAQ,QAAA;AAAA,KAAW,EAAE;AAE7F,SAAO;AAAA,IACL,QAAQ,SAAS,OAAO,SAAS,UAAU,eAAe;AAAA,IAC1D,QAAO,iCAAQ,UAAS;AAAA,IACxB,aAAY,iCAAQ,eAAc;AAAA,IAClC;AAAA,IACA,SAAQ,iCAAQ,WAAU;AAAA,IAC1B;AAAA,EAAA;AAEJ;AAWO,SAAS,6BACd,aAC2B;AAC3B,QAAM,SAASR,cAAAA,gBAAA;AACf,QAAM,EAAE,YAAY,QAAQ,MAAA,IAAU;AACtC,SAAOQ,MAAAA;AAAAA,IACL,CAAC,SAAS,WAAW;AACnB,UAAI,gBAAgB,MAAM;AACxB,eAAO,QAAQ;AAAA,UACb,IAAI,MAAM,iEAAiE;AAAA,QAAA;AAAA,MAE/E;AACA,aAAOC,sCAAyB;AAAA,QAC9B,MAAM,EAAE,YAAY,QAAQ,MAAA;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MAAA,CACD;AAAA,IACH;AAAA,IACA,CAAC,aAAa,YAAY,QAAQ,KAAK;AAAA,EAAA;AAE3C;;;;"}