@athenaintel/react 0.23.3 → 0.24.0

package/dist/packages/agent-runtime/src/errors.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.cjs","sources":["../../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":";;AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;;AAC7E,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAgDO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AAoDO,SAAS,2BAA2B,OAAyB;;AAClE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAyBA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;;;;;;;"}
+{"version":3,"file":"errors.cjs","sources":["../../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":";;AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;;AAC7E,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;;AAClE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;;AACvE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/errors.js

@@ -23,17 +23,32 @@ function readRetryableRunRefusal(error) {
   if (error === null || typeof error !== "object" || Array.isArray(error)) return null;
   return readRetryableDetail(error.detail);
 }
+function readRetryableCommandRejection(error) {
+  const payload = statewireRejectionPayload(error);
+  return payload === null ? null : readRetryableDetail(payload.detail);
+}
 function isLegacyThreadReadOnlyRejection(error) {
   const payload = statewireRejectionPayload(error);
   if ((payload == null ? void 0 : payload.status) !== 409) return false;
   const detail = payload.detail;
   return (detail == null ? void 0 : detail.code) === "legacy_thread_read_only";
 }
+function isStatewireExpiredVerdict(error) {
+  const failure = error == null ? void 0 : error.failure;
+  return (failure == null ? void 0 : failure.fate) === "expired" && failure.cause === "server";
+}
 function isStatewireChannelTeardown(error) {
   var _a;
   const cause = (_a = error == null ? void 0 : error.failure) == null ? void 0 : _a.cause;
   return typeof cause === "string" && cause !== "server";
 }
+function statewireTransportOutcome(error) {
+  var _a, _b;
+  const cause = (_a = error == null ? void 0 : error.failure) == null ? void 0 : _a.cause;
+  if (typeof cause === "string" && cause !== "server") return cause;
+  if (isStatewireExpiredVerdict(error)) return "expired";
+  return ((_b = readRetryableCommandRejection(error)) == null ? void 0 : _b.code) ?? null;
+}
 const sanitizeConnectionMessage = (message) => {
   const printable = Array.from(message, (character) => {
     const code = character.charCodeAt(0);
@@ -87,9 +102,12 @@ function unknownConnectionStatus(connection) {
 export {
   isLegacyThreadReadOnlyRejection,
   isStatewireChannelTeardown,
+  isStatewireExpiredVerdict,
   projectDeepAgentConnection,
+  readRetryableCommandRejection,
   readRetryableRunRefusal,
   statewireRejectionDetailMessage,
-  statewireRejectionPayload
+  statewireRejectionPayload,
+  statewireTransportOutcome
 };
 //# sourceMappingURL=errors.js.map

package/dist/packages/agent-runtime/src/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sources":["../../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":"AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;AAfxE;AAgBL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAgDO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AAoDO,SAAS,2BAA2B,OAAyB;AAhK7D;AAiKL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAyBA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;"}
+{"version":3,"file":"errors.js","sources":["../../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":"AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;AAfxE;AAgBL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;AAhK7D;AAiKL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;AArLlE;AAsLL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;"}

package/dist/packages/agent-runtime/src/generated/runconfig-contract.cjs

@@ -184,6 +184,7 @@ const KNOWN_START_CHANNELS = [
   "cli",
   "comment_agent",
   "default_voice",
+  "desktop_app",
   "email",
   "mobile_app",
   "office_addin",

package/dist/packages/agent-runtime/src/generated/runconfig-contract.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"runconfig-contract.cjs","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (interest windows + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_machine\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Attach header declaring the head window a fresh client wants in its hello (host-clamped). */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/** Ephemeral subprotocol carrying a client's message-window interests. */\nexport const DEEP_AGENT_INTEREST_PROTOCOL = \"athena/interest\";\n\n/** Ephemeral subprotocol carrying a client's synced context document. */\nexport const DEEP_AGENT_CONTEXT_PROTOCOL = \"athena/context\";\n\n/** The only interest namespace the host resolves (the linear transcript). */\nexport const DEEP_AGENT_MAIN_NS = \"main\";\n\n/** Window size (interest `before`) a client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Bounds on a window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Interests one attach may hold at once (the head plus its pages). */\nexport const DEEP_AGENT_MAX_INTERESTS = 16;\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Command returning one stored message whole (provenance and full tool output included). */\nexport const DEEP_AGENT_HISTORY_MESSAGE_COMMAND = \"history/message\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":";;AA4GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,mCAAmC;AAGzC,MAAM,gCAAgC;AAGtC,MAAM,+BAA+B;AAMrC,MAAM,qBAAqB;AAG3B,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,2BAA2B;AAGjC,MAAM,yCAAyC;AAM/C,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"runconfig-contract.cjs","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (interest windows + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_machine\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"desktop_app\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Attach header declaring the head window a fresh client wants in its hello (host-clamped). */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/** Ephemeral subprotocol carrying a client's message-window interests. */\nexport const DEEP_AGENT_INTEREST_PROTOCOL = \"athena/interest\";\n\n/** Ephemeral subprotocol carrying a client's synced context document. */\nexport const DEEP_AGENT_CONTEXT_PROTOCOL = \"athena/context\";\n\n/** The only interest namespace the host resolves (the linear transcript). */\nexport const DEEP_AGENT_MAIN_NS = \"main\";\n\n/** Window size (interest `before`) a client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Bounds on a window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Interests one attach may hold at once (the head plus its pages). */\nexport const DEEP_AGENT_MAX_INTERESTS = 16;\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Command returning one stored message whole (provenance and full tool output included). */\nexport const DEEP_AGENT_HISTORY_MESSAGE_COMMAND = \"history/message\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":";;AA4GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,mCAAmC;AAGzC,MAAM,gCAAgC;AAGtC,MAAM,+BAA+B;AAMrC,MAAM,qBAAqB;AAG3B,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,2BAA2B;AAGjC,MAAM,yCAAyC;AAM/C,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;"}

package/dist/packages/agent-runtime/src/generated/runconfig-contract.js

@@ -182,6 +182,7 @@ const KNOWN_START_CHANNELS = [
   "cli",
   "comment_agent",
   "default_voice",
+  "desktop_app",
   "email",
   "mobile_app",
   "office_addin",

package/dist/packages/agent-runtime/src/generated/runconfig-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"runconfig-contract.js","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (interest windows + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_machine\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Attach header declaring the head window a fresh client wants in its hello (host-clamped). */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/** Ephemeral subprotocol carrying a client's message-window interests. */\nexport const DEEP_AGENT_INTEREST_PROTOCOL = \"athena/interest\";\n\n/** Ephemeral subprotocol carrying a client's synced context document. */\nexport const DEEP_AGENT_CONTEXT_PROTOCOL = \"athena/context\";\n\n/** The only interest namespace the host resolves (the linear transcript). */\nexport const DEEP_AGENT_MAIN_NS = \"main\";\n\n/** Window size (interest `before`) a client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Bounds on a window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Interests one attach may hold at once (the head plus its pages). */\nexport const DEEP_AGENT_MAX_INTERESTS = 16;\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Command returning one stored message whole (provenance and full tool output included). */\nexport const DEEP_AGENT_HISTORY_MESSAGE_COMMAND = \"history/message\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":"AA4GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,mCAAmC;AAGzC,MAAM,gCAAgC;AAGtC,MAAM,+BAA+B;AAMrC,MAAM,qBAAqB;AAG3B,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,2BAA2B;AAGjC,MAAM,yCAAyC;AAM/C,MAAM,mCAAmC;"}
+{"version":3,"file":"runconfig-contract.js","sources":["../../../../../../agent-runtime/src/generated/runconfig-contract.ts"],"sourcesContent":["// GENERATED FILE — DO NOT EDIT BY HAND.\n//\n// Source of truth (agora):\n//   agora/agora/graphs/athena_deep_agent/run_config.py    (_PARSED_CUSTOM_KEYS / _COMPANION_CUSTOM_KEYS / PER_SEND_CUSTOM_KEYS)\n//   agora/agora/graphs/athena_deep_agent/thread_config.py (server config lane + config/* command names)\n//   agora/agora/graphs/athena_deep_agent/session_asset.py (KNOWN_START_CHANNELS / DEEP_AGENT_RUNTIME_MARKER)\n//   agora/agora/graphs/athena_deep_agent/client_tools.py  (client-tool interrupt + result-envelope literals)\n//   agora/agora/graphs/athena_deep_agent/protocol_version.py (wire-contract version negotiation)\n//   agora/agora/graphs/athena_deep_agent/message_window.py (interest windows + history commands)\n//   agora/agora/type_definitions/collab_agent.py            (CAPABILITIES ladder: absent mode + new-agent default)\n//\n// Regenerate:\n//   cd agora && mise exec -- infisical run --command 'uv run python scripts/export_runconfig_contract.py'\n//\n// CI verifies this file matches the Python source (agora-check runs the\n// exporter with --check), so hand edits and un-regenerated key changes fail.\n\n/** `runConfig.custom` keys parsed by agora's `parse_deep_agent_run_config`. */\nexport const RUN_CONFIG_PARSED_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"compiled_subagents\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"tool_description_overrides\",\n  \"voice_update_handle\",\n  \"workbench\",\n] as const;\n\n/** `runConfig.custom` keys consumed by the surrounding deep-agent request machinery rather than the capability parser. */\nexport const RUN_CONFIG_COMPANION_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"custom_tool_configs\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"enabled_toolkits\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"max_tokens\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"temperature\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"workspace_id\",\n] as const;\n\n/** Every `runConfig.custom` key some deep-agent request consumer reads. A key outside this set is invisible to the run and trips agora's unknown-key telemetry. */\nexport const RUN_CONFIG_CUSTOM_KEYS = [\n  \"agent\",\n  \"agent_catalog_asset_ids\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"channel\",\n  \"client_tools\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"collab_channel_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"deterministic\",\n  \"device_id\",\n  \"drive_mounts\",\n  \"dry_run\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"panel_config\",\n  \"permissions\",\n  \"project_id\",\n  \"recursion_limit\",\n  \"run_budget\",\n  \"run_label\",\n  \"runtime\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_id\",\n  \"session_machine\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workbench\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigCustomKey = (typeof RUN_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_CUSTOM_KEYS,\n);\n\n/** `runConfig.custom` keys a client still carries per send on a thread with server config; every other key is dropped at dispatch. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [\n  \"agent\",\n  \"allowed_tab_ids\",\n  \"app_id\",\n  \"channel\",\n  \"client_tools\",\n  \"collab_channel_id\",\n  \"deterministic\",\n  \"device_id\",\n  \"dry_run\",\n  \"frontend_available\",\n  \"github_identity\",\n  \"muses_enabled\",\n  \"muses_recall_enabled\",\n  \"office_context\",\n  \"project_id\",\n  \"run_budget\",\n  \"runtime\",\n  \"session_id\",\n  \"session_origin_kind\",\n  \"session_tab_id\",\n  \"skip_title_generation\",\n  \"source_aop_id\",\n  \"start_channel\",\n  \"structured_output\",\n  \"tool_limit_override\",\n  \"trigger_type\",\n  \"voice_update_handle\",\n  \"workspace_id\",\n] as const;\n\nexport type RunConfigPerSendCustomKey =\n  (typeof RUN_CONFIG_PER_SEND_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const RUN_CONFIG_PER_SEND_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  RUN_CONFIG_PER_SEND_CUSTOM_KEYS,\n);\n\n/** Keys the thread's server config lane owns — changed only through the `config/*` commands, never per send. */\nexport const THREAD_CONFIG_CUSTOM_KEYS = [\n  \"agent_catalog_asset_ids\",\n  \"async_subagents\",\n  \"catalog_asset_ids\",\n  \"coding_worker_asset_id\",\n  \"coding_workers\",\n  \"collab_agent_id\",\n  \"compiled_subagents\",\n  \"custom_tool_configs\",\n  \"declined_toolkit_ids\",\n  \"drive_mounts\",\n  \"enable_interpreter\",\n  \"enable_persistent_fs\",\n  \"enable_sandbox\",\n  \"enable_skills\",\n  \"enabled_toolkits\",\n  \"enabled_tools\",\n  \"environment\",\n  \"environment_asset_id\",\n  \"environment_id\",\n  \"environment_name\",\n  \"excluded_middleware\",\n  \"excluded_tools\",\n  \"extra_middleware\",\n  \"include_citation_instructions\",\n  \"interpreter_max_ptc_calls\",\n  \"interpreter_mode\",\n  \"interpreter_ptc\",\n  \"interpreter_ptc_exclusive\",\n  \"interpreter_runtime\",\n  \"interpreter_subagents\",\n  \"interpreter_timeout_seconds\",\n  \"interrupt_on\",\n  \"knowledge_base\",\n  \"max_tokens\",\n  \"mcp_server_configs\",\n  \"mcp_servers\",\n  \"memory\",\n  \"middleware\",\n  \"model\",\n  \"permissions\",\n  \"recursion_limit\",\n  \"run_label\",\n  \"sandbox_runtime\",\n  \"secret_asset_ids\",\n  \"session_machine\",\n  \"session_vm_retention\",\n  \"skill_asset_ids\",\n  \"skills\",\n  \"subagents\",\n  \"system_prompt\",\n  \"temperature\",\n  \"tool_description_overrides\",\n  \"workbench\",\n] as const;\n\nexport type ThreadConfigCustomKey = (typeof THREAD_CONFIG_CUSTOM_KEYS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const THREAD_CONFIG_CUSTOM_KEY_SET: ReadonlySet<string> = new Set(\n  THREAD_CONFIG_CUSTOM_KEYS,\n);\n\n/** Replicated-state key of the server config lane (`{ version, custom }`). */\nexport const DEEP_AGENT_CONFIG_STATE_KEY = \"config\";\n\n/** The statewire commands that mutate the server config lane. */\nexport const DEEP_AGENT_CONFIG_COMMANDS = {\n  patch: \"config/patch\",\n  toolsEnable: \"config/tools/enable\",\n  toolsDisable: \"config/tools/disable\",\n} as const;\n\n/** `start_channel` values the session substrate stamps as provenance; anything else clamps to \"web\". */\nexport const KNOWN_START_CHANNELS = [\n  \"api\",\n  \"chrome_extension\",\n  \"cli\",\n  \"comment_agent\",\n  \"default_voice\",\n  \"desktop_app\",\n  \"email\",\n  \"mobile_app\",\n  \"office_addin\",\n  \"orchestration\",\n  \"programmatic\",\n  \"slack\",\n  \"sms\",\n  \"task\",\n  \"teams\",\n  \"voice\",\n  \"web\",\n] as const;\n\nexport type KnownStartChannel = (typeof KNOWN_START_CHANNELS)[number];\n\n/** Fast membership checks for builder/test assertions. */\nexport const KNOWN_START_CHANNEL_SET: ReadonlySet<string> = new Set(\n  KNOWN_START_CHANNELS,\n);\n\n/** `runConfig.custom.runtime` marker selecting the deep-agent runtime. */\nexport const DEEP_AGENT_RUNTIME_MARKER = \"athena_deep_agent\";\n\n/**\n * Collab-agent capability ladder (agent schema v3): per explicit\n * capability field, what an ABSENT value means and the value stamped on\n * a new agent. Resolved by agora's `capability_decoder` and the one agent\n * compiler on every run: `passthrough` — explicit only, absent means off;\n * `off` — absent means off under every `runtime` marker; `runtime` —\n * absent derives from the `runtime` marker (`athena_deep_agent` on, any\n * other or missing marker off).\n */\nexport const COLLAB_AGENT_CAPABILITIES = {\n  deepAgentBuiltinsEnabled: { absent: \"runtime\", default: true },\n  interpreterEnabled: { absent: \"off\", default: false },\n  sandboxEnabled: { absent: \"passthrough\", default: false },\n  skillsEnabled: { absent: \"runtime\", default: true },\n} as const;\n\nexport type CollabAgentCapabilityField = keyof typeof COLLAB_AGENT_CAPABILITIES;\n\nexport type CollabAgentCapabilityAbsentMode =\n  (typeof COLLAB_AGENT_CAPABILITIES)[CollabAgentCapabilityField][\"absent\"];\n\n/** `source`/`type` stamped on client-tool interrupt payloads by agora. */\nexport const CLIENT_TOOL_INTERRUPT_SOURCE = \"client_tool\";\n\n/** `status` literals of the result envelope a client resumes a parked client-tool call with. */\nexport const CLIENT_TOOL_RESULT_STATUSES = [\"error\", \"success\"] as const;\n\nexport type ClientToolResultStatus =\n  (typeof CLIENT_TOOL_RESULT_STATUSES)[number];\n\nexport const CLIENT_TOOL_RESULT_STATUS_SUCCESS = \"success\";\n\nexport const CLIENT_TOOL_RESULT_STATUS_ERROR = \"error\";\n\n/**\n * Result envelope a client resumes a parked client-tool call with,\n * keyed by interrupt id:\n * `{ client_tool_results: { <interrupt_id>: <envelope> } }`.\n * Agora relays the envelope to the model verbatim.\n */\nexport type ClientToolResultEnvelopeContract =\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_SUCCESS; result: unknown }\n  | { status: typeof CLIENT_TOOL_RESULT_STATUS_ERROR; error: string };\n\n/**\n * The deep-agent wire-contract version this client build speaks,\n * declared on every attach. The host records it for attach telemetry\n * and per-version behaviour; it has no minimum client version, so no\n * build is refused for the version it declares (the `protocol` state\n * lane's `minClientVersion` is the constant 1).\n */\nexport const DEEP_AGENT_PROTOCOL_VERSION = 1;\n\n/** Attach header carrying the client's declared contract version. */\nexport const DEEP_AGENT_PROTOCOL_VERSION_HEADER =\n  \"x-athena-deep-agent-protocol-version\";\n\n/** Attach header declaring the head window a fresh client wants in its hello (host-clamped). */\nexport const DEEP_AGENT_MESSAGE_WINDOW_HEADER = \"x-athena-deep-agent-window\";\n\n/** Replicated-state key of the server-advertised version lane. */\nexport const DEEP_AGENT_PROTOCOL_STATE_KEY = \"protocol\";\n\n/** Ephemeral subprotocol carrying a client's message-window interests. */\nexport const DEEP_AGENT_INTEREST_PROTOCOL = \"athena/interest\";\n\n/** Ephemeral subprotocol carrying a client's synced context document. */\nexport const DEEP_AGENT_CONTEXT_PROTOCOL = \"athena/context\";\n\n/** The only interest namespace the host resolves (the linear transcript). */\nexport const DEEP_AGENT_MAIN_NS = \"main\";\n\n/** Window size (interest `before`) a client asks for by default. */\nexport const DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = 40;\n\n/** Bounds on a window size. */\nexport const DEEP_AGENT_MIN_MESSAGE_WINDOW = 8;\n\nexport const DEEP_AGENT_MAX_MESSAGE_WINDOW = 200;\n\n/** Interests one attach may hold at once (the head plus its pages). */\nexport const DEEP_AGENT_MAX_INTERESTS = 16;\n\n/** Command returning a truncated tool output whole. */\nexport const DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = \"history/tool_output\";\n\n/** Command returning one stored message whole (provenance and full tool output included). */\nexport const DEEP_AGENT_HISTORY_MESSAGE_COMMAND = \"history/message\";\n\n/** Wire key marking a tool message whose content was truncated. */\nexport const DEEP_AGENT_TRUNCATED_CONTENT_KEY = \"athena_content_truncated\";\n"],"names":[],"mappings":"AA4GO,MAAM,yBAAyB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK8D,IAAI;AAAA,EAChE;AACF;AAGO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMuE,IAAI;AAAA,EACzE;AACF;AAGO,MAAM,4BAA4B;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKiE,IAAI;AAAA,EACnE;AACF;AAaO,MAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAK4D,IAAI;AAAA,EAC9D;AACF;AA2BO,MAAM,+BAA+B;AAQrC,MAAM,oCAAoC;AAE1C,MAAM,kCAAkC;AAmBxC,MAAM,8BAA8B;AAGpC,MAAM,qCACX;AAGK,MAAM,mCAAmC;AAGzC,MAAM,gCAAgC;AAGtC,MAAM,+BAA+B;AAMrC,MAAM,qBAAqB;AAG3B,MAAM,oCAAoC;AAG1C,MAAM,gCAAgC;AAEtC,MAAM,gCAAgC;AAGtC,MAAM,2BAA2B;AAGjC,MAAM,yCAAyC;AAM/C,MAAM,mCAAmC;"}

package/dist/packages/agent-runtime/src/interrupts.cjs

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const react = require("react");
 const clientTools = require("./client-tools.cjs");
+const errors = require("./errors.cjs");
 const statewireState = require("./statewire-state.cjs");
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -82,6 +83,11 @@ function findAbandonedInterrupt(abandoned) {
 }
 const HITL_REJECT_REASON = "User rejected the action.";
 const HITL_PENDING_RESUME_GRACE_MS = 15e3;
+const HITL_RESUME_TRANSPORT_RETRIES = 3;
+function isResumeTransportLoss(error) {
+  const outcome = errors.statewireTransportOutcome(error);
+  return outcome === "session-lost" || outcome === "stream-gone";
+}
 function hitlResumeApprove() {
   return { action: "approve" };
 }
@@ -96,8 +102,17 @@ function interruptResumeDecline(reason = INTERRUPT_DECLINE_REASON) {
   return { action: "reject", reason };
 }
 function useApprovalResumeLock(options) {
-  const { requestId, isRunning, sendResume, pendingResumeGraceMs, onResumeRejected } = options;
+  const {
+    requestId,
+    isRunning,
+    sendResume,
+    pendingResumeGraceMs,
+    onResumeRejected,
+    onResumeRetry,
+    maxTransportRetries = HITL_RESUME_TRANSPORT_RETRIES
+  } = options;
   const [pending, setPending] = react.useState(false);
+  const [attempt, setAttempt] = react.useState(0);
   const prevRequestIdRef = react.useRef(requestId);
   if (prevRequestIdRef.current !== requestId) {
     prevRequestIdRef.current = requestId;
@@ -124,31 +139,63 @@ function useApprovalResumeLock(options) {
       if (!sawResumeRunRef.current) setPending(false);
     }, pendingResumeGraceMs);
     return () => clearTimeout(timer);
-  }, [pending, requestId, pendingResumeGraceMs]);
+  }, [pending, requestId, pendingResumeGraceMs, attempt]);
   const sendResumeRef = react.useRef(sendResume);
   sendResumeRef.current = sendResume;
   const onResumeRejectedRef = react.useRef(onResumeRejected);
   onResumeRejectedRef.current = onResumeRejected;
+  const onResumeRetryRef = react.useRef(onResumeRetry);
+  onResumeRetryRef.current = onResumeRetry;
+  const maxTransportRetriesRef = react.useRef(maxTransportRetries);
+  maxTransportRetriesRef.current = maxTransportRetries;
   const currentRequestIdRef = react.useRef(requestId);
   currentRequestIdRef.current = requestId;
   const pendingRef = react.useRef(pending);
   pendingRef.current = pending;
+  const submissionRef = react.useRef(0);
   const resume = react.useCallback(
     (value) => {
       if (requestId === void 0 || pendingRef.current) return void 0;
+      const submission = ++submissionRef.current;
       setPending(true);
       pendingRef.current = true;
-      const dispatched = sendResumeRef.current(requestId, value);
-      if (!(dispatched instanceof Promise)) return void 0;
-      dispatched.then(void 0, (error) => {
-        var _a;
-        const current = currentRequestIdRef.current;
-        if (current !== void 0 && current !== requestId) return;
-        setPending(false);
-        pendingRef.current = false;
-        (_a = onResumeRejectedRef.current) == null ? void 0 : _a.call(onResumeRejectedRef, error, requestId);
+      setAttempt(0);
+      const first = sendResumeRef.current(requestId, value);
+      if (!(first instanceof Promise)) return void 0;
+      const outcome = new Promise((resolve, reject) => {
+        const settle = (dispatched, retries) => {
+          dispatched.then(resolve, (error) => {
+            var _a, _b;
+            const current = currentRequestIdRef.current;
+            if (submission !== submissionRef.current || current !== void 0 && current !== requestId) {
+              reject(error);
+              return;
+            }
+            if (retries < maxTransportRetriesRef.current && isResumeTransportLoss(error)) {
+              const next = retries + 1;
+              (_a = onResumeRetryRef.current) == null ? void 0 : _a.call(onResumeRetryRef, error, requestId, next);
+              setPending(true);
+              pendingRef.current = true;
+              setAttempt(next);
+              const resent = sendResumeRef.current(requestId, value);
+              if (resent instanceof Promise) {
+                settle(resent, next);
+                return;
+              }
+              resolve(void 0);
+              return;
+            }
+            setPending(false);
+            pendingRef.current = false;
+            (_b = onResumeRejectedRef.current) == null ? void 0 : _b.call(onResumeRejectedRef, error, requestId);
+            reject(error);
+          });
+        };
+        settle(first, 0);
+      });
+      outcome.catch(() => {
       });
-      return dispatched;
+      return outcome;
     },
     [requestId]
   );
@@ -157,6 +204,7 @@ function useApprovalResumeLock(options) {
 exports.DEFAULT_INTERRUPT_PAUSED_MESSAGE = DEFAULT_INTERRUPT_PAUSED_MESSAGE;
 exports.HITL_PENDING_RESUME_GRACE_MS = HITL_PENDING_RESUME_GRACE_MS;
 exports.HITL_REJECT_REASON = HITL_REJECT_REASON;
+exports.HITL_RESUME_TRANSPORT_RETRIES = HITL_RESUME_TRANSPORT_RETRIES;
 exports.INTERRUPT_DECLINE_REASON = INTERRUPT_DECLINE_REASON;
 exports.asHitlApproval = asHitlApproval;
 exports.canApproveForSession = canApproveForSession;
@@ -169,6 +217,7 @@ exports.interruptMirrorPayload = interruptMirrorPayload;
 exports.interruptResumeDecline = interruptResumeDecline;
 exports.isApprovalCardInterrupt = isApprovalCardInterrupt;
 exports.isPendingInterrupt = isPendingInterrupt;
+exports.isResumeTransportLoss = isResumeTransportLoss;
 exports.isSystemPauseInterrupt = isSystemPauseInterrupt;
 exports.laneInterruptIds = laneInterruptIds;
 exports.pendingActionRequests = pendingActionRequests;