@athenaintel/react 0.32.0 → 0.36.0

package/dist/chat-ui/mentions/suggestions/data/api-client.cjs

@@ -1,4 +1,7 @@
 "use strict";
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const react = require("react");
 function mentionRequestInit(auth) {
@@ -15,6 +18,27 @@ function useMentionAuth() {
   if (!ctx) throw new Error("MentionAuthCtx not provided");
   return ctx;
 }
+class AthenaGraphQLError extends Error {
+  constructor({
+    message,
+    status = null,
+    code = null
+  }) {
+    super(message);
+    __publicField(this, "status");
+    __publicField(this, "code");
+    this.name = "AthenaGraphQLError";
+    this.status = status;
+    this.code = code;
+  }
+}
+function graphQLErrorCode(entry) {
+  if (typeof entry !== "object" || entry === null) return null;
+  const extensions = Reflect.get(entry, "extensions");
+  if (typeof extensions !== "object" || extensions === null) return null;
+  const code = Reflect.get(extensions, "code");
+  return typeof code === "string" ? code : null;
+}
 async function fetchGraphQL(auth, query, variables = {}) {
   var _a;
   const url = `${auth.backendUrl.replace(/\/+$/, "")}/graphql`;
@@ -39,11 +63,17 @@ async function fetchGraphQL(auth, query, variables = {}) {
     }
   }
   if (!response.ok) {
-    throw new Error(`GraphQL HTTP ${response.status}: ${response.statusText}`);
+    throw new AthenaGraphQLError({
+      message: `GraphQL HTTP ${response.status}: ${response.statusText}`,
+      status: response.status
+    });
   }
   const result = await response.json();
   if ((_a = result.errors) == null ? void 0 : _a.length) {
-    throw new Error(`GraphQL error: ${result.errors[0].message}`);
+    throw new AthenaGraphQLError({
+      message: `GraphQL error: ${result.errors[0].message}`,
+      code: graphQLErrorCode(result.errors[0])
+    });
   }
   return result.data;
 }
@@ -122,6 +152,7 @@ const TOOL_CATALOG_QUERY = `
     }
   }
 `;
+exports.AthenaGraphQLError = AthenaGraphQLError;
 exports.MentionAuthCtx = MentionAuthCtx;
 exports.PAGINATED_ASSETS_QUERY = PAGINATED_ASSETS_QUERY;
 exports.SIMPLE_SEARCH_QUERY = SIMPLE_SEARCH_QUERY;

package/dist/chat-ui/mentions/suggestions/data/api-client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.cjs","sources":["../../../../../src/chat-ui/mentions/suggestions/data/api-client.ts"],"sourcesContent":["/**\n * API client for mention data fetching.\n *\n * Wraps raw fetch() with GraphQL support. Hosts authenticate with either a\n * bearer token or a workspace API key; agora's /graphql accepts both.\n */\n\nimport { createContext, useContext } from \"react\";\n\n// ── Auth context ──\n\nexport interface MentionAuthContext {\n  backendUrl: string;\n  appUrl?: string;\n  /** Bearer credential; hosts without one authenticate with `apiKey`. */\n  accessToken?: string;\n  /**\n   * Resolve a current bearer before each query (for rotating Office sessions).\n   * Resolving nothing falls back to `accessToken`, then the API key.\n   */\n  getAccessToken?: () => Promise<string | null | undefined>;\n  /**\n   * Renew the bearer after the backend refused it (401), for one resend of\n   * the query. Without it, or when it resolves nothing, a refused query fails\n   * as before.\n   */\n  renewAccessToken?: () => Promise<string | null | undefined>;\n  apiKey?: string;\n  /**\n   * With neither credential, ride the browser's same-origin session cookie\n   * instead of failing — the SDK's AthenaChat, whose REST helpers make the\n   * same choice for a host that configured no token and no API key. Hosts\n   * that always hold a credential leave this unset so an accidental anonymous\n   * query fails loudly.\n   */\n  credentials?: \"include\";\n  workspaceId?: string;\n  userId?: string;\n}\n\n/** Credential headers (or the cookie lane) for a mention fetch. */\nexport function mentionRequestInit(\n  auth: MentionAuthContext,\n): Pick<RequestInit, \"headers\" | \"credentials\"> {\n  if (auth.accessToken) {\n    return { headers: { Authorization: `Bearer ${auth.accessToken}` } };\n  }\n  if (auth.apiKey) return { headers: { \"X-API-KEY\": auth.apiKey } };\n  if (auth.credentials) return { headers: {}, credentials: auth.credentials };\n  throw new Error(\"MentionAuthCtx needs either an accessToken or an apiKey\");\n}\n\nexport const MentionAuthCtx = createContext<MentionAuthContext | null>(null);\n\nexport function useMentionAuth(): MentionAuthContext {\n  const ctx = useContext(MentionAuthCtx);\n  if (!ctx) throw new Error(\"MentionAuthCtx not provided\");\n  return ctx;\n}\n\n// ── GraphQL client ──\n\nexport async function fetchGraphQL<T = any>(\n  auth: MentionAuthContext,\n  query: string,\n  variables: Record<string, any> = {},\n): Promise<T> {\n  const url = `${auth.backendUrl.replace(/\\/+$/, \"\")}/graphql`;\n  const send = (requestAuth: MentionAuthContext) => {\n    const { headers, credentials } = mentionRequestInit(requestAuth);\n    return fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...headers,\n      },\n      ...(credentials ? { credentials } : {}),\n      body: JSON.stringify({ query, variables }),\n    });\n  };\n  const requestAuth = auth.getAccessToken\n    ? { ...auth, accessToken: (await auth.getAccessToken()) ?? auth.accessToken }\n    : auth;\n  let response = await send(requestAuth);\n  // A refused bearer gets one renewal and a resend (the statewire transport's\n  // `staleAuth` contract); an API-key or cookie request has nothing to renew.\n  if (response.status === 401 && requestAuth.accessToken && auth.renewAccessToken) {\n    const renewed = await auth.renewAccessToken();\n    // The same token again (a static one) would only be refused again.\n    if (renewed && renewed !== requestAuth.accessToken) {\n      response = await send({ ...auth, accessToken: renewed });\n    }\n  }\n\n  if (!response.ok) {\n    throw new Error(`GraphQL HTTP ${response.status}: ${response.statusText}`);\n  }\n\n  const result = await response.json();\n  if (result.errors?.length) {\n    throw new Error(`GraphQL error: ${result.errors[0].message}`);\n  }\n\n  return result.data as T;\n}\n\n// ── GraphQL Queries ──\n\n/**\n * Lightweight asset fragment for mention menu items.\n * Only fetches fields needed for display + navigation.\n */\nconst MENTION_ASSET_FIELDS = `\n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n`;\n\nexport const SIMPLE_SEARCH_QUERY = `\n  query SimpleSearch($input: SimpleSearchRequestInput!) {\n    simpleSearch(input: $input) {\n      assets {\n        ${MENTION_ASSET_FIELDS}\n      }\n      totalCount\n    }\n  }\n`;\n\nexport const PAGINATED_ASSETS_QUERY = `\n  query GetPaginatedAssetsForWorkspace(\n    $limit: Int!\n    $offset: Int!\n    $parentFolderId: String\n    $filterTypes: [String!]\n    $filterColumns: ColumnFilter\n  ) {\n    getPaginatedAssetsForWorkspace(\n      limit: $limit\n      offset: $offset\n      parentFolderId: $parentFolderId\n      filterTypes: $filterTypes\n      filterColumns: $filterColumns\n    ) {\n      ${MENTION_ASSET_FIELDS}\n    }\n  }\n`;\n\nexport const WORKSPACE_MEMBERS_QUERY = `\n  query GetUsersInWorkspace($workspaceId: String!) {\n    getUsersInWorkspace(workspaceId: $workspaceId) {\n      id\n      email\n      firstName\n      lastName\n      isAdmin\n      avatarUrl\n    }\n  }\n`;\n\nexport const TOOL_CATALOG_QUERY = `\n  query MentionToolCatalog {\n    getToolkitToToolsMapping {\n      tools {\n        id\n        name\n        description\n        icon\n        adminOnly\n        isMentionable\n      }\n      toolkits {\n        name\n        displayName\n        description\n        icon\n        onlyAdmin\n        hideFromMenu\n        isMentionable\n      }\n    }\n  }\n`;\n\n// ── Response types ──\n\nexport interface ToolCatalogTool {\n  id: string;\n  name: string;\n  description: string | null;\n  icon: string;\n  adminOnly: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogToolkit {\n  name: string;\n  displayName: string;\n  description: string;\n  icon: string;\n  onlyAdmin: boolean;\n  hideFromMenu: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogResult {\n  getToolkitToToolsMapping: {\n    tools: ToolCatalogTool[];\n    toolkits: ToolCatalogToolkit[];\n  };\n}\n\nexport interface AssetResult {\n  id: string;\n  title: string | null;\n  athenaOriginalType: string | null;\n  athenaConvertedType: string | null;\n  parentFolderId: string | null;\n  updatedAt: string | null;\n  isFavorited: boolean | null;\n  isArchived: boolean | null;\n  isHidden: boolean | null;\n}\n\nexport interface WorkspaceMember {\n  id: string;\n  email: string | null;\n  firstName: string | null;\n  lastName: string | null;\n  isAdmin: boolean;\n  avatarUrl: string | null;\n}\n"],"names":["createContext","useContext","requestAuth"],"mappings":";;;AAyCO,SAAS,mBACd,MAC8C;AAC9C,MAAI,KAAK,aAAa;AACpB,WAAO,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,WAAW,KAAG;AAAA,EAClE;AACA,MAAI,KAAK,OAAQ,QAAO,EAAE,SAAS,EAAE,aAAa,KAAK,SAAO;AAC9D,MAAI,KAAK,YAAa,QAAO,EAAE,SAAS,CAAA,GAAI,aAAa,KAAK,YAAA;AAC9D,QAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEO,MAAM,iBAAiBA,MAAAA,cAAyC,IAAI;AAEpE,SAAS,iBAAqC;AACnD,QAAM,MAAMC,MAAAA,WAAW,cAAc;AACrC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,6BAA6B;AACvD,SAAO;AACT;AAIA,eAAsB,aACpB,MACA,OACA,YAAiC,CAAA,GACrB;;AACZ,QAAM,MAAM,GAAG,KAAK,WAAW,QAAQ,QAAQ,EAAE,CAAC;AAClD,QAAM,OAAO,CAACC,iBAAoC;AAChD,UAAM,EAAE,SAAS,gBAAgB,mBAAmBA,YAAW;AAC/D,WAAO,MAAM,KAAK;AAAA,MAChB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MAAA;AAAA,MAEL,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,MACpC,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW;AAAA,IAAA,CAC1C;AAAA,EACH;AACA,QAAM,cAAc,KAAK,iBACrB,EAAE,GAAG,MAAM,aAAc,MAAM,KAAK,eAAA,KAAqB,KAAK,gBAC9D;AACJ,MAAI,WAAW,MAAM,KAAK,WAAW;AAGrC,MAAI,SAAS,WAAW,OAAO,YAAY,eAAe,KAAK,kBAAkB;AAC/E,UAAM,UAAU,MAAM,KAAK,iBAAA;AAE3B,QAAI,WAAW,YAAY,YAAY,aAAa;AAClD,iBAAW,MAAM,KAAK,EAAE,GAAG,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,gBAAgB,SAAS,MAAM,KAAK,SAAS,UAAU,EAAE;AAAA,EAC3E;AAEA,QAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,OAAI,YAAO,WAAP,mBAAe,QAAQ;AACzB,UAAM,IAAI,MAAM,kBAAkB,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE;AAAA,EAC9D;AAEA,SAAO,OAAO;AAChB;AAQA,MAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYtB,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA,UAIzB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAOvB,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAe9B,oBAAoB;AAAA;AAAA;AAAA;AAKrB,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAahC,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;;;;;;;"}
+{"version":3,"file":"api-client.cjs","sources":["../../../../../src/chat-ui/mentions/suggestions/data/api-client.ts"],"sourcesContent":["/**\n * API client for mention data fetching.\n *\n * Wraps raw fetch() with GraphQL support. Hosts authenticate with either a\n * bearer token or a workspace API key; agora's /graphql accepts both.\n */\n\nimport { createContext, useContext } from \"react\";\n\n// ── Auth context ──\n\nexport interface MentionAuthContext {\n  backendUrl: string;\n  appUrl?: string;\n  /** Bearer credential; hosts without one authenticate with `apiKey`. */\n  accessToken?: string;\n  /**\n   * Resolve a current bearer before each query (for rotating Office sessions).\n   * Resolving nothing falls back to `accessToken`, then the API key.\n   */\n  getAccessToken?: () => Promise<string | null | undefined>;\n  /**\n   * Renew the bearer after the backend refused it (401), for one resend of\n   * the query. Without it, or when it resolves nothing, a refused query fails\n   * as before.\n   */\n  renewAccessToken?: () => Promise<string | null | undefined>;\n  apiKey?: string;\n  /**\n   * With neither credential, ride the browser's same-origin session cookie\n   * instead of failing — the SDK's AthenaChat, whose REST helpers make the\n   * same choice for a host that configured no token and no API key. Hosts\n   * that always hold a credential leave this unset so an accidental anonymous\n   * query fails loudly.\n   */\n  credentials?: \"include\";\n  workspaceId?: string;\n  userId?: string;\n}\n\n/** Credential headers (or the cookie lane) for a mention fetch. */\nexport function mentionRequestInit(\n  auth: MentionAuthContext,\n): Pick<RequestInit, \"headers\" | \"credentials\"> {\n  if (auth.accessToken) {\n    return { headers: { Authorization: `Bearer ${auth.accessToken}` } };\n  }\n  if (auth.apiKey) return { headers: { \"X-API-KEY\": auth.apiKey } };\n  if (auth.credentials) return { headers: {}, credentials: auth.credentials };\n  throw new Error(\"MentionAuthCtx needs either an accessToken or an apiKey\");\n}\n\nexport const MentionAuthCtx = createContext<MentionAuthContext | null>(null);\n\nexport function useMentionAuth(): MentionAuthContext {\n  const ctx = useContext(MentionAuthCtx);\n  if (!ctx) throw new Error(\"MentionAuthCtx not provided\");\n  return ctx;\n}\n\n// ── GraphQL client ──\n\n/**\n * What {@link fetchGraphQL} throws: an HTTP failure (`status`) or the first\n * GraphQL error of the response (`code`, its `extensions.code`, e.g. agora's\n * `UNAUTHORIZED` for an asset the caller cannot read).\n */\nexport class AthenaGraphQLError extends Error {\n  readonly status: number | null;\n  readonly code: string | null;\n\n  constructor({\n    message,\n    status = null,\n    code = null,\n  }: {\n    message: string;\n    status?: number | null;\n    code?: string | null;\n  }) {\n    super(message);\n    this.name = \"AthenaGraphQLError\";\n    this.status = status;\n    this.code = code;\n  }\n}\n\n/** The `extensions.code` of a GraphQL error entry, when it carries a string one. */\nfunction graphQLErrorCode(entry: unknown): string | null {\n  if (typeof entry !== \"object\" || entry === null) return null;\n  const extensions: unknown = Reflect.get(entry, \"extensions\");\n  if (typeof extensions !== \"object\" || extensions === null) return null;\n  const code: unknown = Reflect.get(extensions, \"code\");\n  return typeof code === \"string\" ? code : null;\n}\n\nexport async function fetchGraphQL<T = any>(\n  auth: MentionAuthContext,\n  query: string,\n  variables: Record<string, any> = {},\n): Promise<T> {\n  const url = `${auth.backendUrl.replace(/\\/+$/, \"\")}/graphql`;\n  const send = (requestAuth: MentionAuthContext) => {\n    const { headers, credentials } = mentionRequestInit(requestAuth);\n    return fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...headers,\n      },\n      ...(credentials ? { credentials } : {}),\n      body: JSON.stringify({ query, variables }),\n    });\n  };\n  const requestAuth = auth.getAccessToken\n    ? { ...auth, accessToken: (await auth.getAccessToken()) ?? auth.accessToken }\n    : auth;\n  let response = await send(requestAuth);\n  // A refused bearer gets one renewal and a resend (the statewire transport's\n  // `staleAuth` contract); an API-key or cookie request has nothing to renew.\n  if (response.status === 401 && requestAuth.accessToken && auth.renewAccessToken) {\n    const renewed = await auth.renewAccessToken();\n    // The same token again (a static one) would only be refused again.\n    if (renewed && renewed !== requestAuth.accessToken) {\n      response = await send({ ...auth, accessToken: renewed });\n    }\n  }\n\n  if (!response.ok) {\n    throw new AthenaGraphQLError({\n      message: `GraphQL HTTP ${response.status}: ${response.statusText}`,\n      status: response.status,\n    });\n  }\n\n  const result = await response.json();\n  if (result.errors?.length) {\n    throw new AthenaGraphQLError({\n      message: `GraphQL error: ${result.errors[0].message}`,\n      code: graphQLErrorCode(result.errors[0]),\n    });\n  }\n\n  return result.data as T;\n}\n\n// ── GraphQL Queries ──\n\n/**\n * Lightweight asset fragment for mention menu items.\n * Only fetches fields needed for display + navigation.\n */\nconst MENTION_ASSET_FIELDS = `\n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n`;\n\nexport const SIMPLE_SEARCH_QUERY = `\n  query SimpleSearch($input: SimpleSearchRequestInput!) {\n    simpleSearch(input: $input) {\n      assets {\n        ${MENTION_ASSET_FIELDS}\n      }\n      totalCount\n    }\n  }\n`;\n\nexport const PAGINATED_ASSETS_QUERY = `\n  query GetPaginatedAssetsForWorkspace(\n    $limit: Int!\n    $offset: Int!\n    $parentFolderId: String\n    $filterTypes: [String!]\n    $filterColumns: ColumnFilter\n  ) {\n    getPaginatedAssetsForWorkspace(\n      limit: $limit\n      offset: $offset\n      parentFolderId: $parentFolderId\n      filterTypes: $filterTypes\n      filterColumns: $filterColumns\n    ) {\n      ${MENTION_ASSET_FIELDS}\n    }\n  }\n`;\n\nexport const WORKSPACE_MEMBERS_QUERY = `\n  query GetUsersInWorkspace($workspaceId: String!) {\n    getUsersInWorkspace(workspaceId: $workspaceId) {\n      id\n      email\n      firstName\n      lastName\n      isAdmin\n      avatarUrl\n    }\n  }\n`;\n\nexport const TOOL_CATALOG_QUERY = `\n  query MentionToolCatalog {\n    getToolkitToToolsMapping {\n      tools {\n        id\n        name\n        description\n        icon\n        adminOnly\n        isMentionable\n      }\n      toolkits {\n        name\n        displayName\n        description\n        icon\n        onlyAdmin\n        hideFromMenu\n        isMentionable\n      }\n    }\n  }\n`;\n\n// ── Response types ──\n\nexport interface ToolCatalogTool {\n  id: string;\n  name: string;\n  description: string | null;\n  icon: string;\n  adminOnly: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogToolkit {\n  name: string;\n  displayName: string;\n  description: string;\n  icon: string;\n  onlyAdmin: boolean;\n  hideFromMenu: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogResult {\n  getToolkitToToolsMapping: {\n    tools: ToolCatalogTool[];\n    toolkits: ToolCatalogToolkit[];\n  };\n}\n\nexport interface AssetResult {\n  id: string;\n  title: string | null;\n  athenaOriginalType: string | null;\n  athenaConvertedType: string | null;\n  parentFolderId: string | null;\n  updatedAt: string | null;\n  isFavorited: boolean | null;\n  isArchived: boolean | null;\n  isHidden: boolean | null;\n}\n\nexport interface WorkspaceMember {\n  id: string;\n  email: string | null;\n  firstName: string | null;\n  lastName: string | null;\n  isAdmin: boolean;\n  avatarUrl: string | null;\n}\n"],"names":["createContext","useContext","requestAuth"],"mappings":";;;;;;AAyCO,SAAS,mBACd,MAC8C;AAC9C,MAAI,KAAK,aAAa;AACpB,WAAO,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,WAAW,KAAG;AAAA,EAClE;AACA,MAAI,KAAK,OAAQ,QAAO,EAAE,SAAS,EAAE,aAAa,KAAK,SAAO;AAC9D,MAAI,KAAK,YAAa,QAAO,EAAE,SAAS,CAAA,GAAI,aAAa,KAAK,YAAA;AAC9D,QAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEO,MAAM,iBAAiBA,MAAAA,cAAyC,IAAI;AAEpE,SAAS,iBAAqC;AACnD,QAAM,MAAMC,MAAAA,WAAW,cAAc;AACrC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,6BAA6B;AACvD,SAAO;AACT;AASO,MAAM,2BAA2B,MAAM;AAAA,EAI5C,YAAY;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,OAAO;AAAA,EAAA,GAKN;AACD,UAAM,OAAO;AAZN;AACA;AAYP,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGA,SAAS,iBAAiB,OAA+B;AACvD,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,aAAsB,QAAQ,IAAI,OAAO,YAAY;AAC3D,MAAI,OAAO,eAAe,YAAY,eAAe,KAAM,QAAO;AAClE,QAAM,OAAgB,QAAQ,IAAI,YAAY,MAAM;AACpD,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEA,eAAsB,aACpB,MACA,OACA,YAAiC,CAAA,GACrB;;AACZ,QAAM,MAAM,GAAG,KAAK,WAAW,QAAQ,QAAQ,EAAE,CAAC;AAClD,QAAM,OAAO,CAACC,iBAAoC;AAChD,UAAM,EAAE,SAAS,gBAAgB,mBAAmBA,YAAW;AAC/D,WAAO,MAAM,KAAK;AAAA,MAChB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MAAA;AAAA,MAEL,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,MACpC,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW;AAAA,IAAA,CAC1C;AAAA,EACH;AACA,QAAM,cAAc,KAAK,iBACrB,EAAE,GAAG,MAAM,aAAc,MAAM,KAAK,eAAA,KAAqB,KAAK,gBAC9D;AACJ,MAAI,WAAW,MAAM,KAAK,WAAW;AAGrC,MAAI,SAAS,WAAW,OAAO,YAAY,eAAe,KAAK,kBAAkB;AAC/E,UAAM,UAAU,MAAM,KAAK,iBAAA;AAE3B,QAAI,WAAW,YAAY,YAAY,aAAa;AAClD,iBAAW,MAAM,KAAK,EAAE,GAAG,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,mBAAmB;AAAA,MAC3B,SAAS,gBAAgB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAChE,QAAQ,SAAS;AAAA,IAAA,CAClB;AAAA,EACH;AAEA,QAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,OAAI,YAAO,WAAP,mBAAe,QAAQ;AACzB,UAAM,IAAI,mBAAmB;AAAA,MAC3B,SAAS,kBAAkB,OAAO,OAAO,CAAC,EAAE,OAAO;AAAA,MACnD,MAAM,iBAAiB,OAAO,OAAO,CAAC,CAAC;AAAA,IAAA,CACxC;AAAA,EACH;AAEA,SAAO,OAAO;AAChB;AAQA,MAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYtB,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA,UAIzB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAOvB,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAe9B,oBAAoB;AAAA;AAAA;AAAA;AAKrB,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAahC,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;;;;;;;;"}

package/dist/chat-ui/mentions/suggestions/data/api-client.d.ts

@@ -36,6 +36,20 @@ export interface MentionAuthContext {
 export declare function mentionRequestInit(auth: MentionAuthContext): Pick<RequestInit, "headers" | "credentials">;
 export declare const MentionAuthCtx: import("react").Context<MentionAuthContext | null>;
 export declare function useMentionAuth(): MentionAuthContext;
+/**
+ * What {@link fetchGraphQL} throws: an HTTP failure (`status`) or the first
+ * GraphQL error of the response (`code`, its `extensions.code`, e.g. agora's
+ * `UNAUTHORIZED` for an asset the caller cannot read).
+ */
+export declare class AthenaGraphQLError extends Error {
+    readonly status: number | null;
+    readonly code: string | null;
+    constructor({ message, status, code, }: {
+        message: string;
+        status?: number | null;
+        code?: string | null;
+    });
+}
 export declare function fetchGraphQL<T = any>(auth: MentionAuthContext, query: string, variables?: Record<string, any>): Promise<T>;
 export declare const SIMPLE_SEARCH_QUERY = "\n  query SimpleSearch($input: SimpleSearchRequestInput!) {\n    simpleSearch(input: $input) {\n      assets {\n        \n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n\n      }\n      totalCount\n    }\n  }\n";
 export declare const PAGINATED_ASSETS_QUERY = "\n  query GetPaginatedAssetsForWorkspace(\n    $limit: Int!\n    $offset: Int!\n    $parentFolderId: String\n    $filterTypes: [String!]\n    $filterColumns: ColumnFilter\n  ) {\n    getPaginatedAssetsForWorkspace(\n      limit: $limit\n      offset: $offset\n      parentFolderId: $parentFolderId\n      filterTypes: $filterTypes\n      filterColumns: $filterColumns\n    ) {\n      \n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n\n    }\n  }\n";

package/dist/chat-ui/mentions/suggestions/data/api-client.js

@@ -1,3 +1,6 @@
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
 import { createContext, useContext } from "react";
 function mentionRequestInit(auth) {
   if (auth.accessToken) {
@@ -13,6 +16,27 @@ function useMentionAuth() {
   if (!ctx) throw new Error("MentionAuthCtx not provided");
   return ctx;
 }
+class AthenaGraphQLError extends Error {
+  constructor({
+    message,
+    status = null,
+    code = null
+  }) {
+    super(message);
+    __publicField(this, "status");
+    __publicField(this, "code");
+    this.name = "AthenaGraphQLError";
+    this.status = status;
+    this.code = code;
+  }
+}
+function graphQLErrorCode(entry) {
+  if (typeof entry !== "object" || entry === null) return null;
+  const extensions = Reflect.get(entry, "extensions");
+  if (typeof extensions !== "object" || extensions === null) return null;
+  const code = Reflect.get(extensions, "code");
+  return typeof code === "string" ? code : null;
+}
 async function fetchGraphQL(auth, query, variables = {}) {
   var _a;
   const url = `${auth.backendUrl.replace(/\/+$/, "")}/graphql`;
@@ -37,11 +61,17 @@ async function fetchGraphQL(auth, query, variables = {}) {
     }
   }
   if (!response.ok) {
-    throw new Error(`GraphQL HTTP ${response.status}: ${response.statusText}`);
+    throw new AthenaGraphQLError({
+      message: `GraphQL HTTP ${response.status}: ${response.statusText}`,
+      status: response.status
+    });
   }
   const result = await response.json();
   if ((_a = result.errors) == null ? void 0 : _a.length) {
-    throw new Error(`GraphQL error: ${result.errors[0].message}`);
+    throw new AthenaGraphQLError({
+      message: `GraphQL error: ${result.errors[0].message}`,
+      code: graphQLErrorCode(result.errors[0])
+    });
   }
   return result.data;
 }
@@ -121,6 +151,7 @@ const TOOL_CATALOG_QUERY = `
   }
 `;
 export {
+  AthenaGraphQLError,
   MentionAuthCtx,
   PAGINATED_ASSETS_QUERY,
   SIMPLE_SEARCH_QUERY,

package/dist/chat-ui/mentions/suggestions/data/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sources":["../../../../../src/chat-ui/mentions/suggestions/data/api-client.ts"],"sourcesContent":["/**\n * API client for mention data fetching.\n *\n * Wraps raw fetch() with GraphQL support. Hosts authenticate with either a\n * bearer token or a workspace API key; agora's /graphql accepts both.\n */\n\nimport { createContext, useContext } from \"react\";\n\n// ── Auth context ──\n\nexport interface MentionAuthContext {\n  backendUrl: string;\n  appUrl?: string;\n  /** Bearer credential; hosts without one authenticate with `apiKey`. */\n  accessToken?: string;\n  /**\n   * Resolve a current bearer before each query (for rotating Office sessions).\n   * Resolving nothing falls back to `accessToken`, then the API key.\n   */\n  getAccessToken?: () => Promise<string | null | undefined>;\n  /**\n   * Renew the bearer after the backend refused it (401), for one resend of\n   * the query. Without it, or when it resolves nothing, a refused query fails\n   * as before.\n   */\n  renewAccessToken?: () => Promise<string | null | undefined>;\n  apiKey?: string;\n  /**\n   * With neither credential, ride the browser's same-origin session cookie\n   * instead of failing — the SDK's AthenaChat, whose REST helpers make the\n   * same choice for a host that configured no token and no API key. Hosts\n   * that always hold a credential leave this unset so an accidental anonymous\n   * query fails loudly.\n   */\n  credentials?: \"include\";\n  workspaceId?: string;\n  userId?: string;\n}\n\n/** Credential headers (or the cookie lane) for a mention fetch. */\nexport function mentionRequestInit(\n  auth: MentionAuthContext,\n): Pick<RequestInit, \"headers\" | \"credentials\"> {\n  if (auth.accessToken) {\n    return { headers: { Authorization: `Bearer ${auth.accessToken}` } };\n  }\n  if (auth.apiKey) return { headers: { \"X-API-KEY\": auth.apiKey } };\n  if (auth.credentials) return { headers: {}, credentials: auth.credentials };\n  throw new Error(\"MentionAuthCtx needs either an accessToken or an apiKey\");\n}\n\nexport const MentionAuthCtx = createContext<MentionAuthContext | null>(null);\n\nexport function useMentionAuth(): MentionAuthContext {\n  const ctx = useContext(MentionAuthCtx);\n  if (!ctx) throw new Error(\"MentionAuthCtx not provided\");\n  return ctx;\n}\n\n// ── GraphQL client ──\n\nexport async function fetchGraphQL<T = any>(\n  auth: MentionAuthContext,\n  query: string,\n  variables: Record<string, any> = {},\n): Promise<T> {\n  const url = `${auth.backendUrl.replace(/\\/+$/, \"\")}/graphql`;\n  const send = (requestAuth: MentionAuthContext) => {\n    const { headers, credentials } = mentionRequestInit(requestAuth);\n    return fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...headers,\n      },\n      ...(credentials ? { credentials } : {}),\n      body: JSON.stringify({ query, variables }),\n    });\n  };\n  const requestAuth = auth.getAccessToken\n    ? { ...auth, accessToken: (await auth.getAccessToken()) ?? auth.accessToken }\n    : auth;\n  let response = await send(requestAuth);\n  // A refused bearer gets one renewal and a resend (the statewire transport's\n  // `staleAuth` contract); an API-key or cookie request has nothing to renew.\n  if (response.status === 401 && requestAuth.accessToken && auth.renewAccessToken) {\n    const renewed = await auth.renewAccessToken();\n    // The same token again (a static one) would only be refused again.\n    if (renewed && renewed !== requestAuth.accessToken) {\n      response = await send({ ...auth, accessToken: renewed });\n    }\n  }\n\n  if (!response.ok) {\n    throw new Error(`GraphQL HTTP ${response.status}: ${response.statusText}`);\n  }\n\n  const result = await response.json();\n  if (result.errors?.length) {\n    throw new Error(`GraphQL error: ${result.errors[0].message}`);\n  }\n\n  return result.data as T;\n}\n\n// ── GraphQL Queries ──\n\n/**\n * Lightweight asset fragment for mention menu items.\n * Only fetches fields needed for display + navigation.\n */\nconst MENTION_ASSET_FIELDS = `\n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n`;\n\nexport const SIMPLE_SEARCH_QUERY = `\n  query SimpleSearch($input: SimpleSearchRequestInput!) {\n    simpleSearch(input: $input) {\n      assets {\n        ${MENTION_ASSET_FIELDS}\n      }\n      totalCount\n    }\n  }\n`;\n\nexport const PAGINATED_ASSETS_QUERY = `\n  query GetPaginatedAssetsForWorkspace(\n    $limit: Int!\n    $offset: Int!\n    $parentFolderId: String\n    $filterTypes: [String!]\n    $filterColumns: ColumnFilter\n  ) {\n    getPaginatedAssetsForWorkspace(\n      limit: $limit\n      offset: $offset\n      parentFolderId: $parentFolderId\n      filterTypes: $filterTypes\n      filterColumns: $filterColumns\n    ) {\n      ${MENTION_ASSET_FIELDS}\n    }\n  }\n`;\n\nexport const WORKSPACE_MEMBERS_QUERY = `\n  query GetUsersInWorkspace($workspaceId: String!) {\n    getUsersInWorkspace(workspaceId: $workspaceId) {\n      id\n      email\n      firstName\n      lastName\n      isAdmin\n      avatarUrl\n    }\n  }\n`;\n\nexport const TOOL_CATALOG_QUERY = `\n  query MentionToolCatalog {\n    getToolkitToToolsMapping {\n      tools {\n        id\n        name\n        description\n        icon\n        adminOnly\n        isMentionable\n      }\n      toolkits {\n        name\n        displayName\n        description\n        icon\n        onlyAdmin\n        hideFromMenu\n        isMentionable\n      }\n    }\n  }\n`;\n\n// ── Response types ──\n\nexport interface ToolCatalogTool {\n  id: string;\n  name: string;\n  description: string | null;\n  icon: string;\n  adminOnly: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogToolkit {\n  name: string;\n  displayName: string;\n  description: string;\n  icon: string;\n  onlyAdmin: boolean;\n  hideFromMenu: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogResult {\n  getToolkitToToolsMapping: {\n    tools: ToolCatalogTool[];\n    toolkits: ToolCatalogToolkit[];\n  };\n}\n\nexport interface AssetResult {\n  id: string;\n  title: string | null;\n  athenaOriginalType: string | null;\n  athenaConvertedType: string | null;\n  parentFolderId: string | null;\n  updatedAt: string | null;\n  isFavorited: boolean | null;\n  isArchived: boolean | null;\n  isHidden: boolean | null;\n}\n\nexport interface WorkspaceMember {\n  id: string;\n  email: string | null;\n  firstName: string | null;\n  lastName: string | null;\n  isAdmin: boolean;\n  avatarUrl: string | null;\n}\n"],"names":["requestAuth"],"mappings":";AAyCO,SAAS,mBACd,MAC8C;AAC9C,MAAI,KAAK,aAAa;AACpB,WAAO,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,WAAW,KAAG;AAAA,EAClE;AACA,MAAI,KAAK,OAAQ,QAAO,EAAE,SAAS,EAAE,aAAa,KAAK,SAAO;AAC9D,MAAI,KAAK,YAAa,QAAO,EAAE,SAAS,CAAA,GAAI,aAAa,KAAK,YAAA;AAC9D,QAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEO,MAAM,iBAAiB,cAAyC,IAAI;AAEpE,SAAS,iBAAqC;AACnD,QAAM,MAAM,WAAW,cAAc;AACrC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,6BAA6B;AACvD,SAAO;AACT;AAIA,eAAsB,aACpB,MACA,OACA,YAAiC,CAAA,GACrB;;AACZ,QAAM,MAAM,GAAG,KAAK,WAAW,QAAQ,QAAQ,EAAE,CAAC;AAClD,QAAM,OAAO,CAACA,iBAAoC;AAChD,UAAM,EAAE,SAAS,gBAAgB,mBAAmBA,YAAW;AAC/D,WAAO,MAAM,KAAK;AAAA,MAChB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MAAA;AAAA,MAEL,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,MACpC,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW;AAAA,IAAA,CAC1C;AAAA,EACH;AACA,QAAM,cAAc,KAAK,iBACrB,EAAE,GAAG,MAAM,aAAc,MAAM,KAAK,eAAA,KAAqB,KAAK,gBAC9D;AACJ,MAAI,WAAW,MAAM,KAAK,WAAW;AAGrC,MAAI,SAAS,WAAW,OAAO,YAAY,eAAe,KAAK,kBAAkB;AAC/E,UAAM,UAAU,MAAM,KAAK,iBAAA;AAE3B,QAAI,WAAW,YAAY,YAAY,aAAa;AAClD,iBAAW,MAAM,KAAK,EAAE,GAAG,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,gBAAgB,SAAS,MAAM,KAAK,SAAS,UAAU,EAAE;AAAA,EAC3E;AAEA,QAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,OAAI,YAAO,WAAP,mBAAe,QAAQ;AACzB,UAAM,IAAI,MAAM,kBAAkB,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE;AAAA,EAC9D;AAEA,SAAO,OAAO;AAChB;AAQA,MAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYtB,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA,UAIzB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAOvB,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAe9B,oBAAoB;AAAA;AAAA;AAAA;AAKrB,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAahC,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;"}
+{"version":3,"file":"api-client.js","sources":["../../../../../src/chat-ui/mentions/suggestions/data/api-client.ts"],"sourcesContent":["/**\n * API client for mention data fetching.\n *\n * Wraps raw fetch() with GraphQL support. Hosts authenticate with either a\n * bearer token or a workspace API key; agora's /graphql accepts both.\n */\n\nimport { createContext, useContext } from \"react\";\n\n// ── Auth context ──\n\nexport interface MentionAuthContext {\n  backendUrl: string;\n  appUrl?: string;\n  /** Bearer credential; hosts without one authenticate with `apiKey`. */\n  accessToken?: string;\n  /**\n   * Resolve a current bearer before each query (for rotating Office sessions).\n   * Resolving nothing falls back to `accessToken`, then the API key.\n   */\n  getAccessToken?: () => Promise<string | null | undefined>;\n  /**\n   * Renew the bearer after the backend refused it (401), for one resend of\n   * the query. Without it, or when it resolves nothing, a refused query fails\n   * as before.\n   */\n  renewAccessToken?: () => Promise<string | null | undefined>;\n  apiKey?: string;\n  /**\n   * With neither credential, ride the browser's same-origin session cookie\n   * instead of failing — the SDK's AthenaChat, whose REST helpers make the\n   * same choice for a host that configured no token and no API key. Hosts\n   * that always hold a credential leave this unset so an accidental anonymous\n   * query fails loudly.\n   */\n  credentials?: \"include\";\n  workspaceId?: string;\n  userId?: string;\n}\n\n/** Credential headers (or the cookie lane) for a mention fetch. */\nexport function mentionRequestInit(\n  auth: MentionAuthContext,\n): Pick<RequestInit, \"headers\" | \"credentials\"> {\n  if (auth.accessToken) {\n    return { headers: { Authorization: `Bearer ${auth.accessToken}` } };\n  }\n  if (auth.apiKey) return { headers: { \"X-API-KEY\": auth.apiKey } };\n  if (auth.credentials) return { headers: {}, credentials: auth.credentials };\n  throw new Error(\"MentionAuthCtx needs either an accessToken or an apiKey\");\n}\n\nexport const MentionAuthCtx = createContext<MentionAuthContext | null>(null);\n\nexport function useMentionAuth(): MentionAuthContext {\n  const ctx = useContext(MentionAuthCtx);\n  if (!ctx) throw new Error(\"MentionAuthCtx not provided\");\n  return ctx;\n}\n\n// ── GraphQL client ──\n\n/**\n * What {@link fetchGraphQL} throws: an HTTP failure (`status`) or the first\n * GraphQL error of the response (`code`, its `extensions.code`, e.g. agora's\n * `UNAUTHORIZED` for an asset the caller cannot read).\n */\nexport class AthenaGraphQLError extends Error {\n  readonly status: number | null;\n  readonly code: string | null;\n\n  constructor({\n    message,\n    status = null,\n    code = null,\n  }: {\n    message: string;\n    status?: number | null;\n    code?: string | null;\n  }) {\n    super(message);\n    this.name = \"AthenaGraphQLError\";\n    this.status = status;\n    this.code = code;\n  }\n}\n\n/** The `extensions.code` of a GraphQL error entry, when it carries a string one. */\nfunction graphQLErrorCode(entry: unknown): string | null {\n  if (typeof entry !== \"object\" || entry === null) return null;\n  const extensions: unknown = Reflect.get(entry, \"extensions\");\n  if (typeof extensions !== \"object\" || extensions === null) return null;\n  const code: unknown = Reflect.get(extensions, \"code\");\n  return typeof code === \"string\" ? code : null;\n}\n\nexport async function fetchGraphQL<T = any>(\n  auth: MentionAuthContext,\n  query: string,\n  variables: Record<string, any> = {},\n): Promise<T> {\n  const url = `${auth.backendUrl.replace(/\\/+$/, \"\")}/graphql`;\n  const send = (requestAuth: MentionAuthContext) => {\n    const { headers, credentials } = mentionRequestInit(requestAuth);\n    return fetch(url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        ...headers,\n      },\n      ...(credentials ? { credentials } : {}),\n      body: JSON.stringify({ query, variables }),\n    });\n  };\n  const requestAuth = auth.getAccessToken\n    ? { ...auth, accessToken: (await auth.getAccessToken()) ?? auth.accessToken }\n    : auth;\n  let response = await send(requestAuth);\n  // A refused bearer gets one renewal and a resend (the statewire transport's\n  // `staleAuth` contract); an API-key or cookie request has nothing to renew.\n  if (response.status === 401 && requestAuth.accessToken && auth.renewAccessToken) {\n    const renewed = await auth.renewAccessToken();\n    // The same token again (a static one) would only be refused again.\n    if (renewed && renewed !== requestAuth.accessToken) {\n      response = await send({ ...auth, accessToken: renewed });\n    }\n  }\n\n  if (!response.ok) {\n    throw new AthenaGraphQLError({\n      message: `GraphQL HTTP ${response.status}: ${response.statusText}`,\n      status: response.status,\n    });\n  }\n\n  const result = await response.json();\n  if (result.errors?.length) {\n    throw new AthenaGraphQLError({\n      message: `GraphQL error: ${result.errors[0].message}`,\n      code: graphQLErrorCode(result.errors[0]),\n    });\n  }\n\n  return result.data as T;\n}\n\n// ── GraphQL Queries ──\n\n/**\n * Lightweight asset fragment for mention menu items.\n * Only fetches fields needed for display + navigation.\n */\nconst MENTION_ASSET_FIELDS = `\n  id\n  title\n  athenaOriginalType\n  athenaConvertedType\n  parentFolderId\n  updatedAt\n  isFavorited\n  isArchived\n  isHidden\n`;\n\nexport const SIMPLE_SEARCH_QUERY = `\n  query SimpleSearch($input: SimpleSearchRequestInput!) {\n    simpleSearch(input: $input) {\n      assets {\n        ${MENTION_ASSET_FIELDS}\n      }\n      totalCount\n    }\n  }\n`;\n\nexport const PAGINATED_ASSETS_QUERY = `\n  query GetPaginatedAssetsForWorkspace(\n    $limit: Int!\n    $offset: Int!\n    $parentFolderId: String\n    $filterTypes: [String!]\n    $filterColumns: ColumnFilter\n  ) {\n    getPaginatedAssetsForWorkspace(\n      limit: $limit\n      offset: $offset\n      parentFolderId: $parentFolderId\n      filterTypes: $filterTypes\n      filterColumns: $filterColumns\n    ) {\n      ${MENTION_ASSET_FIELDS}\n    }\n  }\n`;\n\nexport const WORKSPACE_MEMBERS_QUERY = `\n  query GetUsersInWorkspace($workspaceId: String!) {\n    getUsersInWorkspace(workspaceId: $workspaceId) {\n      id\n      email\n      firstName\n      lastName\n      isAdmin\n      avatarUrl\n    }\n  }\n`;\n\nexport const TOOL_CATALOG_QUERY = `\n  query MentionToolCatalog {\n    getToolkitToToolsMapping {\n      tools {\n        id\n        name\n        description\n        icon\n        adminOnly\n        isMentionable\n      }\n      toolkits {\n        name\n        displayName\n        description\n        icon\n        onlyAdmin\n        hideFromMenu\n        isMentionable\n      }\n    }\n  }\n`;\n\n// ── Response types ──\n\nexport interface ToolCatalogTool {\n  id: string;\n  name: string;\n  description: string | null;\n  icon: string;\n  adminOnly: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogToolkit {\n  name: string;\n  displayName: string;\n  description: string;\n  icon: string;\n  onlyAdmin: boolean;\n  hideFromMenu: boolean;\n  isMentionable: boolean;\n}\n\nexport interface ToolCatalogResult {\n  getToolkitToToolsMapping: {\n    tools: ToolCatalogTool[];\n    toolkits: ToolCatalogToolkit[];\n  };\n}\n\nexport interface AssetResult {\n  id: string;\n  title: string | null;\n  athenaOriginalType: string | null;\n  athenaConvertedType: string | null;\n  parentFolderId: string | null;\n  updatedAt: string | null;\n  isFavorited: boolean | null;\n  isArchived: boolean | null;\n  isHidden: boolean | null;\n}\n\nexport interface WorkspaceMember {\n  id: string;\n  email: string | null;\n  firstName: string | null;\n  lastName: string | null;\n  isAdmin: boolean;\n  avatarUrl: string | null;\n}\n"],"names":["requestAuth"],"mappings":";;;;AAyCO,SAAS,mBACd,MAC8C;AAC9C,MAAI,KAAK,aAAa;AACpB,WAAO,EAAE,SAAS,EAAE,eAAe,UAAU,KAAK,WAAW,KAAG;AAAA,EAClE;AACA,MAAI,KAAK,OAAQ,QAAO,EAAE,SAAS,EAAE,aAAa,KAAK,SAAO;AAC9D,MAAI,KAAK,YAAa,QAAO,EAAE,SAAS,CAAA,GAAI,aAAa,KAAK,YAAA;AAC9D,QAAM,IAAI,MAAM,yDAAyD;AAC3E;AAEO,MAAM,iBAAiB,cAAyC,IAAI;AAEpE,SAAS,iBAAqC;AACnD,QAAM,MAAM,WAAW,cAAc;AACrC,MAAI,CAAC,IAAK,OAAM,IAAI,MAAM,6BAA6B;AACvD,SAAO;AACT;AASO,MAAM,2BAA2B,MAAM;AAAA,EAI5C,YAAY;AAAA,IACV;AAAA,IACA,SAAS;AAAA,IACT,OAAO;AAAA,EAAA,GAKN;AACD,UAAM,OAAO;AAZN;AACA;AAYP,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAGA,SAAS,iBAAiB,OAA+B;AACvD,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,aAAsB,QAAQ,IAAI,OAAO,YAAY;AAC3D,MAAI,OAAO,eAAe,YAAY,eAAe,KAAM,QAAO;AAClE,QAAM,OAAgB,QAAQ,IAAI,YAAY,MAAM;AACpD,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEA,eAAsB,aACpB,MACA,OACA,YAAiC,CAAA,GACrB;;AACZ,QAAM,MAAM,GAAG,KAAK,WAAW,QAAQ,QAAQ,EAAE,CAAC;AAClD,QAAM,OAAO,CAACA,iBAAoC;AAChD,UAAM,EAAE,SAAS,gBAAgB,mBAAmBA,YAAW;AAC/D,WAAO,MAAM,KAAK;AAAA,MAChB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MAAA;AAAA,MAEL,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,MACpC,MAAM,KAAK,UAAU,EAAE,OAAO,WAAW;AAAA,IAAA,CAC1C;AAAA,EACH;AACA,QAAM,cAAc,KAAK,iBACrB,EAAE,GAAG,MAAM,aAAc,MAAM,KAAK,eAAA,KAAqB,KAAK,gBAC9D;AACJ,MAAI,WAAW,MAAM,KAAK,WAAW;AAGrC,MAAI,SAAS,WAAW,OAAO,YAAY,eAAe,KAAK,kBAAkB;AAC/E,UAAM,UAAU,MAAM,KAAK,iBAAA;AAE3B,QAAI,WAAW,YAAY,YAAY,aAAa;AAClD,iBAAW,MAAM,KAAK,EAAE,GAAG,MAAM,aAAa,SAAS;AAAA,IACzD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,mBAAmB;AAAA,MAC3B,SAAS,gBAAgB,SAAS,MAAM,KAAK,SAAS,UAAU;AAAA,MAChE,QAAQ,SAAS;AAAA,IAAA,CAClB;AAAA,EACH;AAEA,QAAM,SAAS,MAAM,SAAS,KAAA;AAC9B,OAAI,YAAO,WAAP,mBAAe,QAAQ;AACzB,UAAM,IAAI,mBAAmB;AAAA,MAC3B,SAAS,kBAAkB,OAAO,OAAO,CAAC,EAAE,OAAO;AAAA,MACnD,MAAM,iBAAiB,OAAO,OAAO,CAAC,CAAC;AAAA,IAAA,CACxC;AAAA,EACH;AAEA,SAAO,OAAO;AAChB;AAQA,MAAM,uBAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYtB,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA,UAIzB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAOvB,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAe9B,oBAAoB;AAAA;AAAA;AAAA;AAKrB,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAahC,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;"}

package/dist/chat-ui/statewire.cjs

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const StatewireApprovalCard = require("../chat/StatewireApprovalCard.cjs");
 const useStatewireApprovalRequest = require("../chat/use-statewire-approval-request.cjs");
+const StatewireRunRefusalNotice = require("../chat/StatewireRunRefusalNotice.cjs");
 const StatewireQueuedMessages = require("../chat/StatewireQueuedMessages.cjs");
 const statewireHistoryEdge = require("./thread/statewire-history-edge.cjs");
 const statewireWindowContext = require("../provider/statewire-window-context.cjs");
@@ -13,6 +14,8 @@ const statewireContinueRun = require("./messages/statewire-continue-run.cjs");
 const interrupts = require("../agent-runtime/src/interrupts.cjs");
 exports.StatewireApprovalCard = StatewireApprovalCard.StatewireApprovalCard;
 exports.useStatewireApprovalRequest = useStatewireApprovalRequest.useStatewireApprovalRequest;
+exports.RUN_START_REFUSAL_FALLBACK_MESSAGE = StatewireRunRefusalNotice.RUN_START_REFUSAL_FALLBACK_MESSAGE;
+exports.StatewireRunRefusalNotice = StatewireRunRefusalNotice.StatewireRunRefusalNotice;
 exports.StatewireQueuedMessages = StatewireQueuedMessages.StatewireQueuedMessages;
 exports.HistoryEdgeRow = statewireHistoryEdge.HistoryEdgeRow;
 exports.StatewireHistoryEdge = statewireHistoryEdge.StatewireHistoryEdge;

package/dist/chat-ui/statewire.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"statewire.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"statewire.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/chat-ui/statewire.d.ts

@@ -1,7 +1,8 @@
 /**
  * The statewire chat surfaces every Athena host mounts — the HITL approval
- * card, the queued-messages tray, the continue affordances and the run-ended
- * footer, with the runtime-message card and Continue pill they render — as a
+ * card, the queued-messages tray, the refused-run notice, the continue
+ * affordances and the run-ended footer, with the runtime-message card and
+ * Continue pill they render — as a
  * lean entry point. Hosts that already have their own composer and mention
  * stack (Olympus) import this instead of the full `chat-ui` barrel, so the
  * SDK's Tiptap and mention modules never enter their build graph.
@@ -10,6 +11,7 @@
  */
 export { StatewireApprovalCard, type StatewireApprovalCardProps, type StatewireApprovalEditorContext, type StatewireApprovalRequestContext, } from "../chat/StatewireApprovalCard";
 export { type StatewireApprovalRequest, type StatewireInterruptPredicate, type UseStatewireApprovalRequestOptions, useStatewireApprovalRequest, } from "../chat/use-statewire-approval-request";
+export { RUN_START_REFUSAL_FALLBACK_MESSAGE, StatewireRunRefusalNotice, type StatewireRunRefusalNoticeProps, } from "../chat/StatewireRunRefusalNotice";
 export { StatewireQueuedMessages, type StatewireQueueEditorContext, type StatewireQueueEvent, type StatewireQueueRowContentContext, type StatewireQueueRowMarkerContext, type StatewireQueuedMessagesProps, } from "../chat/StatewireQueuedMessages";
 export { HistoryEdgeRow, type HistoryEdgeRowProps, StatewireHistoryEdge, type StatewireHistoryEdgeProps, } from "./thread/statewire-history-edge";
 export { StatewireToolOutputsContext, useStatewireToolOutputs, } from "../provider/statewire-window-context";

package/dist/chat-ui/statewire.js

@@ -1,5 +1,6 @@
 import { StatewireApprovalCard } from "../chat/StatewireApprovalCard.js";
 import { useStatewireApprovalRequest } from "../chat/use-statewire-approval-request.js";
+import { RUN_START_REFUSAL_FALLBACK_MESSAGE, StatewireRunRefusalNotice } from "../chat/StatewireRunRefusalNotice.js";
 import { StatewireQueuedMessages } from "../chat/StatewireQueuedMessages.js";
 import { HistoryEdgeRow, StatewireHistoryEdge } from "./thread/statewire-history-edge.js";
 import { StatewireToolOutputsContext, useStatewireToolOutputs } from "../provider/statewire-window-context.js";
@@ -13,6 +14,7 @@ export {
   ContinuePill,
   HITL_PENDING_RESUME_GRACE_MS,
   HistoryEdgeRow,
+  RUN_START_REFUSAL_FALLBACK_MESSAGE,
   RuntimeMessageCard,
   StatewireApprovalCard,
   StatewireContinueRunAffordance,
@@ -20,6 +22,7 @@ export {
   StatewireHistoryEdge,
   StatewireQueuedMessages,
   StatewireRunEndedFooter,
+  StatewireRunRefusalNotice,
   StatewireToolOutputsContext,
   WaitingOnYouBanner,
   WaitingOnYouBannerView,

package/dist/chat-ui/statewire.js.map

@@ -1 +1 @@
-{"version":3,"file":"statewire.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}
+{"version":3,"file":"statewire.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;"}

package/dist/index.cjs

@@ -97,6 +97,7 @@ const useReadComposerDraft = require("./composer/useReadComposerDraft.cjs");
 const useSendMessage = require("./composer/useSendMessage.cjs");
 const useComposerAttachment = require("./composer/useComposerAttachment.cjs");
 const chatPickers = require("./catalog/chat-pickers.cjs");
+const useAthenaChatMode = require("./catalog/use-athena-chat-mode.cjs");
 const runtimeCatalog = require("./catalog/runtime-catalog.cjs");
 const useFileUpload = require("./composer/useFileUpload.cjs");
 const FileUploadButton = require("./composer/FileUploadButton.cjs");
@@ -408,7 +409,9 @@ exports.useReadComposerDraft = useReadComposerDraft.useReadComposerDraft;
 exports.useSendMessage = useSendMessage.useSendMessage;
 exports.useComposerAttachment = useComposerAttachment.useComposerAttachment;
 exports.ChatAgentPicker = chatPickers.ChatAgentPicker;
+exports.ChatModePicker = chatPickers.ChatModePicker;
 exports.ChatModelPicker = chatPickers.ChatModelPicker;
+exports.useAthenaChatMode = useAthenaChatMode.useAthenaChatMode;
 exports.MODEL_PROVIDER_LABELS = runtimeCatalog.MODEL_PROVIDER_LABELS;
 exports.credentialFingerprint = runtimeCatalog.credentialFingerprint;
 exports.groupModelsByProvider = runtimeCatalog.groupModelsByProvider;
@@ -416,6 +419,7 @@ exports.normalizeAgentCatalog = runtimeCatalog.normalizeAgentCatalog;
 exports.normalizeModelCatalog = runtimeCatalog.normalizeModelCatalog;
 exports.resolveCatalogModelId = runtimeCatalog.resolveCatalogModelId;
 exports.useAthenaAgentCatalog = runtimeCatalog.useAthenaAgentCatalog;
+exports.useAthenaAgentModelOptions = runtimeCatalog.useAthenaAgentModelOptions;
 exports.useAthenaModelCatalog = runtimeCatalog.useAthenaModelCatalog;
 exports.useFileUpload = useFileUpload.useFileUpload;
 exports.FileUploadButton = FileUploadButton.FileUploadButton;

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/index.d.ts

@@ -164,10 +164,13 @@ export { useReadComposerDraft } from './composer/useReadComposerDraft';
 export { useSendMessage } from './composer/useSendMessage';
 export type { SendMessageOptions } from './composer/useSendMessage';
 export { useComposerAttachment } from './composer/useComposerAttachment';
-export { ChatAgentPicker, ChatModelPicker } from './catalog/chat-pickers';
-export type { ChatAgentPickerProps, ChatModelPickerProps } from './catalog/chat-pickers';
-export { credentialFingerprint, groupModelsByProvider, MODEL_PROVIDER_LABELS, normalizeAgentCatalog, normalizeModelCatalog, resolveCatalogModelId, useAthenaAgentCatalog, useAthenaModelCatalog, } from './catalog/runtime-catalog';
-export type { AthenaAgentOption, AthenaModelOption, AthenaModelStatus, } from './catalog/runtime-catalog';
+export { ChatAgentPicker, ChatModelPicker, ChatModePicker } from './catalog/chat-pickers';
+export type { ChatAgentPickerProps, ChatModelPickerProps, ChatModePickerProps, } from './catalog/chat-pickers';
+export { type AthenaChatMode, useAthenaChatMode } from './catalog/use-athena-chat-mode';
+export type { AthenaChatModeOption } from './catalog/agent-mode-menu';
+export { credentialFingerprint, groupModelsByProvider, MODEL_PROVIDER_LABELS, normalizeAgentCatalog, normalizeModelCatalog, resolveCatalogModelId, useAthenaAgentCatalog, useAthenaAgentModelOptions, useAthenaModelCatalog, } from './catalog/runtime-catalog';
+export type { AthenaAgentModelOptions, AthenaAgentModelOptionsStatus, AthenaAgentOption, AthenaModelOption, AthenaModelStatus, } from './catalog/runtime-catalog';
+export type { AthenaAgentModelOption } from './catalog/agent-model-options';
 export { useFileUpload } from './composer/useFileUpload';
 export type { UploadedAsset, UploadProgress, UseFileUploadReturn } from './composer/useFileUpload';
 export { FileUploadButton } from './composer/FileUploadButton';

package/dist/index.js

@@ -94,8 +94,9 @@ import { useComposerReady, useFocusComposer } from "./composer/composer-handoff.
 import { useReadComposerDraft } from "./composer/useReadComposerDraft.js";
 import { useSendMessage } from "./composer/useSendMessage.js";
 import { useComposerAttachment } from "./composer/useComposerAttachment.js";
-import { ChatAgentPicker, ChatModelPicker } from "./catalog/chat-pickers.js";
-import { MODEL_PROVIDER_LABELS, credentialFingerprint, groupModelsByProvider, normalizeAgentCatalog, normalizeModelCatalog, resolveCatalogModelId, useAthenaAgentCatalog, useAthenaModelCatalog } from "./catalog/runtime-catalog.js";
+import { ChatAgentPicker, ChatModePicker, ChatModelPicker } from "./catalog/chat-pickers.js";
+import { useAthenaChatMode } from "./catalog/use-athena-chat-mode.js";
+import { MODEL_PROVIDER_LABELS, credentialFingerprint, groupModelsByProvider, normalizeAgentCatalog, normalizeModelCatalog, resolveCatalogModelId, useAthenaAgentCatalog, useAthenaAgentModelOptions, useAthenaModelCatalog } from "./catalog/runtime-catalog.js";
 import { useFileUpload } from "./composer/useFileUpload.js";
 import { FileUploadButton } from "./composer/FileUploadButton.js";
 import { ComposerDropZone } from "./composer/ComposerDropZone.js";
@@ -147,6 +148,7 @@ export {
   COLLAB_AGENT_REF_PREFIX,
   COLLAB_AGENT_REF_SHAPE,
   ChatAgentPicker,
+  ChatModePicker,
   ChatModelPicker,
   Collapsible,
   CollapsibleContent,
@@ -440,6 +442,8 @@ export {
   useAssetEmbed,
   useAssetPanelStore,
   useAthenaAgentCatalog,
+  useAthenaAgentModelOptions,
+  useAthenaChatMode,
   useAthenaCitationLinkHandler,
   useAthenaComputerSshAccess,
   useAthenaComputerStatus,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/lib/use-athena-rest-query.cjs

@@ -18,6 +18,9 @@ function fnv1a(text) {
   }
   return (hash >>> 0).toString(16).padStart(8, "0");
 }
+function keyPartFingerprint(text) {
+  return fnv1a(text);
+}
 function credentialFingerprint(auth) {
   return fnv1a(
     [auth.apiKey ?? "", auth.token ?? "", auth.getToken === void 0 ? "0" : "1"].join("\0")
@@ -29,6 +32,7 @@ function useAthenaQueryIdentity(auth) {
   return [principal, credentialFingerprint(auth)];
 }
 exports.credentialFingerprint = credentialFingerprint;
+exports.keyPartFingerprint = keyPartFingerprint;
 exports.useAthenaQueryClient = useAthenaQueryClient;
 exports.useAthenaQueryIdentity = useAthenaQueryIdentity;
 //# sourceMappingURL=use-athena-rest-query.cjs.map

package/dist/lib/use-athena-rest-query.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-athena-rest-query.cjs","sources":["../../src/lib/use-athena-rest-query.ts"],"sourcesContent":["/**\n * The two pieces every SDK hook that reads an Agora REST route through\n * TanStack Query needs: a `QueryClient` under any `<AthenaProvider>`, and a\n * query-key component naming who the read is made as — without ever putting\n * the credential itself in a key.\n */\nimport { QueryClient, QueryClientContext } from '@tanstack/react-query';\nimport { useContext, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/**\n * The host's `QueryClient` when one is in context (`enableThreadList` mounts\n * the SDK's own), else a client scoped to the calling hook's component.\n */\nexport function useAthenaQueryClient(): QueryClient {\n  const contextClient = useContext(QueryClientContext);\n  const fallbackRef = useRef<QueryClient | null>(null);\n  if (contextClient) return contextClient;\n  fallbackRef.current ??= new QueryClient();\n  return fallbackRef.current;\n}\n\n/** 32-bit FNV-1a of `text`, as hex. */\nfunction fnv1a(text: string): string {\n  let hash = 0x811c9dc5;\n  for (let index = 0; index < text.length; index += 1) {\n    hash ^= text.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/**\n * A short, one-way fingerprint of the credential a request presents (the API\n * key, the token the host holds, whether a live `getToken` resolves it). It is\n * the same for every hook and every mount that reads with the same\n * credential, and different once the credential changes, so a cache entry\n * written with one credential is never read with another — while the key\n * itself carries 32 bits of hash, never the secret.\n */\nexport function credentialFingerprint(auth: StatewireAuthSource): string {\n  return fnv1a(\n    [auth.apiKey ?? '', auth.token ?? '', auth.getToken === undefined ? '0' : '1'].join('\\u0000'),\n  );\n}\n\n/**\n * Who a query reads as, for its key: the signed-in principal (`''` when the\n * provider knows none) and the credential fingerprint. The principal covers\n * an identity switch the credential cannot show — a stable `getToken`, or a\n * same-origin cookie; the fingerprint covers a swapped API key or token. Both\n * are stable across mounts, so a pane mounted after a switch never reads the\n * previous account's cached answer.\n */\nexport function useAthenaQueryIdentity(auth: StatewireAuthSource): readonly [string, string] {\n  const principal = useContext(AthenaAuthContext)?.user?.userId ?? '';\n  return [principal, credentialFingerprint(auth)];\n}\n"],"names":["useContext","QueryClientContext","useRef","QueryClient","AthenaAuthContext"],"mappings":";;;;;AAeO,SAAS,uBAAoC;AAClD,QAAM,gBAAgBA,MAAAA,WAAWC,6BAAkB;AACnD,QAAM,cAAcC,MAAAA,OAA2B,IAAI;AACnD,MAAI,cAAe,QAAO;AAC1B,cAAY,YAAZ,YAAY,UAAY,IAAIC,uBAAA;AAC5B,SAAO,YAAY;AACrB;AAGA,SAAS,MAAM,MAAsB;AACnC,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,YAAQ,KAAK,WAAW,KAAK;AAC7B,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAUO,SAAS,sBAAsB,MAAmC;AACvE,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,aAAa,SAAY,MAAM,GAAG,EAAE,KAAK,IAAQ;AAAA,EAAA;AAEhG;AAUO,SAAS,uBAAuB,MAAsD;;AAC3F,QAAM,cAAYH,iBAAAA,WAAWI,kBAAAA,iBAAiB,MAA5BJ,mBAA+B,SAA/BA,mBAAqC,WAAU;AACjE,SAAO,CAAC,WAAW,sBAAsB,IAAI,CAAC;AAChD;;;;"}
+{"version":3,"file":"use-athena-rest-query.cjs","sources":["../../src/lib/use-athena-rest-query.ts"],"sourcesContent":["/**\n * The two pieces every SDK hook that reads an Agora REST route through\n * TanStack Query needs: a `QueryClient` under any `<AthenaProvider>`, and a\n * query-key component naming who the read is made as — without ever putting\n * the credential itself in a key.\n */\nimport { QueryClient, QueryClientContext } from '@tanstack/react-query';\nimport { useContext, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/**\n * The host's `QueryClient` when one is in context (`enableThreadList` mounts\n * the SDK's own), else a client scoped to the calling hook's component.\n */\nexport function useAthenaQueryClient(): QueryClient {\n  const contextClient = useContext(QueryClientContext);\n  const fallbackRef = useRef<QueryClient | null>(null);\n  if (contextClient) return contextClient;\n  fallbackRef.current ??= new QueryClient();\n  return fallbackRef.current;\n}\n\n/** 32-bit FNV-1a of `text`, as hex. */\nfunction fnv1a(text: string): string {\n  let hash = 0x811c9dc5;\n  for (let index = 0; index < text.length; index += 1) {\n    hash ^= text.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/**\n * A one-way fingerprint of a query-key part that can carry a credential (an\n * opaque token or an API key inside an identity string), so the key names\n * whose it is without holding the secret.\n */\nexport function keyPartFingerprint(text: string): string {\n  return fnv1a(text);\n}\n\n/**\n * A short, one-way fingerprint of the credential a request presents (the API\n * key, the token the host holds, whether a live `getToken` resolves it). It is\n * the same for every hook and every mount that reads with the same\n * credential, and different once the credential changes, so a cache entry\n * written with one credential is never read with another — while the key\n * itself carries 32 bits of hash, never the secret.\n */\nexport function credentialFingerprint(auth: StatewireAuthSource): string {\n  return fnv1a(\n    [auth.apiKey ?? '', auth.token ?? '', auth.getToken === undefined ? '0' : '1'].join('\\u0000'),\n  );\n}\n\n/**\n * Who a query reads as, for its key: the signed-in principal (`''` when the\n * provider knows none) and the credential fingerprint. The principal covers\n * an identity switch the credential cannot show — a stable `getToken`, or a\n * same-origin cookie; the fingerprint covers a swapped API key or token. Both\n * are stable across mounts, so a pane mounted after a switch never reads the\n * previous account's cached answer.\n */\nexport function useAthenaQueryIdentity(auth: StatewireAuthSource): readonly [string, string] {\n  const principal = useContext(AthenaAuthContext)?.user?.userId ?? '';\n  return [principal, credentialFingerprint(auth)];\n}\n"],"names":["useContext","QueryClientContext","useRef","QueryClient","AthenaAuthContext"],"mappings":";;;;;AAeO,SAAS,uBAAoC;AAClD,QAAM,gBAAgBA,MAAAA,WAAWC,6BAAkB;AACnD,QAAM,cAAcC,MAAAA,OAA2B,IAAI;AACnD,MAAI,cAAe,QAAO;AAC1B,cAAY,YAAZ,YAAY,UAAY,IAAIC,uBAAA;AAC5B,SAAO,YAAY;AACrB;AAGA,SAAS,MAAM,MAAsB;AACnC,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,YAAQ,KAAK,WAAW,KAAK;AAC7B,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAOO,SAAS,mBAAmB,MAAsB;AACvD,SAAO,MAAM,IAAI;AACnB;AAUO,SAAS,sBAAsB,MAAmC;AACvE,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,aAAa,SAAY,MAAM,GAAG,EAAE,KAAK,IAAQ;AAAA,EAAA;AAEhG;AAUO,SAAS,uBAAuB,MAAsD;;AAC3F,QAAM,cAAYH,iBAAAA,WAAWI,kBAAAA,iBAAiB,MAA5BJ,mBAA+B,SAA/BA,mBAAqC,WAAU;AACjE,SAAO,CAAC,WAAW,sBAAsB,IAAI,CAAC;AAChD;;;;;"}

package/dist/lib/use-athena-rest-query.d.ts

@@ -11,6 +11,12 @@ import type { StatewireAuthSource } from '../runtime/statewire-auth-headers';
  * the SDK's own), else a client scoped to the calling hook's component.
  */
 export declare function useAthenaQueryClient(): QueryClient;
+/**
+ * A one-way fingerprint of a query-key part that can carry a credential (an
+ * opaque token or an API key inside an identity string), so the key names
+ * whose it is without holding the secret.
+ */
+export declare function keyPartFingerprint(text: string): string;
 /**
  * A short, one-way fingerprint of the credential a request presents (the API
  * key, the token the host holds, whether a live `getToken` resolves it). It is

package/dist/lib/use-athena-rest-query.js

@@ -16,6 +16,9 @@ function fnv1a(text) {
   }
   return (hash >>> 0).toString(16).padStart(8, "0");
 }
+function keyPartFingerprint(text) {
+  return fnv1a(text);
+}
 function credentialFingerprint(auth) {
   return fnv1a(
     [auth.apiKey ?? "", auth.token ?? "", auth.getToken === void 0 ? "0" : "1"].join("\0")
@@ -28,6 +31,7 @@ function useAthenaQueryIdentity(auth) {
 }
 export {
   credentialFingerprint,
+  keyPartFingerprint,
   useAthenaQueryClient,
   useAthenaQueryIdentity
 };

package/dist/lib/use-athena-rest-query.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-athena-rest-query.js","sources":["../../src/lib/use-athena-rest-query.ts"],"sourcesContent":["/**\n * The two pieces every SDK hook that reads an Agora REST route through\n * TanStack Query needs: a `QueryClient` under any `<AthenaProvider>`, and a\n * query-key component naming who the read is made as — without ever putting\n * the credential itself in a key.\n */\nimport { QueryClient, QueryClientContext } from '@tanstack/react-query';\nimport { useContext, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/**\n * The host's `QueryClient` when one is in context (`enableThreadList` mounts\n * the SDK's own), else a client scoped to the calling hook's component.\n */\nexport function useAthenaQueryClient(): QueryClient {\n  const contextClient = useContext(QueryClientContext);\n  const fallbackRef = useRef<QueryClient | null>(null);\n  if (contextClient) return contextClient;\n  fallbackRef.current ??= new QueryClient();\n  return fallbackRef.current;\n}\n\n/** 32-bit FNV-1a of `text`, as hex. */\nfunction fnv1a(text: string): string {\n  let hash = 0x811c9dc5;\n  for (let index = 0; index < text.length; index += 1) {\n    hash ^= text.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/**\n * A short, one-way fingerprint of the credential a request presents (the API\n * key, the token the host holds, whether a live `getToken` resolves it). It is\n * the same for every hook and every mount that reads with the same\n * credential, and different once the credential changes, so a cache entry\n * written with one credential is never read with another — while the key\n * itself carries 32 bits of hash, never the secret.\n */\nexport function credentialFingerprint(auth: StatewireAuthSource): string {\n  return fnv1a(\n    [auth.apiKey ?? '', auth.token ?? '', auth.getToken === undefined ? '0' : '1'].join('\\u0000'),\n  );\n}\n\n/**\n * Who a query reads as, for its key: the signed-in principal (`''` when the\n * provider knows none) and the credential fingerprint. The principal covers\n * an identity switch the credential cannot show — a stable `getToken`, or a\n * same-origin cookie; the fingerprint covers a swapped API key or token. Both\n * are stable across mounts, so a pane mounted after a switch never reads the\n * previous account's cached answer.\n */\nexport function useAthenaQueryIdentity(auth: StatewireAuthSource): readonly [string, string] {\n  const principal = useContext(AthenaAuthContext)?.user?.userId ?? '';\n  return [principal, credentialFingerprint(auth)];\n}\n"],"names":[],"mappings":";;;AAeO,SAAS,uBAAoC;AAClD,QAAM,gBAAgB,WAAW,kBAAkB;AACnD,QAAM,cAAc,OAA2B,IAAI;AACnD,MAAI,cAAe,QAAO;AAC1B,cAAY,YAAZ,YAAY,UAAY,IAAI,YAAA;AAC5B,SAAO,YAAY;AACrB;AAGA,SAAS,MAAM,MAAsB;AACnC,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,YAAQ,KAAK,WAAW,KAAK;AAC7B,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAUO,SAAS,sBAAsB,MAAmC;AACvE,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,aAAa,SAAY,MAAM,GAAG,EAAE,KAAK,IAAQ;AAAA,EAAA;AAEhG;AAUO,SAAS,uBAAuB,MAAsD;;AAC3F,QAAM,cAAY,sBAAW,iBAAiB,MAA5B,mBAA+B,SAA/B,mBAAqC,WAAU;AACjE,SAAO,CAAC,WAAW,sBAAsB,IAAI,CAAC;AAChD;"}
+{"version":3,"file":"use-athena-rest-query.js","sources":["../../src/lib/use-athena-rest-query.ts"],"sourcesContent":["/**\n * The two pieces every SDK hook that reads an Agora REST route through\n * TanStack Query needs: a `QueryClient` under any `<AthenaProvider>`, and a\n * query-key component naming who the read is made as — without ever putting\n * the credential itself in a key.\n */\nimport { QueryClient, QueryClientContext } from '@tanstack/react-query';\nimport { useContext, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/**\n * The host's `QueryClient` when one is in context (`enableThreadList` mounts\n * the SDK's own), else a client scoped to the calling hook's component.\n */\nexport function useAthenaQueryClient(): QueryClient {\n  const contextClient = useContext(QueryClientContext);\n  const fallbackRef = useRef<QueryClient | null>(null);\n  if (contextClient) return contextClient;\n  fallbackRef.current ??= new QueryClient();\n  return fallbackRef.current;\n}\n\n/** 32-bit FNV-1a of `text`, as hex. */\nfunction fnv1a(text: string): string {\n  let hash = 0x811c9dc5;\n  for (let index = 0; index < text.length; index += 1) {\n    hash ^= text.charCodeAt(index);\n    hash = Math.imul(hash, 0x01000193);\n  }\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/**\n * A one-way fingerprint of a query-key part that can carry a credential (an\n * opaque token or an API key inside an identity string), so the key names\n * whose it is without holding the secret.\n */\nexport function keyPartFingerprint(text: string): string {\n  return fnv1a(text);\n}\n\n/**\n * A short, one-way fingerprint of the credential a request presents (the API\n * key, the token the host holds, whether a live `getToken` resolves it). It is\n * the same for every hook and every mount that reads with the same\n * credential, and different once the credential changes, so a cache entry\n * written with one credential is never read with another — while the key\n * itself carries 32 bits of hash, never the secret.\n */\nexport function credentialFingerprint(auth: StatewireAuthSource): string {\n  return fnv1a(\n    [auth.apiKey ?? '', auth.token ?? '', auth.getToken === undefined ? '0' : '1'].join('\\u0000'),\n  );\n}\n\n/**\n * Who a query reads as, for its key: the signed-in principal (`''` when the\n * provider knows none) and the credential fingerprint. The principal covers\n * an identity switch the credential cannot show — a stable `getToken`, or a\n * same-origin cookie; the fingerprint covers a swapped API key or token. Both\n * are stable across mounts, so a pane mounted after a switch never reads the\n * previous account's cached answer.\n */\nexport function useAthenaQueryIdentity(auth: StatewireAuthSource): readonly [string, string] {\n  const principal = useContext(AthenaAuthContext)?.user?.userId ?? '';\n  return [principal, credentialFingerprint(auth)];\n}\n"],"names":[],"mappings":";;;AAeO,SAAS,uBAAoC;AAClD,QAAM,gBAAgB,WAAW,kBAAkB;AACnD,QAAM,cAAc,OAA2B,IAAI;AACnD,MAAI,cAAe,QAAO;AAC1B,cAAY,YAAZ,YAAY,UAAY,IAAI,YAAA;AAC5B,SAAO,YAAY;AACrB;AAGA,SAAS,MAAM,MAAsB;AACnC,MAAI,OAAO;AACX,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,YAAQ,KAAK,WAAW,KAAK;AAC7B,WAAO,KAAK,KAAK,MAAM,QAAU;AAAA,EACnC;AACA,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAOO,SAAS,mBAAmB,MAAsB;AACvD,SAAO,MAAM,IAAI;AACnB;AAUO,SAAS,sBAAsB,MAAmC;AACvE,SAAO;AAAA,IACL,CAAC,KAAK,UAAU,IAAI,KAAK,SAAS,IAAI,KAAK,aAAa,SAAY,MAAM,GAAG,EAAE,KAAK,IAAQ;AAAA,EAAA;AAEhG;AAUO,SAAS,uBAAuB,MAAsD;;AAC3F,QAAM,cAAY,sBAAW,iBAAiB,MAA5B,mBAA+B,SAA/B,mBAAqC,WAAU;AACjE,SAAO,CAAC,WAAW,sBAAsB,IAAI,CAAC;AAChD;"}