@athenaintel/react 0.36.1 → 0.38.0

package/dist/auth/AthenaSSOProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AthenaSSOProvider.js","sources":["../../src/auth/AthenaSSOProvider.tsx"],"sourcesContent":["import type { ReactNode } from 'react';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\nimport { AthenaAuthContext } from './AthenaAuthContext';\nimport type {\n  AthenaAuthState,\n  AthenaOrg,\n  AthenaSSOUserInfo,\n  AthenaUser,\n} from './types';\n\n// ─── Props ────────────────────────────────────────────────────────────\n\nexport interface AthenaSSOProviderProps {\n  children: ReactNode;\n\n  /**\n   * Base URL used to resolve the Athena SSO endpoints.\n   *\n   * When omitted, the provider defaults to same-origin relative paths:\n   * `/api/sso/userinfo`, `/api/sso/initiate`, and `/api/sso/logout`.\n   *\n   * Use this when your frontend and backend live on different origins\n   * (for example `https://app.example.com` + `https://api.example.com`).\n   */\n  ssoBaseUrl?: string;\n\n  /**\n   * Optional override for the SSO user-info endpoint that returns the\n   * authenticated user's data and access token.\n   *\n   * The endpoint must return JSON matching `AthenaSSOUserInfo`:\n   * ```json\n   * {\n   *   \"user\": { \"user_id\": \"…\", \"email\": \"…\", … },\n   *   \"orgMemberInfos\": [{ \"orgId\": \"…\", \"orgName\": \"…\", \"urlSafeOrgName\": \"…\" }],\n   *   \"accessToken\": \"…\"\n   * }\n   * ```\n   *\n   * The request is sent with `credentials: 'include'` so that\n   * session cookies are forwarded automatically.\n   */\n  ssoUserInfoUrl?: string;\n\n  /**\n   * Optional override for the URL to redirect the user to when no valid\n   * SSO session exists.\n   * This is typically the SSO initiation endpoint on your backend\n   * (e.g. `https://api.yourdomain.com/api/sso/initiate`).\n   */\n  ssoLoginUrl?: string;\n\n  /**\n   * Optional override for the backend SSO logout endpoint.\n   * Defaults to `/api/sso/logout` (or `${ssoBaseUrl}/api/sso/logout`).\n   */\n  ssoLogoutUrl?: string;\n\n  /**\n   * Custom element displayed while the SSO session is being verified.\n   * Defaults to `null` (renders nothing).\n   */\n  displayWhileLoading?: ReactNode;\n\n  /**\n   * Custom element displayed when SSO authentication fails.\n   * If not provided, the user is automatically redirected to `ssoLoginUrl`.\n   */\n  displayOnError?: ReactNode;\n\n  /**\n   * Re-validate the SSO session when the window regains focus.\n   * Disabled by default. When enabled, token expiry and user switching\n   * are picked up without requiring a full page reload.\n   */\n  revalidateOnWindowFocus?: boolean;\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────\n\ntype AthenaSSOError = 'unauthenticated' | 'invalid_response' | 'request_failed';\n\nconst DEFAULT_SSO_PATHS = {\n  userInfo: '/api/sso/userinfo',\n  login: '/api/sso/initiate',\n  logout: '/api/sso/logout',\n} as const;\n\nconst trimTrailingSlash = (value: string): string => value.replace(/\\/+$/, '');\n\nfunction resolveSSOUrl({\n  baseUrl,\n  overrideUrl,\n  defaultPath,\n}: {\n  baseUrl?: string;\n  overrideUrl?: string;\n  defaultPath: string;\n}): string {\n  if (overrideUrl) {\n    return overrideUrl;\n  }\n\n  if (!baseUrl) {\n    return defaultPath;\n  }\n\n  return `${trimTrailingSlash(baseUrl)}${defaultPath}`;\n}\n\nfunction isValidSSOUserInfo(data: unknown): data is AthenaSSOUserInfo {\n  if (!data || typeof data !== 'object') {\n    return false;\n  }\n\n  const candidate = data as {\n    accessToken?: unknown;\n    orgMemberInfos?: unknown;\n    user?: {\n      user_id?: unknown;\n      email?: unknown;\n    };\n  };\n\n  return (\n    typeof candidate.accessToken === 'string' &&\n    Array.isArray(candidate.orgMemberInfos) &&\n    !!candidate.user &&\n    typeof candidate.user.user_id === 'string' &&\n    typeof candidate.user.email === 'string'\n  );\n}\n\n/** Map the backend SSO response to the SDK's user/org types. */\nfunction mapSSOResponse(data: AthenaSSOUserInfo): {\n  user: AthenaUser;\n  orgs: AthenaOrg[];\n  accessToken: string;\n} {\n  const user: AthenaUser = {\n    userId: data.user.user_id,\n    email: data.user.email,\n    firstName: data.user.first_name || undefined,\n    lastName: data.user.last_name || undefined,\n    username: data.user.username || undefined,\n    pictureUrl: data.user.picture_url || undefined,\n    properties: data.user.properties,\n  };\n\n  const orgs: AthenaOrg[] = data.orgMemberInfos.map((org) => ({\n    orgId: org.orgId,\n    orgName: org.orgName,\n    urlSafeOrgName: org.urlSafeOrgName,\n  }));\n\n  return { user, orgs, accessToken: data.accessToken };\n}\n\n// ─── Provider ─────────────────────────────────────────────────────────\n\n/**\n * Wraps your app with Athena authentication powered by an external SSO\n * identity provider (e.g. Microsoft Entra / Azure AD, Okta, etc.).\n *\n * The SSO login flow is handled entirely by your backend. This provider\n * verifies the session by fetching `ssoUserInfoUrl` and exposes the\n * same `AthenaAuthState` context that `AthenaAuthProvider` (PropelAuth)\n * provides, so downstream components like `<AthenaProvider>` and\n * `useAthenaAuth()` work identically.\n *\n * Place this **above** `<AthenaProvider>` in the component tree.\n *\n * @example\n * ```tsx\n * import { AthenaSSOProvider } from '@athenaintel/react/auth';\n * import { AthenaProvider, AthenaChat } from '@athenaintel/react';\n *\n * function App() {\n *   return (\n *     <AthenaSSOProvider\n *       ssoUserInfoUrl=\"https://api.yourdomain.com/api/sso/userinfo\"\n *       ssoLoginUrl=\"https://api.yourdomain.com/api/sso/initiate\"\n *     >\n *       <AthenaProvider>\n *         <AthenaChat />\n *       </AthenaProvider>\n *     </AthenaSSOProvider>\n *   );\n * }\n * ```\n */\nexport function AthenaSSOProvider({\n  children,\n  ssoBaseUrl,\n  ssoUserInfoUrl,\n  ssoLoginUrl,\n  ssoLogoutUrl,\n  displayWhileLoading,\n  displayOnError,\n  revalidateOnWindowFocus = false,\n}: AthenaSSOProviderProps) {\n  const [ssoData, setSSOData] = useState<AthenaSSOUserInfo | null>(null);\n  const [loading, setLoading] = useState(true);\n  const [error, setError] = useState<AthenaSSOError | null>(null);\n  const activeRequestRef = useRef<AbortController | null>(null);\n  const activeReadRef = useRef<Promise<AthenaSSOUserInfo | null> | null>(null);\n\n  const ssoUrls = useMemo(\n    () => ({\n      userInfo: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoUserInfoUrl,\n        defaultPath: DEFAULT_SSO_PATHS.userInfo,\n      }),\n      login: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoLoginUrl,\n        defaultPath: DEFAULT_SSO_PATHS.login,\n      }),\n      logout: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoLogoutUrl,\n        defaultPath: DEFAULT_SSO_PATHS.logout,\n      }),\n    }),\n    [ssoBaseUrl, ssoUserInfoUrl, ssoLoginUrl, ssoLogoutUrl],\n  );\n\n  // Resolves the session it read, or `null` when it read none (refused,\n  // failed, or cancelled by logout or unmount), so a token renewal can hand the\n  // new token back. A read superseded by a newer one (a focus revalidation\n  // that starts during a renewal) resolves with the newer read's session, so\n  // background revalidation never cancels the renewal a connection waits on.\n  const refreshSession = useCallback(\n    ({ showLoading = false }: { showLoading?: boolean } = {}): Promise<AthenaSSOUserInfo | null> => {\n      activeRequestRef.current?.abort();\n      const abortController = new AbortController();\n      activeRequestRef.current = abortController;\n\n      const read = (async (): Promise<AthenaSSOUserInfo | null> => {\n        if (showLoading) {\n          setLoading(true);\n          setError(null);\n          setSSOData(null);\n        }\n\n        try {\n          const response = await fetch(ssoUrls.userInfo, {\n            credentials: 'include',\n            signal: abortController.signal,\n          });\n\n          if (!response.ok) {\n            if (response.status === 401 || response.status === 403) {\n              setSSOData(null);\n              setError('unauthenticated');\n            } else {\n              setError('request_failed');\n            }\n            return null;\n          }\n\n          const data: unknown = await response.json();\n\n          if (!isValidSSOUserInfo(data)) {\n            console.error(\n              '[AthenaSDK] Invalid SSO userinfo response: expected \"user.user_id\", \"user.email\", \"orgMemberInfos\", and \"accessToken\"',\n            );\n            setSSOData(null);\n            setError('invalid_response');\n            return null;\n          }\n\n          setSSOData((prev) => {\n            if (\n              prev &&\n              prev.accessToken === data.accessToken &&\n              prev.user.user_id === data.user.user_id\n            ) {\n              return prev;\n            }\n            return data;\n          });\n          setError(null);\n          return data;\n        } catch (fetchError) {\n          if (fetchError instanceof DOMException && fetchError.name === 'AbortError') {\n            // Superseded by a newer read: its session is this read's answer.\n            // Cancelled by logout or unmount (nothing newer started): none.\n            return activeRequestRef.current !== abortController ? activeReadRef.current : null;\n          }\n\n          setError('request_failed');\n          return null;\n        } finally {\n          if (activeRequestRef.current === abortController) {\n            activeRequestRef.current = null;\n            setLoading(false);\n          }\n        }\n      })();\n      activeReadRef.current = read;\n      return read;\n    },\n    [ssoUrls.userInfo],\n  );\n\n  useEffect(() => {\n    void refreshSession({ showLoading: true });\n\n    return () => {\n      activeRequestRef.current?.abort();\n    };\n  }, [refreshSession]);\n\n  useEffect(() => {\n    if (!revalidateOnWindowFocus || typeof window === 'undefined') {\n      return;\n    }\n\n    const handleFocus = () => {\n      void refreshSession();\n    };\n    const handleVisibilityChange = () => {\n      if (document.visibilityState === 'visible') {\n        void refreshSession();\n      }\n    };\n\n    window.addEventListener('focus', handleFocus);\n    document.addEventListener('visibilitychange', handleVisibilityChange);\n\n    return () => {\n      window.removeEventListener('focus', handleFocus);\n      document.removeEventListener('visibilitychange', handleVisibilityChange);\n    };\n  }, [revalidateOnWindowFocus, refreshSession]);\n\n  // Redirect to SSO login when session is invalid and no error UI provided.\n  useEffect(() => {\n    if (\n      !loading &&\n      error === 'unauthenticated' &&\n      !displayOnError &&\n      typeof window !== 'undefined'\n    ) {\n      window.location.assign(ssoUrls.login);\n    }\n  }, [loading, error, displayOnError, ssoUrls.login]);\n\n  const logout = useCallback(async (redirectOnLogout = true) => {\n    activeRequestRef.current?.abort();\n\n    try {\n      await fetch(ssoUrls.logout, {\n        method: 'POST',\n        credentials: 'include',\n      });\n    } catch (logoutError) {\n      console.error('[AthenaSDK] Failed to invalidate SSO session during logout', logoutError);\n    }\n\n    setSSOData(null);\n    setError(null);\n    setLoading(false);\n\n    if (redirectOnLogout && typeof window !== 'undefined') {\n      window.location.assign(ssoUrls.login);\n    }\n  }, [ssoUrls.login, ssoUrls.logout]);\n\n  // The SSO side of the SDK's credential source: `force` (the previous token\n  // was refused) re-reads the session for a new token; otherwise the held\n  // one is served.\n  const ssoDataRef = useRef(ssoData);\n  ssoDataRef.current = ssoData;\n  const getToken = useCallback<AthenaStatewireTokenGetter>(\n    async ({ force = false } = {}) => {\n      if (force) {\n        const renewed = await refreshSession();\n        if (renewed) return renewed.accessToken;\n      }\n      return ssoDataRef.current?.accessToken ?? null;\n    },\n    [refreshSession],\n  );\n\n  const authState: AthenaAuthState = useMemo(() => {\n    if (loading) {\n      return {\n        isLoggedIn: false,\n        isLoading: true,\n        user: null,\n        accessToken: null,\n        orgs: [],\n        logout: async () => {},\n        getToken,\n      };\n    }\n\n    if (error === 'request_failed' && ssoData) {\n      const { user, orgs, accessToken } = mapSSOResponse(ssoData);\n\n      return {\n        isLoggedIn: true,\n        isLoading: false,\n        user,\n        accessToken,\n        orgs,\n        logout,\n        getToken,\n      };\n    }\n\n    if (error || !ssoData) {\n      return {\n        isLoggedIn: false,\n        isLoading: false,\n        user: null,\n        accessToken: null,\n        orgs: [],\n        logout,\n        getToken,\n      };\n    }\n\n    const { user, orgs, accessToken } = mapSSOResponse(ssoData);\n\n    return {\n      isLoggedIn: true,\n      isLoading: false,\n      user,\n      accessToken,\n      orgs,\n      logout,\n      getToken,\n    };\n  }, [loading, error, ssoData, logout, getToken]);\n\n  if (authState.isLoading) {\n    return <>{displayWhileLoading ?? null}</>;\n  }\n\n  if (!authState.isLoggedIn) {\n    return displayOnError ? <>{displayOnError}</> : null;\n  }\n\n  return (\n    <AthenaAuthContext.Provider value={authState}>\n      {children}\n    </AthenaAuthContext.Provider>\n  );\n}\n"],"names":["user","orgs","accessToken"],"mappings":";;;AAmFA,MAAM,oBAAoB;AAAA,EACxB,UAAU;AAAA,EACV,OAAO;AAAA,EACP,QAAQ;AACV;AAEA,MAAM,oBAAoB,CAAC,UAA0B,MAAM,QAAQ,QAAQ,EAAE;AAE7E,SAAS,cAAc;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AACF,GAIW;AACT,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AAEA,SAAO,GAAG,kBAAkB,OAAO,CAAC,GAAG,WAAW;AACpD;AAEA,SAAS,mBAAmB,MAA0C;AACpE,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AAEA,QAAM,YAAY;AASlB,SACE,OAAO,UAAU,gBAAgB,YACjC,MAAM,QAAQ,UAAU,cAAc,KACtC,CAAC,CAAC,UAAU,QACZ,OAAO,UAAU,KAAK,YAAY,YAClC,OAAO,UAAU,KAAK,UAAU;AAEpC;AAGA,SAAS,eAAe,MAItB;AACA,QAAM,OAAmB;AAAA,IACvB,QAAQ,KAAK,KAAK;AAAA,IAClB,OAAO,KAAK,KAAK;AAAA,IACjB,WAAW,KAAK,KAAK,cAAc;AAAA,IACnC,UAAU,KAAK,KAAK,aAAa;AAAA,IACjC,UAAU,KAAK,KAAK,YAAY;AAAA,IAChC,YAAY,KAAK,KAAK,eAAe;AAAA,IACrC,YAAY,KAAK,KAAK;AAAA,EAAA;AAGxB,QAAM,OAAoB,KAAK,eAAe,IAAI,CAAC,SAAS;AAAA,IAC1D,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,gBAAgB,IAAI;AAAA,EAAA,EACpB;AAEF,SAAO,EAAE,MAAM,MAAM,aAAa,KAAK,YAAA;AACzC;AAmCO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,0BAA0B;AAC5B,GAA2B;AACzB,QAAM,CAAC,SAAS,UAAU,IAAI,SAAmC,IAAI;AACrE,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,IAAI;AAC3C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAgC,IAAI;AAC9D,QAAM,mBAAmB,OAA+B,IAAI;AAC5D,QAAM,gBAAgB,OAAiD,IAAI;AAE3E,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,MACL,UAAU,cAAc;AAAA,QACtB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,MACD,OAAO,cAAc;AAAA,QACnB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,MACD,QAAQ,cAAc;AAAA,QACpB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,IAAA;AAAA,IAEH,CAAC,YAAY,gBAAgB,aAAa,YAAY;AAAA,EAAA;AAQxD,QAAM,iBAAiB;AAAA,IACrB,CAAC,EAAE,cAAc,MAAA,IAAqC,OAA0C;;AAC9F,6BAAiB,YAAjB,mBAA0B;AAC1B,YAAM,kBAAkB,IAAI,gBAAA;AAC5B,uBAAiB,UAAU;AAE3B,YAAM,QAAQ,YAA+C;AAC3D,YAAI,aAAa;AACf,qBAAW,IAAI;AACf,mBAAS,IAAI;AACb,qBAAW,IAAI;AAAA,QACjB;AAEA,YAAI;AACF,gBAAM,WAAW,MAAM,MAAM,QAAQ,UAAU;AAAA,YAC7C,aAAa;AAAA,YACb,QAAQ,gBAAgB;AAAA,UAAA,CACzB;AAED,cAAI,CAAC,SAAS,IAAI;AAChB,gBAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,yBAAW,IAAI;AACf,uBAAS,iBAAiB;AAAA,YAC5B,OAAO;AACL,uBAAS,gBAAgB;AAAA,YAC3B;AACA,mBAAO;AAAA,UACT;AAEA,gBAAM,OAAgB,MAAM,SAAS,KAAA;AAErC,cAAI,CAAC,mBAAmB,IAAI,GAAG;AAC7B,oBAAQ;AAAA,cACN;AAAA,YAAA;AAEF,uBAAW,IAAI;AACf,qBAAS,kBAAkB;AAC3B,mBAAO;AAAA,UACT;AAEA,qBAAW,CAAC,SAAS;AACnB,gBACE,QACA,KAAK,gBAAgB,KAAK,eAC1B,KAAK,KAAK,YAAY,KAAK,KAAK,SAChC;AACA,qBAAO;AAAA,YACT;AACA,mBAAO;AAAA,UACT,CAAC;AACD,mBAAS,IAAI;AACb,iBAAO;AAAA,QACT,SAAS,YAAY;AACnB,cAAI,sBAAsB,gBAAgB,WAAW,SAAS,cAAc;AAG1E,mBAAO,iBAAiB,YAAY,kBAAkB,cAAc,UAAU;AAAA,UAChF;AAEA,mBAAS,gBAAgB;AACzB,iBAAO;AAAA,QACT,UAAA;AACE,cAAI,iBAAiB,YAAY,iBAAiB;AAChD,6BAAiB,UAAU;AAC3B,uBAAW,KAAK;AAAA,UAClB;AAAA,QACF;AAAA,MACF,GAAA;AACA,oBAAc,UAAU;AACxB,aAAO;AAAA,IACT;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,EAAA;AAGnB,YAAU,MAAM;AACd,SAAK,eAAe,EAAE,aAAa,MAAM;AAEzC,WAAO,MAAM;;AACX,6BAAiB,YAAjB,mBAA0B;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,cAAc,CAAC;AAEnB,YAAU,MAAM;AACd,QAAI,CAAC,2BAA2B,OAAO,WAAW,aAAa;AAC7D;AAAA,IACF;AAEA,UAAM,cAAc,MAAM;AACxB,WAAK,eAAA;AAAA,IACP;AACA,UAAM,yBAAyB,MAAM;AACnC,UAAI,SAAS,oBAAoB,WAAW;AAC1C,aAAK,eAAA;AAAA,MACP;AAAA,IACF;AAEA,WAAO,iBAAiB,SAAS,WAAW;AAC5C,aAAS,iBAAiB,oBAAoB,sBAAsB;AAEpE,WAAO,MAAM;AACX,aAAO,oBAAoB,SAAS,WAAW;AAC/C,eAAS,oBAAoB,oBAAoB,sBAAsB;AAAA,IACzE;AAAA,EACF,GAAG,CAAC,yBAAyB,cAAc,CAAC;AAG5C,YAAU,MAAM;AACd,QACE,CAAC,WACD,UAAU,qBACV,CAAC,kBACD,OAAO,WAAW,aAClB;AACA,aAAO,SAAS,OAAO,QAAQ,KAAK;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,SAAS,OAAO,gBAAgB,QAAQ,KAAK,CAAC;AAElD,QAAM,SAAS,YAAY,OAAO,mBAAmB,SAAS;;AAC5D,2BAAiB,YAAjB,mBAA0B;AAE1B,QAAI;AACF,YAAM,MAAM,QAAQ,QAAQ;AAAA,QAC1B,QAAQ;AAAA,QACR,aAAa;AAAA,MAAA,CACd;AAAA,IACH,SAAS,aAAa;AACpB,cAAQ,MAAM,8DAA8D,WAAW;AAAA,IACzF;AAEA,eAAW,IAAI;AACf,aAAS,IAAI;AACb,eAAW,KAAK;AAEhB,QAAI,oBAAoB,OAAO,WAAW,aAAa;AACrD,aAAO,SAAS,OAAO,QAAQ,KAAK;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAKlC,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,WAAW;AAAA,IACf,OAAO,EAAE,QAAQ,MAAA,IAAU,OAAO;;AAChC,UAAI,OAAO;AACT,cAAM,UAAU,MAAM,eAAA;AACtB,YAAI,gBAAgB,QAAQ;AAAA,MAC9B;AACA,eAAO,gBAAW,YAAX,mBAAoB,gBAAe;AAAA,IAC5C;AAAA,IACA,CAAC,cAAc;AAAA,EAAA;AAGjB,QAAM,YAA6B,QAAQ,MAAM;AAC/C,QAAI,SAAS;AACX,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,MAAM;AAAA,QACN,aAAa;AAAA,QACb,MAAM,CAAA;AAAA,QACN,QAAQ,YAAY;AAAA,QAAC;AAAA,QACrB;AAAA,MAAA;AAAA,IAEJ;AAEA,QAAI,UAAU,oBAAoB,SAAS;AACzC,YAAM,EAAE,MAAAA,OAAM,MAAAC,OAAM,aAAAC,aAAAA,IAAgB,eAAe,OAAO;AAE1D,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,MAAAF;AAAAA,QACA,aAAAE;AAAAA,QACA,MAAAD;AAAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAEA,QAAI,SAAS,CAAC,SAAS;AACrB,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,MAAM;AAAA,QACN,aAAa;AAAA,QACb,MAAM,CAAA;AAAA,QACN;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAEA,UAAM,EAAE,MAAM,MAAM,YAAA,IAAgB,eAAe,OAAO;AAE1D,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ,GAAG,CAAC,SAAS,OAAO,SAAS,QAAQ,QAAQ,CAAC;AAE9C,MAAI,UAAU,WAAW;AACvB,WAAO,oBAAA,UAAA,EAAG,iCAAuB,KAAA,CAAK;AAAA,EACxC;AAEA,MAAI,CAAC,UAAU,YAAY;AACzB,WAAO,iBAAiB,oBAAA,UAAA,EAAG,UAAA,eAAA,CAAe,IAAM;AAAA,EAClD;AAEA,6BACG,kBAAkB,UAAlB,EAA2B,OAAO,WAChC,UACH;AAEJ;"}
+{"version":3,"file":"AthenaSSOProvider.js","sources":["../../src/auth/AthenaSSOProvider.tsx"],"sourcesContent":["import { QueryClient, useQuery } from '@tanstack/react-query';\nimport type { ReactNode } from 'react';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport { AthenaSdkError } from '../diagnostics/errors';\nimport {\n  DEFAULT_MINT_RETRY_POLICY,\n  getMintRetryDelay,\n  isRetryableMintStatus,\n  type MintRetryPolicy,\n} from '../runtime/auth';\nimport type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\nimport { AthenaAuthContext } from './AthenaAuthContext';\nimport type {\n  AthenaAuthState,\n  AthenaOrg,\n  AthenaSSOUserInfo,\n  AthenaUser,\n} from './types';\n\n// ─── Props ────────────────────────────────────────────────────────────\n\nexport interface AthenaSSOProviderProps {\n  children: ReactNode;\n\n  /**\n   * Base URL used to resolve the Athena SSO endpoints.\n   *\n   * When omitted, the provider defaults to same-origin relative paths:\n   * `/api/sso/userinfo`, `/api/sso/initiate`, and `/api/sso/logout`.\n   *\n   * Use this when your frontend and backend live on different origins\n   * (for example `https://app.example.com` + `https://api.example.com`).\n   */\n  ssoBaseUrl?: string;\n\n  /**\n   * Optional override for the SSO user-info endpoint that returns the\n   * authenticated user's data and access token.\n   *\n   * The endpoint must return JSON matching `AthenaSSOUserInfo`:\n   * ```json\n   * {\n   *   \"user\": { \"user_id\": \"…\", \"email\": \"…\", … },\n   *   \"orgMemberInfos\": [{ \"orgId\": \"…\", \"orgName\": \"…\", \"urlSafeOrgName\": \"…\" }],\n   *   \"accessToken\": \"…\"\n   * }\n   * ```\n   *\n   * The request is sent with `credentials: 'include'` so that\n   * session cookies are forwarded automatically.\n   */\n  ssoUserInfoUrl?: string;\n\n  /**\n   * Optional override for the URL to redirect the user to when no valid\n   * SSO session exists.\n   * This is typically the SSO initiation endpoint on your backend\n   * (e.g. `https://api.yourdomain.com/api/sso/initiate`).\n   */\n  ssoLoginUrl?: string;\n\n  /**\n   * Optional override for the backend SSO logout endpoint.\n   * Defaults to `/api/sso/logout` (or `${ssoBaseUrl}/api/sso/logout`).\n   */\n  ssoLogoutUrl?: string;\n\n  /**\n   * Custom element displayed while the SSO session is being verified.\n   * Defaults to `null` (renders nothing).\n   */\n  displayWhileLoading?: ReactNode;\n\n  /**\n   * Shown when there is no session to sign the app in with: an element, or a\n   * function that receives why (`reason`) and a `retry`, so the app can offer\n   * sign-in only to a person who is signed out and a retry when the endpoint\n   * could not answer (see `AthenaSSOFailure`).\n   * If not provided, the user is automatically redirected to `ssoLoginUrl`\n   * when the endpoint answers that there is no session.\n   */\n  displayOnError?: ReactNode | ((failure: AthenaSSOFailure) => ReactNode);\n\n  /**\n   * Called with the typed error (`auth_sso_failed`) when a session read gives\n   * up. A nested `AthenaProvider`'s `onError` is not mounted while the first\n   * read runs, so observe sign-in failures here.\n   */\n  onError?: (error: AthenaSdkError) => void;\n\n  /**\n   * Re-validate the SSO session when the window regains focus.\n   * Disabled by default. When enabled, token expiry and user switching\n   * are picked up without requiring a full page reload.\n   */\n  revalidateOnWindowFocus?: boolean;\n\n  /** @internal Overrides how a session read retries; used by tests. */\n  retryPolicy?: MintRetryPolicy;\n}\n\n/**\n * Why the provider has no session.\n *\n * - `unauthenticated`: the endpoint answered 401 or 403, or the person signed\n *   out. Offer sign-in.\n * - `request_failed`: the endpoint did not answer usably. A network error, a\n *   timeout, or a 5xx / 408 / 429 on every attempt of one read, or another\n *   status. The person may well be signed in. Offer `retry`.\n * - `invalid_response`: it answered without a usable session.\n */\nexport type AthenaSSOFailureReason = 'unauthenticated' | 'invalid_response' | 'request_failed';\n\n/** What `displayOnError` receives when it is a function. */\nexport interface AthenaSSOFailure {\n  reason: AthenaSSOFailureReason;\n  /** Read the session again. `displayWhileLoading` shows meanwhile. */\n  retry: () => void;\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────\n\n/**\n * How one session read retries: the parent bridge's mint policy (Marathon's\n * `/api/sso/userinfo` and `/_athena/auth` mint the same credential), with a\n * longer wait per request, since every request mints and a slow answer is\n * still an answer.\n */\nconst SSO_USERINFO_RETRY_POLICY: MintRetryPolicy = {\n  ...DEFAULT_MINT_RETRY_POLICY,\n  timeoutMs: 10_000,\n};\n\n/** One userinfo request, classified. */\ntype UserInfoAttempt =\n  | { kind: 'session'; data: AthenaSSOUserInfo }\n  | { kind: 'unauthenticated' }\n  | { kind: 'invalid_response' }\n  /** A status it does not retry, or a 2xx whose body is not JSON. */\n  | { kind: 'failed'; status: number }\n  | {\n      kind: 'transient';\n      status: number | null;\n      reason: 'status' | 'network' | 'timeout';\n      cause?: unknown;\n    };\n\nconst abortError = () => new DOMException('The session read was cancelled.', 'AbortError');\n\n/** One userinfo request. Throws an `AbortError` when `signal` cancels the read. */\nasync function readUserInfoOnce({\n  url,\n  signal,\n  timeoutMs,\n}: {\n  url: string;\n  signal: AbortSignal;\n  timeoutMs: number;\n}): Promise<UserInfoAttempt> {\n  if (signal.aborted) throw abortError();\n  const request = new AbortController();\n  const cancel = () => request.abort();\n  signal.addEventListener('abort', cancel, { once: true });\n  let timedOut = false;\n  const timer = setTimeout(() => {\n    timedOut = true;\n    request.abort();\n  }, timeoutMs);\n\n  try {\n    const response = await fetch(url, { credentials: 'include', signal: request.signal });\n    if (response.status === 401 || response.status === 403) return { kind: 'unauthenticated' };\n    if (!response.ok) {\n      return isRetryableMintStatus(response.status)\n        ? { kind: 'transient', status: response.status, reason: 'status' }\n        : { kind: 'failed', status: response.status };\n    }\n\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      if (signal.aborted) throw abortError();\n      return timedOut\n        ? { kind: 'transient', status: null, reason: 'timeout', cause: error }\n        : { kind: 'failed', status: response.status };\n    }\n    return isValidSSOUserInfo(data) ? { kind: 'session', data } : { kind: 'invalid_response' };\n  } catch (error) {\n    if (signal.aborted) throw abortError();\n    return { kind: 'transient', status: null, reason: timedOut ? 'timeout' : 'network', cause: error };\n  } finally {\n    clearTimeout(timer);\n    signal.removeEventListener('abort', cancel);\n  }\n}\n\n/**\n * What a read concluded, as the query holds it. A read that could not answer\n * throws instead (`request_failed`), so an earlier answer stays.\n */\ntype SessionAnswer =\n  | { kind: 'session'; data: AthenaSSOUserInfo }\n  | {\n      kind: 'no_session';\n      reason: Exclude<AthenaSSOFailureReason, 'request_failed'>;\n      /** The person signed out here (`logout`), rather than the endpoint answering no session. */\n      signedOut?: true;\n    };\n\n/**\n * One session read: one bounded cycle of userinfo requests. A transient\n * failure is retried with `policy`'s capped, jittered backoff; a read that\n * gives up throws the typed error it reports. Throws an `AbortError` when\n * `signal` cancels the read.\n */\nasync function readSession({\n  url,\n  signal,\n  policy,\n}: {\n  url: string;\n  signal: AbortSignal;\n  policy: MintRetryPolicy;\n}): Promise<SessionAnswer> {\n  const maxAttempts = Math.max(1, Math.floor(policy.maxAttempts));\n  for (let attempts = 1; ; attempts += 1) {\n    const attempt = await readUserInfoOnce({ url, signal, timeoutMs: policy.timeoutMs });\n\n    if (attempt.kind === 'session') return { kind: 'session', data: attempt.data };\n    if (attempt.kind === 'unauthenticated') return { kind: 'no_session', reason: 'unauthenticated' };\n    if (attempt.kind === 'invalid_response') {\n      console.error(\n        '[AthenaSDK] Invalid SSO userinfo response: expected \"user.user_id\", \"user.email\", \"orgMemberInfos\", and \"accessToken\"',\n      );\n      return { kind: 'no_session', reason: 'invalid_response' };\n    }\n\n    if (attempt.kind === 'transient' && attempts < maxAttempts) {\n      const delayMs = getMintRetryDelay({ retry: attempts, policy });\n      athenaDiagnostics.emit('auth.sso.userinfo.retry', {\n        level: 'warn',\n        data: {\n          status: attempt.status,\n          reason: attempt.reason,\n          attempt: attempts,\n          max_attempts: maxAttempts,\n          delay_ms: delayMs,\n        },\n      });\n      await waitBeforeRetry({ delayMs, signal });\n      continue;\n    }\n\n    throw sessionReadError({ url, attempt, attempts });\n  }\n}\n\n/** The backoff between two requests of one read; cancelling the read ends it at once. */\nfunction waitBeforeRetry({ delayMs, signal }: { delayMs: number; signal: AbortSignal }): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal.aborted) {\n      reject(abortError());\n      return;\n    }\n    const onAbort = () => {\n      clearTimeout(timer);\n      reject(abortError());\n    };\n    const timer = setTimeout(() => {\n      signal.removeEventListener('abort', onAbort);\n      resolve();\n    }, delayMs);\n    signal.addEventListener('abort', onAbort, { once: true });\n  });\n}\n\n/** The typed error a read reports when it gives up without an answer about the session. */\nfunction sessionReadError({\n  url,\n  attempt,\n  attempts,\n}: {\n  url: string;\n  attempt: Extract<UserInfoAttempt, { kind: 'failed' | 'transient' }>;\n  attempts: number;\n}): AthenaSdkError {\n  if (attempt.kind === 'failed') {\n    const unreadable = attempt.status >= 200 && attempt.status < 300;\n    return new AthenaSdkError({\n      code: 'auth_sso_failed',\n      message: unreadable\n        ? `The SSO session read (${url}) answered HTTP ${attempt.status} without a JSON body.`\n        : `The SSO session read (${url}) answered HTTP ${attempt.status}.`,\n      hint: 'Check that ssoBaseUrl / ssoUserInfoUrl point at the SSO userinfo endpoint.',\n      status: attempt.status,\n      context: { attempts, reason: unreadable ? 'invalid_body' : 'status' },\n    });\n  }\n  const answer =\n    attempt.status !== null\n      ? `HTTP ${attempt.status}`\n      : attempt.reason === 'timeout'\n        ? 'a timeout'\n        : 'a network error';\n  return new AthenaSdkError({\n    code: 'auth_sso_failed',\n    message: `The SSO session read (${url}) failed ${attempts} time${attempts === 1 ? '' : 's'} (last: ${answer}).`,\n    hint: 'The sign-in service did not answer; the person may still be signed in. Offer a retry (displayOnError receives retry).',\n    ...(attempt.status !== null && { status: attempt.status }),\n    ...(attempt.cause !== undefined && { cause: attempt.cause }),\n    context: { attempts, reason: attempt.reason },\n  });\n}\n\nconst DEFAULT_SSO_PATHS = {\n  userInfo: '/api/sso/userinfo',\n  login: '/api/sso/initiate',\n  logout: '/api/sso/logout',\n} as const;\n\nconst trimTrailingSlash = (value: string): string => value.replace(/\\/+$/, '');\n\nfunction resolveSSOUrl({\n  baseUrl,\n  overrideUrl,\n  defaultPath,\n}: {\n  baseUrl?: string;\n  overrideUrl?: string;\n  defaultPath: string;\n}): string {\n  if (overrideUrl) {\n    return overrideUrl;\n  }\n\n  if (!baseUrl) {\n    return defaultPath;\n  }\n\n  return `${trimTrailingSlash(baseUrl)}${defaultPath}`;\n}\n\nfunction isValidSSOUserInfo(data: unknown): data is AthenaSSOUserInfo {\n  if (!data || typeof data !== 'object') {\n    return false;\n  }\n\n  const candidate = data as {\n    accessToken?: unknown;\n    orgMemberInfos?: unknown;\n    user?: {\n      user_id?: unknown;\n      email?: unknown;\n    };\n  };\n\n  return (\n    typeof candidate.accessToken === 'string' &&\n    Array.isArray(candidate.orgMemberInfos) &&\n    !!candidate.user &&\n    typeof candidate.user.user_id === 'string' &&\n    typeof candidate.user.email === 'string'\n  );\n}\n\n/** Map the backend SSO response to the SDK's user/org types. */\nfunction mapSSOResponse(data: AthenaSSOUserInfo): {\n  user: AthenaUser;\n  orgs: AthenaOrg[];\n  accessToken: string;\n} {\n  const user: AthenaUser = {\n    userId: data.user.user_id,\n    email: data.user.email,\n    firstName: data.user.first_name || undefined,\n    lastName: data.user.last_name || undefined,\n    username: data.user.username || undefined,\n    pictureUrl: data.user.picture_url || undefined,\n    properties: data.user.properties,\n  };\n\n  const orgs: AthenaOrg[] = data.orgMemberInfos.map((org) => ({\n    orgId: org.orgId,\n    orgName: org.orgName,\n    urlSafeOrgName: org.urlSafeOrgName,\n  }));\n\n  return { user, orgs, accessToken: data.accessToken };\n}\n\n// ─── Provider ─────────────────────────────────────────────────────────\n\n/**\n * Wraps your app with Athena authentication powered by an external SSO\n * identity provider (e.g. Microsoft Entra / Azure AD, Okta, etc.).\n *\n * The SSO login flow is handled entirely by your backend. This provider\n * verifies the session by fetching `ssoUserInfoUrl` and exposes the\n * same `AthenaAuthState` context that `AthenaAuthProvider` (PropelAuth)\n * provides, so downstream components like `<AthenaProvider>` and\n * `useAthenaAuth()` work identically.\n *\n * Place this **above** `<AthenaProvider>` in the component tree.\n *\n * @example\n * ```tsx\n * import { AthenaSSOProvider } from '@athenaintel/react/auth';\n * import { AthenaProvider, AthenaChat } from '@athenaintel/react';\n *\n * function App() {\n *   return (\n *     <AthenaSSOProvider\n *       ssoUserInfoUrl=\"https://api.yourdomain.com/api/sso/userinfo\"\n *       ssoLoginUrl=\"https://api.yourdomain.com/api/sso/initiate\"\n *     >\n *       <AthenaProvider>\n *         <AthenaChat />\n *       </AthenaProvider>\n *     </AthenaSSOProvider>\n *   );\n * }\n * ```\n */\nexport function AthenaSSOProvider({\n  children,\n  ssoBaseUrl,\n  ssoUserInfoUrl,\n  ssoLoginUrl,\n  ssoLogoutUrl,\n  displayWhileLoading,\n  displayOnError,\n  onError,\n  revalidateOnWindowFocus = false,\n  retryPolicy = SSO_USERINFO_RETRY_POLICY,\n}: AthenaSSOProviderProps) {\n  // The provider's own client, never a host's: the session holds an access\n  // token, and a host may persist its query cache.\n  const [queryClient] = useState(() => new QueryClient());\n  const retryPolicyRef = useRef(retryPolicy);\n  retryPolicyRef.current = retryPolicy;\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n\n  const ssoUrls = useMemo(\n    () => ({\n      userInfo: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoUserInfoUrl,\n        defaultPath: DEFAULT_SSO_PATHS.userInfo,\n      }),\n      login: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoLoginUrl,\n        defaultPath: DEFAULT_SSO_PATHS.login,\n      }),\n      logout: resolveSSOUrl({\n        baseUrl: ssoBaseUrl,\n        overrideUrl: ssoLogoutUrl,\n        defaultPath: DEFAULT_SSO_PATHS.logout,\n      }),\n    }),\n    [ssoBaseUrl, ssoUserInfoUrl, ssoLoginUrl, ssoLogoutUrl],\n  );\n\n  const queryKey = useMemo(() => ['athena-sdk', 'sso-session', ssoUrls.userInfo], [ssoUrls.userInfo]);\n\n  // One read is one bounded cycle (`readSession`). A read that gives up\n  // throws, so the query keeps the session an earlier read answered: a failed\n  // background revalidation or renewal does not sign the person out.\n  const queryFn = useCallback(\n    async ({ signal }: { signal: AbortSignal }): Promise<SessionAnswer> => {\n      try {\n        return await readSession({ url: ssoUrls.userInfo, signal, policy: retryPolicyRef.current });\n      } catch (readError) {\n        if (readError instanceof AthenaSdkError) {\n          athenaDiagnostics.emit('auth.sso.userinfo.error', { error: readError });\n          try {\n            onErrorRef.current?.(readError);\n          } catch (callbackError) {\n            console.error('[AthenaSDK] AthenaSSOProvider onError threw', callbackError);\n          }\n        }\n        throw readError;\n      }\n    },\n    [ssoUrls.userInfo],\n  );\n\n  const query = useQuery(\n    {\n      queryKey,\n      queryFn,\n      // `readSession` retries a transient failure itself, with the bridge's\n      // policy; the query never retries on top of it, and reads while the\n      // browser reports itself offline too, so that policy decides.\n      retry: false,\n      networkMode: 'always',\n      staleTime: Number.POSITIVE_INFINITY,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n    },\n    queryClient,\n  );\n\n  const answer = query.data;\n  const session = answer?.kind === 'session' ? answer.data : null;\n  const loading = query.isPending;\n  const reason: AthenaSSOFailureReason | null = session\n    ? null\n    : answer?.kind === 'no_session'\n      ? answer.reason\n      : query.isError\n        ? 'request_failed'\n        : null;\n  const signedOut = answer?.kind === 'no_session' && answer.signedOut === true;\n\n  useEffect(() => {\n    if (!revalidateOnWindowFocus || typeof window === 'undefined') {\n      return;\n    }\n\n    // A revalidation joins a read already in flight (a renewal, the first\n    // read) instead of cancelling it.\n    const revalidate = () => {\n      void queryClient.refetchQueries({ queryKey }, { cancelRefetch: false });\n    };\n    const handleVisibilityChange = () => {\n      if (document.visibilityState === 'visible') {\n        revalidate();\n      }\n    };\n\n    window.addEventListener('focus', revalidate);\n    document.addEventListener('visibilitychange', handleVisibilityChange);\n\n    return () => {\n      window.removeEventListener('focus', revalidate);\n      document.removeEventListener('visibilitychange', handleVisibilityChange);\n    };\n  }, [revalidateOnWindowFocus, queryClient, queryKey]);\n\n  // Redirect to SSO login when the endpoint answered no session and no error\n  // UI was provided. Signing out redirects by itself, when asked to.\n  useEffect(() => {\n    if (\n      !loading &&\n      reason === 'unauthenticated' &&\n      !signedOut &&\n      !displayOnError &&\n      typeof window !== 'undefined'\n    ) {\n      window.location.assign(ssoUrls.login);\n    }\n  }, [loading, reason, signedOut, displayOnError, ssoUrls.login]);\n\n  const retry = useCallback(() => {\n    void queryClient.resetQueries({ queryKey });\n  }, [queryClient, queryKey]);\n\n  const logout = useCallback(async (redirectOnLogout = true) => {\n    await queryClient.cancelQueries({ queryKey });\n\n    try {\n      await fetch(ssoUrls.logout, {\n        method: 'POST',\n        credentials: 'include',\n      });\n    } catch (logoutError) {\n      console.error('[AthenaSDK] Failed to invalidate SSO session during logout', logoutError);\n    }\n\n    queryClient.setQueryData<SessionAnswer>(queryKey, {\n      kind: 'no_session',\n      reason: 'unauthenticated',\n      signedOut: true,\n    });\n\n    if (redirectOnLogout && typeof window !== 'undefined') {\n      window.location.assign(ssoUrls.login);\n    }\n  }, [queryClient, queryKey, ssoUrls.login, ssoUrls.logout]);\n\n  // The SSO side of the SDK's credential source: `force` (the previous token\n  // was refused) reads the session again for a new token, joining a read\n  // already in flight; otherwise, or when that read has no session to hand\n  // back, the held one is served.\n  const sessionRef = useRef(session);\n  sessionRef.current = session;\n  const getToken = useCallback<AthenaStatewireTokenGetter>(\n    async ({ force = false } = {}) => {\n      if (force) {\n        try {\n          const renewed = await queryClient.fetchQuery({\n            queryKey,\n            queryFn,\n            staleTime: 0,\n            retry: false,\n            networkMode: 'always',\n          });\n          if (renewed.kind === 'session') return renewed.data.accessToken;\n        } catch {\n          // The read gave up (already reported) or was cancelled.\n        }\n      }\n      return sessionRef.current?.accessToken ?? null;\n    },\n    [queryClient, queryKey, queryFn],\n  );\n\n  const authState: AthenaAuthState = useMemo(() => {\n    if (loading) {\n      return {\n        isLoggedIn: false,\n        isLoading: true,\n        user: null,\n        accessToken: null,\n        orgs: [],\n        logout: async () => {},\n        getToken,\n      };\n    }\n\n    if (!session) {\n      return {\n        isLoggedIn: false,\n        isLoading: false,\n        user: null,\n        accessToken: null,\n        orgs: [],\n        logout,\n        getToken,\n      };\n    }\n\n    const { user, orgs, accessToken } = mapSSOResponse(session);\n\n    return {\n      isLoggedIn: true,\n      isLoading: false,\n      user,\n      accessToken,\n      orgs,\n      logout,\n      getToken,\n    };\n  }, [loading, session, logout, getToken]);\n\n  if (authState.isLoading) {\n    return <>{displayWhileLoading ?? null}</>;\n  }\n\n  if (!authState.isLoggedIn) {\n    if (typeof displayOnError === 'function') {\n      return <>{displayOnError({ reason: reason ?? 'unauthenticated', retry })}</>;\n    }\n    return displayOnError ? <>{displayOnError}</> : null;\n  }\n\n  return (\n    <AthenaAuthContext.Provider value={authState}>\n      {children}\n    </AthenaAuthContext.Provider>\n  );\n}\n"],"names":[],"mappings":";;;;;;;AAiIA,MAAM,4BAA6C;AAAA,EACjD,GAAG;AAAA,EACH,WAAW;AACb;AAgBA,MAAM,aAAa,MAAM,IAAI,aAAa,mCAAmC,YAAY;AAGzF,eAAe,iBAAiB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AACF,GAI6B;AAC3B,MAAI,OAAO,QAAS,OAAM,WAAA;AAC1B,QAAM,UAAU,IAAI,gBAAA;AACpB,QAAM,SAAS,MAAM,QAAQ,MAAA;AAC7B,SAAO,iBAAiB,SAAS,QAAQ,EAAE,MAAM,MAAM;AACvD,MAAI,WAAW;AACf,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AACX,YAAQ,MAAA;AAAA,EACV,GAAG,SAAS;AAEZ,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,KAAK,EAAE,aAAa,WAAW,QAAQ,QAAQ,QAAQ;AACpF,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IAAK,QAAO,EAAE,MAAM,kBAAA;AACvE,QAAI,CAAC,SAAS,IAAI;AAChB,aAAO,sBAAsB,SAAS,MAAM,IACxC,EAAE,MAAM,aAAa,QAAQ,SAAS,QAAQ,QAAQ,aACtD,EAAE,MAAM,UAAU,QAAQ,SAAS,OAAA;AAAA,IACzC;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,SAAS,KAAA;AAAA,IACxB,SAAS,OAAO;AACd,UAAI,OAAO,QAAS,OAAM,WAAA;AAC1B,aAAO,WACH,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,OAAO,MAAA,IAC7D,EAAE,MAAM,UAAU,QAAQ,SAAS,OAAA;AAAA,IACzC;AACA,WAAO,mBAAmB,IAAI,IAAI,EAAE,MAAM,WAAW,KAAA,IAAS,EAAE,MAAM,mBAAA;AAAA,EACxE,SAAS,OAAO;AACd,QAAI,OAAO,QAAS,OAAM,WAAA;AAC1B,WAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,YAAY,WAAW,OAAO,MAAA;AAAA,EAC7F,UAAA;AACE,iBAAa,KAAK;AAClB,WAAO,oBAAoB,SAAS,MAAM;AAAA,EAC5C;AACF;AAqBA,eAAe,YAAY;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AACF,GAI2B;AACzB,QAAM,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,WAAW,CAAC;AAC9D,WAAS,WAAW,KAAK,YAAY,GAAG;AACtC,UAAM,UAAU,MAAM,iBAAiB,EAAE,KAAK,QAAQ,WAAW,OAAO,WAAW;AAEnF,QAAI,QAAQ,SAAS,UAAW,QAAO,EAAE,MAAM,WAAW,MAAM,QAAQ,KAAA;AACxE,QAAI,QAAQ,SAAS,kBAAmB,QAAO,EAAE,MAAM,cAAc,QAAQ,kBAAA;AAC7E,QAAI,QAAQ,SAAS,oBAAoB;AACvC,cAAQ;AAAA,QACN;AAAA,MAAA;AAEF,aAAO,EAAE,MAAM,cAAc,QAAQ,mBAAA;AAAA,IACvC;AAEA,QAAI,QAAQ,SAAS,eAAe,WAAW,aAAa;AAC1D,YAAM,UAAU,kBAAkB,EAAE,OAAO,UAAU,QAAQ;AAC7D,wBAAkB,KAAK,2BAA2B;AAAA,QAChD,OAAO;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,QAAQ;AAAA,UAChB,QAAQ,QAAQ;AAAA,UAChB,SAAS;AAAA,UACT,cAAc;AAAA,UACd,UAAU;AAAA,QAAA;AAAA,MACZ,CACD;AACD,YAAM,gBAAgB,EAAE,SAAS,QAAQ;AACzC;AAAA,IACF;AAEA,UAAM,iBAAiB,EAAE,KAAK,SAAS,UAAU;AAAA,EACnD;AACF;AAGA,SAAS,gBAAgB,EAAE,SAAS,UAAmE;AACrG,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO,SAAS;AAClB,aAAO,YAAY;AACnB;AAAA,IACF;AACA,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAA;AAAA,IACF,GAAG,OAAO;AACV,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM;AAAA,EAC1D,CAAC;AACH;AAGA,SAAS,iBAAiB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,MAAI,QAAQ,SAAS,UAAU;AAC7B,UAAM,aAAa,QAAQ,UAAU,OAAO,QAAQ,SAAS;AAC7D,WAAO,IAAI,eAAe;AAAA,MACxB,MAAM;AAAA,MACN,SAAS,aACL,yBAAyB,GAAG,mBAAmB,QAAQ,MAAM,0BAC7D,yBAAyB,GAAG,mBAAmB,QAAQ,MAAM;AAAA,MACjE,MAAM;AAAA,MACN,QAAQ,QAAQ;AAAA,MAChB,SAAS,EAAE,UAAU,QAAQ,aAAa,iBAAiB,SAAA;AAAA,IAAS,CACrE;AAAA,EACH;AACA,QAAM,SACJ,QAAQ,WAAW,OACf,QAAQ,QAAQ,MAAM,KACtB,QAAQ,WAAW,YACjB,cACA;AACR,SAAO,IAAI,eAAe;AAAA,IACxB,MAAM;AAAA,IACN,SAAS,yBAAyB,GAAG,YAAY,QAAQ,QAAQ,aAAa,IAAI,KAAK,GAAG,WAAW,MAAM;AAAA,IAC3G,MAAM;AAAA,IACN,GAAI,QAAQ,WAAW,QAAQ,EAAE,QAAQ,QAAQ,OAAA;AAAA,IACjD,GAAI,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,MAAA;AAAA,IACpD,SAAS,EAAE,UAAU,QAAQ,QAAQ,OAAA;AAAA,EAAO,CAC7C;AACH;AAEA,MAAM,oBAAoB;AAAA,EACxB,UAAU;AAAA,EACV,OAAO;AAAA,EACP,QAAQ;AACV;AAEA,MAAM,oBAAoB,CAAC,UAA0B,MAAM,QAAQ,QAAQ,EAAE;AAE7E,SAAS,cAAc;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AACF,GAIW;AACT,MAAI,aAAa;AACf,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AAEA,SAAO,GAAG,kBAAkB,OAAO,CAAC,GAAG,WAAW;AACpD;AAEA,SAAS,mBAAmB,MAA0C;AACpE,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO;AAAA,EACT;AAEA,QAAM,YAAY;AASlB,SACE,OAAO,UAAU,gBAAgB,YACjC,MAAM,QAAQ,UAAU,cAAc,KACtC,CAAC,CAAC,UAAU,QACZ,OAAO,UAAU,KAAK,YAAY,YAClC,OAAO,UAAU,KAAK,UAAU;AAEpC;AAGA,SAAS,eAAe,MAItB;AACA,QAAM,OAAmB;AAAA,IACvB,QAAQ,KAAK,KAAK;AAAA,IAClB,OAAO,KAAK,KAAK;AAAA,IACjB,WAAW,KAAK,KAAK,cAAc;AAAA,IACnC,UAAU,KAAK,KAAK,aAAa;AAAA,IACjC,UAAU,KAAK,KAAK,YAAY;AAAA,IAChC,YAAY,KAAK,KAAK,eAAe;AAAA,IACrC,YAAY,KAAK,KAAK;AAAA,EAAA;AAGxB,QAAM,OAAoB,KAAK,eAAe,IAAI,CAAC,SAAS;AAAA,IAC1D,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,gBAAgB,IAAI;AAAA,EAAA,EACpB;AAEF,SAAO,EAAE,MAAM,MAAM,aAAa,KAAK,YAAA;AACzC;AAmCO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,0BAA0B;AAAA,EAC1B,cAAc;AAChB,GAA2B;AAGzB,QAAM,CAAC,WAAW,IAAI,SAAS,MAAM,IAAI,aAAa;AACtD,QAAM,iBAAiB,OAAO,WAAW;AACzC,iBAAe,UAAU;AACzB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,MACL,UAAU,cAAc;AAAA,QACtB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,MACD,OAAO,cAAc;AAAA,QACnB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,MACD,QAAQ,cAAc;AAAA,QACpB,SAAS;AAAA,QACT,aAAa;AAAA,QACb,aAAa,kBAAkB;AAAA,MAAA,CAChC;AAAA,IAAA;AAAA,IAEH,CAAC,YAAY,gBAAgB,aAAa,YAAY;AAAA,EAAA;AAGxD,QAAM,WAAW,QAAQ,MAAM,CAAC,cAAc,eAAe,QAAQ,QAAQ,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAKlG,QAAM,UAAU;AAAA,IACd,OAAO,EAAE,OAAA,MAA8D;;AACrE,UAAI;AACF,eAAO,MAAM,YAAY,EAAE,KAAK,QAAQ,UAAU,QAAQ,QAAQ,eAAe,SAAS;AAAA,MAC5F,SAAS,WAAW;AAClB,YAAI,qBAAqB,gBAAgB;AACvC,4BAAkB,KAAK,2BAA2B,EAAE,OAAO,WAAW;AACtE,cAAI;AACF,6BAAW,YAAX,oCAAqB;AAAA,UACvB,SAAS,eAAe;AACtB,oBAAQ,MAAM,+CAA+C,aAAa;AAAA,UAC5E;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,QAAQ;AAAA,EAAA;AAGnB,QAAM,QAAQ;AAAA,IACZ;AAAA,MACE;AAAA,MACA;AAAA;AAAA;AAAA;AAAA,MAIA,OAAO;AAAA,MACP,aAAa;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,sBAAsB;AAAA,MACtB,oBAAoB;AAAA,IAAA;AAAA,IAEtB;AAAA,EAAA;AAGF,QAAM,SAAS,MAAM;AACrB,QAAM,WAAU,iCAAQ,UAAS,YAAY,OAAO,OAAO;AAC3D,QAAM,UAAU,MAAM;AACtB,QAAM,SAAwC,UAC1C,QACA,iCAAQ,UAAS,eACf,OAAO,SACP,MAAM,UACJ,mBACA;AACR,QAAM,aAAY,iCAAQ,UAAS,gBAAgB,OAAO,cAAc;AAExE,YAAU,MAAM;AACd,QAAI,CAAC,2BAA2B,OAAO,WAAW,aAAa;AAC7D;AAAA,IACF;AAIA,UAAM,aAAa,MAAM;AACvB,WAAK,YAAY,eAAe,EAAE,SAAA,GAAY,EAAE,eAAe,OAAO;AAAA,IACxE;AACA,UAAM,yBAAyB,MAAM;AACnC,UAAI,SAAS,oBAAoB,WAAW;AAC1C,mBAAA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,iBAAiB,SAAS,UAAU;AAC3C,aAAS,iBAAiB,oBAAoB,sBAAsB;AAEpE,WAAO,MAAM;AACX,aAAO,oBAAoB,SAAS,UAAU;AAC9C,eAAS,oBAAoB,oBAAoB,sBAAsB;AAAA,IACzE;AAAA,EACF,GAAG,CAAC,yBAAyB,aAAa,QAAQ,CAAC;AAInD,YAAU,MAAM;AACd,QACE,CAAC,WACD,WAAW,qBACX,CAAC,aACD,CAAC,kBACD,OAAO,WAAW,aAClB;AACA,aAAO,SAAS,OAAO,QAAQ,KAAK;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,SAAS,QAAQ,WAAW,gBAAgB,QAAQ,KAAK,CAAC;AAE9D,QAAM,QAAQ,YAAY,MAAM;AAC9B,SAAK,YAAY,aAAa,EAAE,UAAU;AAAA,EAC5C,GAAG,CAAC,aAAa,QAAQ,CAAC;AAE1B,QAAM,SAAS,YAAY,OAAO,mBAAmB,SAAS;AAC5D,UAAM,YAAY,cAAc,EAAE,UAAU;AAE5C,QAAI;AACF,YAAM,MAAM,QAAQ,QAAQ;AAAA,QAC1B,QAAQ;AAAA,QACR,aAAa;AAAA,MAAA,CACd;AAAA,IACH,SAAS,aAAa;AACpB,cAAQ,MAAM,8DAA8D,WAAW;AAAA,IACzF;AAEA,gBAAY,aAA4B,UAAU;AAAA,MAChD,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,WAAW;AAAA,IAAA,CACZ;AAED,QAAI,oBAAoB,OAAO,WAAW,aAAa;AACrD,aAAO,SAAS,OAAO,QAAQ,KAAK;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,aAAa,UAAU,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAMzD,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,WAAW;AAAA,IACf,OAAO,EAAE,QAAQ,MAAA,IAAU,OAAO;;AAChC,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,UAAU,MAAM,YAAY,WAAW;AAAA,YAC3C;AAAA,YACA;AAAA,YACA,WAAW;AAAA,YACX,OAAO;AAAA,YACP,aAAa;AAAA,UAAA,CACd;AACD,cAAI,QAAQ,SAAS,UAAW,QAAO,QAAQ,KAAK;AAAA,QACtD,QAAQ;AAAA,QAER;AAAA,MACF;AACA,eAAO,gBAAW,YAAX,mBAAoB,gBAAe;AAAA,IAC5C;AAAA,IACA,CAAC,aAAa,UAAU,OAAO;AAAA,EAAA;AAGjC,QAAM,YAA6B,QAAQ,MAAM;AAC/C,QAAI,SAAS;AACX,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,MAAM;AAAA,QACN,aAAa;AAAA,QACb,MAAM,CAAA;AAAA,QACN,QAAQ,YAAY;AAAA,QAAC;AAAA,QACrB;AAAA,MAAA;AAAA,IAEJ;AAEA,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,MAAM;AAAA,QACN,aAAa;AAAA,QACb,MAAM,CAAA;AAAA,QACN;AAAA,QACA;AAAA,MAAA;AAAA,IAEJ;AAEA,UAAM,EAAE,MAAM,MAAM,YAAA,IAAgB,eAAe,OAAO;AAE1D,WAAO;AAAA,MACL,YAAY;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ,GAAG,CAAC,SAAS,SAAS,QAAQ,QAAQ,CAAC;AAEvC,MAAI,UAAU,WAAW;AACvB,WAAO,oBAAA,UAAA,EAAG,iCAAuB,KAAA,CAAK;AAAA,EACxC;AAEA,MAAI,CAAC,UAAU,YAAY;AACzB,QAAI,OAAO,mBAAmB,YAAY;AACxC,aAAO,oBAAA,UAAA,EAAG,yBAAe,EAAE,QAAQ,UAAU,mBAAmB,MAAA,CAAO,EAAA,CAAE;AAAA,IAC3E;AACA,WAAO,iBAAiB,oBAAA,UAAA,EAAG,UAAA,eAAA,CAAe,IAAM;AAAA,EAClD;AAEA,6BACG,kBAAkB,UAAlB,EAA2B,OAAO,WAChC,UACH;AAEJ;"}

package/dist/auth/index.d.ts

@@ -1,7 +1,7 @@
 export { AthenaAuthProvider } from './AthenaAuthProvider';
 export type { AthenaAuthProviderProps } from './AthenaAuthProvider';
 export { AthenaSSOProvider } from './AthenaSSOProvider';
-export type { AthenaSSOProviderProps } from './AthenaSSOProvider';
+export type { AthenaSSOFailure, AthenaSSOFailureReason, AthenaSSOProviderProps, } from './AthenaSSOProvider';
 export { useAthenaAuth } from './AthenaAuthContext';
 export { AthenaAuthContext } from './AthenaAuthContext';
 export type { AthenaAuthState, AthenaUser, AthenaOrg, AthenaSSOUserInfo, AthenaSSOUserData, AthenaSSOOrgInfo, } from './types';

package/dist/diagnostics/athena-diagnostics.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"athena-diagnostics.cjs","sources":["../../src/diagnostics/athena-diagnostics.ts"],"sourcesContent":["/**\n * SDK diagnostics: one structured event bus for everything the SDK does that\n * can be slow or can fail — auth acquisition, thread-list fetches, statewire\n * attach/snapshot/connection changes, sends, first tokens, and every error.\n *\n * Design:\n * - Module-level singleton (one SDK, one bus), configured by `AthenaProvider`\n *   from its `debug` / `onDiagnostic` / `onError` props. Nothing here runs\n *   until something calls `emit`, and with defaults it costs a ring-buffer push.\n * - Every event carries `t` (ms since page navigation start via\n *   `performance.now()`) so the buffer reads as a waterfall. Timed spans use\n *   `performance.mark` / `performance.measure` too, so the browser Performance\n *   panel shows them as user timings without any extra tooling.\n * - Console output is opt-in (`debug` prop or `localStorage['athena:debug']`),\n *   prefixed `[AthenaSDK]`, and level-gated. Errors always reach `onError`.\n * - PostHog forwarding (opt-in) sends the timing events as\n *   `athena_sdk_<name>` with `duration_ms`, through the SDK's capture gate.\n *\n * Consumers read the buffer with `useAthenaDiagnostics()` or, in the browser\n * console, `window.__ATHENA_SDK__.diagnostics.snapshot()`.\n */\n\nimport { getPostHogInstance } from '../provider/PostHogProvider';\nimport { capturePosthogEvent, type PosthogCaptureClient } from '../lib/posthog/wrap-posthog-client';\nimport { ATHENA_REACT_SDK_VERSION } from '../version';\nimport { AthenaSdkError, isAthenaSdkError, toAthenaSdkError } from './errors';\n\nexport const ATHENA_DIAGNOSTIC_LEVELS = ['debug', 'info', 'warn', 'error'] as const;\nexport type AthenaDiagnosticLevel = (typeof ATHENA_DIAGNOSTIC_LEVELS)[number];\n\nconst LEVEL_RANK: Record<AthenaDiagnosticLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\n/**\n * Event names. Dotted `area.event` so a consumer can filter by prefix. Names\n * are part of the public contract: renaming one is a breaking change for\n * dashboards, so add new ones instead of repurposing.\n */\nexport type AthenaDiagnosticEventName =\n  // Provider / configuration\n  | 'sdk.init'\n  | 'sdk.transport'\n  | 'sdk.config.warning'\n  // Auth acquisition + lifecycle\n  | 'auth.bridge.start'\n  | 'auth.bridge.ready'\n  | 'auth.bridge.timeout'\n  | 'auth.bridge.absent'\n  | 'auth.bridge.error'\n  | 'auth.bridge.retry'\n  | 'auth.bridge.config_rejected'\n  | 'auth.token.acquired'\n  | 'auth.token.refreshed'\n  | 'auth.token.refresh_failed'\n  | 'auth.token.stale'\n  | 'auth.sso.userinfo.start'\n  | 'auth.sso.userinfo.done'\n  | 'auth.sso.userinfo.error'\n  // Thread list + history\n  | 'threads.list.start'\n  | 'threads.list.done'\n  | 'threads.list.error'\n  | 'threads.list.aborted'\n  | 'threads.history.start'\n  | 'threads.history.done'\n  | 'threads.history.error'\n  | 'threads.history.aborted'\n  // Statewire transport\n  | 'statewire.attach.start'\n  | 'statewire.snapshot'\n  | 'statewire.connection'\n  | 'statewire.parked'\n  | 'statewire.error'\n  | 'statewire.read_only'\n  /** A write to the thread's server config lane (`config/patch`) was refused or dropped. */\n  | 'statewire.config'\n  // Runs\n  | 'run.send'\n  | 'run.first_token'\n  | 'run.done'\n  | 'run.error'\n  // Composer\n  | 'composer.attachment.error'\n  | 'composer.cancel.error'\n  | 'composer.dictation'\n  | 'composer.handoff'\n  // Tool UIs + frontend tools\n  | 'tools.schema.warning'\n  | 'tools.debug'\n  // Mention suggestions\n  | 'mentions.fetch.error'\n  // Catch-all\n  | 'sdk.error';\n\nexport interface AthenaDiagnosticEvent {\n  /** Monotonic sequence number within this page. */\n  seq: number;\n  /** `performance.now()` at emit time (ms since navigation start). */\n  t: number;\n  /** Wall-clock ISO timestamp, for exports. */\n  at: string;\n  name: AthenaDiagnosticEventName;\n  level: AthenaDiagnosticLevel;\n  /** Milliseconds for a completed span (set on `*.done` / `*.ready` / `run.first_token`). */\n  durationMs?: number;\n  /** Structured context. Never contains credentials — see `redact`. */\n  data?: Record<string, unknown>;\n  /** Present on error-level events. */\n  error?: AthenaSdkError;\n}\n\nexport interface AthenaDiagnosticsConfig {\n  /** Minimum level echoed to the console. `false` disables console output. */\n  console: AthenaDiagnosticLevel | false;\n  /** Forward timing + error events to PostHog as `athena_sdk_*` events. */\n  posthog: boolean;\n  /** Receives every event (already redacted). */\n  onEvent?: (event: AthenaDiagnosticEvent) => void;\n  /** Receives every error-level event's `AthenaSdkError`. */\n  onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  /** Ring-buffer capacity. */\n  bufferSize: number;\n}\n\nexport interface AthenaDiagnosticsSnapshot {\n  sdkVersion: string;\n  config: Omit<AthenaDiagnosticsConfig, 'onEvent' | 'onError'>;\n  events: AthenaDiagnosticEvent[];\n  /** Latest value per gauge (connection status, transport, auth mode, …). */\n  gauges: Record<string, unknown>;\n  /** Named span durations, most recent per name (`auth.bridge`, `threads.list`, …). */\n  timings: Record<string, number>;\n}\n\nconst DEFAULT_CONFIG: AthenaDiagnosticsConfig = {\n  console: false,\n  posthog: false,\n  bufferSize: 300,\n};\n\nconst CONSOLE_PREFIX = '[AthenaSDK]';\nconst LOCAL_STORAGE_DEBUG_KEY = 'athena:debug';\nconst GLOBAL_KEY = '__ATHENA_SDK__';\n\n// Keys whose values must never enter the buffer, the console, or PostHog.\nconst REDACT_KEYS = /token|secret|api[-_]?key|authorization|cookie|password/i;\n\nfunction redact(data: Record<string, unknown> | undefined): Record<string, unknown> | undefined {\n  if (!data) return undefined;\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (REDACT_KEYS.test(key)) {\n      out[key] = typeof value === 'string' && value.length > 0 ? `<redacted:${value.length}>` : '<redacted>';\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' && typeof performance.now === 'function'\n    ? performance.now()\n    : Date.now();\n}\n\nfunction readLocalDebugLevel(): AthenaDiagnosticLevel | null {\n  try {\n    if (typeof localStorage === 'undefined') return null;\n    const raw = localStorage.getItem(LOCAL_STORAGE_DEBUG_KEY);\n    if (!raw) return null;\n    if ((ATHENA_DIAGNOSTIC_LEVELS as readonly string[]).includes(raw)) {\n      return raw as AthenaDiagnosticLevel;\n    }\n    return raw === '1' || raw === 'true' ? 'debug' : null;\n  } catch {\n    return null;\n  }\n}\n\ntype Listener = (event: AthenaDiagnosticEvent) => void;\n\nclass AthenaDiagnosticsBus {\n  private config: AthenaDiagnosticsConfig = { ...DEFAULT_CONFIG };\n  private events: AthenaDiagnosticEvent[] = [];\n  private listeners = new Set<Listener>();\n  private snapshotListeners = new Set<() => void>();\n  private seq = 0;\n  private gauges: Record<string, unknown> = {};\n  private timings: Record<string, number> = {};\n  private spans = new Map<string, number>();\n  private cachedSnapshot: AthenaDiagnosticsSnapshot | null = null;\n\n  configure(partial: Partial<AthenaDiagnosticsConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.events.length > this.config.bufferSize) {\n      this.events = this.events.slice(-this.config.bufferSize);\n    }\n    this.invalidate();\n  }\n\n  getConfig(): AthenaDiagnosticsConfig {\n    return this.config;\n  }\n\n  /** Effective console level: the configured one, or `localStorage['athena:debug']`. */\n  private consoleLevel(): AthenaDiagnosticLevel | false {\n    if (this.config.console !== false) return this.config.console;\n    return readLocalDebugLevel() ?? false;\n  }\n\n  emit(\n    name: AthenaDiagnosticEventName,\n    options: {\n      level?: AthenaDiagnosticLevel;\n      data?: Record<string, unknown>;\n      durationMs?: number;\n      error?: unknown;\n    } = {},\n  ): AthenaDiagnosticEvent {\n    const level = options.level ?? (options.error !== undefined ? 'error' : 'info');\n    const error =\n      options.error === undefined\n        ? undefined\n        : toAthenaSdkError(options.error, {\n            code: 'unknown',\n            message: `Unexpected error during ${name}`,\n          });\n    const event: AthenaDiagnosticEvent = {\n      seq: ++this.seq,\n      t: Math.round(nowMs() * 10) / 10,\n      at: new Date().toISOString(),\n      name,\n      level,\n      ...(options.durationMs !== undefined && { durationMs: Math.round(options.durationMs) }),\n      ...(options.data && { data: redact(options.data) }),\n      ...(error && { error }),\n    };\n\n    this.events.push(event);\n    if (this.events.length > this.config.bufferSize) {\n      this.events.splice(0, this.events.length - this.config.bufferSize);\n    }\n    if (event.durationMs !== undefined) {\n      this.timings[name] = event.durationMs;\n    }\n    this.invalidate();\n\n    this.echoToConsole(event);\n    this.forwardToPostHog(event);\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch (listenerError) {\n        console.error(`${CONSOLE_PREFIX} diagnostics listener threw`, listenerError);\n      }\n    }\n    if (this.config.onEvent) {\n      try {\n        this.config.onEvent(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic callback threw`, callbackError);\n      }\n    }\n    if (error && this.config.onError) {\n      try {\n        this.config.onError(error, event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onError callback threw`, callbackError);\n      }\n    }\n    for (const notify of this.snapshotListeners) notify();\n    return event;\n  }\n\n  /** Record an error-level event. Returns the normalized `AthenaSdkError`. */\n  error(\n    name: AthenaDiagnosticEventName,\n    error: unknown,\n    fallback: { code: AthenaSdkError['code']; message: string; hint?: string },\n    data?: Record<string, unknown>,\n  ): AthenaSdkError {\n    const normalized = toAthenaSdkError(error, fallback);\n    this.emit(name, { level: 'error', error: normalized, data });\n    return normalized;\n  }\n\n  /**\n   * Start a named span. Returns a function that ends it and emits `doneName`\n   * with `durationMs` (or `errorName` when passed an error). Also records a\n   * `performance.measure` so the span shows in the browser's Performance panel.\n   */\n  span(\n    spanName: string,\n    startName: AthenaDiagnosticEventName,\n    data?: Record<string, unknown>,\n  ): (\n    doneName: AthenaDiagnosticEventName,\n    doneOptions?: { data?: Record<string, unknown>; error?: unknown },\n  ) => number {\n    const startedAt = nowMs();\n    this.spans.set(spanName, startedAt);\n    this.mark(`${spanName}:start`);\n    this.emit(startName, { level: 'debug', data });\n    return (doneName, doneOptions = {}) => {\n      const durationMs = nowMs() - startedAt;\n      this.spans.delete(spanName);\n      this.mark(`${spanName}:end`);\n      this.measure(spanName);\n      this.emit(doneName, {\n        level: doneOptions.error !== undefined ? 'error' : 'info',\n        durationMs,\n        data: doneOptions.data,\n        error: doneOptions.error,\n      });\n      return durationMs;\n    };\n  }\n\n  /** Set a gauge (latest-value metric): connection status, transport, auth mode. */\n  gauge(name: string, value: unknown): void {\n    if (this.gauges[name] === value) return;\n    this.gauges[name] = value;\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  subscribe(listener: Listener): () => void {\n    this.listeners.add(listener);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /**\n   * Additive consumer registration: every registered consumer receives every\n   * event (and every error), unlike the single `onEvent`/`onError` config\n   * slots which are last-writer-wins. `AthenaProvider` registers through this\n   * so two mounted providers never clobber each other's callbacks.\n   */\n  addConsumer(consumer: {\n    onEvent?: (event: AthenaDiagnosticEvent) => void;\n    onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  }): () => void {\n    return this.subscribe((event) => {\n      try {\n        consumer.onEvent?.(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic consumer threw`, callbackError);\n      }\n      if (event.error) {\n        try {\n          consumer.onError?.(event.error, event);\n        } catch (callbackError) {\n          console.error(`${CONSOLE_PREFIX} onError consumer threw`, callbackError);\n        }\n      }\n    });\n  }\n\n  /** Subscribe to snapshot changes (for `useSyncExternalStore`). */\n  subscribeSnapshot(listener: () => void): () => void {\n    this.snapshotListeners.add(listener);\n    return () => {\n      this.snapshotListeners.delete(listener);\n    };\n  }\n\n  snapshot(): AthenaDiagnosticsSnapshot {\n    if (!this.cachedSnapshot) {\n      const { onEvent: _onEvent, onError: _onError, ...config } = this.config;\n      this.cachedSnapshot = {\n        sdkVersion: ATHENA_REACT_SDK_VERSION,\n        config,\n        events: [...this.events],\n        gauges: { ...this.gauges },\n        timings: { ...this.timings },\n      };\n    }\n    return this.cachedSnapshot;\n  }\n\n  /** Copy-paste-able JSON of the current snapshot (errors serialized). */\n  export(): string {\n    return JSON.stringify(\n      this.snapshot(),\n      (_key, value) => (isAthenaSdkError(value) ? value.toJSON() : value),\n      2,\n    );\n  }\n\n  clear(): void {\n    this.events = [];\n    this.timings = {};\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  private invalidate(): void {\n    this.cachedSnapshot = null;\n  }\n\n  private mark(name: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.mark === 'function') {\n        performance.mark(`athena-sdk:${name}`);\n      }\n    } catch {\n      // User Timing is best-effort.\n    }\n  }\n\n  private measure(spanName: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.measure === 'function') {\n        performance.measure(\n          `athena-sdk:${spanName}`,\n          `athena-sdk:${spanName}:start`,\n          `athena-sdk:${spanName}:end`,\n        );\n      }\n    } catch {\n      // A missing start mark (e.g. after `performance.clearMarks`) is not an error.\n    }\n  }\n\n  private echoToConsole(event: AthenaDiagnosticEvent): void {\n    const level = this.consoleLevel();\n    if (level === false) {\n      // Errors are never silent: with console output off they still log once,\n      // compactly, so a broken integration is visible without enabling debug.\n      if (event.level === 'error' && event.error) {\n        console.error(`${CONSOLE_PREFIX} ${event.name}: ${event.error.describe()}`, event.data ?? '');\n      }\n      return;\n    }\n    if (LEVEL_RANK[event.level] < LEVEL_RANK[level]) return;\n    const suffix = event.durationMs !== undefined ? ` (${event.durationMs}ms)` : '';\n    const line = `${CONSOLE_PREFIX} ${event.name}${suffix}`;\n    const payload = event.error ? { ...event.data, error: event.error.describe() } : event.data;\n    const method =\n      event.level === 'error'\n        ? console.error\n        : event.level === 'warn'\n          ? console.warn\n          : event.level === 'debug'\n            ? console.debug\n            : console.info;\n    method(line, payload ?? '');\n  }\n\n  private forwardToPostHog(event: AthenaDiagnosticEvent): void {\n    if (!this.config.posthog) return;\n    if (event.durationMs === undefined && event.level !== 'error') return;\n    try {\n      const client = getPostHogInstance<PosthogCaptureClient>();\n      capturePosthogEvent(client, `athena_sdk_${event.name.replace(/\\./g, '_')}`, {\n        sdk_version: ATHENA_REACT_SDK_VERSION,\n        level: event.level,\n        ...(event.durationMs !== undefined && { duration_ms: event.durationMs }),\n        ...(event.error && {\n          error_code: event.error.code,\n          error_message: event.error.message,\n          error_status: event.error.status,\n        }),\n        ...event.data,\n      });\n    } catch {\n      // Analytics must never break the chat.\n    }\n  }\n}\n\nexport const athenaDiagnostics = new AthenaDiagnosticsBus();\n\n/**\n * Expose the bus on `window.__ATHENA_SDK__` so an integrator can inspect the\n * waterfall from the console (`__ATHENA_SDK__.diagnostics.snapshot()`) or turn\n * console echo on without a rebuild (`localStorage.setItem('athena:debug','debug')`).\n */\nexport function installAthenaDiagnosticsGlobal(): void {\n  if (typeof window === 'undefined') return;\n  const globalWindow = window as unknown as Record<string, unknown>;\n  const existing = (globalWindow[GLOBAL_KEY] ?? {}) as Record<string, unknown>;\n  globalWindow[GLOBAL_KEY] = {\n    ...existing,\n    version: ATHENA_REACT_SDK_VERSION,\n    diagnostics: {\n      snapshot: () => athenaDiagnostics.snapshot(),\n      export: () => athenaDiagnostics.export(),\n      clear: () => athenaDiagnostics.clear(),\n      enableConsole: (level: AthenaDiagnosticLevel = 'debug') => {\n        try {\n          localStorage.setItem(LOCAL_STORAGE_DEBUG_KEY, level);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: level });\n      },\n      disableConsole: () => {\n        try {\n          localStorage.removeItem(LOCAL_STORAGE_DEBUG_KEY);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: false });\n      },\n    },\n  };\n}\n\n/** Normalize the provider's `debug` prop into a diagnostics config patch. */\nexport function debugPropToDiagnosticsConfig(\n  debug: boolean | AthenaDiagnosticLevel | Partial<AthenaDiagnosticsConfig> | undefined,\n): Partial<AthenaDiagnosticsConfig> {\n  if (debug === undefined) return {};\n  if (debug === true) return { console: 'debug' };\n  if (debug === false) return { console: false };\n  if (typeof debug === 'string') return { console: debug };\n  return debug;\n}\n"],"names":["toAthenaSdkError","ATHENA_REACT_SDK_VERSION","isAthenaSdkError","getPostHogInstance","capturePosthogEvent"],"mappings":";;;;;;;;;AA2BO,MAAM,2BAA2B,CAAC,SAAS,QAAQ,QAAQ,OAAO;AAGzE,MAAM,aAAoD;AAAA,EACxD,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAuGA,MAAM,iBAA0C;AAAA,EAC9C,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AACd;AAEA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAChC,MAAM,aAAa;AAGnB,MAAM,cAAc;AAEpB,SAAS,OAAO,MAAgF;AAC9F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAA+B,CAAA;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,YAAY,KAAK,GAAG,GAAG;AACzB,UAAI,GAAG,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,aAAa,MAAM,MAAM,MAAM;AAAA,IAC5F,OAAO;AACL,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,eAAe,OAAO,YAAY,QAAQ,aACpE,YAAY,QACZ,KAAK,IAAA;AACX;AAEA,SAAS,sBAAoD;AAC3D,MAAI;AACF,QAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,UAAM,MAAM,aAAa,QAAQ,uBAAuB;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,QAAK,yBAA+C,SAAS,GAAG,GAAG;AACjE,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,MAAM,qBAAqB;AAAA,EAA3B;AACU,kCAAkC,EAAE,GAAG,eAAA;AACvC,kCAAkC,CAAA;AAClC,yDAAgB,IAAA;AAChB,iEAAwB,IAAA;AACxB,+BAAM;AACN,kCAAkC,CAAA;AAClC,mCAAkC,CAAA;AAClC,qDAAY,IAAA;AACZ,0CAAmD;AAAA;AAAA,EAE3D,UAAU,SAAiD;AACzD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,QAAA;AACnC,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,SAAS,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,UAAU;AAAA,IACzD;AACA,SAAK,WAAA;AAAA,EACP;AAAA,EAEA,YAAqC;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGQ,eAA8C;AACpD,QAAI,KAAK,OAAO,YAAY,MAAO,QAAO,KAAK,OAAO;AACtD,WAAO,yBAAyB;AAAA,EAClC;AAAA,EAEA,KACE,MACA,UAKI,IACmB;AACvB,UAAM,QAAQ,QAAQ,UAAU,QAAQ,UAAU,SAAY,UAAU;AACxE,UAAM,QACJ,QAAQ,UAAU,SACd,SACAA,OAAAA,iBAAiB,QAAQ,OAAO;AAAA,MAC9B,MAAM;AAAA,MACN,SAAS,2BAA2B,IAAI;AAAA,IAAA,CACzC;AACP,UAAM,QAA+B;AAAA,MACnC,KAAK,EAAE,KAAK;AAAA,MACZ,GAAG,KAAK,MAAM,MAAA,IAAU,EAAE,IAAI;AAAA,MAC9B,KAAI,oBAAI,KAAA,GAAO,YAAA;AAAA,MACf;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,KAAK,MAAM,QAAQ,UAAU,EAAA;AAAA,MACnF,GAAI,QAAQ,QAAQ,EAAE,MAAM,OAAO,QAAQ,IAAI,EAAA;AAAA,MAC/C,GAAI,SAAS,EAAE,MAAA;AAAA,IAAM;AAGvB,SAAK,OAAO,KAAK,KAAK;AACtB,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,OAAO,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,OAAO,UAAU;AAAA,IACnE;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AACA,SAAK,WAAA;AAEL,SAAK,cAAc,KAAK;AACxB,SAAK,iBAAiB,KAAK;AAC3B,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,+BAA+B,aAAa;AAAA,MAC7E;AAAA,IACF;AACA,QAAI,KAAK,OAAO,SAAS;AACvB,UAAI;AACF,aAAK,OAAO,QAAQ,KAAK;AAAA,MAC3B,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AAAA,IACF;AACA,QAAI,SAAS,KAAK,OAAO,SAAS;AAChC,UAAI;AACF,aAAK,OAAO,QAAQ,OAAO,KAAK;AAAA,MAClC,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,MACzE;AAAA,IACF;AACA,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAC7C,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MACE,MACA,OACA,UACA,MACgB;AAChB,UAAM,aAAaA,OAAAA,iBAAiB,OAAO,QAAQ;AACnD,SAAK,KAAK,MAAM,EAAE,OAAO,SAAS,OAAO,YAAY,MAAM;AAC3D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KACE,UACA,WACA,MAIU;AACV,UAAM,YAAY,MAAA;AAClB,SAAK,MAAM,IAAI,UAAU,SAAS;AAClC,SAAK,KAAK,GAAG,QAAQ,QAAQ;AAC7B,SAAK,KAAK,WAAW,EAAE,OAAO,SAAS,MAAM;AAC7C,WAAO,CAAC,UAAU,cAAc,OAAO;AACrC,YAAM,aAAa,UAAU;AAC7B,WAAK,MAAM,OAAO,QAAQ;AAC1B,WAAK,KAAK,GAAG,QAAQ,MAAM;AAC3B,WAAK,QAAQ,QAAQ;AACrB,WAAK,KAAK,UAAU;AAAA,QAClB,OAAO,YAAY,UAAU,SAAY,UAAU;AAAA,QACnD;AAAA,QACA,MAAM,YAAY;AAAA,QAClB,OAAO,YAAY;AAAA,MAAA,CACpB;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,MAAc,OAAsB;AACxC,QAAI,KAAK,OAAO,IAAI,MAAM,MAAO;AACjC,SAAK,OAAO,IAAI,IAAI;AACpB,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEA,UAAU,UAAgC;AACxC,SAAK,UAAU,IAAI,QAAQ;AAC3B,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAGG;AACb,WAAO,KAAK,UAAU,CAAC,UAAU;;AAC/B,UAAI;AACF,uBAAS,YAAT,kCAAmB;AAAA,MACrB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AACA,UAAI,MAAM,OAAO;AACf,YAAI;AACF,yBAAS,YAAT,kCAAmB,MAAM,OAAO;AAAA,QAClC,SAAS,eAAe;AACtB,kBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,kBAAkB,UAAkC;AAClD,SAAK,kBAAkB,IAAI,QAAQ;AACnC,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,QAAQ;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,WAAsC;AACpC,QAAI,CAAC,KAAK,gBAAgB;AACxB,YAAM,EAAE,SAAS,UAAU,SAAS,UAAU,GAAG,OAAA,IAAW,KAAK;AACjE,WAAK,iBAAiB;AAAA,QACpB,YAAYC,QAAAA;AAAAA,QACZ;AAAA,QACA,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,QACvB,QAAQ,EAAE,GAAG,KAAK,OAAA;AAAA,QAClB,SAAS,EAAE,GAAG,KAAK,QAAA;AAAA,MAAQ;AAAA,IAE/B;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,SAAiB;AACf,WAAO,KAAK;AAAA,MACV,KAAK,SAAA;AAAA,MACL,CAAC,MAAM,UAAWC,OAAAA,iBAAiB,KAAK,IAAI,MAAM,WAAW;AAAA,MAC7D;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS,CAAA;AACd,SAAK,UAAU,CAAA;AACf,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEQ,aAAmB;AACzB,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEQ,KAAK,MAAoB;AAC/B,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,SAAS,YAAY;AAChF,oBAAY,KAAK,cAAc,IAAI,EAAE;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,QAAQ,UAAwB;AACtC,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,YAAY;AACnF,oBAAY;AAAA,UACV,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,QAAA;AAAA,MAE1B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,cAAc,OAAoC;AACxD,UAAM,QAAQ,KAAK,aAAA;AACnB,QAAI,UAAU,OAAO;AAGnB,UAAI,MAAM,UAAU,WAAW,MAAM,OAAO;AAC1C,gBAAQ,MAAM,GAAG,cAAc,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM,SAAA,CAAU,IAAI,MAAM,QAAQ,EAAE;AAAA,MAC9F;AACA;AAAA,IACF;AACA,QAAI,WAAW,MAAM,KAAK,IAAI,WAAW,KAAK,EAAG;AACjD,UAAM,SAAS,MAAM,eAAe,SAAY,KAAK,MAAM,UAAU,QAAQ;AAC7E,UAAM,OAAO,GAAG,cAAc,IAAI,MAAM,IAAI,GAAG,MAAM;AACrD,UAAM,UAAU,MAAM,QAAQ,EAAE,GAAG,MAAM,MAAM,OAAO,MAAM,MAAM,SAAA,EAAS,IAAM,MAAM;AACvF,UAAM,SACJ,MAAM,UAAU,UACZ,QAAQ,QACR,MAAM,UAAU,SACd,QAAQ,OACR,MAAM,UAAU,UACd,QAAQ,QACR,QAAQ;AAClB,WAAO,MAAM,WAAW,EAAE;AAAA,EAC5B;AAAA,EAEQ,iBAAiB,OAAoC;AAC3D,QAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAI,MAAM,eAAe,UAAa,MAAM,UAAU,QAAS;AAC/D,QAAI;AACF,YAAM,SAASC,gBAAAA,mBAAA;AACfC,4CAAoB,QAAQ,cAAc,MAAM,KAAK,QAAQ,OAAO,GAAG,CAAC,IAAI;AAAA,QAC1E,aAAaH,QAAAA;AAAAA,QACb,OAAO,MAAM;AAAA,QACb,GAAI,MAAM,eAAe,UAAa,EAAE,aAAa,MAAM,WAAA;AAAA,QAC3D,GAAI,MAAM,SAAS;AAAA,UACjB,YAAY,MAAM,MAAM;AAAA,UACxB,eAAe,MAAM,MAAM;AAAA,UAC3B,cAAc,MAAM,MAAM;AAAA,QAAA;AAAA,QAE5B,GAAG,MAAM;AAAA,MAAA,CACV;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,MAAM,oBAAoB,IAAI,qBAAA;AAO9B,SAAS,iCAAuC;AACrD,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,eAAe;AACrB,QAAM,WAAY,aAAa,UAAU,KAAK,CAAA;AAC9C,eAAa,UAAU,IAAI;AAAA,IACzB,GAAG;AAAA,IACH,SAASA,QAAAA;AAAAA,IACT,aAAa;AAAA,MACX,UAAU,MAAM,kBAAkB,SAAA;AAAA,MAClC,QAAQ,MAAM,kBAAkB,OAAA;AAAA,MAChC,OAAO,MAAM,kBAAkB,MAAA;AAAA,MAC/B,eAAe,CAAC,QAA+B,YAAY;AACzD,YAAI;AACF,uBAAa,QAAQ,yBAAyB,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,MACA,gBAAgB,MAAM;AACpB,YAAI;AACF,uBAAa,WAAW,uBAAuB;AAAA,QACjD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,IAAA;AAAA,EACF;AAEJ;AAGO,SAAS,6BACd,OACkC;AAClC,MAAI,UAAU,OAAW,QAAO,CAAA;AAChC,MAAI,UAAU,KAAM,QAAO,EAAE,SAAS,QAAA;AACtC,MAAI,UAAU,MAAO,QAAO,EAAE,SAAS,MAAA;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAA;AACjD,SAAO;AACT;;;;;"}
+{"version":3,"file":"athena-diagnostics.cjs","sources":["../../src/diagnostics/athena-diagnostics.ts"],"sourcesContent":["/**\n * SDK diagnostics: one structured event bus for everything the SDK does that\n * can be slow or can fail — auth acquisition, thread-list fetches, statewire\n * attach/snapshot/connection changes, sends, first tokens, and every error.\n *\n * Design:\n * - Module-level singleton (one SDK, one bus), configured by `AthenaProvider`\n *   from its `debug` / `onDiagnostic` / `onError` props. Nothing here runs\n *   until something calls `emit`, and with defaults it costs a ring-buffer push.\n * - Every event carries `t` (ms since page navigation start via\n *   `performance.now()`) so the buffer reads as a waterfall. Timed spans use\n *   `performance.mark` / `performance.measure` too, so the browser Performance\n *   panel shows them as user timings without any extra tooling.\n * - Console output is opt-in (`debug` prop or `localStorage['athena:debug']`),\n *   prefixed `[AthenaSDK]`, and level-gated. Errors always reach `onError`.\n * - PostHog forwarding (opt-in) sends the timing events as\n *   `athena_sdk_<name>` with `duration_ms`, through the SDK's capture gate.\n *\n * Consumers read the buffer with `useAthenaDiagnostics()` or, in the browser\n * console, `window.__ATHENA_SDK__.diagnostics.snapshot()`.\n */\n\nimport { getPostHogInstance } from '../provider/PostHogProvider';\nimport { capturePosthogEvent, type PosthogCaptureClient } from '../lib/posthog/wrap-posthog-client';\nimport { ATHENA_REACT_SDK_VERSION } from '../version';\nimport { AthenaSdkError, isAthenaSdkError, toAthenaSdkError } from './errors';\n\nexport const ATHENA_DIAGNOSTIC_LEVELS = ['debug', 'info', 'warn', 'error'] as const;\nexport type AthenaDiagnosticLevel = (typeof ATHENA_DIAGNOSTIC_LEVELS)[number];\n\nconst LEVEL_RANK: Record<AthenaDiagnosticLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\n/**\n * Event names. Dotted `area.event` so a consumer can filter by prefix. Names\n * are part of the public contract: renaming one is a breaking change for\n * dashboards, so add new ones instead of repurposing.\n */\nexport type AthenaDiagnosticEventName =\n  // Provider / configuration\n  | 'sdk.init'\n  | 'sdk.transport'\n  | 'sdk.config.warning'\n  // Auth acquisition + lifecycle\n  | 'auth.bridge.start'\n  | 'auth.bridge.ready'\n  | 'auth.bridge.timeout'\n  | 'auth.bridge.absent'\n  | 'auth.bridge.error'\n  | 'auth.bridge.retry'\n  | 'auth.bridge.config_rejected'\n  | 'auth.token.acquired'\n  | 'auth.token.refreshed'\n  | 'auth.token.refresh_failed'\n  | 'auth.token.stale'\n  | 'auth.sso.userinfo.start'\n  | 'auth.sso.userinfo.done'\n  | 'auth.sso.userinfo.error'\n  | 'auth.sso.userinfo.retry'\n  // Thread list + history\n  | 'threads.list.start'\n  | 'threads.list.done'\n  | 'threads.list.error'\n  | 'threads.list.aborted'\n  | 'threads.history.start'\n  | 'threads.history.done'\n  | 'threads.history.error'\n  | 'threads.history.aborted'\n  // Statewire transport\n  | 'statewire.attach.start'\n  | 'statewire.snapshot'\n  | 'statewire.connection'\n  | 'statewire.parked'\n  | 'statewire.error'\n  | 'statewire.read_only'\n  /** A write to the thread's server config lane (`config/patch`) was refused or dropped. */\n  | 'statewire.config'\n  // Runs\n  | 'run.send'\n  | 'run.first_token'\n  | 'run.done'\n  | 'run.error'\n  // Composer\n  | 'composer.attachment.error'\n  | 'composer.cancel.error'\n  | 'composer.dictation'\n  | 'composer.handoff'\n  // Tool UIs + frontend tools\n  | 'tools.schema.warning'\n  | 'tools.debug'\n  // Mention suggestions\n  | 'mentions.fetch.error'\n  // Catch-all\n  | 'sdk.error';\n\nexport interface AthenaDiagnosticEvent {\n  /** Monotonic sequence number within this page. */\n  seq: number;\n  /** `performance.now()` at emit time (ms since navigation start). */\n  t: number;\n  /** Wall-clock ISO timestamp, for exports. */\n  at: string;\n  name: AthenaDiagnosticEventName;\n  level: AthenaDiagnosticLevel;\n  /** Milliseconds for a completed span (set on `*.done` / `*.ready` / `run.first_token`). */\n  durationMs?: number;\n  /** Structured context. Never contains credentials — see `redact`. */\n  data?: Record<string, unknown>;\n  /** Present on error-level events. */\n  error?: AthenaSdkError;\n}\n\nexport interface AthenaDiagnosticsConfig {\n  /** Minimum level echoed to the console. `false` disables console output. */\n  console: AthenaDiagnosticLevel | false;\n  /** Forward timing + error events to PostHog as `athena_sdk_*` events. */\n  posthog: boolean;\n  /** Receives every event (already redacted). */\n  onEvent?: (event: AthenaDiagnosticEvent) => void;\n  /** Receives every error-level event's `AthenaSdkError`. */\n  onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  /** Ring-buffer capacity. */\n  bufferSize: number;\n}\n\nexport interface AthenaDiagnosticsSnapshot {\n  sdkVersion: string;\n  config: Omit<AthenaDiagnosticsConfig, 'onEvent' | 'onError'>;\n  events: AthenaDiagnosticEvent[];\n  /** Latest value per gauge (connection status, transport, auth mode, …). */\n  gauges: Record<string, unknown>;\n  /** Named span durations, most recent per name (`auth.bridge`, `threads.list`, …). */\n  timings: Record<string, number>;\n}\n\nconst DEFAULT_CONFIG: AthenaDiagnosticsConfig = {\n  console: false,\n  posthog: false,\n  bufferSize: 300,\n};\n\nconst CONSOLE_PREFIX = '[AthenaSDK]';\nconst LOCAL_STORAGE_DEBUG_KEY = 'athena:debug';\nconst GLOBAL_KEY = '__ATHENA_SDK__';\n\n// Keys whose values must never enter the buffer, the console, or PostHog.\nconst REDACT_KEYS = /token|secret|api[-_]?key|authorization|cookie|password/i;\n\nfunction redact(data: Record<string, unknown> | undefined): Record<string, unknown> | undefined {\n  if (!data) return undefined;\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (REDACT_KEYS.test(key)) {\n      out[key] = typeof value === 'string' && value.length > 0 ? `<redacted:${value.length}>` : '<redacted>';\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' && typeof performance.now === 'function'\n    ? performance.now()\n    : Date.now();\n}\n\nfunction readLocalDebugLevel(): AthenaDiagnosticLevel | null {\n  try {\n    if (typeof localStorage === 'undefined') return null;\n    const raw = localStorage.getItem(LOCAL_STORAGE_DEBUG_KEY);\n    if (!raw) return null;\n    if ((ATHENA_DIAGNOSTIC_LEVELS as readonly string[]).includes(raw)) {\n      return raw as AthenaDiagnosticLevel;\n    }\n    return raw === '1' || raw === 'true' ? 'debug' : null;\n  } catch {\n    return null;\n  }\n}\n\ntype Listener = (event: AthenaDiagnosticEvent) => void;\n\nclass AthenaDiagnosticsBus {\n  private config: AthenaDiagnosticsConfig = { ...DEFAULT_CONFIG };\n  private events: AthenaDiagnosticEvent[] = [];\n  private listeners = new Set<Listener>();\n  private snapshotListeners = new Set<() => void>();\n  private seq = 0;\n  private gauges: Record<string, unknown> = {};\n  private timings: Record<string, number> = {};\n  private spans = new Map<string, number>();\n  private cachedSnapshot: AthenaDiagnosticsSnapshot | null = null;\n\n  configure(partial: Partial<AthenaDiagnosticsConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.events.length > this.config.bufferSize) {\n      this.events = this.events.slice(-this.config.bufferSize);\n    }\n    this.invalidate();\n  }\n\n  getConfig(): AthenaDiagnosticsConfig {\n    return this.config;\n  }\n\n  /** Effective console level: the configured one, or `localStorage['athena:debug']`. */\n  private consoleLevel(): AthenaDiagnosticLevel | false {\n    if (this.config.console !== false) return this.config.console;\n    return readLocalDebugLevel() ?? false;\n  }\n\n  emit(\n    name: AthenaDiagnosticEventName,\n    options: {\n      level?: AthenaDiagnosticLevel;\n      data?: Record<string, unknown>;\n      durationMs?: number;\n      error?: unknown;\n    } = {},\n  ): AthenaDiagnosticEvent {\n    const level = options.level ?? (options.error !== undefined ? 'error' : 'info');\n    const error =\n      options.error === undefined\n        ? undefined\n        : toAthenaSdkError(options.error, {\n            code: 'unknown',\n            message: `Unexpected error during ${name}`,\n          });\n    const event: AthenaDiagnosticEvent = {\n      seq: ++this.seq,\n      t: Math.round(nowMs() * 10) / 10,\n      at: new Date().toISOString(),\n      name,\n      level,\n      ...(options.durationMs !== undefined && { durationMs: Math.round(options.durationMs) }),\n      ...(options.data && { data: redact(options.data) }),\n      ...(error && { error }),\n    };\n\n    this.events.push(event);\n    if (this.events.length > this.config.bufferSize) {\n      this.events.splice(0, this.events.length - this.config.bufferSize);\n    }\n    if (event.durationMs !== undefined) {\n      this.timings[name] = event.durationMs;\n    }\n    this.invalidate();\n\n    this.echoToConsole(event);\n    this.forwardToPostHog(event);\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch (listenerError) {\n        console.error(`${CONSOLE_PREFIX} diagnostics listener threw`, listenerError);\n      }\n    }\n    if (this.config.onEvent) {\n      try {\n        this.config.onEvent(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic callback threw`, callbackError);\n      }\n    }\n    if (error && this.config.onError) {\n      try {\n        this.config.onError(error, event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onError callback threw`, callbackError);\n      }\n    }\n    for (const notify of this.snapshotListeners) notify();\n    return event;\n  }\n\n  /** Record an error-level event. Returns the normalized `AthenaSdkError`. */\n  error(\n    name: AthenaDiagnosticEventName,\n    error: unknown,\n    fallback: { code: AthenaSdkError['code']; message: string; hint?: string },\n    data?: Record<string, unknown>,\n  ): AthenaSdkError {\n    const normalized = toAthenaSdkError(error, fallback);\n    this.emit(name, { level: 'error', error: normalized, data });\n    return normalized;\n  }\n\n  /**\n   * Start a named span. Returns a function that ends it and emits `doneName`\n   * with `durationMs` (or `errorName` when passed an error). Also records a\n   * `performance.measure` so the span shows in the browser's Performance panel.\n   */\n  span(\n    spanName: string,\n    startName: AthenaDiagnosticEventName,\n    data?: Record<string, unknown>,\n  ): (\n    doneName: AthenaDiagnosticEventName,\n    doneOptions?: { data?: Record<string, unknown>; error?: unknown },\n  ) => number {\n    const startedAt = nowMs();\n    this.spans.set(spanName, startedAt);\n    this.mark(`${spanName}:start`);\n    this.emit(startName, { level: 'debug', data });\n    return (doneName, doneOptions = {}) => {\n      const durationMs = nowMs() - startedAt;\n      this.spans.delete(spanName);\n      this.mark(`${spanName}:end`);\n      this.measure(spanName);\n      this.emit(doneName, {\n        level: doneOptions.error !== undefined ? 'error' : 'info',\n        durationMs,\n        data: doneOptions.data,\n        error: doneOptions.error,\n      });\n      return durationMs;\n    };\n  }\n\n  /** Set a gauge (latest-value metric): connection status, transport, auth mode. */\n  gauge(name: string, value: unknown): void {\n    if (this.gauges[name] === value) return;\n    this.gauges[name] = value;\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  subscribe(listener: Listener): () => void {\n    this.listeners.add(listener);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /**\n   * Additive consumer registration: every registered consumer receives every\n   * event (and every error), unlike the single `onEvent`/`onError` config\n   * slots which are last-writer-wins. `AthenaProvider` registers through this\n   * so two mounted providers never clobber each other's callbacks.\n   */\n  addConsumer(consumer: {\n    onEvent?: (event: AthenaDiagnosticEvent) => void;\n    onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  }): () => void {\n    return this.subscribe((event) => {\n      try {\n        consumer.onEvent?.(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic consumer threw`, callbackError);\n      }\n      if (event.error) {\n        try {\n          consumer.onError?.(event.error, event);\n        } catch (callbackError) {\n          console.error(`${CONSOLE_PREFIX} onError consumer threw`, callbackError);\n        }\n      }\n    });\n  }\n\n  /** Subscribe to snapshot changes (for `useSyncExternalStore`). */\n  subscribeSnapshot(listener: () => void): () => void {\n    this.snapshotListeners.add(listener);\n    return () => {\n      this.snapshotListeners.delete(listener);\n    };\n  }\n\n  snapshot(): AthenaDiagnosticsSnapshot {\n    if (!this.cachedSnapshot) {\n      const { onEvent: _onEvent, onError: _onError, ...config } = this.config;\n      this.cachedSnapshot = {\n        sdkVersion: ATHENA_REACT_SDK_VERSION,\n        config,\n        events: [...this.events],\n        gauges: { ...this.gauges },\n        timings: { ...this.timings },\n      };\n    }\n    return this.cachedSnapshot;\n  }\n\n  /** Copy-paste-able JSON of the current snapshot (errors serialized). */\n  export(): string {\n    return JSON.stringify(\n      this.snapshot(),\n      (_key, value) => (isAthenaSdkError(value) ? value.toJSON() : value),\n      2,\n    );\n  }\n\n  clear(): void {\n    this.events = [];\n    this.timings = {};\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  private invalidate(): void {\n    this.cachedSnapshot = null;\n  }\n\n  private mark(name: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.mark === 'function') {\n        performance.mark(`athena-sdk:${name}`);\n      }\n    } catch {\n      // User Timing is best-effort.\n    }\n  }\n\n  private measure(spanName: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.measure === 'function') {\n        performance.measure(\n          `athena-sdk:${spanName}`,\n          `athena-sdk:${spanName}:start`,\n          `athena-sdk:${spanName}:end`,\n        );\n      }\n    } catch {\n      // A missing start mark (e.g. after `performance.clearMarks`) is not an error.\n    }\n  }\n\n  private echoToConsole(event: AthenaDiagnosticEvent): void {\n    const level = this.consoleLevel();\n    if (level === false) {\n      // Errors are never silent: with console output off they still log once,\n      // compactly, so a broken integration is visible without enabling debug.\n      if (event.level === 'error' && event.error) {\n        console.error(`${CONSOLE_PREFIX} ${event.name}: ${event.error.describe()}`, event.data ?? '');\n      }\n      return;\n    }\n    if (LEVEL_RANK[event.level] < LEVEL_RANK[level]) return;\n    const suffix = event.durationMs !== undefined ? ` (${event.durationMs}ms)` : '';\n    const line = `${CONSOLE_PREFIX} ${event.name}${suffix}`;\n    const payload = event.error ? { ...event.data, error: event.error.describe() } : event.data;\n    const method =\n      event.level === 'error'\n        ? console.error\n        : event.level === 'warn'\n          ? console.warn\n          : event.level === 'debug'\n            ? console.debug\n            : console.info;\n    method(line, payload ?? '');\n  }\n\n  private forwardToPostHog(event: AthenaDiagnosticEvent): void {\n    if (!this.config.posthog) return;\n    if (event.durationMs === undefined && event.level !== 'error') return;\n    try {\n      const client = getPostHogInstance<PosthogCaptureClient>();\n      capturePosthogEvent(client, `athena_sdk_${event.name.replace(/\\./g, '_')}`, {\n        sdk_version: ATHENA_REACT_SDK_VERSION,\n        level: event.level,\n        ...(event.durationMs !== undefined && { duration_ms: event.durationMs }),\n        ...(event.error && {\n          error_code: event.error.code,\n          error_message: event.error.message,\n          error_status: event.error.status,\n        }),\n        ...event.data,\n      });\n    } catch {\n      // Analytics must never break the chat.\n    }\n  }\n}\n\nexport const athenaDiagnostics = new AthenaDiagnosticsBus();\n\n/**\n * Expose the bus on `window.__ATHENA_SDK__` so an integrator can inspect the\n * waterfall from the console (`__ATHENA_SDK__.diagnostics.snapshot()`) or turn\n * console echo on without a rebuild (`localStorage.setItem('athena:debug','debug')`).\n */\nexport function installAthenaDiagnosticsGlobal(): void {\n  if (typeof window === 'undefined') return;\n  const globalWindow = window as unknown as Record<string, unknown>;\n  const existing = (globalWindow[GLOBAL_KEY] ?? {}) as Record<string, unknown>;\n  globalWindow[GLOBAL_KEY] = {\n    ...existing,\n    version: ATHENA_REACT_SDK_VERSION,\n    diagnostics: {\n      snapshot: () => athenaDiagnostics.snapshot(),\n      export: () => athenaDiagnostics.export(),\n      clear: () => athenaDiagnostics.clear(),\n      enableConsole: (level: AthenaDiagnosticLevel = 'debug') => {\n        try {\n          localStorage.setItem(LOCAL_STORAGE_DEBUG_KEY, level);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: level });\n      },\n      disableConsole: () => {\n        try {\n          localStorage.removeItem(LOCAL_STORAGE_DEBUG_KEY);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: false });\n      },\n    },\n  };\n}\n\n/** Normalize the provider's `debug` prop into a diagnostics config patch. */\nexport function debugPropToDiagnosticsConfig(\n  debug: boolean | AthenaDiagnosticLevel | Partial<AthenaDiagnosticsConfig> | undefined,\n): Partial<AthenaDiagnosticsConfig> {\n  if (debug === undefined) return {};\n  if (debug === true) return { console: 'debug' };\n  if (debug === false) return { console: false };\n  if (typeof debug === 'string') return { console: debug };\n  return debug;\n}\n"],"names":["toAthenaSdkError","ATHENA_REACT_SDK_VERSION","isAthenaSdkError","getPostHogInstance","capturePosthogEvent"],"mappings":";;;;;;;;;AA2BO,MAAM,2BAA2B,CAAC,SAAS,QAAQ,QAAQ,OAAO;AAGzE,MAAM,aAAoD;AAAA,EACxD,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAwGA,MAAM,iBAA0C;AAAA,EAC9C,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AACd;AAEA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAChC,MAAM,aAAa;AAGnB,MAAM,cAAc;AAEpB,SAAS,OAAO,MAAgF;AAC9F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAA+B,CAAA;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,YAAY,KAAK,GAAG,GAAG;AACzB,UAAI,GAAG,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,aAAa,MAAM,MAAM,MAAM;AAAA,IAC5F,OAAO;AACL,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,eAAe,OAAO,YAAY,QAAQ,aACpE,YAAY,QACZ,KAAK,IAAA;AACX;AAEA,SAAS,sBAAoD;AAC3D,MAAI;AACF,QAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,UAAM,MAAM,aAAa,QAAQ,uBAAuB;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,QAAK,yBAA+C,SAAS,GAAG,GAAG;AACjE,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,MAAM,qBAAqB;AAAA,EAA3B;AACU,kCAAkC,EAAE,GAAG,eAAA;AACvC,kCAAkC,CAAA;AAClC,yDAAgB,IAAA;AAChB,iEAAwB,IAAA;AACxB,+BAAM;AACN,kCAAkC,CAAA;AAClC,mCAAkC,CAAA;AAClC,qDAAY,IAAA;AACZ,0CAAmD;AAAA;AAAA,EAE3D,UAAU,SAAiD;AACzD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,QAAA;AACnC,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,SAAS,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,UAAU;AAAA,IACzD;AACA,SAAK,WAAA;AAAA,EACP;AAAA,EAEA,YAAqC;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGQ,eAA8C;AACpD,QAAI,KAAK,OAAO,YAAY,MAAO,QAAO,KAAK,OAAO;AACtD,WAAO,yBAAyB;AAAA,EAClC;AAAA,EAEA,KACE,MACA,UAKI,IACmB;AACvB,UAAM,QAAQ,QAAQ,UAAU,QAAQ,UAAU,SAAY,UAAU;AACxE,UAAM,QACJ,QAAQ,UAAU,SACd,SACAA,OAAAA,iBAAiB,QAAQ,OAAO;AAAA,MAC9B,MAAM;AAAA,MACN,SAAS,2BAA2B,IAAI;AAAA,IAAA,CACzC;AACP,UAAM,QAA+B;AAAA,MACnC,KAAK,EAAE,KAAK;AAAA,MACZ,GAAG,KAAK,MAAM,MAAA,IAAU,EAAE,IAAI;AAAA,MAC9B,KAAI,oBAAI,KAAA,GAAO,YAAA;AAAA,MACf;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,KAAK,MAAM,QAAQ,UAAU,EAAA;AAAA,MACnF,GAAI,QAAQ,QAAQ,EAAE,MAAM,OAAO,QAAQ,IAAI,EAAA;AAAA,MAC/C,GAAI,SAAS,EAAE,MAAA;AAAA,IAAM;AAGvB,SAAK,OAAO,KAAK,KAAK;AACtB,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,OAAO,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,OAAO,UAAU;AAAA,IACnE;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AACA,SAAK,WAAA;AAEL,SAAK,cAAc,KAAK;AACxB,SAAK,iBAAiB,KAAK;AAC3B,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,+BAA+B,aAAa;AAAA,MAC7E;AAAA,IACF;AACA,QAAI,KAAK,OAAO,SAAS;AACvB,UAAI;AACF,aAAK,OAAO,QAAQ,KAAK;AAAA,MAC3B,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AAAA,IACF;AACA,QAAI,SAAS,KAAK,OAAO,SAAS;AAChC,UAAI;AACF,aAAK,OAAO,QAAQ,OAAO,KAAK;AAAA,MAClC,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,MACzE;AAAA,IACF;AACA,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAC7C,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MACE,MACA,OACA,UACA,MACgB;AAChB,UAAM,aAAaA,OAAAA,iBAAiB,OAAO,QAAQ;AACnD,SAAK,KAAK,MAAM,EAAE,OAAO,SAAS,OAAO,YAAY,MAAM;AAC3D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KACE,UACA,WACA,MAIU;AACV,UAAM,YAAY,MAAA;AAClB,SAAK,MAAM,IAAI,UAAU,SAAS;AAClC,SAAK,KAAK,GAAG,QAAQ,QAAQ;AAC7B,SAAK,KAAK,WAAW,EAAE,OAAO,SAAS,MAAM;AAC7C,WAAO,CAAC,UAAU,cAAc,OAAO;AACrC,YAAM,aAAa,UAAU;AAC7B,WAAK,MAAM,OAAO,QAAQ;AAC1B,WAAK,KAAK,GAAG,QAAQ,MAAM;AAC3B,WAAK,QAAQ,QAAQ;AACrB,WAAK,KAAK,UAAU;AAAA,QAClB,OAAO,YAAY,UAAU,SAAY,UAAU;AAAA,QACnD;AAAA,QACA,MAAM,YAAY;AAAA,QAClB,OAAO,YAAY;AAAA,MAAA,CACpB;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,MAAc,OAAsB;AACxC,QAAI,KAAK,OAAO,IAAI,MAAM,MAAO;AACjC,SAAK,OAAO,IAAI,IAAI;AACpB,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEA,UAAU,UAAgC;AACxC,SAAK,UAAU,IAAI,QAAQ;AAC3B,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAGG;AACb,WAAO,KAAK,UAAU,CAAC,UAAU;;AAC/B,UAAI;AACF,uBAAS,YAAT,kCAAmB;AAAA,MACrB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AACA,UAAI,MAAM,OAAO;AACf,YAAI;AACF,yBAAS,YAAT,kCAAmB,MAAM,OAAO;AAAA,QAClC,SAAS,eAAe;AACtB,kBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,kBAAkB,UAAkC;AAClD,SAAK,kBAAkB,IAAI,QAAQ;AACnC,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,QAAQ;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,WAAsC;AACpC,QAAI,CAAC,KAAK,gBAAgB;AACxB,YAAM,EAAE,SAAS,UAAU,SAAS,UAAU,GAAG,OAAA,IAAW,KAAK;AACjE,WAAK,iBAAiB;AAAA,QACpB,YAAYC,QAAAA;AAAAA,QACZ;AAAA,QACA,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,QACvB,QAAQ,EAAE,GAAG,KAAK,OAAA;AAAA,QAClB,SAAS,EAAE,GAAG,KAAK,QAAA;AAAA,MAAQ;AAAA,IAE/B;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,SAAiB;AACf,WAAO,KAAK;AAAA,MACV,KAAK,SAAA;AAAA,MACL,CAAC,MAAM,UAAWC,OAAAA,iBAAiB,KAAK,IAAI,MAAM,WAAW;AAAA,MAC7D;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS,CAAA;AACd,SAAK,UAAU,CAAA;AACf,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEQ,aAAmB;AACzB,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEQ,KAAK,MAAoB;AAC/B,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,SAAS,YAAY;AAChF,oBAAY,KAAK,cAAc,IAAI,EAAE;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,QAAQ,UAAwB;AACtC,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,YAAY;AACnF,oBAAY;AAAA,UACV,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,QAAA;AAAA,MAE1B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,cAAc,OAAoC;AACxD,UAAM,QAAQ,KAAK,aAAA;AACnB,QAAI,UAAU,OAAO;AAGnB,UAAI,MAAM,UAAU,WAAW,MAAM,OAAO;AAC1C,gBAAQ,MAAM,GAAG,cAAc,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM,SAAA,CAAU,IAAI,MAAM,QAAQ,EAAE;AAAA,MAC9F;AACA;AAAA,IACF;AACA,QAAI,WAAW,MAAM,KAAK,IAAI,WAAW,KAAK,EAAG;AACjD,UAAM,SAAS,MAAM,eAAe,SAAY,KAAK,MAAM,UAAU,QAAQ;AAC7E,UAAM,OAAO,GAAG,cAAc,IAAI,MAAM,IAAI,GAAG,MAAM;AACrD,UAAM,UAAU,MAAM,QAAQ,EAAE,GAAG,MAAM,MAAM,OAAO,MAAM,MAAM,SAAA,EAAS,IAAM,MAAM;AACvF,UAAM,SACJ,MAAM,UAAU,UACZ,QAAQ,QACR,MAAM,UAAU,SACd,QAAQ,OACR,MAAM,UAAU,UACd,QAAQ,QACR,QAAQ;AAClB,WAAO,MAAM,WAAW,EAAE;AAAA,EAC5B;AAAA,EAEQ,iBAAiB,OAAoC;AAC3D,QAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAI,MAAM,eAAe,UAAa,MAAM,UAAU,QAAS;AAC/D,QAAI;AACF,YAAM,SAASC,gBAAAA,mBAAA;AACfC,4CAAoB,QAAQ,cAAc,MAAM,KAAK,QAAQ,OAAO,GAAG,CAAC,IAAI;AAAA,QAC1E,aAAaH,QAAAA;AAAAA,QACb,OAAO,MAAM;AAAA,QACb,GAAI,MAAM,eAAe,UAAa,EAAE,aAAa,MAAM,WAAA;AAAA,QAC3D,GAAI,MAAM,SAAS;AAAA,UACjB,YAAY,MAAM,MAAM;AAAA,UACxB,eAAe,MAAM,MAAM;AAAA,UAC3B,cAAc,MAAM,MAAM;AAAA,QAAA;AAAA,QAE5B,GAAG,MAAM;AAAA,MAAA,CACV;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,MAAM,oBAAoB,IAAI,qBAAA;AAO9B,SAAS,iCAAuC;AACrD,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,eAAe;AACrB,QAAM,WAAY,aAAa,UAAU,KAAK,CAAA;AAC9C,eAAa,UAAU,IAAI;AAAA,IACzB,GAAG;AAAA,IACH,SAASA,QAAAA;AAAAA,IACT,aAAa;AAAA,MACX,UAAU,MAAM,kBAAkB,SAAA;AAAA,MAClC,QAAQ,MAAM,kBAAkB,OAAA;AAAA,MAChC,OAAO,MAAM,kBAAkB,MAAA;AAAA,MAC/B,eAAe,CAAC,QAA+B,YAAY;AACzD,YAAI;AACF,uBAAa,QAAQ,yBAAyB,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,MACA,gBAAgB,MAAM;AACpB,YAAI;AACF,uBAAa,WAAW,uBAAuB;AAAA,QACjD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,IAAA;AAAA,EACF;AAEJ;AAGO,SAAS,6BACd,OACkC;AAClC,MAAI,UAAU,OAAW,QAAO,CAAA;AAChC,MAAI,UAAU,KAAM,QAAO,EAAE,SAAS,QAAA;AACtC,MAAI,UAAU,MAAO,QAAO,EAAE,SAAS,MAAA;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAA;AACjD,SAAO;AACT;;;;;"}

package/dist/diagnostics/athena-diagnostics.d.ts

@@ -27,7 +27,7 @@ export type AthenaDiagnosticLevel = (typeof ATHENA_DIAGNOSTIC_LEVELS)[number];
  * are part of the public contract: renaming one is a breaking change for
  * dashboards, so add new ones instead of repurposing.
  */
-export type AthenaDiagnosticEventName = 'sdk.init' | 'sdk.transport' | 'sdk.config.warning' | 'auth.bridge.start' | 'auth.bridge.ready' | 'auth.bridge.timeout' | 'auth.bridge.absent' | 'auth.bridge.error' | 'auth.bridge.retry' | 'auth.bridge.config_rejected' | 'auth.token.acquired' | 'auth.token.refreshed' | 'auth.token.refresh_failed' | 'auth.token.stale' | 'auth.sso.userinfo.start' | 'auth.sso.userinfo.done' | 'auth.sso.userinfo.error' | 'threads.list.start' | 'threads.list.done' | 'threads.list.error' | 'threads.list.aborted' | 'threads.history.start' | 'threads.history.done' | 'threads.history.error' | 'threads.history.aborted' | 'statewire.attach.start' | 'statewire.snapshot' | 'statewire.connection' | 'statewire.parked' | 'statewire.error' | 'statewire.read_only'
+export type AthenaDiagnosticEventName = 'sdk.init' | 'sdk.transport' | 'sdk.config.warning' | 'auth.bridge.start' | 'auth.bridge.ready' | 'auth.bridge.timeout' | 'auth.bridge.absent' | 'auth.bridge.error' | 'auth.bridge.retry' | 'auth.bridge.config_rejected' | 'auth.token.acquired' | 'auth.token.refreshed' | 'auth.token.refresh_failed' | 'auth.token.stale' | 'auth.sso.userinfo.start' | 'auth.sso.userinfo.done' | 'auth.sso.userinfo.error' | 'auth.sso.userinfo.retry' | 'threads.list.start' | 'threads.list.done' | 'threads.list.error' | 'threads.list.aborted' | 'threads.history.start' | 'threads.history.done' | 'threads.history.error' | 'threads.history.aborted' | 'statewire.attach.start' | 'statewire.snapshot' | 'statewire.connection' | 'statewire.parked' | 'statewire.error' | 'statewire.read_only'
 /** A write to the thread's server config lane (`config/patch`) was refused or dropped. */
  | 'statewire.config' | 'run.send' | 'run.first_token' | 'run.done' | 'run.error' | 'composer.attachment.error' | 'composer.cancel.error' | 'composer.dictation' | 'composer.handoff' | 'tools.schema.warning' | 'tools.debug' | 'mentions.fetch.error' | 'sdk.error';
 export interface AthenaDiagnosticEvent {

package/dist/diagnostics/athena-diagnostics.js.map

@@ -1 +1 @@
-{"version":3,"file":"athena-diagnostics.js","sources":["../../src/diagnostics/athena-diagnostics.ts"],"sourcesContent":["/**\n * SDK diagnostics: one structured event bus for everything the SDK does that\n * can be slow or can fail — auth acquisition, thread-list fetches, statewire\n * attach/snapshot/connection changes, sends, first tokens, and every error.\n *\n * Design:\n * - Module-level singleton (one SDK, one bus), configured by `AthenaProvider`\n *   from its `debug` / `onDiagnostic` / `onError` props. Nothing here runs\n *   until something calls `emit`, and with defaults it costs a ring-buffer push.\n * - Every event carries `t` (ms since page navigation start via\n *   `performance.now()`) so the buffer reads as a waterfall. Timed spans use\n *   `performance.mark` / `performance.measure` too, so the browser Performance\n *   panel shows them as user timings without any extra tooling.\n * - Console output is opt-in (`debug` prop or `localStorage['athena:debug']`),\n *   prefixed `[AthenaSDK]`, and level-gated. Errors always reach `onError`.\n * - PostHog forwarding (opt-in) sends the timing events as\n *   `athena_sdk_<name>` with `duration_ms`, through the SDK's capture gate.\n *\n * Consumers read the buffer with `useAthenaDiagnostics()` or, in the browser\n * console, `window.__ATHENA_SDK__.diagnostics.snapshot()`.\n */\n\nimport { getPostHogInstance } from '../provider/PostHogProvider';\nimport { capturePosthogEvent, type PosthogCaptureClient } from '../lib/posthog/wrap-posthog-client';\nimport { ATHENA_REACT_SDK_VERSION } from '../version';\nimport { AthenaSdkError, isAthenaSdkError, toAthenaSdkError } from './errors';\n\nexport const ATHENA_DIAGNOSTIC_LEVELS = ['debug', 'info', 'warn', 'error'] as const;\nexport type AthenaDiagnosticLevel = (typeof ATHENA_DIAGNOSTIC_LEVELS)[number];\n\nconst LEVEL_RANK: Record<AthenaDiagnosticLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\n/**\n * Event names. Dotted `area.event` so a consumer can filter by prefix. Names\n * are part of the public contract: renaming one is a breaking change for\n * dashboards, so add new ones instead of repurposing.\n */\nexport type AthenaDiagnosticEventName =\n  // Provider / configuration\n  | 'sdk.init'\n  | 'sdk.transport'\n  | 'sdk.config.warning'\n  // Auth acquisition + lifecycle\n  | 'auth.bridge.start'\n  | 'auth.bridge.ready'\n  | 'auth.bridge.timeout'\n  | 'auth.bridge.absent'\n  | 'auth.bridge.error'\n  | 'auth.bridge.retry'\n  | 'auth.bridge.config_rejected'\n  | 'auth.token.acquired'\n  | 'auth.token.refreshed'\n  | 'auth.token.refresh_failed'\n  | 'auth.token.stale'\n  | 'auth.sso.userinfo.start'\n  | 'auth.sso.userinfo.done'\n  | 'auth.sso.userinfo.error'\n  // Thread list + history\n  | 'threads.list.start'\n  | 'threads.list.done'\n  | 'threads.list.error'\n  | 'threads.list.aborted'\n  | 'threads.history.start'\n  | 'threads.history.done'\n  | 'threads.history.error'\n  | 'threads.history.aborted'\n  // Statewire transport\n  | 'statewire.attach.start'\n  | 'statewire.snapshot'\n  | 'statewire.connection'\n  | 'statewire.parked'\n  | 'statewire.error'\n  | 'statewire.read_only'\n  /** A write to the thread's server config lane (`config/patch`) was refused or dropped. */\n  | 'statewire.config'\n  // Runs\n  | 'run.send'\n  | 'run.first_token'\n  | 'run.done'\n  | 'run.error'\n  // Composer\n  | 'composer.attachment.error'\n  | 'composer.cancel.error'\n  | 'composer.dictation'\n  | 'composer.handoff'\n  // Tool UIs + frontend tools\n  | 'tools.schema.warning'\n  | 'tools.debug'\n  // Mention suggestions\n  | 'mentions.fetch.error'\n  // Catch-all\n  | 'sdk.error';\n\nexport interface AthenaDiagnosticEvent {\n  /** Monotonic sequence number within this page. */\n  seq: number;\n  /** `performance.now()` at emit time (ms since navigation start). */\n  t: number;\n  /** Wall-clock ISO timestamp, for exports. */\n  at: string;\n  name: AthenaDiagnosticEventName;\n  level: AthenaDiagnosticLevel;\n  /** Milliseconds for a completed span (set on `*.done` / `*.ready` / `run.first_token`). */\n  durationMs?: number;\n  /** Structured context. Never contains credentials — see `redact`. */\n  data?: Record<string, unknown>;\n  /** Present on error-level events. */\n  error?: AthenaSdkError;\n}\n\nexport interface AthenaDiagnosticsConfig {\n  /** Minimum level echoed to the console. `false` disables console output. */\n  console: AthenaDiagnosticLevel | false;\n  /** Forward timing + error events to PostHog as `athena_sdk_*` events. */\n  posthog: boolean;\n  /** Receives every event (already redacted). */\n  onEvent?: (event: AthenaDiagnosticEvent) => void;\n  /** Receives every error-level event's `AthenaSdkError`. */\n  onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  /** Ring-buffer capacity. */\n  bufferSize: number;\n}\n\nexport interface AthenaDiagnosticsSnapshot {\n  sdkVersion: string;\n  config: Omit<AthenaDiagnosticsConfig, 'onEvent' | 'onError'>;\n  events: AthenaDiagnosticEvent[];\n  /** Latest value per gauge (connection status, transport, auth mode, …). */\n  gauges: Record<string, unknown>;\n  /** Named span durations, most recent per name (`auth.bridge`, `threads.list`, …). */\n  timings: Record<string, number>;\n}\n\nconst DEFAULT_CONFIG: AthenaDiagnosticsConfig = {\n  console: false,\n  posthog: false,\n  bufferSize: 300,\n};\n\nconst CONSOLE_PREFIX = '[AthenaSDK]';\nconst LOCAL_STORAGE_DEBUG_KEY = 'athena:debug';\nconst GLOBAL_KEY = '__ATHENA_SDK__';\n\n// Keys whose values must never enter the buffer, the console, or PostHog.\nconst REDACT_KEYS = /token|secret|api[-_]?key|authorization|cookie|password/i;\n\nfunction redact(data: Record<string, unknown> | undefined): Record<string, unknown> | undefined {\n  if (!data) return undefined;\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (REDACT_KEYS.test(key)) {\n      out[key] = typeof value === 'string' && value.length > 0 ? `<redacted:${value.length}>` : '<redacted>';\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' && typeof performance.now === 'function'\n    ? performance.now()\n    : Date.now();\n}\n\nfunction readLocalDebugLevel(): AthenaDiagnosticLevel | null {\n  try {\n    if (typeof localStorage === 'undefined') return null;\n    const raw = localStorage.getItem(LOCAL_STORAGE_DEBUG_KEY);\n    if (!raw) return null;\n    if ((ATHENA_DIAGNOSTIC_LEVELS as readonly string[]).includes(raw)) {\n      return raw as AthenaDiagnosticLevel;\n    }\n    return raw === '1' || raw === 'true' ? 'debug' : null;\n  } catch {\n    return null;\n  }\n}\n\ntype Listener = (event: AthenaDiagnosticEvent) => void;\n\nclass AthenaDiagnosticsBus {\n  private config: AthenaDiagnosticsConfig = { ...DEFAULT_CONFIG };\n  private events: AthenaDiagnosticEvent[] = [];\n  private listeners = new Set<Listener>();\n  private snapshotListeners = new Set<() => void>();\n  private seq = 0;\n  private gauges: Record<string, unknown> = {};\n  private timings: Record<string, number> = {};\n  private spans = new Map<string, number>();\n  private cachedSnapshot: AthenaDiagnosticsSnapshot | null = null;\n\n  configure(partial: Partial<AthenaDiagnosticsConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.events.length > this.config.bufferSize) {\n      this.events = this.events.slice(-this.config.bufferSize);\n    }\n    this.invalidate();\n  }\n\n  getConfig(): AthenaDiagnosticsConfig {\n    return this.config;\n  }\n\n  /** Effective console level: the configured one, or `localStorage['athena:debug']`. */\n  private consoleLevel(): AthenaDiagnosticLevel | false {\n    if (this.config.console !== false) return this.config.console;\n    return readLocalDebugLevel() ?? false;\n  }\n\n  emit(\n    name: AthenaDiagnosticEventName,\n    options: {\n      level?: AthenaDiagnosticLevel;\n      data?: Record<string, unknown>;\n      durationMs?: number;\n      error?: unknown;\n    } = {},\n  ): AthenaDiagnosticEvent {\n    const level = options.level ?? (options.error !== undefined ? 'error' : 'info');\n    const error =\n      options.error === undefined\n        ? undefined\n        : toAthenaSdkError(options.error, {\n            code: 'unknown',\n            message: `Unexpected error during ${name}`,\n          });\n    const event: AthenaDiagnosticEvent = {\n      seq: ++this.seq,\n      t: Math.round(nowMs() * 10) / 10,\n      at: new Date().toISOString(),\n      name,\n      level,\n      ...(options.durationMs !== undefined && { durationMs: Math.round(options.durationMs) }),\n      ...(options.data && { data: redact(options.data) }),\n      ...(error && { error }),\n    };\n\n    this.events.push(event);\n    if (this.events.length > this.config.bufferSize) {\n      this.events.splice(0, this.events.length - this.config.bufferSize);\n    }\n    if (event.durationMs !== undefined) {\n      this.timings[name] = event.durationMs;\n    }\n    this.invalidate();\n\n    this.echoToConsole(event);\n    this.forwardToPostHog(event);\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch (listenerError) {\n        console.error(`${CONSOLE_PREFIX} diagnostics listener threw`, listenerError);\n      }\n    }\n    if (this.config.onEvent) {\n      try {\n        this.config.onEvent(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic callback threw`, callbackError);\n      }\n    }\n    if (error && this.config.onError) {\n      try {\n        this.config.onError(error, event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onError callback threw`, callbackError);\n      }\n    }\n    for (const notify of this.snapshotListeners) notify();\n    return event;\n  }\n\n  /** Record an error-level event. Returns the normalized `AthenaSdkError`. */\n  error(\n    name: AthenaDiagnosticEventName,\n    error: unknown,\n    fallback: { code: AthenaSdkError['code']; message: string; hint?: string },\n    data?: Record<string, unknown>,\n  ): AthenaSdkError {\n    const normalized = toAthenaSdkError(error, fallback);\n    this.emit(name, { level: 'error', error: normalized, data });\n    return normalized;\n  }\n\n  /**\n   * Start a named span. Returns a function that ends it and emits `doneName`\n   * with `durationMs` (or `errorName` when passed an error). Also records a\n   * `performance.measure` so the span shows in the browser's Performance panel.\n   */\n  span(\n    spanName: string,\n    startName: AthenaDiagnosticEventName,\n    data?: Record<string, unknown>,\n  ): (\n    doneName: AthenaDiagnosticEventName,\n    doneOptions?: { data?: Record<string, unknown>; error?: unknown },\n  ) => number {\n    const startedAt = nowMs();\n    this.spans.set(spanName, startedAt);\n    this.mark(`${spanName}:start`);\n    this.emit(startName, { level: 'debug', data });\n    return (doneName, doneOptions = {}) => {\n      const durationMs = nowMs() - startedAt;\n      this.spans.delete(spanName);\n      this.mark(`${spanName}:end`);\n      this.measure(spanName);\n      this.emit(doneName, {\n        level: doneOptions.error !== undefined ? 'error' : 'info',\n        durationMs,\n        data: doneOptions.data,\n        error: doneOptions.error,\n      });\n      return durationMs;\n    };\n  }\n\n  /** Set a gauge (latest-value metric): connection status, transport, auth mode. */\n  gauge(name: string, value: unknown): void {\n    if (this.gauges[name] === value) return;\n    this.gauges[name] = value;\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  subscribe(listener: Listener): () => void {\n    this.listeners.add(listener);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /**\n   * Additive consumer registration: every registered consumer receives every\n   * event (and every error), unlike the single `onEvent`/`onError` config\n   * slots which are last-writer-wins. `AthenaProvider` registers through this\n   * so two mounted providers never clobber each other's callbacks.\n   */\n  addConsumer(consumer: {\n    onEvent?: (event: AthenaDiagnosticEvent) => void;\n    onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  }): () => void {\n    return this.subscribe((event) => {\n      try {\n        consumer.onEvent?.(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic consumer threw`, callbackError);\n      }\n      if (event.error) {\n        try {\n          consumer.onError?.(event.error, event);\n        } catch (callbackError) {\n          console.error(`${CONSOLE_PREFIX} onError consumer threw`, callbackError);\n        }\n      }\n    });\n  }\n\n  /** Subscribe to snapshot changes (for `useSyncExternalStore`). */\n  subscribeSnapshot(listener: () => void): () => void {\n    this.snapshotListeners.add(listener);\n    return () => {\n      this.snapshotListeners.delete(listener);\n    };\n  }\n\n  snapshot(): AthenaDiagnosticsSnapshot {\n    if (!this.cachedSnapshot) {\n      const { onEvent: _onEvent, onError: _onError, ...config } = this.config;\n      this.cachedSnapshot = {\n        sdkVersion: ATHENA_REACT_SDK_VERSION,\n        config,\n        events: [...this.events],\n        gauges: { ...this.gauges },\n        timings: { ...this.timings },\n      };\n    }\n    return this.cachedSnapshot;\n  }\n\n  /** Copy-paste-able JSON of the current snapshot (errors serialized). */\n  export(): string {\n    return JSON.stringify(\n      this.snapshot(),\n      (_key, value) => (isAthenaSdkError(value) ? value.toJSON() : value),\n      2,\n    );\n  }\n\n  clear(): void {\n    this.events = [];\n    this.timings = {};\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  private invalidate(): void {\n    this.cachedSnapshot = null;\n  }\n\n  private mark(name: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.mark === 'function') {\n        performance.mark(`athena-sdk:${name}`);\n      }\n    } catch {\n      // User Timing is best-effort.\n    }\n  }\n\n  private measure(spanName: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.measure === 'function') {\n        performance.measure(\n          `athena-sdk:${spanName}`,\n          `athena-sdk:${spanName}:start`,\n          `athena-sdk:${spanName}:end`,\n        );\n      }\n    } catch {\n      // A missing start mark (e.g. after `performance.clearMarks`) is not an error.\n    }\n  }\n\n  private echoToConsole(event: AthenaDiagnosticEvent): void {\n    const level = this.consoleLevel();\n    if (level === false) {\n      // Errors are never silent: with console output off they still log once,\n      // compactly, so a broken integration is visible without enabling debug.\n      if (event.level === 'error' && event.error) {\n        console.error(`${CONSOLE_PREFIX} ${event.name}: ${event.error.describe()}`, event.data ?? '');\n      }\n      return;\n    }\n    if (LEVEL_RANK[event.level] < LEVEL_RANK[level]) return;\n    const suffix = event.durationMs !== undefined ? ` (${event.durationMs}ms)` : '';\n    const line = `${CONSOLE_PREFIX} ${event.name}${suffix}`;\n    const payload = event.error ? { ...event.data, error: event.error.describe() } : event.data;\n    const method =\n      event.level === 'error'\n        ? console.error\n        : event.level === 'warn'\n          ? console.warn\n          : event.level === 'debug'\n            ? console.debug\n            : console.info;\n    method(line, payload ?? '');\n  }\n\n  private forwardToPostHog(event: AthenaDiagnosticEvent): void {\n    if (!this.config.posthog) return;\n    if (event.durationMs === undefined && event.level !== 'error') return;\n    try {\n      const client = getPostHogInstance<PosthogCaptureClient>();\n      capturePosthogEvent(client, `athena_sdk_${event.name.replace(/\\./g, '_')}`, {\n        sdk_version: ATHENA_REACT_SDK_VERSION,\n        level: event.level,\n        ...(event.durationMs !== undefined && { duration_ms: event.durationMs }),\n        ...(event.error && {\n          error_code: event.error.code,\n          error_message: event.error.message,\n          error_status: event.error.status,\n        }),\n        ...event.data,\n      });\n    } catch {\n      // Analytics must never break the chat.\n    }\n  }\n}\n\nexport const athenaDiagnostics = new AthenaDiagnosticsBus();\n\n/**\n * Expose the bus on `window.__ATHENA_SDK__` so an integrator can inspect the\n * waterfall from the console (`__ATHENA_SDK__.diagnostics.snapshot()`) or turn\n * console echo on without a rebuild (`localStorage.setItem('athena:debug','debug')`).\n */\nexport function installAthenaDiagnosticsGlobal(): void {\n  if (typeof window === 'undefined') return;\n  const globalWindow = window as unknown as Record<string, unknown>;\n  const existing = (globalWindow[GLOBAL_KEY] ?? {}) as Record<string, unknown>;\n  globalWindow[GLOBAL_KEY] = {\n    ...existing,\n    version: ATHENA_REACT_SDK_VERSION,\n    diagnostics: {\n      snapshot: () => athenaDiagnostics.snapshot(),\n      export: () => athenaDiagnostics.export(),\n      clear: () => athenaDiagnostics.clear(),\n      enableConsole: (level: AthenaDiagnosticLevel = 'debug') => {\n        try {\n          localStorage.setItem(LOCAL_STORAGE_DEBUG_KEY, level);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: level });\n      },\n      disableConsole: () => {\n        try {\n          localStorage.removeItem(LOCAL_STORAGE_DEBUG_KEY);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: false });\n      },\n    },\n  };\n}\n\n/** Normalize the provider's `debug` prop into a diagnostics config patch. */\nexport function debugPropToDiagnosticsConfig(\n  debug: boolean | AthenaDiagnosticLevel | Partial<AthenaDiagnosticsConfig> | undefined,\n): Partial<AthenaDiagnosticsConfig> {\n  if (debug === undefined) return {};\n  if (debug === true) return { console: 'debug' };\n  if (debug === false) return { console: false };\n  if (typeof debug === 'string') return { console: debug };\n  return debug;\n}\n"],"names":[],"mappings":";;;;;;;AA2BO,MAAM,2BAA2B,CAAC,SAAS,QAAQ,QAAQ,OAAO;AAGzE,MAAM,aAAoD;AAAA,EACxD,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAuGA,MAAM,iBAA0C;AAAA,EAC9C,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AACd;AAEA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAChC,MAAM,aAAa;AAGnB,MAAM,cAAc;AAEpB,SAAS,OAAO,MAAgF;AAC9F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAA+B,CAAA;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,YAAY,KAAK,GAAG,GAAG;AACzB,UAAI,GAAG,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,aAAa,MAAM,MAAM,MAAM;AAAA,IAC5F,OAAO;AACL,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,eAAe,OAAO,YAAY,QAAQ,aACpE,YAAY,QACZ,KAAK,IAAA;AACX;AAEA,SAAS,sBAAoD;AAC3D,MAAI;AACF,QAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,UAAM,MAAM,aAAa,QAAQ,uBAAuB;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,QAAK,yBAA+C,SAAS,GAAG,GAAG;AACjE,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,MAAM,qBAAqB;AAAA,EAA3B;AACU,kCAAkC,EAAE,GAAG,eAAA;AACvC,kCAAkC,CAAA;AAClC,yDAAgB,IAAA;AAChB,iEAAwB,IAAA;AACxB,+BAAM;AACN,kCAAkC,CAAA;AAClC,mCAAkC,CAAA;AAClC,qDAAY,IAAA;AACZ,0CAAmD;AAAA;AAAA,EAE3D,UAAU,SAAiD;AACzD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,QAAA;AACnC,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,SAAS,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,UAAU;AAAA,IACzD;AACA,SAAK,WAAA;AAAA,EACP;AAAA,EAEA,YAAqC;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGQ,eAA8C;AACpD,QAAI,KAAK,OAAO,YAAY,MAAO,QAAO,KAAK,OAAO;AACtD,WAAO,yBAAyB;AAAA,EAClC;AAAA,EAEA,KACE,MACA,UAKI,IACmB;AACvB,UAAM,QAAQ,QAAQ,UAAU,QAAQ,UAAU,SAAY,UAAU;AACxE,UAAM,QACJ,QAAQ,UAAU,SACd,SACA,iBAAiB,QAAQ,OAAO;AAAA,MAC9B,MAAM;AAAA,MACN,SAAS,2BAA2B,IAAI;AAAA,IAAA,CACzC;AACP,UAAM,QAA+B;AAAA,MACnC,KAAK,EAAE,KAAK;AAAA,MACZ,GAAG,KAAK,MAAM,MAAA,IAAU,EAAE,IAAI;AAAA,MAC9B,KAAI,oBAAI,KAAA,GAAO,YAAA;AAAA,MACf;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,KAAK,MAAM,QAAQ,UAAU,EAAA;AAAA,MACnF,GAAI,QAAQ,QAAQ,EAAE,MAAM,OAAO,QAAQ,IAAI,EAAA;AAAA,MAC/C,GAAI,SAAS,EAAE,MAAA;AAAA,IAAM;AAGvB,SAAK,OAAO,KAAK,KAAK;AACtB,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,OAAO,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,OAAO,UAAU;AAAA,IACnE;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AACA,SAAK,WAAA;AAEL,SAAK,cAAc,KAAK;AACxB,SAAK,iBAAiB,KAAK;AAC3B,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,+BAA+B,aAAa;AAAA,MAC7E;AAAA,IACF;AACA,QAAI,KAAK,OAAO,SAAS;AACvB,UAAI;AACF,aAAK,OAAO,QAAQ,KAAK;AAAA,MAC3B,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AAAA,IACF;AACA,QAAI,SAAS,KAAK,OAAO,SAAS;AAChC,UAAI;AACF,aAAK,OAAO,QAAQ,OAAO,KAAK;AAAA,MAClC,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,MACzE;AAAA,IACF;AACA,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAC7C,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MACE,MACA,OACA,UACA,MACgB;AAChB,UAAM,aAAa,iBAAiB,OAAO,QAAQ;AACnD,SAAK,KAAK,MAAM,EAAE,OAAO,SAAS,OAAO,YAAY,MAAM;AAC3D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KACE,UACA,WACA,MAIU;AACV,UAAM,YAAY,MAAA;AAClB,SAAK,MAAM,IAAI,UAAU,SAAS;AAClC,SAAK,KAAK,GAAG,QAAQ,QAAQ;AAC7B,SAAK,KAAK,WAAW,EAAE,OAAO,SAAS,MAAM;AAC7C,WAAO,CAAC,UAAU,cAAc,OAAO;AACrC,YAAM,aAAa,UAAU;AAC7B,WAAK,MAAM,OAAO,QAAQ;AAC1B,WAAK,KAAK,GAAG,QAAQ,MAAM;AAC3B,WAAK,QAAQ,QAAQ;AACrB,WAAK,KAAK,UAAU;AAAA,QAClB,OAAO,YAAY,UAAU,SAAY,UAAU;AAAA,QACnD;AAAA,QACA,MAAM,YAAY;AAAA,QAClB,OAAO,YAAY;AAAA,MAAA,CACpB;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,MAAc,OAAsB;AACxC,QAAI,KAAK,OAAO,IAAI,MAAM,MAAO;AACjC,SAAK,OAAO,IAAI,IAAI;AACpB,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEA,UAAU,UAAgC;AACxC,SAAK,UAAU,IAAI,QAAQ;AAC3B,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAGG;AACb,WAAO,KAAK,UAAU,CAAC,UAAU;;AAC/B,UAAI;AACF,uBAAS,YAAT,kCAAmB;AAAA,MACrB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AACA,UAAI,MAAM,OAAO;AACf,YAAI;AACF,yBAAS,YAAT,kCAAmB,MAAM,OAAO;AAAA,QAClC,SAAS,eAAe;AACtB,kBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,kBAAkB,UAAkC;AAClD,SAAK,kBAAkB,IAAI,QAAQ;AACnC,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,QAAQ;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,WAAsC;AACpC,QAAI,CAAC,KAAK,gBAAgB;AACxB,YAAM,EAAE,SAAS,UAAU,SAAS,UAAU,GAAG,OAAA,IAAW,KAAK;AACjE,WAAK,iBAAiB;AAAA,QACpB,YAAY;AAAA,QACZ;AAAA,QACA,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,QACvB,QAAQ,EAAE,GAAG,KAAK,OAAA;AAAA,QAClB,SAAS,EAAE,GAAG,KAAK,QAAA;AAAA,MAAQ;AAAA,IAE/B;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,SAAiB;AACf,WAAO,KAAK;AAAA,MACV,KAAK,SAAA;AAAA,MACL,CAAC,MAAM,UAAW,iBAAiB,KAAK,IAAI,MAAM,WAAW;AAAA,MAC7D;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS,CAAA;AACd,SAAK,UAAU,CAAA;AACf,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEQ,aAAmB;AACzB,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEQ,KAAK,MAAoB;AAC/B,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,SAAS,YAAY;AAChF,oBAAY,KAAK,cAAc,IAAI,EAAE;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,QAAQ,UAAwB;AACtC,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,YAAY;AACnF,oBAAY;AAAA,UACV,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,QAAA;AAAA,MAE1B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,cAAc,OAAoC;AACxD,UAAM,QAAQ,KAAK,aAAA;AACnB,QAAI,UAAU,OAAO;AAGnB,UAAI,MAAM,UAAU,WAAW,MAAM,OAAO;AAC1C,gBAAQ,MAAM,GAAG,cAAc,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM,SAAA,CAAU,IAAI,MAAM,QAAQ,EAAE;AAAA,MAC9F;AACA;AAAA,IACF;AACA,QAAI,WAAW,MAAM,KAAK,IAAI,WAAW,KAAK,EAAG;AACjD,UAAM,SAAS,MAAM,eAAe,SAAY,KAAK,MAAM,UAAU,QAAQ;AAC7E,UAAM,OAAO,GAAG,cAAc,IAAI,MAAM,IAAI,GAAG,MAAM;AACrD,UAAM,UAAU,MAAM,QAAQ,EAAE,GAAG,MAAM,MAAM,OAAO,MAAM,MAAM,SAAA,EAAS,IAAM,MAAM;AACvF,UAAM,SACJ,MAAM,UAAU,UACZ,QAAQ,QACR,MAAM,UAAU,SACd,QAAQ,OACR,MAAM,UAAU,UACd,QAAQ,QACR,QAAQ;AAClB,WAAO,MAAM,WAAW,EAAE;AAAA,EAC5B;AAAA,EAEQ,iBAAiB,OAAoC;AAC3D,QAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAI,MAAM,eAAe,UAAa,MAAM,UAAU,QAAS;AAC/D,QAAI;AACF,YAAM,SAAS,mBAAA;AACf,0BAAoB,QAAQ,cAAc,MAAM,KAAK,QAAQ,OAAO,GAAG,CAAC,IAAI;AAAA,QAC1E,aAAa;AAAA,QACb,OAAO,MAAM;AAAA,QACb,GAAI,MAAM,eAAe,UAAa,EAAE,aAAa,MAAM,WAAA;AAAA,QAC3D,GAAI,MAAM,SAAS;AAAA,UACjB,YAAY,MAAM,MAAM;AAAA,UACxB,eAAe,MAAM,MAAM;AAAA,UAC3B,cAAc,MAAM,MAAM;AAAA,QAAA;AAAA,QAE5B,GAAG,MAAM;AAAA,MAAA,CACV;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,MAAM,oBAAoB,IAAI,qBAAA;AAO9B,SAAS,iCAAuC;AACrD,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,eAAe;AACrB,QAAM,WAAY,aAAa,UAAU,KAAK,CAAA;AAC9C,eAAa,UAAU,IAAI;AAAA,IACzB,GAAG;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,MACX,UAAU,MAAM,kBAAkB,SAAA;AAAA,MAClC,QAAQ,MAAM,kBAAkB,OAAA;AAAA,MAChC,OAAO,MAAM,kBAAkB,MAAA;AAAA,MAC/B,eAAe,CAAC,QAA+B,YAAY;AACzD,YAAI;AACF,uBAAa,QAAQ,yBAAyB,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,MACA,gBAAgB,MAAM;AACpB,YAAI;AACF,uBAAa,WAAW,uBAAuB;AAAA,QACjD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,IAAA;AAAA,EACF;AAEJ;AAGO,SAAS,6BACd,OACkC;AAClC,MAAI,UAAU,OAAW,QAAO,CAAA;AAChC,MAAI,UAAU,KAAM,QAAO,EAAE,SAAS,QAAA;AACtC,MAAI,UAAU,MAAO,QAAO,EAAE,SAAS,MAAA;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAA;AACjD,SAAO;AACT;"}
+{"version":3,"file":"athena-diagnostics.js","sources":["../../src/diagnostics/athena-diagnostics.ts"],"sourcesContent":["/**\n * SDK diagnostics: one structured event bus for everything the SDK does that\n * can be slow or can fail — auth acquisition, thread-list fetches, statewire\n * attach/snapshot/connection changes, sends, first tokens, and every error.\n *\n * Design:\n * - Module-level singleton (one SDK, one bus), configured by `AthenaProvider`\n *   from its `debug` / `onDiagnostic` / `onError` props. Nothing here runs\n *   until something calls `emit`, and with defaults it costs a ring-buffer push.\n * - Every event carries `t` (ms since page navigation start via\n *   `performance.now()`) so the buffer reads as a waterfall. Timed spans use\n *   `performance.mark` / `performance.measure` too, so the browser Performance\n *   panel shows them as user timings without any extra tooling.\n * - Console output is opt-in (`debug` prop or `localStorage['athena:debug']`),\n *   prefixed `[AthenaSDK]`, and level-gated. Errors always reach `onError`.\n * - PostHog forwarding (opt-in) sends the timing events as\n *   `athena_sdk_<name>` with `duration_ms`, through the SDK's capture gate.\n *\n * Consumers read the buffer with `useAthenaDiagnostics()` or, in the browser\n * console, `window.__ATHENA_SDK__.diagnostics.snapshot()`.\n */\n\nimport { getPostHogInstance } from '../provider/PostHogProvider';\nimport { capturePosthogEvent, type PosthogCaptureClient } from '../lib/posthog/wrap-posthog-client';\nimport { ATHENA_REACT_SDK_VERSION } from '../version';\nimport { AthenaSdkError, isAthenaSdkError, toAthenaSdkError } from './errors';\n\nexport const ATHENA_DIAGNOSTIC_LEVELS = ['debug', 'info', 'warn', 'error'] as const;\nexport type AthenaDiagnosticLevel = (typeof ATHENA_DIAGNOSTIC_LEVELS)[number];\n\nconst LEVEL_RANK: Record<AthenaDiagnosticLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\n/**\n * Event names. Dotted `area.event` so a consumer can filter by prefix. Names\n * are part of the public contract: renaming one is a breaking change for\n * dashboards, so add new ones instead of repurposing.\n */\nexport type AthenaDiagnosticEventName =\n  // Provider / configuration\n  | 'sdk.init'\n  | 'sdk.transport'\n  | 'sdk.config.warning'\n  // Auth acquisition + lifecycle\n  | 'auth.bridge.start'\n  | 'auth.bridge.ready'\n  | 'auth.bridge.timeout'\n  | 'auth.bridge.absent'\n  | 'auth.bridge.error'\n  | 'auth.bridge.retry'\n  | 'auth.bridge.config_rejected'\n  | 'auth.token.acquired'\n  | 'auth.token.refreshed'\n  | 'auth.token.refresh_failed'\n  | 'auth.token.stale'\n  | 'auth.sso.userinfo.start'\n  | 'auth.sso.userinfo.done'\n  | 'auth.sso.userinfo.error'\n  | 'auth.sso.userinfo.retry'\n  // Thread list + history\n  | 'threads.list.start'\n  | 'threads.list.done'\n  | 'threads.list.error'\n  | 'threads.list.aborted'\n  | 'threads.history.start'\n  | 'threads.history.done'\n  | 'threads.history.error'\n  | 'threads.history.aborted'\n  // Statewire transport\n  | 'statewire.attach.start'\n  | 'statewire.snapshot'\n  | 'statewire.connection'\n  | 'statewire.parked'\n  | 'statewire.error'\n  | 'statewire.read_only'\n  /** A write to the thread's server config lane (`config/patch`) was refused or dropped. */\n  | 'statewire.config'\n  // Runs\n  | 'run.send'\n  | 'run.first_token'\n  | 'run.done'\n  | 'run.error'\n  // Composer\n  | 'composer.attachment.error'\n  | 'composer.cancel.error'\n  | 'composer.dictation'\n  | 'composer.handoff'\n  // Tool UIs + frontend tools\n  | 'tools.schema.warning'\n  | 'tools.debug'\n  // Mention suggestions\n  | 'mentions.fetch.error'\n  // Catch-all\n  | 'sdk.error';\n\nexport interface AthenaDiagnosticEvent {\n  /** Monotonic sequence number within this page. */\n  seq: number;\n  /** `performance.now()` at emit time (ms since navigation start). */\n  t: number;\n  /** Wall-clock ISO timestamp, for exports. */\n  at: string;\n  name: AthenaDiagnosticEventName;\n  level: AthenaDiagnosticLevel;\n  /** Milliseconds for a completed span (set on `*.done` / `*.ready` / `run.first_token`). */\n  durationMs?: number;\n  /** Structured context. Never contains credentials — see `redact`. */\n  data?: Record<string, unknown>;\n  /** Present on error-level events. */\n  error?: AthenaSdkError;\n}\n\nexport interface AthenaDiagnosticsConfig {\n  /** Minimum level echoed to the console. `false` disables console output. */\n  console: AthenaDiagnosticLevel | false;\n  /** Forward timing + error events to PostHog as `athena_sdk_*` events. */\n  posthog: boolean;\n  /** Receives every event (already redacted). */\n  onEvent?: (event: AthenaDiagnosticEvent) => void;\n  /** Receives every error-level event's `AthenaSdkError`. */\n  onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  /** Ring-buffer capacity. */\n  bufferSize: number;\n}\n\nexport interface AthenaDiagnosticsSnapshot {\n  sdkVersion: string;\n  config: Omit<AthenaDiagnosticsConfig, 'onEvent' | 'onError'>;\n  events: AthenaDiagnosticEvent[];\n  /** Latest value per gauge (connection status, transport, auth mode, …). */\n  gauges: Record<string, unknown>;\n  /** Named span durations, most recent per name (`auth.bridge`, `threads.list`, …). */\n  timings: Record<string, number>;\n}\n\nconst DEFAULT_CONFIG: AthenaDiagnosticsConfig = {\n  console: false,\n  posthog: false,\n  bufferSize: 300,\n};\n\nconst CONSOLE_PREFIX = '[AthenaSDK]';\nconst LOCAL_STORAGE_DEBUG_KEY = 'athena:debug';\nconst GLOBAL_KEY = '__ATHENA_SDK__';\n\n// Keys whose values must never enter the buffer, the console, or PostHog.\nconst REDACT_KEYS = /token|secret|api[-_]?key|authorization|cookie|password/i;\n\nfunction redact(data: Record<string, unknown> | undefined): Record<string, unknown> | undefined {\n  if (!data) return undefined;\n  const out: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (REDACT_KEYS.test(key)) {\n      out[key] = typeof value === 'string' && value.length > 0 ? `<redacted:${value.length}>` : '<redacted>';\n    } else {\n      out[key] = value;\n    }\n  }\n  return out;\n}\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' && typeof performance.now === 'function'\n    ? performance.now()\n    : Date.now();\n}\n\nfunction readLocalDebugLevel(): AthenaDiagnosticLevel | null {\n  try {\n    if (typeof localStorage === 'undefined') return null;\n    const raw = localStorage.getItem(LOCAL_STORAGE_DEBUG_KEY);\n    if (!raw) return null;\n    if ((ATHENA_DIAGNOSTIC_LEVELS as readonly string[]).includes(raw)) {\n      return raw as AthenaDiagnosticLevel;\n    }\n    return raw === '1' || raw === 'true' ? 'debug' : null;\n  } catch {\n    return null;\n  }\n}\n\ntype Listener = (event: AthenaDiagnosticEvent) => void;\n\nclass AthenaDiagnosticsBus {\n  private config: AthenaDiagnosticsConfig = { ...DEFAULT_CONFIG };\n  private events: AthenaDiagnosticEvent[] = [];\n  private listeners = new Set<Listener>();\n  private snapshotListeners = new Set<() => void>();\n  private seq = 0;\n  private gauges: Record<string, unknown> = {};\n  private timings: Record<string, number> = {};\n  private spans = new Map<string, number>();\n  private cachedSnapshot: AthenaDiagnosticsSnapshot | null = null;\n\n  configure(partial: Partial<AthenaDiagnosticsConfig>): void {\n    this.config = { ...this.config, ...partial };\n    if (this.events.length > this.config.bufferSize) {\n      this.events = this.events.slice(-this.config.bufferSize);\n    }\n    this.invalidate();\n  }\n\n  getConfig(): AthenaDiagnosticsConfig {\n    return this.config;\n  }\n\n  /** Effective console level: the configured one, or `localStorage['athena:debug']`. */\n  private consoleLevel(): AthenaDiagnosticLevel | false {\n    if (this.config.console !== false) return this.config.console;\n    return readLocalDebugLevel() ?? false;\n  }\n\n  emit(\n    name: AthenaDiagnosticEventName,\n    options: {\n      level?: AthenaDiagnosticLevel;\n      data?: Record<string, unknown>;\n      durationMs?: number;\n      error?: unknown;\n    } = {},\n  ): AthenaDiagnosticEvent {\n    const level = options.level ?? (options.error !== undefined ? 'error' : 'info');\n    const error =\n      options.error === undefined\n        ? undefined\n        : toAthenaSdkError(options.error, {\n            code: 'unknown',\n            message: `Unexpected error during ${name}`,\n          });\n    const event: AthenaDiagnosticEvent = {\n      seq: ++this.seq,\n      t: Math.round(nowMs() * 10) / 10,\n      at: new Date().toISOString(),\n      name,\n      level,\n      ...(options.durationMs !== undefined && { durationMs: Math.round(options.durationMs) }),\n      ...(options.data && { data: redact(options.data) }),\n      ...(error && { error }),\n    };\n\n    this.events.push(event);\n    if (this.events.length > this.config.bufferSize) {\n      this.events.splice(0, this.events.length - this.config.bufferSize);\n    }\n    if (event.durationMs !== undefined) {\n      this.timings[name] = event.durationMs;\n    }\n    this.invalidate();\n\n    this.echoToConsole(event);\n    this.forwardToPostHog(event);\n    for (const listener of this.listeners) {\n      try {\n        listener(event);\n      } catch (listenerError) {\n        console.error(`${CONSOLE_PREFIX} diagnostics listener threw`, listenerError);\n      }\n    }\n    if (this.config.onEvent) {\n      try {\n        this.config.onEvent(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic callback threw`, callbackError);\n      }\n    }\n    if (error && this.config.onError) {\n      try {\n        this.config.onError(error, event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onError callback threw`, callbackError);\n      }\n    }\n    for (const notify of this.snapshotListeners) notify();\n    return event;\n  }\n\n  /** Record an error-level event. Returns the normalized `AthenaSdkError`. */\n  error(\n    name: AthenaDiagnosticEventName,\n    error: unknown,\n    fallback: { code: AthenaSdkError['code']; message: string; hint?: string },\n    data?: Record<string, unknown>,\n  ): AthenaSdkError {\n    const normalized = toAthenaSdkError(error, fallback);\n    this.emit(name, { level: 'error', error: normalized, data });\n    return normalized;\n  }\n\n  /**\n   * Start a named span. Returns a function that ends it and emits `doneName`\n   * with `durationMs` (or `errorName` when passed an error). Also records a\n   * `performance.measure` so the span shows in the browser's Performance panel.\n   */\n  span(\n    spanName: string,\n    startName: AthenaDiagnosticEventName,\n    data?: Record<string, unknown>,\n  ): (\n    doneName: AthenaDiagnosticEventName,\n    doneOptions?: { data?: Record<string, unknown>; error?: unknown },\n  ) => number {\n    const startedAt = nowMs();\n    this.spans.set(spanName, startedAt);\n    this.mark(`${spanName}:start`);\n    this.emit(startName, { level: 'debug', data });\n    return (doneName, doneOptions = {}) => {\n      const durationMs = nowMs() - startedAt;\n      this.spans.delete(spanName);\n      this.mark(`${spanName}:end`);\n      this.measure(spanName);\n      this.emit(doneName, {\n        level: doneOptions.error !== undefined ? 'error' : 'info',\n        durationMs,\n        data: doneOptions.data,\n        error: doneOptions.error,\n      });\n      return durationMs;\n    };\n  }\n\n  /** Set a gauge (latest-value metric): connection status, transport, auth mode. */\n  gauge(name: string, value: unknown): void {\n    if (this.gauges[name] === value) return;\n    this.gauges[name] = value;\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  subscribe(listener: Listener): () => void {\n    this.listeners.add(listener);\n    return () => {\n      this.listeners.delete(listener);\n    };\n  }\n\n  /**\n   * Additive consumer registration: every registered consumer receives every\n   * event (and every error), unlike the single `onEvent`/`onError` config\n   * slots which are last-writer-wins. `AthenaProvider` registers through this\n   * so two mounted providers never clobber each other's callbacks.\n   */\n  addConsumer(consumer: {\n    onEvent?: (event: AthenaDiagnosticEvent) => void;\n    onError?: (error: AthenaSdkError, event: AthenaDiagnosticEvent) => void;\n  }): () => void {\n    return this.subscribe((event) => {\n      try {\n        consumer.onEvent?.(event);\n      } catch (callbackError) {\n        console.error(`${CONSOLE_PREFIX} onDiagnostic consumer threw`, callbackError);\n      }\n      if (event.error) {\n        try {\n          consumer.onError?.(event.error, event);\n        } catch (callbackError) {\n          console.error(`${CONSOLE_PREFIX} onError consumer threw`, callbackError);\n        }\n      }\n    });\n  }\n\n  /** Subscribe to snapshot changes (for `useSyncExternalStore`). */\n  subscribeSnapshot(listener: () => void): () => void {\n    this.snapshotListeners.add(listener);\n    return () => {\n      this.snapshotListeners.delete(listener);\n    };\n  }\n\n  snapshot(): AthenaDiagnosticsSnapshot {\n    if (!this.cachedSnapshot) {\n      const { onEvent: _onEvent, onError: _onError, ...config } = this.config;\n      this.cachedSnapshot = {\n        sdkVersion: ATHENA_REACT_SDK_VERSION,\n        config,\n        events: [...this.events],\n        gauges: { ...this.gauges },\n        timings: { ...this.timings },\n      };\n    }\n    return this.cachedSnapshot;\n  }\n\n  /** Copy-paste-able JSON of the current snapshot (errors serialized). */\n  export(): string {\n    return JSON.stringify(\n      this.snapshot(),\n      (_key, value) => (isAthenaSdkError(value) ? value.toJSON() : value),\n      2,\n    );\n  }\n\n  clear(): void {\n    this.events = [];\n    this.timings = {};\n    this.invalidate();\n    for (const notify of this.snapshotListeners) notify();\n  }\n\n  private invalidate(): void {\n    this.cachedSnapshot = null;\n  }\n\n  private mark(name: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.mark === 'function') {\n        performance.mark(`athena-sdk:${name}`);\n      }\n    } catch {\n      // User Timing is best-effort.\n    }\n  }\n\n  private measure(spanName: string): void {\n    try {\n      if (typeof performance !== 'undefined' && typeof performance.measure === 'function') {\n        performance.measure(\n          `athena-sdk:${spanName}`,\n          `athena-sdk:${spanName}:start`,\n          `athena-sdk:${spanName}:end`,\n        );\n      }\n    } catch {\n      // A missing start mark (e.g. after `performance.clearMarks`) is not an error.\n    }\n  }\n\n  private echoToConsole(event: AthenaDiagnosticEvent): void {\n    const level = this.consoleLevel();\n    if (level === false) {\n      // Errors are never silent: with console output off they still log once,\n      // compactly, so a broken integration is visible without enabling debug.\n      if (event.level === 'error' && event.error) {\n        console.error(`${CONSOLE_PREFIX} ${event.name}: ${event.error.describe()}`, event.data ?? '');\n      }\n      return;\n    }\n    if (LEVEL_RANK[event.level] < LEVEL_RANK[level]) return;\n    const suffix = event.durationMs !== undefined ? ` (${event.durationMs}ms)` : '';\n    const line = `${CONSOLE_PREFIX} ${event.name}${suffix}`;\n    const payload = event.error ? { ...event.data, error: event.error.describe() } : event.data;\n    const method =\n      event.level === 'error'\n        ? console.error\n        : event.level === 'warn'\n          ? console.warn\n          : event.level === 'debug'\n            ? console.debug\n            : console.info;\n    method(line, payload ?? '');\n  }\n\n  private forwardToPostHog(event: AthenaDiagnosticEvent): void {\n    if (!this.config.posthog) return;\n    if (event.durationMs === undefined && event.level !== 'error') return;\n    try {\n      const client = getPostHogInstance<PosthogCaptureClient>();\n      capturePosthogEvent(client, `athena_sdk_${event.name.replace(/\\./g, '_')}`, {\n        sdk_version: ATHENA_REACT_SDK_VERSION,\n        level: event.level,\n        ...(event.durationMs !== undefined && { duration_ms: event.durationMs }),\n        ...(event.error && {\n          error_code: event.error.code,\n          error_message: event.error.message,\n          error_status: event.error.status,\n        }),\n        ...event.data,\n      });\n    } catch {\n      // Analytics must never break the chat.\n    }\n  }\n}\n\nexport const athenaDiagnostics = new AthenaDiagnosticsBus();\n\n/**\n * Expose the bus on `window.__ATHENA_SDK__` so an integrator can inspect the\n * waterfall from the console (`__ATHENA_SDK__.diagnostics.snapshot()`) or turn\n * console echo on without a rebuild (`localStorage.setItem('athena:debug','debug')`).\n */\nexport function installAthenaDiagnosticsGlobal(): void {\n  if (typeof window === 'undefined') return;\n  const globalWindow = window as unknown as Record<string, unknown>;\n  const existing = (globalWindow[GLOBAL_KEY] ?? {}) as Record<string, unknown>;\n  globalWindow[GLOBAL_KEY] = {\n    ...existing,\n    version: ATHENA_REACT_SDK_VERSION,\n    diagnostics: {\n      snapshot: () => athenaDiagnostics.snapshot(),\n      export: () => athenaDiagnostics.export(),\n      clear: () => athenaDiagnostics.clear(),\n      enableConsole: (level: AthenaDiagnosticLevel = 'debug') => {\n        try {\n          localStorage.setItem(LOCAL_STORAGE_DEBUG_KEY, level);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: level });\n      },\n      disableConsole: () => {\n        try {\n          localStorage.removeItem(LOCAL_STORAGE_DEBUG_KEY);\n        } catch {\n          // localStorage may be unavailable.\n        }\n        athenaDiagnostics.configure({ console: false });\n      },\n    },\n  };\n}\n\n/** Normalize the provider's `debug` prop into a diagnostics config patch. */\nexport function debugPropToDiagnosticsConfig(\n  debug: boolean | AthenaDiagnosticLevel | Partial<AthenaDiagnosticsConfig> | undefined,\n): Partial<AthenaDiagnosticsConfig> {\n  if (debug === undefined) return {};\n  if (debug === true) return { console: 'debug' };\n  if (debug === false) return { console: false };\n  if (typeof debug === 'string') return { console: debug };\n  return debug;\n}\n"],"names":[],"mappings":";;;;;;;AA2BO,MAAM,2BAA2B,CAAC,SAAS,QAAQ,QAAQ,OAAO;AAGzE,MAAM,aAAoD;AAAA,EACxD,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAwGA,MAAM,iBAA0C;AAAA,EAC9C,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AACd;AAEA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAChC,MAAM,aAAa;AAGnB,MAAM,cAAc;AAEpB,SAAS,OAAO,MAAgF;AAC9F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,MAA+B,CAAA;AACrC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,YAAY,KAAK,GAAG,GAAG;AACzB,UAAI,GAAG,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,aAAa,MAAM,MAAM,MAAM;AAAA,IAC5F,OAAO;AACL,UAAI,GAAG,IAAI;AAAA,IACb;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,eAAe,OAAO,YAAY,QAAQ,aACpE,YAAY,QACZ,KAAK,IAAA;AACX;AAEA,SAAS,sBAAoD;AAC3D,MAAI;AACF,QAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,UAAM,MAAM,aAAa,QAAQ,uBAAuB;AACxD,QAAI,CAAC,IAAK,QAAO;AACjB,QAAK,yBAA+C,SAAS,GAAG,GAAG;AACjE,aAAO;AAAA,IACT;AACA,WAAO,QAAQ,OAAO,QAAQ,SAAS,UAAU;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,MAAM,qBAAqB;AAAA,EAA3B;AACU,kCAAkC,EAAE,GAAG,eAAA;AACvC,kCAAkC,CAAA;AAClC,yDAAgB,IAAA;AAChB,iEAAwB,IAAA;AACxB,+BAAM;AACN,kCAAkC,CAAA;AAClC,mCAAkC,CAAA;AAClC,qDAAY,IAAA;AACZ,0CAAmD;AAAA;AAAA,EAE3D,UAAU,SAAiD;AACzD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,QAAA;AACnC,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,SAAS,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,UAAU;AAAA,IACzD;AACA,SAAK,WAAA;AAAA,EACP;AAAA,EAEA,YAAqC;AACnC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGQ,eAA8C;AACpD,QAAI,KAAK,OAAO,YAAY,MAAO,QAAO,KAAK,OAAO;AACtD,WAAO,yBAAyB;AAAA,EAClC;AAAA,EAEA,KACE,MACA,UAKI,IACmB;AACvB,UAAM,QAAQ,QAAQ,UAAU,QAAQ,UAAU,SAAY,UAAU;AACxE,UAAM,QACJ,QAAQ,UAAU,SACd,SACA,iBAAiB,QAAQ,OAAO;AAAA,MAC9B,MAAM;AAAA,MACN,SAAS,2BAA2B,IAAI;AAAA,IAAA,CACzC;AACP,UAAM,QAA+B;AAAA,MACnC,KAAK,EAAE,KAAK;AAAA,MACZ,GAAG,KAAK,MAAM,MAAA,IAAU,EAAE,IAAI;AAAA,MAC9B,KAAI,oBAAI,KAAA,GAAO,YAAA;AAAA,MACf;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,eAAe,UAAa,EAAE,YAAY,KAAK,MAAM,QAAQ,UAAU,EAAA;AAAA,MACnF,GAAI,QAAQ,QAAQ,EAAE,MAAM,OAAO,QAAQ,IAAI,EAAA;AAAA,MAC/C,GAAI,SAAS,EAAE,MAAA;AAAA,IAAM;AAGvB,SAAK,OAAO,KAAK,KAAK;AACtB,QAAI,KAAK,OAAO,SAAS,KAAK,OAAO,YAAY;AAC/C,WAAK,OAAO,OAAO,GAAG,KAAK,OAAO,SAAS,KAAK,OAAO,UAAU;AAAA,IACnE;AACA,QAAI,MAAM,eAAe,QAAW;AAClC,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AACA,SAAK,WAAA;AAEL,SAAK,cAAc,KAAK;AACxB,SAAK,iBAAiB,KAAK;AAC3B,eAAW,YAAY,KAAK,WAAW;AACrC,UAAI;AACF,iBAAS,KAAK;AAAA,MAChB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,+BAA+B,aAAa;AAAA,MAC7E;AAAA,IACF;AACA,QAAI,KAAK,OAAO,SAAS;AACvB,UAAI;AACF,aAAK,OAAO,QAAQ,KAAK;AAAA,MAC3B,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AAAA,IACF;AACA,QAAI,SAAS,KAAK,OAAO,SAAS;AAChC,UAAI;AACF,aAAK,OAAO,QAAQ,OAAO,KAAK;AAAA,MAClC,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,MACzE;AAAA,IACF;AACA,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAC7C,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MACE,MACA,OACA,UACA,MACgB;AAChB,UAAM,aAAa,iBAAiB,OAAO,QAAQ;AACnD,SAAK,KAAK,MAAM,EAAE,OAAO,SAAS,OAAO,YAAY,MAAM;AAC3D,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KACE,UACA,WACA,MAIU;AACV,UAAM,YAAY,MAAA;AAClB,SAAK,MAAM,IAAI,UAAU,SAAS;AAClC,SAAK,KAAK,GAAG,QAAQ,QAAQ;AAC7B,SAAK,KAAK,WAAW,EAAE,OAAO,SAAS,MAAM;AAC7C,WAAO,CAAC,UAAU,cAAc,OAAO;AACrC,YAAM,aAAa,UAAU;AAC7B,WAAK,MAAM,OAAO,QAAQ;AAC1B,WAAK,KAAK,GAAG,QAAQ,MAAM;AAC3B,WAAK,QAAQ,QAAQ;AACrB,WAAK,KAAK,UAAU;AAAA,QAClB,OAAO,YAAY,UAAU,SAAY,UAAU;AAAA,QACnD;AAAA,QACA,MAAM,YAAY;AAAA,QAClB,OAAO,YAAY;AAAA,MAAA,CACpB;AACD,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,MAAc,OAAsB;AACxC,QAAI,KAAK,OAAO,IAAI,MAAM,MAAO;AACjC,SAAK,OAAO,IAAI,IAAI;AACpB,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEA,UAAU,UAAgC;AACxC,SAAK,UAAU,IAAI,QAAQ;AAC3B,WAAO,MAAM;AACX,WAAK,UAAU,OAAO,QAAQ;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAGG;AACb,WAAO,KAAK,UAAU,CAAC,UAAU;;AAC/B,UAAI;AACF,uBAAS,YAAT,kCAAmB;AAAA,MACrB,SAAS,eAAe;AACtB,gBAAQ,MAAM,GAAG,cAAc,gCAAgC,aAAa;AAAA,MAC9E;AACA,UAAI,MAAM,OAAO;AACf,YAAI;AACF,yBAAS,YAAT,kCAAmB,MAAM,OAAO;AAAA,QAClC,SAAS,eAAe;AACtB,kBAAQ,MAAM,GAAG,cAAc,2BAA2B,aAAa;AAAA,QACzE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,kBAAkB,UAAkC;AAClD,SAAK,kBAAkB,IAAI,QAAQ;AACnC,WAAO,MAAM;AACX,WAAK,kBAAkB,OAAO,QAAQ;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,WAAsC;AACpC,QAAI,CAAC,KAAK,gBAAgB;AACxB,YAAM,EAAE,SAAS,UAAU,SAAS,UAAU,GAAG,OAAA,IAAW,KAAK;AACjE,WAAK,iBAAiB;AAAA,QACpB,YAAY;AAAA,QACZ;AAAA,QACA,QAAQ,CAAC,GAAG,KAAK,MAAM;AAAA,QACvB,QAAQ,EAAE,GAAG,KAAK,OAAA;AAAA,QAClB,SAAS,EAAE,GAAG,KAAK,QAAA;AAAA,MAAQ;AAAA,IAE/B;AACA,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,SAAiB;AACf,WAAO,KAAK;AAAA,MACV,KAAK,SAAA;AAAA,MACL,CAAC,MAAM,UAAW,iBAAiB,KAAK,IAAI,MAAM,WAAW;AAAA,MAC7D;AAAA,IAAA;AAAA,EAEJ;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS,CAAA;AACd,SAAK,UAAU,CAAA;AACf,SAAK,WAAA;AACL,eAAW,UAAU,KAAK,kBAAmB,QAAA;AAAA,EAC/C;AAAA,EAEQ,aAAmB;AACzB,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAEQ,KAAK,MAAoB;AAC/B,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,SAAS,YAAY;AAChF,oBAAY,KAAK,cAAc,IAAI,EAAE;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,QAAQ,UAAwB;AACtC,QAAI;AACF,UAAI,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,YAAY;AACnF,oBAAY;AAAA,UACV,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,UACtB,cAAc,QAAQ;AAAA,QAAA;AAAA,MAE1B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,cAAc,OAAoC;AACxD,UAAM,QAAQ,KAAK,aAAA;AACnB,QAAI,UAAU,OAAO;AAGnB,UAAI,MAAM,UAAU,WAAW,MAAM,OAAO;AAC1C,gBAAQ,MAAM,GAAG,cAAc,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM,SAAA,CAAU,IAAI,MAAM,QAAQ,EAAE;AAAA,MAC9F;AACA;AAAA,IACF;AACA,QAAI,WAAW,MAAM,KAAK,IAAI,WAAW,KAAK,EAAG;AACjD,UAAM,SAAS,MAAM,eAAe,SAAY,KAAK,MAAM,UAAU,QAAQ;AAC7E,UAAM,OAAO,GAAG,cAAc,IAAI,MAAM,IAAI,GAAG,MAAM;AACrD,UAAM,UAAU,MAAM,QAAQ,EAAE,GAAG,MAAM,MAAM,OAAO,MAAM,MAAM,SAAA,EAAS,IAAM,MAAM;AACvF,UAAM,SACJ,MAAM,UAAU,UACZ,QAAQ,QACR,MAAM,UAAU,SACd,QAAQ,OACR,MAAM,UAAU,UACd,QAAQ,QACR,QAAQ;AAClB,WAAO,MAAM,WAAW,EAAE;AAAA,EAC5B;AAAA,EAEQ,iBAAiB,OAAoC;AAC3D,QAAI,CAAC,KAAK,OAAO,QAAS;AAC1B,QAAI,MAAM,eAAe,UAAa,MAAM,UAAU,QAAS;AAC/D,QAAI;AACF,YAAM,SAAS,mBAAA;AACf,0BAAoB,QAAQ,cAAc,MAAM,KAAK,QAAQ,OAAO,GAAG,CAAC,IAAI;AAAA,QAC1E,aAAa;AAAA,QACb,OAAO,MAAM;AAAA,QACb,GAAI,MAAM,eAAe,UAAa,EAAE,aAAa,MAAM,WAAA;AAAA,QAC3D,GAAI,MAAM,SAAS;AAAA,UACjB,YAAY,MAAM,MAAM;AAAA,UACxB,eAAe,MAAM,MAAM;AAAA,UAC3B,cAAc,MAAM,MAAM;AAAA,QAAA;AAAA,QAE5B,GAAG,MAAM;AAAA,MAAA,CACV;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,MAAM,oBAAoB,IAAI,qBAAA;AAO9B,SAAS,iCAAuC;AACrD,MAAI,OAAO,WAAW,YAAa;AACnC,QAAM,eAAe;AACrB,QAAM,WAAY,aAAa,UAAU,KAAK,CAAA;AAC9C,eAAa,UAAU,IAAI;AAAA,IACzB,GAAG;AAAA,IACH,SAAS;AAAA,IACT,aAAa;AAAA,MACX,UAAU,MAAM,kBAAkB,SAAA;AAAA,MAClC,QAAQ,MAAM,kBAAkB,OAAA;AAAA,MAChC,OAAO,MAAM,kBAAkB,MAAA;AAAA,MAC/B,eAAe,CAAC,QAA+B,YAAY;AACzD,YAAI;AACF,uBAAa,QAAQ,yBAAyB,KAAK;AAAA,QACrD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,MACA,gBAAgB,MAAM;AACpB,YAAI;AACF,uBAAa,WAAW,uBAAuB;AAAA,QACjD,QAAQ;AAAA,QAER;AACA,0BAAkB,UAAU,EAAE,SAAS,MAAA,CAAO;AAAA,MAChD;AAAA,IAAA;AAAA,EACF;AAEJ;AAGO,SAAS,6BACd,OACkC;AAClC,MAAI,UAAU,OAAW,QAAO,CAAA;AAChC,MAAI,UAAU,KAAM,QAAO,EAAE,SAAS,QAAA;AACtC,MAAI,UAAU,MAAO,QAAO,EAAE,SAAS,MAAA;AACvC,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,SAAS,MAAA;AACjD,SAAO;AACT;"}

package/dist/diagnostics/errors.cjs

@@ -21,6 +21,13 @@ const ATHENA_SDK_ERROR_CODES = {
    * (see `ParentBridgeState.error`).
    */
   auth_bridge_failed: "auth_bridge_failed",
+  /**
+   * `AthenaSSOProvider`'s session read (`/api/sso/userinfo`) kept failing
+   * (5xx, 408, 429, network, timeout) through its bounded retries, or
+   * answered another status it does not retry, or a 2xx without a JSON body.
+   * The provider shows `displayOnError` with reason `request_failed`.
+   */
+  auth_sso_failed: "auth_sso_failed",
   /** The statewire sync URL could not be derived from the configuration. */
   config_invalid: "config_invalid",
   /** The thread list request failed. */

package/dist/diagnostics/errors.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.cjs","sources":["../../src/diagnostics/errors.ts"],"sourcesContent":["/**\n * Typed SDK errors. Every failure the SDK surfaces to a consumer carries a\n * stable `code` (matchable in code), a human `message`, and a `hint` — the\n * one-line \"what to do about it\" that turns a silent failure into a debuggable\n * one. Backend rejections keep their structured `{ status, detail }` payload.\n */\n\nexport const ATHENA_SDK_ERROR_CODES = {\n  /** No token and no API key resolved before a request had to be sent. */\n  auth_missing: 'auth_missing',\n  /** The server refused the credential (401 / statewire `unauthorized` fin). */\n  auth_rejected: 'auth_rejected',\n  /**\n   * `/_athena/auth` did not answer within the timeout on the last attempt of\n   * its bounded retry cycle. The bridge stopped retrying (see\n   * `ParentBridgeState.error`).\n   */\n  auth_bridge_timeout: 'auth_bridge_timeout',\n  /**\n   * `/_athena/auth` refused the mint (a 4xx other than 404), answered a body\n   * it cannot read, or kept failing (5xx, 408, 429, network) through its\n   * bounded retry cycle. The bridge stopped retrying and hands out no token\n   * (see `ParentBridgeState.error`).\n   */\n  auth_bridge_failed: 'auth_bridge_failed',\n  /** The statewire sync URL could not be derived from the configuration. */\n  config_invalid: 'config_invalid',\n  /** The thread list request failed. */\n  threads_list_failed: 'threads_list_failed',\n  /** Loading a thread's history failed. */\n  thread_load_failed: 'thread_load_failed',\n  /**\n   * Pinning / unpinning a thread failed. `status` 404 / 405 means the backend\n   * predates `POST /api/conversations/threads/favorite` (see\n   * `isThreadFavoriteUnavailableError`); the pin then stays read-only.\n   */\n  thread_favorite_failed: 'thread_favorite_failed',\n  /**\n   * Renaming a thread failed. `status` 404 / 405 means the backend predates\n   * `POST /api/conversations/threads/rename` (see\n   * `isThreadRenameUnavailableError`); the list then offers no rename.\n   */\n  thread_rename_failed: 'thread_rename_failed',\n  /**\n   * Archiving a thread failed. `status` 404 / 405 means the backend has no\n   * archive route (see `isThreadArchiveUnavailableError`); the list then\n   * offers no archive action.\n   */\n  thread_archive_failed: 'thread_archive_failed',\n  /** The statewire host rejected a command (structured `{status, detail}`). */\n  statewire_rejected: 'statewire_rejected',\n  /** The statewire connection is gone and will not reconnect on its own. */\n  statewire_gone: 'statewire_gone',\n  /** The selected collab agent / channel was refused by the backend. */\n  collab_agent_rejected: 'collab_agent_rejected',\n  /** A React render error crashed the chat surface (caught by the SDK's error boundary). */\n  chat_render_crash: 'chat_render_crash',\n  /** A pasted or dropped file could not be uploaded as a composer attachment. */\n  attachment_failed: 'attachment_failed',\n  /** Mention suggestions for a scope failed after every retry. */\n  mentions_fetch_failed: 'mentions_fetch_failed',\n  /** A composer write queued before the chat was ready can no longer land (thread switched, identity changed, provider unmounted). */\n  composer_write_dropped: 'composer_write_dropped',\n  /** The repository code search request (`/api/search/repositories`) failed. */\n  repo_search_failed: 'repo_search_failed',\n  /**\n   * A session workbench read failed: the session's workspace\n   * (`/api/conversations/threads/{id}/workspace`) or a computer's status or\n   * SSH target.\n   */\n  session_workspace_failed: 'session_workspace_failed',\n  /** Anything else. */\n  unknown: 'unknown',\n} as const;\n\nexport type AthenaSdkErrorCode =\n  (typeof ATHENA_SDK_ERROR_CODES)[keyof typeof ATHENA_SDK_ERROR_CODES];\n\nexport interface AthenaSdkErrorOptions {\n  code: AthenaSdkErrorCode;\n  message: string;\n  /** One line telling the integrator what to check or change. */\n  hint?: string;\n  /** HTTP-ish status when the failure came from a server. */\n  status?: number;\n  /** Structured server detail (e.g. `{ code, message }` from agora). */\n  detail?: unknown;\n  cause?: unknown;\n  /** Extra structured context safe to log (never credentials). */\n  context?: Record<string, unknown>;\n}\n\nexport class AthenaSdkError extends Error {\n  readonly code: AthenaSdkErrorCode;\n  readonly hint: string | undefined;\n  readonly status: number | undefined;\n  readonly detail: unknown;\n  readonly context: Record<string, unknown>;\n\n  constructor(options: AthenaSdkErrorOptions) {\n    super(options.message, options.cause === undefined ? undefined : { cause: options.cause });\n    this.name = 'AthenaSdkError';\n    this.code = options.code;\n    this.hint = options.hint;\n    this.status = options.status;\n    this.detail = options.detail;\n    this.context = options.context ?? {};\n  }\n\n  /** A log/console-friendly one-liner: `[code] message — hint`. */\n  describe(): string {\n    return `[${this.code}] ${this.message}${this.hint ? ` — ${this.hint}` : ''}`;\n  }\n\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      hint: this.hint,\n      status: this.status,\n      detail: this.detail,\n      context: this.context,\n    };\n  }\n}\n\nexport function isAthenaSdkError(value: unknown): value is AthenaSdkError {\n  return value instanceof AthenaSdkError;\n}\n\n/** Wrap any thrown value as an `AthenaSdkError` (idempotent for SDK errors). */\nexport function toAthenaSdkError(\n  value: unknown,\n  fallback: Omit<AthenaSdkErrorOptions, 'cause'>,\n): AthenaSdkError {\n  if (isAthenaSdkError(value)) return value;\n  const message =\n    value instanceof Error && value.message ? value.message : fallback.message;\n  return new AthenaSdkError({ ...fallback, message, cause: value });\n}\n\n/** Structured `{ code, message }` detail from an agora rejection, if present. */\nexport function readRejectionDetail(\n  detail: unknown,\n): { code: string | null; message: string | null } {\n  if (typeof detail === 'string') return { code: null, message: detail || null };\n  if (!detail || typeof detail !== 'object') return { code: null, message: null };\n  const record = detail as { code?: unknown; message?: unknown };\n  return {\n    code: typeof record.code === 'string' ? record.code : null,\n    message: typeof record.message === 'string' ? record.message : null,\n  };\n}\n"],"names":[],"mappings":";;;;;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC,cAAc;AAAA;AAAA,EAEd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,qBAAqB;AAAA;AAAA,EAErB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,uBAAuB;AAAA;AAAA,EAEvB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,uBAAuB;AAAA;AAAA,EAEvB,mBAAmB;AAAA;AAAA,EAEnB,mBAAmB;AAAA;AAAA,EAEnB,uBAAuB;AAAA;AAAA,EAEvB,wBAAwB;AAAA;AAAA,EAExB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,0BAA0B;AAAA;AAAA,EAE1B,SAAS;AACX;AAmBO,MAAM,uBAAuB,MAAM;AAAA,EAOxC,YAAY,SAAgC;AAC1C,UAAM,QAAQ,SAAS,QAAQ,UAAU,SAAY,SAAY,EAAE,OAAO,QAAQ,MAAA,CAAO;AAPlF;AACA;AACA;AACA;AACA;AAIP,SAAK,OAAO;AACZ,SAAK,OAAO,QAAQ;AACpB,SAAK,OAAO,QAAQ;AACpB,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,CAAA;AAAA,EACpC;AAAA;AAAA,EAGA,WAAmB;AACjB,WAAO,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,GAAG,KAAK,OAAO,MAAM,KAAK,IAAI,KAAK,EAAE;AAAA,EAC5E;AAAA,EAEA,SAAkC;AAChC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,IAAA;AAAA,EAElB;AACF;AAEO,SAAS,iBAAiB,OAAyC;AACxE,SAAO,iBAAiB;AAC1B;AAGO,SAAS,iBACd,OACA,UACgB;AAChB,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,QAAM,UACJ,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,SAAS;AACrE,SAAO,IAAI,eAAe,EAAE,GAAG,UAAU,SAAS,OAAO,OAAO;AAClE;AAGO,SAAS,oBACd,QACiD;AACjD,MAAI,OAAO,WAAW,SAAU,QAAO,EAAE,MAAM,MAAM,SAAS,UAAU,KAAA;AACxE,MAAI,CAAC,UAAU,OAAO,WAAW,iBAAiB,EAAE,MAAM,MAAM,SAAS,KAAA;AACzE,QAAM,SAAS;AACf,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,EAAA;AAEnE;;;;;;"}
+{"version":3,"file":"errors.cjs","sources":["../../src/diagnostics/errors.ts"],"sourcesContent":["/**\n * Typed SDK errors. Every failure the SDK surfaces to a consumer carries a\n * stable `code` (matchable in code), a human `message`, and a `hint` — the\n * one-line \"what to do about it\" that turns a silent failure into a debuggable\n * one. Backend rejections keep their structured `{ status, detail }` payload.\n */\n\nexport const ATHENA_SDK_ERROR_CODES = {\n  /** No token and no API key resolved before a request had to be sent. */\n  auth_missing: 'auth_missing',\n  /** The server refused the credential (401 / statewire `unauthorized` fin). */\n  auth_rejected: 'auth_rejected',\n  /**\n   * `/_athena/auth` did not answer within the timeout on the last attempt of\n   * its bounded retry cycle. The bridge stopped retrying (see\n   * `ParentBridgeState.error`).\n   */\n  auth_bridge_timeout: 'auth_bridge_timeout',\n  /**\n   * `/_athena/auth` refused the mint (a 4xx other than 404), answered a body\n   * it cannot read, or kept failing (5xx, 408, 429, network) through its\n   * bounded retry cycle. The bridge stopped retrying and hands out no token\n   * (see `ParentBridgeState.error`).\n   */\n  auth_bridge_failed: 'auth_bridge_failed',\n  /**\n   * `AthenaSSOProvider`'s session read (`/api/sso/userinfo`) kept failing\n   * (5xx, 408, 429, network, timeout) through its bounded retries, or\n   * answered another status it does not retry, or a 2xx without a JSON body.\n   * The provider shows `displayOnError` with reason `request_failed`.\n   */\n  auth_sso_failed: 'auth_sso_failed',\n  /** The statewire sync URL could not be derived from the configuration. */\n  config_invalid: 'config_invalid',\n  /** The thread list request failed. */\n  threads_list_failed: 'threads_list_failed',\n  /** Loading a thread's history failed. */\n  thread_load_failed: 'thread_load_failed',\n  /**\n   * Pinning / unpinning a thread failed. `status` 404 / 405 means the backend\n   * predates `POST /api/conversations/threads/favorite` (see\n   * `isThreadFavoriteUnavailableError`); the pin then stays read-only.\n   */\n  thread_favorite_failed: 'thread_favorite_failed',\n  /**\n   * Renaming a thread failed. `status` 404 / 405 means the backend predates\n   * `POST /api/conversations/threads/rename` (see\n   * `isThreadRenameUnavailableError`); the list then offers no rename.\n   */\n  thread_rename_failed: 'thread_rename_failed',\n  /**\n   * Archiving a thread failed. `status` 404 / 405 means the backend has no\n   * archive route (see `isThreadArchiveUnavailableError`); the list then\n   * offers no archive action.\n   */\n  thread_archive_failed: 'thread_archive_failed',\n  /** The statewire host rejected a command (structured `{status, detail}`). */\n  statewire_rejected: 'statewire_rejected',\n  /** The statewire connection is gone and will not reconnect on its own. */\n  statewire_gone: 'statewire_gone',\n  /** The selected collab agent / channel was refused by the backend. */\n  collab_agent_rejected: 'collab_agent_rejected',\n  /** A React render error crashed the chat surface (caught by the SDK's error boundary). */\n  chat_render_crash: 'chat_render_crash',\n  /** A pasted or dropped file could not be uploaded as a composer attachment. */\n  attachment_failed: 'attachment_failed',\n  /** Mention suggestions for a scope failed after every retry. */\n  mentions_fetch_failed: 'mentions_fetch_failed',\n  /** A composer write queued before the chat was ready can no longer land (thread switched, identity changed, provider unmounted). */\n  composer_write_dropped: 'composer_write_dropped',\n  /** The repository code search request (`/api/search/repositories`) failed. */\n  repo_search_failed: 'repo_search_failed',\n  /**\n   * A session workbench read failed: the session's workspace\n   * (`/api/conversations/threads/{id}/workspace`) or a computer's status or\n   * SSH target.\n   */\n  session_workspace_failed: 'session_workspace_failed',\n  /** Anything else. */\n  unknown: 'unknown',\n} as const;\n\nexport type AthenaSdkErrorCode =\n  (typeof ATHENA_SDK_ERROR_CODES)[keyof typeof ATHENA_SDK_ERROR_CODES];\n\nexport interface AthenaSdkErrorOptions {\n  code: AthenaSdkErrorCode;\n  message: string;\n  /** One line telling the integrator what to check or change. */\n  hint?: string;\n  /** HTTP-ish status when the failure came from a server. */\n  status?: number;\n  /** Structured server detail (e.g. `{ code, message }` from agora). */\n  detail?: unknown;\n  cause?: unknown;\n  /** Extra structured context safe to log (never credentials). */\n  context?: Record<string, unknown>;\n}\n\nexport class AthenaSdkError extends Error {\n  readonly code: AthenaSdkErrorCode;\n  readonly hint: string | undefined;\n  readonly status: number | undefined;\n  readonly detail: unknown;\n  readonly context: Record<string, unknown>;\n\n  constructor(options: AthenaSdkErrorOptions) {\n    super(options.message, options.cause === undefined ? undefined : { cause: options.cause });\n    this.name = 'AthenaSdkError';\n    this.code = options.code;\n    this.hint = options.hint;\n    this.status = options.status;\n    this.detail = options.detail;\n    this.context = options.context ?? {};\n  }\n\n  /** A log/console-friendly one-liner: `[code] message — hint`. */\n  describe(): string {\n    return `[${this.code}] ${this.message}${this.hint ? ` — ${this.hint}` : ''}`;\n  }\n\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      hint: this.hint,\n      status: this.status,\n      detail: this.detail,\n      context: this.context,\n    };\n  }\n}\n\nexport function isAthenaSdkError(value: unknown): value is AthenaSdkError {\n  return value instanceof AthenaSdkError;\n}\n\n/** Wrap any thrown value as an `AthenaSdkError` (idempotent for SDK errors). */\nexport function toAthenaSdkError(\n  value: unknown,\n  fallback: Omit<AthenaSdkErrorOptions, 'cause'>,\n): AthenaSdkError {\n  if (isAthenaSdkError(value)) return value;\n  const message =\n    value instanceof Error && value.message ? value.message : fallback.message;\n  return new AthenaSdkError({ ...fallback, message, cause: value });\n}\n\n/** Structured `{ code, message }` detail from an agora rejection, if present. */\nexport function readRejectionDetail(\n  detail: unknown,\n): { code: string | null; message: string | null } {\n  if (typeof detail === 'string') return { code: null, message: detail || null };\n  if (!detail || typeof detail !== 'object') return { code: null, message: null };\n  const record = detail as { code?: unknown; message?: unknown };\n  return {\n    code: typeof record.code === 'string' ? record.code : null,\n    message: typeof record.message === 'string' ? record.message : null,\n  };\n}\n"],"names":[],"mappings":";;;;;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC,cAAc;AAAA;AAAA,EAEd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOpB,iBAAiB;AAAA;AAAA,EAEjB,gBAAgB;AAAA;AAAA,EAEhB,qBAAqB;AAAA;AAAA,EAErB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,uBAAuB;AAAA;AAAA,EAEvB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,uBAAuB;AAAA;AAAA,EAEvB,mBAAmB;AAAA;AAAA,EAEnB,mBAAmB;AAAA;AAAA,EAEnB,uBAAuB;AAAA;AAAA,EAEvB,wBAAwB;AAAA;AAAA,EAExB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,0BAA0B;AAAA;AAAA,EAE1B,SAAS;AACX;AAmBO,MAAM,uBAAuB,MAAM;AAAA,EAOxC,YAAY,SAAgC;AAC1C,UAAM,QAAQ,SAAS,QAAQ,UAAU,SAAY,SAAY,EAAE,OAAO,QAAQ,MAAA,CAAO;AAPlF;AACA;AACA;AACA;AACA;AAIP,SAAK,OAAO;AACZ,SAAK,OAAO,QAAQ;AACpB,SAAK,OAAO,QAAQ;AACpB,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,CAAA;AAAA,EACpC;AAAA;AAAA,EAGA,WAAmB;AACjB,WAAO,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,GAAG,KAAK,OAAO,MAAM,KAAK,IAAI,KAAK,EAAE;AAAA,EAC5E;AAAA,EAEA,SAAkC;AAChC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,IAAA;AAAA,EAElB;AACF;AAEO,SAAS,iBAAiB,OAAyC;AACxE,SAAO,iBAAiB;AAC1B;AAGO,SAAS,iBACd,OACA,UACgB;AAChB,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,QAAM,UACJ,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,SAAS;AACrE,SAAO,IAAI,eAAe,EAAE,GAAG,UAAU,SAAS,OAAO,OAAO;AAClE;AAGO,SAAS,oBACd,QACiD;AACjD,MAAI,OAAO,WAAW,SAAU,QAAO,EAAE,MAAM,MAAM,SAAS,UAAU,KAAA;AACxE,MAAI,CAAC,UAAU,OAAO,WAAW,iBAAiB,EAAE,MAAM,MAAM,SAAS,KAAA;AACzE,QAAM,SAAS;AACf,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,EAAA;AAEnE;;;;;;"}

package/dist/diagnostics/errors.d.ts

@@ -22,6 +22,13 @@ export declare const ATHENA_SDK_ERROR_CODES: {
      * (see `ParentBridgeState.error`).
      */
     readonly auth_bridge_failed: 'auth_bridge_failed';
+    /**
+     * `AthenaSSOProvider`'s session read (`/api/sso/userinfo`) kept failing
+     * (5xx, 408, 429, network, timeout) through its bounded retries, or
+     * answered another status it does not retry, or a 2xx without a JSON body.
+     * The provider shows `displayOnError` with reason `request_failed`.
+     */
+    readonly auth_sso_failed: 'auth_sso_failed';
     /** The statewire sync URL could not be derived from the configuration. */
     readonly config_invalid: 'config_invalid';
     /** The thread list request failed. */

package/dist/diagnostics/errors.js

@@ -19,6 +19,13 @@ const ATHENA_SDK_ERROR_CODES = {
    * (see `ParentBridgeState.error`).
    */
   auth_bridge_failed: "auth_bridge_failed",
+  /**
+   * `AthenaSSOProvider`'s session read (`/api/sso/userinfo`) kept failing
+   * (5xx, 408, 429, network, timeout) through its bounded retries, or
+   * answered another status it does not retry, or a 2xx without a JSON body.
+   * The provider shows `displayOnError` with reason `request_failed`.
+   */
+  auth_sso_failed: "auth_sso_failed",
   /** The statewire sync URL could not be derived from the configuration. */
   config_invalid: "config_invalid",
   /** The thread list request failed. */

package/dist/diagnostics/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sources":["../../src/diagnostics/errors.ts"],"sourcesContent":["/**\n * Typed SDK errors. Every failure the SDK surfaces to a consumer carries a\n * stable `code` (matchable in code), a human `message`, and a `hint` — the\n * one-line \"what to do about it\" that turns a silent failure into a debuggable\n * one. Backend rejections keep their structured `{ status, detail }` payload.\n */\n\nexport const ATHENA_SDK_ERROR_CODES = {\n  /** No token and no API key resolved before a request had to be sent. */\n  auth_missing: 'auth_missing',\n  /** The server refused the credential (401 / statewire `unauthorized` fin). */\n  auth_rejected: 'auth_rejected',\n  /**\n   * `/_athena/auth` did not answer within the timeout on the last attempt of\n   * its bounded retry cycle. The bridge stopped retrying (see\n   * `ParentBridgeState.error`).\n   */\n  auth_bridge_timeout: 'auth_bridge_timeout',\n  /**\n   * `/_athena/auth` refused the mint (a 4xx other than 404), answered a body\n   * it cannot read, or kept failing (5xx, 408, 429, network) through its\n   * bounded retry cycle. The bridge stopped retrying and hands out no token\n   * (see `ParentBridgeState.error`).\n   */\n  auth_bridge_failed: 'auth_bridge_failed',\n  /** The statewire sync URL could not be derived from the configuration. */\n  config_invalid: 'config_invalid',\n  /** The thread list request failed. */\n  threads_list_failed: 'threads_list_failed',\n  /** Loading a thread's history failed. */\n  thread_load_failed: 'thread_load_failed',\n  /**\n   * Pinning / unpinning a thread failed. `status` 404 / 405 means the backend\n   * predates `POST /api/conversations/threads/favorite` (see\n   * `isThreadFavoriteUnavailableError`); the pin then stays read-only.\n   */\n  thread_favorite_failed: 'thread_favorite_failed',\n  /**\n   * Renaming a thread failed. `status` 404 / 405 means the backend predates\n   * `POST /api/conversations/threads/rename` (see\n   * `isThreadRenameUnavailableError`); the list then offers no rename.\n   */\n  thread_rename_failed: 'thread_rename_failed',\n  /**\n   * Archiving a thread failed. `status` 404 / 405 means the backend has no\n   * archive route (see `isThreadArchiveUnavailableError`); the list then\n   * offers no archive action.\n   */\n  thread_archive_failed: 'thread_archive_failed',\n  /** The statewire host rejected a command (structured `{status, detail}`). */\n  statewire_rejected: 'statewire_rejected',\n  /** The statewire connection is gone and will not reconnect on its own. */\n  statewire_gone: 'statewire_gone',\n  /** The selected collab agent / channel was refused by the backend. */\n  collab_agent_rejected: 'collab_agent_rejected',\n  /** A React render error crashed the chat surface (caught by the SDK's error boundary). */\n  chat_render_crash: 'chat_render_crash',\n  /** A pasted or dropped file could not be uploaded as a composer attachment. */\n  attachment_failed: 'attachment_failed',\n  /** Mention suggestions for a scope failed after every retry. */\n  mentions_fetch_failed: 'mentions_fetch_failed',\n  /** A composer write queued before the chat was ready can no longer land (thread switched, identity changed, provider unmounted). */\n  composer_write_dropped: 'composer_write_dropped',\n  /** The repository code search request (`/api/search/repositories`) failed. */\n  repo_search_failed: 'repo_search_failed',\n  /**\n   * A session workbench read failed: the session's workspace\n   * (`/api/conversations/threads/{id}/workspace`) or a computer's status or\n   * SSH target.\n   */\n  session_workspace_failed: 'session_workspace_failed',\n  /** Anything else. */\n  unknown: 'unknown',\n} as const;\n\nexport type AthenaSdkErrorCode =\n  (typeof ATHENA_SDK_ERROR_CODES)[keyof typeof ATHENA_SDK_ERROR_CODES];\n\nexport interface AthenaSdkErrorOptions {\n  code: AthenaSdkErrorCode;\n  message: string;\n  /** One line telling the integrator what to check or change. */\n  hint?: string;\n  /** HTTP-ish status when the failure came from a server. */\n  status?: number;\n  /** Structured server detail (e.g. `{ code, message }` from agora). */\n  detail?: unknown;\n  cause?: unknown;\n  /** Extra structured context safe to log (never credentials). */\n  context?: Record<string, unknown>;\n}\n\nexport class AthenaSdkError extends Error {\n  readonly code: AthenaSdkErrorCode;\n  readonly hint: string | undefined;\n  readonly status: number | undefined;\n  readonly detail: unknown;\n  readonly context: Record<string, unknown>;\n\n  constructor(options: AthenaSdkErrorOptions) {\n    super(options.message, options.cause === undefined ? undefined : { cause: options.cause });\n    this.name = 'AthenaSdkError';\n    this.code = options.code;\n    this.hint = options.hint;\n    this.status = options.status;\n    this.detail = options.detail;\n    this.context = options.context ?? {};\n  }\n\n  /** A log/console-friendly one-liner: `[code] message — hint`. */\n  describe(): string {\n    return `[${this.code}] ${this.message}${this.hint ? ` — ${this.hint}` : ''}`;\n  }\n\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      hint: this.hint,\n      status: this.status,\n      detail: this.detail,\n      context: this.context,\n    };\n  }\n}\n\nexport function isAthenaSdkError(value: unknown): value is AthenaSdkError {\n  return value instanceof AthenaSdkError;\n}\n\n/** Wrap any thrown value as an `AthenaSdkError` (idempotent for SDK errors). */\nexport function toAthenaSdkError(\n  value: unknown,\n  fallback: Omit<AthenaSdkErrorOptions, 'cause'>,\n): AthenaSdkError {\n  if (isAthenaSdkError(value)) return value;\n  const message =\n    value instanceof Error && value.message ? value.message : fallback.message;\n  return new AthenaSdkError({ ...fallback, message, cause: value });\n}\n\n/** Structured `{ code, message }` detail from an agora rejection, if present. */\nexport function readRejectionDetail(\n  detail: unknown,\n): { code: string | null; message: string | null } {\n  if (typeof detail === 'string') return { code: null, message: detail || null };\n  if (!detail || typeof detail !== 'object') return { code: null, message: null };\n  const record = detail as { code?: unknown; message?: unknown };\n  return {\n    code: typeof record.code === 'string' ? record.code : null,\n    message: typeof record.message === 'string' ? record.message : null,\n  };\n}\n"],"names":[],"mappings":";;;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC,cAAc;AAAA;AAAA,EAEd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,qBAAqB;AAAA;AAAA,EAErB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,uBAAuB;AAAA;AAAA,EAEvB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,uBAAuB;AAAA;AAAA,EAEvB,mBAAmB;AAAA;AAAA,EAEnB,mBAAmB;AAAA;AAAA,EAEnB,uBAAuB;AAAA;AAAA,EAEvB,wBAAwB;AAAA;AAAA,EAExB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,0BAA0B;AAAA;AAAA,EAE1B,SAAS;AACX;AAmBO,MAAM,uBAAuB,MAAM;AAAA,EAOxC,YAAY,SAAgC;AAC1C,UAAM,QAAQ,SAAS,QAAQ,UAAU,SAAY,SAAY,EAAE,OAAO,QAAQ,MAAA,CAAO;AAPlF;AACA;AACA;AACA;AACA;AAIP,SAAK,OAAO;AACZ,SAAK,OAAO,QAAQ;AACpB,SAAK,OAAO,QAAQ;AACpB,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,CAAA;AAAA,EACpC;AAAA;AAAA,EAGA,WAAmB;AACjB,WAAO,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,GAAG,KAAK,OAAO,MAAM,KAAK,IAAI,KAAK,EAAE;AAAA,EAC5E;AAAA,EAEA,SAAkC;AAChC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,IAAA;AAAA,EAElB;AACF;AAEO,SAAS,iBAAiB,OAAyC;AACxE,SAAO,iBAAiB;AAC1B;AAGO,SAAS,iBACd,OACA,UACgB;AAChB,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,QAAM,UACJ,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,SAAS;AACrE,SAAO,IAAI,eAAe,EAAE,GAAG,UAAU,SAAS,OAAO,OAAO;AAClE;AAGO,SAAS,oBACd,QACiD;AACjD,MAAI,OAAO,WAAW,SAAU,QAAO,EAAE,MAAM,MAAM,SAAS,UAAU,KAAA;AACxE,MAAI,CAAC,UAAU,OAAO,WAAW,iBAAiB,EAAE,MAAM,MAAM,SAAS,KAAA;AACzE,QAAM,SAAS;AACf,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,EAAA;AAEnE;"}
+{"version":3,"file":"errors.js","sources":["../../src/diagnostics/errors.ts"],"sourcesContent":["/**\n * Typed SDK errors. Every failure the SDK surfaces to a consumer carries a\n * stable `code` (matchable in code), a human `message`, and a `hint` — the\n * one-line \"what to do about it\" that turns a silent failure into a debuggable\n * one. Backend rejections keep their structured `{ status, detail }` payload.\n */\n\nexport const ATHENA_SDK_ERROR_CODES = {\n  /** No token and no API key resolved before a request had to be sent. */\n  auth_missing: 'auth_missing',\n  /** The server refused the credential (401 / statewire `unauthorized` fin). */\n  auth_rejected: 'auth_rejected',\n  /**\n   * `/_athena/auth` did not answer within the timeout on the last attempt of\n   * its bounded retry cycle. The bridge stopped retrying (see\n   * `ParentBridgeState.error`).\n   */\n  auth_bridge_timeout: 'auth_bridge_timeout',\n  /**\n   * `/_athena/auth` refused the mint (a 4xx other than 404), answered a body\n   * it cannot read, or kept failing (5xx, 408, 429, network) through its\n   * bounded retry cycle. The bridge stopped retrying and hands out no token\n   * (see `ParentBridgeState.error`).\n   */\n  auth_bridge_failed: 'auth_bridge_failed',\n  /**\n   * `AthenaSSOProvider`'s session read (`/api/sso/userinfo`) kept failing\n   * (5xx, 408, 429, network, timeout) through its bounded retries, or\n   * answered another status it does not retry, or a 2xx without a JSON body.\n   * The provider shows `displayOnError` with reason `request_failed`.\n   */\n  auth_sso_failed: 'auth_sso_failed',\n  /** The statewire sync URL could not be derived from the configuration. */\n  config_invalid: 'config_invalid',\n  /** The thread list request failed. */\n  threads_list_failed: 'threads_list_failed',\n  /** Loading a thread's history failed. */\n  thread_load_failed: 'thread_load_failed',\n  /**\n   * Pinning / unpinning a thread failed. `status` 404 / 405 means the backend\n   * predates `POST /api/conversations/threads/favorite` (see\n   * `isThreadFavoriteUnavailableError`); the pin then stays read-only.\n   */\n  thread_favorite_failed: 'thread_favorite_failed',\n  /**\n   * Renaming a thread failed. `status` 404 / 405 means the backend predates\n   * `POST /api/conversations/threads/rename` (see\n   * `isThreadRenameUnavailableError`); the list then offers no rename.\n   */\n  thread_rename_failed: 'thread_rename_failed',\n  /**\n   * Archiving a thread failed. `status` 404 / 405 means the backend has no\n   * archive route (see `isThreadArchiveUnavailableError`); the list then\n   * offers no archive action.\n   */\n  thread_archive_failed: 'thread_archive_failed',\n  /** The statewire host rejected a command (structured `{status, detail}`). */\n  statewire_rejected: 'statewire_rejected',\n  /** The statewire connection is gone and will not reconnect on its own. */\n  statewire_gone: 'statewire_gone',\n  /** The selected collab agent / channel was refused by the backend. */\n  collab_agent_rejected: 'collab_agent_rejected',\n  /** A React render error crashed the chat surface (caught by the SDK's error boundary). */\n  chat_render_crash: 'chat_render_crash',\n  /** A pasted or dropped file could not be uploaded as a composer attachment. */\n  attachment_failed: 'attachment_failed',\n  /** Mention suggestions for a scope failed after every retry. */\n  mentions_fetch_failed: 'mentions_fetch_failed',\n  /** A composer write queued before the chat was ready can no longer land (thread switched, identity changed, provider unmounted). */\n  composer_write_dropped: 'composer_write_dropped',\n  /** The repository code search request (`/api/search/repositories`) failed. */\n  repo_search_failed: 'repo_search_failed',\n  /**\n   * A session workbench read failed: the session's workspace\n   * (`/api/conversations/threads/{id}/workspace`) or a computer's status or\n   * SSH target.\n   */\n  session_workspace_failed: 'session_workspace_failed',\n  /** Anything else. */\n  unknown: 'unknown',\n} as const;\n\nexport type AthenaSdkErrorCode =\n  (typeof ATHENA_SDK_ERROR_CODES)[keyof typeof ATHENA_SDK_ERROR_CODES];\n\nexport interface AthenaSdkErrorOptions {\n  code: AthenaSdkErrorCode;\n  message: string;\n  /** One line telling the integrator what to check or change. */\n  hint?: string;\n  /** HTTP-ish status when the failure came from a server. */\n  status?: number;\n  /** Structured server detail (e.g. `{ code, message }` from agora). */\n  detail?: unknown;\n  cause?: unknown;\n  /** Extra structured context safe to log (never credentials). */\n  context?: Record<string, unknown>;\n}\n\nexport class AthenaSdkError extends Error {\n  readonly code: AthenaSdkErrorCode;\n  readonly hint: string | undefined;\n  readonly status: number | undefined;\n  readonly detail: unknown;\n  readonly context: Record<string, unknown>;\n\n  constructor(options: AthenaSdkErrorOptions) {\n    super(options.message, options.cause === undefined ? undefined : { cause: options.cause });\n    this.name = 'AthenaSdkError';\n    this.code = options.code;\n    this.hint = options.hint;\n    this.status = options.status;\n    this.detail = options.detail;\n    this.context = options.context ?? {};\n  }\n\n  /** A log/console-friendly one-liner: `[code] message — hint`. */\n  describe(): string {\n    return `[${this.code}] ${this.message}${this.hint ? ` — ${this.hint}` : ''}`;\n  }\n\n  toJSON(): Record<string, unknown> {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      hint: this.hint,\n      status: this.status,\n      detail: this.detail,\n      context: this.context,\n    };\n  }\n}\n\nexport function isAthenaSdkError(value: unknown): value is AthenaSdkError {\n  return value instanceof AthenaSdkError;\n}\n\n/** Wrap any thrown value as an `AthenaSdkError` (idempotent for SDK errors). */\nexport function toAthenaSdkError(\n  value: unknown,\n  fallback: Omit<AthenaSdkErrorOptions, 'cause'>,\n): AthenaSdkError {\n  if (isAthenaSdkError(value)) return value;\n  const message =\n    value instanceof Error && value.message ? value.message : fallback.message;\n  return new AthenaSdkError({ ...fallback, message, cause: value });\n}\n\n/** Structured `{ code, message }` detail from an agora rejection, if present. */\nexport function readRejectionDetail(\n  detail: unknown,\n): { code: string | null; message: string | null } {\n  if (typeof detail === 'string') return { code: null, message: detail || null };\n  if (!detail || typeof detail !== 'object') return { code: null, message: null };\n  const record = detail as { code?: unknown; message?: unknown };\n  return {\n    code: typeof record.code === 'string' ? record.code : null,\n    message: typeof record.message === 'string' ? record.message : null,\n  };\n}\n"],"names":[],"mappings":";;;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC,cAAc;AAAA;AAAA,EAEd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMf,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOpB,iBAAiB;AAAA;AAAA,EAEjB,gBAAgB;AAAA;AAAA,EAEhB,qBAAqB;AAAA;AAAA,EAErB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,uBAAuB;AAAA;AAAA,EAEvB,oBAAoB;AAAA;AAAA,EAEpB,gBAAgB;AAAA;AAAA,EAEhB,uBAAuB;AAAA;AAAA,EAEvB,mBAAmB;AAAA;AAAA,EAEnB,mBAAmB;AAAA;AAAA,EAEnB,uBAAuB;AAAA;AAAA,EAEvB,wBAAwB;AAAA;AAAA,EAExB,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,0BAA0B;AAAA;AAAA,EAE1B,SAAS;AACX;AAmBO,MAAM,uBAAuB,MAAM;AAAA,EAOxC,YAAY,SAAgC;AAC1C,UAAM,QAAQ,SAAS,QAAQ,UAAU,SAAY,SAAY,EAAE,OAAO,QAAQ,MAAA,CAAO;AAPlF;AACA;AACA;AACA;AACA;AAIP,SAAK,OAAO;AACZ,SAAK,OAAO,QAAQ;AACpB,SAAK,OAAO,QAAQ;AACpB,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,UAAU,QAAQ,WAAW,CAAA;AAAA,EACpC;AAAA;AAAA,EAGA,WAAmB;AACjB,WAAO,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,GAAG,KAAK,OAAO,MAAM,KAAK,IAAI,KAAK,EAAE;AAAA,EAC5E;AAAA,EAEA,SAAkC;AAChC,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,KAAK;AAAA,MACb,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,IAAA;AAAA,EAElB;AACF;AAEO,SAAS,iBAAiB,OAAyC;AACxE,SAAO,iBAAiB;AAC1B;AAGO,SAAS,iBACd,OACA,UACgB;AAChB,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,QAAM,UACJ,iBAAiB,SAAS,MAAM,UAAU,MAAM,UAAU,SAAS;AACrE,SAAO,IAAI,eAAe,EAAE,GAAG,UAAU,SAAS,OAAO,OAAO;AAClE;AAGO,SAAS,oBACd,QACiD;AACjD,MAAI,OAAO,WAAW,SAAU,QAAO,EAAE,MAAM,MAAM,SAAS,UAAU,KAAA;AACxE,MAAI,CAAC,UAAU,OAAO,WAAW,iBAAiB,EAAE,MAAM,MAAM,SAAS,KAAA;AACzE,QAAM,SAAS;AACf,SAAO;AAAA,IACL,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,IACtD,SAAS,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;AAAA,EAAA;AAEnE;"}

package/dist/react/package.json.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const version = "0.36.1";
+const version = "0.38.0";
 const packageJson = {
   version
 };

package/dist/react/package.json.js

@@ -1,4 +1,4 @@
-const version = "0.36.1";
+const version = "0.38.0";
 const packageJson = {
   version
 };