@athenaintel/react 0.37.0 → 0.38.1

package/dist/agent-runtime/src/use-deep-agent-config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-config.cjs","sources":["../../../../agent-runtime/src/use-deep-agent-config.ts"],"sourcesContent":["import { useStatewireSendCommand, useStatewireState } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport {\n  applyConfigPatch,\n  applyToolsDisable,\n  applyToolsEnable,\n  type ThreadConfigCustom,\n  type ThreadConfigPatch,\n} from './config-mutations';\nimport { statewireRejectionPayload } from './errors';\nimport { DEEP_AGENT_CONFIG_COMMANDS } from './generated/runconfig-contract';\nimport { readDeepAgentStateThreadId } from './statewire-state';\n\ndeclare module '@assistant-ui/core' {\n  namespace Assistant {\n    interface Commands {\n      /** Set / unset top-level keys of the thread's server config (`null` unsets). */\n      configPatch: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch;\n        patch: Record<string, unknown>;\n      };\n      /** Append ids to the thread's `enabled_tools`. */\n      configToolsEnable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable;\n        toolIds: string[];\n      };\n      /** Remove ids from the thread's `enabled_tools`. */\n      configToolsDisable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable;\n        toolIds: string[];\n      };\n    }\n  }\n}\n\n/**\n * The replicated `state.config` lane of a thread with server-authoritative\n * run config. Absent — and `readServerConfig` returns `null` — while the\n * thread has never been configured (version 0: a brand-new thread, or one\n * created by a client predating the lane).\n */\nexport interface DeepAgentServerConfig {\n  /** Monotonic server-incremented version; always >= 1 when the lane exists. */\n  version: number;\n  /** The thread-config keys every run on this thread uses as its base. */\n  custom: ThreadConfigCustom;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\n/**\n * Read the server-config lane off a raw statewire state.\n *\n * Identity-preserving (returns the raw `state.config` reference), so it is\n * safe as a `useStatewireState` selector: the reference only changes when the\n * server writes the lane.\n */\nexport function readServerConfig(state: unknown): DeepAgentServerConfig | null {\n  const config = (state as { config?: unknown } | null | undefined)?.config;\n  if (!isRecord(config)) return null;\n  const version = config.version;\n  if (typeof version !== 'number' || !Number.isInteger(version) || version <= 0) return null;\n  if (!isRecord(config.custom)) return null;\n  return config as unknown as DeepAgentServerConfig;\n}\n\n/** The thread's server config version: 0 while the thread has never been configured. */\nexport function readConfigVersion(state: unknown): number {\n  return readServerConfig(state)?.version ?? 0;\n}\n\n/**\n * {@link readServerConfig}, but only from a state `threadId`'s own attach\n * produced (`readDeepAgentStateThreadId`); any other state reads as\n * unconfigured. With no `threadId` it is {@link readServerConfig} unchanged.\n *\n * Identity-preserving like {@link readServerConfig}, so it is safe as a\n * `useStatewireState` selector.\n */\nexport function readThreadServerConfig({\n  state,\n  threadId,\n}: {\n  state: unknown;\n  threadId: string | undefined;\n}): DeepAgentServerConfig | null {\n  if (threadId !== undefined && readDeepAgentStateThreadId(state) !== threadId) return null;\n  return readServerConfig(state);\n}\n\n/**\n * The 403 rejection codes a view-only collaborator's `config/*` write can\n * come back with: `config_write_forbidden` from the config host's own gate,\n * or `thread_write_forbidden` from the host-wide mutation gate that runs\n * ahead of it and refuses every thread-mutating command on a view grant.\n */\nconst CONFIG_WRITE_FORBIDDEN_CODES: ReadonlySet<string> = new Set([\n  'config_write_forbidden',\n  'thread_write_forbidden',\n]);\n\n/**\n * Whether a rejected `config/*` command was refused because the submitter\n * only has view access to the session. The write is not retriable by that\n * user; hosts disable their config controls.\n */\nexport function isConfigWriteForbiddenRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 403) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return typeof detail?.code === 'string' && CONFIG_WRITE_FORBIDDEN_CODES.has(detail.code);\n}\n\n/**\n * Whether a rejected `config/*` command was refused because the thread's\n * workspace cannot hold server config at all (`config_sync_unavailable`, a\n * regionally-pinned workspace). No write will ever succeed on the thread;\n * hosts stop issuing them and send their full config per run instead.\n */\nexport function isConfigSyncUnavailableRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 400) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'config_sync_unavailable';\n}\n\n/** The settled result of a `config/*` command: the new server config. */\nexport interface DeepAgentConfigWriteResult {\n  version: number;\n  custom: ThreadConfigCustom;\n}\n\n/** An observed server-config version, delivered to the host callback. */\nexport interface DeepAgentServerConfigEvent {\n  version: number;\n  /** The server config with this client's still-pending writes folded over. */\n  custom: ThreadConfigCustom;\n}\n\ninterface PendingOp {\n  id: number;\n  apply: (custom: ThreadConfigCustom) => ThreadConfigCustom;\n  /** The version the server assigned this op; retired once the lane reaches it. */\n  settledVersion: number | null;\n}\n\n/**\n * Fold the pending optimistic ops over the server config — the effective\n * config a client shows and sends against. Pure, for the tests.\n */\nexport function foldPendingConfigOps(\n  serverConfig: DeepAgentServerConfig | null,\n  ops: readonly Pick<PendingOp, 'apply' | 'settledVersion'>[]\n): ThreadConfigCustom {\n  const version = serverConfig?.version ?? 0;\n  let custom: ThreadConfigCustom = serverConfig?.custom ?? {};\n  for (const op of ops) {\n    if (op.settledVersion !== null && op.settledVersion <= version) continue;\n    custom = op.apply(custom);\n  }\n  return custom;\n}\n\nexport interface UseDeepAgentConfigOptions {\n  /**\n   * Fired whenever the server writes a new version of the lane (another\n   * device, the seed, or the echo of our own command), with this client's\n   * still-pending writes folded over — hosts mirror it into their local\n   * store; nothing is ever clobbered because pending edits stay on top.\n   */\n  onServerConfig?: (event: DeepAgentServerConfigEvent) => void;\n  /**\n   * The thread this binding serves. When set, the lane is read only from a\n   * state that thread's own attach produced ({@link readThreadServerConfig}):\n   * for the first render after a thread switch the client still projects the\n   * previous thread's state, and adopting its lane would report the previous\n   * thread's config and version as this thread's.\n   */\n  threadId?: string;\n}\n\nexport interface UseDeepAgentConfigResult {\n  /** Reactive server config version (0 while the thread has never been configured). */\n  configVersion: number;\n  /** Reactive server-config lane, or `null` at version 0. */\n  serverConfig: DeepAgentServerConfig | null;\n  /**\n   * The effective thread config: the server lane with this client's pending\n   * writes folded over. `{}` at version 0 with nothing pending.\n   */\n  custom: ThreadConfigCustom;\n  /** `true` while at least one `config/*` command is unacknowledged by the server. */\n  hasPendingWrites: boolean;\n  /** `config/patch` — set / unset top-level keys; `null` unsets. */\n  patchConfig: (patch: ThreadConfigPatch) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/enable`. */\n  enableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/disable`. */\n  disableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n}\n\ntype ConfigCommand =\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch; patch: Record<string, unknown> }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable; toolIds: string[] }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable; toolIds: string[] };\n\n/**\n * The server-authoritative thread config of a deep-agent thread.\n *\n * Every capability a run depends on — model, agent binding, enabled tools,\n * sandbox, environment, … — lives on the thread's server config lane and is\n * changed only through the `config/*` commands. Sends carry per-send keys\n * only (`pickPerSendCustom`). The commands are applied optimistically: each\n * one folds its transform over the server config the moment it is issued\n * (`custom`), and retires once the lane reaches the version the server\n * assigned it; a rejection drops it, so the UI snaps back to the truth.\n *\n * Must be mounted under the thread's statewire context (an `AuiProvider`\n * holding `useDeepAgentThread`'s element), keyed by the thread identity so a\n * thread switch remounts it with an empty pending set. A binding that persists\n * what it reads per thread passes `threadId`, so the render that still sees\n * the previous thread's state after a switch reads no lane at all.\n */\nexport function useDeepAgentConfig({\n  threadId,\n  ...options\n}: UseDeepAgentConfigOptions = {}): UseDeepAgentConfigResult {\n  const sendCommand = useStatewireSendCommand();\n  const selectServerConfig = useCallback(\n    (state: unknown) => readThreadServerConfig({ state, threadId }),\n    [threadId]\n  );\n  const serverConfig = useStatewireState(selectServerConfig);\n  return useDeepAgentConfigController({\n    serverConfig,\n    sendCommand: (command) => Promise.resolve(sendCommand(command as never)),\n    ...options,\n  });\n}\n\nexport interface DeepAgentConfigControllerInputs extends UseDeepAgentConfigOptions {\n  serverConfig: DeepAgentServerConfig | null;\n  sendCommand: (command: ConfigCommand) => Promise<unknown>;\n}\n\n/**\n * The transport-agnostic body of {@link useDeepAgentConfig}, with the reactive\n * inputs injected — so the optimistic-overlay behavior is testable without a\n * statewire session.\n */\nexport function useDeepAgentConfigController({\n  serverConfig,\n  sendCommand,\n  onServerConfig,\n}: DeepAgentConfigControllerInputs): UseDeepAgentConfigResult {\n  const [ops, setOps] = useState<readonly PendingOp[]>([]);\n  const nextOpIdRef = useRef(1);\n  const sendCommandRef = useRef(sendCommand);\n  sendCommandRef.current = sendCommand;\n  const onServerConfigRef = useRef(onServerConfig);\n  onServerConfigRef.current = onServerConfig;\n\n  const custom = useMemo(() => foldPendingConfigOps(serverConfig, ops), [serverConfig, ops]);\n\n  // Retire ops the lane has caught up with (their transform is now part of\n  // the server config itself).\n  const serverVersion = serverConfig?.version ?? 0;\n  const serverVersionRef = useRef(serverVersion);\n  serverVersionRef.current = serverVersion;\n  useEffect(() => {\n    setOps((current) => {\n      const kept = current.filter(\n        (op) => op.settledVersion === null || op.settledVersion > serverVersion\n      );\n      return kept.length === current.length ? current : kept;\n    });\n  }, [serverVersion]);\n\n  const lastNotifiedRef = useRef<DeepAgentServerConfig | null>(null);\n  useEffect(() => {\n    if (serverConfig === null || serverConfig === lastNotifiedRef.current) return;\n    lastNotifiedRef.current = serverConfig;\n    onServerConfigRef.current?.({ version: serverConfig.version, custom });\n  }, [serverConfig, custom]);\n\n  const run = useCallback(\n    async (\n      command: ConfigCommand,\n      apply: PendingOp['apply']\n    ): Promise<DeepAgentConfigWriteResult> => {\n      const id = nextOpIdRef.current++;\n      setOps((current) => [...current, { id, apply, settledVersion: null }]);\n      try {\n        const raw = (await sendCommandRef.current(command)) as\n          | { version?: unknown; custom?: unknown }\n          | null\n          | undefined;\n        const version = typeof raw?.version === 'number' ? raw.version : Number.POSITIVE_INFINITY;\n        // The lane echo may have landed before the acknowledgement: retire\n        // now if so, otherwise stamp the version for the retire effect.\n        setOps((current) =>\n          version <= serverVersionRef.current\n            ? current.filter((op) => op.id !== id)\n            : current.map((op) => (op.id === id ? { ...op, settledVersion: version } : op))\n        );\n        return {\n          version: Number.isFinite(version) ? version : 0,\n          custom: isRecord(raw?.custom) ? raw.custom : apply({}),\n        };\n      } catch (error) {\n        setOps((current) => current.filter((op) => op.id !== id));\n        throw error;\n      }\n    },\n    []\n  );\n\n  const patchConfig = useCallback(\n    (patch: ThreadConfigPatch) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.patch, patch }, (base) =>\n        applyConfigPatch(base, patch)\n      ),\n    [run]\n  );\n  const enableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsEnable, toolIds: [...toolIds] }, (base) =>\n        applyToolsEnable(base, toolIds)\n      ),\n    [run]\n  );\n  const disableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsDisable, toolIds: [...toolIds] }, (base) =>\n        applyToolsDisable(base, toolIds)\n      ),\n    [run]\n  );\n\n  return {\n    configVersion: serverVersion,\n    serverConfig,\n    custom,\n    hasPendingWrites: ops.some((op) => op.settledVersion === null),\n    patchConfig,\n    enableTools,\n    disableTools,\n  };\n}\n"],"names":["statewireRejectionPayload","useState","useRef","useMemo","useEffect","useCallback","DEEP_AGENT_CONFIG_COMMANDS","applyConfigPatch","applyToolsEnable","applyToolsDisable"],"mappings":";;;;;;;AAgDA,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAS9D,SAAS,iBAAiB,OAA8C;AAC7E,QAAM,SAAU,+BAAmD;AACnE,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,CAAC,OAAO,UAAU,OAAO,KAAK,WAAW,EAAG,QAAO;AACtF,MAAI,CAAC,SAAS,OAAO,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAgCA,MAAM,mDAAwD,IAAI;AAAA,EAChE;AAAA,EACA;AACF,CAAC;AAOM,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAUA,OAAAA,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,SAAO,QAAO,iCAAQ,UAAS,YAAY,6BAA6B,IAAI,OAAO,IAAI;AACzF;AAQO,SAAS,iCAAiC,OAAyB;AACxE,QAAM,UAAUA,OAAAA,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA0BO,SAAS,qBACd,cACA,KACoB;AACpB,QAAM,WAAU,6CAAc,YAAW;AACzC,MAAI,UAA6B,6CAAc,WAAU,CAAA;AACzD,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,mBAAmB,QAAQ,GAAG,kBAAkB,QAAS;AAChE,aAAS,GAAG,MAAM,MAAM;AAAA,EAC1B;AACA,SAAO;AACT;AAyFO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF,GAA8D;AAC5D,QAAM,CAAC,KAAK,MAAM,IAAIC,MAAAA,SAA+B,CAAA,CAAE;AACvD,QAAM,cAAcC,MAAAA,OAAO,CAAC;AAC5B,QAAM,iBAAiBA,MAAAA,OAAO,WAAW;AACzC,iBAAe,UAAU;AACzB,QAAM,oBAAoBA,MAAAA,OAAO,cAAc;AAC/C,oBAAkB,UAAU;AAE5B,QAAM,SAASC,cAAQ,MAAM,qBAAqB,cAAc,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC;AAIzF,QAAM,iBAAgB,6CAAc,YAAW;AAC/C,QAAM,mBAAmBD,MAAAA,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3BE,QAAAA,UAAU,MAAM;AACd,WAAO,CAAC,YAAY;AAClB,YAAM,OAAO,QAAQ;AAAA,QACnB,CAAC,OAAO,GAAG,mBAAmB,QAAQ,GAAG,iBAAiB;AAAA,MAAA;AAE5D,aAAO,KAAK,WAAW,QAAQ,SAAS,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,kBAAkBF,MAAAA,OAAqC,IAAI;AACjEE,QAAAA,UAAU,MAAM;;AACd,QAAI,iBAAiB,QAAQ,iBAAiB,gBAAgB,QAAS;AACvE,oBAAgB,UAAU;AAC1B,4BAAkB,YAAlB,2CAA4B,EAAE,SAAS,aAAa,SAAS;EAC/D,GAAG,CAAC,cAAc,MAAM,CAAC;AAEzB,QAAM,MAAMC,MAAAA;AAAAA,IACV,OACE,SACA,UACwC;AACxC,YAAM,KAAK,YAAY;AACvB,aAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAA,CAAM,CAAC;AACrE,UAAI;AACF,cAAM,MAAO,MAAM,eAAe,QAAQ,OAAO;AAIjD,cAAM,UAAU,QAAO,2BAAK,aAAY,WAAW,IAAI,UAAU,OAAO;AAGxE;AAAA,UAAO,CAAC,YACN,WAAW,iBAAiB,UACxB,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,IACnC,QAAQ,IAAI,CAAC,OAAQ,GAAG,OAAO,KAAK,EAAE,GAAG,IAAI,gBAAgB,QAAA,IAAY,EAAG;AAAA,QAAA;AAElF,eAAO;AAAA,UACL,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,UAC9C,QAAQ,SAAS,2BAAK,MAAM,IAAI,IAAI,SAAS,MAAM,CAAA,CAAE;AAAA,QAAA;AAAA,MAEzD,SAAS,OAAO;AACd,eAAO,CAAC,YAAY,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;AACxD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,cAAcA,MAAAA;AAAAA,IAClB,CAAC,UACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,OAAO,MAAA;AAAA,MAAS,CAAC,SACtDC,iCAAiB,MAAM,KAAK;AAAA,IAAA;AAAA,IAEhC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,cAAcF,MAAAA;AAAAA,IAClB,CAAC,YACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,aAAa,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC5EE,iCAAiB,MAAM,OAAO;AAAA,IAAA;AAAA,IAElC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,eAAeH,MAAAA;AAAAA,IACnB,CAAC,YACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,cAAc,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC7EG,kCAAkB,MAAM,OAAO;AAAA,IAAA;AAAA,IAEnC,CAAC,GAAG;AAAA,EAAA;AAGN,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI,KAAK,CAAC,OAAO,GAAG,mBAAmB,IAAI;AAAA,IAC7D;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;;;;;;"}
+{"version":3,"file":"use-deep-agent-config.cjs","sources":["../../../../agent-runtime/src/use-deep-agent-config.ts"],"sourcesContent":["import { useStatewireSendCommand, useStatewireState } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport {\n  applyConfigPatch,\n  applyToolsDisable,\n  applyToolsEnable,\n  type ThreadConfigCustom,\n  type ThreadConfigPatch,\n} from './config-mutations';\nimport { statewireRejectionPayload } from './errors';\nimport { DEEP_AGENT_CONFIG_COMMANDS } from './generated/runconfig-contract';\nimport { readDeepAgentStateThreadId } from './statewire-state';\n\ndeclare module '@assistant-ui/core' {\n  namespace Assistant {\n    interface Commands {\n      /** Set / unset top-level keys of the thread's server config (`null` unsets). */\n      configPatch: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch;\n        patch: Record<string, unknown>;\n      };\n      /** Append ids to the thread's `enabled_tools`. */\n      configToolsEnable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable;\n        toolIds: string[];\n      };\n      /** Remove ids from the thread's `enabled_tools`. */\n      configToolsDisable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable;\n        toolIds: string[];\n      };\n    }\n  }\n}\n\n/**\n * The replicated `state.config` lane of a thread with server-authoritative\n * run config. Absent — and `readServerConfig` returns `null` — while the\n * thread has never been configured (version 0: a brand-new thread, or one\n * created by a client predating the lane).\n */\nexport interface DeepAgentServerConfig {\n  /** Monotonic server-incremented version; always >= 1 when the lane exists. */\n  version: number;\n  /** The thread-config keys every run on this thread uses as its base. */\n  custom: ThreadConfigCustom;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\n/**\n * Read the server-config lane off a raw statewire state.\n *\n * Identity-preserving (returns the raw `state.config` reference), so it is\n * safe as a `useStatewireState` selector: the reference only changes when the\n * server writes the lane.\n */\nexport function readServerConfig(state: unknown): DeepAgentServerConfig | null {\n  const config = (state as { config?: unknown } | null | undefined)?.config;\n  if (!isRecord(config)) return null;\n  const version = config.version;\n  if (typeof version !== 'number' || !Number.isInteger(version) || version <= 0) return null;\n  if (!isRecord(config.custom)) return null;\n  return config as unknown as DeepAgentServerConfig;\n}\n\n/** The thread's server config version: 0 while the thread has never been configured. */\nexport function readConfigVersion(state: unknown): number {\n  return readServerConfig(state)?.version ?? 0;\n}\n\n/**\n * {@link readServerConfig}, but only from a state `threadId`'s own attach\n * produced (`readDeepAgentStateThreadId`); any other state reads as\n * unconfigured. With no `threadId` it is {@link readServerConfig} unchanged.\n *\n * Identity-preserving like {@link readServerConfig}, so it is safe as a\n * `useStatewireState` selector.\n */\nexport function readThreadServerConfig({\n  state,\n  threadId,\n}: {\n  state: unknown;\n  threadId: string | undefined;\n}): DeepAgentServerConfig | null {\n  if (threadId !== undefined && readDeepAgentStateThreadId(state) !== threadId) return null;\n  return readServerConfig(state);\n}\n\n/**\n * The 403 rejection codes a view-only collaborator's `config/*` write can\n * come back with: `config_write_forbidden` from the config host's own gate,\n * or `thread_write_forbidden` from the host-wide mutation gate that runs\n * ahead of it and refuses every thread-mutating command on a view grant.\n */\nconst CONFIG_WRITE_FORBIDDEN_CODES: ReadonlySet<string> = new Set([\n  'config_write_forbidden',\n  'thread_write_forbidden',\n]);\n\n/**\n * Whether a rejected `config/*` command was refused because the submitter\n * only has view access to the session, or because the conversation is\n * archived (`conversation_archived`, a 409: read-only until it is restored).\n * The write is not retriable by that user; hosts disable their config\n * controls.\n */\nexport function isConfigWriteForbiddenRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  const detail = payload?.detail as { code?: unknown } | undefined;\n  if (payload?.status === 409) return detail?.code === 'conversation_archived';\n  if (payload?.status !== 403) return false;\n  return typeof detail?.code === 'string' && CONFIG_WRITE_FORBIDDEN_CODES.has(detail.code);\n}\n\n/**\n * Whether a rejected `config/*` command was refused because the thread's\n * workspace cannot hold server config at all (`config_sync_unavailable`, a\n * regionally-pinned workspace). No write will ever succeed on the thread;\n * hosts stop issuing them and send their full config per run instead.\n */\nexport function isConfigSyncUnavailableRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 400) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'config_sync_unavailable';\n}\n\n/** The settled result of a `config/*` command: the new server config. */\nexport interface DeepAgentConfigWriteResult {\n  version: number;\n  custom: ThreadConfigCustom;\n}\n\n/** An observed server-config version, delivered to the host callback. */\nexport interface DeepAgentServerConfigEvent {\n  version: number;\n  /** The server config with this client's still-pending writes folded over. */\n  custom: ThreadConfigCustom;\n}\n\ninterface PendingOp {\n  id: number;\n  apply: (custom: ThreadConfigCustom) => ThreadConfigCustom;\n  /** The version the server assigned this op; retired once the lane reaches it. */\n  settledVersion: number | null;\n}\n\n/**\n * Fold the pending optimistic ops over the server config — the effective\n * config a client shows and sends against. Pure, for the tests.\n */\nexport function foldPendingConfigOps(\n  serverConfig: DeepAgentServerConfig | null,\n  ops: readonly Pick<PendingOp, 'apply' | 'settledVersion'>[]\n): ThreadConfigCustom {\n  const version = serverConfig?.version ?? 0;\n  let custom: ThreadConfigCustom = serverConfig?.custom ?? {};\n  for (const op of ops) {\n    if (op.settledVersion !== null && op.settledVersion <= version) continue;\n    custom = op.apply(custom);\n  }\n  return custom;\n}\n\nexport interface UseDeepAgentConfigOptions {\n  /**\n   * Fired whenever the server writes a new version of the lane (another\n   * device, the seed, or the echo of our own command), with this client's\n   * still-pending writes folded over — hosts mirror it into their local\n   * store; nothing is ever clobbered because pending edits stay on top.\n   */\n  onServerConfig?: (event: DeepAgentServerConfigEvent) => void;\n  /**\n   * The thread this binding serves. When set, the lane is read only from a\n   * state that thread's own attach produced ({@link readThreadServerConfig}):\n   * for the first render after a thread switch the client still projects the\n   * previous thread's state, and adopting its lane would report the previous\n   * thread's config and version as this thread's.\n   */\n  threadId?: string;\n}\n\nexport interface UseDeepAgentConfigResult {\n  /** Reactive server config version (0 while the thread has never been configured). */\n  configVersion: number;\n  /** Reactive server-config lane, or `null` at version 0. */\n  serverConfig: DeepAgentServerConfig | null;\n  /**\n   * The effective thread config: the server lane with this client's pending\n   * writes folded over. `{}` at version 0 with nothing pending.\n   */\n  custom: ThreadConfigCustom;\n  /** `true` while at least one `config/*` command is unacknowledged by the server. */\n  hasPendingWrites: boolean;\n  /** `config/patch` — set / unset top-level keys; `null` unsets. */\n  patchConfig: (patch: ThreadConfigPatch) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/enable`. */\n  enableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/disable`. */\n  disableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n}\n\ntype ConfigCommand =\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch; patch: Record<string, unknown> }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable; toolIds: string[] }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable; toolIds: string[] };\n\n/**\n * The server-authoritative thread config of a deep-agent thread.\n *\n * Every capability a run depends on — model, agent binding, enabled tools,\n * sandbox, environment, … — lives on the thread's server config lane and is\n * changed only through the `config/*` commands. Sends carry per-send keys\n * only (`pickPerSendCustom`). The commands are applied optimistically: each\n * one folds its transform over the server config the moment it is issued\n * (`custom`), and retires once the lane reaches the version the server\n * assigned it; a rejection drops it, so the UI snaps back to the truth.\n *\n * Must be mounted under the thread's statewire context (an `AuiProvider`\n * holding `useDeepAgentThread`'s element), keyed by the thread identity so a\n * thread switch remounts it with an empty pending set. A binding that persists\n * what it reads per thread passes `threadId`, so the render that still sees\n * the previous thread's state after a switch reads no lane at all.\n */\nexport function useDeepAgentConfig({\n  threadId,\n  ...options\n}: UseDeepAgentConfigOptions = {}): UseDeepAgentConfigResult {\n  const sendCommand = useStatewireSendCommand();\n  const selectServerConfig = useCallback(\n    (state: unknown) => readThreadServerConfig({ state, threadId }),\n    [threadId]\n  );\n  const serverConfig = useStatewireState(selectServerConfig);\n  return useDeepAgentConfigController({\n    serverConfig,\n    sendCommand: (command) => Promise.resolve(sendCommand(command as never)),\n    ...options,\n  });\n}\n\nexport interface DeepAgentConfigControllerInputs extends UseDeepAgentConfigOptions {\n  serverConfig: DeepAgentServerConfig | null;\n  sendCommand: (command: ConfigCommand) => Promise<unknown>;\n}\n\n/**\n * The transport-agnostic body of {@link useDeepAgentConfig}, with the reactive\n * inputs injected — so the optimistic-overlay behavior is testable without a\n * statewire session.\n */\nexport function useDeepAgentConfigController({\n  serverConfig,\n  sendCommand,\n  onServerConfig,\n}: DeepAgentConfigControllerInputs): UseDeepAgentConfigResult {\n  const [ops, setOps] = useState<readonly PendingOp[]>([]);\n  const nextOpIdRef = useRef(1);\n  const sendCommandRef = useRef(sendCommand);\n  sendCommandRef.current = sendCommand;\n  const onServerConfigRef = useRef(onServerConfig);\n  onServerConfigRef.current = onServerConfig;\n\n  const custom = useMemo(() => foldPendingConfigOps(serverConfig, ops), [serverConfig, ops]);\n\n  // Retire ops the lane has caught up with (their transform is now part of\n  // the server config itself).\n  const serverVersion = serverConfig?.version ?? 0;\n  const serverVersionRef = useRef(serverVersion);\n  serverVersionRef.current = serverVersion;\n  useEffect(() => {\n    setOps((current) => {\n      const kept = current.filter(\n        (op) => op.settledVersion === null || op.settledVersion > serverVersion\n      );\n      return kept.length === current.length ? current : kept;\n    });\n  }, [serverVersion]);\n\n  const lastNotifiedRef = useRef<DeepAgentServerConfig | null>(null);\n  useEffect(() => {\n    if (serverConfig === null || serverConfig === lastNotifiedRef.current) return;\n    lastNotifiedRef.current = serverConfig;\n    onServerConfigRef.current?.({ version: serverConfig.version, custom });\n  }, [serverConfig, custom]);\n\n  const run = useCallback(\n    async (\n      command: ConfigCommand,\n      apply: PendingOp['apply']\n    ): Promise<DeepAgentConfigWriteResult> => {\n      const id = nextOpIdRef.current++;\n      setOps((current) => [...current, { id, apply, settledVersion: null }]);\n      try {\n        const raw = (await sendCommandRef.current(command)) as\n          | { version?: unknown; custom?: unknown }\n          | null\n          | undefined;\n        const version = typeof raw?.version === 'number' ? raw.version : Number.POSITIVE_INFINITY;\n        // The lane echo may have landed before the acknowledgement: retire\n        // now if so, otherwise stamp the version for the retire effect.\n        setOps((current) =>\n          version <= serverVersionRef.current\n            ? current.filter((op) => op.id !== id)\n            : current.map((op) => (op.id === id ? { ...op, settledVersion: version } : op))\n        );\n        return {\n          version: Number.isFinite(version) ? version : 0,\n          custom: isRecord(raw?.custom) ? raw.custom : apply({}),\n        };\n      } catch (error) {\n        setOps((current) => current.filter((op) => op.id !== id));\n        throw error;\n      }\n    },\n    []\n  );\n\n  const patchConfig = useCallback(\n    (patch: ThreadConfigPatch) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.patch, patch }, (base) =>\n        applyConfigPatch(base, patch)\n      ),\n    [run]\n  );\n  const enableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsEnable, toolIds: [...toolIds] }, (base) =>\n        applyToolsEnable(base, toolIds)\n      ),\n    [run]\n  );\n  const disableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsDisable, toolIds: [...toolIds] }, (base) =>\n        applyToolsDisable(base, toolIds)\n      ),\n    [run]\n  );\n\n  return {\n    configVersion: serverVersion,\n    serverConfig,\n    custom,\n    hasPendingWrites: ops.some((op) => op.settledVersion === null),\n    patchConfig,\n    enableTools,\n    disableTools,\n  };\n}\n"],"names":["statewireRejectionPayload","useState","useRef","useMemo","useEffect","useCallback","DEEP_AGENT_CONFIG_COMMANDS","applyConfigPatch","applyToolsEnable","applyToolsDisable"],"mappings":";;;;;;;AAgDA,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAS9D,SAAS,iBAAiB,OAA8C;AAC7E,QAAM,SAAU,+BAAmD;AACnE,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,CAAC,OAAO,UAAU,OAAO,KAAK,WAAW,EAAG,QAAO;AACtF,MAAI,CAAC,SAAS,OAAO,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAgCA,MAAM,mDAAwD,IAAI;AAAA,EAChE;AAAA,EACA;AACF,CAAC;AASM,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAUA,OAAAA,0BAA0B,KAAK;AAC/C,QAAM,SAAS,mCAAS;AACxB,OAAI,mCAAS,YAAW,IAAK,SAAO,iCAAQ,UAAS;AACrD,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,SAAO,QAAO,iCAAQ,UAAS,YAAY,6BAA6B,IAAI,OAAO,IAAI;AACzF;AAQO,SAAS,iCAAiC,OAAyB;AACxE,QAAM,UAAUA,OAAAA,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA0BO,SAAS,qBACd,cACA,KACoB;AACpB,QAAM,WAAU,6CAAc,YAAW;AACzC,MAAI,UAA6B,6CAAc,WAAU,CAAA;AACzD,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,mBAAmB,QAAQ,GAAG,kBAAkB,QAAS;AAChE,aAAS,GAAG,MAAM,MAAM;AAAA,EAC1B;AACA,SAAO;AACT;AAyFO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF,GAA8D;AAC5D,QAAM,CAAC,KAAK,MAAM,IAAIC,MAAAA,SAA+B,CAAA,CAAE;AACvD,QAAM,cAAcC,MAAAA,OAAO,CAAC;AAC5B,QAAM,iBAAiBA,MAAAA,OAAO,WAAW;AACzC,iBAAe,UAAU;AACzB,QAAM,oBAAoBA,MAAAA,OAAO,cAAc;AAC/C,oBAAkB,UAAU;AAE5B,QAAM,SAASC,cAAQ,MAAM,qBAAqB,cAAc,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC;AAIzF,QAAM,iBAAgB,6CAAc,YAAW;AAC/C,QAAM,mBAAmBD,MAAAA,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3BE,QAAAA,UAAU,MAAM;AACd,WAAO,CAAC,YAAY;AAClB,YAAM,OAAO,QAAQ;AAAA,QACnB,CAAC,OAAO,GAAG,mBAAmB,QAAQ,GAAG,iBAAiB;AAAA,MAAA;AAE5D,aAAO,KAAK,WAAW,QAAQ,SAAS,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,kBAAkBF,MAAAA,OAAqC,IAAI;AACjEE,QAAAA,UAAU,MAAM;;AACd,QAAI,iBAAiB,QAAQ,iBAAiB,gBAAgB,QAAS;AACvE,oBAAgB,UAAU;AAC1B,4BAAkB,YAAlB,2CAA4B,EAAE,SAAS,aAAa,SAAS;EAC/D,GAAG,CAAC,cAAc,MAAM,CAAC;AAEzB,QAAM,MAAMC,MAAAA;AAAAA,IACV,OACE,SACA,UACwC;AACxC,YAAM,KAAK,YAAY;AACvB,aAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAA,CAAM,CAAC;AACrE,UAAI;AACF,cAAM,MAAO,MAAM,eAAe,QAAQ,OAAO;AAIjD,cAAM,UAAU,QAAO,2BAAK,aAAY,WAAW,IAAI,UAAU,OAAO;AAGxE;AAAA,UAAO,CAAC,YACN,WAAW,iBAAiB,UACxB,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,IACnC,QAAQ,IAAI,CAAC,OAAQ,GAAG,OAAO,KAAK,EAAE,GAAG,IAAI,gBAAgB,QAAA,IAAY,EAAG;AAAA,QAAA;AAElF,eAAO;AAAA,UACL,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,UAC9C,QAAQ,SAAS,2BAAK,MAAM,IAAI,IAAI,SAAS,MAAM,CAAA,CAAE;AAAA,QAAA;AAAA,MAEzD,SAAS,OAAO;AACd,eAAO,CAAC,YAAY,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;AACxD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,cAAcA,MAAAA;AAAAA,IAClB,CAAC,UACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,OAAO,MAAA;AAAA,MAAS,CAAC,SACtDC,iCAAiB,MAAM,KAAK;AAAA,IAAA;AAAA,IAEhC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,cAAcF,MAAAA;AAAAA,IAClB,CAAC,YACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,aAAa,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC5EE,iCAAiB,MAAM,OAAO;AAAA,IAAA;AAAA,IAElC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,eAAeH,MAAAA;AAAAA,IACnB,CAAC,YACC;AAAA,MAAI,EAAE,MAAMC,kBAAAA,2BAA2B,cAAc,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC7EG,kCAAkB,MAAM,OAAO;AAAA,IAAA;AAAA,IAEnC,CAAC,GAAG;AAAA,EAAA;AAGN,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI,KAAK,CAAC,OAAO,GAAG,mBAAmB,IAAI;AAAA,IAC7D;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;;;;;;"}

package/dist/agent-runtime/src/use-deep-agent-config.js

@@ -18,8 +18,9 @@ const CONFIG_WRITE_FORBIDDEN_CODES = /* @__PURE__ */ new Set([
 ]);
 function isConfigWriteForbiddenRejection(error) {
   const payload = statewireRejectionPayload(error);
+  const detail = payload == null ? void 0 : payload.detail;
+  if ((payload == null ? void 0 : payload.status) === 409) return (detail == null ? void 0 : detail.code) === "conversation_archived";
   if ((payload == null ? void 0 : payload.status) !== 403) return false;
-  const detail = payload.detail;
   return typeof (detail == null ? void 0 : detail.code) === "string" && CONFIG_WRITE_FORBIDDEN_CODES.has(detail.code);
 }
 function isConfigSyncUnavailableRejection(error) {

package/dist/agent-runtime/src/use-deep-agent-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-config.js","sources":["../../../../agent-runtime/src/use-deep-agent-config.ts"],"sourcesContent":["import { useStatewireSendCommand, useStatewireState } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport {\n  applyConfigPatch,\n  applyToolsDisable,\n  applyToolsEnable,\n  type ThreadConfigCustom,\n  type ThreadConfigPatch,\n} from './config-mutations';\nimport { statewireRejectionPayload } from './errors';\nimport { DEEP_AGENT_CONFIG_COMMANDS } from './generated/runconfig-contract';\nimport { readDeepAgentStateThreadId } from './statewire-state';\n\ndeclare module '@assistant-ui/core' {\n  namespace Assistant {\n    interface Commands {\n      /** Set / unset top-level keys of the thread's server config (`null` unsets). */\n      configPatch: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch;\n        patch: Record<string, unknown>;\n      };\n      /** Append ids to the thread's `enabled_tools`. */\n      configToolsEnable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable;\n        toolIds: string[];\n      };\n      /** Remove ids from the thread's `enabled_tools`. */\n      configToolsDisable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable;\n        toolIds: string[];\n      };\n    }\n  }\n}\n\n/**\n * The replicated `state.config` lane of a thread with server-authoritative\n * run config. Absent — and `readServerConfig` returns `null` — while the\n * thread has never been configured (version 0: a brand-new thread, or one\n * created by a client predating the lane).\n */\nexport interface DeepAgentServerConfig {\n  /** Monotonic server-incremented version; always >= 1 when the lane exists. */\n  version: number;\n  /** The thread-config keys every run on this thread uses as its base. */\n  custom: ThreadConfigCustom;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\n/**\n * Read the server-config lane off a raw statewire state.\n *\n * Identity-preserving (returns the raw `state.config` reference), so it is\n * safe as a `useStatewireState` selector: the reference only changes when the\n * server writes the lane.\n */\nexport function readServerConfig(state: unknown): DeepAgentServerConfig | null {\n  const config = (state as { config?: unknown } | null | undefined)?.config;\n  if (!isRecord(config)) return null;\n  const version = config.version;\n  if (typeof version !== 'number' || !Number.isInteger(version) || version <= 0) return null;\n  if (!isRecord(config.custom)) return null;\n  return config as unknown as DeepAgentServerConfig;\n}\n\n/** The thread's server config version: 0 while the thread has never been configured. */\nexport function readConfigVersion(state: unknown): number {\n  return readServerConfig(state)?.version ?? 0;\n}\n\n/**\n * {@link readServerConfig}, but only from a state `threadId`'s own attach\n * produced (`readDeepAgentStateThreadId`); any other state reads as\n * unconfigured. With no `threadId` it is {@link readServerConfig} unchanged.\n *\n * Identity-preserving like {@link readServerConfig}, so it is safe as a\n * `useStatewireState` selector.\n */\nexport function readThreadServerConfig({\n  state,\n  threadId,\n}: {\n  state: unknown;\n  threadId: string | undefined;\n}): DeepAgentServerConfig | null {\n  if (threadId !== undefined && readDeepAgentStateThreadId(state) !== threadId) return null;\n  return readServerConfig(state);\n}\n\n/**\n * The 403 rejection codes a view-only collaborator's `config/*` write can\n * come back with: `config_write_forbidden` from the config host's own gate,\n * or `thread_write_forbidden` from the host-wide mutation gate that runs\n * ahead of it and refuses every thread-mutating command on a view grant.\n */\nconst CONFIG_WRITE_FORBIDDEN_CODES: ReadonlySet<string> = new Set([\n  'config_write_forbidden',\n  'thread_write_forbidden',\n]);\n\n/**\n * Whether a rejected `config/*` command was refused because the submitter\n * only has view access to the session. The write is not retriable by that\n * user; hosts disable their config controls.\n */\nexport function isConfigWriteForbiddenRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 403) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return typeof detail?.code === 'string' && CONFIG_WRITE_FORBIDDEN_CODES.has(detail.code);\n}\n\n/**\n * Whether a rejected `config/*` command was refused because the thread's\n * workspace cannot hold server config at all (`config_sync_unavailable`, a\n * regionally-pinned workspace). No write will ever succeed on the thread;\n * hosts stop issuing them and send their full config per run instead.\n */\nexport function isConfigSyncUnavailableRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 400) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'config_sync_unavailable';\n}\n\n/** The settled result of a `config/*` command: the new server config. */\nexport interface DeepAgentConfigWriteResult {\n  version: number;\n  custom: ThreadConfigCustom;\n}\n\n/** An observed server-config version, delivered to the host callback. */\nexport interface DeepAgentServerConfigEvent {\n  version: number;\n  /** The server config with this client's still-pending writes folded over. */\n  custom: ThreadConfigCustom;\n}\n\ninterface PendingOp {\n  id: number;\n  apply: (custom: ThreadConfigCustom) => ThreadConfigCustom;\n  /** The version the server assigned this op; retired once the lane reaches it. */\n  settledVersion: number | null;\n}\n\n/**\n * Fold the pending optimistic ops over the server config — the effective\n * config a client shows and sends against. Pure, for the tests.\n */\nexport function foldPendingConfigOps(\n  serverConfig: DeepAgentServerConfig | null,\n  ops: readonly Pick<PendingOp, 'apply' | 'settledVersion'>[]\n): ThreadConfigCustom {\n  const version = serverConfig?.version ?? 0;\n  let custom: ThreadConfigCustom = serverConfig?.custom ?? {};\n  for (const op of ops) {\n    if (op.settledVersion !== null && op.settledVersion <= version) continue;\n    custom = op.apply(custom);\n  }\n  return custom;\n}\n\nexport interface UseDeepAgentConfigOptions {\n  /**\n   * Fired whenever the server writes a new version of the lane (another\n   * device, the seed, or the echo of our own command), with this client's\n   * still-pending writes folded over — hosts mirror it into their local\n   * store; nothing is ever clobbered because pending edits stay on top.\n   */\n  onServerConfig?: (event: DeepAgentServerConfigEvent) => void;\n  /**\n   * The thread this binding serves. When set, the lane is read only from a\n   * state that thread's own attach produced ({@link readThreadServerConfig}):\n   * for the first render after a thread switch the client still projects the\n   * previous thread's state, and adopting its lane would report the previous\n   * thread's config and version as this thread's.\n   */\n  threadId?: string;\n}\n\nexport interface UseDeepAgentConfigResult {\n  /** Reactive server config version (0 while the thread has never been configured). */\n  configVersion: number;\n  /** Reactive server-config lane, or `null` at version 0. */\n  serverConfig: DeepAgentServerConfig | null;\n  /**\n   * The effective thread config: the server lane with this client's pending\n   * writes folded over. `{}` at version 0 with nothing pending.\n   */\n  custom: ThreadConfigCustom;\n  /** `true` while at least one `config/*` command is unacknowledged by the server. */\n  hasPendingWrites: boolean;\n  /** `config/patch` — set / unset top-level keys; `null` unsets. */\n  patchConfig: (patch: ThreadConfigPatch) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/enable`. */\n  enableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/disable`. */\n  disableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n}\n\ntype ConfigCommand =\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch; patch: Record<string, unknown> }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable; toolIds: string[] }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable; toolIds: string[] };\n\n/**\n * The server-authoritative thread config of a deep-agent thread.\n *\n * Every capability a run depends on — model, agent binding, enabled tools,\n * sandbox, environment, … — lives on the thread's server config lane and is\n * changed only through the `config/*` commands. Sends carry per-send keys\n * only (`pickPerSendCustom`). The commands are applied optimistically: each\n * one folds its transform over the server config the moment it is issued\n * (`custom`), and retires once the lane reaches the version the server\n * assigned it; a rejection drops it, so the UI snaps back to the truth.\n *\n * Must be mounted under the thread's statewire context (an `AuiProvider`\n * holding `useDeepAgentThread`'s element), keyed by the thread identity so a\n * thread switch remounts it with an empty pending set. A binding that persists\n * what it reads per thread passes `threadId`, so the render that still sees\n * the previous thread's state after a switch reads no lane at all.\n */\nexport function useDeepAgentConfig({\n  threadId,\n  ...options\n}: UseDeepAgentConfigOptions = {}): UseDeepAgentConfigResult {\n  const sendCommand = useStatewireSendCommand();\n  const selectServerConfig = useCallback(\n    (state: unknown) => readThreadServerConfig({ state, threadId }),\n    [threadId]\n  );\n  const serverConfig = useStatewireState(selectServerConfig);\n  return useDeepAgentConfigController({\n    serverConfig,\n    sendCommand: (command) => Promise.resolve(sendCommand(command as never)),\n    ...options,\n  });\n}\n\nexport interface DeepAgentConfigControllerInputs extends UseDeepAgentConfigOptions {\n  serverConfig: DeepAgentServerConfig | null;\n  sendCommand: (command: ConfigCommand) => Promise<unknown>;\n}\n\n/**\n * The transport-agnostic body of {@link useDeepAgentConfig}, with the reactive\n * inputs injected — so the optimistic-overlay behavior is testable without a\n * statewire session.\n */\nexport function useDeepAgentConfigController({\n  serverConfig,\n  sendCommand,\n  onServerConfig,\n}: DeepAgentConfigControllerInputs): UseDeepAgentConfigResult {\n  const [ops, setOps] = useState<readonly PendingOp[]>([]);\n  const nextOpIdRef = useRef(1);\n  const sendCommandRef = useRef(sendCommand);\n  sendCommandRef.current = sendCommand;\n  const onServerConfigRef = useRef(onServerConfig);\n  onServerConfigRef.current = onServerConfig;\n\n  const custom = useMemo(() => foldPendingConfigOps(serverConfig, ops), [serverConfig, ops]);\n\n  // Retire ops the lane has caught up with (their transform is now part of\n  // the server config itself).\n  const serverVersion = serverConfig?.version ?? 0;\n  const serverVersionRef = useRef(serverVersion);\n  serverVersionRef.current = serverVersion;\n  useEffect(() => {\n    setOps((current) => {\n      const kept = current.filter(\n        (op) => op.settledVersion === null || op.settledVersion > serverVersion\n      );\n      return kept.length === current.length ? current : kept;\n    });\n  }, [serverVersion]);\n\n  const lastNotifiedRef = useRef<DeepAgentServerConfig | null>(null);\n  useEffect(() => {\n    if (serverConfig === null || serverConfig === lastNotifiedRef.current) return;\n    lastNotifiedRef.current = serverConfig;\n    onServerConfigRef.current?.({ version: serverConfig.version, custom });\n  }, [serverConfig, custom]);\n\n  const run = useCallback(\n    async (\n      command: ConfigCommand,\n      apply: PendingOp['apply']\n    ): Promise<DeepAgentConfigWriteResult> => {\n      const id = nextOpIdRef.current++;\n      setOps((current) => [...current, { id, apply, settledVersion: null }]);\n      try {\n        const raw = (await sendCommandRef.current(command)) as\n          | { version?: unknown; custom?: unknown }\n          | null\n          | undefined;\n        const version = typeof raw?.version === 'number' ? raw.version : Number.POSITIVE_INFINITY;\n        // The lane echo may have landed before the acknowledgement: retire\n        // now if so, otherwise stamp the version for the retire effect.\n        setOps((current) =>\n          version <= serverVersionRef.current\n            ? current.filter((op) => op.id !== id)\n            : current.map((op) => (op.id === id ? { ...op, settledVersion: version } : op))\n        );\n        return {\n          version: Number.isFinite(version) ? version : 0,\n          custom: isRecord(raw?.custom) ? raw.custom : apply({}),\n        };\n      } catch (error) {\n        setOps((current) => current.filter((op) => op.id !== id));\n        throw error;\n      }\n    },\n    []\n  );\n\n  const patchConfig = useCallback(\n    (patch: ThreadConfigPatch) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.patch, patch }, (base) =>\n        applyConfigPatch(base, patch)\n      ),\n    [run]\n  );\n  const enableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsEnable, toolIds: [...toolIds] }, (base) =>\n        applyToolsEnable(base, toolIds)\n      ),\n    [run]\n  );\n  const disableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsDisable, toolIds: [...toolIds] }, (base) =>\n        applyToolsDisable(base, toolIds)\n      ),\n    [run]\n  );\n\n  return {\n    configVersion: serverVersion,\n    serverConfig,\n    custom,\n    hasPendingWrites: ops.some((op) => op.settledVersion === null),\n    patchConfig,\n    enableTools,\n    disableTools,\n  };\n}\n"],"names":[],"mappings":";;;;;AAgDA,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAS9D,SAAS,iBAAiB,OAA8C;AAC7E,QAAM,SAAU,+BAAmD;AACnE,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,CAAC,OAAO,UAAU,OAAO,KAAK,WAAW,EAAG,QAAO;AACtF,MAAI,CAAC,SAAS,OAAO,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAgCA,MAAM,mDAAwD,IAAI;AAAA,EAChE;AAAA,EACA;AACF,CAAC;AAOM,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,SAAO,QAAO,iCAAQ,UAAS,YAAY,6BAA6B,IAAI,OAAO,IAAI;AACzF;AAQO,SAAS,iCAAiC,OAAyB;AACxE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA0BO,SAAS,qBACd,cACA,KACoB;AACpB,QAAM,WAAU,6CAAc,YAAW;AACzC,MAAI,UAA6B,6CAAc,WAAU,CAAA;AACzD,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,mBAAmB,QAAQ,GAAG,kBAAkB,QAAS;AAChE,aAAS,GAAG,MAAM,MAAM;AAAA,EAC1B;AACA,SAAO;AACT;AAyFO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF,GAA8D;AAC5D,QAAM,CAAC,KAAK,MAAM,IAAI,SAA+B,CAAA,CAAE;AACvD,QAAM,cAAc,OAAO,CAAC;AAC5B,QAAM,iBAAiB,OAAO,WAAW;AACzC,iBAAe,UAAU;AACzB,QAAM,oBAAoB,OAAO,cAAc;AAC/C,oBAAkB,UAAU;AAE5B,QAAM,SAAS,QAAQ,MAAM,qBAAqB,cAAc,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC;AAIzF,QAAM,iBAAgB,6CAAc,YAAW;AAC/C,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,YAAU,MAAM;AACd,WAAO,CAAC,YAAY;AAClB,YAAM,OAAO,QAAQ;AAAA,QACnB,CAAC,OAAO,GAAG,mBAAmB,QAAQ,GAAG,iBAAiB;AAAA,MAAA;AAE5D,aAAO,KAAK,WAAW,QAAQ,SAAS,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,kBAAkB,OAAqC,IAAI;AACjE,YAAU,MAAM;;AACd,QAAI,iBAAiB,QAAQ,iBAAiB,gBAAgB,QAAS;AACvE,oBAAgB,UAAU;AAC1B,4BAAkB,YAAlB,2CAA4B,EAAE,SAAS,aAAa,SAAS;EAC/D,GAAG,CAAC,cAAc,MAAM,CAAC;AAEzB,QAAM,MAAM;AAAA,IACV,OACE,SACA,UACwC;AACxC,YAAM,KAAK,YAAY;AACvB,aAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAA,CAAM,CAAC;AACrE,UAAI;AACF,cAAM,MAAO,MAAM,eAAe,QAAQ,OAAO;AAIjD,cAAM,UAAU,QAAO,2BAAK,aAAY,WAAW,IAAI,UAAU,OAAO;AAGxE;AAAA,UAAO,CAAC,YACN,WAAW,iBAAiB,UACxB,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,IACnC,QAAQ,IAAI,CAAC,OAAQ,GAAG,OAAO,KAAK,EAAE,GAAG,IAAI,gBAAgB,QAAA,IAAY,EAAG;AAAA,QAAA;AAElF,eAAO;AAAA,UACL,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,UAC9C,QAAQ,SAAS,2BAAK,MAAM,IAAI,IAAI,SAAS,MAAM,CAAA,CAAE;AAAA,QAAA;AAAA,MAEzD,SAAS,OAAO;AACd,eAAO,CAAC,YAAY,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;AACxD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,cAAc;AAAA,IAClB,CAAC,UACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,OAAO,MAAA;AAAA,MAAS,CAAC,SACtD,iBAAiB,MAAM,KAAK;AAAA,IAAA;AAAA,IAEhC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,cAAc;AAAA,IAClB,CAAC,YACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,aAAa,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC5E,iBAAiB,MAAM,OAAO;AAAA,IAAA;AAAA,IAElC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,eAAe;AAAA,IACnB,CAAC,YACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,cAAc,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC7E,kBAAkB,MAAM,OAAO;AAAA,IAAA;AAAA,IAEnC,CAAC,GAAG;AAAA,EAAA;AAGN,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI,KAAK,CAAC,OAAO,GAAG,mBAAmB,IAAI;AAAA,IAC7D;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"use-deep-agent-config.js","sources":["../../../../agent-runtime/src/use-deep-agent-config.ts"],"sourcesContent":["import { useStatewireSendCommand, useStatewireState } from '@assistant-ui/react-statewire';\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport {\n  applyConfigPatch,\n  applyToolsDisable,\n  applyToolsEnable,\n  type ThreadConfigCustom,\n  type ThreadConfigPatch,\n} from './config-mutations';\nimport { statewireRejectionPayload } from './errors';\nimport { DEEP_AGENT_CONFIG_COMMANDS } from './generated/runconfig-contract';\nimport { readDeepAgentStateThreadId } from './statewire-state';\n\ndeclare module '@assistant-ui/core' {\n  namespace Assistant {\n    interface Commands {\n      /** Set / unset top-level keys of the thread's server config (`null` unsets). */\n      configPatch: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch;\n        patch: Record<string, unknown>;\n      };\n      /** Append ids to the thread's `enabled_tools`. */\n      configToolsEnable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable;\n        toolIds: string[];\n      };\n      /** Remove ids from the thread's `enabled_tools`. */\n      configToolsDisable: {\n        type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable;\n        toolIds: string[];\n      };\n    }\n  }\n}\n\n/**\n * The replicated `state.config` lane of a thread with server-authoritative\n * run config. Absent — and `readServerConfig` returns `null` — while the\n * thread has never been configured (version 0: a brand-new thread, or one\n * created by a client predating the lane).\n */\nexport interface DeepAgentServerConfig {\n  /** Monotonic server-incremented version; always >= 1 when the lane exists. */\n  version: number;\n  /** The thread-config keys every run on this thread uses as its base. */\n  custom: ThreadConfigCustom;\n}\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\n/**\n * Read the server-config lane off a raw statewire state.\n *\n * Identity-preserving (returns the raw `state.config` reference), so it is\n * safe as a `useStatewireState` selector: the reference only changes when the\n * server writes the lane.\n */\nexport function readServerConfig(state: unknown): DeepAgentServerConfig | null {\n  const config = (state as { config?: unknown } | null | undefined)?.config;\n  if (!isRecord(config)) return null;\n  const version = config.version;\n  if (typeof version !== 'number' || !Number.isInteger(version) || version <= 0) return null;\n  if (!isRecord(config.custom)) return null;\n  return config as unknown as DeepAgentServerConfig;\n}\n\n/** The thread's server config version: 0 while the thread has never been configured. */\nexport function readConfigVersion(state: unknown): number {\n  return readServerConfig(state)?.version ?? 0;\n}\n\n/**\n * {@link readServerConfig}, but only from a state `threadId`'s own attach\n * produced (`readDeepAgentStateThreadId`); any other state reads as\n * unconfigured. With no `threadId` it is {@link readServerConfig} unchanged.\n *\n * Identity-preserving like {@link readServerConfig}, so it is safe as a\n * `useStatewireState` selector.\n */\nexport function readThreadServerConfig({\n  state,\n  threadId,\n}: {\n  state: unknown;\n  threadId: string | undefined;\n}): DeepAgentServerConfig | null {\n  if (threadId !== undefined && readDeepAgentStateThreadId(state) !== threadId) return null;\n  return readServerConfig(state);\n}\n\n/**\n * The 403 rejection codes a view-only collaborator's `config/*` write can\n * come back with: `config_write_forbidden` from the config host's own gate,\n * or `thread_write_forbidden` from the host-wide mutation gate that runs\n * ahead of it and refuses every thread-mutating command on a view grant.\n */\nconst CONFIG_WRITE_FORBIDDEN_CODES: ReadonlySet<string> = new Set([\n  'config_write_forbidden',\n  'thread_write_forbidden',\n]);\n\n/**\n * Whether a rejected `config/*` command was refused because the submitter\n * only has view access to the session, or because the conversation is\n * archived (`conversation_archived`, a 409: read-only until it is restored).\n * The write is not retriable by that user; hosts disable their config\n * controls.\n */\nexport function isConfigWriteForbiddenRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  const detail = payload?.detail as { code?: unknown } | undefined;\n  if (payload?.status === 409) return detail?.code === 'conversation_archived';\n  if (payload?.status !== 403) return false;\n  return typeof detail?.code === 'string' && CONFIG_WRITE_FORBIDDEN_CODES.has(detail.code);\n}\n\n/**\n * Whether a rejected `config/*` command was refused because the thread's\n * workspace cannot hold server config at all (`config_sync_unavailable`, a\n * regionally-pinned workspace). No write will ever succeed on the thread;\n * hosts stop issuing them and send their full config per run instead.\n */\nexport function isConfigSyncUnavailableRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 400) return false;\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'config_sync_unavailable';\n}\n\n/** The settled result of a `config/*` command: the new server config. */\nexport interface DeepAgentConfigWriteResult {\n  version: number;\n  custom: ThreadConfigCustom;\n}\n\n/** An observed server-config version, delivered to the host callback. */\nexport interface DeepAgentServerConfigEvent {\n  version: number;\n  /** The server config with this client's still-pending writes folded over. */\n  custom: ThreadConfigCustom;\n}\n\ninterface PendingOp {\n  id: number;\n  apply: (custom: ThreadConfigCustom) => ThreadConfigCustom;\n  /** The version the server assigned this op; retired once the lane reaches it. */\n  settledVersion: number | null;\n}\n\n/**\n * Fold the pending optimistic ops over the server config — the effective\n * config a client shows and sends against. Pure, for the tests.\n */\nexport function foldPendingConfigOps(\n  serverConfig: DeepAgentServerConfig | null,\n  ops: readonly Pick<PendingOp, 'apply' | 'settledVersion'>[]\n): ThreadConfigCustom {\n  const version = serverConfig?.version ?? 0;\n  let custom: ThreadConfigCustom = serverConfig?.custom ?? {};\n  for (const op of ops) {\n    if (op.settledVersion !== null && op.settledVersion <= version) continue;\n    custom = op.apply(custom);\n  }\n  return custom;\n}\n\nexport interface UseDeepAgentConfigOptions {\n  /**\n   * Fired whenever the server writes a new version of the lane (another\n   * device, the seed, or the echo of our own command), with this client's\n   * still-pending writes folded over — hosts mirror it into their local\n   * store; nothing is ever clobbered because pending edits stay on top.\n   */\n  onServerConfig?: (event: DeepAgentServerConfigEvent) => void;\n  /**\n   * The thread this binding serves. When set, the lane is read only from a\n   * state that thread's own attach produced ({@link readThreadServerConfig}):\n   * for the first render after a thread switch the client still projects the\n   * previous thread's state, and adopting its lane would report the previous\n   * thread's config and version as this thread's.\n   */\n  threadId?: string;\n}\n\nexport interface UseDeepAgentConfigResult {\n  /** Reactive server config version (0 while the thread has never been configured). */\n  configVersion: number;\n  /** Reactive server-config lane, or `null` at version 0. */\n  serverConfig: DeepAgentServerConfig | null;\n  /**\n   * The effective thread config: the server lane with this client's pending\n   * writes folded over. `{}` at version 0 with nothing pending.\n   */\n  custom: ThreadConfigCustom;\n  /** `true` while at least one `config/*` command is unacknowledged by the server. */\n  hasPendingWrites: boolean;\n  /** `config/patch` — set / unset top-level keys; `null` unsets. */\n  patchConfig: (patch: ThreadConfigPatch) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/enable`. */\n  enableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n  /** `config/tools/disable`. */\n  disableTools: (toolIds: readonly string[]) => Promise<DeepAgentConfigWriteResult>;\n}\n\ntype ConfigCommand =\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.patch; patch: Record<string, unknown> }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsEnable; toolIds: string[] }\n  | { type: typeof DEEP_AGENT_CONFIG_COMMANDS.toolsDisable; toolIds: string[] };\n\n/**\n * The server-authoritative thread config of a deep-agent thread.\n *\n * Every capability a run depends on — model, agent binding, enabled tools,\n * sandbox, environment, … — lives on the thread's server config lane and is\n * changed only through the `config/*` commands. Sends carry per-send keys\n * only (`pickPerSendCustom`). The commands are applied optimistically: each\n * one folds its transform over the server config the moment it is issued\n * (`custom`), and retires once the lane reaches the version the server\n * assigned it; a rejection drops it, so the UI snaps back to the truth.\n *\n * Must be mounted under the thread's statewire context (an `AuiProvider`\n * holding `useDeepAgentThread`'s element), keyed by the thread identity so a\n * thread switch remounts it with an empty pending set. A binding that persists\n * what it reads per thread passes `threadId`, so the render that still sees\n * the previous thread's state after a switch reads no lane at all.\n */\nexport function useDeepAgentConfig({\n  threadId,\n  ...options\n}: UseDeepAgentConfigOptions = {}): UseDeepAgentConfigResult {\n  const sendCommand = useStatewireSendCommand();\n  const selectServerConfig = useCallback(\n    (state: unknown) => readThreadServerConfig({ state, threadId }),\n    [threadId]\n  );\n  const serverConfig = useStatewireState(selectServerConfig);\n  return useDeepAgentConfigController({\n    serverConfig,\n    sendCommand: (command) => Promise.resolve(sendCommand(command as never)),\n    ...options,\n  });\n}\n\nexport interface DeepAgentConfigControllerInputs extends UseDeepAgentConfigOptions {\n  serverConfig: DeepAgentServerConfig | null;\n  sendCommand: (command: ConfigCommand) => Promise<unknown>;\n}\n\n/**\n * The transport-agnostic body of {@link useDeepAgentConfig}, with the reactive\n * inputs injected — so the optimistic-overlay behavior is testable without a\n * statewire session.\n */\nexport function useDeepAgentConfigController({\n  serverConfig,\n  sendCommand,\n  onServerConfig,\n}: DeepAgentConfigControllerInputs): UseDeepAgentConfigResult {\n  const [ops, setOps] = useState<readonly PendingOp[]>([]);\n  const nextOpIdRef = useRef(1);\n  const sendCommandRef = useRef(sendCommand);\n  sendCommandRef.current = sendCommand;\n  const onServerConfigRef = useRef(onServerConfig);\n  onServerConfigRef.current = onServerConfig;\n\n  const custom = useMemo(() => foldPendingConfigOps(serverConfig, ops), [serverConfig, ops]);\n\n  // Retire ops the lane has caught up with (their transform is now part of\n  // the server config itself).\n  const serverVersion = serverConfig?.version ?? 0;\n  const serverVersionRef = useRef(serverVersion);\n  serverVersionRef.current = serverVersion;\n  useEffect(() => {\n    setOps((current) => {\n      const kept = current.filter(\n        (op) => op.settledVersion === null || op.settledVersion > serverVersion\n      );\n      return kept.length === current.length ? current : kept;\n    });\n  }, [serverVersion]);\n\n  const lastNotifiedRef = useRef<DeepAgentServerConfig | null>(null);\n  useEffect(() => {\n    if (serverConfig === null || serverConfig === lastNotifiedRef.current) return;\n    lastNotifiedRef.current = serverConfig;\n    onServerConfigRef.current?.({ version: serverConfig.version, custom });\n  }, [serverConfig, custom]);\n\n  const run = useCallback(\n    async (\n      command: ConfigCommand,\n      apply: PendingOp['apply']\n    ): Promise<DeepAgentConfigWriteResult> => {\n      const id = nextOpIdRef.current++;\n      setOps((current) => [...current, { id, apply, settledVersion: null }]);\n      try {\n        const raw = (await sendCommandRef.current(command)) as\n          | { version?: unknown; custom?: unknown }\n          | null\n          | undefined;\n        const version = typeof raw?.version === 'number' ? raw.version : Number.POSITIVE_INFINITY;\n        // The lane echo may have landed before the acknowledgement: retire\n        // now if so, otherwise stamp the version for the retire effect.\n        setOps((current) =>\n          version <= serverVersionRef.current\n            ? current.filter((op) => op.id !== id)\n            : current.map((op) => (op.id === id ? { ...op, settledVersion: version } : op))\n        );\n        return {\n          version: Number.isFinite(version) ? version : 0,\n          custom: isRecord(raw?.custom) ? raw.custom : apply({}),\n        };\n      } catch (error) {\n        setOps((current) => current.filter((op) => op.id !== id));\n        throw error;\n      }\n    },\n    []\n  );\n\n  const patchConfig = useCallback(\n    (patch: ThreadConfigPatch) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.patch, patch }, (base) =>\n        applyConfigPatch(base, patch)\n      ),\n    [run]\n  );\n  const enableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsEnable, toolIds: [...toolIds] }, (base) =>\n        applyToolsEnable(base, toolIds)\n      ),\n    [run]\n  );\n  const disableTools = useCallback(\n    (toolIds: readonly string[]) =>\n      run({ type: DEEP_AGENT_CONFIG_COMMANDS.toolsDisable, toolIds: [...toolIds] }, (base) =>\n        applyToolsDisable(base, toolIds)\n      ),\n    [run]\n  );\n\n  return {\n    configVersion: serverVersion,\n    serverConfig,\n    custom,\n    hasPendingWrites: ops.some((op) => op.settledVersion === null),\n    patchConfig,\n    enableTools,\n    disableTools,\n  };\n}\n"],"names":[],"mappings":";;;;;AAgDA,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAS9D,SAAS,iBAAiB,OAA8C;AAC7E,QAAM,SAAU,+BAAmD;AACnE,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,UAAU,OAAO;AACvB,MAAI,OAAO,YAAY,YAAY,CAAC,OAAO,UAAU,OAAO,KAAK,WAAW,EAAG,QAAO;AACtF,MAAI,CAAC,SAAS,OAAO,MAAM,EAAG,QAAO;AACrC,SAAO;AACT;AAgCA,MAAM,mDAAwD,IAAI;AAAA,EAChE;AAAA,EACA;AACF,CAAC;AASM,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,QAAM,SAAS,mCAAS;AACxB,OAAI,mCAAS,YAAW,IAAK,SAAO,iCAAQ,UAAS;AACrD,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,SAAO,QAAO,iCAAQ,UAAS,YAAY,6BAA6B,IAAI,OAAO,IAAI;AACzF;AAQO,SAAS,iCAAiC,OAAyB;AACxE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AACpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA0BO,SAAS,qBACd,cACA,KACoB;AACpB,QAAM,WAAU,6CAAc,YAAW;AACzC,MAAI,UAA6B,6CAAc,WAAU,CAAA;AACzD,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,mBAAmB,QAAQ,GAAG,kBAAkB,QAAS;AAChE,aAAS,GAAG,MAAM,MAAM;AAAA,EAC1B;AACA,SAAO;AACT;AAyFO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AACF,GAA8D;AAC5D,QAAM,CAAC,KAAK,MAAM,IAAI,SAA+B,CAAA,CAAE;AACvD,QAAM,cAAc,OAAO,CAAC;AAC5B,QAAM,iBAAiB,OAAO,WAAW;AACzC,iBAAe,UAAU;AACzB,QAAM,oBAAoB,OAAO,cAAc;AAC/C,oBAAkB,UAAU;AAE5B,QAAM,SAAS,QAAQ,MAAM,qBAAqB,cAAc,GAAG,GAAG,CAAC,cAAc,GAAG,CAAC;AAIzF,QAAM,iBAAgB,6CAAc,YAAW;AAC/C,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,YAAU,MAAM;AACd,WAAO,CAAC,YAAY;AAClB,YAAM,OAAO,QAAQ;AAAA,QACnB,CAAC,OAAO,GAAG,mBAAmB,QAAQ,GAAG,iBAAiB;AAAA,MAAA;AAE5D,aAAO,KAAK,WAAW,QAAQ,SAAS,UAAU;AAAA,IACpD,CAAC;AAAA,EACH,GAAG,CAAC,aAAa,CAAC;AAElB,QAAM,kBAAkB,OAAqC,IAAI;AACjE,YAAU,MAAM;;AACd,QAAI,iBAAiB,QAAQ,iBAAiB,gBAAgB,QAAS;AACvE,oBAAgB,UAAU;AAC1B,4BAAkB,YAAlB,2CAA4B,EAAE,SAAS,aAAa,SAAS;EAC/D,GAAG,CAAC,cAAc,MAAM,CAAC;AAEzB,QAAM,MAAM;AAAA,IACV,OACE,SACA,UACwC;AACxC,YAAM,KAAK,YAAY;AACvB,aAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EAAE,IAAI,OAAO,gBAAgB,KAAA,CAAM,CAAC;AACrE,UAAI;AACF,cAAM,MAAO,MAAM,eAAe,QAAQ,OAAO;AAIjD,cAAM,UAAU,QAAO,2BAAK,aAAY,WAAW,IAAI,UAAU,OAAO;AAGxE;AAAA,UAAO,CAAC,YACN,WAAW,iBAAiB,UACxB,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,IACnC,QAAQ,IAAI,CAAC,OAAQ,GAAG,OAAO,KAAK,EAAE,GAAG,IAAI,gBAAgB,QAAA,IAAY,EAAG;AAAA,QAAA;AAElF,eAAO;AAAA,UACL,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,UAC9C,QAAQ,SAAS,2BAAK,MAAM,IAAI,IAAI,SAAS,MAAM,CAAA,CAAE;AAAA,QAAA;AAAA,MAEzD,SAAS,OAAO;AACd,eAAO,CAAC,YAAY,QAAQ,OAAO,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;AACxD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,cAAc;AAAA,IAClB,CAAC,UACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,OAAO,MAAA;AAAA,MAAS,CAAC,SACtD,iBAAiB,MAAM,KAAK;AAAA,IAAA;AAAA,IAEhC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,cAAc;AAAA,IAClB,CAAC,YACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,aAAa,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC5E,iBAAiB,MAAM,OAAO;AAAA,IAAA;AAAA,IAElC,CAAC,GAAG;AAAA,EAAA;AAEN,QAAM,eAAe;AAAA,IACnB,CAAC,YACC;AAAA,MAAI,EAAE,MAAM,2BAA2B,cAAc,SAAS,CAAC,GAAG,OAAO,EAAA;AAAA,MAAK,CAAC,SAC7E,kBAAkB,MAAM,OAAO;AAAA,IAAA;AAAA,IAEnC,CAAC,GAAG;AAAA,EAAA;AAGN,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI,KAAK,CAAC,OAAO,GAAG,mBAAmB,IAAI;AAAA,IAC7D;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;"}

package/dist/auth/AthenaSSOProvider.cjs

@@ -1,8 +1,129 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const jsxRuntime = require("react/jsx-runtime");
+const reactQuery = require("@tanstack/react-query");
 const react = require("react");
+const athenaDiagnostics = require("../diagnostics/athena-diagnostics.cjs");
+const errors = require("../diagnostics/errors.cjs");
+const auth = require("../runtime/auth.cjs");
 const AthenaAuthContext = require("./AthenaAuthContext.cjs");
+const SSO_USERINFO_RETRY_POLICY = {
+  ...auth.DEFAULT_MINT_RETRY_POLICY,
+  timeoutMs: 1e4
+};
+const abortError = () => new DOMException("The session read was cancelled.", "AbortError");
+async function readUserInfoOnce({
+  url,
+  signal,
+  timeoutMs
+}) {
+  if (signal.aborted) throw abortError();
+  const request = new AbortController();
+  const cancel = () => request.abort();
+  signal.addEventListener("abort", cancel, { once: true });
+  let timedOut = false;
+  const timer = setTimeout(() => {
+    timedOut = true;
+    request.abort();
+  }, timeoutMs);
+  try {
+    const response = await fetch(url, { credentials: "include", signal: request.signal });
+    if (response.status === 401 || response.status === 403) return { kind: "unauthenticated" };
+    if (!response.ok) {
+      return auth.isRetryableMintStatus(response.status) ? { kind: "transient", status: response.status, reason: "status" } : { kind: "failed", status: response.status };
+    }
+    let data;
+    try {
+      data = await response.json();
+    } catch (error) {
+      if (signal.aborted) throw abortError();
+      return timedOut ? { kind: "transient", status: null, reason: "timeout", cause: error } : { kind: "failed", status: response.status };
+    }
+    return isValidSSOUserInfo(data) ? { kind: "session", data } : { kind: "invalid_response" };
+  } catch (error) {
+    if (signal.aborted) throw abortError();
+    return { kind: "transient", status: null, reason: timedOut ? "timeout" : "network", cause: error };
+  } finally {
+    clearTimeout(timer);
+    signal.removeEventListener("abort", cancel);
+  }
+}
+async function readSession({
+  url,
+  signal,
+  policy
+}) {
+  const maxAttempts = Math.max(1, Math.floor(policy.maxAttempts));
+  for (let attempts = 1; ; attempts += 1) {
+    const attempt = await readUserInfoOnce({ url, signal, timeoutMs: policy.timeoutMs });
+    if (attempt.kind === "session") return { kind: "session", data: attempt.data };
+    if (attempt.kind === "unauthenticated") return { kind: "no_session", reason: "unauthenticated" };
+    if (attempt.kind === "invalid_response") {
+      console.error(
+        '[AthenaSDK] Invalid SSO userinfo response: expected "user.user_id", "user.email", "orgMemberInfos", and "accessToken"'
+      );
+      return { kind: "no_session", reason: "invalid_response" };
+    }
+    if (attempt.kind === "transient" && attempts < maxAttempts) {
+      const delayMs = auth.getMintRetryDelay({ retry: attempts, policy });
+      athenaDiagnostics.athenaDiagnostics.emit("auth.sso.userinfo.retry", {
+        level: "warn",
+        data: {
+          status: attempt.status,
+          reason: attempt.reason,
+          attempt: attempts,
+          max_attempts: maxAttempts,
+          delay_ms: delayMs
+        }
+      });
+      await waitBeforeRetry({ delayMs, signal });
+      continue;
+    }
+    throw sessionReadError({ url, attempt, attempts });
+  }
+}
+function waitBeforeRetry({ delayMs, signal }) {
+  return new Promise((resolve, reject) => {
+    if (signal.aborted) {
+      reject(abortError());
+      return;
+    }
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(abortError());
+    };
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, delayMs);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function sessionReadError({
+  url,
+  attempt,
+  attempts
+}) {
+  if (attempt.kind === "failed") {
+    const unreadable = attempt.status >= 200 && attempt.status < 300;
+    return new errors.AthenaSdkError({
+      code: "auth_sso_failed",
+      message: unreadable ? `The SSO session read (${url}) answered HTTP ${attempt.status} without a JSON body.` : `The SSO session read (${url}) answered HTTP ${attempt.status}.`,
+      hint: "Check that ssoBaseUrl / ssoUserInfoUrl point at the SSO userinfo endpoint.",
+      status: attempt.status,
+      context: { attempts, reason: unreadable ? "invalid_body" : "status" }
+    });
+  }
+  const answer = attempt.status !== null ? `HTTP ${attempt.status}` : attempt.reason === "timeout" ? "a timeout" : "a network error";
+  return new errors.AthenaSdkError({
+    code: "auth_sso_failed",
+    message: `The SSO session read (${url}) failed ${attempts} time${attempts === 1 ? "" : "s"} (last: ${answer}).`,
+    hint: "The sign-in service did not answer; the person may still be signed in. Offer a retry (displayOnError receives retry).",
+    ...attempt.status !== null && { status: attempt.status },
+    ...attempt.cause !== void 0 && { cause: attempt.cause },
+    context: { attempts, reason: attempt.reason }
+  });
+}
 const DEFAULT_SSO_PATHS = {
   userInfo: "/api/sso/userinfo",
   login: "/api/sso/initiate",
@@ -54,13 +175,15 @@ function AthenaSSOProvider({
   ssoLogoutUrl,
   displayWhileLoading,
   displayOnError,
-  revalidateOnWindowFocus = false
+  onError,
+  revalidateOnWindowFocus = false,
+  retryPolicy = SSO_USERINFO_RETRY_POLICY
 }) {
-  const [ssoData, setSSOData] = react.useState(null);
-  const [loading, setLoading] = react.useState(true);
-  const [error, setError] = react.useState(null);
-  const activeRequestRef = react.useRef(null);
-  const activeReadRef = react.useRef(null);
+  const [queryClient] = react.useState(() => new reactQuery.QueryClient());
+  const retryPolicyRef = react.useRef(retryPolicy);
+  retryPolicyRef.current = retryPolicy;
+  const onErrorRef = react.useRef(onError);
+  onErrorRef.current = onError;
   const ssoUrls = react.useMemo(
     () => ({
       userInfo: resolveSSOUrl({
@@ -81,101 +204,75 @@ function AthenaSSOProvider({
     }),
     [ssoBaseUrl, ssoUserInfoUrl, ssoLoginUrl, ssoLogoutUrl]
   );
-  const refreshSession = react.useCallback(
-    ({ showLoading = false } = {}) => {
+  const queryKey = react.useMemo(() => ["athena-sdk", "sso-session", ssoUrls.userInfo], [ssoUrls.userInfo]);
+  const queryFn = react.useCallback(
+    async ({ signal }) => {
       var _a;
-      (_a = activeRequestRef.current) == null ? void 0 : _a.abort();
-      const abortController = new AbortController();
-      activeRequestRef.current = abortController;
-      const read = (async () => {
-        if (showLoading) {
-          setLoading(true);
-          setError(null);
-          setSSOData(null);
-        }
-        try {
-          const response = await fetch(ssoUrls.userInfo, {
-            credentials: "include",
-            signal: abortController.signal
-          });
-          if (!response.ok) {
-            if (response.status === 401 || response.status === 403) {
-              setSSOData(null);
-              setError("unauthenticated");
-            } else {
-              setError("request_failed");
-            }
-            return null;
-          }
-          const data = await response.json();
-          if (!isValidSSOUserInfo(data)) {
-            console.error(
-              '[AthenaSDK] Invalid SSO userinfo response: expected "user.user_id", "user.email", "orgMemberInfos", and "accessToken"'
-            );
-            setSSOData(null);
-            setError("invalid_response");
-            return null;
-          }
-          setSSOData((prev) => {
-            if (prev && prev.accessToken === data.accessToken && prev.user.user_id === data.user.user_id) {
-              return prev;
-            }
-            return data;
-          });
-          setError(null);
-          return data;
-        } catch (fetchError) {
-          if (fetchError instanceof DOMException && fetchError.name === "AbortError") {
-            return activeRequestRef.current !== abortController ? activeReadRef.current : null;
-          }
-          setError("request_failed");
-          return null;
-        } finally {
-          if (activeRequestRef.current === abortController) {
-            activeRequestRef.current = null;
-            setLoading(false);
+      try {
+        return await readSession({ url: ssoUrls.userInfo, signal, policy: retryPolicyRef.current });
+      } catch (readError) {
+        if (readError instanceof errors.AthenaSdkError) {
+          athenaDiagnostics.athenaDiagnostics.emit("auth.sso.userinfo.error", { error: readError });
+          try {
+            (_a = onErrorRef.current) == null ? void 0 : _a.call(onErrorRef, readError);
+          } catch (callbackError) {
+            console.error("[AthenaSDK] AthenaSSOProvider onError threw", callbackError);
           }
         }
-      })();
-      activeReadRef.current = read;
-      return read;
+        throw readError;
+      }
     },
     [ssoUrls.userInfo]
   );
-  react.useEffect(() => {
-    void refreshSession({ showLoading: true });
-    return () => {
-      var _a;
-      (_a = activeRequestRef.current) == null ? void 0 : _a.abort();
-    };
-  }, [refreshSession]);
+  const query = reactQuery.useQuery(
+    {
+      queryKey,
+      queryFn,
+      // `readSession` retries a transient failure itself, with the bridge's
+      // policy; the query never retries on top of it, and reads while the
+      // browser reports itself offline too, so that policy decides.
+      retry: false,
+      networkMode: "always",
+      staleTime: Number.POSITIVE_INFINITY,
+      refetchOnWindowFocus: false,
+      refetchOnReconnect: false
+    },
+    queryClient
+  );
+  const answer = query.data;
+  const session = (answer == null ? void 0 : answer.kind) === "session" ? answer.data : null;
+  const loading = query.isPending;
+  const reason = session ? null : (answer == null ? void 0 : answer.kind) === "no_session" ? answer.reason : query.isError ? "request_failed" : null;
+  const signedOut = (answer == null ? void 0 : answer.kind) === "no_session" && answer.signedOut === true;
   react.useEffect(() => {
     if (!revalidateOnWindowFocus || typeof window === "undefined") {
       return;
     }
-    const handleFocus = () => {
-      void refreshSession();
+    const revalidate = () => {
+      void queryClient.refetchQueries({ queryKey }, { cancelRefetch: false });
     };
     const handleVisibilityChange = () => {
       if (document.visibilityState === "visible") {
-        void refreshSession();
+        revalidate();
       }
     };
-    window.addEventListener("focus", handleFocus);
+    window.addEventListener("focus", revalidate);
     document.addEventListener("visibilitychange", handleVisibilityChange);
     return () => {
-      window.removeEventListener("focus", handleFocus);
+      window.removeEventListener("focus", revalidate);
       document.removeEventListener("visibilitychange", handleVisibilityChange);
     };
-  }, [revalidateOnWindowFocus, refreshSession]);
+  }, [revalidateOnWindowFocus, queryClient, queryKey]);
   react.useEffect(() => {
-    if (!loading && error === "unauthenticated" && !displayOnError && typeof window !== "undefined") {
+    if (!loading && reason === "unauthenticated" && !signedOut && !displayOnError && typeof window !== "undefined") {
       window.location.assign(ssoUrls.login);
     }
-  }, [loading, error, displayOnError, ssoUrls.login]);
+  }, [loading, reason, signedOut, displayOnError, ssoUrls.login]);
+  const retry = react.useCallback(() => {
+    void queryClient.resetQueries({ queryKey });
+  }, [queryClient, queryKey]);
   const logout = react.useCallback(async (redirectOnLogout = true) => {
-    var _a;
-    (_a = activeRequestRef.current) == null ? void 0 : _a.abort();
+    await queryClient.cancelQueries({ queryKey });
     try {
       await fetch(ssoUrls.logout, {
         method: "POST",
@@ -184,25 +281,36 @@ function AthenaSSOProvider({
     } catch (logoutError) {
       console.error("[AthenaSDK] Failed to invalidate SSO session during logout", logoutError);
     }
-    setSSOData(null);
-    setError(null);
-    setLoading(false);
+    queryClient.setQueryData(queryKey, {
+      kind: "no_session",
+      reason: "unauthenticated",
+      signedOut: true
+    });
     if (redirectOnLogout && typeof window !== "undefined") {
       window.location.assign(ssoUrls.login);
     }
-  }, [ssoUrls.login, ssoUrls.logout]);
-  const ssoDataRef = react.useRef(ssoData);
-  ssoDataRef.current = ssoData;
+  }, [queryClient, queryKey, ssoUrls.login, ssoUrls.logout]);
+  const sessionRef = react.useRef(session);
+  sessionRef.current = session;
   const getToken = react.useCallback(
     async ({ force = false } = {}) => {
       var _a;
       if (force) {
-        const renewed = await refreshSession();
-        if (renewed) return renewed.accessToken;
+        try {
+          const renewed = await queryClient.fetchQuery({
+            queryKey,
+            queryFn,
+            staleTime: 0,
+            retry: false,
+            networkMode: "always"
+          });
+          if (renewed.kind === "session") return renewed.data.accessToken;
+        } catch {
+        }
       }
-      return ((_a = ssoDataRef.current) == null ? void 0 : _a.accessToken) ?? null;
+      return ((_a = sessionRef.current) == null ? void 0 : _a.accessToken) ?? null;
     },
-    [refreshSession]
+    [queryClient, queryKey, queryFn]
   );
   const authState = react.useMemo(() => {
     if (loading) {
@@ -217,19 +325,7 @@ function AthenaSSOProvider({
         getToken
       };
     }
-    if (error === "request_failed" && ssoData) {
-      const { user: user2, orgs: orgs2, accessToken: accessToken2 } = mapSSOResponse(ssoData);
-      return {
-        isLoggedIn: true,
-        isLoading: false,
-        user: user2,
-        accessToken: accessToken2,
-        orgs: orgs2,
-        logout,
-        getToken
-      };
-    }
-    if (error || !ssoData) {
+    if (!session) {
       return {
         isLoggedIn: false,
         isLoading: false,
@@ -240,7 +336,7 @@ function AthenaSSOProvider({
         getToken
       };
     }
-    const { user, orgs, accessToken } = mapSSOResponse(ssoData);
+    const { user, orgs, accessToken } = mapSSOResponse(session);
     return {
       isLoggedIn: true,
       isLoading: false,
@@ -250,11 +346,14 @@ function AthenaSSOProvider({
       logout,
       getToken
     };
-  }, [loading, error, ssoData, logout, getToken]);
+  }, [loading, session, logout, getToken]);
   if (authState.isLoading) {
     return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: displayWhileLoading ?? null });
   }
   if (!authState.isLoggedIn) {
+    if (typeof displayOnError === "function") {
+      return /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: displayOnError({ reason: reason ?? "unauthenticated", retry }) });
+    }
     return displayOnError ? /* @__PURE__ */ jsxRuntime.jsx(jsxRuntime.Fragment, { children: displayOnError }) : null;
   }
   return /* @__PURE__ */ jsxRuntime.jsx(AthenaAuthContext.AthenaAuthContext.Provider, { value: authState, children });