@athenaintel/react 0.41.2 → 0.42.1

package/dist/agent-runtime/src/use-deep-agent-runtime.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-runtime.cjs","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport { useDeepAgentThread, type UseDeepAgentThreadOptions } from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `false`: process-local session (a reload mints a new client).\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | false;\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch or re-attach gets fresh hydration gating and retry budgets). The\n  // controller re-dispatches failed sends the server never judged; see\n  // `send-recovery.ts` for the contract.\n  const attachId =\n    threadOptions.attachKey === undefined\n      ? threadOptions.threadId\n      : `${threadOptions.threadId}:${threadOptions.attachKey}`;\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(client, () => getRunConfigRef.current?.() ?? {});\n  }, [client, hasRunConfig, runConfigKey]);\n\n  return client;\n}\n\n"],"names":["isStorageQuotaError","isStatewireChannelTeardown","isConfigSyncUnavailableRejection","useState","useRef","readPersistedFailedSendStamps","readFailedSendStampsFromRecord","sendRecovery","useMemo","createDeepAgentSendRecovery","client","readStatewireFailedSendLane","useEffect","useDeepAgentThread","QuotaSafeLocalStorageSession","registerDeepAgentRunConfig"],"mappings":";;;;;;;;;;AAgFO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAOA,6BAAAA,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAIC,OAAAA,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAIC,mBAAAA,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAuEO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAIC,MAAAA,SAAS,0BAA0B;AAIpE,QAAM,aAAaC,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmBA,MAAAA,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqBA,MAAAA,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiBA,MAAAA,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,YAAYA,MAAAA,OAAuB,IAAI;AAI7C,QAAM,mBAAmBA,MAAAA;AAAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,QACR,SACA,QAAQ,SAAS,kBACf,yBACE,MAAMC,6BAAAA,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAMC,6BAAAA,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAM7E,QAAM,WACJ,cAAc,cAAc,SACxB,cAAc,WACd,GAAG,cAAc,QAAQ,IAAI,cAAc,SAAS;AAE1D,QAAMC,iBAAeC,MAAAA;AAAAA,IACnB,MACEC,yCAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMC,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAOC,aAAAA,4BAA4BD,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,IAAA,CACnC;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEXE,QAAAA,UAAU,MAAM,MAAML,eAAa,WAAW,CAACA,cAAY,CAAC;AAC5D,QAAM,kBAAkBH,MAAAA,OAAOG,cAAY;AAC3C,kBAAgB,UAAUA;AAE1B,QAAM,SAASM,mBAAAA,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAASC,6BAAAA,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpBF,QAAAA,UAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAML,eAAa,yBAAyB;AACjFA,mBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQA,cAAY,CAAC;AAOzB,QAAM,kBAAkBH,MAAAA,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAChCQ,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAOG,aAAAA,2BAA2B,QAAQ,MAAA;;AAAM,oCAAgB,YAAhB,6CAA+B,CAAA;AAAA,KAAE;AAAA,EACnF,GAAG,CAAC,QAAQ,cAAc,YAAY,CAAC;AAEvC,SAAO;AACT;;;;"}
+{"version":3,"file":"use-deep-agent-runtime.cjs","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport { useDeepAgentThread, type UseDeepAgentThreadOptions } from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `key` must name the same lane for the whole life of the\n * thread's mount. The statewire session that mounts on a lane keeps the client\n * id, lane clocks and journal it loaded there; moved to another key, it carries\n * them along, and the record it left keeps the same client id with a stale\n * clock and whatever it had journaled. Every later mount that loads that record\n * resends its journal and stamps early commands from its clock, at or below the\n * watermark the server keeps for the id, so the server absorbs each one as a\n * replay and answers `expired`. A host whose principal arrives after mount\n * passes `pending` until it does, never a stand-in key.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch or re-attach gets fresh hydration gating and retry budgets). The\n  // controller re-dispatches failed sends the server never judged; see\n  // `send-recovery.ts` for the contract.\n  const attachId =\n    attachKey === undefined ? threadOptions.threadId : `${threadOptions.threadId}:${attachKey}`;\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(client, () => getRunConfigRef.current?.() ?? {});\n  }, [client, hasRunConfig, runConfigKey]);\n\n  return client;\n}\n\n"],"names":["isStorageQuotaError","isStatewireChannelTeardown","isConfigSyncUnavailableRejection","useState","useRef","readPersistedFailedSendStamps","readFailedSendStampsFromRecord","sendRecovery","useMemo","createDeepAgentSendRecovery","client","readStatewireFailedSendLane","useEffect","useDeepAgentThread","QuotaSafeLocalStorageSession","registerDeepAgentRunConfig"],"mappings":";;;;;;;;;;AAoFO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAOA,6BAAAA,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAIC,OAAAA,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAIC,mBAAAA,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAuEO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAIC,MAAAA,SAAS,0BAA0B;AAIpE,QAAM,aAAaC,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmBA,MAAAA,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqBA,MAAAA,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiBA,MAAAA,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,YAAYA,MAAAA,OAAuB,IAAI;AAI7C,QAAM,mBAAmBA,MAAAA;AAAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MAAMC,6BAAAA,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAMC,4DAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAI7E,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAMlB,QAAM,WACJ,cAAc,SAAY,cAAc,WAAW,GAAG,cAAc,QAAQ,IAAI,SAAS;AAE3F,QAAMC,iBAAeC,MAAAA;AAAAA,IACnB,MACEC,yCAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMC,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAOC,aAAAA,4BAA4BD,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,IAAA,CACnC;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEXE,QAAAA,UAAU,MAAM,MAAML,eAAa,WAAW,CAACA,cAAY,CAAC;AAC5D,QAAM,kBAAkBH,MAAAA,OAAOG,cAAY;AAC3C,kBAAgB,UAAUA;AAE1B,QAAM,SAASM,mBAAAA,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA;AAAA;AAAA;AAAA,IAIjC,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAASC,6BAAAA,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpBF,QAAAA,UAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAML,eAAa,yBAAyB;AACjFA,mBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQA,cAAY,CAAC;AAOzB,QAAM,kBAAkBH,MAAAA,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAChCQ,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAOG,aAAAA,2BAA2B,QAAQ,MAAA;;AAAM,oCAAgB,YAAhB,6CAA+B,CAAA;AAAA,KAAE;AAAA,EACnF,GAAG,CAAC,QAAQ,cAAc,YAAY,CAAC;AAEvC,SAAO;AACT;;;;;"}

package/dist/agent-runtime/src/use-deep-agent-runtime.d.ts

@@ -0,0 +1,168 @@
+import { type DeepAgentModelContextHost } from './model-context';
+import { type SessionStorageDegradation } from './quota-safe-local-storage-session';
+import type { StatewireTransportOptions } from './statewire-transport';
+import { useDeepAgentThread, type UseDeepAgentThreadOptions } from './use-deep-agent-thread';
+/** The thread element `useDeepAgentThread` produces — what the host's `useAui`
+ * consumes (`useAui({ thread })`). */
+export type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;
+/**
+ * Durable command-lane persistence for the thread — where the lane identity and
+ * the commands still awaiting a durable verdict live, so a reload resumes the
+ * lane instead of minting a new client.
+ *
+ * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}
+ *   (the upstream `LocalStorageSession` contract with Athena keys, legacy
+ *   metadata, and retention). A storage failure after mounting — the origin
+ *   out of quota after statewire's own sweep, a lockdown-mode write refusal —
+ *   degrades the session to memory-only persistence and is reported through
+ *   `onStorageDegraded` (default: one console warning); it never stops the
+ *   connection. Guarded by a shared availability probe: SSR, storage-blocked
+ *   iframes, and locked-down browsers keep the session process-local, exactly
+ *   as before the seam existed, while an origin that is merely full mounts the
+ *   session and lets it degrade. `key` scopes the stored lane — a thread id is
+ *   only meaningful against the backend (and, where relevant, principal) that
+ *   minted it, so include the sync-host URL.
+ * - `session-store`: React Native hosts pass a hydrated library store backed
+ *   by AsyncStorage. Its synchronous `load()` is
+ *   also the send-recovery freshness gate's view of the persisted failed lane,
+ *   so a store that persists `failed` gets the same 24 h staleness rule as the
+ *   browser hosts.
+ * - `pending`: the principal the lane is scoped by is not known yet (the
+ *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.
+ * - `false`: process-local session (a reload mints a new client).
+ *
+ * A `local-storage` `key` must name the same lane for the whole life of the
+ * thread's mount. The statewire session that mounts on a lane keeps the client
+ * id, lane clocks and journal it loaded there; moved to another key, it carries
+ * them along, and the record it left keeps the same client id with a stale
+ * clock and whatever it had journaled. Every later mount that loads that record
+ * resends its journal and stamps early commands from its clock, at or below the
+ * watermark the server keeps for the id, so the server absorbs each one as a
+ * replay and answers `expired`. A host whose principal arrives after mount
+ * passes `pending` until it does, never a stand-in key.
+ */
+export type DeepAgentSessionPersistence = {
+    kind: 'local-storage';
+    key: (threadId: string) => string;
+    onStorageDegraded?: (degradation: SessionStorageDegradation) => void;
+} | {
+    kind: 'session-store';
+    store: NonNullable<StatewireTransportOptions['sessionStore']>;
+} | DeepAgentPendingSession | false;
+/**
+ * The durable lane's principal is not known yet. A lane belongs to one
+ * principal and a mounted session cannot move to another lane (see
+ * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is
+ * journaled and the transport stays parked — no dial — until the host passes
+ * the real persistence. The park is an attach identity of its own: the attach
+ * that follows makes every per-attach decision afresh (the remembered-snapshot
+ * seed, the pooled hello, which the park leaves in the pool) and dials the real
+ * lane once, as the thread's first attach. The park carries no connection
+ * message, so it reads like a never-started chat rather than a paused one; a
+ * host suspension, when one applies, wins.
+ */
+export type DeepAgentPendingSession = {
+    kind: 'pending';
+};
+/**
+ * The attach key a pending-lane park runs under. It differs from every key the
+ * host passes, so the real attach after it is a new attach identity.
+ */
+export declare function pendingSessionAttachKey(attachKey: string | number | undefined): string;
+/**
+ * Whether a localStorage-backed session can persist here. A write probe, not a
+ * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage
+ * blocking) throw from the `localStorage` accessor itself, and lockdown-mode
+ * origins throw from `setItem` — each of those must mean "stay process-local",
+ * never a crash at mount. An origin that is merely out of quota still reads
+ * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}
+ * degrades that to memory-only persistence and recovers when room frees,
+ * where staying process-local would give up cross-tab sharing for the whole
+ * page load over a condition that clears.
+ *
+ * The Web Locks API is probed too: the session storage serializes the shared
+ * record across tabs through `navigator.locks` and refuses to mount without it
+ * (the same precondition as the vendor `LocalStorageSession`), so an origin
+ * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —
+ * must also stay process-local instead of throwing at mount.
+ */
+export declare function canPersistDeepAgentSession(): boolean;
+/**
+ * The shared tail of every surface's transport error policy: channel teardown
+ * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only
+ * `config/*` writes emit it, and the host's config sync already handles it
+ * through its own command promise (regionally-pinned workspaces run on
+ * local-only config); everything else is a real transport error. Hosts with their own error chain
+ * (paywall, telemetry, send-failure stores) end it with this so the fallback
+ * logging stays uniform per surface.
+ */
+export declare function logUnhandledStatewireError(surface: string, error: Error): void;
+/**
+ * The imperative thread-state slice of an assistant-ui client — structural so
+ * web and native `useAui` results both satisfy it. The send-recovery layer
+ * reads the statewire thread extras through it (the sanctioned imperative
+ * pattern: `aui.thread().getState()` inside callbacks/effects, never render).
+ */
+export interface DeepAgentThreadStateClientHost {
+    thread: () => {
+        getState: () => {
+            extras?: unknown;
+        };
+    };
+    subscribe: (listener: () => void) => () => void;
+}
+/** Deep-agent runConfig registration on the ambient model context (see
+ * {@link registerDeepAgentRunConfig}). */
+export interface DeepAgentRunConfigRegistration {
+    /**
+     * Builds the `runConfig` that drives the run. The core pulls it when the
+     * model context notifies (mount and each key change); the server reads that
+     * synced value at command admission. The per-render ref makes each pull use
+     * the latest closure but does not trigger a pull itself.
+     */
+    get: () => Record<string, unknown>;
+    /**
+     * Re-registers the provider and notifies model-context sync when this value
+     * changes (reference equality). Include getter inputs that can change while
+     * mounted; they reach the server only after a key change triggers a pull.
+     */
+    key?: unknown;
+}
+export interface UseDeepAgentRuntimeOptions<TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore'> {
+    /** Host surface tag for the shared fallback error logging (e.g.
+     * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */
+    surface: string;
+    /** Durable command-lane persistence; defaults to process-local. */
+    session?: DeepAgentSessionPersistence;
+    /**
+     * Builds the host's assistant-ui client from the thread element — pass the
+     * platform `useAui` (web hosts from `@assistant-ui/react`, React Native
+     * hosts from `@assistant-ui/react-native`; this package imports neither).
+     * Called unconditionally on every render, so it MUST be (or call) a hook
+     * following the rules of hooks — define it at module scope with a `use*`
+     * name: `const useHostClient = (thread: DeepAgentThreadElement) =>
+     * useAui({ thread })`.
+     */
+    useClient: (thread: DeepAgentThreadElement) => TClient;
+    /** Registers the deep-agent runConfig on the client's model context. Hosts
+     * that register elsewhere (e.g. a bridge component mounted under the
+     * provider) omit it. */
+    runConfig?: DeepAgentRunConfigRegistration;
+}
+/**
+ * The configurable deep-agent statewire runtime — the one hook every Athena
+ * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office
+ * add-in, mobile) mounts its assistant-ui client through.
+ *
+ * Composes the pieces every surface previously wired by hand:
+ * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,
+ * connection/running observers), durable session persistence with the shared
+ * availability guard, transport-level send recovery (failed sends the server
+ * never judged auto-retry under their original message id — `send-recovery.ts`),
+ * the platform client via `useClient`, and the
+ * runConfig model-context registration on provider notifications. Everything
+ * host-specific — auth headers, run-config building, error policy, adapters,
+ * diagnostics recorders — stays an option, so per-surface behavior is
+ * configuration, not a fork.
+ */
+export declare function useDeepAgentRuntime<TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost>(options: UseDeepAgentRuntimeOptions<TClient>): TClient;

package/dist/agent-runtime/src/use-deep-agent-runtime.js

@@ -6,6 +6,9 @@ import { createDeepAgentSendRecovery } from "./send-recovery.js";
 import { readStatewireFailedSendLane } from "./thread-extras.js";
 import { isConfigSyncUnavailableRejection } from "./use-deep-agent-config.js";
 import { useDeepAgentThread } from "./use-deep-agent-thread.js";
+function pendingSessionAttachKey(attachKey) {
+  return `session-pending:${attachKey ?? ""}`;
+}
 function canPersistDeepAgentSession() {
   var _a;
   try {
@@ -69,8 +72,10 @@ function useDeepAgentRuntime(options) {
   const failureStampsRef = useRef(
     void 0
   );
-  failureStampsRef.current = session === false ? void 0 : session.kind === "local-storage" ? canPersistLocalSession ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId)) : void 0 : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));
-  const attachId = threadOptions.attachKey === void 0 ? threadOptions.threadId : `${threadOptions.threadId}:${threadOptions.attachKey}`;
+  failureStampsRef.current = session === false || session.kind === "pending" ? void 0 : session.kind === "local-storage" ? canPersistLocalSession ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId)) : void 0 : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));
+  const sessionPending = session !== false && session.kind === "pending";
+  const attachKey = sessionPending ? pendingSessionAttachKey(threadOptions.attachKey) : threadOptions.attachKey;
+  const attachId = attachKey === void 0 ? threadOptions.threadId : `${threadOptions.threadId}:${attachKey}`;
   const sendRecovery = useMemo(
     () => createDeepAgentSendRecovery({
       lane: () => {
@@ -91,6 +96,18 @@ function useDeepAgentRuntime(options) {
   sendRecoveryRef.current = sendRecovery;
   const thread = useDeepAgentThread({
     ...threadOptions,
+    ...attachKey !== void 0 && { attachKey },
+    // Parked without a message (a host suspension, when one applies, wins):
+    // nothing dials and nothing journals until the lane is known. What paints
+    // the first frame is the real attach's to report, not the park's.
+    ...sessionPending && {
+      suspended: threadOptions.suspended || {},
+      onAttachSource: void 0
+    },
+    // A pooled dial for the thread is the real attach's to take: a park that
+    // only waits for the lane neither takes nor discards it. A host suspension
+    // still discards it, as it does without a pending lane.
+    ...sessionPending && !threadOptions.suspended && { prewarmPool: void 0 },
     ...session !== false && session.kind === "local-storage" && canPersistLocalSession && {
       storage: {
         session: QuotaSafeLocalStorageSession({
@@ -143,6 +160,7 @@ function useDeepAgentRuntime(options) {
 export {
   canPersistDeepAgentSession,
   logUnhandledStatewireError,
+  pendingSessionAttachKey,
   useDeepAgentRuntime
 };
 //# sourceMappingURL=use-deep-agent-runtime.js.map

package/dist/agent-runtime/src/use-deep-agent-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport { useDeepAgentThread, type UseDeepAgentThreadOptions } from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `false`: process-local session (a reload mints a new client).\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | false;\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch or re-attach gets fresh hydration gating and retry budgets). The\n  // controller re-dispatches failed sends the server never judged; see\n  // `send-recovery.ts` for the contract.\n  const attachId =\n    threadOptions.attachKey === undefined\n      ? threadOptions.threadId\n      : `${threadOptions.threadId}:${threadOptions.attachKey}`;\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(client, () => getRunConfigRef.current?.() ?? {});\n  }, [client, hasRunConfig, runConfigKey]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;AAgFO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAuEO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,YAAY,OAAuB,IAAI;AAI7C,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,QACR,SACA,QAAQ,SAAS,kBACf,yBACE,MAAM,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAM7E,QAAM,WACJ,cAAc,cAAc,SACxB,cAAc,WACd,GAAG,cAAc,QAAQ,IAAI,cAAc,SAAS;AAE1D,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,4BAA4BA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,IAAA,CACnC;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpB,YAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAM,aAAa,yBAAyB;AACjF,iBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,CAAC;AAOzB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAChC,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO,2BAA2B,QAAQ,MAAA;;AAAM,oCAAgB,YAAhB,6CAA+B,CAAA;AAAA,KAAE;AAAA,EACnF,GAAG,CAAC,QAAQ,cAAc,YAAY,CAAC;AAEvC,SAAO;AACT;"}
+{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport { useDeepAgentThread, type UseDeepAgentThreadOptions } from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `key` must name the same lane for the whole life of the\n * thread's mount. The statewire session that mounts on a lane keeps the client\n * id, lane clocks and journal it loaded there; moved to another key, it carries\n * them along, and the record it left keeps the same client id with a stale\n * clock and whatever it had journaled. Every later mount that loads that record\n * resends its journal and stamps early commands from its clock, at or below the\n * watermark the server keeps for the id, so the server absorbs each one as a\n * replay and answers `expired`. A host whose principal arrives after mount\n * passes `pending` until it does, never a stand-in key.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch or re-attach gets fresh hydration gating and retry budgets). The\n  // controller re-dispatches failed sends the server never judged; see\n  // `send-recovery.ts` for the contract.\n  const attachId =\n    attachKey === undefined ? threadOptions.threadId : `${threadOptions.threadId}:${attachKey}`;\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(client, () => getRunConfigRef.current?.() ?? {});\n  }, [client, hasRunConfig, runConfigKey]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;AAoFO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAuEO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,YAAY,OAAuB,IAAI;AAI7C,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MAAM,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAI7E,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAMlB,QAAM,WACJ,cAAc,SAAY,cAAc,WAAW,GAAG,cAAc,QAAQ,IAAI,SAAS;AAE3F,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,4BAA4BA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,IAAA,CACnC;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA;AAAA;AAAA;AAAA,IAIjC,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpB,YAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAM,aAAa,yBAAyB;AACjF,iBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,CAAC;AAOzB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAChC,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO,2BAA2B,QAAQ,MAAA;;AAAM,oCAAgB,YAAhB,6CAA+B,CAAA;AAAA,KAAE;AAAA,EACnF,GAAG,CAAC,QAAQ,cAAc,YAAY,CAAC;AAEvC,SAAO;AACT;"}

package/dist/agent-runtime/src/use-deep-agent-thread.cjs

@@ -44,6 +44,9 @@ function useDeepAgentThread({
   diagnostics,
   snapshotCache,
   messageWindow: messageWindow$1,
+  laneHistory = false,
+  readMessageWindow = messageWindow.readDeepAgentMessageWindow,
+  createConversionCache = messages.createDeepAgentMessageConversionCache,
   toolOutputs,
   withdrawnTurns,
   prewarmPool,
@@ -85,6 +88,8 @@ function useDeepAgentThread({
   headersRef.current = headers;
   const messageWindowRef = react.useRef(messageWindow$1);
   messageWindowRef.current = messageWindow$1;
+  const laneHistoryRef = react.useRef(laneHistory);
+  laneHistoryRef.current = laneHistory;
   const interestRef = react.useRef({ attachId: "", stated: false });
   const lastMessagesRef = react.useRef(null);
   const [toolOutputsVersion, setToolOutputsVersion] = react.useState(0);
@@ -157,7 +162,9 @@ function useDeepAgentThread({
           (_a3 = onOutOfBandRunActiveRef.current) == null ? void 0 : _a3.call(onOutOfBandRunActiveRef, stateOutOfBandRunActive);
         });
       }
-      const protocolStatus = protocol.projectDeepAgentProtocol(state);
+      const protocolStatus = protocol.projectDeepAgentProtocol(state, {
+        laneHistory: laneHistoryRef.current
+      });
       if (protocolStatus !== null) {
         const previous = ((_a2 = lastProtocolRef.current) == null ? void 0 : _a2.attachId) === attachIdRef.current ? lastProtocolRef.current.status : null;
         if (previous === null || previous.protocolVersion !== protocolStatus.protocolVersion) {
@@ -236,7 +243,7 @@ function useDeepAgentThread({
   }
   const conversionCacheRef = react.useRef(null);
   if (conversionCacheRef.current === null || conversionCacheRef.current.attachId !== attachId) {
-    conversionCacheRef.current = { attachId, cache: messages.createDeepAgentMessageConversionCache() };
+    conversionCacheRef.current = { attachId, cache: createConversionCache() };
   }
   const conversionCache = conversionCacheRef.current.cache;
   const lastStateMessagesRef = react.useRef(
@@ -246,7 +253,7 @@ function useDeepAgentThread({
     (wireState, meta) => {
       var _a2, _b, _c, _d, _e, _f, _g;
       const values = statewireState.readDeepAgentStreamValues(wireState);
-      const window = messageWindow.readDeepAgentMessageWindow(meta.mounted);
+      const window = readMessageWindow(meta.mounted);
       const held = ((_a2 = lastMessagesRef.current) == null ? void 0 : _a2.attachId) === attachId ? lastMessagesRef.current.messages : null;
       const messages2 = (window == null ? void 0 : window.messages) ?? values.messages ?? held ?? [];
       if (window !== null || messages2.length > 0) lastMessagesRef.current = { attachId, messages: messages2 };
@@ -337,7 +344,7 @@ function useDeepAgentThread({
       }
       return converter(state, ((_g = (_f = state.runs) == null ? void 0 : _f[0]) == null ? void 0 : _g.status) === "running", conversionCache);
     },
-    [attachId, conversionCache, converter, materialize, threadId]
+    [attachId, conversionCache, converter, materialize, readMessageWindow, threadId]
   );
   return reactStatewire.StatewireThread({
     // The transport stamps this protocol on every command; the thread client
@@ -388,6 +395,7 @@ function useDeepAgentThread({
           isNew: preloadRef.current.preload,
           headers: (ctx) => headersRef.current(ctx),
           messageWindow: messageWindowRef.current,
+          laneHistory: laneHistoryRef.current,
           sessionStore,
           onAuthResolve: (ctx) => {
             var _a2;