@athenaintel/react 0.41.3 → 0.42.1

package/dist/agent-runtime/src/conversation-list.d.ts

@@ -0,0 +1,343 @@
+import type { QueryClient } from '@tanstack/react-query';
+import type { ConversationIndexEntry } from './conversation-index';
+/**
+ * What a session asks of the viewer, derived server-side from the run, the
+ * parked interrupt, the pull requests it opened, its termination and its last
+ * wake (the Devin-style session list). `needs_you` is the only state that
+ * demands the viewer act; `working` is live; `ready` finished with something
+ * to look at; `watching` waits on an external party (a review, a check);
+ * `done` and `error` are terminal. A backend newer than this client may report
+ * a value outside the union — render it as "no attention" rather than failing.
+ */
+export type ConversationAttention = 'needs_you' | 'working' | 'ready' | 'watching' | 'done' | 'error';
+export declare const CONVERSATION_ATTENTIONS: readonly ConversationAttention[];
+/** Which signal produced the attention state (and the `nextAction` copy). */
+export type ConversationAttentionSource = 'interrupt' | 'run' | 'pull_request' | 'termination' | 'wake' | 'handoff' | 'follow_up';
+/** The last event that woke a resting session (a GitHub webhook, a schedule, a handoff). */
+export interface ConversationWake {
+    source: string | null;
+    reason: string | null;
+    /** ISO 8601 timestamp of the wake. */
+    at: string | null;
+}
+/**
+ * Live GitHub state of a pull request the session opened, read by the server
+ * when the list renders. Never pushed by the conversation index — it comes
+ * from the list fetch only, so a fold keeps the fetched value.
+ */
+export interface ConversationPullRequest {
+    /** `owner/repo` the pull request lives in. */
+    repoFullName: string;
+    number: number;
+    url: string;
+    title: string;
+    state: 'OPEN' | 'CLOSED' | 'MERGED';
+    isDraft: boolean;
+    /** GitHub's review decision (APPROVED, CHANGES_REQUESTED, REVIEW_REQUIRED) or null. */
+    reviewDecision: string | null;
+    /** Combined state of the checks on the head commit. */
+    checksState: 'SUCCESS' | 'FAILURE' | 'PENDING' | 'NONE';
+    /** ISO 8601 timestamp of the pull request's last update on GitHub. */
+    updatedAt: string;
+}
+/**
+ * Shared conversation/thread LIST contract (chat-stack unification —
+ * thread-list-contract-convergence).
+ *
+ * Every chat surface lists "my conversations" against the same underlying
+ * session assets, but historically each declared its own row shape, paging
+ * model, and filter set (Olympus GraphQL `listConversations`, the SDK/Chrome
+ * REST `/api/conversations/threads/list`, mobile's `/api/v0/sessions`). This
+ * module is the ONE contract those surfaces converge on:
+ *
+ * - **Row shape**: {@link ConversationSummary} — the canonical camelCase
+ *   superset. Fields a transport cannot supply are `null`, never invented.
+ * - **Ordering**: newest first by `updatedAt`, always. Ordering is part of the
+ *   contract, not a parameter — no surface sorts any other way.
+ * - **Paging**: offset/limit with a LIVE newest page and explicitly-fetched
+ *   frozen history pages (see `useConversationList`). `hasMore` continues the
+ *   scan; `totalCount` is advisory and may be `null` for transports that do
+ *   not count.
+ * - **Filtering**: {@link ConversationListFilter}. `appId` follows
+ *   `docs/SESSION_APP_ID_GUIDE.md`: exact match when set (legacy `null`
+ *   sessions excluded), no filter when unset. A fetcher that cannot express a
+ *   requested filter field MUST throw rather than silently ignore it — a
+ *   dropped filter returns wrong rows under a cache key that claims otherwise.
+ * - **Freshness**: the per-user conversation-index statewire
+ *   (`conversation-index.ts`) is the push signal; these queries are the data
+ *   source. Push handlers call {@link invalidateConversationListCaches}.
+ */
+export interface ConversationSummary {
+    /** LangGraph thread id — the cross-surface conversation identity. */
+    threadId: string;
+    title: string;
+    /** ISO 8601 timestamp of last update (the contract's sort key). */
+    updatedAt: string;
+    /** ISO 8601 creation timestamp, when the transport reports it. */
+    createdAt: string | null;
+    /** Session lifecycle state from athena_metadata (e.g. running, completed). */
+    state: string | null;
+    /** Agent runtime marker (e.g. 'athena_deep_agent'), when reported. */
+    runtime: string | null;
+    /** Channel the session was started from (e.g. agent_email, web). */
+    sourceChannel: string | null;
+    /** Asset type (session, video_session, desktop_session, mobile_session). */
+    assetType: string | null;
+    /** Session asset id (`asset_<uuid>`), when the transport reports it. */
+    assetId: string | null;
+    /** Client app that created the session (SESSION_APP_ID_GUIDE). */
+    appId: string | null;
+    /** Computer asset whose sandbox started the session (`sourceChannel` 'computer'); omitted by surfaces that don't carry it. */
+    computerAssetId?: string | null;
+    /**
+     * Collab agent (`asset_<uuid>`) and channel the session started on; `null`
+     * channel is the agent's default channel. The server refuses a run on another
+     * of the agent's channels, so a client shows the session's mode from these
+     * instead of remembering it. Omitted by surfaces that don't carry them.
+     */
+    collabAgentId?: string | null;
+    collabChannelId?: string | null;
+    /** Session asset id this row is a sub-session of; omitted by surfaces that don't carry it. */
+    parentSessionId?: string | null;
+    /** Sub-sessions of this row the viewer can see; omitted by surfaces that don't carry it. */
+    subSessionCount?: number;
+    /** Trigger marker (`manual` remains user-initiated; other values are automated). */
+    triggerType: string | null;
+    /** Last-message preview used when a legacy session has no useful title. */
+    preview: string | null;
+    messageCount: number | null;
+    /** Per-user unread flag derived server-side from the read receipt. */
+    isUnread: boolean;
+    /**
+     * Canonical session status (status_v2: idle | active | needs_input | error),
+     * or null when the transport does not report it.
+     */
+    sessionStatus: string | null;
+    /**
+     * Canonical status of the session's current run (status_v2: scheduled |
+     * queued | running | needs_input | completed | failed | canceled). Null when
+     * the transport does not report it — {@link isConversationRunning} then
+     * falls back to the legacy `state`. Running badges on every surface derive
+     * from this one helper so they cannot disagree.
+     */
+    runStatus: string | null;
+    /**
+     * Server-derived attention state. `undefined` when the transport (or an
+     * older server) does not report it — {@link deriveConversationAttention}
+     * then falls back to the status planes; `null` when the server reports none.
+     */
+    attention?: ConversationAttention | null;
+    /** One line (≤ 80 chars) of what the viewer should do next, when the server derives one. */
+    nextAction?: string | null;
+    /** Which signal produced `attention` / `nextAction`. */
+    attentionSource?: ConversationAttentionSource | null;
+    /** Whether the viewer pinned (favorited) the session; `undefined` when not reported. */
+    isFavorited?: boolean;
+    /**
+     * Whether the viewer started the session (`false`: it is shared with them);
+     * `undefined` when not reported. Never pushed by the conversation index, so
+     * a fold keeps the fetched value.
+     */
+    createdByMe?: boolean;
+    /** The last wake of a resting session; `undefined` when not reported. */
+    lastWake?: ConversationWake | null;
+    /**
+     * Pull requests the session opened with their live GitHub state. `[]` when
+     * it opened none, `null` when the state could not be read right now,
+     * `undefined` when the transport did not ask for (or report) it.
+     */
+    pullRequests?: ConversationPullRequest[] | null;
+}
+/**
+ * The canonical filter set. Semantics are defined here once; each fetcher
+ * translates the fields its transport supports and throws on the rest.
+ */
+export interface ConversationListFilter {
+    /** Exact-match client app filter; unset = all apps (SESSION_APP_ID_GUIDE). */
+    appId?: string;
+    /**
+     * Sessions of any of these client apps too, a union with `appId` (REST thread
+     * list only today). A host lists an earlier app's sessions beside its own.
+     */
+    appIds?: readonly string[];
+    /** Asset types to include (e.g. ['session']); unset = all session types. */
+    assetTypes?: readonly string[];
+    /** Case-insensitive title search. */
+    search?: string;
+    /** Hide triggered/background sessions (REST thread list only today). */
+    excludeTriggered?: boolean;
+    /** Start-channel filter (v0 sessions / REST thread list only today). */
+    sourceChannels?: readonly string[];
+    /** Start channels to hide (e.g. ['api']); GraphQL `listConversations` only today. */
+    excludeSourceChannels?: readonly string[];
+    /** Exact computer asset whose sandbox started the session; GraphQL `listConversations` only today. */
+    computerAssetId?: string;
+    /** Only the sub-sessions of this session asset id; GraphQL `listConversations` only today. */
+    parentSessionId?: string;
+    /**
+     * Lifecycle-state filter (e.g. ['running'], ['completed']). Transports match
+     * it with the shared status_v2 rule (running carries a 12-hour recency cutoff).
+     */
+    states?: readonly string[];
+    /** Restrict to sessions run by any of these agents (athena_metadata.agent). */
+    agentIds?: readonly string[];
+    /**
+     * Include branched sub-sessions and orchestration children, which every list
+     * hides by default because they belong under their parent thread.
+     */
+    includeSubSessions?: boolean;
+}
+export interface ConversationListPage {
+    /** Rows in contract order (updatedAt desc). */
+    items: ConversationSummary[];
+    /** Whether another `offset + limit` scan would return more rows. */
+    hasMore: boolean;
+    /** Total matching rows, or null when the transport does not count. */
+    totalCount: number | null;
+}
+export interface ConversationListFetchParams {
+    limit: number;
+    offset: number;
+    filter: ConversationListFilter;
+    signal?: AbortSignal;
+}
+/**
+ * One page fetch against some transport (GraphQL `listConversations`, the
+ * REST thread list, …). Must reject on filter fields it cannot express.
+ */
+export type ConversationListFetcher = (params: ConversationListFetchParams) => Promise<ConversationListPage>;
+/** Root of every conversation-list query key (all surfaces, all filters). */
+export declare const CONVERSATION_LIST_QUERY_KEY_ROOT = "athena-conversation-list";
+/**
+ * Scope used by `useConversationList` when the caller passes no `scopeKey`.
+ * Exported so cache seeders (e.g. Olympus's spacesBootstrap adoption) can
+ * address the exact keys default-scoped hooks read from.
+ */
+export declare const CONVERSATION_LIST_DEFAULT_SCOPE_KEY = "default";
+/**
+ * Normalize a filter to its semantic content: unset/empty fields are dropped
+ * (so `{}` and `{ appId: undefined }` are the same filter) and array order is
+ * canonicalized. Fetchers receive the normalized form, so what a cache entry
+ * claims to hold is exactly what was fetched.
+ */
+export declare function normalizeConversationListFilter(filter: ConversationListFilter): ConversationListFilter;
+/**
+ * THE running rule for every conversation-list surface (sidebar pane, recent
+ * dropdown, workspace section, pushed index rows): the canonical status_v2 run
+ * status when the transport reports one, else the legacy `state`. A session
+ * paused on a human gate (`needs_input`) is not running.
+ */
+export declare function isConversationRunning(summary: {
+    runStatus?: string | null;
+    state?: string | null;
+}): boolean;
+/**
+ * THE attention rule for every session-list surface: the server-derived
+ * `attention` when the transport reports one it knows, else a client fallback
+ * from the status planes so an older server still yields the two states a
+ * list cannot do without — a human gate reads as `needs_you`, a live run as
+ * `working`, a failed run as `error`. `null` when nothing applies.
+ */
+export declare function deriveConversationAttention(summary: Pick<ConversationSummary, 'attention' | 'runStatus' | 'sessionStatus' | 'state'>): ConversationAttention | null;
+/**
+ * Stable cache identity for a filter: the normalized fields serialized in
+ * sorted key order, so semantically equal filters share one cache entry.
+ */
+export declare function conversationListFilterKey(filter: ConversationListFilter): string;
+/**
+ * Query keys for the two-tier pager. `scopeKey` isolates caches beyond the
+ * filter — surfaces MUST include everything that changes whose list this is
+ * (principal/user id, backend base URL) so a credential swap can never read
+ * another identity's rows out of the cache.
+ *
+ * `pageSize` is part of the key because it is baked into every cached page's
+ * offset boundaries: two hooks sharing a scope and filter but paging by
+ * different sizes would otherwise reuse each other's incompatible boundaries
+ * and skip or duplicate rows.
+ */
+export declare const conversationListQueryKeys: {
+    root: readonly ["athena-conversation-list"];
+    scope: (scopeKey: string) => readonly ["athena-conversation-list", string];
+    firstPage: (scopeKey: string, filterKey: string, pageSize: number) => readonly ["athena-conversation-list", string, string, number, 'first-page'];
+    history: (scopeKey: string, filterKey: string, pageSize: number) => readonly ["athena-conversation-list", string, string, number, 'history'];
+};
+/**
+ * Flatten pages into one newest-first list, deduplicating by `threadId`.
+ * The live first page wins over retained history copies of the same thread.
+ */
+export declare function mergeConversationPages(pages: readonly ConversationListPage[]): ConversationSummary[];
+/**
+ * Prepend a conversation to a page unless its thread is already present
+ * (optimistic "new thread appears at the top" write). Identity-preserving
+ * no-op when present, so equal writes never notify subscribers.
+ */
+export declare function prependConversationToPage(page: ConversationListPage, item: ConversationSummary): ConversationListPage;
+/** Remove a thread's row from a page; identity-preserving when absent. */
+export declare function removeConversationFromPage(page: ConversationListPage, threadId: string): ConversationListPage;
+/**
+ * Patch every row matching `match`; identity-preserving when nothing matches
+ * so cache writes cannot cause spurious re-renders.
+ */
+export declare function patchConversationsInPage(page: ConversationListPage, match: (item: ConversationSummary) => boolean, patch: Partial<ConversationSummary>): ConversationListPage;
+interface ConversationListCacheScope {
+    /** Restrict to one scope; omitted = every conversation-list cache. */
+    scopeKey?: string;
+}
+/**
+ * Invalidate conversation-list caches (all filters, first page + history).
+ * This is the hook for push signals — the conversation-index statewire, a
+ * finished run, an archive/restore — anything that changed the server list.
+ */
+export declare function invalidateConversationListCaches(queryClient: QueryClient, options?: ConversationListCacheScope): Promise<void>;
+/** Cancel in-flight list fetches so an optimistic write cannot be overwritten. */
+export declare function cancelConversationListCaches(queryClient: QueryClient, options?: ConversationListCacheScope): Promise<void>;
+/**
+ * Patch matching rows in every cached conversation list (first pages, history
+ * pages, searches) so per-row state (read receipts, titles) flips in the same
+ * frame as the interaction instead of after the next refetch.
+ */
+export declare function patchConversationListCaches(queryClient: QueryClient, options: ConversationListCacheScope & {
+    match: (item: ConversationSummary) => boolean;
+    patch: Partial<ConversationSummary>;
+}): void;
+/** Remove a thread's row from every cached conversation list in scope. */
+export declare function removeConversationFromListCaches(queryClient: QueryClient, options: ConversationListCacheScope & {
+    threadId: string;
+}): void;
+/**
+ * Project one replicated conversation-index row onto the shared summary shape.
+ * Fields the index never carries (`createdAt`) and viewer-specific fields a
+ * lifecycle publish cannot know (`is_unread: null`) keep the row's previous
+ * value. Canonical status is taken from the entry when the publishing pod
+ * reports it; a snapshot from a pod that predates the fields falls back to the
+ * legacy `state` (null status) rather than keeping a stale run status.
+ *
+ * Attention fields (`attention`, `next_action`, `attention_source`,
+ * `is_favorited`) are taken from the entry when the publishing pod reports
+ * them, so a live push flips a row to "needs you" the way it renames it; a
+ * pod that predates them leaves the row's previous values. Pull-request state,
+ * the last wake and `createdByMe` are never pushed and always keep the fetched
+ * value.
+ */
+export declare function summaryFromConversationIndexEntry(entry: ConversationIndexEntry, previous?: ConversationSummary): ConversationSummary;
+/**
+ * Fold the user's replicated conversation index (the newest-page window the
+ * per-user statewire pushes) into a cached live first page, so a thread
+ * created, renamed, finished, or read anywhere updates every list surface in
+ * the same frame — without refetching the page.
+ *
+ * - Rows in the window are upserted (new threads appear, existing rows take
+ *   the pushed fields, see {@link summaryFromConversationIndexEntry}).
+ * - Rows NOT in the window but at least as new as the window's oldest row
+ *   should have been in it, so they left the list (archived, hidden, shared
+ *   away) and are dropped. Older rows are beyond the window and are kept.
+ * - When the index reports no further rows (`indexHasMore === false`) the
+ *   window IS the whole list, so every row outside it is dropped.
+ *
+ * Newest-first ordering is restored and the page identity is preserved when
+ * nothing changed, so an equal push never notifies subscribers.
+ */
+export declare function mergeConversationIndexIntoPage(page: ConversationListPage, entries: readonly ConversationIndexEntry[], options: {
+    indexHasMore: boolean;
+}): ConversationListPage;
+export {};

package/dist/agent-runtime/src/deep-agent-transport-recipe.cjs

@@ -20,7 +20,8 @@ function createDeepAgentAttachTransport({
   onAuthResolve,
   onAttachTiming,
   retryGate = statewireAttachObserver.attachRetryGate,
-  messageWindow: messageWindow$1
+  messageWindow: messageWindow$1,
+  laneHistory = false
 }) {
   const url = deepAgentThreadUrl({ baseUrl, threadId });
   const useSse = statewireTransport.resolveStatewireTransportKind({ sse }) === "sse";
@@ -37,7 +38,7 @@ function createDeepAgentAttachTransport({
       await retryGate.waitForDial(url);
       onAuthResolve == null ? void 0 : onAuthResolve(ctx);
       return messageWindow.withDeclaredMessageWindow(
-        protocol.withDeclaredProtocolVersion(await headers(ctx)),
+        protocol.withDeclaredProtocolVersion(await headers(ctx), { laneHistory }),
         messageWindow$1
       );
     },

package/dist/agent-runtime/src/deep-agent-transport-recipe.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"deep-agent-transport-recipe.cjs","sources":["../../../../agent-runtime/src/deep-agent-transport-recipe.ts"],"sourcesContent":["import type { ResourceElement } from \"@assistant-ui/tap\";\nimport type { Statewire, StatewireClient } from \"statewire\";\nimport {\n  type DeepAgentMessageWindowDeclaration,\n  withDeclaredMessageWindow,\n} from \"./message-window\";\nimport { withDeclaredProtocolVersion } from \"./protocol\";\nimport {\n  attachRetryGate,\n  type AttachRetryGate,\n  createAttachInstrumentation,\n  type DeepAgentAttachTimingEvent,\n  type DeepAgentWakeRefusal,\n  parseRetryAfterHeaderMs,\n} from \"./statewire-attach-observer\";\nimport {\n  resolveStatewireTransportKind,\n  statewireTransport,\n  type StatewireTransportOptions,\n} from \"./statewire-transport\";\n\n/** Auth-header resolver for the transport; `staleAuth` is true right after an\n * auth rejection, so resolvers that can force-renew should honor it. */\nexport type DeepAgentHeadersResolver = (ctx: {\n  staleAuth: boolean;\n}) => Record<string, string> | Promise<Record<string, string>>;\n\n/** The statewire attach URL for a thread: the host's `…/v2/threads` mount plus the id. */\nexport function deepAgentThreadUrl({\n  baseUrl,\n  threadId,\n}: {\n  baseUrl: string;\n  threadId: string;\n}): string {\n  return `${baseUrl.replace(/\\/+$/, \"\")}/${encodeURIComponent(threadId)}`;\n}\n\nexport interface DeepAgentAttachTransportOptions {\n  /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */\n  baseUrl: string;\n  threadId: string;\n  headers: DeepAgentHeadersResolver;\n  /** SSE when true, WebSocket otherwise (`resolveStatewireTransportKind`). */\n  sse?: boolean;\n  /** A never-started chat: the transport makes no network calls until the first command send. */\n  isNew?: boolean;\n  /** Host session store (mobile); browser hosts mount `storage.session` on the thread instead. */\n  sessionStore?: StatewireClient.SessionStorage | undefined;\n  /** Observes every headers resolve (the diagnostics recorder's stale-auth seam). */\n  onAuthResolve?: ((ctx: { staleAuth: boolean }) => void) | undefined;\n  /** Attach timing + retry hints (see `statewire-attach-observer`). */\n  onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;\n  /** Dial floors from server retry hints; the process-wide gate by default. */\n  retryGate?: AttachRetryGate;\n  /**\n   * The head window declared on the attach (`x-athena-deep-agent-window`,\n   * see `message-window.ts`): the hello of a client the host does not\n   * remember carries the newest `size` messages. Part of the recipe so a\n   * pooled dial asks for the same shape as the thread's own attach — a pooled\n   * hello then seeds the very state the attach will reconcile. Omitted, the\n   * shared default is declared.\n   */\n  messageWindow?: DeepAgentMessageWindowDeclaration | undefined;\n}\n\n/**\n * The ONE recipe for a deep-agent thread transport — shared by the mounted\n * thread (`useDeepAgentThread`) and the prewarm pool, so a pre-dialed\n * connection is byte-for-byte the connection the thread would have opened\n * itself: same URL, same auth + wire-contract headers, same session lane, same\n * instrumentation.\n *\n * Every attach declares this build's wire-contract version alongside the\n * host's auth headers (first WS frame / SSE request headers) — the server\n * half of version negotiation reads it in `authorize`. The headers resolve\n * also waits out any server `Retry-After` floor for the thread: both statewire\n * attach paths resolve headers before they dial, so this is the seam where a\n * hint can hold the next dial without touching the library's backoff.\n */\nexport function createDeepAgentAttachTransport<TState = unknown>({\n  baseUrl,\n  threadId,\n  headers,\n  sse = false,\n  isNew = false,\n  sessionStore,\n  onAuthResolve,\n  onAttachTiming,\n  retryGate = attachRetryGate,\n  messageWindow,\n}: DeepAgentAttachTransportOptions): ResourceElement<\n  Statewire<TState | undefined>\n> {\n  const url = deepAgentThreadUrl({ baseUrl, threadId });\n  // The instrumentation wraps the transport actually built: SSE needs the\n  // fetch wrapper that reads a refused attach's `Retry-After`.\n  const useSse = resolveStatewireTransportKind({ sse }) === \"sse\";\n  const instrumentation = createAttachInstrumentation({\n    url,\n    sse: useSse,\n    onEvent: onAttachTiming,\n    retryGate,\n  });\n  const options: StatewireTransportOptions = {\n    url,\n    ...(isNew && { isNew: true }),\n    headers: async (ctx: { staleAuth: boolean }) => {\n      await retryGate.waitForDial(url);\n      onAuthResolve?.(ctx);\n      return withDeclaredMessageWindow(\n        withDeclaredProtocolVersion(await headers(ctx)),\n        messageWindow,\n      );\n    },\n    ...(sessionStore && { sessionStore }),\n    // Structural types: this package compiles without the DOM lib, while\n    // statewire's option types name the browser `WebSocket`/`fetch`.\n    ...(instrumentation.webSocket && {\n      webSocket:\n        instrumentation.webSocket as unknown as StatewireTransportOptions[\"webSocket\"],\n    }),\n    ...(instrumentation.fetch && {\n      fetch:\n        instrumentation.fetch as unknown as StatewireTransportOptions[\"fetch\"],\n    }),\n  };\n  return statewireTransport<TState>(options, { sse: useSse });\n}\n\n/** What `POST …/prewarm` answered. */\nexport interface DeepAgentWakeResult {\n  status: number;\n  /** The host activated the thread and its history is resident. */\n  warm: boolean;\n  /**\n   * `'warm'` when the history was already memoized, `'fresh_load'` when this\n   * call loaded it; `null` when the host did not say (a refusal, or a host\n   * without the route).\n   */\n  history: \"fresh_load\" | \"warm\" | null;\n  /**\n   * The dial floor recorded for the thread off a 503/429 `Retry-After` — the\n   * header's value, except a 503 `\"worker\"` refusal, capped at\n   * {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.\n   */\n  retryAfterMs: number | null;\n  /** Who refused a 503/429 (see {@link DeepAgentWakeRefusal}); `null` for any other answer. */\n  refusal: DeepAgentWakeRefusal;\n  durationMs: number;\n}\n\n/**\n * Dial floor for a 503 the pinned worker produced about one instance's\n * lifecycle. Pinned answers every retriable 503 with a blanket\n * `Retry-After: 1`, but what those name — an instance record mid-teardown\n * (\"instance closing; retry\": fence release + placement release, ≈100 ms), a\n * full activation queue — clears far sooner than that, and the thread's own\n * attach is the request that carries the next activation. Holding it a full\n * second traded a ≈100 ms gap for a ≈1 s stall on every refused wake. A 429\n * is rate limiting and keeps its hint whatever the body says.\n */\nexport const WAKE_WORKER_REFUSAL_FLOOR_MS = 250;\n\n/**\n * The pinboard's own placement-refusal vocabulary — the `error` strings of\n * `@assistant-ui/pinboard` (`src/refusals.ts` plus the two inline refusals in\n * `src/server.ts`). Mirrors `PINBOARD_PLACEMENT_REFUSAL_ERRORS` in\n * `iris/scaler/src/v2AccessLog.ts`, whose test pins it to the installed\n * library; keep the two lists identical. A body with any other `error`\n * string is `\"unknown\"`, never `\"placement\"`.\n */\nexport const PINBOARD_PLACEMENT_REFUSAL_ERRORS: ReadonlySet<string> = new Set([\n  \"no live backends for namespace\",\n  \"registry cold start, retry\",\n  \"not the serving fleet\",\n  \"no live workers for hostname\",\n  \"hostname binding displaced, retry\",\n  \"hostname bindings inconsistent, retry\",\n  \"takeover in progress, retry\",\n  \"placement held by another hostname\",\n  \"worker inflight cap exceeded, retry\",\n  \"worker refused activation, retry\",\n]);\n\n/**\n * Pinned's instance-lifecycle refusals (`pinned/hosting/directory.py`,\n * `pinned/hosting/_records.py`): each names one instance on the worker the\n * thread is already placed on and clears in the time a teardown or an\n * activation slot takes. Anything else the worker answers 503 with — \"Thread\n * history load failed\", \"The regional conversation store is temporarily\n * unavailable\", a lease that expired — is not about one instance and keeps\n * the full hint.\n */\nexport const PINNED_TRANSIENT_WORKER_REFUSALS: ReadonlySet<string> = new Set([\n  \"instance closing; retry\",\n  \"instance aborted\",\n  \"activation queue full; retry\",\n  \"host draining; retry\",\n  \"instance capacity reached; retry\",\n  \"instance past its wind-down deadline; retry\",\n]);\n\n/**\n * Classify a 503/429 body (see {@link DeepAgentWakeRefusal}): a known pinboard\n * `error` is `\"placement\"`, a known pinned `detail` is `\"worker\"`, everything\n * else — including unfamiliar strings in either field — is `\"unknown\"`.\n */\nexport function classifyWakeRefusal(\n  body: unknown,\n): Exclude<DeepAgentWakeRefusal, null> {\n  if (typeof body === \"object\" && body !== null) {\n    const record = body as Record<string, unknown>;\n    if (\n      typeof record.error === \"string\" &&\n      PINBOARD_PLACEMENT_REFUSAL_ERRORS.has(record.error)\n    ) {\n      return \"placement\";\n    }\n    if (\n      typeof record.detail === \"string\" &&\n      PINNED_TRANSIENT_WORKER_REFUSALS.has(record.detail)\n    ) {\n      return \"worker\";\n    }\n  }\n  return \"unknown\";\n}\n\n/** Structural `fetch` for the wake call — this package compiles without the DOM lib. */\nexport type DeepAgentWakeFetch = (\n  input: string,\n  init?: {\n    method?: string;\n    headers?: Record<string, string>;\n    keepalive?: boolean;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  headers: { get(name: string): string | null };\n  json(): Promise<unknown>;\n}>;\n\nexport interface DeepAgentWakeOptions {\n  /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */\n  baseUrl: string;\n  threadId: string;\n  headers: DeepAgentHeadersResolver;\n  fetch?: DeepAgentWakeFetch | undefined;\n  /** Dial floors from server retry hints; the process-wide gate by default. */\n  retryGate?: AttachRetryGate;\n  onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;\n  now?: () => number;\n}\n\n/**\n * Wake a thread's server instance ahead of its attach. `POST …/prewarm` runs\n * the host's `authorize` and history load — the fence adopt, graph compile and\n * checkpoint read that make a cold attach's hello take ≈1 s — and answers with\n * no thread content, only whether the history was already resident. Fire it\n * on hover intent, before a pooled attach or the click's own dial, so the\n * activation overlaps the handshake and the attach that follows finds the\n * instance warm.\n *\n * Fire-and-forget by contract: every failure resolves `null`, and a host\n * without the route (404) is reported like any other non-OK answer. A 503/429\n * `Retry-After` is recorded as a dial floor for the thread, so the attach that\n * follows waits it out instead of bouncing — in full, except a 503 that names\n * one of pinned's instance-lifecycle refusals (one instance mid-teardown on\n * the worker the thread already has; see {@link DeepAgentWakeRefusal}), whose\n * floor is capped at {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.\n */\nexport async function wakeDeepAgentThread({\n  baseUrl,\n  threadId,\n  headers,\n  fetch: fetchOverride,\n  retryGate = attachRetryGate,\n  onAttachTiming,\n  now = () => Date.now(),\n}: DeepAgentWakeOptions): Promise<DeepAgentWakeResult | null> {\n  const fetchImpl =\n    fetchOverride ?? (globalThis as { fetch?: DeepAgentWakeFetch }).fetch;\n  if (typeof fetchImpl !== \"function\") return null;\n  const threadUrl = deepAgentThreadUrl({ baseUrl, threadId });\n  const emit = (event: DeepAgentAttachTimingEvent): void => {\n    try {\n      onAttachTiming?.(event);\n    } catch {\n      // Observers are best-effort.\n    }\n  };\n  const startedAt = now();\n  try {\n    const resolved = withDeclaredProtocolVersion(\n      await headers({ staleAuth: false }),\n    );\n    const response = await fetchImpl(`${threadUrl}/prewarm`, {\n      method: \"POST\",\n      headers: resolved,\n      keepalive: true,\n    });\n    const durationMs = now() - startedAt;\n    let retryAfterMs: number | null = null;\n    let refusal: DeepAgentWakeRefusal = null;\n    if (response.status === 503 || response.status === 429) {\n      let body: unknown = null;\n      try {\n        body = await response.json();\n      } catch {\n        // A refusal without a readable body is classified by nothing.\n      }\n      refusal = classifyWakeRefusal(body);\n      const hinted = parseRetryAfterHeaderMs(\n        response.headers.get(\"retry-after\"),\n        now,\n      );\n      if (hinted !== null) {\n        retryAfterMs =\n          response.status === 503 && refusal === \"worker\"\n            ? Math.min(hinted, WAKE_WORKER_REFUSAL_FLOOR_MS)\n            : hinted;\n        if (retryAfterMs > 0) {\n          retryGate.noteRetryAfter(threadUrl, retryAfterMs);\n          emit({\n            type: \"retry-after\",\n            url: threadUrl,\n            delayMs: retryAfterMs,\n            source: \"http-header\",\n          });\n        }\n      }\n    }\n    let warm = false;\n    let history: DeepAgentWakeResult[\"history\"] = null;\n    if (response.ok) {\n      try {\n        const body = (await response.json()) as {\n          warm?: unknown;\n          history?: unknown;\n        } | null;\n        warm = body?.warm === true;\n        history =\n          body?.history === \"warm\" || body?.history === \"fresh_load\"\n            ? body.history\n            : null;\n      } catch {\n        // A 200 without a JSON body still means the instance is up.\n        warm = true;\n      }\n    }\n    emit({\n      type: \"wake\",\n      url: threadUrl,\n      status: response.status,\n      durationMs,\n      history,\n      refusal,\n    });\n    return {\n      status: response.status,\n      warm,\n      history,\n      retryAfterMs,\n      refusal,\n      durationMs,\n    };\n  } catch {\n    return null;\n  }\n}\n"],"names":["attachRetryGate","messageWindow","resolveStatewireTransportKind","createAttachInstrumentation","withDeclaredMessageWindow","withDeclaredProtocolVersion","statewireTransport"],"mappings":";;;;;;AA4BO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AACF,GAGW;AACT,SAAO,GAAG,QAAQ,QAAQ,QAAQ,EAAE,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AACvE;AA4CO,SAAS,+BAAiD;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAYA,wBAAAA;AAAAA,EAAA,eACZC;AACF,GAEE;AACA,QAAM,MAAM,mBAAmB,EAAE,SAAS,UAAU;AAGpD,QAAM,SAASC,mBAAAA,8BAA8B,EAAE,IAAA,CAAK,MAAM;AAC1D,QAAM,kBAAkBC,wBAAAA,4BAA4B;AAAA,IAClD;AAAA,IACA,KAAK;AAAA,IACL,SAAS;AAAA,IACT;AAAA,EAAA,CACD;AACD,QAAM,UAAqC;AAAA,IACzC;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,KAAA;AAAA,IACtB,SAAS,OAAO,QAAgC;AAC9C,YAAM,UAAU,YAAY,GAAG;AAC/B,qDAAgB;AAChB,aAAOC,cAAAA;AAAAA,QACLC,qCAA4B,MAAM,QAAQ,GAAG,CAAC;AAAA,QAC9CJ;AAAAA,MAAA;AAAA,IAEJ;AAAA,IACA,GAAI,gBAAgB,EAAE,aAAA;AAAA;AAAA;AAAA,IAGtB,GAAI,gBAAgB,aAAa;AAAA,MAC/B,WACE,gBAAgB;AAAA,IAAA;AAAA,IAEpB,GAAI,gBAAgB,SAAS;AAAA,MAC3B,OACE,gBAAgB;AAAA,IAAA;AAAA,EACpB;AAEF,SAAOK,mBAAAA,mBAA2B,SAAS,EAAE,KAAK,QAAQ;AAC5D;;;"}
+{"version":3,"file":"deep-agent-transport-recipe.cjs","sources":["../../../../agent-runtime/src/deep-agent-transport-recipe.ts"],"sourcesContent":["import type { ResourceElement } from \"@assistant-ui/tap\";\nimport type { Statewire, StatewireClient } from \"statewire\";\nimport {\n  type DeepAgentMessageWindowDeclaration,\n  withDeclaredMessageWindow,\n} from \"./message-window\";\nimport { withDeclaredProtocolVersion } from \"./protocol\";\nimport {\n  attachRetryGate,\n  type AttachRetryGate,\n  createAttachInstrumentation,\n  type DeepAgentAttachTimingEvent,\n  type DeepAgentWakeRefusal,\n  parseRetryAfterHeaderMs,\n} from \"./statewire-attach-observer\";\nimport {\n  resolveStatewireTransportKind,\n  statewireTransport,\n  type StatewireTransportOptions,\n} from \"./statewire-transport\";\n\n/** Auth-header resolver for the transport; `staleAuth` is true right after an\n * auth rejection, so resolvers that can force-renew should honor it. */\nexport type DeepAgentHeadersResolver = (ctx: {\n  staleAuth: boolean;\n}) => Record<string, string> | Promise<Record<string, string>>;\n\n/** The statewire attach URL for a thread: the host's `…/v2/threads` mount plus the id. */\nexport function deepAgentThreadUrl({\n  baseUrl,\n  threadId,\n}: {\n  baseUrl: string;\n  threadId: string;\n}): string {\n  return `${baseUrl.replace(/\\/+$/, \"\")}/${encodeURIComponent(threadId)}`;\n}\n\nexport interface DeepAgentAttachTransportOptions {\n  /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */\n  baseUrl: string;\n  threadId: string;\n  headers: DeepAgentHeadersResolver;\n  /** SSE when true, WebSocket otherwise (`resolveStatewireTransportKind`). */\n  sse?: boolean;\n  /** A never-started chat: the transport makes no network calls until the first command send. */\n  isNew?: boolean;\n  /** Host session store (mobile); browser hosts mount `storage.session` on the thread instead. */\n  sessionStore?: StatewireClient.SessionStorage | undefined;\n  /** Observes every headers resolve (the diagnostics recorder's stale-auth seam). */\n  onAuthResolve?: ((ctx: { staleAuth: boolean }) => void) | undefined;\n  /** Attach timing + retry hints (see `statewire-attach-observer`). */\n  onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;\n  /** Dial floors from server retry hints; the process-wide gate by default. */\n  retryGate?: AttachRetryGate;\n  /**\n   * The head window declared on the attach (`x-athena-deep-agent-window`,\n   * see `message-window.ts`): the hello of a client the host does not\n   * remember carries the newest `size` messages. Part of the recipe so a\n   * pooled dial asks for the same shape as the thread's own attach — a pooled\n   * hello then seeds the very state the attach will reconcile. Omitted, the\n   * shared default is declared.\n   */\n  messageWindow?: DeepAgentMessageWindowDeclaration | undefined;\n  /**\n   * The surface pages cut lanes (see `DeepAgentProtocolDeclaration`), so its\n   * attach declares the lane-cut contract version. Part of the recipe so a\n   * pooled dial declares what the thread's own attach would; omitted, the\n   * default version is declared.\n   */\n  laneHistory?: boolean | undefined;\n}\n\n/**\n * The ONE recipe for a deep-agent thread transport — shared by the mounted\n * thread (`useDeepAgentThread`) and the prewarm pool, so a pre-dialed\n * connection is byte-for-byte the connection the thread would have opened\n * itself: same URL, same auth + wire-contract headers, same session lane, same\n * instrumentation.\n *\n * Every attach declares the surface's wire-contract version alongside the\n * host's auth headers (first WS frame / SSE request headers) — the server\n * half of version negotiation reads it in `authorize`. The headers resolve\n * also waits out any server `Retry-After` floor for the thread: both statewire\n * attach paths resolve headers before they dial, so this is the seam where a\n * hint can hold the next dial without touching the library's backoff.\n */\nexport function createDeepAgentAttachTransport<TState = unknown>({\n  baseUrl,\n  threadId,\n  headers,\n  sse = false,\n  isNew = false,\n  sessionStore,\n  onAuthResolve,\n  onAttachTiming,\n  retryGate = attachRetryGate,\n  messageWindow,\n  laneHistory = false,\n}: DeepAgentAttachTransportOptions): ResourceElement<\n  Statewire<TState | undefined>\n> {\n  const url = deepAgentThreadUrl({ baseUrl, threadId });\n  // The instrumentation wraps the transport actually built: SSE needs the\n  // fetch wrapper that reads a refused attach's `Retry-After`.\n  const useSse = resolveStatewireTransportKind({ sse }) === \"sse\";\n  const instrumentation = createAttachInstrumentation({\n    url,\n    sse: useSse,\n    onEvent: onAttachTiming,\n    retryGate,\n  });\n  const options: StatewireTransportOptions = {\n    url,\n    ...(isNew && { isNew: true }),\n    headers: async (ctx: { staleAuth: boolean }) => {\n      await retryGate.waitForDial(url);\n      onAuthResolve?.(ctx);\n      return withDeclaredMessageWindow(\n        withDeclaredProtocolVersion(await headers(ctx), { laneHistory }),\n        messageWindow,\n      );\n    },\n    ...(sessionStore && { sessionStore }),\n    // Structural types: this package compiles without the DOM lib, while\n    // statewire's option types name the browser `WebSocket`/`fetch`.\n    ...(instrumentation.webSocket && {\n      webSocket:\n        instrumentation.webSocket as unknown as StatewireTransportOptions[\"webSocket\"],\n    }),\n    ...(instrumentation.fetch && {\n      fetch:\n        instrumentation.fetch as unknown as StatewireTransportOptions[\"fetch\"],\n    }),\n  };\n  return statewireTransport<TState>(options, { sse: useSse });\n}\n\n/** What `POST …/prewarm` answered. */\nexport interface DeepAgentWakeResult {\n  status: number;\n  /** The host activated the thread and its history is resident. */\n  warm: boolean;\n  /**\n   * `'warm'` when the history was already memoized, `'fresh_load'` when this\n   * call loaded it; `null` when the host did not say (a refusal, or a host\n   * without the route).\n   */\n  history: \"fresh_load\" | \"warm\" | null;\n  /**\n   * The dial floor recorded for the thread off a 503/429 `Retry-After` — the\n   * header's value, except a 503 `\"worker\"` refusal, capped at\n   * {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.\n   */\n  retryAfterMs: number | null;\n  /** Who refused a 503/429 (see {@link DeepAgentWakeRefusal}); `null` for any other answer. */\n  refusal: DeepAgentWakeRefusal;\n  durationMs: number;\n}\n\n/**\n * Dial floor for a 503 the pinned worker produced about one instance's\n * lifecycle. Pinned answers every retriable 503 with a blanket\n * `Retry-After: 1`, but what those name — an instance record mid-teardown\n * (\"instance closing; retry\": fence release + placement release, ≈100 ms), a\n * full activation queue — clears far sooner than that, and the thread's own\n * attach is the request that carries the next activation. Holding it a full\n * second traded a ≈100 ms gap for a ≈1 s stall on every refused wake. A 429\n * is rate limiting and keeps its hint whatever the body says.\n */\nexport const WAKE_WORKER_REFUSAL_FLOOR_MS = 250;\n\n/**\n * The pinboard's own placement-refusal vocabulary — the `error` strings of\n * `@assistant-ui/pinboard` (`src/refusals.ts` plus the two inline refusals in\n * `src/server.ts`). Mirrors `PINBOARD_PLACEMENT_REFUSAL_ERRORS` in\n * `iris/scaler/src/v2AccessLog.ts`, whose test pins it to the installed\n * library; keep the two lists identical. A body with any other `error`\n * string is `\"unknown\"`, never `\"placement\"`.\n */\nexport const PINBOARD_PLACEMENT_REFUSAL_ERRORS: ReadonlySet<string> = new Set([\n  \"no live backends for namespace\",\n  \"registry cold start, retry\",\n  \"not the serving fleet\",\n  \"no live workers for hostname\",\n  \"hostname binding displaced, retry\",\n  \"hostname bindings inconsistent, retry\",\n  \"takeover in progress, retry\",\n  \"placement held by another hostname\",\n  \"worker inflight cap exceeded, retry\",\n  \"worker refused activation, retry\",\n]);\n\n/**\n * Pinned's instance-lifecycle refusals (`pinned/hosting/directory.py`,\n * `pinned/hosting/_records.py`): each names one instance on the worker the\n * thread is already placed on and clears in the time a teardown or an\n * activation slot takes. Anything else the worker answers 503 with — \"Thread\n * history load failed\", \"The regional conversation store is temporarily\n * unavailable\", a lease that expired — is not about one instance and keeps\n * the full hint.\n */\nexport const PINNED_TRANSIENT_WORKER_REFUSALS: ReadonlySet<string> = new Set([\n  \"instance closing; retry\",\n  \"instance aborted\",\n  \"activation queue full; retry\",\n  \"host draining; retry\",\n  \"instance capacity reached; retry\",\n  \"instance past its wind-down deadline; retry\",\n]);\n\n/**\n * Classify a 503/429 body (see {@link DeepAgentWakeRefusal}): a known pinboard\n * `error` is `\"placement\"`, a known pinned `detail` is `\"worker\"`, everything\n * else — including unfamiliar strings in either field — is `\"unknown\"`.\n */\nexport function classifyWakeRefusal(\n  body: unknown,\n): Exclude<DeepAgentWakeRefusal, null> {\n  if (typeof body === \"object\" && body !== null) {\n    const record = body as Record<string, unknown>;\n    if (\n      typeof record.error === \"string\" &&\n      PINBOARD_PLACEMENT_REFUSAL_ERRORS.has(record.error)\n    ) {\n      return \"placement\";\n    }\n    if (\n      typeof record.detail === \"string\" &&\n      PINNED_TRANSIENT_WORKER_REFUSALS.has(record.detail)\n    ) {\n      return \"worker\";\n    }\n  }\n  return \"unknown\";\n}\n\n/** Structural `fetch` for the wake call — this package compiles without the DOM lib. */\nexport type DeepAgentWakeFetch = (\n  input: string,\n  init?: {\n    method?: string;\n    headers?: Record<string, string>;\n    keepalive?: boolean;\n  },\n) => Promise<{\n  ok: boolean;\n  status: number;\n  headers: { get(name: string): string | null };\n  json(): Promise<unknown>;\n}>;\n\nexport interface DeepAgentWakeOptions {\n  /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */\n  baseUrl: string;\n  threadId: string;\n  headers: DeepAgentHeadersResolver;\n  fetch?: DeepAgentWakeFetch | undefined;\n  /** Dial floors from server retry hints; the process-wide gate by default. */\n  retryGate?: AttachRetryGate;\n  onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;\n  now?: () => number;\n  /** The surface pages cut lanes: declare what its attach declares (see `DeepAgentAttachTransportOptions`). */\n  laneHistory?: boolean | undefined;\n}\n\n/**\n * Wake a thread's server instance ahead of its attach. `POST …/prewarm` runs\n * the host's `authorize` and history load — the fence adopt, graph compile and\n * checkpoint read that make a cold attach's hello take ≈1 s — and answers with\n * no thread content, only whether the history was already resident. Fire it\n * on hover intent, before a pooled attach or the click's own dial, so the\n * activation overlaps the handshake and the attach that follows finds the\n * instance warm.\n *\n * Fire-and-forget by contract: every failure resolves `null`, and a host\n * without the route (404) is reported like any other non-OK answer. A 503/429\n * `Retry-After` is recorded as a dial floor for the thread, so the attach that\n * follows waits it out instead of bouncing — in full, except a 503 that names\n * one of pinned's instance-lifecycle refusals (one instance mid-teardown on\n * the worker the thread already has; see {@link DeepAgentWakeRefusal}), whose\n * floor is capped at {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.\n */\nexport async function wakeDeepAgentThread({\n  baseUrl,\n  threadId,\n  headers,\n  fetch: fetchOverride,\n  retryGate = attachRetryGate,\n  onAttachTiming,\n  now = () => Date.now(),\n  laneHistory = false,\n}: DeepAgentWakeOptions): Promise<DeepAgentWakeResult | null> {\n  const fetchImpl =\n    fetchOverride ?? (globalThis as { fetch?: DeepAgentWakeFetch }).fetch;\n  if (typeof fetchImpl !== \"function\") return null;\n  const threadUrl = deepAgentThreadUrl({ baseUrl, threadId });\n  const emit = (event: DeepAgentAttachTimingEvent): void => {\n    try {\n      onAttachTiming?.(event);\n    } catch {\n      // Observers are best-effort.\n    }\n  };\n  const startedAt = now();\n  try {\n    const resolved = withDeclaredProtocolVersion(\n      await headers({ staleAuth: false }),\n      { laneHistory },\n    );\n    const response = await fetchImpl(`${threadUrl}/prewarm`, {\n      method: \"POST\",\n      headers: resolved,\n      keepalive: true,\n    });\n    const durationMs = now() - startedAt;\n    let retryAfterMs: number | null = null;\n    let refusal: DeepAgentWakeRefusal = null;\n    if (response.status === 503 || response.status === 429) {\n      let body: unknown = null;\n      try {\n        body = await response.json();\n      } catch {\n        // A refusal without a readable body is classified by nothing.\n      }\n      refusal = classifyWakeRefusal(body);\n      const hinted = parseRetryAfterHeaderMs(\n        response.headers.get(\"retry-after\"),\n        now,\n      );\n      if (hinted !== null) {\n        retryAfterMs =\n          response.status === 503 && refusal === \"worker\"\n            ? Math.min(hinted, WAKE_WORKER_REFUSAL_FLOOR_MS)\n            : hinted;\n        if (retryAfterMs > 0) {\n          retryGate.noteRetryAfter(threadUrl, retryAfterMs);\n          emit({\n            type: \"retry-after\",\n            url: threadUrl,\n            delayMs: retryAfterMs,\n            source: \"http-header\",\n          });\n        }\n      }\n    }\n    let warm = false;\n    let history: DeepAgentWakeResult[\"history\"] = null;\n    if (response.ok) {\n      try {\n        const body = (await response.json()) as {\n          warm?: unknown;\n          history?: unknown;\n        } | null;\n        warm = body?.warm === true;\n        history =\n          body?.history === \"warm\" || body?.history === \"fresh_load\"\n            ? body.history\n            : null;\n      } catch {\n        // A 200 without a JSON body still means the instance is up.\n        warm = true;\n      }\n    }\n    emit({\n      type: \"wake\",\n      url: threadUrl,\n      status: response.status,\n      durationMs,\n      history,\n      refusal,\n    });\n    return {\n      status: response.status,\n      warm,\n      history,\n      retryAfterMs,\n      refusal,\n      durationMs,\n    };\n  } catch {\n    return null;\n  }\n}\n"],"names":["attachRetryGate","messageWindow","resolveStatewireTransportKind","createAttachInstrumentation","withDeclaredMessageWindow","withDeclaredProtocolVersion","statewireTransport"],"mappings":";;;;;;AA4BO,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AACF,GAGW;AACT,SAAO,GAAG,QAAQ,QAAQ,QAAQ,EAAE,CAAC,IAAI,mBAAmB,QAAQ,CAAC;AACvE;AAmDO,SAAS,+BAAiD;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM;AAAA,EACN,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAYA,wBAAAA;AAAAA,EAAA,eACZC;AAAAA,EACA,cAAc;AAChB,GAEE;AACA,QAAM,MAAM,mBAAmB,EAAE,SAAS,UAAU;AAGpD,QAAM,SAASC,mBAAAA,8BAA8B,EAAE,IAAA,CAAK,MAAM;AAC1D,QAAM,kBAAkBC,wBAAAA,4BAA4B;AAAA,IAClD;AAAA,IACA,KAAK;AAAA,IACL,SAAS;AAAA,IACT;AAAA,EAAA,CACD;AACD,QAAM,UAAqC;AAAA,IACzC;AAAA,IACA,GAAI,SAAS,EAAE,OAAO,KAAA;AAAA,IACtB,SAAS,OAAO,QAAgC;AAC9C,YAAM,UAAU,YAAY,GAAG;AAC/B,qDAAgB;AAChB,aAAOC,cAAAA;AAAAA,QACLC,SAAAA,4BAA4B,MAAM,QAAQ,GAAG,GAAG,EAAE,aAAa;AAAA,QAC/DJ;AAAAA,MAAA;AAAA,IAEJ;AAAA,IACA,GAAI,gBAAgB,EAAE,aAAA;AAAA;AAAA;AAAA,IAGtB,GAAI,gBAAgB,aAAa;AAAA,MAC/B,WACE,gBAAgB;AAAA,IAAA;AAAA,IAEpB,GAAI,gBAAgB,SAAS;AAAA,MAC3B,OACE,gBAAgB;AAAA,IAAA;AAAA,EACpB;AAEF,SAAOK,mBAAAA,mBAA2B,SAAS,EAAE,KAAK,QAAQ;AAC5D;;;"}

package/dist/agent-runtime/src/deep-agent-transport-recipe.d.ts

@@ -0,0 +1,166 @@
+import type { ResourceElement } from "@assistant-ui/tap";
+import type { Statewire, StatewireClient } from "statewire";
+import { type DeepAgentMessageWindowDeclaration } from "./message-window";
+import { type AttachRetryGate, type DeepAgentAttachTimingEvent, type DeepAgentWakeRefusal } from "./statewire-attach-observer";
+/** Auth-header resolver for the transport; `staleAuth` is true right after an
+ * auth rejection, so resolvers that can force-renew should honor it. */
+export type DeepAgentHeadersResolver = (ctx: {
+    staleAuth: boolean;
+}) => Record<string, string> | Promise<Record<string, string>>;
+/** The statewire attach URL for a thread: the host's `…/v2/threads` mount plus the id. */
+export declare function deepAgentThreadUrl({ baseUrl, threadId, }: {
+    baseUrl: string;
+    threadId: string;
+}): string;
+export interface DeepAgentAttachTransportOptions {
+    /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */
+    baseUrl: string;
+    threadId: string;
+    headers: DeepAgentHeadersResolver;
+    /** SSE when true, WebSocket otherwise (`resolveStatewireTransportKind`). */
+    sse?: boolean;
+    /** A never-started chat: the transport makes no network calls until the first command send. */
+    isNew?: boolean;
+    /** Host session store (mobile); browser hosts mount `storage.session` on the thread instead. */
+    sessionStore?: StatewireClient.SessionStorage | undefined;
+    /** Observes every headers resolve (the diagnostics recorder's stale-auth seam). */
+    onAuthResolve?: ((ctx: {
+        staleAuth: boolean;
+    }) => void) | undefined;
+    /** Attach timing + retry hints (see `statewire-attach-observer`). */
+    onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;
+    /** Dial floors from server retry hints; the process-wide gate by default. */
+    retryGate?: AttachRetryGate;
+    /**
+     * The head window declared on the attach (`x-athena-deep-agent-window`,
+     * see `message-window.ts`): the hello of a client the host does not
+     * remember carries the newest `size` messages. Part of the recipe so a
+     * pooled dial asks for the same shape as the thread's own attach — a pooled
+     * hello then seeds the very state the attach will reconcile. Omitted, the
+     * shared default is declared.
+     */
+    messageWindow?: DeepAgentMessageWindowDeclaration | undefined;
+    /**
+     * The surface pages cut lanes (see `DeepAgentProtocolDeclaration`), so its
+     * attach declares the lane-cut contract version. Part of the recipe so a
+     * pooled dial declares what the thread's own attach would; omitted, the
+     * default version is declared.
+     */
+    laneHistory?: boolean | undefined;
+}
+/**
+ * The ONE recipe for a deep-agent thread transport — shared by the mounted
+ * thread (`useDeepAgentThread`) and the prewarm pool, so a pre-dialed
+ * connection is byte-for-byte the connection the thread would have opened
+ * itself: same URL, same auth + wire-contract headers, same session lane, same
+ * instrumentation.
+ *
+ * Every attach declares the surface's wire-contract version alongside the
+ * host's auth headers (first WS frame / SSE request headers) — the server
+ * half of version negotiation reads it in `authorize`. The headers resolve
+ * also waits out any server `Retry-After` floor for the thread: both statewire
+ * attach paths resolve headers before they dial, so this is the seam where a
+ * hint can hold the next dial without touching the library's backoff.
+ */
+export declare function createDeepAgentAttachTransport<TState = unknown>({ baseUrl, threadId, headers, sse, isNew, sessionStore, onAuthResolve, onAttachTiming, retryGate, messageWindow, laneHistory, }: DeepAgentAttachTransportOptions): ResourceElement<Statewire<TState | undefined>>;
+/** What `POST …/prewarm` answered. */
+export interface DeepAgentWakeResult {
+    status: number;
+    /** The host activated the thread and its history is resident. */
+    warm: boolean;
+    /**
+     * `'warm'` when the history was already memoized, `'fresh_load'` when this
+     * call loaded it; `null` when the host did not say (a refusal, or a host
+     * without the route).
+     */
+    history: "fresh_load" | "warm" | null;
+    /**
+     * The dial floor recorded for the thread off a 503/429 `Retry-After` — the
+     * header's value, except a 503 `"worker"` refusal, capped at
+     * {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.
+     */
+    retryAfterMs: number | null;
+    /** Who refused a 503/429 (see {@link DeepAgentWakeRefusal}); `null` for any other answer. */
+    refusal: DeepAgentWakeRefusal;
+    durationMs: number;
+}
+/**
+ * Dial floor for a 503 the pinned worker produced about one instance's
+ * lifecycle. Pinned answers every retriable 503 with a blanket
+ * `Retry-After: 1`, but what those name — an instance record mid-teardown
+ * ("instance closing; retry": fence release + placement release, ≈100 ms), a
+ * full activation queue — clears far sooner than that, and the thread's own
+ * attach is the request that carries the next activation. Holding it a full
+ * second traded a ≈100 ms gap for a ≈1 s stall on every refused wake. A 429
+ * is rate limiting and keeps its hint whatever the body says.
+ */
+export declare const WAKE_WORKER_REFUSAL_FLOOR_MS = 250;
+/**
+ * The pinboard's own placement-refusal vocabulary — the `error` strings of
+ * `@assistant-ui/pinboard` (`src/refusals.ts` plus the two inline refusals in
+ * `src/server.ts`). Mirrors `PINBOARD_PLACEMENT_REFUSAL_ERRORS` in
+ * `iris/scaler/src/v2AccessLog.ts`, whose test pins it to the installed
+ * library; keep the two lists identical. A body with any other `error`
+ * string is `"unknown"`, never `"placement"`.
+ */
+export declare const PINBOARD_PLACEMENT_REFUSAL_ERRORS: ReadonlySet<string>;
+/**
+ * Pinned's instance-lifecycle refusals (`pinned/hosting/directory.py`,
+ * `pinned/hosting/_records.py`): each names one instance on the worker the
+ * thread is already placed on and clears in the time a teardown or an
+ * activation slot takes. Anything else the worker answers 503 with — "Thread
+ * history load failed", "The regional conversation store is temporarily
+ * unavailable", a lease that expired — is not about one instance and keeps
+ * the full hint.
+ */
+export declare const PINNED_TRANSIENT_WORKER_REFUSALS: ReadonlySet<string>;
+/**
+ * Classify a 503/429 body (see {@link DeepAgentWakeRefusal}): a known pinboard
+ * `error` is `"placement"`, a known pinned `detail` is `"worker"`, everything
+ * else — including unfamiliar strings in either field — is `"unknown"`.
+ */
+export declare function classifyWakeRefusal(body: unknown): Exclude<DeepAgentWakeRefusal, null>;
+/** Structural `fetch` for the wake call — this package compiles without the DOM lib. */
+export type DeepAgentWakeFetch = (input: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    keepalive?: boolean;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    json(): Promise<unknown>;
+}>;
+export interface DeepAgentWakeOptions {
+    /** Base URL of the deep-agent statewire host (the `…/v2/threads` mount). */
+    baseUrl: string;
+    threadId: string;
+    headers: DeepAgentHeadersResolver;
+    fetch?: DeepAgentWakeFetch | undefined;
+    /** Dial floors from server retry hints; the process-wide gate by default. */
+    retryGate?: AttachRetryGate;
+    onAttachTiming?: ((event: DeepAgentAttachTimingEvent) => void) | undefined;
+    now?: () => number;
+    /** The surface pages cut lanes: declare what its attach declares (see `DeepAgentAttachTransportOptions`). */
+    laneHistory?: boolean | undefined;
+}
+/**
+ * Wake a thread's server instance ahead of its attach. `POST …/prewarm` runs
+ * the host's `authorize` and history load — the fence adopt, graph compile and
+ * checkpoint read that make a cold attach's hello take ≈1 s — and answers with
+ * no thread content, only whether the history was already resident. Fire it
+ * on hover intent, before a pooled attach or the click's own dial, so the
+ * activation overlaps the handshake and the attach that follows finds the
+ * instance warm.
+ *
+ * Fire-and-forget by contract: every failure resolves `null`, and a host
+ * without the route (404) is reported like any other non-OK answer. A 503/429
+ * `Retry-After` is recorded as a dial floor for the thread, so the attach that
+ * follows waits it out instead of bouncing — in full, except a 503 that names
+ * one of pinned's instance-lifecycle refusals (one instance mid-teardown on
+ * the worker the thread already has; see {@link DeepAgentWakeRefusal}), whose
+ * floor is capped at {@link WAKE_WORKER_REFUSAL_FLOOR_MS}.
+ */
+export declare function wakeDeepAgentThread({ baseUrl, threadId, headers, fetch: fetchOverride, retryGate, onAttachTiming, now, laneHistory, }: DeepAgentWakeOptions): Promise<DeepAgentWakeResult | null>;

package/dist/agent-runtime/src/deep-agent-transport-recipe.js

@@ -18,7 +18,8 @@ function createDeepAgentAttachTransport({
   onAuthResolve,
   onAttachTiming,
   retryGate = attachRetryGate,
-  messageWindow
+  messageWindow,
+  laneHistory = false
 }) {
   const url = deepAgentThreadUrl({ baseUrl, threadId });
   const useSse = resolveStatewireTransportKind({ sse }) === "sse";
@@ -35,7 +36,7 @@ function createDeepAgentAttachTransport({
       await retryGate.waitForDial(url);
       onAuthResolve == null ? void 0 : onAuthResolve(ctx);
       return withDeclaredMessageWindow(
-        withDeclaredProtocolVersion(await headers(ctx)),
+        withDeclaredProtocolVersion(await headers(ctx), { laneHistory }),
         messageWindow
       );
     },