@athenaintel/react 0.42.2 → 0.48.0

package/dist/auth/credential-source.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"credential-source.cjs","sources":["../../src/auth/credential-source.ts"],"sourcesContent":["import type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\n\n/**\n * Renews a token-backed sign-in. `force: true` means the token just presented\n * was refused, or has expired: the renewer must obtain a new one rather than\n * return the one it holds. Resolves `null` when it cannot produce a token.\n */\nexport type AthenaTokenRenewer = (options: { force: boolean }) => Promise<string | null>;\n\n/** What the credential source reads, fresh, on every resolve. */\nexport interface AthenaCredentialInputs {\n  /**\n   * The host's own getter (`config.getToken`). It owns renewal for its\n   * sign-in, so it always wins; the held `token` is its fallback when it\n   * resolves nothing.\n   */\n  hostGetToken?: AthenaStatewireTokenGetter;\n  /** The token currently held: the host's, the sign-in provider's or the host bridge's. */\n  token: string | null | undefined;\n  /** How that token renews (the sign-in provider or the host bridge); absent for a static token. */\n  renew?: AthenaTokenRenewer;\n}\n\n/**\n * The single place every SDK network path gets the token it presents — the\n * live thread connection, the session list's index and REST calls, uploads,\n * search, voice and the collaborative-document mint — read right before it is\n * presented.\n */\nexport interface AthenaCredentialSource {\n  /**\n   * The token to present now. `force` renews it first (the previous one was\n   * refused). A token that has expired, or expires within\n   * {@link TOKEN_EXPIRY_SKEW_MS}, is renewed before it is presented, so a tab\n   * waking from sleep never presents a dead token. Concurrent renewals share\n   * one in-flight request, and calls made while one is in flight wait for it\n   * instead of presenting the token it is replacing. A renewal never hands one\n   * account's token to a call made after the signed-in account changed.\n   */\n  getToken: (options?: { force?: boolean }) => Promise<string | null>;\n  /** Called, with no arguments, whenever a different token becomes current. */\n  subscribe: (listener: () => void) => () => void;\n  /**\n   * How many times the identity behind the token has changed: its JWT\n   * subject, or the token itself when it is opaque. Renewals for the same\n   * identity leave it alone. Long-lived connections key on it, so they keep\n   * running across renewals and are rebuilt when someone else signs in,\n   * including under a host `getToken`, whose identity is only known once a\n   * token has been resolved. Subscribers hear when it moves.\n   */\n  identityEpoch: () => number;\n  /** Tell subscribers the held token changed (the provider calls this when its inputs do). */\n  notifyTokenChanged: () => void;\n}\n\n/** A token this close to its expiry is renewed before it is presented. */\nexport const TOKEN_EXPIRY_SKEW_MS = 30_000;\n\n/**\n * The `exp` of a JWT, in milliseconds, or `null` for anything that is not a\n * JWT with a numeric `exp`. Read without verification: it only decides whether\n * to renew before presenting; the server still validates every token.\n */\nexport function jwtExpiresAtMs(token: string): number | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const exp: unknown = (JSON.parse(atob(padded)) as { exp?: unknown }).exp;\n    return typeof exp === 'number' && Number.isFinite(exp) ? exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\n/** The unverified `sub` of a JWT, or `null` for anything that is not a JWT with one. */\nexport function jwtSubject(token: string): string | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const sub: unknown = (JSON.parse(atob(padded)) as { sub?: unknown }).sub;\n    return typeof sub === 'string' && sub.length > 0 ? sub : null;\n  } catch {\n    return null;\n  }\n}\n\n/** True for a JWT that has expired or expires within {@link TOKEN_EXPIRY_SKEW_MS}. */\nexport function isTokenExpiring(token: string, now: number = Date.now()): boolean {\n  const expiresAt = jwtExpiresAtMs(token);\n  return expiresAt !== null && expiresAt - now <= TOKEN_EXPIRY_SKEW_MS;\n}\n\nexport function createAthenaCredentialSource(\n  read: () => AthenaCredentialInputs,\n): AthenaCredentialSource {\n  const listeners = new Set<() => void>();\n  // The renewal in flight, and whether the host's getter runs it (the host\n  // owns identity for its getter) or the sign-in provider's / bridge's renewer.\n  let renewal: { token: Promise<string | null>; byHost: boolean } | null = null;\n  let lastResolved: string | null = null;\n  let identity: string | null = null;\n  let identityEpoch = 0;\n\n  const notifyListeners = () => {\n    for (const listener of [...listeners]) listener();\n  };\n\n  /** Note who a token acts as; true when that is someone other than before. */\n  const observeIdentity = (token: string | null | undefined): boolean => {\n    if (!token) return false;\n    const next = jwtSubject(token) ?? token;\n    if (next === identity) return false;\n    const changed = identity !== null;\n    identity = next;\n    if (changed) identityEpoch += 1;\n    return changed;\n  };\n\n  const notifyTokenChanged = () => {\n    observeIdentity(read().token);\n    notifyListeners();\n  };\n\n  /** Record what a resolve produced; a different token than the last one is news. */\n  const settle = (token: string | null): string | null => {\n    const identityChanged = observeIdentity(token);\n    if (token !== null && token !== lastResolved) {\n      const replaced = lastResolved !== null;\n      lastResolved = token;\n      if (replaced || identityChanged) notifyListeners();\n    } else if (identityChanged) {\n      notifyListeners();\n    }\n    return token;\n  };\n\n  const shareRenewal = (\n    start: () => Promise<string | null>,\n    byHost: boolean,\n  ): { token: Promise<string | null>; byHost: boolean } => {\n    if (!renewal) {\n      const entry = {\n        token: start().finally(() => {\n          if (renewal === entry) renewal = null;\n        }),\n        byHost,\n      };\n      renewal = entry;\n    }\n    return renewal;\n  };\n\n  /**\n   * What a finished renewal hands one caller. A host getter's token is\n   * presented as is: the host owns identity for its getter. A sign-in\n   * provider's or bridge's renewed token is presented only while it acts as\n   * the account the provider holds now. When the account changed while the\n   * renewal was in flight (its JWT subject differs from the held token's, or\n   * the provider holds no token any more), the held token, the current\n   * account's, is presented instead. A renewal that produced nothing keeps\n   * the held token: the caller presents it and the host's refusal ends the\n   * attempt.\n   */\n  const presentable = (\n    { byHost }: { byHost: boolean },\n    renewed: string | null,\n  ): string | null => {\n    const held = read().token ?? null;\n    if (byHost) return renewed ?? held;\n    if (!renewed || !held) return held;\n    const heldSubject = jwtSubject(held);\n    const renewedSubject = jwtSubject(renewed);\n    return heldSubject && renewedSubject && heldSubject !== renewedSubject ? held : renewed;\n  };\n\n  const awaitRenewal = async (shared: {\n    token: Promise<string | null>;\n    byHost: boolean;\n  }): Promise<string | null> => settle(presentable(shared, await shared.token));\n\n  const getToken = async ({ force = false }: { force?: boolean } = {}): Promise<string | null> => {\n    if (renewal) return awaitRenewal(renewal);\n    const inputs = read();\n    const hostGetToken = inputs.hostGetToken;\n    if (hostGetToken) {\n      if (!force) return settle((await hostGetToken({ force: false })) ?? read().token ?? null);\n      return awaitRenewal(\n        shareRenewal(async () => (await hostGetToken({ force: true })) ?? null, true),\n      );\n    }\n    const current = inputs.token ?? null;\n    const renew = inputs.renew;\n    if (!renew) return settle(current);\n    const stale = force || (current !== null && isTokenExpiring(current));\n    if (!stale) return settle(current);\n    return awaitRenewal(shareRenewal(() => renew({ force: true }), false));\n  };\n\n  return {\n    getToken,\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    notifyTokenChanged,\n    identityEpoch: () => identityEpoch,\n  };\n}\n"],"names":[],"mappings":";;AAwDO,MAAM,uBAAuB;AAO7B,SAAS,eAAe,OAA8B;AAC3D,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,MAAgB,KAAK,MAAM,KAAK,MAAM,CAAC,EAAwB;AACrE,WAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,IAAI,MAAM,MAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,WAAW,OAA8B;AACvD,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,MAAgB,KAAK,MAAM,KAAK,MAAM,CAAC,EAAwB;AACrE,WAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,IAAI,MAAM;AAAA,EAC3D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,gBAAgB,OAAe,MAAc,KAAK,OAAgB;AAChF,QAAM,YAAY,eAAe,KAAK;AACtC,SAAO,cAAc,QAAQ,YAAY,OAAO;AAClD;AAEO,SAAS,6BACd,MACwB;AACxB,QAAM,gCAAgB,IAAA;AAGtB,MAAI,UAAqE;AACzE,MAAI,eAA8B;AAClC,MAAI,WAA0B;AAC9B,MAAI,gBAAgB;AAEpB,QAAM,kBAAkB,MAAM;AAC5B,eAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,EACzC;AAGA,QAAM,kBAAkB,CAAC,UAA8C;AACrE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,OAAO,WAAW,KAAK,KAAK;AAClC,QAAI,SAAS,SAAU,QAAO;AAC9B,UAAM,UAAU,aAAa;AAC7B,eAAW;AACX,QAAI,QAAS,kBAAiB;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,qBAAqB,MAAM;AAC/B,oBAAgB,KAAA,EAAO,KAAK;AAC5B,oBAAA;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,UAAwC;AACtD,UAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAI,UAAU,QAAQ,UAAU,cAAc;AAC5C,YAAM,WAAW,iBAAiB;AAClC,qBAAe;AACf,UAAI,YAAY,gBAAiB,iBAAA;AAAA,IACnC,WAAW,iBAAiB;AAC1B,sBAAA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CACnB,OACA,WACuD;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,QAAQ;AAAA,QACZ,OAAO,QAAQ,QAAQ,MAAM;AAC3B,cAAI,YAAY,MAAO,WAAU;AAAA,QACnC,CAAC;AAAA,QACD;AAAA,MAAA;AAEF,gBAAU;AAAA,IACZ;AACA,WAAO;AAAA,EACT;AAaA,QAAM,cAAc,CAClB,EAAE,OAAA,GACF,YACkB;AAClB,UAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,eAAe,WAAW;AAC9B,QAAI,CAAC,WAAW,CAAC,KAAM,QAAO;AAC9B,UAAM,cAAc,WAAW,IAAI;AACnC,UAAM,iBAAiB,WAAW,OAAO;AACzC,WAAO,eAAe,kBAAkB,gBAAgB,iBAAiB,OAAO;AAAA,EAClF;AAEA,QAAM,eAAe,OAAO,WAGE,OAAO,YAAY,QAAQ,MAAM,OAAO,KAAK,CAAC;AAE5E,QAAM,WAAW,OAAO,EAAE,QAAQ,MAAA,IAA+B,CAAA,MAA+B;AAC9F,QAAI,QAAS,QAAO,aAAa,OAAO;AACxC,UAAM,SAAS,KAAA;AACf,UAAM,eAAe,OAAO;AAC5B,QAAI,cAAc;AAChB,UAAI,CAAC,MAAO,QAAO,OAAQ,MAAM,aAAa,EAAE,OAAO,MAAA,CAAO,KAAM,OAAO,SAAS,IAAI;AACxF,aAAO;AAAA,QACL,aAAa,YAAa,MAAM,aAAa,EAAE,OAAO,KAAA,CAAM,KAAM,MAAM,IAAI;AAAA,MAAA;AAAA,IAEhF;AACA,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,QAAQ,OAAO;AACrB,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,UAAM,QAAQ,SAAU,YAAY,QAAQ,gBAAgB,OAAO;AACnE,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,WAAO,aAAa,aAAa,MAAM,MAAM,EAAE,OAAO,KAAA,CAAM,GAAG,KAAK,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA;AAAA,IACA,eAAe,MAAM;AAAA,EAAA;AAEzB;;;;;;"}
+{"version":3,"file":"credential-source.cjs","sources":["../../src/auth/credential-source.ts"],"sourcesContent":["import type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\n\n/**\n * Renews a token-backed sign-in. `force: true` means the token just presented\n * was refused, or has expired: the renewer must obtain a new one rather than\n * return the one it holds. Resolves `null` when it cannot produce a token.\n */\nexport type AthenaTokenRenewer = (options: { force: boolean }) => Promise<string | null>;\n\n/** What the credential source reads, fresh, on every resolve. */\nexport interface AthenaCredentialInputs {\n  /**\n   * The host's own getter (`config.getToken`). It owns renewal for its\n   * sign-in, so it always wins; the held `token` is its fallback when it\n   * resolves nothing.\n   */\n  hostGetToken?: AthenaStatewireTokenGetter;\n  /** The token currently held: the host's, the sign-in provider's or the host bridge's. */\n  token: string | null | undefined;\n  /** How that token renews (the sign-in provider or the host bridge); absent for a static token. */\n  renew?: AthenaTokenRenewer;\n}\n\n/**\n * The single place every SDK network path gets the token it presents — the\n * live thread connection, the session list's index and REST calls, uploads,\n * search, voice and the collaborative-document mint — read right before it is\n * presented.\n */\nexport interface AthenaCredentialSource {\n  /**\n   * The token to present now. `force` renews it first (the previous one was\n   * refused). A token that has expired, or expires within\n   * {@link TOKEN_EXPIRY_SKEW_MS}, is renewed before it is presented, so a tab\n   * waking from sleep never presents a dead token. Concurrent renewals share\n   * one in-flight request, and calls made while one is in flight wait for it\n   * instead of presenting the token it is replacing. A renewal never hands one\n   * account's token to a call made after the signed-in account changed.\n   */\n  getToken: (options?: { force?: boolean }) => Promise<string | null>;\n  /** Called, with no arguments, whenever a different token becomes current. */\n  subscribe: (listener: () => void) => () => void;\n  /**\n   * How many times the identity behind the token has changed: its JWT\n   * subject, or the token itself when it is opaque. Renewals for the same\n   * identity leave it alone. Long-lived connections key on it, so they keep\n   * running across renewals and are rebuilt when someone else signs in,\n   * including under a host `getToken`, whose identity is only known once a\n   * token has been resolved. Subscribers hear when it moves.\n   */\n  identityEpoch: () => number;\n  /** Tell subscribers the held token changed (the provider calls this when its inputs do). */\n  notifyTokenChanged: () => void;\n}\n\n/** A token this close to its expiry is renewed before it is presented. */\nexport const TOKEN_EXPIRY_SKEW_MS = 30_000;\n\n/** The unverified claims of a JWT, or `null` for anything that is not one. */\nfunction jwtClaims(token: string): Record<string, unknown> | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const claims: unknown = JSON.parse(atob(padded));\n    return typeof claims === 'object' && claims !== null && !Array.isArray(claims)\n      ? (claims as Record<string, unknown>)\n      : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The `exp` of a JWT, in milliseconds, or `null` for anything that is not a\n * JWT with a numeric `exp`. Read without verification: it only decides whether\n * to renew before presenting; the server still validates every token.\n */\nexport function jwtExpiresAtMs(token: string): number | null {\n  const exp = jwtClaims(token)?.exp;\n  return typeof exp === 'number' && Number.isFinite(exp) ? exp * 1000 : null;\n}\n\n/** The unverified `sub` of a JWT, or `null` for anything that is not a JWT with one. */\nexport function jwtSubject(token: string): string | null {\n  const sub = jwtClaims(token)?.sub;\n  return typeof sub === 'string' && sub.length > 0 ? sub : null;\n}\n\n/**\n * The unverified claims that scope a JWT to a workspace or org, as one stable\n * string, or `null` when it names none: Athena's `workspace_id` (an Office\n * session's token), `org_id` (an external sign-in's), and PropelAuth's\n * active-org `org_member_info.org_id`. Two of one person's tokens scoped to\n * different workspaces read differently; a renewal keeps it.\n */\nexport function jwtScope(token: string): string | null {\n  const claims = jwtClaims(token);\n  if (claims === null) return null;\n  const orgMember = claims.org_member_info;\n  const scope = [\n    ['workspace_id', claims.workspace_id],\n    ['org_id', claims.org_id],\n    [\n      'org_member_info.org_id',\n      typeof orgMember === 'object' && orgMember !== null\n        ? (orgMember as Record<string, unknown>).org_id\n        : undefined,\n    ],\n  ]\n    .filter((entry): entry is [string, string] => typeof entry[1] === 'string' && entry[1].length > 0)\n    .map(([claim, value]) => `${claim}=${value}`);\n  return scope.length > 0 ? scope.join('\\u0000') : null;\n}\n\n/** True for a JWT that has expired or expires within {@link TOKEN_EXPIRY_SKEW_MS}. */\nexport function isTokenExpiring(token: string, now: number = Date.now()): boolean {\n  const expiresAt = jwtExpiresAtMs(token);\n  return expiresAt !== null && expiresAt - now <= TOKEN_EXPIRY_SKEW_MS;\n}\n\nexport function createAthenaCredentialSource(\n  read: () => AthenaCredentialInputs,\n): AthenaCredentialSource {\n  const listeners = new Set<() => void>();\n  // The renewal in flight, and whether the host's getter runs it (the host\n  // owns identity for its getter) or the sign-in provider's / bridge's renewer.\n  let renewal: { token: Promise<string | null>; byHost: boolean } | null = null;\n  let lastResolved: string | null = null;\n  let identity: string | null = null;\n  let identityEpoch = 0;\n\n  const notifyListeners = () => {\n    for (const listener of [...listeners]) listener();\n  };\n\n  /** Note who a token acts as; true when that is someone other than before. */\n  const observeIdentity = (token: string | null | undefined): boolean => {\n    if (!token) return false;\n    const next = jwtSubject(token) ?? token;\n    if (next === identity) return false;\n    const changed = identity !== null;\n    identity = next;\n    if (changed) identityEpoch += 1;\n    return changed;\n  };\n\n  const notifyTokenChanged = () => {\n    observeIdentity(read().token);\n    notifyListeners();\n  };\n\n  /** Record what a resolve produced; a different token than the last one is news. */\n  const settle = (token: string | null): string | null => {\n    const identityChanged = observeIdentity(token);\n    if (token !== null && token !== lastResolved) {\n      const replaced = lastResolved !== null;\n      lastResolved = token;\n      if (replaced || identityChanged) notifyListeners();\n    } else if (identityChanged) {\n      notifyListeners();\n    }\n    return token;\n  };\n\n  const shareRenewal = (\n    start: () => Promise<string | null>,\n    byHost: boolean,\n  ): { token: Promise<string | null>; byHost: boolean } => {\n    if (!renewal) {\n      const entry = {\n        token: start().finally(() => {\n          if (renewal === entry) renewal = null;\n        }),\n        byHost,\n      };\n      renewal = entry;\n    }\n    return renewal;\n  };\n\n  /**\n   * What a finished renewal hands one caller. A host getter's token is\n   * presented as is: the host owns identity for its getter. A sign-in\n   * provider's or bridge's renewed token is presented only while it acts as\n   * the account the provider holds now. When the account changed while the\n   * renewal was in flight (its JWT subject differs from the held token's, or\n   * the provider holds no token any more), the held token, the current\n   * account's, is presented instead. A renewal that produced nothing keeps\n   * the held token: the caller presents it and the host's refusal ends the\n   * attempt.\n   */\n  const presentable = (\n    { byHost }: { byHost: boolean },\n    renewed: string | null,\n  ): string | null => {\n    const held = read().token ?? null;\n    if (byHost) return renewed ?? held;\n    if (!renewed || !held) return held;\n    const heldSubject = jwtSubject(held);\n    const renewedSubject = jwtSubject(renewed);\n    return heldSubject && renewedSubject && heldSubject !== renewedSubject ? held : renewed;\n  };\n\n  const awaitRenewal = async (shared: {\n    token: Promise<string | null>;\n    byHost: boolean;\n  }): Promise<string | null> => settle(presentable(shared, await shared.token));\n\n  const getToken = async ({ force = false }: { force?: boolean } = {}): Promise<string | null> => {\n    if (renewal) return awaitRenewal(renewal);\n    const inputs = read();\n    const hostGetToken = inputs.hostGetToken;\n    if (hostGetToken) {\n      if (!force) return settle((await hostGetToken({ force: false })) ?? read().token ?? null);\n      return awaitRenewal(\n        shareRenewal(async () => (await hostGetToken({ force: true })) ?? null, true),\n      );\n    }\n    const current = inputs.token ?? null;\n    const renew = inputs.renew;\n    if (!renew) return settle(current);\n    const stale = force || (current !== null && isTokenExpiring(current));\n    if (!stale) return settle(current);\n    return awaitRenewal(shareRenewal(() => renew({ force: true }), false));\n  };\n\n  return {\n    getToken,\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    notifyTokenChanged,\n    identityEpoch: () => identityEpoch,\n  };\n}\n"],"names":[],"mappings":";;AAwDO,MAAM,uBAAuB;AAGpC,SAAS,UAAU,OAA+C;AAChE,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,SAAkB,KAAK,MAAM,KAAK,MAAM,CAAC;AAC/C,WAAO,OAAO,WAAW,YAAY,WAAW,QAAQ,CAAC,MAAM,QAAQ,MAAM,IACxE,SACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,eAAe,OAA8B;;AAC3D,QAAM,OAAM,eAAU,KAAK,MAAf,mBAAkB;AAC9B,SAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,IAAI,MAAM,MAAO;AACxE;AAGO,SAAS,WAAW,OAA8B;;AACvD,QAAM,OAAM,eAAU,KAAK,MAAf,mBAAkB;AAC9B,SAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,IAAI,MAAM;AAC3D;AASO,SAAS,SAAS,OAA8B;AACrD,QAAM,SAAS,UAAU,KAAK;AAC9B,MAAI,WAAW,KAAM,QAAO;AAC5B,QAAM,YAAY,OAAO;AACzB,QAAM,QAAQ;AAAA,IACZ,CAAC,gBAAgB,OAAO,YAAY;AAAA,IACpC,CAAC,UAAU,OAAO,MAAM;AAAA,IACxB;AAAA,MACE;AAAA,MACA,OAAO,cAAc,YAAY,cAAc,OAC1C,UAAsC,SACvC;AAAA,IAAA;AAAA,EACN,EAEC,OAAO,CAAC,UAAqC,OAAO,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,EAAE,SAAS,CAAC,EAChG,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,GAAG,KAAK,IAAI,KAAK,EAAE;AAC9C,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,IAAQ,IAAI;AACnD;AAGO,SAAS,gBAAgB,OAAe,MAAc,KAAK,OAAgB;AAChF,QAAM,YAAY,eAAe,KAAK;AACtC,SAAO,cAAc,QAAQ,YAAY,OAAO;AAClD;AAEO,SAAS,6BACd,MACwB;AACxB,QAAM,gCAAgB,IAAA;AAGtB,MAAI,UAAqE;AACzE,MAAI,eAA8B;AAClC,MAAI,WAA0B;AAC9B,MAAI,gBAAgB;AAEpB,QAAM,kBAAkB,MAAM;AAC5B,eAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,EACzC;AAGA,QAAM,kBAAkB,CAAC,UAA8C;AACrE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,OAAO,WAAW,KAAK,KAAK;AAClC,QAAI,SAAS,SAAU,QAAO;AAC9B,UAAM,UAAU,aAAa;AAC7B,eAAW;AACX,QAAI,QAAS,kBAAiB;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,qBAAqB,MAAM;AAC/B,oBAAgB,KAAA,EAAO,KAAK;AAC5B,oBAAA;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,UAAwC;AACtD,UAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAI,UAAU,QAAQ,UAAU,cAAc;AAC5C,YAAM,WAAW,iBAAiB;AAClC,qBAAe;AACf,UAAI,YAAY,gBAAiB,iBAAA;AAAA,IACnC,WAAW,iBAAiB;AAC1B,sBAAA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CACnB,OACA,WACuD;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,QAAQ;AAAA,QACZ,OAAO,QAAQ,QAAQ,MAAM;AAC3B,cAAI,YAAY,MAAO,WAAU;AAAA,QACnC,CAAC;AAAA,QACD;AAAA,MAAA;AAEF,gBAAU;AAAA,IACZ;AACA,WAAO;AAAA,EACT;AAaA,QAAM,cAAc,CAClB,EAAE,OAAA,GACF,YACkB;AAClB,UAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,eAAe,WAAW;AAC9B,QAAI,CAAC,WAAW,CAAC,KAAM,QAAO;AAC9B,UAAM,cAAc,WAAW,IAAI;AACnC,UAAM,iBAAiB,WAAW,OAAO;AACzC,WAAO,eAAe,kBAAkB,gBAAgB,iBAAiB,OAAO;AAAA,EAClF;AAEA,QAAM,eAAe,OAAO,WAGE,OAAO,YAAY,QAAQ,MAAM,OAAO,KAAK,CAAC;AAE5E,QAAM,WAAW,OAAO,EAAE,QAAQ,MAAA,IAA+B,CAAA,MAA+B;AAC9F,QAAI,QAAS,QAAO,aAAa,OAAO;AACxC,UAAM,SAAS,KAAA;AACf,UAAM,eAAe,OAAO;AAC5B,QAAI,cAAc;AAChB,UAAI,CAAC,MAAO,QAAO,OAAQ,MAAM,aAAa,EAAE,OAAO,MAAA,CAAO,KAAM,OAAO,SAAS,IAAI;AACxF,aAAO;AAAA,QACL,aAAa,YAAa,MAAM,aAAa,EAAE,OAAO,KAAA,CAAM,KAAM,MAAM,IAAI;AAAA,MAAA;AAAA,IAEhF;AACA,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,QAAQ,OAAO;AACrB,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,UAAM,QAAQ,SAAU,YAAY,QAAQ,gBAAgB,OAAO;AACnE,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,WAAO,aAAa,aAAa,MAAM,MAAM,EAAE,OAAO,KAAA,CAAM,GAAG,KAAK,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA;AAAA,IACA,eAAe,MAAM;AAAA,EAAA;AAEzB;;;;;;;"}

package/dist/auth/credential-source.d.ts

@@ -63,6 +63,14 @@ export declare const TOKEN_EXPIRY_SKEW_MS = 30000;
 export declare function jwtExpiresAtMs(token: string): number | null;
 /** The unverified `sub` of a JWT, or `null` for anything that is not a JWT with one. */
 export declare function jwtSubject(token: string): string | null;
+/**
+ * The unverified claims that scope a JWT to a workspace or org, as one stable
+ * string, or `null` when it names none: Athena's `workspace_id` (an Office
+ * session's token), `org_id` (an external sign-in's), and PropelAuth's
+ * active-org `org_member_info.org_id`. Two of one person's tokens scoped to
+ * different workspaces read differently; a renewal keeps it.
+ */
+export declare function jwtScope(token: string): string | null;
 /** True for a JWT that has expired or expires within {@link TOKEN_EXPIRY_SKEW_MS}. */
 export declare function isTokenExpiring(token: string, now?: number): boolean;
 export declare function createAthenaCredentialSource(read: () => AthenaCredentialInputs): AthenaCredentialSource;

package/dist/auth/credential-source.js

@@ -1,27 +1,39 @@
 const TOKEN_EXPIRY_SKEW_MS = 3e4;
-function jwtExpiresAtMs(token) {
+function jwtClaims(token) {
   const payload = token.split(".")[1];
   if (!payload) return null;
   try {
     const base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
     const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, "=");
-    const exp = JSON.parse(atob(padded)).exp;
-    return typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : null;
+    const claims = JSON.parse(atob(padded));
+    return typeof claims === "object" && claims !== null && !Array.isArray(claims) ? claims : null;
   } catch {
     return null;
   }
 }
+function jwtExpiresAtMs(token) {
+  var _a;
+  const exp = (_a = jwtClaims(token)) == null ? void 0 : _a.exp;
+  return typeof exp === "number" && Number.isFinite(exp) ? exp * 1e3 : null;
+}
 function jwtSubject(token) {
-  const payload = token.split(".")[1];
-  if (!payload) return null;
-  try {
-    const base64 = payload.replace(/-/g, "+").replace(/_/g, "/");
-    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, "=");
-    const sub = JSON.parse(atob(padded)).sub;
-    return typeof sub === "string" && sub.length > 0 ? sub : null;
-  } catch {
-    return null;
-  }
+  var _a;
+  const sub = (_a = jwtClaims(token)) == null ? void 0 : _a.sub;
+  return typeof sub === "string" && sub.length > 0 ? sub : null;
+}
+function jwtScope(token) {
+  const claims = jwtClaims(token);
+  if (claims === null) return null;
+  const orgMember = claims.org_member_info;
+  const scope = [
+    ["workspace_id", claims.workspace_id],
+    ["org_id", claims.org_id],
+    [
+      "org_member_info.org_id",
+      typeof orgMember === "object" && orgMember !== null ? orgMember.org_id : void 0
+    ]
+  ].filter((entry) => typeof entry[1] === "string" && entry[1].length > 0).map(([claim, value]) => `${claim}=${value}`);
+  return scope.length > 0 ? scope.join("\0") : null;
 }
 function isTokenExpiring(token, now = Date.now()) {
   const expiresAt = jwtExpiresAtMs(token);
@@ -115,6 +127,7 @@ export {
   createAthenaCredentialSource,
   isTokenExpiring,
   jwtExpiresAtMs,
+  jwtScope,
   jwtSubject
 };
 //# sourceMappingURL=credential-source.js.map

package/dist/auth/credential-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-source.js","sources":["../../src/auth/credential-source.ts"],"sourcesContent":["import type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\n\n/**\n * Renews a token-backed sign-in. `force: true` means the token just presented\n * was refused, or has expired: the renewer must obtain a new one rather than\n * return the one it holds. Resolves `null` when it cannot produce a token.\n */\nexport type AthenaTokenRenewer = (options: { force: boolean }) => Promise<string | null>;\n\n/** What the credential source reads, fresh, on every resolve. */\nexport interface AthenaCredentialInputs {\n  /**\n   * The host's own getter (`config.getToken`). It owns renewal for its\n   * sign-in, so it always wins; the held `token` is its fallback when it\n   * resolves nothing.\n   */\n  hostGetToken?: AthenaStatewireTokenGetter;\n  /** The token currently held: the host's, the sign-in provider's or the host bridge's. */\n  token: string | null | undefined;\n  /** How that token renews (the sign-in provider or the host bridge); absent for a static token. */\n  renew?: AthenaTokenRenewer;\n}\n\n/**\n * The single place every SDK network path gets the token it presents — the\n * live thread connection, the session list's index and REST calls, uploads,\n * search, voice and the collaborative-document mint — read right before it is\n * presented.\n */\nexport interface AthenaCredentialSource {\n  /**\n   * The token to present now. `force` renews it first (the previous one was\n   * refused). A token that has expired, or expires within\n   * {@link TOKEN_EXPIRY_SKEW_MS}, is renewed before it is presented, so a tab\n   * waking from sleep never presents a dead token. Concurrent renewals share\n   * one in-flight request, and calls made while one is in flight wait for it\n   * instead of presenting the token it is replacing. A renewal never hands one\n   * account's token to a call made after the signed-in account changed.\n   */\n  getToken: (options?: { force?: boolean }) => Promise<string | null>;\n  /** Called, with no arguments, whenever a different token becomes current. */\n  subscribe: (listener: () => void) => () => void;\n  /**\n   * How many times the identity behind the token has changed: its JWT\n   * subject, or the token itself when it is opaque. Renewals for the same\n   * identity leave it alone. Long-lived connections key on it, so they keep\n   * running across renewals and are rebuilt when someone else signs in,\n   * including under a host `getToken`, whose identity is only known once a\n   * token has been resolved. Subscribers hear when it moves.\n   */\n  identityEpoch: () => number;\n  /** Tell subscribers the held token changed (the provider calls this when its inputs do). */\n  notifyTokenChanged: () => void;\n}\n\n/** A token this close to its expiry is renewed before it is presented. */\nexport const TOKEN_EXPIRY_SKEW_MS = 30_000;\n\n/**\n * The `exp` of a JWT, in milliseconds, or `null` for anything that is not a\n * JWT with a numeric `exp`. Read without verification: it only decides whether\n * to renew before presenting; the server still validates every token.\n */\nexport function jwtExpiresAtMs(token: string): number | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const exp: unknown = (JSON.parse(atob(padded)) as { exp?: unknown }).exp;\n    return typeof exp === 'number' && Number.isFinite(exp) ? exp * 1000 : null;\n  } catch {\n    return null;\n  }\n}\n\n/** The unverified `sub` of a JWT, or `null` for anything that is not a JWT with one. */\nexport function jwtSubject(token: string): string | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const sub: unknown = (JSON.parse(atob(padded)) as { sub?: unknown }).sub;\n    return typeof sub === 'string' && sub.length > 0 ? sub : null;\n  } catch {\n    return null;\n  }\n}\n\n/** True for a JWT that has expired or expires within {@link TOKEN_EXPIRY_SKEW_MS}. */\nexport function isTokenExpiring(token: string, now: number = Date.now()): boolean {\n  const expiresAt = jwtExpiresAtMs(token);\n  return expiresAt !== null && expiresAt - now <= TOKEN_EXPIRY_SKEW_MS;\n}\n\nexport function createAthenaCredentialSource(\n  read: () => AthenaCredentialInputs,\n): AthenaCredentialSource {\n  const listeners = new Set<() => void>();\n  // The renewal in flight, and whether the host's getter runs it (the host\n  // owns identity for its getter) or the sign-in provider's / bridge's renewer.\n  let renewal: { token: Promise<string | null>; byHost: boolean } | null = null;\n  let lastResolved: string | null = null;\n  let identity: string | null = null;\n  let identityEpoch = 0;\n\n  const notifyListeners = () => {\n    for (const listener of [...listeners]) listener();\n  };\n\n  /** Note who a token acts as; true when that is someone other than before. */\n  const observeIdentity = (token: string | null | undefined): boolean => {\n    if (!token) return false;\n    const next = jwtSubject(token) ?? token;\n    if (next === identity) return false;\n    const changed = identity !== null;\n    identity = next;\n    if (changed) identityEpoch += 1;\n    return changed;\n  };\n\n  const notifyTokenChanged = () => {\n    observeIdentity(read().token);\n    notifyListeners();\n  };\n\n  /** Record what a resolve produced; a different token than the last one is news. */\n  const settle = (token: string | null): string | null => {\n    const identityChanged = observeIdentity(token);\n    if (token !== null && token !== lastResolved) {\n      const replaced = lastResolved !== null;\n      lastResolved = token;\n      if (replaced || identityChanged) notifyListeners();\n    } else if (identityChanged) {\n      notifyListeners();\n    }\n    return token;\n  };\n\n  const shareRenewal = (\n    start: () => Promise<string | null>,\n    byHost: boolean,\n  ): { token: Promise<string | null>; byHost: boolean } => {\n    if (!renewal) {\n      const entry = {\n        token: start().finally(() => {\n          if (renewal === entry) renewal = null;\n        }),\n        byHost,\n      };\n      renewal = entry;\n    }\n    return renewal;\n  };\n\n  /**\n   * What a finished renewal hands one caller. A host getter's token is\n   * presented as is: the host owns identity for its getter. A sign-in\n   * provider's or bridge's renewed token is presented only while it acts as\n   * the account the provider holds now. When the account changed while the\n   * renewal was in flight (its JWT subject differs from the held token's, or\n   * the provider holds no token any more), the held token, the current\n   * account's, is presented instead. A renewal that produced nothing keeps\n   * the held token: the caller presents it and the host's refusal ends the\n   * attempt.\n   */\n  const presentable = (\n    { byHost }: { byHost: boolean },\n    renewed: string | null,\n  ): string | null => {\n    const held = read().token ?? null;\n    if (byHost) return renewed ?? held;\n    if (!renewed || !held) return held;\n    const heldSubject = jwtSubject(held);\n    const renewedSubject = jwtSubject(renewed);\n    return heldSubject && renewedSubject && heldSubject !== renewedSubject ? held : renewed;\n  };\n\n  const awaitRenewal = async (shared: {\n    token: Promise<string | null>;\n    byHost: boolean;\n  }): Promise<string | null> => settle(presentable(shared, await shared.token));\n\n  const getToken = async ({ force = false }: { force?: boolean } = {}): Promise<string | null> => {\n    if (renewal) return awaitRenewal(renewal);\n    const inputs = read();\n    const hostGetToken = inputs.hostGetToken;\n    if (hostGetToken) {\n      if (!force) return settle((await hostGetToken({ force: false })) ?? read().token ?? null);\n      return awaitRenewal(\n        shareRenewal(async () => (await hostGetToken({ force: true })) ?? null, true),\n      );\n    }\n    const current = inputs.token ?? null;\n    const renew = inputs.renew;\n    if (!renew) return settle(current);\n    const stale = force || (current !== null && isTokenExpiring(current));\n    if (!stale) return settle(current);\n    return awaitRenewal(shareRenewal(() => renew({ force: true }), false));\n  };\n\n  return {\n    getToken,\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    notifyTokenChanged,\n    identityEpoch: () => identityEpoch,\n  };\n}\n"],"names":[],"mappings":"AAwDO,MAAM,uBAAuB;AAO7B,SAAS,eAAe,OAA8B;AAC3D,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,MAAgB,KAAK,MAAM,KAAK,MAAM,CAAC,EAAwB;AACrE,WAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,IAAI,MAAM,MAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,WAAW,OAA8B;AACvD,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,MAAgB,KAAK,MAAM,KAAK,MAAM,CAAC,EAAwB;AACrE,WAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,IAAI,MAAM;AAAA,EAC3D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,gBAAgB,OAAe,MAAc,KAAK,OAAgB;AAChF,QAAM,YAAY,eAAe,KAAK;AACtC,SAAO,cAAc,QAAQ,YAAY,OAAO;AAClD;AAEO,SAAS,6BACd,MACwB;AACxB,QAAM,gCAAgB,IAAA;AAGtB,MAAI,UAAqE;AACzE,MAAI,eAA8B;AAClC,MAAI,WAA0B;AAC9B,MAAI,gBAAgB;AAEpB,QAAM,kBAAkB,MAAM;AAC5B,eAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,EACzC;AAGA,QAAM,kBAAkB,CAAC,UAA8C;AACrE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,OAAO,WAAW,KAAK,KAAK;AAClC,QAAI,SAAS,SAAU,QAAO;AAC9B,UAAM,UAAU,aAAa;AAC7B,eAAW;AACX,QAAI,QAAS,kBAAiB;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,qBAAqB,MAAM;AAC/B,oBAAgB,KAAA,EAAO,KAAK;AAC5B,oBAAA;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,UAAwC;AACtD,UAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAI,UAAU,QAAQ,UAAU,cAAc;AAC5C,YAAM,WAAW,iBAAiB;AAClC,qBAAe;AACf,UAAI,YAAY,gBAAiB,iBAAA;AAAA,IACnC,WAAW,iBAAiB;AAC1B,sBAAA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CACnB,OACA,WACuD;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,QAAQ;AAAA,QACZ,OAAO,QAAQ,QAAQ,MAAM;AAC3B,cAAI,YAAY,MAAO,WAAU;AAAA,QACnC,CAAC;AAAA,QACD;AAAA,MAAA;AAEF,gBAAU;AAAA,IACZ;AACA,WAAO;AAAA,EACT;AAaA,QAAM,cAAc,CAClB,EAAE,OAAA,GACF,YACkB;AAClB,UAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,eAAe,WAAW;AAC9B,QAAI,CAAC,WAAW,CAAC,KAAM,QAAO;AAC9B,UAAM,cAAc,WAAW,IAAI;AACnC,UAAM,iBAAiB,WAAW,OAAO;AACzC,WAAO,eAAe,kBAAkB,gBAAgB,iBAAiB,OAAO;AAAA,EAClF;AAEA,QAAM,eAAe,OAAO,WAGE,OAAO,YAAY,QAAQ,MAAM,OAAO,KAAK,CAAC;AAE5E,QAAM,WAAW,OAAO,EAAE,QAAQ,MAAA,IAA+B,CAAA,MAA+B;AAC9F,QAAI,QAAS,QAAO,aAAa,OAAO;AACxC,UAAM,SAAS,KAAA;AACf,UAAM,eAAe,OAAO;AAC5B,QAAI,cAAc;AAChB,UAAI,CAAC,MAAO,QAAO,OAAQ,MAAM,aAAa,EAAE,OAAO,MAAA,CAAO,KAAM,OAAO,SAAS,IAAI;AACxF,aAAO;AAAA,QACL,aAAa,YAAa,MAAM,aAAa,EAAE,OAAO,KAAA,CAAM,KAAM,MAAM,IAAI;AAAA,MAAA;AAAA,IAEhF;AACA,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,QAAQ,OAAO;AACrB,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,UAAM,QAAQ,SAAU,YAAY,QAAQ,gBAAgB,OAAO;AACnE,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,WAAO,aAAa,aAAa,MAAM,MAAM,EAAE,OAAO,KAAA,CAAM,GAAG,KAAK,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA;AAAA,IACA,eAAe,MAAM;AAAA,EAAA;AAEzB;"}
+{"version":3,"file":"credential-source.js","sources":["../../src/auth/credential-source.ts"],"sourcesContent":["import type { AthenaStatewireTokenGetter } from '../runtime/statewire-auth-headers';\n\n/**\n * Renews a token-backed sign-in. `force: true` means the token just presented\n * was refused, or has expired: the renewer must obtain a new one rather than\n * return the one it holds. Resolves `null` when it cannot produce a token.\n */\nexport type AthenaTokenRenewer = (options: { force: boolean }) => Promise<string | null>;\n\n/** What the credential source reads, fresh, on every resolve. */\nexport interface AthenaCredentialInputs {\n  /**\n   * The host's own getter (`config.getToken`). It owns renewal for its\n   * sign-in, so it always wins; the held `token` is its fallback when it\n   * resolves nothing.\n   */\n  hostGetToken?: AthenaStatewireTokenGetter;\n  /** The token currently held: the host's, the sign-in provider's or the host bridge's. */\n  token: string | null | undefined;\n  /** How that token renews (the sign-in provider or the host bridge); absent for a static token. */\n  renew?: AthenaTokenRenewer;\n}\n\n/**\n * The single place every SDK network path gets the token it presents — the\n * live thread connection, the session list's index and REST calls, uploads,\n * search, voice and the collaborative-document mint — read right before it is\n * presented.\n */\nexport interface AthenaCredentialSource {\n  /**\n   * The token to present now. `force` renews it first (the previous one was\n   * refused). A token that has expired, or expires within\n   * {@link TOKEN_EXPIRY_SKEW_MS}, is renewed before it is presented, so a tab\n   * waking from sleep never presents a dead token. Concurrent renewals share\n   * one in-flight request, and calls made while one is in flight wait for it\n   * instead of presenting the token it is replacing. A renewal never hands one\n   * account's token to a call made after the signed-in account changed.\n   */\n  getToken: (options?: { force?: boolean }) => Promise<string | null>;\n  /** Called, with no arguments, whenever a different token becomes current. */\n  subscribe: (listener: () => void) => () => void;\n  /**\n   * How many times the identity behind the token has changed: its JWT\n   * subject, or the token itself when it is opaque. Renewals for the same\n   * identity leave it alone. Long-lived connections key on it, so they keep\n   * running across renewals and are rebuilt when someone else signs in,\n   * including under a host `getToken`, whose identity is only known once a\n   * token has been resolved. Subscribers hear when it moves.\n   */\n  identityEpoch: () => number;\n  /** Tell subscribers the held token changed (the provider calls this when its inputs do). */\n  notifyTokenChanged: () => void;\n}\n\n/** A token this close to its expiry is renewed before it is presented. */\nexport const TOKEN_EXPIRY_SKEW_MS = 30_000;\n\n/** The unverified claims of a JWT, or `null` for anything that is not one. */\nfunction jwtClaims(token: string): Record<string, unknown> | null {\n  const payload = token.split('.')[1];\n  if (!payload) return null;\n  try {\n    const base64 = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const claims: unknown = JSON.parse(atob(padded));\n    return typeof claims === 'object' && claims !== null && !Array.isArray(claims)\n      ? (claims as Record<string, unknown>)\n      : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The `exp` of a JWT, in milliseconds, or `null` for anything that is not a\n * JWT with a numeric `exp`. Read without verification: it only decides whether\n * to renew before presenting; the server still validates every token.\n */\nexport function jwtExpiresAtMs(token: string): number | null {\n  const exp = jwtClaims(token)?.exp;\n  return typeof exp === 'number' && Number.isFinite(exp) ? exp * 1000 : null;\n}\n\n/** The unverified `sub` of a JWT, or `null` for anything that is not a JWT with one. */\nexport function jwtSubject(token: string): string | null {\n  const sub = jwtClaims(token)?.sub;\n  return typeof sub === 'string' && sub.length > 0 ? sub : null;\n}\n\n/**\n * The unverified claims that scope a JWT to a workspace or org, as one stable\n * string, or `null` when it names none: Athena's `workspace_id` (an Office\n * session's token), `org_id` (an external sign-in's), and PropelAuth's\n * active-org `org_member_info.org_id`. Two of one person's tokens scoped to\n * different workspaces read differently; a renewal keeps it.\n */\nexport function jwtScope(token: string): string | null {\n  const claims = jwtClaims(token);\n  if (claims === null) return null;\n  const orgMember = claims.org_member_info;\n  const scope = [\n    ['workspace_id', claims.workspace_id],\n    ['org_id', claims.org_id],\n    [\n      'org_member_info.org_id',\n      typeof orgMember === 'object' && orgMember !== null\n        ? (orgMember as Record<string, unknown>).org_id\n        : undefined,\n    ],\n  ]\n    .filter((entry): entry is [string, string] => typeof entry[1] === 'string' && entry[1].length > 0)\n    .map(([claim, value]) => `${claim}=${value}`);\n  return scope.length > 0 ? scope.join('\\u0000') : null;\n}\n\n/** True for a JWT that has expired or expires within {@link TOKEN_EXPIRY_SKEW_MS}. */\nexport function isTokenExpiring(token: string, now: number = Date.now()): boolean {\n  const expiresAt = jwtExpiresAtMs(token);\n  return expiresAt !== null && expiresAt - now <= TOKEN_EXPIRY_SKEW_MS;\n}\n\nexport function createAthenaCredentialSource(\n  read: () => AthenaCredentialInputs,\n): AthenaCredentialSource {\n  const listeners = new Set<() => void>();\n  // The renewal in flight, and whether the host's getter runs it (the host\n  // owns identity for its getter) or the sign-in provider's / bridge's renewer.\n  let renewal: { token: Promise<string | null>; byHost: boolean } | null = null;\n  let lastResolved: string | null = null;\n  let identity: string | null = null;\n  let identityEpoch = 0;\n\n  const notifyListeners = () => {\n    for (const listener of [...listeners]) listener();\n  };\n\n  /** Note who a token acts as; true when that is someone other than before. */\n  const observeIdentity = (token: string | null | undefined): boolean => {\n    if (!token) return false;\n    const next = jwtSubject(token) ?? token;\n    if (next === identity) return false;\n    const changed = identity !== null;\n    identity = next;\n    if (changed) identityEpoch += 1;\n    return changed;\n  };\n\n  const notifyTokenChanged = () => {\n    observeIdentity(read().token);\n    notifyListeners();\n  };\n\n  /** Record what a resolve produced; a different token than the last one is news. */\n  const settle = (token: string | null): string | null => {\n    const identityChanged = observeIdentity(token);\n    if (token !== null && token !== lastResolved) {\n      const replaced = lastResolved !== null;\n      lastResolved = token;\n      if (replaced || identityChanged) notifyListeners();\n    } else if (identityChanged) {\n      notifyListeners();\n    }\n    return token;\n  };\n\n  const shareRenewal = (\n    start: () => Promise<string | null>,\n    byHost: boolean,\n  ): { token: Promise<string | null>; byHost: boolean } => {\n    if (!renewal) {\n      const entry = {\n        token: start().finally(() => {\n          if (renewal === entry) renewal = null;\n        }),\n        byHost,\n      };\n      renewal = entry;\n    }\n    return renewal;\n  };\n\n  /**\n   * What a finished renewal hands one caller. A host getter's token is\n   * presented as is: the host owns identity for its getter. A sign-in\n   * provider's or bridge's renewed token is presented only while it acts as\n   * the account the provider holds now. When the account changed while the\n   * renewal was in flight (its JWT subject differs from the held token's, or\n   * the provider holds no token any more), the held token, the current\n   * account's, is presented instead. A renewal that produced nothing keeps\n   * the held token: the caller presents it and the host's refusal ends the\n   * attempt.\n   */\n  const presentable = (\n    { byHost }: { byHost: boolean },\n    renewed: string | null,\n  ): string | null => {\n    const held = read().token ?? null;\n    if (byHost) return renewed ?? held;\n    if (!renewed || !held) return held;\n    const heldSubject = jwtSubject(held);\n    const renewedSubject = jwtSubject(renewed);\n    return heldSubject && renewedSubject && heldSubject !== renewedSubject ? held : renewed;\n  };\n\n  const awaitRenewal = async (shared: {\n    token: Promise<string | null>;\n    byHost: boolean;\n  }): Promise<string | null> => settle(presentable(shared, await shared.token));\n\n  const getToken = async ({ force = false }: { force?: boolean } = {}): Promise<string | null> => {\n    if (renewal) return awaitRenewal(renewal);\n    const inputs = read();\n    const hostGetToken = inputs.hostGetToken;\n    if (hostGetToken) {\n      if (!force) return settle((await hostGetToken({ force: false })) ?? read().token ?? null);\n      return awaitRenewal(\n        shareRenewal(async () => (await hostGetToken({ force: true })) ?? null, true),\n      );\n    }\n    const current = inputs.token ?? null;\n    const renew = inputs.renew;\n    if (!renew) return settle(current);\n    const stale = force || (current !== null && isTokenExpiring(current));\n    if (!stale) return settle(current);\n    return awaitRenewal(shareRenewal(() => renew({ force: true }), false));\n  };\n\n  return {\n    getToken,\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    notifyTokenChanged,\n    identityEpoch: () => identityEpoch,\n  };\n}\n"],"names":[],"mappings":"AAwDO,MAAM,uBAAuB;AAGpC,SAAS,UAAU,OAA+C;AAChE,QAAM,UAAU,MAAM,MAAM,GAAG,EAAE,CAAC;AAClC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI;AACF,UAAM,SAAS,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAC3D,UAAM,SAAS,OAAO,OAAO,KAAK,KAAK,OAAO,SAAS,CAAC,IAAI,GAAG,GAAG;AAClE,UAAM,SAAkB,KAAK,MAAM,KAAK,MAAM,CAAC;AAC/C,WAAO,OAAO,WAAW,YAAY,WAAW,QAAQ,CAAC,MAAM,QAAQ,MAAM,IACxE,SACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,eAAe,OAA8B;AAvBtD;AAwBL,QAAM,OAAM,eAAU,KAAK,MAAf,mBAAkB;AAC9B,SAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,GAAG,IAAI,MAAM,MAAO;AACxE;AAGO,SAAS,WAAW,OAA8B;AA7BlD;AA8BL,QAAM,OAAM,eAAU,KAAK,MAAf,mBAAkB;AAC9B,SAAO,OAAO,QAAQ,YAAY,IAAI,SAAS,IAAI,MAAM;AAC3D;AASO,SAAS,SAAS,OAA8B;AACrD,QAAM,SAAS,UAAU,KAAK;AAC9B,MAAI,WAAW,KAAM,QAAO;AAC5B,QAAM,YAAY,OAAO;AACzB,QAAM,QAAQ;AAAA,IACZ,CAAC,gBAAgB,OAAO,YAAY;AAAA,IACpC,CAAC,UAAU,OAAO,MAAM;AAAA,IACxB;AAAA,MACE;AAAA,MACA,OAAO,cAAc,YAAY,cAAc,OAC1C,UAAsC,SACvC;AAAA,IAAA;AAAA,EACN,EAEC,OAAO,CAAC,UAAqC,OAAO,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,EAAE,SAAS,CAAC,EAChG,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,GAAG,KAAK,IAAI,KAAK,EAAE;AAC9C,SAAO,MAAM,SAAS,IAAI,MAAM,KAAK,IAAQ,IAAI;AACnD;AAGO,SAAS,gBAAgB,OAAe,MAAc,KAAK,OAAgB;AAChF,QAAM,YAAY,eAAe,KAAK;AACtC,SAAO,cAAc,QAAQ,YAAY,OAAO;AAClD;AAEO,SAAS,6BACd,MACwB;AACxB,QAAM,gCAAgB,IAAA;AAGtB,MAAI,UAAqE;AACzE,MAAI,eAA8B;AAClC,MAAI,WAA0B;AAC9B,MAAI,gBAAgB;AAEpB,QAAM,kBAAkB,MAAM;AAC5B,eAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,EACzC;AAGA,QAAM,kBAAkB,CAAC,UAA8C;AACrE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,OAAO,WAAW,KAAK,KAAK;AAClC,QAAI,SAAS,SAAU,QAAO;AAC9B,UAAM,UAAU,aAAa;AAC7B,eAAW;AACX,QAAI,QAAS,kBAAiB;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,qBAAqB,MAAM;AAC/B,oBAAgB,KAAA,EAAO,KAAK;AAC5B,oBAAA;AAAA,EACF;AAGA,QAAM,SAAS,CAAC,UAAwC;AACtD,UAAM,kBAAkB,gBAAgB,KAAK;AAC7C,QAAI,UAAU,QAAQ,UAAU,cAAc;AAC5C,YAAM,WAAW,iBAAiB;AAClC,qBAAe;AACf,UAAI,YAAY,gBAAiB,iBAAA;AAAA,IACnC,WAAW,iBAAiB;AAC1B,sBAAA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CACnB,OACA,WACuD;AACvD,QAAI,CAAC,SAAS;AACZ,YAAM,QAAQ;AAAA,QACZ,OAAO,QAAQ,QAAQ,MAAM;AAC3B,cAAI,YAAY,MAAO,WAAU;AAAA,QACnC,CAAC;AAAA,QACD;AAAA,MAAA;AAEF,gBAAU;AAAA,IACZ;AACA,WAAO;AAAA,EACT;AAaA,QAAM,cAAc,CAClB,EAAE,OAAA,GACF,YACkB;AAClB,UAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,eAAe,WAAW;AAC9B,QAAI,CAAC,WAAW,CAAC,KAAM,QAAO;AAC9B,UAAM,cAAc,WAAW,IAAI;AACnC,UAAM,iBAAiB,WAAW,OAAO;AACzC,WAAO,eAAe,kBAAkB,gBAAgB,iBAAiB,OAAO;AAAA,EAClF;AAEA,QAAM,eAAe,OAAO,WAGE,OAAO,YAAY,QAAQ,MAAM,OAAO,KAAK,CAAC;AAE5E,QAAM,WAAW,OAAO,EAAE,QAAQ,MAAA,IAA+B,CAAA,MAA+B;AAC9F,QAAI,QAAS,QAAO,aAAa,OAAO;AACxC,UAAM,SAAS,KAAA;AACf,UAAM,eAAe,OAAO;AAC5B,QAAI,cAAc;AAChB,UAAI,CAAC,MAAO,QAAO,OAAQ,MAAM,aAAa,EAAE,OAAO,MAAA,CAAO,KAAM,OAAO,SAAS,IAAI;AACxF,aAAO;AAAA,QACL,aAAa,YAAa,MAAM,aAAa,EAAE,OAAO,KAAA,CAAM,KAAM,MAAM,IAAI;AAAA,MAAA;AAAA,IAEhF;AACA,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,QAAQ,OAAO;AACrB,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,UAAM,QAAQ,SAAU,YAAY,QAAQ,gBAAgB,OAAO;AACnE,QAAI,CAAC,MAAO,QAAO,OAAO,OAAO;AACjC,WAAO,aAAa,aAAa,MAAM,MAAM,EAAE,OAAO,KAAA,CAAM,GAAG,KAAK,CAAC;AAAA,EACvE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA;AAAA,IACA,eAAe,MAAM;AAAA,EAAA;AAEzB;"}

package/dist/catalog/agent-model-options.cjs

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const runtimeCatalog = require("../agent-runtime/src/runtime-catalog.cjs");
 const statewireRunConfig = require("../runtime/statewire-run-config.cjs");
 function allowsAnyModel(value) {
   return value !== false;
@@ -23,19 +24,7 @@ function labeledModelsOf(value) {
     }
   }
   if (!Array.isArray(rows)) return [];
-  const entries = [];
-  for (const row of rows) {
-    if (!isRecord(row)) continue;
-    const model = nonBlank(row.model);
-    if (model === null) continue;
-    entries.push({
-      id: typeof row.id === "string" && row.id !== "" ? row.id : model,
-      model,
-      label: nonBlank(row.label) ?? model,
-      isDefault: row.isDefault === true
-    });
-  }
-  return entries;
+  return runtimeCatalog.normalizeCatalogAgentModelEntries({ rows: Array.from(rows).filter(isRecord) });
 }
 function channelModelsOf(value) {
   if (!isRecord(value)) return {};
@@ -78,16 +67,19 @@ function isAutomaticModelLabel({
 }
 function agentDefaultModel({
   source,
-  channel
+  channel,
+  refuseReplacements = false
 }) {
   const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];
-  return (channel ? source.channelModels[channel] : void 0) ?? source.model ?? (marked == null ? void 0 : marked.model) ?? null;
+  const channelModel = channel && !refuseReplacements ? source.channelModels[channel] : void 0;
+  return channelModel ?? source.model ?? (marked == null ? void 0 : marked.model) ?? null;
 }
 function buildAgentModelOptions({
   source,
   channel,
   pinnedModel,
-  modelLabel
+  modelLabel,
+  refuseReplacements = false
 }) {
   const options = [];
   const add = (model, label) => {
@@ -101,7 +93,7 @@ function buildAgentModelOptions({
     );
   }
   if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));
-  const defaultModel = agentDefaultModel({ source, channel });
+  const defaultModel = agentDefaultModel({ source, channel, refuseReplacements });
   if (defaultModel !== null) {
     add(defaultModel, modelLabel(defaultModel));
     for (const option of options) option.isDefault = option.model === defaultModel;
@@ -112,8 +104,24 @@ function buildAgentModelOptions({
   }
   return { options, defaultModel };
 }
+function agentModelOptionsWithoutDefault({
+  source,
+  channel,
+  pinnedModel,
+  modelLabel
+}) {
+  const { options } = buildAgentModelOptions({
+    source,
+    channel,
+    pinnedModel,
+    modelLabel,
+    refuseReplacements: true
+  });
+  return { options: options.map((option) => ({ ...option, isDefault: false })), defaultModel: null };
+}
 exports.agentAssetIdOf = agentAssetIdOf;
 exports.agentDefaultModel = agentDefaultModel;
+exports.agentModelOptionsWithoutDefault = agentModelOptionsWithoutDefault;
 exports.allowsAnyModel = allowsAnyModel;
 exports.buildAgentModelOptions = buildAgentModelOptions;
 exports.isAutomaticModelLabel = isAutomaticModelLabel;

package/dist/catalog/agent-model-options.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-model-options.cjs","sources":["../../src/catalog/agent-model-options.ts"],"sourcesContent":["import { parseCollabAgentRef } from '../runtime/statewire-run-config';\n\n/**\n * A collab agent's own model choices, from its published definition: exactly\n * the models its author listed (the agent editor's Models section), the\n * default marked. The rules are Athena's own composer's (Olympus) and the\n * Jevin app's, so every host offers the same choices for one agent:\n *\n * - the options are the agent's labeled models, by the author's labels; an\n *   automatic name (empty, the editor's old `{ id: 'default', label: 'Default' }`,\n *   or one that only restates the model) shows the model's catalog label;\n * - a legacy agent with no labeled list offers its single `model`;\n * - the session channel's model override (`channelOverrides[channel].model`)\n *   is that channel's default, added when the list lacks it;\n * - a model the thread pins that is none of the agent's models is shown as it\n *   is (`pinnedOutside`), never replaced.\n *\n * Restricting a picker to these choices is opt-in per agent: only an agent\n * whose \"Allow any workspace model\" switch is off (`allowAnyModel: false`)\n * does; every other agent keeps the workspace's models.\n *\n * Pure, for `useAthenaAgentModelOptions` and the tests.\n */\n\n/** One model choice of a collab agent. */\nexport interface AthenaAgentModelOption {\n  /** The model id a send carries (`model`). */\n  model: string;\n  /** The author's label, or the model's catalog label for an automatic name. */\n  label: string;\n  /** The model the thread runs while it pins none (the agent's own, or its channel's). */\n  isDefault: boolean;\n  /**\n   * A model the thread's server config pins that is none of the agent's models\n   * (pinned by another client, or by an older picker): shown, never replaced.\n   */\n  pinnedOutside: boolean;\n}\n\n/** One entry of the agent's labeled model list. */\nexport interface AgentLabeledModel {\n  id: string;\n  model: string;\n  label: string;\n  isDefault: boolean;\n}\n\n/** What an agent's published definition says about its models. */\nexport interface AgentModelSource {\n  /** The model the definition runs (`config.model`); `null` when it names none. */\n  model: string | null;\n  /** The labeled list (`config.models`), complete rows only, in the author's order. */\n  models: readonly AgentLabeledModel[];\n  /** Per-channel model overrides (`channelOverrides[<channel>].model`), by channel id. */\n  channelModels: Readonly<Record<string, string>>;\n  /**\n   * Whether people may pick any workspace model (`config.allowAnyModel`, the\n   * agent editor's \"Allow any workspace model\" switch; see\n   * {@link allowsAnyModel}). Only `false` restricts a picker to the agent's\n   * own models.\n   */\n  allowAnyModel: boolean;\n}\n\n/**\n * Whether a config's `allowAnyModel` value lets people pick any model: only an\n * explicit `false` restricts; absent, `null`, `true` and any non-boolean allow\n * (agora's `collab_agent_allows_any_model`), so every agent saved before the\n * switch existed behaves as it always has.\n */\nexport function allowsAnyModel(value: unknown): boolean {\n  return value !== false;\n}\n\n/** The display label of a model id; the id itself when the catalog does not know it. */\nexport type ModelLabelOf = (model: string) => string;\n\n/** The row the agent editor used to create for an agent with no stored entries. */\nconst LEGACY_DEFAULT_ENTRY_ID = 'default';\nconst LEGACY_DEFAULT_ENTRY_LABEL = 'Default';\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\nconst nonBlank = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : null;\n\n/**\n * The collab agent's asset id for an `agent` value: a `collab_agent:<id>` ref\n * (the provider's `agent` shape) or the bare asset id (the agent picker's\n * value). `null` for a blank value.\n */\nexport function agentAssetIdOf(agent: string | null | undefined): string | null {\n  const trimmed = nonBlank(agent);\n  if (trimmed === null) return null;\n  return parseCollabAgentRef(trimmed) ?? (trimmed.includes(':') ? null : trimmed);\n}\n\n/** A stored `models` value: an array of rows, JSON-encoded or not; malformed rows dropped. */\nfunction labeledModelsOf(value: unknown): AgentLabeledModel[] {\n  let rows: unknown = value;\n  if (typeof rows === 'string') {\n    try {\n      rows = JSON.parse(rows);\n    } catch {\n      return [];\n    }\n  }\n  if (!Array.isArray(rows)) return [];\n  const entries: AgentLabeledModel[] = [];\n  for (const row of rows) {\n    if (!isRecord(row)) continue;\n    const model = nonBlank(row.model);\n    if (model === null) continue;\n    entries.push({\n      id: typeof row.id === 'string' && row.id !== '' ? row.id : model,\n      model,\n      label: nonBlank(row.label) ?? model,\n      isDefault: row.isDefault === true,\n    });\n  }\n  return entries;\n}\n\n/** A stored `channelOverrides` value's per-channel models. */\nfunction channelModelsOf(value: unknown): Record<string, string> {\n  if (!isRecord(value)) return {};\n  const out: Record<string, string> = {};\n  for (const [channel, override] of Object.entries(value)) {\n    const model = isRecord(override) ? nonBlank(override.model) : null;\n    if (model !== null) out[channel] = model;\n  }\n  return out;\n}\n\n/** Whether the agent asset's `athena_metadata` points at a published version. */\nexport function isPublishedAgent(athenaMetadata: unknown): boolean {\n  if (!isRecord(athenaMetadata)) return false;\n  const versionId = athenaMetadata.published_version_id;\n  return (\n    (typeof versionId === 'string' && versionId !== '') ||\n    (typeof versionId === 'number' && Number.isFinite(versionId))\n  );\n}\n\n/**\n * The model source of the agent's PUBLISHED definition, which every SDK run\n * compiles, from the agent asset's `athena_metadata` (publish writes\n * `published_config` beside `published_version_id`). `null` for an agent\n * that was never published, or whose published definition names no model\n * (not even a channel's).\n */\nexport function publishedAgentModelSource(athenaMetadata: unknown): AgentModelSource | null {\n  if (!isRecord(athenaMetadata) || !isPublishedAgent(athenaMetadata)) return null;\n  const config = athenaMetadata.published_config;\n  if (!isRecord(config)) return null;\n  const source: AgentModelSource = {\n    model: nonBlank(config.model),\n    models: labeledModelsOf(config.models),\n    channelModels: channelModelsOf(config.channelOverrides),\n    // The editor stores the field name; agora also accepts its snake-case alias.\n    allowAnyModel: allowsAnyModel(\n      Object.hasOwn(config, 'allowAnyModel') ? config.allowAnyModel : config.allow_any_model,\n    ),\n  };\n  const namesAModel =\n    source.model !== null ||\n    source.models.length > 0 ||\n    Object.keys(source.channelModels).length > 0;\n  return namesAModel ? source : null;\n}\n\n/**\n * Whether an entry's name is automatic: empty, the editor's old \"Default\", or\n * a name that only restates the entry's model (its id or catalog label).\n */\nexport function isAutomaticModelLabel({\n  entry,\n  modelLabel,\n}: {\n  entry: Pick<AgentLabeledModel, 'id' | 'model' | 'label'>;\n  modelLabel: ModelLabelOf;\n}): boolean {\n  const label = entry.label.trim();\n  if (label === '') return true;\n  if (entry.id === LEGACY_DEFAULT_ENTRY_ID && label === LEGACY_DEFAULT_ENTRY_LABEL) return true;\n  return label === entry.model || label === modelLabel(entry.model);\n}\n\n/**\n * The model a thread runs while it pins none: the channel's override, else the\n * definition's `model`, else its marked (or first) labeled entry.\n */\nexport function agentDefaultModel({\n  source,\n  channel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n}): string | null {\n  const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];\n  return (channel ? source.channelModels[channel] : undefined) ?? source.model ?? marked?.model ?? null;\n}\n\n/**\n * The agent's model choices and its default, by the rules above. Options keep\n * the author's order, one per model (the first entry of a model names it); the\n * default is marked, and appended when the list lacks it; a pinned model\n * outside the list comes last.\n */\nexport function buildAgentModelOptions({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The model the thread's server config pins; `null` while it pins none (or is unknown). */\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n}): { options: AthenaAgentModelOption[]; defaultModel: string | null } {\n  const options: AthenaAgentModelOption[] = [];\n  const add = (model: string, label: string) => {\n    if (options.some((option) => option.model === model)) return;\n    options.push({ model, label, isDefault: false, pinnedOutside: false });\n  };\n  for (const entry of source.models) {\n    add(\n      entry.model,\n      isAutomaticModelLabel({ entry, modelLabel }) ? modelLabel(entry.model) : entry.label.trim(),\n    );\n  }\n  if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));\n\n  const defaultModel = agentDefaultModel({ source, channel });\n  if (defaultModel !== null) {\n    add(defaultModel, modelLabel(defaultModel));\n    for (const option of options) option.isDefault = option.model === defaultModel;\n  }\n\n  const pinned = nonBlank(pinnedModel);\n  if (pinned !== null && !options.some((option) => option.model === pinned)) {\n    options.push({ model: pinned, label: modelLabel(pinned), isDefault: false, pinnedOutside: true });\n  }\n  return { options, defaultModel };\n}\n"],"names":["parseCollabAgentRef"],"mappings":";;;AAsEO,SAAS,eAAe,OAAyB;AACtD,SAAO,UAAU;AACnB;AAMA,MAAM,0BAA0B;AAChC,MAAM,6BAA6B;AAEnC,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,KAAK,MAAM,KAAA,IAAS;AAO7D,SAAS,eAAe,OAAiD;AAC9E,QAAM,UAAU,SAAS,KAAK;AAC9B,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAOA,mBAAAA,oBAAoB,OAAO,MAAM,QAAQ,SAAS,GAAG,IAAI,OAAO;AACzE;AAGA,SAAS,gBAAgB,OAAqC;AAC5D,MAAI,OAAgB;AACpB,MAAI,OAAO,SAAS,UAAU;AAC5B,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,CAAA;AACjC,QAAM,UAA+B,CAAA;AACrC,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,SAAS,GAAG,EAAG;AACpB,UAAM,QAAQ,SAAS,IAAI,KAAK;AAChC,QAAI,UAAU,KAAM;AACpB,YAAQ,KAAK;AAAA,MACX,IAAI,OAAO,IAAI,OAAO,YAAY,IAAI,OAAO,KAAK,IAAI,KAAK;AAAA,MAC3D;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,KAAK;AAAA,MAC9B,WAAW,IAAI,cAAc;AAAA,IAAA,CAC9B;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,gBAAgB,OAAwC;AAC/D,MAAI,CAAC,SAAS,KAAK,UAAU,CAAA;AAC7B,QAAM,MAA8B,CAAA;AACpC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,UAAM,QAAQ,SAAS,QAAQ,IAAI,SAAS,SAAS,KAAK,IAAI;AAC9D,QAAI,UAAU,KAAM,KAAI,OAAO,IAAI;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,gBAAkC;AACjE,MAAI,CAAC,SAAS,cAAc,EAAG,QAAO;AACtC,QAAM,YAAY,eAAe;AACjC,SACG,OAAO,cAAc,YAAY,cAAc,MAC/C,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS;AAE/D;AASO,SAAS,0BAA0B,gBAAkD;AAC1F,MAAI,CAAC,SAAS,cAAc,KAAK,CAAC,iBAAiB,cAAc,EAAG,QAAO;AAC3E,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,SAA2B;AAAA,IAC/B,OAAO,SAAS,OAAO,KAAK;AAAA,IAC5B,QAAQ,gBAAgB,OAAO,MAAM;AAAA,IACrC,eAAe,gBAAgB,OAAO,gBAAgB;AAAA;AAAA,IAEtD,eAAe;AAAA,MACb,OAAO,OAAO,QAAQ,eAAe,IAAI,OAAO,gBAAgB,OAAO;AAAA,IAAA;AAAA,EACzE;AAEF,QAAM,cACJ,OAAO,UAAU,QACjB,OAAO,OAAO,SAAS,KACvB,OAAO,KAAK,OAAO,aAAa,EAAE,SAAS;AAC7C,SAAO,cAAc,SAAS;AAChC;AAMO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,QAAM,QAAQ,MAAM,MAAM,KAAA;AAC1B,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,MAAM,OAAO,2BAA2B,UAAU,2BAA4B,QAAO;AACzF,SAAO,UAAU,MAAM,SAAS,UAAU,WAAW,MAAM,KAAK;AAClE;AAMO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AACF,GAGkB;AAChB,QAAM,SAAS,OAAO,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK,OAAO,OAAO,CAAC;AAChF,UAAQ,UAAU,OAAO,cAAc,OAAO,IAAI,WAAc,OAAO,UAAS,iCAAQ,UAAS;AACnG;AAQO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMuE;AACrE,QAAM,UAAoC,CAAA;AAC1C,QAAM,MAAM,CAAC,OAAe,UAAkB;AAC5C,QAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,EAAG;AACtD,YAAQ,KAAK,EAAE,OAAO,OAAO,WAAW,OAAO,eAAe,OAAO;AAAA,EACvE;AACA,aAAW,SAAS,OAAO,QAAQ;AACjC;AAAA,MACE,MAAM;AAAA,MACN,sBAAsB,EAAE,OAAO,WAAA,CAAY,IAAI,WAAW,MAAM,KAAK,IAAI,MAAM,MAAM,KAAA;AAAA,IAAK;AAAA,EAE9F;AACA,MAAI,QAAQ,WAAW,KAAK,OAAO,UAAU,KAAM,KAAI,OAAO,OAAO,WAAW,OAAO,KAAK,CAAC;AAE7F,QAAM,eAAe,kBAAkB,EAAE,QAAQ,SAAS;AAC1D,MAAI,iBAAiB,MAAM;AACzB,QAAI,cAAc,WAAW,YAAY,CAAC;AAC1C,eAAW,UAAU,QAAS,QAAO,YAAY,OAAO,UAAU;AAAA,EACpE;AAEA,QAAM,SAAS,SAAS,WAAW;AACnC,MAAI,WAAW,QAAQ,CAAC,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,GAAG;AACzE,YAAQ,KAAK,EAAE,OAAO,QAAQ,OAAO,WAAW,MAAM,GAAG,WAAW,OAAO,eAAe,KAAA,CAAM;AAAA,EAClG;AACA,SAAO,EAAE,SAAS,aAAA;AACpB;;;;;;;;"}
+{"version":3,"file":"agent-model-options.cjs","sources":["../../src/catalog/agent-model-options.ts"],"sourcesContent":["import { normalizeCatalogAgentModelEntries } from '@athenaintel/agent-runtime/runtime-catalog';\nimport { parseCollabAgentRef } from '../runtime/statewire-run-config';\n\n/**\n * A collab agent's own model choices, from its published definition: exactly\n * the models its author listed (the agent editor's Models section), the\n * default marked. The rules are Athena's own composer's (Olympus) and the\n * Jevin app's, so every host offers the same choices for one agent:\n *\n * - the options are the agent's labeled models, by the author's labels; an\n *   automatic name (empty, the editor's old `{ id: 'default', label: 'Default' }`,\n *   or one that only restates the model) shows the model's catalog label;\n * - a legacy agent with no labeled list offers its single `model`;\n * - the session channel's model override (`channelOverrides[channel].model`)\n *   is that channel's default, added when the list lacks it, until the\n *   deployment's refusal day (identity v7 D12, `channel-refusal.ts`): from it\n *   agora drops a channel's model at every compile, so the agent's own model is\n *   the default on every channel;\n * - a model the thread pins that is none of the agent's models is shown as it\n *   is (`pinnedOutside`), never replaced.\n *\n * Restricting a picker to these choices is opt-in per agent: only an agent\n * whose \"Allow any workspace model\" switch is off (`allowAnyModel: false`)\n * does; every other agent keeps the workspace's models.\n *\n * Pure, for `useAthenaAgentModelOptions` and the tests.\n */\n\n/** One model choice of a collab agent. */\nexport interface AthenaAgentModelOption {\n  /** The model id a send carries (`model`). */\n  model: string;\n  /** The author's label, or the model's catalog label for an automatic name. */\n  label: string;\n  /**\n   * The model the thread runs while it pins none: the agent's own, or its channel's until the\n   * deployment's refusal day.\n   */\n  isDefault: boolean;\n  /**\n   * A model the thread's server config pins that is none of the agent's models\n   * (pinned by another client, or by an older picker): shown, never replaced.\n   */\n  pinnedOutside: boolean;\n}\n\n/** One entry of the agent's labeled model list. */\nexport interface AgentLabeledModel {\n  id: string;\n  model: string;\n  label: string;\n  isDefault: boolean;\n}\n\n/** What an agent's published definition says about its models. */\nexport interface AgentModelSource {\n  /** The model the definition runs (`config.model`); `null` when it names none. */\n  model: string | null;\n  /** The labeled list (`config.models`), complete rows only, in the author's order. */\n  models: readonly AgentLabeledModel[];\n  /** Per-channel model overrides (`channelOverrides[<channel>].model`), by channel id. */\n  channelModels: Readonly<Record<string, string>>;\n  /**\n   * Whether people may pick any workspace model (`config.allowAnyModel`, the\n   * agent editor's \"Allow any workspace model\" switch; see\n   * {@link allowsAnyModel}). Only `false` restricts a picker to the agent's\n   * own models.\n   */\n  allowAnyModel: boolean;\n}\n\n/**\n * Whether a config's `allowAnyModel` value lets people pick any model: only an\n * explicit `false` restricts; absent, `null`, `true` and any non-boolean allow\n * (agora's `collab_agent_allows_any_model`), so every agent saved before the\n * switch existed behaves as it always has.\n */\nexport function allowsAnyModel(value: unknown): boolean {\n  return value !== false;\n}\n\n/** The display label of a model id; the id itself when the catalog does not know it. */\nexport type ModelLabelOf = (model: string) => string;\n\n/** The row the agent editor used to create for an agent with no stored entries. */\nconst LEGACY_DEFAULT_ENTRY_ID = 'default';\nconst LEGACY_DEFAULT_ENTRY_LABEL = 'Default';\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\nconst nonBlank = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : null;\n\n/**\n * The collab agent's asset id for an `agent` value: a `collab_agent:<id>` ref\n * (the provider's `agent` shape) or the bare asset id (the agent picker's\n * value). `null` for a blank value.\n */\nexport function agentAssetIdOf(agent: string | null | undefined): string | null {\n  const trimmed = nonBlank(agent);\n  if (trimmed === null) return null;\n  return parseCollabAgentRef(trimmed) ?? (trimmed.includes(':') ? null : trimmed);\n}\n\n/** A stored `models` value: an array of rows, JSON-encoded or not; malformed rows dropped. */\nfunction labeledModelsOf(value: unknown): AgentLabeledModel[] {\n  let rows: unknown = value;\n  if (typeof rows === 'string') {\n    try {\n      rows = JSON.parse(rows);\n    } catch {\n      return [];\n    }\n  }\n  if (!Array.isArray(rows)) return [];\n  return normalizeCatalogAgentModelEntries({ rows: Array.from(rows).filter(isRecord) });\n}\n\n/** A stored `channelOverrides` value's per-channel models. */\nfunction channelModelsOf(value: unknown): Record<string, string> {\n  if (!isRecord(value)) return {};\n  const out: Record<string, string> = {};\n  for (const [channel, override] of Object.entries(value)) {\n    const model = isRecord(override) ? nonBlank(override.model) : null;\n    if (model !== null) out[channel] = model;\n  }\n  return out;\n}\n\n/** Whether the agent asset's `athena_metadata` points at a published version. */\nexport function isPublishedAgent(athenaMetadata: unknown): boolean {\n  if (!isRecord(athenaMetadata)) return false;\n  const versionId = athenaMetadata.published_version_id;\n  return (\n    (typeof versionId === 'string' && versionId !== '') ||\n    (typeof versionId === 'number' && Number.isFinite(versionId))\n  );\n}\n\n/**\n * The model source of the agent's PUBLISHED definition, which every SDK run\n * compiles, from the agent asset's `athena_metadata` (publish writes\n * `published_config` beside `published_version_id`). `null` for an agent\n * that was never published, or whose published definition names no model\n * (not even a channel's).\n */\nexport function publishedAgentModelSource(athenaMetadata: unknown): AgentModelSource | null {\n  if (!isRecord(athenaMetadata) || !isPublishedAgent(athenaMetadata)) return null;\n  const config = athenaMetadata.published_config;\n  if (!isRecord(config)) return null;\n  const source: AgentModelSource = {\n    model: nonBlank(config.model),\n    models: labeledModelsOf(config.models),\n    channelModels: channelModelsOf(config.channelOverrides),\n    // The editor stores the field name; agora also accepts its snake-case alias.\n    allowAnyModel: allowsAnyModel(\n      Object.hasOwn(config, 'allowAnyModel') ? config.allowAnyModel : config.allow_any_model,\n    ),\n  };\n  const namesAModel =\n    source.model !== null ||\n    source.models.length > 0 ||\n    Object.keys(source.channelModels).length > 0;\n  return namesAModel ? source : null;\n}\n\n/**\n * Whether an entry's name is automatic: empty, the editor's old \"Default\", or\n * a name that only restates the entry's model (its id or catalog label).\n */\nexport function isAutomaticModelLabel({\n  entry,\n  modelLabel,\n}: {\n  entry: Pick<AgentLabeledModel, 'id' | 'model' | 'label'>;\n  modelLabel: ModelLabelOf;\n}): boolean {\n  const label = entry.label.trim();\n  if (label === '') return true;\n  if (entry.id === LEGACY_DEFAULT_ENTRY_ID && label === LEGACY_DEFAULT_ENTRY_LABEL) return true;\n  return label === entry.model || label === modelLabel(entry.model);\n}\n\n/**\n * The model a thread runs while it pins none: the channel's override, else the\n * definition's `model`, else its marked (or first) labeled entry.\n *\n * From the deployment's refusal day (`refuseReplacements`, identity v7 D12) no\n * channel's model applies: agora's compile drops a layer's `model` whatever it\n * names (`refused_text_layer`), so the agent's own runs. That is what agora's\n * shared cases (`agora/agora/services/agent_config/channel_refusal_contract.json`)\n * say of every layer that names a model, and `channel-refusal-contract.test.ts`\n * holds this to them; which settings replace the agent stays the server's to say.\n */\nexport function agentDefaultModel({\n  source,\n  channel,\n  refuseReplacements = false,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */\n  refuseReplacements?: boolean;\n}): string | null {\n  const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];\n  const channelModel = channel && !refuseReplacements ? source.channelModels[channel] : undefined;\n  return channelModel ?? source.model ?? marked?.model ?? null;\n}\n\n/**\n * The agent's model choices and its default, by the rules above. Options keep\n * the author's order, one per model (the first entry of a model names it); the\n * default is marked, and appended when the list lacks it; a pinned model\n * outside the list comes last. From the refusal day (`refuseReplacements`) a\n * channel's model is offered only when the agent lists it, or the thread pins it.\n */\nexport function buildAgentModelOptions({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n  refuseReplacements = false,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The model the thread's server config pins; `null` while it pins none (or is unknown). */\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n  /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */\n  refuseReplacements?: boolean;\n}): { options: AthenaAgentModelOption[]; defaultModel: string | null } {\n  const options: AthenaAgentModelOption[] = [];\n  const add = (model: string, label: string) => {\n    if (options.some((option) => option.model === model)) return;\n    options.push({ model, label, isDefault: false, pinnedOutside: false });\n  };\n  for (const entry of source.models) {\n    add(\n      entry.model,\n      isAutomaticModelLabel({ entry, modelLabel }) ? modelLabel(entry.model) : entry.label.trim(),\n    );\n  }\n  if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));\n\n  const defaultModel = agentDefaultModel({ source, channel, refuseReplacements });\n  if (defaultModel !== null) {\n    add(defaultModel, modelLabel(defaultModel));\n    for (const option of options) option.isDefault = option.model === defaultModel;\n  }\n\n  const pinned = nonBlank(pinnedModel);\n  if (pinned !== null && !options.some((option) => option.model === pinned)) {\n    options.push({ model: pinned, label: modelLabel(pinned), isDefault: false, pinnedOutside: true });\n  }\n  return { options, defaultModel };\n}\n\n/**\n * The agent's choices while its default can't be named yet (a chat on a channel, before the\n * deployment's refusal day is known): its own models only, the restriction they make kept, none\n * marked default and no default named. A channel's model joins only once the day says it still\n * applies; a model the thread pins is shown as always.\n */\nexport function agentModelOptionsWithoutDefault({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n}): { options: AthenaAgentModelOption[]; defaultModel: null } {\n  const { options } = buildAgentModelOptions({\n    source,\n    channel,\n    pinnedModel,\n    modelLabel,\n    refuseReplacements: true,\n  });\n  return { options: options.map((option) => ({ ...option, isDefault: false })), defaultModel: null };\n}\n"],"names":["parseCollabAgentRef","normalizeCatalogAgentModelEntries"],"mappings":";;;;AA6EO,SAAS,eAAe,OAAyB;AACtD,SAAO,UAAU;AACnB;AAMA,MAAM,0BAA0B;AAChC,MAAM,6BAA6B;AAEnC,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,KAAK,MAAM,KAAA,IAAS;AAO7D,SAAS,eAAe,OAAiD;AAC9E,QAAM,UAAU,SAAS,KAAK;AAC9B,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAOA,mBAAAA,oBAAoB,OAAO,MAAM,QAAQ,SAAS,GAAG,IAAI,OAAO;AACzE;AAGA,SAAS,gBAAgB,OAAqC;AAC5D,MAAI,OAAgB;AACpB,MAAI,OAAO,SAAS,UAAU;AAC5B,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,CAAA;AACjC,SAAOC,eAAAA,kCAAkC,EAAE,MAAM,MAAM,KAAK,IAAI,EAAE,OAAO,QAAQ,GAAG;AACtF;AAGA,SAAS,gBAAgB,OAAwC;AAC/D,MAAI,CAAC,SAAS,KAAK,UAAU,CAAA;AAC7B,QAAM,MAA8B,CAAA;AACpC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,UAAM,QAAQ,SAAS,QAAQ,IAAI,SAAS,SAAS,KAAK,IAAI;AAC9D,QAAI,UAAU,KAAM,KAAI,OAAO,IAAI;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,gBAAkC;AACjE,MAAI,CAAC,SAAS,cAAc,EAAG,QAAO;AACtC,QAAM,YAAY,eAAe;AACjC,SACG,OAAO,cAAc,YAAY,cAAc,MAC/C,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS;AAE/D;AASO,SAAS,0BAA0B,gBAAkD;AAC1F,MAAI,CAAC,SAAS,cAAc,KAAK,CAAC,iBAAiB,cAAc,EAAG,QAAO;AAC3E,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,SAA2B;AAAA,IAC/B,OAAO,SAAS,OAAO,KAAK;AAAA,IAC5B,QAAQ,gBAAgB,OAAO,MAAM;AAAA,IACrC,eAAe,gBAAgB,OAAO,gBAAgB;AAAA;AAAA,IAEtD,eAAe;AAAA,MACb,OAAO,OAAO,QAAQ,eAAe,IAAI,OAAO,gBAAgB,OAAO;AAAA,IAAA;AAAA,EACzE;AAEF,QAAM,cACJ,OAAO,UAAU,QACjB,OAAO,OAAO,SAAS,KACvB,OAAO,KAAK,OAAO,aAAa,EAAE,SAAS;AAC7C,SAAO,cAAc,SAAS;AAChC;AAMO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,QAAM,QAAQ,MAAM,MAAM,KAAA;AAC1B,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,MAAM,OAAO,2BAA2B,UAAU,2BAA4B,QAAO;AACzF,SAAO,UAAU,MAAM,SAAS,UAAU,WAAW,MAAM,KAAK;AAClE;AAaO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,qBAAqB;AACvB,GAKkB;AAChB,QAAM,SAAS,OAAO,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK,OAAO,OAAO,CAAC;AAChF,QAAM,eAAe,WAAW,CAAC,qBAAqB,OAAO,cAAc,OAAO,IAAI;AACtF,SAAO,gBAAgB,OAAO,UAAS,iCAAQ,UAAS;AAC1D;AASO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,qBAAqB;AACvB,GAQuE;AACrE,QAAM,UAAoC,CAAA;AAC1C,QAAM,MAAM,CAAC,OAAe,UAAkB;AAC5C,QAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,EAAG;AACtD,YAAQ,KAAK,EAAE,OAAO,OAAO,WAAW,OAAO,eAAe,OAAO;AAAA,EACvE;AACA,aAAW,SAAS,OAAO,QAAQ;AACjC;AAAA,MACE,MAAM;AAAA,MACN,sBAAsB,EAAE,OAAO,WAAA,CAAY,IAAI,WAAW,MAAM,KAAK,IAAI,MAAM,MAAM,KAAA;AAAA,IAAK;AAAA,EAE9F;AACA,MAAI,QAAQ,WAAW,KAAK,OAAO,UAAU,KAAM,KAAI,OAAO,OAAO,WAAW,OAAO,KAAK,CAAC;AAE7F,QAAM,eAAe,kBAAkB,EAAE,QAAQ,SAAS,oBAAoB;AAC9E,MAAI,iBAAiB,MAAM;AACzB,QAAI,cAAc,WAAW,YAAY,CAAC;AAC1C,eAAW,UAAU,QAAS,QAAO,YAAY,OAAO,UAAU;AAAA,EACpE;AAEA,QAAM,SAAS,SAAS,WAAW;AACnC,MAAI,WAAW,QAAQ,CAAC,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,GAAG;AACzE,YAAQ,KAAK,EAAE,OAAO,QAAQ,OAAO,WAAW,MAAM,GAAG,WAAW,OAAO,eAAe,KAAA,CAAM;AAAA,EAClG;AACA,SAAO,EAAE,SAAS,aAAA;AACpB;AAQO,SAAS,gCAAgC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAK8D;AAC5D,QAAM,EAAE,QAAA,IAAY,uBAAuB;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,EAAA,CACrB;AACD,SAAO,EAAE,SAAS,QAAQ,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,WAAW,MAAA,EAAQ,GAAG,cAAc,KAAA;AAC9F;;;;;;;;;"}

package/dist/catalog/agent-model-options.d.ts

@@ -9,7 +9,10 @@
  *   or one that only restates the model) shows the model's catalog label;
  * - a legacy agent with no labeled list offers its single `model`;
  * - the session channel's model override (`channelOverrides[channel].model`)
- *   is that channel's default, added when the list lacks it;
+ *   is that channel's default, added when the list lacks it, until the
+ *   deployment's refusal day (identity v7 D12, `channel-refusal.ts`): from it
+ *   agora drops a channel's model at every compile, so the agent's own model is
+ *   the default on every channel;
  * - a model the thread pins that is none of the agent's models is shown as it
  *   is (`pinnedOutside`), never replaced.
  *
@@ -25,7 +28,10 @@ export interface AthenaAgentModelOption {
     model: string;
     /** The author's label, or the model's catalog label for an automatic name. */
     label: string;
-    /** The model the thread runs while it pins none (the agent's own, or its channel's). */
+    /**
+     * The model the thread runs while it pins none: the agent's own, or its channel's until the
+     * deployment's refusal day.
+     */
     isDefault: boolean;
     /**
      * A model the thread's server config pins that is none of the agent's models
@@ -92,24 +98,51 @@ export declare function isAutomaticModelLabel({ entry, modelLabel, }: {
 /**
  * The model a thread runs while it pins none: the channel's override, else the
  * definition's `model`, else its marked (or first) labeled entry.
+ *
+ * From the deployment's refusal day (`refuseReplacements`, identity v7 D12) no
+ * channel's model applies: agora's compile drops a layer's `model` whatever it
+ * names (`refused_text_layer`), so the agent's own runs. That is what agora's
+ * shared cases (`agora/agora/services/agent_config/channel_refusal_contract.json`)
+ * say of every layer that names a model, and `channel-refusal-contract.test.ts`
+ * holds this to them; which settings replace the agent stays the server's to say.
  */
-export declare function agentDefaultModel({ source, channel, }: {
+export declare function agentDefaultModel({ source, channel, refuseReplacements, }: {
     source: AgentModelSource;
     channel: string | null;
+    /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */
+    refuseReplacements?: boolean;
 }): string | null;
 /**
  * The agent's model choices and its default, by the rules above. Options keep
  * the author's order, one per model (the first entry of a model names it); the
  * default is marked, and appended when the list lacks it; a pinned model
- * outside the list comes last.
+ * outside the list comes last. From the refusal day (`refuseReplacements`) a
+ * channel's model is offered only when the agent lists it, or the thread pins it.
  */
-export declare function buildAgentModelOptions({ source, channel, pinnedModel, modelLabel, }: {
+export declare function buildAgentModelOptions({ source, channel, pinnedModel, modelLabel, refuseReplacements, }: {
     source: AgentModelSource;
     channel: string | null;
     /** The model the thread's server config pins; `null` while it pins none (or is unknown). */
     pinnedModel: string | null;
     modelLabel: ModelLabelOf;
+    /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */
+    refuseReplacements?: boolean;
 }): {
     options: AthenaAgentModelOption[];
     defaultModel: string | null;
 };
+/**
+ * The agent's choices while its default can't be named yet (a chat on a channel, before the
+ * deployment's refusal day is known): its own models only, the restriction they make kept, none
+ * marked default and no default named. A channel's model joins only once the day says it still
+ * applies; a model the thread pins is shown as always.
+ */
+export declare function agentModelOptionsWithoutDefault({ source, channel, pinnedModel, modelLabel, }: {
+    source: AgentModelSource;
+    channel: string | null;
+    pinnedModel: string | null;
+    modelLabel: ModelLabelOf;
+}): {
+    options: AthenaAgentModelOption[];
+    defaultModel: null;
+};

package/dist/catalog/agent-model-options.js

@@ -1,3 +1,4 @@
+import { normalizeCatalogAgentModelEntries } from "../agent-runtime/src/runtime-catalog.js";
 import { parseCollabAgentRef } from "../runtime/statewire-run-config.js";
 function allowsAnyModel(value) {
   return value !== false;
@@ -21,19 +22,7 @@ function labeledModelsOf(value) {
     }
   }
   if (!Array.isArray(rows)) return [];
-  const entries = [];
-  for (const row of rows) {
-    if (!isRecord(row)) continue;
-    const model = nonBlank(row.model);
-    if (model === null) continue;
-    entries.push({
-      id: typeof row.id === "string" && row.id !== "" ? row.id : model,
-      model,
-      label: nonBlank(row.label) ?? model,
-      isDefault: row.isDefault === true
-    });
-  }
-  return entries;
+  return normalizeCatalogAgentModelEntries({ rows: Array.from(rows).filter(isRecord) });
 }
 function channelModelsOf(value) {
   if (!isRecord(value)) return {};
@@ -76,16 +65,19 @@ function isAutomaticModelLabel({
 }
 function agentDefaultModel({
   source,
-  channel
+  channel,
+  refuseReplacements = false
 }) {
   const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];
-  return (channel ? source.channelModels[channel] : void 0) ?? source.model ?? (marked == null ? void 0 : marked.model) ?? null;
+  const channelModel = channel && !refuseReplacements ? source.channelModels[channel] : void 0;
+  return channelModel ?? source.model ?? (marked == null ? void 0 : marked.model) ?? null;
 }
 function buildAgentModelOptions({
   source,
   channel,
   pinnedModel,
-  modelLabel
+  modelLabel,
+  refuseReplacements = false
 }) {
   const options = [];
   const add = (model, label) => {
@@ -99,7 +91,7 @@ function buildAgentModelOptions({
     );
   }
   if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));
-  const defaultModel = agentDefaultModel({ source, channel });
+  const defaultModel = agentDefaultModel({ source, channel, refuseReplacements });
   if (defaultModel !== null) {
     add(defaultModel, modelLabel(defaultModel));
     for (const option of options) option.isDefault = option.model === defaultModel;
@@ -110,9 +102,25 @@ function buildAgentModelOptions({
   }
   return { options, defaultModel };
 }
+function agentModelOptionsWithoutDefault({
+  source,
+  channel,
+  pinnedModel,
+  modelLabel
+}) {
+  const { options } = buildAgentModelOptions({
+    source,
+    channel,
+    pinnedModel,
+    modelLabel,
+    refuseReplacements: true
+  });
+  return { options: options.map((option) => ({ ...option, isDefault: false })), defaultModel: null };
+}
 export {
   agentAssetIdOf,
   agentDefaultModel,
+  agentModelOptionsWithoutDefault,
   allowsAnyModel,
   buildAgentModelOptions,
   isAutomaticModelLabel,

package/dist/catalog/agent-model-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-model-options.js","sources":["../../src/catalog/agent-model-options.ts"],"sourcesContent":["import { parseCollabAgentRef } from '../runtime/statewire-run-config';\n\n/**\n * A collab agent's own model choices, from its published definition: exactly\n * the models its author listed (the agent editor's Models section), the\n * default marked. The rules are Athena's own composer's (Olympus) and the\n * Jevin app's, so every host offers the same choices for one agent:\n *\n * - the options are the agent's labeled models, by the author's labels; an\n *   automatic name (empty, the editor's old `{ id: 'default', label: 'Default' }`,\n *   or one that only restates the model) shows the model's catalog label;\n * - a legacy agent with no labeled list offers its single `model`;\n * - the session channel's model override (`channelOverrides[channel].model`)\n *   is that channel's default, added when the list lacks it;\n * - a model the thread pins that is none of the agent's models is shown as it\n *   is (`pinnedOutside`), never replaced.\n *\n * Restricting a picker to these choices is opt-in per agent: only an agent\n * whose \"Allow any workspace model\" switch is off (`allowAnyModel: false`)\n * does; every other agent keeps the workspace's models.\n *\n * Pure, for `useAthenaAgentModelOptions` and the tests.\n */\n\n/** One model choice of a collab agent. */\nexport interface AthenaAgentModelOption {\n  /** The model id a send carries (`model`). */\n  model: string;\n  /** The author's label, or the model's catalog label for an automatic name. */\n  label: string;\n  /** The model the thread runs while it pins none (the agent's own, or its channel's). */\n  isDefault: boolean;\n  /**\n   * A model the thread's server config pins that is none of the agent's models\n   * (pinned by another client, or by an older picker): shown, never replaced.\n   */\n  pinnedOutside: boolean;\n}\n\n/** One entry of the agent's labeled model list. */\nexport interface AgentLabeledModel {\n  id: string;\n  model: string;\n  label: string;\n  isDefault: boolean;\n}\n\n/** What an agent's published definition says about its models. */\nexport interface AgentModelSource {\n  /** The model the definition runs (`config.model`); `null` when it names none. */\n  model: string | null;\n  /** The labeled list (`config.models`), complete rows only, in the author's order. */\n  models: readonly AgentLabeledModel[];\n  /** Per-channel model overrides (`channelOverrides[<channel>].model`), by channel id. */\n  channelModels: Readonly<Record<string, string>>;\n  /**\n   * Whether people may pick any workspace model (`config.allowAnyModel`, the\n   * agent editor's \"Allow any workspace model\" switch; see\n   * {@link allowsAnyModel}). Only `false` restricts a picker to the agent's\n   * own models.\n   */\n  allowAnyModel: boolean;\n}\n\n/**\n * Whether a config's `allowAnyModel` value lets people pick any model: only an\n * explicit `false` restricts; absent, `null`, `true` and any non-boolean allow\n * (agora's `collab_agent_allows_any_model`), so every agent saved before the\n * switch existed behaves as it always has.\n */\nexport function allowsAnyModel(value: unknown): boolean {\n  return value !== false;\n}\n\n/** The display label of a model id; the id itself when the catalog does not know it. */\nexport type ModelLabelOf = (model: string) => string;\n\n/** The row the agent editor used to create for an agent with no stored entries. */\nconst LEGACY_DEFAULT_ENTRY_ID = 'default';\nconst LEGACY_DEFAULT_ENTRY_LABEL = 'Default';\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\nconst nonBlank = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : null;\n\n/**\n * The collab agent's asset id for an `agent` value: a `collab_agent:<id>` ref\n * (the provider's `agent` shape) or the bare asset id (the agent picker's\n * value). `null` for a blank value.\n */\nexport function agentAssetIdOf(agent: string | null | undefined): string | null {\n  const trimmed = nonBlank(agent);\n  if (trimmed === null) return null;\n  return parseCollabAgentRef(trimmed) ?? (trimmed.includes(':') ? null : trimmed);\n}\n\n/** A stored `models` value: an array of rows, JSON-encoded or not; malformed rows dropped. */\nfunction labeledModelsOf(value: unknown): AgentLabeledModel[] {\n  let rows: unknown = value;\n  if (typeof rows === 'string') {\n    try {\n      rows = JSON.parse(rows);\n    } catch {\n      return [];\n    }\n  }\n  if (!Array.isArray(rows)) return [];\n  const entries: AgentLabeledModel[] = [];\n  for (const row of rows) {\n    if (!isRecord(row)) continue;\n    const model = nonBlank(row.model);\n    if (model === null) continue;\n    entries.push({\n      id: typeof row.id === 'string' && row.id !== '' ? row.id : model,\n      model,\n      label: nonBlank(row.label) ?? model,\n      isDefault: row.isDefault === true,\n    });\n  }\n  return entries;\n}\n\n/** A stored `channelOverrides` value's per-channel models. */\nfunction channelModelsOf(value: unknown): Record<string, string> {\n  if (!isRecord(value)) return {};\n  const out: Record<string, string> = {};\n  for (const [channel, override] of Object.entries(value)) {\n    const model = isRecord(override) ? nonBlank(override.model) : null;\n    if (model !== null) out[channel] = model;\n  }\n  return out;\n}\n\n/** Whether the agent asset's `athena_metadata` points at a published version. */\nexport function isPublishedAgent(athenaMetadata: unknown): boolean {\n  if (!isRecord(athenaMetadata)) return false;\n  const versionId = athenaMetadata.published_version_id;\n  return (\n    (typeof versionId === 'string' && versionId !== '') ||\n    (typeof versionId === 'number' && Number.isFinite(versionId))\n  );\n}\n\n/**\n * The model source of the agent's PUBLISHED definition, which every SDK run\n * compiles, from the agent asset's `athena_metadata` (publish writes\n * `published_config` beside `published_version_id`). `null` for an agent\n * that was never published, or whose published definition names no model\n * (not even a channel's).\n */\nexport function publishedAgentModelSource(athenaMetadata: unknown): AgentModelSource | null {\n  if (!isRecord(athenaMetadata) || !isPublishedAgent(athenaMetadata)) return null;\n  const config = athenaMetadata.published_config;\n  if (!isRecord(config)) return null;\n  const source: AgentModelSource = {\n    model: nonBlank(config.model),\n    models: labeledModelsOf(config.models),\n    channelModels: channelModelsOf(config.channelOverrides),\n    // The editor stores the field name; agora also accepts its snake-case alias.\n    allowAnyModel: allowsAnyModel(\n      Object.hasOwn(config, 'allowAnyModel') ? config.allowAnyModel : config.allow_any_model,\n    ),\n  };\n  const namesAModel =\n    source.model !== null ||\n    source.models.length > 0 ||\n    Object.keys(source.channelModels).length > 0;\n  return namesAModel ? source : null;\n}\n\n/**\n * Whether an entry's name is automatic: empty, the editor's old \"Default\", or\n * a name that only restates the entry's model (its id or catalog label).\n */\nexport function isAutomaticModelLabel({\n  entry,\n  modelLabel,\n}: {\n  entry: Pick<AgentLabeledModel, 'id' | 'model' | 'label'>;\n  modelLabel: ModelLabelOf;\n}): boolean {\n  const label = entry.label.trim();\n  if (label === '') return true;\n  if (entry.id === LEGACY_DEFAULT_ENTRY_ID && label === LEGACY_DEFAULT_ENTRY_LABEL) return true;\n  return label === entry.model || label === modelLabel(entry.model);\n}\n\n/**\n * The model a thread runs while it pins none: the channel's override, else the\n * definition's `model`, else its marked (or first) labeled entry.\n */\nexport function agentDefaultModel({\n  source,\n  channel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n}): string | null {\n  const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];\n  return (channel ? source.channelModels[channel] : undefined) ?? source.model ?? marked?.model ?? null;\n}\n\n/**\n * The agent's model choices and its default, by the rules above. Options keep\n * the author's order, one per model (the first entry of a model names it); the\n * default is marked, and appended when the list lacks it; a pinned model\n * outside the list comes last.\n */\nexport function buildAgentModelOptions({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The model the thread's server config pins; `null` while it pins none (or is unknown). */\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n}): { options: AthenaAgentModelOption[]; defaultModel: string | null } {\n  const options: AthenaAgentModelOption[] = [];\n  const add = (model: string, label: string) => {\n    if (options.some((option) => option.model === model)) return;\n    options.push({ model, label, isDefault: false, pinnedOutside: false });\n  };\n  for (const entry of source.models) {\n    add(\n      entry.model,\n      isAutomaticModelLabel({ entry, modelLabel }) ? modelLabel(entry.model) : entry.label.trim(),\n    );\n  }\n  if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));\n\n  const defaultModel = agentDefaultModel({ source, channel });\n  if (defaultModel !== null) {\n    add(defaultModel, modelLabel(defaultModel));\n    for (const option of options) option.isDefault = option.model === defaultModel;\n  }\n\n  const pinned = nonBlank(pinnedModel);\n  if (pinned !== null && !options.some((option) => option.model === pinned)) {\n    options.push({ model: pinned, label: modelLabel(pinned), isDefault: false, pinnedOutside: true });\n  }\n  return { options, defaultModel };\n}\n"],"names":[],"mappings":";AAsEO,SAAS,eAAe,OAAyB;AACtD,SAAO,UAAU;AACnB;AAMA,MAAM,0BAA0B;AAChC,MAAM,6BAA6B;AAEnC,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,KAAK,MAAM,KAAA,IAAS;AAO7D,SAAS,eAAe,OAAiD;AAC9E,QAAM,UAAU,SAAS,KAAK;AAC9B,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,oBAAoB,OAAO,MAAM,QAAQ,SAAS,GAAG,IAAI,OAAO;AACzE;AAGA,SAAS,gBAAgB,OAAqC;AAC5D,MAAI,OAAgB;AACpB,MAAI,OAAO,SAAS,UAAU;AAC5B,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,CAAA;AACjC,QAAM,UAA+B,CAAA;AACrC,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,SAAS,GAAG,EAAG;AACpB,UAAM,QAAQ,SAAS,IAAI,KAAK;AAChC,QAAI,UAAU,KAAM;AACpB,YAAQ,KAAK;AAAA,MACX,IAAI,OAAO,IAAI,OAAO,YAAY,IAAI,OAAO,KAAK,IAAI,KAAK;AAAA,MAC3D;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,KAAK;AAAA,MAC9B,WAAW,IAAI,cAAc;AAAA,IAAA,CAC9B;AAAA,EACH;AACA,SAAO;AACT;AAGA,SAAS,gBAAgB,OAAwC;AAC/D,MAAI,CAAC,SAAS,KAAK,UAAU,CAAA;AAC7B,QAAM,MAA8B,CAAA;AACpC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,UAAM,QAAQ,SAAS,QAAQ,IAAI,SAAS,SAAS,KAAK,IAAI;AAC9D,QAAI,UAAU,KAAM,KAAI,OAAO,IAAI;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,gBAAkC;AACjE,MAAI,CAAC,SAAS,cAAc,EAAG,QAAO;AACtC,QAAM,YAAY,eAAe;AACjC,SACG,OAAO,cAAc,YAAY,cAAc,MAC/C,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS;AAE/D;AASO,SAAS,0BAA0B,gBAAkD;AAC1F,MAAI,CAAC,SAAS,cAAc,KAAK,CAAC,iBAAiB,cAAc,EAAG,QAAO;AAC3E,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,SAA2B;AAAA,IAC/B,OAAO,SAAS,OAAO,KAAK;AAAA,IAC5B,QAAQ,gBAAgB,OAAO,MAAM;AAAA,IACrC,eAAe,gBAAgB,OAAO,gBAAgB;AAAA;AAAA,IAEtD,eAAe;AAAA,MACb,OAAO,OAAO,QAAQ,eAAe,IAAI,OAAO,gBAAgB,OAAO;AAAA,IAAA;AAAA,EACzE;AAEF,QAAM,cACJ,OAAO,UAAU,QACjB,OAAO,OAAO,SAAS,KACvB,OAAO,KAAK,OAAO,aAAa,EAAE,SAAS;AAC7C,SAAO,cAAc,SAAS;AAChC;AAMO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,QAAM,QAAQ,MAAM,MAAM,KAAA;AAC1B,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,MAAM,OAAO,2BAA2B,UAAU,2BAA4B,QAAO;AACzF,SAAO,UAAU,MAAM,SAAS,UAAU,WAAW,MAAM,KAAK;AAClE;AAMO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AACF,GAGkB;AAChB,QAAM,SAAS,OAAO,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK,OAAO,OAAO,CAAC;AAChF,UAAQ,UAAU,OAAO,cAAc,OAAO,IAAI,WAAc,OAAO,UAAS,iCAAQ,UAAS;AACnG;AAQO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMuE;AACrE,QAAM,UAAoC,CAAA;AAC1C,QAAM,MAAM,CAAC,OAAe,UAAkB;AAC5C,QAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,EAAG;AACtD,YAAQ,KAAK,EAAE,OAAO,OAAO,WAAW,OAAO,eAAe,OAAO;AAAA,EACvE;AACA,aAAW,SAAS,OAAO,QAAQ;AACjC;AAAA,MACE,MAAM;AAAA,MACN,sBAAsB,EAAE,OAAO,WAAA,CAAY,IAAI,WAAW,MAAM,KAAK,IAAI,MAAM,MAAM,KAAA;AAAA,IAAK;AAAA,EAE9F;AACA,MAAI,QAAQ,WAAW,KAAK,OAAO,UAAU,KAAM,KAAI,OAAO,OAAO,WAAW,OAAO,KAAK,CAAC;AAE7F,QAAM,eAAe,kBAAkB,EAAE,QAAQ,SAAS;AAC1D,MAAI,iBAAiB,MAAM;AACzB,QAAI,cAAc,WAAW,YAAY,CAAC;AAC1C,eAAW,UAAU,QAAS,QAAO,YAAY,OAAO,UAAU;AAAA,EACpE;AAEA,QAAM,SAAS,SAAS,WAAW;AACnC,MAAI,WAAW,QAAQ,CAAC,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,GAAG;AACzE,YAAQ,KAAK,EAAE,OAAO,QAAQ,OAAO,WAAW,MAAM,GAAG,WAAW,OAAO,eAAe,KAAA,CAAM;AAAA,EAClG;AACA,SAAO,EAAE,SAAS,aAAA;AACpB;"}
+{"version":3,"file":"agent-model-options.js","sources":["../../src/catalog/agent-model-options.ts"],"sourcesContent":["import { normalizeCatalogAgentModelEntries } from '@athenaintel/agent-runtime/runtime-catalog';\nimport { parseCollabAgentRef } from '../runtime/statewire-run-config';\n\n/**\n * A collab agent's own model choices, from its published definition: exactly\n * the models its author listed (the agent editor's Models section), the\n * default marked. The rules are Athena's own composer's (Olympus) and the\n * Jevin app's, so every host offers the same choices for one agent:\n *\n * - the options are the agent's labeled models, by the author's labels; an\n *   automatic name (empty, the editor's old `{ id: 'default', label: 'Default' }`,\n *   or one that only restates the model) shows the model's catalog label;\n * - a legacy agent with no labeled list offers its single `model`;\n * - the session channel's model override (`channelOverrides[channel].model`)\n *   is that channel's default, added when the list lacks it, until the\n *   deployment's refusal day (identity v7 D12, `channel-refusal.ts`): from it\n *   agora drops a channel's model at every compile, so the agent's own model is\n *   the default on every channel;\n * - a model the thread pins that is none of the agent's models is shown as it\n *   is (`pinnedOutside`), never replaced.\n *\n * Restricting a picker to these choices is opt-in per agent: only an agent\n * whose \"Allow any workspace model\" switch is off (`allowAnyModel: false`)\n * does; every other agent keeps the workspace's models.\n *\n * Pure, for `useAthenaAgentModelOptions` and the tests.\n */\n\n/** One model choice of a collab agent. */\nexport interface AthenaAgentModelOption {\n  /** The model id a send carries (`model`). */\n  model: string;\n  /** The author's label, or the model's catalog label for an automatic name. */\n  label: string;\n  /**\n   * The model the thread runs while it pins none: the agent's own, or its channel's until the\n   * deployment's refusal day.\n   */\n  isDefault: boolean;\n  /**\n   * A model the thread's server config pins that is none of the agent's models\n   * (pinned by another client, or by an older picker): shown, never replaced.\n   */\n  pinnedOutside: boolean;\n}\n\n/** One entry of the agent's labeled model list. */\nexport interface AgentLabeledModel {\n  id: string;\n  model: string;\n  label: string;\n  isDefault: boolean;\n}\n\n/** What an agent's published definition says about its models. */\nexport interface AgentModelSource {\n  /** The model the definition runs (`config.model`); `null` when it names none. */\n  model: string | null;\n  /** The labeled list (`config.models`), complete rows only, in the author's order. */\n  models: readonly AgentLabeledModel[];\n  /** Per-channel model overrides (`channelOverrides[<channel>].model`), by channel id. */\n  channelModels: Readonly<Record<string, string>>;\n  /**\n   * Whether people may pick any workspace model (`config.allowAnyModel`, the\n   * agent editor's \"Allow any workspace model\" switch; see\n   * {@link allowsAnyModel}). Only `false` restricts a picker to the agent's\n   * own models.\n   */\n  allowAnyModel: boolean;\n}\n\n/**\n * Whether a config's `allowAnyModel` value lets people pick any model: only an\n * explicit `false` restricts; absent, `null`, `true` and any non-boolean allow\n * (agora's `collab_agent_allows_any_model`), so every agent saved before the\n * switch existed behaves as it always has.\n */\nexport function allowsAnyModel(value: unknown): boolean {\n  return value !== false;\n}\n\n/** The display label of a model id; the id itself when the catalog does not know it. */\nexport type ModelLabelOf = (model: string) => string;\n\n/** The row the agent editor used to create for an agent with no stored entries. */\nconst LEGACY_DEFAULT_ENTRY_ID = 'default';\nconst LEGACY_DEFAULT_ENTRY_LABEL = 'Default';\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === 'object' && value !== null && !Array.isArray(value);\n\nconst nonBlank = (value: unknown): string | null =>\n  typeof value === 'string' && value.trim() !== '' ? value.trim() : null;\n\n/**\n * The collab agent's asset id for an `agent` value: a `collab_agent:<id>` ref\n * (the provider's `agent` shape) or the bare asset id (the agent picker's\n * value). `null` for a blank value.\n */\nexport function agentAssetIdOf(agent: string | null | undefined): string | null {\n  const trimmed = nonBlank(agent);\n  if (trimmed === null) return null;\n  return parseCollabAgentRef(trimmed) ?? (trimmed.includes(':') ? null : trimmed);\n}\n\n/** A stored `models` value: an array of rows, JSON-encoded or not; malformed rows dropped. */\nfunction labeledModelsOf(value: unknown): AgentLabeledModel[] {\n  let rows: unknown = value;\n  if (typeof rows === 'string') {\n    try {\n      rows = JSON.parse(rows);\n    } catch {\n      return [];\n    }\n  }\n  if (!Array.isArray(rows)) return [];\n  return normalizeCatalogAgentModelEntries({ rows: Array.from(rows).filter(isRecord) });\n}\n\n/** A stored `channelOverrides` value's per-channel models. */\nfunction channelModelsOf(value: unknown): Record<string, string> {\n  if (!isRecord(value)) return {};\n  const out: Record<string, string> = {};\n  for (const [channel, override] of Object.entries(value)) {\n    const model = isRecord(override) ? nonBlank(override.model) : null;\n    if (model !== null) out[channel] = model;\n  }\n  return out;\n}\n\n/** Whether the agent asset's `athena_metadata` points at a published version. */\nexport function isPublishedAgent(athenaMetadata: unknown): boolean {\n  if (!isRecord(athenaMetadata)) return false;\n  const versionId = athenaMetadata.published_version_id;\n  return (\n    (typeof versionId === 'string' && versionId !== '') ||\n    (typeof versionId === 'number' && Number.isFinite(versionId))\n  );\n}\n\n/**\n * The model source of the agent's PUBLISHED definition, which every SDK run\n * compiles, from the agent asset's `athena_metadata` (publish writes\n * `published_config` beside `published_version_id`). `null` for an agent\n * that was never published, or whose published definition names no model\n * (not even a channel's).\n */\nexport function publishedAgentModelSource(athenaMetadata: unknown): AgentModelSource | null {\n  if (!isRecord(athenaMetadata) || !isPublishedAgent(athenaMetadata)) return null;\n  const config = athenaMetadata.published_config;\n  if (!isRecord(config)) return null;\n  const source: AgentModelSource = {\n    model: nonBlank(config.model),\n    models: labeledModelsOf(config.models),\n    channelModels: channelModelsOf(config.channelOverrides),\n    // The editor stores the field name; agora also accepts its snake-case alias.\n    allowAnyModel: allowsAnyModel(\n      Object.hasOwn(config, 'allowAnyModel') ? config.allowAnyModel : config.allow_any_model,\n    ),\n  };\n  const namesAModel =\n    source.model !== null ||\n    source.models.length > 0 ||\n    Object.keys(source.channelModels).length > 0;\n  return namesAModel ? source : null;\n}\n\n/**\n * Whether an entry's name is automatic: empty, the editor's old \"Default\", or\n * a name that only restates the entry's model (its id or catalog label).\n */\nexport function isAutomaticModelLabel({\n  entry,\n  modelLabel,\n}: {\n  entry: Pick<AgentLabeledModel, 'id' | 'model' | 'label'>;\n  modelLabel: ModelLabelOf;\n}): boolean {\n  const label = entry.label.trim();\n  if (label === '') return true;\n  if (entry.id === LEGACY_DEFAULT_ENTRY_ID && label === LEGACY_DEFAULT_ENTRY_LABEL) return true;\n  return label === entry.model || label === modelLabel(entry.model);\n}\n\n/**\n * The model a thread runs while it pins none: the channel's override, else the\n * definition's `model`, else its marked (or first) labeled entry.\n *\n * From the deployment's refusal day (`refuseReplacements`, identity v7 D12) no\n * channel's model applies: agora's compile drops a layer's `model` whatever it\n * names (`refused_text_layer`), so the agent's own runs. That is what agora's\n * shared cases (`agora/agora/services/agent_config/channel_refusal_contract.json`)\n * say of every layer that names a model, and `channel-refusal-contract.test.ts`\n * holds this to them; which settings replace the agent stays the server's to say.\n */\nexport function agentDefaultModel({\n  source,\n  channel,\n  refuseReplacements = false,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */\n  refuseReplacements?: boolean;\n}): string | null {\n  const marked = source.models.find((entry) => entry.isDefault) ?? source.models[0];\n  const channelModel = channel && !refuseReplacements ? source.channelModels[channel] : undefined;\n  return channelModel ?? source.model ?? marked?.model ?? null;\n}\n\n/**\n * The agent's model choices and its default, by the rules above. Options keep\n * the author's order, one per model (the first entry of a model names it); the\n * default is marked, and appended when the list lacks it; a pinned model\n * outside the list comes last. From the refusal day (`refuseReplacements`) a\n * channel's model is offered only when the agent lists it, or the thread pins it.\n */\nexport function buildAgentModelOptions({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n  refuseReplacements = false,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  /** The model the thread's server config pins; `null` while it pins none (or is unknown). */\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n  /** The deployment's refusal day has come (`channelReplacementsRefusedOn`). */\n  refuseReplacements?: boolean;\n}): { options: AthenaAgentModelOption[]; defaultModel: string | null } {\n  const options: AthenaAgentModelOption[] = [];\n  const add = (model: string, label: string) => {\n    if (options.some((option) => option.model === model)) return;\n    options.push({ model, label, isDefault: false, pinnedOutside: false });\n  };\n  for (const entry of source.models) {\n    add(\n      entry.model,\n      isAutomaticModelLabel({ entry, modelLabel }) ? modelLabel(entry.model) : entry.label.trim(),\n    );\n  }\n  if (options.length === 0 && source.model !== null) add(source.model, modelLabel(source.model));\n\n  const defaultModel = agentDefaultModel({ source, channel, refuseReplacements });\n  if (defaultModel !== null) {\n    add(defaultModel, modelLabel(defaultModel));\n    for (const option of options) option.isDefault = option.model === defaultModel;\n  }\n\n  const pinned = nonBlank(pinnedModel);\n  if (pinned !== null && !options.some((option) => option.model === pinned)) {\n    options.push({ model: pinned, label: modelLabel(pinned), isDefault: false, pinnedOutside: true });\n  }\n  return { options, defaultModel };\n}\n\n/**\n * The agent's choices while its default can't be named yet (a chat on a channel, before the\n * deployment's refusal day is known): its own models only, the restriction they make kept, none\n * marked default and no default named. A channel's model joins only once the day says it still\n * applies; a model the thread pins is shown as always.\n */\nexport function agentModelOptionsWithoutDefault({\n  source,\n  channel,\n  pinnedModel,\n  modelLabel,\n}: {\n  source: AgentModelSource;\n  channel: string | null;\n  pinnedModel: string | null;\n  modelLabel: ModelLabelOf;\n}): { options: AthenaAgentModelOption[]; defaultModel: null } {\n  const { options } = buildAgentModelOptions({\n    source,\n    channel,\n    pinnedModel,\n    modelLabel,\n    refuseReplacements: true,\n  });\n  return { options: options.map((option) => ({ ...option, isDefault: false })), defaultModel: null };\n}\n"],"names":[],"mappings":";;AA6EO,SAAS,eAAe,OAAyB;AACtD,SAAO,UAAU;AACnB;AAMA,MAAM,0BAA0B;AAChC,MAAM,6BAA6B;AAEnC,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,MAAM,KAAA,MAAW,KAAK,MAAM,KAAA,IAAS;AAO7D,SAAS,eAAe,OAAiD;AAC9E,QAAM,UAAU,SAAS,KAAK;AAC9B,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,oBAAoB,OAAO,MAAM,QAAQ,SAAS,GAAG,IAAI,OAAO;AACzE;AAGA,SAAS,gBAAgB,OAAqC;AAC5D,MAAI,OAAgB;AACpB,MAAI,OAAO,SAAS,UAAU;AAC5B,QAAI;AACF,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB,QAAQ;AACN,aAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,MAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,CAAA;AACjC,SAAO,kCAAkC,EAAE,MAAM,MAAM,KAAK,IAAI,EAAE,OAAO,QAAQ,GAAG;AACtF;AAGA,SAAS,gBAAgB,OAAwC;AAC/D,MAAI,CAAC,SAAS,KAAK,UAAU,CAAA;AAC7B,QAAM,MAA8B,CAAA;AACpC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,UAAM,QAAQ,SAAS,QAAQ,IAAI,SAAS,SAAS,KAAK,IAAI;AAC9D,QAAI,UAAU,KAAM,KAAI,OAAO,IAAI;AAAA,EACrC;AACA,SAAO;AACT;AAGO,SAAS,iBAAiB,gBAAkC;AACjE,MAAI,CAAC,SAAS,cAAc,EAAG,QAAO;AACtC,QAAM,YAAY,eAAe;AACjC,SACG,OAAO,cAAc,YAAY,cAAc,MAC/C,OAAO,cAAc,YAAY,OAAO,SAAS,SAAS;AAE/D;AASO,SAAS,0BAA0B,gBAAkD;AAC1F,MAAI,CAAC,SAAS,cAAc,KAAK,CAAC,iBAAiB,cAAc,EAAG,QAAO;AAC3E,QAAM,SAAS,eAAe;AAC9B,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,QAAM,SAA2B;AAAA,IAC/B,OAAO,SAAS,OAAO,KAAK;AAAA,IAC5B,QAAQ,gBAAgB,OAAO,MAAM;AAAA,IACrC,eAAe,gBAAgB,OAAO,gBAAgB;AAAA;AAAA,IAEtD,eAAe;AAAA,MACb,OAAO,OAAO,QAAQ,eAAe,IAAI,OAAO,gBAAgB,OAAO;AAAA,IAAA;AAAA,EACzE;AAEF,QAAM,cACJ,OAAO,UAAU,QACjB,OAAO,OAAO,SAAS,KACvB,OAAO,KAAK,OAAO,aAAa,EAAE,SAAS;AAC7C,SAAO,cAAc,SAAS;AAChC;AAMO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,QAAM,QAAQ,MAAM,MAAM,KAAA;AAC1B,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,MAAM,OAAO,2BAA2B,UAAU,2BAA4B,QAAO;AACzF,SAAO,UAAU,MAAM,SAAS,UAAU,WAAW,MAAM,KAAK;AAClE;AAaO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,qBAAqB;AACvB,GAKkB;AAChB,QAAM,SAAS,OAAO,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,KAAK,OAAO,OAAO,CAAC;AAChF,QAAM,eAAe,WAAW,CAAC,qBAAqB,OAAO,cAAc,OAAO,IAAI;AACtF,SAAO,gBAAgB,OAAO,UAAS,iCAAQ,UAAS;AAC1D;AASO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,qBAAqB;AACvB,GAQuE;AACrE,QAAM,UAAoC,CAAA;AAC1C,QAAM,MAAM,CAAC,OAAe,UAAkB;AAC5C,QAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,KAAK,EAAG;AACtD,YAAQ,KAAK,EAAE,OAAO,OAAO,WAAW,OAAO,eAAe,OAAO;AAAA,EACvE;AACA,aAAW,SAAS,OAAO,QAAQ;AACjC;AAAA,MACE,MAAM;AAAA,MACN,sBAAsB,EAAE,OAAO,WAAA,CAAY,IAAI,WAAW,MAAM,KAAK,IAAI,MAAM,MAAM,KAAA;AAAA,IAAK;AAAA,EAE9F;AACA,MAAI,QAAQ,WAAW,KAAK,OAAO,UAAU,KAAM,KAAI,OAAO,OAAO,WAAW,OAAO,KAAK,CAAC;AAE7F,QAAM,eAAe,kBAAkB,EAAE,QAAQ,SAAS,oBAAoB;AAC9E,MAAI,iBAAiB,MAAM;AACzB,QAAI,cAAc,WAAW,YAAY,CAAC;AAC1C,eAAW,UAAU,QAAS,QAAO,YAAY,OAAO,UAAU;AAAA,EACpE;AAEA,QAAM,SAAS,SAAS,WAAW;AACnC,MAAI,WAAW,QAAQ,CAAC,QAAQ,KAAK,CAAC,WAAW,OAAO,UAAU,MAAM,GAAG;AACzE,YAAQ,KAAK,EAAE,OAAO,QAAQ,OAAO,WAAW,MAAM,GAAG,WAAW,OAAO,eAAe,KAAA,CAAM;AAAA,EAClG;AACA,SAAO,EAAE,SAAS,aAAA;AACpB;AAQO,SAAS,gCAAgC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAK8D;AAC5D,QAAM,EAAE,QAAA,IAAY,uBAAuB;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB;AAAA,EAAA,CACrB;AACD,SAAO,EAAE,SAAS,QAAQ,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,WAAW,MAAA,EAAQ,GAAG,cAAc,KAAA;AAC9F;"}

package/dist/catalog/channel-refusal.cjs

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const ATHENA_CHANNEL_REFUSAL_QUERY = `
+  query AthenaChannelReplacementsRefusedFrom {
+    featureGateEnv { channelReplacementsRefusedFrom }
+  }
+`;
+const DAY = /^\d{4}-\d{2}-\d{2}$/;
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function refusalDayOf(data) {
+  const gate = isRecord(data) ? data.featureGateEnv : null;
+  const day = isRecord(gate) ? gate.channelReplacementsRefusedFrom : null;
+  return typeof day === "string" && DAY.test(day) ? day : null;
+}
+const UNKNOWN_REFUSAL_DAY_FIELD = /Cannot query field ["']?channelReplacementsRefusedFrom\b/;
+function answersWithoutRefusalDay(message) {
+  return UNKNOWN_REFUSAL_DAY_FIELD.test(message);
+}
+function channelReplacementsRefusalStartsAt(refusedFrom) {
+  if (refusedFrom === null) return null;
+  const startsAt = Date.parse(`${refusedFrom}T00:00:00Z`);
+  return Number.isNaN(startsAt) ? null : startsAt;
+}
+function channelReplacementsRefusedOn({
+  refusedFrom,
+  now
+}) {
+  const startsAt = channelReplacementsRefusalStartsAt(refusedFrom);
+  return startsAt !== null && now >= startsAt;
+}
+exports.ATHENA_CHANNEL_REFUSAL_QUERY = ATHENA_CHANNEL_REFUSAL_QUERY;
+exports.answersWithoutRefusalDay = answersWithoutRefusalDay;
+exports.channelReplacementsRefusalStartsAt = channelReplacementsRefusalStartsAt;
+exports.channelReplacementsRefusedOn = channelReplacementsRefusedOn;
+exports.refusalDayOf = refusalDayOf;
+//# sourceMappingURL=channel-refusal.cjs.map