@athenaintel/react 0.42.2 → 0.48.0

package/dist/runtime/auth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.cjs","sources":["../../src/runtime/auth.ts"],"sourcesContent":["import { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { AthenaTokenRenewer } from '../auth/credential-source';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport { AthenaSdkError } from '../diagnostics/errors';\n\n/**\n * Hosts under `athenaintel.com` that serve customer-written code:\n * - Marathon's computer and application apps: `{id}.app.athenaintel.com`,\n *   `{id}.staging-app.athenaintel.com`, `{id}.canary-app.athenaintel.com`, an\n *   environment's `{id}.app.{env}.athenaintel.com`, and the staging wildcard\n *   `{id}.computer.stg.athenaintel.com` (and `{id}.computer-canary.stg.athenaintel.com`);\n * - the Sandpack bundler's User Interface previews:\n *   `{id}-sandpack.code-sandpack.athenaintel.com` (and `.code-sandpack.{env}.`).\n * They are never a trusted parent and never a backend the bridge points the\n * SDK at.\n */\nconst CUSTOMER_APP_HOST =\n  /^.+\\.(?:(?:[a-z0-9-]+-)?app(?:\\.[a-z0-9-]+)*|computer(?:-[a-z0-9-]+)?\\.stg|code-sandpack(?:\\.[a-z0-9-]+)*)\\.athenaintel\\.com$/i;\n\n/** Whether `hostname` serves customer apps (see {@link CUSTOMER_APP_HOST}). */\nexport function isCustomerAppHost(hostname: string): boolean {\n  return CUSTOMER_APP_HOST.test(hostname);\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n  return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';\n}\n\nfunction isAthenaHost(hostname: string): boolean {\n  return hostname === 'athenaintel.com' || hostname.endsWith('.athenaintel.com');\n}\n\n/**\n * Check whether a PostMessage origin is trusted as the parent.\n * Accepts:\n * - explicit trusted origins passed by the host app\n * - the current iframe origin (for same-origin wrappers like Marathon)\n * - Athena's own hosts under athenaintel.com and localhost (default\n *   behavior), except the customer-app hosts Marathon serves\n */\nexport function isTrustedParentOrigin({\n  origin,\n  trustedOrigins,\n}: {\n  origin: string;\n  trustedOrigins: string[];\n}): boolean {\n  try {\n    const normalizedOrigin = new URL(origin).origin;\n    if (trustedOrigins.includes(normalizedOrigin)) {\n      return true;\n    }\n\n    const { hostname } = new URL(normalizedOrigin);\n    if (isCustomerAppHost(hostname)) {\n      return false;\n    }\n    return isAthenaHost(hostname) || hostname === 'localhost';\n  } catch {\n    return false;\n  }\n}\n\n/** Why {@link isAcceptableBridgeUrl} refused a URL. */\nexport type BridgeUrlRefusal = 'invalid' | 'insecure' | 'customer_app_host' | 'other_domain';\n\n/**\n * Whether a URL a trusted parent sent in `athena-config` may become the\n * SDK's backend, statewire mount or app URL. The SDK sends its bearer token\n * to the first two, so a URL is taken only when it is `https:` (plain\n * `http:` only between loopback hosts, for local development), carries no\n * credentials, is not a customer-code host ({@link CUSTOMER_APP_HOST}), and\n * is one of Athena's own hosts or, for a parent outside `athenaintel.com`,\n * the parent's own host or a subdomain of it. Sibling hosts are not taken:\n * without a public-suffix list `portal.example.co.uk` and `tenant.github.io`\n * cannot be told apart from a private domain, so a wrapper whose backend is\n * elsewhere passes its URLs through `config`. Returns the refusal, or `null`\n * when the URL is acceptable.\n */\nexport function refuseBridgeUrl({\n  url,\n  parentOrigin,\n}: {\n  url: string;\n  parentOrigin: string;\n}): BridgeUrlRefusal | null {\n  let parsed: URL;\n  let parentHostname: string;\n  try {\n    parsed = new URL(url);\n    parentHostname = new URL(parentOrigin).hostname;\n  } catch {\n    return 'invalid';\n  }\n  if (parsed.username || parsed.password) return 'invalid';\n  const { hostname } = parsed;\n  const loopbackPair = isLoopbackHost(hostname) && isLoopbackHost(parentHostname);\n  if (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopbackPair)) {\n    return 'insecure';\n  }\n  if (isCustomerAppHost(hostname)) return 'customer_app_host';\n  if (loopbackPair || isAthenaHost(hostname)) return null;\n  // Athena and loopback parents point only at Athena's own hosts (above).\n  if (isAthenaHost(parentHostname) || isLoopbackHost(parentHostname)) return 'other_domain';\n  return hostname === parentHostname || hostname.endsWith(`.${parentHostname}`)\n    ? null\n    : 'other_domain';\n}\n\n/** {@link refuseBridgeUrl} as a predicate. */\nexport function isAcceptableBridgeUrl(options: { url: string; parentOrigin: string }): boolean {\n  return refuseBridgeUrl(options) === null;\n}\n\nexport interface ParentBridgeState {\n  /** PropelAuth access token from the parent window. */\n  token: string | null;\n  /**\n   * Statewire sync mount (`…/v2/threads`) minted by the host. `null` when the\n   * host minted none; the provider then derives it from the configured\n   * `apiUrl`'s origin (or the environment preset).\n   */\n  statewireSyncUrl: string | null;\n  /**\n   * Bare Agora API base (no path) minted by the host. `null` when the host\n   * minted none; the provider then uses the configured `backendUrl` (or the\n   * environment preset).\n   */\n  backendBaseUrl: string | null;\n  /** Athena frontend origin provided by the parent wrapper. */\n  appUrl: string | null;\n  /**\n   * True once a host answered the bridge — a `/_athena/auth` mint or an\n   * `athena-config` message — whether or not it minted the statewire fields.\n   * Lets the provider tell an outdated host (answered, no mount) from no host\n   * at all (the environment preset applies).\n   */\n  hostAnswered: boolean;\n  /** True once config has been received from the parent (or timeout fired). */\n  ready: boolean;\n  /**\n   * Set when the Marathon mint (`/_athena/auth`) gave up. It gives up when it\n   * gets a refusal (401, 403, or any 4xx other than 404), a body it cannot\n   * read, or a transient failure (5xx, 408, 429, a network error, a timeout)\n   * on every attempt of one bounded retry cycle. `code` is\n   * `auth_bridge_failed`, or `auth_bridge_timeout` when the last attempt\n   * timed out. After that the bridge does not mint again in the background. A\n   * forced renewal (`renewToken({ force: true })`) starts one new bounded\n   * cycle. A token that an earlier mint handed out is kept (the server still\n   * validates it), and the bridge never puts an empty token in its place. The\n   * next successful mint clears it. Absent or `null` otherwise.\n   */\n  error?: AthenaSdkError | null;\n}\n\n/**\n * {@link ParentBridgeState} plus the bridge's token renewal: `force` (the\n * token was refused) asks the host for a new one — a fresh `/_athena/auth`\n * mint on a Marathon origin, or an `athena-auth-ready` request answered by the\n * parent window's next `athena-auth` — and resolves the held token otherwise.\n */\nexport type ParentBridge = ParentBridgeState & { renewToken: AthenaTokenRenewer };\n\nconst BRIDGE_URL_FIELDS = ['statewireSyncUrl', 'backendBaseUrl', 'appUrl'] as const;\n\ntype BridgeUrlField = (typeof BRIDGE_URL_FIELDS)[number];\n\n/** The URL half of {@link ParentBridgeState} — what a host can hand the SDK. */\nexport type ParentBridgeUrls = Pick<ParentBridgeState, BridgeUrlField>;\n\nconst EMPTY_BRIDGE_URLS: ParentBridgeUrls = {\n  statewireSyncUrl: null,\n  backendBaseUrl: null,\n  appUrl: null,\n};\n\n/**\n * Fold a URL payload over the current URL set without vetting it (the\n * same-origin `/_athena/auth` mint body; a parent's `athena-config` goes\n * through {@link acceptBridgeConfigMessage}). A field is taken only when it is\n * a string; anything else keeps the previous value. Keys outside\n * {@link BridgeUrlField} (a legacy parent's `apiUrl` / `backendUrl` among\n * them) are dropped.\n */\nexport function mergeBridgeConfigMessage(\n  previous: ParentBridgeUrls,\n  payload: Partial<Record<BridgeUrlField, unknown>>,\n): ParentBridgeUrls {\n  const next: ParentBridgeUrls = {\n    statewireSyncUrl: previous.statewireSyncUrl,\n    backendBaseUrl: previous.backendBaseUrl,\n    appUrl: previous.appUrl,\n  };\n  for (const field of BRIDGE_URL_FIELDS) {\n    const value = payload[field];\n    if (typeof value === 'string') {\n      next[field] = value;\n    }\n  }\n  return next;\n}\n\n/** A URL field of an `athena-config` message that was not taken, and why. */\nexport interface RejectedBridgeUrl {\n  field: BridgeUrlField;\n  reason: BridgeUrlRefusal | 'changed';\n}\n\n/**\n * Fold an `athena-config` message from a trusted parent over the current URL\n * set, taking only what is safe to point the SDK's bearer at: each string\n * field must pass {@link refuseBridgeUrl} against the parent's origin. The\n * first config message sets the URLs; once `locked` (a config message was\n * already taken) a value that differs from the held one, including a field\n * the first message left unset, is refused (`changed`), so a later message\n * cannot repoint a running SDK. Resending the same value is fine.\n */\nexport function acceptBridgeConfigMessage({\n  previous,\n  payload,\n  parentOrigin,\n  locked = false,\n}: {\n  previous: ParentBridgeUrls;\n  payload: Partial<Record<BridgeUrlField, unknown>>;\n  parentOrigin: string;\n  locked?: boolean;\n}): { urls: ParentBridgeUrls; rejected: RejectedBridgeUrl[] } {\n  const urls: ParentBridgeUrls = {\n    statewireSyncUrl: previous.statewireSyncUrl,\n    backendBaseUrl: previous.backendBaseUrl,\n    appUrl: previous.appUrl,\n  };\n  const rejected: RejectedBridgeUrl[] = [];\n  for (const field of BRIDGE_URL_FIELDS) {\n    const value = payload[field];\n    if (typeof value !== 'string') continue;\n    const held = previous[field];\n    if (locked || held !== null) {\n      if (held !== value) rejected.push({ field, reason: 'changed' });\n      continue;\n    }\n    const refusal = refuseBridgeUrl({ url: value, parentOrigin });\n    if (refusal !== null) {\n      rejected.push({ field, reason: refusal });\n      continue;\n    }\n    urls[field] = value;\n  }\n  return { urls, rejected };\n}\n\n/**\n * Read the URL set out of a `/_athena/auth` mint body. Non-string fields are\n * `null`.\n */\nexport function readAuthMintUrls(data: Partial<Record<BridgeUrlField, unknown>>): ParentBridgeUrls {\n  return mergeBridgeConfigMessage(EMPTY_BRIDGE_URLS, data);\n}\n\nexport interface ParentBridgeOptions {\n  /**\n   * Exact parent origins that are allowed to send auth/config via postMessage.\n   * Useful for private-cloud or custom-domain deployments.\n   */\n  trustedOrigins?: string[];\n  /** @internal Overrides {@link DEFAULT_MINT_RETRY_POLICY}; used by tests. */\n  mintRetryPolicy?: MintRetryPolicy;\n}\n\n/** How long to wait for the parent bridge before falling back to defaults. */\nconst BRIDGE_TIMEOUT_MS = 2000;\n/** How long a renewal waits for the parent window to answer `athena-auth-ready`. */\nconst PARENT_TOKEN_RENEWAL_TIMEOUT_MS = 5000;\nconst TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1000;\nconst TOKEN_REFRESH_MIN_DELAY_MS = 60 * 1000;\nconst DEFAULT_TOKEN_REFRESH_MS = 55 * 60 * 1000;\nconst EMPTY_TRUSTED_ORIGINS: string[] = [];\n\n/**\n * How one Marathon mint cycle retries. A cycle is the initial acquisition, a\n * scheduled refresh, or a forced renewal. It sends at most `maxAttempts`\n * requests. It retries only a transient failure (5xx, 408, 429, a network\n * error, a timeout), after a capped exponential backoff with jitter, and then\n * it gives up. Nothing retries in the background after a cycle gave up.\n */\nexport interface MintRetryPolicy {\n  /** Requests per cycle, the first one included. */\n  maxAttempts: number;\n  /** Ceiling of the delay before the first retry; it doubles for each retry. */\n  baseDelayMs: number;\n  /** Largest delay before any retry. */\n  maxDelayMs: number;\n  /** How long one request can take before it is aborted and counted as a timeout. */\n  timeoutMs: number;\n  /** Source of jitter in `[0, 1)`. */\n  random: () => number;\n}\n\nexport const DEFAULT_MINT_RETRY_POLICY: MintRetryPolicy = {\n  maxAttempts: 4,\n  baseDelayMs: 500,\n  maxDelayMs: 4000,\n  timeoutMs: BRIDGE_TIMEOUT_MS,\n  random: Math.random,\n};\n\n/** Untrusted shape of the `/_athena/auth` mint body; every field is type-guarded on read. */\ninterface AthenaAuthResponse {\n  token?: unknown;\n  statewireSyncUrl?: unknown;\n  backendBaseUrl?: unknown;\n  appUrl?: unknown;\n  expires_at?: unknown;\n}\n\nconst normalizeOrigin = (value: string): string | null => {\n  try {\n    return new URL(value).origin;\n  } catch {\n    return null;\n  }\n};\n\nexport const getTokenRefreshDelay = (expiresAt: unknown, nowMs: number): number => {\n  if (typeof expiresAt !== 'string') {\n    return DEFAULT_TOKEN_REFRESH_MS;\n  }\n\n  const expiresAtMs = Date.parse(expiresAt);\n  if (!Number.isFinite(expiresAtMs)) {\n    return DEFAULT_TOKEN_REFRESH_MS;\n  }\n\n  return Math.max(TOKEN_REFRESH_MIN_DELAY_MS, expiresAtMs - nowMs - TOKEN_REFRESH_BUFFER_MS);\n};\n\n/**\n * The delay before retry number `retry` of a mint cycle (1 is the first\n * retry). The ceiling is `min(maxDelayMs, baseDelayMs * 2^(retry - 1))`, and\n * equal jitter puts the wait between half of that ceiling and all of it, so\n * viewers whose mint failed at the same time do not retry at the same time.\n */\nexport function getMintRetryDelay({\n  retry,\n  policy = DEFAULT_MINT_RETRY_POLICY,\n}: {\n  retry: number;\n  policy?: Pick<MintRetryPolicy, 'baseDelayMs' | 'maxDelayMs' | 'random'>;\n}): number {\n  const safeRetry = Number.isFinite(retry) ? Math.max(1, Math.floor(retry)) : 1;\n  const ceiling = Math.min(policy.maxDelayMs, policy.baseDelayMs * 2 ** (safeRetry - 1));\n  const jitter = Math.min(1, Math.max(0, policy.random()));\n  return Math.round(ceiling / 2 + (ceiling / 2) * jitter);\n}\n\n/** A mint status worth another attempt: the host, or something in front of it, is briefly unwell. */\nexport function isRetryableMintStatus(status: number): boolean {\n  return status >= 500 || status === 408 || status === 429;\n}\n\n/** A failed `/_athena/auth` request that is worth another attempt. */\ninterface TransientMintFailure {\n  kind: 'transient';\n  status: number | null;\n  reason: 'status' | 'network' | 'timeout';\n  hostError: string | null;\n  cause?: unknown;\n}\n\n/** A failed `/_athena/auth` request that ends its cycle at once. */\ninterface RefusedMintFailure {\n  kind: 'refused';\n  status: number;\n  /** `status`: a 4xx other than 404, 408 and 429. `invalid_body`: a 2xx whose body is not a JSON object. */\n  reason: 'status' | 'invalid_body';\n  hostError: string | null;\n}\n\nexport type MintFailure = TransientMintFailure | RefusedMintFailure;\n\n/** The outcome of one `/_athena/auth` request. */\ntype MintAttempt =\n  | { kind: 'minted'; data: AthenaAuthResponse }\n  /** 404: this is not a Marathon origin. */\n  | { kind: 'absent'; status: number }\n  | MintFailure\n  | { kind: 'cancelled' };\n\n/** The `error` string of a Marathon failure body (`{\"error\":\"mint_failed\"}`), if any. */\nasync function readHostError(resp: Response): Promise<string | null> {\n  try {\n    const body: unknown = await resp.json();\n    if (body && typeof body === 'object' && 'error' in body) {\n      const value = (body as { error?: unknown }).error;\n      return typeof value === 'string' ? value.slice(0, 100) : null;\n    }\n  } catch {\n    // An empty or non-JSON error body tells nothing more than the status.\n  }\n  return null;\n}\n\nconst MINT_RETRY_NOTE =\n  'The SDK stopped retrying and does not connect without a credential. Remount the provider, or call renewToken({ force: true }), to try again.';\n\nfunction mintFailureHint(failure: MintFailure): string {\n  if (failure.kind === 'transient') {\n    return `The host could not mint a viewer token. Check the Marathon and Agora logs. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.reason === 'invalid_body') {\n    return `The host answered /_athena/auth without a JSON mint body, so this origin is not a Marathon bridge. Pass token, getToken or apiKey. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.status === 401) {\n    return `The host has no session for this viewer. Sign in again through the app URL. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.status === 403) {\n    return `The host does not give this viewer access to the app. ${MINT_RETRY_NOTE}`;\n  }\n  return `The host refused the mint request. ${MINT_RETRY_NOTE}`;\n}\n\n/** The typed error that a mint cycle reports when it gives up. */\nexport function mintFailureError({\n  failure,\n  attempts,\n  phase,\n}: {\n  failure: MintFailure;\n  attempts: number;\n  phase: 'initial' | 'renewal';\n}): AthenaSdkError {\n  const timedOut = failure.kind === 'transient' && failure.reason === 'timeout';\n  const answer =\n    failure.status !== null ? `HTTP ${failure.status}` : timedOut ? 'a timeout' : 'a network error';\n  const message =\n    failure.kind === 'transient'\n      ? `The host auth bridge (/_athena/auth) failed ${attempts} time${attempts === 1 ? '' : 's'} (last: ${answer}).`\n      : failure.reason === 'invalid_body'\n        ? `The host auth bridge (/_athena/auth) answered ${answer} without a JSON mint body.`\n        : `The host auth bridge (/_athena/auth) refused the mint (${answer}).`;\n  return new AthenaSdkError({\n    code: timedOut ? 'auth_bridge_timeout' : 'auth_bridge_failed',\n    message,\n    hint: mintFailureHint(failure),\n    ...(failure.status !== null && { status: failure.status }),\n    ...(failure.hostError !== null && { detail: { code: failure.hostError } }),\n    ...(failure.kind === 'transient' && failure.cause !== undefined && { cause: failure.cause }),\n    context: {\n      mode: 'marathon',\n      phase,\n      attempts,\n      reason: failure.reason,\n      host_error: failure.hostError,\n    },\n  });\n}\n\n/**\n * Listens for auth tokens AND environment config from the host environment.\n *\n * Two transport modes, picked automatically:\n *\n * 1. **Iframe (legacy / Olympus inline preview)**: a parent window posts\n *    `athena-config` and `athena-auth` via PostMessage. The hook also posts\n *    `athena-auth-ready` so the parent knows when to (re-)send. Only the\n *    window that frames the app (`event.source === window.parent`) on a\n *    trusted origin ({@link isTrustedParentOrigin}) is heard, and an\n *    `athena-config` URL is taken only once and only when it passes\n *    {@link refuseBridgeUrl}.\n *\n * 2. **Standalone (Marathon-served deploy URL)**: top-level navigation, no\n *    parent. The hook fetches `/_athena/auth` on its own origin. Marathon\n *    validates its session cookie (sent by the browser automatically) and\n *    returns `{ token, statewireSyncUrl, backendBaseUrl, appUrl }` — the\n *    statewire mount, the bare Agora base and the app origin. A 404 means\n *    we're not on a Marathon origin — the hook falls through with empty\n *    state. Any other failure fails closed: one bounded retry cycle\n *    ({@link MintRetryPolicy}) for a transient failure, none for a refusal,\n *    and then `error` is set and `ready` flips with no token — never an\n *    empty or anonymous one.\n *\n * In both modes the app never blocks indefinitely: the iframe bridge flips\n * `ready: true` after a timeout, and a Marathon mint cycle ends after at most\n * `maxAttempts` requests.\n */\nexport function useParentBridge({\n  trustedOrigins = EMPTY_TRUSTED_ORIGINS,\n  mintRetryPolicy = DEFAULT_MINT_RETRY_POLICY,\n}: ParentBridgeOptions = {}): ParentBridge {\n  const isInIframe = typeof window !== 'undefined' && window.parent !== window;\n  const runtimeTrustedOrigins = useMemo(() => {\n    const origins = new Set<string>();\n\n    if (typeof window !== 'undefined') {\n      origins.add(window.location.origin);\n    }\n\n    for (const trustedOrigin of trustedOrigins) {\n      const normalizedOrigin = normalizeOrigin(trustedOrigin);\n      if (normalizedOrigin) {\n        origins.add(normalizedOrigin);\n      }\n    }\n\n    return [...origins];\n  }, [trustedOrigins]);\n\n  const [state, setState] = useState<ParentBridgeState>({\n    token: null,\n    ...EMPTY_BRIDGE_URLS,\n    hostAnswered: false,\n    ready: false,\n    error: null,\n  });\n  // Read when a mint cycle starts, so a caller's inline policy object does not\n  // restart the bridge on every render.\n  const mintRetryPolicyRef = useRef(mintRetryPolicy);\n  mintRetryPolicyRef.current = mintRetryPolicy;\n  const readySignalSent = useRef(false);\n  const configReceived = useRef(false);\n  // The URLs the parent has set so far: a later `athena-config` may not change them.\n  const parentUrlsRef = useRef<ParentBridgeUrls>(EMPTY_BRIDGE_URLS);\n  const tokenRef = useRef<string | null>(state.token);\n  tokenRef.current = state.token;\n  // Installed by whichever transport mode is active (iframe or Marathon).\n  const renewerRef = useRef<AthenaTokenRenewer | null>(null);\n\n  useEffect(() => {\n    if (!isInIframe) return;\n\n    const endBridgeSpan = athenaDiagnostics.span('auth.bridge', 'auth.bridge.start', {\n      mode: 'iframe',\n    });\n    let spanEnded = false;\n    const endOnce: typeof endBridgeSpan = (name, options) => {\n      if (spanEnded) return 0;\n      spanEnded = true;\n      return endBridgeSpan(name, options);\n    };\n\n    // Renewals waiting for the parent's next `athena-auth`.\n    const tokenWaiters = new Set<(token: string | null) => void>();\n\n    const handler = (event: MessageEvent) => {\n      // Only the window that frames this app speaks for the host: a popup,\n      // an opener or a sibling frame on a trusted origin does not.\n      if (event.source !== window.parent) return;\n      if (\n        !isTrustedParentOrigin({ origin: event.origin, trustedOrigins: runtimeTrustedOrigins })\n      ) {\n        return;\n      }\n      if (!event.data || typeof event.data !== 'object') return;\n\n      if (event.data.type === 'athena-config') {\n        const { urls, rejected } = acceptBridgeConfigMessage({\n          previous: parentUrlsRef.current,\n          payload: event.data,\n          parentOrigin: event.origin,\n          locked: configReceived.current,\n        });\n        configReceived.current = true;\n        parentUrlsRef.current = urls;\n        for (const { field, reason } of rejected) {\n          athenaDiagnostics.emit('auth.bridge.config_rejected', {\n            level: 'warn',\n            data: { mode: 'iframe', field, reason },\n          });\n        }\n        setState((prev) => ({\n          ...prev,\n          ...urls,\n          hostAnswered: true,\n          // Don't set ready here — wait for athena-auth (token) or the timeout.\n          // Setting ready on config alone causes a race: the thread list fires\n          // before the token arrives, falling back to X-API-KEY.\n        }));\n      }\n\n      if (event.data.type === 'athena-auth' && typeof event.data.token === 'string') {\n        endOnce('auth.bridge.ready', { data: { mode: 'iframe' } });\n        athenaDiagnostics.emit('auth.token.acquired', {\n          level: 'debug',\n          data: { source: 'iframe-postmessage' },\n        });\n        setState((prev) => ({\n          ...prev,\n          token: event.data.token,\n          ready: true,\n        }));\n        tokenRef.current = event.data.token;\n        for (const resolve of [...tokenWaiters]) resolve(event.data.token);\n      }\n    };\n    window.addEventListener('message', handler);\n\n    // A renewal asks the parent to send its current token again — the same\n    // `athena-auth-ready` handshake a parent already answers — and settles on\n    // the next `athena-auth`, or on the held token when none arrives in time.\n    renewerRef.current = ({ force }) => {\n      if (!force) return Promise.resolve(tokenRef.current);\n      return new Promise<string | null>((resolve) => {\n        const settle = (token: string | null) => {\n          clearTimeout(timer);\n          tokenWaiters.delete(settle);\n          resolve(token ?? tokenRef.current);\n        };\n        const timer = setTimeout(() => settle(null), PARENT_TOKEN_RENEWAL_TIMEOUT_MS);\n        tokenWaiters.add(settle);\n        window.parent.postMessage({ type: 'athena-auth-ready' }, '*');\n      });\n    };\n\n    if (!readySignalSent.current) {\n      window.parent.postMessage({ type: 'athena-auth-ready' }, '*');\n      readySignalSent.current = true;\n    }\n\n    const timer = setTimeout(() => {\n      endOnce('auth.bridge.timeout', {\n        data: {\n          mode: 'iframe',\n          timeout_ms: BRIDGE_TIMEOUT_MS,\n          config_received: configReceived.current,\n        },\n      });\n      setState((prev) => (prev.ready ? prev : { ...prev, ready: true }));\n    }, BRIDGE_TIMEOUT_MS);\n\n    return () => {\n      window.removeEventListener('message', handler);\n      clearTimeout(timer);\n      renewerRef.current = null;\n      for (const resolve of [...tokenWaiters]) resolve(null);\n    };\n  }, [isInIframe, runtimeTrustedOrigins]);\n\n  useEffect(() => {\n    if (isInIframe) return;\n    if (typeof window === 'undefined') return;\n\n    let cancelled = false;\n    let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n    let controller: AbortController | null = null;\n    let inFlight: Promise<string | null> | null = null;\n    let retryWait: { timer: ReturnType<typeof setTimeout>; resolve: () => void } | null = null;\n\n    const clearRefreshTimer = () => {\n      if (refreshTimer) {\n        clearTimeout(refreshTimer);\n        refreshTimer = null;\n      }\n    };\n\n    const endRetryWait = () => {\n      if (!retryWait) return;\n      clearTimeout(retryWait.timer);\n      const { resolve } = retryWait;\n      retryWait = null;\n      resolve();\n    };\n\n    /** The backoff between two attempts of one cycle; unmounting ends it at once. */\n    const waitBeforeRetry = (delayMs: number) =>\n      new Promise<void>((resolve) => {\n        retryWait = { timer: setTimeout(endRetryWait, delayMs), resolve };\n      });\n\n    // The only background mint: once per token, shortly before it expires. It\n    // is not rescheduled when its cycle gives up. A forced renewal that gives\n    // up leaves it in place on purpose: the held token is still live, and\n    // this one bounded cycle keeps a viewer connected past a brief outage.\n    const scheduleRefresh = (expiresAt: unknown) => {\n      clearRefreshTimer();\n      const delay = getTokenRefreshDelay(expiresAt, Date.now());\n      refreshTimer = setTimeout(() => {\n        refreshTimer = null;\n        void fetchAuth({ initial: false });\n      }, delay);\n    };\n\n    /** One `/_athena/auth` request, classified. */\n    const mintOnce = async (timeoutMs: number): Promise<MintAttempt> => {\n      const requestController = new AbortController();\n      controller = requestController;\n      let timedOut = false;\n      const requestTimer = setTimeout(() => {\n        timedOut = true;\n        requestController.abort();\n      }, timeoutMs);\n\n      try {\n        const resp = await fetch('/_athena/auth', {\n          credentials: 'include',\n          headers: { Accept: 'application/json' },\n          signal: requestController.signal,\n        });\n        if (cancelled) return { kind: 'cancelled' };\n        // Not a Marathon origin: expected for standalone apps and local dev.\n        if (resp.status === 404) return { kind: 'absent', status: resp.status };\n        if (!resp.ok) {\n          const hostError = await readHostError(resp);\n          if (cancelled) return { kind: 'cancelled' };\n          // `readHostError` swallows the abort of a stalled error body. Only a\n          // retryable status becomes a timeout: a refusal (401, 403, other\n          // 4xx) is known from its status and still fails after one request.\n          if (timedOut && isRetryableMintStatus(resp.status)) {\n            return { kind: 'transient', status: null, reason: 'timeout', hostError: null };\n          }\n          return isRetryableMintStatus(resp.status)\n            ? { kind: 'transient', status: resp.status, reason: 'status', hostError }\n            : { kind: 'refused', status: resp.status, reason: 'status', hostError };\n        }\n\n        let data: unknown;\n        try {\n          data = await resp.json();\n        } catch (error) {\n          if (cancelled) return { kind: 'cancelled' };\n          if (timedOut) {\n            return { kind: 'transient', status: null, reason: 'timeout', hostError: null, cause: error };\n          }\n          return { kind: 'refused', status: resp.status, reason: 'invalid_body', hostError: null };\n        }\n        if (cancelled) return { kind: 'cancelled' };\n        // Marathon's 200 always carries a token. A 2xx without one is a\n        // broken mint: it must not replace a held token or count as success.\n        const token = data && typeof data === 'object' ? (data as { token?: unknown }).token : null;\n        if (typeof token !== 'string' || token === '') {\n          return { kind: 'refused', status: resp.status, reason: 'invalid_body', hostError: null };\n        }\n        return { kind: 'minted', data: data as AthenaAuthResponse };\n      } catch (error) {\n        if (cancelled) return { kind: 'cancelled' };\n        if (timedOut) {\n          return { kind: 'transient', status: null, reason: 'timeout', hostError: null, cause: error };\n        }\n        return { kind: 'transient', status: null, reason: 'network', hostError: null, cause: error };\n      } finally {\n        clearTimeout(requestTimer);\n        if (controller === requestController) controller = null;\n      }\n    };\n\n    /**\n     * One bounded mint cycle: the initial acquisition (a span the provider\n     * waits on) or a renewal (the scheduled refresh, a forced renewal). It\n     * retries a transient failure up to `maxAttempts` requests in all, with\n     * a capped, jittered backoff. On a refusal, or after the last attempt, it\n     * gives up: it reports one typed error, sets `error`, keeps any token an\n     * earlier mint handed out, and schedules nothing.\n     */\n    const runMintCycle = async ({ initial }: { initial: boolean }): Promise<string | null> => {\n      const policy = mintRetryPolicyRef.current;\n      const maxAttempts = Math.max(1, Math.floor(policy.maxAttempts));\n      const phase = initial ? 'initial' : 'renewal';\n      const endBridgeSpan = initial\n        ? athenaDiagnostics.span('auth.bridge', 'auth.bridge.start', { mode: 'marathon' })\n        : null;\n\n      let attempts = 0;\n      let lastFailure: MintFailure | null = null;\n      while (attempts < maxAttempts) {\n        attempts += 1;\n        const outcome = await mintOnce(policy.timeoutMs);\n        if (cancelled || outcome.kind === 'cancelled') return null;\n\n        if (outcome.kind === 'absent') {\n          endBridgeSpan?.('auth.bridge.absent', {\n            data: { mode: 'marathon', status: outcome.status },\n          });\n          // 404 means no bridge here, so an earlier mint failure no longer\n          // applies; the provider falls back to its other credentials.\n          setState((prev) =>\n            prev.ready && prev.error == null ? prev : { ...prev, ready: true, error: null },\n          );\n          return null;\n        }\n\n        if (outcome.kind === 'minted') {\n          const { data } = outcome;\n          if (endBridgeSpan) {\n            endBridgeSpan('auth.bridge.ready', {\n              data: { mode: 'marathon', has_token: typeof data.token === 'string', attempts },\n            });\n            athenaDiagnostics.emit('auth.token.acquired', {\n              level: 'debug',\n              data: { source: 'marathon', expires_at: data.expires_at },\n            });\n          } else {\n            athenaDiagnostics.emit('auth.token.refreshed', {\n              level: 'debug',\n              data: { source: 'marathon', expires_at: data.expires_at, attempts },\n            });\n          }\n          const token = typeof data.token === 'string' ? data.token : null;\n          setState({\n            token,\n            ...readAuthMintUrls(data),\n            hostAnswered: true,\n            ready: true,\n            error: null,\n          });\n          tokenRef.current = token;\n          scheduleRefresh(data.expires_at);\n          return token;\n        }\n\n        lastFailure = outcome;\n        if (outcome.kind === 'refused' || attempts >= maxAttempts) break;\n\n        const delayMs = getMintRetryDelay({ retry: attempts, policy });\n        athenaDiagnostics.emit('auth.bridge.retry', {\n          level: 'warn',\n          data: {\n            mode: 'marathon',\n            phase,\n            status: outcome.status,\n            reason: outcome.reason,\n            host_error: outcome.hostError,\n            attempt: attempts,\n            max_attempts: maxAttempts,\n            delay_ms: delayMs,\n          },\n        });\n        await waitBeforeRetry(delayMs);\n        if (cancelled) return null;\n      }\n\n      if (!lastFailure) return null;\n      const error = mintFailureError({ failure: lastFailure, attempts, phase });\n      const failureData = {\n        mode: 'marathon',\n        phase,\n        status: lastFailure.status,\n        reason: lastFailure.reason,\n        attempts,\n      };\n      if (endBridgeSpan) {\n        endBridgeSpan(\n          error.code === 'auth_bridge_timeout' ? 'auth.bridge.timeout' : 'auth.bridge.error',\n          { data: failureData, error },\n        );\n      } else {\n        athenaDiagnostics.emit('auth.token.refresh_failed', {\n          level: 'error',\n          data: failureData,\n          error,\n        });\n      }\n      setState((prev) => ({ ...prev, error, ready: true }));\n      return null;\n    };\n\n    // One mint cycle at a time. The initial acquisition, a scheduled refresh\n    // and forced renewals that overlap share the cycle in flight (its\n    // requests, their timeouts and its backoff) instead of starting their own,\n    // so concurrent callers never multiply the requests.\n    const fetchAuth = (options: { initial: boolean }): Promise<string | null> => {\n      inFlight ??= runMintCycle(options).finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    };\n\n    // A forced renewal mints now instead of waiting for the scheduled refresh\n    // (joining a cycle already in flight), and may start a new bounded cycle\n    // after one gave up. The schedule restarts from the new token's expiry.\n    renewerRef.current = ({ force }) => {\n      if (!force) return Promise.resolve(tokenRef.current);\n      return fetchAuth({ initial: false }).then((token) => token ?? tokenRef.current);\n    };\n\n    void fetchAuth({ initial: true });\n\n    return () => {\n      cancelled = true;\n      controller?.abort();\n      clearRefreshTimer();\n      endRetryWait();\n      renewerRef.current = null;\n    };\n  }, [isInIframe]);\n\n  const renewToken = useCallback<AthenaTokenRenewer>(\n    (options) => renewerRef.current?.(options) ?? Promise.resolve(tokenRef.current),\n    [],\n  );\n\n  return useMemo(() => ({ ...state, renewToken }), [state, renewToken]);\n}\n\n/**\n * Legacy hook — returns just the auth token from the parent bridge.\n * Prefer useParentBridge() for new code.\n */\nexport function useParentAuth(): string | null {\n  return useParentBridge().token;\n}\n"],"names":["AthenaSdkError","useMemo","useState","useRef","useEffect","athenaDiagnostics","timer","useCallback"],"mappings":";;;;;AAgBA,MAAM,oBACJ;AAGK,SAAS,kBAAkB,UAA2B;AAC3D,SAAO,kBAAkB,KAAK,QAAQ;AACxC;AAEA,SAAS,eAAe,UAA2B;AACjD,SAAO,aAAa,eAAe,aAAa,eAAe,aAAa;AAC9E;AAEA,SAAS,aAAa,UAA2B;AAC/C,SAAO,aAAa,qBAAqB,SAAS,SAAS,kBAAkB;AAC/E;AAUO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,MAAI;AACF,UAAM,mBAAmB,IAAI,IAAI,MAAM,EAAE;AACzC,QAAI,eAAe,SAAS,gBAAgB,GAAG;AAC7C,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,SAAA,IAAa,IAAI,IAAI,gBAAgB;AAC7C,QAAI,kBAAkB,QAAQ,GAAG;AAC/B,aAAO;AAAA,IACT;AACA,WAAO,aAAa,QAAQ,KAAK,aAAa;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAkBO,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AACF,GAG4B;AAC1B,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,GAAG;AACpB,qBAAiB,IAAI,IAAI,YAAY,EAAE;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,OAAO,SAAU,QAAO;AAC/C,QAAM,EAAE,aAAa;AACrB,QAAM,eAAe,eAAe,QAAQ,KAAK,eAAe,cAAc;AAC9E,MAAI,OAAO,aAAa,YAAY,EAAE,OAAO,aAAa,WAAW,eAAe;AAClF,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,QAAQ,EAAG,QAAO;AACxC,MAAI,gBAAgB,aAAa,QAAQ,EAAG,QAAO;AAEnD,MAAI,aAAa,cAAc,KAAK,eAAe,cAAc,EAAG,QAAO;AAC3E,SAAO,aAAa,kBAAkB,SAAS,SAAS,IAAI,cAAc,EAAE,IACxE,OACA;AACN;AAwDA,MAAM,oBAAoB,CAAC,oBAAoB,kBAAkB,QAAQ;AAOzE,MAAM,oBAAsC;AAAA,EAC1C,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,QAAQ;AACV;AAUO,SAAS,yBACd,UACA,SACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,kBAAkB,SAAS;AAAA,IAC3B,gBAAgB,SAAS;AAAA,IACzB,QAAQ,SAAS;AAAA,EAAA;AAEnB,aAAW,SAAS,mBAAmB;AACrC,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,WAAK,KAAK,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAiBO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAK8D;AAC5D,QAAM,OAAyB;AAAA,IAC7B,kBAAkB,SAAS;AAAA,IAC3B,gBAAgB,SAAS;AAAA,IACzB,QAAQ,SAAS;AAAA,EAAA;AAEnB,QAAM,WAAgC,CAAA;AACtC,aAAW,SAAS,mBAAmB;AACrC,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,OAAO,SAAS,KAAK;AAC3B,QAAI,UAAU,SAAS,MAAM;AAC3B,UAAI,SAAS,MAAO,UAAS,KAAK,EAAE,OAAO,QAAQ,WAAW;AAC9D;AAAA,IACF;AACA,UAAM,UAAU,gBAAgB,EAAE,KAAK,OAAO,cAAc;AAC5D,QAAI,YAAY,MAAM;AACpB,eAAS,KAAK,EAAE,OAAO,QAAQ,SAAS;AACxC;AAAA,IACF;AACA,SAAK,KAAK,IAAI;AAAA,EAChB;AACA,SAAO,EAAE,MAAM,SAAA;AACjB;AAMO,SAAS,iBAAiB,MAAkE;AACjG,SAAO,yBAAyB,mBAAmB,IAAI;AACzD;AAaA,MAAM,oBAAoB;AAE1B,MAAM,kCAAkC;AACxC,MAAM,0BAA0B,IAAI,KAAK;AACzC,MAAM,6BAA6B,KAAK;AACxC,MAAM,2BAA2B,KAAK,KAAK;AAC3C,MAAM,wBAAkC,CAAA;AAsBjC,MAAM,4BAA6C;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,QAAQ,KAAK;AACf;AAWA,MAAM,kBAAkB,CAAC,UAAiC;AACxD,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,uBAAuB,CAAC,WAAoB,UAA0B;AACjF,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,OAAO,SAAS,WAAW,GAAG;AACjC,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,IAAI,4BAA4B,cAAc,QAAQ,uBAAuB;AAC3F;AAQO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA,SAAS;AACX,GAGW;AACT,QAAM,YAAY,OAAO,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,CAAC,IAAI;AAC5E,QAAM,UAAU,KAAK,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,YAAY,EAAE;AACrF,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,OAAA,CAAQ,CAAC;AACvD,SAAO,KAAK,MAAM,UAAU,IAAK,UAAU,IAAK,MAAM;AACxD;AAGO,SAAS,sBAAsB,QAAyB;AAC7D,SAAO,UAAU,OAAO,WAAW,OAAO,WAAW;AACvD;AA+BA,eAAe,cAAc,MAAwC;AACnE,MAAI;AACF,UAAM,OAAgB,MAAM,KAAK,KAAA;AACjC,QAAI,QAAQ,OAAO,SAAS,YAAY,WAAW,MAAM;AACvD,YAAM,QAAS,KAA6B;AAC5C,aAAO,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,GAAG,IAAI;AAAA,IAC3D;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,MAAM,kBACJ;AAEF,SAAS,gBAAgB,SAA8B;AACrD,MAAI,QAAQ,SAAS,aAAa;AAChC,WAAO,8EAA8E,eAAe;AAAA,EACtG;AACA,MAAI,QAAQ,WAAW,gBAAgB;AACrC,WAAO,sIAAsI,eAAe;AAAA,EAC9J;AACA,MAAI,QAAQ,WAAW,KAAK;AAC1B,WAAO,+EAA+E,eAAe;AAAA,EACvG;AACA,MAAI,QAAQ,WAAW,KAAK;AAC1B,WAAO,yDAAyD,eAAe;AAAA,EACjF;AACA,SAAO,sCAAsC,eAAe;AAC9D;AAGO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,QAAM,WAAW,QAAQ,SAAS,eAAe,QAAQ,WAAW;AACpE,QAAM,SACJ,QAAQ,WAAW,OAAO,QAAQ,QAAQ,MAAM,KAAK,WAAW,cAAc;AAChF,QAAM,UACJ,QAAQ,SAAS,cACb,+CAA+C,QAAQ,QAAQ,aAAa,IAAI,KAAK,GAAG,WAAW,MAAM,OACzG,QAAQ,WAAW,iBACjB,iDAAiD,MAAM,+BACvD,0DAA0D,MAAM;AACxE,SAAO,IAAIA,OAAAA,eAAe;AAAA,IACxB,MAAM,WAAW,wBAAwB;AAAA,IACzC;AAAA,IACA,MAAM,gBAAgB,OAAO;AAAA,IAC7B,GAAI,QAAQ,WAAW,QAAQ,EAAE,QAAQ,QAAQ,OAAA;AAAA,IACjD,GAAI,QAAQ,cAAc,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,YAAU;AAAA,IACtE,GAAI,QAAQ,SAAS,eAAe,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,MAAA;AAAA,IACpF,SAAS;AAAA,MACP,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,IAAA;AAAA,EACtB,CACD;AACH;AA8BO,SAAS,gBAAgB;AAAA,EAC9B,iBAAiB;AAAA,EACjB,kBAAkB;AACpB,IAAyB,IAAkB;AACzC,QAAM,aAAa,OAAO,WAAW,eAAe,OAAO,WAAW;AACtE,QAAM,wBAAwBC,MAAAA,QAAQ,MAAM;AAC1C,UAAM,8BAAc,IAAA;AAEpB,QAAI,OAAO,WAAW,aAAa;AACjC,cAAQ,IAAI,OAAO,SAAS,MAAM;AAAA,IACpC;AAEA,eAAW,iBAAiB,gBAAgB;AAC1C,YAAM,mBAAmB,gBAAgB,aAAa;AACtD,UAAI,kBAAkB;AACpB,gBAAQ,IAAI,gBAAgB;AAAA,MAC9B;AAAA,IACF;AAEA,WAAO,CAAC,GAAG,OAAO;AAAA,EACpB,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,CAAC,OAAO,QAAQ,IAAIC,eAA4B;AAAA,IACpD,OAAO;AAAA,IACP,GAAG;AAAA,IACH,cAAc;AAAA,IACd,OAAO;AAAA,IACP,OAAO;AAAA,EAAA,CACR;AAGD,QAAM,qBAAqBC,MAAAA,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,kBAAkBA,MAAAA,OAAO,KAAK;AACpC,QAAM,iBAAiBA,MAAAA,OAAO,KAAK;AAEnC,QAAM,gBAAgBA,MAAAA,OAAyB,iBAAiB;AAChE,QAAM,WAAWA,MAAAA,OAAsB,MAAM,KAAK;AAClD,WAAS,UAAU,MAAM;AAEzB,QAAM,aAAaA,MAAAA,OAAkC,IAAI;AAEzDC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAY;AAEjB,UAAM,gBAAgBC,kBAAAA,kBAAkB,KAAK,eAAe,qBAAqB;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AACD,QAAI,YAAY;AAChB,UAAM,UAAgC,CAAC,MAAM,YAAY;AACvD,UAAI,UAAW,QAAO;AACtB,kBAAY;AACZ,aAAO,cAAc,MAAM,OAAO;AAAA,IACpC;AAGA,UAAM,mCAAmB,IAAA;AAEzB,UAAM,UAAU,CAAC,UAAwB;AAGvC,UAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,UACE,CAAC,sBAAsB,EAAE,QAAQ,MAAM,QAAQ,gBAAgB,sBAAA,CAAuB,GACtF;AACA;AAAA,MACF;AACA,UAAI,CAAC,MAAM,QAAQ,OAAO,MAAM,SAAS,SAAU;AAEnD,UAAI,MAAM,KAAK,SAAS,iBAAiB;AACvC,cAAM,EAAE,MAAM,SAAA,IAAa,0BAA0B;AAAA,UACnD,UAAU,cAAc;AAAA,UACxB,SAAS,MAAM;AAAA,UACf,cAAc,MAAM;AAAA,UACpB,QAAQ,eAAe;AAAA,QAAA,CACxB;AACD,uBAAe,UAAU;AACzB,sBAAc,UAAU;AACxB,mBAAW,EAAE,OAAO,OAAA,KAAY,UAAU;AACxCA,4BAAAA,kBAAkB,KAAK,+BAA+B;AAAA,YACpD,OAAO;AAAA,YACP,MAAM,EAAE,MAAM,UAAU,OAAO,OAAA;AAAA,UAAO,CACvC;AAAA,QACH;AACA,iBAAS,CAAC,UAAU;AAAA,UAClB,GAAG;AAAA,UACH,GAAG;AAAA,UACH,cAAc;AAAA;AAAA;AAAA;AAAA,QAAA,EAId;AAAA,MACJ;AAEA,UAAI,MAAM,KAAK,SAAS,iBAAiB,OAAO,MAAM,KAAK,UAAU,UAAU;AAC7E,gBAAQ,qBAAqB,EAAE,MAAM,EAAE,MAAM,SAAA,GAAY;AACzDA,0BAAAA,kBAAkB,KAAK,uBAAuB;AAAA,UAC5C,OAAO;AAAA,UACP,MAAM,EAAE,QAAQ,qBAAA;AAAA,QAAqB,CACtC;AACD,iBAAS,CAAC,UAAU;AAAA,UAClB,GAAG;AAAA,UACH,OAAO,MAAM,KAAK;AAAA,UAClB,OAAO;AAAA,QAAA,EACP;AACF,iBAAS,UAAU,MAAM,KAAK;AAC9B,mBAAW,WAAW,CAAC,GAAG,YAAY,EAAG,SAAQ,MAAM,KAAK,KAAK;AAAA,MACnE;AAAA,IACF;AACA,WAAO,iBAAiB,WAAW,OAAO;AAK1C,eAAW,UAAU,CAAC,EAAE,YAAY;AAClC,UAAI,CAAC,MAAO,QAAO,QAAQ,QAAQ,SAAS,OAAO;AACnD,aAAO,IAAI,QAAuB,CAAC,YAAY;AAC7C,cAAM,SAAS,CAAC,UAAyB;AACvC,uBAAaC,MAAK;AAClB,uBAAa,OAAO,MAAM;AAC1B,kBAAQ,SAAS,SAAS,OAAO;AAAA,QACnC;AACA,cAAMA,SAAQ,WAAW,MAAM,OAAO,IAAI,GAAG,+BAA+B;AAC5E,qBAAa,IAAI,MAAM;AACvB,eAAO,OAAO,YAAY,EAAE,MAAM,oBAAA,GAAuB,GAAG;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,gBAAgB,SAAS;AAC5B,aAAO,OAAO,YAAY,EAAE,MAAM,oBAAA,GAAuB,GAAG;AAC5D,sBAAgB,UAAU;AAAA,IAC5B;AAEA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,uBAAuB;AAAA,QAC7B,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,YAAY;AAAA,UACZ,iBAAiB,eAAe;AAAA,QAAA;AAAA,MAClC,CACD;AACD,eAAS,CAAC,SAAU,KAAK,QAAQ,OAAO,EAAE,GAAG,MAAM,OAAO,MAAO;AAAA,IACnE,GAAG,iBAAiB;AAEpB,WAAO,MAAM;AACX,aAAO,oBAAoB,WAAW,OAAO;AAC7C,mBAAa,KAAK;AAClB,iBAAW,UAAU;AACrB,iBAAW,WAAW,CAAC,GAAG,YAAY,WAAW,IAAI;AAAA,IACvD;AAAA,EACF,GAAG,CAAC,YAAY,qBAAqB,CAAC;AAEtCF,QAAAA,UAAU,MAAM;AACd,QAAI,WAAY;AAChB,QAAI,OAAO,WAAW,YAAa;AAEnC,QAAI,YAAY;AAChB,QAAI,eAAqD;AACzD,QAAI,aAAqC;AACzC,QAAI,WAA0C;AAC9C,QAAI,YAAkF;AAEtF,UAAM,oBAAoB,MAAM;AAC9B,UAAI,cAAc;AAChB,qBAAa,YAAY;AACzB,uBAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AACzB,UAAI,CAAC,UAAW;AAChB,mBAAa,UAAU,KAAK;AAC5B,YAAM,EAAE,YAAY;AACpB,kBAAY;AACZ,cAAA;AAAA,IACF;AAGA,UAAM,kBAAkB,CAAC,YACvB,IAAI,QAAc,CAAC,YAAY;AAC7B,kBAAY,EAAE,OAAO,WAAW,cAAc,OAAO,GAAG,QAAA;AAAA,IAC1D,CAAC;AAMH,UAAM,kBAAkB,CAAC,cAAuB;AAC9C,wBAAA;AACA,YAAM,QAAQ,qBAAqB,WAAW,KAAK,KAAK;AACxD,qBAAe,WAAW,MAAM;AAC9B,uBAAe;AACf,aAAK,UAAU,EAAE,SAAS,OAAO;AAAA,MACnC,GAAG,KAAK;AAAA,IACV;AAGA,UAAM,WAAW,OAAO,cAA4C;AAClE,YAAM,oBAAoB,IAAI,gBAAA;AAC9B,mBAAa;AACb,UAAI,WAAW;AACf,YAAM,eAAe,WAAW,MAAM;AACpC,mBAAW;AACX,0BAAkB,MAAA;AAAA,MACpB,GAAG,SAAS;AAEZ,UAAI;AACF,cAAM,OAAO,MAAM,MAAM,iBAAiB;AAAA,UACxC,aAAa;AAAA,UACb,SAAS,EAAE,QAAQ,mBAAA;AAAA,UACnB,QAAQ,kBAAkB;AAAA,QAAA,CAC3B;AACD,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAE9B,YAAI,KAAK,WAAW,IAAK,QAAO,EAAE,MAAM,UAAU,QAAQ,KAAK,OAAA;AAC/D,YAAI,CAAC,KAAK,IAAI;AACZ,gBAAM,YAAY,MAAM,cAAc,IAAI;AAC1C,cAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAI9B,cAAI,YAAY,sBAAsB,KAAK,MAAM,GAAG;AAClD,mBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,KAAA;AAAA,UAC1E;AACA,iBAAO,sBAAsB,KAAK,MAAM,IACpC,EAAE,MAAM,aAAa,QAAQ,KAAK,QAAQ,QAAQ,UAAU,UAAA,IAC5D,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,UAAU,UAAA;AAAA,QAChE;AAEA,YAAI;AACJ,YAAI;AACF,iBAAO,MAAM,KAAK,KAAA;AAAA,QACpB,SAAS,OAAO;AACd,cAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAC9B,cAAI,UAAU;AACZ,mBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,UACvF;AACA,iBAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,gBAAgB,WAAW,KAAA;AAAA,QACpF;AACA,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAG9B,cAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ;AACvF,YAAI,OAAO,UAAU,YAAY,UAAU,IAAI;AAC7C,iBAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,gBAAgB,WAAW,KAAA;AAAA,QACpF;AACA,eAAO,EAAE,MAAM,UAAU,KAAA;AAAA,MAC3B,SAAS,OAAO;AACd,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAC9B,YAAI,UAAU;AACZ,iBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,QACvF;AACA,eAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,MACvF,UAAA;AACE,qBAAa,YAAY;AACzB,YAAI,eAAe,kBAAmB,cAAa;AAAA,MACrD;AAAA,IACF;AAUA,UAAM,eAAe,OAAO,EAAE,cAA4D;AACxF,YAAM,SAAS,mBAAmB;AAClC,YAAM,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,WAAW,CAAC;AAC9D,YAAM,QAAQ,UAAU,YAAY;AACpC,YAAM,gBAAgB,UAClBC,kBAAAA,kBAAkB,KAAK,eAAe,qBAAqB,EAAE,MAAM,WAAA,CAAY,IAC/E;AAEJ,UAAI,WAAW;AACf,UAAI,cAAkC;AACtC,aAAO,WAAW,aAAa;AAC7B,oBAAY;AACZ,cAAM,UAAU,MAAM,SAAS,OAAO,SAAS;AAC/C,YAAI,aAAa,QAAQ,SAAS,YAAa,QAAO;AAEtD,YAAI,QAAQ,SAAS,UAAU;AAC7B,yDAAgB,sBAAsB;AAAA,YACpC,MAAM,EAAE,MAAM,YAAY,QAAQ,QAAQ,OAAA;AAAA,UAAO;AAInD;AAAA,YAAS,CAAC,SACR,KAAK,SAAS,KAAK,SAAS,OAAO,OAAO,EAAE,GAAG,MAAM,OAAO,MAAM,OAAO,KAAA;AAAA,UAAK;AAEhF,iBAAO;AAAA,QACT;AAEA,YAAI,QAAQ,SAAS,UAAU;AAC7B,gBAAM,EAAE,SAAS;AACjB,cAAI,eAAe;AACjB,0BAAc,qBAAqB;AAAA,cACjC,MAAM,EAAE,MAAM,YAAY,WAAW,OAAO,KAAK,UAAU,UAAU,SAAA;AAAA,YAAS,CAC/E;AACDA,8BAAAA,kBAAkB,KAAK,uBAAuB;AAAA,cAC5C,OAAO;AAAA,cACP,MAAM,EAAE,QAAQ,YAAY,YAAY,KAAK,WAAA;AAAA,YAAW,CACzD;AAAA,UACH,OAAO;AACLA,8BAAAA,kBAAkB,KAAK,wBAAwB;AAAA,cAC7C,OAAO;AAAA,cACP,MAAM,EAAE,QAAQ,YAAY,YAAY,KAAK,YAAY,SAAA;AAAA,YAAS,CACnE;AAAA,UACH;AACA,gBAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAC5D,mBAAS;AAAA,YACP;AAAA,YACA,GAAG,iBAAiB,IAAI;AAAA,YACxB,cAAc;AAAA,YACd,OAAO;AAAA,YACP,OAAO;AAAA,UAAA,CACR;AACD,mBAAS,UAAU;AACnB,0BAAgB,KAAK,UAAU;AAC/B,iBAAO;AAAA,QACT;AAEA,sBAAc;AACd,YAAI,QAAQ,SAAS,aAAa,YAAY,YAAa;AAE3D,cAAM,UAAU,kBAAkB,EAAE,OAAO,UAAU,QAAQ;AAC7DA,0BAAAA,kBAAkB,KAAK,qBAAqB;AAAA,UAC1C,OAAO;AAAA,UACP,MAAM;AAAA,YACJ,MAAM;AAAA,YACN;AAAA,YACA,QAAQ,QAAQ;AAAA,YAChB,QAAQ,QAAQ;AAAA,YAChB,YAAY,QAAQ;AAAA,YACpB,SAAS;AAAA,YACT,cAAc;AAAA,YACd,UAAU;AAAA,UAAA;AAAA,QACZ,CACD;AACD,cAAM,gBAAgB,OAAO;AAC7B,YAAI,UAAW,QAAO;AAAA,MACxB;AAEA,UAAI,CAAC,YAAa,QAAO;AACzB,YAAM,QAAQ,iBAAiB,EAAE,SAAS,aAAa,UAAU,OAAO;AACxE,YAAM,cAAc;AAAA,QAClB,MAAM;AAAA,QACN;AAAA,QACA,QAAQ,YAAY;AAAA,QACpB,QAAQ,YAAY;AAAA,QACpB;AAAA,MAAA;AAEF,UAAI,eAAe;AACjB;AAAA,UACE,MAAM,SAAS,wBAAwB,wBAAwB;AAAA,UAC/D,EAAE,MAAM,aAAa,MAAA;AAAA,QAAM;AAAA,MAE/B,OAAO;AACLA,0BAAAA,kBAAkB,KAAK,6BAA6B;AAAA,UAClD,OAAO;AAAA,UACP,MAAM;AAAA,UACN;AAAA,QAAA,CACD;AAAA,MACH;AACA,eAAS,CAAC,UAAU,EAAE,GAAG,MAAM,OAAO,OAAO,OAAO;AACpD,aAAO;AAAA,IACT;AAMA,UAAM,YAAY,CAAC,YAA0D;AAC3E,8BAAa,aAAa,OAAO,EAAE,QAAQ,MAAM;AAC/C,mBAAW;AAAA,MACb,CAAC;AACD,aAAO;AAAA,IACT;AAKA,eAAW,UAAU,CAAC,EAAE,YAAY;AAClC,UAAI,CAAC,MAAO,QAAO,QAAQ,QAAQ,SAAS,OAAO;AACnD,aAAO,UAAU,EAAE,SAAS,OAAO,EAAE,KAAK,CAAC,UAAU,SAAS,SAAS,OAAO;AAAA,IAChF;AAEA,SAAK,UAAU,EAAE,SAAS,MAAM;AAEhC,WAAO,MAAM;AACX,kBAAY;AACZ,+CAAY;AACZ,wBAAA;AACA,mBAAA;AACA,iBAAW,UAAU;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,aAAaE,MAAAA;AAAAA,IACjB,CAAC;;AAAY,+BAAW,YAAX,oCAAqB,aAAY,QAAQ,QAAQ,SAAS,OAAO;AAAA;AAAA,IAC9E,CAAA;AAAA,EAAC;AAGH,SAAON,MAAAA,QAAQ,OAAO,EAAE,GAAG,OAAO,eAAe,CAAC,OAAO,UAAU,CAAC;AACtE;AAMO,SAAS,gBAA+B;AAC7C,SAAO,kBAAkB;AAC3B;;;;;;;;;;;;;;"}
+{"version":3,"file":"auth.cjs","sources":["../../src/runtime/auth.ts"],"sourcesContent":["import { useCallback, useEffect, useMemo, useRef, useState } from 'react';\nimport type { AthenaTokenRenewer } from '../auth/credential-source';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport { AthenaSdkError } from '../diagnostics/errors';\n\n/**\n * Hosts under `athenaintel.com` that serve customer-written code:\n * - Marathon's computer and application apps: `{id}.app.athenaintel.com`,\n *   `{id}.staging-app.athenaintel.com`, `{id}.canary-app.athenaintel.com`, an\n *   environment's `{id}.app.{env}.athenaintel.com`, and the staging wildcard\n *   `{id}.computer.stg.athenaintel.com` (and `{id}.computer-canary.stg.athenaintel.com`);\n * - the Sandpack bundler's User Interface previews:\n *   `{id}-sandpack.code-sandpack.athenaintel.com` (and `.code-sandpack.{env}.`).\n * They are never a trusted parent and never a backend the bridge points the\n * SDK at.\n */\nconst CUSTOMER_APP_HOST =\n  /^.+\\.(?:(?:[a-z0-9-]+-)?app(?:\\.[a-z0-9-]+)*|computer(?:-[a-z0-9-]+)?\\.stg|code-sandpack(?:\\.[a-z0-9-]+)*)\\.athenaintel\\.com$/i;\n\n/** Whether `hostname` serves customer apps (see {@link CUSTOMER_APP_HOST}). */\nexport function isCustomerAppHost(hostname: string): boolean {\n  return CUSTOMER_APP_HOST.test(hostname);\n}\n\nfunction isLoopbackHost(hostname: string): boolean {\n  return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';\n}\n\nfunction isAthenaHost(hostname: string): boolean {\n  return hostname === 'athenaintel.com' || hostname.endsWith('.athenaintel.com');\n}\n\n/**\n * Check whether a PostMessage origin is trusted as the parent.\n * Accepts:\n * - explicit trusted origins passed by the host app\n * - the current iframe origin (for same-origin wrappers like Marathon)\n * - Athena's own hosts under athenaintel.com and localhost (default\n *   behavior), except the customer-app hosts Marathon serves\n */\nexport function isTrustedParentOrigin({\n  origin,\n  trustedOrigins,\n}: {\n  origin: string;\n  trustedOrigins: string[];\n}): boolean {\n  try {\n    const normalizedOrigin = new URL(origin).origin;\n    if (trustedOrigins.includes(normalizedOrigin)) {\n      return true;\n    }\n\n    const { hostname } = new URL(normalizedOrigin);\n    if (isCustomerAppHost(hostname)) {\n      return false;\n    }\n    return isAthenaHost(hostname) || hostname === 'localhost';\n  } catch {\n    return false;\n  }\n}\n\n/** Why {@link isAcceptableBridgeUrl} refused a URL. */\nexport type BridgeUrlRefusal = 'invalid' | 'insecure' | 'customer_app_host' | 'other_domain';\n\n/**\n * Whether a URL a trusted parent sent in `athena-config` may become the\n * SDK's backend, statewire mount or app URL. The SDK sends its bearer token\n * to the first two, so a URL is taken only when it is `https:` (plain\n * `http:` only between loopback hosts, for local development), carries no\n * credentials, is not a customer-code host ({@link CUSTOMER_APP_HOST}), and\n * is one of Athena's own hosts or, for a parent outside `athenaintel.com`,\n * the parent's own host or a subdomain of it. Sibling hosts are not taken:\n * without a public-suffix list `portal.example.co.uk` and `tenant.github.io`\n * cannot be told apart from a private domain, so a wrapper whose backend is\n * elsewhere passes its URLs through `config`. Returns the refusal, or `null`\n * when the URL is acceptable.\n */\nexport function refuseBridgeUrl({\n  url,\n  parentOrigin,\n}: {\n  url: string;\n  parentOrigin: string;\n}): BridgeUrlRefusal | null {\n  let parsed: URL;\n  let parentHostname: string;\n  try {\n    parsed = new URL(url);\n    parentHostname = new URL(parentOrigin).hostname;\n  } catch {\n    return 'invalid';\n  }\n  if (parsed.username || parsed.password) return 'invalid';\n  const { hostname } = parsed;\n  const loopbackPair = isLoopbackHost(hostname) && isLoopbackHost(parentHostname);\n  if (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopbackPair)) {\n    return 'insecure';\n  }\n  if (isCustomerAppHost(hostname)) return 'customer_app_host';\n  if (loopbackPair || isAthenaHost(hostname)) return null;\n  // Athena and loopback parents point only at Athena's own hosts (above).\n  if (isAthenaHost(parentHostname) || isLoopbackHost(parentHostname)) return 'other_domain';\n  return hostname === parentHostname || hostname.endsWith(`.${parentHostname}`)\n    ? null\n    : 'other_domain';\n}\n\n/** {@link refuseBridgeUrl} as a predicate. */\nexport function isAcceptableBridgeUrl(options: { url: string; parentOrigin: string }): boolean {\n  return refuseBridgeUrl(options) === null;\n}\n\nexport interface ParentBridgeState {\n  /** PropelAuth access token from the parent window. */\n  token: string | null;\n  /**\n   * Statewire sync mount (`…/v2/threads`) minted by the host. `null` when the\n   * host minted none; the provider then derives it from the configured\n   * `apiUrl`'s origin (or the environment preset).\n   */\n  statewireSyncUrl: string | null;\n  /**\n   * Bare Agora API base (no path) minted by the host. `null` when the host\n   * minted none; the provider then uses the configured `backendUrl` (or the\n   * environment preset).\n   */\n  backendBaseUrl: string | null;\n  /** Athena frontend origin provided by the parent wrapper. */\n  appUrl: string | null;\n  /**\n   * True once a host answered the bridge — a `/_athena/auth` mint or an\n   * `athena-config` message — whether or not it minted the statewire fields.\n   * Lets the provider tell an outdated host (answered, no mount) from no host\n   * at all (the environment preset applies).\n   */\n  hostAnswered: boolean;\n  /** True once config has been received from the parent (or timeout fired). */\n  ready: boolean;\n  /**\n   * Set when the Marathon mint (`/_athena/auth`) gave up. It gives up when it\n   * gets a refusal (401, 403, or any 4xx other than 404), a body it cannot\n   * read, or a transient failure (5xx, 408, 429, a network error, a timeout)\n   * on every attempt of one bounded retry cycle. `code` is\n   * `auth_bridge_failed`, or `auth_bridge_timeout` when the last attempt\n   * timed out. After that the bridge does not mint again in the background. A\n   * forced renewal (`renewToken({ force: true })`) starts one new bounded\n   * cycle. A token that an earlier mint handed out is kept (the server still\n   * validates it), and the bridge never puts an empty token in its place. The\n   * next successful mint clears it. Absent or `null` otherwise.\n   */\n  error?: AthenaSdkError | null;\n}\n\n/**\n * {@link ParentBridgeState} plus the bridge's token renewal: `force` (the\n * token was refused) asks the host for a new one — a fresh `/_athena/auth`\n * mint on a Marathon origin, or an `athena-auth-ready` request answered by the\n * parent window's next `athena-auth` — and resolves the held token otherwise.\n */\nexport type ParentBridge = ParentBridgeState & { renewToken: AthenaTokenRenewer };\n\nconst BRIDGE_URL_FIELDS = ['statewireSyncUrl', 'backendBaseUrl', 'appUrl'] as const;\n\ntype BridgeUrlField = (typeof BRIDGE_URL_FIELDS)[number];\n\n/** The URL half of {@link ParentBridgeState} — what a host can hand the SDK. */\nexport type ParentBridgeUrls = Pick<ParentBridgeState, BridgeUrlField>;\n\nconst EMPTY_BRIDGE_URLS: ParentBridgeUrls = {\n  statewireSyncUrl: null,\n  backendBaseUrl: null,\n  appUrl: null,\n};\n\n/**\n * Fold a URL payload over the current URL set without vetting it (the\n * same-origin `/_athena/auth` mint body; a parent's `athena-config` goes\n * through {@link acceptBridgeConfigMessage}). A field is taken only when it is\n * a string; anything else keeps the previous value. Keys outside\n * {@link BridgeUrlField} (a legacy parent's `apiUrl` / `backendUrl` among\n * them) are dropped.\n */\nexport function mergeBridgeConfigMessage(\n  previous: ParentBridgeUrls,\n  payload: Partial<Record<BridgeUrlField, unknown>>,\n): ParentBridgeUrls {\n  const next: ParentBridgeUrls = {\n    statewireSyncUrl: previous.statewireSyncUrl,\n    backendBaseUrl: previous.backendBaseUrl,\n    appUrl: previous.appUrl,\n  };\n  for (const field of BRIDGE_URL_FIELDS) {\n    const value = payload[field];\n    if (typeof value === 'string') {\n      next[field] = value;\n    }\n  }\n  return next;\n}\n\n/** A URL field of an `athena-config` message that was not taken, and why. */\nexport interface RejectedBridgeUrl {\n  field: BridgeUrlField;\n  reason: BridgeUrlRefusal | 'changed';\n}\n\n/**\n * Fold an `athena-config` message from a trusted parent over the current URL\n * set, taking only what is safe to point the SDK's bearer at: each string\n * field must pass {@link refuseBridgeUrl} against the parent's origin. The\n * first config message sets the URLs; once `locked` (a config message was\n * already taken) a value that differs from the held one, including a field\n * the first message left unset, is refused (`changed`), so a later message\n * cannot repoint a running SDK. Resending the same value is fine.\n */\nexport function acceptBridgeConfigMessage({\n  previous,\n  payload,\n  parentOrigin,\n  locked = false,\n}: {\n  previous: ParentBridgeUrls;\n  payload: Partial<Record<BridgeUrlField, unknown>>;\n  parentOrigin: string;\n  locked?: boolean;\n}): { urls: ParentBridgeUrls; rejected: RejectedBridgeUrl[] } {\n  const urls: ParentBridgeUrls = {\n    statewireSyncUrl: previous.statewireSyncUrl,\n    backendBaseUrl: previous.backendBaseUrl,\n    appUrl: previous.appUrl,\n  };\n  const rejected: RejectedBridgeUrl[] = [];\n  for (const field of BRIDGE_URL_FIELDS) {\n    const value = payload[field];\n    if (typeof value !== 'string') continue;\n    const held = previous[field];\n    if (locked || held !== null) {\n      if (held !== value) rejected.push({ field, reason: 'changed' });\n      continue;\n    }\n    const refusal = refuseBridgeUrl({ url: value, parentOrigin });\n    if (refusal !== null) {\n      rejected.push({ field, reason: refusal });\n      continue;\n    }\n    urls[field] = value;\n  }\n  return { urls, rejected };\n}\n\n/**\n * Read the URL set out of a `/_athena/auth` mint body. Non-string fields are\n * `null`.\n */\nexport function readAuthMintUrls(data: Partial<Record<BridgeUrlField, unknown>>): ParentBridgeUrls {\n  return mergeBridgeConfigMessage(EMPTY_BRIDGE_URLS, data);\n}\n\nexport interface ParentBridgeOptions {\n  /**\n   * Exact parent origins that are allowed to send auth/config via postMessage.\n   * Useful for private-cloud or custom-domain deployments.\n   */\n  trustedOrigins?: string[];\n  /** @internal Overrides {@link DEFAULT_MINT_RETRY_POLICY}; used by tests. */\n  mintRetryPolicy?: MintRetryPolicy;\n}\n\n/** How long to wait for the parent bridge before falling back to defaults. */\nconst BRIDGE_TIMEOUT_MS = 2000;\n/** How long a renewal waits for the parent window to answer `athena-auth-ready`. */\nconst PARENT_TOKEN_RENEWAL_TIMEOUT_MS = 5000;\nconst TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1000;\nconst TOKEN_REFRESH_MIN_DELAY_MS = 60 * 1000;\nconst DEFAULT_TOKEN_REFRESH_MS = 55 * 60 * 1000;\nconst EMPTY_TRUSTED_ORIGINS: string[] = [];\n\n/**\n * How one Marathon mint cycle retries. A cycle is the initial acquisition, a\n * scheduled refresh, or a forced renewal. It sends at most `maxAttempts`\n * requests. It retries only a transient failure (5xx, 408, 429, a network\n * error, a timeout), after a capped exponential backoff with jitter, and then\n * it gives up. Nothing retries in the background after a cycle gave up.\n */\nexport interface MintRetryPolicy {\n  /** Requests per cycle, the first one included. */\n  maxAttempts: number;\n  /** Ceiling of the delay before the first retry; it doubles for each retry. */\n  baseDelayMs: number;\n  /** Largest delay before any retry. */\n  maxDelayMs: number;\n  /** How long one request can take before it is aborted and counted as a timeout. */\n  timeoutMs: number;\n  /** Source of jitter in `[0, 1)`. */\n  random: () => number;\n}\n\nexport const DEFAULT_MINT_RETRY_POLICY: MintRetryPolicy = {\n  maxAttempts: 4,\n  baseDelayMs: 500,\n  maxDelayMs: 4000,\n  timeoutMs: BRIDGE_TIMEOUT_MS,\n  random: Math.random,\n};\n\n/** Untrusted shape of the `/_athena/auth` mint body; every field is type-guarded on read. */\ninterface AthenaAuthResponse {\n  token?: unknown;\n  statewireSyncUrl?: unknown;\n  backendBaseUrl?: unknown;\n  appUrl?: unknown;\n  expires_at?: unknown;\n}\n\nconst normalizeOrigin = (value: string): string | null => {\n  try {\n    return new URL(value).origin;\n  } catch {\n    return null;\n  }\n};\n\nexport const getTokenRefreshDelay = (expiresAt: unknown, nowMs: number): number => {\n  if (typeof expiresAt !== 'string') {\n    return DEFAULT_TOKEN_REFRESH_MS;\n  }\n\n  const expiresAtMs = Date.parse(expiresAt);\n  if (!Number.isFinite(expiresAtMs)) {\n    return DEFAULT_TOKEN_REFRESH_MS;\n  }\n\n  return Math.max(TOKEN_REFRESH_MIN_DELAY_MS, expiresAtMs - nowMs - TOKEN_REFRESH_BUFFER_MS);\n};\n\n/**\n * The delay before retry number `retry` of a mint cycle (1 is the first\n * retry). The ceiling is `min(maxDelayMs, baseDelayMs * 2^(retry - 1))`, and\n * equal jitter puts the wait between half of that ceiling and all of it, so\n * viewers whose mint failed at the same time do not retry at the same time.\n */\nexport function getMintRetryDelay({\n  retry,\n  policy = DEFAULT_MINT_RETRY_POLICY,\n}: {\n  retry: number;\n  policy?: Pick<MintRetryPolicy, 'baseDelayMs' | 'maxDelayMs' | 'random'>;\n}): number {\n  const safeRetry = Number.isFinite(retry) ? Math.max(1, Math.floor(retry)) : 1;\n  const ceiling = Math.min(policy.maxDelayMs, policy.baseDelayMs * 2 ** (safeRetry - 1));\n  const jitter = Math.min(1, Math.max(0, policy.random()));\n  return Math.round(ceiling / 2 + (ceiling / 2) * jitter);\n}\n\n/** A mint status worth another attempt: the host, or something in front of it, is briefly unwell. */\nexport function isRetryableMintStatus(status: number): boolean {\n  return status >= 500 || status === 408 || status === 429;\n}\n\n/** A failed `/_athena/auth` request that is worth another attempt. */\ninterface TransientMintFailure {\n  kind: 'transient';\n  status: number | null;\n  reason: 'status' | 'network' | 'timeout';\n  hostError: string | null;\n  cause?: unknown;\n}\n\n/** A failed `/_athena/auth` request that ends its cycle at once. */\ninterface RefusedMintFailure {\n  kind: 'refused';\n  status: number;\n  /** `status`: a 4xx other than 404, 408 and 429. `invalid_body`: a 2xx whose body is not a JSON object. */\n  reason: 'status' | 'invalid_body';\n  hostError: string | null;\n}\n\nexport type MintFailure = TransientMintFailure | RefusedMintFailure;\n\n/** The outcome of one `/_athena/auth` request. */\ntype MintAttempt =\n  | { kind: 'minted'; data: AthenaAuthResponse }\n  /** 404: this is not a Marathon origin. */\n  | { kind: 'absent'; status: number }\n  | MintFailure\n  | { kind: 'cancelled' };\n\n/** The `error` string of a Marathon failure body (`{\"error\":\"mint_failed\"}`), if any. */\nasync function readHostError(resp: Response): Promise<string | null> {\n  try {\n    const body: unknown = await resp.json();\n    if (body && typeof body === 'object' && 'error' in body) {\n      const value = (body as { error?: unknown }).error;\n      return typeof value === 'string' ? value.slice(0, 100) : null;\n    }\n  } catch {\n    // An empty or non-JSON error body tells nothing more than the status.\n  }\n  return null;\n}\n\nconst MINT_RETRY_NOTE =\n  'The SDK stopped retrying and does not connect without a credential. Remount the provider, or call renewToken({ force: true }), to try again.';\n\nfunction mintFailureHint(failure: MintFailure): string {\n  if (failure.kind === 'transient') {\n    return `The host could not mint a viewer token. Check the Marathon and Agora logs. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.reason === 'invalid_body') {\n    return `The host answered /_athena/auth without a JSON mint body, so this origin is not a Marathon bridge. Pass token, getToken or apiKey. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.status === 401) {\n    return `The host has no session for this viewer. Sign in again through the app URL. ${MINT_RETRY_NOTE}`;\n  }\n  if (failure.status === 403) {\n    return `The host does not give this viewer access to the app. ${MINT_RETRY_NOTE}`;\n  }\n  return `The host refused the mint request. ${MINT_RETRY_NOTE}`;\n}\n\n/** The typed error that a mint cycle reports when it gives up. */\nexport function mintFailureError({\n  failure,\n  attempts,\n  phase,\n}: {\n  failure: MintFailure;\n  attempts: number;\n  phase: 'initial' | 'renewal';\n}): AthenaSdkError {\n  const timedOut = failure.kind === 'transient' && failure.reason === 'timeout';\n  const answer =\n    failure.status !== null ? `HTTP ${failure.status}` : timedOut ? 'a timeout' : 'a network error';\n  const message =\n    failure.kind === 'transient'\n      ? `The host auth bridge (/_athena/auth) failed ${attempts} time${attempts === 1 ? '' : 's'} (last: ${answer}).`\n      : failure.reason === 'invalid_body'\n        ? `The host auth bridge (/_athena/auth) answered ${answer} without a JSON mint body.`\n        : `The host auth bridge (/_athena/auth) refused the mint (${answer}).`;\n  return new AthenaSdkError({\n    code: timedOut ? 'auth_bridge_timeout' : 'auth_bridge_failed',\n    message,\n    hint: mintFailureHint(failure),\n    ...(failure.status !== null && { status: failure.status }),\n    ...(failure.hostError !== null && { detail: { code: failure.hostError } }),\n    ...(failure.kind === 'transient' && failure.cause !== undefined && { cause: failure.cause }),\n    context: {\n      mode: 'marathon',\n      phase,\n      attempts,\n      reason: failure.reason,\n      host_error: failure.hostError,\n    },\n  });\n}\n\n/**\n * Listens for auth tokens AND environment config from the host environment.\n *\n * Two transport modes, picked automatically:\n *\n * 1. **Iframe (legacy / Olympus inline preview)**: a parent window posts\n *    `athena-config` and `athena-auth` via PostMessage. The hook also posts\n *    `athena-auth-ready` so the parent knows when to (re-)send. Only the\n *    window that frames the app (`event.source === window.parent`) on a\n *    trusted origin ({@link isTrustedParentOrigin}) is heard, and an\n *    `athena-config` URL is taken only once and only when it passes\n *    {@link refuseBridgeUrl}.\n *\n * 2. **Standalone (Marathon-served deploy URL)**: top-level navigation, no\n *    parent. The hook fetches `/_athena/auth` on its own origin. Marathon\n *    validates its session cookie (sent by the browser automatically) and\n *    returns `{ token, statewireSyncUrl, backendBaseUrl, appUrl }` — the\n *    statewire mount, the bare Agora base and the app origin. A 404 means\n *    we're not on a Marathon origin — the hook falls through with empty\n *    state. Any other failure fails closed: one bounded retry cycle\n *    ({@link MintRetryPolicy}) for a transient failure, none for a refusal,\n *    and then `error` is set and `ready` flips with no token — never an\n *    empty or anonymous one.\n *\n * In both modes the app never blocks indefinitely: the iframe bridge flips\n * `ready: true` after a timeout, and a Marathon mint cycle ends after at most\n * `maxAttempts` requests.\n */\nexport function useParentBridge({\n  trustedOrigins = EMPTY_TRUSTED_ORIGINS,\n  mintRetryPolicy = DEFAULT_MINT_RETRY_POLICY,\n}: ParentBridgeOptions = {}): ParentBridge {\n  const isInIframe = typeof window !== 'undefined' && window.parent !== window;\n  const runtimeTrustedOrigins = useMemo(() => {\n    const origins = new Set<string>();\n\n    if (typeof window !== 'undefined') {\n      origins.add(window.location.origin);\n    }\n\n    for (const trustedOrigin of trustedOrigins) {\n      const normalizedOrigin = normalizeOrigin(trustedOrigin);\n      if (normalizedOrigin) {\n        origins.add(normalizedOrigin);\n      }\n    }\n\n    return [...origins];\n  }, [trustedOrigins]);\n\n  const [state, setState] = useState<ParentBridgeState>({\n    token: null,\n    ...EMPTY_BRIDGE_URLS,\n    hostAnswered: false,\n    ready: false,\n    error: null,\n  });\n  // Read when a mint cycle starts, so a caller's inline policy object does not\n  // restart the bridge on every render.\n  const mintRetryPolicyRef = useRef(mintRetryPolicy);\n  mintRetryPolicyRef.current = mintRetryPolicy;\n  const readySignalSent = useRef(false);\n  const configReceived = useRef(false);\n  // The URLs the parent has set so far: a later `athena-config` may not change them.\n  const parentUrlsRef = useRef<ParentBridgeUrls>(EMPTY_BRIDGE_URLS);\n  const tokenRef = useRef<string | null>(state.token);\n  tokenRef.current = state.token;\n  // Installed by whichever transport mode is active (iframe or Marathon).\n  const renewerRef = useRef<AthenaTokenRenewer | null>(null);\n\n  useEffect(() => {\n    if (!isInIframe) return;\n\n    const endBridgeSpan = athenaDiagnostics.span('auth.bridge', 'auth.bridge.start', {\n      mode: 'iframe',\n    });\n    let spanEnded = false;\n    const endOnce: typeof endBridgeSpan = (name, options) => {\n      if (spanEnded) return 0;\n      spanEnded = true;\n      return endBridgeSpan(name, options);\n    };\n\n    // Renewals waiting for the parent's next `athena-auth`.\n    const tokenWaiters = new Set<(token: string | null) => void>();\n\n    const handler = (event: MessageEvent) => {\n      // Only the window that frames this app speaks for the host: a popup,\n      // an opener or a sibling frame on a trusted origin does not.\n      if (event.source !== window.parent) return;\n      if (\n        !isTrustedParentOrigin({ origin: event.origin, trustedOrigins: runtimeTrustedOrigins })\n      ) {\n        return;\n      }\n      if (!event.data || typeof event.data !== 'object') return;\n\n      if (event.data.type === 'athena-config') {\n        const { urls, rejected } = acceptBridgeConfigMessage({\n          previous: parentUrlsRef.current,\n          payload: event.data,\n          parentOrigin: event.origin,\n          locked: configReceived.current,\n        });\n        configReceived.current = true;\n        parentUrlsRef.current = urls;\n        for (const { field, reason } of rejected) {\n          athenaDiagnostics.emit('auth.bridge.config_rejected', {\n            level: 'warn',\n            data: { mode: 'iframe', field, reason },\n          });\n        }\n        setState((prev) => ({\n          ...prev,\n          ...urls,\n          hostAnswered: true,\n          // Don't set ready here — wait for athena-auth (token) or the timeout.\n          // Setting ready on config alone causes a race: the thread list fires\n          // before the token arrives, falling back to X-API-KEY.\n        }));\n      }\n\n      if (event.data.type === 'athena-auth' && typeof event.data.token === 'string') {\n        endOnce('auth.bridge.ready', { data: { mode: 'iframe' } });\n        athenaDiagnostics.emit('auth.token.acquired', {\n          level: 'debug',\n          data: { source: 'iframe-postmessage' },\n        });\n        setState((prev) => ({\n          ...prev,\n          token: event.data.token,\n          ready: true,\n        }));\n        tokenRef.current = event.data.token;\n        for (const resolve of [...tokenWaiters]) resolve(event.data.token);\n      }\n    };\n    window.addEventListener('message', handler);\n\n    // A renewal asks the parent to send its current token again — the same\n    // `athena-auth-ready` handshake a parent already answers — and settles on\n    // the next `athena-auth`, or on the held token when none arrives in time.\n    renewerRef.current = ({ force }) => {\n      if (!force) return Promise.resolve(tokenRef.current);\n      return new Promise<string | null>((resolve) => {\n        const settle = (token: string | null) => {\n          clearTimeout(timer);\n          tokenWaiters.delete(settle);\n          resolve(token ?? tokenRef.current);\n        };\n        const timer = setTimeout(() => settle(null), PARENT_TOKEN_RENEWAL_TIMEOUT_MS);\n        tokenWaiters.add(settle);\n        window.parent.postMessage({ type: 'athena-auth-ready' }, '*');\n      });\n    };\n\n    if (!readySignalSent.current) {\n      window.parent.postMessage({ type: 'athena-auth-ready' }, '*');\n      readySignalSent.current = true;\n    }\n\n    const timer = setTimeout(() => {\n      endOnce('auth.bridge.timeout', {\n        data: {\n          mode: 'iframe',\n          timeout_ms: BRIDGE_TIMEOUT_MS,\n          config_received: configReceived.current,\n        },\n      });\n      setState((prev) => (prev.ready ? prev : { ...prev, ready: true }));\n    }, BRIDGE_TIMEOUT_MS);\n\n    return () => {\n      window.removeEventListener('message', handler);\n      clearTimeout(timer);\n      renewerRef.current = null;\n      for (const resolve of [...tokenWaiters]) resolve(null);\n    };\n  }, [isInIframe, runtimeTrustedOrigins]);\n\n  useEffect(() => {\n    if (isInIframe) return;\n    if (typeof window === 'undefined') return;\n\n    let cancelled = false;\n    let refreshTimer: ReturnType<typeof setTimeout> | null = null;\n    let controller: AbortController | null = null;\n    let inFlight: Promise<string | null> | null = null;\n    let retryWait: { timer: ReturnType<typeof setTimeout>; resolve: () => void } | null = null;\n\n    const clearRefreshTimer = () => {\n      if (refreshTimer) {\n        clearTimeout(refreshTimer);\n        refreshTimer = null;\n      }\n    };\n\n    const endRetryWait = () => {\n      if (!retryWait) return;\n      clearTimeout(retryWait.timer);\n      const { resolve } = retryWait;\n      retryWait = null;\n      resolve();\n    };\n\n    /** The backoff between two attempts of one cycle; unmounting ends it at once. */\n    const waitBeforeRetry = (delayMs: number) =>\n      new Promise<void>((resolve) => {\n        retryWait = { timer: setTimeout(endRetryWait, delayMs), resolve };\n      });\n\n    // The only background mint: once per token, shortly before it expires. It\n    // is not rescheduled when its cycle gives up. A forced renewal that gives\n    // up leaves it in place on purpose: the held token is still live, and\n    // this one bounded cycle keeps a viewer connected past a brief outage.\n    const scheduleRefresh = (expiresAt: unknown) => {\n      clearRefreshTimer();\n      const delay = getTokenRefreshDelay(expiresAt, Date.now());\n      refreshTimer = setTimeout(() => {\n        refreshTimer = null;\n        void fetchAuth({ initial: false });\n      }, delay);\n    };\n\n    /** One `/_athena/auth` request, classified. */\n    const mintOnce = async (timeoutMs: number): Promise<MintAttempt> => {\n      const requestController = new AbortController();\n      controller = requestController;\n      let timedOut = false;\n      const requestTimer = setTimeout(() => {\n        timedOut = true;\n        requestController.abort();\n      }, timeoutMs);\n\n      try {\n        const resp = await fetch('/_athena/auth', {\n          credentials: 'include',\n          headers: { Accept: 'application/json' },\n          signal: requestController.signal,\n        });\n        if (cancelled) return { kind: 'cancelled' };\n        // Not a Marathon origin: expected for standalone apps and local dev.\n        if (resp.status === 404) return { kind: 'absent', status: resp.status };\n        if (!resp.ok) {\n          const hostError = await readHostError(resp);\n          if (cancelled) return { kind: 'cancelled' };\n          // `readHostError` swallows the abort of a stalled error body. Only a\n          // retryable status becomes a timeout: a refusal (401, 403, other\n          // 4xx) is known from its status and still fails after one request.\n          if (timedOut && isRetryableMintStatus(resp.status)) {\n            return { kind: 'transient', status: null, reason: 'timeout', hostError: null };\n          }\n          return isRetryableMintStatus(resp.status)\n            ? { kind: 'transient', status: resp.status, reason: 'status', hostError }\n            : { kind: 'refused', status: resp.status, reason: 'status', hostError };\n        }\n\n        let data: unknown;\n        try {\n          data = await resp.json();\n        } catch (error) {\n          if (cancelled) return { kind: 'cancelled' };\n          if (timedOut) {\n            return { kind: 'transient', status: null, reason: 'timeout', hostError: null, cause: error };\n          }\n          return { kind: 'refused', status: resp.status, reason: 'invalid_body', hostError: null };\n        }\n        if (cancelled) return { kind: 'cancelled' };\n        // Marathon's 200 always carries a token. A 2xx without one is a\n        // broken mint: it must not replace a held token or count as success.\n        const token = data && typeof data === 'object' ? (data as { token?: unknown }).token : null;\n        if (typeof token !== 'string' || token === '') {\n          return { kind: 'refused', status: resp.status, reason: 'invalid_body', hostError: null };\n        }\n        return { kind: 'minted', data: data as AthenaAuthResponse };\n      } catch (error) {\n        if (cancelled) return { kind: 'cancelled' };\n        if (timedOut) {\n          return { kind: 'transient', status: null, reason: 'timeout', hostError: null, cause: error };\n        }\n        return { kind: 'transient', status: null, reason: 'network', hostError: null, cause: error };\n      } finally {\n        clearTimeout(requestTimer);\n        if (controller === requestController) controller = null;\n      }\n    };\n\n    /**\n     * One bounded mint cycle: the initial acquisition (a span the provider\n     * waits on) or a renewal (the scheduled refresh, a forced renewal). It\n     * retries a transient failure up to `maxAttempts` requests in all, with\n     * a capped, jittered backoff. On a refusal, or after the last attempt, it\n     * gives up: it reports one typed error, sets `error`, keeps any token an\n     * earlier mint handed out, and schedules nothing.\n     */\n    const runMintCycle = async ({ initial }: { initial: boolean }): Promise<string | null> => {\n      const policy = mintRetryPolicyRef.current;\n      const maxAttempts = Math.max(1, Math.floor(policy.maxAttempts));\n      const phase = initial ? 'initial' : 'renewal';\n      const endBridgeSpan = initial\n        ? athenaDiagnostics.span('auth.bridge', 'auth.bridge.start', { mode: 'marathon' })\n        : null;\n\n      let attempts = 0;\n      let lastFailure: MintFailure | null = null;\n      while (attempts < maxAttempts) {\n        attempts += 1;\n        const outcome = await mintOnce(policy.timeoutMs);\n        if (cancelled || outcome.kind === 'cancelled') return null;\n\n        if (outcome.kind === 'absent') {\n          endBridgeSpan?.('auth.bridge.absent', {\n            data: { mode: 'marathon', status: outcome.status },\n          });\n          // 404 means no bridge here, so an earlier mint failure no longer\n          // applies; the provider falls back to its other credentials.\n          setState((prev) =>\n            prev.ready && prev.error == null ? prev : { ...prev, ready: true, error: null },\n          );\n          return null;\n        }\n\n        if (outcome.kind === 'minted') {\n          const { data } = outcome;\n          if (endBridgeSpan) {\n            endBridgeSpan('auth.bridge.ready', {\n              data: { mode: 'marathon', has_token: typeof data.token === 'string', attempts },\n            });\n            athenaDiagnostics.emit('auth.token.acquired', {\n              level: 'debug',\n              data: { source: 'marathon', expires_at: data.expires_at },\n            });\n          } else {\n            athenaDiagnostics.emit('auth.token.refreshed', {\n              level: 'debug',\n              data: { source: 'marathon', expires_at: data.expires_at, attempts },\n            });\n          }\n          const token = typeof data.token === 'string' ? data.token : null;\n          setState({\n            token,\n            ...readAuthMintUrls(data),\n            hostAnswered: true,\n            ready: true,\n            error: null,\n          });\n          tokenRef.current = token;\n          scheduleRefresh(data.expires_at);\n          return token;\n        }\n\n        lastFailure = outcome;\n        if (outcome.kind === 'refused' || attempts >= maxAttempts) break;\n\n        const delayMs = getMintRetryDelay({ retry: attempts, policy });\n        athenaDiagnostics.emit('auth.bridge.retry', {\n          level: 'warn',\n          data: {\n            mode: 'marathon',\n            phase,\n            status: outcome.status,\n            reason: outcome.reason,\n            host_error: outcome.hostError,\n            attempt: attempts,\n            max_attempts: maxAttempts,\n            delay_ms: delayMs,\n          },\n        });\n        await waitBeforeRetry(delayMs);\n        if (cancelled) return null;\n      }\n\n      if (!lastFailure) return null;\n      const error = mintFailureError({ failure: lastFailure, attempts, phase });\n      const failureData = {\n        mode: 'marathon',\n        phase,\n        status: lastFailure.status,\n        reason: lastFailure.reason,\n        attempts,\n      };\n      if (endBridgeSpan) {\n        endBridgeSpan(\n          error.code === 'auth_bridge_timeout' ? 'auth.bridge.timeout' : 'auth.bridge.error',\n          { data: failureData, error },\n        );\n      } else {\n        athenaDiagnostics.emit('auth.token.refresh_failed', {\n          level: 'error',\n          data: failureData,\n          error,\n        });\n      }\n      setState((prev) => ({ ...prev, error, ready: true }));\n      return null;\n    };\n\n    // One mint cycle at a time. The initial acquisition, a scheduled refresh\n    // and forced renewals that overlap share the cycle in flight (its\n    // requests, their timeouts and its backoff) instead of starting their own,\n    // so concurrent callers never multiply the requests.\n    const fetchAuth = (options: { initial: boolean }): Promise<string | null> => {\n      inFlight ??= runMintCycle(options).finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    };\n\n    // A forced renewal mints now instead of waiting for the scheduled refresh\n    // (joining a cycle already in flight), and may start a new bounded cycle\n    // after one gave up. The schedule restarts from the new token's expiry.\n    renewerRef.current = ({ force }) => {\n      if (!force) return Promise.resolve(tokenRef.current);\n      return fetchAuth({ initial: false }).then((token) => token ?? tokenRef.current);\n    };\n\n    void fetchAuth({ initial: true });\n\n    return () => {\n      cancelled = true;\n      controller?.abort();\n      clearRefreshTimer();\n      endRetryWait();\n      renewerRef.current = null;\n    };\n  }, [isInIframe]);\n\n  const renewToken = useCallback<AthenaTokenRenewer>(\n    (options) => renewerRef.current?.(options) ?? Promise.resolve(tokenRef.current),\n    [],\n  );\n\n  return useMemo(() => ({ ...state, renewToken }), [state, renewToken]);\n}\n\n/**\n * Legacy hook — returns just the auth token from the parent bridge.\n * Prefer useParentBridge() for new code.\n */\nexport function useParentAuth(): string | null {\n  return useParentBridge().token;\n}\n"],"names":["AthenaSdkError","useMemo","useState","useRef","useEffect","athenaDiagnostics","timer","useCallback"],"mappings":";;;;;AAgBA,MAAM,oBACJ;AAGK,SAAS,kBAAkB,UAA2B;AAC3D,SAAO,kBAAkB,KAAK,QAAQ;AACxC;AAEA,SAAS,eAAe,UAA2B;AACjD,SAAO,aAAa,eAAe,aAAa,eAAe,aAAa;AAC9E;AAEA,SAAS,aAAa,UAA2B;AAC/C,SAAO,aAAa,qBAAqB,SAAS,SAAS,kBAAkB;AAC/E;AAUO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AACF,GAGY;AACV,MAAI;AACF,UAAM,mBAAmB,IAAI,IAAI,MAAM,EAAE;AACzC,QAAI,eAAe,SAAS,gBAAgB,GAAG;AAC7C,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,SAAA,IAAa,IAAI,IAAI,gBAAgB;AAC7C,QAAI,kBAAkB,QAAQ,GAAG;AAC/B,aAAO;AAAA,IACT;AACA,WAAO,aAAa,QAAQ,KAAK,aAAa;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAkBO,SAAS,gBAAgB;AAAA,EAC9B;AAAA,EACA;AACF,GAG4B;AAC1B,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,GAAG;AACpB,qBAAiB,IAAI,IAAI,YAAY,EAAE;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,OAAO,SAAU,QAAO;AAC/C,QAAM,EAAE,aAAa;AACrB,QAAM,eAAe,eAAe,QAAQ,KAAK,eAAe,cAAc;AAC9E,MAAI,OAAO,aAAa,YAAY,EAAE,OAAO,aAAa,WAAW,eAAe;AAClF,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,QAAQ,EAAG,QAAO;AACxC,MAAI,gBAAgB,aAAa,QAAQ,EAAG,QAAO;AAEnD,MAAI,aAAa,cAAc,KAAK,eAAe,cAAc,EAAG,QAAO;AAC3E,SAAO,aAAa,kBAAkB,SAAS,SAAS,IAAI,cAAc,EAAE,IACxE,OACA;AACN;AAwDA,MAAM,oBAAoB,CAAC,oBAAoB,kBAAkB,QAAQ;AAOzE,MAAM,oBAAsC;AAAA,EAC1C,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,QAAQ;AACV;AAUO,SAAS,yBACd,UACA,SACkB;AAClB,QAAM,OAAyB;AAAA,IAC7B,kBAAkB,SAAS;AAAA,IAC3B,gBAAgB,SAAS;AAAA,IACzB,QAAQ,SAAS;AAAA,EAAA;AAEnB,aAAW,SAAS,mBAAmB;AACrC,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,WAAK,KAAK,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAiBO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AACX,GAK8D;AAC5D,QAAM,OAAyB;AAAA,IAC7B,kBAAkB,SAAS;AAAA,IAC3B,gBAAgB,SAAS;AAAA,IACzB,QAAQ,SAAS;AAAA,EAAA;AAEnB,QAAM,WAAgC,CAAA;AACtC,aAAW,SAAS,mBAAmB;AACrC,UAAM,QAAQ,QAAQ,KAAK;AAC3B,QAAI,OAAO,UAAU,SAAU;AAC/B,UAAM,OAAO,SAAS,KAAK;AAC3B,QAAI,UAAU,SAAS,MAAM;AAC3B,UAAI,SAAS,MAAO,UAAS,KAAK,EAAE,OAAO,QAAQ,WAAW;AAC9D;AAAA,IACF;AACA,UAAM,UAAU,gBAAgB,EAAE,KAAK,OAAO,cAAc;AAC5D,QAAI,YAAY,MAAM;AACpB,eAAS,KAAK,EAAE,OAAO,QAAQ,SAAS;AACxC;AAAA,IACF;AACA,SAAK,KAAK,IAAI;AAAA,EAChB;AACA,SAAO,EAAE,MAAM,SAAA;AACjB;AAMO,SAAS,iBAAiB,MAAkE;AACjG,SAAO,yBAAyB,mBAAmB,IAAI;AACzD;AAaA,MAAM,oBAAoB;AAE1B,MAAM,kCAAkC;AACxC,MAAM,0BAA0B,IAAI,KAAK;AACzC,MAAM,6BAA6B,KAAK;AACxC,MAAM,2BAA2B,KAAK,KAAK;AAC3C,MAAM,wBAAkC,CAAA;AAsBjC,MAAM,4BAA6C;AAAA,EACxD,aAAa;AAAA,EACb,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,QAAQ,KAAK;AACf;AAWA,MAAM,kBAAkB,CAAC,UAAiC;AACxD,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,uBAAuB,CAAC,WAAoB,UAA0B;AACjF,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,OAAO,SAAS,WAAW,GAAG;AACjC,WAAO;AAAA,EACT;AAEA,SAAO,KAAK,IAAI,4BAA4B,cAAc,QAAQ,uBAAuB;AAC3F;AAQO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA,SAAS;AACX,GAGW;AACT,QAAM,YAAY,OAAO,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,CAAC,IAAI;AAC5E,QAAM,UAAU,KAAK,IAAI,OAAO,YAAY,OAAO,cAAc,MAAM,YAAY,EAAE;AACrF,QAAM,SAAS,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,OAAA,CAAQ,CAAC;AACvD,SAAO,KAAK,MAAM,UAAU,IAAK,UAAU,IAAK,MAAM;AACxD;AAGO,SAAS,sBAAsB,QAAyB;AAC7D,SAAO,UAAU,OAAO,WAAW,OAAO,WAAW;AACvD;AA+BA,eAAe,cAAc,MAAwC;AACnE,MAAI;AACF,UAAM,OAAgB,MAAM,KAAK,KAAA;AACjC,QAAI,QAAQ,OAAO,SAAS,YAAY,WAAW,MAAM;AACvD,YAAM,QAAS,KAA6B;AAC5C,aAAO,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG,GAAG,IAAI;AAAA,IAC3D;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,MAAM,kBACJ;AAEF,SAAS,gBAAgB,SAA8B;AACrD,MAAI,QAAQ,SAAS,aAAa;AAChC,WAAO,8EAA8E,eAAe;AAAA,EACtG;AACA,MAAI,QAAQ,WAAW,gBAAgB;AACrC,WAAO,sIAAsI,eAAe;AAAA,EAC9J;AACA,MAAI,QAAQ,WAAW,KAAK;AAC1B,WAAO,+EAA+E,eAAe;AAAA,EACvG;AACA,MAAI,QAAQ,WAAW,KAAK;AAC1B,WAAO,yDAAyD,eAAe;AAAA,EACjF;AACA,SAAO,sCAAsC,eAAe;AAC9D;AAGO,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,QAAM,WAAW,QAAQ,SAAS,eAAe,QAAQ,WAAW;AACpE,QAAM,SACJ,QAAQ,WAAW,OAAO,QAAQ,QAAQ,MAAM,KAAK,WAAW,cAAc;AAChF,QAAM,UACJ,QAAQ,SAAS,cACb,+CAA+C,QAAQ,QAAQ,aAAa,IAAI,KAAK,GAAG,WAAW,MAAM,OACzG,QAAQ,WAAW,iBACjB,iDAAiD,MAAM,+BACvD,0DAA0D,MAAM;AACxE,SAAO,IAAIA,OAAAA,eAAe;AAAA,IACxB,MAAM,WAAW,wBAAwB;AAAA,IACzC;AAAA,IACA,MAAM,gBAAgB,OAAO;AAAA,IAC7B,GAAI,QAAQ,WAAW,QAAQ,EAAE,QAAQ,QAAQ,OAAA;AAAA,IACjD,GAAI,QAAQ,cAAc,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,YAAU;AAAA,IACtE,GAAI,QAAQ,SAAS,eAAe,QAAQ,UAAU,UAAa,EAAE,OAAO,QAAQ,MAAA;AAAA,IACpF,SAAS;AAAA,MACP,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,IAAA;AAAA,EACtB,CACD;AACH;AA8BO,SAAS,gBAAgB;AAAA,EAC9B,iBAAiB;AAAA,EACjB,kBAAkB;AACpB,IAAyB,IAAkB;AACzC,QAAM,aAAa,OAAO,WAAW,eAAe,OAAO,WAAW;AACtE,QAAM,wBAAwBC,WAAAA,QAAQ,MAAM;AAC1C,UAAM,8BAAc,IAAA;AAEpB,QAAI,OAAO,WAAW,aAAa;AACjC,cAAQ,IAAI,OAAO,SAAS,MAAM;AAAA,IACpC;AAEA,eAAW,iBAAiB,gBAAgB;AAC1C,YAAM,mBAAmB,gBAAgB,aAAa;AACtD,UAAI,kBAAkB;AACpB,gBAAQ,IAAI,gBAAgB;AAAA,MAC9B;AAAA,IACF;AAEA,WAAO,CAAC,GAAG,OAAO;AAAA,EACpB,GAAG,CAAC,cAAc,CAAC;AAEnB,QAAM,CAAC,OAAO,QAAQ,IAAIC,oBAA4B;AAAA,IACpD,OAAO;AAAA,IACP,GAAG;AAAA,IACH,cAAc;AAAA,IACd,OAAO;AAAA,IACP,OAAO;AAAA,EAAA,CACR;AAGD,QAAM,qBAAqBC,WAAAA,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,kBAAkBA,WAAAA,OAAO,KAAK;AACpC,QAAM,iBAAiBA,WAAAA,OAAO,KAAK;AAEnC,QAAM,gBAAgBA,WAAAA,OAAyB,iBAAiB;AAChE,QAAM,WAAWA,WAAAA,OAAsB,MAAM,KAAK;AAClD,WAAS,UAAU,MAAM;AAEzB,QAAM,aAAaA,WAAAA,OAAkC,IAAI;AAEzDC,aAAAA,UAAU,MAAM;AACd,QAAI,CAAC,WAAY;AAEjB,UAAM,gBAAgBC,kBAAAA,kBAAkB,KAAK,eAAe,qBAAqB;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AACD,QAAI,YAAY;AAChB,UAAM,UAAgC,CAAC,MAAM,YAAY;AACvD,UAAI,UAAW,QAAO;AACtB,kBAAY;AACZ,aAAO,cAAc,MAAM,OAAO;AAAA,IACpC;AAGA,UAAM,mCAAmB,IAAA;AAEzB,UAAM,UAAU,CAAC,UAAwB;AAGvC,UAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,UACE,CAAC,sBAAsB,EAAE,QAAQ,MAAM,QAAQ,gBAAgB,sBAAA,CAAuB,GACtF;AACA;AAAA,MACF;AACA,UAAI,CAAC,MAAM,QAAQ,OAAO,MAAM,SAAS,SAAU;AAEnD,UAAI,MAAM,KAAK,SAAS,iBAAiB;AACvC,cAAM,EAAE,MAAM,SAAA,IAAa,0BAA0B;AAAA,UACnD,UAAU,cAAc;AAAA,UACxB,SAAS,MAAM;AAAA,UACf,cAAc,MAAM;AAAA,UACpB,QAAQ,eAAe;AAAA,QAAA,CACxB;AACD,uBAAe,UAAU;AACzB,sBAAc,UAAU;AACxB,mBAAW,EAAE,OAAO,OAAA,KAAY,UAAU;AACxCA,4BAAAA,kBAAkB,KAAK,+BAA+B;AAAA,YACpD,OAAO;AAAA,YACP,MAAM,EAAE,MAAM,UAAU,OAAO,OAAA;AAAA,UAAO,CACvC;AAAA,QACH;AACA,iBAAS,CAAC,UAAU;AAAA,UAClB,GAAG;AAAA,UACH,GAAG;AAAA,UACH,cAAc;AAAA;AAAA;AAAA;AAAA,QAAA,EAId;AAAA,MACJ;AAEA,UAAI,MAAM,KAAK,SAAS,iBAAiB,OAAO,MAAM,KAAK,UAAU,UAAU;AAC7E,gBAAQ,qBAAqB,EAAE,MAAM,EAAE,MAAM,SAAA,GAAY;AACzDA,0BAAAA,kBAAkB,KAAK,uBAAuB;AAAA,UAC5C,OAAO;AAAA,UACP,MAAM,EAAE,QAAQ,qBAAA;AAAA,QAAqB,CACtC;AACD,iBAAS,CAAC,UAAU;AAAA,UAClB,GAAG;AAAA,UACH,OAAO,MAAM,KAAK;AAAA,UAClB,OAAO;AAAA,QAAA,EACP;AACF,iBAAS,UAAU,MAAM,KAAK;AAC9B,mBAAW,WAAW,CAAC,GAAG,YAAY,EAAG,SAAQ,MAAM,KAAK,KAAK;AAAA,MACnE;AAAA,IACF;AACA,WAAO,iBAAiB,WAAW,OAAO;AAK1C,eAAW,UAAU,CAAC,EAAE,YAAY;AAClC,UAAI,CAAC,MAAO,QAAO,QAAQ,QAAQ,SAAS,OAAO;AACnD,aAAO,IAAI,QAAuB,CAAC,YAAY;AAC7C,cAAM,SAAS,CAAC,UAAyB;AACvC,uBAAaC,MAAK;AAClB,uBAAa,OAAO,MAAM;AAC1B,kBAAQ,SAAS,SAAS,OAAO;AAAA,QACnC;AACA,cAAMA,SAAQ,WAAW,MAAM,OAAO,IAAI,GAAG,+BAA+B;AAC5E,qBAAa,IAAI,MAAM;AACvB,eAAO,OAAO,YAAY,EAAE,MAAM,oBAAA,GAAuB,GAAG;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,gBAAgB,SAAS;AAC5B,aAAO,OAAO,YAAY,EAAE,MAAM,oBAAA,GAAuB,GAAG;AAC5D,sBAAgB,UAAU;AAAA,IAC5B;AAEA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,uBAAuB;AAAA,QAC7B,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,YAAY;AAAA,UACZ,iBAAiB,eAAe;AAAA,QAAA;AAAA,MAClC,CACD;AACD,eAAS,CAAC,SAAU,KAAK,QAAQ,OAAO,EAAE,GAAG,MAAM,OAAO,MAAO;AAAA,IACnE,GAAG,iBAAiB;AAEpB,WAAO,MAAM;AACX,aAAO,oBAAoB,WAAW,OAAO;AAC7C,mBAAa,KAAK;AAClB,iBAAW,UAAU;AACrB,iBAAW,WAAW,CAAC,GAAG,YAAY,WAAW,IAAI;AAAA,IACvD;AAAA,EACF,GAAG,CAAC,YAAY,qBAAqB,CAAC;AAEtCF,aAAAA,UAAU,MAAM;AACd,QAAI,WAAY;AAChB,QAAI,OAAO,WAAW,YAAa;AAEnC,QAAI,YAAY;AAChB,QAAI,eAAqD;AACzD,QAAI,aAAqC;AACzC,QAAI,WAA0C;AAC9C,QAAI,YAAkF;AAEtF,UAAM,oBAAoB,MAAM;AAC9B,UAAI,cAAc;AAChB,qBAAa,YAAY;AACzB,uBAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,eAAe,MAAM;AACzB,UAAI,CAAC,UAAW;AAChB,mBAAa,UAAU,KAAK;AAC5B,YAAM,EAAE,YAAY;AACpB,kBAAY;AACZ,cAAA;AAAA,IACF;AAGA,UAAM,kBAAkB,CAAC,YACvB,IAAI,QAAc,CAAC,YAAY;AAC7B,kBAAY,EAAE,OAAO,WAAW,cAAc,OAAO,GAAG,QAAA;AAAA,IAC1D,CAAC;AAMH,UAAM,kBAAkB,CAAC,cAAuB;AAC9C,wBAAA;AACA,YAAM,QAAQ,qBAAqB,WAAW,KAAK,KAAK;AACxD,qBAAe,WAAW,MAAM;AAC9B,uBAAe;AACf,aAAK,UAAU,EAAE,SAAS,OAAO;AAAA,MACnC,GAAG,KAAK;AAAA,IACV;AAGA,UAAM,WAAW,OAAO,cAA4C;AAClE,YAAM,oBAAoB,IAAI,gBAAA;AAC9B,mBAAa;AACb,UAAI,WAAW;AACf,YAAM,eAAe,WAAW,MAAM;AACpC,mBAAW;AACX,0BAAkB,MAAA;AAAA,MACpB,GAAG,SAAS;AAEZ,UAAI;AACF,cAAM,OAAO,MAAM,MAAM,iBAAiB;AAAA,UACxC,aAAa;AAAA,UACb,SAAS,EAAE,QAAQ,mBAAA;AAAA,UACnB,QAAQ,kBAAkB;AAAA,QAAA,CAC3B;AACD,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAE9B,YAAI,KAAK,WAAW,IAAK,QAAO,EAAE,MAAM,UAAU,QAAQ,KAAK,OAAA;AAC/D,YAAI,CAAC,KAAK,IAAI;AACZ,gBAAM,YAAY,MAAM,cAAc,IAAI;AAC1C,cAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAI9B,cAAI,YAAY,sBAAsB,KAAK,MAAM,GAAG;AAClD,mBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,KAAA;AAAA,UAC1E;AACA,iBAAO,sBAAsB,KAAK,MAAM,IACpC,EAAE,MAAM,aAAa,QAAQ,KAAK,QAAQ,QAAQ,UAAU,UAAA,IAC5D,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,UAAU,UAAA;AAAA,QAChE;AAEA,YAAI;AACJ,YAAI;AACF,iBAAO,MAAM,KAAK,KAAA;AAAA,QACpB,SAAS,OAAO;AACd,cAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAC9B,cAAI,UAAU;AACZ,mBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,UACvF;AACA,iBAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,gBAAgB,WAAW,KAAA;AAAA,QACpF;AACA,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAG9B,cAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ;AACvF,YAAI,OAAO,UAAU,YAAY,UAAU,IAAI;AAC7C,iBAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,QAAQ,QAAQ,gBAAgB,WAAW,KAAA;AAAA,QACpF;AACA,eAAO,EAAE,MAAM,UAAU,KAAA;AAAA,MAC3B,SAAS,OAAO;AACd,YAAI,UAAW,QAAO,EAAE,MAAM,YAAA;AAC9B,YAAI,UAAU;AACZ,iBAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,QACvF;AACA,eAAO,EAAE,MAAM,aAAa,QAAQ,MAAM,QAAQ,WAAW,WAAW,MAAM,OAAO,MAAA;AAAA,MACvF,UAAA;AACE,qBAAa,YAAY;AACzB,YAAI,eAAe,kBAAmB,cAAa;AAAA,MACrD;AAAA,IACF;AAUA,UAAM,eAAe,OAAO,EAAE,cAA4D;AACxF,YAAM,SAAS,mBAAmB;AAClC,YAAM,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,OAAO,WAAW,CAAC;AAC9D,YAAM,QAAQ,UAAU,YAAY;AACpC,YAAM,gBAAgB,UAClBC,kBAAAA,kBAAkB,KAAK,eAAe,qBAAqB,EAAE,MAAM,WAAA,CAAY,IAC/E;AAEJ,UAAI,WAAW;AACf,UAAI,cAAkC;AACtC,aAAO,WAAW,aAAa;AAC7B,oBAAY;AACZ,cAAM,UAAU,MAAM,SAAS,OAAO,SAAS;AAC/C,YAAI,aAAa,QAAQ,SAAS,YAAa,QAAO;AAEtD,YAAI,QAAQ,SAAS,UAAU;AAC7B,yDAAgB,sBAAsB;AAAA,YACpC,MAAM,EAAE,MAAM,YAAY,QAAQ,QAAQ,OAAA;AAAA,UAAO;AAInD;AAAA,YAAS,CAAC,SACR,KAAK,SAAS,KAAK,SAAS,OAAO,OAAO,EAAE,GAAG,MAAM,OAAO,MAAM,OAAO,KAAA;AAAA,UAAK;AAEhF,iBAAO;AAAA,QACT;AAEA,YAAI,QAAQ,SAAS,UAAU;AAC7B,gBAAM,EAAE,SAAS;AACjB,cAAI,eAAe;AACjB,0BAAc,qBAAqB;AAAA,cACjC,MAAM,EAAE,MAAM,YAAY,WAAW,OAAO,KAAK,UAAU,UAAU,SAAA;AAAA,YAAS,CAC/E;AACDA,8BAAAA,kBAAkB,KAAK,uBAAuB;AAAA,cAC5C,OAAO;AAAA,cACP,MAAM,EAAE,QAAQ,YAAY,YAAY,KAAK,WAAA;AAAA,YAAW,CACzD;AAAA,UACH,OAAO;AACLA,8BAAAA,kBAAkB,KAAK,wBAAwB;AAAA,cAC7C,OAAO;AAAA,cACP,MAAM,EAAE,QAAQ,YAAY,YAAY,KAAK,YAAY,SAAA;AAAA,YAAS,CACnE;AAAA,UACH;AACA,gBAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAC5D,mBAAS;AAAA,YACP;AAAA,YACA,GAAG,iBAAiB,IAAI;AAAA,YACxB,cAAc;AAAA,YACd,OAAO;AAAA,YACP,OAAO;AAAA,UAAA,CACR;AACD,mBAAS,UAAU;AACnB,0BAAgB,KAAK,UAAU;AAC/B,iBAAO;AAAA,QACT;AAEA,sBAAc;AACd,YAAI,QAAQ,SAAS,aAAa,YAAY,YAAa;AAE3D,cAAM,UAAU,kBAAkB,EAAE,OAAO,UAAU,QAAQ;AAC7DA,0BAAAA,kBAAkB,KAAK,qBAAqB;AAAA,UAC1C,OAAO;AAAA,UACP,MAAM;AAAA,YACJ,MAAM;AAAA,YACN;AAAA,YACA,QAAQ,QAAQ;AAAA,YAChB,QAAQ,QAAQ;AAAA,YAChB,YAAY,QAAQ;AAAA,YACpB,SAAS;AAAA,YACT,cAAc;AAAA,YACd,UAAU;AAAA,UAAA;AAAA,QACZ,CACD;AACD,cAAM,gBAAgB,OAAO;AAC7B,YAAI,UAAW,QAAO;AAAA,MACxB;AAEA,UAAI,CAAC,YAAa,QAAO;AACzB,YAAM,QAAQ,iBAAiB,EAAE,SAAS,aAAa,UAAU,OAAO;AACxE,YAAM,cAAc;AAAA,QAClB,MAAM;AAAA,QACN;AAAA,QACA,QAAQ,YAAY;AAAA,QACpB,QAAQ,YAAY;AAAA,QACpB;AAAA,MAAA;AAEF,UAAI,eAAe;AACjB;AAAA,UACE,MAAM,SAAS,wBAAwB,wBAAwB;AAAA,UAC/D,EAAE,MAAM,aAAa,MAAA;AAAA,QAAM;AAAA,MAE/B,OAAO;AACLA,0BAAAA,kBAAkB,KAAK,6BAA6B;AAAA,UAClD,OAAO;AAAA,UACP,MAAM;AAAA,UACN;AAAA,QAAA,CACD;AAAA,MACH;AACA,eAAS,CAAC,UAAU,EAAE,GAAG,MAAM,OAAO,OAAO,OAAO;AACpD,aAAO;AAAA,IACT;AAMA,UAAM,YAAY,CAAC,YAA0D;AAC3E,8BAAa,aAAa,OAAO,EAAE,QAAQ,MAAM;AAC/C,mBAAW;AAAA,MACb,CAAC;AACD,aAAO;AAAA,IACT;AAKA,eAAW,UAAU,CAAC,EAAE,YAAY;AAClC,UAAI,CAAC,MAAO,QAAO,QAAQ,QAAQ,SAAS,OAAO;AACnD,aAAO,UAAU,EAAE,SAAS,OAAO,EAAE,KAAK,CAAC,UAAU,SAAS,SAAS,OAAO;AAAA,IAChF;AAEA,SAAK,UAAU,EAAE,SAAS,MAAM;AAEhC,WAAO,MAAM;AACX,kBAAY;AACZ,+CAAY;AACZ,wBAAA;AACA,mBAAA;AACA,iBAAW,UAAU;AAAA,IACvB;AAAA,EACF,GAAG,CAAC,UAAU,CAAC;AAEf,QAAM,aAAaE,WAAAA;AAAAA,IACjB,CAAC;;AAAY,+BAAW,YAAX,oCAAqB,aAAY,QAAQ,QAAQ,SAAS,OAAO;AAAA;AAAA,IAC9E,CAAA;AAAA,EAAC;AAGH,SAAON,WAAAA,QAAQ,OAAO,EAAE,GAAG,OAAO,eAAe,CAAC,OAAO,UAAU,CAAC;AACtE;AAMO,SAAS,gBAA+B;AAC7C,SAAO,kBAAkB;AAC3B;;;;;;;;;;;;;;"}

package/dist/runtime/statewire-lifecycle.cjs

@@ -3,6 +3,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const errors = require("../agent-runtime/src/errors.cjs");
 function athenaStatewireErrorNotice(error) {
   if (errors.isStatewireChannelTeardown(error)) return null;
+  if (errors.isVoiceCommandRejection(error)) return null;
   const rejection = errors.statewireRejectionPayload(error);
   const detail = errors.statewireRejectionDetailMessage(error);
   if ((rejection == null ? void 0 : rejection.status) === 402) {

package/dist/runtime/statewire-lifecycle.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"statewire-lifecycle.cjs","sources":["../../src/runtime/statewire-lifecycle.ts"],"sourcesContent":["import {\n  COLLAB_AGENT_CHANNEL_SESSION_MISMATCH,\n  CONVERSATION_ARCHIVED_MESSAGE,\n  isConversationArchivedRejection,\n  isLegacyThreadReadOnlyRejection,\n  isStatewireChannelTeardown,\n  statewireRejectionCode,\n  statewireRejectionDetailMessage,\n  statewireRejectionPayload,\n} from '@athenaintel/agent-runtime';\nimport type { DeepAgentConnectionState } from '@athenaintel/agent-runtime';\n\n/** A user-visible notice mapped from a statewire transport error. */\nexport interface AthenaStatewireErrorNotice {\n  kind: 'paywall' | 'read-only' | 'command';\n  title: string;\n  message: string;\n  /**\n   * The server's structured `detail.code` (`collab_agent_channel_session_mismatch`,\n   * `legacy_thread_read_only`, …), when the rejection carried one — what a\n   * host matches on to offer the right next step.\n   */\n  code?: string;\n}\n\n/**\n * Map the statewire failure envelope to a concise, actionable notice.\n * Returns null for expected channel teardowns (thread switch, unmount),\n * which must not surface as errors.\n */\nexport function athenaStatewireErrorNotice(\n  error: unknown,\n): AthenaStatewireErrorNotice | null {\n  if (isStatewireChannelTeardown(error)) return null;\n  const rejection = statewireRejectionPayload(error);\n  // The server's own detail names the actionable reason; the Error message is\n  // generic client-side text like `command rejected (500)`.\n  const detail = statewireRejectionDetailMessage(error);\n\n  if (rejection?.status === 402) {\n    return {\n      kind: 'paywall',\n      title: 'Usage limit reached',\n      message:\n        detail ?? 'Athena could not start this run. Review usage or billing to continue.',\n    };\n  }\n\n  const code = statewireRejectionCode(error);\n  const withCode = code === null ? {} : { code };\n\n  // Legacy-thread dispatch fence: an out-of-band run is writing this\n  // pre-cutover thread (or its adoption failed). A per-send failure, not a\n  // standing state — the server's detail names the actionable reason (wait\n  // for the run vs. start a new chat).\n  if (isLegacyThreadReadOnlyRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message:\n        detail ??\n        'This conversation cannot take new messages right now. Try again shortly, or start a new chat.',\n      ...withCode,\n    };\n  }\n\n  // The conversation is archived (in the trash): it takes no new turns until\n  // it is restored. Not broken and not retriable — the amber \"not sent\".\n  if (isConversationArchivedRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: CONVERSATION_ARCHIVED_MESSAGE,\n      ...withCode,\n    };\n  }\n\n  // A session keeps the collab-agent channel (the app's mode) it started on:\n  // the send asked for another one. Nothing about the chat is broken — the\n  // way on is a new session — so it reads as the amber \"not sent\", not red.\n  if (code === COLLAB_AGENT_CHANNEL_SESSION_MISMATCH) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: detail ?? 'This session runs in another mode. Start a new session to use this one.',\n      code,\n    };\n  }\n\n  return {\n    kind: 'command',\n    title: 'Message was not sent',\n    message:\n      detail ??\n      (error instanceof Error && error.message.length > 0\n        ? error.message\n        : 'The chat runtime rejected the command. Please try again.'),\n    ...withCode,\n  };\n}\n\n/** Shared lifecycle state for the statewire transport, provided by\n *  `AthenaProvider` in statewire mode and read by the chat banners. */\nexport interface AthenaStatewireLifecycleState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n  dismissError: () => void;\n}\n\n/** The provider's reducer state behind {@link AthenaStatewireLifecycleState}. */\nexport interface StatewireLifecycleReducerState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n}\n\nexport type StatewireLifecycleAction =\n  | { type: 'connection'; connection: DeepAgentConnectionState | null }\n  | { type: 'error'; error: AthenaStatewireErrorNotice | null }\n  | { type: 'raw-connection'; reconnect: () => void };\n\nexport const initialStatewireLifecycle: StatewireLifecycleReducerState = {\n  connection: null,\n  error: null,\n  reconnect: null,\n};\n\n/**\n * Folds the runtime's lifecycle observations into the banner state. A healthy\n * channel — connected, or disconnected only because the instance is quiet\n * (`idle`) or the chat has not sent yet (`deferred`) — clears a stale\n * send/transport error: leaving it up tells the user the chat is broken after\n * it has come back.\n */\n/**\n * Whether the statewire channel can take a command now: connected, or on\n * standby (attached and idle). `null` (no connection observed yet) is not.\n */\nexport function isStatewireChannelLive(connection: DeepAgentConnectionState | null): boolean {\n  return connection?.status === 'connected' || connection?.status === 'standby';\n}\n\nexport function statewireLifecycleReducer(\n  state: StatewireLifecycleReducerState,\n  action: StatewireLifecycleAction,\n): StatewireLifecycleReducerState {\n  switch (action.type) {\n    case 'connection': {\n      const healthy = isStatewireChannelLive(action.connection);\n      return {\n        ...state,\n        connection: action.connection,\n        error: healthy ? null : state.error,\n      };\n    }\n    case 'error':\n      return { ...state, error: action.error };\n    case 'raw-connection':\n      return { ...state, reconnect: action.reconnect };\n  }\n}\n"],"names":["isStatewireChannelTeardown","statewireRejectionPayload","statewireRejectionDetailMessage","statewireRejectionCode","isLegacyThreadReadOnlyRejection","isConversationArchivedRejection","CONVERSATION_ARCHIVED_MESSAGE","COLLAB_AGENT_CHANNEL_SESSION_MISMATCH"],"mappings":";;;AA8BO,SAAS,2BACd,OACmC;AACnC,MAAIA,OAAAA,2BAA2B,KAAK,EAAG,QAAO;AAC9C,QAAM,YAAYC,OAAAA,0BAA0B,KAAK;AAGjD,QAAM,SAASC,OAAAA,gCAAgC,KAAK;AAEpD,OAAI,uCAAW,YAAW,KAAK;AAC7B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UAAU;AAAA,IAAA;AAAA,EAEhB;AAEA,QAAM,OAAOC,OAAAA,uBAAuB,KAAK;AACzC,QAAM,WAAW,SAAS,OAAO,CAAA,IAAK,EAAE,KAAA;AAMxC,MAAIC,OAAAA,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UACA;AAAA,MACF,GAAG;AAAA,IAAA;AAAA,EAEP;AAIA,MAAIC,OAAAA,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAASC,OAAAA;AAAAA,MACT,GAAG;AAAA,IAAA;AAAA,EAEP;AAKA,MAAI,SAASC,OAAAA,uCAAuC;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,UAAU;AAAA,MACnB;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WACC,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IAC9C,MAAM,UACN;AAAA,IACN,GAAG;AAAA,EAAA;AAEP;AAuBO,MAAM,4BAA4D;AAAA,EACvE,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AACb;AAaO,SAAS,uBAAuB,YAAsD;AAC3F,UAAO,yCAAY,YAAW,gBAAe,yCAAY,YAAW;AACtE;AAEO,SAAS,0BACd,OACA,QACgC;AAChC,UAAQ,OAAO,MAAA;AAAA,IACb,KAAK,cAAc;AACjB,YAAM,UAAU,uBAAuB,OAAO,UAAU;AACxD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,YAAY,OAAO;AAAA,QACnB,OAAO,UAAU,OAAO,MAAM;AAAA,MAAA;AAAA,IAElC;AAAA,IACA,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,OAAO,OAAO,MAAA;AAAA,IACnC,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,WAAW,OAAO,UAAA;AAAA,EAAU;AAErD;;;;;"}
+{"version":3,"file":"statewire-lifecycle.cjs","sources":["../../src/runtime/statewire-lifecycle.ts"],"sourcesContent":["import {\n  COLLAB_AGENT_CHANNEL_SESSION_MISMATCH,\n  CONVERSATION_ARCHIVED_MESSAGE,\n  isConversationArchivedRejection,\n  isLegacyThreadReadOnlyRejection,\n  isStatewireChannelTeardown,\n  isVoiceCommandRejection,\n  statewireRejectionCode,\n  statewireRejectionDetailMessage,\n  statewireRejectionPayload,\n} from '@athenaintel/agent-runtime';\nimport type { DeepAgentConnectionState } from '@athenaintel/agent-runtime';\n\n/** A user-visible notice mapped from a statewire transport error. */\nexport interface AthenaStatewireErrorNotice {\n  kind: 'paywall' | 'read-only' | 'command';\n  title: string;\n  message: string;\n  /**\n   * The server's structured `detail.code` (`collab_agent_channel_session_mismatch`,\n   * `legacy_thread_read_only`, …), when the rejection carried one — what a\n   * host matches on to offer the right next step.\n   */\n  code?: string;\n}\n\n/**\n * Map the statewire failure envelope to a concise, actionable notice.\n * Returns null for expected channel teardowns (thread switch, unmount),\n * which must not surface as errors, and for `voice/*` rejections: the voice\n * controller owns those (an end that found the session already closed is\n * not a failure, and a refused typed-in-voice send falls back to a run).\n */\nexport function athenaStatewireErrorNotice(\n  error: unknown,\n): AthenaStatewireErrorNotice | null {\n  if (isStatewireChannelTeardown(error)) return null;\n  if (isVoiceCommandRejection(error)) return null;\n  const rejection = statewireRejectionPayload(error);\n  // The server's own detail names the actionable reason; the Error message is\n  // generic client-side text like `command rejected (500)`.\n  const detail = statewireRejectionDetailMessage(error);\n\n  if (rejection?.status === 402) {\n    return {\n      kind: 'paywall',\n      title: 'Usage limit reached',\n      message:\n        detail ?? 'Athena could not start this run. Review usage or billing to continue.',\n    };\n  }\n\n  const code = statewireRejectionCode(error);\n  const withCode = code === null ? {} : { code };\n\n  // Legacy-thread dispatch fence: an out-of-band run is writing this\n  // pre-cutover thread (or its adoption failed). A per-send failure, not a\n  // standing state — the server's detail names the actionable reason (wait\n  // for the run vs. start a new chat).\n  if (isLegacyThreadReadOnlyRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message:\n        detail ??\n        'This conversation cannot take new messages right now. Try again shortly, or start a new chat.',\n      ...withCode,\n    };\n  }\n\n  // The conversation is archived (in the trash): it takes no new turns until\n  // it is restored. Not broken and not retriable — the amber \"not sent\".\n  if (isConversationArchivedRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: CONVERSATION_ARCHIVED_MESSAGE,\n      ...withCode,\n    };\n  }\n\n  // A session keeps the collab-agent channel (the app's mode) it started on:\n  // the send asked for another one. Nothing about the chat is broken — the\n  // way on is a new session — so it reads as the amber \"not sent\", not red.\n  if (code === COLLAB_AGENT_CHANNEL_SESSION_MISMATCH) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: detail ?? 'This session runs in another mode. Start a new session to use this one.',\n      code,\n    };\n  }\n\n  return {\n    kind: 'command',\n    title: 'Message was not sent',\n    message:\n      detail ??\n      (error instanceof Error && error.message.length > 0\n        ? error.message\n        : 'The chat runtime rejected the command. Please try again.'),\n    ...withCode,\n  };\n}\n\n/** Shared lifecycle state for the statewire transport, provided by\n *  `AthenaProvider` in statewire mode and read by the chat banners. */\nexport interface AthenaStatewireLifecycleState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n  dismissError: () => void;\n}\n\n/** The provider's reducer state behind {@link AthenaStatewireLifecycleState}. */\nexport interface StatewireLifecycleReducerState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n}\n\nexport type StatewireLifecycleAction =\n  | { type: 'connection'; connection: DeepAgentConnectionState | null }\n  | { type: 'error'; error: AthenaStatewireErrorNotice | null }\n  | { type: 'raw-connection'; reconnect: () => void };\n\nexport const initialStatewireLifecycle: StatewireLifecycleReducerState = {\n  connection: null,\n  error: null,\n  reconnect: null,\n};\n\n/**\n * Folds the runtime's lifecycle observations into the banner state. A healthy\n * channel — connected, or disconnected only because the instance is quiet\n * (`idle`) or the chat has not sent yet (`deferred`) — clears a stale\n * send/transport error: leaving it up tells the user the chat is broken after\n * it has come back.\n */\n/**\n * Whether the statewire channel can take a command now: connected, or on\n * standby (attached and idle). `null` (no connection observed yet) is not.\n */\nexport function isStatewireChannelLive(connection: DeepAgentConnectionState | null): boolean {\n  return connection?.status === 'connected' || connection?.status === 'standby';\n}\n\nexport function statewireLifecycleReducer(\n  state: StatewireLifecycleReducerState,\n  action: StatewireLifecycleAction,\n): StatewireLifecycleReducerState {\n  switch (action.type) {\n    case 'connection': {\n      const healthy = isStatewireChannelLive(action.connection);\n      return {\n        ...state,\n        connection: action.connection,\n        error: healthy ? null : state.error,\n      };\n    }\n    case 'error':\n      return { ...state, error: action.error };\n    case 'raw-connection':\n      return { ...state, reconnect: action.reconnect };\n  }\n}\n"],"names":["isStatewireChannelTeardown","isVoiceCommandRejection","statewireRejectionPayload","statewireRejectionDetailMessage","statewireRejectionCode","isLegacyThreadReadOnlyRejection","isConversationArchivedRejection","CONVERSATION_ARCHIVED_MESSAGE","COLLAB_AGENT_CHANNEL_SESSION_MISMATCH"],"mappings":";;;AAiCO,SAAS,2BACd,OACmC;AACnC,MAAIA,OAAAA,2BAA2B,KAAK,EAAG,QAAO;AAC9C,MAAIC,OAAAA,wBAAwB,KAAK,EAAG,QAAO;AAC3C,QAAM,YAAYC,OAAAA,0BAA0B,KAAK;AAGjD,QAAM,SAASC,OAAAA,gCAAgC,KAAK;AAEpD,OAAI,uCAAW,YAAW,KAAK;AAC7B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UAAU;AAAA,IAAA;AAAA,EAEhB;AAEA,QAAM,OAAOC,OAAAA,uBAAuB,KAAK;AACzC,QAAM,WAAW,SAAS,OAAO,CAAA,IAAK,EAAE,KAAA;AAMxC,MAAIC,OAAAA,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UACA;AAAA,MACF,GAAG;AAAA,IAAA;AAAA,EAEP;AAIA,MAAIC,OAAAA,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAASC,OAAAA;AAAAA,MACT,GAAG;AAAA,IAAA;AAAA,EAEP;AAKA,MAAI,SAASC,OAAAA,uCAAuC;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,UAAU;AAAA,MACnB;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WACC,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IAC9C,MAAM,UACN;AAAA,IACN,GAAG;AAAA,EAAA;AAEP;AAuBO,MAAM,4BAA4D;AAAA,EACvE,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AACb;AAaO,SAAS,uBAAuB,YAAsD;AAC3F,UAAO,yCAAY,YAAW,gBAAe,yCAAY,YAAW;AACtE;AAEO,SAAS,0BACd,OACA,QACgC;AAChC,UAAQ,OAAO,MAAA;AAAA,IACb,KAAK,cAAc;AACjB,YAAM,UAAU,uBAAuB,OAAO,UAAU;AACxD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,YAAY,OAAO;AAAA,QACnB,OAAO,UAAU,OAAO,MAAM;AAAA,MAAA;AAAA,IAElC;AAAA,IACA,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,OAAO,OAAO,MAAA;AAAA,IACnC,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,WAAW,OAAO,UAAA;AAAA,EAAU;AAErD;;;;;"}

package/dist/runtime/statewire-lifecycle.d.ts

@@ -14,7 +14,9 @@ export interface AthenaStatewireErrorNotice {
 /**
  * Map the statewire failure envelope to a concise, actionable notice.
  * Returns null for expected channel teardowns (thread switch, unmount),
- * which must not surface as errors.
+ * which must not surface as errors, and for `voice/*` rejections: the voice
+ * controller owns those (an end that found the session already closed is
+ * not a failure, and a refused typed-in-voice send falls back to a run).
  */
 export declare function athenaStatewireErrorNotice(error: unknown): AthenaStatewireErrorNotice | null;
 /** Shared lifecycle state for the statewire transport, provided by

package/dist/runtime/statewire-lifecycle.js

@@ -1,6 +1,7 @@
-import { isStatewireChannelTeardown, statewireRejectionPayload, statewireRejectionDetailMessage, statewireRejectionCode, isLegacyThreadReadOnlyRejection, isConversationArchivedRejection, CONVERSATION_ARCHIVED_MESSAGE, COLLAB_AGENT_CHANNEL_SESSION_MISMATCH } from "../agent-runtime/src/errors.js";
+import { isStatewireChannelTeardown, isVoiceCommandRejection, statewireRejectionPayload, statewireRejectionDetailMessage, statewireRejectionCode, isLegacyThreadReadOnlyRejection, isConversationArchivedRejection, CONVERSATION_ARCHIVED_MESSAGE, COLLAB_AGENT_CHANNEL_SESSION_MISMATCH } from "../agent-runtime/src/errors.js";
 function athenaStatewireErrorNotice(error) {
   if (isStatewireChannelTeardown(error)) return null;
+  if (isVoiceCommandRejection(error)) return null;
   const rejection = statewireRejectionPayload(error);
   const detail = statewireRejectionDetailMessage(error);
   if ((rejection == null ? void 0 : rejection.status) === 402) {

package/dist/runtime/statewire-lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"statewire-lifecycle.js","sources":["../../src/runtime/statewire-lifecycle.ts"],"sourcesContent":["import {\n  COLLAB_AGENT_CHANNEL_SESSION_MISMATCH,\n  CONVERSATION_ARCHIVED_MESSAGE,\n  isConversationArchivedRejection,\n  isLegacyThreadReadOnlyRejection,\n  isStatewireChannelTeardown,\n  statewireRejectionCode,\n  statewireRejectionDetailMessage,\n  statewireRejectionPayload,\n} from '@athenaintel/agent-runtime';\nimport type { DeepAgentConnectionState } from '@athenaintel/agent-runtime';\n\n/** A user-visible notice mapped from a statewire transport error. */\nexport interface AthenaStatewireErrorNotice {\n  kind: 'paywall' | 'read-only' | 'command';\n  title: string;\n  message: string;\n  /**\n   * The server's structured `detail.code` (`collab_agent_channel_session_mismatch`,\n   * `legacy_thread_read_only`, …), when the rejection carried one — what a\n   * host matches on to offer the right next step.\n   */\n  code?: string;\n}\n\n/**\n * Map the statewire failure envelope to a concise, actionable notice.\n * Returns null for expected channel teardowns (thread switch, unmount),\n * which must not surface as errors.\n */\nexport function athenaStatewireErrorNotice(\n  error: unknown,\n): AthenaStatewireErrorNotice | null {\n  if (isStatewireChannelTeardown(error)) return null;\n  const rejection = statewireRejectionPayload(error);\n  // The server's own detail names the actionable reason; the Error message is\n  // generic client-side text like `command rejected (500)`.\n  const detail = statewireRejectionDetailMessage(error);\n\n  if (rejection?.status === 402) {\n    return {\n      kind: 'paywall',\n      title: 'Usage limit reached',\n      message:\n        detail ?? 'Athena could not start this run. Review usage or billing to continue.',\n    };\n  }\n\n  const code = statewireRejectionCode(error);\n  const withCode = code === null ? {} : { code };\n\n  // Legacy-thread dispatch fence: an out-of-band run is writing this\n  // pre-cutover thread (or its adoption failed). A per-send failure, not a\n  // standing state — the server's detail names the actionable reason (wait\n  // for the run vs. start a new chat).\n  if (isLegacyThreadReadOnlyRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message:\n        detail ??\n        'This conversation cannot take new messages right now. Try again shortly, or start a new chat.',\n      ...withCode,\n    };\n  }\n\n  // The conversation is archived (in the trash): it takes no new turns until\n  // it is restored. Not broken and not retriable — the amber \"not sent\".\n  if (isConversationArchivedRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: CONVERSATION_ARCHIVED_MESSAGE,\n      ...withCode,\n    };\n  }\n\n  // A session keeps the collab-agent channel (the app's mode) it started on:\n  // the send asked for another one. Nothing about the chat is broken — the\n  // way on is a new session — so it reads as the amber \"not sent\", not red.\n  if (code === COLLAB_AGENT_CHANNEL_SESSION_MISMATCH) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: detail ?? 'This session runs in another mode. Start a new session to use this one.',\n      code,\n    };\n  }\n\n  return {\n    kind: 'command',\n    title: 'Message was not sent',\n    message:\n      detail ??\n      (error instanceof Error && error.message.length > 0\n        ? error.message\n        : 'The chat runtime rejected the command. Please try again.'),\n    ...withCode,\n  };\n}\n\n/** Shared lifecycle state for the statewire transport, provided by\n *  `AthenaProvider` in statewire mode and read by the chat banners. */\nexport interface AthenaStatewireLifecycleState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n  dismissError: () => void;\n}\n\n/** The provider's reducer state behind {@link AthenaStatewireLifecycleState}. */\nexport interface StatewireLifecycleReducerState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n}\n\nexport type StatewireLifecycleAction =\n  | { type: 'connection'; connection: DeepAgentConnectionState | null }\n  | { type: 'error'; error: AthenaStatewireErrorNotice | null }\n  | { type: 'raw-connection'; reconnect: () => void };\n\nexport const initialStatewireLifecycle: StatewireLifecycleReducerState = {\n  connection: null,\n  error: null,\n  reconnect: null,\n};\n\n/**\n * Folds the runtime's lifecycle observations into the banner state. A healthy\n * channel — connected, or disconnected only because the instance is quiet\n * (`idle`) or the chat has not sent yet (`deferred`) — clears a stale\n * send/transport error: leaving it up tells the user the chat is broken after\n * it has come back.\n */\n/**\n * Whether the statewire channel can take a command now: connected, or on\n * standby (attached and idle). `null` (no connection observed yet) is not.\n */\nexport function isStatewireChannelLive(connection: DeepAgentConnectionState | null): boolean {\n  return connection?.status === 'connected' || connection?.status === 'standby';\n}\n\nexport function statewireLifecycleReducer(\n  state: StatewireLifecycleReducerState,\n  action: StatewireLifecycleAction,\n): StatewireLifecycleReducerState {\n  switch (action.type) {\n    case 'connection': {\n      const healthy = isStatewireChannelLive(action.connection);\n      return {\n        ...state,\n        connection: action.connection,\n        error: healthy ? null : state.error,\n      };\n    }\n    case 'error':\n      return { ...state, error: action.error };\n    case 'raw-connection':\n      return { ...state, reconnect: action.reconnect };\n  }\n}\n"],"names":[],"mappings":";AA8BO,SAAS,2BACd,OACmC;AACnC,MAAI,2BAA2B,KAAK,EAAG,QAAO;AAC9C,QAAM,YAAY,0BAA0B,KAAK;AAGjD,QAAM,SAAS,gCAAgC,KAAK;AAEpD,OAAI,uCAAW,YAAW,KAAK;AAC7B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UAAU;AAAA,IAAA;AAAA,EAEhB;AAEA,QAAM,OAAO,uBAAuB,KAAK;AACzC,QAAM,WAAW,SAAS,OAAO,CAAA,IAAK,EAAE,KAAA;AAMxC,MAAI,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UACA;AAAA,MACF,GAAG;AAAA,IAAA;AAAA,EAEP;AAIA,MAAI,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,GAAG;AAAA,IAAA;AAAA,EAEP;AAKA,MAAI,SAAS,uCAAuC;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,UAAU;AAAA,MACnB;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WACC,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IAC9C,MAAM,UACN;AAAA,IACN,GAAG;AAAA,EAAA;AAEP;AAuBO,MAAM,4BAA4D;AAAA,EACvE,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AACb;AAaO,SAAS,uBAAuB,YAAsD;AAC3F,UAAO,yCAAY,YAAW,gBAAe,yCAAY,YAAW;AACtE;AAEO,SAAS,0BACd,OACA,QACgC;AAChC,UAAQ,OAAO,MAAA;AAAA,IACb,KAAK,cAAc;AACjB,YAAM,UAAU,uBAAuB,OAAO,UAAU;AACxD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,YAAY,OAAO;AAAA,QACnB,OAAO,UAAU,OAAO,MAAM;AAAA,MAAA;AAAA,IAElC;AAAA,IACA,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,OAAO,OAAO,MAAA;AAAA,IACnC,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,WAAW,OAAO,UAAA;AAAA,EAAU;AAErD;"}
+{"version":3,"file":"statewire-lifecycle.js","sources":["../../src/runtime/statewire-lifecycle.ts"],"sourcesContent":["import {\n  COLLAB_AGENT_CHANNEL_SESSION_MISMATCH,\n  CONVERSATION_ARCHIVED_MESSAGE,\n  isConversationArchivedRejection,\n  isLegacyThreadReadOnlyRejection,\n  isStatewireChannelTeardown,\n  isVoiceCommandRejection,\n  statewireRejectionCode,\n  statewireRejectionDetailMessage,\n  statewireRejectionPayload,\n} from '@athenaintel/agent-runtime';\nimport type { DeepAgentConnectionState } from '@athenaintel/agent-runtime';\n\n/** A user-visible notice mapped from a statewire transport error. */\nexport interface AthenaStatewireErrorNotice {\n  kind: 'paywall' | 'read-only' | 'command';\n  title: string;\n  message: string;\n  /**\n   * The server's structured `detail.code` (`collab_agent_channel_session_mismatch`,\n   * `legacy_thread_read_only`, …), when the rejection carried one — what a\n   * host matches on to offer the right next step.\n   */\n  code?: string;\n}\n\n/**\n * Map the statewire failure envelope to a concise, actionable notice.\n * Returns null for expected channel teardowns (thread switch, unmount),\n * which must not surface as errors, and for `voice/*` rejections: the voice\n * controller owns those (an end that found the session already closed is\n * not a failure, and a refused typed-in-voice send falls back to a run).\n */\nexport function athenaStatewireErrorNotice(\n  error: unknown,\n): AthenaStatewireErrorNotice | null {\n  if (isStatewireChannelTeardown(error)) return null;\n  if (isVoiceCommandRejection(error)) return null;\n  const rejection = statewireRejectionPayload(error);\n  // The server's own detail names the actionable reason; the Error message is\n  // generic client-side text like `command rejected (500)`.\n  const detail = statewireRejectionDetailMessage(error);\n\n  if (rejection?.status === 402) {\n    return {\n      kind: 'paywall',\n      title: 'Usage limit reached',\n      message:\n        detail ?? 'Athena could not start this run. Review usage or billing to continue.',\n    };\n  }\n\n  const code = statewireRejectionCode(error);\n  const withCode = code === null ? {} : { code };\n\n  // Legacy-thread dispatch fence: an out-of-band run is writing this\n  // pre-cutover thread (or its adoption failed). A per-send failure, not a\n  // standing state — the server's detail names the actionable reason (wait\n  // for the run vs. start a new chat).\n  if (isLegacyThreadReadOnlyRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message:\n        detail ??\n        'This conversation cannot take new messages right now. Try again shortly, or start a new chat.',\n      ...withCode,\n    };\n  }\n\n  // The conversation is archived (in the trash): it takes no new turns until\n  // it is restored. Not broken and not retriable — the amber \"not sent\".\n  if (isConversationArchivedRejection(error)) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: CONVERSATION_ARCHIVED_MESSAGE,\n      ...withCode,\n    };\n  }\n\n  // A session keeps the collab-agent channel (the app's mode) it started on:\n  // the send asked for another one. Nothing about the chat is broken — the\n  // way on is a new session — so it reads as the amber \"not sent\", not red.\n  if (code === COLLAB_AGENT_CHANNEL_SESSION_MISMATCH) {\n    return {\n      kind: 'read-only',\n      title: 'Message was not sent',\n      message: detail ?? 'This session runs in another mode. Start a new session to use this one.',\n      code,\n    };\n  }\n\n  return {\n    kind: 'command',\n    title: 'Message was not sent',\n    message:\n      detail ??\n      (error instanceof Error && error.message.length > 0\n        ? error.message\n        : 'The chat runtime rejected the command. Please try again.'),\n    ...withCode,\n  };\n}\n\n/** Shared lifecycle state for the statewire transport, provided by\n *  `AthenaProvider` in statewire mode and read by the chat banners. */\nexport interface AthenaStatewireLifecycleState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n  dismissError: () => void;\n}\n\n/** The provider's reducer state behind {@link AthenaStatewireLifecycleState}. */\nexport interface StatewireLifecycleReducerState {\n  connection: DeepAgentConnectionState | null;\n  error: AthenaStatewireErrorNotice | null;\n  reconnect: (() => void) | null;\n}\n\nexport type StatewireLifecycleAction =\n  | { type: 'connection'; connection: DeepAgentConnectionState | null }\n  | { type: 'error'; error: AthenaStatewireErrorNotice | null }\n  | { type: 'raw-connection'; reconnect: () => void };\n\nexport const initialStatewireLifecycle: StatewireLifecycleReducerState = {\n  connection: null,\n  error: null,\n  reconnect: null,\n};\n\n/**\n * Folds the runtime's lifecycle observations into the banner state. A healthy\n * channel — connected, or disconnected only because the instance is quiet\n * (`idle`) or the chat has not sent yet (`deferred`) — clears a stale\n * send/transport error: leaving it up tells the user the chat is broken after\n * it has come back.\n */\n/**\n * Whether the statewire channel can take a command now: connected, or on\n * standby (attached and idle). `null` (no connection observed yet) is not.\n */\nexport function isStatewireChannelLive(connection: DeepAgentConnectionState | null): boolean {\n  return connection?.status === 'connected' || connection?.status === 'standby';\n}\n\nexport function statewireLifecycleReducer(\n  state: StatewireLifecycleReducerState,\n  action: StatewireLifecycleAction,\n): StatewireLifecycleReducerState {\n  switch (action.type) {\n    case 'connection': {\n      const healthy = isStatewireChannelLive(action.connection);\n      return {\n        ...state,\n        connection: action.connection,\n        error: healthy ? null : state.error,\n      };\n    }\n    case 'error':\n      return { ...state, error: action.error };\n    case 'raw-connection':\n      return { ...state, reconnect: action.reconnect };\n  }\n}\n"],"names":[],"mappings":";AAiCO,SAAS,2BACd,OACmC;AACnC,MAAI,2BAA2B,KAAK,EAAG,QAAO;AAC9C,MAAI,wBAAwB,KAAK,EAAG,QAAO;AAC3C,QAAM,YAAY,0BAA0B,KAAK;AAGjD,QAAM,SAAS,gCAAgC,KAAK;AAEpD,OAAI,uCAAW,YAAW,KAAK;AAC7B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UAAU;AAAA,IAAA;AAAA,EAEhB;AAEA,QAAM,OAAO,uBAAuB,KAAK;AACzC,QAAM,WAAW,SAAS,OAAO,CAAA,IAAK,EAAE,KAAA;AAMxC,MAAI,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SACE,UACA;AAAA,MACF,GAAG;AAAA,IAAA;AAAA,EAEP;AAIA,MAAI,gCAAgC,KAAK,GAAG;AAC1C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,GAAG;AAAA,IAAA;AAAA,EAEP;AAKA,MAAI,SAAS,uCAAuC;AAClD,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS,UAAU;AAAA,MACnB;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SACE,WACC,iBAAiB,SAAS,MAAM,QAAQ,SAAS,IAC9C,MAAM,UACN;AAAA,IACN,GAAG;AAAA,EAAA;AAEP;AAuBO,MAAM,4BAA4D;AAAA,EACvE,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AACb;AAaO,SAAS,uBAAuB,YAAsD;AAC3F,UAAO,yCAAY,YAAW,gBAAe,yCAAY,YAAW;AACtE;AAEO,SAAS,0BACd,OACA,QACgC;AAChC,UAAQ,OAAO,MAAA;AAAA,IACb,KAAK,cAAc;AACjB,YAAM,UAAU,uBAAuB,OAAO,UAAU;AACxD,aAAO;AAAA,QACL,GAAG;AAAA,QACH,YAAY,OAAO;AAAA,QACnB,OAAO,UAAU,OAAO,MAAM;AAAA,MAAA;AAAA,IAElC;AAAA,IACA,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,OAAO,OAAO,MAAA;AAAA,IACnC,KAAK;AACH,aAAO,EAAE,GAAG,OAAO,WAAW,OAAO,UAAA;AAAA,EAAU;AAErD;"}

package/dist/runtime/statewire-server-lane-context.cjs

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const react = require("react");
+const require$$0 = require("react");
 const STATEWIRE_SERVER_LANE_PENDING = Object.freeze({
   landed: false,
   config: null
 });
-const AthenaStatewireServerLaneContext = react.createContext(
+const AthenaStatewireServerLaneContext = require$$0.createContext(
   null
 );
 function nextServerLane({

package/dist/runtime/statewire-server-lane-context.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"statewire-server-lane-context.cjs","sources":["../../src/runtime/statewire-server-lane-context.ts"],"sourcesContent":["import type { DeepAgentServerConfig } from '@athenaintel/agent-runtime';\nimport { createContext } from 'react';\n\n/**\n * The thread's server config lane as the statewire host last sent it on this\n * attach, read off the transport's own state (`onStateChange`) rather than the\n * thread state the chat renders.\n *\n * The rendered state starts as a placeholder (or a remembered snapshot) before\n * the attach snapshot lands, and neither says what the server holds: a\n * placeholder has no lane at all and a remembered snapshot may carry an older\n * one. Anything that decides from the lane (`useAthenaThreadModel`, the\n * thread-config writes in `StatewireThreadConfigLaneSync`) waits for `landed`.\n */\nexport interface AthenaStatewireServerLane {\n  /** `true` once this attach's snapshot from the host has arrived. */\n  landed: boolean;\n  /** The lane in that snapshot (and every later host frame), `null` at version 0. */\n  config: DeepAgentServerConfig | null;\n}\n\nexport const STATEWIRE_SERVER_LANE_PENDING: AthenaStatewireServerLane = Object.freeze({\n  landed: false,\n  config: null,\n});\n\n/** Provided by `AthenaProvider` around the host's children, per attached thread. */\nexport const AthenaStatewireServerLaneContext = createContext<AthenaStatewireServerLane | null>(\n  null,\n);\n\n/**\n * The next lane value for a host frame: the same object while the lane's\n * version is unchanged, so a frame that moved only messages (every streamed\n * token) re-renders nothing.\n */\nexport function nextServerLane({\n  previous,\n  config,\n}: {\n  previous: AthenaStatewireServerLane;\n  config: DeepAgentServerConfig | null;\n}): AthenaStatewireServerLane {\n  if (previous.landed && (previous.config?.version ?? 0) === (config?.version ?? 0)) {\n    return previous;\n  }\n  return { landed: true, config };\n}\n"],"names":["createContext"],"mappings":";;;AAqBO,MAAM,gCAA2D,OAAO,OAAO;AAAA,EACpF,QAAQ;AAAA,EACR,QAAQ;AACV,CAAC;AAGM,MAAM,mCAAmCA,MAAAA;AAAAA,EAC9C;AACF;AAOO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAG8B;;AAC5B,MAAI,SAAS,aAAW,cAAS,WAAT,mBAAiB,YAAW,SAAQ,iCAAQ,YAAW,IAAI;AACjF,WAAO;AAAA,EACT;AACA,SAAO,EAAE,QAAQ,MAAM,OAAA;AACzB;;;;"}
+{"version":3,"file":"statewire-server-lane-context.cjs","sources":["../../src/runtime/statewire-server-lane-context.ts"],"sourcesContent":["import type { DeepAgentServerConfig } from '@athenaintel/agent-runtime';\nimport { createContext } from 'react';\n\n/**\n * The thread's server config lane as the statewire host last sent it on this\n * attach, read off the transport's own state (`onStateChange`) rather than the\n * thread state the chat renders.\n *\n * The rendered state starts as a placeholder (or a remembered snapshot) before\n * the attach snapshot lands, and neither says what the server holds: a\n * placeholder has no lane at all and a remembered snapshot may carry an older\n * one. Anything that decides from the lane (`useAthenaThreadModel`, the\n * thread-config writes in `StatewireThreadConfigLaneSync`) waits for `landed`.\n */\nexport interface AthenaStatewireServerLane {\n  /** `true` once this attach's snapshot from the host has arrived. */\n  landed: boolean;\n  /** The lane in that snapshot (and every later host frame), `null` at version 0. */\n  config: DeepAgentServerConfig | null;\n}\n\nexport const STATEWIRE_SERVER_LANE_PENDING: AthenaStatewireServerLane = Object.freeze({\n  landed: false,\n  config: null,\n});\n\n/** Provided by `AthenaProvider` around the host's children, per attached thread. */\nexport const AthenaStatewireServerLaneContext = createContext<AthenaStatewireServerLane | null>(\n  null,\n);\n\n/**\n * The next lane value for a host frame: the same object while the lane's\n * version is unchanged, so a frame that moved only messages (every streamed\n * token) re-renders nothing.\n */\nexport function nextServerLane({\n  previous,\n  config,\n}: {\n  previous: AthenaStatewireServerLane;\n  config: DeepAgentServerConfig | null;\n}): AthenaStatewireServerLane {\n  if (previous.landed && (previous.config?.version ?? 0) === (config?.version ?? 0)) {\n    return previous;\n  }\n  return { landed: true, config };\n}\n"],"names":["createContext"],"mappings":";;;AAqBO,MAAM,gCAA2D,OAAO,OAAO;AAAA,EACpF,QAAQ;AAAA,EACR,QAAQ;AACV,CAAC;AAGM,MAAM,mCAAmCA,WAAAA;AAAAA,EAC9C;AACF;AAOO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAG8B;;AAC5B,MAAI,SAAS,aAAW,cAAS,WAAT,mBAAiB,YAAW,SAAQ,iCAAQ,YAAW,IAAI;AACjF,WAAO;AAAA,EACT;AACA,SAAO,EAAE,QAAQ,MAAM,OAAA;AACzB;;;;"}

package/dist/runtime/statewire-session-lane.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const react = require("react");
+const require$$0 = require("react");
 function createStatewireSessionLaneGate({
   pending
 }) {
@@ -30,16 +30,16 @@ function createStatewireSessionLaneGate({
     }
   };
 }
-const StatewireSessionLaneContext = react.createContext(null);
+const StatewireSessionLaneContext = require$$0.createContext(null);
 function useStatewireSessionLane() {
-  return react.useContext(StatewireSessionLaneContext);
+  return require$$0.useContext(StatewireSessionLaneContext);
 }
 const subscribeToNothing = () => () => {
 };
 function useStatewireSessionLanePending() {
   const lane = useStatewireSessionLane();
   const read = () => (lane == null ? void 0 : lane.isPending()) ?? false;
-  return react.useSyncExternalStore((lane == null ? void 0 : lane.subscribe) ?? subscribeToNothing, read, read);
+  return require$$0.useSyncExternalStore((lane == null ? void 0 : lane.subscribe) ?? subscribeToNothing, read, read);
 }
 exports.StatewireSessionLaneContext = StatewireSessionLaneContext;
 exports.createStatewireSessionLaneGate = createStatewireSessionLaneGate;

package/dist/runtime/statewire-session-lane.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"statewire-session-lane.cjs","sources":["../../src/runtime/statewire-session-lane.ts"],"sourcesContent":["import { createContext, useContext, useSyncExternalStore } from 'react';\n\n/**\n * Whether the chat's persisted command lane is known. The lane is scoped by the\n * signed-in principal (`statewireSessionPrincipal`), so while the sign-in\n * provider above is still resolving who is signed in the lane is pending: the\n * thread's transport is parked and a command dispatched into it is refused\n * unsent. A send made meanwhile waits on this instead and goes out on the\n * signed-in user's lane once it is known.\n */\nexport interface StatewireSessionLane {\n  /** True while the lane waits for the signed-in principal. */\n  isPending: () => boolean;\n  /** Resolves once the lane is known (at once when it already is). */\n  whenKnown: () => Promise<void>;\n  /** Called whenever `isPending()` changes. */\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** The provider's side of {@link StatewireSessionLane}: the mounted runtime reports its lane. */\nexport interface StatewireSessionLaneGate extends StatewireSessionLane {\n  /** Report the lane of the runtime that has just committed it. */\n  setPending: (pending: boolean) => void;\n}\n\nexport function createStatewireSessionLaneGate({\n  pending,\n}: {\n  pending: boolean;\n}): StatewireSessionLaneGate {\n  let current = pending;\n  let waiters: Array<() => void> = [];\n  const listeners = new Set<() => void>();\n  return {\n    isPending: () => current,\n    whenKnown: () =>\n      current\n        ? new Promise<void>((resolve) => {\n            waiters.push(resolve);\n          })\n        : Promise.resolve(),\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    setPending: (next) => {\n      if (next === current) return;\n      current = next;\n      if (!next) {\n        const known = waiters;\n        waiters = [];\n        for (const resolve of known) resolve();\n      }\n      for (const listener of [...listeners]) listener();\n    },\n  };\n}\n\nexport const StatewireSessionLaneContext = createContext<StatewireSessionLane | null>(null);\n\n/** The provider's session lane, or `null` outside `AthenaProvider` (no lane to wait for). */\nexport function useStatewireSessionLane(): StatewireSessionLane | null {\n  return useContext(StatewireSessionLaneContext);\n}\n\nconst subscribeToNothing = (): (() => void) => () => {};\n\n/** Whether the provider's session lane still waits for the signed-in principal (`false` outside one). */\nexport function useStatewireSessionLanePending(): boolean {\n  const lane = useStatewireSessionLane();\n  const read = () => lane?.isPending() ?? false;\n  return useSyncExternalStore(lane?.subscribe ?? subscribeToNothing, read, read);\n}\n"],"names":["createContext","useContext","useSyncExternalStore"],"mappings":";;;AAyBO,SAAS,+BAA+B;AAAA,EAC7C;AACF,GAE6B;AAC3B,MAAI,UAAU;AACd,MAAI,UAA6B,CAAA;AACjC,QAAM,gCAAgB,IAAA;AACtB,SAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB,WAAW,MACT,UACI,IAAI,QAAc,CAAC,YAAY;AAC7B,cAAQ,KAAK,OAAO;AAAA,IACtB,CAAC,IACD,QAAQ,QAAA;AAAA,IACd,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,YAAY,CAAC,SAAS;AACpB,UAAI,SAAS,QAAS;AACtB,gBAAU;AACV,UAAI,CAAC,MAAM;AACT,cAAM,QAAQ;AACd,kBAAU,CAAA;AACV,mBAAW,WAAW,MAAO,SAAA;AAAA,MAC/B;AACA,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,IACzC;AAAA,EAAA;AAEJ;AAEO,MAAM,8BAA8BA,MAAAA,cAA2C,IAAI;AAGnF,SAAS,0BAAuD;AACrE,SAAOC,MAAAA,WAAW,2BAA2B;AAC/C;AAEA,MAAM,qBAAqB,MAAoB,MAAM;AAAC;AAG/C,SAAS,iCAA0C;AACxD,QAAM,OAAO,wBAAA;AACb,QAAM,OAAO,OAAM,6BAAM,gBAAe;AACxC,SAAOC,MAAAA,sBAAqB,6BAAM,cAAa,oBAAoB,MAAM,IAAI;AAC/E;;;;;"}
+{"version":3,"file":"statewire-session-lane.cjs","sources":["../../src/runtime/statewire-session-lane.ts"],"sourcesContent":["import { createContext, useContext, useSyncExternalStore } from 'react';\n\n/**\n * Whether the chat's persisted command lane is known. The lane is scoped by the\n * signed-in principal (`statewireSessionPrincipal`), so while the sign-in\n * provider above is still resolving who is signed in the lane is pending: the\n * thread's transport is parked and a command dispatched into it is refused\n * unsent. A send made meanwhile waits on this instead and goes out on the\n * signed-in user's lane once it is known.\n */\nexport interface StatewireSessionLane {\n  /** True while the lane waits for the signed-in principal. */\n  isPending: () => boolean;\n  /** Resolves once the lane is known (at once when it already is). */\n  whenKnown: () => Promise<void>;\n  /** Called whenever `isPending()` changes. */\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** The provider's side of {@link StatewireSessionLane}: the mounted runtime reports its lane. */\nexport interface StatewireSessionLaneGate extends StatewireSessionLane {\n  /** Report the lane of the runtime that has just committed it. */\n  setPending: (pending: boolean) => void;\n}\n\nexport function createStatewireSessionLaneGate({\n  pending,\n}: {\n  pending: boolean;\n}): StatewireSessionLaneGate {\n  let current = pending;\n  let waiters: Array<() => void> = [];\n  const listeners = new Set<() => void>();\n  return {\n    isPending: () => current,\n    whenKnown: () =>\n      current\n        ? new Promise<void>((resolve) => {\n            waiters.push(resolve);\n          })\n        : Promise.resolve(),\n    subscribe: (listener) => {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    setPending: (next) => {\n      if (next === current) return;\n      current = next;\n      if (!next) {\n        const known = waiters;\n        waiters = [];\n        for (const resolve of known) resolve();\n      }\n      for (const listener of [...listeners]) listener();\n    },\n  };\n}\n\nexport const StatewireSessionLaneContext = createContext<StatewireSessionLane | null>(null);\n\n/** The provider's session lane, or `null` outside `AthenaProvider` (no lane to wait for). */\nexport function useStatewireSessionLane(): StatewireSessionLane | null {\n  return useContext(StatewireSessionLaneContext);\n}\n\nconst subscribeToNothing = (): (() => void) => () => {};\n\n/** Whether the provider's session lane still waits for the signed-in principal (`false` outside one). */\nexport function useStatewireSessionLanePending(): boolean {\n  const lane = useStatewireSessionLane();\n  const read = () => lane?.isPending() ?? false;\n  return useSyncExternalStore(lane?.subscribe ?? subscribeToNothing, read, read);\n}\n"],"names":["createContext","useContext","useSyncExternalStore"],"mappings":";;;AAyBO,SAAS,+BAA+B;AAAA,EAC7C;AACF,GAE6B;AAC3B,MAAI,UAAU;AACd,MAAI,UAA6B,CAAA;AACjC,QAAM,gCAAgB,IAAA;AACtB,SAAO;AAAA,IACL,WAAW,MAAM;AAAA,IACjB,WAAW,MACT,UACI,IAAI,QAAc,CAAC,YAAY;AAC7B,cAAQ,KAAK,OAAO;AAAA,IACtB,CAAC,IACD,QAAQ,QAAA;AAAA,IACd,WAAW,CAAC,aAAa;AACvB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,YAAY,CAAC,SAAS;AACpB,UAAI,SAAS,QAAS;AACtB,gBAAU;AACV,UAAI,CAAC,MAAM;AACT,cAAM,QAAQ;AACd,kBAAU,CAAA;AACV,mBAAW,WAAW,MAAO,SAAA;AAAA,MAC/B;AACA,iBAAW,YAAY,CAAC,GAAG,SAAS,EAAG,UAAA;AAAA,IACzC;AAAA,EAAA;AAEJ;AAEO,MAAM,8BAA8BA,WAAAA,cAA2C,IAAI;AAGnF,SAAS,0BAAuD;AACrE,SAAOC,WAAAA,WAAW,2BAA2B;AAC/C;AAEA,MAAM,qBAAqB,MAAoB,MAAM;AAAC;AAG/C,SAAS,iCAA0C;AACxD,QAAM,OAAO,wBAAA;AACb,QAAM,OAAO,OAAM,6BAAM,gBAAe;AACxC,SAAOC,WAAAA,sBAAqB,6BAAM,cAAa,oBAAoB,MAAM,IAAI;AAC/E;;;;;"}

package/dist/runtime/useAthenaStatewireRuntime.cjs

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const react$1 = require("@assistant-ui/react");
-const react = require("react");
+const react = require("@assistant-ui/react");
+const require$$0 = require("react");
 const AthenaAuthContext = require("../auth/AthenaAuthContext.cjs");
 const statewireClientTools = require("../chat/statewire-client-tools.cjs");
 const athenaDiagnostics = require("../diagnostics/athena-diagnostics.cjs");
@@ -20,7 +20,7 @@ const ATHENA_SDK_MESSAGE_WINDOW = {
 const EMPTY_TOOLKIT = {};
 const EMPTY_TOOL_IDS = [];
 function useStatewireClientTools(frontendToolkit) {
-  return react.useMemo(
+  return require$$0.useMemo(
     () => statewireClientTools.collectStatewireClientTools(frontendToolkit ?? EMPTY_TOOLKIT),
     [frontendToolkit]
   );
@@ -53,14 +53,15 @@ function useAthenaStatewireRuntime(config) {
     onConnectionChange,
     onRawConnectionChange,
     onRunningChange,
+    onSessionPersistedChange,
     onCommandChange,
     onServerState
   } = config;
   statewireRunConfig.resolveAgentProp({ agent });
   const clientTools = useStatewireClientTools(frontendToolkit);
-  const principal = statewireSessionKey.statewireSessionPrincipal(react.useContext(AthenaAuthContext.AthenaAuthContext));
-  const attachSpanRef = react.useRef(null);
-  const attachThreadRef = react.useRef(null);
+  const principal = statewireSessionKey.statewireSessionPrincipal(require$$0.useContext(AthenaAuthContext.AthenaAuthContext));
+  const attachSpanRef = require$$0.useRef(null);
+  const attachThreadRef = require$$0.useRef(null);
   if (attachThreadRef.current !== threadId) {
     attachThreadRef.current = threadId;
     attachSpanRef.current = athenaDiagnostics.athenaDiagnostics.span(
@@ -84,8 +85,8 @@ function useAthenaStatewireRuntime(config) {
     clientTools: statewireClientTools.statewireClientToolWireEntries(clientTools)
   });
   const runConfigKey = JSON.stringify(runConfigValue);
-  const auiTools = react.useMemo(() => react$1.Tools({ toolkit: frontendToolkit }), [frontendToolkit]);
-  const useSdkClient = (thread) => react$1.useAui({ thread, tools: auiTools });
+  const auiTools = require$$0.useMemo(() => react.Tools({ toolkit: frontendToolkit }), [frontendToolkit]);
+  const useSdkClient = (thread) => react.useAui({ thread, tools: auiTools });
   return useDeepAgentRuntime.useDeepAgentRuntime({
     surface: "AthenaSDK",
     threadId,
@@ -158,6 +159,7 @@ function useAthenaStatewireRuntime(config) {
     },
     onRawConnectionChange,
     onRunningChange,
+    onSessionPersistedChange,
     ...onCommandChange && { onCommandChange },
     // Each model-context notification pulls the latest getter through the
     // core's per-render ref; the value-stable key re-registers (and so

package/dist/runtime/useAthenaStatewireRuntime.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"useAthenaStatewireRuntime.cjs","sources":["../../src/runtime/useAthenaStatewireRuntime.ts"],"sourcesContent":["import type { AssistantClient, Toolkit } from '@assistant-ui/react';\nimport { Tools, useAui } from '@assistant-ui/react';\nimport {\n  createSubagentTranscriptConversionCache,\n  DEEP_AGENT_DEFAULT_MESSAGE_WINDOW,\n  type DeepAgentMessageWindowDeclaration,\n  type DeepAgentStreamValues,\n  type DeepAgentThreadElement,\n  type DeepAgentThreadSnapshotCache,\n  type DeepAgentToolOutputStore,\n  isDeepAgentHostState,\n  isStatewireChannelTeardown,\n  logUnhandledStatewireError,\n  type RegisteredClientTool,\n  useDeepAgentRuntime,\n  type UseDeepAgentThreadOptions,\n  withStagedComposerMarkdown,\n} from '@athenaintel/agent-runtime';\nimport { useContext, useMemo, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport {\n  collectStatewireClientTools,\n  statewireClientToolWireEntries,\n} from '../chat/statewire-client-tools';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport {\n  type AthenaStatewireTokenGetter,\n  resolveStatewireAuthHeaders,\n} from './statewire-auth-headers';\nimport { statewireSessionKey, statewireSessionPrincipal } from './statewire-session-key';\n\ntype AthenaDiagnosticsSpanStarter = typeof athenaDiagnostics.span;\nimport {\n  buildStatewireRunConfig,\n  DEFAULT_STATEWIRE_MODEL,\n  resolveAgentProp,\n} from './statewire-run-config';\n\nexport { DEFAULT_STATEWIRE_MODEL };\n\n/**\n * The head interest every SDK attach states (`athena/interest`): the host\n * mounts the transcript's tail as message documents instead of every message\n * — megabytes on long threads, over the 1 MiB frame limit of stock websocket\n * clients. Older pages load from the `StatewireHistoryEdge` row the chat UI\n * mounts above the messages, and cut tool outputs are fetched back for the\n * cards that show them.\n */\nexport const ATHENA_SDK_MESSAGE_WINDOW: DeepAgentMessageWindowDeclaration = {\n  size: DEEP_AGENT_DEFAULT_MESSAGE_WINDOW,\n};\n\nexport interface AthenaStatewireRuntimeConfig {\n  /** Base URL of the statewire sync host (the `…/v2/threads` mount). */\n  syncUrl: string;\n  /** Thread ID the statewire session attaches to. */\n  threadId: string;\n  /** True only for a never-started local chat. Existing (or pre-assigned)\n   *  threads load until their server snapshot arrives. */\n  isNewChat?: boolean;\n  /** API key for authentication. Used when no auth token is provided. */\n  apiKey?: string;\n  /** Auth token. Takes priority over apiKey. */\n  token?: string | null;\n  /** Resolve the latest token immediately before a request (for expiring\n   *  clients). Called with `{ force: true }` right after the host refused the\n   *  previous credential (the transport's `staleAuth`), so a caching getter\n   *  mints a fresh token instead of returning the refused one. */\n  getToken?: AthenaStatewireTokenGetter;\n  /**\n   * Per-provider LRU of each thread's last wire state. A switch back to a\n   * remembered thread mounts with that snapshot and projects ready on the\n   * first frame instead of a loading treatment; the attach snapshot then\n   * replaces it. Owned above the per-thread mount so it survives switches.\n   */\n  snapshotCache?: DeepAgentThreadSnapshotCache;\n  /** The head interest stated on the attach (see {@link ATHENA_SDK_MESSAGE_WINDOW}, the default). */\n  messageWindow?: DeepAgentMessageWindowDeclaration;\n  /**\n   * Whether the chat this runtime serves loads a subagent lane's earlier steps\n   * on request, as `AthenaChat`'s subagent card does (\"Load earlier steps\").\n   * When true, its attaches declare the deep-agent lane-cut contract\n   * (protocol 2): the host sends a finished subagent's card cut to its newest\n   * steps, as it sends a running one, and the card reads the rest. Default\n   * `false`, so a chat that does not page lanes declares the default contract\n   * and finished lanes arrive whole; a host whose `AthenaChat` renders every\n   * `task` call in the subagent card turns it on through `AthenaProvider`'s\n   * `subagentLaneHistory`. Read once per attach.\n   */\n  subagentLaneHistory?: boolean;\n  /**\n   * Full tool outputs fetched back for a windowed wire's cut tool messages;\n   * the thread re-converts when one lands. `AthenaProvider` owns one per\n   * provider and hands the same store to `StatewireHistoryEdge`.\n   */\n  toolOutputs?: DeepAgentToolOutputStore;\n  /** LLM model identifier. Defaults to the deep-agent default model. */\n  model?: string;\n  /** Agent selector: only `collab_agent:<asset_id>` refs are accepted (the run\n   *  executes AS that published collab agent). Any other non-empty value\n   *  throws — see `resolveAgentProp`. */\n  agent?: string;\n  /** Collab-agent channel id selecting that channel's overrides. */\n  channel?: string;\n  /** The agent's mode picked for this thread (`AthenaProvider` `modes`). */\n  mode?: string;\n  /** Backend toolkit IDs to enable. */\n  tools?: string[];\n  /** Frontend tool IDs to include in enabled_tools. */\n  frontendToolIds?: string[];\n  /** Frontend tools registered on the assistant client. Tools with a local\n   *  `execute` are also declared as `client_tools` and executed through the\n   *  statewire client-tool bridge. */\n  frontendToolkit?: Toolkit;\n  /** Asset IDs to include in the workbench. */\n  workbench?: string[];\n  /** Knowledge base IDs for RAG context. */\n  knowledgeBase?: string[];\n  /** System prompt override. */\n  systemPrompt?: string;\n  /** Client app identifier for session filtering. Sent as app_id in runConfig.custom. */\n  appId?: string;\n  /** Additional fields merged into runConfig.custom. */\n  extraRunConfig?: Record<string, unknown>;\n  /** Called on statewire transport errors (send rejections, stream failures). */\n  onError?: (error: Error) => void;\n  /** Projected connection status changes (deduped; null on unmount). */\n  onConnectionChange?: UseDeepAgentThreadOptions['onConnectionChange'];\n  /** Raw connection observer — carries the transport's reconnect handle. */\n  onRawConnectionChange?: UseDeepAgentThreadOptions['onRawConnectionChange'];\n  /** Notified when a run starts/stops. */\n  onRunningChange?: UseDeepAgentThreadOptions['onRunningChange'];\n  /** Every statewire command-lifecycle update (the chat outbox lets a handed-over message go on it). */\n  onCommandChange?: UseDeepAgentThreadOptions['onCommandChange'];\n  /**\n   * Observes the host's own state: called with the attach snapshot and then on\n   * every later frame (`isDeepAgentHostState`) — never with the placeholder or\n   * remembered snapshot a thread renders before its snapshot applies, which\n   * can be after the connection reports `connected`. Called per streamed\n   * token, so keep it cheap.\n   */\n  onServerState?: (state: DeepAgentStreamValues) => void;\n}\n\nconst EMPTY_TOOLKIT: Toolkit = {};\nconst EMPTY_TOOL_IDS: string[] = [];\n\n/** The client tools derived from the runtime's frontend toolkit — exposed so\n *  the provider can mount the client-tool bridge with the same set. */\nexport function useStatewireClientTools(\n  frontendToolkit: Toolkit | undefined,\n): RegisteredClientTool[] {\n  return useMemo(\n    () => collectStatewireClientTools(frontendToolkit ?? EMPTY_TOOLKIT),\n    [frontendToolkit],\n  );\n}\n\n/**\n * Statewire runtime for the Athena SDK — a thin shim over the shared\n * `@athenaintel/agent-runtime` `useDeepAgentRuntime`: it attaches to the\n * agora-hosted deep-agent thread at `${syncUrl}/${threadId}` and returns the\n * `AssistantClient` to mount via `AuiProvider` — the same integration shape as\n * the Olympus, Chrome extension, Office, and mobile statewire hosts.\n *\n * Auth: a token (resolved live through `getToken` when provided) rides\n * `Authorization: Bearer`, and an API key falls back to `X-API-KEY` — both\n * accepted by the statewire host.\n */\nexport function useAthenaStatewireRuntime(\n  config: AthenaStatewireRuntimeConfig,\n): AssistantClient {\n  const {\n    syncUrl,\n    threadId,\n    isNewChat = false,\n    apiKey,\n    token,\n    getToken,\n    model,\n    agent,\n    channel,\n    mode,\n    tools = EMPTY_TOOL_IDS,\n    frontendToolIds = EMPTY_TOOL_IDS,\n    frontendToolkit = EMPTY_TOOLKIT,\n    workbench,\n    knowledgeBase,\n    systemPrompt,\n    appId,\n    extraRunConfig,\n    snapshotCache,\n    messageWindow = ATHENA_SDK_MESSAGE_WINDOW,\n    subagentLaneHistory = false,\n    toolOutputs,\n    onError,\n    onConnectionChange,\n    onRawConnectionChange,\n    onRunningChange,\n    onCommandChange,\n    onServerState,\n  } = config;\n\n  // Fail loud at mount, not at first send: the statewire host always runs the\n  // Athena deep agent, so an `agent` outside the collab_agent namespace can\n  // never apply. Throwing here (render time) is what makes a misconfigured\n  // integration visible instead of quietly answering as the wrong agent.\n  resolveAgentProp({ agent });\n\n  const clientTools = useStatewireClientTools(frontendToolkit);\n\n  // The persisted command lane is keyed by WHO is signed in as well as by host\n  // and thread (see `statewireSessionKey`); `null` while the sign-in provider\n  // above is still resolving who that is.\n  const principal = statewireSessionPrincipal(useContext(AthenaAuthContext));\n\n  // Attach → first server snapshot span, keyed per thread attach.\n  const attachSpanRef = useRef<ReturnType<AthenaDiagnosticsSpanStarter> | null>(null);\n  const attachThreadRef = useRef<string | null>(null);\n  if (attachThreadRef.current !== threadId) {\n    attachThreadRef.current = threadId;\n    attachSpanRef.current = athenaDiagnostics.span(\n      `statewire.attach:${threadId}`,\n      'statewire.attach.start',\n      { thread_id: threadId, is_new_chat: isNewChat },\n    );\n  }\n\n  // Built every render so its JSON signature can key the model-context\n  // registration below: consumers commonly pass fresh array literals per\n  // render, which must not thrash registration, while a changed value (a new\n  // `model`, channel, tool list, system prompt, …) must re-sync the context\n  // before the next send. The core pulls this value only on model-context\n  // notifications, which a key change triggers.\n  const runConfigValue = buildStatewireRunConfig({\n    model,\n    agent,\n    channel,\n    mode,\n    tools,\n    frontendToolIds,\n    workbench,\n    knowledgeBase,\n    systemPrompt,\n    appId,\n    extraRunConfig,\n    clientTools: statewireClientToolWireEntries(clientTools),\n  });\n  const runConfigKey = JSON.stringify(runConfigValue);\n\n  const auiTools = useMemo(() => Tools({ toolkit: frontendToolkit }), [frontendToolkit]);\n  // Web client for the shared runtime core (a `use*` name so the\n  // rules-of-hooks lint sees the `useAui` call inside a custom hook; the core\n  // invokes it unconditionally every render).\n  const useSdkClient = (thread: DeepAgentThreadElement) => useAui({ thread, tools: auiTools });\n\n  return useDeepAgentRuntime({\n    surface: 'AthenaSDK',\n    threadId,\n    baseUrl: syncUrl,\n    // Option closures are re-read per render by the core, so credential\n    // rotation (new `token`/`getToken`/`apiKey` props) reaches the next\n    // request without remounting the thread. The transport's `staleAuth`\n    // (true right after a refused credential) is forwarded as `force`.\n    headers: (ctx) => resolveStatewireAuthHeaders({ apiKey, token, getToken }, ctx),\n    isNewChat,\n    // Queued entries render in the SDK's queue panel, so only the steer lane\n    // projects into the message tail.\n    laneProjection: 'steer-only',\n    // Durable session: a reload resumes the lane and resends whatever the\n    // server has not marked durable. Scoped by host AND principal — a thread\n    // id is only meaningful against the backend that minted it, and a stored\n    // lane must never resend against another signed-in user. (Consumers\n    // server-render this SDK; the core's availability probe keeps those\n    // sessions process-local, as before the seam existed.) Until the sign-in\n    // provider knows who is signed in, the lane is pending: the transport\n    // stays parked and nothing is mounted on a stand-in key\n    // (`statewireSessionPrincipal`). A change to another principal remounts\n    // the conversation on that principal's lane instead of moving this one\n    // there (the runtime's lane epoch), so the previous principal's\n    // undelivered commands are never sent as the new one.\n    session:\n      principal === null\n        ? { kind: 'pending' }\n        : {\n            kind: 'local-storage',\n            key: (id) => statewireSessionKey({ syncUrl, principal, threadId: id }),\n          },\n    snapshotCache,\n    // Head interest (see `ATHENA_SDK_MESSAGE_WINDOW`): the tail of the\n    // transcript instead of every message; the chat UI's history edge pages\n    // older ranges in and fetches cut tool outputs into `toolOutputs`.\n    messageWindow,\n    toolOutputs,\n    // Each `task` card's nested transcript becomes its tool-call part's\n    // `messages` (assistant-ui's nested-thread channel), which the subagent\n    // card (`SubagentTaskToolUI`) shows.\n    createConversionCache: createSubagentTranscriptConversionCache,\n    // The lane-cut contract only where the chat pages lanes (see `subagentLaneHistory`).\n    laneHistory: subagentLaneHistory,\n    capabilities: { edit: true, reload: true, continue: true },\n    // The composer stages the draft each send came from right before it\n    // sends; the message carries it as its composer markdown, so its bubble\n    // shows the text exactly as typed (`UserMessageText`).\n    getMessageMetadata: withStagedComposerMarkdown({ threadId }),\n    useClient: useSdkClient,\n    onStateChange: (state) => {\n      // Statewire publishes what the thread renders before its attach snapshot\n      // through here too (the placeholder, a remembered snapshot, and a replay\n      // boundary's pre-stream default), and on a thread mid-run it reports\n      // `connected` before the snapshot applies: only a state the host sent\n      // counts, whatever the connection says.\n      if (!isDeepAgentHostState(state)) return;\n      // The attach's first one ends the attach span (time-to-history).\n      const endSpan = attachSpanRef.current;\n      if (endSpan) {\n        attachSpanRef.current = null;\n        endSpan('statewire.snapshot', { data: { thread_id: threadId } });\n      }\n      onServerState?.(state);\n    },\n    onConnectionChange: (connection) => {\n      athenaDiagnostics.gauge('statewire.connection', connection?.status ?? null);\n      if (connection?.status === 'stopped') {\n        athenaDiagnostics.emit('statewire.connection', {\n          level: 'warn',\n          data: {\n            status: connection.status,\n            reason: connection.reason,\n            message: connection.message,\n          },\n        });\n      }\n      onConnectionChange?.(connection);\n    },\n    onRawConnectionChange,\n    onRunningChange,\n    ...(onCommandChange && { onCommandChange }),\n    // Each model-context notification pulls the latest getter through the\n    // core's per-render ref; the value-stable key re-registers (and so\n    // notifies) only when the built runConfig actually changed. On a thread\n    // with a server config lane, agora keeps only the per-send keys of what\n    // this carries; `StatewireThreadConfigLaneSync` writes a changed model,\n    // system prompt, tool list, workbench or knowledge base to the lane itself.\n    runConfig: {\n      get: () => runConfigValue,\n      key: runConfigKey,\n    },\n    onError: (error) => {\n      if (!isStatewireChannelTeardown(error)) {\n        athenaDiagnostics.error(\n          'statewire.error',\n          error,\n          {\n            code: 'statewire_rejected',\n            message: 'The statewire host rejected a command',\n            hint: 'Inspect error.detail — agora rejections carry a structured {code, message}.',\n          },\n          { thread_id: threadId },\n        );\n      }\n      if (onError) {\n        onError(error);\n        return;\n      }\n      logUnhandledStatewireError('AthenaSDK', error);\n    },\n  });\n}\n"],"names":["DEEP_AGENT_DEFAULT_MESSAGE_WINDOW","useMemo","collectStatewireClientTools","resolveAgentProp","statewireSessionPrincipal","useContext","AthenaAuthContext","useRef","athenaDiagnostics","buildStatewireRunConfig","statewireClientToolWireEntries","Tools","useAui","useDeepAgentRuntime","resolveStatewireAuthHeaders","statewireSessionKey","createSubagentTranscriptConversionCache","withStagedComposerMarkdown","isDeepAgentHostState","isStatewireChannelTeardown","logUnhandledStatewireError"],"mappings":";;;;;;;;;;;;;;;;AAgDO,MAAM,4BAA+D;AAAA,EAC1E,MAAMA,kBAAAA;AACR;AA8FA,MAAM,gBAAyB,CAAA;AAC/B,MAAM,iBAA2B,CAAA;AAI1B,SAAS,wBACd,iBACwB;AACxB,SAAOC,MAAAA;AAAAA,IACL,MAAMC,qBAAAA,4BAA4B,mBAAmB,aAAa;AAAA,IAClE,CAAC,eAAe;AAAA,EAAA;AAEpB;AAaO,SAAS,0BACd,QACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,IACE;AAMJC,qBAAAA,iBAAiB,EAAE,OAAO;AAE1B,QAAM,cAAc,wBAAwB,eAAe;AAK3D,QAAM,YAAYC,oBAAAA,0BAA0BC,MAAAA,WAAWC,kBAAAA,iBAAiB,CAAC;AAGzE,QAAM,gBAAgBC,MAAAA,OAAwD,IAAI;AAClF,QAAM,kBAAkBA,MAAAA,OAAsB,IAAI;AAClD,MAAI,gBAAgB,YAAY,UAAU;AACxC,oBAAgB,UAAU;AAC1B,kBAAc,UAAUC,kBAAAA,kBAAkB;AAAA,MACxC,oBAAoB,QAAQ;AAAA,MAC5B;AAAA,MACA,EAAE,WAAW,UAAU,aAAa,UAAA;AAAA,IAAU;AAAA,EAElD;AAQA,QAAM,iBAAiBC,mBAAAA,wBAAwB;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAaC,qBAAAA,+BAA+B,WAAW;AAAA,EAAA,CACxD;AACD,QAAM,eAAe,KAAK,UAAU,cAAc;AAElD,QAAM,WAAWT,cAAQ,MAAMU,cAAM,EAAE,SAAS,gBAAA,CAAiB,GAAG,CAAC,eAAe,CAAC;AAIrF,QAAM,eAAe,CAAC,WAAmCC,QAAAA,OAAO,EAAE,QAAQ,OAAO,UAAU;AAE3F,SAAOC,wCAAoB;AAAA,IACzB,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKT,SAAS,CAAC,QAAQC,iDAA4B,EAAE,QAAQ,OAAO,SAAA,GAAY,GAAG;AAAA,IAC9E;AAAA;AAAA;AAAA,IAGA,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,SACE,cAAc,OACV,EAAE,MAAM,cACR;AAAA,MACE,MAAM;AAAA,MACN,KAAK,CAAC,OAAOC,oBAAAA,oBAAoB,EAAE,SAAS,WAAW,UAAU,GAAA,CAAI;AAAA,IAAA;AAAA,IAE7E;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,uBAAuBC,oBAAAA;AAAAA;AAAAA,IAEvB,aAAa;AAAA,IACb,cAAc,EAAE,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAA;AAAA;AAAA;AAAA;AAAA,IAIpD,oBAAoBC,iBAAAA,2BAA2B,EAAE,UAAU;AAAA,IAC3D,WAAW;AAAA,IACX,eAAe,CAAC,UAAU;AAMxB,UAAI,CAACC,SAAAA,qBAAqB,KAAK,EAAG;AAElC,YAAM,UAAU,cAAc;AAC9B,UAAI,SAAS;AACX,sBAAc,UAAU;AACxB,gBAAQ,sBAAsB,EAAE,MAAM,EAAE,WAAW,SAAA,GAAY;AAAA,MACjE;AACA,qDAAgB;AAAA,IAClB;AAAA,IACA,oBAAoB,CAAC,eAAe;AAClCV,wBAAAA,kBAAkB,MAAM,yBAAwB,yCAAY,WAAU,IAAI;AAC1E,WAAI,yCAAY,YAAW,WAAW;AACpCA,0BAAAA,kBAAkB,KAAK,wBAAwB;AAAA,UAC7C,OAAO;AAAA,UACP,MAAM;AAAA,YACJ,QAAQ,WAAW;AAAA,YACnB,QAAQ,WAAW;AAAA,YACnB,SAAS,WAAW;AAAA,UAAA;AAAA,QACtB,CACD;AAAA,MACH;AACA,+DAAqB;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,mBAAmB,EAAE,gBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOzB,WAAW;AAAA,MACT,KAAK,MAAM;AAAA,MACX,KAAK;AAAA,IAAA;AAAA,IAEP,SAAS,CAAC,UAAU;AAClB,UAAI,CAACW,OAAAA,2BAA2B,KAAK,GAAG;AACtCX,0BAAAA,kBAAkB;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,YACE,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA;AAAA,UAER,EAAE,WAAW,SAAA;AAAA,QAAS;AAAA,MAE1B;AACA,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACAY,0BAAAA,2BAA2B,aAAa,KAAK;AAAA,IAC/C;AAAA,EAAA,CACD;AACH;;;;;"}
+{"version":3,"file":"useAthenaStatewireRuntime.cjs","sources":["../../src/runtime/useAthenaStatewireRuntime.ts"],"sourcesContent":["import type { AssistantClient, Toolkit } from '@assistant-ui/react';\nimport { Tools, useAui } from '@assistant-ui/react';\nimport {\n  createSubagentTranscriptConversionCache,\n  DEEP_AGENT_DEFAULT_MESSAGE_WINDOW,\n  type DeepAgentMessageWindowDeclaration,\n  type DeepAgentStreamValues,\n  type DeepAgentThreadElement,\n  type DeepAgentThreadSnapshotCache,\n  type DeepAgentToolOutputStore,\n  isDeepAgentHostState,\n  isStatewireChannelTeardown,\n  logUnhandledStatewireError,\n  type RegisteredClientTool,\n  useDeepAgentRuntime,\n  type UseDeepAgentThreadOptions,\n  withStagedComposerMarkdown,\n} from '@athenaintel/agent-runtime';\nimport { useContext, useMemo, useRef } from 'react';\nimport { AthenaAuthContext } from '../auth/AthenaAuthContext';\nimport {\n  collectStatewireClientTools,\n  statewireClientToolWireEntries,\n} from '../chat/statewire-client-tools';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport {\n  type AthenaStatewireTokenGetter,\n  resolveStatewireAuthHeaders,\n} from './statewire-auth-headers';\nimport { statewireSessionKey, statewireSessionPrincipal } from './statewire-session-key';\n\ntype AthenaDiagnosticsSpanStarter = typeof athenaDiagnostics.span;\nimport {\n  buildStatewireRunConfig,\n  DEFAULT_STATEWIRE_MODEL,\n  resolveAgentProp,\n} from './statewire-run-config';\n\nexport { DEFAULT_STATEWIRE_MODEL };\n\n/**\n * The head interest every SDK attach states (`athena/interest`): the host\n * mounts the transcript's tail as message documents instead of every message\n * — megabytes on long threads, over the 1 MiB frame limit of stock websocket\n * clients. Older pages load from the `StatewireHistoryEdge` row the chat UI\n * mounts above the messages, and cut tool outputs are fetched back for the\n * cards that show them.\n */\nexport const ATHENA_SDK_MESSAGE_WINDOW: DeepAgentMessageWindowDeclaration = {\n  size: DEEP_AGENT_DEFAULT_MESSAGE_WINDOW,\n};\n\nexport interface AthenaStatewireRuntimeConfig {\n  /** Base URL of the statewire sync host (the `…/v2/threads` mount). */\n  syncUrl: string;\n  /** Thread ID the statewire session attaches to. */\n  threadId: string;\n  /** True only for a never-started local chat. Existing (or pre-assigned)\n   *  threads load until their server snapshot arrives. */\n  isNewChat?: boolean;\n  /** API key for authentication. Used when no auth token is provided. */\n  apiKey?: string;\n  /** Auth token. Takes priority over apiKey. */\n  token?: string | null;\n  /** Resolve the latest token immediately before a request (for expiring\n   *  clients). Called with `{ force: true }` right after the host refused the\n   *  previous credential (the transport's `staleAuth`), so a caching getter\n   *  mints a fresh token instead of returning the refused one. */\n  getToken?: AthenaStatewireTokenGetter;\n  /**\n   * Per-provider LRU of each thread's last wire state. A switch back to a\n   * remembered thread mounts with that snapshot and projects ready on the\n   * first frame instead of a loading treatment; the attach snapshot then\n   * replaces it. Owned above the per-thread mount so it survives switches.\n   */\n  snapshotCache?: DeepAgentThreadSnapshotCache;\n  /** The head interest stated on the attach (see {@link ATHENA_SDK_MESSAGE_WINDOW}, the default). */\n  messageWindow?: DeepAgentMessageWindowDeclaration;\n  /**\n   * Whether the chat this runtime serves loads a subagent lane's earlier steps\n   * on request, as `AthenaChat`'s subagent card does (\"Load earlier steps\").\n   * When true, its attaches declare the deep-agent lane-cut contract\n   * (protocol 2): the host sends a finished subagent's card cut to its newest\n   * steps, as it sends a running one, and the card reads the rest. Default\n   * `false`, so a chat that does not page lanes declares the default contract\n   * and finished lanes arrive whole; a host whose `AthenaChat` renders every\n   * `task` call in the subagent card turns it on through `AthenaProvider`'s\n   * `subagentLaneHistory`. Read once per attach.\n   */\n  subagentLaneHistory?: boolean;\n  /**\n   * Full tool outputs fetched back for a windowed wire's cut tool messages;\n   * the thread re-converts when one lands. `AthenaProvider` owns one per\n   * provider and hands the same store to `StatewireHistoryEdge`.\n   */\n  toolOutputs?: DeepAgentToolOutputStore;\n  /** LLM model identifier. Defaults to the deep-agent default model. */\n  model?: string;\n  /** Agent selector: only `collab_agent:<asset_id>` refs are accepted (the run\n   *  executes AS that published collab agent). Any other non-empty value\n   *  throws — see `resolveAgentProp`. */\n  agent?: string;\n  /** Collab-agent channel id selecting that channel's overrides. */\n  channel?: string;\n  /** The agent's mode picked for this thread (`AthenaProvider` `modes`). */\n  mode?: string;\n  /** Backend toolkit IDs to enable. */\n  tools?: string[];\n  /** Frontend tool IDs to include in enabled_tools. */\n  frontendToolIds?: string[];\n  /** Frontend tools registered on the assistant client. Tools with a local\n   *  `execute` are also declared as `client_tools` and executed through the\n   *  statewire client-tool bridge. */\n  frontendToolkit?: Toolkit;\n  /** Asset IDs to include in the workbench. */\n  workbench?: string[];\n  /** Knowledge base IDs for RAG context. */\n  knowledgeBase?: string[];\n  /** System prompt override. */\n  systemPrompt?: string;\n  /** Client app identifier for session filtering. Sent as app_id in runConfig.custom. */\n  appId?: string;\n  /** Additional fields merged into runConfig.custom. */\n  extraRunConfig?: Record<string, unknown>;\n  /** Called on statewire transport errors (send rejections, stream failures). */\n  onError?: (error: Error) => void;\n  /** Projected connection status changes (deduped; null on unmount). */\n  onConnectionChange?: UseDeepAgentThreadOptions['onConnectionChange'];\n  /** Raw connection observer — carries the transport's reconnect handle. */\n  onRawConnectionChange?: UseDeepAgentThreadOptions['onRawConnectionChange'];\n  /** Notified when a run starts/stops. */\n  onRunningChange?: UseDeepAgentThreadOptions['onRunningChange'];\n  /** Core's paired session-asset existence verdict, including remembered/unknown state. */\n  onSessionPersistedChange?: UseDeepAgentThreadOptions['onSessionPersistedChange'];\n  /** Every statewire command-lifecycle update (the chat outbox lets a handed-over message go on it). */\n  onCommandChange?: UseDeepAgentThreadOptions['onCommandChange'];\n  /**\n   * Observes the host's own state: called with the attach snapshot and then on\n   * every later frame (`isDeepAgentHostState`) — never with the placeholder or\n   * remembered snapshot a thread renders before its snapshot applies, which\n   * can be after the connection reports `connected`. Called per streamed\n   * token, so keep it cheap.\n   */\n  onServerState?: (state: DeepAgentStreamValues) => void;\n}\n\nconst EMPTY_TOOLKIT: Toolkit = {};\nconst EMPTY_TOOL_IDS: string[] = [];\n\n/** The client tools derived from the runtime's frontend toolkit — exposed so\n *  the provider can mount the client-tool bridge with the same set. */\nexport function useStatewireClientTools(\n  frontendToolkit: Toolkit | undefined,\n): RegisteredClientTool[] {\n  return useMemo(\n    () => collectStatewireClientTools(frontendToolkit ?? EMPTY_TOOLKIT),\n    [frontendToolkit],\n  );\n}\n\n/**\n * Statewire runtime for the Athena SDK — a thin shim over the shared\n * `@athenaintel/agent-runtime` `useDeepAgentRuntime`: it attaches to the\n * agora-hosted deep-agent thread at `${syncUrl}/${threadId}` and returns the\n * `AssistantClient` to mount via `AuiProvider` — the same integration shape as\n * the Olympus, Chrome extension, Office, and mobile statewire hosts.\n *\n * Auth: a token (resolved live through `getToken` when provided) rides\n * `Authorization: Bearer`, and an API key falls back to `X-API-KEY` — both\n * accepted by the statewire host.\n */\nexport function useAthenaStatewireRuntime(\n  config: AthenaStatewireRuntimeConfig,\n): AssistantClient {\n  const {\n    syncUrl,\n    threadId,\n    isNewChat = false,\n    apiKey,\n    token,\n    getToken,\n    model,\n    agent,\n    channel,\n    mode,\n    tools = EMPTY_TOOL_IDS,\n    frontendToolIds = EMPTY_TOOL_IDS,\n    frontendToolkit = EMPTY_TOOLKIT,\n    workbench,\n    knowledgeBase,\n    systemPrompt,\n    appId,\n    extraRunConfig,\n    snapshotCache,\n    messageWindow = ATHENA_SDK_MESSAGE_WINDOW,\n    subagentLaneHistory = false,\n    toolOutputs,\n    onError,\n    onConnectionChange,\n    onRawConnectionChange,\n    onRunningChange,\n    onSessionPersistedChange,\n    onCommandChange,\n    onServerState,\n  } = config;\n\n  // Fail loud at mount, not at first send: the statewire host always runs the\n  // Athena deep agent, so an `agent` outside the collab_agent namespace can\n  // never apply. Throwing here (render time) is what makes a misconfigured\n  // integration visible instead of quietly answering as the wrong agent.\n  resolveAgentProp({ agent });\n\n  const clientTools = useStatewireClientTools(frontendToolkit);\n\n  // The persisted command lane is keyed by WHO is signed in as well as by host\n  // and thread (see `statewireSessionKey`); `null` while the sign-in provider\n  // above is still resolving who that is.\n  const principal = statewireSessionPrincipal(useContext(AthenaAuthContext));\n\n  // Attach → first server snapshot span, keyed per thread attach.\n  const attachSpanRef = useRef<ReturnType<AthenaDiagnosticsSpanStarter> | null>(null);\n  const attachThreadRef = useRef<string | null>(null);\n  if (attachThreadRef.current !== threadId) {\n    attachThreadRef.current = threadId;\n    attachSpanRef.current = athenaDiagnostics.span(\n      `statewire.attach:${threadId}`,\n      'statewire.attach.start',\n      { thread_id: threadId, is_new_chat: isNewChat },\n    );\n  }\n\n  // Built every render so its JSON signature can key the model-context\n  // registration below: consumers commonly pass fresh array literals per\n  // render, which must not thrash registration, while a changed value (a new\n  // `model`, channel, tool list, system prompt, …) must re-sync the context\n  // before the next send. The core pulls this value only on model-context\n  // notifications, which a key change triggers.\n  const runConfigValue = buildStatewireRunConfig({\n    model,\n    agent,\n    channel,\n    mode,\n    tools,\n    frontendToolIds,\n    workbench,\n    knowledgeBase,\n    systemPrompt,\n    appId,\n    extraRunConfig,\n    clientTools: statewireClientToolWireEntries(clientTools),\n  });\n  const runConfigKey = JSON.stringify(runConfigValue);\n\n  const auiTools = useMemo(() => Tools({ toolkit: frontendToolkit }), [frontendToolkit]);\n  // Web client for the shared runtime core (a `use*` name so the\n  // rules-of-hooks lint sees the `useAui` call inside a custom hook; the core\n  // invokes it unconditionally every render).\n  const useSdkClient = (thread: DeepAgentThreadElement) => useAui({ thread, tools: auiTools });\n\n  return useDeepAgentRuntime({\n    surface: 'AthenaSDK',\n    threadId,\n    baseUrl: syncUrl,\n    // Option closures are re-read per render by the core, so credential\n    // rotation (new `token`/`getToken`/`apiKey` props) reaches the next\n    // request without remounting the thread. The transport's `staleAuth`\n    // (true right after a refused credential) is forwarded as `force`.\n    headers: (ctx) => resolveStatewireAuthHeaders({ apiKey, token, getToken }, ctx),\n    isNewChat,\n    // Queued entries render in the SDK's queue panel, so only the steer lane\n    // projects into the message tail.\n    laneProjection: 'steer-only',\n    // Durable session: a reload resumes the lane and resends whatever the\n    // server has not marked durable. Scoped by host AND principal — a thread\n    // id is only meaningful against the backend that minted it, and a stored\n    // lane must never resend against another signed-in user. (Consumers\n    // server-render this SDK; the core's availability probe keeps those\n    // sessions process-local, as before the seam existed.) Until the sign-in\n    // provider knows who is signed in, the lane is pending: the transport\n    // stays parked and nothing is mounted on a stand-in key\n    // (`statewireSessionPrincipal`). A change to another principal remounts\n    // the conversation on that principal's lane instead of moving this one\n    // there (the runtime's lane epoch), so the previous principal's\n    // undelivered commands are never sent as the new one.\n    session:\n      principal === null\n        ? { kind: 'pending' }\n        : {\n            kind: 'local-storage',\n            key: (id) => statewireSessionKey({ syncUrl, principal, threadId: id }),\n          },\n    snapshotCache,\n    // Head interest (see `ATHENA_SDK_MESSAGE_WINDOW`): the tail of the\n    // transcript instead of every message; the chat UI's history edge pages\n    // older ranges in and fetches cut tool outputs into `toolOutputs`.\n    messageWindow,\n    toolOutputs,\n    // Each `task` card's nested transcript becomes its tool-call part's\n    // `messages` (assistant-ui's nested-thread channel), which the subagent\n    // card (`SubagentTaskToolUI`) shows.\n    createConversionCache: createSubagentTranscriptConversionCache,\n    // The lane-cut contract only where the chat pages lanes (see `subagentLaneHistory`).\n    laneHistory: subagentLaneHistory,\n    capabilities: { edit: true, reload: true, continue: true },\n    // The composer stages the draft each send came from right before it\n    // sends; the message carries it as its composer markdown, so its bubble\n    // shows the text exactly as typed (`UserMessageText`).\n    getMessageMetadata: withStagedComposerMarkdown({ threadId }),\n    useClient: useSdkClient,\n    onStateChange: (state) => {\n      // Statewire publishes what the thread renders before its attach snapshot\n      // through here too (the placeholder, a remembered snapshot, and a replay\n      // boundary's pre-stream default), and on a thread mid-run it reports\n      // `connected` before the snapshot applies: only a state the host sent\n      // counts, whatever the connection says.\n      if (!isDeepAgentHostState(state)) return;\n      // The attach's first one ends the attach span (time-to-history).\n      const endSpan = attachSpanRef.current;\n      if (endSpan) {\n        attachSpanRef.current = null;\n        endSpan('statewire.snapshot', { data: { thread_id: threadId } });\n      }\n      onServerState?.(state);\n    },\n    onConnectionChange: (connection) => {\n      athenaDiagnostics.gauge('statewire.connection', connection?.status ?? null);\n      if (connection?.status === 'stopped') {\n        athenaDiagnostics.emit('statewire.connection', {\n          level: 'warn',\n          data: {\n            status: connection.status,\n            reason: connection.reason,\n            message: connection.message,\n          },\n        });\n      }\n      onConnectionChange?.(connection);\n    },\n    onRawConnectionChange,\n    onRunningChange,\n    onSessionPersistedChange,\n    ...(onCommandChange && { onCommandChange }),\n    // Each model-context notification pulls the latest getter through the\n    // core's per-render ref; the value-stable key re-registers (and so\n    // notifies) only when the built runConfig actually changed. On a thread\n    // with a server config lane, agora keeps only the per-send keys of what\n    // this carries; `StatewireThreadConfigLaneSync` writes a changed model,\n    // system prompt, tool list, workbench or knowledge base to the lane itself.\n    runConfig: {\n      get: () => runConfigValue,\n      key: runConfigKey,\n    },\n    onError: (error) => {\n      if (!isStatewireChannelTeardown(error)) {\n        athenaDiagnostics.error(\n          'statewire.error',\n          error,\n          {\n            code: 'statewire_rejected',\n            message: 'The statewire host rejected a command',\n            hint: 'Inspect error.detail — agora rejections carry a structured {code, message}.',\n          },\n          { thread_id: threadId },\n        );\n      }\n      if (onError) {\n        onError(error);\n        return;\n      }\n      logUnhandledStatewireError('AthenaSDK', error);\n    },\n  });\n}\n"],"names":["DEEP_AGENT_DEFAULT_MESSAGE_WINDOW","useMemo","collectStatewireClientTools","resolveAgentProp","statewireSessionPrincipal","useContext","AthenaAuthContext","useRef","athenaDiagnostics","buildStatewireRunConfig","statewireClientToolWireEntries","Tools","useAui","useDeepAgentRuntime","resolveStatewireAuthHeaders","statewireSessionKey","createSubagentTranscriptConversionCache","withStagedComposerMarkdown","isDeepAgentHostState","isStatewireChannelTeardown","logUnhandledStatewireError"],"mappings":";;;;;;;;;;;;;;;;AAgDO,MAAM,4BAA+D;AAAA,EAC1E,MAAMA,kBAAAA;AACR;AAgGA,MAAM,gBAAyB,CAAA;AAC/B,MAAM,iBAA2B,CAAA;AAI1B,SAAS,wBACd,iBACwB;AACxB,SAAOC,WAAAA;AAAAA,IACL,MAAMC,qBAAAA,4BAA4B,mBAAmB,aAAa;AAAA,IAClE,CAAC,eAAe;AAAA,EAAA;AAEpB;AAaO,SAAS,0BACd,QACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,sBAAsB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,IACE;AAMJC,qBAAAA,iBAAiB,EAAE,OAAO;AAE1B,QAAM,cAAc,wBAAwB,eAAe;AAK3D,QAAM,YAAYC,oBAAAA,0BAA0BC,WAAAA,WAAWC,kBAAAA,iBAAiB,CAAC;AAGzE,QAAM,gBAAgBC,WAAAA,OAAwD,IAAI;AAClF,QAAM,kBAAkBA,WAAAA,OAAsB,IAAI;AAClD,MAAI,gBAAgB,YAAY,UAAU;AACxC,oBAAgB,UAAU;AAC1B,kBAAc,UAAUC,kBAAAA,kBAAkB;AAAA,MACxC,oBAAoB,QAAQ;AAAA,MAC5B;AAAA,MACA,EAAE,WAAW,UAAU,aAAa,UAAA;AAAA,IAAU;AAAA,EAElD;AAQA,QAAM,iBAAiBC,mBAAAA,wBAAwB;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAaC,qBAAAA,+BAA+B,WAAW;AAAA,EAAA,CACxD;AACD,QAAM,eAAe,KAAK,UAAU,cAAc;AAElD,QAAM,WAAWT,mBAAQ,MAAMU,YAAM,EAAE,SAAS,gBAAA,CAAiB,GAAG,CAAC,eAAe,CAAC;AAIrF,QAAM,eAAe,CAAC,WAAmCC,MAAAA,OAAO,EAAE,QAAQ,OAAO,UAAU;AAE3F,SAAOC,wCAAoB;AAAA,IACzB,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKT,SAAS,CAAC,QAAQC,iDAA4B,EAAE,QAAQ,OAAO,SAAA,GAAY,GAAG;AAAA,IAC9E;AAAA;AAAA;AAAA,IAGA,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,SACE,cAAc,OACV,EAAE,MAAM,cACR;AAAA,MACE,MAAM;AAAA,MACN,KAAK,CAAC,OAAOC,oBAAAA,oBAAoB,EAAE,SAAS,WAAW,UAAU,GAAA,CAAI;AAAA,IAAA;AAAA,IAE7E;AAAA;AAAA;AAAA;AAAA,IAIA;AAAA,IACA;AAAA;AAAA;AAAA;AAAA,IAIA,uBAAuBC,oBAAAA;AAAAA;AAAAA,IAEvB,aAAa;AAAA,IACb,cAAc,EAAE,MAAM,MAAM,QAAQ,MAAM,UAAU,KAAA;AAAA;AAAA;AAAA;AAAA,IAIpD,oBAAoBC,iBAAAA,2BAA2B,EAAE,UAAU;AAAA,IAC3D,WAAW;AAAA,IACX,eAAe,CAAC,UAAU;AAMxB,UAAI,CAACC,SAAAA,qBAAqB,KAAK,EAAG;AAElC,YAAM,UAAU,cAAc;AAC9B,UAAI,SAAS;AACX,sBAAc,UAAU;AACxB,gBAAQ,sBAAsB,EAAE,MAAM,EAAE,WAAW,SAAA,GAAY;AAAA,MACjE;AACA,qDAAgB;AAAA,IAClB;AAAA,IACA,oBAAoB,CAAC,eAAe;AAClCV,wBAAAA,kBAAkB,MAAM,yBAAwB,yCAAY,WAAU,IAAI;AAC1E,WAAI,yCAAY,YAAW,WAAW;AACpCA,0BAAAA,kBAAkB,KAAK,wBAAwB;AAAA,UAC7C,OAAO;AAAA,UACP,MAAM;AAAA,YACJ,QAAQ,WAAW;AAAA,YACnB,QAAQ,WAAW;AAAA,YACnB,SAAS,WAAW;AAAA,UAAA;AAAA,QACtB,CACD;AAAA,MACH;AACA,+DAAqB;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,mBAAmB,EAAE,gBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOzB,WAAW;AAAA,MACT,KAAK,MAAM;AAAA,MACX,KAAK;AAAA,IAAA;AAAA,IAEP,SAAS,CAAC,UAAU;AAClB,UAAI,CAACW,OAAAA,2BAA2B,KAAK,GAAG;AACtCX,0BAAAA,kBAAkB;AAAA,UAChB;AAAA,UACA;AAAA,UACA;AAAA,YACE,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA;AAAA,UAER,EAAE,WAAW,SAAA;AAAA,QAAS;AAAA,MAE1B;AACA,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACAY,0BAAAA,2BAA2B,aAAa,KAAK;AAAA,IAC/C;AAAA,EAAA,CACD;AACH;;;;;"}

package/dist/runtime/useAthenaStatewireRuntime.d.ts

@@ -92,6 +92,8 @@ export interface AthenaStatewireRuntimeConfig {
     onRawConnectionChange?: UseDeepAgentThreadOptions['onRawConnectionChange'];
     /** Notified when a run starts/stops. */
     onRunningChange?: UseDeepAgentThreadOptions['onRunningChange'];
+    /** Core's paired session-asset existence verdict, including remembered/unknown state. */
+    onSessionPersistedChange?: UseDeepAgentThreadOptions['onSessionPersistedChange'];
     /** Every statewire command-lifecycle update (the chat outbox lets a handed-over message go on it). */
     onCommandChange?: UseDeepAgentThreadOptions['onCommandChange'];
     /**