@athenaintel/react 0.48.0 → 0.52.1

package/dist/agent-runtime/src/use-deep-agent-runtime.js

@@ -53,6 +53,7 @@ function useDeepAgentRuntime(options) {
     session = false,
     useClient,
     runConfig,
+    onBeforeSendRetry,
     onError,
     onStateChange,
     onCommandChange,
@@ -69,6 +70,8 @@ function useDeepAgentRuntime(options) {
   onCommandChangeRef.current = onCommandChange;
   const diagnosticsRef = useRef(threadOptions.diagnostics);
   diagnosticsRef.current = threadOptions.diagnostics;
+  const onBeforeSendRetryRef = useRef(onBeforeSendRetry);
+  onBeforeSendRetryRef.current = onBeforeSendRetry;
   const clientRef = useRef(null);
   const failureStampsRef = useRef(
     void 0
@@ -103,7 +106,11 @@ function useDeepAgentRuntime(options) {
         var _a;
         return ((_a = failureStampsRef.current) == null ? void 0 : _a.call(failureStampsRef)) ?? null;
       },
-      diagnostics: () => diagnosticsRef.current
+      diagnostics: () => diagnosticsRef.current,
+      beforeRetry: (messageId) => {
+        var _a;
+        return (_a = onBeforeSendRetryRef.current) == null ? void 0 : _a.call(onBeforeSendRetryRef, messageId);
+      }
     }),
     [attachId]
   );
@@ -165,13 +172,24 @@ function useDeepAgentRuntime(options) {
   getRunConfigRef.current = runConfig == null ? void 0 : runConfig.get;
   const hasRunConfig = runConfig !== void 0;
   const runConfigKey = runConfig == null ? void 0 : runConfig.key;
+  const subscribeRunConfigRef = useRef(runConfig == null ? void 0 : runConfig.subscribe);
+  subscribeRunConfigRef.current = runConfig == null ? void 0 : runConfig.subscribe;
+  const hasRunConfigSubscribe = (runConfig == null ? void 0 : runConfig.subscribe) !== void 0;
   useEffect(() => {
     if (!hasRunConfig) return void 0;
-    return registerDeepAgentRunConfig(client, () => {
-      var _a;
-      return ((_a = getRunConfigRef.current) == null ? void 0 : _a.call(getRunConfigRef)) ?? {};
-    });
-  }, [client, hasRunConfig, runConfigKey]);
+    return registerDeepAgentRunConfig(
+      client,
+      () => {
+        var _a;
+        return ((_a = getRunConfigRef.current) == null ? void 0 : _a.call(getRunConfigRef)) ?? {};
+      },
+      hasRunConfigSubscribe ? (listener) => {
+        var _a;
+        return ((_a = subscribeRunConfigRef.current) == null ? void 0 : _a.call(subscribeRunConfigRef, listener)) ?? (() => {
+        });
+      } : void 0
+    );
+  }, [client, hasRunConfig, runConfigKey, hasRunConfigSubscribe]);
   return client;
 }
 export {

package/dist/agent-runtime/src/use-deep-agent-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport { INITIAL_SESSION_LANE_EPOCH, nextSessionLaneEpoch } from './session-lane-scope';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport {\n  deepAgentAttachId,\n  useDeepAgentThread,\n  type UseDeepAgentThreadOptions,\n} from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `key` names one principal's lanes (and one backend's). The\n * statewire session that mounts on a lane keeps the client id, lane clocks and\n * journal it loaded there, and everything in that journal is sent under\n * whatever credential the transport holds at its next attach. So a mounted\n * session never moves to another key: when the key starts naming another\n * principal's lanes for the same thread (another account signed in under a\n * mounted chat), the runtime starts a new lane epoch\n * (`UseDeepAgentThreadOptions['laneEpoch']`). The whole statewire thread\n * remounts on the new principal's lane and attaches afresh, as that lane's own\n * client, with nothing remembered or pooled from before. The previous\n * principal's record stays where it is, with its client id and whatever it had\n * journaled and not yet delivered: that principal's next mount on this browser\n * resends it as them, and the retention sweep retires it otherwise. It is never\n * sent as anyone else. A key for the same principal (a token refresh, a fresh\n * `key` function) and a thread switch keep the lane as it is. A host whose\n * principal arrives after mount passes `pending` until it does, never a\n * stand-in key: moving off a stand-in would be a principal change, a second\n * attach.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore' | 'laneEpoch'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // The lane's scope, as the host's `key` names it: whose lanes this mount\n  // runs on. A key that starts naming another principal's lanes starts a new\n  // lane epoch, which remounts the whole thread on the new lane instead of\n  // moving the mounted session there (see `DeepAgentSessionPersistence`).\n  // Tracked whether or not this origin can persist: a process-local session\n  // holds the previous principal's journal in memory just the same. A pending\n  // lane keeps the last known scope, so a sign-out and a sign-in as someone\n  // else with a gap between them is still a change.\n  const laneKey = session !== false && session.kind === 'local-storage' ? session.key : null;\n  const [laneEpochState, setLaneEpochState] = useState(() =>\n    nextSessionLaneEpoch({\n      previous: INITIAL_SESSION_LANE_EPOCH,\n      threadId: threadOptions.threadId,\n      key: laneKey,\n    })\n  );\n  const nextLaneEpochState = nextSessionLaneEpoch({\n    previous: laneEpochState,\n    threadId: threadOptions.threadId,\n    key: laneKey,\n  });\n  // React's derived-state update: re-renders at once with the new epoch, and\n  // this render already uses it, so no render pairs the new key with the\n  // mounted thread.\n  if (nextLaneEpochState !== laneEpochState) setLaneEpochState(nextLaneEpochState);\n  const laneEpoch = nextLaneEpochState.epoch;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch, re-attach or new lane epoch gets fresh hydration gating and\n  // retry budgets, so it never re-dispatches a previous principal's failed\n  // sends). The controller re-dispatches failed sends the server never judged;\n  // see `send-recovery.ts` for the contract.\n  const attachId = deepAgentAttachId({ threadId: threadOptions.threadId, attachKey, laneEpoch });\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    laneEpoch,\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(client, () => getRunConfigRef.current?.() ?? {});\n  }, [client, hasRunConfig, runConfigKey]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;;AAkGO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAuEO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,YAAY,OAAuB,IAAI;AAI7C,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MAAM,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAI7E,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAUlB,QAAM,UAAU,YAAY,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,MAAM;AACtF,QAAM,CAAC,gBAAgB,iBAAiB,IAAI;AAAA,IAAS,MACnD,qBAAqB;AAAA,MACnB,UAAU;AAAA,MACV,UAAU,cAAc;AAAA,MACxB,KAAK;AAAA,IAAA,CACN;AAAA,EAAA;AAEH,QAAM,qBAAqB,qBAAqB;AAAA,IAC9C,UAAU;AAAA,IACV,UAAU,cAAc;AAAA,IACxB,KAAK;AAAA,EAAA,CACN;AAID,MAAI,uBAAuB,eAAgB,mBAAkB,kBAAkB;AAC/E,QAAM,YAAY,mBAAmB;AAOrC,QAAM,WAAW,kBAAkB,EAAE,UAAU,cAAc,UAAU,WAAW,WAAW;AAE7F,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,4BAA4BA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,IAAA,CACnC;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA,IACjC;AAAA;AAAA;AAAA;AAAA,IAIA,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpB,YAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAM,aAAa,yBAAyB;AACjF,iBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,CAAC;AAOzB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAChC,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO,2BAA2B,QAAQ,MAAA;;AAAM,oCAAgB,YAAhB,6CAA+B,CAAA;AAAA,KAAE;AAAA,EACnF,GAAG,CAAC,QAAQ,cAAc,YAAY,CAAC;AAEvC,SAAO;AACT;"}
+{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport { INITIAL_SESSION_LANE_EPOCH, nextSessionLaneEpoch } from './session-lane-scope';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport {\n  deepAgentAttachId,\n  useDeepAgentThread,\n  type UseDeepAgentThreadOptions,\n} from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `key` names one principal's lanes (and one backend's). The\n * statewire session that mounts on a lane keeps the client id, lane clocks and\n * journal it loaded there, and everything in that journal is sent under\n * whatever credential the transport holds at its next attach. So a mounted\n * session never moves to another key: when the key starts naming another\n * principal's lanes for the same thread (another account signed in under a\n * mounted chat), the runtime starts a new lane epoch\n * (`UseDeepAgentThreadOptions['laneEpoch']`). The whole statewire thread\n * remounts on the new principal's lane and attaches afresh, as that lane's own\n * client, with nothing remembered or pooled from before. The previous\n * principal's record stays where it is, with its client id and whatever it had\n * journaled and not yet delivered: that principal's next mount on this browser\n * resends it as them, and the retention sweep retires it otherwise. It is never\n * sent as anyone else. A key for the same principal (a token refresh, a fresh\n * `key` function) and a thread switch keep the lane as it is. A host whose\n * principal arrives after mount passes `pending` until it does, never a\n * stand-in key: moving off a stand-in would be a principal change, a second\n * attach.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n  /**\n   * Notifies when a getter input changes outside React, so model-context sync\n   * pulls `get` at once, before a command sent right after leaves (Olympus\n   * stages a send's named agents right before `composer.send`). Subscribed\n   * when the provider registers; a key change subscribes again.\n   */\n  subscribe?: (listener: () => void) => () => void;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore' | 'laneEpoch'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n  /**\n   * Called right before send recovery dispatches a failed send again, with its\n   * message id: the host puts back the per-send context that message was sent\n   * with (Olympus stages the agents it named) before its command leaves. A\n   * promise holds that retry (and the ones behind it) until it settles, then\n   * the host is asked again: it can't put the context back while a send with\n   * another one is still on its way (see `DeepAgentSendRecoveryOptions.beforeRetry`).\n   * A function returned is called when the retry does not go after all.\n   */\n  onBeforeSendRetry?: (messageId: string) => void | PromiseLike<void> | (() => void);\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onBeforeSendRetry,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const onBeforeSendRetryRef = useRef(onBeforeSendRetry);\n  onBeforeSendRetryRef.current = onBeforeSendRetry;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // The lane's scope, as the host's `key` names it: whose lanes this mount\n  // runs on. A key that starts naming another principal's lanes starts a new\n  // lane epoch, which remounts the whole thread on the new lane instead of\n  // moving the mounted session there (see `DeepAgentSessionPersistence`).\n  // Tracked whether or not this origin can persist: a process-local session\n  // holds the previous principal's journal in memory just the same. A pending\n  // lane keeps the last known scope, so a sign-out and a sign-in as someone\n  // else with a gap between them is still a change.\n  const laneKey = session !== false && session.kind === 'local-storage' ? session.key : null;\n  const [laneEpochState, setLaneEpochState] = useState(() =>\n    nextSessionLaneEpoch({\n      previous: INITIAL_SESSION_LANE_EPOCH,\n      threadId: threadOptions.threadId,\n      key: laneKey,\n    })\n  );\n  const nextLaneEpochState = nextSessionLaneEpoch({\n    previous: laneEpochState,\n    threadId: threadOptions.threadId,\n    key: laneKey,\n  });\n  // React's derived-state update: re-renders at once with the new epoch, and\n  // this render already uses it, so no render pairs the new key with the\n  // mounted thread.\n  if (nextLaneEpochState !== laneEpochState) setLaneEpochState(nextLaneEpochState);\n  const laneEpoch = nextLaneEpochState.epoch;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch, re-attach or new lane epoch gets fresh hydration gating and\n  // retry budgets, so it never re-dispatches a previous principal's failed\n  // sends). The controller re-dispatches failed sends the server never judged;\n  // see `send-recovery.ts` for the contract.\n  const attachId = deepAgentAttachId({ threadId: threadOptions.threadId, attachKey, laneEpoch });\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n        beforeRetry: (messageId) => onBeforeSendRetryRef.current?.(messageId),\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    laneEpoch,\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  // A host's own notifications (inputs that change outside React) pull too.\n  const subscribeRunConfigRef = useRef(runConfig?.subscribe);\n  subscribeRunConfigRef.current = runConfig?.subscribe;\n  const hasRunConfigSubscribe = runConfig?.subscribe !== undefined;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(\n      client,\n      () => getRunConfigRef.current?.() ?? {},\n      hasRunConfigSubscribe\n        ? (listener) => subscribeRunConfigRef.current?.(listener) ?? (() => {})\n        : undefined\n    );\n  }, [client, hasRunConfig, runConfigKey, hasRunConfigSubscribe]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;;AAkGO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAwFO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,uBAAuB,OAAO,iBAAiB;AACrD,uBAAqB,UAAU;AAC/B,QAAM,YAAY,OAAuB,IAAI;AAI7C,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MAAM,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAI7E,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAUlB,QAAM,UAAU,YAAY,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,MAAM;AACtF,QAAM,CAAC,gBAAgB,iBAAiB,IAAI;AAAA,IAAS,MACnD,qBAAqB;AAAA,MACnB,UAAU;AAAA,MACV,UAAU,cAAc;AAAA,MACxB,KAAK;AAAA,IAAA,CACN;AAAA,EAAA;AAEH,QAAM,qBAAqB,qBAAqB;AAAA,IAC9C,UAAU;AAAA,IACV,UAAU,cAAc;AAAA,IACxB,KAAK;AAAA,EAAA,CACN;AAID,MAAI,uBAAuB,eAAgB,mBAAkB,kBAAkB;AAC/E,QAAM,YAAY,mBAAmB;AAOrC,QAAM,WAAW,kBAAkB,EAAE,UAAU,cAAc,UAAU,WAAW,WAAW;AAE7F,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,4BAA4BA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,MAClC,aAAa,CAAC;;AAAc,0CAAqB,YAArB,8CAA+B;AAAA;AAAA,IAAS,CACrE;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA,IACjC;AAAA;AAAA;AAAA;AAAA,IAIA,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpB,YAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAM,aAAa,yBAAyB;AACjF,iBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,CAAC;AAOzB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAEhC,QAAM,wBAAwB,OAAO,uCAAW,SAAS;AACzD,wBAAsB,UAAU,uCAAW;AAC3C,QAAM,yBAAwB,uCAAW,eAAc;AACvD,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO;AAAA,MACL;AAAA,MACA;;AAAM,sCAAgB,YAAhB,6CAA+B,CAAA;AAAA;AAAA,MACrC,wBACI,CAAC,aAAA;;AAAa,4CAAsB,YAAtB,+CAAgC,eAAc,MAAM;AAAA,QAAC;AAAA,UACnE;AAAA,IAAA;AAAA,EAER,GAAG,CAAC,QAAQ,cAAc,cAAc,qBAAqB,CAAC;AAE9D,SAAO;AACT;"}

package/dist/agent-runtime/src/use-deep-agent-voice.cjs

@@ -421,6 +421,8 @@ const useDeepAgentVoice = (options = {}) => {
   modelRef.current = options.model;
   const onDiagnosticRef = require$$0.useRef(options.onDiagnostic);
   onDiagnosticRef.current = options.onDiagnostic;
+  const onCallMovedRef = require$$0.useRef(options.onCallMoved);
+  onCallMovedRef.current = options.onCallMoved;
   const timeoutsRef = require$$0.useRef(options.timeouts);
   timeoutsRef.current = options.timeouts;
   const phaseRef = require$$0.useRef("idle");
@@ -497,7 +499,15 @@ const useDeepAgentVoice = (options = {}) => {
     activeAudioSessionRef.current = null;
     audioSessionIdleRef.current = audioSessionIdleRef.current.then(() => session.stop()).catch(() => void 0);
   }, []);
-  const teardown = require$$0.useCallback(() => {
+  const notifyCallMoved = require$$0.useCallback((move) => {
+    const observer = onCallMovedRef.current;
+    if (!observer) return;
+    try {
+      void Promise.resolve(observer(move)).catch(() => void 0);
+    } catch {
+    }
+  }, []);
+  const teardown = require$$0.useCallback((options2) => {
     attemptRef.current += 1;
     const livekitAbort = livekitAbortRef.current;
     livekitAbortRef.current = null;
@@ -506,7 +516,7 @@ const useDeepAgentVoice = (options = {}) => {
       var _a, _b;
       return (_b = (_a = startingAudioSessionRef.current) == null ? void 0 : _a.cancelStart) == null ? void 0 : _b.call(_a);
     });
-    releaseAudioSession();
+    if ((options2 == null ? void 0 : options2.keepAudioSession) !== true) releaseAudioSession();
     const releasePeerListeners = releasePeerListenersRef.current;
     releasePeerListenersRef.current = null;
     releaseSafely(() => releasePeerListeners == null ? void 0 : releasePeerListeners());
@@ -558,6 +568,7 @@ const useDeepAgentVoice = (options = {}) => {
     var _a;
     const surface = ((_a = voiceOwnerRef.current) == null ? void 0 : _a.surface) ?? "web";
     report("moved", attemptRef.current, { toSurface: surface });
+    notifyCallMoved({ direction: "away", surface });
     teardown();
     ownClientIdRef.current = null;
     micMutedRef.current = false;
@@ -566,7 +577,7 @@ const useDeepAgentVoice = (options = {}) => {
     setFailure(null);
     setPhase("idle");
     setMovedTo({ surface });
-  }, [report, teardown]);
+  }, [notifyCallMoved, report, teardown]);
   const ownerMovedAway = require$$0.useCallback(() => {
     const own = ownClientIdRef.current;
     const current = wireOwnerIdRef.current;
@@ -577,11 +588,17 @@ const useDeepAgentVoice = (options = {}) => {
       attempt,
       audioSession
     }) => {
+      const held = activeAudioSessionRef.current;
+      if (held !== null && held !== audioSession) releaseAudioSession();
       await audioSessionIdleRef.current;
       if (attemptRef.current !== attempt) {
         report("stale-attempt", attempt, { stage: "audio-session" });
         return false;
       }
+      if (activeAudioSessionRef.current === audioSession) {
+        report("audio-session-ready", attempt, { reused: true });
+        return true;
+      }
       startingAudioSessionRef.current = audioSession;
       try {
         await audioSession.start();
@@ -620,6 +637,11 @@ const useDeepAgentVoice = (options = {}) => {
             return;
           }
           onDisconnectedAfterJoin(reason);
+        },
+        // Telemetry about this attempt's room stays this attempt's even after
+        // it ended: the room's closing summary arrives after teardown.
+        onEvent: (event) => {
+          report("media-event", attempt, { ...event.data, type: event.type });
         }
       });
       if (attemptRef.current !== attempt) {
@@ -997,13 +1019,14 @@ const useDeepAgentVoice = (options = {}) => {
         handleMovedAway();
         return;
       }
+      const restarting = !autoRestartedRef.current;
       report("media-loss", attempt, {
         reason,
-        restartBudgetLeft: !autoRestartedRef.current
+        restartBudgetLeft: restarting
       });
       if (lastActiveTaskRef.current) setHandoffTask(lastActiveTaskRef.current);
       const ending = sendCommand({ type: "voice/end", attemptId: callAttemptIdRef.current }).catch(() => void 0);
-      teardown();
+      teardown({ keepAudioSession: restarting });
       const recovery = attemptRef.current;
       setPhase("idle");
       let endTimer;
@@ -1059,6 +1082,8 @@ const useDeepAgentVoice = (options = {}) => {
     await startSession((options2 == null ? void 0 : options2.opening) === "recap" ? { opening: "recap" } : {});
   }, [startSession]);
   const runTransferHere = require$$0.useCallback(async () => {
+    var _a;
+    const fromSurface = ((_a = liveElsewhereRef.current) == null ? void 0 : _a.surface) ?? "web";
     const attempt = attemptRef.current += 1;
     const attemptId = mintVoiceId({ kind: "attempt" });
     callAttemptIdRef.current = attemptId;
@@ -1185,6 +1210,7 @@ const useDeepAgentVoice = (options = {}) => {
       report("live", attempt, { transport: "livekit", transfer: true });
       setPhase("live");
       setLiveSince(Date.now());
+      notifyCallMoved({ direction: "here", surface: fromSurface });
     } catch (transferError) {
       if (attemptRef.current !== attempt) {
         stale();
@@ -1199,7 +1225,15 @@ const useDeepAgentVoice = (options = {}) => {
     } finally {
       startingRef.current = false;
     }
-  }, [acquireAudioSession, fail, joinVoiceRoom, releaseAudioSession, report, sendCommand]);
+  }, [
+    acquireAudioSession,
+    fail,
+    joinVoiceRoom,
+    notifyCallMoved,
+    releaseAudioSession,
+    report,
+    sendCommand
+  ]);
   const transferHere = require$$0.useCallback(async () => {
     if (pcRef.current || wsRef.current || livekitRef.current || startingRef.current) return;
     if (liveElsewhereRef.current === null) return;
@@ -1287,13 +1321,14 @@ const useDeepAgentVoice = (options = {}) => {
   require$$0.useEffect(() => {
     var _a;
     if (phase !== "live" || !sessionGone) return;
+    const restarting = !autoRestartedRef.current;
     report("server-ended", attemptRef.current, {
-      restartBudgetLeft: !autoRestartedRef.current
+      restartBudgetLeft: restarting
     });
     if (lastActiveTaskRef.current) setHandoffTask(lastActiveTaskRef.current);
-    teardown();
+    teardown({ keepAudioSession: restarting });
     setPhase("idle");
-    if (!autoRestartedRef.current) {
+    if (restarting) {
       autoRestartedRef.current = true;
       report("auto-restart", attemptRef.current, { trigger: "server-ended" });
       void ((_a = startRef.current) == null ? void 0 : _a.call(startRef));