@athenaintel/react 0.57.1 → 0.59.0

package/dist/agent-runtime/src/edit-command.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"edit-command.cjs","sources":["../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { DEEP_AGENT_INTEREST_PROTOCOL } from './generated/runconfig-contract';\nimport {\n  buildHistoryPageCommand,\n  deepAgentHistoryStore,\n  isHistoryPageUnserved,\n  readHistoryPageResult,\n} from './history-store';\nimport {\n  type DeepAgentMessageWindow,\n  pageInterestRequests,\n  readDeepAgentMessageWindow,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * The raw list is the loaded interest window, so the first loaded message's\n * parent is not in it while older messages exist — an edit there must not\n * anchor on `null` (the root, rejected `wrong-anchor`); a message below the\n * window has no parent on this client at all. {@link resolveDeepAgentEditCommand}\n * states older page interests until the parent is loaded.\n */\n\n/**\n * Host metadata frozen at submission, settling once the async capture does.\n * The message-metadata preparation surface — `prepareMessageMetadata`,\n * `discardPreparedMessageMetadata`, `sendPreparedEdit` and `sendCommand`'s\n * `preparedMetadata` option — is what the monorepo patches into\n * `@assistant-ui/react-statewire@0.31.0` (`patches/`). It is declared\n * structurally here rather than as `StatewireThread.Extras[...]` so that the\n * published sources also compile against the unpatched upstream typings, where\n * those members are absent and the edit path's optional calls never run.\n */\nexport type DeepAgentPreparedMessageMetadata = Promise<Record<string, unknown> | undefined>;\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: { preparedMetadata?: DeepAgentPreparedMessageMetadata | undefined },\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: (() => DeepAgentPreparedMessageMetadata) | undefined;\n  discardPreparedMessageMetadata?:\n    | ((prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  sendPreparedEdit?:\n    | ((sourceId: string, prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  isPreparingSubmission?: boolean;\n  /** The composed thread state — its `messages` are the raw wire messages of the loaded window. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The mounted documents (the interest window), absent on a wire without documents. */\n  documents?: StatewireThread.Extras['documents'];\n  invoke?: StatewireThread.Extras['invoke'];\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n  /** The live connection: a `history/page` refusal holds for it alone. */\n  connection?: unknown;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below the loaded window, or a surface\n * whose state this module cannot read — or when it is the first loaded\n * message while older ones exist (`hasOlder`), so the caller can load more or\n * fall back to the library's own path instead of asserting a wrong anchor.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  hasOlder = false,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  hasOlder?: boolean;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) return hasOlder ? undefined : null;\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId`'s parent lies below the loaded window: the message is\n * absent from the raw list, or its first entry, while older messages exist.\n * The caller loads older history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessageWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || !window.hasOlder) return false;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  return index <= 0;\n}\n\nconst readWindow = (extras: DeepAgentStatewireExtras) =>\n  readDeepAgentMessageWindow(extras.documents?.list());\n\n/**\n * The raw messages an anchor is read from: the composed state's, or — once\n * the window joins older history from the conversation's store — the\n * window's own, which a page just loaded reaches before the converter has\n * re-run.\n */\nconst anchorMessages = (\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow | null\n): readonly { id?: unknown }[] | undefined =>\n  window !== null && (window.stored ?? 0) > 0 ? window.messages : extras.state?.messages;\n\n/**\n * Load one more page of older history below `window`: a `history/page` read\n * into the conversation's store where the host serves it\n * (`window.historyPaged`), else one more page interest. `false` when there is nothing older or\n * no page can be asked for.\n */\nasync function loadOlderPage(\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow,\n  pageSize: number | undefined\n): Promise<boolean> {\n  if (!window.hasOlder) return false;\n  if (window.historyPaged && window.threadId !== undefined) {\n    const before = window.chain[0]?.id;\n    if (before === undefined) return false;\n    const store = deepAgentHistoryStore(window.threadId);\n    let payload: unknown;\n    try {\n      payload = await extras.sendCommand(buildHistoryPageCommand({ before }));\n    } catch (error) {\n      if (!isHistoryPageUnserved(error)) throw error;\n      // A host that advertises the command but lacks it (`unknown-command`):\n      // this connection pages by interest from here on, the same fallback the\n      // window sync takes. Any other refusal is this page's failure.\n      store.markUnserved(extras.connection);\n      const live = readWindow(extras);\n      if (live === null || live.historyPaged) return false;\n      return loadOlderPage(extras, live, pageSize);\n    }\n    const page = readHistoryPageResult(payload, before);\n    if (page === null) return false;\n    store.addPage(page);\n    return true;\n  }\n  if (!extras.invoke) return false;\n  const requests = pageInterestRequests(window, pageSize);\n  if (requests === null) return false;\n  await extras.invoke(DEEP_AGENT_INTEREST_PROTOCOL, 'set', [requests]);\n  return true;\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const window = readWindow(extras);\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: anchorMessages(extras, window),\n    sourceId,\n    hasOlder: window?.hasOlder ?? false,\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Whether a windowed statewire thread has older history than it has loaded:\n * `null` while that is not known yet (the head interest has not resolved; a\n * remembered transcript can show from cache before it does), and `false` for\n * a thread that is not a statewire thread, so a reader looking for an older\n * message waits for the window, or stops.\n */\nexport function deepAgentHistoryHasOlder(extras: unknown): boolean | null {\n  const typed = readDeepAgentStatewireExtras(extras);\n  if (typed === null) return false;\n  return readWindow(typed)?.hasOlder ?? null;\n}\n\n/**\n * State one more page of older history for a windowed thread: the next page\n * past the loaded window's oldest message. Resolves `true` once the host has\n * mounted it (it answers the statement after mounting), `false` when there is\n * nothing older, the thread is not a windowed statewire thread, or no page can\n * be stated. For a reader that needs a message below the loaded window — a\n * search result revealing an older turn of a long conversation — and pages\n * until it renders.\n */\nexport async function loadOlderDeepAgentHistoryPage({\n  readExtras,\n  pageSize,\n}: {\n  readExtras: () => DeepAgentStatewireExtras | null;\n  pageSize?: number;\n}): Promise<boolean> {\n  const extras = readExtras();\n  if (!extras) return false;\n  const window = readWindow(extras);\n  if (window === null) return false;\n  return loadOlderPage(extras, window, pageSize);\n}\n\n/**\n * Whether a {@link loadOlderDeepAgentHistoryPage} failure is the connection\n * dropping under the page (statewire settles an ephemeral statement in flight\n * at the drop `session-lost`), not the host refusing it. The re-attach carries\n * the view loaded so far, so a reader looking for a message pages again once\n * reconnected instead of deciding the history is exhausted.\n */\nexport function isHistoryPageLostToReconnect(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null || !('failure' in error)) return false;\n  const { failure } = error;\n  return (\n    typeof failure === 'object' &&\n    failure !== null &&\n    'cause' in failure &&\n    failure.cause === 'session-lost'\n  );\n}\n\n/**\n * Pages of older history stated while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, stating older page interests one at\n * a time when the message's parent lies below the loaded window. Every page\n * is read back from the live documents (`readExtras` — the host mounts them\n * before it answers the statement), so the anchor is always the host's own\n * parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  pageSize,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the widened window. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  pageSize?: number;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const window = readWindow(extras);\n    if (\n      window === null ||\n      !isSourceBelowLoadedWindow({ wireMessages: anchorMessages(extras, window), sourceId, window })\n    ) {\n      return null;\n    }\n    if (!(await loadOlderPage(extras, window, pageSize))) return null;\n  }\n  return null;\n}\n"],"names":["hasStatewireThreadExtras","readDeepAgentMessageWindow","deepAgentHistoryStore","buildHistoryPageCommand","isHistoryPageUnserved","readHistoryPageResult","pageInterestRequests","DEEP_AGENT_INTEREST_PROTOCOL"],"mappings":";;;;;;AA4FO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAACA,aAAAA,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAWO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,EAAG,QAAO,WAAW,SAAY;AAC/C,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,CAAC,OAAO,SAAU,QAAO;AACjE,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,SAAO,SAAS;AAClB;AAEA,MAAM,aAAa,CAAC,WAAA;;AAClBC,uBAAAA,4BAA2B,YAAO,cAAP,mBAAkB,MAAM;AAAA;AAQrD,MAAM,iBAAiB,CACrB,QACA,WAAA;;AAEA,oBAAW,SAAS,OAAO,UAAU,KAAK,IAAI,OAAO,YAAW,YAAO,UAAP,mBAAc;AAAA;AAQhF,eAAe,cACb,QACA,QACA,UACkB;;AAClB,MAAI,CAAC,OAAO,SAAU,QAAO;AAC7B,MAAI,OAAO,gBAAgB,OAAO,aAAa,QAAW;AACxD,UAAM,UAAS,YAAO,MAAM,CAAC,MAAd,mBAAiB;AAChC,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,QAAQC,aAAAA,sBAAsB,OAAO,QAAQ;AACnD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,OAAO,YAAYC,aAAAA,wBAAwB,EAAE,OAAA,CAAQ,CAAC;AAAA,IACxE,SAAS,OAAO;AACd,UAAI,CAACC,aAAAA,sBAAsB,KAAK,EAAG,OAAM;AAIzC,YAAM,aAAa,OAAO,UAAU;AACpC,YAAM,OAAO,WAAW,MAAM;AAC9B,UAAI,SAAS,QAAQ,KAAK,aAAc,QAAO;AAC/C,aAAO,cAAc,QAAQ,MAAM,QAAQ;AAAA,IAC7C;AACA,UAAM,OAAOC,aAAAA,sBAAsB,SAAS,MAAM;AAClD,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,QAAQ,IAAI;AAClB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,QAAM,WAAWC,cAAAA,qBAAqB,QAAQ,QAAQ;AACtD,MAAI,aAAa,KAAM,QAAO;AAC9B,QAAM,OAAO,OAAOC,kBAAAA,8BAA8B,OAAO,CAAC,QAAQ,CAAC;AACnE,SAAO;AACT;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;AACxC,QAAM,SAAS,WAAW,MAAM;AAChC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,cAAc,eAAe,QAAQ,MAAM;AAAA,IAC3C;AAAA,IACA,WAAU,iCAAQ,aAAY;AAAA,EAAA,CAC/B;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AASO,SAAS,yBAAyB,QAAiC;;AACxE,QAAM,QAAQ,6BAA6B,MAAM;AACjD,MAAI,UAAU,KAAM,QAAO;AAC3B,WAAO,gBAAW,KAAK,MAAhB,mBAAmB,aAAY;AACxC;AAWA,eAAsB,8BAA8B;AAAA,EAClD;AAAA,EACA;AACF,GAGqB;AACnB,QAAM,SAAS,WAAA;AACf,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,WAAW,MAAM;AAChC,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,cAAc,QAAQ,QAAQ,QAAQ;AAC/C;AASO,SAAS,6BAA6B,OAAyB;AACpE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,aAAa,OAAQ,QAAO;AACjF,QAAM,EAAE,YAAY;AACpB,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,WACX,QAAQ,UAAU;AAEtB;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAOmD;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,SAAS,WAAW,MAAM;AAChC,QACE,WAAW,QACX,CAAC,0BAA0B,EAAE,cAAc,eAAe,QAAQ,MAAM,GAAG,UAAU,OAAA,CAAQ,GAC7F;AACA,aAAO;AAAA,IACT;AACA,QAAI,CAAE,MAAM,cAAc,QAAQ,QAAQ,QAAQ,EAAI,QAAO;AAAA,EAC/D;AACA,SAAO;AACT;;;;;;;;;;"}
+{"version":3,"file":"edit-command.cjs","sources":["../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { DEEP_AGENT_INTEREST_PROTOCOL } from './generated/runconfig-contract';\nimport {\n  buildHistoryPageCommand,\n  deepAgentHistoryStore,\n  isHistoryPageUnserved,\n  readHistoryPageResult,\n} from './history-store';\nimport {\n  type DeepAgentMessageWindow,\n  pageInterestRequests,\n  readDeepAgentMessageWindow,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * The raw list is the loaded interest window, so the first loaded message's\n * parent is not in it while older messages exist — an edit there must not\n * anchor on `null` (the root, rejected `wrong-anchor`); a message below the\n * window has no parent on this client at all. {@link resolveDeepAgentEditCommand}\n * states older page interests until the parent is loaded.\n */\n\n/**\n * Host metadata frozen at submission, settling once the async capture does.\n * The message-metadata preparation surface — `prepareMessageMetadata`,\n * `discardPreparedMessageMetadata`, `sendPreparedEdit` and `sendCommand`'s\n * `preparedMetadata` option — is what the monorepo patches into\n * `@assistant-ui/react-statewire@0.33.0` (`patches/`). It is declared\n * structurally here rather than as `StatewireThread.Extras[...]` so that the\n * published sources also compile against the unpatched upstream typings, where\n * those members are absent and the edit path's optional calls never run.\n */\nexport type DeepAgentPreparedMessageMetadata = Promise<Record<string, unknown> | undefined>;\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: { preparedMetadata?: DeepAgentPreparedMessageMetadata | undefined },\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: (() => DeepAgentPreparedMessageMetadata) | undefined;\n  discardPreparedMessageMetadata?:\n    | ((prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  sendPreparedEdit?:\n    | ((sourceId: string, prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  isPreparingSubmission?: boolean;\n  /** The composed thread state — its `messages` are the raw wire messages of the loaded window. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The mounted documents (the interest window), absent on a wire without documents. */\n  documents?: StatewireThread.Extras['documents'];\n  invoke?: StatewireThread.Extras['invoke'];\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n  /** The live connection: a `history/page` refusal holds for it alone. */\n  connection?: unknown;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below the loaded window, or a surface\n * whose state this module cannot read — or when it is the first loaded\n * message while older ones exist (`hasOlder`), so the caller can load more or\n * fall back to the library's own path instead of asserting a wrong anchor.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  hasOlder = false,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  hasOlder?: boolean;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) return hasOlder ? undefined : null;\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId`'s parent lies below the loaded window: the message is\n * absent from the raw list, or its first entry, while older messages exist.\n * The caller loads older history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessageWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || !window.hasOlder) return false;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  return index <= 0;\n}\n\nconst readWindow = (extras: DeepAgentStatewireExtras) =>\n  readDeepAgentMessageWindow(extras.documents?.list());\n\n/**\n * The raw messages an anchor is read from: the composed state's, or — once\n * the window joins older history from the conversation's store — the\n * window's own, which a page just loaded reaches before the converter has\n * re-run.\n */\nconst anchorMessages = (\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow | null\n): readonly { id?: unknown }[] | undefined =>\n  window !== null && (window.stored ?? 0) > 0 ? window.messages : extras.state?.messages;\n\n/**\n * Load one more page of older history below `window`: a `history/page` read\n * into the conversation's store where the host serves it\n * (`window.historyPaged`), else one more page interest. `false` when there is nothing older or\n * no page can be asked for.\n */\nasync function loadOlderPage(\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow,\n  pageSize: number | undefined\n): Promise<boolean> {\n  if (!window.hasOlder) return false;\n  if (window.historyPaged && window.threadId !== undefined) {\n    const before = window.chain[0]?.id;\n    if (before === undefined) return false;\n    const store = deepAgentHistoryStore(window.threadId);\n    let payload: unknown;\n    try {\n      payload = await extras.sendCommand(buildHistoryPageCommand({ before }));\n    } catch (error) {\n      if (!isHistoryPageUnserved(error)) throw error;\n      // A host that advertises the command but lacks it (`unknown-command`):\n      // this connection pages by interest from here on, the same fallback the\n      // window sync takes. Any other refusal is this page's failure.\n      store.markUnserved(extras.connection);\n      const live = readWindow(extras);\n      if (live === null || live.historyPaged) return false;\n      return loadOlderPage(extras, live, pageSize);\n    }\n    const page = readHistoryPageResult(payload, before);\n    if (page === null) return false;\n    store.addPage(page);\n    return true;\n  }\n  if (!extras.invoke) return false;\n  const requests = pageInterestRequests(window, pageSize);\n  if (requests === null) return false;\n  await extras.invoke(DEEP_AGENT_INTEREST_PROTOCOL, 'set', [requests]);\n  return true;\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const window = readWindow(extras);\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: anchorMessages(extras, window),\n    sourceId,\n    hasOlder: window?.hasOlder ?? false,\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Whether a windowed statewire thread has older history than it has loaded:\n * `null` while that is not known yet (the head interest has not resolved; a\n * remembered transcript can show from cache before it does), and `false` for\n * a thread that is not a statewire thread, so a reader looking for an older\n * message waits for the window, or stops.\n */\nexport function deepAgentHistoryHasOlder(extras: unknown): boolean | null {\n  const typed = readDeepAgentStatewireExtras(extras);\n  if (typed === null) return false;\n  return readWindow(typed)?.hasOlder ?? null;\n}\n\n/**\n * State one more page of older history for a windowed thread: the next page\n * past the loaded window's oldest message. Resolves `true` once the host has\n * mounted it (it answers the statement after mounting), `false` when there is\n * nothing older, the thread is not a windowed statewire thread, or no page can\n * be stated. For a reader that needs a message below the loaded window — a\n * search result revealing an older turn of a long conversation — and pages\n * until it renders.\n */\nexport async function loadOlderDeepAgentHistoryPage({\n  readExtras,\n  pageSize,\n}: {\n  readExtras: () => DeepAgentStatewireExtras | null;\n  pageSize?: number;\n}): Promise<boolean> {\n  const extras = readExtras();\n  if (!extras) return false;\n  const window = readWindow(extras);\n  if (window === null) return false;\n  return loadOlderPage(extras, window, pageSize);\n}\n\n/**\n * Whether a {@link loadOlderDeepAgentHistoryPage} failure is the connection\n * dropping under the page (statewire settles an ephemeral statement in flight\n * at the drop `session-lost`), not the host refusing it. The re-attach carries\n * the view loaded so far, so a reader looking for a message pages again once\n * reconnected instead of deciding the history is exhausted.\n */\nexport function isHistoryPageLostToReconnect(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null || !('failure' in error)) return false;\n  const { failure } = error;\n  return (\n    typeof failure === 'object' &&\n    failure !== null &&\n    'cause' in failure &&\n    failure.cause === 'session-lost'\n  );\n}\n\n/**\n * Pages of older history stated while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, stating older page interests one at\n * a time when the message's parent lies below the loaded window. Every page\n * is read back from the live documents (`readExtras` — the host mounts them\n * before it answers the statement), so the anchor is always the host's own\n * parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  pageSize,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the widened window. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  pageSize?: number;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const window = readWindow(extras);\n    if (\n      window === null ||\n      !isSourceBelowLoadedWindow({ wireMessages: anchorMessages(extras, window), sourceId, window })\n    ) {\n      return null;\n    }\n    if (!(await loadOlderPage(extras, window, pageSize))) return null;\n  }\n  return null;\n}\n"],"names":["hasStatewireThreadExtras","readDeepAgentMessageWindow","deepAgentHistoryStore","buildHistoryPageCommand","isHistoryPageUnserved","readHistoryPageResult","pageInterestRequests","DEEP_AGENT_INTEREST_PROTOCOL"],"mappings":";;;;;;AA4FO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAACA,aAAAA,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAWO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,EAAG,QAAO,WAAW,SAAY;AAC/C,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,CAAC,OAAO,SAAU,QAAO;AACjE,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,SAAO,SAAS;AAClB;AAEA,MAAM,aAAa,CAAC,WAAA;;AAClBC,uBAAAA,4BAA2B,YAAO,cAAP,mBAAkB,MAAM;AAAA;AAQrD,MAAM,iBAAiB,CACrB,QACA,WAAA;;AAEA,oBAAW,SAAS,OAAO,UAAU,KAAK,IAAI,OAAO,YAAW,YAAO,UAAP,mBAAc;AAAA;AAQhF,eAAe,cACb,QACA,QACA,UACkB;;AAClB,MAAI,CAAC,OAAO,SAAU,QAAO;AAC7B,MAAI,OAAO,gBAAgB,OAAO,aAAa,QAAW;AACxD,UAAM,UAAS,YAAO,MAAM,CAAC,MAAd,mBAAiB;AAChC,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,QAAQC,aAAAA,sBAAsB,OAAO,QAAQ;AACnD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,OAAO,YAAYC,aAAAA,wBAAwB,EAAE,OAAA,CAAQ,CAAC;AAAA,IACxE,SAAS,OAAO;AACd,UAAI,CAACC,aAAAA,sBAAsB,KAAK,EAAG,OAAM;AAIzC,YAAM,aAAa,OAAO,UAAU;AACpC,YAAM,OAAO,WAAW,MAAM;AAC9B,UAAI,SAAS,QAAQ,KAAK,aAAc,QAAO;AAC/C,aAAO,cAAc,QAAQ,MAAM,QAAQ;AAAA,IAC7C;AACA,UAAM,OAAOC,aAAAA,sBAAsB,SAAS,MAAM;AAClD,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,QAAQ,IAAI;AAClB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,QAAM,WAAWC,cAAAA,qBAAqB,QAAQ,QAAQ;AACtD,MAAI,aAAa,KAAM,QAAO;AAC9B,QAAM,OAAO,OAAOC,kBAAAA,8BAA8B,OAAO,CAAC,QAAQ,CAAC;AACnE,SAAO;AACT;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;AACxC,QAAM,SAAS,WAAW,MAAM;AAChC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,cAAc,eAAe,QAAQ,MAAM;AAAA,IAC3C;AAAA,IACA,WAAU,iCAAQ,aAAY;AAAA,EAAA,CAC/B;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AASO,SAAS,yBAAyB,QAAiC;;AACxE,QAAM,QAAQ,6BAA6B,MAAM;AACjD,MAAI,UAAU,KAAM,QAAO;AAC3B,WAAO,gBAAW,KAAK,MAAhB,mBAAmB,aAAY;AACxC;AAWA,eAAsB,8BAA8B;AAAA,EAClD;AAAA,EACA;AACF,GAGqB;AACnB,QAAM,SAAS,WAAA;AACf,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,WAAW,MAAM;AAChC,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,cAAc,QAAQ,QAAQ,QAAQ;AAC/C;AASO,SAAS,6BAA6B,OAAyB;AACpE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,aAAa,OAAQ,QAAO;AACjF,QAAM,EAAE,YAAY;AACpB,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,WACX,QAAQ,UAAU;AAEtB;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAOmD;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,SAAS,WAAW,MAAM;AAChC,QACE,WAAW,QACX,CAAC,0BAA0B,EAAE,cAAc,eAAe,QAAQ,MAAM,GAAG,UAAU,OAAA,CAAQ,GAC7F;AACA,aAAO;AAAA,IACT;AACA,QAAI,CAAE,MAAM,cAAc,QAAQ,QAAQ,QAAQ,EAAI,QAAO;AAAA,EAC/D;AACA,SAAO;AACT;;;;;;;;;;"}

package/dist/agent-runtime/src/edit-command.d.ts

@@ -34,7 +34,7 @@ import { type DeepAgentMessageWindow } from './message-window';
  * The message-metadata preparation surface — `prepareMessageMetadata`,
  * `discardPreparedMessageMetadata`, `sendPreparedEdit` and `sendCommand`'s
  * `preparedMetadata` option — is what the monorepo patches into
- * `@assistant-ui/react-statewire@0.31.0` (`patches/`). It is declared
+ * `@assistant-ui/react-statewire@0.33.0` (`patches/`). It is declared
  * structurally here rather than as `StatewireThread.Extras[...]` so that the
  * published sources also compile against the unpatched upstream typings, where
  * those members are absent and the edit path's optional calls never run.

package/dist/agent-runtime/src/edit-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"edit-command.js","sources":["../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { DEEP_AGENT_INTEREST_PROTOCOL } from './generated/runconfig-contract';\nimport {\n  buildHistoryPageCommand,\n  deepAgentHistoryStore,\n  isHistoryPageUnserved,\n  readHistoryPageResult,\n} from './history-store';\nimport {\n  type DeepAgentMessageWindow,\n  pageInterestRequests,\n  readDeepAgentMessageWindow,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * The raw list is the loaded interest window, so the first loaded message's\n * parent is not in it while older messages exist — an edit there must not\n * anchor on `null` (the root, rejected `wrong-anchor`); a message below the\n * window has no parent on this client at all. {@link resolveDeepAgentEditCommand}\n * states older page interests until the parent is loaded.\n */\n\n/**\n * Host metadata frozen at submission, settling once the async capture does.\n * The message-metadata preparation surface — `prepareMessageMetadata`,\n * `discardPreparedMessageMetadata`, `sendPreparedEdit` and `sendCommand`'s\n * `preparedMetadata` option — is what the monorepo patches into\n * `@assistant-ui/react-statewire@0.31.0` (`patches/`). It is declared\n * structurally here rather than as `StatewireThread.Extras[...]` so that the\n * published sources also compile against the unpatched upstream typings, where\n * those members are absent and the edit path's optional calls never run.\n */\nexport type DeepAgentPreparedMessageMetadata = Promise<Record<string, unknown> | undefined>;\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: { preparedMetadata?: DeepAgentPreparedMessageMetadata | undefined },\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: (() => DeepAgentPreparedMessageMetadata) | undefined;\n  discardPreparedMessageMetadata?:\n    | ((prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  sendPreparedEdit?:\n    | ((sourceId: string, prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  isPreparingSubmission?: boolean;\n  /** The composed thread state — its `messages` are the raw wire messages of the loaded window. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The mounted documents (the interest window), absent on a wire without documents. */\n  documents?: StatewireThread.Extras['documents'];\n  invoke?: StatewireThread.Extras['invoke'];\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n  /** The live connection: a `history/page` refusal holds for it alone. */\n  connection?: unknown;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below the loaded window, or a surface\n * whose state this module cannot read — or when it is the first loaded\n * message while older ones exist (`hasOlder`), so the caller can load more or\n * fall back to the library's own path instead of asserting a wrong anchor.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  hasOlder = false,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  hasOlder?: boolean;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) return hasOlder ? undefined : null;\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId`'s parent lies below the loaded window: the message is\n * absent from the raw list, or its first entry, while older messages exist.\n * The caller loads older history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessageWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || !window.hasOlder) return false;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  return index <= 0;\n}\n\nconst readWindow = (extras: DeepAgentStatewireExtras) =>\n  readDeepAgentMessageWindow(extras.documents?.list());\n\n/**\n * The raw messages an anchor is read from: the composed state's, or — once\n * the window joins older history from the conversation's store — the\n * window's own, which a page just loaded reaches before the converter has\n * re-run.\n */\nconst anchorMessages = (\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow | null\n): readonly { id?: unknown }[] | undefined =>\n  window !== null && (window.stored ?? 0) > 0 ? window.messages : extras.state?.messages;\n\n/**\n * Load one more page of older history below `window`: a `history/page` read\n * into the conversation's store where the host serves it\n * (`window.historyPaged`), else one more page interest. `false` when there is nothing older or\n * no page can be asked for.\n */\nasync function loadOlderPage(\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow,\n  pageSize: number | undefined\n): Promise<boolean> {\n  if (!window.hasOlder) return false;\n  if (window.historyPaged && window.threadId !== undefined) {\n    const before = window.chain[0]?.id;\n    if (before === undefined) return false;\n    const store = deepAgentHistoryStore(window.threadId);\n    let payload: unknown;\n    try {\n      payload = await extras.sendCommand(buildHistoryPageCommand({ before }));\n    } catch (error) {\n      if (!isHistoryPageUnserved(error)) throw error;\n      // A host that advertises the command but lacks it (`unknown-command`):\n      // this connection pages by interest from here on, the same fallback the\n      // window sync takes. Any other refusal is this page's failure.\n      store.markUnserved(extras.connection);\n      const live = readWindow(extras);\n      if (live === null || live.historyPaged) return false;\n      return loadOlderPage(extras, live, pageSize);\n    }\n    const page = readHistoryPageResult(payload, before);\n    if (page === null) return false;\n    store.addPage(page);\n    return true;\n  }\n  if (!extras.invoke) return false;\n  const requests = pageInterestRequests(window, pageSize);\n  if (requests === null) return false;\n  await extras.invoke(DEEP_AGENT_INTEREST_PROTOCOL, 'set', [requests]);\n  return true;\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const window = readWindow(extras);\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: anchorMessages(extras, window),\n    sourceId,\n    hasOlder: window?.hasOlder ?? false,\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Whether a windowed statewire thread has older history than it has loaded:\n * `null` while that is not known yet (the head interest has not resolved; a\n * remembered transcript can show from cache before it does), and `false` for\n * a thread that is not a statewire thread, so a reader looking for an older\n * message waits for the window, or stops.\n */\nexport function deepAgentHistoryHasOlder(extras: unknown): boolean | null {\n  const typed = readDeepAgentStatewireExtras(extras);\n  if (typed === null) return false;\n  return readWindow(typed)?.hasOlder ?? null;\n}\n\n/**\n * State one more page of older history for a windowed thread: the next page\n * past the loaded window's oldest message. Resolves `true` once the host has\n * mounted it (it answers the statement after mounting), `false` when there is\n * nothing older, the thread is not a windowed statewire thread, or no page can\n * be stated. For a reader that needs a message below the loaded window — a\n * search result revealing an older turn of a long conversation — and pages\n * until it renders.\n */\nexport async function loadOlderDeepAgentHistoryPage({\n  readExtras,\n  pageSize,\n}: {\n  readExtras: () => DeepAgentStatewireExtras | null;\n  pageSize?: number;\n}): Promise<boolean> {\n  const extras = readExtras();\n  if (!extras) return false;\n  const window = readWindow(extras);\n  if (window === null) return false;\n  return loadOlderPage(extras, window, pageSize);\n}\n\n/**\n * Whether a {@link loadOlderDeepAgentHistoryPage} failure is the connection\n * dropping under the page (statewire settles an ephemeral statement in flight\n * at the drop `session-lost`), not the host refusing it. The re-attach carries\n * the view loaded so far, so a reader looking for a message pages again once\n * reconnected instead of deciding the history is exhausted.\n */\nexport function isHistoryPageLostToReconnect(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null || !('failure' in error)) return false;\n  const { failure } = error;\n  return (\n    typeof failure === 'object' &&\n    failure !== null &&\n    'cause' in failure &&\n    failure.cause === 'session-lost'\n  );\n}\n\n/**\n * Pages of older history stated while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, stating older page interests one at\n * a time when the message's parent lies below the loaded window. Every page\n * is read back from the live documents (`readExtras` — the host mounts them\n * before it answers the statement), so the anchor is always the host's own\n * parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  pageSize,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the widened window. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  pageSize?: number;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const window = readWindow(extras);\n    if (\n      window === null ||\n      !isSourceBelowLoadedWindow({ wireMessages: anchorMessages(extras, window), sourceId, window })\n    ) {\n      return null;\n    }\n    if (!(await loadOlderPage(extras, window, pageSize))) return null;\n  }\n  return null;\n}\n"],"names":[],"mappings":";;;;AA4FO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAAC,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAWO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,EAAG,QAAO,WAAW,SAAY;AAC/C,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,CAAC,OAAO,SAAU,QAAO;AACjE,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,SAAO,SAAS;AAClB;AAEA,MAAM,aAAa,CAAC,WAAA;;AAClB,qCAA2B,YAAO,cAAP,mBAAkB,MAAM;AAAA;AAQrD,MAAM,iBAAiB,CACrB,QACA,WAAA;;AAEA,oBAAW,SAAS,OAAO,UAAU,KAAK,IAAI,OAAO,YAAW,YAAO,UAAP,mBAAc;AAAA;AAQhF,eAAe,cACb,QACA,QACA,UACkB;;AAClB,MAAI,CAAC,OAAO,SAAU,QAAO;AAC7B,MAAI,OAAO,gBAAgB,OAAO,aAAa,QAAW;AACxD,UAAM,UAAS,YAAO,MAAM,CAAC,MAAd,mBAAiB;AAChC,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,QAAQ,sBAAsB,OAAO,QAAQ;AACnD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,OAAO,YAAY,wBAAwB,EAAE,OAAA,CAAQ,CAAC;AAAA,IACxE,SAAS,OAAO;AACd,UAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AAIzC,YAAM,aAAa,OAAO,UAAU;AACpC,YAAM,OAAO,WAAW,MAAM;AAC9B,UAAI,SAAS,QAAQ,KAAK,aAAc,QAAO;AAC/C,aAAO,cAAc,QAAQ,MAAM,QAAQ;AAAA,IAC7C;AACA,UAAM,OAAO,sBAAsB,SAAS,MAAM;AAClD,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,QAAQ,IAAI;AAClB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,QAAM,WAAW,qBAAqB,QAAQ,QAAQ;AACtD,MAAI,aAAa,KAAM,QAAO;AAC9B,QAAM,OAAO,OAAO,8BAA8B,OAAO,CAAC,QAAQ,CAAC;AACnE,SAAO;AACT;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;AACxC,QAAM,SAAS,WAAW,MAAM;AAChC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,cAAc,eAAe,QAAQ,MAAM;AAAA,IAC3C;AAAA,IACA,WAAU,iCAAQ,aAAY;AAAA,EAAA,CAC/B;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AASO,SAAS,yBAAyB,QAAiC;;AACxE,QAAM,QAAQ,6BAA6B,MAAM;AACjD,MAAI,UAAU,KAAM,QAAO;AAC3B,WAAO,gBAAW,KAAK,MAAhB,mBAAmB,aAAY;AACxC;AAWA,eAAsB,8BAA8B;AAAA,EAClD;AAAA,EACA;AACF,GAGqB;AACnB,QAAM,SAAS,WAAA;AACf,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,WAAW,MAAM;AAChC,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,cAAc,QAAQ,QAAQ,QAAQ;AAC/C;AASO,SAAS,6BAA6B,OAAyB;AACpE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,aAAa,OAAQ,QAAO;AACjF,QAAM,EAAE,YAAY;AACpB,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,WACX,QAAQ,UAAU;AAEtB;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAOmD;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,SAAS,WAAW,MAAM;AAChC,QACE,WAAW,QACX,CAAC,0BAA0B,EAAE,cAAc,eAAe,QAAQ,MAAM,GAAG,UAAU,OAAA,CAAQ,GAC7F;AACA,aAAO;AAAA,IACT;AACA,QAAI,CAAE,MAAM,cAAc,QAAQ,QAAQ,QAAQ,EAAI,QAAO;AAAA,EAC/D;AACA,SAAO;AACT;"}
+{"version":3,"file":"edit-command.js","sources":["../../../../agent-runtime/src/edit-command.ts"],"sourcesContent":["import type { StatewireThread } from '@assistant-ui/react-statewire';\nimport { DEEP_AGENT_INTEREST_PROTOCOL } from './generated/runconfig-contract';\nimport {\n  buildHistoryPageCommand,\n  deepAgentHistoryStore,\n  isHistoryPageUnserved,\n  readHistoryPageResult,\n} from './history-store';\nimport {\n  type DeepAgentMessageWindow,\n  pageInterestRequests,\n  readDeepAgentMessageWindow,\n} from './message-window';\nimport { hasStatewireThreadExtras } from './thread-extras';\n\n/**\n * Wire-accurate `run/edit` construction for deep-agent retry/edit, shared by\n * every surface that resubmits a user message.\n *\n * assistant-ui builds the command's `runAnchorMessageId` from the CONVERTED\n * thread messages (`resolveEditCommand`: `messages[index - 1].id`), but the\n * deep-agent host validates that anchor against the edited message's parent in\n * its RAW message list (`harness_sdk.linear_thread`: the entry before it in\n * `state[\"messages\"]`). Those two lists do not line up:\n *\n * - the converter chunks an assistant turn and its tool messages into ONE\n *   thread message carrying only the FIRST wire id, so the anchor names the\n *   head of the previous turn instead of its last tool message;\n * - `sanitizeLangChainMessages` drops hidden-from-frontend and unconvertible\n *   entries, so a dropped tail message is invisible to the anchor too.\n *\n * Either way the host rejects the command with `wrong-anchor`\n * (`runAnchorMessageId … is not the source's parent`) AFTER the composer's\n * synchronous `send()` returned, so the retry/edit silently does nothing.\n *\n * Building the command here off the replicated raw state makes the anchor the\n * same value the host computes.\n *\n * The raw list is the loaded interest window, so the first loaded message's\n * parent is not in it while older messages exist — an edit there must not\n * anchor on `null` (the root, rejected `wrong-anchor`); a message below the\n * window has no parent on this client at all. {@link resolveDeepAgentEditCommand}\n * states older page interests until the parent is loaded.\n */\n\n/**\n * Host metadata frozen at submission, settling once the async capture does.\n * The message-metadata preparation surface — `prepareMessageMetadata`,\n * `discardPreparedMessageMetadata`, `sendPreparedEdit` and `sendCommand`'s\n * `preparedMetadata` option — is what the monorepo patches into\n * `@assistant-ui/react-statewire@0.33.0` (`patches/`). It is declared\n * structurally here rather than as `StatewireThread.Extras[...]` so that the\n * published sources also compile against the unpatched upstream typings, where\n * those members are absent and the edit path's optional calls never run.\n */\nexport type DeepAgentPreparedMessageMetadata = Promise<Record<string, unknown> | undefined>;\n\n/** The pieces of the statewire thread extras the edit path reads. */\nexport interface DeepAgentStatewireExtras {\n  /** The library's dispatch; it resolves with the host's reply to the command. */\n  sendCommand: (\n    command: StatewireThread.Command,\n    options?: { preparedMetadata?: DeepAgentPreparedMessageMetadata | undefined },\n  ) => Promise<unknown> | void;\n  /** Optional on older hosts; capture before loading an edit's history anchor. */\n  prepareMessageMetadata?: (() => DeepAgentPreparedMessageMetadata) | undefined;\n  discardPreparedMessageMetadata?:\n    | ((prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  sendPreparedEdit?:\n    | ((sourceId: string, prepared: DeepAgentPreparedMessageMetadata) => void)\n    | undefined;\n  isPreparingSubmission?: boolean;\n  /** The composed thread state — its `messages` are the raw wire messages of the loaded window. */\n  state: { messages?: readonly { id?: unknown }[] } | null;\n  /** The mounted documents (the interest window), absent on a wire without documents. */\n  documents?: StatewireThread.Extras['documents'];\n  invoke?: StatewireThread.Extras['invoke'];\n  /** The live run, when one is in flight; `epoch` advances on each dispatch. */\n  runs: { runId?: string | null; epoch?: number };\n  /** The host's replicated run status; absent on a surface that predates it. */\n  status?: StatewireThread.ThreadStatus;\n  /** The live connection: a `history/page` refusal holds for it alone. */\n  connection?: unknown;\n}\n\n/**\n * The statewire extras of the nearest aui thread, or `null` when the thread is\n * not a statewire thread (e.g. a read-only subagent transcript runtime).\n * Gated on {@link hasStatewireThreadExtras} for the same reason the approval\n * card is: the library's own hooks throw on a non-statewire thread.\n */\nexport function readDeepAgentStatewireExtras(extras: unknown): DeepAgentStatewireExtras | null {\n  if (!hasStatewireThreadExtras(extras)) return null;\n  return extras as DeepAgentStatewireExtras;\n}\n\n/**\n * The host's parent of `sourceId`: the raw wire message directly before it\n * (`null` when it is the first of the whole transcript). Returns `undefined`\n * when `sourceId` is not in the raw list at all — an optimistic bubble the\n * host has not settled yet, a message below the loaded window, or a surface\n * whose state this module cannot read — or when it is the first loaded\n * message while older ones exist (`hasOlder`), so the caller can load more or\n * fall back to the library's own path instead of asserting a wrong anchor.\n */\nexport function resolveWireAnchorMessageId({\n  wireMessages,\n  sourceId,\n  hasOlder = false,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  hasOlder?: boolean;\n}): string | null | undefined {\n  if (!wireMessages) return undefined;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  if (index < 0) return undefined;\n  if (index === 0) return hasOlder ? undefined : null;\n  const parentId = wireMessages[index - 1]?.id;\n  return typeof parentId === 'string' ? parentId : undefined;\n}\n\n/**\n * Whether `sourceId`'s parent lies below the loaded window: the message is\n * absent from the raw list, or its first entry, while older messages exist.\n * The caller loads older history before an edit can be anchored.\n */\nexport function isSourceBelowLoadedWindow({\n  wireMessages,\n  sourceId,\n  window,\n}: {\n  wireMessages: readonly { id?: unknown }[] | undefined;\n  sourceId: string;\n  window: DeepAgentMessageWindow | null;\n}): boolean {\n  if (!wireMessages || window === null || !window.hasOlder) return false;\n  const index = wireMessages.findIndex((message) => message?.id === sourceId);\n  return index <= 0;\n}\n\nconst readWindow = (extras: DeepAgentStatewireExtras) =>\n  readDeepAgentMessageWindow(extras.documents?.list());\n\n/**\n * The raw messages an anchor is read from: the composed state's, or — once\n * the window joins older history from the conversation's store — the\n * window's own, which a page just loaded reaches before the converter has\n * re-run.\n */\nconst anchorMessages = (\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow | null\n): readonly { id?: unknown }[] | undefined =>\n  window !== null && (window.stored ?? 0) > 0 ? window.messages : extras.state?.messages;\n\n/**\n * Load one more page of older history below `window`: a `history/page` read\n * into the conversation's store where the host serves it\n * (`window.historyPaged`), else one more page interest. `false` when there is nothing older or\n * no page can be asked for.\n */\nasync function loadOlderPage(\n  extras: DeepAgentStatewireExtras,\n  window: DeepAgentMessageWindow,\n  pageSize: number | undefined\n): Promise<boolean> {\n  if (!window.hasOlder) return false;\n  if (window.historyPaged && window.threadId !== undefined) {\n    const before = window.chain[0]?.id;\n    if (before === undefined) return false;\n    const store = deepAgentHistoryStore(window.threadId);\n    let payload: unknown;\n    try {\n      payload = await extras.sendCommand(buildHistoryPageCommand({ before }));\n    } catch (error) {\n      if (!isHistoryPageUnserved(error)) throw error;\n      // A host that advertises the command but lacks it (`unknown-command`):\n      // this connection pages by interest from here on, the same fallback the\n      // window sync takes. Any other refusal is this page's failure.\n      store.markUnserved(extras.connection);\n      const live = readWindow(extras);\n      if (live === null || live.historyPaged) return false;\n      return loadOlderPage(extras, live, pageSize);\n    }\n    const page = readHistoryPageResult(payload, before);\n    if (page === null) return false;\n    store.addPage(page);\n    return true;\n  }\n  if (!extras.invoke) return false;\n  const requests = pageInterestRequests(window, pageSize);\n  if (requests === null) return false;\n  await extras.invoke(DEEP_AGENT_INTEREST_PROTOCOL, 'set', [requests]);\n  return true;\n}\n\n/**\n * A fresh command / message id (uniqueness, not secrecy). `crypto.randomUUID`\n * where the host runtime has it — every browser, Bun, Node and Hermes with\n * webcrypto — and a v4-shaped fallback elsewhere, so the shared path never\n * throws on a runtime without full webcrypto.\n */\nfunction mintCommandId(): string {\n  const webcrypto = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n  if (typeof webcrypto?.randomUUID === 'function') return webcrypto.randomUUID();\n  const hex = (): string => Math.floor(Math.random() * 0x10000).toString(16).padStart(4, '0');\n  return `${hex()}${hex()}-${hex()}-4${hex().slice(1)}-${hex()}-${hex()}${hex()}${hex()}`;\n}\n\n/**\n * The `run/edit` command for resubmitting `sourceId` with `text`, anchored on\n * the host's own parent. `null` when the anchor cannot be resolved from the\n * replicated state.\n */\nexport function buildDeepAgentEditCommand({\n  extras,\n  sourceId,\n  text,\n}: {\n  extras: DeepAgentStatewireExtras;\n  sourceId: string;\n  text: string;\n}): StatewireThread.RunEditCommand | null {\n  const window = readWindow(extras);\n  const runAnchorMessageId = resolveWireAnchorMessageId({\n    wireMessages: anchorMessages(extras, window),\n    sourceId,\n    hasOlder: window?.hasOlder ?? false,\n  });\n  if (runAnchorMessageId === undefined) return null;\n  return {\n    type: 'run/edit',\n    runId: extras.runs.runId ?? mintCommandId(),\n    message: { id: mintCommandId(), role: 'user', parts: [{ type: 'text', text }] },\n    sourceId,\n    runAnchorMessageId,\n  };\n}\n\n/**\n * Whether a windowed statewire thread has older history than it has loaded:\n * `null` while that is not known yet (the head interest has not resolved; a\n * remembered transcript can show from cache before it does), and `false` for\n * a thread that is not a statewire thread, so a reader looking for an older\n * message waits for the window, or stops.\n */\nexport function deepAgentHistoryHasOlder(extras: unknown): boolean | null {\n  const typed = readDeepAgentStatewireExtras(extras);\n  if (typed === null) return false;\n  return readWindow(typed)?.hasOlder ?? null;\n}\n\n/**\n * State one more page of older history for a windowed thread: the next page\n * past the loaded window's oldest message. Resolves `true` once the host has\n * mounted it (it answers the statement after mounting), `false` when there is\n * nothing older, the thread is not a windowed statewire thread, or no page can\n * be stated. For a reader that needs a message below the loaded window — a\n * search result revealing an older turn of a long conversation — and pages\n * until it renders.\n */\nexport async function loadOlderDeepAgentHistoryPage({\n  readExtras,\n  pageSize,\n}: {\n  readExtras: () => DeepAgentStatewireExtras | null;\n  pageSize?: number;\n}): Promise<boolean> {\n  const extras = readExtras();\n  if (!extras) return false;\n  const window = readWindow(extras);\n  if (window === null) return false;\n  return loadOlderPage(extras, window, pageSize);\n}\n\n/**\n * Whether a {@link loadOlderDeepAgentHistoryPage} failure is the connection\n * dropping under the page (statewire settles an ephemeral statement in flight\n * at the drop `session-lost`), not the host refusing it. The re-attach carries\n * the view loaded so far, so a reader looking for a message pages again once\n * reconnected instead of deciding the history is exhausted.\n */\nexport function isHistoryPageLostToReconnect(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null || !('failure' in error)) return false;\n  const { failure } = error;\n  return (\n    typeof failure === 'object' &&\n    failure !== null &&\n    'cause' in failure &&\n    failure.cause === 'session-lost'\n  );\n}\n\n/**\n * Pages of older history stated while looking for an edited message's host\n * parent. Each page is up to a window's worth of messages, so an edit reaches\n * this many windows below what was loaded before it gives up.\n */\nexport const MAX_EDIT_ANCHOR_HISTORY_LOADS = 5;\n\n/**\n * The anchored `run/edit` for `sourceId`, stating older page interests one at\n * a time when the message's parent lies below the loaded window. Every page\n * is read back from the live documents (`readExtras` — the host mounts them\n * before it answers the statement), so the anchor is always the host's own\n * parent id.\n *\n * Resolves `null` — the caller's cue for the library's composer path, whose\n * failure it reports — when the thread is not a statewire thread, the host has\n * not settled the message, the history is exhausted without it, or the page\n * budget ({@link MAX_EDIT_ANCHOR_HISTORY_LOADS}) is spent. A synchronous\n * resolution never awaits: the first read either anchors at once or decides\n * that pages are needed.\n */\nexport async function resolveDeepAgentEditCommand({\n  readExtras,\n  sourceId,\n  text,\n  pageSize,\n  maxHistoryLoads = MAX_EDIT_ANCHOR_HISTORY_LOADS,\n}: {\n  /** The live thread extras — re-read per page so each anchor attempt sees the widened window. */\n  readExtras: () => DeepAgentStatewireExtras | null;\n  sourceId: string;\n  text: string;\n  pageSize?: number;\n  maxHistoryLoads?: number;\n}): Promise<StatewireThread.RunEditCommand | null> {\n  for (let page = 0; page <= maxHistoryLoads; page += 1) {\n    const extras = readExtras();\n    if (!extras) return null;\n    const command = buildDeepAgentEditCommand({ extras, sourceId, text });\n    if (command) return command;\n    if (page === maxHistoryLoads) return null;\n    const window = readWindow(extras);\n    if (\n      window === null ||\n      !isSourceBelowLoadedWindow({ wireMessages: anchorMessages(extras, window), sourceId, window })\n    ) {\n      return null;\n    }\n    if (!(await loadOlderPage(extras, window, pageSize))) return null;\n  }\n  return null;\n}\n"],"names":[],"mappings":";;;;AA4FO,SAAS,6BAA6B,QAAkD;AAC7F,MAAI,CAAC,yBAAyB,MAAM,EAAG,QAAO;AAC9C,SAAO;AACT;AAWO,SAAS,2BAA2B;AAAA,EACzC;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAI8B;;AAC5B,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,MAAI,QAAQ,EAAG,QAAO;AACtB,MAAI,UAAU,EAAG,QAAO,WAAW,SAAY;AAC/C,QAAM,YAAW,kBAAa,QAAQ,CAAC,MAAtB,mBAAyB;AAC1C,SAAO,OAAO,aAAa,WAAW,WAAW;AACnD;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAIY;AACV,MAAI,CAAC,gBAAgB,WAAW,QAAQ,CAAC,OAAO,SAAU,QAAO;AACjE,QAAM,QAAQ,aAAa,UAAU,CAAC,aAAY,mCAAS,QAAO,QAAQ;AAC1E,SAAO,SAAS;AAClB;AAEA,MAAM,aAAa,CAAC,WAAA;;AAClB,qCAA2B,YAAO,cAAP,mBAAkB,MAAM;AAAA;AAQrD,MAAM,iBAAiB,CACrB,QACA,WAAA;;AAEA,oBAAW,SAAS,OAAO,UAAU,KAAK,IAAI,OAAO,YAAW,YAAO,UAAP,mBAAc;AAAA;AAQhF,eAAe,cACb,QACA,QACA,UACkB;;AAClB,MAAI,CAAC,OAAO,SAAU,QAAO;AAC7B,MAAI,OAAO,gBAAgB,OAAO,aAAa,QAAW;AACxD,UAAM,UAAS,YAAO,MAAM,CAAC,MAAd,mBAAiB;AAChC,QAAI,WAAW,OAAW,QAAO;AACjC,UAAM,QAAQ,sBAAsB,OAAO,QAAQ;AACnD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,OAAO,YAAY,wBAAwB,EAAE,OAAA,CAAQ,CAAC;AAAA,IACxE,SAAS,OAAO;AACd,UAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AAIzC,YAAM,aAAa,OAAO,UAAU;AACpC,YAAM,OAAO,WAAW,MAAM;AAC9B,UAAI,SAAS,QAAQ,KAAK,aAAc,QAAO;AAC/C,aAAO,cAAc,QAAQ,MAAM,QAAQ;AAAA,IAC7C;AACA,UAAM,OAAO,sBAAsB,SAAS,MAAM;AAClD,QAAI,SAAS,KAAM,QAAO;AAC1B,UAAM,QAAQ,IAAI;AAClB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,QAAM,WAAW,qBAAqB,QAAQ,QAAQ;AACtD,MAAI,aAAa,KAAM,QAAO;AAC9B,QAAM,OAAO,OAAO,8BAA8B,OAAO,CAAC,QAAQ,CAAC;AACnE,SAAO;AACT;AAQA,SAAS,gBAAwB;AAC/B,QAAM,YAAa,WAA0D;AAC7E,MAAI,QAAO,uCAAW,gBAAe,WAAY,QAAO,UAAU,WAAA;AAClE,QAAM,MAAM,MAAc,KAAK,MAAM,KAAK,OAAA,IAAW,KAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC1F,SAAO,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK,IAAI,IAAA,CAAK,KAAK,MAAM,MAAM,CAAC,CAAC,IAAI,IAAA,CAAK,IAAI,KAAK,GAAG,IAAA,CAAK,GAAG,IAAA,CAAK;AACvF;AAOO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,GAI0C;AACxC,QAAM,SAAS,WAAW,MAAM;AAChC,QAAM,qBAAqB,2BAA2B;AAAA,IACpD,cAAc,eAAe,QAAQ,MAAM;AAAA,IAC3C;AAAA,IACA,WAAU,iCAAQ,aAAY;AAAA,EAAA,CAC/B;AACD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,OAAO,KAAK,SAAS,cAAA;AAAA,IAC5B,SAAS,EAAE,IAAI,cAAA,GAAiB,MAAM,QAAQ,OAAO,CAAC,EAAE,MAAM,QAAQ,KAAA,CAAM,EAAA;AAAA,IAC5E;AAAA,IACA;AAAA,EAAA;AAEJ;AASO,SAAS,yBAAyB,QAAiC;;AACxE,QAAM,QAAQ,6BAA6B,MAAM;AACjD,MAAI,UAAU,KAAM,QAAO;AAC3B,WAAO,gBAAW,KAAK,MAAhB,mBAAmB,aAAY;AACxC;AAWA,eAAsB,8BAA8B;AAAA,EAClD;AAAA,EACA;AACF,GAGqB;AACnB,QAAM,SAAS,WAAA;AACf,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS,WAAW,MAAM;AAChC,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO,cAAc,QAAQ,QAAQ,QAAQ;AAC/C;AASO,SAAS,6BAA6B,OAAyB;AACpE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,aAAa,OAAQ,QAAO;AACjF,QAAM,EAAE,YAAY;AACpB,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,WACX,QAAQ,UAAU;AAEtB;AAOO,MAAM,gCAAgC;AAgB7C,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB;AACpB,GAOmD;AACjD,WAAS,OAAO,GAAG,QAAQ,iBAAiB,QAAQ,GAAG;AACrD,UAAM,SAAS,WAAA;AACf,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,UAAU,0BAA0B,EAAE,QAAQ,UAAU,MAAM;AACpE,QAAI,QAAS,QAAO;AACpB,QAAI,SAAS,gBAAiB,QAAO;AACrC,UAAM,SAAS,WAAW,MAAM;AAChC,QACE,WAAW,QACX,CAAC,0BAA0B,EAAE,cAAc,eAAe,QAAQ,MAAM,GAAG,UAAU,OAAA,CAAQ,GAC7F;AACA,aAAO;AAAA,IACT;AACA,QAAI,CAAE,MAAM,cAAc,QAAQ,QAAQ,QAAQ,EAAI,QAAO;AAAA,EAC/D;AACA,SAAO;AACT;"}

package/dist/agent-runtime/src/errors.cjs

@@ -45,6 +45,7 @@ const VOICE_REJECTION_REASONS = /* @__PURE__ */ new Set([
   "voice-stale-session",
   "voice-unavailable",
   "voice-not-enabled",
+  "voice-rate-limited",
   "voice-model-transport",
   "text-too-long"
 ]);

package/dist/agent-runtime/src/errors.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"errors.cjs","sources":["../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * The `detail.code` agora answers when a send names another channel of the\n * collab agent a session started on (`collab_agent_bridge.py`): a session\n * keeps its channel — the SDK app's Agent / Ask mode — for its lifetime, and\n * the way to the other mode is a new session. Wire-frozen.\n */\nexport const COLLAB_AGENT_CHANNEL_SESSION_MISMATCH = 'collab_agent_channel_session_mismatch';\n\n/**\n * A structured refusal the host recorded as the run error when the run could\n * not START: the run executor raised the gate's `{status, detail: {code,\n * message}}` envelope (agora's `_status_reject`) before it accepted the\n * dispatched input, so the message went back to its lane and the thread rests\n * `error` with it still queued. Unlike a retryable refusal\n * ({@link readRetryableRunRefusal}) nothing will dispatch it later: resending\n * the same input is refused the same way, so the server's message is the only\n * explanation the person gets.\n */\nexport interface RunStartRefusal {\n  /** The structured `detail.code` (`collab_agent_channel_session_mismatch`, …). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n  /** The HTTP-style status the gate raised with, when recorded. */\n  status: number | null;\n}\n\n/**\n * The non-retryable structured refusal off a replicated run error\n * (`runs.error`), or `null` — for a run that failed while it was running (a\n * plain `{message}`), a retryable refusal, or no error at all.\n */\nexport function readRunStartRefusal(error: unknown): RunStartRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  const { detail, status } = error as { detail?: unknown; status?: unknown };\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable === true || typeof code !== 'string' || code.length === 0) return null;\n  return {\n    code,\n    message: typeof message === 'string' && message.length > 0 ? message : null,\n    status: typeof status === 'number' ? status : null,\n  };\n}\n\n/**\n * The `payload.reason` codes agora's voice manager rejects `voice/*` commands\n * with (harness-sdk's `_reject` and `voice_host.py`). Wire-frozen.\n */\nconst VOICE_REJECTION_REASONS: ReadonlySet<string> = new Set([\n  'no-voice',\n  'not-voice-owner',\n  'voice-active',\n  'voice-stale-session',\n  'voice-unavailable',\n  'voice-not-enabled',\n  'voice-model-transport',\n  'text-too-long',\n]);\n\n/**\n * Whether a rejected command was a `voice/*` command, by its voice manager\n * `payload.reason`. The voice controller owns those outcomes (it settles to\n * idle, falls back to a typed send, or shows its own notice), so a chat's\n * \"Message was not sent\" banner must not repeat them: no message was sent.\n */\nexport function isVoiceCommandRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  const reason = (failure.payload as { reason?: unknown } | null | undefined)?.reason;\n  return typeof reason === 'string' && VOICE_REJECTION_REASONS.has(reason);\n}\n\n/** The structured `detail.code` of a rejected command, or `null`. */\nexport function statewireRejectionCode(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const code = (detail as { code?: unknown }).code;\n  return typeof code === 'string' && code.length > 0 ? code : null;\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * The `detail.code` agora answers for a write to an archived (trashed)\n * conversation (`host_rejects._conversation_archived_reject`, a 409): it\n * takes no new turns, config writes or approval answers until it is\n * restored, and stopping still works. Wire-frozen.\n */\nexport const CONVERSATION_ARCHIVED = 'conversation_archived';\n\n/** What a person is told when that refusal comes back (the server says the same). */\nexport const CONVERSATION_ARCHIVED_MESSAGE =\n  'This conversation is archived. Restore it to continue.';\n\n/**\n * Whether a rejected command was refused because the conversation is archived\n * ({@link CONVERSATION_ARCHIVED}). Not retriable: nothing changes until a\n * restore, so callers show {@link CONVERSATION_ARCHIVED_MESSAGE} rather than a\n * \"try again\".\n */\nexport function isConversationArchivedRejection(error: unknown): boolean {\n  return statewireRejectionCode(error) === CONVERSATION_ARCHIVED;\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":";;AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;;AAC7E,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAQO,MAAM,wCAAwC;AA0B9C,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO;AAAA,IACL;AAAA,IACA,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAAA,IACvE,QAAQ,OAAO,WAAW,WAAW,SAAS;AAAA,EAAA;AAElD;AAMA,MAAM,8CAAmD,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,wBAAwB,OAAyB;;AAC/D,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AACzC,QAAM,UAAU,aAAQ,YAAR,mBAA6D;AAC7E,SAAO,OAAO,WAAW,YAAY,wBAAwB,IAAI,MAAM;AACzE;AAGO,SAAS,uBAAuB,OAA+B;;AACpE,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,YAAY,KAAK,SAAS,IAAI,OAAO;AAC9D;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,MAAM,wBAAwB;AAG9B,MAAM,gCACX;AAQK,SAAS,gCAAgC,OAAyB;AACvE,SAAO,uBAAuB,KAAK,MAAM;AAC3C;AAQO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;;AAClE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;;AACvE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"errors.cjs","sources":["../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * The `detail.code` agora answers when a send names another channel of the\n * collab agent a session started on (`collab_agent_bridge.py`): a session\n * keeps its channel — the SDK app's Agent / Ask mode — for its lifetime, and\n * the way to the other mode is a new session. Wire-frozen.\n */\nexport const COLLAB_AGENT_CHANNEL_SESSION_MISMATCH = 'collab_agent_channel_session_mismatch';\n\n/**\n * A structured refusal the host recorded as the run error when the run could\n * not START: the run executor raised the gate's `{status, detail: {code,\n * message}}` envelope (agora's `_status_reject`) before it accepted the\n * dispatched input, so the message went back to its lane and the thread rests\n * `error` with it still queued. Unlike a retryable refusal\n * ({@link readRetryableRunRefusal}) nothing will dispatch it later: resending\n * the same input is refused the same way, so the server's message is the only\n * explanation the person gets.\n */\nexport interface RunStartRefusal {\n  /** The structured `detail.code` (`collab_agent_channel_session_mismatch`, …). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n  /** The HTTP-style status the gate raised with, when recorded. */\n  status: number | null;\n}\n\n/**\n * The non-retryable structured refusal off a replicated run error\n * (`runs.error`), or `null` — for a run that failed while it was running (a\n * plain `{message}`), a retryable refusal, or no error at all.\n */\nexport function readRunStartRefusal(error: unknown): RunStartRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  const { detail, status } = error as { detail?: unknown; status?: unknown };\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable === true || typeof code !== 'string' || code.length === 0) return null;\n  return {\n    code,\n    message: typeof message === 'string' && message.length > 0 ? message : null,\n    status: typeof status === 'number' ? status : null,\n  };\n}\n\n/**\n * The `payload.reason` codes agora's voice manager rejects `voice/*` commands\n * with (harness-sdk's `_reject` and `voice_host.py`). Wire-frozen.\n */\nconst VOICE_REJECTION_REASONS: ReadonlySet<string> = new Set([\n  'no-voice',\n  'not-voice-owner',\n  'voice-active',\n  'voice-stale-session',\n  'voice-unavailable',\n  'voice-not-enabled',\n  'voice-rate-limited',\n  'voice-model-transport',\n  'text-too-long',\n]);\n\n/**\n * Whether a rejected command was a `voice/*` command, by its voice manager\n * `payload.reason`. The voice controller owns those outcomes (it settles to\n * idle, falls back to a typed send, or shows its own notice), so a chat's\n * \"Message was not sent\" banner must not repeat them: no message was sent.\n */\nexport function isVoiceCommandRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  const reason = (failure.payload as { reason?: unknown } | null | undefined)?.reason;\n  return typeof reason === 'string' && VOICE_REJECTION_REASONS.has(reason);\n}\n\n/** The structured `detail.code` of a rejected command, or `null`. */\nexport function statewireRejectionCode(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const code = (detail as { code?: unknown }).code;\n  return typeof code === 'string' && code.length > 0 ? code : null;\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * The `detail.code` agora answers for a write to an archived (trashed)\n * conversation (`host_rejects._conversation_archived_reject`, a 409): it\n * takes no new turns, config writes or approval answers until it is\n * restored, and stopping still works. Wire-frozen.\n */\nexport const CONVERSATION_ARCHIVED = 'conversation_archived';\n\n/** What a person is told when that refusal comes back (the server says the same). */\nexport const CONVERSATION_ARCHIVED_MESSAGE =\n  'This conversation is archived. Restore it to continue.';\n\n/**\n * Whether a rejected command was refused because the conversation is archived\n * ({@link CONVERSATION_ARCHIVED}). Not retriable: nothing changes until a\n * restore, so callers show {@link CONVERSATION_ARCHIVED_MESSAGE} rather than a\n * \"try again\".\n */\nexport function isConversationArchivedRejection(error: unknown): boolean {\n  return statewireRejectionCode(error) === CONVERSATION_ARCHIVED;\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":";;AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;;AAC7E,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAQO,MAAM,wCAAwC;AA0B9C,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO;AAAA,IACL;AAAA,IACA,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAAA,IACvE,QAAQ,OAAO,WAAW,WAAW,SAAS;AAAA,EAAA;AAElD;AAMA,MAAM,8CAAmD,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,wBAAwB,OAAyB;;AAC/D,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AACzC,QAAM,UAAU,aAAQ,YAAR,mBAA6D;AAC7E,SAAO,OAAO,WAAW,YAAY,wBAAwB,IAAI,MAAM;AACzE;AAGO,SAAS,uBAAuB,OAA+B;;AACpE,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,YAAY,KAAK,SAAS,IAAI,OAAO;AAC9D;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,MAAM,wBAAwB;AAG9B,MAAM,gCACX;AAQK,SAAS,gCAAgC,OAAyB;AACvE,SAAO,uBAAuB,KAAK,MAAM;AAC3C;AAQO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;;AAClE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;;AACvE,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;;;;;;;;;;;;;;;;;"}

package/dist/agent-runtime/src/errors.js

@@ -43,6 +43,7 @@ const VOICE_REJECTION_REASONS = /* @__PURE__ */ new Set([
   "voice-stale-session",
   "voice-unavailable",
   "voice-not-enabled",
+  "voice-rate-limited",
   "voice-model-transport",
   "text-too-long"
 ]);

package/dist/agent-runtime/src/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sources":["../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * The `detail.code` agora answers when a send names another channel of the\n * collab agent a session started on (`collab_agent_bridge.py`): a session\n * keeps its channel — the SDK app's Agent / Ask mode — for its lifetime, and\n * the way to the other mode is a new session. Wire-frozen.\n */\nexport const COLLAB_AGENT_CHANNEL_SESSION_MISMATCH = 'collab_agent_channel_session_mismatch';\n\n/**\n * A structured refusal the host recorded as the run error when the run could\n * not START: the run executor raised the gate's `{status, detail: {code,\n * message}}` envelope (agora's `_status_reject`) before it accepted the\n * dispatched input, so the message went back to its lane and the thread rests\n * `error` with it still queued. Unlike a retryable refusal\n * ({@link readRetryableRunRefusal}) nothing will dispatch it later: resending\n * the same input is refused the same way, so the server's message is the only\n * explanation the person gets.\n */\nexport interface RunStartRefusal {\n  /** The structured `detail.code` (`collab_agent_channel_session_mismatch`, …). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n  /** The HTTP-style status the gate raised with, when recorded. */\n  status: number | null;\n}\n\n/**\n * The non-retryable structured refusal off a replicated run error\n * (`runs.error`), or `null` — for a run that failed while it was running (a\n * plain `{message}`), a retryable refusal, or no error at all.\n */\nexport function readRunStartRefusal(error: unknown): RunStartRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  const { detail, status } = error as { detail?: unknown; status?: unknown };\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable === true || typeof code !== 'string' || code.length === 0) return null;\n  return {\n    code,\n    message: typeof message === 'string' && message.length > 0 ? message : null,\n    status: typeof status === 'number' ? status : null,\n  };\n}\n\n/**\n * The `payload.reason` codes agora's voice manager rejects `voice/*` commands\n * with (harness-sdk's `_reject` and `voice_host.py`). Wire-frozen.\n */\nconst VOICE_REJECTION_REASONS: ReadonlySet<string> = new Set([\n  'no-voice',\n  'not-voice-owner',\n  'voice-active',\n  'voice-stale-session',\n  'voice-unavailable',\n  'voice-not-enabled',\n  'voice-model-transport',\n  'text-too-long',\n]);\n\n/**\n * Whether a rejected command was a `voice/*` command, by its voice manager\n * `payload.reason`. The voice controller owns those outcomes (it settles to\n * idle, falls back to a typed send, or shows its own notice), so a chat's\n * \"Message was not sent\" banner must not repeat them: no message was sent.\n */\nexport function isVoiceCommandRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  const reason = (failure.payload as { reason?: unknown } | null | undefined)?.reason;\n  return typeof reason === 'string' && VOICE_REJECTION_REASONS.has(reason);\n}\n\n/** The structured `detail.code` of a rejected command, or `null`. */\nexport function statewireRejectionCode(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const code = (detail as { code?: unknown }).code;\n  return typeof code === 'string' && code.length > 0 ? code : null;\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * The `detail.code` agora answers for a write to an archived (trashed)\n * conversation (`host_rejects._conversation_archived_reject`, a 409): it\n * takes no new turns, config writes or approval answers until it is\n * restored, and stopping still works. Wire-frozen.\n */\nexport const CONVERSATION_ARCHIVED = 'conversation_archived';\n\n/** What a person is told when that refusal comes back (the server says the same). */\nexport const CONVERSATION_ARCHIVED_MESSAGE =\n  'This conversation is archived. Restore it to continue.';\n\n/**\n * Whether a rejected command was refused because the conversation is archived\n * ({@link CONVERSATION_ARCHIVED}). Not retriable: nothing changes until a\n * restore, so callers show {@link CONVERSATION_ARCHIVED_MESSAGE} rather than a\n * \"try again\".\n */\nexport function isConversationArchivedRejection(error: unknown): boolean {\n  return statewireRejectionCode(error) === CONVERSATION_ARCHIVED;\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":"AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;AAfxE;AAgBL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAQO,MAAM,wCAAwC;AA0B9C,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO;AAAA,IACL;AAAA,IACA,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAAA,IACvE,QAAQ,OAAO,WAAW,WAAW,SAAS;AAAA,EAAA;AAElD;AAMA,MAAM,8CAAmD,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,wBAAwB,OAAyB;AA9H1D;AA+HL,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AACzC,QAAM,UAAU,aAAQ,YAAR,mBAA6D;AAC7E,SAAO,OAAO,WAAW,YAAY,wBAAwB,IAAI,MAAM;AACzE;AAGO,SAAS,uBAAuB,OAA+B;AAtI/D;AAuIL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,YAAY,KAAK,SAAS,IAAI,OAAO;AAC9D;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,MAAM,wBAAwB;AAG9B,MAAM,gCACX;AAQK,SAAS,gCAAgC,OAAyB;AACvE,SAAO,uBAAuB,KAAK,MAAM;AAC3C;AAQO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;AA3Q7D;AA4QL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;AAhSlE;AAiSL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;"}
+{"version":3,"file":"errors.js","sources":["../../../../agent-runtime/src/errors.ts"],"sourcesContent":["import type { StatewireClient } from 'statewire';\nimport type { DeepAgentConnectionState } from './types';\n\n/** Structured payload attached to a server-rejected Statewire command. */\nexport interface StatewireRejectionPayload {\n  status: number;\n  detail: unknown;\n}\n\n/** Return a rejected command's structured `{ status, detail }` payload. */\nexport function statewireRejectionPayload(error: unknown): StatewireRejectionPayload | null {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return null;\n\n  const payload = failure.payload as { status?: unknown; detail?: unknown } | undefined;\n  if (typeof payload?.status !== 'number') return null;\n  return { status: payload.status, detail: payload.detail };\n}\n\n/**\n * The server's human-readable reason for a rejected command — `detail.message`\n * (or a plain-string `detail`) — else `null`. Hosts surface it as send\n * feedback so the user sees the actionable cause instead of the generic\n * client-side `command rejected (<status>)`.\n */\nexport function statewireRejectionDetailMessage(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (typeof detail === 'string') return detail.length > 0 ? detail : null;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const message = (detail as { message?: unknown }).message;\n  return typeof message === 'string' && message.length > 0 ? message : null;\n}\n\n/**\n * A structured, retryable refusal the host recorded as the run error\n * (`runs.error`): the dispatch never started — the pod or instance was\n * closing (`pod_draining`) — and the entries stayed in their lanes for the\n * thread's next placement. Distinct from a rejected COMMAND\n * ({@link statewireRejectionPayload}): this is the shape harness-sdk writes\n * when the run executor raises the rejection, so it lives on the replicated\n * run entry, not on a command settle.\n */\nexport interface RetryableRunRefusal {\n  /** The structured `detail.code` (`pod_draining`). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\n/** The `{ code, message, retryable: true }` detail of a structured refusal, or `null`. */\nfunction readRetryableDetail(detail: unknown): { code: string; message: string | null } | null {\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable !== true || typeof code !== 'string' || code.length === 0) return null;\n  return { code, message: typeof message === 'string' && message.length > 0 ? message : null };\n}\n\nexport function readRetryableRunRefusal(error: unknown): RetryableRunRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  return readRetryableDetail((error as { detail?: unknown }).detail);\n}\n\n/**\n * The `detail.code` agora answers when a send names another channel of the\n * collab agent a session started on (`collab_agent_bridge.py`): a session\n * keeps its channel — the SDK app's Agent / Ask mode — for its lifetime, and\n * the way to the other mode is a new session. Wire-frozen.\n */\nexport const COLLAB_AGENT_CHANNEL_SESSION_MISMATCH = 'collab_agent_channel_session_mismatch';\n\n/**\n * A structured refusal the host recorded as the run error when the run could\n * not START: the run executor raised the gate's `{status, detail: {code,\n * message}}` envelope (agora's `_status_reject`) before it accepted the\n * dispatched input, so the message went back to its lane and the thread rests\n * `error` with it still queued. Unlike a retryable refusal\n * ({@link readRetryableRunRefusal}) nothing will dispatch it later: resending\n * the same input is refused the same way, so the server's message is the only\n * explanation the person gets.\n */\nexport interface RunStartRefusal {\n  /** The structured `detail.code` (`collab_agent_channel_session_mismatch`, …). */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n  /** The HTTP-style status the gate raised with, when recorded. */\n  status: number | null;\n}\n\n/**\n * The non-retryable structured refusal off a replicated run error\n * (`runs.error`), or `null` — for a run that failed while it was running (a\n * plain `{message}`), a retryable refusal, or no error at all.\n */\nexport function readRunStartRefusal(error: unknown): RunStartRefusal | null {\n  if (error === null || typeof error !== 'object' || Array.isArray(error)) return null;\n  const { detail, status } = error as { detail?: unknown; status?: unknown };\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const { code, message, retryable } = detail as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n  };\n  if (retryable === true || typeof code !== 'string' || code.length === 0) return null;\n  return {\n    code,\n    message: typeof message === 'string' && message.length > 0 ? message : null,\n    status: typeof status === 'number' ? status : null,\n  };\n}\n\n/**\n * The `payload.reason` codes agora's voice manager rejects `voice/*` commands\n * with (harness-sdk's `_reject` and `voice_host.py`). Wire-frozen.\n */\nconst VOICE_REJECTION_REASONS: ReadonlySet<string> = new Set([\n  'no-voice',\n  'not-voice-owner',\n  'voice-active',\n  'voice-stale-session',\n  'voice-unavailable',\n  'voice-not-enabled',\n  'voice-rate-limited',\n  'voice-model-transport',\n  'text-too-long',\n]);\n\n/**\n * Whether a rejected command was a `voice/*` command, by its voice manager\n * `payload.reason`. The voice controller owns those outcomes (it settles to\n * idle, falls back to a typed send, or shows its own notice), so a chat's\n * \"Message was not sent\" banner must not repeat them: no message was sent.\n */\nexport function isVoiceCommandRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null)?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  const reason = (failure.payload as { reason?: unknown } | null | undefined)?.reason;\n  return typeof reason === 'string' && VOICE_REJECTION_REASONS.has(reason);\n}\n\n/** The structured `detail.code` of a rejected command, or `null`. */\nexport function statewireRejectionCode(error: unknown): string | null {\n  const detail = statewireRejectionPayload(error)?.detail;\n  if (detail === null || typeof detail !== 'object' || Array.isArray(detail)) return null;\n  const code = (detail as { code?: unknown }).code;\n  return typeof code === 'string' && code.length > 0 ? code : null;\n}\n\n/**\n * A structured, retryable refusal of a COMMAND, read off its rejection\n * ({@link statewireRejectionPayload}): the host's `_structured_reject(...,\n * retryable=True)` envelope — `command_auth_context_expired` when a pod\n * replacement dropped the socket-scoped auth a replayed command needed,\n * `pod_draining` when the host was closing. The command never ran, and the\n * host itself says a resend after the reconnect will; `detail.code` is the\n * wire-frozen contract clients classify on. Same shape as\n * {@link readRetryableRunRefusal}, which reads it off a replicated run entry.\n */\nexport interface RetryableCommandRejection {\n  /** The structured `detail.code`. */\n  code: string;\n  /** The server's human-readable reason, when it sent one. */\n  message: string | null;\n}\n\nexport function readRetryableCommandRejection(error: unknown): RetryableCommandRejection | null {\n  const payload = statewireRejectionPayload(error);\n  return payload === null ? null : readRetryableDetail(payload.detail);\n}\n\n/** The host's `detail.code` for a command replayed onto a pod that could not restore its auth context. */\nexport const STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED = 'command_auth_context_expired';\n\n/**\n * Whether a rejected command hit the host's fail-closed auth recovery: the\n * command was replayed onto a replacement pod that could not restore the\n * attach's auth context, so it was refused unrun (503, retryable). The\n * reconnect already under way restores the context; a single resend after it\n * is the recovery, not a failure to report.\n */\nexport function isStatewireCommandAuthContextExpired(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  return (\n    payload?.status === 503 &&\n    readRetryableDetail(payload.detail)?.code === STATEWIRE_COMMAND_AUTH_CONTEXT_EXPIRED\n  );\n}\n\n/**\n * The `detail.code` agora answers for a write to an archived (trashed)\n * conversation (`host_rejects._conversation_archived_reject`, a 409): it\n * takes no new turns, config writes or approval answers until it is\n * restored, and stopping still works. Wire-frozen.\n */\nexport const CONVERSATION_ARCHIVED = 'conversation_archived';\n\n/** What a person is told when that refusal comes back (the server says the same). */\nexport const CONVERSATION_ARCHIVED_MESSAGE =\n  'This conversation is archived. Restore it to continue.';\n\n/**\n * Whether a rejected command was refused because the conversation is archived\n * ({@link CONVERSATION_ARCHIVED}). Not retriable: nothing changes until a\n * restore, so callers show {@link CONVERSATION_ARCHIVED_MESSAGE} rather than a\n * \"try again\".\n */\nexport function isConversationArchivedRejection(error: unknown): boolean {\n  return statewireRejectionCode(error) === CONVERSATION_ARCHIVED;\n}\n\n/**\n * Whether a rejected command hit the legacy-thread dispatch fence: the\n * structured 409 the server answers when an out-of-band run is writing a\n * pre-cutover thread (or its adoption failed). A per-send failure — the\n * snapshot never carries a standing read-only flag.\n */\nexport function isLegacyThreadReadOnlyRejection(error: unknown): boolean {\n  const payload = statewireRejectionPayload(error);\n  if (payload?.status !== 409) return false;\n\n  const detail = payload.detail as { code?: unknown } | undefined;\n  return detail?.code === 'legacy_thread_read_only';\n}\n\n/**\n * Whether a rejected command was refused because its rewind anchor no longer\n * matches the host's parent for the edited message (`wrong-anchor`).\n *\n * A retry/edit resubmit is dispatched optimistically, so this rejection lands\n * after the UI already cleared its edit affordances: the turn simply never\n * re-runs. Callers use this to tell the user the resubmit was dropped instead\n * of leaving a console-only failure.\n */\nexport function isStatewireRewindAnchorRejection(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; payload?: unknown } } | null | undefined)\n    ?.failure;\n  if (failure?.fate !== 'rejected') return false;\n  return (failure.payload as { reason?: unknown } | undefined)?.reason === 'wrong-anchor';\n}\n\n/**\n * Whether a statewire send failure is the host's `expired` verdict\n * (`result-unavailable`): the command's seq was at or below the host's\n * admitted watermark and no retained result was left for it. Either the\n * command ran and settled but the client re-asked for the answer (a resend\n * after the stream came back) only after the host had let the retained result\n * go, or the seq was already admitted and the command was absorbed as a\n * duplicate without ever running — a client whose shared session record fell\n * behind the watermark stays there until a reconnect re-syncs it. The library\n * never reruns the command on replay, so for an idempotent read the answer is\n * simply gone — asking again is the correct reaction, not reporting a failure;\n * a write cannot assume it was applied.\n */\nexport function isStatewireExpiredVerdict(error: unknown): boolean {\n  const failure = (error as { failure?: { fate?: unknown; cause?: unknown } | null | undefined })\n    ?.failure;\n  return failure?.fate === 'expired' && failure.cause === 'server';\n}\n\n/**\n * Whether a statewire send failure is a local channel death rather than a\n * command error.\n *\n * The library's contract for `SendFailure.cause`: `\"server\"` is the server's\n * own answer; every other cause is \"a channel death the client settled\n * locally\" — `unmount`, `stream-gone`, and `session-lost`. A thread switch\n * settles every in-flight command that way, so logging these at error level\n * reports two failures for an ordinary switch and buries the ones that mean\n * something.\n *\n * Channel health is already surfaced where it belongs: the connection\n * indicator renders the connection state. This\n * predicate only decides the log level.\n */\nexport function isStatewireChannelTeardown(error: unknown): boolean {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  return typeof cause === 'string' && cause !== 'server';\n}\n\n/**\n * The low-cardinality reason a statewire send settled as transport weather\n * rather than a defect, or `null` when the failure is a real error.\n *\n * Three families qualify: a channel death the client settled locally\n * ({@link isStatewireChannelTeardown} — the cause: `unmount`, `stream-gone`,\n * `session-lost`), the host's `expired` verdict\n * ({@link isStatewireExpiredVerdict} — the answer outlived the host's\n * retention before the post-reconnect resend collected it), and a retryable\n * structured rejection ({@link readRetryableCommandRejection} — its code: the\n * host asked for a resend). In every case the sender's own retry or poll is\n * the recovery and the connection indicator already shows the channel, so\n * error reporting counts the outcome instead of paging on it. Handler\n * failures, crashes, and non-retryable rejections stay `null`: those are\n * defects to page on.\n */\nexport function statewireTransportOutcome(error: unknown): string | null {\n  const cause = (error as { failure?: { cause?: unknown } } | null | undefined)?.failure?.cause;\n  if (typeof cause === 'string' && cause !== 'server') return cause;\n  if (isStatewireExpiredVerdict(error)) return 'expired';\n  return readRetryableCommandRejection(error)?.code ?? null;\n}\n\nconst sanitizeConnectionMessage = (message: string): string | undefined => {\n  const printable = Array.from(message, (character) => {\n    const code = character.charCodeAt(0);\n    return code < 32 || code === 127 ? ' ' : character;\n  })\n    .join('')\n    .replace(/\\s+/g, ' ')\n    .trim();\n  return printable ? printable.slice(0, 200) : undefined;\n};\n\n/** Preserve the Statewire lifecycle and sanitize host detail for display. */\nexport function projectDeepAgentConnection(\n  connection: StatewireClient.ConnectionState\n): DeepAgentConnectionState {\n  const message =\n    'message' in connection && typeof connection.message === 'string'\n      ? sanitizeConnectionMessage(connection.message)\n      : undefined;\n  switch (connection.status) {\n    case 'standby':\n      return {\n        status: connection.status,\n        reason: connection.reason,\n        degraded: connection.degraded,\n        ...(message !== undefined && { message }),\n      };\n    case 'connecting':\n    case 'connected':\n      return { status: connection.status, degraded: connection.degraded };\n    case 'retrying':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        attempt: connection.attempt,\n        ...(connection.cause !== undefined && { cause: connection.cause }),\n        ...(connection.code !== undefined && { code: connection.code }),\n        ...(connection.nextRetryAt !== undefined && { nextRetryAt: connection.nextRetryAt }),\n        ...(connection.lastError !== undefined && { lastError: connection.lastError }),\n        ...(message !== undefined && { message }),\n      };\n    case 'stopped':\n      return {\n        status: connection.status,\n        degraded: connection.degraded,\n        reason: connection.reason,\n        ...(connection.payload !== undefined && { payload: connection.payload }),\n        ...(message !== undefined && { message }),\n      };\n    default:\n      return unknownConnectionStatus(connection);\n  }\n}\n\n/** Compile-time exhaustiveness: reachable only when the library grows a status this build does not project. */\nfunction unknownConnectionStatus(connection: never): never {\n  throw new Error(\n    `statewire: unknown connection status ${JSON.stringify(\n      (connection as { status?: unknown }).status\n    )}`\n  );\n}\n"],"names":[],"mappings":"AAUO,SAAS,0BAA0B,OAAkD;AAC1F,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AAEzC,QAAM,UAAU,QAAQ;AACxB,MAAI,QAAO,mCAAS,YAAW,SAAU,QAAO;AAChD,SAAO,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,OAAA;AACnD;AAQO,SAAS,gCAAgC,OAA+B;AAfxE;AAgBL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,OAAO,WAAW,iBAAiB,OAAO,SAAS,IAAI,SAAS;AACpE,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,UAAW,OAAiC;AAClD,SAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AACvE;AAmBA,SAAS,oBAAoB,QAAkE;AAC7F,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO,EAAE,MAAM,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU,KAAA;AACxF;AAEO,SAAS,wBAAwB,OAA4C;AAClF,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,SAAO,oBAAqB,MAA+B,MAAM;AACnE;AAQO,MAAM,wCAAwC;AA0B9C,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,QAAO;AAChF,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,EAAE,MAAM,SAAS,UAAA,IAAc;AAKrC,MAAI,cAAc,QAAQ,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAChF,SAAO;AAAA,IACL;AAAA,IACA,SAAS,OAAO,YAAY,YAAY,QAAQ,SAAS,IAAI,UAAU;AAAA,IACvE,QAAQ,OAAO,WAAW,WAAW,SAAS;AAAA,EAAA;AAElD;AAMA,MAAM,8CAAmD,IAAI;AAAA,EAC3D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,SAAS,wBAAwB,OAAyB;AA/H1D;AAgIL,QAAM,UAAW,+BAAsE;AACvF,OAAI,mCAAS,UAAS,WAAY,QAAO;AACzC,QAAM,UAAU,aAAQ,YAAR,mBAA6D;AAC7E,SAAO,OAAO,WAAW,YAAY,wBAAwB,IAAI,MAAM;AACzE;AAGO,SAAS,uBAAuB,OAA+B;AAvI/D;AAwIL,QAAM,UAAS,+BAA0B,KAAK,MAA/B,mBAAkC;AACjD,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnF,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,YAAY,KAAK,SAAS,IAAI,OAAO;AAC9D;AAmBO,SAAS,8BAA8B,OAAkD;AAC9F,QAAM,UAAU,0BAA0B,KAAK;AAC/C,SAAO,YAAY,OAAO,OAAO,oBAAoB,QAAQ,MAAM;AACrE;AA0BO,MAAM,wBAAwB;AAG9B,MAAM,gCACX;AAQK,SAAS,gCAAgC,OAAyB;AACvE,SAAO,uBAAuB,KAAK,MAAM;AAC3C;AAQO,SAAS,gCAAgC,OAAyB;AACvE,QAAM,UAAU,0BAA0B,KAAK;AAC/C,OAAI,mCAAS,YAAW,IAAK,QAAO;AAEpC,QAAM,SAAS,QAAQ;AACvB,UAAO,iCAAQ,UAAS;AAC1B;AA+BO,SAAS,0BAA0B,OAAyB;AACjE,QAAM,UAAW,+BACb;AACJ,UAAO,mCAAS,UAAS,aAAa,QAAQ,UAAU;AAC1D;AAiBO,SAAS,2BAA2B,OAAyB;AA5Q7D;AA6QL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAkBO,SAAS,0BAA0B,OAA+B;AAjSlE;AAkSL,QAAM,SAAS,oCAAgE,YAAhE,mBAAyE;AACxF,MAAI,OAAO,UAAU,YAAY,UAAU,SAAU,QAAO;AAC5D,MAAI,0BAA0B,KAAK,EAAG,QAAO;AAC7C,WAAO,mCAA8B,KAAK,MAAnC,mBAAsC,SAAQ;AACvD;AAEA,MAAM,4BAA4B,CAAC,YAAwC;AACzE,QAAM,YAAY,MAAM,KAAK,SAAS,CAAC,cAAc;AACnD,UAAM,OAAO,UAAU,WAAW,CAAC;AACnC,WAAO,OAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EAC3C,CAAC,EACE,KAAK,EAAE,EACP,QAAQ,QAAQ,GAAG,EACnB,KAAA;AACH,SAAO,YAAY,UAAU,MAAM,GAAG,GAAG,IAAI;AAC/C;AAGO,SAAS,2BACd,YAC0B;AAC1B,QAAM,UACJ,aAAa,cAAc,OAAO,WAAW,YAAY,WACrD,0BAA0B,WAAW,OAAO,IAC5C;AACN,UAAQ,WAAW,QAAA;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AAAA,IACL,KAAK;AACH,aAAO,EAAE,QAAQ,WAAW,QAAQ,UAAU,WAAW,SAAA;AAAA,IAC3D,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,UAAU,UAAa,EAAE,OAAO,WAAW,MAAA;AAAA,QAC1D,GAAI,WAAW,SAAS,UAAa,EAAE,MAAM,WAAW,KAAA;AAAA,QACxD,GAAI,WAAW,gBAAgB,UAAa,EAAE,aAAa,WAAW,YAAA;AAAA,QACtE,GAAI,WAAW,cAAc,UAAa,EAAE,WAAW,WAAW,UAAA;AAAA,QAClE,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C,KAAK;AACH,aAAO;AAAA,QACL,QAAQ,WAAW;AAAA,QACnB,UAAU,WAAW;AAAA,QACrB,QAAQ,WAAW;AAAA,QACnB,GAAI,WAAW,YAAY,UAAa,EAAE,SAAS,WAAW,QAAA;AAAA,QAC9D,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AACE,aAAO,wBAAwB,UAAU;AAAA,EAAA;AAE/C;AAGA,SAAS,wBAAwB,YAA0B;AACzD,QAAM,IAAI;AAAA,IACR,wCAAwC,KAAK;AAAA,MAC1C,WAAoC;AAAA,IAAA,CACtC;AAAA,EAAA;AAEL;"}

package/dist/agent-runtime/src/generated/runconfig-contract.cjs

@@ -70,6 +70,7 @@ const RUN_CONFIG_CUSTOM_KEYS = [
   "project_id",
   "read_only",
   "recursion_limit",
+  "remote_workspace",
   "run_budget",
   "run_label",
   "runtime",
@@ -94,7 +95,12 @@ const RUN_CONFIG_CUSTOM_KEYS = [
   "tool_limit_override",
   "trigger_type",
   "voice_update_handle",
+  "work_in",
+  "work_in_handback",
+  "work_in_handoff",
   "workbench",
+  "workspace",
+  "workspace_ask",
   "workspace_id"
 ];
 new Set(
@@ -127,6 +133,7 @@ const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [
   "posthog_session_id",
   "project_id",
   "read_only",
+  "remote_workspace",
   "run_budget",
   "runtime",
   "session_id",
@@ -139,6 +146,11 @@ const RUN_CONFIG_PER_SEND_CUSTOM_KEYS = [
   "tool_limit_override",
   "trigger_type",
   "voice_update_handle",
+  "work_in",
+  "work_in_handback",
+  "work_in_handoff",
+  "workspace",
+  "workspace_ask",
   "workspace_id"
 ];
 new Set(
@@ -239,6 +251,7 @@ new Set(
 const CLIENT_TOOL_INTERRUPT_SOURCE = "client_tool";
 const CLIENT_TOOL_RESULT_STATUS_SUCCESS = "success";
 const CLIENT_TOOL_RESULT_STATUS_ERROR = "error";
+const DEEP_AGENT_LANE_FOLLOW_PROTOCOL_VERSION = 2;
 const DEEP_AGENT_PROTOCOL_VERSION_HEADER = "x-athena-deep-agent-protocol-version";
 const DEEP_AGENT_MESSAGE_WINDOW_HEADER = "x-athena-deep-agent-window";
 const DEEP_AGENT_MESSAGE_INTERESTS_HEADER = "x-athena-deep-agent-interests";
@@ -260,6 +273,9 @@ const DEEP_AGENT_HISTORY_MESSAGE_COMMAND = "history/message";
 const DEEP_AGENT_TRUNCATED_CONTENT_KEY = "athena_content_truncated";
 const DEEP_AGENT_TRUNCATED_LANE_KEY = "athena_lane_truncated";
 const DEEP_AGENT_LANE_USAGE_KEY = "athena_lane_usage";
+const DEEP_AGENT_RUNNING_LANE_WIRE_MESSAGES = 8;
+const DEEP_AGENT_FOLLOW_TOOL_CALL_ID_KEY = "toolCallId";
+const DEEP_AGENT_MAX_FOLLOWED_STEPS = 200;
 const DEEP_AGENT_LANE_CUT_PROTOCOL_VERSION = 2;
 const DEEP_AGENT_CUT_LANE_DOCUMENT = "cut";
 const DEEP_AGENT_HISTORY_LANE_COMMAND = "history/lane";
@@ -267,21 +283,27 @@ const DEEP_AGENT_MAX_LANE_PAGE = 200;
 const DEEP_AGENT_MESSAGE_HISTORY_HEADER = "x-athena-deep-agent-history";
 const DEEP_AGENT_MESSAGE_HISTORY_PAGED = "paged";
 const DEEP_AGENT_REPEATS_RESULT_KEY = "athena_content_repeats_result";
+const DEEP_AGENT_OMITTED_IMAGE_KEY = "athena_image_omitted";
+const DEEP_AGENT_HISTORY_LANE_IMAGE_COMMAND = "history/lane_image";
 exports.CLIENT_TOOL_INTERRUPT_SOURCE = CLIENT_TOOL_INTERRUPT_SOURCE;
 exports.CLIENT_TOOL_RESULT_STATUS_ERROR = CLIENT_TOOL_RESULT_STATUS_ERROR;
 exports.CLIENT_TOOL_RESULT_STATUS_SUCCESS = CLIENT_TOOL_RESULT_STATUS_SUCCESS;
 exports.DEEP_AGENT_CONFIG_COMMANDS = DEEP_AGENT_CONFIG_COMMANDS;
 exports.DEEP_AGENT_CUT_LANE_DOCUMENT = DEEP_AGENT_CUT_LANE_DOCUMENT;
 exports.DEEP_AGENT_DEFAULT_MESSAGE_WINDOW = DEEP_AGENT_DEFAULT_MESSAGE_WINDOW;
+exports.DEEP_AGENT_FOLLOW_TOOL_CALL_ID_KEY = DEEP_AGENT_FOLLOW_TOOL_CALL_ID_KEY;
 exports.DEEP_AGENT_HISTORY_LANE_COMMAND = DEEP_AGENT_HISTORY_LANE_COMMAND;
+exports.DEEP_AGENT_HISTORY_LANE_IMAGE_COMMAND = DEEP_AGENT_HISTORY_LANE_IMAGE_COMMAND;
 exports.DEEP_AGENT_HISTORY_MESSAGE_COMMAND = DEEP_AGENT_HISTORY_MESSAGE_COMMAND;
 exports.DEEP_AGENT_HISTORY_PAGE_COMMAND = DEEP_AGENT_HISTORY_PAGE_COMMAND;
 exports.DEEP_AGENT_HISTORY_PAGE_PROTOCOL_VERSION = DEEP_AGENT_HISTORY_PAGE_PROTOCOL_VERSION;
 exports.DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND = DEEP_AGENT_HISTORY_TOOL_OUTPUT_COMMAND;
 exports.DEEP_AGENT_INTEREST_PROTOCOL = DEEP_AGENT_INTEREST_PROTOCOL;
 exports.DEEP_AGENT_LANE_CUT_PROTOCOL_VERSION = DEEP_AGENT_LANE_CUT_PROTOCOL_VERSION;
+exports.DEEP_AGENT_LANE_FOLLOW_PROTOCOL_VERSION = DEEP_AGENT_LANE_FOLLOW_PROTOCOL_VERSION;
 exports.DEEP_AGENT_LANE_USAGE_KEY = DEEP_AGENT_LANE_USAGE_KEY;
 exports.DEEP_AGENT_MAIN_NS = DEEP_AGENT_MAIN_NS;
+exports.DEEP_AGENT_MAX_FOLLOWED_STEPS = DEEP_AGENT_MAX_FOLLOWED_STEPS;
 exports.DEEP_AGENT_MAX_HISTORY_PAGE_STEPS = DEEP_AGENT_MAX_HISTORY_PAGE_STEPS;
 exports.DEEP_AGENT_MAX_HISTORY_PAGE_TURNS = DEEP_AGENT_MAX_HISTORY_PAGE_TURNS;
 exports.DEEP_AGENT_MAX_INTERESTS = DEEP_AGENT_MAX_INTERESTS;
@@ -293,10 +315,12 @@ exports.DEEP_AGENT_MESSAGE_HISTORY_PAGED = DEEP_AGENT_MESSAGE_HISTORY_PAGED;
 exports.DEEP_AGENT_MESSAGE_INTERESTS_HEADER = DEEP_AGENT_MESSAGE_INTERESTS_HEADER;
 exports.DEEP_AGENT_MESSAGE_WINDOW_HEADER = DEEP_AGENT_MESSAGE_WINDOW_HEADER;
 exports.DEEP_AGENT_MIN_MESSAGE_WINDOW = DEEP_AGENT_MIN_MESSAGE_WINDOW;
+exports.DEEP_AGENT_OMITTED_IMAGE_KEY = DEEP_AGENT_OMITTED_IMAGE_KEY;
 exports.DEEP_AGENT_OVERSIZED_INTEREST_CODE = DEEP_AGENT_OVERSIZED_INTEREST_CODE;
 exports.DEEP_AGENT_PROTOCOL_STATE_KEY = DEEP_AGENT_PROTOCOL_STATE_KEY;
 exports.DEEP_AGENT_PROTOCOL_VERSION_HEADER = DEEP_AGENT_PROTOCOL_VERSION_HEADER;
 exports.DEEP_AGENT_REPEATS_RESULT_KEY = DEEP_AGENT_REPEATS_RESULT_KEY;
+exports.DEEP_AGENT_RUNNING_LANE_WIRE_MESSAGES = DEEP_AGENT_RUNNING_LANE_WIRE_MESSAGES;
 exports.DEEP_AGENT_TRUNCATED_CONTENT_KEY = DEEP_AGENT_TRUNCATED_CONTENT_KEY;
 exports.DEEP_AGENT_TRUNCATED_LANE_KEY = DEEP_AGENT_TRUNCATED_LANE_KEY;
 exports.KNOWN_START_CHANNELS = KNOWN_START_CHANNELS;