@athenaintel/react 0.57.1 → 0.59.0

package/dist/agent-runtime/src/use-deep-agent-runtime.js

@@ -1,10 +1,12 @@
+import { resource, useResource } from "@assistant-ui/tap";
 import { useState, useRef, useMemo, useEffect } from "react";
+import { createChatOutboxFlushPolicy } from "./chat-outbox-policy.js";
 import { isStatewireChannelTeardown } from "./errors.js";
 import { registerDeepAgentRunConfig } from "./model-context.js";
-import { readPersistedFailedSendStamps, readFailedSendStampsFromRecord, QuotaSafeLocalStorageSession, isStorageQuotaError } from "./quota-safe-local-storage-session.js";
+import { readPersistedFailedSendStamps, localStorageSessionKey, readFailedSendStampsFromRecord, QuotaSafeLocalStorageSession, isStorageQuotaError } from "./quota-safe-local-storage-session.js";
 import { createDeepAgentSendRecovery } from "./send-recovery.js";
 import { nextSessionLaneEpoch, INITIAL_SESSION_LANE_EPOCH } from "./session-lane-scope.js";
-import { readStatewireFailedSendLane } from "./thread-extras.js";
+import { readStatewireOutbox } from "./statewire-held-sends.js";
 import { isConfigSyncUnavailableRejection } from "./use-deep-agent-config.js";
 import { deepAgentAttachId, useDeepAgentThread } from "./use-deep-agent-thread.js";
 function pendingSessionAttachKey(attachKey) {
@@ -36,6 +38,14 @@ function loadSessionRecord(store) {
     return null;
   }
 }
+const ObservedSessionStorage = resource(function useObservedSessionStorage({
+  element,
+  observe
+}) {
+  const store = useResource(element);
+  observe(store);
+  return store;
+});
 function logUnhandledStatewireError(surface, error) {
   if (isStatewireChannelTeardown(error)) {
     console.debug(`[${surface}] statewire channel teardown:`, error);
@@ -47,6 +57,9 @@ function logUnhandledStatewireError(surface, error) {
   }
   console.error(`[${surface}] statewire transport error:`, error);
 }
+function isPromiseLike(value) {
+  return typeof value === "object" && value !== null && typeof value.then === "function";
+}
 function useDeepAgentRuntime(options) {
   const {
     surface,
@@ -54,6 +67,7 @@ function useDeepAgentRuntime(options) {
     useClient,
     runConfig,
     onBeforeSendRetry,
+    foreground,
     onError,
     onStateChange,
     onCommandChange,
@@ -68,18 +82,43 @@ function useDeepAgentRuntime(options) {
   onStateChangeRef.current = onStateChange;
   const onCommandChangeRef = useRef(onCommandChange);
   onCommandChangeRef.current = onCommandChange;
+  const foregroundRef = useRef(foreground);
+  foregroundRef.current = foreground;
+  const holdsHiddenReloads = foreground !== void 0;
   const diagnosticsRef = useRef(threadOptions.diagnostics);
   diagnosticsRef.current = threadOptions.diagnostics;
   const onBeforeSendRetryRef = useRef(onBeforeSendRetry);
   onBeforeSendRetryRef.current = onBeforeSendRetry;
   const clientRef = useRef(null);
+  const storageSessionRef = useRef(null);
+  const observeStorageSession = useRef((store) => {
+    storageSessionRef.current = store;
+  }).current;
   const failureStampsRef = useRef(
     void 0
   );
-  failureStampsRef.current = session === false || session.kind === "pending" ? void 0 : session.kind === "local-storage" ? canPersistLocalSession ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId)) : void 0 : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));
+  failureStampsRef.current = session === false || session.kind === "pending" ? void 0 : session.kind === "local-storage" ? canPersistLocalSession ? () => readPersistedFailedSendStamps(
+    localStorageSessionKey({
+      namespace: session.namespace,
+      principal: session.principal,
+      threadId: threadOptions.threadId
+    })
+  ) : void 0 : session.kind === "session-store" ? () => readFailedSendStampsFromRecord(loadSessionRecord(session.store)) : session.kind === "storage" ? () => {
+    const store = storageSessionRef.current;
+    return store ? readFailedSendStampsFromRecord(loadSessionRecord(store)) : null;
+  } : void 0;
   const sessionPending = session !== false && session.kind === "pending";
   const attachKey = sessionPending ? pendingSessionAttachKey(threadOptions.attachKey) : threadOptions.attachKey;
-  const laneKey = session !== false && session.kind === "local-storage" ? session.key : null;
+  const laneNamespace = session !== false && session.kind === "local-storage" ? session.namespace : null;
+  const lanePrincipal = session !== false && session.kind === "local-storage" ? session.principal : null;
+  const laneKey = useMemo(
+    () => laneNamespace === null || lanePrincipal === null ? null : (threadId) => localStorageSessionKey({
+      namespace: laneNamespace,
+      principal: lanePrincipal,
+      threadId
+    }),
+    [laneNamespace, lanePrincipal]
+  );
   const [laneEpochState, setLaneEpochState] = useState(
     () => nextSessionLaneEpoch({
       previous: INITIAL_SESSION_LANE_EPOCH,
@@ -97,10 +136,10 @@ function useDeepAgentRuntime(options) {
   const attachId = deepAgentAttachId({ threadId: threadOptions.threadId, attachKey, laneEpoch });
   const sendRecovery = useMemo(
     () => createDeepAgentSendRecovery({
-      lane: () => {
+      outbox: () => {
         const client2 = clientRef.current;
         if (!client2) return null;
-        return readStatewireFailedSendLane(client2.thread().getState().extras);
+        return readStatewireOutbox(client2.thread().getState().extras);
       },
       failureStamps: () => {
         var _a;
@@ -136,21 +175,51 @@ function useDeepAgentRuntime(options) {
       storage: {
         session: QuotaSafeLocalStorageSession({
           threadId: threadOptions.threadId,
-          key: session.key,
+          namespace: session.namespace,
+          principal: session.principal,
+          ...session.unscopedPrefix !== void 0 && { unscopedPrefix: session.unscopedPrefix },
           ...session.onStorageDegraded === void 0 ? {} : { onStorageDegraded: session.onStorageDegraded }
         })
       }
     },
     ...session !== false && session.kind === "session-store" && { sessionStore: session.store },
+    ...session !== false && session.kind === "storage" && {
+      storage: {
+        session: ObservedSessionStorage({
+          element: session.session(threadOptions.threadId),
+          observe: observeStorageSession
+        })
+      }
+    },
+    ...holdsHiddenReloads && {
+      onFlush: createChatOutboxFlushPolicy({
+        foreground: () => {
+          var _a;
+          return ((_a = foregroundRef.current) == null ? void 0 : _a.get()) ?? true;
+        },
+        outbox: () => {
+          var _a;
+          const client2 = clientRef.current;
+          if (!client2) return null;
+          const outbox = (_a = client2.thread().getState().extras) == null ? void 0 : _a.outbox;
+          return outbox && typeof outbox.hold === "function" ? outbox : null;
+        }
+      })
+    },
     onStateChange: (state, ctx) => {
       var _a;
-      sendRecoveryRef.current.observeStateChange(state);
       (_a = onStateChangeRef.current) == null ? void 0 : _a.call(onStateChangeRef, state, ctx);
     },
+    // A durable `settled` update is acked once the returned promise resolves:
+    // the host's handler and send recovery both finish before it is.
     onCommandChange: (update, ctx) => {
       var _a;
-      sendRecoveryRef.current.observeCommand(update);
-      (_a = onCommandChangeRef.current) == null ? void 0 : _a.call(onCommandChangeRef, update, ctx);
+      const recovered = sendRecoveryRef.current.onCommandChange(update, ctx);
+      const observed = (_a = onCommandChangeRef.current) == null ? void 0 : _a.call(onCommandChangeRef, update, ctx);
+      if (recovered === void 0 && !isPromiseLike(observed)) return observed;
+      const settled = Promise.all([recovered, observed]).then(() => void 0);
+      settled.catch(() => void 0);
+      return settled;
     },
     onError: (error) => {
       const handler = onErrorRef.current;
@@ -163,11 +232,6 @@ function useDeepAgentRuntime(options) {
   });
   const client = useClient(thread);
   clientRef.current = client;
-  useEffect(() => {
-    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());
-    sendRecovery.observeFailedLaneChange();
-    return unsubscribe;
-  }, [client, sendRecovery]);
   const getRunConfigRef = useRef(runConfig == null ? void 0 : runConfig.get);
   getRunConfigRef.current = runConfig == null ? void 0 : runConfig.get;
   const hasRunConfig = runConfig !== void 0;

package/dist/agent-runtime/src/use-deep-agent-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { useEffect, useMemo, useRef, useState } from 'react';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport { INITIAL_SESSION_LANE_EPOCH, nextSessionLaneEpoch } from './session-lane-scope';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { readStatewireFailedSendLane } from './thread-extras';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport {\n  deepAgentAttachId,\n  useDeepAgentThread,\n  type UseDeepAgentThreadOptions,\n} from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `key` scopes the stored lane — a thread id is\n *   only meaningful against the backend (and, where relevant, principal) that\n *   minted it, so include the sync-host URL.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `key` names one principal's lanes (and one backend's). The\n * statewire session that mounts on a lane keeps the client id, lane clocks and\n * journal it loaded there, and everything in that journal is sent under\n * whatever credential the transport holds at its next attach. So a mounted\n * session never moves to another key: when the key starts naming another\n * principal's lanes for the same thread (another account signed in under a\n * mounted chat), the runtime starts a new lane epoch\n * (`UseDeepAgentThreadOptions['laneEpoch']`). The whole statewire thread\n * remounts on the new principal's lane and attaches afresh, as that lane's own\n * client, with nothing remembered or pooled from before. The previous\n * principal's record stays where it is, with its client id and whatever it had\n * journaled and not yet delivered: that principal's next mount on this browser\n * resends it as them, and the retention sweep retires it otherwise. It is never\n * sent as anyone else. A key for the same principal (a token refresh, a fresh\n * `key` function) and a thread switch keep the lane as it is. A host whose\n * principal arrives after mount passes `pending` until it does, never a\n * stand-in key: moving off a stand-in would be a principal change, a second\n * attach.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      key: (threadId: string) => string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n  /**\n   * Notifies when a getter input changes outside React, so model-context sync\n   * pulls `get` at once, before a command sent right after leaves (Olympus\n   * stages a send's named agents right before `composer.send`). Subscribed\n   * when the provider registers; a key change subscribes again.\n   */\n  subscribe?: (listener: () => void) => () => void;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore' | 'laneEpoch'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n  /**\n   * Called right before send recovery dispatches a failed send again, with its\n   * message id: the host puts back the per-send context that message was sent\n   * with (Olympus stages the agents it named) before its command leaves. A\n   * promise holds that retry (and the ones behind it) until it settles, then\n   * the host is asked again: it can't put the context back while a send with\n   * another one is still on its way (see `DeepAgentSendRecoveryOptions.beforeRetry`).\n   * A function returned is called when the retry does not go after all.\n   */\n  onBeforeSendRetry?: (messageId: string) => void | PromiseLike<void> | (() => void);\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onBeforeSendRetry,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const onBeforeSendRetryRef = useRef(onBeforeSendRetry);\n  onBeforeSendRetryRef.current = onBeforeSendRetry;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () => readPersistedFailedSendStamps(session.key(threadOptions.threadId))\n          : undefined\n        : () => readFailedSendStampsFromRecord(loadSessionRecord(session.store));\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // The lane's scope, as the host's `key` names it: whose lanes this mount\n  // runs on. A key that starts naming another principal's lanes starts a new\n  // lane epoch, which remounts the whole thread on the new lane instead of\n  // moving the mounted session there (see `DeepAgentSessionPersistence`).\n  // Tracked whether or not this origin can persist: a process-local session\n  // holds the previous principal's journal in memory just the same. A pending\n  // lane keeps the last known scope, so a sign-out and a sign-in as someone\n  // else with a gap between them is still a change.\n  const laneKey = session !== false && session.kind === 'local-storage' ? session.key : null;\n  const [laneEpochState, setLaneEpochState] = useState(() =>\n    nextSessionLaneEpoch({\n      previous: INITIAL_SESSION_LANE_EPOCH,\n      threadId: threadOptions.threadId,\n      key: laneKey,\n    })\n  );\n  const nextLaneEpochState = nextSessionLaneEpoch({\n    previous: laneEpochState,\n    threadId: threadOptions.threadId,\n    key: laneKey,\n  });\n  // React's derived-state update: re-renders at once with the new epoch, and\n  // this render already uses it, so no render pairs the new key with the\n  // mounted thread.\n  if (nextLaneEpochState !== laneEpochState) setLaneEpochState(nextLaneEpochState);\n  const laneEpoch = nextLaneEpochState.epoch;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch, re-attach or new lane epoch gets fresh hydration gating and\n  // retry budgets, so it never re-dispatches a previous principal's failed\n  // sends). The controller re-dispatches failed sends the server never judged;\n  // see `send-recovery.ts` for the contract.\n  const attachId = deepAgentAttachId({ threadId: threadOptions.threadId, attachKey, laneEpoch });\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        lane: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireFailedSendLane(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n        beforeRetry: (messageId) => onBeforeSendRetryRef.current?.(messageId),\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    laneEpoch,\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            key: session.key,\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    onStateChange: (state, ctx) => {\n      sendRecoveryRef.current.observeStateChange(state);\n      onStateChangeRef.current?.(state, ctx);\n    },\n    onCommandChange: (update, ctx) => {\n      sendRecoveryRef.current.observeCommand(update);\n      onCommandChangeRef.current?.(update, ctx);\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n  // A locked shared journal can publish failed history after onCommandChange,\n  // with no canonical state change to wake recovery. Observe the client that\n  // owns the visible failed lane; the controller guards in-flight retries.\n  useEffect(() => {\n    const unsubscribe = client.subscribe(() => sendRecovery.observeFailedLaneChange());\n    sendRecovery.observeFailedLaneChange();\n    return unsubscribe;\n  }, [client, sendRecovery]);\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  // A host's own notifications (inputs that change outside React) pull too.\n  const subscribeRunConfigRef = useRef(runConfig?.subscribe);\n  subscribeRunConfigRef.current = runConfig?.subscribe;\n  const hasRunConfigSubscribe = runConfig?.subscribe !== undefined;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(\n      client,\n      () => getRunConfigRef.current?.() ?? {},\n      hasRunConfigSubscribe\n        ? (listener) => subscribeRunConfigRef.current?.(listener) ?? (() => {})\n        : undefined\n    );\n  }, [client, hasRunConfig, runConfigKey, hasRunConfigSubscribe]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;;AAkGO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AAwFO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,uBAAuB,OAAO,iBAAiB;AACrD,uBAAqB,UAAU;AAC/B,QAAM,YAAY,OAAuB,IAAI;AAI7C,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MAAM,8BAA8B,QAAQ,IAAI,cAAc,QAAQ,CAAC,IACvE,SACF,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC;AAI7E,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAUlB,QAAM,UAAU,YAAY,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,MAAM;AACtF,QAAM,CAAC,gBAAgB,iBAAiB,IAAI;AAAA,IAAS,MACnD,qBAAqB;AAAA,MACnB,UAAU;AAAA,MACV,UAAU,cAAc;AAAA,MACxB,KAAK;AAAA,IAAA,CACN;AAAA,EAAA;AAEH,QAAM,qBAAqB,qBAAqB;AAAA,IAC9C,UAAU;AAAA,IACV,UAAU,cAAc;AAAA,IACxB,KAAK;AAAA,EAAA,CACN;AAID,MAAI,uBAAuB,eAAgB,mBAAkB,kBAAkB;AAC/E,QAAM,YAAY,mBAAmB;AAOrC,QAAM,WAAW,kBAAkB,EAAE,UAAU,cAAc,UAAU,WAAW,WAAW;AAE7F,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,MAAM,MAAM;AACV,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,4BAA4BA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MACtE;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,MAClC,aAAa,CAAC;;AAAc,0CAAqB,YAArB,8CAA+B;AAAA;AAAA,IAAS,CACrE;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA,IACjC;AAAA;AAAA;AAAA;AAAA,IAIA,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,KAAK,QAAQ;AAAA,UACb,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,eAAe,CAAC,OAAO,QAAQ;;AAC7B,sBAAgB,QAAQ,mBAAmB,KAAK;AAChD,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA,IACA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,sBAAgB,QAAQ,eAAe,MAAM;AAC7C,+BAAmB,YAAnB,4CAA6B,QAAQ;AAAA,IACvC;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAKpB,YAAU,MAAM;AACd,UAAM,cAAc,OAAO,UAAU,MAAM,aAAa,yBAAyB;AACjF,iBAAa,wBAAA;AACb,WAAO;AAAA,EACT,GAAG,CAAC,QAAQ,YAAY,CAAC;AAOzB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAEhC,QAAM,wBAAwB,OAAO,uCAAW,SAAS;AACzD,wBAAsB,UAAU,uCAAW;AAC3C,QAAM,yBAAwB,uCAAW,eAAc;AACvD,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO;AAAA,MACL;AAAA,MACA;;AAAM,sCAAgB,YAAhB,6CAA+B,CAAA;AAAA;AAAA,MACrC,wBACI,CAAC,aAAA;;AAAa,4CAAsB,YAAtB,+CAAgC,eAAc,MAAM;AAAA,QAAC;AAAA,UACnE;AAAA,IAAA;AAAA,EAER,GAAG,CAAC,QAAQ,cAAc,cAAc,qBAAqB,CAAC;AAE9D,SAAO;AACT;"}
+{"version":3,"file":"use-deep-agent-runtime.js","sources":["../../../../agent-runtime/src/use-deep-agent-runtime.ts"],"sourcesContent":["import { type ResourceElement, resource, useResource } from '@assistant-ui/tap';\nimport { useEffect, useMemo, useRef, useState } from 'react';\nimport type { StatewireClient } from 'statewire';\nimport { createChatOutboxFlushPolicy } from './chat-outbox-policy';\nimport { isStatewireChannelTeardown } from './errors';\nimport { type DeepAgentModelContextHost, registerDeepAgentRunConfig } from './model-context';\nimport {\n  isStorageQuotaError,\n  localStorageSessionKey,\n  QuotaSafeLocalStorageSession,\n  readFailedSendStampsFromRecord,\n  readPersistedFailedSendStamps,\n  type SessionStorageDegradation,\n} from './quota-safe-local-storage-session';\nimport { createDeepAgentSendRecovery } from './send-recovery';\nimport { INITIAL_SESSION_LANE_EPOCH, nextSessionLaneEpoch } from './session-lane-scope';\nimport { readStatewireOutbox } from './statewire-held-sends';\nimport type { StatewireTransportOptions } from './statewire-transport';\nimport { isConfigSyncUnavailableRejection } from './use-deep-agent-config';\nimport {\n  deepAgentAttachId,\n  useDeepAgentThread,\n  type UseDeepAgentThreadOptions,\n} from './use-deep-agent-thread';\n\n/** The thread element `useDeepAgentThread` produces — what the host's `useAui`\n * consumes (`useAui({ thread })`). */\nexport type DeepAgentThreadElement = ReturnType<typeof useDeepAgentThread>;\n\n/**\n * Durable command-lane persistence for the thread — where the lane identity and\n * the commands still awaiting a durable verdict live, so a reload resumes the\n * lane instead of minting a new client.\n *\n * - `local-storage`: browser hosts. Backed by {@link QuotaSafeLocalStorageSession}\n *   (the upstream `LocalStorageSession` contract with Athena keys, legacy\n *   metadata, and retention). A storage failure after mounting — the origin\n *   out of quota after statewire's own sweep, a lockdown-mode write refusal —\n *   degrades the session to memory-only persistence and is reported through\n *   `onStorageDegraded` (default: one console warning); it never stops the\n *   connection. Guarded by a shared availability probe: SSR, storage-blocked\n *   iframes, and locked-down browsers keep the session process-local, exactly\n *   as before the seam existed, while an origin that is merely full mounts the\n *   session and lets it degrade. `namespace` (the sync host) and `principal`\n *   (the signed-in account) scope the stored lane: a thread id is only\n *   meaningful against the backend and the principal that minted it.\n * - `session-store`: React Native hosts pass a hydrated library store backed\n *   by AsyncStorage. Its synchronous `load()` is\n *   also the send-recovery freshness gate's view of the persisted failed lane,\n *   so a store that persists `failed` gets the same 24 h staleness rule as the\n *   browser hosts.\n * - `pending`: the principal the lane is scoped by is not known yet (the\n *   host's signed-in user is still loading). See {@link DeepAgentPendingSession}.\n * - `false`: process-local session (a reload mints a new client).\n *\n * A `local-storage` `namespace` and `principal` name one principal's lanes (and one backend's). The\n * statewire session that mounts on a lane keeps the client id, lane clocks and\n * journal it loaded there, and everything in that journal is sent under\n * whatever credential the transport holds at its next attach. So a mounted\n * session never moves to another key: when the key starts naming another\n * principal's lanes for the same thread (another account signed in under a\n * mounted chat), the runtime starts a new lane epoch\n * (`UseDeepAgentThreadOptions['laneEpoch']`). The whole statewire thread\n * remounts on the new principal's lane and attaches afresh, as that lane's own\n * client, with nothing remembered or pooled from before. The previous\n * principal's record stays where it is, with its client id and whatever it had\n * journaled and not yet delivered: that principal's next mount on this browser\n * resends it as them, and the retention sweep retires it otherwise. It is never\n * sent as anyone else. The same principal again (a token refresh, a fresh\n * persistence object) and a thread switch keep the lane as it is. A host whose\n * principal arrives after mount passes `pending` until it does, never a\n * stand-in key: moving off a stand-in would be a principal change, a second\n * attach.\n */\nexport type DeepAgentSessionPersistence =\n  | {\n      kind: 'local-storage';\n      /** The backend the lanes belong to, as a key prefix: the sync host and `:`. */\n      namespace: string;\n      /** The signed-in account the lanes belong to (`sessionPrincipal(userId)`). */\n      principal: string;\n      /**\n       * Where statewire 0.24 kept this account's lanes (`<syncUrl>:<userId>:`): a thread's lane\n       * there moves under its scoped key on mount (`adoptUnscopedLocalStorageSessions`).\n       */\n      unscopedPrefix?: string;\n      onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    }\n  | { kind: 'session-store'; store: NonNullable<StatewireTransportOptions['sessionStore']> }\n  | {\n      kind: 'storage';\n      /**\n       * The thread's mounted session storage (`ChatSessionStorage`: sealed IndexedDB, or page\n       * memory where devices keep no copies), made per thread. The surfaces that keep a chat\n       * outbox use it: the outbox is the session's outbox.\n       */\n      session: (threadId: string) => ResourceElement<StatewireClient.SessionStorage>;\n    }\n  | DeepAgentPendingSession\n  | false;\n\n/**\n * The durable lane's principal is not known yet. A lane belongs to one\n * principal and a mounted session cannot move to another lane (see\n * {@link DeepAgentSessionPersistence}), so nothing is mounted, nothing is\n * journaled and the transport stays parked — no dial — until the host passes\n * the real persistence. The park is an attach identity of its own: the attach\n * that follows makes every per-attach decision afresh (the remembered-snapshot\n * seed, the pooled hello, which the park leaves in the pool) and dials the real\n * lane once, as the thread's first attach. The park carries no connection\n * message, so it reads like a never-started chat rather than a paused one; a\n * host suspension, when one applies, wins.\n */\nexport type DeepAgentPendingSession = { kind: 'pending' };\n\n/**\n * The attach key a pending-lane park runs under. It differs from every key the\n * host passes, so the real attach after it is a new attach identity.\n */\nexport function pendingSessionAttachKey(attachKey: string | number | undefined): string {\n  return `session-pending:${attachKey ?? ''}`;\n}\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageGlobals = {\n  localStorage?: {\n    setItem(key: string, value: string): void;\n    removeItem(key: string): void;\n  };\n  navigator?: { locks?: unknown };\n};\n\n/**\n * Whether a localStorage-backed session can persist here. A write probe, not a\n * `typeof` check: storage-blocked iframes (SDK embeds under third-party-storage\n * blocking) throw from the `localStorage` accessor itself, and lockdown-mode\n * origins throw from `setItem` — each of those must mean \"stay process-local\",\n * never a crash at mount. An origin that is merely out of quota still reads\n * and takes locks, so it mounts the session: {@link QuotaSafeLocalStorageSession}\n * degrades that to memory-only persistence and recovers when room frees,\n * where staying process-local would give up cross-tab sharing for the whole\n * page load over a condition that clears.\n *\n * The Web Locks API is probed too: the session storage serializes the shared\n * record across tabs through `navigator.locks` and refuses to mount without it\n * (the same precondition as the vendor `LocalStorageSession`), so an origin\n * with localStorage but no Web Locks — older WebViews, Safari before 15.4 —\n * must also stay process-local instead of throwing at mount.\n */\nexport function canPersistDeepAgentSession(): boolean {\n  try {\n    const globals = globalThis as StorageGlobals;\n    if (!globals.navigator?.locks) return false;\n    const storage = globals.localStorage;\n    if (!storage) return false;\n    const probeKey = '__athena_statewire_session_probe__';\n    try {\n      storage.setItem(probeKey, probeKey);\n      storage.removeItem(probeKey);\n    } catch (error) {\n      return isStorageQuotaError(error);\n    }\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** A host session store's current record, or `null` when the read throws —\n * the recovery gate must never take the runtime down over a storage fault. */\nfunction loadSessionRecord(\n  store: NonNullable<StatewireTransportOptions['sessionStore']>\n): ReturnType<NonNullable<StatewireTransportOptions['sessionStore']>['load']> | null {\n  try {\n    return store.load();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * A mounted `storage.session` element that hands its store to `observe`, so the recovery\n * freshness gate can read the stored `ts` of a failed send off the record the session hydrated.\n */\nconst ObservedSessionStorage = resource(function useObservedSessionStorage({\n  element,\n  observe,\n}: {\n  element: ResourceElement<StatewireClient.SessionStorage>;\n  observe: (store: StatewireClient.SessionStorage) => void;\n}): StatewireClient.SessionStorage {\n  const store = useResource(element);\n  observe(store);\n  return store;\n});\n\n/**\n * The shared tail of every surface's transport error policy: channel teardown\n * is lifecycle noise (logged at debug), as is `config_sync_unavailable` — only\n * `config/*` writes emit it, and the host's config sync already handles it\n * through its own command promise (regionally-pinned workspaces run on\n * local-only config); everything else is a real transport error. Hosts with their own error chain\n * (paywall, telemetry, send-failure stores) end it with this so the fallback\n * logging stays uniform per surface.\n */\nexport function logUnhandledStatewireError(surface: string, error: Error): void {\n  if (isStatewireChannelTeardown(error)) {\n    console.debug(`[${surface}] statewire channel teardown:`, error);\n    return;\n  }\n  if (isConfigSyncUnavailableRejection(error)) {\n    console.debug(`[${surface}] config sync unavailable (handled by config sync):`, error);\n    return;\n  }\n  console.error(`[${surface}] statewire transport error:`, error);\n}\n\n/**\n * The imperative thread-state slice of an assistant-ui client — structural so\n * web and native `useAui` results both satisfy it. The send-recovery layer\n * reads the statewire thread extras through it (the sanctioned imperative\n * pattern: `aui.thread().getState()` inside callbacks/effects, never render).\n */\nexport interface DeepAgentThreadStateClientHost {\n  thread: () => { getState: () => { extras?: unknown } };\n  subscribe: (listener: () => void) => () => void;\n}\n\n/** Deep-agent runConfig registration on the ambient model context (see\n * {@link registerDeepAgentRunConfig}). */\nexport interface DeepAgentRunConfigRegistration {\n  /**\n   * Builds the `runConfig` that drives the run. The core pulls it when the\n   * model context notifies (mount and each key change); the server reads that\n   * synced value at command admission. The per-render ref makes each pull use\n   * the latest closure but does not trigger a pull itself.\n   */\n  get: () => Record<string, unknown>;\n  /**\n   * Re-registers the provider and notifies model-context sync when this value\n   * changes (reference equality). Include getter inputs that can change while\n   * mounted; they reach the server only after a key change triggers a pull.\n   */\n  key?: unknown;\n  /**\n   * Notifies when a getter input changes outside React, so model-context sync\n   * pulls `get` at once, before a command sent right after leaves (Olympus\n   * stages a send's named agents right before `composer.send`). Subscribed\n   * when the provider registers; a key change subscribes again.\n   */\n  subscribe?: (listener: () => void) => () => void;\n}\n\nexport interface UseDeepAgentRuntimeOptions<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n> extends Omit<UseDeepAgentThreadOptions, 'storage' | 'sessionStore' | 'laneEpoch'> {\n  /** Host surface tag for the shared fallback error logging (e.g.\n   * `'AthenaDeepAgent'`, `'AthenaSDK'`, `'ChromeStatewire'`). */\n  surface: string;\n  /** Durable command-lane persistence; defaults to process-local. */\n  session?: DeepAgentSessionPersistence;\n  /**\n   * Builds the host's assistant-ui client from the thread element — pass the\n   * platform `useAui` (web hosts from `@assistant-ui/react`, React Native\n   * hosts from `@assistant-ui/react-native`; this package imports neither).\n   * Called unconditionally on every render, so it MUST be (or call) a hook\n   * following the rules of hooks — define it at module scope with a `use*`\n   * name: `const useHostClient = (thread: DeepAgentThreadElement) =>\n   * useAui({ thread })`.\n   */\n  useClient: (thread: DeepAgentThreadElement) => TClient;\n  /** Registers the deep-agent runConfig on the client's model context. Hosts\n   * that register elsewhere (e.g. a bridge component mounted under the\n   * provider) omit it. */\n  runConfig?: DeepAgentRunConfigRegistration;\n  /**\n   * Called right before send recovery dispatches a failed send again, with its\n   * message id: the host puts back the per-send context that message was sent\n   * with (Olympus stages the agents it named) before its command leaves. A\n   * promise holds that retry (and the ones behind it) until it settles, then\n   * the host is asked again: it can't put the context back while a send with\n   * another one is still on its way (see `DeepAgentSendRecoveryOptions.beforeRetry`).\n   * A function returned is called when the retry does not go after all.\n   */\n  onBeforeSendRetry?: (messageId: string) => void | PromiseLike<void> | (() => void);\n  /**\n   * Whether the app is in front (a visible tab, a focused desktop window). While it says no, the\n   * message sends a flush offers as queued before this page mounted are held, so a hidden tab never\n   * sends a backlog; the visible tab's chat outbox counts them down and sends them. Omitted, every\n   * tab sends them.\n   */\n  foreground?: { get(): boolean };\n}\n\nfunction isPromiseLike(value: unknown): value is PromiseLike<unknown> {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    typeof (value as { then?: unknown }).then === 'function'\n  );\n}\n\n/**\n * The configurable deep-agent statewire runtime — the one hook every Athena\n * chat surface (Olympus, `@athenaintel/react` SDK, Chrome extension, Office\n * add-in, mobile) mounts its assistant-ui client through.\n *\n * Composes the pieces every surface previously wired by hand:\n * `useDeepAgentThread` (attach lifecycle, auth parking, lane projection,\n * connection/running observers), durable session persistence with the shared\n * availability guard, transport-level send recovery (failed sends the server\n * never judged auto-retry under their original message id — `send-recovery.ts`),\n * the platform client via `useClient`, and the\n * runConfig model-context registration on provider notifications. Everything\n * host-specific — auth headers, run-config building, error policy, adapters,\n * diagnostics recorders — stays an option, so per-surface behavior is\n * configuration, not a fork.\n */\nexport function useDeepAgentRuntime<\n  TClient extends DeepAgentModelContextHost & DeepAgentThreadStateClientHost,\n>(options: UseDeepAgentRuntimeOptions<TClient>): TClient {\n  const {\n    surface,\n    session = false,\n    useClient,\n    runConfig,\n    onBeforeSendRetry,\n    foreground,\n    onError,\n    onStateChange,\n    onCommandChange,\n    ...threadOptions\n  } = options;\n\n  // Probed once per mount, like every browser host did individually: an origin\n  // that cannot persist stays process-local for the mount's lifetime.\n  const [canPersistLocalSession] = useState(canPersistDeepAgentSession);\n\n  // Per-render refs so the transport never remounts on a new closure identity\n  // and always reads the latest policy.\n  const onErrorRef = useRef(onError);\n  onErrorRef.current = onError;\n  const surfaceRef = useRef(surface);\n  surfaceRef.current = surface;\n  const onStateChangeRef = useRef(onStateChange);\n  onStateChangeRef.current = onStateChange;\n  const onCommandChangeRef = useRef(onCommandChange);\n  onCommandChangeRef.current = onCommandChange;\n  const foregroundRef = useRef(foreground);\n  foregroundRef.current = foreground;\n  const holdsHiddenReloads = foreground !== undefined;\n  const diagnosticsRef = useRef(threadOptions.diagnostics);\n  diagnosticsRef.current = threadOptions.diagnostics;\n  const onBeforeSendRetryRef = useRef(onBeforeSendRetry);\n  onBeforeSendRetryRef.current = onBeforeSendRetry;\n  const clientRef = useRef<TClient | null>(null);\n\n  // Where the persisted session record lives, for the recovery freshness gate\n  // (read per sweep — undefined means \"no persistence, everything is fresh\").\n  // The mounted `kind: 'storage'` session's store, so the gate reads the stored `ts` of a\n  // failed send there too (a sealed IndexedDB record has no synchronous reader of its own).\n  const storageSessionRef = useRef<StatewireClient.SessionStorage | null>(null);\n  const observeStorageSession = useRef((store: StatewireClient.SessionStorage) => {\n    storageSessionRef.current = store;\n  }).current;\n  const failureStampsRef = useRef<(() => ReadonlyMap<string, number> | null) | undefined>(\n    undefined\n  );\n  failureStampsRef.current =\n    session === false || session.kind === 'pending'\n      ? undefined\n      : session.kind === 'local-storage'\n        ? canPersistLocalSession\n          ? () =>\n              readPersistedFailedSendStamps(\n                localStorageSessionKey({\n                  namespace: session.namespace,\n                  principal: session.principal,\n                  threadId: threadOptions.threadId,\n                })\n              )\n          : undefined\n        : session.kind === 'session-store'\n          ? () => readFailedSendStampsFromRecord(loadSessionRecord(session.store))\n          : session.kind === 'storage'\n            ? () => {\n                const store = storageSessionRef.current;\n                return store ? readFailedSendStampsFromRecord(loadSessionRecord(store)) : null;\n              }\n            : undefined;\n\n  // A pending lane parks the thread under an attach identity of its own (see\n  // `DeepAgentPendingSession`), so the attach once the lane is known is new.\n  const sessionPending = session !== false && session.kind === 'pending';\n  const attachKey = sessionPending\n    ? pendingSessionAttachKey(threadOptions.attachKey)\n    : threadOptions.attachKey;\n\n  // The lane's scope, as the host's `key` names it: whose lanes this mount\n  // runs on. A key that starts naming another principal's lanes starts a new\n  // lane epoch, which remounts the whole thread on the new lane instead of\n  // moving the mounted session there (see `DeepAgentSessionPersistence`).\n  // Tracked whether or not this origin can persist: a process-local session\n  // holds the previous principal's journal in memory just the same. A pending\n  // lane keeps the last known scope, so a sign-out and a sign-in as someone\n  // else with a gap between them is still a change.\n  const laneNamespace =\n    session !== false && session.kind === 'local-storage' ? session.namespace : null;\n  const lanePrincipal =\n    session !== false && session.kind === 'local-storage' ? session.principal : null;\n  const laneKey = useMemo(\n    () =>\n      laneNamespace === null || lanePrincipal === null\n        ? null\n        : (threadId: string) =>\n            localStorageSessionKey({\n              namespace: laneNamespace,\n              principal: lanePrincipal,\n              threadId,\n            }),\n    [laneNamespace, lanePrincipal]\n  );\n  const [laneEpochState, setLaneEpochState] = useState(() =>\n    nextSessionLaneEpoch({\n      previous: INITIAL_SESSION_LANE_EPOCH,\n      threadId: threadOptions.threadId,\n      key: laneKey,\n    })\n  );\n  const nextLaneEpochState = nextSessionLaneEpoch({\n    previous: laneEpochState,\n    threadId: threadOptions.threadId,\n    key: laneKey,\n  });\n  // React's derived-state update: re-renders at once with the new epoch, and\n  // this render already uses it, so no render pairs the new key with the\n  // mounted thread.\n  if (nextLaneEpochState !== laneEpochState) setLaneEpochState(nextLaneEpochState);\n  const laneEpoch = nextLaneEpochState.epoch;\n\n  // Send recovery, keyed by attach identity exactly like the thread's session\n  // (a switch, re-attach or new lane epoch gets fresh hydration gating and\n  // retry budgets, so it never re-dispatches a previous principal's failed\n  // sends). The controller re-dispatches failed sends the server never judged;\n  // see `send-recovery.ts` for the contract.\n  const attachId = deepAgentAttachId({ threadId: threadOptions.threadId, attachKey, laneEpoch });\n  // biome-ignore lint/correctness/useExhaustiveDependencies: keyed by attach identity on purpose; every other input is read through a per-render ref.\n  const sendRecovery = useMemo(\n    () =>\n      createDeepAgentSendRecovery({\n        outbox: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          return readStatewireOutbox(client.thread().getState().extras);\n        },\n        failureStamps: () => failureStampsRef.current?.() ?? null,\n        diagnostics: () => diagnosticsRef.current,\n        beforeRetry: (messageId) => onBeforeSendRetryRef.current?.(messageId),\n      }),\n    [attachId]\n  );\n  useEffect(() => () => sendRecovery.dispose(), [sendRecovery]);\n  const sendRecoveryRef = useRef(sendRecovery);\n  sendRecoveryRef.current = sendRecovery;\n\n  const thread = useDeepAgentThread({\n    ...threadOptions,\n    ...(attachKey !== undefined && { attachKey }),\n    laneEpoch,\n    // Parked without a message (a host suspension, when one applies, wins):\n    // nothing dials and nothing journals until the lane is known. What paints\n    // the first frame is the real attach's to report, not the park's.\n    ...(sessionPending && {\n      suspended: threadOptions.suspended || {},\n      onAttachSource: undefined,\n    }),\n    // A pooled dial for the thread is the real attach's to take: a park that\n    // only waits for the lane neither takes nor discards it. A host suspension\n    // still discards it, as it does without a pending lane.\n    ...(sessionPending && !threadOptions.suspended && { prewarmPool: undefined }),\n    ...(session !== false &&\n      session.kind === 'local-storage' &&\n      canPersistLocalSession && {\n        storage: {\n          session: QuotaSafeLocalStorageSession({\n            threadId: threadOptions.threadId,\n            namespace: session.namespace,\n            principal: session.principal,\n            ...(session.unscopedPrefix !== undefined && { unscopedPrefix: session.unscopedPrefix }),\n            ...(session.onStorageDegraded === undefined\n              ? {}\n              : { onStorageDegraded: session.onStorageDegraded }),\n          }),\n        },\n      }),\n    ...(session !== false && session.kind === 'session-store' && { sessionStore: session.store }),\n    ...(session !== false &&\n      session.kind === 'storage' && {\n        storage: {\n          session: ObservedSessionStorage({\n            element: session.session(threadOptions.threadId),\n            observe: observeStorageSession,\n          }),\n        },\n      }),\n    ...(holdsHiddenReloads && {\n      onFlush: createChatOutboxFlushPolicy({\n        foreground: () => foregroundRef.current?.get() ?? true,\n        outbox: () => {\n          const client = clientRef.current;\n          if (!client) return null;\n          const outbox = (client.thread().getState().extras as { outbox?: { hold?: unknown } } | undefined)?.outbox;\n          return outbox && typeof outbox.hold === 'function' ? (outbox as { hold(id: string): void }) : null;\n        },\n      }),\n    }),\n    onStateChange: (state, ctx) => {\n      onStateChangeRef.current?.(state, ctx);\n    },\n    // A durable `settled` update is acked once the returned promise resolves:\n    // the host's handler and send recovery both finish before it is.\n    onCommandChange: (update, ctx) => {\n      const recovered = sendRecoveryRef.current.onCommandChange(update, ctx);\n      const observed = onCommandChangeRef.current?.(update, ctx);\n      if (recovered === undefined && !isPromiseLike(observed)) return observed;\n      const settled = Promise.all([recovered, observed]).then(() => undefined);\n      // Only a durable update's promise is awaited; never leave one unhandled.\n      settled.catch(() => undefined);\n      return settled;\n    },\n    onError: (error) => {\n      const handler = onErrorRef.current;\n      if (handler) {\n        handler(error);\n        return;\n      }\n      logUnhandledStatewireError(surfaceRef.current, error);\n    },\n  });\n\n  const client = useClient(thread);\n  clientRef.current = client;\n\n\n  // Commands travel bare, so the runConfig that drives the run rides the\n  // ambient model context: `contextSync: 'command-send'` mirrors it to the\n  // server, which reads `config.runConfig` at command admission. The core pulls\n  // on model-context notifications; the per-render ref ensures each pull uses\n  // the latest closure but does not trigger a pull itself.\n  const getRunConfigRef = useRef(runConfig?.get);\n  getRunConfigRef.current = runConfig?.get;\n  const hasRunConfig = runConfig !== undefined;\n  const runConfigKey = runConfig?.key;\n  // A host's own notifications (inputs that change outside React) pull too.\n  const subscribeRunConfigRef = useRef(runConfig?.subscribe);\n  subscribeRunConfigRef.current = runConfig?.subscribe;\n  const hasRunConfigSubscribe = runConfig?.subscribe !== undefined;\n  useEffect(() => {\n    if (!hasRunConfig) return undefined;\n    return registerDeepAgentRunConfig(\n      client,\n      () => getRunConfigRef.current?.() ?? {},\n      hasRunConfigSubscribe\n        ? (listener) => subscribeRunConfigRef.current?.(listener) ?? (() => {})\n        : undefined\n    );\n  }, [client, hasRunConfig, runConfigKey, hasRunConfigSubscribe]);\n\n  return client;\n}\n\n"],"names":["client"],"mappings":";;;;;;;;;;;AAuHO,SAAS,wBAAwB,WAAgD;AACtF,SAAO,mBAAmB,aAAa,EAAE;AAC3C;AA6BO,SAAS,6BAAsC;;AACpD,MAAI;AACF,UAAM,UAAU;AAChB,QAAI,GAAC,aAAQ,cAAR,mBAAmB,OAAO,QAAO;AACtC,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,QAAS,QAAO;AACrB,UAAM,WAAW;AACjB,QAAI;AACF,cAAQ,QAAQ,UAAU,QAAQ;AAClC,cAAQ,WAAW,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,aAAO,oBAAoB,KAAK;AAAA,IAClC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,SAAS,kBACP,OACmF;AACnF,MAAI;AACF,WAAO,MAAM,KAAA;AAAA,EACf,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMA,MAAM,yBAAyB,SAAS,SAAS,0BAA0B;AAAA,EACzE;AAAA,EACA;AACF,GAGmC;AACjC,QAAM,QAAQ,YAAY,OAAO;AACjC,UAAQ,KAAK;AACb,SAAO;AACT,CAAC;AAWM,SAAS,2BAA2B,SAAiB,OAAoB;AAC9E,MAAI,2BAA2B,KAAK,GAAG;AACrC,YAAQ,MAAM,IAAI,OAAO,iCAAiC,KAAK;AAC/D;AAAA,EACF;AACA,MAAI,iCAAiC,KAAK,GAAG;AAC3C,YAAQ,MAAM,IAAI,OAAO,uDAAuD,KAAK;AACrF;AAAA,EACF;AACA,UAAQ,MAAM,IAAI,OAAO,gCAAgC,KAAK;AAChE;AA+EA,SAAS,cAAc,OAA+C;AACpE,SACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAA6B,SAAS;AAElD;AAkBO,SAAS,oBAEd,SAAuD;AACvD,QAAM;AAAA,IACJ;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EAAA,IACD;AAIJ,QAAM,CAAC,sBAAsB,IAAI,SAAS,0BAA0B;AAIpE,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,mBAAmB,OAAO,aAAa;AAC7C,mBAAiB,UAAU;AAC3B,QAAM,qBAAqB,OAAO,eAAe;AACjD,qBAAmB,UAAU;AAC7B,QAAM,gBAAgB,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,qBAAqB,eAAe;AAC1C,QAAM,iBAAiB,OAAO,cAAc,WAAW;AACvD,iBAAe,UAAU,cAAc;AACvC,QAAM,uBAAuB,OAAO,iBAAiB;AACrD,uBAAqB,UAAU;AAC/B,QAAM,YAAY,OAAuB,IAAI;AAM7C,QAAM,oBAAoB,OAA8C,IAAI;AAC5E,QAAM,wBAAwB,OAAO,CAAC,UAA0C;AAC9E,sBAAkB,UAAU;AAAA,EAC9B,CAAC,EAAE;AACH,QAAM,mBAAmB;AAAA,IACvB;AAAA,EAAA;AAEF,mBAAiB,UACf,YAAY,SAAS,QAAQ,SAAS,YAClC,SACA,QAAQ,SAAS,kBACf,yBACE,MACE;AAAA,IACE,uBAAuB;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,UAAU,cAAc;AAAA,IAAA,CACzB;AAAA,EAAA,IAEL,SACF,QAAQ,SAAS,kBACf,MAAM,+BAA+B,kBAAkB,QAAQ,KAAK,CAAC,IACrE,QAAQ,SAAS,YACf,MAAM;AACJ,UAAM,QAAQ,kBAAkB;AAChC,WAAO,QAAQ,+BAA+B,kBAAkB,KAAK,CAAC,IAAI;AAAA,EAC5E,IACA;AAIZ,QAAM,iBAAiB,YAAY,SAAS,QAAQ,SAAS;AAC7D,QAAM,YAAY,iBACd,wBAAwB,cAAc,SAAS,IAC/C,cAAc;AAUlB,QAAM,gBACJ,YAAY,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,YAAY;AAC9E,QAAM,gBACJ,YAAY,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,YAAY;AAC9E,QAAM,UAAU;AAAA,IACd,MACE,kBAAkB,QAAQ,kBAAkB,OACxC,OACA,CAAC,aACC,uBAAuB;AAAA,MACrB,WAAW;AAAA,MACX,WAAW;AAAA,MACX;AAAA,IAAA,CACD;AAAA,IACT,CAAC,eAAe,aAAa;AAAA,EAAA;AAE/B,QAAM,CAAC,gBAAgB,iBAAiB,IAAI;AAAA,IAAS,MACnD,qBAAqB;AAAA,MACnB,UAAU;AAAA,MACV,UAAU,cAAc;AAAA,MACxB,KAAK;AAAA,IAAA,CACN;AAAA,EAAA;AAEH,QAAM,qBAAqB,qBAAqB;AAAA,IAC9C,UAAU;AAAA,IACV,UAAU,cAAc;AAAA,IACxB,KAAK;AAAA,EAAA,CACN;AAID,MAAI,uBAAuB,eAAgB,mBAAkB,kBAAkB;AAC/E,QAAM,YAAY,mBAAmB;AAOrC,QAAM,WAAW,kBAAkB,EAAE,UAAU,cAAc,UAAU,WAAW,WAAW;AAE7F,QAAM,eAAe;AAAA,IACnB,MACE,4BAA4B;AAAA,MAC1B,QAAQ,MAAM;AACZ,cAAMA,UAAS,UAAU;AACzB,YAAI,CAACA,QAAQ,QAAO;AACpB,eAAO,oBAAoBA,QAAO,OAAA,EAAS,SAAA,EAAW,MAAM;AAAA,MAC9D;AAAA,MACA,eAAe,MAAA;;AAAM,uCAAiB,YAAjB,8CAAgC;AAAA;AAAA,MACrD,aAAa,MAAM,eAAe;AAAA,MAClC,aAAa,CAAC;;AAAc,0CAAqB,YAArB,8CAA+B;AAAA;AAAA,IAAS,CACrE;AAAA,IACH,CAAC,QAAQ;AAAA,EAAA;AAEX,YAAU,MAAM,MAAM,aAAa,WAAW,CAAC,YAAY,CAAC;AAC5D,QAAM,kBAAkB,OAAO,YAAY;AAC3C,kBAAgB,UAAU;AAE1B,QAAM,SAAS,mBAAmB;AAAA,IAChC,GAAG;AAAA,IACH,GAAI,cAAc,UAAa,EAAE,UAAA;AAAA,IACjC;AAAA;AAAA;AAAA;AAAA,IAIA,GAAI,kBAAkB;AAAA,MACpB,WAAW,cAAc,aAAa,CAAA;AAAA,MACtC,gBAAgB;AAAA,IAAA;AAAA;AAAA;AAAA;AAAA,IAKlB,GAAI,kBAAkB,CAAC,cAAc,aAAa,EAAE,aAAa,OAAA;AAAA,IACjE,GAAI,YAAY,SACd,QAAQ,SAAS,mBACjB,0BAA0B;AAAA,MACxB,SAAS;AAAA,QACP,SAAS,6BAA6B;AAAA,UACpC,UAAU,cAAc;AAAA,UACxB,WAAW,QAAQ;AAAA,UACnB,WAAW,QAAQ;AAAA,UACnB,GAAI,QAAQ,mBAAmB,UAAa,EAAE,gBAAgB,QAAQ,eAAA;AAAA,UACtE,GAAI,QAAQ,sBAAsB,SAC9B,CAAA,IACA,EAAE,mBAAmB,QAAQ,kBAAA;AAAA,QAAkB,CACpD;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,YAAY,SAAS,QAAQ,SAAS,mBAAmB,EAAE,cAAc,QAAQ,MAAA;AAAA,IACrF,GAAI,YAAY,SACd,QAAQ,SAAS,aAAa;AAAA,MAC5B,SAAS;AAAA,QACP,SAAS,uBAAuB;AAAA,UAC9B,SAAS,QAAQ,QAAQ,cAAc,QAAQ;AAAA,UAC/C,SAAS;AAAA,QAAA,CACV;AAAA,MAAA;AAAA,IACH;AAAA,IAEJ,GAAI,sBAAsB;AAAA,MACxB,SAAS,4BAA4B;AAAA,QACnC,YAAY,MAAA;;AAAM,sCAAc,YAAd,mBAAuB,UAAS;AAAA;AAAA,QAClD,QAAQ,MAAM;;AACZ,gBAAMA,UAAS,UAAU;AACzB,cAAI,CAACA,QAAQ,QAAO;AACpB,gBAAM,UAAUA,aAAO,OAAA,EAAS,SAAA,EAAW,WAA3BA,mBAAmF;AACnG,iBAAO,UAAU,OAAO,OAAO,SAAS,aAAc,SAAwC;AAAA,QAChG;AAAA,MAAA,CACD;AAAA,IAAA;AAAA,IAEH,eAAe,CAAC,OAAO,QAAQ;;AAC7B,6BAAiB,YAAjB,0CAA2B,OAAO;AAAA,IACpC;AAAA;AAAA;AAAA,IAGA,iBAAiB,CAAC,QAAQ,QAAQ;;AAChC,YAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,GAAG;AACrE,YAAM,YAAW,wBAAmB,YAAnB,4CAA6B,QAAQ;AACtD,UAAI,cAAc,UAAa,CAAC,cAAc,QAAQ,EAAG,QAAO;AAChE,YAAM,UAAU,QAAQ,IAAI,CAAC,WAAW,QAAQ,CAAC,EAAE,KAAK,MAAM,MAAS;AAEvE,cAAQ,MAAM,MAAM,MAAS;AAC7B,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,UAAU;AAClB,YAAM,UAAU,WAAW;AAC3B,UAAI,SAAS;AACX,gBAAQ,KAAK;AACb;AAAA,MACF;AACA,iCAA2B,WAAW,SAAS,KAAK;AAAA,IACtD;AAAA,EAAA,CACD;AAED,QAAM,SAAS,UAAU,MAAM;AAC/B,YAAU,UAAU;AAQpB,QAAM,kBAAkB,OAAO,uCAAW,GAAG;AAC7C,kBAAgB,UAAU,uCAAW;AACrC,QAAM,eAAe,cAAc;AACnC,QAAM,eAAe,uCAAW;AAEhC,QAAM,wBAAwB,OAAO,uCAAW,SAAS;AACzD,wBAAsB,UAAU,uCAAW;AAC3C,QAAM,yBAAwB,uCAAW,eAAc;AACvD,YAAU,MAAM;AACd,QAAI,CAAC,aAAc,QAAO;AAC1B,WAAO;AAAA,MACL;AAAA,MACA;;AAAM,sCAAgB,YAAhB,6CAA+B,CAAA;AAAA;AAAA,MACrC,wBACI,CAAC,aAAA;;AAAa,4CAAsB,YAAtB,+CAAgC,eAAc,MAAM;AAAA,QAAC;AAAA,UACnE;AAAA,IAAA;AAAA,EAER,GAAG,CAAC,QAAQ,cAAc,cAAc,qBAAqB,CAAC;AAE9D,SAAO;AACT;"}

package/dist/agent-runtime/src/use-deep-agent-thread.cjs

@@ -16,6 +16,7 @@ const statewireState = require("./statewire-state.cjs");
 const statewireSuspended = require("./statewire-suspended.cjs");
 const statewireTransport = require("./statewire-transport.cjs");
 const threadSnapshotCache = require("./thread-snapshot-cache.cjs");
+const runSend = require("./run-send.cjs");
 function deepAgentAttachId({
   threadId,
   attachKey,
@@ -66,6 +67,7 @@ function useDeepAgentThread({
   onError,
   onStateChange,
   onCommandChange,
+  onFlush,
   onRawConnectionChange,
   onConnectionChange,
   onRunningChange,
@@ -92,6 +94,9 @@ function useDeepAgentThread({
   const onStateChangeRef = require$$0.useRef(onStateChange);
   onStateChangeRef.current = onStateChange;
   const onCommandChangeRef = require$$0.useRef(onCommandChange);
+  const onFlushRef = require$$0.useRef(onFlush);
+  onFlushRef.current = onFlush;
+  const hasOnFlush = onFlush !== void 0;
   onCommandChangeRef.current = onCommandChange;
   const onRawConnectionChangeRef = require$$0.useRef(onRawConnectionChange);
   onRawConnectionChangeRef.current = onRawConnectionChange;
@@ -425,6 +430,12 @@ function useDeepAgentThread({
           },
           laneHistory: laneHistoryRef.current,
           sessionStore,
+          ...hasOnFlush && {
+            onFlush: (flush) => {
+              var _a2;
+              return (_a2 = onFlushRef.current) == null ? void 0 : _a2.call(onFlushRef, flush);
+            }
+          },
           onAuthResolve: (ctx) => {
             var _a2;
             return (_a2 = diagnosticsRef.current) == null ? void 0 : _a2.observeAuthResolve(ctx);
@@ -444,6 +455,9 @@ function useDeepAgentThread({
     // former `runs: true` opt-in is gone) — the converter only maps app-owned
     // keys, including the `run/stop` runId stamp the lib projects itself.
     converter: threadConverter,
+    // Every command folds here first: the tray marks an auto send the host
+    // queued from this record (`wasSentAsAuto`).
+    optimistic: (_draft, command) => runSend.noteAutoRunSend(command),
     // Native message editing: an edited turn is resubmitted as a `run/edit`
     // command, and the deep-agent backend rewinds the checkpointed thread to
     // the edited message's parent before appending (route `plan_rewind`).
@@ -471,10 +485,11 @@ function useDeepAgentThread({
       })
     },
     ...(onCommandChange || diagnostics) && {
+      // The returned promise acks a durable `settled` update once it resolves.
       onCommandChange: ((update, ctx) => {
         var _a2, _b;
         (_a2 = diagnosticsRef.current) == null ? void 0 : _a2.observeCommand(update);
-        (_b = onCommandChangeRef.current) == null ? void 0 : _b.call(onCommandChangeRef, update, ctx);
+        return (_b = onCommandChangeRef.current) == null ? void 0 : _b.call(onCommandChangeRef, update, ctx);
       })
     },
     ...onRawConnectionChange && {