@athenaintel/react 0.57.2 → 0.60.0

package/dist/agent-runtime/src/quota-safe-local-storage-session.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"quota-safe-local-storage-session.cjs","sources":["../../../../agent-runtime/src/quota-safe-local-storage-session.ts"],"sourcesContent":["import { resource, useResource } from \"@assistant-ui/tap\";\nimport type { StatewireClient, StatewireProtocol } from \"statewire\";\nimport { KeyValueSessionStorage } from \"statewire/storage\";\nimport { useCallback, useEffect, useMemo, useRef } from \"react\";\nimport {\n  type DeepAgentSessionLaneScope,\n  isSameSessionLaneScope,\n} from \"./session-lane-scope\";\nimport { DEEP_AGENT_STATEWIRE_PROTOCOL } from \"./statewire-transport\";\n\nconst SESSION_PREFIX = \"aui:statewire-session:\";\nconst SESSION_LOCK_PREFIX = \"aui:statewire-session-lock:\";\nconst SESSION_ACTIVE_PREFIX = \"aui:statewire-session-active:\";\nconst DAY_MS = 24 * 60 * 60 * 1000;\n/** The stored-record formats the statewire this build ships reads (it writes 3). */\nconst READABLE_STORAGE_VERSIONS: ReadonlySet<unknown> = new Set([1, 2, 3]);\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageLike = {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n  key(index: number): string | null;\n  readonly length: number;\n};\n\ntype LockGrant = object | null;\n\n/** The Web Locks API surface the session uses (`navigator.locks`). */\ntype LockManagerLike = {\n  request<T>(\n    name: string,\n    callback: (lock: LockGrant) => T | Promise<T>\n  ): Promise<T>;\n  request<T>(\n    name: string,\n    options: { mode?: \"shared\" | \"exclusive\"; ifAvailable?: boolean },\n    callback: (lock: LockGrant) => T | Promise<T>\n  ): Promise<T>;\n};\n\ntype StorageEventLike = { key: string | null };\n\ntype BrowserGlobals = {\n  localStorage?: StorageLike;\n  navigator?: { locks?: LockManagerLike };\n  addEventListener?: (\n    type: \"storage\",\n    listener: (event: StorageEventLike) => void\n  ) => void;\n  removeEventListener?: (\n    type: \"storage\",\n    listener: (event: StorageEventLike) => void\n  ) => void;\n};\n\nconst browserGlobals = globalThis as BrowserGlobals;\n\n/** A persisted session record: per-lane failed entries (a pre-lane record carried them at the root). */\ntype SessionRecordLike = {\n  failed?: unknown;\n  lanes?: Record<string, { failed?: unknown } | null | undefined> | null;\n};\n\nexport function readPersistedFailedSendStamps(\n  sessionKey: string\n): ReadonlyMap<string, number> | null {\n  const storage = browserGlobals.localStorage;\n  if (!storage) return null;\n  let record: SessionRecordLike | null;\n  try {\n    const raw = storage.getItem(SESSION_PREFIX + sessionKey);\n    record =\n      raw === null ? null : (JSON.parse(raw) as SessionRecordLike | null);\n  } catch {\n    return null;\n  }\n  return readFailedSendStampsFromRecord(record);\n}\n\n/**\n * Send stamps (message id → epoch ms of the original send) off an already\n * loaded session record's failed lane — the storage-agnostic half of\n * {@link readPersistedFailedSendStamps}, for hosts whose session store is not\n * localStorage (the React Native AsyncStorage-backed store reads its record\n * synchronously through `SessionStorage.load()`).\n *\n * Returns `null` for no record (every failed entry then counts as fresh) and\n * an empty map for a record without failures.\n */\nexport function readFailedSendStampsFromRecord(\n  record: SessionRecordLike | null | undefined\n): ReadonlyMap<string, number> | null {\n  if (!record || typeof record !== \"object\") return null;\n  const stamps = new Map<string, number>();\n  const lanes =\n    record.lanes && typeof record.lanes === \"object\" ? record.lanes : {};\n  const failed = [\n    ...(Array.isArray(record.failed) ? record.failed : []),\n    ...Object.values(lanes).flatMap((lane) =>\n      Array.isArray(lane?.failed) ? lane.failed : []\n    ),\n  ];\n  for (const entry of failed) {\n    const failed = entry as {\n      ts?: unknown;\n      params?: readonly { message?: { id?: unknown } }[];\n    } | null;\n    const messageId = failed?.params?.[0]?.message?.id;\n    if (typeof messageId === \"string\" && typeof failed?.ts === \"number\") {\n      stamps.set(messageId, failed.ts);\n    }\n  }\n  return stamps;\n}\n\n/** A storage operation the session survived by degrading instead of failing. */\nexport type SessionStorageDegradation = {\n  operation:\n    | \"getItem\"\n    | \"setItem\"\n    | \"removeItem\"\n    | \"getAllKeys\"\n    | \"withUnused\"\n    /** The lock manager refused the transaction fence; it ran unfenced. */\n    | \"lock\"\n    /**\n     * The stored record is one this build cannot read (not JSON, or a newer\n     * storage version): served as absent, and the key is shielded from being\n     * overwritten so the record survives this tab.\n     */\n    | \"record\"\n    /** statewire's own storage failure (a structurally invalid stored record). */\n    | \"session\"\n    /**\n     * Queued commands persisted by an earlier statewire build no longer fit\n     * the current wire/protocol range: parked in the lane's failed list (the\n     * send-recovery sweep re-dispatches them) instead of blocking the mount.\n     */\n    | \"migrate\";\n  key: string;\n  error: unknown;\n};\n\ntype ProducedRange = NonNullable<StatewireClient.SessionCommand[\"produced\"]>;\n\nconst inRange = (value: string, range: StatewireProtocol.Range) =>\n  value >= (range.minVersion ?? range.version) && value <= range.version;\n\n/** Mirrors statewire's own stored-command compatibility check. */\nconst storedCommandCompatible = (\n  protocol: string,\n  command: StatewireClient.SessionCommand,\n  current: ProducedRange\n): boolean => {\n  if (\n    !command.produced ||\n    !inRange(command.produced.wire.version, current.wire)\n  )\n    return false;\n  if (current.protocols === \"*\") return true;\n  if (command.produced.protocols === \"*\") return false;\n  const produced = command.produced.protocols.find((p) => p.name === protocol);\n  const offer = current.protocols.find((p) => p.name === protocol);\n  return (\n    produced !== undefined &&\n    offer !== undefined &&\n    inRange(produced.version, offer)\n  );\n};\n\n/**\n * The oldest wire whose stored statements the current client still replays.\n * Bundled clients before #45143 offered 2026-09-13 through 2026-09-30 and\n * stamped every queued statement with 2026-09-13. The durable statement grammar\n * (protocol, method, params, meta, seq) is the same on 2026-09-30; only\n * frame-level context differs. So those statements ride the current wire\n * unchanged, while the network offer stays native 2026-09-30 only.\n */\nexport const STORED_STATEMENT_WIRE_FLOOR = \"2026-09-13\";\n\n/** A stored command the current wire replays as-is: re-stamp, don't park. */\nconst replayableOnCurrentWire = (\n  protocol: string,\n  command: StatewireClient.SessionCommand,\n  current: ProducedRange\n): boolean =>\n  command.produced !== undefined &&\n  inRange(command.produced.wire.version, {\n    version: current.wire.version,\n    minVersion: STORED_STATEMENT_WIRE_FLOOR,\n  }) &&\n  storedCommandCompatible(\n    protocol,\n    { ...command, produced: { ...command.produced, wire: current.wire } },\n    current\n  );\n\n/**\n * statewire's `migrate` for a record whose queued commands were produced by\n * an earlier build. A command whose statement the current wire still replays\n * ({@link STORED_STATEMENT_WIRE_FLOOR}: an approval's `run/input` saved by a\n * previous bundled client, say) stays queued, re-stamped with the current\n * range, so it is delivered with its original seq. Every other incompatible\n * command leaves its lane's queue and is\n * retained as a `lost`/`session-lost` failed send re-stamped with the current\n * range. Client identity, lane clocks, compatible commands and existing failed\n * history are untouched, so the mount proceeds and the send-recovery sweep\n * (or the user, via the failed-send UI) re-dispatches the parked sends under\n * the negotiated format instead of the runtime throwing before it dials.\n *\n * Returns the record itself when nothing needed migrating, and the count of\n * parked commands otherwise.\n */\nexport function parkIncompatibleSessionCommands(\n  record: StatewireClient.SessionRecord,\n  current: ProducedRange,\n  now: number = Date.now()\n): { record: StatewireClient.SessionRecord; parked: number; restamped: number } {\n  let parked = 0;\n  let restamped = 0;\n  const lanes: Record<string, StatewireClient.SessionLane> = {};\n  for (const [protocol, lane] of Object.entries(record.lanes)) {\n    const kept: StatewireClient.SessionCommand[] = [];\n    const failed: StatewireClient.FailedCommand[] = [];\n    let laneRestamped = 0;\n    for (const command of lane.commands) {\n      if (storedCommandCompatible(protocol, command, current)) {\n        kept.push(command);\n        continue;\n      }\n      if (replayableOnCurrentWire(protocol, command, current)) {\n        kept.push({ ...command, produced: current });\n        laneRestamped += 1;\n        continue;\n      }\n      failed.push({\n        protocol,\n        produced: current,\n        command: command.method,\n        params: command.params,\n        ...(command.meta !== undefined && { meta: command.meta }),\n        failure: { fate: \"lost\", cause: \"session-lost\" },\n        ts: now,\n        seq: command.seq,\n      });\n    }\n    parked += failed.length;\n    restamped += laneRestamped;\n    lanes[protocol] =\n      failed.length === 0 && laneRestamped === 0\n        ? lane\n        : {\n            ...lane,\n            commands: kept,\n            ...((failed.length > 0 || lane.failed !== undefined) && {\n              failed: [...(lane.failed ?? []), ...failed],\n            }),\n          };\n  }\n  return parked === 0 && restamped === 0\n    ? { record, parked, restamped }\n    : { record: { ...record, lanes }, parked, restamped };\n}\n\n/**\n * Whether `error` is the browser refusing a write for lack of room, under\n * every name the engines use — `QuotaExceededError` (Chromium, WebKit, current\n * Firefox), `NS_ERROR_DOM_QUOTA_REACHED` (older Firefox), the legacy\n * `DOMException` codes 22 (WebKit) and 1014 (Firefox) — or a plain error whose\n * message carries one of those (storage proxies and WebViews rewrap the\n * exception). Olympus's `isStorageQuotaError` recognises the same set; the two\n * stay in step.\n */\nexport function isStorageQuotaError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) return false;\n  const { name, code, message } = error as {\n    name?: unknown;\n    code?: unknown;\n    message?: unknown;\n  };\n  return (\n    name === \"QuotaExceededError\" ||\n    name === \"NS_ERROR_DOM_QUOTA_REACHED\" ||\n    code === 22 ||\n    code === 1014 ||\n    (typeof message === \"string\" &&\n      /exceeded the quota|quotaexceedederror|ns_error_dom_quota_reached/i.test(\n        message\n      ))\n  );\n}\n\n/** The one quota shape statewire's retention sweep recognises. */\nfunction asStatewireQuotaError(error: unknown): Error {\n  if (error instanceof Error && error.name === \"QuotaExceededError\")\n    return error;\n  const normalized = new Error(\n    error instanceof Error ? error.message : \"storage quota exceeded\"\n  );\n  normalized.name = \"QuotaExceededError\";\n  return normalized;\n}\n\n/**\n * Why `raw` is a stored record this build cannot read, or `undefined` when it\n * may be one. Mirrors the two decode failures statewire raises for a record it\n * cannot read — invalid JSON, and a `statewireStorageVersion` newer than the\n * ones this build's statewire decodes (a tab left open across a\n * statewire upgrade, reading the record a newer tab keeps) — because statewire\n * throws those out of the resource at mount instead of treating the record as\n * absent. A structurally invalid record of the right version still fails\n * inside statewire.\n */\nfunction unreadableRecord(raw: string): Error | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (error) {\n    return error instanceof Error\n      ? error\n      : new Error(\"stored session record is not JSON\");\n  }\n  if (typeof parsed !== \"object\" || parsed === null) {\n    return new Error(\"stored session record is not an object\");\n  }\n  const version = (parsed as { statewireStorageVersion?: unknown })\n    .statewireStorageVersion;\n  if (version !== undefined && !READABLE_STORAGE_VERSIONS.has(version)) {\n    return new Error(\n      `stored session record uses storage version ${String(version)}`\n    );\n  }\n  return undefined;\n}\n\ntype SyncBackend = {\n  getItem: (key: string) => string | null;\n  setItem: (key: string, value: string) => void;\n  removeItem: (key: string) => void;\n  getAllKeys: () => readonly string[];\n  withUnused: (key: string, action: () => Promise<void>) => Promise<void>;\n};\n\n/**\n * The browser backend `@assistant-ui/react-statewire`'s `LocalStorageSession`\n * uses, reproduced here because that resource does not take a backend: raw\n * `localStorage`, with retention cleanup fenced by the same Web Locks so a\n * sweep never removes a record another tab is actively sharing.\n */\nfunction browserBackend({\n  storage,\n  locks,\n}: {\n  storage: StorageLike;\n  locks: LockManagerLike;\n}): SyncBackend {\n  return {\n    getItem: (key) => storage.getItem(key),\n    setItem: (key, value) => storage.setItem(key, value),\n    removeItem: (key) => storage.removeItem(key),\n    getAllKeys: () =>\n      Array.from({ length: storage.length }, (_, index) =>\n        storage.key(index)\n      ).filter((key): key is string => key !== null),\n    withUnused: async (key, action) => {\n      await locks.request(\n        SESSION_ACTIVE_PREFIX + key,\n        { ifAvailable: true },\n        async (active) => {\n          if (active === null) return;\n          await locks.request(\n            SESSION_LOCK_PREFIX + key.slice(SESSION_PREFIX.length),\n            { ifAvailable: true },\n            async (lock) => {\n              if (lock === null) return;\n              await action();\n            }\n          );\n        }\n      );\n    },\n  };\n}\n\n/**\n * Wraps a synchronous key-value backend so a failing origin degrades the\n * session to memory-only persistence instead of stopping the connection.\n *\n * statewire's session storage latches the first unrecognised write failure\n * and from then on rejects every send (`stopped/storage-error`, \"session\n * storage failed\" on the connection chip). It only recovers a\n * `QuotaExceededError` by that exact name — sweeping old session records and\n * retrying the write once — and latches again when the retry fails too. Here\n * the first quota failure per key is surfaced under that name so the sweep\n * runs; the retry that follows it and every other storage failure are absorbed\n * and reported through `onDegraded`, so chat keeps working.\n *\n * An absorbed write is kept in an in-memory overlay that `getItem` serves\n * first: statewire re-reads the record through `load()` on every shared-mode\n * transaction, so a stale persisted copy would otherwise win back its old\n * `nextSeq`, `clientId` and command journal. The overlay is per tab — another\n * tab sharing the thread still reads the last persisted copy, which is the\n * memory-only degradation this backend exists to allow. A later successful\n * write clears the overlay entry.\n *\n * A key whose read threw, or whose stored value this build cannot read (see\n * {@link unreadableRecord}), is served as absent and shielded: writes to it\n * stay in the overlay for good, so a fresh lane minted over an unreadable\n * record never overwrites what another tab or a newer build persisted.\n */\nexport function quotaTolerantBackend({\n  inner,\n  onDegraded,\n}: {\n  inner: SyncBackend;\n  onDegraded: (degradation: SessionStorageDegradation) => void;\n}): SyncBackend & KeyValueSessionStorage.Backend {\n  // Keys whose write already surfaced a quota error to statewire: until a\n  // write succeeds again, later failures on the key are absorbed instead of\n  // surfaced, or every save would re-run statewire's sweep (which evicts\n  // other threads' idle records) and the failure would latch on the retry.\n  const quotaSurfaced = new Set<string>();\n  // Absorbed writes, served ahead of the backend (see the function docs).\n  const overlay = new Map<string, string>();\n  // Keys served as absent and never written through (see the function docs).\n  const shielded = new Set<string>();\n  // statewire re-reads and re-decodes the record on every transaction; the\n  // readability check is memoised on the raw string so it costs one string\n  // comparison per read, not a second parse.\n  const checked = new Map<\n    string,\n    { raw: string; verdict: Error | undefined }\n  >();\n  const readable = (key: string, raw: string): Error | undefined => {\n    const previous = checked.get(key);\n    if (previous !== undefined && previous.raw === raw) return previous.verdict;\n    const verdict = unreadableRecord(raw);\n    checked.set(key, { raw, verdict });\n    return verdict;\n  };\n  return {\n    getItem: (key) => {\n      const shadowed = overlay.get(key);\n      if (shadowed !== undefined) return shadowed;\n      if (shielded.has(key)) return null;\n      let raw: string | null;\n      try {\n        raw = inner.getItem(key);\n      } catch (error) {\n        shielded.add(key);\n        onDegraded({ operation: \"getItem\", key, error });\n        return null;\n      }\n      if (raw === null) return null;\n      const unreadable = readable(key, raw);\n      if (unreadable === undefined) return raw;\n      shielded.add(key);\n      onDegraded({ operation: \"record\", key, error: unreadable });\n      return null;\n    },\n    setItem: (key, value) => {\n      if (shielded.has(key)) {\n        overlay.set(key, value);\n        return;\n      }\n      try {\n        inner.setItem(key, value);\n        overlay.delete(key);\n        quotaSurfaced.delete(key);\n      } catch (error) {\n        if (isStorageQuotaError(error) && !quotaSurfaced.has(key)) {\n          quotaSurfaced.add(key);\n          throw asStatewireQuotaError(error);\n        }\n        overlay.set(key, value);\n        onDegraded({ operation: \"setItem\", key, error });\n      }\n    },\n    removeItem: (key) => {\n      overlay.delete(key);\n      if (shielded.has(key)) return;\n      try {\n        inner.removeItem(key);\n      } catch (error) {\n        onDegraded({ operation: \"removeItem\", key, error });\n      }\n    },\n    getAllKeys: () => {\n      const keys = new Set<string>(overlay.keys());\n      try {\n        for (const key of inner.getAllKeys()) keys.add(key);\n      } catch (error) {\n        onDegraded({ operation: \"getAllKeys\", key: \"\", error });\n      }\n      return [...keys];\n    },\n    withUnused: async (key, action) => {\n      try {\n        await inner.withUnused(key, action);\n      } catch (error) {\n        onDegraded({ operation: \"withUnused\", key, error });\n      }\n    },\n  };\n}\n\n/** A stored record's save stamp, or `undefined` when it carries none. */\nfunction savedAtOf(raw: string | null): number | undefined {\n  if (raw === null) return undefined;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n  if (typeof parsed !== \"object\" || parsed === null) return undefined;\n  const { savedAt, updatedAt } = parsed as {\n    savedAt?: unknown;\n    updatedAt?: unknown;\n  };\n  const stamp = savedAt ?? updatedAt;\n  return typeof stamp === \"number\" && Number.isFinite(stamp)\n    ? stamp\n    : undefined;\n}\n\n/**\n * Removes session records last saved more than `maxAgeMs` ago, skipping the\n * keys mounted in this tab and, through `withUnused`, those another tab holds.\n *\n * statewire's own retention sweep only retires records with nothing queued and\n * nothing failed: a record still carrying an unconfirmed or failed send is\n * exempt from both its age and count bounds, so every thread left with one\n * kept its key forever. Past the TTL those sends are long out of send\n * recovery's auto-retry window, so the record goes the same way an empty one\n * does.\n */\nexport async function retireExpiredSessionRecords({\n  backend,\n  mounted,\n  maxAgeMs,\n  now = Date.now(),\n}: {\n  backend: Pick<\n    SyncBackend,\n    \"getItem\" | \"removeItem\" | \"getAllKeys\" | \"withUnused\"\n  >;\n  mounted: ReadonlyMap<string, number>;\n  maxAgeMs: number;\n  now?: number;\n}): Promise<void> {\n  for (const key of backend.getAllKeys()) {\n    if (!key.startsWith(SESSION_PREFIX) || mounted.has(key)) continue;\n    const savedAt = savedAtOf(backend.getItem(key));\n    if (savedAt === undefined || now - savedAt <= maxAgeMs) continue;\n    await backend.withUnused(key, async () => {\n      if (mounted.has(key) || savedAtOf(backend.getItem(key)) !== savedAt)\n        return;\n      backend.removeItem(key);\n    });\n  }\n}\n\ntype DegradationListener = (degradation: SessionStorageDegradation) => void;\n\ntype SharedBackend = {\n  backend: SyncBackend & KeyValueSessionStorage.Backend;\n  listeners: Set<DegradationListener>;\n  /** Storage keys of the sessions mounted in this tab, with mount counts. */\n  mounted: Map<string, number>;\n};\n\n/**\n * One backend per storage object — per origin, in a browser — shared by every\n * session mounted in the tab, exactly as the upstream resource's module-level\n * backend is. statewire keys its in-tab \"active\" bookkeeping by backend\n * identity, so a mount's retention sweep only skips the records of other\n * mounts on the *same* backend; and the absorbed-write overlay has to outlive\n * a remount of the same thread (a thread switch and back) or the remount would\n * read the stale persisted copy. Degradations fan out to every mounted\n * session's reporter.\n */\nconst sharedBackends = new WeakMap<StorageLike, SharedBackend>();\n\nfunction sharedBackend({\n  storage,\n  locks,\n}: {\n  storage: StorageLike;\n  locks: LockManagerLike;\n}): SharedBackend {\n  let shared = sharedBackends.get(storage);\n  if (shared === undefined) {\n    const listeners = new Set<DegradationListener>();\n    shared = {\n      listeners,\n      mounted: new Map(),\n      backend: quotaTolerantBackend({\n        inner: browserBackend({ storage, locks }),\n        onDegraded: (degradation) => {\n          for (const listener of listeners) listener(degradation);\n        },\n      }),\n    };\n    sharedBackends.set(storage, shared);\n  }\n  return shared;\n}\n\n/**\n * Athena's browser session store: `@assistant-ui/react-statewire`'s\n * `LocalStorageSession` contract (per-thread key under the shared prefix,\n * cross-tab Web Lock, storage-event subscription, retention) on top of\n * {@link quotaTolerantBackend}, with Athena's protocol lane and retention\n * policy.\n */\nconst useQuotaSafeLocalStorageSession = ({\n  threadId,\n  key = (id) => id,\n  ttl = 7 * DAY_MS,\n  max = 50,\n  onStorageDegraded,\n}: QuotaSafeLocalStorageSession.Options): StatewireClient.SessionStorage => {\n  const storage = browserGlobals.localStorage;\n  const locks = browserGlobals.navigator?.locks;\n  if (!storage)\n    throw new Error(\n      \"statewire: QuotaSafeLocalStorageSession requires localStorage\"\n    );\n  if (!locks)\n    throw new Error(\n      \"statewire: QuotaSafeLocalStorageSession requires the Web Locks API (navigator.locks)\"\n    );\n  const sessionKey = key(threadId);\n  const storageKey = SESSION_PREFIX + sessionKey;\n  const lockName = SESSION_LOCK_PREFIX + sessionKey;\n\n  // One mounted store serves one lane scope (one principal, one backend) for\n  // its whole life: the upstream `LocalStorageSession` contract, whose\n  // principal guard this is. The statewire session over the store keeps the\n  // client id, lane clocks and journal it loaded, so a store moved to another\n  // principal's lane would carry them there and send the previous principal's\n  // undelivered commands under the next one's credential. A thread switch keeps\n  // the scope and re-targets the store; a change of scope refuses, and the host\n  // remounts the account's thread (`useDeepAgentRuntime` does). The previous\n  // principal's record is left as it is.\n  const mountedScope = useRef<DeepAgentSessionLaneScope>({\n    threadId,\n    laneKey: sessionKey,\n  });\n  if (!isSameSessionLaneScope({ scope: mountedScope.current, key })) {\n    throw new Error(\n      \"statewire: principal changed; remount the account's thread/session\"\n    );\n  }\n\n  const latestOnDegraded = useRef(onStorageDegraded);\n  latestOnDegraded.current = onStorageDegraded;\n  const reportDegradation = useMemo(() => {\n    const reported = new Set<string>();\n    return (degradation: SessionStorageDegradation) => {\n      const handler = latestOnDegraded.current;\n      if (handler) {\n        try {\n          handler(degradation);\n        } catch {\n          // Reporting runs inside the session's recovery path and must never\n          // become the failure it is reporting.\n        }\n        return;\n      }\n      const dedupeKey = `${degradation.operation}:${degradation.key}`;\n      if (reported.has(dedupeKey)) return;\n      reported.add(dedupeKey);\n      console.warn(\n        `[statewire] session storage degraded to memory only (${degradation.operation} ${degradation.key})`,\n        degradation.error\n      );\n    };\n  }, []);\n\n  const shared = sharedBackend({ storage, locks });\n  // Registered during render as well as in the effect: the read statewire\n  // makes while mounting below happens before any effect runs, and tap may\n  // clean an effect up and re-run it within one commit.\n  shared.listeners.add(reportDegradation);\n  useEffect(() => {\n    shared.listeners.add(reportDegradation);\n    return () => {\n      shared.listeners.delete(reportDegradation);\n    };\n  }, [shared, reportDegradation]);\n\n  useEffect(() => {\n    const { mounted } = shared;\n    mounted.set(storageKey, (mounted.get(storageKey) ?? 0) + 1);\n    retireExpiredSessionRecords({\n      backend: shared.backend,\n      mounted,\n      maxAgeMs: ttl,\n    }).catch((error: unknown) =>\n      reportDegradation({ operation: \"withUnused\", key: storageKey, error })\n    );\n    return () => {\n      const count = (mounted.get(storageKey) ?? 1) - 1;\n      if (count === 0) mounted.delete(storageKey);\n      else mounted.set(storageKey, count);\n    };\n  }, [shared, storageKey, ttl, reportDegradation]);\n\n  // Hold the record's shared \"active\" lock while mounted so another tab's\n  // retention sweep skips it (the same fence the upstream resource holds).\n  useEffect(() => {\n    let release: (() => void) | undefined;\n    let disposed = false;\n    Promise.resolve(\n      locks.request(\n        SESSION_ACTIVE_PREFIX + storageKey,\n        { mode: \"shared\" },\n        () => {\n          if (disposed) return;\n          return new Promise<void>((resolve) => {\n            release = resolve;\n          });\n        }\n      )\n    ).catch((error: unknown) =>\n      reportDegradation({ operation: \"lock\", key: storageKey, error })\n    );\n    return () => {\n      disposed = true;\n      release?.();\n    };\n  }, [locks, storageKey, reportDegradation]);\n\n  // The storage resource includes migrate in its identity. A fresh callback\n  // on every render replaces the store and prevents hydration from settling.\n  const migrate = useCallback<\n    NonNullable<StatewireClient.SessionStorage[\"migrate\"]>\n  >(\n    (record, current) => {\n      const migrated = parkIncompatibleSessionCommands(record, current);\n      if (migrated.parked === 0) return migrated.record;\n      reportDegradation({\n        operation: \"migrate\",\n        key: storageKey,\n        error: new Error(\n          `${migrated.parked} queued statewire command(s) predate the current protocol range; parked as failed sends`\n        ),\n      });\n      return migrated.record;\n    },\n    [reportDegradation, storageKey]\n  );\n\n  const sessionStorage = useResource(\n    KeyValueSessionStorage({\n      backend: shared.backend,\n      key: sessionKey,\n      namespace: SESSION_PREFIX,\n      protocol: DEEP_AGENT_STATEWIRE_PROTOCOL,\n      migrate,\n      retention: { maxAgeMs: ttl, maxEntries: max },\n      // A failure statewire raises itself (a structurally invalid stored\n      // record) still stops the session; it is at least reported the same way.\n      onError: (error) =>\n        reportDegradation({ operation: \"session\", key: storageKey, error }),\n    })\n  );\n\n  return useMemo(\n    () => ({\n      ...sessionStorage,\n      lock: async <T>(fn: () => T | Promise<T>): Promise<T> => {\n        let granted = false;\n        try {\n          return await locks.request(lockName, async () => {\n            granted = true;\n            return fn();\n          });\n        } catch (error) {\n          if (granted) throw error;\n          // The lock manager refused the request itself (a detached or\n          // back/forward-cached document, a lockdown-mode origin): the\n          // transaction runs unfenced rather than stopping the session.\n          reportDegradation({ operation: \"lock\", key: storageKey, error });\n          return fn();\n        }\n      },\n      subscribe: (listener: () => void) => {\n        const onStorage = (event: StorageEventLike) => {\n          if (event.key === storageKey) listener();\n        };\n        browserGlobals.addEventListener?.(\"storage\", onStorage);\n        return () => browserGlobals.removeEventListener?.(\"storage\", onStorage);\n      },\n    }),\n    [sessionStorage, locks, storageKey, lockName, reportDegradation]\n  );\n};\n\n/** Athena's browser session keys and retention policy. */\nexport const QuotaSafeLocalStorageSession = resource(\n  useQuotaSafeLocalStorageSession\n);\n\nexport namespace QuotaSafeLocalStorageSession {\n  export type Options = {\n    threadId: string;\n    /**\n     * The lane's storage key for a thread, scoped by the principal (and the\n     * sync host) the lane belongs to. It must keep naming the same principal's\n     * lanes for the life of the mounted store: a change throws (\"principal\n     * changed\"), as the upstream `LocalStorageSession` does, and the host\n     * remounts the account's thread.\n     */\n    key?: (threadId: string) => string;\n    ttl?: number;\n    max?: number;\n    /**\n     * Called when a storage operation failed and the session carried on in\n     * memory. Defaults to one `console.warn` per operation and key.\n     */\n    onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n  };\n}\n"],"names":["storage","failed","useRef","isSameSessionLaneScope","useMemo","useEffect","useCallback","useResource","KeyValueSessionStorage","DEEP_AGENT_STATEWIRE_PROTOCOL","_a","resource"],"mappings":";;;;;;;AAUA,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAC9B,MAAM,SAAS,KAAK,KAAK,KAAK;AAE9B,MAAM,4BAAkD,oBAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;AA0CzE,MAAM,iBAAiB;AAQhB,SAAS,8BACd,YACoC;AACpC,QAAMA,WAAU,eAAe;AAC/B,MAAI,CAACA,SAAS,QAAO;AACrB,MAAI;AACJ,MAAI;AACF,UAAM,MAAMA,SAAQ,QAAQ,iBAAiB,UAAU;AACvD,aACE,QAAQ,OAAO,OAAQ,KAAK,MAAM,GAAG;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,+BAA+B,MAAM;AAC9C;AAYO,SAAS,+BACd,QACoC;;AACpC,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,6BAAa,IAAA;AACnB,QAAM,QACJ,OAAO,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ,CAAA;AACpE,QAAM,SAAS;AAAA,IACb,GAAI,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAA;AAAA,IACnD,GAAG,OAAO,OAAO,KAAK,EAAE;AAAA,MAAQ,CAAC,SAC/B,MAAM,QAAQ,6BAAM,MAAM,IAAI,KAAK,SAAS,CAAA;AAAA,IAAC;AAAA,EAC/C;AAEF,aAAW,SAAS,QAAQ;AAC1B,UAAMC,UAAS;AAIf,UAAM,aAAYA,oDAAQ,WAARA,mBAAiB,OAAjBA,mBAAqB,YAArBA,mBAA8B;AAChD,QAAI,OAAO,cAAc,YAAY,QAAOA,mCAAQ,QAAO,UAAU;AACnE,aAAO,IAAI,WAAWA,QAAO,EAAE;AAAA,IACjC;AAAA,EACF;AACA,SAAO;AACT;AAgCA,MAAM,UAAU,CAAC,OAAe,UAC9B,UAAU,MAAM,cAAc,MAAM,YAAY,SAAS,MAAM;AAGjE,MAAM,0BAA0B,CAC9B,UACA,SACA,YACY;AACZ,MACE,CAAC,QAAQ,YACT,CAAC,QAAQ,QAAQ,SAAS,KAAK,SAAS,QAAQ,IAAI;AAEpD,WAAO;AACT,MAAI,QAAQ,cAAc,IAAK,QAAO;AACtC,MAAI,QAAQ,SAAS,cAAc,IAAK,QAAO;AAC/C,QAAM,WAAW,QAAQ,SAAS,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAC3E,QAAM,QAAQ,QAAQ,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAC/D,SACE,aAAa,UACb,UAAU,UACV,QAAQ,SAAS,SAAS,KAAK;AAEnC;AAUO,MAAM,8BAA8B;AAG3C,MAAM,0BAA0B,CAC9B,UACA,SACA,YAEA,QAAQ,aAAa,UACrB,QAAQ,QAAQ,SAAS,KAAK,SAAS;AAAA,EACrC,SAAS,QAAQ,KAAK;AAAA,EACtB,YAAY;AACd,CAAC,KACD;AAAA,EACE;AAAA,EACA,EAAE,GAAG,SAAS,UAAU,EAAE,GAAG,QAAQ,UAAU,MAAM,QAAQ,OAAK;AAAA,EAClE;AACF;AAkBK,SAAS,gCACd,QACA,SACA,MAAc,KAAK,OAC2D;AAC9E,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,QAAM,QAAqD,CAAA;AAC3D,aAAW,CAAC,UAAU,IAAI,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC3D,UAAM,OAAyC,CAAA;AAC/C,UAAM,SAA0C,CAAA;AAChD,QAAI,gBAAgB;AACpB,eAAW,WAAW,KAAK,UAAU;AACnC,UAAI,wBAAwB,UAAU,SAAS,OAAO,GAAG;AACvD,aAAK,KAAK,OAAO;AACjB;AAAA,MACF;AACA,UAAI,wBAAwB,UAAU,SAAS,OAAO,GAAG;AACvD,aAAK,KAAK,EAAE,GAAG,SAAS,UAAU,SAAS;AAC3C,yBAAiB;AACjB;AAAA,MACF;AACA,aAAO,KAAK;AAAA,QACV;AAAA,QACA,UAAU;AAAA,QACV,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,GAAI,QAAQ,SAAS,UAAa,EAAE,MAAM,QAAQ,KAAA;AAAA,QAClD,SAAS,EAAE,MAAM,QAAQ,OAAO,eAAA;AAAA,QAChC,IAAI;AAAA,QACJ,KAAK,QAAQ;AAAA,MAAA,CACd;AAAA,IACH;AACA,cAAU,OAAO;AACjB,iBAAa;AACb,UAAM,QAAQ,IACZ,OAAO,WAAW,KAAK,kBAAkB,IACrC,OACA;AAAA,MACE,GAAG;AAAA,MACH,UAAU;AAAA,MACV,IAAK,OAAO,SAAS,KAAK,KAAK,WAAW,WAAc;AAAA,QACtD,QAAQ,CAAC,GAAI,KAAK,UAAU,CAAA,GAAK,GAAG,MAAM;AAAA,MAAA;AAAA,IAC5C;AAAA,EAEV;AACA,SAAO,WAAW,KAAK,cAAc,IACjC,EAAE,QAAQ,QAAQ,UAAA,IAClB,EAAE,QAAQ,EAAE,GAAG,QAAQ,MAAA,GAAS,QAAQ,UAAA;AAC9C;AAWO,SAAS,oBAAoB,OAAyB;AAC3D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,EAAE,MAAM,MAAM,QAAA,IAAY;AAKhC,SACE,SAAS,wBACT,SAAS,gCACT,SAAS,MACT,SAAS,QACR,OAAO,YAAY,YAClB,oEAAoE;AAAA,IAClE;AAAA,EAAA;AAGR;AAGA,SAAS,sBAAsB,OAAuB;AACpD,MAAI,iBAAiB,SAAS,MAAM,SAAS;AAC3C,WAAO;AACT,QAAM,aAAa,IAAI;AAAA,IACrB,iBAAiB,QAAQ,MAAM,UAAU;AAAA,EAAA;AAE3C,aAAW,OAAO;AAClB,SAAO;AACT;AAYA,SAAS,iBAAiB,KAAgC;AACxD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,SAAS,OAAO;AACd,WAAO,iBAAiB,QACpB,QACA,IAAI,MAAM,mCAAmC;AAAA,EACnD;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,WAAO,IAAI,MAAM,wCAAwC;AAAA,EAC3D;AACA,QAAM,UAAW,OACd;AACH,MAAI,YAAY,UAAa,CAAC,0BAA0B,IAAI,OAAO,GAAG;AACpE,WAAO,IAAI;AAAA,MACT,8CAA8C,OAAO,OAAO,CAAC;AAAA,IAAA;AAAA,EAEjE;AACA,SAAO;AACT;AAgBA,SAAS,eAAe;AAAA,EACtB,SAAAD;AAAA,EACA;AACF,GAGgB;AACd,SAAO;AAAA,IACL,SAAS,CAAC,QAAQA,SAAQ,QAAQ,GAAG;AAAA,IACrC,SAAS,CAAC,KAAK,UAAUA,SAAQ,QAAQ,KAAK,KAAK;AAAA,IACnD,YAAY,CAAC,QAAQA,SAAQ,WAAW,GAAG;AAAA,IAC3C,YAAY,MACV,MAAM;AAAA,MAAK,EAAE,QAAQA,SAAQ,OAAA;AAAA,MAAU,CAAC,GAAG,UACzCA,SAAQ,IAAI,KAAK;AAAA,IAAA,EACjB,OAAO,CAAC,QAAuB,QAAQ,IAAI;AAAA,IAC/C,YAAY,OAAO,KAAK,WAAW;AACjC,YAAM,MAAM;AAAA,QACV,wBAAwB;AAAA,QACxB,EAAE,aAAa,KAAA;AAAA,QACf,OAAO,WAAW;AAChB,cAAI,WAAW,KAAM;AACrB,gBAAM,MAAM;AAAA,YACV,sBAAsB,IAAI,MAAM,eAAe,MAAM;AAAA,YACrD,EAAE,aAAa,KAAA;AAAA,YACf,OAAO,SAAS;AACd,kBAAI,SAAS,KAAM;AACnB,oBAAM,OAAA;AAAA,YACR;AAAA,UAAA;AAAA,QAEJ;AAAA,MAAA;AAAA,IAEJ;AAAA,EAAA;AAEJ;AA4BO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AACF,GAGiD;AAK/C,QAAM,oCAAoB,IAAA;AAE1B,QAAM,8BAAc,IAAA;AAEpB,QAAM,+BAAe,IAAA;AAIrB,QAAM,8BAAc,IAAA;AAIpB,QAAM,WAAW,CAAC,KAAa,QAAmC;AAChE,UAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,QAAI,aAAa,UAAa,SAAS,QAAQ,YAAY,SAAS;AACpE,UAAM,UAAU,iBAAiB,GAAG;AACpC,YAAQ,IAAI,KAAK,EAAE,KAAK,SAAS;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ;AAChB,YAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,UAAI,aAAa,OAAW,QAAO;AACnC,UAAI,SAAS,IAAI,GAAG,EAAG,QAAO;AAC9B,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,QAAQ,GAAG;AAAA,MACzB,SAAS,OAAO;AACd,iBAAS,IAAI,GAAG;AAChB,mBAAW,EAAE,WAAW,WAAW,KAAK,OAAO;AAC/C,eAAO;AAAA,MACT;AACA,UAAI,QAAQ,KAAM,QAAO;AACzB,YAAM,aAAa,SAAS,KAAK,GAAG;AACpC,UAAI,eAAe,OAAW,QAAO;AACrC,eAAS,IAAI,GAAG;AAChB,iBAAW,EAAE,WAAW,UAAU,KAAK,OAAO,YAAY;AAC1D,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,KAAK,UAAU;AACvB,UAAI,SAAS,IAAI,GAAG,GAAG;AACrB,gBAAQ,IAAI,KAAK,KAAK;AACtB;AAAA,MACF;AACA,UAAI;AACF,cAAM,QAAQ,KAAK,KAAK;AACxB,gBAAQ,OAAO,GAAG;AAClB,sBAAc,OAAO,GAAG;AAAA,MAC1B,SAAS,OAAO;AACd,YAAI,oBAAoB,KAAK,KAAK,CAAC,cAAc,IAAI,GAAG,GAAG;AACzD,wBAAc,IAAI,GAAG;AACrB,gBAAM,sBAAsB,KAAK;AAAA,QACnC;AACA,gBAAQ,IAAI,KAAK,KAAK;AACtB,mBAAW,EAAE,WAAW,WAAW,KAAK,OAAO;AAAA,MACjD;AAAA,IACF;AAAA,IACA,YAAY,CAAC,QAAQ;AACnB,cAAQ,OAAO,GAAG;AAClB,UAAI,SAAS,IAAI,GAAG,EAAG;AACvB,UAAI;AACF,cAAM,WAAW,GAAG;AAAA,MACtB,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,IACA,YAAY,MAAM;AAChB,YAAM,OAAO,IAAI,IAAY,QAAQ,MAAM;AAC3C,UAAI;AACF,mBAAW,OAAO,MAAM,WAAA,EAAc,MAAK,IAAI,GAAG;AAAA,MACpD,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,IAAI,OAAO;AAAA,MACxD;AACA,aAAO,CAAC,GAAG,IAAI;AAAA,IACjB;AAAA,IACA,YAAY,OAAO,KAAK,WAAW;AACjC,UAAI;AACF,cAAM,MAAM,WAAW,KAAK,MAAM;AAAA,MACpC,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EAAA;AAEJ;AAGA,SAAS,UAAU,KAAwC;AACzD,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,EAAE,SAAS,UAAA,IAAc;AAI/B,QAAM,QAAQ,WAAW;AACzB,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IACrD,QACA;AACN;AAaA,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM,KAAK,IAAA;AACb,GAQkB;AAChB,aAAW,OAAO,QAAQ,cAAc;AACtC,QAAI,CAAC,IAAI,WAAW,cAAc,KAAK,QAAQ,IAAI,GAAG,EAAG;AACzD,UAAM,UAAU,UAAU,QAAQ,QAAQ,GAAG,CAAC;AAC9C,QAAI,YAAY,UAAa,MAAM,WAAW,SAAU;AACxD,UAAM,QAAQ,WAAW,KAAK,YAAY;AACxC,UAAI,QAAQ,IAAI,GAAG,KAAK,UAAU,QAAQ,QAAQ,GAAG,CAAC,MAAM;AAC1D;AACF,cAAQ,WAAW,GAAG;AAAA,IACxB,CAAC;AAAA,EACH;AACF;AAqBA,MAAM,qCAAqB,QAAA;AAE3B,SAAS,cAAc;AAAA,EACrB,SAAAA;AAAA,EACA;AACF,GAGkB;AAChB,MAAI,SAAS,eAAe,IAAIA,QAAO;AACvC,MAAI,WAAW,QAAW;AACxB,UAAM,gCAAgB,IAAA;AACtB,aAAS;AAAA,MACP;AAAA,MACA,6BAAa,IAAA;AAAA,MACb,SAAS,qBAAqB;AAAA,QAC5B,OAAO,eAAe,EAAE,SAAAA,UAAS,OAAO;AAAA,QACxC,YAAY,CAAC,gBAAgB;AAC3B,qBAAW,YAAY,UAAW,UAAS,WAAW;AAAA,QACxD;AAAA,MAAA,CACD;AAAA,IAAA;AAEH,mBAAe,IAAIA,UAAS,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AASA,MAAM,kCAAkC,CAAC;AAAA,EACvC;AAAA,EACA,MAAM,CAAC,OAAO;AAAA,EACd,MAAM,IAAI;AAAA,EACV,MAAM;AAAA,EACN;AACF,MAA4E;;AAC1E,QAAMA,YAAU,eAAe;AAC/B,QAAM,SAAQ,oBAAe,cAAf,mBAA0B;AACxC,MAAI,CAACA;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAEJ,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAEJ,QAAM,aAAa,IAAI,QAAQ;AAC/B,QAAM,aAAa,iBAAiB;AACpC,QAAM,WAAW,sBAAsB;AAWvC,QAAM,eAAeE,WAAAA,OAAkC;AAAA,IACrD;AAAA,IACA,SAAS;AAAA,EAAA,CACV;AACD,MAAI,CAACC,iBAAAA,uBAAuB,EAAE,OAAO,aAAa,SAAS,IAAA,CAAK,GAAG;AACjE,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,mBAAmBD,WAAAA,OAAO,iBAAiB;AACjD,mBAAiB,UAAU;AAC3B,QAAM,oBAAoBE,WAAAA,QAAQ,MAAM;AACtC,UAAM,+BAAe,IAAA;AACrB,WAAO,CAAC,gBAA2C;AACjD,YAAM,UAAU,iBAAiB;AACjC,UAAI,SAAS;AACX,YAAI;AACF,kBAAQ,WAAW;AAAA,QACrB,QAAQ;AAAA,QAGR;AACA;AAAA,MACF;AACA,YAAM,YAAY,GAAG,YAAY,SAAS,IAAI,YAAY,GAAG;AAC7D,UAAI,SAAS,IAAI,SAAS,EAAG;AAC7B,eAAS,IAAI,SAAS;AACtB,cAAQ;AAAA,QACN,wDAAwD,YAAY,SAAS,IAAI,YAAY,GAAG;AAAA,QAChG,YAAY;AAAA,MAAA;AAAA,IAEhB;AAAA,EACF,GAAG,CAAA,CAAE;AAEL,QAAM,SAAS,cAAc,WAAEJ,WAAS,OAAO;AAI/C,SAAO,UAAU,IAAI,iBAAiB;AACtCK,aAAAA,UAAU,MAAM;AACd,WAAO,UAAU,IAAI,iBAAiB;AACtC,WAAO,MAAM;AACX,aAAO,UAAU,OAAO,iBAAiB;AAAA,IAC3C;AAAA,EACF,GAAG,CAAC,QAAQ,iBAAiB,CAAC;AAE9BA,aAAAA,UAAU,MAAM;AACd,UAAM,EAAE,YAAY;AACpB,YAAQ,IAAI,aAAa,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAC1D,gCAA4B;AAAA,MAC1B,SAAS,OAAO;AAAA,MAChB;AAAA,MACA,UAAU;AAAA,IAAA,CACX,EAAE;AAAA,MAAM,CAAC,UACR,kBAAkB,EAAE,WAAW,cAAc,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA;AAEvE,WAAO,MAAM;AACX,YAAM,SAAS,QAAQ,IAAI,UAAU,KAAK,KAAK;AAC/C,UAAI,UAAU,EAAG,SAAQ,OAAO,UAAU;AAAA,UACrC,SAAQ,IAAI,YAAY,KAAK;AAAA,IACpC;AAAA,EACF,GAAG,CAAC,QAAQ,YAAY,KAAK,iBAAiB,CAAC;AAI/CA,aAAAA,UAAU,MAAM;AACd,QAAI;AACJ,QAAI,WAAW;AACf,YAAQ;AAAA,MACN,MAAM;AAAA,QACJ,wBAAwB;AAAA,QACxB,EAAE,MAAM,SAAA;AAAA,QACR,MAAM;AACJ,cAAI,SAAU;AACd,iBAAO,IAAI,QAAc,CAAC,YAAY;AACpC,sBAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MAAA;AAAA,IACF,EACA;AAAA,MAAM,CAAC,UACP,kBAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA;AAEjE,WAAO,MAAM;AACX,iBAAW;AACX;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAO,YAAY,iBAAiB,CAAC;AAIzC,QAAM,UAAUC,WAAAA;AAAAA,IAGd,CAAC,QAAQ,YAAY;AACnB,YAAM,WAAW,gCAAgC,QAAQ,OAAO;AAChE,UAAI,SAAS,WAAW,EAAG,QAAO,SAAS;AAC3C,wBAAkB;AAAA,QAChB,WAAW;AAAA,QACX,KAAK;AAAA,QACL,OAAO,IAAI;AAAA,UACT,GAAG,SAAS,MAAM;AAAA,QAAA;AAAA,MACpB,CACD;AACD,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,CAAC,mBAAmB,UAAU;AAAA,EAAA;AAGhC,QAAM,iBAAiBC,IAAAA;AAAAA,IACrBC,+BAAuB;AAAA,MACrB,SAAS,OAAO;AAAA,MAChB,KAAK;AAAA,MACL,WAAW;AAAA,MACX,UAAUC,mBAAAA;AAAAA,MACV;AAAA,MACA,WAAW,EAAE,UAAU,KAAK,YAAY,IAAA;AAAA;AAAA;AAAA,MAGxC,SAAS,CAAC,UACR,kBAAkB,EAAE,WAAW,WAAW,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA,CACrE;AAAA,EAAA;AAGH,SAAOL,WAAAA;AAAAA,IACL,OAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM,OAAU,OAAyC;AACvD,YAAI,UAAU;AACd,YAAI;AACF,iBAAO,MAAM,MAAM,QAAQ,UAAU,YAAY;AAC/C,sBAAU;AACV,mBAAO,GAAA;AAAA,UACT,CAAC;AAAA,QACH,SAAS,OAAO;AACd,cAAI,QAAS,OAAM;AAInB,4BAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,OAAO;AAC/D,iBAAO,GAAA;AAAA,QACT;AAAA,MACF;AAAA,MACA,WAAW,CAAC,aAAyB;;AACnC,cAAM,YAAY,CAAC,UAA4B;AAC7C,cAAI,MAAM,QAAQ,WAAY,UAAA;AAAA,QAChC;AACA,SAAAM,MAAA,eAAe,qBAAf,gBAAAA,IAAA,qBAAkC,WAAW;AAC7C,eAAO;;AAAM,kBAAAA,MAAA,eAAe,wBAAf,gBAAAA,IAAA,qBAAqC,WAAW;AAAA;AAAA,MAC/D;AAAA,IAAA;AAAA,IAEF,CAAC,gBAAgB,OAAO,YAAY,UAAU,iBAAiB;AAAA,EAAA;AAEnE;AAGO,MAAM,+BAA+BC,IAAAA;AAAAA,EAC1C;AACF;;;;;;;;;"}
+{"version":3,"file":"quota-safe-local-storage-session.cjs","sources":["../../../../agent-runtime/src/quota-safe-local-storage-session.ts"],"sourcesContent":["import { resource, useResource } from \"@assistant-ui/tap\";\nimport type { StatewireClient, StatewireProtocol } from \"statewire\";\nimport { KeyValueSessionStorage, sessionNamespace } from \"statewire/storage\";\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport {\n  type DeepAgentSessionLaneScope,\n  isSameSessionLaneScope,\n} from \"./session-lane-scope\";\nimport { LEGACY_RUN_SEND_BEHAVIORS, upgradeLegacyRunCommand } from \"./run-send\";\nimport {\n  DEEP_AGENT_LEGACY_STATEWIRE_PROTOCOL_VERSION,\n  DEEP_AGENT_STATEWIRE_PROTOCOL,\n} from \"./statewire-transport\";\n\nconst SESSION_PREFIX = \"aui:statewire-session:\";\nconst SESSION_LOCK_PREFIX = \"aui:statewire-session-lock:\";\nconst SESSION_ACTIVE_PREFIX = \"aui:statewire-session-active:\";\n/** Held by a mounted tab for its life; another tab's `whenGone` waits on it. */\nconst TAB_LOCK_PREFIX = \"statewire-tab:\";\n/** Serializes durable `settled` delivery across the tabs sharing a record. */\nconst NOTIFY_LOCK_PREFIX = \"statewire-notify:\";\nconst DAY_MS = 24 * 60 * 60 * 1000;\n/**\n * A record's byte budget (UTF-16 code units, as localStorage counts them). Past it, statewire drops\n * the payloads of the record's stored `settled` updates, failures first, oldest first, so a lane\n * that keeps failing sends no longer grows to megabytes (#52031).\n */\nexport const LOCAL_SESSION_RECORD_BYTES = 512 * 1024;\n/** The stored-record formats the statewire this build ships reads (it writes 6). */\nconst READABLE_STORAGE_VERSIONS: ReadonlySet<unknown> = new Set([1, 2, 3, 4, 5, 6]);\n\n/** Structural view of the browser storage global — this package compiles\n * without the DOM lib (React Native honesty; see `globals.d.ts`). */\ntype StorageLike = {\n  getItem(key: string): string | null;\n  setItem(key: string, value: string): void;\n  removeItem(key: string): void;\n  key(index: number): string | null;\n  readonly length: number;\n};\n\ntype LockGrant = object | null;\n\n/** The Web Locks API surface the session uses (`navigator.locks`). */\ntype LockManagerLike = {\n  request<T>(\n    name: string,\n    callback: (lock: LockGrant) => T | Promise<T>\n  ): Promise<T>;\n  request<T>(\n    name: string,\n    options: {\n      mode?: \"shared\" | \"exclusive\";\n      ifAvailable?: boolean;\n      signal?: AbortSignal;\n    },\n    callback: (lock: LockGrant) => T | Promise<T>\n  ): Promise<T>;\n};\n\ntype StorageEventLike = { key: string | null };\n\ntype BrowserGlobals = {\n  localStorage?: StorageLike;\n  navigator?: { locks?: LockManagerLike };\n  addEventListener?: (\n    type: \"storage\",\n    listener: (event: StorageEventLike) => void\n  ) => void;\n  removeEventListener?: (\n    type: \"storage\",\n    listener: (event: StorageEventLike) => void\n  ) => void;\n};\n\nconst browserGlobals = globalThis as BrowserGlobals;\n\n/**\n * The session principal of a signed-in account: its stable subject (the user id), never a\n * per-login session id, so a sign-in that expires and comes back finds its lanes again.\n */\nexport function sessionPrincipal(subject: string): string {\n  return `user:${subject}`;\n}\n\n/**\n * A thread's lane key under the localStorage prefix: `<namespace><principal>:<threadId>`,\n * the layout statewire's `KeyValueSessionStorage` stores it under.\n */\nexport function localStorageSessionKey({\n  namespace,\n  principal,\n  threadId,\n}: {\n  namespace: string;\n  principal: string;\n  threadId: string;\n}): string {\n  return sessionNamespace(namespace, principal) + threadId;\n}\n\n/**\n * Moves the lanes statewire 0.24 kept for one account under unscoped keys\n * (`aui:statewire-session:<unscopedPrefix><threadId>`) to that account's scoped keys\n * (`aui:statewire-session:<namespace><principal>:<threadId>`, see {@link localStorageSessionKey}).\n * With `threadId`, that thread's lane only.\n *\n * Only call it for the signed-in account, with the prefix its 0.24 keys used (they named the user\n * id): nothing is moved into anyone else's scope, and other accounts' unscoped lanes stay where\n * they are until that account signs in here. A lane whose scoped key already holds a record is\n * left unscoped (a 0.24 tab still open can write there); it is never written over the newer\n * record, and retention retires it once it holds no sends. Returns how many lanes moved.\n */\nexport function adoptUnscopedLocalStorageSessions({\n  namespace,\n  principal,\n  unscopedPrefix,\n  threadId,\n  storage = browserGlobals.localStorage,\n}: {\n  namespace: string;\n  principal: string;\n  unscopedPrefix: string;\n  threadId?: string;\n  storage?: StorageLike;\n}): number {\n  if (!storage) return 0;\n  const from = SESSION_PREFIX + unscopedPrefix;\n  let moved = 0;\n  try {\n    const keys =\n      threadId === undefined\n        ? Array.from({ length: storage.length }, (_, index) => storage.key(index)).filter(\n            (key): key is string => key?.startsWith(from) === true\n          )\n        : [from + threadId];\n    for (const key of keys) {\n      const raw = storage.getItem(key);\n      if (raw === null) continue;\n      const target =\n        SESSION_PREFIX +\n        localStorageSessionKey({ namespace, principal, threadId: key.slice(from.length) });\n      if (target === key || storage.getItem(target) !== null) continue;\n      storage.setItem(target, raw);\n      storage.removeItem(key);\n      moved += 1;\n    }\n  } catch {\n    // Storage that cannot be read or written keeps its lanes where they are.\n  }\n  return moved;\n}\n\n/**\n * A persisted session record as stored by any statewire build: format 5 keeps\n * failed sends as `settled` updates in each lane's `inbox`; formats 3 and 4\n * kept them in a per-lane `failed` list, and pre-lane records at the root.\n */\ntype SessionRecordLike = {\n  failed?: unknown;\n  lanes?: Readonly<\n    Record<string, { failed?: unknown; inbox?: unknown } | null | undefined>\n  > | null;\n};\n\nexport function readPersistedFailedSendStamps(\n  sessionKey: string\n): ReadonlyMap<string, number> | null {\n  const storage = browserGlobals.localStorage;\n  if (!storage) return null;\n  let record: SessionRecordLike | null;\n  try {\n    const raw = storage.getItem(SESSION_PREFIX + sessionKey);\n    record =\n      raw === null ? null : (JSON.parse(raw) as SessionRecordLike | null);\n  } catch {\n    return null;\n  }\n  return readFailedSendStampsFromRecord(record);\n}\n\n/**\n * Send stamps (message id → epoch ms of the original send) off an already\n * loaded session record's failed sends (format 5 `inbox` entries that carry a\n * failure, and the `failed` lists of older formats) — the storage-agnostic half of\n * {@link readPersistedFailedSendStamps}, for hosts whose session store is not\n * localStorage (the React Native AsyncStorage-backed store reads its record\n * synchronously through `SessionStorage.load()`).\n *\n * Returns `null` for no record (every failed entry then counts as fresh) and\n * an empty map for a record without failures.\n */\nexport function readFailedSendStampsFromRecord(\n  record: SessionRecordLike | null | undefined\n): ReadonlyMap<string, number> | null {\n  if (!record || typeof record !== \"object\") return null;\n  const stamps = new Map<string, number>();\n  const lanes =\n    record.lanes && typeof record.lanes === \"object\" ? record.lanes : {};\n  const failed = [\n    ...(Array.isArray(record.failed) ? record.failed : []),\n    ...Object.values(lanes).flatMap((lane) => [\n      ...(Array.isArray(lane?.failed) ? lane.failed : []),\n      ...(Array.isArray(lane?.inbox)\n        ? lane.inbox.filter(\n            (entry: unknown) =>\n              (entry as { failure?: unknown } | null)?.failure !== undefined\n          )\n        : []),\n    ]),\n  ];\n  for (const entry of failed) {\n    const failed = entry as {\n      ts?: unknown;\n      params?: readonly { message?: { id?: unknown } }[];\n    } | null;\n    const messageId = failed?.params?.[0]?.message?.id;\n    if (typeof messageId === \"string\" && typeof failed?.ts === \"number\") {\n      stamps.set(messageId, failed.ts);\n    }\n  }\n  return stamps;\n}\n\n/** A storage operation the session survived by degrading instead of failing. */\nexport type SessionStorageDegradation = {\n  operation:\n    | \"getItem\"\n    | \"setItem\"\n    | \"removeItem\"\n    | \"getAllKeys\"\n    | \"withUnused\"\n    /** The lock manager refused the transaction fence; it ran unfenced. */\n    | \"lock\"\n    /**\n     * The stored record is one this build cannot read (not JSON, or a newer\n     * storage version): served as absent, and the key is shielded from being\n     * overwritten so the record survives this tab.\n     */\n    | \"record\"\n    /** statewire's own storage failure (a structurally invalid stored record). */\n    | \"session\"\n    /**\n     * Queued commands persisted by an earlier statewire build no longer fit\n     * the current wire/protocol range: parked as failed `settled` updates in\n     * the lane's inbox (send recovery re-queues them) instead of blocking the\n     * mount.\n     */\n    | \"migrate\";\n  key: string;\n  error: unknown;\n};\n\ntype ProducedRange = NonNullable<StatewireClient.SessionCommand[\"produced\"]>;\n\nconst inRange = (value: string, range: StatewireProtocol.Range) =>\n  value >= (range.minVersion ?? range.version) && value <= range.version;\n\ntype StoredCommand = StatewireClient.OutboxCommand;\n\n/** Mirrors statewire's own stored-command compatibility check. */\nconst storedCommandCompatible = (\n  protocol: string,\n  command: StoredCommand,\n  current: ProducedRange\n): boolean => {\n  if (\n    !command.produced ||\n    !inRange(command.produced.wire.version, current.wire)\n  )\n    return false;\n  if (current.protocols === \"*\") return true;\n  if (command.produced.protocols === \"*\") return false;\n  const produced = command.produced.protocols.find((p) => p.name === protocol);\n  const offer = current.protocols.find((p) => p.name === protocol);\n  return (\n    produced !== undefined &&\n    offer !== undefined &&\n    inRange(produced.version, offer)\n  );\n};\n\n/**\n * The oldest wire whose stored statements the current client still replays.\n * Bundled clients before #45143 offered 2026-09-13 through 2026-09-30 and\n * stamped every queued statement with 2026-09-13. The durable statement grammar\n * (protocol, method, params, meta, seq) is the same on 2026-09-30 and\n * 2026-11-01; only frame-level context and the attach results cursor differ.\n * So those statements ride the current wire unchanged, while the network offer\n * stays 2026-11-01 only.\n */\nexport const STORED_STATEMENT_WIRE_FLOOR = \"2026-09-13\";\n\n/** A stored command the current wire replays as-is: re-stamp, don't park. */\nconst replayableOnCurrentWire = (\n  protocol: string,\n  command: StoredCommand,\n  current: ProducedRange\n): boolean =>\n  command.produced !== undefined &&\n  inRange(command.produced.wire.version, {\n    version: current.wire.version,\n    minVersion: STORED_STATEMENT_WIRE_FLOOR,\n  }) &&\n  storedCommandCompatible(\n    protocol,\n    { ...command, produced: { ...command.produced, wire: current.wire } },\n    current\n  );\n\n/**\n * A stored athena statement produced under the 2026-09-13 contract, as the\n * current contract says it: `run/enqueue`, `run/steer`, `run/steer-live` and\n * `run/prioritize` become `run/send` with the behavior each meant\n * (`upgradeLegacyRunCommand`), every other statement is unchanged, and the\n * athena offer it was produced under becomes the current one. `undefined` when\n * the command is not such a statement; `null` when it has no current\n * equivalent (a withdrawn ⚡), so it is parked.\n */\nfunction upgradeLegacyAthenaStatement(\n  protocol: string,\n  command: StoredCommand,\n  current: ProducedRange\n): StoredCommand | null | undefined {\n  if (protocol !== DEEP_AGENT_STATEWIRE_PROTOCOL || current.protocols === \"*\") return undefined;\n  const produced = command.produced;\n  if (produced === undefined || produced.protocols === \"*\") return undefined;\n  const athena = produced.protocols.find((p) => p.name === protocol);\n  const offer = current.protocols.find((p) => p.name === protocol);\n  if (\n    athena?.version !== DEEP_AGENT_LEGACY_STATEWIRE_PROTOCOL_VERSION ||\n    offer === undefined ||\n    inRange(athena.version, offer)\n  )\n    return undefined;\n  const upgraded = upgradeLegacyRunCommand(command);\n  if (upgraded === null && command.method in LEGACY_RUN_SEND_BEHAVIORS) return null;\n  return {\n    ...command,\n    ...(upgraded ?? {}),\n    produced: {\n      ...produced,\n      protocols: produced.protocols.map((p) => (p.name === protocol ? offer : p)),\n    },\n  };\n}\n\n/**\n * statewire's `migrate` for a record whose queued commands were produced by\n * an earlier build. A statement stored under the 2026-09-13 athena contract\n * is first said the current way ({@link upgradeLegacyAthenaStatement}). A command whose statement the current wire still replays\n * ({@link STORED_STATEMENT_WIRE_FLOOR}: an approval's `run/input` saved by a\n * previous bundled client, say) stays where it is, re-stamped with the current\n * range, so a stamped one is delivered with its original seq. Every other\n * incompatible command — stamped or still in the outbox — leaves its lane's\n * queue and becomes a `lost`/`session-lost` `settled` update in the lane's\n * inbox, under its own id, stamped `now`. Client identity, lane clocks,\n * compatible commands and undelivered updates are untouched, so the mount\n * proceeds and send recovery (or the user, through the held send) re-queues\n * the parked sends under the negotiated format instead of the runtime throwing\n * before it dials.\n *\n * Returns the record itself when nothing needed migrating, and the count of\n * parked commands otherwise.\n */\nexport function parkIncompatibleSessionCommands(\n  record: StatewireClient.SessionRecord,\n  current: ProducedRange,\n  now: number = Date.now()\n): { record: StatewireClient.SessionRecord; parked: number; restamped: number } {\n  let parked = 0;\n  let restamped = 0;\n  const lanes: Record<string, StatewireClient.SessionLane> = {};\n  const park = (\n    command: StoredCommand & { seq?: number }\n  ): StatewireClient.StoredSettled => ({\n    id: command.id,\n    method: command.method,\n    params: command.params,\n    ...(command.meta !== undefined && { meta: command.meta }),\n    ts: now,\n    ...(command.seq !== undefined && { seq: command.seq }),\n    ...(command.localMeta !== undefined && { localMeta: command.localMeta }),\n    failure: { fate: \"lost\", cause: \"session-lost\" },\n  });\n  for (const [protocol, lane] of Object.entries(record.lanes)) {\n    const inbox: StatewireClient.StoredSettled[] = [];\n    let laneRestamped = 0;\n    const sort = <T extends StoredCommand>(stored: readonly T[]): T[] =>\n      stored.flatMap((original) => {\n        const upgraded = upgradeLegacyAthenaStatement(protocol, original, current);\n        if (upgraded === null) {\n          inbox.push(park(original));\n          return [];\n        }\n        const command = (upgraded ?? original) as T;\n        if (upgraded !== undefined && storedCommandCompatible(protocol, command, current)) {\n          laneRestamped += 1;\n          return [command];\n        }\n        if (storedCommandCompatible(protocol, command, current))\n          return [command];\n        if (replayableOnCurrentWire(protocol, command, current)) {\n          laneRestamped += 1;\n          return [{ ...command, produced: current }];\n        }\n        inbox.push(park(command));\n        return [];\n      });\n    const commands = sort(lane.commands);\n    const outbox = lane.outbox === undefined ? undefined : sort(lane.outbox);\n    parked += inbox.length;\n    restamped += laneRestamped;\n    const { outbox: _outbox, ...rest } = lane;\n    lanes[protocol] =\n      inbox.length === 0 && laneRestamped === 0\n        ? lane\n        : {\n            ...rest,\n            commands,\n            ...(outbox !== undefined && outbox.length > 0 && { outbox }),\n            ...((inbox.length > 0 || lane.inbox !== undefined) && {\n              inbox: [...(lane.inbox ?? []), ...inbox],\n            }),\n          };\n  }\n  return parked === 0 && restamped === 0\n    ? { record, parked, restamped }\n    : { record: { ...record, lanes }, parked, restamped };\n}\n\n/**\n * Whether `error` is the browser refusing a write for lack of room, under\n * every name the engines use — `QuotaExceededError` (Chromium, WebKit, current\n * Firefox), `NS_ERROR_DOM_QUOTA_REACHED` (older Firefox), the legacy\n * `DOMException` codes 22 (WebKit) and 1014 (Firefox) — or a plain error whose\n * message carries one of those (storage proxies and WebViews rewrap the\n * exception). Olympus's `isStorageQuotaError` recognises the same set; the two\n * stay in step.\n */\nexport function isStorageQuotaError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) return false;\n  const { name, code, message } = error as {\n    name?: unknown;\n    code?: unknown;\n    message?: unknown;\n  };\n  return (\n    name === \"QuotaExceededError\" ||\n    name === \"NS_ERROR_DOM_QUOTA_REACHED\" ||\n    code === 22 ||\n    code === 1014 ||\n    (typeof message === \"string\" &&\n      /exceeded the quota|quotaexceedederror|ns_error_dom_quota_reached/i.test(\n        message\n      ))\n  );\n}\n\n/**\n * Why `raw` is a stored record this build cannot read, or `undefined` when it\n * may be one. Mirrors the two decode failures statewire raises for a record it\n * cannot read — invalid JSON, and a `statewireStorageVersion` newer than the\n * ones this build's statewire decodes (a tab left open across a\n * statewire upgrade, reading the record a newer tab keeps) — because statewire\n * throws those out of the resource at mount instead of treating the record as\n * absent. The same goes for a format-6 record that names another principal\n * than the one its key is scoped by (a record copied under another account's\n * key): statewire refuses it at mount. A structurally invalid record of the\n * right version still fails inside statewire.\n */\nfunction unreadableRecord(key: string, raw: string): Error | undefined {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    // Not JSON: statewire reads it as absent, reports `onEvict` `corrupt`, and the next save\n    // replaces it (its sweeps remove it once unmounted). No build can read it, so nothing to shield.\n    return undefined;\n  }\n  if (typeof parsed !== \"object\" || parsed === null) {\n    return new Error(\"stored session record is not an object\");\n  }\n  const version = (parsed as { statewireStorageVersion?: unknown })\n    .statewireStorageVersion;\n  if (version !== undefined && !READABLE_STORAGE_VERSIONS.has(version)) {\n    return new Error(\n      `stored session record uses storage version ${String(version)}`\n    );\n  }\n  // Every namespace ends in `:`, so a scoped key holds `:<principal>:`.\n  const owner = (parsed as { principal?: unknown }).principal;\n  if (\n    version === 6 &&\n    typeof owner === \"string\" &&\n    !key.includes(`:${encodeURIComponent(owner)}:`)\n  ) {\n    return new Error(\"stored session record belongs to another principal\");\n  }\n  return undefined;\n}\n\ntype SyncBackend = {\n  getItem: (key: string) => string | null;\n  setItem: (key: string, value: string) => void;\n  removeItem: (key: string) => void;\n  getAllKeys: () => readonly string[];\n  withUnused: (key: string, action: () => Promise<void>) => Promise<void>;\n  subscribe?: (listener: (key: string) => void) => () => void;\n};\n\n/**\n * The browser backend `@assistant-ui/react-statewire`'s `LocalStorageSession`\n * uses, reproduced here because that resource does not take a backend: raw\n * `localStorage`, with retention cleanup fenced by the same Web Locks so a\n * sweep never removes a record another tab is actively sharing.\n */\nfunction browserBackend({\n  storage,\n  locks,\n}: {\n  storage: StorageLike;\n  locks: LockManagerLike;\n}): SyncBackend {\n  return {\n    getItem: (key) => storage.getItem(key),\n    setItem: (key, value) => storage.setItem(key, value),\n    removeItem: (key) => storage.removeItem(key),\n    getAllKeys: () =>\n      Array.from({ length: storage.length }, (_, index) =>\n        storage.key(index)\n      ).filter((key): key is string => key !== null),\n    withUnused: async (key, action) => {\n      await locks.request(\n        SESSION_ACTIVE_PREFIX + key,\n        { ifAvailable: true },\n        async (active) => {\n          if (active === null) return;\n          await locks.request(\n            SESSION_LOCK_PREFIX + key.slice(SESSION_PREFIX.length),\n            { ifAvailable: true },\n            async (lock) => {\n              if (lock === null) return;\n              await action();\n            }\n          );\n        }\n      );\n    },\n    subscribe: (listener) => {\n      const onStorage = (event: StorageEventLike) => {\n        if (event.key !== null) listener(event.key);\n      };\n      browserGlobals.addEventListener?.(\"storage\", onStorage);\n      return () => browserGlobals.removeEventListener?.(\"storage\", onStorage);\n    },\n  };\n}\n\n/**\n * Wraps a synchronous key-value backend so a failing origin degrades the\n * session to memory-only persistence instead of stopping the connection.\n *\n * statewire's session storage latches the first unrecognised write failure\n * and from then on rejects every send (`stopped/storage-error`, \"session\n * storage failed\" on the connection chip), and refuses a send outright\n * (`aborted`/`quota`) when the write that would add it raises a\n * `QuotaExceededError`. Here every write failure is absorbed instead, so chat\n * keeps working: a quota failure first asks `onQuota` to make room (once per\n * key until a write lands again) and then writes the absorbed record through;\n * every other failure, and a quota failure the reclaim could not fix, is\n * reported through `onDegraded`.\n *\n * An absorbed write is kept in an in-memory overlay that `getItem` serves\n * first: statewire re-reads the record through `load()` on every shared-mode\n * transaction, so a stale persisted copy would otherwise win back its old\n * `nextSeq`, `clientId` and command journal. The overlay is per tab — another\n * tab sharing the thread still reads the last persisted copy, which is the\n * memory-only degradation this backend exists to allow. A later successful\n * write clears the overlay entry.\n *\n * A key whose read threw, or whose stored value this build cannot read (see\n * {@link unreadableRecord}), is served as absent and shielded: writes to it\n * stay in the overlay for good, so a fresh lane minted over an unreadable\n * record never overwrites what another tab or a newer build persisted.\n */\nexport function quotaTolerantBackend({\n  inner,\n  onDegraded,\n  onQuota,\n}: {\n  inner: SyncBackend;\n  onDegraded: (degradation: SessionStorageDegradation) => void;\n  /** Frees room after a quota failure on `key`; the absorbed write is retried once it settles. */\n  onQuota?: (key: string) => Promise<void>;\n}): SyncBackend & KeyValueSessionStorage.Backend {\n  // Keys whose quota failure already asked for a reclaim: until a write\n  // succeeds again, later failures on the key are reported instead, or every\n  // save would re-run the reclaim (which evicts other threads' idle records).\n  const reclaimed = new Set<string>();\n  // Absorbed writes, served ahead of the backend (see the function docs).\n  const overlay = new Map<string, string>();\n  // Keys served as absent and never written through (see the function docs).\n  const shielded = new Set<string>();\n  // statewire re-reads and re-decodes the record on every transaction; the\n  // readability check is memoised on the raw string so it costs one string\n  // comparison per read, not a second parse.\n  const checked = new Map<\n    string,\n    { raw: string; verdict: Error | undefined }\n  >();\n  const readable = (key: string, raw: string): Error | undefined => {\n    const previous = checked.get(key);\n    if (previous !== undefined && previous.raw === raw) return previous.verdict;\n    const verdict = unreadableRecord(key, raw);\n    checked.set(key, { raw, verdict });\n    return verdict;\n  };\n  const writeThrough = (key: string): void => {\n    const value = overlay.get(key);\n    if (value === undefined || shielded.has(key)) return;\n    try {\n      inner.setItem(key, value);\n    } catch (error) {\n      onDegraded({ operation: \"setItem\", key, error });\n      return;\n    }\n    // A newer absorbed write may have landed while the reclaim ran.\n    if (overlay.get(key) === value) overlay.delete(key);\n    reclaimed.delete(key);\n  };\n  return {\n    getItem: (key) => {\n      const shadowed = overlay.get(key);\n      if (shadowed !== undefined) return shadowed;\n      if (shielded.has(key)) return null;\n      let raw: string | null;\n      try {\n        raw = inner.getItem(key);\n      } catch (error) {\n        shielded.add(key);\n        onDegraded({ operation: \"getItem\", key, error });\n        return null;\n      }\n      if (raw === null) return null;\n      const unreadable = readable(key, raw);\n      if (unreadable === undefined) return raw;\n      shielded.add(key);\n      onDegraded({ operation: \"record\", key, error: unreadable });\n      return null;\n    },\n    setItem: (key, value) => {\n      if (shielded.has(key)) {\n        overlay.set(key, value);\n        return;\n      }\n      try {\n        inner.setItem(key, value);\n        overlay.delete(key);\n        reclaimed.delete(key);\n      } catch (error) {\n        overlay.set(key, value);\n        if (isStorageQuotaError(error) && onQuota && !reclaimed.has(key)) {\n          reclaimed.add(key);\n          onQuota(key).then(\n            () => writeThrough(key),\n            (reclaimError: unknown) =>\n              onDegraded({ operation: \"withUnused\", key, error: reclaimError })\n          );\n          return;\n        }\n        onDegraded({ operation: \"setItem\", key, error });\n      }\n    },\n    removeItem: (key) => {\n      overlay.delete(key);\n      if (shielded.has(key)) return;\n      try {\n        inner.removeItem(key);\n      } catch (error) {\n        onDegraded({ operation: \"removeItem\", key, error });\n      }\n    },\n    getAllKeys: () => {\n      const keys = new Set<string>(overlay.keys());\n      try {\n        for (const key of inner.getAllKeys()) keys.add(key);\n      } catch (error) {\n        onDegraded({ operation: \"getAllKeys\", key: \"\", error });\n      }\n      return [...keys];\n    },\n    withUnused: async (key, action) => {\n      try {\n        await inner.withUnused(key, action);\n      } catch (error) {\n        onDegraded({ operation: \"withUnused\", key, error });\n      }\n    },\n    ...(inner.subscribe !== undefined && { subscribe: inner.subscribe }),\n  };\n}\n\nconst asList = (value: unknown): readonly unknown[] =>\n  Array.isArray(value) ? value : [];\n\n/**\n * What retention needs from a stored record: its save stamp, and whether it\n * holds anything a user could lose — a stamped command, an outbox entry, an\n * undelivered `settled` update, a sharer's removal note, a parked verdict, or\n * an older format's failed send. `undefined` when the record is not one this\n * build can read.\n */\nfunction retentionView(\n  raw: string | null\n): { savedAt: number | undefined; holdsSends: boolean } | undefined {\n  if (raw === null) return undefined;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n  if (typeof parsed !== \"object\" || parsed === null) return undefined;\n  const record = parsed as {\n    savedAt?: unknown;\n    updatedAt?: unknown;\n    commands?: unknown;\n    failed?: unknown;\n    lanes?: unknown;\n  };\n  const stamp = record.savedAt ?? record.updatedAt;\n  const lanes =\n    typeof record.lanes === \"object\" && record.lanes !== null\n      ? Object.values(record.lanes as Record<string, unknown>)\n      : [];\n  const holdsSends =\n    asList(record.commands).length > 0 ||\n    asList(record.failed).length > 0 ||\n    lanes.some((lane) => {\n      if (typeof lane !== \"object\" || lane === null) return false;\n      const fields = lane as Record<string, unknown>;\n      return [\n        \"commands\",\n        \"outbox\",\n        \"inbox\",\n        \"removed\",\n        \"verdicts\",\n        \"failed\",\n      ].some((field) => asList(fields[field]).length > 0);\n    });\n  return {\n    savedAt:\n      typeof stamp === \"number\" && Number.isFinite(stamp) ? stamp : undefined,\n    holdsSends,\n  };\n}\n\n/**\n * Whether the localStorage session record under `sessionKey` still holds something a user could\n * lose (see {@link retentionView}): a host moving a thread to another session storage keeps it on\n * this one until it drains. `false` without localStorage or a readable record.\n */\nexport function persistedSessionHoldsSends(sessionKey: string): boolean {\n  const storage = browserGlobals.localStorage;\n  if (!storage) return false;\n  let raw: string | null;\n  try {\n    raw = storage.getItem(SESSION_PREFIX + sessionKey);\n  } catch {\n    return false;\n  }\n  return retentionView(raw)?.holdsSends ?? false;\n}\n\n/**\n * Removes the session records that hold no sends (see {@link retentionView})\n * and were last saved more than `maxAgeMs` ago, skipping the keys mounted in\n * this tab and, through `withUnused`, those another tab holds. With `quota`\n * (the origin refused a write), the older half of the remaining empty records\n * goes too.\n *\n * A record that still holds a send — queued, held, stamped, or a failure\n * awaiting delivery — is never removed, whatever its age: it is a message the\n * user has not seen land, and statewire hands it back on the thread's next\n * mount.\n */\nexport async function retireExpiredSessionRecords({\n  backend,\n  mounted,\n  maxAgeMs,\n  quota = false,\n  now = Date.now(),\n}: {\n  backend: Pick<\n    SyncBackend,\n    \"getItem\" | \"removeItem\" | \"getAllKeys\" | \"withUnused\"\n  >;\n  mounted: ReadonlyMap<string, number>;\n  maxAgeMs: number;\n  quota?: boolean;\n  now?: number;\n}): Promise<void> {\n  const empty: { key: string; savedAt: number }[] = [];\n  for (const key of backend.getAllKeys()) {\n    if (!key.startsWith(SESSION_PREFIX) || mounted.has(key)) continue;\n    const view = retentionView(backend.getItem(key));\n    if (view?.savedAt === undefined || view.holdsSends) continue;\n    empty.push({ key, savedAt: view.savedAt });\n  }\n  empty.sort((a, b) => b.savedAt - a.savedAt);\n  const quotaStart = Math.floor(empty.length / 2);\n  for (const [index, { key, savedAt }] of empty.entries()) {\n    const expired = now - savedAt > maxAgeMs;\n    if (!expired && !(quota && index >= quotaStart)) continue;\n    await backend.withUnused(key, async () => {\n      if (mounted.has(key)) return;\n      const again = retentionView(backend.getItem(key));\n      if (again?.savedAt !== savedAt || again.holdsSends) return;\n      backend.removeItem(key);\n    });\n  }\n}\n\ntype DegradationListener = (degradation: SessionStorageDegradation) => void;\n\ntype SharedBackend = {\n  backend: SyncBackend & KeyValueSessionStorage.Backend;\n  listeners: Set<DegradationListener>;\n  /** Storage keys of the sessions mounted in this tab, with mount counts. */\n  mounted: Map<string, number>;\n  /** The age past which an empty record goes; the longest a mounted session asked for. */\n  maxAgeMs: Map<string, number>;\n};\n\n/**\n * One backend per storage object — per origin, in a browser — shared by every\n * session mounted in the tab, exactly as the upstream resource's module-level\n * backend is. statewire keys its in-tab \"active\" bookkeeping by backend\n * identity, so a mount's retention sweep only skips the records of other\n * mounts on the *same* backend; and the absorbed-write overlay has to outlive\n * a remount of the same thread (a thread switch and back) or the remount would\n * read the stale persisted copy. Degradations fan out to every mounted\n * session's reporter.\n */\nconst sharedBackends = new WeakMap<StorageLike, SharedBackend>();\n\nfunction sharedBackend({\n  storage,\n  locks,\n}: {\n  storage: StorageLike;\n  locks: LockManagerLike;\n}): SharedBackend {\n  let shared = sharedBackends.get(storage);\n  if (shared === undefined) {\n    const listeners = new Set<DegradationListener>();\n    const mounted = new Map<string, number>();\n    const maxAgeMs = new Map<string, number>();\n    const inner = browserBackend({ storage, locks });\n    shared = {\n      listeners,\n      mounted,\n      maxAgeMs,\n      backend: quotaTolerantBackend({\n        inner,\n        onDegraded: (degradation) => {\n          for (const listener of listeners) listener(degradation);\n        },\n        onQuota: () =>\n          retireExpiredSessionRecords({\n            backend: inner,\n            mounted,\n            maxAgeMs: Math.max(7 * DAY_MS, ...maxAgeMs.values()),\n            quota: true,\n          }),\n      }),\n    };\n    sharedBackends.set(storage, shared);\n  }\n  return shared;\n}\n\n/** Runs `fn` under a Web Lock, or unfenced when the lock manager refuses the request itself. */\nasync function underLock<T>({\n  locks,\n  name,\n  fn,\n  onRefused,\n}: {\n  locks: LockManagerLike;\n  name: string;\n  fn: () => T | Promise<T>;\n  onRefused: (error: unknown) => void;\n}): Promise<T> {\n  let granted = false;\n  try {\n    return await locks.request(name, async () => {\n      granted = true;\n      return fn();\n    });\n  } catch (error) {\n    if (granted) throw error;\n    // The lock manager refused the request itself (a detached or\n    // back/forward-cached document, a lockdown-mode origin): the transaction\n    // runs unfenced rather than stopping the session.\n    onRefused(error);\n    return fn();\n  }\n}\n\nfunction newTabId(): string {\n  const host = globalThis as { crypto?: { randomUUID?: () => string } };\n  return (\n    host.crypto?.randomUUID?.() ??\n    `tab-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`\n  );\n}\n\n/**\n * Athena's browser session store: `@assistant-ui/react-statewire`'s\n * `LocalStorageSession` contract (per-thread key under the shared prefix,\n * cross-tab Web Lock, tab ownership and settled-delivery lock, storage-event\n * subscription) over upstream `KeyValueSessionStorage` and\n * {@link quotaTolerantBackend}, with Athena's protocol lane and retention\n * policy: statewire retires every record no tab has mounted past `ttl`, sends\n * and all (reported through `onEvict` `dropped`), and empty ones past `max`;\n * {@link retireExpiredSessionRecords} also retires every account's empty\n * records past `ttl`. A record past `recordBytes` sheds the payloads of its\n * stored `settled` updates.\n */\nconst useQuotaSafeLocalStorageSession = ({\n  threadId,\n  namespace,\n  principal,\n  unscopedPrefix,\n  ttl = 7 * DAY_MS,\n  max = 50,\n  recordBytes = LOCAL_SESSION_RECORD_BYTES,\n  onStorageDegraded,\n  onEvict,\n}: QuotaSafeLocalStorageSession.Options): StatewireClient.SessionStorage => {\n  const storage = browserGlobals.localStorage;\n  const locks = browserGlobals.navigator?.locks;\n  if (!storage)\n    throw new Error(\n      \"statewire: QuotaSafeLocalStorageSession requires localStorage\"\n    );\n  if (!locks)\n    throw new Error(\n      \"statewire: QuotaSafeLocalStorageSession requires the Web Locks API (navigator.locks)\"\n    );\n  const sessionKey = localStorageSessionKey({ namespace, principal, threadId });\n  const storageKey = SESSION_PREFIX + sessionKey;\n  const lockName = SESSION_LOCK_PREFIX + sessionKey;\n\n  // One mounted store serves one lane scope (one principal, one backend) for\n  // its whole life: statewire refuses a principal change, and a backend change\n  // is refused here the same way. The statewire session over the store keeps\n  // the client id, lane clocks and journal it loaded, so a store moved to\n  // another principal's lane would carry them there and send the previous\n  // principal's undelivered commands under the next one's credential. A thread\n  // switch keeps the scope and re-targets the store; a change of scope refuses,\n  // and the host remounts the account's thread (`useDeepAgentRuntime` does).\n  // The previous principal's record is left as it is.\n  const mountedScope = useRef<DeepAgentSessionLaneScope>({\n    threadId,\n    laneKey: sessionKey,\n  });\n  if (\n    !isSameSessionLaneScope({\n      scope: mountedScope.current,\n      key: (id) => localStorageSessionKey({ namespace, principal, threadId: id }),\n    })\n  ) {\n    throw new Error(\n      \"statewire: principal changed; remount the account's thread/session\"\n    );\n  }\n\n  // The lane 0.24 kept for this account under its unscoped key moves to the\n  // scoped one before statewire reads it.\n  useMemo(() => {\n    if (unscopedPrefix === undefined) return;\n    adoptUnscopedLocalStorageSessions({\n      namespace,\n      principal,\n      unscopedPrefix,\n      threadId,\n      storage,\n    });\n  }, [namespace, principal, unscopedPrefix, threadId, storage]);\n\n  const latestOnDegraded = useRef(onStorageDegraded);\n  latestOnDegraded.current = onStorageDegraded;\n  const reportDegradation = useMemo(() => {\n    const reported = new Set<string>();\n    return (degradation: SessionStorageDegradation) => {\n      const handler = latestOnDegraded.current;\n      if (handler) {\n        try {\n          handler(degradation);\n        } catch {\n          // Reporting runs inside the session's recovery path and must never\n          // become the failure it is reporting.\n        }\n        return;\n      }\n      const dedupeKey = `${degradation.operation}:${degradation.key}`;\n      if (reported.has(dedupeKey)) return;\n      reported.add(dedupeKey);\n      console.warn(\n        `[statewire] session storage degraded to memory only (${degradation.operation} ${degradation.key})`,\n        degradation.error\n      );\n    };\n  }, []);\n\n  const latestOnEvict = useRef(onEvict);\n  latestOnEvict.current = onEvict;\n  const reportEvict = useCallback(\n    (event: KeyValueSessionStorage.EvictEvent) => {\n      try {\n        latestOnEvict.current?.(event);\n      } catch {\n        // A reporting handler never fails the session's own bookkeeping.\n      }\n    },\n    []\n  );\n\n  const shared = sharedBackend({ storage, locks });\n  // Registered during render as well as in the effect: the read statewire\n  // makes while mounting below happens before any effect runs, and tap may\n  // clean an effect up and re-run it within one commit.\n  shared.listeners.add(reportDegradation);\n  useEffect(() => {\n    shared.listeners.add(reportDegradation);\n    return () => {\n      shared.listeners.delete(reportDegradation);\n    };\n  }, [shared, reportDegradation]);\n\n  useEffect(() => {\n    const { mounted, maxAgeMs } = shared;\n    mounted.set(storageKey, (mounted.get(storageKey) ?? 0) + 1);\n    maxAgeMs.set(storageKey, ttl);\n    retireExpiredSessionRecords({\n      backend: shared.backend,\n      mounted,\n      maxAgeMs: ttl,\n    }).catch((error: unknown) =>\n      reportDegradation({ operation: \"withUnused\", key: storageKey, error })\n    );\n    return () => {\n      const count = (mounted.get(storageKey) ?? 1) - 1;\n      if (count === 0) {\n        mounted.delete(storageKey);\n        maxAgeMs.delete(storageKey);\n      } else mounted.set(storageKey, count);\n    };\n  }, [shared, storageKey, ttl, reportDegradation]);\n\n  // This tab's identity for the stamps it sends. The lock is held for the\n  // tab's life, so another tab's `whenGone` resolves only once this one is\n  // gone and it may take the stamps over.\n  const [tabId] = useState(newTabId);\n  useEffect(() => {\n    let release: (() => void) | undefined;\n    const held = new Promise<void>((resolve) => {\n      release = resolve;\n    });\n    Promise.resolve(locks.request(TAB_LOCK_PREFIX + tabId, () => held)).catch(\n      (error: unknown) =>\n        reportDegradation({ operation: \"lock\", key: storageKey, error })\n    );\n    return () => release?.();\n  }, [locks, tabId, storageKey, reportDegradation]);\n\n  // Hold the record's shared \"active\" lock while mounted so another tab's\n  // retention sweep skips it (the same fence the upstream resource holds).\n  useEffect(() => {\n    let release: (() => void) | undefined;\n    let disposed = false;\n    Promise.resolve(\n      locks.request(\n        SESSION_ACTIVE_PREFIX + storageKey,\n        { mode: \"shared\" },\n        () => {\n          if (disposed) return;\n          return new Promise<void>((resolve) => {\n            release = resolve;\n          });\n        }\n      )\n    ).catch((error: unknown) =>\n      reportDegradation({ operation: \"lock\", key: storageKey, error })\n    );\n    return () => {\n      disposed = true;\n      release?.();\n    };\n  }, [locks, storageKey, reportDegradation]);\n\n  // The storage resource includes migrate in its identity. A fresh callback\n  // on every render replaces the store and prevents hydration from settling.\n  const migrate = useCallback<\n    NonNullable<StatewireClient.SessionStorage[\"migrate\"]>\n  >(\n    (record, current) => {\n      const migrated = parkIncompatibleSessionCommands(record, current);\n      if (migrated.parked === 0) return migrated.record;\n      reportDegradation({\n        operation: \"migrate\",\n        key: storageKey,\n        error: new Error(\n          `${migrated.parked} queued statewire command(s) predate the current protocol range; parked as failed sends`\n        ),\n      });\n      return migrated.record;\n    },\n    [reportDegradation, storageKey]\n  );\n\n  const sessionStorage = useResource(\n    KeyValueSessionStorage({\n      backend: shared.backend,\n      key: threadId,\n      namespace: SESSION_PREFIX + namespace,\n      principal,\n      protocol: DEEP_AGENT_STATEWIRE_PROTOCOL,\n      migrate,\n      // statewire 0.27.1 retires a record past maxAgeMs even while it holds\n      // sends: kept failures with their full params were what filled the\n      // origin (#52031).\n      retention: { maxAgeMs: ttl, maxEntries: max },\n      limits: { recordBytes },\n      // A failure statewire raises itself (a structurally invalid stored\n      // record) still stops the session; it is at least reported the same way.\n      onError: (error) =>\n        reportDegradation({ operation: \"session\", key: storageKey, error }),\n      onEvict: reportEvict,\n    })\n  );\n\n  return useMemo(\n    (): StatewireClient.SessionStorage => ({\n      ...sessionStorage,\n      lock: <T>(fn: () => T | Promise<T>): Promise<T> =>\n        underLock({\n          locks,\n          name: lockName,\n          fn,\n          onRefused: (error) =>\n            reportDegradation({ operation: \"lock\", key: storageKey, error }),\n        }),\n      notifyLock: <T>(fn: () => Promise<T>): Promise<T> =>\n        underLock({\n          locks,\n          name: NOTIFY_LOCK_PREFIX + storageKey,\n          fn,\n          onRefused: (error) =>\n            reportDegradation({ operation: \"lock\", key: storageKey, error }),\n        }),\n      owner: {\n        id: tabId,\n        whenGone: (id, signal) =>\n          Promise.resolve(\n            locks.request(TAB_LOCK_PREFIX + id, { signal }, () => undefined)\n          ),\n      },\n      subscribe: (listener: () => void) => {\n        const onStorage = (event: StorageEventLike) => {\n          if (event.key === storageKey) listener();\n        };\n        browserGlobals.addEventListener?.(\"storage\", onStorage);\n        return () => browserGlobals.removeEventListener?.(\"storage\", onStorage);\n      },\n    }),\n    [sessionStorage, locks, storageKey, lockName, tabId, reportDegradation]\n  );\n};\n\n/** Athena's browser session keys and retention policy. */\nexport const QuotaSafeLocalStorageSession = resource(\n  useQuotaSafeLocalStorageSession\n);\n\nexport namespace QuotaSafeLocalStorageSession {\n  export type Options = {\n    threadId: string;\n    /**\n     * The backend the lanes belong to, as a key prefix (the sync host and `:`):\n     * a thread id is only meaningful against the backend that minted it.\n     */\n    namespace: string;\n    /**\n     * The signed-in account the lanes belong to ({@link sessionPrincipal}).\n     * Lanes are stored under `aui:statewire-session:<namespace><principal>:<threadId>`.\n     * It must stay the same for the life of the mounted store: a change throws\n     * (\"principal changed\"), and the host remounts the account's thread.\n     */\n    principal: string;\n    /**\n     * Where statewire 0.24 kept this account's lanes, after the\n     * `aui:statewire-session:` prefix and before the thread id (its sync host\n     * and user id). The thread's lane there moves to the scoped key on mount\n     * ({@link adoptUnscopedLocalStorageSessions}).\n     */\n    unscopedPrefix?: string;\n    /**\n     * Age past which a record no tab has mounted is removed, unsent and failed\n     * sends included. Default 7 days.\n     */\n    ttl?: number;\n    /** Records holding no sends kept across the origin. Default 50. */\n    max?: number;\n    /**\n     * A record's byte budget ({@link LOCAL_SESSION_RECORD_BYTES}): past it the\n     * payloads of stored `settled` updates go, and a write that adds a send\n     * still past it is refused (`aborted` / `quota`).\n     */\n    recordBytes?: number;\n    /**\n     * Called when a storage operation failed and the session carried on in\n     * memory. Defaults to one `console.warn` per operation and key.\n     */\n    onStorageDegraded?: (degradation: SessionStorageDegradation) => void;\n    /**\n     * Called when statewire drops undelivered `settled` updates: past a\n     * lane's inbox cap, or with a record its retention removed.\n     */\n    onEvict?: (event: KeyValueSessionStorage.EvictEvent) => void;\n  };\n}\n"],"names":["sessionNamespace","storage","failed","DEEP_AGENT_STATEWIRE_PROTOCOL","DEEP_AGENT_LEGACY_STATEWIRE_PROTOCOL_VERSION","upgradeLegacyRunCommand","LEGACY_RUN_SEND_BEHAVIORS","_a","useRef","isSameSessionLaneScope","useMemo","useCallback","useEffect","useState","useResource","KeyValueSessionStorage","resource"],"mappings":";;;;;;;;AAcA,MAAM,iBAAiB;AACvB,MAAM,sBAAsB;AAC5B,MAAM,wBAAwB;AAE9B,MAAM,kBAAkB;AAExB,MAAM,qBAAqB;AAC3B,MAAM,SAAS,KAAK,KAAK,KAAK;AAMvB,MAAM,6BAA6B,MAAM;AAEhD,MAAM,4BAAkD,oBAAI,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;AA8ClF,MAAM,iBAAiB;AAMhB,SAAS,iBAAiB,SAAyB;AACxD,SAAO,QAAQ,OAAO;AACxB;AAMO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAIW;AACT,SAAOA,yBAAiB,WAAW,SAAS,IAAI;AAClD;AAcO,SAAS,kCAAkC;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAAC,WAAU,eAAe;AAC3B,GAMW;AACT,MAAI,CAACA,SAAS,QAAO;AACrB,QAAM,OAAO,iBAAiB;AAC9B,MAAI,QAAQ;AACZ,MAAI;AACF,UAAM,OACJ,aAAa,SACT,MAAM,KAAK,EAAE,QAAQA,SAAQ,OAAA,GAAU,CAAC,GAAG,UAAUA,SAAQ,IAAI,KAAK,CAAC,EAAE;AAAA,MACvE,CAAC,SAAuB,2BAAK,WAAW,WAAU;AAAA,IAAA,IAEpD,CAAC,OAAO,QAAQ;AACtB,eAAW,OAAO,MAAM;AACtB,YAAM,MAAMA,SAAQ,QAAQ,GAAG;AAC/B,UAAI,QAAQ,KAAM;AAClB,YAAM,SACJ,iBACA,uBAAuB,EAAE,WAAW,WAAW,UAAU,IAAI,MAAM,KAAK,MAAM,EAAA,CAAG;AACnF,UAAI,WAAW,OAAOA,SAAQ,QAAQ,MAAM,MAAM,KAAM;AACxD,MAAAA,SAAQ,QAAQ,QAAQ,GAAG;AAC3B,MAAAA,SAAQ,WAAW,GAAG;AACtB,eAAS;AAAA,IACX;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAcO,SAAS,8BACd,YACoC;AACpC,QAAMA,WAAU,eAAe;AAC/B,MAAI,CAACA,SAAS,QAAO;AACrB,MAAI;AACJ,MAAI;AACF,UAAM,MAAMA,SAAQ,QAAQ,iBAAiB,UAAU;AACvD,aACE,QAAQ,OAAO,OAAQ,KAAK,MAAM,GAAG;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,+BAA+B,MAAM;AAC9C;AAaO,SAAS,+BACd,QACoC;;AACpC,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,6BAAa,IAAA;AACnB,QAAM,QACJ,OAAO,SAAS,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ,CAAA;AACpE,QAAM,SAAS;AAAA,IACb,GAAI,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAA;AAAA,IACnD,GAAG,OAAO,OAAO,KAAK,EAAE,QAAQ,CAAC,SAAS;AAAA,MACxC,GAAI,MAAM,QAAQ,6BAAM,MAAM,IAAI,KAAK,SAAS,CAAA;AAAA,MAChD,GAAI,MAAM,QAAQ,6BAAM,KAAK,IACzB,KAAK,MAAM;AAAA,QACT,CAAC,WACE,+BAAwC,aAAY;AAAA,MAAA,IAEzD,CAAA;AAAA,IAAC,CACN;AAAA,EAAA;AAEH,aAAW,SAAS,QAAQ;AAC1B,UAAMC,UAAS;AAIf,UAAM,aAAYA,oDAAQ,WAARA,mBAAiB,OAAjBA,mBAAqB,YAArBA,mBAA8B;AAChD,QAAI,OAAO,cAAc,YAAY,QAAOA,mCAAQ,QAAO,UAAU;AACnE,aAAO,IAAI,WAAWA,QAAO,EAAE;AAAA,IACjC;AAAA,EACF;AACA,SAAO;AACT;AAiCA,MAAM,UAAU,CAAC,OAAe,UAC9B,UAAU,MAAM,cAAc,MAAM,YAAY,SAAS,MAAM;AAKjE,MAAM,0BAA0B,CAC9B,UACA,SACA,YACY;AACZ,MACE,CAAC,QAAQ,YACT,CAAC,QAAQ,QAAQ,SAAS,KAAK,SAAS,QAAQ,IAAI;AAEpD,WAAO;AACT,MAAI,QAAQ,cAAc,IAAK,QAAO;AACtC,MAAI,QAAQ,SAAS,cAAc,IAAK,QAAO;AAC/C,QAAM,WAAW,QAAQ,SAAS,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAC3E,QAAM,QAAQ,QAAQ,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAC/D,SACE,aAAa,UACb,UAAU,UACV,QAAQ,SAAS,SAAS,KAAK;AAEnC;AAWO,MAAM,8BAA8B;AAG3C,MAAM,0BAA0B,CAC9B,UACA,SACA,YAEA,QAAQ,aAAa,UACrB,QAAQ,QAAQ,SAAS,KAAK,SAAS;AAAA,EACrC,SAAS,QAAQ,KAAK;AAAA,EACtB,YAAY;AACd,CAAC,KACD;AAAA,EACE;AAAA,EACA,EAAE,GAAG,SAAS,UAAU,EAAE,GAAG,QAAQ,UAAU,MAAM,QAAQ,OAAK;AAAA,EAClE;AACF;AAWF,SAAS,6BACP,UACA,SACA,SACkC;AAClC,MAAI,aAAaC,mBAAAA,iCAAiC,QAAQ,cAAc,IAAK,QAAO;AACpF,QAAM,WAAW,QAAQ;AACzB,MAAI,aAAa,UAAa,SAAS,cAAc,IAAK,QAAO;AACjE,QAAM,SAAS,SAAS,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AACjE,QAAM,QAAQ,QAAQ,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ;AAC/D,OACE,iCAAQ,aAAYC,mBAAAA,gDACpB,UAAU,UACV,QAAQ,OAAO,SAAS,KAAK;AAE7B,WAAO;AACT,QAAM,WAAWC,QAAAA,wBAAwB,OAAO;AAChD,MAAI,aAAa,QAAQ,QAAQ,UAAUC,QAAAA,0BAA2B,QAAO;AAC7E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAI,YAAY,CAAA;AAAA,IAChB,UAAU;AAAA,MACR,GAAG;AAAA,MACH,WAAW,SAAS,UAAU,IAAI,CAAC,MAAO,EAAE,SAAS,WAAW,QAAQ,CAAE;AAAA,IAAA;AAAA,EAC5E;AAEJ;AAoBO,SAAS,gCACd,QACA,SACA,MAAc,KAAK,OAC2D;AAC9E,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,QAAM,QAAqD,CAAA;AAC3D,QAAM,OAAO,CACX,aACmC;AAAA,IACnC,IAAI,QAAQ;AAAA,IACZ,QAAQ,QAAQ;AAAA,IAChB,QAAQ,QAAQ;AAAA,IAChB,GAAI,QAAQ,SAAS,UAAa,EAAE,MAAM,QAAQ,KAAA;AAAA,IAClD,IAAI;AAAA,IACJ,GAAI,QAAQ,QAAQ,UAAa,EAAE,KAAK,QAAQ,IAAA;AAAA,IAChD,GAAI,QAAQ,cAAc,UAAa,EAAE,WAAW,QAAQ,UAAA;AAAA,IAC5D,SAAS,EAAE,MAAM,QAAQ,OAAO,eAAA;AAAA,EAAe;AAEjD,aAAW,CAAC,UAAU,IAAI,KAAK,OAAO,QAAQ,OAAO,KAAK,GAAG;AAC3D,UAAM,QAAyC,CAAA;AAC/C,QAAI,gBAAgB;AACpB,UAAM,OAAO,CAA0B,WACrC,OAAO,QAAQ,CAAC,aAAa;AAC3B,YAAM,WAAW,6BAA6B,UAAU,UAAU,OAAO;AACzE,UAAI,aAAa,MAAM;AACrB,cAAM,KAAK,KAAK,QAAQ,CAAC;AACzB,eAAO,CAAA;AAAA,MACT;AACA,YAAM,UAAW,YAAY;AAC7B,UAAI,aAAa,UAAa,wBAAwB,UAAU,SAAS,OAAO,GAAG;AACjF,yBAAiB;AACjB,eAAO,CAAC,OAAO;AAAA,MACjB;AACA,UAAI,wBAAwB,UAAU,SAAS,OAAO;AACpD,eAAO,CAAC,OAAO;AACjB,UAAI,wBAAwB,UAAU,SAAS,OAAO,GAAG;AACvD,yBAAiB;AACjB,eAAO,CAAC,EAAE,GAAG,SAAS,UAAU,SAAS;AAAA,MAC3C;AACA,YAAM,KAAK,KAAK,OAAO,CAAC;AACxB,aAAO,CAAA;AAAA,IACT,CAAC;AACH,UAAM,WAAW,KAAK,KAAK,QAAQ;AACnC,UAAM,SAAS,KAAK,WAAW,SAAY,SAAY,KAAK,KAAK,MAAM;AACvE,cAAU,MAAM;AAChB,iBAAa;AACb,UAAM,EAAE,QAAQ,SAAS,GAAG,SAAS;AACrC,UAAM,QAAQ,IACZ,MAAM,WAAW,KAAK,kBAAkB,IACpC,OACA;AAAA,MACE,GAAG;AAAA,MACH;AAAA,MACA,GAAI,WAAW,UAAa,OAAO,SAAS,KAAK,EAAE,OAAA;AAAA,MACnD,IAAK,MAAM,SAAS,KAAK,KAAK,UAAU,WAAc;AAAA,QACpD,OAAO,CAAC,GAAI,KAAK,SAAS,CAAA,GAAK,GAAG,KAAK;AAAA,MAAA;AAAA,IACzC;AAAA,EAEV;AACA,SAAO,WAAW,KAAK,cAAc,IACjC,EAAE,QAAQ,QAAQ,UAAA,IAClB,EAAE,QAAQ,EAAE,GAAG,QAAQ,MAAA,GAAS,QAAQ,UAAA;AAC9C;AAWO,SAAS,oBAAoB,OAAyB;AAC3D,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,EAAE,MAAM,MAAM,QAAA,IAAY;AAKhC,SACE,SAAS,wBACT,SAAS,gCACT,SAAS,MACT,SAAS,QACR,OAAO,YAAY,YAClB,oEAAoE;AAAA,IAClE;AAAA,EAAA;AAGR;AAcA,SAAS,iBAAiB,KAAa,KAAgC;AACrE,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AAGN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,WAAO,IAAI,MAAM,wCAAwC;AAAA,EAC3D;AACA,QAAM,UAAW,OACd;AACH,MAAI,YAAY,UAAa,CAAC,0BAA0B,IAAI,OAAO,GAAG;AACpE,WAAO,IAAI;AAAA,MACT,8CAA8C,OAAO,OAAO,CAAC;AAAA,IAAA;AAAA,EAEjE;AAEA,QAAM,QAAS,OAAmC;AAClD,MACE,YAAY,KACZ,OAAO,UAAU,YACjB,CAAC,IAAI,SAAS,IAAI,mBAAmB,KAAK,CAAC,GAAG,GAC9C;AACA,WAAO,IAAI,MAAM,oDAAoD;AAAA,EACvE;AACA,SAAO;AACT;AAiBA,SAAS,eAAe;AAAA,EACtB,SAAAL;AAAA,EACA;AACF,GAGgB;AACd,SAAO;AAAA,IACL,SAAS,CAAC,QAAQA,SAAQ,QAAQ,GAAG;AAAA,IACrC,SAAS,CAAC,KAAK,UAAUA,SAAQ,QAAQ,KAAK,KAAK;AAAA,IACnD,YAAY,CAAC,QAAQA,SAAQ,WAAW,GAAG;AAAA,IAC3C,YAAY,MACV,MAAM;AAAA,MAAK,EAAE,QAAQA,SAAQ,OAAA;AAAA,MAAU,CAAC,GAAG,UACzCA,SAAQ,IAAI,KAAK;AAAA,IAAA,EACjB,OAAO,CAAC,QAAuB,QAAQ,IAAI;AAAA,IAC/C,YAAY,OAAO,KAAK,WAAW;AACjC,YAAM,MAAM;AAAA,QACV,wBAAwB;AAAA,QACxB,EAAE,aAAa,KAAA;AAAA,QACf,OAAO,WAAW;AAChB,cAAI,WAAW,KAAM;AACrB,gBAAM,MAAM;AAAA,YACV,sBAAsB,IAAI,MAAM,eAAe,MAAM;AAAA,YACrD,EAAE,aAAa,KAAA;AAAA,YACf,OAAO,SAAS;AACd,kBAAI,SAAS,KAAM;AACnB,oBAAM,OAAA;AAAA,YACR;AAAA,UAAA;AAAA,QAEJ;AAAA,MAAA;AAAA,IAEJ;AAAA,IACA,WAAW,CAAC,aAAa;;AACvB,YAAM,YAAY,CAAC,UAA4B;AAC7C,YAAI,MAAM,QAAQ,KAAM,UAAS,MAAM,GAAG;AAAA,MAC5C;AACA,2BAAe,qBAAf,wCAAkC,WAAW;AAC7C,aAAO;;AAAM,gBAAAM,MAAA,eAAe,wBAAf,gBAAAA,IAAA,qBAAqC,WAAW;AAAA;AAAA,IAC/D;AAAA,EAAA;AAEJ;AA6BO,SAAS,qBAAqB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AACF,GAKiD;AAI/C,QAAM,gCAAgB,IAAA;AAEtB,QAAM,8BAAc,IAAA;AAEpB,QAAM,+BAAe,IAAA;AAIrB,QAAM,8BAAc,IAAA;AAIpB,QAAM,WAAW,CAAC,KAAa,QAAmC;AAChE,UAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,QAAI,aAAa,UAAa,SAAS,QAAQ,YAAY,SAAS;AACpE,UAAM,UAAU,iBAAiB,KAAK,GAAG;AACzC,YAAQ,IAAI,KAAK,EAAE,KAAK,SAAS;AACjC,WAAO;AAAA,EACT;AACA,QAAM,eAAe,CAAC,QAAsB;AAC1C,UAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,QAAI,UAAU,UAAa,SAAS,IAAI,GAAG,EAAG;AAC9C,QAAI;AACF,YAAM,QAAQ,KAAK,KAAK;AAAA,IAC1B,SAAS,OAAO;AACd,iBAAW,EAAE,WAAW,WAAW,KAAK,OAAO;AAC/C;AAAA,IACF;AAEA,QAAI,QAAQ,IAAI,GAAG,MAAM,MAAO,SAAQ,OAAO,GAAG;AAClD,cAAU,OAAO,GAAG;AAAA,EACtB;AACA,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ;AAChB,YAAM,WAAW,QAAQ,IAAI,GAAG;AAChC,UAAI,aAAa,OAAW,QAAO;AACnC,UAAI,SAAS,IAAI,GAAG,EAAG,QAAO;AAC9B,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,QAAQ,GAAG;AAAA,MACzB,SAAS,OAAO;AACd,iBAAS,IAAI,GAAG;AAChB,mBAAW,EAAE,WAAW,WAAW,KAAK,OAAO;AAC/C,eAAO;AAAA,MACT;AACA,UAAI,QAAQ,KAAM,QAAO;AACzB,YAAM,aAAa,SAAS,KAAK,GAAG;AACpC,UAAI,eAAe,OAAW,QAAO;AACrC,eAAS,IAAI,GAAG;AAChB,iBAAW,EAAE,WAAW,UAAU,KAAK,OAAO,YAAY;AAC1D,aAAO;AAAA,IACT;AAAA,IACA,SAAS,CAAC,KAAK,UAAU;AACvB,UAAI,SAAS,IAAI,GAAG,GAAG;AACrB,gBAAQ,IAAI,KAAK,KAAK;AACtB;AAAA,MACF;AACA,UAAI;AACF,cAAM,QAAQ,KAAK,KAAK;AACxB,gBAAQ,OAAO,GAAG;AAClB,kBAAU,OAAO,GAAG;AAAA,MACtB,SAAS,OAAO;AACd,gBAAQ,IAAI,KAAK,KAAK;AACtB,YAAI,oBAAoB,KAAK,KAAK,WAAW,CAAC,UAAU,IAAI,GAAG,GAAG;AAChE,oBAAU,IAAI,GAAG;AACjB,kBAAQ,GAAG,EAAE;AAAA,YACX,MAAM,aAAa,GAAG;AAAA,YACtB,CAAC,iBACC,WAAW,EAAE,WAAW,cAAc,KAAK,OAAO,aAAA,CAAc;AAAA,UAAA;AAEpE;AAAA,QACF;AACA,mBAAW,EAAE,WAAW,WAAW,KAAK,OAAO;AAAA,MACjD;AAAA,IACF;AAAA,IACA,YAAY,CAAC,QAAQ;AACnB,cAAQ,OAAO,GAAG;AAClB,UAAI,SAAS,IAAI,GAAG,EAAG;AACvB,UAAI;AACF,cAAM,WAAW,GAAG;AAAA,MACtB,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,IACA,YAAY,MAAM;AAChB,YAAM,OAAO,IAAI,IAAY,QAAQ,MAAM;AAC3C,UAAI;AACF,mBAAW,OAAO,MAAM,WAAA,EAAc,MAAK,IAAI,GAAG;AAAA,MACpD,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,IAAI,OAAO;AAAA,MACxD;AACA,aAAO,CAAC,GAAG,IAAI;AAAA,IACjB;AAAA,IACA,YAAY,OAAO,KAAK,WAAW;AACjC,UAAI;AACF,cAAM,MAAM,WAAW,KAAK,MAAM;AAAA,MACpC,SAAS,OAAO;AACd,mBAAW,EAAE,WAAW,cAAc,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,IACA,GAAI,MAAM,cAAc,UAAa,EAAE,WAAW,MAAM,UAAA;AAAA,EAAU;AAEtE;AAEA,MAAM,SAAS,CAAC,UACd,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAA;AASjC,SAAS,cACP,KACkE;AAClE,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,SAAS;AAOf,QAAM,QAAQ,OAAO,WAAW,OAAO;AACvC,QAAM,QACJ,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,OACjD,OAAO,OAAO,OAAO,KAAgC,IACrD,CAAA;AACN,QAAM,aACJ,OAAO,OAAO,QAAQ,EAAE,SAAS,KACjC,OAAO,OAAO,MAAM,EAAE,SAAS,KAC/B,MAAM,KAAK,CAAC,SAAS;AACnB,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,UAAM,SAAS;AACf,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA,EACA,KAAK,CAAC,UAAU,OAAO,OAAO,KAAK,CAAC,EAAE,SAAS,CAAC;AAAA,EACpD,CAAC;AACH,SAAO;AAAA,IACL,SACE,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IAChE;AAAA,EAAA;AAEJ;AAOO,SAAS,2BAA2B,YAA6B;;AACtE,QAAMN,WAAU,eAAe;AAC/B,MAAI,CAACA,SAAS,QAAO;AACrB,MAAI;AACJ,MAAI;AACF,UAAMA,SAAQ,QAAQ,iBAAiB,UAAU;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,WAAO,mBAAc,GAAG,MAAjB,mBAAoB,eAAc;AAC3C;AAcA,eAAsB,4BAA4B;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR,MAAM,KAAK,IAAA;AACb,GASkB;AAChB,QAAM,QAA4C,CAAA;AAClD,aAAW,OAAO,QAAQ,cAAc;AACtC,QAAI,CAAC,IAAI,WAAW,cAAc,KAAK,QAAQ,IAAI,GAAG,EAAG;AACzD,UAAM,OAAO,cAAc,QAAQ,QAAQ,GAAG,CAAC;AAC/C,SAAI,6BAAM,aAAY,UAAa,KAAK,WAAY;AACpD,UAAM,KAAK,EAAE,KAAK,SAAS,KAAK,SAAS;AAAA,EAC3C;AACA,QAAM,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AAC1C,QAAM,aAAa,KAAK,MAAM,MAAM,SAAS,CAAC;AAC9C,aAAW,CAAC,OAAO,EAAE,KAAK,SAAS,KAAK,MAAM,WAAW;AACvD,UAAM,UAAU,MAAM,UAAU;AAChC,QAAI,CAAC,WAAW,EAAE,SAAS,SAAS,YAAa;AACjD,UAAM,QAAQ,WAAW,KAAK,YAAY;AACxC,UAAI,QAAQ,IAAI,GAAG,EAAG;AACtB,YAAM,QAAQ,cAAc,QAAQ,QAAQ,GAAG,CAAC;AAChD,WAAI,+BAAO,aAAY,WAAW,MAAM,WAAY;AACpD,cAAQ,WAAW,GAAG;AAAA,IACxB,CAAC;AAAA,EACH;AACF;AAuBA,MAAM,qCAAqB,QAAA;AAE3B,SAAS,cAAc;AAAA,EACrB,SAAAA;AAAA,EACA;AACF,GAGkB;AAChB,MAAI,SAAS,eAAe,IAAIA,QAAO;AACvC,MAAI,WAAW,QAAW;AACxB,UAAM,gCAAgB,IAAA;AACtB,UAAM,8BAAc,IAAA;AACpB,UAAM,+BAAe,IAAA;AACrB,UAAM,QAAQ,eAAe,EAAE,SAAAA,UAAS,OAAO;AAC/C,aAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,qBAAqB;AAAA,QAC5B;AAAA,QACA,YAAY,CAAC,gBAAgB;AAC3B,qBAAW,YAAY,UAAW,UAAS,WAAW;AAAA,QACxD;AAAA,QACA,SAAS,MACP,4BAA4B;AAAA,UAC1B,SAAS;AAAA,UACT;AAAA,UACA,UAAU,KAAK,IAAI,IAAI,QAAQ,GAAG,SAAS,QAAQ;AAAA,UACnD,OAAO;AAAA,QAAA,CACR;AAAA,MAAA,CACJ;AAAA,IAAA;AAEH,mBAAe,IAAIA,UAAS,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAGA,eAAe,UAAa;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKe;AACb,MAAI,UAAU;AACd,MAAI;AACF,WAAO,MAAM,MAAM,QAAQ,MAAM,YAAY;AAC3C,gBAAU;AACV,aAAO,GAAA;AAAA,IACT,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,QAAS,OAAM;AAInB,cAAU,KAAK;AACf,WAAO,GAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAmB;;AAC1B,QAAM,OAAO;AACb,WACE,gBAAK,WAAL,mBAAa,eAAb,gCACA,OAAO,KAAK,IAAA,EAAM,SAAS,EAAE,CAAC,IAAI,KAAK,SAAS,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAEzE;AAcA,MAAM,kCAAkC,CAAC;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,MAAM,IAAI;AAAA,EACV,MAAM;AAAA,EACN,cAAc;AAAA,EACd;AAAA,EACA;AACF,MAA4E;;AAC1E,QAAMA,YAAU,eAAe;AAC/B,QAAM,SAAQ,oBAAe,cAAf,mBAA0B;AACxC,MAAI,CAACA;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAEJ,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAEJ,QAAM,aAAa,uBAAuB,EAAE,WAAW,WAAW,UAAU;AAC5E,QAAM,aAAa,iBAAiB;AACpC,QAAM,WAAW,sBAAsB;AAWvC,QAAM,eAAeO,WAAAA,OAAkC;AAAA,IACrD;AAAA,IACA,SAAS;AAAA,EAAA,CACV;AACD,MACE,CAACC,iBAAAA,uBAAuB;AAAA,IACtB,OAAO,aAAa;AAAA,IACpB,KAAK,CAAC,OAAO,uBAAuB,EAAE,WAAW,WAAW,UAAU,GAAA,CAAI;AAAA,EAAA,CAC3E,GACD;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAIAC,aAAAA,QAAQ,MAAM;AACZ,QAAI,mBAAmB,OAAW;AAClC,sCAAkC;AAAA,MAChC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAAA,SACAT;AAAAA,IAAA,CACD;AAAA,EACH,GAAG,CAAC,WAAW,WAAW,gBAAgB,UAAUA,SAAO,CAAC;AAE5D,QAAM,mBAAmBO,WAAAA,OAAO,iBAAiB;AACjD,mBAAiB,UAAU;AAC3B,QAAM,oBAAoBE,WAAAA,QAAQ,MAAM;AACtC,UAAM,+BAAe,IAAA;AACrB,WAAO,CAAC,gBAA2C;AACjD,YAAM,UAAU,iBAAiB;AACjC,UAAI,SAAS;AACX,YAAI;AACF,kBAAQ,WAAW;AAAA,QACrB,QAAQ;AAAA,QAGR;AACA;AAAA,MACF;AACA,YAAM,YAAY,GAAG,YAAY,SAAS,IAAI,YAAY,GAAG;AAC7D,UAAI,SAAS,IAAI,SAAS,EAAG;AAC7B,eAAS,IAAI,SAAS;AACtB,cAAQ;AAAA,QACN,wDAAwD,YAAY,SAAS,IAAI,YAAY,GAAG;AAAA,QAChG,YAAY;AAAA,MAAA;AAAA,IAEhB;AAAA,EACF,GAAG,CAAA,CAAE;AAEL,QAAM,gBAAgBF,WAAAA,OAAO,OAAO;AACpC,gBAAc,UAAU;AACxB,QAAM,cAAcG,WAAAA;AAAAA,IAClB,CAAC,UAA6C;;AAC5C,UAAI;AACF,SAAAJ,MAAA,cAAc,YAAd,gBAAAA,IAAA,oBAAwB;AAAA,MAC1B,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,SAAS,cAAc,WAAEN,WAAS,OAAO;AAI/C,SAAO,UAAU,IAAI,iBAAiB;AACtCW,aAAAA,UAAU,MAAM;AACd,WAAO,UAAU,IAAI,iBAAiB;AACtC,WAAO,MAAM;AACX,aAAO,UAAU,OAAO,iBAAiB;AAAA,IAC3C;AAAA,EACF,GAAG,CAAC,QAAQ,iBAAiB,CAAC;AAE9BA,aAAAA,UAAU,MAAM;AACd,UAAM,EAAE,SAAS,SAAA,IAAa;AAC9B,YAAQ,IAAI,aAAa,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAC1D,aAAS,IAAI,YAAY,GAAG;AAC5B,gCAA4B;AAAA,MAC1B,SAAS,OAAO;AAAA,MAChB;AAAA,MACA,UAAU;AAAA,IAAA,CACX,EAAE;AAAA,MAAM,CAAC,UACR,kBAAkB,EAAE,WAAW,cAAc,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA;AAEvE,WAAO,MAAM;AACX,YAAM,SAAS,QAAQ,IAAI,UAAU,KAAK,KAAK;AAC/C,UAAI,UAAU,GAAG;AACf,gBAAQ,OAAO,UAAU;AACzB,iBAAS,OAAO,UAAU;AAAA,MAC5B,MAAO,SAAQ,IAAI,YAAY,KAAK;AAAA,IACtC;AAAA,EACF,GAAG,CAAC,QAAQ,YAAY,KAAK,iBAAiB,CAAC;AAK/C,QAAM,CAAC,KAAK,IAAIC,WAAAA,SAAS,QAAQ;AACjCD,aAAAA,UAAU,MAAM;AACd,QAAI;AACJ,UAAM,OAAO,IAAI,QAAc,CAAC,YAAY;AAC1C,gBAAU;AAAA,IACZ,CAAC;AACD,YAAQ,QAAQ,MAAM,QAAQ,kBAAkB,OAAO,MAAM,IAAI,CAAC,EAAE;AAAA,MAClE,CAAC,UACC,kBAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA;AAEnE,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,OAAO,OAAO,YAAY,iBAAiB,CAAC;AAIhDA,aAAAA,UAAU,MAAM;AACd,QAAI;AACJ,QAAI,WAAW;AACf,YAAQ;AAAA,MACN,MAAM;AAAA,QACJ,wBAAwB;AAAA,QACxB,EAAE,MAAM,SAAA;AAAA,QACR,MAAM;AACJ,cAAI,SAAU;AACd,iBAAO,IAAI,QAAc,CAAC,YAAY;AACpC,sBAAU;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MAAA;AAAA,IACF,EACA;AAAA,MAAM,CAAC,UACP,kBAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,MAAA,CAAO;AAAA,IAAA;AAEjE,WAAO,MAAM;AACX,iBAAW;AACX;AAAA,IACF;AAAA,EACF,GAAG,CAAC,OAAO,YAAY,iBAAiB,CAAC;AAIzC,QAAM,UAAUD,WAAAA;AAAAA,IAGd,CAAC,QAAQ,YAAY;AACnB,YAAM,WAAW,gCAAgC,QAAQ,OAAO;AAChE,UAAI,SAAS,WAAW,EAAG,QAAO,SAAS;AAC3C,wBAAkB;AAAA,QAChB,WAAW;AAAA,QACX,KAAK;AAAA,QACL,OAAO,IAAI;AAAA,UACT,GAAG,SAAS,MAAM;AAAA,QAAA;AAAA,MACpB,CACD;AACD,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,CAAC,mBAAmB,UAAU;AAAA,EAAA;AAGhC,QAAM,iBAAiBG,IAAAA;AAAAA,IACrBC,+BAAuB;AAAA,MACrB,SAAS,OAAO;AAAA,MAChB,KAAK;AAAA,MACL,WAAW,iBAAiB;AAAA,MAC5B;AAAA,MACA,UAAUZ,mBAAAA;AAAAA,MACV;AAAA;AAAA;AAAA;AAAA,MAIA,WAAW,EAAE,UAAU,KAAK,YAAY,IAAA;AAAA,MACxC,QAAQ,EAAE,YAAA;AAAA;AAAA;AAAA,MAGV,SAAS,CAAC,UACR,kBAAkB,EAAE,WAAW,WAAW,KAAK,YAAY,OAAO;AAAA,MACpE,SAAS;AAAA,IAAA,CACV;AAAA,EAAA;AAGH,SAAOO,WAAAA;AAAAA,IACL,OAAuC;AAAA,MACrC,GAAG;AAAA,MACH,MAAM,CAAI,OACR,UAAU;AAAA,QACR;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,WAAW,CAAC,UACV,kBAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,MAAA,CAAO;AAAA,MAAA,CAClE;AAAA,MACH,YAAY,CAAI,OACd,UAAU;AAAA,QACR;AAAA,QACA,MAAM,qBAAqB;AAAA,QAC3B;AAAA,QACA,WAAW,CAAC,UACV,kBAAkB,EAAE,WAAW,QAAQ,KAAK,YAAY,MAAA,CAAO;AAAA,MAAA,CAClE;AAAA,MACH,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU,CAAC,IAAI,WACb,QAAQ;AAAA,UACN,MAAM,QAAQ,kBAAkB,IAAI,EAAE,OAAA,GAAU,MAAM,MAAS;AAAA,QAAA;AAAA,MACjE;AAAA,MAEJ,WAAW,CAAC,aAAyB;;AACnC,cAAM,YAAY,CAAC,UAA4B;AAC7C,cAAI,MAAM,QAAQ,WAAY,UAAA;AAAA,QAChC;AACA,SAAAH,MAAA,eAAe,qBAAf,gBAAAA,IAAA,qBAAkC,WAAW;AAC7C,eAAO;;AAAM,kBAAAA,MAAA,eAAe,wBAAf,gBAAAA,IAAA,qBAAqC,WAAW;AAAA;AAAA,MAC/D;AAAA,IAAA;AAAA,IAEF,CAAC,gBAAgB,OAAO,YAAY,UAAU,OAAO,iBAAiB;AAAA,EAAA;AAE1E;AAGO,MAAM,+BAA+BS,IAAAA;AAAAA,EAC1C;AACF;;;;;;;;;;;;;;"}

package/dist/agent-runtime/src/quota-safe-local-storage-session.d.ts

@@ -1,16 +1,70 @@
 import type { StatewireClient } from "statewire";
 import { KeyValueSessionStorage } from "statewire/storage";
-/** A persisted session record: per-lane failed entries (a pre-lane record carried them at the root). */
+/**
+ * A record's byte budget (UTF-16 code units, as localStorage counts them). Past it, statewire drops
+ * the payloads of the record's stored `settled` updates, failures first, oldest first, so a lane
+ * that keeps failing sends no longer grows to megabytes (#52031).
+ */
+export declare const LOCAL_SESSION_RECORD_BYTES: number;
+/** Structural view of the browser storage global — this package compiles
+ * without the DOM lib (React Native honesty; see `globals.d.ts`). */
+type StorageLike = {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+    key(index: number): string | null;
+    readonly length: number;
+};
+/**
+ * The session principal of a signed-in account: its stable subject (the user id), never a
+ * per-login session id, so a sign-in that expires and comes back finds its lanes again.
+ */
+export declare function sessionPrincipal(subject: string): string;
+/**
+ * A thread's lane key under the localStorage prefix: `<namespace><principal>:<threadId>`,
+ * the layout statewire's `KeyValueSessionStorage` stores it under.
+ */
+export declare function localStorageSessionKey({ namespace, principal, threadId, }: {
+    namespace: string;
+    principal: string;
+    threadId: string;
+}): string;
+/**
+ * Moves the lanes statewire 0.24 kept for one account under unscoped keys
+ * (`aui:statewire-session:<unscopedPrefix><threadId>`) to that account's scoped keys
+ * (`aui:statewire-session:<namespace><principal>:<threadId>`, see {@link localStorageSessionKey}).
+ * With `threadId`, that thread's lane only.
+ *
+ * Only call it for the signed-in account, with the prefix its 0.24 keys used (they named the user
+ * id): nothing is moved into anyone else's scope, and other accounts' unscoped lanes stay where
+ * they are until that account signs in here. A lane whose scoped key already holds a record is
+ * left unscoped (a 0.24 tab still open can write there); it is never written over the newer
+ * record, and retention retires it once it holds no sends. Returns how many lanes moved.
+ */
+export declare function adoptUnscopedLocalStorageSessions({ namespace, principal, unscopedPrefix, threadId, storage, }: {
+    namespace: string;
+    principal: string;
+    unscopedPrefix: string;
+    threadId?: string;
+    storage?: StorageLike;
+}): number;
+/**
+ * A persisted session record as stored by any statewire build: format 5 keeps
+ * failed sends as `settled` updates in each lane's `inbox`; formats 3 and 4
+ * kept them in a per-lane `failed` list, and pre-lane records at the root.
+ */
 type SessionRecordLike = {
     failed?: unknown;
-    lanes?: Record<string, {
+    lanes?: Readonly<Record<string, {
         failed?: unknown;
-    } | null | undefined> | null;
+        inbox?: unknown;
+    } | null | undefined>> | null;
 };
 export declare function readPersistedFailedSendStamps(sessionKey: string): ReadonlyMap<string, number> | null;
 /**
  * Send stamps (message id → epoch ms of the original send) off an already
- * loaded session record's failed lane — the storage-agnostic half of
+ * loaded session record's failed sends (format 5 `inbox` entries that carry a
+ * failure, and the `failed` lists of older formats) — the storage-agnostic half of
  * {@link readPersistedFailedSendStamps}, for hosts whose session store is not
  * localStorage (the React Native AsyncStorage-backed store reads its record
  * synchronously through `SessionStorage.load()`).
@@ -34,8 +88,9 @@ export type SessionStorageDegradation = {
      | "session"
     /**
      * Queued commands persisted by an earlier statewire build no longer fit
-     * the current wire/protocol range: parked in the lane's failed list (the
-     * send-recovery sweep re-dispatches them) instead of blocking the mount.
+     * the current wire/protocol range: parked as failed `settled` updates in
+     * the lane's inbox (send recovery re-queues them) instead of blocking the
+     * mount.
      */
      | "migrate";
     key: string;
@@ -46,23 +101,26 @@ type ProducedRange = NonNullable<StatewireClient.SessionCommand["produced"]>;
  * The oldest wire whose stored statements the current client still replays.
  * Bundled clients before #45143 offered 2026-09-13 through 2026-09-30 and
  * stamped every queued statement with 2026-09-13. The durable statement grammar
- * (protocol, method, params, meta, seq) is the same on 2026-09-30; only
- * frame-level context differs. So those statements ride the current wire
- * unchanged, while the network offer stays native 2026-09-30 only.
+ * (protocol, method, params, meta, seq) is the same on 2026-09-30 and
+ * 2026-11-01; only frame-level context and the attach results cursor differ.
+ * So those statements ride the current wire unchanged, while the network offer
+ * stays 2026-11-01 only.
  */
 export declare const STORED_STATEMENT_WIRE_FLOOR = "2026-09-13";
 /**
  * statewire's `migrate` for a record whose queued commands were produced by
- * an earlier build. A command whose statement the current wire still replays
+ * an earlier build. A statement stored under the 2026-09-13 athena contract
+ * is first said the current way ({@link upgradeLegacyAthenaStatement}). A command whose statement the current wire still replays
  * ({@link STORED_STATEMENT_WIRE_FLOOR}: an approval's `run/input` saved by a
- * previous bundled client, say) stays queued, re-stamped with the current
- * range, so it is delivered with its original seq. Every other incompatible
- * command leaves its lane's queue and is
- * retained as a `lost`/`session-lost` failed send re-stamped with the current
- * range. Client identity, lane clocks, compatible commands and existing failed
- * history are untouched, so the mount proceeds and the send-recovery sweep
- * (or the user, via the failed-send UI) re-dispatches the parked sends under
- * the negotiated format instead of the runtime throwing before it dials.
+ * previous bundled client, say) stays where it is, re-stamped with the current
+ * range, so a stamped one is delivered with its original seq. Every other
+ * incompatible command — stamped or still in the outbox — leaves its lane's
+ * queue and becomes a `lost`/`session-lost` `settled` update in the lane's
+ * inbox, under its own id, stamped `now`. Client identity, lane clocks,
+ * compatible commands and undelivered updates are untouched, so the mount
+ * proceeds and send recovery (or the user, through the held send) re-queues
+ * the parked sends under the negotiated format instead of the runtime throwing
+ * before it dials.
  *
  * Returns the record itself when nothing needed migrating, and the count of
  * parked commands otherwise.
@@ -88,6 +146,7 @@ type SyncBackend = {
     removeItem: (key: string) => void;
     getAllKeys: () => readonly string[];
     withUnused: (key: string, action: () => Promise<void>) => Promise<void>;
+    subscribe?: (listener: (key: string) => void) => () => void;
 };
 /**
  * Wraps a synchronous key-value backend so a failing origin degrades the
@@ -95,12 +154,13 @@ type SyncBackend = {
  *
  * statewire's session storage latches the first unrecognised write failure
  * and from then on rejects every send (`stopped/storage-error`, "session
- * storage failed" on the connection chip). It only recovers a
- * `QuotaExceededError` by that exact name — sweeping old session records and
- * retrying the write once — and latches again when the retry fails too. Here
- * the first quota failure per key is surfaced under that name so the sweep
- * runs; the retry that follows it and every other storage failure are absorbed
- * and reported through `onDegraded`, so chat keeps working.
+ * storage failed" on the connection chip), and refuses a send outright
+ * (`aborted`/`quota`) when the write that would add it raises a
+ * `QuotaExceededError`. Here every write failure is absorbed instead, so chat
+ * keeps working: a quota failure first asks `onQuota` to make room (once per
+ * key until a write lands again) and then writes the absorbed record through;
+ * every other failure, and a quota failure the reclaim could not fix, is
+ * reported through `onDegraded`.
  *
  * An absorbed write is kept in an in-memory overlay that `getItem` serves
  * first: statewire re-reads the record through `load()` on every shared-mode
@@ -115,25 +175,35 @@ type SyncBackend = {
  * stay in the overlay for good, so a fresh lane minted over an unreadable
  * record never overwrites what another tab or a newer build persisted.
  */
-export declare function quotaTolerantBackend({ inner, onDegraded, }: {
+export declare function quotaTolerantBackend({ inner, onDegraded, onQuota, }: {
     inner: SyncBackend;
     onDegraded: (degradation: SessionStorageDegradation) => void;
+    /** Frees room after a quota failure on `key`; the absorbed write is retried once it settles. */
+    onQuota?: (key: string) => Promise<void>;
 }): SyncBackend & KeyValueSessionStorage.Backend;
 /**
- * Removes session records last saved more than `maxAgeMs` ago, skipping the
- * keys mounted in this tab and, through `withUnused`, those another tab holds.
+ * Whether the localStorage session record under `sessionKey` still holds something a user could
+ * lose (see {@link retentionView}): a host moving a thread to another session storage keeps it on
+ * this one until it drains. `false` without localStorage or a readable record.
+ */
+export declare function persistedSessionHoldsSends(sessionKey: string): boolean;
+/**
+ * Removes the session records that hold no sends (see {@link retentionView})
+ * and were last saved more than `maxAgeMs` ago, skipping the keys mounted in
+ * this tab and, through `withUnused`, those another tab holds. With `quota`
+ * (the origin refused a write), the older half of the remaining empty records
+ * goes too.
  *
- * statewire's own retention sweep only retires records with nothing queued and
- * nothing failed: a record still carrying an unconfirmed or failed send is
- * exempt from both its age and count bounds, so every thread left with one
- * kept its key forever. Past the TTL those sends are long out of send
- * recovery's auto-retry window, so the record goes the same way an empty one
- * does.
+ * A record that still holds a send — queued, held, stamped, or a failure
+ * awaiting delivery — is never removed, whatever its age: it is a message the
+ * user has not seen land, and statewire hands it back on the thread's next
+ * mount.
  */
-export declare function retireExpiredSessionRecords({ backend, mounted, maxAgeMs, now, }: {
+export declare function retireExpiredSessionRecords({ backend, mounted, maxAgeMs, quota, now, }: {
     backend: Pick<SyncBackend, "getItem" | "removeItem" | "getAllKeys" | "withUnused">;
     mounted: ReadonlyMap<string, number>;
     maxAgeMs: number;
+    quota?: boolean;
     now?: number;
 }): Promise<void>;
 /** Athena's browser session keys and retention policy. */
@@ -142,20 +212,47 @@ export declare namespace QuotaSafeLocalStorageSession {
     type Options = {
         threadId: string;
         /**
-         * The lane's storage key for a thread, scoped by the principal (and the
-         * sync host) the lane belongs to. It must keep naming the same principal's
-         * lanes for the life of the mounted store: a change throws ("principal
-         * changed"), as the upstream `LocalStorageSession` does, and the host
-         * remounts the account's thread.
+         * The backend the lanes belong to, as a key prefix (the sync host and `:`):
+         * a thread id is only meaningful against the backend that minted it.
+         */
+        namespace: string;
+        /**
+         * The signed-in account the lanes belong to ({@link sessionPrincipal}).
+         * Lanes are stored under `aui:statewire-session:<namespace><principal>:<threadId>`.
+         * It must stay the same for the life of the mounted store: a change throws
+         * ("principal changed"), and the host remounts the account's thread.
+         */
+        principal: string;
+        /**
+         * Where statewire 0.24 kept this account's lanes, after the
+         * `aui:statewire-session:` prefix and before the thread id (its sync host
+         * and user id). The thread's lane there moves to the scoped key on mount
+         * ({@link adoptUnscopedLocalStorageSessions}).
+         */
+        unscopedPrefix?: string;
+        /**
+         * Age past which a record no tab has mounted is removed, unsent and failed
+         * sends included. Default 7 days.
          */
-        key?: (threadId: string) => string;
         ttl?: number;
+        /** Records holding no sends kept across the origin. Default 50. */
         max?: number;
+        /**
+         * A record's byte budget ({@link LOCAL_SESSION_RECORD_BYTES}): past it the
+         * payloads of stored `settled` updates go, and a write that adds a send
+         * still past it is refused (`aborted` / `quota`).
+         */
+        recordBytes?: number;
         /**
          * Called when a storage operation failed and the session carried on in
          * memory. Defaults to one `console.warn` per operation and key.
          */
         onStorageDegraded?: (degradation: SessionStorageDegradation) => void;
+        /**
+         * Called when statewire drops undelivered `settled` updates: past a
+         * lane's inbox cap, or with a record its retention removed.
+         */
+        onEvict?: (event: KeyValueSessionStorage.EvictEvent) => void;
     };
 }
 export {};