@athenaintel/react 0.59.0 → 0.60.1

package/dist/chat/StatewireClientToolBridge.cjs

@@ -2,15 +2,20 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const reactStatewire = require("@assistant-ui/react-statewire");
 const require$$0 = require("react");
+const clientToolWriteConsent = require("./client-tool-write-consent.cjs");
 const clientToolBridge = require("../agent-runtime/src/client-tool-bridge.cjs");
 const clientTools = require("../agent-runtime/src/client-tools.cjs");
 const clientToolRequests = clientTools.createClientToolRequestTracker();
+const SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE = "The person did not allow this. Do not retry it; ask them how they want to proceed.";
 function StatewireClientToolBridge({
   tools,
-  threadId
+  threadId,
+  writeConsentSummaries,
+  confirmWrites: hostConfirmWrites
 }) {
   const sendCommand = reactStatewire.useStatewireSendCommand();
   const inputRequests = reactStatewire.useStatewireRuns().inputRequests;
+  const consentStore = require$$0.useContext(clientToolWriteConsent.ClientToolWriteConsentContext);
   const bridgeTools = require$$0.useMemo(
     () => tools.map((tool) => ({
       name: tool.definition.name,
@@ -19,11 +24,73 @@ function StatewireClientToolBridge({
     })),
     [tools]
   );
+  const askingRef = require$$0.useRef(null);
+  require$$0.useEffect(() => {
+    const asking = askingRef.current;
+    if (!asking) return;
+    if ((inputRequests ?? []).some((request) => request.id === asking.requestId)) return;
+    askingRef.current = null;
+    asking.abandon();
+  }, [inputRequests]);
+  require$$0.useEffect(
+    () => () => {
+      var _a;
+      (_a = askingRef.current) == null ? void 0 : _a.abandon();
+      askingRef.current = null;
+    },
+    []
+  );
+  const summariesRef = require$$0.useRef(writeConsentSummaries);
+  summariesRef.current = writeConsentSummaries;
+  const hostConfirmRef = require$$0.useRef(hostConfirmWrites);
+  hostConfirmRef.current = hostConfirmWrites;
+  const confirmWrites = require$$0.useCallback(
+    async ({
+      requestId,
+      writeToolNames
+    }) => {
+      var _a, _b;
+      if (consentStore == null ? void 0 : consentStore.isGranted(threadId)) return "proceed";
+      const consentTools = Array.from(new Set(writeToolNames)).map(
+        (name) => {
+          var _a2;
+          const summary = (_a2 = summariesRef.current) == null ? void 0 : _a2[name];
+          return summary ? { name, summary } : { name };
+        }
+      );
+      const request = { requestId, threadId, tools: consentTools };
+      const hostConfirm = hostConfirmRef.current;
+      if (hostConfirm) {
+        const controller = new AbortController();
+        askingRef.current = { requestId, abandon: () => controller.abort() };
+        const abandoned = new Promise((resolve) => {
+          controller.signal.addEventListener("abort", () => resolve("abandoned"), { once: true });
+        });
+        const answered = Promise.resolve().then(() => hostConfirm({ ...request, signal: controller.signal })).then(
+          (allowed) => allowed === true,
+          () => false
+        );
+        const outcome = await Promise.race([answered, abandoned]);
+        if (((_a = askingRef.current) == null ? void 0 : _a.requestId) === requestId) askingRef.current = null;
+        if (outcome === "abandoned" || controller.signal.aborted) return "abandoned";
+        if (outcome) consentStore == null ? void 0 : consentStore.grant(threadId);
+        return outcome ? "proceed" : "declined";
+      }
+      if (!consentStore) return "declined";
+      askingRef.current = { requestId, abandon: () => consentStore.abandon(requestId) };
+      const decision = await consentStore.ask(request);
+      if (((_b = askingRef.current) == null ? void 0 : _b.requestId) === requestId) askingRef.current = null;
+      return decision;
+    },
+    [consentStore, threadId]
+  );
   clientToolBridge.useStatewireClientToolBridge({
     threadId,
     tools: bridgeTools,
     tracker: clientToolRequests,
     inputRequests,
+    confirmWrites,
+    writeDeclinedMessage: SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE,
     sendResume: (requestId, value) => {
       return sendCommand({
         type: "run/input",
@@ -34,5 +101,6 @@ function StatewireClientToolBridge({
   });
   return null;
 }
+exports.SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE = SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE;
 exports.StatewireClientToolBridge = StatewireClientToolBridge;
 //# sourceMappingURL=StatewireClientToolBridge.cjs.map

package/dist/chat/StatewireClientToolBridge.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"StatewireClientToolBridge.cjs","sources":["../../src/chat/StatewireClientToolBridge.tsx"],"sourcesContent":["import { useStatewireRuns, useStatewireSendCommand } from '@assistant-ui/react-statewire';\nimport {\n  type ClientToolBridgeTool,\n  createClientToolRequestTracker,\n  type RegisteredClientTool,\n  useStatewireClientToolBridge,\n} from '@athenaintel/agent-runtime';\nimport type { ReadonlyJSONObject } from 'assistant-stream/utils';\nimport { useMemo } from 'react';\n\n// Shared across every mount: the same thread can be attached from two mounted\n// surfaces, and a parked client-tool call must be executed and resumed by\n// exactly one of them. Whichever bridge claims the request first owns it.\nconst clientToolRequests = createClientToolRequestTracker();\n\n/**\n * Executes the deep agent's frontend tool calls in statewire mode.\n *\n * Tools declared through `runConfig.custom.client_tools` have no backend\n * implementation: a call parks the run and surfaces here as a statewire\n * input request. The bridge runs the matching local handler and resumes the\n * run with a per-call result envelope, so a missing tool or a thrown handler\n * still frees the run with an error the model can act on instead of hanging.\n *\n * The claim lifecycle, liveness guards, and wire-safety live in\n * `@athenaintel/agent-runtime`'s `useStatewireClientToolBridge`; this wrapper\n * only adapts the shared `RegisteredClientTool` shape and the SDK's transport.\n */\nexport function StatewireClientToolBridge({\n  tools,\n  threadId,\n}: {\n  tools: readonly RegisteredClientTool[];\n  threadId: string;\n}): null {\n  const sendCommand = useStatewireSendCommand();\n  const inputRequests = useStatewireRuns().inputRequests;\n\n  const bridgeTools = useMemo<readonly ClientToolBridgeTool[]>(\n    () =>\n      tools.map((tool) => ({\n        name: tool.definition.name,\n        requiresWrite: tool.definition.requiresWrite,\n        run: (args, context) => tool.handler(args, context),\n      })),\n    [tools],\n  );\n\n  useStatewireClientToolBridge({\n    threadId,\n    tools: bridgeTools,\n    tracker: clientToolRequests,\n    inputRequests,\n    sendResume: (requestId, value) => {\n      // Every envelope value is already wire-safe (per-call JSON round-trip in\n      // the shared batch engine), so the batch only needs the transport's\n      // JSON typing.\n      return sendCommand({\n        type: 'run/input',\n        requestId,\n        response: { type: 'resume', value: value as ReadonlyJSONObject },\n      });\n    },\n  });\n\n  return null;\n}\n"],"names":["createClientToolRequestTracker","useStatewireSendCommand","useStatewireRuns","useMemo","useStatewireClientToolBridge"],"mappings":";;;;;;AAaA,MAAM,qBAAqBA,YAAAA,+BAAA;AAepB,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AACF,GAGS;AACP,QAAM,cAAcC,eAAAA,wBAAA;AACpB,QAAM,gBAAgBC,eAAAA,mBAAmB;AAEzC,QAAM,cAAcC,WAAAA;AAAAA,IAClB,MACE,MAAM,IAAI,CAAC,UAAU;AAAA,MACnB,MAAM,KAAK,WAAW;AAAA,MACtB,eAAe,KAAK,WAAW;AAAA,MAC/B,KAAK,CAAC,MAAM,YAAY,KAAK,QAAQ,MAAM,OAAO;AAAA,IAAA,EAClD;AAAA,IACJ,CAAC,KAAK;AAAA,EAAA;AAGRC,gDAA6B;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,IACT;AAAA,IACA,YAAY,CAAC,WAAW,UAAU;AAIhC,aAAO,YAAY;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,UAAU,EAAE,MAAM,UAAU,MAAA;AAAA,MAAmC,CAChE;AAAA,IACH;AAAA,EAAA,CACD;AAED,SAAO;AACT;;"}
+{"version":3,"file":"StatewireClientToolBridge.cjs","sources":["../../src/chat/StatewireClientToolBridge.tsx"],"sourcesContent":["import { useStatewireRuns, useStatewireSendCommand } from '@assistant-ui/react-statewire';\nimport {\n  type ClientToolBridgeTool,\n  type ClientToolWriteConsentDecision,\n  createClientToolRequestTracker,\n  type RegisteredClientTool,\n  useStatewireClientToolBridge,\n} from '@athenaintel/agent-runtime';\nimport type { ReadonlyJSONObject } from 'assistant-stream/utils';\nimport { useCallback, useContext, useEffect, useMemo, useRef } from 'react';\nimport {\n  type ClientToolWriteConfirmer,\n  ClientToolWriteConsentContext,\n  type ClientToolWriteConsentTool,\n} from './client-tool-write-consent';\n\n// Shared across every mount: the same thread can be attached from two mounted\n// surfaces, and a parked client-tool call must be executed and resumed by\n// exactly one of them. Whichever bridge claims the request first owns it.\nconst clientToolRequests = createClientToolRequestTracker();\n\n/** Answers the model for a write the person did not allow. */\nexport const SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE =\n  'The person did not allow this. Do not retry it; ask them how they want to proceed.';\n\n/**\n * Executes the deep agent's frontend tool calls in statewire mode.\n *\n * Tools declared through `runConfig.custom.client_tools` have no backend\n * implementation: a call parks the run and surfaces here as a statewire\n * input request. The bridge runs the matching local handler and resumes the\n * run with a per-call result envelope, so a missing tool or a thrown handler\n * still frees the run with an error the model can act on instead of hanging.\n *\n * A batch holding a tool marked `requiresWriteConsent` first asks the person\n * (once per conversation): through the host's `confirmWrites` when it gave\n * one, else through the consent store the nearest `AthenaProvider` holds,\n * which `StatewireClientToolConsentCard` draws. With neither there is nobody\n * to ask, so the writes are declined.\n *\n * The claim lifecycle, liveness guards, and wire-safety live in\n * `@athenaintel/agent-runtime`'s `useStatewireClientToolBridge`; this wrapper\n * only adapts the shared `RegisteredClientTool` shape and the SDK's transport.\n */\nexport function StatewireClientToolBridge({\n  tools,\n  threadId,\n  writeConsentSummaries,\n  confirmWrites: hostConfirmWrites,\n}: {\n  tools: readonly RegisteredClientTool[];\n  threadId: string;\n  /** Each write tool's own words for what it does, by tool name. */\n  writeConsentSummaries?: Readonly<Record<string, string>>;\n  /** The host's own consent UI, in place of the SDK's card. */\n  confirmWrites?: ClientToolWriteConfirmer;\n}): null {\n  const sendCommand = useStatewireSendCommand();\n  const inputRequests = useStatewireRuns().inputRequests;\n  const consentStore = useContext(ClientToolWriteConsentContext);\n\n  const bridgeTools = useMemo<readonly ClientToolBridgeTool[]>(\n    () =>\n      tools.map((tool) => ({\n        name: tool.definition.name,\n        requiresWrite: tool.definition.requiresWrite,\n        run: (args, context) => tool.handler(args, context),\n      })),\n    [tools],\n  );\n\n  // The question on screen belongs to one parked request. When that request\n  // goes away (stop, an answer from elsewhere, another conversation), close\n  // the question instead of leaving it up for a call that no longer exists.\n  const askingRef = useRef<{ requestId: string; abandon: () => void } | null>(null);\n  useEffect(() => {\n    const asking = askingRef.current;\n    if (!asking) return;\n    if ((inputRequests ?? []).some((request) => request.id === asking.requestId)) return;\n    askingRef.current = null;\n    asking.abandon();\n  }, [inputRequests]);\n  useEffect(\n    () => () => {\n      askingRef.current?.abandon();\n      askingRef.current = null;\n    },\n    [],\n  );\n\n  const summariesRef = useRef(writeConsentSummaries);\n  summariesRef.current = writeConsentSummaries;\n  const hostConfirmRef = useRef(hostConfirmWrites);\n  hostConfirmRef.current = hostConfirmWrites;\n\n  const confirmWrites = useCallback(\n    async ({\n      requestId,\n      writeToolNames,\n    }: {\n      requestId: string;\n      writeToolNames: readonly string[];\n    }): Promise<ClientToolWriteConsentDecision> => {\n      if (consentStore?.isGranted(threadId)) return 'proceed';\n      const consentTools: ClientToolWriteConsentTool[] = Array.from(new Set(writeToolNames)).map(\n        (name) => {\n          const summary = summariesRef.current?.[name];\n          return summary ? { name, summary } : { name };\n        },\n      );\n      const request = { requestId, threadId, tools: consentTools };\n\n      const hostConfirm = hostConfirmRef.current;\n      if (hostConfirm) {\n        const controller = new AbortController();\n        askingRef.current = { requestId, abandon: () => controller.abort() };\n        // The question ends when the person answers or when its call goes\n        // away, whichever is first: a host dialog that closes on the signal\n        // without settling its promise must not hold the request's claim.\n        const abandoned = new Promise<'abandoned'>((resolve) => {\n          controller.signal.addEventListener('abort', () => resolve('abandoned'), { once: true });\n        });\n        const answered = Promise.resolve()\n          .then(() => hostConfirm({ ...request, signal: controller.signal }))\n          // A consent UI that failed is not a yes.\n          .then(\n            (allowed) => allowed === true,\n            () => false,\n          );\n        const outcome = await Promise.race([answered, abandoned]);\n        if (askingRef.current?.requestId === requestId) askingRef.current = null;\n        // An answer that arrives after the call went away is discarded.\n        if (outcome === 'abandoned' || controller.signal.aborted) return 'abandoned';\n        if (outcome) consentStore?.grant(threadId);\n        return outcome ? 'proceed' : 'declined';\n      }\n\n      if (!consentStore) return 'declined';\n      askingRef.current = { requestId, abandon: () => consentStore.abandon(requestId) };\n      const decision = await consentStore.ask(request);\n      if (askingRef.current?.requestId === requestId) askingRef.current = null;\n      return decision;\n    },\n    [consentStore, threadId],\n  );\n\n  useStatewireClientToolBridge({\n    threadId,\n    tools: bridgeTools,\n    tracker: clientToolRequests,\n    inputRequests,\n    confirmWrites,\n    writeDeclinedMessage: SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE,\n    sendResume: (requestId, value) => {\n      // Every envelope value is already wire-safe (per-call JSON round-trip in\n      // the shared batch engine), so the batch only needs the transport's\n      // JSON typing.\n      return sendCommand({\n        type: 'run/input',\n        requestId,\n        response: { type: 'resume', value: value as ReadonlyJSONObject },\n      });\n    },\n  });\n\n  return null;\n}\n"],"names":["createClientToolRequestTracker","useStatewireSendCommand","useStatewireRuns","useContext","ClientToolWriteConsentContext","useMemo","useRef","useEffect","useCallback","_a","useStatewireClientToolBridge"],"mappings":";;;;;;;AAmBA,MAAM,qBAAqBA,YAAAA,+BAAA;AAGpB,MAAM,yCACX;AAqBK,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AACjB,GAOS;AACP,QAAM,cAAcC,eAAAA,wBAAA;AACpB,QAAM,gBAAgBC,eAAAA,mBAAmB;AACzC,QAAM,eAAeC,WAAAA,WAAWC,oDAA6B;AAE7D,QAAM,cAAcC,WAAAA;AAAAA,IAClB,MACE,MAAM,IAAI,CAAC,UAAU;AAAA,MACnB,MAAM,KAAK,WAAW;AAAA,MACtB,eAAe,KAAK,WAAW;AAAA,MAC/B,KAAK,CAAC,MAAM,YAAY,KAAK,QAAQ,MAAM,OAAO;AAAA,IAAA,EAClD;AAAA,IACJ,CAAC,KAAK;AAAA,EAAA;AAMR,QAAM,YAAYC,WAAAA,OAA0D,IAAI;AAChFC,aAAAA,UAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ;AACb,SAAK,iBAAiB,CAAA,GAAI,KAAK,CAAC,YAAY,QAAQ,OAAO,OAAO,SAAS,EAAG;AAC9E,cAAU,UAAU;AACpB,WAAO,QAAA;AAAA,EACT,GAAG,CAAC,aAAa,CAAC;AAClBA,aAAAA;AAAAA,IACE,MAAM,MAAM;;AACV,sBAAU,YAAV,mBAAmB;AACnB,gBAAU,UAAU;AAAA,IACtB;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,eAAeD,WAAAA,OAAO,qBAAqB;AACjD,eAAa,UAAU;AACvB,QAAM,iBAAiBA,WAAAA,OAAO,iBAAiB;AAC/C,iBAAe,UAAU;AAEzB,QAAM,gBAAgBE,WAAAA;AAAAA,IACpB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IAAA,MAI6C;;AAC7C,UAAI,6CAAc,UAAU,UAAW,QAAO;AAC9C,YAAM,eAA6C,MAAM,KAAK,IAAI,IAAI,cAAc,CAAC,EAAE;AAAA,QACrF,CAAC,SAAS;;AACR,gBAAM,WAAUC,MAAA,aAAa,YAAb,gBAAAA,IAAuB;AACvC,iBAAO,UAAU,EAAE,MAAM,QAAA,IAAY,EAAE,KAAA;AAAA,QACzC;AAAA,MAAA;AAEF,YAAM,UAAU,EAAE,WAAW,UAAU,OAAO,aAAA;AAE9C,YAAM,cAAc,eAAe;AACnC,UAAI,aAAa;AACf,cAAM,aAAa,IAAI,gBAAA;AACvB,kBAAU,UAAU,EAAE,WAAW,SAAS,MAAM,WAAW,QAAM;AAIjE,cAAM,YAAY,IAAI,QAAqB,CAAC,YAAY;AACtD,qBAAW,OAAO,iBAAiB,SAAS,MAAM,QAAQ,WAAW,GAAG,EAAE,MAAM,MAAM;AAAA,QACxF,CAAC;AACD,cAAM,WAAW,QAAQ,QAAA,EACtB,KAAK,MAAM,YAAY,EAAE,GAAG,SAAS,QAAQ,WAAW,OAAA,CAAQ,CAAC,EAEjE;AAAA,UACC,CAAC,YAAY,YAAY;AAAA,UACzB,MAAM;AAAA,QAAA;AAEV,cAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,UAAU,SAAS,CAAC;AACxD,cAAI,eAAU,YAAV,mBAAmB,eAAc,qBAAqB,UAAU;AAEpE,YAAI,YAAY,eAAe,WAAW,OAAO,QAAS,QAAO;AACjE,YAAI,QAAS,8CAAc,MAAM;AACjC,eAAO,UAAU,YAAY;AAAA,MAC/B;AAEA,UAAI,CAAC,aAAc,QAAO;AAC1B,gBAAU,UAAU,EAAE,WAAW,SAAS,MAAM,aAAa,QAAQ,SAAS,EAAA;AAC9E,YAAM,WAAW,MAAM,aAAa,IAAI,OAAO;AAC/C,YAAI,eAAU,YAAV,mBAAmB,eAAc,qBAAqB,UAAU;AACpE,aAAO;AAAA,IACT;AAAA,IACA,CAAC,cAAc,QAAQ;AAAA,EAAA;AAGzBC,gDAA6B;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,sBAAsB;AAAA,IACtB,YAAY,CAAC,WAAW,UAAU;AAIhC,aAAO,YAAY;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,UAAU,EAAE,MAAM,UAAU,MAAA;AAAA,MAAmC,CAChE;AAAA,IACH;AAAA,EAAA,CACD;AAED,SAAO;AACT;;;"}

package/dist/chat/StatewireClientToolBridge.d.ts

@@ -1,4 +1,7 @@
 import { type RegisteredClientTool } from '../agent-runtime/src/index';
+import { type ClientToolWriteConfirmer } from './client-tool-write-consent';
+/** Answers the model for a write the person did not allow. */
+export declare const SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE = "The person did not allow this. Do not retry it; ask them how they want to proceed.";
 /**
  * Executes the deep agent's frontend tool calls in statewire mode.
  *
@@ -8,11 +11,21 @@ import { type RegisteredClientTool } from '../agent-runtime/src/index';
  * run with a per-call result envelope, so a missing tool or a thrown handler
  * still frees the run with an error the model can act on instead of hanging.
  *
+ * A batch holding a tool marked `requiresWriteConsent` first asks the person
+ * (once per conversation): through the host's `confirmWrites` when it gave
+ * one, else through the consent store the nearest `AthenaProvider` holds,
+ * which `StatewireClientToolConsentCard` draws. With neither there is nobody
+ * to ask, so the writes are declined.
+ *
  * The claim lifecycle, liveness guards, and wire-safety live in
  * `@athenaintel/agent-runtime`'s `useStatewireClientToolBridge`; this wrapper
  * only adapts the shared `RegisteredClientTool` shape and the SDK's transport.
  */
-export declare function StatewireClientToolBridge({ tools, threadId, }: {
+export declare function StatewireClientToolBridge({ tools, threadId, writeConsentSummaries, confirmWrites: hostConfirmWrites, }: {
     tools: readonly RegisteredClientTool[];
     threadId: string;
+    /** Each write tool's own words for what it does, by tool name. */
+    writeConsentSummaries?: Readonly<Record<string, string>>;
+    /** The host's own consent UI, in place of the SDK's card. */
+    confirmWrites?: ClientToolWriteConfirmer;
 }): null;

package/dist/chat/StatewireClientToolBridge.js

@@ -1,14 +1,19 @@
 import { useStatewireSendCommand, useStatewireRuns } from "@assistant-ui/react-statewire";
-import { useMemo } from "react";
+import { useContext, useMemo, useRef, useEffect, useCallback } from "react";
+import { ClientToolWriteConsentContext } from "./client-tool-write-consent.js";
 import { useStatewireClientToolBridge } from "../agent-runtime/src/client-tool-bridge.js";
 import { createClientToolRequestTracker } from "../agent-runtime/src/client-tools.js";
 const clientToolRequests = createClientToolRequestTracker();
+const SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE = "The person did not allow this. Do not retry it; ask them how they want to proceed.";
 function StatewireClientToolBridge({
   tools,
-  threadId
+  threadId,
+  writeConsentSummaries,
+  confirmWrites: hostConfirmWrites
 }) {
   const sendCommand = useStatewireSendCommand();
   const inputRequests = useStatewireRuns().inputRequests;
+  const consentStore = useContext(ClientToolWriteConsentContext);
   const bridgeTools = useMemo(
     () => tools.map((tool) => ({
       name: tool.definition.name,
@@ -17,11 +22,73 @@ function StatewireClientToolBridge({
     })),
     [tools]
   );
+  const askingRef = useRef(null);
+  useEffect(() => {
+    const asking = askingRef.current;
+    if (!asking) return;
+    if ((inputRequests ?? []).some((request) => request.id === asking.requestId)) return;
+    askingRef.current = null;
+    asking.abandon();
+  }, [inputRequests]);
+  useEffect(
+    () => () => {
+      var _a;
+      (_a = askingRef.current) == null ? void 0 : _a.abandon();
+      askingRef.current = null;
+    },
+    []
+  );
+  const summariesRef = useRef(writeConsentSummaries);
+  summariesRef.current = writeConsentSummaries;
+  const hostConfirmRef = useRef(hostConfirmWrites);
+  hostConfirmRef.current = hostConfirmWrites;
+  const confirmWrites = useCallback(
+    async ({
+      requestId,
+      writeToolNames
+    }) => {
+      var _a, _b;
+      if (consentStore == null ? void 0 : consentStore.isGranted(threadId)) return "proceed";
+      const consentTools = Array.from(new Set(writeToolNames)).map(
+        (name) => {
+          var _a2;
+          const summary = (_a2 = summariesRef.current) == null ? void 0 : _a2[name];
+          return summary ? { name, summary } : { name };
+        }
+      );
+      const request = { requestId, threadId, tools: consentTools };
+      const hostConfirm = hostConfirmRef.current;
+      if (hostConfirm) {
+        const controller = new AbortController();
+        askingRef.current = { requestId, abandon: () => controller.abort() };
+        const abandoned = new Promise((resolve) => {
+          controller.signal.addEventListener("abort", () => resolve("abandoned"), { once: true });
+        });
+        const answered = Promise.resolve().then(() => hostConfirm({ ...request, signal: controller.signal })).then(
+          (allowed) => allowed === true,
+          () => false
+        );
+        const outcome = await Promise.race([answered, abandoned]);
+        if (((_a = askingRef.current) == null ? void 0 : _a.requestId) === requestId) askingRef.current = null;
+        if (outcome === "abandoned" || controller.signal.aborted) return "abandoned";
+        if (outcome) consentStore == null ? void 0 : consentStore.grant(threadId);
+        return outcome ? "proceed" : "declined";
+      }
+      if (!consentStore) return "declined";
+      askingRef.current = { requestId, abandon: () => consentStore.abandon(requestId) };
+      const decision = await consentStore.ask(request);
+      if (((_b = askingRef.current) == null ? void 0 : _b.requestId) === requestId) askingRef.current = null;
+      return decision;
+    },
+    [consentStore, threadId]
+  );
   useStatewireClientToolBridge({
     threadId,
     tools: bridgeTools,
     tracker: clientToolRequests,
     inputRequests,
+    confirmWrites,
+    writeDeclinedMessage: SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE,
     sendResume: (requestId, value) => {
       return sendCommand({
         type: "run/input",
@@ -33,6 +100,7 @@ function StatewireClientToolBridge({
   return null;
 }
 export {
+  SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE,
   StatewireClientToolBridge
 };
 //# sourceMappingURL=StatewireClientToolBridge.js.map

package/dist/chat/StatewireClientToolBridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"StatewireClientToolBridge.js","sources":["../../src/chat/StatewireClientToolBridge.tsx"],"sourcesContent":["import { useStatewireRuns, useStatewireSendCommand } from '@assistant-ui/react-statewire';\nimport {\n  type ClientToolBridgeTool,\n  createClientToolRequestTracker,\n  type RegisteredClientTool,\n  useStatewireClientToolBridge,\n} from '@athenaintel/agent-runtime';\nimport type { ReadonlyJSONObject } from 'assistant-stream/utils';\nimport { useMemo } from 'react';\n\n// Shared across every mount: the same thread can be attached from two mounted\n// surfaces, and a parked client-tool call must be executed and resumed by\n// exactly one of them. Whichever bridge claims the request first owns it.\nconst clientToolRequests = createClientToolRequestTracker();\n\n/**\n * Executes the deep agent's frontend tool calls in statewire mode.\n *\n * Tools declared through `runConfig.custom.client_tools` have no backend\n * implementation: a call parks the run and surfaces here as a statewire\n * input request. The bridge runs the matching local handler and resumes the\n * run with a per-call result envelope, so a missing tool or a thrown handler\n * still frees the run with an error the model can act on instead of hanging.\n *\n * The claim lifecycle, liveness guards, and wire-safety live in\n * `@athenaintel/agent-runtime`'s `useStatewireClientToolBridge`; this wrapper\n * only adapts the shared `RegisteredClientTool` shape and the SDK's transport.\n */\nexport function StatewireClientToolBridge({\n  tools,\n  threadId,\n}: {\n  tools: readonly RegisteredClientTool[];\n  threadId: string;\n}): null {\n  const sendCommand = useStatewireSendCommand();\n  const inputRequests = useStatewireRuns().inputRequests;\n\n  const bridgeTools = useMemo<readonly ClientToolBridgeTool[]>(\n    () =>\n      tools.map((tool) => ({\n        name: tool.definition.name,\n        requiresWrite: tool.definition.requiresWrite,\n        run: (args, context) => tool.handler(args, context),\n      })),\n    [tools],\n  );\n\n  useStatewireClientToolBridge({\n    threadId,\n    tools: bridgeTools,\n    tracker: clientToolRequests,\n    inputRequests,\n    sendResume: (requestId, value) => {\n      // Every envelope value is already wire-safe (per-call JSON round-trip in\n      // the shared batch engine), so the batch only needs the transport's\n      // JSON typing.\n      return sendCommand({\n        type: 'run/input',\n        requestId,\n        response: { type: 'resume', value: value as ReadonlyJSONObject },\n      });\n    },\n  });\n\n  return null;\n}\n"],"names":[],"mappings":";;;;AAaA,MAAM,qBAAqB,+BAAA;AAepB,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AACF,GAGS;AACP,QAAM,cAAc,wBAAA;AACpB,QAAM,gBAAgB,mBAAmB;AAEzC,QAAM,cAAc;AAAA,IAClB,MACE,MAAM,IAAI,CAAC,UAAU;AAAA,MACnB,MAAM,KAAK,WAAW;AAAA,MACtB,eAAe,KAAK,WAAW;AAAA,MAC/B,KAAK,CAAC,MAAM,YAAY,KAAK,QAAQ,MAAM,OAAO;AAAA,IAAA,EAClD;AAAA,IACJ,CAAC,KAAK;AAAA,EAAA;AAGR,+BAA6B;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,IACT;AAAA,IACA,YAAY,CAAC,WAAW,UAAU;AAIhC,aAAO,YAAY;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,UAAU,EAAE,MAAM,UAAU,MAAA;AAAA,MAAmC,CAChE;AAAA,IACH;AAAA,EAAA,CACD;AAED,SAAO;AACT;"}
+{"version":3,"file":"StatewireClientToolBridge.js","sources":["../../src/chat/StatewireClientToolBridge.tsx"],"sourcesContent":["import { useStatewireRuns, useStatewireSendCommand } from '@assistant-ui/react-statewire';\nimport {\n  type ClientToolBridgeTool,\n  type ClientToolWriteConsentDecision,\n  createClientToolRequestTracker,\n  type RegisteredClientTool,\n  useStatewireClientToolBridge,\n} from '@athenaintel/agent-runtime';\nimport type { ReadonlyJSONObject } from 'assistant-stream/utils';\nimport { useCallback, useContext, useEffect, useMemo, useRef } from 'react';\nimport {\n  type ClientToolWriteConfirmer,\n  ClientToolWriteConsentContext,\n  type ClientToolWriteConsentTool,\n} from './client-tool-write-consent';\n\n// Shared across every mount: the same thread can be attached from two mounted\n// surfaces, and a parked client-tool call must be executed and resumed by\n// exactly one of them. Whichever bridge claims the request first owns it.\nconst clientToolRequests = createClientToolRequestTracker();\n\n/** Answers the model for a write the person did not allow. */\nexport const SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE =\n  'The person did not allow this. Do not retry it; ask them how they want to proceed.';\n\n/**\n * Executes the deep agent's frontend tool calls in statewire mode.\n *\n * Tools declared through `runConfig.custom.client_tools` have no backend\n * implementation: a call parks the run and surfaces here as a statewire\n * input request. The bridge runs the matching local handler and resumes the\n * run with a per-call result envelope, so a missing tool or a thrown handler\n * still frees the run with an error the model can act on instead of hanging.\n *\n * A batch holding a tool marked `requiresWriteConsent` first asks the person\n * (once per conversation): through the host's `confirmWrites` when it gave\n * one, else through the consent store the nearest `AthenaProvider` holds,\n * which `StatewireClientToolConsentCard` draws. With neither there is nobody\n * to ask, so the writes are declined.\n *\n * The claim lifecycle, liveness guards, and wire-safety live in\n * `@athenaintel/agent-runtime`'s `useStatewireClientToolBridge`; this wrapper\n * only adapts the shared `RegisteredClientTool` shape and the SDK's transport.\n */\nexport function StatewireClientToolBridge({\n  tools,\n  threadId,\n  writeConsentSummaries,\n  confirmWrites: hostConfirmWrites,\n}: {\n  tools: readonly RegisteredClientTool[];\n  threadId: string;\n  /** Each write tool's own words for what it does, by tool name. */\n  writeConsentSummaries?: Readonly<Record<string, string>>;\n  /** The host's own consent UI, in place of the SDK's card. */\n  confirmWrites?: ClientToolWriteConfirmer;\n}): null {\n  const sendCommand = useStatewireSendCommand();\n  const inputRequests = useStatewireRuns().inputRequests;\n  const consentStore = useContext(ClientToolWriteConsentContext);\n\n  const bridgeTools = useMemo<readonly ClientToolBridgeTool[]>(\n    () =>\n      tools.map((tool) => ({\n        name: tool.definition.name,\n        requiresWrite: tool.definition.requiresWrite,\n        run: (args, context) => tool.handler(args, context),\n      })),\n    [tools],\n  );\n\n  // The question on screen belongs to one parked request. When that request\n  // goes away (stop, an answer from elsewhere, another conversation), close\n  // the question instead of leaving it up for a call that no longer exists.\n  const askingRef = useRef<{ requestId: string; abandon: () => void } | null>(null);\n  useEffect(() => {\n    const asking = askingRef.current;\n    if (!asking) return;\n    if ((inputRequests ?? []).some((request) => request.id === asking.requestId)) return;\n    askingRef.current = null;\n    asking.abandon();\n  }, [inputRequests]);\n  useEffect(\n    () => () => {\n      askingRef.current?.abandon();\n      askingRef.current = null;\n    },\n    [],\n  );\n\n  const summariesRef = useRef(writeConsentSummaries);\n  summariesRef.current = writeConsentSummaries;\n  const hostConfirmRef = useRef(hostConfirmWrites);\n  hostConfirmRef.current = hostConfirmWrites;\n\n  const confirmWrites = useCallback(\n    async ({\n      requestId,\n      writeToolNames,\n    }: {\n      requestId: string;\n      writeToolNames: readonly string[];\n    }): Promise<ClientToolWriteConsentDecision> => {\n      if (consentStore?.isGranted(threadId)) return 'proceed';\n      const consentTools: ClientToolWriteConsentTool[] = Array.from(new Set(writeToolNames)).map(\n        (name) => {\n          const summary = summariesRef.current?.[name];\n          return summary ? { name, summary } : { name };\n        },\n      );\n      const request = { requestId, threadId, tools: consentTools };\n\n      const hostConfirm = hostConfirmRef.current;\n      if (hostConfirm) {\n        const controller = new AbortController();\n        askingRef.current = { requestId, abandon: () => controller.abort() };\n        // The question ends when the person answers or when its call goes\n        // away, whichever is first: a host dialog that closes on the signal\n        // without settling its promise must not hold the request's claim.\n        const abandoned = new Promise<'abandoned'>((resolve) => {\n          controller.signal.addEventListener('abort', () => resolve('abandoned'), { once: true });\n        });\n        const answered = Promise.resolve()\n          .then(() => hostConfirm({ ...request, signal: controller.signal }))\n          // A consent UI that failed is not a yes.\n          .then(\n            (allowed) => allowed === true,\n            () => false,\n          );\n        const outcome = await Promise.race([answered, abandoned]);\n        if (askingRef.current?.requestId === requestId) askingRef.current = null;\n        // An answer that arrives after the call went away is discarded.\n        if (outcome === 'abandoned' || controller.signal.aborted) return 'abandoned';\n        if (outcome) consentStore?.grant(threadId);\n        return outcome ? 'proceed' : 'declined';\n      }\n\n      if (!consentStore) return 'declined';\n      askingRef.current = { requestId, abandon: () => consentStore.abandon(requestId) };\n      const decision = await consentStore.ask(request);\n      if (askingRef.current?.requestId === requestId) askingRef.current = null;\n      return decision;\n    },\n    [consentStore, threadId],\n  );\n\n  useStatewireClientToolBridge({\n    threadId,\n    tools: bridgeTools,\n    tracker: clientToolRequests,\n    inputRequests,\n    confirmWrites,\n    writeDeclinedMessage: SDK_CLIENT_TOOL_WRITE_DECLINED_MESSAGE,\n    sendResume: (requestId, value) => {\n      // Every envelope value is already wire-safe (per-call JSON round-trip in\n      // the shared batch engine), so the batch only needs the transport's\n      // JSON typing.\n      return sendCommand({\n        type: 'run/input',\n        requestId,\n        response: { type: 'resume', value: value as ReadonlyJSONObject },\n      });\n    },\n  });\n\n  return null;\n}\n"],"names":["_a"],"mappings":";;;;;AAmBA,MAAM,qBAAqB,+BAAA;AAGpB,MAAM,yCACX;AAqBK,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AACjB,GAOS;AACP,QAAM,cAAc,wBAAA;AACpB,QAAM,gBAAgB,mBAAmB;AACzC,QAAM,eAAe,WAAW,6BAA6B;AAE7D,QAAM,cAAc;AAAA,IAClB,MACE,MAAM,IAAI,CAAC,UAAU;AAAA,MACnB,MAAM,KAAK,WAAW;AAAA,MACtB,eAAe,KAAK,WAAW;AAAA,MAC/B,KAAK,CAAC,MAAM,YAAY,KAAK,QAAQ,MAAM,OAAO;AAAA,IAAA,EAClD;AAAA,IACJ,CAAC,KAAK;AAAA,EAAA;AAMR,QAAM,YAAY,OAA0D,IAAI;AAChF,YAAU,MAAM;AACd,UAAM,SAAS,UAAU;AACzB,QAAI,CAAC,OAAQ;AACb,SAAK,iBAAiB,CAAA,GAAI,KAAK,CAAC,YAAY,QAAQ,OAAO,OAAO,SAAS,EAAG;AAC9E,cAAU,UAAU;AACpB,WAAO,QAAA;AAAA,EACT,GAAG,CAAC,aAAa,CAAC;AAClB;AAAA,IACE,MAAM,MAAM;;AACV,sBAAU,YAAV,mBAAmB;AACnB,gBAAU,UAAU;AAAA,IACtB;AAAA,IACA,CAAA;AAAA,EAAC;AAGH,QAAM,eAAe,OAAO,qBAAqB;AACjD,eAAa,UAAU;AACvB,QAAM,iBAAiB,OAAO,iBAAiB;AAC/C,iBAAe,UAAU;AAEzB,QAAM,gBAAgB;AAAA,IACpB,OAAO;AAAA,MACL;AAAA,MACA;AAAA,IAAA,MAI6C;;AAC7C,UAAI,6CAAc,UAAU,UAAW,QAAO;AAC9C,YAAM,eAA6C,MAAM,KAAK,IAAI,IAAI,cAAc,CAAC,EAAE;AAAA,QACrF,CAAC,SAAS;;AACR,gBAAM,WAAUA,MAAA,aAAa,YAAb,gBAAAA,IAAuB;AACvC,iBAAO,UAAU,EAAE,MAAM,QAAA,IAAY,EAAE,KAAA;AAAA,QACzC;AAAA,MAAA;AAEF,YAAM,UAAU,EAAE,WAAW,UAAU,OAAO,aAAA;AAE9C,YAAM,cAAc,eAAe;AACnC,UAAI,aAAa;AACf,cAAM,aAAa,IAAI,gBAAA;AACvB,kBAAU,UAAU,EAAE,WAAW,SAAS,MAAM,WAAW,QAAM;AAIjE,cAAM,YAAY,IAAI,QAAqB,CAAC,YAAY;AACtD,qBAAW,OAAO,iBAAiB,SAAS,MAAM,QAAQ,WAAW,GAAG,EAAE,MAAM,MAAM;AAAA,QACxF,CAAC;AACD,cAAM,WAAW,QAAQ,QAAA,EACtB,KAAK,MAAM,YAAY,EAAE,GAAG,SAAS,QAAQ,WAAW,OAAA,CAAQ,CAAC,EAEjE;AAAA,UACC,CAAC,YAAY,YAAY;AAAA,UACzB,MAAM;AAAA,QAAA;AAEV,cAAM,UAAU,MAAM,QAAQ,KAAK,CAAC,UAAU,SAAS,CAAC;AACxD,cAAI,eAAU,YAAV,mBAAmB,eAAc,qBAAqB,UAAU;AAEpE,YAAI,YAAY,eAAe,WAAW,OAAO,QAAS,QAAO;AACjE,YAAI,QAAS,8CAAc,MAAM;AACjC,eAAO,UAAU,YAAY;AAAA,MAC/B;AAEA,UAAI,CAAC,aAAc,QAAO;AAC1B,gBAAU,UAAU,EAAE,WAAW,SAAS,MAAM,aAAa,QAAQ,SAAS,EAAA;AAC9E,YAAM,WAAW,MAAM,aAAa,IAAI,OAAO;AAC/C,YAAI,eAAU,YAAV,mBAAmB,eAAc,qBAAqB,UAAU;AACpE,aAAO;AAAA,IACT;AAAA,IACA,CAAC,cAAc,QAAQ;AAAA,EAAA;AAGzB,+BAA6B;AAAA,IAC3B;AAAA,IACA,OAAO;AAAA,IACP,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA,sBAAsB;AAAA,IACtB,YAAY,CAAC,WAAW,UAAU;AAIhC,aAAO,YAAY;AAAA,QACjB,MAAM;AAAA,QACN;AAAA,QACA,UAAU,EAAE,MAAM,UAAU,MAAA;AAAA,MAAmC,CAChE;AAAA,IACH;AAAA,EAAA,CACD;AAED,SAAO;AACT;"}

package/dist/chat/StatewireClientToolConsentCard.cjs

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const jsxRuntime = require("react/jsx-runtime");
+const lucideReact = require("lucide-react");
+const button = require("../ui/button.cjs");
+const clientToolWriteConsent = require("./client-tool-write-consent.cjs");
+const cnfast = require("cnfast");
+function clientToolConsentSentence({
+  agentName,
+  request
+}) {
+  const summaries = Array.from(
+    new Set(request.tools.flatMap((tool) => tool.summary ? [tool.summary] : []))
+  );
+  if (summaries.length > 0 && summaries.length === request.tools.length) {
+    return `${agentName} wants to ${joinWords(summaries)}.`;
+  }
+  const names = request.tools.map((tool) => tool.name);
+  return `${agentName} wants to run ${joinWords(names)}, which ${names.length === 1 ? "changes" : "change"} something here.`;
+}
+function joinWords(words) {
+  if (words.length <= 1) return words[0] ?? "";
+  return `${words.slice(0, -1).join(", ")} and ${words[words.length - 1]}`;
+}
+const StatewireClientToolConsentCard = ({
+  className,
+  agentName = "The agent"
+}) => {
+  const { request, allow, decline } = clientToolWriteConsent.useClientToolWriteConsent();
+  if (!request) return null;
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "section",
+    {
+      "aria-label": "Permission required",
+      "data-testid": "client-tool-consent-card",
+      className: cnfast.cn(
+        "aui-client-tool-consent-card w-full rounded-2xl border border-border bg-card px-4 py-3 text-foreground shadow-xs",
+        className
+      ),
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-start gap-3", children: [
+          /* @__PURE__ */ jsxRuntime.jsx(lucideReact.MousePointerClickIcon, { className: "mt-0.5 size-4 shrink-0 text-muted-foreground" }),
+          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "min-w-0 flex-1", children: [
+            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "font-semibold text-sm", children: "Allow this?" }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "break-words pt-1 text-foreground text-sm leading-snug", children: clientToolConsentSentence({ agentName, request }) }),
+            /* @__PURE__ */ jsxRuntime.jsx("p", { className: "pt-1 text-muted-foreground text-sm leading-snug", children: "Allowing covers the rest of this conversation." })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-wrap items-center gap-2 pt-3", children: [
+          /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { size: "sm", onClick: allow, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(lucideReact.CheckIcon, {}),
+            "Allow"
+          ] }),
+          /* @__PURE__ */ jsxRuntime.jsxs(button.Button, { size: "sm", variant: "outline", onClick: decline, children: [
+            /* @__PURE__ */ jsxRuntime.jsx(lucideReact.XIcon, {}),
+            "Decline"
+          ] })
+        ] })
+      ]
+    }
+  );
+};
+exports.StatewireClientToolConsentCard = StatewireClientToolConsentCard;
+exports.clientToolConsentSentence = clientToolConsentSentence;
+//# sourceMappingURL=StatewireClientToolConsentCard.cjs.map

package/dist/chat/StatewireClientToolConsentCard.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatewireClientToolConsentCard.cjs","sources":["../../src/chat/StatewireClientToolConsentCard.tsx"],"sourcesContent":["'use client';\n\nimport { CheckIcon, MousePointerClickIcon, XIcon } from 'lucide-react';\nimport type { FC } from 'react';\nimport { cn } from '../lib/utils';\nimport { Button } from '../ui/button';\nimport {\n  type ClientToolWriteConsentRequest,\n  useClientToolWriteConsent,\n} from './client-tool-write-consent';\n\nexport interface StatewireClientToolConsentCardProps {\n  /** Applied to the card's section. */\n  className?: string;\n  /**\n   * Who is asking, as the card names them (\"Jichard wants to …\"). Defaults to\n   * \"The agent\".\n   */\n  agentName?: string;\n}\n\n/** What the batch does, in the card's sentence: its tools' own words, else their names. */\nexport function clientToolConsentSentence({\n  agentName,\n  request,\n}: {\n  agentName: string;\n  request: ClientToolWriteConsentRequest;\n}): string {\n  const summaries = Array.from(\n    new Set(request.tools.flatMap((tool) => (tool.summary ? [tool.summary] : []))),\n  );\n  if (summaries.length > 0 && summaries.length === request.tools.length) {\n    return `${agentName} wants to ${joinWords(summaries)}.`;\n  }\n  const names = request.tools.map((tool) => tool.name);\n  return `${agentName} wants to run ${joinWords(names)}, which ${names.length === 1 ? 'changes' : 'change'} something here.`;\n}\n\nfunction joinWords(words: readonly string[]): string {\n  if (words.length <= 1) return words[0] ?? '';\n  return `${words.slice(0, -1).join(', ')} and ${words[words.length - 1]}`;\n}\n\n/**\n * The question a frontend tool marked `requiresWriteConsent` puts to the\n * person before its first call in a conversation runs: allow (which covers\n * the rest of the conversation) or decline. `AthenaChat` renders it above the\n * composer; a host with its own chat mounts it there, or builds its own on\n * `useClientToolWriteConsent`. Renders nothing while no call is waiting.\n */\nexport const StatewireClientToolConsentCard: FC<StatewireClientToolConsentCardProps> = ({\n  className,\n  agentName = 'The agent',\n}) => {\n  const { request, allow, decline } = useClientToolWriteConsent();\n  if (!request) return null;\n  return (\n    <section\n      aria-label=\"Permission required\"\n      data-testid=\"client-tool-consent-card\"\n      className={cn(\n        'aui-client-tool-consent-card w-full rounded-2xl border border-border bg-card px-4 py-3 text-foreground shadow-xs',\n        className,\n      )}\n    >\n      <div className=\"flex items-start gap-3\">\n        <MousePointerClickIcon className=\"mt-0.5 size-4 shrink-0 text-muted-foreground\" />\n        <div className=\"min-w-0 flex-1\">\n          <p className=\"font-semibold text-sm\">Allow this?</p>\n          <p className=\"break-words pt-1 text-foreground text-sm leading-snug\">\n            {clientToolConsentSentence({ agentName, request })}\n          </p>\n          <p className=\"pt-1 text-muted-foreground text-sm leading-snug\">\n            Allowing covers the rest of this conversation.\n          </p>\n        </div>\n      </div>\n      <div className=\"flex flex-wrap items-center gap-2 pt-3\">\n        <Button size=\"sm\" onClick={allow}>\n          <CheckIcon />\n          Allow\n        </Button>\n        <Button size=\"sm\" variant=\"outline\" onClick={decline}>\n          <XIcon />\n          Decline\n        </Button>\n      </div>\n    </section>\n  );\n};\n"],"names":["useClientToolWriteConsent","jsxs","cn","jsx","MousePointerClickIcon","Button","CheckIcon","XIcon"],"mappings":";;;;;;;AAsBO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AACF,GAGW;AACT,QAAM,YAAY,MAAM;AAAA,IACtB,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC,SAAU,KAAK,UAAU,CAAC,KAAK,OAAO,IAAI,CAAA,CAAG,CAAC;AAAA,EAAA;AAE/E,MAAI,UAAU,SAAS,KAAK,UAAU,WAAW,QAAQ,MAAM,QAAQ;AACrE,WAAO,GAAG,SAAS,aAAa,UAAU,SAAS,CAAC;AAAA,EACtD;AACA,QAAM,QAAQ,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI;AACnD,SAAO,GAAG,SAAS,iBAAiB,UAAU,KAAK,CAAC,WAAW,MAAM,WAAW,IAAI,YAAY,QAAQ;AAC1G;AAEA,SAAS,UAAU,OAAkC;AACnD,MAAI,MAAM,UAAU,EAAG,QAAO,MAAM,CAAC,KAAK;AAC1C,SAAO,GAAG,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQ,MAAM,MAAM,SAAS,CAAC,CAAC;AACxE;AASO,MAAM,iCAA0E,CAAC;AAAA,EACtF;AAAA,EACA,YAAY;AACd,MAAM;AACJ,QAAM,EAAE,SAAS,OAAO,QAAA,IAAYA,uBAAAA,0BAAA;AACpC,MAAI,CAAC,QAAS,QAAO;AACrB,SACEC,2BAAAA;AAAAA,IAAC;AAAA,IAAA;AAAA,MACC,cAAW;AAAA,MACX,eAAY;AAAA,MACZ,WAAWC,OAAAA;AAAAA,QACT;AAAA,QACA;AAAA,MAAA;AAAA,MAGF,UAAA;AAAA,QAAAD,2BAAAA,KAAC,OAAA,EAAI,WAAU,0BACb,UAAA;AAAA,UAAAE,2BAAAA,IAACC,YAAAA,uBAAA,EAAsB,WAAU,+CAAA,CAA+C;AAAA,UAChFH,2BAAAA,KAAC,OAAA,EAAI,WAAU,kBACb,UAAA;AAAA,YAAAE,2BAAAA,IAAC,KAAA,EAAE,WAAU,yBAAwB,UAAA,eAAW;AAAA,YAChDA,2BAAAA,IAAC,OAAE,WAAU,yDACV,oCAA0B,EAAE,WAAW,QAAA,CAAS,GACnD;AAAA,YACAA,2BAAAA,IAAC,KAAA,EAAE,WAAU,mDAAkD,UAAA,iDAAA,CAE/D;AAAA,UAAA,EAAA,CACF;AAAA,QAAA,GACF;AAAA,QACAF,2BAAAA,KAAC,OAAA,EAAI,WAAU,0CACb,UAAA;AAAA,UAAAA,2BAAAA,KAACI,OAAAA,QAAA,EAAO,MAAK,MAAK,SAAS,OACzB,UAAA;AAAA,YAAAF,2BAAAA,IAACG,YAAAA,WAAA,EAAU;AAAA,YAAE;AAAA,UAAA,GAEf;AAAA,0CACCD,OAAAA,QAAA,EAAO,MAAK,MAAK,SAAQ,WAAU,SAAS,SAC3C,UAAA;AAAA,YAAAF,2BAAAA,IAACI,YAAAA,OAAA,EAAM;AAAA,YAAE;AAAA,UAAA,EAAA,CAEX;AAAA,QAAA,EAAA,CACF;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAGN;;;"}

package/dist/chat/StatewireClientToolConsentCard.d.ts

@@ -0,0 +1,24 @@
+import type { FC } from 'react';
+import { type ClientToolWriteConsentRequest } from './client-tool-write-consent';
+export interface StatewireClientToolConsentCardProps {
+    /** Applied to the card's section. */
+    className?: string;
+    /**
+     * Who is asking, as the card names them ("Jichard wants to …"). Defaults to
+     * "The agent".
+     */
+    agentName?: string;
+}
+/** What the batch does, in the card's sentence: its tools' own words, else their names. */
+export declare function clientToolConsentSentence({ agentName, request, }: {
+    agentName: string;
+    request: ClientToolWriteConsentRequest;
+}): string;
+/**
+ * The question a frontend tool marked `requiresWriteConsent` puts to the
+ * person before its first call in a conversation runs: allow (which covers
+ * the rest of the conversation) or decline. `AthenaChat` renders it above the
+ * composer; a host with its own chat mounts it there, or builds its own on
+ * `useClientToolWriteConsent`. Renders nothing while no call is waiting.
+ */
+export declare const StatewireClientToolConsentCard: FC<StatewireClientToolConsentCardProps>;

package/dist/chat/StatewireClientToolConsentCard.js

@@ -0,0 +1,65 @@
+import { jsxs, jsx } from "react/jsx-runtime";
+import { MousePointerClickIcon, CheckIcon, XIcon } from "lucide-react";
+import { Button } from "../ui/button.js";
+import { useClientToolWriteConsent } from "./client-tool-write-consent.js";
+import { cn } from "cnfast";
+function clientToolConsentSentence({
+  agentName,
+  request
+}) {
+  const summaries = Array.from(
+    new Set(request.tools.flatMap((tool) => tool.summary ? [tool.summary] : []))
+  );
+  if (summaries.length > 0 && summaries.length === request.tools.length) {
+    return `${agentName} wants to ${joinWords(summaries)}.`;
+  }
+  const names = request.tools.map((tool) => tool.name);
+  return `${agentName} wants to run ${joinWords(names)}, which ${names.length === 1 ? "changes" : "change"} something here.`;
+}
+function joinWords(words) {
+  if (words.length <= 1) return words[0] ?? "";
+  return `${words.slice(0, -1).join(", ")} and ${words[words.length - 1]}`;
+}
+const StatewireClientToolConsentCard = ({
+  className,
+  agentName = "The agent"
+}) => {
+  const { request, allow, decline } = useClientToolWriteConsent();
+  if (!request) return null;
+  return /* @__PURE__ */ jsxs(
+    "section",
+    {
+      "aria-label": "Permission required",
+      "data-testid": "client-tool-consent-card",
+      className: cn(
+        "aui-client-tool-consent-card w-full rounded-2xl border border-border bg-card px-4 py-3 text-foreground shadow-xs",
+        className
+      ),
+      children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-start gap-3", children: [
+          /* @__PURE__ */ jsx(MousePointerClickIcon, { className: "mt-0.5 size-4 shrink-0 text-muted-foreground" }),
+          /* @__PURE__ */ jsxs("div", { className: "min-w-0 flex-1", children: [
+            /* @__PURE__ */ jsx("p", { className: "font-semibold text-sm", children: "Allow this?" }),
+            /* @__PURE__ */ jsx("p", { className: "break-words pt-1 text-foreground text-sm leading-snug", children: clientToolConsentSentence({ agentName, request }) }),
+            /* @__PURE__ */ jsx("p", { className: "pt-1 text-muted-foreground text-sm leading-snug", children: "Allowing covers the rest of this conversation." })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "flex flex-wrap items-center gap-2 pt-3", children: [
+          /* @__PURE__ */ jsxs(Button, { size: "sm", onClick: allow, children: [
+            /* @__PURE__ */ jsx(CheckIcon, {}),
+            "Allow"
+          ] }),
+          /* @__PURE__ */ jsxs(Button, { size: "sm", variant: "outline", onClick: decline, children: [
+            /* @__PURE__ */ jsx(XIcon, {}),
+            "Decline"
+          ] })
+        ] })
+      ]
+    }
+  );
+};
+export {
+  StatewireClientToolConsentCard,
+  clientToolConsentSentence
+};
+//# sourceMappingURL=StatewireClientToolConsentCard.js.map

package/dist/chat/StatewireClientToolConsentCard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatewireClientToolConsentCard.js","sources":["../../src/chat/StatewireClientToolConsentCard.tsx"],"sourcesContent":["'use client';\n\nimport { CheckIcon, MousePointerClickIcon, XIcon } from 'lucide-react';\nimport type { FC } from 'react';\nimport { cn } from '../lib/utils';\nimport { Button } from '../ui/button';\nimport {\n  type ClientToolWriteConsentRequest,\n  useClientToolWriteConsent,\n} from './client-tool-write-consent';\n\nexport interface StatewireClientToolConsentCardProps {\n  /** Applied to the card's section. */\n  className?: string;\n  /**\n   * Who is asking, as the card names them (\"Jichard wants to …\"). Defaults to\n   * \"The agent\".\n   */\n  agentName?: string;\n}\n\n/** What the batch does, in the card's sentence: its tools' own words, else their names. */\nexport function clientToolConsentSentence({\n  agentName,\n  request,\n}: {\n  agentName: string;\n  request: ClientToolWriteConsentRequest;\n}): string {\n  const summaries = Array.from(\n    new Set(request.tools.flatMap((tool) => (tool.summary ? [tool.summary] : []))),\n  );\n  if (summaries.length > 0 && summaries.length === request.tools.length) {\n    return `${agentName} wants to ${joinWords(summaries)}.`;\n  }\n  const names = request.tools.map((tool) => tool.name);\n  return `${agentName} wants to run ${joinWords(names)}, which ${names.length === 1 ? 'changes' : 'change'} something here.`;\n}\n\nfunction joinWords(words: readonly string[]): string {\n  if (words.length <= 1) return words[0] ?? '';\n  return `${words.slice(0, -1).join(', ')} and ${words[words.length - 1]}`;\n}\n\n/**\n * The question a frontend tool marked `requiresWriteConsent` puts to the\n * person before its first call in a conversation runs: allow (which covers\n * the rest of the conversation) or decline. `AthenaChat` renders it above the\n * composer; a host with its own chat mounts it there, or builds its own on\n * `useClientToolWriteConsent`. Renders nothing while no call is waiting.\n */\nexport const StatewireClientToolConsentCard: FC<StatewireClientToolConsentCardProps> = ({\n  className,\n  agentName = 'The agent',\n}) => {\n  const { request, allow, decline } = useClientToolWriteConsent();\n  if (!request) return null;\n  return (\n    <section\n      aria-label=\"Permission required\"\n      data-testid=\"client-tool-consent-card\"\n      className={cn(\n        'aui-client-tool-consent-card w-full rounded-2xl border border-border bg-card px-4 py-3 text-foreground shadow-xs',\n        className,\n      )}\n    >\n      <div className=\"flex items-start gap-3\">\n        <MousePointerClickIcon className=\"mt-0.5 size-4 shrink-0 text-muted-foreground\" />\n        <div className=\"min-w-0 flex-1\">\n          <p className=\"font-semibold text-sm\">Allow this?</p>\n          <p className=\"break-words pt-1 text-foreground text-sm leading-snug\">\n            {clientToolConsentSentence({ agentName, request })}\n          </p>\n          <p className=\"pt-1 text-muted-foreground text-sm leading-snug\">\n            Allowing covers the rest of this conversation.\n          </p>\n        </div>\n      </div>\n      <div className=\"flex flex-wrap items-center gap-2 pt-3\">\n        <Button size=\"sm\" onClick={allow}>\n          <CheckIcon />\n          Allow\n        </Button>\n        <Button size=\"sm\" variant=\"outline\" onClick={decline}>\n          <XIcon />\n          Decline\n        </Button>\n      </div>\n    </section>\n  );\n};\n"],"names":[],"mappings":";;;;;AAsBO,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AACF,GAGW;AACT,QAAM,YAAY,MAAM;AAAA,IACtB,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC,SAAU,KAAK,UAAU,CAAC,KAAK,OAAO,IAAI,CAAA,CAAG,CAAC;AAAA,EAAA;AAE/E,MAAI,UAAU,SAAS,KAAK,UAAU,WAAW,QAAQ,MAAM,QAAQ;AACrE,WAAO,GAAG,SAAS,aAAa,UAAU,SAAS,CAAC;AAAA,EACtD;AACA,QAAM,QAAQ,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI;AACnD,SAAO,GAAG,SAAS,iBAAiB,UAAU,KAAK,CAAC,WAAW,MAAM,WAAW,IAAI,YAAY,QAAQ;AAC1G;AAEA,SAAS,UAAU,OAAkC;AACnD,MAAI,MAAM,UAAU,EAAG,QAAO,MAAM,CAAC,KAAK;AAC1C,SAAO,GAAG,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQ,MAAM,MAAM,SAAS,CAAC,CAAC;AACxE;AASO,MAAM,iCAA0E,CAAC;AAAA,EACtF;AAAA,EACA,YAAY;AACd,MAAM;AACJ,QAAM,EAAE,SAAS,OAAO,QAAA,IAAY,0BAAA;AACpC,MAAI,CAAC,QAAS,QAAO;AACrB,SACE;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,cAAW;AAAA,MACX,eAAY;AAAA,MACZ,WAAW;AAAA,QACT;AAAA,QACA;AAAA,MAAA;AAAA,MAGF,UAAA;AAAA,QAAA,qBAAC,OAAA,EAAI,WAAU,0BACb,UAAA;AAAA,UAAA,oBAAC,uBAAA,EAAsB,WAAU,+CAAA,CAA+C;AAAA,UAChF,qBAAC,OAAA,EAAI,WAAU,kBACb,UAAA;AAAA,YAAA,oBAAC,KAAA,EAAE,WAAU,yBAAwB,UAAA,eAAW;AAAA,YAChD,oBAAC,OAAE,WAAU,yDACV,oCAA0B,EAAE,WAAW,QAAA,CAAS,GACnD;AAAA,YACA,oBAAC,KAAA,EAAE,WAAU,mDAAkD,UAAA,iDAAA,CAE/D;AAAA,UAAA,EAAA,CACF;AAAA,QAAA,GACF;AAAA,QACA,qBAAC,OAAA,EAAI,WAAU,0CACb,UAAA;AAAA,UAAA,qBAAC,QAAA,EAAO,MAAK,MAAK,SAAS,OACzB,UAAA;AAAA,YAAA,oBAAC,WAAA,EAAU;AAAA,YAAE;AAAA,UAAA,GAEf;AAAA,+BACC,QAAA,EAAO,MAAK,MAAK,SAAQ,WAAU,SAAS,SAC3C,UAAA;AAAA,YAAA,oBAAC,OAAA,EAAM;AAAA,YAAE;AAAA,UAAA,EAAA,CAEX;AAAA,QAAA,EAAA,CACF;AAAA,MAAA;AAAA,IAAA;AAAA,EAAA;AAGN;"}

package/dist/chat/client-tool-write-consent.cjs

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require$$0 = require("react");
+const athenaDiagnostics = require("../diagnostics/athena-diagnostics.cjs");
+const errors = require("../diagnostics/errors.cjs");
+function createClientToolWriteConsentStore() {
+  let pending = null;
+  let cards = 0;
+  const granted = /* @__PURE__ */ new Set();
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = () => {
+    for (const listener of Array.from(listeners)) listener();
+  };
+  const settle = (decision) => {
+    const settled = pending;
+    pending = null;
+    settled == null ? void 0 : settled.resolve(decision);
+    notify();
+  };
+  return {
+    getPending: () => (pending == null ? void 0 : pending.request) ?? null,
+    subscribe(listener) {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    },
+    isGranted: (threadId) => granted.has(threadId),
+    ask(request) {
+      if (granted.has(request.threadId)) return Promise.resolve("proceed");
+      if (pending) settle("abandoned");
+      if (cards === 0) {
+        athenaDiagnostics.athenaDiagnostics.emit("sdk.config.warning", {
+          level: "warn",
+          error: new errors.AthenaSdkError({
+            code: "config_invalid",
+            message: "A frontend tool is waiting for the person to allow it, and nothing on screen asks them.",
+            hint: "Render <AthenaChat> (it draws the question), mount <StatewireClientToolConsentCard>, or pass confirmClientToolWrites on <AthenaProvider>. The run stays parked until the question is answered.",
+            context: { tools: request.tools.map((tool) => tool.name) }
+          }),
+          data: { tools: request.tools.map((tool) => tool.name) }
+        });
+      }
+      return new Promise((resolve) => {
+        pending = { request, resolve };
+        notify();
+      });
+    },
+    answer({ requestId, allow }) {
+      if ((pending == null ? void 0 : pending.request.requestId) !== requestId) return;
+      if (allow) granted.add(pending.request.threadId);
+      settle(allow ? "proceed" : "declined");
+    },
+    abandon(requestId) {
+      if ((pending == null ? void 0 : pending.request.requestId) !== requestId) return;
+      settle("abandoned");
+    },
+    grant(threadId) {
+      granted.add(threadId);
+    },
+    registerCard() {
+      cards += 1;
+      return () => {
+        cards -= 1;
+      };
+    },
+    dispose() {
+      granted.clear();
+      if (pending) settle("abandoned");
+    }
+  };
+}
+function useClientToolWriteConsentStore(scope) {
+  const [held, setHeld] = require$$0.useState(() => ({ scope, store: createClientToolWriteConsentStore() }));
+  let current = held;
+  if (held.scope !== scope) {
+    current = { scope, store: createClientToolWriteConsentStore() };
+    setHeld(current);
+  }
+  const { store } = current;
+  require$$0.useEffect(() => () => store.dispose(), [store]);
+  return store;
+}
+const ClientToolWriteConsentContext = require$$0.createContext(
+  null
+);
+const NO_SUBSCRIPTION = () => () => {
+};
+const NO_PENDING = () => null;
+function useClientToolWriteConsent() {
+  const store = require$$0.useContext(ClientToolWriteConsentContext);
+  const request = require$$0.useSyncExternalStore(
+    (store == null ? void 0 : store.subscribe) ?? NO_SUBSCRIPTION,
+    (store == null ? void 0 : store.getPending) ?? NO_PENDING,
+    NO_PENDING
+  );
+  require$$0.useEffect(() => store == null ? void 0 : store.registerCard(), [store]);
+  const requestId = request == null ? void 0 : request.requestId;
+  const allow = require$$0.useCallback(() => {
+    if (requestId !== void 0) store == null ? void 0 : store.answer({ requestId, allow: true });
+  }, [requestId, store]);
+  const decline = require$$0.useCallback(() => {
+    if (requestId !== void 0) store == null ? void 0 : store.answer({ requestId, allow: false });
+  }, [requestId, store]);
+  return { request, allow, decline };
+}
+exports.ClientToolWriteConsentContext = ClientToolWriteConsentContext;
+exports.createClientToolWriteConsentStore = createClientToolWriteConsentStore;
+exports.useClientToolWriteConsent = useClientToolWriteConsent;
+exports.useClientToolWriteConsentStore = useClientToolWriteConsentStore;
+//# sourceMappingURL=client-tool-write-consent.cjs.map

package/dist/chat/client-tool-write-consent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-tool-write-consent.cjs","sources":["../../src/chat/client-tool-write-consent.ts"],"sourcesContent":["'use client';\n\nimport type { ClientToolWriteConsentDecision } from '@athenaintel/agent-runtime';\nimport {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useState,\n  useSyncExternalStore,\n} from 'react';\nimport { athenaDiagnostics } from '../diagnostics/athena-diagnostics';\nimport { AthenaSdkError } from '../diagnostics/errors';\n\n/*\n * Write consent for the app's own frontend tools. A tool marked with\n * `requiresWriteConsent` parks its first call in a conversation until the\n * person answers; this store holds that question between the client-tool\n * bridge (which asks) and whatever draws it (`StatewireClientToolConsentCard`\n * in `AthenaChat`, or a host's own card on `useClientToolWriteConsent`).\n *\n * Allowing covers the rest of the conversation, as Athena's own apps do, for\n * the person who allowed it: a store belongs to one signed-in person on one\n * Athena (`useClientToolWriteConsentStore`), so someone else signing in to the\n * same mounted chat is asked for themselves. Nothing is remembered across a\n * reload: the next call asks again.\n */\n\n/** One write tool of a batch waiting on the person. */\nexport interface ClientToolWriteConsentTool {\n  /** The tool's name, as the model calls it. */\n  name: string;\n  /** What it does, when the tool said (`requiresWriteConsent(…, { summary })`). */\n  summary?: string;\n}\n\n/** The question a parked batch of write calls puts to the person. */\nexport interface ClientToolWriteConsentRequest {\n  /** The parked request the answer resumes. */\n  requestId: string;\n  /** The conversation the answer covers. */\n  threadId: string;\n  /** The batch's write tools, each once. */\n  tools: readonly ClientToolWriteConsentTool[];\n}\n\n/**\n * A host's own consent UI (`AthenaProviderProps.confirmClientToolWrites`).\n * Resolve `true` to allow the conversation's writes, `false` to decline this\n * batch. `signal` aborts when the question no longer has a call to answer\n * (the run was stopped): close the dialog then; the value is ignored.\n */\nexport type ClientToolWriteConfirmer = (\n  request: ClientToolWriteConsentRequest & { signal: AbortSignal },\n) => Promise<boolean>;\n\nexport interface ClientToolWriteConsentStore {\n  /** The question on screen, or `null`. */\n  getPending(): ClientToolWriteConsentRequest | null;\n  subscribe(listener: () => void): () => void;\n  /** Whether the person already allowed writes in this conversation. */\n  isGranted(threadId: string): boolean;\n  /** Put the question to the person; resolves with their answer, or `abandoned`. */\n  ask(request: ClientToolWriteConsentRequest): Promise<ClientToolWriteConsentDecision>;\n  /** The person's answer to the pending question. */\n  answer(args: { requestId: string; allow: boolean }): void;\n  /** The pending question lost its call (stop, another conversation): close it. */\n  abandon(requestId: string): void;\n  /** Record a consent the host's own UI collected. */\n  grant(threadId: string): void;\n  /** A mounted card registers itself, so a question nobody can see is reported. */\n  registerCard(): () => void;\n  /** The store's person is gone: close the pending question and forget every yes. */\n  dispose(): void;\n}\n\ninterface PendingConsent {\n  request: ClientToolWriteConsentRequest;\n  resolve: (decision: ClientToolWriteConsentDecision) => void;\n}\n\nexport function createClientToolWriteConsentStore(): ClientToolWriteConsentStore {\n  let pending: PendingConsent | null = null;\n  let cards = 0;\n  const granted = new Set<string>();\n  const listeners = new Set<() => void>();\n  const notify = () => {\n    for (const listener of Array.from(listeners)) listener();\n  };\n  const settle = (decision: ClientToolWriteConsentDecision) => {\n    const settled = pending;\n    pending = null;\n    settled?.resolve(decision);\n    notify();\n  };\n\n  return {\n    getPending: () => pending?.request ?? null,\n    subscribe(listener) {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    isGranted: (threadId) => granted.has(threadId),\n    ask(request) {\n      if (granted.has(request.threadId)) return Promise.resolve('proceed');\n      // One question at a time: a newer batch replaces a question whose call\n      // the bridge has already given up on.\n      if (pending) settle('abandoned');\n      if (cards === 0) {\n        athenaDiagnostics.emit('sdk.config.warning', {\n          level: 'warn',\n          error: new AthenaSdkError({\n            code: 'config_invalid',\n            message:\n              'A frontend tool is waiting for the person to allow it, and nothing on screen asks them.',\n            hint: 'Render <AthenaChat> (it draws the question), mount <StatewireClientToolConsentCard>, or pass confirmClientToolWrites on <AthenaProvider>. The run stays parked until the question is answered.',\n            context: { tools: request.tools.map((tool) => tool.name) },\n          }),\n          data: { tools: request.tools.map((tool) => tool.name) },\n        });\n      }\n      return new Promise<ClientToolWriteConsentDecision>((resolve) => {\n        pending = { request, resolve };\n        notify();\n      });\n    },\n    answer({ requestId, allow }) {\n      if (pending?.request.requestId !== requestId) return;\n      if (allow) granted.add(pending.request.threadId);\n      settle(allow ? 'proceed' : 'declined');\n    },\n    abandon(requestId) {\n      if (pending?.request.requestId !== requestId) return;\n      settle('abandoned');\n    },\n    grant(threadId) {\n      granted.add(threadId);\n    },\n    registerCard() {\n      cards += 1;\n      return () => {\n        cards -= 1;\n      };\n    },\n    dispose() {\n      granted.clear();\n      if (pending) settle('abandoned');\n    },\n  };\n}\n\n/**\n * The consent store for one signed-in person on one Athena. `scope` names\n * both (the provider passes the session principal and the sync host): when it\n * changes, the previous person's store is disposed (its question closed, its\n * yeses forgotten) and the next person starts with none.\n */\nexport function useClientToolWriteConsentStore(scope: string): ClientToolWriteConsentStore {\n  const [held, setHeld] = useState(() => ({ scope, store: createClientToolWriteConsentStore() }));\n  let current = held;\n  if (held.scope !== scope) {\n    // Replaced during render, so no commit ever pairs the new person with the\n    // previous person's store.\n    current = { scope, store: createClientToolWriteConsentStore() };\n    setHeld(current);\n  }\n  const { store } = current;\n  useEffect(() => () => store.dispose(), [store]);\n  return store;\n}\n\n/** Provided by `AthenaProvider`; `null` outside one. */\nexport const ClientToolWriteConsentContext = createContext<ClientToolWriteConsentStore | null>(\n  null,\n);\n\nconst NO_SUBSCRIPTION = () => () => {};\nconst NO_PENDING = () => null;\n\nexport interface ClientToolWriteConsent {\n  /** The question waiting on the person, or `null`. */\n  request: ClientToolWriteConsentRequest | null;\n  /** Allow the conversation's writes and run the waiting calls. */\n  allow: () => void;\n  /** Decline the waiting calls; the agent is told, and a later call asks again. */\n  decline: () => void;\n}\n\n/**\n * The write-consent question for the chat the nearest `AthenaProvider` shows,\n * for a host that draws its own card. Calling it marks the question as shown.\n */\nexport function useClientToolWriteConsent(): ClientToolWriteConsent {\n  const store = useContext(ClientToolWriteConsentContext);\n  const request = useSyncExternalStore(\n    store?.subscribe ?? NO_SUBSCRIPTION,\n    store?.getPending ?? NO_PENDING,\n    NO_PENDING,\n  );\n  useEffect(() => store?.registerCard(), [store]);\n  const requestId = request?.requestId;\n  const allow = useCallback(() => {\n    if (requestId !== undefined) store?.answer({ requestId, allow: true });\n  }, [requestId, store]);\n  const decline = useCallback(() => {\n    if (requestId !== undefined) store?.answer({ requestId, allow: false });\n  }, [requestId, store]);\n  return { request, allow, decline };\n}\n"],"names":["athenaDiagnostics","AthenaSdkError","useState","useEffect","createContext","useContext","useSyncExternalStore","useCallback"],"mappings":";;;;;AAiFO,SAAS,oCAAiE;AAC/E,MAAI,UAAiC;AACrC,MAAI,QAAQ;AACZ,QAAM,8BAAc,IAAA;AACpB,QAAM,gCAAgB,IAAA;AACtB,QAAM,SAAS,MAAM;AACnB,eAAW,YAAY,MAAM,KAAK,SAAS,EAAG,UAAA;AAAA,EAChD;AACA,QAAM,SAAS,CAAC,aAA6C;AAC3D,UAAM,UAAU;AAChB,cAAU;AACV,uCAAS,QAAQ;AACjB,WAAA;AAAA,EACF;AAEA,SAAO;AAAA,IACL,YAAY,OAAM,mCAAS,YAAW;AAAA,IACtC,UAAU,UAAU;AAClB,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AAAA,MAC3B;AAAA,IACF;AAAA,IACA,WAAW,CAAC,aAAa,QAAQ,IAAI,QAAQ;AAAA,IAC7C,IAAI,SAAS;AACX,UAAI,QAAQ,IAAI,QAAQ,QAAQ,EAAG,QAAO,QAAQ,QAAQ,SAAS;AAGnE,UAAI,gBAAgB,WAAW;AAC/B,UAAI,UAAU,GAAG;AACfA,0BAAAA,kBAAkB,KAAK,sBAAsB;AAAA,UAC3C,OAAO;AAAA,UACP,OAAO,IAAIC,OAAAA,eAAe;AAAA,YACxB,MAAM;AAAA,YACN,SACE;AAAA,YACF,MAAM;AAAA,YACN,SAAS,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,EAAA;AAAA,UAAE,CAC1D;AAAA,UACD,MAAM,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,EAAA;AAAA,QAAE,CACvD;AAAA,MACH;AACA,aAAO,IAAI,QAAwC,CAAC,YAAY;AAC9D,kBAAU,EAAE,SAAS,QAAA;AACrB,eAAA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,OAAO,EAAE,WAAW,SAAS;AAC3B,WAAI,mCAAS,QAAQ,eAAc,UAAW;AAC9C,UAAI,MAAO,SAAQ,IAAI,QAAQ,QAAQ,QAAQ;AAC/C,aAAO,QAAQ,YAAY,UAAU;AAAA,IACvC;AAAA,IACA,QAAQ,WAAW;AACjB,WAAI,mCAAS,QAAQ,eAAc,UAAW;AAC9C,aAAO,WAAW;AAAA,IACpB;AAAA,IACA,MAAM,UAAU;AACd,cAAQ,IAAI,QAAQ;AAAA,IACtB;AAAA,IACA,eAAe;AACb,eAAS;AACT,aAAO,MAAM;AACX,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,IACA,UAAU;AACR,cAAQ,MAAA;AACR,UAAI,gBAAgB,WAAW;AAAA,IACjC;AAAA,EAAA;AAEJ;AAQO,SAAS,+BAA+B,OAA4C;AACzF,QAAM,CAAC,MAAM,OAAO,IAAIC,WAAAA,SAAS,OAAO,EAAE,OAAO,OAAO,kCAAA,EAAkC,EAAI;AAC9F,MAAI,UAAU;AACd,MAAI,KAAK,UAAU,OAAO;AAGxB,cAAU,EAAE,OAAO,OAAO,kCAAA,EAAkC;AAC5D,YAAQ,OAAO;AAAA,EACjB;AACA,QAAM,EAAE,UAAU;AAClBC,aAAAA,UAAU,MAAM,MAAM,MAAM,WAAW,CAAC,KAAK,CAAC;AAC9C,SAAO;AACT;AAGO,MAAM,gCAAgCC,WAAAA;AAAAA,EAC3C;AACF;AAEA,MAAM,kBAAkB,MAAM,MAAM;AAAC;AACrC,MAAM,aAAa,MAAM;AAelB,SAAS,4BAAoD;AAClE,QAAM,QAAQC,WAAAA,WAAW,6BAA6B;AACtD,QAAM,UAAUC,WAAAA;AAAAA,KACd,+BAAO,cAAa;AAAA,KACpB,+BAAO,eAAc;AAAA,IACrB;AAAA,EAAA;AAEFH,aAAAA,UAAU,MAAM,+BAAO,gBAAgB,CAAC,KAAK,CAAC;AAC9C,QAAM,YAAY,mCAAS;AAC3B,QAAM,QAAQI,WAAAA,YAAY,MAAM;AAC9B,QAAI,cAAc,OAAW,gCAAO,OAAO,EAAE,WAAW,OAAO;EACjE,GAAG,CAAC,WAAW,KAAK,CAAC;AACrB,QAAM,UAAUA,WAAAA,YAAY,MAAM;AAChC,QAAI,cAAc,OAAW,gCAAO,OAAO,EAAE,WAAW,OAAO;EACjE,GAAG,CAAC,WAAW,KAAK,CAAC;AACrB,SAAO,EAAE,SAAS,OAAO,QAAA;AAC3B;;;;;"}