@bytexbyte/nxtlinq-ai-agent-ui-react-development 0.4.8 → 0.4.10

package/dist/aitMutationAuthentication.d.ts

@@ -0,0 +1,7 @@
+export type AITMutationAuthenticationPlan = 'reuse_session' | 'sign_in' | 'connect_and_sign_in';
+export declare function planAITMutationAuthentication(params: {
+    walletAddress: string | null | undefined;
+    walletToken: string | null | undefined;
+    hasSigner: boolean;
+}): AITMutationAuthenticationPlan;
+//# sourceMappingURL=aitMutationAuthentication.d.ts.map

package/dist/aitMutationAuthentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aitMutationAuthentication.d.ts","sourceRoot":"","sources":["../src/aitMutationAuthentication.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,6BAA6B,GACrC,eAAe,GACf,SAAS,GACT,qBAAqB,CAAC;AAE1B,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACvC,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,6BAA6B,CAehC"}

package/dist/aitMutationAuthentication.js

@@ -0,0 +1,13 @@
+import { validateWalletSession } from '@bytexbyte/nxtlinq-ai-agent-core-development';
+export function planAITMutationAuthentication(params) {
+    const walletAddress = params.walletAddress?.trim();
+    const walletToken = params.walletToken?.trim();
+    if (walletAddress
+        && walletToken
+        && validateWalletSession(walletToken, walletAddress).valid) {
+        return 'reuse_session';
+    }
+    return walletAddress && params.hasSigner
+        ? 'sign_in'
+        : 'connect_and_sign_in';
+}

package/dist/context/ChatBotContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChatBotContext.d.ts","sourceRoot":"","sources":["../../src/context/ChatBotContext.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA+B/B,OAAO,EAEL,kBAAkB,EAClB,YAAY,EAEb,MAAM,uBAAuB,CAAC;AA0B/B,eAAO,MAAM,UAAU,0BAMtB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,YAAY,CAwgGlD,CAAC"}
+{"version":3,"file":"ChatBotContext.d.ts","sourceRoot":"","sources":["../../src/context/ChatBotContext.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA+B/B,OAAO,EAEL,kBAAkB,EAClB,YAAY,EAEb,MAAM,uBAAuB,CAAC;AAwB/B,eAAO,MAAM,UAAU,0BAMtB,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC,YAAY,CAo/FlD,CAAC"}

package/dist/context/ChatBotContext.js

@@ -8,9 +8,10 @@ import { createNxtlinqApi, setApiHosts, synthesizeSpeechToBuffer, streamSpeechTo
 import { authorizeTextFrontendTool, hasRecordedWalletVerification, validateWalletSession, } from '@bytexbyte/nxtlinq-ai-agent-core-development';
 import { AuthorizationLoadingState } from '../authorizationLoadingState';
 import { PendingTextToolRetryController } from '../pendingTextToolRetry';
+import { planAITMutationAuthentication } from '../aitMutationAuthentication';
 import { completePiiScan } from '../piiMessageState';
 import { filterSuggestions } from '../suggestionState';
-import { dispatchRuntimeAITCompleteReplacement, removeOneDeniedPermission, replaceCurrentMaximumDenyList, RuntimeAITMutationQueue, RuntimeAITRecomputeCoordinator, StaleRuntimeAITResponseError, runtimeAITContextKey, runtimeAITSubjectKey, runtimeAuthorizationMatchesContext, runtimeAuthorizationState, unavailableRuntimeAuthorization, useProviderRuntimeCommit, useRuntimeAITContextCommit, } from '../permissionState';
+import { RuntimeAITMutationQueue, RuntimeAITRecomputeCoordinator, StaleRuntimeAITResponseError, runtimeAITContextKey, runtimeAITSubjectKey, runtimeAuthorizationMatchesContext, runtimeAuthorizationState, unavailableRuntimeAuthorization, useProviderRuntimeCommit, useRuntimeAITContextCommit, } from '../permissionState';
 const MIC_ENABLED_SESSION_KEY = 'chatbot-mic-enabled';
 const ChatBotContext = React.createContext(undefined);
 export const useChatBot = () => {
@@ -938,30 +939,23 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
         setRuntimeAuthorizationContextKey(activeContext ? runtimeAITContextKey(activeContext) : null);
     }, []);
     useRuntimeAITContextCommit(runtimeRecomputeCoordinatorRef.current, runtimeContext, invalidateCommittedRuntimeContext);
-    const recomputeRuntimeAIT = React.useCallback(async (context) => {
+    const readRuntimeAIT = React.useCallback(async (context) => {
         const capturedContext = {
             controller: context.controller,
             serviceId: context.serviceId,
             ...(context.roles !== undefined ? { roles: [...context.roles] } : {}),
             ...(context.permissionGroup !== undefined ? { permissionGroup: context.permissionGroup } : {}),
         };
-        return runtimeRecomputeCoordinatorRef.current.run(capturedContext, () => nxtlinqApi.ait.recomputeAIT(capturedContext), applyRuntimeResult, clearRuntimeAuthorization);
+        return runtimeRecomputeCoordinatorRef.current.run(capturedContext, () => nxtlinqApi.ait.readAIT(capturedContext), applyRuntimeResult, clearRuntimeAuthorization);
     }, [applyRuntimeResult, clearRuntimeAuthorization, nxtlinqApi]);
     const queueRuntimeAITRefresh = React.useCallback((context) => runtimeMutationQueueRef.current.run(runtimeAITSubjectKey(context), async () => {
         runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-        return recomputeRuntimeAIT(context);
-    }), [recomputeRuntimeAIT]);
-    const convergeRuntimeAITSubject = React.useCallback(async (subjectKey) => {
-        const activeContext = runtimeRecomputeCoordinatorRef.current.getActiveContext();
-        if (!activeContext || runtimeAITSubjectKey(activeContext) !== subjectKey) {
-            return;
-        }
-        await recomputeRuntimeAIT(activeContext);
-    }, [recomputeRuntimeAIT]);
-    const dispatchRuntimeDenyListReplacement = React.useCallback(async (context, nextDeniedPermissions) => dispatchRuntimeAITCompleteReplacement(runtimeRecomputeCoordinatorRef.current, context, () => nxtlinqApi.ait.updatePermissionDenyList({
+        return readRuntimeAIT(context);
+    }), [readRuntimeAIT]);
+    const replaceRuntimeActivePermissions = React.useCallback(async (context, activePermissions) => runtimeRecomputeCoordinatorRef.current.run(context, () => nxtlinqApi.ait.updateActivePermissions({
         ...context,
-        deniedPermissions: nextDeniedPermissions,
-    }), convergeRuntimeAITSubject, clearRuntimeAuthorization), [clearRuntimeAuthorization, convergeRuntimeAITSubject, nxtlinqApi]);
+        activePermissions,
+    }), applyRuntimeResult, clearRuntimeAuthorization), [applyRuntimeResult, clearRuntimeAuthorization, nxtlinqApi]);
     // Refresh the authoritative runtime AIT state.
     const refreshAIT = async (forceUpdatePermissions = false) => {
         const currentHitAddress = hitAddressRef.current || hitAddress;
@@ -2240,8 +2234,16 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
         setIsAITEnabling(true);
         let currentSigner = signer;
         let currentHitAddress = hitAddress;
-        // If no wallet connected, try to auto-connect first
-        if (!currentSigner || !currentHitAddress) {
+        const currentWalletToken = nxtlinqAITServiceAccessTokenRef.current
+            || nxtlinqAITServiceAccessToken;
+        const authenticationPlan = planAITMutationAuthentication({
+            walletAddress: currentHitAddress,
+            walletToken: currentWalletToken,
+            hasSigner: Boolean(currentSigner),
+        });
+        // A valid wallet session is sufficient for an authenticated DB mutation.
+        // A signer is only needed when the session must be established or renewed.
+        if (authenticationPlan === 'connect_and_sign_in') {
             const autoConnectResult = await connectWallet(false); // Don't show sign-in message yet
             if (autoConnectResult) {
                 // Wait for state to update - increase wait time
@@ -2255,14 +2257,6 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
                     currentSigner = signerRef.current || signer;
                     currentHitAddress = hitAddressRef.current || hitAddress;
                 }
-                try {
-                    await signInWallet(false); // Don't show success message yet
-                }
-                catch (signInError) {
-                    showError(walletTextUtils.getWalletText('Wallet connected but sign-in failed. Please try signing in manually.', serviceId));
-                    setIsAITEnabling(false);
-                    return false;
-                }
             }
             else {
                 showError(walletTextUtils.getWalletText('Please connect your wallet first', serviceId));
@@ -2270,29 +2264,21 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
                 return false;
             }
         }
-        // Final check before proceeding
-        if (!currentSigner || !currentHitAddress) {
-            console.error('Missing signer or wallet address after connection process');
-            console.error('Current signer:', !!currentSigner);
-            console.error('Current hitAddress:', currentHitAddress);
-            console.error('Signer ref:', !!signerRef.current);
-            console.error('HitAddress ref:', hitAddressRef.current);
+        if (authenticationPlan !== 'reuse_session') {
+            const signedIn = await signInWallet(false);
+            if (!signedIn) {
+                showError(walletTextUtils.getWalletText('Wallet connected but sign-in failed. Please try signing in manually.', serviceId));
+                setIsAITEnabling(false);
+                return false;
+            }
+            currentHitAddress = hitAddressRef.current || hitAddress;
+        }
+        if (!currentHitAddress) {
+            console.error('Missing wallet address after authentication');
             showError(walletTextUtils.getWalletText('Wallet connection failed. Please try connecting your wallet manually.', serviceId));
             setIsAITEnabling(false);
             return false;
         }
-        // If we don't have AIT loaded but we have a token, try to refresh it first
-        if (!aitRef.current && nxtlinqAITServiceAccessToken) {
-            try {
-                await refreshAIT();
-                // Wait a bit for AIT to be loaded
-                await new Promise(resolve => setTimeout(resolve, 1000));
-            }
-            catch (error) {
-                // Continue anyway, we'll create a new AIT if needed
-                console.error('Failed to refresh AIT:', error);
-            }
-        }
         try {
             const context = {
                 controller: currentHitAddress,
@@ -2302,13 +2288,19 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
             };
             const enabled = await runtimeMutationQueueRef.current.run(runtimeAITSubjectKey(context), async () => {
                 runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-                const current = await recomputeRuntimeAIT(context);
+                const current = await readRuntimeAIT(context);
                 if (!current.maximumPermissions.includes(toolName)) {
                     return false;
                 }
-                const nextDeniedPermissions = removeOneDeniedPermission(current.deniedPermissions, toolName);
+                if (current.effectivePermissions.includes(toolName) && current.aitId) {
+                    return true;
+                }
+                const nextActivePermissions = Array.from(new Set([
+                    ...current.effectivePermissions,
+                    toolName,
+                ]));
                 runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-                await dispatchRuntimeDenyListReplacement(context, nextDeniedPermissions);
+                await replaceRuntimeActivePermissions(context, nextActivePermissions);
                 return true;
             });
             if (!enabled) {
@@ -2353,15 +2345,11 @@ customError, voiceThresholds, debugVoiceRms = false, sttGlossary, }) => {
             const checkedPermissions = [...(newPermissions ?? permissions)];
             await runtimeMutationQueueRef.current.run(runtimeAITSubjectKey(context), async () => {
                 runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-                const fresh = await recomputeRuntimeAIT(context);
-                const nextDeniedPermissions = replaceCurrentMaximumDenyList(fresh.deniedPermissions, fresh.maximumPermissions, checkedPermissions);
-                runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-                await dispatchRuntimeDenyListReplacement(context, nextDeniedPermissions);
+                await replaceRuntimeActivePermissions(context, checkedPermissions);
             });
             showSuccess('AIT permissions saved successfully! You can now use the AI agent with your configured permissions.');
             setShowPermissionForm(false);
             setIsPermissionFormOpen(false);
-            await refreshAIT(true);
             await retryPendingTextTool();
         }
         catch (error) {

package/dist/types/ChatBotTypes.d.ts

@@ -44,7 +44,7 @@ export interface ChatBotProps {
     apiSecret?: string;
     serviceToken?: string;
     getAuthToken?: () => Promise<string>;
-    environment?: 'production' | 'staging';
+    environment?: 'production' | 'staging' | 'local';
     onVerifyWallet?: () => Promise<{
         token: string;
     } | undefined>;

package/dist/types/ChatBotTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChatBotTypes.d.ts","sourceRoot":"","sources":["../../src/types/ChatBotTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,8CAA8C,CAAC;AAErI,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,CACV,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,KAAK,IAAI,KACP,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;QAC7B,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,SAAS,CAAC,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAE3B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAEzC,WAAW,CAAC,EAAE,iBAAiB,GAAG,eAAe,CAAC;IAElD,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAErC,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,eAAe,CAAC,EAAE;QAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,yEAAyE;IACzE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,6BAA6B,EAAE,OAAO,CAAC;IACvC,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,GAAG,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE;QACZ,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAChD,eAAe,EAAE,OAAO,CAAC;IAEzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,eAAe,EAAE,OAAO,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,aAAa,EAAE,CAAC;IAG7B,cAAc,EAAE,OAAO,GAAG,UAAU,CAAC;IAErC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IAGvB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,qBAAqB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,eAAe,EAAE,CAAC,YAAY,EAAE,GAAG,KAAK,IAAI,CAAC;IAE7C,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,cAAc,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;IACvD,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAGnD,aAAa,EAAE,CAAC,qBAAqB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;IACxF,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,oBAAoB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5H,YAAY,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,uBAAuB,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,UAAU,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,IAAI,CAAC;IAE3B,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,eAAe,EAAE,MAAM,OAAO,CAAC;IAE/B,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,IAAI,CAAC;IAG3B,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;IAC3D,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAGjB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"ChatBotTypes.d.ts","sourceRoot":"","sources":["../../src/types/ChatBotTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,8CAA8C,CAAC;AAErI,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,CACV,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,KAAK,IAAI,KACP,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;QAC7B,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,SAAS,CAAC,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAE3B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAEzC,WAAW,CAAC,EAAE,iBAAiB,GAAG,eAAe,CAAC;IAElD,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAErC,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,eAAe,CAAC,EAAE;QAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,yEAAyE;IACzE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,sGAAsG;IACtG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,6BAA6B,EAAE,OAAO,CAAC;IACvC,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,GAAG,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE;QACZ,IAAI,EAAE,OAAO,CAAC;QACd,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAChD,eAAe,EAAE,OAAO,CAAC;IAEzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,eAAe,EAAE,OAAO,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,aAAa,EAAE,CAAC;IAG7B,cAAc,EAAE,OAAO,GAAG,UAAU,CAAC;IAErC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IAGvB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,qBAAqB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,uBAAuB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,eAAe,EAAE,CAAC,YAAY,EAAE,GAAG,KAAK,IAAI,CAAC;IAE7C,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/C,cAAc,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;IACvD,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAGnD,aAAa,EAAE,CAAC,qBAAqB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;IACxF,YAAY,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,oBAAoB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5H,YAAY,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,mBAAmB,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,eAAe,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,uBAAuB,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,UAAU,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,IAAI,CAAC;IAE3B,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,eAAe,EAAE,MAAM,OAAO,CAAC;IAE/B,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,IAAI,CAAC;IAG3B,MAAM,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC,CAAC;IAC3D,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,sBAAsB,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAGjB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bytexbyte/nxtlinq-ai-agent-ui-react-development",
-  "version": "0.4.8",
+  "version": "0.4.10",
   "description": "Official React Web UI for nxtlinq AI Agent — drop-in chat widget",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -38,8 +38,8 @@
     "react-dom": ">=18.0.0"
   },
   "dependencies": {
-    "@bytexbyte/nxtlinq-ai-agent-core-development": "2.0.3",
-    "@bytexbyte/nxtlinq-ai-agent-web-development": "1.0.3",
+    "@bytexbyte/nxtlinq-ai-agent-core-development": "2.0.4",
+    "@bytexbyte/nxtlinq-ai-agent-web-development": "1.0.4",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
     "@mui/icons-material": "^7.2.0",

package/src/aitMutationAuthentication.ts

@@ -0,0 +1,27 @@
+import { validateWalletSession } from '@bytexbyte/nxtlinq-ai-agent-core-development';
+
+export type AITMutationAuthenticationPlan =
+  | 'reuse_session'
+  | 'sign_in'
+  | 'connect_and_sign_in';
+
+export function planAITMutationAuthentication(params: {
+  walletAddress: string | null | undefined;
+  walletToken: string | null | undefined;
+  hasSigner: boolean;
+}): AITMutationAuthenticationPlan {
+  const walletAddress = params.walletAddress?.trim();
+  const walletToken = params.walletToken?.trim();
+
+  if (
+    walletAddress
+    && walletToken
+    && validateWalletSession(walletToken, walletAddress).valid
+  ) {
+    return 'reuse_session';
+  }
+
+  return walletAddress && params.hasSigner
+    ? 'sign_in'
+    : 'connect_and_sign_in';
+}

package/src/context/ChatBotContext.tsx

@@ -39,12 +39,10 @@ import {
 } from '../types/ChatBotTypes';
 import { AuthorizationLoadingState } from '../authorizationLoadingState';
 import { PendingTextToolRetryController } from '../pendingTextToolRetry';
+import { planAITMutationAuthentication } from '../aitMutationAuthentication';
 import { completePiiScan } from '../piiMessageState';
 import { filterSuggestions } from '../suggestionState';
 import {
-  dispatchRuntimeAITCompleteReplacement,
-  removeOneDeniedPermission,
-  replaceCurrentMaximumDenyList,
   RuntimeAITMutationQueue,
   RuntimeAITRecomputeCoordinator,
   StaleRuntimeAITResponseError,
@@ -1125,7 +1123,7 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
     invalidateCommittedRuntimeContext,
   );
 
-  const recomputeRuntimeAIT = React.useCallback(async (context: RuntimeAITContext) => {
+  const readRuntimeAIT = React.useCallback(async (context: RuntimeAITContext) => {
     const capturedContext: RuntimeAITContext = {
       controller: context.controller,
       serviceId: context.serviceId,
@@ -1134,7 +1132,7 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
     };
     return runtimeRecomputeCoordinatorRef.current.run(
       capturedContext,
-      () => nxtlinqApi.ait.recomputeAIT(capturedContext),
+      () => nxtlinqApi.ait.readAIT(capturedContext),
       applyRuntimeResult,
       clearRuntimeAuthorization,
     );
@@ -1145,33 +1143,24 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
       runtimeAITSubjectKey(context),
       async () => {
         runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-        return recomputeRuntimeAIT(context);
+        return readRuntimeAIT(context);
       },
     ),
-    [recomputeRuntimeAIT],
+    [readRuntimeAIT],
   );
 
-  const convergeRuntimeAITSubject = React.useCallback(async (subjectKey: string) => {
-    const activeContext = runtimeRecomputeCoordinatorRef.current.getActiveContext();
-    if (!activeContext || runtimeAITSubjectKey(activeContext) !== subjectKey) {
-      return;
-    }
-    await recomputeRuntimeAIT(activeContext);
-  }, [recomputeRuntimeAIT]);
-
-  const dispatchRuntimeDenyListReplacement = React.useCallback(async (
+  const replaceRuntimeActivePermissions = React.useCallback(async (
     context: RuntimeAITContext,
-    nextDeniedPermissions: string[],
-  ) => dispatchRuntimeAITCompleteReplacement(
-    runtimeRecomputeCoordinatorRef.current,
+    activePermissions: string[],
+  ) => runtimeRecomputeCoordinatorRef.current.run(
     context,
-    () => nxtlinqApi.ait.updatePermissionDenyList({
+    () => nxtlinqApi.ait.updateActivePermissions({
       ...context,
-      deniedPermissions: nextDeniedPermissions,
+      activePermissions,
     }),
-    convergeRuntimeAITSubject,
+    applyRuntimeResult,
     clearRuntimeAuthorization,
-  ), [clearRuntimeAuthorization, convergeRuntimeAITSubject, nxtlinqApi]);
+  ), [applyRuntimeResult, clearRuntimeAuthorization, nxtlinqApi]);
 
   // Refresh the authoritative runtime AIT state.
   const refreshAIT = async (forceUpdatePermissions = false) => {
@@ -2571,9 +2560,17 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
 
     let currentSigner = signer;
     let currentHitAddress = hitAddress;
+    const currentWalletToken = nxtlinqAITServiceAccessTokenRef.current
+      || nxtlinqAITServiceAccessToken;
+    const authenticationPlan = planAITMutationAuthentication({
+      walletAddress: currentHitAddress,
+      walletToken: currentWalletToken,
+      hasSigner: Boolean(currentSigner),
+    });
 
-    // If no wallet connected, try to auto-connect first
-    if (!currentSigner || !currentHitAddress) {
+    // A valid wallet session is sufficient for an authenticated DB mutation.
+    // A signer is only needed when the session must be established or renewed.
+    if (authenticationPlan === 'connect_and_sign_in') {
       const autoConnectResult = await connectWallet(false); // Don't show sign-in message yet
 
       if (autoConnectResult) {
@@ -2591,13 +2588,6 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
           currentHitAddress = hitAddressRef.current || hitAddress;
         }
 
-        try {
-          await signInWallet(false); // Don't show success message yet
-        } catch (signInError) {
-          showError(walletTextUtils.getWalletText('Wallet connected but sign-in failed. Please try signing in manually.', serviceId));
-          setIsAITEnabling(false);
-          return false;
-        }
       } else {
         showError(walletTextUtils.getWalletText('Please connect your wallet first', serviceId));
         setIsAITEnabling(false);
@@ -2605,30 +2595,23 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
       }
     }
 
-    // Final check before proceeding
-    if (!currentSigner || !currentHitAddress) {
-      console.error('Missing signer or wallet address after connection process');
-      console.error('Current signer:', !!currentSigner);
-      console.error('Current hitAddress:', currentHitAddress);
-      console.error('Signer ref:', !!signerRef.current);
-      console.error('HitAddress ref:', hitAddressRef.current);
+    if (authenticationPlan !== 'reuse_session') {
+      const signedIn = await signInWallet(false);
+      if (!signedIn) {
+        showError(walletTextUtils.getWalletText('Wallet connected but sign-in failed. Please try signing in manually.', serviceId));
+        setIsAITEnabling(false);
+        return false;
+      }
+      currentHitAddress = hitAddressRef.current || hitAddress;
+    }
+
+    if (!currentHitAddress) {
+      console.error('Missing wallet address after authentication');
       showError(walletTextUtils.getWalletText('Wallet connection failed. Please try connecting your wallet manually.', serviceId));
       setIsAITEnabling(false);
       return false;
     }
 
-    // If we don't have AIT loaded but we have a token, try to refresh it first
-    if (!aitRef.current && nxtlinqAITServiceAccessToken) {
-      try {
-        await refreshAIT();
-        // Wait a bit for AIT to be loaded
-        await new Promise(resolve => setTimeout(resolve, 1000));
-      } catch (error) {
-        // Continue anyway, we'll create a new AIT if needed
-        console.error('Failed to refresh AIT:', error);
-      }
-    }
-
     try {
       const context: RuntimeAITContext = {
         controller: currentHitAddress,
@@ -2640,16 +2623,19 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
         runtimeAITSubjectKey(context),
         async () => {
           runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-          const current = await recomputeRuntimeAIT(context);
+          const current = await readRuntimeAIT(context);
           if (!current.maximumPermissions.includes(toolName)) {
             return false;
           }
-          const nextDeniedPermissions = removeOneDeniedPermission(
-            current.deniedPermissions,
+          if (current.effectivePermissions.includes(toolName) && current.aitId) {
+            return true;
+          }
+          const nextActivePermissions = Array.from(new Set([
+            ...current.effectivePermissions,
             toolName,
-          );
+          ]));
           runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-          await dispatchRuntimeDenyListReplacement(context, nextDeniedPermissions);
+          await replaceRuntimeActivePermissions(context, nextActivePermissions);
           return true;
         },
       );
@@ -2695,20 +2681,12 @@ export const ChatBotProvider: React.FC<ChatBotProps> = ({
         runtimeAITSubjectKey(context),
         async () => {
           runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-          const fresh = await recomputeRuntimeAIT(context);
-          const nextDeniedPermissions = replaceCurrentMaximumDenyList(
-            fresh.deniedPermissions,
-            fresh.maximumPermissions,
-            checkedPermissions,
-          );
-          runtimeRecomputeCoordinatorRef.current.assertContextActive(context);
-          await dispatchRuntimeDenyListReplacement(context, nextDeniedPermissions);
+          await replaceRuntimeActivePermissions(context, checkedPermissions);
         },
       );
       showSuccess('AIT permissions saved successfully! You can now use the AI agent with your configured permissions.');
       setShowPermissionForm(false);
       setIsPermissionFormOpen(false);
-      await refreshAIT(true);
       await retryPendingTextTool();
     } catch (error) {
       if (!(error instanceof StaleRuntimeAITResponseError)) {

package/src/types/ChatBotTypes.ts

@@ -52,7 +52,7 @@ export interface ChatBotProps {
   apiSecret?: string;
   serviceToken?: string;
   getAuthToken?: () => Promise<string>;
-  environment?: 'production' | 'staging'; // API environment (default: production)
+  environment?: 'production' | 'staging' | 'local'; // API environment (default: production)
   onVerifyWallet?: () => Promise<{
     token: string;
   } | undefined>;