@guuey/agent-client 0.14.1 → 0.14.2

package/dist/error-codes.d.ts

@@ -87,6 +87,17 @@ export declare const CLIENT_ERROR_CODES: {
      * the reply if the backend completes later.
      */
     readonly STREAM_STALLED: "STREAM_STALLED";
+    /**
+     * A RESUMED thread's history read was refused (401 after the one
+     * forceRefresh retry) — the persisted threadId exists but the CURRENT
+     * identity cannot read it (guuey#413: the identity-drift face; an
+     * expired-and-unrefreshable session is the benign sibling). Surfaced
+     * LOUDLY instead of the silent fresh-looking boot: the transcript the
+     * user expects exists and cannot be shown, which is an ERROR, not an
+     * empty chat. Sends still work (the pod may fork a fresh thread) — the
+     * error names why the history is missing.
+     */
+    readonly THREAD_HISTORY_UNAVAILABLE: "THREAD_HISTORY_UNAVAILABLE";
 };
 /** One of this SDK's client-originated codes — see {@link CLIENT_ERROR_CODES}. */
 export type ClientErrorCode = (typeof CLIENT_ERROR_CODES)[keyof typeof CLIENT_ERROR_CODES];

package/dist/error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../src/error-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,iBAAiB;IAC5B,yDAAyD;;IAEzD,gDAAgD;;IAEhD,8DAA8D;;IAE9D;;;;;OAKG;;IAEH,6EAA6E;;IAE7E,qDAAqD;;IAErD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,oFAAoF;;IAEpF;;;;OAIG;;IAEH,qDAAqD;;IAErD,iEAAiE;;IAEjE,gCAAgC;;CAExB,CAAC;AAEX,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;;;;OAKG;;CAEK,CAAC;AAEX,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../src/error-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,iBAAiB;IAC5B,yDAAyD;;IAEzD,gDAAgD;;IAEhD,8DAA8D;;IAE9D;;;;;OAKG;;IAEH,6EAA6E;;IAE7E,qDAAqD;;IAErD;;;;OAIG;;IAEH;;;;;OAKG;;IAEH,oFAAoF;;IAEpF;;;;OAIG;;IAEH,qDAAqD;;IAErD,iEAAiE;;IAEjE,gCAAgC;;CAExB,CAAC;AAEX,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAExF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;;;;OAKG;;IAEH;;;;;;;;;OASG;;CAEK,CAAC;AAEX,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/error-codes.js

@@ -85,4 +85,15 @@ export const CLIENT_ERROR_CODES = {
      * the reply if the backend completes later.
      */
     STREAM_STALLED: "STREAM_STALLED",
+    /**
+     * A RESUMED thread's history read was refused (401 after the one
+     * forceRefresh retry) — the persisted threadId exists but the CURRENT
+     * identity cannot read it (guuey#413: the identity-drift face; an
+     * expired-and-unrefreshable session is the benign sibling). Surfaced
+     * LOUDLY instead of the silent fresh-looking boot: the transcript the
+     * user expects exists and cannot be shown, which is an ERROR, not an
+     * empty chat. Sends still work (the pod may fork a fresh thread) — the
+     * error names why the history is missing.
+     */
+    THREAD_HISTORY_UNAVAILABLE: "THREAD_HISTORY_UNAVAILABLE",
 };

package/dist/useAgentInvoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAgentInvoke.d.ts","sourceRoot":"","sources":["../src/useAgentInvoke.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAW,KAAK,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAK/F,OAAO,KAAK,EAGV,YAAY,EAEZ,iBAAiB,EAGjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,EAAE,oBAEnD,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,eAAe,EAAE,YAAY,EAAE,GAC9B,kBAAkB,CAIpB;AAED,uFAAuF;AACvF,eAAO,MAAM,uBAAuB;;;IAGlC;;;;;;;OAOG;;CAEK,CAAC;AAcX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EAAE,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,GAAG,WAAW,CAOvB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CAoehF"}
+{"version":3,"file":"useAgentInvoke.d.ts","sourceRoot":"","sources":["../src/useAgentInvoke.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAW,KAAK,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAM/F,OAAO,KAAK,EAGV,YAAY,EAEZ,iBAAiB,EAGjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB;;;;;GAKG;AACH,eAAO,MAAM,qCAAqC,EAAE,oBAEnD,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,eAAe,EAAE,YAAY,EAAE,GAC9B,kBAAkB,CAIpB;AAED,uFAAuF;AACvF,eAAO,MAAM,uBAAuB;;;IAGlC;;;;;;;OAOG;;CAEK,CAAC;AAcX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,YAAY,EAAE,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,GAAG,WAAW,CAOvB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,oBAAoB,CAmgBhF"}

package/dist/useAgentInvoke.js

@@ -27,6 +27,7 @@ import { invokeTurn, toInvokeUrl } from "./invoke-turn.js";
 import { AgentResponseError } from "./errors.js";
 import { withActivityObserver } from "./transport.js";
 import { CLIENT_ERROR_CODES } from "./error-codes.js";
+import { HistoryUnauthorizedError } from "./history.js";
 function threadStorageKey(appId) {
     return `guuey:thread:${appId ?? "default"}`;
 }
@@ -228,8 +229,27 @@ export function useAgentInvoke(opts) {
             try {
                 result = await history.load(tid);
             }
-            catch {
-                return; // best-effort: offline / transient — chat continues without history
+            catch (err) {
+                // guuey#413 fail-LOUD carve-out from the best-effort rule: an
+                // UNAUTHORIZED read on a RESUMED threadId means a transcript the
+                // user expects exists and cannot be shown — silently booting a
+                // fresh-looking empty chat hid the identity-drift outage for
+                // exactly the accounts holding old threads. Auth refusal surfaces
+                // as an error item; every other failure (offline, transient)
+                // keeps the best-effort swallow — chat continues without history.
+                if (!cancelled && err instanceof HistoryUnauthorizedError) {
+                    // Same guard as the `gone` arm below: clear + fresh (functional)
+                    // + the notice (loud). Same concurrency guard — never clobber a
+                    // threadId a mid-flight send just established.
+                    if (threadIdRef.current === tid) {
+                        threadIdRef.current = null;
+                        setThreadId(null);
+                        void adaptersRef.current.storage.save(threadStorageKey(appId), "");
+                    }
+                    setError("Couldn't restore your previous conversation — started a new one. (This session was not authorized to read the old thread.)");
+                    setErrorCode(CLIENT_ERROR_CODES.THREAD_HISTORY_UNAVAILABLE);
+                }
+                return;
             }
             if (cancelled)
                 return;
@@ -243,6 +263,14 @@ export function useAgentInvoke(opts) {
                 threadIdRef.current = null;
                 setThreadId(null);
                 void adaptersRef.current.storage.save(threadStorageKey(appId), "");
+                // guuey#413: the hydration guard's LOUD half. `gone` covers 403 as
+                // well as 404 (history.ts) — an owner-mismatch refusal on a drifted
+                // identity flowed through THIS arm as a silent fresh-looking boot,
+                // which is the exact outage face this guard exists to kill. The
+                // fresh mint stays (functional); the notice makes it honest. Loud
+                // AND functional, never one without the other.
+                setError("Couldn't restore your previous conversation — started a new one.");
+                setErrorCode(CLIENT_ERROR_CODES.THREAD_HISTORY_UNAVAILABLE);
                 return;
             }
             // Single decision authority: `applyHistoryResult` runs INSIDE the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guuey/agent-client",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "description": "Client SDK for Guuey's agent runtime: the `useAgentInvoke` React hook + pure SSE helpers that speak the /agent/invoke streaming contract, plus the paginated thread-history read plane. Host adapters (storage / id / transport) are injected, so it runs on web (Next) and React Native alike.",
   "license": "MIT",
   "type": "module",
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@silverprotocol/core": "0.5.1",
-    "@guuey/mcp-apps-host": "0.14.1"
+    "@guuey/mcp-apps-host": "0.14.2"
   },
   "peerDependencies": {
     "react": ">=18"

package/src/error-codes.ts

@@ -89,6 +89,17 @@ export const CLIENT_ERROR_CODES = {
    * the reply if the backend completes later.
    */
   STREAM_STALLED: "STREAM_STALLED",
+  /**
+   * A RESUMED thread's history read was refused (401 after the one
+   * forceRefresh retry) — the persisted threadId exists but the CURRENT
+   * identity cannot read it (guuey#413: the identity-drift face; an
+   * expired-and-unrefreshable session is the benign sibling). Surfaced
+   * LOUDLY instead of the silent fresh-looking boot: the transcript the
+   * user expects exists and cannot be shown, which is an ERROR, not an
+   * empty chat. Sends still work (the pod may fork a fresh thread) — the
+   * error names why the history is missing.
+   */
+  THREAD_HISTORY_UNAVAILABLE: "THREAD_HISTORY_UNAVAILABLE",
 } as const;
 
 /** One of this SDK's client-originated codes — see {@link CLIENT_ERROR_CODES}. */

package/src/useAgentInvoke.ts

@@ -27,6 +27,7 @@ import { invokeTurn, toInvokeUrl } from "./invoke-turn.js";
 import { AgentResponseError } from "./errors.js";
 import { withActivityObserver } from "./transport.js";
 import { CLIENT_ERROR_CODES } from "./error-codes.js";
+import { HistoryUnauthorizedError } from "./history.js";
 import type {
   AgentInvokeAdapters,
   AgentInvokeStatus,
@@ -256,8 +257,29 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
       let result: HistoryLoadResult;
       try {
         result = await history.load(tid);
-      } catch {
-        return; // best-effort: offline / transient — chat continues without history
+      } catch (err) {
+        // guuey#413 fail-LOUD carve-out from the best-effort rule: an
+        // UNAUTHORIZED read on a RESUMED threadId means a transcript the
+        // user expects exists and cannot be shown — silently booting a
+        // fresh-looking empty chat hid the identity-drift outage for
+        // exactly the accounts holding old threads. Auth refusal surfaces
+        // as an error item; every other failure (offline, transient)
+        // keeps the best-effort swallow — chat continues without history.
+        if (!cancelled && err instanceof HistoryUnauthorizedError) {
+          // Same guard as the `gone` arm below: clear + fresh (functional)
+          // + the notice (loud). Same concurrency guard — never clobber a
+          // threadId a mid-flight send just established.
+          if (threadIdRef.current === tid) {
+            threadIdRef.current = null;
+            setThreadId(null);
+            void adaptersRef.current.storage.save(threadStorageKey(appId), "");
+          }
+          setError(
+            "Couldn't restore your previous conversation — started a new one. (This session was not authorized to read the old thread.)",
+          );
+          setErrorCode(CLIENT_ERROR_CODES.THREAD_HISTORY_UNAVAILABLE);
+        }
+        return;
       }
       if (cancelled) return;
       if ("gone" in result) {
@@ -269,6 +291,16 @@ export function useAgentInvoke(opts: UseAgentInvokeOptions): UseAgentInvokeRetur
         threadIdRef.current = null;
         setThreadId(null);
         void adaptersRef.current.storage.save(threadStorageKey(appId), "");
+        // guuey#413: the hydration guard's LOUD half. `gone` covers 403 as
+        // well as 404 (history.ts) — an owner-mismatch refusal on a drifted
+        // identity flowed through THIS arm as a silent fresh-looking boot,
+        // which is the exact outage face this guard exists to kill. The
+        // fresh mint stays (functional); the notice makes it honest. Loud
+        // AND functional, never one without the other.
+        setError(
+          "Couldn't restore your previous conversation — started a new one.",
+        );
+        setErrorCode(CLIENT_ERROR_CODES.THREAD_HISTORY_UNAVAILABLE);
         return;
       }
       // Single decision authority: `applyHistoryResult` runs INSIDE the