@stigmer/react 3.12.6 → 3.12.7

package/src/session/useExportTranscript.ts

@@ -0,0 +1,171 @@
+"use client";
+
+import { useCallback, useMemo, useState } from "react";
+import {
+  fetchSessionTranscript,
+  resolvedSubject,
+  transcriptToJson,
+  transcriptToMarkdown,
+  type SessionTranscript,
+} from "@stigmer/sdk";
+import { toast } from "../feedback/toast.js";
+import { useStigmer } from "../hooks.js";
+import { downloadTextFile } from "../internal/download.js";
+import { generateSlug } from "../internal/slug.js";
+import { toError } from "../internal/toError.js";
+
+/** Options for {@link useExportTranscript}. */
+export interface UseExportTranscriptOptions {
+  /**
+   * Keep turns replaced by edit-and-resubmit in the export, marked as
+   * superseded. Defaults to `false` — the conversation as the viewer
+   * shows it.
+   */
+  readonly includeSuperseded?: boolean;
+}
+
+/** Return value of {@link useExportTranscript}. */
+export interface UseExportTranscriptReturn {
+  /** Copy the whole conversation as Markdown to the clipboard. */
+  readonly copyMarkdown: () => Promise<void>;
+  /** Download the whole conversation as a Markdown file. */
+  readonly downloadMarkdown: () => Promise<void>;
+  /** Download the whole conversation as a structured JSON file. */
+  readonly downloadJson: () => Promise<void>;
+  /** `true` while a transcript fetch (and offload resolution) is in flight. */
+  readonly isExporting: boolean;
+  /** The last export failure, or `null`. Cleared when a new export starts. */
+  readonly error: Error | null;
+}
+
+/**
+ * Behavior hook that exports a session's whole conversation — thinking,
+ * tool calls with offloaded outputs resolved, sub-agent turns, timestamps —
+ * as Markdown (copy or download) or structured JSON (stigmer/stigmer#814).
+ *
+ * Lazy: nothing is fetched until an action is invoked. Each action fetches
+ * the canonical transcript via `fetchSessionTranscript` (the SDK's one
+ * authoritative assembly), so every export surface produces identical
+ * content. Feedback follows the `useExportResource` convention: toasts for
+ * success/failure, plus a typed `error` for hosts that render their own.
+ *
+ * @example
+ * ```tsx
+ * const exporter = useExportTranscript(sessionId);
+ *
+ * <ActionMenu.Item onSelect={exporter.copyMarkdown}>Copy transcript</ActionMenu.Item>
+ * <ActionMenu.Item onSelect={exporter.downloadMarkdown}>Download .md</ActionMenu.Item>
+ * <ActionMenu.Item onSelect={exporter.downloadJson}>Download .json</ActionMenu.Item>
+ * ```
+ */
+export function useExportTranscript(
+  sessionId: string | null,
+  options?: UseExportTranscriptOptions,
+): UseExportTranscriptReturn {
+  const stigmer = useStigmer();
+  const includeSuperseded = options?.includeSuperseded === true;
+  const [isExporting, setIsExporting] = useState(false);
+  const [error, setError] = useState<Error | null>(null);
+
+  const fetchTranscript = useCallback((): Promise<SessionTranscript> => {
+    if (!sessionId) {
+      return Promise.reject(
+        new Error(
+          "Cannot export a transcript without a session id. Pass the session's " +
+            "id to useExportTranscript once the session exists.",
+        ),
+      );
+    }
+    return fetchSessionTranscript(stigmer, sessionId, { includeSuperseded });
+  }, [stigmer, sessionId, includeSuperseded]);
+
+  const copyMarkdown = useCallback(async (): Promise<void> => {
+    setError(null);
+    setIsExporting(true);
+    const markdown = fetchTranscript().then(
+      (t) => transcriptToMarkdown(t, { generatedAt: new Date().toISOString() }),
+    );
+    try {
+      // The transcript is fetched before it can be copied, and WebKit (the
+      // desktop app's webview) only honors clipboard writes inside the user
+      // gesture's task — a plain writeText after the await is rejected
+      // there. ClipboardItem accepts a promise, letting the write start
+      // synchronously in the gesture while the content resolves.
+      if (typeof ClipboardItem !== "undefined" && navigator.clipboard?.write) {
+        await navigator.clipboard.write([
+          new ClipboardItem({
+            "text/plain": markdown.then(
+              (text) => new Blob([text], { type: "text/plain" }),
+            ),
+          }),
+        ]);
+      } else {
+        await navigator.clipboard.writeText(await markdown);
+      }
+      toast.success("Transcript copied to clipboard");
+    } catch (e) {
+      const err = toError(e);
+      setError(err);
+      toast.error(`Couldn't copy the transcript: ${err.message}`);
+    } finally {
+      setIsExporting(false);
+    }
+  }, [fetchTranscript]);
+
+  const download = useCallback(
+    async (serialize: (t: SessionTranscript) => { content: string; extension: string; mimeType: string }): Promise<void> => {
+      setError(null);
+      setIsExporting(true);
+      try {
+        const transcript = await fetchTranscript();
+        const { content, extension, mimeType } = serialize(transcript);
+        downloadTextFile(
+          content,
+          `${transcriptFilename(transcript)}.${extension}`,
+          mimeType,
+        );
+      } catch (e) {
+        const err = toError(e);
+        setError(err);
+        toast.error(`Couldn't export the transcript: ${err.message}`);
+      } finally {
+        setIsExporting(false);
+      }
+    },
+    [fetchTranscript],
+  );
+
+  const downloadMarkdown = useCallback(
+    () =>
+      download((t) => ({
+        content: transcriptToMarkdown(t, {
+          generatedAt: new Date().toISOString(),
+        }),
+        extension: "md",
+        mimeType: "text/markdown",
+      })),
+    [download],
+  );
+
+  const downloadJson = useCallback(
+    () =>
+      download((t) => ({
+        content: JSON.stringify(transcriptToJson(t), null, 2),
+        extension: "json",
+        mimeType: "application/json",
+      })),
+    [download],
+  );
+
+  return useMemo(
+    () => ({ copyMarkdown, downloadMarkdown, downloadJson, isExporting, error }),
+    [copyMarkdown, downloadMarkdown, downloadJson, isExporting, error],
+  );
+}
+
+/** `<subject-slug>-transcript`, falling back to the session id. */
+function transcriptFilename(transcript: SessionTranscript): string {
+  const subject = resolvedSubject(transcript.session.spec?.subject);
+  const slug = subject ? generateSlug(subject).slice(0, 60) : "";
+  return `${slug || transcript.session.metadata?.id || "session"}-transcript`;
+}

package/src/session/useNewSessionFlow.ts

@@ -218,6 +218,18 @@ export interface UseNewSessionFlowReturn {
   /** Session variables (per-execution secrets) manager. */
   readonly sessionVariables: UseSessionVariablesReturn;
 
+  /**
+   * Pre-arm "auto-approve tool calls" for the session this surface will
+   * create (stigmer/stigmer#816, the walk-away scenario). Seeded from the
+   * host's `StigmerProvider` `approvalDefaults` (#302, guests excluded);
+   * the user's toggle wins from then on. Carried into the bootstrap create
+   * as `spec.auto_approve_all` — the whole-run server-side bypass — so the
+   * first run stays covered even if the user closes the tab.
+   */
+  readonly autoApproveAll: boolean;
+  /** Set the user's explicit auto-approve choice for the created session. */
+  readonly setAutoApproveAll: (value: boolean) => void;
+
   /** `true` while the create session + execution flow is in flight. */
   readonly isSubmitting: boolean;
   /** Human-readable error from the last failed submission, or `null`. */
@@ -311,13 +323,18 @@ export function useNewSessionFlow(
   const contextTarget = useExecutionTarget();
   const executionTarget = options.executionTarget ?? contextTarget;
   const adapter = useRunnerAdapter();
-  // Host approval default (#302): pre-arm auto_approve_all on the bootstrap
-  // create when the provider says so. Guests never inherit it — a share-link
-  // visitor is not the operator the host's trust judgment covers (the
-  // GUEST_HARNESS fixed-platform-policy reasoning).
+  // Auto-approve for the session about to be created (#816): the host
+  // approval default (#302) seeds the INITIAL state only; the user's
+  // composer toggle wins from then on. Guests never inherit the default
+  // and never see the toggle — a share-link visitor is not the operator
+  // the host's trust judgment covers (the GUEST_HARNESS
+  // fixed-platform-policy reasoning). Carried into the bootstrap create as
+  // spec.auto_approve_all, the whole-run server-side bypass — the created
+  // run stays covered even if this tab dies before its first gate.
   const approvalDefaults = useApprovalDefaults();
-  const autoApproveAll =
-    (!isGuest && approvalDefaults?.autoApproveAll) || undefined;
+  const [autoApproveAll, setAutoApproveAll] = useState(
+    () => !isGuest && (approvalDefaults?.autoApproveAll ?? false),
+  );
 
   const [harness, setHarnessRaw] = useState<HarnessOption>(() => {
     // Guests get the fixed platform policy (see GUEST_HARNESS) and never
@@ -496,7 +513,9 @@ export function useNewSessionFlow(
             ? (pinnedThinkingMode === "enabled" ? "enabled" : undefined)
             : context?.thinkingMode,
           workspaceFileRefs: context?.workspaceFileRefs,
-          autoApproveAll,
+          // Only an armed state travels; false stays off the wire (the
+          // serviceTier/thinkingMode only-explicit discipline).
+          autoApproveAll: autoApproveAll || undefined,
         };
 
         // Resolve which agent the bootstrapped session runs against: an
@@ -624,6 +643,8 @@ export function useNewSessionFlow(
     setSkillRefs,
     workspace,
     sessionVariables,
+    autoApproveAll,
+    setAutoApproveAll,
     isSubmitting,
     submitError,
     submit,

package/src/session/useSessionConversation.ts

@@ -10,6 +10,7 @@ import type { McpServerUsage as ProtoMcpServerUsage } from "@stigmer/protos/ai/s
 import type { WorkspaceEntry as ProtoWorkspaceEntry } from "@stigmer/protos/ai/stigmer/agentic/session/v1/workspace_pb";
 import type { ApiResourceReference as ProtoApiResourceReference } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
 import {
+  supersededExecutionIds,
   toSessionUpdateInput,
   type AttachmentInput,
   type EnvVarInput,
@@ -544,13 +545,11 @@ export function useSessionConversation(
     }
   }, [activeExecutionId, stream.phase, refetch]);
 
-  // Executions replaced via edit-and-resubmit. The successor carries
-  // `spec.supersedes_execution_id`; hiding the superseded turn makes the
-  // edited message read as a single corrected exchange (in-place replace).
-  // The link must also be read off the live stream copy — right after a
-  // resubmit, the successor streams before the list refetch delivers it.
-  // Display-only: the raw `executions` list (and therefore active-id
-  // resolution above) is never filtered.
+  // Executions replaced via edit-and-resubmit (the shared conversation rule —
+  // see supersededExecutionIds in @stigmer/sdk for the why). The extra id is
+  // the live stream copy's link: right after a resubmit, the successor streams
+  // before the list refetch delivers it. Display-only: the raw `executions`
+  // list (and therefore active-id resolution above) is never filtered.
   //
   // Dep is the scalar link, NOT stream.execution: the stream object changes
   // reference every frame, and rebuilding the Set per frame would hand
@@ -558,15 +557,10 @@ export function useSessionConversation(
   // memoization (DD-010).
   const streamSupersededId =
     stream.execution?.spec?.supersedesExecutionId || null;
-  const supersededIds = useMemo(() => {
-    const ids = new Set<string>();
-    for (const e of executions) {
-      const superseded = e.spec?.supersedesExecutionId;
-      if (superseded) ids.add(superseded);
-    }
-    if (streamSupersededId) ids.add(streamSupersededId);
-    return ids;
-  }, [executions, streamSupersededId]);
+  const supersededIds = useMemo(
+    () => supersededExecutionIds(executions, streamSupersededId),
+    [executions, streamSupersededId],
+  );
 
   const completedExecutions = useMemo(() => {
     return executions.filter((e) => {

package/src/session/useSessionExecutions.ts

@@ -3,9 +3,14 @@
 import { create } from "@bufbuild/protobuf";
 import type { AgentExecution } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
 import { ListAgentExecutionsBySessionRequestSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { sortChronologically } from "@stigmer/sdk";
 import { useStigmer } from "../hooks.js";
 import { useFetch } from "../internal/useFetch.js";
 
+// The ordering rule lives in @stigmer/sdk with the other shared
+// conversation-assembly rules; re-exported here for existing consumers.
+export { sortChronologically };
+
 /** Options for {@link useSessionExecutions}. */
 export interface UseSessionExecutionsOptions {
   /**
@@ -71,32 +76,6 @@ export interface UseSessionExecutionsReturn {
  * const { executions } = useSessionExecutions(sessionId ?? null);
  * ```
  */
-/**
- * Returns the executions in chronological (oldest-first) order — the order
- * the conversation thread renders top-to-bottom.
- *
- * Defense-in-depth against an unordered list response: the executions ARE the
- * transcript, so a scrambled order drops the newest turns out of view (they no
- * longer sort to the bottom). The server orders this list, but the thread must
- * never depend on that alone. Resource ids are time-sortable ULIDs
- * (`aex_01k…`), so an ascending id sort is creation order without parsing
- * timestamps; entries missing an id sort last but keep a stable relative order.
- *
- * @internal Exported for testing — not part of the public API.
- */
-export function sortChronologically(
-  executions: readonly AgentExecution[],
-): AgentExecution[] {
-  return [...executions].sort((a, b) => {
-    const aId = a.metadata?.id ?? "";
-    const bId = b.metadata?.id ?? "";
-    if (aId === bId) return 0;
-    if (!aId) return 1;
-    if (!bId) return -1;
-    return aId < bId ? -1 : 1;
-  });
-}
-
 export function useSessionExecutions(
   sessionId: string | null,
   options?: UseSessionExecutionsOptions,

package/src/session/useSessionPageFlow.ts

@@ -20,6 +20,7 @@ import { useAgentRefFromSession } from "./useAgentRefFromSession.js";
 import { usePersistedModel, type UsePersistedModelReturn } from "./usePersistedModel.js";
 import { toSessionUpdateInput } from "@stigmer/sdk";
 import type { SessionAudience } from "./audience.js";
+import { isChannelOriginSession } from "./channelOrigin.js";
 import { assertValidRunConfig, type SessionRunConfig } from "./run-config.js";
 
 /**
@@ -140,20 +141,33 @@ export interface UseSessionPageFlowReturn {
   readonly sessionVariables: UseSessionVariablesReturn;
 
   /**
-   * Session-scoped "auto-approve tool calls" preference.
+   * Session-scoped "auto-approve tool calls" state (stigmer/stigmer#816).
    *
-   * `false` by default; a host can pre-arm it app-wide via
-   * `StigmerProvider`'s `approvalDefaults` (#302, guests excluded). Flipped
-   * to `true` when the user chooses "Approve & don't ask again" at an
-   * approval gate (see {@link submitApproval}), and carried into every
-   * subsequent follow-up via {@link handleSubmit}. Held in memory only —
-   * reset on reload / new session back to the host default, never persisted
-   * server-side.
+   * `false` by default. `true` when any of its sources arms it — the user's
+   * explicit choice always winning:
+   *
+   * 1. the user's composer toggle ({@link setAutoApproveAll});
+   * 2. "Approve & don't ask again" at an approval gate (see
+   *    {@link submitApproval});
+   * 3. the host's app-wide `StigmerProvider` `approvalDefaults` (#302,
+   *    guests excluded);
+   * 4. the active in-flight execution having been created with
+   *    `spec.auto_approve_all` (e.g. armed on the new-session surface), so
+   *    the state survives the launcher → session-page handoff.
+   *
+   * While `true`, follow-ups carry `auto_approve_all` ({@link handleSubmit})
+   * and gates appearing in the in-flight run are auto-released (never for
+   * guest/observer/channel-origin surfaces). Held in memory only — reset on
+   * reload back to the host default, never persisted server-side.
    */
   readonly autoApproveAll: boolean;
   /**
-   * Toggle the session-scoped auto-approve preference. The reversible "Turn off"
-   * control in the UI calls this with `false`.
+   * Set the user's explicit session-scoped auto-approve choice. Wired to the
+   * composer's always-visible toggle; an explicit `false` wins over the host
+   * default and over an armed in-flight run for everything the client
+   * controls (follow-up carry, gate auto-release) — an already-armed run's
+   * server-side bypass cannot be revoked mid-run, exactly as with today's
+   * gate-time "Approve & don't ask again".
    */
   readonly setAutoApproveAll: (value: boolean) => void;
 
@@ -322,17 +336,34 @@ export function useSessionPageFlow(
   const [skillRefs, setSkillRefs] = useState<ResourceRef[]>([]);
   const initialSyncDone = useRef(false);
 
-  // Session-scoped auto-approve. Armed either at the approval gate ("Approve &
-  // don't ask again") or from the host's provider-level approvalDefaults
-  // (#302) — an app-level trust judgment, so it seeds the INITIAL state only;
-  // the user's in-session "Turn off" always wins from then on. Guests never
-  // inherit the host default (a share-link visitor is not the operator the
-  // host's trust judgment covers). Lives only in memory for the life of this
-  // page — reset on reload re-applies the host default, never a user choice.
+  // Session-scoped auto-approve (#816). Derived like interactionMode above —
+  // the user's explicit in-session decision wins, otherwise the truth is
+  // computed from its sources — never an effect-synced copy:
+  //
+  //   effective = userChoice ?? (hostSeed || runArmed)
+  //
+  // - `userChoice`: the composer toggle, or the gate-time "Approve & don't
+  //   ask again" (which has always escalated the session preference).
+  // - `hostSeed`: the host's provider-level approvalDefaults (#302) — an
+  //   app-level trust judgment. Guests never inherit it (a share-link
+  //   visitor is not the operator the host's trust judgment covers).
+  // - `runArmed`: the ACTIVE execution was created with
+  //   spec.auto_approve_all, so the toggle reflects an armed in-flight run —
+  //   this is what carries the state across the new-session → session-page
+  //   handoff. Deliberately derived from the active execution ONLY, never
+  //   from history: deriving from past executions would silently survive a
+  //   reload and change the reset-on-reload consent contract below.
+  //
+  // Lives only in memory for the life of this page — reset on reload
+  // re-applies the host default, never a user choice.
   const approvalDefaults = useApprovalDefaults();
-  const [autoApproveAll, setAutoApproveAll] = useState(
-    () => !isGuest && (approvalDefaults?.autoApproveAll ?? false),
-  );
+  const [autoApproveChoice, setAutoApproveChoice] = useState<boolean | null>(null);
+  const hostSeed = !isGuest && (approvalDefaults?.autoApproveAll ?? false);
+  const runArmed = conv.activeStreamExecution?.spec?.autoApproveAll === true;
+  const autoApproveAll = autoApproveChoice ?? (hostSeed || runArmed);
+  const setAutoApproveAll = useCallback((value: boolean) => {
+    setAutoApproveChoice(value);
+  }, []);
 
   const submitApproval = useCallback<UseSessionConversationReturn["submitApproval"]>(
     async (toolCallId, action, comment) => {
@@ -341,13 +372,45 @@ export function useSessionPageFlow(
       // plane separately resolves the current execution's remaining gates and
       // the runner skips the gate for the rest of that run.
       if (action === ApprovalAction.APPROVE_ALL) {
-        setAutoApproveAll(true);
+        setAutoApproveChoice(true);
       }
       await conv.submitApproval(toolCallId, action, comment);
     },
     [conv.submitApproval],
   );
 
+  // Armed responder (#816, the walk-away scenario): while auto-approve is ON,
+  // answer each approval gate as it appears in the in-flight run. This must be
+  // a standing responder, not a flip-time one-shot: a gate-time APPROVE_ALL
+  // grants a lease scoped to ONE tool class (see APPROVAL_ACTION_APPROVE_ALL
+  // in agentexecution enum.proto), so a later gate of a different class would
+  // still park the run — the responder covers each class as it surfaces, and
+  // every released call keeps an honest audit decision.
+  //
+  // Read-only surfaces must never auto-submit approvals on a viewer's behalf:
+  // the predicate mirrors SessionViewer's read-only derivation (guest audience,
+  // observer audience, channel-origin session) exactly.
+  const canRespondToGates =
+    !isGuest &&
+    options.audience !== "observer" &&
+    !isChannelOriginSession(conv.session);
+  const respondedToolCallIds = useRef<Set<string>>(new Set());
+  useEffect(() => {
+    if (!autoApproveAll || !canRespondToGates) return;
+    for (const approval of conv.pendingApprovals) {
+      const toolCallId = approval.toolCallId;
+      // Marked before the submit resolves so a re-render mid-flight cannot
+      // double-submit. A failed submission is deliberately NOT retried — the
+      // approval card stays for a manual decision instead of a retry storm.
+      if (!toolCallId || respondedToolCallIds.current.has(toolCallId)) continue;
+      respondedToolCallIds.current.add(toolCallId);
+      void conv.submitApproval(toolCallId, ApprovalAction.APPROVE_ALL).catch(() => {
+        // Swallowed by design (see above); the card's own error surface
+        // reports the failure where the user can act on it.
+      });
+    }
+  }, [autoApproveAll, canRespondToGates, conv.pendingApprovals, conv.submitApproval]);
+
   // -------------------------------------------------------------------------
   // Agent — derive from session, allow mid-session changes
   // -------------------------------------------------------------------------

package/src/settings/MemorySection.tsx

@@ -0,0 +1,45 @@
+"use client";
+
+import { useId } from "react";
+import { MemoryListPanel } from "../memory/MemoryListPanel.js";
+import { useActiveOrgSlug } from "../organization/OrgProvider.js";
+
+/**
+ * Settings section listing everything the platform remembers about the
+ * caller in the active organization.
+ *
+ * The helper copy carries the DD-006 D6 transparency statement: a
+ * confirmed memory is injected into the caller's future sessions and
+ * appears in those executions' records. Memory content everywhere else
+ * is subject-only — this page shows the caller their own records and
+ * nobody else's.
+ */
+export function MemorySection() {
+  const headingId = useId();
+  const org = useActiveOrgSlug();
+
+  return (
+    <section aria-labelledby={headingId}>
+      <h2
+        id={headingId}
+        className="stg:text-foreground stg:mb-1 stg:text-sm stg:font-semibold"
+      >
+        Memory
+      </h2>
+      <p className="stg:text-muted-foreground stg:mb-6 stg:text-xs">
+        Facts agents proposed to remember about you in this organization.
+        Confirmed memories are shared with agents in your future sessions
+        and appear in those executions&apos; records. Only you can see
+        them here, and you can edit or delete any of them at any time.
+      </p>
+
+      {!org ? (
+        <p className="stg:text-muted-foreground stg:py-4 stg:text-center stg:text-xs">
+          Select an organization to view its memories.
+        </p>
+      ) : (
+        <MemoryListPanel org={org} />
+      )}
+    </section>
+  );
+}

package/src/settings/index.ts

@@ -12,6 +12,7 @@ export { MembersSection } from "./MembersSection.js";
 export { OrgProfileSection } from "./OrgProfileSection.js";
 export { OrgPreferencesSection } from "./OrgPreferencesSection.js";
 export { AccountPreferencesSection } from "./AccountPreferencesSection.js";
+export { MemorySection } from "./MemorySection.js";
 export { EnvironmentsSection } from "./EnvironmentsSection.js";
 export { InvitationsSection } from "./InvitationsSection.js";
 export { IdentityProvidersSection } from "./IdentityProvidersSection.js";

package/src/settings/settings-nav.ts

@@ -4,6 +4,7 @@ import {
   AppWindow,
   BarChart3,
   Box,
+  Brain,
   Building2,
   CreditCard,
   KeyRound,
@@ -108,6 +109,7 @@ export const SETTINGS_NAV_GROUPS: readonly SettingsNavGroup[] = [
         label: "Preferences",
         icon: UserCog,
       },
+      { href: "/settings/memory", label: "Memory", icon: Brain },
     ],
   },
 ];

package/src/usage/useExportCSV.ts

@@ -2,6 +2,7 @@
 
 import { useCallback, useState } from "react";
 import type { GetOrgUsageReportOutput } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { downloadTextFile } from "../internal/download.js";
 
 /** Export format for the CSV download. */
 export type ExportFormat = "daily_summary" | "model_breakdown";
@@ -41,7 +42,7 @@ export function useExportCSV(
           ? buildDailySummaryCSV(report, orgId)
           : buildModelBreakdownCSV(report, orgId);
 
-        downloadCSV(csv, filename);
+        downloadTextFile(csv, filename, "text/csv");
       } finally {
         setIsExporting(false);
       }
@@ -100,16 +101,3 @@ function escapeCsvField(value: string): string {
   }
   return value;
 }
-
-function downloadCSV(csv: string, filename: string): void {
-  const blob = new Blob([csv], { type: "text/csv;charset=utf-8;" });
-  const url = URL.createObjectURL(blob);
-  const link = document.createElement("a");
-  link.href = url;
-  link.download = filename;
-  link.style.display = "none";
-  document.body.appendChild(link);
-  link.click();
-  document.body.removeChild(link);
-  URL.revokeObjectURL(url);
-}

package/usage/useExportCSV.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useExportCSV.d.ts","sourceRoot":"","sources":["../../src/usage/useExportCSV.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAE1G,0CAA0C;AAC1C,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAE/D,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;IACnD,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,uBAAuB,GAAG,IAAI,EACtC,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAsBpB"}
+{"version":3,"file":"useExportCSV.d.ts","sourceRoot":"","sources":["../../src/usage/useExportCSV.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4DAA4D,CAAC;AAG1G,0CAA0C;AAC1C,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAE/D,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;IACnD,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,uBAAuB,GAAG,IAAI,EACtC,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAsBpB"}

package/usage/useExportCSV.js

@@ -1,5 +1,6 @@
 "use client";
 import { useCallback, useState } from "react";
+import { downloadTextFile } from "../internal/download.js";
 /**
  * Behavior hook that generates and downloads usage data as CSV.
  *
@@ -21,7 +22,7 @@ export function useExportCSV(report, orgId) {
             const { csv, filename } = format === "daily_summary"
                 ? buildDailySummaryCSV(report, orgId)
                 : buildModelBreakdownCSV(report, orgId);
-            downloadCSV(csv, filename);
+            downloadTextFile(csv, filename, "text/csv");
         }
         finally {
             setIsExporting(false);
@@ -66,16 +67,4 @@ function escapeCsvField(value) {
     }
     return value;
 }
-function downloadCSV(csv, filename) {
-    const blob = new Blob([csv], { type: "text/csv;charset=utf-8;" });
-    const url = URL.createObjectURL(blob);
-    const link = document.createElement("a");
-    link.href = url;
-    link.download = filename;
-    link.style.display = "none";
-    document.body.appendChild(link);
-    link.click();
-    document.body.removeChild(link);
-    URL.revokeObjectURL(url);
-}
 //# sourceMappingURL=useExportCSV.js.map

package/usage/useExportCSV.js.map

@@ -1 +1 @@
-{"version":3,"file":"useExportCSV.js","sourceRoot":"","sources":["../../src/usage/useExportCSV.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAc9C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsC,EACtC,KAAa;IAEb,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,WAAW,CAC3B,CAAC,MAAoB,EAAE,EAAE;QACvB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,cAAc,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,eAAe;gBAClD,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC;gBACrC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAE1C,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,KAAK,CAAC,CAChB,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+B,EAC/B,KAAa;IAEb,MAAM,MAAM,GAAG,mCAAmC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,GAAG,KAAK,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA+B,EAC/B,KAAa;IAEb,MAAM,MAAM,GACV,iGAAiG,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO;YACL,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;YACvB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,wBAAwB;YAC1B,IAAI;SACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,GAAG,KAAK,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,QAAgB;IAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAChB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"useExportCSV.js","sourceRoot":"","sources":["../../src/usage/useExportCSV.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAa3D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsC,EACtC,KAAa;IAEb,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEtD,MAAM,SAAS,GAAG,WAAW,CAC3B,CAAC,MAAoB,EAAE,EAAE;QACvB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,cAAc,CAAC,IAAI,CAAC,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,eAAe;gBAClD,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC;gBACrC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAE1C,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,KAAK,CAAC,CAChB,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+B,EAC/B,KAAa;IAEb,MAAM,MAAM,GAAG,mCAAmC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,GAAG,KAAK,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA+B,EAC/B,KAAa;IAEb,MAAM,MAAM,GACV,iGAAiG,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO;YACL,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;YACvB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,wBAAwB;YAC1B,IAAI;SACL,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,GAAG,KAAK,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}