@tangle-network/agent-app 0.45.23 → 0.45.25

package/dist/chat-react/index.js

@@ -144,7 +144,10 @@ function ComposerModeControls({ planMode }) {
       onClick: () => planMode.setEnabled(!planMode.enabled),
       title: "Plan mode: the agent proposes a plan you approve before it executes",
       className: cn(
-        "inline-flex h-7 items-center gap-1 rounded-full border px-2.5 text-xs transition-colors",
+        // Inset ring: this chip sits in a composer row that clips its overflow,
+        // so an outward ring loses three of its four sides. Only the offset is
+        // overridden — width and colour stay with the tokens.
+        "inline-flex h-7 items-center gap-1 rounded-full border px-2.5 text-xs transition-colors focus-visible:[outline-offset:-2px]",
         planMode.enabled ? "border-primary/50 bg-primary/10 text-primary" : "border-border bg-transparent text-muted-foreground hover:text-foreground",
         planMode.saving && "opacity-60"
       ),

package/dist/chat-react/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/chat-react/composer-agent-controls.tsx","../../src/chat-react/entry-composer.tsx","../../src/chat-react/composer-mode-controls.tsx"],"sourcesContent":["import { useCallback, useMemo, useRef } from 'react'\nimport {\n  AgentSessionControls,\n  type AgentSessionProfileControl,\n} from '@tangle-network/sandbox-ui/chat'\nimport { canonicalModelId } from '@tangle-network/sandbox-ui/dashboard'\nimport type { ModelInfo } from '@tangle-network/sandbox-ui/dashboard'\n// Browser-safe: model-catalog.ts imports nothing. Taken from the source module\n// rather than the `/catalog` subpath so this stays one build graph.\nimport { isChatCapableModel, type RouterModel } from '../runtime/model-catalog'\nimport type { HarnessType, ReasoningEffort, ReasoningLevel } from './types'\n\n/**\n * The model half of the composer's agent identity. `models` is the catalog the\n * picker renders; `value` may be a bare or a canonical (provider-prefixed) id —\n * the adapter maps it to canonical form for the picker and hands the canonical\n * id back to `onChange`, so a product that stores bare ids only has to accept\n * canonical ones in its setter.\n */\nexport interface ComposerModelSelection {\n  value: string\n  onChange: (next: string) => void\n  models: ModelInfo[]\n  loading?: boolean\n  disabled?: boolean\n}\n\nexport interface ComposerHarnessSelection {\n  value: HarnessType\n  onChange: (next: HarnessType) => void\n  /** Restrict the offered backends. Omit to take the context default. */\n  available?: ReadonlyArray<HarnessType>\n  disabled?: boolean\n  /**\n   * A thread's sidecar session is pinned to one harness at its first message,\n   * so once the thread has messages the picker locks. With `onNewChat` the\n   * locked chip becomes the informative lock (explains the binding + a button\n   * to start a fresh session on another backend).\n   */\n  locked?: boolean\n  lockReason?: string\n  onNewChat?: () => void\n}\n\nexport interface ComposerEffortSelection {\n  value: ReasoningLevel\n  onChange: (next: ReasoningLevel) => void\n  /**\n   * Depths this product's backend actually applies. Omit for the default set.\n   * `auto` is NOT a member: the picker adds that sentinel itself, so listing it\n   * here would offer it twice.\n   */\n  available?: ReadonlyArray<ReasoningEffort>\n  disabled?: boolean\n}\n\n/**\n * A selectable named bundle of persona and tool groups. The product resolves\n * the selected id to the runtime AgentProfile before creating or continuing a\n * session; the composer only needs the display catalog and persistence hooks.\n */\nexport type ComposerProfileSelection = AgentSessionProfileControl\n\nexport interface ComposerAgentControlsProps {\n  model: ComposerModelSelection\n  /** Omit on a router-backed composer: a direct model call has no CLI backend,\n   *  so the picker would be inert. Model + effort still render. */\n  harness?: ComposerHarnessSelection\n  /** Universal named agent profile: persona + tool groups, independent of backend. */\n  profile?: ComposerProfileSelection\n  effort?: ComposerEffortSelection\n  className?: string\n  /**\n   * Which surface the controls live on. `'chat'` (the default) drops the\n   * shell-only `cli-base` backend — it has no conversational agent — and tells\n   * the shared control to use its chat-only default set. It also drops models\n   * that cannot serve a text turn (image / TTS / embedding / audio-in) from\n   * the model picker. `'all'` keeps every backend and every model for non-chat\n   * / scheduled surfaces.\n   */\n  context?: 'chat' | 'all'\n  /**\n   * Trigger layout. `'responsive'` (the default) lays the pickers out in a\n   * row on wider screens and uses a compact gear on narrow screens. `'combined'`\n   * collapses the pickers behind one\n   * labeled trigger reading the current selection (`harness · model · effort`).\n   * `'gear'` uses an anonymous gear icon instead of the label; `'inline'` lays\n   * the pickers out in a row. `'responsive'` uses the labeled trigger on wider\n   * screens and the compact gear on narrow screens so Send stays reachable.\n   */\n  layout?: 'inline' | 'gear' | 'combined' | 'responsive'\n  /**\n   * Where the pickers open. `'down'` pins them downward for a composer floating\n   * in open space (the centered entry surface) so a tall menu can't flip up over\n   * the heading. Defaults to `'auto'` (collision-aware).\n   */\n  menuPlacement?: 'auto' | 'down'\n  /**\n   * Restrict the model catalog to what the selected harness can run instead of\n   * letting an incompatible model snap the harness. ON by default: a workspace\n   * harness is sandbox-bound, and a silent swap tears down and recreates the\n   * sandbox. Turn OFF only on a model-first surface with no bound sandbox.\n   */\n  filterModelsToHarness?: boolean\n}\n\n/**\n * The chat copilot must never offer `cli-base`: it is a shell-only backend with\n * no conversational agent. sandbox-ui's `context='chat'` drops it from the\n * default set, but an explicit `available` list (a plan-filtered one may include\n * `cli-base`) overrides that trim. So strip it here at the data layer whenever\n * the surface is chat — no `cli-base` ever reaches render.\n */\nfunction harnessesForContext(\n  available: ReadonlyArray<HarnessType> | undefined,\n  context: 'chat' | 'all',\n): ReadonlyArray<HarnessType> | undefined {\n  if (!available) return available\n  if (context !== 'chat') return available\n  return available.filter((h) => h !== 'cli-base')\n}\n\n/**\n * The model-side twin of the harness trim above. Products hand the picker the\n * router's raw `/v1/models`, which lists every routeable endpoint — image\n * generators, TTS voices, embedding models, audio-in transcription. None of\n * them can serve a chat turn, and on the live catalogue that is 35 of 504\n * entries a user could pick and get a broken turn from.\n *\n * `context: 'all'` keeps the full list for non-chat surfaces.\n *\n * The selected model is never filtered out, whatever its modalities say: a\n * product may deliberately pin something exotic, and a picker whose own value\n * is missing from its list renders as blank.\n *\n * That escape hatch has to recognise BOTH spellings of the id. A product stores\n * whatever `onChange` handed it, and `onChange` hands back the canonical\n * provider-prefixed form — so a selection pinned before this trim existed is\n * stored as `openai/gpt-image-1` while the catalog entry's own `id` is the bare\n * `gpt-image-1`. Matching only the bare form drops exactly the model the guard\n * exists to keep, and the picker renders unset, which reads as data loss.\n */\nfunction modelsForContext(\n  models: ModelInfo[],\n  selectedId: string,\n  context: 'chat' | 'all',\n): ModelInfo[] {\n  if (context !== 'chat') return models\n  return models.filter(\n    (m) =>\n      m.id === selectedId ||\n      canonicalModelId(m) === selectedId ||\n      isChatCapableModel(m as unknown as RouterModel),\n  )\n}\n\n/**\n * The composer's agent-identity control: profile, backend, model, and\n * reasoning effort, over sandbox-ui's `AgentSessionControls`.\n *\n * This is an ADAPTER, not a second implementation. sandbox-ui owns the control\n * and the harness↔model coherence policy (the catalog is filtered to the\n * selected harness, the effort re-clamps to what the harness/model pair\n * supports, and a harness that ignores a picker is marked with its dead control\n * disabled). What lives here is the app-shell wiring every product otherwise\n * re-derives:\n *\n *  - MODEL-ID BOUNDARY. Products store bare ids (what a chat send body expects)\n *    while the picker matches on canonical provider-prefixed ids. The canonical\n *    form goes in; the canonical id comes back out to `onChange`.\n *  - HARNESS-SNAP SUPPRESSION. The shared control snaps the model whenever the\n *    harness changes, calling the model `onChange` synchronously with a default\n *    compatible model. A product that remembers a per-harness pick must ignore\n *    that snap, or it both discards the remembered pick and persists it under\n *    the wrong harness's key. The guard is armed for exactly the synchronous\n *    window of a harness change and disarmed on the next microtask, so it can\n *    never stay stuck — a later genuine pick is never swallowed, even when the\n *    harness change was a no-op.\n *  - CHAT-CONTEXT TRIM. On a chat surface, `cli-base` never reaches the harness\n *    picker and a non-chat model never reaches the model picker. Products feed\n *    the picker the router's raw model list, where 35 of 504 entries (image,\n *    TTS, embeddings, audio-in transcription) cannot serve a chat turn at all.\n *\n * Behavioral modes (a plan toggle) are NOT agent identity and do not belong\n * here — they dock on the other side of the composer via `controls`.\n */\nexport function ComposerAgentControls({\n  model,\n  harness,\n  profile,\n  effort,\n  className,\n  context = 'chat',\n  layout = 'responsive',\n  menuPlacement,\n  filterModelsToHarness = true,\n}: ComposerAgentControlsProps) {\n  const canonicalSelected = useMemo(() => {\n    const selected = model.models.find((m) => m.id === model.value)\n    if (selected) return canonicalModelId(selected)\n    // Already canonical, or the catalog has not loaded — pass through unchanged\n    // so a provider-prefixed id still matches once models arrive.\n    return model.value\n  }, [model.value, model.models])\n\n  const offeredModels = useMemo(\n    () => modelsForContext(model.models, model.value, context),\n    [model.models, model.value, context],\n  )\n\n  const harnessSwitching = useRef(false)\n  const harnessOnChange = harness?.onChange\n  const onHarnessChange = useCallback(\n    (next: HarnessType) => {\n      harnessSwitching.current = true\n      harnessOnChange?.(next)\n      queueMicrotask(() => {\n        harnessSwitching.current = false\n      })\n    },\n    [harnessOnChange],\n  )\n\n  const modelOnChange = model.onChange\n  const onModelChange = useCallback(\n    (canonical: string) => {\n      if (harnessSwitching.current) return\n      modelOnChange(canonical)\n    },\n    [modelOnChange],\n  )\n\n  const sharedProps = {\n    context,\n    menuPlacement,\n    filterModelsToHarness,\n    model: {\n      value: canonicalSelected,\n      onChange: onModelChange,\n      models: offeredModels,\n      loading: model.loading,\n      disabled: model.disabled,\n    },\n    harness: harness\n      ? {\n          value: harness.value,\n          onChange: onHarnessChange,\n          available: harnessesForContext(harness.available, context),\n          disabled: harness.disabled,\n          locked: harness.locked,\n          lockReason: harness.lockReason,\n          onNewChat: harness.onNewChat,\n        }\n      : undefined,\n    profile,\n    reasoning: effort\n      ? {\n          value: effort.value,\n          onChange: effort.onChange,\n          available: effort.available,\n          disabled: effort.disabled,\n        }\n      : undefined,\n  }\n\n  if (layout === 'responsive') {\n    return (\n      <>\n        <AgentSessionControls\n          {...sharedProps}\n          className={className ? `hidden sm:flex ${className}` : 'hidden sm:flex'}\n          layout=\"inline\"\n        />\n        <AgentSessionControls\n          {...sharedProps}\n          className={className ? `flex sm:hidden ${className}` : 'flex sm:hidden'}\n          layout=\"gear\"\n        />\n      </>\n    )\n  }\n\n  return (\n    <AgentSessionControls\n      className={className}\n      {...sharedProps}\n      layout={layout}\n    />\n  )\n}\n","import { useState, type ReactNode } from 'react'\nimport { AgentComposer } from '@tangle-network/sandbox-ui/chat'\nimport { ATTACHMENT_ACCEPT, useComposerAttachments } from '../web-react/use-composer-attachments'\nimport type { UseFileMentionsResult } from '../web-react/use-file-mentions'\nimport type { ChatAttachmentInput, FileMention } from '../chat-routes/wire'\nimport {\n  ComposerAgentControls,\n  type ComposerAgentControlsProps,\n} from './composer-agent-controls'\nimport { ComposerModeControls } from './composer-mode-controls'\nimport type { ComposerPlanModeSelection } from './types'\n\nexport interface EntryComposerProps {\n  /** The one line above the input. Domain copy — always a product parameter. */\n  heading?: ReactNode\n  /** Optional supporting line under the heading. */\n  subheading?: ReactNode\n  placeholder?: string\n  initialValue?: string\n  sendLabel?: string\n  disabled?: boolean\n  /**\n   * Agent identity (profile/backend/model/effort). Pass it and the control row renders;\n   * omit it and the composer ships without one. Omitting is a real choice for a\n   * surface with nothing to choose — it should never be an oversight, which is\n   * why this is one prop rather than a free-form slot a caller can forget.\n   */\n  agent?: ComposerAgentControlsProps\n  /**\n   * Product-specific behavioral controls docked on the LEFT. A mode is an\n   * on/off switch, not a value picker, so it sits apart from agent identity.\n   * For the standard plan-approval control, prefer `planMode`.\n   */\n  modes?: ReactNode\n  /**\n   * Standard plan-approval mode. Pass only when the selected backend supports\n   * it; omitted means the control is not rendered.\n   */\n  planMode?: ComposerPlanModeSelection\n  /**\n   * Upload endpoint for staged attachments. Omit and the attach affordance is\n   * hidden — a composer with no place to put a file must not offer one.\n   */\n  uploadUrl?: string\n  accept?: string\n  onAttachmentError?: (reason: string) => void\n  onRejectFiles?: Parameters<typeof AgentComposer>[0]['onRejectFiles']\n  /**\n   * `@`-file mentions. The hook itself is shared (`useFileMentions`), but the\n   * cold-box policy around it — whether pressing `@` is worth starting a\n   * sandbox — is a per-surface product call, so the result is injected rather\n   * than created here.\n   */\n  mentions?: UseFileMentionsResult\n  mentionPopoverClassName?: string\n  /** Rendered under the composer: suggestion pills, an onboarding nudge, a\n   *  disclaimer. All domain copy. */\n  footer?: ReactNode\n  /** Block submit until a persisted selection has resolved against the catalog,\n   *  so the first turn cannot go out under the wrong model. Defaults to true. */\n  ready?: boolean\n  onSubmit: (\n    prompt: string,\n    attachments: ChatAttachmentInput[],\n    mentions: FileMention[],\n  ) => void\n  className?: string\n  composerClassName?: string\n  /** Max width of the centered column. Defaults to the fleet's 820px. */\n  maxWidth?: number\n}\n\n/**\n * `EntryComposer` — the centered \"what do you want to work on?\" surface a\n * product shows before a conversation exists (a new thread, an empty session,\n * a workspace overview).\n *\n * It exists because three products each grew their own, and they drifted into\n * three different capability sets rather than three different looks: one lost\n * the attach button, one lost the model and effort pickers entirely, one\n * hand-rolled a `<textarea>` and wired pickers from three separate packages\n * into one row. The composer, the pickers, the attachment queue and the mention\n * index were all ALREADY shared — what was not shared was the assembly, so\n * every product re-derived which controls an entry surface gets, and each\n * re-derivation dropped a different one.\n *\n * Mechanism lives here: layout, the attachment queue, the mention wiring, the\n * submit gate (nothing sends while an upload is pending or failed, or before\n * the model selection has resolved). Domain stays a parameter: `heading`,\n * `placeholder`, `footer` (suggestion pills, disclaimers) and the selections\n * themselves.\n *\n * The docked in-thread composer is NOT this component — it renders\n * `AgentComposer` directly with the same {@link ComposerAgentControls}, because\n * a docked composer has a transcript above it and no hero layout.\n */\nexport function EntryComposer({\n  heading,\n  subheading,\n  placeholder,\n  initialValue = '',\n  sendLabel,\n  disabled,\n  agent,\n  modes,\n  planMode,\n  uploadUrl,\n  accept = ATTACHMENT_ACCEPT,\n  onAttachmentError,\n  onRejectFiles,\n  mentions,\n  mentionPopoverClassName,\n  footer,\n  ready = true,\n  onSubmit,\n  className,\n  composerClassName,\n  maxWidth = 820,\n}: EntryComposerProps) {\n  const [value, setValue] = useState(initialValue)\n  const attachments = useComposerAttachments({\n    uploadUrl,\n    enabled: !!uploadUrl,\n    onReject: onAttachmentError,\n    onError: onAttachmentError,\n  })\n\n  function submit(prompt: string) {\n    if (!ready || disabled) return\n    const next = prompt.trim()\n    // A pending or failed upload must not send: the turn would reference an\n    // attachment the store does not have. Surface why rather than no-op'ing.\n    if (attachments.hasPending || attachments.hasError) {\n      if (attachments.blockReason) onAttachmentError?.(attachments.blockReason)\n      return\n    }\n    if (!next && attachments.references.length === 0) return\n    onSubmit(next, attachments.references, mentions?.mentions ?? [])\n    setValue('')\n    attachments.clear()\n    mentions?.clearMentions()\n  }\n\n  return (\n    <div\n      className={\n        className ??\n        'relative flex flex-1 flex-col items-center justify-center overflow-hidden bg-background px-5'\n      }\n    >\n      <div className=\"w-full\" style={{ maxWidth }}>\n        {heading ? (\n          <h2 className=\"mb-4 text-center text-[1.75rem] font-medium tracking-tight text-foreground\">\n            {heading}\n          </h2>\n        ) : null}\n        {subheading ? (\n          <p className=\"mx-auto mb-9 max-w-md text-center text-sm leading-relaxed text-muted-foreground\">\n            {subheading}\n          </p>\n        ) : (\n          heading ? <div className=\"mb-7\" /> : null\n        )}\n        <AgentComposer\n          className={composerClassName ?? 'vt-composer'}\n          value={value}\n          onChange={setValue}\n          onSubmit={() => submit(value)}\n          placeholder={placeholder}\n          sendLabel={sendLabel}\n          disabled={disabled}\n          autoFocus\n          canSubmitAttachmentsOnly\n          accept={accept}\n          attachments={attachments.composerFiles}\n          onAttach={uploadUrl ? (files) => void attachments.addFiles(files) : undefined}\n          onRejectFiles={onRejectFiles}\n          onRemoveFile={attachments.removeAttachment}\n          onRetryFile={attachments.retry}\n          mention={\n            mentions\n              ? {\n                  ...mentions.mention,\n                  // Sidebar tone + hairline so the popover reads as app chrome\n                  // (the same treatment the picker menus get) instead of the\n                  // brighter overlay tone the component defaults to.\n                  popoverClassName:\n                    mentionPopoverClassName ??\n                    'bg-surface-container-low border-[var(--md3-outline-variant)]',\n                }\n              : undefined\n          }\n          controls={modes ?? <ComposerModeControls planMode={planMode} />}\n          trailing={\n            agent ? <ComposerAgentControls menuPlacement=\"down\" {...agent} /> : undefined\n          }\n        />\n        {footer ? <div className=\"mt-7\">{footer}</div> : null}\n      </div>\n    </div>\n  )\n}\n","import { ListChecks } from 'lucide-react'\nimport { cn } from '@tangle-network/sandbox-ui/utils'\nimport type { ComposerPlanModeSelection } from './types'\n\nexport interface ComposerModeControlsProps {\n  /**\n   * Plan-approval mode. Products pass it only when the selected backend can\n   * propose a plan and wait for approval; omitted means nothing renders.\n   */\n  planMode?: ComposerPlanModeSelection\n}\n\n/**\n * The shared plan-mode toggle for the left side of an agent composer.\n * Plan mode is a behavioral switch, not part of the profile/backend/model/\n * thinking identity controls on the right.\n */\nexport function ComposerModeControls({ planMode }: ComposerModeControlsProps) {\n  if (!planMode) return null\n\n  return (\n    <button\n      type=\"button\"\n      aria-pressed={planMode.enabled}\n      disabled={planMode.saving}\n      onClick={() => planMode.setEnabled(!planMode.enabled)}\n      title=\"Plan mode: the agent proposes a plan you approve before it executes\"\n      className={cn(\n        'inline-flex h-7 items-center gap-1 rounded-full border px-2.5 text-xs transition-colors',\n        planMode.enabled\n          ? 'border-primary/50 bg-primary/10 text-primary'\n          : 'border-border bg-transparent text-muted-foreground hover:text-foreground',\n        planMode.saving && 'opacity-60',\n      )}\n    >\n      <ListChecks className=\"h-3.5 w-3.5\" />\n      Plan\n    </button>\n  )\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,aAAa,SAAS,cAAc;AAC7C;AAAA,EACE;AAAA,OAEK;AACP,SAAS,wBAAwB;AAsQ3B,mBACE,KADF;AA1JN,SAAS,oBACP,WACA,SACwC;AACxC,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,YAAY,OAAQ,QAAO;AAC/B,SAAO,UAAU,OAAO,CAAC,MAAM,MAAM,UAAU;AACjD;AAsBA,SAAS,iBACP,QACA,YACA,SACa;AACb,MAAI,YAAY,OAAQ,QAAO;AAC/B,SAAO,OAAO;AAAA,IACZ,CAAC,MACC,EAAE,OAAO,cACT,iBAAiB,CAAC,MAAM,cACxB,mBAAmB,CAA2B;AAAA,EAClD;AACF;AAgCO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,SAAS;AAAA,EACT;AAAA,EACA,wBAAwB;AAC1B,GAA+B;AAC7B,QAAM,oBAAoB,QAAQ,MAAM;AACtC,UAAM,WAAW,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,KAAK;AAC9D,QAAI,SAAU,QAAO,iBAAiB,QAAQ;AAG9C,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,MAAM,OAAO,MAAM,MAAM,CAAC;AAE9B,QAAM,gBAAgB;AAAA,IACpB,MAAM,iBAAiB,MAAM,QAAQ,MAAM,OAAO,OAAO;AAAA,IACzD,CAAC,MAAM,QAAQ,MAAM,OAAO,OAAO;AAAA,EACrC;AAEA,QAAM,mBAAmB,OAAO,KAAK;AACrC,QAAM,kBAAkB,SAAS;AACjC,QAAM,kBAAkB;AAAA,IACtB,CAAC,SAAsB;AACrB,uBAAiB,UAAU;AAC3B,wBAAkB,IAAI;AACtB,qBAAe,MAAM;AACnB,yBAAiB,UAAU;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,CAAC,eAAe;AAAA,EAClB;AAEA,QAAM,gBAAgB,MAAM;AAC5B,QAAM,gBAAgB;AAAA,IACpB,CAAC,cAAsB;AACrB,UAAI,iBAAiB,QAAS;AAC9B,oBAAc,SAAS;AAAA,IACzB;AAAA,IACA,CAAC,aAAa;AAAA,EAChB;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,IAClB;AAAA,IACA,SAAS,UACL;AAAA,MACE,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,MACV,WAAW,oBAAoB,QAAQ,WAAW,OAAO;AAAA,MACzD,UAAU,QAAQ;AAAA,MAClB,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,MACpB,WAAW,QAAQ;AAAA,IACrB,IACA;AAAA,IACJ;AAAA,IACA,WAAW,SACP;AAAA,MACE,OAAO,OAAO;AAAA,MACd,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,IACnB,IACA;AAAA,EACN;AAEA,MAAI,WAAW,cAAc;AAC3B,WACE,iCACE;AAAA;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ,WAAW,YAAY,kBAAkB,SAAS,KAAK;AAAA,UACvD,QAAO;AAAA;AAAA,MACT;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ,WAAW,YAAY,kBAAkB,SAAS,KAAK;AAAA,UACvD,QAAO;AAAA;AAAA,MACT;AAAA,OACF;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACC,GAAG;AAAA,MACJ;AAAA;AAAA,EACF;AAEJ;;;ACjSA,SAAS,gBAAgC;AACzC,SAAS,qBAAqB;;;ACD9B,SAAS,kBAAkB;AAC3B,SAAS,UAAU;AAoBf,SAcE,OAAAA,MAdF,QAAAC,aAAA;AAJG,SAAS,qBAAqB,EAAE,SAAS,GAA8B;AAC5E,MAAI,CAAC,SAAU,QAAO;AAEtB,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,gBAAc,SAAS;AAAA,MACvB,UAAU,SAAS;AAAA,MACnB,SAAS,MAAM,SAAS,WAAW,CAAC,SAAS,OAAO;AAAA,MACpD,OAAM;AAAA,MACN,WAAW;AAAA,QACT;AAAA,QACA,SAAS,UACL,iDACA;AAAA,QACJ,SAAS,UAAU;AAAA,MACrB;AAAA,MAEA;AAAA,wBAAAD,KAAC,cAAW,WAAU,eAAc;AAAA,QAAE;AAAA;AAAA;AAAA,EAExC;AAEJ;;;AD+GM,SAEI,OAAAE,MAFJ,QAAAC,aAAA;AAtDC,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAAuB;AACrB,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,cAAc,uBAAuB;AAAA,IACzC;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AAED,WAAS,OAAO,QAAgB;AAC9B,QAAI,CAAC,SAAS,SAAU;AACxB,UAAM,OAAO,OAAO,KAAK;AAGzB,QAAI,YAAY,cAAc,YAAY,UAAU;AAClD,UAAI,YAAY,YAAa,qBAAoB,YAAY,WAAW;AACxE;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,YAAY,WAAW,WAAW,EAAG;AAClD,aAAS,MAAM,YAAY,YAAY,UAAU,YAAY,CAAC,CAAC;AAC/D,aAAS,EAAE;AACX,gBAAY,MAAM;AAClB,cAAU,cAAc;AAAA,EAC1B;AAEA,SACE,gBAAAD;AAAA,IAAC;AAAA;AAAA,MACC,WACE,aACA;AAAA,MAGF,0BAAAC,MAAC,SAAI,WAAU,UAAS,OAAO,EAAE,SAAS,GACvC;AAAA,kBACC,gBAAAD,KAAC,QAAG,WAAU,8EACX,mBACH,IACE;AAAA,QACH,aACC,gBAAAA,KAAC,OAAE,WAAU,mFACV,sBACH,IAEA,UAAU,gBAAAA,KAAC,SAAI,WAAU,QAAO,IAAK;AAAA,QAEvC,gBAAAA;AAAA,UAAC;AAAA;AAAA,YACC,WAAW,qBAAqB;AAAA,YAChC;AAAA,YACA,UAAU;AAAA,YACV,UAAU,MAAM,OAAO,KAAK;AAAA,YAC5B;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAS;AAAA,YACT,0BAAwB;AAAA,YACxB;AAAA,YACA,aAAa,YAAY;AAAA,YACzB,UAAU,YAAY,CAAC,UAAU,KAAK,YAAY,SAAS,KAAK,IAAI;AAAA,YACpE;AAAA,YACA,cAAc,YAAY;AAAA,YAC1B,aAAa,YAAY;AAAA,YACzB,SACE,WACI;AAAA,cACE,GAAG,SAAS;AAAA;AAAA;AAAA;AAAA,cAIZ,kBACE,2BACA;AAAA,YACJ,IACA;AAAA,YAEN,UAAU,SAAS,gBAAAA,KAAC,wBAAqB,UAAoB;AAAA,YAC7D,UACE,QAAQ,gBAAAA,KAAC,yBAAsB,eAAc,QAAQ,GAAG,OAAO,IAAK;AAAA;AAAA,QAExE;AAAA,QACC,SAAS,gBAAAA,KAAC,SAAI,WAAU,QAAQ,kBAAO,IAAS;AAAA,SACnD;AAAA;AAAA,EACF;AAEJ;","names":["jsx","jsxs","jsx","jsxs"]}
+{"version":3,"sources":["../../src/chat-react/composer-agent-controls.tsx","../../src/chat-react/entry-composer.tsx","../../src/chat-react/composer-mode-controls.tsx"],"sourcesContent":["import { useCallback, useMemo, useRef } from 'react'\nimport {\n  AgentSessionControls,\n  type AgentSessionProfileControl,\n} from '@tangle-network/sandbox-ui/chat'\nimport { canonicalModelId } from '@tangle-network/sandbox-ui/dashboard'\nimport type { ModelInfo } from '@tangle-network/sandbox-ui/dashboard'\n// Browser-safe: model-catalog.ts imports nothing. Taken from the source module\n// rather than the `/catalog` subpath so this stays one build graph.\nimport { isChatCapableModel, type RouterModel } from '../runtime/model-catalog'\nimport type { HarnessType, ReasoningEffort, ReasoningLevel } from './types'\n\n/**\n * The model half of the composer's agent identity. `models` is the catalog the\n * picker renders; `value` may be a bare or a canonical (provider-prefixed) id —\n * the adapter maps it to canonical form for the picker and hands the canonical\n * id back to `onChange`, so a product that stores bare ids only has to accept\n * canonical ones in its setter.\n */\nexport interface ComposerModelSelection {\n  value: string\n  onChange: (next: string) => void\n  models: ModelInfo[]\n  loading?: boolean\n  disabled?: boolean\n}\n\nexport interface ComposerHarnessSelection {\n  value: HarnessType\n  onChange: (next: HarnessType) => void\n  /** Restrict the offered backends. Omit to take the context default. */\n  available?: ReadonlyArray<HarnessType>\n  disabled?: boolean\n  /**\n   * A thread's sidecar session is pinned to one harness at its first message,\n   * so once the thread has messages the picker locks. With `onNewChat` the\n   * locked chip becomes the informative lock (explains the binding + a button\n   * to start a fresh session on another backend).\n   */\n  locked?: boolean\n  lockReason?: string\n  onNewChat?: () => void\n}\n\nexport interface ComposerEffortSelection {\n  value: ReasoningLevel\n  onChange: (next: ReasoningLevel) => void\n  /**\n   * Depths this product's backend actually applies. Omit for the default set.\n   * `auto` is NOT a member: the picker adds that sentinel itself, so listing it\n   * here would offer it twice.\n   */\n  available?: ReadonlyArray<ReasoningEffort>\n  disabled?: boolean\n}\n\n/**\n * A selectable named bundle of persona and tool groups. The product resolves\n * the selected id to the runtime AgentProfile before creating or continuing a\n * session; the composer only needs the display catalog and persistence hooks.\n */\nexport type ComposerProfileSelection = AgentSessionProfileControl\n\nexport interface ComposerAgentControlsProps {\n  model: ComposerModelSelection\n  /** Omit on a router-backed composer: a direct model call has no CLI backend,\n   *  so the picker would be inert. Model + effort still render. */\n  harness?: ComposerHarnessSelection\n  /** Universal named agent profile: persona + tool groups, independent of backend. */\n  profile?: ComposerProfileSelection\n  effort?: ComposerEffortSelection\n  className?: string\n  /**\n   * Which surface the controls live on. `'chat'` (the default) drops the\n   * shell-only `cli-base` backend — it has no conversational agent — and tells\n   * the shared control to use its chat-only default set. It also drops models\n   * that cannot serve a text turn (image / TTS / embedding / audio-in) from\n   * the model picker. `'all'` keeps every backend and every model for non-chat\n   * / scheduled surfaces.\n   */\n  context?: 'chat' | 'all'\n  /**\n   * Trigger layout. `'responsive'` (the default) lays the pickers out in a\n   * row on wider screens and uses a compact gear on narrow screens. `'combined'`\n   * collapses the pickers behind one\n   * labeled trigger reading the current selection (`harness · model · effort`).\n   * `'gear'` uses an anonymous gear icon instead of the label; `'inline'` lays\n   * the pickers out in a row. `'responsive'` uses the labeled trigger on wider\n   * screens and the compact gear on narrow screens so Send stays reachable.\n   */\n  layout?: 'inline' | 'gear' | 'combined' | 'responsive'\n  /**\n   * Where the pickers open. `'down'` pins them downward for a composer floating\n   * in open space (the centered entry surface) so a tall menu can't flip up over\n   * the heading. Defaults to `'auto'` (collision-aware).\n   */\n  menuPlacement?: 'auto' | 'down'\n  /**\n   * Restrict the model catalog to what the selected harness can run instead of\n   * letting an incompatible model snap the harness. ON by default: a workspace\n   * harness is sandbox-bound, and a silent swap tears down and recreates the\n   * sandbox. Turn OFF only on a model-first surface with no bound sandbox.\n   */\n  filterModelsToHarness?: boolean\n}\n\n/**\n * The chat copilot must never offer `cli-base`: it is a shell-only backend with\n * no conversational agent. sandbox-ui's `context='chat'` drops it from the\n * default set, but an explicit `available` list (a plan-filtered one may include\n * `cli-base`) overrides that trim. So strip it here at the data layer whenever\n * the surface is chat — no `cli-base` ever reaches render.\n */\nfunction harnessesForContext(\n  available: ReadonlyArray<HarnessType> | undefined,\n  context: 'chat' | 'all',\n): ReadonlyArray<HarnessType> | undefined {\n  if (!available) return available\n  if (context !== 'chat') return available\n  return available.filter((h) => h !== 'cli-base')\n}\n\n/**\n * The model-side twin of the harness trim above. Products hand the picker the\n * router's raw `/v1/models`, which lists every routeable endpoint — image\n * generators, TTS voices, embedding models, audio-in transcription. None of\n * them can serve a chat turn, and on the live catalogue that is 35 of 504\n * entries a user could pick and get a broken turn from.\n *\n * `context: 'all'` keeps the full list for non-chat surfaces.\n *\n * The selected model is never filtered out, whatever its modalities say: a\n * product may deliberately pin something exotic, and a picker whose own value\n * is missing from its list renders as blank.\n *\n * That escape hatch has to recognise BOTH spellings of the id. A product stores\n * whatever `onChange` handed it, and `onChange` hands back the canonical\n * provider-prefixed form — so a selection pinned before this trim existed is\n * stored as `openai/gpt-image-1` while the catalog entry's own `id` is the bare\n * `gpt-image-1`. Matching only the bare form drops exactly the model the guard\n * exists to keep, and the picker renders unset, which reads as data loss.\n */\nfunction modelsForContext(\n  models: ModelInfo[],\n  selectedId: string,\n  context: 'chat' | 'all',\n): ModelInfo[] {\n  if (context !== 'chat') return models\n  return models.filter(\n    (m) =>\n      m.id === selectedId ||\n      canonicalModelId(m) === selectedId ||\n      isChatCapableModel(m as unknown as RouterModel),\n  )\n}\n\n/**\n * The composer's agent-identity control: profile, backend, model, and\n * reasoning effort, over sandbox-ui's `AgentSessionControls`.\n *\n * This is an ADAPTER, not a second implementation. sandbox-ui owns the control\n * and the harness↔model coherence policy (the catalog is filtered to the\n * selected harness, the effort re-clamps to what the harness/model pair\n * supports, and a harness that ignores a picker is marked with its dead control\n * disabled). What lives here is the app-shell wiring every product otherwise\n * re-derives:\n *\n *  - MODEL-ID BOUNDARY. Products store bare ids (what a chat send body expects)\n *    while the picker matches on canonical provider-prefixed ids. The canonical\n *    form goes in; the canonical id comes back out to `onChange`.\n *  - HARNESS-SNAP SUPPRESSION. The shared control snaps the model whenever the\n *    harness changes, calling the model `onChange` synchronously with a default\n *    compatible model. A product that remembers a per-harness pick must ignore\n *    that snap, or it both discards the remembered pick and persists it under\n *    the wrong harness's key. The guard is armed for exactly the synchronous\n *    window of a harness change and disarmed on the next microtask, so it can\n *    never stay stuck — a later genuine pick is never swallowed, even when the\n *    harness change was a no-op.\n *  - CHAT-CONTEXT TRIM. On a chat surface, `cli-base` never reaches the harness\n *    picker and a non-chat model never reaches the model picker. Products feed\n *    the picker the router's raw model list, where 35 of 504 entries (image,\n *    TTS, embeddings, audio-in transcription) cannot serve a chat turn at all.\n *\n * Behavioral modes (a plan toggle) are NOT agent identity and do not belong\n * here — they dock on the other side of the composer via `controls`.\n */\nexport function ComposerAgentControls({\n  model,\n  harness,\n  profile,\n  effort,\n  className,\n  context = 'chat',\n  layout = 'responsive',\n  menuPlacement,\n  filterModelsToHarness = true,\n}: ComposerAgentControlsProps) {\n  const canonicalSelected = useMemo(() => {\n    const selected = model.models.find((m) => m.id === model.value)\n    if (selected) return canonicalModelId(selected)\n    // Already canonical, or the catalog has not loaded — pass through unchanged\n    // so a provider-prefixed id still matches once models arrive.\n    return model.value\n  }, [model.value, model.models])\n\n  const offeredModels = useMemo(\n    () => modelsForContext(model.models, model.value, context),\n    [model.models, model.value, context],\n  )\n\n  const harnessSwitching = useRef(false)\n  const harnessOnChange = harness?.onChange\n  const onHarnessChange = useCallback(\n    (next: HarnessType) => {\n      harnessSwitching.current = true\n      harnessOnChange?.(next)\n      queueMicrotask(() => {\n        harnessSwitching.current = false\n      })\n    },\n    [harnessOnChange],\n  )\n\n  const modelOnChange = model.onChange\n  const onModelChange = useCallback(\n    (canonical: string) => {\n      if (harnessSwitching.current) return\n      modelOnChange(canonical)\n    },\n    [modelOnChange],\n  )\n\n  const sharedProps = {\n    context,\n    menuPlacement,\n    filterModelsToHarness,\n    model: {\n      value: canonicalSelected,\n      onChange: onModelChange,\n      models: offeredModels,\n      loading: model.loading,\n      disabled: model.disabled,\n    },\n    harness: harness\n      ? {\n          value: harness.value,\n          onChange: onHarnessChange,\n          available: harnessesForContext(harness.available, context),\n          disabled: harness.disabled,\n          locked: harness.locked,\n          lockReason: harness.lockReason,\n          onNewChat: harness.onNewChat,\n        }\n      : undefined,\n    profile,\n    reasoning: effort\n      ? {\n          value: effort.value,\n          onChange: effort.onChange,\n          available: effort.available,\n          disabled: effort.disabled,\n        }\n      : undefined,\n  }\n\n  if (layout === 'responsive') {\n    return (\n      <>\n        <AgentSessionControls\n          {...sharedProps}\n          className={className ? `hidden sm:flex ${className}` : 'hidden sm:flex'}\n          layout=\"inline\"\n        />\n        <AgentSessionControls\n          {...sharedProps}\n          className={className ? `flex sm:hidden ${className}` : 'flex sm:hidden'}\n          layout=\"gear\"\n        />\n      </>\n    )\n  }\n\n  return (\n    <AgentSessionControls\n      className={className}\n      {...sharedProps}\n      layout={layout}\n    />\n  )\n}\n","import { useState, type ReactNode } from 'react'\nimport { AgentComposer } from '@tangle-network/sandbox-ui/chat'\nimport { ATTACHMENT_ACCEPT, useComposerAttachments } from '../web-react/use-composer-attachments'\nimport type { UseFileMentionsResult } from '../web-react/use-file-mentions'\nimport type { ChatAttachmentInput, FileMention } from '../chat-routes/wire'\nimport {\n  ComposerAgentControls,\n  type ComposerAgentControlsProps,\n} from './composer-agent-controls'\nimport { ComposerModeControls } from './composer-mode-controls'\nimport type { ComposerPlanModeSelection } from './types'\n\nexport interface EntryComposerProps {\n  /** The one line above the input. Domain copy — always a product parameter. */\n  heading?: ReactNode\n  /** Optional supporting line under the heading. */\n  subheading?: ReactNode\n  placeholder?: string\n  initialValue?: string\n  sendLabel?: string\n  disabled?: boolean\n  /**\n   * Agent identity (profile/backend/model/effort). Pass it and the control row renders;\n   * omit it and the composer ships without one. Omitting is a real choice for a\n   * surface with nothing to choose — it should never be an oversight, which is\n   * why this is one prop rather than a free-form slot a caller can forget.\n   */\n  agent?: ComposerAgentControlsProps\n  /**\n   * Product-specific behavioral controls docked on the LEFT. A mode is an\n   * on/off switch, not a value picker, so it sits apart from agent identity.\n   * For the standard plan-approval control, prefer `planMode`.\n   */\n  modes?: ReactNode\n  /**\n   * Standard plan-approval mode. Pass only when the selected backend supports\n   * it; omitted means the control is not rendered.\n   */\n  planMode?: ComposerPlanModeSelection\n  /**\n   * Upload endpoint for staged attachments. Omit and the attach affordance is\n   * hidden — a composer with no place to put a file must not offer one.\n   */\n  uploadUrl?: string\n  accept?: string\n  onAttachmentError?: (reason: string) => void\n  onRejectFiles?: Parameters<typeof AgentComposer>[0]['onRejectFiles']\n  /**\n   * `@`-file mentions. The hook itself is shared (`useFileMentions`), but the\n   * cold-box policy around it — whether pressing `@` is worth starting a\n   * sandbox — is a per-surface product call, so the result is injected rather\n   * than created here.\n   */\n  mentions?: UseFileMentionsResult\n  mentionPopoverClassName?: string\n  /** Rendered under the composer: suggestion pills, an onboarding nudge, a\n   *  disclaimer. All domain copy. */\n  footer?: ReactNode\n  /** Block submit until a persisted selection has resolved against the catalog,\n   *  so the first turn cannot go out under the wrong model. Defaults to true. */\n  ready?: boolean\n  onSubmit: (\n    prompt: string,\n    attachments: ChatAttachmentInput[],\n    mentions: FileMention[],\n  ) => void\n  className?: string\n  composerClassName?: string\n  /** Max width of the centered column. Defaults to the fleet's 820px. */\n  maxWidth?: number\n}\n\n/**\n * `EntryComposer` — the centered \"what do you want to work on?\" surface a\n * product shows before a conversation exists (a new thread, an empty session,\n * a workspace overview).\n *\n * It exists because three products each grew their own, and they drifted into\n * three different capability sets rather than three different looks: one lost\n * the attach button, one lost the model and effort pickers entirely, one\n * hand-rolled a `<textarea>` and wired pickers from three separate packages\n * into one row. The composer, the pickers, the attachment queue and the mention\n * index were all ALREADY shared — what was not shared was the assembly, so\n * every product re-derived which controls an entry surface gets, and each\n * re-derivation dropped a different one.\n *\n * Mechanism lives here: layout, the attachment queue, the mention wiring, the\n * submit gate (nothing sends while an upload is pending or failed, or before\n * the model selection has resolved). Domain stays a parameter: `heading`,\n * `placeholder`, `footer` (suggestion pills, disclaimers) and the selections\n * themselves.\n *\n * The docked in-thread composer is NOT this component — it renders\n * `AgentComposer` directly with the same {@link ComposerAgentControls}, because\n * a docked composer has a transcript above it and no hero layout.\n */\nexport function EntryComposer({\n  heading,\n  subheading,\n  placeholder,\n  initialValue = '',\n  sendLabel,\n  disabled,\n  agent,\n  modes,\n  planMode,\n  uploadUrl,\n  accept = ATTACHMENT_ACCEPT,\n  onAttachmentError,\n  onRejectFiles,\n  mentions,\n  mentionPopoverClassName,\n  footer,\n  ready = true,\n  onSubmit,\n  className,\n  composerClassName,\n  maxWidth = 820,\n}: EntryComposerProps) {\n  const [value, setValue] = useState(initialValue)\n  const attachments = useComposerAttachments({\n    uploadUrl,\n    enabled: !!uploadUrl,\n    onReject: onAttachmentError,\n    onError: onAttachmentError,\n  })\n\n  function submit(prompt: string) {\n    if (!ready || disabled) return\n    const next = prompt.trim()\n    // A pending or failed upload must not send: the turn would reference an\n    // attachment the store does not have. Surface why rather than no-op'ing.\n    if (attachments.hasPending || attachments.hasError) {\n      if (attachments.blockReason) onAttachmentError?.(attachments.blockReason)\n      return\n    }\n    if (!next && attachments.references.length === 0) return\n    onSubmit(next, attachments.references, mentions?.mentions ?? [])\n    setValue('')\n    attachments.clear()\n    mentions?.clearMentions()\n  }\n\n  return (\n    <div\n      className={\n        className ??\n        'relative flex flex-1 flex-col items-center justify-center overflow-hidden bg-background px-5'\n      }\n    >\n      <div className=\"w-full\" style={{ maxWidth }}>\n        {heading ? (\n          <h2 className=\"mb-4 text-center text-[1.75rem] font-medium tracking-tight text-foreground\">\n            {heading}\n          </h2>\n        ) : null}\n        {subheading ? (\n          <p className=\"mx-auto mb-9 max-w-md text-center text-sm leading-relaxed text-muted-foreground\">\n            {subheading}\n          </p>\n        ) : (\n          heading ? <div className=\"mb-7\" /> : null\n        )}\n        <AgentComposer\n          className={composerClassName ?? 'vt-composer'}\n          value={value}\n          onChange={setValue}\n          onSubmit={() => submit(value)}\n          placeholder={placeholder}\n          sendLabel={sendLabel}\n          disabled={disabled}\n          autoFocus\n          canSubmitAttachmentsOnly\n          accept={accept}\n          attachments={attachments.composerFiles}\n          onAttach={uploadUrl ? (files) => void attachments.addFiles(files) : undefined}\n          onRejectFiles={onRejectFiles}\n          onRemoveFile={attachments.removeAttachment}\n          onRetryFile={attachments.retry}\n          mention={\n            mentions\n              ? {\n                  ...mentions.mention,\n                  // Sidebar tone + hairline so the popover reads as app chrome\n                  // (the same treatment the picker menus get) instead of the\n                  // brighter overlay tone the component defaults to.\n                  popoverClassName:\n                    mentionPopoverClassName ??\n                    'bg-surface-container-low border-[var(--md3-outline-variant)]',\n                }\n              : undefined\n          }\n          controls={modes ?? <ComposerModeControls planMode={planMode} />}\n          trailing={\n            agent ? <ComposerAgentControls menuPlacement=\"down\" {...agent} /> : undefined\n          }\n        />\n        {footer ? <div className=\"mt-7\">{footer}</div> : null}\n      </div>\n    </div>\n  )\n}\n","import { ListChecks } from 'lucide-react'\nimport { cn } from '@tangle-network/sandbox-ui/utils'\nimport type { ComposerPlanModeSelection } from './types'\n\nexport interface ComposerModeControlsProps {\n  /**\n   * Plan-approval mode. Products pass it only when the selected backend can\n   * propose a plan and wait for approval; omitted means nothing renders.\n   */\n  planMode?: ComposerPlanModeSelection\n}\n\n/**\n * The shared plan-mode toggle for the left side of an agent composer.\n * Plan mode is a behavioral switch, not part of the profile/backend/model/\n * thinking identity controls on the right.\n */\nexport function ComposerModeControls({ planMode }: ComposerModeControlsProps) {\n  if (!planMode) return null\n\n  return (\n    <button\n      type=\"button\"\n      aria-pressed={planMode.enabled}\n      disabled={planMode.saving}\n      onClick={() => planMode.setEnabled(!planMode.enabled)}\n      title=\"Plan mode: the agent proposes a plan you approve before it executes\"\n      className={cn(\n        // Inset ring: this chip sits in a composer row that clips its overflow,\n        // so an outward ring loses three of its four sides. Only the offset is\n        // overridden — width and colour stay with the tokens.\n        'inline-flex h-7 items-center gap-1 rounded-full border px-2.5 text-xs transition-colors focus-visible:[outline-offset:-2px]',\n        planMode.enabled\n          ? 'border-primary/50 bg-primary/10 text-primary'\n          : 'border-border bg-transparent text-muted-foreground hover:text-foreground',\n        planMode.saving && 'opacity-60',\n      )}\n    >\n      <ListChecks className=\"h-3.5 w-3.5\" />\n      Plan\n    </button>\n  )\n}\n"],"mappings":";;;;;;;;;;;;AAAA,SAAS,aAAa,SAAS,cAAc;AAC7C;AAAA,EACE;AAAA,OAEK;AACP,SAAS,wBAAwB;AAsQ3B,mBACE,KADF;AA1JN,SAAS,oBACP,WACA,SACwC;AACxC,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,YAAY,OAAQ,QAAO;AAC/B,SAAO,UAAU,OAAO,CAAC,MAAM,MAAM,UAAU;AACjD;AAsBA,SAAS,iBACP,QACA,YACA,SACa;AACb,MAAI,YAAY,OAAQ,QAAO;AAC/B,SAAO,OAAO;AAAA,IACZ,CAAC,MACC,EAAE,OAAO,cACT,iBAAiB,CAAC,MAAM,cACxB,mBAAmB,CAA2B;AAAA,EAClD;AACF;AAgCO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,SAAS;AAAA,EACT;AAAA,EACA,wBAAwB;AAC1B,GAA+B;AAC7B,QAAM,oBAAoB,QAAQ,MAAM;AACtC,UAAM,WAAW,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,KAAK;AAC9D,QAAI,SAAU,QAAO,iBAAiB,QAAQ;AAG9C,WAAO,MAAM;AAAA,EACf,GAAG,CAAC,MAAM,OAAO,MAAM,MAAM,CAAC;AAE9B,QAAM,gBAAgB;AAAA,IACpB,MAAM,iBAAiB,MAAM,QAAQ,MAAM,OAAO,OAAO;AAAA,IACzD,CAAC,MAAM,QAAQ,MAAM,OAAO,OAAO;AAAA,EACrC;AAEA,QAAM,mBAAmB,OAAO,KAAK;AACrC,QAAM,kBAAkB,SAAS;AACjC,QAAM,kBAAkB;AAAA,IACtB,CAAC,SAAsB;AACrB,uBAAiB,UAAU;AAC3B,wBAAkB,IAAI;AACtB,qBAAe,MAAM;AACnB,yBAAiB,UAAU;AAAA,MAC7B,CAAC;AAAA,IACH;AAAA,IACA,CAAC,eAAe;AAAA,EAClB;AAEA,QAAM,gBAAgB,MAAM;AAC5B,QAAM,gBAAgB;AAAA,IACpB,CAAC,cAAsB;AACrB,UAAI,iBAAiB,QAAS;AAC9B,oBAAc,SAAS;AAAA,IACzB;AAAA,IACA,CAAC,aAAa;AAAA,EAChB;AAEA,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,OAAO;AAAA,MACP,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,SAAS,MAAM;AAAA,MACf,UAAU,MAAM;AAAA,IAClB;AAAA,IACA,SAAS,UACL;AAAA,MACE,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,MACV,WAAW,oBAAoB,QAAQ,WAAW,OAAO;AAAA,MACzD,UAAU,QAAQ;AAAA,MAClB,QAAQ,QAAQ;AAAA,MAChB,YAAY,QAAQ;AAAA,MACpB,WAAW,QAAQ;AAAA,IACrB,IACA;AAAA,IACJ;AAAA,IACA,WAAW,SACP;AAAA,MACE,OAAO,OAAO;AAAA,MACd,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,IACnB,IACA;AAAA,EACN;AAEA,MAAI,WAAW,cAAc;AAC3B,WACE,iCACE;AAAA;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ,WAAW,YAAY,kBAAkB,SAAS,KAAK;AAAA,UACvD,QAAO;AAAA;AAAA,MACT;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ,WAAW,YAAY,kBAAkB,SAAS,KAAK;AAAA,UACvD,QAAO;AAAA;AAAA,MACT;AAAA,OACF;AAAA,EAEJ;AAEA,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACC,GAAG;AAAA,MACJ;AAAA;AAAA,EACF;AAEJ;;;ACjSA,SAAS,gBAAgC;AACzC,SAAS,qBAAqB;;;ACD9B,SAAS,kBAAkB;AAC3B,SAAS,UAAU;AAoBf,SAiBE,OAAAA,MAjBF,QAAAC,aAAA;AAJG,SAAS,qBAAqB,EAAE,SAAS,GAA8B;AAC5E,MAAI,CAAC,SAAU,QAAO;AAEtB,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,gBAAc,SAAS;AAAA,MACvB,UAAU,SAAS;AAAA,MACnB,SAAS,MAAM,SAAS,WAAW,CAAC,SAAS,OAAO;AAAA,MACpD,OAAM;AAAA,MACN,WAAW;AAAA;AAAA;AAAA;AAAA,QAIT;AAAA,QACA,SAAS,UACL,iDACA;AAAA,QACJ,SAAS,UAAU;AAAA,MACrB;AAAA,MAEA;AAAA,wBAAAD,KAAC,cAAW,WAAU,eAAc;AAAA,QAAE;AAAA;AAAA;AAAA,EAExC;AAEJ;;;AD4GM,SAEI,OAAAE,MAFJ,QAAAC,aAAA;AAtDC,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EACT;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AACb,GAAuB;AACrB,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,YAAY;AAC/C,QAAM,cAAc,uBAAuB;AAAA,IACzC;AAAA,IACA,SAAS,CAAC,CAAC;AAAA,IACX,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AAED,WAAS,OAAO,QAAgB;AAC9B,QAAI,CAAC,SAAS,SAAU;AACxB,UAAM,OAAO,OAAO,KAAK;AAGzB,QAAI,YAAY,cAAc,YAAY,UAAU;AAClD,UAAI,YAAY,YAAa,qBAAoB,YAAY,WAAW;AACxE;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,YAAY,WAAW,WAAW,EAAG;AAClD,aAAS,MAAM,YAAY,YAAY,UAAU,YAAY,CAAC,CAAC;AAC/D,aAAS,EAAE;AACX,gBAAY,MAAM;AAClB,cAAU,cAAc;AAAA,EAC1B;AAEA,SACE,gBAAAD;AAAA,IAAC;AAAA;AAAA,MACC,WACE,aACA;AAAA,MAGF,0BAAAC,MAAC,SAAI,WAAU,UAAS,OAAO,EAAE,SAAS,GACvC;AAAA,kBACC,gBAAAD,KAAC,QAAG,WAAU,8EACX,mBACH,IACE;AAAA,QACH,aACC,gBAAAA,KAAC,OAAE,WAAU,mFACV,sBACH,IAEA,UAAU,gBAAAA,KAAC,SAAI,WAAU,QAAO,IAAK;AAAA,QAEvC,gBAAAA;AAAA,UAAC;AAAA;AAAA,YACC,WAAW,qBAAqB;AAAA,YAChC;AAAA,YACA,UAAU;AAAA,YACV,UAAU,MAAM,OAAO,KAAK;AAAA,YAC5B;AAAA,YACA;AAAA,YACA;AAAA,YACA,WAAS;AAAA,YACT,0BAAwB;AAAA,YACxB;AAAA,YACA,aAAa,YAAY;AAAA,YACzB,UAAU,YAAY,CAAC,UAAU,KAAK,YAAY,SAAS,KAAK,IAAI;AAAA,YACpE;AAAA,YACA,cAAc,YAAY;AAAA,YAC1B,aAAa,YAAY;AAAA,YACzB,SACE,WACI;AAAA,cACE,GAAG,SAAS;AAAA;AAAA;AAAA;AAAA,cAIZ,kBACE,2BACA;AAAA,YACJ,IACA;AAAA,YAEN,UAAU,SAAS,gBAAAA,KAAC,wBAAqB,UAAoB;AAAA,YAC7D,UACE,QAAQ,gBAAAA,KAAC,yBAAsB,eAAc,QAAQ,GAAG,OAAO,IAAK;AAAA;AAAA,QAExE;AAAA,QACC,SAAS,gBAAAA,KAAC,SAAI,WAAU,QAAQ,kBAAO,IAAS;AAAA,SACnD;AAAA;AAAA,EACF;AAEJ;","names":["jsx","jsxs","jsx","jsxs"]}

package/dist/chat-routes/index.d.ts

@@ -6,7 +6,7 @@ import { C as ChatMessagePart, a as ChatAttachmentPart, e as ChatMentionPart } f
 import { InteractionAnswerRoute, InteractionAnswerRouteOptions } from '../interactions/index.js';
 import { PersistedChatMessageForTurn } from '../stream/index.js';
 import { T as TurnEventStore } from '../turn-buffer-COMQUwO2.js';
-import { M as ModelFailoverAttempt } from '../failover-D-3UXXTb.js';
+import { M as ModelFailoverAttempt, a as ModelFailoverExhaustedError } from '../failover-D-3UXXTb.js';
 export { D as DEFAULT_STALE_TURN_LOCK_GRACE_MS, a as DEFAULT_TERMINAL_TURN_LOCK_GRACE_MS, R as ReconcileStaleTurnLockOptions, b as ReconcileStaleTurnLockResult, S as StaleTurnLockSandboxProbeResult, c as StaleTurnLockSessionProbeResult, r as reconcileStaleTurnLock } from '../stale-turn-lock-DucQzvXu.js';
 import { J as JsonRecord } from '../stream-normalizer-DKRxyVlZ.js';
 import { SandboxInstance } from '@tangle-network/sandbox';
@@ -785,8 +785,8 @@ declare function createChatTurnRoutes<TContext = void>(options: CreateChatTurnRo
  *   platform flake that a same-model re-run recovers (8 hard cases: 7/8
  *   delivered on the first pass, 8/8 with one re-run, at a cost of 1 extra turn
  *   in 9). Default `0`, so the behavior is unchanged unless a product asks.
- * - A chain of length 1 costs nothing: one attempt, no extra call, no added
- *   latency, byte-identical to no failover at all.
+ * - A responsive chain of length 1 costs no extra call or latency and remains
+ *   byte-identical to no failover. A silent chain is now deliberately bounded.
  */
 
 /**
@@ -834,6 +834,10 @@ type OpenModelStream = (args: {
     model: string;
     /** 1 for the preferred model, 2 for the first fallback, and so on. */
     attempt: number;
+    /** Aborted when this attempt times out, is abandoned, or finishes. Forward
+     *  this to `streamSandboxPrompt(..., { signal })` so a blocked transport is
+     *  cancelled immediately rather than only receiving iterator.return(). */
+    signal: AbortSignal;
 }) => AsyncIterable<unknown> | Promise<AsyncIterable<unknown>>;
 /** Fired when a model is abandoned and the next one is about to be tried. */
 interface ModelFallbackInfo {
@@ -846,6 +850,19 @@ interface ModelFailoverStreamOptions {
     /** Preferred model first, then fallbacks in descending preference. */
     models: readonly string[];
     open: OpenModelStream;
+    /**
+     * Maximum time to open/start one model's event source, including its first
+     * iterator pull. Default 120 seconds, matching the sandbox provisioning
+     * ceiling so cold infrastructure startup is bounded independently from
+     * provider inference.
+     */
+    openTimeoutMs?: number;
+    /**
+     * Hard deadline from the source's first lifecycle event to its first
+     * answer-bearing event. Default 60 seconds. Processing/lifecycle events do
+     * not commit the attempt and do not extend this deadline.
+     */
+    firstResponseTimeoutMs?: number;
     /** Override the commit-point rule. Default {@link isCommittingSandboxEvent}. */
     isCommitting?: (event: unknown) => boolean;
     onFallback?: (info: ModelFallbackInfo) => void;
@@ -886,6 +903,24 @@ interface ModelFailoverStreamHandle {
     /** True when the preferred model did not serve — the attributability signal. */
     usedFallback(): boolean;
 }
+/** Default ceiling for opening/starting one source through its first event. */
+declare const DEFAULT_MODEL_STREAM_OPEN_TIMEOUT_MS = 120000;
+/** Default ceiling for the first answer-bearing event after the source's first event. */
+declare const DEFAULT_MODEL_FIRST_RESPONSE_TIMEOUT_MS = 60000;
+/** Structured timeout codes surfaced by the producer on final exhaustion. */
+type ModelAttemptTimeoutCode = 'model_stream_open_timeout' | 'provider_first_response_timeout';
+/** Every configured model was exhausted and the final one timed out. */
+declare class ModelFailoverTimeoutError extends ModelFailoverExhaustedError {
+    readonly code: ModelAttemptTimeoutCode;
+    readonly model: string;
+    readonly timeoutMs: number;
+    constructor(input: {
+        attempts: ModelFailoverAttempt[];
+        code: ModelAttemptTimeoutCode;
+        model: string;
+        timeoutMs: number;
+    });
+}
 /**
  * Hard ceiling on same-model re-runs. A turn that comes back blank three times
  * running is not a flake this can retry away, and each pass costs a full
@@ -908,9 +943,11 @@ declare function resolveEmptyTurnRetries(value: number | undefined): number;
  * Zero added latency on the happy path: the preferred model is opened first and,
  * the moment it emits anything meaningful, its events flow straight through.
  *
- * @throws ModelFailoverExhaustedError when every model's upstream is down, and
+ * @throws ModelFailoverTimeoutError when the final model times out,
+ *         ModelFailoverExhaustedError when every model's upstream is down, and
  *         re-throws a non-outage error from the FIRST model without walking the
- *         chain (both behaviors inherited from `runWithModelFailover`).
+ *         chain (the latter behaviors are inherited from
+ *         `runWithModelFailover`).
  */
 declare function streamWithModelFailover(options: ModelFailoverStreamOptions): ModelFailoverStreamHandle;
 
@@ -993,6 +1030,14 @@ interface SandboxChatProducerOptions {
     /** Opt out of failover while still using {@link openEvents}. `false` collapses
      *  the chain to `model` alone. */
     modelFailover?: false;
+    /** Maximum time to open/start one model event source through its first event.
+     *  Default 120 seconds. This is separate from provider first-output latency
+     *  so cold sandbox startup is not mislabeled as an inference failure. */
+    openTimeoutMs?: number;
+    /** Hard deadline after the source's first lifecycle event for the first
+     *  answer-bearing event. Default 60 seconds. Processing/lifecycle events do
+     *  not extend it. */
+    firstResponseTimeoutMs?: number;
     /** Fired when a model is abandoned mid-chain (telemetry/alerting). The user
      *  already sees a transcript notice; this is for the operator. */
     onModelFallback?: (info: ModelFallbackInfo) => void;
@@ -1121,6 +1166,12 @@ interface DetachedTurnOptions {
     fallbackModels?: SandboxChatProducerOptions['fallbackModels'];
     /** Opt out of failover while still using {@link openEvents}. */
     modelFailover?: false;
+    /** Maximum time to open/start one model event source through its first event.
+     *  Forwarded to the producer; default 120 seconds. */
+    openTimeoutMs?: SandboxChatProducerOptions['openTimeoutMs'];
+    /** Hard deadline after the source's first lifecycle event for the first
+     *  answer-bearing event. Forwarded to the producer; default 60 seconds. */
+    firstResponseTimeoutMs?: SandboxChatProducerOptions['firstResponseTimeoutMs'];
     /** Fired when a model is abandoned mid-chain (telemetry/alerting). */
     onModelFallback?: SandboxChatProducerOptions['onModelFallback'];
     /** The PREFERRED model. Recorded on the persisted assistant message + usage
@@ -1787,4 +1838,4 @@ interface PromoteAgentFilePartOptions {
 /** Promote a part of an agent file with optional byte limits and MIME type detection */
 declare function promoteAgentFilePart(options: PromoteAgentFilePartOptions): Promise<PromoteFilePartResult>;
 
-export { type AssistantDraftSnapshot, type AssistantDraftStore, type AssistantDraftWriter, type AssistantDraftWriterOptions, type AssistantRowValues, type AttachmentPathArgs, type AttachmentPathCheck, type AttachmentReadResult, type AttachmentUploadAuthorization, type AttachmentWriteResult, type BuildDispatchPartsInput, ChatAttachmentKind, type ChatRouteDurableProjection, type ChatRouteDurableProjectionLogger, type ChatRouteEvent, type ChatTurnAuthorization, type ChatTurnAuthorizeArgs, type ChatTurnCompleteInput, ChatTurnFilePartInput, type ChatTurnGateResult, type ChatTurnHeartbeat, type ChatTurnInputPatch, type ChatTurnLifecycle, type ChatTurnLifecycleComplete, type ChatTurnLifecycleError, type ChatTurnLifecycleStart, type ChatTurnLock, type ChatTurnLockResult, type ChatTurnMessageStore, type ChatTurnModelAttribution, type ChatTurnModelFailover, ChatTurnPartInput, type ChatTurnProduceArgs, ChatTurnRequestPayload, type ChatTurnRouteProducer, type ChatTurnRoutes, type ChatTurnUsage, type CompletedSandboxTurnSource, type CreateAttachmentUploadRouteOptions, type CreateChatTurnRoutesOptions, type CreateUploadRouteOptions, type DetachedTurnFinal, type DetachedTurnOptions, type DetachedTurnParts, type DetachedTurnResult, type DispatchPartsOutcome, type DraftPersistenceTuning, type DraftStoredMessage, type EmptyTurnRetryInfo, type FilePartPromotionOutcome, MAX_EMPTY_TURN_RETRIES, type ModelFailoverStreamHandle, type ModelFailoverStreamOptions, type ModelFallbackInfo, type OpenModelStream, PROMOTE_MAX_FILE_BYTES, type PromoteAgentFilePartOptions, type PromoteFilePartResult, PromptInputPart, type RawAgentFilePart, type ReadAttachmentFn, type ReadCompletedSandboxTurnOptions, type ReadSandboxMentionFn, type ResolveChatAttachmentsOptions, type ResolveChatAttachmentsResult, type SandboxChatProducerOptions, type SandboxUploadSink, UPLOAD_INLINE_MAX_BYTES, UPLOAD_MAX_FILE_BYTES, type UploadAuthorization, type UploadedChatFile, type WriteAttachmentFn, assistantRowIdForTurn, buildDispatchParts, bytesToBase64, classifyTerminalFailure, createAssistantDraftWriter, createAttachmentUploadRoute, createChatTurnRoutes, createSandboxChatProducer, createUploadRoute, defaultValidateAttachmentPath, isCommittingSandboxEvent, isDraftContentEvent, normalizeChatPromptForSandbox, promoteAgentFilePart, readCompletedSandboxTurn, resolveChatAttachments, resolveEmptyTurnRetries, rowIdOf, runDetachedTurn, sanitizeUploadFilename, sniffMimeFromName, storeSupportsDraftPersistence, streamWithModelFailover, summarizeFailoverReason, withDurableChatProjection };
+export { type AssistantDraftSnapshot, type AssistantDraftStore, type AssistantDraftWriter, type AssistantDraftWriterOptions, type AssistantRowValues, type AttachmentPathArgs, type AttachmentPathCheck, type AttachmentReadResult, type AttachmentUploadAuthorization, type AttachmentWriteResult, type BuildDispatchPartsInput, ChatAttachmentKind, type ChatRouteDurableProjection, type ChatRouteDurableProjectionLogger, type ChatRouteEvent, type ChatTurnAuthorization, type ChatTurnAuthorizeArgs, type ChatTurnCompleteInput, ChatTurnFilePartInput, type ChatTurnGateResult, type ChatTurnHeartbeat, type ChatTurnInputPatch, type ChatTurnLifecycle, type ChatTurnLifecycleComplete, type ChatTurnLifecycleError, type ChatTurnLifecycleStart, type ChatTurnLock, type ChatTurnLockResult, type ChatTurnMessageStore, type ChatTurnModelAttribution, type ChatTurnModelFailover, ChatTurnPartInput, type ChatTurnProduceArgs, ChatTurnRequestPayload, type ChatTurnRouteProducer, type ChatTurnRoutes, type ChatTurnUsage, type CompletedSandboxTurnSource, type CreateAttachmentUploadRouteOptions, type CreateChatTurnRoutesOptions, type CreateUploadRouteOptions, DEFAULT_MODEL_FIRST_RESPONSE_TIMEOUT_MS, DEFAULT_MODEL_STREAM_OPEN_TIMEOUT_MS, type DetachedTurnFinal, type DetachedTurnOptions, type DetachedTurnParts, type DetachedTurnResult, type DispatchPartsOutcome, type DraftPersistenceTuning, type DraftStoredMessage, type EmptyTurnRetryInfo, type FilePartPromotionOutcome, MAX_EMPTY_TURN_RETRIES, type ModelAttemptTimeoutCode, type ModelFailoverStreamHandle, type ModelFailoverStreamOptions, ModelFailoverTimeoutError, type ModelFallbackInfo, type OpenModelStream, PROMOTE_MAX_FILE_BYTES, type PromoteAgentFilePartOptions, type PromoteFilePartResult, PromptInputPart, type RawAgentFilePart, type ReadAttachmentFn, type ReadCompletedSandboxTurnOptions, type ReadSandboxMentionFn, type ResolveChatAttachmentsOptions, type ResolveChatAttachmentsResult, type SandboxChatProducerOptions, type SandboxUploadSink, UPLOAD_INLINE_MAX_BYTES, UPLOAD_MAX_FILE_BYTES, type UploadAuthorization, type UploadedChatFile, type WriteAttachmentFn, assistantRowIdForTurn, buildDispatchParts, bytesToBase64, classifyTerminalFailure, createAssistantDraftWriter, createAttachmentUploadRoute, createChatTurnRoutes, createSandboxChatProducer, createUploadRoute, defaultValidateAttachmentPath, isCommittingSandboxEvent, isDraftContentEvent, normalizeChatPromptForSandbox, promoteAgentFilePart, readCompletedSandboxTurn, resolveChatAttachments, resolveEmptyTurnRetries, rowIdOf, runDetachedTurn, sanitizeUploadFilename, sniffMimeFromName, storeSupportsDraftPersistence, streamWithModelFailover, summarizeFailoverReason, withDurableChatProjection };

package/dist/chat-routes/index.js

@@ -99,6 +99,7 @@ import {
   planToPersistedPart
 } from "../chunk-YJMCRXQQ.js";
 import {
+  ModelFailoverExhaustedError,
   buildModelChain,
   isUpstreamUnavailable,
   readHttpStatusHint,
@@ -883,7 +884,7 @@ function isCommittingSandboxEvent(event) {
     }
     return true;
   }
-  if (type === "start" || type === "execution.started" || type === "status" || type === "model-processing" || type === "session.created" || type === "session.updated" || type === "session.idle" || type === "step-start" || type === "step-finish" || type === "turn" || type === "warning") {
+  if (type === "start" || type === "execution.started" || type === "status" || type === "model-processing" || type === "model.processing" || type === "session.created" || type === "session.updated" || type === "session.idle" || type === "step-start" || type === "step-finish" || type === "turn" || type === "warning") {
     return false;
   }
   return true;
@@ -912,6 +913,44 @@ function classifyTerminalFailure(event) {
   const code = asString(data?.errorCode) ?? asString(data?.code);
   return { outage, reason, ...code ? { code } : {} };
 }
+var DEFAULT_MODEL_STREAM_OPEN_TIMEOUT_MS = 12e4;
+var DEFAULT_MODEL_FIRST_RESPONSE_TIMEOUT_MS = 6e4;
+var ModelFailoverTimeoutError = class extends ModelFailoverExhaustedError {
+  code;
+  model;
+  timeoutMs;
+  constructor(input) {
+    super(input.attempts);
+    this.name = "ModelFailoverTimeoutError";
+    this.code = input.code;
+    this.model = input.model;
+    this.timeoutMs = input.timeoutMs;
+    this.message = input.code === "model_stream_open_timeout" ? `Opening the model event source for ${input.model} exceeded ${input.timeoutMs}ms.` : `Model ${input.model} produced no first answer-bearing event within ${input.timeoutMs}ms.`;
+  }
+};
+function resolveTimeoutMs(value, fallback, label) {
+  if (value === void 0) return fallback;
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new RangeError(`${label} must be a finite number greater than 0`);
+  }
+  return Math.max(1, Math.trunc(value));
+}
+var TIMED_OUT = /* @__PURE__ */ Symbol("model-attempt-timed-out");
+function deadlineAfter(timeoutMs) {
+  let timer;
+  const promise = new Promise((resolve) => {
+    timer = setTimeout(() => resolve(TIMED_OUT), timeoutMs);
+  });
+  return {
+    promise,
+    clear: () => {
+      if (timer !== void 0) {
+        clearTimeout(timer);
+        timer = void 0;
+      }
+    }
+  };
+}
 function isEmptyTerminalReceipt(event) {
   const record = asRecord(event);
   if (!record) return false;
@@ -940,24 +979,128 @@ async function closeIterator(iterator, log) {
 function streamWithModelFailover(options) {
   const committing = options.isCommitting ?? isCommittingSandboxEvent;
   const emptyTurnRetries = resolveEmptyTurnRetries(options.emptyTurnRetries);
+  const openTimeoutMs = resolveTimeoutMs(
+    options.openTimeoutMs,
+    DEFAULT_MODEL_STREAM_OPEN_TIMEOUT_MS,
+    "openTimeoutMs"
+  );
+  const firstResponseTimeoutMs = resolveTimeoutMs(
+    options.firstResponseTimeoutMs,
+    DEFAULT_MODEL_FIRST_RESPONSE_TIMEOUT_MS,
+    "firstResponseTimeoutMs"
+  );
   let serving;
   let trail = [];
   let fellBack = false;
   let attemptIndex = 0;
+  let finalTimeout;
   const drainOnce = async (model) => {
     attemptIndex += 1;
-    const source = await options.open({ model, attempt: attemptIndex });
-    const iterator = source[Symbol.asyncIterator]();
+    const controller = new AbortController();
+    const abort = () => {
+      if (!controller.signal.aborted) controller.abort();
+    };
+    const opening = Promise.resolve().then(() => options.open({
+      model,
+      attempt: attemptIndex,
+      signal: controller.signal
+    }));
+    const openDeadline = deadlineAfter(openTimeoutMs);
+    let opened;
+    try {
+      opened = await Promise.race([opening, openDeadline.promise]);
+    } catch (err) {
+      openDeadline.clear();
+      abort();
+      throw err;
+    }
+    if (opened === TIMED_OUT) {
+      openDeadline.clear();
+      abort();
+      void opening.then(
+        (lateSource) => {
+          try {
+            void closeIterator(lateSource[Symbol.asyncIterator](), options.log);
+          } catch (err) {
+            options.log?.("[chat-routes] closing a late model stream threw", {
+              error: err instanceof Error ? err.message : String(err)
+            });
+          }
+        },
+        (err) => {
+          options.log?.("[chat-routes] abandoned model stream open rejected after timeout", {
+            error: err instanceof Error ? err.message : String(err)
+          });
+        }
+      );
+      return {
+        outcome: {
+          committed: false,
+          error: `Opening the model event source for ${model} exceeded ${openTimeoutMs}ms`,
+          errorCode: "model_stream_open_timeout",
+          timeoutCode: "model_stream_open_timeout"
+        },
+        empty: false
+      };
+    }
+    const source = opened;
+    let iterator;
+    try {
+      iterator = source[Symbol.asyncIterator]();
+    } catch (err) {
+      openDeadline.clear();
+      abort();
+      throw err;
+    }
     const buffered = [];
+    let next;
+    try {
+      next = await Promise.race([
+        Promise.resolve(iterator.next()),
+        openDeadline.promise
+      ]);
+    } catch (err) {
+      openDeadline.clear();
+      abort();
+      void closeIterator(iterator, options.log);
+      throw err;
+    }
+    openDeadline.clear();
+    if (next === TIMED_OUT) {
+      abort();
+      void closeIterator(iterator, options.log);
+      return {
+        outcome: {
+          committed: false,
+          error: `Starting the model event source for ${model} exceeded ${openTimeoutMs}ms`,
+          errorCode: "model_stream_open_timeout",
+          timeoutCode: "model_stream_open_timeout"
+        },
+        empty: false
+      };
+    }
+    if (next.done) {
+      abort();
+      return { outcome: { committed: true, buffered, iterator: null, abort }, empty: true };
+    }
+    const firstResponseDeadline = deadlineAfter(firstResponseTimeoutMs);
     for (; ; ) {
-      const next = await iterator.next();
-      if (next.done) {
-        return { outcome: { committed: true, buffered, iterator: null }, empty: true };
-      }
       const event = next.value;
-      const failure = classifyTerminalFailure(event);
+      let failure;
+      let commits = false;
+      try {
+        failure = classifyTerminalFailure(event);
+        commits = !failure && committing(event);
+      } catch (err) {
+        firstResponseDeadline.clear();
+        abort();
+        void closeIterator(iterator, options.log);
+        throw err;
+      }
       if (failure?.outage) {
-        await closeIterator(iterator, options.log);
+        firstResponseDeadline.clear();
+        abort();
+        void closeIterator(iterator, options.log);
         return {
           outcome: {
             committed: false,
@@ -968,18 +1111,65 @@ function streamWithModelFailover(options) {
         };
       }
       buffered.push(event);
-      if (failure) return { outcome: { committed: true, buffered, iterator }, empty: false };
-      if (committing(event)) {
-        return { outcome: { committed: true, buffered, iterator }, empty: isEmptyTerminalReceipt(event) };
+      if (failure) {
+        firstResponseDeadline.clear();
+        return { outcome: { committed: true, buffered, iterator, abort }, empty: false };
+      }
+      if (commits) {
+        firstResponseDeadline.clear();
+        return { outcome: { committed: true, buffered, iterator, abort }, empty: isEmptyTerminalReceipt(event) };
+      }
+      try {
+        next = await Promise.race([
+          Promise.resolve(iterator.next()),
+          firstResponseDeadline.promise
+        ]);
+      } catch (err) {
+        firstResponseDeadline.clear();
+        abort();
+        void closeIterator(iterator, options.log);
+        throw err;
+      }
+      if (next === TIMED_OUT) {
+        firstResponseDeadline.clear();
+        abort();
+        void closeIterator(iterator, options.log);
+        return {
+          outcome: {
+            committed: false,
+            error: `Model ${model} produced no first answer-bearing event within ${firstResponseTimeoutMs}ms`,
+            errorCode: "provider_first_response_timeout",
+            timeoutCode: "provider_first_response_timeout"
+          },
+          empty: false
+        };
+      }
+      if (next.done) {
+        firstResponseDeadline.clear();
+        abort();
+        return { outcome: { committed: true, buffered, iterator: null, abort }, empty: true };
       }
     }
   };
   const probe = async (model) => {
+    finalTimeout = void 0;
     for (let retry = 0; ; retry += 1) {
       const pass = await drainOnce(model);
-      if (!pass.empty || retry >= emptyTurnRetries) return pass.outcome;
+      if (!pass.empty || retry >= emptyTurnRetries) {
+        if (!pass.outcome.committed && pass.outcome.timeoutCode) {
+          finalTimeout = {
+            code: pass.outcome.timeoutCode,
+            model,
+            timeoutMs: pass.outcome.timeoutCode === "model_stream_open_timeout" ? openTimeoutMs : firstResponseTimeoutMs
+          };
+        } else {
+          finalTimeout = void 0;
+        }
+        return pass.outcome;
+      }
       const iterator = pass.outcome.committed ? pass.outcome.iterator : null;
-      if (iterator) await closeIterator(iterator, options.log);
+      if (pass.outcome.committed) pass.outcome.abort();
+      if (iterator) void closeIterator(iterator, options.log);
       const info = { model, retry: retry + 1, remaining: emptyTurnRetries - retry - 1 };
       options.log?.("[chat-routes] turn completed with no assistant text; re-running the same model", {
         ...info
@@ -1014,11 +1204,20 @@ function streamWithModelFailover(options) {
     } catch (err) {
       const attempts = err?.attempts;
       if (Array.isArray(attempts)) trail = attempts;
+      if (err instanceof ModelFailoverExhaustedError && finalTimeout) {
+        throw new ModelFailoverTimeoutError({
+          attempts: trail,
+          ...finalTimeout
+        });
+      }
       throw err;
     }
     for (const event of handle.buffered) yield event;
     const live = handle.iterator;
-    if (!live) return;
+    if (!live) {
+      handle.abort();
+      return;
+    }
     try {
       for (; ; ) {
         const next = await live.next();
@@ -1026,6 +1225,7 @@ function streamWithModelFailover(options) {
         yield next.value;
       }
     } finally {
+      handle.abort();
       await closeIterator(live, options.log);
     }
   })();
@@ -1154,7 +1354,8 @@ function sandboxStreamFailureDiagnostic(error) {
     "Please retry. If it repeats, send these support details to the team."
   ].join("\n\n");
   const failureNote = diagnosticText ? `sandbox-stream: ${message}; ${diagnosticText}` : `sandbox-stream: ${message}`;
-  return { userMessage, failureNote };
+  const code = error instanceof ModelFailoverTimeoutError ? error.code : "sandbox.stream_failed";
+  return { userMessage, failureNote, code };
 }
 function createSandboxChatProducer(options) {
   const log = options.log ?? ((message, meta) => console.error(message, meta ?? ""));
@@ -1182,6 +1383,8 @@ function createSandboxChatProducer(options) {
       models: chain,
       open: options.openEvents,
       log,
+      ...options.openTimeoutMs !== void 0 ? { openTimeoutMs: options.openTimeoutMs } : {},
+      ...options.firstResponseTimeoutMs !== void 0 ? { firstResponseTimeoutMs: options.firstResponseTimeoutMs } : {},
       ...options.emptyTurnRetries !== void 0 ? { emptyTurnRetries: options.emptyTurnRetries } : {},
       ...options.onEmptyTurnRetry ? { onEmptyTurnRetry: options.onEmptyTurnRetry } : {},
       onFallback: (info) => {
@@ -1519,7 +1722,7 @@ ${diagnostic.userMessage}` : diagnostic.userMessage;
         type: "error",
         data: {
           message: diagnostic.userMessage,
-          code: "sandbox.stream_failed",
+          code: diagnostic.code,
           details: { failureNote: diagnostic.failureNote }
         }
       };
@@ -1712,6 +1915,8 @@ async function runDetachedTurn(opts) {
     model: opts.model,
     ...opts.fallbackModels ? { fallbackModels: opts.fallbackModels } : {},
     ...opts.modelFailover === false ? { modelFailover: false } : {},
+    ...opts.openTimeoutMs !== void 0 ? { openTimeoutMs: opts.openTimeoutMs } : {},
+    ...opts.firstResponseTimeoutMs !== void 0 ? { firstResponseTimeoutMs: opts.firstResponseTimeoutMs } : {},
     ...opts.onModelFallback ? { onModelFallback: opts.onModelFallback } : {},
     isRenderableInteraction: opts.isRenderableInteraction,
     declineInteraction: opts.declineInteraction,
@@ -2670,6 +2875,8 @@ export {
   ATTACHMENT_ACCEPT,
   ATTACHMENT_MAX_COUNT,
   ChatTurnInputError,
+  DEFAULT_MODEL_FIRST_RESPONSE_TIMEOUT_MS,
+  DEFAULT_MODEL_STREAM_OPEN_TIMEOUT_MS,
   DEFAULT_STALE_TURN_LOCK_GRACE_MS,
   DEFAULT_TERMINAL_TURN_LOCK_GRACE_MS,
   DISPATCH_MAX_MEDIA_PARTS,
@@ -2683,6 +2890,7 @@ export {
   MAX_EMPTY_TURN_RETRIES,
   MAX_TEXT_ATTACHMENT_BYTES,
   MENTION_MAX_COUNT,
+  ModelFailoverTimeoutError,
   OOXML_PRESENTATION_MACRO_ENABLED_MIME,
   OOXML_PRESENTATION_MIME,
   OOXML_SNIFFED_MIMES,