@teaflask/assistant 0.0.0 → 0.3.0

package/dist/core/elicitation-pickers.js

@@ -0,0 +1,101 @@
+// The ask's wire narrowing: from a builtin.ask_questions
+// request's distrusted action payload to the question set the panel
+// renders, or null. Like the other transcript narrowers, this module is
+// React-free and deterministic (no clocks, no locale, question and
+// option order preserved), own-key reads over the distrusted wire — the
+// action arrives verbatim on the execution request and is narrowed here
+// even though the server's questions/v1 door already refused malformed
+// shapes, because the client never assumes server-side validation holds
+// across versions. Public via ./transcript: the dashboard imports this
+// module rather than keeping a fork.
+/**
+ * Narrow a builtin.ask_questions request's action payload —
+ * the wire is distrusted. Own-key checks, never `in`. Strict about the
+ * whole set: one malformed question returns null for the set, because
+ * a panel that silently dropped a question would post an incomplete
+ * answer set the door refuses; the pending-decision gap then speaks for
+ * the unrenderable pause instead.
+ */
+export function askQuestionsActionOf(action) {
+    if (action === null) {
+        return null;
+    }
+    const raw = _hasOwn(action, "questions") ? action.questions : null;
+    if (!Array.isArray(raw) || raw.length === 0) {
+        return null;
+    }
+    const questions = [];
+    const seen = new Set();
+    for (const candidate of raw) {
+        if (!_isRecord(candidate)) {
+            return null;
+        }
+        const id = _hasOwn(candidate, "id") ? candidate.id : null;
+        const heading = _hasOwn(candidate, "heading") ? candidate.heading : null;
+        const prompt = _hasOwn(candidate, "prompt") ? candidate.prompt : null;
+        if (typeof id !== "string" ||
+            id === "" ||
+            seen.has(id) ||
+            typeof heading !== "string" ||
+            heading.trim() === "" ||
+            typeof prompt !== "string" ||
+            prompt.trim() === "") {
+            return null;
+        }
+        seen.add(id);
+        const rawOptions = _hasOwn(candidate, "options") ? candidate.options : [];
+        if (!Array.isArray(rawOptions)) {
+            return null;
+        }
+        const options = [];
+        // Suggestion texts are the rows' React keys and the answer itself:
+        // distinct within a question by the server's law, re-checked here
+        // because the wire is distrusted (case-insensitively, as the server).
+        const seenTexts = new Set();
+        for (const option of rawOptions) {
+            if (!_isRecord(option)) {
+                return null;
+            }
+            const text = _hasOwn(option, "text") ? option.text : null;
+            if (typeof text !== "string" || text.trim() === "") {
+                return null;
+            }
+            const folded = text.toLowerCase();
+            if (seenTexts.has(folded)) {
+                return null;
+            }
+            seenTexts.add(folded);
+            const description = _hasOwn(option, "description")
+                ? option.description
+                : null;
+            // Every model-authored display string of the set takes the same
+            // escaped-quote normalization: heading, prompt, suggestion text
+            // AND description — the suggestion's text is also the answer that
+            // posts back, so it must read clean in the panel, in the receipt
+            // and to the model alike.
+            options.push({
+                text: text.replace(/\\"/g, '"'),
+                description: typeof description === "string" && description.trim() !== ""
+                    ? description.replace(/\\"/g, '"')
+                    : null,
+            });
+        }
+        questions.push({
+            id,
+            heading: heading.replace(/\\"/g, '"'),
+            prompt: prompt.replace(/\\"/g, '"'),
+            options,
+        });
+    }
+    return { questions };
+}
+function _hasOwn(record, key) {
+    // An own-key read spelled to compile under lib es6 — the constraint
+    // the deleted dashboard fork imposed; the spelling stays
+    // because changing it buys nothing.
+    return Object.prototype.hasOwnProperty.call(record, key);
+}
+function _isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=elicitation-pickers.js.map

package/dist/core/elicitation-pickers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitation-pickers.js","sourceRoot":"","sources":["../../src/core/elicitation-pickers.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oEAAoE;AACpE,wEAAwE;AACxE,mEAAmE;AACnE,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,qCAAqC;AAcrC;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAsC;IAEtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,IACE,OAAO,EAAE,KAAK,QAAQ;YACtB,EAAE,KAAK,EAAE;YACT,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACZ,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YACrB,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EACpB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,mEAAmE;QACnE,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,IAAI,CAAC;YACT,gEAAgE;YAChE,gEAAgE;YAChE,kEAAkE;YAClE,iEAAiE;YACjE,0BAA0B;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;gBAC/B,WAAW,EACT,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE;oBAC1D,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;oBAClC,CAAC,CAAC,IAAI;aACX,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,IAAI,CAAC;YACb,EAAE;YACF,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;YACnC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,MAA+B,EAAE,GAAW;IAC3D,oEAAoE;IACpE,yDAAyD;IACzD,oCAAoC;IACpC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/core/epoch-sync.d.ts

@@ -0,0 +1,19 @@
+import type { ServingAssistantTurn } from "../contract/threads.js";
+import type { ApprovalCardModel } from "./approval-inbox.js";
+import type { AssistantConversationStore } from "./conversation-store.js";
+import type { ExecutionEntryModel } from "./execution-inbox.js";
+export declare function syncEpoch(store: AssistantConversationStore): void;
+export declare function retireEpoch(store: AssistantConversationStore): void;
+export declare function noteNewestTurn(store: AssistantConversationStore, turn: ServingAssistantTurn | null, switchedThread?: boolean): void;
+export declare function publishApprovalCards(store: AssistantConversationStore, cards: readonly ApprovalCardModel[]): void;
+export declare function reconcileApprovals(store: AssistantConversationStore, turns: readonly ServingAssistantTurn[]): void;
+/** The turn holding the answerable pause, if any: the newest row when
+ *  it pauses itself, else the newest ANSWERABLE row off the last full
+ *  refresh (see _awaitingTurn's caveat: partial
+ *  adopters don't maintain it, so between a send and the next full
+ *  refresh this can lag one snapshot; every consumer is re-run at
+ *  adoption, and the inbox's own guards absorb a stale read). */
+export declare function theAnswerablePause(store: AssistantConversationStore): ServingAssistantTurn | null;
+export declare function publishExecutionEntries(store: AssistantConversationStore, entries: readonly ExecutionEntryModel[]): void;
+export declare function publishActivity(store: AssistantConversationStore): void;
+//# sourceMappingURL=epoch-sync.d.ts.map

package/dist/core/epoch-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"epoch-sync.d.ts","sourceRoot":"","sources":["../../src/core/epoch-sync.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAOnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAY7D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAa1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAahE,wBAAgB,SAAS,CAAC,KAAK,EAAE,0BAA0B,GAAG,IAAI,CA+DjE;AAiED,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,IAAI,CASnE;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,0BAA0B,EACjC,IAAI,EAAE,oBAAoB,GAAG,IAAI,EACjC,cAAc,UAAQ,GACrB,IAAI,CAsBN;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,0BAA0B,EACjC,KAAK,EAAE,SAAS,iBAAiB,EAAE,GAClC,IAAI,CAcN;AAsCD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,0BAA0B,EACjC,KAAK,EAAE,SAAS,oBAAoB,EAAE,GACrC,IAAI,CA4BN;AAED;;;;;iEAKiE;AACjE,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,0BAA0B,GAChC,oBAAoB,GAAG,IAAI,CAS7B;AAgFD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE,SAAS,mBAAmB,EAAE,GACtC,IAAI,CA2BN;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,IAAI,CAcvE"}

package/dist/core/epoch-sync.js

@@ -0,0 +1,385 @@
+// The connection epoch: one epoch per (thread, stream id, reconnect
+// nonce, background-attach nonce, resume store) — minting it, retiring
+// it, and the durable-turn machinery that rides its publishes (the
+// newest-turn note, approval-card reconcile and hydration, execution
+// entries, the activity feed). The epoch-confined callbacks keep
+// dropping a retired epoch's late writes exactly as the comments below
+// rule.
+import { APPROVAL_REQUESTED_EVENT_NAME } from "../contract/events.js";
+import { activitySnapshotOf, IDLE_ACTIVITY, sameActivitySnapshot, settledResultOf, } from "./activity.js";
+import { beginConnectionEpoch, markerAnchorsOf, } from "./connection-epoch.js";
+import { busyOf, noteInterruptAnswerConsumed, publishStore, } from "./conversation-publish.js";
+import { coworkerExecutionWorkOf, sameCoworkerExecutionWork, } from "./coworker-execution-work.js";
+import { elicitationCardsOf, sameElicitationCards, } from "./elicitation-cards.js";
+import { executionHandlersFor, } from "./execution-handlers.js";
+import { restDisplayAnchorsOf } from "./tool-call-display-anchors.js";
+import { toolDenialMarkerOf } from "./tool-denial-anchors.js";
+import { approvalCardSchemasOf } from "./tool-schema-anchors.js";
+// One epoch per (thread, stream id, reconnect nonce, background-attach
+// nonce, resume store): the first three are exactly the old remount
+// key, so a send, a retry, a thread switch, or a restart reclaim
+// begins a fresh epoch — a fresh agent seeded from the resume store, a
+// fresh execution inbox (the approval inbox is thread-lived and rides
+// through), a fresh driver. The background-attach nonce
+// begins a fresh epoch WITHOUT moving the remount key — see
+// the no-remount premise at syncConnection's remint branch.
+export function syncEpoch(store) {
+    const active = store._active;
+    if (active === null || store._disposed) {
+        retireEpoch(store);
+        // No conversation, no cards — guarded so an idle publish loop
+        // never re-sets the cell (it notifies on reference change).
+        if (store._approvalsCell.get().length > 0) {
+            publishApprovalCards(store, []);
+        }
+        // The coworker rows' work line dies with the conversation too
+        // — same guard, same reason.
+        if (store._coworkerWorkCell.get().size > 0) {
+            store._coworkerWorkCell.set(new Map());
+        }
+        return;
+    }
+    const signature = `${active.thread.id}|${active.thread.stream_thread_id}|${String(store._reconnectNonce)}|${String(store._backgroundAttachNonce)}`;
+    if (store._epoch !== null &&
+        store._epochSignature === signature &&
+        store._epochResume === active.resume) {
+        return;
+    }
+    retireEpoch(store);
+    const epochId = store._nextEpochId;
+    store._nextEpochId += 1;
+    store._epoch = beginConnectionEpoch(_mintEpochDeps(store, active, epochId));
+    store._epochSignature = signature;
+    store._epochResume = active.resume;
+    store._epochConnectedOnce = false;
+    // The pending approval asks are thread-lived: seed the cell
+    // from the carried inbox synchronously — the reconnect's replay
+    // re-delivers into it idempotently — exactly like the message list
+    // seeds from the resume snapshot below, so a remount paints the cards
+    // instantly instead of flashing them away mid-decision.
+    publishApprovalCards(store, active.approvalInbox.cards());
+    store._elicitationErrors.clear();
+    store._questionAnswers.clear();
+    // questionDrafts is deliberately NOT cleared here: an epoch
+    // reset is a transport event — a reconnect, a workflow restart — and
+    // the member's half-typed answers must survive it. Draft lifetime is
+    // ruled in question-drafts.ts: cleared on present-and-settled
+    // evidence (publishExecutionEntries) or a thread switch.
+    publishExecutionEntries(store, []);
+    // The coworker requests are conversation-lived: the fresh
+    // inbox is seeded from the ACTIVE conversation's turns window, the way
+    // the approval cards seed from its carried inbox above — a stream reset
+    // must not drop an ask nothing on the stream re-delivers, and nothing
+    // outliving the conversation may seed an epoch (the send empties the
+    // window, a switch or abandon drops it; tests/epoch-seed-census).
+    store._epoch.withExecutionInbox((inbox) => inbox.adoptCoworkerRequests(active.coworkerRequestTurns));
+    store._messagesCell.set([...store._epoch.agent.messages]);
+    store._markerAnchorsCell.set(markerAnchorsOf(active.resume));
+    store._connectionCell.set({
+        epochId,
+        agent: store._epoch.agent,
+        threadId: active.thread.id,
+        streamThreadId: active.thread.stream_thread_id,
+    });
+}
+// The epoch's ~25-key deps object: every store callback the epoch may
+// ring, each publish confined to its own epoch id so a retired epoch's
+// late writes drop (the in-flight execution pass runs to completion
+// after dispose — at-most-once delivery).
+function _mintEpochDeps(store, active, epochId) {
+    return {
+        epochId,
+        session: store.deps.session,
+        threadId: active.thread.id,
+        streamThreadId: active.thread.stream_thread_id,
+        ledger: active.ledger,
+        resume: active.resume,
+        approvalInbox: active.approvalInbox,
+        handlersOf: () => _executionHandlers(store, active.thread.id),
+        // Every epoch publish is confined to its own epoch. Recorders
+        // unsubscribe on retireEpoch, but the execution driver's in-flight
+        // pass runs to completion AFTER dispose (at-most-once delivery), so
+        // an epoch swap mid-pass would otherwise let a retired epoch stamp
+        // the previous thread's entries onto the now-active thread's shared
+        // cells. The id check drops those late writes.
+        publishApprovalCards: (cards) => {
+            if (store._epoch?.epochId === epochId) {
+                publishApprovalCards(store, cards);
+            }
+        },
+        publishExecutionEntries: (entries) => {
+            if (store._epoch?.epochId === epochId) {
+                publishExecutionEntries(store, entries);
+            }
+        },
+        publishMarkerAnchors: () => {
+            if (store._epoch?.epochId === epochId) {
+                store._markerAnchorsCell.set(markerAnchorsOf(active.resume));
+                // A freshly anchored turn_failed receipt changes what the
+                // failure banner should say (bannerFailureSentenceOf yields to
+                // the in-transcript record), and the banner rides the
+                // conversation snapshot, not the anchors cell.
+                publishStore(store);
+            }
+        },
+        publishMessages: (messages) => {
+            if (store._epoch?.epochId === epochId) {
+                store._messagesCell.set(messages);
+            }
+        },
+        noteInterruptAnswerConsumed: (runId, interruptId, round) => {
+            if (store._epoch?.epochId === epochId) {
+                noteInterruptAnswerConsumed(store, runId, interruptId, round);
+            }
+        },
+        onStreamError: store.handleStreamError,
+        refreshLedger: store.refreshConversation,
+        onUserMessageInjected: store.handleUserMessageInjected,
+        onRunSettled: store.handleRunSettled,
+        onQuietClose: store.handleStreamClosedQuietly,
+        onWorkflowRestarted: store.handleWorkflowRestarted,
+    };
+}
+export function retireEpoch(store) {
+    if (store._epoch === null) {
+        return;
+    }
+    store._epoch.dispose();
+    store._epoch = null;
+    store._epochSignature = null;
+    store._epochResume = null;
+    store._connectionCell.set(null);
+}
+export function noteNewestTurn(store, turn, switchedThread = false) {
+    if (turn?.id !== store._newestTurn?.id) {
+        // A different turn is a different story: the automatic-reconnect
+        // budget guards one stuck turn, not the conversation.
+        store._automaticReconnects = 0;
+    }
+    if (switchedThread) {
+        // A new thread's activity must not inherit the old thread's last
+        // result: settledResultOf only WRITES on a terminal turn, so
+        // switching to a still-running thread would otherwise leave the
+        // feed pointing at the previous conversation's outcome. Clear
+        // first; the line below re-sets it iff the new newest already
+        // settled. The answerable-pause snapshot is the old thread's too
+        // (the full-detail adopters re-derive it right after this call).
+        store._lastResult = null;
+        store._awaitingTurn = null;
+    }
+    store._newestTurn = turn;
+    const settled = turn === null ? null : settledResultOf(turn);
+    if (settled !== null) {
+        store._lastResult = settled;
+    }
+}
+export function publishApprovalCards(store, cards) {
+    // The cards' schemas feed the schema anchors first: every
+    // card path — the stream marker, the REST pending_approvals rebuild,
+    // the submit republish — funnels through here, so an anchored call's
+    // argsSchema is resolvable by the time the paint the cards trigger
+    // reads the anchors. The card model is the wire's single narrowed
+    // home for these fields; this consumes it rather than re-deriving.
+    _recordApprovalCardSchemas(store, cards);
+    store._approvalsCell.set(cards);
+    _publishCoworkerWork(store);
+    // Pending-approval count rides the feed, and a card arriving or
+    // closing re-judges the pending-decision gap — the full
+    // publish covers both and dedupes unchanged snapshots itself.
+    publishStore(store);
+}
+function _recordApprovalCardSchemas(store, cards) {
+    const active = store._active;
+    if (active === null) {
+        return;
+    }
+    const before = active.resume.toolSchemaAnchors;
+    for (const card of cards) {
+        if (card.toolCallId === null) {
+            continue;
+        }
+        const schemas = approvalCardSchemasOf(card);
+        if (schemas !== null) {
+            active.resume.recordToolSchemas(card.toolCallId, schemas);
+        }
+    }
+    // The anchors map's first-wins merge makes the re-record of an
+    // already-anchored card a no-op — identity is the publish gate, the
+    // same pattern as the display hydration below.
+    if (active.resume.toolSchemaAnchors !== before) {
+        store._markerAnchorsCell.set(markerAnchorsOf(active.resume));
+    }
+}
+// The durable turn record re-judges the pending cards on every REST
+// read: the parked flag, a superseded ask, a settled turn —
+// all rendered from truth instead of stream inference. Hydration runs
+// first: the record's pending_approvals snapshot rebuilds any
+// card the stream never delivered, so a pending id can never publish
+// as "needs input" with an empty approval surface — then reconcile
+// judges the whole set, hydrated cards included. The window is required:
+// the settled-runs arm is the close a finished run's cards
+// get when the stream's own evidence closed none, and a caller cannot
+// leave it out by construction.
+export function reconcileApprovals(store, turns) {
+    const inbox = store._active?.approvalInbox;
+    if (inbox === undefined) {
+        return;
+    }
+    // The pause is hydrated from the ANSWERABLE turn, not the newest
+    // row (a queued message can sit newer than the pause, and
+    // hydrating from the queued row would silently disable the REST
+    // card rebuild exactly when the member must answer to unblock the
+    // queue). reconcileWithTurn deliberately keeps the NEWEST row (a
+    // terminal newest turn removes the conversation's cards), and the
+    // settled-runs arm closes any window turn's settled run behind it —
+    // a RUN_FINISHED closes nothing, so a card the stream's own evidence
+    // did not close dies on this read.
+    const pause = theAnswerablePause(store);
+    // Display annotations land BEFORE the cards hydrate: a
+    // recovered call's annotation must already be resolvable when its
+    // ROW first paints, never annotation-less-then-annotated. (The
+    // banner reads none of it — the row is the
+    // annotation's one rendered home.)
+    _hydratePendingApprovalDisplays(store, pause);
+    _hydratePendingApprovalAsks(store, pause);
+    const hydrated = inbox.hydratePendingApprovals(pause);
+    const reconciled = inbox.reconcileWithTurn(store._newestTurn);
+    const settled = inbox.reconcileWithTurns(turns);
+    if (hydrated || reconciled || settled) {
+        publishApprovalCards(store, inbox.cards());
+    }
+}
+/** The turn holding the answerable pause, if any: the newest row when
+ *  it pauses itself, else the newest ANSWERABLE row off the last full
+ *  refresh (see _awaitingTurn's caveat: partial
+ *  adopters don't maintain it, so between a send and the next full
+ *  refresh this can lag one snapshot; every consumer is re-run at
+ *  adoption, and the inbox's own guards absorb a stale read). */
+export function theAnswerablePause(store) {
+    const newest = store._newestTurn;
+    if (newest !== null &&
+        (newest.status === "awaiting_input" || newest.status === "parked")) {
+        return newest;
+    }
+    return store._awaitingTurn;
+}
+/**
+ * The recovery read's display annotations: the turn
+ * record's pending_approval_displays carries the same
+ * tool_call_annotated content the stream replays, so a REST-recovered
+ * call's ROW resolves its annotation — authored copy, icon, and the
+ * view contract's key — even when no stream ever delivered the call.
+ * (The approval banner reads no annotations; a call that never
+ * reaches the transcript at all has no reader for
+ * its hydrated display until it does — kept, because the channel is
+ * the row's, not the banner's.) Recorded
+ * into the resume store's anchors map, the display's single client
+ * home: the merge is the map's own first-wins fold, so a later stream
+ * replay of the same markers is a no-op, and the same gate as
+ * hydratePendingApprovals keeps a stale read from resurrecting
+ * superseded copy (an absent field is an older server, never an
+ * unannotated pause).
+ */
+function _hydratePendingApprovalDisplays(store, turn) {
+    const active = store._active;
+    if (active === null ||
+        turn === null ||
+        (turn.status !== "awaiting_input" && turn.status !== "parked") ||
+        turn.run_id === null) {
+        return;
+    }
+    const anchors = restDisplayAnchorsOf(turn.pending_approval_displays);
+    if (anchors.size === 0) {
+        return;
+    }
+    const before = active.resume.toolCallDisplayAnchors;
+    for (const [toolCallId, display] of anchors) {
+        active.resume.recordToolCallDisplay(toolCallId, display);
+    }
+    if (active.resume.toolCallDisplayAnchors !== before) {
+        store._markerAnchorsCell.set(markerAnchorsOf(active.resume));
+    }
+}
+/**
+ * The recovery read's half of the denial join: the paused
+ * turn's pending_approvals carry the same interrupt_id → tool_call_id
+ * pairs the stream's approval_requested markers do, so a client whose
+ * stream never delivered the ask (a REST-recovered pause) still holds
+ * it in the ledger's ask map when the resumed stream's
+ * approval_resolved lands. Same gate as hydratePendingApprovals — a
+ * live pause only; a settled turn's asks arrive by full replay. Asks
+ * never publish: only the DENIED half is presentation, and it can only
+ * move on the durable approval_resolved marker — never on the submit
+ * path's own answer — so live and replay derive the row identically
+ * (Law 9).
+ */
+function _hydratePendingApprovalAsks(store, turn) {
+    const active = store._active;
+    if (active === null ||
+        turn === null ||
+        (turn.status !== "awaiting_input" && turn.status !== "parked") ||
+        turn.run_id === null ||
+        !Array.isArray(turn.pending_approvals)) {
+        return;
+    }
+    for (const value of turn.pending_approvals) {
+        const marker = toolDenialMarkerOf(APPROVAL_REQUESTED_EVENT_NAME, value);
+        if (marker !== null) {
+            active.resume.recordToolDenialMarker(marker);
+        }
+    }
+}
+export function publishExecutionEntries(store, entries) {
+    // Entries publish for EVERY execution kind's lifecycle; the cell
+    // notifies on reference change, so an unchanged derivation (usually
+    // the empty list) must never re-set it — the cell contract's
+    // "publishers set only when state actually changed".
+    const cards = elicitationCardsOf(entries, store._elicitationErrors, store._questionAnswers);
+    if (!sameElicitationCards(cards, store._elicitationsCell.get())) {
+        store._elicitationsCell.set(cards);
+    }
+    _publishCoworkerWork(store);
+    // A question set's draft is released only on PRESENT-and-settled
+    // evidence — a published card for that very interrupt reading
+    // answered or stale — never on absence: the reconnect publishes an
+    // empty entry list before the replay refills it.
+    for (const card of cards) {
+        if (card.status === "answered" || card.status === "stale") {
+            store.questionDrafts.clear(card.interruptId);
+        }
+    }
+    // Entries can move without the member-answerable cards moving (a
+    // driver-claimed navigate, a reported execution) and each of those
+    // re-judges the pending-decision gap.
+    publishStore(store);
+}
+export function publishActivity(store) {
+    const snapshot = store._active === null
+        ? IDLE_ACTIVITY
+        : activitySnapshotOf({
+            busy: busyOf(store),
+            newestTurn: store._newestTurn,
+            approvalCards: store._approvalsCell.get(),
+            pendingDecisionGap: store._pendingDecisionGap,
+            lastResult: store._lastResult,
+        });
+    if (!sameActivitySnapshot(snapshot, store._activityCell.get())) {
+        store._activityCell.set(snapshot);
+    }
+}
+function _executionHandlers(store, threadId) {
+    const capabilities = store.deps.hostCapabilitiesOf();
+    return executionHandlersFor(capabilities.navigate, capabilities.executeActionIntent, threadId);
+}
+// The coworker rows' work line: folded from the LIVE
+// epoch's execution entries and the carried approval cards, on either
+// publish, with the set-only-on-change discipline. The entries are read
+// off the epoch's own inbox, never cached on the store: a fresh epoch's
+// first publish then folds nothing of the conversation it replaced.
+function _publishCoworkerWork(store) {
+    const coworkerWork = coworkerExecutionWorkOf(store._epoch?.executionInbox.entries() ?? [], store._approvalsCell.get());
+    if (!sameCoworkerExecutionWork(coworkerWork, store._coworkerWorkCell.get())) {
+        store._coworkerWorkCell.set(coworkerWork);
+    }
+}
+//# sourceMappingURL=epoch-sync.js.map

package/dist/core/epoch-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epoch-sync.js","sourceRoot":"","sources":["../../src/core/epoch-sync.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,uEAAuE;AACvE,mEAAmE;AACnE,qEAAqE;AACrE,iEAAiE;AACjE,uEAAuE;AACvE,QAAQ;AAER,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,eAAe,GAChB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,oBAAoB,EACpB,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,MAAM,EACN,2BAA2B,EAC3B,YAAY,GACb,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,uEAAuE;AACvE,oEAAoE;AACpE,iEAAiE;AACjE,uEAAuE;AACvE,sEAAsE;AACtE,wDAAwD;AACxD,4DAA4D;AAC5D,4DAA4D;AAC5D,MAAM,UAAU,SAAS,CAAC,KAAiC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,8DAA8D;QAC9D,4DAA4D;QAC5D,IAAI,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,8DAA8D;QAC9D,6BAA6B;QAC7B,IAAI,KAAK,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;IACnJ,IACE,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM,EACpC,CAAC;QACD,OAAO;IACT,CAAC;IACD,WAAW,CAAC,KAAK,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IACxB,KAAK,CAAC,MAAM,GAAG,oBAAoB,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAE5E,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;IAClC,4DAA4D;IAC5D,gEAAgE;IAChE,mEAAmE;IACnE,sEAAsE;IACtE,wDAAwD;IACxD,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;IACjC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAC/B,4DAA4D;IAC5D,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,yDAAyD;IACzD,uBAAuB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,0DAA0D;IAC1D,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,kEAAkE;IAClE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CACzD,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC;QACxB,OAAO;QACP,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;QACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC1B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,0CAA0C;AAC1C,SAAS,cAAc,CACrB,KAAiC,EACjC,MAA0B,EAC1B,OAAe;IAEf,OAAO;QACL,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC1B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;QAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,8DAA8D;QAC9D,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,oEAAoE;QACpE,+CAA+C;QAC/C,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtC,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,oBAAoB,EAAE,GAAG,EAAE;YACzB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7D,0DAA0D;gBAC1D,+DAA+D;gBAC/D,sDAAsD;gBACtD,+CAA+C;gBAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC5B,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,2BAA2B,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YACzD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,EAAE,CAAC;gBACtC,2BAA2B,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,aAAa,EAAE,KAAK,CAAC,iBAAiB;QACtC,aAAa,EAAE,KAAK,CAAC,mBAAmB;QACxC,qBAAqB,EAAE,KAAK,CAAC,yBAAyB;QACtD,YAAY,EAAE,KAAK,CAAC,gBAAgB;QACpC,YAAY,EAAE,KAAK,CAAC,yBAAyB;QAC7C,mBAAmB,EAAE,KAAK,CAAC,uBAAuB;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiC;IAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAiC,EACjC,IAAiC,EACjC,cAAc,GAAG,KAAK;IAEtB,IAAI,IAAI,EAAE,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;QACvC,iEAAiE;QACjE,sDAAsD;QACtD,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,8DAA8D;QAC9D,8DAA8D;QAC9D,iEAAiE;QACjE,iEAAiE;QACjE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAiC,EACjC,KAAmC;IAEnC,0DAA0D;IAC1D,qEAAqE;IACrE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,gEAAgE;IAChE,wDAAwD;IACxD,8DAA8D;IAC9D,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAiC,EACjC,KAAmC;IAEnC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,+DAA+D;IAC/D,oEAAoE;IACpE,+CAA+C;IAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,KAAK,MAAM,EAAE,CAAC;QAC/C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,4DAA4D;AAC5D,sEAAsE;AACtE,8DAA8D;AAC9D,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,2DAA2D;AAC3D,sEAAsE;AACtE,gCAAgC;AAChC,MAAM,UAAU,kBAAkB,CAChC,KAAiC,EACjC,KAAsC;IAEtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,iEAAiE;IACjE,0DAA0D;IAC1D,gEAAgE;IAChE,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,mCAAmC;IACnC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,uDAAuD;IACvD,kEAAkE;IAClE,+DAA+D;IAC/D,2CAA2C;IAC3C,mCAAmC;IACnC,+BAA+B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,QAAQ,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;QACtC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;iEAKiE;AACjE,MAAM,UAAU,kBAAkB,CAChC,KAAiC;IAEjC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;IACjC,IACE,MAAM,KAAK,IAAI;QACf,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,EAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,aAAa,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,+BAA+B,CACtC,KAAiC,EACjC,IAAiC;IAEjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IACE,MAAM,KAAK,IAAI;QACf,IAAI,KAAK,IAAI;QACb,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC9D,IAAI,CAAC,MAAM,KAAK,IAAI,EACpB,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;IACpD,KAAK,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,KAAK,MAAM,EAAE,CAAC;QACpD,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,2BAA2B,CAClC,KAAiC,EACjC,IAAiC;IAEjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;IAC7B,IACE,MAAM,KAAK,IAAI;QACf,IAAI,KAAK,IAAI;QACb,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC9D,IAAI,CAAC,MAAM,KAAK,IAAI;QACpB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,EACtC,CAAC;QACD,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAiC,EACjC,OAAuC;IAEvC,iEAAiE;IACjE,oEAAoE;IACpE,6DAA6D;IAC7D,qDAAqD;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAC9B,OAAO,EACP,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,gBAAgB,CACvB,CAAC;IACF,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAChE,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5B,iEAAiE;IACjE,8DAA8D;IAC9D,mEAAmE;IACnE,iDAAiD;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC1D,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,iEAAiE;IACjE,mEAAmE;IACnE,sCAAsC;IACtC,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAiC;IAC/D,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,KAAK,IAAI;QACpB,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,kBAAkB,CAAC;YACjB,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;YACnB,UAAU,EAAE,KAAK,CAAC,WAAW;YAC7B,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE;YACzC,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;YAC7C,UAAU,EAAE,KAAK,CAAC,WAAW;SAC9B,CAAC,CAAC;IACT,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/D,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAiC,EACjC,QAAgB;IAEhB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACrD,OAAO,oBAAoB,CACzB,YAAY,CAAC,QAAQ,EACrB,YAAY,CAAC,mBAAmB,EAChC,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,SAAS,oBAAoB,CAAC,KAAiC;IAC7D,MAAM,YAAY,GAAG,uBAAuB,CAC1C,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAC5C,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,CAC3B,CAAC;IACF,IAAI,CAAC,yBAAyB,CAAC,YAAY,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5E,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/core/error-copy.d.ts

@@ -0,0 +1,8 @@
+export declare function userSentenceFor(error: unknown): string;
+export declare function stopFailureSentenceFor(error: unknown): string;
+/** A wait in the largest sensible unit — plan windows run daily to
+ *  weekly, so raw minutes would read "about 10080 minutes". Each unit is
+ *  ceiled, so the promise is never early. Shared with the gate card and
+ *  the standing sentences (one spelling of every wait). */
+export declare function humanizedWait(seconds: number): string;
+//# sourceMappingURL=error-copy.d.ts.map

package/dist/core/error-copy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-copy.d.ts","sourceRoot":"","sources":["../../src/core/error-copy.ts"],"names":[],"mappings":"AAUA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4BtD;AAWD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAK7D;AA8BD;;;2DAG2D;AAC3D,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASrD"}

package/dist/core/error-copy.js

@@ -0,0 +1,88 @@
+import { ServingApiError } from "../transport/serving-error.js";
+import { STOP_NOT_DELIVERED_SENTENCE } from "./stop-copy.js";
+// The honest error taxonomy: one user-facing sentence per contract code
+// the surface can hit. Unknown codes fall back to the server's message,
+// which the contract guarantees is a human sentence safe to show.
+const GENERIC_FAILURE_SENTENCE = "Something went wrong sending that. Please try again.";
+export function userSentenceFor(error) {
+    if (!(error instanceof ServingApiError)) {
+        return GENERIC_FAILURE_SENTENCE;
+    }
+    switch (error.code) {
+        // Retired producer (sends queue instead) — kept for older deploys.
+        case "ASSISTANT_THREAD_BUSY":
+            return ("The assistant is already answering — possibly in another tab. " +
+                "Wait for it to finish.");
+        case "RATE_LIMITED":
+            return _rateLimitedSentence(error.retryAfterSeconds);
+        case "SUBSCRIPTION_CANNOT_PAY":
+            return _subscriptionCannotPaySentence(error);
+        case "SUBSCRIPTION_CONNECT_REQUIRED":
+            // The server sentence is the visitor copy; the connect panel (which
+            // opens on this code) owns the richer affordance.
+            return error.message;
+        case "ORCHESTRATION_UNAVAILABLE":
+            return "The assistant couldn't be started right now. Please try again in a moment.";
+        case "NOT_FOUND":
+            return "That conversation doesn't exist anymore.";
+        case "VALIDATION_ERROR":
+            return "That message couldn't be sent. Shorten it and try again.";
+        default:
+            return error.message;
+    }
+}
+// The stop door's failure vocabulary: a failed stop must never
+// read as a failed send ("couldn't be started", "went wrong sending
+// that" — both lies about a turn that is still running). The door's own
+// sentences are written for this surface — its 503 ships "The stop
+// couldn't be delivered right now. Please try again in a moment." — so
+// every contract sentence passes through, and the generic line (the
+// stop-copy leaf's, shared with the dashboard playground) covers only
+// transport deaths that never reached the door.
+export function stopFailureSentenceFor(error) {
+    if (error instanceof ServingApiError && error.message !== "") {
+        return error.message;
+    }
+    return STOP_NOT_DELIVERED_SENTENCE;
+}
+function _rateLimitedSentence(retryAfterSeconds) {
+    if (retryAfterSeconds !== null && retryAfterSeconds > 0) {
+        return `You're sending messages too quickly. Try again in ${String(retryAfterSeconds)} seconds.`;
+    }
+    return "You're sending messages too quickly. Wait a moment and try again.";
+}
+function _subscriptionCannotPaySentence(error) {
+    // The wait is rendered exactly when the server sent Retry-After — it
+    // does so only for a reset still ahead (no closeness threshold
+    // exists) — in the largest sensible unit: plan windows run daily to
+    // weekly, so raw minutes would read "about 10080 minutes". Without
+    // the header the server's own sentence stands: the plain quota copy,
+    // or the re-checking copy for a stale bounce whose re-probe the door
+    // just kicked.
+    const retryAfterSeconds = error.retryAfterSeconds;
+    if (retryAfterSeconds !== null && retryAfterSeconds > 0) {
+        return ("Your ChatGPT plan's included usage is used up for this period. " +
+            `The conversation can continue in about ${humanizedWait(retryAfterSeconds)}.`);
+    }
+    return error.message;
+}
+const _HOUR_SECONDS = 3600;
+const _DAY_SECONDS = 24 * _HOUR_SECONDS;
+/** A wait in the largest sensible unit — plan windows run daily to
+ *  weekly, so raw minutes would read "about 10080 minutes". Each unit is
+ *  ceiled, so the promise is never early. Shared with the gate card and
+ *  the standing sentences (one spelling of every wait). */
+export function humanizedWait(seconds) {
+    // Minutes under two hours, hours under two days, days beyond.
+    if (seconds < 2 * _HOUR_SECONDS) {
+        return _counted(Math.max(1, Math.ceil(seconds / 60)), "minute");
+    }
+    if (seconds < 2 * _DAY_SECONDS) {
+        return _counted(Math.ceil(seconds / _HOUR_SECONDS), "hour");
+    }
+    return _counted(Math.ceil(seconds / _DAY_SECONDS), "day");
+}
+function _counted(count, unit) {
+    return `${String(count)} ${unit}${count === 1 ? "" : "s"}`;
+}
+//# sourceMappingURL=error-copy.js.map

package/dist/core/error-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-copy.js","sourceRoot":"","sources":["../../src/core/error-copy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,wEAAwE;AACxE,wEAAwE;AACxE,kEAAkE;AAElE,MAAM,wBAAwB,GAC5B,sDAAsD,CAAC;AAEzD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,eAAe,CAAC,EAAE,CAAC;QACxC,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,mEAAmE;QACnE,KAAK,uBAAuB;YAC1B,OAAO,CACL,gEAAgE;gBAChE,wBAAwB,CACzB,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACvD,KAAK,yBAAyB;YAC5B,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,+BAA+B;YAClC,oEAAoE;YACpE,kDAAkD;YAClD,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,KAAK,2BAA2B;YAC9B,OAAO,4EAA4E,CAAC;QACtF,KAAK,WAAW;YACd,OAAO,0CAA0C,CAAC;QACpD,KAAK,kBAAkB;YACrB,OAAO,0DAA0D,CAAC;QACpE;YACE,OAAO,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,oEAAoE;AACpE,wEAAwE;AACxE,mEAAmE;AACnE,uEAAuE;AACvE,oEAAoE;AACpE,sEAAsE;AACtE,gDAAgD;AAEhD,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,SAAS,oBAAoB,CAAC,iBAAgC;IAC5D,IAAI,iBAAiB,KAAK,IAAI,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,qDAAqD,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC;IACnG,CAAC;IACD,OAAO,mEAAmE,CAAC;AAC7E,CAAC;AAED,SAAS,8BAA8B,CAAC,KAAsB;IAC5D,qEAAqE;IACrE,+DAA+D;IAC/D,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,eAAe;IACf,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAClD,IAAI,iBAAiB,KAAK,IAAI,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,CACL,iEAAiE;YACjE,0CAA0C,aAAa,CAAC,iBAAiB,CAAC,GAAG,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,YAAY,GAAG,EAAE,GAAG,aAAa,CAAC;AAExC;;;2DAG2D;AAC3D,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,8DAA8D;IAC9D,IAAI,OAAO,GAAG,CAAC,GAAG,aAAa,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,GAAG,YAAY,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7D,CAAC"}