@theoremjs/web 0.3.4-next.755.g88665bd → 0.3.4-next.757.gde44a4d

package/README.md

@@ -273,7 +273,7 @@ const transport = withPageToolDispatch(
 | `notifier`, `notifyRetryMs` | Tell an open page that a background call ended, and how long the page waits to reopen a cut stream. Unset, the page reads the end on its next turn or reload. See [the background section](#share-session-authority). |
 | `credentialStore` | Where tool credentials are kept, by session. Default: process memory. |
 | `authorizationUrl` | Returns the sign-in URL for an OAuth gate. Without it, an OAuth gate has no URL. |
-| `gateTtlMs` | How long a gate waits for an answer. A later answer fails with `session.gate_expired`. Unset, a gate waits until it is answered. |
+| `gateTtlMs` | How long a gate waits for an answer. A later answer fails with `session.gate_expired`, and the next message cancels the call. Unset, a gate waits until it is answered. |
 | `maxRequestBytes` | The largest browser request body, in bytes. Unset, a body of any size is read. |
 | `pageToolTimeoutMs` | How long the page has to answer a tool call it runs. A call it has not answered by then settles as timed out. Unset, the call waits until the page answers or the turn stops. The browser clients answer every call they get, so only a page function that never returns holds a turn. |
 | `operationRetentionMs` | How long a settled tool result is kept. Default: 24 hours. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theoremjs/web",
-  "version": "0.3.4-next.755.g88665bd",
+  "version": "0.3.4-next.757.gde44a4d",
   "description": "Theorem on the web platform, with no UI framework: Web-standard server handlers that serve a profile, and the browser client that talks to them.",
   "license": "MIT",
   "type": "module",
@@ -25,6 +25,6 @@
   },
   "peerDependencies": {
     "zod": "^4.6.5",
-    "@theoremjs/agents": "^0.3.4-next.755.g88665bd"
+    "@theoremjs/agents": "^0.3.4-next.757.gde44a4d"
   }
 }

package/server/handler.d.ts

@@ -107,8 +107,8 @@ export type TheoremHandlerOptions = {
     conversationStore?: TheoremConversationStore;
     /**
      * How long a gate (permission, confirmation, sign-in) waits for its answer, in
-     * milliseconds. An answer after that is refused with `session.gate_expired`.
-     * Unset, a gate waits until it is answered.
+     * milliseconds. An answer after that is refused with `session.gate_expired`,
+     * and the next message cancels the call. Unset, a gate waits until it is answered.
      */
     gateTtlMs?: number;
     /** Retain settled tool results in milliseconds. Default: 24 hours. */

package/server/handler.js

@@ -331,10 +331,16 @@ function answerPendingGate(state, request, profileId) {
     state.permissions = answer.sessionPermissions;
     return { callId: request.callId, pending, answer };
 }
-function walkedCallOf(state, reference, profileId) {
+function walkedCallOf(state, reference, profileId, paused) {
     const settled = Object.hasOwn(state.operations, reference.operationId)
         ? state.operations[reference.operationId]
         : undefined;
+    // why: A gate that lapsed is gone from the session while the reply still waits on its call. The call is only ever cancelled here, so the next message is never refused for it.
+    if (!settled && !Object.hasOwn(state.gates, reference.operationId)) {
+        const lapsed = pendingGatesFrom(paused, { profileId, turnInput: {} }).find(({ callId }) => callId === reference.callId);
+        if (lapsed)
+            state.gates[reference.operationId] = lapsed.gate;
+    }
     return settled?.status === 'settled' &&
         settled.callId === reference.callId &&
         settled.profileId === profileId
@@ -346,11 +352,12 @@ function walkedCallOf(state, reference, profileId) {
  * answered `abandon`: every one of them, or none when one is neither waiting
  * nor settled. Each comes back with the run that settles it.
  */
-async function takeWalkedAway(ctx, request, session, abandon) {
+async function takeWalkedAway(ctx, request, session, abandon, conversation) {
+    const paused = conversation.paused?.events ?? [];
     // why: A throw leaves the session unsaved, so no call is taken unless all are.
     const calls = await ctx.sessions.mutate(session.id, (state) => abandon.map((reference) => ({
         reference,
-        call: walkedCallOf(state, reference, ctx.profile.id),
+        call: walkedCallOf(state, reference, ctx.profile.id, paused),
     })));
     return calls.map(({ reference, call }) => ({
         ...reference,
@@ -530,7 +537,7 @@ async function turn(ctx, chat, request, session) {
     });
     // why: Take the walked-away calls before streaming, so a stale one is a reply status, not a stream error.
     const walkAway = body.abandon
-        ? await takeWalkedAway(ctx, request, session, body.abandon)
+        ? await takeWalkedAway(ctx, request, session, body.abandon, opened.conversation)
         : undefined;
     return eventStream(ctx, request, () => messageReply({ host, opened, message, ...(walkAway ? { walkAway } : {}), runner }));
 }
@@ -664,7 +671,7 @@ async function rewind(ctx, request, session) {
     const opened = await openConversation(host, body.conversation, { kind: 'rewind', at: body.at });
     const waiting = waitingCalls(opened.conversation);
     const walkAway = waiting.length
-        ? await takeWalkedAway(ctx, request, session, waiting)
+        ? await takeWalkedAway(ctx, request, session, waiting, opened.conversation)
         : undefined;
     const next = await rewindConversation({
         host,