avantgate 1.8.1 → 1.9.0

package/dist/agent/telemetry/types.d.ts

@@ -43,6 +43,9 @@ export interface ToolExecutionTelemetryEvent extends BaseTelemetryEvent {
     success: boolean;
     parentToolId?: string;
     depth?: number;
+    attempts?: number;
+    maxRetries?: number;
+    retriedErrors?: string[];
     llmSummary?: unknown;
     piiFilteredCount?: number;
     tokenCount?: number;
@@ -75,6 +78,11 @@ export interface TelemetryIngestPayload {
     timestamp: string;
     events: TelemetryEvent[];
     usage?: TelemetryUsageSummary;
+    metadata?: {
+        retryOf?: string;
+        replayedBy?: string;
+        [key: string]: unknown;
+    };
 }
 /**
  * Configuration options for the HTTP Telemetry Exporter.

package/dist/agent/telemetry/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agent/telemetry/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,gBAAgB,GAChB,aAAa,GACb,uBAAuB,GACvB,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA4B,SAAQ,kBAAkB;IACrE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/agent/telemetry/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,gBAAgB,GAChB,aAAa,GACb,uBAAuB,GACvB,gBAAgB,CAAC;AAErB;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,IAAI,EAAE,uBAAuB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA4B,SAAQ,kBAAkB;IACrE,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,cAAc,GACtB,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC"}

package/dist/client/client.d.ts

@@ -15,9 +15,9 @@ export interface TrackFeedbackOptions {
     comment?: string;
 }
 /**
- * Public interface for the universal (framework-agnostic) avantGate telemetry client.
+ * Public interface for the universal (framework-agnostic) telemetry client.
  */
-export interface AvantGateClient {
+export interface Client {
     trackSecurityAlert: (alertType: ClientSecurityAlertEvent["alertType"], details: TrackSecurityAlertDetails) => void;
     trackClientDataRendered: (toolId: string, options?: TrackDataRenderedOptions) => void;
     trackFeedback: (feedback: TrackFeedbackOptions) => void;
@@ -30,8 +30,8 @@ export interface AvantGateClient {
     exporter: BrowserTelemetryExporter;
 }
 /**
- * Creates a universal, framework-agnostic avantGate client instance.
+ * Creates a universal, framework-agnostic client instance.
  * Works seamlessly in Vite (Vanilla JS, Vue, Svelte, SolidJS), Next.js, or browser scripts.
  */
-export declare const createAvantGateClient: (config: BrowserTelemetryExporterConfig) => AvantGateClient;
+export declare const createClient: (config: BrowserTelemetryExporterConfig) => Client;
 //# sourceMappingURL=client.d.ts.map

package/dist/client/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,CAClB,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,EAChD,OAAO,EAAE,yBAAyB,KAC/B,IAAI,CAAC;IACV,uBAAuB,EAAE,CACvB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,wBAAwB,KAC/B,IAAI,CAAC;IACV,aAAa,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACxD,aAAa,EAAE,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACzE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,QAAQ,EAAE,wBAAwB,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,8BAA8B,KACrC,eAkDF,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,kBAAkB,EAAE,CAClB,SAAS,EAAE,wBAAwB,CAAC,WAAW,CAAC,EAChD,OAAO,EAAE,yBAAyB,KAC/B,IAAI,CAAC;IACV,uBAAuB,EAAE,CACvB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,wBAAwB,KAC/B,IAAI,CAAC;IACV,aAAa,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACxD,aAAa,EAAE,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACzE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,QAAQ,EAAE,wBAAwB,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,8BAA8B,KACrC,MAkDF,CAAC"}

package/dist/client/index.d.ts

@@ -1,5 +1,9 @@
 export { BrowserTelemetryExporter } from "./browser-exporter";
-export { createAvantGateClient, type AvantGateClient, type TrackSecurityAlertDetails, type TrackDataRenderedOptions, type TrackFeedbackOptions, } from "./client";
-export { useAvantGateTelemetry } from "./useAvantGateTelemetry";
-export type { ClientSecurityAlertEvent, ClientDataRenderedEvent, UserFeedbackEvent, ClientTelemetryEvent, BrowserTelemetryExporterConfig, ClientTelemetryIngestPayload, } from "./types";
+export { createClient, type Client, type TrackDataRenderedOptions, type TrackFeedbackOptions, type TrackSecurityAlertDetails, } from "./client";
+export { useTask } from "./useTask";
+export { useTelemetry } from "./useTelemetry";
+export { createTaskRunner, type TaskRunner, type TaskRunnerOptions, } from "./task-runner";
+export { deriveOpaqueTaskId, generateRunId, createInitialTaskState, validateRetryEligibility, } from "./task-utils";
+export type { TaskExecutionContext, TaskState, UseTaskOptions, UseTaskReturn, } from "./task-types";
+export type { BrowserTelemetryExporterConfig, ClientDataRenderedEvent, ClientSecurityAlertEvent, ClientTelemetryEvent, ClientTelemetryIngestPayload, UserFeedbackEvent, } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EACV,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,KAAK,MAAM,EACX,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,aAAa,GACd,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,8BAA8B,EAC9B,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,SAAS,CAAC"}

package/dist/client/index.js

@@ -21,8 +21,14 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var client_exports = {};
 __export(client_exports, {
   BrowserTelemetryExporter: () => BrowserTelemetryExporter,
-  createAvantGateClient: () => createAvantGateClient,
-  useAvantGateTelemetry: () => useAvantGateTelemetry
+  createClient: () => createClient,
+  createInitialTaskState: () => createInitialTaskState,
+  createTaskRunner: () => createTaskRunner,
+  deriveOpaqueTaskId: () => deriveOpaqueTaskId,
+  generateRunId: () => generateRunId,
+  useTask: () => useTask,
+  useTelemetry: () => useTelemetry,
+  validateRetryEligibility: () => validateRetryEligibility
 });
 module.exports = __toCommonJS(client_exports);
 
@@ -162,7 +168,7 @@ var BrowserTelemetryExporter = class {
 };
 
 // src/client/client.ts
-var createAvantGateClient = (config) => {
+var createClient = (config) => {
   const exporter = new BrowserTelemetryExporter(config);
   const trackSecurityAlert = (alertType, details) => {
     const snippet = details.snippet ?? details.matchedPatternSnippet;
@@ -204,44 +210,241 @@ var createAvantGateClient = (config) => {
   };
 };
 
-// src/client/useAvantGateTelemetry.ts
+// src/client/useTask.ts
 var import_react = require("react");
-var useAvantGateTelemetry = (config) => {
-  const clientRef = (0, import_react.useRef)(null);
-  if (!clientRef.current) {
-    clientRef.current = createAvantGateClient(config);
+
+// src/client/task-utils.ts
+var import_crypto = require("crypto");
+var deriveOpaqueTaskId = (taskName, tenantSalt) => {
+  if (!tenantSalt) {
+    return taskName;
+  }
+  const digest = (0, import_crypto.createHmac)("sha256", tenantSalt).update(taskName).digest("hex").slice(0, 12);
+  return `tsk_${digest}`;
+};
+var generateRunId = (taskId) => {
+  const timestamp = Date.now();
+  const randomSuffix = Math.random().toString(36).slice(2, 7);
+  return `run_${taskId}_${timestamp}_${randomSuffix}`;
+};
+var createInitialTaskState = (taskId, tenantId) => ({
+  isRunning: false,
+  isFailed: false,
+  isSuccess: false,
+  attempts: 0,
+  error: null,
+  data: null,
+  runId: null,
+  parentRunId: null,
+  taskId,
+  tenantId: tenantId ?? null
+});
+var validateRetryEligibility = ({
+  isRunning,
+  attemptCount,
+  maxRetries,
+  hasPreviousInput
+}) => {
+  if (isRunning) {
+    throw new Error("Task is already running");
+  }
+  if (attemptCount >= maxRetries) {
+    throw new Error(`Maximum manual retry limit (${maxRetries}) reached. Please reset.`);
+  }
+  if (!hasPreviousInput) {
+    throw new Error("Cannot retry: no previous execution input found");
+  }
+};
+
+// src/client/task-runner.ts
+var createTaskRunner = (initialOptions) => {
+  let options = { ...initialOptions };
+  let opaqueTaskId = deriveOpaqueTaskId(options.taskName, options.tenantSalt);
+  let state = createInitialTaskState(opaqueTaskId, options.tenantId);
+  let lastInput = null;
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = () => {
+    listeners.forEach((listener) => listener(state));
+  };
+  const setState = (updater) => {
+    state = updater(state);
+    notify();
+  };
+  const markExecutionStart = (newRunId, parentRunId) => {
+    setState((prev) => ({
+      ...prev,
+      isRunning: true,
+      isFailed: false,
+      isSuccess: false,
+      error: null,
+      attempts: prev.attempts + 1,
+      runId: newRunId,
+      parentRunId: parentRunId ?? null
+    }));
+  };
+  const handleExecutionSuccess = (result) => {
+    setState((prev) => ({
+      ...prev,
+      isRunning: false,
+      isSuccess: true,
+      data: result
+    }));
+    options.onSuccess?.(result);
+  };
+  const handleExecutionError = (err) => {
+    const errorObj = err instanceof Error ? err : new Error(String(err));
+    setState((prev) => ({
+      ...prev,
+      isRunning: false,
+      isFailed: true,
+      error: errorObj
+    }));
+    options.onError?.(errorObj);
+    return errorObj;
+  };
+  const executeTask = async (input, parentRunId) => {
+    lastInput = input;
+    const newRunId = generateRunId(opaqueTaskId);
+    markExecutionStart(newRunId, parentRunId);
+    try {
+      const result = await options.handler(input, {
+        parentRunId,
+        attempt: state.attempts,
+        taskId: opaqueTaskId,
+        tenantId: options.tenantId
+      });
+      handleExecutionSuccess(result);
+      return result;
+    } catch (err) {
+      throw handleExecutionError(err);
+    }
+  };
+  const run = (input) => {
+    state = { ...state, attempts: 0 };
+    return executeTask(input);
+  };
+  const retry = () => {
+    validateRetryEligibility({
+      isRunning: state.isRunning,
+      attemptCount: state.attempts,
+      maxRetries: options.maxManualRetries ?? 3,
+      hasPreviousInput: lastInput !== null
+    });
+    return executeTask(lastInput, state.runId ?? void 0);
+  };
+  const reset = () => {
+    lastInput = null;
+    setState(() => createInitialTaskState(opaqueTaskId, options.tenantId));
+  };
+  const updateOptions = (newOptions) => {
+    options = { ...options, ...newOptions };
+    opaqueTaskId = deriveOpaqueTaskId(options.taskName, options.tenantSalt);
+    setState((prev) => ({
+      ...prev,
+      taskId: opaqueTaskId,
+      tenantId: options.tenantId ?? null
+    }));
+  };
+  const subscribe = (listener) => {
+    listeners.add(listener);
+    return () => {
+      listeners.delete(listener);
+    };
+  };
+  const destroy = () => {
+    listeners.clear();
+  };
+  return {
+    getState: () => state,
+    subscribe,
+    run,
+    retry,
+    reset,
+    updateOptions,
+    destroy
+  };
+};
+
+// src/client/useTask.ts
+var useTask = (options) => {
+  const runnerRef = (0, import_react.useRef)(null);
+  if (!runnerRef.current) {
+    runnerRef.current = createTaskRunner(options);
   }
+  const [state, setState] = (0, import_react.useState)(
+    () => runnerRef.current.getState()
+  );
+  (0, import_react.useEffect)(() => {
+    runnerRef.current?.updateOptions(options);
+  });
+  (0, import_react.useEffect)(() => {
+    const runner = runnerRef.current;
+    if (!runner) return;
+    return runner.subscribe(setState);
+  }, []);
   (0, import_react.useEffect)(() => {
+    return () => {
+      runnerRef.current?.destroy();
+      runnerRef.current = null;
+    };
+  }, []);
+  const run = (0, import_react.useCallback)(
+    (input) => runnerRef.current.run(input),
+    []
+  );
+  const retry = (0, import_react.useCallback)(
+    () => runnerRef.current.retry(),
+    []
+  );
+  const reset = (0, import_react.useCallback)(() => {
+    runnerRef.current.reset();
+  }, []);
+  return {
+    ...state,
+    run,
+    retry,
+    reset
+  };
+};
+
+// src/client/useTelemetry.ts
+var import_react2 = require("react");
+var useTelemetry = (config) => {
+  const clientRef = (0, import_react2.useRef)(null);
+  if (!clientRef.current) {
+    clientRef.current = createClient(config);
+  }
+  (0, import_react2.useEffect)(() => {
     clientRef.current?.updateContext({
       runId: config.runId,
       agentName: config.agentName
     });
   }, [config.runId, config.agentName]);
-  (0, import_react.useEffect)(() => {
+  (0, import_react2.useEffect)(() => {
     return () => {
       clientRef.current?.destroy();
       clientRef.current = null;
     };
   }, []);
-  const trackSecurityAlert = (0, import_react.useCallback)(
+  const trackSecurityAlert = (0, import_react2.useCallback)(
     (alertType, details) => {
       clientRef.current?.trackSecurityAlert(alertType, details);
     },
     []
   );
-  const trackClientDataRendered = (0, import_react.useCallback)(
+  const trackClientDataRendered = (0, import_react2.useCallback)(
     (toolId, options) => {
       clientRef.current?.trackClientDataRendered(toolId, options);
     },
     []
   );
-  const trackFeedback = (0, import_react.useCallback)(
+  const trackFeedback = (0, import_react2.useCallback)(
     (feedback) => {
       clientRef.current?.trackFeedback(feedback);
     },
     []
   );
-  return (0, import_react.useMemo)(
+  return (0, import_react2.useMemo)(
     () => ({
       trackSecurityAlert,
       trackClientDataRendered,
@@ -254,6 +457,12 @@ var useAvantGateTelemetry = (config) => {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BrowserTelemetryExporter,
-  createAvantGateClient,
-  useAvantGateTelemetry
+  createClient,
+  createInitialTaskState,
+  createTaskRunner,
+  deriveOpaqueTaskId,
+  generateRunId,
+  useTask,
+  useTelemetry,
+  validateRetryEligibility
 });

package/dist/client/index.mjs

@@ -136,7 +136,7 @@ var BrowserTelemetryExporter = class {
 };
 
 // src/client/client.ts
-var createAvantGateClient = (config) => {
+var createClient = (config) => {
   const exporter = new BrowserTelemetryExporter(config);
   const trackSecurityAlert = (alertType, details) => {
     const snippet = details.snippet ?? details.matchedPatternSnippet;
@@ -178,38 +178,235 @@ var createAvantGateClient = (config) => {
   };
 };
 
-// src/client/useAvantGateTelemetry.ts
-import { useRef, useEffect, useCallback, useMemo } from "react";
-var useAvantGateTelemetry = (config) => {
-  const clientRef = useRef(null);
-  if (!clientRef.current) {
-    clientRef.current = createAvantGateClient(config);
+// src/client/useTask.ts
+import { useCallback, useEffect, useRef, useState } from "react";
+
+// src/client/task-utils.ts
+import { createHmac } from "crypto";
+var deriveOpaqueTaskId = (taskName, tenantSalt) => {
+  if (!tenantSalt) {
+    return taskName;
+  }
+  const digest = createHmac("sha256", tenantSalt).update(taskName).digest("hex").slice(0, 12);
+  return `tsk_${digest}`;
+};
+var generateRunId = (taskId) => {
+  const timestamp = Date.now();
+  const randomSuffix = Math.random().toString(36).slice(2, 7);
+  return `run_${taskId}_${timestamp}_${randomSuffix}`;
+};
+var createInitialTaskState = (taskId, tenantId) => ({
+  isRunning: false,
+  isFailed: false,
+  isSuccess: false,
+  attempts: 0,
+  error: null,
+  data: null,
+  runId: null,
+  parentRunId: null,
+  taskId,
+  tenantId: tenantId ?? null
+});
+var validateRetryEligibility = ({
+  isRunning,
+  attemptCount,
+  maxRetries,
+  hasPreviousInput
+}) => {
+  if (isRunning) {
+    throw new Error("Task is already running");
+  }
+  if (attemptCount >= maxRetries) {
+    throw new Error(`Maximum manual retry limit (${maxRetries}) reached. Please reset.`);
+  }
+  if (!hasPreviousInput) {
+    throw new Error("Cannot retry: no previous execution input found");
   }
+};
+
+// src/client/task-runner.ts
+var createTaskRunner = (initialOptions) => {
+  let options = { ...initialOptions };
+  let opaqueTaskId = deriveOpaqueTaskId(options.taskName, options.tenantSalt);
+  let state = createInitialTaskState(opaqueTaskId, options.tenantId);
+  let lastInput = null;
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = () => {
+    listeners.forEach((listener) => listener(state));
+  };
+  const setState = (updater) => {
+    state = updater(state);
+    notify();
+  };
+  const markExecutionStart = (newRunId, parentRunId) => {
+    setState((prev) => ({
+      ...prev,
+      isRunning: true,
+      isFailed: false,
+      isSuccess: false,
+      error: null,
+      attempts: prev.attempts + 1,
+      runId: newRunId,
+      parentRunId: parentRunId ?? null
+    }));
+  };
+  const handleExecutionSuccess = (result) => {
+    setState((prev) => ({
+      ...prev,
+      isRunning: false,
+      isSuccess: true,
+      data: result
+    }));
+    options.onSuccess?.(result);
+  };
+  const handleExecutionError = (err) => {
+    const errorObj = err instanceof Error ? err : new Error(String(err));
+    setState((prev) => ({
+      ...prev,
+      isRunning: false,
+      isFailed: true,
+      error: errorObj
+    }));
+    options.onError?.(errorObj);
+    return errorObj;
+  };
+  const executeTask = async (input, parentRunId) => {
+    lastInput = input;
+    const newRunId = generateRunId(opaqueTaskId);
+    markExecutionStart(newRunId, parentRunId);
+    try {
+      const result = await options.handler(input, {
+        parentRunId,
+        attempt: state.attempts,
+        taskId: opaqueTaskId,
+        tenantId: options.tenantId
+      });
+      handleExecutionSuccess(result);
+      return result;
+    } catch (err) {
+      throw handleExecutionError(err);
+    }
+  };
+  const run = (input) => {
+    state = { ...state, attempts: 0 };
+    return executeTask(input);
+  };
+  const retry = () => {
+    validateRetryEligibility({
+      isRunning: state.isRunning,
+      attemptCount: state.attempts,
+      maxRetries: options.maxManualRetries ?? 3,
+      hasPreviousInput: lastInput !== null
+    });
+    return executeTask(lastInput, state.runId ?? void 0);
+  };
+  const reset = () => {
+    lastInput = null;
+    setState(() => createInitialTaskState(opaqueTaskId, options.tenantId));
+  };
+  const updateOptions = (newOptions) => {
+    options = { ...options, ...newOptions };
+    opaqueTaskId = deriveOpaqueTaskId(options.taskName, options.tenantSalt);
+    setState((prev) => ({
+      ...prev,
+      taskId: opaqueTaskId,
+      tenantId: options.tenantId ?? null
+    }));
+  };
+  const subscribe = (listener) => {
+    listeners.add(listener);
+    return () => {
+      listeners.delete(listener);
+    };
+  };
+  const destroy = () => {
+    listeners.clear();
+  };
+  return {
+    getState: () => state,
+    subscribe,
+    run,
+    retry,
+    reset,
+    updateOptions,
+    destroy
+  };
+};
+
+// src/client/useTask.ts
+var useTask = (options) => {
+  const runnerRef = useRef(null);
+  if (!runnerRef.current) {
+    runnerRef.current = createTaskRunner(options);
+  }
+  const [state, setState] = useState(
+    () => runnerRef.current.getState()
+  );
   useEffect(() => {
+    runnerRef.current?.updateOptions(options);
+  });
+  useEffect(() => {
+    const runner = runnerRef.current;
+    if (!runner) return;
+    return runner.subscribe(setState);
+  }, []);
+  useEffect(() => {
+    return () => {
+      runnerRef.current?.destroy();
+      runnerRef.current = null;
+    };
+  }, []);
+  const run = useCallback(
+    (input) => runnerRef.current.run(input),
+    []
+  );
+  const retry = useCallback(
+    () => runnerRef.current.retry(),
+    []
+  );
+  const reset = useCallback(() => {
+    runnerRef.current.reset();
+  }, []);
+  return {
+    ...state,
+    run,
+    retry,
+    reset
+  };
+};
+
+// src/client/useTelemetry.ts
+import { useCallback as useCallback2, useEffect as useEffect2, useMemo, useRef as useRef2 } from "react";
+var useTelemetry = (config) => {
+  const clientRef = useRef2(null);
+  if (!clientRef.current) {
+    clientRef.current = createClient(config);
+  }
+  useEffect2(() => {
     clientRef.current?.updateContext({
       runId: config.runId,
       agentName: config.agentName
     });
   }, [config.runId, config.agentName]);
-  useEffect(() => {
+  useEffect2(() => {
     return () => {
       clientRef.current?.destroy();
       clientRef.current = null;
     };
   }, []);
-  const trackSecurityAlert = useCallback(
+  const trackSecurityAlert = useCallback2(
     (alertType, details) => {
       clientRef.current?.trackSecurityAlert(alertType, details);
     },
     []
   );
-  const trackClientDataRendered = useCallback(
+  const trackClientDataRendered = useCallback2(
     (toolId, options) => {
       clientRef.current?.trackClientDataRendered(toolId, options);
     },
     []
   );
-  const trackFeedback = useCallback(
+  const trackFeedback = useCallback2(
     (feedback) => {
       clientRef.current?.trackFeedback(feedback);
     },
@@ -227,6 +424,12 @@ var useAvantGateTelemetry = (config) => {
 };
 export {
   BrowserTelemetryExporter,
-  createAvantGateClient,
-  useAvantGateTelemetry
+  createClient,
+  createInitialTaskState,
+  createTaskRunner,
+  deriveOpaqueTaskId,
+  generateRunId,
+  useTask,
+  useTelemetry,
+  validateRetryEligibility
 };

package/dist/client/task-runner.d.ts

@@ -0,0 +1,13 @@
+import { TaskState, UseTaskOptions } from "./task-types";
+export type TaskRunnerOptions<TInput, TOutput> = UseTaskOptions<TInput, TOutput>;
+export interface TaskRunner<TInput, TOutput> {
+    getState: () => TaskState<TOutput>;
+    subscribe: (listener: (state: TaskState<TOutput>) => void) => () => void;
+    run: (input: TInput) => Promise<TOutput>;
+    retry: () => Promise<TOutput>;
+    reset: () => void;
+    updateOptions: (newOptions: Partial<UseTaskOptions<TInput, TOutput>>) => void;
+    destroy: () => void;
+}
+export declare const createTaskRunner: <TInput, TOutput>(initialOptions: UseTaskOptions<TInput, TOutput>) => TaskRunner<TInput, TOutput>;
+//# sourceMappingURL=task-runner.d.ts.map

package/dist/client/task-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-runner.d.ts","sourceRoot":"","sources":["../../src/client/task-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAQzD,MAAM,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjF,MAAM,WAAW,UAAU,CAAC,MAAM,EAAE,OAAO;IACzC,QAAQ,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,MAAM,IAAI,CAAC;IACzE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,aAAa,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;IAC9E,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,EAAE,OAAO,EAC9C,gBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9C,UAAU,CAAC,MAAM,EAAE,OAAO,CAgI5B,CAAC"}

package/dist/client/task-types.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Context provided to task handlers during execution.
+ */
+export interface TaskExecutionContext {
+    parentRunId?: string;
+    attempt: number;
+    taskId: string;
+    tenantId?: string;
+}
+/**
+ * Configuration options for the useTask hook.
+ */
+export interface UseTaskOptions<TInput, TOutput> {
+    taskName: string;
+    tenantId?: string;
+    tenantSalt?: string;
+    maxManualRetries?: number;
+    handler: (input: TInput, context: TaskExecutionContext) => Promise<TOutput>;
+    onSuccess?: (data: TOutput) => void;
+    onError?: (error: Error) => void;
+}
+/**
+ * State snapshot of the task lifecycle.
+ */
+export interface TaskState<TOutput> {
+    isRunning: boolean;
+    isFailed: boolean;
+    isSuccess: boolean;
+    attempts: number;
+    error: Error | null;
+    data: TOutput | null;
+    runId: string | null;
+    parentRunId: string | null;
+    taskId: string;
+    tenantId: string | null;
+}
+/**
+ * Return interface of useTask.
+ */
+export interface UseTaskReturn<TInput, TOutput> extends TaskState<TOutput> {
+    run: (input: TInput) => Promise<TOutput>;
+    retry: () => Promise<TOutput>;
+    reset: () => void;
+}
+//# sourceMappingURL=task-types.d.ts.map

package/dist/client/task-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-types.d.ts","sourceRoot":"","sources":["../../src/client/task-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,MAAM,EAAE,OAAO;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS,CAAC,OAAO;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,MAAM,EAAE,OAAO,CAAE,SAAQ,SAAS,CAAC,OAAO,CAAC;IACxE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB"}

package/dist/client/task-utils.d.ts

@@ -0,0 +1,29 @@
+import { TaskState } from "./task-types";
+/**
+ * Derives an opaque task identifier using HMAC-SHA256 with tenant salt.
+ * Why: Guarantees Zero-Knowledge Telemetry by obfuscating confidential business operations
+ * (e.g. "wire_transfer", "patient_biopsy") in logs while preserving deterministic correlation.
+ */
+export declare const deriveOpaqueTaskId: (taskName: string, tenantSalt?: string) => string;
+/**
+ * Generates a scoped unique run ID for a task attempt.
+ * Why: Provides deterministic prefixing for APM tracing and Cockpit session linking.
+ */
+export declare const generateRunId: (taskId: string) => string;
+/**
+ * Creates the initial default state for a task.
+ * Why: Reusable reset baseline ensuring consistency across mount and reset cycles.
+ */
+export declare const createInitialTaskState: <TOutput>(taskId: string, tenantId?: string) => TaskState<TOutput>;
+export interface RetryValidationParams {
+    isRunning: boolean;
+    attemptCount: number;
+    maxRetries: number;
+    hasPreviousInput: boolean;
+}
+/**
+ * Validates whether a retry attempt is permitted.
+ * Why: Protects against FinOps token budget exhaustion and UI double-click race conditions.
+ */
+export declare const validateRetryEligibility: ({ isRunning, attemptCount, maxRetries, hasPreviousInput, }: RetryValidationParams) => void;
+//# sourceMappingURL=task-utils.d.ts.map

package/dist/client/task-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-utils.d.ts","sourceRoot":"","sources":["../../src/client/task-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,EAAE,aAAa,MAAM,KAAG,MAS1E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,MAI9C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,OAAO,EAC5C,QAAQ,MAAM,EACd,WAAW,MAAM,KAChB,SAAS,CAAC,OAAO,CAWlB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,4DAKtC,qBAAqB,KAAG,IAU1B,CAAC"}

package/dist/client/useTask.d.ts

@@ -0,0 +1,6 @@
+import { TaskState, TaskExecutionContext, UseTaskOptions, UseTaskReturn } from "./task-types";
+import { deriveOpaqueTaskId } from "./task-utils";
+import { createTaskRunner, type TaskRunner, type TaskRunnerOptions } from "./task-runner";
+export { deriveOpaqueTaskId, createTaskRunner, type TaskState, type TaskExecutionContext, type UseTaskOptions, type UseTaskReturn, type TaskRunner, type TaskRunnerOptions, };
+export declare const useTask: <TInput, TOutput>(options: UseTaskOptions<TInput, TOutput>) => UseTaskReturn<TInput, TOutput>;
+//# sourceMappingURL=useTask.d.ts.map

package/dist/client/useTask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTask.d.ts","sourceRoot":"","sources":["../../src/client/useTask.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,cAAc,EACd,aAAa,EACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EACL,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,MAAM,EAAE,OAAO,EACrC,SAAS,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,KACvC,aAAa,CAAC,MAAM,EAAE,OAAO,CAgD/B,CAAC"}

package/dist/client/useTelemetry.d.ts

@@ -0,0 +1,10 @@
+import { type TrackDataRenderedOptions, type TrackFeedbackOptions, type TrackSecurityAlertDetails } from "./client";
+import type { BrowserTelemetryExporterConfig, ClientSecurityAlertEvent } from "./types";
+export type { TrackDataRenderedOptions, TrackFeedbackOptions, TrackSecurityAlertDetails, };
+export declare const useTelemetry: (config: BrowserTelemetryExporterConfig) => {
+    trackSecurityAlert: (alertType: ClientSecurityAlertEvent["alertType"], details: TrackSecurityAlertDetails) => void;
+    trackClientDataRendered: (toolId: string, options?: TrackDataRenderedOptions) => void;
+    trackFeedback: (feedback: TrackFeedbackOptions) => void;
+    exporter: import("./browser-exporter").BrowserTelemetryExporter | undefined;
+};
+//# sourceMappingURL=useTelemetry.d.ts.map

package/dist/client/useTelemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useTelemetry.d.ts","sourceRoot":"","sources":["../../src/client/useTelemetry.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC/B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,GAC1B,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,QAAQ,8BAA8B;oCAuBlD,wBAAwB,CAAC,WAAW,CAAC,WACvC,yBAAyB,KACjC,IAAI;sCAQG,MAAM,YACJ,wBAAwB,KACjC,IAAI;8BAOI,oBAAoB,KAAG,IAAI;;CAezC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "avantgate",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Zero-infrastructure, in-process AI Application Firewall (AI-WAF) & privacy control plane for TypeScript: real-time prompt guardrails, zero-egress PII redaction, agent tool isolation, anti-IDOR defense, pre-flight token budgets, and multi-model failover.",
   "author": "Gatewall Team",
   "license": "MIT",
@@ -90,18 +90,19 @@
     "test:pii": "tsx tests/pii-extended.test.ts",
     "test:agent": "tsx tests/agent/step-runner.test.ts && tsx tests/agent/isolated-tool.test.ts && tsx tests/agent/dto-pattern.test.ts && tsx tests/agent/tool-patterns.test.ts && tsx tests/agent/storage-adapters.test.ts && tsx tests/agent/tool-aliasing.test.ts && tsx tests/agent/tool-chaining.test.ts && tsx tests/agent/tool-storage.test.ts && tsx tests/agent/telemetry-exporter.test.ts && tsx tests/agent/platform-adapter.test.ts && tsx tests/agent/tool-governance.test.ts && tsx tests/agent/tool-impact.test.ts",
     "test:workflow": "tsx tests/workflow/workflow-saga.test.ts && tsx tests/workflow/workflow-abort.test.ts",
-    "test:client": "tsx tests/client/browser-exporter.test.ts",
+    "test:client": "tsx tests/client/browser-exporter.test.ts && tsx tests/client/use-avantgate-task.test.ts && tsx tests/client/task-runner.test.ts",
     "test:demo": "tsx tests/agent/prospect-ai-demo-scenario.test.ts",
     "gatewall": "npm --prefix gatewall run dev",
     "gatewall:dev": "npm --prefix gatewall run dev",
     "gatewall:build": "npm --prefix gatewall run build",
+    "gatewall:seed": "npm --prefix gatewall run seed:mock",
     "gatewall:start": "npm --prefix gatewall run start",
     "gatewall:docker": "docker compose up -d",
     "lint": "tsc --noEmit",
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "zod": "^3.23.0 || ^4.0.0"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@types/node": "^26.6.2",

package/dist/client/useAvantGateTelemetry.d.ts

@@ -1,14 +0,0 @@
-import { type TrackSecurityAlertDetails, type TrackDataRenderedOptions, type TrackFeedbackOptions } from "./client";
-import type { BrowserTelemetryExporterConfig, ClientSecurityAlertEvent } from "./types";
-export type { TrackSecurityAlertDetails, TrackDataRenderedOptions, TrackFeedbackOptions, };
-/**
- * Lightweight React Hook for front-end telemetry and client-side security event tracking.
- * Encapsulates lifecycle management, useRef persistence, useCallback and useMemo optimization.
- */
-export declare const useAvantGateTelemetry: (config: BrowserTelemetryExporterConfig) => {
-    trackSecurityAlert: (alertType: ClientSecurityAlertEvent["alertType"], details: TrackSecurityAlertDetails) => void;
-    trackClientDataRendered: (toolId: string, options?: TrackDataRenderedOptions) => void;
-    trackFeedback: (feedback: TrackFeedbackOptions) => void;
-    exporter: import("./browser-exporter").BrowserTelemetryExporter | undefined;
-};
-//# sourceMappingURL=useAvantGateTelemetry.d.ts.map

package/dist/client/useAvantGateTelemetry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useAvantGateTelemetry.d.ts","sourceRoot":"","sources":["../../src/client/useAvantGateTelemetry.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAEjB,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,GACrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,8BAA8B;oCAuB3D,wBAAwB,CAAC,WAAW,CAAC,WACvC,yBAAyB,KACjC,IAAI;sCAQG,MAAM,YACJ,wBAAwB,KACjC,IAAI;8BAOI,oBAAoB,KAAG,IAAI;;CAezC,CAAC"}