Function AuthedSurface

cli/src/app.tsx:347–436

({
  chatKey,
  headerContent,
  initialPrompt,
  agentId,
  fileTree,
  inputRef,
  setIsAuthenticated,
  setUser,
  logoutMutation,
  continueChat,
  continueChatId,
  authStatus,
  initialMode,
  gitRoot,
  onSwitchToGitRoot,
  showChatHistory,
  onSelectChat,
  onCancelChatHistory,
  onNewChat,
}: AuthedSurfaceProps)

 * we have a token).
 */
const AuthedSurface = ({
  chatKey,
  headerContent,
  initialPrompt,
  agentId,
  fileTree,
  inputRef,
  setIsAuthenticated,
  setUser,
  logoutMutation,
  continueChat,
  continueChatId,
  authStatus,
  initialMode,
  gitRoot,
  onSwitchToGitRoot,
  showChatHistory,
  onSelectChat,
  onCancelChatHistory,
  onNewChat,
}: AuthedSurfaceProps) => {
  const { session, error: sessionError } = useFreebuffSession()

  // Terminal state: a 409 from the gate means another CLI rotated our
  // instance id. Show a dedicated screen and stop polling — don't fall back
  // into the waiting room, which would look like normal queued progress.
  if (IS_FREEBUFF && session?.status === 'superseded') {
    return <FreebuffSupersededScreen />
  }

  // Route every non-admitted state through the pre-chat screen:
  //   null     → initial GET in flight (brief)
  //   'none'   → no seat yet; show model-picker landing
  //   'queued' → waiting our turn
  //   'country_blocked' → terminal region-gate message
  //   'banned' → terminal account-banned message
  //   'rate_limited' → hit per-model session quota; terminal for this run
  //   'takeover_prompt' → another local CLI already holds this account
  //
  // 'ended' deliberately falls through to <Chat>: the agent may still be
  // finishing work under the server-side grace period, and the chat surface
  // itself swaps the input box for the session-ended banner.
  if (
    IS_FREEBUFF &&
    (session === null ||
      session.status === 'queued' ||
      session.status === 'none' ||
      session.status === 'country_blocked' ||
      session.status === 'banned' ||
      session.status === 'rate_limited' ||
      session.status === 'takeover_prompt')
  ) {
    return <WaitingRoomScreen session={session} error={sessionError} />
  }

  // Chat history renders inside AuthedSurface so the freebuff session stays
  // mounted while the user browses history. Unmounting this surface would
  // DELETE the session row and drop the user back into the waiting room on