@burdenoff/fe-libs 2026.1001.4 → 2026.1001.5

package/dist/shared/assistant/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AAGxB,cAAc,wBAAwB,CAAC;AAKvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAG9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,aAAa,CAAC;AAK5B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,QAAQ,CAAC;AAIvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAIhD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,0CAA0C,CAAC;AACzD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAG9C,cAAc,WAAW,CAAC;AAE1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAE3C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAElC,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,iCAAiC,CAAC;AAGhD,cAAc,OAAO,CAAC;AACtB,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AAGxB,cAAc,wBAAwB,CAAC;AAKvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAG9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,aAAa,CAAC;AAK5B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,QAAQ,CAAC;AAIvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAIhD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,0CAA0C,CAAC;AACzD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAG9C,cAAc,WAAW,CAAC;AAE1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAE3C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAElC,cAAc,SAAS,CAAC;AAExB,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,iCAAiC,CAAC;AAGhD,cAAc,OAAO,CAAC;AACtB,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC"}

package/dist/shared/assistant/permissionError.d.ts

@@ -1,5 +1,16 @@
-/** A denial the person can act on, or a session fault they can recover from. */
-export type PermissionRefusal = "denied" | "session";
+/**
+ * A denial the person can act on, a session fault they can recover from, or
+ * the §2.8 provisioning gate (BOFF-8124): the service will not START an
+ * assistant session for this role yet — a platform decision, not an access a
+ * workspace admin can grant, so its copy asks no one for anything.
+ */
+export type PermissionRefusal = "denied" | "session" | "provisioning-gated";
+/**
+ * The i18n key wspace-sandbox-svc refuses `provisionAssistantSandbox` with
+ * while the §2.8 gate is on (FORBIDDEN, for a caller without
+ * `sandbox:create`).
+ */
+export declare const PROVISIONING_NOT_PERMITTED_I18N_KEY = "assistant.errors.assistantProvisioningNotPermitted";
 export interface PermissionRefusalDetail {
     readonly refusal: PermissionRefusal;
     /** The gateway's `authFailure` class, when it sent one. */
@@ -21,4 +32,6 @@ export declare function describePermissionError(error: unknown): PermissionRefus
  * stamps `lang: "en"` on failure copy so it never inherits the turn's language.
  */
 export declare function permissionRefusalMessage(detail: PermissionRefusalDetail): string;
+/** Which outcome copy a permission refusal gets — one table, read by both the message and the outcome. */
+export declare function permissionRefusalCopyId(refusal: PermissionRefusal): "sessionUnverified" | "provisioningNotPermitted" | "permissionDenied";
 //# sourceMappingURL=permissionError.d.ts.map

package/dist/shared/assistant/permissionError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissionError.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/permissionError.ts"],"names":[],"mappings":"AAoCA,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,uBAAuB,GAAG,IAAI,CAwBhC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAIR"}
+{"version":3,"file":"permissionError.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/permissionError.ts"],"names":[],"mappings":"AAoCA;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,uDACM,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,uBAAuB,GAAG,IAAI,CA8BhC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAER;AAED,0GAA0G;AAC1G,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,GACzB,mBAAmB,GAAG,0BAA0B,GAAG,kBAAkB,CASvE"}

package/dist/shared/assistant/permissionError.js

@@ -1,26 +1,36 @@
 import { extensionObjectsIn as e } from "./quota.js";
 import { TURN_OUTCOME_COPY as t } from "./turnOutcomeCopy.js";
 //#region src/shared/assistant/permissionError.ts
-var n = new Set([
+var n = "assistant.errors.assistantProvisioningNotPermitted", r = new Set([
 	"UNAUTHENTICATED_ACTOR",
 	"WORKSPACE_SESSION_UNRESOLVED",
 	"WORKSPACE_CONTEXT_MISSING"
 ]);
-function r(t) {
-	let r = !1, i = null;
-	for (let n of e(t)) {
-		let e = n.code;
-		(e === "FORBIDDEN" || e === "PERMISSION_DENIED") && (r = !0);
-		let t = n.authFailure;
-		typeof t == "string" && t.length > 0 && !i && (i = t);
+function i(t) {
+	let n = !1, i = !1, a = null;
+	for (let r of e(t)) {
+		let e = r.code;
+		(e === "FORBIDDEN" || e === "PERMISSION_DENIED") && (n = !0), r.i18nKey === "assistant.errors.assistantProvisioningNotPermitted" && (i = !0);
+		let t = r.authFailure;
+		typeof t == "string" && t.length > 0 && !a && (a = t);
 	}
-	return !r && !i ? null : {
-		refusal: i && n.has(i) ? "session" : "denied",
-		authFailure: i
+	return !n && !i && !a ? null : a && r.has(a) ? {
+		refusal: "session",
+		authFailure: a
+	} : {
+		refusal: i ? "provisioning-gated" : "denied",
+		authFailure: a
 	};
 }
-function i(e) {
-	return e.refusal === "session" ? t.sessionUnverified.fallback : t.permissionDenied.fallback;
+function a(e) {
+	return t[o(e.refusal)].fallback;
+}
+function o(e) {
+	switch (e) {
+		case "session": return "sessionUnverified";
+		case "provisioning-gated": return "provisioningNotPermitted";
+		case "denied": return "permissionDenied";
+	}
 }
 //#endregion
-export { r as describePermissionError, i as permissionRefusalMessage };
+export { n as PROVISIONING_NOT_PERMITTED_I18N_KEY, i as describePermissionError, o as permissionRefusalCopyId, a as permissionRefusalMessage };

package/dist/shared/assistant/progress.d.ts

@@ -71,7 +71,15 @@ export declare function sanitize(response: string): string;
  * a prompt whose first attempt actually reached the model.
  */
 export declare function isReapedSandboxConnectionError(error: unknown): boolean;
-/** Whether an error is worth one retry from a clean runtime (union of fleet fragments). */
+/**
+ * Whether an error is worth one retry from a clean runtime (union of fleet fragments).
+ *
+ * ★★ BOFF-8124: an assistant LLM refusal (`SandboxProxyError` with a terminal
+ * code) is decided by its code, before any fragment: only a revoked session
+ * retries — a fresh sandbox gets a fresh capability. A daily limit, a busy or
+ * unavailable proxy, or a conversation too long would fail the same way in any
+ * sandbox.
+ */
 export declare function isRecoverable(error: unknown): boolean;
 /**
  * Upsert delta messages into an accumulator keyed by message id. Correct against

package/dist/shared/assistant/progress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAY7E;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,wBAAwB,GACjC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItE;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0BrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAY7E;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,wBAAwB,GACjC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA4BrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}

package/dist/shared/assistant/progress.js

@@ -1,83 +1,86 @@
+import { terminalCodeRecoverability as e } from "./sandboxProxyError.js";
 //#region src/shared/assistant/progress.ts
-function e(e) {
+function t(e) {
 	return e.info?.time?.created ?? 0;
 }
-function t(e) {
+function n(e) {
 	return (e ?? []).filter((e) => e.type === "text" && typeof e.text == "string").map((e) => e.text?.trim() ?? "").filter(Boolean).join("\n");
 }
-function n(e) {
+function r(e) {
 	return e.replace(/[\\[\]]/g, "\\$&").replace(/[\r\n]+/g, " ").trim();
 }
-var r = /^(?:png|jpe?g|gif|webp|avif|bmp|x-icon|vnd\.microsoft\.icon)$/i;
-function i(e, t) {
+var i = /^(?:png|jpe?g|gif|webp|avif|bmp|x-icon|vnd\.microsoft\.icon)$/i;
+function a(e, t) {
 	let n = e.trim();
 	if (/^https?:\/\//i.test(n)) return n.replace(/[()\s<>]/g, (e) => `%${e.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`);
 	if (t) {
 		let e = /^data:image\/([a-z0-9.+-]+);base64,[a-z0-9+/=]*$/i.exec(n);
-		if (e && r.test(e[1])) return n;
+		if (e && i.test(e[1])) return n;
 	}
 	return null;
 }
-function a(e) {
+function o(e) {
 	let t = [];
-	for (let r of e ?? []) {
-		let e = r.type === "image";
-		if (!e && r.type !== "file") continue;
-		let a = r.url ?? (r.data && r.mimeType ? `data:${r.mimeType};base64,${r.data}` : void 0);
-		if (!a) continue;
-		let o = i(a, e);
+	for (let n of e ?? []) {
+		let e = n.type === "image";
+		if (!e && n.type !== "file") continue;
+		let i = n.url ?? (n.data && n.mimeType ? `data:${n.mimeType};base64,${n.data}` : void 0);
+		if (!i) continue;
+		let o = a(i, e);
 		if (!o) continue;
-		let s = n(r.filename ?? (e ? "image" : "file")) || "file";
+		let s = r(n.filename ?? (e ? "image" : "file")) || "file";
 		t.push(e ? `![${s}](${o})` : `[${s}](${o})`);
 	}
 	return t;
 }
-function o(e) {
+function s(e) {
 	return typeof e == "object" && e ? e : void 0;
 }
-function s(e) {
-	let t = o(e.state?.input);
+function c(e) {
+	let t = s(e.state?.input);
 	if (!t) return;
 	let n = t.description;
 	if (typeof n == "string" && n.trim()) return n.trim();
 	let r = t.todos;
 	if (Array.isArray(r)) {
-		let e = o(r.find((e) => o(e)?.status === "in_progress") ?? r[0])?.content;
+		let e = s(r.find((e) => s(e)?.status === "in_progress") ?? r[0])?.content;
 		if (typeof e == "string" && e.trim()) return e.trim();
 	}
 }
-function c(e) {
+function l(e) {
 	return (e ?? []).filter((e) => e.type === "tool" && e.tool).map((e) => {
-		let t = e.state?.status ?? "running", n = e.tool ?? "tool", r = s(e), i = r ? `${n} · ${r}` : n;
+		let t = e.state?.status ?? "running", n = e.tool ?? "tool", r = c(e), i = r ? `${n} · ${r}` : n;
 		return t === "completed" ? `Completed: ${i}` : t === "failed" ? `Failed: ${i}` : `Running: ${i}`;
 	});
 }
-function l(n, r, i) {
-	let o = n.filter((t) => t.info?.role === "assistant" && e(t) >= r).sort((t, n) => e(t) - e(n));
-	if (o.length === 0) return {
+function u(e, r, i) {
+	let a = e.filter((e) => e.info?.role === "assistant" && t(e) >= r).sort((e, n) => t(e) - t(n));
+	if (a.length === 0) return {
 		content: "Thinking…",
 		done: !1
 	};
-	let s = o[o.length - 1], l = i?.accumulateNarration ? o.map((e) => t(e.parts)).filter(Boolean).join("\n\n") : t(s.parts), u = a(s.parts), d = c(s.parts);
+	let s = a[a.length - 1], c = i?.accumulateNarration ? a.map((e) => n(e.parts)).filter(Boolean).join("\n\n") : n(s.parts), u = o(s.parts), d = l(s.parts);
 	return {
 		content: [
-			l,
+			c,
 			...u,
 			...d
 		].filter(Boolean).join("\n\n") || "Thinking…",
-		done: !!s.info?.time?.completed && (!!l || u.length > 0 || d.length > 0)
+		done: !!s.info?.time?.completed && (!!c || u.length > 0 || d.length > 0)
 	};
 }
-function u(e) {
+function d(e) {
 	return e.replace(/(Authorization\s*:\s*Bearer\s+)[^\s\n]+/gi, "$1[REDACTED]").replace(/(X-Workspace-Authorization\s*:\s*Bearer\s+)[^\s\n]+/gi, "$1[REDACTED]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9._-]+\.[A-Za-z0-9._-]+\b/g, "[REDACTED_JWT]").replace(/\bsk-ant-[A-Za-z0-9-]+\b/g, "[REDACTED_API_KEY]");
 }
-function d(e) {
+function f(e) {
 	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
 	return t.includes("unable to connect") && t.includes("able to access the url");
 }
-function f(e) {
-	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
-	return t.includes("rate limit exceeded") || t.includes("unauthorized") || t.includes("k8s api error 401") ? !1 : d(e) ? !0 : [
+function p(t) {
+	let n = e(t);
+	if (n !== null) return n;
+	let r = t instanceof Error ? t.message.toLowerCase() : String(t).toLowerCase();
+	return r.includes("rate limit exceeded") || r.includes("unauthorized") || r.includes("k8s api error 401") ? !1 : f(t) ? !0 : [
 		"sandbox not found",
 		"sandbox is not running",
 		"sandbox service not available yet",
@@ -91,33 +94,33 @@ function f(e) {
 		"proxy error: 404",
 		"proxy error: 502",
 		"proxy error: 503"
-	].some((e) => t.includes(e));
+	].some((e) => r.includes(e));
 }
-function p(t, n) {
+function m(e, n) {
 	let r = /* @__PURE__ */ new Map();
-	for (let e of t) {
-		let t = e.info?.id;
-		t && r.set(t, e);
+	for (let t of e) {
+		let e = t.info?.id;
+		e && r.set(e, t);
 	}
 	for (let e of n) {
 		let t = e.info?.id;
 		t && r.set(t, e);
 	}
-	return Array.from(r.values()).sort((t, n) => e(t) - e(n));
+	return Array.from(r.values()).sort((e, n) => t(e) - t(n));
 }
-function m(n) {
+function h(e) {
 	let r = [];
-	for (let i of n) {
-		let n = i.info?.role;
-		if (n !== "user" && n !== "assistant") continue;
-		let o = i.parts, s = t(o), c = [s, ...a(o)].filter(Boolean).join("\n\n");
-		c && (n === "user" && (s.startsWith("[Context file:") || s.startsWith("User's current context:")) || r.push({
-			id: i.info?.id ?? `${n}-${e(i)}`,
-			role: n,
+	for (let i of e) {
+		let e = i.info?.role;
+		if (e !== "user" && e !== "assistant") continue;
+		let a = i.parts, s = n(a), c = [s, ...o(a)].filter(Boolean).join("\n\n");
+		c && (e === "user" && (s.startsWith("[Context file:") || s.startsWith("User's current context:")) || r.push({
+			id: i.info?.id ?? `${e}-${t(i)}`,
+			role: e,
 			content: c
 		}));
 	}
 	return r;
 }
 //#endregion
-export { l as buildProgress, a as getAssistantMedia, t as getAssistantText, e as getRawMessageCreatedAt, c as getToolProgress, d as isReapedSandboxConnectionError, f as isRecoverable, m as mapSessionToHistory, p as mergeMessagesById, u as sanitize };
+export { u as buildProgress, o as getAssistantMedia, n as getAssistantText, t as getRawMessageCreatedAt, l as getToolProgress, f as isReapedSandboxConnectionError, p as isRecoverable, h as mapSessionToHistory, m as mergeMessagesById, d as sanitize };

package/dist/shared/assistant/quota.d.ts

@@ -30,17 +30,28 @@ export declare function isQuotaExhaustedError(error: unknown): boolean;
  *   never granted. Measured in prod 2026-08-13, this is why `createHealthyBowlFarm` returns
  *   `429 QUOTA_NOT_PROVISIONED` on several workspaces — the core create path is simply dead there.
  *
+ * - `daily-limit` — the assistant's DAILY LLM allowance (per actor, workspace or environment) is
+ *   spent (BOFF-8124). It resets on its own at `resetsAt`; no plan buys more of it, so it NEVER
+ *   offers an upgrade. `quotaName` says whose allowance it was
+ *   (`assistant.llm.{actor,workspace,env}_daily`).
+ *
  * ★ Keyed on `extensions.code`, never on the HTTP status or the message text. Both refusals are
  * `429`, so status alone cannot tell them apart — which is exactly how "no active subscription
- * covers this" would otherwise be reported to a farmer as "you have reached your limit".
+ * covers this" would otherwise be reported to a farmer as "you have reached your limit". The
+ * daily limit is a 429 too (the svc's prompt-async refusal), and a 402 or 429 `turnTerminal`.
  */
-export type QuotaRefusal = "exhausted" | "not-provisioned";
+export type QuotaRefusal = "exhausted" | "not-provisioned" | "daily-limit";
 /**
  * Which refusal this is, or null when the error is not a quota wall at all.
  *
  * `not-provisioned` wins when both appear: it is the more specific and the more serious of the two,
  * and telling someone to upgrade when their plan was never granted sends them to buy something that
  * would not help.
+ *
+ * ★★★ `daily-limit` is checked FIRST, and every assistant LLM code is checked before the bare-429
+ * rule (BOFF-8124 §4.8(c)). The svc answers a send at the daily limit with a 429, and the proxy's
+ * busy refusal reaches the panel as a 429 `turnTerminal`: read by status alone, both would become
+ * `exhausted` — "upgrade your plan" for an allowance that resets tonight, or for a busy proxy.
  */
 export declare function classifyQuotaError(error: unknown): QuotaRefusal | null;
 /**
@@ -62,6 +73,11 @@ export interface QuotaRefusalDetail {
     quotaName: string | null;
     /** The refusing service's trace id, so support can find the request. */
     traceId: string | null;
+    /**
+     * When a `daily-limit` allowance resets (ISO-8601), as the refusal named it; null when it named
+     * none. Unvalidated here — `classifyTurnFailure` decides whether it can be shown.
+     */
+    resetsAt: string | null;
 }
 /** Every `extensions` object reachable on an error — the hosts `codesIn` walks. */
 /**

package/dist/shared/assistant/quota.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmBH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAmB7D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,CAAC;AA0C3D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAStE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,mFAAmF;AACnF;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAmB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAmB5E;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAqBH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAsB7D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,aAAa,CAAC;AA0C3E;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAatE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mFAAmF;AACnF;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAmB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAoB5E;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}

package/dist/shared/assistant/quota.js

@@ -1,76 +1,80 @@
+import { isAssistantLlmTerminalCode as e } from "./sandboxProxyError.js";
 //#region src/shared/assistant/quota.ts
-function e(e, t) {
+function t(e, t) {
 	if (!e || typeof e != "object") return;
 	let n = e[t];
 	return Array.isArray(n) ? n : void 0;
 }
-function t(e) {
-	let t = i(e);
-	if (t) return t === "exhausted";
-	if (!(e instanceof Error)) return !1;
-	let n = e.message.toLowerCase();
-	return n.includes("quota") && (n.includes("exhaust") || n.includes("exceeded"));
+function n(t) {
+	let n = a(t);
+	if (n) return n === "exhausted";
+	if (i(t).some(e) || !(t instanceof Error)) return !1;
+	let r = t.message.toLowerCase();
+	return r.includes("quota") && (r.includes("exhaust") || r.includes("exceeded"));
 }
-var n = {
+var r = {
 	QUOTA_EXHAUSTED: "exhausted",
 	QUOTA_NOT_PROVISIONED: "not-provisioned"
 };
-function r(t) {
-	if (!t || typeof t != "object") return [];
-	let r = [
-		t,
-		t.result,
-		t.networkError
+function i(e) {
+	if (!e || typeof e != "object") return [];
+	let n = [
+		e,
+		e.result,
+		e.networkError
 	], i = [];
-	for (let t of r) {
-		let n = t?.extensions;
+	for (let e of n) {
+		let n = e?.extensions;
 		n?.code && i.push(n.code), n?.errorCode && i.push(n.errorCode);
-		for (let n of e(t, "errors") ?? []) n.extensions?.code && i.push(n.extensions.code), n.extensions?.errorCode && i.push(n.extensions.errorCode);
+		for (let n of t(e, "errors") ?? []) n.extensions?.code && i.push(n.extensions.code), n.extensions?.errorCode && i.push(n.extensions.errorCode);
 	}
-	let a = t.bodyText, o = t instanceof Error ? t.message : void 0;
-	for (let e of [a, o]) if (typeof e == "string") for (let t of Object.keys(n)) e.includes(t) && i.push(t);
+	let a = e.bodyText, o = e instanceof Error ? e.message : void 0;
+	for (let e of [a, o]) if (typeof e == "string") for (let t of Object.keys(r)) e.includes(t) && i.push(t);
 	return i;
 }
-function i(e) {
-	let t = r(e);
-	if (t.includes("QUOTA_NOT_PROVISIONED")) return "not-provisioned";
-	if (t.includes("QUOTA_EXHAUSTED")) return "exhausted";
-	let n = e?.statusCode;
-	return typeof n == "number" && n === 429 ? "exhausted" : null;
-}
 function a(t) {
-	if (!t || typeof t != "object") return [];
+	let n = i(t);
+	if (n.includes("ASSISTANT_DAILY_LIMIT")) return "daily-limit";
+	if (n.includes("QUOTA_NOT_PROVISIONED")) return "not-provisioned";
+	if (n.includes("QUOTA_EXHAUSTED")) return "exhausted";
+	if (n.some(e)) return null;
+	let r = t?.statusCode;
+	return typeof r == "number" && r === 429 ? "exhausted" : null;
+}
+function o(e) {
+	if (!e || typeof e != "object") return [];
 	let n = [
-		t,
-		t.result,
-		t.networkError
+		e,
+		e.result,
+		e.networkError
 	], r = [];
-	for (let t of n) {
-		if (!t || typeof t != "object") continue;
-		let n = t.extensions;
+	for (let e of n) {
+		if (!e || typeof e != "object") continue;
+		let n = e.extensions;
 		n && typeof n == "object" && r.push(n);
-		for (let n of e(t, "errors") ?? []) n.extensions && typeof n.extensions == "object" && r.push(n.extensions);
+		for (let n of t(e, "errors") ?? []) n.extensions && typeof n.extensions == "object" && r.push(n.extensions);
 	}
 	return r;
 }
-function o(e) {
-	let n = i(e) ?? (t(e) ? "exhausted" : null);
-	if (!n) return null;
+function s(e) {
+	let t = a(e) ?? (n(e) ? "exhausted" : null);
+	if (!t) return null;
 	let r = (t) => {
-		for (let n of a(e)) {
+		for (let n of o(e)) {
 			let e = n[t];
 			if (typeof e == "string" && e.length > 0) return e;
 		}
 		return null;
 	};
 	return {
-		refusal: n,
+		refusal: t,
 		quotaName: r("quotaName"),
-		traceId: r("traceId")
+		traceId: r("traceId"),
+		resetsAt: r("resetsAt")
 	};
 }
-function s(e) {
+function c(e) {
 	return `${e}:quota-exhausted`;
 }
 //#endregion
-export { i as classifyQuotaError, o as describeQuotaError, a as extensionObjectsIn, t as isQuotaExhaustedError, s as quotaExhaustedEventName };
+export { a as classifyQuotaError, s as describeQuotaError, o as extensionObjectsIn, n as isQuotaExhaustedError, c as quotaExhaustedEventName };

package/dist/shared/assistant/sandboxProxyError.d.ts

@@ -0,0 +1,91 @@
+/**
+ * A refusal a sandbox request came back with, kept typed (BOFF-8124 §4.8(c)).
+ *
+ * ★★ WHY THIS EXISTS. A turn is sent with `prompt-async`: the image answers
+ * 202 and runs the turn in a detached watcher. Once platform keys leave the
+ * session, the model is reached through a scoped LLM proxy that can refuse a
+ * call — a daily limit, a revoked capability, a body too large. Two paths
+ * bring that refusal back:
+ *
+ * - wspace-sandbox-svc refuses the SEND itself when a daily limit is already
+ *   reached: 429 `{error, code: "ASSISTANT_DAILY_LIMIT", quotaName, resetsAt}`;
+ * - the image records a mid-turn refusal and returns it on
+ *   `/sessions/:id/messages` as `turnTerminal`
+ *   (`{code, error, status, at, quotaName?, resetsAt?}`).
+ *
+ * Before this, `proxyToSandbox` threw `new Error(errBody.error)` and dropped the
+ * code and the status, and nothing read `turnTerminal` at all: a daily limit
+ * either became a bare 429 — which `classifyQuotaError` calls `exhausted`, the
+ * one outcome that offers an UPGRADE — or a turn that polled until the client
+ * budget ran out and closed as "incomplete".
+ *
+ * ★ The message stays the body's `error` text, so every substring rule in
+ * `transportErrors.ts` and `progress.ts` keeps reading what it read before.
+ * The code rides in `extensions`, the shape `extensionObjectsIn` already walks.
+ *
+ * ★ A LEAF MODULE: no imports. `quota.ts`, `progress.ts` and
+ * `transportErrors.ts` read it, and none of them may pull `api.ts` (which
+ * imports the store) just to recognise an error.
+ */
+/** What rides in `extensions`: only these four, and only as non-empty strings. */
+export interface SandboxProxyErrorExtensions {
+    code: string;
+    quotaName?: string;
+    resetsAt?: string;
+    i18nKey?: string;
+}
+export declare class SandboxProxyError extends Error {
+    /**
+     * The HTTP status the refusal carried: the proxied response's for a refused
+     * request, the LLM proxy's for a `turnTerminal`. Null when the source named
+     * none — never invented.
+     */
+    readonly status: number | null;
+    readonly extensions: SandboxProxyErrorExtensions;
+    constructor(message: string, status: number | null, extensions: SandboxProxyErrorExtensions);
+}
+/**
+ * The codes the image reports when a turn ends on a terminal refusal from the
+ * assistant LLM proxy (design §4.7; `imageCode` in the mirrored
+ * `contract/llm-refusal-contract.json`). The svc's synchronous prompt-async
+ * refusal uses `ASSISTANT_DAILY_LIMIT` too.
+ */
+export declare const ASSISTANT_LLM_TERMINAL_CODES: readonly ["ASSISTANT_SESSION_REVOKED", "ASSISTANT_LLM_UNAVAILABLE", "ASSISTANT_CONVERSATION_TOO_LONG", "ASSISTANT_DAILY_LIMIT", "ASSISTANT_LLM_BUSY"];
+export type AssistantLlmTerminalCode = (typeof ASSISTANT_LLM_TERMINAL_CODES)[number];
+export declare function isAssistantLlmTerminalCode(code: unknown): code is AssistantLlmTerminalCode;
+/**
+ * The terminal LLM code a refusal carries, or null.
+ *
+ * ★ Read from the error's OWN `extensions` (where `SandboxProxyError` puts
+ * it), duck-typed rather than `instanceof`: a second copy of this module in a
+ * consumer's bundle must not turn a daily limit back into a retry.
+ */
+export declare function assistantLlmTerminalCodeOf(error: unknown): AssistantLlmTerminalCode | null;
+/**
+ * Is this worth one retry with a fresh sandbox, as far as a terminal LLM code
+ * says? `true`/`false` when the error carries one, `null` when it does not
+ * (the caller's own rules decide).
+ *
+ * ★ Only `ASSISTANT_SESSION_REVOKED` retries: the sandbox's capability no
+ * longer verifies, and a fresh sandbox gets a fresh one. A daily limit, a busy
+ * or unavailable proxy, or a conversation too long for the model is the same
+ * in any sandbox — a replay only spends another provision and another prompt.
+ */
+export declare function terminalCodeRecoverability(error: unknown): boolean | null;
+/**
+ * The typed error for a refusal body, or null when the body carries no string
+ * `code` (the caller then throws exactly what it threw before).
+ *
+ * `message` is the caller's, unchanged: the body's `error` text or its
+ * `Proxy error: <status>` fallback.
+ */
+export declare function sandboxProxyErrorFromBody(message: string, status: number | null, body: unknown): SandboxProxyError | null;
+/**
+ * The typed error for a `/messages` body's `turnTerminal`, or null when there
+ * is none (or it names no code, so it cannot be classified).
+ *
+ * ★ Its `status` is the LLM proxy's (402 for a daily limit, 429 for busy),
+ * never the 200 of the `/messages` read that carried it.
+ */
+export declare function sandboxProxyErrorFromTurnTerminal(turnTerminal: unknown): SandboxProxyError | null;
+//# sourceMappingURL=sandboxProxyError.d.ts.map

package/dist/shared/assistant/sandboxProxyError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxProxyError.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/sandboxProxyError.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,kFAAkF;AAClF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;gBAG/C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,UAAU,EAAE,2BAA2B;CAO1C;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,uJAM/B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,OAAO,GACZ,IAAI,IAAI,wBAAwB,CAKlC;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,wBAAwB,GAAG,IAAI,CAMjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAIzE;AAKD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,IAAI,EAAE,OAAO,GACZ,iBAAiB,GAAG,IAAI,CAS1B;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,OAAO,GACpB,iBAAiB,GAAG,IAAI,CAW1B"}

package/dist/shared/assistant/sandboxProxyError.js

@@ -0,0 +1,43 @@
+//#region src/shared/assistant/sandboxProxyError.ts
+var e = class extends Error {
+	status;
+	extensions;
+	constructor(e, t, n) {
+		super(e), this.name = "SandboxProxyError", this.status = t, this.extensions = n;
+	}
+}, t = [
+	"ASSISTANT_SESSION_REVOKED",
+	"ASSISTANT_LLM_UNAVAILABLE",
+	"ASSISTANT_CONVERSATION_TOO_LONG",
+	"ASSISTANT_DAILY_LIMIT",
+	"ASSISTANT_LLM_BUSY"
+];
+function n(e) {
+	return typeof e == "string" && t.includes(e);
+}
+function r(e) {
+	if (!e || typeof e != "object") return null;
+	let t = e.extensions;
+	if (!t || typeof t != "object") return null;
+	let r = t.code;
+	return n(r) ? r : null;
+}
+function i(e) {
+	let t = r(e);
+	return t === null ? null : t === "ASSISTANT_SESSION_REVOKED";
+}
+var a = (e) => typeof e == "string" && e.length > 0;
+function o(t, n, r) {
+	if (!r || typeof r != "object") return null;
+	let i = r;
+	if (!a(i.code)) return null;
+	let o = { code: i.code };
+	return a(i.quotaName) && (o.quotaName = i.quotaName), a(i.resetsAt) && (o.resetsAt = i.resetsAt), a(i.i18nKey) && (o.i18nKey = i.i18nKey), new e(t, n, o);
+}
+function s(e) {
+	if (!e || typeof e != "object") return null;
+	let t = e, n = typeof t.status == "number" && Number.isInteger(t.status) ? t.status : null;
+	return o(a(t.error) ? t.error : `Proxy error: ${n ?? "unknown"}`, n, t);
+}
+//#endregion
+export { t as ASSISTANT_LLM_TERMINAL_CODES, e as SandboxProxyError, r as assistantLlmTerminalCodeOf, n as isAssistantLlmTerminalCode, o as sandboxProxyErrorFromBody, s as sandboxProxyErrorFromTurnTerminal, i as terminalCodeRecoverability };

package/dist/shared/assistant/transportErrors.d.ts

@@ -35,7 +35,20 @@
  * the multimodal parts?
  */
 export declare function isMultimodalBodyRejection(error: unknown): boolean;
-/** A refusal (rate limit, unauthorized) — never cured by another sandbox or a probe. */
+/**
+ * A refusal (rate limit, unauthorized) — never cured by another sandbox or a probe.
+ *
+ * ★ BOFF-8124: so is every assistant LLM refusal but a revoked session (see
+ * `terminalCodeRecoverability`).
+ */
 export declare function isNeverRecoverableAssistantError(error: unknown): boolean;
+/**
+ * Worth one replay against a fresh sandbox and session?
+ *
+ * ★★ BOFF-8124 §4.8(c): an assistant LLM refusal is decided by its CODE
+ * before any fragment is read — only `ASSISTANT_SESSION_REVOKED` keeps the
+ * single retry with a fresh sandbox. A daily limit replayed would provision
+ * again only to be refused again.
+ */
 export declare function isRecoverableAssistantError(error: unknown): boolean;
 //# sourceMappingURL=transportErrors.d.ts.map