@burdenoff/fe-libs 2026.1001.4 → 2026.1001.6

package/dist/shared/assistant/index.d.ts

@@ -118,6 +118,7 @@ export * from './ui/composer/AssistantAttachmentChips';
 export * from './ui/composer/AssistantConnectSourceItem';
 export * from './ui/composer/connectSource';
 export * from './preview/types';
+export * from './preview/writeActionResults';
 export * from './preview/context';
 export * from './preview/previewTransitions';
 export * from './preview/surfaceState';
@@ -185,6 +186,7 @@ export * from './useAssistantApiAccess';
 export * from './useConversationTurns';
 export * from './transportErrors';
 export * from './quota';
+export * from './sandboxProxyError';
 export * from './permissionError';
 export * from './autoRouting';
 export * from './turnOutcome';

package/dist/shared/assistant/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AAGxB,cAAc,wBAAwB,CAAC;AAKvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAG9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,aAAa,CAAC;AAK5B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,QAAQ,CAAC;AAIvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAIhD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,0CAA0C,CAAC;AACzD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAG9C,cAAc,WAAW,CAAC;AAE1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAE3C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAElC,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,iCAAiC,CAAC;AAGhD,cAAc,OAAO,CAAC;AACtB,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AAGxB,cAAc,wBAAwB,CAAC;AAKvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+BAA+B,CAAC;AAG9C,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,aAAa,CAAC;AAK5B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,QAAQ,CAAC;AAIvB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AAGvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAIhD,cAAc,kCAAkC,CAAC;AACjD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC;AAGnC,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qCAAqC,CAAC;AACpD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,0CAA0C,CAAC;AACzD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,yCAAyC,CAAC;AACxD,cAAc,qCAAqC,CAAC;AACpD,cAAc,oCAAoC,CAAC;AACnD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAG9C,cAAc,WAAW,CAAC;AAE1B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAG7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAE3C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAElC,cAAc,SAAS,CAAC;AAExB,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAE5B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,kBAAkB,CAAC;AAGjC,cAAc,oBAAoB,CAAC;AAEnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,iCAAiC,CAAC;AAGhD,cAAc,OAAO,CAAC;AACtB,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC"}

package/dist/shared/assistant/permissionError.d.ts

@@ -1,5 +1,16 @@
-/** A denial the person can act on, or a session fault they can recover from. */
-export type PermissionRefusal = "denied" | "session";
+/**
+ * A denial the person can act on, a session fault they can recover from, or
+ * the §2.8 provisioning gate (BOFF-8124): the service will not START an
+ * assistant session for this role yet — a platform decision, not an access a
+ * workspace admin can grant, so its copy asks no one for anything.
+ */
+export type PermissionRefusal = "denied" | "session" | "provisioning-gated";
+/**
+ * The i18n key wspace-sandbox-svc refuses `provisionAssistantSandbox` with
+ * while the §2.8 gate is on (FORBIDDEN, for a caller without
+ * `sandbox:create`).
+ */
+export declare const PROVISIONING_NOT_PERMITTED_I18N_KEY = "assistant.errors.assistantProvisioningNotPermitted";
 export interface PermissionRefusalDetail {
     readonly refusal: PermissionRefusal;
     /** The gateway's `authFailure` class, when it sent one. */
@@ -21,4 +32,6 @@ export declare function describePermissionError(error: unknown): PermissionRefus
  * stamps `lang: "en"` on failure copy so it never inherits the turn's language.
  */
 export declare function permissionRefusalMessage(detail: PermissionRefusalDetail): string;
+/** Which outcome copy a permission refusal gets — one table, read by both the message and the outcome. */
+export declare function permissionRefusalCopyId(refusal: PermissionRefusal): "sessionUnverified" | "provisioningNotPermitted" | "permissionDenied";
 //# sourceMappingURL=permissionError.d.ts.map

package/dist/shared/assistant/permissionError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissionError.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/permissionError.ts"],"names":[],"mappings":"AAoCA,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,uBAAuB,GAAG,IAAI,CAwBhC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAIR"}
+{"version":3,"file":"permissionError.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/permissionError.ts"],"names":[],"mappings":"AAoCA;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,oBAAoB,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,uDACM,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AASD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,uBAAuB,GAAG,IAAI,CA8BhC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAER;AAED,0GAA0G;AAC1G,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,GACzB,mBAAmB,GAAG,0BAA0B,GAAG,kBAAkB,CASvE"}

package/dist/shared/assistant/permissionError.js

@@ -1,26 +1,36 @@
 import { extensionObjectsIn as e } from "./quota.js";
 import { TURN_OUTCOME_COPY as t } from "./turnOutcomeCopy.js";
 //#region src/shared/assistant/permissionError.ts
-var n = new Set([
+var n = "assistant.errors.assistantProvisioningNotPermitted", r = new Set([
 	"UNAUTHENTICATED_ACTOR",
 	"WORKSPACE_SESSION_UNRESOLVED",
 	"WORKSPACE_CONTEXT_MISSING"
 ]);
-function r(t) {
-	let r = !1, i = null;
-	for (let n of e(t)) {
-		let e = n.code;
-		(e === "FORBIDDEN" || e === "PERMISSION_DENIED") && (r = !0);
-		let t = n.authFailure;
-		typeof t == "string" && t.length > 0 && !i && (i = t);
+function i(t) {
+	let n = !1, i = !1, a = null;
+	for (let r of e(t)) {
+		let e = r.code;
+		(e === "FORBIDDEN" || e === "PERMISSION_DENIED") && (n = !0), r.i18nKey === "assistant.errors.assistantProvisioningNotPermitted" && (i = !0);
+		let t = r.authFailure;
+		typeof t == "string" && t.length > 0 && !a && (a = t);
 	}
-	return !r && !i ? null : {
-		refusal: i && n.has(i) ? "session" : "denied",
-		authFailure: i
+	return !n && !i && !a ? null : a && r.has(a) ? {
+		refusal: "session",
+		authFailure: a
+	} : {
+		refusal: i ? "provisioning-gated" : "denied",
+		authFailure: a
 	};
 }
-function i(e) {
-	return e.refusal === "session" ? t.sessionUnverified.fallback : t.permissionDenied.fallback;
+function a(e) {
+	return t[o(e.refusal)].fallback;
+}
+function o(e) {
+	switch (e) {
+		case "session": return "sessionUnverified";
+		case "provisioning-gated": return "provisioningNotPermitted";
+		case "denied": return "permissionDenied";
+	}
 }
 //#endregion
-export { r as describePermissionError, i as permissionRefusalMessage };
+export { n as PROVISIONING_NOT_PERMITTED_I18N_KEY, i as describePermissionError, o as permissionRefusalCopyId, a as permissionRefusalMessage };

package/dist/shared/assistant/preview/AssistantPreviewOverlay.js

@@ -1,7 +1,7 @@
 import { useAssistantTr as e } from "../i18n.js";
 import { useAssistantStore as t } from "../store.js";
-import { hasAssistantPreviewSurface as n } from "./types.js";
-import { useAssistantPreview as r } from "./context.js";
+import { useAssistantPreview as n } from "./context.js";
+import { hasAssistantPreviewSurface as r } from "./types.js";
 import { useOverlayFocus as i } from "../ui/useOverlayFocus.js";
 import { Component as a } from "react";
 import { Fragment as o, jsx as s, jsxs as c } from "react/jsx-runtime";
@@ -27,11 +27,11 @@ var l = class extends a {
 		return this.state.failed ? this.props.fallback : this.props.children;
 	}
 }, u = ({ controller: e }) => /* @__PURE__ */ s(o, { children: e.render() }), d = ({ onClose: a }) => {
-	let o = r(), d = e(), f = t((e) => {
+	let o = n(), d = e(), f = t((e) => {
 		let t = e.activeConversationId, n = t ? e.processingByConversationId[t]?.messageId : null;
 		return !t || !n ? "idle" : `${t}:${n}#${e.conversations.find((e) => e.id === t)?.updatedAt ?? ""}`;
 	}), p = i("assistant-toggle-preview");
-	return n(o) ? /* @__PURE__ */ c("div", {
+	return r(o) ? /* @__PURE__ */ c("div", {
 		ref: p,
 		tabIndex: -1,
 		className: "absolute inset-0 z-10 flex flex-col bg-bg-surface outline-none animate-in slide-in-from-right-2 fade-in duration-200",

package/dist/shared/assistant/preview/types.d.ts

@@ -62,6 +62,19 @@ export interface AssistantPreviewRun {
 export type AssistantPreviewEvent = {
     kind: "start";
     run: AssistantPreviewRun;
+} | {
+    /** An approved write finished, independently of the model's turn. */
+    kind: "action-result";
+    run: AssistantPreviewRun;
+    action: {
+        id: string;
+        operation: string;
+        responseKey: string;
+        /** Approved inputs, with sensitive arguments omitted. */
+        arguments: Readonly<Record<string, unknown>>;
+        /** The sandbox's redacted GraphQL response, never model narration. */
+        result: unknown;
+    };
 } | {
     kind: "snapshot";
     run: AssistantPreviewRun;

package/dist/shared/assistant/preview/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/preview/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,GAC3C;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,mBAAmB,CAAC;IACzB;;;;;;;;OAQG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACrC,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,GAAG,EAAE,mBAAmB,CAAC;IACzB;;;;;;;;OAQG;IACH,OAAO,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;IAC5C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,EAAE,MAAM,SAAS,CAAC;IAEzB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAEjD;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6EAA6E;AAC7E,MAAM,MAAM,iCAAiC,GAAG,0BAA0B,GAAG;IAC3E,MAAM,EAAE,MAAM,SAAS,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,0BAA0B,GAAG,IAAI,GAAG,SAAS,GACxD,UAAU,IAAI,iCAAiC,CAEjD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/preview/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,GAC3C;IACE,qEAAqE;IACrE,IAAI,EAAE,eAAe,CAAC;IACtB,GAAG,EAAE,mBAAmB,CAAC;IACzB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,yDAAyD;QACzD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,sEAAsE;QACtE,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;CACH,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,mBAAmB,CAAC;IACzB;;;;;;;;OAQG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACrC,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,GAAG,EAAE,mBAAmB,CAAC;IACzB;;;;;;;;OAQG;IACH,OAAO,EAAE,UAAU,GAAG,OAAO,GAAG,WAAW,CAAC;IAC5C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEN;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,EAAE,MAAM,SAAS,CAAC;IAEzB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAEjD;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,6EAA6E;AAC7E,MAAM,MAAM,iCAAiC,GAAG,0BAA0B,GAAG;IAC3E,MAAM,EAAE,MAAM,SAAS,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,0BAA0B,GAAG,IAAI,GAAG,SAAS,GACxD,UAAU,IAAI,iCAAiC,CAEjD"}

package/dist/shared/assistant/preview/useAssistantPreviewBridge.d.ts

@@ -1,3 +1,23 @@
-import { AssistantPreviewController } from './types';
+import { AssistantPreviewController, AssistantPreviewEvent } from './types';
+/**
+ * Shared delivery for turn events and approved action results. The main effect
+ * and the unmount cleanup had already drifted: the
+ * receiver fix and the async-rejection guard were applied to one and not the
+ * other, so closing the assistant mid-run delivered the run's only terminal
+ * event through the broken path. One function is the fix for the class of bug,
+ * not just for the instance.
+ *
+ * ★ Called ON the controller, not as a detached function: a product may supply
+ * a class instance or an object method whose `onEvent` uses `this`, and a bare
+ * call loses the receiver — the resulting throw is caught here, so the product
+ * would silently receive nothing at all.
+ *
+ * ★ A promise-like return has its rejection handled without awaiting. `onEvent`
+ * is typed as returning void, which TypeScript lets an `async` function
+ * satisfy, so a throw after an `await` escapes the `try` entirely and surfaces
+ * as an unhandled rejection in the HOST app — breaking the containment this
+ * wrapper exists to provide.
+ */
+export declare function deliverPreviewEvent(controller: AssistantPreviewController | null | undefined, event: AssistantPreviewEvent): void;
 export declare function useAssistantPreviewBridge(controller: AssistantPreviewController | null): void;
 //# sourceMappingURL=useAssistantPreviewBridge.d.ts.map

package/dist/shared/assistant/preview/useAssistantPreviewBridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAssistantPreviewBridge.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/preview/useAssistantPreviewBridge.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,0BAA0B,EAAyB,MAAM,SAAS,CAAC;AA2CjF,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,0BAA0B,GAAG,IAAI,GAC5C,IAAI,CA+MN"}
+{"version":3,"file":"useAssistantPreviewBridge.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/preview/useAssistantPreviewBridge.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAIjF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,0BAA0B,GAAG,IAAI,GAAG,SAAS,EACzD,KAAK,EAAE,qBAAqB,GAC3B,IAAI,CAeN;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,0BAA0B,GAAG,IAAI,GAC5C,IAAI,CA+MN"}

package/dist/shared/assistant/preview/useAssistantPreviewBridge.js

@@ -75,4 +75,4 @@ function d(d) {
 	]);
 }
 //#endregion
-export { d as useAssistantPreviewBridge };
+export { u as deliverPreviewEvent, d as useAssistantPreviewBridge };

package/dist/shared/assistant/preview/writeActionResults.d.ts

@@ -0,0 +1,10 @@
+import { WriteProposalView } from '../writeProposals';
+import { PreviewOwner } from './surfaceState';
+import { AssistantPreviewEvent } from './types';
+/** Only a recorded successful execution supplies data to a live preview. */
+export declare function writeActionResultEvents(view: Pick<WriteProposalView, 'proposalId' | 'status' | 'result'> & {
+    description: Pick<WriteProposalView['description'], 'rootFields'>;
+}, conversationId: string, messageId: string, owner: PreviewOwner): Extract<AssistantPreviewEvent, {
+    kind: "action-result";
+}>[];
+//# sourceMappingURL=writeActionResults.d.ts.map

package/dist/shared/assistant/preview/writeActionResults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeActionResults.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/preview/writeActionResults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAuB,MAAM,SAAS,CAAC;AAE1E,4EAA4E;AAC5E,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAAG;IAClE,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,CAAC;CACnE,EACD,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,qBAAqB,EAAE;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC,EAAE,CA+B7D"}

package/dist/shared/assistant/preview/writeActionResults.js

@@ -0,0 +1,26 @@
+//#region src/shared/assistant/preview/writeActionResults.ts
+function e(e, t, n, r) {
+	if (e.status !== "succeeded" || !e.result || e.result.errors?.length || e.result.dataPreview === void 0) return [];
+	let i = {
+		runId: `${t}:${n}`,
+		conversationId: t,
+		messageId: n,
+		...r
+	};
+	return e.description.rootFields.map((t) => {
+		let n = t.alias ?? t.field;
+		return {
+			kind: "action-result",
+			run: i,
+			action: {
+				id: `${e.proposalId}:${n}`,
+				operation: t.field,
+				responseKey: n,
+				arguments: Object.fromEntries(t.args.filter((e) => !e.sensitive).map((e) => [e.name, e.value])),
+				result: e.result?.dataPreview
+			}
+		};
+	});
+}
+//#endregion
+export { e as writeActionResultEvents };

package/dist/shared/assistant/progress.d.ts

@@ -71,7 +71,15 @@ export declare function sanitize(response: string): string;
  * a prompt whose first attempt actually reached the model.
  */
 export declare function isReapedSandboxConnectionError(error: unknown): boolean;
-/** Whether an error is worth one retry from a clean runtime (union of fleet fragments). */
+/**
+ * Whether an error is worth one retry from a clean runtime (union of fleet fragments).
+ *
+ * ★★ BOFF-8124: an assistant LLM refusal (`SandboxProxyError` with a terminal
+ * code) is decided by its code, before any fragment: only a revoked session
+ * retries — a fresh sandbox gets a fresh capability. A daily limit, a busy or
+ * unavailable proxy, or a conversation too long would fail the same way in any
+ * sandbox.
+ */
 export declare function isRecoverable(error: unknown): boolean;
 /**
  * Upsert delta messages into an accumulator keyed by message id. Correct against

package/dist/shared/assistant/progress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAY7E;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,wBAAwB,GACjC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItE;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0BrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAY7E;AAED;;;;GAIG;AACH;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,wBAAwB,GACjC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CA6BpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA4BrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}

package/dist/shared/assistant/progress.js

@@ -1,83 +1,86 @@
+import { terminalCodeRecoverability as e } from "./sandboxProxyError.js";
 //#region src/shared/assistant/progress.ts
-function e(e) {
+function t(e) {
 	return e.info?.time?.created ?? 0;
 }
-function t(e) {
+function n(e) {
 	return (e ?? []).filter((e) => e.type === "text" && typeof e.text == "string").map((e) => e.text?.trim() ?? "").filter(Boolean).join("\n");
 }
-function n(e) {
+function r(e) {
 	return e.replace(/[\\[\]]/g, "\\$&").replace(/[\r\n]+/g, " ").trim();
 }
-var r = /^(?:png|jpe?g|gif|webp|avif|bmp|x-icon|vnd\.microsoft\.icon)$/i;
-function i(e, t) {
+var i = /^(?:png|jpe?g|gif|webp|avif|bmp|x-icon|vnd\.microsoft\.icon)$/i;
+function a(e, t) {
 	let n = e.trim();
 	if (/^https?:\/\//i.test(n)) return n.replace(/[()\s<>]/g, (e) => `%${e.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`);
 	if (t) {
 		let e = /^data:image\/([a-z0-9.+-]+);base64,[a-z0-9+/=]*$/i.exec(n);
-		if (e && r.test(e[1])) return n;
+		if (e && i.test(e[1])) return n;
 	}
 	return null;
 }
-function a(e) {
+function o(e) {
 	let t = [];
-	for (let r of e ?? []) {
-		let e = r.type === "image";
-		if (!e && r.type !== "file") continue;
-		let a = r.url ?? (r.data && r.mimeType ? `data:${r.mimeType};base64,${r.data}` : void 0);
-		if (!a) continue;
-		let o = i(a, e);
+	for (let n of e ?? []) {
+		let e = n.type === "image";
+		if (!e && n.type !== "file") continue;
+		let i = n.url ?? (n.data && n.mimeType ? `data:${n.mimeType};base64,${n.data}` : void 0);
+		if (!i) continue;
+		let o = a(i, e);
 		if (!o) continue;
-		let s = n(r.filename ?? (e ? "image" : "file")) || "file";
+		let s = r(n.filename ?? (e ? "image" : "file")) || "file";
 		t.push(e ? `![${s}](${o})` : `[${s}](${o})`);
 	}
 	return t;
 }
-function o(e) {
+function s(e) {
 	return typeof e == "object" && e ? e : void 0;
 }
-function s(e) {
-	let t = o(e.state?.input);
+function c(e) {
+	let t = s(e.state?.input);
 	if (!t) return;
 	let n = t.description;
 	if (typeof n == "string" && n.trim()) return n.trim();
 	let r = t.todos;
 	if (Array.isArray(r)) {
-		let e = o(r.find((e) => o(e)?.status === "in_progress") ?? r[0])?.content;
+		let e = s(r.find((e) => s(e)?.status === "in_progress") ?? r[0])?.content;
 		if (typeof e == "string" && e.trim()) return e.trim();
 	}
 }
-function c(e) {
+function l(e) {
 	return (e ?? []).filter((e) => e.type === "tool" && e.tool).map((e) => {
-		let t = e.state?.status ?? "running", n = e.tool ?? "tool", r = s(e), i = r ? `${n} · ${r}` : n;
+		let t = e.state?.status ?? "running", n = e.tool ?? "tool", r = c(e), i = r ? `${n} · ${r}` : n;
 		return t === "completed" ? `Completed: ${i}` : t === "failed" ? `Failed: ${i}` : `Running: ${i}`;
 	});
 }
-function l(n, r, i) {
-	let o = n.filter((t) => t.info?.role === "assistant" && e(t) >= r).sort((t, n) => e(t) - e(n));
-	if (o.length === 0) return {
+function u(e, r, i) {
+	let a = e.filter((e) => e.info?.role === "assistant" && t(e) >= r).sort((e, n) => t(e) - t(n));
+	if (a.length === 0) return {
 		content: "Thinking…",
 		done: !1
 	};
-	let s = o[o.length - 1], l = i?.accumulateNarration ? o.map((e) => t(e.parts)).filter(Boolean).join("\n\n") : t(s.parts), u = a(s.parts), d = c(s.parts);
+	let s = a[a.length - 1], c = i?.accumulateNarration ? a.map((e) => n(e.parts)).filter(Boolean).join("\n\n") : n(s.parts), u = o(s.parts), d = l(s.parts);
 	return {
 		content: [
-			l,
+			c,
 			...u,
 			...d
 		].filter(Boolean).join("\n\n") || "Thinking…",
-		done: !!s.info?.time?.completed && (!!l || u.length > 0 || d.length > 0)
+		done: !!s.info?.time?.completed && (!!c || u.length > 0 || d.length > 0)
 	};
 }
-function u(e) {
+function d(e) {
 	return e.replace(/(Authorization\s*:\s*Bearer\s+)[^\s\n]+/gi, "$1[REDACTED]").replace(/(X-Workspace-Authorization\s*:\s*Bearer\s+)[^\s\n]+/gi, "$1[REDACTED]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9._-]+\.[A-Za-z0-9._-]+\b/g, "[REDACTED_JWT]").replace(/\bsk-ant-[A-Za-z0-9-]+\b/g, "[REDACTED_API_KEY]");
 }
-function d(e) {
+function f(e) {
 	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
 	return t.includes("unable to connect") && t.includes("able to access the url");
 }
-function f(e) {
-	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
-	return t.includes("rate limit exceeded") || t.includes("unauthorized") || t.includes("k8s api error 401") ? !1 : d(e) ? !0 : [
+function p(t) {
+	let n = e(t);
+	if (n !== null) return n;
+	let r = t instanceof Error ? t.message.toLowerCase() : String(t).toLowerCase();
+	return r.includes("rate limit exceeded") || r.includes("unauthorized") || r.includes("k8s api error 401") ? !1 : f(t) ? !0 : [
 		"sandbox not found",
 		"sandbox is not running",
 		"sandbox service not available yet",
@@ -91,33 +94,33 @@ function f(e) {
 		"proxy error: 404",
 		"proxy error: 502",
 		"proxy error: 503"
-	].some((e) => t.includes(e));
+	].some((e) => r.includes(e));
 }
-function p(t, n) {
+function m(e, n) {
 	let r = /* @__PURE__ */ new Map();
-	for (let e of t) {
-		let t = e.info?.id;
-		t && r.set(t, e);
+	for (let t of e) {
+		let e = t.info?.id;
+		e && r.set(e, t);
 	}
 	for (let e of n) {
 		let t = e.info?.id;
 		t && r.set(t, e);
 	}
-	return Array.from(r.values()).sort((t, n) => e(t) - e(n));
+	return Array.from(r.values()).sort((e, n) => t(e) - t(n));
 }
-function m(n) {
+function h(e) {
 	let r = [];
-	for (let i of n) {
-		let n = i.info?.role;
-		if (n !== "user" && n !== "assistant") continue;
-		let o = i.parts, s = t(o), c = [s, ...a(o)].filter(Boolean).join("\n\n");
-		c && (n === "user" && (s.startsWith("[Context file:") || s.startsWith("User's current context:")) || r.push({
-			id: i.info?.id ?? `${n}-${e(i)}`,
-			role: n,
+	for (let i of e) {
+		let e = i.info?.role;
+		if (e !== "user" && e !== "assistant") continue;
+		let a = i.parts, s = n(a), c = [s, ...o(a)].filter(Boolean).join("\n\n");
+		c && (e === "user" && (s.startsWith("[Context file:") || s.startsWith("User's current context:")) || r.push({
+			id: i.info?.id ?? `${e}-${t(i)}`,
+			role: e,
 			content: c
 		}));
 	}
 	return r;
 }
 //#endregion
-export { l as buildProgress, a as getAssistantMedia, t as getAssistantText, e as getRawMessageCreatedAt, c as getToolProgress, d as isReapedSandboxConnectionError, f as isRecoverable, m as mapSessionToHistory, p as mergeMessagesById, u as sanitize };
+export { u as buildProgress, o as getAssistantMedia, n as getAssistantText, t as getRawMessageCreatedAt, l as getToolProgress, f as isReapedSandboxConnectionError, p as isRecoverable, h as mapSessionToHistory, m as mergeMessagesById, d as sanitize };

package/dist/shared/assistant/quota.d.ts

@@ -30,17 +30,28 @@ export declare function isQuotaExhaustedError(error: unknown): boolean;
  *   never granted. Measured in prod 2026-08-13, this is why `createHealthyBowlFarm` returns
  *   `429 QUOTA_NOT_PROVISIONED` on several workspaces — the core create path is simply dead there.
  *
+ * - `daily-limit` — the assistant's DAILY LLM allowance (per actor, workspace or environment) is
+ *   spent (BOFF-8124). It resets on its own at `resetsAt`; no plan buys more of it, so it NEVER
+ *   offers an upgrade. `quotaName` says whose allowance it was
+ *   (`assistant.llm.{actor,workspace,env}_daily`).
+ *
  * ★ Keyed on `extensions.code`, never on the HTTP status or the message text. Both refusals are
  * `429`, so status alone cannot tell them apart — which is exactly how "no active subscription
- * covers this" would otherwise be reported to a farmer as "you have reached your limit".
+ * covers this" would otherwise be reported to a farmer as "you have reached your limit". The
+ * daily limit is a 429 too (the svc's prompt-async refusal), and a 402 or 429 `turnTerminal`.
  */
-export type QuotaRefusal = "exhausted" | "not-provisioned";
+export type QuotaRefusal = "exhausted" | "not-provisioned" | "daily-limit";
 /**
  * Which refusal this is, or null when the error is not a quota wall at all.
  *
  * `not-provisioned` wins when both appear: it is the more specific and the more serious of the two,
  * and telling someone to upgrade when their plan was never granted sends them to buy something that
  * would not help.
+ *
+ * ★★★ `daily-limit` is checked FIRST, and every assistant LLM code is checked before the bare-429
+ * rule (BOFF-8124 §4.8(c)). The svc answers a send at the daily limit with a 429, and the proxy's
+ * busy refusal reaches the panel as a 429 `turnTerminal`: read by status alone, both would become
+ * `exhausted` — "upgrade your plan" for an allowance that resets tonight, or for a busy proxy.
  */
 export declare function classifyQuotaError(error: unknown): QuotaRefusal | null;
 /**
@@ -62,6 +73,11 @@ export interface QuotaRefusalDetail {
     quotaName: string | null;
     /** The refusing service's trace id, so support can find the request. */
     traceId: string | null;
+    /**
+     * When a `daily-limit` allowance resets (ISO-8601), as the refusal named it; null when it named
+     * none. Unvalidated here — `classifyTurnFailure` decides whether it can be shown.
+     */
+    resetsAt: string | null;
 }
 /** Every `extensions` object reachable on an error — the hosts `codesIn` walks. */
 /**

package/dist/shared/assistant/quota.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAmBH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAmB7D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,CAAC;AA0C3D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAStE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,mFAAmF;AACnF;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAmB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAmB5E;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}
+{"version":3,"file":"quota.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAqBH;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAsB7D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,aAAa,CAAC;AA0C3E;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAatE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;OAGG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mFAAmF;AACnF;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAmB5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAoB5E;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B"}