@burdenoff/fe-libs 2026.1007.5 → 2026.1008.1

package/dist/shared/assistant/uiActions/offerYesOnSurface.js

@@ -0,0 +1,34 @@
+import { offerYesState as e } from "./uiOffers.js";
+import { isTurnInFlight as t } from "../turnState.js";
+import { latestReplyOnSurface as n } from "./linkContext.js";
+//#region src/shared/assistant/uiActions/offerYesOnSurface.ts
+function r(r, i) {
+	let a = n(i.messages, i.voiceSessionId);
+	if (!a) return {
+		state: "none",
+		reply: null
+	};
+	let { processing: o } = i;
+	if (o && o.messageId === a.id && t(o.status)) return {
+		state: "none",
+		reply: null
+	};
+	let s = e(r, {
+		registry: i.registry,
+		actorId: i.actorId,
+		conversationId: i.conversationId,
+		perfNow: i.perfNow,
+		newestReply: {
+			id: a.id,
+			text: i.displayedText(a)
+		},
+		productWriteApproval: i.productWriteApproval,
+		capabilitiesOf: i.capabilitiesOf
+	});
+	return {
+		state: s,
+		reply: s === "none" ? null : a
+	};
+}
+//#endregion
+export { r as offerYesOnSurface };

package/dist/shared/assistant/uiActions/uiCatalogue.d.ts

@@ -23,8 +23,22 @@ export interface AssistantUiCatalogue {
 }
 export declare const UI_CATALOGUE_MAX_ENTRIES = 120;
 export declare const UI_CATALOGUE_MAX_BYTES: number;
+/** The key of one sandbox session, as `uiCatalogueSent` and `markUiCatalogueSent` read it. */
+export declare function uiCatalogueSessionKey(sandboxId: string, sessionId: string): string;
+/** A catalogue was delivered to this sandbox session in this page. */
+export declare function uiCatalogueSent(sessionKey: string): boolean;
+/** Record a prompt that carried a catalogue as sent (the oldest key goes past the bound). */
+export declare function markUiCatalogueSent(sessionKey: string): void;
+/** Forget every session (a fresh page's state; the tests start from it). */
+export declare function forgetSentUiCatalogues(): void;
 export declare function buildUiCatalogue(destinations: readonly LocalDestination[], gate: {
     permissionsSettled: boolean;
     simulating: boolean;
+    /**
+     * A catalogue was already sent to this sandbox session
+     * (`uiCatalogueSent`). Only then does a settled, real, EMPTY menu produce
+     * `{v:1, entries:[]}` — the replacement for the stale list (RV-1).
+     */
+    sentBefore?: boolean;
 }): AssistantUiCatalogue | null;
 //# sourceMappingURL=uiCatalogue.d.ts.map

package/dist/shared/assistant/uiActions/uiCatalogue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uiCatalogue.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/uiActions/uiCatalogue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,yBAAyB,EAAE,CAAC;CACtC;AAED,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,sBAAsB,QAAW,CAAC;AAK/C,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,SAAS,gBAAgB,EAAE,EACzC,IAAI,EAAE;IAAE,kBAAkB,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GACzD,oBAAoB,GAAG,IAAI,CAkB7B"}
+{"version":3,"file":"uiCatalogue.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/uiActions/uiCatalogue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,OAAO,EAAE,yBAAyB,EAAE,CAAC;CACtC;AAED,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,sBAAsB,QAAW,CAAC;AAiB/C,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAElF;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAQ5D;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,SAAS,gBAAgB,EAAE,EACzC,IAAI,EAAE;IACJ,kBAAkB,EAAE,OAAO,CAAC;IAC5B,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GACA,oBAAoB,GAAG,IAAI,CAoB7B"}

package/dist/shared/assistant/uiActions/uiCatalogue.js

@@ -1,7 +1,27 @@
 //#region src/shared/assistant/uiActions/uiCatalogue.ts
-var e = 120, t = 8 * 1024, n = (e) => new TextEncoder().encode(JSON.stringify(e)).length;
-function r(e, t) {
+var e = 120, t = 8 * 1024, n = (e) => new TextEncoder().encode(JSON.stringify(e)).length, r = /* @__PURE__ */ new Set(), i = 64;
+function a(e, t) {
+	return `${e}\n${t}`;
+}
+function o(e) {
+	return r.has(e);
+}
+function s(e) {
+	for (r.delete(e), r.add(e); r.size > i;) {
+		let e = r.values().next().value;
+		if (e === void 0) break;
+		r.delete(e);
+	}
+}
+function c() {
+	r.clear();
+}
+function l(e, t) {
 	if (!t.permissionsSettled || t.simulating) return null;
+	if (e.length === 0) return t.sentBefore === !0 ? {
+		v: 1,
+		entries: []
+	} : null;
 	let r = [];
 	for (let t of e.slice(0, 120)) r.push({
 		id: t.id,
@@ -19,4 +39,4 @@ function r(e, t) {
 	} : null;
 }
 //#endregion
-export { t as UI_CATALOGUE_MAX_BYTES, e as UI_CATALOGUE_MAX_ENTRIES, r as buildUiCatalogue };
+export { t as UI_CATALOGUE_MAX_BYTES, e as UI_CATALOGUE_MAX_ENTRIES, l as buildUiCatalogue, c as forgetSentUiCatalogues, s as markUiCatalogueSent, o as uiCatalogueSent, a as uiCatalogueSessionKey };

package/dist/shared/assistant/uiActions/uiOffers.d.ts

@@ -0,0 +1,249 @@
+import { LocalDestination } from '../localUiCommands';
+import { AssistantMode, AssistantRawMessage } from '../types';
+/**
+ * ★ BOFF-8060 (N3): the pages the model OFFERS, as the sandbox reports them on
+ * the turn poller's `/messages` reads (`uiOffers`, design §2.6 and §3).
+ *
+ * A pure module: no React, no DOM, no store, no network. The panel owns one
+ * `UiOfferSession` per page load (a `useRef`, never persisted), so a reloaded
+ * page or a reopened conversation holds no offer at all (C11).
+ *
+ * ★★ What the sandbox sends is ids only — no label, no path, no model text. The
+ * label and the path always come from the person's LIVE, RBAC-filtered
+ * registry (`resolveOffer`), re-checked when the link is drawn and again when
+ * it is accepted. An offer whose id is not in that registry is never shown.
+ *
+ * An offer is admitted only for a turn THIS page session sent: the panel
+ * records each turn at send time (`recordTurn`), binds the sandbox's own ids
+ * for it from the turn's messages (`observeMessages`), and an offer counts
+ * only when its `turnId` and `assistantMessageId` are among them. Offers for
+ * any other turn are never shown.
+ *
+ * Offers are navigation only. Nothing here sends, approves or writes.
+ */
+/** The sandbox's offer view (design §2.6), strictly checked by `parseUiOffers`. */
+export interface UiOfferView {
+    v: 1;
+    /** `uo_` + 32 lowercase hex. */
+    offerId: string;
+    /** A registry id (the N2 catalogue id). No label, no path. */
+    catalogueId: string;
+    /** The model asked a yes/no question about it. Never true in a write transport. */
+    ask: boolean;
+    /** The sandbox's user message id the reply answers. */
+    turnId: string;
+    /** The sandbox's assistant message id of the reply. */
+    assistantMessageId: string;
+    conversationId: string;
+    /** The sandbox's OWN transport (`AI_ASSISTANT_READONLY`), never the panel's guess. */
+    transport: UiOfferTransport;
+    /** Server clock, ms. */
+    mintedAt: number;
+    /** Server clock, ms; at most `mintedAt + UI_OFFER_LIFETIME_MS`. */
+    expiresAt: number;
+    state: UiOfferState;
+}
+export type UiOfferTransport = "read" | "write";
+export type UiOfferState = "live" | "expired";
+/** At most this many offers are read from one `/messages` answer (the server's own cap). */
+export declare const UI_OFFER_MAX_PER_READ = 10;
+/** An offer lives at most 10 minutes from its mint, on the server's clock. */
+export declare const UI_OFFER_LIFETIME_MS = 600000;
+/** The page session never holds more than this many offers; the oldest go first. */
+export declare const UI_OFFER_SESSION_MAX = 50;
+export declare const UI_OFFER_ID_PATTERN: RegExp;
+/** The N2 catalogue id charset (ai-assistant `UI_CATALOGUE_ID_PATTERN`). */
+export declare const UI_OFFER_CATALOGUE_ID_PATTERN: RegExp;
+/** A sandbox message id (opencode `msg_…`). */
+export declare const UI_OFFER_MESSAGE_ID_PATTERN: RegExp;
+/**
+ * The panel's conversation id, as the prompt sends it (`api.ts`
+ * `PROMPT_CONVERSATION_ID_PATTERN`; a test holds the two equal). Copied, not
+ * imported, so this module stays free of the network layer.
+ */
+export declare const UI_OFFER_CONVERSATION_ID_PATTERN: RegExp;
+/**
+ * The `uiOffers` field of one `/messages` answer, with that answer's `now`.
+ *
+ * - Absent (an older image, or no offer): an empty list.
+ * - Not an array, or no usable server clock: null — nothing is admitted.
+ * - Each item is checked field by field and DROPPED on any failure; duplicates
+ *   keep the first; at most `UI_OFFER_MAX_PER_READ` items are kept.
+ */
+export declare function parseUiOffers(raw: unknown, serverNow: unknown): {
+    offers: UiOfferView[];
+    serverNow: number;
+} | null;
+/** What the person's sidebar shows them NOW, and whether that list is real. */
+export interface UiOfferRegistry {
+    destinations: readonly LocalDestination[];
+    /** Permissions loaded without error (`useVisibleNavItems`). */
+    permissionsSettled: boolean;
+    /** A role simulation is running. */
+    simulating: boolean;
+}
+/** A resolved offer: the registry's own label and path, never the model's. */
+export interface UiOfferTarget {
+    id: string;
+    label: string;
+    /** Where the sidebar takes the person (`navTargetPath`). */
+    path: string;
+    context?: string;
+}
+/**
+ * The page an offer names, from the LIVE registry — or null.
+ *
+ * The same gate as `buildUiCatalogue`: never from the optimistic list shown
+ * while permissions load, never when the fetch failed, never during a role
+ * simulation. Entity routes are never offer targets (catalogue ids are nav ids).
+ */
+export declare function resolveOffer(offer: Pick<UiOfferView, "catalogueId">, registry: UiOfferRegistry): UiOfferTarget | null;
+/** A turn THIS page session sent, recorded at send time. */
+export interface UiOfferTurnStart {
+    /** The panel's own reply message id (the bubble the offer is drawn under). */
+    replyId: string;
+    conversationId: string;
+    sandboxId: string;
+    sessionId: string;
+    /** The mode the turn was SENT in (Auto conversations mix transports). */
+    mode: AssistantMode;
+    /** That mode's `writeCapable`, at send time. */
+    writeCapable: boolean;
+    /** The signed-in actor who sent it. */
+    actorId: string;
+    /** The turn's reply floor: only messages created after it are this turn's. */
+    floorMs: number;
+}
+/** An admitted offer, with the clock of the read that last carried it. */
+export interface ClientUiOffer extends UiOfferView {
+    /** The server's clock the first time this page session saw it. */
+    firstSeenServerNow: number;
+    /** The server's clock at the last read that carried it… */
+    serverNowAtRead: number;
+    /** …and the client's monotonic clock at that read. */
+    perfAtRead: number;
+    /** Accepted once already: a second tap, "yes" or "take me there" does nothing. */
+    used: boolean;
+}
+/** Who is looking, where, and at what the sidebar shows — read live by the caller. */
+export interface UiOfferLiveContext {
+    registry: UiOfferRegistry;
+    /** The signed-in actor now. */
+    actorId: string | null | undefined;
+    /** The conversation the reply is shown in. */
+    conversationId: string | null | undefined;
+    /** `performance.now()` (or any monotonic ms). */
+    perfNow: number;
+}
+/** A live offer, resolved. */
+export interface LiveUiOffer {
+    offer: ClientUiOffer;
+    target: UiOfferTarget;
+}
+/** The offer's age (design §5.2): the server clock plus a monotonic delta. */
+export declare function uiOfferAgeMs(offer: ClientUiOffer, perfNow: number): number;
+/** Not expired by the server's word, by its own `expiresAt`, or by the 10-minute life. */
+export declare function uiOfferInTime(offer: ClientUiOffer, perfNow: number): boolean;
+/**
+ * The offers this page session has seen, keyed by offer id, and the turns it
+ * sent. One per panel, in a `useRef`; never persisted.
+ */
+export declare class UiOfferSession {
+    private readonly turns;
+    private readonly offers;
+    /** Record a turn as it is sent. Only such turns can ever show an offer. */
+    recordTurn(start: UiOfferTurnStart): void;
+    /** The turn recorded for this reply, or undefined (a reopened conversation). */
+    turnFor(replyId: string): Readonly<UiOfferTurnStart> | undefined;
+    /**
+     * Bind the sandbox's own ids for this turn from a `/messages` read: user
+     * messages created after the floor, and the assistant messages that answer
+     * them (`parentID`). True when something new was learned.
+     */
+    observeMessages(replyId: string, messages: readonly AssistantRawMessage[]): boolean;
+    /**
+     * Take the offers of one `/messages` read for this turn. Only the turn's
+     * own conversation is kept; an offer seen before keeps its first sighting
+     * and whether it was used, and takes the newer state and clock. True when
+     * anything changed.
+     */
+    receive(replyId: string, raw: unknown, serverNow: unknown, perfNow: number): boolean;
+    private evict;
+    /** Every offer bound to this reply's turn, used or not, live or not. */
+    offersFor(replyId: string): ClientUiOffer[];
+    /**
+     * The offers that may be shown or accepted under this reply now (design
+     * §3.2 `liveOfferFor`): the turn was sent from this page session by the actor
+     * signed in now, into the conversation shown; the offer is live, unused, in
+     * time, and names a page the person's live registry holds.
+     */
+    liveOffersFor(replyId: string, context: UiOfferLiveContext): LiveUiOffer[];
+    /**
+     * Claim an offer for acceptance. Set BEFORE navigating, so a double tap or a
+     * double "yes" does nothing the second time. False when it was already used
+     * or is unknown.
+     */
+    markUsed(offerId: string): boolean;
+    /**
+     * ★ BOFF-8060 (N4): give back a claim whose navigation was REFUSED for
+     * unsaved changes. Nothing was routed, so the offer was not used: its "Open
+     * {page}" link comes back, for when the person has saved or discarded.
+     * False when it is unknown or was not claimed.
+     */
+    release(offerId: string): boolean;
+    /** One offer by id, or undefined. */
+    offer(offerId: string): ClientUiOffer | undefined;
+    /** The reply an offer is bound to in this page session, or undefined. */
+    replyIdOf(offerId: string): string | undefined;
+    /**
+     * Milliseconds until the next bound, unused, live offer runs out of time, or
+     * null when none will. The panel re-renders then, so an expired link goes.
+     */
+    nextExpiryInMs(perfNow: number): number | null;
+}
+/**
+ * Which hint goes under the link (design §4): "…or “yes”" only for an offer the
+ * model asked about in a read transport — the sandbox's own transport AND the
+ * mode the turn was sent in. Anything else gets the tap / "take me there" hint.
+ */
+export declare function uiOfferHintKind(offer: Pick<UiOfferView, "ask" | "transport">, turn: Pick<UiOfferTurnStart, "writeCapable"> | undefined): "read" | "link";
+/**
+ * Y5: the reply asked exactly ONE question, and it is the last sentence.
+ *
+ * Code (fenced and inline), markdown link targets, autolinks and bare URLs
+ * are removed first — a `?` in a URL or a snippet is not a question. `?`, `؟`,
+ * `？` and `¿` all count, so a reply that also asks something in another script
+ * is not "one question".
+ */
+export declare function asksOneQuestionLast(text: string): boolean;
+/** What the binder may do with a bare "yes" (design §6). */
+export type UiOfferYesState = "acceptable" | "expired" | "none";
+/** What `offerYesState` reads, all of it live at the decision point. */
+export interface UiOfferYesInput extends UiOfferLiveContext {
+    /** The newest assistant reply on the surface the "yes" came from, with its displayed text; null when a person message came after it. */
+    newestReply: {
+        id: string;
+        text: string;
+    } | null;
+    /** The product's own write approval (`proposal-v1` or not). */
+    productWriteApproval: string | null | undefined;
+    /** The issuing sandbox's own `/health`, as recorded. */
+    capabilitiesOf: (sandboxId: string) => {
+        uiOffers?: boolean;
+        writeApprovalMode?: string;
+    } | null | undefined;
+}
+/**
+ * Whether a bare "yes" accepts an offer, for the 5a binder's precedence row
+ * (design §6, guards Y1–Y6; Y7 — a bare English affirm — is the binder's).
+ *
+ * `acceptable` only when ALL hold: the product and the issuing sandbox are
+ * proposal-v1 and the sandbox serves offers (Y1); the sandbox's transport is
+ * read AND the mode the turn was sent in cannot write (Y2); exactly one live
+ * offer under the newest reply on the surface (Y3); the model asked about it
+ * (Y4); the reply asked one question, last (Y5); in time, unused, resolvable
+ * (Y6). `expired` when the one offer that would otherwise qualify ran out of
+ * time. Everything else is `none`, and the binder keeps its 5a meaning.
+ */
+export declare function offerYesState(session: UiOfferSession, input: UiOfferYesInput): UiOfferYesState;
+//# sourceMappingURL=uiOffers.d.ts.map

package/dist/shared/assistant/uiActions/uiOffers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uiOffers.d.ts","sourceRoot":"","sources":["../../../../src/shared/assistant/uiActions/uiOffers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,CAAC,CAAC;IACL,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,GAAG,EAAE,OAAO,CAAC;IACb,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAChD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9C,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,SAAU,CAAC;AAC5C,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AACvD,4EAA4E;AAC5E,eAAO,MAAM,6BAA6B,QAA4B,CAAC;AACvE,+CAA+C;AAC/C,eAAO,MAAM,2BAA2B,QAA2B,CAAC;AACpE;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,QAA2B,CAAC;AAyDzE;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,OAAO,GACjB;IAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcrD;AAID,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC1C,+DAA+D;IAC/D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oCAAoC;IACpC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EACvC,QAAQ,EAAE,eAAe,GACxB,aAAa,GAAG,IAAI,CAYtB;AAID,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,IAAI,EAAE,aAAa,CAAC;IACpB,gDAAgD;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD,0EAA0E;AAC1E,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,IAAI,EAAE,OAAO,CAAC;CACf;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,+BAA+B;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,8CAA8C;IAC9C,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8BAA8B;AAC9B,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAI5E;AAQD;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAE3D,2EAA2E;IAC3E,UAAU,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAIzC,gFAAgF;IAChF,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,SAAS;IAIhE;;;;OAIG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,OAAO;IA4BnF;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAkCpF,OAAO,CAAC,KAAK;IAOb,wEAAwE;IACxE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE;IAY3C;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,WAAW,EAAE;IAc1E;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAOlC;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAOjC,qCAAqC;IACrC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIjD,yEAAyE;IACzE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAa9C;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAe/C;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,WAAW,CAAC,EAC7C,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,GAAG,SAAS,GACvD,MAAM,GAAG,MAAM,CAIjB;AAKD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWzD;AAED,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,SAAS,GAAG,MAAM,CAAC;AAEhE,wEAAwE;AACxE,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,wIAAwI;IACxI,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,+DAA+D;IAC/D,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,wDAAwD;IACxD,cAAc,EAAE,CACd,SAAS,EAAE,MAAM,KACd;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,CAAC;CAC5E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,eAAe,GACrB,eAAe,CAqCjB"}

package/dist/shared/assistant/uiActions/uiOffers.js

@@ -0,0 +1,195 @@
+//#region src/shared/assistant/uiActions/uiOffers.ts
+var e = 10, t = 6e5, n = 50, r = /^uo_[0-9a-f]{32}$/, i = /^[A-Za-z0-9:_.-]{1,64}$/, a = /^[A-Za-z0-9_-]{1,128}$/, o = /^[A-Za-z0-9_-]{1,128}$/, s = new Set(["read", "write"]), c = new Set(["live", "expired"]), l = (e) => typeof e == "object" && !!e && !Array.isArray(e), u = (e, t) => typeof e == "string" && t.test(e), d = (e) => typeof e == "number" && Number.isFinite(e);
+function f(e) {
+	if (!l(e) || e.v !== 1) return null;
+	let { offerId: t, catalogueId: n, ask: f, turnId: p, assistantMessageId: m, conversationId: h, transport: g, mintedAt: _, expiresAt: v, state: y } = e;
+	return !u(t, r) || !u(n, i) || typeof f != "boolean" || !u(p, a) || !u(m, a) || !u(h, o) || typeof g != "string" || !s.has(g) || typeof y != "string" || !c.has(y) || !d(_) || !d(v) || v < _ || v - _ > 6e5 || f && g !== "read" ? null : {
+		v: 1,
+		offerId: t,
+		catalogueId: n,
+		ask: f,
+		turnId: p,
+		assistantMessageId: m,
+		conversationId: h,
+		transport: g,
+		mintedAt: _,
+		expiresAt: v,
+		state: y
+	};
+}
+function p(e, t) {
+	if (!d(t)) return null;
+	if (e === void 0) return {
+		offers: [],
+		serverNow: t
+	};
+	if (!Array.isArray(e)) return null;
+	let n = [], r = /* @__PURE__ */ new Set();
+	for (let t of e) {
+		if (n.length >= 10) break;
+		let e = f(t);
+		!e || r.has(e.offerId) || (r.add(e.offerId), n.push(e));
+	}
+	return {
+		offers: n,
+		serverNow: t
+	};
+}
+function m(e, t) {
+	if (!t.permissionsSettled || t.simulating) return null;
+	let n = t.destinations.find((t) => t.id === e.catalogueId);
+	return n ? {
+		id: n.id,
+		label: n.label,
+		path: n.path,
+		...n.context ? { context: n.context } : {}
+	} : null;
+}
+function h(e, t) {
+	return e.serverNowAtRead - e.mintedAt + Math.max(0, t - e.perfAtRead);
+}
+function g(e, t) {
+	if (e.state !== "live") return !1;
+	let n = h(e, t);
+	return n <= 6e5 && e.mintedAt + n < e.expiresAt;
+}
+function _(e, t) {
+	let n = e.info?.time?.created;
+	return typeof n == "number" && n > t;
+}
+var v = class {
+	turns = /* @__PURE__ */ new Map();
+	offers = /* @__PURE__ */ new Map();
+	recordTurn(e) {
+		this.turns.set(e.replyId, {
+			...e,
+			serverTurns: /* @__PURE__ */ new Map()
+		});
+	}
+	turnFor(e) {
+		return this.turns.get(e);
+	}
+	observeMessages(e, t) {
+		let n = this.turns.get(e);
+		if (!n) return !1;
+		let r = !1;
+		for (let e of t) {
+			if (!_(e, n.floorMs)) continue;
+			let t = e.info?.id;
+			typeof t == "string" && e.info?.role === "user" && !n.serverTurns.has(t) && (n.serverTurns.set(t, /* @__PURE__ */ new Set()), r = !0);
+		}
+		for (let e of t) {
+			if (!_(e, n.floorMs)) continue;
+			let t = e.info?.id, i = e.info?.parentID;
+			if (e.info?.role !== "assistant" || typeof t != "string" || typeof i != "string") continue;
+			let a = n.serverTurns.get(i);
+			a && !a.has(t) && (a.add(t), r = !0);
+		}
+		return r;
+	}
+	receive(e, t, n, r) {
+		let i = this.turns.get(e);
+		if (!i) return !1;
+		let a = p(t, n);
+		if (!a) return !1;
+		let o = !1;
+		for (let e of a.offers) {
+			if (e.conversationId !== i.conversationId) continue;
+			let t = this.offers.get(e.offerId);
+			t && (t.turnId !== e.turnId || t.assistantMessageId !== e.assistantMessageId || t.catalogueId !== e.catalogueId || t.conversationId !== e.conversationId) || (this.offers.set(e.offerId, {
+				...e,
+				state: t?.state === "expired" ? "expired" : e.state,
+				firstSeenServerNow: t?.firstSeenServerNow ?? a.serverNow,
+				serverNowAtRead: a.serverNow,
+				perfAtRead: r,
+				used: t?.used ?? !1
+			}), o = !0);
+		}
+		return this.evict(), o;
+	}
+	evict() {
+		if (this.offers.size <= 50) return;
+		let e = [...this.offers.values()].sort((e, t) => e.mintedAt - t.mintedAt);
+		for (let t of e.slice(0, this.offers.size - 50)) this.offers.delete(t.offerId);
+	}
+	offersFor(e) {
+		let t = this.turns.get(e);
+		return t ? [...this.offers.values()].filter((e) => e.conversationId === t.conversationId && t.serverTurns.get(e.turnId)?.has(e.assistantMessageId) === !0).sort((e, t) => e.mintedAt - t.mintedAt) : [];
+	}
+	liveOffersFor(e, t) {
+		let n = this.turns.get(e);
+		if (!n || !t.actorId || n.actorId !== t.actorId || !t.conversationId || n.conversationId !== t.conversationId) return [];
+		let r = [];
+		for (let n of this.offersFor(e)) {
+			if (n.used || !g(n, t.perfNow)) continue;
+			let e = m(n, t.registry);
+			e && r.push({
+				offer: n,
+				target: e
+			});
+		}
+		return r;
+	}
+	markUsed(e) {
+		let t = this.offers.get(e);
+		return !t || t.used ? !1 : (this.offers.set(e, {
+			...t,
+			used: !0
+		}), !0);
+	}
+	release(e) {
+		let t = this.offers.get(e);
+		return !t || !t.used ? !1 : (this.offers.set(e, {
+			...t,
+			used: !1
+		}), !0);
+	}
+	offer(e) {
+		return this.offers.get(e);
+	}
+	replyIdOf(e) {
+		let t = this.offers.get(e);
+		if (t) {
+			for (let [e, n] of this.turns) if (t.conversationId === n.conversationId && n.serverTurns.get(t.turnId)?.has(t.assistantMessageId) === !0) return e;
+		}
+	}
+	nextExpiryInMs(e) {
+		let n = null;
+		for (let r of this.turns.keys()) for (let i of this.offersFor(r)) {
+			if (i.used || !g(i, e)) continue;
+			let r = h(i, e), a = Math.min(t - r, i.expiresAt - (i.mintedAt + r));
+			n = n === null ? a : Math.min(n, a);
+		}
+		return n === null ? null : Math.max(0, n);
+	}
+};
+function y(e, t) {
+	return e.ask && e.transport === "read" && t?.writeCapable === !1 ? "read" : "link";
+}
+var b = /[?؟？¿]/g, x = /[\s*_)\]"'”’»]+$/u;
+function S(e) {
+	let t = e.replace(/```[\s\S]*?```/g, " ").replace(/`[^`]*`/g, " ").replace(/!?\[([^\]]*)\]\([^)]*\)/g, "$1").replace(/<[a-z][a-z0-9+.-]*:[^>\s]*>/gi, " ").replace(/\b[a-z][a-z0-9+.-]*:\/\/\S+/gi, " ");
+	if ((t.match(b) ?? []).length !== 1) return !1;
+	let n = t.replace(x, "");
+	return /[?؟？]$/.test(n);
+}
+function C(e, t) {
+	let n = t.newestReply;
+	if (!n) return "none";
+	let r = e.turnFor(n.id);
+	if (!r || !t.actorId || r.actorId !== t.actorId || !t.conversationId || r.conversationId !== t.conversationId || t.productWriteApproval !== "proposal-v1") return "none";
+	let i = t.capabilitiesOf(r.sandboxId);
+	if (i?.uiOffers !== !0 || i.writeApprovalMode !== "proposal-v1" || r.writeCapable !== !1 || !S(n.text)) return "none";
+	let a = e.offersFor(n.id).filter((e) => !e.used), o = e.liveOffersFor(n.id, t), s = (e) => e.transport === "read" && e.ask;
+	if (o.length === 1) {
+		let e = o[0];
+		return e && a.length === 1 && s(e.offer) ? "acceptable" : "none";
+	}
+	if (o.length === 0 && a.length === 1) {
+		let e = a[0];
+		if (e && s(e) && !g(e, t.perfNow) && m(e, t.registry)) return "expired";
+	}
+	return "none";
+}
+//#endregion
+export { i as UI_OFFER_CATALOGUE_ID_PATTERN, o as UI_OFFER_CONVERSATION_ID_PATTERN, r as UI_OFFER_ID_PATTERN, t as UI_OFFER_LIFETIME_MS, e as UI_OFFER_MAX_PER_READ, a as UI_OFFER_MESSAGE_ID_PATTERN, n as UI_OFFER_SESSION_MAX, v as UiOfferSession, S as asksOneQuestionLast, C as offerYesState, p as parseUiOffers, m as resolveOffer, h as uiOfferAgeMs, y as uiOfferHintKind, g as uiOfferInTime };

package/dist/shared/assistant/useAssistantAttachments.d.ts

@@ -1,9 +1,10 @@
 import { AssistantAttachment, AttachmentRejection, AttachmentSendBlocker } from './attachments';
+import { AttachmentCommitResult, CommitOptions } from './attachmentCommit';
 export interface UseAssistantAttachmentsResult {
     /** Files being read/downscaled — no chip of their own yet. See below. */
     preparingCount: number;
     attachments: AssistantAttachment[];
-    /** True while any attachment is still being prepared or uploaded. */
+    /** True while any attachment is still being prepared or saved (Send's commit). */
     isBusy: boolean;
     /**
      * Why the current attachments block sending, or `null` when they do not.
@@ -15,12 +16,29 @@ export interface UseAssistantAttachmentsResult {
     /** Most recent rejection, for a transient inline message. */
     rejection: AttachmentRejection | null;
     addFiles: (files: FileList | File[] | null | undefined) => void;
+    /** Drop a draft attachment. Ignored while Send is saving that very chip. */
     remove: (id: string) => void;
-    /** Re-upload a single failed attachment, reusing the bytes already prepared. */
+    /** Clear the reason a Send could not save this attachment, ready for the next Send. */
     retry: (id: string) => void;
+    /** Drop the whole draft; a commit in flight is cancelled and rolled back first. */
     clear: () => void;
     clearRejection: () => void;
     canAddMore: boolean;
+    /**
+     * Save the draft to Files and mint download URLs — the one step that touches the file library.
+     * Resolves with the attachments to send (see `AttachmentCommitResult`); on failure or cancel it
+     * has undone what it created and the draft is intact. Single flight: a second call while one is
+     * running returns the same promise.
+     */
+    commit: (options?: {
+        mode?: CommitOptions['mode'];
+        budgetMs?: number;
+        signal?: AbortSignal;
+    }) => Promise<AttachmentCommitResult>;
+    /** Stop the commit in flight (it rolls back and resolves `{ ok: false, cancelled: true }`). */
+    cancelCommit: () => void;
+    /** True from the moment `commit()` is called until it settles. */
+    isCommitting: boolean;
 }
 export interface UseAssistantAttachmentsOptions {
     /**

package/dist/shared/assistant/useAssistantAttachments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAssistantAttachments.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/useAssistantAttachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAYL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAsJvB,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC1C,6DAA6D;IAC7D,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;IAChE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,gFAAgF;IAChF,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,8BAAmC,GAC3C,6BAA6B,CAyQ/B"}
+{"version":3,"file":"useAssistantAttachments.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/useAssistantAttachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EAYL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAEL,KAAK,sBAAsB,EAE3B,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAkJ5B,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC1C,6DAA6D;IAC7D,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;IAChE,4EAA4E;IAC5E,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,uFAAuF;IACvF,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,mFAAmF;IACnF,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;QACjB,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,+FAA+F;IAC/F,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,kEAAkE;IAClE,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,8BAAmC,GAC3C,6BAA6B,CAwN/B"}