@burdenoff/fe-libs 2026.1014.3 → 2026.1014.4

package/dist/shared/assistant/avatar/live/avatarSessionClient.d.ts

@@ -6,10 +6,15 @@ export declare const AVATAR_API_PATH = "/api/avatar/v1";
  * credentials in it, or plain `http:` off a loopback host). A relative endpoint is resolved against `locationHref`.
  */
 export declare function avatarApiBaseFromTtsEndpoint(ttsEndpoint: string | null | undefined, locationHref?: string): string | null;
+/**
+ * Why nothing is offered, coarse on purpose (§3.3). The server's: no verified workspace reached it, or the avatar is not enabled for this
+ * caller. The gateway's edge check (`assistant:use` in the workspace): not permitted, or it could not be checked (`unavailable`).
+ */
+declare const AVAILABILITY_REASONS: readonly ["workspace_context_required", "not_enabled", "not_permitted", "unavailable"];
+export type AvatarAvailabilityReason = (typeof AVAILABILITY_REASONS)[number];
 export interface AvatarAvailability {
     readonly available: boolean;
-    /** Coarse on purpose (§3.3): no verified workspace reached the server, or the avatar is not enabled for this caller. */
-    readonly reason: 'workspace_context_required' | 'not_enabled' | null;
+    readonly reason: AvatarAvailabilityReason | null;
     /** Approved and provider-ready ids; names and pictures are the client's. */
     readonly avatars: readonly string[];
     /** The disclosure version the client must show and echo back on create. */
@@ -55,15 +60,18 @@ export interface AvatarSessionClientOptions {
     readonly getAuthorization: () => string | null;
     /**
      * The workspace token as an `X-Workspace-Authorization` value (`Bearer …`), or null when none can be had. `fresh`: the gateway refused
-     * the last one, mint it again instead of reusing a stored one.
+     * the last request (401), so not the token it carried: `refused`, as it was sent (absent when it carried none).
      */
     readonly getWorkspaceAuthorization: (options: {
         readonly fresh: boolean;
+        readonly refused?: string;
     }) => Promise<string | null>;
     readonly fetchImpl?: typeof fetch;
     /** Waits between the contract's retries; injectable for tests. */
     readonly sleep?: (ms: number) => Promise<void>;
-    /** How long 409 `start_in_progress` may be retried with the same key before giving up. */
+    /** Wall-clock milliseconds, for the start budget; injectable for tests, with `sleep`. */
+    readonly now?: () => number;
+    /** How long 409 `start_in_progress` may be retried with the same key, its waits included, before giving up. */
     readonly startInProgressBudgetMs?: number;
 }
 export interface AvatarSessionClient {
@@ -85,12 +93,22 @@ export declare function avatarIdempotencyKey(random?: Crypto | undefined): strin
 export declare function createAvatarSessionClient(options: AvatarSessionClientOptions): AvatarSessionClient;
 /** What the avatar UI does with a refusal: what to tell the person, and whether to stop offering the toggle for this page. */
 export interface AvatarRefusal {
-    readonly problem: AvatarProblem;
-    /** The avatar is not offered here at all (404, 403 not allowed, no workspace): hide the toggle until the next page load. */
+    /** Null only with `showDisclosure`: the disclosure itself is what the person is shown. */
+    readonly problem: AvatarProblem | null;
+    /** Not offered here at all (404, 403 not allowed or not permitted, no workspace): hide the toggle until the next page load. */
     readonly hide: boolean;
+    /** The server's disclosure version changed (`consent_required`): ask availability again, show the disclosure to confirm again. */
+    readonly showDisclosure?: true;
 }
 /**
  * The person's side of every failure (§3.4): the normal voice always continues; this says what to show. 404 means "not here" (the module
- * or the route is off), 403 "not for you", 429/503 "not now".
+ * or the route is off), 403 "not for you", 429/503 "not now". Every code the avatar module (`errors.ts`) and the gateway's proxy
+ * (`avatar-proxy.ts`) answer is named below; anything else is a problem of ours, not the person's.
  */
 export declare function avatarRefusalFor(error: unknown): AvatarRefusal;
+/**
+ * The person's side of an availability answer that offers nothing: not offered here, so the toggle goes (no verified workspace, not
+ * enabled, not permitted), or only not now when the gateway could not check the permission (`unavailable`): the toggle stays.
+ */
+export declare function avatarAvailabilityRefusal(reason: AvatarAvailabilityReason | null): AvatarRefusal;
+export {};

package/dist/shared/assistant/avatar/live/avatarSessionClient.js

@@ -14,7 +14,12 @@ function a(n, r) {
 	}
 	return i.username !== "" || i.password !== "" || i.protocol === "http:" && !t.has(i.hostname.toLowerCase()) || i.protocol !== "https:" && i.protocol !== "http:" ? null : `${i.protocol}//${i.host}${e}`;
 }
-var o = class extends Error {
+var o = [
+	"workspace_context_required",
+	"not_enabled",
+	"not_permitted",
+	"unavailable"
+], s = class extends Error {
 	status;
 	code;
 	retryAfterSeconds;
@@ -22,7 +27,7 @@ var o = class extends Error {
 		super(`avatar api ${e} ${t}`), this.status = e, this.code = t, this.retryAfterSeconds = n, this.name = "AvatarApiError";
 	}
 };
-function s(e = globalThis.crypto) {
+function c(e = globalThis.crypto) {
 	if (e && typeof e.randomUUID == "function") return e.randomUUID();
 	let t = new Uint8Array(16);
 	if (e && typeof e.getRandomValues == "function") e.getRandomValues(t);
@@ -31,38 +36,38 @@ function s(e = globalThis.crypto) {
 	let n = [...t].map((e) => e.toString(16).padStart(2, "0")).join("");
 	return `${n.slice(0, 8)}-${n.slice(8, 12)}-${n.slice(12, 16)}-${n.slice(16, 20)}-${n.slice(20)}`;
 }
-function c(e) {
+function l(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
-function l(e, t) {
+function u(e, t) {
 	let n = e.headers.get("retry-after"), r = n === null || n.trim() === "" ? NaN : Number(n);
 	if (Number.isFinite(r) && r >= 0) return r;
-	let i = c(t) && c(t.error) ? Number(t.error.retryAfterSeconds) : NaN;
+	let i = l(t) && l(t.error) ? Number(t.error.retryAfterSeconds) : NaN;
 	return Number.isFinite(i) && i >= 0 ? i : null;
 }
-async function u(e) {
+async function d(e) {
 	try {
 		return await e.json();
 	} catch {
 		return null;
 	}
 }
-async function d(e) {
-	let t = await u(e), n = c(t) && c(t.error) && typeof t.error.code == "string" ? t.error.code : "http_error";
-	return new o(e.status, n, l(e, t));
+async function f(e) {
+	let t = await d(e), n = l(t) && l(t.error) && typeof t.error.code == "string" ? t.error.code : "http_error";
+	return new s(e.status, n, u(e, t));
 }
-function f(e) {
-	if (!c(e) || typeof e.available != "boolean") throw new o(200, "invalid_response", null);
-	let t = Array.isArray(e.avatars) ? e.avatars.flatMap((e) => c(e) && typeof e.id == "string" && r.test(e.id) ? [e.id] : []) : [], n = e.reason === "workspace_context_required" || e.reason === "not_enabled" ? e.reason : null, i = typeof e.consentVersion == "string" ? e.consentVersion : "", a = typeof e.maxSessionSeconds == "number" && Number.isFinite(e.maxSessionSeconds) ? e.maxSessionSeconds : 0, s = e.available && t.length > 0 && i !== "" && a > 0;
+function p(e) {
+	if (!l(e) || typeof e.available != "boolean") throw new s(200, "invalid_response", null);
+	let t = Array.isArray(e.avatars) ? e.avatars.flatMap((e) => l(e) && typeof e.id == "string" && r.test(e.id) ? [e.id] : []) : [], n = o.find((t) => t === e.reason) ?? null, i = typeof e.consentVersion == "string" ? e.consentVersion : "", a = typeof e.maxSessionSeconds == "number" && Number.isFinite(e.maxSessionSeconds) ? e.maxSessionSeconds : 0, c = e.available && t.length > 0 && i !== "" && a > 0;
 	return {
-		available: s,
-		reason: s ? null : n ?? "not_enabled",
+		available: c,
+		reason: c ? null : n ?? "not_enabled",
 		avatars: t,
 		consentVersion: i,
 		maxSessionSeconds: a
 	};
 }
-function p(e) {
+function m(e) {
 	try {
 		let n = new URL(e);
 		return n.protocol === "wss:" ? !0 : n.protocol === "ws:" && t.has(n.hostname.toLowerCase());
@@ -70,10 +75,10 @@ function p(e) {
 		return !1;
 	}
 }
-function m(e) {
-	if (!c(e)) throw new o(201, "invalid_response", null);
-	let { sessionId: t, livekitUrl: r, participantToken: i, avatarIdentity: a, connectBy: s, endsAt: l } = e, u = typeof s == "string" ? Date.parse(s) : NaN, d = typeof l == "string" ? Date.parse(l) : NaN;
-	if (typeof t != "string" || !n.test(t) || typeof r != "string" || !p(r) || typeof i != "string" || i === "" || typeof a != "string" || a === "" || !Number.isFinite(u) || !Number.isFinite(d)) throw new o(201, "invalid_response", null);
+function h(e) {
+	if (!l(e)) throw new s(201, "invalid_response", null);
+	let { sessionId: t, livekitUrl: r, participantToken: i, avatarIdentity: a, connectBy: o, endsAt: c } = e, u = typeof o == "string" ? Date.parse(o) : NaN, d = typeof c == "string" ? Date.parse(c) : NaN;
+	if (typeof t != "string" || !n.test(t) || typeof r != "string" || !m(r) || typeof i != "string" || i === "" || typeof a != "string" || a === "" || !Number.isFinite(u) || !Number.isFinite(d)) throw new s(201, "invalid_response", null);
 	return {
 		sessionId: t,
 		livekitUrl: r,
@@ -83,7 +88,7 @@ function m(e) {
 		endsAt: d
 	};
 }
-var h = [
+var g = [
 	"starting",
 	"ready",
 	"ending",
@@ -91,62 +96,77 @@ var h = [
 	"failed",
 	"canceled"
 ];
-function g(e, t) {
-	if (!c(e) || !h.includes(e.state)) throw new o(200, "invalid_response", null);
+function _(e, t) {
+	if (!l(e) || !g.includes(e.state)) throw new s(200, "invalid_response", null);
 	return {
 		sessionId: t,
 		state: e.state,
 		endedReason: typeof e.endedReason == "string" ? e.endedReason : null
 	};
 }
-var _ = (e) => new Promise((t) => {
+var v = (e) => new Promise((t) => {
 	setTimeout(t, e);
 });
-function v(e) {
-	let t = e.fetchImpl ?? ((e, t) => fetch(e, t)), a = e.sleep ?? _, s = e.startInProgressBudgetMs ?? 15e3, c = e.baseUrl.replace(/\/+$/, "");
-	async function l(t, n) {
+function y(e) {
+	let t = e.fetchImpl ?? ((e, t) => fetch(e, t)), a = e.sleep ?? v, o = e.now ?? (() => Date.now()), c = e.startInProgressBudgetMs ?? 15e3, l = e.baseUrl.replace(/\/+$/, "");
+	async function u(t, n = null) {
 		let r = e.getAuthorization();
-		if (!r) throw new o(401, "unauthenticated", null);
+		if (!r) throw new s(401, "unauthenticated", null);
 		let i = { authorization: r };
 		if (t) {
-			let t = await e.getWorkspaceAuthorization({ fresh: n });
+			let t = await e.getWorkspaceAuthorization(n === null ? { fresh: !1 } : {
+				fresh: !0,
+				...n.workspace ? { refused: n.workspace } : {}
+			});
+			if (n !== null && (!t || t === n.workspace)) throw n.error;
 			t && (i["x-workspace-authorization"] = t);
 		}
 		return i;
 	}
-	async function p(e, n) {
+	async function m(e, n) {
 		try {
 			return await t(e, {
 				...n,
-				credentials: "omit",
-				cache: "no-store"
+				credentials: "same-origin",
+				cache: "no-store",
+				redirect: "error"
 			});
 		} catch (e) {
-			throw n.signal?.aborted ? e : new o(0, "network", null);
+			throw n.signal?.aborted ? e : new s(0, "network", null);
 		}
 	}
 	return {
 		async availability(e) {
-			for (let t = 1;; t += 1) {
-				let n = await l(!0, t > 1), r = await p(`${c}/availability`, {
+			let t = null;
+			for (;;) {
+				let n = await u(!0, t), r = await m(`${l}/availability`, {
 					method: "GET",
 					headers: n,
 					signal: e
 				});
-				if (r.ok) return f(await u(r));
-				if (!(r.status === 401 && t === 1)) throw await d(r);
+				if (r.ok) return p(await d(r));
+				let i = await f(r);
+				if (r.status === 401 && t === null) {
+					t = {
+						error: i,
+						workspace: n["x-workspace-authorization"]
+					};
+					continue;
+				}
+				throw i;
 			}
 		},
 		async create(e, t) {
-			if (!r.test(e.avatarId) || !i.test(e.idempotencyKey)) throw new o(400, "invalid_request", null);
+			if (!r.test(e.avatarId) || !i.test(e.idempotencyKey)) throw new s(400, "invalid_request", null);
 			let n = JSON.stringify({
 				avatarId: e.avatarId,
 				consentVersion: e.consentVersion
-			}), f = Date.now(), h = !1, g = !1;
+			}), p = o(), g = null, _ = !1, v = !1, y = null;
 			for (;;) {
-				let r = await l(!0, h);
-				if (r["x-workspace-authorization"] === void 0) throw new o(403, "workspace_context_required", null);
-				let i = await p(`${c}/sessions`, {
+				let r = await u(!0, g);
+				if (g = null, y !== null && o() - p > c) throw y;
+				if (r["x-workspace-authorization"] === void 0) throw new s(403, "workspace_context_required", null);
+				let i = await m(`${l}/sessions`, {
 					method: "POST",
 					headers: {
 						...r,
@@ -156,36 +176,41 @@ function v(e) {
 					body: n,
 					signal: t
 				});
-				if (i.status === 201) return m(await u(i));
-				let _ = await d(i);
-				if (i.status === 401 && !h) {
-					h = !0;
+				if (i.status === 201) return h(await d(i));
+				let b = await f(i);
+				if (i.status === 401 && !_) {
+					_ = !0, g = {
+						error: b,
+						workspace: r["x-workspace-authorization"]
+					};
 					continue;
 				}
-				if (i.status === 409 && _.code === "start_in_progress" && Date.now() - f < s) {
-					if (await a(Math.max(250, (_.retryAfterSeconds ?? 1) * 1e3)), t?.aborted) throw _;
+				if (i.status === 409 && b.code === "start_in_progress") {
+					let e = Math.max(250, (b.retryAfterSeconds ?? 1) * 1e3);
+					if (o() - p + e > c || (await a(e), t?.aborted)) throw b;
+					y = b;
 					continue;
 				}
-				if (i.status === 502 && !g) {
-					g = !0;
+				if (i.status === 502 && !v) {
+					v = !0;
 					continue;
 				}
-				throw _;
+				throw b;
 			}
 		},
 		async status(e, t) {
-			if (!n.test(e)) throw new o(400, "invalid_request", null);
-			let r = await l(!1, !1), i = await p(`${c}/sessions/${e}`, {
+			if (!n.test(e)) throw new s(400, "invalid_request", null);
+			let r = await u(!1), i = await m(`${l}/sessions/${e}`, {
 				method: "GET",
 				headers: r,
 				signal: t
 			});
-			if (!i.ok) throw await d(i);
-			return g(await u(i), e);
+			if (!i.ok) throw await f(i);
+			return _(await d(i), e);
 		},
 		async end(e, { reason: t, keepalive: r = !1 }) {
-			if (!n.test(e)) throw new o(400, "invalid_request", null);
-			let i = await l(!1, !1), a = await p(`${c}/sessions/${e}/end`, {
+			if (!n.test(e)) throw new s(400, "invalid_request", null);
+			let i = await u(!1), a = await m(`${l}/sessions/${e}/end`, {
 				method: "POST",
 				headers: {
 					...i,
@@ -194,13 +219,13 @@ function v(e) {
 				body: JSON.stringify({ reason: t }),
 				keepalive: r
 			});
-			if (!a.ok) throw await d(a);
-			return g(await u(a), e);
+			if (!a.ok) throw await f(a);
+			return _(await d(a), e);
 		}
 	};
 }
-function y(e) {
-	if (!(e instanceof o) || e.status === 0) return {
+function b(e) {
+	if (!(e instanceof s) || e.status === 0) return {
 		problem: "connection",
 		hide: !1
 	};
@@ -210,10 +235,16 @@ function y(e) {
 	};
 	switch (e.code) {
 		case "avatar_not_allowed":
+		case "avatar_not_permitted":
 		case "workspace_context_required": return {
 			problem: "unavailable",
 			hide: !0
 		};
+		case "consent_required": return {
+			problem: null,
+			hide: !1,
+			showDisclosure: !0
+		};
 		case "avatar_not_approved":
 		case "avatar_not_ready": return {
 			problem: "not-ready",
@@ -228,6 +259,7 @@ function y(e) {
 		case "provider_concurrency_limited":
 		case "provider_no_capacity":
 		case "counters_unavailable":
+		case "permission_check_unavailable":
 		case "avatar_busy": return {
 			problem: "capacity",
 			hide: !1
@@ -237,6 +269,11 @@ function y(e) {
 			problem: "rate-limited",
 			hide: !1
 		};
+		case "start_budget_exceeded":
+		case "start_in_progress": return {
+			problem: "start-timeout",
+			hide: !1
+		};
 		case "avatar_paused":
 		case "budget_exhausted": return {
 			problem: "paused",
@@ -251,11 +288,35 @@ function y(e) {
 			problem: "provider",
 			hide: !1
 		};
+		case "authentication_required":
+		case "unauthenticated":
+		case "untrusted_caller": return {
+			problem: "unavailable",
+			hide: !1
+		};
+		case "invalid_request":
+		case "method_not_allowed":
+		case "request_too_large":
+		case "idempotency_key_spent":
+		case "idempotency_key_mismatch":
+		case "upstream_unavailable": return {
+			problem: "provider",
+			hide: !1
+		};
 		default: return {
 			problem: e.status === 401 ? "unavailable" : "provider",
 			hide: !1
 		};
 	}
 }
+function x(e) {
+	return e === "unavailable" ? {
+		problem: "capacity",
+		hide: !1
+	} : {
+		problem: "unavailable",
+		hide: !0
+	};
+}
 //#endregion
-export { e as AVATAR_API_PATH, o as AvatarApiError, a as avatarApiBaseFromTtsEndpoint, s as avatarIdempotencyKey, y as avatarRefusalFor, v as createAvatarSessionClient };
+export { e as AVATAR_API_PATH, s as AvatarApiError, a as avatarApiBaseFromTtsEndpoint, x as avatarAvailabilityRefusal, c as avatarIdempotencyKey, b as avatarRefusalFor, y as createAvatarSessionClient };

package/dist/shared/assistant/avatar/live/createLiveAvatarSeam.d.ts

@@ -36,9 +36,14 @@ export declare function liveAvatarAuthorization(): string | null;
 /**
  * The workspace token, as the assistant's own calls mint it (`ensureWorkspaceToken`, the workspace gateway): the stored one while it is
  * valid for the active context (workspace, organisation, project), else a new one. Null when there is no active workspace or no sign-in.
- * A retry after a 401 (`fresh`) asks again the same way: the client can see a token's expiry and context, not a revocation.
+ *
+ * ★ `fresh` (the gateway refused a request with a 401): never the token it carried (`refused`) again. A client sees a token's expiry and
+ * context, not its revocation, so it still looks valid here. The mint's issuance guard (the one `prepareWorkspaceRequest` uses) passes
+ * it over, keeps the new token to this workspace and this sign-in, and stores it for every other caller. A token another caller stored
+ * since the refusal is not the refused one, and is used as it is. Null when none can be had: no retry then.
  */
-export declare function liveAvatarWorkspaceAuthorization(_options: {
+export declare function liveAvatarWorkspaceAuthorization(options: {
     readonly fresh: boolean;
+    readonly refused?: string;
 }): Promise<string | null>;
 export declare function createLiveAvatarSeam(options?: LiveAvatarSeamOptions): LiveAvatarSeamHandle;

package/dist/shared/assistant/avatar/live/createLiveAvatarSeam.js

@@ -28,15 +28,20 @@ function _() {
 	return n ? `Bearer ${n}` : null;
 }
 async function v(t) {
-	let i = n(), a = _()?.replace(/^Bearer\s+/i, "") ?? null;
-	if (!i || !a) return null;
-	let o = await e({
+	let i = n(), a = _(), o = a?.replace(/^Bearer\s+/i, "") ?? null;
+	if (!i || !o) return null;
+	let s = t.refused?.replace(/^Bearer\s+/i, ""), c = await e({
 		url: r("workspace"),
-		authToken: a,
+		authToken: o,
 		workspaceId: i,
-		currentQuery: "liveAvatarSession"
+		currentQuery: "liveAvatarSession",
+		...t.fresh ? { issuanceGuard: {
+			identityKey: "liveAvatarSession",
+			isCurrent: () => n() === i && _() === a,
+			accepts: (e, t) => e !== s && t === i
+		} } : {}
 	});
-	return o ? `Bearer ${o}` : null;
+	return c ? `Bearer ${c}` : null;
 }
 function y() {
 	let e = null;