@burdenoff/fe-libs 2026.1028.9 → 2026.1028.11

package/dist/shared/assistant/attachmentAccess.d.ts

@@ -0,0 +1,15 @@
+export type AttachmentAccess = 'allowed' | 'denied' | 'unknown';
+/** Exact operations needed by the Send-time Files commit; no role-name shortcut. */
+export declare const ATTACHMENT_WRITE_PERMISSIONS: readonly [{
+    readonly resourceType: "upload-session";
+    readonly action: "create";
+}, {
+    readonly resourceType: "folder";
+    readonly action: "create";
+}, {
+    readonly resourceType: "upload-session";
+    readonly action: "update";
+}];
+export declare const ATTACHMENT_ACCESS_QUERY = "query AssistantAttachmentPermissions($inputs: [PermissionCheckInput!]!) {\n  checkPermissions(inputs: $inputs) { allowed }\n}";
+/** Advisory preflight. An unreadable answer leaves the decision to the real server call. */
+export declare function probeAttachmentAccess(workspaceId: string, actorId: string | null, isSuperAdmin?: boolean): Promise<AttachmentAccess>;

package/dist/shared/assistant/attachmentAccess.js

@@ -0,0 +1,42 @@
+import { graphqlFetch as e } from "../graphql/fetch.js";
+import "../../shared-graphql.js";
+//#region src/shared/assistant/attachmentAccess.ts
+var t = [
+	{
+		resourceType: "upload-session",
+		action: "create"
+	},
+	{
+		resourceType: "folder",
+		action: "create"
+	},
+	{
+		resourceType: "upload-session",
+		action: "update"
+	}
+], n = "query AssistantAttachmentPermissions($inputs: [PermissionCheckInput!]!) {\n  checkPermissions(inputs: $inputs) { allowed }\n}";
+async function r(r, i, a = !1) {
+	if (a) return "allowed";
+	if (!r || !i) return "unknown";
+	try {
+		let a = await e({
+			gateway: "workspace",
+			workspaceId: r,
+			query: n,
+			variables: { inputs: t.map((e) => ({
+				actorId: i,
+				actorType: "USER",
+				scopeId: r,
+				...e
+			})) },
+			suppressGlobalErrorEvent: !0
+		});
+		if (a.errors?.length) return "unknown";
+		let o = a.data?.checkPermissions;
+		return !Array.isArray(o) || o.length !== t.length || o.some((e) => typeof e?.allowed != "boolean") ? "unknown" : o.every((e) => e.allowed) ? "allowed" : "denied";
+	} catch {
+		return "unknown";
+	}
+}
+//#endregion
+export { n as ATTACHMENT_ACCESS_QUERY, t as ATTACHMENT_WRITE_PERMISSIONS, r as probeAttachmentAccess };

package/dist/shared/assistant/attachmentAccessCopy.d.ts

@@ -0,0 +1,9 @@
+import { AssistantTr } from './i18n';
+export declare const ATTACHMENT_EDITOR_ACCESS_COPY: {
+    readonly key: "attachments.editorAccessRequired";
+    readonly fallback: "You need Editor access in this workspace to attach files.";
+};
+/** AI-written, 2026-10-28 (BOFF-9912); native review pending. No seed/apply performed. */
+export declare const ATTACHMENT_EDITOR_ACCESS_TRANSLATIONS: Readonly<Record<string, string>>;
+/** Server translations win; the six bundled values also work before a product seed. */
+export declare function attachmentEditorAccessMessage(tr: AssistantTr, locale: string): string;

package/dist/shared/assistant/attachmentAccessCopy.js

@@ -0,0 +1,18 @@
+//#region src/shared/assistant/attachmentAccessCopy.ts
+var e = {
+	key: "attachments.editorAccessRequired",
+	fallback: "You need Editor access in this workspace to attach files."
+}, t = {
+	en: e.fallback,
+	hi: "फ़ाइलें संलग्न करने के लिए आपको इस कार्यक्षेत्र में संपादक की अनुमति चाहिए।",
+	ta: "கோப்புகளை இணைக்க, இந்தப் பணியிடத்தில் உங்களுக்கு எடிட்டர் அணுகல் தேவை.",
+	es: "Necesitas acceso de Editor en este espacio de trabajo para adjuntar archivos.",
+	ar: "تحتاج إلى صلاحية محرّر في مساحة العمل هذه لإرفاق الملفات.",
+	zh: "你需要此工作区的编辑者权限才能附加文件。"
+};
+function n(n, r) {
+	let i = t[r.toLowerCase().split("-")[0] ?? "en"] ?? e.fallback;
+	return n(e.key, i);
+}
+//#endregion
+export { e as ATTACHMENT_EDITOR_ACCESS_COPY, t as ATTACHMENT_EDITOR_ACCESS_TRANSLATIONS, n as attachmentEditorAccessMessage };

package/dist/shared/assistant/attachmentCommit.d.ts

@@ -1,5 +1,6 @@
 import { FilesPort } from '../../storage/filesPort';
 import { AssistantAttachment } from './attachments';
+import { AttachmentAccess } from './attachmentAccess';
 /** files-svc switches to MULTIPART above this size; the browser cannot upload those. */
 export declare const ATTACHMENT_DIRECT_UPLOAD_MAX_BYTES: number;
 /**
@@ -38,6 +39,7 @@ export type AttachmentCommitPolicy = {
 };
 /** Codes for failures the commit decides itself; a server failure keeps the server's own code. */
 export declare const ATTACHMENT_COMMIT_CODES: {
+    readonly editorAccessRequired: "ATTACHMENT_EDITOR_ACCESS_REQUIRED";
     readonly quotaNotProvisioned: "QUOTA_NOT_PROVISIONED";
     readonly quotaExceeded: "QUOTA_EXCEEDED";
     readonly tooLarge: "ATTACHMENT_TOO_LARGE_FOR_DIRECT_UPLOAD";
@@ -46,6 +48,7 @@ export declare const ATTACHMENT_COMMIT_CODES: {
     readonly timeout: "ATTACHMENT_SAVE_TIMEOUT";
     readonly uploadFailed: "ATTACHMENT_UPLOAD_FAILED";
     readonly folderFailed: "ATTACHMENT_FOLDER_FAILED";
+    readonly pendingUpload: "ATTACHMENT_UPLOAD_UNRESOLVED";
 };
 /** One draft attachment and the bytes held for it in memory. */
 export interface CommitDraft {
@@ -61,18 +64,22 @@ export interface AttachmentCommitFailure {
 }
 /** What a failed rollback leaves for the next commit (or `discardPending`) to retry. */
 export type PendingDiscard = 
-/** A file this commit created and could not delete. */
+/** Legacy entry: already completed, retained in Files without a delete request. */
 {
     kind: 'file';
     fileId: string;
 }
-/** A session whose `completeUpload` was issued and whose outcome is unknown: reconcile, delete if FINALIZED. */
+/** A complete with an unknown outcome; retain its File if it FINALIZED. */
  | {
     kind: 'session';
     sessionId: string;
+    attachmentId?: string;
 };
+type SavedAttachment = Pick<AssistantAttachment, 'fileId' | 'downloadUrl' | 'urlResolvedAt'>;
 export interface PendingDiscardStore {
     entries: PendingDiscard[];
+    /** In-memory retry references only. Never persisted across identities or page reloads. */
+    retained?: Map<string, SavedAttachment>;
     /**
      * The drain that is running now. A drain takes the entries out of `entries` while it works and
      * puts back what it could not settle, so a second drain (or the final one after an unmount)
@@ -81,7 +88,7 @@ export interface PendingDiscardStore {
     draining?: Promise<void>;
 }
 export type CommitMode = 
-/** Any failure undoes everything and sends nothing (composer). */
+/** Any failure cancels the send and keeps completed private files for retry (composer). */
 'all-or-nothing'
 /** A failed file is dropped and the rest is kept (voice: the spoken question is still asked). */
  | 'best-effort';
@@ -93,7 +100,7 @@ export type AttachmentCommitSuccess = {
     dropped: AttachmentCommitFailure[];
     /** Call once the files are referenced by a sent message; rollback is a no-op from then on. */
     handedOver: () => void;
-    /** Hard-delete what this commit created (the turn could not be sent after all). */
+    /** Cancel the send handover; completed Files remain available for retry. Never deletes files. */
     rollback: () => Promise<void>;
 };
 export type AttachmentCommitFailureResult = {
@@ -107,6 +114,8 @@ export type AttachmentCommitFailureResult = {
 export type AttachmentCommitResult = AttachmentCommitSuccess | AttachmentCommitFailureResult;
 export interface CommitOptions {
     port: FilesPort;
+    /** Read-only permission check before staging; unknown/error preserves the server decision. */
+    preflightAccess?: () => Promise<AttachmentAccess>;
     /** The product's attachments folder, e.g. `/BigConsole/AI Assistant/Attachments`. */
     folderPath: string;
     drafts: readonly CommitDraft[];
@@ -123,13 +132,16 @@ export interface CommitOptions {
     now?: () => number;
     sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
 }
-/** Retry earlier failed rollbacks. A session with a FINALIZED outcome becomes a file delete. */
+/** Reconcile earlier ambiguous completes without deleting a finalized file. */
 export declare function drainPendingDiscards(port: FilesPort, store: PendingDiscardStore, options?: Pick<CommitOptions, 'sleep'> & {
     policy?: Partial<AttachmentCommitPolicy>;
 }): Promise<void>;
 export declare function commitAttachments(options: CommitOptions): Promise<AttachmentCommitResult>;
 export interface AttachmentCommitterConfig {
     port: FilesPort;
+    preflightAccess?: CommitOptions['preflightAccess'];
+    /** Scope retry state to the identity/workspace used by the Files port. */
+    getScopeKey?: () => string;
     folderPath: string;
     onChange?: CommitOptions['onChange'];
     policy?: CommitOptions['policy'];
@@ -172,3 +184,4 @@ export declare function attachmentUrlIsStale(attachment: Pick<AssistantAttachmen
  * and metadata are intact.
  */
 export declare function refreshStaleAttachmentUrls(attachments: readonly AssistantAttachment[], resolveUrl: (fileId: string) => Promise<string | null>, now?: number): Promise<AssistantAttachment[]>;
+export {};