@burdenoff/fe-libs 2026.825.5 → 2026.825.7

package/dist/shared/assistant/api.d.ts

@@ -1,5 +1,15 @@
 import { AssistantMode, AssistantPromptPart, AssistantRawMessage, AssistantSandboxAuthContext, AssistantArtifact, AssistantSessionInfo, DownloadedAssistantArtifact, StreamAccess } from './types';
-export declare function findExistingSandbox(workspaceId: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext): Promise<string | null>;
+export declare function findExistingSandbox(workspaceId: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, excludedSandboxIds?: ReadonlySet<string>): Promise<string | null>;
+export interface ExistingAssistantSandbox {
+    id: string;
+    name: string;
+    status: string;
+    metadata: Record<string, unknown> | null;
+    template: string;
+    createdBy: string;
+}
+/** Pure reuse selector, kept separate so quarantine behavior is regression-testable. */
+export declare function selectExistingAssistantSandbox(sandboxes: ExistingAssistantSandbox[], mode: AssistantMode, isProd: boolean, authContext: Pick<AssistantSandboxAuthContext, 'userId'>, excludedSandboxIds?: ReadonlySet<string>): string | null;
 /**
  * Does this mode write through the gateway, and therefore need the
  * confirm-before-write gate?
@@ -31,6 +41,12 @@ export declare function waitForAssistantServiceReady(sandboxId: string, workspac
 export declare function createAssistantSession(sandboxId: string, workspaceId: string, mode: AssistantMode, authContext: AssistantSandboxAuthContext): Promise<{
     sessionId: string;
 }>;
+/**
+ * Terminalize a sandbox whose Cloudflare data plane was reaped while its DB
+ * record remained RUNNING. Invoked only for Cloudflare's exact connection-
+ * refused signature before provisioning the replacement.
+ */
+export declare function stopReapedAssistantSandbox(sandboxId: string, workspaceId: string, authContext: AssistantSandboxAuthContext): Promise<void>;
 /**
  * Assemble the `/sessions/:id/prompt-async` request body. Pure + exported so the
  * backward-compatibility contract is unit-testable without touching the network.

package/dist/shared/assistant/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,YAAY,EACb,MAAM,SAAS,CAAC;AA8CjB,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwCxB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,aAAa,GAAG,gBAAgB,CAAC,GAC/E,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCxC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,MAAM,CAAC,CA2DjB;AAsCD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAS,GACjB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAWhC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK1B;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAChD,WAAW,EAAE,2BAA2B;AACxC,yFAAyF;AACzF,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjC;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,EACxC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY9B;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAc/B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,2BAA2B,CAAC,CAiBtC;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACzC,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsBH,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,YAAY,EACb,MAAM,SAAS,CAAC;AA8CjB,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,EACxC,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,wBAAwB,EAAE,EACrC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,EACxD,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,MAAM,GAAG,IAAI,CAwBf;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,aAAa,GAAG,gBAAgB,CAAC,GAC/E,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCxC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,MAAM,CAAC,CA2DjB;AAsCD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAS,GACjB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAWhC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK1B;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAChD,WAAW,EAAE,2BAA2B;AACxC,yFAAyF;AACzF,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjC;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,EACxC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAqB9B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAY9B;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAc/B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,2BAA2B,CAAC,CAiBtC;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACzC,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/shared/assistant/api.js

@@ -1,9 +1,9 @@
 import { buildSandboxContextInput as e, executeSandboxGraphQL as t } from "./gatewayClient.js";
-import { CHECK_AI_CREDITS as n, CREATE_SANDBOX as r, EXTEND_SANDBOX_TTL as i, GET_ACTIVE_SANDBOXES as a, GET_SANDBOX as o, PROXY_SANDBOX_REQUEST as s, REPORT_AI_TOKEN_USAGE as c, WAIT_FOR_SANDBOX_RUNNING as l } from "./operations.js";
-import { ASSISTANT_API_AUTH_STRATEGY as u, getImageForMode as d, getImageTagForMode as f, getResourcesForMode as p, resolveSandboxAssistantMode as m } from "./images.js";
-import { getCapability as h, isUnknownFieldError as g, markSupported as _, markUnsupported as v } from "./capabilities.js";
+import { CHECK_AI_CREDITS as n, CREATE_SANDBOX as r, EXTEND_SANDBOX_TTL as i, GET_ACTIVE_SANDBOXES as a, GET_SANDBOX as o, PROXY_SANDBOX_REQUEST as s, REPORT_AI_TOKEN_USAGE as c, STOP_ASSISTANT_SANDBOX as l, WAIT_FOR_SANDBOX_RUNNING as u } from "./operations.js";
+import { ASSISTANT_API_AUTH_STRATEGY as d, getImageForMode as f, getImageTagForMode as p, getResourcesForMode as m, resolveSandboxAssistantMode as h } from "./images.js";
+import { getCapability as g, isUnknownFieldError as _, markSupported as v, markUnsupported as y } from "./capabilities.js";
 //#region src/shared/assistant/api.ts
-async function y(n, r, i, a, o, c) {
+async function b(n, r, i, a, o, c) {
 	let l = (await t({
 		query: s,
 		operationName: "ProxySandboxRequest",
@@ -25,19 +25,22 @@ async function y(n, r, i, a, o, c) {
 	}
 	return l.body;
 }
-async function b(n, r, i, o) {
-	return ((await t({
+async function x(n, r, i, o, s = /* @__PURE__ */ new Set()) {
+	return S((await t({
 		query: a,
 		operationName: "GetActiveSandboxes",
 		variables: { context: e(n, o) },
 		workspaceId: n,
 		authContext: o
-	})).getActiveSandboxes ?? []).find((e) => (e.status === "RUNNING" || e.status === "PROVISIONING" || e.status === "PENDING") && e.template === "AI_BUILDER" && m(e) === r && (!o.userId || e.createdBy === o.userId) && e.metadata?.authStrategy === "sandbox-app-client-headers-v1" && e.metadata?.imageTag === f(r, i) && (!x(r) || e.metadata?.confirmWrites === !0))?.id ?? null;
+	})).getActiveSandboxes ?? [], r, i, o, s);
 }
-function x(e) {
+function S(e, t, n, r, i = /* @__PURE__ */ new Set()) {
+	return e.find((e) => !i.has(e.id) && (e.status === "RUNNING" || e.status === "PROVISIONING" || e.status === "PENDING") && e.template === "AI_BUILDER" && h(e) === t && (!r.userId || e.createdBy === r.userId) && e.metadata?.authStrategy === "sandbox-app-client-headers-v1" && e.metadata?.imageTag === p(t, n) && (!C(t) || e.metadata?.confirmWrites === !0))?.id ?? null;
+}
+function C(e) {
 	return e === "api-calls";
 }
-function S(e, t, n, r) {
+function w(e, t, n, r) {
 	let i = [
 		{
 			name: "AI_ASSISTANT_MODE",
@@ -65,25 +68,25 @@ function S(e, t, n, r) {
 	}), r.workspaceToken && i.push({
 		name: "WORKSPACE_AUTH_TOKEN",
 		value: r.workspaceToken
-	})), x(t) && i.push({
+	})), C(t) && i.push({
 		name: "AI_ASSISTANT_CONFIRM_WRITES",
 		value: "1"
 	}), i;
 }
-async function C(n, i, a, o, s, c) {
-	let l = p(i), m = S(n, i, a, c), h = (t) => ({
+async function T(n, i, a, o, s, c) {
+	let l = m(i), u = w(n, i, a, c), h = (t) => ({
 		name: `ai-assistant-${i}-${Date.now()}`,
 		description: `AI Assistant sandbox (${i} mode)`,
 		template: "AI_BUILDER",
 		mode: "DEPLOYMENT",
 		containers: [{
 			name: "ai-assistant",
-			image: d(i, o),
+			image: f(i, o),
 			ports: [{
 				containerPort: 8080,
 				name: "http"
 			}],
-			env: m
+			env: u
 		}],
 		resources: l,
 		ttlSeconds: t,
@@ -91,9 +94,9 @@ async function C(n, i, a, o, s, c) {
 			assistantMode: i,
 			assistantOwnerUserId: c.userId ?? null,
 			assistantOrganizationId: c.organizationId ?? null,
-			authStrategy: u,
-			imageTag: f(i, o),
-			confirmWrites: x(i)
+			authStrategy: d,
+			imageTag: p(i, o),
+			confirmWrites: C(i)
 		},
 		context: e(a, c)
 	}), g = (e) => t({
@@ -113,7 +116,7 @@ async function C(n, i, a, o, s, c) {
 	if (!_?.createSandbox?.id) throw Error("createSandbox returned empty response");
 	return _.createSandbox.id;
 }
-async function w(n, r, i) {
+async function E(n, r, i) {
 	return (await t({
 		query: o,
 		operationName: "GetSandbox",
@@ -125,14 +128,14 @@ async function w(n, r, i) {
 		authContext: i
 	})).getSandbox;
 }
-function T(e, t) {
+function D(e, t) {
 	if (e === "FAILED" || e === "STOPPED" || e === "EXPIRED") throw Error(t ? `Sandbox ${e.toLowerCase()}: ${t}` : `Sandbox ${e.toLowerCase()}`);
 }
-async function E(n, r, i, a = 3e5) {
+async function O(n, r, i, a = 3e5) {
 	let o = Date.now();
-	if (h("waitForSandboxRunning") !== "unsupported") for (; Date.now() - o < a;) try {
+	if (g("waitForSandboxRunning") !== "unsupported") for (; Date.now() - o < a;) try {
 		let a = await t({
-			query: l,
+			query: u,
 			operationName: "WaitForSandboxRunning",
 			variables: {
 				id: n,
@@ -142,29 +145,29 @@ async function E(n, r, i, a = 3e5) {
 			workspaceId: r,
 			authContext: i
 		});
-		_("waitForSandboxRunning");
+		v("waitForSandboxRunning");
 		let o = a.waitForSandboxRunning;
 		if (o?.status === "RUNNING") return;
-		T(o?.status, o?.errorMessage);
+		D(o?.status, o?.errorMessage);
 	} catch (e) {
-		if (g(e)) {
-			v("waitForSandboxRunning");
+		if (_(e)) {
+			y("waitForSandboxRunning");
 			break;
 		}
 		throw e;
 	}
 	for (; Date.now() - o < a;) {
-		let e = await w(n, r, i);
+		let e = await E(n, r, i);
 		if (e?.status === "RUNNING") return;
-		T(e?.status, e?.errorMessage), await new Promise((e) => setTimeout(e, 2e3));
+		D(e?.status, e?.errorMessage), await new Promise((e) => setTimeout(e, 2e3));
 	}
 	throw Error("Sandbox startup timed out");
 }
-async function D(e, t, n, r = 9e4) {
+async function k(e, t, n, r = 9e4) {
 	let i = Date.now();
 	for (; Date.now() - i < r;) {
 		try {
-			await y(e, t, "/health", "GET", void 0, n);
+			await b(e, t, "/health", "GET", void 0, n);
 			return;
 		} catch (e) {
 			let t = e instanceof Error ? e.message : String(e);
@@ -174,10 +177,22 @@ async function D(e, t, n, r = 9e4) {
 	}
 	throw Error("Assistant service did not become healthy before timeout");
 }
-async function O(e, t, n, r) {
-	return { sessionId: (await y(e, t, "/sessions", "POST", { mode: n }, r)).session.id };
+async function A(e, t, n, r) {
+	return { sessionId: (await b(e, t, "/sessions", "POST", { mode: n }, r)).session.id };
+}
+async function j(n, r, i) {
+	await t({
+		query: l,
+		operationName: "StopAssistantSandbox",
+		variables: {
+			id: n,
+			context: e(r, i)
+		},
+		workspaceId: r,
+		authContext: i
+	});
 }
-function k(e) {
+function M(e) {
 	let { mode: t, prompt: n, pageContext: r, parts: i } = e, a = {
 		mode: t,
 		prompt: n,
@@ -185,8 +200,8 @@ function k(e) {
 	};
 	return i && i.length > 0 && (a.parts = i), a;
 }
-async function A(e, t, n, r, i, a, o, s) {
-	let c = await y(e, t, `/sessions/${n}/prompt-async`, "POST", k({
+async function N(e, t, n, r, i, a, o, s) {
+	let c = await b(e, t, `/sessions/${n}/prompt-async`, "POST", M({
 		mode: i,
 		prompt: r,
 		pageContext: a,
@@ -194,25 +209,25 @@ async function A(e, t, n, r, i, a, o, s) {
 	}), o);
 	return { messageID: typeof c.messageID == "string" ? c.messageID : void 0 };
 }
-async function j(e, t, n, r, i) {
+async function P(e, t, n, r, i) {
 	let a = `/sessions/${n}/messages?limit=${i?.limit ?? 50}`;
-	i?.sinceMs && h("sinceParam") !== "unsupported" && (a += `&since=${i.sinceMs}`);
-	let o = await y(e, t, a, "GET", void 0, r);
-	return typeof o.now == "number" && _("sinceParam"), o.messages ?? [];
+	i?.sinceMs && g("sinceParam") !== "unsupported" && (a += `&since=${i.sinceMs}`);
+	let o = await b(e, t, a, "GET", void 0, r);
+	return typeof o.now == "number" && v("sinceParam"), o.messages ?? [];
 }
-async function M(e, t, n, r) {
-	if (h("sse") === "unsupported") return null;
+async function F(e, t, n, r) {
+	if (g("sse") === "unsupported") return null;
 	try {
-		let i = await y(e, t, `/sessions/${n}/stream-url`, "GET", void 0, r);
-		return typeof i.url == "string" && typeof i.expiresAt == "number" ? (_("sse"), {
+		let i = await b(e, t, `/sessions/${n}/stream-url`, "GET", void 0, r);
+		return typeof i.url == "string" && typeof i.expiresAt == "number" ? (v("sse"), {
 			url: i.url,
 			expiresAt: i.expiresAt
-		}) : (v("sse"), null);
+		}) : (y("sse"), null);
 	} catch {
-		return v("sse"), null;
+		return y("sse"), null;
 	}
 }
-async function N(n, r, a, o) {
+async function I(n, r, a, o) {
 	await t({
 		query: i,
 		operationName: "ExtendSandboxTtl",
@@ -225,21 +240,21 @@ async function N(n, r, a, o) {
 		authContext: o
 	});
 }
-async function P(e, t, n, r) {
-	await y(e, t, `/sessions/${n}/heartbeat`, "POST", void 0, r).catch(() => void 0);
+async function L(e, t, n, r) {
+	await b(e, t, `/sessions/${n}/heartbeat`, "POST", void 0, r).catch(() => void 0);
 }
-async function F(e, t, n, r) {
-	return ((await y(e, t, `/sessions/${n}/artifacts`, "GET", void 0, r)).artifacts ?? []).filter((e) => !e.name.startsWith("."));
+async function R(e, t, n, r) {
+	return ((await b(e, t, `/sessions/${n}/artifacts`, "GET", void 0, r)).artifacts ?? []).filter((e) => !e.name.startsWith("."));
 }
-async function I(e, t, n, r) {
-	let i = await y(e, t, `/sessions/${n}`, "GET", void 0, r);
+async function z(e, t, n, r) {
+	let i = await b(e, t, `/sessions/${n}`, "GET", void 0, r);
 	return {
 		id: i.session?.id ?? n,
 		mode: i.mode ?? "unknown"
 	};
 }
-async function L(e, t, n, r, i) {
-	let a = (await y(e, t, `/sessions/${n}/artifacts/download?path=${encodeURIComponent(r)}`, "GET", void 0, i)).artifact;
+async function B(e, t, n, r, i) {
+	let a = (await b(e, t, `/sessions/${n}/artifacts/download?path=${encodeURIComponent(r)}`, "GET", void 0, i)).artifact;
 	if (!a) throw Error("Artifact download returned an empty response");
 	return {
 		filename: a.filename,
@@ -247,7 +262,7 @@ async function L(e, t, n, r, i) {
 		contentBase64: a.contentBase64
 	};
 }
-async function R(e, r) {
+async function V(e, r) {
 	return (await t({
 		query: n,
 		operationName: "CheckAiCredits",
@@ -256,7 +271,7 @@ async function R(e, r) {
 		authContext: r
 	})).checkAiCredits;
 }
-async function z(e, n, r, i, a, o) {
+async function H(e, n, r, i, a, o) {
 	let s = Math.max(0, Math.round(a.input ?? 0)), l = Math.max(0, Math.round(a.output ?? 0));
 	s + l === 0 || !i || await t({
 		query: c,
@@ -273,4 +288,4 @@ async function z(e, n, r, i, a, o) {
 	});
 }
 //#endregion
-export { k as buildPromptRequestBody, R as checkAssistantAiCredits, C as createAssistantSandbox, O as createAssistantSession, L as downloadAssistantArtifact, N as extendAssistantSandboxTTL, b as findExistingSandbox, F as getAssistantArtifacts, j as getAssistantMessages, I as getAssistantSession, M as getAssistantStreamAccess, z as reportAssistantAiTokenUsage, A as sendAssistantPromptAsync, P as sendHeartbeat, D as waitForAssistantServiceReady, E as waitForSandboxRunning };
+export { M as buildPromptRequestBody, V as checkAssistantAiCredits, T as createAssistantSandbox, A as createAssistantSession, B as downloadAssistantArtifact, I as extendAssistantSandboxTTL, x as findExistingSandbox, R as getAssistantArtifacts, P as getAssistantMessages, z as getAssistantSession, F as getAssistantStreamAccess, H as reportAssistantAiTokenUsage, N as sendAssistantPromptAsync, L as sendHeartbeat, j as stopReapedAssistantSandbox, k as waitForAssistantServiceReady, O as waitForSandboxRunning };

package/dist/shared/assistant/createSandboxAssistantTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createSandboxAssistantTransport.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/createSandboxAssistantTransport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,KAAK,EAGV,2BAA2B,EAE3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,SAAS,CAAC;AAOjB,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,2BAA2B,CAAC;IAClD,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAYD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,aAAa,GAClB,yBAAyB,CAgL3B"}
+{"version":3,"file":"createSandboxAssistantTransport.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/createSandboxAssistantTransport.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,OAAO,KAAK,EAGV,2BAA2B,EAE3B,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,SAAS,CAAC;AAOjB,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,2BAA2B,CAAC;IAClD,cAAc,EAAE,MAAM,MAAM,CAAC;CAC9B;AAYD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,aAAa,GAClB,yBAAyB,CA2L3B"}

package/dist/shared/assistant/createSandboxAssistantTransport.js

@@ -1,91 +1,98 @@
 import { isQuotaExhaustedError as e } from "./gatewayClient.js";
-import { checkAssistantAiCredits as t, getAssistantMessages as n, getAssistantStreamAccess as r, reportAssistantAiTokenUsage as i, sendAssistantPromptAsync as a } from "./api.js";
-import { AssistantRuntimeManager as o } from "./runtime.js";
-import { buildProgress as s, isRecoverable as c, mergeMessagesById as l, sanitize as u } from "./progress.js";
+import { checkAssistantAiCredits as t, getAssistantMessages as n, getAssistantStreamAccess as r, reportAssistantAiTokenUsage as i, sendAssistantPromptAsync as a, stopReapedAssistantSandbox as o } from "./api.js";
+import { AssistantRuntimeManager as s } from "./runtime.js";
+import { buildProgress as c, isReapedSandboxConnectionError as l, isRecoverable as u, mergeMessagesById as d, sanitize as f } from "./progress.js";
 //#region src/shared/assistant/createSandboxAssistantTransport.ts
-var d = 42e4, f = 400, p = 2e3, m = 5e3;
-function h() {
+var p = 42e4, m = 400, h = 2e3, g = 5e3;
+function _() {
 	return typeof window > "u" ? {} : {
 		currentUrl: window.location.href,
 		currentPage: window.location.pathname.split("/").filter(Boolean).slice(0, 3).join("/") || "home",
 		viewportSize: `${window.innerWidth}x${window.innerHeight}`
 	};
 }
-function g(g, _) {
-	let v = g.mode ?? "assistant", y = g.streamBudgetMs ?? d, b = g.ttlSeconds ?? 3600, x = g.isProdRuntime ?? (() => !1), S = g.enableCredits ?? !1, C = new o({
-		product: g.product,
-		mode: v,
-		ttlSeconds: b,
-		isProd: x,
-		getWorkspaceId: _.getWorkspaceId,
-		getAuthContext: _.getAuthContext
-	}), w = () => g.gatherPageContext ? { ...g.gatherPageContext() } : h();
-	async function T(e, t, o, d) {
+function v(v, y) {
+	let b = v.mode ?? "assistant", x = v.streamBudgetMs ?? p, S = v.ttlSeconds ?? 3600, C = v.isProdRuntime ?? (() => !1), w = v.enableCredits ?? !1, T = new s({
+		product: v.product,
+		mode: b,
+		ttlSeconds: S,
+		isProd: C,
+		getWorkspaceId: y.getWorkspaceId,
+		getAuthContext: y.getAuthContext
+	}), E = () => v.gatherPageContext ? { ...v.gatherPageContext() } : _();
+	async function D(e, t, s, p) {
 		try {
-			let { sandboxId: c, sessionId: d } = await C.ensureRuntime();
-			C.startKeepWarm();
-			let h = Date.now();
-			await a(c, t, d, e.prompt, v, w(), o, e.parts?.length ? { parts: e.parts } : void 0);
-			let _ = null, b = null, x = await r(c, t, d, o).catch(() => null);
-			if (x && typeof EventSource < "u") try {
-				b = new EventSource(x.url);
+			let { sandboxId: o, sessionId: l } = await T.ensureRuntime();
+			T.startKeepWarm();
+			let u = Date.now();
+			await a(o, t, l, e.prompt, b, E(), s, e.parts?.length ? { parts: e.parts } : void 0);
+			let p = null, _ = null, y = await r(o, t, l, s).catch(() => null);
+			if (y && typeof EventSource < "u") try {
+				_ = new EventSource(y.url);
 				let e = () => {
-					if (_) {
-						let e = _;
-						_ = null, e();
+					if (p) {
+						let e = p;
+						p = null, e();
 					}
 				};
-				b.onmessage = e, b.addEventListener("message.part.updated", e), b.addEventListener("message.updated", e), b.onerror = () => {
-					b?.close(), b = null;
+				_.onmessage = e, _.addEventListener("message.part.updated", e), _.addEventListener("message.updated", e), _.onerror = () => {
+					_?.close(), _ = null;
 				};
 			} catch {
-				b = null;
+				_ = null;
 			}
-			let T = (t) => new Promise((n) => {
+			let S = (t) => new Promise((n) => {
 				if (e.signal.aborted) return n();
 				let r = setTimeout(() => {
-					_ = null, n();
+					p = null, n();
 				}, t);
-				_ = () => {
+				p = () => {
 					clearTimeout(r), n();
 				};
-			}), E = h + y, D = [], O = s([], h), k = h;
-			for (; Date.now() < E;) {
+			}), C = u + x, D = [], O = c([], u), k = u;
+			for (; Date.now() < C;) {
 				if (e.signal.aborted) throw Error("Cancelled");
-				let r = await n(c, t, d, o, { sinceMs: k });
-				D = l(D, r);
+				let r = await n(o, t, l, s, { sinceMs: k });
+				D = d(D, r);
 				for (let e of r) {
 					let t = e.info?.time?.created;
 					typeof t == "number" && t > k && (k = t);
 				}
-				if (O = s(D, h), e.onProgress(u(O.content)), O.done) break;
-				let i = Date.now() - h < m ? f : p;
-				await (b ? T(i) : new Promise((e) => setTimeout(e, i)));
+				if (O = c(D, u), e.onProgress(f(O.content)), O.done) break;
+				let i = Date.now() - u < g ? m : h;
+				await (_ ? S(i) : new Promise((e) => setTimeout(e, i)));
 			}
-			if (b?.close(), !O.done) throw Error("The assistant timed out while responding. Please try again.");
-			let A = await n(c, t, d, o, { limit: 50 }).catch(() => D), j = s(l(D, A), h);
-			if (S) {
+			if (_?.close(), !O.done) throw Error("The assistant timed out while responding. Please try again.");
+			let A = await n(o, t, l, s, { limit: 50 }).catch(() => D), j = c(d(D, A), u);
+			if (w) {
 				let e = A.filter((e) => e.info?.role === "assistant").sort((e, t) => (t.info?.time?.created ?? 0) - (e.info?.time?.created ?? 0))[0], n = e?.info?.tokens, r = e?.info?.providerID && e?.info?.modelID ? `${e.info.providerID}/${e.info.modelID}` : void 0;
-				e?.info?.id && n && i(t, d, e.info.id, r, n, o).then(() => g.onCreditsUpdated?.()).catch(() => void 0);
+				e?.info?.id && n && i(t, l, e.info.id, r, n, s).then(() => v.onCreditsUpdated?.()).catch(() => void 0);
 			}
-			return { text: u(j.content) };
+			return { text: f(j.content) };
 		} catch (n) {
-			if (d === 1 && c(n)) return C.reset(), T(e, t, o, 2);
+			if (p === 1 && u(n)) {
+				let r = l(n);
+				if (r) {
+					let e = T.getSandboxId();
+					e && await o(e, t, s).catch(() => void 0);
+				}
+				return T.reset({ quarantineCurrentSandbox: r }), D(e, t, s, 2);
+			}
 			throw n;
 		}
 	}
 	return {
 		sendPrompt: async (n) => {
-			let r = _.getWorkspaceId();
+			let r = y.getWorkspaceId();
 			if (!r) throw Error("The assistant needs an active workspace. Open a workspace and try again.");
-			let i = _.getAuthContext();
-			return S && t(r, i).catch((t) => {
-				e(t) && g.onQuotaExhausted?.(t);
-			}), T(n, r, i, 1);
+			let i = y.getAuthContext();
+			return w && t(r, i).catch((t) => {
+				e(t) && v.onQuotaExhausted?.(t);
+			}), D(n, r, i, 1);
 		},
-		prewarm: (e) => C.prewarm(e),
-		suspend: () => C.stopKeepWarm()
+		prewarm: (e) => T.prewarm(e),
+		suspend: () => T.stopKeepWarm()
 	};
 }
 //#endregion
-export { g as createSandboxAssistantTransport };
+export { v as createSandboxAssistantTransport };

package/dist/shared/assistant/operations.d.ts

@@ -13,6 +13,7 @@ export declare const GET_SANDBOX = "\n  query GetSandbox($id: ID!, $context: Con
 export declare const WAIT_FOR_SANDBOX_RUNNING = "\n  query WaitForSandboxRunning($id: ID!, $timeoutSeconds: Int, $context: ContextInput!) {\n    waitForSandboxRunning(id: $id, timeoutSeconds: $timeoutSeconds, context: $context) {\n      id\n      status\n      errorMessage\n    }\n  }\n";
 export declare const GET_ACTIVE_SANDBOXES = "\n  query GetActiveSandboxes($context: ContextInput!) {\n    getActiveSandboxes(context: $context) {\n      id\n      name\n      status\n      metadata\n      template\n      createdBy\n    }\n  }\n";
 export declare const PROXY_SANDBOX_REQUEST = "\n  mutation ProxySandboxRequest($input: ProxySandboxRequestInput!) {\n    proxySandboxRequest(input: $input) {\n      status\n      body\n    }\n  }\n";
+export declare const STOP_ASSISTANT_SANDBOX = "\n  mutation StopAssistantSandbox($id: ID!, $context: ContextInput!) {\n    stopSandbox(id: $id, context: $context) {\n      id\n      status\n    }\n  }\n";
 export declare const EXTEND_SANDBOX_TTL = "\n  mutation ExtendSandboxTtl($id: ID!, $additionalSeconds: Int!, $context: ContextInput!) {\n    extendSandboxTTL(id: $id, additionalSeconds: $additionalSeconds, context: $context) {\n      id\n      expiresAt\n    }\n  }\n";
 export declare const CHECK_AI_CREDITS = "\n  mutation CheckAiCredits {\n    checkAiCredits\n  }\n";
 export declare const REPORT_AI_TOKEN_USAGE = "\n  mutation ReportAiTokenUsage($input: ReportAiTokenUsageInput!) {\n    reportAiTokenUsage(input: $input)\n  }\n";

package/dist/shared/assistant/operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/operations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,cAAc,mMAW1B,CAAC;AAEF,eAAO,MAAM,WAAW,qNAWvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,mPAQpC,CAAC;AAEF,eAAO,MAAM,oBAAoB,4MAWhC,CAAC;AAEF,eAAO,MAAM,qBAAqB,4JAOjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,qOAO9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,6DAI5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,sHAIjC,CAAC"}
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/operations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,cAAc,mMAW1B,CAAC;AAEF,eAAO,MAAM,WAAW,qNAWvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,mPAQpC,CAAC;AAEF,eAAO,MAAM,oBAAoB,4MAWhC,CAAC;AAEF,eAAO,MAAM,qBAAqB,4JAOjC,CAAC;AAEF,eAAO,MAAM,sBAAsB,gKAOlC,CAAC;AAEF,eAAO,MAAM,kBAAkB,qOAO9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,6DAI5B,CAAC;AAEF,eAAO,MAAM,qBAAqB,sHAIjC,CAAC"}

package/dist/shared/assistant/operations.js

@@ -1,4 +1,4 @@
 //#region src/shared/assistant/operations.ts
-var e = "\n  mutation CreateSandbox($input: CreateSandboxInput!) {\n    createSandbox(input: $input) {\n      id\n      name\n      status\n      network {\n        internalUrl\n      }\n    }\n  }\n", t = "\n  query GetSandbox($id: ID!, $context: ContextInput!) {\n    getSandbox(id: $id, context: $context) {\n      id\n      status\n      errorMessage\n      network {\n        internalUrl\n      }\n    }\n  }\n", n = "\n  query WaitForSandboxRunning($id: ID!, $timeoutSeconds: Int, $context: ContextInput!) {\n    waitForSandboxRunning(id: $id, timeoutSeconds: $timeoutSeconds, context: $context) {\n      id\n      status\n      errorMessage\n    }\n  }\n", r = "\n  query GetActiveSandboxes($context: ContextInput!) {\n    getActiveSandboxes(context: $context) {\n      id\n      name\n      status\n      metadata\n      template\n      createdBy\n    }\n  }\n", i = "\n  mutation ProxySandboxRequest($input: ProxySandboxRequestInput!) {\n    proxySandboxRequest(input: $input) {\n      status\n      body\n    }\n  }\n", a = "\n  mutation ExtendSandboxTtl($id: ID!, $additionalSeconds: Int!, $context: ContextInput!) {\n    extendSandboxTTL(id: $id, additionalSeconds: $additionalSeconds, context: $context) {\n      id\n      expiresAt\n    }\n  }\n", o = "\n  mutation CheckAiCredits {\n    checkAiCredits\n  }\n", s = "\n  mutation ReportAiTokenUsage($input: ReportAiTokenUsageInput!) {\n    reportAiTokenUsage(input: $input)\n  }\n";
+var e = "\n  mutation CreateSandbox($input: CreateSandboxInput!) {\n    createSandbox(input: $input) {\n      id\n      name\n      status\n      network {\n        internalUrl\n      }\n    }\n  }\n", t = "\n  query GetSandbox($id: ID!, $context: ContextInput!) {\n    getSandbox(id: $id, context: $context) {\n      id\n      status\n      errorMessage\n      network {\n        internalUrl\n      }\n    }\n  }\n", n = "\n  query WaitForSandboxRunning($id: ID!, $timeoutSeconds: Int, $context: ContextInput!) {\n    waitForSandboxRunning(id: $id, timeoutSeconds: $timeoutSeconds, context: $context) {\n      id\n      status\n      errorMessage\n    }\n  }\n", r = "\n  query GetActiveSandboxes($context: ContextInput!) {\n    getActiveSandboxes(context: $context) {\n      id\n      name\n      status\n      metadata\n      template\n      createdBy\n    }\n  }\n", i = "\n  mutation ProxySandboxRequest($input: ProxySandboxRequestInput!) {\n    proxySandboxRequest(input: $input) {\n      status\n      body\n    }\n  }\n", a = "\n  mutation StopAssistantSandbox($id: ID!, $context: ContextInput!) {\n    stopSandbox(id: $id, context: $context) {\n      id\n      status\n    }\n  }\n", o = "\n  mutation ExtendSandboxTtl($id: ID!, $additionalSeconds: Int!, $context: ContextInput!) {\n    extendSandboxTTL(id: $id, additionalSeconds: $additionalSeconds, context: $context) {\n      id\n      expiresAt\n    }\n  }\n", s = "\n  mutation CheckAiCredits {\n    checkAiCredits\n  }\n", c = "\n  mutation ReportAiTokenUsage($input: ReportAiTokenUsageInput!) {\n    reportAiTokenUsage(input: $input)\n  }\n";
 //#endregion
-export { o as CHECK_AI_CREDITS, e as CREATE_SANDBOX, a as EXTEND_SANDBOX_TTL, r as GET_ACTIVE_SANDBOXES, t as GET_SANDBOX, i as PROXY_SANDBOX_REQUEST, s as REPORT_AI_TOKEN_USAGE, n as WAIT_FOR_SANDBOX_RUNNING };
+export { s as CHECK_AI_CREDITS, e as CREATE_SANDBOX, o as EXTEND_SANDBOX_TTL, r as GET_ACTIVE_SANDBOXES, t as GET_SANDBOX, i as PROXY_SANDBOX_REQUEST, c as REPORT_AI_TOKEN_USAGE, a as STOP_ASSISTANT_SANDBOX, n as WAIT_FOR_SANDBOX_RUNNING };

package/dist/shared/assistant/progress.d.ts

@@ -27,6 +27,13 @@ export declare function buildProgress(messages: AssistantRawMessage[], sinceMs:
 };
 /** Redact credentials that might leak into a rendered answer. */
 export declare function sanitize(response: string): string;
+/**
+ * Cloudflare's sandbox proxy emits this exact connection-refused copy after a
+ * sandbox has been reaped but its control-plane record still looks RUNNING.
+ * Keep this deliberately narrow: replaying an arbitrary timeout can duplicate
+ * a prompt whose first attempt actually reached the model.
+ */
+export declare function isReapedSandboxConnectionError(error: unknown): boolean;
 /** Whether an error is worth one retry from a clean runtime (union of fleet fragments). */
 export declare function isRecoverable(error: unknown): boolean;
 /**

package/dist/shared/assistant/progress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAU7E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAuBpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAyBrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}
+{"version":3,"file":"progress.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/progress.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAA2B,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEpG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAE3E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,CAM5E;AA8CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAkB/E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAU7E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,mBAAmB,EAAE,EAC/B,OAAO,EAAE,MAAM,GACd;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAuBpC;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMjD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItE;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0BrD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,mBAAmB,EAAE,EAClC,QAAQ,EAAE,mBAAmB,EAAE,GAC9B,mBAAmB,EAAE,CAavB;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,sBAAsB,EAAE,CAyB7F"}

package/dist/shared/assistant/progress.js

@@ -59,7 +59,11 @@ function c(e) {
 }
 function l(e) {
 	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
-	return t.includes("rate limit exceeded") || t.includes("unauthorized") || t.includes("k8s api error 401") ? !1 : [
+	return t.includes("unable to connect") && t.includes("able to access the url");
+}
+function u(e) {
+	let t = e instanceof Error ? e.message.toLowerCase() : String(e).toLowerCase();
+	return t.includes("rate limit exceeded") || t.includes("unauthorized") || t.includes("k8s api error 401") ? !1 : l(e) ? !0 : [
 		"sandbox not found",
 		"sandbox is not running",
 		"sandbox service not available yet",
@@ -75,7 +79,7 @@ function l(e) {
 		"proxy error: 503"
 	].some((e) => t.includes(e));
 }
-function u(t, n) {
+function d(t, n) {
 	let r = /* @__PURE__ */ new Map();
 	for (let e of t) {
 		let t = e.info?.id;
@@ -87,7 +91,7 @@ function u(t, n) {
 	}
 	return Array.from(r.values()).sort((t, n) => e(t) - e(n));
 }
-function d(n) {
+function f(n) {
 	let r = [];
 	for (let i of n) {
 		let n = i.info?.role;
@@ -102,4 +106,4 @@ function d(n) {
 	return r;
 }
 //#endregion
-export { s as buildProgress, a as getAssistantMedia, l as isRecoverable, d as mapSessionToHistory, u as mergeMessagesById, c as sanitize };
+export { s as buildProgress, a as getAssistantMedia, l as isReapedSandboxConnectionError, u as isRecoverable, f as mapSessionToHistory, d as mergeMessagesById, c as sanitize };

package/dist/shared/assistant/runtime.d.ts

@@ -11,14 +11,18 @@ export declare class AssistantRuntimeManager {
     private readonly deps;
     private sandboxId;
     private sessionId;
+    private provisioningSandboxId;
+    private readonly quarantinedSandboxIds;
     private inFlight;
     private keepWarmTimer;
     private visibilityHandler;
     constructor(deps: RuntimeDeps);
     private key;
     private persist;
-    /** Drop the warm refs after a recoverable error so the next call re-provisions. */
-    reset(): void;
+    /** Drop warm refs and optionally quarantine a reaped runtime for this manager's lifetime. */
+    reset(options?: {
+        quarantineCurrentSandbox?: boolean;
+    }): void;
     /** Single-flight provision: find-or-create → ready → service-health → session. */
     ensureRuntime(): Promise<{
         sandboxId: string;

package/dist/shared/assistant/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,aAAa,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIxF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,2BAA2B,CAAC;CACnD;AAED,qBAAa,uBAAuB;IAOtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAkE;IAClF,OAAO,CAAC,aAAa,CAA+C;IACpE,OAAO,CAAC,iBAAiB,CAA6B;gBAEzB,IAAI,EAAE,WAAW;IAU9C,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,OAAO;IAWf,mFAAmF;IACnF,KAAK,IAAI,IAAI;IAOb,kFAAkF;IAClF,aAAa,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA8DlE,gFAAgF;IAChF,OAAO,CAAC,KAAK,GAAE,YAAqB,GAAG,IAAI;IAsB3C,+EAA+E;IAC/E,aAAa,IAAI,IAAI;IAsBrB,YAAY,IAAI,IAAI;IAWpB,YAAY,IAAI,MAAM,GAAG,IAAI;CAG9B"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,aAAa,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIxF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,2BAA2B,CAAC;CACnD;AAED,qBAAa,uBAAuB;IAStB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARjC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,qBAAqB,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;IAC3D,OAAO,CAAC,QAAQ,CAAkE;IAClF,OAAO,CAAC,aAAa,CAA+C;IACpE,OAAO,CAAC,iBAAiB,CAA6B;gBAEzB,IAAI,EAAE,WAAW;IAU9C,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,OAAO;IAWf,6FAA6F;IAC7F,KAAK,CAAC,OAAO,GAAE;QAAE,wBAAwB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI;IAYjE,kFAAkF;IAClF,aAAa,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAsElE,gFAAgF;IAChF,OAAO,CAAC,KAAK,GAAE,YAAqB,GAAG,IAAI;IA4B3C,+EAA+E;IAC/E,aAAa,IAAI,IAAI;IAsBrB,YAAY,IAAI,IAAI;IAWpB,YAAY,IAAI,MAAM,GAAG,IAAI;CAG9B"}

package/dist/shared/assistant/runtime.js

@@ -3,6 +3,8 @@ import { createAssistantSandbox as e, createAssistantSession as t, extendAssista
 var s = 240 * 1e3, c = class {
 	sandboxId = null;
 	sessionId = null;
+	provisioningSandboxId = null;
+	quarantinedSandboxIds = /* @__PURE__ */ new Set();
 	inFlight = null;
 	keepWarmTimer = null;
 	visibilityHandler = null;
@@ -20,8 +22,12 @@ var s = 240 * 1e3, c = class {
 			this.sandboxId ? sessionStorage.setItem(this.key("sandbox"), this.sandboxId) : sessionStorage.removeItem(this.key("sandbox")), this.sessionId ? sessionStorage.setItem(this.key("session"), this.sessionId) : sessionStorage.removeItem(this.key("session"));
 		} catch {}
 	}
-	reset() {
-		this.sandboxId = null, this.sessionId = null, this.inFlight = null, this.persist();
+	reset(e = {}) {
+		if (e.quarantineCurrentSandbox) {
+			let e = this.sandboxId ?? this.provisioningSandboxId;
+			e && this.quarantinedSandboxIds.add(e);
+		}
+		this.sandboxId = null, this.sessionId = null, this.provisioningSandboxId = null, this.inFlight = null, this.persist();
 	}
 	ensureRuntime() {
 		if (this.sandboxId && this.sessionId) return Promise.resolve({
@@ -35,11 +41,11 @@ var s = 240 * 1e3, c = class {
 		return this.inFlight = (async () => {
 			let s = this.deps.isProd(), c = this.sandboxId;
 			if (!c) {
-				if (c = await r(n, this.deps.mode, s, i), !c) {
+				if (c = await r(n, this.deps.mode, s, i, this.quarantinedSandboxIds), !c) {
 					if (!i.accessToken) throw Error("The assistant requires an authenticated session. Please sign in again.");
 					c = await e(this.deps.product, this.deps.mode, n, s, this.deps.ttlSeconds, i);
 				}
-				await o(c, n, i), await a(c, n, i), this.sandboxId = c;
+				this.provisioningSandboxId = c, await o(c, n, i), await a(c, n, i), this.sandboxId = c, this.provisioningSandboxId = null;
 			}
 			let l = this.sessionId;
 			return l || (l = (await t(c, n, this.deps.mode, i)).sessionId, this.sessionId = l), this.persist(), {
@@ -59,7 +65,7 @@ var s = 240 * 1e3, c = class {
 			if (e === "probe") {
 				if (this.sandboxId || this.inFlight) return;
 				let e = this.deps.getAuthContext();
-				r(t, this.deps.mode, this.deps.isProd(), e).then(async (n) => {
+				r(t, this.deps.mode, this.deps.isProd(), e, this.quarantinedSandboxIds).then(async (n) => {
 					n && (await a(n, t, e).catch(() => void 0), this.sandboxId = n, this.persist());
 				}).catch(() => void 0);
 				return;
@@ -84,7 +90,7 @@ var s = 240 * 1e3, c = class {
 		this.keepWarmTimer &&= (clearInterval(this.keepWarmTimer), null), this.visibilityHandler && typeof document < "u" && (document.removeEventListener("visibilitychange", this.visibilityHandler), this.visibilityHandler = null);
 	}
 	getSandboxId() {
-		return this.sandboxId;
+		return this.sandboxId ?? this.provisioningSandboxId;
 	}
 };
 //#endregion

package/dist/shared/graphql/links/sse-link.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse-link.d.ts","sourceRoot":"","sources":["../../../../src/shared/graphql/links/sse-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGlE,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,OAAQ,SAAQ,UAAU;IACrC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,KAAK,CAAU;gBAEX,OAAO,EAAE,cAAc;IAOnC;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAIjD;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAQxC,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC;CAqJvD"}
+{"version":3,"file":"sse-link.d.ts","sourceRoot":"","sources":["../../../../src/shared/graphql/links/sse-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGlE,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,OAAQ,SAAQ,UAAU;IACrC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,KAAK,CAAU;gBAEX,OAAO,EAAE,cAAc;IAOnC;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAIjD;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAQxC,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC;CA8JvD"}

package/dist/shared/graphql/links/sse-link.js

@@ -26,11 +26,13 @@ var r = class extends e {
 			}), i = new AbortController(), a = e.getContext().headers ?? {};
 			return this.debug && console.log("[SSELink] Starting subscription:", e.operationName, "context-header-keys:", Object.keys(a)), fetch(this.url, {
 				method: "POST",
+				credentials: "include",
 				headers: {
 					"Content-Type": "application/json",
 					Accept: "text/event-stream",
 					...this.headers,
-					...a
+					...a,
+					"Apollo-Require-Preflight": "true"
 				},
 				body: r,
 				signal: i.signal

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burdenoff/fe-libs",
-  "version": "2026.825.5",
+  "version": "2026.825.7",
   "description": "Burdenoff frontend primitives and domain libraries",
   "type": "module",
   "bin": {
@@ -296,7 +296,7 @@
     "lint:sanity": "if [ \"${CI:-}\" = \"true\" ]; then bun run lint; else bun run lint -- --cache --cache-location .eslintcache; fi",
     "format": "prettier --config shared/config/prettier.config.mjs --write \"src/**/*.{ts,tsx}\" \"!src/config/*.config.ts\"",
     "type:check": "bash scripts/build-limits.sh tsc --noEmit",
-    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/storage src/shared/assistant src/shared/providers/AppShellProvider.test.ts src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/chrome/__tests__ src/ui/__tests__",
+    "test": "bun test scripts/graphql-schema-drift/__tests__ scripts/a11y-audit/__tests__ src/credentials src/storage src/shared/assistant src/shared/graphql/links/sse-link.test.ts src/shared/providers/AppShellProvider.test.ts src/shared/events/sinks/RybbitSink.test.ts src/shell-native src/shared/native src/chrome/__tests__ src/ui/__tests__",
     "sanity": "bash scripts/build-limits.sh --gate bash -c 'bun run lint:sanity && bun run format && bun run type:check && bun run test && bun run build'",
     "switch:status": "bun scripts/deps-mode.ts status",
     "switch:remote": "bun scripts/deps-mode.ts remote",