@burdenoff/fe-libs 2026.904.20 → 2026.904.22

package/dist/shared/assistant/ui/composer/AssistantComposer.js

@@ -0,0 +1,185 @@
+import { useI18n as e } from "../../../providers/shell/I18nProvider.js";
+import { useVoiceInput as t } from "../../voice/useVoiceInput.js";
+import { languageDisplayName as n } from "../../voice/speechVoices.js";
+import { resolveAssistantLanguage as ee } from "../../voice/languages.js";
+import { useAssistantTr as r } from "../../i18n.js";
+import { getSendableAttachments as i } from "../../attachments.js";
+import { useAssistantStore as a } from "../../store.js";
+import { AssistantAttachmentButton as o } from "./AssistantAttachmentButton.js";
+import { AssistantAttachmentChips as s } from "./AssistantAttachmentChips.js";
+import { AssistantLanguageSelector as c } from "./AssistantLanguageSelector.js";
+import { AssistantModeSelector as te } from "./AssistantModeSelector.js";
+import { AssistantVoiceButton as ne } from "./AssistantVoiceButton.js";
+import { AssistantVoiceSessionButton as re } from "../voice/AssistantVoiceSessionButton.js";
+import { useAssistantAttachments as ie } from "../../useAssistantAttachments.js";
+import { useCallback as l, useLayoutEffect as ae, useMemo as oe, useRef as u, useState as d } from "react";
+import { ArrowUp as f, Loader2 as p } from "lucide-react";
+import { jsx as m, jsxs as h } from "react/jsx-runtime";
+//#region src/shared/assistant/ui/composer/AssistantComposer.tsx
+var g = 200, _ = ({ writeAccessDenied: _ = !1, onSend: v, disabled: y = !1, placeholder: b, mode: se, availableModes: x, onModeChange: ce, onStartVoiceSession: S }) => {
+	let C = r(), { locale: w } = e(), T = u(null), [E, D] = d(""), [O, k] = d(!1), A = u(0), { attachments: j, isBusy: M, preparingCount: N, sendBlocker: P, rejection: F, addFiles: I, remove: L, retry: R, clear: z, clearRejection: B, canAddMore: V } = ie(), H = l((e) => {
+		D((t) => t ? `${t.replace(/\s+$/, "")} ${e}` : e);
+	}, []), U = a((e) => e.assistantLanguage), W = a((e) => e.setAssistantLanguage), G = oe(() => ee(U, w), [U, w]), K = t({
+		onFinalize: H,
+		language: G.tag
+	}), le = b ?? C("composer.placeholder", "Ask HealthyBowl anything…"), q = E.trim(), J = i(j), Y = j.filter((e) => e.status === "error"), X = (q.length > 0 || J.length > 0) && !y && P === null;
+	ae(() => {
+		let e = T.current;
+		e && (e.style.height = "auto", e.style.height = `${Math.min(e.scrollHeight, g)}px`);
+	}, [E]);
+	let Z = l(() => {
+		X && (K.isActive && K.stop(), v(E.trim(), J), D(""), z());
+	}, [
+		X,
+		v,
+		E,
+		J,
+		z,
+		K
+	]), ue = l((e) => {
+		e.key === "Enter" && !e.shiftKey && (e.preventDefault(), Z());
+	}, [Z]), Q = l((e) => {
+		let t = Array.from(e.clipboardData?.files ?? []);
+		t.length !== 0 && (e.preventDefault(), I(t));
+	}, [I]), de = l((e) => {
+		Array.from(e.dataTransfer?.types ?? []).includes("Files") && (A.current += 1, k(!0));
+	}, []), fe = l(() => {
+		A.current = Math.max(0, A.current - 1), A.current === 0 && k(!1);
+	}, []), pe = l((e) => {
+		Array.from(e.dataTransfer?.types ?? []).includes("Files") && e.preventDefault();
+	}, []), me = l((e) => {
+		e.preventDefault(), A.current = 0, k(!1), I(e.dataTransfer?.files ?? null);
+	}, [I]), he = (e) => {
+		switch (e) {
+			case "too-many": return C("attachments.tooMany", "You can attach up to {{max}} files per message.", { max: 5 });
+			case "too-large": return C("attachments.tooLarge", "That file is larger than 10 MB.");
+			case "empty": return C("attachments.empty", "That file is empty.");
+			case "unreadable": return C("attachments.unreadable", "That file could not be read.");
+			case "unsupported-image": return C("attachments.unsupportedImage", "This device can't read that image format, so it can't be resized to send. Save it as JPEG and try again.");
+		}
+	}, $ = (() => {
+		switch (K.error) {
+			case "not-allowed": return C("voice.denied", "Microphone access is blocked. Allow it in your browser settings to dictate.");
+			case "audio-capture": return C("voice.noMic", "No microphone was found.");
+			case "network": return C("voice.network", "Speech recognition is offline right now.");
+			case "language-not-supported": return C("voice.languageNotSupported", "This browser cannot recognise spoken {{language}}. Try a different browser, or type instead.", { language: n(K.language, w) });
+			case "unknown": return C("voice.failed", "Dictation stopped unexpectedly.");
+			default: return null;
+		}
+	})();
+	return /* @__PURE__ */ h("div", {
+		className: "flex-shrink-0 px-3 pb-3 pt-1.5",
+		children: [
+			/* @__PURE__ */ h("div", {
+				onDragEnter: de,
+				onDragLeave: fe,
+				onDragOver: pe,
+				onDrop: me,
+				className: `rounded-2xl border p-2 shadow-sm transition-colors focus-within:border-action-primary-bg focus-within:ring-2 focus-within:ring-action-primary-bg/15 ${O ? "border-action-primary-bg border-dashed bg-action-primary-bg/5" : "border-border-default bg-bg-sunken"}`,
+				"data-testid": "assistant-composer",
+				children: [
+					/* @__PURE__ */ m(s, {
+						attachments: j,
+						onRemove: L,
+						onRetry: R,
+						disabled: y,
+						preparingCount: N
+					}),
+					/* @__PURE__ */ h("div", {
+						className: "flex items-end gap-2",
+						children: [
+							/* @__PURE__ */ m(o, {
+								onFiles: I,
+								canAddMore: V,
+								disabled: y
+							}),
+							/* @__PURE__ */ m("textarea", {
+								ref: T,
+								value: E,
+								onChange: (e) => D(e.target.value),
+								onKeyDown: ue,
+								onPaste: Q,
+								disabled: y,
+								placeholder: O ? C("composer.dropHere", "Drop files to attach") : le,
+								rows: 1,
+								className: "min-h-[36px] flex-1 resize-none self-center bg-transparent px-1 py-2 text-[15px] leading-relaxed text-text-primary placeholder:text-text-muted focus:outline-none disabled:opacity-50",
+								"aria-label": C("chatInput.ariaLabel", "Message input"),
+								"data-testid": "assistant-input"
+							}),
+							/* @__PURE__ */ m(c, {
+								current: G,
+								selected: U,
+								onChange: W,
+								disabled: y || K.isActive
+							}),
+							K.isSupported && /* @__PURE__ */ m(ne, {
+								isListening: K.isListening,
+								isStarting: K.isStarting,
+								onToggle: K.toggle,
+								disabled: y
+							}),
+							S && q.length === 0 && j.length === 0 && !K.isActive ? /* @__PURE__ */ m(re, {
+								onStart: S,
+								disabled: y
+							}) : /* @__PURE__ */ m("button", {
+								type: "button",
+								onClick: Z,
+								disabled: !X,
+								className: `flex size-9 flex-shrink-0 items-center justify-center rounded-full shadow-sm transition-all focus:outline-none focus-visible:ring-2 focus-visible:ring-border-strong ${X ? "bg-action-primary-bg text-action-primary-text hover:scale-105 hover:bg-action-primary-bg-hover" : "bg-bg-elevated text-text-muted"}`,
+								"aria-label": C("chatInput.send", "Send message"),
+								"data-testid": "assistant-send",
+								children: y || M ? /* @__PURE__ */ m(p, { className: "size-4 animate-spin" }) : /* @__PURE__ */ m(f, { className: "size-4" })
+							})
+						]
+					}),
+					x.length > 1 && /* @__PURE__ */ m("div", {
+						className: "mt-2 px-0.5",
+						children: /* @__PURE__ */ m(te, {
+							mode: se,
+							availableModes: x,
+							onModeChange: ce,
+							disabled: y
+						})
+					})
+				]
+			}),
+			_ ? /* @__PURE__ */ m("p", {
+				className: "mt-1.5 px-1 text-center text-[11px] text-status-warning",
+				"data-testid": "assistant-write-access-warning",
+				children: C("composer.writeAccessDenied", "Changes may not save — your role in this workspace does not currently allow edits. You can still plan and review an action.")
+			}) : null,
+			/* @__PURE__ */ m("div", {
+				className: "mt-1.5 px-1 text-center text-[11px]",
+				"aria-live": "polite",
+				children: K.isStarting && !K.isListening ? /* @__PURE__ */ m("p", {
+					className: "text-text-muted",
+					"data-testid": "assistant-voice-starting",
+					children: C("voice.starting", "Starting the microphone…")
+				}) : K.isListening ? /* @__PURE__ */ h("p", {
+					className: "text-status-error-text",
+					"data-testid": "assistant-voice-status",
+					children: [/* @__PURE__ */ m("span", { className: "mr-1 inline-block size-1.5 rounded-full bg-status-error-text align-middle motion-safe:animate-pulse" }), K.interim || C("voice.listening", "Listening… speak now, tap the square to stop")]
+				}) : $ ? /* @__PURE__ */ m("p", {
+					className: "text-status-error-text",
+					"data-testid": "assistant-voice-error",
+					children: $
+				}) : F ? /* @__PURE__ */ m("button", {
+					type: "button",
+					onClick: B,
+					className: "text-status-error-text underline-offset-2 hover:underline",
+					"data-testid": "assistant-attachment-rejection",
+					children: he(F)
+				}) : P === "failed" ? /* @__PURE__ */ m("p", {
+					className: "text-status-error-text",
+					"data-testid": "assistant-attachment-blocked",
+					children: Y.length === 1 ? C("attachments.blockedOne", "{{name}} didn't upload. Retry or remove it before sending.", { name: Y[0].filename }) : C("attachments.blockedMany", "{{count}} attachments didn't upload. Retry or remove them before sending.", { count: Y.length })
+				}) : /* @__PURE__ */ m("p", {
+					className: "text-text-muted",
+					children: C("composer.hint", "Enter to send · Shift+Enter for newline · drag or paste files to attach")
+				})
+			})
+		]
+	});
+};
+//#endregion
+export { _ as AssistantComposer };

package/dist/shared/assistant/useAssistantAttachments.d.ts

@@ -0,0 +1,26 @@
+import { AssistantAttachment, AttachmentRejection, AttachmentSendBlocker } from './attachments';
+export interface UseAssistantAttachmentsResult {
+    /** Files being read/downscaled — no chip of their own yet. See below. */
+    preparingCount: number;
+    attachments: AssistantAttachment[];
+    /** True while any attachment is still being prepared or uploaded. */
+    isBusy: boolean;
+    /**
+     * Why the current attachments block sending, or `null` when they do not.
+     * Strictly wider than `isBusy`: it also reports the terminal 'failed' state,
+     * which is not busy but must still stop a send. See
+     * `getAttachmentSendBlocker`.
+     */
+    sendBlocker: AttachmentSendBlocker | null;
+    /** Most recent rejection, for a transient inline message. */
+    rejection: AttachmentRejection | null;
+    addFiles: (files: FileList | File[] | null | undefined) => void;
+    remove: (id: string) => void;
+    /** Re-upload a single failed attachment, reusing the bytes already prepared. */
+    retry: (id: string) => void;
+    clear: () => void;
+    clearRejection: () => void;
+    canAddMore: boolean;
+}
+export declare function useAssistantAttachments(): UseAssistantAttachmentsResult;
+//# sourceMappingURL=useAssistantAttachments.d.ts.map

package/dist/shared/assistant/useAssistantAttachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAssistantAttachments.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/useAssistantAttachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAYL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAmJvB,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC1C,6DAA6D;IAC7D,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACtC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;IAChE,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,gFAAgF;IAChF,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,uBAAuB,IAAI,6BAA6B,CAoRvE"}

package/dist/shared/assistant/useAssistantAttachments.js

@@ -0,0 +1,244 @@
+import { graphqlFetch as e } from "../graphql/fetch.js";
+import "../../shared-graphql.js";
+import { downscaleImage as t } from "../utils/imageDownscale.js";
+import { useAssistantTr as n } from "./i18n.js";
+import { AttachmentRejectedError as r, INLINE_IMAGE_QUALITY as i, MAX_INLINE_CHARS_PER_FILE as a, classifyAttachment as o, detectDocumentFormat as s, getAttachmentSendBlocker as c, truncateForInline as l, validateFile as u } from "./attachments.js";
+import { getWorkspaceId as d } from "./context.js";
+import { useSaveToFiles as f } from "../../storage/useSaveToFiles.js";
+import "../../storage/index.js";
+import { extractDocumentText as p } from "./documentExtract.js";
+import { useCallback as m, useEffect as h, useRef as g, useState as _ } from "react";
+//#region src/shared/assistant/useAssistantAttachments.ts
+var v = "/HealthyBowl/AI Assistant/Attachments", y = "\n  query HealthyBowlAssistantAttachmentUrl($id: ID!) {\n    getFileDownloadUrl(id: $id)\n  }\n";
+async function b(t, n) {
+	if (!t || !n) return null;
+	try {
+		return (await e({
+			gateway: "workspace",
+			query: y,
+			variables: { id: t },
+			workspaceToken: !0,
+			workspaceId: n,
+			suppressGlobalErrorEvent: !0
+		})).data?.getFileDownloadUrl ?? null;
+	} catch {
+		return null;
+	}
+}
+var x = 0;
+function S() {
+	return x += 1, `att-${Date.now()}-${x}`;
+}
+async function C(e) {
+	let n = o(e.type, e.name), c = {
+		id: S(),
+		status: "pending"
+	};
+	if (n === "image") {
+		let a = await t(e, {
+			encodeFallback: !1,
+			inline: {
+				maxDim: 768,
+				quality: i
+			}
+		});
+		if (!a.downscaled && a.blob.size > 10485760) throw new r("unsupported-image");
+		return {
+			attachment: {
+				...c,
+				filename: a.filename,
+				mimeType: a.mimeType,
+				size: a.blob.size,
+				kind: n,
+				previewUrl: a.dataUrl || void 0,
+				inlineDataUrl: a.inlineDataUrl
+			},
+			blob: a.blob
+		};
+	}
+	if (n === "text") {
+		let { text: t, truncated: r } = l(await e.text(), a);
+		return {
+			attachment: {
+				...c,
+				filename: e.name,
+				mimeType: e.type || "text/plain",
+				size: e.size,
+				kind: n,
+				textContent: t,
+				textTruncated: r
+			},
+			blob: e
+		};
+	}
+	let u = s(e.type, e.name);
+	if (u) {
+		let t = await p(e, u);
+		return {
+			attachment: {
+				...c,
+				filename: e.name,
+				mimeType: e.type || "application/octet-stream",
+				size: e.size,
+				kind: n,
+				extraction: t.extraction,
+				textContent: t.textContent,
+				textTruncated: t.textTruncated,
+				documentPages: t.documentPages
+			},
+			blob: e
+		};
+	}
+	return {
+		attachment: {
+			...c,
+			filename: e.name,
+			mimeType: e.type || "application/octet-stream",
+			size: e.size,
+			kind: n
+		},
+		blob: e
+	};
+}
+function w() {
+	let e = n(), { save: t } = f(), [i, a] = _([]), [o, s] = _(null), l = g(Promise.resolve()), [p, y] = _(0), x = g(0), S = g(/* @__PURE__ */ new Map()), w = g(/* @__PURE__ */ new Set()), T = g(0), E = g(!0);
+	h(() => () => {
+		E.current = !1;
+	}, []);
+	let D = g([]);
+	h(() => {
+		D.current = i;
+	}, [i]);
+	let O = m((e, t) => {
+		E.current && a((n) => n.map((n) => n.id === e ? {
+			...n,
+			...t
+		} : n));
+	}, []), k = m(async ({ attachment: n, blob: r }) => {
+		if (!w.current.has(n.id)) {
+			O(n.id, {
+				status: "uploading",
+				progressNote: void 0
+			});
+			try {
+				let i = await t({
+					source: {
+						kind: "blob",
+						filename: n.filename,
+						mimeType: n.mimeType,
+						getBlob: async () => ({
+							blob: r,
+							filename: n.filename,
+							mimeType: n.mimeType
+						})
+					},
+					folderPath: v,
+					onRetry: (t) => {
+						w.current.has(n.id) || O(n.id, { progressNote: t.kind === "cold-start" ? e("attachments.waking", "File service is starting up — retry {{attempt}} of {{max}}", {
+							attempt: String(t.attempt),
+							max: String(t.maxAttempts)
+						}) : e("attachments.retrying", "Retrying {{attempt}} of {{max}}", {
+							attempt: String(t.attempt),
+							max: String(t.maxAttempts)
+						}) });
+					}
+				});
+				if (w.current.has(n.id)) return;
+				let a = i?.id ? await b(i.id, d()) : null;
+				if (w.current.has(n.id)) return;
+				O(n.id, {
+					status: "ready",
+					fileId: i?.id,
+					downloadUrl: a ?? void 0,
+					progressNote: void 0
+				});
+			} catch (e) {
+				if (w.current.has(n.id)) return;
+				if (n.kind === "text" || n.textContent) {
+					O(n.id, {
+						status: "ready",
+						progressNote: void 0
+					});
+					return;
+				}
+				O(n.id, {
+					status: "error",
+					error: e instanceof Error ? e.message : "Upload failed",
+					progressNote: void 0
+				});
+			}
+		}
+	}, [
+		O,
+		t,
+		e
+	]), A = m((e) => {
+		if (!e) return;
+		let t = Array.from(e);
+		if (t.length === 0) return;
+		s(null);
+		let n = [];
+		for (let e of t) {
+			let t = u(e, T.current);
+			if (t) {
+				s(t);
+				continue;
+			}
+			n.push(e), T.current += 1;
+		}
+		if (n.length !== 0) {
+			y((e) => e + n.length);
+			for (let e of n) {
+				let t = x.current;
+				l.current = l.current.then(async () => {
+					let n = null;
+					try {
+						n = await C(e);
+					} catch (e) {
+						T.current = Math.max(0, T.current - 1), E.current && s(e instanceof r ? e.reason : "unreadable");
+					}
+					if (!E.current || (y((e) => Math.max(0, e - 1)), !n)) return;
+					if (t !== x.current) {
+						T.current = Math.max(0, T.current - 1);
+						return;
+					}
+					let i = n;
+					S.current.set(i.attachment.id, i.blob), a((e) => [...e, i.attachment]), await k(i);
+				});
+			}
+		}
+	}, [k]), j = m((e) => {
+		w.current.add(e), S.current.delete(e), T.current = Math.max(0, T.current - 1), a((t) => t.filter((t) => t.id !== e));
+	}, []), M = m((e) => {
+		let t = D.current.find((t) => t.id === e), n = S.current.get(e);
+		!t || t.status !== "error" || !n || (w.current.delete(e), O(e, {
+			status: "pending",
+			error: void 0,
+			progressNote: void 0
+		}), l.current = l.current.then(() => k({
+			attachment: {
+				...t,
+				status: "pending",
+				error: void 0
+			},
+			blob: n
+		})));
+	}, [O, k]), N = m(() => {
+		x.current += 1, T.current = 0, D.current.forEach((e) => w.current.add(e.id)), S.current.clear(), a([]);
+	}, []), P = c(p, i);
+	return {
+		attachments: i,
+		isBusy: P === "in-flight",
+		preparingCount: p,
+		sendBlocker: P,
+		rejection: o,
+		addFiles: A,
+		remove: j,
+		retry: M,
+		clear: N,
+		clearRejection: m(() => s(null), []),
+		canAddMore: T.current < 5
+	};
+}
+//#endregion
+export { w as useAssistantAttachments };

package/dist/shared/assistant/useWorkspaceWriteAccess.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Can this user's writes actually LAND in this workspace?
+ *
+ * ★ Separate from `useAssistantApiAccess`, and deliberately not a replacement
+ * for it. That hook asks `myRoles` at ORG scope, which is the right question for
+ * "may this person use a mode that mints an OAuth app under their identity".
+ * Execution, though, happens at WORKSPACE scope — so an org admin could enter
+ * Take-action mode, have the model plan a change, confirm it, and only then hit
+ * a permission error. The two questions have different answers and both are
+ * legitimate; this hook asks the second one.
+ *
+ * ★ Measured 2026-09-02 against prod: `checkPermissions` answers cleanly
+ * (HTTP 200, no errors) with `allowed: false`, `decisionPath: "default:deny"`,
+ * and a null role — for an org OWNER. Workspace/project scopes have no roles
+ * provisioned at all, so the honest answer today is "no, for everyone".
+ *
+ * ★ Which is exactly why this hook only WARNS. Using it to gate the mode would
+ * remove Take-action from the product entirely until an ops task lands, and
+ * dressing that up as a permissions fix would be worse than the confusion it
+ * replaces. The moment roles are provisioned this starts returning `granted`
+ * and the warning disappears on its own, with no code change.
+ *
+ * Fails OPEN on error or while loading: a network blip must not accuse someone
+ * of lacking a permission they may well have.
+ */
+/** `unknown` while in flight or unanswerable — never treated as a refusal. */
+export type WorkspaceWriteAccess = "granted" | "denied" | "unknown";
+export declare function useWorkspaceWriteAccess(actorId: string | null, workspaceId: string | null, probeResources: readonly string[]): WorkspaceWriteAccess;
+//# sourceMappingURL=useWorkspaceWriteAccess.d.ts.map

package/dist/shared/assistant/useWorkspaceWriteAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWorkspaceWriteAccess.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/useWorkspaceWriteAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAwBH,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpE,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,oBAAoB,CAkDtB"}

package/dist/shared/assistant/useWorkspaceWriteAccess.js

@@ -0,0 +1,41 @@
+import { graphqlFetch as e } from "../graphql/fetch.js";
+import "../../shared-graphql.js";
+import { useEffect as t, useState as n } from "react";
+//#region src/shared/assistant/useWorkspaceWriteAccess.ts
+var r = "query AssistantWorkspaceWriteAccess($inputs: [PermissionCheckInput!]!) {\n  checkPermissions(inputs: $inputs) {\n    allowed\n  }\n}";
+function i(i, a, o) {
+	let [s, c] = n("unknown");
+	return t(() => {
+		if (!i || !a) {
+			c("unknown");
+			return;
+		}
+		let t = !1;
+		return c("unknown"), e({
+			gateway: "workspace",
+			query: r,
+			variables: { inputs: o.map((e) => ({
+				actorId: i,
+				actorType: "USER",
+				scopeId: a,
+				resourceType: e,
+				action: "create"
+			})) },
+			suppressGlobalErrorEvent: !0
+		}).then((e) => {
+			if (t) return;
+			let n = e.data?.checkPermissions;
+			if (!Array.isArray(n) || n.length === 0) {
+				c("unknown");
+				return;
+			}
+			c(n.some((e) => e.allowed) ? "granted" : "denied");
+		}).catch(() => {
+			t || c("unknown");
+		}), () => {
+			t = !0;
+		};
+	}, [i, a]), s;
+}
+//#endregion
+export { i as useWorkspaceWriteAccess };

package/dist/shared/utils/imageDownscale.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Client-side image downscaling for the AI Pest & Disease scan flow (BOFF-2887)
+ * and the AI Assistant composer.
+ *
+ * A phone photo can be several megabytes; we downscale it to a sane max dimension
+ * and re-encode as JPEG before (a) sending the base64 to the diagnosis model and
+ * (b) uploading it to wspace-files-svc. This keeps the GraphQL payload small, the
+ * upload fast, and the model call cheap — without changing what the farmer sees.
+ *
+ * Falls back to the original file bytes if the browser can't rasterise the image
+ * (e.g. an exotic format), so a scan is never blocked by the optimisation. That
+ * fallback is not free — see `encodeFallback`.
+ */
+/**
+ * The transport encode for the diagnosis mutation: it is sized against the
+ * gateway's body cap rather than against the upload. The stored copy stays at
+ * the primary 1280px encode — the file library should not be degraded to the
+ * transport's budget — while `inline` produces a second, smaller encode from
+ * the SAME decode for the wire (768px/q0.6 ≈ 92 KB of base64 fits the 256 KB
+ * body cap; the 1280px primary measures ~360 KB and does not).
+ */
+export declare const INLINE_ENCODE: {
+    readonly maxDim: 768;
+    readonly quality: 0.6;
+};
+/**
+ * The payload the mutation should carry: the transport encode when we have one,
+ * otherwise the primary. Returns '' when neither is usable.
+ */
+export declare function selectInlineBase64(image: DownscaledImage): string;
+export interface DownscaledImage {
+    /** Re-encoded image blob, for upload to files-svc. */
+    blob: Blob;
+    /** Bare base64 (no `data:` prefix), for the diagnosis mutation. '' when skipped. */
+    base64: string;
+    /** `data:<mime>;base64,...` URL, for an <img> preview. '' when skipped. */
+    dataUrl: string;
+    /**
+     * A SECOND, smaller `data:` URL for callers that must fit the image inside a
+     * request body (see `DownscaleOptions.inline`). Absent unless asked for, and
+     * absent when it would not actually be smaller than `dataUrl`.
+     */
+    inlineDataUrl?: string;
+    mimeType: string;
+    filename: string;
+    /**
+     * Did the browser actually rasterise and re-encode the image?
+     *
+     * False means `blob` is the ORIGINAL file: the format could not be decoded
+     * here (HEIC from an iPhone is the real-world case — neither Chrome nor
+     * Firefox decodes it), so nothing was resized, `mimeType` is whatever the file
+     * claimed, and any preview built from it cannot render either.
+     *
+     * NOTE this is "was it rasterised", NOT "did the dimensions shrink". An image
+     * already smaller than `maxDim` takes `scale === 1` yet still goes through the
+     * canvas and comes back as a perfectly good JPEG — that is a success.
+     */
+    downscaled: boolean;
+}
+export interface DownscaleOptions {
+    /** Longest-edge ceiling for the primary encode. */
+    maxDim?: number;
+    /** JPEG quality for the primary encode. */
+    quality?: number;
+    /**
+     * Encode the fallback (un-rasterisable) bytes to base64 as well?
+     *
+     * Default true, for callers that need `base64` no matter what. Pass false when
+     * only `blob` is used: base64 costs ~1.37x the file size in a string that is
+     * then held in memory, and on the fallback path the file has NOT been
+     * downscaled — so a 12 MB HEIC becomes ~16 MB of strings backing a preview the
+     * browser cannot render anyway.
+     */
+    encodeFallback?: boolean;
+    /**
+     * Also produce `inlineDataUrl` at these settings, reusing the bitmap that has
+     * already been decoded (one decode, two encodes — the second is cheap).
+     *
+     * This exists because "small enough to upload" and "small enough to fit in a
+     * request body" are different budgets: the upload can be a 1280px photo, but
+     * the turn that carries the pixels to the model has to fit through a gateway
+     * that caps bodies at 256 KB. Keeping them separate means the file the farmer
+     * later opens from their file library is NOT degraded to the transport's size.
+     */
+    inline?: {
+        maxDim: number;
+        quality: number;
+    };
+}
+export declare function downscaleImage(file: File, options?: DownscaleOptions): Promise<DownscaledImage>;
+//# sourceMappingURL=imageDownscale.d.ts.map

package/dist/shared/utils/imageDownscale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageDownscale.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/imageDownscale.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa;;;CAAyC,CAAC;AAQpE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAIjE;AAED,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,IAAI,EAAE,IAAI,CAAC;IACX,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;OAWG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AA0FD,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,EACV,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAiF1B"}