@burdenoff/fe-libs 2026.928.3 → 2026.930.1

package/dist/shared/assistant/adminModeSendGate.d.ts

@@ -33,11 +33,12 @@ export declare const ADMIN_MODE_ACCESS_WAIT_MS = 10000;
  * A gate is read LIVE through a ref, so it does not keep a "yes" that a later
  * render has already replaced, the way a value captured by `useCallback` would.
  *
- * ★ It is NOT a guarantee about org switches. The gate only ever knows what the
- * check last told it, and the check learns of a new org one render late — so
- * for that one commit the gate still holds the previous org's answer. Narrowing
- * that belongs in the hook (reporting `loading` while the resolved scope is
- * behind the requested one), not here; the mode list has the same window today.
+ * ★ Workspace switches are the HOOK's job, not this gate's. The gate only ever
+ * knows what the check last told it. `useAssistantApiAccess` reports `loading`
+ * for any render whose workspace or user its answer is not about (BOFF-7803,
+ * OD-2), so the values fed in here — and the mode list — never carry another
+ * workspace's yes. The gate still learns them in an effect, one commit after
+ * that render.
  */
 export interface AdminModeAccessGate {
     /** The latest answer, for the final synchronous validation after a wait. */

package/dist/shared/assistant/adminModeSendGate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adminModeSendGate.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/adminModeSendGate.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAG7C,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,IAAI,IAAI,eAAe,CAAC;IACxB,iFAAiF;IACjF,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACtC;;;OAGG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnD;;;;;;;;;;;;;OAaG;IACH,OAAO,IAAI,IAAI,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAOD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,GACvB,mBAAmB,CAwDrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mCAAmC,CACvD,MAAM,EAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC/D,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,MAAM;IAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACnE,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,MAAM,mBAAmB,GAAG,SAAS,EACjD,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,iBAAiB,CAAC,CAoC5B"}
+{"version":3,"file":"adminModeSendGate.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/adminModeSendGate.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAG7C,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,IAAI,IAAI,eAAe,CAAC;IACxB,iFAAiF;IACjF,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACtC;;;OAGG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnD;;;;;;;;;;;;;OAaG;IACH,OAAO,IAAI,IAAI,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAOD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,GACvB,mBAAmB,CAwDrB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mCAAmC,CACvD,MAAM,EAAE;IAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC/D,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,MAAM;IAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACnE,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;CAClD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,MAAM,mBAAmB,GAAG,SAAS,EACjD,IAAI,EAAE,mBAAmB,EACzB,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,iBAAiB,CAAC,CAoC5B"}

package/dist/shared/assistant/adminModeSendGate.js

@@ -1,5 +1,5 @@
-import { UNAVAILABLE_MODE_REFUSAL as e, adminOnlyModeSendRefusal as t, resolveAssistantModeCapabilities as n, unofferedModeSendRefusal as r } from "./modeCapabilities.js";
-import { AssistantSendRefusal as i } from "./turnOutcome.js";
+import { AssistantSendRefusal as e } from "./turnOutcome.js";
+import { UNAVAILABLE_MODE_REFUSAL as t, adminOnlyModeSendRefusal as n, resolveAssistantModeCapabilities as r, unofferedModeSendRefusal as i } from "./modeCapabilities.js";
 //#region src/shared/assistant/adminModeSendGate.ts
 var a = 1e4;
 function o(e) {
@@ -32,20 +32,20 @@ function o(e) {
 		}
 	};
 }
-async function s(e, n, r = a) {
-	return e?.requiresAdmin ? t(e, await n.wait(r)) : null;
+async function s(e, t, r = a) {
+	return e?.requiresAdmin ? n(e, await t.wait(r)) : null;
 }
-async function c(e, t, n, i = a) {
-	return r(e, t()) === null ? null : (await n.wait(i), r(e, t()));
+async function c(e, t, n, r = a) {
+	return i(e, t()) === null ? null : (await n.wait(r), i(e, t()));
 }
 async function l(o, s, l, u = a) {
 	let d = Date.now() + u, f = await c(o, s, l, u);
-	if (f) throw new i("mode-unavailable", f);
+	if (f) throw new e("mode-unavailable", f);
 	s()?.requiresAdmin && await l.wait(Math.max(0, d - Date.now()));
-	let p = s(), m = n(o, p), h = r(o, p) ?? (m.provisionable ? null : e);
-	if (h) throw new i("mode-unavailable", h);
-	let g = l.read(), _ = t(p, g);
-	if (_) throw new i(g.loading ? "mode-access-pending" : "mode-admin-only", _);
+	let p = s(), m = r(o, p), h = i(o, p) ?? (m.provisionable ? null : t);
+	if (h) throw new e("mode-unavailable", h);
+	let g = l.read(), _ = n(p, g);
+	if (_) throw new e(g.loading ? "mode-access-pending" : "mode-admin-only", _);
 	return {
 		config: p,
 		capabilities: m

package/dist/shared/assistant/api.d.ts

@@ -1,35 +1,81 @@
 import { AssistantMode, AssistantPromptPart, AssistantRawMessage, AssistantSandboxAuthContext, AssistantArtifact, AssistantSessionInfo, DownloadedAssistantArtifact, StreamAccess } from './types';
+import { SandboxWriteCapabilities, WriteApprovalMode, WriteExecutionState } from './writeProposals';
+import { WriteReplyKind, WriteReplyOrigin } from './writeReplyBinder';
 /**
- * Does a proxied request into a sandbox of this mode carry the signed-in user's
- * own tokens (`forwardedAuthToken` / `forwardedWorkspaceToken`)?
+ * Does a proxied request addressed to a sandbox of this mode carry the
+ * signed-in user's own tokens (`forwardedAuthToken` /
+ * `forwardedWorkspaceToken`) in the `proxySandboxRequest` input?
  *
- * ★★ Only Ask (`assistant`). It is the one mode that authenticates the
- * in-sandbox agent with the user's OWN identity (read-only, enforced by
- * AI_ASSISTANT_READONLY — see `buildAssistantSandboxEnv`). Every other mode must
- * never receive them:
- * - `api-calls` (Take action) acts through a delegated per-workspace app; the
- *   sandbox service mints and sends those credentials itself and never reads the
- *   forwarded tokens.
+ * ★★ The recipient is wspace-sandbox-svc, not the sandbox. The two fields are
+ * input to the svc's proxy mutation; what reaches the sandbox is the svc's
+ * decision, made from the sandbox's RECORDED mode, not from anything sent here:
+ * - relay credential mode (BOFF-8072): the svc keeps the tokens server-side,
+ *   sealed and TTL-bound, and forwards NEITHER into any sandbox. The session
+ *   gets only an opaque capability that the svc's session relay accepts, and
+ *   the relay runs each business request as the user through the public
+ *   gateway, so `@rbac` applies.
+ * - legacy credential mode: the svc delivers them to an Ask sandbox only, and
+ *   already withholds them from `api-calls` (wspace-sandbox-svc
+ *   `forwardsUserTokens`, SandboxProvider.ts:3051-3054).
+ *
+ * ★★ Ask (`assistant`) and Take action (`api-calls`), and nothing else. Both
+ * reach the platform gateway, and in relay mode both run their reads (and an
+ * admin's Take-action execution) as the user's OWN token held by the relay. For
+ * `api-calls` that is what lets an admin's Take action run on the admin's own
+ * human token rather than the svc's admin-bridge `app_as_user` mint.
+ *
+ * Every other mode must never send them:
  * - `vibe-plugins`, `general` and every PRODUCT-declared mode (see
  *   `declareAssistantMode`) make no platform GraphQL calls at all. Their agent
- *   has bash, so a user token handed to one is a token a prompt injection can
- *   read and replay as the user (BOFF-7304). A product cannot opt a mode into
- *   tokens: the test below is equality with the built-in id, not a capability.
+ *   has bash, so a user token that reached one is a token a prompt injection
+ *   can read and replay as the user (BOFF-7304). A product cannot opt a mode
+ *   into tokens: the test below is equality with the built-in ids, not a
+ *   capability.
  *
- * ★ Fails closed: an unknown, empty or absent mode forwards nothing. The sandbox
- * service applies the same rule server-side from the sandbox's recorded mode
- * (wspace-sandbox-svc#87); this is the client half, so the tokens never leave
- * the browser for a sandbox that has no use for them.
+ * ★ Fails closed: an unknown, empty or absent mode forwards nothing, so the
+ * tokens never leave the browser for a sandbox that has no use for them.
+ *
+ * ★ This is proxy-request forwarding only. No create-time token env is added
+ * for `api-calls`: `buildAssistantSandboxEnv` still puts `AUTH_TOKEN` /
+ * `WORKSPACE_AUTH_TOKEN` in the env of an Ask sandbox alone (on the
+ * createSandbox path an older svc needs), and a relay-mode svc strips even that.
  */
 export declare function forwardsUserTokensToSandbox(mode: AssistantMode | null | undefined): boolean;
-export declare function findExistingSandbox(workspaceId: string, product: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, excludedSandboxIds?: ReadonlySet<string>): Promise<string | null>;
+/** What a sandbox (or wspace-sandbox-svc, in front of it) answered. */
+export interface SandboxProxyRawResult {
+    status: number;
+    body: unknown;
+}
+/**
+ * `proxyToSandbox` without the throw: the answer's status and body come back
+ * whatever the status is, so a caller can read a 4xx's `code` and `reason`
+ * (BOFF-7803 5a: the write-proposal endpoints answer refusals that way).
+ *
+ * ★ ONE attempt, never retried here (`executeAssistantGraphQLOnce`). The
+ * caller owns retry: an approve must never be re-sent behind its back, since
+ * a resend after a lost answer reads as a second press.
+ *
+ * ★ It still throws when there is no answer to return: a transport failure, a
+ * GraphQL error from the gateway or the svc, or a `proxySandboxRequest` with no
+ * status. Those carry no sandbox status, and inventing one would lie about
+ * what happened.
+ *
+ * `mode` is the mode of the SANDBOX being addressed, exactly as for every
+ * other proxied call (see `buildSandboxProxyRequest`).
+ */
+export declare function proxySandboxRaw(sandboxId: string, workspaceId: string, path: string, method: string, body: unknown, mode: AssistantMode | undefined, authContext: AssistantSandboxAuthContext | undefined): Promise<SandboxProxyRawResult>;
+export declare function findExistingSandbox(workspaceId: string, product: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, excludedSandboxIds?: ReadonlySet<string>, 
+/** The product's `writeApproval` flag (`AssistantProductCapabilities`). */
+writeApproval?: WriteApprovalMode): Promise<string | null>;
 /**
  * `findExistingSandbox`, and the status the server reported for the one it
  * chose. Reuse accepts a sandbox still PROVISIONING or PENDING — joining a boot
  * someone else started (a reload mid-cold-start, a second tab) — and a latency
  * report must not call waiting out that boot a probe (BOFF-7801).
  */
-export declare function findExistingSandboxWithStatus(workspaceId: string, product: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, excludedSandboxIds?: ReadonlySet<string>): Promise<{
+export declare function findExistingSandboxWithStatus(workspaceId: string, product: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, excludedSandboxIds?: ReadonlySet<string>, 
+/** The product's `writeApproval` flag (`AssistantProductCapabilities`). */
+writeApproval?: WriteApprovalMode): Promise<{
     id: string;
     status: string;
 } | null>;
@@ -44,7 +90,71 @@ export interface ExistingAssistantSandbox {
     createdBy: string;
 }
 /** Pure reuse selector, kept separate so quarantine behavior is regression-testable. */
-export declare function selectExistingAssistantSandbox(sandboxes: ExistingAssistantSandbox[], product: string, mode: AssistantMode, _isProd: boolean, authContext: Pick<AssistantSandboxAuthContext, "userId">, excludedSandboxIds?: ReadonlySet<string>): string | null;
+export declare function selectExistingAssistantSandbox(sandboxes: ExistingAssistantSandbox[], product: string, mode: AssistantMode, _isProd: boolean, authContext: Pick<AssistantSandboxAuthContext, "userId">, excludedSandboxIds?: ReadonlySet<string>, 
+/**
+ * The write-approval flow the panel can get (BOFF-7803 5a): the flow a
+ * Take-action sandbox must run, and — at `proposal-v1` — the provisioning
+ * path an Ask sandbox must have come from (`askReuseMatchesProvisioning`).
+ * Ignored for every other mode. Last, and defaulted to `legacy`, so every
+ * positional caller is unchanged.
+ */
+wantedWriteApproval?: WriteApprovalMode): string | null;
+/**
+ * May this sandbox serve an Ask panel that wants `wanted`? (BOFF-7803 5a, the
+ * Ask fence.)
+ *
+ * ★★★ At `proposal-v1` an Ask sandbox is reusable only if the dedicated path
+ * provisioned it (`assistantAuth.provisionedVia ===
+ * 'provisionAssistantSandbox'`, stamped by the service, which drops any
+ * client-supplied `assistantAuth`). An Ask sandbox from `createSandbox` was
+ * built by `buildAssistantSandboxEnv`, which puts the user's `AUTH_TOKEN` and
+ * `WORKSPACE_AUTH_TOKEN` in its env. There the model's bash can read them and
+ * send a mutation to the public gateway as the user — an Editor's or an
+ * admin's write, from Ask. The heartbeat can keep such a sandbox alive for
+ * hours, so a panel that has just turned the flag on must not adopt one: it is
+ * released (the superseded selector holds this same predicate) and a
+ * dedicated one is provisioned.
+ *
+ * Only Ask, and only at `proposal-v1`. Callers pass the flow the panel can
+ * actually GET (`requestedWriteApproval`): when the page has learned that the
+ * dedicated path does not exist, Ask itself comes from `createSandbox`, the
+ * wanted flow reads `legacy`, and reuse is exactly as before. A Take-action
+ * sandbox is decided by `writeApprovalReuseMatches`; every other mode is
+ * unaffected.
+ *
+ * Pure, and the SAME predicate sits inside the superseded selector's negation,
+ * so "superseded" stays the exact complement of "reusable".
+ */
+export declare function askReuseMatchesProvisioning(sandbox: {
+    metadata: Record<string, unknown> | null;
+}, mode: AssistantMode, wanted: WriteApprovalMode): boolean;
+/**
+ * May a Take-action sandbox with this metadata serve a panel that wants the
+ * `wanted` write-approval flow? (BOFF-7803 5a / BOFF-7800 Phase 1.)
+ *
+ * ★★ A sandbox's flow is fixed in its environment when it is created, so a
+ * sandbox running the other flow must never be adopted: a proposal-v1
+ * sandbox driven by a legacy panel, or the reverse, is a write gate nobody is
+ * operating. The service stamps the flow it actually provisioned at the top
+ * level of `metadata` (wspace-sandbox-svc `assistantClientCompatStamps`):
+ *   - `confirmWrites: true` — the legacy gate. A pre-5a sandbox carries only
+ *     this, and no `writeApproval`, which reads as `legacy`;
+ *   - `confirmWrites: 'proposal-v1'` + `writeApproval: 'proposal-v1'` — the
+ *     proposal flow. The STRING, so a pre-5a panel, which reuses only
+ *     `=== true`, never adopts one.
+ * Both must agree with `wanted`; an absent `confirmWrites` (a pre-gate
+ * sandbox) matches nothing, as before.
+ *
+ * ★★ Except a MEMBER sandbox (`assistantAuth.accessProfile === 'member'`),
+ * which is always reusable: it is the only Take-action sandbox a non-admin can
+ * be provisioned (proposal-v1, fenced, whatever was requested), so superseding
+ * it over the approval flow would only stop it and provision the same thing
+ * again against a one-environment quota.
+ *
+ * Pure, and the SAME predicate sits inside the superseded selector's negation,
+ * so "superseded" stays the exact complement of "reusable".
+ */
+export declare function writeApprovalReuseMatches(metadata: Record<string, unknown> | null | undefined, wanted: WriteApprovalMode): boolean;
 /**
  * Does this mode write through the gateway, and therefore need the
  * confirm-before-write gate?
@@ -65,7 +175,71 @@ export declare function buildAssistantSandboxEnv(product: string, mode: Assistan
     name: string;
     value: string;
 }>;
-export declare function createAssistantSandbox(product: string, mode: AssistantMode, workspaceId: string, isProd: boolean, ttlSeconds: number, authContext: AssistantSandboxAuthContext): Promise<string>;
+/** Did this sandbox come from the dedicated provisioning path, by its stamp? */
+export declare function isDedicatedAssistantSandboxRow(sandbox: {
+    metadata: Record<string, unknown> | null;
+}): boolean;
+/** Does this page know `sandboxId` came from the dedicated provisioning path? */
+export declare function isDedicatedAssistantSandbox(sandboxId: string): boolean;
+/**
+ * Does a panel whose product flag is `writeApproval` provision `mode` through
+ * the dedicated path? (BOFF-7800 Phase 1, BOFF-7803 5a.)
+ *
+ * ★★ Only at exactly `'proposal-v1'`, only for Ask and Take action, and only
+ * while this page has not seen the gateway say the path does not exist. A
+ * product at `legacy` keeps `createSandbox` for every mode, so it changes in
+ * nothing — in particular no non-admin can open Take action, and Ask stays as
+ * it was, until the product turns the flag on.
+ */
+export declare function usesDedicatedAssistantProvisioning(mode: AssistantMode, writeApproval: WriteApprovalMode | null | undefined): boolean;
+/**
+ * Is this the service's "the dedicated provisioning path is closed" refusal
+ * (503 `assistant.errors.assistantProvisioningUnavailable`)? The service raises
+ * it until it runs the session relay (BOFF-8072), whatever the caller's role.
+ * Any `SERVICE_UNAVAILABLE` counts: on this path every one of them is a
+ * "not now", and none may be retried another way.
+ *
+ * ★★ It must never lead to a retry through `createSandbox`: that path hands a
+ * session the credentials BOFF-8072 withdraws. It surfaces as the temporary
+ * outcome instead (`classifyTurnFailure`), which is what it is.
+ */
+export declare function isAssistantProvisioningUnavailable(error: unknown): boolean;
+/**
+ * The `provisionAssistantSandbox` input. Pure and exported so what leaves the
+ * browser on this path is checkable without a network.
+ *
+ * ★★ No containers, command, resources, image pull settings or storage — the
+ * service builds the sandbox — and NO token env for any mode: the only env is
+ * `AI_ASSISTANT_PRODUCT`, `HOSTNAME` and `WORKSPACE_ID`, the service's own
+ * allowlist. A session on this path never holds the user's token (BOFF-8072);
+ * the proxy forwards it to the service, which keeps it server-side.
+ *
+ * ★ `writeApproval` is sent for Take action only. Ask requests nothing about
+ * writes (the service gives it the read-only Ask plan whatever is sent), and
+ * leaving it out keeps the field at its schema default.
+ */
+export declare function buildProvisionAssistantSandboxInput(product: string, mode: AssistantMode, workspaceId: string, isProd: boolean, ttlSeconds: number, authContext: Pick<AssistantSandboxAuthContext, "organizationId">): Record<string, unknown>;
+/**
+ * Create an assistant sandbox, and return its id.
+ *
+ * ★★ Two paths (BOFF-7800 Phase 1, BOFF-7803 5a), chosen by the product's
+ * `writeApproval` flag and nothing else:
+ * - `'proposal-v1'`, Ask or Take action → `provisionAssistantSandbox`, gated on
+ *   `assistant:use` (every workspace role), under the same quota. The service
+ *   decides the access profile — an admin's Take action can execute, a
+ *   member's is fenced — so the panel cannot widen it.
+ *   - The service's missing-field answer (an older supergraph) falls back to
+ *     `createSandbox`, and the page stops asking.
+ *   - Every other failure is final. Above all the provisioning-closed 503
+ *     (`isAssistantProvisioningUnavailable`): a retry through `createSandbox`
+ *     would hand a non-admin's session the old credential path.
+ * - anything else → `createSandbox`, exactly as before.
+ */
+export declare function createAssistantSandbox(product: string, mode: AssistantMode, workspaceId: string, isProd: boolean, ttlSeconds: number, authContext: AssistantSandboxAuthContext, 
+/** `writeApproval`: the product's flag (`AssistantProductCapabilities`). */
+options?: {
+    writeApproval?: WriteApprovalMode;
+}): Promise<string>;
 /**
  * Wait for RUNNING. Prefers the svc long-poll (waitForSandboxRunning); on an
  * older gateway that field errors → falls back to 2s getSandbox polling. Keeps
@@ -78,7 +252,52 @@ export declare function waitForAssistantServiceReady(sandboxId: string, workspac
  * retry. A caller that REUSES a sandbox learns from it that it joined a boot
  * in progress rather than a service already serving (BOFF-7801).
  */
-onNotReady?: () => void): Promise<void>;
+onNotReady?: () => void): Promise<Record<string, unknown>>;
+/** `proposal-v1` for exactly that string; anything else is `legacy`. */
+export declare function writeApprovalModeOf(value: unknown): WriteApprovalMode;
+/**
+ * `enabled` for exactly that string. An ABSENT value is `enabled` only when
+ * the caller says absence means an image that predates 5a
+ * (`absentMeansFenced: false`); any other value, and absence otherwise, is
+ * `fenced`.
+ */
+export declare function writeExecutionOf(value: unknown, absentMeansFenced: boolean): WriteExecutionState;
+/**
+ * What a sandbox's own `/health` body says about writes (BOFF-7803 5a).
+ *
+ * ★★ Every doubt resolves to the side that runs nothing:
+ * - no write capabilities at all (an image that predates 5a) → the legacy
+ *   flow, unchanged: `{proposals: false, legacy, enabled}`;
+ * - a mode other than exactly `proposal-v1` → `legacy`;
+ * - a `writeExecution` other than exactly `enabled` → `fenced`, and so is a
+ *   missing one on an image that does report write capabilities.
+ *
+ * `replyApproval` is always `off`: in 5a no reply approves, whatever a sandbox
+ * reports. Nothing here is a secret; `sessionCredentials` is a path name.
+ */
+export declare function readSandboxWriteCapabilities(health: unknown): SandboxWriteCapabilities;
+/**
+ * ONE `/health` read of a sandbox this page has not read yet, recorded exactly
+ * as `waitForAssistantServiceReady` records it (BOFF-8128).
+ *
+ * Why: the write capabilities are never persisted (see the store's
+ * `sandboxWriteCapabilities`), so after a reload the sandbox that ISSUED a
+ * reopened conversation's proposals is unknown, and no proposal call may be
+ * made to it until its own `/health` has been read. This is that read, made
+ * when the conversation reopens instead of waiting for the next turn.
+ *
+ * ★★ A read, nothing more. It does not wait for a boot, does not retry
+ * (`proxySandboxRaw` makes a single attempt), does not prove the sandbox ready
+ * for a turn and does not adopt it: the turn's own acquisition does those.
+ * wspace-sandbox-svc answers only for a sandbox of this workspace that this
+ * person owns and that is running, so a sandbox that is gone, stopped or not
+ * theirs answers with an error, and nothing is recorded.
+ *
+ * `mode` is the mode of the sandbox being addressed, as for every proxied call.
+ * Resolves the capabilities read, or `null` when there was no readable answer.
+ * Never rejects.
+ */
+export declare function readSandboxWriteCapabilitiesOnce(sandboxId: string, workspaceId: string, mode: AssistantMode, authContext: AssistantSandboxAuthContext): Promise<SandboxWriteCapabilities | null>;
 export declare function createAssistantSession(sandboxId: string, workspaceId: string, mode: AssistantMode, authContext: AssistantSandboxAuthContext): Promise<{
     sessionId: string;
 }>;
@@ -114,7 +333,9 @@ export declare function selectSupersededAssistantSandboxes(sandboxes: readonly E
  * the two keep identical shapes — which is what makes "superseded is the
  * complement of reusable" checkable by reading them side by side.
  */
-excludedSandboxIds?: ReadonlySet<string>): string[];
+excludedSandboxIds?: ReadonlySet<string>, 
+/** Same parameter, position and default as the reuse selector's. */
+wantedWriteApproval?: WriteApprovalMode): string[];
 /**
  * Free the workspace's sandbox slot before provisioning a different mode.
  *
@@ -143,13 +364,52 @@ excludedSandboxIds?: ReadonlySet<string>): string[];
  */
 export declare function releaseSupersededAssistantSandboxes(workspaceId: string, product: string, mode: AssistantMode, isProd: boolean, authContext: AssistantSandboxAuthContext, 
 /** Sandboxes proven dead this session — released even if they still match. */
-excludedSandboxIds?: ReadonlySet<string>): Promise<string[]>;
+excludedSandboxIds?: ReadonlySet<string>, 
+/** The product's `writeApproval` flag (`AssistantProductCapabilities`). */
+writeApproval?: WriteApprovalMode): Promise<string[]>;
 /**
  * Terminalize a sandbox whose Cloudflare data plane was reaped while its DB
  * record remained RUNNING. Invoked only for Cloudflare's exact connection-
- * refused signature before provisioning the replacement.
+ * refused signature before provisioning the replacement — and by
+ * `releaseSupersededAssistantSandboxes` for our own superseded sandboxes.
+ *
+ * ★★ A sandbox from the dedicated path (BOFF-7800 Phase 1) is stopped through
+ * the owner-scoped `stopMyAssistantSandbox`: its owner may be a Viewer, who
+ * holds no permission `stopSandbox` accepts, and without it the superseded
+ * sandbox would hold a one-environment quota until its TTL ran out. It falls
+ * back to `stopSandbox` only on the gateway's missing-field answer; any other
+ * refusal (NOT_FOUND for a row that is not the caller's) is final.
+ *
+ * `ownerScoped` routes a sandbox this page does not know as dedicated the same
+ * way: the release on the dedicated path passes it for its owner's Ask and
+ * Take-action sandboxes from `createSandbox` (`releaseSupersededAssistantSandboxes`).
  */
-export declare function stopReapedAssistantSandbox(sandboxId: string, workspaceId: string, authContext: AssistantSandboxAuthContext): Promise<void>;
+export declare function stopReapedAssistantSandbox(sandboxId: string, workspaceId: string, authContext: AssistantSandboxAuthContext, options?: {
+    ownerScoped?: boolean;
+}): Promise<void>;
+/**
+ * How the panel's write-reply binder classified a prompt (BOFF-7803 5a,
+ * design §5.8): the sandbox's `writeReply`. `proposalId` only on a
+ * `proposal_result` continuation.
+ *
+ * ★★ 5a is a safety floor, not the final security boundary. Nothing in a
+ * prompt approves a write: the sandbox supersedes every pending proposal of
+ * the session on ANY prompt (the strict sweep), and only the card's button
+ * confirms one. The tag only tells the sandbox what the reply was, so a bare
+ * "yes" with nothing waiting can be bridged (the model is told to prepare the
+ * change it described).
+ */
+export interface AssistantPromptWriteReply {
+    kind: WriteReplyKind;
+    origin: WriteReplyOrigin;
+    proposalId?: string;
+}
+/**
+ * The conversation ids the sandbox's prompt admission accepts
+ * (`[A-Za-z0-9_-]{1,128}`). It refuses the WHOLE prompt (400) over anything
+ * else, so a conversation id outside this is never sent.
+ */
+export declare const PROMPT_CONVERSATION_ID_PATTERN: RegExp;
 /**
  * Assemble the `/sessions/:id/prompt-async` request body. Pure + exported so the
  * backward-compatibility contract is unit-testable without touching the network.
@@ -157,16 +417,23 @@ export declare function stopReapedAssistantSandbox(sandboxId: string, workspaceI
  * The contract, deliberately additive:
  * - `prompt` is ALWAYS present. A bridge that predates multimodal ignores the
  *   unknown `parts` key and answers from `prompt` — degradation, not failure.
- * - `parts` appears ONLY when there is at least one. A text-only turn therefore
- *   produces a byte-identical body to the pre-multimodal client.
+ * - `parts` appears ONLY when there is at least one. A text-only turn with no
+ *   write fields therefore produces a byte-identical body to the
+ *   pre-multimodal client.
  * - When a bridge does understand `parts`, `parts` wins and `prompt` is the
  *   text-only fallback.
+ * - BOFF-7803 5a: `conversationId` (the panel's stable conversation id) when it
+ *   is one the sandbox accepts — a proposal-v1 sandbox binds the session's
+ *   proposals to it; any other ignores it — and `writeReply` only when set.
+ *   A sandbox that predates them ignores both unknown keys.
  */
 export declare function buildPromptRequestBody(args: {
     mode: AssistantMode;
     prompt: string;
     pageContext: Record<string, unknown> | undefined;
     parts?: AssistantPromptPart[];
+    conversationId?: string | null;
+    writeReply?: AssistantPromptWriteReply | null;
 }): Record<string, unknown>;
 export interface AssistantPromptGatewayRequest {
     sandboxId: string;
@@ -177,6 +444,10 @@ export interface AssistantPromptGatewayRequest {
     pageContext: Record<string, unknown> | undefined;
     authContext: AssistantSandboxAuthContext;
     parts?: AssistantPromptPart[];
+    /** The panel's conversation (BOFF-7803 5a). */
+    conversationId?: string | null;
+    /** How the binder classified this prompt (BOFF-7803 5a). */
+    writeReply?: AssistantPromptWriteReply | null;
 }
 /** The actual unbatched GraphQL body, including context and forwarded-token overhead. */
 export declare function buildPromptGatewayRequest(args: AssistantPromptGatewayRequest): {
@@ -186,9 +457,14 @@ export declare function buildPromptGatewayRequest(args: AssistantPromptGatewayRe
 };
 export declare function promptGatewayRequestBytes(args: AssistantPromptGatewayRequest): number;
 export declare function sendAssistantPromptAsync(sandboxId: string, workspaceId: string, sessionId: string, prompt: string, mode: AssistantMode, pageContext: Record<string, unknown> | undefined, authContext: AssistantSandboxAuthContext, 
-/** Multimodal extras. Optional + trailing, so every existing call site is unaffected. */
+/**
+ * Multimodal extras, and the write-lifecycle fields (BOFF-7803 5a). Optional
+ * + trailing, so every existing call site is unaffected.
+ */
 options?: {
     parts?: AssistantPromptPart[];
+    conversationId?: string | null;
+    writeReply?: AssistantPromptWriteReply | null;
 }): Promise<{
     messageID?: string;
 }>;
@@ -201,6 +477,15 @@ export declare function getAssistantMessages(sandboxId: string, workspaceId: str
  * (older backend / preview data plane off) → caller falls back to polling.
  */
 export declare function getAssistantStreamAccess(sandboxId: string, workspaceId: string, sessionId: string, mode: AssistantMode, authContext: AssistantSandboxAuthContext): Promise<StreamAccess | null>;
+/**
+ * Extend a sandbox's TTL — the keep-warm call.
+ *
+ * ★★ Routed like `stopReapedAssistantSandbox`: a sandbox from the dedicated
+ * path through the owner-scoped `extendMyAssistantSandboxTTL` (a Viewer cannot
+ * call `extendSandboxTTL`), falling back only on the gateway's missing-field
+ * answer. Extending grants the session nothing: it holds no credential, and
+ * execution re-checks admin rights live (BOFF-8072).
+ */
 export declare function extendAssistantSandboxTTL(sandboxId: string, workspaceId: string, additionalSeconds: number, authContext: AssistantSandboxAuthContext): Promise<void>;
 export declare function sendHeartbeat(sandboxId: string, workspaceId: string, sessionId: string, mode: AssistantMode, authContext: AssistantSandboxAuthContext): Promise<void>;
 /**

package/dist/shared/assistant/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkCH,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,YAAY,EACb,MAAM,SAAS,CAAC;AAMjB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GACrC,OAAO,CAET;AAqFD,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,EACxC,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUxB;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,EACxC,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAoBhD;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,wBAAwB,EAAE,EAC9C,EAAE,EAAE,MAAM,GACT,MAAM,CAER;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,wBAAwB,EAAE,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EAQnB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,EACxD,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,MAAM,GAAG,IAAI,CA4Df;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,CACf,2BAA2B,EAC3B,aAAa,GAAG,gBAAgB,CACjC,GACA,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAyCxC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,MAAM,CAAC,CA+EjB;AAyCD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAS;AAClB;;;;GAIG;AACH,UAAU,CAAC,EAAE,MAAM,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAYhC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,wBAAwB,EAAE,EAC9C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EAEnB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,2BAA2B;AACxC;;;;;;GAMG;AACH,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,MAAM,EAAE,CA2CV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,mCAAmC,CACvD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B;AACxC,8EAA8E;AAC9E,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa,GAClD,OAAO,CAAC,MAAM,EAAE,CAAC,CA0CnB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK1B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAC/B;AAED,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC;IACD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAUA;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC,MAAM,CAIR;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAChD,WAAW,EAAE,2BAA2B;AACxC,yFAAyF;AACzF,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1C,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkCjC;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,EACxC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAkBhC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAsB9B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CAelB;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAa9B;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAe/B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM;AACpB;;;;;;GAMG;AACH,IAAI,EAAE,aAAa,GAAG,SAAS,EAC/B,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,2BAA2B,CAAC,CAmBtC;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACzC,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/shared/assistant/api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyCH,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,YAAY,EACb,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAEV,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAM3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,GACrC,OAAO,CAET;AAsFD,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,aAAa,GAAG,SAAS,EAC/B,WAAW,EAAE,2BAA2B,GAAG,SAAS,GACnD,OAAO,CAAC,qBAAqB,CAAC,CA4BhC;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,EACxC,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;AACnD,2EAA2E;AAC3E,aAAa,GAAE,iBAA4B,GAC1C,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAWxB;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B,EACxC,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;AACnD,2EAA2E;AAC3E,aAAa,GAAE,iBAA4B,GAC1C,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAsBhD;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC7B,SAAS,EAAE,SAAS,wBAAwB,EAAE,EAC9C,EAAE,EAAE,MAAM,GACT,MAAM,CAER;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,wBAAwB,EAAE,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EAQnB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,QAAQ,CAAC,EACxD,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;AACnD;;;;;;GAMG;AACH,mBAAmB,GAAE,iBAA4B,GAChD,MAAM,GAAG,IAAI,CAmEf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,EACrD,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAGT;AAOD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,EACpD,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAQT;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,CACf,2BAA2B,EAC3B,aAAa,GAAG,gBAAgB,CACjC,GACA,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA8CxC;AA0BD,gFAAgF;AAChF,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C,GAAG,OAAO,CAGV;AAYD,iFAAiF;AACjF,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,aAAa,EACnB,aAAa,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAClD,OAAO,CAMT;AAiBD;;;;;;;;;;GAUG;AACH,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAM1E;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,GAC/D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBzB;AAmFD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,2BAA2B;AACxC,4EAA4E;AAC5E,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,iBAAiB,CAAA;CAAO,GAClD,OAAO,CAAC,MAAM,CAAC,CA2BjB;AA2HD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,EACxC,SAAS,SAAS;AAClB;;;;GAIG;AACH,UAAU,CAAC,EAAE,MAAM,IAAI,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2ClC;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,OAAO,GACzB,mBAAmB,CAIrB;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,GACd,wBAAwB,CA8B1B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,gCAAgC,CACpD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CA8B1C;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAYhC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,SAAS,wBAAwB,EAAE,EAC9C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EAEnB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,2BAA2B;AACxC;;;;;;GAMG;AACH,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;AACnD,oEAAoE;AACpE,mBAAmB,GAAE,iBAA4B,GAChD,MAAM,EAAE,CA0DV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,mCAAmC,CACvD,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,OAAO,EACf,WAAW,EAAE,2BAA2B;AACxC,8EAA8E;AAC9E,kBAAkB,GAAE,WAAW,CAAC,MAAM,CAAa;AACnD,2EAA2E;AAC3E,aAAa,GAAE,iBAA4B,GAC1C,OAAO,CAAC,MAAM,EAAE,CAAC,CA2EnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,EACxC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,QAA2B,CAAC;AA4CvE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC/C,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa1B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,4DAA4D;IAC5D,UAAU,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC/C;AAED,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC;IACD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAUA;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC,MAAM,CAIR;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAChD,WAAW,EAAE,2BAA2B;AACxC;;;GAGG;AACH,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC/C,GACA,OAAO,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsCjC;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,EACxC,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAkBhC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAsB9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CAelB;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAa9B;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,aAAa,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAe/B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM;AACpB;;;;;;GAMG;AACH,IAAI,EAAE,aAAa,GAAG,SAAS,EAC/B,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,2BAA2B,CAAC,CAmBtC;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACzC,WAAW,EAAE,2BAA2B,GACvC,OAAO,CAAC,IAAI,CAAC,CAaf"}