@5ss/ai-tools 2.11.1

package/dist/cloudflare-sandbox-Dp_uNaqW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-sandbox-Dp_uNaqW.js","names":["#http","#storage","#storageAuth","#putFileBytes","#getFileBytes","#requireStorage"],"sources":["../src/vendors/cloudflare-sandbox/contracts.ts","../src/vendors/cloudflare-sandbox/domain.ts","../src/vendors/cloudflare-sandbox/client.ts","../src/vendors/cloudflare-sandbox/module.ts"],"sourcesContent":["/**\n * Cloudflare Sandbox Bridge HTTP API contracts.\n * Host deploys the bridge Worker; this pack is a Bearer client.\n * @see https://developers.cloudflare.com/sandbox/bridge/http-api/\n */\n\nimport { z } from 'zod'\n\nimport { s3AuthSchema } from '../s3/contracts'\n\nexport const MAX_ARGV = 64\nexport const MAX_ARG_CHARS = 100_000\nexport const MAX_FILE_PATH = 1024\nexport const MAX_FILE_TEXT = 2_000_000\n/** Bridge hard cap is 32 MiB; package tool path uses the same bound. */\nexport const MAX_FILE_BYTES = 32 * 1024 * 1024\nexport const MAX_WRITE_FILES = 20\nexport const MAX_READ_PATHS = 50\nexport const MAX_LIST_FILES = 500\nexport const DEFAULT_EXEC_TIMEOUT_MS = 30_000\nexport const MAX_EXEC_TIMEOUT_MS = 600_000\n\nexport const cloudflareSandboxAuthSchema = z.object({\n\tbase_url: z\n\t\t.string()\n\t\t.min(1)\n\t\t.describe('Sandbox bridge Worker origin, for example https://sandbox-bridge.example.workers.dev'),\n\tapi_key: z.string().min(1).describe('Bridge SANDBOX_API_KEY Bearer token'),\n\tstorage: s3AuthSchema\n\t\t.optional()\n\t\t.describe('Optional S3-compatible storage for importArtifact / exportArtifact (ArtifactRef)')\n})\n\nexport type CloudflareSandboxAuth = z.infer<typeof cloudflareSandboxAuthSchema>\n\n/** Object-store ArtifactRef for sandbox import/export. */\nexport const sandboxObjectArtifactRefSchema = z.object({\n\tstore: z.literal('object').describe('Object store containing the artifact'),\n\tkey: z.string().min(1).describe('Object key'),\n\tmedia_type: z.string().min(1).optional().describe('MIME or format hint when known'),\n\tfilename: z.string().min(1).optional().describe('Original or display file name'),\n\tbyte_length: z.int().min(0).optional().describe('Size in bytes when known')\n})\n\nexport type SandboxObjectArtifactRef = z.infer<typeof sandboxObjectArtifactRefSchema>\n\nconst sandboxId = z.string().min(1).max(200).describe('Sandbox id returned by create')\n\nexport const sandboxIdInputSchema = z.object({\n\tsandbox_id: sandboxId\n})\n\nexport const createSandboxOutputSchema = z.object({\n\tsandbox_id: z.string().describe('Created sandbox id')\n})\n\nexport const destroySandboxOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tdestroyed: z.literal(true)\n})\n\nexport const runningOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\trunning: z.boolean().describe('Whether the container is live')\n})\n\nexport const healthOutputSchema = z.object({\n\tok: z.boolean()\n})\n\nexport const execInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\targv: z\n\t\t.array(z.string().min(1).max(MAX_ARG_CHARS))\n\t\t.min(1)\n\t\t.max(MAX_ARGV)\n\t\t.describe('Command argv array (not a shell string). Example: [\"python3\",\"-c\",\"print(1)\"]'),\n\ttimeout_ms: z\n\t\t.int()\n\t\t.min(1)\n\t\t.max(MAX_EXEC_TIMEOUT_MS)\n\t\t.optional()\n\t\t.describe(`Exec timeout in ms (default ${DEFAULT_EXEC_TIMEOUT_MS})`),\n\tcwd: z.string().min(1).max(MAX_FILE_PATH).optional().describe('Working directory (default /workspace)'),\n\tsession_id: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(200)\n\t\t.optional()\n\t\t.describe('Optional bridge session id for isolated working directory and runtime state'),\n\tenv: z\n\t\t.record(z.string().min(1).max(128), z.string().max(8_192))\n\t\t.optional()\n\t\t.describe('Optional environment variables for the process when the bridge supports env')\n})\n\nexport const execOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tstdout: z.string().describe('Decoded standard output'),\n\tstderr: z.string().describe('Decoded standard error'),\n\texit_code: z.number().int().optional().describe('Process exit code when the stream ends with exit'),\n\tsuccess: z.boolean().describe('True when exit_code is 0'),\n\terror: z.string().optional().describe('Bridge error message when the stream ends with error'),\n\terror_code: z.string().optional().describe('Bridge error code when present')\n})\n\nconst filePathField = z\n\t.string()\n\t.min(1)\n\t.max(MAX_FILE_PATH)\n\t.describe('Path under workspace (with or without /workspace/ prefix)')\n\nconst sessionIdField = z.string().min(1).max(200).optional().describe('Optional Session-Id header')\n\nconst writeFileBodyFields = {\n\ttext: z.string().max(MAX_FILE_TEXT).optional().describe('Utf-8 file contents (omit when body_base64 is set)'),\n\tbody_base64: z\n\t\t.string()\n\t\t.min(1)\n\t\t.optional()\n\t\t.describe('Base64 file bytes for binary content (omit when text is set; max 32 MiB decoded)')\n}\n\nfunction refineExactlyOneBody(\n\tval: { text?: string | undefined; body_base64?: string | undefined },\n\tctx: z.RefinementCtx\n): void {\n\tconst hasText = val.text !== undefined\n\tconst hasB64 = val.body_base64 !== undefined\n\tif (hasText === hasB64) {\n\t\tctx.addIssue({\n\t\t\tcode: 'custom',\n\t\t\tmessage: 'Provide exactly one of text or body_base64'\n\t\t})\n\t}\n}\n\nexport const writeFileInputSchema = z\n\t.object({\n\t\tsandbox_id: sandboxId,\n\t\tpath: filePathField,\n\t\t...writeFileBodyFields,\n\t\tsession_id: sessionIdField\n\t})\n\t.superRefine(refineExactlyOneBody)\n\nexport const writeFileOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpath: z.string(),\n\tok: z.literal(true),\n\tbyte_length: z.number().int().nonnegative().optional().describe('Decoded byte length written when known')\n})\n\nexport const readFileInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tpath: filePathField,\n\tencoding: z\n\t\t.enum(['utf8', 'base64'])\n\t\t.optional()\n\t\t.describe('Response encoding (default utf8 for text; use base64 for binary)'),\n\tsession_id: sessionIdField\n})\n\nexport const readFileOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpath: z.string(),\n\ttext: z.string().optional().describe('Utf-8 contents when encoding is utf8 (default)'),\n\tbody_base64: z.string().optional().describe('Base64 contents when encoding is base64'),\n\tbyte_length: z.number().int().nonnegative().optional().describe('Decoded byte length')\n})\n\nexport const writeFilesInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tfiles: z\n\t\t.array(\n\t\t\tz\n\t\t\t\t.object({\n\t\t\t\t\tpath: z.string().min(1).max(MAX_FILE_PATH).describe('Path under workspace'),\n\t\t\t\t\t...writeFileBodyFields\n\t\t\t\t})\n\t\t\t\t.superRefine(refineExactlyOneBody)\n\t\t)\n\t\t.min(1)\n\t\t.max(MAX_WRITE_FILES)\n\t\t.describe('Files to write under workspace (text or body_base64 each)'),\n\tsession_id: sessionIdField\n})\n\nexport const writeFilesOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpaths: z.array(z.string()),\n\tok: z.literal(true)\n})\n\nexport const readFilesInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tpaths: z\n\t\t.array(z.string().min(1).max(MAX_FILE_PATH).describe('Path under workspace'))\n\t\t.min(1)\n\t\t.max(MAX_READ_PATHS)\n\t\t.describe('Paths to read under workspace'),\n\tencoding: z.enum(['utf8', 'base64']).optional().describe('Response encoding for all files (default utf8)'),\n\tsession_id: sessionIdField\n})\n\nexport const readFilesOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tfiles: z.array(\n\t\tz.object({\n\t\t\tpath: z.string(),\n\t\t\ttext: z.string().optional(),\n\t\t\tbody_base64: z.string().optional(),\n\t\t\tbyte_length: z.number().int().nonnegative().optional()\n\t\t})\n\t)\n})\n\nexport const listFilesInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tdirectory_path: z.string().max(MAX_FILE_PATH).optional().describe('Directory to list (default /workspace)'),\n\tsession_id: sessionIdField\n})\n\nexport const listFilesOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpaths: z.array(z.string()).describe('Absolute or workspace-relative file paths found'),\n\traw: z.unknown().optional().describe('Provider listing payload when available')\n})\n\nexport const removeFilesInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tpaths: z\n\t\t.array(z.string().min(1).max(MAX_FILE_PATH))\n\t\t.min(1)\n\t\t.max(MAX_READ_PATHS)\n\t\t.describe('Paths to remove under workspace'),\n\tsession_id: sessionIdField\n})\n\nexport const removeFilesOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpaths: z.array(z.string()),\n\tok: z.literal(true)\n})\n\nexport const importArtifactInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tpath: filePathField,\n\tsource: sandboxObjectArtifactRefSchema.describe('Object-store ArtifactRef to copy into the sandbox'),\n\tsession_id: sessionIdField\n})\n\nexport const importArtifactOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpath: z.string(),\n\tok: z.literal(true),\n\tbyte_length: z.number().int().nonnegative()\n})\n\nexport const exportArtifactInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tpath: filePathField,\n\tdestination_key: z.string().min(1).describe('Object key to write under bound storage'),\n\tsession_id: sessionIdField\n})\n\nexport const exportArtifactOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tpath: z.string(),\n\tartifact: sandboxObjectArtifactRefSchema\n})\n\nexport const createBridgeSessionOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tsession_id: z.string().describe('Bridge session id for Session-Id header')\n})\n\nexport const deleteBridgeSessionInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tsession_id: z.string().min(1).max(200).describe('Bridge session id to delete')\n})\n\nexport const deleteBridgeSessionOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tsession_id: z.string(),\n\tdeleted: z.literal(true)\n})\n\nexport const executeCodeInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tcode: z.string().min(1).max(MAX_ARG_CHARS).describe('Source code to run'),\n\tlanguage: z\n\t\t.enum(['python', 'javascript', 'typescript', 'shell'])\n\t\t.optional()\n\t\t.describe('Runtime language (default python)'),\n\ttimeout_ms: z\n\t\t.int()\n\t\t.min(1)\n\t\t.max(MAX_EXEC_TIMEOUT_MS)\n\t\t.optional()\n\t\t.describe(`Exec timeout in ms (default ${DEFAULT_EXEC_TIMEOUT_MS})`),\n\tsession_id: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(200)\n\t\t.optional()\n\t\t.describe('Optional bridge session id for isolated working directory and runtime state')\n})\n\n/**\n * Mount an S3-compatible bucket into the sandbox filesystem.\n * @see https://developers.cloudflare.com/sandbox/bridge/http-api/#bucket-mounts\n *\n * Two bridge modes:\n * - **R2 binding:** omit `endpoint`; `bucket` is the Worker R2 binding name.\n * - **Remote S3/R2/GCS:** set `endpoint` (+ optional credentials; bridge may use Worker secrets).\n */\nexport const mountBucketInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tbucket: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(256)\n\t\t.describe(\n\t\t\t'R2 Worker binding name when endpoint is omitted; otherwise the remote bucket name (e.g. for S3/R2 endpoint mounts)'\n\t\t),\n\tmount_path: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(MAX_FILE_PATH)\n\t\t.refine((p) => p.startsWith('/'), { message: 'mount_path must be an absolute path (start with /)' })\n\t\t.describe('Absolute path inside the sandbox to mount at (e.g. /data or /mnt/workspace)'),\n\tendpoint: z\n\t\t.url()\n\t\t.optional()\n\t\t.describe(\n\t\t\t'S3-compatible endpoint URL (e.g. https://s3.amazonaws.com or https://ACCOUNT.r2.cloudflarestorage.com). Omit for Worker R2 binding mounts'\n\t\t),\n\tprovider: z\n\t\t.enum(['r2', 's3', 'gcs'])\n\t\t.optional()\n\t\t.describe('Provider hint for s3fs optimizations when using endpoint mounts'),\n\tread_only: z.boolean().optional().describe('Mount read-only (default false)'),\n\tprefix: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(MAX_FILE_PATH)\n\t\t.optional()\n\t\t.describe('Bucket prefix/subdirectory to expose at the mount (must start with / when set)'),\n\taccess_key_id: z\n\t\t.string()\n\t\t.min(1)\n\t\t.optional()\n\t\t.describe('Access key for endpoint mounts (maps to bridge credentials.accessKeyId)'),\n\tsecret_access_key: z\n\t\t.string()\n\t\t.min(1)\n\t\t.optional()\n\t\t.describe('Secret key for endpoint mounts (maps to bridge credentials.secretAccessKey)'),\n\tcredential_proxy: z\n\t\t.boolean()\n\t\t.optional()\n\t\t.describe(\n\t\t\t'When true, bridge keeps credentials out of the container (egress signing). Endpoint mounts only; requires ContainerProxy on the bridge Worker'\n\t\t),\n\tlocal_bucket: z\n\t\t.boolean()\n\t\t.optional()\n\t\t.describe('When true, use local R2 binding sync (wrangler dev). Mutually exclusive with endpoint'),\n\ts3fs_options: z\n\t\t.array(z.string().min(1).max(256))\n\t\t.max(32)\n\t\t.optional()\n\t\t.describe('Advanced s3fs mount flags (e.g. use_cache=/tmp/cache)')\n})\n\nexport const mountBucketOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tbucket: z.string(),\n\tmount_path: z.string(),\n\tok: z.literal(true)\n})\n\nexport const unmountBucketInputSchema = z.object({\n\tsandbox_id: sandboxId,\n\tmount_path: z\n\t\t.string()\n\t\t.min(1)\n\t\t.max(MAX_FILE_PATH)\n\t\t.refine((p) => p.startsWith('/'), { message: 'mount_path must be an absolute path (start with /)' })\n\t\t.describe('Absolute mount path previously passed to mount')\n})\n\nexport const unmountBucketOutputSchema = z.object({\n\tsandbox_id: z.string(),\n\tmount_path: z.string(),\n\tok: z.literal(true)\n})\n\nexport type SandboxIdInput = z.infer<typeof sandboxIdInputSchema>\nexport type CreateSandboxOutput = z.infer<typeof createSandboxOutputSchema>\nexport type DestroySandboxOutput = z.infer<typeof destroySandboxOutputSchema>\nexport type RunningOutput = z.infer<typeof runningOutputSchema>\nexport type HealthOutput = z.infer<typeof healthOutputSchema>\nexport type ExecInput = z.infer<typeof execInputSchema>\nexport type ExecOutput = z.infer<typeof execOutputSchema>\nexport type WriteFileInput = z.infer<typeof writeFileInputSchema>\nexport type WriteFileOutput = z.infer<typeof writeFileOutputSchema>\nexport type ReadFileInput = z.infer<typeof readFileInputSchema>\nexport type ReadFileOutput = z.infer<typeof readFileOutputSchema>\nexport type WriteFilesInput = z.infer<typeof writeFilesInputSchema>\nexport type WriteFilesOutput = z.infer<typeof writeFilesOutputSchema>\nexport type ReadFilesInput = z.infer<typeof readFilesInputSchema>\nexport type ReadFilesOutput = z.infer<typeof readFilesOutputSchema>\nexport type ListFilesInput = z.infer<typeof listFilesInputSchema>\nexport type ListFilesOutput = z.infer<typeof listFilesOutputSchema>\nexport type RemoveFilesInput = z.infer<typeof removeFilesInputSchema>\nexport type RemoveFilesOutput = z.infer<typeof removeFilesOutputSchema>\nexport type ImportArtifactInput = z.infer<typeof importArtifactInputSchema>\nexport type ImportArtifactOutput = z.infer<typeof importArtifactOutputSchema>\nexport type ExportArtifactInput = z.infer<typeof exportArtifactInputSchema>\nexport type ExportArtifactOutput = z.infer<typeof exportArtifactOutputSchema>\nexport type CreateBridgeSessionOutput = z.infer<typeof createBridgeSessionOutputSchema>\nexport type DeleteBridgeSessionInput = z.infer<typeof deleteBridgeSessionInputSchema>\nexport type DeleteBridgeSessionOutput = z.infer<typeof deleteBridgeSessionOutputSchema>\nexport type ExecuteCodeInput = z.infer<typeof executeCodeInputSchema>\nexport type MountBucketInput = z.infer<typeof mountBucketInputSchema>\nexport type MountBucketOutput = z.infer<typeof mountBucketOutputSchema>\nexport type UnmountBucketInput = z.infer<typeof unmountBucketInputSchema>\nexport type UnmountBucketOutput = z.infer<typeof unmountBucketOutputSchema>\n","/**\n * Cloudflare Sandbox Bridge pure helpers (no HTTP).\n */\n\nimport { isPlainObject, isString } from 'es-toolkit'\n\nimport { ToolError } from '../../core/errors'\nimport { base64ToBytes, utf8ToBytes } from '../../shared/bytes'\nimport { MAX_FILE_BYTES } from './contracts'\n\n/** Normalize a host path to the bridge URL segment under /file/… (no leading slash). */\nexport function workspaceFileKey(path: string): string {\n\tconst trimmed = path.trim()\n\tif (!trimmed) {\n\t\tthrow new ToolError('File path is empty', { code: 'bad_input' })\n\t}\n\tconst noLead = trimmed.replace(/^\\/+/, '')\n\tconst under = noLead.startsWith('workspace/') ? noLead : `workspace/${noLead}`\n\t// Reject traversal\n\tconst parts = under.split('/')\n\tif (parts.some((p) => p === '..' || p === '')) {\n\t\tthrow new ToolError('File path must stay under workspace', {\n\t\t\tcode: 'bad_input',\n\t\t\tdetails: { path: trimmed }\n\t\t})\n\t}\n\treturn under\n}\n\n/** Absolute workspace path for shell list/rm (leading slash). */\nexport function workspaceAbsolutePath(path: string): string {\n\tconst key = workspaceFileKey(path)\n\treturn `/${key}`\n}\n\n/** Shell-safe single-quoted string. */\nexport function shellQuote(value: string): string {\n\treturn `'${value.replaceAll(\"'\", `'\\\\''`)}'`\n}\n\n/**\n * Resolve write-file body to raw bytes (text UTF-8 or base64).\n * Enforces MAX_FILE_BYTES (bridge limit).\n */\nexport function resolveWriteFileBytes(input: {\n\ttext?: string | undefined\n\tbody_base64?: string | undefined\n}): Uint8Array {\n\tif (input.body_base64 !== undefined && input.text !== undefined) {\n\t\tthrow new ToolError('Provide exactly one of text or body_base64', { code: 'bad_input' })\n\t}\n\tif (input.body_base64 !== undefined) {\n\t\tconst bytes = base64ToBytes(input.body_base64)\n\t\tif (bytes.byteLength > MAX_FILE_BYTES) {\n\t\t\tthrow new ToolError('Sandbox file exceeds max byte limit', {\n\t\t\t\tcode: 'too_large',\n\t\t\t\tdetails: { max_bytes: MAX_FILE_BYTES, content_length: bytes.byteLength }\n\t\t\t})\n\t\t}\n\t\treturn bytes\n\t}\n\tif (input.text !== undefined) {\n\t\tconst bytes = utf8ToBytes(input.text)\n\t\tif (bytes.byteLength > MAX_FILE_BYTES) {\n\t\t\tthrow new ToolError('Sandbox file exceeds max byte limit', {\n\t\t\t\tcode: 'too_large',\n\t\t\t\tdetails: { max_bytes: MAX_FILE_BYTES, content_length: bytes.byteLength }\n\t\t\t})\n\t\t}\n\t\treturn bytes\n\t}\n\tthrow new ToolError('Provide exactly one of text or body_base64', { code: 'bad_input' })\n}\n\nexport type ParsedExecStream = {\n\tstdout: string\n\tstderr: string\n\texit_code?: number\n\terror?: string\n\terror_code?: string\n}\n\nexport type ParseExecSseOptions = {\n\t/** Called for each stdout chunk as the SSE body is walked (buffer may still be complete). */\n\tonStdout?: (chunk: string) => void\n\t/** Called for each stderr chunk as the SSE body is walked. */\n\tonStderr?: (chunk: string) => void\n}\n\n/**\n * Parse bridge /exec text/event-stream body.\n * Events: stdout/stderr (base64 data), exit ({\"exit_code\":N}), error ({\"error\",\"code\"}).\n */\nexport function parseExecSse(body: string, options: ParseExecSseOptions = {}): ParsedExecStream {\n\tconst stdoutChunks: string[] = []\n\tconst stderrChunks: string[] = []\n\tlet exit_code: number | undefined\n\tlet error: string | undefined\n\tlet error_code: string | undefined\n\n\tconst blocks = body.replaceAll('\\r\\n', '\\n').split('\\n\\n')\n\tfor (const block of blocks) {\n\t\tconst lines = block.split('\\n').filter((line) => line.length > 0)\n\t\tif (lines.length === 0) continue\n\t\tlet event = 'message'\n\t\tconst dataLines: string[] = []\n\t\tfor (const line of lines) {\n\t\t\tif (line.startsWith('event:')) {\n\t\t\t\tevent = line.slice(6).trim()\n\t\t\t} else if (line.startsWith('data:')) {\n\t\t\t\tdataLines.push(line.slice(5).trimStart())\n\t\t\t}\n\t\t}\n\t\tconst data = dataLines.join('\\n')\n\t\tif (event === 'stdout' && data.length > 0) {\n\t\t\tconst chunk = decodeBase64Chunk(data)\n\t\t\tstdoutChunks.push(chunk)\n\t\t\toptions.onStdout?.(chunk)\n\t\t} else if (event === 'stderr' && data.length > 0) {\n\t\t\tconst chunk = decodeBase64Chunk(data)\n\t\t\tstderrChunks.push(chunk)\n\t\t\toptions.onStderr?.(chunk)\n\t\t} else if (event === 'exit' && data.length > 0) {\n\t\t\tconst parsed = safeJson(data)\n\t\t\tif (isPlainObject(parsed)) {\n\t\t\t\tconst code = parsed['exit_code']\n\t\t\t\tif (typeof code === 'number' && Number.isFinite(code)) exit_code = code\n\t\t\t}\n\t\t} else if (event === 'error' && data.length > 0) {\n\t\t\tconst parsed = safeJson(data)\n\t\t\tif (isPlainObject(parsed)) {\n\t\t\t\tif (isString(parsed['error'])) error = parsed['error']\n\t\t\t\tif (isString(parsed['code'])) error_code = parsed['code']\n\t\t\t} else {\n\t\t\t\terror = data\n\t\t\t}\n\t\t}\n\t}\n\n\tconst out: ParsedExecStream = {\n\t\tstdout: stdoutChunks.join(''),\n\t\tstderr: stderrChunks.join('')\n\t}\n\tif (exit_code !== undefined) out.exit_code = exit_code\n\tif (error !== undefined) out.error = error\n\tif (error_code !== undefined) out.error_code = error_code\n\treturn out\n}\n\nfunction decodeBase64Chunk(data: string): string {\n\ttry {\n\t\t// Bun/Node Buffer or atob\n\t\tif (typeof Buffer !== 'undefined') {\n\t\t\treturn Buffer.from(data, 'base64').toString('utf8')\n\t\t}\n\t\tconst binary = atob(data)\n\t\tconst bytes = new Uint8Array(binary.length)\n\t\tfor (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i)\n\t\treturn new TextDecoder().decode(bytes)\n\t} catch {\n\t\treturn data\n\t}\n}\n\nfunction safeJson(text: string): unknown {\n\ttry {\n\t\tconst value: unknown = JSON.parse(text)\n\t\treturn value\n\t} catch {\n\t\treturn undefined\n\t}\n}\n\n/** Build argv for executeCode over the bridge (no native runCode route). */\nexport function executeCodeArgv(language: string, code: string): string[] {\n\tswitch (language) {\n\t\tcase 'javascript':\n\t\tcase 'typescript':\n\t\t\treturn ['node', '-e', code]\n\t\tcase 'shell':\n\t\t\treturn ['sh', '-lc', code]\n\t\tcase 'python':\n\t\tdefault:\n\t\t\treturn ['python3', '-c', code]\n\t}\n}\n","/**\n * Cloudflare Sandbox Bridge vendor client (HttpService + Bearer).\n * Host: `new CloudflareSandboxClient(auth)`. Agent: `fromContext(ctx)`.\n * Gold: `src/vendors/resend/client.ts` + messaging ArtifactRef storage pattern.\n * @see https://developers.cloudflare.com/sandbox/bridge/http-api/\n */\n\nimport { isPlainObject, isString, trimEnd } from 'es-toolkit'\n\nimport { ToolError } from '../../core/errors'\nimport { requireAuth } from '../../core/provider'\nimport type { ToolContext } from '../../core/types'\nimport { bytesToBase64, bytesToUtf8, toArrayBuffer } from '../../shared/bytes'\nimport { HttpService } from '../../transport/http-service'\nimport type { HttpServiceOptions } from '../../transport/http-service'\nimport { S3Client } from '../s3'\nimport type {\n\tCloudflareSandboxAuth,\n\tCreateBridgeSessionOutput,\n\tCreateSandboxOutput,\n\tDeleteBridgeSessionInput,\n\tDeleteBridgeSessionOutput,\n\tDestroySandboxOutput,\n\tExecInput,\n\tExecOutput,\n\tExecuteCodeInput,\n\tExportArtifactInput,\n\tExportArtifactOutput,\n\tHealthOutput,\n\tImportArtifactInput,\n\tImportArtifactOutput,\n\tListFilesInput,\n\tListFilesOutput,\n\tMountBucketInput,\n\tMountBucketOutput,\n\tReadFileInput,\n\tReadFileOutput,\n\tReadFilesInput,\n\tReadFilesOutput,\n\tRemoveFilesInput,\n\tRemoveFilesOutput,\n\tRunningOutput,\n\tSandboxIdInput,\n\tUnmountBucketInput,\n\tUnmountBucketOutput,\n\tWriteFileInput,\n\tWriteFileOutput,\n\tWriteFilesInput,\n\tWriteFilesOutput\n} from './contracts'\nimport {\n\tDEFAULT_EXEC_TIMEOUT_MS,\n\tMAX_FILE_BYTES,\n\tMAX_LIST_FILES,\n\tcloudflareSandboxAuthSchema,\n\tmountBucketInputSchema,\n\tunmountBucketInputSchema\n} from './contracts'\nimport {\n\texecuteCodeArgv,\n\tparseExecSse,\n\tresolveWriteFileBytes,\n\tshellQuote,\n\tworkspaceAbsolutePath,\n\tworkspaceFileKey\n} from './domain'\n\nexport type CloudflareSandboxClientOptions = Pick<HttpServiceOptions, 'fetch' | 'signal'>\n\nexport class CloudflareSandboxClient {\n\treadonly #http: HttpService\n\treadonly #storage: S3Client | undefined\n\t/** Optional S3 auth fields for endpoint mount credential fallback (Mastra workspace FS). */\n\treadonly #storageAuth:\n\t\t| {\n\t\t\t\taccess_key_id: string\n\t\t\t\tsecret_access_key: string\n\t\t\t\tendpoint?: string | undefined\n\t\t  }\n\t\t| undefined\n\n\tconstructor(auth: CloudflareSandboxAuth, options: CloudflareSandboxClientOptions = {}) {\n\t\tconst parsed = cloudflareSandboxAuthSchema.safeParse(auth)\n\t\tif (!parsed.success) {\n\t\t\tthrow new ToolError('Invalid Cloudflare Sandbox auth credentials', {\n\t\t\t\tcode: 'bad_auth',\n\t\t\t\tdetails: { issues: parsed.error.issues.map((issue) => issue.message) }\n\t\t\t})\n\t\t}\n\t\tthis.#http = new HttpService({\n\t\t\tbaseURL: trimEnd(parsed.data.base_url, '/'),\n\t\t\theaders: {\n\t\t\t\tAuthorization: `Bearer ${parsed.data.api_key}`\n\t\t\t},\n\t\t\ttimeout: 120_000,\n\t\t\tlabel: 'Cloudflare Sandbox',\n\t\t\t...(options.fetch && { fetch: options.fetch }),\n\t\t\t...(options.signal && { signal: options.signal })\n\t\t})\n\t\tthis.#storage = parsed.data.storage\n\t\t\t? new S3Client(parsed.data.storage, {\n\t\t\t\t\t...(options.fetch && { fetch: options.fetch }),\n\t\t\t\t\t...(options.signal && { signal: options.signal })\n\t\t\t\t})\n\t\t\t: undefined\n\t\tthis.#storageAuth = parsed.data.storage\n\t\t\t? {\n\t\t\t\t\taccess_key_id: parsed.data.storage.access_key_id,\n\t\t\t\t\tsecret_access_key: parsed.data.storage.secret_access_key,\n\t\t\t\t\t...(parsed.data.storage.endpoint && { endpoint: parsed.data.storage.endpoint })\n\t\t\t\t}\n\t\t\t: undefined\n\t}\n\n\tstatic fromContext(ctx: ToolContext): CloudflareSandboxClient {\n\t\treturn new CloudflareSandboxClient(requireAuth(ctx, cloudflareSandboxAuthSchema), {\n\t\t\t...(ctx.fetch && { fetch: ctx.fetch }),\n\t\t\t...(ctx.signal && { signal: ctx.signal })\n\t\t})\n\t}\n\n\t/** Liveness probe on the bridge. */\n\tasync health(): Promise<HealthOutput> {\n\t\tconst { data } = await this.#http.get('/health', {\n\t\t\tlabel: 'Cloudflare Sandbox health'\n\t\t})\n\t\tif (isPlainObject(data) && data['ok'] === true) return { ok: true }\n\t\tif (isPlainObject(data) && data['ok'] === false) return { ok: false }\n\t\treturn { ok: true }\n\t}\n\n\tasync create(): Promise<CreateSandboxOutput> {\n\t\tconst { data } = await this.#http.post('/v1/sandbox', undefined, {\n\t\t\tlabel: 'Cloudflare Sandbox create'\n\t\t})\n\t\tif (!isPlainObject(data) || !isString(data['id'])) {\n\t\t\tthrow new ToolError('Unexpected create sandbox response', { code: 'upstream' })\n\t\t}\n\t\treturn { sandbox_id: data['id'] }\n\t}\n\n\tasync destroy(input: SandboxIdInput): Promise<DestroySandboxOutput> {\n\t\tawait this.#http.delete(`/v1/sandbox/${encodeURIComponent(input.sandbox_id)}`, {\n\t\t\tlabel: 'Cloudflare Sandbox destroy'\n\t\t})\n\t\treturn { sandbox_id: input.sandbox_id, destroyed: true }\n\t}\n\n\tasync running(input: SandboxIdInput): Promise<RunningOutput> {\n\t\tconst { data } = await this.#http.get(`/v1/sandbox/${encodeURIComponent(input.sandbox_id)}/running`, {\n\t\t\tlabel: 'Cloudflare Sandbox running'\n\t\t})\n\t\tif (!isPlainObject(data) || typeof data['running'] !== 'boolean') {\n\t\t\tthrow new ToolError('Unexpected running response', { code: 'upstream' })\n\t\t}\n\t\treturn { sandbox_id: input.sandbox_id, running: data['running'] }\n\t}\n\n\t/**\n\t * Run a command. Bridge returns text/event-stream (stdout/stderr base64 + exit).\n\t * Uses HttpService.bytes so ofetch does not try to JSON-parse the SSE body.\n\t * Optional onStdout/onStderr fire while walking the buffered SSE (not true wire streaming).\n\t */\n\tasync exec(\n\t\tinput: ExecInput,\n\t\tstream: { onStdout?: (chunk: string) => void; onStderr?: (chunk: string) => void } = {}\n\t): Promise<ExecOutput> {\n\t\tconst body: Record<string, unknown> = {\n\t\t\targv: input.argv,\n\t\t\ttimeout_ms: input.timeout_ms ?? DEFAULT_EXEC_TIMEOUT_MS\n\t\t}\n\t\tif (input.cwd) body['cwd'] = input.cwd\n\t\tif (input.env && Object.keys(input.env).length > 0) body['env'] = input.env\n\n\t\tconst headers: Record<string, string> = {\n\t\t\t'Content-Type': 'application/json',\n\t\t\tAccept: 'text/event-stream'\n\t\t}\n\t\tif (input.session_id) headers['Session-Id'] = input.session_id\n\n\t\tconst { bytes } = await this.#http.bytes('POST', `/v1/sandbox/${encodeURIComponent(input.sandbox_id)}/exec`, {\n\t\t\tbody,\n\t\t\theaders,\n\t\t\tlabel: 'Cloudflare Sandbox exec'\n\t\t})\n\t\tconst text = new TextDecoder().decode(bytes)\n\t\tconst parsed = parseExecSse(text, {\n\t\t\t...(stream.onStdout && { onStdout: stream.onStdout }),\n\t\t\t...(stream.onStderr && { onStderr: stream.onStderr })\n\t\t})\n\t\tif (parsed.error && parsed.exit_code === undefined) {\n\t\t\tthrow new ToolError(parsed.error, {\n\t\t\t\tcode: 'upstream',\n\t\t\t\tdetails: {\n\t\t\t\t\t...(parsed.error_code && { error_code: parsed.error_code }),\n\t\t\t\t\tsandbox_id: input.sandbox_id\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t\tconst exit_code = parsed.exit_code ?? (parsed.error ? 1 : 0)\n\t\tconst out: ExecOutput = {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tstdout: parsed.stdout,\n\t\t\tstderr: parsed.stderr,\n\t\t\texit_code,\n\t\t\tsuccess: exit_code === 0\n\t\t}\n\t\tif (parsed.error) out.error = parsed.error\n\t\tif (parsed.error_code) out.error_code = parsed.error_code\n\t\treturn out\n\t}\n\n\t/** Execute source via python3/node/sh on the bridge (no native runCode route). */\n\tasync executeCode(input: ExecuteCodeInput): Promise<ExecOutput> {\n\t\tconst language = input.language ?? 'python'\n\t\treturn this.exec({\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\targv: executeCodeArgv(language, input.code),\n\t\t\t...(input.timeout_ms !== undefined && { timeout_ms: input.timeout_ms }),\n\t\t\t...(input.session_id && { session_id: input.session_id })\n\t\t})\n\t}\n\n\tasync writeFile(input: WriteFileInput): Promise<WriteFileOutput> {\n\t\tconst bytes = resolveWriteFileBytes(input)\n\t\tawait this.#putFileBytes(input.sandbox_id, input.path, bytes, input.session_id)\n\t\treturn {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tpath: input.path,\n\t\t\tok: true,\n\t\t\tbyte_length: bytes.byteLength\n\t\t}\n\t}\n\n\tasync readFile(input: ReadFileInput): Promise<ReadFileOutput> {\n\t\tconst bytes = await this.#getFileBytes(input.sandbox_id, input.path, input.session_id)\n\t\tconst encoding = input.encoding ?? 'utf8'\n\t\tconst out: ReadFileOutput = {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tpath: input.path,\n\t\t\tbyte_length: bytes.byteLength\n\t\t}\n\t\tif (encoding === 'base64') {\n\t\t\tout.body_base64 = bytesToBase64(bytes)\n\t\t} else {\n\t\t\tout.text = bytesToUtf8(bytes)\n\t\t}\n\t\treturn out\n\t}\n\n\tasync writeFiles(input: WriteFilesInput): Promise<WriteFilesOutput> {\n\t\tconst paths: string[] = []\n\t\tfor (const file of input.files) {\n\t\t\tawait this.writeFile({\n\t\t\t\tsandbox_id: input.sandbox_id,\n\t\t\t\tpath: file.path,\n\t\t\t\t...(file.text !== undefined && { text: file.text }),\n\t\t\t\t...(file.body_base64 !== undefined && { body_base64: file.body_base64 }),\n\t\t\t\t...(input.session_id && { session_id: input.session_id })\n\t\t\t})\n\t\t\tpaths.push(file.path)\n\t\t}\n\t\treturn { sandbox_id: input.sandbox_id, paths, ok: true }\n\t}\n\n\tasync readFiles(input: ReadFilesInput): Promise<ReadFilesOutput> {\n\t\tconst files: ReadFilesOutput['files'] = []\n\t\tfor (const path of input.paths) {\n\t\t\tconst row = await this.readFile({\n\t\t\t\tsandbox_id: input.sandbox_id,\n\t\t\t\tpath,\n\t\t\t\t...(input.encoding && { encoding: input.encoding }),\n\t\t\t\t...(input.session_id && { session_id: input.session_id })\n\t\t\t})\n\t\t\tfiles.push({\n\t\t\t\tpath: row.path,\n\t\t\t\t...(row.text !== undefined && { text: row.text }),\n\t\t\t\t...(row.body_base64 !== undefined && { body_base64: row.body_base64 }),\n\t\t\t\t...(row.byte_length !== undefined && { byte_length: row.byte_length })\n\t\t\t})\n\t\t}\n\t\treturn { sandbox_id: input.sandbox_id, files }\n\t}\n\n\t/** List files via find in the workspace (bridge has no list route). */\n\tasync listFiles(input: ListFilesInput): Promise<ListFilesOutput> {\n\t\tconst dir = input.directory_path?.trim() || '/workspace'\n\t\tconst abs = dir.startsWith('/') ? dir : workspaceAbsolutePath(dir)\n\t\tconst out = await this.exec({\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\targv: ['sh', '-lc', `find ${shellQuote(abs)} -maxdepth 4 -type f 2>/dev/null | head -n ${MAX_LIST_FILES}`],\n\t\t\t...(input.session_id && { session_id: input.session_id })\n\t\t})\n\t\tconst paths = out.stdout\n\t\t\t.split('\\n')\n\t\t\t.map((line) => line.trim())\n\t\t\t.filter((line) => line.length > 0)\n\t\treturn {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tpaths,\n\t\t\traw: { stdout: out.stdout, stderr: out.stderr, exit_code: out.exit_code }\n\t\t}\n\t}\n\n\t/** Remove files via rm (bridge has no delete-file route). */\n\tasync removeFiles(input: RemoveFilesInput): Promise<RemoveFilesOutput> {\n\t\tfor (const path of input.paths) {\n\t\t\tconst abs = path.startsWith('/') ? path : workspaceAbsolutePath(path)\n\t\t\tawait this.exec({\n\t\t\t\tsandbox_id: input.sandbox_id,\n\t\t\t\targv: ['rm', '-f', '--', abs],\n\t\t\t\t...(input.session_id && { session_id: input.session_id })\n\t\t\t})\n\t\t}\n\t\treturn { sandbox_id: input.sandbox_id, paths: input.paths, ok: true }\n\t}\n\n\t/**\n\t * Copy an object-store ArtifactRef into the sandbox workspace.\n\t * Requires auth.storage.\n\t */\n\tasync importArtifact(input: ImportArtifactInput): Promise<ImportArtifactOutput> {\n\t\tconst storage = this.#requireStorage('importArtifact')\n\t\tif (input.source.store !== 'object') {\n\t\t\tthrow new ToolError('Sandbox importArtifact only supports store=object ArtifactRefs', {\n\t\t\t\tcode: 'bad_input'\n\t\t\t})\n\t\t}\n\t\tconst bytes = await storage.getBytes(input.source.key, { maxBytes: MAX_FILE_BYTES })\n\t\tawait this.#putFileBytes(input.sandbox_id, input.path, bytes, input.session_id)\n\t\treturn {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tpath: input.path,\n\t\t\tok: true,\n\t\t\tbyte_length: bytes.byteLength\n\t\t}\n\t}\n\n\t/**\n\t * Copy a sandbox workspace file to object storage and return an ArtifactRef.\n\t * Requires auth.storage.\n\t */\n\tasync exportArtifact(input: ExportArtifactInput): Promise<ExportArtifactOutput> {\n\t\tconst storage = this.#requireStorage('exportArtifact')\n\t\tconst bytes = await this.#getFileBytes(input.sandbox_id, input.path, input.session_id)\n\t\tawait storage.putBytes(input.destination_key, bytes)\n\t\treturn {\n\t\t\tsandbox_id: input.sandbox_id,\n\t\t\tpath: input.path,\n\t\t\tartifact: {\n\t\t\t\tstore: 'object',\n\t\t\t\tkey: input.destination_key,\n\t\t\t\tbyte_length: bytes.byteLength\n\t\t\t}\n\t\t}\n\t}\n\n\tasync createSession(input: SandboxIdInput): Promise<CreateBridgeSessionOutput> {\n\t\tconst { data } = await this.#http.post(`/v1/sandbox/${encodeURIComponent(input.sandbox_id)}/session`, undefined, {\n\t\t\tlabel: 'Cloudflare Sandbox createSession'\n\t\t})\n\t\tif (!isPlainObject(data) || !isString(data['id'])) {\n\t\t\tthrow new ToolError('Unexpected create session response', { code: 'upstream' })\n\t\t}\n\t\treturn { sandbox_id: input.sandbox_id, session_id: data['id'] }\n\t}\n\n\tasync deleteSession(input: DeleteBridgeSessionInput): Promise<DeleteBridgeSessionOutput> {\n\t\tawait this.#http.delete(\n\t\t\t`/v1/sandbox/${encodeURIComponent(input.sandbox_id)}/session/${encodeURIComponent(input.session_id)}`,\n\t\t\t{ label: 'Cloudflare Sandbox deleteSession' }\n\t\t)\n\t\treturn { sandbox_id: input.sandbox_id, session_id: input.session_id, deleted: true }\n\t}\n\n\t/**\n\t * Mount an S3-compatible bucket (or Worker R2 binding) at an absolute path in the sandbox.\n\t * Bridge: `POST /v1/sandbox/:id/mount`.\n\t * For Mastra / host workspace S3 FS: pass `endpoint` + credentials (or rely on auth.storage).\n\t * @see https://developers.cloudflare.com/sandbox/bridge/http-api/#bucket-mounts\n\t */\n\tasync mount(input: MountBucketInput): Promise<MountBucketOutput> {\n\t\tconst parsed = mountBucketInputSchema.safeParse(input)\n\t\tif (!parsed.success) {\n\t\t\tthrow new ToolError('Invalid sandbox mount input', {\n\t\t\t\tcode: 'bad_input',\n\t\t\t\tdetails: { issues: parsed.error.issues.map((issue) => issue.message) }\n\t\t\t})\n\t\t}\n\t\tconst data = parsed.data\n\t\tif (data.local_bucket && data.endpoint) {\n\t\t\tthrow new ToolError('local_bucket and endpoint are mutually exclusive on mount', { code: 'bad_input' })\n\t\t}\n\t\tif (data.prefix !== undefined && !data.prefix.startsWith('/')) {\n\t\t\tthrow new ToolError('mount prefix must start with /', { code: 'bad_input' })\n\t\t}\n\n\t\t// Endpoint mounts only: omit endpoint for Worker R2 binding mounts.\n\t\tconst endpoint = data.local_bucket ? undefined : data.endpoint\n\t\t// Credentials: explicit input, else auth.storage when doing an endpoint mount (Mastra S3 FS).\n\t\tconst accessKeyId = data.access_key_id ?? (endpoint !== undefined ? this.#storageAuth?.access_key_id : undefined)\n\t\tconst secretAccessKey =\n\t\t\tdata.secret_access_key ?? (endpoint !== undefined ? this.#storageAuth?.secret_access_key : undefined)\n\n\t\tconst options: Record<string, unknown> = {}\n\t\tif (endpoint) options['endpoint'] = endpoint\n\t\tif (data.provider) options['provider'] = data.provider\n\t\tif (data.read_only !== undefined) options['readOnly'] = data.read_only\n\t\tif (data.prefix) options['prefix'] = data.prefix\n\t\tif (data.credential_proxy !== undefined) options['credentialProxy'] = data.credential_proxy\n\t\tif (data.local_bucket) options['localBucket'] = true\n\t\tif (data.s3fs_options && data.s3fs_options.length > 0) options['s3fsOptions'] = data.s3fs_options\n\t\tif (endpoint && accessKeyId && secretAccessKey) {\n\t\t\toptions['credentials'] = {\n\t\t\t\taccessKeyId,\n\t\t\t\tsecretAccessKey\n\t\t\t}\n\t\t}\n\n\t\tconst body: Record<string, unknown> = {\n\t\t\tbucket: data.bucket,\n\t\t\tmountPath: data.mount_path\n\t\t}\n\t\tif (Object.keys(options).length > 0) body['options'] = options\n\n\t\tawait this.#http.post(`/v1/sandbox/${encodeURIComponent(data.sandbox_id)}/mount`, body, {\n\t\t\tlabel: 'Cloudflare Sandbox mount'\n\t\t})\n\t\treturn {\n\t\t\tsandbox_id: data.sandbox_id,\n\t\t\tbucket: data.bucket,\n\t\t\tmount_path: data.mount_path,\n\t\t\tok: true\n\t\t}\n\t}\n\n\t/**\n\t * Unmount a previously mounted bucket path.\n\t * Bridge: `POST /v1/sandbox/:id/unmount` with `{ mountPath }`.\n\t * Mounts are also cleared when the sandbox is destroyed.\n\t */\n\tasync unmount(input: UnmountBucketInput): Promise<UnmountBucketOutput> {\n\t\tconst parsed = unmountBucketInputSchema.safeParse(input)\n\t\tif (!parsed.success) {\n\t\t\tthrow new ToolError('Invalid sandbox unmount input', {\n\t\t\t\tcode: 'bad_input',\n\t\t\t\tdetails: { issues: parsed.error.issues.map((issue) => issue.message) }\n\t\t\t})\n\t\t}\n\t\tconst data = parsed.data\n\t\tawait this.#http.post(\n\t\t\t`/v1/sandbox/${encodeURIComponent(data.sandbox_id)}/unmount`,\n\t\t\t{ mountPath: data.mount_path },\n\t\t\t{ label: 'Cloudflare Sandbox unmount' }\n\t\t)\n\t\treturn {\n\t\t\tsandbox_id: data.sandbox_id,\n\t\t\tmount_path: data.mount_path,\n\t\t\tok: true\n\t\t}\n\t}\n\n\t#requireStorage(op: string): S3Client {\n\t\tif (!this.#storage) {\n\t\t\tthrow new ToolError(`${op} requires storage credentials on sandbox auth`, {\n\t\t\t\tcode: 'bad_auth'\n\t\t\t})\n\t\t}\n\t\treturn this.#storage\n\t}\n\n\tasync #putFileBytes(\n\t\tsandboxId: string,\n\t\tpath: string,\n\t\tbytes: Uint8Array,\n\t\tsessionId: string | undefined\n\t): Promise<void> {\n\t\tconst key = workspaceFileKey(path)\n\t\tconst headers: Record<string, string> = {\n\t\t\t'Content-Type': 'application/octet-stream'\n\t\t}\n\t\tif (sessionId) headers['Session-Id'] = sessionId\n\t\tconst { data } = await this.#http.put(\n\t\t\t`/v1/sandbox/${encodeURIComponent(sandboxId)}/file/${key.split('/').map(encodeURIComponent).join('/')}`,\n\t\t\ttoArrayBuffer(bytes),\n\t\t\t{ headers, label: 'Cloudflare Sandbox writeFile' }\n\t\t)\n\t\tif (isPlainObject(data) && data['ok'] === false) {\n\t\t\tthrow new ToolError('Sandbox writeFile failed', { code: 'upstream' })\n\t\t}\n\t}\n\n\tasync #getFileBytes(sandboxId: string, path: string, sessionId: string | undefined): Promise<Uint8Array> {\n\t\tconst key = workspaceFileKey(path)\n\t\tconst headers: Record<string, string> = {}\n\t\tif (sessionId) headers['Session-Id'] = sessionId\n\t\tconst { bytes } = await this.#http.bytes(\n\t\t\t'GET',\n\t\t\t`/v1/sandbox/${encodeURIComponent(sandboxId)}/file/${key.split('/').map(encodeURIComponent).join('/')}`,\n\t\t\t{ headers, label: 'Cloudflare Sandbox readFile', maxBytes: MAX_FILE_BYTES }\n\t\t)\n\t\treturn bytes\n\t}\n}\n","import { z } from 'zod'\n\nimport { defineModule, defineTool } from '../../core/define'\nimport { CloudflareSandboxClient } from './client'\nimport {\n\tcloudflareSandboxAuthSchema,\n\tcreateBridgeSessionOutputSchema,\n\tcreateSandboxOutputSchema,\n\tdeleteBridgeSessionInputSchema,\n\tdeleteBridgeSessionOutputSchema,\n\tdestroySandboxOutputSchema,\n\texecInputSchema,\n\texecOutputSchema,\n\texecuteCodeInputSchema,\n\texportArtifactInputSchema,\n\texportArtifactOutputSchema,\n\thealthOutputSchema,\n\timportArtifactInputSchema,\n\timportArtifactOutputSchema,\n\tlistFilesInputSchema,\n\tlistFilesOutputSchema,\n\treadFileInputSchema,\n\treadFileOutputSchema,\n\treadFilesInputSchema,\n\treadFilesOutputSchema,\n\tremoveFilesInputSchema,\n\tremoveFilesOutputSchema,\n\trunningOutputSchema,\n\tsandboxIdInputSchema,\n\twriteFileInputSchema,\n\twriteFileOutputSchema,\n\twriteFilesInputSchema,\n\twriteFilesOutputSchema\n} from './contracts'\n\nconst id = 'cloudflare-sandbox'\nconst emptyInputSchema = z.object({})\n\nexport const cloudflareSandboxHealthTool = defineTool({\n\tid: `${id}-health`,\n\tname: 'cloudflareSandboxHealth',\n\tdescription:\n\t\t'Check whether the Cloudflare Sandbox bridge is reachable. Use only for explicit availability diagnostics; ordinary sandbox work should begin with cloudflare-sandbox-create.',\n\tinputSchema: emptyInputSchema,\n\toutputSchema: healthOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (_input, ctx) => CloudflareSandboxClient.fromContext(ctx).health()\n})\n\nexport const cloudflareSandboxCreateTool = defineTool({\n\tid: `${id}-create`,\n\tname: 'cloudflareSandboxCreate',\n\tdescription:\n\t\t'Create an isolated Cloudflare sandbox and return sandbox_id. Use only when arbitrary code, commands, or temporary files are required and no purpose-built tool covers the task. Do not create a sandbox to build or edit supported deliverables.',\n\tinputSchema: emptyInputSchema,\n\toutputSchema: createSandboxOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (_input, ctx) => CloudflareSandboxClient.fromContext(ctx).create()\n})\n\nexport const cloudflareSandboxDestroyTool = defineTool({\n\tid: `${id}-destroy`,\n\tname: 'cloudflareSandboxDestroy',\n\tdescription:\n\t\t'Destroy a Cloudflare sandbox by sandbox_id and release its temporary files and resources. Call after the sandbox workflow is complete and any required output file has been exported.',\n\tinputSchema: sandboxIdInputSchema,\n\toutputSchema: destroySandboxOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).destroy(input)\n})\n\nexport const cloudflareSandboxRunningTool = defineTool({\n\tid: `${id}-running`,\n\tname: 'cloudflareSandboxRunning',\n\tdescription:\n\t\t'Check whether a Cloudflare sandbox is currently running. Use before continuing work on an existing sandbox_id; this does not execute code or inspect files.',\n\tinputSchema: sandboxIdInputSchema,\n\toutputSchema: runningOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).running(input)\n})\n\nexport const cloudflareSandboxExecTool = defineTool({\n\tid: `${id}-exec`,\n\tname: 'cloudflareSandboxExec',\n\tdescription:\n\t\t'One-shot argv exec in a Cloudflare sandbox (stdout/stderr/exit_code). Prefer a host workspace agent for multi-step shell; use tools for workflow one-shots. Optional env when the bridge supports it.',\n\tinputSchema: execInputSchema,\n\toutputSchema: execOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\ttags: ['exec', 'one-shot', 'compute'],\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).exec(input)\n})\n\nexport const cloudflareSandboxExecuteCodeTool = defineTool({\n\tid: `${id}-execute-code`,\n\tname: 'cloudflareSandboxExecuteCode',\n\tdescription:\n\t\t'Execute Python, JavaScript, or shell source in a Cloudflare sandbox. Use as a fallback for computation or automation with no dedicated tool. Do not generate or edit supported documents, spreadsheets, presentations, PDFs, or images here when a purpose-built tool is available.',\n\tinputSchema: executeCodeInputSchema,\n\toutputSchema: execOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).executeCode(input)\n})\n\nexport const cloudflareSandboxWriteFileTool = defineTool({\n\tid: `${id}-write-file`,\n\tname: 'cloudflareSandboxWriteFile',\n\tdescription:\n\t\t'Write one temporary file under the Cloudflare sandbox workspace from UTF-8 text or base64 bytes, up to 32 MiB decoded. Use for sandbox intermediates. This is not durable delivery; export a genuinely sandbox-produced final file with cloudflare-sandbox-export-artifact.',\n\tinputSchema: writeFileInputSchema,\n\toutputSchema: writeFileOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).writeFile(input)\n})\n\nexport const cloudflareSandboxReadFileTool = defineTool({\n\tid: `${id}-read-file`,\n\tname: 'cloudflareSandboxReadFile',\n\tdescription:\n\t\t'Read one temporary file from the Cloudflare sandbox workspace as UTF-8 or base64. Use for sandbox intermediates; use format-aware readers for supported ArtifactRefs.',\n\tinputSchema: readFileInputSchema,\n\toutputSchema: readFileOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).readFile(input)\n})\n\nexport const cloudflareSandboxWriteFilesTool = defineTool({\n\tid: `${id}-write-files`,\n\tname: 'cloudflareSandboxWriteFiles',\n\tdescription:\n\t\t'Write multiple temporary files under the Cloudflare sandbox workspace from text or base64. Use for sandbox intermediates, not final document generation. Export only a final file that the sandbox genuinely had to produce.',\n\tinputSchema: writeFilesInputSchema,\n\toutputSchema: writeFilesOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).writeFiles(input)\n})\n\nexport const cloudflareSandboxReadFilesTool = defineTool({\n\tid: `${id}-read-files`,\n\tname: 'cloudflareSandboxReadFiles',\n\tdescription:\n\t\t'Read multiple temporary files from the Cloudflare sandbox workspace as UTF-8 or base64. Use only within an active sandbox workflow; use format-aware readers for supported ArtifactRefs.',\n\tinputSchema: readFilesInputSchema,\n\toutputSchema: readFilesOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).readFiles(input)\n})\n\nexport const cloudflareSandboxListFilesTool = defineTool({\n\tid: `${id}-list-files`,\n\tname: 'cloudflareSandboxListFiles',\n\tdescription:\n\t\t'List temporary files under a Cloudflare sandbox directory, defaulting to /workspace. Use to locate sandbox intermediates, not durable workspace files or ArtifactRefs.',\n\tinputSchema: listFilesInputSchema,\n\toutputSchema: listFilesOutputSchema,\n\tsideEffect: 'read',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).listFiles(input)\n})\n\nexport const cloudflareSandboxRemoveFilesTool = defineTool({\n\tid: `${id}-remove-files`,\n\tname: 'cloudflareSandboxRemoveFiles',\n\tdescription:\n\t\t'Remove temporary files from the Cloudflare sandbox workspace by path. Use only for sandbox cleanup; this does not delete durable workspace files or ArtifactRefs.',\n\tinputSchema: removeFilesInputSchema,\n\toutputSchema: removeFilesOutputSchema,\n\tsideEffect: 'delete',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).removeFiles(input)\n})\n\nexport const cloudflareSandboxImportArtifactTool = defineTool({\n\tid: `${id}-import-artifact`,\n\tname: 'cloudflareSandboxImportArtifact',\n\tdescription:\n\t\t'Copy an existing object-store ArtifactRef into a Cloudflare sandbox workspace. Use only when arbitrary sandbox computation must consume that file. Do not import a supported document merely to read or edit it with general code.',\n\tinputSchema: importArtifactInputSchema,\n\toutputSchema: importArtifactOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).importArtifact(input)\n})\n\nexport const cloudflareSandboxExportArtifactTool = defineTool({\n\tid: `${id}-export-artifact`,\n\tname: 'cloudflareSandboxExportArtifact',\n\tdescription:\n\t\t'Persist a final file that was genuinely created inside the Cloudflare sandbox and return its ArtifactRef for delivery. Use only after sandbox work. Do not call for files returned by document, presentation, PDF, image, render, or conversion tools; those ArtifactRefs are already final.',\n\tinputSchema: exportArtifactInputSchema,\n\toutputSchema: exportArtifactOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).exportArtifact(input)\n})\n\nexport const cloudflareSandboxCreateSessionTool = defineTool({\n\tid: `${id}-create-session`,\n\tname: 'cloudflareSandboxCreateSession',\n\tdescription:\n\t\t'Create an isolated execution session inside an existing Cloudflare sandbox and return session_id. Use only when separate working directories or runtime state are needed; pass the id to later command and file calls.',\n\tinputSchema: sandboxIdInputSchema,\n\toutputSchema: createBridgeSessionOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).createSession(input)\n})\n\nexport const cloudflareSandboxDeleteSessionTool = defineTool({\n\tid: `${id}-delete-session`,\n\tname: 'cloudflareSandboxDeleteSession',\n\tdescription:\n\t\t'Delete an isolated execution session inside a Cloudflare sandbox. Use after session-specific work is complete; this does not destroy the parent sandbox.',\n\tinputSchema: deleteBridgeSessionInputSchema,\n\toutputSchema: deleteBridgeSessionOutputSchema,\n\tsideEffect: 'write',\n\truntime: 'both',\n\tnetwork: true,\n\texecute: async (input, ctx) => CloudflareSandboxClient.fromContext(ctx).deleteSession(input)\n})\n\nexport const cloudflareSandboxModule = defineModule({\n\tid,\n\ttitle: 'Cloudflare Sandbox',\n\tdescription:\n\t\t'Cloudflare sandbox bridge: one-shot exec/files/sessions for workflows. Prefer a host workspace agent for multi-step shell. Client export remains first-class for Workspace hybrids. Prefer purpose-built document tools over sandbox for office formats.',\n\truntime: 'both',\n\tauth: { type: 'custom', schema: cloudflareSandboxAuthSchema },\n\tcategories: ['compute', 'sandbox', 'cloudflare'],\n\tclassification: 'standard',\n\ttags: ['exec', 'workspace', 'bridge'],\n\ttools: [\n\t\tcloudflareSandboxHealthTool,\n\t\tcloudflareSandboxCreateTool,\n\t\tcloudflareSandboxDestroyTool,\n\t\tcloudflareSandboxRunningTool,\n\t\tcloudflareSandboxExecTool,\n\t\tcloudflareSandboxExecuteCodeTool,\n\t\tcloudflareSandboxWriteFileTool,\n\t\tcloudflareSandboxReadFileTool,\n\t\tcloudflareSandboxWriteFilesTool,\n\t\tcloudflareSandboxReadFilesTool,\n\t\tcloudflareSandboxListFilesTool,\n\t\tcloudflareSandboxRemoveFilesTool,\n\t\tcloudflareSandboxImportArtifactTool,\n\t\tcloudflareSandboxExportArtifactTool,\n\t\tcloudflareSandboxCreateSessionTool,\n\t\tcloudflareSandboxDeleteSessionTool\n\t]\n})\n"],"mappings":";;;;;;;;;;;;;;AAUA,MAAa,WAAW;AACxB,MAAa,gBAAgB;AAC7B,MAAa,gBAAgB;AAC7B,MAAa,gBAAgB;;AAE7B,MAAa,iBAAiB,KAAK,OAAO;AAC1C,MAAa,kBAAkB;AAC/B,MAAa,iBAAiB;AAC9B,MAAa,iBAAiB;AAC9B,MAAa,0BAA0B;AACvC,MAAa,sBAAsB;AAEnC,MAAa,8BAA8B,EAAE,OAAO;CACnD,UAAU,EACR,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,sFAAsF;CACjG,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,qCAAqC;CACzE,SAAS,aACP,SAAS,CAAC,CACV,SAAS,kFAAkF;AAC9F,CAAC;;AAKD,MAAa,iCAAiC,EAAE,OAAO;CACtD,OAAO,EAAE,QAAQ,QAAQ,CAAC,CAAC,SAAS,sCAAsC;CAC1E,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,YAAY;CAC5C,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,gCAAgC;CAClF,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,+BAA+B;CAC/E,aAAa,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,0BAA0B;AAC3E,CAAC;AAID,MAAM,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,+BAA+B;AAErF,MAAa,uBAAuB,EAAE,OAAO,EAC5C,YAAY,UACb,CAAC;AAED,MAAa,4BAA4B,EAAE,OAAO,EACjD,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,oBAAoB,EACrD,CAAC;AAED,MAAa,6BAA6B,EAAE,OAAO;CAClD,YAAY,EAAE,OAAO;CACrB,WAAW,EAAE,QAAQ,IAAI;AAC1B,CAAC;AAED,MAAa,sBAAsB,EAAE,OAAO;CAC3C,YAAY,EAAE,OAAO;CACrB,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,+BAA+B;AAC9D,CAAC;AAED,MAAa,qBAAqB,EAAE,OAAO,EAC1C,IAAI,EAAE,QAAQ,EACf,CAAC;AAED,MAAa,kBAAkB,EAAE,OAAO;CACvC,YAAY;CACZ,MAAM,EACJ,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAC3C,IAAI,CAAC,CAAC,CACN,IAAA,EAAY,CAAC,CACb,SAAS,qFAA+E;CAC1F,YAAY,EACV,IAAI,CAAC,CACL,IAAI,CAAC,CAAC,CACN,IAAI,mBAAmB,CAAC,CACxB,SAAS,CAAC,CACV,SAAS,+BAA+B,wBAAwB,EAAE;CACpE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,wCAAwC;CACtG,YAAY,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SAAS,CAAC,CACV,SAAS,6EAA6E;CACxF,KAAK,EACH,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,CACzD,SAAS,CAAC,CACV,SAAS,6EAA6E;AACzF,CAAC;AAED,MAAa,mBAAmB,EAAE,OAAO;CACxC,YAAY,EAAE,OAAO;CACrB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,yBAAyB;CACrD,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS,wBAAwB;CACpD,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,kDAAkD;CAClG,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,0BAA0B;CACxD,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,sDAAsD;CAC5F,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,gCAAgC;AAC5E,CAAC;AAED,MAAM,gBAAgB,EACpB,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,aAAa,CAAC,CAClB,SAAS,2DAA2D;AAEtE,MAAM,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,4BAA4B;AAElG,MAAM,sBAAsB;CAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,oDAAoD;CAC5G,aAAa,EACX,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,kFAAkF;AAC9F;AAEA,SAAS,qBACR,KACA,KACO;CAGP,IAFgB,IAAI,SAAS,KAAA,OACd,IAAI,gBAAgB,KAAA,IAElC,IAAI,SAAS;EACZ,MAAM;EACN,SAAS;CACV,CAAC;AAEH;AAEA,MAAa,uBAAuB,EAClC,OAAO;CACP,YAAY;CACZ,MAAM;CACN,GAAG;CACH,YAAY;AACb,CAAC,CAAC,CACD,YAAY,oBAAoB;AAElC,MAAa,wBAAwB,EAAE,OAAO;CAC7C,YAAY,EAAE,OAAO;CACrB,MAAM,EAAE,OAAO;CACf,IAAI,EAAE,QAAQ,IAAI;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,wCAAwC;AACzG,CAAC;AAED,MAAa,sBAAsB,EAAE,OAAO;CAC3C,YAAY;CACZ,MAAM;CACN,UAAU,EACR,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CACxB,SAAS,CAAC,CACV,SAAS,kEAAkE;CAC7E,YAAY;AACb,CAAC;AAED,MAAa,uBAAuB,EAAE,OAAO;CAC5C,YAAY,EAAE,OAAO;CACrB,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,gDAAgD;CACrF,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yCAAyC;CACrF,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,qBAAqB;AACtF,CAAC;AAED,MAAa,wBAAwB,EAAE,OAAO;CAC7C,YAAY;CACZ,OAAO,EACL,MACA,EACE,OAAO;EACP,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,sBAAsB;EAC1E,GAAG;CACJ,CAAC,CAAC,CACD,YAAY,oBAAoB,CACnC,CAAC,CACA,IAAI,CAAC,CAAC,CACN,IAAA,EAAmB,CAAC,CACpB,SAAS,2DAA2D;CACtE,YAAY;AACb,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC9C,YAAY,EAAE,OAAO;CACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;CACzB,IAAI,EAAE,QAAQ,IAAI;AACnB,CAAC;AAED,MAAa,uBAAuB,EAAE,OAAO;CAC5C,YAAY;CACZ,OAAO,EACL,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,sBAAsB,CAAC,CAAC,CAC5E,IAAI,CAAC,CAAC,CACN,IAAA,EAAkB,CAAC,CACnB,SAAS,+BAA+B;CAC1C,UAAU,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,gDAAgD;CACzG,YAAY;AACb,CAAC;AAED,MAAa,wBAAwB,EAAE,OAAO;CAC7C,YAAY,EAAE,OAAO;CACrB,OAAO,EAAE,MACR,EAAE,OAAO;EACR,MAAM,EAAE,OAAO;EACf,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;EACjC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;CACtD,CAAC,CACF;AACD,CAAC;AAED,MAAa,uBAAuB,EAAE,OAAO;CAC5C,YAAY;CACZ,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,wCAAwC;CAC1G,YAAY;AACb,CAAC;AAED,MAAa,wBAAwB,EAAE,OAAO;CAC7C,YAAY,EAAE,OAAO;CACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,iDAAiD;CACrF,KAAK,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yCAAyC;AAC/E,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC9C,YAAY;CACZ,OAAO,EACL,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAC3C,IAAI,CAAC,CAAC,CACN,IAAA,EAAkB,CAAC,CACnB,SAAS,iCAAiC;CAC5C,YAAY;AACb,CAAC;AAED,MAAa,0BAA0B,EAAE,OAAO;CAC/C,YAAY,EAAE,OAAO;CACrB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;CACzB,IAAI,EAAE,QAAQ,IAAI;AACnB,CAAC;AAED,MAAa,4BAA4B,EAAE,OAAO;CACjD,YAAY;CACZ,MAAM;CACN,QAAQ,+BAA+B,SAAS,mDAAmD;CACnG,YAAY;AACb,CAAC;AAED,MAAa,6BAA6B,EAAE,OAAO;CAClD,YAAY,EAAE,OAAO;CACrB,MAAM,EAAE,OAAO;CACf,IAAI,EAAE,QAAQ,IAAI;CAClB,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;AAC3C,CAAC;AAED,MAAa,4BAA4B,EAAE,OAAO;CACjD,YAAY;CACZ,MAAM;CACN,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,yCAAyC;CACrF,YAAY;AACb,CAAC;AAED,MAAa,6BAA6B,EAAE,OAAO;CAClD,YAAY,EAAE,OAAO;CACrB,MAAM,EAAE,OAAO;CACf,UAAU;AACX,CAAC;AAED,MAAa,kCAAkC,EAAE,OAAO;CACvD,YAAY,EAAE,OAAO;CACrB,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,yCAAyC;AAC1E,CAAC;AAED,MAAa,iCAAiC,EAAE,OAAO;CACtD,YAAY;CACZ,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,6BAA6B;AAC9E,CAAC;AAED,MAAa,kCAAkC,EAAE,OAAO;CACvD,YAAY,EAAE,OAAO;CACrB,YAAY,EAAE,OAAO;CACrB,SAAS,EAAE,QAAQ,IAAI;AACxB,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC9C,YAAY;CACZ,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,SAAS,oBAAoB;CACxE,UAAU,EACR,KAAK;EAAC;EAAU;EAAc;EAAc;CAAO,CAAC,CAAC,CACrD,SAAS,CAAC,CACV,SAAS,mCAAmC;CAC9C,YAAY,EACV,IAAI,CAAC,CACL,IAAI,CAAC,CAAC,CACN,IAAI,mBAAmB,CAAC,CACxB,SAAS,CAAC,CACV,SAAS,+BAA+B,wBAAwB,EAAE;CACpE,YAAY,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SAAS,CAAC,CACV,SAAS,6EAA6E;AACzF,CAAC;;;;;;;;;AAUD,MAAa,yBAAyB,EAAE,OAAO;CAC9C,YAAY;CACZ,QAAQ,EACN,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SACA,oHACD;CACD,YAAY,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,aAAa,CAAC,CAClB,QAAQ,MAAM,EAAE,WAAW,GAAG,GAAG,EAAE,SAAS,qDAAqD,CAAC,CAAC,CACnG,SAAS,6EAA6E;CACxF,UAAU,EACR,IAAI,CAAC,CACL,SAAS,CAAC,CACV,SACA,2IACD;CACD,UAAU,EACR,KAAK;EAAC;EAAM;EAAM;CAAK,CAAC,CAAC,CACzB,SAAS,CAAC,CACV,SAAS,iEAAiE;CAC5E,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,iCAAiC;CAC5E,QAAQ,EACN,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,aAAa,CAAC,CAClB,SAAS,CAAC,CACV,SAAS,gFAAgF;CAC3F,eAAe,EACb,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,yEAAyE;CACpF,mBAAmB,EACjB,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,CAAC,CACV,SAAS,6EAA6E;CACxF,kBAAkB,EAChB,QAAQ,CAAC,CACT,SAAS,CAAC,CACV,SACA,+IACD;CACD,cAAc,EACZ,QAAQ,CAAC,CACT,SAAS,CAAC,CACV,SAAS,uFAAuF;CAClG,cAAc,EACZ,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CACjC,IAAI,EAAE,CAAC,CACP,SAAS,CAAC,CACV,SAAS,uDAAuD;AACnE,CAAC;AAED,MAAa,0BAA0B,EAAE,OAAO;CAC/C,YAAY,EAAE,OAAO;CACrB,QAAQ,EAAE,OAAO;CACjB,YAAY,EAAE,OAAO;CACrB,IAAI,EAAE,QAAQ,IAAI;AACnB,CAAC;AAED,MAAa,2BAA2B,EAAE,OAAO;CAChD,YAAY;CACZ,YAAY,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,aAAa,CAAC,CAClB,QAAQ,MAAM,EAAE,WAAW,GAAG,GAAG,EAAE,SAAS,qDAAqD,CAAC,CAAC,CACnG,SAAS,gDAAgD;AAC5D,CAAC;AAED,MAAa,4BAA4B,EAAE,OAAO;CACjD,YAAY,EAAE,OAAO;CACrB,YAAY,EAAE,OAAO;CACrB,IAAI,EAAE,QAAQ,IAAI;AACnB,CAAC;;;;;;;AClYD,SAAgB,iBAAiB,MAAsB;CACtD,MAAM,UAAU,KAAK,KAAK;CAC1B,IAAI,CAAC,SACJ,MAAM,IAAI,UAAU,sBAAsB,EAAE,MAAM,YAAY,CAAC;CAEhE,MAAM,SAAS,QAAQ,QAAQ,QAAQ,EAAE;CACzC,MAAM,QAAQ,OAAO,WAAW,YAAY,IAAI,SAAS,aAAa;CAGtE,IADc,MAAM,MAAM,GAClB,CAAC,CAAC,MAAM,MAAM,MAAM,QAAQ,MAAM,EAAE,GAC3C,MAAM,IAAI,UAAU,uCAAuC;EAC1D,MAAM;EACN,SAAS,EAAE,MAAM,QAAQ;CAC1B,CAAC;CAEF,OAAO;AACR;;AAGA,SAAgB,sBAAsB,MAAsB;CAE3D,OAAO,IADK,iBAAiB,IAChB;AACd;;AAGA,SAAgB,WAAW,OAAuB;CACjD,OAAO,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAC3C;;;;;AAMA,SAAgB,sBAAsB,OAGvB;CACd,IAAI,MAAM,gBAAgB,KAAA,KAAa,MAAM,SAAS,KAAA,GACrD,MAAM,IAAI,UAAU,8CAA8C,EAAE,MAAM,YAAY,CAAC;CAExF,IAAI,MAAM,gBAAgB,KAAA,GAAW;EACpC,MAAM,QAAQ,cAAc,MAAM,WAAW;EAC7C,IAAI,MAAM,aAAA,UACT,MAAM,IAAI,UAAU,uCAAuC;GAC1D,MAAM;GACN,SAAS;IAAE,WAAW;IAAgB,gBAAgB,MAAM;GAAW;EACxE,CAAC;EAEF,OAAO;CACR;CACA,IAAI,MAAM,SAAS,KAAA,GAAW;EAC7B,MAAM,QAAQ,YAAY,MAAM,IAAI;EACpC,IAAI,MAAM,aAAA,UACT,MAAM,IAAI,UAAU,uCAAuC;GAC1D,MAAM;GACN,SAAS;IAAE,WAAW;IAAgB,gBAAgB,MAAM;GAAW;EACxE,CAAC;EAEF,OAAO;CACR;CACA,MAAM,IAAI,UAAU,8CAA8C,EAAE,MAAM,YAAY,CAAC;AACxF;;;;;AAqBA,SAAgB,aAAa,MAAc,UAA+B,CAAC,GAAqB;CAC/F,MAAM,eAAyB,CAAC;CAChC,MAAM,eAAyB,CAAC;CAChC,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,MAAM,SAAS,KAAK,WAAW,QAAQ,IAAI,CAAC,CAAC,MAAM,MAAM;CACzD,KAAK,MAAM,SAAS,QAAQ;EAC3B,MAAM,QAAQ,MAAM,MAAM,IAAI,CAAC,CAAC,QAAQ,SAAS,KAAK,SAAS,CAAC;EAChE,IAAI,MAAM,WAAW,GAAG;EACxB,IAAI,QAAQ;EACZ,MAAM,YAAsB,CAAC;EAC7B,KAAK,MAAM,QAAQ,OAClB,IAAI,KAAK,WAAW,QAAQ,GAC3B,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;OACrB,IAAI,KAAK,WAAW,OAAO,GACjC,UAAU,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;EAG1C,MAAM,OAAO,UAAU,KAAK,IAAI;EAChC,IAAI,UAAU,YAAY,KAAK,SAAS,GAAG;GAC1C,MAAM,QAAQ,kBAAkB,IAAI;GACpC,aAAa,KAAK,KAAK;GACvB,QAAQ,WAAW,KAAK;EACzB,OAAO,IAAI,UAAU,YAAY,KAAK,SAAS,GAAG;GACjD,MAAM,QAAQ,kBAAkB,IAAI;GACpC,aAAa,KAAK,KAAK;GACvB,QAAQ,WAAW,KAAK;EACzB,OAAO,IAAI,UAAU,UAAU,KAAK,SAAS,GAAG;GAC/C,MAAM,SAAS,SAAS,IAAI;GAC5B,IAAI,cAAc,MAAM,GAAG;IAC1B,MAAM,OAAO,OAAO;IACpB,IAAI,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,GAAG,YAAY;GACpE;EACD,OAAO,IAAI,UAAU,WAAW,KAAK,SAAS,GAAG;GAChD,MAAM,SAAS,SAAS,IAAI;GAC5B,IAAI,cAAc,MAAM,GAAG;IAC1B,IAAI,SAAS,OAAO,QAAQ,GAAG,QAAQ,OAAO;IAC9C,IAAI,SAAS,OAAO,OAAO,GAAG,aAAa,OAAO;GACnD,OACC,QAAQ;EAEV;CACD;CAEA,MAAM,MAAwB;EAC7B,QAAQ,aAAa,KAAK,EAAE;EAC5B,QAAQ,aAAa,KAAK,EAAE;CAC7B;CACA,IAAI,cAAc,KAAA,GAAW,IAAI,YAAY;CAC7C,IAAI,UAAU,KAAA,GAAW,IAAI,QAAQ;CACrC,IAAI,eAAe,KAAA,GAAW,IAAI,aAAa;CAC/C,OAAO;AACR;AAEA,SAAS,kBAAkB,MAAsB;CAChD,IAAI;EAEH,IAAI,OAAO,WAAW,aACrB,OAAO,OAAO,KAAK,MAAM,QAAQ,CAAC,CAAC,SAAS,MAAM;EAEnD,MAAM,SAAS,KAAK,IAAI;EACxB,MAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;EAC1C,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,GAAG,MAAM,KAAK,OAAO,WAAW,CAAC;EACzE,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK;CACtC,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,SAAS,MAAuB;CACxC,IAAI;EAEH,OADuB,KAAK,MAAM,IACvB;CACZ,QAAQ;EACP;CACD;AACD;;AAGA,SAAgB,gBAAgB,UAAkB,MAAwB;CACzE,QAAQ,UAAR;EACC,KAAK;EACL,KAAK,cACJ,OAAO;GAAC;GAAQ;GAAM;EAAI;EAC3B,KAAK,SACJ,OAAO;GAAC;GAAM;GAAO;EAAI;EAE1B,SACC,OAAO;GAAC;GAAW;GAAM;EAAI;CAC/B;AACD;;;;;;;;;ACpHA,IAAa,0BAAb,MAAa,wBAAwB;CACpC;CACA;;CAEA;CAQA,YAAY,MAA6B,UAA0C,CAAC,GAAG;EACtF,MAAM,SAAS,4BAA4B,UAAU,IAAI;EACzD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,+CAA+C;GAClE,MAAM;GACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE;EACtE,CAAC;EAEF,KAAKA,QAAQ,IAAI,YAAY;GAC5B,SAAS,QAAQ,OAAO,KAAK,UAAU,GAAG;GAC1C,SAAS,EACR,eAAe,UAAU,OAAO,KAAK,UACtC;GACA,SAAS;GACT,OAAO;GACP,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAM;GAC5C,GAAI,QAAQ,UAAU,EAAE,QAAQ,QAAQ,OAAO;EAChD,CAAC;EACD,KAAKC,WAAW,OAAO,KAAK,UACzB,IAAI,SAAS,OAAO,KAAK,SAAS;GAClC,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAM;GAC5C,GAAI,QAAQ,UAAU,EAAE,QAAQ,QAAQ,OAAO;EAChD,CAAC,IACA,KAAA;EACH,KAAKC,eAAe,OAAO,KAAK,UAC7B;GACA,eAAe,OAAO,KAAK,QAAQ;GACnC,mBAAmB,OAAO,KAAK,QAAQ;GACvC,GAAI,OAAO,KAAK,QAAQ,YAAY,EAAE,UAAU,OAAO,KAAK,QAAQ,SAAS;EAC9E,IACC,KAAA;CACJ;CAEA,OAAO,YAAY,KAA2C;EAC7D,OAAO,IAAI,wBAAwB,YAAY,KAAK,2BAA2B,GAAG;GACjF,GAAI,IAAI,SAAS,EAAE,OAAO,IAAI,MAAM;GACpC,GAAI,IAAI,UAAU,EAAE,QAAQ,IAAI,OAAO;EACxC,CAAC;CACF;;CAGA,MAAM,SAAgC;EACrC,MAAM,EAAE,SAAS,MAAM,KAAKF,MAAM,IAAI,WAAW,EAChD,OAAO,4BACR,CAAC;EACD,IAAI,cAAc,IAAI,KAAK,KAAK,UAAU,MAAM,OAAO,EAAE,IAAI,KAAK;EAClE,IAAI,cAAc,IAAI,KAAK,KAAK,UAAU,OAAO,OAAO,EAAE,IAAI,MAAM;EACpE,OAAO,EAAE,IAAI,KAAK;CACnB;CAEA,MAAM,SAAuC;EAC5C,MAAM,EAAE,SAAS,MAAM,KAAKA,MAAM,KAAK,eAAe,KAAA,GAAW,EAChE,OAAO,4BACR,CAAC;EACD,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,GAC/C,MAAM,IAAI,UAAU,sCAAsC,EAAE,MAAM,WAAW,CAAC;EAE/E,OAAO,EAAE,YAAY,KAAK,MAAM;CACjC;CAEA,MAAM,QAAQ,OAAsD;EACnE,MAAM,KAAKA,MAAM,OAAO,eAAe,mBAAmB,MAAM,UAAU,KAAK,EAC9E,OAAO,6BACR,CAAC;EACD,OAAO;GAAE,YAAY,MAAM;GAAY,WAAW;EAAK;CACxD;CAEA,MAAM,QAAQ,OAA+C;EAC5D,MAAM,EAAE,SAAS,MAAM,KAAKA,MAAM,IAAI,eAAe,mBAAmB,MAAM,UAAU,EAAE,WAAW,EACpG,OAAO,6BACR,CAAC;EACD,IAAI,CAAC,cAAc,IAAI,KAAK,OAAO,KAAK,eAAe,WACtD,MAAM,IAAI,UAAU,+BAA+B,EAAE,MAAM,WAAW,CAAC;EAExE,OAAO;GAAE,YAAY,MAAM;GAAY,SAAS,KAAK;EAAW;CACjE;;;;;;CAOA,MAAM,KACL,OACA,SAAqF,CAAC,GAChE;EACtB,MAAM,OAAgC;GACrC,MAAM,MAAM;GACZ,YAAY,MAAM,cAAA;EACnB;EACA,IAAI,MAAM,KAAK,KAAK,SAAS,MAAM;EACnC,IAAI,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,SAAS,GAAG,KAAK,SAAS,MAAM;EAExE,MAAM,UAAkC;GACvC,gBAAgB;GAChB,QAAQ;EACT;EACA,IAAI,MAAM,YAAY,QAAQ,gBAAgB,MAAM;EAEpD,MAAM,EAAE,UAAU,MAAM,KAAKA,MAAM,MAAM,QAAQ,eAAe,mBAAmB,MAAM,UAAU,EAAE,QAAQ;GAC5G;GACA;GACA,OAAO;EACR,CAAC;EAED,MAAM,SAAS,aADF,IAAI,YAAY,CAAC,CAAC,OAAO,KACP,GAAG;GACjC,GAAI,OAAO,YAAY,EAAE,UAAU,OAAO,SAAS;GACnD,GAAI,OAAO,YAAY,EAAE,UAAU,OAAO,SAAS;EACpD,CAAC;EACD,IAAI,OAAO,SAAS,OAAO,cAAc,KAAA,GACxC,MAAM,IAAI,UAAU,OAAO,OAAO;GACjC,MAAM;GACN,SAAS;IACR,GAAI,OAAO,cAAc,EAAE,YAAY,OAAO,WAAW;IACzD,YAAY,MAAM;GACnB;EACD,CAAC;EAEF,MAAM,YAAY,OAAO,cAAc,OAAO,QAAQ,IAAI;EAC1D,MAAM,MAAkB;GACvB,YAAY,MAAM;GAClB,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf;GACA,SAAS,cAAc;EACxB;EACA,IAAI,OAAO,OAAO,IAAI,QAAQ,OAAO;EACrC,IAAI,OAAO,YAAY,IAAI,aAAa,OAAO;EAC/C,OAAO;CACR;;CAGA,MAAM,YAAY,OAA8C;EAC/D,MAAM,WAAW,MAAM,YAAY;EACnC,OAAO,KAAK,KAAK;GAChB,YAAY,MAAM;GAClB,MAAM,gBAAgB,UAAU,MAAM,IAAI;GAC1C,GAAI,MAAM,eAAe,KAAA,KAAa,EAAE,YAAY,MAAM,WAAW;GACrE,GAAI,MAAM,cAAc,EAAE,YAAY,MAAM,WAAW;EACxD,CAAC;CACF;CAEA,MAAM,UAAU,OAAiD;EAChE,MAAM,QAAQ,sBAAsB,KAAK;EACzC,MAAM,KAAKG,cAAc,MAAM,YAAY,MAAM,MAAM,OAAO,MAAM,UAAU;EAC9E,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,IAAI;GACJ,aAAa,MAAM;EACpB;CACD;CAEA,MAAM,SAAS,OAA+C;EAC7D,MAAM,QAAQ,MAAM,KAAKC,cAAc,MAAM,YAAY,MAAM,MAAM,MAAM,UAAU;EACrF,MAAM,WAAW,MAAM,YAAY;EACnC,MAAM,MAAsB;GAC3B,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,aAAa,MAAM;EACpB;EACA,IAAI,aAAa,UAChB,IAAI,cAAc,cAAc,KAAK;OAErC,IAAI,OAAO,YAAY,KAAK;EAE7B,OAAO;CACR;CAEA,MAAM,WAAW,OAAmD;EACnE,MAAM,QAAkB,CAAC;EACzB,KAAK,MAAM,QAAQ,MAAM,OAAO;GAC/B,MAAM,KAAK,UAAU;IACpB,YAAY,MAAM;IAClB,MAAM,KAAK;IACX,GAAI,KAAK,SAAS,KAAA,KAAa,EAAE,MAAM,KAAK,KAAK;IACjD,GAAI,KAAK,gBAAgB,KAAA,KAAa,EAAE,aAAa,KAAK,YAAY;IACtE,GAAI,MAAM,cAAc,EAAE,YAAY,MAAM,WAAW;GACxD,CAAC;GACD,MAAM,KAAK,KAAK,IAAI;EACrB;EACA,OAAO;GAAE,YAAY,MAAM;GAAY;GAAO,IAAI;EAAK;CACxD;CAEA,MAAM,UAAU,OAAiD;EAChE,MAAM,QAAkC,CAAC;EACzC,KAAK,MAAM,QAAQ,MAAM,OAAO;GAC/B,MAAM,MAAM,MAAM,KAAK,SAAS;IAC/B,YAAY,MAAM;IAClB;IACA,GAAI,MAAM,YAAY,EAAE,UAAU,MAAM,SAAS;IACjD,GAAI,MAAM,cAAc,EAAE,YAAY,MAAM,WAAW;GACxD,CAAC;GACD,MAAM,KAAK;IACV,MAAM,IAAI;IACV,GAAI,IAAI,SAAS,KAAA,KAAa,EAAE,MAAM,IAAI,KAAK;IAC/C,GAAI,IAAI,gBAAgB,KAAA,KAAa,EAAE,aAAa,IAAI,YAAY;IACpE,GAAI,IAAI,gBAAgB,KAAA,KAAa,EAAE,aAAa,IAAI,YAAY;GACrE,CAAC;EACF;EACA,OAAO;GAAE,YAAY,MAAM;GAAY;EAAM;CAC9C;;CAGA,MAAM,UAAU,OAAiD;EAChE,MAAM,MAAM,MAAM,gBAAgB,KAAK,KAAK;EAC5C,MAAM,MAAM,IAAI,WAAW,GAAG,IAAI,MAAM,sBAAsB,GAAG;EACjE,MAAM,MAAM,MAAM,KAAK,KAAK;GAC3B,YAAY,MAAM;GAClB,MAAM;IAAC;IAAM;IAAO,QAAQ,WAAW,GAAG,EAAE;GAA6D;GACzG,GAAI,MAAM,cAAc,EAAE,YAAY,MAAM,WAAW;EACxD,CAAC;EACD,MAAM,QAAQ,IAAI,OAChB,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QAAQ,SAAS,KAAK,SAAS,CAAC;EAClC,OAAO;GACN,YAAY,MAAM;GAClB;GACA,KAAK;IAAE,QAAQ,IAAI;IAAQ,QAAQ,IAAI;IAAQ,WAAW,IAAI;GAAU;EACzE;CACD;;CAGA,MAAM,YAAY,OAAqD;EACtE,KAAK,MAAM,QAAQ,MAAM,OAAO;GAC/B,MAAM,MAAM,KAAK,WAAW,GAAG,IAAI,OAAO,sBAAsB,IAAI;GACpE,MAAM,KAAK,KAAK;IACf,YAAY,MAAM;IAClB,MAAM;KAAC;KAAM;KAAM;KAAM;IAAG;IAC5B,GAAI,MAAM,cAAc,EAAE,YAAY,MAAM,WAAW;GACxD,CAAC;EACF;EACA,OAAO;GAAE,YAAY,MAAM;GAAY,OAAO,MAAM;GAAO,IAAI;EAAK;CACrE;;;;;CAMA,MAAM,eAAe,OAA2D;EAC/E,MAAM,UAAU,KAAKC,gBAAgB,gBAAgB;EACrD,IAAI,MAAM,OAAO,UAAU,UAC1B,MAAM,IAAI,UAAU,kEAAkE,EACrF,MAAM,YACP,CAAC;EAEF,MAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM,OAAO,KAAK,EAAE,UAAU,eAAe,CAAC;EACnF,MAAM,KAAKF,cAAc,MAAM,YAAY,MAAM,MAAM,OAAO,MAAM,UAAU;EAC9E,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,IAAI;GACJ,aAAa,MAAM;EACpB;CACD;;;;;CAMA,MAAM,eAAe,OAA2D;EAC/E,MAAM,UAAU,KAAKE,gBAAgB,gBAAgB;EACrD,MAAM,QAAQ,MAAM,KAAKD,cAAc,MAAM,YAAY,MAAM,MAAM,MAAM,UAAU;EACrF,MAAM,QAAQ,SAAS,MAAM,iBAAiB,KAAK;EACnD,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,UAAU;IACT,OAAO;IACP,KAAK,MAAM;IACX,aAAa,MAAM;GACpB;EACD;CACD;CAEA,MAAM,cAAc,OAA2D;EAC9E,MAAM,EAAE,SAAS,MAAM,KAAKJ,MAAM,KAAK,eAAe,mBAAmB,MAAM,UAAU,EAAE,WAAW,KAAA,GAAW,EAChH,OAAO,mCACR,CAAC;EACD,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,GAC/C,MAAM,IAAI,UAAU,sCAAsC,EAAE,MAAM,WAAW,CAAC;EAE/E,OAAO;GAAE,YAAY,MAAM;GAAY,YAAY,KAAK;EAAM;CAC/D;CAEA,MAAM,cAAc,OAAqE;EACxF,MAAM,KAAKA,MAAM,OAChB,eAAe,mBAAmB,MAAM,UAAU,EAAE,WAAW,mBAAmB,MAAM,UAAU,KAClG,EAAE,OAAO,mCAAmC,CAC7C;EACA,OAAO;GAAE,YAAY,MAAM;GAAY,YAAY,MAAM;GAAY,SAAS;EAAK;CACpF;;;;;;;CAQA,MAAM,MAAM,OAAqD;EAChE,MAAM,SAAS,uBAAuB,UAAU,KAAK;EACrD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,+BAA+B;GAClD,MAAM;GACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE;EACtE,CAAC;EAEF,MAAM,OAAO,OAAO;EACpB,IAAI,KAAK,gBAAgB,KAAK,UAC7B,MAAM,IAAI,UAAU,6DAA6D,EAAE,MAAM,YAAY,CAAC;EAEvG,IAAI,KAAK,WAAW,KAAA,KAAa,CAAC,KAAK,OAAO,WAAW,GAAG,GAC3D,MAAM,IAAI,UAAU,kCAAkC,EAAE,MAAM,YAAY,CAAC;EAI5E,MAAM,WAAW,KAAK,eAAe,KAAA,IAAY,KAAK;EAEtD,MAAM,cAAc,KAAK,kBAAkB,aAAa,KAAA,IAAY,KAAKE,cAAc,gBAAgB,KAAA;EACvG,MAAM,kBACL,KAAK,sBAAsB,aAAa,KAAA,IAAY,KAAKA,cAAc,oBAAoB,KAAA;EAE5F,MAAM,UAAmC,CAAC;EAC1C,IAAI,UAAU,QAAQ,cAAc;EACpC,IAAI,KAAK,UAAU,QAAQ,cAAc,KAAK;EAC9C,IAAI,KAAK,cAAc,KAAA,GAAW,QAAQ,cAAc,KAAK;EAC7D,IAAI,KAAK,QAAQ,QAAQ,YAAY,KAAK;EAC1C,IAAI,KAAK,qBAAqB,KAAA,GAAW,QAAQ,qBAAqB,KAAK;EAC3E,IAAI,KAAK,cAAc,QAAQ,iBAAiB;EAChD,IAAI,KAAK,gBAAgB,KAAK,aAAa,SAAS,GAAG,QAAQ,iBAAiB,KAAK;EACrF,IAAI,YAAY,eAAe,iBAC9B,QAAQ,iBAAiB;GACxB;GACA;EACD;EAGD,MAAM,OAAgC;GACrC,QAAQ,KAAK;GACb,WAAW,KAAK;EACjB;EACA,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,GAAG,KAAK,aAAa;EAEvD,MAAM,KAAKF,MAAM,KAAK,eAAe,mBAAmB,KAAK,UAAU,EAAE,SAAS,MAAM,EACvF,OAAO,2BACR,CAAC;EACD,OAAO;GACN,YAAY,KAAK;GACjB,QAAQ,KAAK;GACb,YAAY,KAAK;GACjB,IAAI;EACL;CACD;;;;;;CAOA,MAAM,QAAQ,OAAyD;EACtE,MAAM,SAAS,yBAAyB,UAAU,KAAK;EACvD,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,iCAAiC;GACpD,MAAM;GACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,EAAE;EACtE,CAAC;EAEF,MAAM,OAAO,OAAO;EACpB,MAAM,KAAKA,MAAM,KAChB,eAAe,mBAAmB,KAAK,UAAU,EAAE,WACnD,EAAE,WAAW,KAAK,WAAW,GAC7B,EAAE,OAAO,6BAA6B,CACvC;EACA,OAAO;GACN,YAAY,KAAK;GACjB,YAAY,KAAK;GACjB,IAAI;EACL;CACD;CAEA,gBAAgB,IAAsB;EACrC,IAAI,CAAC,KAAKC,UACT,MAAM,IAAI,UAAU,GAAG,GAAG,gDAAgD,EACzE,MAAM,WACP,CAAC;EAEF,OAAO,KAAKA;CACb;CAEA,MAAME,cACL,WACA,MACA,OACA,WACgB;EAChB,MAAM,MAAM,iBAAiB,IAAI;EACjC,MAAM,UAAkC,EACvC,gBAAgB,2BACjB;EACA,IAAI,WAAW,QAAQ,gBAAgB;EACvC,MAAM,EAAE,SAAS,MAAM,KAAKH,MAAM,IACjC,eAAe,mBAAmB,SAAS,EAAE,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG,KACpG,cAAc,KAAK,GACnB;GAAE;GAAS,OAAO;EAA+B,CAClD;EACA,IAAI,cAAc,IAAI,KAAK,KAAK,UAAU,OACzC,MAAM,IAAI,UAAU,4BAA4B,EAAE,MAAM,WAAW,CAAC;CAEtE;CAEA,MAAMI,cAAc,WAAmB,MAAc,WAAoD;EACxG,MAAM,MAAM,iBAAiB,IAAI;EACjC,MAAM,UAAkC,CAAC;EACzC,IAAI,WAAW,QAAQ,gBAAgB;EACvC,MAAM,EAAE,UAAU,MAAM,KAAKJ,MAAM,MAClC,OACA,eAAe,mBAAmB,SAAS,EAAE,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG,KACpG;GAAE;GAAS,OAAO;GAA+B,UAAU;EAAe,CAC3E;EACA,OAAO;CACR;AACD;;;ACpdA,MAAM,KAAK;AACX,MAAM,mBAAmB,EAAE,OAAO,CAAC,CAAC;AAEpC,MAAa,8BAA8B,WAAW;CACrD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,QAAQ,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,OAAO;AACjF,CAAC;AAED,MAAa,8BAA8B,WAAW;CACrD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,QAAQ,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,OAAO;AACjF,CAAC;AAED,MAAa,+BAA+B,WAAW;CACtD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,QAAQ,KAAK;AACtF,CAAC;AAED,MAAa,+BAA+B,WAAW;CACtD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,QAAQ,KAAK;AACtF,CAAC;AAED,MAAa,4BAA4B,WAAW;CACnD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,MAAM;EAAC;EAAQ;EAAY;CAAS;CACpC,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,KAAK,KAAK;AACnF,CAAC;AAED,MAAa,mCAAmC,WAAW;CAC1D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,YAAY,KAAK;AAC1F,CAAC;AAED,MAAa,iCAAiC,WAAW;CACxD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,UAAU,KAAK;AACxF,CAAC;AAED,MAAa,gCAAgC,WAAW;CACvD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,SAAS,KAAK;AACvF,CAAC;AAED,MAAa,kCAAkC,WAAW;CACzD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,WAAW,KAAK;AACzF,CAAC;AAED,MAAa,iCAAiC,WAAW;CACxD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,UAAU,KAAK;AACxF,CAAC;AAED,MAAa,iCAAiC,WAAW;CACxD,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,UAAU,KAAK;AACxF,CAAC;AAED,MAAa,mCAAmC,WAAW;CAC1D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,YAAY,KAAK;AAC1F,CAAC;AAED,MAAa,sCAAsC,WAAW;CAC7D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,eAAe,KAAK;AAC7F,CAAC;AAED,MAAa,sCAAsC,WAAW;CAC7D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,eAAe,KAAK;AAC7F,CAAC;AAED,MAAa,qCAAqC,WAAW;CAC5D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,cAAc,KAAK;AAC5F,CAAC;AAED,MAAa,qCAAqC,WAAW;CAC5D,IAAI,GAAG,GAAG;CACV,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS;CACT,SAAS,OAAO,OAAO,QAAQ,wBAAwB,YAAY,GAAG,CAAC,CAAC,cAAc,KAAK;AAC5F,CAAC;AAED,MAAa,0BAA0B,aAAa;CACnD;CACA,OAAO;CACP,aACC;CACD,SAAS;CACT,MAAM;EAAE,MAAM;EAAU,QAAQ;CAA4B;CAC5D,YAAY;EAAC;EAAW;EAAW;CAAY;CAC/C,gBAAgB;CAChB,MAAM;EAAC;EAAQ;EAAa;CAAQ;CACpC,OAAO;EACN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACD;AACD,CAAC"}

package/dist/content-type-CORxaxcv.js

@@ -0,0 +1,49 @@
+import { isString, trimStart } from "es-toolkit";
+import mime from "mime";
+//#region src/shared/content-type.ts
+/** Last path segment after `/`. */
+function baseName(key) {
+	const i = key.lastIndexOf("/");
+	return i === -1 ? key : key.slice(i + 1);
+}
+/** Extension including leading `.` (empty if none). Posix object-key semantics. */
+function extName(key) {
+	const base = baseName(key);
+	const i = base.lastIndexOf(".");
+	return i > 0 ? base.slice(i) : "";
+}
+/** MIME type for a path or extension, or `undefined` when unknown. */
+function mediaTypeFromPath(pathOrExtension) {
+	return mime.getType(pathOrExtension) ?? void 0;
+}
+/** Preferred file extension for a MIME type (charset stripped), or `undefined` when unknown. */
+function extensionFromMediaType(type) {
+	return mime.getExtension(type) ?? void 0;
+}
+/** All known extensions for a MIME type. */
+function allExtensionsFromMediaType(type) {
+	return [...mime.getAllExtensions(type) ?? []];
+}
+/**
+* Resolve an upload filename extension: prefer path ext, then bare format
+* (`pdf`), then `mime.getExtension(mediaType)`, else fallback.
+*/
+function resolveFileExtension(options) {
+	const fallback = options.fallback ?? "bin";
+	const filename = options.filename;
+	if (isString(filename) && filename.length > 0) {
+		const ext = extName(filename);
+		if (ext.length > 1) return trimStart(ext, ".").toLowerCase();
+	}
+	const mediaType = options.mediaType;
+	if (isString(mediaType) && mediaType.length > 0) {
+		if (!mediaType.includes("/")) return mediaType.toLowerCase();
+		const fromMime = extensionFromMediaType(mediaType);
+		if (fromMime) return fromMime;
+	}
+	return fallback;
+}
+//#endregion
+export { resolveFileExtension as i, extensionFromMediaType as n, mediaTypeFromPath as r, allExtensionsFromMediaType as t };
+
+//# sourceMappingURL=content-type-CORxaxcv.js.map

package/dist/content-type-CORxaxcv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type-CORxaxcv.js","names":[],"sources":["../src/shared/content-type.ts"],"sourcesContent":["import { isString, trimStart } from 'es-toolkit'\nimport mime from 'mime'\n\n/** Last path segment after `/`. */\nfunction baseName(key: string): string {\n\tconst i = key.lastIndexOf('/')\n\treturn i === -1 ? key : key.slice(i + 1)\n}\n\n/** Extension including leading `.` (empty if none). Posix object-key semantics. */\nfunction extName(key: string): string {\n\tconst base = baseName(key)\n\tconst i = base.lastIndexOf('.')\n\treturn i > 0 ? base.slice(i) : ''\n}\n\n/** MIME type for a path or extension, or `undefined` when unknown. */\nexport function mediaTypeFromPath(pathOrExtension: string): string | undefined {\n\treturn mime.getType(pathOrExtension) ?? undefined\n}\n\n/** Preferred file extension for a MIME type (charset stripped), or `undefined` when unknown. */\nexport function extensionFromMediaType(type: string): string | undefined {\n\treturn mime.getExtension(type) ?? undefined\n}\n\n/** All known extensions for a MIME type. */\nexport function allExtensionsFromMediaType(type: string): readonly string[] {\n\tconst set = mime.getAllExtensions(type)\n\treturn [...(set ?? [])]\n}\n\n/**\n * Resolve an upload filename extension: prefer path ext, then bare format\n * (`pdf`), then `mime.getExtension(mediaType)`, else fallback.\n */\nexport function resolveFileExtension(options: {\n\tfilename?: string | undefined\n\tmediaType?: string | undefined\n\tfallback?: string\n}): string {\n\tconst fallback = options.fallback ?? 'bin'\n\tconst filename = options.filename\n\tif (isString(filename) && filename.length > 0) {\n\t\tconst ext = extName(filename)\n\t\tif (ext.length > 1) return trimStart(ext, '.').toLowerCase()\n\t}\n\n\tconst mediaType = options.mediaType\n\tif (isString(mediaType) && mediaType.length > 0) {\n\t\tif (!mediaType.includes('/')) return mediaType.toLowerCase()\n\t\tconst fromMime = extensionFromMediaType(mediaType)\n\t\tif (fromMime) return fromMime\n\t}\n\n\treturn fallback\n}\n\n/** Replace or append the extension of an object key (posix path semantics). */\nexport function deriveOutputKey(sourceKey: string, outputFormat: string, outputKey: string | undefined): string {\n\tif (isString(outputKey) && outputKey.length > 0) return outputKey\n\n\tconst ext = trimStart(outputFormat, '.').toLowerCase()\n\tconst slash = sourceKey.lastIndexOf('/')\n\tconst dir = slash === -1 ? '' : sourceKey.slice(0, slash + 1)\n\tconst stem = baseName(sourceKey)\n\tconst stemExt = extName(stem)\n\tconst base = stemExt.length > 0 ? stem.slice(0, -stemExt.length) : stem\n\treturn `${dir}${base}.${ext}`\n}\n"],"mappings":";;;;AAIA,SAAS,SAAS,KAAqB;CACtC,MAAM,IAAI,IAAI,YAAY,GAAG;CAC7B,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,IAAI,CAAC;AACxC;;AAGA,SAAS,QAAQ,KAAqB;CACrC,MAAM,OAAO,SAAS,GAAG;CACzB,MAAM,IAAI,KAAK,YAAY,GAAG;CAC9B,OAAO,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI;AAChC;;AAGA,SAAgB,kBAAkB,iBAA6C;CAC9E,OAAO,KAAK,QAAQ,eAAe,KAAK,KAAA;AACzC;;AAGA,SAAgB,uBAAuB,MAAkC;CACxE,OAAO,KAAK,aAAa,IAAI,KAAK,KAAA;AACnC;;AAGA,SAAgB,2BAA2B,MAAiC;CAE3E,OAAO,CAAC,GADI,KAAK,iBAAiB,IACpB,KAAK,CAAC,CAAE;AACvB;;;;;AAMA,SAAgB,qBAAqB,SAI1B;CACV,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,WAAW,QAAQ;CACzB,IAAI,SAAS,QAAQ,KAAK,SAAS,SAAS,GAAG;EAC9C,MAAM,MAAM,QAAQ,QAAQ;EAC5B,IAAI,IAAI,SAAS,GAAG,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,YAAY;CAC5D;CAEA,MAAM,YAAY,QAAQ;CAC1B,IAAI,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG;EAChD,IAAI,CAAC,UAAU,SAAS,GAAG,GAAG,OAAO,UAAU,YAAY;EAC3D,MAAM,WAAW,uBAAuB,SAAS;EACjD,IAAI,UAAU,OAAO;CACtB;CAEA,OAAO;AACR"}

package/dist/core/index.d.ts

@@ -0,0 +1,4 @@
+import { a as ModuleDefinition, c as ToolExecute, d as ToolHookToolRef, f as ToolHooks, g as ToolSource, h as ToolSideEffect, i as ModuleClassification, m as ToolRuntime, n as AuthDefinition, o as ToolContext, p as ToolMeta, r as FetchLike, s as ToolDefinition, t as ArtifactHookEvent, u as ToolHookEvent } from "../types-Ccb0DXY9.js";
+import { A as assertContracts, B as ExceptToolsFilter, C as defineTool, D as toToolCatalogEntry, E as toModuleCatalogEntry, F as bindModule, G as exceptTools, H as OnlyToolsFilter, I as bindTool, K as filterModuleTools, L as toolRef, M as validateTool, N as mergeToolContext, O as ContractIssue, P as BindModuleOptions, R as withHooks, S as defineModule, T as ToolCatalogEntry, U as ToolIdFilter, V as ModuleToolId, W as ToolSelection, _ as logoForModuleId, a as withAuthTool, b as DefineToolOptions, c as firstDuplicateBy, d as resolveTools, f as ProviderAuthBase, g as resolveProvider, h as requireAuth, i as withAuth, j as validateModule, k as ContractResult, l as filterToolsByRuntime, m as defineProvider, n as listTools, o as assertUniqueBy, p as ProviderDefinition, q as onlyTools, r as runTool, s as duplicatesBy, t as WithAuthOptions, u as isToolArray, v as packLogosByModuleId, w as ModuleCatalogEntry, x as asAnyTool, y as DefineModuleOptions, z as withHooksTool } from "../index-CZX5OeOF.js";
+import { i as isToolError, n as ToolErrorCode, r as ToolErrorOptions, t as ToolError } from "../errors-aKhko9T1.js";
+export { type ArtifactHookEvent, type AuthDefinition, type BindModuleOptions, type ContractIssue, type ContractResult, type DefineModuleOptions, type DefineToolOptions, type ExceptToolsFilter, type FetchLike, type ModuleCatalogEntry, type ModuleClassification, type ModuleDefinition, type ModuleToolId, type OnlyToolsFilter, type ProviderAuthBase, type ProviderDefinition, type ToolCatalogEntry, type ToolContext, type ToolDefinition, ToolError, type ToolErrorCode, type ToolErrorOptions, type ToolExecute, type ToolHookEvent, type ToolHookToolRef, type ToolHooks, type ToolIdFilter, type ToolMeta, type ToolRuntime, type ToolSelection, type ToolSideEffect, type ToolSource, type WithAuthOptions, asAnyTool, assertContracts, assertUniqueBy, bindModule, bindTool, defineModule, defineProvider, defineTool, duplicatesBy, exceptTools, filterModuleTools, filterToolsByRuntime, firstDuplicateBy, isToolArray, isToolError, listTools, logoForModuleId, mergeToolContext, onlyTools, packLogosByModuleId, requireAuth, resolveProvider, resolveTools, runTool, toModuleCatalogEntry, toToolCatalogEntry, toolRef, validateModule, validateTool, withAuth, withAuthTool, withHooks, withHooksTool };

package/dist/core/index.js

@@ -0,0 +1,204 @@
+import { a as filterToolsByRuntime, c as toolRef, d as exceptTools, f as filterModuleTools, i as withAuthTool, l as withHooks, m as mergeToolContext, n as runTool, o as isToolArray, p as onlyTools, r as withAuth, s as resolveTools, t as listTools, u as withHooksTool } from "../with-auth-CpKqTrGK.js";
+import { n as isToolError, t as ToolError } from "../errors-DoSpNHvs.js";
+import { n as duplicatesBy, r as firstDuplicateBy, t as assertUniqueBy } from "../unique-EwBH1JPB.js";
+import { a as packLogosByModuleId, i as logoForModuleId, n as defineModule, r as defineTool, t as asAnyTool } from "../define-CvpJ_pNP.js";
+import { n as requireAuth, r as resolveProvider, t as defineProvider } from "../provider-CgDAlg6K.js";
+import { flatMap, isPlainObject, isString } from "es-toolkit";
+import { isArray } from "es-toolkit/compat";
+import { toJSONSchema } from "zod";
+//#region src/core/bind.ts
+/**
+* Per-invocation auth/context bind for multi-tenant hosts.
+*/
+function assertAuth(auth, value) {
+	if (auth.type === "none") {
+		if (value !== void 0) throw new ToolError("This tool does not accept auth", { code: "bad_auth" });
+		return;
+	}
+	const parsed = auth.schema.safeParse(value);
+	if (!parsed.success) throw new ToolError("Invalid auth credentials", {
+		code: "bad_auth",
+		details: { issues: parsed.error.issues.map((i) => i.message) }
+	});
+	return parsed.data;
+}
+async function resolveBoundContext(moduleAuth, incoming, options) {
+	const base = options.resolveContext ? mergeToolContext(incoming, await options.resolveContext(incoming)) : { ...incoming };
+	if (moduleAuth.type === "none") return base;
+	if (!options.resolveAuth) throw new ToolError("resolveAuth is required for modules that declare auth", { code: "bad_auth" });
+	const auth = assertAuth(moduleAuth, await options.resolveAuth(base));
+	return {
+		...base,
+		...auth !== void 0 && { auth }
+	};
+}
+function bindTool(tool, moduleAuth, options) {
+	const previous = tool.execution ?? { run: tool.execute };
+	const bindContext = async (ctx) => {
+		return resolveBoundContext(moduleAuth, previous.bindContext ? await previous.bindContext(ctx) : ctx, options);
+	};
+	const execution = {
+		...previous,
+		bindContext,
+		...options.hooks && { hooks: options.hooks }
+	};
+	return {
+		...tool,
+		execution,
+		execute: async (input, ctx) => execution.run(input, await bindContext(ctx))
+	};
+}
+function bindModule(module, options) {
+	if (module.auth.type !== "none" && !options.resolveAuth) throw new ToolError(`Module ${module.id} requires resolveAuth`, { code: "bad_auth" });
+	const scoped = options.tools !== void 0 ? filterModuleTools(module, options.tools) : module;
+	return {
+		...scoped,
+		tools: scoped.tools.map((tool) => bindTool(tool, scoped.auth, options))
+	};
+}
+//#endregion
+//#region src/generated/module-keys.ts
+/** Capability seams under src/modules (brand-neutral model copy). */
+const moduleSeamKeys = [
+	"artifacts",
+	"browser",
+	"calendar",
+	"code-sandbox",
+	"content-type",
+	"crypto",
+	"document",
+	"document-extract",
+	"document-render",
+	"email",
+	"email-message",
+	"file-convert",
+	"files",
+	"image",
+	"messaging",
+	"pdf",
+	"presentation",
+	"queue",
+	"rag",
+	"scheduler",
+	"skills",
+	"tasks",
+	"vector-store",
+	"web-fetch"
+];
+//#endregion
+//#region src/core/contracts.ts
+const FORBIDDEN_MODEL_COPY = /\b(api[_ ]?key|apiKey|bearer token|process\.env|vault|secret key|authorization header|withAuth)\b/i;
+/**
+* Brand / vendor product names banned on **capability seam** model-facing copy
+* (module + tool description and input .describe()). Vendors may name their product.
+* Keep list brand-focused; avoid bare words like "teams" that appear in normal English.
+*/
+const FORBIDDEN_SEAM_BRAND_COPY = /\b(Telegram|Slack|iMessage|Resend|Cloudflare|Textract|Gotenberg|Pinecone|Qdrant|Supabase|WooCommerce|Katana|Amazon|Bot Framework|Microsoft Teams|Photon|Spectrum|Mastra|PgVector|OpenAI)\b|\bS3\b|\bR2\b/;
+/** Seam module ids from codegen (`src/modules/*` only — not hand-maintained). */
+const SEAM_MODULE_IDS = new Set(moduleSeamKeys);
+const KEBAB_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
+function issue(path, code, message) {
+	return {
+		path,
+		code,
+		message
+	};
+}
+function checkModelCopy(path, text, issues, options = {}) {
+	const trimmed = text.trim();
+	if (!trimmed) {
+		issues.push(issue(path, "empty_description", "Model-facing description is empty"));
+		return;
+	}
+	if (FORBIDDEN_MODEL_COPY.test(trimmed)) issues.push(issue(path, "forbidden_model_copy", "Model-facing copy must not mention credentials, env vars, vaults, or host wiring"));
+	if (options.seam && FORBIDDEN_SEAM_BRAND_COPY.test(trimmed)) issues.push(issue(path, "forbidden_model_copy", "Seam model-facing copy must not name vendors or products (use channel / bound store / provider-neutral language)"));
+}
+function fieldDescribes(schema, path, issues, options = {}) {
+	checkFieldDescriptions(toJSONSchema(schema), `${path}.input`, issues, options);
+}
+function checkFieldDescriptions(schema, path, issues, options) {
+	if (!isPlainObject(schema)) return;
+	const properties = schema["properties"];
+	if (isPlainObject(properties)) for (const [key, value] of Object.entries(properties)) {
+		if (!isPlainObject(value)) continue;
+		const fieldPath = `${path}.${key}`;
+		const description = value["description"];
+		if (!isString(description) || description.trim().length === 0) issues.push(issue(fieldPath, "empty_field_description", `Input field "${key}" is missing a .describe() for the model`));
+		else checkModelCopy(fieldPath, description, issues, options);
+		checkFieldDescriptions(value, fieldPath, issues, options);
+	}
+	for (const [key, value] of Object.entries(schema)) {
+		if (key === "properties") continue;
+		if (isArray(value)) {
+			for (const [index, item] of value.entries()) checkFieldDescriptions(item, `${path}.${key}[${index}]`, issues, options);
+			continue;
+		}
+		checkFieldDescriptions(value, `${path}.${key}`, issues, options);
+	}
+}
+function validateTool(tool, pathPrefix = tool.id, options = {}) {
+	const issues = [];
+	if (!tool.id.trim() || !KEBAB_ID.test(tool.id)) issues.push(issue(`${pathPrefix}.id`, "invalid_tool_id", `Tool id must be kebab-case (got "${tool.id}")`));
+	if (!tool.name.trim()) issues.push(issue(`${pathPrefix}.name`, "missing_name", "Tool name is required"));
+	checkModelCopy(`${pathPrefix}.description`, tool.description, issues, options);
+	fieldDescribes(tool.inputSchema, pathPrefix, issues, options);
+	return {
+		ok: issues.length === 0,
+		issues
+	};
+}
+function validateModule(module) {
+	const issues = [];
+	const copyOpts = SEAM_MODULE_IDS.has(module.id) ? { seam: true } : {};
+	checkModelCopy(`module.${module.id}.description`, module.description, issues, copyOpts);
+	for (const id of duplicatesBy(module.tools, (tool) => tool.id)) issues.push(issue(`module.${module.id}.tools.${id}`, "duplicate_tool_id", `Duplicate tool id "${id}"`));
+	issues.push(...flatMap(module.tools, (tool) => validateTool(tool, `module.${module.id}.tools.${tool.id}`, copyOpts).issues));
+	return {
+		ok: issues.length === 0,
+		issues
+	};
+}
+function assertContracts(result, label = "contract") {
+	if (result.ok) return;
+	const detail = result.issues.map((i) => `${i.path}: ${i.message}`).join("\n");
+	throw new Error(`${label} failed:\n${detail}`);
+}
+//#endregion
+//#region src/core/catalog.ts
+function toToolCatalogEntry(tool) {
+	return {
+		id: tool.id,
+		name: tool.name,
+		description: tool.description,
+		runtime: tool.meta.runtime,
+		sideEffect: tool.meta.sideEffect,
+		tags: tool.meta.tags ?? [],
+		idempotent: tool.meta.idempotent,
+		longRunning: tool.meta.longRunning,
+		requiresConfirmation: tool.meta.requiresConfirmation,
+		supportsCancel: tool.meta.supportsCancel,
+		supportsProgress: tool.meta.supportsProgress,
+		network: tool.meta.network,
+		artifacts: tool.meta.artifacts,
+		inputJsonSchema: toJSONSchema(tool.inputSchema),
+		outputJsonSchema: toJSONSchema(tool.outputSchema)
+	};
+}
+function toModuleCatalogEntry(module) {
+	return {
+		id: module.id,
+		title: module.title,
+		description: module.description,
+		runtime: module.runtime,
+		authType: module.auth.type,
+		tools: module.tools.map(toToolCatalogEntry),
+		categories: module.categories,
+		tags: module.tags ?? [],
+		...module.classification !== void 0 && { classification: module.classification },
+		...module.logo !== void 0 && { logo: module.logo }
+	};
+}
+//#endregion
+export { ToolError, asAnyTool, assertContracts, assertUniqueBy, bindModule, bindTool, defineModule, defineProvider, defineTool, duplicatesBy, exceptTools, filterModuleTools, filterToolsByRuntime, firstDuplicateBy, isToolArray, isToolError, listTools, logoForModuleId, mergeToolContext, onlyTools, packLogosByModuleId, requireAuth, resolveProvider, resolveTools, runTool, toModuleCatalogEntry, toToolCatalogEntry, toolRef, validateModule, validateTool, withAuth, withAuthTool, withHooks, withHooksTool };
+
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/core/bind.ts","../../src/generated/module-keys.ts","../../src/core/contracts.ts","../../src/core/catalog.ts"],"sourcesContent":["/**\n * Per-invocation auth/context bind for multi-tenant hosts.\n */\n\nimport { mergeToolContext } from './context'\nimport type { ToolSelection } from './filter-tools'\nimport { filterModuleTools } from './filter-tools'\nimport type { ToolHooks } from './hooks'\nimport { ToolError } from './errors'\nimport type { AuthDefinition, ModuleDefinition, ToolContext, ToolDefinition, ToolExecution } from './types'\n\nfunction assertAuth<TAuth>(auth: AuthDefinition<TAuth>, value: unknown): TAuth | undefined {\n\tif (auth.type === 'none') {\n\t\tif (value !== undefined) throw new ToolError('This tool does not accept auth', { code: 'bad_auth' })\n\t\treturn undefined\n\t}\n\tconst parsed = auth.schema.safeParse(value)\n\tif (!parsed.success) {\n\t\tthrow new ToolError('Invalid auth credentials', {\n\t\t\tcode: 'bad_auth',\n\t\t\tdetails: { issues: parsed.error.issues.map((i) => i.message) }\n\t\t})\n\t}\n\treturn parsed.data\n}\n\nexport type BindModuleOptions<TAuth = unknown> = {\n\tresolveAuth?: (ctx: ToolContext) => TAuth | Promise<TAuth>\n\tresolveContext?: (ctx: ToolContext) => ToolContext | Promise<ToolContext>\n\thooks?: ToolHooks\n\t/**\n\t * Restrict the tool surface after bind.\n\t * Prefer composable `onlyTools` / `exceptTools` when filtering outside bind.\n\t */\n\ttools?: ToolSelection\n}\n\nasync function resolveBoundContext<TAuth>(\n\tmoduleAuth: AuthDefinition<TAuth>,\n\tincoming: ToolContext,\n\toptions: BindModuleOptions<TAuth>\n): Promise<ToolContext> {\n\tconst base = options.resolveContext\n\t\t? mergeToolContext(incoming, await options.resolveContext(incoming))\n\t\t: { ...incoming }\n\tif (moduleAuth.type === 'none') return base\n\tif (!options.resolveAuth) {\n\t\tthrow new ToolError('resolveAuth is required for modules that declare auth', { code: 'bad_auth' })\n\t}\n\tconst auth = assertAuth(moduleAuth, await options.resolveAuth(base))\n\treturn {\n\t\t...base,\n\t\t...(auth !== undefined && { auth })\n\t}\n}\n\nexport function bindTool<TInput, TOutput, TAuth = unknown>(\n\ttool: ToolDefinition<TInput, TOutput>,\n\tmoduleAuth: AuthDefinition<TAuth>,\n\toptions: BindModuleOptions<TAuth>\n): ToolDefinition<TInput, TOutput> {\n\tconst previous = tool.execution ?? { run: tool.execute }\n\tconst bindContext = async (ctx: ToolContext): Promise<ToolContext> => {\n\t\tconst base = previous.bindContext ? await previous.bindContext(ctx) : ctx\n\t\treturn resolveBoundContext(moduleAuth, base, options)\n\t}\n\tconst execution: ToolExecution = {\n\t\t...previous,\n\t\tbindContext,\n\t\t...(options.hooks && { hooks: options.hooks })\n\t}\n\treturn {\n\t\t...tool,\n\t\texecution,\n\t\texecute: async (input, ctx) => execution.run(input, await bindContext(ctx))\n\t}\n}\n\nexport function bindModule<TAuth>(\n\tmodule: ModuleDefinition<TAuth>,\n\toptions: BindModuleOptions<TAuth>\n): ModuleDefinition<TAuth> {\n\tif (module.auth.type !== 'none' && !options.resolveAuth) {\n\t\tthrow new ToolError(`Module ${module.id} requires resolveAuth`, { code: 'bad_auth' })\n\t}\n\tconst scoped = options.tools !== undefined ? filterModuleTools(module, options.tools) : module\n\treturn {\n\t\t...scoped,\n\t\ttools: scoped.tools.map((tool) => bindTool(tool, scoped.auth, options))\n\t}\n}\n","// AUTO-GENERATED by `bun run codegen`. Do not edit by hand.\n/** Flat public export keys under src/{modules,vendors}. */\nexport const moduleKeys = [\n\t'amazon-sp-api',\n\t'artifacts',\n\t'bedrock-agentcore-browser',\n\t'bedrock-agentcore-code-interpreter',\n\t'browser',\n\t'calendar',\n\t'cloudflare-browser',\n\t'cloudflare-email',\n\t'cloudflare-sandbox',\n\t'code-sandbox',\n\t'content-type',\n\t'crypto',\n\t'document',\n\t'document-extract',\n\t'document-render',\n\t'email',\n\t'email-message',\n\t'eventbridge-scheduler',\n\t'file-convert',\n\t'files',\n\t'gotenberg',\n\t'image',\n\t'imessage',\n\t'katana',\n\t'mastra-vector',\n\t'messaging',\n\t'pdf',\n\t'pinecone',\n\t'presentation',\n\t'qdrant',\n\t'queue',\n\t'rag',\n\t'resend',\n\t's3',\n\t'scheduler',\n\t'skills',\n\t'slack',\n\t'sqs',\n\t'supabase-vector',\n\t'tasks',\n\t'teams',\n\t'telegram',\n\t'textract',\n\t'vector-store',\n\t'web-fetch',\n\t'woocommerce'\n] as const\n\nexport type ModuleKey = (typeof moduleKeys)[number]\n\n/** Capability seams under src/modules (brand-neutral model copy). */\nexport const moduleSeamKeys = [\n\t'artifacts',\n\t'browser',\n\t'calendar',\n\t'code-sandbox',\n\t'content-type',\n\t'crypto',\n\t'document',\n\t'document-extract',\n\t'document-render',\n\t'email',\n\t'email-message',\n\t'file-convert',\n\t'files',\n\t'image',\n\t'messaging',\n\t'pdf',\n\t'presentation',\n\t'queue',\n\t'rag',\n\t'scheduler',\n\t'skills',\n\t'tasks',\n\t'vector-store',\n\t'web-fetch'\n] as const\n\nexport type ModuleSeamKey = (typeof moduleSeamKeys)[number]\n","import { flatMap, isPlainObject, isString } from 'es-toolkit'\nimport { isArray } from 'es-toolkit/compat'\nimport { toJSONSchema } from 'zod'\n\nimport { moduleSeamKeys } from '../generated/module-keys'\nimport type { ModuleDefinition, ToolDefinition } from './types'\nimport { duplicatesBy } from './unique'\n\nconst FORBIDDEN_MODEL_COPY =\n\t/\\b(api[_ ]?key|apiKey|bearer token|process\\.env|vault|secret key|authorization header|withAuth)\\b/i\n\n/**\n * Brand / vendor product names banned on **capability seam** model-facing copy\n * (module + tool description and input .describe()). Vendors may name their product.\n * Keep list brand-focused; avoid bare words like \"teams\" that appear in normal English.\n */\nconst FORBIDDEN_SEAM_BRAND_COPY =\n\t/\\b(Telegram|Slack|iMessage|Resend|Cloudflare|Textract|Gotenberg|Pinecone|Qdrant|Supabase|WooCommerce|Katana|Amazon|Bot Framework|Microsoft Teams|Photon|Spectrum|Mastra|PgVector|OpenAI)\\b|\\bS3\\b|\\bR2\\b/\n\n/** Seam module ids from codegen (`src/modules/*` only — not hand-maintained). */\nconst SEAM_MODULE_IDS = new Set<string>(moduleSeamKeys)\n\nconst KEBAB_ID = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/\n\nexport type ContractIssue = {\n\tcode:\n\t\t| 'duplicate_tool_id'\n\t\t| 'empty_description'\n\t\t| 'empty_field_description'\n\t\t| 'forbidden_model_copy'\n\t\t| 'invalid_tool_id'\n\t\t| 'missing_name'\n\tmessage: string\n\tpath: string\n}\n\nexport type ContractResult = {\n\tok: boolean\n\tissues: ContractIssue[]\n}\n\nexport type CheckModelCopyOptions = {\n\t/** When true, also ban vendor brand names (capability seams). */\n\tseam?: boolean\n}\n\nfunction issue(path: string, code: ContractIssue['code'], message: string): ContractIssue {\n\treturn { path, code, message }\n}\n\nfunction checkModelCopy(\n\tpath: string,\n\ttext: string,\n\tissues: ContractIssue[],\n\toptions: CheckModelCopyOptions = {}\n): void {\n\tconst trimmed = text.trim()\n\tif (!trimmed) {\n\t\tissues.push(issue(path, 'empty_description', 'Model-facing description is empty'))\n\t\treturn\n\t}\n\tif (FORBIDDEN_MODEL_COPY.test(trimmed)) {\n\t\tissues.push(\n\t\t\tissue(\n\t\t\t\tpath,\n\t\t\t\t'forbidden_model_copy',\n\t\t\t\t'Model-facing copy must not mention credentials, env vars, vaults, or host wiring'\n\t\t\t)\n\t\t)\n\t}\n\tif (options.seam && FORBIDDEN_SEAM_BRAND_COPY.test(trimmed)) {\n\t\tissues.push(\n\t\t\tissue(\n\t\t\t\tpath,\n\t\t\t\t'forbidden_model_copy',\n\t\t\t\t'Seam model-facing copy must not name vendors or products (use channel / bound store / provider-neutral language)'\n\t\t\t)\n\t\t)\n\t}\n}\n\nfunction fieldDescribes(\n\tschema: ToolDefinition['inputSchema'],\n\tpath: string,\n\tissues: ContractIssue[],\n\toptions: CheckModelCopyOptions = {}\n): void {\n\tcheckFieldDescriptions(toJSONSchema(schema), `${path}.input`, issues, options)\n}\n\nfunction checkFieldDescriptions(\n\tschema: unknown,\n\tpath: string,\n\tissues: ContractIssue[],\n\toptions: CheckModelCopyOptions\n): void {\n\tif (!isPlainObject(schema)) return\n\tconst properties = schema['properties']\n\tif (isPlainObject(properties)) {\n\t\tfor (const [key, value] of Object.entries(properties)) {\n\t\t\tif (!isPlainObject(value)) continue\n\t\t\tconst fieldPath = `${path}.${key}`\n\t\t\tconst description = value['description']\n\t\t\tif (!isString(description) || description.trim().length === 0) {\n\t\t\t\tissues.push(\n\t\t\t\t\tissue(fieldPath, 'empty_field_description', `Input field \"${key}\" is missing a .describe() for the model`)\n\t\t\t\t)\n\t\t\t} else {\n\t\t\t\tcheckModelCopy(fieldPath, description, issues, options)\n\t\t\t}\n\t\t\tcheckFieldDescriptions(value, fieldPath, issues, options)\n\t\t}\n\t}\n\n\tfor (const [key, value] of Object.entries(schema)) {\n\t\tif (key === 'properties') continue\n\t\tif (isArray(value)) {\n\t\t\tfor (const [index, item] of value.entries()) {\n\t\t\t\tcheckFieldDescriptions(item, `${path}.${key}[${index}]`, issues, options)\n\t\t\t}\n\t\t\tcontinue\n\t\t}\n\t\tcheckFieldDescriptions(value, `${path}.${key}`, issues, options)\n\t}\n}\n\nexport function validateTool(\n\ttool: ToolDefinition,\n\tpathPrefix = tool.id,\n\toptions: CheckModelCopyOptions = {}\n): ContractResult {\n\tconst issues: ContractIssue[] = []\n\n\tif (!tool.id.trim() || !KEBAB_ID.test(tool.id)) {\n\t\tissues.push(issue(`${pathPrefix}.id`, 'invalid_tool_id', `Tool id must be kebab-case (got \"${tool.id}\")`))\n\t}\n\tif (!tool.name.trim()) {\n\t\tissues.push(issue(`${pathPrefix}.name`, 'missing_name', 'Tool name is required'))\n\t}\n\tcheckModelCopy(`${pathPrefix}.description`, tool.description, issues, options)\n\tfieldDescribes(tool.inputSchema, pathPrefix, issues, options)\n\n\treturn { ok: issues.length === 0, issues }\n}\n\nexport function validateModule(module: ModuleDefinition): ContractResult {\n\tconst issues: ContractIssue[] = []\n\tconst seam = SEAM_MODULE_IDS.has(module.id)\n\tconst copyOpts: CheckModelCopyOptions = seam ? { seam: true } : {}\n\n\tcheckModelCopy(`module.${module.id}.description`, module.description, issues, copyOpts)\n\n\tfor (const id of duplicatesBy(module.tools, (tool) => tool.id)) {\n\t\tissues.push(issue(`module.${module.id}.tools.${id}`, 'duplicate_tool_id', `Duplicate tool id \"${id}\"`))\n\t}\n\n\tissues.push(\n\t\t...flatMap(module.tools, (tool) => validateTool(tool, `module.${module.id}.tools.${tool.id}`, copyOpts).issues)\n\t)\n\n\treturn { ok: issues.length === 0, issues }\n}\n\nexport function assertContracts(result: ContractResult, label = 'contract'): void {\n\tif (result.ok) return\n\tconst detail = result.issues.map((i) => `${i.path}: ${i.message}`).join('\\n')\n\tthrow new Error(`${label} failed:\\n${detail}`)\n}\n","import { toJSONSchema } from 'zod'\n\nimport type { AuthDefinition, ModuleDefinition, ToolDefinition } from './types'\n\nexport type ToolCatalogEntry = {\n\tdescription: string\n\tid: string\n\tinputJsonSchema: Record<string, unknown>\n\tname: string\n\toutputJsonSchema: Record<string, unknown>\n\truntime: ToolDefinition['meta']['runtime']\n\tsideEffect: ToolDefinition['meta']['sideEffect']\n\ttags: readonly string[]\n\tidempotent?: boolean | undefined\n\tlongRunning?: boolean | undefined\n\trequiresConfirmation?: boolean | undefined\n\tsupportsCancel?: boolean | undefined\n\tsupportsProgress?: boolean | undefined\n\tnetwork?: boolean | undefined\n\tartifacts?: boolean | undefined\n}\n\nexport type ModuleCatalogEntry = {\n\tauthType: AuthDefinition<unknown>['type']\n\tdescription: string\n\tid: string\n\truntime: ModuleDefinition['runtime']\n\ttitle: string\n\ttools: ToolCatalogEntry[]\n\t/** Inline SVG when the pack has a logo. */\n\tlogo?: string | undefined\n\tcategories: readonly string[]\n\tclassification?: ModuleDefinition['classification']\n\ttags: readonly string[]\n}\n\nexport function toToolCatalogEntry(tool: ToolDefinition): ToolCatalogEntry {\n\treturn {\n\t\tid: tool.id,\n\t\tname: tool.name,\n\t\tdescription: tool.description,\n\t\truntime: tool.meta.runtime,\n\t\tsideEffect: tool.meta.sideEffect,\n\t\ttags: tool.meta.tags ?? [],\n\t\tidempotent: tool.meta.idempotent,\n\t\tlongRunning: tool.meta.longRunning,\n\t\trequiresConfirmation: tool.meta.requiresConfirmation,\n\t\tsupportsCancel: tool.meta.supportsCancel,\n\t\tsupportsProgress: tool.meta.supportsProgress,\n\t\tnetwork: tool.meta.network,\n\t\tartifacts: tool.meta.artifacts,\n\t\tinputJsonSchema: toJSONSchema(tool.inputSchema),\n\t\toutputJsonSchema: toJSONSchema(tool.outputSchema)\n\t}\n}\n\nexport function toModuleCatalogEntry(module: ModuleDefinition): ModuleCatalogEntry {\n\treturn {\n\t\tid: module.id,\n\t\ttitle: module.title,\n\t\tdescription: module.description,\n\t\truntime: module.runtime,\n\t\tauthType: module.auth.type,\n\t\ttools: module.tools.map(toToolCatalogEntry),\n\t\tcategories: module.categories,\n\t\ttags: module.tags ?? [],\n\t\t...(module.classification !== undefined && { classification: module.classification }),\n\t\t...(module.logo !== undefined && { logo: module.logo })\n\t}\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAS,WAAkB,MAA6B,OAAmC;CAC1F,IAAI,KAAK,SAAS,QAAQ;EACzB,IAAI,UAAU,KAAA,GAAW,MAAM,IAAI,UAAU,kCAAkC,EAAE,MAAM,WAAW,CAAC;EACnG;CACD;CACA,MAAM,SAAS,KAAK,OAAO,UAAU,KAAK;CAC1C,IAAI,CAAC,OAAO,SACX,MAAM,IAAI,UAAU,4BAA4B;EAC/C,MAAM;EACN,SAAS,EAAE,QAAQ,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,OAAO,EAAE;CAC9D,CAAC;CAEF,OAAO,OAAO;AACf;AAaA,eAAe,oBACd,YACA,UACA,SACuB;CACvB,MAAM,OAAO,QAAQ,iBAClB,iBAAiB,UAAU,MAAM,QAAQ,eAAe,QAAQ,CAAC,IACjE,EAAE,GAAG,SAAS;CACjB,IAAI,WAAW,SAAS,QAAQ,OAAO;CACvC,IAAI,CAAC,QAAQ,aACZ,MAAM,IAAI,UAAU,yDAAyD,EAAE,MAAM,WAAW,CAAC;CAElG,MAAM,OAAO,WAAW,YAAY,MAAM,QAAQ,YAAY,IAAI,CAAC;CACnE,OAAO;EACN,GAAG;EACH,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;CAClC;AACD;AAEA,SAAgB,SACf,MACA,YACA,SACkC;CAClC,MAAM,WAAW,KAAK,aAAa,EAAE,KAAK,KAAK,QAAQ;CACvD,MAAM,cAAc,OAAO,QAA2C;EAErE,OAAO,oBAAoB,YADd,SAAS,cAAc,MAAM,SAAS,YAAY,GAAG,IAAI,KACzB,OAAO;CACrD;CACA,MAAM,YAA2B;EAChC,GAAG;EACH;EACA,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAM;CAC7C;CACA,OAAO;EACN,GAAG;EACH;EACA,SAAS,OAAO,OAAO,QAAQ,UAAU,IAAI,OAAO,MAAM,YAAY,GAAG,CAAC;CAC3E;AACD;AAEA,SAAgB,WACf,QACA,SAC0B;CAC1B,IAAI,OAAO,KAAK,SAAS,UAAU,CAAC,QAAQ,aAC3C,MAAM,IAAI,UAAU,UAAU,OAAO,GAAG,wBAAwB,EAAE,MAAM,WAAW,CAAC;CAErF,MAAM,SAAS,QAAQ,UAAU,KAAA,IAAY,kBAAkB,QAAQ,QAAQ,KAAK,IAAI;CACxF,OAAO;EACN,GAAG;EACH,OAAO,OAAO,MAAM,KAAK,SAAS,SAAS,MAAM,OAAO,MAAM,OAAO,CAAC;CACvE;AACD;;;;ACpCA,MAAa,iBAAiB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACD;;;ACvEA,MAAM,uBACL;;;;;;AAOD,MAAM,4BACL;;AAGD,MAAM,kBAAkB,IAAI,IAAY,cAAc;AAEtD,MAAM,WAAW;AAwBjB,SAAS,MAAM,MAAc,MAA6B,SAAgC;CACzF,OAAO;EAAE;EAAM;EAAM;CAAQ;AAC9B;AAEA,SAAS,eACR,MACA,MACA,QACA,UAAiC,CAAC,GAC3B;CACP,MAAM,UAAU,KAAK,KAAK;CAC1B,IAAI,CAAC,SAAS;EACb,OAAO,KAAK,MAAM,MAAM,qBAAqB,mCAAmC,CAAC;EACjF;CACD;CACA,IAAI,qBAAqB,KAAK,OAAO,GACpC,OAAO,KACN,MACC,MACA,wBACA,kFACD,CACD;CAED,IAAI,QAAQ,QAAQ,0BAA0B,KAAK,OAAO,GACzD,OAAO,KACN,MACC,MACA,wBACA,kHACD,CACD;AAEF;AAEA,SAAS,eACR,QACA,MACA,QACA,UAAiC,CAAC,GAC3B;CACP,uBAAuB,aAAa,MAAM,GAAG,GAAG,KAAK,SAAS,QAAQ,OAAO;AAC9E;AAEA,SAAS,uBACR,QACA,MACA,QACA,SACO;CACP,IAAI,CAAC,cAAc,MAAM,GAAG;CAC5B,MAAM,aAAa,OAAO;CAC1B,IAAI,cAAc,UAAU,GAC3B,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAAG;EACtD,IAAI,CAAC,cAAc,KAAK,GAAG;EAC3B,MAAM,YAAY,GAAG,KAAK,GAAG;EAC7B,MAAM,cAAc,MAAM;EAC1B,IAAI,CAAC,SAAS,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,WAAW,GAC3D,OAAO,KACN,MAAM,WAAW,2BAA2B,gBAAgB,IAAI,yCAAyC,CAC1G;OAEA,eAAe,WAAW,aAAa,QAAQ,OAAO;EAEvD,uBAAuB,OAAO,WAAW,QAAQ,OAAO;CACzD;CAGD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;EAClD,IAAI,QAAQ,cAAc;EAC1B,IAAI,QAAQ,KAAK,GAAG;GACnB,KAAK,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,GACzC,uBAAuB,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,MAAM,IAAI,QAAQ,OAAO;GAEzE;EACD;EACA,uBAAuB,OAAO,GAAG,KAAK,GAAG,OAAO,QAAQ,OAAO;CAChE;AACD;AAEA,SAAgB,aACf,MACA,aAAa,KAAK,IAClB,UAAiC,CAAC,GACjB;CACjB,MAAM,SAA0B,CAAC;CAEjC,IAAI,CAAC,KAAK,GAAG,KAAK,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,GAC5C,OAAO,KAAK,MAAM,GAAG,WAAW,MAAM,mBAAmB,oCAAoC,KAAK,GAAG,GAAG,CAAC;CAE1G,IAAI,CAAC,KAAK,KAAK,KAAK,GACnB,OAAO,KAAK,MAAM,GAAG,WAAW,QAAQ,gBAAgB,uBAAuB,CAAC;CAEjF,eAAe,GAAG,WAAW,eAAe,KAAK,aAAa,QAAQ,OAAO;CAC7E,eAAe,KAAK,aAAa,YAAY,QAAQ,OAAO;CAE5D,OAAO;EAAE,IAAI,OAAO,WAAW;EAAG;CAAO;AAC1C;AAEA,SAAgB,eAAe,QAA0C;CACxE,MAAM,SAA0B,CAAC;CAEjC,MAAM,WADO,gBAAgB,IAAI,OAAO,EACG,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAEjE,eAAe,UAAU,OAAO,GAAG,eAAe,OAAO,aAAa,QAAQ,QAAQ;CAEtF,KAAK,MAAM,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,EAAE,GAC5D,OAAO,KAAK,MAAM,UAAU,OAAO,GAAG,SAAS,MAAM,qBAAqB,sBAAsB,GAAG,EAAE,CAAC;CAGvG,OAAO,KACN,GAAG,QAAQ,OAAO,QAAQ,SAAS,aAAa,MAAM,UAAU,OAAO,GAAG,SAAS,KAAK,MAAM,QAAQ,CAAC,CAAC,MAAM,CAC/G;CAEA,OAAO;EAAE,IAAI,OAAO,WAAW;EAAG;CAAO;AAC1C;AAEA,SAAgB,gBAAgB,QAAwB,QAAQ,YAAkB;CACjF,IAAI,OAAO,IAAI;CACf,MAAM,SAAS,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;CAC5E,MAAM,IAAI,MAAM,GAAG,MAAM,YAAY,QAAQ;AAC9C;;;ACnIA,SAAgB,mBAAmB,MAAwC;CAC1E,OAAO;EACN,IAAI,KAAK;EACT,MAAM,KAAK;EACX,aAAa,KAAK;EAClB,SAAS,KAAK,KAAK;EACnB,YAAY,KAAK,KAAK;EACtB,MAAM,KAAK,KAAK,QAAQ,CAAC;EACzB,YAAY,KAAK,KAAK;EACtB,aAAa,KAAK,KAAK;EACvB,sBAAsB,KAAK,KAAK;EAChC,gBAAgB,KAAK,KAAK;EAC1B,kBAAkB,KAAK,KAAK;EAC5B,SAAS,KAAK,KAAK;EACnB,WAAW,KAAK,KAAK;EACrB,iBAAiB,aAAa,KAAK,WAAW;EAC9C,kBAAkB,aAAa,KAAK,YAAY;CACjD;AACD;AAEA,SAAgB,qBAAqB,QAA8C;CAClF,OAAO;EACN,IAAI,OAAO;EACX,OAAO,OAAO;EACd,aAAa,OAAO;EACpB,SAAS,OAAO;EAChB,UAAU,OAAO,KAAK;EACtB,OAAO,OAAO,MAAM,IAAI,kBAAkB;EAC1C,YAAY,OAAO;EACnB,MAAM,OAAO,QAAQ,CAAC;EACtB,GAAI,OAAO,mBAAmB,KAAA,KAAa,EAAE,gBAAgB,OAAO,eAAe;EACnF,GAAI,OAAO,SAAS,KAAA,KAAa,EAAE,MAAM,OAAO,KAAK;CACtD;AACD"}