@acosmi/sdk-ts 1.1.0 → 1.3.0

package/dist/browser/index.mjs

@@ -1013,6 +1013,45 @@ var init_adapters = __esm({
 
 // src/index.ts
 init_types();
+
+// src/model-helpers.ts
+function modelSupportsInputModality(model, modality) {
+  if (!model) return false;
+  const mods = model.inputModalities;
+  if (!Array.isArray(mods)) return false;
+  return mods.includes(modality);
+}
+function modelSupportsImageInput(model) {
+  return modelSupportsInputModality(model, "image");
+}
+function findFirstModelByInputModality(models, modality) {
+  if (!Array.isArray(models)) return null;
+  for (const m of models) {
+    if (!m) continue;
+    if (m.isEnabled === false) continue;
+    if (!modelSupportsInputModality(m, modality)) continue;
+    return m;
+  }
+  return null;
+}
+function findDesktopVisualUnderstandingModel(models) {
+  if (!Array.isArray(models)) return null;
+  const candidates = [];
+  for (const m of models) {
+    if (!m) continue;
+    if (m.isEnabled === false) continue;
+    if (m.capabilities?.supports_desktop_visual_understanding !== true) continue;
+    if (!modelSupportsInputModality(m, "image")) continue;
+    candidates.push(m);
+  }
+  if (candidates.length === 0) return null;
+  for (const m of candidates) {
+    if (m.isDefault === true) return m;
+  }
+  return candidates[0];
+}
+
+// src/index.ts
 init_adapters();
 
 // src/auth.ts
@@ -1389,9 +1428,37 @@ var ScopeToolsExecute = "tools:execute";
 var ScopeWallet = "wallet";
 var ScopeWalletReadonly = "wallet:readonly";
 var ScopeProfile = "profile";
+var ScopeComplianceEvidenceRead = "compliance:evidence:read";
+var ScopeComplianceEvidenceWrite = "compliance:evidence:write";
+var ScopeComplianceTimestampIssue = "compliance:timestamp:issue";
+var ScopeComplianceTimestampVerify = "compliance:timestamp:verify";
+var ScopeComplianceContractSigningRead = "compliance:contract_signing:read";
+var ScopeComplianceContractSigningWrite = "compliance:contract_signing:write";
+var ScopeComplianceSealManage = "compliance:seal:manage";
+var ScopeComplianceSealApprovalRequest = "compliance:seal_approval:request";
+var ScopeComplianceSealApprovalApprove = "compliance:seal_approval:approve";
+var ScopeComplianceSealUseExecute = "compliance:seal_use:execute";
+var ScopeComplianceReportsRead = "compliance:reports:read";
+var ScopeComplianceReportsPublish = "compliance:reports:publish";
 function allScopes() {
   return [ScopeAI, ScopeSkills, ScopeAccount];
 }
+function complianceScopes() {
+  return [
+    ScopeComplianceEvidenceRead,
+    ScopeComplianceEvidenceWrite,
+    ScopeComplianceTimestampIssue,
+    ScopeComplianceTimestampVerify,
+    ScopeComplianceContractSigningRead,
+    ScopeComplianceContractSigningWrite,
+    ScopeComplianceSealManage,
+    ScopeComplianceSealApprovalRequest,
+    ScopeComplianceSealApprovalApprove,
+    ScopeComplianceSealUseExecute,
+    ScopeComplianceReportsRead,
+    ScopeComplianceReportsPublish
+  ];
+}
 function modelScopes() {
   return [ScopeAI];
 }
@@ -1402,6 +1469,171 @@ function skillScopes() {
   return [ScopeSkills];
 }
 
+// src/compliance-status.ts
+var ErrComplianceStepUpRequired = "COMPLIANCE_STEP_UP_REQUIRED";
+var ErrEnvelopeGateClosed = "ENVELOPE_GATE_CLOSED";
+var ErrProviderNotConfigured = "PROVIDER_NOT_CONFIGURED";
+var ErrProviderUnknownNoRetry = "PROVIDER_REQUEST_UNKNOWN_NO_RETRY";
+var ErrBillingCallbackCannotCommit = "BILLING_CALLBACK_CANNOT_COMMIT";
+var ErrBillingCommitRequiresLocalVerify = "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY";
+var ErrBillingS2sForbidden = "BILLING_S2S_FORBIDDEN";
+var ErrSealApprovalNotApproved = "SEAL_APPROVAL_STATE_NOT_APPROVED";
+var ErrSealApprovalExpired = "SEAL_APPROVAL_EXPIRED";
+var ErrSealApprovalNonceUsed = "SEAL_APPROVAL_NONCE_USED";
+var ErrSealApprovalContractHashMismatch = "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH";
+var ErrSealApprovalSealMismatch = "SEAL_APPROVAL_SEAL_MISMATCH";
+var ErrSealApprovalLocationMismatch = "SEAL_APPROVAL_LOCATION_MISMATCH";
+var ErrSealApprovalTransactorMismatch = "SEAL_APPROVAL_TRANSACTOR_MISMATCH";
+var ErrSealUseAlreadyConsumed = "SEAL_USE_ALREADY_CONSUMED";
+function isComplianceTerminalError(code) {
+  switch (code) {
+    case ErrEnvelopeGateClosed:
+    case ErrProviderNotConfigured:
+    case ErrProviderUnknownNoRetry:
+    case ErrBillingCallbackCannotCommit:
+    case ErrBillingCommitRequiresLocalVerify:
+    case ErrBillingS2sForbidden:
+    case ErrSealApprovalNonceUsed:
+    case ErrSealApprovalExpired:
+    case ErrSealApprovalContractHashMismatch:
+    case ErrSealApprovalSealMismatch:
+    case ErrSealApprovalLocationMismatch:
+    case ErrSealApprovalTransactorMismatch:
+    case ErrSealUseAlreadyConsumed:
+      return true;
+    default:
+      return false;
+  }
+}
+function isBillingConfirmable(providerStatus, billingStatus) {
+  return providerStatus === "success" && billingStatus === "committed";
+}
+
+// src/compliance-errors.ts
+var CODE_TO_KEY = {
+  // 通用 / token / scope (1-031-000-xxx)
+  1031000001: "COMPLIANCE_UNAUTHORIZED",
+  1031000002: "COMPLIANCE_TOKEN_INVALID",
+  1031000003: "COMPLIANCE_TOKEN_INVALID",
+  1031000004: "COMPLIANCE_TOKEN_INVALID",
+  1031000005: "COMPLIANCE_TOKEN_INVALID",
+  1031000006: "COMPLIANCE_TOKEN_INVALID",
+  1031000007: "COMPLIANCE_TOKEN_INVALID",
+  1031000008: "COMPLIANCE_TOKEN_INVALID",
+  1031000009: "COMPLIANCE_TOKEN_INVALID",
+  1031000010: "COMPLIANCE_TOKEN_INVALID",
+  1031000011: "COMPLIANCE_TOKEN_INVALID",
+  1031000012: "COMPLIANCE_INSUFFICIENT_SCOPE",
+  1031000013: "COMPLIANCE_STEP_UP_REQUIRED",
+  // Subject snapshot (1-031-001-xxx)
+  1031001001: "SUBJECT_SNAPSHOT_NOT_FOUND",
+  1031001002: "SUBJECT_SNAPSHOT_TENANT_MISMATCH",
+  1031001003: "SUBJECT_SNAPSHOT_REQUIRED",
+  // Evidence / Timestamp / Package / Report (1-031-002-xxx)
+  1031002001: "EVIDENCE_ASSET_NOT_FOUND",
+  1031002002: "SUBJECT_SNAPSHOT_TENANT_MISMATCH",
+  1031002003: "EVIDENCE_ASSET_HASH_MISMATCH",
+  1031002004: "EVIDENCE_ASSET_PAYLOAD_REQUIRED",
+  1031002005: "EVIDENCE_ASSET_PAYLOAD_REQUIRED",
+  1031002006: "TIMESTAMP_TOKEN_NOT_FOUND",
+  1031002007: "TIMESTAMP_PROVIDER_FAILED",
+  1031002008: "TIMESTAMP_PROVIDER_UNKNOWN",
+  1031002009: "TIMESTAMP_LOCAL_VERIFY_FAILED",
+  1031002010: "TIMESTAMP_PROVIDER_NOT_AVAILABLE",
+  1031002011: "EVIDENCE_PACKAGE_NOT_FOUND",
+  1031002012: "EVIDENCE_PACKAGE_TIMESTAMP_REQUIRED",
+  1031002013: "EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH",
+  1031002014: "REPORT_NOT_FOUND",
+  1031002015: "REPORT_ALREADY_PUBLISHED",
+  1031002016: "REPORT_DRAFT_REQUIRED",
+  1031002017: "EVIDENCE_VERIFY_TARGET_REQUIRED",
+  1031002018: "EVIDENCE_VERIFY_TARGET_NOT_FOUND",
+  // Provider request (1-031-003-xxx)
+  1031003001: "PROVIDER_REQUEST_UNKNOWN_NO_RETRY",
+  1031003002: "PROVIDER_CALLBACK_SOURCE_INVALID",
+  1031003003: "PROVIDER_NOT_CONFIGURED",
+  1031003010: "PROVIDER_REQUEST_NOT_FOUND",
+  1031003011: "PROVIDER_REQUEST_IDEMPOTENCY_REQUIRED",
+  1031003012: "PROVIDER_REQUEST_STATUS_NOT_TERMINAL",
+  // Envelope (1-031-004-xxx)
+  1031004001: "ENVELOPE_NOT_FOUND",
+  1031004002: "ENVELOPE_TENANT_MISMATCH",
+  1031004003: "ENVELOPE_STATE_NOT_ALLOWED",
+  1031004004: "ENVELOPE_GATE_CLOSED",
+  1031004005: "CONTRACT_NOT_FOUND",
+  1031004006: "CONTRACT_HASH_MISMATCH",
+  1031004007: "CONTRACT_NOT_FOUND",
+  1031004008: "PROVIDER_AUTHORIZATION_NOT_CONFIRMED",
+  1031004009: "PROVIDER_AUTHORIZATION_NOT_CONFIRMED",
+  1031004010: "ENVELOPE_EVIDENCE_NOT_READY",
+  // Seal approval / use (1-031-005-xxx)
+  1031005001: "SEAL_ASSET_NOT_FOUND",
+  1031005010: "SEAL_APPROVAL_NOT_FOUND",
+  1031005011: "SEAL_APPROVAL_NOT_FOUND",
+  1031005012: "SEAL_APPROVAL_STATE_NOT_APPROVED",
+  1031005013: "SEAL_APPROVAL_EXPIRED",
+  1031005014: "SEAL_APPROVAL_ALREADY_USED",
+  1031005015: "SEAL_APPROVAL_NONCE_USED",
+  1031005016: "SEAL_APPROVAL_SEAL_MISMATCH",
+  1031005017: "SEAL_APPROVAL_LOCATION_MISMATCH",
+  1031005018: "SEAL_APPROVAL_TRANSACTOR_MISMATCH",
+  1031005019: "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH",
+  1031005020: "SEAL_APPROVAL_INVALID_TRANSITION",
+  1031005030: "SEAL_USE_ALREADY_CONSUMED",
+  // Billing (1-031-006-xxx)
+  1031006004: "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY",
+  1031006005: "BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS",
+  1031006007: "BILLING_CALLBACK_CANNOT_COMMIT",
+  1031006008: "BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE",
+  1031006009: "BILLING_S2S_FORBIDDEN",
+  // Audit (1-031-007-xxx)
+  1031007011: "AUDIT_CHAIN_TAMPER_DETECTED"
+};
+var STEP_UP_KEYS = /* @__PURE__ */ new Set(["COMPLIANCE_STEP_UP_REQUIRED"]);
+var TERMINAL_KEYS = /* @__PURE__ */ new Set([
+  "ENVELOPE_GATE_CLOSED",
+  "PROVIDER_NOT_CONFIGURED",
+  "PROVIDER_REQUEST_UNKNOWN_NO_RETRY",
+  "BILLING_CALLBACK_CANNOT_COMMIT",
+  "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY",
+  "BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS",
+  "BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE",
+  "BILLING_S2S_FORBIDDEN",
+  "SEAL_APPROVAL_NONCE_USED",
+  "SEAL_APPROVAL_EXPIRED",
+  "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH",
+  "SEAL_APPROVAL_SEAL_MISMATCH",
+  "SEAL_APPROVAL_LOCATION_MISMATCH",
+  "SEAL_APPROVAL_TRANSACTOR_MISMATCH",
+  "SEAL_USE_ALREADY_CONSUMED",
+  "CONTRACT_HASH_MISMATCH",
+  "TIMESTAMP_LOCAL_VERIFY_FAILED",
+  "EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH",
+  "AUDIT_CHAIN_TAMPER_DETECTED",
+  "PROVIDER_REQUEST_NOT_FOUND",
+  "EVIDENCE_ASSET_HASH_MISMATCH",
+  "EVIDENCE_VERIFY_TARGET_NOT_FOUND",
+  "REPORT_ALREADY_PUBLISHED"
+]);
+var RETRYABLE_KEYS = /* @__PURE__ */ new Set([]);
+function classifyComplianceError(err) {
+  const key = CODE_TO_KEY[err.code] ?? "UNKNOWN_COMPLIANCE_ERROR";
+  return {
+    code: err.code,
+    message: err.message,
+    key,
+    retryable: RETRYABLE_KEYS.has(key),
+    terminal: TERMINAL_KEYS.has(key),
+    stepUpRequired: STEP_UP_KEYS.has(key)
+  };
+}
+function isComplianceBusinessError(err) {
+  return err.code >= 1031e6 && err.code <= 1031999999;
+}
+
+// src/client.ts
+init_types();
+
 // src/store.ts
 var fileLockDefaults = {
   /** 获取锁的超时上限 (毫秒). refresh 流程含网络 < 30s, 30s 已远超正常完成时间. */
@@ -1677,361 +1909,93 @@ function computeBackoff(p, attempt, err) {
   return d;
 }
 
-// src/sanitize/index.ts
-var sanitize_exports = {};
-__export(sanitize_exports, {
-  BlockCodeExecutionToolResult: () => BlockCodeExecutionToolResult,
-  BlockContainerUpload: () => BlockContainerUpload,
-  BlockDeniedError: () => BlockDeniedError,
-  BlockDocument: () => BlockDocument,
-  BlockImage: () => BlockImage,
-  BlockMCPToolResult: () => BlockMCPToolResult,
-  BlockMCPToolUse: () => BlockMCPToolUse,
-  BlockRedactedThinking: () => BlockRedactedThinking,
-  BlockSearchResult: () => BlockSearchResult,
-  BlockServerToolUse: () => BlockServerToolUse,
-  BlockText: () => BlockText,
-  BlockThinking: () => BlockThinking,
-  BlockToolReference: () => BlockToolReference,
-  BlockToolResult: () => BlockToolResult,
-  BlockToolUse: () => BlockToolUse,
-  BlockVideo: () => BlockVideo,
-  BlockWebSearchToolResult: () => BlockWebSearchToolResult,
-  DeltaCitations: () => DeltaCitations,
-  DeltaInputJSON: () => DeltaInputJSON,
-  DeltaSignature: () => DeltaSignature,
-  DeltaText: () => DeltaText,
-  DeltaThinking: () => DeltaThinking,
-  EphemeralMarkerField: () => EphemeralMarkerField,
-  ErrBlockDenied: () => ErrBlockDenied,
-  ErrHistoryTooDeep: () => ErrHistoryTooDeep,
-  HistoryTooDeepError: () => HistoryTooDeepError,
-  SizeError: () => SizeError,
-  dropBlocks: () => dropBlocks,
-  sanitize: () => sanitize,
-  stripEphemeral: () => stripEphemeral
-});
-
-// src/sanitize/types.ts
-var BlockText = "text";
-var BlockImage = "image";
-var BlockVideo = "video";
-var BlockDocument = "document";
-var BlockSearchResult = "search_result";
-var BlockThinking = "thinking";
-var BlockRedactedThinking = "redacted_thinking";
-var BlockToolUse = "tool_use";
-var BlockToolResult = "tool_result";
-var BlockToolReference = "tool_reference";
-var BlockServerToolUse = "server_tool_use";
-var BlockWebSearchToolResult = "web_search_tool_result";
-var BlockCodeExecutionToolResult = "code_execution_tool_result";
-var BlockMCPToolUse = "mcp_tool_use";
-var BlockMCPToolResult = "mcp_tool_result";
-var BlockContainerUpload = "container_upload";
-var DeltaText = "text_delta";
-var DeltaInputJSON = "input_json_delta";
-var DeltaThinking = "thinking_delta";
-var DeltaSignature = "signature_delta";
-var DeltaCitations = "citations_delta";
-var EphemeralMarkerField = "acosmi_ephemeral";
-
-// src/sanitize/config.ts
-var HistoryTooDeepError = class extends Error {
-  constructor() {
-    super("sanitize: messages history exceeds configured depth");
-    this.name = "HistoryTooDeepError";
-  }
-};
-var BlockDeniedError = class extends Error {
-  constructor() {
-    super("sanitize: block type permanently denied");
-    this.name = "BlockDeniedError";
-  }
-};
-var SizeError = class extends Error {
-  blockType;
-  actual;
-  limit;
-  constructor(blockType, actual, limit) {
-    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
-    this.name = "SizeError";
-    this.blockType = blockType;
-    this.actual = actual;
-    this.limit = limit;
-  }
-};
-var ErrHistoryTooDeep = new HistoryTooDeepError();
-var ErrBlockDenied = new BlockDeniedError();
+// src/client.ts
+init_adapters();
 
-// src/sanitize/history.ts
-function dropBlocks(messages, pred) {
-  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
-  const out = [];
-  for (const msg of messages) {
-    if (!isPlainObject(msg)) {
-      out.push(msg);
-      continue;
-    }
-    const content = msg["content"];
-    if (!Array.isArray(content)) {
-      out.push(msg);
-      continue;
-    }
-    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
-    if (!changed) {
-      out.push(msg);
-      continue;
+// src/stream-meta.ts
+function extractAnthropicBlockMeta(eventType, data, blockTypeMap) {
+  switch (eventType) {
+    case "content_block_start": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
+      }
+      const index = payload.index ?? 0;
+      const meta = {
+        type: payload.content_block?.type ?? "",
+        ephemeral: payload.content_block?.acosmi_ephemeral ?? false
+      };
+      blockTypeMap.set(index, meta);
+      return [index, meta.type, meta.ephemeral];
     }
-    if (kept.length === 0) {
-      continue;
+    case "content_block_delta": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
+      }
+      const index = payload.index ?? 0;
+      const meta = blockTypeMap.get(index);
+      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
     }
-    const newMsg = { ...msg };
-    newMsg["content"] = kept;
-    out.push(newMsg);
-  }
-  return out;
-}
-function collectDroppedToolUseIDs(messages, pred) {
-  const ids = /* @__PURE__ */ new Set();
-  for (const msg of messages) {
-    if (!isPlainObject(msg)) continue;
-    const content = msg["content"];
-    if (!Array.isArray(content)) continue;
-    for (const raw of content) {
-      if (!isPlainObject(raw)) continue;
-      if (!pred(raw)) continue;
-      const t = raw["type"];
-      if (typeof t !== "string") continue;
-      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
-        const id = raw["id"];
-        if (typeof id === "string" && id !== "") ids.add(id);
+    case "content_block_stop": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
       }
+      const index = payload.index ?? 0;
+      const meta = blockTypeMap.get(index);
+      blockTypeMap.delete(index);
+      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
     }
+    default:
+      return [0, "", false];
   }
-  return ids;
 }
-function filterBlocks(content, pred, droppedToolUseIDs) {
-  const kept = [];
-  let changed = false;
-  for (const raw of content) {
-    if (!isPlainObject(raw)) {
-      kept.push(raw);
-      continue;
-    }
-    if (pred(raw)) {
-      changed = true;
-      continue;
+
+// src/client.ts
+init_openai();
+
+// src/client-helpers.ts
+init_types();
+var maxDownloadSize = 50 * 1024 * 1024;
+var maxErrorBodySize = 1 * 1024 * 1024;
+var maxSSELineSize = 1 * 1024 * 1024;
+var modelCacheTTLMs = 5 * 60 * 1e3;
+var coefCacheTTLMs = 8 * 1e3;
+function parseHTTPErrorWithHeader(statusCode, body, header) {
+  const bodyStr = typeof body === "string" ? body : new TextDecoder().decode(body);
+  let retryAfter = 0;
+  if (header) {
+    const ra = header.get("Retry-After");
+    if (ra) {
+      const sec = parseInt(ra, 10);
+      if (!isNaN(sec) && sec > 0) retryAfter = sec;
     }
-    if (droppedToolUseIDs.size > 0) {
-      const t = raw["type"];
-      if (t === "tool_result" || t === "mcp_tool_result") {
-        const id = raw["tool_use_id"];
-        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
-          changed = true;
-          continue;
-        }
+  }
+  if (bodyStr.length === 0) {
+    return new HTTPError(statusCode, { retryAfter });
+  }
+  let type = "";
+  let message = "";
+  try {
+    const obj = JSON.parse(bodyStr);
+    if (obj && typeof obj === "object") {
+      const errObj = obj.error;
+      if (errObj && typeof errObj === "object") {
+        const e = errObj;
+        if (typeof e.message === "string") message = e.message;
+        if (typeof e.type === "string") type = e.type;
       }
     }
-    kept.push(raw);
+  } catch {
   }
-  return { kept, changed };
-}
-function stripEphemeral(messages) {
-  return dropBlocks(messages, (b) => {
-    const t = b["type"];
-    if (t === "thinking" || t === "redacted_thinking") {
-      return false;
-    }
-    const v = b[EphemeralMarkerField];
-    return v === true;
-  });
-}
-function isPlainObject(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-// src/sanitize/defensive.ts
-function sanitize(messages, cfg) {
-  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
-    throw ErrHistoryTooDeep;
-  }
-  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
-    checkMediaSizes(messages, cfg);
-  }
-  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
-    const denySet = /* @__PURE__ */ new Set();
-    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
-    messages = dropBlocks(messages, (b) => {
-      const t = b["type"];
-      return typeof t === "string" && denySet.has(t);
-    });
-  }
-  return messages;
-}
-function checkMediaSizes(messages, cfg) {
-  for (const msg of messages) {
-    if (!isPlainObject2(msg)) continue;
-    const content = msg["content"];
-    if (!Array.isArray(content)) continue;
-    for (const raw of content) {
-      if (!isPlainObject2(raw)) continue;
-      const bt = raw["type"];
-      if (typeof bt !== "string") continue;
-      let limit = 0;
-      switch (bt) {
-        case "image":
-          limit = cfg.maxImageBytes ?? 0;
-          break;
-        case "video":
-          limit = cfg.maxVideoBytes ?? 0;
-          break;
-        case "document":
-          limit = cfg.maxPDFBytes ?? 0;
-          break;
-        default:
-          continue;
-      }
-      if (limit <= 0) continue;
-      const data = extractBase64Data(raw);
-      if (data === "") continue;
-      const actual = base64DecodedLen(data);
-      if (actual > limit) {
-        throw new SizeError(bt, actual, limit);
-      }
-    }
-  }
-}
-function extractBase64Data(block) {
-  const src = block["source"];
-  if (!isPlainObject2(src)) return "";
-  if (src["type"] !== "base64") return "";
-  const dataRaw = src["data"];
-  if (typeof dataRaw !== "string") return "";
-  let data = dataRaw;
-  const i = data.indexOf("base64,");
-  if (i >= 0) {
-    data = data.slice(i + "base64,".length);
-  }
-  return data;
-}
-function base64DecodedLen(b64) {
-  const n = b64.length;
-  let pad = 0;
-  if (n >= 1 && b64[n - 1] === "=") pad++;
-  if (n >= 2 && b64[n - 2] === "=") pad++;
-  return Math.floor(n * 3 / 4) - pad;
-}
-function isPlainObject2(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-// src/stream-meta.ts
-function extractAnthropicBlockMeta(eventType, data, blockTypeMap) {
-  switch (eventType) {
-    case "content_block_start": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = {
-        type: payload.content_block?.type ?? "",
-        ephemeral: payload.content_block?.acosmi_ephemeral ?? false
-      };
-      blockTypeMap.set(index, meta);
-      return [index, meta.type, meta.ephemeral];
-    }
-    case "content_block_delta": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = blockTypeMap.get(index);
-      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
-    }
-    case "content_block_stop": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = blockTypeMap.get(index);
-      blockTypeMap.delete(index);
-      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
-    }
-    default:
-      return [0, "", false];
-  }
-}
-
-// src/agent-runs-types.ts
-var AgentRunStreamError = class extends Error {
-  event;
-  code;
-  stage;
-  retryable;
-  constructor(event) {
-    const err = event.error;
-    super(err.stage ? `agent run failed: ${err.stage}: ${err.message}` : `agent run failed: ${err.message}`);
-    this.name = "AgentRunStreamError";
-    this.event = event;
-    this.code = err.code ?? "";
-    this.stage = err.stage ?? "";
-    this.retryable = err.retryable ?? false;
-  }
-};
-
-// src/client/agent-runs.ts
-init_types();
-
-// src/client.ts
-init_types();
-init_adapters();
-init_openai();
-
-// src/client-helpers.ts
-init_types();
-var maxDownloadSize = 50 * 1024 * 1024;
-var maxErrorBodySize = 1 * 1024 * 1024;
-var maxSSELineSize = 1 * 1024 * 1024;
-var modelCacheTTLMs = 5 * 60 * 1e3;
-var coefCacheTTLMs = 8 * 1e3;
-function parseHTTPErrorWithHeader(statusCode, body, header) {
-  const bodyStr = typeof body === "string" ? body : new TextDecoder().decode(body);
-  let retryAfter = 0;
-  if (header) {
-    const ra = header.get("Retry-After");
-    if (ra) {
-      const sec = parseInt(ra, 10);
-      if (!isNaN(sec) && sec > 0) retryAfter = sec;
-    }
-  }
-  if (bodyStr.length === 0) {
-    return new HTTPError(statusCode, { retryAfter });
-  }
-  let type = "";
-  let message = "";
-  try {
-    const obj = JSON.parse(bodyStr);
-    if (obj && typeof obj === "object") {
-      const errObj = obj.error;
-      if (errObj && typeof errObj === "object") {
-        const e = errObj;
-        if (typeof e.message === "string") message = e.message;
-        if (typeof e.type === "string") type = e.type;
-      }
-    }
-  } catch {
-  }
-  return new HTTPError(statusCode, { type, message, retryAfter, body: bodyStr });
+  return new HTTPError(statusCode, { type, message, retryAfter, body: bodyStr });
 }
 function classifyTransport(op, urlStr, err) {
   const ne = new NetworkError(op, urlStr, err);
@@ -2197,6 +2161,8 @@ var Client = class _Client {
   /** SDK 内部使用 — 业务方法 (mixin) 通过 this.* 访问以下字段 */
   /** 服务器根地址 (已 trim 尾随 /) */
   serverURL;
+  /** Compliance API 根地址 (已 trim 尾随 /); null = 走默认 ${serverURL}/admin-api */
+  complianceBaseURL;
   /** OAuth metadata (lazy loaded) */
   meta = null;
   /** 当前 token (内存) */
@@ -2230,6 +2196,7 @@ var Client = class _Client {
   coefMu = Promise.resolve();
   constructor(cfg = {}) {
     this.serverURL = (cfg.serverURL ?? "https://acosmi.com").replace(/\/+$/, "");
+    this.complianceBaseURL = cfg.complianceBaseURL ? cfg.complianceBaseURL.replace(/\/+$/, "") : null;
     this.store = cfg.store ?? defaultTokenStore();
     this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);
     this.retryPolicy = effectivePolicy(cfg.retryPolicy ?? null);
@@ -2588,14 +2555,15 @@ var Client = class _Client {
       null,
       signal
     );
-    this.modelCache = result.data;
+    const normalized = normalizeInputModalities(result.data);
+    this.modelCache = normalized;
     this.modelCacheTimeMs = Date.now();
     let status = "";
     if (headers) {
       const h = headers.get("X-Entitlement-Filter-Status");
       if (h) status = h;
     }
-    return { models: result.data, status };
+    return { models: normalized, status };
   }
   /** 查询当前用户账户级权益总览 (v0.19+) */
   async getQuotaSummary(signal) {
@@ -2997,6 +2965,19 @@ var Client = class _Client {
     }
     return base + path;
   }
+  /**
+   * Compliance API URL 拼接。
+   *
+   * `complianceBaseURL` 已配置时直接拼接；未配置时默认
+   * `${serverURL}/admin-api` + path，匹配 Java compliance controller 的
+   * `/compliance/...` 路径。
+   *
+   * 不复用 `apiURL`：apiURL 强制追加 `/api/v4`，与 compliance 路径不同。
+   */
+  complianceURL(path) {
+    const base = this.complianceBaseURL ?? this.serverURL + "/admin-api";
+    return base + path;
+  }
   /** GET/POST/... 通用 JSON 调用 (返回 result 已 typed) */
   async doJSON(method, path, body, signal) {
     const r = await this.doJSONFull(method, path, body, signal);
@@ -3228,9 +3209,24 @@ function zeroModelCapabilities() {
     supports_token_efficient: false,
     supports_redact_thinking: false,
     max_input_tokens: 0,
-    max_output_tokens: 0
+    max_output_tokens: 0,
+    supports_desktop_visual_understanding: false
   };
 }
+function normalizeInputModalities(models) {
+  if (!Array.isArray(models)) return models;
+  for (const m of models) {
+    if (!m || typeof m !== "object") continue;
+    if (Array.isArray(m.inputModalities)) continue;
+    const snake = m.input_modalities;
+    if (Array.isArray(snake)) {
+      m.inputModalities = snake.filter(
+        (v) => v === "text" || v === "image"
+      );
+    }
+  }
+  return models;
+}
 function withRequestTimeout(ms, parent) {
   const ctl = new AbortController();
   const timer = setTimeout(() => ctl.abort(), ms);
@@ -3271,7 +3267,753 @@ async function sleep(ms, signal) {
   });
 }
 
-// src/client/agent-runs.ts
+// src/client/compliance.ts
+init_types();
+var cache = /* @__PURE__ */ new WeakMap();
+Object.defineProperty(Client.prototype, "compliance", {
+  configurable: true,
+  enumerable: false,
+  get() {
+    let existing = cache.get(this);
+    if (!existing) {
+      existing = new ComplianceClient(this);
+      cache.set(this, existing);
+    }
+    return existing;
+  }
+});
+var DEFAULT_POLL = {
+  timeoutMs: 6e4,
+  initialIntervalMs: 1e3,
+  maxIntervalMs: 5e3,
+  multiplier: 1.5
+};
+var CompliancePollError = class extends Error {
+  kind;
+  lastInfo;
+  constructor(message, kind, lastInfo) {
+    super(message);
+    this.name = "CompliancePollError";
+    this.kind = kind;
+    this.lastInfo = lastInfo;
+  }
+};
+var ComplianceClient = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  // =========================================================================
+  // Evidence Asset
+  // =========================================================================
+  /** 创建证据资产（写）。 */
+  createEvidenceAsset(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/evidence/assets",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 证据资产详情。 */
+  getEvidenceAsset(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/assets/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 公开 verify。隐私边界：返回字段不含 PII / 合同原文 / storage / provider raw。
+   * 服务端不要求 compliance scope（公开端点）；但 SDK 仍带上 token 以便审计。
+   */
+  verifyEvidencePublic(params, signal) {
+    const q = new URLSearchParams();
+    if (params.evidenceNo) q.set("evidenceNo", params.evidenceNo);
+    if (params.publicVerifyCode) q.set("publicVerifyCode", params.publicVerifyCode);
+    const qs = q.toString();
+    return this.read(
+      "GET",
+      `/compliance/evidence/verify${qs ? "?" + qs : ""}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Timestamp
+  // =========================================================================
+  /** 申请时间章（写）。SDK 永远不传 provider 字段。 */
+  issueTimestamp(req, opts = {}) {
+    return this.write("POST", "/compliance/timestamps", req, writeCtx(opts));
+  }
+  /** 给已有资产申请时间章。SDK 永远不传 provider 字段。 */
+  issueTimestampForAsset(assetId, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/evidence/assets/${encodeURIComponent(assetId)}/timestamp`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 时间章 token 详情。 */
+  getTimestamp(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/timestamps/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /** verify — 本地离线校验已申请的时间章。 */
+  verifyTimestamp(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/timestamps/verify",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 轮询到 VERIFIED 终态。
+   * - VERIFIED → 返回 token；
+   * - FAILED / LOCAL_VERIFY_FAILED → 抛 {@link CompliancePollError} kind='terminal_failure'；
+   * - UNKNOWN / RETRYING / PENDING → 继续轮询直到 timeout；
+   * - timeout → 抛 {@link CompliancePollError} kind='timeout'。
+   */
+  async waitForTimestampVerified(id, opts = {}) {
+    return this.poll(
+      () => this.getTimestamp(id, opts.signal),
+      (t) => classifyTimestamp(t.verificationStatus),
+      opts
+    );
+  }
+  // =========================================================================
+  // Evidence Package
+  // =========================================================================
+  /** 构建证据包（写）。 */
+  buildEvidencePackage(assetId, timestampTokenId, opts = {}) {
+    const tsParam = timestampTokenId == null ? "" : "?timestampTokenId=" + encodeURIComponent(timestampTokenId);
+    return this.write(
+      "POST",
+      `/compliance/evidence/assets/${encodeURIComponent(assetId)}/packages${tsParam}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  // =========================================================================
+  // Report
+  // =========================================================================
+  /** 创建证据报告（写）。 */
+  createReport(req, opts = {}) {
+    return this.write("POST", "/compliance/reports", req, writeCtx(opts));
+  }
+  /** 读 — 报告详情。 */
+  getReport(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 发布报告（写，step-up 必须）。
+   *
+   * 缺少 step-up 时服务端会返回 `COMPLIANCE_STEP_UP_REQUIRED`（数值码
+   * 1031000013）。SDK 不会自动重试；调用方需要引导用户重新做 OAuth introspection 或
+   * 重新登录后再次调用本方法（使用同一 idempotency-key）。
+   */
+  publishReport(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/reports/${encodeURIComponent(id)}/publish`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 下载报告（读）。返回 {@link ReportDownload}：报告 hash + 资产 hash + 证据包 hash +
+   * 时间章 serial/genTime，足以离线复核。
+   * 不返回 bodyCanonicalJson / storage key / subject snapshot id。
+   */
+  downloadReport(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/${encodeURIComponent(id)}/download`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Signing Envelope
+  // =========================================================================
+  /** 创建 envelope（写）。返回 envelope id。 */
+  createSigningEnvelope(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/signing-envelopes",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — envelope 详情。租户由服务端从 compliance token principal 推导。 */
+  getSigningEnvelope(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 正式签署（写，step-up 必须）。
+   *
+   * 服务端闸门关闭时会一致返回 `ENVELOPE_GATE_CLOSED` (1031004004)。
+   * SDK 不重试、不伪成功；调用方应该将该错误展示为"功能未开放"。
+   */
+  signEnvelope(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/sign`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 创建 H5 签署短链（写，step-up 必须）。
+   *
+   * 同上：服务端闸门关闭时 SDK 不重试。
+   */
+  createH5SigningUrl(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/h5-url`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 同步 provider 状态（写但只读对账，不创建新 provider 请求）。 */
+  syncSigningEnvelopeStatus(envelopeId, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/sync-provider-status`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  // =========================================================================
+  // Seal Approval
+  // =========================================================================
+  submitSealApproval(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/seal-approvals",
+      req,
+      writeCtx(opts)
+    );
+  }
+  approveSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.expiresAt) q.set("expiresAt", query.expiresAt);
+    if (query.note) q.set("note", query.note);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/approve${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  rejectSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.reason) q.set("reason", query.reason);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/reject${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  cancelSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.reason) q.set("reason", query.reason);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/cancel${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  listPendingSealApprovals(signal) {
+    return this.read(
+      "GET",
+      "/compliance/seal-approvals/pending",
+      null,
+      signal
+    );
+  }
+  getSealApproval(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Provider Request (read-only)
+  // =========================================================================
+  getProviderRequest(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/provider-requests/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 轮询 provider request 到 SUCCESS / FAILED 终态。
+   * - SUCCESS / FAILED → 返回最后视图；
+   * - UNKNOWN / RETRYING / PENDING → 继续轮询；
+   * - timeout → 抛 {@link CompliancePollError} kind='timeout'，不自动重发原 provider 请求。
+   *
+   * SUCCESS 不代表 billing 已 commit；调用方仍需通过业务侧 envelope / asset 终态判断。
+   */
+  async waitForProviderRequestTerminal(id, opts = {}) {
+    return this.poll(
+      () => this.getProviderRequest(id, opts.signal),
+      (v) => classifyProviderStatus(v.status),
+      opts
+    );
+  }
+  // =========================================================================
+  // Error classification (re-export for convenience)
+  // =========================================================================
+  classifyError(err) {
+    if (!isBusinessErrorLike(err)) return null;
+    if (!isComplianceBusinessError(err)) return null;
+    return classifyComplianceError(err);
+  }
+  // =========================================================================
+  // Internal helpers
+  // =========================================================================
+  /**
+   * 读路径：GET / 公开 verify。允许 401 单次刷新后重放（GET 幂等安全）。
+   * 与 client.doJSONFullInternal 行为一致；不复用其代码因为 base URL 不同。
+   */
+  async read(method, path, body, signal, extraHeaders = {}) {
+    return this.executeJson(method, path, body, signal, {
+      retryOn401: true,
+      extraHeaders
+    });
+  }
+  /**
+   * 写路径：POST。
+   * - 发送前 ensureToken 一次确保 token fresh。
+   * - 不自动 401 重放：401 → 抛 HTTPError；调用方必须自己刷新 token 后用同一
+   *   idempotency-key 重新发起，避免 provider 侧重复请求。
+   * - 不走 doRequestWithRetry：写操作不允许 5xx/timeout 自动重试。
+   */
+  async write(method, path, body, ctx) {
+    const headers = { ...ctx.extraHeaders ?? {} };
+    if (ctx.idempotencyKey) headers["Idempotency-Key"] = ctx.idempotencyKey;
+    return this.executeJson(method, path, body, ctx.signal, {
+      retryOn401: false,
+      extraHeaders: headers
+    });
+  }
+  async executeJson(method, path, body, signal, opts, retried = false) {
+    const token = await this.client.ensureToken(signal);
+    const url = this.client.complianceURL(path);
+    const headers = {
+      Authorization: `Bearer ${token}`,
+      Accept: "application/json",
+      ...opts.extraHeaders
+    };
+    let bodyStr;
+    if (body != null) {
+      bodyStr = typeof body === "string" ? body : JSON.stringify(body);
+      headers["Content-Type"] = "application/json";
+    }
+    const resp = await this.client.doRequest({ method, url, headers, body: bodyStr }, signal);
+    if (resp.status === 401 && opts.retryOn401 && !retried) {
+      try {
+        await resp.body?.cancel();
+      } catch {
+      }
+      await this.client.forceRefresh(signal);
+      return this.executeJson(method, path, body, signal, opts, true);
+    }
+    if (resp.status < 200 || resp.status >= 300) {
+      const bodyBytes = resp.body ? await readLimited(resp.body, maxErrorBodySize) : new Uint8Array();
+      throw parseHTTPErrorWithHeader(resp.status, bodyBytes, resp.headers);
+    }
+    const text = await resp.text();
+    if (!text) return void 0;
+    const parsed = JSON.parse(text);
+    const bizErr = apiResponseBusinessError(parsed);
+    if (bizErr) throw bizErr;
+    return parsed.data;
+  }
+  async poll(fetcher, classify, opts) {
+    const cfg = {
+      timeoutMs: opts.timeoutMs ?? DEFAULT_POLL.timeoutMs,
+      initialIntervalMs: opts.initialIntervalMs ?? DEFAULT_POLL.initialIntervalMs,
+      maxIntervalMs: opts.maxIntervalMs ?? DEFAULT_POLL.maxIntervalMs,
+      multiplier: opts.multiplier ?? DEFAULT_POLL.multiplier
+    };
+    const deadline = Date.now() + cfg.timeoutMs;
+    let interval = cfg.initialIntervalMs;
+    let lastValue;
+    while (Date.now() < deadline) {
+      if (opts.signal?.aborted) {
+        throw new CompliancePollError("compliance poll aborted", "unknown");
+      }
+      lastValue = await fetcher();
+      const decision = classify(lastValue);
+      if (decision === "done") return lastValue;
+      if (decision === "failed") {
+        throw new CompliancePollError(
+          "compliance poll observed terminal failure",
+          "terminal_failure"
+        );
+      }
+      const sleepMs = Math.min(interval, deadline - Date.now());
+      if (sleepMs <= 0) break;
+      await sleep2(sleepMs, opts.signal);
+      interval = Math.min(Math.floor(interval * cfg.multiplier), cfg.maxIntervalMs);
+    }
+    throw new CompliancePollError("compliance poll timed out", "timeout");
+  }
+};
+function classifyTimestamp(status) {
+  switch (status) {
+    case "VERIFIED":
+      return "done";
+    case "FAILED":
+    case "LOCAL_VERIFY_FAILED":
+      return "failed";
+    case "PENDING":
+    case "UNKNOWN":
+    case "RETRYING":
+    default:
+      return "continue";
+  }
+}
+function classifyProviderStatus(status) {
+  switch (status) {
+    case "SUCCESS":
+      return "done";
+    case "FAILED":
+      return "failed";
+    case "PENDING":
+    case "UNKNOWN":
+    case "RETRYING":
+    default:
+      return "continue";
+  }
+}
+function writeCtx(opts, extraHeaders = {}) {
+  return {
+    idempotencyKey: opts.idempotencyKey,
+    signal: opts.signal,
+    extraHeaders
+  };
+}
+function isBusinessErrorLike(err) {
+  if (err == null || typeof err !== "object") return false;
+  return typeof err.code === "number";
+}
+function sleep2(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(new CompliancePollError("compliance poll aborted", "unknown"));
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      reject(new CompliancePollError("compliance poll aborted", "unknown"));
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+
+// src/sanitize/index.ts
+var sanitize_exports = {};
+__export(sanitize_exports, {
+  BlockCodeExecutionToolResult: () => BlockCodeExecutionToolResult,
+  BlockContainerUpload: () => BlockContainerUpload,
+  BlockDeniedError: () => BlockDeniedError,
+  BlockDocument: () => BlockDocument,
+  BlockImage: () => BlockImage,
+  BlockMCPToolResult: () => BlockMCPToolResult,
+  BlockMCPToolUse: () => BlockMCPToolUse,
+  BlockRedactedThinking: () => BlockRedactedThinking,
+  BlockSearchResult: () => BlockSearchResult,
+  BlockServerToolUse: () => BlockServerToolUse,
+  BlockText: () => BlockText,
+  BlockThinking: () => BlockThinking,
+  BlockToolReference: () => BlockToolReference,
+  BlockToolResult: () => BlockToolResult,
+  BlockToolUse: () => BlockToolUse,
+  BlockVideo: () => BlockVideo,
+  BlockWebSearchToolResult: () => BlockWebSearchToolResult,
+  DeltaCitations: () => DeltaCitations,
+  DeltaInputJSON: () => DeltaInputJSON,
+  DeltaSignature: () => DeltaSignature,
+  DeltaText: () => DeltaText,
+  DeltaThinking: () => DeltaThinking,
+  EphemeralMarkerField: () => EphemeralMarkerField,
+  ErrBlockDenied: () => ErrBlockDenied,
+  ErrHistoryTooDeep: () => ErrHistoryTooDeep,
+  HistoryTooDeepError: () => HistoryTooDeepError,
+  SizeError: () => SizeError,
+  dropBlocks: () => dropBlocks,
+  sanitize: () => sanitize,
+  stripEphemeral: () => stripEphemeral
+});
+
+// src/sanitize/types.ts
+var BlockText = "text";
+var BlockImage = "image";
+var BlockVideo = "video";
+var BlockDocument = "document";
+var BlockSearchResult = "search_result";
+var BlockThinking = "thinking";
+var BlockRedactedThinking = "redacted_thinking";
+var BlockToolUse = "tool_use";
+var BlockToolResult = "tool_result";
+var BlockToolReference = "tool_reference";
+var BlockServerToolUse = "server_tool_use";
+var BlockWebSearchToolResult = "web_search_tool_result";
+var BlockCodeExecutionToolResult = "code_execution_tool_result";
+var BlockMCPToolUse = "mcp_tool_use";
+var BlockMCPToolResult = "mcp_tool_result";
+var BlockContainerUpload = "container_upload";
+var DeltaText = "text_delta";
+var DeltaInputJSON = "input_json_delta";
+var DeltaThinking = "thinking_delta";
+var DeltaSignature = "signature_delta";
+var DeltaCitations = "citations_delta";
+var EphemeralMarkerField = "acosmi_ephemeral";
+
+// src/sanitize/config.ts
+var HistoryTooDeepError = class extends Error {
+  constructor() {
+    super("sanitize: messages history exceeds configured depth");
+    this.name = "HistoryTooDeepError";
+  }
+};
+var BlockDeniedError = class extends Error {
+  constructor() {
+    super("sanitize: block type permanently denied");
+    this.name = "BlockDeniedError";
+  }
+};
+var SizeError = class extends Error {
+  blockType;
+  actual;
+  limit;
+  constructor(blockType, actual, limit) {
+    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
+    this.name = "SizeError";
+    this.blockType = blockType;
+    this.actual = actual;
+    this.limit = limit;
+  }
+};
+var ErrHistoryTooDeep = new HistoryTooDeepError();
+var ErrBlockDenied = new BlockDeniedError();
+
+// src/sanitize/history.ts
+function dropBlocks(messages, pred) {
+  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
+  const out = [];
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) {
+      out.push(msg);
+      continue;
+    }
+    const content = msg["content"];
+    if (!Array.isArray(content)) {
+      out.push(msg);
+      continue;
+    }
+    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
+    if (!changed) {
+      out.push(msg);
+      continue;
+    }
+    if (kept.length === 0) {
+      continue;
+    }
+    const newMsg = { ...msg };
+    newMsg["content"] = kept;
+    out.push(newMsg);
+  }
+  return out;
+}
+function collectDroppedToolUseIDs(messages, pred) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject(raw)) continue;
+      if (!pred(raw)) continue;
+      const t = raw["type"];
+      if (typeof t !== "string") continue;
+      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
+        const id = raw["id"];
+        if (typeof id === "string" && id !== "") ids.add(id);
+      }
+    }
+  }
+  return ids;
+}
+function filterBlocks(content, pred, droppedToolUseIDs) {
+  const kept = [];
+  let changed = false;
+  for (const raw of content) {
+    if (!isPlainObject(raw)) {
+      kept.push(raw);
+      continue;
+    }
+    if (pred(raw)) {
+      changed = true;
+      continue;
+    }
+    if (droppedToolUseIDs.size > 0) {
+      const t = raw["type"];
+      if (t === "tool_result" || t === "mcp_tool_result") {
+        const id = raw["tool_use_id"];
+        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
+          changed = true;
+          continue;
+        }
+      }
+    }
+    kept.push(raw);
+  }
+  return { kept, changed };
+}
+function stripEphemeral(messages) {
+  return dropBlocks(messages, (b) => {
+    const t = b["type"];
+    if (t === "thinking" || t === "redacted_thinking") {
+      return false;
+    }
+    const v = b[EphemeralMarkerField];
+    return v === true;
+  });
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/sanitize/defensive.ts
+function sanitize(messages, cfg) {
+  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
+    throw ErrHistoryTooDeep;
+  }
+  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
+    checkMediaSizes(messages, cfg);
+  }
+  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
+    const denySet = /* @__PURE__ */ new Set();
+    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
+    messages = dropBlocks(messages, (b) => {
+      const t = b["type"];
+      return typeof t === "string" && denySet.has(t);
+    });
+  }
+  return messages;
+}
+function checkMediaSizes(messages, cfg) {
+  for (const msg of messages) {
+    if (!isPlainObject2(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject2(raw)) continue;
+      const bt = raw["type"];
+      if (typeof bt !== "string") continue;
+      let limit = 0;
+      switch (bt) {
+        case "image":
+          limit = cfg.maxImageBytes ?? 0;
+          break;
+        case "video":
+          limit = cfg.maxVideoBytes ?? 0;
+          break;
+        case "document":
+          limit = cfg.maxPDFBytes ?? 0;
+          break;
+        default:
+          continue;
+      }
+      if (limit <= 0) continue;
+      const data = extractBase64Data(raw);
+      if (data === "") continue;
+      const actual = base64DecodedLen(data);
+      if (actual > limit) {
+        throw new SizeError(bt, actual, limit);
+      }
+    }
+  }
+}
+function extractBase64Data(block) {
+  const src = block["source"];
+  if (!isPlainObject2(src)) return "";
+  if (src["type"] !== "base64") return "";
+  const dataRaw = src["data"];
+  if (typeof dataRaw !== "string") return "";
+  let data = dataRaw;
+  const i = data.indexOf("base64,");
+  if (i >= 0) {
+    data = data.slice(i + "base64,".length);
+  }
+  return data;
+}
+function base64DecodedLen(b64) {
+  const n = b64.length;
+  let pad = 0;
+  if (n >= 1 && b64[n - 1] === "=") pad++;
+  if (n >= 2 && b64[n - 2] === "=") pad++;
+  return Math.floor(n * 3 / 4) - pad;
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/agent-runs-types.ts
+var AgentRunStreamError = class extends Error {
+  event;
+  code;
+  stage;
+  retryable;
+  constructor(event) {
+    const err = event.error;
+    super(err.stage ? `agent run failed: ${err.stage}: ${err.message}` : `agent run failed: ${err.message}`);
+    this.name = "AgentRunStreamError";
+    this.event = event;
+    this.code = err.code ?? "";
+    this.stage = err.stage ?? "";
+    this.retryable = err.retryable ?? false;
+  }
+};
+
+// src/client/agent-runs.ts
+init_types();
 var agentRunsByClient = /* @__PURE__ */ new WeakMap();
 Object.defineProperty(Client.prototype, "agentRuns", {
   configurable: true,
@@ -4576,6 +5318,6 @@ Client.prototype.getBugReport = async function(bugID, signal) {
   return resp.data;
 };
 
-export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBrowserOpen, ErrDiscovery, ErrRegistration, ErrSSLProxy, ErrTimeout, ErrTokenExchange, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, commerceScopes, computeBackoff, defaultRetryable, defaultSafeToRetry, discover, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, getAdapter, getAdapterForModel, isSSLError, modelScopes, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
+export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, LocalStorageTokenStore as DefaultBrowserTokenStore, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrTimeout, ErrTokenExchange, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, complianceScopes, computeBackoff, defaultRetryable, defaultSafeToRetry, discover, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map