@acosmi/sdk-ts 1.2.0 → 1.3.0

package/dist/index.mjs

@@ -1428,9 +1428,37 @@ var ScopeToolsExecute = "tools:execute";
 var ScopeWallet = "wallet";
 var ScopeWalletReadonly = "wallet:readonly";
 var ScopeProfile = "profile";
+var ScopeComplianceEvidenceRead = "compliance:evidence:read";
+var ScopeComplianceEvidenceWrite = "compliance:evidence:write";
+var ScopeComplianceTimestampIssue = "compliance:timestamp:issue";
+var ScopeComplianceTimestampVerify = "compliance:timestamp:verify";
+var ScopeComplianceContractSigningRead = "compliance:contract_signing:read";
+var ScopeComplianceContractSigningWrite = "compliance:contract_signing:write";
+var ScopeComplianceSealManage = "compliance:seal:manage";
+var ScopeComplianceSealApprovalRequest = "compliance:seal_approval:request";
+var ScopeComplianceSealApprovalApprove = "compliance:seal_approval:approve";
+var ScopeComplianceSealUseExecute = "compliance:seal_use:execute";
+var ScopeComplianceReportsRead = "compliance:reports:read";
+var ScopeComplianceReportsPublish = "compliance:reports:publish";
 function allScopes() {
   return [ScopeAI, ScopeSkills, ScopeAccount];
 }
+function complianceScopes() {
+  return [
+    ScopeComplianceEvidenceRead,
+    ScopeComplianceEvidenceWrite,
+    ScopeComplianceTimestampIssue,
+    ScopeComplianceTimestampVerify,
+    ScopeComplianceContractSigningRead,
+    ScopeComplianceContractSigningWrite,
+    ScopeComplianceSealManage,
+    ScopeComplianceSealApprovalRequest,
+    ScopeComplianceSealApprovalApprove,
+    ScopeComplianceSealUseExecute,
+    ScopeComplianceReportsRead,
+    ScopeComplianceReportsPublish
+  ];
+}
 function modelScopes() {
   return [ScopeAI];
 }
@@ -1441,6 +1469,171 @@ function skillScopes() {
   return [ScopeSkills];
 }
 
+// src/compliance-status.ts
+var ErrComplianceStepUpRequired = "COMPLIANCE_STEP_UP_REQUIRED";
+var ErrEnvelopeGateClosed = "ENVELOPE_GATE_CLOSED";
+var ErrProviderNotConfigured = "PROVIDER_NOT_CONFIGURED";
+var ErrProviderUnknownNoRetry = "PROVIDER_REQUEST_UNKNOWN_NO_RETRY";
+var ErrBillingCallbackCannotCommit = "BILLING_CALLBACK_CANNOT_COMMIT";
+var ErrBillingCommitRequiresLocalVerify = "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY";
+var ErrBillingS2sForbidden = "BILLING_S2S_FORBIDDEN";
+var ErrSealApprovalNotApproved = "SEAL_APPROVAL_STATE_NOT_APPROVED";
+var ErrSealApprovalExpired = "SEAL_APPROVAL_EXPIRED";
+var ErrSealApprovalNonceUsed = "SEAL_APPROVAL_NONCE_USED";
+var ErrSealApprovalContractHashMismatch = "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH";
+var ErrSealApprovalSealMismatch = "SEAL_APPROVAL_SEAL_MISMATCH";
+var ErrSealApprovalLocationMismatch = "SEAL_APPROVAL_LOCATION_MISMATCH";
+var ErrSealApprovalTransactorMismatch = "SEAL_APPROVAL_TRANSACTOR_MISMATCH";
+var ErrSealUseAlreadyConsumed = "SEAL_USE_ALREADY_CONSUMED";
+function isComplianceTerminalError(code) {
+  switch (code) {
+    case ErrEnvelopeGateClosed:
+    case ErrProviderNotConfigured:
+    case ErrProviderUnknownNoRetry:
+    case ErrBillingCallbackCannotCommit:
+    case ErrBillingCommitRequiresLocalVerify:
+    case ErrBillingS2sForbidden:
+    case ErrSealApprovalNonceUsed:
+    case ErrSealApprovalExpired:
+    case ErrSealApprovalContractHashMismatch:
+    case ErrSealApprovalSealMismatch:
+    case ErrSealApprovalLocationMismatch:
+    case ErrSealApprovalTransactorMismatch:
+    case ErrSealUseAlreadyConsumed:
+      return true;
+    default:
+      return false;
+  }
+}
+function isBillingConfirmable(providerStatus, billingStatus) {
+  return providerStatus === "success" && billingStatus === "committed";
+}
+
+// src/compliance-errors.ts
+var CODE_TO_KEY = {
+  // 通用 / token / scope (1-031-000-xxx)
+  1031000001: "COMPLIANCE_UNAUTHORIZED",
+  1031000002: "COMPLIANCE_TOKEN_INVALID",
+  1031000003: "COMPLIANCE_TOKEN_INVALID",
+  1031000004: "COMPLIANCE_TOKEN_INVALID",
+  1031000005: "COMPLIANCE_TOKEN_INVALID",
+  1031000006: "COMPLIANCE_TOKEN_INVALID",
+  1031000007: "COMPLIANCE_TOKEN_INVALID",
+  1031000008: "COMPLIANCE_TOKEN_INVALID",
+  1031000009: "COMPLIANCE_TOKEN_INVALID",
+  1031000010: "COMPLIANCE_TOKEN_INVALID",
+  1031000011: "COMPLIANCE_TOKEN_INVALID",
+  1031000012: "COMPLIANCE_INSUFFICIENT_SCOPE",
+  1031000013: "COMPLIANCE_STEP_UP_REQUIRED",
+  // Subject snapshot (1-031-001-xxx)
+  1031001001: "SUBJECT_SNAPSHOT_NOT_FOUND",
+  1031001002: "SUBJECT_SNAPSHOT_TENANT_MISMATCH",
+  1031001003: "SUBJECT_SNAPSHOT_REQUIRED",
+  // Evidence / Timestamp / Package / Report (1-031-002-xxx)
+  1031002001: "EVIDENCE_ASSET_NOT_FOUND",
+  1031002002: "SUBJECT_SNAPSHOT_TENANT_MISMATCH",
+  1031002003: "EVIDENCE_ASSET_HASH_MISMATCH",
+  1031002004: "EVIDENCE_ASSET_PAYLOAD_REQUIRED",
+  1031002005: "EVIDENCE_ASSET_PAYLOAD_REQUIRED",
+  1031002006: "TIMESTAMP_TOKEN_NOT_FOUND",
+  1031002007: "TIMESTAMP_PROVIDER_FAILED",
+  1031002008: "TIMESTAMP_PROVIDER_UNKNOWN",
+  1031002009: "TIMESTAMP_LOCAL_VERIFY_FAILED",
+  1031002010: "TIMESTAMP_PROVIDER_NOT_AVAILABLE",
+  1031002011: "EVIDENCE_PACKAGE_NOT_FOUND",
+  1031002012: "EVIDENCE_PACKAGE_TIMESTAMP_REQUIRED",
+  1031002013: "EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH",
+  1031002014: "REPORT_NOT_FOUND",
+  1031002015: "REPORT_ALREADY_PUBLISHED",
+  1031002016: "REPORT_DRAFT_REQUIRED",
+  1031002017: "EVIDENCE_VERIFY_TARGET_REQUIRED",
+  1031002018: "EVIDENCE_VERIFY_TARGET_NOT_FOUND",
+  // Provider request (1-031-003-xxx)
+  1031003001: "PROVIDER_REQUEST_UNKNOWN_NO_RETRY",
+  1031003002: "PROVIDER_CALLBACK_SOURCE_INVALID",
+  1031003003: "PROVIDER_NOT_CONFIGURED",
+  1031003010: "PROVIDER_REQUEST_NOT_FOUND",
+  1031003011: "PROVIDER_REQUEST_IDEMPOTENCY_REQUIRED",
+  1031003012: "PROVIDER_REQUEST_STATUS_NOT_TERMINAL",
+  // Envelope (1-031-004-xxx)
+  1031004001: "ENVELOPE_NOT_FOUND",
+  1031004002: "ENVELOPE_TENANT_MISMATCH",
+  1031004003: "ENVELOPE_STATE_NOT_ALLOWED",
+  1031004004: "ENVELOPE_GATE_CLOSED",
+  1031004005: "CONTRACT_NOT_FOUND",
+  1031004006: "CONTRACT_HASH_MISMATCH",
+  1031004007: "CONTRACT_NOT_FOUND",
+  1031004008: "PROVIDER_AUTHORIZATION_NOT_CONFIRMED",
+  1031004009: "PROVIDER_AUTHORIZATION_NOT_CONFIRMED",
+  1031004010: "ENVELOPE_EVIDENCE_NOT_READY",
+  // Seal approval / use (1-031-005-xxx)
+  1031005001: "SEAL_ASSET_NOT_FOUND",
+  1031005010: "SEAL_APPROVAL_NOT_FOUND",
+  1031005011: "SEAL_APPROVAL_NOT_FOUND",
+  1031005012: "SEAL_APPROVAL_STATE_NOT_APPROVED",
+  1031005013: "SEAL_APPROVAL_EXPIRED",
+  1031005014: "SEAL_APPROVAL_ALREADY_USED",
+  1031005015: "SEAL_APPROVAL_NONCE_USED",
+  1031005016: "SEAL_APPROVAL_SEAL_MISMATCH",
+  1031005017: "SEAL_APPROVAL_LOCATION_MISMATCH",
+  1031005018: "SEAL_APPROVAL_TRANSACTOR_MISMATCH",
+  1031005019: "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH",
+  1031005020: "SEAL_APPROVAL_INVALID_TRANSITION",
+  1031005030: "SEAL_USE_ALREADY_CONSUMED",
+  // Billing (1-031-006-xxx)
+  1031006004: "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY",
+  1031006005: "BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS",
+  1031006007: "BILLING_CALLBACK_CANNOT_COMMIT",
+  1031006008: "BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE",
+  1031006009: "BILLING_S2S_FORBIDDEN",
+  // Audit (1-031-007-xxx)
+  1031007011: "AUDIT_CHAIN_TAMPER_DETECTED"
+};
+var STEP_UP_KEYS = /* @__PURE__ */ new Set(["COMPLIANCE_STEP_UP_REQUIRED"]);
+var TERMINAL_KEYS = /* @__PURE__ */ new Set([
+  "ENVELOPE_GATE_CLOSED",
+  "PROVIDER_NOT_CONFIGURED",
+  "PROVIDER_REQUEST_UNKNOWN_NO_RETRY",
+  "BILLING_CALLBACK_CANNOT_COMMIT",
+  "BILLING_COMMIT_REQUIRES_LOCAL_VERIFY",
+  "BILLING_COMMIT_REQUIRES_PROVIDER_SUCCESS",
+  "BILLING_PROVIDER_UNKNOWN_NOT_COMMITTABLE",
+  "BILLING_S2S_FORBIDDEN",
+  "SEAL_APPROVAL_NONCE_USED",
+  "SEAL_APPROVAL_EXPIRED",
+  "SEAL_APPROVAL_CONTRACT_HASH_MISMATCH",
+  "SEAL_APPROVAL_SEAL_MISMATCH",
+  "SEAL_APPROVAL_LOCATION_MISMATCH",
+  "SEAL_APPROVAL_TRANSACTOR_MISMATCH",
+  "SEAL_USE_ALREADY_CONSUMED",
+  "CONTRACT_HASH_MISMATCH",
+  "TIMESTAMP_LOCAL_VERIFY_FAILED",
+  "EVIDENCE_PACKAGE_MANIFEST_HASH_MISMATCH",
+  "AUDIT_CHAIN_TAMPER_DETECTED",
+  "PROVIDER_REQUEST_NOT_FOUND",
+  "EVIDENCE_ASSET_HASH_MISMATCH",
+  "EVIDENCE_VERIFY_TARGET_NOT_FOUND",
+  "REPORT_ALREADY_PUBLISHED"
+]);
+var RETRYABLE_KEYS = /* @__PURE__ */ new Set([]);
+function classifyComplianceError(err) {
+  const key = CODE_TO_KEY[err.code] ?? "UNKNOWN_COMPLIANCE_ERROR";
+  return {
+    code: err.code,
+    message: err.message,
+    key,
+    retryable: RETRYABLE_KEYS.has(key),
+    terminal: TERMINAL_KEYS.has(key),
+    stepUpRequired: STEP_UP_KEYS.has(key)
+  };
+}
+function isComplianceBusinessError(err) {
+  return err.code >= 1031e6 && err.code <= 1031999999;
+}
+
+// src/client.ts
+init_types();
+
 // src/store.ts
 var fileLockDefaults = {
   /** 获取锁的超时上限 (毫秒). refresh 流程含网络 < 30s, 30s 已远超正常完成时间. */
@@ -1716,368 +1909,100 @@ function computeBackoff(p, attempt, err) {
   return d;
 }
 
-// src/sanitize/index.ts
-var sanitize_exports = {};
-__export(sanitize_exports, {
-  BlockCodeExecutionToolResult: () => BlockCodeExecutionToolResult,
-  BlockContainerUpload: () => BlockContainerUpload,
-  BlockDeniedError: () => BlockDeniedError,
-  BlockDocument: () => BlockDocument,
-  BlockImage: () => BlockImage,
-  BlockMCPToolResult: () => BlockMCPToolResult,
-  BlockMCPToolUse: () => BlockMCPToolUse,
-  BlockRedactedThinking: () => BlockRedactedThinking,
-  BlockSearchResult: () => BlockSearchResult,
-  BlockServerToolUse: () => BlockServerToolUse,
-  BlockText: () => BlockText,
-  BlockThinking: () => BlockThinking,
-  BlockToolReference: () => BlockToolReference,
-  BlockToolResult: () => BlockToolResult,
-  BlockToolUse: () => BlockToolUse,
-  BlockVideo: () => BlockVideo,
-  BlockWebSearchToolResult: () => BlockWebSearchToolResult,
-  DeltaCitations: () => DeltaCitations,
-  DeltaInputJSON: () => DeltaInputJSON,
-  DeltaSignature: () => DeltaSignature,
-  DeltaText: () => DeltaText,
-  DeltaThinking: () => DeltaThinking,
-  EphemeralMarkerField: () => EphemeralMarkerField,
-  ErrBlockDenied: () => ErrBlockDenied,
-  ErrHistoryTooDeep: () => ErrHistoryTooDeep,
-  HistoryTooDeepError: () => HistoryTooDeepError,
-  SizeError: () => SizeError,
-  dropBlocks: () => dropBlocks,
-  sanitize: () => sanitize,
-  stripEphemeral: () => stripEphemeral
-});
-
-// src/sanitize/types.ts
-var BlockText = "text";
-var BlockImage = "image";
-var BlockVideo = "video";
-var BlockDocument = "document";
-var BlockSearchResult = "search_result";
-var BlockThinking = "thinking";
-var BlockRedactedThinking = "redacted_thinking";
-var BlockToolUse = "tool_use";
-var BlockToolResult = "tool_result";
-var BlockToolReference = "tool_reference";
-var BlockServerToolUse = "server_tool_use";
-var BlockWebSearchToolResult = "web_search_tool_result";
-var BlockCodeExecutionToolResult = "code_execution_tool_result";
-var BlockMCPToolUse = "mcp_tool_use";
-var BlockMCPToolResult = "mcp_tool_result";
-var BlockContainerUpload = "container_upload";
-var DeltaText = "text_delta";
-var DeltaInputJSON = "input_json_delta";
-var DeltaThinking = "thinking_delta";
-var DeltaSignature = "signature_delta";
-var DeltaCitations = "citations_delta";
-var EphemeralMarkerField = "acosmi_ephemeral";
-
-// src/sanitize/config.ts
-var HistoryTooDeepError = class extends Error {
-  constructor() {
-    super("sanitize: messages history exceeds configured depth");
-    this.name = "HistoryTooDeepError";
-  }
-};
-var BlockDeniedError = class extends Error {
-  constructor() {
-    super("sanitize: block type permanently denied");
-    this.name = "BlockDeniedError";
-  }
-};
-var SizeError = class extends Error {
-  blockType;
-  actual;
-  limit;
-  constructor(blockType, actual, limit) {
-    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
-    this.name = "SizeError";
-    this.blockType = blockType;
-    this.actual = actual;
-    this.limit = limit;
-  }
-};
-var ErrHistoryTooDeep = new HistoryTooDeepError();
-var ErrBlockDenied = new BlockDeniedError();
+// src/client.ts
+init_adapters();
 
-// src/sanitize/history.ts
-function dropBlocks(messages, pred) {
-  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
-  const out = [];
-  for (const msg of messages) {
-    if (!isPlainObject(msg)) {
-      out.push(msg);
-      continue;
-    }
-    const content = msg["content"];
-    if (!Array.isArray(content)) {
-      out.push(msg);
-      continue;
-    }
-    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
-    if (!changed) {
-      out.push(msg);
-      continue;
+// src/stream-meta.ts
+function extractAnthropicBlockMeta(eventType, data, blockTypeMap) {
+  switch (eventType) {
+    case "content_block_start": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
+      }
+      const index = payload.index ?? 0;
+      const meta = {
+        type: payload.content_block?.type ?? "",
+        ephemeral: payload.content_block?.acosmi_ephemeral ?? false
+      };
+      blockTypeMap.set(index, meta);
+      return [index, meta.type, meta.ephemeral];
     }
-    if (kept.length === 0) {
-      continue;
+    case "content_block_delta": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
+      }
+      const index = payload.index ?? 0;
+      const meta = blockTypeMap.get(index);
+      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
     }
-    const newMsg = { ...msg };
-    newMsg["content"] = kept;
-    out.push(newMsg);
-  }
-  return out;
-}
-function collectDroppedToolUseIDs(messages, pred) {
-  const ids = /* @__PURE__ */ new Set();
-  for (const msg of messages) {
-    if (!isPlainObject(msg)) continue;
-    const content = msg["content"];
-    if (!Array.isArray(content)) continue;
-    for (const raw of content) {
-      if (!isPlainObject(raw)) continue;
-      if (!pred(raw)) continue;
-      const t = raw["type"];
-      if (typeof t !== "string") continue;
-      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
-        const id = raw["id"];
-        if (typeof id === "string" && id !== "") ids.add(id);
+    case "content_block_stop": {
+      let payload;
+      try {
+        payload = JSON.parse(data);
+      } catch {
+        return [0, "", false];
       }
+      const index = payload.index ?? 0;
+      const meta = blockTypeMap.get(index);
+      blockTypeMap.delete(index);
+      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
     }
+    default:
+      return [0, "", false];
   }
-  return ids;
 }
-function filterBlocks(content, pred, droppedToolUseIDs) {
-  const kept = [];
-  let changed = false;
-  for (const raw of content) {
-    if (!isPlainObject(raw)) {
-      kept.push(raw);
-      continue;
-    }
-    if (pred(raw)) {
-      changed = true;
-      continue;
+
+// src/client.ts
+init_openai();
+
+// src/client-helpers.ts
+init_types();
+var maxDownloadSize = 50 * 1024 * 1024;
+var maxErrorBodySize = 1 * 1024 * 1024;
+var maxSSELineSize = 1 * 1024 * 1024;
+var modelCacheTTLMs = 5 * 60 * 1e3;
+var coefCacheTTLMs = 8 * 1e3;
+function parseHTTPErrorWithHeader(statusCode, body, header) {
+  const bodyStr = typeof body === "string" ? body : new TextDecoder().decode(body);
+  let retryAfter = 0;
+  if (header) {
+    const ra = header.get("Retry-After");
+    if (ra) {
+      const sec = parseInt(ra, 10);
+      if (!isNaN(sec) && sec > 0) retryAfter = sec;
     }
-    if (droppedToolUseIDs.size > 0) {
-      const t = raw["type"];
-      if (t === "tool_result" || t === "mcp_tool_result") {
-        const id = raw["tool_use_id"];
-        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
-          changed = true;
-          continue;
-        }
+  }
+  if (bodyStr.length === 0) {
+    return new HTTPError(statusCode, { retryAfter });
+  }
+  let type = "";
+  let message = "";
+  try {
+    const obj = JSON.parse(bodyStr);
+    if (obj && typeof obj === "object") {
+      const errObj = obj.error;
+      if (errObj && typeof errObj === "object") {
+        const e = errObj;
+        if (typeof e.message === "string") message = e.message;
+        if (typeof e.type === "string") type = e.type;
       }
     }
-    kept.push(raw);
+  } catch {
   }
-  return { kept, changed };
+  return new HTTPError(statusCode, { type, message, retryAfter, body: bodyStr });
 }
-function stripEphemeral(messages) {
-  return dropBlocks(messages, (b) => {
-    const t = b["type"];
-    if (t === "thinking" || t === "redacted_thinking") {
-      return false;
-    }
-    const v = b[EphemeralMarkerField];
-    return v === true;
-  });
-}
-function isPlainObject(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-// src/sanitize/defensive.ts
-function sanitize(messages, cfg) {
-  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
-    throw ErrHistoryTooDeep;
-  }
-  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
-    checkMediaSizes(messages, cfg);
-  }
-  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
-    const denySet = /* @__PURE__ */ new Set();
-    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
-    messages = dropBlocks(messages, (b) => {
-      const t = b["type"];
-      return typeof t === "string" && denySet.has(t);
-    });
-  }
-  return messages;
-}
-function checkMediaSizes(messages, cfg) {
-  for (const msg of messages) {
-    if (!isPlainObject2(msg)) continue;
-    const content = msg["content"];
-    if (!Array.isArray(content)) continue;
-    for (const raw of content) {
-      if (!isPlainObject2(raw)) continue;
-      const bt = raw["type"];
-      if (typeof bt !== "string") continue;
-      let limit = 0;
-      switch (bt) {
-        case "image":
-          limit = cfg.maxImageBytes ?? 0;
-          break;
-        case "video":
-          limit = cfg.maxVideoBytes ?? 0;
-          break;
-        case "document":
-          limit = cfg.maxPDFBytes ?? 0;
-          break;
-        default:
-          continue;
-      }
-      if (limit <= 0) continue;
-      const data = extractBase64Data(raw);
-      if (data === "") continue;
-      const actual = base64DecodedLen(data);
-      if (actual > limit) {
-        throw new SizeError(bt, actual, limit);
-      }
-    }
-  }
-}
-function extractBase64Data(block) {
-  const src = block["source"];
-  if (!isPlainObject2(src)) return "";
-  if (src["type"] !== "base64") return "";
-  const dataRaw = src["data"];
-  if (typeof dataRaw !== "string") return "";
-  let data = dataRaw;
-  const i = data.indexOf("base64,");
-  if (i >= 0) {
-    data = data.slice(i + "base64,".length);
-  }
-  return data;
-}
-function base64DecodedLen(b64) {
-  const n = b64.length;
-  let pad = 0;
-  if (n >= 1 && b64[n - 1] === "=") pad++;
-  if (n >= 2 && b64[n - 2] === "=") pad++;
-  return Math.floor(n * 3 / 4) - pad;
-}
-function isPlainObject2(v) {
-  return typeof v === "object" && v !== null && !Array.isArray(v);
-}
-
-// src/stream-meta.ts
-function extractAnthropicBlockMeta(eventType, data, blockTypeMap) {
-  switch (eventType) {
-    case "content_block_start": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = {
-        type: payload.content_block?.type ?? "",
-        ephemeral: payload.content_block?.acosmi_ephemeral ?? false
-      };
-      blockTypeMap.set(index, meta);
-      return [index, meta.type, meta.ephemeral];
-    }
-    case "content_block_delta": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = blockTypeMap.get(index);
-      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
-    }
-    case "content_block_stop": {
-      let payload;
-      try {
-        payload = JSON.parse(data);
-      } catch {
-        return [0, "", false];
-      }
-      const index = payload.index ?? 0;
-      const meta = blockTypeMap.get(index);
-      blockTypeMap.delete(index);
-      return [index, meta?.type ?? "", meta?.ephemeral ?? false];
-    }
-    default:
-      return [0, "", false];
-  }
-}
-
-// src/agent-runs-types.ts
-var AgentRunStreamError = class extends Error {
-  event;
-  code;
-  stage;
-  retryable;
-  constructor(event) {
-    const err = event.error;
-    super(err.stage ? `agent run failed: ${err.stage}: ${err.message}` : `agent run failed: ${err.message}`);
-    this.name = "AgentRunStreamError";
-    this.event = event;
-    this.code = err.code ?? "";
-    this.stage = err.stage ?? "";
-    this.retryable = err.retryable ?? false;
-  }
-};
-
-// src/client/agent-runs.ts
-init_types();
-
-// src/client.ts
-init_types();
-init_adapters();
-init_openai();
-
-// src/client-helpers.ts
-init_types();
-var maxDownloadSize = 50 * 1024 * 1024;
-var maxErrorBodySize = 1 * 1024 * 1024;
-var maxSSELineSize = 1 * 1024 * 1024;
-var modelCacheTTLMs = 5 * 60 * 1e3;
-var coefCacheTTLMs = 8 * 1e3;
-function parseHTTPErrorWithHeader(statusCode, body, header) {
-  const bodyStr = typeof body === "string" ? body : new TextDecoder().decode(body);
-  let retryAfter = 0;
-  if (header) {
-    const ra = header.get("Retry-After");
-    if (ra) {
-      const sec = parseInt(ra, 10);
-      if (!isNaN(sec) && sec > 0) retryAfter = sec;
-    }
-  }
-  if (bodyStr.length === 0) {
-    return new HTTPError(statusCode, { retryAfter });
-  }
-  let type = "";
-  let message = "";
-  try {
-    const obj = JSON.parse(bodyStr);
-    if (obj && typeof obj === "object") {
-      const errObj = obj.error;
-      if (errObj && typeof errObj === "object") {
-        const e = errObj;
-        if (typeof e.message === "string") message = e.message;
-        if (typeof e.type === "string") type = e.type;
-      }
-    }
-  } catch {
-  }
-  return new HTTPError(statusCode, { type, message, retryAfter, body: bodyStr });
-}
-function classifyTransport(op, urlStr, err) {
-  const ne = new NetworkError(op, urlStr, err);
-  if (err instanceof Error) {
-    if (err.name === "AbortError") {
-      ne.timeout = true;
-      return ne;
+function classifyTransport(op, urlStr, err) {
+  const ne = new NetworkError(op, urlStr, err);
+  if (err instanceof Error) {
+    if (err.name === "AbortError") {
+      ne.timeout = true;
+      return ne;
     }
     const cause = err.cause;
     if (cause) {
@@ -2236,6 +2161,8 @@ var Client = class _Client {
   /** SDK 内部使用 — 业务方法 (mixin) 通过 this.* 访问以下字段 */
   /** 服务器根地址 (已 trim 尾随 /) */
   serverURL;
+  /** Compliance API 根地址 (已 trim 尾随 /); null = 走默认 ${serverURL}/admin-api */
+  complianceBaseURL;
   /** OAuth metadata (lazy loaded) */
   meta = null;
   /** 当前 token (内存) */
@@ -2269,6 +2196,7 @@ var Client = class _Client {
   coefMu = Promise.resolve();
   constructor(cfg = {}) {
     this.serverURL = (cfg.serverURL ?? "https://acosmi.com").replace(/\/+$/, "");
+    this.complianceBaseURL = cfg.complianceBaseURL ? cfg.complianceBaseURL.replace(/\/+$/, "") : null;
     this.store = cfg.store ?? defaultTokenStore();
     this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);
     this.retryPolicy = effectivePolicy(cfg.retryPolicy ?? null);
@@ -3037,6 +2965,19 @@ var Client = class _Client {
     }
     return base + path;
   }
+  /**
+   * Compliance API URL 拼接。
+   *
+   * `complianceBaseURL` 已配置时直接拼接；未配置时默认
+   * `${serverURL}/admin-api` + path，匹配 Java compliance controller 的
+   * `/compliance/...` 路径。
+   *
+   * 不复用 `apiURL`：apiURL 强制追加 `/api/v4`，与 compliance 路径不同。
+   */
+  complianceURL(path) {
+    const base = this.complianceBaseURL ?? this.serverURL + "/admin-api";
+    return base + path;
+  }
   /** GET/POST/... 通用 JSON 调用 (返回 result 已 typed) */
   async doJSON(method, path, body, signal) {
     const r = await this.doJSONFull(method, path, body, signal);
@@ -3326,7 +3267,753 @@ async function sleep(ms, signal) {
   });
 }
 
-// src/client/agent-runs.ts
+// src/client/compliance.ts
+init_types();
+var cache = /* @__PURE__ */ new WeakMap();
+Object.defineProperty(Client.prototype, "compliance", {
+  configurable: true,
+  enumerable: false,
+  get() {
+    let existing = cache.get(this);
+    if (!existing) {
+      existing = new ComplianceClient(this);
+      cache.set(this, existing);
+    }
+    return existing;
+  }
+});
+var DEFAULT_POLL = {
+  timeoutMs: 6e4,
+  initialIntervalMs: 1e3,
+  maxIntervalMs: 5e3,
+  multiplier: 1.5
+};
+var CompliancePollError = class extends Error {
+  kind;
+  lastInfo;
+  constructor(message, kind, lastInfo) {
+    super(message);
+    this.name = "CompliancePollError";
+    this.kind = kind;
+    this.lastInfo = lastInfo;
+  }
+};
+var ComplianceClient = class {
+  constructor(client) {
+    this.client = client;
+  }
+  client;
+  // =========================================================================
+  // Evidence Asset
+  // =========================================================================
+  /** 创建证据资产（写）。 */
+  createEvidenceAsset(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/evidence/assets",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 证据资产详情。 */
+  getEvidenceAsset(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/evidence/assets/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 公开 verify。隐私边界：返回字段不含 PII / 合同原文 / storage / provider raw。
+   * 服务端不要求 compliance scope（公开端点）；但 SDK 仍带上 token 以便审计。
+   */
+  verifyEvidencePublic(params, signal) {
+    const q = new URLSearchParams();
+    if (params.evidenceNo) q.set("evidenceNo", params.evidenceNo);
+    if (params.publicVerifyCode) q.set("publicVerifyCode", params.publicVerifyCode);
+    const qs = q.toString();
+    return this.read(
+      "GET",
+      `/compliance/evidence/verify${qs ? "?" + qs : ""}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Timestamp
+  // =========================================================================
+  /** 申请时间章（写）。SDK 永远不传 provider 字段。 */
+  issueTimestamp(req, opts = {}) {
+    return this.write("POST", "/compliance/timestamps", req, writeCtx(opts));
+  }
+  /** 给已有资产申请时间章。SDK 永远不传 provider 字段。 */
+  issueTimestampForAsset(assetId, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/evidence/assets/${encodeURIComponent(assetId)}/timestamp`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — 时间章 token 详情。 */
+  getTimestamp(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/timestamps/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /** verify — 本地离线校验已申请的时间章。 */
+  verifyTimestamp(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/timestamps/verify",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 轮询到 VERIFIED 终态。
+   * - VERIFIED → 返回 token；
+   * - FAILED / LOCAL_VERIFY_FAILED → 抛 {@link CompliancePollError} kind='terminal_failure'；
+   * - UNKNOWN / RETRYING / PENDING → 继续轮询直到 timeout；
+   * - timeout → 抛 {@link CompliancePollError} kind='timeout'。
+   */
+  async waitForTimestampVerified(id, opts = {}) {
+    return this.poll(
+      () => this.getTimestamp(id, opts.signal),
+      (t) => classifyTimestamp(t.verificationStatus),
+      opts
+    );
+  }
+  // =========================================================================
+  // Evidence Package
+  // =========================================================================
+  /** 构建证据包（写）。 */
+  buildEvidencePackage(assetId, timestampTokenId, opts = {}) {
+    const tsParam = timestampTokenId == null ? "" : "?timestampTokenId=" + encodeURIComponent(timestampTokenId);
+    return this.write(
+      "POST",
+      `/compliance/evidence/assets/${encodeURIComponent(assetId)}/packages${tsParam}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  // =========================================================================
+  // Report
+  // =========================================================================
+  /** 创建证据报告（写）。 */
+  createReport(req, opts = {}) {
+    return this.write("POST", "/compliance/reports", req, writeCtx(opts));
+  }
+  /** 读 — 报告详情。 */
+  getReport(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 发布报告（写，step-up 必须）。
+   *
+   * 缺少 step-up 时服务端会返回 `COMPLIANCE_STEP_UP_REQUIRED`（数值码
+   * 1031000013）。SDK 不会自动重试；调用方需要引导用户重新做 OAuth introspection 或
+   * 重新登录后再次调用本方法（使用同一 idempotency-key）。
+   */
+  publishReport(id, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/reports/${encodeURIComponent(id)}/publish`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 下载报告（读）。返回 {@link ReportDownload}：报告 hash + 资产 hash + 证据包 hash +
+   * 时间章 serial/genTime，足以离线复核。
+   * 不返回 bodyCanonicalJson / storage key / subject snapshot id。
+   */
+  downloadReport(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/reports/${encodeURIComponent(id)}/download`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Signing Envelope
+  // =========================================================================
+  /** 创建 envelope（写）。返回 envelope id。 */
+  createSigningEnvelope(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/signing-envelopes",
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 读 — envelope 详情。租户由服务端从 compliance token principal 推导。 */
+  getSigningEnvelope(envelopeId, signal) {
+    return this.read(
+      "GET",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 正式签署（写，step-up 必须）。
+   *
+   * 服务端闸门关闭时会一致返回 `ENVELOPE_GATE_CLOSED` (1031004004)。
+   * SDK 不重试、不伪成功；调用方应该将该错误展示为"功能未开放"。
+   */
+  signEnvelope(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/sign`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /**
+   * 创建 H5 签署短链（写，step-up 必须）。
+   *
+   * 同上：服务端闸门关闭时 SDK 不重试。
+   */
+  createH5SigningUrl(envelopeId, req, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/h5-url`,
+      req,
+      writeCtx(opts)
+    );
+  }
+  /** 同步 provider 状态（写但只读对账，不创建新 provider 请求）。 */
+  syncSigningEnvelopeStatus(envelopeId, opts = {}) {
+    return this.write(
+      "POST",
+      `/compliance/signing-envelopes/${encodeURIComponent(envelopeId)}/sync-provider-status`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  // =========================================================================
+  // Seal Approval
+  // =========================================================================
+  submitSealApproval(req, opts = {}) {
+    return this.write(
+      "POST",
+      "/compliance/seal-approvals",
+      req,
+      writeCtx(opts)
+    );
+  }
+  approveSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.expiresAt) q.set("expiresAt", query.expiresAt);
+    if (query.note) q.set("note", query.note);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/approve${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  rejectSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.reason) q.set("reason", query.reason);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/reject${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  cancelSealApproval(id, query, opts = {}) {
+    const q = new URLSearchParams();
+    if (query.reason) q.set("reason", query.reason);
+    const qs = q.toString();
+    return this.write(
+      "POST",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}/cancel${qs ? "?" + qs : ""}`,
+      null,
+      writeCtx(opts)
+    );
+  }
+  listPendingSealApprovals(signal) {
+    return this.read(
+      "GET",
+      "/compliance/seal-approvals/pending",
+      null,
+      signal
+    );
+  }
+  getSealApproval(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/seal-approvals/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  // =========================================================================
+  // Provider Request (read-only)
+  // =========================================================================
+  getProviderRequest(id, signal) {
+    return this.read(
+      "GET",
+      `/compliance/provider-requests/${encodeURIComponent(id)}`,
+      null,
+      signal
+    );
+  }
+  /**
+   * 轮询 provider request 到 SUCCESS / FAILED 终态。
+   * - SUCCESS / FAILED → 返回最后视图；
+   * - UNKNOWN / RETRYING / PENDING → 继续轮询；
+   * - timeout → 抛 {@link CompliancePollError} kind='timeout'，不自动重发原 provider 请求。
+   *
+   * SUCCESS 不代表 billing 已 commit；调用方仍需通过业务侧 envelope / asset 终态判断。
+   */
+  async waitForProviderRequestTerminal(id, opts = {}) {
+    return this.poll(
+      () => this.getProviderRequest(id, opts.signal),
+      (v) => classifyProviderStatus(v.status),
+      opts
+    );
+  }
+  // =========================================================================
+  // Error classification (re-export for convenience)
+  // =========================================================================
+  classifyError(err) {
+    if (!isBusinessErrorLike(err)) return null;
+    if (!isComplianceBusinessError(err)) return null;
+    return classifyComplianceError(err);
+  }
+  // =========================================================================
+  // Internal helpers
+  // =========================================================================
+  /**
+   * 读路径：GET / 公开 verify。允许 401 单次刷新后重放（GET 幂等安全）。
+   * 与 client.doJSONFullInternal 行为一致；不复用其代码因为 base URL 不同。
+   */
+  async read(method, path, body, signal, extraHeaders = {}) {
+    return this.executeJson(method, path, body, signal, {
+      retryOn401: true,
+      extraHeaders
+    });
+  }
+  /**
+   * 写路径：POST。
+   * - 发送前 ensureToken 一次确保 token fresh。
+   * - 不自动 401 重放：401 → 抛 HTTPError；调用方必须自己刷新 token 后用同一
+   *   idempotency-key 重新发起，避免 provider 侧重复请求。
+   * - 不走 doRequestWithRetry：写操作不允许 5xx/timeout 自动重试。
+   */
+  async write(method, path, body, ctx) {
+    const headers = { ...ctx.extraHeaders ?? {} };
+    if (ctx.idempotencyKey) headers["Idempotency-Key"] = ctx.idempotencyKey;
+    return this.executeJson(method, path, body, ctx.signal, {
+      retryOn401: false,
+      extraHeaders: headers
+    });
+  }
+  async executeJson(method, path, body, signal, opts, retried = false) {
+    const token = await this.client.ensureToken(signal);
+    const url = this.client.complianceURL(path);
+    const headers = {
+      Authorization: `Bearer ${token}`,
+      Accept: "application/json",
+      ...opts.extraHeaders
+    };
+    let bodyStr;
+    if (body != null) {
+      bodyStr = typeof body === "string" ? body : JSON.stringify(body);
+      headers["Content-Type"] = "application/json";
+    }
+    const resp = await this.client.doRequest({ method, url, headers, body: bodyStr }, signal);
+    if (resp.status === 401 && opts.retryOn401 && !retried) {
+      try {
+        await resp.body?.cancel();
+      } catch {
+      }
+      await this.client.forceRefresh(signal);
+      return this.executeJson(method, path, body, signal, opts, true);
+    }
+    if (resp.status < 200 || resp.status >= 300) {
+      const bodyBytes = resp.body ? await readLimited(resp.body, maxErrorBodySize) : new Uint8Array();
+      throw parseHTTPErrorWithHeader(resp.status, bodyBytes, resp.headers);
+    }
+    const text = await resp.text();
+    if (!text) return void 0;
+    const parsed = JSON.parse(text);
+    const bizErr = apiResponseBusinessError(parsed);
+    if (bizErr) throw bizErr;
+    return parsed.data;
+  }
+  async poll(fetcher, classify, opts) {
+    const cfg = {
+      timeoutMs: opts.timeoutMs ?? DEFAULT_POLL.timeoutMs,
+      initialIntervalMs: opts.initialIntervalMs ?? DEFAULT_POLL.initialIntervalMs,
+      maxIntervalMs: opts.maxIntervalMs ?? DEFAULT_POLL.maxIntervalMs,
+      multiplier: opts.multiplier ?? DEFAULT_POLL.multiplier
+    };
+    const deadline = Date.now() + cfg.timeoutMs;
+    let interval = cfg.initialIntervalMs;
+    let lastValue;
+    while (Date.now() < deadline) {
+      if (opts.signal?.aborted) {
+        throw new CompliancePollError("compliance poll aborted", "unknown");
+      }
+      lastValue = await fetcher();
+      const decision = classify(lastValue);
+      if (decision === "done") return lastValue;
+      if (decision === "failed") {
+        throw new CompliancePollError(
+          "compliance poll observed terminal failure",
+          "terminal_failure"
+        );
+      }
+      const sleepMs = Math.min(interval, deadline - Date.now());
+      if (sleepMs <= 0) break;
+      await sleep2(sleepMs, opts.signal);
+      interval = Math.min(Math.floor(interval * cfg.multiplier), cfg.maxIntervalMs);
+    }
+    throw new CompliancePollError("compliance poll timed out", "timeout");
+  }
+};
+function classifyTimestamp(status) {
+  switch (status) {
+    case "VERIFIED":
+      return "done";
+    case "FAILED":
+    case "LOCAL_VERIFY_FAILED":
+      return "failed";
+    case "PENDING":
+    case "UNKNOWN":
+    case "RETRYING":
+    default:
+      return "continue";
+  }
+}
+function classifyProviderStatus(status) {
+  switch (status) {
+    case "SUCCESS":
+      return "done";
+    case "FAILED":
+      return "failed";
+    case "PENDING":
+    case "UNKNOWN":
+    case "RETRYING":
+    default:
+      return "continue";
+  }
+}
+function writeCtx(opts, extraHeaders = {}) {
+  return {
+    idempotencyKey: opts.idempotencyKey,
+    signal: opts.signal,
+    extraHeaders
+  };
+}
+function isBusinessErrorLike(err) {
+  if (err == null || typeof err !== "object") return false;
+  return typeof err.code === "number";
+}
+function sleep2(ms, signal) {
+  return new Promise((resolve, reject) => {
+    if (signal?.aborted) {
+      reject(new CompliancePollError("compliance poll aborted", "unknown"));
+      return;
+    }
+    const timer = setTimeout(() => {
+      signal?.removeEventListener("abort", onAbort);
+      resolve();
+    }, ms);
+    const onAbort = () => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      reject(new CompliancePollError("compliance poll aborted", "unknown"));
+    };
+    signal?.addEventListener("abort", onAbort, { once: true });
+  });
+}
+
+// src/sanitize/index.ts
+var sanitize_exports = {};
+__export(sanitize_exports, {
+  BlockCodeExecutionToolResult: () => BlockCodeExecutionToolResult,
+  BlockContainerUpload: () => BlockContainerUpload,
+  BlockDeniedError: () => BlockDeniedError,
+  BlockDocument: () => BlockDocument,
+  BlockImage: () => BlockImage,
+  BlockMCPToolResult: () => BlockMCPToolResult,
+  BlockMCPToolUse: () => BlockMCPToolUse,
+  BlockRedactedThinking: () => BlockRedactedThinking,
+  BlockSearchResult: () => BlockSearchResult,
+  BlockServerToolUse: () => BlockServerToolUse,
+  BlockText: () => BlockText,
+  BlockThinking: () => BlockThinking,
+  BlockToolReference: () => BlockToolReference,
+  BlockToolResult: () => BlockToolResult,
+  BlockToolUse: () => BlockToolUse,
+  BlockVideo: () => BlockVideo,
+  BlockWebSearchToolResult: () => BlockWebSearchToolResult,
+  DeltaCitations: () => DeltaCitations,
+  DeltaInputJSON: () => DeltaInputJSON,
+  DeltaSignature: () => DeltaSignature,
+  DeltaText: () => DeltaText,
+  DeltaThinking: () => DeltaThinking,
+  EphemeralMarkerField: () => EphemeralMarkerField,
+  ErrBlockDenied: () => ErrBlockDenied,
+  ErrHistoryTooDeep: () => ErrHistoryTooDeep,
+  HistoryTooDeepError: () => HistoryTooDeepError,
+  SizeError: () => SizeError,
+  dropBlocks: () => dropBlocks,
+  sanitize: () => sanitize,
+  stripEphemeral: () => stripEphemeral
+});
+
+// src/sanitize/types.ts
+var BlockText = "text";
+var BlockImage = "image";
+var BlockVideo = "video";
+var BlockDocument = "document";
+var BlockSearchResult = "search_result";
+var BlockThinking = "thinking";
+var BlockRedactedThinking = "redacted_thinking";
+var BlockToolUse = "tool_use";
+var BlockToolResult = "tool_result";
+var BlockToolReference = "tool_reference";
+var BlockServerToolUse = "server_tool_use";
+var BlockWebSearchToolResult = "web_search_tool_result";
+var BlockCodeExecutionToolResult = "code_execution_tool_result";
+var BlockMCPToolUse = "mcp_tool_use";
+var BlockMCPToolResult = "mcp_tool_result";
+var BlockContainerUpload = "container_upload";
+var DeltaText = "text_delta";
+var DeltaInputJSON = "input_json_delta";
+var DeltaThinking = "thinking_delta";
+var DeltaSignature = "signature_delta";
+var DeltaCitations = "citations_delta";
+var EphemeralMarkerField = "acosmi_ephemeral";
+
+// src/sanitize/config.ts
+var HistoryTooDeepError = class extends Error {
+  constructor() {
+    super("sanitize: messages history exceeds configured depth");
+    this.name = "HistoryTooDeepError";
+  }
+};
+var BlockDeniedError = class extends Error {
+  constructor() {
+    super("sanitize: block type permanently denied");
+    this.name = "BlockDeniedError";
+  }
+};
+var SizeError = class extends Error {
+  blockType;
+  actual;
+  limit;
+  constructor(blockType, actual, limit) {
+    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
+    this.name = "SizeError";
+    this.blockType = blockType;
+    this.actual = actual;
+    this.limit = limit;
+  }
+};
+var ErrHistoryTooDeep = new HistoryTooDeepError();
+var ErrBlockDenied = new BlockDeniedError();
+
+// src/sanitize/history.ts
+function dropBlocks(messages, pred) {
+  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
+  const out = [];
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) {
+      out.push(msg);
+      continue;
+    }
+    const content = msg["content"];
+    if (!Array.isArray(content)) {
+      out.push(msg);
+      continue;
+    }
+    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
+    if (!changed) {
+      out.push(msg);
+      continue;
+    }
+    if (kept.length === 0) {
+      continue;
+    }
+    const newMsg = { ...msg };
+    newMsg["content"] = kept;
+    out.push(newMsg);
+  }
+  return out;
+}
+function collectDroppedToolUseIDs(messages, pred) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject(raw)) continue;
+      if (!pred(raw)) continue;
+      const t = raw["type"];
+      if (typeof t !== "string") continue;
+      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
+        const id = raw["id"];
+        if (typeof id === "string" && id !== "") ids.add(id);
+      }
+    }
+  }
+  return ids;
+}
+function filterBlocks(content, pred, droppedToolUseIDs) {
+  const kept = [];
+  let changed = false;
+  for (const raw of content) {
+    if (!isPlainObject(raw)) {
+      kept.push(raw);
+      continue;
+    }
+    if (pred(raw)) {
+      changed = true;
+      continue;
+    }
+    if (droppedToolUseIDs.size > 0) {
+      const t = raw["type"];
+      if (t === "tool_result" || t === "mcp_tool_result") {
+        const id = raw["tool_use_id"];
+        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
+          changed = true;
+          continue;
+        }
+      }
+    }
+    kept.push(raw);
+  }
+  return { kept, changed };
+}
+function stripEphemeral(messages) {
+  return dropBlocks(messages, (b) => {
+    const t = b["type"];
+    if (t === "thinking" || t === "redacted_thinking") {
+      return false;
+    }
+    const v = b[EphemeralMarkerField];
+    return v === true;
+  });
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/sanitize/defensive.ts
+function sanitize(messages, cfg) {
+  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
+    throw ErrHistoryTooDeep;
+  }
+  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
+    checkMediaSizes(messages, cfg);
+  }
+  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
+    const denySet = /* @__PURE__ */ new Set();
+    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
+    messages = dropBlocks(messages, (b) => {
+      const t = b["type"];
+      return typeof t === "string" && denySet.has(t);
+    });
+  }
+  return messages;
+}
+function checkMediaSizes(messages, cfg) {
+  for (const msg of messages) {
+    if (!isPlainObject2(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject2(raw)) continue;
+      const bt = raw["type"];
+      if (typeof bt !== "string") continue;
+      let limit = 0;
+      switch (bt) {
+        case "image":
+          limit = cfg.maxImageBytes ?? 0;
+          break;
+        case "video":
+          limit = cfg.maxVideoBytes ?? 0;
+          break;
+        case "document":
+          limit = cfg.maxPDFBytes ?? 0;
+          break;
+        default:
+          continue;
+      }
+      if (limit <= 0) continue;
+      const data = extractBase64Data(raw);
+      if (data === "") continue;
+      const actual = base64DecodedLen(data);
+      if (actual > limit) {
+        throw new SizeError(bt, actual, limit);
+      }
+    }
+  }
+}
+function extractBase64Data(block) {
+  const src = block["source"];
+  if (!isPlainObject2(src)) return "";
+  if (src["type"] !== "base64") return "";
+  const dataRaw = src["data"];
+  if (typeof dataRaw !== "string") return "";
+  let data = dataRaw;
+  const i = data.indexOf("base64,");
+  if (i >= 0) {
+    data = data.slice(i + "base64,".length);
+  }
+  return data;
+}
+function base64DecodedLen(b64) {
+  const n = b64.length;
+  let pad = 0;
+  if (n >= 1 && b64[n - 1] === "=") pad++;
+  if (n >= 2 && b64[n - 2] === "=") pad++;
+  return Math.floor(n * 3 / 4) - pad;
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/agent-runs-types.ts
+var AgentRunStreamError = class extends Error {
+  event;
+  code;
+  stage;
+  retryable;
+  constructor(event) {
+    const err = event.error;
+    super(err.stage ? `agent run failed: ${err.stage}: ${err.message}` : `agent run failed: ${err.message}`);
+    this.name = "AgentRunStreamError";
+    this.event = event;
+    this.code = err.code ?? "";
+    this.stage = err.stage ?? "";
+    this.retryable = err.retryable ?? false;
+  }
+};
+
+// src/client/agent-runs.ts
+init_types();
 var agentRunsByClient = /* @__PURE__ */ new WeakMap();
 Object.defineProperty(Client.prototype, "agentRuns", {
   configurable: true,
@@ -4631,6 +5318,6 @@ Client.prototype.getBugReport = async function(bugID, signal) {
   return resp.data;
 };
 
-export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, DefaultRetryPolicy, ErrAuthDenied, ErrBrowserOpen, ErrDiscovery, ErrRegistration, ErrSSLProxy, ErrTimeout, ErrTokenExchange, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, commerceScopes, computeBackoff, defaultRetryable, defaultSafeToRetry, discover, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, getAdapter, getAdapterForModel, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
+export { AgentRunStreamError, AgentRunsClient, AnthropicAdapter, BucketClassCommercial, BucketClassGeneric, BusinessError, Client, ComplianceClient, CompliancePollError, DefaultRetryPolicy, ErrAuthDenied, ErrBillingCallbackCannotCommit, ErrBillingCommitRequiresLocalVerify, ErrBillingS2sForbidden, ErrBrowserOpen, ErrComplianceStepUpRequired, ErrDiscovery, ErrEnvelopeGateClosed, ErrProviderNotConfigured, ErrProviderUnknownNoRetry, ErrRegistration, ErrSSLProxy, ErrSealApprovalContractHashMismatch, ErrSealApprovalExpired, ErrSealApprovalLocationMismatch, ErrSealApprovalNonceUsed, ErrSealApprovalNotApproved, ErrSealApprovalSealMismatch, ErrSealApprovalTransactorMismatch, ErrSealUseAlreadyConsumed, ErrTimeout, ErrTokenExchange, EventAuthURL, EventComplete, EventError, FileTokenStore, FilterStatusAdminBypass, FilterStatusDisabledByFlag, FilterStatusFallbackMissingUser, FilterStatusFallbackNoBuckets, FilterStatusFallbackTkdistError, FilterStatusFallbackTkdistSkew, FilterStatusInternalBypass, FilterStatusOK, FilterStatusUnknown, HTTPError, InMemoryTokenStore, LocalStorageTokenStore, ModelNotFoundError, NetworkError, OpenAIAdapter, OrderTerminalError, ProviderFormat, RateLimitError, ScopeAI, ScopeAccount, ScopeComplianceContractSigningRead, ScopeComplianceContractSigningWrite, ScopeComplianceEvidenceRead, ScopeComplianceEvidenceWrite, ScopeComplianceReportsPublish, ScopeComplianceReportsRead, ScopeComplianceSealApprovalApprove, ScopeComplianceSealApprovalRequest, ScopeComplianceSealManage, ScopeComplianceSealUseExecute, ScopeComplianceTimestampIssue, ScopeComplianceTimestampVerify, ScopeEntitlements, ScopeModels, ScopeModelsChat, ScopeProfile, ScopeSkillStore, ScopeSkills, ScopeTokenPackages, ScopeTools, ScopeToolsExecute, ScopeWallet, ScopeWalletReadonly, ServerToolTypeWebSearch, StreamError, ThinkingHigh, ThinkingHighMinMaxTokens, ThinkingMax, ThinkingMaxFallbackMaxTokens, ThinkingOff, allScopes, anthropicResponseTextContent, anthropicResponseThinkingContent, anthropicResponseToolUseBlocks, apiResponseBusinessError, apiResponseGetMessage, authorize, bucketInfoIsCommercial, bucketRowIsCommercial, buildBetas, classifyComplianceError, commerceScopes, complianceScopes, computeBackoff, defaultRetryable, defaultSafeToRetry, discover, effectivePolicy, exchangeCode, extractAnthropicBlockMeta, fileLockDefaults, findDesktopVisualUnderstandingModel, findFirstModelByInputModality, getAdapter, getAdapterForModel, isBillingConfirmable, isComplianceBusinessError, isComplianceTerminalError, isSSLError, modelScopes, modelSupportsImageInput, modelSupportsInputModality, newFileTokenStore, newThinkingConfig, newTokenSet, newWebSearchTool, parseNotificationEvent, parseSettlement, parseSourcesEvent, refreshToken, register, revokeToken, sanitize_exports as sanitize, skillScopes, tokenSetIsExpired, uniqueMerge };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map