@adelie/server 0.5.6 → 0.5.8

package/dist/index.js

@@ -8,7 +8,7 @@ import {
 } from "./chunk-GO6G445C.js";
 import {
   TICKET_SLUG_PATTERN
-} from "./chunk-FC7VCPLY.js";
+} from "./chunk-6IXN3YH4.js";
 import {
   MachinesRepo
 } from "./chunk-HMTT2PX4.js";
@@ -25,9 +25,10 @@ import {
   isMissingCredential,
   mintApiToken,
   modelCredentialMissing,
+  normalizeError,
   storeApiToken,
   toUserInfo
-} from "./chunk-CXGWSWJA.js";
+} from "./chunk-3Y7I7J3W.js";
 import {
   acquireServerLock,
   liveServerLock,
@@ -77,6 +78,7 @@ var MIN_ATTACHMENT_MB = 1;
 var MAX_ATTACHMENT_MB = 200;
 var MAX_ATTACHMENT_COUNT = 20;
 var INLINE_IMAGE_MAX_MB = 20;
+var INLINE_VIDEO_MAX_MB = 32;
 function base64Length(bytes) {
   return Math.ceil(bytes / 3) * 4;
 }
@@ -89,6 +91,7 @@ function toAttachmentLimits(mb) {
   };
 }
 var INLINE_IMAGE_MAX_BYTES = INLINE_IMAGE_MAX_MB * MB;
+var INLINE_VIDEO_MAX_BYTES = INLINE_VIDEO_MAX_MB * MB;
 function bodyLimitBytes(mb) {
   return base64Length(mb.attachmentTotalMb * MB) + BODY_HEADROOM_BYTES;
 }
@@ -2035,7 +2038,7 @@ async function probe(instance, path210) {
   }
 }
 var json = (status, body) => new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json" } });
-var bad = (message2) => json(400, { error: { code: "bad_request", message: message2 } });
+var bad = (message3) => json(400, { error: { code: "bad_request", message: message3 } });
 function parseUpgradeTarget(contentType, body, readBlob = () => null) {
   const type2 = (contentType ?? "").split(";")[0].trim().toLowerCase();
   if (type2 !== "application/gzip" && type2 !== "application/octet-stream") {
@@ -2888,8 +2891,8 @@ import { Hono } from "hono";
 import fs6 from "fs/promises";
 import path9 from "path";
 import { isValidId } from "@adelie/core";
-function badRequest(message2) {
-  return new HttpError(400, "bad_request", message2);
+function badRequest(message3) {
+  return new HttpError(400, "bad_request", message3);
 }
 function pathParam(c, name) {
   const v = c.req.param(name);
@@ -3680,7 +3683,7 @@ import { DEFAULT_PROJECT_ID as DEFAULT_PROJECT_ID3, DEFAULT_PROJECT_NAME as DEFA
 
 // src/ifaces.json
 var ifaces_default = {
-  hash: "09ffec7eb0cdedd0d4c854572c6f05390cb320e6a103978ae78277abfcbfdb4d",
+  hash: "0b0f68e407b030585d1a39c05a849df1a4d025bd5b85d34c5246b92a42670a96",
   ifaces: {
     "@adelie/server#Access": {
       name: "Access",
@@ -18771,7 +18774,7 @@ var ifaces_default = {
             }
           }
         },
-        readTraceImage: {
+        readTraceMedia: {
           params: [
             {
               data: "string"
@@ -18790,6 +18793,9 @@ var ifaces_default = {
             },
             {
               data: "undefined|number"
+            },
+            {
+              data: "'image'|'video'"
             }
           ],
           returns: {
@@ -19110,7 +19116,7 @@ var ifaces_default = {
             }
           }
         },
-        readTraceImage: {
+        readTraceMedia: {
           params: [
             {
               data: "string"
@@ -19129,6 +19135,9 @@ var ifaces_default = {
             },
             {
               data: "undefined|number"
+            },
+            {
+              data: "'image'|'video'"
             }
           ],
           returns: {
@@ -21878,6 +21887,7 @@ var ifaces_default = {
       "client_type?": "string",
       "display_name?": "string",
       "vision?": "boolean",
+      "video?": "boolean",
       "max_tokens?": "number",
       "fast_mode?": "boolean",
       "pricing?": {
@@ -21964,22 +21974,28 @@ var ifaces_default = {
                                             [
                                               [
                                                 [
-                                                  {
-                                                    $ref: "@adelie/core#ToolCallPayload"
-                                                  },
+                                                  [
+                                                    {
+                                                      $ref: "@adelie/core#ToolCallPayload"
+                                                    },
+                                                    "|",
+                                                    {
+                                                      $ref: "@adelie/core#SessionMetaPayload"
+                                                    }
+                                                  ],
                                                   "|",
                                                   {
-                                                    $ref: "@adelie/core#SessionMetaPayload"
+                                                    $ref: "@adelie/core#TextPayload"
                                                   }
                                                 ],
                                                 "|",
                                                 {
-                                                  $ref: "@adelie/core#TextPayload"
+                                                  $ref: "@adelie/core#ImageUrlPayload"
                                                 }
                                               ],
                                               "|",
                                               {
-                                                $ref: "@adelie/core#ImageUrlPayload"
+                                                $ref: "@adelie/core#VideoUrlPayload"
                                               }
                                             ],
                                             "|",
@@ -22334,6 +22350,14 @@ var ifaces_default = {
       }
     },
     "@adelie/core#ToolPermission": "'r'|'rw'",
+    "@adelie/core#VideoUrlPayload": {
+      type: "'video_url'",
+      role: "'user'",
+      video_url: "string",
+      "stop_reason?": {
+        $ref: "@adelie/core#StopReason"
+      }
+    },
     "@adelie/server#AccessibleProjectRow": {
       role: {
         $ref: "@adelie/server#ProjectRole"
@@ -23130,6 +23154,7 @@ var ifaces_default = {
       "contextWindow?": "number",
       "clientType?": "string",
       "vision?": "boolean",
+      "video?": "boolean",
       "maxTokens?": "number",
       "fastMode?": "boolean",
       "pricing?": {
@@ -23953,12 +23978,14 @@ var ifaces_default = {
       id: "string",
       text: "string",
       images: "number",
+      videos: "number",
       files: "number"
     },
     "@adelie/server#PendingSteeringInfo": {
       id: "string",
       text: "string",
       images: "number",
+      videos: "number",
       files: "number"
     },
     "@adelie/server#PlatformAuthFlowErrorCode": "'upstream_failed'|'unreachable'|'apply_failed'|'invalid_key'|'expired'|'locked'|'already_delivered'",
@@ -24238,6 +24265,9 @@ var ifaces_default = {
       images: {
         $ref: "typescript#Array<string>"
       },
+      videos: {
+        $ref: "typescript#Array<string>"
+      },
       files: {
         $ref: "typescript#Array<RecallableFile>"
       }
@@ -31714,10 +31744,10 @@ var StreamErrorWatcher = class {
     this.pending.delete(key2);
     const spec = retried && entry.status === "retryable" ? LLM_RETRIED : LLM_FAILURES[entry.status];
     const trimmed = reason?.trim();
-    const message2 = trimmed && !isUserAbortReason(trimmed) ? trimmed : this.composeMessage(entry, retried, spec);
+    const message3 = trimmed && !isUserAbortReason(trimmed) ? trimmed : this.composeMessage(entry, retried, spec);
     this.errors.record({
       source: "llm",
-      err: message2,
+      err: message3,
       ctx: this.ctxFor(key2),
       code: spec.code,
       kind: spec.kind
@@ -32006,7 +32036,7 @@ var SandboxService = class {
     );
   }
   failedSuffix() {
-    const parts = [...this.loadErrors].map(([name, message2]) => `${name} (${message2})`);
+    const parts = [...this.loadErrors].map(([name, message3]) => `${name} (${message3})`);
     if (this.declinedNames.length > 0) {
       parts.push(`${this.declinedNames.join(", ")} (not for this host)`);
     }
@@ -32322,8 +32352,8 @@ var UNSUPPORTED_PATTERNS = [
   "cannot process image",
   "image not supported"
 ];
-function isImageRejection(message2) {
-  const m = message2.toLowerCase();
+function isImageRejection(message3) {
+  const m = message3.toLowerCase();
   return UNSUPPORTED_PATTERNS.some((p) => m.includes(p));
 }
 function classifyVisionProbe(outcome, sawContent) {
@@ -32333,8 +32363,8 @@ function classifyVisionProbe(outcome, sawContent) {
   return isImageRejection(String(detail)) ? "unsupported" : "failed";
 }
 function classifyVisionProbeError(err) {
-  const message2 = err instanceof Error ? err.message : String(err);
-  return isImageRejection(message2) ? "unsupported" : "failed";
+  const message3 = err instanceof Error ? err.message : String(err);
+  return isImageRejection(message3) ? "unsupported" : "failed";
 }
 
 // src/services/project-config-service.ts
@@ -33121,6 +33151,7 @@ var ProjectConfigService = class {
       const fallback = modelEnvFallback({ provider, modelId, clientType, baseUrl: credBaseUrl });
       const envKey = fallback?.envKey;
       const vision = typeof m.vision === "boolean" ? m.vision : cat?.supportsVision;
+      const video = m.video === true || cat?.supportsVideo === true ? true : void 0;
       const maxTokens = optNum(m.max_tokens);
       const fastMode = m.fast_mode === true ? true : void 0;
       const displayName = m.display_name === "" ? "" : optStr(m.display_name) ?? cat?.displayName;
@@ -33142,6 +33173,7 @@ var ProjectConfigService = class {
         ...optNum(m.context_window) !== void 0 ? { contextWindow: optNum(m.context_window) } : {},
         ...clientType ? { clientType } : {},
         ...vision !== void 0 ? { vision } : {},
+        ...video !== void 0 ? { video } : {},
         ...maxTokens !== void 0 ? { maxTokens } : {},
         ...fastMode !== void 0 ? { fastMode } : {},
         ...envKey ? { envKey } : {},
@@ -34099,8 +34131,8 @@ function maskValues(schema2, values) {
   return out;
 }
 var PluginConfigError = class extends Error {
-  constructor(field, message2) {
-    super(message2);
+  constructor(field, message3) {
+    super(message3);
     this.field = field;
     this.name = "PluginConfigError";
   }
@@ -35860,13 +35892,13 @@ function compactUnavailable(why) {
       message: "The context was just compacted and there is no new conversation since; no need to compact again."
     }
   };
-  const { code, message: message2 } = reasons[why];
-  return new HttpError(409, code, message2);
+  const { code, message: message3 } = reasons[why];
+  return new HttpError(409, code, message3);
 }
 function switchRefusal(err, ref) {
   if (!(err instanceof ModelSwitchRefusedError)) throw err;
-  const message2 = err.reason === "model_unavailable" && isMissingCredential(err) ? `Model ${ref.modelId} has no API key yet. Configure it on the Models page first.` : err.message;
-  return new HttpError(409, err.reason, message2);
+  const message3 = err.reason === "model_unavailable" && isMissingCredential(err) ? `Model ${ref.modelId} has no API key yet. Configure it on the Models page first.` : err.message;
+  return new HttpError(409, err.reason, message3);
 }
 async function* resumeFrom(head, rest) {
   yield head;
@@ -35962,19 +35994,24 @@ function followUpInfo(f) {
     id: f.id,
     text: f.recall.text,
     images: f.recall.images.length,
+    videos: f.recall.videos.length,
     files: f.recall.files.length
   };
 }
 function recallStoreOf(input) {
   const text2 = input.filter(isPlainText("user")).map((m) => m.payload.text).join("\n");
   const images = [];
+  const videos = [];
   for (const msg of input) {
     const payload = msg.payload;
-    if (msg.type === "model_msg" && payload.type === "image_url" && typeof payload.image_url === "string") {
+    if (msg.type !== "model_msg") continue;
+    if (payload.type === "image_url" && typeof payload.image_url === "string") {
       images.push(payload.image_url);
+    } else if (payload.type === "video_url" && typeof payload.video_url === "string") {
+      videos.push(payload.video_url);
     }
   }
-  return { text: text2, images, files: [] };
+  return { text: text2, images, videos, files: [] };
 }
 function isDeliveredSteering(msg) {
   const p = msg.payload;
@@ -36732,6 +36769,7 @@ var SessionManager = class {
         id: randomUUID5(),
         text: recall.text,
         images: recall.images.length,
+        videos: recall.videos.length,
         files: recall.files.length
       },
       input,
@@ -37689,8 +37727,8 @@ __runInitializers(_init44, 1, DefaultTitleGenerators);
 
 // src/runtime/messaging/connector.ts
 var MessagingChannelError = class extends Error {
-  constructor(message2, recovers) {
-    super(message2);
+  constructor(message3, recovers) {
+    super(message3);
     this.recovers = recovers;
     this.name = "MessagingChannelError";
   }
@@ -37742,8 +37780,8 @@ var MessagingMediaTooLargeError = class extends Error {
   }
 };
 var MessagingPermissionError = class extends Error {
-  constructor(scopes, grantUrl, message2) {
-    super(message2);
+  constructor(scopes, grantUrl, message3) {
+    super(message3);
     this.scopes = scopes;
     this.grantUrl = grantUrl;
     this.name = "MessagingPermissionError";
@@ -37752,14 +37790,14 @@ var MessagingPermissionError = class extends Error {
   grantUrl;
 };
 var MessagingUnsupportedError = class extends Error {
-  constructor(message2) {
-    super(message2);
+  constructor(message3) {
+    super(message3);
     this.name = "MessagingUnsupportedError";
   }
 };
 var MessagingOutboundCapError = class extends Error {
-  constructor(message2) {
-    super(message2);
+  constructor(message3) {
+    super(message3);
     this.name = "MessagingOutboundCapError";
   }
 };
@@ -37800,8 +37838,8 @@ function closeCodeIsRoutine(code) {
   return code === 4009 || code >= 4900 && code <= 4913 || code === 1001 || code === 1006 || code >= 1011 && code <= 1014;
 }
 var MessagingConnectionClosedError = class extends MessagingChannelError {
-  constructor(message2, closeCode, recovers) {
-    super(message2, recovers);
+  constructor(message3, closeCode, recovers) {
+    super(message3, recovers);
     this.closeCode = closeCode;
     this.name = "MessagingConnectionClosedError";
   }
@@ -37828,21 +37866,21 @@ var QQ_BODY_INDEPENDENT_SEND_CODES = /* @__PURE__ */ new Set([
   40034105,
   40054013
 ]);
-function qqSendErrorText(errCode, message2) {
+function qqSendErrorText(errCode, message3) {
   if (errCode === 40034128) {
-    return `${message2} \u2014 QQ allows only a few replies to one message, within minutes of it`;
+    return `${message3} \u2014 QQ allows only a few replies to one message, within minutes of it`;
   }
   if (errCode === 40034005 || errCode === 304103 || errCode === 40034024) {
-    return `${message2} \u2014 the QQ message being replied to has expired`;
+    return `${message3} \u2014 the QQ message being replied to has expired`;
   }
   if (errCode === 40034105 || errCode === 40054013) {
-    return `${message2} \u2014 this QQ user has turned off messages from bots`;
+    return `${message3} \u2014 this QQ user has turned off messages from bots`;
   }
-  return message2;
+  return message3;
 }
 var QQApiError = class extends MessagingChannelError {
-  constructor(message2, code, recovers = false) {
-    super(message2, recovers);
+  constructor(message3, code, recovers = false) {
+    super(message3, recovers);
     this.code = code;
     this.name = "QQApiError";
   }
@@ -39087,8 +39125,8 @@ function scopeDenialDetail(msg) {
   return { scopes, grantUrl: url !== null && url.length <= GRANT_URL_MAX ? url : null };
 }
 var FeishuApiError = class extends Error {
-  constructor(message2, code) {
-    super(message2);
+  constructor(message3, code) {
+    super(message3);
     this.code = code;
     this.name = "FeishuApiError";
   }
@@ -39666,8 +39704,8 @@ var TELEGRAM_MAX_DOWNLOAD_BYTES = 20 * 1024 * 1024;
 var CALL_TIMEOUT_MS3 = 15e3;
 var TRANSFER_TIMEOUT_MS = 6e4;
 var TelegramApiError = class extends MessagingChannelError {
-  constructor(message2, errorCode, recovers = httpStatusRecovers(errorCode)) {
-    super(message2, recovers);
+  constructor(message3, errorCode, recovers = httpStatusRecovers(errorCode)) {
+    super(message3, recovers);
     this.errorCode = errorCode;
     this.name = "TelegramApiError";
   }
@@ -40835,8 +40873,8 @@ var AES_KEY_BYTES = 16;
 var WECHAT_VIDEO_FILE_NAME = "video.mp4";
 var WECHAT_STALE_TOKEN_CODE = -14;
 var WeChatApiError = class extends MessagingChannelError {
-  constructor(ret, message2, flags = {}) {
-    super(message2, flags.recovers ?? false);
+  constructor(ret, message3, flags = {}) {
+    super(message3, flags.recovers ?? false);
     this.ret = ret;
     this.name = "WeChatApiError";
     this.authenticated = flags.authenticated ?? false;
@@ -42530,9 +42568,9 @@ function messagingFilesMissingLog(names) {
 function filesSkippedError(channel, fileNames) {
   const n = fileNames.length;
   const files = n === 1 ? "1 more file the reply mentioned was" : `${n} more files the reply mentioned were`;
-  const message2 = (list) => `${files} not sent to the ${channel} chat: at most ${MESSAGING_OUTBOUND_FILE_MAX_COUNT} ride along with one reply (${list})`;
+  const message3 = (list) => `${files} not sent to the ${channel} chat: at most ${MESSAGING_OUTBOUND_FILE_MAX_COUNT} ride along with one reply (${list})`;
   return new MessagingOutboundCapError(
-    message2(quotedNames(fileNames, MESSAGE_MAX - message2("").length))
+    message3(quotedNames(fileNames, MESSAGE_MAX - message3("").length))
   );
 }
 var MESSAGING_INBOUND_IMAGE_BUDGET_BYTES = 2 * INLINE_IMAGE_MAX_BYTES;
@@ -44323,9 +44361,9 @@ var HarnessHistoryStore = class {
       await this.push(id);
       return true;
     } catch (err) {
-      const message2 = err instanceof Error ? err.message : String(err);
-      this.lastRollback = { id, error: message2, at: this.clock.now().toISOString() };
-      this.log.line(`[harness-history] rollback to ${id} failed: ${message2}`);
+      const message3 = err instanceof Error ? err.message : String(err);
+      this.lastRollback = { id, error: message3, at: this.clock.now().toISOString() };
+      this.log.line(`[harness-history] rollback to ${id} failed: ${message3}`);
       throw err;
     }
   }
@@ -49159,8 +49197,8 @@ async function scanMessages(state, messages, onBoundary, expandChild, fromOrdina
     if (msg.origin !== void 0 && msg.origin.length > 0) continue;
     const ms = tsMs(msg.timestamp);
     const p = msg.payload;
-    const isUserImage = msg.type === "model_msg" && p.type === "image_url";
-    if (!isUserImage) state.steeringOpen = false;
+    const isUserMedia = msg.type === "model_msg" && (p.type === "image_url" || p.type === "video_url");
+    if (!isUserMedia) state.steeringOpen = false;
     if (msg.type === "model_msg") {
       if (state.compactionActive) {
         touchTask(state, ms);
@@ -49192,7 +49230,7 @@ async function scanMessages(state, messages, onBoundary, expandChild, fromOrdina
         );
         continue;
       }
-      if (p.type === "image_url") {
+      if (p.type === "image_url" || p.type === "video_url") {
         if (state.steeringOpen) {
           touchTask(state, ms);
           continue;
@@ -49448,6 +49486,7 @@ function buildContextBreakdown(messages) {
     switch (p.type) {
       case "text":
       case "image_url":
+      case "video_url":
       case "inline_data":
         if (p.role === "assistant") out.assistantMessages += size;
         else out.userMessages += size;
@@ -49655,43 +49694,63 @@ var TraceLineIndex = class {
   }
 };
 
-// src/services/trace-images.ts
+// src/services/trace-media.ts
 var REFERENCED_IMAGE_MIMES = /* @__PURE__ */ new Set([
   "image/png",
   "image/jpeg",
   "image/gif",
   "image/webp"
 ]);
-function referableImage(url) {
+var REFERENCED_VIDEO_MIMES = /* @__PURE__ */ new Set([
+  "video/mp4",
+  "video/quicktime",
+  "video/webm",
+  "video/x-matroska",
+  "video/x-msvideo"
+]);
+function referableDataUrl(url, mimes) {
   if (!url.startsWith("data:")) return null;
   const comma = url.indexOf(",");
   if (comma < 0 || comma === url.length - 1) return null;
   const header = url.slice("data:".length, comma).toLowerCase();
   if (!header.endsWith(";base64")) return null;
   const mime = header.slice(0, header.indexOf(";")).trim();
-  return REFERENCED_IMAGE_MIMES.has(mime) ? { mime, dataStart: comma + 1 } : null;
+  return mimes.has(mime) ? { mime, dataStart: comma + 1 } : null;
 }
 function traceImageUrl(sessionId, at, slot) {
   const query = `file=${at.fileIndex}&ordinal=${at.ordinal}${slot !== void 0 ? `&i=${slot}` : ""}`;
   return `/api/sessions/${encodeURIComponent(sessionId)}/trace-image?${query}`;
 }
-function withImagesByReference(sessionId, msg) {
+function traceVideoUrl(sessionId, at) {
+  const query = `file=${at.fileIndex}&ordinal=${at.ordinal}`;
+  return `/api/sessions/${encodeURIComponent(sessionId)}/trace-video?${query}`;
+}
+function withMediaByReference(sessionId, msg) {
   const at = msg.tracePosition;
   if (at === void 0 || msg.type !== "model_msg") return msg;
   const kind = msg.payload.type;
   if (kind === "image_url") {
     const payload = msg.payload;
-    if (typeof payload.image_url !== "string" || referableImage(payload.image_url) === null) {
+    if (typeof payload.image_url !== "string" || referableDataUrl(payload.image_url, REFERENCED_IMAGE_MIMES) === null) {
       return msg;
     }
     return { ...msg, payload: { ...payload, image_url: traceImageUrl(sessionId, at) } };
   }
+  if (kind === "video_url") {
+    const payload = msg.payload;
+    if (typeof payload.video_url !== "string" || referableDataUrl(payload.video_url, REFERENCED_VIDEO_MIMES) === null) {
+      return msg;
+    }
+    return { ...msg, payload: { ...payload, video_url: traceVideoUrl(sessionId, at) } };
+  }
   if (kind === "tool_call_output") {
     const payload = msg.payload;
     if (!Array.isArray(payload.images)) return msg;
     let replaced = false;
     const images = payload.images.map((image, k) => {
-      if (typeof image !== "string" || referableImage(image) === null) return image;
+      if (typeof image !== "string" || referableDataUrl(image, REFERENCED_IMAGE_MIMES) === null) {
+        return image;
+      }
       replaced = true;
       return traceImageUrl(sessionId, at, k);
     });
@@ -49699,19 +49758,21 @@ function withImagesByReference(sessionId, msg) {
   }
   return msg;
 }
-function traceRecordImage(record, slot) {
+function traceRecordMedia(record, slot, kind) {
   if (record.type !== "model_msg") return null;
   const p = record.payload;
+  const mimes = kind === "video" ? REFERENCED_VIDEO_MIMES : REFERENCED_IMAGE_MIMES;
   let url;
   if (slot === void 0) {
-    url = p.type === "image_url" ? p.image_url : void 0;
+    const wanted = kind === "video" ? "video_url" : "image_url";
+    url = p.type === wanted ? kind === "video" ? p.video_url : p.image_url : void 0;
   } else if (p.type === "tool_call_output" && Array.isArray(p.images)) {
     url = p.images[slot];
   }
   if (typeof url !== "string") return null;
-  const image = referableImage(url);
-  if (image === null) return null;
-  return { mime: image.mime, bytes: Buffer.from(url.slice(image.dataStart), "base64") };
+  const media = referableDataUrl(url, mimes);
+  if (media === null) return null;
+  return { mime: media.mime, bytes: Buffer.from(url.slice(media.dataStart), "base64") };
 }
 
 // src/services/trace-service.ts
@@ -49719,7 +49780,7 @@ import { Component as Component36, Use as Use38 } from "@adelie/core/kernel";
 var IMPORT_SESSION_ID_RE = /^[A-Za-z0-9_-]{1,128}$/;
 var MAX_TRACE_BUNDLE_SHARDS = 200;
 function parseTraceShard(content, what) {
-  const invalid3 = (message2) => new HttpError(400, "invalid_trace", message2);
+  const invalid3 = (message3) => new HttpError(400, "invalid_trace", message3);
   let records;
   try {
     records = parseTraceLines2(content, { onMalformed: "throw" });
@@ -49749,7 +49810,7 @@ function parseTraceBundle(content) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const envelope = parsed;
   if (envelope.format !== "adelie-trace-bundle") return null;
-  const invalid3 = (message2) => new HttpError(400, "invalid_trace", message2);
+  const invalid3 = (message3) => new HttpError(400, "invalid_trace", message3);
   if (envelope.version !== 1) {
     throw invalid3(`Unsupported Trace bundle version ${String(envelope.version)}.`);
   }
@@ -50164,7 +50225,7 @@ var TraceService = class {
       let unitBytes = 0;
       for (let i = starts[k].at; i < unitEnd; i++) {
         unitBytes += Buffer.byteLength(
-          JSON.stringify(withImagesByReference(sessionId, spanRaw[i])),
+          JSON.stringify(withMediaByReference(sessionId, spanRaw[i])),
           "utf8"
         );
       }
@@ -50211,7 +50272,7 @@ var TraceService = class {
    * resumes from the selected shard exactly as it would after a restart.
    */
   async forkSessionTrace(projectId, agentId, sourceSessionId, position) {
-    const invalid3 = (message2) => new HttpError(400, "invalid_fork_position", message2);
+    const invalid3 = (message3) => new HttpError(400, "invalid_fork_position", message3);
     const files = await this.locateAll(projectId, agentId, sourceSessionId);
     const targetFilePos = files.findIndex((file) => file.index === position.fileIndex);
     if (targetFilePos < 0) throw invalid3("The selected reply no longer exists in this Session.");
@@ -50255,7 +50316,7 @@ var TraceService = class {
     }
     if (!completedRequest) throw invalid3("The selected assistant reply has not completed yet.");
     const resumed = resumeTrace(targetShard.slice(0, cutOrdinal));
-    if (resumed.contextClosed || resumed.carryOver.length > 0 || !resumed.history.some((message2) => message2 === target)) {
+    if (resumed.contextClosed || resumed.carryOver.length > 0 || !resumed.history.some((message3) => message3 === target)) {
       throw invalid3("The selected reply is not a complete resumable Task boundary.");
     }
     const firstMeta = shards.flat().find(isSessionMeta6);
@@ -50384,20 +50445,20 @@ var TraceService = class {
     return { events, offset, limit, total };
   }
   /**
-   * One image of one Trace record, decoded: the `image_url` of the record at
-   * (`fileIndex`, `ordinal`), or its tool output's `images[slot]`. This is what a windowed
-   * history page's image URL names (trace-images.ts). 404 `trace_image_not_found` when the
-   * file, the record or the slot holds no image the route serves.
+   * One image or video of one Trace record, decoded: the `image_url` / `video_url` of the
+   * record at (`fileIndex`, `ordinal`), or its tool output's `images[slot]`. This is what a
+   * windowed history page's media URL names (trace-media.ts). 404, with a code per kind, when
+   * the file, the record or the slot holds no media the route serves.
    */
-  async readTraceImage(projectId, agentId, sessionId, fileIndex, ordinal, slot) {
-    const notFound2 = () => new HttpError(404, "trace_image_not_found", "This Trace record holds no such image.");
+  async readTraceMedia(projectId, agentId, sessionId, fileIndex, ordinal, slot, kind) {
+    const notFound2 = () => new HttpError(404, `trace_${kind}_not_found`, `This Trace record holds no such ${kind}.`);
     const files = await this.locateAll(projectId, agentId, sessionId);
     const file = files.find((f) => f.index === fileIndex);
     if (file === void 0) throw notFound2();
     const { events } = await this.lineIndex.readRange(file.path, ordinal, 1);
-    const image = events[0] !== void 0 ? traceRecordImage(events[0], slot) : null;
-    if (image === null) throw notFound2();
-    return image;
+    const media = events[0] !== void 0 ? traceRecordMedia(events[0], slot, kind) : null;
+    if (media === null) throw notFound2();
+    return media;
   }
   /**
    * What the analysis prices a file's Requests on: the paired reference named by the file's own
@@ -54596,12 +54657,14 @@ import path27 from "path";
 import { Hono as Hono22 } from "hono";
 import {
   THINKING_LEVEL_NAMES as THINKING_LEVEL_NAMES2,
+  catalogSupportsVideo,
   imageUrlMessage as imageUrlMessage3,
   isValidId as isValidId4,
   scratchpadDir as scratchpadDir3,
   sessionScratchpadDir,
   stripLeadingMarkerBlocks,
-  userText as userText5
+  userText as userText5,
+  videoUrlMessage
 } from "@adelie/core";
 
 // src/services/workspace-guard.ts
@@ -55049,13 +55112,13 @@ var ModelBalances = class {
     }
     return { ok: true, provider, ...figures, fetchedAt: new Date(this.now()).toISOString() };
   }
-  failure(provider, error, message2, status) {
+  failure(provider, error, message3, status) {
     return {
       ok: false,
       provider,
       error,
       ...status !== void 0 ? { status } : {},
-      message: message2,
+      message: message3,
       fetchedAt: new Date(this.now()).toISOString()
     };
   }
@@ -55413,8 +55476,8 @@ function modelOAuthCallbackRoutes(deps) {
     try {
       deps.modelOAuth.deposit({ flowId: flowId3, projectId, code });
     } catch (err) {
-      const message2 = err instanceof HttpError ? err.message : "Something went wrong. Return to Adelie and start a new authorization.";
-      return c.html(resultPage("Authorization failed", message2), 400);
+      const message3 = err instanceof HttpError ? err.message : "Something went wrong. Return to Adelie and start a new authorization.";
+      return c.html(resultPage("Authorization failed", message3), 400);
     }
     return c.html(
       resultPage(
@@ -56089,12 +56152,12 @@ function pageLimit(raw, name) {
 }
 function appendPendingInputs(messages, pending) {
   if (pending.length === 0) return messages;
-  const envelopeKey = (message2) => {
-    const { tracePosition: _tracePosition, ...envelope } = message2;
+  const envelopeKey = (message3) => {
+    const { tracePosition: _tracePosition, ...envelope } = message3;
     return JSON.stringify(envelope);
   };
   const tail = new Set(messages.slice(-50).map(envelopeKey));
-  const missing = pending.filter((message2) => !tail.has(envelopeKey(message2)));
+  const missing = pending.filter((message3) => !tail.has(envelopeKey(message3)));
   return missing.length > 0 ? [...messages, ...missing] : messages;
 }
 function messagesPageQuery(c) {
@@ -56156,6 +56219,49 @@ function requireImageUrl(url, field) {
     `${field} must be an http(s) URL or a base64 data: URL (data:<mime>;base64,<bytes>).`
   );
 }
+var VIDEO_DATA_URL = /^data:video\/[^;,]+;base64,[A-Za-z0-9+/=\s]+$/;
+function requireVideoUrl(url, field) {
+  if (typeof url === "string") {
+    if (url.startsWith("http://") || url.startsWith("https://")) return url;
+    if (VIDEO_DATA_URL.test(url)) {
+      const bytes = dataUrlByteLength(url);
+      if (bytes > INLINE_VIDEO_MAX_BYTES) {
+        throw new HttpError(
+          413,
+          "video_too_large",
+          `${field} exceeds the ${INLINE_VIDEO_MAX_MB}MB inline video limit.`
+        );
+      }
+      return url;
+    }
+  }
+  throw badRequest(
+    `${field} must be an http(s) URL or a base64 video data: URL (data:video/<type>;base64,<bytes>).`
+  );
+}
+function decodeVideoDataUrl(url, field) {
+  const match = /^data:([^;,]+);base64,([A-Za-z0-9+/=\s]+)$/.exec(url);
+  if (!match) {
+    throw badRequest(`${field} must be a base64 data: URL for the video to be written to disk.`);
+  }
+  return { bytes: Buffer.from(match[2], "base64"), mime: match[1] };
+}
+var VIDEO_MIME_EXTENSIONS = {
+  "video/mp4": ".mp4",
+  "video/quicktime": ".mov",
+  "video/webm": ".webm",
+  "video/x-matroska": ".mkv",
+  "video/x-msvideo": ".avi"
+};
+function videoFileName(given, mime) {
+  if (typeof given === "string" && given.length > 0) return given;
+  const ext = VIDEO_MIME_EXTENSIONS[mime.toLowerCase()] ?? "";
+  return `video${ext || ".mp4"}`;
+}
+function videoAttachment(url, given, field) {
+  const { bytes, mime } = decodeVideoDataUrl(url, field);
+  return { fileName: videoFileName(given, mime), bytes, mime };
+}
 function dataUrlByteLength(dataUrl) {
   const payload = dataUrl.slice(dataUrl.indexOf(",") + 1).replace(/[=\s]+/g, "");
   return Math.floor(payload.length * 3 / 4);
@@ -56169,7 +56275,19 @@ function resolveScratchpadFile(dir, fileName) {
   const resolved = path27.resolve(dir, fileName);
   return path27.dirname(resolved) === path27.resolve(dir) ? resolved : null;
 }
-function parseTaskInput(body, limits) {
+async function sessionTakesVideo(deps, row) {
+  if (catalogSupportsVideo(row.provider, row.modelId)) return true;
+  try {
+    const project = await deps.projectConfigService.loadConfig(row.projectId);
+    const entry = (project.models ?? []).find(
+      (m) => m.provider === row.provider && m.model_id === row.modelId
+    );
+    return entry?.video === true;
+  } catch {
+    return false;
+  }
+}
+function parseTaskInput(body, limits, videoInput) {
   const input = body.input;
   if (!Array.isArray(input) || input.length === 0) {
     throw badRequest("input must be an array with at least one item.");
@@ -56178,6 +56296,7 @@ function parseTaskInput(body, limits) {
   const attachments = [];
   const texts = [];
   const images = [];
+  const videos = [];
   input.forEach((item, i) => {
     if (item === null || typeof item !== "object" || Array.isArray(item)) {
       throw badRequest(`input[${i}] must be an object.`);
@@ -56197,19 +56316,31 @@ function parseTaskInput(body, limits) {
       images.push(url);
       return;
     }
+    if (part.type === "video_url") {
+      const url = requireVideoUrl(part.videoUrl, `input[${i}].videoUrl`);
+      if (videoInput) {
+        messages.push(videoUrlMessage(url));
+        videos.push(url);
+      } else {
+        attachments.push(videoAttachment(url, part.fileName, `input[${i}].videoUrl`));
+        assertAttachmentBudget(attachments, limits);
+      }
+      return;
+    }
     if (part.type === "file") {
       attachments.push(parseAttachmentPart(part, i, limits));
       assertAttachmentBudget(attachments, limits);
       return;
     }
-    throw badRequest(`input[${i}].type must be one of text / image_url / file.`);
+    throw badRequest(`input[${i}].type must be one of text / image_url / video_url / file.`);
   });
-  return { messages, attachments, texts, images };
+  return { messages, attachments, texts, images, videos };
 }
-function recallStore(text2, images, attachments, written) {
+function recallStore(text2, images, videos, attachments, written) {
   return {
     text: text2,
     images,
+    videos,
     files: written.map((p, i) => ({
       fileName: attachments[i].fileName,
       path: p,
@@ -56220,7 +56351,7 @@ function recallStore(text2, images, attachments, written) {
 async function recalledResponse(recall) {
   const files = await readRecalledFiles(recall.files);
   await removeAttachments(recall.files.map((f) => f.path));
-  return { text: recall.text, images: recall.images, files };
+  return { text: recall.text, images: recall.images, videos: recall.videos, files };
 }
 function parseSteerImages(body) {
   const images = body.images;
@@ -56228,6 +56359,17 @@ function parseSteerImages(body) {
   if (!Array.isArray(images)) throw badRequest("images must be an array.");
   return images.map((url, i) => requireImageUrl(url, `images[${i}]`));
 }
+function parseSteerVideos(body, videoInput) {
+  const videos = body.videos;
+  if (videos === void 0) return [];
+  if (!Array.isArray(videos)) throw badRequest("videos must be an array.");
+  if (!videoInput) {
+    throw badRequest(
+      "This Session's model takes no video input; send the video as a file attachment instead."
+    );
+  }
+  return videos.map((url, i) => requireVideoUrl(url, `videos[${i}]`));
+}
 function parseSteerFiles(body, limits) {
   const files = body.files;
   if (files === void 0) return [];
@@ -56654,13 +56796,14 @@ function sessionsRoutes(deps) {
     if (fileIndex === void 0 || ordinal === void 0) {
       throw badRequest("file and ordinal are required.");
     }
-    const image = await deps.traceService.readTraceImage(
+    const image = await deps.traceService.readTraceMedia(
       row.projectId,
       row.agentId,
       row.sessionId,
       fileIndex,
       ordinal,
-      intQuery("i", 0)
+      intQuery("i", 0),
+      "image"
     );
     return c.body(new Uint8Array(image.bytes), 200, {
       "content-type": image.mime,
@@ -56668,6 +56811,28 @@ function sessionsRoutes(deps) {
       "cache-control": "private, max-age=31536000, immutable"
     });
   });
+  app.get("/:sessionId/trace-video", async (c) => {
+    const row = resolveSession(c);
+    const fileIndex = parseNonNegativeInt(c.req.query("file") ?? "");
+    const ordinal = parseNonNegativeInt(c.req.query("ordinal") ?? "");
+    if (fileIndex === null || fileIndex < 1 || ordinal === null) {
+      throw badRequest("file (at least 1) and ordinal are required.");
+    }
+    const video = await deps.traceService.readTraceMedia(
+      row.projectId,
+      row.agentId,
+      row.sessionId,
+      fileIndex,
+      ordinal,
+      void 0,
+      "video"
+    );
+    return c.body(new Uint8Array(video.bytes), 200, {
+      "content-type": video.mime,
+      "x-content-type-options": "nosniff",
+      "cache-control": "private, max-age=31536000, immutable"
+    });
+  });
   app.get("/:sessionId/messages", async (c) => {
     const row = resolveSession(c);
     const page = messagesPageQuery(c);
@@ -56707,7 +56872,7 @@ function sessionsRoutes(deps) {
         ...result.agentState !== void 0 ? { agentState: result.agentState } : {}
       };
       const messages2 = appendPendingInputs(result.messages, pendingInputs).map(
-        (m) => withImagesByReference(row.sessionId, m)
+        (m) => withMediaByReference(row.sessionId, m)
       );
       return c.json({
         messages: messages2,
@@ -56763,14 +56928,15 @@ function sessionsRoutes(deps) {
     const body = await readJson(c);
     const goal = parseGoalField(body);
     const limits = toAttachmentLimits(deps.serverSettingsRepo.getAttachmentLimitsMb());
+    const videoInput = await sessionTakesVideo(deps, row);
     if (goal) {
-      const { messages, attachments } = parseTaskInput(body, limits);
+      const { messages, attachments } = parseTaskInput(body, limits, videoInput);
       const text2 = messages.filter((m) => m.payload.type === "text").map((m) => m.payload.text).join("\n").trim();
       if (!text2) {
         throw badRequest("goal mode requires a non-empty text objective.");
       }
       if (attachments.length > 0) {
-        throw badRequest("goal mode accepts text and images only (no file attachments).");
+        throw badRequest("goal mode accepts text, images and videos only (no file attachments).");
       }
       const objective = stripLeadingMarkerBlocks(text2).trim() || text2;
       const { sessionId } = await deps.manager.startGoal(row.sessionId, {
@@ -56780,7 +56946,7 @@ function sessionsRoutes(deps) {
       });
       return c.json({ sessionId }, 202);
     }
-    const parsed = parseTaskInput(body, limits);
+    const parsed = parseTaskInput(body, limits, videoInput);
     const queueIfBusy = body.queueIfBusy === true;
     deps.manager.assertCanAcceptTask(row.sessionId, { queueIfBusy });
     const { input, written } = await attachFilesToInput(
@@ -56794,7 +56960,13 @@ function sessionsRoutes(deps) {
         queueIfBusy,
         // Original content, kept while the input waits in the follow-up queue so a recall
         // (DELETE /follow-ups/:id) can hand it back; unused when the task starts directly.
-        recall: recallStore(parsed.texts.join("\n"), parsed.images, parsed.attachments, written)
+        recall: recallStore(
+          parsed.texts.join("\n"),
+          parsed.images,
+          parsed.videos,
+          parsed.attachments,
+          written
+        )
       });
       return c.json({ sessionId, queued }, 202);
     } catch (err) {
@@ -56807,21 +56979,26 @@ function sessionsRoutes(deps) {
     const body = await readJson(c);
     const text2 = typeof body.text === "string" ? body.text.trim() : "";
     const images = parseSteerImages(body);
+    const videos = parseSteerVideos(body, await sessionTakesVideo(deps, row));
     const files = parseSteerFiles(
       body,
       toAttachmentLimits(deps.serverSettingsRepo.getAttachmentLimitsMb())
     );
-    if (!text2 && images.length === 0 && files.length === 0) {
-      throw badRequest("text, images or files must carry the steering message.");
+    if (!text2 && images.length === 0 && videos.length === 0 && files.length === 0) {
+      throw badRequest("text, images, videos or files must carry the steering message.");
     }
     const { input, written } = await attachFilesToInput(
-      [...text2 ? [userText5(text2)] : [], ...images.map((url) => imageUrlMessage3(url))],
+      [
+        ...text2 ? [userText5(text2)] : [],
+        ...images.map((url) => imageUrlMessage3(url)),
+        ...videos.map((url) => videoUrlMessage(url))
+      ],
       files,
       scratchpadDir3(deps.config.root, row.projectId, row.agentId),
       row.sessionId
     );
     try {
-      deps.manager.steer(row.sessionId, input, recallStore(text2, images, files, written));
+      deps.manager.steer(row.sessionId, input, recallStore(text2, images, videos, files, written));
     } catch (err) {
       await removeAttachments(written);
       throw err;
@@ -60717,13 +60894,13 @@ function dialThroughSocks(socksPort, host, port, timeoutMs = SOCKS_HANDSHAKE_TIM
     let buffer = Buffer.alloc(0);
     let stage = "greet";
     let settled = false;
-    const fail2 = (message2) => {
+    const fail2 = (message3) => {
       if (settled) return;
       settled = true;
       socket.removeListener("data", onData);
       socket.removeListener("close", onClose);
       socket.destroy();
-      reject(new Error(message2));
+      reject(new Error(message3));
     };
     const onData = (chunk) => {
       buffer = Buffer.concat([buffer, chunk]);
@@ -61411,8 +61588,8 @@ var APPLY_TIMEOUT_MS = 10 * 6e4;
 function refusalDetail(status, text2) {
   try {
     const body = JSON.parse(text2);
-    const message2 = body.error?.message;
-    if (typeof message2 === "string" && message2 !== "") return message2;
+    const message3 = body.error?.message;
+    if (typeof message3 === "string" && message3 !== "") return message3;
   } catch {
   }
   const said = text2.trim();
@@ -65665,10 +65842,10 @@ ${serializeTicket(ticket.doc).trimEnd()}`
 
 // src/runtime/organization/reconcile.ts
 var nowOf = (deps) => deps.now?.() ?? Date.now();
-function recordError(deps, org, code, message2, agentId) {
+function recordError(deps, org, code, message3, agentId) {
   deps.errors.record({
     source: "organization",
-    err: new Error(message2),
+    err: new Error(message3),
     code,
     ctx: { projectId: org.projectId, ...agentId !== void 0 ? { agentId } : {} }
   });
@@ -66447,7 +66624,7 @@ var notAMember = (channelId, principal, why) => new HttpError(
   "not_a_member",
   why ?? `${principal} is not a member of the channel ${channelId}.`
 );
-var allHandsImmutable = (message2) => new HttpError(400, "all_hands_immutable", message2);
+var allHandsImmutable = (message3) => new HttpError(400, "all_hands_immutable", message3);
 var requireChainLimit = (value) => {
   if (!Number.isInteger(value) || value < 0 || value > MENTION_CHAIN_LIMIT_MAX) {
     throw badRequest(
@@ -66497,14 +66674,14 @@ var OrganizationService = class {
     );
   }
   /** One dead end of an id proposal, in the log and in the Project's errors panel. */
-  recordIdSuggestFailure(projectId, message2) {
-    this.deps.log?.(`org: id suggestion fell back for ${projectId}: ${message2}`);
+  recordIdSuggestFailure(projectId, message3) {
+    this.deps.log?.(`org: id suggestion fell back for ${projectId}: ${message3}`);
     this.deps.errors.record({
       source: "organization",
       code: "id_suggest_failed",
       kind: "expected",
       ctx: { projectId },
-      err: new Error(message2)
+      err: new Error(message3)
     });
   }
   async requireOrg(projectId, orgId) {
@@ -69100,7 +69277,7 @@ function organizationRoutes(deps) {
     member(c, projectId);
     const body = await readJson(c).catch(() => ({}));
     const agentId = optionalString(body, "agentId", { minLen: 2, maxLen: 64 });
-    const message2 = optionalString(body, "message", { maxLen: 1e5 });
+    const message3 = optionalString(body, "message", { maxLen: 1e5 });
     const workspace = optionalString(body, "workspace", { minLen: 1, maxLen: 4096 });
     const res = await deps.orgService.startTicket(
       projectId,
@@ -69108,7 +69285,7 @@ function organizationRoutes(deps) {
       ticketId,
       {
         ...agentId !== void 0 ? { agentId } : {},
-        ...message2 !== void 0 ? { message: message2 } : {},
+        ...message3 !== void 0 ? { message: message3 } : {},
         ...workspace !== void 0 ? { workspace } : {}
       },
       // Who asks decides whether it may: an employee starts sessions only on its own tickets.
@@ -70292,8 +70469,8 @@ var DRAFT_SHORTCUT_MAX_COUNT = 3;
 var DRAFT_SHORTCUT_TITLE_MAX = 40;
 var DRAFT_SHORTCUT_PROMPT_MAX = 4e3;
 var DRAFT_SHORTCUT_ID_MAX = 64;
-function invalid(message2) {
-  return new HttpError(400, "invalid_draft_shortcuts", message2);
+function invalid(message3) {
+  return new HttpError(400, "invalid_draft_shortcuts", message3);
 }
 function shortcutField(entry, key2, index, maxLen) {
   const value = entry[key2];
@@ -70337,8 +70514,8 @@ var KEYBINDINGS_BYTES_MAX = 8 * 1024;
 var SECTIONS = ["mac", "windows", "linux"];
 var ID_RE = /^[a-z][a-zA-Z0-9]*(\.[a-z][a-zA-Z0-9]*)+$/;
 var CHORD_RE = /^(Mod\+)?(Ctrl\+)?(Alt\+)?(Shift\+)?[A-Za-z][A-Za-z0-9]*$/;
-function invalid2(message2) {
-  return new HttpError(400, "invalid_keybindings", message2);
+function invalid2(message3) {
+  return new HttpError(400, "invalid_keybindings", message3);
 }
 function validateKeybindings(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -70437,6 +70614,7 @@ function meRoutes(deps) {
         ...deps.serverSettingsRepo.getAttachmentLimitsMb(),
         attachmentMaxCount: MAX_ATTACHMENT_COUNT,
         imageMaxMb: INLINE_IMAGE_MAX_MB,
+        videoMaxMb: INLINE_VIDEO_MAX_MB,
         attachmentLimitMinMb: MIN_ATTACHMENT_MB,
         attachmentLimitMaxMb: MAX_ATTACHMENT_MB
       },
@@ -70738,13 +70916,399 @@ InstallRoutes = __decorateElement(_init131, 0, "InstallRoutes", _InstallRoutes_d
 __runInitializers(_init131, 1, InstallRoutes);
 
 // src/http/routes/themes.ts
-import { readdir, readFile } from "fs/promises";
+import { mkdir, readdir, readFile, rm as rm2, writeFile } from "fs/promises";
 import { join as join2 } from "path";
 import { Hono as Hono41 } from "hono";
-import { externalThemesCss, readExternalTheme } from "@adelie/core";
+import { externalThemesCss, MAX_THEME_FILE_BYTES as MAX_THEME_FILE_BYTES2, readExternalTheme } from "@adelie/core";
 import { Bind as Bind25, Component as Component65, Use as Use67 } from "@adelie/core/kernel";
+
+// src/services/theme-download.ts
+import { MAX_THEME_FILE_BYTES } from "@adelie/core";
+
+// src/services/plugin-download.ts
+import { createHash as createHash9, timingSafeEqual as timingSafeEqual3 } from "crypto";
+import { isIP } from "net";
+var MAX_PLUGIN_ARCHIVE_BYTES = 32 * 1024 * 1024;
+var DOWNLOAD_TIMEOUT_MS = 6e4;
+function normalizePluginUrl(raw) {
+  const trimmed = raw.trim();
+  if (trimmed === "") throw badRequest("url must not be empty.");
+  let url;
+  try {
+    url = new URL(trimmed);
+  } catch {
+    throw new HttpError(400, "unsupported_url", "url must be an absolute http(s) URL.");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new HttpError(400, "unsupported_url", "url must be an http(s) URL.");
+  }
+  assertHostAllowed(url);
+  const host = url.hostname.toLowerCase().replace(/^www\./, "");
+  if (host !== "github.com") {
+    const file = url.pathname.split("/").filter(Boolean).pop() ?? "";
+    const suggested = archiveStem(file);
+    return { fetchUrl: url.toString(), subdir: "", ...suggested ? { name: suggested } : {} };
+  }
+  const segments = url.pathname.split("/").filter(Boolean).map(decodeURIComponent);
+  const [owner3, repo, kind, ...rest] = segments;
+  if (!owner3 || !repo) {
+    throw new HttpError(
+      400,
+      "unsupported_url",
+      "Not a GitHub repository URL: expected /<owner>/<repo>."
+    );
+  }
+  const repoUrl = `https://github.com/${owner3}/${repo}`;
+  if (kind === void 0) {
+    return { fetchUrl: `${repoUrl}/archive/HEAD.zip`, subdir: "", name: repo };
+  }
+  if (kind !== "tree") {
+    return { fetchUrl: url.toString(), subdir: "", name: repo };
+  }
+  const [ref, ...sub] = rest;
+  if (!ref) throw new HttpError(400, "unsupported_url", "A GitHub tree URL needs a branch or tag.");
+  const subdir = sub.join("/");
+  return {
+    fetchUrl: `${repoUrl}/archive/${encodeURIComponent(ref)}.zip`,
+    subdir,
+    // The plugin directory is the last segment of the subdirectory — that is its name.
+    name: sub.length > 0 ? sub[sub.length - 1] : repo
+  };
+}
+var NPM_REGISTRY = "https://registry.npmjs.org";
+var NPM_NAME = /^(?:@[A-Za-z0-9._~!*'()-]+\/)?[A-Za-z0-9._~!*'()-]+$/;
+var NPM_VERSION = /^[A-Za-z0-9][A-Za-z0-9._+-]*$/;
+function parseNpmPluginSpec(raw) {
+  const trimmed = raw.trim();
+  if (trimmed === "") return null;
+  if (trimmed.toLowerCase().startsWith("npm:")) {
+    return parseNpmName(trimmed.slice("npm:".length).trim());
+  }
+  if (/^https?:\/\//i.test(trimmed)) {
+    let url;
+    try {
+      url = new URL(trimmed);
+    } catch {
+      return null;
+    }
+    const host = url.hostname.toLowerCase().replace(/^www\./, "");
+    if (host === "npmjs.com") {
+      const segments = url.pathname.split("/").filter(Boolean).map(decodeURIComponent);
+      if (segments[0] !== "package") return null;
+      const scoped = segments[1] === void 0 ? void 0 : segments[1].startsWith("@");
+      const name = scoped ? `${segments[1]}/${segments[2] ?? ""}` : segments[1];
+      if (name === void 0 || name.endsWith("/")) return null;
+      const marker = scoped ? 3 : 2;
+      const version = segments[marker] === "v" ? segments[marker + 1] : void 0;
+      return parseNpmName(version === void 0 ? name : `${name}@${version}`);
+    }
+    if (host === "registry.npmjs.org") {
+      const rest = decodeURIComponent(url.pathname.replace(/^\//, ""));
+      const segments = rest.split("/");
+      if (segments[0] === void 0 || segments[0] === "") return null;
+      const scoped = segments[0].startsWith("@");
+      const name = scoped ? `${segments[0]}/${segments[1] ?? ""}` : segments[0];
+      if (name.endsWith("/") || segments.length > (scoped ? 2 : 1)) return null;
+      return parseNpmName(name);
+    }
+    return null;
+  }
+  return parseNpmName(trimmed);
+}
+function parseNpmName(spec) {
+  if (spec === "") return null;
+  const at = spec.lastIndexOf("@");
+  const name = at > 0 ? spec.slice(0, at) : spec;
+  const version = at > 0 ? spec.slice(at + 1) : void 0;
+  if (name.length > 214 || !NPM_NAME.test(name)) return null;
+  if (version !== void 0 && !NPM_VERSION.test(version)) return null;
+  return version === void 0 ? { name } : { name, version };
+}
+async function resolvePluginSource(raw, options = {}) {
+  const spec = parseNpmPluginSpec(raw);
+  if (spec === null) return normalizePluginUrl(raw);
+  const found = await fetchPackument(spec, options);
+  const entry = pickVersion(spec, found);
+  const tarball = entry.tarball;
+  let url;
+  try {
+    url = new URL(tarball);
+  } catch {
+    throw new HttpError(400, "download_failed", "The registry named an unreadable tarball URL.");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new HttpError(400, "download_failed", "The registry named an unsupported tarball URL.");
+  }
+  assertHostAllowed(url);
+  return {
+    fetchUrl: url.toString(),
+    subdir: "",
+    // The package's own name, minus the scope: the scope names a publisher, and the plugin is
+    // installed under the name its own repository gives it (`@scope/use-firecrawl` → `use-firecrawl`).
+    name: spec.name.slice(spec.name.startsWith("@") ? spec.name.indexOf("/") + 1 : 0),
+    ...entry.integrity !== void 0 ? { integrity: entry.integrity } : {}
+  };
+}
+async function fetchPackument(spec, options) {
+  const doFetch = options.fetchImpl ?? fetch;
+  const encoded = spec.name.startsWith("@") ? `@${encodeURIComponent(spec.name.slice(1))}` : encodeURIComponent(spec.name);
+  const url = `${NPM_REGISTRY}/${encoded}`;
+  let res;
+  try {
+    res = await doFetch(url, {
+      method: "GET",
+      redirect: "follow",
+      // The abbreviated document: dist-tags and each version's dist, which is all this reads, and a
+      // fraction of the full packument for a package with a long history.
+      headers: { accept: "application/vnd.npm.install-v1+json, application/json" },
+      signal: AbortSignal.timeout(options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS)
+    });
+  } catch (err) {
+    throw new HttpError(400, "npm_registry_failed", `Could not reach npm: ${message(err)}`);
+  }
+  if (res.url) assertHostAllowed(new URL(res.url));
+  if (res.status === 404) {
+    throw new HttpError(404, "npm_package_not_found", `npm has no package ${spec.name}.`);
+  }
+  if (!res.ok) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new HttpError(
+      400,
+      "npm_registry_failed",
+      `npm answered HTTP ${res.status} for ${spec.name}.`
+    );
+  }
+  try {
+    const data = await res.json();
+    if (typeof data !== "object" || data === null) throw new Error("not an object");
+    return data;
+  } catch {
+    throw new HttpError(
+      400,
+      "npm_registry_failed",
+      `npm returned no usable data for ${spec.name}.`
+    );
+  }
+}
+function pickVersion(spec, packument) {
+  const versions = packument["versions"];
+  const table = typeof versions === "object" && versions !== null ? versions : {};
+  const distTags = packument["dist-tags"];
+  const tags = typeof distTags === "object" && distTags !== null ? distTags : {};
+  const version = spec.version ?? (typeof tags["latest"] === "string" ? tags["latest"] : void 0);
+  if (version === void 0) {
+    throw new HttpError(404, "npm_version_not_found", `${spec.name} has no published version.`);
+  }
+  const entry = table[version];
+  if (typeof entry !== "object" || entry === null) {
+    throw new HttpError(
+      404,
+      "npm_version_not_found",
+      `npm has no version ${version} of ${spec.name}; use an exact version or a dist-tag.`
+    );
+  }
+  const dist = entry["dist"];
+  const tarball = typeof dist === "object" && dist !== null ? dist["tarball"] : void 0;
+  if (typeof tarball !== "string" || tarball === "") {
+    throw new HttpError(404, "npm_version_not_found", `${spec.name}@${version} has no tarball.`);
+  }
+  const integrity = dist["integrity"];
+  const entryOut = { tarball };
+  if (typeof integrity === "string" && integrity !== "") entryOut.integrity = integrity;
+  return entryOut;
+}
+function archiveStem(file) {
+  const lower = file.toLowerCase();
+  for (const suffix of [".tar.gz", ".tgz", ".zip"]) {
+    if (lower.endsWith(suffix)) return file.slice(0, -suffix.length);
+  }
+  return void 0;
+}
+function isBlockedHost(hostname) {
+  const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host.endsWith(".localhost")) return true;
+  if (host.endsWith(".local") || host.endsWith(".internal")) return true;
+  const version = isIP(host);
+  if (version === 4) {
+    const octets = host.split(".").map(Number);
+    const [a, b] = octets;
+    return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a >= 224;
+  }
+  if (version === 6) {
+    return /^(0*:)*0*1$/.test(host) || host.startsWith("fe8") || host.startsWith("fe9") || host.startsWith("fea") || host.startsWith("feb") || host.startsWith("fc") || host.startsWith("fd");
+  }
+  return false;
+}
+function assertHostAllowed(url) {
+  if (isBlockedHost(url.hostname)) {
+    throw new HttpError(
+      400,
+      "blocked_url",
+      `Refusing to fetch from a local or private host: ${url.hostname}`
+    );
+  }
+}
+async function fetchPluginArchive(source, options = {}) {
+  const doFetch = options.fetchImpl ?? fetch;
+  let res;
+  try {
+    res = await doFetch(source.fetchUrl, {
+      method: "GET",
+      redirect: "follow",
+      headers: { accept: "application/zip, application/octet-stream, */*" },
+      signal: AbortSignal.timeout(options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS)
+    });
+  } catch (err) {
+    throw new HttpError(400, "download_failed", `Could not download: ${message(err)}`);
+  }
+  if (res.url) {
+    try {
+      assertHostAllowed(new URL(res.url));
+    } catch (err) {
+      if (err instanceof HttpError) throw err;
+      throw new HttpError(400, "download_failed", "Could not read the URL that answered.");
+    }
+  }
+  if (!res.ok) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new HttpError(400, "download_failed", `Download failed with HTTP ${res.status}.`);
+  }
+  const declared = Number(res.headers.get("content-length") ?? "");
+  if (Number.isFinite(declared) && declared > MAX_PLUGIN_ARCHIVE_BYTES) {
+    await res.body?.cancel().catch(() => void 0);
+    throw pluginArchiveTooLarge(MAX_PLUGIN_ARCHIVE_BYTES);
+  }
+  const archive = await readBounded(res);
+  if (source.integrity !== void 0) checkIntegrity(source.integrity, archive);
+  return archive;
+}
+var INTEGRITY_PATTERN = /^(sha512|sha384|sha256|sha1)-([A-Za-z0-9+/]+={0,2})$/;
+function checkIntegrity(integrity, archive) {
+  const parts = INTEGRITY_PATTERN.exec(integrity);
+  if (parts === null) return;
+  const expected = Buffer.from(parts[2], "base64");
+  const actual = createHash9(parts[1]).update(archive).digest();
+  if (actual.length !== expected.length || !timingSafeEqual3(actual, expected)) {
+    throw new HttpError(
+      400,
+      "integrity_failed",
+      "The downloaded archive does not match the checksum the registry published for it."
+    );
+  }
+}
+async function readBounded(res) {
+  const reader = res.body?.getReader();
+  if (!reader) return Buffer.from(await res.arrayBuffer());
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > MAX_PLUGIN_ARCHIVE_BYTES) {
+      await reader.cancel().catch(() => void 0);
+      throw pluginArchiveTooLarge(MAX_PLUGIN_ARCHIVE_BYTES);
+    }
+    chunks.push(value);
+  }
+  return Buffer.concat(chunks);
+}
+function pluginArchiveTooLarge(limitBytes) {
+  return new HttpError(
+    413,
+    "plugin_too_large",
+    `The archive exceeds the ${Math.floor(limitBytes / (1024 * 1024))}MB limit.`
+  );
+}
+function message(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+
+// src/services/theme-download.ts
+var DOWNLOAD_TIMEOUT_MS2 = 3e4;
+function assertHostAllowed2(url) {
+  if (isBlockedHost(url.hostname)) {
+    throw new HttpError(
+      400,
+      "blocked_url",
+      `Refusing to fetch from a local or private host: ${url.hostname}`
+    );
+  }
+}
+function themeTooLarge() {
+  return new HttpError(
+    413,
+    "theme_too_large",
+    `The theme file exceeds the ${Math.floor(MAX_THEME_FILE_BYTES / 1024)}KB limit.`
+  );
+}
+async function fetchThemeFile(rawUrl, options = {}) {
+  let url;
+  try {
+    url = new URL(rawUrl.trim());
+  } catch {
+    throw new HttpError(400, "unsupported_url", "url must be an absolute http(s) URL.");
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new HttpError(400, "unsupported_url", "url must be an http(s) URL.");
+  }
+  assertHostAllowed2(url);
+  const doFetch = options.fetchImpl ?? fetch;
+  let res;
+  try {
+    res = await doFetch(url.toString(), {
+      method: "GET",
+      redirect: "follow",
+      // A theme is JSON, but a host may serve it as text/plain (a raw file link, a gist) — the
+      // bytes decide, so the accept header asks without insisting.
+      headers: { accept: "application/json, text/plain, */*" },
+      signal: AbortSignal.timeout(options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS2)
+    });
+  } catch (err) {
+    throw new HttpError(400, "download_failed", `Could not download: ${message2(err)}`);
+  }
+  if (res.url) {
+    try {
+      assertHostAllowed2(new URL(res.url));
+    } catch (err) {
+      if (err instanceof HttpError) throw err;
+      throw new HttpError(400, "download_failed", "Could not read the URL that answered.");
+    }
+  }
+  if (!res.ok) {
+    await res.body?.cancel().catch(() => void 0);
+    throw new HttpError(400, "download_failed", `Download failed with HTTP ${res.status}.`);
+  }
+  const declared = Number(res.headers.get("content-length") ?? "");
+  if (Number.isFinite(declared) && declared > MAX_THEME_FILE_BYTES) {
+    await res.body?.cancel().catch(() => void 0);
+    throw themeTooLarge();
+  }
+  return readBounded2(res);
+}
+async function readBounded2(res) {
+  const reader = res.body?.getReader();
+  if (!reader) return Buffer.from(await res.arrayBuffer());
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    total += value.byteLength;
+    if (total > MAX_THEME_FILE_BYTES) {
+      await reader.cancel().catch(() => void 0);
+      throw themeTooLarge();
+    }
+    chunks.push(value);
+  }
+  return Buffer.concat(chunks);
+}
+function message2(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+
+// src/http/routes/themes.ts
 var THEMES_DIR = "themes";
-var MAX_FILE_BYTES2 = 256 * 1024;
 async function readImportedThemes(root) {
   const dir = join2(root, THEMES_DIR);
   let names;
@@ -70763,8 +71327,8 @@ async function readImportedThemes(root) {
       rejected.push({ file, errors: [`\u8BFB\u4E0D\u4E86\u8FD9\u4E2A\u6587\u4EF6\uFF1A${error.message}`] });
       continue;
     }
-    if (text2.length > MAX_FILE_BYTES2) {
-      rejected.push({ file, errors: [`\u6587\u4EF6\u8D85\u8FC7 ${MAX_FILE_BYTES2} \u5B57\u8282`] });
+    if (text2.length > MAX_THEME_FILE_BYTES2) {
+      rejected.push({ file, errors: [`\u6587\u4EF6\u8D85\u8FC7 ${MAX_THEME_FILE_BYTES2} \u5B57\u8282`] });
       continue;
     }
     let parsed;
@@ -70787,18 +71351,6 @@ async function readImportedThemes(root) {
   }
   return { dir, themes, rejected };
 }
-function themesRoutes(deps) {
-  const routes = new Hono41();
-  routes.get("/", async (c) => {
-    const { dir, themes, rejected } = await readImportedThemes(deps.root);
-    return c.json({
-      dir,
-      themes: themes.map(({ file, theme }) => ({ file, theme })),
-      rejected: rejected.map(({ file, errors }) => ({ file, errors: [...errors] }))
-    });
-  });
-  return routes;
-}
 function themeStylesheetRoutes(deps) {
   const routes = new Hono41();
   routes.get("/", async (c) => {
@@ -70812,6 +71364,87 @@ function themeStylesheetRoutes(deps) {
   });
   return routes;
 }
+function requireAdmin2(c) {
+  if (!c.var.user.isAdmin) {
+    throw new HttpError(403, "admin_required", "Only an admin can import themes.");
+  }
+}
+function readThemeText(bytes) {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes).replace(/^\uFEFF/, "");
+  } catch {
+    throw new HttpError(400, "theme_invalid", "The file is not UTF-8 text.");
+  }
+}
+function readThemeTextAsTheme(text2) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text2);
+  } catch (error) {
+    throw new HttpError(400, "theme_invalid", `\u4E0D\u662F\u5408\u6CD5\u7684 JSON\uFF1A${error.message}`);
+  }
+  const read = readExternalTheme(parsed);
+  if (!read.ok) throw new HttpError(400, "theme_invalid", read.errors.join("\uFF1B"));
+  return read.theme;
+}
+async function installTheme(root, text2, overwrite) {
+  const theme = readThemeTextAsTheme(text2);
+  const file = `${theme.id}.json`;
+  const claimed = (await readImportedThemes(root)).themes.find(
+    (entry) => entry.theme.id === theme.id
+  )?.file;
+  if (claimed !== void 0 && !overwrite) {
+    throw new HttpError(
+      409,
+      "theme_exists",
+      `A theme named ${theme.id} is already imported as ${claimed}.`
+    );
+  }
+  const dir = join2(root, THEMES_DIR);
+  await mkdir(dir, { recursive: true });
+  if (claimed !== void 0 && claimed !== file) await rm2(join2(dir, claimed));
+  await writeFile(join2(dir, file), text2, "utf8");
+  return { file, theme };
+}
+function themesRoutes(deps) {
+  const routes = new Hono41();
+  routes.get("/", async (c) => {
+    const { dir, themes, rejected } = await readImportedThemes(deps.root);
+    return c.json({
+      dir,
+      themes: themes.map(({ file, theme }) => ({ file, theme })),
+      rejected: rejected.map(({ file, errors }) => ({ file, errors: [...errors] }))
+    });
+  });
+  routes.post("/upload", async (c) => {
+    requireAdmin2(c);
+    const body = await readJson(c);
+    const dataBase64 = requireString(body, "dataBase64", { minLen: 1, label: "dataBase64" });
+    const bytes = Buffer.from(dataBase64, "base64");
+    if (bytes.byteLength === 0) throw badRequest("The file is empty.");
+    if (bytes.byteLength > MAX_THEME_FILE_BYTES2) throw themeTooLarge();
+    const { file, theme } = await installTheme(
+      deps.root,
+      readThemeText(bytes),
+      optionalBoolean(body, "overwrite") ?? false
+    );
+    return c.json({ file, theme }, 201);
+  });
+  routes.post("/download", async (c) => {
+    requireAdmin2(c);
+    const body = await readJson(c);
+    const url = requireString(body, "url", { minLen: 1, maxLen: 2048 });
+    const bytes = await fetchThemeFile(url);
+    if (bytes.byteLength === 0) throw badRequest("The download is empty.");
+    const { file, theme } = await installTheme(
+      deps.root,
+      readThemeText(bytes),
+      optionalBoolean(body, "overwrite") ?? false
+    );
+    return c.json({ file, theme }, 201);
+  });
+  return routes;
+}
 var _routes_dec17, _config_dec15, _ThemesRoutes_decorators, _init132;
 _ThemesRoutes_decorators = [Component65({
   contributes: {
@@ -72056,305 +72689,6 @@ function builtinPluginRegistry(deps = {}) {
   };
 }
 
-// src/services/plugin-download.ts
-import { createHash as createHash9, timingSafeEqual as timingSafeEqual3 } from "crypto";
-import { isIP } from "net";
-var MAX_PLUGIN_ARCHIVE_BYTES = 32 * 1024 * 1024;
-var DOWNLOAD_TIMEOUT_MS = 6e4;
-function normalizePluginUrl(raw) {
-  const trimmed = raw.trim();
-  if (trimmed === "") throw badRequest("url must not be empty.");
-  let url;
-  try {
-    url = new URL(trimmed);
-  } catch {
-    throw new HttpError(400, "unsupported_url", "url must be an absolute http(s) URL.");
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new HttpError(400, "unsupported_url", "url must be an http(s) URL.");
-  }
-  assertHostAllowed(url);
-  const host = url.hostname.toLowerCase().replace(/^www\./, "");
-  if (host !== "github.com") {
-    const file = url.pathname.split("/").filter(Boolean).pop() ?? "";
-    const suggested = archiveStem(file);
-    return { fetchUrl: url.toString(), subdir: "", ...suggested ? { name: suggested } : {} };
-  }
-  const segments = url.pathname.split("/").filter(Boolean).map(decodeURIComponent);
-  const [owner3, repo, kind, ...rest] = segments;
-  if (!owner3 || !repo) {
-    throw new HttpError(
-      400,
-      "unsupported_url",
-      "Not a GitHub repository URL: expected /<owner>/<repo>."
-    );
-  }
-  const repoUrl = `https://github.com/${owner3}/${repo}`;
-  if (kind === void 0) {
-    return { fetchUrl: `${repoUrl}/archive/HEAD.zip`, subdir: "", name: repo };
-  }
-  if (kind !== "tree") {
-    return { fetchUrl: url.toString(), subdir: "", name: repo };
-  }
-  const [ref, ...sub] = rest;
-  if (!ref) throw new HttpError(400, "unsupported_url", "A GitHub tree URL needs a branch or tag.");
-  const subdir = sub.join("/");
-  return {
-    fetchUrl: `${repoUrl}/archive/${encodeURIComponent(ref)}.zip`,
-    subdir,
-    // The plugin directory is the last segment of the subdirectory — that is its name.
-    name: sub.length > 0 ? sub[sub.length - 1] : repo
-  };
-}
-var NPM_REGISTRY = "https://registry.npmjs.org";
-var NPM_NAME = /^(?:@[A-Za-z0-9._~!*'()-]+\/)?[A-Za-z0-9._~!*'()-]+$/;
-var NPM_VERSION = /^[A-Za-z0-9][A-Za-z0-9._+-]*$/;
-function parseNpmPluginSpec(raw) {
-  const trimmed = raw.trim();
-  if (trimmed === "") return null;
-  if (trimmed.toLowerCase().startsWith("npm:")) {
-    return parseNpmName(trimmed.slice("npm:".length).trim());
-  }
-  if (/^https?:\/\//i.test(trimmed)) {
-    let url;
-    try {
-      url = new URL(trimmed);
-    } catch {
-      return null;
-    }
-    const host = url.hostname.toLowerCase().replace(/^www\./, "");
-    if (host === "npmjs.com") {
-      const segments = url.pathname.split("/").filter(Boolean).map(decodeURIComponent);
-      if (segments[0] !== "package") return null;
-      const scoped = segments[1] === void 0 ? void 0 : segments[1].startsWith("@");
-      const name = scoped ? `${segments[1]}/${segments[2] ?? ""}` : segments[1];
-      if (name === void 0 || name.endsWith("/")) return null;
-      const marker = scoped ? 3 : 2;
-      const version = segments[marker] === "v" ? segments[marker + 1] : void 0;
-      return parseNpmName(version === void 0 ? name : `${name}@${version}`);
-    }
-    if (host === "registry.npmjs.org") {
-      const rest = decodeURIComponent(url.pathname.replace(/^\//, ""));
-      const segments = rest.split("/");
-      if (segments[0] === void 0 || segments[0] === "") return null;
-      const scoped = segments[0].startsWith("@");
-      const name = scoped ? `${segments[0]}/${segments[1] ?? ""}` : segments[0];
-      if (name.endsWith("/") || segments.length > (scoped ? 2 : 1)) return null;
-      return parseNpmName(name);
-    }
-    return null;
-  }
-  return parseNpmName(trimmed);
-}
-function parseNpmName(spec) {
-  if (spec === "") return null;
-  const at = spec.lastIndexOf("@");
-  const name = at > 0 ? spec.slice(0, at) : spec;
-  const version = at > 0 ? spec.slice(at + 1) : void 0;
-  if (name.length > 214 || !NPM_NAME.test(name)) return null;
-  if (version !== void 0 && !NPM_VERSION.test(version)) return null;
-  return version === void 0 ? { name } : { name, version };
-}
-async function resolvePluginSource(raw, options = {}) {
-  const spec = parseNpmPluginSpec(raw);
-  if (spec === null) return normalizePluginUrl(raw);
-  const found = await fetchPackument(spec, options);
-  const entry = pickVersion(spec, found);
-  const tarball = entry.tarball;
-  let url;
-  try {
-    url = new URL(tarball);
-  } catch {
-    throw new HttpError(400, "download_failed", "The registry named an unreadable tarball URL.");
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new HttpError(400, "download_failed", "The registry named an unsupported tarball URL.");
-  }
-  assertHostAllowed(url);
-  return {
-    fetchUrl: url.toString(),
-    subdir: "",
-    // The package's own name, minus the scope: the scope names a publisher, and the plugin is
-    // installed under the name its own repository gives it (`@scope/use-firecrawl` → `use-firecrawl`).
-    name: spec.name.slice(spec.name.startsWith("@") ? spec.name.indexOf("/") + 1 : 0),
-    ...entry.integrity !== void 0 ? { integrity: entry.integrity } : {}
-  };
-}
-async function fetchPackument(spec, options) {
-  const doFetch = options.fetchImpl ?? fetch;
-  const encoded = spec.name.startsWith("@") ? `@${encodeURIComponent(spec.name.slice(1))}` : encodeURIComponent(spec.name);
-  const url = `${NPM_REGISTRY}/${encoded}`;
-  let res;
-  try {
-    res = await doFetch(url, {
-      method: "GET",
-      redirect: "follow",
-      // The abbreviated document: dist-tags and each version's dist, which is all this reads, and a
-      // fraction of the full packument for a package with a long history.
-      headers: { accept: "application/vnd.npm.install-v1+json, application/json" },
-      signal: AbortSignal.timeout(options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS)
-    });
-  } catch (err) {
-    throw new HttpError(400, "npm_registry_failed", `Could not reach npm: ${message(err)}`);
-  }
-  if (res.url) assertHostAllowed(new URL(res.url));
-  if (res.status === 404) {
-    throw new HttpError(404, "npm_package_not_found", `npm has no package ${spec.name}.`);
-  }
-  if (!res.ok) {
-    await res.body?.cancel().catch(() => void 0);
-    throw new HttpError(
-      400,
-      "npm_registry_failed",
-      `npm answered HTTP ${res.status} for ${spec.name}.`
-    );
-  }
-  try {
-    const data = await res.json();
-    if (typeof data !== "object" || data === null) throw new Error("not an object");
-    return data;
-  } catch {
-    throw new HttpError(
-      400,
-      "npm_registry_failed",
-      `npm returned no usable data for ${spec.name}.`
-    );
-  }
-}
-function pickVersion(spec, packument) {
-  const versions = packument["versions"];
-  const table = typeof versions === "object" && versions !== null ? versions : {};
-  const distTags = packument["dist-tags"];
-  const tags = typeof distTags === "object" && distTags !== null ? distTags : {};
-  const version = spec.version ?? (typeof tags["latest"] === "string" ? tags["latest"] : void 0);
-  if (version === void 0) {
-    throw new HttpError(404, "npm_version_not_found", `${spec.name} has no published version.`);
-  }
-  const entry = table[version];
-  if (typeof entry !== "object" || entry === null) {
-    throw new HttpError(
-      404,
-      "npm_version_not_found",
-      `npm has no version ${version} of ${spec.name}; use an exact version or a dist-tag.`
-    );
-  }
-  const dist = entry["dist"];
-  const tarball = typeof dist === "object" && dist !== null ? dist["tarball"] : void 0;
-  if (typeof tarball !== "string" || tarball === "") {
-    throw new HttpError(404, "npm_version_not_found", `${spec.name}@${version} has no tarball.`);
-  }
-  const integrity = dist["integrity"];
-  const entryOut = { tarball };
-  if (typeof integrity === "string" && integrity !== "") entryOut.integrity = integrity;
-  return entryOut;
-}
-function archiveStem(file) {
-  const lower = file.toLowerCase();
-  for (const suffix of [".tar.gz", ".tgz", ".zip"]) {
-    if (lower.endsWith(suffix)) return file.slice(0, -suffix.length);
-  }
-  return void 0;
-}
-function isBlockedHost(hostname) {
-  const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
-  if (host === "localhost" || host.endsWith(".localhost")) return true;
-  if (host.endsWith(".local") || host.endsWith(".internal")) return true;
-  const version = isIP(host);
-  if (version === 4) {
-    const octets = host.split(".").map(Number);
-    const [a, b] = octets;
-    return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a >= 224;
-  }
-  if (version === 6) {
-    return /^(0*:)*0*1$/.test(host) || host.startsWith("fe8") || host.startsWith("fe9") || host.startsWith("fea") || host.startsWith("feb") || host.startsWith("fc") || host.startsWith("fd");
-  }
-  return false;
-}
-function assertHostAllowed(url) {
-  if (isBlockedHost(url.hostname)) {
-    throw new HttpError(
-      400,
-      "blocked_url",
-      `Refusing to fetch from a local or private host: ${url.hostname}`
-    );
-  }
-}
-async function fetchPluginArchive(source, options = {}) {
-  const doFetch = options.fetchImpl ?? fetch;
-  let res;
-  try {
-    res = await doFetch(source.fetchUrl, {
-      method: "GET",
-      redirect: "follow",
-      headers: { accept: "application/zip, application/octet-stream, */*" },
-      signal: AbortSignal.timeout(options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS)
-    });
-  } catch (err) {
-    throw new HttpError(400, "download_failed", `Could not download: ${message(err)}`);
-  }
-  if (res.url) {
-    try {
-      assertHostAllowed(new URL(res.url));
-    } catch (err) {
-      if (err instanceof HttpError) throw err;
-      throw new HttpError(400, "download_failed", "Could not read the URL that answered.");
-    }
-  }
-  if (!res.ok) {
-    await res.body?.cancel().catch(() => void 0);
-    throw new HttpError(400, "download_failed", `Download failed with HTTP ${res.status}.`);
-  }
-  const declared = Number(res.headers.get("content-length") ?? "");
-  if (Number.isFinite(declared) && declared > MAX_PLUGIN_ARCHIVE_BYTES) {
-    await res.body?.cancel().catch(() => void 0);
-    throw pluginArchiveTooLarge(MAX_PLUGIN_ARCHIVE_BYTES);
-  }
-  const archive = await readBounded(res);
-  if (source.integrity !== void 0) checkIntegrity(source.integrity, archive);
-  return archive;
-}
-var INTEGRITY_PATTERN = /^(sha512|sha384|sha256|sha1)-([A-Za-z0-9+/]+={0,2})$/;
-function checkIntegrity(integrity, archive) {
-  const parts = INTEGRITY_PATTERN.exec(integrity);
-  if (parts === null) return;
-  const expected = Buffer.from(parts[2], "base64");
-  const actual = createHash9(parts[1]).update(archive).digest();
-  if (actual.length !== expected.length || !timingSafeEqual3(actual, expected)) {
-    throw new HttpError(
-      400,
-      "integrity_failed",
-      "The downloaded archive does not match the checksum the registry published for it."
-    );
-  }
-}
-async function readBounded(res) {
-  const reader = res.body?.getReader();
-  if (!reader) return Buffer.from(await res.arrayBuffer());
-  const chunks = [];
-  let total = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    total += value.byteLength;
-    if (total > MAX_PLUGIN_ARCHIVE_BYTES) {
-      await reader.cancel().catch(() => void 0);
-      throw pluginArchiveTooLarge(MAX_PLUGIN_ARCHIVE_BYTES);
-    }
-    chunks.push(value);
-  }
-  return Buffer.concat(chunks);
-}
-function pluginArchiveTooLarge(limitBytes) {
-  return new HttpError(
-    413,
-    "plugin_too_large",
-    `The archive exceeds the ${Math.floor(limitBytes / (1024 * 1024))}MB limit.`
-  );
-}
-function message(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
 // src/services/tar-archive.ts
 import { gunzipSync } from "zlib";
 var BLOCK = 512;
@@ -72521,7 +72855,7 @@ function libraryResponse(root) {
     }))
   };
 }
-function requireAdmin2(c) {
+function requireAdmin3(c) {
   if (!c.var.user.isAdmin) {
     throw new HttpError(403, "admin_required", "Only an admin can manage the plugin directory.");
   }
@@ -72646,7 +72980,7 @@ function pluginLibraryRoutes(deps) {
     })
   );
   app.post("/upload", async (c) => {
-    requireAdmin2(c);
+    requireAdmin3(c);
     const body = await readJson(c);
     const dataBase64 = requireString(body, "dataBase64", { minLen: 1, label: "dataBase64" });
     const archive = Buffer.from(dataBase64, "base64");
@@ -72664,7 +72998,7 @@ function pluginLibraryRoutes(deps) {
     );
   });
   app.post("/download", async (c) => {
-    requireAdmin2(c);
+    requireAdmin3(c);
     const body = await readJson(c);
     const url = requireString(body, "url", { minLen: 1, maxLen: 2048 });
     const requestedName = optionalString(body, "name", { maxLen: 128 });
@@ -72714,7 +73048,7 @@ function pluginLibraryRoutes(deps) {
     });
   });
   app.delete("/:plugin", async (c) => {
-    requireAdmin2(c);
+    requireAdmin3(c);
     const pluginName = c.req.param("plugin");
     if (!PLUGIN_NAME_PATTERN4.test(pluginName)) {
       throw new HttpError(404, "unknown_plugin", `No such plugin: ${pluginName}`);
@@ -72942,7 +73276,7 @@ function installedPluginRoutes(deps) {
     };
   };
   app.get("/", async (c) => c.json(await view(scope(c))));
-  const requireAdmin3 = (c) => {
+  const requireAdmin4 = (c) => {
     if (!c.var.user.isAdmin) {
       throw new HttpError(403, "admin_required", "Only an admin can perform this operation.");
     }
@@ -72993,7 +73327,7 @@ function installedPluginRoutes(deps) {
     });
   };
   app.post("/", async (c) => {
-    requireAdmin3(c);
+    requireAdmin4(c);
     const projectId = scope(c);
     const body = await readJson(c);
     const specifier = specifierOf(body.specifier);
@@ -73016,7 +73350,7 @@ function installedPluginRoutes(deps) {
     return c.json(await view(projectId));
   });
   app.delete("/", async (c) => {
-    requireAdmin3(c);
+    requireAdmin4(c);
     const projectId = scope(c);
     const specifier = specifierOf(c.req.query("specifier"));
     const machineId = machineOf(c.req.query("machineId"));
@@ -73041,7 +73375,7 @@ function installedPluginRoutes(deps) {
     return c.json(await view(projectId));
   });
   app.put("/", async (c) => {
-    requireAdmin3(c);
+    requireAdmin4(c);
     const projectId = scope(c);
     const body = await readJson(c);
     const list = body.plugins;
@@ -74227,7 +74561,7 @@ var WorkflowService = class {
         state = next ?? null;
         await writeState(folder.dir, state);
       },
-      log: (message2) => service.log.line(`[workflow ${folder.id}] ${message2}`)
+      log: (message3) => service.log.line(`[workflow ${folder.id}] ${message3}`)
     };
   }
   /** A workflow reaches the Sessions of its own Project and no others. */
@@ -74902,12 +75236,13 @@ var HttpModule = class {
     const app = new Hono49();
     app.onError((err, c) => {
       const projectId = attributedProjectId(c, { access });
+      const normalized = normalizeError(err);
       errors.record({
         source: "http",
-        err,
+        err: normalized,
         ...projectId !== void 0 ? { ctx: { projectId } } : {}
       });
-      return handleError(err, c);
+      return handleError(normalized, c);
     });
     app.notFound(() => declined());
     app.use("*", async (c, next) => {
@@ -75163,8 +75498,8 @@ import os10 from "os";
 // src/builtin-browser/shell-link.ts
 import { randomUUID as randomUUID9 } from "crypto";
 var ShellLinkError = class extends Error {
-  constructor(kind, message2) {
-    super(message2);
+  constructor(kind, message3) {
+    super(message3);
     this.kind = kind;
     this.name = "ShellLinkError";
   }
@@ -75436,8 +75771,8 @@ var LOAD_POLL_MS = 250;
 var LOAD_SETTLE_MS = 300;
 var CONTEXT_LOST = /Execution context was destroyed|Inspected target navigated or closed|Cannot find context/i;
 var PageScriptError = class extends Error {
-  constructor(message2) {
-    super(message2);
+  constructor(message3) {
+    super(message3);
     this.name = "PageScriptError";
   }
 };
@@ -75545,9 +75880,9 @@ ${code}
     }
     const res = raw ?? {};
     if (res.exceptionDetails !== void 0) {
-      const message2 = exceptionMessage(res.exceptionDetails);
-      if (CONTEXT_LOST.test(message2)) return { reloaded: true };
-      throw new PageScriptError(message2);
+      const message3 = exceptionMessage(res.exceptionDetails);
+      if (CONTEXT_LOST.test(message3)) return { reloaded: true };
+      throw new PageScriptError(message3);
     }
     const result = res.result;
     if (result === void 0) return { value: void 0 };
@@ -76934,8 +77269,8 @@ var BrowserActions = class {
       if (method !== DIALOG_EVENT) return;
       const type2 = DIALOG_TYPES.find((t) => t === params.type) ?? "alert";
       const accepted = type2 === "alert" || accept;
-      const message2 = typeof params.message === "string" ? params.message : "";
-      into.push({ type: type2, message: message2, accepted });
+      const message3 = typeof params.message === "string" ? params.message : "";
+      into.push({ type: type2, message: message3, accepted });
       const answer = { accept: accepted };
       if (accepted && type2 === "prompt" && typeof params.defaultPrompt === "string") {
         answer.promptText = params.defaultPrompt;
@@ -79564,7 +79899,7 @@ import { Hono as Hono52 } from "hono";
 import { isValidId as isValidId9 } from "@adelie/core";
 var agentNotFound = () => new HttpError(404, "agent_not_found", "No Agent with this id has its API enabled.");
 var sessionNotFound = () => new HttpError(404, "session_not_found", "No API Session with this id.");
-var unauthorized = (message2) => new HttpError(401, "unauthorized", message2);
+var unauthorized = (message3) => new HttpError(401, "unauthorized", message3);
 function requireAgentApiOn(settings) {
   if (!settings.getAgentApiEnabled()) {
     throw new HttpError(403, "agent_api_disabled", "The Agent API is turned off on this server.");
@@ -80243,8 +80578,8 @@ async function runStream(c, deps) {
       }
     } catch (err) {
       if (stream.aborted) return;
-      const message2 = err instanceof Error ? err.message : String(err);
-      deps.log.line(`[amsp] run stream of ${actual} failed: ${message2}`);
+      const message3 = err instanceof Error ? err.message : String(err);
+      deps.log.line(`[amsp] run stream of ${actual} failed: ${message3}`);
       deps.errors.record({
         source: "session",
         err,
@@ -80255,7 +80590,7 @@ async function runStream(c, deps) {
       if (!ended) {
         deps.manager.abortTask(actual);
         try {
-          await end(translator.fail({ code: "internal", message: message2 }));
+          await end(translator.fail({ code: "internal", message: message3 }));
         } catch {
         }
       }
@@ -81220,12 +81555,13 @@ function createApp(boot3) {
   const app = new Hono55();
   app.onError((err, c) => {
     const projectId = attributedProjectId(c, { access: access() });
+    const normalized = normalizeError(err);
     errors().record({
       source: "http",
-      err,
+      err: normalized,
       ...projectId !== void 0 ? { ctx: { projectId } } : {}
     });
-    return handleError(err, c);
+    return handleError(normalized, c);
   });
   app.notFound((c) => c.json(errorBody("not_found", "Endpoint does not exist."), 404));
   app.use("*", async (c, next) => {