@aexol/spectral 0.9.211 → 0.9.215

package/dist/agent/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/agent/agents.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChD,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAqCD,eAAO,MAAM,aAAa,EAAE,WAAW,EAkDtC,CAAC;AA0DF,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAO3E;AACD;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,yEAAyE;IACzE,YAAY,EAAE,IAAI,CAAC;IACnB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,YAAY,EAAE,KAAK,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6EnC;AAkBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,oBAAoB,CAmBtB;AACD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,UAAmB,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAepB;AACD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAgBpB;AACD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,IAAI,CAChB,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,GAAG,SAAS,CAQpB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CACT,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,CAgBR"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/agent/agents.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAChD,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AA6ED,eAAO,MAAM,aAAa,EAAE,WAAW,EAkDtC,CAAC;AA0DF,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAO3E;AACD;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,yEAAyE;IACzE,YAAY,EAAE,IAAI,CAAC;IACnB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,YAAY,EAAE,KAAK,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6EnC;AAkBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,oBAAoB,CAmBtB;AACD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,UAAmB,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAepB;AACD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAgBpB;AACD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,IAAI,CAChB,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,GAAG,SAAS,CAQpB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CACT,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,CAgBR"}

package/dist/agent/agents.js

@@ -29,6 +29,44 @@ const GHOST_SYSTEM_PROMPT = [
     "3. Integrate: combine subagent reports into one coherent outcome. Resolve gaps or conflicts by sending follow-up `subagent` tasks — never by doing the work yourself.",
     "4. Verify: after every implementation phase, delegate a `reviewer` pass before declaring the work done.",
     "",
+    "## Wave orchestration",
+    "",
+    "For non-trivial work, organize delegation into waves. A wave is one `subagent`",
+    "parallel call (a set of independent tasks) plus a barrier: you wait for all",
+    "reports, verify each against its done-criteria, write a short distillate",
+    "(~10-15 lines: decisions, key file paths, what was rejected and why,",
+    "distillate kept in session context — no PLAN.md file), then",
+    "decide continue / re-plan / stop before launching the next wave.",
+    "",
+    "Routing — waves vs single wave vs sequence:",
+    "- Independent tasks with no dependencies → one wave (single `subagent` parallel call).",
+    "- Tasks depending on other tasks' results → separate, later waves (topological",
+    "  order by dependsOn). Never put dependent tasks in the same wave.",
+    "- A strict 1:1 dependency inside one logical step → `chain` with {previous},",
+    "  not a one-task wave.",
+    "- More than ~8 parallel tasks, or fully independent fire-and-forget research →",
+    "  split into smaller waves; `session_fanout` stays fire-and-forget instead of",
+    "  `subagent` parallel (read worker reports yourself, results are not returned).",
+    "",
+    "Typical shapes:",
+    "- research-wave → implement-wave → review-wave (standard feature/fix flow).",
+    "- research-wave (wide, 3-6 researchers) → implement-wave (1-3 executors on",
+    "  disjoint scopes) → review-wave (reviewer + fix executor if needed).",
+    "- Single research-wave → direct answer (read-only questions need no more waves).",
+    "",
+    "Per-task prompt shape: goal (one action) + scope (dirs/files/commands, explicit",
+    "exclusions) + facts the task needs (paths, line numbers from prior distillates)",
+    "+ expected report shape (done-criteria: Status/Dowody/Luki text block, no JSON).",
+    "Keep it under ~40 lines. Between waves pass only distillates and selected facts —",
+    "never full transcripts.",
+    "",
+    "Barrier checklist: all reports back → each verified against done-criteria →",
+    "contradictions resolved (follow-up task if needed) → distillate written",
+    "(kept in session context, compressed to 3-5 lines when older than 2 waves) →",
+    "continue (next wave from ready tasks) / re-plan (wave failed: rewrite wave list,",
+    "keep old distillates) / stop (goal met or provably unachievable — report why).",
+    "There is no wave-level timeout — only the per-subagent timeout applies.",
+    "",
     "## Anti-patterns — never do these",
     "",
     "- Do not explore the codebase yourself (no broad reads or searches) — that is `researcher`'s job.",
@@ -36,6 +74,8 @@ const GHOST_SYSTEM_PROMPT = [
     "- Do not skip the `reviewer` pass after implementation.",
     "- Do not treat delegation as optional: a session with zero `subagent` calls on a non-trivial task is a failed session.",
     "- Do not claim completion without subagent evidence (files changed, commands run, test results).",
+    "- Do not put dependent tasks in the same wave, and do not start the next wave",
+    "  before the barrier (distillate + stop/continue decision) is done.",
 ].join("\n");
 export const SYSTEM_AGENTS = [
     {

package/dist/backend/generated-images.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Backend-hosted image storage client.
+ *
+ * Uploads raw image bytes to the Aexol backend so that sessions only ever
+ * carry a stable URL (`/generated-images/<imageId>`) instead of a base64
+ * payload. The three-step contract is:
+ *
+ *   1. `POST  {backendUrl}/generated-images/upload-url`
+ *      -> `{ imageId, uploadUrl, url, expiresIn, requiredHeaders? }`
+ *   2. `PUT   <uploadUrl>` (presigned, ~600s)
+ *      with `Content-Type` + every header from `requiredHeaders`
+ *   3. `POST  {backendUrl}/generated-images/<imageId>/confirm`
+ *      -> `{ id, size, url }`
+ *
+ * Errors from the backend have the shape
+ * `{ "error": { "message": "...", "type": "..." } }` and are surfaced as a
+ * `GeneratedImageUploadError` carrying the HTTP status and the step that
+ * failed, so callers can decide whether to degrade gracefully.
+ *
+ * Shared by `image_generate` (Phase 1) and — in a later phase — user
+ * screenshots/attachments, hence `kind` is a parameter rather than a constant.
+ *
+ * @module @spectral/backend/generated-images
+ */
+export type GeneratedImageKind = "generated" | "attachment";
+export type UploadStep = "upload-url" | "put" | "confirm";
+export interface UploadImageOptions {
+    /** Backend base url, e.g. `https://api.aexol.ai` (no trailing slash needed). */
+    backendUrl: string;
+    /** Machine JWT (`Authorization: Bearer <token>`). */
+    token: string;
+    /** Raw image bytes. */
+    bytes: Uint8Array;
+    /** MIME type of the bytes, e.g. `image/png`. */
+    contentType: string;
+    /** Storage bucket/kind on the backend. Defaults to `"generated"`. */
+    kind?: GeneratedImageKind;
+    /** Intrinsic pixel width, when known (optional metadata). */
+    width?: number;
+    /** Intrinsic pixel height, when known (optional metadata). */
+    height?: number;
+    /** Injectable for tests / alternative runtimes. Defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+    /** Abort the whole sequence (e.g. tool cancellation). */
+    signal?: AbortSignal;
+    /** Per-request timeout. Defaults to 60s. */
+    timeoutMs?: number;
+}
+export interface UploadImageResult {
+    imageId: string;
+    /** Backend-relative url (`/generated-images/<imageId>`) — safe to persist in a session. */
+    url: string;
+    size: number;
+}
+export interface UploadUrlResponse {
+    imageId: string;
+    uploadUrl: string;
+    url: string;
+    expiresIn?: number;
+    requiredHeaders?: Record<string, string>;
+}
+export interface ConfirmResponse {
+    id: string;
+    size: number;
+    url: string;
+}
+/**
+ * Thrown for every failure of the upload sequence (including presigned PUT
+ * failures). `status` is `undefined` for network-level errors.
+ */
+export declare class GeneratedImageUploadError extends Error {
+    readonly step: UploadStep;
+    readonly status?: number;
+    readonly type?: string;
+    constructor(message: string, options: {
+        step: UploadStep;
+        status?: number;
+        type?: string;
+        cause?: unknown;
+    });
+}
+/**
+ * Upload raw image bytes to backend storage and confirm them.
+ *
+ * @returns the image id, the backend-relative url and the confirmed byte size.
+ * @throws {GeneratedImageUploadError} on any HTTP or network failure, with a
+ *   human-readable message taken from the backend `error.message` when present.
+ */
+export declare function uploadImage(options: UploadImageOptions): Promise<UploadImageResult>;
+//# sourceMappingURL=generated-images.d.ts.map

package/dist/backend/generated-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generated-images.d.ts","sourceRoot":"","sources":["../../src/backend/generated-images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,YAAY,CAAC;AAE5D,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,KAAK,GAAG,SAAS,CAAC;AAE1D,MAAM,WAAW,kBAAkB;IAClC,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,yDAAyD;IACzD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACZ;AAID;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAGtB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQ/E;AA6ED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA0HzF"}

package/dist/backend/generated-images.js

@@ -0,0 +1,214 @@
+/**
+ * Backend-hosted image storage client.
+ *
+ * Uploads raw image bytes to the Aexol backend so that sessions only ever
+ * carry a stable URL (`/generated-images/<imageId>`) instead of a base64
+ * payload. The three-step contract is:
+ *
+ *   1. `POST  {backendUrl}/generated-images/upload-url`
+ *      -> `{ imageId, uploadUrl, url, expiresIn, requiredHeaders? }`
+ *   2. `PUT   <uploadUrl>` (presigned, ~600s)
+ *      with `Content-Type` + every header from `requiredHeaders`
+ *   3. `POST  {backendUrl}/generated-images/<imageId>/confirm`
+ *      -> `{ id, size, url }`
+ *
+ * Errors from the backend have the shape
+ * `{ "error": { "message": "...", "type": "..." } }` and are surfaced as a
+ * `GeneratedImageUploadError` carrying the HTTP status and the step that
+ * failed, so callers can decide whether to degrade gracefully.
+ *
+ * Shared by `image_generate` (Phase 1) and — in a later phase — user
+ * screenshots/attachments, hence `kind` is a parameter rather than a constant.
+ *
+ * @module @spectral/backend/generated-images
+ */
+const DEFAULT_TIMEOUT_MS = 60_000;
+/**
+ * Thrown for every failure of the upload sequence (including presigned PUT
+ * failures). `status` is `undefined` for network-level errors.
+ */
+export class GeneratedImageUploadError extends Error {
+    step;
+    status;
+    type;
+    constructor(message, options) {
+        super(message, options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = "GeneratedImageUploadError";
+        this.step = options.step;
+        this.status = options.status;
+        this.type = options.type;
+    }
+}
+function baseUrlOf(backendUrl) {
+    return backendUrl.replace(/\/+$/, "");
+}
+function joinUrl(base, path) {
+    return `${baseUrlOf(base)}${path.startsWith("/") ? path : `/${path}`}`;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function errorMessageFrom(body, status) {
+    const error = isRecord(body) && isRecord(body.error) ? body.error : undefined;
+    const message = typeof error?.message === "string" && error.message ? error.message : undefined;
+    const type = typeof error?.type === "string" && error.type ? error.type : undefined;
+    return { message: message ?? `HTTP ${status}`, type };
+}
+/** Parse a JSON body, tolerating empty/invalid bodies (presigned S3 replies are empty). */
+async function readJson(response) {
+    const text = await response.text();
+    if (!text)
+        return undefined;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+function requireString(value, field, step) {
+    if (typeof value !== "string" || !value) {
+        throw new GeneratedImageUploadError(`Backend response is missing "${field}"`, { step });
+    }
+    return value;
+}
+/**
+ * Run a single request with an optional timeout + external abort signal.
+ *
+ * The timeout never outlives the call and an already-aborted external signal
+ * aborts immediately.
+ */
+async function fetchWithTimeout(url, init, options) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const onAbort = () => controller.abort();
+    if (options.signal) {
+        if (options.signal.aborted)
+            controller.abort();
+        else
+            options.signal.addEventListener("abort", onAbort, { once: true });
+    }
+    try {
+        return await options.fetchImpl(url, { ...init, signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timer);
+        options.signal?.removeEventListener("abort", onAbort);
+    }
+}
+function networkError(step, error) {
+    if (error instanceof GeneratedImageUploadError)
+        return error;
+    const message = error instanceof Error ? error.message : String(error);
+    const aborted = error instanceof Error && error.name === "AbortError";
+    return new GeneratedImageUploadError(aborted
+        ? `Upload ${step} timed out or was cancelled (${message})`
+        : `Upload ${step} failed: ${message}`, { step, cause: error });
+}
+/**
+ * Upload raw image bytes to backend storage and confirm them.
+ *
+ * @returns the image id, the backend-relative url and the confirmed byte size.
+ * @throws {GeneratedImageUploadError} on any HTTP or network failure, with a
+ *   human-readable message taken from the backend `error.message` when present.
+ */
+export async function uploadImage(options) {
+    const { backendUrl, token, bytes, contentType, kind = "generated", width, height, fetchImpl, signal, timeoutMs, } = options;
+    if (!backendUrl) {
+        throw new GeneratedImageUploadError("Cannot upload image: no backend url configured", { step: "upload-url" });
+    }
+    if (!token) {
+        throw new GeneratedImageUploadError("Cannot upload image: not authenticated (missing machine token)", {
+            step: "upload-url",
+        });
+    }
+    const doFetch = fetchImpl ?? ((...args) => fetch(...args));
+    const base = baseUrlOf(backendUrl);
+    const authHeaders = { Authorization: `Bearer ${token}` };
+    // ── 1. mint an upload url ────────────────────────────────────────────────
+    let uploadUrlResponse;
+    try {
+        const body = {
+            contentType,
+            kind,
+            size: bytes.byteLength,
+        };
+        if (typeof width === "number" && Number.isFinite(width))
+            body.width = width;
+        if (typeof height === "number" && Number.isFinite(height))
+            body.height = height;
+        const response = await fetchWithTimeout(joinUrl(base, "/generated-images/upload-url"), {
+            method: "POST",
+            headers: { ...authHeaders, "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+        }, { timeoutMs, signal, fetchImpl: doFetch });
+        const json = await readJson(response);
+        if (!response.ok) {
+            const { message, type } = errorMessageFrom(json, response.status);
+            throw new GeneratedImageUploadError(`Could not mint image upload url: ${message}`, {
+                step: "upload-url",
+                status: response.status,
+                type,
+            });
+        }
+        const payload = isRecord(json) ? json : {};
+        uploadUrlResponse = {
+            imageId: requireString(payload.imageId, "imageId", "upload-url"),
+            uploadUrl: requireString(payload.uploadUrl, "uploadUrl", "upload-url"),
+            url: requireString(payload.url, "url", "upload-url"),
+            expiresIn: payload.expiresIn,
+            requiredHeaders: payload.requiredHeaders,
+        };
+    }
+    catch (error) {
+        throw networkError("upload-url", error);
+    }
+    // ── 2. PUT the bytes to the presigned url ────────────────────────────────
+    try {
+        const headers = { "Content-Type": contentType };
+        // The backend signs extra headers (e.g. `x-amz-acl: private`) into the
+        // presigned url — they MUST be sent verbatim or S3 rejects the PUT.
+        if (isRecord(uploadUrlResponse.requiredHeaders)) {
+            for (const [key, value] of Object.entries(uploadUrlResponse.requiredHeaders)) {
+                if (typeof value === "string")
+                    headers[key] = value;
+            }
+        }
+        // Normalize to a standalone buffer so byteOffset/byteLength of a
+        // subarray (Buffer view) cannot leak extra bytes into the body.
+        const payload = new Uint8Array(bytes.byteLength);
+        payload.set(bytes);
+        const response = await fetchWithTimeout(uploadUrlResponse.uploadUrl, { method: "PUT", headers, body: payload }, { timeoutMs, signal, fetchImpl: doFetch });
+        if (!response.ok) {
+            const detail = await response.text().catch(() => "");
+            const snippet = detail.replace(/\s+/g, " ").trim().slice(0, 300);
+            throw new GeneratedImageUploadError(`Image upload to storage failed: HTTP ${response.status}${snippet ? ` (${snippet})` : ""}`, { step: "put", status: response.status });
+        }
+    }
+    catch (error) {
+        throw networkError("put", error);
+    }
+    // ── 3. confirm so the backend can serve the image ────────────────────────
+    try {
+        const response = await fetchWithTimeout(joinUrl(base, `/generated-images/${encodeURIComponent(uploadUrlResponse.imageId)}/confirm`), { method: "POST", headers: { ...authHeaders } }, { timeoutMs, signal, fetchImpl: doFetch });
+        const json = await readJson(response);
+        if (!response.ok) {
+            const { message, type } = errorMessageFrom(json, response.status);
+            throw new GeneratedImageUploadError(`Could not confirm uploaded image: ${message}`, {
+                step: "confirm",
+                status: response.status,
+                type,
+            });
+        }
+        const payload = isRecord(json) ? json : {};
+        const confirmedSize = Number(payload.size);
+        return {
+            imageId: typeof payload.id === "string" && payload.id ? payload.id : uploadUrlResponse.imageId,
+            url: typeof payload.url === "string" && payload.url ? payload.url : uploadUrlResponse.url,
+            size: Number.isFinite(confirmedSize) && confirmedSize > 0 ? confirmedSize : bytes.byteLength,
+        };
+    }
+    catch (error) {
+        throw networkError("confirm", error);
+    }
+}

package/dist/backend/machine-routing.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Backend routing for CLI-side image hosting.
+ *
+ * `uploadImage()` (see `./generated-images.ts`) needs the backend base url
+ * and the machine JWT. Those are exactly the credentials `agent-bridge.ts`
+ * receives for text models, so anything in the CLI that wants to host an
+ * image (generated images, tool screenshots, ...) resolves them the same way.
+ *
+ * Returns `null` when the CLI is not logged in / the JWT expired — callers
+ * then keep the image local (inline base64 / file on disk) instead of
+ * failing the turn.
+ *
+ * @module @spectral/backend/machine-routing
+ */
+export interface BackendRouting {
+    backendUrl: string;
+    machineJwt: string;
+}
+/**
+ * Resolve `backendUrl` + `machineJwt`, mirroring how `agent-bridge.ts` obtains
+ * them (`serve.ts` → `registration.record`). `SPECTRAL_BACKEND_URL` wins over
+ * the configured api url so dev/staging overrides keep working.
+ */
+export declare function resolveBackendRouting(): Promise<BackendRouting | null>;
+//# sourceMappingURL=machine-routing.d.ts.map

package/dist/backend/machine-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-routing.d.ts","sourceRoot":"","sources":["../../src/backend/machine-routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,WAAW,cAAc;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAY5E"}

package/dist/backend/machine-routing.js

@@ -0,0 +1,35 @@
+/**
+ * Backend routing for CLI-side image hosting.
+ *
+ * `uploadImage()` (see `./generated-images.ts`) needs the backend base url
+ * and the machine JWT. Those are exactly the credentials `agent-bridge.ts`
+ * receives for text models, so anything in the CLI that wants to host an
+ * image (generated images, tool screenshots, ...) resolves them the same way.
+ *
+ * Returns `null` when the CLI is not logged in / the JWT expired — callers
+ * then keep the image local (inline base64 / file on disk) instead of
+ * failing the turn.
+ *
+ * @module @spectral/backend/machine-routing
+ */
+import { getApiUrl, readConfig } from "../config.js";
+import { loadMachine } from "../relay/machine-store.js";
+import { isJwtExpired } from "../relay/registration.js";
+/**
+ * Resolve `backendUrl` + `machineJwt`, mirroring how `agent-bridge.ts` obtains
+ * them (`serve.ts` → `registration.record`). `SPECTRAL_BACKEND_URL` wins over
+ * the configured api url so dev/staging overrides keep working.
+ */
+export async function resolveBackendRouting() {
+    const cfg = await readConfig();
+    if (!cfg)
+        return null;
+    const machine = await loadMachine();
+    if (machine?.machineJwt && !isJwtExpired(machine.machineJwt)) {
+        const backendUrl = process.env.SPECTRAL_BACKEND_URL ||
+            getApiUrl(cfg.apiUrl).replace(/\/mcp\/?$/, "");
+        return { backendUrl, machineJwt: machine.machineJwt };
+    }
+    // No usable machine JWT — let the caller fall back to the local path.
+    return null;
+}

package/dist/commands/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAwBH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AAYlE,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,OAAO,EAAmB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAarE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAazD;AAED,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6B9D;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4CAA4C;IAC5C,KAAK,EAAE,WAAW,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAojBlF;AA+DD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAc5E"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/commands/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAwBH,OAAO,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AAYlE,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAGnE,OAAO,EAAmB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAarE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAazD;AAED,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CA6B9D;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4CAA4C;IAC5C,KAAK,EAAE,WAAW,CAAC;IACnB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CA4kBlF;AAmFD;;;GAGG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAc5E"}

package/dist/commands/serve.js

@@ -312,7 +312,16 @@ export async function runServe(opts = {}) {
                     publishMetaEvent: deferredPublishMetaEvent,
                     mcpState: getLiveMcpState() ?? undefined,
                     devProcessRegistry,
-                    refreshNativeExtensions: () => refreshNativeExtensionsInfo(cwd, r, registration.record.machineId),
+                    refreshNativeExtensions: async () => {
+                        await refreshNativeExtensionsInfo(cwd, r, registration.record.machineId);
+                        // Parity with the `config_patch` path: also hot-reload running
+                        // sessions so a manual refresh applies immediately.
+                        // Swallow: the manager isolates per-session failures, but the
+                        // aggregate promise must never become an unhandled rejection.
+                        void manager.reloadExtensions().catch((err) => {
+                            process.stderr.write(`[serve] extension reload failed: ${err instanceof Error ? err.message : String(err)}\n`);
+                        });
+                    },
                     refreshCloudAgents: (teamId) => refreshCloudAgentsImpl({ backendUrl, machineJwt: registration.record.machineJwt, teamId }),
                 }).then((response) => {
                     r.send(response);
@@ -360,11 +369,12 @@ export async function runServe(opts = {}) {
                 return;
             }
             if (frame.kind === "config_patch") {
-                handleConfigPatch(frame, {
+                void handleConfigPatch(frame, {
                     cwd,
                     agentDir: getAgentDir(),
                     relay: r,
                     machineId: registration.record.machineId,
+                    manager,
                 });
                 return;
             }
@@ -440,11 +450,18 @@ export async function runServe(opts = {}) {
             r.on("reconnect-scheduled", ({ delayMs, attempt }) => {
                 process.stdout.write(`Reconnect attempt ${attempt} in ${delayMs}ms\n`);
             });
-            r.on("error", (err) => {
-                const msg = err instanceof Error ? err.message : String(err);
-                process.stderr.write(`Relay error: ${msg}\n`);
-            });
         }
+        // The `error` listener must be registered regardless of `silent`:
+        // without it, a transport hiccup in silent mode would surface as an
+        // unhandled 'error' event and kill the whole serve process. (RelayClient
+        // itself also guards this now, but the explicit listener keeps the
+        // stderr output contract for non-silent runs.)
+        r.on("error", (err) => {
+            if (silent)
+                return;
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`Relay error: ${msg}\n`);
+        });
         // When the relay reports an auth failure (HTTP 401/403 on WS upgrade),
         // the machine JWT is invalid. Attempt re-registration with the original
         // credentials to obtain a fresh JWT, then restart the relay. If
@@ -683,6 +700,14 @@ async function handleConfigPatch(frame, deps) {
     settingsManager.setDisabledNativeExtensions([...disabledNative]);
     settingsManager.setEnabledNativeExtensions([...enabledNative]);
     await settingsManager.flush();
+    // Hot-reload already-running sessions so the toggle takes effect without
+    // restarting them. Fire-and-forget: busy sessions are skipped by the
+    // manager and pick the change up on their next session/bridge creation.
+    // Swallow: per-session failures are isolated by the manager; this only
+    // guards against an unhandled rejection from the aggregate promise.
+    void deps.manager?.reloadExtensions().catch((err) => {
+        process.stderr.write(`[serve] extension reload failed: ${err instanceof Error ? err.message : String(err)}\n`);
+    });
     // Broadcast updated state back to browsers
     await refreshNativeExtensionsInfo(deps.cwd, deps.relay, deps.machineId);
 }

package/dist/extensions/browser/browser-service.d.ts

@@ -36,6 +36,33 @@ export declare class BrowserService {
     private _recording;
     private closePromise;
     private launchLock;
+    /** Unique marker identifying the process tree of the current launch. */
+    private launchToken;
+    /**
+     * Token of the current *or previous* launch — only cleared by the next
+     * launch. Post-close fallbacks (`forceKillBrowserProcess()` / `browser_quit`)
+     * still need it to find the process tree after `close()` nulled launchToken.
+     * Every kill through this token is marker-verified first, so a recycled pid
+     * is never signalled.
+     */
+    private lastLaunchToken;
+    /**
+     * Root pid + full marker-matched tree, resolved once after a successful
+     * launch (single `ps` call) so exit/signal handlers can SIGKILL without
+     * running `execSync` from inside the handler.
+     */
+    private browserPid;
+    private browserPids;
+    /**
+     * Evidence for the synchronous teardown path: the pids that were matched by
+     * *our* marker at launch time, when they were matched and under which token.
+     * `killBrowserProcessSync()` may only signal pids listed here — a pid that we
+     * never marker-verified (or that no longer carries the marker) can belong to
+     * somebody else by now.
+     */
+    private verifiedBrowserPids;
+    private verifiedBrowserPidsAt;
+    private verifiedBrowserPidsToken;
     constructor(config?: Partial<BrowserConfig>);
     static getInstance(config?: Partial<BrowserConfig>): BrowserService;
     static resetInstance(): void;
@@ -97,6 +124,45 @@ export declare class BrowserService {
     getNetworkRequest(index: number): NetworkRequest | undefined;
     clearNetworkRequests(): void;
     close(): Promise<void>;
+    /**
+     * Last-resort teardown used by the `browser_quit` tool: SIGKILL the browser
+     * process without waiting for a graceful close. Safe to call at any time.
+     */
+    forceKillBrowserProcess(): void;
+    /**
+     * SIGKILL the browser process behind `browser` (defaults to the live one).
+     * `browser.close()` can hang, be rejected or be abandoned while the host
+     * process is shutting down, which leaves a visible Chromium window behind.
+     *
+     * `opts.scanProcessTable === false` skips `findBrowserPids()` (a `ps -eo`
+     * fork) — use it when nothing indicates a live browser. Only pids we already
+     * know about (or the one `browser.process()` exposes) are then signalled,
+     * each still marker-verified before the SIGKILL.
+     */
+    killBrowserProcess(browser?: Browser | null, opts?: {
+        scanProcessTable?: boolean;
+    }): void;
+    /**
+     * Exit/signal-handler path: SIGKILL the pids resolved right after launch.
+     * Deliberately execSync-free — spawning `ps` from inside an `exit` handler is
+     * unreliable (and can silently no-op).
+     *
+     * Never signals a pid that may not be ours: only pids whose marker was
+     * verified at launch time are eligible, and each candidate still has to pass
+     * a synchronous identity check — a `process.kill(pid, 0)` probe plus, where
+     * the platform allows it, a `/proc/<pid>/cmdline` read. Where no synchronous
+     * verification exists (no `/proc`), the launch-time evidence is trusted only
+     * while it is fresh (`PID_VERIFY_TTL_MS`): an orphaned browser window is
+     * preferable to SIGKILLing a recycled pid that now belongs to someone else.
+     */
+    killBrowserProcessSync(): void;
+    /**
+     * Resolve the browser's pids once, right after a successful launch, so the
+     * synchronous teardown path never has to inspect the process table again.
+     */
+    private resolveBrowserPids;
+    /** Find the pids of the browser processes we spawned (marker match). */
+    private findBrowserPids;
     startRecording(opts?: {
         outputDir?: string;
         filename?: string;
@@ -104,7 +170,15 @@ export declare class BrowserService {
         outputPath: string;
         startedAt: number;
     }>;
-    stopRecording(): Promise<{
+    /**
+     * @param opts.relaunch Re-open a fresh non-recording context afterwards
+     *   (default true, what `browser_record_stop` needs). Pass `false` when the
+     *   session is shutting down — otherwise a brand new Chromium window is
+     *   spawned only to be closed again immediately.
+     */
+    stopRecording(opts?: {
+        relaunch?: boolean;
+    }): Promise<{
         outputPath: string;
         durationSeconds: number;
     }>;

package/dist/extensions/browser/browser-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-service.d.ts","sourceRoot":"","sources":["../../../src/extensions/browser/browser-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAkB,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACtE,OAAO,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrE,MAAM,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CACrE;AAiBD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,aAAa,CAA8D;IACnF,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAKd;IACR,OAAO,CAAC,UAAU,CAA0F;IAC5G,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAA8B;gBACpC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAG3C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,cAAc;IAsBnE,MAAM,CAAC,aAAa,IAAI,IAAI;IAS5B;;;;;;OAMG;WACU,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IActC,MAAM,CAAC,WAAW,IAAI,OAAO;WAQhB,SAAS,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBzE,MAAM,CAAC,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAUtC,aAAa,IAAI,OAAO,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,cAAc,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC;KACZ,CAAC;IA8DF,UAAU,IAAI,OAAO;IAIrB,gBAAgB,IAAI,cAAc;IAIlC,aAAa,IAAI,IAAI;IAKf,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAS9D,YAAY,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAKvD,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAY1B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,QAAQ,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAO1D,SAAS,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IASvC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAS1D,OAAO,CAAC,wBAAwB;IAchC,iBAAiB,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvD,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYzE,kBAAkB,CAChB,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,EAC9C,GAAG,UAAQ,GACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IASzD,oBAAoB,IAAI,IAAI;IAG5B,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAwBrC,kBAAkB,IAAI,cAAc,EAAE;IAGtC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAG5D,oBAAoB,IAAI,IAAI;IAItB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCtB,cAAc,CAClB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IA6D/C,aAAa,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC/E,eAAe,IAAI;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IASxG,YAAY,IAAI,IAAI;IAIpB,SAAS,IAAI,aAAa;CAG3B"}
+{"version":3,"file":"browser-service.d.ts","sourceRoot":"","sources":["../../../src/extensions/browser/browser-service.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAkB,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA0MjD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACtE,OAAO,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IACrE,MAAM,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CACrE;AAiBD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAkGD,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,aAAa,CAA8D;IACnF,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAKd;IACR,OAAO,CAAC,UAAU,CAA0F;IAC5G,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,UAAU,CAA8B;IAChD,wEAAwE;IACxE,OAAO,CAAC,WAAW,CAAuB;IAC1C;;;;;;OAMG;IACH,OAAO,CAAC,eAAe,CAAuB;IAC9C;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,WAAW,CAAgB;IACnC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAAgB;IAC3C,OAAO,CAAC,qBAAqB,CAAK;IAClC,OAAO,CAAC,wBAAwB,CAAuB;gBAC3C,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAG3C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,cAAc;IAsBnE,MAAM,CAAC,aAAa,IAAI,IAAI;IAqB5B;;;;;;OAMG;WACU,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IActC,MAAM,CAAC,WAAW,IAAI,OAAO;WAQhB,SAAS,CAAC,SAAS,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBzE,MAAM,CAAC,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAUtC,aAAa,IAAI,OAAO,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,cAAc,CAAC;QACxB,IAAI,EAAE,IAAI,CAAC;KACZ,CAAC;IAgEF,UAAU,IAAI,OAAO;IAIrB,gBAAgB,IAAI,cAAc;IAIlC,aAAa,IAAI,IAAI;IAKf,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAS9D,YAAY,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAKvD,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IA6C1B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,QAAQ,IAAI,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAO1D,SAAS,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IASvC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAS1D,OAAO,CAAC,wBAAwB;IAchC,iBAAiB,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAGvD,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYzE,kBAAkB,CAChB,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,EAC9C,GAAG,UAAQ,GACV,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IASzD,oBAAoB,IAAI,IAAI;IAG5B,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAwBrC,kBAAkB,IAAI,cAAc,EAAE;IAGtC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAG5D,oBAAoB,IAAI,IAAI;IAItB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6F5B;;;OAGG;IACH,uBAAuB,IAAI,IAAI;IAG/B;;;;;;;;;OASG;IACH,kBAAkB,CAChB,OAAO,GAAE,OAAO,GAAG,IAAmB,EACtC,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,IAAI;IA4BP;;;;;;;;;;;;OAYG;IACH,sBAAsB,IAAI,IAAI;IA2B9B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAqB1B,wEAAwE;IACxE,OAAO,CAAC,eAAe;IASjB,cAAc,CAClB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAiErD;;;;;OAKG;IACG,aAAa,CACjB,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GAChC,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAuC3D,eAAe,IAAI;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IASxG,YAAY,IAAI,IAAI;IAIpB,SAAS,IAAI,aAAa;CAG3B"}