@agent-native/core 0.44.0 → 0.44.3

package/dist/client/composer/pasted-text.d.ts

@@ -1,4 +1,29 @@
+/** The clipboard flavors we care about for a paste. */
+export interface ClipboardPaste {
+    /** `text/plain` flavor — used for size heuristics and as the default body. */
+    text: string;
+    /** `text/html` flavor when the source provided one. */
+    html?: string;
+}
+/** Read the relevant clipboard flavors from a paste/drop DataTransfer. */
+export declare function readClipboardPaste(data: {
+    getData(type: string): string;
+} | null | undefined): ClipboardPaste;
 export declare function shouldConvertPasteToAttachment(text: string): boolean;
+/**
+ * Whether a clipboard paste is large enough to become a `Pasted text`
+ * attachment chip. Mirrors `shouldConvertPasteToAttachment` but evaluates the
+ * representation we'd actually store, so an HTML-only paste (empty text/plain)
+ * still converts on the strength of its markup.
+ */
+export declare function shouldConvertClipboardToAttachment(paste: ClipboardPaste): boolean;
+/**
+ * Build the attachment File for a page-sized paste, preserving HTML markup when
+ * the pasted content is an HTML document so it travels the same rail as an
+ * uploaded .html file.
+ */
+export declare function createPastedAttachmentFile(paste: ClipboardPaste): File;
+/** Back-compat helper for callers that only have plain text. */
 export declare function createPastedTextFile(text: string): File;
 export declare function isPastedTextAttachmentName(name: string | undefined): boolean;
 export declare function unwrapAttachmentEnvelope(text: string): string;

package/dist/client/composer/pasted-text.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pasted-text.d.ts","sourceRoot":"","sources":["../../../src/client/composer/pasted-text.ts"],"names":[],"mappings":"AAQA,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWpE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAKvD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE5E;AAKD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C"}
+{"version":3,"file":"pasted-text.d.ts","sourceRoot":"","sources":["../../../src/client/composer/pasted-text.ts"],"names":[],"mappings":"AA4CA,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAChC,IAAI,EAAE;IAAE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACzD,cAAc,CAIhB;AAmCD,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWpE;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,cAAc,GACpB,OAAO,CAET;AAQD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAGtE;AAED,gEAAgE;AAChE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEvD;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE5E;AAKD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C"}

package/dist/client/composer/pasted-text.js

@@ -4,6 +4,67 @@
 const PASTED_TEXT_MIN_CHARS = 3200;
 const PASTED_TEXT_MIN_LINES = 24;
 const PASTED_TEXT_FILENAME_PREFIX = "pasted-text-";
+// A copied HTML document/source is recognizable from its markup: a closing tag
+// (`</div>`), a doctype, or a common structural/element tag. We key off the
+// *content* the user actually pasted, not the clipboard's `text/html` flavor —
+// editors (VS Code) and rich-text apps (Google Docs) populate `text/html` with
+// syntax-highlight spans or formatting wrappers even when the real content is
+// plain code/prose, so trusting `text/html` blindly would mangle those pastes.
+const HTML_SOURCE_SIGNAL = /<!doctype\s+html|<html[\s>]|<\/[a-z][a-z0-9-]*\s*>|<(?:body|head|div|span|section|main|header|footer|nav|article|aside|ul|ol|li|table|thead|tbody|tr|td|th|h[1-6]|p|a|img|button|input|textarea|select|form|label|script|style|link|meta|svg|canvas|template)\b/i;
+// A real HTML *document* announces itself with a doctype / html / head / body.
+// When one of these is present we keep the HTML classification even if an inline
+// <script> contains JS keywords — it's a genuine page.
+const HTML_DOCUMENT_SIGNAL = /<!doctype\s+html|<html[\s>]|<head[\s>]|<body[\s>]/i;
+// JSX/TSX source contains the same `</div>`/`<span>` tags as an HTML document,
+// so the HTML tag signal alone misfiles a pasted React/TS component (even a bare
+// function component) as an `.html` artifact — the agent then mishandles it as a
+// hostable document instead of source. These markers appear in JS/TS/JSX source
+// but not in a plain HTML *fragment*: `className=` (JSX uses it; HTML uses
+// `class=`), ES module import/export, arrow functions, TS type/React annotations,
+// React hooks, and the basic JS declaration/return keywords that make up a
+// component body.
+const CODE_SOURCE_SIGNAL = /\bclassName=|\bimport\b|\bexport\b|=>|:\s*React\.|\buse[A-Z]\w*\(|\b(?:function|const|let|var|return|class|interface|type|enum)\b/;
+function looksLikeHtml(value) {
+    if (!value || !HTML_SOURCE_SIGNAL.test(value))
+        return false;
+    // A self-announcing HTML document stays HTML even if it embeds a <script>.
+    if (HTML_DOCUMENT_SIGNAL.test(value))
+        return true;
+    // Otherwise it's a bare fragment — if it carries JS/TS/JSX code signals,
+    // treat it as source code, not an HTML attachment.
+    if (CODE_SOURCE_SIGNAL.test(value))
+        return false;
+    return true;
+}
+/** Read the relevant clipboard flavors from a paste/drop DataTransfer. */
+export function readClipboardPaste(data) {
+    const text = data?.getData("text/plain") ?? "";
+    const html = data?.getData("text/html") ?? "";
+    return { text, html: html.trim() ? html : undefined };
+}
+// Decide what to actually store for a paste. Preserving HTML markup means a
+// pasted HTML document behaves exactly like uploading that .html file: the agent
+// recognizes it as a hostable artifact and reads it verbatim via
+// `contentFromAttachment` instead of retyping it inline (which cuts off
+// mid-stream on large files and triggers a continuation loop / "spin").
+function selectPasteBody(paste) {
+    const plain = paste.text ?? "";
+    const html = paste.html ?? "";
+    // 1) The pasted text is itself HTML source (copied from an editor, a file, or
+    //    view-source). The plain text *is* the markup, so keep it as .html.
+    if (plain.trim() && looksLikeHtml(plain)) {
+        return { body: plain, ext: "html", type: "text/html" };
+    }
+    // 2) No usable plain text, but a real HTML flavor exists (some apps only
+    //    expose text/html). Fall back to the markup so nothing is dropped.
+    if (!plain.trim() && looksLikeHtml(html)) {
+        return { body: html, ext: "html", type: "text/html" };
+    }
+    // 3) Default: keep the clean plain text. Avoids the syntax-highlight /
+    //    rich-text noise that lives in text/html when the plain text is already
+    //    the real content (code from an editor, prose from a doc).
+    return { body: plain, ext: "txt", type: "text/plain" };
+}
 export function shouldConvertPasteToAttachment(text) {
     if (!text)
         return false;
@@ -19,11 +80,32 @@ export function shouldConvertPasteToAttachment(text) {
     }
     return false;
 }
-export function createPastedTextFile(text) {
-    const name = `${PASTED_TEXT_FILENAME_PREFIX}${Date.now()}-${Math.random()
+/**
+ * Whether a clipboard paste is large enough to become a `Pasted text`
+ * attachment chip. Mirrors `shouldConvertPasteToAttachment` but evaluates the
+ * representation we'd actually store, so an HTML-only paste (empty text/plain)
+ * still converts on the strength of its markup.
+ */
+export function shouldConvertClipboardToAttachment(paste) {
+    return shouldConvertPasteToAttachment(selectPasteBody(paste).body);
+}
+function pastedAttachmentName(ext) {
+    return `${PASTED_TEXT_FILENAME_PREFIX}${Date.now()}-${Math.random()
         .toString(36)
-        .slice(2, 8)}.txt`;
-    return new File([text], name, { type: "text/plain" });
+        .slice(2, 8)}.${ext}`;
+}
+/**
+ * Build the attachment File for a page-sized paste, preserving HTML markup when
+ * the pasted content is an HTML document so it travels the same rail as an
+ * uploaded .html file.
+ */
+export function createPastedAttachmentFile(paste) {
+    const { body, ext, type } = selectPasteBody(paste);
+    return new File([body], pastedAttachmentName(ext), { type });
+}
+/** Back-compat helper for callers that only have plain text. */
+export function createPastedTextFile(text) {
+    return createPastedAttachmentFile({ text });
 }
 export function isPastedTextAttachmentName(name) {
     return !!name && name.startsWith(PASTED_TEXT_FILENAME_PREFIX);

package/dist/client/composer/pasted-text.js.map

@@ -1 +1 @@
-{"version":3,"file":"pasted-text.js","sourceRoot":"","sources":["../../../src/client/composer/pasted-text.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAEnD,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,IAAI,qBAAqB;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,GAAG,2BAA2B,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;SACtE,QAAQ,CAAC,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAwB;IACjE,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,+EAA+E;AAC/E,2BAA2B;AAC3B,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["// Page-sized pastes turn into a `Pasted text` attachment chip instead of being\n// dumped into the editor. Short paragraphs and everyday lists should stay\n// inline so the composer still feels like a normal text field.\nconst PASTED_TEXT_MIN_CHARS = 3200;\nconst PASTED_TEXT_MIN_LINES = 24;\n\nconst PASTED_TEXT_FILENAME_PREFIX = \"pasted-text-\";\n\nexport function shouldConvertPasteToAttachment(text: string): boolean {\n  if (!text) return false;\n  if (text.length >= PASTED_TEXT_MIN_CHARS) return true;\n  let lines = 1;\n  for (let i = 0; i < text.length; i++) {\n    if (text.charCodeAt(i) === 10) {\n      lines++;\n      if (lines >= PASTED_TEXT_MIN_LINES) return true;\n    }\n  }\n  return false;\n}\n\nexport function createPastedTextFile(text: string): File {\n  const name = `${PASTED_TEXT_FILENAME_PREFIX}${Date.now()}-${Math.random()\n    .toString(36)\n    .slice(2, 8)}.txt`;\n  return new File([text], name, { type: \"text/plain\" });\n}\n\nexport function isPastedTextAttachmentName(name: string | undefined): boolean {\n  return !!name && name.startsWith(PASTED_TEXT_FILENAME_PREFIX);\n}\n\n// Strips the `<attachment name=...>\\n` / `\\n</attachment>` envelope that\n// SimpleTextAttachmentAdapter wraps the file body in when sending. Returns the\n// raw body for previewing.\nexport function unwrapAttachmentEnvelope(text: string): string {\n  const match = text.match(/^<attachment\\b[^>]*>\\n([\\s\\S]*)\\n<\\/attachment>$/);\n  return match ? match[1] : text;\n}\n\nexport function countLines(text: string): number {\n  if (!text) return 0;\n  let lines = 1;\n  for (let i = 0; i < text.length; i++) {\n    if (text.charCodeAt(i) === 10) lines++;\n  }\n  return lines;\n}\n"]}
+{"version":3,"file":"pasted-text.js","sourceRoot":"","sources":["../../../src/client/composer/pasted-text.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0EAA0E;AAC1E,+DAA+D;AAC/D,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAEnD,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,kBAAkB,GACtB,kQAAkQ,CAAC;AAErQ,+EAA+E;AAC/E,iFAAiF;AACjF,uDAAuD;AACvD,MAAM,oBAAoB,GACxB,oDAAoD,CAAC;AAEvD,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,2EAA2E;AAC3E,kFAAkF;AAClF,2EAA2E;AAC3E,kBAAkB;AAClB,MAAM,kBAAkB,GACtB,mIAAmI,CAAC;AAEtI,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,2EAA2E;IAC3E,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,yEAAyE;IACzE,mDAAmD;IACnD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAChC,IAA0D;IAE1D,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACxD,CAAC;AAQD,4EAA4E;AAC5E,iFAAiF;AACjF,iEAAiE;AACjE,wEAAwE;AACxE,wEAAwE;AACxE,SAAS,eAAe,CAAC,KAAqB;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAE9B,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxD,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,IAAI,qBAAqB;gBAAE,OAAO,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,KAAqB;IAErB,OAAO,8BAA8B,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAmB;IAC/C,OAAO,GAAG,2BAA2B,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE;SAChE,QAAQ,CAAC,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAqB;IAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,0BAA0B,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAwB;IACjE,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,+EAA+E;AAC/E,2BAA2B;AAC3B,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["// Page-sized pastes turn into a `Pasted text` attachment chip instead of being\n// dumped into the editor. Short paragraphs and everyday lists should stay\n// inline so the composer still feels like a normal text field.\nconst PASTED_TEXT_MIN_CHARS = 3200;\nconst PASTED_TEXT_MIN_LINES = 24;\n\nconst PASTED_TEXT_FILENAME_PREFIX = \"pasted-text-\";\n\n// A copied HTML document/source is recognizable from its markup: a closing tag\n// (`</div>`), a doctype, or a common structural/element tag. We key off the\n// *content* the user actually pasted, not the clipboard's `text/html` flavor —\n// editors (VS Code) and rich-text apps (Google Docs) populate `text/html` with\n// syntax-highlight spans or formatting wrappers even when the real content is\n// plain code/prose, so trusting `text/html` blindly would mangle those pastes.\nconst HTML_SOURCE_SIGNAL =\n  /<!doctype\\s+html|<html[\\s>]|<\\/[a-z][a-z0-9-]*\\s*>|<(?:body|head|div|span|section|main|header|footer|nav|article|aside|ul|ol|li|table|thead|tbody|tr|td|th|h[1-6]|p|a|img|button|input|textarea|select|form|label|script|style|link|meta|svg|canvas|template)\\b/i;\n\n// A real HTML *document* announces itself with a doctype / html / head / body.\n// When one of these is present we keep the HTML classification even if an inline\n// <script> contains JS keywords — it's a genuine page.\nconst HTML_DOCUMENT_SIGNAL =\n  /<!doctype\\s+html|<html[\\s>]|<head[\\s>]|<body[\\s>]/i;\n\n// JSX/TSX source contains the same `</div>`/`<span>` tags as an HTML document,\n// so the HTML tag signal alone misfiles a pasted React/TS component (even a bare\n// function component) as an `.html` artifact — the agent then mishandles it as a\n// hostable document instead of source. These markers appear in JS/TS/JSX source\n// but not in a plain HTML *fragment*: `className=` (JSX uses it; HTML uses\n// `class=`), ES module import/export, arrow functions, TS type/React annotations,\n// React hooks, and the basic JS declaration/return keywords that make up a\n// component body.\nconst CODE_SOURCE_SIGNAL =\n  /\\bclassName=|\\bimport\\b|\\bexport\\b|=>|:\\s*React\\.|\\buse[A-Z]\\w*\\(|\\b(?:function|const|let|var|return|class|interface|type|enum)\\b/;\n\nfunction looksLikeHtml(value: string): boolean {\n  if (!value || !HTML_SOURCE_SIGNAL.test(value)) return false;\n  // A self-announcing HTML document stays HTML even if it embeds a <script>.\n  if (HTML_DOCUMENT_SIGNAL.test(value)) return true;\n  // Otherwise it's a bare fragment — if it carries JS/TS/JSX code signals,\n  // treat it as source code, not an HTML attachment.\n  if (CODE_SOURCE_SIGNAL.test(value)) return false;\n  return true;\n}\n\n/** The clipboard flavors we care about for a paste. */\nexport interface ClipboardPaste {\n  /** `text/plain` flavor — used for size heuristics and as the default body. */\n  text: string;\n  /** `text/html` flavor when the source provided one. */\n  html?: string;\n}\n\n/** Read the relevant clipboard flavors from a paste/drop DataTransfer. */\nexport function readClipboardPaste(\n  data: { getData(type: string): string } | null | undefined,\n): ClipboardPaste {\n  const text = data?.getData(\"text/plain\") ?? \"\";\n  const html = data?.getData(\"text/html\") ?? \"\";\n  return { text, html: html.trim() ? html : undefined };\n}\n\ninterface SelectedPasteBody {\n  body: string;\n  ext: \"html\" | \"txt\";\n  type: \"text/html\" | \"text/plain\";\n}\n\n// Decide what to actually store for a paste. Preserving HTML markup means a\n// pasted HTML document behaves exactly like uploading that .html file: the agent\n// recognizes it as a hostable artifact and reads it verbatim via\n// `contentFromAttachment` instead of retyping it inline (which cuts off\n// mid-stream on large files and triggers a continuation loop / \"spin\").\nfunction selectPasteBody(paste: ClipboardPaste): SelectedPasteBody {\n  const plain = paste.text ?? \"\";\n  const html = paste.html ?? \"\";\n\n  // 1) The pasted text is itself HTML source (copied from an editor, a file, or\n  //    view-source). The plain text *is* the markup, so keep it as .html.\n  if (plain.trim() && looksLikeHtml(plain)) {\n    return { body: plain, ext: \"html\", type: \"text/html\" };\n  }\n\n  // 2) No usable plain text, but a real HTML flavor exists (some apps only\n  //    expose text/html). Fall back to the markup so nothing is dropped.\n  if (!plain.trim() && looksLikeHtml(html)) {\n    return { body: html, ext: \"html\", type: \"text/html\" };\n  }\n\n  // 3) Default: keep the clean plain text. Avoids the syntax-highlight /\n  //    rich-text noise that lives in text/html when the plain text is already\n  //    the real content (code from an editor, prose from a doc).\n  return { body: plain, ext: \"txt\", type: \"text/plain\" };\n}\n\nexport function shouldConvertPasteToAttachment(text: string): boolean {\n  if (!text) return false;\n  if (text.length >= PASTED_TEXT_MIN_CHARS) return true;\n  let lines = 1;\n  for (let i = 0; i < text.length; i++) {\n    if (text.charCodeAt(i) === 10) {\n      lines++;\n      if (lines >= PASTED_TEXT_MIN_LINES) return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Whether a clipboard paste is large enough to become a `Pasted text`\n * attachment chip. Mirrors `shouldConvertPasteToAttachment` but evaluates the\n * representation we'd actually store, so an HTML-only paste (empty text/plain)\n * still converts on the strength of its markup.\n */\nexport function shouldConvertClipboardToAttachment(\n  paste: ClipboardPaste,\n): boolean {\n  return shouldConvertPasteToAttachment(selectPasteBody(paste).body);\n}\n\nfunction pastedAttachmentName(ext: \"html\" | \"txt\"): string {\n  return `${PASTED_TEXT_FILENAME_PREFIX}${Date.now()}-${Math.random()\n    .toString(36)\n    .slice(2, 8)}.${ext}`;\n}\n\n/**\n * Build the attachment File for a page-sized paste, preserving HTML markup when\n * the pasted content is an HTML document so it travels the same rail as an\n * uploaded .html file.\n */\nexport function createPastedAttachmentFile(paste: ClipboardPaste): File {\n  const { body, ext, type } = selectPasteBody(paste);\n  return new File([body], pastedAttachmentName(ext), { type });\n}\n\n/** Back-compat helper for callers that only have plain text. */\nexport function createPastedTextFile(text: string): File {\n  return createPastedAttachmentFile({ text });\n}\n\nexport function isPastedTextAttachmentName(name: string | undefined): boolean {\n  return !!name && name.startsWith(PASTED_TEXT_FILENAME_PREFIX);\n}\n\n// Strips the `<attachment name=...>\\n` / `\\n</attachment>` envelope that\n// SimpleTextAttachmentAdapter wraps the file body in when sending. Returns the\n// raw body for previewing.\nexport function unwrapAttachmentEnvelope(text: string): string {\n  const match = text.match(/^<attachment\\b[^>]*>\\n([\\s\\S]*)\\n<\\/attachment>$/);\n  return match ? match[1] : text;\n}\n\nexport function countLines(text: string): number {\n  if (!text) return 0;\n  let lines = 1;\n  for (let i = 0; i < text.length; i++) {\n    if (text.charCodeAt(i) === 10) lines++;\n  }\n  return lines;\n}\n"]}

package/dist/client/context-xray/ContextMeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ContextMeter.d.ts","sourceRoot":"","sources":["../../../src/client/context-xray/ContextMeter.tsx"],"names":[],"mappings":"AAuDA,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,OAAc,GACf,EAAE;IACD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,2CA8GA"}
+{"version":3,"file":"ContextMeter.d.ts","sourceRoot":"","sources":["../../../src/client/context-xray/ContextMeter.tsx"],"names":[],"mappings":"AA4DA,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,OAAc,GACf,EAAE;IACD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,2CA0HA"}

package/dist/client/context-xray/ContextMeter.js

@@ -1,11 +1,13 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useEffect, useRef, useState } from "react";
+import { lazy, Suspense, useEffect, useRef, useState } from "react";
 import { Popover, PopoverContent, PopoverTrigger, } from "../components/ui/popover.js";
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger, } from "../components/ui/tooltip.js";
 import { useActionMutation, useActionQuery } from "../use-action.js";
 import { cn } from "../utils.js";
-import { ContextXRayPanel } from "./ContextXRayPanel.js";
 import { CONTEXT_XRAY_MODEL_LIMIT, formatTokens } from "./format.js";
+const ContextXRayPanel = lazy(() => import("./ContextXRayPanel.js").then((m) => ({
+    default: m.ContextXRayPanel,
+})));
 function ContextDonut({ pct, advisory }) {
     const radius = 7.5;
     const circumference = 2 * Math.PI * radius;
@@ -65,6 +67,6 @@ export function ContextMeter({ threadId, enabled = true, }) {
         if (action === "restore")
             restore.mutate(params, options);
     };
-    return (_jsx(TooltipProvider, { delayDuration: 200, children: _jsxs(Popover, { open: open, onOpenChange: setOpen, children: [_jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsx(PopoverTrigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": `Context ${pct}%, ${formatTokens(manifest.totalTokens)}. Open Context X-Ray.`, className: cn("flex size-7 shrink-0 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", open && "bg-accent/60 text-foreground"), children: _jsx(ContextDonut, { pct: pct, advisory: !manifest.enforceable }) }) }) }), _jsxs(TooltipContent, { children: ["Context ", pct, "% \u00B7 ", formatTokens(manifest.totalTokens)] })] }), _jsx(PopoverContent, { align: "end", side: "top", sideOffset: 8, className: "w-[min(92vw,380px)] overflow-hidden border-border/70 p-0", children: _jsx(ContextXRayPanel, { manifest: manifest, optimistic: optimistic, onPin: (segmentId) => mutateStatus(segmentId, "pinned", "pin"), onEvict: (segmentId) => mutateStatus(segmentId, "evicted", "evict"), onRestore: (segmentId) => mutateStatus(segmentId, "active", "restore") }) })] }) }));
+    return (_jsx(TooltipProvider, { delayDuration: 200, children: _jsxs(Popover, { open: open, onOpenChange: setOpen, children: [_jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsx(PopoverTrigger, { asChild: true, children: _jsx("button", { type: "button", "aria-label": `Context ${pct}%, ${formatTokens(manifest.totalTokens)}. Open Context X-Ray.`, className: cn("flex size-7 shrink-0 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring", open && "bg-accent/60 text-foreground"), children: _jsx(ContextDonut, { pct: pct, advisory: !manifest.enforceable }) }) }) }), _jsxs(TooltipContent, { children: ["Context ", pct, "% \u00B7 ", formatTokens(manifest.totalTokens)] })] }), _jsx(PopoverContent, { align: "end", side: "top", sideOffset: 8, className: "w-[min(92vw,380px)] overflow-hidden border-border/70 p-0", children: open ? (_jsx(Suspense, { fallback: _jsx("div", { className: "flex h-52 items-center justify-center text-xs text-muted-foreground", children: "Loading context view\u2026" }), children: _jsx(ContextXRayPanel, { manifest: manifest, optimistic: optimistic, onPin: (segmentId) => mutateStatus(segmentId, "pinned", "pin"), onEvict: (segmentId) => mutateStatus(segmentId, "evicted", "evict"), onRestore: (segmentId) => mutateStatus(segmentId, "active", "restore") }) })) : null })] }) }));
 }
 //# sourceMappingURL=ContextMeter.js.map

package/dist/client/context-xray/ContextMeter.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContextMeter.js","sourceRoot":"","sources":["../../../src/client/context-xray/ContextMeter.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAKpD,OAAO,EACL,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,OAAO,EACP,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,SAAS,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAsC;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,aAAa,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC;IAEtE,OAAO,CACL,gBAAM,SAAS,EAAC,kDAAkD,aAChE,8BAAiB,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,mBAAmB,aACvE,iBACE,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,EACP,CAAC,EAAE,MAAM,EACT,SAAS,EAAC,cAAc,EACxB,IAAI,EAAC,MAAM,EACX,WAAW,EAAC,GAAG,GACf,EACF,iBACE,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,EACP,CAAC,EAAE,MAAM,EACT,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,EACjE,IAAI,EAAC,MAAM,EACX,aAAa,EAAC,OAAO,EACrB,WAAW,EAAC,GAAG,EACf,eAAe,EAAE,aAAa,EAC9B,gBAAgB,EAAE,UAAU,GAC5B,IACE,EACN,eAAM,SAAS,EAAC,4CAA4C,GAAG,IAC1D,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,OAAO,GAAG,IAAI,GAIf;IACC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAE1C,IAAI,GAAG,EAAE,CAAC,CAAC;IACb,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,cAAc,CAC1B,sBAAsB,EACtB,WAAW,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,EAClD;QACE,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,IAAI;KAChB,CAC4B,CAAC;IAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAErD,SAAS,CAAC,GAAG,EAAE;QACb,eAAe,CAAC,OAAO,GAAG,QAAQ,CAAC;QACnC,aAAa,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC3B,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,SAAS,IAAI,CAAC,CAAC,YAAY,IAAI,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,GAAG,EACH,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,GAAG,wBAAwB,CAAC,GAAG,GAAG,CAAC,CACpE;QACH,CAAC,CAAC,CAAC,CAAC;IAEN,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,CACnB,SAAiB,EACjB,MAA4B,EAC5B,MAAmC,EACnC,EAAE;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,eAAe,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;SACF,CAAC;QACF,IAAI,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,OAAO;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,IAAC,aAAa,EAAE,GAAG,YACjC,MAAC,OAAO,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,aACxC,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,OAAO,kBACrB,KAAC,cAAc,IAAC,OAAO,kBACrB,iBACE,IAAI,EAAC,QAAQ,gBACD,WAAW,GAAG,MAAM,YAAY,CAC1C,QAAQ,CAAC,WAAW,CACrB,uBAAuB,EACxB,SAAS,EAAE,EAAE,CACX,sNAAsN,EACtN,IAAI,IAAI,8BAA8B,CACvC,YAED,KAAC,YAAY,IAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,GAAI,GACpD,GACM,GACF,EACjB,MAAC,cAAc,2BACJ,GAAG,eAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IACrC,IACT,EACV,KAAC,cAAc,IACb,KAAK,EAAC,KAAK,EACX,IAAI,EAAC,KAAK,EACV,UAAU,EAAE,CAAC,EACb,SAAS,EAAC,0DAA0D,YAEpE,KAAC,gBAAgB,IACf,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,EAC9D,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EACnE,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CACvB,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAE9C,GACa,IACT,GACM,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import { useEffect, useRef, useState } from \"react\";\nimport type {\n  ContextManifest,\n  ContextSegmentStatus,\n} from \"../../shared/context-xray.js\";\nimport {\n  Popover,\n  PopoverContent,\n  PopoverTrigger,\n} from \"../components/ui/popover.js\";\nimport {\n  Tooltip,\n  TooltipContent,\n  TooltipProvider,\n  TooltipTrigger,\n} from \"../components/ui/tooltip.js\";\nimport { useActionMutation, useActionQuery } from \"../use-action.js\";\nimport { cn } from \"../utils.js\";\nimport { ContextXRayPanel } from \"./ContextXRayPanel.js\";\nimport { CONTEXT_XRAY_MODEL_LIMIT, formatTokens } from \"./format.js\";\n\nfunction ContextDonut({ pct, advisory }: { pct: number; advisory: boolean }) {\n  const radius = 7.5;\n  const circumference = 2 * Math.PI * radius;\n  const displayPct = Math.max(3, Math.min(100, pct));\n  const dashOffset = circumference - (displayPct / 100) * circumference;\n\n  return (\n    <span className=\"relative flex size-5 items-center justify-center\">\n      <svg aria-hidden=\"true\" viewBox=\"0 0 20 20\" className=\"-rotate-90 size-5\">\n        <circle\n          cx=\"10\"\n          cy=\"10\"\n          r={radius}\n          className=\"stroke-muted\"\n          fill=\"none\"\n          strokeWidth=\"3\"\n        />\n        <circle\n          cx=\"10\"\n          cy=\"10\"\n          r={radius}\n          className={cn(advisory ? \"stroke-amber-500\" : \"stroke-[#00B5FF]\")}\n          fill=\"none\"\n          strokeLinecap=\"round\"\n          strokeWidth=\"3\"\n          strokeDasharray={circumference}\n          strokeDashoffset={dashOffset}\n        />\n      </svg>\n      <span className=\"absolute size-2 rounded-full bg-background\" />\n    </span>\n  );\n}\n\nexport function ContextMeter({\n  threadId,\n  enabled = true,\n}: {\n  threadId?: string | null;\n  enabled?: boolean;\n}) {\n  const [open, setOpen] = useState(false);\n  const [optimistic, setOptimistic] = useState<\n    Map<string, ContextSegmentStatus>\n  >(new Map());\n  const currentThreadId = useRef(threadId);\n  const shouldQuery = Boolean(threadId && enabled);\n  const query = useActionQuery(\n    \"context-manifest-get\",\n    shouldQuery && threadId ? { threadId } : undefined,\n    {\n      enabled: shouldQuery,\n      staleTime: 1000,\n    },\n  ) as { data?: ContextManifest };\n  const pin = useActionMutation(\"context-pin\");\n  const evict = useActionMutation(\"context-evict\");\n  const restore = useActionMutation(\"context-restore\");\n\n  useEffect(() => {\n    currentThreadId.current = threadId;\n    setOptimistic(new Map());\n  }, [threadId]);\n\n  useEffect(() => {\n    if (!threadId || !enabled || typeof window === \"undefined\") return;\n    const params = new URLSearchParams(window.location.search);\n    const wantsXray = params.get(\"contextXray\") === \"1\";\n    const targetThread = params.get(\"threadId\");\n    if (wantsXray && (!targetThread || targetThread === threadId)) {\n      setOpen(true);\n    }\n  }, [enabled, threadId]);\n\n  const manifest = query.data;\n  const segments = manifest?.segments ?? [];\n  const pct = manifest\n    ? Math.min(\n        100,\n        Math.round((manifest.totalTokens / CONTEXT_XRAY_MODEL_LIMIT) * 100),\n      )\n    : 0;\n\n  if (!shouldQuery || !threadId || !manifest || manifest.rawTokens <= 0) {\n    return null;\n  }\n\n  const mutateStatus = (\n    segmentId: string,\n    status: ContextSegmentStatus,\n    action: \"pin\" | \"evict\" | \"restore\",\n  ) => {\n    const previous = new Map(optimistic);\n    setOptimistic((prev) => new Map(prev).set(segmentId, status));\n    const params = { threadId, segmentId };\n    const options = {\n      onError: () => {\n        if (currentThreadId.current === threadId) {\n          setOptimistic(previous);\n        }\n      },\n    };\n    if (action === \"pin\") pin.mutate(params, options);\n    if (action === \"evict\") evict.mutate(params, options);\n    if (action === \"restore\") restore.mutate(params, options);\n  };\n\n  return (\n    <TooltipProvider delayDuration={200}>\n      <Popover open={open} onOpenChange={setOpen}>\n        <Tooltip>\n          <TooltipTrigger asChild>\n            <PopoverTrigger asChild>\n              <button\n                type=\"button\"\n                aria-label={`Context ${pct}%, ${formatTokens(\n                  manifest.totalTokens,\n                )}. Open Context X-Ray.`}\n                className={cn(\n                  \"flex size-7 shrink-0 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\",\n                  open && \"bg-accent/60 text-foreground\",\n                )}\n              >\n                <ContextDonut pct={pct} advisory={!manifest.enforceable} />\n              </button>\n            </PopoverTrigger>\n          </TooltipTrigger>\n          <TooltipContent>\n            Context {pct}% · {formatTokens(manifest.totalTokens)}\n          </TooltipContent>\n        </Tooltip>\n        <PopoverContent\n          align=\"end\"\n          side=\"top\"\n          sideOffset={8}\n          className=\"w-[min(92vw,380px)] overflow-hidden border-border/70 p-0\"\n        >\n          <ContextXRayPanel\n            manifest={manifest}\n            optimistic={optimistic}\n            onPin={(segmentId) => mutateStatus(segmentId, \"pinned\", \"pin\")}\n            onEvict={(segmentId) => mutateStatus(segmentId, \"evicted\", \"evict\")}\n            onRestore={(segmentId) =>\n              mutateStatus(segmentId, \"active\", \"restore\")\n            }\n          />\n        </PopoverContent>\n      </Popover>\n    </TooltipProvider>\n  );\n}\n"]}
+{"version":3,"file":"ContextMeter.js","sourceRoot":"","sources":["../../../src/client/context-xray/ContextMeter.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAKpE,OAAO,EACL,OAAO,EACP,cAAc,EACd,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,OAAO,EACP,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CACjC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,gBAAgB;CAC5B,CAAC,CAAC,CACJ,CAAC;AAEF,SAAS,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAsC;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,aAAa,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC;IAEtE,OAAO,CACL,gBAAM,SAAS,EAAC,kDAAkD,aAChE,8BAAiB,MAAM,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,mBAAmB,aACvE,iBACE,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,EACP,CAAC,EAAE,MAAM,EACT,SAAS,EAAC,cAAc,EACxB,IAAI,EAAC,MAAM,EACX,WAAW,EAAC,GAAG,GACf,EACF,iBACE,EAAE,EAAC,IAAI,EACP,EAAE,EAAC,IAAI,EACP,CAAC,EAAE,MAAM,EACT,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,EACjE,IAAI,EAAC,MAAM,EACX,aAAa,EAAC,OAAO,EACrB,WAAW,EAAC,GAAG,EACf,eAAe,EAAE,aAAa,EAC9B,gBAAgB,EAAE,UAAU,GAC5B,IACE,EACN,eAAM,SAAS,EAAC,4CAA4C,GAAG,IAC1D,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,OAAO,GAAG,IAAI,GAIf;IACC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAE1C,IAAI,GAAG,EAAE,CAAC,CAAC;IACb,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,cAAc,CAC1B,sBAAsB,EACtB,WAAW,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,EAClD;QACE,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,IAAI;KAChB,CAC4B,CAAC;IAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAErD,SAAS,CAAC,GAAG,EAAE;QACb,eAAe,CAAC,OAAO,GAAG,QAAQ,CAAC;QACnC,aAAa,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC3B,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,SAAS,IAAI,CAAC,CAAC,YAAY,IAAI,YAAY,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ;QAClB,CAAC,CAAC,IAAI,CAAC,GAAG,CACN,GAAG,EACH,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,GAAG,wBAAwB,CAAC,GAAG,GAAG,CAAC,CACpE;QACH,CAAC,CAAC,CAAC,CAAC;IAEN,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,CACnB,SAAiB,EACjB,MAA4B,EAC5B,MAAmC,EACnC,EAAE;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,eAAe,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACzC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;SACF,CAAC;QACF,IAAI,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,OAAO;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,eAAe,IAAC,aAAa,EAAE,GAAG,YACjC,MAAC,OAAO,IAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,aACxC,MAAC,OAAO,eACN,KAAC,cAAc,IAAC,OAAO,kBACrB,KAAC,cAAc,IAAC,OAAO,kBACrB,iBACE,IAAI,EAAC,QAAQ,gBACD,WAAW,GAAG,MAAM,YAAY,CAC1C,QAAQ,CAAC,WAAW,CACrB,uBAAuB,EACxB,SAAS,EAAE,EAAE,CACX,sNAAsN,EACtN,IAAI,IAAI,8BAA8B,CACvC,YAED,KAAC,YAAY,IAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,GAAI,GACpD,GACM,GACF,EACjB,MAAC,cAAc,2BACJ,GAAG,eAAM,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IACrC,IACT,EACV,KAAC,cAAc,IACb,KAAK,EAAC,KAAK,EACX,IAAI,EAAC,KAAK,EACV,UAAU,EAAE,CAAC,EACb,SAAS,EAAC,0DAA0D,YAEnE,IAAI,CAAC,CAAC,CAAC,CACN,KAAC,QAAQ,IACP,QAAQ,EACN,cAAK,SAAS,EAAC,qEAAqE,2CAE9E,YAGR,KAAC,gBAAgB,IACf,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,EAC9D,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CACrB,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAE7C,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CACvB,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,GAE9C,GACO,CACZ,CAAC,CAAC,CAAC,IAAI,GACO,IACT,GACM,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import { lazy, Suspense, useEffect, useRef, useState } from \"react\";\nimport type {\n  ContextManifest,\n  ContextSegmentStatus,\n} from \"../../shared/context-xray.js\";\nimport {\n  Popover,\n  PopoverContent,\n  PopoverTrigger,\n} from \"../components/ui/popover.js\";\nimport {\n  Tooltip,\n  TooltipContent,\n  TooltipProvider,\n  TooltipTrigger,\n} from \"../components/ui/tooltip.js\";\nimport { useActionMutation, useActionQuery } from \"../use-action.js\";\nimport { cn } from \"../utils.js\";\nimport { CONTEXT_XRAY_MODEL_LIMIT, formatTokens } from \"./format.js\";\n\nconst ContextXRayPanel = lazy(() =>\n  import(\"./ContextXRayPanel.js\").then((m) => ({\n    default: m.ContextXRayPanel,\n  })),\n);\n\nfunction ContextDonut({ pct, advisory }: { pct: number; advisory: boolean }) {\n  const radius = 7.5;\n  const circumference = 2 * Math.PI * radius;\n  const displayPct = Math.max(3, Math.min(100, pct));\n  const dashOffset = circumference - (displayPct / 100) * circumference;\n\n  return (\n    <span className=\"relative flex size-5 items-center justify-center\">\n      <svg aria-hidden=\"true\" viewBox=\"0 0 20 20\" className=\"-rotate-90 size-5\">\n        <circle\n          cx=\"10\"\n          cy=\"10\"\n          r={radius}\n          className=\"stroke-muted\"\n          fill=\"none\"\n          strokeWidth=\"3\"\n        />\n        <circle\n          cx=\"10\"\n          cy=\"10\"\n          r={radius}\n          className={cn(advisory ? \"stroke-amber-500\" : \"stroke-[#00B5FF]\")}\n          fill=\"none\"\n          strokeLinecap=\"round\"\n          strokeWidth=\"3\"\n          strokeDasharray={circumference}\n          strokeDashoffset={dashOffset}\n        />\n      </svg>\n      <span className=\"absolute size-2 rounded-full bg-background\" />\n    </span>\n  );\n}\n\nexport function ContextMeter({\n  threadId,\n  enabled = true,\n}: {\n  threadId?: string | null;\n  enabled?: boolean;\n}) {\n  const [open, setOpen] = useState(false);\n  const [optimistic, setOptimistic] = useState<\n    Map<string, ContextSegmentStatus>\n  >(new Map());\n  const currentThreadId = useRef(threadId);\n  const shouldQuery = Boolean(threadId && enabled);\n  const query = useActionQuery(\n    \"context-manifest-get\",\n    shouldQuery && threadId ? { threadId } : undefined,\n    {\n      enabled: shouldQuery,\n      staleTime: 1000,\n    },\n  ) as { data?: ContextManifest };\n  const pin = useActionMutation(\"context-pin\");\n  const evict = useActionMutation(\"context-evict\");\n  const restore = useActionMutation(\"context-restore\");\n\n  useEffect(() => {\n    currentThreadId.current = threadId;\n    setOptimistic(new Map());\n  }, [threadId]);\n\n  useEffect(() => {\n    if (!threadId || !enabled || typeof window === \"undefined\") return;\n    const params = new URLSearchParams(window.location.search);\n    const wantsXray = params.get(\"contextXray\") === \"1\";\n    const targetThread = params.get(\"threadId\");\n    if (wantsXray && (!targetThread || targetThread === threadId)) {\n      setOpen(true);\n    }\n  }, [enabled, threadId]);\n\n  const manifest = query.data;\n  const segments = manifest?.segments ?? [];\n  const pct = manifest\n    ? Math.min(\n        100,\n        Math.round((manifest.totalTokens / CONTEXT_XRAY_MODEL_LIMIT) * 100),\n      )\n    : 0;\n\n  if (!shouldQuery || !threadId || !manifest || manifest.rawTokens <= 0) {\n    return null;\n  }\n\n  const mutateStatus = (\n    segmentId: string,\n    status: ContextSegmentStatus,\n    action: \"pin\" | \"evict\" | \"restore\",\n  ) => {\n    const previous = new Map(optimistic);\n    setOptimistic((prev) => new Map(prev).set(segmentId, status));\n    const params = { threadId, segmentId };\n    const options = {\n      onError: () => {\n        if (currentThreadId.current === threadId) {\n          setOptimistic(previous);\n        }\n      },\n    };\n    if (action === \"pin\") pin.mutate(params, options);\n    if (action === \"evict\") evict.mutate(params, options);\n    if (action === \"restore\") restore.mutate(params, options);\n  };\n\n  return (\n    <TooltipProvider delayDuration={200}>\n      <Popover open={open} onOpenChange={setOpen}>\n        <Tooltip>\n          <TooltipTrigger asChild>\n            <PopoverTrigger asChild>\n              <button\n                type=\"button\"\n                aria-label={`Context ${pct}%, ${formatTokens(\n                  manifest.totalTokens,\n                )}. Open Context X-Ray.`}\n                className={cn(\n                  \"flex size-7 shrink-0 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent/50 hover:text-foreground focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring\",\n                  open && \"bg-accent/60 text-foreground\",\n                )}\n              >\n                <ContextDonut pct={pct} advisory={!manifest.enforceable} />\n              </button>\n            </PopoverTrigger>\n          </TooltipTrigger>\n          <TooltipContent>\n            Context {pct}% · {formatTokens(manifest.totalTokens)}\n          </TooltipContent>\n        </Tooltip>\n        <PopoverContent\n          align=\"end\"\n          side=\"top\"\n          sideOffset={8}\n          className=\"w-[min(92vw,380px)] overflow-hidden border-border/70 p-0\"\n        >\n          {open ? (\n            <Suspense\n              fallback={\n                <div className=\"flex h-52 items-center justify-center text-xs text-muted-foreground\">\n                  Loading context view…\n                </div>\n              }\n            >\n              <ContextXRayPanel\n                manifest={manifest}\n                optimistic={optimistic}\n                onPin={(segmentId) => mutateStatus(segmentId, \"pinned\", \"pin\")}\n                onEvict={(segmentId) =>\n                  mutateStatus(segmentId, \"evicted\", \"evict\")\n                }\n                onRestore={(segmentId) =>\n                  mutateStatus(segmentId, \"active\", \"restore\")\n                }\n              />\n            </Suspense>\n          ) : null}\n        </PopoverContent>\n      </Popover>\n    </TooltipProvider>\n  );\n}\n"]}

package/dist/db/migrations.d.ts

@@ -8,6 +8,16 @@ type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
  * regex with subtly different shapes.
  */
 export declare function isDuplicateColumnError(err: unknown): boolean;
+/**
+ * True when a migration statement failed because the connected DB ROLE lacks
+ * privilege — e.g. a permission-limited dev/replica role that doesn't own the
+ * table. Postgres raises SQLSTATE 42501 ("insufficient_privilege", routine
+ * aclcheck_error, message "must be owner of table …"). We treat these as
+ * NON-FATAL so a perms-limited database can't crash-loop the whole server: the
+ * migration is skipped (left unrecorded) and a properly-privileged role applies
+ * it later. Production, where the role owns its tables, never hits this path.
+ */
+export declare function isPermissionError(err: unknown): boolean;
 export interface RunMigrationsOptions {
     /**
      * Name of the migrations bookkeeping table. REQUIRED — there is intentionally

package/dist/db/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAOA,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AA4B9D;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAK5D;AAmDD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,YAAY,CAAC;CACnB;AAQD,wBAAgB,aAAa,CAC3B,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,EACjC,OAAO,EAAE,oBAAoB,GAC5B,cAAc,CAuLhB"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAOA,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AA4B9D;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAK5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CASvD;AAmDD,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,YAAY,CAAC;CACnB;AAQD,wBAAgB,aAAa,CAC3B,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC,EACjC,OAAO,EAAE,oBAAoB,GAC5B,cAAc,CAyMhB"}

package/dist/db/migrations.js

@@ -34,6 +34,24 @@ export function isDuplicateColumnError(err) {
     const msg = err?.message ?? "";
     return (/duplicate column name/i.test(msg) || /column .* already exists/i.test(msg));
 }
+/**
+ * True when a migration statement failed because the connected DB ROLE lacks
+ * privilege — e.g. a permission-limited dev/replica role that doesn't own the
+ * table. Postgres raises SQLSTATE 42501 ("insufficient_privilege", routine
+ * aclcheck_error, message "must be owner of table …"). We treat these as
+ * NON-FATAL so a perms-limited database can't crash-loop the whole server: the
+ * migration is skipped (left unrecorded) and a properly-privileged role applies
+ * it later. Production, where the role owns its tables, never hits this path.
+ */
+export function isPermissionError(err) {
+    const e = err;
+    if (e?.code === "42501")
+        return true;
+    const msg = e?.message ?? "";
+    return (/must be owner of/i.test(msg) ||
+        /permission denied/i.test(msg) ||
+        /insufficient privilege/i.test(msg));
+}
 /**
  * Split a multi-statement SQL blob into individual statements.
  *
@@ -221,6 +239,20 @@ export function runMigrations(migrations, options) {
                     console.log(`[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? "" : "s"})`);
                 }
                 catch (err) {
+                    if (pg && isPermissionError(err)) {
+                        // The connected role lacks privilege for this migration (e.g. a
+                        // permission-limited dev/replica role that doesn't own the table).
+                        // Don't crash-loop the whole server over it — warn and STOP here.
+                        // We must NOT continue to later migrations: pending work is computed
+                        // as `version > MAX(recorded version)`, so applying a later migration
+                        // would advance MAX past this unrecorded one and orphan it forever.
+                        // Stopping leaves MAX at the last recorded version, so a properly-
+                        // privileged role resumes from this exact migration, in order.
+                        console.warn(`[db] Migration v${m.version} skipped — insufficient privilege: ${err.message}. ` +
+                            `Apply it with a DB role that owns the table. ` +
+                            `Halting further migrations so this one isn't orphaned.`, "\nStatement:", currentStmt);
+                        break;
+                    }
                     console.error(`[db] Migration v${m.version} FAILED:`, err.message, "\nStatement:", currentStmt);
                     throw err;
                 }

package/dist/db/migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAIrB;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,4DAA4D;4BAC5D,4DAA4D;4BAC5D,6DAA6D;4BAC7D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;6BACnB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YAExB,uEAAuE;YACvE,+EAA+E;YAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;YAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;YACF,MAAM,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;YAE5C,MAAM,SAAS,GAAG,EAAE;gBAClB,CAAC,CAAC,eAAe,KAAK,oCAAoC;gBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;YAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;YAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;oBAChB,mEAAmE;oBACnE,wCAAwC;oBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,oCAAoC;gBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD,CAAC,CAAC,CAAC;gBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;wBACvD,WAAW,GAAG,IAAI,CAAC;wBACnB,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC3B,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gCACzD,wDAAwD;gCACxD,SAAS;4BACX,CAAC;4BACD,MAAM,GAAG,CAAC;wBACZ,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  isPostgres,\n  getDialect,\n  retrySqliteBusy,\n} from \"./client.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        for (const m of migrations.filter((m) => m.version > current)) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            if (raw == null) {\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n            } else {\n              // Atomic batch: all statements + version-row insert land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied version.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                d1\n                  .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                  .bind(m.version),\n              ]);\n            }\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const exec = getDbExec();\n      const pg = isPostgres();\n\n      // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n      // restarts when WAL files from the previous process haven't been released yet.\n      await retrySqliteBusy(\n        () =>\n          exec.execute(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          ),\n        { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n      );\n\n      const { rows } = await exec.execute(\n        `SELECT MAX(version) as v FROM ${table}`,\n      );\n      const current = (rows[0]?.v as number) ?? 0;\n\n      const insertSql = pg\n        ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n        : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n\n      const pending = migrations.filter((m) => m.version > current);\n      if (pending.length > 0) {\n        console.log(\n          `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n        );\n      }\n\n      for (const m of pending) {\n        const raw = resolveMigrationSql(m.sql, pg);\n        if (raw == null) {\n          // Dialect-gated migration with no SQL for this dialect; still mark\n          // as applied so we don't retry forever.\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          continue;\n        }\n        // Split BEFORE adapting so we can remember which original statements\n        // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n        // emulate the idempotent semantic by swallowing duplicate-column\n        // errors only for those statements.\n        const originalStatements = splitSqlStatements(raw);\n        const statements = originalStatements.map((orig) => ({\n          sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n          hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n        }));\n        let currentStmt = \"\";\n        try {\n          for (const { sql: stmt, hadIfNotExists } of statements) {\n            currentStmt = stmt;\n            try {\n              await exec.execute(stmt);\n            } catch (err) {\n              if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                // IF NOT EXISTS semantic: column already present, skip.\n                continue;\n              }\n              throw err;\n            }\n          }\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          console.log(\n            `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n          );\n        } catch (err) {\n          console.error(\n            `[db] Migration v${m.version} FAILED:`,\n            (err as Error).message,\n            \"\\nStatement:\",\n            currentStmt,\n          );\n          throw err;\n        }\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAIrB;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG;SACP,OAAO,CAAC,8BAA8B,EAAE,mBAAmB,CAAC;SAC5D,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,2BAA2B,GAAG,mCAAmC,CAAC;AAExE;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,MAAM,GAAG,GAAI,GAAyB,EAAE,OAAO,IAAI,EAAE,CAAC;IACtD,OAAO,CACL,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,GAAsD,CAAC;IACjE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IAC7B,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9B,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CACpC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC5C,sBAAsB;YACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,EAAE,CAAC;YACV,IAAI,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC7B,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,QAAQ,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,GAAG,GAAG,EAAE,CAAC;YACT,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,SAAS,mBAAmB,CAAC,GAAiB,EAAE,EAAW;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC3C,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAiC,EACjC,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAC7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,kFAAkF;YAClF,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,iEAAiE;YACjE,MAAM,EAAE,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,8BAA8B,KAAK,gCAAgC,CACpE;qBACA,GAAG,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC;qBACjD,KAAK,EAAkB,CAAC;gBAC3B,MAAM,OAAO,GAAI,QAAQ,EAAE,CAAY,IAAI,CAAC,CAAC;gBAE7C,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;oBAC9D,IAAI,CAAC;wBACH,0BAA0B;wBAC1B,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBAC9C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;4BAChB,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;4BACT,SAAS;wBACX,CAAC;wBACD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BACnD,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC;4BAC5B,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;yBACvD,CAAC,CAAC,CAAC;wBACJ,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;wBAChE,IAAI,cAAc,EAAE,CAAC;4BACnB,4DAA4D;4BAC5D,gDAAgD;4BAChD,6DAA6D;4BAC7D,0DAA0D;4BAC1D,oDAAoD;4BACpD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;gCACvD,IAAI,CAAC;oCACH,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gCAC/B,CAAC;gCAAC,OAAO,GAAG,EAAE,CAAC;oCACb,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC;wCAAE,SAAS;oCAC5D,MAAM,GAAG,CAAC;gCACZ,CAAC;4BACH,CAAC;4BACD,MAAM,EAAE;iCACL,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;iCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;iCACf,GAAG,EAAE,CAAC;wBACX,CAAC;6BAAM,CAAC;4BACN,4DAA4D;4BAC5D,4DAA4D;4BAC5D,6DAA6D;4BAC7D,MAAM,EAAE,CAAC,KAAK,CAAC;gCACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gCAC3C,EAAE;qCACC,OAAO,CAAC,yBAAyB,KAAK,aAAa,CAAC;qCACpD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;6BACnB,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;oBACJ,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;wBACF,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YAED,+CAA+C;YAC/C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YAExB,uEAAuE;YACvE,+EAA+E;YAC/E,MAAM,eAAe,CACnB,GAAG,EAAE,CACH,IAAI,CAAC,OAAO,CACV,8BAA8B,KAAK,gCAAgC,CACpE,EACH,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CACrD,CAAC;YAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,iCAAiC,KAAK,EAAE,CACzC,CAAC;YACF,MAAM,OAAO,GAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAY,IAAI,CAAC,CAAC;YAE5C,MAAM,SAAS,GAAG,EAAE;gBAClB,CAAC,CAAC,eAAe,KAAK,oCAAoC;gBAC1D,CAAC,CAAC,yBAAyB,KAAK,aAAa,CAAC;YAEhD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC;YAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CACT,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,GAAG,CACxF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;oBAChB,mEAAmE;oBACnE,wCAAwC;oBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,oCAAoC;gBACpC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnD,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC;oBAC7D,cAAc,EAAE,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;iBACvD,CAAC,CAAC,CAAC;gBACJ,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC;wBACvD,WAAW,GAAG,IAAI,CAAC;wBACnB,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC3B,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gCACzD,wDAAwD;gCACxD,SAAS;4BACX,CAAC;4BACD,MAAM,GAAG,CAAC;wBACZ,CAAC;oBACH,CAAC;oBACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CACT,2BAA2B,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC7G,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;wBACjC,gEAAgE;wBAChE,mEAAmE;wBACnE,kEAAkE;wBAClE,qEAAqE;wBACrE,sEAAsE;wBACtE,oEAAoE;wBACpE,mEAAmE;wBACnE,+DAA+D;wBAC/D,OAAO,CAAC,IAAI,CACV,mBAAmB,CAAC,CAAC,OAAO,sCAAuC,GAAa,CAAC,OAAO,IAAI;4BAC1F,+CAA+C;4BAC/C,wDAAwD,EAC1D,cAAc,EACd,WAAW,CACZ,CAAC;wBACF,MAAM;oBACR,CAAC;oBACD,OAAO,CAAC,KAAK,CACX,mBAAmB,CAAC,CAAC,OAAO,UAAU,EACrC,GAAa,CAAC,OAAO,EACtB,cAAc,EACd,WAAW,CACZ,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,YAAY,GAChB,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO;gBAClC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,wBAAwB;gBACnD,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;gBACjC,UAAU,IAAI,UAAU,CAAC;YAC3B,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import {\n  getDbExec,\n  isPostgres,\n  getDialect,\n  retrySqliteBusy,\n} from \"./client.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/**\n * Rewrite SQLite-specific SQL to Postgres-compatible equivalents.\n * Handles: datetime('now') → CURRENT_TIMESTAMP, AUTOINCREMENT → GENERATED, etc.\n */\nfunction adaptSqlForPostgres(sql: string): string {\n  return sql\n    .replace(/datetime\\s*\\(\\s*'now'\\s*\\)/gi, \"CURRENT_TIMESTAMP\")\n    .replace(/\\bAUTOINCREMENT\\b/gi, \"\")\n    .replace(/\\bINTEGER\\b/gi, \"BIGINT\");\n}\n\nconst IF_NOT_EXISTS_ADD_COLUMN_RE = /ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/i;\n\n/**\n * Strip Postgres-only syntax that SQLite doesn't support.\n * Handles: ALTER TABLE ... ADD COLUMN IF NOT EXISTS → ADD COLUMN\n *\n * Note: SQLite does not have a native equivalent, so the idempotent\n * semantic is emulated at the executor level by swallowing the\n * \"duplicate column name\" error for statements that originally carried\n * the clause. See `hadIfNotExists` tracking in the run loop.\n */\nfunction adaptSqlForSqlite(sql: string): string {\n  return sql.replace(/ADD\\s+COLUMN\\s+IF\\s+NOT\\s+EXISTS/gi, \"ADD COLUMN\");\n}\n\n/**\n * True when an error from `ALTER TABLE ... ADD COLUMN` indicates the\n * column already existed. Recognizes both SQLite (\"duplicate column\n * name\") and Postgres (\"column ... already exists\" — exact text varies\n * by error code 42701, but the substring is stable). Exported so other\n * idempotent column-upgrade loops in the codebase don't reinvent this\n * regex with subtly different shapes.\n */\nexport function isDuplicateColumnError(err: unknown): boolean {\n  const msg = (err as Error | undefined)?.message ?? \"\";\n  return (\n    /duplicate column name/i.test(msg) || /column .* already exists/i.test(msg)\n  );\n}\n\n/**\n * True when a migration statement failed because the connected DB ROLE lacks\n * privilege — e.g. a permission-limited dev/replica role that doesn't own the\n * table. Postgres raises SQLSTATE 42501 (\"insufficient_privilege\", routine\n * aclcheck_error, message \"must be owner of table …\"). We treat these as\n * NON-FATAL so a perms-limited database can't crash-loop the whole server: the\n * migration is skipped (left unrecorded) and a properly-privileged role applies\n * it later. Production, where the role owns its tables, never hits this path.\n */\nexport function isPermissionError(err: unknown): boolean {\n  const e = err as { code?: string; message?: string } | undefined;\n  if (e?.code === \"42501\") return true;\n  const msg = e?.message ?? \"\";\n  return (\n    /must be owner of/i.test(msg) ||\n    /permission denied/i.test(msg) ||\n    /insufficient privilege/i.test(msg)\n  );\n}\n\n/**\n * Split a multi-statement SQL blob into individual statements.\n *\n * libsql's `execute(sql)` only runs the first statement in a multi-statement\n * string. This splitter is intentionally simple: it respects single-quoted\n * string literals (with `''` escaping) and `--` line comments, and splits on\n * top-level `;`. It does NOT attempt to parse `$$`-quoted Postgres function\n * bodies — migrations that define functions/triggers with `;` inside bodies\n * should pass a single-statement migration per entry instead.\n */\nfunction splitSqlStatements(sql: string): string[] {\n  const out: string[] = [];\n  let buf = \"\";\n  let i = 0;\n  let inSingle = false;\n  while (i < sql.length) {\n    const ch = sql[i];\n    const next = sql[i + 1];\n    if (!inSingle && ch === \"-\" && next === \"-\") {\n      // Skip to end of line\n      while (i < sql.length && sql[i] !== \"\\n\") i++;\n      continue;\n    }\n    if (ch === \"'\") {\n      buf += ch;\n      if (inSingle && next === \"'\") {\n        buf += next;\n        i += 2;\n        continue;\n      }\n      inSingle = !inSingle;\n      i++;\n      continue;\n    }\n    if (ch === \";\" && !inSingle) {\n      const trimmed = buf.trim();\n      if (trimmed) out.push(trimmed);\n      buf = \"\";\n      i++;\n      continue;\n    }\n    buf += ch;\n    i++;\n  }\n  const tail = buf.trim();\n  if (tail) out.push(tail);\n  return out;\n}\n\nexport interface RunMigrationsOptions {\n  /**\n   * Name of the migrations bookkeeping table. REQUIRED — there is intentionally\n   * no default. Two templates that share a database (e.g. via the same Neon URL)\n   * each have their own version space starting at v1, and a single shared\n   * `_migrations` table will silently skip the second template's migrations if\n   * the first has already advanced past those version numbers. This caused the\n   * design template's migrations to be skipped entirely on a Neon DB that\n   * slides had already populated up to v15 (PR #320 era).\n   *\n   * Use one bookkeeping table per template, e.g. `slides_migrations`. Core\n   * feature plugins (e.g. the org module) follow the same convention with\n   * their own prefix, e.g. `_org_migrations`.\n   */\n  table: string;\n}\n\n/**\n * A single migration entry.\n *\n * `sql` can be a string (runs on every dialect) or an object with dialect\n * keys for dialect-gated SQL. Useful when Postgres needs an ALTER that\n * SQLite can't parse.\n *\n *   { version: 14, sql: { postgres: \"ALTER TABLE …\" } }  // no-op on sqlite\n *   { version: 15, sql: { sqlite: \"…\", postgres: \"…\" } } // both dialects\n */\nexport type MigrationSql = string | { postgres?: string; sqlite?: string };\n\nexport interface MigrationEntry {\n  version: number;\n  sql: MigrationSql;\n}\n\nfunction resolveMigrationSql(sql: MigrationSql, pg: boolean): string | null {\n  if (typeof sql === \"string\") return sql;\n  const raw = pg ? sql.postgres : sql.sqlite;\n  return raw ?? null;\n}\n\nexport function runMigrations(\n  migrations: Array<MigrationEntry>,\n  options: RunMigrationsOptions,\n): NitroPluginDef {\n  const table = options?.table;\n  if (\n    !table ||\n    typeof table !== \"string\" ||\n    !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table)\n  ) {\n    throw new Error(\n      \"runMigrations: `table` option is required and must be a valid SQL identifier \" +\n        '(e.g. `{ table: \"slides_migrations\" }`). See packages/core/src/db/migrations.ts ' +\n        \"for why this is required (shared-DB version-collision bug).\",\n    );\n  }\n  return async () => {\n    try {\n      // Check for Cloudflare D1 binding (only if DATABASE_URL not set)\n      const d1 = getDialect() === \"d1\" ? globalThis.__cf_env?.DB : null;\n      if (d1) {\n        await d1\n          .prepare(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          )\n          .run();\n        const firstRow = await d1\n          .prepare(`SELECT MAX(version) as v FROM ${table}`)\n          .first<{ v?: number }>();\n        const current = (firstRow?.v as number) ?? 0;\n\n        for (const m of migrations.filter((m) => m.version > current)) {\n          try {\n            // D1 is SQLite-compatible\n            const raw = resolveMigrationSql(m.sql, false);\n            if (raw == null) {\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n              continue;\n            }\n            const originalStatements = splitSqlStatements(raw);\n            const statements = originalStatements.map((orig) => ({\n              sql: adaptSqlForSqlite(orig),\n              hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n            }));\n            const hasIfNotExists = statements.some((s) => s.hadIfNotExists);\n            if (hasIfNotExists) {\n              // Per-statement path: we need to swallow \"duplicate column\"\n              // errors for statements that originally carried\n              // `ADD COLUMN IF NOT EXISTS`, which a batch() can't express.\n              // Loses atomicity, but the idempotent-ADD-COLUMN semantic\n              // means a partial re-run resolves cleanly on retry.\n              for (const { sql: stmt, hadIfNotExists } of statements) {\n                try {\n                  await d1.prepare(stmt).run();\n                } catch (err) {\n                  if (hadIfNotExists && isDuplicateColumnError(err)) continue;\n                  throw err;\n                }\n              }\n              await d1\n                .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                .bind(m.version)\n                .run();\n            } else {\n              // Atomic batch: all statements + version-row insert land in\n              // the same transaction. A failing statement rolls the whole\n              // migration back, so we never record a half-applied version.\n              await d1.batch([\n                ...statements.map((s) => d1.prepare(s.sql)),\n                d1\n                  .prepare(`INSERT OR IGNORE INTO ${table} VALUES (?)`)\n                  .bind(m.version),\n              ]);\n            }\n            console.log(\n              `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n            );\n          } catch (err) {\n            console.error(\n              `[db] Migration v${m.version} FAILED:`,\n              (err as Error).message,\n              \"\\nSQL:\",\n              JSON.stringify(m.sql),\n            );\n            throw err;\n          }\n        }\n        return;\n      }\n\n      // Generic path — works for libsql and Postgres\n      const exec = getDbExec();\n      const pg = isPostgres();\n\n      // Retry initial table creation — SQLITE_BUSY_RECOVERY can occur on HMR\n      // restarts when WAL files from the previous process haven't been released yet.\n      await retrySqliteBusy(\n        () =>\n          exec.execute(\n            `CREATE TABLE IF NOT EXISTS ${table} (version INTEGER PRIMARY KEY)`,\n          ),\n        { maxAttempts: 6, baseDelayMs: 1000, rethrow: true },\n      );\n\n      const { rows } = await exec.execute(\n        `SELECT MAX(version) as v FROM ${table}`,\n      );\n      const current = (rows[0]?.v as number) ?? 0;\n\n      const insertSql = pg\n        ? `INSERT INTO ${table} VALUES (?) ON CONFLICT DO NOTHING`\n        : `INSERT OR IGNORE INTO ${table} VALUES (?)`;\n\n      const pending = migrations.filter((m) => m.version > current);\n      if (pending.length > 0) {\n        console.log(\n          `[db] Applying ${pending.length} migration(s) on ${pg ? \"Postgres\" : \"SQLite/libsql\"}…`,\n        );\n      }\n\n      for (const m of pending) {\n        const raw = resolveMigrationSql(m.sql, pg);\n        if (raw == null) {\n          // Dialect-gated migration with no SQL for this dialect; still mark\n          // as applied so we don't retry forever.\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          continue;\n        }\n        // Split BEFORE adapting so we can remember which original statements\n        // carried `ADD COLUMN IF NOT EXISTS` — SQLite drops the clause, so we\n        // emulate the idempotent semantic by swallowing duplicate-column\n        // errors only for those statements.\n        const originalStatements = splitSqlStatements(raw);\n        const statements = originalStatements.map((orig) => ({\n          sql: pg ? adaptSqlForPostgres(orig) : adaptSqlForSqlite(orig),\n          hadIfNotExists: IF_NOT_EXISTS_ADD_COLUMN_RE.test(orig),\n        }));\n        let currentStmt = \"\";\n        try {\n          for (const { sql: stmt, hadIfNotExists } of statements) {\n            currentStmt = stmt;\n            try {\n              await exec.execute(stmt);\n            } catch (err) {\n              if (!pg && hadIfNotExists && isDuplicateColumnError(err)) {\n                // IF NOT EXISTS semantic: column already present, skip.\n                continue;\n              }\n              throw err;\n            }\n          }\n          await exec.execute({ sql: insertSql, args: [m.version] });\n          console.log(\n            `[db] Applied migration v${m.version} (${statements.length} statement${statements.length === 1 ? \"\" : \"s\"})`,\n          );\n        } catch (err) {\n          if (pg && isPermissionError(err)) {\n            // The connected role lacks privilege for this migration (e.g. a\n            // permission-limited dev/replica role that doesn't own the table).\n            // Don't crash-loop the whole server over it — warn and STOP here.\n            // We must NOT continue to later migrations: pending work is computed\n            // as `version > MAX(recorded version)`, so applying a later migration\n            // would advance MAX past this unrecorded one and orphan it forever.\n            // Stopping leaves MAX at the last recorded version, so a properly-\n            // privileged role resumes from this exact migration, in order.\n            console.warn(\n              `[db] Migration v${m.version} skipped — insufficient privilege: ${(err as Error).message}. ` +\n                `Apply it with a DB role that owns the table. ` +\n                `Halting further migrations so this one isn't orphaned.`,\n              \"\\nStatement:\",\n              currentStmt,\n            );\n            break;\n          }\n          console.error(\n            `[db] Migration v${m.version} FAILED:`,\n            (err as Error).message,\n            \"\\nStatement:\",\n            currentStmt,\n          );\n          throw err;\n        }\n      }\n    } catch (err) {\n      console.error(\"[db] Migration failed:\", (err as Error).message);\n      // In local dev, hard-fail so the developer catches errors immediately.\n      // On serverless runtimes (Netlify Functions, Vercel, CF Workers) we\n      // keep the process alive — the app will return 500s for routes that\n      // depend on the missing tables, but at least other routes still work.\n      // Note: Node.js 21+ defines globalThis.navigator, so we check for\n      // serverless env vars instead of navigator presence.\n      const isServerless =\n        !!globalThis.process?.env?.NETLIFY ||\n        !!globalThis.process?.env?.AWS_LAMBDA_FUNCTION_NAME ||\n        !!globalThis.process?.env?.VERCEL ||\n        \"__cf_env\" in globalThis;\n      if (typeof globalThis.process?.exit === \"function\" && !isServerless) {\n        process.exit(1);\n      }\n    }\n  };\n}\n"]}

package/dist/file-upload/builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYrD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBAkFvC,CAAC"}
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYrD;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,kBA+FvC,CAAC"}

package/dist/file-upload/builder.js

@@ -44,17 +44,32 @@ export const builderFileUploadProvider = {
         // attempt — usually GCS write hiccups that succeed on retry. We bound
         // it tight so a deterministic 500 surfaces quickly to the caller.
         const RETRY_DELAYS_MS = [600, 1800];
+        const UPLOAD_TIMEOUT_MS = 120_000; // 2 minutes per attempt
         let response = null;
         let lastErrorBody = "";
         for (let attempt = 0; attempt <= RETRY_DELAYS_MS.length; attempt++) {
-            response = await fetch(url, {
-                method: "POST",
-                headers: {
-                    Authorization: `Bearer ${privateKey}`,
-                    "Content-Type": bareMimeType,
-                },
-                body,
-            });
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), UPLOAD_TIMEOUT_MS);
+            try {
+                response = await fetch(url, {
+                    method: "POST",
+                    headers: {
+                        Authorization: `Bearer ${privateKey}`,
+                        "Content-Type": bareMimeType,
+                    },
+                    body,
+                    signal: controller.signal,
+                });
+            }
+            catch (err) {
+                clearTimeout(timer);
+                const isLastAttempt = attempt === RETRY_DELAYS_MS.length;
+                if (isLastAttempt)
+                    throw err;
+                await new Promise((r) => setTimeout(r, RETRY_DELAYS_MS[attempt]));
+                continue;
+            }
+            clearTimeout(timer);
             if (response.ok)
                 break;
             const isTransient = response.status >= 500 && response.status !== 501;

package/dist/file-upload/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAEA,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,SAAS,iBAAiB;IACxB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;IACrD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC7C,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErD,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,oBAAoB;QACpB,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC;aAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,IAAI,EAAE,CAAC;QAEV,MAAM,MAAM,GACV,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAW,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,CAClB,CAAC;QACF,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,WAAW;YACzB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC3C,CAAC,CAAE,KAA6B,CAAC;QAErC,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,GAAoB,IAAI,CAAC;QACrC,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,UAAU,EAAE;oBACrC,cAAc,EAAE,YAAY;iBAC7B;gBACD,IAAI;aACL,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE;gBAAE,MAAM;YACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YACtE,MAAM,aAAa,GAAG,OAAO,KAAK,eAAe,CAAC,MAAM,CAAC;YACzD,IAAI,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;gBAClC,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM;YACR,CAAC;YACD,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,MAAM,aAAa,IAAI,UAAU,EAAE,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;CACF,CAAC","sourcesContent":["import type { FileUploadProvider } from \"./types.js\";\n\nconst DEFAULT_BUILDER_APP_HOST = \"https://builder.io\";\n\nfunction builderUploadHost(): string {\n  return (\n    process.env.BUILDER_APP_HOST ||\n    process.env.BUILDER_PUBLIC_APP_HOST ||\n    DEFAULT_BUILDER_APP_HOST\n  );\n}\n\n/**\n * Built-in Builder.io file upload provider.\n * Uses the same BUILDER_PRIVATE_KEY as the browser/background-agent flows,\n * so connecting Builder once (via the sidebar \"Connect Builder\" action)\n * automatically enables file uploads.\n *\n * Upload API: https://www.builder.io/c/docs/upload-api\n */\nexport const builderFileUploadProvider: FileUploadProvider = {\n  id: \"builder\",\n  name: \"Builder.io\",\n  isConfigured: () => !!process.env.BUILDER_PRIVATE_KEY,\n  upload: async ({ data, filename, mimeType }) => {\n    const { resolveBuilderPrivateKey } =\n      await import(\"../server/credential-provider.js\");\n    const privateKey = await resolveBuilderPrivateKey();\n    if (!privateKey) {\n      throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n    }\n\n    const url = new URL(\"/api/v1/upload\", builderUploadHost());\n    if (filename) url.searchParams.set(\"name\", filename);\n\n    // Strip any media-type parameters (e.g. `;codecs=avc1,opus` from\n    // MediaRecorder blobs) — Builder's upload API parses the body as raw\n    // binary only when Content-Type is a bare MIME type. A parameterized\n    // Content-Type falls through to the multipart/base64 paths which look\n    // for an `image` field, and returns \"No image specified\" when it\n    // doesn't find one.\n    const bareMimeType = (mimeType || \"application/octet-stream\")\n      .split(\";\")[0]\n      .trim();\n\n    const buffer =\n      data instanceof Uint8Array ? data : new Uint8Array(data as any);\n    const bytes = new Uint8Array(\n      buffer.buffer,\n      buffer.byteOffset,\n      buffer.byteLength,\n    );\n    const body =\n      typeof Blob !== \"undefined\"\n        ? new Blob([bytes], { type: bareMimeType })\n        : (bytes as unknown as BodyInit);\n\n    // Retry transient 5xx once with backoff. Builder.io's upload service\n    // occasionally returns a bodyless 500 (\"Internal Error\") on the first\n    // attempt — usually GCS write hiccups that succeed on retry. We bound\n    // it tight so a deterministic 500 surfaces quickly to the caller.\n    const RETRY_DELAYS_MS = [600, 1800];\n    let response: Response | null = null;\n    let lastErrorBody = \"\";\n    for (let attempt = 0; attempt <= RETRY_DELAYS_MS.length; attempt++) {\n      response = await fetch(url, {\n        method: \"POST\",\n        headers: {\n          Authorization: `Bearer ${privateKey}`,\n          \"Content-Type\": bareMimeType,\n        },\n        body,\n      });\n      if (response.ok) break;\n      const isTransient = response.status >= 500 && response.status !== 501;\n      const isLastAttempt = attempt === RETRY_DELAYS_MS.length;\n      if (!isTransient || isLastAttempt) {\n        lastErrorBody = await response.text().catch(() => \"\");\n        break;\n      }\n      lastErrorBody = await response.text().catch(() => \"\");\n      await new Promise((r) => setTimeout(r, RETRY_DELAYS_MS[attempt]));\n    }\n\n    if (!response || !response.ok) {\n      const status = response?.status ?? 0;\n      const statusText = response?.statusText ?? \"no response\";\n      throw new Error(\n        `Builder.io upload failed (${status}): ${lastErrorBody || statusText}`,\n      );\n    }\n\n    const json = (await response.json().catch(() => ({}))) as {\n      url?: string;\n      id?: string;\n    };\n    if (!json.url) {\n      throw new Error(\"Builder.io upload returned no URL\");\n    }\n\n    return { url: json.url, id: json.id, provider: \"builder\" };\n  },\n};\n"]}
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/file-upload/builder.ts"],"names":[],"mappings":"AAEA,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAEtD,SAAS,iBAAiB;IACxB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;IACrD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC7C,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,wBAAwB,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAErD,iEAAiE;QACjE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,oBAAoB;QACpB,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,0BAA0B,CAAC;aAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACb,IAAI,EAAE,CAAC;QAEV,MAAM,MAAM,GACV,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAW,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,CAClB,CAAC;QACF,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,WAAW;YACzB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC3C,CAAC,CAAE,KAA6B,CAAC;QAErC,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,wBAAwB;QAC3D,IAAI,QAAQ,GAAoB,IAAI,CAAC;QACrC,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;YACtE,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC1B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,UAAU,EAAE;wBACrC,cAAc,EAAE,YAAY;qBAC7B;oBACD,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,aAAa,GAAG,OAAO,KAAK,eAAe,CAAC,MAAM,CAAC;gBACzD,IAAI,aAAa;oBAAE,MAAM,GAAG,CAAC;gBAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,QAAQ,CAAC,EAAE;gBAAE,MAAM;YACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;YACtE,MAAM,aAAa,GAAG,OAAO,KAAK,eAAe,CAAC,MAAM,CAAC;YACzD,IAAI,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;gBAClC,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM;YACR,CAAC;YACD,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,MAAM,aAAa,IAAI,UAAU,EAAE,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGpD,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;CACF,CAAC","sourcesContent":["import type { FileUploadProvider } from \"./types.js\";\n\nconst DEFAULT_BUILDER_APP_HOST = \"https://builder.io\";\n\nfunction builderUploadHost(): string {\n  return (\n    process.env.BUILDER_APP_HOST ||\n    process.env.BUILDER_PUBLIC_APP_HOST ||\n    DEFAULT_BUILDER_APP_HOST\n  );\n}\n\n/**\n * Built-in Builder.io file upload provider.\n * Uses the same BUILDER_PRIVATE_KEY as the browser/background-agent flows,\n * so connecting Builder once (via the sidebar \"Connect Builder\" action)\n * automatically enables file uploads.\n *\n * Upload API: https://www.builder.io/c/docs/upload-api\n */\nexport const builderFileUploadProvider: FileUploadProvider = {\n  id: \"builder\",\n  name: \"Builder.io\",\n  isConfigured: () => !!process.env.BUILDER_PRIVATE_KEY,\n  upload: async ({ data, filename, mimeType }) => {\n    const { resolveBuilderPrivateKey } =\n      await import(\"../server/credential-provider.js\");\n    const privateKey = await resolveBuilderPrivateKey();\n    if (!privateKey) {\n      throw new Error(\"BUILDER_PRIVATE_KEY is not set\");\n    }\n\n    const url = new URL(\"/api/v1/upload\", builderUploadHost());\n    if (filename) url.searchParams.set(\"name\", filename);\n\n    // Strip any media-type parameters (e.g. `;codecs=avc1,opus` from\n    // MediaRecorder blobs) — Builder's upload API parses the body as raw\n    // binary only when Content-Type is a bare MIME type. A parameterized\n    // Content-Type falls through to the multipart/base64 paths which look\n    // for an `image` field, and returns \"No image specified\" when it\n    // doesn't find one.\n    const bareMimeType = (mimeType || \"application/octet-stream\")\n      .split(\";\")[0]\n      .trim();\n\n    const buffer =\n      data instanceof Uint8Array ? data : new Uint8Array(data as any);\n    const bytes = new Uint8Array(\n      buffer.buffer,\n      buffer.byteOffset,\n      buffer.byteLength,\n    );\n    const body =\n      typeof Blob !== \"undefined\"\n        ? new Blob([bytes], { type: bareMimeType })\n        : (bytes as unknown as BodyInit);\n\n    // Retry transient 5xx once with backoff. Builder.io's upload service\n    // occasionally returns a bodyless 500 (\"Internal Error\") on the first\n    // attempt — usually GCS write hiccups that succeed on retry. We bound\n    // it tight so a deterministic 500 surfaces quickly to the caller.\n    const RETRY_DELAYS_MS = [600, 1800];\n    const UPLOAD_TIMEOUT_MS = 120_000; // 2 minutes per attempt\n    let response: Response | null = null;\n    let lastErrorBody = \"\";\n    for (let attempt = 0; attempt <= RETRY_DELAYS_MS.length; attempt++) {\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), UPLOAD_TIMEOUT_MS);\n      try {\n        response = await fetch(url, {\n          method: \"POST\",\n          headers: {\n            Authorization: `Bearer ${privateKey}`,\n            \"Content-Type\": bareMimeType,\n          },\n          body,\n          signal: controller.signal,\n        });\n      } catch (err) {\n        clearTimeout(timer);\n        const isLastAttempt = attempt === RETRY_DELAYS_MS.length;\n        if (isLastAttempt) throw err;\n        await new Promise((r) => setTimeout(r, RETRY_DELAYS_MS[attempt]));\n        continue;\n      }\n      clearTimeout(timer);\n      if (response.ok) break;\n      const isTransient = response.status >= 500 && response.status !== 501;\n      const isLastAttempt = attempt === RETRY_DELAYS_MS.length;\n      if (!isTransient || isLastAttempt) {\n        lastErrorBody = await response.text().catch(() => \"\");\n        break;\n      }\n      lastErrorBody = await response.text().catch(() => \"\");\n      await new Promise((r) => setTimeout(r, RETRY_DELAYS_MS[attempt]));\n    }\n\n    if (!response || !response.ok) {\n      const status = response?.status ?? 0;\n      const statusText = response?.statusText ?? \"no response\";\n      throw new Error(\n        `Builder.io upload failed (${status}): ${lastErrorBody || statusText}`,\n      );\n    }\n\n    const json = (await response.json().catch(() => ({}))) as {\n      url?: string;\n      id?: string;\n    };\n    if (!json.url) {\n      throw new Error(\"Builder.io upload returned no URL\");\n    }\n\n    return { url: json.url, id: json.id, provider: \"builder\" };\n  },\n};\n"]}