@chatpanel/events 0.102.0 → 0.104.0

package/pdf-layout.js

@@ -1,258 +1,12 @@
-// A PDF's text items → something a person (or a model) can read.
-//
-// A PDF does not contain paragraphs. It contains positioned glyph runs: "Introduction" at
-// (72, 690), "and this is" at (72, 674), "why" at (140, 674). Every PDF engine — pdf.js in
-// a browser, a native renderer on mobile, a CLI extractor on the bridge — hands back that
-// same list of runs with the same transform matrix, and every one of them leaves the job of
-// turning runs into READING ORDER to the caller. Done naively (join the items with spaces)
-// a two-column paper becomes an interleaved ransom note, and every hyphenated line break
-// becomes a broken word the model then cannot match against a query.
-//
-// So the reconstruction lives here — pure, testable, engine-agnostic — and the client
-// contributes only the engine that produced the items.
-//
-// THE ITEM SHAPE (pdf.js `getTextContent().items`, and what other engines are adapted to):
-//   { str, transform: [a, b, c, d, x, y], width, height, hasEOL }
-// x/y are in PDF user space: y grows UPWARD from the bottom of the page.
+function d(e){const l=Array.isArray(e?.transform)?e.transform:[1,0,0,1,0,0];return{text:String(e?.str??""),x:Number(l[4])||0,y:Number(l[5])||0,width:Number(e?.width)||0,size:Math.abs(Number(l[3]))||Number(e?.height)||0,eol:!!e?.hasEOL}}function m(e,{tolerance:l=.5}={}){const s=(Array.isArray(e)?e:[]).map(d).filter(t=>t.text!=="");if(!s.length)return[];const i=[];for(const t of s){const n=Math.max(1,(t.size||10)*l),o=i[i.length-1];o&&Math.abs(o.y-t.y)<=n?(o.items.push(t),t.size>o.size&&(o.size=t.size)):i.push({y:t.y,size:t.size||10,items:[t]})}return i.map(t=>{const n=t.items.slice().sort((o,c)=>o.x-c.x);return{y:t.y,size:t.size,x:n[0].x,right:Math.max(...n.map(o=>o.x+o.width)),text:z(n,t.size)}})}function z(e,l){let s="",i=null;for(const t of e)i!==null&&t.x-i>(l||10)*.2&&!/\s$/.test(s)&&!/^\s/.test(t.text)&&(s+=" "),s+=t.text,i=t.x+t.width;return s.replace(/\s+/g," ").trim()}function b(e,{pageWidth:l=0}={}){const s=(Array.isArray(e)?e:[]).slice();if(s.length<6)return s.sort((r,a)=>a.y-r.y);const t=(l||Math.max(...s.map(r=>r.right)))/2,n=s.filter(r=>r.right<=t*1.05),o=s.filter(r=>r.x>=t*.95),c=s.filter(r=>!n.includes(r)&&!o.includes(r));if(!(n.length>=3&&o.length>=3&&c.length<=s.length*.2))return s.sort((r,a)=>a.y-r.y);const h=(r,a)=>a.y-r.y;return[...c.filter(r=>r.y>Math.max(...n.map(a=>a.y),0)).sort(h),...n.sort(h),...o.sort(h),...c.filter(r=>r.y<=Math.max(...n.map(a=>a.y),0)).sort(h)]}function M(e){const l=(Array.isArray(e)?e:[]).filter(t=>t&&t.text);if(!l.length)return[];const s=[];for(const t of l){const n=s[s.length-1],o=n?.lines[n.lines.length-1],c=n&&Math.abs(n.lines[0].x-t.x)<=(t.size||10)*1.5,f=o&&Math.abs((o.size||10)-(t.size||10))<=(o.size||10)*.15;c&&f?n.lines.push(t):s.push({lines:[t]})}const i=[];for(const t of s){const n=t.lines,o=[];for(let a=1;a<n.length;a++)o.push(Math.abs(n[a-1].y-n[a].y));const c=A(o,.3)||(n[0].size||10)*1.2,f=Math.max(...n.map(a=>a.right)),h=Math.min(...n.map(a=>a.x));let r="";for(let a=0;a<n.length;a++){const u=n[a],p=n[a-1],g=p?Math.abs(p.y-u.y):0,x=u.x>h+(u.size||10)*.8,y=p?p.right<f-(u.size||10)*3:!1;r&&(g>c*1.5||x||y)?(i.push(r),r=u.text):r?/(\w)-$/.test(r)?r=r.replace(/-$/,"")+u.text.replace(/^\s+/,""):r+=" "+u.text:r=u.text}r&&i.push(r)}return i.map(t=>t.replace(/\s+/g," ").trim()).filter(Boolean)}function A(e,l){const s=e.filter(i=>Number.isFinite(i)&&i>0).sort((i,t)=>i-t);return s.length?s[Math.min(s.length-1,Math.floor(l*(s.length-1)))]:0}function S(e,{pageWidth:l=0,...s}={}){const i=m(e,s);return M(b(i,{pageWidth:l})).join(`
 
-/** One text item → the numbers this file reasons about. */
-function place(item) {
-  const t = Array.isArray(item?.transform) ? item.transform : [1, 0, 0, 1, 0, 0];
-  return {
-    text: String(item?.str ?? ''),
-    x: Number(t[4]) || 0,
-    y: Number(t[5]) || 0,
-    width: Number(item?.width) || 0,
-    // The transform's vertical scale is the font size; `height` is often 0 on the items
-    // real documents produce, and a zero line height makes every line one paragraph.
-    size: Math.abs(Number(t[3])) || Number(item?.height) || 0,
-    eol: !!item?.hasEOL,
-  };
-}
+`)}const $=2e5;function w(e){const l=Array.isArray(e)?e:[];return l.length?l.reduce((i,t)=>i+String(t?.text||"").length,0)<l.length*40:!1}function F({meta:e={},pages:l=[],maxChars:s=$}={}){const i=Array.isArray(l)?l:[],t=[];e.title&&t.push(`# ${e.title}`);const n=[];e.author&&n.push(`Author: ${e.author}`),i.length&&n.push(`Pages: ${e.pageCount||i.length}`),e.url&&n.push(`URL: ${e.url}`),n.length&&t.push(n.join(" · "));const o=i.map(h=>{const r=String(h?.text||"").trim();return r?`[page ${h.page}]
+${r}`:""}).filter(Boolean).join(`
 
-/**
- * Items → lines, by shared baseline.
- *
- * Tolerance is a FRACTION OF THE FONT SIZE, not a fixed number of points: a footnote at 7pt
- * and a heading at 24pt do not agree on what "the same line" means, and a constant that
- * works for body text either splits headings or merges footnotes.
- */
-export function linesFromItems(items, { tolerance = 0.5 } = {}) {
-  const placed = (Array.isArray(items) ? items : []).map(place).filter((p) => p.text !== '');
-  if (!placed.length) return [];
-  const lines = [];
-  for (const p of placed) {
-    const tol = Math.max(1, (p.size || 10) * tolerance);
-    // Compare against the most recent line only: items arrive in content-stream order, so a
-    // matching baseline further back belongs to an earlier column, not to this line.
-    const last = lines[lines.length - 1];
-    if (last && Math.abs(last.y - p.y) <= tol) {
-      last.items.push(p);
-      if (p.size > last.size) last.size = p.size;
-    } else {
-      lines.push({ y: p.y, size: p.size || 10, items: [p] });
-    }
-  }
-  return lines.map((line) => {
-    const sorted = line.items.slice().sort((a, b) => a.x - b.x);
-    return {
-      y: line.y,
-      size: line.size,
-      x: sorted[0].x,
-      right: Math.max(...sorted.map((i) => i.x + i.width)),
-      text: joinRun(sorted, line.size),
-    };
-  });
-}
+`);let c=t.length?`${t.join(`
 
-/**
- * Glyph runs on one line → a string.
- *
- * PDFs encode a space either as a space character or as a horizontal gap with nothing in
- * it, and which one you get depends on the producer. Joining on the character alone loses
- * every word break in documents from the second kind; joining every item with a space puts
- * one inside every kerned pair in documents from the first.
- */
-function joinRun(sorted, size) {
-  let out = '';
-  let prevRight = null;
-  for (const item of sorted) {
-    if (prevRight !== null) {
-      const gap = item.x - prevRight;
-      const needsSpace = gap > (size || 10) * 0.2;
-      if (needsSpace && !/\s$/.test(out) && !/^\s/.test(item.text)) out += ' ';
-    }
-    out += item.text;
-    prevRight = item.x + item.width;
-  }
-  return out.replace(/\s+/g, ' ').trim();
-}
+`)}
 
-/**
- * Lines → columns, in reading order.
- *
- * Two-column layouts are the case that makes naive extraction useless, and they are most of
- * academic and technical PDF reading. A column is detected as a vertical band that lines
- * cluster into; if the page is one column (or the split is not clean) this returns the lines
- * unchanged rather than inventing a split, because a wrong split is worse than none.
- */
-export function orderLines(lines, { pageWidth = 0 } = {}) {
-  const list = (Array.isArray(lines) ? lines : []).slice();
-  if (list.length < 6) return list.sort((a, b) => b.y - a.y);
-  const width = pageWidth || Math.max(...list.map((l) => l.right));
-  const mid = width / 2;
-  const left = list.filter((l) => l.right <= mid * 1.05);
-  const right = list.filter((l) => l.x >= mid * 0.95);
-  const spanning = list.filter((l) => !left.includes(l) && !right.includes(l));
-  // A real two-column page has substantial text on BOTH sides and few lines crossing the
-  // gutter. Anything else is a single column with a stray indent or a wide table.
-  const twoColumn = left.length >= 3 && right.length >= 3
-    && spanning.length <= list.length * 0.2;
-  if (!twoColumn) return list.sort((a, b) => b.y - a.y);
-  const byY = (a, b) => b.y - a.y;
-  // Headers and footers that span the gutter keep their vertical position relative to the
-  // column they sit above; sorting them into the left column first is the conventional and
-  // least-surprising reading order.
-  return [...spanning.filter((l) => l.y > Math.max(...left.map((x) => x.y), 0)).sort(byY),
-    ...left.sort(byY), ...right.sort(byY),
-    ...spanning.filter((l) => l.y <= Math.max(...left.map((x) => x.y), 0)).sort(byY)];
-}
+${o}`:o,f=!1;return c.length>s&&(c=`${c.slice(0,s)}
 
-/**
- * Lines → paragraphs.
- *
- * A new paragraph is a bigger-than-usual vertical gap, a first-line indent, or a line that
- * ended well short of the right margin. A word broken across lines with a hyphen is put
- * back together — otherwise "distri-\nbuted" never matches a search for "distributed", and
- * the model reads a word that does not exist.
- *
- * MARGINS ARE MEASURED PER BLOCK, NOT PER PAGE. On a two-column page every line in the left
- * column ends far short of the page's right edge, so a page-wide margin makes every single
- * line "short" and therefore its own paragraph — which is what a first attempt at this did.
- * Lines that share a left edge are one block; a change of block is itself a paragraph break,
- * because it is a change of column or of indentation level.
- */
-export function paragraphsFromLines(lines) {
-  const list = (Array.isArray(lines) ? lines : []).filter((l) => l && l.text);
-  if (!list.length) return [];
-
-  // A block is a run of lines that share a left edge AND a font size. The size half is not
-  // cosmetic: a 14pt heading is wider than the 10pt lines under it, so a block containing
-  // both takes its right margin from the heading — and then every body line is "short" and
-  // every one of them becomes its own paragraph.
-  const blocks = [];
-  for (const line of list) {
-    const cur = blocks[blocks.length - 1];
-    const prev = cur?.lines[cur.lines.length - 1];
-    const sameEdge = cur && Math.abs(cur.lines[0].x - line.x) <= (line.size || 10) * 1.5;
-    const sameSize = prev && Math.abs((prev.size || 10) - (line.size || 10)) <= (prev.size || 10) * 0.15;
-    if (sameEdge && sameSize) cur.lines.push(line);
-    else blocks.push({ lines: [line] });
-  }
-
-  const paras = [];
-  for (const block of blocks) {
-    const rows = block.lines;
-    const gaps = [];
-    for (let i = 1; i < rows.length; i++) gaps.push(Math.abs(rows[i - 1].y - rows[i].y));
-    // A LOW percentile, not the median: in a three-line block whose second gap IS the
-    // paragraph break, the median sits between the line gap and the break and neither is
-    // then unusual. The common gap is a line gap, and it lives at the bottom of the range.
-    const typical = percentile(gaps, 0.3) || (rows[0].size || 10) * 1.2;
-    const rightEdge = Math.max(...rows.map((l) => l.right));
-    const leftEdge = Math.min(...rows.map((l) => l.x));
-
-    let cur = '';
-    for (let i = 0; i < rows.length; i++) {
-      const line = rows[i];
-      const prev = rows[i - 1];
-      const gap = prev ? Math.abs(prev.y - line.y) : 0;
-      const indented = line.x > leftEdge + (line.size || 10) * 0.8;
-      const prevShort = prev ? prev.right < rightEdge - (line.size || 10) * 3 : false;
-      if (cur && (gap > typical * 1.5 || indented || prevShort)) {
-        paras.push(cur);
-        cur = line.text;
-      } else if (!cur) {
-        cur = line.text;
-      } else if (/(\w)-$/.test(cur)) {
-        cur = cur.replace(/-$/, '') + line.text.replace(/^\s+/, '');
-      } else {
-        cur += ' ' + line.text;
-      }
-    }
-    if (cur) paras.push(cur);
-  }
-  return paras.map((p) => p.replace(/\s+/g, ' ').trim()).filter(Boolean);
-}
-
-/** Nearest-rank percentile of the positive values, 0 when there are none. */
-function percentile(nums, q) {
-  const list = nums.filter((n) => Number.isFinite(n) && n > 0).sort((a, b) => a - b);
-  if (!list.length) return 0;
-  return list[Math.min(list.length - 1, Math.floor(q * (list.length - 1)))];
-}
-
-/** One page's items → its text. */
-export function pageTextFromItems(items, { pageWidth = 0, ...opts } = {}) {
-  const lines = linesFromItems(items, opts);
-  return paragraphsFromLines(orderLines(lines, { pageWidth })).join('\n\n');
-}
-
-export const PDF_MAX_CHARS = 200_000;
-
-/**
- * Is this PDF a picture of a document rather than a document?
- *
- * A scanned page has a text layer of nothing, and every extractor answers with an empty
- * string. Returning that silently is the worst outcome: the user sees a summary of nothing
- * and no explanation. Detecting it lets the caller say "this needs OCR" — which is an
- * answer, where an empty attachment is a mystery.
- */
-export function looksScanned(pages) {
-  const list = Array.isArray(pages) ? pages : [];
-  if (!list.length) return false;
-  const chars = list.reduce((n, p) => n + String(p?.text || '').length, 0);
-  return chars < list.length * 40;
-}
-
-/**
- * Pages → the document a caller attaches.
- *
- * Page markers are kept because a citation into a 90-page PDF is worth nothing without one,
- * and because they are the only thing that tells a model the document has an order at all.
- */
-export function buildPdfDocument({ meta = {}, pages = [], maxChars = PDF_MAX_CHARS } = {}) {
-  const list = Array.isArray(pages) ? pages : [];
-  const head = [];
-  if (meta.title) head.push(`# ${meta.title}`);
-  const facts = [];
-  if (meta.author) facts.push(`Author: ${meta.author}`);
-  if (list.length) facts.push(`Pages: ${meta.pageCount || list.length}`);
-  if (meta.url) facts.push(`URL: ${meta.url}`);
-  if (facts.length) head.push(facts.join(' · '));
-
-  const body = list
-    .map((p) => {
-      const text = String(p?.text || '').trim();
-      return text ? `[page ${p.page}]\n${text}` : '';
-    })
-    .filter(Boolean)
-    .join('\n\n');
-
-  let text = head.length ? `${head.join('\n\n')}\n\n${body}` : body;
-  let truncated = false;
-  if (text.length > maxChars) {
-    text = `${text.slice(0, maxChars)}\n\n…[PDF truncated at ${maxChars} characters]`;
-    truncated = true;
-  }
-  return {
-    title: meta.title || 'PDF',
-    url: meta.url || '',
-    pageCount: meta.pageCount || list.length,
-    pagesRead: list.length,
-    scanned: looksScanned(list),
-    truncated,
-    text,
-    chars: text.length,
-  };
-}
+…[PDF truncated at ${s} characters]`,f=!0),{title:e.title||"PDF",url:e.url||"",pageCount:e.pageCount||i.length,pagesRead:i.length,scanned:w(i),truncated:f,text:c,chars:c.length}}export{$ as PDF_MAX_CHARS,F as buildPdfDocument,m as linesFromItems,w as looksScanned,b as orderLines,S as pageTextFromItems,M as paragraphsFromLines};

package/policy.js

@@ -0,0 +1 @@
+class a extends Error{constructor(n){super(n),this.name="PolicyError"}}const x=1,C="policy",d=Object.freeze(["off","basic","full"]),A=Object.freeze({off:0,basic:1,full:2}),O=Object.freeze(["gateway","endpoints","redaction","features","agents"]),k=Object.freeze(["webllm","meetings","channels","agents"]),w=Object.freeze(["plan","default","acceptEdits","bypassPermissions"]),U=Object.freeze({plan:0,default:1,acceptEdits:2,bypassPermissions:3}),T=Object.freeze(["api.chatpanel.net","dl.chatpanel.net","huggingface.co","registry.npmjs.org","api.github.com"]),f=e=>typeof e=="string"?e.trim():"",c=e=>Array.isArray(e)?e.map(f).filter(Boolean):[];function y(e){const n=f(e).toLowerCase().replace(/^https?:\/\//,"").replace(/\/.*$/,"");if(!n)return"";if(!/^(\*\.)?[a-z0-9.-]+(:\d{1,5})?$/.test(n)&&!/^\[[0-9a-f:]+\](:\d{1,5})?$/.test(n)&&n!=="*")throw new a(`invalid host pattern "${e}"`);return n}function h(e){if(e==null)return h({});if(typeof e!="object"||Array.isArray(e))throw new a("policy must be an object");const n=e.v==null?x:Number(e.v);if(n!==x)throw new a(`unsupported policy version ${e.v}`);const t={v:n};if(e.org!=null){const r=f(e.org.id);if(!r||!/^[a-z0-9][a-z0-9._-]{0,63}$/i.test(r))throw new a("org.id must be a short identifier");t.org={id:r,name:f(e.org.name)||r}}const o=(r,l)=>{if(r==null)return;if(typeof r!="object")throw new a(`${l} must be an object`);const u={};return r.allow!=null&&(u.allow=c(r.allow).map(y).filter(Boolean)),r.deny!=null&&(u.deny=c(r.deny).map(y).filter(Boolean)),u},i=o(e.endpoints,"endpoints");i&&(t.endpoints=i);const s=o(e.egress,"egress");if(s&&(t.egress=s),e.models!=null){if(typeof e.models!="object")throw new a("models must be an object");t.models={},e.models.allow!=null&&(t.models.allow=c(e.models.allow)),e.models.deny!=null&&(t.models.deny=c(e.models.deny))}if(e.agents!=null){if(typeof e.agents!="object")throw new a("agents must be an object");const r={};if(e.agents.allow!=null&&(r.allow=c(e.agents.allow).map(l=>l.toLowerCase())),e.agents.deny!=null&&(r.deny=c(e.agents.deny).map(l=>l.toLowerCase())),e.agents.permissionModeCap!=null){const l=f(e.agents.permissionModeCap);if(!w.includes(l))throw new a(`agents.permissionModeCap must be one of ${w.join(", ")}`);r.permissionModeCap=l}t.agents=r}if(e.routing!=null){if(typeof e.routing!="object")throw new a("routing must be an object");const r=Array.isArray(e.routing.rules)?e.routing.rules:[];t.routing={rules:r.map((l,u)=>{if(!l||typeof l!="object")throw new a(`routing.rules[${u}] must be an object`);const j=c(l.models),$=c(l.endpoints).map(y).filter(Boolean);if(!j.length)throw new a(`routing.rules[${u}] needs at least one model pattern`);if(!$.length)throw new a(`routing.rules[${u}] needs at least one endpoint`);return{models:j,endpoints:$}})}}if(e.redaction!=null){if(typeof e.redaction!="object")throw new a("redaction must be an object");const r={};if(e.redaction.floor!=null){const l=f(e.redaction.floor).toLowerCase();if(!d.includes(l))throw new a(`redaction.floor must be one of ${d.join(", ")}`);r.floor=l}e.redaction.dictionary!=null&&(r.dictionary=c(e.redaction.dictionary)),e.redaction.requireBeforeCloud!=null&&(r.requireBeforeCloud=!!e.redaction.requireBeforeCloud),t.redaction=r}if(e.client!=null){if(typeof e.client!="object")throw new a("client must be an object");const r={};if(e.client.gatewayUrl!=null){const l=f(e.client.gatewayUrl);if(l&&!/^https?:\/\/[^\s/]+(\/.*)?$/.test(l))throw new a("client.gatewayUrl must be an http(s) URL");r.gatewayUrl=l.replace(/\/+$/,"")}if(e.client.managedRequired!=null&&(r.managedRequired=!!e.client.managedRequired),e.client.lock!=null){const l=c(e.client.lock);for(const u of l)if(!O.includes(u))throw new a(`client.lock: unknown setting "${u}" (one of ${O.join(", ")})`);r.lock=[...new Set(l)]}if(e.client.features!=null){if(typeof e.client.features!="object")throw new a("client.features must be an object");r.features={};for(const[l,u]of Object.entries(e.client.features)){if(!k.includes(l))throw new a(`client.features: unknown feature "${l}" (one of ${k.join(", ")})`);r.features[l]=!!u}}t.client=r}return t}function p(e){const n=f(e).toLowerCase();if(!n)return{host:"",port:""};try{const t=new URL(/^[a-z][a-z0-9+.-]*:\/\//.test(n)?n:`http://${n}`);return{host:t.hostname.replace(/^\[|\]$/g,""),port:t.port||(t.protocol==="https:"?"443":t.protocol==="http:"?"80":"")}}catch{return{host:n.split(":")[0],port:""}}}function S(e,n,t){if(e==="*")return!0;const[o,i]=e.startsWith("[")?[e.replace(/^\[([^\]]+)\].*$/,"$1"),e.replace(/^\[[^\]]+\]:?/,"")]:(()=>{const s=e.lastIndexOf(":");return s>0?[e.slice(0,s),e.slice(s+1)]:[e,""]})();if(i&&i!==t)return!1;if(o.startsWith("*.")){const s=o.slice(1);return n.endsWith(s)&&n.length>s.length}return n===o}function g(e,n,t){return(e||[]).some(o=>S(o,n,t))}function m(e){return new RegExp(`^${String(e).split("*").map(n=>n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join(".*")}$`,"i")}function E(e,n){const t=e?.endpoints;if(!t)return!0;const{host:o,port:i}=p(n);return!o||g(t.deny,o,i)?!1:t.allow&&t.allow.length?g(t.allow,o,i):!0}function R(e,n){const t=e?.models;if(!t)return!0;const o=f(n);return(t.deny||[]).some(i=>m(i).test(o))?!1:t.allow&&t.allow.length?t.allow.some(i=>m(i).test(o)):!0}function z(e,n){const t=e?.agents;if(!t)return!0;const o=f(n).toLowerCase();return(t.deny||[]).includes(o)?!1:t.allow&&t.allow.length?t.allow.includes(o):!0}function M(e,n){const t=e?.agents?.permissionModeCap,o=w.includes(n)?n:"default";return t?U[o]<=U[t]?o:t:o}function I(e,{model:n="",endpoint:t=""}={}){if(!e)return{ok:!0,reason:""};if(n&&!R(e,n))return{ok:!1,reason:`model "${n}" is not allowed by your organisation's policy`};if(t&&!E(e,t))return{ok:!1,reason:`endpoint ${p(t).host} is not allowed by your organisation's policy`};const o=e.routing?.rules||[];if(n&&t&&o.length){const i=o.find(s=>s.models.some(r=>m(r).test(n)));if(i){const{host:s,port:r}=p(t);if(!g(i.endpoints,s,r))return{ok:!1,reason:`model "${n}" may only be sent to ${i.endpoints.join(", ")} under your organisation's policy`}}}return{ok:!0,reason:""}}function L(e,n){const t=e?.redaction?.floor,o=d.includes(n)?n:"basic";return t?A[o]>=A[t]?o:t:o}function N(e,n,{local:t=!1}={}){const o=e?.egress;if(!o)return!0;const{host:i,port:s}=p(n);return!i||g(o.deny,i,s)?!1:t||T.includes(i)||e.endpoints?.allow?.length&&g(e.endpoints.allow,i,s)&&!g(e.endpoints?.deny,i,s)?!0:g(o.allow,i,s)}function _(e,n){return!!e?.client?.lock?.includes(n)}function P(e,n){const t=e?.client?.features;return!t||t[n]==null?!0:!!t[n]}function B(e,n){const t={...n||{}},o=[];if(!e)return{settings:t,changed:o};const i=e.client||{};if(i.gatewayUrl&&t.gatewayUrl!==i.gatewayUrl&&(t.gatewayUrl=i.gatewayUrl,o.push("gatewayUrl")),Array.isArray(t.endpoints)&&e.endpoints){const s=t.endpoints.filter(r=>!r||typeof r!="object"?!1:!r.baseUrl||i.gatewayUrl&&p(r.baseUrl).host===p(i.gatewayUrl).host&&p(r.baseUrl).port===p(i.gatewayUrl).port?!0:E(e,r.baseUrl));s.length!==t.endpoints.length&&(t.endpoints=s,o.push("endpoints"))}if(Array.isArray(t.endpoints)&&e.agents){const s=t.endpoints.filter(r=>r?.kind!=="bridge"||z(e,r.bridgeAgent||r.agent||r.id));s.length!==t.endpoints.length&&(t.endpoints=s,o.push("agents"))}if(Array.isArray(t.endpoints)&&!P(e,"webllm")){const s=t.endpoints.filter(r=>r?.kind!=="webllm");s.length!==t.endpoints.length&&(t.endpoints=s,o.push("webllm"))}if(e.redaction?.floor&&(t.redaction?.tier!=null||t.redactionTier!=null)){const s=t.redaction?.tier!=null?t.redaction.tier:t.redactionTier,r=L(e,s);r!==s&&(t.redaction?.tier!=null?t.redaction={...t.redaction,tier:r}:t.redactionTier=r,o.push("redaction"))}return{settings:t,changed:o}}function q(e){const n=e?.org?.name||e?.org?.id;return n?`Managed by ${n}`:"Managed"}function b(e){return Array.isArray(e)?`[${e.map(b).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().map(n=>`${JSON.stringify(n)}:${b(e[n])}`).join(",")}}`:JSON.stringify(e)}async function H(e,{subtle:n=null}={}){const t=n||globalThis.crypto?.subtle;if(!t)throw new a("no WebCrypto available on this runtime");const o=new TextEncoder().encode(b(h(e))),i=await t.digest("SHA-256",o);return[...new Uint8Array(i)].map(s=>s.toString(16).padStart(2,"0")).join("")}async function D(e,{verify:n,...t}={}){if(typeof n!="function")throw new a("verifyPolicyToken needs a verify function (entitlement.js verifySignedToken)");const o=await n(e,{...t,typ:C});if(!o||!o.policy)return null;try{return h(o.policy)}catch{return null}}export{k as FEATURES,O as LOCKABLE,w as PERMISSION_MODES,C as POLICY_TOKEN_TYPE,x as POLICY_VERSION,T as PRODUCT_HOSTS,a as PolicyError,d as REDACTION_TIERS,z as agentAllowed,B as applyPolicyToSettings,N as egressAllowed,E as endpointAllowed,P as featureEnabled,m as globToRegExp,R as modelAllowed,h as normalizeOrgPolicy,M as permissionMode,H as policyHash,q as policyLabel,L as redactionTier,I as routeAllowed,_ as settingLocked,D as verifyPolicyToken};