@corenel/sidecar 0.8.5 → 0.8.6

package/dist/cli.js

@@ -21221,7 +21221,7 @@ var require_lib3 = __commonJS({
     }
     var INTERNALS$1 = Symbol("Response internals");
     var STATUS_CODES = http.STATUS_CODES;
-    var Response3 = class _Response {
+    var Response4 = class _Response {
       constructor() {
         let body2 = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : null;
         let opts = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {};
@@ -21279,8 +21279,8 @@ var require_lib3 = __commonJS({
         });
       }
     };
-    Body.mixIn(Response3.prototype);
-    Object.defineProperties(Response3.prototype, {
+    Body.mixIn(Response4.prototype);
+    Object.defineProperties(Response4.prototype, {
       url: { enumerable: true },
       status: { enumerable: true },
       ok: { enumerable: true },
@@ -21289,7 +21289,7 @@ var require_lib3 = __commonJS({
       headers: { enumerable: true },
       clone: { enumerable: true }
     });
-    Object.defineProperty(Response3.prototype, Symbol.toStringTag, {
+    Object.defineProperty(Response4.prototype, Symbol.toStringTag, {
       value: "Response",
       writable: false,
       enumerable: false,
@@ -21623,7 +21623,7 @@ var require_lib3 = __commonJS({
           };
           const codings = headers.get("Content-Encoding");
           if (!request.compress || request.method === "HEAD" || codings === null || res.statusCode === 204 || res.statusCode === 304) {
-            response = new Response3(body2, response_options);
+            response = new Response4(body2, response_options);
             resolve14(response);
             return;
           }
@@ -21633,7 +21633,7 @@ var require_lib3 = __commonJS({
           };
           if (codings == "gzip" || codings == "x-gzip") {
             body2 = body2.pipe(zlib.createGunzip(zlibOptions));
-            response = new Response3(body2, response_options);
+            response = new Response4(body2, response_options);
             resolve14(response);
             return;
           }
@@ -21645,12 +21645,12 @@ var require_lib3 = __commonJS({
               } else {
                 body2 = body2.pipe(zlib.createInflateRaw());
               }
-              response = new Response3(body2, response_options);
+              response = new Response4(body2, response_options);
               resolve14(response);
             });
             raw.on("end", function() {
               if (!response) {
-                response = new Response3(body2, response_options);
+                response = new Response4(body2, response_options);
                 resolve14(response);
               }
             });
@@ -21658,11 +21658,11 @@ var require_lib3 = __commonJS({
           }
           if (codings == "br" && typeof zlib.createBrotliDecompress === "function") {
             body2 = body2.pipe(zlib.createBrotliDecompress());
-            response = new Response3(body2, response_options);
+            response = new Response4(body2, response_options);
             resolve14(response);
             return;
           }
-          response = new Response3(body2, response_options);
+          response = new Response4(body2, response_options);
           resolve14(response);
         });
         writeToStream(req, request);
@@ -21704,7 +21704,7 @@ var require_lib3 = __commonJS({
     exports.default = exports;
     exports.Headers = Headers4;
     exports.Request = Request3;
-    exports.Response = Response3;
+    exports.Response = Response4;
     exports.FetchError = FetchError;
     exports.AbortError = AbortError;
   }
@@ -28250,6 +28250,36 @@ function nodeFsTools(roots) {
         return (await fs7.readFile(abs)).toString("base64");
       }
     },
+    {
+      name: "sidecar_fs_write_bytes",
+      // NOT roomSafe, unlike its read sibling: this is a write, and write-class
+      // fs tools are already excluded from room contexts (sidecar_fs_write_file
+      // has no roomSafe either).
+      means: "create or overwrite a binary file on this machine",
+      description: "Write a binary file on the sidecar machine from base64, relative to a pre-approved root. Use this for bytes (images, PDFs, Office files) that the UTF-8 text write would corrupt.",
+      parameters: {
+        type: "object",
+        properties: {
+          path: { type: "string", description: "path relative to the chosen root" },
+          content: { type: "string", description: "the file contents, base64-encoded" },
+          root: ROOT_PARAM
+        },
+        required: ["path", "content"]
+      },
+      namespace: "sidecar",
+      mutates: true,
+      async run(args) {
+        const abs = confine(roots, args.root, String(args.path ?? ""));
+        const bytes = Buffer.from(String(args.content ?? ""), "base64");
+        if (bytes.byteLength > MAX_READ_BYTES) {
+          throw new Error(`file too large to write (${bytes.byteLength} bytes; max ${MAX_READ_BYTES})`);
+        }
+        await fs7.mkdir(dirname3(abs), { recursive: true });
+        await assertRealWithinRoot(roots, abs);
+        await fs7.writeFile(abs, bytes);
+        return `wrote ${args.path} (${bytes.byteLength} bytes)`;
+      }
+    },
     {
       name: "sidecar_fs_list_dir",
       roomSafe: true,
@@ -29148,6 +29178,7 @@ var READ_ONLY_POLICY = {
       // future fs mutator with the explicit deny (reads address fs:sidecar_fs_read_file,
       // but mutating fs tools are caught here AND by mutatingDefault below).
       "fs:sidecar_fs_write_file",
+      "fs:sidecar_fs_write_bytes",
       // Shell execution (sidecar_shell_exec, address shell:sidecar_shell_exec) is a
       // side effect — denied outright under read-only, regardless of its own permission.
       "shell:*",
@@ -35004,7 +35035,7 @@ function nodeCrewLocation(stateDir, scope, workspaceRoot) {
   return { files: new NodeFileService(wsRoot), root: `${stateDirName()}/crew` };
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/internal/qs/formats.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/internal/qs/formats.mjs
 var default_format = "RFC3986";
 var formatters = {
   RFC1738: (v2) => String(v2).replace(/%20/g, "+"),
@@ -35012,7 +35043,7 @@ var formatters = {
 };
 var RFC1738 = "RFC1738";
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/internal/qs/utils.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/internal/qs/utils.mjs
 var is_array = Array.isArray;
 var hex_table = (() => {
   const array = [];
@@ -35091,7 +35122,7 @@ function maybe_map(val, fn) {
   return fn(val);
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/internal/qs/stringify.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/internal/qs/stringify.mjs
 var has = Object.prototype.hasOwnProperty;
 var array_prefix_generators = {
   brackets(prefix) {
@@ -35372,15 +35403,15 @@ function stringify3(object, opts = {}) {
   return joined.length > 0 ? prefix + joined : "";
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/version.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/version.mjs
 var VERSION = "4.104.0";
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/registry.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/registry.mjs
 var auto = false;
 var kind = void 0;
 var fetch2 = void 0;
 var Request = void 0;
-var Response = void 0;
+var Response2 = void 0;
 var Headers2 = void 0;
 var FormData = void 0;
 var Blob = void 0;
@@ -35401,7 +35432,7 @@ function setShims(shims, options = { auto: false }) {
   kind = shims.kind;
   fetch2 = shims.fetch;
   Request = shims.Request;
-  Response = shims.Response;
+  Response2 = shims.Response;
   Headers2 = shims.Headers;
   FormData = shims.FormData;
   Blob = shims.Blob;
@@ -35413,7 +35444,7 @@ function setShims(shims, options = { auto: false }) {
   isFsReadStream = shims.isFsReadStream;
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/node-runtime.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/node-runtime.mjs
 var nf = __toESM(require_lib3(), 1);
 
 // ../../node_modules/.pnpm/formdata-node@4.4.1/node_modules/formdata-node/lib/esm/FormData.js
@@ -35559,7 +35590,7 @@ var FormData2 = class {
 init_Blob();
 init_File();
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/node-runtime.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/node-runtime.mjs
 var import_agentkeepalive = __toESM(require_agentkeepalive(), 1);
 var import_abort_controller = __toESM(require_abort_controller(), 1);
 import { ReadStream as FsReadStream } from "node:fs";
@@ -35735,10 +35766,10 @@ var FormDataEncoder = class {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/node-runtime.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/node-runtime.mjs
 import { Readable } from "node:stream";
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/MultipartBody.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/MultipartBody.mjs
 var MultipartBody = class {
   constructor(body2) {
     this.body = body2;
@@ -35748,7 +35779,7 @@ var MultipartBody = class {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/node-runtime.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/node-runtime.mjs
 import { ReadableStream as ReadableStream3 } from "node:stream/web";
 var fileFromPathWarned = false;
 async function fileFromPath3(path, ...args) {
@@ -35793,13 +35824,13 @@ function getRuntime() {
   };
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_shims/index.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_shims/index.mjs
 var init = () => {
   if (!kind) setShims(getRuntime(), { auto: true });
 };
 init();
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/error.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/error.mjs
 var OpenAIError = class extends Error {
 };
 var APIError = class _APIError extends OpenAIError {
@@ -35903,7 +35934,7 @@ var ContentFilterFinishReasonError = class extends OpenAIError {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/internal/decoders/line.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/internal/decoders/line.mjs
 var __classPrivateFieldSet5 = function(receiver, state, value, kind2, f2) {
   if (kind2 === "m") throw new TypeError("Private method is not writable");
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a setter");
@@ -36015,7 +36046,7 @@ function findDoubleNewlineIndex(buffer) {
   return -1;
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/internal/stream-utils.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/internal/stream-utils.mjs
 function ReadableStreamToAsyncIterable(stream) {
   if (stream[Symbol.asyncIterator])
     return stream;
@@ -36044,7 +36075,7 @@ function ReadableStreamToAsyncIterable(stream) {
   };
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/streaming.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/streaming.mjs
 var Stream = class _Stream {
   constructor(iterator, controller) {
     this.iterator = iterator;
@@ -36296,7 +36327,7 @@ function partition(str10, delimiter) {
   return [str10, "", ""];
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/uploads.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/uploads.mjs
 var isResponseLike = (value) => value != null && typeof value === "object" && typeof value.url === "string" && typeof value.blob === "function";
 var isFileLike2 = (value) => value != null && typeof value === "object" && typeof value.name === "string" && typeof value.lastModified === "number" && isBlobLike(value);
 var isBlobLike = (value) => value != null && typeof value === "object" && typeof value.size === "number" && typeof value.type === "string" && typeof value.text === "function" && typeof value.slice === "function" && typeof value.arrayBuffer === "function";
@@ -36386,7 +36417,7 @@ var addFormValue = async (form, key, value) => {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/core.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/core.mjs
 var __classPrivateFieldSet6 = function(receiver, state, value, kind2, f2) {
   if (kind2 === "m") throw new TypeError("Private method is not writable");
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a setter");
@@ -37157,7 +37188,7 @@ function isObj(obj) {
   return obj != null && typeof obj === "object" && !Array.isArray(obj);
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/pagination.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/pagination.mjs
 var Page = class extends AbstractPage {
   constructor(client, response, body2, options) {
     super(client, response, body2, options);
@@ -37219,14 +37250,14 @@ var CursorPage = class extends AbstractPage {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resource.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resource.mjs
 var APIResource = class {
   constructor(client) {
     this._client = client;
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/chat/completions/messages.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/chat/completions/messages.mjs
 var Messages = class extends APIResource {
   list(completionId, query = {}, options) {
     if (isRequestOptions(query)) {
@@ -37236,7 +37267,7 @@ var Messages = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/chat/completions/completions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/chat/completions/completions.mjs
 var Completions = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -37301,7 +37332,7 @@ var ChatCompletionStoreMessagesPage = class extends CursorPage {
 Completions.ChatCompletionsPage = ChatCompletionsPage;
 Completions.Messages = Messages;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/chat/chat.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/chat/chat.mjs
 var Chat = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -37311,7 +37342,7 @@ var Chat = class extends APIResource {
 Chat.Completions = Completions;
 Chat.ChatCompletionsPage = ChatCompletionsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/audio/speech.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/audio/speech.mjs
 var Speech = class extends APIResource {
   /**
    * Generates audio from the input text.
@@ -37338,7 +37369,7 @@ var Speech = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/audio/transcriptions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/audio/transcriptions.mjs
 var Transcriptions = class extends APIResource {
   create(body2, options) {
     return this._client.post("/audio/transcriptions", multipartFormRequestOptions({
@@ -37350,14 +37381,14 @@ var Transcriptions = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/audio/translations.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/audio/translations.mjs
 var Translations = class extends APIResource {
   create(body2, options) {
     return this._client.post("/audio/translations", multipartFormRequestOptions({ body: body2, ...options, __metadata: { model: body2.model } }));
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/audio/audio.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/audio/audio.mjs
 var Audio = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -37370,7 +37401,7 @@ Audio.Transcriptions = Transcriptions;
 Audio.Translations = Translations;
 Audio.Speech = Speech;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/batches.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/batches.mjs
 var Batches = class extends APIResource {
   /**
    * Creates and executes a batch from an uploaded file of requests
@@ -37403,7 +37434,7 @@ var BatchesPage = class extends CursorPage {
 };
 Batches.BatchesPage = BatchesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/EventStream.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/EventStream.mjs
 var __classPrivateFieldSet7 = function(receiver, state, value, kind2, f2) {
   if (kind2 === "m") throw new TypeError("Private method is not writable");
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a setter");
@@ -37603,7 +37634,7 @@ _EventStream_connectedPromise = /* @__PURE__ */ new WeakMap(), _EventStream_reso
   return this._emit("error", new OpenAIError(String(error)));
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/AssistantStream.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/AssistantStream.mjs
 var __classPrivateFieldGet9 = function(receiver, state, kind2, f2) {
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a getter");
   if (typeof state === "function" ? receiver !== state || !f2 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
@@ -38151,7 +38182,7 @@ _AssistantStream_addEvent = function _AssistantStream_addEvent2(event) {
 function assertNever(_x) {
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/assistants.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/assistants.mjs
 var Assistants = class extends APIResource {
   /**
    * Create an assistant with a model and instructions.
@@ -38234,12 +38265,12 @@ var AssistantsPage = class extends CursorPage {
 };
 Assistants.AssistantsPage = AssistantsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/RunnableFunction.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/RunnableFunction.mjs
 function isRunnableFunctionWithParse(fn) {
   return typeof fn.parse === "function";
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/chatCompletionUtils.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/chatCompletionUtils.mjs
 var isAssistantMessage = (message) => {
   return message?.role === "assistant";
 };
@@ -38250,7 +38281,7 @@ var isToolMessage = (message) => {
   return message?.role === "tool";
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/parser.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/parser.mjs
 function isAutoParsableResponseFormat(response_format) {
   return response_format?.["$brand"] === "auto-parseable-response-format";
 }
@@ -38343,7 +38374,7 @@ function validateInputTools(tools) {
   }
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/AbstractChatCompletionRunner.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/AbstractChatCompletionRunner.mjs
 var __classPrivateFieldGet10 = function(receiver, state, kind2, f2) {
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a getter");
   if (typeof state === "function" ? receiver !== state || !f2 : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
@@ -38689,7 +38720,7 @@ _AbstractChatCompletionRunner_instances = /* @__PURE__ */ new WeakSet(), _Abstra
   return typeof rawContent === "string" ? rawContent : rawContent === void 0 ? "undefined" : JSON.stringify(rawContent);
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/ChatCompletionRunner.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/ChatCompletionRunner.mjs
 var ChatCompletionRunner = class _ChatCompletionRunner extends AbstractChatCompletionRunner {
   /** @deprecated - please use `runTools` instead. */
   static runFunctions(client, params, options) {
@@ -38718,7 +38749,7 @@ var ChatCompletionRunner = class _ChatCompletionRunner extends AbstractChatCompl
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/_vendor/partial-json-parser/parser.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/_vendor/partial-json-parser/parser.mjs
 var STR = 1;
 var NUM = 2;
 var ARR = 4;
@@ -38930,7 +38961,7 @@ var _parseJSON = (jsonString, allow) => {
 };
 var partialParse = (input) => parseJSON(input, Allow.ALL ^ Allow.NUM);
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/ChatCompletionStream.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/ChatCompletionStream.mjs
 var __classPrivateFieldSet9 = function(receiver, state, value, kind2, f2) {
   if (kind2 === "m") throw new TypeError("Private method is not writable");
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a setter");
@@ -39421,7 +39452,7 @@ function assertIsEmpty(obj) {
 function assertNever2(_x) {
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/ChatCompletionStreamingRunner.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/ChatCompletionStreamingRunner.mjs
 var ChatCompletionStreamingRunner = class _ChatCompletionStreamingRunner extends ChatCompletionStream {
   static fromReadableStream(stream) {
     const runner = new _ChatCompletionStreamingRunner(null);
@@ -39452,7 +39483,7 @@ var ChatCompletionStreamingRunner = class _ChatCompletionStreamingRunner extends
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/chat/completions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/chat/completions.mjs
 var Completions2 = class extends APIResource {
   parse(body2, options) {
     validateInputTools(body2.tools);
@@ -39484,7 +39515,7 @@ var Completions2 = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/chat/chat.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/chat/chat.mjs
 var Chat2 = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39495,7 +39526,7 @@ var Chat2 = class extends APIResource {
   Chat3.Completions = Completions2;
 })(Chat2 || (Chat2 = {}));
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/realtime/sessions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/realtime/sessions.mjs
 var Sessions = class extends APIResource {
   /**
    * Create an ephemeral API token for use in client-side applications with the
@@ -39521,7 +39552,7 @@ var Sessions = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/realtime/transcription-sessions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/realtime/transcription-sessions.mjs
 var TranscriptionSessions = class extends APIResource {
   /**
    * Create an ephemeral API token for use in client-side applications with the
@@ -39547,7 +39578,7 @@ var TranscriptionSessions = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/realtime/realtime.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/realtime/realtime.mjs
 var Realtime = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39558,7 +39589,7 @@ var Realtime = class extends APIResource {
 Realtime.Sessions = Sessions;
 Realtime.TranscriptionSessions = TranscriptionSessions;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/threads/messages.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/threads/messages.mjs
 var Messages2 = class extends APIResource {
   /**
    * Create a message.
@@ -39621,7 +39652,7 @@ var MessagesPage = class extends CursorPage {
 };
 Messages2.MessagesPage = MessagesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/threads/runs/steps.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/threads/runs/steps.mjs
 var Steps = class extends APIResource {
   retrieve(threadId, runId, stepId, query = {}, options) {
     if (isRequestOptions(query)) {
@@ -39648,7 +39679,7 @@ var RunStepsPage = class extends CursorPage {
 };
 Steps.RunStepsPage = RunStepsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/threads/runs/runs.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/threads/runs/runs.mjs
 var Runs = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39806,7 +39837,7 @@ Runs.RunsPage = RunsPage;
 Runs.Steps = Steps;
 Runs.RunStepsPage = RunStepsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/threads/threads.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/threads/threads.mjs
 var Threads = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39886,7 +39917,7 @@ Threads.RunsPage = RunsPage;
 Threads.Messages = Messages2;
 Threads.MessagesPage = MessagesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/beta/beta.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/beta/beta.mjs
 var Beta = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39901,14 +39932,14 @@ Beta.Assistants = Assistants;
 Beta.AssistantsPage = AssistantsPage;
 Beta.Threads = Threads;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/completions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/completions.mjs
 var Completions3 = class extends APIResource {
   create(body2, options) {
     return this._client.post("/completions", { body: body2, ...options, stream: body2.stream ?? false });
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/containers/files/content.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/containers/files/content.mjs
 var Content = class extends APIResource {
   /**
    * Retrieve Container File Content
@@ -39922,7 +39953,7 @@ var Content = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/containers/files/files.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/containers/files/files.mjs
 var Files = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -39967,7 +39998,7 @@ var FileListResponsesPage = class extends CursorPage {
 Files.FileListResponsesPage = FileListResponsesPage;
 Files.Content = Content;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/containers/containers.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/containers/containers.mjs
 var Containers = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40007,7 +40038,7 @@ Containers.ContainerListResponsesPage = ContainerListResponsesPage;
 Containers.Files = Files;
 Containers.FileListResponsesPage = FileListResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/embeddings.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/embeddings.mjs
 var Embeddings = class extends APIResource {
   /**
    * Creates an embedding vector representing the input text.
@@ -40050,7 +40081,7 @@ var Embeddings = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/evals/runs/output-items.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/evals/runs/output-items.mjs
 var OutputItems = class extends APIResource {
   /**
    * Get an evaluation run output item by ID.
@@ -40069,7 +40100,7 @@ var OutputItemListResponsesPage = class extends CursorPage {
 };
 OutputItems.OutputItemListResponsesPage = OutputItemListResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/evals/runs/runs.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/evals/runs/runs.mjs
 var Runs2 = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40114,7 +40145,7 @@ Runs2.RunListResponsesPage = RunListResponsesPage;
 Runs2.OutputItems = OutputItems;
 Runs2.OutputItemListResponsesPage = OutputItemListResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/evals/evals.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/evals/evals.mjs
 var Evals = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40162,7 +40193,7 @@ Evals.EvalListResponsesPage = EvalListResponsesPage;
 Evals.Runs = Runs2;
 Evals.RunListResponsesPage = RunListResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/files.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/files.mjs
 var Files2 = class extends APIResource {
   /**
    * Upload a file that can be used across various endpoints. Individual files can be
@@ -40249,11 +40280,11 @@ var FileObjectsPage = class extends CursorPage {
 };
 Files2.FileObjectsPage = FileObjectsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/methods.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/methods.mjs
 var Methods = class extends APIResource {
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/alpha/graders.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/alpha/graders.mjs
 var Graders = class extends APIResource {
   /**
    * Run a grader.
@@ -40298,7 +40329,7 @@ var Graders = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/alpha/alpha.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/alpha/alpha.mjs
 var Alpha = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40307,7 +40338,7 @@ var Alpha = class extends APIResource {
 };
 Alpha.Graders = Graders;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/checkpoints/permissions.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/checkpoints/permissions.mjs
 var Permissions = class extends APIResource {
   /**
    * **NOTE:** Calling this endpoint requires an [admin API key](../admin-api-keys).
@@ -40361,7 +40392,7 @@ var PermissionCreateResponsesPage = class extends Page {
 };
 Permissions.PermissionCreateResponsesPage = PermissionCreateResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/checkpoints/checkpoints.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/checkpoints/checkpoints.mjs
 var Checkpoints = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40371,7 +40402,7 @@ var Checkpoints = class extends APIResource {
 Checkpoints.Permissions = Permissions;
 Checkpoints.PermissionCreateResponsesPage = PermissionCreateResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/jobs/checkpoints.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/jobs/checkpoints.mjs
 var Checkpoints2 = class extends APIResource {
   list(fineTuningJobId, query = {}, options) {
     if (isRequestOptions(query)) {
@@ -40384,7 +40415,7 @@ var FineTuningJobCheckpointsPage = class extends CursorPage {
 };
 Checkpoints2.FineTuningJobCheckpointsPage = FineTuningJobCheckpointsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/jobs/jobs.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/jobs/jobs.mjs
 var Jobs = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40489,7 +40520,7 @@ Jobs.FineTuningJobEventsPage = FineTuningJobEventsPage;
 Jobs.Checkpoints = Checkpoints2;
 Jobs.FineTuningJobCheckpointsPage = FineTuningJobCheckpointsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/fine-tuning/fine-tuning.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/fine-tuning/fine-tuning.mjs
 var FineTuning = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40506,11 +40537,11 @@ FineTuning.FineTuningJobEventsPage = FineTuningJobEventsPage;
 FineTuning.Checkpoints = Checkpoints;
 FineTuning.Alpha = Alpha;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/graders/grader-models.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/graders/grader-models.mjs
 var GraderModels = class extends APIResource {
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/graders/graders.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/graders/graders.mjs
 var Graders2 = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -40519,7 +40550,7 @@ var Graders2 = class extends APIResource {
 };
 Graders2.GraderModels = GraderModels;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/images.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/images.mjs
 var Images = class extends APIResource {
   /**
    * Creates a variation of a given image. This endpoint only supports `dall-e-2`.
@@ -40565,7 +40596,7 @@ var Images = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/models.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/models.mjs
 var Models = class extends APIResource {
   /**
    * Retrieves a model instance, providing basic information about the model such as
@@ -40593,7 +40624,7 @@ var ModelsPage = class extends Page {
 };
 Models.ModelsPage = ModelsPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/moderations.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/moderations.mjs
 var Moderations = class extends APIResource {
   /**
    * Classifies if text and/or image inputs are potentially harmful. Learn more in
@@ -40604,7 +40635,7 @@ var Moderations = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/ResponsesParser.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/ResponsesParser.mjs
 function maybeParseResponse(response, params) {
   if (!params || !hasAutoParseableInput2(params)) {
     return {
@@ -40725,7 +40756,7 @@ function addOutputText(rsp) {
   rsp.output_text = texts.join("");
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/responses/input-items.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/responses/input-items.mjs
 var InputItems = class extends APIResource {
   list(responseId, query = {}, options) {
     if (isRequestOptions(query)) {
@@ -40738,7 +40769,7 @@ var InputItems = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/responses/ResponseStream.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/responses/ResponseStream.mjs
 var __classPrivateFieldSet10 = function(receiver, state, value, kind2, f2) {
   if (kind2 === "m") throw new TypeError("Private method is not writable");
   if (kind2 === "a" && !f2) throw new TypeError("Private accessor was defined without a setter");
@@ -40987,7 +41018,7 @@ function finalizeResponse(snapshot, params) {
   return maybeParseResponse(snapshot, params);
 }
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/responses/responses.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/responses/responses.mjs
 var Responses = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -41056,7 +41087,7 @@ var ResponseItemsPage = class extends CursorPage {
 };
 Responses.InputItems = InputItems;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/uploads/parts.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/uploads/parts.mjs
 var Parts = class extends APIResource {
   /**
    * Adds a
@@ -41076,7 +41107,7 @@ var Parts = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/uploads/uploads.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/uploads/uploads.mjs
 var Uploads = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -41133,7 +41164,7 @@ var Uploads = class extends APIResource {
 };
 Uploads.Parts = Parts;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/lib/Util.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/lib/Util.mjs
 var allSettledWithThrow = async (promises) => {
   const results = await Promise.allSettled(promises);
   const rejected = results.filter((result) => result.status === "rejected");
@@ -41152,7 +41183,7 @@ var allSettledWithThrow = async (promises) => {
   return values;
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/vector-stores/files.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/vector-stores/files.mjs
 var Files3 = class extends APIResource {
   /**
    * Create a vector store file by attaching a
@@ -41284,7 +41315,7 @@ var FileContentResponsesPage = class extends Page {
 Files3.VectorStoreFilesPage = VectorStoreFilesPage;
 Files3.FileContentResponsesPage = FileContentResponsesPage;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/vector-stores/file-batches.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/vector-stores/file-batches.mjs
 var FileBatches = class extends APIResource {
   /**
    * Create a vector store file batch.
@@ -41395,7 +41426,7 @@ var FileBatches = class extends APIResource {
   }
 };
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/resources/vector-stores/vector-stores.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/resources/vector-stores/vector-stores.mjs
 var VectorStores = class extends APIResource {
   constructor() {
     super(...arguments);
@@ -41474,7 +41505,7 @@ VectorStores.VectorStoreFilesPage = VectorStoreFilesPage;
 VectorStores.FileContentResponsesPage = FileContentResponsesPage;
 VectorStores.FileBatches = FileBatches;
 
-// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.3/node_modules/openai/index.mjs
+// ../../node_modules/.pnpm/openai@4.104.0_ws@8.21.0/node_modules/openai/index.mjs
 var _a;
 var OpenAI = class extends APIClient {
   /**
@@ -41659,7 +41690,7 @@ async function streamCompletion(client, params, signal, onText) {
     const detail = redactSecrets(
       String((typeof raw === "string" ? raw : raw?.error || raw?.message) || err?.message || String(e2))
     );
-    const msg = typeof err?.status === "number" ? `Gateway ${err.status}: ${detail}` : detail;
+    const msg = typeof err?.status === "number" ? `${statusPrefix(err.status, err.code)}: ${detail}` : detail;
     alog("stream:create-error", msg);
     throw new Error(msg);
   }
@@ -41695,30 +41726,40 @@ async function streamCompletion(client, params, signal, onText) {
   alog("stream:end", { chunks: chunkN, contentLen: content.length, toolCalls: toolCalls.length, finishReason, usage });
   return { content, toolCalls, usage, finishReason };
 }
+var LOCAL_FAILURE = {
+  refused: "model_route_refused",
+  unreachable: "custom_provider_unreachable"
+};
+function statusPrefix(status, code2) {
+  if (code2 === LOCAL_FAILURE.refused) return `Status ${status} (refused locally, nothing was sent)`;
+  if (code2 === LOCAL_FAILURE.unreachable) return `Status ${status} (custom provider unreachable)`;
+  return `Gateway ${status}`;
+}
+async function gatewayRequest(auth, opts, url, init2) {
+  const headers = new Headers(init2?.headers);
+  alog("gateway:token-wait");
+  const token = await auth.getToken().catch(() => null);
+  if (token) headers.set("Authorization", `Bearer ${token}`);
+  else headers.delete("Authorization");
+  if (opts.origin) headers.set("X-Prompd-Origin", opts.origin);
+  alog("gateway:fetch", { url, hasToken: !!token });
+  try {
+    const res = await fetch(url, { ...init2, headers });
+    alog("gateway:status", res.status, res.statusText);
+    return res;
+  } catch (e2) {
+    alog("gateway:fetch-error", String(e2?.message || e2));
+    throw e2;
+  }
+}
 function createChatClient(auth, opts = {}) {
   return new openai_default({
     baseURL: gatewayBaseURL(),
     // Real key lives server-side; this placeholder is replaced per-request by the
-    // Clerk token in the custom fetch below. The SDK requires a non-empty value.
+    // Clerk token in gatewayRequest. The SDK requires a non-empty value.
     apiKey: "prompd-gateway",
     dangerouslyAllowBrowser: true,
-    fetch: async (url, init2) => {
-      const headers = new Headers(init2?.headers);
-      alog("gateway:token-wait");
-      const token = await auth.getToken().catch(() => null);
-      if (token) headers.set("Authorization", `Bearer ${token}`);
-      else headers.delete("Authorization");
-      if (opts.origin) headers.set("X-Prompd-Origin", opts.origin);
-      alog("gateway:fetch", { url: String(url), hasToken: !!token });
-      try {
-        const res = await fetch(url, { ...init2, headers });
-        alog("gateway:status", res.status, res.statusText);
-        return res;
-      } catch (e2) {
-        alog("gateway:fetch-error", String(e2?.message || e2));
-        throw e2;
-      }
-    }
+    fetch: (url, init2) => gatewayRequest(auth, opts, String(url), init2)
   });
 }
 
@@ -41875,6 +41916,7 @@ var BUILTIN_NAMESPACES = {
   sidecar_fs_read_file: "sidecar",
   sidecar_fs_write_file: "sidecar",
   sidecar_fs_read_bytes: "sidecar",
+  sidecar_fs_write_bytes: "sidecar",
   sidecar_fs_list_dir: "sidecar",
   sidecar_fs_delete: "sidecar",
   sidecar_shell_exec: "sidecar",
@@ -46522,7 +46564,7 @@ var FLAG_TO_KEY = {
   "--default-model": "defaultModel",
   "--name": "name"
 };
-var DEFAULT_GUEST_IMAGE2 = "prompd/corenel-sandbox:0.8.4";
+var DEFAULT_GUEST_IMAGE2 = "prompd/corenel-sandbox:0.8.6";
 function parseArgsWithProvenance(argv) {
   const explicit = /* @__PURE__ */ new Set();
   for (const a2 of argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/sidecar",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "type": "module",
   "license": "Elastic-2.0",
   "description": "Prompd sidecar — a local capability server. Run it next to Prompd (prompd.app) so the browser app can reach your machine: local LLMs (Ollama/LM Studio/vLLM) without CORS, your filesystem, and (opt-in) shell.",
@@ -36,10 +36,10 @@
     "esbuild": "^0.21.5",
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
-    "@corenel/protocol": "0.7.2",
-    "@corenel/tools-node": "0.3.5",
+    "@corenel/tools-node": "0.3.6",
+    "@corenel/protocol": "0.7.3",
     "@corenel/crew": "0.0.0",
-    "@corenel/harness": "0.7.3"
+    "@corenel/harness": "0.7.4"
   },
   "repository": {
     "type": "git",