@daniel156161/prism 0.2.76 → 0.2.78

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/custom-provider-anthropic/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-extension-custom-provider-anthropic",
   "private": true,
-  "version": "0.83.0",
+  "version": "0.84.0",
   "type": "module",
   "scripts": {
     "clean": "echo 'nothing to clean'",

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts

@@ -274,7 +274,7 @@ async function loginGitLab(callbacks: OAuthLoginCallbacks): Promise<OAuthCredent
 	};
 }
 
-async function refreshGitLabToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {
+async function refreshGitLabToken(credentials: OAuthCredentials, signal: AbortSignal): Promise<OAuthCredentials> {
 	const response = await fetch(`${GITLAB_COM_URL}/oauth/token`, {
 		method: "POST",
 		headers: { "Content-Type": "application/x-www-form-urlencoded" },
@@ -283,6 +283,7 @@ async function refreshGitLabToken(credentials: OAuthCredentials): Promise<OAuthC
 			grant_type: "refresh_token",
 			refresh_token: credentials.refresh,
 		}).toString(),
+		signal,
 	});
 	if (!response.ok) throw new Error(`Token refresh failed: ${await response.text()}`);
 	const data = (await response.json()) as {

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/custom-provider-gitlab-duo/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-extension-custom-provider-gitlab-duo",
   "private": true,
-  "version": "0.83.0",
+  "version": "0.84.0",
   "type": "module",
   "scripts": {
     "clean": "echo 'nothing to clean'",

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/doom-overlay/wad-finder.ts

@@ -1,11 +1,12 @@
 import { existsSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { gunzipSync } from "node:zlib";
 
 // Get the bundled WAD path (relative to this module)
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const BUNDLED_WAD = join(__dirname, "doom1.wad");
-const WAD_URL = "https://distro.ibiblio.org/slitaz/sources/packages/d/doom1.wad";
+const WAD_URL = "https://www.gamers.org/pub/idgames/idstuff/doom/doom-1.8.wad.gz";
 
 const DEFAULT_WAD_PATHS = ["./doom1.wad", "./DOOM1.WAD", "~/doom1.wad", "~/.doom/doom1.wad"];
 
@@ -42,8 +43,11 @@ export async function ensureWadFile(): Promise<string | null> {
 		if (!response.ok) {
 			throw new Error(`HTTP ${response.status}`);
 		}
-		const buffer = await response.arrayBuffer();
-		writeFileSync(BUNDLED_WAD, Buffer.from(buffer));
+		const wad = gunzipSync(Buffer.from(await response.arrayBuffer()));
+		if (wad.subarray(0, 4).toString("ascii") !== "IWAD") {
+			throw new Error("Downloaded file is not a valid IWAD");
+		}
+		writeFileSync(BUNDLED_WAD, wad);
 		return BUNDLED_WAD;
 	} catch {
 		return null;

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/gondolin/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "pi-extension-gondolin",
-	"version": "0.83.0",
+	"version": "0.84.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "pi-extension-gondolin",
-			"version": "0.83.0",
+			"version": "0.84.0",
 			"dependencies": {
 				"@earendil-works/gondolin": "0.12.0"
 			}

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/gondolin/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-gondolin",
 	"private": true,
-	"version": "0.83.0",
+	"version": "0.84.0",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/handoff.ts

@@ -13,8 +13,7 @@
  */
 
 import type { AgentMessage } from "@earendil-works/pi-agent-core";
-import { uuidv7 } from "@earendil-works/pi-ai";
-import { complete, type Message } from "@earendil-works/pi-ai/compat";
+import { type Message, uuidv7 } from "@earendil-works/pi-ai";
 import type { ExtensionAPI, SessionEntry } from "@earendil-works/pi-coding-agent";
 import { BorderedLoader, convertToLlm, serializeConversation } from "@earendil-works/pi-coding-agent";
 
@@ -118,11 +117,6 @@ export default function (pi: ExtensionAPI) {
 				loader.onAbort = () => done(null);
 
 				const doGenerate = async () => {
-					const auth = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model!);
-					if (!auth.ok || !auth.apiKey) {
-						throw new Error(auth.ok ? `No API key for ${ctx.model!.provider}` : auth.error);
-					}
-
 					const userMessage: Message = {
 						role: "user",
 						content: [
@@ -134,13 +128,10 @@ export default function (pi: ExtensionAPI) {
 						timestamp: Date.now(),
 					};
 
-					const response = await complete(
+					const response = await ctx.modelRegistry.complete(
 						ctx.model!,
 						{ systemPrompt: SYSTEM_PROMPT, messages: [userMessage] },
 						{
-							apiKey: auth.apiKey,
-							headers: auth.headers,
-							env: auth.env,
 							signal: loader.signal,
 							cacheRetention: "none",
 							sessionId: uuidv7(),

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/qna.ts

@@ -7,7 +7,7 @@
  * 3. Loads the result into the editor for user to fill in answers
  */
 
-import { complete, type UserMessage } from "@earendil-works/pi-ai/compat";
+import type { UserMessage } from "@earendil-works/pi-ai";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { BorderedLoader } from "@earendil-works/pi-coding-agent";
 
@@ -77,20 +77,16 @@ export default function (pi: ExtensionAPI) {
 
 				// Do the work
 				const doExtract = async () => {
-					const auth = await ctx.modelRegistry.getApiKeyAndHeaders(ctx.model!);
-					if (!auth.ok || !auth.apiKey) {
-						throw new Error(auth.ok ? `No API key for ${ctx.model!.provider}` : auth.error);
-					}
 					const userMessage: UserMessage = {
 						role: "user",
 						content: [{ type: "text", text: lastAssistantText! }],
 						timestamp: Date.now(),
 					};
 
-					const response = await complete(
+					const response = await ctx.modelRegistry.complete(
 						ctx.model!,
 						{ systemPrompt: SYSTEM_PROMPT, messages: [userMessage] },
-						{ apiKey: auth.apiKey, headers: auth.headers, env: auth.env, signal: loader.signal },
+						{ signal: loader.signal },
 					);
 
 					if (response.stopReason === "aborted") {

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/sandbox/package-lock.json

@@ -1,12 +1,12 @@
 {
 	"name": "pi-extension-sandbox",
-	"version": "1.13.0",
+	"version": "1.14.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "pi-extension-sandbox",
-			"version": "1.13.0",
+			"version": "1.14.0",
 			"dependencies": {
 				"@anthropic-ai/sandbox-runtime": "^0.0.26"
 			}

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/sandbox/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "pi-extension-sandbox",
 	"private": true,
-	"version": "1.13.0",
+	"version": "1.14.0",
 	"type": "module",
 	"scripts": {
 		"clean": "echo 'nothing to clean'",

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/summarize.ts

@@ -1,5 +1,4 @@
 import { uuidv7 } from "@earendil-works/pi-ai";
-import { complete, getModel } from "@earendil-works/pi-ai/compat";
 import type { ExtensionAPI, ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import { DynamicBorder, getMarkdownTheme } from "@earendil-works/pi-coding-agent";
 import { Container, Markdown, matchesKey, Text } from "@earendil-works/pi-tui";
@@ -161,20 +160,13 @@ export default function (pi: ExtensionAPI) {
 				ctx.ui.notify("Preparing summary...", "info");
 			}
 
-			const model = getModel("openai", "gpt-5.2");
-			if (!model && ctx.hasUI) {
-				ctx.ui.notify("Model openai/gpt-5.2 not found", "warning");
-			}
-
-			const auth = model ? await ctx.modelRegistry.getApiKeyAndHeaders(model) : undefined;
-			if (auth && !auth.ok && ctx.hasUI) {
-				ctx.ui.notify(auth.error, "warning");
-			}
-			if (auth?.ok && !auth.apiKey && ctx.hasUI) {
-				ctx.ui.notify("No API key for openai/gpt-5.2", "warning");
+			const model = ctx.modelRegistry.find("openai", "gpt-5.2");
+			if (!model) {
+				if (ctx.hasUI) ctx.ui.notify("Model openai/gpt-5.2 not found", "warning");
+				return;
 			}
-
-			if (!model || !auth?.ok || !auth.apiKey) {
+			if (!ctx.modelRegistry.hasConfiguredAuth(model)) {
+				if (ctx.hasUI) ctx.ui.notify("No authentication configured for openai/gpt-5.2", "warning");
 				return;
 			}
 
@@ -186,13 +178,10 @@ export default function (pi: ExtensionAPI) {
 				},
 			];
 
-			const response = await complete(
+			const response = await ctx.modelRegistry.complete(
 				model,
 				{ messages: summaryMessages },
 				{
-					apiKey: auth.apiKey,
-					headers: auth.headers,
-					env: auth.env,
 					reasoningEffort: "high",
 					cacheRetention: "none",
 					sessionId: uuidv7(),

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/with-deps/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "pi-extension-with-deps",
-  "version": "0.83.0",
+  "version": "0.84.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pi-extension-with-deps",
-      "version": "0.83.0",
+      "version": "0.84.0",
       "dependencies": {
         "ms": "^2.1.3"
       },

package/node_modules/@earendil-works/pi-coding-agent/examples/extensions/with-deps/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-extension-with-deps",
   "private": true,
-  "version": "0.83.0",
+  "version": "0.84.0",
   "type": "module",
   "scripts": {
     "clean": "echo 'nothing to clean'",

package/node_modules/@earendil-works/pi-coding-agent/examples/rpc-extension-ui.ts

@@ -18,7 +18,16 @@ import { spawn } from "node:child_process";
 import { dirname, join } from "node:path";
 import * as readline from "node:readline";
 import { fileURLToPath } from "node:url";
-import { type Component, Container, Input, matchesKey, ProcessTerminal, SelectList, TUI } from "@earendil-works/pi-tui";
+import {
+	type Component,
+	Container,
+	Input,
+	matchesKey,
+	ProcessTerminal,
+	SelectList,
+	type TUI,
+	TuiMainScreen,
+} from "@earendil-works/pi-tui";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -267,7 +276,7 @@ async function main() {
 	// -- TUI setup --
 
 	const terminal = new ProcessTerminal();
-	const tui = new TUI(terminal);
+	const tui: TUI = new TuiMainScreen(terminal);
 
 	const outputLog = new OutputLog();
 	const loadingIndicator = new LoadingIndicator();

package/node_modules/@earendil-works/pi-coding-agent/examples/sdk/02-custom-model.ts

@@ -4,13 +4,12 @@
  * Shows how to select a specific model and thinking level.
  */
 
-import { getModel } from "@earendil-works/pi-ai/compat";
 import { createAgentSession, ModelRuntime } from "@earendil-works/pi-coding-agent";
 
 const modelRuntime = await ModelRuntime.create();
 
 // Option 1: Find a specific built-in model by provider/id
-const opus = getModel("anthropic", "claude-opus-4-5");
+const opus = modelRuntime.getModel("anthropic", "claude-opus-4-5");
 if (opus) {
 	console.log(`Found model: ${opus.provider}/${opus.id}`);
 }

package/node_modules/@earendil-works/pi-coding-agent/examples/sdk/09-api-keys-and-oauth.ts

@@ -25,7 +25,7 @@ const { session: customAuthSession } = await createAgentSession({
 console.log("Session with custom auth and models locations");
 customAuthSession.dispose();
 
-modelRuntime.setRuntimeApiKey("anthropic", "sk-my-temp-key");
+await modelRuntime.setRuntimeApiKey("anthropic", "sk-my-temp-key");
 const { session: runtimeKeySession } = await createAgentSession({
 	sessionManager: SessionManager.inMemory(),
 	modelRuntime,

package/node_modules/@earendil-works/pi-coding-agent/examples/sdk/12-full-control.ts

@@ -19,7 +19,7 @@ const modelRuntime = await ModelRuntime.create({
 	modelsPath: "/tmp/my-agent/models.json",
 });
 if (process.env.MY_ANTHROPIC_KEY) {
-	modelRuntime.setRuntimeApiKey("anthropic", process.env.MY_ANTHROPIC_KEY);
+	await modelRuntime.setRuntimeApiKey("anthropic", process.env.MY_ANTHROPIC_KEY);
 }
 
 const model = getModel("anthropic", "claude-sonnet-4-5");

package/node_modules/@earendil-works/pi-coding-agent/examples/sdk/README.md

@@ -71,7 +71,7 @@ const customRuntime = await ModelRuntime.create({
   authPath: "/my/app/auth.json",
   modelsPath: "/my/app/models.json",
 });
-customRuntime.setRuntimeApiKey("anthropic", process.env.MY_KEY!);
+await customRuntime.setRuntimeApiKey("anthropic", process.env.MY_KEY!);
 
 const resourceLoader = new DefaultResourceLoader({
   systemPromptOverride: () => "You are helpful.",

package/node_modules/@earendil-works/pi-coding-agent/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-coding-agent",
-	"version": "0.83.0",
+	"version": "0.84.0",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -18,6 +18,10 @@
 		},
 		"./rpc-entry": {
 			"import": "./dist/rpc-entry.js"
+		},
+		"./client": {
+			"types": "./dist/client/index.d.ts",
+			"import": "./dist/client/index.js"
 		}
 	},
 	"files": [
@@ -31,7 +35,7 @@
 	"scripts": {
 		"clean": "shx rm -rf dist",
 		"build": "tsgo -p tsconfig.build.json && shx chmod +x dist/cli.js dist/rpc-entry.js && npm run copy-assets",
-		"build:binary": "npm --prefix ../tui run build && npm --prefix ../ai run build && npm --prefix ../agent run build && npm run build && bun build --compile ./dist/bun/cli.js ./src/utils/image-resize-worker.ts --outfile dist/pi && npm run copy-binary-assets",
+		"build:binary": "npm --prefix ../tui run build && npm --prefix ../telemetry run build && npm --prefix ../ai run build && npm --prefix ../agent run build && npm --prefix ../protocol run build && npm --prefix ../client run build && npm run build && bun build --compile ./dist/bun/cli.js ./src/utils/image-resize-worker.ts --outfile dist/pi && npm run copy-binary-assets",
 		"copy-assets": "shx mkdir -p dist/modes/interactive/theme && shx cp src/modes/interactive/theme/*.json dist/modes/interactive/theme/ && shx mkdir -p dist/modes/interactive/assets && shx cp src/modes/interactive/assets/*.png dist/modes/interactive/assets/ && shx mkdir -p dist/core/export-html/vendor && shx cp src/core/export-html/template.html src/core/export-html/template.css src/core/export-html/template.js dist/core/export-html/ && shx cp src/core/export-html/vendor/*.js dist/core/export-html/vendor/",
 		"copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ && shx mkdir -p dist/theme && shx cp src/modes/interactive/theme/*.json dist/theme/ && shx mkdir -p dist/assets && shx cp src/modes/interactive/assets/*.png dist/assets/ && shx mkdir -p dist/export-html/vendor && shx cp src/core/export-html/template.html dist/export-html/ && shx cp src/core/export-html/vendor/*.js dist/export-html/vendor/ && shx cp -r docs dist/ && shx cp -r examples dist/ && shx cp ../../node_modules/@silvia-odwyer/photon-node/photon_rs_bg.wasm dist/",
 		"test": "vitest --run",
@@ -39,14 +43,17 @@
 		"prepublishOnly": "npm run clean && npm run build && npm run shrinkwrap"
 	},
 	"dependencies": {
-		"@earendil-works/pi-agent-core": "^0.83.0",
-		"@earendil-works/pi-ai": "^0.83.0",
-		"@earendil-works/pi-tui": "^0.83.0",
+		"@earendil-works/pi-agent-core": "^0.84.0",
+		"@earendil-works/pi-ai": "^0.84.0",
+		"@earendil-works/pi-client": "^0.84.0",
+		"@earendil-works/pi-protocol": "^0.84.0",
+		"@earendil-works/pi-tui": "^0.84.0",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "5.6.2",
 		"cross-spawn": "7.0.6",
 		"diff": "8.0.4",
 		"glob": "13.0.6",
+		"grok-mermaid": "0.2.2",
 		"highlight.js": "10.7.3",
 		"hosted-git-info": "9.0.3",
 		"ignore": "7.0.5",
@@ -55,7 +62,7 @@
 		"proper-lockfile": "4.1.2",
 		"semver": "7.8.0",
 		"typebox": "1.3.7",
-		"undici": "8.5.0",
+		"undici": "8.9.0",
 		"yaml": "2.9.0"
 	},
 	"overrides": {

package/node_modules/@earendil-works/pi-protocol/README.md

@@ -0,0 +1,69 @@
+# @earendil-works/pi-protocol
+
+Runtime-neutral schemas, types, CBOR encoding, and byte-stream framing for the experimental pi protocol.
+
+Protocol version `1` uses binary messages with this wire layout:
+
+1. A four-byte unsigned big-endian payload length.
+2. One definite-length CBOR item containing the message.
+
+The first client message is always `hello`, containing `PROTOCOL_VERSION`. Subsequent messages use correlated request/response envelopes and server event envelopes. Session and server snapshots are authoritative. Progress events are transient UI hints and must not be reduced into authoritative state. Transports complete authentication before protocol bytes are exchanged.
+
+Session lists contain `SessionMetadata`, the normalized durable metadata available without acquiring a session runtime. Only `id` and `createdAt` are required; `updatedAt`, `parentSessionId`, `sessionName`, and `cwd` are included when supported by the backing store. Runtime state such as phase, model, thinking level, attachment, and locking appears only in an acquired `SessionSnapshot`.
+
+## Validated message API
+
+`encodeClientMessage()` and `encodeServerMessage()` validate a message and return a complete framed `Uint8Array`. The incremental decoders accept arbitrary fragmentation or coalescing, so they work with streams, sockets, and custom byte transports.
+
+```ts
+import {
+  PROTOCOL_VERSION,
+  createServerMessageDecoder,
+  encodeClientMessage,
+  type ClientHello,
+} from "@earendil-works/pi-protocol";
+
+const hello: ClientHello = {
+  type: "hello",
+  version: PROTOCOL_VERSION,
+};
+
+transport.send(encodeClientMessage(hello));
+
+const decoder = createServerMessageDecoder({ maxFrameLength: 1024 * 1024 });
+for (const message of decoder.push(incomingChunk)) {
+  handleServerMessage(message);
+}
+decoder.end(); // Call when the byte stream closes to detect truncation.
+```
+
+`ClientMessageDecoder` and `ServerMessageDecoder` are also available directly. Schema violations, malformed CBOR, and invalid framing throw `ProtocolValidationError`. Validation errors do not retain rejected payloads.
+
+`parseClientMessage()` and `parseServerMessage()` only validate already-decoded values. They do not parse JSON strings.
+
+## Transport support
+
+Every transport carries the same complete bytes: `[uint32-be CBOR length][CBOR payload]`. Transports may split or coalesce those bytes arbitrarily.
+
+This package does not bundle a transport. Consumers provide a byte-stream transport that preserves byte order and reports stream closure. Custom transports must handle arbitrary frame fragmentation and coalescing.
+
+All transports are untrusted. Configure matching frame limits and enforce access controls appropriate for the transport before exposing a connection to the protocol. Unix sockets can use filesystem permissions, while network transports can authenticate during connection establishment.
+
+## Encoding and framing
+
+`encodeCbor()` and `decodeCbor()` implement the protocol's strict RFC 8949 subset. `encodeFrame()` and `FrameDecoder` handle framing independently of schemas and CBOR.
+
+The CBOR subset supports:
+
+- `null` and booleans
+- finite numbers, with integers restricted to JavaScript's safe range and non-integers encoded as float64
+- UTF-8 strings
+- `Uint8Array` byte strings
+- definite-length arrays
+- definite-length maps represented by objects with unique string keys
+
+Undefined object properties are omitted. JSON-valued protocol fields reject CBOR byte strings and non-plain objects. Top-level undefined, undefined array entries, sparse arrays, non-finite or unsafe numbers, tags, indefinite-length items, malformed UTF-8, trailing data, excessive nesting, and oversized values are rejected.
+
+Default limits are 16 MiB per CBOR payload/frame, 1,000,000 array elements or map entries, and 64 nested item levels. Options can configure these limits. A frame decoder validates the declared length before buffering payload bytes.
+
+All schemas reject unknown object properties. The protocol is experimental and has no compatibility guarantees.

package/node_modules/@earendil-works/pi-protocol/dist/cbor/decoder.d.ts

@@ -0,0 +1,4 @@
+import { type CborOptions } from "./options.ts";
+/** Decodes exactly one item from the protocol's strict RFC 8949 subset. */
+export declare function decodeCbor(bytes: Uint8Array, options?: CborOptions): unknown;
+//# sourceMappingURL=decoder.d.ts.map

package/node_modules/@earendil-works/pi-protocol/dist/cbor/decoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decoder.d.ts","sourceRoot":"","sources":["../../src/cbor/decoder.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,WAAW,EAKhB,MAAM,cAAc,CAAC;AAwJtB,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAO5E","sourcesContent":["import {\n\tCborError,\n\ttype CborOptions,\n\ttype ResolvedCborOptions,\n\tresolveOptions,\n\ttextDecoder,\n\tUINT32_BASE,\n} from \"./options.ts\";\n\nclass CborReader {\n\tprivate readonly bytes: Uint8Array;\n\tprivate offset = 0;\n\tprivate readonly options: ResolvedCborOptions;\n\n\tconstructor(bytes: Uint8Array, options: ResolvedCborOptions) {\n\t\tthis.bytes = bytes;\n\t\tthis.options = options;\n\t}\n\n\tdecode(): unknown {\n\t\tconst value = this.readItem(0);\n\t\tif (this.offset !== this.bytes.byteLength) throw new CborError(\"CBOR payload contains trailing data\");\n\t\treturn value;\n\t}\n\n\tprivate readItem(depth: number): unknown {\n\t\tif (depth > this.options.maxDepth) {\n\t\t\tthrow new CborError(`CBOR nesting depth exceeds configured limit of ${this.options.maxDepth}`);\n\t\t}\n\t\tconst initial = this.readByte();\n\t\tconst majorType = initial >>> 5;\n\t\tconst additionalInformation = initial & 0x1f;\n\n\t\tswitch (majorType) {\n\t\t\tcase 0:\n\t\t\t\treturn this.readArgument(additionalInformation);\n\t\t\tcase 1: {\n\t\t\t\tconst value = -1 - this.readArgument(additionalInformation);\n\t\t\t\tif (!Number.isSafeInteger(value)) throw new CborError(\"Decoded CBOR integer is outside the safe range\");\n\t\t\t\treturn value;\n\t\t\t}\n\t\t\tcase 2: {\n\t\t\t\tconst length = this.readLength(additionalInformation, \"byte string\", this.options.maxByteLength);\n\t\t\t\treturn new Uint8Array(this.readBytes(length));\n\t\t\t}\n\t\t\tcase 3: {\n\t\t\t\tconst length = this.readLength(additionalInformation, \"text string\", this.options.maxByteLength);\n\t\t\t\tconst bytes = this.readBytes(length);\n\t\t\t\ttry {\n\t\t\t\t\treturn textDecoder.decode(bytes);\n\t\t\t\t} catch (_error) {\n\t\t\t\t\tthrow new CborError(\"CBOR text string contains invalid UTF-8\");\n\t\t\t\t}\n\t\t\t}\n\t\t\tcase 4: {\n\t\t\t\tconst length = this.readLength(additionalInformation, \"array\", this.options.maxContainerLength);\n\t\t\t\tconst result: unknown[] = [];\n\t\t\t\tfor (let index = 0; index < length; index++) result.push(this.readItem(depth + 1));\n\t\t\t\treturn result;\n\t\t\t}\n\t\t\tcase 5: {\n\t\t\t\tconst length = this.readLength(additionalInformation, \"map\", this.options.maxContainerLength);\n\t\t\t\tconst result: Record<string, unknown> = {};\n\t\t\t\tconst keys = new Set<string>();\n\t\t\t\tfor (let index = 0; index < length; index++) {\n\t\t\t\t\tconst key = this.readItem(depth + 1);\n\t\t\t\t\tif (typeof key !== \"string\") throw new CborError(\"CBOR map keys must be strings\");\n\t\t\t\t\tif (keys.has(key)) throw new CborError(\"CBOR map contains a duplicate key\");\n\t\t\t\t\tkeys.add(key);\n\t\t\t\t\tObject.defineProperty(result, key, {\n\t\t\t\t\t\tconfigurable: true,\n\t\t\t\t\t\tenumerable: true,\n\t\t\t\t\t\tvalue: this.readItem(depth + 1),\n\t\t\t\t\t\twritable: true,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\treturn result;\n\t\t\t}\n\t\t\tcase 6:\n\t\t\t\tthrow new CborError(\"CBOR tags are not supported\");\n\t\t\tcase 7:\n\t\t\t\treturn this.readSimple(additionalInformation);\n\t\t\tdefault:\n\t\t\t\tthrow new CborError(\"Malformed CBOR major type\");\n\t\t}\n\t}\n\n\tprivate readSimple(additionalInformation: number): unknown {\n\t\tswitch (additionalInformation) {\n\t\t\tcase 20:\n\t\t\t\treturn false;\n\t\t\tcase 21:\n\t\t\t\treturn true;\n\t\t\tcase 22:\n\t\t\t\treturn null;\n\t\t\tcase 27: {\n\t\t\t\tconst bytes = this.readBytes(8);\n\t\t\t\tconst value = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getFloat64(0, false);\n\t\t\t\tif (!Number.isFinite(value)) throw new CborError(\"Decoded CBOR number must be finite\");\n\t\t\t\tif (Number.isInteger(value) && !Number.isSafeInteger(value)) {\n\t\t\t\t\tthrow new CborError(\"Decoded CBOR integer is outside the safe range\");\n\t\t\t\t}\n\t\t\t\treturn value;\n\t\t\t}\n\t\t\tcase 31:\n\t\t\t\tthrow new CborError(\"CBOR break marker is not supported\");\n\t\t\tdefault:\n\t\t\t\tthrow new CborError(\"Unsupported CBOR simple value or floating-point width\");\n\t\t}\n\t}\n\n\tprivate readLength(additionalInformation: number, kind: string, limit: number): number {\n\t\tif (additionalInformation === 31) throw new CborError(`Indefinite-length CBOR ${kind}s are not supported`);\n\t\tconst length = this.readArgument(additionalInformation);\n\t\tif (length > limit) throw new CborError(`CBOR ${kind} length exceeds configured limit of ${limit}`);\n\t\treturn length;\n\t}\n\n\tprivate readArgument(additionalInformation: number): number {\n\t\tif (additionalInformation < 24) return additionalInformation;\n\t\tswitch (additionalInformation) {\n\t\t\tcase 24:\n\t\t\t\treturn this.readByte();\n\t\t\tcase 25: {\n\t\t\t\tconst bytes = this.readBytes(2);\n\t\t\t\treturn bytes[0]! * 0x100 + bytes[1]!;\n\t\t\t}\n\t\t\tcase 26: {\n\t\t\t\tconst bytes = this.readBytes(4);\n\t\t\t\treturn bytes[0]! * 0x1_000_000 + bytes[1]! * 0x1_0000 + bytes[2]! * 0x100 + bytes[3]!;\n\t\t\t}\n\t\t\tcase 27: {\n\t\t\t\tconst high = this.readArgument(26);\n\t\t\t\tconst low = this.readArgument(26);\n\t\t\t\tif (high > 0x1f_ffff) throw new CborError(\"Decoded CBOR integer or length is outside the safe range\");\n\t\t\t\treturn high * UINT32_BASE + low;\n\t\t\t}\n\t\t\tcase 31:\n\t\t\t\tthrow new CborError(\"Indefinite-length CBOR items are not supported\");\n\t\t\tdefault:\n\t\t\t\tthrow new CborError(\"Malformed CBOR additional information\");\n\t\t}\n\t}\n\n\tprivate readByte(): number {\n\t\tif (this.offset >= this.bytes.byteLength) throw new CborError(\"Truncated CBOR payload\");\n\t\tconst value = this.bytes[this.offset]!;\n\t\tthis.offset++;\n\t\treturn value;\n\t}\n\n\tprivate readBytes(length: number): Uint8Array {\n\t\tif (length > this.bytes.byteLength - this.offset) throw new CborError(\"Truncated CBOR payload\");\n\t\tconst value = this.bytes.subarray(this.offset, this.offset + length);\n\t\tthis.offset += length;\n\t\treturn value;\n\t}\n}\n\n/** Decodes exactly one item from the protocol's strict RFC 8949 subset. */\nexport function decodeCbor(bytes: Uint8Array, options?: CborOptions): unknown {\n\tif (!(bytes instanceof Uint8Array)) throw new TypeError(\"CBOR input must be a Uint8Array\");\n\tconst resolved = resolveOptions(options);\n\tif (bytes.byteLength > resolved.maxByteLength) {\n\t\tthrow new CborError(`CBOR byte length exceeds configured limit of ${resolved.maxByteLength}`);\n\t}\n\treturn new CborReader(bytes, resolved).decode();\n}\n"]}