@google/adk 1.5.0 → 2.0.0

package/dist/web/tools/vertex_rag_retrieval_tool.js

@@ -1,12 +1,14 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
 import { BaseTool } from "./base_tool.js";
-class VertexRagRetrievalTool extends BaseTool {
+const _VertexRagRetrievalTool = class _VertexRagRetrievalTool extends BaseTool {
   constructor(config) {
     super({
       name: "vertex_rag_retrieval",
@@ -30,7 +32,9 @@ class VertexRagRetrievalTool extends BaseTool {
       retrieval: { vertexRagStore: this.vertexRagStore }
     });
   }
-}
+};
+__name(_VertexRagRetrievalTool, "VertexRagRetrievalTool");
+let VertexRagRetrievalTool = _VertexRagRetrievalTool;
 export {
   VertexRagRetrievalTool
 };

package/dist/web/utils/async_hooks_shim.js

@@ -1,11 +1,13 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-class AsyncLocalStorage {
+const _AsyncLocalStorage = class _AsyncLocalStorage {
   run(store, callback) {
     const previous = this.store;
     this.store = store;
@@ -18,7 +20,9 @@ class AsyncLocalStorage {
   getStore() {
     return this.store;
   }
-}
+};
+__name(_AsyncLocalStorage, "AsyncLocalStorage");
+let AsyncLocalStorage = _AsyncLocalStorage;
 export {
   AsyncLocalStorage
 };

package/dist/web/utils/async_queue.js

@@ -1,60 +1,88 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
-class AsyncQueue {
+const _AsyncQueue = class _AsyncQueue {
   constructor() {
     this.queue = [];
     this.resolvers = [];
     this.closed = false;
   }
+  /** Whether the queue has been closed or failed. */
+  get isClosed() {
+    return this.closed;
+  }
+  /** Number of items buffered and not yet consumed. */
+  get size() {
+    return this.queue.length;
+  }
+  /**
+   * Enqueues a value. If a consumer is currently awaiting, it is resolved
+   * immediately; otherwise the value is buffered. No-op once closed/failed.
+   */
   push(value) {
     if (this.closed) return;
-    if (this.resolvers.length > 0) {
-      const { resolve } = this.resolvers.shift();
-      resolve({ value, done: false });
+    const resolver = this.resolvers.shift();
+    if (resolver) {
+      resolver.resolve({ value, done: false });
     } else {
       this.queue.push(value);
     }
   }
-  error(err) {
-    this.errorVal = err;
+  /**
+   * Signals that production failed. Buffered items are still delivered first;
+   * once the buffer drains, the consumer's next `next()` rejects with `error`.
+   * Sticky (first failure wins) and closes the queue.
+   */
+  fail(error) {
+    if (this.failure) return;
+    this.failure = { error };
+    this.closed = true;
     while (this.resolvers.length > 0) {
-      const { reject } = this.resolvers.shift();
-      reject(err);
+      this.resolvers.shift().reject(error);
     }
   }
+  /** @deprecated Alias for {@link fail}; kept for existing callers. */
+  error(err) {
+    this.fail(err);
+  }
+  /**
+   * Signals that no more items will be produced. Any awaiting consumer receives
+   * `{done: true}`. Idempotent.
+   */
   close() {
+    if (this.closed) return;
     this.closed = true;
     while (this.resolvers.length > 0) {
-      const { resolve } = this.resolvers.shift();
-      resolve({ value: void 0, done: true });
+      this.resolvers.shift().resolve({ value: void 0, done: true });
     }
   }
   [Symbol.asyncIterator]() {
     return {
-      next: () => {
-        if (this.errorVal) {
-          const err = this.errorVal;
-          this.errorVal = void 0;
-          return Promise.reject(err);
-        }
+      next: /* @__PURE__ */ __name(() => {
         if (this.queue.length > 0) {
           return Promise.resolve({ value: this.queue.shift(), done: false });
         }
+        if (this.failure) {
+          return Promise.reject(this.failure.error);
+        }
         if (this.closed) {
           return Promise.resolve({ value: void 0, done: true });
         }
         return new Promise((resolve, reject) => {
           this.resolvers.push({ resolve, reject });
         });
-      }
+      }, "next")
     };
   }
-}
+};
+__name(_AsyncQueue, "AsyncQueue");
+let AsyncQueue = _AsyncQueue;
 export {
   AsyncQueue
 };

package/dist/web/utils/branch_trie.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -8,6 +10,7 @@ const require = topLevelCreateRequire(import.meta.url);
 function isSegmentPrefix(currentBranch, targetBranch) {
   return !targetBranch || targetBranch === currentBranch || !!currentBranch && currentBranch.startsWith("".concat(targetBranch, "."));
 }
+__name(isSegmentPrefix, "isSegmentPrefix");
 export {
   isSegmentPrefix
 };

package/dist/web/utils/case_utils.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -20,6 +22,7 @@ function camelCaseKeys(val) {
   }
   return val;
 }
+__name(camelCaseKeys, "camelCaseKeys");
 export {
   camelCaseKeys
 };

package/dist/web/utils/client_labels.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2025 Google LLC
@@ -31,6 +33,7 @@ function parseUserAgent(userAgent) {
   }
   return "Browser";
 }
+__name(parseUserAgent, "parseUserAgent");
 function _getDefaultLabels() {
   let frameworkLabel = "".concat(ADK_LABEL, "/").concat(version);
   if (!isBrowser() && process.env[AGENT_ENGINE_TELEMETRY_ENV_VARIABLE_NAME]) {
@@ -43,12 +46,14 @@ function _getDefaultLabels() {
   const languageLabel = "".concat(LANGUAGE_LABEL, "/").concat(languageLabelDetail);
   return [frameworkLabel, languageLabel];
 }
+__name(_getDefaultLabels, "_getDefaultLabels");
 function runWithClientLabel(clientLabel, callback) {
   if (typeof clientLabel !== "string" || clientLabel.trim() === "") {
     throw new Error("Client label must be a non-empty string.");
   }
   return clientLabelLocalStorage.run(clientLabel, callback);
 }
+__name(runWithClientLabel, "runWithClientLabel");
 function getClientLabels() {
   const labels = _getDefaultLabels();
   const contextLabel = clientLabelLocalStorage.getStore();
@@ -57,6 +62,7 @@ function getClientLabels() {
   }
   return labels;
 }
+__name(getClientLabels, "getClientLabels");
 export {
   getClientLabels,
   parseUserAgent,

package/dist/web/utils/crypto_shim.js

@@ -0,0 +1,18 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+function randomUUID() {
+  throw new Error(
+    "randomUUID: no cryptographically secure source of randomness is available. Neither crypto.randomUUID() nor crypto.getRandomValues() is present in this environment."
+  );
+}
+__name(randomUUID, "randomUUID");
+export {
+  randomUUID
+};

package/dist/web/utils/deprecated.js

@@ -0,0 +1,40 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { logger } from "./logger.js";
+const warnedItems = /* @__PURE__ */ new Set();
+function resetDeprecationWarnings() {
+  warnedItems.clear();
+}
+__name(resetDeprecationWarnings, "resetDeprecationWarnings");
+function deprecated(reason) {
+  return function(target) {
+    var _a;
+    const className = target.name;
+    const wrapped = (_a = class extends target {
+      constructor(...args) {
+        if (!warnedItems.has(className)) {
+          logger.warn(reason);
+          warnedItems.add(className);
+        }
+        super(...args);
+      }
+    }, __name(_a, "wrapped"), _a);
+    Object.defineProperty(wrapped, "name", {
+      value: className,
+      configurable: true
+    });
+    return wrapped;
+  };
+}
+__name(deprecated, "deprecated");
+export {
+  deprecated,
+  resetDeprecationWarnings
+};

package/dist/web/utils/env_aware_utils.js

@@ -1,32 +1,41 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2025 Google LLC
  * SPDX-License-Identifier: Apache-2.0
  */
+import { randomUUID as nodeRandomUUID } from "node:crypto";
+import { logger } from "./logger.js";
+const ENTERPRISE_MODE_ENV_VAR = "GOOGLE_GENAI_USE_ENTERPRISE";
+const DEPRECATED_ENTERPRISE_MODE_ENV_VAR = "GOOGLE_GENAI_USE_VERTEXAI";
 function isBrowser() {
   return typeof window !== "undefined";
 }
-const UUID_MASK = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx";
+__name(isBrowser, "isBrowser");
 function randomUUID() {
-  var _a;
+  var _a, _b;
   if ((_a = globalThis.crypto) == null ? void 0 : _a.randomUUID) {
     return globalThis.crypto.randomUUID();
   }
-  let uuid = "";
-  for (let i = 0; i < UUID_MASK.length; i++) {
-    const randomValue = Math.random() * 16 | 0;
-    if (UUID_MASK[i] === "x") {
-      uuid += randomValue.toString(16);
-    } else if (UUID_MASK[i] === "y") {
-      uuid += (randomValue & 3 | 8).toString(16);
-    } else {
-      uuid += UUID_MASK[i];
-    }
+  if ((_b = globalThis.crypto) == null ? void 0 : _b.getRandomValues) {
+    const bytes = globalThis.crypto.getRandomValues(new Uint8Array(16));
+    bytes[6] = bytes[6] & 15 | 64;
+    bytes[8] = bytes[8] & 63 | 128;
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0"));
+    return [
+      hex.slice(0, 4),
+      hex.slice(4, 6),
+      hex.slice(6, 8),
+      hex.slice(8, 10),
+      hex.slice(10, 16)
+    ].map((group) => group.join("")).join("-");
   }
-  return uuid;
+  return nodeRandomUUID();
 }
+__name(randomUUID, "randomUUID");
 function base64Encode(data) {
   if (isBrowser()) {
     let strData = "";
@@ -42,12 +51,14 @@ function base64Encode(data) {
   }
   return Buffer.from(data).toString("base64");
 }
+__name(base64Encode, "base64Encode");
 function base64Decode(data) {
   if (isBrowser()) {
     return window.atob(data);
   }
   return Buffer.from(data, "base64").toString();
 }
+__name(base64Decode, "base64Decode");
 function isBase64Encoded(data) {
   try {
     return base64Encode(base64Decode(data)) === data;
@@ -55,6 +66,7 @@ function isBase64Encoded(data) {
     return false;
   }
 }
+__name(isBase64Encoded, "isBase64Encoded");
 function getBooleanEnvVar(envVar) {
   if (!process.env) {
     return false;
@@ -62,11 +74,42 @@ function getBooleanEnvVar(envVar) {
   const envVarValue = (process.env[envVar] || "").toLowerCase();
   return ["true", "1"].includes(envVarValue);
 }
+__name(getBooleanEnvVar, "getBooleanEnvVar");
+let warnedDeprecatedEnterpriseModeEnvVar = false;
+function warnDeprecatedEnterpriseModeEnvVar(message) {
+  if (warnedDeprecatedEnterpriseModeEnvVar) {
+    return;
+  }
+  warnedDeprecatedEnterpriseModeEnvVar = true;
+  logger.warn(message);
+}
+__name(warnDeprecatedEnterpriseModeEnvVar, "warnDeprecatedEnterpriseModeEnvVar");
+function isEnterpriseModeEnabled() {
+  var _a, _b;
+  const deprecatedIsSet = ((_a = process.env) == null ? void 0 : _a[DEPRECATED_ENTERPRISE_MODE_ENV_VAR]) !== void 0;
+  if (((_b = process.env) == null ? void 0 : _b[ENTERPRISE_MODE_ENV_VAR]) !== void 0) {
+    if (deprecatedIsSet) {
+      warnDeprecatedEnterpriseModeEnvVar(
+        "".concat(DEPRECATED_ENTERPRISE_MODE_ENV_VAR, " is set but ignored because ") + "".concat(ENTERPRISE_MODE_ENV_VAR, " takes precedence. ") + "".concat(DEPRECATED_ENTERPRISE_MODE_ENV_VAR, " is deprecated, please use ") + "".concat(ENTERPRISE_MODE_ENV_VAR, " instead.")
+      );
+    }
+    return getBooleanEnvVar(ENTERPRISE_MODE_ENV_VAR);
+  }
+  if (deprecatedIsSet) {
+    warnDeprecatedEnterpriseModeEnvVar(
+      "".concat(DEPRECATED_ENTERPRISE_MODE_ENV_VAR, " is deprecated, please use ") + "".concat(ENTERPRISE_MODE_ENV_VAR, " instead")
+    );
+    return getBooleanEnvVar(DEPRECATED_ENTERPRISE_MODE_ENV_VAR);
+  }
+  return false;
+}
+__name(isEnterpriseModeEnabled, "isEnterpriseModeEnabled");
 export {
   base64Decode,
   base64Encode,
   getBooleanEnvVar,
   isBase64Encoded,
   isBrowser,
+  isEnterpriseModeEnabled,
   randomUUID
 };

package/dist/web/utils/error_utils.js

@@ -0,0 +1,101 @@
+import {createRequire as topLevelCreateRequire} from 'module';
+const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const MAX_RESPONSE_BODY_LENGTH = 1e3;
+const TRUNCATION_MARKER = "... [truncated]";
+const UNKNOWN_ERROR = "Unknown error";
+const MIN_HTTP_STATUS = 100;
+const MAX_HTTP_STATUS = 599;
+function asRecord(value) {
+  return value !== null && typeof value === "object" ? value : void 0;
+}
+__name(asRecord, "asRecord");
+function firstString(...values) {
+  for (const value of values) {
+    if (typeof value === "string") {
+      return value;
+    }
+  }
+  return void 0;
+}
+__name(firstString, "firstString");
+function truncateBody(body) {
+  return body.length > MAX_RESPONSE_BODY_LENGTH ? body.slice(0, MAX_RESPONSE_BODY_LENGTH) + TRUNCATION_MARKER : body;
+}
+__name(truncateBody, "truncateBody");
+function baseMessage(err) {
+  if (err instanceof Error) {
+    return err.message;
+  }
+  if (typeof err === "string") {
+    return err;
+  }
+  return String(err);
+}
+__name(baseMessage, "baseMessage");
+function extractHttpDetails(err) {
+  var _a, _b;
+  const record = asRecord(err);
+  if (record === void 0) {
+    return void 0;
+  }
+  const response = asRecord(record["response"]);
+  const rawStatus = (_b = (_a = record["status"]) != null ? _a : record["code"]) != null ? _b : response == null ? void 0 : response["status"];
+  const status = typeof rawStatus === "number" && rawStatus >= MIN_HTTP_STATUS && rawStatus <= MAX_HTTP_STATUS ? rawStatus : void 0;
+  const statusText = firstString(
+    record["statusText"],
+    response == null ? void 0 : response["statusText"]
+  );
+  const body = firstString(
+    response == null ? void 0 : response["data"],
+    response == null ? void 0 : response["body"],
+    response == null ? void 0 : response["text"]
+  );
+  if (status === void 0 && body === void 0) {
+    return void 0;
+  }
+  const head = status === void 0 ? "HTTP error" : "HTTP ".concat(status).concat(statusText === void 0 ? "" : " ".concat(statusText));
+  return body === void 0 ? head : "".concat(head, ": ").concat(truncateBody(body));
+}
+__name(extractHttpDetails, "extractHttpDetails");
+function formatErrorRecursive(err, seen) {
+  var _a;
+  if (err === null || err === void 0) {
+    return UNKNOWN_ERROR;
+  }
+  if (typeof err === "object") {
+    if (seen.has(err)) {
+      return baseMessage(err);
+    }
+    seen.add(err);
+  }
+  if (err instanceof AggregateError && err.errors.length > 0) {
+    return err.errors.map((sub) => formatErrorRecursive(sub, seen)).join(" | ");
+  }
+  const http = extractHttpDetails(err);
+  const base = baseMessage(err);
+  const cause = (_a = asRecord(err)) == null ? void 0 : _a["cause"];
+  const causeMessage = cause !== void 0 ? formatErrorRecursive(cause, seen) : void 0;
+  let message = base.length > 0 ? base : UNKNOWN_ERROR;
+  if (http !== void 0) {
+    message = "".concat(message, " (").concat(http, ")");
+  }
+  if (causeMessage !== void 0 && http === void 0 && !message.includes(causeMessage)) {
+    message = "".concat(message, ": ").concat(causeMessage);
+  }
+  return message;
+}
+__name(formatErrorRecursive, "formatErrorRecursive");
+function formatError(err) {
+  return formatErrorRecursive(err, /* @__PURE__ */ new Set());
+}
+__name(formatError, "formatError");
+export {
+  formatError
+};

package/dist/web/utils/experimental.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -8,9 +10,10 @@ const require = topLevelCreateRequire(import.meta.url);
 import { logger } from "./logger.js";
 const warnedItems = /* @__PURE__ */ new Set();
 function experimental(target, propertyKey, descriptor) {
+  var _a;
   if (propertyKey === void 0) {
     const className = target.name;
-    const newConstructor = class extends target {
+    const newConstructor = (_a = class extends target {
       constructor(...args) {
         if (!warnedItems.has(className)) {
           logger.warn(
@@ -20,7 +23,11 @@ function experimental(target, propertyKey, descriptor) {
         }
         super(...args);
       }
-    };
+    }, __name(_a, "newConstructor"), _a);
+    Object.defineProperty(newConstructor, "name", {
+      value: className,
+      configurable: true
+    });
     return newConstructor;
   }
   if (propertyKey !== void 0 && descriptor !== void 0) {
@@ -41,6 +48,7 @@ function experimental(target, propertyKey, descriptor) {
   }
   throw new Error("Invalid decorator usage");
 }
+__name(experimental, "experimental");
 export {
   experimental
 };

package/dist/web/utils/failover_utils.js

@@ -1,6 +1,8 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
 var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : Symbol.for("Symbol." + name);
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __await = function(promise, isYieldStar) {
   this[0] = promise;
   this[1] = isYieldStar;
@@ -88,9 +90,11 @@ function runWithRouting(items, context, router, runFn) {
     }
   });
 }
+__name(runWithRouting, "runWithRouting");
 function isAsyncGenerator(obj) {
   return typeof obj === "object" && typeof obj[Symbol.asyncIterator] === "function";
 }
+__name(isAsyncGenerator, "isAsyncGenerator");
 export {
   runWithRouting
 };

package/dist/web/utils/file_extension_utils.js

@@ -1,5 +1,7 @@
 import {createRequire as topLevelCreateRequire} from 'module';
 const require = topLevelCreateRequire(import.meta.url);
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -42,9 +44,11 @@ function getMimeTypeAndEncoding(ext) {
     encoding: FileContentEncoding.BASE64
   };
 }
+__name(getMimeTypeAndEncoding, "getMimeTypeAndEncoding");
 function getScriptLanguageByExtension(ext) {
   return EXTENSION_TO_LANGUAGE[ext.toLowerCase()] || CodeExecutionLanguage.UNSPECIFIED;
 }
+__name(getScriptLanguageByExtension, "getScriptLanguageByExtension");
 export {
   getMimeTypeAndEncoding,
   getScriptLanguageByExtension

package/dist/web/utils/file_utils.js

@@ -19,6 +19,7 @@ var __spreadValues = (a, b) => {
   return a;
 };
 var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 /**
  * @license
  * Copyright 2026 Google LLC
@@ -26,12 +27,16 @@ var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
  */
 import * as fs from "node:fs/promises";
 import * as path from "node:path";
-async function materializeFiles(files, dir = process.cwd()) {
+function isInsideDir(resolvedPath, resolvedBaseDir) {
+  return resolvedPath === resolvedBaseDir || resolvedPath.startsWith(resolvedBaseDir + path.sep);
+}
+__name(isInsideDir, "isInsideDir");
+async function materializeFiles(files, dir) {
   const resolvedBaseDir = path.resolve(dir);
   const createdFiles = [];
   for (const file of files) {
     const fullPath = path.resolve(dir, file.name);
-    if (!fullPath.startsWith(resolvedBaseDir)) {
+    if (!isInsideDir(fullPath, resolvedBaseDir)) {
       throw new Error(
         "Path traversal detected: ".concat(file.name, " resolves outside of ").concat(dir)
       );
@@ -53,7 +58,7 @@ async function materializeFiles(files, dir = process.cwd()) {
         break;
       }
     }
-    if (!finalPath.startsWith(resolvedBaseDir)) {
+    if (!isInsideDir(finalPath, resolvedBaseDir)) {
       throw new Error(
         "Path traversal detected: ".concat(file.name, " resolves outside of ").concat(dir)
       );
@@ -61,7 +66,8 @@ async function materializeFiles(files, dir = process.cwd()) {
     await fs.mkdir(path.dirname(finalPath), { recursive: true });
     await fs.writeFile(
       finalPath,
-      Buffer.from(file.content, file.contentEncoding)
+      Buffer.from(file.content, file.contentEncoding),
+      { flag: "wx" }
     );
     createdFiles.push(__spreadProps(__spreadValues({}, file), {
       name: path.relative(dir, finalPath)
@@ -69,6 +75,7 @@ async function materializeFiles(files, dir = process.cwd()) {
   }
   return createdFiles;
 }
+__name(materializeFiles, "materializeFiles");
 const EXTENSION_TO_MIME_TYPE = {
   "pdf": "application/pdf",
   "jpg": "image/jpeg",
@@ -93,6 +100,7 @@ function guessMimeType(filePath) {
   const ext = ((_a = filePath.split(".").pop()) == null ? void 0 : _a.toLowerCase()) || "";
   return EXTENSION_TO_MIME_TYPE[ext] || "application/octet-stream";
 }
+__name(guessMimeType, "guessMimeType");
 export {
   EXTENSION_TO_MIME_TYPE,
   guessMimeType,