@google/gemini-cli-a2a-server 0.59.0-preview.0 → 0.60.0-nightly.20260904.g87a9c71d5

package/dist/a2a-server.mjs

@@ -891,15 +891,15 @@ var require_colorize = __commonJS({
        * function colorize (lookup, level, message)
        * Performs multi-step colorization using @colors/colors/safe
        */
-      colorize(lookup2, level, message) {
+      colorize(lookup3, level, message) {
         if (typeof message === "undefined") {
           message = level;
         }
-        if (!Array.isArray(_Colorizer.allColors[lookup2])) {
-          return colors[_Colorizer.allColors[lookup2]](message);
+        if (!Array.isArray(_Colorizer.allColors[lookup3])) {
+          return colors[_Colorizer.allColors[lookup3]](message);
         }
-        for (let i3 = 0, len = _Colorizer.allColors[lookup2].length; i3 < len; i3++) {
-          message = colors[_Colorizer.allColors[lookup2][i3]](message);
+        for (let i3 = 0, len = _Colorizer.allColors[lookup3].length; i3 < len; i3++) {
+          message = colors[_Colorizer.allColors[lookup3][i3]](message);
         }
         return message;
       }
@@ -27762,7 +27762,7 @@ var require_mime_types = __commonJS({
     exports2.contentType = contentType;
     exports2.extension = extension;
     exports2.extensions = /* @__PURE__ */ Object.create(null);
-    exports2.lookup = lookup2;
+    exports2.lookup = lookup3;
     exports2.types = /* @__PURE__ */ Object.create(null);
     exports2._extensionConflicts = [];
     populateMaps(exports2.extensions, exports2.types);
@@ -27805,7 +27805,7 @@ var require_mime_types = __commonJS({
       }
       return exts[0];
     }
-    function lookup2(path99) {
+    function lookup3(path99) {
       if (!path99 || typeof path99 !== "string") {
         return false;
       }
@@ -31311,7 +31311,7 @@ var require_view = __commonJS({
       this.engine = opts.engines[this.ext];
       this.path = this.lookup(fileName);
     }
-    View.prototype.lookup = function lookup2(name3) {
+    View.prototype.lookup = function lookup3(name3) {
       var path100;
       var roots = [].concat(this.root);
       debug2('lookup "%s"', name3);
@@ -34497,7 +34497,7 @@ var require_request = __commonJS({
   "node_modules/express/lib/request.js"(exports2, module2) {
     "use strict";
     var accepts = require_accepts();
-    var isIP3 = __require("node:net").isIP;
+    var isIP4 = __require("node:net").isIP;
     var typeis = require_type_is();
     var http7 = __require("node:http");
     var fresh = require_fresh();
@@ -34588,7 +34588,7 @@ var require_request = __commonJS({
       var hostname3 = this.hostname;
       if (!hostname3) return [];
       var offset = this.app.get("subdomain offset");
-      var subdomains2 = !isIP3(hostname3) ? hostname3.split(".").reverse() : [hostname3];
+      var subdomains2 = !isIP4(hostname3) ? hostname3.split(".").reverse() : [hostname3];
       return subdomains2.slice(offset);
     });
     defineGetter(req, "path", function path99() {
@@ -40321,7 +40321,7 @@ var require_dist2 = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Agent = void 0;
-    var net2 = __importStar(__require("net"));
+    var net3 = __importStar(__require("net"));
     var http7 = __importStar(__require("http"));
     var https_1 = __require("https");
     __exportStar(require_helpers(), exports2);
@@ -40361,7 +40361,7 @@ var require_dist2 = __commonJS({
         if (!this.sockets[name3]) {
           this.sockets[name3] = [];
         }
-        const fakeSocket = new net2.Socket({ writable: false });
+        const fakeSocket = new net3.Socket({ writable: false });
         this.sockets[name3].push(fakeSocket);
         this.totalSocketCount++;
         return fakeSocket;
@@ -40573,7 +40573,7 @@ var require_dist3 = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.HttpsProxyAgent = void 0;
-    var net2 = __importStar(__require("net"));
+    var net3 = __importStar(__require("net"));
     var tls = __importStar(__require("tls"));
     var assert_1 = __importDefault(__require("assert"));
     var debug_1 = __importDefault(require_src());
@@ -40582,7 +40582,7 @@ var require_dist3 = __commonJS({
     var parse_proxy_response_1 = require_parse_proxy_response();
     var debug2 = (0, debug_1.default)("https-proxy-agent");
     var setServernameFromNonIpHost = (options) => {
-      if (options.servername === void 0 && options.host && !net2.isIP(options.host)) {
+      if (options.servername === void 0 && options.host && !net3.isIP(options.host)) {
         return {
           ...options,
           servername: options.host
@@ -40622,10 +40622,10 @@ var require_dist3 = __commonJS({
           socket = tls.connect(setServernameFromNonIpHost(this.connectOpts));
         } else {
           debug2("Creating `net.Socket`: %o", this.connectOpts);
-          socket = net2.connect(this.connectOpts);
+          socket = net3.connect(this.connectOpts);
         }
         const headers = typeof this.proxyHeaders === "function" ? this.proxyHeaders() : { ...this.proxyHeaders };
-        const host = net2.isIPv6(opts.host) ? `[${opts.host}]` : opts.host;
+        const host = net3.isIPv6(opts.host) ? `[${opts.host}]` : opts.host;
         let payload = `CONNECT ${host}:${opts.port} HTTP/1.1\r
 `;
         if (proxy2.username || proxy2.password) {
@@ -40658,7 +40658,7 @@ var require_dist3 = __commonJS({
           return socket;
         }
         socket.destroy();
-        const fakeSocket = new net2.Socket({ writable: false });
+        const fakeSocket = new net3.Socket({ writable: false });
         fakeSocket.readable = true;
         req.once("socket", (s6) => {
           debug2("Replaying proxy buffer for failed request");
@@ -43576,12 +43576,12 @@ var require_base64_js = __commonJS({
     exports2.byteLength = byteLength;
     exports2.toByteArray = toByteArray;
     exports2.fromByteArray = fromByteArray;
-    var lookup2 = [];
+    var lookup3 = [];
     var revLookup = [];
     var Arr = typeof Uint8Array !== "undefined" ? Uint8Array : Array;
     var code = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
     for (i3 = 0, len = code.length; i3 < len; ++i3) {
-      lookup2[i3] = code[i3];
+      lookup3[i3] = code[i3];
       revLookup[code.charCodeAt(i3)] = i3;
     }
     var i3;
@@ -43634,7 +43634,7 @@ var require_base64_js = __commonJS({
       return arr;
     }
     function tripletToBase64(num) {
-      return lookup2[num >> 18 & 63] + lookup2[num >> 12 & 63] + lookup2[num >> 6 & 63] + lookup2[num & 63];
+      return lookup3[num >> 18 & 63] + lookup3[num >> 12 & 63] + lookup3[num >> 6 & 63] + lookup3[num & 63];
     }
     function encodeChunk(uint8, start2, end) {
       var tmp;
@@ -43657,12 +43657,12 @@ var require_base64_js = __commonJS({
       if (extraBytes === 1) {
         tmp = uint8[len2 - 1];
         parts2.push(
-          lookup2[tmp >> 2] + lookup2[tmp << 4 & 63] + "=="
+          lookup3[tmp >> 2] + lookup3[tmp << 4 & 63] + "=="
         );
       } else if (extraBytes === 2) {
         tmp = (uint8[len2 - 2] << 8) + uint8[len2 - 1];
         parts2.push(
-          lookup2[tmp >> 10] + lookup2[tmp >> 4 & 63] + lookup2[tmp << 2 & 63] + "="
+          lookup3[tmp >> 10] + lookup3[tmp >> 4 & 63] + lookup3[tmp << 2 & 63] + "="
         );
       }
       return parts2.join("");
@@ -71326,11 +71326,11 @@ var require_suffix_array = __commonJS({
         }
       }
     }
-    function compare(string3, lookup2, m3, n2) {
-      return string3[m3] - string3[n2] || (m3 % 3 === 2 ? string3[m3 + 1] - string3[n2 + 1] || lookup2[m3 + 2] - lookup2[n2 + 2] : lookup2[m3 + 1] - lookup2[n2 + 1]);
+    function compare(string3, lookup3, m3, n2) {
+      return string3[m3] - string3[n2] || (m3 % 3 === 2 ? string3[m3 + 1] - string3[n2 + 1] || lookup3[m3 + 2] - lookup3[n2 + 2] : lookup3[m3 + 1] - lookup3[n2 + 1]);
     }
     function build(string3, l2) {
-      var a = [], b2 = [], al = 2 * l2 / 3 | 0, bl = l2 - al, r3 = al + 1 >> 1, i3 = al, j2 = 0, k2, lookup2 = [], result2 = [];
+      var a = [], b2 = [], al = 2 * l2 / 3 | 0, bl = l2 - al, r3 = al + 1 >> 1, i3 = al, j2 = 0, k2, lookup3 = [], result2 = [];
       if (l2 === 1)
         return [0];
       while (i3--)
@@ -71349,9 +71349,9 @@ var require_suffix_array = __commonJS({
           a[i3] = b2[i3] < r3 ? b2[i3] * 3 + 1 : (b2[i3] - r3) * 3 + 2;
       }
       for (i3 = al; i3--; )
-        lookup2[a[i3]] = i3;
-      lookup2[l2] = -1;
-      lookup2[l2 + 1] = -2;
+        lookup3[a[i3]] = i3;
+      lookup3[l2] = -1;
+      lookup3[l2 + 1] = -2;
       b2 = l2 % 3 === 1 ? [l2 - 1] : [];
       for (i3 = 0; i3 < al; i3++) {
         if (a[i3] % 3 === 1)
@@ -71359,7 +71359,7 @@ var require_suffix_array = __commonJS({
       }
       sort(string3, b2, 0);
       for (i3 = 0, j2 = 0, k2 = 0; i3 < al && j2 < bl; )
-        result2[k2++] = compare(string3, lookup2, a[i3], b2[j2]) < 0 ? a[i3++] : b2[j2++];
+        result2[k2++] = compare(string3, lookup3, a[i3], b2[j2]) < 0 ? a[i3++] : b2[j2++];
       while (i3 < al)
         result2[k2++] = a[i3++];
       while (j2 < bl)
@@ -90652,7 +90652,7 @@ var require_websocket = __commonJS({
     var EventEmitter11 = __require("events");
     var https3 = __require("https");
     var http7 = __require("http");
-    var net2 = __require("net");
+    var net3 = __require("net");
     var tls = __require("tls");
     var { randomBytes: randomBytes5, createHash: createHash18 } = __require("crypto");
     var { Duplex, Readable: Readable7 } = __require("stream");
@@ -91383,12 +91383,12 @@ var require_websocket = __commonJS({
     }
     function netConnect(options) {
       options.path = options.socketPath;
-      return net2.connect(options);
+      return net3.connect(options);
     }
     function tlsConnect(options) {
       options.path = void 0;
       if (!options.servername && options.servername !== "") {
-        options.servername = net2.isIP(options.host) ? "" : options.host;
+        options.servername = net3.isIP(options.host) ? "" : options.host;
       }
       return tls.connect(options);
     }
@@ -106976,7 +106976,7 @@ var require_dist7 = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.HttpProxyAgent = void 0;
-    var net2 = __importStar(__require("net"));
+    var net3 = __importStar(__require("net"));
     var tls = __importStar(__require("tls"));
     var debug_1 = __importDefault(require_src());
     var events_1 = __require("events");
@@ -107049,7 +107049,7 @@ var require_dist7 = __commonJS({
           socket = tls.connect(this.connectOpts);
         } else {
           debug2("Creating `net.Socket`: %o", this.connectOpts);
-          socket = net2.connect(this.connectOpts);
+          socket = net3.connect(this.connectOpts);
         }
         await (0, events_1.once)(socket, "connect");
         return socket;
@@ -121050,8 +121050,8 @@ var require_utils7 = __commonJS({
     var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
     var HOST_DELIM_RE = /[@/?#:]/g;
     var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-    function reescapeHostDelimiters(host, isIP3) {
-      const re3 = isIP3 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+    function reescapeHostDelimiters(host, isIP4) {
+      const re3 = isIP4 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
       re3.lastIndex = 0;
       return host.replace(re3, (ch) => HOST_DELIMS[ch]);
     }
@@ -121533,7 +121533,7 @@ var require_fast_uri = __commonJS({
         fragment: void 0
       };
       let malformedAuthorityOrPort = false;
-      let isIP3 = false;
+      let isIP4 = false;
       if (options.reference === "suffix") {
         if (options.scheme) {
           uri = options.scheme + ":" + uri;
@@ -121563,9 +121563,9 @@ var require_fast_uri = __commonJS({
           if (ipv4result === false) {
             const ipv6result = normalizeIPv6(parsed.host);
             parsed.host = ipv6result.host.toLowerCase();
-            isIP3 = ipv6result.isIPV6;
+            isIP4 = ipv6result.isIPV6;
           } else {
-            isIP3 = true;
+            isIP4 = true;
           }
         }
         if (parsed.scheme === void 0 && parsed.userinfo === void 0 && parsed.host === void 0 && parsed.port === void 0 && parsed.query === void 0 && !parsed.path) {
@@ -121582,7 +121582,7 @@ var require_fast_uri = __commonJS({
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
         if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
-          if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP3 === false && nonSimpleDomain(parsed.host)) {
+          if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP4 === false && nonSimpleDomain(parsed.host)) {
             try {
               parsed.host = URL.domainToASCII(parsed.host.toLowerCase());
             } catch (e3) {
@@ -121596,7 +121596,7 @@ var require_fast_uri = __commonJS({
               parsed.scheme = unescape(parsed.scheme);
             }
             if (parsed.host !== void 0) {
-              parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP3);
+              parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP4);
             }
           }
           if (parsed.path) {
@@ -149010,7 +149010,7 @@ var require_namespace = __commonJS({
       });
       return this;
     };
-    Namespace.prototype.lookup = function lookup2(path99, filterTypes, parentAlreadyChecked) {
+    Namespace.prototype.lookup = function lookup3(path99, filterTypes, parentAlreadyChecked) {
       if (typeof filterTypes === "boolean") {
         parentAlreadyChecked = filterTypes;
         filterTypes = void 0;
@@ -149045,7 +149045,7 @@ var require_namespace = __commonJS({
       }
       return null;
     };
-    Namespace.prototype._lookupImpl = function lookup2(path99, flatPath) {
+    Namespace.prototype._lookupImpl = function lookup3(path99, flatPath) {
       if (Object.prototype.hasOwnProperty.call(this._lookupCache, flatPath)) {
         return this._lookupCache[flatPath];
       }
@@ -158948,7 +158948,7 @@ var require_transport = __commonJS({
     var resolver_1 = require_resolver();
     var subchannel_address_1 = require_subchannel_address();
     var uri_parser_1 = require_uri_parser();
-    var net2 = __require("net");
+    var net3 = __require("net");
     var subchannel_call_1 = require_subchannel_call();
     var call_number_1 = require_call_number();
     var TRACER_NAME2 = "transport";
@@ -159415,7 +159415,7 @@ var require_transport = __commonJS({
               const errorCallback = (error2) => {
                 reject(error2);
               };
-              const socket = net2.connect(address, () => {
+              const socket = net3.connect(address, () => {
                 socket.removeListener("close", closeCallback);
                 socket.removeListener("error", errorCallback);
                 resolve23(socket);
@@ -214054,13 +214054,13 @@ var require_internet = __commonJS({
 var require_dockerSocket = __commonJS({
   "packages/core/node_modules/systeminformation/lib/dockerSocket.js"(exports2, module2) {
     "use strict";
-    var net2 = __require("net");
+    var net3 = __require("net");
     var isWin = __require("os").type() === "Windows_NT";
     var socketPath = isWin ? "//./pipe/docker_engine" : "/var/run/docker.sock";
     var DockerSocket = class {
       getInfo(callback) {
         try {
-          let socket = net2.createConnection({ path: socketPath });
+          let socket = net3.createConnection({ path: socketPath });
           let alldata = "";
           let data;
           socket.on("connect", () => {
@@ -214090,7 +214090,7 @@ var require_dockerSocket = __commonJS({
       }
       listImages(all2, callback) {
         try {
-          let socket = net2.createConnection({ path: socketPath });
+          let socket = net3.createConnection({ path: socketPath });
           let alldata = "";
           let data;
           socket.on("connect", () => {
@@ -214122,7 +214122,7 @@ var require_dockerSocket = __commonJS({
         id = id || "";
         if (id) {
           try {
-            let socket = net2.createConnection({ path: socketPath });
+            let socket = net3.createConnection({ path: socketPath });
             let alldata = "";
             let data;
             socket.on("connect", () => {
@@ -214155,7 +214155,7 @@ var require_dockerSocket = __commonJS({
       }
       listContainers(all2, callback) {
         try {
-          let socket = net2.createConnection({ path: socketPath });
+          let socket = net3.createConnection({ path: socketPath });
           let alldata = "";
           let data;
           socket.on("connect", () => {
@@ -214187,7 +214187,7 @@ var require_dockerSocket = __commonJS({
         id = id || "";
         if (id) {
           try {
-            let socket = net2.createConnection({ path: socketPath });
+            let socket = net3.createConnection({ path: socketPath });
             let alldata = "";
             let data;
             socket.on("connect", () => {
@@ -214222,7 +214222,7 @@ var require_dockerSocket = __commonJS({
         id = id || "";
         if (id) {
           try {
-            let socket = net2.createConnection({ path: socketPath });
+            let socket = net3.createConnection({ path: socketPath });
             let alldata = "";
             let data;
             socket.on("connect", () => {
@@ -214257,7 +214257,7 @@ var require_dockerSocket = __commonJS({
         id = id || "";
         if (id) {
           try {
-            let socket = net2.createConnection({ path: socketPath });
+            let socket = net3.createConnection({ path: socketPath });
             let alldata = "";
             let data;
             socket.on("connect", () => {
@@ -214290,7 +214290,7 @@ var require_dockerSocket = __commonJS({
       }
       listVolumes(callback) {
         try {
-          let socket = net2.createConnection({ path: socketPath });
+          let socket = net3.createConnection({ path: socketPath });
           let alldata = "";
           let data;
           socket.on("connect", () => {
@@ -221064,8 +221064,8 @@ var GIT_COMMIT_INFO, CLI_VERSION;
 var init_git_commit = __esm({
   "packages/core/dist/src/generated/git-commit.js"() {
     "use strict";
-    GIT_COMMIT_INFO = "0bd1d4397";
-    CLI_VERSION = "0.59.0-preview.0";
+    GIT_COMMIT_INFO = "87a9c71d5";
+    CLI_VERSION = "0.60.0-nightly.20260904.g87a9c71d5";
   }
 });
 
@@ -311667,7 +311667,7 @@ var require_util20 = __commonJS({
     var { kDestroyed, kBodyUsed, kListeners, kBody } = require_symbols();
     var { IncomingMessage } = __require("node:http");
     var stream2 = __require("node:stream");
-    var net2 = __require("node:net");
+    var net3 = __require("node:net");
     var { Blob: Blob4 } = __require("node:buffer");
     var nodeUtil = __require("node:util");
     var { stringify: stringify5 } = __require("node:querystring");
@@ -311813,7 +311813,7 @@ var require_util20 = __commonJS({
       }
       assert3(typeof host === "string");
       const servername = getHostname(host);
-      if (net2.isIP(servername)) {
+      if (net3.isIP(servername)) {
         return "";
       }
       return servername;
@@ -313125,7 +313125,7 @@ var require_dispatcher_base = __commonJS({
 var require_connect = __commonJS({
   "packages/core/node_modules/undici/lib/core/connect.js"(exports2, module2) {
     "use strict";
-    var net2 = __require("node:net");
+    var net3 = __require("node:net");
     var assert3 = __require("node:assert");
     var util5 = require_util20();
     var { InvalidArgumentError } = require_errors7();
@@ -313179,7 +313179,7 @@ var require_connect = __commonJS({
         }
       };
     }
-    function buildConnector({ allowH2, maxCachedSessions, socketPath, timeout, session: customSession, ...opts }) {
+    function buildConnector2({ allowH2, maxCachedSessions, socketPath, timeout, session: customSession, ...opts }) {
       if (maxCachedSessions != null && (!Number.isInteger(maxCachedSessions) || maxCachedSessions < 0)) {
         throw new InvalidArgumentError("maxCachedSessions must be a positive integer or zero");
       }
@@ -313217,7 +313217,7 @@ var require_connect = __commonJS({
         } else {
           assert3(!httpSocket, "httpSocket can only be sent on TLS update");
           port = port || 80;
-          socket = net2.connect({
+          socket = net3.connect({
             highWaterMark: 64 * 1024,
             // Same as nodejs fs streams.
             ...options,
@@ -313249,7 +313249,7 @@ var require_connect = __commonJS({
         return socket;
       };
     }
-    module2.exports = buildConnector;
+    module2.exports = buildConnector2;
   }
 });
 
@@ -318363,7 +318363,7 @@ var require_client2 = __commonJS({
   "packages/core/node_modules/undici/lib/dispatcher/client.js"(exports2, module2) {
     "use strict";
     var assert3 = __require("node:assert");
-    var net2 = __require("node:net");
+    var net3 = __require("node:net");
     var http7 = __require("node:http");
     var util5 = require_util20();
     var { ClientStats } = require_stats();
@@ -318375,7 +318375,7 @@ var require_client2 = __commonJS({
       InformationalError,
       ClientDestroyedError
     } = require_errors7();
-    var buildConnector = require_connect();
+    var buildConnector2 = require_connect();
     var {
       kUrl,
       kServerName,
@@ -318510,7 +318510,7 @@ var require_client2 = __commonJS({
         if (maxRequestsPerClient != null && (!Number.isInteger(maxRequestsPerClient) || maxRequestsPerClient < 0)) {
           throw new InvalidArgumentError("maxRequestsPerClient must be a positive number");
         }
-        if (localAddress != null && (typeof localAddress !== "string" || net2.isIP(localAddress) === 0)) {
+        if (localAddress != null && (typeof localAddress !== "string" || net3.isIP(localAddress) === 0)) {
           throw new InvalidArgumentError("localAddress must be valid string IP address");
         }
         if (maxResponseSize != null && (!Number.isInteger(maxResponseSize) || maxResponseSize < -1)) {
@@ -318527,7 +318527,7 @@ var require_client2 = __commonJS({
         }
         super();
         if (typeof connect2 !== "function") {
-          connect2 = buildConnector({
+          connect2 = buildConnector2({
             ...tls,
             maxCachedSessions,
             allowH2,
@@ -318665,7 +318665,7 @@ var require_client2 = __commonJS({
         const idx = hostname3.indexOf("]");
         assert3(idx !== -1);
         const ip = hostname3.substring(1, idx);
-        assert3(net2.isIPv6(ip));
+        assert3(net3.isIPv6(ip));
         hostname3 = ip;
       }
       client[kConnecting] = true;
@@ -319100,7 +319100,7 @@ var require_pool2 = __commonJS({
     } = require_errors7();
     var util5 = require_util20();
     var { kUrl } = require_symbols();
-    var buildConnector = require_connect();
+    var buildConnector2 = require_connect();
     var kOptions = Symbol("options");
     var kConnections = Symbol("connections");
     var kFactory = Symbol("factory");
@@ -319133,7 +319133,7 @@ var require_pool2 = __commonJS({
         }
         super();
         if (typeof connect !== "function") {
-          connect = buildConnector({
+          connect = buildConnector2({
             ...tls,
             maxCachedSessions,
             allowH2,
@@ -319448,7 +319448,7 @@ var require_proxy_agent = __commonJS({
     var Pool = require_pool2();
     var DispatcherBase = require_dispatcher_base();
     var { InvalidArgumentError, RequestAbortedError, SecureProxyConnectionError } = require_errors7();
-    var buildConnector = require_connect();
+    var buildConnector2 = require_connect();
     var Client3 = require_client2();
     var kAgent = Symbol("proxy agent");
     var kClient = Symbol("proxy client");
@@ -319546,8 +319546,8 @@ var require_proxy_agent = __commonJS({
           }
           return new Client3(origin2, options);
         } : void 0;
-        const connect = buildConnector({ ...opts.proxyTls });
-        this[kConnectEndpoint] = buildConnector({ ...opts.requestTls });
+        const connect = buildConnector2({ ...opts.proxyTls });
+        this[kConnectEndpoint] = buildConnector2({ ...opts.requestTls });
         this[kClient] = clientFactory(url5, { connect, factory });
         this[kTunnelProxy] = proxyTunnel;
         this[kAgent] = new Agent2({
@@ -322928,8 +322928,8 @@ var require_dump = __commonJS({
 var require_dns = __commonJS({
   "packages/core/node_modules/undici/lib/interceptor/dns.js"(exports2, module2) {
     "use strict";
-    var { isIP: isIP3 } = __require("node:net");
-    var { lookup: lookup2 } = __require("node:dns");
+    var { isIP: isIP4 } = __require("node:net");
+    var { lookup: lookup3 } = __require("node:dns");
     var DecoratorHandler = require_decorator_handler();
     var { InvalidArgumentError, InformationalError } = require_errors7();
     var maxInt = Math.pow(2, 31) - 1;
@@ -323019,7 +323019,7 @@ var require_dns = __commonJS({
         }
       }
       #defaultLookup(origin, opts, cb) {
-        lookup2(
+        lookup3(
           origin.hostname,
           {
             all: true,
@@ -323227,7 +323227,7 @@ var require_dns = __commonJS({
       return (dispatch) => {
         return function dnsInterceptor(origDispatchOpts, handler) {
           const origin = origDispatchOpts.origin.constructor === URL ? origDispatchOpts.origin : new URL(origDispatchOpts.origin);
-          if (isIP3(origin.hostname) !== 0) {
+          if (isIP4(origin.hostname) !== 0) {
             return dispatch(origDispatchOpts, handler);
           }
           instance2.runLookup(origin, origDispatchOpts, (err2, newOrigin) => {
@@ -331337,7 +331337,7 @@ var require_undici = __commonJS({
     var util5 = require_util20();
     var { InvalidArgumentError } = errors;
     var api = require_api2();
-    var buildConnector = require_connect();
+    var buildConnector2 = require_connect();
     var MockClient = require_mock_client();
     var { MockCallHistory, MockCallHistoryLog } = require_mock_call_history();
     var MockAgent = require_mock_agent();
@@ -331373,7 +331373,7 @@ var require_undici = __commonJS({
     };
     var SqliteCacheStore = require_sqlite_cache_store();
     module2.exports.cacheStores.SqliteCacheStore = SqliteCacheStore;
-    module2.exports.buildConnector = buildConnector;
+    module2.exports.buildConnector = buildConnector2;
     module2.exports.errors = errors;
     module2.exports.util = {
       parseHeaders: util5.parseHeaders,
@@ -336796,7 +336796,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.59.0-preview.0";
+    return "0.60.0-nightly.20260904.g87a9c71d5";
   })();
   return versionPromise;
 }
@@ -359644,15 +359644,106 @@ ${result2.output}`;
 
 // packages/core/dist/src/utils/fetch.js
 import { URL as URL7 } from "node:url";
+import * as net2 from "node:net";
+import { lookup } from "node:dns/promises";
+function getBuildConnector() {
+  try {
+    const fn2 = undici.buildConnector;
+    return typeof fn2 === "function" ? fn2 : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function safeLookup(hostname3, options, callback) {
+  const sanitized = sanitizeHostname(hostname3);
+  if (sanitized === "localhost" || sanitized.endsWith(".localhost") || sanitized.endsWith(".local") || sanitized.endsWith(".internal")) {
+    callback(new PrivateIpError(`Access to internal host ${sanitized} is blocked`), "");
+    return;
+  }
+  if (net2.isIP(sanitized)) {
+    if (isAddressPrivate(sanitized)) {
+      callback(new PrivateIpError(`Access to private IP ${sanitized} is blocked`), "");
+      return;
+    }
+    if (options?.all) {
+      callback(null, [{ address: sanitized, family: net2.isIP(sanitized) }]);
+    } else {
+      callback(null, sanitized, net2.isIP(sanitized));
+    }
+    return;
+  }
+  lookup(sanitized, { all: true }).then((addresses) => {
+    if (!addresses || addresses.length === 0) {
+      callback(new Error(`getaddrinfo ENOTFOUND ${sanitized}`), "");
+      return;
+    }
+    for (const addr2 of addresses) {
+      if (isAddressPrivate(addr2.address)) {
+        callback(new PrivateIpError(`Access to private IP ${addr2.address} (resolved from ${sanitized}) is blocked`), "");
+        return;
+      }
+    }
+    if (options?.all) {
+      callback(null, addresses);
+    } else {
+      const family = options?.family;
+      const match2 = family ? addresses.find((a) => a.family === family) || addresses[0] : addresses[0];
+      callback(null, match2.address, match2.family);
+    }
+  }).catch((err2) => {
+    callback(err2 instanceof Error ? err2 : new Error(String(err2)), "");
+  });
+}
+function createSafeConnector(connectorOpts, customDefaultConnector) {
+  const buildConnectorFn = getBuildConnector();
+  const safeConnectorOpts = {
+    ...connectorOpts,
+    lookup: safeLookup
+  };
+  const defaultConnector = customDefaultConnector ?? (buildConnectorFn ? buildConnectorFn(safeConnectorOpts) : void 0);
+  return function safeConnect(opts, callback) {
+    if (!defaultConnector) {
+      callback(new Error("Connector is unavailable"), null);
+      return;
+    }
+    const rawHostname = opts.hostname;
+    const sanitized = sanitizeHostname(rawHostname);
+    if (sanitized === "localhost" || sanitized.endsWith(".localhost") || sanitized.endsWith(".local") || sanitized.endsWith(".internal")) {
+      callback(new PrivateIpError(`Access to internal host ${sanitized} is blocked`), null);
+      return;
+    }
+    if (net2.isIP(sanitized) && isAddressPrivate(sanitized)) {
+      callback(new PrivateIpError(`Access to private IP ${sanitized} is blocked`), null);
+      return;
+    }
+    defaultConnector(opts, callback);
+  };
+}
+function createSafeAgent(options) {
+  const buildConnectorFn = getBuildConnector();
+  if (!buildConnectorFn) {
+    throw new Error("Security initialization failed: undici.buildConnector is not available.");
+  }
+  const connect = createSafeConnector();
+  return new undici.Agent({
+    headersTimeout: options?.headersTimeout ?? defaultHeadersTimeout,
+    bodyTimeout: options?.bodyTimeout ?? defaultBodyTimeout,
+    connect
+  });
+}
 function updateGlobalFetchTimeouts(timeoutMs) {
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
     throw new RangeError(`Invalid timeout value: ${timeoutMs}. Must be a positive finite number.`);
   }
   defaultHeadersTimeout = timeoutMs;
+  defaultSafeAgent = createSafeAgent({
+    headersTimeout: defaultHeadersTimeout,
+    bodyTimeout: defaultBodyTimeout
+  });
   if (currentProxy) {
     setGlobalProxy(currentProxy);
   } else {
-    (0, import_undici2.setGlobalDispatcher)(new import_undici2.Agent({
+    undici.setGlobalDispatcher(new undici.Agent({
       headersTimeout: defaultHeadersTimeout,
       bodyTimeout: defaultBodyTimeout
     }));
@@ -359665,21 +359756,13 @@ function isLoopbackHost(hostname3) {
   const sanitized = sanitizeHostname(hostname3);
   return sanitized === "localhost" || sanitized === "127.0.0.1" || sanitized === "::1";
 }
-function isPrivateIp(url5) {
-  try {
-    const hostname3 = new URL7(url5).hostname;
-    return isAddressPrivate(hostname3);
-  } catch {
-    return false;
-  }
-}
 function isBenchmarkAddress(addr2) {
   const [rangeAddr, rangeMask] = IANA_BENCHMARK_RANGE;
   return addr2 instanceof import_ipaddr.default.IPv4 && rangeAddr instanceof import_ipaddr.default.IPv4 && addr2.match(rangeAddr, rangeMask);
 }
 function isAddressPrivate(address) {
   const sanitized = sanitizeHostname(address);
-  if (sanitized === "localhost") {
+  if (sanitized === "localhost" || sanitized.endsWith(".localhost") || sanitized.endsWith(".local") || sanitized.endsWith(".internal")) {
     return true;
   }
   try {
@@ -359698,7 +359781,57 @@ function isAddressPrivate(address) {
     return true;
   }
 }
+async function isPrivateIpAsync(url5) {
+  let parsedUrl;
+  try {
+    parsedUrl = new URL7(url5);
+  } catch (error2) {
+    if (error2 instanceof TypeError) {
+      return false;
+    }
+    throw error2;
+  }
+  const hostname3 = sanitizeHostname(parsedUrl.hostname);
+  if (hostname3 === "localhost" || hostname3.endsWith(".localhost") || hostname3.endsWith(".local") || hostname3.endsWith(".internal")) {
+    return true;
+  }
+  if (net2.isIP(hostname3)) {
+    return isAddressPrivate(hostname3);
+  }
+  try {
+    const addresses = await lookup(hostname3, { all: true });
+    if (!addresses || addresses.length === 0) {
+      return true;
+    }
+    return addresses.some((addr2) => isAddressPrivate(addr2.address));
+  } catch (error2) {
+    throw new Error("Failed to verify if URL resolves to private IP", {
+      cause: error2
+    });
+  }
+}
+async function isPrivateIp(url5) {
+  try {
+    return await isPrivateIpAsync(url5);
+  } catch {
+    return true;
+  }
+}
+function createSafeProxyAgent(proxyUrl) {
+  const trimmedProxy = proxyUrl.trim();
+  const noProxy = (process.env["NO_PROXY"] ?? process.env["no_proxy"] ?? "")?.trim();
+  return new undici.EnvHttpProxyAgent({
+    httpProxy: trimmedProxy,
+    httpsProxy: trimmedProxy,
+    noProxy,
+    headersTimeout: defaultHeadersTimeout,
+    bodyTimeout: defaultBodyTimeout
+  });
+}
 async function fetchWithTimeout(url5, timeout, options) {
+  if (await isPrivateIp(url5)) {
+    throw new PrivateIpError(`Access to blocked or private host ${url5} is not allowed.`);
+  }
   const controller = new AbortController();
   const timeoutId = setTimeout(() => controller.abort(), timeout);
   if (options?.signal) {
@@ -359711,10 +359844,14 @@ async function fetchWithTimeout(url5, timeout, options) {
     }
   }
   try {
-    const response = await fetch(url5, {
+    const fetchOptions = {
       ...options,
       signal: controller.signal
-    });
+    };
+    if (!fetchOptions.dispatcher) {
+      fetchOptions.dispatcher = currentProxy ? createSafeProxyAgent(currentProxy) : defaultSafeAgent;
+    }
+    const response = await fetch(url5, fetchOptions);
     return response;
   } catch (error2) {
     if (isAbortError(error2)) {
@@ -359723,6 +359860,14 @@ async function fetchWithTimeout(url5, timeout, options) {
       }
       throw new FetchError3(`Request timed out after ${timeout}ms`, "ETIMEDOUT");
     }
+    if (error2 instanceof PrivateIpError) {
+      throw error2;
+    }
+    if (error2 && typeof error2 === "object" && "cause" in error2) {
+      if (error2.cause instanceof PrivateIpError) {
+        throw error2.cause;
+      }
+    }
     throw new FetchError3(getErrorMessage(error2), void 0, { cause: error2 });
   } finally {
     clearTimeout(timeoutId);
@@ -359732,7 +359877,7 @@ function setGlobalProxy(proxy2) {
   const trimmedProxy = proxy2.trim();
   currentProxy = trimmedProxy;
   const noProxy = (process.env["NO_PROXY"] ?? process.env["no_proxy"] ?? "")?.trim();
-  (0, import_undici2.setGlobalDispatcher)(new import_undici2.EnvHttpProxyAgent({
+  undici.setGlobalDispatcher(new undici.EnvHttpProxyAgent({
     httpProxy: trimmedProxy,
     httpsProxy: trimmedProxy,
     noProxy,
@@ -359740,12 +359885,12 @@ function setGlobalProxy(proxy2) {
     bodyTimeout: defaultBodyTimeout
   }));
 }
-var import_undici2, import_ipaddr, FetchError3, defaultHeadersTimeout, defaultBodyTimeout, currentProxy, IANA_BENCHMARK_RANGE;
+var undici, import_ipaddr, FetchError3, PrivateIpError, defaultHeadersTimeout, defaultBodyTimeout, currentProxy, defaultSafeAgent, IANA_BENCHMARK_RANGE;
 var init_fetch = __esm({
   "packages/core/dist/src/utils/fetch.js"() {
     "use strict";
     init_errors2();
-    import_undici2 = __toESM(require_undici(), 1);
+    undici = __toESM(require_undici(), 1);
     import_ipaddr = __toESM(require_ipaddr(), 1);
     FetchError3 = class extends Error {
       code;
@@ -359755,10 +359900,17 @@ var init_fetch = __esm({
         this.name = "FetchError";
       }
     };
+    PrivateIpError = class extends Error {
+      constructor(message = "Access to private network is blocked") {
+        super(message);
+        this.name = "PrivateIpError";
+      }
+    };
     defaultHeadersTimeout = 6e4;
     defaultBodyTimeout = 3e5;
     currentProxy = void 0;
-    (0, import_undici2.setGlobalDispatcher)(new import_undici2.Agent({
+    defaultSafeAgent = createSafeAgent();
+    undici.setGlobalDispatcher(new undici.Agent({
       headersTimeout: defaultHeadersTimeout,
       bodyTimeout: defaultBodyTimeout
     }));
@@ -365132,21 +365284,21 @@ var init_web_fetch = __esm({
         });
         logNetworkRetryAttempt(this.context.config, new NetworkRetryAttemptEvent(attempt, maxAttempts, errorType, delayMs, modelName));
       }
-      isBlockedHost(urlStr) {
+      async isBlockedHost(urlStr) {
         try {
           const url5 = new URL(urlStr);
           const hostname3 = url5.hostname.toLowerCase();
-          if (hostname3 === "localhost" || hostname3 === "127.0.0.1") {
+          if (hostname3 === "localhost" || hostname3 === "127.0.0.1" || hostname3.endsWith(".localhost") || hostname3.endsWith(".local") || hostname3.endsWith(".internal")) {
             return true;
           }
-          return isPrivateIp(urlStr);
+          return await isPrivateIp(urlStr);
         } catch {
           return true;
         }
       }
       async executeFallbackForUrl(urlStr, signal) {
         const url5 = convertGithubUrlToRaw(urlStr);
-        if (this.isBlockedHost(url5)) {
+        if (await this.isBlockedHost(url5)) {
           debugLogger.warn(`[WebFetchTool] Blocked access to host: ${url5}`);
           throw new Error(`Access to blocked or private host ${url5} is not allowed.`);
         }
@@ -365188,12 +365340,12 @@ var init_web_fetch = __esm({
         }
         return textContent2;
       }
-      filterAndValidateUrls(urls) {
+      async filterAndValidateUrls(urls) {
         const uniqueUrls = [...new Set(urls.map(normalizeUrl))];
         const toFetch = [];
         const skipped = [];
         for (const url5 of uniqueUrls) {
-          if (this.isBlockedHost(url5)) {
+          if (await this.isBlockedHost(url5)) {
             debugLogger.warn(`[WebFetchTool] Skipped private or local host: ${url5}`);
             logWebFetchFallbackAttempt(this.context.config, new WebFetchFallbackAttemptEvent("private_ip_skipped"));
             skipped.push(`[Blocked Host] ${url5}`);
@@ -365383,7 +365535,7 @@ ${aggregatedContent}
           };
         }
         url5 = convertGithubUrlToRaw(url5);
-        if (this.isBlockedHost(url5)) {
+        if (await this.isBlockedHost(url5)) {
           const errorMessage = `Access to blocked or private host ${url5} is not allowed.`;
           debugLogger.warn(`[WebFetchTool] Blocked experimental fetch to host: ${url5}`);
           return {
@@ -365497,7 +365649,7 @@ Response: ${rawResponseText}`;
         }
         const userPrompt = this.params.prompt;
         const { validUrls } = parsePrompt(userPrompt);
-        const { toFetch, skipped } = this.filterAndValidateUrls(validUrls);
+        const { toFetch, skipped } = await this.filterAndValidateUrls(validUrls);
         if (toFetch.length === 0 && skipped.length > 0) {
           const errorMessage = `All requested URLs were skipped: ${skipped.join(", ")}`;
           debugLogger.error(`[WebFetchTool] ${errorMessage}`);
@@ -374546,7 +374698,7 @@ var init_http_provider = __esm({
 });
 
 // packages/core/dist/src/mcp/oauth-utils.js
-import { lookup } from "node:dns/promises";
+import { lookup as lookup2 } from "node:dns/promises";
 function isLoopbackUrl(urlStr) {
   try {
     const url5 = new URL(urlStr);
@@ -374601,7 +374753,7 @@ async function validateOAuthEndpointUrl(urlStr, options) {
     throw new OAuthSecurityError(`OAuth endpoint "${resolvedUrl}" points to private or reserved IP address which is blocked.`);
   }
   try {
-    const addresses = await lookup(hostname3, { all: true });
+    const addresses = await lookup2(hostname3, { all: true });
     if (!addresses || addresses.length === 0) {
       throw new OAuthSecurityError(`Failed to resolve hostname "${hostname3}" for OAuth endpoint "${resolvedUrl}".`);
     }
@@ -378502,7 +378654,29 @@ function generatePKCEParams() {
   const state = crypto20.randomBytes(16).toString("base64url");
   return { codeVerifier, codeChallenge, state };
 }
-function startCallbackServer(expectedState, port) {
+function areIssuersEqual(issuerA, issuerB) {
+  if (issuerA === issuerB && !issuerA.includes("@"))
+    return true;
+  const normalize6 = (iss) => {
+    try {
+      const u2 = new URL8(iss);
+      if (u2.username || u2.password) {
+        return null;
+      }
+      const normalizedPath = u2.pathname.replace(/\/+$/, "");
+      return `${u2.protocol}//${u2.host}${normalizedPath}${u2.search}${u2.hash}`;
+    } catch {
+      return iss.replace(/\/+$/, "");
+    }
+  };
+  const normA = normalize6(issuerA);
+  const normB = normalize6(issuerB);
+  if (normA === null || normB === null) {
+    return false;
+  }
+  return normA === normB;
+}
+function startCallbackServer(expectedState, port, expectedIssuer) {
   let portResolve;
   let portReject;
   const portPromise = new Promise((resolve23, reject) => {
@@ -378523,7 +378697,9 @@ function startCallbackServer(expectedState, port) {
         const code = url5.searchParams.get("code");
         const state = url5.searchParams.get("state");
         const error2 = url5.searchParams.get("error");
+        const iss = url5.searchParams.get("iss") || void 0;
         if (error2) {
+          debugLogger.warn(`OAuth callback received error: ${error2}`);
           res.writeHead(HTTP_OK, { "Content-Type": "text/html" });
           res.end(`
               <html>
@@ -378540,17 +378716,56 @@ function startCallbackServer(expectedState, port) {
           return;
         }
         if (!code || !state) {
+          debugLogger.warn("OAuth callback rejected: Missing code or state parameter.");
           res.writeHead(400);
           res.end("Missing code or state parameter");
           return;
         }
         if (state !== expectedState) {
+          debugLogger.error(`OAuth callback state mismatch: received state "${state}", expected "${expectedState}". Possible CSRF attack.`);
           res.writeHead(400);
           res.end("Invalid state parameter");
           server.close();
           reject(new Error("State mismatch - possible CSRF attack"));
           return;
         }
+        if (expectedIssuer) {
+          if (!iss) {
+            debugLogger.error('OAuth callback rejected: Missing required "iss" parameter when an expected issuer is configured. Possible IdP mix-up attack (RFC 9207).');
+            res.writeHead(400, { "Content-Type": "text/html" });
+            res.end(`
+                <html>
+                  <body>
+                    <h1>Authentication Failed</h1>
+                    <p>Error: Missing issuer parameter in response.</p>
+                    <p>You can close this window.</p>
+                  </body>
+                </html>
+              `);
+            server.close();
+            reject(new Error('Missing "iss" parameter in authorization response per RFC 9207'));
+            return;
+          }
+          if (!areIssuersEqual(iss, expectedIssuer)) {
+            debugLogger.error("OAuth callback rejected: Issuer mismatch between authorization response and expected authorization server. Possible IdP mix-up attack (RFC 9207).");
+            res.writeHead(400, { "Content-Type": "text/html" });
+            res.end(`
+                <html>
+                  <body>
+                    <h1>Authentication Failed</h1>
+                    <p>Error: Issuer mismatch - possible OAuth mix-up attack.</p>
+                    <p>You can close this window.</p>
+                  </body>
+                </html>
+              `);
+            server.close();
+            reject(new Error("Issuer mismatch in authorization response - possible OAuth mix-up attack"));
+            return;
+          }
+          debugLogger.debug("\u2713 OAuth callback issuer validated successfully.");
+        } else if (iss) {
+          debugLogger.debug('OAuth callback received "iss" parameter (no expected issuer was configured).');
+        }
         res.writeHead(HTTP_OK, { "Content-Type": "text/html" });
         res.end(`
             <html>
@@ -378562,7 +378777,7 @@ function startCallbackServer(expectedState, port) {
             </html>
           `);
         server.close();
-        resolve23({ code, state });
+        resolve23({ code, state, iss });
       } catch (error2) {
         server.close();
         reject(error2);
@@ -407781,7 +407996,8 @@ var init_oauth_provider = __esm({
         }
         const pkceParams = generatePKCEParams();
         const preferredPort = getPortFromUrl(config2.redirectUri);
-        const callbackServer = startCallbackServer(pkceParams.state, preferredPort);
+        debugLogger.debug(`Starting callback server for "${serverName}" (expected issuer: ${config2.issuer || "none"})...`);
+        const callbackServer = startCallbackServer(pkceParams.state, preferredPort, config2.issuer);
         const redirectPort = await callbackServer.port;
         debugLogger.debug(`Callback server listening on port ${redirectPort}`);
         if (!config2.clientId) {
@@ -408626,7 +408842,7 @@ async function connectToMcpServer(clientVersion, mcpServerName, mcpServerConfig,
 }
 function createUrlTransport(mcpServerName, mcpServerConfig, transportOptions) {
   const noProxy = process.env["NO_PROXY"] || process.env["no_proxy"];
-  const agent = new import_undici3.EnvHttpProxyAgent({ noProxy });
+  const agent = new import_undici2.EnvHttpProxyAgent({ noProxy });
   const baseFetch = transportOptions.fetch ?? globalThis.fetch;
   const httpOptions = {
     ...transportOptions,
@@ -408753,7 +408969,7 @@ function isEnabled(funcDecl, mcpServerName, mcpServerConfig) {
   }
   return !includeTools || includeTools.some((tool) => tool === funcDecl.name || tool.startsWith(`${funcDecl.name}(`));
 }
-var import_undici3, import_shell_quote7, MCP_DEFAULT_TIMEOUT_MSEC, MCPServerStatus, MCPDiscoveryState, McpClient, serverStatuses, mcpDiscoveryState, mcpServerRequiresOAuth, statusChangeListeners, LenientJsonSchemaValidator, McpCallableTool2;
+var import_undici2, import_shell_quote7, MCP_DEFAULT_TIMEOUT_MSEC, MCPServerStatus, MCPDiscoveryState, McpClient, serverStatuses, mcpDiscoveryState, mcpServerRequiresOAuth, statusChangeListeners, LenientJsonSchemaValidator, McpCallableTool2;
 var init_mcp_client = __esm({
   "packages/core/dist/src/tools/mcp-client.js"() {
     "use strict";
@@ -408762,7 +408978,7 @@ var init_mcp_client = __esm({
     init_sse();
     init_stdio3();
     init_streamableHttp();
-    import_undici3 = __toESM(require_undici(), 1);
+    import_undici2 = __toESM(require_undici(), 1);
     init_types12();
     import_shell_quote7 = __toESM(require_shell_quote(), 1);
     init_config4();
@@ -414251,7 +414467,7 @@ var init_dist_node = __esm({
 });
 
 // packages/core/dist/src/agents/a2a-client-manager.js
-var grpc2, import_undici4, A2A_TIMEOUT, A2AClientManager;
+var grpc2, import_undici3, A2A_TIMEOUT, A2AClientManager;
 var init_a2a_client_manager = __esm({
   "packages/core/dist/src/agents/a2a-client-manager.js"() {
     "use strict";
@@ -414259,7 +414475,7 @@ var init_a2a_client_manager = __esm({
     init_grpc();
     grpc2 = __toESM(require_src25(), 1);
     init_dist_node();
-    import_undici4 = __toESM(require_undici(), 1);
+    import_undici3 = __toESM(require_undici(), 1);
     init_a2aUtils();
     init_debugLogger();
     init_a2a_errors();
@@ -414279,12 +414495,12 @@ var init_a2a_client_manager = __esm({
           bodyTimeout: A2A_TIMEOUT
         };
         if (proxyUrl) {
-          this.a2aDispatcher = new import_undici4.ProxyAgent({
+          this.a2aDispatcher = new import_undici3.ProxyAgent({
             uri: proxyUrl,
             ...agentOptions
           });
         } else {
-          this.a2aDispatcher = new import_undici4.Agent(agentOptions);
+          this.a2aDispatcher = new import_undici3.Agent(agentOptions);
         }
         this.a2aFetch = (input, init2) => fetch(input, { ...init2, dispatcher: this.a2aDispatcher });
       }