@hasna/mementos 0.14.86 → 0.14.88

package/dist/server/index.js

@@ -65,6 +65,115 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
+// ../../node_modules/.bun/@hasna+paths@0.1.0/node_modules/@hasna/paths/dist/index.js
+import { homedir } from "os";
+import { join } from "path";
+function assertApp(app) {
+  if (typeof app !== "string" || app.length === 0) {
+    throw new TypeError("paths: app must be a non-empty string");
+  }
+  if (!APP_SLUG_RE.test(app)) {
+    throw new TypeError(`paths: invalid app slug "${app}" \u2014 expected lowercase kebab-case ([a-z0-9]+(-[a-z0-9]+)*)`);
+  }
+}
+function envOf(options) {
+  return options.env ?? process.env;
+}
+function envValue(options, kind) {
+  const value = envOf(options)[KIND_ENV[kind]];
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function baseDir(kind, options) {
+  const override = envValue(options, kind);
+  if (override)
+    return override;
+  const home = options.home ?? homedir();
+  const platform = options.platform ?? process.platform;
+  if (isMacOS(platform)) {
+    switch (kind) {
+      case "config":
+      case "data":
+        return join(home, "Library", "Application Support", "Hasna");
+      case "cache":
+        return join(home, "Library", "Caches", "Hasna");
+      case "state":
+        return join(home, "Library", "Logs", "Hasna");
+    }
+  }
+  switch (kind) {
+    case "config":
+      return join(home, ".config", "hasna");
+    case "data":
+      return join(home, ".local", "share", "hasna");
+    case "state":
+      return join(home, ".local", "state", "hasna");
+    case "cache":
+      return join(home, ".cache", "hasna");
+  }
+}
+function resolvePath(kind, options) {
+  assertApp(options.app);
+  const appSegment = options.internal === true ? join("internal", options.app) : options.app;
+  return join(baseDir(kind, options), appSegment);
+}
+function dataDir(options) {
+  return resolvePath("data", options);
+}
+var KIND_ENV, APP_SLUG_RE;
+var init_dist = __esm(() => {
+  KIND_ENV = {
+    config: "HASNA_CONFIG_HOME",
+    data: "HASNA_DATA_HOME",
+    state: "HASNA_STATE_HOME",
+    cache: "HASNA_CACHE_HOME"
+  };
+  APP_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+});
+
+// src/lib/paths.ts
+import { existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2, resolve } from "path";
+function effectiveHome() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir2() || "/tmp";
+}
+function legacyDataRoot() {
+  return join2(effectiveHome(), ".hasna", "mementos");
+}
+function resolverDataRoot() {
+  return dataDir({
+    app: "mementos",
+    home: process.env["HOME"] || process.env["USERPROFILE"] || undefined
+  });
+}
+function adoptResolverDataRoot(resolved, env = process.env) {
+  const dataOverride = env.HASNA_DATA_HOME;
+  if (typeof dataOverride === "string" && dataOverride.trim().length > 0)
+    return true;
+  return existsSync(join2(resolved, "mementos.db"));
+}
+function exactDataRoot() {
+  for (const key of ["HASNA_MEMENTOS_HOME", "MEMENTOS_HOME"]) {
+    const dir = process.env[key]?.trim();
+    if (dir)
+      return resolve(dir);
+  }
+  return;
+}
+function getDataRoot() {
+  const exact = exactDataRoot();
+  if (exact)
+    return exact;
+  const resolved = resolverDataRoot();
+  return adoptResolverDataRoot(resolved) ? resolve(resolved) : resolve(legacyDataRoot());
+}
+var init_paths = __esm(() => {
+  init_dist();
+});
+
 // src/generated/storage-kit/own.ts
 function ownProp(source, key) {
   if (source === null || source === undefined)
@@ -168,9 +277,8 @@ var init_retired_storage_mode = __esm(() => {
 
 // src/storage.ts
 import { Database } from "bun:sqlite";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join4 } from "path";
 import { fileURLToPath } from "url";
 import { Worker } from "worker_threads";
 import pg from "pg";
@@ -378,7 +486,7 @@ function readEnv(name) {
   return value ? value : null;
 }
 function readConfigFile() {
-  if (!existsSync2(STORAGE_CONFIG_PATH)) {
+  if (!existsSync3(STORAGE_CONFIG_PATH)) {
     return {};
   }
   try {
@@ -483,11 +591,7 @@ function validatePostgresConnectionString(value) {
 function getConfiguredConnectionString() {
   return getStorageDatabaseUrl() ?? undefined;
 }
-function getStorageConnectionString(dbName = "mementos") {
-  assertNoLegacyStorageMode2();
-  if (!isServerContext()) {
-    throw new Error("Refusing to construct an RDS Postgres DSN outside the mementos-serve server. " + "The raw database DSN is NEVER distributed to client machines. " + "Clients must use the HTTP API: set HASNA_MEMENTOS_API_URL and " + "HASNA_MEMENTOS_API_KEY (and unset HASNA_MEMENTOS_DATABASE_URL).");
-  }
+function resolveConfiguredConnectionString(dbName) {
   const envConnectionString = getConfiguredConnectionString();
   if (envConnectionString) {
     const validation = validatePostgresConnectionString(envConnectionString);
@@ -506,7 +610,7 @@ function getStorageConnectionString(dbName = "mementos") {
     missing.push("storage.rds.username");
   }
   if (missing.length > 0) {
-    throw new Error(`Remote storage database is not configured. Missing ${missing.join(", ")}. Set HASNA_MEMENTOS_DATABASE_URL or configure ~/.hasna/mementos/storage/config.json.`);
+    throw new Error(`Remote storage database is not configured. Missing ${missing.join(", ")}. Set HASNA_MEMENTOS_DATABASE_URL or configure ${STORAGE_CONFIG_PATH}.`);
   }
   const password = process.env[password_env];
   if (!password) {
@@ -515,10 +619,18 @@ function getStorageConnectionString(dbName = "mementos") {
   const sslParam = ssl ? "?sslmode=require" : "";
   return `postgres://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbName}${sslParam}`;
 }
+function getStorageConnectionString(dbName = "mementos") {
+  assertNoLegacyStorageMode2();
+  if (!isServerContext()) {
+    throw new Error("Refusing to construct an RDS Postgres DSN outside the mementos-serve server. " + "The raw database DSN is NEVER distributed to client machines. " + "Clients must use the HTTP API: set HASNA_MEMENTOS_API_URL and " + "HASNA_MEMENTOS_API_KEY (and unset HASNA_MEMENTOS_DATABASE_URL).");
+  }
+  return resolveConfiguredConnectionString(dbName);
+}
 var _serverContext = false, PgSyncPool, MEMENTOS_STORAGE_ENV, MEMENTOS_STORAGE_FALLBACK_ENV, LOCAL_DATA_DIR, DEFAULT_STORAGE_CONFIG, STORAGE_CONFIG_DIR, STORAGE_CONFIG_PATH, DATABASE_ENV_NAMES, SECRET_QUERY_PARAMS;
 var init_storage = __esm(() => {
   init_backend();
   init_retired_storage_mode();
+  init_paths();
   PgSyncPool = class PgSyncPool {
     worker;
     status;
@@ -536,12 +648,12 @@ var init_storage = __esm(() => {
       const ext = import.meta.url.endsWith(".ts") ? ".ts" : ".js";
       const here = fileURLToPath(new URL(".", import.meta.url));
       const candidates = [
-        join2(here, `pg-sync-worker${ext}`),
-        join2(here, "..", `pg-sync-worker${ext}`),
-        join2(here, "..", "..", `pg-sync-worker${ext}`)
+        join4(here, `pg-sync-worker${ext}`),
+        join4(here, "..", `pg-sync-worker${ext}`),
+        join4(here, "..", "..", `pg-sync-worker${ext}`)
       ];
       for (const candidate of candidates) {
-        if (existsSync2(candidate))
+        if (existsSync3(candidate))
           return candidate;
       }
       return candidates[0];
@@ -612,7 +724,7 @@ var init_storage = __esm(() => {
   MEMENTOS_STORAGE_FALLBACK_ENV = {
     databaseUrl: "MEMENTOS_DATABASE_URL"
   };
-  LOCAL_DATA_DIR = join2(homedir2(), ".hasna", "mementos");
+  LOCAL_DATA_DIR = getDataRoot();
   DEFAULT_STORAGE_CONFIG = {
     rds: {
       host: "",
@@ -627,8 +739,8 @@ var init_storage = __esm(() => {
       schedule_minutes: 0
     }
   };
-  STORAGE_CONFIG_DIR = join2(LOCAL_DATA_DIR, "storage");
-  STORAGE_CONFIG_PATH = join2(STORAGE_CONFIG_DIR, "config.json");
+  STORAGE_CONFIG_DIR = join4(LOCAL_DATA_DIR, "storage");
+  STORAGE_CONFIG_PATH = join4(STORAGE_CONFIG_DIR, "config.json");
   DATABASE_ENV_NAMES = [
     { name: MEMENTOS_STORAGE_ENV.databaseUrl, deprecated: false },
     { name: MEMENTOS_STORAGE_FALLBACK_ENV.databaseUrl, deprecated: false }
@@ -646,7 +758,7 @@ var init_storage = __esm(() => {
 
 // src/db/api-mode.ts
 import { tmpdir } from "os";
-import { join as join3 } from "path";
+import { join as join5 } from "path";
 import { writeFileSync as writeFileSync3, unlinkSync as unlinkSync2 } from "fs";
 import { randomUUID } from "crypto";
 function firstEnv2(keys) {
@@ -756,7 +868,7 @@ x-api-key: ${cfg.apiKey}
   ];
   let bodyFile;
   if (hasBody) {
-    bodyFile = join3(tmpdir(), `mem-req-${process.pid}-${randomUUID()}.json`);
+    bodyFile = join5(tmpdir(), `mem-req-${process.pid}-${randomUUID()}.json`);
     writeFileSync3(bodyFile, JSON.stringify(body), { mode: 384 });
     args.push("--data-binary", `@${bodyFile}`);
   }
@@ -2048,18 +2160,18 @@ __export(exports_database, {
   escapeLikePrefix: () => escapeLikePrefix,
   closeDatabase: () => closeDatabase
 });
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, cpSync as cpSync2 } from "fs";
-import { dirname as dirname2, join as join4, resolve as resolve2 } from "path";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, cpSync as cpSync2 } from "fs";
+import { dirname as dirname2, join as join6, resolve as resolve3 } from "path";
 function isInMemoryDb2(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function findNearestMementosDb(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const legacyHomeDb = resolve2(home, ".mementos", "mementos.db");
+  const legacyHomeDb = resolve3(home, ".mementos", "mementos.db");
   while (true) {
-    const candidate = join4(dir, ".mementos", "mementos.db");
-    if (existsSync3(candidate) && resolve2(candidate) !== legacyHomeDb)
+    const candidate = join6(dir, ".mementos", "mementos.db");
+    if (existsSync4(candidate) && resolve3(candidate) !== legacyHomeDb)
       return candidate;
     const parent = dirname2(dir);
     if (parent === dir)
@@ -2069,9 +2181,9 @@ function findNearestMementosDb(startDir) {
   return null;
 }
 function findGitRoot2(startDir) {
-  let dir = resolve2(startDir);
+  let dir = resolve3(startDir);
   while (true) {
-    if (existsSync3(join4(dir, ".git")))
+    if (existsSync4(join6(dir, ".git")))
       return dir;
     const parent = dirname2(dir);
     if (parent === dir)
@@ -2082,10 +2194,10 @@ function findGitRoot2(startDir) {
 }
 function migrateGlobalDir() {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const newDir = join4(home, ".hasna", "mementos");
-  const oldDir = join4(home, ".mementos");
-  if (!existsSync3(newDir) && existsSync3(oldDir)) {
-    mkdirSync3(join4(home, ".hasna"), { recursive: true });
+  const newDir = getDataRoot();
+  const oldDir = join6(home, ".mementos");
+  if (!existsSync4(newDir) && existsSync4(oldDir)) {
+    mkdirSync3(dirname2(newDir), { recursive: true });
     cpSync2(oldDir, newDir, { recursive: true });
   }
 }
@@ -2102,18 +2214,17 @@ function getDbPath2() {
   if (process.env["MEMENTOS_DB_SCOPE"] === "project") {
     const gitRoot = findGitRoot2(cwd);
     if (gitRoot) {
-      return join4(gitRoot, ".mementos", "mementos.db");
+      return join6(gitRoot, ".mementos", "mementos.db");
     }
   }
   migrateGlobalDir();
-  const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  return join4(home, ".hasna", "mementos", "mementos.db");
+  return join6(getDataRoot(), "mementos.db");
 }
 function ensureDir2(filePath) {
   if (isInMemoryDb2(filePath))
     return;
-  const dir = dirname2(resolve2(filePath));
-  if (!existsSync3(dir)) {
+  const dir = dirname2(resolve3(filePath));
+  if (!existsSync4(dir)) {
     mkdirSync3(dir, { recursive: true });
   }
 }
@@ -2251,6 +2362,7 @@ var init_database = __esm(() => {
   init_storage();
   init_api_mode();
   init_migrations();
+  init_paths();
   ALLOWED_TABLES = new Set([
     "memories",
     "agents",
@@ -2841,12 +2953,22 @@ function createMemory(input, dedupeMode = "merge", db) {
   const effectiveMode = dedupeMode === "overwrite" ? "merge" : dedupeMode === "version-fork" ? "create" : dedupeMode;
   if (effectiveMode === "error") {
     const existing = d.query(`SELECT id, agent_id, updated_at FROM memories
-       WHERE key = ? AND scope = ? AND COALESCE(project_id, '') = ? AND status = 'active'
+       WHERE key = ? AND scope = ? AND COALESCE(project_id, '') = ?
        LIMIT 1`).get(input.key, input.scope || "private", input.project_id || "");
     if (existing) {
       throw new MemoryConflictError(input.key, existing);
     }
   }
+  if (effectiveMode === "create") {
+    const existing = d.query(`SELECT id, agent_id, updated_at FROM memories
+       WHERE key = ? AND scope = ?
+         AND COALESCE(agent_id, '') = ?
+         AND COALESCE(project_id, '') = ?
+         AND COALESCE(session_id, '') = ?`).get(input.key, input.scope || "private", input.agent_id || "", input.project_id || "", input.session_id || "");
+    if (existing) {
+      throw new MemoryConflictError(input.key, existing);
+    }
+  }
   if (effectiveMode === "merge") {
     const existing = d.query(`SELECT id, version FROM memories
          WHERE key = ? AND scope = ?
@@ -3498,6 +3620,17 @@ function updateMemory(id, input, db) {
   if (existing.version !== input.version) {
     throw new VersionConflictError(id, input.version, existing.version);
   }
+  if (input.scope !== undefined && input.scope !== existing.scope) {
+    const conflict = d.query(`SELECT id, agent_id, updated_at FROM memories
+         WHERE key = ? AND scope = ?
+           AND COALESCE(agent_id, '') = ?
+           AND COALESCE(project_id, '') = ?
+           AND COALESCE(session_id, '') = ?
+           AND id != ?`).get(existing.key, input.scope, existing.agent_id || "", existing.project_id || "", existing.session_id || "", memoryId);
+    if (conflict) {
+      throw new MemoryConflictError(existing.key, conflict);
+    }
+  }
   const sets = ["version = version + 1", "updated_at = ?"];
   const params = [now()];
   if (input.value !== undefined) {
@@ -4538,7 +4671,9 @@ function scoreResults(rows, queryLower, graphBoostedIds) {
   scored.sort((a, b) => {
     if (b.score !== a.score)
       return b.score - a.score;
-    return b.memory.importance - a.memory.importance;
+    if (b.memory.importance !== a.memory.importance)
+      return b.memory.importance - a.memory.importance;
+    return a.memory.id.localeCompare(b.memory.id);
   });
   return scored;
 }
@@ -10432,7 +10567,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@ai-sdk+provider@3.0.14/node_modules/@ai-sdk/provider/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+provider@3.0.15/node_modules/@ai-sdk/provider/dist/index.mjs
 function getErrorMessage(error) {
   if (error == null) {
     return "unknown error";
@@ -10464,7 +10599,7 @@ function isJSONObject(value) {
   return value != null && typeof value === "object" && Object.entries(value).every(([key, val]) => typeof key === "string" && (val === undefined || isJSONValue(val)));
 }
 var marker = "vercel.ai.error", symbol, _a, _b, AISDKError, name = "AI_APICallError", marker2, symbol2, _a2, _b2, APICallError, name2 = "AI_EmptyResponseBodyError", marker3, symbol3, _a3, _b3, EmptyResponseBodyError, name3 = "AI_InvalidArgumentError", marker4, symbol4, _a4, _b4, InvalidArgumentError, name4 = "AI_InvalidPromptError", marker5, symbol5, _a5, _b5, InvalidPromptError, name5 = "AI_InvalidResponseDataError", marker6, symbol6, _a6, _b6, InvalidResponseDataError, name6 = "AI_JSONParseError", marker7, symbol7, _a7, _b7, JSONParseError, name7 = "AI_LoadAPIKeyError", marker8, symbol8, _a8, _b8, LoadAPIKeyError, name8 = "AI_LoadSettingError", marker9, symbol9, _a9, _b9, LoadSettingError, name9 = "AI_NoContentGeneratedError", marker10, symbol10, _a10, _b10, NoContentGeneratedError, name10 = "AI_NoSuchModelError", marker11, symbol11, _a11, _b11, NoSuchModelError, name11 = "AI_TooManyEmbeddingValuesForCallError", marker12, symbol12, _a12, _b12, TooManyEmbeddingValuesForCallError, name12 = "AI_TypeValidationError", marker13, symbol13, _a13, _b13, TypeValidationError, name13 = "AI_UnsupportedFunctionalityError", marker14, symbol14, _a14, _b14, UnsupportedFunctionalityError;
-var init_dist = __esm(() => {
+var init_dist2 = __esm(() => {
   symbol = Symbol.for(marker);
   AISDKError = class _AISDKError extends (_b = Error, _a = symbol, _b) {
     constructor({
@@ -22097,7 +22232,7 @@ var init_v3 = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/eventsource-parser@3.1.0/node_modules/eventsource-parser/dist/index.js
+// ../../node_modules/.bun/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/index.js
 function noop(_arg) {}
 function createParser(config2) {
   if (typeof config2 == "function")
@@ -22184,7 +22319,7 @@ ${value2}`, dataLines++;
     }
     if (firstCharCode === 105 && chunk.charCodeAt(start + 1) === 100 && chunk.charCodeAt(start + 2) === 58) {
       const value2 = chunk.slice(chunk.charCodeAt(start + 3) === SPACE ? start + 4 : start + 3, end);
-      id = value2.includes("\x00") ? undefined : value2;
+      value2.includes("\x00") || (id = value2);
       return;
     }
     if (firstCharCode === 58) {
@@ -22212,7 +22347,7 @@ ${value2}`, dataLines++;
 ${value}`, dataLines++;
         break;
       case "id":
-        id = value.includes("\x00") ? undefined : value;
+        value.includes("\x00") || (id = value);
         break;
       case "retry":
         /^\d+$/.test(value) ? onRetry(parseInt(value, 10)) : onError(new ParseError(`Invalid \`retry\` value: "${value}"`, {
@@ -22249,7 +22384,7 @@ function isEventPrefix(chunk, i, firstCharCode) {
   return firstCharCode === 101 && chunk.charCodeAt(i + 1) === 118 && chunk.charCodeAt(i + 2) === 101 && chunk.charCodeAt(i + 3) === 110 && chunk.charCodeAt(i + 4) === 116 && chunk.charCodeAt(i + 5) === 58;
 }
 var ParseError, LF = 10, CR = 13, SPACE = 32;
-var init_dist2 = __esm(() => {
+var init_dist3 = __esm(() => {
   ParseError = class ParseError extends Error {
     constructor(message, options) {
       super(message), this.name = "ParseError", this.type = options.type, this.field = options.field, this.value = options.value, this.line = options.line;
@@ -22257,10 +22392,10 @@ var init_dist2 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/eventsource-parser@3.1.0/node_modules/eventsource-parser/dist/stream.js
+// ../../node_modules/.bun/eventsource-parser@3.1.1/node_modules/eventsource-parser/dist/stream.js
 var EventSourceParserStream;
 var init_stream = __esm(() => {
-  init_dist2();
+  init_dist3();
   EventSourceParserStream = class EventSourceParserStream extends TransformStream {
     constructor({ onError, onRetry, onComment, maxBufferSize } = {}) {
       let parser;
@@ -22286,7 +22421,7 @@ var init_stream = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@ai-sdk+provider-utils@4.0.42+27912429049419a2/node_modules/@ai-sdk/provider-utils/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+provider-utils@4.0.46+27912429049419a2/node_modules/@ai-sdk/provider-utils/dist/index.mjs
 function combineHeaders(...headers) {
   return headers.reduce((combinedHeaders, currentHeaders) => ({
     ...combinedHeaders,
@@ -22627,11 +22762,10 @@ async function loadNodeModule(id) {
   var _a22;
   const processWithBuiltins = globalThis.process;
   const builtinModule = (_a22 = processWithBuiltins == null ? undefined : processWithBuiltins.getBuiltinModule) == null ? undefined : _a22.call(processWithBuiltins, id);
-  return builtinModule == null ? await importNodeModule(id) : builtinModule;
-}
-function importNodeModule(id) {
-  dynamicImport != null || (dynamicImport = Function("specifier", "return import(specifier)"));
-  return dynamicImport(id);
+  if (builtinModule == null) {
+    throw new Error(`Node.js built-in module ${id} is unavailable`);
+  }
+  return builtinModule;
 }
 function getCurrentModulePath() {
   const originalPrepareStackTrace = Error.prepareStackTrace;
@@ -22730,7 +22864,7 @@ async function readResponseWithSizeLimit({
   } finally {
     try {
       await reader.cancel();
-    } finally {
+    } catch (e) {} finally {
       reader.releaseLock();
     }
   }
@@ -23995,7 +24129,7 @@ function createProviderToolFactoryWithOutputSchema({
     supportsDeferredResults
   });
 }
-async function resolve4(value) {
+async function resolve5(value) {
   if (typeof value === "function") {
     value = value();
   }
@@ -24130,7 +24264,7 @@ var DelayedPromise = class {
   isPending() {
     return this.status.type === "pending";
   }
-}, btoa, atob2, name14 = "AI_DownloadError", marker15, symbol17, _a15, _b15, DownloadError, safeNodeFetchPromise, initialGlobalFetch, initialGlobalFetchIsNodeDefault, dynamicImport, MAX_DOWNLOAD_REDIRECTS = 10, DEFAULT_MAX_DOWNLOAD_SIZE, createIdGenerator = ({
+}, btoa, atob2, name14 = "AI_DownloadError", marker15, symbol17, _a15, _b15, DownloadError, safeNodeFetchPromise, initialGlobalFetch, initialGlobalFetchIsNodeDefault, MAX_DOWNLOAD_REDIRECTS = 10, DEFAULT_MAX_DOWNLOAD_SIZE, createIdGenerator = ({
   prefix,
   size = 16,
   alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz",
@@ -24154,7 +24288,7 @@ var DelayedPromise = class {
     });
   }
   return () => `${prefix}${separator}${generator()}`;
-}, generateId, FETCH_FAILED_ERROR_MESSAGES, BUN_ERROR_CODES, VERSION = "4.0.42", getOriginalFetch = () => globalThis.fetch, getFromApi = async ({
+}, generateId, FETCH_FAILED_ERROR_MESSAGES, BUN_ERROR_CODES, VERSION = "4.0.46", getOriginalFetch = () => globalThis.fetch, getFromApi = async ({
   url: url2,
   headers = {},
   successfulResponseHandler,
@@ -24674,23 +24808,23 @@ var DelayedPromise = class {
     });
   }
 };
-var init_dist3 = __esm(() => {
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
+var init_dist4 = __esm(() => {
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
   init_v4();
   init_v3();
   init_v3();
   init_v3();
   init_stream();
-  init_dist();
-  init_dist();
-  init_dist();
+  init_dist2();
+  init_dist2();
+  init_dist2();
   ({ btoa, atob: atob2 } = globalThis);
   marker15 = `vercel.ai.error.${name14}`;
   symbol17 = Symbol.for(marker15);
@@ -24783,7 +24917,7 @@ var init_dist3 = __esm(() => {
   textDecoder = new TextDecoder;
 });
 
-// ../../node_modules/.bun/@ai-sdk+anthropic@3.0.107+27912429049419a2/node_modules/@ai-sdk/anthropic/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+anthropic@3.0.111+27912429049419a2/node_modules/@ai-sdk/anthropic/dist/index.mjs
 var exports_dist = {};
 __export(exports_dist, {
   forwardAnthropicContainerIdFromLastStep: () => forwardAnthropicContainerIdFromLastStep,
@@ -25241,7 +25375,7 @@ async function convertToAnthropicMessagesPrompt({
   cacheControlValidator,
   toolNameMapping
 }) {
-  var _a16, _b16, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v;
+  var _a16, _b16, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u;
   const betas = /* @__PURE__ */ new Set;
   const blocks = groupIntoBlocks(prompt);
   const validator = cacheControlValidator || new CacheControlValidator;
@@ -25629,6 +25763,7 @@ async function convertToAnthropicMessagesPrompt({
                 break;
               }
               case "tool-call": {
+                const caller = getAnthropicCaller(part.providerOptions);
                 if (part.providerExecuted) {
                   const providerToolName = toolNameMapping.toProviderToolName(part.toolName);
                   const isMcpToolUse = ((_l = (_k = part.providerOptions) == null ? undefined : _k.anthropic) == null ? undefined : _l.type) === "mcp-tool-use";
@@ -25657,6 +25792,7 @@ async function convertToAnthropicMessagesPrompt({
                       id: part.toolCallId,
                       name: subtoolName,
                       input,
+                      ...caller && { caller },
                       cache_control: cacheControl
                     });
                   } else if (providerToolName === "code_execution" && part.input != null && typeof part.input === "object" && "type" in part.input && part.input.type === "programmatic-tool-call") {
@@ -25666,6 +25802,7 @@ async function convertToAnthropicMessagesPrompt({
                       id: part.toolCallId,
                       name: "code_execution",
                       input: inputWithoutType,
+                      ...caller && { caller },
                       cache_control: cacheControl
                     });
                   } else {
@@ -25675,6 +25812,7 @@ async function convertToAnthropicMessagesPrompt({
                         id: part.toolCallId,
                         name: providerToolName,
                         input: part.input,
+                        ...caller && { caller },
                         cache_control: cacheControl
                       });
                     } else if (providerToolName === "tool_search_tool_regex" || providerToolName === "tool_search_tool_bm25") {
@@ -25683,6 +25821,7 @@ async function convertToAnthropicMessagesPrompt({
                         id: part.toolCallId,
                         name: providerToolName,
                         input: part.input,
+                        ...caller && { caller },
                         cache_control: cacheControl
                       });
                     } else if (providerToolName === "advisor") {
@@ -25691,6 +25830,7 @@ async function convertToAnthropicMessagesPrompt({
                         id: part.toolCallId,
                         name: "advisor",
                         input: {},
+                        ...caller && { caller },
                         cache_control: cacheControl
                       });
                     } else {
@@ -25702,11 +25842,6 @@ async function convertToAnthropicMessagesPrompt({
                   }
                   break;
                 }
-                const callerOptions = (_o = part.providerOptions) == null ? undefined : _o.anthropic;
-                const caller = (callerOptions == null ? undefined : callerOptions.caller) ? (callerOptions.caller.type === "code_execution_20250825" || callerOptions.caller.type === "code_execution_20260120") && callerOptions.caller.toolId ? {
-                  type: callerOptions.caller.type,
-                  tool_id: callerOptions.caller.toolId
-                } : callerOptions.caller.type === "direct" ? { type: "direct" } : undefined : undefined;
                 anthropicContent.push({
                   type: "tool_use",
                   id: part.toolCallId,
@@ -25719,6 +25854,7 @@ async function convertToAnthropicMessagesPrompt({
               }
               case "tool-result": {
                 const providerToolName = toolNameMapping.toProviderToolName(part.toolName);
+                const caller = getAnthropicCaller(part.providerOptions);
                 if (mcpToolUseIds.has(part.toolCallId)) {
                   const output = part.output;
                   if (output.type !== "json" && output.type !== "error-json") {
@@ -25752,7 +25888,7 @@ async function convertToAnthropicMessagesPrompt({
                         tool_use_id: part.toolCallId,
                         content: {
                           type: "code_execution_tool_result_error",
-                          error_code: (_p = errorInfo.errorCode) != null ? _p : "unknown"
+                          error_code: (_o = errorInfo.errorCode) != null ? _o : "unknown"
                         },
                         cache_control: cacheControl
                       });
@@ -25763,7 +25899,7 @@ async function convertToAnthropicMessagesPrompt({
                         cache_control: cacheControl,
                         content: {
                           type: "bash_code_execution_tool_result_error",
-                          error_code: (_q = errorInfo.errorCode) != null ? _q : "unknown"
+                          error_code: (_p = errorInfo.errorCode) != null ? _p : "unknown"
                         }
                       });
                     }
@@ -25796,7 +25932,7 @@ async function convertToAnthropicMessagesPrompt({
                         stdout: codeExecutionOutput.stdout,
                         stderr: codeExecutionOutput.stderr,
                         return_code: codeExecutionOutput.return_code,
-                        content: (_r = codeExecutionOutput.content) != null ? _r : []
+                        content: (_q = codeExecutionOutput.content) != null ? _q : []
                       },
                       cache_control: cacheControl
                     });
@@ -25814,7 +25950,7 @@ async function convertToAnthropicMessagesPrompt({
                           encrypted_stdout: codeExecutionOutput.encrypted_stdout,
                           stderr: codeExecutionOutput.stderr,
                           return_code: codeExecutionOutput.return_code,
-                          content: (_s = codeExecutionOutput.content) != null ? _s : []
+                          content: (_r = codeExecutionOutput.content) != null ? _r : []
                         },
                         cache_control: cacheControl
                       });
@@ -25833,7 +25969,7 @@ async function convertToAnthropicMessagesPrompt({
                           stdout: codeExecutionOutput.stdout,
                           stderr: codeExecutionOutput.stderr,
                           return_code: codeExecutionOutput.return_code,
-                          content: (_t = codeExecutionOutput.content) != null ? _t : []
+                          content: (_s = codeExecutionOutput.content) != null ? _s : []
                         },
                         cache_control: cacheControl
                       });
@@ -25869,8 +26005,9 @@ async function convertToAnthropicMessagesPrompt({
                       tool_use_id: part.toolCallId,
                       content: {
                         type: "web_fetch_tool_result_error",
-                        error_code: (_u = (await extractErrorValue(output.value)).errorCode) != null ? _u : "unavailable"
+                        error_code: (_t = (await extractErrorValue(output.value)).errorCode) != null ? _t : "unavailable"
                       },
+                      ...caller && { caller },
                       cache_control: cacheControl
                     });
                     break;
@@ -25904,6 +26041,7 @@ async function convertToAnthropicMessagesPrompt({
                         }
                       }
                     },
+                    ...caller && { caller },
                     cache_control: cacheControl
                   });
                   break;
@@ -25916,8 +26054,9 @@ async function convertToAnthropicMessagesPrompt({
                       tool_use_id: part.toolCallId,
                       content: {
                         type: "web_search_tool_result_error",
-                        error_code: (_v = (await extractErrorValue(output.value)).errorCode) != null ? _v : "unavailable"
+                        error_code: (_u = (await extractErrorValue(output.value)).errorCode) != null ? _u : "unavailable"
                       },
+                      ...caller && { caller },
                       cache_control: cacheControl
                     });
                     break;
@@ -25943,6 +26082,7 @@ async function convertToAnthropicMessagesPrompt({
                       encrypted_content: result.encryptedContent,
                       type: result.type
                     })),
+                    ...caller && { caller },
                     cache_control: cacheControl
                   });
                   break;
@@ -26111,6 +26251,17 @@ function moveToolUseBlocksToEnd(content) {
   flushSegment();
   return result;
 }
+function getAnthropicCaller(providerOptions) {
+  var _a16;
+  const caller = (_a16 = providerOptions == null ? undefined : providerOptions.anthropic) == null ? undefined : _a16.caller;
+  if (((caller == null ? undefined : caller.type) === "code_execution_20250825" || (caller == null ? undefined : caller.type) === "code_execution_20260120") && caller.toolId) {
+    return {
+      type: caller.type,
+      tool_id: caller.toolId
+    };
+  }
+  return (caller == null ? undefined : caller.type) === "direct" ? { type: "direct" } : undefined;
+}
 function mapAnthropicStopReason({
   finishReason,
   isJsonResponseFromTool
@@ -26287,6 +26438,16 @@ function createCitationSource(citation, citationDocuments, generateId3) {
     }
   };
 }
+function getAnthropicCallerInfo(caller) {
+  return caller == null ? undefined : {
+    type: caller.type,
+    toolId: "tool_id" in caller ? caller.tool_id : undefined
+  };
+}
+function getAnthropicCallerMetadata(caller) {
+  const callerInfo = getAnthropicCallerInfo(caller);
+  return callerInfo == null ? {} : { providerMetadata: { anthropic: { caller: callerInfo } } };
+}
 function getModelCapabilities(modelId) {
   if (modelId.includes("claude-opus-5")) {
     return {
@@ -26515,7 +26676,7 @@ function forwardAnthropicContainerIdFromLastStep({
   }
   return;
 }
-var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandler, anthropicStopDetailsSchema, anthropicMessagesResponseSchema, anthropicMessagesChunkSchema, anthropicReasoningMetadataSchema, anthropicFilePartProviderOptions, anthropicSystemMessageProviderOptions, anthropicLanguageModelOptions, MAX_CACHE_BREAKPOINTS = 4, CacheControlValidator = class {
+var VERSION2 = "3.0.111", anthropicErrorDataSchema, anthropicFailedResponseHandler, anthropicStopDetailsSchema, anthropicToolCallCallerSchema, anthropicMessagesResponseSchema, anthropicMessagesChunkSchema, anthropicReasoningMetadataSchema, anthropicFilePartProviderOptions, anthropicSystemMessageProviderOptions, anthropicLanguageModelOptions, MAX_CACHE_BREAKPOINTS = 4, CacheControlValidator = class {
   constructor() {
     this.breakpointCount = 0;
     this.warnings = [];
@@ -27023,11 +27184,11 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
     betas,
     headers
   }) {
-    return combineHeaders(await resolve4(this.config.headers), headers, betas.size > 0 ? { "anthropic-beta": Array.from(betas).join(",") } : {});
+    return combineHeaders(await resolve5(this.config.headers), headers, betas.size > 0 ? { "anthropic-beta": Array.from(betas).join(",") } : {});
   }
   async getBetasFromHeaders(requestHeaders) {
     var _a16, _b16;
-    const configHeaders = await resolve4(this.config.headers);
+    const configHeaders = await resolve5(this.config.headers);
     const configBetaHeader = (_a16 = configHeaders["anthropic-beta"]) != null ? _a16 : "";
     const requestBetaHeader = (_b16 = requestHeaders == null ? undefined : requestHeaders["anthropic-beta"]) != null ? _b16 : "";
     return new Set([
@@ -27174,23 +27335,12 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               text: JSON.stringify(part.input)
             });
           } else {
-            const caller = part.caller;
-            const callerInfo = caller ? {
-              type: caller.type,
-              toolId: "tool_id" in caller ? caller.tool_id : undefined
-            } : undefined;
             content.push({
               type: "tool-call",
               toolCallId: part.id,
               toolName: part.name,
               input: JSON.stringify(part.input),
-              ...callerInfo && {
-                providerMetadata: {
-                  anthropic: {
-                    caller: callerInfo
-                  }
-                }
-              }
+              ...getAnthropicCallerMetadata(part.caller)
             });
           }
           break;
@@ -27204,7 +27354,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               toolName: toolNameMapping.toCustomToolName("code_execution"),
               input: JSON.stringify({ type: part.name, ...part.input }),
               providerExecuted: true,
-              ...markCodeExecutionDynamic && providerToolName === "code_execution" ? { dynamic: true } : {}
+              ...markCodeExecutionDynamic && providerToolName === "code_execution" ? { dynamic: true } : {},
+              ...getAnthropicCallerMetadata(part.caller)
             });
           } else if (part.name === "web_search" || part.name === "code_execution" || part.name === "web_fetch") {
             const inputToSerialize = part.name === "code_execution" && part.input != null && typeof part.input === "object" && "code" in part.input && !("type" in part.input) ? { type: "programmatic-tool-call", ...part.input } : part.input;
@@ -27214,7 +27365,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               toolName: toolNameMapping.toCustomToolName(part.name),
               input: JSON.stringify(inputToSerialize),
               providerExecuted: true,
-              ...markCodeExecutionDynamic && part.name === "code_execution" ? { dynamic: true } : {}
+              ...markCodeExecutionDynamic && part.name === "code_execution" ? { dynamic: true } : {},
+              ...getAnthropicCallerMetadata(part.caller)
             });
           } else if (part.name === "tool_search_tool_regex" || part.name === "tool_search_tool_bm25") {
             serverToolCalls[part.id] = part.name;
@@ -27223,7 +27375,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               toolCallId: part.id,
               toolName: toolNameMapping.toCustomToolName(part.name),
               input: JSON.stringify(part.input),
-              providerExecuted: true
+              providerExecuted: true,
+              ...getAnthropicCallerMetadata(part.caller)
             });
           } else if (part.name === "advisor") {
             content.push({
@@ -27231,7 +27384,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               toolCallId: part.id,
               toolName: toolNameMapping.toCustomToolName("advisor"),
               input: JSON.stringify(part.input),
-              providerExecuted: true
+              providerExecuted: true,
+              ...getAnthropicCallerMetadata(part.caller)
             });
           }
           break;
@@ -27290,7 +27444,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     data: part.content.content.source.data
                   }
                 }
-              }
+              },
+              ...getAnthropicCallerMetadata(part.caller)
             });
           } else if (part.content.type === "web_fetch_tool_result_error") {
             content.push({
@@ -27301,7 +27456,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               result: {
                 type: "web_fetch_tool_result_error",
                 errorCode: part.content.error_code
-              }
+              },
+              ...getAnthropicCallerMetadata(part.caller)
             });
           }
           break;
@@ -27321,7 +27477,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                   encryptedContent: result.encrypted_content,
                   type: result.type
                 };
-              })
+              }),
+              ...getAnthropicCallerMetadata(part.caller)
             });
             for (const result of part.content) {
               content.push({
@@ -27346,7 +27503,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               result: {
                 type: "web_search_tool_result_error",
                 errorCode: part.content.error_code
-              }
+              },
+              ...getAnthropicCallerMetadata(part.caller)
             });
           }
           break;
@@ -27687,11 +27845,7 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     id: String(value.index)
                   });
                 } else {
-                  const caller = part.caller;
-                  const callerInfo = caller ? {
-                    type: caller.type,
-                    toolId: "tool_id" in caller ? caller.tool_id : undefined
-                  } : undefined;
+                  const callerInfo = getAnthropicCallerInfo(part.caller);
                   const hasNonEmptyInput = part.input && Object.keys(part.input).length > 0;
                   const initialInput = hasNonEmptyInput ? JSON.stringify(part.input) : "";
                   contentBlocks[value.index] = {
@@ -27711,6 +27865,7 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                 return;
               }
               case "server_tool_use": {
+                const callerInfo = getAnthropicCallerInfo(part.caller);
                 if ([
                   "web_fetch",
                   "web_search",
@@ -27731,7 +27886,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     ...markCodeExecutionDynamic && providerToolName === "code_execution" ? { dynamic: true } : {},
                     firstDelta: finalInput.length === 0,
                     providerToolName,
-                    providerToolInputType
+                    providerToolInputType,
+                    ...callerInfo && { caller: callerInfo }
                   };
                   controller.enqueue({
                     type: "tool-input-start",
@@ -27750,7 +27906,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     input: "",
                     providerExecuted: true,
                     firstDelta: true,
-                    providerToolName: part.name
+                    providerToolName: part.name,
+                    ...callerInfo && { caller: callerInfo }
                   };
                   controller.enqueue({
                     type: "tool-input-start",
@@ -27767,7 +27924,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     input: "{}",
                     providerExecuted: true,
                     firstDelta: true,
-                    providerToolName: part.name
+                    providerToolName: part.name,
+                    ...callerInfo && { caller: callerInfo }
                   };
                   controller.enqueue({
                     type: "tool-input-start",
@@ -27802,7 +27960,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                           data: part.content.content.source.data
                         }
                       }
-                    }
+                    },
+                    ...getAnthropicCallerMetadata(part.caller)
                   });
                 } else if (part.content.type === "web_fetch_tool_result_error") {
                   controller.enqueue({
@@ -27813,7 +27972,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     result: {
                       type: "web_fetch_tool_result_error",
                       errorCode: part.content.error_code
-                    }
+                    },
+                    ...getAnthropicCallerMetadata(part.caller)
                   });
                 }
                 return;
@@ -27833,7 +27993,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                         encryptedContent: result.encrypted_content,
                         type: result.type
                       };
-                    })
+                    }),
+                    ...getAnthropicCallerMetadata(part.caller)
                   });
                   for (const result of part.content) {
                     controller.enqueue({
@@ -27858,7 +28019,8 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
                     result: {
                       type: "web_search_tool_result_error",
                       errorCode: part.content.error_code
-                    }
+                    },
+                    ...getAnthropicCallerMetadata(part.caller)
                   });
                 }
                 return;
@@ -28236,11 +28398,7 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
               for (let contentIndex = 0;contentIndex < value.message.content.length; contentIndex++) {
                 const part = value.message.content[contentIndex];
                 if (part.type === "tool_use") {
-                  const caller = part.caller;
-                  const callerInfo = caller ? {
-                    type: caller.type,
-                    toolId: "tool_id" in caller ? caller.tool_id : undefined
-                  } : undefined;
+                  const callerInfo = getAnthropicCallerInfo(part.caller);
                   controller.enqueue({
                     type: "tool-input-start",
                     id: part.id,
@@ -28400,59 +28558,59 @@ var VERSION2 = "3.0.107", anthropicErrorDataSchema, anthropicFailedResponseHandl
 }, bash_20241022InputSchema, bash_20241022, bash_20250124InputSchema, bash_20250124, computer_20241022InputSchema, computer_20241022, computer_20250124InputSchema, computer_20250124, computer_20251124InputSchema, computer_20251124, memory_20250818InputSchema, memory_20250818, textEditor_20241022InputSchema, textEditor_20241022, textEditor_20250124InputSchema, textEditor_20250124, textEditor_20250429InputSchema, textEditor_20250429, toolSearchBm25_20251119OutputSchema, toolSearchBm25_20251119InputSchema, factory11, toolSearchBm25_20251119 = (args = {}) => {
   return factory11(args);
 }, anthropicTools, ANTHROPIC_API_URL = "https://api.anthropic.com", ANTHROPIC_API_VERSIONED_URL, anthropic;
-var init_dist4 = __esm(() => {
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist3();
+var init_dist5 = __esm(() => {
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
   init_v4();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
   anthropicErrorDataSchema = lazySchema(() => zodSchema(exports_external2.object({
     type: exports_external2.literal("error"),
@@ -28471,6 +28629,19 @@ var init_dist4 = __esm(() => {
     explanation: exports_external2.string().nullish(),
     recommended_model: exports_external2.string().nullish()
   });
+  anthropicToolCallCallerSchema = exports_external2.union([
+    exports_external2.object({
+      type: exports_external2.literal("code_execution_20250825"),
+      tool_id: exports_external2.string()
+    }),
+    exports_external2.object({
+      type: exports_external2.literal("code_execution_20260120"),
+      tool_id: exports_external2.string()
+    }),
+    exports_external2.object({
+      type: exports_external2.literal("direct")
+    })
+  ]);
   anthropicMessagesResponseSchema = lazySchema(() => zodSchema(exports_external2.object({
     type: exports_external2.literal("message"),
     id: exports_external2.string().nullish(),
@@ -28523,34 +28694,14 @@ var init_dist4 = __esm(() => {
         id: exports_external2.string(),
         name: exports_external2.string(),
         input: exports_external2.unknown(),
-        caller: exports_external2.union([
-          exports_external2.object({
-            type: exports_external2.literal("code_execution_20250825"),
-            tool_id: exports_external2.string()
-          }),
-          exports_external2.object({
-            type: exports_external2.literal("code_execution_20260120"),
-            tool_id: exports_external2.string()
-          }),
-          exports_external2.object({
-            type: exports_external2.literal("direct")
-          })
-        ]).optional()
+        caller: anthropicToolCallCallerSchema.optional()
       }),
       exports_external2.object({
         type: exports_external2.literal("server_tool_use"),
         id: exports_external2.string(),
         name: exports_external2.string(),
         input: exports_external2.record(exports_external2.string(), exports_external2.unknown()).nullish(),
-        caller: exports_external2.union([
-          exports_external2.object({
-            type: exports_external2.literal("code_execution_20260120"),
-            tool_id: exports_external2.string()
-          }),
-          exports_external2.object({
-            type: exports_external2.literal("direct")
-          })
-        ]).optional()
+        caller: anthropicToolCallCallerSchema.optional()
       }),
       exports_external2.object({
         type: exports_external2.literal("mcp_tool_use"),
@@ -28571,6 +28722,7 @@ var init_dist4 = __esm(() => {
       exports_external2.object({
         type: exports_external2.literal("web_fetch_tool_result"),
         tool_use_id: exports_external2.string(),
+        caller: anthropicToolCallCallerSchema.optional(),
         content: exports_external2.union([
           exports_external2.object({
             type: exports_external2.literal("web_fetch_result"),
@@ -28603,6 +28755,7 @@ var init_dist4 = __esm(() => {
       exports_external2.object({
         type: exports_external2.literal("web_search_tool_result"),
         tool_use_id: exports_external2.string(),
+        caller: anthropicToolCallCallerSchema.optional(),
         content: exports_external2.union([
           exports_external2.array(exports_external2.object({
             type: exports_external2.literal("web_search_result"),
@@ -28806,19 +28959,7 @@ var init_dist4 = __esm(() => {
             id: exports_external2.string(),
             name: exports_external2.string(),
             input: exports_external2.unknown(),
-            caller: exports_external2.union([
-              exports_external2.object({
-                type: exports_external2.literal("code_execution_20250825"),
-                tool_id: exports_external2.string()
-              }),
-              exports_external2.object({
-                type: exports_external2.literal("code_execution_20260120"),
-                tool_id: exports_external2.string()
-              }),
-              exports_external2.object({
-                type: exports_external2.literal("direct")
-              })
-            ]).optional()
+            caller: anthropicToolCallCallerSchema.optional()
           })
         ])).nullish(),
         stop_reason: exports_external2.string().nullish(),
@@ -28845,19 +28986,7 @@ var init_dist4 = __esm(() => {
           id: exports_external2.string(),
           name: exports_external2.string(),
           input: exports_external2.record(exports_external2.string(), exports_external2.unknown()).optional(),
-          caller: exports_external2.union([
-            exports_external2.object({
-              type: exports_external2.literal("code_execution_20250825"),
-              tool_id: exports_external2.string()
-            }),
-            exports_external2.object({
-              type: exports_external2.literal("code_execution_20260120"),
-              tool_id: exports_external2.string()
-            }),
-            exports_external2.object({
-              type: exports_external2.literal("direct")
-            })
-          ]).optional()
+          caller: anthropicToolCallCallerSchema.optional()
         }),
         exports_external2.object({
           type: exports_external2.literal("redacted_thinking"),
@@ -28872,15 +29001,7 @@ var init_dist4 = __esm(() => {
           id: exports_external2.string(),
           name: exports_external2.string(),
           input: exports_external2.record(exports_external2.string(), exports_external2.unknown()).nullish(),
-          caller: exports_external2.union([
-            exports_external2.object({
-              type: exports_external2.literal("code_execution_20260120"),
-              tool_id: exports_external2.string()
-            }),
-            exports_external2.object({
-              type: exports_external2.literal("direct")
-            })
-          ]).optional()
+          caller: anthropicToolCallCallerSchema.optional()
         }),
         exports_external2.object({
           type: exports_external2.literal("mcp_tool_use"),
@@ -28901,6 +29022,7 @@ var init_dist4 = __esm(() => {
         exports_external2.object({
           type: exports_external2.literal("web_fetch_tool_result"),
           tool_use_id: exports_external2.string(),
+          caller: anthropicToolCallCallerSchema.optional(),
           content: exports_external2.union([
             exports_external2.object({
               type: exports_external2.literal("web_fetch_result"),
@@ -28933,6 +29055,7 @@ var init_dist4 = __esm(() => {
         exports_external2.object({
           type: exports_external2.literal("web_search_tool_result"),
           tool_use_id: exports_external2.string(),
+          caller: anthropicToolCallCallerSchema.optional(),
           content: exports_external2.union([
             exports_external2.array(exports_external2.object({
               type: exports_external2.literal("web_search_result"),
@@ -29972,7 +30095,7 @@ var init_dist4 = __esm(() => {
   anthropic = createAnthropic();
 });
 
-// ../../node_modules/.bun/@ai-sdk+openai@3.0.91+27912429049419a2/node_modules/@ai-sdk/openai/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+openai@3.0.97+27912429049419a2/node_modules/@ai-sdk/openai/dist/index.mjs
 var exports_dist2 = {};
 __export(exports_dist2, {
   openai: () => openai,
@@ -30909,12 +31032,14 @@ async function convertToOpenAIResponsesInput({
                 if (store && id != null) {
                   input.push({ type: "item_reference", id });
                 }
-                break;
+                if (store || !hasShellTool || resolvedToolName !== "shell") {
+                  break;
+                }
               }
-              if (hasPreviousResponseId && store && id != null) {
+              const isProviderDefinedToolCall = hasLocalShellTool && resolvedToolName === "local_shell" || hasShellTool && resolvedToolName === "shell" || hasApplyPatchTool && resolvedToolName === "apply_patch" || ((_m = customProviderToolNames == null ? undefined : customProviderToolNames.has(resolvedToolName)) != null ? _m : false);
+              if (hasPreviousResponseId && store && id != null && isProviderDefinedToolCall) {
                 break;
               }
-              const isProviderDefinedToolCall = hasLocalShellTool && resolvedToolName === "local_shell" || hasShellTool && resolvedToolName === "shell" || hasApplyPatchTool && resolvedToolName === "apply_patch" || ((_m = customProviderToolNames == null ? undefined : customProviderToolNames.has(resolvedToolName)) != null ? _m : false);
               if (store && id != null && isProviderDefinedToolCall) {
                 input.push({ type: "item_reference", id });
                 break;
@@ -31135,7 +31260,7 @@ async function convertToOpenAIResponsesInput({
               continue;
             }
             processedApprovalIds.add(approvalResponse.approvalId);
-            if (store) {
+            if (store && !hasConversation && !hasPreviousResponseId) {
               input.push({
                 type: "item_reference",
                 id: approvalResponse.approvalId
@@ -32099,7 +32224,7 @@ var openaiErrorDataSchema, openaiFailedResponseHandler, openaiChatResponseSchema
       });
       baseArgs.service_tier = undefined;
     }
-    if (openaiOptions.serviceTier === "priority" && !modelCapabilities.supportsPriorityProcessing) {
+    if ((openaiOptions.serviceTier === "priority" || openaiOptions.serviceTier === "fast") && !modelCapabilities.supportsPriorityProcessing) {
       warnings.push({
         type: "unsupported",
         feature: "serviceTier",
@@ -33109,7 +33234,7 @@ var openaiErrorDataSchema, openaiFailedResponseHandler, openaiChatResponseSchema
       });
       delete baseArgs.service_tier;
     }
-    if ((openaiOptions == null ? undefined : openaiOptions.serviceTier) === "priority" && !modelCapabilities.supportsPriorityProcessing) {
+    if (((openaiOptions == null ? undefined : openaiOptions.serviceTier) === "priority" || (openaiOptions == null ? undefined : openaiOptions.serviceTier) === "fast") && !modelCapabilities.supportsPriorityProcessing) {
       warnings.push({
         type: "unsupported",
         feature: "serviceTier",
@@ -34689,78 +34814,78 @@ var openaiErrorDataSchema, openaiFailedResponseHandler, openaiChatResponseSchema
       }
     };
   }
-}, VERSION3 = "3.0.91", openai;
-var init_dist5 = __esm(() => {
-  init_dist3();
-  init_dist();
-  init_dist3();
+}, VERSION3 = "3.0.97", openai;
+var init_dist6 = __esm(() => {
+  init_dist4();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist();
-  init_dist();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist2();
+  init_dist2();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
-  init_dist();
+  init_dist2();
+  init_dist4();
+  init_dist2();
   init_v4();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
-  init_dist3();
+  init_dist2();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
-  init_dist3();
-  init_dist3();
+  init_dist2();
+  init_dist4();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
   openaiErrorDataSchema = exports_external2.object({
     error: exports_external2.object({
@@ -34896,7 +35021,7 @@ var init_dist5 = __esm(() => {
     store: exports_external2.boolean().optional(),
     metadata: exports_external2.record(exports_external2.string().max(64), exports_external2.string().max(512)).optional(),
     prediction: exports_external2.record(exports_external2.string(), exports_external2.any()).optional(),
-    serviceTier: exports_external2.enum(["auto", "flex", "priority", "default"]).optional(),
+    serviceTier: exports_external2.enum(["auto", "flex", "priority", "fast", "default"]).optional(),
     strictJsonSchema: exports_external2.boolean().optional(),
     textVerbosity: exports_external2.enum(["low", "medium", "high"]).optional(),
     promptCacheKey: exports_external2.string().optional(),
@@ -36308,7 +36433,7 @@ var init_dist5 = __esm(() => {
     reasoningContext: exports_external2.enum(["auto", "current_turn", "all_turns"]).optional(),
     reasoningSummary: exports_external2.string().nullish(),
     safetyIdentifier: exports_external2.string().nullish(),
-    serviceTier: exports_external2.enum(["auto", "flex", "priority", "default"]).nullish(),
+    serviceTier: exports_external2.enum(["auto", "flex", "priority", "fast", "default"]).nullish(),
     store: exports_external2.boolean().nullish(),
     passThroughUnsupportedFiles: exports_external2.boolean().optional(),
     strictJsonSchema: exports_external2.boolean().nullish(),
@@ -36417,7 +36542,7 @@ var init_dist5 = __esm(() => {
   openai = createOpenAI();
 });
 
-// ../../node_modules/.bun/@ai-sdk+openai-compatible@2.0.64+27912429049419a2/node_modules/@ai-sdk/openai-compatible/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+openai-compatible@2.0.69+27912429049419a2/node_modules/@ai-sdk/openai-compatible/dist/index.mjs
 var exports_dist3 = {};
 __export(exports_dist3, {
   createOpenAICompatible: () => createOpenAICompatible,
@@ -36468,7 +36593,7 @@ function convertOpenAICompatibleChatUsage(usage) {
     },
     outputTokens: {
       total: completionTokens,
-      text: completionTokens - reasoningTokens,
+      text: Math.max(0, completionTokens - reasoningTokens),
       reasoning: reasoningTokens
     },
     raw: usage
@@ -37842,27 +37967,27 @@ var openaiCompatibleErrorDataSchema, defaultOpenAICompatibleErrorStructure, open
       }
     };
   }
-}, openaiCompatibleImageResponseSchema, VERSION4 = "2.0.64";
-var init_dist6 = __esm(() => {
-  init_dist();
-  init_dist3();
+}, openaiCompatibleImageResponseSchema, VERSION4 = "2.0.69";
+var init_dist7 = __esm(() => {
+  init_dist2();
+  init_dist4();
   init_v4();
   init_v4();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist();
+  init_dist2();
   init_v4();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
   init_v4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   openaiCompatibleErrorDataSchema = exports_external2.object({
     error: exports_external2.object({
       message: exports_external2.string(),
@@ -37885,10 +38010,10 @@ var init_dist6 = __esm(() => {
     prompt_tokens: exports_external2.number().nullish(),
     completion_tokens: exports_external2.number().nullish(),
     total_tokens: exports_external2.number().nullish(),
-    prompt_tokens_details: exports_external2.object({
+    prompt_tokens_details: exports_external2.looseObject({
       cached_tokens: exports_external2.number().nullish()
     }).nullish(),
-    completion_tokens_details: exports_external2.object({
+    completion_tokens_details: exports_external2.looseObject({
       reasoning_tokens: exports_external2.number().nullish(),
       accepted_prediction_tokens: exports_external2.number().nullish(),
       rejected_prediction_tokens: exports_external2.number().nullish()
@@ -37955,7 +38080,7 @@ var init_dist6 = __esm(() => {
     suffix: exports_external2.string().optional(),
     user: exports_external2.string().optional()
   });
-  usageSchema = exports_external2.object({
+  usageSchema = exports_external2.looseObject({
     prompt_tokens: exports_external2.number(),
     completion_tokens: exports_external2.number(),
     total_tokens: exports_external2.number()
@@ -38084,19 +38209,19 @@ var require_token_io = __commonJS((exports, module) => {
     getUserDataDir: () => getUserDataDir
   });
   module.exports = __toCommonJS2(token_io_exports);
-  var import_path = __toESM2(__require("path"));
+  var import_path2 = __toESM2(__require("path"));
   var import_fs = __toESM2(__require("fs"));
-  var import_os2 = __toESM2(__require("os"));
+  var import_os3 = __toESM2(__require("os"));
   var import_token_error = require_token_error();
   function findRootDir() {
     try {
       let dir = process.cwd();
-      while (dir !== import_path.default.dirname(dir)) {
-        const pkgPath = import_path.default.join(dir, ".vercel");
+      while (dir !== import_path2.default.dirname(dir)) {
+        const pkgPath = import_path2.default.join(dir, ".vercel");
         if (import_fs.default.existsSync(pkgPath)) {
           return dir;
         }
-        dir = import_path.default.dirname(dir);
+        dir = import_path2.default.dirname(dir);
       }
     } catch (e) {
       throw new import_token_error.VercelOidcTokenError("Token refresh only supported in node server environments");
@@ -38107,11 +38232,11 @@ var require_token_io = __commonJS((exports, module) => {
     if (process.env.XDG_DATA_HOME) {
       return process.env.XDG_DATA_HOME;
     }
-    switch (import_os2.default.platform()) {
+    switch (import_os3.default.platform()) {
       case "darwin":
-        return import_path.default.join(import_os2.default.homedir(), "Library/Application Support");
+        return import_path2.default.join(import_os3.default.homedir(), "Library/Application Support");
       case "linux":
-        return import_path.default.join(import_os2.default.homedir(), ".local/share");
+        return import_path2.default.join(import_os3.default.homedir(), ".local/share");
       case "win32":
         if (process.env.LOCALAPPDATA) {
           return process.env.LOCALAPPDATA;
@@ -38156,11 +38281,11 @@ var require_auth_config = __commonJS((exports, module) => {
   var path = __toESM2(__require("path"));
   var import_token_util = require_token_util();
   function getAuthConfigPath() {
-    const dataDir = (0, import_token_util.getVercelDataDir)();
-    if (!dataDir) {
+    const dataDir2 = (0, import_token_util.getVercelDataDir)();
+    if (!dataDir2) {
       throw new Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);
     }
-    return path.join(dataDir, "auth.json");
+    return path.join(dataDir2, "auth.json");
   }
   function readAuthConfig() {
     try {
@@ -38221,10 +38346,10 @@ var require_oauth = __commonJS((exports, module) => {
     refreshTokenRequest: () => refreshTokenRequest
   });
   module.exports = __toCommonJS2(oauth_exports);
-  var import_os2 = __require("os");
+  var import_os3 = __require("os");
   var VERCEL_ISSUER = "https://vercel.com";
   var VERCEL_CLI_CLIENT_ID = "cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp";
-  var userAgent = `@vercel/oidc node-${process.version} ${(0, import_os2.platform)()} (${(0, import_os2.arch)()}) ${(0, import_os2.hostname)()}`;
+  var userAgent = `@vercel/oidc node-${process.version} ${(0, import_os3.platform)()} (${(0, import_os3.arch)()}) ${(0, import_os3.hostname)()}`;
   var _tokenEndpoint = null;
   async function getTokenEndpoint() {
     if (_tokenEndpoint) {
@@ -38367,11 +38492,11 @@ var require_token_util = __commonJS((exports, module) => {
   var import_auth_errors = require_auth_errors();
   function getVercelDataDir() {
     const vercelFolder = "com.vercel.cli";
-    const dataDir = (0, import_token_io.getUserDataDir)();
-    if (!dataDir) {
+    const dataDir2 = (0, import_token_io.getUserDataDir)();
+    if (!dataDir2) {
       return null;
     }
-    return path.join(dataDir, vercelFolder);
+    return path.join(dataDir2, vercelFolder);
   }
   async function getVercelToken2(options) {
     const authConfig = (0, import_auth_config.readAuthConfig)();
@@ -38646,7 +38771,7 @@ var require_dist = __commonJS((exports, module) => {
   var import_token_util = require_token_util();
 });
 
-// ../../node_modules/.bun/@ai-sdk+gateway@3.0.166+27912429049419a2/node_modules/@ai-sdk/gateway/dist/index.mjs
+// ../../node_modules/.bun/@ai-sdk+gateway@3.0.175+27912429049419a2/node_modules/@ai-sdk/gateway/dist/index.mjs
 async function createGatewayErrorFromResponse({
   response,
   statusCode,
@@ -39053,11 +39178,14 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     try {
       const { value } = await getFromApi({
         url: `${this.config.baseURL}/config`,
-        headers: await resolve4(this.config.headers()),
+        headers: await resolve5(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewayAvailableModelsResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         fetch: this.config.fetch
       });
@@ -39071,11 +39199,14 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
       const baseUrl = new URL(this.config.baseURL);
       const { value } = await getFromApi({
         url: `${baseUrl.origin}/v1/credits`,
-        headers: await resolve4(this.config.headers()),
+        headers: await resolve5(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewayCreditsResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         fetch: this.config.fetch
       });
@@ -39117,11 +39248,14 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
       }
       const { value } = await getFromApi({
         url: `${baseUrl.origin}/v1/report?${searchParams.toString()}`,
-        headers: await resolve4(this.config.headers()),
+        headers: await resolve5(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewaySpendReportResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         fetch: this.config.fetch
       });
@@ -39139,11 +39273,14 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
       const baseUrl = new URL(this.config.baseURL);
       const { value } = await getFromApi({
         url: `${baseUrl.origin}/v1/generation?id=${encodeURIComponent(params.id)}`,
-        headers: await resolve4(this.config.headers()),
+        headers: await resolve5(this.config.headers()),
         successfulResponseHandler: createJsonResponseHandler(gatewayGenerationInfoResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         fetch: this.config.fetch
       });
@@ -39172,7 +39309,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
   async doGenerate(options) {
     const { args, warnings } = await this.getArgs(options);
     const { abortSignal } = options;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39180,12 +39317,15 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue: rawResponse
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, false), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, false), await resolve5(this.config.o11yHeaders)),
         body: args,
         successfulResponseHandler: createJsonResponseHandler(exports_external2.any()),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39203,16 +39343,19 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
   async doStream(options) {
     const { args, warnings } = await this.getArgs(options);
     const { abortSignal } = options;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const { value: response, responseHeaders } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, true), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, options.headers, this.getModelConfigHeaders(this.modelId, true), await resolve5(this.config.o11yHeaders)),
         body: args,
         successfulResponseHandler: createEventSourceResponseHandler(exports_external2.any()),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39292,7 +39435,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     providerOptions
   }) {
     var _a112, _b112;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39300,7 +39443,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders)),
         body: {
           values,
           ...providerOptions ? { providerOptions } : {}
@@ -39308,7 +39451,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         successfulResponseHandler: createJsonResponseHandler(gatewayEmbeddingResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a122;
+            return (_a122 = getErrorMessage2(data)) != null ? _a122 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39356,7 +39502,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     abortSignal
   }) {
     var _a112, _b112, _c;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39364,7 +39510,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders)),
         body: {
           prompt,
           n,
@@ -39380,7 +39526,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         successfulResponseHandler: createJsonResponseHandler(gatewayImageResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a122;
+            return (_a122 = getErrorMessage2(data)) != null ? _a122 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39441,11 +39590,11 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     headers,
     abortSignal
   }) {
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const { responseHeaders, value: responseBody } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders), { accept: "text/event-stream" }),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders), { accept: "text/event-stream" }),
         body: {
           prompt,
           n,
@@ -39533,7 +39682,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         },
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39579,7 +39731,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     providerOptions
   }) {
     var _a112;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39587,7 +39739,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders)),
         body: {
           documents,
           query,
@@ -39597,7 +39749,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         successfulResponseHandler: createJsonResponseHandler(gatewayRerankingResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a122;
+            return (_a122 = getErrorMessage2(data)) != null ? _a122 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39641,7 +39796,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     headers,
     abortSignal
   }) {
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39649,7 +39804,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders)),
         body: {
           text,
           ...voice && { voice },
@@ -39662,7 +39817,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         successfulResponseHandler: createJsonResponseHandler(gatewaySpeechResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a112;
+            return (_a112 = getErrorMessage2(data)) != null ? _a112 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39708,7 +39866,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
     abortSignal
   }) {
     var _a112, _b112, _c;
-    const resolvedHeaders = await resolve4(this.config.headers());
+    const resolvedHeaders = await resolve5(this.config.headers());
     try {
       const {
         responseHeaders,
@@ -39716,7 +39874,7 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         rawValue
       } = await postJsonToApi({
         url: this.getUrl(),
-        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve4(this.config.o11yHeaders)),
+        headers: combineHeaders(resolvedHeaders, headers != null ? headers : {}, this.getModelConfigHeaders(), await resolve5(this.config.o11yHeaders)),
         body: {
           audio: audio instanceof Uint8Array ? convertUint8ArrayToBase64(audio) : audio,
           mediaType,
@@ -39725,7 +39883,10 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
         successfulResponseHandler: createJsonResponseHandler(gatewayTranscriptionResponseSchema),
         failedResponseHandler: createJsonErrorResponseHandler({
           errorSchema: exports_external2.any(),
-          errorToMessage: (data) => data
+          errorToMessage: (data) => {
+            var _a122;
+            return (_a122 = getErrorMessage2(data)) != null ? _a122 : "unknown error";
+          }
         }),
         ...abortSignal && { abortSignal },
         fetch: this.config.fetch
@@ -39757,45 +39918,45 @@ var import_oidc, import_oidc2, marker17 = "vercel.ai.gateway.error", symbol18, _
       "ai-model-id": this.modelId
     };
   }
-}, providerMetadataEntrySchema4, gatewayTranscriptionWarningSchema, gatewayTranscriptionResponseSchema, exaSearchInputSchema, exaSearchOutputSchema, exaSearchToolFactory, exaSearch = (config2 = {}) => exaSearchToolFactory(config2), parallelSearchInputSchema, parallelSearchOutputSchema, parallelSearchToolFactory, parallelSearch = (config2 = {}) => parallelSearchToolFactory(config2), perplexitySearchInputSchema, perplexitySearchOutputSchema, perplexitySearchToolFactory, perplexitySearch = (config2 = {}) => perplexitySearchToolFactory(config2), gatewayTools, VERSION5 = "3.0.166", AI_GATEWAY_PROTOCOL_VERSION = "0.0.1", gateway;
-var init_dist7 = __esm(() => {
-  init_dist3();
-  init_dist();
+}, providerMetadataEntrySchema4, gatewayTranscriptionWarningSchema, gatewayTranscriptionResponseSchema, exaSearchInputSchema, exaSearchOutputSchema, exaSearchToolFactory, exaSearch = (config2 = {}) => exaSearchToolFactory(config2), parallelSearchInputSchema, parallelSearchOutputSchema, parallelSearchToolFactory, parallelSearch = (config2 = {}) => parallelSearchToolFactory(config2), perplexitySearchInputSchema, perplexitySearchOutputSchema, perplexitySearchToolFactory, perplexitySearch = (config2 = {}) => perplexitySearchToolFactory(config2), gatewayTools, VERSION5 = "3.0.175", AI_GATEWAY_PROTOCOL_VERSION = "0.0.1", gateway;
+var init_dist8 = __esm(() => {
+  init_dist4();
+  init_dist2();
   init_v4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_v4();
-  init_dist3();
+  init_dist4();
   init_zod();
-  init_dist3();
+  init_dist4();
   init_zod();
-  init_dist3();
+  init_dist4();
   init_zod();
   import_oidc = __toESM(require_dist(), 1);
   import_oidc2 = __toESM(require_dist(), 1);
@@ -42073,7 +42234,7 @@ var require_src = __commonJS((exports) => {
   };
 });
 
-// ../../node_modules/.bun/ai@6.0.246+27912429049419a2/node_modules/ai/dist/index.mjs
+// ../../node_modules/.bun/ai@6.0.257+27912429049419a2/node_modules/ai/dist/index.mjs
 var exports_dist4 = {};
 __export(exports_dist4, {
   zodSchema: () => zodSchema,
@@ -43358,7 +43519,8 @@ async function recordSpan({
   tracer,
   attributes,
   fn,
-  endWhenDone = true
+  endWhenDone = true,
+  endOnError = endWhenDone
 }) {
   return tracer.startActiveSpan(name222, { attributes: await attributes }, async (span) => {
     const ctx = import_api3.context.active();
@@ -43372,7 +43534,9 @@ async function recordSpan({
       try {
         recordErrorOnSpan(span, error40);
       } finally {
-        span.end();
+        if (endOnError) {
+          span.end();
+        }
       }
       throw error40;
     }
@@ -45842,6 +46006,7 @@ function processUIMessageStream({
           case "reasoning-start": {
             const reasoningPart = {
               type: "reasoning",
+              id: chunk.id,
               text: "",
               providerMetadata: chunk.providerMetadata,
               state: "streaming"
@@ -46138,7 +46303,7 @@ function processUIMessageStream({
             }
             await updateMessageMetadata(chunk.messageMetadata);
             if (chunk.messageId != null || chunk.messageMetadata != null) {
-              write();
+              write({ updateStatus: false });
             }
             break;
           }
@@ -46361,9 +46526,18 @@ function createAsyncIterableStream(source) {
 }
 async function consumeStream({
   stream,
-  onError
+  onError,
+  abortSignal
 }) {
   const reader = stream.getReader();
+  const cancelOnAbort = () => {
+    reader.cancel().catch(() => {});
+  };
+  if (abortSignal == null ? undefined : abortSignal.aborted) {
+    cancelOnAbort();
+  } else {
+    abortSignal == null || abortSignal.addEventListener("abort", cancelOnAbort, { once: true });
+  }
   try {
     while (true) {
       const { done } = await reader.read();
@@ -46373,6 +46547,7 @@ async function consumeStream({
   } catch (error40) {
     onError == null || onError(error40);
   } finally {
+    abortSignal == null || abortSignal.removeEventListener("abort", cancelOnAbort);
     reader.releaseLock();
   }
 }
@@ -46973,6 +47148,27 @@ function createUIMessageStream({
     onError
   });
 }
+function createUIMessageSnapshot(message) {
+  const textByPartIndex = /* @__PURE__ */ new Map;
+  const messageWithoutText = {
+    ...message,
+    parts: message.parts.map((part, index) => {
+      if (part.type === "text" || part.type === "reasoning") {
+        textByPartIndex.set(index, part.text);
+        return { ...part, text: "" };
+      }
+      return part;
+    })
+  };
+  const snapshot2 = structuredClone(messageWithoutText);
+  for (const [index, text2] of textByPartIndex) {
+    const part = snapshot2.parts[index];
+    if (part.type === "text" || part.type === "reasoning") {
+      part.text = text2;
+    }
+  }
+  return snapshot2;
+}
 function readUIMessageStream({
   message,
   stream,
@@ -47005,7 +47201,7 @@ function readUIMessageStream({
         return job({
           state,
           write: () => {
-            controller == null || controller.enqueue(structuredClone(state.message));
+            controller == null || controller.enqueue(createUIMessageSnapshot(state.message));
           }
         });
       },
@@ -49888,7 +50084,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
 }, imageMediaTypeSignatures, audioMediaTypeSignatures, videoMediaTypeSignatures, DEFAULT_SNIFF_BYTES = 18, MAX_SIGNATURE_BYTES = 12, MAX_ID3_TAG_BYTES, ID3_SCAN_BYTES, stripID3 = (bytes) => {
   const id3Size = (bytes[6] & 127) << 21 | (bytes[7] & 127) << 14 | (bytes[8] & 127) << 7 | bytes[9] & 127;
   return bytes.subarray(id3Size + 10);
-}, VERSION6 = "6.0.246", download = async ({
+}, VERSION6 = "6.0.257", download = async ({
   url: url2,
   maxBytes,
   abortSignal
@@ -49983,7 +50179,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
   const schema = asSchema(inputSchema);
   return {
     name: "object",
-    responseFormat: resolve4(schema.jsonSchema).then((jsonSchema2) => ({
+    responseFormat: resolve5(schema.jsonSchema).then((jsonSchema2) => ({
       type: "json",
       schema: jsonSchema2,
       ...name222 != null && { name: name222 },
@@ -50044,7 +50240,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
   const elementSchema = asSchema(inputElementSchema);
   return {
     name: "array",
-    responseFormat: resolve4(elementSchema.jsonSchema).then((jsonSchema2) => {
+    responseFormat: resolve5(elementSchema.jsonSchema).then((jsonSchema2) => {
       const { $schema, ...itemSchema } = jsonSchema2;
       return {
         type: "json",
@@ -51087,6 +51283,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
               }),
               tracer,
               endWhenDone: false,
+              endOnError: true,
               fn: async (doStreamSpan2) => ({
                 startTimestampMs: now22(),
                 doStreamSpan: doStreamSpan2,
@@ -52006,10 +52203,11 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     onStepFinish,
     ...options
   }) {
+    const preparedCall = await this.prepareCall(options);
     return generateText({
-      ...await this.prepareCall(options),
+      ...preparedCall,
       abortSignal,
-      timeout,
+      timeout: timeout != null ? timeout : preparedCall.timeout,
       onStepFinish: this.mergeOnStepFinishCallbacks(onStepFinish)
     });
   }
@@ -52020,10 +52218,11 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     onStepFinish,
     ...options
   }) {
+    const preparedCall = await this.prepareCall(options);
     return streamText({
-      ...await this.prepareCall(options),
+      ...preparedCall,
       abortSignal,
-      timeout,
+      timeout: timeout != null ? timeout : preparedCall.timeout,
       experimental_transform,
       onStepFinish: this.mergeOnStepFinishCallbacks(onStepFinish)
     });
@@ -52380,6 +52579,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
       }),
       tracer,
       endWhenDone: false,
+      endOnError: true,
       fn: async (rootSpan) => {
         const standardizedPrompt = await standardizePrompt({
           system,
@@ -52449,6 +52649,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
           }),
           tracer,
           endWhenDone: false,
+          endOnError: true,
           fn: async (doStreamSpan2) => ({
             startTimestampMs: now22(),
             doStreamSpan: doStreamSpan2,
@@ -53035,9 +53236,9 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     ...options
   }) {
     var _a222, _b16, _c, _d, _e;
-    const resolvedBody = await resolve4(this.body);
-    const resolvedHeaders = await resolve4(this.headers);
-    const resolvedCredentials = await resolve4(this.credentials);
+    const resolvedBody = await resolve5(this.body);
+    const resolvedHeaders = await resolve5(this.headers);
+    const resolvedCredentials = await resolve5(this.credentials);
     const baseHeaders = {
       ...normalizeHeaders(resolvedHeaders),
       ...normalizeHeaders(options.headers)
@@ -53085,9 +53286,9 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
   }
   async reconnectToStream(options) {
     var _a222, _b16, _c, _d, _e;
-    const resolvedBody = await resolve4(this.body);
-    const resolvedHeaders = await resolve4(this.headers);
-    const resolvedCredentials = await resolve4(this.credentials);
+    const resolvedBody = await resolve5(this.body);
+    const resolvedHeaders = await resolve5(this.headers);
+    const resolvedCredentials = await resolve5(this.credentials);
     const baseHeaders = {
       ...normalizeHeaders(resolvedHeaders),
       ...normalizeHeaders(options.headers)
@@ -53107,7 +53308,8 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     const response = await fetch2(api2, {
       method: "GET",
       headers,
-      credentials
+      credentials,
+      signal: options.abortSignal
     });
     if (response.status === 204) {
       return null;
@@ -53135,6 +53337,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     sendAutomaticallyWhen
   }) {
     this.activeResponse = undefined;
+    this.activeResumeRequest = undefined;
     this.jobExecutor = new SerialJobExecutor;
     this.sendMessage = async (message, options) => {
       var _a222, _b16, _c, _d;
@@ -53276,12 +53479,9 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     });
     this.addToolResult = this.addToolOutput;
     this.stop = async () => {
-      var _a222;
-      if (this.status !== "streaming" && this.status !== "submitted")
-        return;
-      if ((_a222 = this.activeResponse) == null ? undefined : _a222.abortController) {
-        this.activeResponse.abortController.abort();
-      }
+      var _a222, _b16;
+      (_a222 = this.activeResumeRequest) == null || _a222.abortController.abort();
+      (_b16 = this.activeResponse) == null || _b16.abortController.abort();
     };
     this.id = id;
     this.transport = transport;
@@ -53337,25 +53537,59 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     body,
     messageId
   }) {
-    var _a222, _b16;
+    var _a222, _b16, _c;
+    const abortController = new AbortController;
+    const activeResumeRequest = trigger === "resume-stream" ? { abortController } : undefined;
+    if (activeResumeRequest) {
+      (_a222 = this.activeResumeRequest) == null || _a222.abortController.abort();
+      this.activeResumeRequest = activeResumeRequest;
+    }
+    const isCurrentRequest = () => activeResumeRequest == null || this.activeResumeRequest === activeResumeRequest;
+    const clearActiveResumeRequest = () => {
+      if (this.activeResumeRequest === activeResumeRequest) {
+        this.activeResumeRequest = undefined;
+      }
+    };
     let resumeStream;
     if (trigger === "resume-stream") {
       try {
         const reconnect = await this.transport.reconnectToStream({
           chatId: this.id,
+          abortSignal: abortController.signal,
           metadata,
           headers,
           body
         });
+        if (abortController.signal.aborted || !isCurrentRequest()) {
+          await (reconnect == null ? undefined : reconnect.cancel().catch(() => {}));
+          if (isCurrentRequest()) {
+            this.setStatus({ status: "ready" });
+          }
+          clearActiveResumeRequest();
+          return;
+        }
         if (reconnect == null) {
+          this.setStatus({ status: "ready" });
+          clearActiveResumeRequest();
           return;
         }
         resumeStream = reconnect;
       } catch (err) {
+        if (abortController.signal.aborted || err.name === "AbortError") {
+          if (isCurrentRequest()) {
+            this.setStatus({ status: "ready" });
+          }
+          clearActiveResumeRequest();
+          return;
+        }
+        if (!isCurrentRequest()) {
+          return;
+        }
         if (this.onError && err instanceof Error) {
           this.onError(err);
         }
         this.setStatus({ status: "error", error: err });
+        clearActiveResumeRequest();
         return;
       }
     }
@@ -53368,10 +53602,10 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     try {
       const response = {
         state: createStreamingUIMessageState({
-          lastMessage: trigger === "regenerate-message" ? undefined : this.state.snapshot(lastMessage),
+          lastMessage: trigger === "resume-stream" || trigger === "regenerate-message" ? undefined : this.state.snapshot(lastMessage),
           messageId: this.generateId()
         }),
-        abortController: new AbortController
+        abortController
       };
       activeResponse = response;
       response.abortController.signal.addEventListener("abort", () => {
@@ -53393,19 +53627,29 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
           messageId
         });
       }
-      const runUpdateMessageJob = (job) => this.jobExecutor.run(() => job({
-        state: response.state,
-        write: () => {
-          var _a232;
-          this.setStatus({ status: "streaming" });
-          const replaceLastMessage = response.state.message.id === ((_a232 = this.lastMessage) == null ? undefined : _a232.id);
-          if (replaceLastMessage) {
-            this.state.replaceMessage(this.state.messages.length - 1, response.state.message);
-          } else {
-            this.state.pushMessage(response.state.message);
-          }
+      const runUpdateMessageJob = (job) => this.jobExecutor.run(() => {
+        if (response.abortController.signal.aborted) {
+          return Promise.resolve();
         }
-      }));
+        return job({
+          state: response.state,
+          write: ({ updateStatus = true } = {}) => {
+            var _a232;
+            if (response.abortController.signal.aborted) {
+              return;
+            }
+            if (updateStatus) {
+              this.setStatus({ status: "streaming" });
+            }
+            const replaceLastMessage = response.state.message.id === ((_a232 = this.lastMessage) == null ? undefined : _a232.id);
+            if (replaceLastMessage) {
+              this.state.replaceMessage(this.state.messages.length - 1, response.state.message);
+            } else {
+              this.state.pushMessage(response.state.message);
+            }
+          }
+        });
+      });
       await consumeStream({
         stream: processUIMessageStream({
           stream,
@@ -53418,15 +53662,29 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
             throw error40;
           }
         }),
+        abortSignal: response.abortController.signal,
         onError: (error40) => {
           throw error40;
         }
       });
-      this.setStatus({ status: "ready" });
+      if (isAbort) {
+        if (isCurrentRequest()) {
+          this.setStatus({ status: "ready" });
+        }
+        return null;
+      }
+      if (isCurrentRequest()) {
+        this.setStatus({ status: "ready" });
+      }
     } catch (err) {
       if (isAbort || err.name === "AbortError") {
         isAbort = true;
-        this.setStatus({ status: "ready" });
+        if (isCurrentRequest()) {
+          this.setStatus({ status: "ready" });
+        }
+        return null;
+      }
+      if (!isCurrentRequest()) {
         return null;
       }
       isError = true;
@@ -53440,7 +53698,7 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     } finally {
       try {
         if (activeResponse) {
-          (_a222 = this.onFinish) == null || _a222.call(this, {
+          (_b16 = this.onFinish) == null || _b16.call(this, {
             message: activeResponse.state.message,
             messages: this.state.messages,
             isAbort,
@@ -53449,17 +53707,17 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
             finishReason: activeResponse.state.finishReason
           });
         }
-      } catch (err) {
-        console.error(err);
-      }
-      if (this.activeResponse === activeResponse) {
-        this.activeResponse = undefined;
+      } finally {
+        if (this.activeResponse === activeResponse) {
+          this.activeResponse = undefined;
+        }
+        clearActiveResumeRequest();
       }
     }
     if (!isError && await this.shouldSendAutomatically()) {
       await this.makeRequest({
         trigger: "submit-message",
-        messageId: (_b16 = this.lastMessage) == null ? undefined : _b16.id,
+        messageId: (_c = this.lastMessage) == null ? undefined : _c.id,
         metadata,
         headers,
         body
@@ -53498,96 +53756,96 @@ var import_api2, import_api3, __defProp2, __export2 = (target, all) => {
     return null;
   }
 }, TextStreamChatTransport;
-var init_dist8 = __esm(() => {
-  init_dist7();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist7();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
+var init_dist9 = __esm(() => {
+  init_dist8();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist8();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist3();
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist4();
   init_v4();
   init_v4();
   init_v4();
   init_v4();
   init_v4();
-  init_dist7();
-  init_dist();
-  init_dist();
-  init_dist7();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist3();
+  init_dist8();
+  init_dist2();
+  init_dist2();
+  init_dist8();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
   init_v4();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist();
-  init_dist3();
-  init_dist();
-  init_dist();
-  init_dist();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
-  init_dist3();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist2();
+  init_dist4();
+  init_dist2();
+  init_dist2();
+  init_dist2();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
+  init_dist4();
   import_api2 = __toESM(require_src(), 1);
   import_api3 = __toESM(require_src(), 1);
   __defProp2 = Object.defineProperty;
@@ -54646,6 +54904,7 @@ var init_dist8 = __esm(() => {
       }),
       exports_external2.object({
         type: exports_external2.literal("reasoning"),
+        id: exports_external2.string().optional(),
         text: exports_external2.string(),
         state: exports_external2.enum(["streaming", "done"]).optional(),
         providerMetadata: providerMetadataSchema.optional()
@@ -55256,19 +55515,20 @@ var init_openapi = __esm(() => {
 });
 
 // src/server/index.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { createRequire } from "module";
-import { join as join7, resolve as resolve5, sep } from "path";
+import { join as join9, resolve as resolve6, sep } from "path";
 
 // src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync, unlinkSync, cpSync } from "fs";
-import { homedir } from "os";
-import { basename, dirname, join, resolve } from "path";
+init_paths();
+import { existsSync as existsSync2, mkdirSync, readFileSync, readdirSync, writeFileSync, unlinkSync, cpSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { basename, dirname, join as join3, resolve as resolve2 } from "path";
 function isInMemoryDb(path) {
   return path === ":memory:" || path.startsWith("file::memory:");
 }
 function homeDir() {
-  return process.env["HOME"] || process.env["USERPROFILE"] || homedir();
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3();
 }
 var DEFAULT_CONFIG = {
   default_scope: "private",
@@ -55326,9 +55586,9 @@ function isValidCategory(value) {
   return VALID_CATEGORIES.includes(value);
 }
 function loadConfig() {
-  const configPath = join(homeDir(), ".hasna", "mementos", "config.json");
+  const configPath = join3(getDataRoot(), "config.json");
   let fileConfig = {};
-  if (existsSync(configPath)) {
+  if (existsSync2(configPath)) {
     try {
       const raw = readFileSync(configPath, "utf-8");
       fileConfig = JSON.parse(raw);
@@ -55354,10 +55614,10 @@ function loadConfig() {
 }
 function findFileWalkingUp(filename) {
   let dir = process.cwd();
-  const legacyHomeMementosDb = resolve(homeDir(), ".mementos", "mementos.db");
+  const legacyHomeMementosDb = resolve2(homeDir(), ".mementos", "mementos.db");
   while (true) {
-    const candidate = join(dir, filename);
-    if (existsSync(candidate) && resolve(candidate) !== legacyHomeMementosDb) {
+    const candidate = join3(dir, filename);
+    if (existsSync2(candidate) && resolve2(candidate) !== legacyHomeMementosDb) {
       return candidate;
     }
     const parent = dirname(dir);
@@ -55370,7 +55630,7 @@ function findFileWalkingUp(filename) {
 function findGitRoot() {
   let dir = process.cwd();
   while (true) {
-    if (existsSync(join(dir, ".git"))) {
+    if (existsSync2(join3(dir, ".git"))) {
       return dir;
     }
     const parent = dirname(dir);
@@ -55381,14 +55641,14 @@ function findGitRoot() {
   }
 }
 function profilesDir() {
-  return join(homeDir(), ".hasna", "mementos", "profiles");
+  return join3(getDataRoot(), "profiles");
 }
 function globalConfigPath() {
-  return join(homeDir(), ".hasna", "mementos", "config.json");
+  return join3(getDataRoot(), "config.json");
 }
 function readGlobalConfig() {
   const p = globalConfigPath();
-  if (!existsSync(p))
+  if (!existsSync2(p))
     return {};
   try {
     return JSON.parse(readFileSync(p, "utf-8"));
@@ -55405,16 +55665,16 @@ function getActiveProfile() {
 }
 function listProfiles() {
   const dir = profilesDir();
-  if (!existsSync(dir))
+  if (!existsSync2(dir))
     return [];
   return readdirSync(dir).filter((f) => f.endsWith(".db")).map((f) => basename(f, ".db")).sort();
 }
 function getDbPath() {
   const _home = homeDir();
-  const _newDir = join(_home, ".hasna", "mementos");
-  const _oldDir = join(_home, ".mementos");
-  if (!existsSync(_newDir) && existsSync(_oldDir)) {
-    mkdirSync(join(_home, ".hasna"), { recursive: true });
+  const _newDir = getDataRoot();
+  const _oldDir = join3(_home, ".mementos");
+  if (!existsSync2(_newDir) && existsSync2(_oldDir)) {
+    mkdirSync(join3(_home, ".hasna"), { recursive: true });
     cpSync(_oldDir, _newDir, { recursive: true });
   }
   const envDbPath = process.env["HASNA_MEMENTOS_DB_PATH"] ?? process.env["MEMENTOS_DB_PATH"];
@@ -55422,13 +55682,13 @@ function getDbPath() {
     if (isInMemoryDb(envDbPath)) {
       return envDbPath;
     }
-    const resolved = resolve(envDbPath);
+    const resolved = resolve2(envDbPath);
     ensureDir(dirname(resolved));
     return resolved;
   }
   const profile = getActiveProfile();
   if (profile) {
-    const profilePath = join(profilesDir(), `${profile}.db`);
+    const profilePath = join3(profilesDir(), `${profile}.db`);
     ensureDir(dirname(profilePath));
     return profilePath;
   }
@@ -55436,21 +55696,21 @@ function getDbPath() {
   if (dbScope === "project") {
     const gitRoot = findGitRoot();
     if (gitRoot) {
-      const dbPath = join(gitRoot, ".mementos", "mementos.db");
+      const dbPath = join3(gitRoot, ".mementos", "mementos.db");
       ensureDir(dirname(dbPath));
       return dbPath;
     }
   }
-  const found = findFileWalkingUp(join(".mementos", "mementos.db"));
+  const found = findFileWalkingUp(join3(".mementos", "mementos.db"));
   if (found) {
     return found;
   }
-  const fallback = join(homeDir(), ".hasna", "mementos", "mementos.db");
+  const fallback = join3(getDataRoot(), "mementos.db");
   ensureDir(dirname(fallback));
   return fallback;
 }
 function ensureDir(dir) {
-  if (!existsSync(dir)) {
+  if (!existsSync2(dir)) {
     mkdirSync(dir, { recursive: true });
   }
 }
@@ -55527,6 +55787,8 @@ init_hooks();
 // src/db/webhook_hooks.ts
 init_database();
 init_api_mode();
+import { isIP } from "net";
+import { lookup as dnsLookup } from "dns/promises";
 function parseRow(row) {
   return {
     id: row["id"],
@@ -55543,7 +55805,154 @@ function parseRow(row) {
     failureCount: row["failure_count"]
   };
 }
-function createWebhookHook(input, db) {
+function isBlockedIpv4(parts) {
+  const a = parts[0];
+  const b = parts[1];
+  if (a === 0)
+    return true;
+  if (a === 127)
+    return true;
+  if (a === 169 && b === 254)
+    return true;
+  if (a === 10)
+    return true;
+  if (a === 172 && b >= 16 && b <= 31)
+    return true;
+  if (a === 192 && b === 168)
+    return true;
+  return false;
+}
+function isBlockedIpv6(bytes) {
+  const mapped = bytes.slice(0, 10).every((b) => b === 0) && bytes[10] === 255 && bytes[11] === 255;
+  if (mapped)
+    return isBlockedIpv4(bytes.slice(12, 16));
+  if (bytes.every((b) => b === 0))
+    return true;
+  if (bytes.slice(0, 15).every((b) => b === 0) && bytes[15] === 1)
+    return true;
+  if ((bytes[0] & 254) === 252)
+    return true;
+  if (bytes[0] === 254 && (bytes[1] & 192) === 128)
+    return true;
+  return false;
+}
+function quadToGroups(quad) {
+  const nums = quad.split(".").map((p) => Number(p));
+  const [a, b, c, d] = nums;
+  const valid = [a, b, c, d].every((n) => n !== undefined && Number.isInteger(n) && n >= 0 && n <= 255);
+  if (!valid)
+    return null;
+  return [a << 8 | b, c << 8 | d];
+}
+function parseIpv6Bytes(host) {
+  const groups = host.split("::");
+  if (groups.length > 2)
+    return null;
+  const headRaw = groups[0] ?? "";
+  const tailRaw = groups[1] ?? "";
+  const head = headRaw === "" ? [] : headRaw.split(":");
+  const tail = tailRaw === "" ? [] : tailRaw.split(":");
+  const headNums = [];
+  for (const g of head) {
+    if (!/^[0-9a-f]{1,4}$/i.test(g))
+      return null;
+    headNums.push(parseInt(g, 16));
+  }
+  const tailNums = [];
+  for (const g of tail) {
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(g)) {
+      const quads = quadToGroups(g);
+      if (!quads)
+        return null;
+      tailNums.push(...quads);
+    } else if (/^[0-9a-f]{1,4}$/i.test(g)) {
+      tailNums.push(parseInt(g, 16));
+    } else {
+      return null;
+    }
+  }
+  const hasCompression = groups.length === 2;
+  if (!hasCompression && headNums.length !== 8)
+    return null;
+  if (hasCompression && headNums.length + tailNums.length >= 8)
+    return null;
+  const zeros = 8 - headNums.length - tailNums.length;
+  const all = [...headNums, ...new Array(zeros).fill(0), ...tailNums];
+  const bytes = [];
+  for (const n of all) {
+    bytes.push(n >> 8 & 255, n & 255);
+  }
+  return bytes;
+}
+var BLOCKED_TARGET_MESSAGE = "Invalid webhook handler URL \u2014 loopback, link-local, and private network targets are not allowed";
+function defaultResolveHost(hostname2) {
+  return dnsLookup(hostname2, { all: true, verbatim: true });
+}
+function assertResolvedAddressPublic(address, url) {
+  const version = isIP(address);
+  if (version === 4) {
+    if (isBlockedIpv4(address.split(".").map((p) => Number(p)))) {
+      throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+    }
+  } else if (version === 6) {
+    const bytes = parseIpv6Bytes(address);
+    if (!bytes || isBlockedIpv6(bytes)) {
+      throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+    }
+  } else {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+}
+async function validateWebhookHandlerUrl(url, opts) {
+  const resolveHost = opts?.lookup ?? defaultResolveHost;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 must be a valid http(s) URL`);
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 only http and https are allowed`);
+  }
+  if (parsed.username || parsed.password) {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 embedded credentials are not allowed`);
+  }
+  const host = parsed.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  if (host === "localhost" || host.endsWith(".localhost")) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  const version = isIP(host);
+  if (version === 4 || version === 6) {
+    if (version === 4) {
+      if (isBlockedIpv4(host.split(".").map((p) => Number(p)))) {
+        throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+      }
+    } else {
+      const bytes = parseIpv6Bytes(host);
+      if (!bytes || isBlockedIpv6(bytes)) {
+        throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+      }
+    }
+    return;
+  }
+  if (/^[0-9]+(\.[0-9]+)*$/.test(host) || /^0x[0-9a-f]+$/i.test(host) || host.includes("%")) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  let addrs;
+  try {
+    addrs = await resolveHost(host);
+  } catch {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  if (addrs.length === 0) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  for (const { address } of addrs) {
+    assertResolvedAddressPublic(address, url);
+  }
+}
+async function createWebhookHook(input, db, opts) {
+  await validateWebhookHandlerUrl(input.handlerUrl, opts);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", "/webhooks", {
       type: input.type,
@@ -55827,13 +56236,19 @@ hookRegistry.register({
   }
 });
 var _webhooksLoaded = false;
-function loadWebhooksFromDb() {
+async function loadWebhooksFromDb() {
   if (_webhooksLoaded)
     return;
   _webhooksLoaded = true;
   try {
     const webhooks = listWebhookHooks({ enabled: true });
     for (const wh of webhooks) {
+      try {
+        await validateWebhookHandlerUrl(wh.handlerUrl);
+      } catch (err) {
+        console.error(`[hooks] Skipping webhook ${wh.id} (${wh.type}): ${err instanceof Error ? err.message : String(err)}`);
+        continue;
+      }
       hookRegistry.register({
         type: wh.type,
         blocking: wh.blocking,
@@ -55851,9 +56266,10 @@ function loadWebhooksFromDb() {
     console.error("[hooks] Failed to load webhooks from DB:", err);
   }
 }
-function makeWebhookHandler(webhookId, url) {
+function makeWebhookHandler(webhookId, url, opts) {
   return async (context) => {
     try {
+      await validateWebhookHandlerUrl(url, opts);
       const res = await fetch(url, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -55866,9 +56282,9 @@ function makeWebhookHandler(webhookId, url) {
     }
   };
 }
-function reloadWebhooks() {
+async function reloadWebhooks() {
   _webhooksLoaded = false;
-  loadWebhooksFromDb();
+  await loadWebhooksFromDb();
 }
 
 // src/lib/session-queue.ts
@@ -57288,8 +57704,8 @@ function getMemoryHealth(filter = {}, db) {
 init_router();
 
 // src/server/helpers.ts
-import { existsSync as existsSync4 } from "fs";
-import { dirname as dirname3, extname, join as join5 } from "path";
+import { existsSync as existsSync5 } from "fs";
+import { dirname as dirname3, extname, join as join7 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var CORS_HEADERS = {
   "Access-Control-Allow-Origin": process.env["MEMENTOS_CORS_ORIGIN"] ?? "http://localhost:19428",
@@ -57297,6 +57713,43 @@ var CORS_HEADERS = {
   "Access-Control-Allow-Headers": "Content-Type, Authorization",
   "Access-Control-Max-Age": "86400"
 };
+var STATE_CHANGING_METHODS = new Set(["POST", "PATCH", "PUT", "DELETE"]);
+function isStateChangingMethod(method) {
+  return STATE_CHANGING_METHODS.has(method);
+}
+function getAllowedOrigins() {
+  const raw = process.env["MEMENTOS_CORS_ORIGIN"] ?? "http://localhost:19428";
+  return raw.split(",").map((entry) => entry.trim()).filter(Boolean);
+}
+function hostOf(entry) {
+  try {
+    return new URL(entry).host;
+  } catch {
+    return entry;
+  }
+}
+function checkOriginOrHost(req, method) {
+  if (!isStateChangingMethod(method))
+    return null;
+  return checkWriteOriginOrHost(req);
+}
+function checkWriteOriginOrHost(req) {
+  const allowlist = getAllowedOrigins();
+  const allowedHosts = allowlist.map(hostOf);
+  const origin = req.headers.get("origin");
+  if (origin !== null) {
+    if (allowlist.includes(origin))
+      return null;
+    return json({ error: "Forbidden. Origin is not allowed." }, 403);
+  }
+  const host = req.headers.get("host");
+  if (host !== null) {
+    if (allowedHosts.includes(host))
+      return null;
+    return json({ error: "Forbidden. Host is not allowed." }, 403);
+  }
+  return json({ error: "Forbidden. Missing Origin or Host header." }, 403);
+}
 var MIME_TYPES = {
   ".html": "text/html; charset=utf-8",
   ".js": "application/javascript",
@@ -57343,9 +57796,9 @@ async function readJson(req) {
   }
 }
 function getCorsHeaders(req) {
-  const allowedOrigin = process.env["MEMENTOS_CORS_ORIGIN"] ?? "http://localhost:19428";
+  const allowlist = getAllowedOrigins();
   const origin = req?.headers.get("origin");
-  const finalOrigin = origin === allowedOrigin ? origin : allowedOrigin;
+  const finalOrigin = typeof origin === "string" && allowlist.includes(origin) ? origin : allowlist[0] ?? "http://localhost:19428";
   return {
     "Access-Control-Allow-Origin": finalOrigin,
     "Access-Control-Allow-Methods": "GET, POST, PATCH, DELETE, OPTIONS",
@@ -57384,23 +57837,23 @@ function resolveDashboardDir() {
   const candidates = [];
   try {
     const scriptDir = dirname3(fileURLToPath2(import.meta.url));
-    candidates.push(join5(scriptDir, "..", "dashboard", "dist"));
-    candidates.push(join5(scriptDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join7(scriptDir, "..", "dashboard", "dist"));
+    candidates.push(join7(scriptDir, "..", "..", "dashboard", "dist"));
   } catch {}
   if (process.argv[1]) {
     const mainDir = dirname3(process.argv[1]);
-    candidates.push(join5(mainDir, "..", "dashboard", "dist"));
-    candidates.push(join5(mainDir, "..", "..", "dashboard", "dist"));
+    candidates.push(join7(mainDir, "..", "dashboard", "dist"));
+    candidates.push(join7(mainDir, "..", "..", "dashboard", "dist"));
   }
-  candidates.push(join5(process.cwd(), "dashboard", "dist"));
+  candidates.push(join7(process.cwd(), "dashboard", "dist"));
   for (const c of candidates) {
-    if (existsSync4(c))
+    if (existsSync5(c))
       return c;
   }
-  return join5(process.cwd(), "dashboard", "dist");
+  return join7(process.cwd(), "dashboard", "dist");
 }
 function serveStaticFile(filePath) {
-  if (!existsSync4(filePath))
+  if (!existsSync5(filePath))
     return null;
   const ct = MIME_TYPES[extname(filePath)] || "application/octet-stream";
   return new Response(Bun.file(filePath), {
@@ -57472,6 +57925,9 @@ function getApiKeyVerifier() {
 async function checkApiKey(req, method, path, requiredScopes) {
   const verifier = getApiKeyVerifier();
   if (!verifier) {
+    if (isStateChangingMethod(method) && !unauthenticatedWritesAllowed()) {
+      return json({ error: "Unauthorized. No API key is configured; state-changing requests are refused." }, 401);
+    }
     return authenticateRequest(req);
   }
   if (_schemaReady)
@@ -57481,6 +57937,10 @@ async function checkApiKey(req, method, path, requiredScopes) {
     return null;
   return json({ error: decision.message, reason: decision.reason }, decision.status);
 }
+function unauthenticatedWritesAllowed() {
+  const raw = process.env["MEMENTOS_ALLOW_UNAUTHENTICATED_WRITES"]?.trim().toLowerCase();
+  return raw === "1" || raw === "true" || raw === "yes";
+}
 
 // src/server/routes/memories-crud.ts
 init_memories();
@@ -57629,10 +58089,16 @@ addRoute("POST", "/api/memories", async (req) => {
     if (e instanceof DuplicateMemoryError) {
       return errorResponse(e.message, 409);
     }
+    if (e instanceof MemoryConflictError) {
+      return errorResponse(e.message, 409);
+    }
     throw e;
   }
 });
-addRoute("GET", "/api/memories/:id", (_req, _url, params) => {
+addRoute("GET", "/api/memories/:id", (req, _url, params) => {
+  const gate = checkWriteOriginOrHost(req);
+  if (gate)
+    return gate;
   const memory = getMemory(params["id"]);
   if (!memory) {
     return errorResponse("Memory not found", 404);
@@ -57676,6 +58142,9 @@ addRoute("PATCH", "/api/memories/:id", async (req, _url, params) => {
         actual: e.actual
       });
     }
+    if (e instanceof MemoryConflictError) {
+      return errorResponse(e.message, 409);
+    }
     throw e;
   }
 });
@@ -58701,7 +59170,10 @@ addRoute("POST", "/api/maintenance/cleanup", () => {
   const result = runCleanup(loadConfig());
   return json(result);
 });
-addRoute("GET", "/api/inject", (_req, url) => {
+addRoute("GET", "/api/inject", (req, url) => {
+  const gate = checkWriteOriginOrHost(req);
+  if (gate)
+    return gate;
   const q = getSearchParams(url);
   const maxTokens = q["max_tokens"] ? parseInt(q["max_tokens"], 10) : 500;
   const minImportance = 3;
@@ -58809,13 +59281,13 @@ import { createHash } from "crypto";
 
 // src/lib/package-version.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname4, join as join6 } from "path";
+import { dirname as dirname4, join as join8 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function getMementosPackageVersion() {
   const here = dirname4(fileURLToPath3(import.meta.url));
   for (const candidate of [
-    join6(here, "..", "..", "package.json"),
-    join6(here, "..", "package.json")
+    join8(here, "..", "..", "package.json"),
+    join8(here, "..", "package.json")
   ]) {
     try {
       const parsed = JSON.parse(readFileSync3(candidate, "utf8"));
@@ -60579,7 +61051,7 @@ function getProjectUpdateReceipt(id, receiptId, identity = projectUpdateAuthorit
 
 // src/project-registration/authority.ts
 import { createHash as createHash3 } from "crypto";
-import { resolve as resolve3 } from "path";
+import { resolve as resolve4 } from "path";
 
 // src/project-registration/project-references.ts
 var MEMENTOS_PROJECT_REFERENCE_SURFACES = [
@@ -60756,7 +61228,7 @@ function ownedPath(target) {
   }
   const path = target.withOwnedPath((value) => value);
   requireString(path, "target path", { max: 4096 });
-  if (path !== resolve3(path)) {
+  if (path !== resolve4(path)) {
     throw new MementosProjectRegistrationError("MEMENTOS_PROJECT_REGISTRATION_INVALID_INPUT", "target path must already be canonical and absolute");
   }
   return path;
@@ -62617,17 +63089,21 @@ function registerSystemHookRoutes() {
     if (!body.type || !body.handler_url) {
       return errorResponse("type and handler_url are required", 400);
     }
-    const wh = createWebhookHook({
-      type: body.type,
-      handlerUrl: body.handler_url,
-      priority: body.priority,
-      blocking: body.blocking,
-      agentId: body.agent_id,
-      projectId: body.project_id,
-      description: body.description
-    });
-    reloadWebhooks();
-    return json(wh, 201);
+    try {
+      const wh = await createWebhookHook({
+        type: body.type,
+        handlerUrl: body.handler_url,
+        priority: body.priority,
+        blocking: body.blocking,
+        agentId: body.agent_id,
+        projectId: body.project_id,
+        description: body.description
+      });
+      await reloadWebhooks();
+      return json(wh, 201);
+    } catch (err) {
+      return errorResponse(err instanceof Error ? err.message : String(err), 400);
+    }
   });
   addRoute("GET", "/api/webhooks/:id", (_req, _url, params) => {
     const wh = getWebhookHook(params["id"]);
@@ -62644,7 +63120,7 @@ function registerSystemHookRoutes() {
     });
     if (!updated)
       return errorResponse("Webhook not found", 404);
-    reloadWebhooks();
+    await reloadWebhooks();
     return json(updated);
   });
   addRoute("DELETE", "/api/webhooks/:id", (_req, _url, params) => {
@@ -63602,13 +64078,13 @@ function registerSystemSynthesisRoutes() {
       return json({ error: e instanceof Error ? e.message : String(e) }, 500);
     }
   });
-  addRoute("GET", "/api/profile/synthesize", async (_req, url) => {
-    const q = getSearchParams(url);
+  addRoute("POST", "/api/profile/synthesize", async (req) => {
+    const body = await readJson(req) ?? {};
     try {
       const result = await synthesizeProfile({
-        project_id: q["project_id"] || undefined,
-        agent_id: q["agent_id"] || undefined,
-        force_refresh: q["force_refresh"] === "true"
+        project_id: body["project_id"],
+        agent_id: body["agent_id"],
+        force_refresh: body["force_refresh"] === true
       });
       if (!result) {
         return json({ profile: null, message: "No preference/fact memories found to synthesize" });
@@ -64668,7 +65144,7 @@ async function resolveAISDKModel(provider, model) {
     const key = process.env["ANTHROPIC_API_KEY"];
     if (!key)
       return null;
-    const mod = await Promise.resolve().then(() => (init_dist4(), exports_dist));
+    const mod = await Promise.resolve().then(() => (init_dist5(), exports_dist));
     const anthropic2 = mod["anthropic"];
     return anthropic2 ? anthropic2(model) : null;
   }
@@ -64676,7 +65152,7 @@ async function resolveAISDKModel(provider, model) {
     const key = process.env["OPENAI_API_KEY"];
     if (!key)
       return null;
-    const mod = await Promise.resolve().then(() => (init_dist5(), exports_dist2));
+    const mod = await Promise.resolve().then(() => (init_dist6(), exports_dist2));
     const openai2 = mod["openai"];
     return openai2 ? openai2(model) : null;
   }
@@ -64685,7 +65161,7 @@ async function resolveAISDKModel(provider, model) {
     if (!apiKey)
       return null;
     const baseURL = provider === "cerebras" ? "https://api.cerebras.ai/v1" : "https://api.x.ai/v1";
-    const mod = await Promise.resolve().then(() => (init_dist6(), exports_dist3));
+    const mod = await Promise.resolve().then(() => (init_dist7(), exports_dist3));
     const createOpenAICompatible2 = mod["createOpenAICompatible"];
     if (!createOpenAICompatible2)
       return null;
@@ -64701,7 +65177,7 @@ function createAISDKReflectionCritic(options = {}) {
     if (!resolvedModel)
       return heuristicReflectionCritic(trajectory);
     try {
-      const ai = await Promise.resolve().then(() => (init_dist8(), exports_dist4));
+      const ai = await Promise.resolve().then(() => (init_dist9(), exports_dist4));
       const generateObject2 = ai["generateObject"];
       if (!generateObject2)
         return heuristicReflectionCritic(trajectory);
@@ -64967,18 +65443,18 @@ function pkgVersion() {
 }
 async function findFreePort(start) {
   const net = await import("net");
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const server = net.createServer();
     server.unref();
     server.on("error", () => {
-      resolve6(findFreePort(start + 1));
+      resolve7(findFreePort(start + 1));
     });
     server.listen(start, () => {
       const address = server.address();
       if (address && typeof address === "object") {
-        server.close(() => resolve6(address.port));
+        server.close(() => resolve7(address.port));
       } else {
-        resolve6(start);
+        resolve7(start);
       }
     });
   });
@@ -65060,12 +65536,14 @@ function startServer(port) {
       const { pathname } = url2;
       if (req.method === "OPTIONS") {
         const origin = req.headers.get("origin");
-        const allowedOrigin = process.env["MEMENTOS_CORS_ORIGIN"] ?? "http://localhost:19428";
-        if (origin && origin !== allowedOrigin) {
+        if (origin && !getAllowedOrigins().includes(origin)) {
           return new Response(null, { status: 403 });
         }
         return new Response(null, { status: 204, headers: getCorsHeaders(req) });
       }
+      const originGate = checkOriginOrHost(req, req.method);
+      if (originGate)
+        return originGate;
       const backend = getStorageBackend();
       if (pathname === "/version" || pathname === "/api/version" || pathname === "/v1/version") {
         return json({ status: "ok", version: pkgVersion(), backend });
@@ -65149,17 +65627,17 @@ function startServer(port) {
           return errorResponse("Not found", 404);
         }
         const dashDir = resolveDashboardDir();
-        if (existsSync5(dashDir) && (req.method === "GET" || req.method === "HEAD")) {
+        if (existsSync6(dashDir) && (req.method === "GET" || req.method === "HEAD")) {
           if (pathname !== "/") {
-            const resolvedDash = resolve5(dashDir) + sep;
-            const requestedPath = resolve5(join7(dashDir, pathname));
+            const resolvedDash = resolve6(dashDir) + sep;
+            const requestedPath = resolve6(join9(dashDir, pathname));
             if (requestedPath.startsWith(resolvedDash)) {
               const staticRes = serveStaticFile(requestedPath);
               if (staticRes)
                 return staticRes;
             }
           }
-          const indexRes = serveStaticFile(join7(dashDir, "index.html"));
+          const indexRes = serveStaticFile(join9(dashDir, "index.html"));
           if (indexRes)
             return indexRes;
         }