@loopingai/core 0.2.0 → 0.3.1

package/dist/testing/vcr.js

@@ -1,211 +1,276 @@
-import { MockAgent, SnapshotAgent } from "undici";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync } from "node:fs";
 import path from "node:path";
-import { VCR_CONTROL_ORIGIN, CASSETTE_NAME_RE } from "./vcr-shared.js";
+import { Cassette, replayable } from "./vcr-store.js";
+import { VCR_CONTROL_ORIGIN, VCR_MARKER_HEADER, CASSETTE_NAME_RE } from "./vcr-shared.js";
+const CONTROL_HOST = new URL(VCR_CONTROL_ORIGIN).host;
 /**
- * undici stamps every cassette entry with two volatile fields we never want
- * committed: `callCount` — which its recorder *mutates on every replay* (to walk
- * sequential responses) — and `timestamp`, the record-time clock. Neither is
- * needed for playback (`callCount` defaults to 0 on load; `timestamp` is unused),
- * so we delete them from a freshly recorded cassette. Removing them is also what
- * stops a plain `npm test` from dirtying cassettes: with no persisted `callCount`
- * there is nothing for a replay to bump — and {@link VcrAgent.close} no longer
- * writes in playback anyway.
+ * Request headers dropped before a live call. `host` and `content-length` are
+ * recomputed by the outgoing fetch and a stale value corrupts it;
+ * `accept-encoding` is dropped so the body arrives as plaintext to store; the
+ * rest are hop-by-hop or Miniflare's own loopback bookkeeping.
  */
-function stripVolatileFields(file) {
-    const entries = JSON.parse(readFileSync(file, "utf8"));
-    for (const { snapshot } of entries) {
-        delete snapshot.callCount;
-        delete snapshot.timestamp;
-    }
-    writeFileSync(file, JSON.stringify(entries, null, 2));
+const SKIP_REQUEST_HEADERS = new Set([
+    "accept-encoding",
+    "connection",
+    "content-length",
+    "host",
+    "keep-alive",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade"
+]);
+function headerRecord(headers) {
+    const record = {};
+    headers.forEach((value, name) => {
+        record[name.toLowerCase()] = value;
+    });
+    return record;
 }
-function originHost(origin) {
-    if (!origin)
-        return null;
-    try {
-        return new URL(String(origin)).host;
-    }
-    catch {
-        return null;
-    }
+/** `set-cookie` is the one header `forEach` folds together destructively. */
+function responseHeaderRecord(headers) {
+    const record = {};
+    headers.forEach((value, name) => {
+        record[name.toLowerCase()] = value;
+    });
+    const cookies = headers.getSetCookie?.() ?? [];
+    if (cookies.length > 0)
+        record["set-cookie"] = cookies;
+    return record;
 }
-const CONTROL_HOST = new URL(VCR_CONTROL_ORIGIN).host;
 /**
- * The single agent Miniflare accepts as `fetchMock` (it allows only one), fanning
- * outbound worker requests out by role:
- *
- *  - **Control channel** ({@link VCR_CONTROL_ORIGIN}) → ordinary MockAgent
- *    interceptors whose reply callbacks flip the *active cassette*. This is how a
- *    spec running in workerd (no filesystem) tells this Node-side agent which
- *    test is running — see `setupRecording` (vcr-spec.ts).
- *  - **Passthrough hosts** (the gateway JWKS) → ordinary MockAgent interceptors,
- *    unchanged from before VCR existed.
- *  - **Everything else, while a cassette is active** → that cassette's undici
- *    {@link SnapshotAgent} record/replay. In playback a request with no matching
- *    recording throws `No snapshot found` — offline, never the network.
- *  - **Everything else, with no active cassette** → ordinary MockAgent behavior
- *    (`disableNetConnect()` → offline error). A non-recorded test never reaches
- *    the network.
+ * The one place a `Response` is built, so recording and replaying a given
+ * cassette entry cannot disagree about it.
  *
- * There is **no registry**: cassettes are keyed per test (file + describe + test
- * name) by the spec helper, activated one at a time over the control channel. A
- * new recorded spec touches only its own `.spec` file.
- *
- * Why `VcrAgent extends MockAgent` rather than `SnapshotAgent`: a `SnapshotAgent`'s
- * `dispatch` fully overrides `MockAgent`'s (it never falls back to the interceptor
- * path), so one `SnapshotAgent` cannot also serve the control/interceptor fixtures
- * — and cannot serve more than one cassette. Keeping one internal `SnapshotAgent`
- * per cassette and dispatching to the active one, with an ordinary
- * `MockAgent.dispatch` fallback for control/passthrough/offline, leaves the
- * interceptor path exactly as it always worked. Miniflare validates `fetchMock`
- * with `instanceof MockAgent`, which `VcrAgent` satisfies directly.
+ * `Response` rejects *any* non-null body on 204/205/304 — an empty `Uint8Array`
+ * throws just as a full one does — so a recorded 204 has to be handed back with
+ * a null body or it cannot be replayed at all.
  */
-export class VcrAgent extends MockAgent {
+function toResponse({ status, headers, body }) {
+    const nullBody = status === 204 || status === 205 || status === 304;
+    return new Response(nullBody ? null : body, { status, headers });
+}
+function json(status, value) {
+    return new Response(JSON.stringify(value), {
+        status,
+        headers: {
+            "content-type": "application/json",
+            [VCR_MARKER_HEADER]: "1"
+        }
+    });
+}
+class Recorder {
     #snapshotsDir;
     #record;
-    #passthrough;
+    #handlers;
+    #allowNetwork;
     #excludeHeaders;
-    #ignoreHeaders;
-    /** One SnapshotAgent per cassette name, created lazily on first activation. */
-    #agents = new Map();
+    /** One cassette per name, created on first activation. */
+    #cassettes = new Map();
     #active = null;
     #activeName = null;
+    /** Requests that could not be served since the active cassette was set. */
+    #misses = [];
     constructor(options) {
-        super();
         this.#snapshotsDir = options.snapshotsDir;
         this.#record = options.record;
-        this.#passthrough = new Set(options.passthroughHosts);
-        this.#excludeHeaders = options.excludeHeaders;
-        this.#ignoreHeaders = options.ignoreHeaders;
-        this.#registerControl();
+        this.#handlers = options.handlers ?? {};
+        this.#allowNetwork = new Set(options.allowNetworkHosts ?? []);
+        this.#excludeHeaders = options.excludeHeaders ?? [];
     }
-    /** Persistent interceptors backing the control channel (see class doc). */
-    #registerControl() {
-        const control = this.get(VCR_CONTROL_ORIGIN);
-        control
-            // RegExp path so any `?cassette=…` query matches; the name is read from
-            // opts.path (the body is a ReadableStream and can't be read synchronously).
-            .intercept({ path: /^\/use(\?|$)/, method: "POST" })
-            .reply((opts) => this.#onUse(opts))
-            .persist();
-        control
-            .intercept({ path: "/release", method: "POST" })
-            .reply(() => {
+    handle = async (request) => {
+        const url = new URL(request.url);
+        if (url.host === CONTROL_HOST)
+            return this.#control(url);
+        const handler = this.#handlers[url.host];
+        if (handler)
+            return handler(request);
+        // Read once: the body is needed to key the cassette *and* to forward.
+        const bytes = Buffer.from(await request.arrayBuffer());
+        if (this.#allowNetwork.has(url.host))
+            return this.#live(request, bytes);
+        const body = bytes.toString("utf8");
+        const what = `${request.method} ${request.url}`;
+        if (this.#active === null) {
+            this.#misses.push(what);
+            return this.#blocked(`VCR blocked ${what}: no cassette is active for this test. ` +
+                `Call setupRecording() at the top of the spec, or add the host to ` +
+                `allowNetworkHosts / handlers.`);
+        }
+        if (this.#record)
+            return this.#recordOne(request, bytes);
+        const hit = this.#active.match(request.method, request.url, body);
+        if (hit)
+            return toResponse(hit);
+        this.#misses.push(what);
+        return this.#blocked(`VCR has no recording of ${what} in ${path.basename(this.#active.file)}. ` +
+            `Re-record with RECORD=1. The cassette holds: ` +
+            `${this.#active.recorded.join(", ") || "(nothing)"}.`);
+    };
+    /**
+     * A miss cannot be made to *reject* the Worker's `fetch()` — Miniflare catches
+     * whatever an outbound service throws and turns it into a 500 anyway. So the
+     * message goes in the body where it can be read, and the miss is also reported
+     * on `/release` so the test itself fails with it. That is the half the old
+     * harness lacked: `disableNetConnect()` rejected, and the rejection surfaced
+     * as `internal error; reference = …` naming nothing.
+     */
+    #blocked(message) {
+        return new Response(message, {
+            status: 500,
+            headers: { [VCR_MARKER_HEADER]: "1" }
+        });
+    }
+    #control(url) {
+        if (url.pathname === "/release") {
+            const misses = this.#misses;
+            // Write here rather than only at teardown, so a run that is interrupted
+            // still keeps every cassette whose test finished. A no-op in playback:
+            // `flush()` returns immediately unless something was recorded.
+            this.#active?.flush();
             this.#active = null;
             this.#activeName = null;
-            return { statusCode: 204 };
-        })
-            .persist();
-    }
-    /** Activate the named cassette (get-or-create its SnapshotAgent). `opts.path`
-     *  is undici's reply-callback request path, e.g. `/use?cassette=<name>`. */
-    #onUse(opts) {
-        const name = new URL(opts.path, VCR_CONTROL_ORIGIN).searchParams.get("cassette") ?? "";
+            this.#misses = [];
+            return json(200, { misses });
+        }
+        if (url.pathname !== "/use")
+            return json(404, { error: "unknown" });
+        const name = url.searchParams.get("cassette") ?? "";
         if (!CASSETTE_NAME_RE.test(name)) {
-            return { statusCode: 400, data: `invalid cassette name: ${name}` };
+            return json(400, { error: `invalid cassette name: ${name}` });
         }
-        // Cheap tripwire: recorded specs are expected to run sequentially, so a
-        // second cassette activating while another is held means parallel recorded
-        // tests are sharing this agent — surface it loudly rather than mis-record.
+        // Recorded specs are expected to run sequentially: a second cassette
+        // activating while one is held means two of them are sharing this recorder,
+        // which mis-records rather than failing, so say so instead.
         if (this.#activeName !== null && this.#activeName !== name) {
-            return {
-                statusCode: 409,
-                data: `cassette ${this.#activeName} still active`
-            };
+            return json(409, { error: `cassette ${this.#activeName} still active` });
         }
         const file = path.join(this.#snapshotsDir, name);
-        // Playback with no cassette → 404, which the spec turns into a "record it"
-        // error. In record mode the file is created on first write.
+        // Playback with no cassette on disk → 404, which the spec turns into a
+        // "record it" failure. Recording creates the file on first write.
         if (!this.#record && !existsSync(file)) {
-            return { statusCode: 404, data: `no cassette ${name}` };
+            return json(404, { error: `no cassette ${name}` });
         }
-        this.#active = this.#agentFor(name, file);
+        this.#active = this.#cassetteFor(name, file);
         this.#activeName = name;
-        return { statusCode: 204 };
+        this.#misses = [];
+        return json(200, { cassette: name });
     }
-    #agentFor(name, file) {
-        let agent = this.#agents.get(name);
-        if (!agent) {
-            agent = new SnapshotAgent({
-                // `"record"`, not undici's `"update"`: update mode replays any request
-                // already in the cassette and only hits the network for new ones —
-                // silently stale the moment recorded traffic no longer matches live
-                // behavior (e.g. a re-used game id). `"record"` never loads or matches
-                // existing entries, so a recording run always reflects the live API.
-                mode: this.#record ? "record" : "playback",
-                snapshotPath: file,
-                excludeHeaders: this.#excludeHeaders,
-                ignoreHeaders: this.#ignoreHeaders,
-                autoFlush: this.#record
-            });
-            this.#agents.set(name, agent);
+    #cassetteFor(name, file) {
+        let cassette = this.#cassettes.get(name);
+        if (!cassette) {
+            cassette = new Cassette(file, { excludeHeaders: this.#excludeHeaders });
+            // Recording deliberately starts from nothing rather than topping up an
+            // existing file: a cassette that mixes today's traffic with last month's
+            // is stale in a way no assertion can see.
+            if (!this.#record)
+                cassette.load();
+            this.#cassettes.set(name, cassette);
         }
-        return agent;
+        return cassette;
     }
-    dispatch(opts, handler) {
-        const host = originHost(opts.origin);
-        const vcr = host !== null &&
-            host !== CONTROL_HOST &&
-            !this.#passthrough.has(host) &&
-            this.#active !== null;
-        if (vcr)
-            return this.#active.dispatch(opts, handler);
-        return super.dispatch(opts, handler);
+    /** The real call, with the headers the Worker sent minus the unforwardable. */
+    #live(request, body) {
+        const headers = [];
+        request.headers.forEach((value, name) => {
+            if (!SKIP_REQUEST_HEADERS.has(name.toLowerCase())) {
+                headers.push([name, value]);
+            }
+        });
+        return fetch(request.url, {
+            method: request.method,
+            headers,
+            body: body.byteLength > 0 ? body : undefined,
+            // Matches what Miniflare's own `fetch(req, { dispatcher })` sugar did, so
+            // a recording captures the same final response the Worker used to see.
+            redirect: "follow"
+        });
     }
     /**
-     * Closes every cassette's `SnapshotAgent`, then this agent.
-     *
-     * Record mode: `SnapshotAgent.close()` saves each cassette, stops its
-     * recorder's auto-flush timer, and closes its real sockets — all required (see
-     * {@link closeVcr}). We then {@link stripVolatileFields} from each saved file
-     * so the committed cassette carries no `callCount`/`timestamp`.
-     *
-     * Playback mode: undici's `SnapshotAgent.close()` *unconditionally* re-saves
-     * the cassette, writing back the `callCount` its recorder mutates on every
-     * replay — the side effect that dirtied cassettes on a plain `npm test`. There
-     * is nothing to save and no real socket in playback, so we skip that save
-     * entirely and only stop each recorder's timers.
+     * `requestBytes` is forwarded to the live endpoint **as received**. The
+     * cassette stores the utf-8 text of it, which is what the format has always
+     * held and what keys the entry — but a payload that is not valid utf-8 must
+     * not be re-encoded on its way to a real API, so the two are kept separate
+     * rather than the string being round-tripped back into bytes.
      */
+    async #recordOne(request, requestBytes) {
+        const live = await this.#live(request, requestBytes);
+        const bytes = Buffer.from(await live.arrayBuffer());
+        const recordedRequest = {
+            method: request.method,
+            url: request.url,
+            headers: headerRecord(request.headers),
+            body: requestBytes.toString("utf8")
+        };
+        const recordedResponse = {
+            statusCode: live.status,
+            headers: responseHeaderRecord(live.headers),
+            body: bytes.toString("base64")
+        };
+        this.#active.record(recordedRequest, recordedResponse);
+        // Serve the response through the same path a replay takes, so a recording
+        // run and the replay of what it just wrote cannot disagree.
+        return toResponse(replayable(recordedResponse));
+    }
     async close() {
-        if (this.#record) {
-            await Promise.all([...this.#agents.values()].map((a) => a.close()));
-            for (const name of this.#agents.keys()) {
-                stripVolatileFields(path.join(this.#snapshotsDir, name));
-            }
-        }
-        else {
-            for (const a of this.#agents.values())
-                a.getRecorder().destroy();
-        }
-        await super.close();
+        for (const cassette of this.#cassettes.values())
+            cassette.flush();
     }
 }
-export function createVcrAgent(options) {
-    const agent = new VcrAgent(options);
-    globalThis[VCR_KEY] = agent;
-    return agent;
+/**
+ * Build the recorder and register it for {@link closeVcr}.
+ *
+ * ```ts
+ * // vitest.config.ts
+ * const vcr = createVcr({
+ *   snapshotsDir: path.resolve(import.meta.dirname, "test/snapshots"),
+ *   record: recordFromEnv(),
+ *   excludeHeaders: ["x-api-key", "authorization", "cookie", "set-cookie"]
+ * });
+ *
+ * export default defineConfig({
+ *   plugins: [cloudflareTest({ miniflare: { outboundService: vcr.outboundService } })],
+ *   test: { globalSetup: ["@loopingai/core/testing/vcr-global-setup"] }
+ * });
+ * ```
+ */
+export function createVcr(options) {
+    const recorder = new Recorder(options);
+    const vcr = {
+        outboundService: recorder.handle,
+        close: () => recorder.close()
+    };
+    globalThis[VCR_KEY] = vcr;
+    return vcr;
+}
+/**
+ * Whether this run records, from `RECORD`.
+ *
+ * Compared against `"1"` rather than tested for truthiness, because every
+ * non-empty string is truthy: `RECORD=0` and `RECORD=false` — the two things
+ * someone reaches for to turn recording *off* — would otherwise turn it on and
+ * overwrite committed cassettes with live traffic. The opposite mistake
+ * (`RECORD=true` not recording) fails loudly on the next assertion and costs
+ * nothing.
+ */
+export function recordFromEnv() {
+    return process.env.RECORD === "1";
 }
-/** globalThis slot so the Vitest globalSetup teardown can reach the live agent
+/** globalThis slot so the Vitest globalSetup teardown can reach the recorder
  *  created during config evaluation (same process, possibly a different module
  *  realm — globalThis is the reliable channel). */
 const VCR_KEY = "__VCR_AGENT__";
 /**
- * Flush and close the active VCR agent (all its cassettes). In record mode,
- * undici's recorder arms a self-refreshing, non-`unref`ed auto-flush timer and
- * the real `SnapshotAgent` keeps sockets open — both keep the process alive
- * after tests finish and trip Vitest's "close timed out" at teardown. Calling
- * this (from a Vitest `globalSetup` teardown, which runs before Vite closes its
- * own server) stops them. A no-op if no agent was created, and in playback only
- * stops recorder timers — {@link VcrAgent.close} deliberately does not re-save
- * the cassette there (see its doc).
+ * Flush every cassette. Cassettes are already written when each one is
+ * released, so this is a safety net for a run that ended without releasing —
+ * and a no-op if no recorder was created.
  */
 export async function closeVcr() {
     const g = globalThis;
-    const agent = g[VCR_KEY];
-    if (!agent)
+    const vcr = g[VCR_KEY];
+    if (!vcr)
         return;
     g[VCR_KEY] = undefined;
-    await agent.close();
+    await vcr.close();
 }
 //# sourceMappingURL=vcr.js.map

package/dist/testing/vcr.js.map

@@ -1 +1 @@
-{"version":3,"file":"vcr.js","sourceRoot":"","sources":["../../src/testing/vcr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAmB,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEvE;;;;;;;;;GASG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAElD,CAAC;IACJ,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,OAAO,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,SAAS,CAAC;QAC1B,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC5B,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,MAAgC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAoBD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,OAAO,QAAS,SAAQ,SAAS;IAC5B,aAAa,CAAS;IACtB,OAAO,CAAU;IACjB,YAAY,CAAc;IAC1B,eAAe,CAAY;IAC3B,cAAc,CAAY;IACnC,+EAA+E;IACtE,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACpD,OAAO,GAAyB,IAAI,CAAC;IACrC,WAAW,GAAkB,IAAI,CAAC;IAElC,YAAY,OAA8B;QACxC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,2EAA2E;IAC3E,gBAAgB;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC7C,OAAO;YACL,wEAAwE;YACxE,4EAA4E;aAC3E,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aACnD,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aAClC,OAAO,EAAE,CAAC;QACb,OAAO;aACJ,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aAC/C,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC7B,CAAC,CAAC;aACD,OAAO,EAAE,CAAC;IACf,CAAC;IAED;gFAC4E;IAC5E,MAAM,CAAC,IAAsB;QAC3B,MAAM,IAAI,GACR,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,0BAA0B,IAAI,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,IAAI,EAAE,YAAY,IAAI,CAAC,WAAW,eAAe;aAClD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAY;QAClC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,aAAa,CAAC;gBACxB,uEAAuE;gBACvE,mEAAmE;gBACnE,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBAC1C,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,IAAI,CAAC,eAAe;gBACpC,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,SAAS,EAAE,IAAI,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,QAAQ,CACN,IAAgC,EAChC,OAAmC;QAEnC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,GAAG,GACP,IAAI,KAAK,IAAI;YACb,IAAI,KAAK,YAAY;YACrB,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QACxB,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,OAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAY,CAAC;QACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACpE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,UAAsC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;mDAEmD;AACnD,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAyB,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,CAAC,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACvB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"vcr.js","sourceRoot":"","sources":["../../src/testing/vcr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,UAAU,EAIX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AA6FzB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,iBAAiB;IACjB,YAAY;IACZ,gBAAgB;IAChB,MAAM;IACN,YAAY;IACZ,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,OAA0B;IAC9C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,SAAS,oBAAoB,CAC3B,OAAgB;IAEhB,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAsB;IAC/D,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;IACpE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,KAAc;IAC1C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,CAAC,iBAAiB,CAAC,EAAE,GAAG;SACzB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,QAAQ;IACH,aAAa,CAAS;IACtB,OAAO,CAAU;IACjB,SAAS,CAAsC;IAC/C,aAAa,CAAc;IAC3B,eAAe,CAAW;IACnC,0DAA0D;IACjD,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAClD,OAAO,GAAoB,IAAI,CAAC;IAChC,WAAW,GAAkB,IAAI,CAAC;IAClC,2EAA2E;IAC3E,OAAO,GAAa,EAAE,CAAC;IAEvB,YAAY,OAAmB;QAC7B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,KAAK,EAAE,OAAmB,EAAqB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAErC,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAExE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEhD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,QAAQ,CAClB,eAAe,IAAI,yCAAyC;gBAC1D,mEAAmE;gBACnE,+BAA+B,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClE,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAClB,2BAA2B,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI;YACxE,+CAA+C;YAC/C,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,GAAG,CACxD,CAAC;IACJ,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;YAC3B,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,GAAQ;QACf,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;YAC5B,wEAAwE;YACxE,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,IAAI,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,qEAAqE;QACrE,4EAA4E;QAC5E,4DAA4D;QAC5D,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC3D,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC,WAAW,eAAe,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACjD,uEAAuE;QACvE,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,IAAY;QACrC,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,0CAA0C;YAC1C,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAmB,EAAE,IAAY;QACrC,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC5C,0EAA0E;YAC1E,uEAAuE;YACvE,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CACd,OAAmB,EACnB,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,MAAM,eAAe,GAAoB;YACvC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;SACpC,CAAC;QACF,MAAM,gBAAgB,GAAqB;YACzC,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,OAAO,EAAE,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC3C,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/B,CAAC;QACF,IAAI,CAAC,OAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACxD,0EAA0E;QAC1E,4DAA4D;QAC5D,OAAO,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpE,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAQ;QACf,eAAe,EAAE,QAAQ,CAAC,MAAM;QAChC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAC9B,CAAC;IACD,UAAsC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC;IACvD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;AACpC,CAAC;AAED;;mDAEmD;AACnD,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAoB,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,CAAC,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACvB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loopingai/core",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Shared, mandatory foundation for Looping agents on Cloudflare Workers: zero-trust A2A, durable task lifecycle, delegation and subagent runtime, test harness.",
   "keywords": [
     "a2a",
@@ -100,16 +100,15 @@
   },
   "dependencies": {
     "@a2a-js/sdk": "^1.0.0",
-    "@cloudflare/workers-types": "^5.20260801.1",
+    "@cloudflare/workers-types": "^5.20260804.1",
     "drizzle-orm": "^0.45.2",
-    "jose": "^6.2.7",
+    "jose": "^6.2.8",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@cloudflare/vitest-pool-workers": "^0.18.8",
+    "@cloudflare/vitest-pool-workers": ">=0.18",
     "agents": "^0.20.0",
-    "ai": "^7.0.40",
-    "undici": "^7.28.0",
+    "ai": "^7.0.51",
     "vitest": ">=4",
     "workers-ai-provider": "^4.0.0"
   },
@@ -117,15 +116,12 @@
     "@cloudflare/vitest-pool-workers": {
       "optional": true
     },
-    "undici": {
-      "optional": true
-    },
     "vitest": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@cloudflare/vitest-pool-workers": "^0.18.8",
+    "@cloudflare/vitest-pool-workers": "^0.20.1",
     "@types/node": "^26.1.1",
     "agents": "^0.20.0",
     "ai": "^7.0.40",
@@ -133,11 +129,10 @@
     "eslint": "^10.8.0",
     "prettier": "^3.9.6",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.65.0",
-    "undici": "7.28.0",
+    "typescript-eslint": "^8.66.0",
     "vitest": "^4.1.10",
     "workers-ai-provider": "^4.0.0",
-    "wrangler": "^4.114.0"
+    "wrangler": "^4.118.0"
   },
   "engines": {
     "node": ">=24"
@@ -145,6 +140,11 @@
   "publishConfig": {
     "access": "public"
   },
+  "overrides": {
+    "@esbuild-kit/core-utils": {
+      "esbuild": "^0.25.0"
+    }
+  },
   "allowScripts": {
     "esbuild": false,
     "fsevents": false,