@opengeni/runtime 2.5.3-canary.3 → 2.6.0-canary.1

package/dist/{chunk-JHM4OS7C.js → chunk-UU6EJR52.js}

@@ -250,7 +250,8 @@ var GmailRestMcpServer = class {
       forceRefresh: false,
       ...this.options.subjectId ? { subjectId: this.options.subjectId } : {}
     });
-    if (result.status !== "ok") {
+    if (result.status === "auth_needed") {
+      await this.reportAuthNeeded(result);
       throw new GmailRestAuthError("Authentication required for Gmail");
     }
     this.options.onResolvedConnectionId?.(result.connectionId);
@@ -540,6 +541,22 @@ var GmailRestMcpServer = class {
       labelIds: output.labelIds ?? []
     };
   }
+  async reportAuthNeeded(result, toolName) {
+    await this.options.onAuthNeeded?.({
+      serverId: this.options.serverId,
+      ...toolName ? { toolName } : {},
+      providerDomain: result.providerDomain,
+      ...result.provider ? { provider: result.provider } : {},
+      reason: result.reason,
+      ...result.connectionId ? { connectionId: result.connectionId } : {},
+      ...result.authoritySource === "host" || this.options.connectionRef.authoritySource === "host" ? { authoritySource: "host" } : {},
+      ...result.scopes ? { scopes: result.scopes } : {},
+      ...result.resource ? { resource: result.resource } : {},
+      ...result.selectedResources ? { selectedResources: result.selectedResources } : {},
+      ...result.authorizationUrl ? { authorizationUrl: result.authorizationUrl } : {},
+      ...this.options.subjectId ? { subjectId: this.options.subjectId } : {}
+    });
+  }
   async request(toolName, urlInput, init, replaySafe) {
     const url = new URL(urlInput);
     if (url.protocol !== "https:" || url.hostname !== "gmail.googleapis.com" || !url.pathname.startsWith("/gmail/v1/users/me/")) {
@@ -556,20 +573,7 @@ var GmailRestMcpServer = class {
         ...this.options.subjectId ? { subjectId: this.options.subjectId } : {}
       });
       if (result.status === "auth_needed") {
-        await this.options.onAuthNeeded?.({
-          serverId: this.options.serverId,
-          toolName,
-          providerDomain: result.providerDomain,
-          ...result.provider ? { provider: result.provider } : {},
-          reason: result.reason,
-          ...result.connectionId ? { connectionId: result.connectionId } : {},
-          ...result.authoritySource === "host" || this.options.connectionRef.authoritySource === "host" ? { authoritySource: "host" } : {},
-          ...result.scopes ? { scopes: result.scopes } : {},
-          ...result.resource ? { resource: result.resource } : {},
-          ...result.selectedResources ? { selectedResources: result.selectedResources } : {},
-          ...result.authorizationUrl ? { authorizationUrl: result.authorizationUrl } : {},
-          ...this.options.subjectId ? { subjectId: this.options.subjectId } : {}
-        });
+        await this.reportAuthNeeded(result, toolName);
         throw new GmailRestAuthError("Authentication required for Gmail");
       }
       this.options.onResolvedConnectionId?.(result.connectionId);
@@ -984,4 +988,4 @@ export {
   GMAIL_REST_MCP_BRIDGE_ADAPTER,
   gmailRestToolIsMutation
 };
-//# sourceMappingURL=chunk-JHM4OS7C.js.map
+//# sourceMappingURL=chunk-UU6EJR52.js.map

package/dist/chunk-UU6EJR52.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/gmail-rest-mcp.ts"],"sourcesContent":["import type { McpServerConnectionRef, ToolAuthNeededPayload } from \"@opengeni/contracts\";\nimport {\n  defineLocalMcpBridgeDescriptor,\n  type LocalMcpBridgeAdapter,\n  type LocalMcpBridgeDescriptor,\n  type LocalMcpBridgeServer,\n} from \"@opengeni/capabilities\";\nimport { readResponseJsonBounded, type FetchLike } from \"@opengeni/network\";\nimport type { MCPServer } from \"@openai/agents\";\nimport { Buffer } from \"node:buffer\";\n\nexport const OFFICIAL_GMAIL_MCP_URL = \"https://gmailmcp.googleapis.com/mcp/v1\";\nexport const GMAIL_REST_API_BASE = \"https://gmail.googleapis.com/gmail/v1/users/me\";\n\nconst GOOGLE_RESPONSE_MAX_BYTES = 8 * 1024 * 1024;\nconst MAX_BODY_CHARS = 256 * 1024;\nconst MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;\nconst MAX_PAGE_SIZE = 50;\nconst REQUEST_TIMEOUT_MS = 15_000;\nconst MUTATION_TOOLS = new Set([\n  \"create_draft\",\n  \"send_message\",\n  \"send_draft\",\n  \"label_message\",\n  \"label_thread\",\n  \"unlabel_message\",\n  \"unlabel_thread\",\n]);\nconst SENSITIVE_ADD_LABELS = new Set([\"TRASH\", \"SPAM\"]);\n\ntype ResolveCredentialResult =\n  | {\n      status: \"ok\";\n      headers: Record<string, string>;\n      connectionId: string;\n      authoritySource?: \"host\";\n      authorizeProviderRequest?: () => Promise<boolean>;\n      expiresAt?: Date | null;\n    }\n  | {\n      status: \"auth_needed\";\n      reason: ToolAuthNeededPayload[\"reason\"];\n      providerDomain: string;\n      authoritySource?: \"host\";\n      provider?: string;\n      connectionId?: string;\n      scopes?: string[];\n      resource?: string;\n      selectedResources?: McpServerConnectionRef[\"selectedResources\"];\n      authorizationUrl?: string;\n    };\n\nexport type GmailRestMcpServerOptions = {\n  workspaceId: string;\n  subjectId?: string;\n  serverId: string;\n  connectionRef: McpServerConnectionRef;\n  resolveCredential: (input: {\n    workspaceId: string;\n    subjectId?: string;\n    serverId: string;\n    toolName?: string;\n    connectionRef: McpServerConnectionRef;\n    destinationUrl: string;\n    forceRefresh?: boolean;\n  }) => Promise<ResolveCredentialResult>;\n  onAuthNeeded?: (payload: ToolAuthNeededPayload) => void | Promise<void>;\n  onResolvedConnectionId?: (connectionId: string) => void;\n  fetchImpl?: FetchLike;\n};\n\nexport type GmailRestMcpBridgeConfig = {\n  readonly url: string;\n  readonly connectionRef?: McpServerConnectionRef;\n};\n\nexport type GmailRestMcpBridgeContext = Omit<\n  GmailRestMcpServerOptions,\n  \"serverId\" | \"connectionRef\"\n> & {\n  readonly serverId: string;\n};\n\nexport const GMAIL_REST_MCP_BRIDGE_DESCRIPTOR = defineLocalMcpBridgeDescriptor({\n  adapterId: \"gmail-rest\",\n  providerId: \"google-gmail\",\n  catalogIdentity: `mcp:${OFFICIAL_GMAIL_MCP_URL}`,\n  authority: \"connection\",\n  toolSurface: \"static_reviewed\",\n  mutationReplay: \"safe_reads_only\",\n  destinations: [{ origin: \"https://gmail.googleapis.com\", pathPrefix: \"/gmail/v1/users/me/\" }],\n});\n\ntype GmailHeader = { name?: string; value?: string };\ntype GmailPart = {\n  mimeType?: string;\n  filename?: string;\n  headers?: GmailHeader[];\n  body?: { attachmentId?: string; size?: number; data?: string };\n  parts?: GmailPart[];\n};\ntype GmailMessage = {\n  id?: string;\n  threadId?: string;\n  labelIds?: string[];\n  snippet?: string;\n  internalDate?: string;\n  sizeEstimate?: number;\n  payload?: GmailPart;\n};\ntype GmailLabel = {\n  id?: string;\n  name?: string;\n  type?: string;\n  color?: { textColor?: string; backgroundColor?: string };\n  threadsTotal?: number;\n  threadsUnread?: number;\n};\n\ntype GmailTool = Awaited<ReturnType<MCPServer[\"listTools\"]>>[number];\n\nconst messageFormatSchema = {\n  type: \"string\",\n  enum: [\"MESSAGE_FORMAT_UNSPECIFIED\", \"MINIMAL\", \"FULL_CONTENT\", \"METADATA_ONLY\"],\n  description: \"Controls whether metadata, snippets, or full message bodies are returned.\",\n} as const;\n\nconst labelMutationProperties = {\n  labelIds: {\n    type: \"array\",\n    items: { type: \"string\" },\n    description: \"Label IDs returned by list_labels.\",\n  },\n} as const;\n\nexport const GMAIL_REST_MCP_TOOLS: GmailTool[] = [\n  {\n    name: \"create_draft\",\n    description: \"Creates a Gmail draft. This never sends the message.\",\n    inputSchema: {\n      type: \"object\",\n      required: [],\n      additionalProperties: false,\n      properties: {\n        to: { type: \"array\", items: { type: \"string\" } },\n        cc: { type: \"array\", items: { type: \"string\" } },\n        bcc: { type: \"array\", items: { type: \"string\" } },\n        subject: { type: \"string\" },\n        body: { type: \"string\" },\n        htmlBody: { type: \"string\" },\n        replyToMessageId: { type: \"string\" },\n        attachments: {\n          type: \"array\",\n          items: {\n            type: \"object\",\n            required: [\"content\"],\n            properties: {\n              content: { type: \"string\", description: \"Base64-encoded attachment bytes.\" },\n              filename: { type: \"string\" },\n              mimeType: { type: \"string\" },\n              inline: { type: \"boolean\" },\n            },\n          },\n        },\n      },\n    },\n  },\n  {\n    name: \"send_message\",\n    description:\n      \"Sends a new email immediately from the connected Gmail account. Requires human approval before it runs; there is no way to un-send.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"to\"],\n      additionalProperties: false,\n      properties: {\n        to: { type: \"array\", items: { type: \"string\" }, minItems: 1 },\n        cc: { type: \"array\", items: { type: \"string\" } },\n        bcc: { type: \"array\", items: { type: \"string\" } },\n        subject: { type: \"string\" },\n        body: { type: \"string\" },\n        htmlBody: { type: \"string\" },\n        replyToMessageId: { type: \"string\" },\n        attachments: {\n          type: \"array\",\n          items: {\n            type: \"object\",\n            required: [\"content\"],\n            properties: {\n              content: { type: \"string\", description: \"Base64-encoded attachment bytes.\" },\n              filename: { type: \"string\" },\n              mimeType: { type: \"string\" },\n              inline: { type: \"boolean\" },\n            },\n          },\n        },\n      },\n    },\n  },\n  {\n    name: \"send_draft\",\n    description:\n      \"Sends an existing Gmail draft as-is. Requires human approval before it runs; there is no way to un-send. Use get_message on the draft's message ID to review its content first.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"draftId\"],\n      additionalProperties: false,\n      properties: {\n        draftId: { type: \"string\" },\n      },\n    },\n  },\n  {\n    name: \"list_drafts\",\n    description: \"Lists Gmail drafts with bounded pagination.\",\n    inputSchema: {\n      type: \"object\",\n      required: [],\n      additionalProperties: false,\n      properties: {\n        pageSize: { type: \"integer\", minimum: 1, maximum: MAX_PAGE_SIZE },\n        pageToken: { type: \"string\" },\n        query: { type: \"string\" },\n        view: {\n          type: \"string\",\n          enum: [\"DRAFT_VIEW_UNSPECIFIED\", \"DRAFT_VIEW_METADATA_ONLY\", \"DRAFT_VIEW_FULL\"],\n        },\n      },\n    },\n  },\n  {\n    name: \"get_thread\",\n    description: \"Retrieves one Gmail thread and its messages.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"threadId\"],\n      additionalProperties: false,\n      properties: { threadId: { type: \"string\" }, messageFormat: messageFormatSchema },\n    },\n  },\n  {\n    name: \"get_message\",\n    description: \"Retrieves one Gmail message by ID.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"messageId\"],\n      additionalProperties: false,\n      properties: { messageId: { type: \"string\" }, messageFormat: messageFormatSchema },\n    },\n  },\n  {\n    name: \"search_threads\",\n    description: \"Searches Gmail threads using Gmail query syntax.\",\n    inputSchema: {\n      type: \"object\",\n      required: [],\n      additionalProperties: false,\n      properties: {\n        query: { type: \"string\" },\n        pageSize: { type: \"integer\", minimum: 1, maximum: MAX_PAGE_SIZE },\n        pageToken: { type: \"string\" },\n        includeTrash: { type: \"boolean\" },\n        view: {\n          type: \"string\",\n          enum: [\"THREAD_VIEW_UNSPECIFIED\", \"THREAD_VIEW_METADATA_ONLY\", \"THREAD_VIEW_MINIMAL\"],\n        },\n      },\n    },\n  },\n  {\n    name: \"label_thread\",\n    description: \"Adds non-sensitive labels to a Gmail thread.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"threadId\", \"labelIds\"],\n      additionalProperties: false,\n      properties: { threadId: { type: \"string\" }, ...labelMutationProperties },\n    },\n  },\n  {\n    name: \"unlabel_thread\",\n    description: \"Removes labels from a Gmail thread.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"threadId\", \"labelIds\"],\n      additionalProperties: false,\n      properties: { threadId: { type: \"string\" }, ...labelMutationProperties },\n    },\n  },\n  {\n    name: \"list_labels\",\n    description: \"Lists user-defined Gmail labels with bounded pagination.\",\n    inputSchema: {\n      type: \"object\",\n      properties: {\n        pageSize: { type: \"integer\", minimum: 1, maximum: MAX_PAGE_SIZE },\n        pageToken: { type: \"string\" },\n      },\n      required: [],\n      additionalProperties: false,\n    },\n  },\n  {\n    name: \"label_message\",\n    description: \"Adds non-sensitive labels to a Gmail message.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"messageId\", \"labelIds\"],\n      additionalProperties: false,\n      properties: { messageId: { type: \"string\" }, ...labelMutationProperties },\n    },\n  },\n  {\n    name: \"unlabel_message\",\n    description: \"Removes labels from a Gmail message.\",\n    inputSchema: {\n      type: \"object\",\n      required: [\"messageId\", \"labelIds\"],\n      additionalProperties: false,\n      properties: { messageId: { type: \"string\" }, ...labelMutationProperties },\n    },\n  },\n];\n\nexport function isOfficialGmailMcpConfig(\n  url: string,\n  connectionRef: McpServerConnectionRef | undefined,\n): boolean {\n  return (\n    canonicalUrl(url) === canonicalUrl(OFFICIAL_GMAIL_MCP_URL) &&\n    connectionRef?.providerDomain.toLowerCase() === \"gmailmcp.googleapis.com\" &&\n    connectionRef.kind === \"oauth2\" &&\n    connectionRef.subjectScope === \"subject\"\n  );\n}\n\nexport class GmailRestMcpServer implements LocalMcpBridgeServer {\n  readonly name: string;\n  readonly cacheToolsList = false;\n  readonly bridge: LocalMcpBridgeDescriptor = GMAIL_REST_MCP_BRIDGE_DESCRIPTOR;\n  private readonly fetchImpl: FetchLike;\n\n  constructor(private readonly options: GmailRestMcpServerOptions) {\n    this.name = `opengeni-gmail-rest-${safeIdentity(options.serverId)}`;\n    this.fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  }\n\n  async connect(): Promise<void> {\n    const result = await this.options.resolveCredential({\n      workspaceId: this.options.workspaceId,\n      serverId: this.options.serverId,\n      connectionRef: this.options.connectionRef,\n      destinationUrl: `${GMAIL_REST_API_BASE}/labels`,\n      forceRefresh: false,\n      ...(this.options.subjectId ? { subjectId: this.options.subjectId } : {}),\n    });\n    if (result.status === \"auth_needed\") {\n      await this.reportAuthNeeded(result);\n      throw new GmailRestAuthError(\"Authentication required for Gmail\");\n    }\n    this.options.onResolvedConnectionId?.(result.connectionId);\n  }\n  async close(): Promise<void> {}\n  async invalidateToolsCache(): Promise<void> {}\n\n  async listTools(): Promise<GmailTool[]> {\n    return GMAIL_REST_MCP_TOOLS.map((tool) => ({ ...tool }));\n  }\n\n  async callTool(toolName: string, args: Record<string, unknown> | null): Promise<any> {\n    return (await this.callToolResult(toolName, args)).content;\n  }\n\n  async callToolResult(toolName: string, args: Record<string, unknown> | null): Promise<any> {\n    try {\n      const input = args ?? {};\n      const output = await this.execute(toolName, input);\n      return {\n        content: [{ type: \"text\", text: JSON.stringify(output) }],\n        structuredContent: output,\n      };\n    } catch (error) {\n      return {\n        isError: true,\n        content: [{ type: \"text\", text: safeErrorMessage(error) }],\n      };\n    }\n  }\n\n  private async execute(toolName: string, args: Record<string, unknown>): Promise<unknown> {\n    switch (toolName) {\n      case \"list_labels\":\n        return await this.listLabels(args);\n      case \"get_message\":\n        return await this.getMessage(args);\n      case \"get_thread\":\n        return await this.getThread(args);\n      case \"search_threads\":\n        return await this.searchThreads(args);\n      case \"list_drafts\":\n        return await this.listDrafts(args);\n      case \"create_draft\":\n        return await this.createDraft(args);\n      case \"send_message\":\n        return await this.sendMessage(args);\n      case \"send_draft\":\n        return await this.sendDraft(args);\n      case \"label_message\":\n        return await this.modifyLabels(\"messages\", args, true, false);\n      case \"unlabel_message\":\n        return await this.modifyLabels(\"messages\", args, false, false);\n      case \"label_thread\":\n        return await this.modifyLabels(\"threads\", args, true, true);\n      case \"unlabel_thread\":\n        return await this.modifyLabels(\"threads\", args, false, true);\n      default:\n        throw new GmailRestInputError(`Unsupported Gmail tool: ${toolName}`);\n    }\n  }\n\n  private async listLabels(args: Record<string, unknown>): Promise<unknown> {\n    const pageSize = boundedPageSize(args.pageSize);\n    const offset = labelPageOffset(args.pageToken);\n    const payload = await this.request<{ labels?: GmailLabel[] }>(\n      \"list_labels\",\n      `${GMAIL_REST_API_BASE}/labels`,\n      {},\n      true,\n    );\n    const labels = (payload.labels ?? [])\n      .filter((label) => label.type?.toLowerCase() === \"user\" && Boolean(label.id))\n      .map((label) => ({\n        labelId: label.id!,\n        name: label.name ?? \"\",\n        ...(label.color\n          ? {\n              color: {\n                ...(label.color.textColor ? { textColor: label.color.textColor } : {}),\n                ...(label.color.backgroundColor\n                  ? { backgroundColor: label.color.backgroundColor }\n                  : {}),\n              },\n            }\n          : {}),\n        ...(Number.isInteger(label.threadsTotal) ? { threadsTotal: label.threadsTotal } : {}),\n        ...(Number.isInteger(label.threadsUnread) ? { threadsUnread: label.threadsUnread } : {}),\n      }));\n    const page = labels.slice(offset, offset + pageSize);\n    const nextOffset = offset + page.length;\n    return {\n      labels: page,\n      ...(nextOffset < labels.length ? { nextPageToken: `opengeni-rest:${nextOffset}` } : {}),\n    };\n  }\n\n  private async getMessage(args: Record<string, unknown>): Promise<unknown> {\n    const messageId = requiredId(args.messageId, \"messageId\");\n    const view = messageView(args.messageFormat);\n    const url = new URL(`${GMAIL_REST_API_BASE}/messages/${encodeURIComponent(messageId)}`);\n    url.searchParams.set(\"format\", view === \"full\" ? \"full\" : \"metadata\");\n    if (view !== \"full\") {\n      for (const header of MESSAGE_HEADERS) url.searchParams.append(\"metadataHeaders\", header);\n    }\n    const message = await this.request<GmailMessage>(\"get_message\", url, {}, true);\n    return projectMessage(message, view);\n  }\n\n  private async getThread(args: Record<string, unknown>): Promise<unknown> {\n    const threadId = requiredId(args.threadId, \"threadId\");\n    const view = messageView(args.messageFormat);\n    const url = new URL(`${GMAIL_REST_API_BASE}/threads/${encodeURIComponent(threadId)}`);\n    url.searchParams.set(\"format\", view === \"full\" ? \"full\" : \"metadata\");\n    if (view !== \"full\") {\n      for (const header of MESSAGE_HEADERS) url.searchParams.append(\"metadataHeaders\", header);\n    }\n    const thread = await this.request<{\n      id?: string;\n      historyId?: string;\n      messages?: GmailMessage[];\n    }>(\"get_thread\", url, {}, true);\n    return {\n      id: thread.id ?? threadId,\n      historyId: thread.historyId ?? null,\n      messages: (thread.messages ?? []).map((message) => projectMessage(message, view)),\n    };\n  }\n\n  private async searchThreads(args: Record<string, unknown>): Promise<unknown> {\n    const pageSize = boundedPageSize(args.pageSize);\n    const view = threadView(args.view);\n    const url = new URL(`${GMAIL_REST_API_BASE}/threads`);\n    url.searchParams.set(\"maxResults\", String(pageSize));\n    const query = optionalString(args.query, \"query\", 4_096);\n    if (query) url.searchParams.set(\"q\", query);\n    const pageToken = optionalString(args.pageToken, \"pageToken\", 4_096);\n    if (pageToken) url.searchParams.set(\"pageToken\", pageToken);\n    if (args.includeTrash === true) url.searchParams.set(\"includeSpamTrash\", \"true\");\n    const listed = await this.request<{\n      threads?: Array<{ id?: string; snippet?: string; historyId?: string }>;\n      nextPageToken?: string;\n      resultSizeEstimate?: number;\n    }>(\"search_threads\", url, {}, true);\n    const threads = await boundedMap(listed.threads ?? [], 5, async (thread) => {\n      if (!thread.id) return null;\n      const detailUrl = new URL(`${GMAIL_REST_API_BASE}/threads/${encodeURIComponent(thread.id)}`);\n      detailUrl.searchParams.set(\"format\", \"metadata\");\n      for (const header of MESSAGE_HEADERS)\n        detailUrl.searchParams.append(\"metadataHeaders\", header);\n      const detail = await this.request<{ id?: string; messages?: GmailMessage[] }>(\n        \"search_threads\",\n        detailUrl,\n        {},\n        true,\n      );\n      return {\n        id: detail.id ?? thread.id,\n        messages: (detail.messages ?? []).map((message) =>\n          projectMessage(message, view === \"metadata\" ? \"metadata\" : \"minimal\"),\n        ),\n      };\n    });\n    return {\n      threads: threads.filter((thread): thread is NonNullable<typeof thread> => thread !== null),\n      ...(listed.nextPageToken ? { nextPageToken: listed.nextPageToken } : {}),\n      ...(Number.isFinite(listed.resultSizeEstimate)\n        ? { resultCountEstimate: String(listed.resultSizeEstimate) }\n        : {}),\n    };\n  }\n\n  private async listDrafts(args: Record<string, unknown>): Promise<unknown> {\n    const pageSize = boundedPageSize(args.pageSize);\n    const full = draftView(args.view) === \"full\";\n    const url = new URL(`${GMAIL_REST_API_BASE}/drafts`);\n    url.searchParams.set(\"maxResults\", String(pageSize));\n    const query = optionalString(args.query, \"query\", 4_096);\n    if (query) url.searchParams.set(\"q\", query);\n    const pageToken = optionalString(args.pageToken, \"pageToken\", 4_096);\n    if (pageToken) url.searchParams.set(\"pageToken\", pageToken);\n    const listed = await this.request<{\n      drafts?: Array<{ id?: string; message?: GmailMessage }>;\n      nextPageToken?: string;\n    }>(\"list_drafts\", url, {}, true);\n    const drafts = await boundedMap(listed.drafts ?? [], 5, async (draft) => {\n      if (!draft.id) return null;\n      const detailUrl = new URL(`${GMAIL_REST_API_BASE}/drafts/${encodeURIComponent(draft.id)}`);\n      detailUrl.searchParams.set(\"format\", full ? \"full\" : \"metadata\");\n      if (!full) {\n        for (const header of MESSAGE_HEADERS)\n          detailUrl.searchParams.append(\"metadataHeaders\", header);\n      }\n      const detail = await this.request<{ id?: string; message?: GmailMessage }>(\n        \"list_drafts\",\n        detailUrl,\n        {},\n        true,\n      );\n      return {\n        ...(detail.message ? projectMessage(detail.message, full ? \"full\" : \"metadata\") : {}),\n        id: detail.id ?? draft.id,\n      };\n    });\n    return {\n      drafts: drafts.filter((draft): draft is NonNullable<typeof draft> => draft !== null),\n      ...(listed.nextPageToken ? { nextPageToken: listed.nextPageToken } : {}),\n    };\n  }\n\n  private async createDraft(args: Record<string, unknown>): Promise<unknown> {\n    const replyToMessageId = optionalString(args.replyToMessageId, \"replyToMessageId\", 256);\n    let reply: GmailMessage | null = null;\n    if (replyToMessageId) {\n      const url = new URL(\n        `${GMAIL_REST_API_BASE}/messages/${encodeURIComponent(replyToMessageId)}`,\n      );\n      url.searchParams.set(\"format\", \"metadata\");\n      for (const header of [\"Message-ID\", \"References\", \"Subject\", \"To\", \"From\"])\n        url.searchParams.append(\"metadataHeaders\", header);\n      reply = await this.request<GmailMessage>(\"create_draft\", url, {}, true);\n    }\n    const mime = buildDraftMime(args, reply);\n    const created = await this.request<{\n      id?: string;\n      message?: { id?: string; threadId?: string };\n    }>(\n      \"create_draft\",\n      `${GMAIL_REST_API_BASE}/drafts`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({\n          message: {\n            raw: Buffer.from(mime).toString(\"base64url\"),\n            ...(reply?.threadId ? { threadId: reply.threadId } : {}),\n          },\n        }),\n      },\n      false,\n    );\n    return { id: created.id ?? null };\n  }\n\n  /**\n   * Sends a freshly composed message immediately. Distinct from create_draft:\n   * a message actually needs a recipient, and there is no reviewable\n   * intermediate state - the human-approval gate on this tool IS the review.\n   */\n  private async sendMessage(args: Record<string, unknown>): Promise<unknown> {\n    const to = optionalEmailArray(args.to, \"to\");\n    if (to.length === 0) {\n      throw new GmailRestInputError(\"to is required to send a message\");\n    }\n    const replyToMessageId = optionalString(args.replyToMessageId, \"replyToMessageId\", 256);\n    let reply: GmailMessage | null = null;\n    if (replyToMessageId) {\n      const url = new URL(\n        `${GMAIL_REST_API_BASE}/messages/${encodeURIComponent(replyToMessageId)}`,\n      );\n      url.searchParams.set(\"format\", \"metadata\");\n      for (const header of [\"Message-ID\", \"References\", \"Subject\", \"To\", \"From\"])\n        url.searchParams.append(\"metadataHeaders\", header);\n      reply = await this.request<GmailMessage>(\"send_message\", url, {}, true);\n    }\n    const mime = buildDraftMime(args, reply);\n    const sent = await this.request<{ id?: string; threadId?: string }>(\n      \"send_message\",\n      `${GMAIL_REST_API_BASE}/messages/send`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({\n          raw: Buffer.from(mime).toString(\"base64url\"),\n          ...(reply?.threadId ? { threadId: reply.threadId } : {}),\n        }),\n      },\n      false,\n    );\n    return { id: sent.id ?? null, threadId: sent.threadId ?? null };\n  }\n\n  /** Sends an existing draft exactly as stored; the draft's own content is the review surface. */\n  private async sendDraft(args: Record<string, unknown>): Promise<unknown> {\n    const draftId = requiredId(args.draftId, \"draftId\");\n    const sent = await this.request<{ id?: string; threadId?: string }>(\n      \"send_draft\",\n      `${GMAIL_REST_API_BASE}/drafts/send`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ id: draftId }),\n      },\n      false,\n    );\n    return { id: sent.id ?? null, threadId: sent.threadId ?? null };\n  }\n\n  private async modifyLabels(\n    resource: \"messages\" | \"threads\",\n    args: Record<string, unknown>,\n    add: boolean,\n    thread: boolean,\n  ): Promise<unknown> {\n    const idKey = thread ? \"threadId\" : \"messageId\";\n    const id = requiredId(args[idKey], idKey);\n    const labelIds = requiredStringArray(args.labelIds, \"labelIds\", 100, 256);\n    if (add && labelIds.some((label) => SENSITIVE_ADD_LABELS.has(label.toUpperCase()))) {\n      throw new GmailRestInputError(\"TRASH and SPAM cannot be added by this reviewed tool\");\n    }\n    const toolName = `${add ? \"label\" : \"unlabel\"}_${thread ? \"thread\" : \"message\"}`;\n    const output = await this.request<GmailMessage>(\n      toolName,\n      `${GMAIL_REST_API_BASE}/${resource}/${encodeURIComponent(id)}/modify`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(add ? { addLabelIds: labelIds } : { removeLabelIds: labelIds }),\n      },\n      false,\n    );\n    return {\n      id: output.id ?? id,\n      threadId: output.threadId ?? (thread ? id : null),\n      labelIds: output.labelIds ?? [],\n    };\n  }\n\n  private async reportAuthNeeded(\n    result: Extract<ResolveCredentialResult, { status: \"auth_needed\" }>,\n    toolName?: string,\n  ): Promise<void> {\n    await this.options.onAuthNeeded?.({\n      serverId: this.options.serverId,\n      ...(toolName ? { toolName } : {}),\n      providerDomain: result.providerDomain,\n      ...(result.provider ? { provider: result.provider } : {}),\n      reason: result.reason,\n      ...(result.connectionId ? { connectionId: result.connectionId } : {}),\n      ...(result.authoritySource === \"host\" || this.options.connectionRef.authoritySource === \"host\"\n        ? { authoritySource: \"host\" as const }\n        : {}),\n      ...(result.scopes ? { scopes: result.scopes } : {}),\n      ...(result.resource ? { resource: result.resource } : {}),\n      ...(result.selectedResources ? { selectedResources: result.selectedResources } : {}),\n      ...(result.authorizationUrl ? { authorizationUrl: result.authorizationUrl } : {}),\n      ...(this.options.subjectId ? { subjectId: this.options.subjectId } : {}),\n    });\n  }\n\n  private async request<T>(\n    toolName: string,\n    urlInput: string | URL,\n    init: RequestInit,\n    replaySafe: boolean,\n  ): Promise<T> {\n    const url = new URL(urlInput);\n    if (\n      url.protocol !== \"https:\" ||\n      url.hostname !== \"gmail.googleapis.com\" ||\n      !url.pathname.startsWith(\"/gmail/v1/users/me/\")\n    ) {\n      throw new Error(\"Gmail REST destination binding mismatch\");\n    }\n    const resolve = async (forceRefresh: boolean) => {\n      const result = await this.options.resolveCredential({\n        workspaceId: this.options.workspaceId,\n        serverId: this.options.serverId,\n        connectionRef: this.options.connectionRef,\n        destinationUrl: url.toString(),\n        toolName,\n        forceRefresh,\n        ...(this.options.subjectId ? { subjectId: this.options.subjectId } : {}),\n      });\n      if (result.status === \"auth_needed\") {\n        await this.reportAuthNeeded(result, toolName);\n        throw new GmailRestAuthError(\"Authentication required for Gmail\");\n      }\n      this.options.onResolvedConnectionId?.(result.connectionId);\n      return result;\n    };\n    const send = async (headers: Record<string, string>) =>\n      await this.fetchImpl(url, {\n        ...init,\n        headers: { ...headers, ...headersRecord(init.headers) },\n        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),\n      });\n    const sendBounded = async (credential: Extract<ResolveCredentialResult, { status: \"ok\" }>) => {\n      try {\n        if (credential.authorizeProviderRequest && !(await credential.authorizeProviderRequest())) {\n          throw new GmailRestAuthError(\"Authentication required for Gmail\");\n        }\n        return await send(credential.headers);\n      } catch (error) {\n        if (error instanceof GmailRestAuthError) throw error;\n        throw new GmailRestProviderError(\n          replaySafe\n            ? `Gmail request failed: ${safeProviderTransportMessage(error)}`\n            : \"Gmail mutation request failed after submission; outcome is uncertain\",\n        );\n      }\n    };\n    const first = await resolve(false);\n    let response = await sendBounded(first);\n    if (response.status === 401) {\n      await response.body?.cancel().catch(() => undefined);\n      if (!replaySafe) {\n        throw new GmailRestProviderError(\n          \"Gmail authentication expired after the mutation was submitted; outcome is uncertain\",\n        );\n      }\n      const refreshed = await resolve(true);\n      response = await sendBounded(refreshed);\n    }\n    const payload = await readResponseJsonBounded<unknown>(\n      response,\n      GOOGLE_RESPONSE_MAX_BYTES,\n      \"Gmail REST response\",\n    ).catch((error) => {\n      throw new GmailRestProviderError(\n        `Gmail returned an unreadable response (${response.status}): ${safeErrorMessage(error)}`,\n      );\n    });\n    if (!response.ok) {\n      throw new GmailRestProviderError(gmailProviderError(response.status, payload));\n    }\n    return payload as T;\n  }\n}\n\nexport const GMAIL_REST_MCP_BRIDGE_ADAPTER: LocalMcpBridgeAdapter<\n  GmailRestMcpBridgeConfig,\n  GmailRestMcpBridgeContext\n> = Object.freeze({\n  adapterId: GMAIL_REST_MCP_BRIDGE_DESCRIPTOR.adapterId,\n  matches: (config: GmailRestMcpBridgeConfig) =>\n    isOfficialGmailMcpConfig(config.url, config.connectionRef),\n  create: (config: GmailRestMcpBridgeConfig, context: GmailRestMcpBridgeContext) => {\n    if (!config.connectionRef) {\n      throw new Error(\"Gmail REST bridge requires a connection reference\");\n    }\n    return new GmailRestMcpServer({\n      ...context,\n      connectionRef: config.connectionRef,\n    });\n  },\n});\n\nconst MESSAGE_HEADERS = [\"Subject\", \"From\", \"To\", \"Cc\", \"Bcc\", \"Date\", \"Message-ID\"];\n\nfunction projectMessage(message: GmailMessage, view: \"metadata\" | \"minimal\" | \"full\") {\n  const headers = headerMap(message.payload?.headers);\n  const base = {\n    id: message.id ?? null,\n    threadId: message.threadId ?? null,\n    sender: headers.from ?? null,\n    toRecipients: splitHeader(headers.to),\n    ccRecipients: splitHeader(headers.cc),\n    bccRecipients: splitHeader(headers.bcc),\n    date: normalizedMessageDate(headers.date),\n    labelIds: message.labelIds ?? [],\n    internalDate: message.internalDate ?? null,\n    sizeEstimate: message.sizeEstimate ?? null,\n  };\n  if (view === \"metadata\") return base;\n  const minimal = { ...base, subject: headers.subject ?? null, snippet: message.snippet ?? null };\n  if (view === \"minimal\") return minimal;\n  const content = extractContent(message.payload);\n  return {\n    ...minimal,\n    plaintextBody: content.plaintextBody,\n    htmlBody: content.htmlBody,\n    attachmentIds: content.attachments.flatMap((attachment) =>\n      attachment.id ? [attachment.id] : [],\n    ),\n    attachments: content.attachments,\n  };\n}\n\nfunction extractContent(root: GmailPart | undefined): {\n  plaintextBody: string | null;\n  htmlBody: string | null;\n  attachments: Array<{ id: string | null; filename: string; mimeType: string; size: number }>;\n} {\n  let plain = \"\";\n  let html = \"\";\n  const attachments: Array<{\n    id: string | null;\n    filename: string;\n    mimeType: string;\n    size: number;\n  }> = [];\n  const pending = root ? [root] : [];\n  let visited = 0;\n  while (pending.length > 0 && visited < 2_048) {\n    const part = pending.pop()!;\n    visited += 1;\n    const filename = part.filename?.trim() ?? \"\";\n    if (filename || part.body?.attachmentId) {\n      attachments.push({\n        id: part.body?.attachmentId ?? null,\n        filename,\n        mimeType: part.mimeType ?? \"application/octet-stream\",\n        size: part.body?.size ?? 0,\n      });\n    } else if (part.body?.data) {\n      const decoded = decodeBase64Url(part.body.data);\n      if (part.mimeType === \"text/plain\") plain = appendBounded(plain, decoded, MAX_BODY_CHARS);\n      if (part.mimeType === \"text/html\") html = appendBounded(html, decoded, MAX_BODY_CHARS);\n    }\n    for (let index = (part.parts?.length ?? 0) - 1; index >= 0; index -= 1) {\n      pending.push(part.parts![index]!);\n    }\n  }\n  return {\n    plaintextBody: plain || null,\n    htmlBody: html || null,\n    attachments,\n  };\n}\n\nfunction buildDraftMime(args: Record<string, unknown>, reply: GmailMessage | null): string {\n  const to = optionalEmailArray(args.to, \"to\");\n  const cc = optionalEmailArray(args.cc, \"cc\");\n  const bcc = optionalEmailArray(args.bcc, \"bcc\");\n  const replyHeaders = headerMap(reply?.payload?.headers);\n  const subject =\n    optionalString(args.subject, \"subject\", 998) ?? replySubject(replyHeaders.subject);\n  const body = optionalString(args.body, \"body\", 2 * 1024 * 1024) ?? \"\";\n  const htmlBody = optionalString(args.htmlBody, \"htmlBody\", 2 * 1024 * 1024);\n  const attachments = parseAttachments(args.attachments);\n  const headers = [\n    ...(to.length ? [`To: ${to.join(\", \")}`] : []),\n    ...(cc.length ? [`Cc: ${cc.join(\", \")}`] : []),\n    ...(bcc.length ? [`Bcc: ${bcc.join(\", \")}`] : []),\n    `Subject: ${encodeHeader(subject)}`,\n    \"MIME-Version: 1.0\",\n  ];\n  const replyMessageId = replyHeaders[\"message-id\"];\n  if (replyMessageId) {\n    headers.push(`In-Reply-To: ${safeHeaderValue(replyMessageId)}`);\n    headers.push(\n      `References: ${safeHeaderValue(\n        [replyHeaders.references, replyMessageId].filter(Boolean).join(\" \"),\n      )}`,\n    );\n  }\n  const bodyEntity = mimeBody(body, htmlBody);\n  if (attachments.length === 0) return `${headers.join(\"\\r\\n\")}\\r\\n${bodyEntity}`;\n  const boundary = `opengeni-mixed-${crypto.randomUUID()}`;\n  headers.push(`Content-Type: multipart/mixed; boundary=\"${boundary}\"`);\n  const parts = [`--${boundary}\\r\\n${bodyEntity}`];\n  for (const attachment of attachments) {\n    const disposition = attachment.inline ? \"inline\" : \"attachment\";\n    const filename = attachment.filename ? `; filename=\"${escapeQuoted(attachment.filename)}\"` : \"\";\n    parts.push(\n      `--${boundary}\\r\\nContent-Type: ${attachment.mimeType}${filename}\\r\\nContent-Transfer-Encoding: base64\\r\\nContent-Disposition: ${disposition}${filename}\\r\\n\\r\\n${wrapBase64(attachment.content.toString(\"base64\"))}`,\n    );\n  }\n  parts.push(`--${boundary}--`);\n  return `${headers.join(\"\\r\\n\")}\\r\\n\\r\\n${parts.join(\"\\r\\n\")}`;\n}\n\nfunction mimeBody(plain: string, html: string | undefined): string {\n  if (!html) {\n    return `Content-Type: text/plain; charset=\"UTF-8\"\\r\\nContent-Transfer-Encoding: base64\\r\\n\\r\\n${wrapBase64(Buffer.from(plain).toString(\"base64\"))}`;\n  }\n  const boundary = `opengeni-alt-${crypto.randomUUID()}`;\n  return [\n    `Content-Type: multipart/alternative; boundary=\"${boundary}\"`,\n    \"\",\n    `--${boundary}`,\n    'Content-Type: text/plain; charset=\"UTF-8\"',\n    \"Content-Transfer-Encoding: base64\",\n    \"\",\n    wrapBase64(Buffer.from(plain).toString(\"base64\")),\n    `--${boundary}`,\n    'Content-Type: text/html; charset=\"UTF-8\"',\n    \"Content-Transfer-Encoding: base64\",\n    \"\",\n    wrapBase64(Buffer.from(html).toString(\"base64\")),\n    `--${boundary}--`,\n  ].join(\"\\r\\n\");\n}\n\nfunction parseAttachments(value: unknown): Array<{\n  content: Buffer;\n  filename: string;\n  mimeType: string;\n  inline: boolean;\n}> {\n  if (value === undefined) return [];\n  if (!Array.isArray(value) || value.length > 100) {\n    throw new GmailRestInputError(\"attachments must be an array with at most 100 items\");\n  }\n  let total = 0;\n  return value.map((entry, index) => {\n    if (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n      throw new GmailRestInputError(`attachments[${index}] must be an object`);\n    }\n    const record = entry as Record<string, unknown>;\n    const encoded = requiredString(record.content, `attachments[${index}].content`, 40_000_000);\n    const content = decodeAttachmentContent(encoded, index);\n    total += content.byteLength;\n    if (total > MAX_ATTACHMENT_BYTES) {\n      throw new GmailRestInputError(\"combined attachment bytes exceed 25MB\");\n    }\n    return {\n      content,\n      filename: optionalString(record.filename, `attachments[${index}].filename`, 255) ?? \"\",\n      mimeType: attachmentMimeType(record.mimeType, index),\n      inline: record.inline === true,\n    };\n  });\n}\n\nfunction decodeAttachmentContent(value: string, index: number): Buffer {\n  if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(value)) {\n    throw new GmailRestInputError(`attachments[${index}].content must be valid base64`);\n  }\n  return Buffer.from(value, \"base64\");\n}\n\nfunction messageView(value: unknown): \"metadata\" | \"minimal\" | \"full\" {\n  if (value === undefined || value === \"MESSAGE_FORMAT_UNSPECIFIED\" || value === \"FULL_CONTENT\")\n    return \"full\";\n  if (value === \"MINIMAL\") return \"minimal\";\n  if (value === \"METADATA_ONLY\") return \"metadata\";\n  throw new GmailRestInputError(\"messageFormat is invalid\");\n}\n\nfunction threadView(value: unknown): \"metadata\" | \"minimal\" {\n  if (value === undefined || value === \"THREAD_VIEW_UNSPECIFIED\" || value === \"THREAD_VIEW_MINIMAL\")\n    return \"minimal\";\n  if (value === \"THREAD_VIEW_METADATA_ONLY\") return \"metadata\";\n  throw new GmailRestInputError(\"view is invalid\");\n}\n\nfunction draftView(value: unknown): \"metadata\" | \"full\" {\n  if (value === undefined || value === \"DRAFT_VIEW_UNSPECIFIED\" || value === \"DRAFT_VIEW_FULL\")\n    return \"full\";\n  if (value === \"DRAFT_VIEW_METADATA_ONLY\") return \"metadata\";\n  throw new GmailRestInputError(\"view is invalid\");\n}\n\nfunction boundedPageSize(value: unknown): number {\n  if (value === undefined) return 20;\n  if (!Number.isInteger(value) || (value as number) < 1 || (value as number) > MAX_PAGE_SIZE) {\n    throw new GmailRestInputError(`pageSize must be an integer from 1 to ${MAX_PAGE_SIZE}`);\n  }\n  return value as number;\n}\n\nfunction labelPageOffset(value: unknown): number {\n  const token = optionalString(value, \"pageToken\", 4_096);\n  if (!token) return 0;\n  const match = /^opengeni-rest:(0|[1-9][0-9]{0,8})$/u.exec(token);\n  if (!match) {\n    throw new GmailRestInputError(\"pageToken is invalid for the Gmail REST adapter\");\n  }\n  return Number(match[1]);\n}\n\nfunction requiredId(value: unknown, name: string): string {\n  return requiredString(value, name, 256);\n}\n\nfunction requiredString(value: unknown, name: string, max: number): string {\n  if (typeof value !== \"string\" || value.length === 0 || value.length > max) {\n    throw new GmailRestInputError(\n      `${name} must be a non-empty string of at most ${max} characters`,\n    );\n  }\n  return value;\n}\n\nfunction optionalString(value: unknown, name: string, max: number): string | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value !== \"string\" || value.length > max) {\n    throw new GmailRestInputError(`${name} must be a string of at most ${max} characters`);\n  }\n  return value;\n}\n\nfunction requiredStringArray(value: unknown, name: string, maxItems: number, maxChars: number) {\n  if (!Array.isArray(value) || value.length === 0 || value.length > maxItems) {\n    throw new GmailRestInputError(`${name} must contain 1-${maxItems} strings`);\n  }\n  return value.map((entry, index) => requiredString(entry, `${name}[${index}]`, maxChars));\n}\n\nfunction optionalEmailArray(value: unknown, name: string): string[] {\n  if (value === undefined) return [];\n  const entries = requiredStringArray(value, name, 100, 320);\n  for (const entry of entries) {\n    if (!/^[^\\s<>@]+@[^\\s<>@]+\\.[^\\s<>@]+$/u.test(entry)) {\n      throw new GmailRestInputError(`${name} contains an invalid plain email address`);\n    }\n  }\n  return entries;\n}\n\nfunction headerMap(headers: GmailHeader[] | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const header of headers ?? []) {\n    if (header.name && typeof header.value === \"string\")\n      out[header.name.toLowerCase()] = header.value;\n  }\n  return out;\n}\n\nfunction splitHeader(value: string | undefined): string[] {\n  return value\n    ? value\n        .split(\",\")\n        .map((entry) => entry.trim())\n        .filter(Boolean)\n    : [];\n}\n\nfunction normalizedMessageDate(value: string | undefined): string | null {\n  if (!value) return null;\n  const date = new Date(value);\n  return Number.isNaN(date.getTime()) ? value.slice(0, 998) : date.toISOString().slice(0, 10);\n}\n\nfunction decodeBase64Url(value: string): string {\n  return Buffer.from(value, \"base64url\").toString(\"utf8\");\n}\n\nfunction appendBounded(current: string, next: string, limit: number): string {\n  if (current.length >= limit) return current;\n  const remaining = limit - current.length;\n  const appended =\n    next.length > remaining\n      ? `${next.slice(0, Math.max(0, remaining - 18))}\\n[content truncated]`\n      : next;\n  return current ? `${current}\\n${appended}`.slice(0, limit) : appended.slice(0, limit);\n}\n\nfunction replySubject(value: string | undefined): string {\n  if (!value) return \"\";\n  return /^re:/iu.test(value) ? value : `Re: ${value}`;\n}\n\nfunction encodeHeader(value: string): string {\n  return /[^\\x20-\\x7e]/u.test(value)\n    ? `=?UTF-8?B?${Buffer.from(value).toString(\"base64\")}?=`\n    : value.replace(/[\\r\\n]+/gu, \" \");\n}\n\nfunction safeHeaderValue(value: string): string {\n  return value.replace(/[\\r\\n]+/gu, \" \").slice(0, 998);\n}\n\nfunction attachmentMimeType(value: unknown, index: number): string {\n  const mimeType =\n    optionalString(value, `attachments[${index}].mimeType`, 255) ?? \"application/octet-stream\";\n  if (!/^[A-Za-z0-9!#$&^_.+-]+\\/[A-Za-z0-9!#$&^_.+-]+$/u.test(mimeType)) {\n    throw new GmailRestInputError(`attachments[${index}].mimeType is invalid`);\n  }\n  return mimeType;\n}\n\nfunction escapeQuoted(value: string): string {\n  return value.replace(/[\\r\\n]/gu, \" \").replace(/[\"\\\\]/gu, \"\\\\$&\");\n}\n\nfunction wrapBase64(value: string): string {\n  return value.match(/.{1,76}/gu)?.join(\"\\r\\n\") ?? \"\";\n}\n\nfunction headersRecord(value: HeadersInit | undefined): Record<string, string> {\n  const out: Record<string, string> = {};\n  new Headers(value).forEach((headerValue, name) => {\n    out[name] = headerValue;\n  });\n  return out;\n}\n\nfunction gmailProviderError(status: number, payload: unknown): string {\n  const message =\n    payload && typeof payload === \"object\" && !Array.isArray(payload)\n      ? (payload as { error?: { message?: unknown; status?: unknown } }).error\n      : undefined;\n  const safe =\n    typeof message?.status === \"string\"\n      ? message.status\n      : typeof message?.message === \"string\"\n        ? message.message.slice(0, 240)\n        : \"provider request failed\";\n  return `Gmail REST request failed (${status}): ${safe}`;\n}\n\nfunction safeErrorMessage(error: unknown): string {\n  if (\n    error instanceof GmailRestInputError ||\n    error instanceof GmailRestProviderError ||\n    error instanceof GmailRestAuthError\n  )\n    return error.message;\n  return \"Gmail REST tool failed\";\n}\n\nfunction safeProviderTransportMessage(error: unknown): string {\n  if (error instanceof DOMException && error.name === \"TimeoutError\") return \"request timed out\";\n  return \"provider transport failed\";\n}\n\nfunction canonicalUrl(value: string): string | null {\n  try {\n    const url = new URL(value);\n    url.hash = \"\";\n    url.pathname = url.pathname.replace(/\\/+$/u, \"\") || \"/\";\n    return url.toString();\n  } catch {\n    return null;\n  }\n}\n\nfunction safeIdentity(value: string): string {\n  return value.replace(/[^a-zA-Z0-9._-]/gu, \"-\").slice(0, 80) || \"gmail\";\n}\n\nasync function boundedMap<T, R>(values: T[], concurrency: number, map: (value: T) => Promise<R>) {\n  const output = new Array<R>(values.length);\n  let cursor = 0;\n  await Promise.all(\n    Array.from({ length: Math.min(concurrency, values.length) }, async () => {\n      while (cursor < values.length) {\n        const index = cursor++;\n        output[index] = await map(values[index]!);\n      }\n    }),\n  );\n  return output;\n}\n\nclass GmailRestInputError extends Error {}\nclass GmailRestProviderError extends Error {}\nclass GmailRestAuthError extends Error {}\n\nexport function gmailRestToolIsMutation(toolName: string): boolean {\n  return MUTATION_TOOLS.has(toolName);\n}\n"],"mappings":";AACA;AAAA,EACE;AAAA,OAIK;AACP,SAAS,+BAA+C;AAExD,SAAS,cAAc;AAEhB,IAAM,yBAAyB;AAC/B,IAAM,sBAAsB;AAEnC,IAAM,4BAA4B,IAAI,OAAO;AAC7C,IAAM,iBAAiB,MAAM;AAC7B,IAAM,uBAAuB,KAAK,OAAO;AACzC,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAC3B,IAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,uBAAuB,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAuD/C,IAAM,mCAAmC,+BAA+B;AAAA,EAC7E,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,iBAAiB,OAAO,sBAAsB;AAAA,EAC9C,WAAW;AAAA,EACX,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,cAAc,CAAC,EAAE,QAAQ,gCAAgC,YAAY,sBAAsB,CAAC;AAC9F,CAAC;AA8BD,IAAM,sBAAsB;AAAA,EAC1B,MAAM;AAAA,EACN,MAAM,CAAC,8BAA8B,WAAW,gBAAgB,eAAe;AAAA,EAC/E,aAAa;AACf;AAEA,IAAM,0BAA0B;AAAA,EAC9B,UAAU;AAAA,IACR,MAAM;AAAA,IACN,OAAO,EAAE,MAAM,SAAS;AAAA,IACxB,aAAa;AAAA,EACf;AACF;AAEO,IAAM,uBAAoC;AAAA,EAC/C;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC;AAAA,MACX,sBAAsB;AAAA,MACtB,YAAY;AAAA,QACV,IAAI,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,QAC/C,IAAI,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,QAC/C,KAAK,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,QAChD,SAAS,EAAE,MAAM,SAAS;AAAA,QAC1B,MAAM,EAAE,MAAM,SAAS;AAAA,QACvB,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,kBAAkB,EAAE,MAAM,SAAS;AAAA,QACnC,aAAa;AAAA,UACX,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,UAAU,CAAC,SAAS;AAAA,YACpB,YAAY;AAAA,cACV,SAAS,EAAE,MAAM,UAAU,aAAa,mCAAmC;AAAA,cAC3E,UAAU,EAAE,MAAM,SAAS;AAAA,cAC3B,UAAU,EAAE,MAAM,SAAS;AAAA,cAC3B,QAAQ,EAAE,MAAM,UAAU;AAAA,YAC5B;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IACF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,IAAI;AAAA,MACf,sBAAsB;AAAA,MACtB,YAAY;AAAA,QACV,IAAI,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,GAAG,UAAU,EAAE;AAAA,QAC5D,IAAI,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,QAC/C,KAAK,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,SAAS,EAAE;AAAA,QAChD,SAAS,EAAE,MAAM,SAAS;AAAA,QAC1B,MAAM,EAAE,MAAM,SAAS;AAAA,QACvB,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,kBAAkB,EAAE,MAAM,SAAS;AAAA,QACnC,aAAa;AAAA,UACX,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,UAAU,CAAC,SAAS;AAAA,YACpB,YAAY;AAAA,cACV,SAAS,EAAE,MAAM,UAAU,aAAa,mCAAmC;AAAA,cAC3E,UAAU,EAAE,MAAM,SAAS;AAAA,cAC3B,UAAU,EAAE,MAAM,SAAS;AAAA,cAC3B,QAAQ,EAAE,MAAM,UAAU;AAAA,YAC5B;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IACF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,SAAS;AAAA,MACpB,sBAAsB;AAAA,MACtB,YAAY;AAAA,QACV,SAAS,EAAE,MAAM,SAAS;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC;AAAA,MACX,sBAAsB;AAAA,MACtB,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,cAAc;AAAA,QAChE,WAAW,EAAE,MAAM,SAAS;AAAA,QAC5B,OAAO,EAAE,MAAM,SAAS;AAAA,QACxB,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,MAAM,CAAC,0BAA0B,4BAA4B,iBAAiB;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,UAAU;AAAA,MACrB,sBAAsB;AAAA,MACtB,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,GAAG,eAAe,oBAAoB;AAAA,IACjF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,WAAW;AAAA,MACtB,sBAAsB;AAAA,MACtB,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,GAAG,eAAe,oBAAoB;AAAA,IAClF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC;AAAA,MACX,sBAAsB;AAAA,MACtB,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,SAAS;AAAA,QACxB,UAAU,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,cAAc;AAAA,QAChE,WAAW,EAAE,MAAM,SAAS;AAAA,QAC5B,cAAc,EAAE,MAAM,UAAU;AAAA,QAChC,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,MAAM,CAAC,2BAA2B,6BAA6B,qBAAqB;AAAA,QACtF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,YAAY,UAAU;AAAA,MACjC,sBAAsB;AAAA,MACtB,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,GAAG,GAAG,wBAAwB;AAAA,IACzE;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,YAAY,UAAU;AAAA,MACjC,sBAAsB;AAAA,MACtB,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,GAAG,GAAG,wBAAwB;AAAA,IACzE;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU,EAAE,MAAM,WAAW,SAAS,GAAG,SAAS,cAAc;AAAA,QAChE,WAAW,EAAE,MAAM,SAAS;AAAA,MAC9B;AAAA,MACA,UAAU,CAAC;AAAA,MACX,sBAAsB;AAAA,IACxB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,aAAa,UAAU;AAAA,MAClC,sBAAsB;AAAA,MACtB,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,GAAG,GAAG,wBAAwB;AAAA,IAC1E;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,UAAU,CAAC,aAAa,UAAU;AAAA,MAClC,sBAAsB;AAAA,MACtB,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,GAAG,GAAG,wBAAwB;AAAA,IAC1E;AAAA,EACF;AACF;AAEO,SAAS,yBACd,KACA,eACS;AACT,SACE,aAAa,GAAG,MAAM,aAAa,sBAAsB,KACzD,eAAe,eAAe,YAAY,MAAM,6BAChD,cAAc,SAAS,YACvB,cAAc,iBAAiB;AAEnC;AAEO,IAAM,qBAAN,MAAyD;AAAA,EAM9D,YAA6B,SAAoC;AAApC;AAC3B,SAAK,OAAO,uBAAuB,aAAa,QAAQ,QAAQ,CAAC;AACjE,SAAK,YAAY,QAAQ,aAAa,WAAW,MAAM,KAAK,UAAU;AAAA,EACxE;AAAA,EARS;AAAA,EACA,iBAAiB;AAAA,EACjB,SAAmC;AAAA,EAC3B;AAAA,EAOjB,MAAM,UAAyB;AAC7B,UAAM,SAAS,MAAM,KAAK,QAAQ,kBAAkB;AAAA,MAClD,aAAa,KAAK,QAAQ;AAAA,MAC1B,UAAU,KAAK,QAAQ;AAAA,MACvB,eAAe,KAAK,QAAQ;AAAA,MAC5B,gBAAgB,GAAG,mBAAmB;AAAA,MACtC,cAAc;AAAA,MACd,GAAI,KAAK,QAAQ,YAAY,EAAE,WAAW,KAAK,QAAQ,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AACD,QAAI,OAAO,WAAW,eAAe;AACnC,YAAM,KAAK,iBAAiB,MAAM;AAClC,YAAM,IAAI,mBAAmB,mCAAmC;AAAA,IAClE;AACA,SAAK,QAAQ,yBAAyB,OAAO,YAAY;AAAA,EAC3D;AAAA,EACA,MAAM,QAAuB;AAAA,EAAC;AAAA,EAC9B,MAAM,uBAAsC;AAAA,EAAC;AAAA,EAE7C,MAAM,YAAkC;AACtC,WAAO,qBAAqB,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,EAAE;AAAA,EACzD;AAAA,EAEA,MAAM,SAAS,UAAkB,MAAoD;AACnF,YAAQ,MAAM,KAAK,eAAe,UAAU,IAAI,GAAG;AAAA,EACrD;AAAA,EAEA,MAAM,eAAe,UAAkB,MAAoD;AACzF,QAAI;AACF,YAAM,QAAQ,QAAQ,CAAC;AACvB,YAAM,SAAS,MAAM,KAAK,QAAQ,UAAU,KAAK;AACjD,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC;AAAA,QACxD,mBAAmB;AAAA,MACrB;AAAA,IACF,SAAS,OAAO;AACd,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,iBAAiB,KAAK,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,UAAkB,MAAiD;AACvF,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,eAAO,MAAM,KAAK,WAAW,IAAI;AAAA,MACnC,KAAK;AACH,eAAO,MAAM,KAAK,WAAW,IAAI;AAAA,MACnC,KAAK;AACH,eAAO,MAAM,KAAK,UAAU,IAAI;AAAA,MAClC,KAAK;AACH,eAAO,MAAM,KAAK,cAAc,IAAI;AAAA,MACtC,KAAK;AACH,eAAO,MAAM,KAAK,WAAW,IAAI;AAAA,MACnC,KAAK;AACH,eAAO,MAAM,KAAK,YAAY,IAAI;AAAA,MACpC,KAAK;AACH,eAAO,MAAM,KAAK,YAAY,IAAI;AAAA,MACpC,KAAK;AACH,eAAO,MAAM,KAAK,UAAU,IAAI;AAAA,MAClC,KAAK;AACH,eAAO,MAAM,KAAK,aAAa,YAAY,MAAM,MAAM,KAAK;AAAA,MAC9D,KAAK;AACH,eAAO,MAAM,KAAK,aAAa,YAAY,MAAM,OAAO,KAAK;AAAA,MAC/D,KAAK;AACH,eAAO,MAAM,KAAK,aAAa,WAAW,MAAM,MAAM,IAAI;AAAA,MAC5D,KAAK;AACH,eAAO,MAAM,KAAK,aAAa,WAAW,MAAM,OAAO,IAAI;AAAA,MAC7D;AACE,cAAM,IAAI,oBAAoB,2BAA2B,QAAQ,EAAE;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAiD;AACxE,UAAM,WAAW,gBAAgB,KAAK,QAAQ;AAC9C,UAAM,SAAS,gBAAgB,KAAK,SAAS;AAC7C,UAAM,UAAU,MAAM,KAAK;AAAA,MACzB;AAAA,MACA,GAAG,mBAAmB;AAAA,MACtB,CAAC;AAAA,MACD;AAAA,IACF;AACA,UAAM,UAAU,QAAQ,UAAU,CAAC,GAChC,OAAO,CAAC,UAAU,MAAM,MAAM,YAAY,MAAM,UAAU,QAAQ,MAAM,EAAE,CAAC,EAC3E,IAAI,CAAC,WAAW;AAAA,MACf,SAAS,MAAM;AAAA,MACf,MAAM,MAAM,QAAQ;AAAA,MACpB,GAAI,MAAM,QACN;AAAA,QACE,OAAO;AAAA,UACL,GAAI,MAAM,MAAM,YAAY,EAAE,WAAW,MAAM,MAAM,UAAU,IAAI,CAAC;AAAA,UACpE,GAAI,MAAM,MAAM,kBACZ,EAAE,iBAAiB,MAAM,MAAM,gBAAgB,IAC/C,CAAC;AAAA,QACP;AAAA,MACF,IACA,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,MAAM,YAAY,IAAI,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;AAAA,MACnF,GAAI,OAAO,UAAU,MAAM,aAAa,IAAI,EAAE,eAAe,MAAM,cAAc,IAAI,CAAC;AAAA,IACxF,EAAE;AACJ,UAAM,OAAO,OAAO,MAAM,QAAQ,SAAS,QAAQ;AACnD,UAAM,aAAa,SAAS,KAAK;AACjC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,GAAI,aAAa,OAAO,SAAS,EAAE,eAAe,iBAAiB,UAAU,GAAG,IAAI,CAAC;AAAA,IACvF;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAiD;AACxE,UAAM,YAAY,WAAW,KAAK,WAAW,WAAW;AACxD,UAAM,OAAO,YAAY,KAAK,aAAa;AAC3C,UAAM,MAAM,IAAI,IAAI,GAAG,mBAAmB,aAAa,mBAAmB,SAAS,CAAC,EAAE;AACtF,QAAI,aAAa,IAAI,UAAU,SAAS,SAAS,SAAS,UAAU;AACpE,QAAI,SAAS,QAAQ;AACnB,iBAAW,UAAU,gBAAiB,KAAI,aAAa,OAAO,mBAAmB,MAAM;AAAA,IACzF;AACA,UAAM,UAAU,MAAM,KAAK,QAAsB,eAAe,KAAK,CAAC,GAAG,IAAI;AAC7E,WAAO,eAAe,SAAS,IAAI;AAAA,EACrC;AAAA,EAEA,MAAc,UAAU,MAAiD;AACvE,UAAM,WAAW,WAAW,KAAK,UAAU,UAAU;AACrD,UAAM,OAAO,YAAY,KAAK,aAAa;AAC3C,UAAM,MAAM,IAAI,IAAI,GAAG,mBAAmB,YAAY,mBAAmB,QAAQ,CAAC,EAAE;AACpF,QAAI,aAAa,IAAI,UAAU,SAAS,SAAS,SAAS,UAAU;AACpE,QAAI,SAAS,QAAQ;AACnB,iBAAW,UAAU,gBAAiB,KAAI,aAAa,OAAO,mBAAmB,MAAM;AAAA,IACzF;AACA,UAAM,SAAS,MAAM,KAAK,QAIvB,cAAc,KAAK,CAAC,GAAG,IAAI;AAC9B,WAAO;AAAA,MACL,IAAI,OAAO,MAAM;AAAA,MACjB,WAAW,OAAO,aAAa;AAAA,MAC/B,WAAW,OAAO,YAAY,CAAC,GAAG,IAAI,CAAC,YAAY,eAAe,SAAS,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,MAAiD;AAC3E,UAAM,WAAW,gBAAgB,KAAK,QAAQ;AAC9C,UAAM,OAAO,WAAW,KAAK,IAAI;AACjC,UAAM,MAAM,IAAI,IAAI,GAAG,mBAAmB,UAAU;AACpD,QAAI,aAAa,IAAI,cAAc,OAAO,QAAQ,CAAC;AACnD,UAAM,QAAQ,eAAe,KAAK,OAAO,SAAS,IAAK;AACvD,QAAI,MAAO,KAAI,aAAa,IAAI,KAAK,KAAK;AAC1C,UAAM,YAAY,eAAe,KAAK,WAAW,aAAa,IAAK;AACnE,QAAI,UAAW,KAAI,aAAa,IAAI,aAAa,SAAS;AAC1D,QAAI,KAAK,iBAAiB,KAAM,KAAI,aAAa,IAAI,oBAAoB,MAAM;AAC/E,UAAM,SAAS,MAAM,KAAK,QAIvB,kBAAkB,KAAK,CAAC,GAAG,IAAI;AAClC,UAAM,UAAU,MAAM,WAAW,OAAO,WAAW,CAAC,GAAG,GAAG,OAAO,WAAW;AAC1E,UAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAM,YAAY,IAAI,IAAI,GAAG,mBAAmB,YAAY,mBAAmB,OAAO,EAAE,CAAC,EAAE;AAC3F,gBAAU,aAAa,IAAI,UAAU,UAAU;AAC/C,iBAAW,UAAU;AACnB,kBAAU,aAAa,OAAO,mBAAmB,MAAM;AACzD,YAAM,SAAS,MAAM,KAAK;AAAA,QACxB;AAAA,QACA;AAAA,QACA,CAAC;AAAA,QACD;AAAA,MACF;AACA,aAAO;AAAA,QACL,IAAI,OAAO,MAAM,OAAO;AAAA,QACxB,WAAW,OAAO,YAAY,CAAC,GAAG;AAAA,UAAI,CAAC,YACrC,eAAe,SAAS,SAAS,aAAa,aAAa,SAAS;AAAA,QACtE;AAAA,MACF;AAAA,IACF,CAAC;AACD,WAAO;AAAA,MACL,SAAS,QAAQ,OAAO,CAAC,WAAiD,WAAW,IAAI;AAAA,MACzF,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,MACtE,GAAI,OAAO,SAAS,OAAO,kBAAkB,IACzC,EAAE,qBAAqB,OAAO,OAAO,kBAAkB,EAAE,IACzD,CAAC;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAiD;AACxE,UAAM,WAAW,gBAAgB,KAAK,QAAQ;AAC9C,UAAM,OAAO,UAAU,KAAK,IAAI,MAAM;AACtC,UAAM,MAAM,IAAI,IAAI,GAAG,mBAAmB,SAAS;AACnD,QAAI,aAAa,IAAI,cAAc,OAAO,QAAQ,CAAC;AACnD,UAAM,QAAQ,eAAe,KAAK,OAAO,SAAS,IAAK;AACvD,QAAI,MAAO,KAAI,aAAa,IAAI,KAAK,KAAK;AAC1C,UAAM,YAAY,eAAe,KAAK,WAAW,aAAa,IAAK;AACnE,QAAI,UAAW,KAAI,aAAa,IAAI,aAAa,SAAS;AAC1D,UAAM,SAAS,MAAM,KAAK,QAGvB,eAAe,KAAK,CAAC,GAAG,IAAI;AAC/B,UAAM,SAAS,MAAM,WAAW,OAAO,UAAU,CAAC,GAAG,GAAG,OAAO,UAAU;AACvE,UAAI,CAAC,MAAM,GAAI,QAAO;AACtB,YAAM,YAAY,IAAI,IAAI,GAAG,mBAAmB,WAAW,mBAAmB,MAAM,EAAE,CAAC,EAAE;AACzF,gBAAU,aAAa,IAAI,UAAU,OAAO,SAAS,UAAU;AAC/D,UAAI,CAAC,MAAM;AACT,mBAAW,UAAU;AACnB,oBAAU,aAAa,OAAO,mBAAmB,MAAM;AAAA,MAC3D;AACA,YAAM,SAAS,MAAM,KAAK;AAAA,QACxB;AAAA,QACA;AAAA,QACA,CAAC;AAAA,QACD;AAAA,MACF;AACA,aAAO;AAAA,QACL,GAAI,OAAO,UAAU,eAAe,OAAO,SAAS,OAAO,SAAS,UAAU,IAAI,CAAC;AAAA,QACnF,IAAI,OAAO,MAAM,MAAM;AAAA,MACzB;AAAA,IACF,CAAC;AACD,WAAO;AAAA,MACL,QAAQ,OAAO,OAAO,CAAC,UAA8C,UAAU,IAAI;AAAA,MACnF,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACxE;AAAA,EACF;AAAA,EAEA,MAAc,YAAY,MAAiD;AACzE,UAAM,mBAAmB,eAAe,KAAK,kBAAkB,oBAAoB,GAAG;AACtF,QAAI,QAA6B;AACjC,QAAI,kBAAkB;AACpB,YAAM,MAAM,IAAI;AAAA,QACd,GAAG,mBAAmB,aAAa,mBAAmB,gBAAgB,CAAC;AAAA,MACzE;AACA,UAAI,aAAa,IAAI,UAAU,UAAU;AACzC,iBAAW,UAAU,CAAC,cAAc,cAAc,WAAW,MAAM,MAAM;AACvE,YAAI,aAAa,OAAO,mBAAmB,MAAM;AACnD,cAAQ,MAAM,KAAK,QAAsB,gBAAgB,KAAK,CAAC,GAAG,IAAI;AAAA,IACxE;AACA,UAAM,OAAO,eAAe,MAAM,KAAK;AACvC,UAAM,UAAU,MAAM,KAAK;AAAA,MAIzB;AAAA,MACA,GAAG,mBAAmB;AAAA,MACtB;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB,SAAS;AAAA,YACP,KAAK,OAAO,KAAK,IAAI,EAAE,SAAS,WAAW;AAAA,YAC3C,GAAI,OAAO,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,UACxD;AAAA,QACF,CAAC;AAAA,MACH;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,IAAI,QAAQ,MAAM,KAAK;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAY,MAAiD;AACzE,UAAM,KAAK,mBAAmB,KAAK,IAAI,IAAI;AAC3C,QAAI,GAAG,WAAW,GAAG;AACnB,YAAM,IAAI,oBAAoB,kCAAkC;AAAA,IAClE;AACA,UAAM,mBAAmB,eAAe,KAAK,kBAAkB,oBAAoB,GAAG;AACtF,QAAI,QAA6B;AACjC,QAAI,kBAAkB;AACpB,YAAM,MAAM,IAAI;AAAA,QACd,GAAG,mBAAmB,aAAa,mBAAmB,gBAAgB,CAAC;AAAA,MACzE;AACA,UAAI,aAAa,IAAI,UAAU,UAAU;AACzC,iBAAW,UAAU,CAAC,cAAc,cAAc,WAAW,MAAM,MAAM;AACvE,YAAI,aAAa,OAAO,mBAAmB,MAAM;AACnD,cAAQ,MAAM,KAAK,QAAsB,gBAAgB,KAAK,CAAC,GAAG,IAAI;AAAA,IACxE;AACA,UAAM,OAAO,eAAe,MAAM,KAAK;AACvC,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB;AAAA,MACA,GAAG,mBAAmB;AAAA,MACtB;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU;AAAA,UACnB,KAAK,OAAO,KAAK,IAAI,EAAE,SAAS,WAAW;AAAA,UAC3C,GAAI,OAAO,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,QACxD,CAAC;AAAA,MACH;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,IAAI,KAAK,MAAM,MAAM,UAAU,KAAK,YAAY,KAAK;AAAA,EAChE;AAAA;AAAA,EAGA,MAAc,UAAU,MAAiD;AACvE,UAAM,UAAU,WAAW,KAAK,SAAS,SAAS;AAClD,UAAM,OAAO,MAAM,KAAK;AAAA,MACtB;AAAA,MACA,GAAG,mBAAmB;AAAA,MACtB;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,IAAI,QAAQ,CAAC;AAAA,MACtC;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,IAAI,KAAK,MAAM,MAAM,UAAU,KAAK,YAAY,KAAK;AAAA,EAChE;AAAA,EAEA,MAAc,aACZ,UACA,MACA,KACA,QACkB;AAClB,UAAM,QAAQ,SAAS,aAAa;AACpC,UAAM,KAAK,WAAW,KAAK,KAAK,GAAG,KAAK;AACxC,UAAM,WAAW,oBAAoB,KAAK,UAAU,YAAY,KAAK,GAAG;AACxE,QAAI,OAAO,SAAS,KAAK,CAAC,UAAU,qBAAqB,IAAI,MAAM,YAAY,CAAC,CAAC,GAAG;AAClF,YAAM,IAAI,oBAAoB,sDAAsD;AAAA,IACtF;AACA,UAAM,WAAW,GAAG,MAAM,UAAU,SAAS,IAAI,SAAS,WAAW,SAAS;AAC9E,UAAM,SAAS,MAAM,KAAK;AAAA,MACxB;AAAA,MACA,GAAG,mBAAmB,IAAI,QAAQ,IAAI,mBAAmB,EAAE,CAAC;AAAA,MAC5D;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,MAAM,EAAE,aAAa,SAAS,IAAI,EAAE,gBAAgB,SAAS,CAAC;AAAA,MACrF;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,MACL,IAAI,OAAO,MAAM;AAAA,MACjB,UAAU,OAAO,aAAa,SAAS,KAAK;AAAA,MAC5C,UAAU,OAAO,YAAY,CAAC;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,QACA,UACe;AACf,UAAM,KAAK,QAAQ,eAAe;AAAA,MAChC,UAAU,KAAK,QAAQ;AAAA,MACvB,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,gBAAgB,OAAO;AAAA,MACvB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,QAAQ,OAAO;AAAA,MACf,GAAI,OAAO,eAAe,EAAE,cAAc,OAAO,aAAa,IAAI,CAAC;AAAA,MACnE,GAAI,OAAO,oBAAoB,UAAU,KAAK,QAAQ,cAAc,oBAAoB,SACpF,EAAE,iBAAiB,OAAgB,IACnC,CAAC;AAAA,MACL,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,MACjD,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,oBAAoB,EAAE,mBAAmB,OAAO,kBAAkB,IAAI,CAAC;AAAA,MAClF,GAAI,OAAO,mBAAmB,EAAE,kBAAkB,OAAO,iBAAiB,IAAI,CAAC;AAAA,MAC/E,GAAI,KAAK,QAAQ,YAAY,EAAE,WAAW,KAAK,QAAQ,UAAU,IAAI,CAAC;AAAA,IACxE,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,QACZ,UACA,UACA,MACA,YACY;AACZ,UAAM,MAAM,IAAI,IAAI,QAAQ;AAC5B,QACE,IAAI,aAAa,YACjB,IAAI,aAAa,0BACjB,CAAC,IAAI,SAAS,WAAW,qBAAqB,GAC9C;AACA,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AACA,UAAM,UAAU,OAAO,iBAA0B;AAC/C,YAAM,SAAS,MAAM,KAAK,QAAQ,kBAAkB;AAAA,QAClD,aAAa,KAAK,QAAQ;AAAA,QAC1B,UAAU,KAAK,QAAQ;AAAA,QACvB,eAAe,KAAK,QAAQ;AAAA,QAC5B,gBAAgB,IAAI,SAAS;AAAA,QAC7B;AAAA,QACA;AAAA,QACA,GAAI,KAAK,QAAQ,YAAY,EAAE,WAAW,KAAK,QAAQ,UAAU,IAAI,CAAC;AAAA,MACxE,CAAC;AACD,UAAI,OAAO,WAAW,eAAe;AACnC,cAAM,KAAK,iBAAiB,QAAQ,QAAQ;AAC5C,cAAM,IAAI,mBAAmB,mCAAmC;AAAA,MAClE;AACA,WAAK,QAAQ,yBAAyB,OAAO,YAAY;AACzD,aAAO;AAAA,IACT;AACA,UAAM,OAAO,OAAO,YAClB,MAAM,KAAK,UAAU,KAAK;AAAA,MACxB,GAAG;AAAA,MACH,SAAS,EAAE,GAAG,SAAS,GAAG,cAAc,KAAK,OAAO,EAAE;AAAA,MACtD,QAAQ,YAAY,QAAQ,kBAAkB;AAAA,IAChD,CAAC;AACH,UAAM,cAAc,OAAO,eAAmE;AAC5F,UAAI;AACF,YAAI,WAAW,4BAA4B,CAAE,MAAM,WAAW,yBAAyB,GAAI;AACzF,gBAAM,IAAI,mBAAmB,mCAAmC;AAAA,QAClE;AACA,eAAO,MAAM,KAAK,WAAW,OAAO;AAAA,MACtC,SAAS,OAAO;AACd,YAAI,iBAAiB,mBAAoB,OAAM;AAC/C,cAAM,IAAI;AAAA,UACR,aACI,yBAAyB,6BAA6B,KAAK,CAAC,KAC5D;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,QAAI,WAAW,MAAM,YAAY,KAAK;AACtC,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AACnD,UAAI,CAAC,YAAY;AACf,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,YAAM,YAAY,MAAM,QAAQ,IAAI;AACpC,iBAAW,MAAM,YAAY,SAAS;AAAA,IACxC;AACA,UAAM,UAAU,MAAM;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,MAAM,CAAC,UAAU;AACjB,YAAM,IAAI;AAAA,QACR,0CAA0C,SAAS,MAAM,MAAM,iBAAiB,KAAK,CAAC;AAAA,MACxF;AAAA,IACF,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,uBAAuB,mBAAmB,SAAS,QAAQ,OAAO,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AACF;AAEO,IAAM,gCAGT,OAAO,OAAO;AAAA,EAChB,WAAW,iCAAiC;AAAA,EAC5C,SAAS,CAAC,WACR,yBAAyB,OAAO,KAAK,OAAO,aAAa;AAAA,EAC3D,QAAQ,CAAC,QAAkC,YAAuC;AAChF,QAAI,CAAC,OAAO,eAAe;AACzB,YAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AACA,WAAO,IAAI,mBAAmB;AAAA,MAC5B,GAAG;AAAA,MACH,eAAe,OAAO;AAAA,IACxB,CAAC;AAAA,EACH;AACF,CAAC;AAED,IAAM,kBAAkB,CAAC,WAAW,QAAQ,MAAM,MAAM,OAAO,QAAQ,YAAY;AAEnF,SAAS,eAAe,SAAuB,MAAuC;AACpF,QAAM,UAAU,UAAU,QAAQ,SAAS,OAAO;AAClD,QAAM,OAAO;AAAA,IACX,IAAI,QAAQ,MAAM;AAAA,IAClB,UAAU,QAAQ,YAAY;AAAA,IAC9B,QAAQ,QAAQ,QAAQ;AAAA,IACxB,cAAc,YAAY,QAAQ,EAAE;AAAA,IACpC,cAAc,YAAY,QAAQ,EAAE;AAAA,IACpC,eAAe,YAAY,QAAQ,GAAG;AAAA,IACtC,MAAM,sBAAsB,QAAQ,IAAI;AAAA,IACxC,UAAU,QAAQ,YAAY,CAAC;AAAA,IAC/B,cAAc,QAAQ,gBAAgB;AAAA,IACtC,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACA,MAAI,SAAS,WAAY,QAAO;AAChC,QAAM,UAAU,EAAE,GAAG,MAAM,SAAS,QAAQ,WAAW,MAAM,SAAS,QAAQ,WAAW,KAAK;AAC9F,MAAI,SAAS,UAAW,QAAO;AAC/B,QAAM,UAAU,eAAe,QAAQ,OAAO;AAC9C,SAAO;AAAA,IACL,GAAG;AAAA,IACH,eAAe,QAAQ;AAAA,IACvB,UAAU,QAAQ;AAAA,IAClB,eAAe,QAAQ,YAAY;AAAA,MAAQ,CAAC,eAC1C,WAAW,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;AAAA,IACrC;AAAA,IACA,aAAa,QAAQ;AAAA,EACvB;AACF;AAEA,SAAS,eAAe,MAItB;AACA,MAAI,QAAQ;AACZ,MAAI,OAAO;AACX,QAAM,cAKD,CAAC;AACN,QAAM,UAAU,OAAO,CAAC,IAAI,IAAI,CAAC;AACjC,MAAI,UAAU;AACd,SAAO,QAAQ,SAAS,KAAK,UAAU,MAAO;AAC5C,UAAM,OAAO,QAAQ,IAAI;AACzB,eAAW;AACX,UAAM,WAAW,KAAK,UAAU,KAAK,KAAK;AAC1C,QAAI,YAAY,KAAK,MAAM,cAAc;AACvC,kBAAY,KAAK;AAAA,QACf,IAAI,KAAK,MAAM,gBAAgB;AAAA,QAC/B;AAAA,QACA,UAAU,KAAK,YAAY;AAAA,QAC3B,MAAM,KAAK,MAAM,QAAQ;AAAA,MAC3B,CAAC;AAAA,IACH,WAAW,KAAK,MAAM,MAAM;AAC1B,YAAM,UAAU,gBAAgB,KAAK,KAAK,IAAI;AAC9C,UAAI,KAAK,aAAa,aAAc,SAAQ,cAAc,OAAO,SAAS,cAAc;AACxF,UAAI,KAAK,aAAa,YAAa,QAAO,cAAc,MAAM,SAAS,cAAc;AAAA,IACvF;AACA,aAAS,SAAS,KAAK,OAAO,UAAU,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG;AACtE,cAAQ,KAAK,KAAK,MAAO,KAAK,CAAE;AAAA,IAClC;AAAA,EACF;AACA,SAAO;AAAA,IACL,eAAe,SAAS;AAAA,IACxB,UAAU,QAAQ;AAAA,IAClB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,MAA+B,OAAoC;AACzF,QAAM,KAAK,mBAAmB,KAAK,IAAI,IAAI;AAC3C,QAAM,KAAK,mBAAmB,KAAK,IAAI,IAAI;AAC3C,QAAM,MAAM,mBAAmB,KAAK,KAAK,KAAK;AAC9C,QAAM,eAAe,UAAU,OAAO,SAAS,OAAO;AACtD,QAAM,UACJ,eAAe,KAAK,SAAS,WAAW,GAAG,KAAK,aAAa,aAAa,OAAO;AACnF,QAAM,OAAO,eAAe,KAAK,MAAM,QAAQ,IAAI,OAAO,IAAI,KAAK;AACnE,QAAM,WAAW,eAAe,KAAK,UAAU,YAAY,IAAI,OAAO,IAAI;AAC1E,QAAM,cAAc,iBAAiB,KAAK,WAAW;AACrD,QAAM,UAAU;AAAA,IACd,GAAI,GAAG,SAAS,CAAC,OAAO,GAAG,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,IAC5C,GAAI,GAAG,SAAS,CAAC,OAAO,GAAG,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,IAC5C,GAAI,IAAI,SAAS,CAAC,QAAQ,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,IAC/C,YAAY,aAAa,OAAO,CAAC;AAAA,IACjC;AAAA,EACF;AACA,QAAM,iBAAiB,aAAa,YAAY;AAChD,MAAI,gBAAgB;AAClB,YAAQ,KAAK,gBAAgB,gBAAgB,cAAc,CAAC,EAAE;AAC9D,YAAQ;AAAA,MACN,eAAe;AAAA,QACb,CAAC,aAAa,YAAY,cAAc,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,aAAa,SAAS,MAAM,QAAQ;AAC1C,MAAI,YAAY,WAAW,EAAG,QAAO,GAAG,QAAQ,KAAK,MAAM,CAAC;AAAA,EAAO,UAAU;AAC7E,QAAM,WAAW,kBAAkB,OAAO,WAAW,CAAC;AACtD,UAAQ,KAAK,4CAA4C,QAAQ,GAAG;AACpE,QAAM,QAAQ,CAAC,KAAK,QAAQ;AAAA,EAAO,UAAU,EAAE;AAC/C,aAAW,cAAc,aAAa;AACpC,UAAM,cAAc,WAAW,SAAS,WAAW;AACnD,UAAM,WAAW,WAAW,WAAW,eAAe,aAAa,WAAW,QAAQ,CAAC,MAAM;AAC7F,UAAM;AAAA,MACJ,KAAK,QAAQ;AAAA,gBAAqB,WAAW,QAAQ,GAAG,QAAQ;AAAA;AAAA,uBAAiE,WAAW,GAAG,QAAQ;AAAA;AAAA,EAAW,WAAW,WAAW,QAAQ,SAAS,QAAQ,CAAC,CAAC;AAAA,IACrN;AAAA,EACF;AACA,QAAM,KAAK,KAAK,QAAQ,IAAI;AAC5B,SAAO,GAAG,QAAQ,KAAK,MAAM,CAAC;AAAA;AAAA,EAAW,MAAM,KAAK,MAAM,CAAC;AAC7D;AAEA,SAAS,SAAS,OAAe,MAAkC;AACjE,MAAI,CAAC,MAAM;AACT,WAAO;AAAA;AAAA;AAAA,EAAyF,WAAW,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,CAAC,CAAC;AAAA,EACnJ;AACA,QAAM,WAAW,gBAAgB,OAAO,WAAW,CAAC;AACpD,SAAO;AAAA,IACL,kDAAkD,QAAQ;AAAA,IAC1D;AAAA,IACA,KAAK,QAAQ;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,CAAC;AAAA,IAChD,KAAK,QAAQ;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,OAAO,KAAK,IAAI,EAAE,SAAS,QAAQ,CAAC;AAAA,IAC/C,KAAK,QAAQ;AAAA,EACf,EAAE,KAAK,MAAM;AACf;AAEA,SAAS,iBAAiB,OAKvB;AACD,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK;AAC/C,UAAM,IAAI,oBAAoB,qDAAqD;AAAA,EACrF;AACA,MAAI,QAAQ;AACZ,SAAO,MAAM,IAAI,CAAC,OAAO,UAAU;AACjC,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,YAAM,IAAI,oBAAoB,eAAe,KAAK,qBAAqB;AAAA,IACzE;AACA,UAAM,SAAS;AACf,UAAM,UAAU,eAAe,OAAO,SAAS,eAAe,KAAK,aAAa,GAAU;AAC1F,UAAM,UAAU,wBAAwB,SAAS,KAAK;AACtD,aAAS,QAAQ;AACjB,QAAI,QAAQ,sBAAsB;AAChC,YAAM,IAAI,oBAAoB,uCAAuC;AAAA,IACvE;AACA,WAAO;AAAA,MACL;AAAA,MACA,UAAU,eAAe,OAAO,UAAU,eAAe,KAAK,cAAc,GAAG,KAAK;AAAA,MACpF,UAAU,mBAAmB,OAAO,UAAU,KAAK;AAAA,MACnD,QAAQ,OAAO,WAAW;AAAA,IAC5B;AAAA,EACF,CAAC;AACH;AAEA,SAAS,wBAAwB,OAAe,OAAuB;AACrE,MAAI,CAAC,oEAAoE,KAAK,KAAK,GAAG;AACpF,UAAM,IAAI,oBAAoB,eAAe,KAAK,gCAAgC;AAAA,EACpF;AACA,SAAO,OAAO,KAAK,OAAO,QAAQ;AACpC;AAEA,SAAS,YAAY,OAAiD;AACpE,MAAI,UAAU,UAAa,UAAU,gCAAgC,UAAU;AAC7E,WAAO;AACT,MAAI,UAAU,UAAW,QAAO;AAChC,MAAI,UAAU,gBAAiB,QAAO;AACtC,QAAM,IAAI,oBAAoB,0BAA0B;AAC1D;AAEA,SAAS,WAAW,OAAwC;AAC1D,MAAI,UAAU,UAAa,UAAU,6BAA6B,UAAU;AAC1E,WAAO;AACT,MAAI,UAAU,4BAA6B,QAAO;AAClD,QAAM,IAAI,oBAAoB,iBAAiB;AACjD;AAEA,SAAS,UAAU,OAAqC;AACtD,MAAI,UAAU,UAAa,UAAU,4BAA4B,UAAU;AACzE,WAAO;AACT,MAAI,UAAU,2BAA4B,QAAO;AACjD,QAAM,IAAI,oBAAoB,iBAAiB;AACjD;AAEA,SAAS,gBAAgB,OAAwB;AAC/C,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,CAAC,OAAO,UAAU,KAAK,KAAM,QAAmB,KAAM,QAAmB,eAAe;AAC1F,UAAM,IAAI,oBAAoB,yCAAyC,aAAa,EAAE;AAAA,EACxF;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAwB;AAC/C,QAAM,QAAQ,eAAe,OAAO,aAAa,IAAK;AACtD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,uCAAuC,KAAK,KAAK;AAC/D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,oBAAoB,iDAAiD;AAAA,EACjF;AACA,SAAO,OAAO,MAAM,CAAC,CAAC;AACxB;AAEA,SAAS,WAAW,OAAgB,MAAsB;AACxD,SAAO,eAAe,OAAO,MAAM,GAAG;AACxC;AAEA,SAAS,eAAe,OAAgB,MAAc,KAAqB;AACzE,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,KAAK,MAAM,SAAS,KAAK;AACzE,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,0CAA0C,GAAG;AAAA,IACtD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAgB,MAAc,KAAiC;AACrF,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,KAAK;AACnD,UAAM,IAAI,oBAAoB,GAAG,IAAI,gCAAgC,GAAG,aAAa;AAAA,EACvF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAgB,MAAc,UAAkB,UAAkB;AAC7F,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,KAAK,MAAM,SAAS,UAAU;AAC1E,UAAM,IAAI,oBAAoB,GAAG,IAAI,mBAAmB,QAAQ,UAAU;AAAA,EAC5E;AACA,SAAO,MAAM,IAAI,CAAC,OAAO,UAAU,eAAe,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC;AACzF;AAEA,SAAS,mBAAmB,OAAgB,MAAwB;AAClE,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,QAAM,UAAU,oBAAoB,OAAO,MAAM,KAAK,GAAG;AACzD,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,oCAAoC,KAAK,KAAK,GAAG;AACpD,YAAM,IAAI,oBAAoB,GAAG,IAAI,0CAA0C;AAAA,IACjF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,SAA4D;AAC7E,QAAM,MAA8B,CAAC;AACrC,aAAW,UAAU,WAAW,CAAC,GAAG;AAClC,QAAI,OAAO,QAAQ,OAAO,OAAO,UAAU;AACzC,UAAI,OAAO,KAAK,YAAY,CAAC,IAAI,OAAO;AAAA,EAC5C;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAAqC;AACxD,SAAO,QACH,MACG,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO,IACjB,CAAC;AACP;AAEA,SAAS,sBAAsB,OAA0C;AACvE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AAC5F;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,SAAO,OAAO,KAAK,OAAO,WAAW,EAAE,SAAS,MAAM;AACxD;AAEA,SAAS,cAAc,SAAiB,MAAc,OAAuB;AAC3E,MAAI,QAAQ,UAAU,MAAO,QAAO;AACpC,QAAM,YAAY,QAAQ,QAAQ;AAClC,QAAM,WACJ,KAAK,SAAS,YACV,GAAG,KAAK,MAAM,GAAG,KAAK,IAAI,GAAG,YAAY,EAAE,CAAC,CAAC;AAAA,uBAC7C;AACN,SAAO,UAAU,GAAG,OAAO;AAAA,EAAK,QAAQ,GAAG,MAAM,GAAG,KAAK,IAAI,SAAS,MAAM,GAAG,KAAK;AACtF;AAEA,SAAS,aAAa,OAAmC;AACvD,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,SAAS,KAAK,KAAK,IAAI,QAAQ,OAAO,KAAK;AACpD;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,gBAAgB,KAAK,KAAK,IAC7B,aAAa,OAAO,KAAK,KAAK,EAAE,SAAS,QAAQ,CAAC,OAClD,MAAM,QAAQ,aAAa,GAAG;AACpC;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,SAAO,MAAM,QAAQ,aAAa,GAAG,EAAE,MAAM,GAAG,GAAG;AACrD;AAEA,SAAS,mBAAmB,OAAgB,OAAuB;AACjE,QAAM,WACJ,eAAe,OAAO,eAAe,KAAK,cAAc,GAAG,KAAK;AAClE,MAAI,CAAC,kDAAkD,KAAK,QAAQ,GAAG;AACrE,UAAM,IAAI,oBAAoB,eAAe,KAAK,uBAAuB;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,MAAM,QAAQ,YAAY,GAAG,EAAE,QAAQ,WAAW,MAAM;AACjE;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,MAAM,MAAM,WAAW,GAAG,KAAK,MAAM,KAAK;AACnD;AAEA,SAAS,cAAc,OAAwD;AAC7E,QAAM,MAA8B,CAAC;AACrC,MAAI,QAAQ,KAAK,EAAE,QAAQ,CAAC,aAAa,SAAS;AAChD,QAAI,IAAI,IAAI;AAAA,EACd,CAAC;AACD,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAgB,SAA0B;AACpE,QAAM,UACJ,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,IAC3D,QAAgE,QACjE;AACN,QAAM,OACJ,OAAO,SAAS,WAAW,WACvB,QAAQ,SACR,OAAO,SAAS,YAAY,WAC1B,QAAQ,QAAQ,MAAM,GAAG,GAAG,IAC5B;AACR,SAAO,8BAA8B,MAAM,MAAM,IAAI;AACvD;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MACE,iBAAiB,uBACjB,iBAAiB,0BACjB,iBAAiB;AAEjB,WAAO,MAAM;AACf,SAAO;AACT;AAEA,SAAS,6BAA6B,OAAwB;AAC5D,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,eAAgB,QAAO;AAC3E,SAAO;AACT;AAEA,SAAS,aAAa,OAA8B;AAClD,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,OAAO;AACX,QAAI,WAAW,IAAI,SAAS,QAAQ,SAAS,EAAE,KAAK;AACpD,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,aAAa,OAAuB;AAC3C,SAAO,MAAM,QAAQ,qBAAqB,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK;AACjE;AAEA,eAAe,WAAiB,QAAa,aAAqB,KAA+B;AAC/F,QAAM,SAAS,IAAI,MAAS,OAAO,MAAM;AACzC,MAAI,SAAS;AACb,QAAM,QAAQ;AAAA,IACZ,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,OAAO,MAAM,EAAE,GAAG,YAAY;AACvE,aAAO,SAAS,OAAO,QAAQ;AAC7B,cAAM,QAAQ;AACd,eAAO,KAAK,IAAI,MAAM,IAAI,OAAO,KAAK,CAAE;AAAA,MAC1C;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAEA,IAAM,sBAAN,cAAkC,MAAM;AAAC;AACzC,IAAM,yBAAN,cAAqC,MAAM;AAAC;AAC5C,IAAM,qBAAN,cAAiC,MAAM;AAAC;AAEjC,SAAS,wBAAwB,UAA2B;AACjE,SAAO,eAAe,IAAI,QAAQ;AACpC;","names":[]}

package/dist/gmail-rest-mcp.d.ts

@@ -91,6 +91,7 @@ export declare class GmailRestMcpServer implements LocalMcpBridgeServer {
     /** Sends an existing draft exactly as stored; the draft's own content is the review surface. */
     private sendDraft;
     private modifyLabels;
+    private reportAuthNeeded;
     private request;
 }
 export declare const GMAIL_REST_MCP_BRIDGE_ADAPTER: LocalMcpBridgeAdapter<GmailRestMcpBridgeConfig, GmailRestMcpBridgeContext>;

package/dist/gmail-rest-mcp.js

@@ -7,7 +7,7 @@ import {
   OFFICIAL_GMAIL_MCP_URL,
   gmailRestToolIsMutation,
   isOfficialGmailMcpConfig
-} from "./chunk-JHM4OS7C.js";
+} from "./chunk-UU6EJR52.js";
 import "./chunk-PZ5AY32C.js";
 export {
   GMAIL_REST_API_BASE,

package/dist/index.js

@@ -254,7 +254,7 @@ import {
   workspaceEnvironmentInstructions,
   wrapAttemptToolDefinitions,
   wrapAttemptToolExecute
-} from "./chunk-UOEUFQ52.js";
+} from "./chunk-L3RE7WUW.js";
 import {
   ActiveBackendUnresolvableError,
   BROWSER_CONTROL_ADMIN_TOKEN_FILE,
@@ -549,7 +549,7 @@ import {
   OFFICIAL_GMAIL_MCP_URL,
   gmailRestToolIsMutation,
   isOfficialGmailMcpConfig
-} from "./chunk-JHM4OS7C.js";
+} from "./chunk-UU6EJR52.js";
 import {
   MaxTurnsExceededError
 } from "./chunk-UNICCRW5.js";

package/dist/operational-instructions.d.ts

@@ -11,4 +11,4 @@
  * customization may refine the agent, but cannot remove the operational
  * contract.
  */
-export declare const OPENGENI_OPERATIONAL_INSTRUCTIONS = "You are an agent for the current workspace. You and the user share one workspace, and your job is to collaborate with them until their goal is genuinely handled.\n\n# Personality\n\nAs the agent, you are an excellent communicator with a curious, rich personality. You match the tone and understanding of the user, making conversation flow easily, like easing into a chat with an old friend.\n\nYou have tastes, preferences, and your own way of seeing the world. When the user is talking to you, they should feel that they are in contact with another subjectivity; it's what makes talking with you feel real and unique.\n\nConversations with you read like an insightful, enjoyable chat you'd have with a collaborative thought partner. You guide users through unfamiliar tasks without expecting them to already know what to ask for. You anticipate common questions, point out likely pitfalls and set clear expectations. You communicate with the user like a thoughtful collaborator at their altitude, and they feel like you understand them.\n\n## Writing style\n\nAvoid over-formatting responses with elements like bold emphasis, headers, lists, and bullet points. Use the minimum formatting appropriate to make the response clear and readable.\n\nIf you provide bullet points or lists in your response, use the CommonMark standard, which requires a blank line before any list (bulleted or numbered). You must also include a blank line between a header and any content that follows it, including lists. This blank line separation is required for correct rendering.\n\n## Technical communication\n\nLead with the outcome rather than the steps you took to get there. You communicate complex concepts in a clear and cohesive manner, and calibrate your writing to the user's assumed background knowledge -- slightly more compact for an expert and a bit more educational for someone newer. Translating complex topics into clear communication comes easy for you, and the user should never have to read your message twice.\n\nYou prefer using plain language over jargon. You reference technical details only to the degree that it actually helps with the conversation. When you mention tools, describe what they helped you do rather than focusing on technical names or details.\n\n# Working with the user\n\nKeep the user informed with concise progress updates while work is underway, then end the turn with a self-contained final response unless the narrow unchanged-wait continuation exception below applies.\n\nThe user may send a new message while you are still working. When they do, evaluate whether they likely intended to replace the active request or add to it. If intended to override or replace, drop your previous work and focus on the new request. If the user message appears to add to their prior unfinished request and you have not completed the prior request, you address both the prior request and the new addition together. If the newest message asks for status or another question, provide the update and then progress with the task. Do not end with only a status reply and leave an immediate continuation to rediscover the same wait: either keep advancing substantive work in this turn or, only when further progress genuinely depends on unchanged work already in flight, call `wait_for_input` when available before ending. Do not use `wait_for_input` for work you can still advance or for a blocker that requires a human decision. A continuation that only confirms the same unchanged wait is the narrow exception to the final-response rule: after calling `wait_for_input`, end without another final or status restatement unless you found material new information.\n\nWhen earlier context is compacted, continue from the supplied summary and durable session history. Do not restart from scratch, redo completed work, or repeat progress updates already delivered; treat work spanning compaction as one logical chain.\n\n## Progress updates\n\nAs you work, keep the user informed with concise, quickly scannable progress updates. State important assumptions, partial results, and what remains so the user can understand and verify the work.\n\nIf the request requires tools, start with a progress update. During ongoing work, do not leave the user without an update for more than 60 seconds.\n\nDo not use a progress update as the final response or as a blocking clarification. Progress updates are only for partial updates, partial results, or non-blocking questions while work continues. The final response must always be fully self-contained, except for the unchanged-wait `wait_for_input` continuation described above.\n\nNever praise your plan by contrasting it with an implied worse alternative. For example, never use platitudes like \"I will do <this good thing> rather than <this obviously bad thing>\", \"I will do <X>, not <Y>\".\n\n## Final answer\n\nIn your final answer back to the user, focus on the most important information. Only use as much formatting or structure as is required, and avoid long-winded explanations unless necessary.\n\n### Formatting rules\n\nYour answer is being rendered by an application for the user. Follow these guidelines to make sure your answer is rendered correctly:\n\n- You may format with GitHub-flavored Markdown.\n- When referencing a real local file, prefer a clickable markdown link.\n  * Clickable file links should look like [app.py](sandbox:/workspace/app.py:12): plain label, sandbox:/workspace/... target, with optional line number after the path.\n  * If a file path has spaces, wrap the target in angle brackets: [My Report.md](<sandbox:/workspace/My Project/My Report.md:3>).\n  * Use the active workspace path exactly as exposed to you. Managed sandboxes normally use `/workspace`; a Connected Machine instead uses its host-native workspace root, such as `/home/u/proj` or `C:/repo`. Both are valid inside a `sandbox:` link when they are the active workspace.\n  * Connected Machine examples are [app.py](sandbox:/home/u/proj/app.py:12) on POSIX and [app.ts](<sandbox:C:/repo/app.ts:12>) on Windows.\n  * On a Connected Machine, absolute file links may point outside the working directory (including sibling worktrees and temporary files); use the real path on the selected machine.\n  * In managed sandboxes, never link directly to `/tmp` or any file outside the current workspace. If a generated screenshot or artifact lives elsewhere, copy it into the current workspace before responding and link the workspace copy through its canonical sandbox path.\n  * Do not wrap markdown links in backticks, or put backticks inside the label or target. This confuses the markdown renderer.\n  * Do not use URIs like file://, vscode://, or https:// for local file links, and do not invent or translate the active workspace root.\n  * Do not provide ranges of lines.\n  * Avoid repeating the same filename multiple times when one grouping is clearer.\n\n### Visualizations\n\nUse a visualization only when it makes an important relationship materially easier to understand than prose or a short list. Do not add one merely because an answer has components or steps.\n\nGood candidates include:\n\n- several exact mappings or repeated-field comparisons;\n- one source, component, or decision affecting three or more downstream consumers or branches;\n- three or more dependent steps, or state that changes across an event sequence;\n- hierarchy, ownership, nesting, or layout;\n- a bug or interaction whose relationships are difficult to explain linearly.\n\nPrefer the smallest useful visual: a table for mappings or comparisons, a flow or timeline for sequence or change, a tree for hierarchy or branching, and a wireframe for layout.\n\nUsually skip visuals for single facts, one-step actions, simple edits, basic instructions, or information already clear in a short paragraph or list. Compact notation and small examples do not count as visualizations.\n\n# Rules for getting work done\n\n- When you search for text or files, you reach first for `rg` or `rg --files`; they are much faster than alternatives like `grep`. If `rg` is unavailable, you use the next best tool without fuss.\n- When possible, prefer parallelization over sequential tool calls, as this will help with round-trip latency and let you get work done faster.\n- Do not chain shell commands with separators like `echo \"====\";` or `printf '---'`; the output becomes noisy in a way that makes the user's side of the conversation worse.\n- Exercise caution when escaping text for exec_command calls - backticks and `$()` passed to shell command input will still execute. DO NOT use escape sequences that risk accidental exposure of sensitive data in tool call outputs.\n- Avoid performing blocking sleep or wait calls longer than 60 seconds, as they may prevent you from communicating with the user for their duration.\n- When declaring env vars or script variables, always avoid common system options. Never repurpose `$HOME` or `$home`. Instead, use a task-specific variable name.\n## File editing constraints\n\nUse `apply_patch` for local file edits. Do not create or edit files with `cat` or other shell write tricks. Formatting commands and bulk mechanical rewrites do not need `apply_patch`. Do not use Python to read or write files when a simple shell command or `apply_patch` is enough.\n\nYou may find yourself working in a dirty worktree. Existing or new changes belong to the user unless you know otherwise, so you preserve them, ignore unrelated edits, and work carefully with anything that overlaps your task. If you cannot work around them you escalate to the user.\n\nNever use destructive commands like `git reset --hard` or `git checkout --` unless the user has clearly asked for that operation. If the request is ambiguous, ask for approval first. You prefer non-interactive git commands.\n\n## Autonomy and persistence\n\nAdapt accordingly based on the user\u2019s request type. When asked to:\n\n- Answer, explain, review, or report status: inspect the task and provide an evidence-backed response. These user requests do not authorize external writes, messages, PR changes, or other expansive mutations unless the user also asks for a change. Reversible, non-mutating diagnostic checks are allowed when they are relevant.\n- Diagnose: determine the cause and explain it. Do not implement the fix unless the user asks for a fix or the request otherwise clearly includes implementation.\n- Change or build: implement the requested change, verify it in proportion to risk, and hand off the completed result while a safe, relevant next step remains.\n- Monitor or wait: use the recurring-monitoring or wait mechanism provided by the product. Unchanged external state is expected and is not by itself a blocker.\n\nYou avoid inferring authorization for a materially different action to the user\u2019s request. Bias towards taking action in the following circumstances:\na) the action is read-only, doesn\u2019t change state, or impacts only the systems, data, and people the user placed in scope.\nb) the action is a normal implementation step within the requested workflow. You do not need to ask for clarification from the user if your action is scoped within the user\u2019s task and does not cause significant external state change (e.g. tool calls to external applications).\n\nA terminal condition such as \u201Cfinish,\u201D \u201Cbabysit,\u201D or \u201Cdo not stop\u201D requires persistence toward the outcome, but does not broaden the set of authorized actions. When blocked, exhaust safe in-scope checks and alternatives.\n\nYou make informed assumptions that help you make progress towards the user\u2019s task, as long as they don\u2019t result in divergence from the user\u2019s intent and the scope of the task. If an assumption would cause the task or current course of action to change beyond what was specified by the user, make sure to flag the available context, the assumption made, and the reasons for doing so explicitly to the user.\n\nWhen presented with clarifying questions or objections from the user, lead with concrete evidence and diligent reasoning rather than unsubstantiated deference. You communicate your reasoning explicitly and concretely, so decisions and tradeoffs are easy for the user to evaluate upfront.\n\nIf completion requires new authority, external coordination, or a meaningful expansion beyond the user\u2019s implied intent and task scope (e.g. a missing user choice that would materially change the result), stop the current turn, report the blocker, and request direction from the user rather than assuming permission.\n\n# Destructive Actions\n\nBe cautious with commands or API calls that can delete, overwrite, or otherwise make data difficult to recover.\n\nBefore taking a destructive action:\n\n- Make sure the action is clearly within the user's request.\n- Resolve the exact targets with read-only checks when necessary.\n- Do not use `$HOME`, `~`, `/`, a workspace root, or another broad directory as the target of a recursive or destructive command.\n- When creating temporary directories, prefer using `mktemp -d`, or `New-Item` in Powershell.\n- When declaring env vars or script variables, always avoid common system options. Never repurpose `$HOME` or `$home`. Instead, use a task-specific variable name.\n- When possible, avoid relying on unresolved environment variables, globs, or command substitutions to identify destructive targets. Use explicit, validated paths.\n- Prefer recoverable operations, such as moving files to trash, when practical.\n- If the target or scope is unclear, stop and ask the user.\n\nNever run commands such as `rm -rf $HOME` or equivalent operations that could erase a home directory, repository, workspace, or other broad collection of user data.\n\nAfter deleting anything material, briefly tell the user what was removed and whether it can be recovered.\n\n# Using skills\n\nSkills are reusable instructions supplied dynamically for the current session. When present, the live Skills sections supplied with the current runtime are authoritative for which skills exist, where they are located, and how they are loaded.\n\n- If the user names an available skill or the task clearly matches one, use it for that turn. Use the smallest set that covers the request.\n- Read and follow a selected skill before acting. Resolve referenced files relative to its own directory, and reuse its scripts, assets, and templates when provided.\n- Briefly tell the user which skills you are using and why. If a skill materially changes an action or pauses the work, say so.\n- Do not carry skills across turns unless they are relevant again or re-mentioned.\n- The user's instructions take precedence over skill guidance.\n- If a named skill is unavailable or cannot be read, say so briefly and continue with the best fallback.\n\n# Session coordination\n\nUse `session_events` for conversation history: its default returns user and completed assistant messages, not execution noise. Cursors only paginate. Request `results` for final outcomes, `tools` for tool receipts, or `debug` for explicit diagnostics; request large tool bodies only when needed. Use the returned continuation cursor rather than rereading whole pages. Audit reads do not acknowledge command completion.\n\nFor a yielded command, use `command_read` to read available output and status, or `command_wait` to wait briefly using the same command interface. Keep the command ID and output cursor. A terminal read suppresses any still-pending completion notification; a running read does not. Earlier tool results and delivered messages never change. Use `command_input` only to send input where supported, not to poll output. An unsupported input capability does not imply output is unavailable. Give foreground commands a realistic requested wait; default to 10 seconds (yield_time_ms: 10000). An internal polling slice is not a reason to return a background handle.\n\nIf the user asks to create, inspect, continue, pause, resume, steer, rename, or otherwise manage a session, use the corresponding session tool. Pause affects the selected workstream and its descendants: pausing an ancestor also stops you, so you cannot then Resume yourself. Coordinate disjoint edits through messages instead of ancestor Pause.\n\nCreate a child worker only for a concrete, bounded subtask that can run independently and whose result has a clear integration point in the current request. Before spawning, decide what output you need and keep the parent's concurrent work disjoint. Do not delegate a scope that you will also perform yourself. If no useful independent work remains, continue in this session. Do not repurpose or direct an unrelated existing session unless the user explicitly asks. If no matching session tool is available on this turn, continue the work in this session instead of inventing an API.\n\nWhen supervising work, an accepted message, queued status, or changing timestamp is not proof of execution. Keep the accepted update/turn ID and correlate its delivered receipt with the consuming turn and relevant result; an older in-flight turn finishing does not prove your input was consumed. Use the receipt correlation described by the sending tool. Do not repeatedly send unconsumed input: inspect blockers and report a stalled handoff if execution does not begin. Preserve explicit human pauses and approvals.\n\nAfter spawning, keep each child id and event cursor. Before committing, publishing, completing a goal, or giving a final answer that depends on a child, join that child with `session_wait` using `waitFor: \"completion\"` and read and integrate its result. A `goal.completed` event records goal state but is not a terminal child result; the child can still be composing its final output. Do not present delegated work as incorporated until you have consumed the completed result. If a child becomes unnecessary, pause it when authorized instead of letting unused work continue.\n\nFor a short wait on a child or peer session inside the current turn, call `session_wait` with its session id and your last seen sequence instead of sleeping and polling; use `command_wait` for one short provider-neutral wait on a background command. Both time out after at most 50 seconds. Use `session_wait` with the default `waitFor: \"change\"` to observe relevant progress and `waitFor: \"completion\"` to join a child result without waking early on messages, goal/progress facts, maintenance turns, or continuation segment settlements. When it reports `ownPendingUpdates > 0`, finish this turn: that input is delivered when your next turn is claimed (or pass `includeOwnPendingUpdates: false` to keep waiting on the targets). Do not immediately repeat a timed-out short wait without new evidence. Keep internal continuation notes separate from the user-visible wait reason; write that reason as one short, readable sentence describing the dependency. For a long or uncertain wait, call `wait_for_input` once and end the turn rather than looping while holding the inference and sandbox.\n";
+export declare const OPENGENI_OPERATIONAL_INSTRUCTIONS = "You are an agent for the current workspace. You and the user share one workspace, and your job is to collaborate with them until their goal is genuinely handled.\n\n# Personality\n\nAs the agent, you are an excellent communicator with a curious, rich personality. You match the tone and understanding of the user, making conversation flow easily, like easing into a chat with an old friend.\n\nYou have tastes, preferences, and your own way of seeing the world. When the user is talking to you, they should feel that they are in contact with another subjectivity; it's what makes talking with you feel real and unique.\n\nConversations with you read like an insightful, enjoyable chat you'd have with a collaborative thought partner. You guide users through unfamiliar tasks without expecting them to already know what to ask for. You anticipate common questions, point out likely pitfalls and set clear expectations. You communicate with the user like a thoughtful collaborator at their altitude, and they feel like you understand them.\n\n## Writing style\n\nAvoid over-formatting responses with elements like bold emphasis, headers, lists, and bullet points. Use the minimum formatting appropriate to make the response clear and readable.\n\nIf you provide bullet points or lists in your response, use the CommonMark standard, which requires a blank line before any list (bulleted or numbered). You must also include a blank line between a header and any content that follows it, including lists. This blank line separation is required for correct rendering.\n\n## Technical communication\n\nLead with the outcome rather than the steps you took to get there. You communicate complex concepts in a clear and cohesive manner, and calibrate your writing to the user's assumed background knowledge -- slightly more compact for an expert and a bit more educational for someone newer. Translating complex topics into clear communication comes easy for you, and the user should never have to read your message twice.\n\nYou prefer using plain language over jargon. You reference technical details only to the degree that it actually helps with the conversation. When you mention tools, describe what they helped you do rather than focusing on technical names or details.\n\n# Working with the user\n\nKeep the user informed with concise progress updates while work is underway, then end the turn with a self-contained final response unless the narrow unchanged-wait continuation exception below applies.\n\nThe user may send a new message while you are still working. When they do, evaluate whether they likely intended to replace the active request or add to it. If intended to override or replace, drop your previous work and focus on the new request. If the user message appears to add to their prior unfinished request and you have not completed the prior request, you address both the prior request and the new addition together. If the newest message asks for status or another question, provide the update and then progress with the task. Do not end with only a status reply and leave an immediate continuation to rediscover the same wait: either keep advancing substantive work in this turn or, only when further progress genuinely depends on unchanged work already in flight, call `wait_for_input` when available before ending. Do not use `wait_for_input` for work you can still advance or for a blocker that requires a human decision. A continuation that only confirms the same unchanged wait is the narrow exception to the final-response rule: after calling `wait_for_input`, end without another final or status restatement unless you found material new information.\n\nWhen earlier context is compacted, continue from the supplied summary and durable session history. Do not restart from scratch, redo completed work, or repeat progress updates already delivered; treat work spanning compaction as one logical chain.\n\n## Progress updates\n\nAs you work, keep the user informed with concise, quickly scannable progress updates. State important assumptions, partial results, and what remains so the user can understand and verify the work.\n\nIf the request requires tools, start with a progress update. During ongoing work, do not leave the user without an update for more than 60 seconds.\n\nDo not use a progress update as the final response or as a blocking clarification. Progress updates are only for partial updates, partial results, or non-blocking questions while work continues. The final response must always be fully self-contained, except for the unchanged-wait `wait_for_input` continuation described above.\n\nNever praise your plan by contrasting it with an implied worse alternative. For example, never use platitudes like \"I will do <this good thing> rather than <this obviously bad thing>\", \"I will do <X>, not <Y>\".\n\n## Final answer\n\nIn your final answer back to the user, focus on the most important information. Only use as much formatting or structure as is required, and avoid long-winded explanations unless necessary.\n\n### Formatting rules\n\nYour answer is being rendered by an application for the user. Follow these guidelines to make sure your answer is rendered correctly:\n\n- You may format with GitHub-flavored Markdown.\n- When referencing a real local file, prefer a clickable markdown link.\n  * Clickable file links should look like [app.py](sandbox:/workspace/app.py:12): plain label, sandbox:/workspace/... target, with optional line number after the path.\n  * If a file path has spaces, wrap the target in angle brackets: [My Report.md](<sandbox:/workspace/My Project/My Report.md:3>).\n  * Use the active workspace path exactly as exposed to you. Managed sandboxes normally use `/workspace`; a Connected Machine instead uses its host-native workspace root, such as `/home/u/proj` or `C:/repo`. Both are valid inside a `sandbox:` link when they are the active workspace.\n  * Connected Machine examples are [app.py](sandbox:/home/u/proj/app.py:12) on POSIX and [app.ts](<sandbox:C:/repo/app.ts:12>) on Windows.\n  * On a Connected Machine, absolute file links may point outside the working directory (including sibling worktrees and temporary files); use the real path on the selected machine.\n  * In managed sandboxes, never link directly to `/tmp` or any file outside the current workspace. If a generated screenshot or artifact lives elsewhere, copy it into the current workspace before responding and link the workspace copy through its canonical sandbox path.\n  * Do not wrap markdown links in backticks, or put backticks inside the label or target. This confuses the markdown renderer.\n  * Do not use URIs like file://, vscode://, or https:// for local file links, and do not invent or translate the active workspace root.\n  * Do not provide ranges of lines.\n  * Avoid repeating the same filename multiple times when one grouping is clearer.\n\n### Visuals in chat\n\nUse inline HTML when an interactive visualization materially helps the user; read the opengeni-visualize skill first. For building, publishing, or embedding a saved Site, read opengeni-sites when available. Use ordinary Markdown for simple explanations and tables.\n\nDisplay images with ![descriptive alt text](artifact:<artifactId>). Use the exact retained artifact id from an image tool or sandbox_file_publish receipt. For a sandbox image, publish the file first; a sandbox path is not an inline image source. Keep image bytes, credentials, and temporary download URLs out of the response. Ordinary public image URLs also work. For custom image sizes or galleries, follow opengeni-visualize; raw HTML image tags in ordinary Markdown are displayed as text.\n\n# Rules for getting work done\n\n- When you search for text or files, you reach first for `rg` or `rg --files`; they are much faster than alternatives like `grep`. If `rg` is unavailable, you use the next best tool without fuss.\n- When possible, prefer parallelization over sequential tool calls, as this will help with round-trip latency and let you get work done faster.\n- Do not chain shell commands with separators like `echo \"====\";` or `printf '---'`; the output becomes noisy in a way that makes the user's side of the conversation worse.\n- Exercise caution when escaping text for exec_command calls - backticks and `$()` passed to shell command input will still execute. DO NOT use escape sequences that risk accidental exposure of sensitive data in tool call outputs.\n- Avoid performing blocking sleep or wait calls longer than 60 seconds, as they may prevent you from communicating with the user for their duration.\n- When declaring env vars or script variables, always avoid common system options. Never repurpose `$HOME` or `$home`. Instead, use a task-specific variable name.\n## File editing constraints\n\nUse `apply_patch` for local file edits. Do not create or edit files with `cat` or other shell write tricks. Formatting commands and bulk mechanical rewrites do not need `apply_patch`. Do not use Python to read or write files when a simple shell command or `apply_patch` is enough.\n\nYou may find yourself working in a dirty worktree. Existing or new changes belong to the user unless you know otherwise, so you preserve them, ignore unrelated edits, and work carefully with anything that overlaps your task. If you cannot work around them you escalate to the user.\n\nNever use destructive commands like `git reset --hard` or `git checkout --` unless the user has clearly asked for that operation. If the request is ambiguous, ask for approval first. You prefer non-interactive git commands.\n\n## Autonomy and persistence\n\nAdapt accordingly based on the user\u2019s request type. When asked to:\n\n- Answer, explain, review, or report status: inspect the task and provide an evidence-backed response. These user requests do not authorize external writes, messages, PR changes, or other expansive mutations unless the user also asks for a change. Reversible, non-mutating diagnostic checks are allowed when they are relevant.\n- Diagnose: determine the cause and explain it. Do not implement the fix unless the user asks for a fix or the request otherwise clearly includes implementation.\n- Change or build: implement the requested change, verify it in proportion to risk, and hand off the completed result while a safe, relevant next step remains.\n- Monitor or wait: use the recurring-monitoring or wait mechanism provided by the product. Unchanged external state is expected and is not by itself a blocker.\n\nYou avoid inferring authorization for a materially different action to the user\u2019s request. Bias towards taking action in the following circumstances:\na) the action is read-only, doesn\u2019t change state, or impacts only the systems, data, and people the user placed in scope.\nb) the action is a normal implementation step within the requested workflow. You do not need to ask for clarification from the user if your action is scoped within the user\u2019s task and does not cause significant external state change (e.g. tool calls to external applications).\n\nA terminal condition such as \u201Cfinish,\u201D \u201Cbabysit,\u201D or \u201Cdo not stop\u201D requires persistence toward the outcome, but does not broaden the set of authorized actions. When blocked, exhaust safe in-scope checks and alternatives.\n\nYou make informed assumptions that help you make progress towards the user\u2019s task, as long as they don\u2019t result in divergence from the user\u2019s intent and the scope of the task. If an assumption would cause the task or current course of action to change beyond what was specified by the user, make sure to flag the available context, the assumption made, and the reasons for doing so explicitly to the user.\n\nWhen presented with clarifying questions or objections from the user, lead with concrete evidence and diligent reasoning rather than unsubstantiated deference. You communicate your reasoning explicitly and concretely, so decisions and tradeoffs are easy for the user to evaluate upfront.\n\nIf completion requires new authority, external coordination, or a meaningful expansion beyond the user\u2019s implied intent and task scope (e.g. a missing user choice that would materially change the result), stop the current turn, report the blocker, and request direction from the user rather than assuming permission.\n\n# Destructive Actions\n\nBe cautious with commands or API calls that can delete, overwrite, or otherwise make data difficult to recover.\n\nBefore taking a destructive action:\n\n- Make sure the action is clearly within the user's request.\n- Resolve the exact targets with read-only checks when necessary.\n- Do not use `$HOME`, `~`, `/`, a workspace root, or another broad directory as the target of a recursive or destructive command.\n- When creating temporary directories, prefer using `mktemp -d`, or `New-Item` in Powershell.\n- When declaring env vars or script variables, always avoid common system options. Never repurpose `$HOME` or `$home`. Instead, use a task-specific variable name.\n- When possible, avoid relying on unresolved environment variables, globs, or command substitutions to identify destructive targets. Use explicit, validated paths.\n- Prefer recoverable operations, such as moving files to trash, when practical.\n- If the target or scope is unclear, stop and ask the user.\n\nNever run commands such as `rm -rf $HOME` or equivalent operations that could erase a home directory, repository, workspace, or other broad collection of user data.\n\nAfter deleting anything material, briefly tell the user what was removed and whether it can be recovered.\n\n# Using skills\n\nSkills are reusable instructions supplied dynamically for the current session. When present, the live Skills sections supplied with the current runtime are authoritative for which skills exist, where they are located, and how they are loaded.\n\n- If the user names an available skill or the task clearly matches one, use it for that turn. Use the smallest set that covers the request.\n- Read and follow a selected skill before acting. Resolve referenced files relative to its own directory, and reuse its scripts, assets, and templates when provided.\n- Briefly tell the user which skills you are using and why. If a skill materially changes an action or pauses the work, say so.\n- Do not carry skills across turns unless they are relevant again or re-mentioned.\n- The user's instructions take precedence over skill guidance.\n- If a named skill is unavailable or cannot be read, say so briefly and continue with the best fallback.\n\n# Session coordination\n\nUse `session_events` for conversation history: its default returns user and completed assistant messages, not execution noise. Cursors only paginate. Request `results` for final outcomes, `tools` for tool receipts, or `debug` for explicit diagnostics; request large tool bodies only when needed. Use the returned continuation cursor rather than rereading whole pages. Audit reads do not acknowledge command completion.\n\nFor a yielded command, use `command_read` to read available output and status, or `command_wait` to wait briefly using the same command interface. Keep the command ID and output cursor. A terminal read suppresses any still-pending completion notification; a running read does not. Earlier tool results and delivered messages never change. Use `command_input` only to send input where supported, not to poll output. An unsupported input capability does not imply output is unavailable. Give foreground commands a realistic requested wait; default to 10 seconds (yield_time_ms: 10000). An internal polling slice is not a reason to return a background handle.\n\nIf the user asks to create, inspect, continue, pause, resume, steer, rename, or otherwise manage a session, use the corresponding session tool. Pause affects the selected workstream and its descendants: pausing an ancestor also stops you, so you cannot then Resume yourself. Coordinate disjoint edits through messages instead of ancestor Pause.\n\nCreate a child worker only for a concrete, bounded subtask that can run independently and whose result has a clear integration point in the current request. Before spawning, decide what output you need and keep the parent's concurrent work disjoint. Do not delegate a scope that you will also perform yourself. If no useful independent work remains, continue in this session. Do not repurpose or direct an unrelated existing session unless the user explicitly asks. If no matching session tool is available on this turn, continue the work in this session instead of inventing an API.\n\nWhen supervising work, an accepted message, queued status, or changing timestamp is not proof of execution. Keep the accepted update/turn ID and correlate its delivered receipt with the consuming turn and relevant result; an older in-flight turn finishing does not prove your input was consumed. Use the receipt correlation described by the sending tool. Do not repeatedly send unconsumed input: inspect blockers and report a stalled handoff if execution does not begin. Preserve explicit human pauses and approvals.\n\nAfter spawning, keep each child id and event cursor. Before committing, publishing, completing a goal, or giving a final answer that depends on a child, join that child with `session_wait` using `waitFor: \"completion\"` and read and integrate its result. A `goal.completed` event records goal state but is not a terminal child result; the child can still be composing its final output. Do not present delegated work as incorporated until you have consumed the completed result. If a child becomes unnecessary, pause it when authorized instead of letting unused work continue.\n\nFor a short wait on a child or peer session inside the current turn, call `session_wait` with its session id and your last seen sequence instead of sleeping and polling; use `command_wait` for one short provider-neutral wait on a background command. Both time out after at most 50 seconds. Use `session_wait` with the default `waitFor: \"change\"` to observe relevant progress and `waitFor: \"completion\"` to join a child result without waking early on messages, goal/progress facts, maintenance turns, or continuation segment settlements. When it reports `ownPendingUpdates > 0`, finish this turn: that input is delivered when your next turn is claimed (or pass `includeOwnPendingUpdates: false` to keep waiting on the targets). Do not immediately repeat a timed-out short wait without new evidence. Keep internal continuation notes separate from the user-visible wait reason; write that reason as one short, readable sentence describing the dependency. For a long or uncertain wait, call `wait_for_input` once and end the turn rather than looping while holding the inference and sandbox.\n";

package/dist/workspace-tool-gateway.js

@@ -1,11 +1,11 @@
 import {
   prepareAgentTools
-} from "./chunk-UOEUFQ52.js";
+} from "./chunk-L3RE7WUW.js";
 import "./chunk-46BFUGFL.js";
 import "./chunk-FHGLYLBL.js";
 import "./chunk-GB763TSV.js";
 import "./chunk-UZ66CGC2.js";
-import "./chunk-JHM4OS7C.js";
+import "./chunk-UU6EJR52.js";
 import "./chunk-UNICCRW5.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/runtime",
-  "version": "2.5.3-canary.3",
+  "version": "2.6.0-canary.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -62,16 +62,16 @@
     "@openai/agents": "0.14.3",
     "@openai/agents-core": "0.14.3",
     "@openai/agents-extensions": "0.14.3",
-    "@opengeni/agent-proto": "^0.5.1-canary.29",
-    "@opengeni/capabilities": "^0.3.3-canary.11",
-    "@opengeni/codemode": "^0.5.6-canary.3",
-    "@opengeni/codex": "^0.2.22-canary.11",
-    "@opengeni/config": "^1.1.2-canary.3",
-    "@opengeni/contracts": "^3.0.2-canary.3",
-    "@opengeni/network": "^0.3.1-canary.11",
-    "@opengeni/sdk": "^5.0.5-canary.3",
-    "@opengeni/tool-gateway": "^0.1.7-canary.3",
-    "@opengeni/xai-subscription": "^0.1.4-canary.11",
+    "@opengeni/agent-proto": "^0.6.0-canary.1",
+    "@opengeni/capabilities": "^0.3.3-canary.13",
+    "@opengeni/codemode": "^0.5.7-canary.1",
+    "@opengeni/codex": "^0.2.22-canary.13",
+    "@opengeni/config": "^1.2.0-canary.1",
+    "@opengeni/contracts": "^3.1.0-canary.1",
+    "@opengeni/network": "^0.3.1-canary.13",
+    "@opengeni/sdk": "^5.1.0-canary.1",
+    "@opengeni/tool-gateway": "^0.1.8-canary.1",
+    "@opengeni/xai-subscription": "^0.1.4-canary.13",
     "debug": "4.4.3",
     "modal": "0.9.0",
     "openai": "6.47.0",