@providerkit/core 0.21.1 → 0.23.0

package/dist/watchdog.js.map

@@ -1 +1 @@
-{"version":3,"file":"watchdog.js","sourceRoot":"","sources":["../src/watchdog.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8BAA8B;AAC9B,EAAE;AACF,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,wEAAwE;AACxE,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,EAAE;AACF,6EAA6E;AAC7E,kEAAkE;AAClE,8EAA8E;AAC9E,6EAA6E;AAC7E,+BAA+B;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAU5C;sBACsB;AACtB,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;2DAC2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAgC1C,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,KAAK,GAAyB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAE/F,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC,CAAC;YAC5F,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,yEAAyE;QACzE,mDAAmD;QAClD,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,IAA+C,CAAC;IACpD,IAAI,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAEhD,SAAS,WAAW;QAClB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,IAAI,EAAE;YAAE,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;YACL,UAAU,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACpC,WAAW,EAAE,CAAC;YACd,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE;gBAAE,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,WAAW;QACX,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU;QAC9B,QAAQ,CAAC,GAAY;YACnB,wDAAwD;YACxD,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,CAChC,KAAkB,EAClB,MAAwB;IAExB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,cAAc,CACnC,QAAgB,EAChB,MAAwB,EACxB,OAAsC,EAAE;IAExC,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAqC,CAAC;IAC1C,IAAI,KAA6B,CAAC;IAElC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QACzD,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACrC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjD,iEAAiE;YACjE,qEAAqE;YACrE,sEAAsE;YACtE,kCAAkC;YAClC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,KAAK,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,QAAQ;QAAE,OAAO;IACrB,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,IAAI,CAAC;QACZ,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,EAAE,eAAe;YAClC,CAAC,CAAC,KAAK,KAAK,CAAC,eAAe,OAAO,KAAK,CAAC,YAAY,mCAAmC;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,aAAa,CACrB,QAAQ,EACR,SAAS,EACT,GAAG,QAAQ,6CAA6C,KAAK,oCAAoC,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,6BAA6B,CAAC,CAAC;AAC1F,CAAC;AAmBD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,OAAwB,EAAE;IACzE,OAAO;QACL,GAAG,QAAQ;QACX,YAAY,CACV,QAAuB,EACvB,KAAuB,EACvB,aAA4B,EAAE;YAE9B,uEAAuE;YACvE,qDAAqD;YACrD,KAAK,SAAS,CAAC,CAAC,OAAO;gBACrB,2DAA2D;gBAC3D,MAAM,KAAK,GAAG,WAAW,CAAC;oBACxB,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;gBAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE;oBACpD,GAAG,UAAU;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,GAAG,EAAE;wBACf,KAAK,CAAC,WAAW,EAAE,CAAC;wBACpB,cAAc,EAAE,EAAE,CAAC;oBACrB,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBACrD,kEAAkE;oBAClE,sDAAsD;oBACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,QAAQ,GAAG,IAAI,CAAC;wBAChB,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;oBACjD,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC,cAAc,KAAK,KAAK;gBAClC,CAAC,CAAC,OAAO,EAAE;gBACX,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE;oBACrC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM;iBAClD,CAAC,CAAC;QACT,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"watchdog.js","sourceRoot":"","sources":["../src/watchdog.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8BAA8B;AAC9B,EAAE;AACF,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,2EAA2E;AAC3E,wEAAwE;AACxE,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,EAAE;AACF,6EAA6E;AAC7E,iEAAiE;AACjE,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,sDAAsD;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAU5C;sBACsB;AACtB,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;2DAC2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAgC1C,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;IAC7C,2EAA2E;IAC3E,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,KAAK,GAAyB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAE/F,SAAS,QAAQ,CAAC,EAAU,EAAE,IAAY;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,sEAAsE;YACtE,uEAAuE;YACvE,KAAK,GAAG,SAAS;gBACf,CAAC,CAAC,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAI,aAAa,IAAI,EAAE,CAAC;gBACrF,CAAC,CAAC,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,IAAI,GAAG,EAAE;oBACrE,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,yEAAyE;QACzE,mDAAmD;QAClD,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,IAA+C,CAAC;IACpD,IAAI,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAEhD,SAAS,WAAW;QAClB,SAAS,GAAG,IAAI,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,IAAI,EAAE;YAAE,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;YACL,UAAU,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACpC,WAAW,EAAE,CAAC;YACd,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE;gBAAE,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,WAAW;QACX,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU;QAC9B,QAAQ,CAAC,GAAY;YACnB,wDAAwD;YACxD,IAAI,KAAK,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE;oBACjE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,WAAW,CAChC,KAAkB,EAClB,MAAwB;IAExB,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,cAAc,CACnC,QAAgB,EAChB,MAAwB,EACxB,OAAsC,EAAE;IAExC,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAqC,CAAC;IAC1C,IAAI,KAA6B,CAAC;IAElC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QACzD,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACrC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjD,iEAAiE;YACjE,qEAAqE;YACrE,sEAAsE;YACtE,kCAAkC;YAClC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,KAAK,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,QAAQ;QAAE,OAAO;IACrB,yEAAyE;IACzE,4EAA4E;IAC5E,qEAAqE;IACrE,wEAAwE;IACxE,4EAA4E;IAC5E,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,CAAC,IAAI,CAAC;QACZ,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,EAAE,eAAe;YAClC,CAAC,CAAC,KAAK,KAAK,CAAC,eAAe,OAAO,KAAK,CAAC,YAAY,mCAAmC;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,aAAa,CACrB,QAAQ,EACR,SAAS,EACT,GAAG,QAAQ,6CAA6C,KAAK,oCAAoC,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,QAAQ,6BAA6B,CAAC,CAAC;AAC1F,CAAC;AAmBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,OAAwB,EAAE;IACzE,OAAO;QACL,GAAG,QAAQ;QACX,YAAY,CACV,QAAuB,EACvB,KAAuB,EACvB,aAA4B,EAAE;YAE9B,uEAAuE;YACvE,qDAAqD;YACrD,KAAK,SAAS,CAAC,CAAC,OAAO;gBACrB,2DAA2D;gBAC3D,MAAM,KAAK,GAAG,WAAW,CAAC;oBACxB,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC;gBAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE;oBACpD,GAAG,UAAU;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,GAAG,EAAE;wBACf,KAAK,CAAC,WAAW,EAAE,CAAC;wBACpB,cAAc,EAAE,EAAE,CAAC;oBACrB,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBACrD,kEAAkE;oBAClE,sDAAsD;oBACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,QAAQ,GAAG,IAAI,CAAC;wBAChB,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;oBACjD,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC,cAAc,KAAK,KAAK;gBAClC,CAAC,CAAC,OAAO,EAAE;gBACX,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE;oBACrC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM;iBAClD,CAAC,CAAC;QACT,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/zod.d.ts

@@ -5,8 +5,8 @@ import type { JsonObjectSchema } from "./types.ts";
  * A zod schema as the JSON Schema every provider's tool contract wants.
  *
  * `$schema` is dropped. zod emits the dialect URI at the root, and a provider
- * validating a tool's `parameters` against its own supported subset — OpenAI
- * under `strict: true`, Gemini's `parametersJsonSchema` — rejects the whole
+ * validating a tool's `parameters` against its own supported subset (OpenAI
+ * under `strict: true`, Gemini's `parametersJsonSchema`) rejects the whole
  * tool over that one key, with a message that names neither zod nor the field.
  */
 export declare function toJsonObjectSchema(schema: z.ZodType, label?: string): JsonObjectSchema;
@@ -26,13 +26,13 @@ export interface ZodToolSpec<I, O> {
      * rejecting the call. Worth it for a TERMINAL tool, which gets no second
      * chance: a forced-submit salvage turn runs exactly once, and discarding an
      * otherwise-valid answer over a few extra characters loses the whole run.
-     * Off by default — an ordinary tool can simply be called again.
+     * Off by default: an ordinary tool can simply be called again.
      */
     clampOverflow?: boolean;
 }
 /**
  * A tool whose arguments are validated by zod, with the failure reported to
- * the MODEL in words it can act on — `topic: expected string, received number`
+ * the model in words it can act on. `topic: expected string, received number`
  * beats a stack trace it cannot read.
  */
 export declare function zodTool<I, O>(spec: ZodToolSpec<I, O>): Tool<I, O>;

package/dist/zod.js

@@ -10,8 +10,8 @@ import { clampToSchema } from "./schema.js";
  * A zod schema as the JSON Schema every provider's tool contract wants.
  *
  * `$schema` is dropped. zod emits the dialect URI at the root, and a provider
- * validating a tool's `parameters` against its own supported subset — OpenAI
- * under `strict: true`, Gemini's `parametersJsonSchema` — rejects the whole
+ * validating a tool's `parameters` against its own supported subset (OpenAI
+ * under `strict: true`, Gemini's `parametersJsonSchema`) rejects the whole
  * tool over that one key, with a message that names neither zod nor the field.
  */
 export function toJsonObjectSchema(schema, label = "schema") {
@@ -26,7 +26,7 @@ export function toJsonObjectSchema(schema, label = "schema") {
 }
 /**
  * A tool whose arguments are validated by zod, with the failure reported to
- * the MODEL in words it can act on — `topic: expected string, received number`
+ * the model in words it can act on. `topic: expected string, received number`
  * beats a stack trace it cannot read.
  */
 export function zodTool(spec) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@providerkit/core",
-  "version": "0.21.1",
+  "version": "0.23.0",
   "description": "The layer under your agent loop: one seam for every LLM provider, plus the failure handling you only learn in production.",
   "type": "module",
   "license": "MIT",

package/src/attribution.ts

@@ -9,9 +9,9 @@
 // HTTP header names are case-insensitive but this seam carries them as a
 // plain record, so `http-referer` and `HTTP-Referer` must mean the same opt-out.
 export interface Attribution {
-  /** Site URL, sent as `HTTP-Referer` — e.g. "https://your.app". */
+  /** Site URL, sent as `HTTP-Referer` (e.g. "https://your.app"). */
   siteUrl?: string;
-  /** App name, sent as `X-Title` — e.g. "Your App". */
+  /** App name, sent as `X-Title` (e.g. "Your App"). */
   siteName?: string;
 }
 

package/src/auth/flows.ts

@@ -8,6 +8,7 @@ import {
   accountFromToken,
   asRecord,
   authError,
+  authFetch,
   generatePKCE,
   jwtClaims,
   num,
@@ -308,7 +309,7 @@ export function copilotHeaders(appName: string, turn: "user" | "agent"): Record<
 }
 
 async function mintCopilotToken(host: AuthHost, githubToken: string): Promise<Credential> {
-  const res = await (host.fetchImpl ?? fetch)(COPILOT_TOKEN_URL, {
+  const res = await authFetch(host, COPILOT_TOKEN_URL, {
     headers: {
       Accept: "application/json",
       Authorization: `Bearer ${githubToken}`,
@@ -361,7 +362,7 @@ async function refreshCopilot(host: AuthHost, credential: Credential): Promise<C
  *  lookup did, so any failure means no name. */
 async function githubLogin(host: AuthHost, githubToken: string): Promise<string | undefined> {
   try {
-    const res = await (host.fetchImpl ?? fetch)(GITHUB_USER_URL, {
+    const res = await authFetch(host, GITHUB_USER_URL, {
       headers: { Accept: "application/json", Authorization: `Bearer ${githubToken}` },
     });
     return res.ok ? str(asRecord(await res.json()).login) : undefined;
@@ -405,7 +406,7 @@ const META_KEY_URL = "https://api.meta.ai/muse-code/key";
 const META_KEY_LIFETIME_MS = 24 * 60 * 60 * 1000;
 
 async function mintMetaKey(host: AuthHost, identityToken: string): Promise<Credential> {
-  const res = await (host.fetchImpl ?? fetch)(META_KEY_URL, {
+  const res = await authFetch(host, META_KEY_URL, {
     method: "POST",
     headers: {
       Accept: "application/json",
@@ -494,7 +495,7 @@ function openrouterFlow(host: AuthHost): AuthFlow {
         redirectUri: OPENROUTER.redirectUri,
         signal,
       });
-      const res = await (host.fetchImpl ?? fetch)(OPENROUTER.keysUrl, {
+      const res = await authFetch(host, OPENROUTER.keysUrl, {
         method: "POST",
         headers: { "Content-Type": "application/json", Accept: "application/json" },
         body: JSON.stringify({ code, code_verifier: verifier, code_challenge_method: "S256" }),

package/src/auth/index.ts

@@ -5,3 +5,4 @@ export * from "./oauth.ts";
 export * from "./device.ts";
 export * from "./flows.ts";
 export * from "./token-source.ts";
+export * from "./with-token.ts";

package/src/auth/oauth.ts

@@ -25,6 +25,8 @@ export interface AuthHost {
   }): Promise<string>;
   /** Replaces `fetch`, for tests. */
   fetchImpl?: typeof fetch;
+  /** How long one request to a sign-in server may take, in ms. Default 30 s. */
+  timeoutMs?: number;
 }
 
 /** The stored result of a sign-in. */
@@ -76,6 +78,26 @@ export function authError(
 /** Refresh this long before the server's own expiry. */
 export const REFRESH_SKEW_MS = 5 * 60 * 1000;
 
+/** The deadline cc-proxy puts on its own token requests. */
+const AUTH_TIMEOUT_MS = 30_000;
+
+/**
+ * `fetch` with a deadline, for every request in `auth/`.
+ *
+ * A sign-in server that accepts the connection and never answers would hold
+ * the one shared refresh forever, and every call waiting on it with it. No
+ * clock above this one cuts it: the watchdog only starts once the model request
+ * is sent. The timeout rejects with a `TimeoutError`, which is not a refusal,
+ * so `tokenSource` keeps the stored credential.
+ */
+export function authFetch(host: AuthHost, url: string, init: RequestInit = {}): Promise<Response> {
+  const deadline = AbortSignal.timeout(host.timeoutMs ?? AUTH_TIMEOUT_MS);
+  return (host.fetchImpl ?? fetch)(url, {
+    ...init,
+    signal: init.signal ? AbortSignal.any([init.signal, deadline]) : deadline,
+  });
+}
+
 export const str = (value: unknown): string | undefined =>
   typeof value === "string" && value.length > 0 ? value : undefined;
 
@@ -119,7 +141,7 @@ export async function postToken(
   opts: { encode: "json" | "form"; allowErrorBody?: boolean },
 ): Promise<Record<string, unknown>> {
   const json = opts.encode === "json";
-  const res = await (host.fetchImpl ?? fetch)(url, {
+  const res = await authFetch(host, url, {
     method: "POST",
     headers: {
       "Content-Type": json ? "application/json" : "application/x-www-form-urlencoded",

package/src/auth/token-source.ts

@@ -16,12 +16,16 @@ export interface TokenSourceOptions<C extends Credential = Credential> {
 
 export interface TokenSource<C extends Credential = Credential> {
   /** A credential whose `accessToken` is good now. Throws a `ProviderError`
-   *  coded `refresh_dead` when the user must sign in again. */
-  getToken(): Promise<C>;
+   *  coded `refresh_dead` when the user must sign in again.
+   *
+   *  Pass `rejected`, the access token a server just answered 401 to, to renew
+   *  it even though it has not expired. A server can refuse a token early: it
+   *  was revoked, or another client rotated it. */
+  getToken(opts?: { rejected?: string }): Promise<C>;
 }
 
 /**
- * Refresh when the stored credential has expired, and only then.
+ * Refresh when the stored credential has expired or was rejected, and only then.
  *
  * - Concurrent calls share one refresh and the result is saved before use.
  * - When the server rejects the refresh, the stored credential is reloaded. If
@@ -36,7 +40,20 @@ export interface TokenSource<C extends Credential = Credential> {
 export function tokenSource<C extends Credential>(options: TokenSourceOptions<C>): TokenSource<C> {
   let inFlight: Promise<C> | undefined;
 
-  async function refreshStored(stale: C): Promise<C> {
+  async function loadSignedIn(): Promise<C> {
+    const credential = await options.load();
+    if (!credential) throw authError("refresh_dead", "Not signed in. Sign in first.");
+    return credential;
+  }
+
+  async function refreshStored(rejected: string | undefined): Promise<C> {
+    // Read again inside the single flight. A caller whose read raced a refresh
+    // that had just saved would otherwise start a second one with the refresh
+    // token the first already spent. Five calls refused on one token is the
+    // normal case for that race, and a server that rotates refresh tokens may
+    // take a reused one as stolen and end the whole sign-in.
+    const stale = await loadSignedIn();
+    if (isUsable(stale, rejected)) return stale;
     try {
       const fresh = await options.refresh(stale);
       await options.save(fresh);
@@ -50,13 +67,10 @@ export function tokenSource<C extends Credential>(options: TokenSourceOptions<C>
   }
 
   return {
-    async getToken() {
-      const credential = await options.load();
-      if (!credential) {
-        throw authError("refresh_dead", "Not signed in. Sign in first.");
-      }
-      if (Date.now() < credential.expiresAt) return credential;
-      inFlight ??= refreshStored(credential).finally(() => {
+    async getToken({ rejected } = {}) {
+      const credential = await loadSignedIn();
+      if (isUsable(credential, rejected)) return credential;
+      inFlight ??= refreshStored(rejected).finally(() => {
         inFlight = undefined;
       });
       return inFlight;
@@ -64,6 +78,11 @@ export function tokenSource<C extends Credential>(options: TokenSourceOptions<C>
   };
 }
 
+/** Unexpired, and not the token a server just refused. */
+function isUsable(credential: Credential, rejected: string | undefined): boolean {
+  return Date.now() < credential.expiresAt && credential.accessToken !== rejected;
+}
+
 /** A refresh the server turned down for good, as opposed to one that never
  *  reached it or came back unreadable. */
 function isRejected(error: unknown): error is ProviderError {

package/src/auth/with-token.ts

@@ -0,0 +1,97 @@
+// A provider that signs every call with the stored sign-in, and renews the token
+// once when a server refuses it before it expired. The sibling of
+// `withKeyPool`: that one rotates between keys, this one renews the one token.
+//
+// Type-only imports from the sign-in side, so core's root can export this
+// without pulling the flows in.
+import { ProviderError } from "../errors.ts";
+import type { PresetProviderConfig } from "../providers/factory.ts";
+import type { Provider } from "../types.ts";
+import type { Credential } from "./oauth.ts";
+import type { TokenSource } from "./token-source.ts";
+
+/** The credential half of `PresetProviderConfig`, so `build` can spread it in. */
+export type TokenAuth = Pick<PresetProviderConfig, "apiKey" | "baseUrl" | "headers">;
+
+/**
+ * Give any provider the signed-in user's token, read fresh on every call.
+ *
+ * ```ts
+ * const provider = withToken(token, (auth) => createPresetProvider("github-copilot", auth));
+ * ```
+ *
+ * `build` runs once per attempt and must do no I/O, like `withKeyPool`'s
+ * factory. It gets the access token as `apiKey`, the credential's own host as
+ * `baseUrl` (Copilot gives each plan its own) and its `ChatGPT-Account-Id`
+ * header, which the Codex backend refuses the request without. To add headers
+ * of your own, merge them with `auth.headers` rather than replacing them.
+ *
+ * A 401 before any output renews the token and replays the call once: a token
+ * can be refused before its expiry, and without this the caller sees an auth
+ * failure that a fallback pool benches for an hour. A second 401 is a real one
+ * and surfaces. A 401 after output never replays (invariant 1).
+ *
+ * Only 401 counts. A 400 or 403 on a model call is a bad request or a plan
+ * that lacks the model, and a new token fixes neither.
+ */
+export function withToken<C extends Credential>(
+  source: TokenSource<C>,
+  build: (auth: TokenAuth) => Provider,
+): Provider {
+  // Building does no I/O, so a throwaway instance reads `id` and `model`
+  // without a token.
+  const identity = build({ apiKey: "" });
+
+  return {
+    id: identity.id,
+    model: identity.model,
+
+    async *createStream(messages, tools, opts = {}) {
+      const credential = await unlessAborted(source.getToken(), opts.signal);
+      let emitted = false;
+      try {
+        for await (const chunk of build(authOf(credential)).createStream(messages, tools, opts)) {
+          emitted = true;
+          yield chunk;
+        }
+        return;
+      } catch (error) {
+        if (emitted || !(error instanceof ProviderError) || error.status !== 401) throw error;
+      }
+      const renewed = await unlessAborted(
+        source.getToken({ rejected: credential.accessToken }),
+        opts.signal,
+      );
+      yield* build(authOf(renewed)).createStream(messages, tools, opts);
+    },
+  };
+}
+
+function authOf(credential: Credential): TokenAuth {
+  return {
+    apiKey: credential.accessToken,
+    ...(credential.baseUrl ? { baseUrl: credential.baseUrl } : {}),
+    ...(credential.chatgptAccountId
+      ? { headers: { "ChatGPT-Account-Id": credential.chatgptAccountId } }
+      : {}),
+  };
+}
+
+/**
+ * Wait for the token, or reject with the caller's abort, whichever is first.
+ *
+ * The refresh itself is never aborted. It is shared by every caller, and once
+ * its POST is out the server may already have rotated the refresh token, so
+ * abandoning it before the save loses the only copy of the new one. And
+ * without the race an unanswered refresh would outlive the watchdog, which
+ * aborts the signal but never races a read.
+ */
+function unlessAborted<T>(pending: Promise<T>, signal: AbortSignal | undefined): Promise<T> {
+  if (!signal) return pending;
+  return new Promise<T>((resolve, reject) => {
+    const onAbort = () => reject(signal.reason);
+    if (signal.aborted) onAbort();
+    else signal.addEventListener("abort", onAbort, { once: true });
+    pending.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+  });
+}

package/src/capability.ts

@@ -18,12 +18,12 @@
 
 import type { JsonWithTools, Provider } from "./types.ts";
 
-/** Nothing a model can answer from memory — so a tool call is the only correct
- *  turn, and NOT making one is a real signal rather than a judgement call. */
+/** A question the model cannot answer from memory, so a tool call is the only
+ *  correct turn. Not making one is a real signal rather than a judgement call. */
 const PROBE_TOOL = {
   name: "get_current_time",
   description:
-    "The only source of the current time. You cannot know the time without calling this — never answer a time question from memory or guess.",
+    "The only source of the current time. You cannot know the time without calling this. Never answer a time question from memory or guess.",
   inputSchema: {
     type: "object" as const,
     properties: { timezone: { type: "string", description: "IANA timezone, e.g. Asia/Tokyo" } },
@@ -46,7 +46,7 @@ const SHAPES: JsonWithTools[] = ["response_format", "prompt"];
 export interface JsonWithToolsProbe {
   /**
    * The shape to configure, or `null` when neither called the tool on every
-   * sample — that model cannot be trusted with tools and a schema together,
+   * sample. That model cannot be trusted with tools and a schema together,
    * whichever way the schema rides, and the honest fix is a different model.
    */
   use: JsonWithTools | null;
@@ -58,8 +58,8 @@ export interface JsonWithToolsProbe {
 
 export interface ProbeOptions {
   /**
-   * Samples per shape. Above one because the interesting failures are partial —
-   * `gemini-3.8-flash` called its tool 3/10 — and a single sample reports a
+   * Samples per shape. Above one because the interesting failures are partial:
+   * `gemini-3.8-flash` called its tool 3/10. A single sample reports a
    * coin flip as a capability. A shape passes only when EVERY sample calls.
    */
   samples?: number;
@@ -95,12 +95,12 @@ async function callsTool(
 
 /**
  * Ask a model, on the wire, which {@link JsonWithTools} shape it actually
- * serves — then configure the provider with `probe.use`.
+ * serves. Then configure the provider with `probe.use`.
  *
  * Both shapes are always tried, because a result you can read beats a result
  * you have to trust: `calls` is the table to log, and "0/3 and 3/3" is what
  * makes a later regression obvious. It costs `samples × 2` short calls, made
- * one after another, once, at whatever moment the app decides to ask — boot is
+ * one after another, once, at whatever moment the app decides to ask. Boot is
  * the usual one.
  *
  * Probe each provider on its own, never a fallback chain: the shape is a fact
@@ -117,8 +117,8 @@ async function callsTool(
  * report "this model cannot call tools", which is a much worse thing to
  * believe than "the call failed".
  *
- * What it catches is the structural failure — the model that CANNOT emit the
- * call, every time, on the easiest question there is. A model that is merely
+ * It catches a structural failure: a model that cannot emit the call, every
+ * time, on the easiest question there is. A model that is merely
  * unreliable will pass: `gemini-3.8-flash` answers this probe 3/3 and a real
  * sales turn 3/10. That is the right line to draw. A harder probe would start
  * failing good models for being terse, and "sometimes forgets its tools" is a
@@ -226,8 +226,8 @@ function normalizeId(id: string): string {
  * - `deepseek/deepseek-v4.1-flash` matches `deepseek-v4.1-flash`
  * - `accounts/fireworks/models/glm-5p3-flash` matches `glm-5.3-flash`
  *
- * Never throws — if the catalog cannot be retrieved or the model is unknown,
- * returns `undefined` so capability lookups never break caller execution.
+ * Never throws. If the catalog cannot be retrieved or the model is unknown,
+ * it returns `undefined` so capability lookups never break caller execution.
  */
 export async function resolveModelCapabilities(
   modelId: string,

package/src/context.ts

@@ -1,21 +1,22 @@
-// Deciding when a conversation no longer fits, and where to cut it.
+// Deciding when a conversation no longer fits, where to cut it, and how to
+// make a saved one valid to send again.
 //
 // Everything here is pure and testable. The model call that writes the summary
 // and the row that stores it belong to the caller — what is decidable without
 // I/O is decided here.
-import type { ChatMessage } from "./types.ts";
+import type { ChatMessage, ToolCall } from "./types.ts";
 
 /**
  * What the answer needs after the prompt: an output budget, plus the tools'
  * own schemas, plus the slack no provider documents.
  *
- * Absolute rather than a percentage on purpose — a 1M window does not need a
+ * Absolute rather than a percentage on purpose: a 1M window does not need a
  * 100k cushion, and a 128k window needs more than 12k.
  */
 export const CONTEXT_RESERVE_TOKENS = 32_000;
 
 /**
- * Four characters per token — the rule of thumb every provider's own
+ * Four characters per token is the rule of thumb every provider's own
  * calculator agrees with to within a fifth, which is all the precision this
  * needs. It decides WHEN to fold: folding one turn early costs a cheap model
  * call, folding one turn late costs the whole turn.
@@ -64,7 +65,7 @@ export function conversationTokens(messages: readonly ChatMessage[]): number {
 }
 
 /**
- * The provider's own input count says the wall is close — fold before the next
+ * The provider's own input count says the limit is close. Fold before the next
  * step rather than after the 400.
  *
  * Takes the REPORTED count, not an estimate, because it is the only figure
@@ -99,7 +100,7 @@ export function historyBudgetTokens(contextWindow: number): number {
  *
  *  1. Never split a tool call from its result. Every provider rejects a tool
  *     result whose call is missing, so a cut landing between them produces a
- *     400 on the very next turn — the failure compaction was called to avoid.
+ *     400 on the very next turn, the failure compaction was called to avoid.
  *  2. Never cut into the system prompt. It is not history.
  *
  * Returns the index the kept tail starts at, or 0 when everything already fits.
@@ -153,6 +154,140 @@ export function applyCompaction(
   ];
 }
 
+type ToolResult = Extract<ChatMessage, { role: "tool" }>;
+
+/** What a call with no result answers, by whether running it again is safe.
+ *  The model reads this and decides whether to call again, so the two must
+ *  differ on exactly that. */
+const INTERRUPTED_READ_ONLY =
+  "This call was interrupted before it returned. It changed nothing, so it is safe to call again.";
+const INTERRUPTED =
+  "This call was interrupted before it returned. It may have partly run, so check its effect before calling it again.";
+
+/** `id`, or `id_2`, `id_3`… whichever is free first. Only ids already handed
+ *  out are consulted, so an id never depends on what comes after it. */
+function freshId(id: string, used: Set<string>): string {
+  let fresh = id;
+  for (let k = 2; used.has(fresh); k++) fresh = `${id}_${k}`;
+  used.add(fresh);
+  return fresh;
+}
+
+interface Span {
+  calls: ToolCall[];
+  vendorIds: string[];
+  results: (ToolResult | undefined)[];
+  rest: ChatMessage[];
+}
+
+/** The first call in the span asked under `id` that has no result yet, or -1.
+ *  First unanswered rather than first: two calls in one reply can share an id,
+ *  and their results then pair in order. */
+function openSlot(span: Span, id: string): number {
+  return span.vendorIds.findIndex((asked, i) => asked === id && !span.results[i]);
+}
+
+/** A result with no call to answer, kept as words the model can still read
+ *  instead of a `tool` message every provider answers with a 400. */
+function orphanNote(result: ToolResult): ChatMessage {
+  const text = `[Tool result for ${result.toolCallId}; the tool call is missing or already has a result]\n${result.content}`;
+  return {
+    role: "user",
+    content: result.images?.length ? [{ type: "text", text }, ...result.images] : text,
+  };
+}
+
+/**
+ * Make a saved, resumed or interrupted history valid to send: every call has
+ * exactly one result, right after it, under an id no other call uses.
+ *
+ * A span runs from an assistant message with tool calls to the next assistant
+ * message. Its results move to just after the calls, in call order, and the
+ * rest of the span (a steer the user typed while the tools ran) keeps its
+ * order after them. Then:
+ *
+ * - A call with no result in its span gets one under the same id, saying it was
+ *   interrupted. `isReadOnly` picks the wording; without it every tool may
+ *   have partly run. These calls come back as `interrupted`, under the ids
+ *   the request carries.
+ * - A result whose call is not in its span becomes a user note, images kept.
+ *   Paired against the span only, because chat and Messages both require the
+ *   result in the turn right after its call: a looser pairing still 400s.
+ * - A repeated id becomes `{id}_{k}`, the smallest free k, call and result
+ *   together. Kimi and Gemini restart their ids every reply
+ *   (`functions.search:0`, `call_0`), and Anthropic and Responses reject the
+ *   second use.
+ * - An empty id becomes `call_{message}_{call}`, never `normalizeToolId`'s
+ *   random fallback.
+ * - An assistant message with no calls and only whitespace is dropped, as if
+ *   it were never there, so a placeholder saved before the tools ran orphans
+ *   nothing.
+ *
+ * No side effects, and the same input always gives the same bytes: a span's
+ * output and every id depend only on what came before, so repairing a longer
+ * history keeps the shorter one's bytes and the prompt cache keeps hitting.
+ * Repairing a repaired history changes nothing. Every adapter here runs this
+ * on what it sends; call it yourself to know what `interrupted` holds.
+ */
+export function repairHistory(
+  messages: readonly ChatMessage[],
+  opts: { isReadOnly?: (toolName: string) => boolean } = {},
+): { messages: ChatMessage[]; interrupted: ToolCall[] } {
+  const out: ChatMessage[] = [];
+  const interrupted: ToolCall[] = [];
+  const used = new Set<string>();
+  // The open span: its calls as sent, the id the vendor gave each, the result
+  // each has found so far, and everything else in arrival order.
+  let span: Span | undefined;
+
+  const close = () => {
+    if (!span) return;
+    for (const [i, call] of span.calls.entries()) {
+      const result = span.results[i];
+      if (result) {
+        out.push(result);
+        continue;
+      }
+      interrupted.push(call);
+      const content = opts.isReadOnly?.(call.name) ? INTERRUPTED_READ_ONLY : INTERRUPTED;
+      out.push({ role: "tool", toolCallId: call.id, name: call.name, content });
+    }
+    out.push(...span.rest);
+    span = undefined;
+  };
+
+  for (const [index, message] of messages.entries()) {
+    if (message.role === "assistant") {
+      const calls = message.toolCalls ?? [];
+      if (calls.length === 0 && !message.content.trim()) continue;
+      close();
+      if (calls.length === 0) {
+        out.push(message);
+        continue;
+      }
+      const sent = calls.map((call, c) => {
+        const id = freshId(call.id.trim() ? call.id : `call_${index}_${c}`, used);
+        return id === call.id ? call : { ...call, id };
+      });
+      const renamed = sent.some((call, c) => call !== calls[c]);
+      out.push(renamed ? { ...message, toolCalls: sent } : message);
+      span = { calls: sent, vendorIds: calls.map((call) => call.id), results: [], rest: [] };
+    } else if (message.role === "tool") {
+      const slot = span ? openSlot(span, message.toolCallId) : -1;
+      if (span && slot !== -1) {
+        const id = span.calls[slot]!.id;
+        span.results[slot] = id === message.toolCallId ? message : { ...message, toolCallId: id };
+      } else {
+        (span?.rest ?? out).push(orphanNote(message));
+      }
+    } else {
+      (span?.rest ?? out).push(message);
+    }
+  }
+  close();
+  return { messages: out, interrupted };
+}
+
 /**
  * The context window for a model, when nothing volunteered one.
  *