@tangle-network/agent-app 0.47.24 → 0.47.25

package/dist/DesignCanvas-MWEYD6PR.js

@@ -0,0 +1,11 @@
+import {
+  DesignCanvas
+} from "./chunk-JAT6SOPK.js";
+import "./chunk-AKMQFCDL.js";
+import "./chunk-WYHFHTSQ.js";
+import "./chunk-IAY2DMKW.js";
+import "./chunk-TXD5HXLE.js";
+export {
+  DesignCanvas
+};
+//# sourceMappingURL=DesignCanvas-MWEYD6PR.js.map

package/dist/DesignCanvasEditor-UZ2S6BDD.js

@@ -0,0 +1,14 @@
+import {
+  DesignCanvasEditor
+} from "./chunk-JF423ASS.js";
+import "./chunk-JAT6SOPK.js";
+import "./chunk-Q2QKEV6J.js";
+import "./chunk-VHMZ3KUH.js";
+import "./chunk-AKMQFCDL.js";
+import "./chunk-WYHFHTSQ.js";
+import "./chunk-IAY2DMKW.js";
+import "./chunk-TXD5HXLE.js";
+export {
+  DesignCanvasEditor
+};
+//# sourceMappingURL=DesignCanvasEditor-UZ2S6BDD.js.map

package/dist/app-auth/index.js

@@ -2,9 +2,9 @@ import {
   createAuthGuard,
   createBetterAuthSessionCookieMinter,
   createTangleSsoHandlers
-} from "../chunk-TXM4SS46.js";
+} from "../chunk-CSMJM7YT.js";
 import "../chunk-JML7WKWU.js";
-import "../chunk-3YUI7WNW.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 
 // src/app-auth/index.ts

package/dist/chat-routes/index.js

@@ -61,9 +61,9 @@ import {
   rowIdOf,
   storeSupportsDraftPersistence,
   streamChatRouteAsSandboxEvents
-} from "../chunk-42NBWR4U.js";
+} from "../chunk-SYWEMKZR.js";
 import "../chunk-ZSSCVT6H.js";
-import "../chunk-3YUI7WNW.js";
+import "../chunk-IAY2DMKW.js";
 import {
   attachmentInputToPart,
   attachmentKindForMime,

package/dist/{chunk-G4CPEJNN.js → chunk-AKMQFCDL.js}

@@ -3,7 +3,7 @@ import {
   applySceneOperations,
   requireElement,
   requirePage
-} from "./chunk-A2XMTCER.js";
+} from "./chunk-WYHFHTSQ.js";
 
 // src/design-canvas-react/engine/command-stack.ts
 var SCENE_COMMAND_HISTORY_LIMIT = 200;
@@ -601,4 +601,4 @@ export {
   bindSlotCommand,
   setDocumentTitleCommand
 };
-//# sourceMappingURL=chunk-G4CPEJNN.js.map
+//# sourceMappingURL=chunk-AKMQFCDL.js.map

package/dist/{chunk-TXM4SS46.js → chunk-CSMJM7YT.js}

@@ -5,7 +5,7 @@ import {
   clearCookieHeader,
   readCookieValue,
   serializeCookie
-} from "./chunk-3YUI7WNW.js";
+} from "./chunk-IAY2DMKW.js";
 
 // src/platform/sso.ts
 var DEFAULT_STATE_TTL_SECONDS = 600;
@@ -374,4 +374,4 @@ export {
   createAdminGuard,
   assertBillableBalance
 };
-//# sourceMappingURL=chunk-TXM4SS46.js.map
+//# sourceMappingURL=chunk-CSMJM7YT.js.map

package/dist/{chunk-3YUI7WNW.js → chunk-IAY2DMKW.js}

@@ -176,7 +176,7 @@ function withFreeRouteLimit(options, handler) {
   };
 }
 
-// src/web/index.ts
+// src/web/core.ts
 async function parseJsonObjectBody(request) {
   let raw;
   try {
@@ -262,6 +262,32 @@ function assertMediaUrl(url, what = "media url") {
   throw new Error(`${what} must be http(s) or a rooted /api/ path (${shown})`);
 }
 
+// src/web/message-groups.ts
+function groupConversationMessages(items = []) {
+  let speaker = null;
+  let conversation;
+  let groupId;
+  return items.map((item, index) => {
+    if (item.conversationId !== void 0 && item.conversationId !== conversation) {
+      conversation = item.conversationId;
+      speaker = null;
+      groupId = void 0;
+    }
+    const role = item.kind === "thinking" ? "assistant" : !item.kind || item.kind === "message" ? item.role : void 0;
+    if (role === "user") {
+      speaker = null;
+      groupId = void 0;
+      return { ...item, isContinuation: false };
+    }
+    if (role !== "assistant") return item;
+    const current = item.speakerId ?? "assistant";
+    const isContinuation = speaker === current;
+    if (!isContinuation) groupId = String(item.id ?? `assistant-${index}`);
+    speaker = current;
+    return { ...item, isContinuation, groupId };
+  });
+}
+
 export {
   checkRateLimit,
   FREE_ROUTE_BUDGETS,
@@ -278,6 +304,7 @@ export {
   readCookieValue,
   STANDARD_SECURITY_HEADERS,
   addSecurityHeaders,
-  assertMediaUrl
+  assertMediaUrl,
+  groupConversationMessages
 };
-//# sourceMappingURL=chunk-3YUI7WNW.js.map
+//# sourceMappingURL=chunk-IAY2DMKW.js.map

package/dist/chunk-IAY2DMKW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/web/rate-limit.ts","../src/web/free-route-limit.ts","../src/web/core.ts","../src/web/message-groups.ts"],"sourcesContent":["/**\n * The KV-backed sliding-window rate limiter. Lives in its own leaf so policy\n * layers (`./free-route-limit`) can build on it without importing the web\n * barrel and creating an import cycle. Re-exported from `./index`, which is the\n * published surface.\n */\n\n/** Minimal KV contract (Cloudflare `KVNamespace` satisfies it structurally). */\nexport interface KvLike {\n  get(key: string): Promise<string | null>\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>\n}\n\n/** Describe the outcome of a rate limit check including allowance, remaining count, and reset time */\nexport interface RateLimitResult {\n  allowed: boolean\n  remaining: number\n  resetAt: number\n}\n\n/** KV-backed sliding-window rate limit. Stores recent timestamps per key,\n *  prunes the window, allows until `limit` is hit.\n *\n *  Read-modify-write is best-effort, NOT atomic: KV has no compare-and-swap, so\n *  two requests racing on the same key can each read the same pre-state and both\n *  write — a concurrent burst can momentarily admit up to one extra request per\n *  racing writer. This is acceptable for coarse abuse limiting; it is NOT a hard\n *  quota gate.\n *\n *  Fail-CLOSED on unreadable state: corrupt/non-array KV (a poisoned or\n *  truncated value) is treated as a full window, so a tampered key cannot reset\n *  the count and bypass the limiter. A bare `JSON.parse` here would throw and\n *  abort the request handler, silently disabling the limit (fail-open). */\nexport async function checkRateLimit(kv: KvLike, key: string, limit: number, windowSeconds: number): Promise<RateLimitResult> {\n  const now = Math.floor(Date.now() / 1000)\n  const windowStart = now - windowSeconds\n  const kvKey = `rl:${key}`\n  const raw = await kv.get(kvKey)\n  const parsed = parseRateLimitState(raw)\n  if (parsed === POISONED_STATE) {\n    // Unreadable state (parse threw or value is not a JSON array): deny rather\n    // than reset the window to empty. A poisoned key must not become a bypass.\n    return { allowed: false, remaining: 0, resetAt: now + windowSeconds }\n  }\n  const valid = parsed.filter((t) => t > windowStart)\n  if (valid.length >= limit) return { allowed: false, remaining: 0, resetAt: (valid[0] ?? now) + windowSeconds }\n  valid.push(now)\n  await kv.put(kvKey, JSON.stringify(valid), { expirationTtl: windowSeconds * 2 })\n  return { allowed: true, remaining: limit - valid.length, resetAt: now + windowSeconds }\n}\n\n/** Sentinel returned by `parseRateLimitState` when the stored value cannot be\n *  read as a timestamp array — distinct from an empty window so the limiter can\n *  fail closed instead of treating corruption as a fresh window. */\nconst POISONED_STATE = Symbol('rate-limit-poisoned-state')\n\n/** Parse stored rate-limit state into a timestamp array. Absent state is a\n *  fresh (empty) window. A value that fails to parse, or parses to a non-array,\n *  returns `POISONED_STATE`; numeric junk inside a valid array is dropped. */\nfunction parseRateLimitState(raw: string | null): number[] | typeof POISONED_STATE {\n  if (raw === null) return []\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(raw)\n  } catch {\n    return POISONED_STATE\n  }\n  if (!Array.isArray(parsed)) return POISONED_STATE\n  return parsed.filter((t): t is number => typeof t === 'number' && Number.isFinite(t))\n}\n","/**\n * Rate-limit policy for FREE routes: authenticated, unmetered, compute-bearing\n * endpoints.\n *\n * Billing meters the chat turn. Everything deterministic a product adds beside\n * it — a planning recompute fired on every slider drag, a redline diff, a\n * deadline computation — runs unmetered, so nothing bounds how much worker CPU\n * one authenticated caller can spend. `checkRateLimit` is the primitive; this\n * is the policy around it, so a route declares a cost class instead of each one\n * inventing a key format, a budget, and a denial response.\n *\n * Three rules this enforces that a hand-rolled call site usually does not:\n *\n * 1. **Identity is required.** A missing subject is denied, never pooled into a\n *    shared bucket and never quietly keyed by IP — a shared bucket makes one\n *    heavy user throttle everyone, and an IP key makes one NAT do the same.\n * 2. **A limiter that throws denies.** KV `get`/`put` failures are transport\n *    failures; treating them as \"allowed\" converts a KV outage into an\n *    unbounded-compute hole, which is exactly when the limiter matters most.\n * 3. **The denial is a typed, correctable outcome** — reason, HTTP status and\n *    `Retry-After` — so the caller answers the client rather than failing\n *    opaquely or, worse, continuing.\n *\n * ```ts\n * export const action = withFreeRouteLimit(\n *   {\n *     route: 'tax.plan.recompute',\n *     costClass: 'interactive',\n *     kv: ({ context }) => context.cloudflare.env.RATE_LIMIT_KV,\n *     identify: async ({ request }) => {\n *       const session = await requireSession(request)\n *       return { subject: session.userId, workspace: session.workspaceId }\n *     },\n *   },\n *   async ({ request }) => Response.json(recompute(await request.json())),\n * )\n * ```\n */\n\nimport { checkRateLimit, type KvLike, type RateLimitResult } from './rate-limit'\n\n/** Requests allowed per identity inside a sliding window. */\nexport interface RateLimitBudget {\n  limit: number\n  windowSeconds: number\n}\n\n/**\n * How expensive one call is, which is what picks the default budget.\n *\n * - `interactive` — a control the user drags or types into, recomputed per\n *   tick. Sized for sustained two-per-second interaction, so a real slider\n *   never trips it and a script still stops.\n * - `compute` — a derivation the user triggers deliberately (recalculate a\n *   plan, diff a document, compute a deadline set). The default.\n * - `heavy` — whole-document or whole-matter work measured in seconds of CPU.\n */\nexport type FreeRouteClass = 'interactive' | 'compute' | 'heavy'\n\n/** Default budget per cost class. A product overrides with an explicit\n *  `budget` when it has measured its own route. */\nexport const FREE_ROUTE_BUDGETS: Readonly<Record<FreeRouteClass, RateLimitBudget>> = Object.freeze({\n  interactive: Object.freeze({ limit: 120, windowSeconds: 60 }),\n  compute: Object.freeze({ limit: 30, windowSeconds: 60 }),\n  heavy: Object.freeze({ limit: 10, windowSeconds: 300 }),\n})\n\n/** A workspace's shared ceiling defaults to this many times one member's, so a\n *  multi-seat tenant is bounded without a single active member tripping it. */\nexport const WORKSPACE_BUDGET_MULTIPLIER = 5\n\n/** Why a call was refused. Every value is a REFUSAL — there is no reason code\n *  that lets the handler run. */\nexport type FreeRouteDenialReason =\n  /** No authenticated subject. Not correctable by waiting. */\n  | 'unidentified'\n  /** The window is full for this subject or workspace. */\n  | 'rate-limited'\n  /** The limiter itself failed (KV read/write threw). Denied, not passed. */\n  | 'limiter-unavailable'\n\n/** Which window refused the call. `null` when no window was consulted. */\nexport type FreeRouteDimension = 'subject' | 'workspace' | null\n\n/**\n * A correctable refusal: the caller maps `status` + `retryAfterSeconds` onto a\n * response (see {@link freeRouteLimitResponse}) so the client learns what to do\n * next. Carrying the limiter's own failure in `cause` keeps a KV outage\n * diagnosable instead of collapsing into a generic 429.\n */\nexport class FreeRouteLimitError extends Error {\n  readonly reason: FreeRouteDenialReason\n  readonly status: 401 | 429 | 503\n  readonly retryAfterSeconds: number\n  readonly dimension: FreeRouteDimension\n  readonly route: string\n\n  constructor(init: {\n    reason: FreeRouteDenialReason\n    status: 401 | 429 | 503\n    retryAfterSeconds: number\n    dimension: FreeRouteDimension\n    route: string\n    message: string\n    cause?: unknown\n  }) {\n    super(init.message, init.cause === undefined ? undefined : { cause: init.cause })\n    this.name = 'FreeRouteLimitError'\n    this.reason = init.reason\n    this.status = init.status\n    this.retryAfterSeconds = init.retryAfterSeconds\n    this.dimension = init.dimension\n    this.route = init.route\n  }\n}\n\n/** What remains of the binding window after an allowed call. */\nexport interface FreeRouteAllowance {\n  /** Remaining calls in whichever window is tightest. */\n  remaining: number\n  /** Unix seconds at which that window resets. */\n  resetAt: number\n  /** The budget that window enforces. */\n  budget: RateLimitBudget\n  /** Which window is tightest — `subject` unless a workspace ceiling binds. */\n  dimension: Exclude<FreeRouteDimension, null>\n}\n\n/** Typed outcome at the route boundary: an allowance, or a refusal that says\n *  how to correct it. There is no third state and no silent pass. */\nexport type FreeRouteLimitOutcome =\n  | { succeeded: true; value: FreeRouteAllowance }\n  | { succeeded: false; error: FreeRouteLimitError }\n\nexport interface FreeRouteLimitInput {\n  kv: KvLike\n  /** Stable route name. Part of the key, so two routes never share a window. */\n  route: string\n  /** The authenticated subject (user id). Absent or blank ⇒ denied. */\n  subject: string | null | undefined\n  /** Tenant the call belongs to. When present, a second, wider window bounds\n   *  the workspace as a whole. */\n  workspace?: string | null\n  /** Cost class picking the default budget. Ignored when `budget` is given.\n   *  Default `'compute'`. */\n  costClass?: FreeRouteClass\n  budget?: RateLimitBudget\n  /** Workspace ceiling. Defaults to the subject budget's limit multiplied by\n   *  {@link WORKSPACE_BUDGET_MULTIPLIER} over the same window. */\n  workspaceBudget?: RateLimitBudget\n}\n\n/** Key components are percent-encoded so a route name or subject containing the\n *  separator cannot be crafted to collide with another caller's window. */\nfunction limitKey(route: string, dimension: string, id: string): string {\n  return `free:${encodeURIComponent(route)}:${dimension}:${encodeURIComponent(id)}`\n}\n\nfunction assertBudget(budget: RateLimitBudget, label: string): void {\n  const valid =\n    Number.isInteger(budget.limit) &&\n    budget.limit >= 1 &&\n    Number.isInteger(budget.windowSeconds) &&\n    budget.windowSeconds >= 1\n  if (!valid) {\n    throw new Error(\n      `${label} must be positive integers (got limit=${budget.limit}, windowSeconds=${budget.windowSeconds})`,\n    )\n  }\n}\n\nfunction secondsUntil(resetAt: number): number {\n  return Math.max(1, resetAt - Math.floor(Date.now() / 1000))\n}\n\n/**\n * Run one window. A throw from KV becomes a `limiter-unavailable` refusal\n * rather than propagating — the caller must be able to answer 503 with a\n * `Retry-After` instead of the handler running or the route 500ing opaquely.\n */\nasync function runWindow(\n  kv: KvLike,\n  route: string,\n  dimension: Exclude<FreeRouteDimension, null>,\n  id: string,\n  budget: RateLimitBudget,\n): Promise<{ succeeded: true; value: RateLimitResult } | { succeeded: false; error: FreeRouteLimitError }> {\n  try {\n    const value = await checkRateLimit(kv, limitKey(route, dimension, id), budget.limit, budget.windowSeconds)\n    return { succeeded: true, value }\n  } catch (cause) {\n    return {\n      succeeded: false,\n      error: new FreeRouteLimitError({\n        reason: 'limiter-unavailable',\n        status: 503,\n        retryAfterSeconds: Math.min(budget.windowSeconds, 30),\n        dimension,\n        route,\n        message: `Rate limiter unavailable for route '${route}' — the request is refused rather than admitted unmetered`,\n        cause,\n      }),\n    }\n  }\n}\n\n/**\n * Decide whether one authenticated, unmetered call may run.\n *\n * Checks the subject's window first, then the workspace ceiling when a\n * workspace is supplied; the tighter of the two is what the allowance reports.\n * Every failure path returns a refusal — none returns an allowance.\n */\nexport async function checkFreeRouteLimit(input: FreeRouteLimitInput): Promise<FreeRouteLimitOutcome> {\n  const budget = input.budget ?? FREE_ROUTE_BUDGETS[input.costClass ?? 'compute']\n  assertBudget(budget, `Free-route budget for '${input.route}'`)\n  const workspaceBudget =\n    input.workspaceBudget ?? { limit: budget.limit * WORKSPACE_BUDGET_MULTIPLIER, windowSeconds: budget.windowSeconds }\n  if (input.workspace) assertBudget(workspaceBudget, `Free-route workspace budget for '${input.route}'`)\n\n  const subject = input.subject?.trim()\n  if (!subject) {\n    return {\n      succeeded: false,\n      error: new FreeRouteLimitError({\n        reason: 'unidentified',\n        status: 401,\n        // Not correctable by waiting: the caller must authenticate.\n        retryAfterSeconds: 0,\n        dimension: null,\n        route: input.route,\n        message: `Route '${input.route}' is authenticated-only — an unidentified caller cannot be rate limited, so it is refused`,\n      }),\n    }\n  }\n\n  const subjectWindow = await runWindow(input.kv, input.route, 'subject', subject, budget)\n  if (!subjectWindow.succeeded) return subjectWindow\n  if (!subjectWindow.value.allowed) {\n    return { succeeded: false, error: rateLimited(input.route, 'subject', subjectWindow.value) }\n  }\n\n  let tightest: { result: RateLimitResult; budget: RateLimitBudget; dimension: Exclude<FreeRouteDimension, null> } = {\n    result: subjectWindow.value,\n    budget,\n    dimension: 'subject',\n  }\n\n  if (input.workspace) {\n    const workspaceWindow = await runWindow(input.kv, input.route, 'workspace', input.workspace, workspaceBudget)\n    if (!workspaceWindow.succeeded) return workspaceWindow\n    if (!workspaceWindow.value.allowed) {\n      return { succeeded: false, error: rateLimited(input.route, 'workspace', workspaceWindow.value) }\n    }\n    if (workspaceWindow.value.remaining < tightest.result.remaining) {\n      tightest = { result: workspaceWindow.value, budget: workspaceBudget, dimension: 'workspace' }\n    }\n  }\n\n  return {\n    succeeded: true,\n    value: {\n      remaining: tightest.result.remaining,\n      resetAt: tightest.result.resetAt,\n      budget: tightest.budget,\n      dimension: tightest.dimension,\n    },\n  }\n}\n\nfunction rateLimited(\n  route: string,\n  dimension: Exclude<FreeRouteDimension, null>,\n  result: RateLimitResult,\n): FreeRouteLimitError {\n  const retryAfterSeconds = secondsUntil(result.resetAt)\n  return new FreeRouteLimitError({\n    reason: 'rate-limited',\n    status: 429,\n    retryAfterSeconds,\n    dimension,\n    route,\n    message: `Route '${route}' rate limit reached for this ${dimension}; retry in ${retryAfterSeconds}s`,\n  })\n}\n\nexport interface FreeRouteLimitResponseOptions {\n  /** Extra response headers (a product's security headers, CORS). */\n  headers?: Record<string, string>\n  /** Client-facing message. Defaults to the error's own message. */\n  message?: string\n}\n\n/** The refusal as an HTTP response: the error's status, a JSON body carrying\n *  the machine-readable `reason`, and `Retry-After` when waiting can fix it. */\nexport function freeRouteLimitResponse(\n  error: FreeRouteLimitError,\n  options: FreeRouteLimitResponseOptions = {},\n): Response {\n  const headers = new Headers(options.headers)\n  headers.set('Content-Type', 'application/json')\n  if (error.retryAfterSeconds > 0) headers.set('Retry-After', String(error.retryAfterSeconds))\n  return new Response(\n    JSON.stringify({\n      error: options.message ?? error.message,\n      reason: error.reason,\n      retryAfterSeconds: error.retryAfterSeconds,\n    }),\n    { status: error.status, headers },\n  )\n}\n\n/** The authenticated caller behind one request. */\nexport interface FreeRouteIdentity {\n  subject: string\n  workspace?: string | null\n}\n\nexport interface WithFreeRouteLimitOptions<TArgs> {\n  /** Stable route name; part of the key. */\n  route: string\n  costClass?: FreeRouteClass\n  budget?: RateLimitBudget\n  workspaceBudget?: RateLimitBudget\n  /** The KV binding for this request. */\n  kv: (args: TArgs) => KvLike\n  /**\n   * Resolve the authenticated caller. Return `null` for an unauthenticated\n   * request — the wrapper then refuses with 401 and the handler never runs.\n   *\n   * A THROW here propagates: an auth lookup that failed is not the same as an\n   * absent session, and the wrapper will not invent a status for it. The\n   * handler still does not run, so the failure stays closed.\n   */\n  identify: (args: TArgs) => Promise<FreeRouteIdentity | null> | FreeRouteIdentity | null\n  /** Build the refusal response. Defaults to {@link freeRouteLimitResponse}. */\n  onDenied?: (error: FreeRouteLimitError, args: TArgs) => Response | Promise<Response>\n}\n\n/**\n * Wrap an authenticated, unmetered, compute-bearing route handler in its\n * budget. The limit is applied BEFORE the handler is entered — including\n * before the request body is read — so a refused call costs a KV read, not the\n * compute the route exists to do.\n *\n * The handler's own response is returned untouched: this never rewrites status,\n * body or headers on the success path, so it cannot break a streaming or\n * pre-built response.\n *\n * `TArgs` is the router's handler-argument object (react-router's\n * `ActionFunctionArgs`, or any single-object shape a product uses).\n */\nexport function withFreeRouteLimit<TArgs>(\n  options: WithFreeRouteLimitOptions<TArgs>,\n  handler: (args: TArgs) => Response | Promise<Response>,\n): (args: TArgs) => Promise<Response> {\n  return async (args: TArgs): Promise<Response> => {\n    const identity = await options.identify(args)\n    const outcome = await checkFreeRouteLimit({\n      kv: options.kv(args),\n      route: options.route,\n      subject: identity?.subject,\n      workspace: identity?.workspace,\n      costClass: options.costClass,\n      budget: options.budget,\n      workspaceBudget: options.workspaceBudget,\n    })\n    if (!outcome.succeeded) {\n      return options.onDenied ? await options.onDenied(outcome.error, args) : freeRouteLimitResponse(outcome.error)\n    }\n    return await handler(args)\n  }\n}\n","/**\n * Web-boundary utilities every agent app's routes hand-roll: JSON body parsing\n * + narrowing, request-context extraction (real client IP behind Cloudflare),\n * a KV-backed sliding-window rate limiter, the free-route budget policy built\n * on it, and security response headers. Pure mechanism — no DB, no domain. The\n * KV is a structural interface so this needs no `@cloudflare/workers-types`\n * dependency.\n */\n\nexport * from './rate-limit'\nexport * from './free-route-limit'\n\nexport type JsonObject = Record<string, unknown>\n\n/** Parse + object-narrow a Request body. `[body, null]` on success, `[null,\n *  errorResponse]` on a non-object body (callers `if (err) return err`). */\nexport async function parseJsonObjectBody(request: Request): Promise<[JsonObject, null] | [null, Response]> {\n  let raw: unknown\n  try {\n    raw = await request.json()\n  } catch {\n    return [null, Response.json({ error: 'Invalid JSON body' }, { status: 400 })]\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return [null, Response.json({ error: 'Body must be a JSON object' }, { status: 400 })]\n  }\n  return [raw as JsonObject, null]\n}\n\n/** Narrow one required string field, 400 if missing/empty. */\nexport function requireString(body: JsonObject, field: string): string | Response {\n  const v = body[field]\n  if (typeof v !== 'string' || v.length === 0) {\n    return Response.json({ error: `Missing or non-string field: ${field}` }, { status: 400 })\n  }\n  return v\n}\n\n/** Define the context of a request including IP address, user agent, timestamp, and request ID */\nexport interface RequestContext {\n  ipAddress: string\n  userAgent: string\n  timestamp: string\n  requestId: string\n}\n\n/** Extract request context for audit trails. Uses `CF-Connecting-IP` for the\n *  real client IP behind Cloudflare. */\nexport function extractRequestContext(request: Request): RequestContext {\n  const ipAddress =\n    request.headers.get('CF-Connecting-IP') ??\n    request.headers.get('X-Forwarded-For')?.split(',')[0]?.trim() ??\n    '0.0.0.0'\n  return {\n    ipAddress,\n    userAgent: request.headers.get('User-Agent') ?? '',\n    timestamp: new Date().toISOString(),\n    requestId: crypto.randomUUID(),\n  }\n}\n\n/** Define options for configuring cookie attributes and behavior */\nexport interface CookieOptions {\n  name: string\n  /** Default '/'. */\n  path?: string\n  /** Default true. */\n  httpOnly?: boolean\n  /** Adds the `Secure` attribute. Default false. */\n  secure?: boolean\n  /** Default 'Lax'. */\n  sameSite?: 'Lax' | 'Strict' | 'None'\n  maxAgeSeconds?: number\n}\n\n/** Serialize a Set-Cookie header value: `name=encodeURIComponent(value)` plus\n *  attributes in Path / HttpOnly / SameSite / Max-Age / Secure order.\n *  Throws on `SameSite=None` without `secure` — browsers silently drop that\n *  combination, which would otherwise fail invisibly. */\nexport function serializeCookie(value: string, opts: CookieOptions): string {\n  if (opts.sameSite === 'None' && !opts.secure) {\n    throw new Error('SameSite=None cookies require secure: true (browsers reject them otherwise)')\n  }\n  const parts = [`${opts.name}=${encodeURIComponent(value)}`, `Path=${opts.path ?? '/'}`]\n  if (opts.httpOnly !== false) parts.push('HttpOnly')\n  parts.push(`SameSite=${opts.sameSite ?? 'Lax'}`)\n  if (opts.maxAgeSeconds !== undefined) parts.push(`Max-Age=${opts.maxAgeSeconds}`)\n  if (opts.secure) parts.push('Secure')\n  return parts.join('; ')\n}\n\n/** Set-Cookie header value that deletes the cookie (empty value, Max-Age=0). */\nexport function clearCookieHeader(opts: Omit<CookieOptions, 'maxAgeSeconds'>): string {\n  return serializeCookie('', { ...opts, maxAgeSeconds: 0 })\n}\n\n/** Read + decode one cookie from a Cookie request header; null when absent. */\nexport function readCookieValue(cookieHeader: string | null, name: string): string | null {\n  if (!cookieHeader) return null\n  for (const part of cookieHeader.split(/;\\s*/)) {\n    const [cookieName, ...rest] = part.split('=')\n    if (cookieName === name) {\n      try {\n        return decodeURIComponent(rest.join('='))\n      } catch {\n        return null\n      }\n    }\n  }\n  return null\n}\n\n/** Define options for configuring security-related HTTP headers including disclaimers and retention labels */\nexport interface SecurityHeaderOptions {\n  /** Product disclaimer (e.g. \"AI-powered tool. Not legal advice.\"). Omitted if absent. */\n  disclaimer?: string\n  /** Data-retention label (e.g. \"7-years\"). Omitted if absent. */\n  retention?: string\n  /** Extra headers to set. */\n  extra?: Record<string, string>\n}\n\n/** Canonical generic response headers used by {@link addSecurityHeaders}.\n * Exported so static-asset hosts can apply the same policy without copying\n * values that silently drift from Worker/API responses. */\nexport const STANDARD_SECURITY_HEADERS = Object.freeze({\n  'Strict-Transport-Security':\n    'max-age=31536000; includeSubDomains; preload',\n  'X-Content-Type-Options': 'nosniff',\n  'X-Frame-Options': 'SAMEORIGIN',\n  'Referrer-Policy': 'same-origin',\n  'X-XSS-Protection': '1; mode=block',\n} as const)\n\n/** Set standard security headers on a response (HSTS, nosniff, frame-options,\n *  referrer-policy, XSS) + optional product disclaimer/retention. The security\n *  set is generic; the disclaimer/retention are the product's. */\nexport function addSecurityHeaders(response: Response, opts: SecurityHeaderOptions = {}): Response {\n  for (const [name, value] of Object.entries(STANDARD_SECURITY_HEADERS)) {\n    response.headers.set(name, value)\n  }\n  if (opts.disclaimer) response.headers.set('X-AI-Disclaimer', opts.disclaimer)\n  if (opts.retention) response.headers.set('X-Data-Retention', opts.retention)\n  for (const [k, v] of Object.entries(opts.extra ?? {})) response.headers.set(k, v)\n  return response\n}\n\n/** Local-sandbox / inline schemes a stored media reference must never use.\n *  Reachable from neither a browser nor the product worker, and a `file:`/`data:`\n *  url is the tell of an agent substituting local ffmpeg output for a real\n *  provider artifact. `blob:` and `javascript:` are inert/active client schemes\n *  with no server reachability. */\nconst REJECTED_MEDIA_SCHEMES = ['file:', 'data:', 'blob:', 'javascript:', 'vbscript:'] as const\n\n/**\n * Canonical media-reference boundary shared by every surface that persists a\n * media url (sequences clips, design-canvas image/video src). The ONE rule:\n * remote `http(s)` or a rooted `/api/` path are allowed; everything else is\n * rejected, with a named reason for known-bad local/inline schemes so the\n * thrown message is actionable for an LLM planner. The url is trimmed before\n * the scheme check so leading whitespace cannot smuggle a rejected scheme past\n * a naive `startsWith`.\n *\n * @param what - noun for the error message (e.g. 'media url', 'src').\n */\nexport function assertMediaUrl(url: string, what = 'media url'): void {\n  const trimmed = url.trim()\n  if (/^https?:\\/\\//i.test(trimmed)) return\n  if (trimmed.startsWith('/api/')) return\n  const shown = trimmed.length > 96 ? `${trimmed.slice(0, 96)}…` : trimmed\n  const lower = trimmed.toLowerCase()\n  if (\n    REJECTED_MEDIA_SCHEMES.some((scheme) => lower.startsWith(scheme)) ||\n    lower.startsWith('/tmp/') ||\n    lower.startsWith('/home/')\n  ) {\n    throw new Error(`${what} must reference a provider http(s) URL or a rooted /api/ path, not a local sandbox file (${shown})`)\n  }\n  throw new Error(`${what} must be http(s) or a rooted /api/ path (${shown})`)\n}\n\nexport { isWorkspaceFileExportable } from './file-export'\n","/** Renderer-neutral attribution. Not a transcript merger or an execution state machine. */\nexport interface ConversationGroupItem {\n  id?: string | number\n  kind?: string\n  role?: string\n  /** A different assistant/persona must never inherit the previous speaker's label. */\n  speakerId?: string\n  /** Distinct threads must not be grouped if their rows share a viewport. */\n  conversationId?: string\n}\nexport type GroupedConversationItem<T> = T & { isContinuation?: boolean; groupId?: string }\n\n/**\n * Annotate assistant rows until an actual user message, speaker or conversation change.\n * Tool/progress notices do not interrupt the group. The first visible assistant is\n * always labeled, including when a renderer has paged earlier history away.\n * Pass display order; stored content, IDs, timestamps and input objects are untouched.\n */\nexport function groupConversationMessages<T extends ConversationGroupItem>(items: readonly T[] = []): GroupedConversationItem<T>[] {\n  let speaker: string | null = null\n  let conversation: string | undefined\n  let groupId: string | undefined\n  return items.map((item, index) => {\n    if (item.conversationId !== undefined && item.conversationId !== conversation) {\n      conversation = item.conversationId\n      speaker = null\n      groupId = undefined\n    }\n    const role = item.kind === 'thinking' ? 'assistant' : (!item.kind || item.kind === 'message' ? item.role : undefined)\n    if (role === 'user') { speaker = null; groupId = undefined; return { ...item, isContinuation: false } }\n    if (role !== 'assistant') return item\n    const current = item.speakerId ?? 'assistant'\n    const isContinuation = speaker === current\n    if (!isContinuation) groupId = String(item.id ?? `assistant-${index}`)\n    speaker = current\n    return { ...item, isContinuation, groupId }\n  })\n}\n"],"mappings":";AAiCA,eAAsB,eAAe,IAAY,KAAa,OAAe,eAAiD;AAC5H,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,cAAc,MAAM;AAC1B,QAAM,QAAQ,MAAM,GAAG;AACvB,QAAM,MAAM,MAAM,GAAG,IAAI,KAAK;AAC9B,QAAM,SAAS,oBAAoB,GAAG;AACtC,MAAI,WAAW,gBAAgB;AAG7B,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,MAAM,cAAc;AAAA,EACtE;AACA,QAAM,QAAQ,OAAO,OAAO,CAAC,MAAM,IAAI,WAAW;AAClD,MAAI,MAAM,UAAU,MAAO,QAAO,EAAE,SAAS,OAAO,WAAW,GAAG,UAAU,MAAM,CAAC,KAAK,OAAO,cAAc;AAC7G,QAAM,KAAK,GAAG;AACd,QAAM,GAAG,IAAI,OAAO,KAAK,UAAU,KAAK,GAAG,EAAE,eAAe,gBAAgB,EAAE,CAAC;AAC/E,SAAO,EAAE,SAAS,MAAM,WAAW,QAAQ,MAAM,QAAQ,SAAS,MAAM,cAAc;AACxF;AAKA,IAAM,iBAAiB,uBAAO,2BAA2B;AAKzD,SAAS,oBAAoB,KAAsD;AACjF,MAAI,QAAQ,KAAM,QAAO,CAAC;AAC1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnC,SAAO,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,CAAC;AACtF;;;ACRO,IAAM,qBAAwE,OAAO,OAAO;AAAA,EACjG,aAAa,OAAO,OAAO,EAAE,OAAO,KAAK,eAAe,GAAG,CAAC;AAAA,EAC5D,SAAS,OAAO,OAAO,EAAE,OAAO,IAAI,eAAe,GAAG,CAAC;AAAA,EACvD,OAAO,OAAO,OAAO,EAAE,OAAO,IAAI,eAAe,IAAI,CAAC;AACxD,CAAC;AAIM,IAAM,8BAA8B;AAqBpC,IAAM,sBAAN,cAAkC,MAAM;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,MAQT;AACD,UAAM,KAAK,SAAS,KAAK,UAAU,SAAY,SAAY,EAAE,OAAO,KAAK,MAAM,CAAC;AAChF,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,SAAS,KAAK;AACnB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,YAAY,KAAK;AACtB,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;AAwCA,SAAS,SAAS,OAAe,WAAmB,IAAoB;AACtE,SAAO,QAAQ,mBAAmB,KAAK,CAAC,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;AACjF;AAEA,SAAS,aAAa,QAAyB,OAAqB;AAClE,QAAM,QACJ,OAAO,UAAU,OAAO,KAAK,KAC7B,OAAO,SAAS,KAChB,OAAO,UAAU,OAAO,aAAa,KACrC,OAAO,iBAAiB;AAC1B,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,yCAAyC,OAAO,KAAK,mBAAmB,OAAO,aAAa;AAAA,IACtG;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAAyB;AAC7C,SAAO,KAAK,IAAI,GAAG,UAAU,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAC5D;AAOA,eAAe,UACb,IACA,OACA,WACA,IACA,QACyG;AACzG,MAAI;AACF,UAAM,QAAQ,MAAM,eAAe,IAAI,SAAS,OAAO,WAAW,EAAE,GAAG,OAAO,OAAO,OAAO,aAAa;AACzG,WAAO,EAAE,WAAW,MAAM,MAAM;AAAA,EAClC,SAAS,OAAO;AACd,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,IAAI,oBAAoB;AAAA,QAC7B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,mBAAmB,KAAK,IAAI,OAAO,eAAe,EAAE;AAAA,QACpD;AAAA,QACA;AAAA,QACA,SAAS,uCAAuC,KAAK;AAAA,QACrD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;AASA,eAAsB,oBAAoB,OAA4D;AACpG,QAAM,SAAS,MAAM,UAAU,mBAAmB,MAAM,aAAa,SAAS;AAC9E,eAAa,QAAQ,0BAA0B,MAAM,KAAK,GAAG;AAC7D,QAAM,kBACJ,MAAM,mBAAmB,EAAE,OAAO,OAAO,QAAQ,6BAA6B,eAAe,OAAO,cAAc;AACpH,MAAI,MAAM,UAAW,cAAa,iBAAiB,oCAAoC,MAAM,KAAK,GAAG;AAErG,QAAM,UAAU,MAAM,SAAS,KAAK;AACpC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,IAAI,oBAAoB;AAAA,QAC7B,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA,QAER,mBAAmB;AAAA,QACnB,WAAW;AAAA,QACX,OAAO,MAAM;AAAA,QACb,SAAS,UAAU,MAAM,KAAK;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,UAAU,MAAM,IAAI,MAAM,OAAO,WAAW,SAAS,MAAM;AACvF,MAAI,CAAC,cAAc,UAAW,QAAO;AACrC,MAAI,CAAC,cAAc,MAAM,SAAS;AAChC,WAAO,EAAE,WAAW,OAAO,OAAO,YAAY,MAAM,OAAO,WAAW,cAAc,KAAK,EAAE;AAAA,EAC7F;AAEA,MAAI,WAA+G;AAAA,IACjH,QAAQ,cAAc;AAAA,IACtB;AAAA,IACA,WAAW;AAAA,EACb;AAEA,MAAI,MAAM,WAAW;AACnB,UAAM,kBAAkB,MAAM,UAAU,MAAM,IAAI,MAAM,OAAO,aAAa,MAAM,WAAW,eAAe;AAC5G,QAAI,CAAC,gBAAgB,UAAW,QAAO;AACvC,QAAI,CAAC,gBAAgB,MAAM,SAAS;AAClC,aAAO,EAAE,WAAW,OAAO,OAAO,YAAY,MAAM,OAAO,aAAa,gBAAgB,KAAK,EAAE;AAAA,IACjG;AACA,QAAI,gBAAgB,MAAM,YAAY,SAAS,OAAO,WAAW;AAC/D,iBAAW,EAAE,QAAQ,gBAAgB,OAAO,QAAQ,iBAAiB,WAAW,YAAY;AAAA,IAC9F;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO;AAAA,MACL,WAAW,SAAS,OAAO;AAAA,MAC3B,SAAS,SAAS,OAAO;AAAA,MACzB,QAAQ,SAAS;AAAA,MACjB,WAAW,SAAS;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,WACA,QACqB;AACrB,QAAM,oBAAoB,aAAa,OAAO,OAAO;AACrD,SAAO,IAAI,oBAAoB;AAAA,IAC7B,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,UAAU,KAAK,iCAAiC,SAAS,cAAc,iBAAiB;AAAA,EACnG,CAAC;AACH;AAWO,SAAS,uBACd,OACA,UAAyC,CAAC,GAChC;AACV,QAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,UAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,MAAI,MAAM,oBAAoB,EAAG,SAAQ,IAAI,eAAe,OAAO,MAAM,iBAAiB,CAAC;AAC3F,SAAO,IAAI;AAAA,IACT,KAAK,UAAU;AAAA,MACb,OAAO,QAAQ,WAAW,MAAM;AAAA,MAChC,QAAQ,MAAM;AAAA,MACd,mBAAmB,MAAM;AAAA,IAC3B,CAAC;AAAA,IACD,EAAE,QAAQ,MAAM,QAAQ,QAAQ;AAAA,EAClC;AACF;AA0CO,SAAS,mBACd,SACA,SACoC;AACpC,SAAO,OAAO,SAAmC;AAC/C,UAAM,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC5C,UAAM,UAAU,MAAM,oBAAoB;AAAA,MACxC,IAAI,QAAQ,GAAG,IAAI;AAAA,MACnB,OAAO,QAAQ;AAAA,MACf,SAAS,UAAU;AAAA,MACnB,WAAW,UAAU;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,iBAAiB,QAAQ;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,aAAO,QAAQ,WAAW,MAAM,QAAQ,SAAS,QAAQ,OAAO,IAAI,IAAI,uBAAuB,QAAQ,KAAK;AAAA,IAC9G;AACA,WAAO,MAAM,QAAQ,IAAI;AAAA,EAC3B;AACF;;;ACpWA,eAAsB,oBAAoB,SAAkE;AAC1G,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,QAAQ,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC,MAAM,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC9E;AACA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAAG;AACjE,WAAO,CAAC,MAAM,SAAS,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EACvF;AACA,SAAO,CAAC,KAAmB,IAAI;AACjC;AAGO,SAAS,cAAc,MAAkB,OAAkC;AAChF,QAAM,IAAI,KAAK,KAAK;AACpB,MAAI,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG;AAC3C,WAAO,SAAS,KAAK,EAAE,OAAO,gCAAgC,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACA,SAAO;AACT;AAYO,SAAS,sBAAsB,SAAkC;AACtE,QAAM,YACJ,QAAQ,QAAQ,IAAI,kBAAkB,KACtC,QAAQ,QAAQ,IAAI,iBAAiB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAC5D;AACF,SAAO;AAAA,IACL;AAAA,IACA,WAAW,QAAQ,QAAQ,IAAI,YAAY,KAAK;AAAA,IAChD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,WAAW,OAAO,WAAW;AAAA,EAC/B;AACF;AAoBO,SAAS,gBAAgB,OAAe,MAA6B;AAC1E,MAAI,KAAK,aAAa,UAAU,CAAC,KAAK,QAAQ;AAC5C,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,mBAAmB,KAAK,CAAC,IAAI,QAAQ,KAAK,QAAQ,GAAG,EAAE;AACtF,MAAI,KAAK,aAAa,MAAO,OAAM,KAAK,UAAU;AAClD,QAAM,KAAK,YAAY,KAAK,YAAY,KAAK,EAAE;AAC/C,MAAI,KAAK,kBAAkB,OAAW,OAAM,KAAK,WAAW,KAAK,aAAa,EAAE;AAChF,MAAI,KAAK,OAAQ,OAAM,KAAK,QAAQ;AACpC,SAAO,MAAM,KAAK,IAAI;AACxB;AAGO,SAAS,kBAAkB,MAAoD;AACpF,SAAO,gBAAgB,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;AAC1D;AAGO,SAAS,gBAAgB,cAA6B,MAA6B;AACxF,MAAI,CAAC,aAAc,QAAO;AAC1B,aAAW,QAAQ,aAAa,MAAM,MAAM,GAAG;AAC7C,UAAM,CAAC,YAAY,GAAG,IAAI,IAAI,KAAK,MAAM,GAAG;AAC5C,QAAI,eAAe,MAAM;AACvB,UAAI;AACF,eAAO,mBAAmB,KAAK,KAAK,GAAG,CAAC;AAAA,MAC1C,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAeO,IAAM,4BAA4B,OAAO,OAAO;AAAA,EACrD,6BACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,oBAAoB;AACtB,CAAU;AAKH,SAAS,mBAAmB,UAAoB,OAA8B,CAAC,GAAa;AACjG,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,yBAAyB,GAAG;AACrE,aAAS,QAAQ,IAAI,MAAM,KAAK;AAAA,EAClC;AACA,MAAI,KAAK,WAAY,UAAS,QAAQ,IAAI,mBAAmB,KAAK,UAAU;AAC5E,MAAI,KAAK,UAAW,UAAS,QAAQ,IAAI,oBAAoB,KAAK,SAAS;AAC3E,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,EAAG,UAAS,QAAQ,IAAI,GAAG,CAAC;AAChF,SAAO;AACT;AAOA,IAAM,yBAAyB,CAAC,SAAS,SAAS,SAAS,eAAe,WAAW;AAa9E,SAAS,eAAe,KAAa,OAAO,aAAmB;AACpE,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,gBAAgB,KAAK,OAAO,EAAG;AACnC,MAAI,QAAQ,WAAW,OAAO,EAAG;AACjC,QAAM,QAAQ,QAAQ,SAAS,KAAK,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC,WAAM;AACjE,QAAM,QAAQ,QAAQ,YAAY;AAClC,MACE,uBAAuB,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC,KAChE,MAAM,WAAW,OAAO,KACxB,MAAM,WAAW,QAAQ,GACzB;AACA,UAAM,IAAI,MAAM,GAAG,IAAI,4FAA4F,KAAK,GAAG;AAAA,EAC7H;AACA,QAAM,IAAI,MAAM,GAAG,IAAI,4CAA4C,KAAK,GAAG;AAC7E;;;ACjKO,SAAS,0BAA2D,QAAsB,CAAC,GAAiC;AACjI,MAAI,UAAyB;AAC7B,MAAI;AACJ,MAAI;AACJ,SAAO,MAAM,IAAI,CAAC,MAAM,UAAU;AAChC,QAAI,KAAK,mBAAmB,UAAa,KAAK,mBAAmB,cAAc;AAC7E,qBAAe,KAAK;AACpB,gBAAU;AACV,gBAAU;AAAA,IACZ;AACA,UAAM,OAAO,KAAK,SAAS,aAAa,cAAe,CAAC,KAAK,QAAQ,KAAK,SAAS,YAAY,KAAK,OAAO;AAC3G,QAAI,SAAS,QAAQ;AAAE,gBAAU;AAAM,gBAAU;AAAW,aAAO,EAAE,GAAG,MAAM,gBAAgB,MAAM;AAAA,IAAE;AACtG,QAAI,SAAS,YAAa,QAAO;AACjC,UAAM,UAAU,KAAK,aAAa;AAClC,UAAM,iBAAiB,YAAY;AACnC,QAAI,CAAC,eAAgB,WAAU,OAAO,KAAK,MAAM,aAAa,KAAK,EAAE;AACrE,cAAU;AACV,WAAO,EAAE,GAAG,MAAM,gBAAgB,QAAQ;AAAA,EAC5C,CAAC;AACH;","names":[]}

package/dist/{chunk-54KJ54SY.js → chunk-JAT6SOPK.js}

@@ -13,13 +13,13 @@ import {
   setPageGuidesCommand,
   setPagePropsCommand,
   ungroupElementCommand
-} from "./chunk-G4CPEJNN.js";
+} from "./chunk-AKMQFCDL.js";
 import {
   SIZE_PRESETS,
   findElement,
   matchPreset,
   requirePage
-} from "./chunk-A2XMTCER.js";
+} from "./chunk-WYHFHTSQ.js";
 
 // src/design-canvas-react/components/DesignCanvas.tsx
 import { useCallback as useCallback2, useEffect as useEffect3, useMemo, useRef as useRef5, useState as useState5, useSyncExternalStore } from "react";
@@ -2261,4 +2261,4 @@ export {
   ExportControl,
   DesignCanvas
 };
-//# sourceMappingURL=chunk-54KJ54SY.js.map
+//# sourceMappingURL=chunk-JAT6SOPK.js.map

package/dist/{chunk-HUYTN7RI.js → chunk-JF423ASS.js}

@@ -4,7 +4,7 @@ import {
   DesignCanvas,
   PlusGlyph,
   ShapesGlyph
-} from "./chunk-54KJ54SY.js";
+} from "./chunk-JAT6SOPK.js";
 import {
   lightTheme
 } from "./chunk-Q2QKEV6J.js";
@@ -20,7 +20,7 @@ import {
   marqueeSelect,
   resolveExportParams,
   resolveNodeCachePixelRatio
-} from "./chunk-QEPLXYOE.js";
+} from "./chunk-VHMZ3KUH.js";
 import {
   addElementCommand,
   createSceneCommandStack,
@@ -29,13 +29,13 @@ import {
   multiSetAttrsCommand,
   setAttrsCommand,
   ungroupElementCommand
-} from "./chunk-G4CPEJNN.js";
+} from "./chunk-AKMQFCDL.js";
 import {
   SCENE_SCHEMA_VERSION,
   boundsIntersect,
   elementAabb,
   findElement
-} from "./chunk-A2XMTCER.js";
+} from "./chunk-WYHFHTSQ.js";
 
 // src/design-canvas-react/components/Workspace.tsx
 import {
@@ -1948,4 +1948,4 @@ export {
   Workspace,
   DesignCanvasEditor
 };
-//# sourceMappingURL=chunk-HUYTN7RI.js.map
+//# sourceMappingURL=chunk-JF423ASS.js.map

package/dist/{chunk-WOZSOPUZ.js → chunk-KX2GA3L6.js}

@@ -1,14 +1,14 @@
 // src/design-canvas-react/lazy.tsx
 import { lazy } from "react";
 var DesignCanvasLazy = lazy(
-  () => import("./DesignCanvasEditor-GVJO5SMH.js").then((m) => ({ default: m.DesignCanvasEditor }))
+  () => import("./DesignCanvasEditor-UZ2S6BDD.js").then((m) => ({ default: m.DesignCanvasEditor }))
 );
 var DesignCanvasChromeLazy = lazy(
-  () => import("./DesignCanvas-UPRRA4YG.js").then((m) => ({ default: m.DesignCanvas }))
+  () => import("./DesignCanvas-MWEYD6PR.js").then((m) => ({ default: m.DesignCanvas }))
 );
 
 export {
   DesignCanvasLazy,
   DesignCanvasChromeLazy
 };
-//# sourceMappingURL=chunk-WOZSOPUZ.js.map
+//# sourceMappingURL=chunk-KX2GA3L6.js.map

package/dist/{chunk-42NBWR4U.js → chunk-SYWEMKZR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-ZSSCVT6H.js";
 import {
   parseJsonObjectBody
-} from "./chunk-3YUI7WNW.js";
+} from "./chunk-IAY2DMKW.js";
 import {
   mentionInputToPart,
   toChatMessageParts
@@ -1046,4 +1046,4 @@ export {
   createChatTurnRoutes,
   streamChatRouteAsSandboxEvents
 };
-//# sourceMappingURL=chunk-42NBWR4U.js.map
+//# sourceMappingURL=chunk-SYWEMKZR.js.map

package/dist/{chunk-QEPLXYOE.js → chunk-VHMZ3KUH.js}

@@ -4,7 +4,7 @@ import {
   boundsIntersect,
   elementAabb,
   scaleForPreset
-} from "./chunk-A2XMTCER.js";
+} from "./chunk-WYHFHTSQ.js";
 
 // src/design-canvas-react/engine/snap.ts
 var KIND_PRIORITY = {
@@ -447,4 +447,4 @@ export {
   buildInsertImageOp,
   DEFAULT_INSERT_TEMPLATES
 };
-//# sourceMappingURL=chunk-QEPLXYOE.js.map
+//# sourceMappingURL=chunk-VHMZ3KUH.js.map

package/dist/{chunk-A2XMTCER.js → chunk-WYHFHTSQ.js}

@@ -1,6 +1,6 @@
 import {
   assertMediaUrl
-} from "./chunk-3YUI7WNW.js";
+} from "./chunk-IAY2DMKW.js";
 
 // src/design-canvas/model.ts
 var SCENE_SCHEMA_VERSION = 1;
@@ -1001,4 +1001,4 @@ export {
   scalePageForChannelPreset,
   bleedAwareExportRect
 };
-//# sourceMappingURL=chunk-A2XMTCER.js.map
+//# sourceMappingURL=chunk-WYHFHTSQ.js.map

package/dist/design-canvas/index.js

@@ -31,12 +31,12 @@ import {
   validateSceneOperation,
   validateSceneOperations,
   validateSlotValue
-} from "../chunk-A2XMTCER.js";
+} from "../chunk-WYHFHTSQ.js";
 import {
   buildScopedMcpServerEntry,
   createMcpToolHandler
 } from "../chunk-6A7MYOUI.js";
-import "../chunk-3YUI7WNW.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 
 // src/design-canvas/operations.ts

package/dist/design-canvas-react/engine.js

@@ -20,7 +20,7 @@ import {
   nudgeDelta,
   resolveExportParams,
   resolveNodeCachePixelRatio
-} from "../chunk-QEPLXYOE.js";
+} from "../chunk-VHMZ3KUH.js";
 import {
   SCENE_COMMAND_HISTORY_LIMIT,
   addElementCommand,
@@ -39,12 +39,12 @@ import {
   setPageGuidesCommand,
   setPagePropsCommand,
   ungroupElementCommand
-} from "../chunk-G4CPEJNN.js";
+} from "../chunk-AKMQFCDL.js";
 import {
   bleedAwareExportBounds,
   scaleForPreset
-} from "../chunk-A2XMTCER.js";
-import "../chunk-3YUI7WNW.js";
+} from "../chunk-WYHFHTSQ.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 export {
   DEFAULT_INSERT_TEMPLATES,

package/dist/design-canvas-react/index.js

@@ -12,7 +12,7 @@ import {
   downloadDataUrl,
   exportDocumentJson,
   exportPageDataUrl
-} from "../chunk-HUYTN7RI.js";
+} from "../chunk-JF423ASS.js";
 import {
   BTN,
   BTN_ACTIVE,
@@ -41,7 +41,7 @@ import {
   buildRulerTicks,
   formatRulerLabel,
   selectTickStep
-} from "../chunk-54KJ54SY.js";
+} from "../chunk-JAT6SOPK.js";
 import "../chunk-Q2QKEV6J.js";
 import "../chunk-ZN5J47UX.js";
 import {
@@ -65,7 +65,7 @@ import {
   nudgeDelta,
   resolveExportParams,
   resolveNodeCachePixelRatio
-} from "../chunk-QEPLXYOE.js";
+} from "../chunk-VHMZ3KUH.js";
 import {
   SCENE_COMMAND_HISTORY_LIMIT,
   addElementCommand,
@@ -84,17 +84,17 @@ import {
   setPageGuidesCommand,
   setPagePropsCommand,
   ungroupElementCommand
-} from "../chunk-G4CPEJNN.js";
+} from "../chunk-AKMQFCDL.js";
 import {
   assertSceneMediaSrc,
   bleedAwareExportBounds,
   scaleForPreset
-} from "../chunk-A2XMTCER.js";
+} from "../chunk-WYHFHTSQ.js";
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-WOZSOPUZ.js";
-import "../chunk-3YUI7WNW.js";
+} from "../chunk-KX2GA3L6.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 
 // src/design-canvas-react/components/CanvasInsertPanel.tsx

package/dist/design-canvas-react/lazy.js

@@ -1,7 +1,7 @@
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-WOZSOPUZ.js";
+} from "../chunk-KX2GA3L6.js";
 export {
   DesignCanvasChromeLazy,
   DesignCanvasLazy

package/dist/platform/index.js

@@ -13,12 +13,12 @@ import {
   resolveTangleSsoAccount,
   signSessionCookieValue,
   verifySignedSsoState
-} from "../chunk-TXM4SS46.js";
+} from "../chunk-CSMJM7YT.js";
 import {
   resolveTangleDevOrUserKey,
   resolveTangleExecutionEnvironment
 } from "../chunk-JML7WKWU.js";
-import "../chunk-3YUI7WNW.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 
 // src/platform/hub.ts

package/dist/public-consultation/index.js

@@ -1,9 +1,9 @@
 import {
   createChatTurnRoutes,
   streamChatRouteAsSandboxEvents
-} from "../chunk-42NBWR4U.js";
+} from "../chunk-SYWEMKZR.js";
 import "../chunk-ZSSCVT6H.js";
-import "../chunk-3YUI7WNW.js";
+import "../chunk-IAY2DMKW.js";
 import "../chunk-4PZE7XAM.js";
 import "../chunk-ZVEEWGDK.js";
 import "../chunk-X47R2IVO.js";

package/dist/sequences/index.js

@@ -18,7 +18,7 @@ import {
 } from "../chunk-6A7MYOUI.js";
 import {
   assertMediaUrl
-} from "../chunk-3YUI7WNW.js";
+} from "../chunk-IAY2DMKW.js";
 import "../chunk-TXD5HXLE.js";
 
 // src/sequences/operations.ts

package/dist/web/core.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Web-boundary utilities every agent app's routes hand-roll: JSON body parsing
+ * + narrowing, request-context extraction (real client IP behind Cloudflare),
+ * a KV-backed sliding-window rate limiter, the free-route budget policy built
+ * on it, and security response headers. Pure mechanism — no DB, no domain. The
+ * KV is a structural interface so this needs no `@cloudflare/workers-types`
+ * dependency.
+ */
+export * from './rate-limit';
+export * from './free-route-limit';
+export type JsonObject = Record<string, unknown>;
+/** Parse + object-narrow a Request body. `[body, null]` on success, `[null,
+ *  errorResponse]` on a non-object body (callers `if (err) return err`). */
+export declare function parseJsonObjectBody(request: Request): Promise<[JsonObject, null] | [null, Response]>;
+/** Narrow one required string field, 400 if missing/empty. */
+export declare function requireString(body: JsonObject, field: string): string | Response;
+/** Define the context of a request including IP address, user agent, timestamp, and request ID */
+export interface RequestContext {
+    ipAddress: string;
+    userAgent: string;
+    timestamp: string;
+    requestId: string;
+}
+/** Extract request context for audit trails. Uses `CF-Connecting-IP` for the
+ *  real client IP behind Cloudflare. */
+export declare function extractRequestContext(request: Request): RequestContext;
+/** Define options for configuring cookie attributes and behavior */
+export interface CookieOptions {
+    name: string;
+    /** Default '/'. */
+    path?: string;
+    /** Default true. */
+    httpOnly?: boolean;
+    /** Adds the `Secure` attribute. Default false. */
+    secure?: boolean;
+    /** Default 'Lax'. */
+    sameSite?: 'Lax' | 'Strict' | 'None';
+    maxAgeSeconds?: number;
+}
+/** Serialize a Set-Cookie header value: `name=encodeURIComponent(value)` plus
+ *  attributes in Path / HttpOnly / SameSite / Max-Age / Secure order.
+ *  Throws on `SameSite=None` without `secure` — browsers silently drop that
+ *  combination, which would otherwise fail invisibly. */
+export declare function serializeCookie(value: string, opts: CookieOptions): string;
+/** Set-Cookie header value that deletes the cookie (empty value, Max-Age=0). */
+export declare function clearCookieHeader(opts: Omit<CookieOptions, 'maxAgeSeconds'>): string;
+/** Read + decode one cookie from a Cookie request header; null when absent. */
+export declare function readCookieValue(cookieHeader: string | null, name: string): string | null;
+/** Define options for configuring security-related HTTP headers including disclaimers and retention labels */
+export interface SecurityHeaderOptions {
+    /** Product disclaimer (e.g. "AI-powered tool. Not legal advice."). Omitted if absent. */
+    disclaimer?: string;
+    /** Data-retention label (e.g. "7-years"). Omitted if absent. */
+    retention?: string;
+    /** Extra headers to set. */
+    extra?: Record<string, string>;
+}
+/** Canonical generic response headers used by {@link addSecurityHeaders}.
+ * Exported so static-asset hosts can apply the same policy without copying
+ * values that silently drift from Worker/API responses. */
+export declare const STANDARD_SECURITY_HEADERS: Readonly<{
+    readonly 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload';
+    readonly 'X-Content-Type-Options': 'nosniff';
+    readonly 'X-Frame-Options': 'SAMEORIGIN';
+    readonly 'Referrer-Policy': 'same-origin';
+    readonly 'X-XSS-Protection': '1; mode=block';
+}>;
+/** Set standard security headers on a response (HSTS, nosniff, frame-options,
+ *  referrer-policy, XSS) + optional product disclaimer/retention. The security
+ *  set is generic; the disclaimer/retention are the product's. */
+export declare function addSecurityHeaders(response: Response, opts?: SecurityHeaderOptions): Response;
+/**
+ * Canonical media-reference boundary shared by every surface that persists a
+ * media url (sequences clips, design-canvas image/video src). The ONE rule:
+ * remote `http(s)` or a rooted `/api/` path are allowed; everything else is
+ * rejected, with a named reason for known-bad local/inline schemes so the
+ * thrown message is actionable for an LLM planner. The url is trimmed before
+ * the scheme check so leading whitespace cannot smuggle a rejected scheme past
+ * a naive `startsWith`.
+ *
+ * @param what - noun for the error message (e.g. 'media url', 'src').
+ */
+export declare function assertMediaUrl(url: string, what?: string): void;
+export { isWorkspaceFileExportable } from './file-export';

package/dist/web/index.d.ts

@@ -1,84 +1,3 @@
-/**
- * Web-boundary utilities every agent app's routes hand-roll: JSON body parsing
- * + narrowing, request-context extraction (real client IP behind Cloudflare),
- * a KV-backed sliding-window rate limiter, the free-route budget policy built
- * on it, and security response headers. Pure mechanism — no DB, no domain. The
- * KV is a structural interface so this needs no `@cloudflare/workers-types`
- * dependency.
- */
-export * from './rate-limit';
-export * from './free-route-limit';
-export type JsonObject = Record<string, unknown>;
-/** Parse + object-narrow a Request body. `[body, null]` on success, `[null,
- *  errorResponse]` on a non-object body (callers `if (err) return err`). */
-export declare function parseJsonObjectBody(request: Request): Promise<[JsonObject, null] | [null, Response]>;
-/** Narrow one required string field, 400 if missing/empty. */
-export declare function requireString(body: JsonObject, field: string): string | Response;
-/** Define the context of a request including IP address, user agent, timestamp, and request ID */
-export interface RequestContext {
-    ipAddress: string;
-    userAgent: string;
-    timestamp: string;
-    requestId: string;
-}
-/** Extract request context for audit trails. Uses `CF-Connecting-IP` for the
- *  real client IP behind Cloudflare. */
-export declare function extractRequestContext(request: Request): RequestContext;
-/** Define options for configuring cookie attributes and behavior */
-export interface CookieOptions {
-    name: string;
-    /** Default '/'. */
-    path?: string;
-    /** Default true. */
-    httpOnly?: boolean;
-    /** Adds the `Secure` attribute. Default false. */
-    secure?: boolean;
-    /** Default 'Lax'. */
-    sameSite?: 'Lax' | 'Strict' | 'None';
-    maxAgeSeconds?: number;
-}
-/** Serialize a Set-Cookie header value: `name=encodeURIComponent(value)` plus
- *  attributes in Path / HttpOnly / SameSite / Max-Age / Secure order.
- *  Throws on `SameSite=None` without `secure` — browsers silently drop that
- *  combination, which would otherwise fail invisibly. */
-export declare function serializeCookie(value: string, opts: CookieOptions): string;
-/** Set-Cookie header value that deletes the cookie (empty value, Max-Age=0). */
-export declare function clearCookieHeader(opts: Omit<CookieOptions, 'maxAgeSeconds'>): string;
-/** Read + decode one cookie from a Cookie request header; null when absent. */
-export declare function readCookieValue(cookieHeader: string | null, name: string): string | null;
-/** Define options for configuring security-related HTTP headers including disclaimers and retention labels */
-export interface SecurityHeaderOptions {
-    /** Product disclaimer (e.g. "AI-powered tool. Not legal advice."). Omitted if absent. */
-    disclaimer?: string;
-    /** Data-retention label (e.g. "7-years"). Omitted if absent. */
-    retention?: string;
-    /** Extra headers to set. */
-    extra?: Record<string, string>;
-}
-/** Canonical generic response headers used by {@link addSecurityHeaders}.
- * Exported so static-asset hosts can apply the same policy without copying
- * values that silently drift from Worker/API responses. */
-export declare const STANDARD_SECURITY_HEADERS: Readonly<{
-    readonly 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload';
-    readonly 'X-Content-Type-Options': 'nosniff';
-    readonly 'X-Frame-Options': 'SAMEORIGIN';
-    readonly 'Referrer-Policy': 'same-origin';
-    readonly 'X-XSS-Protection': '1; mode=block';
-}>;
-/** Set standard security headers on a response (HSTS, nosniff, frame-options,
- *  referrer-policy, XSS) + optional product disclaimer/retention. The security
- *  set is generic; the disclaimer/retention are the product's. */
-export declare function addSecurityHeaders(response: Response, opts?: SecurityHeaderOptions): Response;
-/**
- * Canonical media-reference boundary shared by every surface that persists a
- * media url (sequences clips, design-canvas image/video src). The ONE rule:
- * remote `http(s)` or a rooted `/api/` path are allowed; everything else is
- * rejected, with a named reason for known-bad local/inline schemes so the
- * thrown message is actionable for an LLM planner. The url is trimmed before
- * the scheme check so leading whitespace cannot smuggle a rejected scheme past
- * a naive `startsWith`.
- *
- * @param what - noun for the error message (e.g. 'media url', 'src').
- */
-export declare function assertMediaUrl(url: string, what?: string): void;
-export { isWorkspaceFileExportable } from './file-export';
+/** Browser-safe application-boundary helpers. No React or execution-engine peers. */
+export * from './core';
+export * from './message-groups';

package/dist/web/index.js

@@ -10,12 +10,13 @@ import {
   clearCookieHeader,
   extractRequestContext,
   freeRouteLimitResponse,
+  groupConversationMessages,
   parseJsonObjectBody,
   readCookieValue,
   requireString,
   serializeCookie,
   withFreeRouteLimit
-} from "../chunk-3YUI7WNW.js";
+} from "../chunk-IAY2DMKW.js";
 import {
   isWorkspaceFileExportable
 } from "../chunk-TXD5HXLE.js";
@@ -31,6 +32,7 @@ export {
   clearCookieHeader,
   extractRequestContext,
   freeRouteLimitResponse,
+  groupConversationMessages,
   isWorkspaceFileExportable,
   parseJsonObjectBody,
   readCookieValue,

package/dist/web/message-groups.d.ts

@@ -0,0 +1,21 @@
+/** Renderer-neutral attribution. Not a transcript merger or an execution state machine. */
+export interface ConversationGroupItem {
+    id?: string | number;
+    kind?: string;
+    role?: string;
+    /** A different assistant/persona must never inherit the previous speaker's label. */
+    speakerId?: string;
+    /** Distinct threads must not be grouped if their rows share a viewport. */
+    conversationId?: string;
+}
+export type GroupedConversationItem<T> = T & {
+    isContinuation?: boolean;
+    groupId?: string;
+};
+/**
+ * Annotate assistant rows until an actual user message, speaker or conversation change.
+ * Tool/progress notices do not interrupt the group. The first visible assistant is
+ * always labeled, including when a renderer has paged earlier history away.
+ * Pass display order; stored content, IDs, timestamps and input objects are untouched.
+ */
+export declare function groupConversationMessages<T extends ConversationGroupItem>(items?: readonly T[]): GroupedConversationItem<T>[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.47.24",
+  "version": "0.47.25",
   "packageManager": "pnpm@11.24.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [

package/dist/DesignCanvas-UPRRA4YG.js

@@ -1,11 +0,0 @@
-import {
-  DesignCanvas
-} from "./chunk-54KJ54SY.js";
-import "./chunk-G4CPEJNN.js";
-import "./chunk-A2XMTCER.js";
-import "./chunk-3YUI7WNW.js";
-import "./chunk-TXD5HXLE.js";
-export {
-  DesignCanvas
-};
-//# sourceMappingURL=DesignCanvas-UPRRA4YG.js.map

package/dist/DesignCanvasEditor-GVJO5SMH.js

@@ -1,14 +0,0 @@
-import {
-  DesignCanvasEditor
-} from "./chunk-HUYTN7RI.js";
-import "./chunk-54KJ54SY.js";
-import "./chunk-Q2QKEV6J.js";
-import "./chunk-QEPLXYOE.js";
-import "./chunk-G4CPEJNN.js";
-import "./chunk-A2XMTCER.js";
-import "./chunk-3YUI7WNW.js";
-import "./chunk-TXD5HXLE.js";
-export {
-  DesignCanvasEditor
-};
-//# sourceMappingURL=DesignCanvasEditor-GVJO5SMH.js.map

package/dist/chunk-3YUI7WNW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/web/rate-limit.ts","../src/web/free-route-limit.ts","../src/web/index.ts"],"sourcesContent":["/**\n * The KV-backed sliding-window rate limiter. Lives in its own leaf so policy\n * layers (`./free-route-limit`) can build on it without importing the web\n * barrel and creating an import cycle. Re-exported from `./index`, which is the\n * published surface.\n */\n\n/** Minimal KV contract (Cloudflare `KVNamespace` satisfies it structurally). */\nexport interface KvLike {\n  get(key: string): Promise<string | null>\n  put(key: string, value: string, options?: { expirationTtl?: number }): Promise<void>\n}\n\n/** Describe the outcome of a rate limit check including allowance, remaining count, and reset time */\nexport interface RateLimitResult {\n  allowed: boolean\n  remaining: number\n  resetAt: number\n}\n\n/** KV-backed sliding-window rate limit. Stores recent timestamps per key,\n *  prunes the window, allows until `limit` is hit.\n *\n *  Read-modify-write is best-effort, NOT atomic: KV has no compare-and-swap, so\n *  two requests racing on the same key can each read the same pre-state and both\n *  write — a concurrent burst can momentarily admit up to one extra request per\n *  racing writer. This is acceptable for coarse abuse limiting; it is NOT a hard\n *  quota gate.\n *\n *  Fail-CLOSED on unreadable state: corrupt/non-array KV (a poisoned or\n *  truncated value) is treated as a full window, so a tampered key cannot reset\n *  the count and bypass the limiter. A bare `JSON.parse` here would throw and\n *  abort the request handler, silently disabling the limit (fail-open). */\nexport async function checkRateLimit(kv: KvLike, key: string, limit: number, windowSeconds: number): Promise<RateLimitResult> {\n  const now = Math.floor(Date.now() / 1000)\n  const windowStart = now - windowSeconds\n  const kvKey = `rl:${key}`\n  const raw = await kv.get(kvKey)\n  const parsed = parseRateLimitState(raw)\n  if (parsed === POISONED_STATE) {\n    // Unreadable state (parse threw or value is not a JSON array): deny rather\n    // than reset the window to empty. A poisoned key must not become a bypass.\n    return { allowed: false, remaining: 0, resetAt: now + windowSeconds }\n  }\n  const valid = parsed.filter((t) => t > windowStart)\n  if (valid.length >= limit) return { allowed: false, remaining: 0, resetAt: (valid[0] ?? now) + windowSeconds }\n  valid.push(now)\n  await kv.put(kvKey, JSON.stringify(valid), { expirationTtl: windowSeconds * 2 })\n  return { allowed: true, remaining: limit - valid.length, resetAt: now + windowSeconds }\n}\n\n/** Sentinel returned by `parseRateLimitState` when the stored value cannot be\n *  read as a timestamp array — distinct from an empty window so the limiter can\n *  fail closed instead of treating corruption as a fresh window. */\nconst POISONED_STATE = Symbol('rate-limit-poisoned-state')\n\n/** Parse stored rate-limit state into a timestamp array. Absent state is a\n *  fresh (empty) window. A value that fails to parse, or parses to a non-array,\n *  returns `POISONED_STATE`; numeric junk inside a valid array is dropped. */\nfunction parseRateLimitState(raw: string | null): number[] | typeof POISONED_STATE {\n  if (raw === null) return []\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(raw)\n  } catch {\n    return POISONED_STATE\n  }\n  if (!Array.isArray(parsed)) return POISONED_STATE\n  return parsed.filter((t): t is number => typeof t === 'number' && Number.isFinite(t))\n}\n","/**\n * Rate-limit policy for FREE routes: authenticated, unmetered, compute-bearing\n * endpoints.\n *\n * Billing meters the chat turn. Everything deterministic a product adds beside\n * it — a planning recompute fired on every slider drag, a redline diff, a\n * deadline computation — runs unmetered, so nothing bounds how much worker CPU\n * one authenticated caller can spend. `checkRateLimit` is the primitive; this\n * is the policy around it, so a route declares a cost class instead of each one\n * inventing a key format, a budget, and a denial response.\n *\n * Three rules this enforces that a hand-rolled call site usually does not:\n *\n * 1. **Identity is required.** A missing subject is denied, never pooled into a\n *    shared bucket and never quietly keyed by IP — a shared bucket makes one\n *    heavy user throttle everyone, and an IP key makes one NAT do the same.\n * 2. **A limiter that throws denies.** KV `get`/`put` failures are transport\n *    failures; treating them as \"allowed\" converts a KV outage into an\n *    unbounded-compute hole, which is exactly when the limiter matters most.\n * 3. **The denial is a typed, correctable outcome** — reason, HTTP status and\n *    `Retry-After` — so the caller answers the client rather than failing\n *    opaquely or, worse, continuing.\n *\n * ```ts\n * export const action = withFreeRouteLimit(\n *   {\n *     route: 'tax.plan.recompute',\n *     costClass: 'interactive',\n *     kv: ({ context }) => context.cloudflare.env.RATE_LIMIT_KV,\n *     identify: async ({ request }) => {\n *       const session = await requireSession(request)\n *       return { subject: session.userId, workspace: session.workspaceId }\n *     },\n *   },\n *   async ({ request }) => Response.json(recompute(await request.json())),\n * )\n * ```\n */\n\nimport { checkRateLimit, type KvLike, type RateLimitResult } from './rate-limit'\n\n/** Requests allowed per identity inside a sliding window. */\nexport interface RateLimitBudget {\n  limit: number\n  windowSeconds: number\n}\n\n/**\n * How expensive one call is, which is what picks the default budget.\n *\n * - `interactive` — a control the user drags or types into, recomputed per\n *   tick. Sized for sustained two-per-second interaction, so a real slider\n *   never trips it and a script still stops.\n * - `compute` — a derivation the user triggers deliberately (recalculate a\n *   plan, diff a document, compute a deadline set). The default.\n * - `heavy` — whole-document or whole-matter work measured in seconds of CPU.\n */\nexport type FreeRouteClass = 'interactive' | 'compute' | 'heavy'\n\n/** Default budget per cost class. A product overrides with an explicit\n *  `budget` when it has measured its own route. */\nexport const FREE_ROUTE_BUDGETS: Readonly<Record<FreeRouteClass, RateLimitBudget>> = Object.freeze({\n  interactive: Object.freeze({ limit: 120, windowSeconds: 60 }),\n  compute: Object.freeze({ limit: 30, windowSeconds: 60 }),\n  heavy: Object.freeze({ limit: 10, windowSeconds: 300 }),\n})\n\n/** A workspace's shared ceiling defaults to this many times one member's, so a\n *  multi-seat tenant is bounded without a single active member tripping it. */\nexport const WORKSPACE_BUDGET_MULTIPLIER = 5\n\n/** Why a call was refused. Every value is a REFUSAL — there is no reason code\n *  that lets the handler run. */\nexport type FreeRouteDenialReason =\n  /** No authenticated subject. Not correctable by waiting. */\n  | 'unidentified'\n  /** The window is full for this subject or workspace. */\n  | 'rate-limited'\n  /** The limiter itself failed (KV read/write threw). Denied, not passed. */\n  | 'limiter-unavailable'\n\n/** Which window refused the call. `null` when no window was consulted. */\nexport type FreeRouteDimension = 'subject' | 'workspace' | null\n\n/**\n * A correctable refusal: the caller maps `status` + `retryAfterSeconds` onto a\n * response (see {@link freeRouteLimitResponse}) so the client learns what to do\n * next. Carrying the limiter's own failure in `cause` keeps a KV outage\n * diagnosable instead of collapsing into a generic 429.\n */\nexport class FreeRouteLimitError extends Error {\n  readonly reason: FreeRouteDenialReason\n  readonly status: 401 | 429 | 503\n  readonly retryAfterSeconds: number\n  readonly dimension: FreeRouteDimension\n  readonly route: string\n\n  constructor(init: {\n    reason: FreeRouteDenialReason\n    status: 401 | 429 | 503\n    retryAfterSeconds: number\n    dimension: FreeRouteDimension\n    route: string\n    message: string\n    cause?: unknown\n  }) {\n    super(init.message, init.cause === undefined ? undefined : { cause: init.cause })\n    this.name = 'FreeRouteLimitError'\n    this.reason = init.reason\n    this.status = init.status\n    this.retryAfterSeconds = init.retryAfterSeconds\n    this.dimension = init.dimension\n    this.route = init.route\n  }\n}\n\n/** What remains of the binding window after an allowed call. */\nexport interface FreeRouteAllowance {\n  /** Remaining calls in whichever window is tightest. */\n  remaining: number\n  /** Unix seconds at which that window resets. */\n  resetAt: number\n  /** The budget that window enforces. */\n  budget: RateLimitBudget\n  /** Which window is tightest — `subject` unless a workspace ceiling binds. */\n  dimension: Exclude<FreeRouteDimension, null>\n}\n\n/** Typed outcome at the route boundary: an allowance, or a refusal that says\n *  how to correct it. There is no third state and no silent pass. */\nexport type FreeRouteLimitOutcome =\n  | { succeeded: true; value: FreeRouteAllowance }\n  | { succeeded: false; error: FreeRouteLimitError }\n\nexport interface FreeRouteLimitInput {\n  kv: KvLike\n  /** Stable route name. Part of the key, so two routes never share a window. */\n  route: string\n  /** The authenticated subject (user id). Absent or blank ⇒ denied. */\n  subject: string | null | undefined\n  /** Tenant the call belongs to. When present, a second, wider window bounds\n   *  the workspace as a whole. */\n  workspace?: string | null\n  /** Cost class picking the default budget. Ignored when `budget` is given.\n   *  Default `'compute'`. */\n  costClass?: FreeRouteClass\n  budget?: RateLimitBudget\n  /** Workspace ceiling. Defaults to the subject budget's limit multiplied by\n   *  {@link WORKSPACE_BUDGET_MULTIPLIER} over the same window. */\n  workspaceBudget?: RateLimitBudget\n}\n\n/** Key components are percent-encoded so a route name or subject containing the\n *  separator cannot be crafted to collide with another caller's window. */\nfunction limitKey(route: string, dimension: string, id: string): string {\n  return `free:${encodeURIComponent(route)}:${dimension}:${encodeURIComponent(id)}`\n}\n\nfunction assertBudget(budget: RateLimitBudget, label: string): void {\n  const valid =\n    Number.isInteger(budget.limit) &&\n    budget.limit >= 1 &&\n    Number.isInteger(budget.windowSeconds) &&\n    budget.windowSeconds >= 1\n  if (!valid) {\n    throw new Error(\n      `${label} must be positive integers (got limit=${budget.limit}, windowSeconds=${budget.windowSeconds})`,\n    )\n  }\n}\n\nfunction secondsUntil(resetAt: number): number {\n  return Math.max(1, resetAt - Math.floor(Date.now() / 1000))\n}\n\n/**\n * Run one window. A throw from KV becomes a `limiter-unavailable` refusal\n * rather than propagating — the caller must be able to answer 503 with a\n * `Retry-After` instead of the handler running or the route 500ing opaquely.\n */\nasync function runWindow(\n  kv: KvLike,\n  route: string,\n  dimension: Exclude<FreeRouteDimension, null>,\n  id: string,\n  budget: RateLimitBudget,\n): Promise<{ succeeded: true; value: RateLimitResult } | { succeeded: false; error: FreeRouteLimitError }> {\n  try {\n    const value = await checkRateLimit(kv, limitKey(route, dimension, id), budget.limit, budget.windowSeconds)\n    return { succeeded: true, value }\n  } catch (cause) {\n    return {\n      succeeded: false,\n      error: new FreeRouteLimitError({\n        reason: 'limiter-unavailable',\n        status: 503,\n        retryAfterSeconds: Math.min(budget.windowSeconds, 30),\n        dimension,\n        route,\n        message: `Rate limiter unavailable for route '${route}' — the request is refused rather than admitted unmetered`,\n        cause,\n      }),\n    }\n  }\n}\n\n/**\n * Decide whether one authenticated, unmetered call may run.\n *\n * Checks the subject's window first, then the workspace ceiling when a\n * workspace is supplied; the tighter of the two is what the allowance reports.\n * Every failure path returns a refusal — none returns an allowance.\n */\nexport async function checkFreeRouteLimit(input: FreeRouteLimitInput): Promise<FreeRouteLimitOutcome> {\n  const budget = input.budget ?? FREE_ROUTE_BUDGETS[input.costClass ?? 'compute']\n  assertBudget(budget, `Free-route budget for '${input.route}'`)\n  const workspaceBudget =\n    input.workspaceBudget ?? { limit: budget.limit * WORKSPACE_BUDGET_MULTIPLIER, windowSeconds: budget.windowSeconds }\n  if (input.workspace) assertBudget(workspaceBudget, `Free-route workspace budget for '${input.route}'`)\n\n  const subject = input.subject?.trim()\n  if (!subject) {\n    return {\n      succeeded: false,\n      error: new FreeRouteLimitError({\n        reason: 'unidentified',\n        status: 401,\n        // Not correctable by waiting: the caller must authenticate.\n        retryAfterSeconds: 0,\n        dimension: null,\n        route: input.route,\n        message: `Route '${input.route}' is authenticated-only — an unidentified caller cannot be rate limited, so it is refused`,\n      }),\n    }\n  }\n\n  const subjectWindow = await runWindow(input.kv, input.route, 'subject', subject, budget)\n  if (!subjectWindow.succeeded) return subjectWindow\n  if (!subjectWindow.value.allowed) {\n    return { succeeded: false, error: rateLimited(input.route, 'subject', subjectWindow.value) }\n  }\n\n  let tightest: { result: RateLimitResult; budget: RateLimitBudget; dimension: Exclude<FreeRouteDimension, null> } = {\n    result: subjectWindow.value,\n    budget,\n    dimension: 'subject',\n  }\n\n  if (input.workspace) {\n    const workspaceWindow = await runWindow(input.kv, input.route, 'workspace', input.workspace, workspaceBudget)\n    if (!workspaceWindow.succeeded) return workspaceWindow\n    if (!workspaceWindow.value.allowed) {\n      return { succeeded: false, error: rateLimited(input.route, 'workspace', workspaceWindow.value) }\n    }\n    if (workspaceWindow.value.remaining < tightest.result.remaining) {\n      tightest = { result: workspaceWindow.value, budget: workspaceBudget, dimension: 'workspace' }\n    }\n  }\n\n  return {\n    succeeded: true,\n    value: {\n      remaining: tightest.result.remaining,\n      resetAt: tightest.result.resetAt,\n      budget: tightest.budget,\n      dimension: tightest.dimension,\n    },\n  }\n}\n\nfunction rateLimited(\n  route: string,\n  dimension: Exclude<FreeRouteDimension, null>,\n  result: RateLimitResult,\n): FreeRouteLimitError {\n  const retryAfterSeconds = secondsUntil(result.resetAt)\n  return new FreeRouteLimitError({\n    reason: 'rate-limited',\n    status: 429,\n    retryAfterSeconds,\n    dimension,\n    route,\n    message: `Route '${route}' rate limit reached for this ${dimension}; retry in ${retryAfterSeconds}s`,\n  })\n}\n\nexport interface FreeRouteLimitResponseOptions {\n  /** Extra response headers (a product's security headers, CORS). */\n  headers?: Record<string, string>\n  /** Client-facing message. Defaults to the error's own message. */\n  message?: string\n}\n\n/** The refusal as an HTTP response: the error's status, a JSON body carrying\n *  the machine-readable `reason`, and `Retry-After` when waiting can fix it. */\nexport function freeRouteLimitResponse(\n  error: FreeRouteLimitError,\n  options: FreeRouteLimitResponseOptions = {},\n): Response {\n  const headers = new Headers(options.headers)\n  headers.set('Content-Type', 'application/json')\n  if (error.retryAfterSeconds > 0) headers.set('Retry-After', String(error.retryAfterSeconds))\n  return new Response(\n    JSON.stringify({\n      error: options.message ?? error.message,\n      reason: error.reason,\n      retryAfterSeconds: error.retryAfterSeconds,\n    }),\n    { status: error.status, headers },\n  )\n}\n\n/** The authenticated caller behind one request. */\nexport interface FreeRouteIdentity {\n  subject: string\n  workspace?: string | null\n}\n\nexport interface WithFreeRouteLimitOptions<TArgs> {\n  /** Stable route name; part of the key. */\n  route: string\n  costClass?: FreeRouteClass\n  budget?: RateLimitBudget\n  workspaceBudget?: RateLimitBudget\n  /** The KV binding for this request. */\n  kv: (args: TArgs) => KvLike\n  /**\n   * Resolve the authenticated caller. Return `null` for an unauthenticated\n   * request — the wrapper then refuses with 401 and the handler never runs.\n   *\n   * A THROW here propagates: an auth lookup that failed is not the same as an\n   * absent session, and the wrapper will not invent a status for it. The\n   * handler still does not run, so the failure stays closed.\n   */\n  identify: (args: TArgs) => Promise<FreeRouteIdentity | null> | FreeRouteIdentity | null\n  /** Build the refusal response. Defaults to {@link freeRouteLimitResponse}. */\n  onDenied?: (error: FreeRouteLimitError, args: TArgs) => Response | Promise<Response>\n}\n\n/**\n * Wrap an authenticated, unmetered, compute-bearing route handler in its\n * budget. The limit is applied BEFORE the handler is entered — including\n * before the request body is read — so a refused call costs a KV read, not the\n * compute the route exists to do.\n *\n * The handler's own response is returned untouched: this never rewrites status,\n * body or headers on the success path, so it cannot break a streaming or\n * pre-built response.\n *\n * `TArgs` is the router's handler-argument object (react-router's\n * `ActionFunctionArgs`, or any single-object shape a product uses).\n */\nexport function withFreeRouteLimit<TArgs>(\n  options: WithFreeRouteLimitOptions<TArgs>,\n  handler: (args: TArgs) => Response | Promise<Response>,\n): (args: TArgs) => Promise<Response> {\n  return async (args: TArgs): Promise<Response> => {\n    const identity = await options.identify(args)\n    const outcome = await checkFreeRouteLimit({\n      kv: options.kv(args),\n      route: options.route,\n      subject: identity?.subject,\n      workspace: identity?.workspace,\n      costClass: options.costClass,\n      budget: options.budget,\n      workspaceBudget: options.workspaceBudget,\n    })\n    if (!outcome.succeeded) {\n      return options.onDenied ? await options.onDenied(outcome.error, args) : freeRouteLimitResponse(outcome.error)\n    }\n    return await handler(args)\n  }\n}\n","/**\n * Web-boundary utilities every agent app's routes hand-roll: JSON body parsing\n * + narrowing, request-context extraction (real client IP behind Cloudflare),\n * a KV-backed sliding-window rate limiter, the free-route budget policy built\n * on it, and security response headers. Pure mechanism — no DB, no domain. The\n * KV is a structural interface so this needs no `@cloudflare/workers-types`\n * dependency.\n */\n\nexport * from './rate-limit'\nexport * from './free-route-limit'\n\nexport type JsonObject = Record<string, unknown>\n\n/** Parse + object-narrow a Request body. `[body, null]` on success, `[null,\n *  errorResponse]` on a non-object body (callers `if (err) return err`). */\nexport async function parseJsonObjectBody(request: Request): Promise<[JsonObject, null] | [null, Response]> {\n  let raw: unknown\n  try {\n    raw = await request.json()\n  } catch {\n    return [null, Response.json({ error: 'Invalid JSON body' }, { status: 400 })]\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return [null, Response.json({ error: 'Body must be a JSON object' }, { status: 400 })]\n  }\n  return [raw as JsonObject, null]\n}\n\n/** Narrow one required string field, 400 if missing/empty. */\nexport function requireString(body: JsonObject, field: string): string | Response {\n  const v = body[field]\n  if (typeof v !== 'string' || v.length === 0) {\n    return Response.json({ error: `Missing or non-string field: ${field}` }, { status: 400 })\n  }\n  return v\n}\n\n/** Define the context of a request including IP address, user agent, timestamp, and request ID */\nexport interface RequestContext {\n  ipAddress: string\n  userAgent: string\n  timestamp: string\n  requestId: string\n}\n\n/** Extract request context for audit trails. Uses `CF-Connecting-IP` for the\n *  real client IP behind Cloudflare. */\nexport function extractRequestContext(request: Request): RequestContext {\n  const ipAddress =\n    request.headers.get('CF-Connecting-IP') ??\n    request.headers.get('X-Forwarded-For')?.split(',')[0]?.trim() ??\n    '0.0.0.0'\n  return {\n    ipAddress,\n    userAgent: request.headers.get('User-Agent') ?? '',\n    timestamp: new Date().toISOString(),\n    requestId: crypto.randomUUID(),\n  }\n}\n\n/** Define options for configuring cookie attributes and behavior */\nexport interface CookieOptions {\n  name: string\n  /** Default '/'. */\n  path?: string\n  /** Default true. */\n  httpOnly?: boolean\n  /** Adds the `Secure` attribute. Default false. */\n  secure?: boolean\n  /** Default 'Lax'. */\n  sameSite?: 'Lax' | 'Strict' | 'None'\n  maxAgeSeconds?: number\n}\n\n/** Serialize a Set-Cookie header value: `name=encodeURIComponent(value)` plus\n *  attributes in Path / HttpOnly / SameSite / Max-Age / Secure order.\n *  Throws on `SameSite=None` without `secure` — browsers silently drop that\n *  combination, which would otherwise fail invisibly. */\nexport function serializeCookie(value: string, opts: CookieOptions): string {\n  if (opts.sameSite === 'None' && !opts.secure) {\n    throw new Error('SameSite=None cookies require secure: true (browsers reject them otherwise)')\n  }\n  const parts = [`${opts.name}=${encodeURIComponent(value)}`, `Path=${opts.path ?? '/'}`]\n  if (opts.httpOnly !== false) parts.push('HttpOnly')\n  parts.push(`SameSite=${opts.sameSite ?? 'Lax'}`)\n  if (opts.maxAgeSeconds !== undefined) parts.push(`Max-Age=${opts.maxAgeSeconds}`)\n  if (opts.secure) parts.push('Secure')\n  return parts.join('; ')\n}\n\n/** Set-Cookie header value that deletes the cookie (empty value, Max-Age=0). */\nexport function clearCookieHeader(opts: Omit<CookieOptions, 'maxAgeSeconds'>): string {\n  return serializeCookie('', { ...opts, maxAgeSeconds: 0 })\n}\n\n/** Read + decode one cookie from a Cookie request header; null when absent. */\nexport function readCookieValue(cookieHeader: string | null, name: string): string | null {\n  if (!cookieHeader) return null\n  for (const part of cookieHeader.split(/;\\s*/)) {\n    const [cookieName, ...rest] = part.split('=')\n    if (cookieName === name) {\n      try {\n        return decodeURIComponent(rest.join('='))\n      } catch {\n        return null\n      }\n    }\n  }\n  return null\n}\n\n/** Define options for configuring security-related HTTP headers including disclaimers and retention labels */\nexport interface SecurityHeaderOptions {\n  /** Product disclaimer (e.g. \"AI-powered tool. Not legal advice.\"). Omitted if absent. */\n  disclaimer?: string\n  /** Data-retention label (e.g. \"7-years\"). Omitted if absent. */\n  retention?: string\n  /** Extra headers to set. */\n  extra?: Record<string, string>\n}\n\n/** Canonical generic response headers used by {@link addSecurityHeaders}.\n * Exported so static-asset hosts can apply the same policy without copying\n * values that silently drift from Worker/API responses. */\nexport const STANDARD_SECURITY_HEADERS = Object.freeze({\n  'Strict-Transport-Security':\n    'max-age=31536000; includeSubDomains; preload',\n  'X-Content-Type-Options': 'nosniff',\n  'X-Frame-Options': 'SAMEORIGIN',\n  'Referrer-Policy': 'same-origin',\n  'X-XSS-Protection': '1; mode=block',\n} as const)\n\n/** Set standard security headers on a response (HSTS, nosniff, frame-options,\n *  referrer-policy, XSS) + optional product disclaimer/retention. The security\n *  set is generic; the disclaimer/retention are the product's. */\nexport function addSecurityHeaders(response: Response, opts: SecurityHeaderOptions = {}): Response {\n  for (const [name, value] of Object.entries(STANDARD_SECURITY_HEADERS)) {\n    response.headers.set(name, value)\n  }\n  if (opts.disclaimer) response.headers.set('X-AI-Disclaimer', opts.disclaimer)\n  if (opts.retention) response.headers.set('X-Data-Retention', opts.retention)\n  for (const [k, v] of Object.entries(opts.extra ?? {})) response.headers.set(k, v)\n  return response\n}\n\n/** Local-sandbox / inline schemes a stored media reference must never use.\n *  Reachable from neither a browser nor the product worker, and a `file:`/`data:`\n *  url is the tell of an agent substituting local ffmpeg output for a real\n *  provider artifact. `blob:` and `javascript:` are inert/active client schemes\n *  with no server reachability. */\nconst REJECTED_MEDIA_SCHEMES = ['file:', 'data:', 'blob:', 'javascript:', 'vbscript:'] as const\n\n/**\n * Canonical media-reference boundary shared by every surface that persists a\n * media url (sequences clips, design-canvas image/video src). The ONE rule:\n * remote `http(s)` or a rooted `/api/` path are allowed; everything else is\n * rejected, with a named reason for known-bad local/inline schemes so the\n * thrown message is actionable for an LLM planner. The url is trimmed before\n * the scheme check so leading whitespace cannot smuggle a rejected scheme past\n * a naive `startsWith`.\n *\n * @param what - noun for the error message (e.g. 'media url', 'src').\n */\nexport function assertMediaUrl(url: string, what = 'media url'): void {\n  const trimmed = url.trim()\n  if (/^https?:\\/\\//i.test(trimmed)) return\n  if (trimmed.startsWith('/api/')) return\n  const shown = trimmed.length > 96 ? `${trimmed.slice(0, 96)}…` : trimmed\n  const lower = trimmed.toLowerCase()\n  if (\n    REJECTED_MEDIA_SCHEMES.some((scheme) => lower.startsWith(scheme)) ||\n    lower.startsWith('/tmp/') ||\n    lower.startsWith('/home/')\n  ) {\n    throw new Error(`${what} must reference a provider http(s) URL or a rooted /api/ path, not a local sandbox file (${shown})`)\n  }\n  throw new Error(`${what} must be http(s) or a rooted /api/ path (${shown})`)\n}\n\nexport { isWorkspaceFileExportable } from './file-export'\n"],"mappings":";AAiCA,eAAsB,eAAe,IAAY,KAAa,OAAe,eAAiD;AAC5H,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,cAAc,MAAM;AAC1B,QAAM,QAAQ,MAAM,GAAG;AACvB,QAAM,MAAM,MAAM,GAAG,IAAI,KAAK;AAC9B,QAAM,SAAS,oBAAoB,GAAG;AACtC,MAAI,WAAW,gBAAgB;AAG7B,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,MAAM,cAAc;AAAA,EACtE;AACA,QAAM,QAAQ,OAAO,OAAO,CAAC,MAAM,IAAI,WAAW;AAClD,MAAI,MAAM,UAAU,MAAO,QAAO,EAAE,SAAS,OAAO,WAAW,GAAG,UAAU,MAAM,CAAC,KAAK,OAAO,cAAc;AAC7G,QAAM,KAAK,GAAG;AACd,QAAM,GAAG,IAAI,OAAO,KAAK,UAAU,KAAK,GAAG,EAAE,eAAe,gBAAgB,EAAE,CAAC;AAC/E,SAAO,EAAE,SAAS,MAAM,WAAW,QAAQ,MAAM,QAAQ,SAAS,MAAM,cAAc;AACxF;AAKA,IAAM,iBAAiB,uBAAO,2BAA2B;AAKzD,SAAS,oBAAoB,KAAsD;AACjF,MAAI,QAAQ,KAAM,QAAO,CAAC;AAC1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnC,SAAO,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,CAAC;AACtF;;;ACRO,IAAM,qBAAwE,OAAO,OAAO;AAAA,EACjG,aAAa,OAAO,OAAO,EAAE,OAAO,KAAK,eAAe,GAAG,CAAC;AAAA,EAC5D,SAAS,OAAO,OAAO,EAAE,OAAO,IAAI,eAAe,GAAG,CAAC;AAAA,EACvD,OAAO,OAAO,OAAO,EAAE,OAAO,IAAI,eAAe,IAAI,CAAC;AACxD,CAAC;AAIM,IAAM,8BAA8B;AAqBpC,IAAM,sBAAN,cAAkC,MAAM;AAAA,EACpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,MAQT;AACD,UAAM,KAAK,SAAS,KAAK,UAAU,SAAY,SAAY,EAAE,OAAO,KAAK,MAAM,CAAC;AAChF,SAAK,OAAO;AACZ,SAAK,SAAS,KAAK;AACnB,SAAK,SAAS,KAAK;AACnB,SAAK,oBAAoB,KAAK;AAC9B,SAAK,YAAY,KAAK;AACtB,SAAK,QAAQ,KAAK;AAAA,EACpB;AACF;AAwCA,SAAS,SAAS,OAAe,WAAmB,IAAoB;AACtE,SAAO,QAAQ,mBAAmB,KAAK,CAAC,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;AACjF;AAEA,SAAS,aAAa,QAAyB,OAAqB;AAClE,QAAM,QACJ,OAAO,UAAU,OAAO,KAAK,KAC7B,OAAO,SAAS,KAChB,OAAO,UAAU,OAAO,aAAa,KACrC,OAAO,iBAAiB;AAC1B,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,yCAAyC,OAAO,KAAK,mBAAmB,OAAO,aAAa;AAAA,IACtG;AAAA,EACF;AACF;AAEA,SAAS,aAAa,SAAyB;AAC7C,SAAO,KAAK,IAAI,GAAG,UAAU,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAC5D;AAOA,eAAe,UACb,IACA,OACA,WACA,IACA,QACyG;AACzG,MAAI;AACF,UAAM,QAAQ,MAAM,eAAe,IAAI,SAAS,OAAO,WAAW,EAAE,GAAG,OAAO,OAAO,OAAO,aAAa;AACzG,WAAO,EAAE,WAAW,MAAM,MAAM;AAAA,EAClC,SAAS,OAAO;AACd,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,IAAI,oBAAoB;AAAA,QAC7B,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,mBAAmB,KAAK,IAAI,OAAO,eAAe,EAAE;AAAA,QACpD;AAAA,QACA;AAAA,QACA,SAAS,uCAAuC,KAAK;AAAA,QACrD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;AASA,eAAsB,oBAAoB,OAA4D;AACpG,QAAM,SAAS,MAAM,UAAU,mBAAmB,MAAM,aAAa,SAAS;AAC9E,eAAa,QAAQ,0BAA0B,MAAM,KAAK,GAAG;AAC7D,QAAM,kBACJ,MAAM,mBAAmB,EAAE,OAAO,OAAO,QAAQ,6BAA6B,eAAe,OAAO,cAAc;AACpH,MAAI,MAAM,UAAW,cAAa,iBAAiB,oCAAoC,MAAM,KAAK,GAAG;AAErG,QAAM,UAAU,MAAM,SAAS,KAAK;AACpC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,IAAI,oBAAoB;AAAA,QAC7B,QAAQ;AAAA,QACR,QAAQ;AAAA;AAAA,QAER,mBAAmB;AAAA,QACnB,WAAW;AAAA,QACX,OAAO,MAAM;AAAA,QACb,SAAS,UAAU,MAAM,KAAK;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,gBAAgB,MAAM,UAAU,MAAM,IAAI,MAAM,OAAO,WAAW,SAAS,MAAM;AACvF,MAAI,CAAC,cAAc,UAAW,QAAO;AACrC,MAAI,CAAC,cAAc,MAAM,SAAS;AAChC,WAAO,EAAE,WAAW,OAAO,OAAO,YAAY,MAAM,OAAO,WAAW,cAAc,KAAK,EAAE;AAAA,EAC7F;AAEA,MAAI,WAA+G;AAAA,IACjH,QAAQ,cAAc;AAAA,IACtB;AAAA,IACA,WAAW;AAAA,EACb;AAEA,MAAI,MAAM,WAAW;AACnB,UAAM,kBAAkB,MAAM,UAAU,MAAM,IAAI,MAAM,OAAO,aAAa,MAAM,WAAW,eAAe;AAC5G,QAAI,CAAC,gBAAgB,UAAW,QAAO;AACvC,QAAI,CAAC,gBAAgB,MAAM,SAAS;AAClC,aAAO,EAAE,WAAW,OAAO,OAAO,YAAY,MAAM,OAAO,aAAa,gBAAgB,KAAK,EAAE;AAAA,IACjG;AACA,QAAI,gBAAgB,MAAM,YAAY,SAAS,OAAO,WAAW;AAC/D,iBAAW,EAAE,QAAQ,gBAAgB,OAAO,QAAQ,iBAAiB,WAAW,YAAY;AAAA,IAC9F;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO;AAAA,MACL,WAAW,SAAS,OAAO;AAAA,MAC3B,SAAS,SAAS,OAAO;AAAA,MACzB,QAAQ,SAAS;AAAA,MACjB,WAAW,SAAS;AAAA,IACtB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,WACA,QACqB;AACrB,QAAM,oBAAoB,aAAa,OAAO,OAAO;AACrD,SAAO,IAAI,oBAAoB;AAAA,IAC7B,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,UAAU,KAAK,iCAAiC,SAAS,cAAc,iBAAiB;AAAA,EACnG,CAAC;AACH;AAWO,SAAS,uBACd,OACA,UAAyC,CAAC,GAChC;AACV,QAAM,UAAU,IAAI,QAAQ,QAAQ,OAAO;AAC3C,UAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,MAAI,MAAM,oBAAoB,EAAG,SAAQ,IAAI,eAAe,OAAO,MAAM,iBAAiB,CAAC;AAC3F,SAAO,IAAI;AAAA,IACT,KAAK,UAAU;AAAA,MACb,OAAO,QAAQ,WAAW,MAAM;AAAA,MAChC,QAAQ,MAAM;AAAA,MACd,mBAAmB,MAAM;AAAA,IAC3B,CAAC;AAAA,IACD,EAAE,QAAQ,MAAM,QAAQ,QAAQ;AAAA,EAClC;AACF;AA0CO,SAAS,mBACd,SACA,SACoC;AACpC,SAAO,OAAO,SAAmC;AAC/C,UAAM,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC5C,UAAM,UAAU,MAAM,oBAAoB;AAAA,MACxC,IAAI,QAAQ,GAAG,IAAI;AAAA,MACnB,OAAO,QAAQ;AAAA,MACf,SAAS,UAAU;AAAA,MACnB,WAAW,UAAU;AAAA,MACrB,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,iBAAiB,QAAQ;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,aAAO,QAAQ,WAAW,MAAM,QAAQ,SAAS,QAAQ,OAAO,IAAI,IAAI,uBAAuB,QAAQ,KAAK;AAAA,IAC9G;AACA,WAAO,MAAM,QAAQ,IAAI;AAAA,EAC3B;AACF;;;ACpWA,eAAsB,oBAAoB,SAAkE;AAC1G,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,QAAQ,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO,CAAC,MAAM,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC9E;AACA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,GAAG;AACjE,WAAO,CAAC,MAAM,SAAS,KAAK,EAAE,OAAO,6BAA6B,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EACvF;AACA,SAAO,CAAC,KAAmB,IAAI;AACjC;AAGO,SAAS,cAAc,MAAkB,OAAkC;AAChF,QAAM,IAAI,KAAK,KAAK;AACpB,MAAI,OAAO,MAAM,YAAY,EAAE,WAAW,GAAG;AAC3C,WAAO,SAAS,KAAK,EAAE,OAAO,gCAAgC,KAAK,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1F;AACA,SAAO;AACT;AAYO,SAAS,sBAAsB,SAAkC;AACtE,QAAM,YACJ,QAAQ,QAAQ,IAAI,kBAAkB,KACtC,QAAQ,QAAQ,IAAI,iBAAiB,GAAG,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,KAC5D;AACF,SAAO;AAAA,IACL;AAAA,IACA,WAAW,QAAQ,QAAQ,IAAI,YAAY,KAAK;AAAA,IAChD,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,WAAW,OAAO,WAAW;AAAA,EAC/B;AACF;AAoBO,SAAS,gBAAgB,OAAe,MAA6B;AAC1E,MAAI,KAAK,aAAa,UAAU,CAAC,KAAK,QAAQ;AAC5C,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACA,QAAM,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,mBAAmB,KAAK,CAAC,IAAI,QAAQ,KAAK,QAAQ,GAAG,EAAE;AACtF,MAAI,KAAK,aAAa,MAAO,OAAM,KAAK,UAAU;AAClD,QAAM,KAAK,YAAY,KAAK,YAAY,KAAK,EAAE;AAC/C,MAAI,KAAK,kBAAkB,OAAW,OAAM,KAAK,WAAW,KAAK,aAAa,EAAE;AAChF,MAAI,KAAK,OAAQ,OAAM,KAAK,QAAQ;AACpC,SAAO,MAAM,KAAK,IAAI;AACxB;AAGO,SAAS,kBAAkB,MAAoD;AACpF,SAAO,gBAAgB,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;AAC1D;AAGO,SAAS,gBAAgB,cAA6B,MAA6B;AACxF,MAAI,CAAC,aAAc,QAAO;AAC1B,aAAW,QAAQ,aAAa,MAAM,MAAM,GAAG;AAC7C,UAAM,CAAC,YAAY,GAAG,IAAI,IAAI,KAAK,MAAM,GAAG;AAC5C,QAAI,eAAe,MAAM;AACvB,UAAI;AACF,eAAO,mBAAmB,KAAK,KAAK,GAAG,CAAC;AAAA,MAC1C,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAeO,IAAM,4BAA4B,OAAO,OAAO;AAAA,EACrD,6BACE;AAAA,EACF,0BAA0B;AAAA,EAC1B,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,oBAAoB;AACtB,CAAU;AAKH,SAAS,mBAAmB,UAAoB,OAA8B,CAAC,GAAa;AACjG,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,yBAAyB,GAAG;AACrE,aAAS,QAAQ,IAAI,MAAM,KAAK;AAAA,EAClC;AACA,MAAI,KAAK,WAAY,UAAS,QAAQ,IAAI,mBAAmB,KAAK,UAAU;AAC5E,MAAI,KAAK,UAAW,UAAS,QAAQ,IAAI,oBAAoB,KAAK,SAAS;AAC3E,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,EAAG,UAAS,QAAQ,IAAI,GAAG,CAAC;AAChF,SAAO;AACT;AAOA,IAAM,yBAAyB,CAAC,SAAS,SAAS,SAAS,eAAe,WAAW;AAa9E,SAAS,eAAe,KAAa,OAAO,aAAmB;AACpE,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,gBAAgB,KAAK,OAAO,EAAG;AACnC,MAAI,QAAQ,WAAW,OAAO,EAAG;AACjC,QAAM,QAAQ,QAAQ,SAAS,KAAK,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC,WAAM;AACjE,QAAM,QAAQ,QAAQ,YAAY;AAClC,MACE,uBAAuB,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC,KAChE,MAAM,WAAW,OAAO,KACxB,MAAM,WAAW,QAAQ,GACzB;AACA,UAAM,IAAI,MAAM,GAAG,IAAI,4FAA4F,KAAK,GAAG;AAAA,EAC7H;AACA,QAAM,IAAI,MAAM,GAAG,IAAI,4CAA4C,KAAK,GAAG;AAC7E;","names":[]}