beplus-mcp 0.27.0 → 0.28.0

package/dist/index.js

@@ -7678,15 +7678,15 @@ var $ZodCheckLessThan = /* @__PURE__ */ $constructor("$ZodCheckLessThan", (inst,
         bag.exclusiveMaximum = def.value;
     }
   });
-  inst._zod.check = (payload) => {
-    if (def.inclusive ? payload.value <= def.value : payload.value < def.value) {
+  inst._zod.check = (payload2) => {
+    if (def.inclusive ? payload2.value <= def.value : payload2.value < def.value) {
       return;
     }
-    payload.issues.push({
+    payload2.issues.push({
       origin,
       code: "too_big",
       maximum: def.value,
-      input: payload.value,
+      input: payload2.value,
       inclusive: def.inclusive,
       inst,
       continue: !def.abort
@@ -7706,15 +7706,15 @@ var $ZodCheckGreaterThan = /* @__PURE__ */ $constructor("$ZodCheckGreaterThan",
         bag.exclusiveMinimum = def.value;
     }
   });
-  inst._zod.check = (payload) => {
-    if (def.inclusive ? payload.value >= def.value : payload.value > def.value) {
+  inst._zod.check = (payload2) => {
+    if (def.inclusive ? payload2.value >= def.value : payload2.value > def.value) {
       return;
     }
-    payload.issues.push({
+    payload2.issues.push({
       origin,
       code: "too_small",
       minimum: def.value,
-      input: payload.value,
+      input: payload2.value,
       inclusive: def.inclusive,
       inst,
       continue: !def.abort
@@ -7727,17 +7727,17 @@ var $ZodCheckMultipleOf = /* @__PURE__ */ $constructor("$ZodCheckMultipleOf", (i
     var _a;
     (_a = inst2._zod.bag).multipleOf ?? (_a.multipleOf = def.value);
   });
-  inst._zod.check = (payload) => {
-    if (typeof payload.value !== typeof def.value)
+  inst._zod.check = (payload2) => {
+    if (typeof payload2.value !== typeof def.value)
       throw new Error("Cannot mix number and bigint in multiple_of check.");
-    const isMultiple = typeof payload.value === "bigint" ? payload.value % def.value === BigInt(0) : floatSafeRemainder(payload.value, def.value) === 0;
+    const isMultiple = typeof payload2.value === "bigint" ? payload2.value % def.value === BigInt(0) : floatSafeRemainder(payload2.value, def.value) === 0;
     if (isMultiple)
       return;
-    payload.issues.push({
-      origin: typeof payload.value,
+    payload2.issues.push({
+      origin: typeof payload2.value,
       code: "not_multiple_of",
       divisor: def.value,
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -7757,11 +7757,11 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
     if (isInt)
       bag.pattern = integer;
   });
-  inst._zod.check = (payload) => {
-    const input = payload.value;
+  inst._zod.check = (payload2) => {
+    const input = payload2.value;
     if (isInt) {
       if (!Number.isInteger(input)) {
-        payload.issues.push({
+        payload2.issues.push({
           expected: origin,
           format: def.format,
           code: "invalid_type",
@@ -7772,7 +7772,7 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
       }
       if (!Number.isSafeInteger(input)) {
         if (input > 0) {
-          payload.issues.push({
+          payload2.issues.push({
             input,
             code: "too_big",
             maximum: Number.MAX_SAFE_INTEGER,
@@ -7782,7 +7782,7 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
             continue: !def.abort
           });
         } else {
-          payload.issues.push({
+          payload2.issues.push({
             input,
             code: "too_small",
             minimum: Number.MIN_SAFE_INTEGER,
@@ -7796,7 +7796,7 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
       }
     }
     if (input < minimum) {
-      payload.issues.push({
+      payload2.issues.push({
         origin: "number",
         input,
         code: "too_small",
@@ -7807,7 +7807,7 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
       });
     }
     if (input > maximum) {
-      payload.issues.push({
+      payload2.issues.push({
         origin: "number",
         input,
         code: "too_big",
@@ -7820,8 +7820,8 @@ var $ZodCheckNumberFormat = /* @__PURE__ */ $constructor("$ZodCheckNumberFormat"
 var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (inst, def) => {
   var _a;
   $ZodCheck.init(inst, def);
-  (_a = inst._zod.def).when ?? (_a.when = (payload) => {
-    const val = payload.value;
+  (_a = inst._zod.def).when ?? (_a.when = (payload2) => {
+    const val = payload2.value;
     return !nullish(val) && val.length !== void 0;
   });
   inst._zod.onattach.push((inst2) => {
@@ -7829,13 +7829,13 @@ var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (ins
     if (def.maximum < curr)
       inst2._zod.bag.maximum = def.maximum;
   });
-  inst._zod.check = (payload) => {
-    const input = payload.value;
+  inst._zod.check = (payload2) => {
+    const input = payload2.value;
     const length = input.length;
     if (length <= def.maximum)
       return;
     const origin = getLengthableOrigin(input);
-    payload.issues.push({
+    payload2.issues.push({
       origin,
       code: "too_big",
       maximum: def.maximum,
@@ -7849,8 +7849,8 @@ var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (ins
 var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (inst, def) => {
   var _a;
   $ZodCheck.init(inst, def);
-  (_a = inst._zod.def).when ?? (_a.when = (payload) => {
-    const val = payload.value;
+  (_a = inst._zod.def).when ?? (_a.when = (payload2) => {
+    const val = payload2.value;
     return !nullish(val) && val.length !== void 0;
   });
   inst._zod.onattach.push((inst2) => {
@@ -7858,13 +7858,13 @@ var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (ins
     if (def.minimum > curr)
       inst2._zod.bag.minimum = def.minimum;
   });
-  inst._zod.check = (payload) => {
-    const input = payload.value;
+  inst._zod.check = (payload2) => {
+    const input = payload2.value;
     const length = input.length;
     if (length >= def.minimum)
       return;
     const origin = getLengthableOrigin(input);
-    payload.issues.push({
+    payload2.issues.push({
       origin,
       code: "too_small",
       minimum: def.minimum,
@@ -7878,8 +7878,8 @@ var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (ins
 var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals", (inst, def) => {
   var _a;
   $ZodCheck.init(inst, def);
-  (_a = inst._zod.def).when ?? (_a.when = (payload) => {
-    const val = payload.value;
+  (_a = inst._zod.def).when ?? (_a.when = (payload2) => {
+    const val = payload2.value;
     return !nullish(val) && val.length !== void 0;
   });
   inst._zod.onattach.push((inst2) => {
@@ -7888,19 +7888,19 @@ var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals"
     bag.maximum = def.length;
     bag.length = def.length;
   });
-  inst._zod.check = (payload) => {
-    const input = payload.value;
+  inst._zod.check = (payload2) => {
+    const input = payload2.value;
     const length = input.length;
     if (length === def.length)
       return;
     const origin = getLengthableOrigin(input);
     const tooBig = length > def.length;
-    payload.issues.push({
+    payload2.issues.push({
       origin,
       ...tooBig ? { code: "too_big", maximum: def.length } : { code: "too_small", minimum: def.length },
       inclusive: true,
       exact: true,
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -7918,15 +7918,15 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
     }
   });
   if (def.pattern)
-    (_a = inst._zod).check ?? (_a.check = (payload) => {
+    (_a = inst._zod).check ?? (_a.check = (payload2) => {
       def.pattern.lastIndex = 0;
-      if (def.pattern.test(payload.value))
+      if (def.pattern.test(payload2.value))
         return;
-      payload.issues.push({
+      payload2.issues.push({
         origin: "string",
         code: "invalid_format",
         format: def.format,
-        input: payload.value,
+        input: payload2.value,
         ...def.pattern ? { pattern: def.pattern.toString() } : {},
         inst,
         continue: !def.abort
@@ -7938,15 +7938,15 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
 });
 var $ZodCheckRegex = /* @__PURE__ */ $constructor("$ZodCheckRegex", (inst, def) => {
   $ZodCheckStringFormat.init(inst, def);
-  inst._zod.check = (payload) => {
+  inst._zod.check = (payload2) => {
     def.pattern.lastIndex = 0;
-    if (def.pattern.test(payload.value))
+    if (def.pattern.test(payload2.value))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       origin: "string",
       code: "invalid_format",
       format: "regex",
-      input: payload.value,
+      input: payload2.value,
       pattern: def.pattern.toString(),
       inst,
       continue: !def.abort
@@ -7971,15 +7971,15 @@ var $ZodCheckIncludes = /* @__PURE__ */ $constructor("$ZodCheckIncludes", (inst,
     bag.patterns ?? (bag.patterns = /* @__PURE__ */ new Set());
     bag.patterns.add(pattern);
   });
-  inst._zod.check = (payload) => {
-    if (payload.value.includes(def.includes, def.position))
+  inst._zod.check = (payload2) => {
+    if (payload2.value.includes(def.includes, def.position))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       origin: "string",
       code: "invalid_format",
       format: "includes",
       includes: def.includes,
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -7994,15 +7994,15 @@ var $ZodCheckStartsWith = /* @__PURE__ */ $constructor("$ZodCheckStartsWith", (i
     bag.patterns ?? (bag.patterns = /* @__PURE__ */ new Set());
     bag.patterns.add(pattern);
   });
-  inst._zod.check = (payload) => {
-    if (payload.value.startsWith(def.prefix))
+  inst._zod.check = (payload2) => {
+    if (payload2.value.startsWith(def.prefix))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       origin: "string",
       code: "invalid_format",
       format: "starts_with",
       prefix: def.prefix,
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -8017,15 +8017,15 @@ var $ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst,
     bag.patterns ?? (bag.patterns = /* @__PURE__ */ new Set());
     bag.patterns.add(pattern);
   });
-  inst._zod.check = (payload) => {
-    if (payload.value.endsWith(def.suffix))
+  inst._zod.check = (payload2) => {
+    if (payload2.value.endsWith(def.suffix))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       origin: "string",
       code: "invalid_format",
       format: "ends_with",
       suffix: def.suffix,
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -8033,8 +8033,8 @@ var $ZodCheckEndsWith = /* @__PURE__ */ $constructor("$ZodCheckEndsWith", (inst,
 });
 var $ZodCheckOverwrite = /* @__PURE__ */ $constructor("$ZodCheckOverwrite", (inst, def) => {
   $ZodCheck.init(inst, def);
-  inst._zod.check = (payload) => {
-    payload.value = def.tx(payload.value);
+  inst._zod.check = (payload2) => {
+    payload2.value = def.tx(payload2.value);
   };
 });
 
@@ -8103,48 +8103,48 @@ var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
       inst._zod.run = inst._zod.parse;
     });
   } else {
-    const runChecks = (payload, checks2, ctx) => {
-      let isAborted2 = aborted(payload);
+    const runChecks = (payload2, checks2, ctx) => {
+      let isAborted2 = aborted(payload2);
       let asyncResult;
       for (const ch of checks2) {
         if (ch._zod.def.when) {
-          const shouldRun = ch._zod.def.when(payload);
+          const shouldRun = ch._zod.def.when(payload2);
           if (!shouldRun)
             continue;
         } else if (isAborted2) {
           continue;
         }
-        const currLen = payload.issues.length;
-        const _ = ch._zod.check(payload);
+        const currLen = payload2.issues.length;
+        const _ = ch._zod.check(payload2);
         if (_ instanceof Promise && ctx?.async === false) {
           throw new $ZodAsyncError();
         }
         if (asyncResult || _ instanceof Promise) {
           asyncResult = (asyncResult ?? Promise.resolve()).then(async () => {
             await _;
-            const nextLen = payload.issues.length;
+            const nextLen = payload2.issues.length;
             if (nextLen === currLen)
               return;
             if (!isAborted2)
-              isAborted2 = aborted(payload, currLen);
+              isAborted2 = aborted(payload2, currLen);
           });
         } else {
-          const nextLen = payload.issues.length;
+          const nextLen = payload2.issues.length;
           if (nextLen === currLen)
             continue;
           if (!isAborted2)
-            isAborted2 = aborted(payload, currLen);
+            isAborted2 = aborted(payload2, currLen);
         }
       }
       if (asyncResult) {
         return asyncResult.then(() => {
-          return payload;
+          return payload2;
         });
       }
-      return payload;
+      return payload2;
     };
-    inst._zod.run = (payload, ctx) => {
-      const result = inst._zod.parse(payload, ctx);
+    inst._zod.run = (payload2, ctx) => {
+      const result = inst._zod.parse(payload2, ctx);
       if (result instanceof Promise) {
         if (ctx.async === false)
           throw new $ZodAsyncError();
@@ -8169,21 +8169,21 @@ var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
 var $ZodString = /* @__PURE__ */ $constructor("$ZodString", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.pattern = [...inst?._zod.bag?.patterns ?? []].pop() ?? string(inst._zod.bag);
-  inst._zod.parse = (payload, _) => {
+  inst._zod.parse = (payload2, _) => {
     if (def.coerce)
       try {
-        payload.value = String(payload.value);
+        payload2.value = String(payload2.value);
       } catch (_2) {
       }
-    if (typeof payload.value === "string")
-      return payload;
-    payload.issues.push({
+    if (typeof payload2.value === "string")
+      return payload2;
+    payload2.issues.push({
       expected: "string",
       code: "invalid_type",
-      input: payload.value,
+      input: payload2.value,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodStringFormat = /* @__PURE__ */ $constructor("$ZodStringFormat", (inst, def) => {
@@ -8220,20 +8220,20 @@ var $ZodEmail = /* @__PURE__ */ $constructor("$ZodEmail", (inst, def) => {
 });
 var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
   $ZodStringFormat.init(inst, def);
-  inst._zod.check = (payload) => {
+  inst._zod.check = (payload2) => {
     try {
-      const orig = payload.value;
+      const orig = payload2.value;
       const url = new URL(orig);
       const href = url.href;
       if (def.hostname) {
         def.hostname.lastIndex = 0;
         if (!def.hostname.test(url.hostname)) {
-          payload.issues.push({
+          payload2.issues.push({
             code: "invalid_format",
             format: "url",
             note: "Invalid hostname",
             pattern: hostname.source,
-            input: payload.value,
+            input: payload2.value,
             inst,
             continue: !def.abort
           });
@@ -8242,28 +8242,28 @@ var $ZodURL = /* @__PURE__ */ $constructor("$ZodURL", (inst, def) => {
       if (def.protocol) {
         def.protocol.lastIndex = 0;
         if (!def.protocol.test(url.protocol.endsWith(":") ? url.protocol.slice(0, -1) : url.protocol)) {
-          payload.issues.push({
+          payload2.issues.push({
             code: "invalid_format",
             format: "url",
             note: "Invalid protocol",
             pattern: def.protocol.source,
-            input: payload.value,
+            input: payload2.value,
             inst,
             continue: !def.abort
           });
         }
       }
       if (!orig.endsWith("/") && href.endsWith("/")) {
-        payload.value = href.slice(0, -1);
+        payload2.value = href.slice(0, -1);
       } else {
-        payload.value = href;
+        payload2.value = href;
       }
       return;
     } catch (_) {
-      payload.issues.push({
+      payload2.issues.push({
         code: "invalid_format",
         format: "url",
-        input: payload.value,
+        input: payload2.value,
         inst,
         continue: !def.abort
       });
@@ -8329,14 +8329,14 @@ var $ZodIPv6 = /* @__PURE__ */ $constructor("$ZodIPv6", (inst, def) => {
     const bag = inst2._zod.bag;
     bag.format = `ipv6`;
   });
-  inst._zod.check = (payload) => {
+  inst._zod.check = (payload2) => {
     try {
-      new URL(`http://[${payload.value}]`);
+      new URL(`http://[${payload2.value}]`);
     } catch {
-      payload.issues.push({
+      payload2.issues.push({
         code: "invalid_format",
         format: "ipv6",
-        input: payload.value,
+        input: payload2.value,
         inst,
         continue: !def.abort
       });
@@ -8350,8 +8350,8 @@ var $ZodCIDRv4 = /* @__PURE__ */ $constructor("$ZodCIDRv4", (inst, def) => {
 var $ZodCIDRv6 = /* @__PURE__ */ $constructor("$ZodCIDRv6", (inst, def) => {
   def.pattern ?? (def.pattern = cidrv6);
   $ZodStringFormat.init(inst, def);
-  inst._zod.check = (payload) => {
-    const [address, prefix] = payload.value.split("/");
+  inst._zod.check = (payload2) => {
+    const [address, prefix] = payload2.value.split("/");
     try {
       if (!prefix)
         throw new Error();
@@ -8362,10 +8362,10 @@ var $ZodCIDRv6 = /* @__PURE__ */ $constructor("$ZodCIDRv6", (inst, def) => {
         throw new Error();
       new URL(`http://[${address}]`);
     } catch {
-      payload.issues.push({
+      payload2.issues.push({
         code: "invalid_format",
         format: "cidrv6",
-        input: payload.value,
+        input: payload2.value,
         inst,
         continue: !def.abort
       });
@@ -8390,13 +8390,13 @@ var $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
   inst._zod.onattach.push((inst2) => {
     inst2._zod.bag.contentEncoding = "base64";
   });
-  inst._zod.check = (payload) => {
-    if (isValidBase64(payload.value))
+  inst._zod.check = (payload2) => {
+    if (isValidBase64(payload2.value))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_format",
       format: "base64",
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -8415,13 +8415,13 @@ var $ZodBase64URL = /* @__PURE__ */ $constructor("$ZodBase64URL", (inst, def) =>
   inst._zod.onattach.push((inst2) => {
     inst2._zod.bag.contentEncoding = "base64url";
   });
-  inst._zod.check = (payload) => {
-    if (isValidBase64URL(payload.value))
+  inst._zod.check = (payload2) => {
+    if (isValidBase64URL(payload2.value))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_format",
       format: "base64url",
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -8453,13 +8453,13 @@ function isValidJWT(token, algorithm = null) {
 }
 var $ZodJWT = /* @__PURE__ */ $constructor("$ZodJWT", (inst, def) => {
   $ZodStringFormat.init(inst, def);
-  inst._zod.check = (payload) => {
-    if (isValidJWT(payload.value, def.alg))
+  inst._zod.check = (payload2) => {
+    if (isValidJWT(payload2.value, def.alg))
       return;
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_format",
       format: "jwt",
-      input: payload.value,
+      input: payload2.value,
       inst,
       continue: !def.abort
     });
@@ -8468,25 +8468,25 @@ var $ZodJWT = /* @__PURE__ */ $constructor("$ZodJWT", (inst, def) => {
 var $ZodNumber = /* @__PURE__ */ $constructor("$ZodNumber", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.pattern = inst._zod.bag.pattern ?? number;
-  inst._zod.parse = (payload, _ctx) => {
+  inst._zod.parse = (payload2, _ctx) => {
     if (def.coerce)
       try {
-        payload.value = Number(payload.value);
+        payload2.value = Number(payload2.value);
       } catch (_) {
       }
-    const input = payload.value;
+    const input = payload2.value;
     if (typeof input === "number" && !Number.isNaN(input) && Number.isFinite(input)) {
-      return payload;
+      return payload2;
     }
     const received = typeof input === "number" ? Number.isNaN(input) ? "NaN" : !Number.isFinite(input) ? "Infinity" : void 0 : void 0;
-    payload.issues.push({
+    payload2.issues.push({
       expected: "number",
       code: "invalid_type",
       input,
       inst,
       ...received ? { received } : {}
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodNumberFormat = /* @__PURE__ */ $constructor("$ZodNumber", (inst, def) => {
@@ -8496,55 +8496,55 @@ var $ZodNumberFormat = /* @__PURE__ */ $constructor("$ZodNumber", (inst, def) =>
 var $ZodBoolean = /* @__PURE__ */ $constructor("$ZodBoolean", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.pattern = boolean;
-  inst._zod.parse = (payload, _ctx) => {
+  inst._zod.parse = (payload2, _ctx) => {
     if (def.coerce)
       try {
-        payload.value = Boolean(payload.value);
+        payload2.value = Boolean(payload2.value);
       } catch (_) {
       }
-    const input = payload.value;
+    const input = payload2.value;
     if (typeof input === "boolean")
-      return payload;
-    payload.issues.push({
+      return payload2;
+    payload2.issues.push({
       expected: "boolean",
       code: "invalid_type",
       input,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodNull = /* @__PURE__ */ $constructor("$ZodNull", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.pattern = _null;
   inst._zod.values = /* @__PURE__ */ new Set([null]);
-  inst._zod.parse = (payload, _ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, _ctx) => {
+    const input = payload2.value;
     if (input === null)
-      return payload;
-    payload.issues.push({
+      return payload2;
+    payload2.issues.push({
       expected: "null",
       code: "invalid_type",
       input,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodUnknown = /* @__PURE__ */ $constructor("$ZodUnknown", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload) => payload;
+  inst._zod.parse = (payload2) => payload2;
 });
 var $ZodNever = /* @__PURE__ */ $constructor("$ZodNever", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, _ctx) => {
-    payload.issues.push({
+  inst._zod.parse = (payload2, _ctx) => {
+    payload2.issues.push({
       expected: "never",
       code: "invalid_type",
-      input: payload.value,
+      input: payload2.value,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 function handleArrayResult(result, final, index) {
@@ -8555,18 +8555,18 @@ function handleArrayResult(result, final, index) {
 }
 var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, ctx) => {
+    const input = payload2.value;
     if (!Array.isArray(input)) {
-      payload.issues.push({
+      payload2.issues.push({
         expected: "array",
         code: "invalid_type",
         input,
         inst
       });
-      return payload;
+      return payload2;
     }
-    payload.value = Array(input.length);
+    payload2.value = Array(input.length);
     const proms = [];
     for (let i = 0; i < input.length; i++) {
       const item = input[i];
@@ -8575,15 +8575,15 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
         issues: []
       }, ctx);
       if (result instanceof Promise) {
-        proms.push(result.then((result2) => handleArrayResult(result2, payload, i)));
+        proms.push(result.then((result2) => handleArrayResult(result2, payload2, i)));
       } else {
-        handleArrayResult(result, payload, i);
+        handleArrayResult(result, payload2, i);
       }
     }
     if (proms.length) {
-      return Promise.all(proms).then(() => payload);
+      return Promise.all(proms).then(() => payload2);
     }
-    return payload;
+    return payload2;
   };
 });
 function handleObjectResult(result, final, key) {
@@ -8694,7 +8694,7 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     doc.write(`payload.value = newResult;`);
     doc.write(`return payload;`);
     const fn = doc.compile();
-    return (payload, ctx) => fn(shape, payload, ctx);
+    return (payload2, ctx) => fn(shape, payload2, ctx);
   };
   let fastpass;
   const isObject2 = isObject;
@@ -8703,41 +8703,41 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
   const fastEnabled = jit && allowsEval2.value;
   const catchall = def.catchall;
   let value;
-  inst._zod.parse = (payload, ctx) => {
+  inst._zod.parse = (payload2, ctx) => {
     value ?? (value = _normalized.value);
-    const input = payload.value;
+    const input = payload2.value;
     if (!isObject2(input)) {
-      payload.issues.push({
+      payload2.issues.push({
         expected: "object",
         code: "invalid_type",
         input,
         inst
       });
-      return payload;
+      return payload2;
     }
     const proms = [];
     if (jit && fastEnabled && ctx?.async === false && ctx.jitless !== true) {
       if (!fastpass)
         fastpass = generateFastpass(def.shape);
-      payload = fastpass(payload, ctx);
+      payload2 = fastpass(payload2, ctx);
     } else {
-      payload.value = {};
+      payload2.value = {};
       const shape = value.shape;
       for (const key of value.keys) {
         const el = shape[key];
         const r = el._zod.run({ value: input[key], issues: [] }, ctx);
         const isOptional = el._zod.optin === "optional" && el._zod.optout === "optional";
         if (r instanceof Promise) {
-          proms.push(r.then((r2) => isOptional ? handleOptionalObjectResult(r2, payload, key, input) : handleObjectResult(r2, payload, key)));
+          proms.push(r.then((r2) => isOptional ? handleOptionalObjectResult(r2, payload2, key, input) : handleObjectResult(r2, payload2, key)));
         } else if (isOptional) {
-          handleOptionalObjectResult(r, payload, key, input);
+          handleOptionalObjectResult(r, payload2, key, input);
         } else {
-          handleObjectResult(r, payload, key);
+          handleObjectResult(r, payload2, key);
         }
       }
     }
     if (!catchall) {
-      return proms.length ? Promise.all(proms).then(() => payload) : payload;
+      return proms.length ? Promise.all(proms).then(() => payload2) : payload2;
     }
     const unrecognized = [];
     const keySet = value.keySet;
@@ -8752,13 +8752,13 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
       }
       const r = _catchall.run({ value: input[key], issues: [] }, ctx);
       if (r instanceof Promise) {
-        proms.push(r.then((r2) => handleObjectResult(r2, payload, key)));
+        proms.push(r.then((r2) => handleObjectResult(r2, payload2, key)));
       } else {
-        handleObjectResult(r, payload, key);
+        handleObjectResult(r, payload2, key);
       }
     }
     if (unrecognized.length) {
-      payload.issues.push({
+      payload2.issues.push({
         code: "unrecognized_keys",
         keys: unrecognized,
         input,
@@ -8766,9 +8766,9 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
       });
     }
     if (!proms.length)
-      return payload;
+      return payload2;
     return Promise.all(proms).then(() => {
-      return payload;
+      return payload2;
     });
   };
 });
@@ -8804,12 +8804,12 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
     }
     return void 0;
   });
-  inst._zod.parse = (payload, ctx) => {
+  inst._zod.parse = (payload2, ctx) => {
     let async = false;
     const results = [];
     for (const option of def.options) {
       const result = option._zod.run({
-        value: payload.value,
+        value: payload2.value,
         issues: []
       }, ctx);
       if (result instanceof Promise) {
@@ -8822,9 +8822,9 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
       }
     }
     if (!async)
-      return handleUnionResults(results, payload, inst, ctx);
+      return handleUnionResults(results, payload2, inst, ctx);
     return Promise.all(results).then((results2) => {
-      return handleUnionResults(results2, payload, inst, ctx);
+      return handleUnionResults(results2, payload2, inst, ctx);
     });
   };
 });
@@ -8863,25 +8863,25 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
     }
     return map;
   });
-  inst._zod.parse = (payload, ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, ctx) => {
+    const input = payload2.value;
     if (!isObject(input)) {
-      payload.issues.push({
+      payload2.issues.push({
         code: "invalid_type",
         expected: "object",
         input,
         inst
       });
-      return payload;
+      return payload2;
     }
     const opt = disc.value.get(input?.[def.discriminator]);
     if (opt) {
-      return opt._zod.run(payload, ctx);
+      return opt._zod.run(payload2, ctx);
     }
     if (def.unionFallback) {
-      return _super(payload, ctx);
+      return _super(payload2, ctx);
     }
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_union",
       errors: [],
       note: "No matching discriminator",
@@ -8889,22 +8889,22 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
       path: [def.discriminator],
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodIntersection = /* @__PURE__ */ $constructor("$ZodIntersection", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, ctx) => {
+    const input = payload2.value;
     const left = def.left._zod.run({ value: input, issues: [] }, ctx);
     const right = def.right._zod.run({ value: input, issues: [] }, ctx);
     const async = left instanceof Promise || right instanceof Promise;
     if (async) {
       return Promise.all([left, right]).then(([left2, right2]) => {
-        return handleIntersectionResults(payload, left2, right2);
+        return handleIntersectionResults(payload2, left2, right2);
       });
     }
-    return handleIntersectionResults(payload, left, right);
+    return handleIntersectionResults(payload2, left, right);
   };
 });
 function mergeValues(a, b) {
@@ -8969,36 +8969,36 @@ function handleIntersectionResults(result, left, right) {
 }
 var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, ctx) => {
+    const input = payload2.value;
     if (!isPlainObject(input)) {
-      payload.issues.push({
+      payload2.issues.push({
         expected: "record",
         code: "invalid_type",
         input,
         inst
       });
-      return payload;
+      return payload2;
     }
     const proms = [];
     if (def.keyType._zod.values) {
       const values = def.keyType._zod.values;
-      payload.value = {};
+      payload2.value = {};
       for (const key of values) {
         if (typeof key === "string" || typeof key === "number" || typeof key === "symbol") {
           const result = def.valueType._zod.run({ value: input[key], issues: [] }, ctx);
           if (result instanceof Promise) {
             proms.push(result.then((result2) => {
               if (result2.issues.length) {
-                payload.issues.push(...prefixIssues(key, result2.issues));
+                payload2.issues.push(...prefixIssues(key, result2.issues));
               }
-              payload.value[key] = result2.value;
+              payload2.value[key] = result2.value;
             }));
           } else {
             if (result.issues.length) {
-              payload.issues.push(...prefixIssues(key, result.issues));
+              payload2.issues.push(...prefixIssues(key, result.issues));
             }
-            payload.value[key] = result.value;
+            payload2.value[key] = result.value;
           }
         }
       }
@@ -9010,7 +9010,7 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
         }
       }
       if (unrecognized && unrecognized.length > 0) {
-        payload.issues.push({
+        payload2.issues.push({
           code: "unrecognized_keys",
           input,
           inst,
@@ -9018,7 +9018,7 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
         });
       }
     } else {
-      payload.value = {};
+      payload2.value = {};
       for (const key of Reflect.ownKeys(input)) {
         if (key === "__proto__")
           continue;
@@ -9027,7 +9027,7 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
           throw new Error("Async schemas not supported in object keys currently");
         }
         if (keyResult.issues.length) {
-          payload.issues.push({
+          payload2.issues.push({
             origin: "record",
             code: "invalid_key",
             issues: keyResult.issues.map((iss) => finalizeIssue(iss, ctx, config())),
@@ -9035,29 +9035,29 @@ var $ZodRecord = /* @__PURE__ */ $constructor("$ZodRecord", (inst, def) => {
             path: [key],
             inst
           });
-          payload.value[keyResult.value] = keyResult.value;
+          payload2.value[keyResult.value] = keyResult.value;
           continue;
         }
         const result = def.valueType._zod.run({ value: input[key], issues: [] }, ctx);
         if (result instanceof Promise) {
           proms.push(result.then((result2) => {
             if (result2.issues.length) {
-              payload.issues.push(...prefixIssues(key, result2.issues));
+              payload2.issues.push(...prefixIssues(key, result2.issues));
             }
-            payload.value[keyResult.value] = result2.value;
+            payload2.value[keyResult.value] = result2.value;
           }));
         } else {
           if (result.issues.length) {
-            payload.issues.push(...prefixIssues(key, result.issues));
+            payload2.issues.push(...prefixIssues(key, result.issues));
           }
-          payload.value[keyResult.value] = result.value;
+          payload2.value[keyResult.value] = result.value;
         }
       }
     }
     if (proms.length) {
-      return Promise.all(proms).then(() => payload);
+      return Promise.all(proms).then(() => payload2);
     }
-    return payload;
+    return payload2;
   };
 });
 var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
@@ -9065,54 +9065,54 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
   const values = getEnumValues(def.entries);
   inst._zod.values = new Set(values);
   inst._zod.pattern = new RegExp(`^(${values.filter((k) => propertyKeyTypes.has(typeof k)).map((o) => typeof o === "string" ? escapeRegex(o) : o.toString()).join("|")})$`);
-  inst._zod.parse = (payload, _ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, _ctx) => {
+    const input = payload2.value;
     if (inst._zod.values.has(input)) {
-      return payload;
+      return payload2;
     }
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_value",
       values,
       input,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.values = new Set(def.values);
   inst._zod.pattern = new RegExp(`^(${def.values.map((o) => typeof o === "string" ? escapeRegex(o) : o ? o.toString() : String(o)).join("|")})$`);
-  inst._zod.parse = (payload, _ctx) => {
-    const input = payload.value;
+  inst._zod.parse = (payload2, _ctx) => {
+    const input = payload2.value;
     if (inst._zod.values.has(input)) {
-      return payload;
+      return payload2;
     }
-    payload.issues.push({
+    payload2.issues.push({
       code: "invalid_value",
       values: def.values,
       input,
       inst
     });
-    return payload;
+    return payload2;
   };
 });
 var $ZodTransform = /* @__PURE__ */ $constructor("$ZodTransform", (inst, def) => {
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, _ctx) => {
-    const _out = def.transform(payload.value, payload);
+  inst._zod.parse = (payload2, _ctx) => {
+    const _out = def.transform(payload2.value, payload2);
     if (_ctx.async) {
       const output = _out instanceof Promise ? _out : Promise.resolve(_out);
       return output.then((output2) => {
-        payload.value = output2;
-        return payload;
+        payload2.value = output2;
+        return payload2;
       });
     }
     if (_out instanceof Promise) {
       throw new $ZodAsyncError();
     }
-    payload.value = _out;
-    return payload;
+    payload2.value = _out;
+    return payload2;
   };
 });
 var $ZodOptional = /* @__PURE__ */ $constructor("$ZodOptional", (inst, def) => {
@@ -9126,14 +9126,14 @@ var $ZodOptional = /* @__PURE__ */ $constructor("$ZodOptional", (inst, def) => {
     const pattern = def.innerType._zod.pattern;
     return pattern ? new RegExp(`^(${cleanRegex(pattern.source)})?$`) : void 0;
   });
-  inst._zod.parse = (payload, ctx) => {
+  inst._zod.parse = (payload2, ctx) => {
     if (def.innerType._zod.optin === "optional") {
-      return def.innerType._zod.run(payload, ctx);
+      return def.innerType._zod.run(payload2, ctx);
     }
-    if (payload.value === void 0) {
-      return payload;
+    if (payload2.value === void 0) {
+      return payload2;
     }
-    return def.innerType._zod.run(payload, ctx);
+    return def.innerType._zod.run(payload2, ctx);
   };
 });
 var $ZodNullable = /* @__PURE__ */ $constructor("$ZodNullable", (inst, def) => {
@@ -9147,43 +9147,43 @@ var $ZodNullable = /* @__PURE__ */ $constructor("$ZodNullable", (inst, def) => {
   defineLazy(inst._zod, "values", () => {
     return def.innerType._zod.values ? /* @__PURE__ */ new Set([...def.innerType._zod.values, null]) : void 0;
   });
-  inst._zod.parse = (payload, ctx) => {
-    if (payload.value === null)
-      return payload;
-    return def.innerType._zod.run(payload, ctx);
+  inst._zod.parse = (payload2, ctx) => {
+    if (payload2.value === null)
+      return payload2;
+    return def.innerType._zod.run(payload2, ctx);
   };
 });
 var $ZodDefault = /* @__PURE__ */ $constructor("$ZodDefault", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.optin = "optional";
   defineLazy(inst._zod, "values", () => def.innerType._zod.values);
-  inst._zod.parse = (payload, ctx) => {
-    if (payload.value === void 0) {
-      payload.value = def.defaultValue;
-      return payload;
+  inst._zod.parse = (payload2, ctx) => {
+    if (payload2.value === void 0) {
+      payload2.value = def.defaultValue;
+      return payload2;
     }
-    const result = def.innerType._zod.run(payload, ctx);
+    const result = def.innerType._zod.run(payload2, ctx);
     if (result instanceof Promise) {
       return result.then((result2) => handleDefaultResult(result2, def));
     }
     return handleDefaultResult(result, def);
   };
 });
-function handleDefaultResult(payload, def) {
-  if (payload.value === void 0) {
-    payload.value = def.defaultValue;
+function handleDefaultResult(payload2, def) {
+  if (payload2.value === void 0) {
+    payload2.value = def.defaultValue;
   }
-  return payload;
+  return payload2;
 }
 var $ZodPrefault = /* @__PURE__ */ $constructor("$ZodPrefault", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.optin = "optional";
   defineLazy(inst._zod, "values", () => def.innerType._zod.values);
-  inst._zod.parse = (payload, ctx) => {
-    if (payload.value === void 0) {
-      payload.value = def.defaultValue;
+  inst._zod.parse = (payload2, ctx) => {
+    if (payload2.value === void 0) {
+      payload2.value = def.defaultValue;
     }
-    return def.innerType._zod.run(payload, ctx);
+    return def.innerType._zod.run(payload2, ctx);
   };
 });
 var $ZodNonOptional = /* @__PURE__ */ $constructor("$ZodNonOptional", (inst, def) => {
@@ -9192,60 +9192,60 @@ var $ZodNonOptional = /* @__PURE__ */ $constructor("$ZodNonOptional", (inst, def
     const v = def.innerType._zod.values;
     return v ? new Set([...v].filter((x) => x !== void 0)) : void 0;
   });
-  inst._zod.parse = (payload, ctx) => {
-    const result = def.innerType._zod.run(payload, ctx);
+  inst._zod.parse = (payload2, ctx) => {
+    const result = def.innerType._zod.run(payload2, ctx);
     if (result instanceof Promise) {
       return result.then((result2) => handleNonOptionalResult(result2, inst));
     }
     return handleNonOptionalResult(result, inst);
   };
 });
-function handleNonOptionalResult(payload, inst) {
-  if (!payload.issues.length && payload.value === void 0) {
-    payload.issues.push({
+function handleNonOptionalResult(payload2, inst) {
+  if (!payload2.issues.length && payload2.value === void 0) {
+    payload2.issues.push({
       code: "invalid_type",
       expected: "nonoptional",
-      input: payload.value,
+      input: payload2.value,
       inst
     });
   }
-  return payload;
+  return payload2;
 }
 var $ZodCatch = /* @__PURE__ */ $constructor("$ZodCatch", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.optin = "optional";
   defineLazy(inst._zod, "optout", () => def.innerType._zod.optout);
   defineLazy(inst._zod, "values", () => def.innerType._zod.values);
-  inst._zod.parse = (payload, ctx) => {
-    const result = def.innerType._zod.run(payload, ctx);
+  inst._zod.parse = (payload2, ctx) => {
+    const result = def.innerType._zod.run(payload2, ctx);
     if (result instanceof Promise) {
       return result.then((result2) => {
-        payload.value = result2.value;
+        payload2.value = result2.value;
         if (result2.issues.length) {
-          payload.value = def.catchValue({
-            ...payload,
+          payload2.value = def.catchValue({
+            ...payload2,
             error: {
               issues: result2.issues.map((iss) => finalizeIssue(iss, ctx, config()))
             },
-            input: payload.value
+            input: payload2.value
           });
-          payload.issues = [];
+          payload2.issues = [];
         }
-        return payload;
+        return payload2;
       });
     }
-    payload.value = result.value;
+    payload2.value = result.value;
     if (result.issues.length) {
-      payload.value = def.catchValue({
-        ...payload,
+      payload2.value = def.catchValue({
+        ...payload2,
         error: {
           issues: result.issues.map((iss) => finalizeIssue(iss, ctx, config()))
         },
-        input: payload.value
+        input: payload2.value
       });
-      payload.issues = [];
+      payload2.issues = [];
     }
-    return payload;
+    return payload2;
   };
 });
 var $ZodPipe = /* @__PURE__ */ $constructor("$ZodPipe", (inst, def) => {
@@ -9253,8 +9253,8 @@ var $ZodPipe = /* @__PURE__ */ $constructor("$ZodPipe", (inst, def) => {
   defineLazy(inst._zod, "values", () => def.in._zod.values);
   defineLazy(inst._zod, "optin", () => def.in._zod.optin);
   defineLazy(inst._zod, "optout", () => def.out._zod.optout);
-  inst._zod.parse = (payload, ctx) => {
-    const left = def.in._zod.run(payload, ctx);
+  inst._zod.parse = (payload2, ctx) => {
+    const left = def.in._zod.run(payload2, ctx);
     if (left instanceof Promise) {
       return left.then((left2) => handlePipeResult(left2, def, ctx));
     }
@@ -9273,35 +9273,35 @@ var $ZodReadonly = /* @__PURE__ */ $constructor("$ZodReadonly", (inst, def) => {
   defineLazy(inst._zod, "values", () => def.innerType._zod.values);
   defineLazy(inst._zod, "optin", () => def.innerType._zod.optin);
   defineLazy(inst._zod, "optout", () => def.innerType._zod.optout);
-  inst._zod.parse = (payload, ctx) => {
-    const result = def.innerType._zod.run(payload, ctx);
+  inst._zod.parse = (payload2, ctx) => {
+    const result = def.innerType._zod.run(payload2, ctx);
     if (result instanceof Promise) {
       return result.then(handleReadonlyResult);
     }
     return handleReadonlyResult(result);
   };
 });
-function handleReadonlyResult(payload) {
-  payload.value = Object.freeze(payload.value);
-  return payload;
+function handleReadonlyResult(payload2) {
+  payload2.value = Object.freeze(payload2.value);
+  return payload2;
 }
 var $ZodCustom = /* @__PURE__ */ $constructor("$ZodCustom", (inst, def) => {
   $ZodCheck.init(inst, def);
   $ZodType.init(inst, def);
-  inst._zod.parse = (payload, _) => {
-    return payload;
+  inst._zod.parse = (payload2, _) => {
+    return payload2;
   };
-  inst._zod.check = (payload) => {
-    const input = payload.value;
+  inst._zod.check = (payload2) => {
+    const input = payload2.value;
     const r = def.fn(input);
     if (r instanceof Promise) {
-      return r.then((r2) => handleRefineResult(r2, payload, input, inst));
+      return r.then((r2) => handleRefineResult(r2, payload2, input, inst));
     }
-    handleRefineResult(r, payload, input, inst);
+    handleRefineResult(r, payload2, input, inst);
     return;
   };
 });
-function handleRefineResult(result, payload, input, inst) {
+function handleRefineResult(result, payload2, input, inst) {
   if (!result) {
     const _iss = {
       code: "custom",
@@ -9315,7 +9315,7 @@ function handleRefineResult(result, payload, input, inst) {
     };
     if (inst._zod.def.params)
       _iss.params = inst._zod.def.params;
-    payload.issues.push(issue(_iss));
+    payload2.issues.push(issue(_iss));
   }
 }
 
@@ -11209,30 +11209,30 @@ function literal(value, params) {
 var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
   $ZodTransform.init(inst, def);
   ZodType.init(inst, def);
-  inst._zod.parse = (payload, _ctx) => {
-    payload.addIssue = (issue2) => {
+  inst._zod.parse = (payload2, _ctx) => {
+    payload2.addIssue = (issue2) => {
       if (typeof issue2 === "string") {
-        payload.issues.push(util_exports.issue(issue2, payload.value, def));
+        payload2.issues.push(util_exports.issue(issue2, payload2.value, def));
       } else {
         const _issue = issue2;
         if (_issue.fatal)
           _issue.continue = false;
         _issue.code ?? (_issue.code = "custom");
-        _issue.input ?? (_issue.input = payload.value);
+        _issue.input ?? (_issue.input = payload2.value);
         _issue.inst ?? (_issue.inst = inst);
         _issue.continue ?? (_issue.continue = true);
-        payload.issues.push(util_exports.issue(_issue));
+        payload2.issues.push(util_exports.issue(_issue));
       }
     };
-    const output = def.transform(payload.value, payload);
+    const output = def.transform(payload2.value, payload2);
     if (output instanceof Promise) {
       return output.then((output2) => {
-        payload.value = output2;
-        return payload;
+        payload2.value = output2;
+        return payload2;
       });
     }
-    payload.value = output;
-    return payload;
+    payload2.value = output;
+    return payload2;
   };
 });
 function transform(fn) {
@@ -11360,22 +11360,22 @@ function refine(fn, _params = {}) {
   return _refine(ZodCustom, fn, _params);
 }
 function superRefine(fn) {
-  const ch = check((payload) => {
-    payload.addIssue = (issue2) => {
+  const ch = check((payload2) => {
+    payload2.addIssue = (issue2) => {
       if (typeof issue2 === "string") {
-        payload.issues.push(util_exports.issue(issue2, payload.value, ch._zod.def));
+        payload2.issues.push(util_exports.issue(issue2, payload2.value, ch._zod.def));
       } else {
         const _issue = issue2;
         if (_issue.fatal)
           _issue.continue = false;
         _issue.code ?? (_issue.code = "custom");
-        _issue.input ?? (_issue.input = payload.value);
+        _issue.input ?? (_issue.input = payload2.value);
         _issue.inst ?? (_issue.inst = ch);
         _issue.continue ?? (_issue.continue = !ch._zod.def.abort);
-        payload.issues.push(util_exports.issue(_issue));
+        payload2.issues.push(util_exports.issue(_issue));
       }
     };
-    return fn(payload.value, payload);
+    return fn(payload2.value, payload2);
   });
   return ch;
 }
@@ -21163,7 +21163,17 @@ var ApiError = class extends Error {
     this.body = body2;
   }
 };
+var LoginExpiredError = class extends ApiError {
+  constructor() {
+    super(
+      401,
+      "O acesso pelo navegador expirou e n\xE3o deu para renovar sozinho. Rode `beplus-mcp login` de novo e autorize; n\xE3o precisa reiniciar o agente, a pr\xF3xima chamada j\xE1 usa o login novo."
+    );
+    this.name = "LoginExpiredError";
+  }
+};
 function apiErrorToUserMessage(err) {
+  if (err instanceof LoginExpiredError) return err.message;
   if (err instanceof ApiError) {
     const detail = err.message || "";
     switch (err.httpStatus) {
@@ -21195,6 +21205,333 @@ function apiErrorToUserMessage(err) {
   return String(err);
 }
 
+// src/credentials.ts
+import { chmod, mkdir, open, readFile, rename, stat, unlink, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+function credentialsPath() {
+  const base = process.env.XDG_CONFIG_HOME?.trim() || join(homedir(), ".config");
+  return join(base, "beplus-mcp", "credentials.json");
+}
+async function readCredentials() {
+  try {
+    const raw = await readFile(credentialsPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed.accessToken || !parsed.apiUrl) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+async function writeCredentials(creds) {
+  const path = credentialsPath();
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  const tmp = `${path}.${process.pid}.tmp`;
+  await writeFile(tmp, `${JSON.stringify(creds, null, 2)}
+`, { mode: 384 });
+  await chmod(tmp, 384);
+  await rename(tmp, path);
+  return path;
+}
+async function clearCredentials() {
+  try {
+    await unlink(credentialsPath());
+    return true;
+  } catch {
+    return false;
+  }
+}
+var RENEW_MARGIN_MS = 6e4;
+function isExpired(creds) {
+  return typeof creds.expiresAt === "number" && creds.expiresAt - RENEW_MARGIN_MS <= Date.now();
+}
+var credentialsLock = {
+  staleMs: 3e4,
+  waitMs: 35e3,
+  pollMs: 100
+};
+async function withCredentialsLock(fn) {
+  const path = credentialsPath();
+  const lock = `${path}.lock`;
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  const started = Date.now();
+  for (; ; ) {
+    try {
+      const fh = await open(lock, "wx", 384);
+      await fh.writeFile(String(process.pid));
+      await fh.close();
+      break;
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
+      try {
+        const age = Date.now() - (await stat(lock)).mtimeMs;
+        if (age > credentialsLock.staleMs) {
+          await unlink(lock).catch(() => {
+          });
+          continue;
+        }
+      } catch {
+        continue;
+      }
+      if (Date.now() - started > credentialsLock.waitMs) {
+        throw new Error("Outro processo do beplus-mcp est\xE1 renovando o login h\xE1 tempo demais. Tente de novo em instantes.");
+      }
+      await new Promise((r) => setTimeout(r, credentialsLock.pollMs));
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    await unlink(lock).catch(() => {
+    });
+  }
+}
+
+// src/oauth.ts
+import crypto from "crypto";
+import { createServer } from "http";
+import { spawn } from "child_process";
+var CALLBACK_TIMEOUT_MS = 5 * 6e4;
+var REQUEST_TIMEOUT_MS = 1e4;
+async function json(url, init) {
+  let res;
+  try {
+    res = await fetch(url, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+  } catch {
+    throw new Error(`Nao consegui falar com ${new URL(url).origin}. Confira a rede e o BEPLUS_API_URL.`);
+  }
+  const text = await res.text();
+  let body2;
+  try {
+    body2 = text ? JSON.parse(text) : void 0;
+  } catch {
+  }
+  if (!res.ok) {
+    const msg = body2?.message ?? body2?.error_description ?? body2?.error ?? `HTTP ${res.status}`;
+    throw new Error(`${msg} (${url})`);
+  }
+  return body2;
+}
+async function discover(apiUrl2) {
+  const meta = await json(`${apiUrl2}/.well-known/oauth-authorization-server`);
+  if (!meta.authorization_endpoint || !meta.token_endpoint || !meta.registration_endpoint) {
+    throw new Error("O servidor respondeu a descoberta sem os endpoints obrigatorios.");
+  }
+  return meta;
+}
+function pkce() {
+  const verifier = crypto.randomBytes(32).toString("base64url");
+  return { verifier, challenge: crypto.createHash("sha256").update(verifier).digest("base64url") };
+}
+function openBrowser(url) {
+  try {
+    if (process.platform === "win32") {
+      spawn("cmd.exe", ["/c", "start", '""', "/b", url.replace(/&/g, "^&")], {
+        stdio: "ignore",
+        detached: true,
+        windowsVerbatimArguments: true
+      }).unref();
+      return;
+    }
+    const cmd = process.platform === "darwin" ? "open" : "xdg-open";
+    spawn(cmd, [url], { stdio: "ignore", detached: true }).unref();
+  } catch {
+  }
+}
+var PAGINA_OK = `<!doctype html><meta charset="utf-8"><title>Pronto</title>
+<body style="margin:0;min-height:100vh;display:grid;place-items:center;font:16px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#0e1433;color:#f7f6f2">
+<div style="text-align:center;padding:24px"><h1 style="font-size:22px;margin:0 0 8px">Tudo certo</h1>
+<p style="margin:0;opacity:.7">Pode fechar esta aba e voltar para o seu agente.</p></div>`;
+var PAGINA_ERRO = `<!doctype html><meta charset="utf-8"><title>Nao deu</title>
+<body style="margin:0;min-height:100vh;display:grid;place-items:center;font:16px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#0e1433;color:#f7f6f2">
+<div style="text-align:center;padding:24px"><h1 style="font-size:22px;margin:0 0 8px">Nao foi dessa vez</h1>
+<p style="margin:0;opacity:.7">Volte ao terminal para ver o motivo.</p></div>`;
+function listenForCallback(expectedState) {
+  return new Promise((resolvePort, rejectPort) => {
+    let settle;
+    let fail;
+    const code = new Promise((res, rej) => {
+      settle = res;
+      fail = rej;
+    });
+    const server = createServer((req, res) => {
+      const url = new URL(req.url ?? "/", "http://127.0.0.1");
+      if (url.pathname !== "/callback") {
+        res.writeHead(404).end();
+        return;
+      }
+      const erro = url.searchParams.get("error");
+      const recebido = url.searchParams.get("code");
+      const state = url.searchParams.get("state") ?? "";
+      const ok = !erro && recebido && state === expectedState;
+      res.writeHead(ok ? 200 : 400, { "content-type": "text/html; charset=utf-8" });
+      res.end(ok ? PAGINA_OK : PAGINA_ERRO);
+      server.close();
+      if (erro) return fail(new Error(url.searchParams.get("error_description") || erro));
+      if (!recebido || state !== expectedState) return fail(new Error("Resposta de autorizacao invalida."));
+      settle({ code: recebido, state });
+    });
+    server.on("error", rejectPort);
+    server.listen(0, "127.0.0.1", () => {
+      const addr = server.address();
+      if (!addr || typeof addr === "string") return rejectPort(new Error("Nao consegui abrir a porta local."));
+      const timer = setTimeout(() => {
+        server.close();
+        fail(new Error("Tempo esgotado esperando a autorizacao no navegador."));
+      }, CALLBACK_TIMEOUT_MS);
+      void code.finally(() => clearTimeout(timer));
+      resolvePort({ port: addr.port, code });
+    });
+  });
+}
+function toStored(t, apiUrl2, clientId) {
+  return {
+    accessToken: t.access_token,
+    refreshToken: t.refresh_token,
+    expiresAt: t.expires_in ? Date.now() + t.expires_in * 1e3 : void 0,
+    apiUrl: apiUrl2,
+    clientId
+  };
+}
+async function login(apiUrl2, onUrl) {
+  const meta = await discover(apiUrl2);
+  const state = crypto.randomBytes(24).toString("base64url");
+  const { verifier, challenge } = pkce();
+  const { port, code } = await listenForCallback(state);
+  const redirectUri = `http://127.0.0.1:${port}/callback`;
+  const client = await json(meta.registration_endpoint, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      client_name: "beplus-mcp (CLI)",
+      redirect_uris: [redirectUri],
+      token_endpoint_auth_method: "none",
+      grant_types: ["authorization_code", "refresh_token"]
+    })
+  });
+  const authorizeUrl = new URL(meta.authorization_endpoint);
+  authorizeUrl.searchParams.set("response_type", "code");
+  authorizeUrl.searchParams.set("client_id", client.client_id);
+  authorizeUrl.searchParams.set("redirect_uri", redirectUri);
+  authorizeUrl.searchParams.set("code_challenge", challenge);
+  authorizeUrl.searchParams.set("code_challenge_method", "S256");
+  authorizeUrl.searchParams.set("state", state);
+  onUrl(authorizeUrl.toString());
+  openBrowser(authorizeUrl.toString());
+  const { code: authCode } = await code;
+  const token = await json(meta.token_endpoint, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      grant_type: "authorization_code",
+      code: authCode,
+      code_verifier: verifier,
+      client_id: client.client_id,
+      redirect_uri: redirectUri
+    })
+  });
+  const path = await writeCredentials(toStored(token, apiUrl2, client.client_id));
+  return { path, authorizeUrl: authorizeUrl.toString() };
+}
+var sameApi = (a, b) => a.replace(/\/+$/, "") === b.replace(/\/+$/, "");
+async function refreshGrant(apiUrl2, creds) {
+  const meta = await discover(apiUrl2);
+  const token = await json(meta.token_endpoint, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      grant_type: "refresh_token",
+      refresh_token: creds.refreshToken,
+      client_id: creds.clientId
+    })
+  });
+  return toStored(token, apiUrl2, creds.clientId);
+}
+async function renewFromDisk(apiUrl2, rejected) {
+  try {
+    return await withCredentialsLock(async () => {
+      const creds = await readCredentials();
+      if (!creds || !sameApi(creds.apiUrl, apiUrl2)) return null;
+      if (creds.accessToken !== rejected && !isExpired(creds)) return creds.accessToken;
+      if (!creds.refreshToken) return null;
+      const fresh = await refreshGrant(apiUrl2, creds);
+      await writeCredentials(fresh);
+      return fresh.accessToken;
+    });
+  } catch {
+    return null;
+  }
+}
+async function tokenFromDisk(apiUrl2) {
+  const creds = await readCredentials();
+  if (!creds || !sameApi(creds.apiUrl, apiUrl2)) return null;
+  if (!isExpired(creds)) return creds.accessToken;
+  if (!creds.refreshToken) return null;
+  return renewFromDisk(apiUrl2, creds.accessToken);
+}
+
+// src/auth.ts
+function staticToken(token) {
+  return { renewable: false, current: async () => token, refresh: async () => null };
+}
+var LoginToken = class {
+  constructor(apiUrl2, last) {
+    this.apiUrl = apiUrl2;
+    this.last = last;
+  }
+  apiUrl;
+  last;
+  renewable = true;
+  /** Token cuja renovação antecipada acabou de falhar: o 401 dele não tenta de novo. */
+  failedFor = null;
+  async current() {
+    const creds = await readCredentials();
+    if (!creds || creds.apiUrl.replace(/\/+$/, "") !== this.apiUrl.replace(/\/+$/, "")) return this.last;
+    if (isExpired(creds) && creds.refreshToken) {
+      const fresh = await renewFromDisk(this.apiUrl, creds.accessToken);
+      if (fresh) return this.last = fresh;
+      this.failedFor = creds.accessToken;
+    }
+    return this.last = creds.accessToken;
+  }
+  async refresh(rejected) {
+    if (rejected === this.failedFor) return null;
+    const fresh = await renewFromDisk(this.apiUrl, rejected);
+    if (fresh) this.last = fresh;
+    return fresh;
+  }
+};
+function tokenProvider(cfg) {
+  return cfg.auth ?? staticToken(cfg.token);
+}
+async function fetchWithAuth(cfg, url, init, what) {
+  const auth = tokenProvider(cfg);
+  const send = async (token2) => {
+    const { timeoutMs, headers, ...rest } = init;
+    try {
+      return await fetch(url, {
+        ...rest,
+        headers: { ...headers, Authorization: `Bearer ${token2}` },
+        signal: AbortSignal.timeout(timeoutMs)
+      });
+    } catch (e) {
+      const name = e?.name;
+      if (name === "TimeoutError" || name === "AbortError") {
+        throw new ApiError(408, `Tempo esgotado ao falar com a API BePlus (${what}).`);
+      }
+      throw new ApiError(0, `Falha de rede ao falar com a API BePlus (${what}). Confira BEPLUS_API_URL.`);
+    }
+  };
+  const token = await auth.current();
+  const res = await send(token);
+  if (res.status !== 401 || !auth.renewable) return res;
+  await res.body?.cancel().catch(() => {
+  });
+  const fresh = await auth.refresh(token);
+  if (!fresh) throw new LoginExpiredError();
+  return send(fresh);
+}
+
 // src/api/client.ts
 var BeplusClient = class {
   constructor(cfg) {
@@ -21209,28 +21546,23 @@ var BeplusClient = class {
         if (v !== void 0 && v !== null && v !== "") url.searchParams.set(k, String(v));
       }
     }
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 3e4);
-    let res;
-    try {
-      res = await fetch(url, {
+    const res = await fetchWithAuth(
+      this.cfg,
+      url,
+      {
         method,
-        headers: {
-          Authorization: `Bearer ${this.cfg.token}`,
-          ...opts.body ? { "Content-Type": "application/json" } : {}
-        },
+        headers: opts.body ? { "Content-Type": "application/json" } : {},
         body: opts.body ? JSON.stringify(opts.body) : void 0,
-        signal: controller.signal
-      });
-    } catch (e) {
-      if (e?.name === "AbortError") {
-        throw new ApiError(408, `Tempo esgotado ao falar com a API BePlus (${path}).`);
-      }
-      throw new ApiError(0, `Falha de rede ao falar com a API BePlus (${path}). Confira BEPLUS_API_URL.`);
-    } finally {
-      clearTimeout(timer);
+        timeoutMs: opts.timeoutMs ?? 3e4
+      },
+      path
+    );
+    let text;
+    try {
+      text = await res.text();
+    } catch {
+      throw new ApiError(408, `Tempo esgotado ao falar com a API BePlus (${path}).`);
     }
-    const text = await res.text();
     let json2;
     if (text) {
       try {
@@ -21386,9 +21718,9 @@ async function pollUntilDone(client, generationId, budgetMs, jitterSeed = 0) {
 }
 
 // src/media.ts
-import { readFile } from "fs/promises";
+import { readFile as readFile2, stat as stat2 } from "fs/promises";
 import { basename, extname, isAbsolute, resolve } from "path";
-import { homedir } from "os";
+import { homedir as homedir2 } from "os";
 import { fileURLToPath } from "url";
 var MIME_BY_EXT = {
   ".png": "image/png",
@@ -21396,82 +21728,207 @@ var MIME_BY_EXT = {
   ".jpeg": "image/jpeg",
   ".webp": "image/webp",
   ".gif": "image/gif",
+  ".avif": "image/avif",
+  ".heic": "image/heic",
+  ".heif": "image/heif",
   ".bmp": "image/bmp",
+  ".tif": "image/tiff",
+  ".tiff": "image/tiff",
   ".svg": "image/svg+xml",
   ".mp4": "video/mp4",
   ".mov": "video/quicktime",
   ".webm": "video/webm",
   ".m4v": "video/x-m4v",
+  ".mkv": "video/x-matroska",
+  ".mpeg": "video/mpeg",
+  ".mpg": "video/mpeg",
+  ".avi": "video/x-msvideo",
+  ".3gp": "video/3gpp",
   ".mp3": "audio/mpeg",
   ".wav": "audio/wav",
   ".m4a": "audio/mp4",
   ".aac": "audio/aac",
   ".ogg": "audio/ogg",
+  ".oga": "audio/ogg",
+  ".opus": "audio/opus",
   ".flac": "audio/flac",
-  ".pdf": "application/pdf"
+  ".aiff": "audio/aiff",
+  ".aif": "audio/aiff",
+  ".pdf": "application/pdf",
+  ".md": "text/markdown",
+  ".txt": "text/plain"
 };
-var MAX_UPLOAD_BYTES = 300 * 1024 * 1024;
+var UPLOAD_EXTENSIONS = [
+  "jpg",
+  "jpeg",
+  "png",
+  "gif",
+  "webp",
+  "avif",
+  "heic",
+  "heif",
+  "bmp",
+  "tif",
+  "tiff",
+  "mp4",
+  "webm",
+  "mov",
+  "m4v",
+  "mkv",
+  "mpeg",
+  "mpg",
+  "avi",
+  "flv",
+  "wmv",
+  "3gp",
+  "3gpp",
+  "mp3",
+  "wav",
+  "ogg",
+  "oga",
+  "aac",
+  "flac",
+  "m4a",
+  "opus",
+  "wma",
+  "aiff",
+  "aif",
+  "pdf",
+  "md",
+  "txt",
+  "markdown"
+];
+var MAX_UPLOAD_BYTES = 95 * 1024 * 1024;
 var UPLOAD_TIMEOUT_MS = 12e4;
+var DOWNLOAD_TIMEOUT_MS = 12e4;
+var BEPLUS_STORAGE_HOST = "storage.beplus.academy";
 function isRemoteRef(ref) {
   return /^https?:\/\//i.test(ref);
 }
 function toLocalPath(ref) {
   if (ref.startsWith("file://")) return fileURLToPath(ref);
-  if (ref === "~") return homedir();
-  if (ref.startsWith("~/")) return resolve(homedir(), ref.slice(2));
+  if (ref === "~") return homedir2();
+  if (ref.startsWith("~/")) return resolve(homedir2(), ref.slice(2));
   return isAbsolute(ref) ? ref : resolve(process.cwd(), ref);
 }
-function mimeForPath(path) {
-  return MIME_BY_EXT[extname(path).toLowerCase()] ?? "application/octet-stream";
+function mimeForName(name) {
+  return MIME_BY_EXT[extname(name).toLowerCase()] ?? "application/octet-stream";
 }
-async function uploadFile(cfg, ref) {
+var extOf = (name) => extname(name).slice(1).toLowerCase();
+function mb(bytes) {
+  return (bytes / 1024 / 1024).toFixed(1).replace(".", ",");
+}
+function tooLarge(name, bytes) {
+  const size = bytes === null ? "passa" : `tem ${mb(bytes)} MB,`;
+  return new ApiError(
+    413,
+    `"${name}" ${size} acima do teto de 95 MB para subir pela API (o proxy da Cloudflare corta corpo acima de 100 MB antes de chegar no servidor). Comprima ou corte o arquivo (ex.: ffmpeg -i entrada.mp4 -crf 26 saida.mp4) e tente de novo.`
+  );
+}
+async function loadLocal(ref) {
   const abs = toLocalPath(ref);
-  let buf;
+  const name = basename(abs);
+  let size;
   try {
-    buf = await readFile(abs);
+    size = (await stat2(abs)).size;
   } catch {
     throw new ApiError(
       0,
       `Arquivo local n\xE3o encontrado: "${ref}". Passe um caminho v\xE1lido ou uma URL p\xFAblica (http/https).`
     );
   }
-  const name = basename(abs);
-  if (buf.byteLength > MAX_UPLOAD_BYTES) {
-    throw new ApiError(
-      413,
-      `"${name}" tem ${(buf.byteLength / 1024 / 1024).toFixed(1)}MB \u2014 acima do limite de 300MB para upload.`
-    );
-  }
-  const form = new FormData();
-  form.append("file", new Blob([buf], { type: mimeForPath(abs) }), name);
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), UPLOAD_TIMEOUT_MS);
+  if (size > MAX_UPLOAD_BYTES) throw tooLarge(name, size);
+  return { buf: await readFile2(abs), name, mime: mimeForName(abs), localPath: abs };
+}
+async function loadRemote(url) {
+  const u = new URL(url);
+  let name = decodeURIComponent(basename(u.pathname)) || "arquivo";
   let res;
   try {
-    res = await fetch(`${cfg.baseUrl}/api/v1/files/upload`, {
-      method: "POST",
-      headers: { Authorization: `Bearer ${cfg.token}` },
-      body: form,
-      signal: controller.signal
+    res = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
+  } catch {
+    throw new ApiError(0, `N\xE3o consegui baixar ${url} (rede ou tempo esgotado).`);
+  }
+  if (!res.ok) {
+    await res.body?.cancel().catch(() => {
     });
+    throw new ApiError(res.status, `N\xE3o consegui baixar ${url}: a origem respondeu HTTP ${res.status}.`);
+  }
+  const declared = Number(res.headers.get("content-length") ?? NaN);
+  if (Number.isFinite(declared) && declared > MAX_UPLOAD_BYTES) {
+    await res.body?.cancel().catch(() => {
+    });
+    throw tooLarge(name, declared);
+  }
+  const chunks = [];
+  let total = 0;
+  try {
+    const reader = res.body?.getReader();
+    if (reader) {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        total += value.byteLength;
+        if (total > MAX_UPLOAD_BYTES) {
+          await reader.cancel().catch(() => {
+          });
+          throw tooLarge(name, null);
+        }
+        chunks.push(Buffer.from(value.buffer, value.byteOffset, value.byteLength));
+      }
+    }
   } catch (e) {
-    if (e?.name === "AbortError") {
-      throw new ApiError(408, `Tempo esgotado ao subir "${name}" para o R2.`);
+    if (e instanceof ApiError) throw e;
+    throw new ApiError(0, `O download de ${url} caiu no meio (rede ou tempo esgotado).`);
+  }
+  const buf = Buffer.concat(chunks);
+  const typed = (res.headers.get("content-type") ?? "").split(";")[0].trim().toLowerCase();
+  let mime = mimeForName(name);
+  if (mime === "application/octet-stream" && typed) {
+    const ext = Object.entries(MIME_BY_EXT).find(([, m]) => m === typed)?.[0];
+    if (ext) {
+      name = `${name.replace(/\.$/, "")}${ext}`;
+      mime = typed;
     }
-    throw new ApiError(0, `Falha de rede ao subir "${name}" para o R2. Confira BEPLUS_API_URL.`);
-  } finally {
-    clearTimeout(timer);
   }
-  const text = await res.text();
+  return { buf, name, mime };
+}
+async function uploadBytes(cfg, file) {
+  const { buf, name, mime } = file;
+  if (!UPLOAD_EXTENSIONS.includes(extOf(name))) {
+    throw new ApiError(
+      422,
+      `"${name}" n\xE3o sobe pela rota de arquivos da BePlus: a extens\xE3o n\xE3o est\xE1 na lista aceita (${UPLOAD_EXTENSIONS.join(", ")}). Converta para um desses formatos.`
+    );
+  }
+  if (buf.byteLength > MAX_UPLOAD_BYTES) throw tooLarge(name, buf.byteLength);
+  const form = new FormData();
+  form.append("file", new Blob([buf], { type: mime }), name);
+  const res = await fetchWithAuth(
+    cfg,
+    `${cfg.baseUrl}/api/v1/files/upload`,
+    { method: "POST", body: form, timeoutMs: UPLOAD_TIMEOUT_MS },
+    `upload de "${name}"`
+  );
   let json2;
-  if (text) {
-    try {
-      json2 = JSON.parse(text);
-    } catch {
-    }
+  try {
+    const text = await res.text();
+    json2 = text ? JSON.parse(text) : void 0;
+  } catch {
   }
   if (!res.ok) {
     const message = json2?.message || res.statusText || `HTTP ${res.status}`;
+    if (res.status === 413) throw tooLarge(name, buf.byteLength);
+    if (res.status === 403) {
+      throw new ApiError(
+        403,
+        `Sem permiss\xE3o para subir "${name}" (${message}). No login pelo navegador, subir arquivo exige a permiss\xE3o ialab:spend: rode \`beplus-mcp login\` e autorize.`,
+        json2
+      );
+    }
+    if (res.status === 422) {
+      throw new ApiError(422, `O servidor n\xE3o aceitou "${name}" (${message}). Confira o formato do arquivo.`, json2);
+    }
     throw new ApiError(res.status, `Upload de "${name}" falhou: ${message}`, json2);
   }
   const fileUrl = json2?.result?.file_url ?? json2?.file_url;
@@ -21480,6 +21937,9 @@ async function uploadFile(cfg, ref) {
   }
   return fileUrl;
 }
+async function uploadFile(cfg, ref) {
+  return uploadBytes(cfg, await loadLocal(ref));
+}
 async function resolveRef(cfg, ref) {
   if (!ref) return ref;
   return isRemoteRef(ref) ? ref : uploadFile(cfg, ref);
@@ -22395,9 +22855,9 @@ ${list}${flagsLine(status)}${draftHint}` }, ...blocks] };
 }
 
 // src/probe.ts
-import { open, stat } from "fs/promises";
+import { open as open2, stat as stat3 } from "fs/promises";
 import { extname as extname2, isAbsolute as isAbsolute2, resolve as resolve2 } from "path";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var IMAGE_EXT = /* @__PURE__ */ new Set([".png", ".jpg", ".jpeg", ".webp"]);
 var VIDEO_EXT = /* @__PURE__ */ new Set([".mp4", ".mov", ".m4v"]);
@@ -22409,8 +22869,8 @@ function isRemote(ref) {
 }
 function toLocalPath2(ref) {
   if (ref.startsWith("file://")) return fileURLToPath2(ref);
-  if (ref === "~") return homedir2();
-  if (ref.startsWith("~/")) return resolve2(homedir2(), ref.slice(2));
+  if (ref === "~") return homedir3();
+  if (ref.startsWith("~/")) return resolve2(homedir3(), ref.slice(2));
   return isAbsolute2(ref) ? ref : resolve2(process.cwd(), ref);
 }
 function kindFromExt(ref) {
@@ -22421,7 +22881,7 @@ function kindFromExt(ref) {
 }
 async function readAt(ref, offset, len) {
   if (!isRemote(ref)) {
-    const fh = await open(toLocalPath2(ref), "r");
+    const fh = await open2(toLocalPath2(ref), "r");
     try {
       const buf = Buffer.alloc(len);
       const { bytesRead } = await fh.read(buf, 0, len, offset);
@@ -22464,7 +22924,7 @@ async function findMoov(ref, fileSize) {
 }
 async function readHead(ref, bytes) {
   if (!isRemote(ref)) {
-    const fh = await open(toLocalPath2(ref), "r");
+    const fh = await open2(toLocalPath2(ref), "r");
     try {
       const buf = Buffer.alloc(bytes);
       const { bytesRead } = await fh.read(buf, 0, bytes, 0);
@@ -22542,7 +23002,7 @@ function probeWebp(b) {
   }
   return null;
 }
-function probeMp4(b) {
+function mp4Info(b) {
   let duration3;
   let width = 0;
   let height = 0;
@@ -22610,13 +23070,16 @@ function probeMp4(b) {
     }
   };
   walk(0, b.length, 0);
-  if (!width || !height) return null;
   const dur = duration3 ?? mediaDuration;
-  const fps = dur && frames ? Math.round(frames / dur * 100) / 100 : void 0;
+  const fps = width && height && dur && frames ? Math.round(frames / dur * 100) / 100 : void 0;
   return { width, height, duration: dur, fps };
 }
+function probeMp4(b) {
+  const info = mp4Info(b);
+  return info.width && info.height ? info : null;
+}
 async function fileSizeOf(ref) {
-  if (!isRemote(ref)) return (await stat(toLocalPath2(ref))).size;
+  if (!isRemote(ref)) return (await stat3(toLocalPath2(ref))).size;
   const res = await fetch(ref, { method: "HEAD" });
   return Number(res.headers.get("content-length") ?? 0);
 }
@@ -22659,6 +23122,124 @@ async function probeMedia(ref) {
   }
   return { kind, width: info.width, height: info.height, duration: info.duration, fps: info.fps };
 }
+function probeGif(b) {
+  if (b.length < 10 || b.toString("ascii", 0, 4) !== "GIF8") return null;
+  return { width: b.readUInt16LE(6), height: b.readUInt16LE(8) };
+}
+function probeWav(b) {
+  if (b.length < 12 || b.toString("ascii", 0, 4) !== "RIFF" || b.toString("ascii", 8, 12) !== "WAVE") return null;
+  let byteRate = 0;
+  for (let i = 12; i + 8 <= b.length; ) {
+    const id = b.toString("ascii", i, i + 4);
+    const size = b.readUInt32LE(i + 4);
+    if (id === "fmt " && i + 16 <= b.length) byteRate = b.readUInt32LE(i + 16);
+    if (id === "data") {
+      const bytes = size === 0 || size === 4294967295 || i + 8 + size > b.length ? b.length - i - 8 : size;
+      return byteRate ? bytes / byteRate : null;
+    }
+    i += 8 + size + size % 2;
+  }
+  return null;
+}
+function probeFlac(b) {
+  if (b.length < 42 || b.toString("ascii", 0, 4) !== "fLaC" || (b[4] & 127) !== 0) return null;
+  const d = 8;
+  const rate = b[d + 10] << 12 | b[d + 11] << 4 | b[d + 12] >> 4;
+  const total = (b[d + 13] & 15) * 2 ** 32 + b.readUInt32BE(d + 14);
+  return rate && total ? total / rate : null;
+}
+var MP3_KBPS = {
+  v1: [0, 32, 40, 48, 56, 64, 80, 96, 112, 128, 160, 192, 224, 256, 320],
+  v2: [0, 8, 16, 24, 32, 40, 48, 56, 64, 80, 96, 112, 128, 144, 160]
+};
+var MP3_RATES = { 3: [44100, 48e3, 32e3], 2: [22050, 24e3, 16e3], 0: [11025, 12e3, 8e3] };
+function probeMp3(b) {
+  let i = 0;
+  if (b.length > 10 && b.toString("ascii", 0, 3) === "ID3") {
+    const size = (b[6] & 127) << 21 | (b[7] & 127) << 14 | (b[8] & 127) << 7 | b[9] & 127;
+    i = 10 + size + (b[5] & 16 ? 10 : 0);
+  }
+  for (const end = Math.min(b.length - 4, i + 64 * 1024); i < end; i++) {
+    if (b[i] !== 255 || (b[i + 1] & 224) !== 224) continue;
+    const version2 = b[i + 1] >> 3 & 3;
+    const layer = b[i + 1] >> 1 & 3;
+    const kbps = MP3_KBPS[version2 === 3 ? "v1" : "v2"][b[i + 2] >> 4 & 15];
+    const rate = MP3_RATES[version2]?.[b[i + 2] >> 2 & 3];
+    if (version2 === 1 || layer !== 1 || !kbps || !rate) continue;
+    const mono = (b[i + 3] >> 6 & 3) === 3;
+    const spf = version2 === 3 ? 1152 : 576;
+    const side = version2 === 3 ? mono ? 17 : 32 : mono ? 9 : 17;
+    const xing = i + 4 + side;
+    const tag = b.toString("ascii", xing, xing + 4);
+    if ((tag === "Xing" || tag === "Info") && b[xing + 7] & 1) {
+      const flags = b[xing + 7];
+      const lame = xing + 12 + (flags & 2 ? 4 : 0) + (flags & 4 ? 100 : 0) + (flags & 8 ? 4 : 0);
+      const gap = lame + 24 <= b.length && /^(LAME|Lavc|Lavf)/.test(b.toString("ascii", lame, lame + 4)) ? (b[lame + 21] << 4) + (b[lame + 22] >> 4) + ((b[lame + 22] & 15) << 8 | b[lame + 23]) : 0;
+      return (b.readUInt32BE(xing + 8) * spf - gap) / rate;
+    }
+    if (b.toString("ascii", i + 36, i + 40) === "VBRI") return b.readUInt32BE(i + 36 + 14) * spf / rate;
+    const tail = b.length >= 128 && b.toString("ascii", b.length - 128, b.length - 125) === "TAG" ? 128 : 0;
+    return (b.length - i - tail) * 8 / (kbps * 1e3);
+  }
+  return null;
+}
+function probeBuffer(b, mime) {
+  const round = (n) => Math.round(n * 1e3) / 1e3;
+  if (mime.startsWith("image/")) {
+    const dim = probePng(b) ?? probeJpeg(b) ?? probeWebp(b) ?? probeGif(b);
+    return dim ? { width: dim.width, height: dim.height } : null;
+  }
+  if (/^(video|audio)\/(mp4|quicktime|x-m4v|x-m4a|aac)$/.test(mime) || probeMp4Head(b)) {
+    const info = mp4Info(b);
+    if (!info.duration && !info.width) return null;
+    const meta = {};
+    if (info.width && info.height && mime.startsWith("video/")) {
+      meta.width = info.width;
+      meta.height = info.height;
+      if (info.fps) meta.fps = info.fps;
+    }
+    if (info.duration) meta.duration = round(info.duration);
+    return meta;
+  }
+  if (mime.startsWith("audio/")) {
+    const seconds = probeWav(b) ?? probeFlac(b) ?? (mime === "audio/mpeg" ? probeMp3(b) : null);
+    return seconds ? { duration: round(seconds) } : null;
+  }
+  return null;
+}
+function probeMp4Head(b) {
+  return b.length > 12 && b.toString("ascii", 4, 8) === "ftyp";
+}
+async function ffprobeFile(path, timeoutMs = 2e4) {
+  const bin = process.env.BEPLUS_FFPROBE?.trim() || "ffprobe";
+  if (bin === "0") return null;
+  const { execFile } = await import("child_process");
+  const out = await new Promise((done) => {
+    execFile(
+      bin,
+      ["-v", "error", "-print_format", "json", "-show_entries", "format=duration:stream=codec_type,width,height,avg_frame_rate", path],
+      { timeout: timeoutMs, maxBuffer: 1024 * 1024 },
+      (err, stdout) => done(err ? null : stdout)
+    );
+  });
+  if (!out) return null;
+  try {
+    const j = JSON.parse(out);
+    const meta = {};
+    const video = j.streams?.find((s) => s.codec_type === "video" && s.width && s.height);
+    if (video) {
+      meta.width = video.width;
+      meta.height = video.height;
+      const [n, d] = String(video.avg_frame_rate ?? "").split("/").map(Number);
+      if (n && d) meta.fps = Math.round(n / d * 100) / 100;
+    }
+    const duration3 = Number(j.format?.duration);
+    if (Number.isFinite(duration3) && duration3 > 0) meta.duration = Math.round(duration3 * 1e3) / 1e3;
+    return Object.keys(meta).length ? meta : null;
+  } catch {
+    return null;
+  }
+}
 
 // src/tools/upscale.ts
 var IMAGE_MODEL = "topaz/upscale/image/generative";
@@ -23468,6 +24049,9 @@ ${calls.map(callLine).join("\n\n")}`);
   );
 }
 
+// src/tools/canvas.ts
+import { createHash } from "crypto";
+
 // src/canvas/api.ts
 var PINNED_CORE_VERSION = "ca7b3b406184c7f679f555c3a008013197182b23";
 function errorRaw(err) {
@@ -23784,6 +24368,7 @@ function knownPort(kind, side, port) {
 // src/canvas/core.ts
 import { randomBytes, randomUUID } from "crypto";
 var SCHEMA_VERSION = 1;
+var MAX_ENVELOPES_PER_COMMIT = 200;
 var MAX_OP_BYTES = 64 * 1024;
 var MAX_DATA_URL_BYTES = 8 * 1024;
 var CLIENT_ID = `mcp-${randomBytes(6).toString("hex")}`;
@@ -23931,6 +24516,38 @@ function removeNodeOps(doc, nodeId) {
 function batchOf(ops) {
   return ops.length === 1 ? ops[0] : { type: "batch", ops };
 }
+var OpTooLargeError = class extends Error {
+  constructor(op, bytes) {
+    super(`opera\xE7\xE3o de ${bytes} bytes`);
+    this.op = op;
+    this.bytes = bytes;
+    this.name = "OpTooLargeError";
+  }
+  op;
+  bytes;
+};
+function packEnvelopes(boardId3, ops, actorId, limit = MAX_OP_BYTES - 1024) {
+  const bytes = (v) => Buffer.byteLength(JSON.stringify(v));
+  const overhead = bytes(envelope(boardId3, { type: "batch", ops: [] }, actorId));
+  const out = [];
+  let cur = [];
+  let size = overhead;
+  const flush = () => {
+    if (cur.length) out.push(envelope(boardId3, batchOf(cur), actorId));
+    cur = [];
+    size = overhead;
+  };
+  for (const op of ops) {
+    const b = bytes(op);
+    if (overhead + b > limit) throw new OpTooLargeError(op, b);
+    const next = size + b + (cur.length ? 1 : 0);
+    if (next > limit) flush();
+    size += b + (cur.length ? 1 : 0);
+    cur.push(op);
+  }
+  flush();
+  return out;
+}
 
 // src/canvas/summary.ts
 var MAX_TEXT = 160;
@@ -23941,6 +24558,7 @@ var HEAVY_KEYS = /* @__PURE__ */ new Set([
   "main",
   "lastFrame",
   "sequence",
+  "timeline",
   "points",
   "extra",
   "mentions",
@@ -24027,6 +24645,10 @@ function nodeLines(node, run) {
     facts.push(`${d.rows.length} linha(s)`);
     extra.push(...rowsLines(d.rows));
   }
+  if (kind === "montage") {
+    const fact = timelineFact(d);
+    if (fact) facts.push(fact);
+  }
   const main2 = spec?.main;
   if (main2 && typeof d[main2] === "string" && d[main2]) facts.push(`${main2}: "${oneLine(d[main2])}"`);
   for (const [key, value] of Object.entries(d)) {
@@ -24041,6 +24663,18 @@ function nodeLines(node, run) {
   if (run?.claimedBy) facts.push("rodando agora");
   return [facts.length ? `${head} \xB7 ${facts.join(" \xB7 ")}` : head, ...extra];
 }
+function timelineFact(d) {
+  const volume = "musicGainDb/duckingDb n\xE3o valem para ela: o volume fica nos clipes e faixas";
+  if (d.timeline !== void 0) {
+    const legacy = d.sequence !== void 0 ? "; data.sequence \xE9 o legado congelado" : "";
+    return `timeline (v3): ${JSON.stringify(d.timeline).length} caracteres (inteira em canvas_read_node sem path${legacy}; ${volume})`;
+  }
+  const seq = d.sequence;
+  if (!seq || typeof seq !== "object" || Array.isArray(seq)) return null;
+  const plans = Array.isArray(seq.plans) ? seq.plans.length : 0;
+  const clips = seq.audioClips && typeof seq.audioClips === "object" && !Array.isArray(seq.audioClips) ? Object.values(seq.audioClips).reduce((t, list) => t + (Array.isArray(list) ? list.length : 0), 0) : 0;
+  return `sequ\xEAncia (legado, sem data.timeline): ${plans} plano(s), ${clips} clipe(s) de \xE1udio, ${JSON.stringify(seq).length} caracteres (inteira em canvas_read_node sem path; ${volume})`;
+}
 function boardSummary(snap) {
   const doc = snap.doc;
   const nodes = Object.values(doc.nodes).sort((a, b) => a.position.x - b.position.x || a.position.y - b.position.y);
@@ -24065,28 +24699,46 @@ function boardSummary(snap) {
   return lines.join("\n");
 }
 function nodeDetail(node) {
-  const strip = (v, depth) => {
+  let cuts = 0;
+  const strip = (v, depth, path) => {
     if (typeof v === "string") {
       if (v.startsWith("data:")) return `[data-url ${v.length}b]`;
-      return v.length > 2e3 ? `${v.slice(0, 2e3)}\u2026 [+${v.length - 2e3}]` : v;
+      if (v.length <= 2e3) return v;
+      cuts++;
+      return `${v.slice(0, 2e3)}\u2026 [+${v.length - 2e3} caracteres: path=${path}]`;
     }
     if (Array.isArray(v)) {
-      if (depth > 4) return `[${v.length} itens]`;
-      const head = v.slice(0, 60).map((x) => strip(x, depth + 1));
-      return v.length > 60 ? [...head, `\u2026 +${v.length - 60}`] : head;
+      if (depth > 4) {
+        cuts++;
+        return `[${v.length} itens, ${JSON.stringify(v).length} caracteres: path=${path}]`;
+      }
+      const head = v.slice(0, 60).map((x, i) => strip(x, depth + 1, `${path}.${i}`));
+      if (v.length <= 60) return head;
+      cuts++;
+      return [...head, `\u2026 +${v.length - 60} itens: path=${path}`];
     }
     if (v && typeof v === "object") {
-      if (depth > 4) return "{\u2026}";
+      if (depth > 4) {
+        cuts++;
+        return `{${JSON.stringify(v).length} caracteres: path=${path}}`;
+      }
       const out = {};
       for (const [k, x] of Object.entries(v)) {
-        out[k] = k === "points" || k === "sequence" ? "[omitido]" : strip(x, depth + 1);
+        const at = path ? `${path}.${k}` : k;
+        if (depth === 0 && (k === "points" || k === "sequence" || k === "timeline")) {
+          cuts++;
+          out[k] = `[omitido: ${JSON.stringify(x).length} caracteres: path=${k}]`;
+        } else out[k] = strip(x, depth + 1, at);
       }
       return out;
     }
     return v;
   };
+  const json2 = JSON.stringify(strip(node.data, 0, ""));
+  const note = cuts ? `
+(${cuts} corte(s) marcado(s) com path=\u2026: leia inteiro com canvas_read_node e esse path)` : "";
   return `${node.id} \xB7 ${nodeKind(node) ?? node.type} \xB7 "${nodeName(node)}"
-${JSON.stringify(strip(node.data, 0))}`;
+${json2}${note}`;
 }
 function changesSince(envelopes, doc) {
   const count = /* @__PURE__ */ new Map();
@@ -24283,8 +24935,8 @@ function registerCanvasCommentTools(server, api, run) {
       const st = status ?? "open";
       const [snap, threads] = await Promise.all([api.snapshot(board_id), api.listComments(board_id, st)]);
       const text = commentsSummary(threads, snap.doc, st);
-      const open2 = threads.some((t) => !t.resolvedAt);
-      return open2 ? `${text}
+      const open3 = threads.some((t) => !t.resolvedAt);
+      return open3 ? `${text}
 
 Para aplicar: leia o n\xF3 com canvas_read_board (node_ids), edite pelas canvas_* e feche com canvas_resolve_comment dizendo o que fez.` : text;
     })
@@ -24301,8 +24953,8 @@ Para aplicar: leia o n\xF3 com canvas_read_board (node_ids), edite pelas canvas_
       const thread = await onComment(
         () => api.createComment(board_id, { body: text, parentId: comment_id, ...m?.length ? { mentions: m } : {} })
       );
-      const open2 = thread?.resolvedAt ? "A thread est\xE1 resolvida; reabra com canvas_reopen_comment se precisar." : "A thread segue aberta.";
-      return `\u2705 Resposta ${newReplyId(thread)} em ${comment_id}: "${oneLine(text, 120)}". ${open2}`;
+      const open3 = thread?.resolvedAt ? "A thread est\xE1 resolvida; reabra com canvas_reopen_comment se precisar." : "A thread segue aberta.";
+      return `\u2705 Resposta ${newReplyId(thread)} em ${comment_id}: "${oneLine(text, 120)}". ${open3}`;
     })
   );
   server.registerTool(
@@ -24383,16 +25035,224 @@ Para aplicar: leia o n\xF3 com canvas_read_board (node_ids), edite pelas canvas_
         const nodes = Object.values(snap.doc.nodes);
         anchor = nodes.length ? { kind: "point", x: Math.min(...nodes.map((n) => n.position.x)), y: Math.min(...nodes.map((n) => n.position.y)) - 80 } : { kind: "point", x: 0, y: 0 };
       }
-      const created = await onComment(
-        () => api.createComment(args.board_id, {
-          body: args.body,
-          anchor,
-          ...args.mentions?.length ? { mentions: args.mentions } : {}
-        })
-      );
-      const where = describeAnchor(anchor, snap.doc).text;
-      const at = anchor.kind === "point" && args.x !== void 0 ? ` em (${args.x}, ${args.y})` : "";
-      return `\u2705 Coment\xE1rio ${created?.id ?? ""} criado ${where}${at}.`.replace("  ", " ");
+      const created = await onComment(
+        () => api.createComment(args.board_id, {
+          body: args.body,
+          anchor,
+          ...args.mentions?.length ? { mentions: args.mentions } : {}
+        })
+      );
+      const where = describeAnchor(anchor, snap.doc).text;
+      const at = anchor.kind === "point" && args.x !== void 0 ? ` em (${args.x}, ${args.y})` : "";
+      return `\u2705 Coment\xE1rio ${created?.id ?? ""} criado ${where}${at}.`.replace("  ", " ");
+    })
+  );
+}
+
+// src/canvas/upload.ts
+import { randomUUID as randomUUID2 } from "crypto";
+import { basename as basename2, extname as extname3 } from "path";
+function kindOfMime(mime) {
+  if (mime.startsWith("image/")) return "image";
+  if (mime.startsWith("video/")) return "video";
+  if (mime.startsWith("audio/")) return "audio";
+  return "file";
+}
+function withExtension(name, file) {
+  if (!name?.trim()) return file.name;
+  const ext = extname3(file.name);
+  const clean = basename2(name.trim());
+  return ext && extname3(clean).toLowerCase() !== ext.toLowerCase() ? `${clean}${ext}` : clean;
+}
+async function uploadMedia(cfg, source, name) {
+  const remote = isRemoteRef(source);
+  const loaded = remote ? await loadRemote(source) : await loadLocal(source);
+  const file = { ...loaded, name: withExtension(name, loaded) };
+  const reused = remote && new URL(source).host === BEPLUS_STORAGE_HOST;
+  const url = reused ? source : await uploadBytes(cfg, file);
+  const kind = kindOfMime(file.mime);
+  let meta = null;
+  let measuredBy = "n\xE3o medido";
+  if (kind !== "file") {
+    meta = probeBuffer(file.buf, file.mime);
+    if (meta) measuredBy = "cabe\xE7alho";
+    else {
+      meta = await ffprobeFile(file.localPath ?? url);
+      if (meta) measuredBy = "ffprobe";
+    }
+  }
+  return {
+    url,
+    name: file.name,
+    mime: file.mime,
+    bytes: file.buf.byteLength,
+    kind,
+    meta: meta ?? {},
+    measuredBy,
+    reused,
+    assetId: `asset_${randomUUID2()}`
+  };
+}
+function mediaItem(u) {
+  const item = { assetId: u.assetId, name: u.name, mime: u.mime, size: u.bytes };
+  if (u.meta.width !== void 0) item.width = u.meta.width;
+  if (u.meta.height !== void 0) item.height = u.meta.height;
+  if (u.meta.duration !== void 0) item.duration = u.meta.duration;
+  item.remoteUrl = u.url;
+  return item;
+}
+function sequenceAsset(u) {
+  return { assetId: u.assetId, name: u.name, mime: u.mime, size: u.bytes, origin: "imported" };
+}
+function libraryItemId(u, mediaNodeId) {
+  return `${mediaNodeId ?? "<id do n\xF3 M\xEDdia>"}|${u.kind}::${u.url}`;
+}
+function describeUpload(u) {
+  const parts = [u.mime, `${mb(u.bytes)} MB`];
+  if (u.meta.width && u.meta.height) parts.push(`${u.meta.width}\xD7${u.meta.height}`);
+  if (u.meta.duration !== void 0) parts.push(`${String(u.meta.duration).replace(".", ",")} s`);
+  if (u.meta.fps) parts.push(`${String(u.meta.fps).replace(".", ",")} fps`);
+  const measured = u.kind === "file" ? "" : u.measuredBy === "n\xE3o medido" ? " (dura\xE7\xE3o e dimens\xF5es n\xE3o medidas: formato sem leitor de cabe\xE7alho e sem ffprobe no PATH)" : ` (medido pelo ${u.measuredBy})`;
+  return `"${u.name}" \xB7 ${parts.join(" \xB7 ")}${measured}`;
+}
+
+// src/tools/canvas-media.ts
+var MAX_MEDIA_ITEMS = 60;
+var itemsOf = (node) => Array.isArray(node.data.items) ? node.data.items : [];
+function holdsOne(doc, node) {
+  if (node.data.holds === "one") return true;
+  if (node.data.holds === "many") return false;
+  return itemsOf(node).length === 1 && Object.values(doc.edges).some((e) => e.source === node.id);
+}
+function needMediaNode(doc, nodeId) {
+  const node = doc.nodes[nodeId];
+  if (!node) throw new CanvasToolError(`N\xF3 ${nodeId} n\xE3o existe no board. Releia com canvas_read_board.`);
+  if (nodeKind(node) !== "media") {
+    throw new CanvasToolError(
+      `O n\xF3 ${nodeId} ("${oneLine(nodeName(node), 40)}") \xE9 ${nodeKind(node) ?? node.type}, n\xE3o M\xEDdia. Passe o id de um n\xF3 media, ou omita node_id para criar um n\xF3 M\xEDdia novo.`
+    );
+  }
+  return node;
+}
+function payload(u, nodeId) {
+  const out = { url: u.url, mime: u.mime, bytes: u.bytes };
+  if (u.meta.duration !== void 0) out.duration = u.meta.duration;
+  if (u.meta.width !== void 0) out.width = u.meta.width;
+  if (u.meta.height !== void 0) out.height = u.meta.height;
+  if (u.meta.fps !== void 0) out.fps = u.meta.fps;
+  out.media_item = mediaItem(u);
+  if (u.kind !== "file") {
+    out.sequence_asset = sequenceAsset(u);
+    out.libraryItemId = libraryItemId(u, nodeId);
+  }
+  return JSON.stringify(out);
+}
+function sequenceHint(u, nodeId) {
+  if (u.kind === "file") return "Documento: entra no n\xF3 M\xEDdia, n\xE3o na timeline da Montagem.";
+  const lines = [
+    "Num clipe da timeline da Montagem (data.timeline; data.sequence s\xF3 em n\xF3 que ainda n\xE3o migrou): use sequence_asset como `asset` e libraryItemId como est\xE1" + (nodeId ? "." : ", trocando <id do n\xF3 M\xEDdia> pelo id do n\xF3 onde o item ficou.")
+  ];
+  if (u.meta.duration !== void 0) {
+    const at30 = Math.floor(u.meta.duration * 30 + 1e-9);
+    lines.push(`Quadros = dura\xE7\xE3o \xD7 fps da timeline, para baixo (ex.: ${at30} a 30 fps).`);
+  }
+  return lines.join(" ");
+}
+function registerCanvasMediaTools(server, deps) {
+  const { api, cfg, run, edit, seen, placeFor } = deps;
+  server.registerTool(
+    "canvas_upload_media",
+    {
+      title: "Canvas: subir arquivo",
+      description: "Sobe um arquivo (caminho local ou URL) pela rota de arquivos da BePlus e devolve o item pronto: url, mime, bytes, dura\xE7\xE3o/largura/altura quando \xE9 m\xEDdia, media_item (data.items do n\xF3 M\xEDdia), sequence_asset e libraryItemId (clipe da timeline da Montagem). Com board_id grava no n\xF3 M\xEDdia node_id, ou cria um n\xF3 M\xEDdia novo sem node_id; a\xED exige canvas_read_board nesta sess\xE3o. Teto de 95 MB. N\xE3o gera m\xEDdia nem gasta diamantes.",
+      inputSchema: {
+        source: external_exports.string().trim().min(1).max(2e3).describe("Caminho local (/\u2026, ~/\u2026, file://) ou URL http(s)."),
+        name: external_exports.string().trim().min(1).max(120).optional().describe("Nome do arquivo no Canvas (a extens\xE3o \xE9 mantida)."),
+        board_id: external_exports.string().uuid().optional().describe("Board onde gravar o item (opcional)."),
+        node_id: external_exports.string().min(1).max(128).optional().describe("N\xF3 M\xEDdia que recebe o item. Sem ele, cria um n\xF3 M\xEDdia novo."),
+        label: external_exports.string().trim().min(1).max(120).optional().describe("Nome do n\xF3 M\xEDdia novo (padr\xE3o: nome do arquivo)."),
+        replace: external_exports.boolean().optional().describe("true troca a lista do n\xF3 por este arquivo; false acrescenta. Padr\xE3o: a regra do Canvas (n\xF3 de um arquivo s\xF3, ligado, troca).")
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
+    },
+    async (args) => run(async () => {
+      if (!args.board_id && (args.node_id || args.label || args.replace !== void 0)) {
+        throw new CanvasToolError("node_id, label e replace s\xF3 valem com board_id.");
+      }
+      if (args.board_id) {
+        if (!seen.has(args.board_id)) {
+          throw new CanvasToolError("Leia o board com canvas_read_board antes de gravar nele (a leitura vale para a sess\xE3o).");
+        }
+        const snap = await api.snapshot(args.board_id);
+        if (snap.role === "viewer") throw new CanvasToolError("Voc\xEA \xE9 s\xF3 leitor neste board: pe\xE7a ao dono para te dar papel de editor.");
+        if (args.node_id) {
+          const node = needMediaNode(snap.doc, args.node_id);
+          const replacing = args.replace ?? holdsOne(snap.doc, node);
+          if (!replacing && itemsOf(node).length >= MAX_MEDIA_ITEMS) {
+            throw new CanvasToolError(
+              `O n\xF3 "${oneLine(nodeName(node), 40)}" j\xE1 tem ${MAX_MEDIA_ITEMS} arquivos (teto do Canvas). Omita node_id para criar outro n\xF3 M\xEDdia.`
+            );
+          }
+        }
+      }
+      let u;
+      try {
+        u = await uploadMedia(cfg, args.source, args.name);
+      } catch (e) {
+        if (e instanceof ApiError && e.httpStatus !== 401) throw new CanvasToolError(e.message);
+        throw e;
+      }
+      const head = `\u2705 ${u.reused ? "J\xE1 estava no armazenamento da BePlus (n\xE3o subiu de novo)" : "Subiu"}: ${describeUpload(u)}
+URL: ${u.url}`;
+      if (!args.board_id) {
+        return [head, "", payload(u), "", sequenceHint(u)].join("\n");
+      }
+      const boardId3 = args.board_id;
+      let nodeId = args.node_id;
+      let done;
+      try {
+        done = await edit(boardId3, async (doc) => {
+          const item = mediaItem(u);
+          if (nodeId) {
+            const node = needMediaNode(doc, nodeId);
+            const replacing = args.replace ?? holdsOne(doc, node);
+            const items = replacing ? [item] : [...itemsOf(node), item];
+            if (items.length > MAX_MEDIA_ITEMS) {
+              throw new CanvasToolError(`O n\xF3 j\xE1 tem ${MAX_MEDIA_ITEMS} arquivos (teto do Canvas).`);
+            }
+            const before = itemsOf(node).length;
+            return {
+              ops: [{ type: "node.set", nodeId: node.id, path: "data.items", value: setValue(items) }],
+              targets: [node.id],
+              done: `N\xF3 M\xEDdia "${oneLine(nodeName(node), 40)}" (${node.id}): ` + (replacing ? `arquivo trocado (${before} \u2192 1)` : `arquivo acrescentado, agora com ${items.length}`)
+            };
+          }
+          const spec = KINDS.media;
+          const created = makeNode({
+            type: WORKFLOW_NODE_TYPE,
+            data: { ...spec.data, [KIND_FIELD]: "media", label: args.label ?? u.name, items: [item] },
+            position: placeFor(doc, spec.size),
+            size: spec.size,
+            zIndex: Object.values(doc.nodes).reduce((t, n) => Math.max(t, n.zIndex), 0) + 1,
+            createdBy: await api.me()
+          });
+          nodeId = created.id;
+          return {
+            ops: [{ type: "node.add", nodeId: created.id, node: created }],
+            targets: [],
+            done: `N\xF3 M\xEDdia "${oneLine(nodeName(created), 40)}" criado: ${created.id}`
+          };
+        });
+      } catch (e) {
+        const why = e instanceof CanvasToolError ? e.message : apiErrorToUserMessage(e);
+        throw new CanvasToolError(
+          `${head}
+Mas o item N\xC3O entrou no board: ${why}
+N\xE3o suba de novo: releia com canvas_read_board e grave media_item em data.items do n\xF3 M\xEDdia (canvas_update_node com a lista inteira) ou em um n\xF3 novo.
+${payload(u)}`
+        );
+      }
+      return [head, done, "", payload(u, nodeId), "", sequenceHint(u, nodeId)].join("\n");
     })
   );
 }
@@ -24404,6 +25264,22 @@ var REJECT_TEXT = {
   "invalid-op": "opera\xE7\xE3o inv\xE1lida ou repetida",
   "too-large": "opera\xE7\xE3o grande demais (64 KB) ou com m\xEDdia embutida"
 };
+var READ = "Exige canvas_read_board nesta sess\xE3o (e de novo depois de uma recusa). ";
+var MONTAGE_NOTE = "Montagem: musicGainDb, duckingDb e fadeMs valem s\xF3 para a montagem autom\xE1tica (clipes ligados) e n\xE3o mexem na timeline do editor (data.timeline; data.sequence \xE9 o legado); o volume dela fica nos clipes (gainDb, gainKeyframes, fades) e nas faixas (gainDb de cada faixa, master).";
+function dataSegments(path) {
+  const p = path?.trim() ?? "";
+  if (!p || p === "data") return [];
+  const segs = (p.startsWith("data.") ? p.slice(5) : p).split(".");
+  if (segs.some((seg) => !seg)) throw new CanvasToolError(`Caminho "${p}" tem segmento vazio (dois pontos seguidos ou ponto na ponta).`);
+  return segs;
+}
+function legacySequenceGuard(node, key) {
+  if (key === "sequence" && nodeKind(node) === "montage" && node.data.timeline !== void 0) {
+    throw new CanvasToolError(
+      "Este n\xF3 Montagem j\xE1 grava em data.timeline; data.sequence \xE9 o legado congelado e n\xE3o se escreve mais. Leia a timeline com canvas_read_node e grave por caminho em data.timeline com canvas_patch_node."
+    );
+  }
+}
 var SECTION_Z = -1e3;
 var GAP = 80;
 var boardId2 = external_exports.string().uuid().describe("Id (uuid) do board, como sai em canvas_list_boards.");
@@ -24414,10 +25290,9 @@ function registerCanvasTools(server, client, cfg) {
   const seen = /* @__PURE__ */ new Map();
   function fail(e) {
     if (e instanceof CanvasToolError || e instanceof CoreMismatchError) return errorResult(e.message);
+    if (e instanceof LoginExpiredError) return errorResult(e.message);
     if (e instanceof ApiError && e.httpStatus === 401 && !api.usesPat) {
-      return errorResult(
-        "O acesso pelo navegador expirou ou foi revogado. Rode `beplus-mcp login` de novo e autorize."
-      );
+      return errorResult(`O servidor recusou o acesso pelo navegador (${e.message}). Rode \`beplus-mcp login\` de novo e autorize.`);
     }
     if (e instanceof ApiError && e.httpStatus === 404) {
       return errorResult("Board n\xE3o encontrado, ou voc\xEA n\xE3o \xE9 membro dele. Confira o id em canvas_list_boards.");
@@ -24431,7 +25306,7 @@ function registerCanvasTools(server, client, cfg) {
       return fail(e);
     }
   }
-  async function edit(id, build) {
+  async function edit(id, build, opts = {}) {
     const last = seen.get(id);
     if (last === void 0) {
       throw new CanvasToolError("Leia o board com canvas_read_board antes de editar (a leitura vale para a sess\xE3o).");
@@ -24462,6 +25337,7 @@ function registerCanvasTools(server, client, cfg) {
       if (theirs.length) note = `
 Aviso: ${changesSince(theirs, doc)}.`;
     }
+    if (opts.split) return commitSplit(id, ops, done, note);
     const env = envelope(id, batchOf(ops), await api.me());
     const bad = checkEnvelope(env);
     if (bad) throw new CanvasToolError(`Edi\xE7\xE3o recusada antes de enviar: ${bad}.`);
@@ -24475,6 +25351,50 @@ Aviso: ${changesSince(theirs, doc)}.`;
     seen.set(id, res.seq);
     return `\u2705 ${done} (seq ${res.seq}).${note}`;
   }
+  async function commitSplit(id, ops, done, note) {
+    let envs;
+    try {
+      envs = packEnvelopes(id, ops, await api.me());
+    } catch (e) {
+      if (!(e instanceof OpTooLargeError)) throw e;
+      const path = e.op.type === "node.set" ? e.op.path.replace(/^data\./, "") : e.op.type;
+      throw new CanvasToolError(
+        `O valor de ${path} tem ${Math.round(e.bytes / 1024)} KB e n\xE3o cabe num envelope (64 KB). Nada foi enviado: grave por partes menores (um caminho por item, ex.: <cole\xE7\xE3o>.<id>).`
+      );
+    }
+    for (const env of envs) {
+      const bad = checkEnvelope(env);
+      if (bad) throw new CanvasToolError(`Edi\xE7\xE3o recusada antes de enviar: ${bad}. Nada foi enviado.`);
+    }
+    const outcomes = /* @__PURE__ */ new Map();
+    let last = null;
+    for (let i = 0; i < envs.length; i += MAX_ENVELOPES_PER_COMMIT) {
+      const res = await api.commit(id, envs.slice(i, i + MAX_ENVELOPES_PER_COMMIT));
+      for (const o of res.outcomes) outcomes.set(o.opId, o);
+      last = res.seq;
+    }
+    const pathsOf = (op) => op.type === "batch" ? op.ops.flatMap(pathsOf) : op.type === "node.set" ? [op.path.replace(/^data\./, "")] : [op.type];
+    let failed = 0;
+    const lines = envs.map((env, i) => {
+      const paths = pathsOf(env.op);
+      const span = paths.length > 1 ? `${paths[0]} \u2026 ${paths[paths.length - 1]}` : paths[0];
+      const kb = (Buffer.byteLength(JSON.stringify(env)) / 1024).toFixed(1).replace(".", ",");
+      const o = outcomes.get(env.id);
+      const result = o && "seq" in o ? `seq ${o.seq}` : (failed++, `RECUSADO (${o && "rejected" in o ? REJECT_TEXT[o.rejected] ?? o.rejected : "sem resposta do servidor"}): nada deste envelope entrou`);
+      return `- envelope ${i + 1}/${envs.length}: ${paths.length} caminho(s) (${span}), ${kb} KB \u2192 ${result}`;
+    });
+    if (failed) {
+      seen.delete(id);
+      throw new CanvasToolError(
+        `${done}: ${envs.length - failed} de ${envs.length} envelope(s) entraram, ${failed} recusado(s).
+${lines.join("\n")}
+Os aceitos ficam. Releia com canvas_read_board e canvas_read_node e reenvie s\xF3 os caminhos dos envelopes recusados.` + note
+      );
+    }
+    if (last !== null) seen.set(id, last);
+    return `\u2705 ${done} em ${envs.length} envelope(s) (seq at\xE9 ${last}).
+${lines.join("\n")}${note}`;
+  }
   function needNode(doc, nodeId) {
     const node = doc.nodes[nodeId];
     if (!node) throw new CanvasToolError(`N\xF3 ${nodeId} n\xE3o existe no board. Releia com canvas_read_board.`);
@@ -24548,10 +25468,10 @@ Aviso: ${changesSince(theirs, doc)}.`;
     "canvas_read_board",
     {
       title: "Canvas: ler board",
-      description: "L\xEA um board: n\xF3s (id, tipo, nome, campos principais), liga\xE7\xF5es e v\xEDnculo com o IA Lab, sem m\xEDdia. Obrigat\xF3rio antes de editar (vale para a sess\xE3o). node_ids devolve o data completo desses n\xF3s.",
+      description: "L\xEA um board: n\xF3s (id, tipo, nome, campos principais), liga\xE7\xF5es e v\xEDnculo com o IA Lab, sem m\xEDdia. Obrigat\xF3rio antes de editar (vale para a sess\xE3o). node_ids devolve o data desses n\xF3s, com cada corte marcado (path=\u2026); o valor inteiro (ex.: data.sequence da Montagem) sai no canvas_read_node.",
       inputSchema: {
         board_id: boardId2,
-        node_ids: external_exports.array(nodeIdArg).max(20).optional().describe("N\xF3s para ver o data inteiro (sem blobs).")
+        node_ids: external_exports.array(nodeIdArg).max(20).optional().describe("N\xF3s para ver o data (sem blobs, cortes marcados).")
       },
       annotations: { readOnlyHint: true, openWorldHint: false }
     },
@@ -24566,6 +25486,61 @@ Aviso: ${changesSince(theirs, doc)}.`;
       return parts.join("\n");
     })
   );
+  server.registerTool(
+    "canvas_read_node",
+    {
+      title: "Canvas: ler n\xF3 inteiro",
+      description: 'Devolve o data de UM n\xF3 sem corte nenhum, em JSON compacto, para conferir e fazer diff. Na Montagem, sem path, vem a timeline do editor: data.timeline, ou data.sequence (legado) quando o n\xF3 ainda n\xE3o tem timeline, e o cabe\xE7alho diz qual veio. path escolhe um peda\xE7o ("items" da M\xEDdia, "timeline.meta"); "data" traz o data todo. Diz o tamanho total e o sha256; acima de max_chars vem em partes expl\xEDcitas (offset). N\xE3o substitui o canvas_read_board, que continua obrigat\xF3rio antes de editar. ' + MONTAGE_NOTE,
+      inputSchema: {
+        board_id: boardId2,
+        node_id: nodeIdArg,
+        path: external_exports.string().trim().max(200).optional().describe('Caminho dentro do data, com pontos (ex.: "timeline.meta", "items.0"). "data" = o data todo.'),
+        offset: external_exports.number().int().min(0).optional().describe("In\xEDcio da parte, em caracteres (padr\xE3o 0)."),
+        max_chars: external_exports.number().int().min(1e3).max(6e4).optional().describe("Tamanho da parte (padr\xE3o 40000).")
+      },
+      annotations: { readOnlyHint: true, openWorldHint: false }
+    },
+    async ({ board_id, node_id, path, offset, max_chars }) => run(async () => {
+      const snap = await api.snapshot(board_id);
+      const node = snap.doc.nodes[node_id];
+      if (!node) throw new CanvasToolError(`N\xF3 ${node_id} n\xE3o existe no board. Releia com canvas_read_board.`);
+      let value = node.data;
+      let segments = dataSegments(path);
+      let which = "";
+      if (!path?.trim() && nodeKind(node) === "montage") {
+        if (node.data.timeline !== void 0) {
+          segments = ["timeline"];
+          which = " (a timeline do editor, formato v3)";
+        } else if (node.data.sequence !== void 0) {
+          segments = ["sequence"];
+          which = " (legado: este n\xF3 ainda n\xE3o tem data.timeline)";
+        } else which = " (sem timeline nem sequence: o data todo)";
+      } else if (segments[0] === "sequence" && nodeKind(node) === "montage" && node.data.timeline !== void 0) {
+        which = " (LEGADO congelado: o editor l\xEA data.timeline)";
+      }
+      for (const [i, seg] of segments.entries()) {
+        const here = value;
+        value = Array.isArray(here) ? here[Number(seg)] : here && typeof here === "object" ? here[seg] : void 0;
+        if (value === void 0) {
+          const at = segments.slice(0, i).join(".");
+          const keys = Array.isArray(here) ? `\xEDndices 0 a ${here.length - 1}` : here && typeof here === "object" ? Object.keys(here).join(", ") : "\u2014";
+          throw new CanvasToolError(`"${seg}" n\xE3o existe em data${at ? `.${at}` : ""}. Existe: ${keys || "\u2014"}.`);
+        }
+      }
+      const json2 = JSON.stringify(value);
+      const total = json2.length;
+      const from = Math.min(offset ?? 0, total);
+      const size = max_chars ?? 4e4;
+      const to = Math.min(from + size, total);
+      const hash = createHash("sha256").update(json2).digest("hex").slice(0, 12);
+      const where = `data${segments.length ? `.${segments.join(".")}` : ""}`;
+      const head = `${node.id} \xB7 ${nodeKind(node) ?? node.type} \xB7 "${oneLine(nodeName(node), 60)}" \xB7 board seq ${snap.seq} \xB7 ${where}${which}: ${total} caracteres (JSON compacto) \xB7 sha256 ${hash}`;
+      const part = from === 0 && to === total ? "Inteiro, abaixo." : `Parte: caracteres ${from} a ${to} de ${total}. ${to < total ? `Falta o resto: chame de novo com offset=${to}.` : "Esta \xE9 a \xFAltima parte."}`;
+      return `${head}
+${part}
+${json2.slice(from, to)}`;
+    })
+  );
   server.registerTool(
     "canvas_create_board",
     {
@@ -24620,7 +25595,7 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
     "canvas_add_node",
     {
       title: "Canvas: adicionar n\xF3",
-      description: `Adiciona um n\xF3 (n\xE3o executa). kind: ${kindList()}. data completa o padr\xE3o do tipo; label d\xE1 o nome. Sem position, nasce ao lado do n\xF3 ligado ou \xE0 direita do board. inputs/outputs j\xE1 ligam o n\xF3 no mesmo passo.`,
+      description: `Adiciona um n\xF3 (n\xE3o executa). ${READ}kind: ${kindList()}. data completa o padr\xE3o do tipo; label d\xE1 o nome. Sem position, nasce ao lado do n\xF3 ligado ou \xE0 direita do board. inputs/outputs j\xE1 ligam o n\xF3 no mesmo passo. ` + MONTAGE_NOTE,
       inputSchema: {
         board_id: boardId2,
         kind: external_exports.string().min(1).max(40),
@@ -24668,7 +25643,7 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
     "canvas_update_node",
     {
       title: "Canvas: editar n\xF3",
-      description: "Muda campos do data de um n\xF3, chave a chave (null apaga a chave), sem executar. label renomeia. N\xE3o troca o tipo. Leia o n\xF3 com node_ids antes para n\xE3o sobrescrever o que outra pessoa escreveu.",
+      description: `Muda campos do data de um n\xF3, chave a chave (null apaga a chave), sem executar. ${READ}label renomeia. N\xE3o troca o tipo. Cada chave \xE9 gravada inteira: leia antes com canvas_read_node e mande o valor completo j\xE1 revisado, para n\xE3o apagar o que outra pessoa escreveu. Para mudar partes de uma estrutura grande (clipes da timeline), use canvas_patch_node, por caminho. ` + MONTAGE_NOTE,
       inputSchema: {
         board_id: boardId2,
         node_id: nodeIdArg,
@@ -24683,6 +25658,7 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
         const node = needNode(doc, args.node_id);
         const ops = [];
         const patch = parseData(args.data);
+        for (const key of Object.keys(patch)) legacySequenceGuard(node, key);
         if (args.label) patch.label = args.label;
         for (const [k, v] of Object.entries(patch)) {
           const path = `data.${k}`;
@@ -24701,11 +25677,102 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
       })
     )
   );
+  server.registerTool(
+    "canvas_patch_node",
+    {
+      title: "Canvas: gravar por caminho",
+      description: `Grava v\xE1rios caminhos dentro do data de um n\xF3, sem executar: {path, value} grava, {path, unset: true} apaga. ${READ}O caminho atravessa objetos (o n\xEDvel que falta \xE9 criado) e n\xE3o entra em lista: para mudar um item de lista, grave a lista inteira. Quebra sozinho em envelopes de at\xE9 64 KB, em ordem, e devolve o resultado de cada um; entre envelopes n\xE3o h\xE1 atomicidade (o que entrou fica). Serve para mexer em partes de uma estrutura grande, como clipes da timeline da Montagem, sem reenviar tudo. Leia antes com canvas_read_node. ` + MONTAGE_NOTE,
+      inputSchema: {
+        board_id: boardId2,
+        node_id: nodeIdArg,
+        sets: external_exports.array(
+          external_exports.object({
+            path: external_exports.string().trim().min(1).max(500).describe('Caminho dentro do data (ex.: "timeline.meta.fps"); aceita o prefixo "data.".'),
+            value: external_exports.unknown().optional().describe("Valor JSON a gravar (null grava null)."),
+            unset: external_exports.literal(true).optional().describe("true apaga a chave.")
+          })
+        ).min(1).max(5e3)
+      },
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+    },
+    async (args) => run(
+      () => edit(
+        args.board_id,
+        async (doc) => {
+          const node = needNode(doc, args.node_id);
+          const work = structuredClone(node.data);
+          const ops = [];
+          let same = 0;
+          let absent = 0;
+          for (const [i, item] of args.sets.entries()) {
+            const at = `sets[${i}] (${item.path})`;
+            const segs = dataSegments(item.path);
+            if (!segs.length) throw new CanvasToolError(`${at}: informe um caminho dentro do data, n\xE3o o data inteiro.`);
+            if (segs[0] === KIND_FIELD) throw new CanvasToolError(`${at}: data.kind n\xE3o muda (apague o n\xF3 e crie outro do tipo certo).`);
+            legacySequenceGuard(node, segs[0]);
+            const path = `data.${segs.join(".")}`;
+            const badPath = checkNodePath(path);
+            if (badPath) throw new CanvasToolError(`${at}: ${badPath}.`);
+            const unset = item.unset === true;
+            const hasValue = item.value !== void 0;
+            if (unset === hasValue) throw new CanvasToolError(`${at}: mande value OU unset: true.`);
+            if (hasValue && !isJson(item.value)) throw new CanvasToolError(`${at}: value n\xE3o \xE9 JSON v\xE1lido.`);
+            let cur = work;
+            for (const [j, seg] of segs.slice(0, -1).entries()) {
+              const next = Object.hasOwn(cur, seg) ? cur[seg] : void 0;
+              const isObject2 = !!next && typeof next === "object" && !Array.isArray(next);
+              if (isObject2) {
+                cur = next;
+                continue;
+              }
+              if (unset) {
+                cur = null;
+                break;
+              }
+              if (next === void 0) {
+                const created = {};
+                cur[seg] = created;
+                cur = created;
+                continue;
+              }
+              throw new CanvasToolError(
+                `${at}: data.${segs.slice(0, j + 1).join(".")} \xE9 ${Array.isArray(next) ? "uma lista" : "um valor simples"}, e o caminho n\xE3o entra nele. Grave o n\xEDvel de cima inteiro.`
+              );
+            }
+            const leaf = segs[segs.length - 1];
+            if (unset) {
+              if (!cur || !Object.hasOwn(cur, leaf)) {
+                absent++;
+                continue;
+              }
+              delete cur[leaf];
+              ops.push({ type: "node.set", nodeId: node.id, path, value: unsetValue() });
+              continue;
+            }
+            const value = item.value;
+            if (cur && Object.hasOwn(cur, leaf) && JSON.stringify(cur[leaf]) === JSON.stringify(value)) {
+              same++;
+              continue;
+            }
+            if (cur) cur[leaf] = value;
+            ops.push({ type: "node.set", nodeId: node.id, path, value: setValue(value) });
+          }
+          const skipped = [same ? `${same} igual(is) ao que j\xE1 estava` : "", absent ? `${absent} unset de caminho que n\xE3o existe` : ""].filter(Boolean).join(", ");
+          return {
+            ops,
+            targets: [node.id],
+            done: `N\xF3 "${oneLine(nodeName(node), 40)}" (${node.id}): ${ops.length} caminho(s) gravado(s)` + (skipped ? ` (ignorados: ${skipped})` : "")
+          };
+        },
+        { split: true }
+      )
+    )
+  );
   server.registerTool(
     "canvas_connect",
     {
       title: "Canvas: ligar portas",
-      description: "Liga a sa\xEDda de um n\xF3 \xE0 entrada de outro (ids e portas de canvas_read_board). Liga\xE7\xE3o repetida \xE9 ignorada.",
+      description: `Liga a sa\xEDda de um n\xF3 \xE0 entrada de outro (ids e portas de canvas_read_board). ${READ}Liga\xE7\xE3o repetida \xE9 ignorada.`,
       inputSchema: {
         board_id: boardId2,
         source: nodeIdArg,
@@ -24732,7 +25799,7 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
     "canvas_delete",
     {
       title: "Canvas: apagar n\xF3s/liga\xE7\xF5es",
-      description: "Apaga n\xF3s (com as liga\xE7\xF5es e varia\xE7\xF5es deles) e/ou liga\xE7\xF5es, num passo s\xF3. Irrevers\xEDvel pelo MCP: confirme com o usu\xE1rio antes. N\xE3o apaga o board.",
+      description: `Apaga n\xF3s (com as liga\xE7\xF5es e varia\xE7\xF5es deles) e/ou liga\xE7\xF5es, num passo s\xF3. Irrevers\xEDvel pelo MCP: confirme com o usu\xE1rio antes. ${READ}N\xE3o apaga o board.`,
       inputSchema: {
         board_id: boardId2,
         node_ids: external_exports.array(nodeIdArg).max(200).optional(),
@@ -24777,7 +25844,7 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
     "canvas_rename_board",
     {
       title: "Canvas: renomear board",
-      description: "Troca o t\xEDtulo do board (board.set). Precisa de papel de editor ou dono.",
+      description: `Troca o t\xEDtulo do board (board.set). ${READ}Precisa de papel de editor ou dono.`,
       inputSchema: { board_id: boardId2, title: external_exports.string().trim().min(1).max(200) },
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
     },
@@ -24836,13 +25903,14 @@ N\xF3s: ${Object.entries(ids).map(([k, v]) => `${k}=${v}`).join(" \xB7 ")}` : ""
     })
   );
   registerCanvasCommentTools(server, api, run);
+  registerCanvasMediaTools(server, { api, cfg, run, edit, seen, placeFor });
 }
 
 // src/version.ts
 import { createRequire } from "module";
 var require2 = createRequire(import.meta.url);
 function readVersion() {
-  if ("0.27.0") return "0.27.0";
+  if ("0.28.0") return "0.28.0";
   try {
     const pkg = require2("../package.json");
     return pkg.version ?? "0.0.0-unknown";
@@ -24899,8 +25967,8 @@ function assertSupportedNode() {
 
 // src/doctor.ts
 import { readFileSync } from "fs";
-import { homedir as homedir3 } from "os";
-import { join } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join2 } from "path";
 var LABEL = { ok: "[ok]   ", aviso: "[aviso]", erro: "[erro] " };
 var Report = class {
   failed = false;
@@ -24920,27 +25988,27 @@ function maskToken(token) {
   return `${token.slice(0, 4)}...${token.slice(-4)}`;
 }
 function configCandidates() {
-  const home = homedir3();
+  const home = homedir4();
   const cwd = process.cwd();
   const list = [
-    { path: join(home, ".claude.json"), client: "Claude Code (global)" },
-    { path: join(cwd, ".mcp.json"), client: "Claude Code (projeto)" },
-    { path: join(home, ".cursor", "mcp.json"), client: "Cursor (global)" },
-    { path: join(cwd, ".cursor", "mcp.json"), client: "Cursor (projeto)" }
+    { path: join2(home, ".claude.json"), client: "Claude Code (global)" },
+    { path: join2(cwd, ".mcp.json"), client: "Claude Code (projeto)" },
+    { path: join2(home, ".cursor", "mcp.json"), client: "Cursor (global)" },
+    { path: join2(cwd, ".cursor", "mcp.json"), client: "Cursor (projeto)" }
   ];
   if (process.platform === "darwin") {
     list.push({
-      path: join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
+      path: join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"),
       client: "Claude Desktop"
     });
   } else if (process.platform === "win32") {
     const appData = process.env.APPDATA;
     if (appData) {
-      list.push({ path: join(appData, "Claude", "claude_desktop_config.json"), client: "Claude Desktop" });
+      list.push({ path: join2(appData, "Claude", "claude_desktop_config.json"), client: "Claude Desktop" });
     }
   } else {
     list.push({
-      path: join(home, ".config", "Claude", "claude_desktop_config.json"),
+      path: join2(home, ".config", "Claude", "claude_desktop_config.json"),
       client: "Claude Desktop"
     });
   }
@@ -25058,216 +26126,6 @@ async function runDoctor() {
   return code;
 }
 
-// src/oauth.ts
-import crypto from "crypto";
-import { createServer } from "http";
-import { spawn } from "child_process";
-
-// src/credentials.ts
-import { chmod, mkdir, readFile as readFile2, writeFile, unlink } from "fs/promises";
-import { homedir as homedir4 } from "os";
-import { dirname, join as join2 } from "path";
-function credentialsPath() {
-  const base = process.env.XDG_CONFIG_HOME?.trim() || join2(homedir4(), ".config");
-  return join2(base, "beplus-mcp", "credentials.json");
-}
-async function readCredentials() {
-  try {
-    const raw = await readFile2(credentialsPath(), "utf8");
-    const parsed = JSON.parse(raw);
-    if (!parsed.accessToken || !parsed.apiUrl) return null;
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-async function writeCredentials(creds) {
-  const path = credentialsPath();
-  await mkdir(dirname(path), { recursive: true, mode: 448 });
-  await writeFile(path, `${JSON.stringify(creds, null, 2)}
-`, { mode: 384 });
-  await chmod(path, 384);
-  return path;
-}
-async function clearCredentials() {
-  try {
-    await unlink(credentialsPath());
-    return true;
-  } catch {
-    return false;
-  }
-}
-var RENEW_MARGIN_MS = 6e4;
-function isExpired(creds) {
-  return typeof creds.expiresAt === "number" && creds.expiresAt - RENEW_MARGIN_MS <= Date.now();
-}
-
-// src/oauth.ts
-var CALLBACK_TIMEOUT_MS = 5 * 6e4;
-async function json(url, init) {
-  let res;
-  try {
-    res = await fetch(url, init);
-  } catch {
-    throw new Error(`Nao consegui falar com ${new URL(url).origin}. Confira a rede e o BEPLUS_API_URL.`);
-  }
-  const text = await res.text();
-  let body2;
-  try {
-    body2 = text ? JSON.parse(text) : void 0;
-  } catch {
-  }
-  if (!res.ok) {
-    const msg = body2?.message ?? body2?.error_description ?? body2?.error ?? `HTTP ${res.status}`;
-    throw new Error(`${msg} (${url})`);
-  }
-  return body2;
-}
-async function discover(apiUrl2) {
-  const meta = await json(`${apiUrl2}/.well-known/oauth-authorization-server`);
-  if (!meta.authorization_endpoint || !meta.token_endpoint || !meta.registration_endpoint) {
-    throw new Error("O servidor respondeu a descoberta sem os endpoints obrigatorios.");
-  }
-  return meta;
-}
-function pkce() {
-  const verifier = crypto.randomBytes(32).toString("base64url");
-  return { verifier, challenge: crypto.createHash("sha256").update(verifier).digest("base64url") };
-}
-function openBrowser(url) {
-  try {
-    if (process.platform === "win32") {
-      spawn("cmd.exe", ["/c", "start", '""', "/b", url.replace(/&/g, "^&")], {
-        stdio: "ignore",
-        detached: true,
-        windowsVerbatimArguments: true
-      }).unref();
-      return;
-    }
-    const cmd = process.platform === "darwin" ? "open" : "xdg-open";
-    spawn(cmd, [url], { stdio: "ignore", detached: true }).unref();
-  } catch {
-  }
-}
-var PAGINA_OK = `<!doctype html><meta charset="utf-8"><title>Pronto</title>
-<body style="margin:0;min-height:100vh;display:grid;place-items:center;font:16px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#0e1433;color:#f7f6f2">
-<div style="text-align:center;padding:24px"><h1 style="font-size:22px;margin:0 0 8px">Tudo certo</h1>
-<p style="margin:0;opacity:.7">Pode fechar esta aba e voltar para o seu agente.</p></div>`;
-var PAGINA_ERRO = `<!doctype html><meta charset="utf-8"><title>Nao deu</title>
-<body style="margin:0;min-height:100vh;display:grid;place-items:center;font:16px/1.5 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#0e1433;color:#f7f6f2">
-<div style="text-align:center;padding:24px"><h1 style="font-size:22px;margin:0 0 8px">Nao foi dessa vez</h1>
-<p style="margin:0;opacity:.7">Volte ao terminal para ver o motivo.</p></div>`;
-function listenForCallback(expectedState) {
-  return new Promise((resolvePort, rejectPort) => {
-    let settle;
-    let fail;
-    const code = new Promise((res, rej) => {
-      settle = res;
-      fail = rej;
-    });
-    const server = createServer((req, res) => {
-      const url = new URL(req.url ?? "/", "http://127.0.0.1");
-      if (url.pathname !== "/callback") {
-        res.writeHead(404).end();
-        return;
-      }
-      const erro = url.searchParams.get("error");
-      const recebido = url.searchParams.get("code");
-      const state = url.searchParams.get("state") ?? "";
-      const ok = !erro && recebido && state === expectedState;
-      res.writeHead(ok ? 200 : 400, { "content-type": "text/html; charset=utf-8" });
-      res.end(ok ? PAGINA_OK : PAGINA_ERRO);
-      server.close();
-      if (erro) return fail(new Error(url.searchParams.get("error_description") || erro));
-      if (!recebido || state !== expectedState) return fail(new Error("Resposta de autorizacao invalida."));
-      settle({ code: recebido, state });
-    });
-    server.on("error", rejectPort);
-    server.listen(0, "127.0.0.1", () => {
-      const addr = server.address();
-      if (!addr || typeof addr === "string") return rejectPort(new Error("Nao consegui abrir a porta local."));
-      const timer = setTimeout(() => {
-        server.close();
-        fail(new Error("Tempo esgotado esperando a autorizacao no navegador."));
-      }, CALLBACK_TIMEOUT_MS);
-      void code.finally(() => clearTimeout(timer));
-      resolvePort({ port: addr.port, code });
-    });
-  });
-}
-function toStored(t, apiUrl2, clientId) {
-  return {
-    accessToken: t.access_token,
-    refreshToken: t.refresh_token,
-    expiresAt: t.expires_in ? Date.now() + t.expires_in * 1e3 : void 0,
-    apiUrl: apiUrl2,
-    clientId
-  };
-}
-async function login(apiUrl2, onUrl) {
-  const meta = await discover(apiUrl2);
-  const state = crypto.randomBytes(24).toString("base64url");
-  const { verifier, challenge } = pkce();
-  const { port, code } = await listenForCallback(state);
-  const redirectUri = `http://127.0.0.1:${port}/callback`;
-  const client = await json(meta.registration_endpoint, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({
-      client_name: "beplus-mcp (CLI)",
-      redirect_uris: [redirectUri],
-      token_endpoint_auth_method: "none",
-      grant_types: ["authorization_code", "refresh_token"]
-    })
-  });
-  const authorizeUrl = new URL(meta.authorization_endpoint);
-  authorizeUrl.searchParams.set("response_type", "code");
-  authorizeUrl.searchParams.set("client_id", client.client_id);
-  authorizeUrl.searchParams.set("redirect_uri", redirectUri);
-  authorizeUrl.searchParams.set("code_challenge", challenge);
-  authorizeUrl.searchParams.set("code_challenge_method", "S256");
-  authorizeUrl.searchParams.set("state", state);
-  onUrl(authorizeUrl.toString());
-  openBrowser(authorizeUrl.toString());
-  const { code: authCode } = await code;
-  const token = await json(meta.token_endpoint, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({
-      grant_type: "authorization_code",
-      code: authCode,
-      code_verifier: verifier,
-      client_id: client.client_id,
-      redirect_uri: redirectUri
-    })
-  });
-  const path = await writeCredentials(toStored(token, apiUrl2, client.client_id));
-  return { path, authorizeUrl: authorizeUrl.toString() };
-}
-async function tokenFromDisk(apiUrl2) {
-  const creds = await readCredentials();
-  if (!creds) return null;
-  if (creds.apiUrl.replace(/\/$/, "") !== apiUrl2.replace(/\/$/, "")) return null;
-  if (!isExpired(creds)) return creds.accessToken;
-  if (!creds.refreshToken) return null;
-  try {
-    const meta = await discover(apiUrl2);
-    const token = await json(meta.token_endpoint, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        grant_type: "refresh_token",
-        refresh_token: creds.refreshToken,
-        client_id: creds.clientId
-      })
-    });
-    await writeCredentials(toStored(token, apiUrl2, creds.clientId));
-    return token.access_token;
-  } catch {
-    return null;
-  }
-}
-
 // src/index.ts
 if (process.argv.length <= 2) assertSupportedNode();
 var HELP = `beplus-mcp ${VERSION}
@@ -25332,7 +26190,7 @@ Se ele nao abrir, acesse:
     });
     process.stdout.write(`Pronto. Credencial guardada em ${path}
 `);
-    process.stdout.write("Reinicie o seu agente para as ferramentas aparecerem.\n");
+    process.stdout.write("Se as ferramentas beplus ainda nao aparecem no agente, reinicie o agente.\n");
     return 0;
   } catch (e) {
     logError(e.message);
@@ -25344,9 +26202,13 @@ async function main() {
   if (handled !== null) {
     process.exit(handled);
   }
+  let doLogin = false;
   if (!process.env.BEPLUS_API_TOKEN?.trim()) {
     const doDisco = await tokenFromDisk(apiUrl());
-    if (doDisco) process.env.BEPLUS_API_TOKEN = doDisco;
+    if (doDisco) {
+      process.env.BEPLUS_API_TOKEN = doDisco;
+      doLogin = true;
+    }
   }
   let cfg;
   try {
@@ -25355,6 +26217,7 @@ async function main() {
     logError(e.message);
     process.exit(1);
   }
+  if (doLogin) cfg.auth = new LoginToken(cfg.baseUrl, cfg.token);
   const { server, client } = buildServer(cfg);
   if (cfg.verifyOnStart) {
     try {
@@ -25363,7 +26226,7 @@ async function main() {
     } catch (e) {
       if (e instanceof ApiError && e.httpStatus === 401) {
         logError(
-          'Token invalido ou revogado. Gere um novo Personal Access Token no painel BePlus e atualize BEPLUS_API_TOKEN no config do MCP. Rode "beplus-mcp doctor" para conferir.'
+          doLogin ? 'O login pelo navegador expirou e nao deu para renovar. Rode "beplus-mcp login" de novo.' : 'Token invalido ou revogado. Gere um novo Personal Access Token no painel BePlus e atualize BEPLUS_API_TOKEN no config do MCP. Rode "beplus-mcp doctor" para conferir.'
         );
         process.exit(1);
       }